Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- a.exe
- [CODE]
- Search - Text strings referenced in ntdll
- Comments
- ASCII "Invalid parameter passed to C runtime function.
- "
- ASCII "sin"
- ASCII "_y0"
- UNICODE "\/"
- UNICODE "csrsrv.dll"
- ASCII "CsrCallServerFromServer"
- ASCII "CsrCallServerFromServer"
- UNICODE "csrsrv.dll"
- UNICODE "LPT"
- UNICODE "COM"
- UNICODE "PRN"
- UNICODE "AUX"
- UNICODE "NUL"
- UNICODE "CON"
- UNICODE "CONOUT$"
- UNICODE "\??\UNC\"
- UNICODE "\\?"
- UNICODE "\\?\UNC"
- UNICODE "\\?\UNC\"
- UNICODE "COM"
- UNICODE "\\?"
- UNICODE "NUL"
- UNICODE "\\.\"
- UNICODE "CON"
- UNICODE "PRN"
- UNICODE "CONOUT$"
- UNICODE "\\?\"
- UNICODE "LPT"
- UNICODE "\??\"
- UNICODE "\??\UNC\"
- UNICODE "AUX"
- UNICODE "\\?\UNC\"
- UNICODE "CONIN$"
- UNICODE "\\?\UNC"
- UNICODE "__APPDIR__"
- UNICODE "FIRMWARE_TYPE"
- UNICODE "NUMBER_OF_PROCESSORS"
- UNICODE "__CD__"
- UNICODE "__APPDIR__"
- UNICODE "FIRMWARE_TYPE"
- UNICODE "NUMBER_OF_PROCESSORS"
- ASCII "ERROR"
- ASCII "WARNING"
- ASCII "INFO"
- ASCII "ENTER"
- ASCII "RETURN"
- ASCII "_CorExeMain"
- UNICODE "MSCOREE.DLL"
- ASCII "_CorExeMain"
- UNICODE "COMPLUS_InstallRoot"
- UNICODE "MSCOREE.DLL"
- UNICODE "ntdll.dll"
- ASCII "BaseThreadInitThunk"
- ASCII "TermsrvGetWindowsDirectoryW"
- UNICODE "\KnownDlls"
- UNICODE "KnownDllPath"
- UNICODE "ntdll.dll"
- UNICODE "TransparentEnabled"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Srp\GP\DLL"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- UNICODE ".DLL"
- UNICODE "\SYSTEM32\"
- UNICODE "KERNEL32.DLL"
- UNICODE "KERNELBASE.dll"
- UNICODE "KERNEL32.DLL"
- UNICODE "KERNELBASE.dll"
- UNICODE "\SYSTEM32\"
- ASCII "Actx "
- UNICODE "NoDefaultCurrentDirectoryInExePath"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"
- UNICODE "SafeProcessSearchMode"
- UNICODE "SafeDllSearchMode"
- UNICODE "."
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"
- ASCII "0123456789ABCDEF"
- ASCII "A!B!C!D!E!F!G!H!I!2"
- UNICODE "\Registry\MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CustomLocale"
- UNICODE "Kernel-ProductInfo"
- UNICODE "Kernel-ProductInfoLegacyMapping"
- UNICODE "Kernel-ProductInfo"
- UNICODE "Kernel-ProductInfoLegacyMapping"
- UNICODE "WIN://SYSAPPID"
- UNICODE "WIN://PKG"
- UNICODE " "$&(*,.02468:<>@"
- UNICODE "xmc^TPKGC?"
- UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion"
- UNICODE "\Registry\Machine\Hardware\DeviceMap"
- UNICODE "\Registry\User\.Default"
- UNICODE "DaylightBias"
- UNICODE "DaylightName"
- UNICODE "StandardBias"
- UNICODE "Time Zones\"
- UNICODE "\Dynamic DST"
- UNICODE "FirstEntry"
- UNICODE "StandardName"
- UNICODE "DaylightStart"
- UNICODE "LastEntry"
- UNICODE "StandardStart"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion"
- UNICODE "\Registry\Machine\Hardware\DeviceMap"
- UNICODE "\Registry\User\.Default"
- UNICODE "\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0"
- UNICODE "Cleanup Group"
- UNICODE "Alpc"
- UNICODE "Pool"
- UNICODE "Timer"
- UNICODE "Timer Queue"
- UNICODE "Waiter TCB"
- UNICODE "Wait"
- UNICODE "Threadpool!"
- UNICODE "windows vista"
- UNICODE "windows seven"
- UNICODE "windows eight"
- UNICODE "windows blue"
- UNICODE "windows vista"
- UNICODE "windows seven"
- UNICODE "windows eight"
- UNICODE "windows blue"
- UNICODE "\rescache"
- UNICODE "%SystemRoot%"
- UNICODE "\Registry\Machine\"
- UNICODE "System\CurrentControlSet\Control\CMF\Config"
- UNICODE "\\"
- UNICODE "COMPLUS_Version"
- UNICODE "_NO_DEBUG_HEAP"
- UNICODE "LargePageDLLs"
- UNICODE "BreakOnInitializeProcessFailure"
- UNICODE "KeepActivationContextsAlive"
- UNICODE "TrackActivationContextReleases"
- UNICODE "ADVAPI32.DLL"
- UNICODE "CheckAllProcessMachinePolicyEnabled"
- ASCII "SaferiIsDllAllowed"
- UNICODE "OptionValue"
- UNICODE "verifier.dll"
- UNICODE "vrfcore.dll"
- ASCII "AVrfAPILookupCallback"
- ASCII "AVrfAPILookupCallback"
- UNICODE "\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "vrfcore.dll"
- UNICODE "verifier.dll"
- UNICODE "Location"
- UNICODE "Location"
- UNICODE "FindResource API entry"
- UNICODE "FindResourceEx API entry"
- UNICODE "LoadResource API entry"
- UNICODE "FindResource API exit"
- UNICODE "FindResourceEx API exit"
- UNICODE "LoadResource API exit"
- UNICODE "FindResourceEx API exit"
- UNICODE "LoadResource API entry"
- UNICODE "LoadResource API exit"
- UNICODE "FindResource API entry"
- UNICODE "FindResourceEx API entry"
- UNICODE "FindResource API exit"
- ASCII "Crc32 Castagnoli"
- ASCII "Crc32 Castagnoli"
- ASCII "Crc64 ReFS-v1"
- UNICODE "LocaleName"
- UNICODE "Control Panel\International"
- ASCII "VirtualMemoryThreshold"
- ASCII "DeCommitFreeBlockThreshold"
- ASCII "DeCommitTotalFreeThreshold"
- ASCII "MaximumAllocationSize"
- ASCII "ProcessHeapsListIndex"
- ASCII "HeaderValidateLength"
- ASCII "HeaderValidateCopy"
- ASCII "NextAvailableTagIndex"
- ASCII "MaximumTagIndex"
- ASCII "VirtualAllocdBlocks"
- ASCII "SegmentList"
- ASCII "AllocatorBackTraceIndex"
- ASCII "NonDedicatedListLength"
- ASCII "PseudoTagEntries"
- ASCII "FrontHeapLockCount"
- ASCII "FrontEndHeapType"
- ASCII "Uncommitted Ranges"
- ASCII "Entry"
- ASCII "Signature"
- ASCII "Flags"
- ASCII "ForceFlags"
- ASCII "VirtualMemoryThreshold"
- ASCII "SegmentReserve"
- ASCII "SegmentCommit"
- ASCII "DeCommitFreeBlockThreshold"
- ASCII "DeCommitTotalFreeThreshold"
- ASCII "TotalFreeSize"
- ASCII "MaximumAllocationSize"
- ASCII "ProcessHeapsListIndex"
- ASCII "HeaderValidateLength"
- ASCII "HeaderValidateCopy"
- ASCII "NextAvailableTagIndex"
- ASCII "MaximumTagIndex"
- ASCII "TagEntries"
- ASCII "AlignRound"
- ASCII "AlignMask"
- ASCII "VirtualAllocdBlocks"
- ASCII "SegmentList"
- ASCII "AllocatorBackTraceIndex"
- ASCII "NonDedicatedListLength"
- ASCII "PseudoTagEntries"
- ASCII "FreeLists"
- ASCII "LockVariable"
- ASCII "FrontEndHeap"
- ASCII "FrontHeapLockCount"
- ASCII "FrontEndHeapType"
- ASCII "Uncommitted Ranges"
- UNICODE "TimeZoneKeyName"
- UNICODE "DynamicDaylightTimeDisabled"
- UNICODE "BuildLabEx"
- UNICODE "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
- ASCII "ThreadPool: callback %p(%p) returned with a transaction uncleared
- "
- ASCII "ThreadPool: callback %p(%p) returned with the loader lock held
- "
- ASCII "ThreadPool: callback %p(%p) returned with preferred languages set
- "
- ASCII "ThreadPool: callback %p(%p) returned with background priorities set
- "
- ASCII "ThreadPool: attempt to terminate a worker thread via handle %p
- Contact the owner of the function calling Terminate/Exit thread.
- "
- ASCII "*** RESCACHE: Segment %u is no longer valid. It may have been unmapped already!!! ***
- "
- ASCII "*** --------> Follow-up: avgarcia;erik;muidev ***
- "
- ASCII "*** RESCACHE: Segment %u magic field is corrupt!!! ***
- "
- UNICODE "*.*"
- UNICODE "Restricted"
- UNICODE "Restricted"
- UNICODE "System\CurrentControlSet\Control\CMF\LatestIndex"
- UNICODE "CON"
- UNICODE "CONOUT$"
- UNICODE "CONIN$"
- UNICODE "Global\%s/base%s"
- UNICODE "%s\*\%s"
- UNICODE "%s\%s*%s"
- UNICODE "Global\%s%s%s"
- UNICODE "%s\"
- UNICODE "%s\%s\%s"
- UNICODE "%s\%s%04d"
- UNICODE "Global\%s/%s%04d%s"
- UNICODE "%s\%s%04d\%s"
- UNICODE "%s%04d-%s"
- UNICODE "%s%04d-%s%s"
- UNICODE "%s\%s%04d%s"
- UNICODE "%s\%s%d%s"
- UNICODE "%s%s%d%s"
- UNICODE "%s\%s%04d\%s*%s"
- UNICODE "%s\%s%04d\%s%d%s"
- UNICODE "tmp"
- UNICODE "upd"
- UNICODE "Upd"
- UNICODE "wip"
- UNICODE "ResCache.usg"
- UNICODE "CmfHits"
- UNICODE "ResCache.hit"
- UNICODE "Segment"
- UNICODE "Directory"
- UNICODE "ResCache.dir"
- UNICODE "ResCache.mni"
- UNICODE "ResCache.ccm"
- UNICODE "\WindowsErrorReportingServicePort"
- UNICODE "\KernelObjects\SystemErrorPortReady"
- ASCII "::"
- ASCII "%x"
- UNICODE "MiniNT"
- UNICODE "PortableOperatingSystem"
- UNICODE "TimeZoneInformation"
- UNICODE "Bias"
- UNICODE "StandardName"
- UNICODE "StandardBias"
- UNICODE "StandardStart"
- UNICODE "DaylightName"
- UNICODE "DaylightBias"
- UNICODE "DaylightStart"
- UNICODE "Time Zones\"
- UNICODE "\Dynamic DST"
- UNICODE "FirstEntry"
- UNICODE "LastEntry"
- UNICODE "System\CurrentControlSet\Control\CMF\Config"
- UNICODE "System\CurrentControlSet\Control\CMF\Config"
- UNICODE "\Registry\Machine\"
- UNICODE "\rescache"
- UNICODE "%SystemRoot%"
- UNICODE "svchost.exe"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledProcesses\"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "CEIPEnable"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore"
- UNICODE "SampledOut"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows"
- UNICODE "StudyId"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects\"
- UNICODE "AppContainerNamedObjects\"
- UNICODE "ASqmManifestVersion"
- UNICODE "(null)"
- UNICODE "AdaptiveSqmNameSpaceBoundary"
- UNICODE "DPS"
- ASCII "(l7"
- ASCII "%d"
- ASCII "%d"
- UNICODE "xn--"
- UNICODE "xl--"
- ASCII "LdrLoadDll"
- ASCII "EXT-"
- UNICODE "\REGISTRY\USER\"
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- UNICODE "S-1-"
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- ASCII "*** CreateLanguageList:%X ****
- "
- ASCII "SXS/RTL: Section found (offset %ld; length %lu) extends past end of activation context data (%lu bytes)
- "
- ASCII "ds7"
- UNICODE "API-"
- UNICODE "EXT-"
- UNICODE "MUI"
- UNICODE "MUI"
- ASCII "(l7"
- UNICODE ".mui"
- UNICODE ".mui"
- ASCII "(l7"
- ASCII "(l7"
- ASCII "Actx "
- ASCII "(l7"
- UNICODE "LdrResFallbackLangList Enter"
- UNICODE "LdrResFallbackLangList Exit"
- UNICODE "RtlpResUltimateFallbackInfo Enter"
- UNICODE "MUI"
- UNICODE "LdrResGetRCConfig Enter"
- UNICODE "LdrResGetRCConfig Exit"
- UNICODE "LdrResSearchResource Enter"
- UNICODE "LdrResSearchResource Exit"
- UNICODE "LdrpResSearchResourceMappedFile Enter"
- UNICODE "LdrpResSearchResourceMappedFile Exit"
- UNICODE "MUI"
- UNICODE "LdrpResGetResourceDirectory Enter"
- UNICODE "LdrpResGetResourceDirectory Exit"
- UNICODE "LdrpResSearchResourceInsideDirectory Enter"
- UNICODE "LdrpResSearchResourceInsideDirectory Exit"
- UNICODE "LdrpResGetMappingSize Enter"
- UNICODE "LdrpResGetMappingSize Exit"
- ASCII "ds7"
- UNICODE "SharedSection"
- UNICODE "ApiPort"
- UNICODE "CAPTURE"
- UNICODE "CSRPORT!"
- UNICODE "Control Panel\Desktop\MuiCached\MachineLanguageConfiguration"
- UNICODE "Software\Policies\Microsoft\Control Panel\Desktop"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "Software\Policies\Microsoft\Control Panel\Desktop"
- UNICODE "Control Panel\Desktop\LanguageConfiguration"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "Control Panel\Desktop"
- UNICODE "PreferredUILanguages"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "PreferredUILanguagesPending"
- UNICODE "\Registry\User\.Default"
- UNICODE ".mui"
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to get activation context data, storage map and assembly roster header. Status = 0x%08lx
- "
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to resolve storage map entry. Status = 0x%08lx
- "
- UNICODE ".Local\"
- UNICODE "\WinSxS\"
- UNICODE ".Local"
- ASCII "Actx "
- ASCII "SXS: Activation context data at %p has TOC header too small (%lu)
- "
- ASCII "SXS: Activation context data at %p has invalid assembly roster offset
- "
- ASCII "SXS: Activation context data at %p has invalid TOC entry array offset
- "
- ASCII "SXS: Activation context data at %p has invalid TOC header offset
- "
- ASCII "SXS: Warning: Activation context data at %p lacks assembly roster
- "
- UNICODE "MUI"
- UNICODE "\SYSTEM32\"
- UNICODE "PATH"
- UNICODE "PATH"
- UNICODE "NoDefaultCurrentDirectoryInExePath"
- UNICODE "%s"
- UNICODE "%%%u"
- UNICODE "%s"
- UNICODE "hs"
- UNICODE "]:%u"
- UNICODE "%%%u"
- UNICODE "%x"
- UNICODE "::"
- ASCII "ffff:"
- UNICODE "::%hs%u.%u.%u.%u"
- UNICODE ":%u.%u.%u.%u"
- UNICODE "%u"
- UNICODE "%wZ"
- UNICODE "%wZ"
- UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
- UNICODE "VS_VERSION_INFO"
- ASCII "RtlValidateHeap"
- ASCII "RtlValidateHeap"
- UNICODE ":%u"
- UNICODE "%u.%u.%u.%u"
- ASCII "(l7"
- ASCII "CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions
- "
- UNICODE "ExecuteOptions"
- UNICODE "\DllNXOptions"
- UNICODE "UseFilter"
- ASCII "SE_InitializeEngine"
- ASCII "SE_ShimDllLoaded"
- ASCII "SE_InstallBeforeInit"
- ASCII "SE_InstallAfterInit"
- ASCII "SE_DllLoaded"
- ASCII "SE_DllUnloaded"
- ASCII "SE_LdrEntryRemoved"
- ASCII "SE_ProcessDying"
- ASCII "SE_LdrResolveDllName"
- ASCII "SE_GetProcAddressForCaller"
- ASCII "ApphelpCheckModule"
- UNICODE "Unknown"
- UNICODE "Unknown"
- UNICODE "SetClassLong"
- UNICODE "\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- UNICODE "Cleanup Group"
- UNICODE "Threadpool!"
- UNICODE "http://schemas.microsoft.com/SMI/2005/WindowsSettings"
- ASCII ".aspack"
- ASCII ".pcle"
- ASCII ".sforce"
- UNICODE "COMPLUS_InstallRoot"
- UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
- ASCII "(l7"
- ASCII "secserv.dll"
- ASCII "%u.%u.%u.%u"
- ASCII "(l7"
- UNICODE "\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0"
- UNICODE "~MHz"
- ASCII "(l7"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "GlobalFlag"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "\SystemRoot\bootstat.dat"
- ASCII 41,"DMAVQBwADQANwA0AHIAcwBYAHYASQBYAHAAMQBDAFQAdABNAEsAVwBjAFIATgAyAC"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "WSqmConsLastRunTime"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\SysprepPerformed\"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\"
- ASCII "(l7"
- UNICODE "System Volume Information"
- UNICODE "xn--"
- UNICODE "xl--"
- UNICODE "Log"
- UNICODE "\SmApiPort"
- UNICODE "RXACT"
- UNICODE "Log"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\CMF\SQMData\BootLanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- ASCII "User32 init not called"
- ASCII "Invalid parameter passed to C runtime function.
- "
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "(null)"
- ASCII "(null)"
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "pow"
- ASCII "exp"
- ASCII "exp"
- ASCII "log10"
- ASCII "log10"
- ASCII "log"
- ASCII "log"
- ASCII "pow"
- ASCII "asin"
- ASCII "acos"
- ASCII "pow"
- ASCII "pow"
- ASCII "exp10"
- ASCII "log"
- ASCII "log10"
- ASCII "exp"
- ASCII "atan"
- ASCII "ceil"
- ASCII "floor"
- ASCII "modf"
- ASCII "sin"
- ASCII "cos"
- ASCII "tan"
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "(null)"
- ASCII "(null)"
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "User32 init not called"
- UNICODE "SharedSection"
- UNICODE "ApiPort"
- UNICODE "CSRPORT!"
- UNICODE "TrustedInstaller"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList\%ws"
- UNICODE "BinaryName"
- UNICODE "BinaryHash"
- ASCII "secserv.dll"
- ASCII ".txt2"
- ASCII ".aspack"
- ASCII ".pcle"
- ASCII ".sforce"
- ASCII "Set 0x%X protection for %p section for %d bytes, old protection 0x%X
- "
- ASCII "CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X
- "
- UNICODE "\DllNXOptions"
- ASCII "CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions
- "
- UNICODE "ExecuteOptions"
- ASCII "CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database
- "
- UNICODE "Execute=1"
- ASCII "CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ
- "
- ASCII "CLIENT(ntdll): Processing %ws for patching section protection for %wZ
- "
- ASCII "CLIENT(ntdll): Processing section info %ws...
- "
- UNICODE "Legacy"
- UNICODE "UEFI"
- ASCII "%04x:%04x @ %08d - %s - %s: "
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Nonpackaged process attempted to load a packaged DLL.
- "
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpLoadDll"
- ASCII "DLL %wZ was redirected to %wZ by SxS
- "
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "Loading DLL %wZ
- "
- ASCII "Could not validate the crypto signature for DLL %wZ
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "DLL name %wZ was redirected to %wZ by SxS
- "
- ASCII "Locating DLL %wZ
- "
- ASCII "LdrVerifyImageMatchesChecksumEx"
- ASCII "LdrpProtectedCopyMemory"
- ASCII "LdrLockLoaderLock"
- ASCII "LdrUnlockLoaderLock"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\"
- ASCII "Unknown"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in "%wZ" 0x%08lx
- "
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "minkernel\ntdll\ldrdload.c"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in module 0x%p 0x%08lx
- "
- ASCII "LdrpFindOrMapDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "LdrpFindLoadedDll"
- ASCII "LdrpFindKnownDll"
- ASCII "LdrpResolveDllName"
- ASCII "LdrpMapViewOfSection"
- ASCII "Querying large page info failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "Changing the protection of the executable at %p failed with status 0x%08lx
- "
- ASCII "LdrpRelocateImage"
- ASCII "BoG_ *90.0&!! Yy>"
- ASCII "stxt371"
- ASCII "Delaying execution failed with status 0x%08lx
- "
- ASCII "_LdrpInitialize"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization failed with status 0x%08lx
- "
- ASCII "LdrpInitializationFailure"
- ASCII "Process initialization raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpInitializeProcessWrapperFilter"
- ASCII "SE_InitializeEngine"
- ASCII "SE_ShimDllLoaded"
- ASCII "SE_InstallBeforeInit"
- ASCII "SE_InstallAfterInit"
- ASCII "SE_LdrEntryRemoved"
- ASCII "SE_ProcessDying"
- ASCII "SE_LdrResolveDllName"
- ASCII "SE_GetProcAddressForCaller"
- ASCII "ApphelpCheckModule"
- ASCII "Could not locate procedure "%s" in the shim engine DLL
- "
- ASCII "LdrpGetShimEngineInterface"
- ASCII "Loading the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpLoadShimEngine"
- ASCII "Initializing the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "Initializing a shim dependency "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeShimDllDependencies"
- ASCII "Loading the shim engine DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitShimEngine"
- ASCII "Getting the shim engine exports failed with status 0x%08lx
- "
- ASCII "Finding the shim engine entry failed with status 0x%08lx
- "
- ASCII "LdrInitShimEngineDynamic"
- ASCII "Failed to allocated memory for shimmed module list
- "
- ASCII "LdrpCheckModule"
- UNICODE "\system32\apphelp.dll"
- ASCII "LdrpGetProcApphelpCheckModule"
- ASCII "Getting ApphelpCheckModule failed with status 0x%08lx
- "
- ASCII "LdrpDynamicShimModule"
- ASCII "Failed to reallocate the system dirs string !
- "
- ASCII "LdrpInitializePerUserWindowsDirectory"
- ASCII "TermsrvGetWindowsDirectoryW"
- ASCII "BaseThreadInitThunk"
- UNICODE "\KnownDlls"
- UNICODE "KnownDllPath"
- ASCII "BaseQueryModuleData"
- ASCII "Initializing the execution options for the process %lx failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Initializing process 0x%lx
- "
- UNICODE "StackTraceDatabaseSizeInMb"
- ASCII "Stack trace database size is %Id Mb
- "
- ASCII "Creating the process heap failed
- "
- UNICODE "!Process"
- UNICODE "CSRSS Client"
- UNICODE "LDR Database"
- UNICODE "Current Directory"
- UNICODE "TLS Storage"
- UNICODE "DBGSS Client"
- UNICODE "SE Temporary"
- UNICODE "Temporary"
- UNICODE "LocalAtom"
- UNICODE "ServiceTag"
- UNICODE "ForwarderTag"
- UNICODE "NTDLL!"
- UNICODE "DebugProcessHeapOnly"
- ASCII "Querying the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "Opening the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "Allocating a buffer to hold the current working directory failed
- "
- ASCII "Failed to allocate the system dirs string!
- "
- UNICODE "\system;"
- ASCII "Allocating a data table entry for the system DLL failed
- "
- ASCII "Allocating a data table entry for the executable failed
- "
- ASCII "Beginning execution of %wZ (%wZ)
- Current directory: %wZ
- Package directories: %wZ
- "
- ASCII "Initializing the current directory to "%wZ" failed with status 0x%08lx
- "
- ASCII "Allocating a data table entry for the application verifier DLL failed
- "
- ASCII "Initializing TLS slots failed with status 0x%08lx
- "
- ASCII "Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpCodeAuthzInitialize failed with status 0x%08lx
- "
- ASCII "Walking the import tables of the executable and its static imports failed with status 0x%08lx
- "
- ASCII "Running the init routines of the executable's static imports failed with status 0x%08lx
- "
- ASCII "Process 0x%x (%wZ) exiting
- "
- ASCII "LdrShutdownProcess"
- UNICODE "SPPsvc.exe"
- UNICODE "PageHeapFlags"
- ASCII "Per-DLL page heap is disabled since fast fill heap is enabled
- "
- ASCII "LdrpInitializeApplicationVerifierPackage"
- ASCII "LdrpTouchThreadStack"
- UNICODE "%s!%s"
- UNICODE "DisableHeapLookaside"
- UNICODE "FrontEndHeapDebugOptions"
- UNICODE "ShutdownFlags"
- UNICODE "UnloadEventTraceDepth"
- UNICODE "TracingFlags"
- UNICODE "DisableExceptionChainValidation"
- UNICODE "LargePageDLLs"
- UNICODE "MinimumStackCommitInBytes"
- UNICODE "BreakOnInitializeProcessFailure"
- UNICODE "KeepActivationContextsAlive"
- UNICODE "TrackActivationContextReleases"
- UNICODE "MaxDeadActivationContexts"
- UNICODE "GlobalFlag"
- ASCII "Initializing the application verifier package failed with status 0x%08lx
- "
- ASCII "LdrpInitializeExecutionOptions"
- UNICODE "_NO_DEBUG_HEAP"
- UNICODE "CWDIllegalInDLLSearch"
- ASCII "Probing for the manifest of DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpFindDllActivationContext"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Querying the active activation context failed with status 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "DLL name %wZ was redirected to %wZ by SxS.
- "
- ASCII "Loading DLL %wZ failed with status 0x%08lx
- "
- ASCII "Locating procedure "%s" by name
- "
- ASCII "LdrpGetProcedureAddress"
- ASCII "Loading procedure 0x%lx by ordinal
- "
- ASCII "ParentModule: (%p) %wZ.
- "
- ASCII "LdrpResolveNonStaticDependency"
- ASCII "Calling init routine %p for DLL "%wZ"
- "
- ASCII "LdrpInitializeNode"
- ASCII "Init routine %p of DLL "%wZ" raised an exception %x
- "
- ASCII "Init routine %p for DLL "%wZ" failed during DLL_PROCESS_ATTACH
- "
- ASCII "Procedure "%s" could not be located in DLL at base 0x%p.
- "
- ASCII "LdrpNameToOrdinal"
- ASCII "Failed to load for appcompat reasons
- "
- ASCII "LdrpPrepareModuleForExecution"
- ASCII "Uninitializing DLL "%wZ" (Init routine: %p)
- "
- ASCII "LdrpProcessDetachNode"
- ASCII "DLL "%wZ" does not contain an export table
- "
- ASCII "Unmapping DLL "%wZ"
- "
- ASCII "Merging a cycle rooted at %wZ.
- "
- ASCII "minkernel\ntdll\ldrddag.c"
- ASCII "Adding cyclic module %wZ.
- "
- ASCII "DLL "%wZ" has TLS information at %p
- "
- ASCII "LdrpInitializeTls"
- ASCII "minkernel\ntdll\ldrtls.c"
- ASCII "LdrpAllocateTls"
- ASCII "TlsVector %p Index %d : %d bytes copied from %p to %p
- "
- ASCII "Calling TLS callback %p for DLL "%wZ" at %p
- "
- ASCII "LdrpCallTlsInitializers"
- ASCII "LdrpAllocateTlsEntry"
- ASCII "LdrpHandleTlsData"
- ASCII "Function %s raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpGenericExceptionFilter"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "
- ***Exception thrown within loader***
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? "
- ASCII "Execute '.cxr %p' to dump context
- "
- UNICODE "Unknown"
- UNICODE "#%d"
- ASCII "Locating export at ordinal %d for DLL "%wZ" failed with status: 0x%08lx.
- "
- ASCII "LdrpReportError"
- ASCII "Locating export "%wZ" for DLL "%wZ" failed with status: 0x%08lx.
- "
- UNICODE ".DLL"
- UNICODE "\microsoft.system.package.metadata\Application"
- UNICODE ".Local"
- ASCII "DLL search path passed in externally: %ws
- "
- ASCII "LdrpInitializeDllPath"
- ASCII "Lazy DLL search path computation failed with status: 0x%08lx.
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "DLL search path computed: %ws
- "
- ASCII "Packaged DLL search path computed. Package Dirs: %ws, DllPath: %ws
- "
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"
- UNICODE "OptionValue"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Srp\GP\DLL"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- UNICODE "TransparentEnabled"
- UNICODE "CheckAllProcessMachinePolicyEnabled"
- UNICODE "ADVAPI32.DLL"
- ASCII "SaferiIsDllAllowed"
- UNICODE "\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- ASCII "RTL: Enter Critical Section Timeout (%I64u secs) %d
- "
- ASCII "RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu
- "
- ASCII "RTL: Re-Waiting
- "
- ASCII "RTL: Acquire Shared Sem Timeout %d(%I64u secs)
- "
- ASCII "RTL: Resource at %p
- "
- ASCII "RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)
- "
- ASCII "Resource @ %lx
- "
- ASCII " NumberOfWaitingShared = %lx
- "
- ASCII " NumberOfWaitingExclusive = %lx
- "
- ASCII " NumberOfActive = %lx
- "
- ASCII "NTDLL: Calling thread (%X) not owner of CritSect: %p Owner ThreadId: %X
- "
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section debug info address"
- ASCII "Critical section address"
- ASCII "undeleted critical section in freed memory"
- ASCII "Address of the debug info found in the active list."
- ASCII "Invalid debug info address of this critical section"
- ASCII "corrupted critical section"
- ASCII "Second initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "First initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section address."
- ASCII "double initialized or corrupted critical section"
- ASCII "Thread identifier"
- ASCII "Thread is in a state in which it cannot own a critical section"
- UNICODE "Objects=%4u"
- UNICODE "VirtualAlloc"
- UNICODE "Objects>%4u"
- UNICODE "\SystemRoot"
- UNICODE "\System32\"
- UNICODE "VerifierFlags"
- UNICODE "HandleTraces"
- UNICODE "VerifierDebug"
- UNICODE "VerifierDlls"
- ASCII "AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled
- "
- ASCII "AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.
- "
- ASCII "AVRF: -*- final list of providers -*-
- "
- ASCII "AVRF: resnapping %ws ...
- "
- ASCII "AVRF: skipped resnapping provider %ws ...
- "
- ASCII "AVRF: verifier dll `%ws'
- "
- ASCII "AVRF: Cannot load %ws from arbitrary location
- "
- ASCII "AVRF: %ws: failed to load provider `%ws' (status %08X) from %ws
- "
- ASCII "AVRF: provider %ws is not a DLL image
- "
- ASCII "AVRF: exception raised while probing provider %ws
- "
- ASCII "AVRF: cannot find an entry point for provider %ws
- "
- ASCII "AVRF: provider %ws passed an invalid descriptor @ %p
- "
- ASCII "AVRF: initialized provider %ws (descriptor @ %p)
- "
- ASCII "AVRF: provider %ws did not initialize correctly
- "
- ASCII "AVRF: exception raised in provider %ws initialization routine
- "
- ASCII "AVRF: provider %ws
- "
- ASCII "AVRF: chain: searching in %ws
- "
- ASCII "AVRF: chain: dll: %ws
- "
- ASCII "AVRF: chain: thunk: %s == %s ?
- "
- ASCII "AVRF: Found duplicate for (%ws: %s) in %ws
- "
- ASCII "AVRF: Checking %ws for duplicate (%ws: %s)
- "
- ASCII "AVRF: Chaining (%ws: %s) to %ws
- "
- ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
- "
- ASCII "AVRF: AVrfDllUnloadNotification called for a provider (%p)
- "
- ASCII "AVRF: internal error: New thunk for %s is null.
- "
- ASCII "AVRF: Snapped (%ws: %s) with (%ws: %p).
- "
- ASCII "AVRF: warning: did not find `%s' export in %ws .
- "
- ASCII "AVRF: (%ws) %s export found.
- "
- ASCII "AVRF: failed to enable handle checking (status %X)
- "
- UNICODE "verifier.dll"
- ASCII "AVRF: Failed to find verifier.dll among loaded providers!
- "
- ASCII "VerifierStopMessage"
- ASCII "AVRF: Failed to find `VerifierStopMessage()' export in verifier.dll!
- "
- ASCII "
- ===========================================================
- VERIFIER STOP %p: pid 0x%X: %s
- %p : %s
- %p : %s
- %p : %s
- %p : %s
- ===========================================================
- "
- UNICODE "\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "\REGISTRY\USER\"
- UNICODE "\KernelObjects\SystemErrorPortReady"
- UNICODE "\WindowsErrorReportingServicePort"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "VS_VERSION_INFO"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR"
- UNICODE "WMRSendMessageString"
- UNICODE "DisableEscalation"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\Escalation"
- UNICODE "WinShipAssert"
- UNICODE "WindowsMessageReportingB1"
- UNICODE "%d.%d.%d.%d"
- UNICODE "\Software\Microsoft\Windows"
- UNICODE "svchost.exe"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledProcesses\"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\SysprepPerformed\"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows"
- UNICODE "StudyId"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore"
- UNICODE "ThrottleExpiryTime"
- UNICODE "SampledOut"
- UNICODE "AdaptiveSqmNameSpaceBoundary"
- UNICODE "DPS"
- UNICODE "ASqmManifestVersion"
- UNICODE "ASqmManifest_%x"
- UNICODE "WSqmConsLastRunTime"
- UNICODE "CEIPEnable"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\AdaptiveSqm\Throttling"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"
- UNICODE "PATH"
- UNICODE "SafeDllSearchMode"
- UNICODE "SafeProcessSearchMode"
- ASCII "Status != STATUS_SXS_SECTION_NOT_FOUND"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "(This->PrivateDynamicallyAllocatedString == NULL) || (This->PrivateDynamicallyAllocatedString->Buffer == NULL)"
- ASCII "rUS.Length <= This->PrivatePreallocatedString->MaximumLength"
- ASCII "sxsisol_SearchActCtxForDllName"
- ASCII "[%x.%x] SXS: %s - Relative redirection plus env var expansion.
- "
- ASCII "!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)"
- ASCII "Status != STATUS_NOT_FOUND"
- ASCII "SXS: Warning: Activation context data at %p missing default TOC
- "
- ASCII "SXS: Warning: Activation context data at %p lacks assembly roster
- "
- ASCII "SXS: Activation context data at %p has invalid TOC header offset
- "
- ASCII "SXS: Activation context data at %p has TOC header too small (%lu)
- "
- ASCII "SXS: Activation context data at %p has invalid TOC entry array offset
- "
- ASCII "SXS: Activation context data at %p has invalid assembly roster offset
- "
- ASCII "SXS: Activation context data at %p has assembly roster header too small (%lu)
- "
- ASCII "RtlCreateActivationContext"
- ASCII "SXS: %s() passed the empty activation context data
- "
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid flags 0x%08lx
- "
- ASCII "SXS: %s() called with invalid cookie type 0x%08Ix
- "
- ASCII "SXS: %s() called with invalid cookie tid 0x%08Ix - should be %08Ix
- "
- ASCII "RtlDeactivateActivationContextUnsafeFast"
- ASCII "SXS: %s() Active frame is not the frame being deactivated %p != %p
- "
- ASCII "SXS/RTL: Activation context data at %p too small; TotalSize = %lu; HeaderSize = %lu
- "
- ASCII "SXS/RTL: Extended TOC offset (%ld) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)
- "
- ASCII "SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Section found (offset %ld; length %lu) extends past end of activation context data (%lu bytes)
- "
- ASCII "RtlpFindActivationContextSection_CheckParameters"
- ASCII "SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "RtlFindActivationContextSectionString() found section at %p (length %lu) which is not a string section
- "
- ASCII "RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.
- "
- ASCII "SXS: String hash collision chain offset at %p (= %ld) out of bounds
- "
- ASCII "SXS: String hash table entry at %p has invalid key offset (= %ld)
- Header = %p; Index = %lu; Bucket = %p; Chain = %p
- "
- ASCII "RtlFindActivationContextSectionGuid() found section at %p (length %lu) which is not a GUID section
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p only %Iu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!
- "
- ASCII "SXS: %s() found assembly information section with wrong magic value
- Expected %lu; got %lu
- "
- ASCII "SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!
- "
- ASCII "SXS: %s() passed string section at %p with too small of a header
- HeaderSize: %lu
- Required: %lu
- "
- ASCII "SXS: %s() found assembly information section with element list overlapping section header
- Section header: %p
- Header Size: %lu
- ElementListOffset: %lu
- "
- ASCII "SXS: %s() found assembly information section with search structure overlapping section header
- Section header: %p
- Header Size: %lu
- SearchStructureOffset: %lu
- "
- ASCII "SXS: %s() found assembly information section with user data overlapping section header
- Section header: %p
- Header Size: %lu
- User Data Offset: %lu
- "
- ASCII "SXS: %s() found assembly information section with user data too small
- Section header: %p
- UserDataSize: %lu; needed: %lu
- "
- ASCII "SXS: %s() found assembly information section with user data extending beyond section data
- Section header: %p
- UserDataSize: %lu
- UserDataOffset: %lu
- Section size: %Iu
- "
- ASCII "RtlpQueryInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root
- "
- ASCII "RtlpQueryAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
- "
- ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid file index (%d) in Assembly (%d)
- "
- ASCII "RtlpQueryRunLevel"
- ASCII "SXS: %s() found activation context data at %p with wrong format
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid flags (0x%08lx)
- "
- ASCII "SXS: %s() - Caller passed meaningless flags/class combination (0x%08lx/0x%08lx)
- "
- ASCII "SXS: %s() - caller asked for unknown information class %lu
- "
- ASCII "SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer
- "
- ASCII "SXS: %s() - caller supplied no buffer to populate and no place to return required byte count
- "
- ASCII "SXS: %s() - caller asked to use active activation context but passed %p
- "
- ASCII "SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL
- "
- ASCII "SXS: %s() - Caller passed invalid address, not in any .dll (%p)
- "
- ASCII "SXS: %s() - Caller asked to use activation context from hmodule but passed NULL
- "
- ASCII "SXS: %s() - Caller passed invalid hmodule (%p)
- "
- ASCII "SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu
- "
- UNICODE "http://schemas.microsoft.com/SMI/2005/WindowsSettings"
- ASCII "RtlpLocateActivationContextSection() found section at %p (length %lu) which is not a string section
- "
- ASCII "SXS: Unable to open registry key %wZ Status = 0x%08lx
- "
- UNICODE "\WinSxS\"
- ASCII "SXS: Unable to enumerate assembly storage subkey #%lu Status = 0x%08lx
- "
- ASCII "SXS: Attempt to get storage location from subkey %wZ failed; Status = 0x%08lx
- "
- ASCII "SXS: Unable to open storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Unabel to query location from storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Assembly storage root location value type is not REG_SZ
- "
- ASCII "SXS: Assembly storage root location value has non-even size
- "
- ASCII "SXS: Assembly storage root location for %wZ does not fit in a UNICODE STRING
- "
- ASCII "RtlpInitializeAssemblyStorageMap"
- ASCII "SXS: %s() bad parameters:
- SXS: Map : 0x%lx
- SXS: EntryCount : 0x%lx
- "
- ASCII "RtlpInsertAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: AssemblyRosterIndex : 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- SXS: StorageLocation : %p
- SXS: StorageLocation->Length: 0x%x
- SXS: StorageLocation->Buffer: %p
- "...
- ASCII "RtlpResolveAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: Data : %p
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- "
- ASCII "SXS: Assembly directory name stored in assembly information too long (%lu bytes) - ACTIVATION_CONTEXT_DATA at %p
- "
- ASCII "SXS: Attempt to probe known root of assembly storage ("%wZ") failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to insert well known storage root into assembly storage map assembly roster index %lu failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to probe assembly storage root %wZ for assembly directory %wZ failed with status = 0x%08lx
- "
- ASCII "SXS: Unable to resolve storage root for assembly directory %wZ in %Iu tries
- "
- ASCII "SXS: Attempt to translate DOS path name "%S" to NT format failed
- "
- ASCII "SXS: Unable to open assembly directory under storage root "%S"; Status = 0x%08lx
- "
- ASCII "SXS: Storage resolution failed to insert entry to storage map; Status = 0x%08lx
- "
- ASCII "RtlpProbeAssemblyStorageRootForAssembly"
- ASCII "SXS: %s() bad parameters
- SXS: Flags: 0x%lx
- SXS: Root: %p
- SXS: AssemblyDirectory: %p
- SXS: PreAllocatedString: %p
- SXS: DynamicString: %p
- SXS: StringUsed: %p
- SXS: OpenDirectoryHandle: %p"...
- ASCII "SXS: Assembly storage resolution failing probe because combined path length does not fit in an UNICODE_STRING.
- "
- ASCII "SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.
- "
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() passed the empty activation context
- "
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: AssemblyStorageRoot: %p
- SXS: Callback : %p
- "
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to get activation context data, storage map and assembly roster header. Status = 0x%08lx
- "
- ASCII "SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx
- "
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to resolve storage map entry. Status = 0x%08lx
- "
- ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: Peb : %p
- SXS: ActivationContextData: %p
- SXS: AssemblyStorageMap : %p
- "
- UNICODE ".mui"
- UNICODE "Type:"
- UNICODE " Name:"
- UNICODE " Language:"
- UNICODE " Item:"
- UNICODE "SR - "
- UNICODE "MUI"
- ASCII "LdrpLoadResourceFromAlternativeModule"
- ASCII "'LDR: %s(), invalid image format of MUI file
- "
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"
- UNICODE "UseFilter"
- UNICODE "FilterFullPath"
- UNICODE "LdrpResValidateFilePath Enter"
- UNICODE "LdrpResValidateFilePath Exit"
- UNICODE "LdrResGetRCConfig Enter"
- UNICODE "LdrResGetRCConfig Exit"
- UNICODE "LdrpResMapFile Enter"
- UNICODE "LdrpResMapFile Exit"
- UNICODE "LdrResRelease Enter"
- UNICODE "LdrResRelease Exit"
- UNICODE "RtlpResUltimateFallbackInfo Enter"
- UNICODE "LdrpResGetResourceDirectory Enter"
- UNICODE "LdrpResGetResourceDirectory Exit"
- UNICODE "LdrpResGetMappingSize Enter"
- UNICODE "LdrpResGetMappingSize Exit"
- UNICODE "LdrpResSearchResourceInsideDirectory Enter"
- UNICODE "LdrpResSearchResourceInsideDirectory Exit"
- UNICODE "LdrResFallbackLangList Enter"
- UNICODE "LdrResFallbackLangList Exit"
- UNICODE "LdrpResSearchResourceMappedFile Enter"
- UNICODE "LdrpResSearchResourceMappedFile Exit"
- UNICODE "LdrpResSearchResourceHandle Enter"
- UNICODE "LdrpResSearchResourceHandle Exit"
- UNICODE "LdrResSearchResource Enter"
- UNICODE "LdrResSearchResource Exit"
- UNICODE "RXACT"
- UNICODE "Log"
- UNICODE "%s\%u-%u-%u-%u"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects\"
- UNICODE "AppContainerNamedObjects\"
- UNICODE "#%u"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "!(CheckedFlags & ~HEAP_CREATE_VALID_MASK)"
- ASCII "(HeapHandle != NULL)"
- ASCII "((PHEAP_ENTRY)LastKnownEntry <= Entry)"
- ASCII "(UCRBlock->Size >= *Size)"
- ASCII "(UCRBlock != NULL)"
- ASCII "((LONG)FreeEntry->Size > 1)"
- ASCII "(LONG)FreeEntry->Size > 1"
- ASCII "((FreeBlock->Flags & HEAP_ENTRY_DECOMMITTED) || (ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock))"
- ASCII "ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock"
- ASCII "Heap block at %p modified at %p past requested size of %Ix
- "
- ASCII "RtlpHeapFreeVirtualMemory failed %lx for heap %p (base %p, size %Ix)
- "
- ASCII "ZwAllocateVirtualMemory failed %lx for heap %p (base %p, size %p)
- "
- ASCII "
- *** Assertion failed: %s%s
- *** Source File: %s, line %ld
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process, or terminate Thread (boipt)? "
- UNICODE "MiniNT"
- UNICODE "PortableOperatingSystem"
- ASCII "RtlpQueryRegistryValues: Miscomputed buffer size at line %d
- "
- UNICODE "TimeZoneInformation"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "MachineLanguageConfiguration"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\CMF\SQMData\BootLanguages"
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlpSetPreferredUILanguages is not a valid multi-string!
- "
- UNICODE "Control Panel\Desktop"
- UNICODE "PreferredUILanguagesPending"
- UNICODE "LanguageConfigurationPending"
- UNICODE "LanguageConfiguration"
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetThreadPreferredUILanguages is not a valid multi-string!
- "
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetProcessPreferredUILanguages is not a valid multi-string!
- "
- ASCII "*** ASSERT FAILED: Input parameter pwmszLanguage for function RtlGetUILanguageInfo is not a valid multi-string!
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- ASCII "VirtualQuery Failed 0x%08x %x
- "
- ASCII "VirtualProtect Failed 0x%08x %x
- "
- ASCII "RtlLockHeap"
- ASCII "RtlUnlockHeap"
- ASCII "Unable to release memory at %p for %p bytes - Status == %x
- "
- UNICODE "GlobalTags"
- ASCII "RtlValidateHeap"
- ASCII "Invalid heap signature for heap at %x"
- UNICODE "
- \SmApiPort"
- UNICODE "\SystemRoot\bootstat.dat"
- UNICODE "System Volume Information"
- ASCII "Not enough memory to complete
- "
- ASCII "Conflicting descriptors %08lx
- "
- ASCII "Unable to allocate page descriptor
- "
- ASCII "Entry User Heap Size Req.Size Flags
- "
- ASCII "------------------------------------------------------------
- "
- ASCII "fill "
- ASCII "%p %p %p %8lx %p "
- ASCII "Inspecting leaks at process shutdown ...
- "
- ASCII "%ld leaks detected.
- "
- ASCII "No leaks detected.
- "
- ASCII "ffff:"
- ASCII "::%hs%u.%u.%u.%u"
- ASCII "::ffff:0:%u.%u.%u.%u"
- ASCII "%u.%u.%u.%u"
- ASCII ":%u"
- ASCII "%02X-%02X-%02X-%02X-%02X-%02X"
- UNICODE "::%hs%u.%u.%u.%u"
- UNICODE "::ffff:0:%u.%u.%u.%u"
- UNICODE ":%u.%u.%u.%u"
- UNICODE "%%%u"
- UNICODE "]:%u"
- UNICODE "%u.%u.%u.%u"
- UNICODE ":%u"
- UNICODE "%02X-%02X-%02X-%02X-%02X-%02X"
- UNICODE "%%%u!%s!"
- ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping
- "
- ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem
- "
- ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned
- "
- UNICODE "\Registry\MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CustomLocale"
- UNICODE "Control Panel\International"
- UNICODE "LocaleName"
- UNICODE "\SystemRoot\Globalization\"
- UNICODE "en-US"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ProductOptions"
- UNICODE "ProductType"
- UNICODE "WinNt"
- UNICODE "LanmanNt"
- UNICODE "ServerNt"
- ASCII " Leaked Block 0x%p size 0x%p (stack %p depth %u)
- "
- ASCII "
- *** Resource timeout (%p) in %ws:%s
- "
- ASCII "The resource is owned exclusively by thread %x
- "
- ASCII "The resource is owned shared by %d threads
- "
- ASCII "The resource is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Critical Section Timeout (%p) in %ws:%s
- "
- ASCII "The critical section is owned by thread %x.
- "
- ASCII "Go determine why that thread has not released the critical section.
- "
- ASCII "The critical section is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Inpage error in %ws:%s
- "
- ASCII "The instruction at %p referenced memory at %p.
- "
- ASCII "This failed because of error %Ix.
- "
- ASCII "This means the machine is out of memory. Use !vm to see where all the memory is being used.
- "
- ASCII "This means the data could not be read, typically because of a bad block on the disk. Check your hardware.
- "
- ASCII "This means that the I/O device reported an I/O error. Check your hardware."
- ASCII "
- *** An Access Violation occurred in %ws:%s
- "
- ASCII "read from"
- ASCII "The instruction at %p tried to %s "
- ASCII "an invalid address, %p
- "
- ASCII "a NULL pointer
- "
- ASCII "
- *** A stack buffer overrun occurred in %ws:%s
- "
- ASCII "This is usually the result of a memory copy to a local buffer or structure where the size is not properly calculated/checked.
- "
- ASCII "If this bug ends up in the shipping product, it could be a severe security hole.
- "
- ASCII "The stack trace should show the guilty function (the function directly above __report_gsfailure).
- "
- ASCII "
- *** Unhandled exception 0x%08lx, hit in %ws:%s
- "
- ASCII " *** enter .exr %p for the exception record
- "
- ASCII " *** enter .cxr %p for the context
- "
- ASCII " *** then kb to get the faulting stack
- "
- ASCII " *** Restarting wait on critsec or resource at %p (in %ws:%s)
- "
- UNICODE "WIN://SYSAPPID"
- UNICODE "WIN://PKG"
- UNICODE "%wZ"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ValidationRunlevels"
- ASCII "Trace database: failed to release segment %p
- "
- ASCII "Trace database: failing attempt to save biiiiig trace (size %u)
- "
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "Software\Policies\Microsoft\Control Panel\Desktop"
- UNICODE "Control Panel\Desktop\LanguageConfiguration"
- UNICODE "Control Panel\Desktop\MuiCached\MachineLanguageConfiguration"
- ASCII "*** CreateLanguageList:%X ****
- "
- UNICODE "MachineUILock"
- UNICODE "DefaultFallback"
- UNICODE "AlternateCodePage"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete"
- UNICODE "Type"
- UNICODE "WindowsExcludedProcs"
- UNICODE "Kernel-MUI-Number-Allowed"
- UNICODE "Kernel-MUI-Language-Allowed"
- UNICODE "Kernel-MUI-Language-Disallowed"
- UNICODE "Kernel-MUI-Language-SKU"
- ASCII "*** RtlpMuiRegLoadLicInformation failed with status %x"
- ASCII "Critical error detected %lx
- "
- UNICODE "QueryDebugInformation request"
- ASCII "Heap %p - headers modified (%p is %lx instead of %lx)
- "
- ASCII " This is located in the %s field of the heap header.
- "
- ASCII "Invalid ReserveSize parameter - %Ix
- "
- ASCII "Invalid CommitSize parameter - %Ix
- "
- ASCII "May not specify Lock parameter with HEAP_NO_SERIALIZE
- "
- ASCII "Specified HeapBase (%p) invalid, Status = %lx
- "
- ASCII "Specified HeapBase (%p) != to BaseAddress (%p)
- "
- ASCII "Specified HeapBase (%p) is free or not writable
- "
- ASCII "May not destroy the process heap at %p
- "
- ASCII "RtlAllocateHeap"
- ASCII "Invalid allocation size - %Ix (exceeded %Ix)
- "
- ASCII "Just allocated block at %p for %Ix bytes
- "
- ASCII "Just allocated block at %p for 0x%Ix bytes with tag %ws
- "
- ASCII "RtlReAllocateHeap"
- ASCII "About to reallocate block at %p to %Ix bytes
- "
- ASCII "About to rellocate block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "Just reallocated block at %p to %Ix bytes
- "
- ASCII "Just reallocated block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "RtlFreeHeap"
- ASCII "About to free block at %p
- "
- ASCII "About to free block at %p with tag %ws
- "
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSizeHeap"
- ASCII "RtlZeroHeap"
- ASCII "RtlCreateTagHeap"
- ASCII "RtlQueryTagHeap"
- ASCII "RtlWalkHeap"
- ASCII "Invalid address specified to %s( %p, %p )
- "
- ASCII "Heap entry %p has incorrect PreviousSize field (%04x instead of %04x)
- "
- ASCII "Free Heap block %p modified at %p after it was freed
- "
- ASCII "Heap block at %p has incorrect segment offset (%x)
- "
- ASCII "Heap block at %p is not last block in segment (%p)
- "
- ASCII "Heap block at %p has corrupted PreviousSize (%lx)
- "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)
- "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)
- "
- ASCII "dedicated (%04Ix) free list element %p is marked busy
- "
- ASCII "Non-Dedicated free list element %p is out of order
- "
- ASCII "Number of free blocks in arena (%ld) does not match number in the free lists (%ld)
- "
- ASCII "Total size of free blocks in arena (%Id) does not match number total in heap header (%Id)
- "
- ASCII "Pseudo Tag %04x size incorrect (%Ix != %Ix) %p
- "
- ASCII "Tag %04x (%ws) size incorrect (%Ix != %Ix) %p
- "
- ASCII "Heap error detected at %p (heap handle %p)
- "
- ASCII "heap_failure_internal"
- ASCII "heap_failure_unknown"
- ASCII "heap_failure_generic"
- ASCII "heap_failure_entry_corruption"
- ASCII "heap_failure_multiple_entries_corruption"
- ASCII "heap_failure_virtual_block_corruption"
- ASCII "heap_failure_buffer_overrun"
- ASCII "heap_failure_buffer_underrun"
- ASCII "heap_failure_block_not_busy"
- ASCII "heap_failure_invalid_argument"
- ASCII "heap_failure_usage_after_free"
- ASCII "heap_failure_cross_heap_operation"
- ASCII "heap_failure_freelists_corruption"
- ASCII "heap_failure_listentry_corruption"
- ASCII "heap_failure_lfh_bitmap_mismatch"
- ASCII "Error code: %d - %s
- "
- ASCII "Parameter1: %p
- "
- ASCII "Parameter2: %p
- "
- ASCII "Parameter3: %p
- "
- ASCII "Last known valid blocks: before - %p, after - %p
- "
- ASCII "Stack trace available at %p
- "
- ASCII "RtlpGetBitState(LookupTable, (ULONG)(LookupIndex - LookupTable->BaseIndex))"
- ASCII "(ROUND_UP_TO_POWER2(Size, PAGE_SIZE) == Size)"
- ASCII "Enabling heap debug options
- "
- ASCII "ffff:"
- ASCII "::%hs%u.%u.%u.%u"
- ASCII "::ffff:0:%u.%u.%u.%u"
- ASCII ":%u.%u.%u.%u"
- UNICODE "TimeZoneKeyName"
- UNICODE "DynamicDaylightTimeDisabled"
- ASCII "RtlpQueryRegistryValues: Miscomputed buffer size at line %d
- "
- ASCII "RtlpQueryRegistryValues: Miscomputed buffer size at line %d
- "
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetProcessPreferredUILanguages is not a valid multi-string!
- "
- ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping
- "
- ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem
- "
- ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned
- "
- UNICODE "ThrottleExpiryTime"
- UNICODE "SampledOut"
- UNICODE "CEIPEnable"
- UNICODE "ThrottleExpiryTime"
- UNICODE "%s\%u-%u-%u-%u"
- UNICODE "ASqmManifest_%x"
- ASCII "LdrpAllocateTlsEntry"
- ASCII "LdrpHandleTlsData"
- ASCII "HEAP: "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Inspecting leaks at process shutdown ...
- "
- ASCII "HEAP[%wZ]: "
- ASCII "%ld leaks detected.
- "
- ASCII "HEAP[%wZ]: "
- ASCII "No leaks detected.
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid heap signature for heap at %x"
- ASCII "RtlUnlockHeap"
- ASCII ", passed to %s"
- UNICODE "
- \SmApiPort"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid heap signature for heap at %x"
- ASCII "RtlLockHeap"
- ASCII ", passed to %s"
- UNICODE "
- \SmApiPort"
- ASCII "DLL "%wZ" has TLS information at %p
- "
- ASCII "LdrpInitializeTls"
- ASCII "minkernel\ntdll\ldrtls.c"
- ASCII "ThreadPool: attempt to terminate a worker thread via handle %p
- Contact the owner of the function calling Terminate/Exit thread.
- "
- ASCII "Delaying execution failed with status 0x%08lx
- "
- ASCII "_LdrpInitialize"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization failed with status 0x%08lx
- "
- ASCII "_LdrpInitialize"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "LdrpAllocateTls"
- ASCII "TlsVector %p Index %d : %d bytes copied from %p to %p
- "
- ASCII "LdrpAllocateTls"
- ASCII "minkernel\ntdll\ldrtls.c"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ProductOptions"
- UNICODE "ProductType"
- UNICODE "WinNt"
- UNICODE "LanmanNt"
- UNICODE "ServerNt"
- ASCII "Calling TLS callback %p for DLL "%wZ" at %p
- "
- ASCII "LdrpCallTlsInitializers"
- ASCII "minkernel\ntdll\ldrtls.c"
- ASCII "Process 0x%x (%wZ) exiting
- "
- ASCII "LdrShutdownProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Nonpackaged process attempted to load a packaged DLL.
- "
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Calling init routine %p for DLL "%wZ"
- "
- ASCII "LdrpInitializeNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Init routine %p of DLL "%wZ" raised an exception %x
- "
- ASCII "LdrpInitializeNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Init routine %p for DLL "%wZ" failed during DLL_PROCESS_ATTACH
- "
- ASCII "LdrpInitializeNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "RtlDeactivateActivationContextUnsafeFast"
- ASCII "SXS: %s() Active frame is not the frame being deactivated %p != %p
- "
- ASCII "Failed to allocated memory for shimmed module list
- "
- ASCII "LdrpCheckModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "DLL %wZ was redirected to %wZ by SxS
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Loading DLL %wZ
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Could not validate the crypto signature for DLL %wZ
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(UCRBlock->Size >= *Size)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((PHEAP_ENTRY)LastKnownEntry <= Entry)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(ROUND_UP_TO_POWER2(Size, PAGE_SIZE) == Size)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "ZwAllocateVirtualMemory failed %lx for heap %p (base %p, size %p)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((FreeBlock->Flags & HEAP_ENTRY_DECOMMITTED) || (ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock))"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock"
- UNICODE "en"
- UNICODE "en-US"
- UNICODE "en-US"
- UNICODE "en"
- UNICODE "en-US"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetThreadPreferredUILanguages is not a valid multi-string!
- "
- UNICODE "0x"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Unable to release memory at %p for %p bytes - Status == %x
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((FreeBlock->Flags & HEAP_ENTRY_DECOMMITTED) || (ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock))"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(UCRBlock != NULL)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(!TrailingUCR)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((LONG)FreeEntry->Size > 1)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(LONG)FreeEntry->Size > 1"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(!TrailingUCR)"
- ASCII "DLL name: %s.
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL name %wZ was redirected to %wZ by SxS.
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Loading DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpFindOrMapDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindOrMapDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpResolveDllName"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpResolveDllName"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Unknown"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in "%wZ" 0x%08lx
- "
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "minkernel\ntdll\ldrdload.c"
- ASCII "Unknown"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in module 0x%p 0x%08lx
- "
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "minkernel\ntdll\ldrdload.c"
- ASCII "DLL search path passed in externally: %ws
- "
- ASCII "LdrpInitializeDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "ParentModule: (%p) %wZ.
- "
- ASCII "LdrpResolveNonStaticDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL "%wZ" does not contain an export table
- "
- ASCII "LdrpSnapModule"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Procedure "%s" could not be located in DLL at base 0x%p.
- "
- ASCII "LdrpNameToOrdinal"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "LdrpSnapModule"
- ASCII "Locating procedure "%s" by name
- "
- ASCII "LdrpGetProcedureAddress"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Procedure "%s" could not be located in DLL at base 0x%p.
- "
- ASCII "LdrpNameToOrdinal"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Loading procedure 0x%lx by ordinal
- "
- ASCII "LdrpGetProcedureAddress"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Status != STATUS_SXS_SECTION_NOT_FOUND"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "sxsisol_SearchActCtxForDllName"
- ASCII "[%x.%x] SXS: %s - Relative redirection plus env var expansion.
- "
- ASCII "!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)"
- ASCII "Status != STATUS_NOT_FOUND"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "RtlFindActivationContextSectionString() found section at %p (length %lu) which is not a string section
- "
- ASCII "RtlFindActivationContextSectionGuid() found section at %p (length %lu) which is not a GUID section
- "
- ASCII "SXS/RTL: Extended TOC offset (%ld) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)
- "
- ASCII "SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Activation context data at %p too small; TotalSize = %lu; HeaderSize = %lu
- "
- ASCII "RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.
- "
- ASCII "SXS: String hash table entry at %p has invalid key offset (= %ld)
- Header = %p; Index = %lu; Bucket = %p; Chain = %p
- "
- ASCII "SXS: String hash collision chain offset at %p (= %ld) out of bounds
- "
- ASCII "RtlpFindActivationContextSection_CheckParameters"
- ASCII "SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "RtlpFindActivationContextSection_CheckParameters"
- ASCII "SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "DLL name: %wZ
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "DLL name %wZ was redirected to %wZ by SxS
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Locating DLL %wZ
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpFindLoadedDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindLoadedDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Failed to load for appcompat reasons
- "
- ASCII "LdrpPrepareModuleForExecution"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "ThreadPool: callback %p(%p) returned with a transaction uncleared
- "
- ASCII "ThreadPool: callback %p(%p) returned with the loader lock held
- "
- ASCII "ThreadPool: callback %p(%p) returned with preferred languages set
- "
- ASCII "ThreadPool: callback %p(%p) returned with background priorities set
- "
- ASCII "LdrUnlockLoaderLock"
- ASCII "LdrLockLoaderLock"
- ASCII "LdrpLoadResourceFromAlternativeModule"
- ASCII "'LDR: %s(), invalid image format of MUI file
- "
- ASCII "(l7"
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid flags (0x%08lx)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed meaningless flags/class combination (0x%08lx/0x%08lx)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller asked for unknown information class %lu
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller supplied no buffer to populate and no place to return required byte count
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller asked to use activation context from hmodule but passed NULL
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller asked to use active activation context but passed %p
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid address, not in any .dll (%p)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid hmodule (%p)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "!(CheckedFlags & ~HEAP_CREATE_VALID_MASK)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "RtlpGetBitState(LookupTable, (ULONG)(LookupIndex - LookupTable->BaseIndex))"
- ASCII "*** RtlpMuiRegLoadLicInformation failed with status %x"
- UNICODE "Control Panel\Desktop\MuiCached\MachineLanguageConfiguration"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(HeapHandle != NULL)"
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() passed the empty activation context
- "
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx
- "
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: AssemblyStorageRoot: %p
- SXS: Callback : %p
- "
- ASCII "SXS: Assembly directory name stored in assembly information too long (%lu bytes) - ACTIVATION_CONTEXT_DATA at %p
- "
- ASCII "SXS: Attempt to probe known root of assembly storage ("%wZ") failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to insert well known storage root into assembly storage map assembly roster index %lu failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to probe assembly storage root %wZ for assembly directory %wZ failed with status = 0x%08lx
- "
- ASCII "SXS: Unable to resolve storage root for assembly directory %wZ in %Iu tries
- "
- ASCII "SXS: Attempt to translate DOS path name "%S" to NT format failed
- "
- ASCII "SXS: Unable to open assembly directory under storage root "%S"; Status = 0x%08lx
- "
- ASCII "SXS: Storage resolution failed to insert entry to storage map; Status = 0x%08lx
- "
- ASCII "RtlpResolveAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: Data : %p
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- "
- ASCII "SXS: Unable to enumerate assembly storage subkey #%lu Status = 0x%08lx
- "
- ASCII "SXS: Attempt to get storage location from subkey %wZ failed; Status = 0x%08lx
- "
- ASCII "SXS: Unable to open registry key %wZ Status = 0x%08lx
- "
- ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
- ASCII "SXS: %s() passed the empty activation context
- "
- ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: Peb : %p
- SXS: ActivationContextData: %p
- SXS: AssemblyStorageMap : %p
- "
- ASCII "RtlpInsertAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: AssemblyRosterIndex : 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- SXS: StorageLocation : %p
- SXS: StorageLocation->Length: 0x%x
- SXS: StorageLocation->Buffer: %p
- "...
- ASCII "SXS: Assembly storage resolution failing probe because combined path length does not fit in an UNICODE_STRING.
- "
- ASCII "SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.
- "
- ASCII "SXS: Attempt to translate DOS path name "%S" to NT format failed
- "
- ASCII "SXS: Unable to open assembly directory under storage root "%S"; Status = 0x%08lx
- "
- ASCII "RtlpProbeAssemblyStorageRootForAssembly"
- ASCII "SXS: %s() bad parameters
- SXS: Flags: 0x%lx
- SXS: Root: %p
- SXS: AssemblyDirectory: %p
- SXS: PreAllocatedString: %p
- SXS: DynamicString: %p
- SXS: StringUsed: %p
- SXS: OpenDirectoryHandle: %p"...
- ASCII "RtlCreateActivationContext"
- ASCII "SXS: %s() passed the empty activation context data
- "
- ASCII "RtlpInitializeAssemblyStorageMap"
- ASCII "SXS: %s() bad parameters:
- SXS: Map : 0x%lx
- SXS: EntryCount : 0x%lx
- "
- ASCII "SXS: Activation context data at %p has assembly roster header too small (%lu)
- "
- ASCII "SXS: Warning: Activation context data at %p missing default TOC
- "
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpSearchPath"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpSearchPath"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Lazy DLL search path computation failed with status: 0x%08lx.
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "DLL search path computed: %ws
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "Packaged DLL search path computed. Package Dirs: %ws, DllPath: %ws
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "RtlpHeapFreeVirtualMemory failed %lx for heap %p (base %p, size %Ix)
- "
- ASCII "RTL: Acquire Shared Sem Timeout %d(%I64u secs)
- "
- ASCII "RTL: Resource at %p
- "
- ASCII "RTL: Re-Waiting
- "
- ASCII "RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)
- "
- ASCII "RTL: Resource at %p
- "
- ASCII "RTL: Re-Waiting
- "
- UNICODE "#%u"
- UNICODE "%%%u!%s!"
- UNICODE "hc"
- UNICODE "::ffff:0:%u.%u.%u.%u"
- UNICODE "UEFI"
- UNICODE "Legacy"
- ASCII "Unmapping DLL "%wZ"
- "
- ASCII "LdrpUnloadNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Merging a cycle rooted at %wZ.
- "
- ASCII "LdrpMergeNodes"
- ASCII "minkernel\ntdll\ldrddag.c"
- ASCII "Adding cyclic module %wZ.
- "
- ASCII "LdrpMergeNodes"
- ASCII "minkernel\ntdll\ldrddag.c"
- ASCII "Uninitializing DLL "%wZ" (Init routine: %p)
- "
- ASCII "LdrpProcessDetachNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid flags 0x%08lx
- "
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid cookie type 0x%08Ix
- "
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid cookie tid 0x%08Ix - should be %08Ix
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid address specified to %s( %p, %p )
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid heap signature for heap at %x"
- ASCII ", passed to %s"
- UNICODE "
- \SmApiPort"
- ASCII "RTL: Enter Critical Section Timeout (%I64u secs) %d
- "
- ASCII "RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu
- "
- ASCII "RTL: Re-Waiting
- "
- ASCII "Probing for the manifest of DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpFindDllActivationContext"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Querying the active activation context failed with status 0x%08lx
- "
- ASCII "LdrpFindDllActivationContext"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL name: %ws
- "
- ASCII "LdrpMapViewOfSection"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpMapViewOfSection"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpFindKnownDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindKnownDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section debug info address"
- ASCII "Critical section address"
- ASCII "undeleted critical section in freed memory"
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Address of the debug info found in the active list."
- ASCII "Invalid debug info address of this critical section"
- ASCII "Critical section address"
- ASCII "corrupted critical section"
- ASCII "Second initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "First initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Address of the debug info found in the active list."
- ASCII "Critical section address."
- ASCII "double initialized or corrupted critical section"
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section debug info address"
- ASCII "Critical section address"
- ASCII "Thread identifier"
- ASCII "Thread is in a state in which it cannot own a critical section"
- ASCII "CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database
- "
- UNICODE "Execute=1"
- ASCII "CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ
- "
- ASCII "CLIENT(ntdll): Processing %ws for patching section protection for %wZ
- "
- ASCII "CLIENT(ntdll): Processing section info %ws...
- "
- UNICODE "FilterFullPath"
- ASCII "Loading the shim engine DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Getting the shim engine exports failed with status 0x%08lx
- "
- ASCII "LdrpInitShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Loading the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpLoadShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpLoadShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing a shim dependency "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeShimDllDependencies"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Could not locate procedure "%s" in the shim engine DLL
- "
- ASCII "LdrpGetShimEngineInterface"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Locating export "%wZ" for DLL "%wZ" failed with status: 0x%08lx.
- "
- ASCII "LdrpReportError"
- ASCII "minkernel\ntdll\ldrutil.c"
- UNICODE "#%d"
- ASCII "Locating export at ordinal %d for DLL "%wZ" failed with status: 0x%08lx.
- "
- ASCII "LdrpReportError"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "Getting ApphelpCheckModule failed with status 0x%08lx
- "
- ASCII "LdrpDynamicShimModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Querying large page info failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Changing the protection of the executable at %p failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "Changing the protection of the executable at %p failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "RtlpQueryRunLevel"
- ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root
- "
- ASCII "RtlpQueryRunLevel"
- ASCII "SXS: %s() found activation context data at %p with wrong format
- "
- ASCII "RtlpQueryInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p only %Iu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with wrong magic value
- Expected %lu; got %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p with too small of a header
- HeaderSize: %lu
- Required: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with element list overlapping section header
- Section header: %p
- Header Size: %lu
- ElementListOffset: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with search structure overlapping section header
- Section header: %p
- Header Size: %lu
- SearchStructureOffset: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with user data overlapping section header
- Section header: %p
- Header Size: %lu
- User Data Offset: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with user data too small
- Section header: %p
- UserDataSize: %lu; needed: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with user data extending beyond section data
- Section header: %p
- UserDataSize: %lu
- UserDataOffset: %lu
- Section size: %Iu
- "
- ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping
- "
- ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem
- "
- ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned
- "
- UNICODE "GlobalTags"
- ASCII "RtlpLocateActivationContextSection() found section at %p (length %lu) which is not a string section
- "
- UNICODE "COMPLUS_Version"
- ASCII "This != NULL"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "(This->PrivateDynamicallyAllocatedString == NULL) || (This->PrivateDynamicallyAllocatedString->Buffer == NULL)"
- ASCII "rUS.Length <= This->PrivatePreallocatedString->MaximumLength"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "Failed to reallocate the system dirs string !
- "
- ASCII "LdrpInitializePerUserWindowsDirectory"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII ".txt"
- ASCII ".txt2"
- UNICODE "%s_%d"
- UNICODE "xl--"
- UNICODE "xn--"
- ASCII "LdrVerifyImageMatchesChecksumEx"
- ASCII "LdrVerifyImageMatchesChecksumEx"
- UNICODE "BinaryHash"
- UNICODE "BinaryName"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList\%ws"
- UNICODE "TrustedInstaller"
- ASCII "Set 0x%X protection for %p section for %d bytes, old protection 0x%X
- "
- ASCII "CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X
- "
- ASCII "%04x:%04x @ %08d - %s - %s: "
- ASCII "LdrpProtectedCopyMemory"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\"
- ASCII "Finding the shim engine entry failed with status 0x%08lx
- "
- ASCII "LdrInitShimEngineDynamic"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "BoG_ *90.0&!! Yy>"
- ASCII "stxt371"
- ASCII ".txt"
- ASCII ".txt2"
- UNICODE "%s!%s"
- UNICODE "\system32\apphelp.dll"
- ASCII "Loading the shim engine DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpGetProcApphelpCheckModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Getting the shim engine exports failed with status 0x%08lx
- "
- ASCII "LdrpGetProcApphelpCheckModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization failed with status 0x%08lx
- "
- ASCII "LdrpInitializationFailure"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "SPPsvc.exe"
- UNICODE "PageHeapFlags"
- ASCII "Per-DLL page heap is disabled since fast fill heap is enabled
- "
- ASCII "LdrpInitializeApplicationVerifierPackage"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "DisableHeapLookaside"
- UNICODE "FrontEndHeapDebugOptions"
- UNICODE "ShutdownFlags"
- UNICODE "UnloadEventTraceDepth"
- UNICODE "TracingFlags"
- UNICODE "ExecuteOptions"
- UNICODE "DisableExceptionChainValidation"
- UNICODE "MinimumStackCommitInBytes"
- UNICODE "MaxDeadActivationContexts"
- UNICODE "GlobalFlag"
- UNICODE "GlobalFlag"
- ASCII "Initializing the application verifier package failed with status 0x%08lx
- "
- ASCII "LdrpInitializeExecutionOptions"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "BaseQueryModuleData"
- ASCII "Initializing the execution options for the process %lx failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing process 0x%lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "StackTraceDatabaseSizeInMb"
- ASCII "Stack trace database size is %Id Mb
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Creating the process heap failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "!Process"
- UNICODE "NTDLL!"
- UNICODE "DebugProcessHeapOnly"
- ASCII "Allocating a buffer to hold the current working directory failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Allocating a data table entry for the system DLL failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Failed to allocate the system dirs string!
- "
- ASCII "LdrpInitializeProcess"
- UNICODE "\system;"
- ASCII "Allocating a data table entry for the executable failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Beginning execution of %wZ (%wZ)
- Current directory: %wZ
- Package directories: %wZ
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing the current directory to "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Allocating a data table entry for the application verifier DLL failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Initializing TLS slots failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "LdrpCodeAuthzInitialize failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Walking the import tables of the executable and its static imports failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Running the init routines of the executable's static imports failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Querying the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Opening the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpInitializeProcessWrapperFilter"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "CWDIllegalInDLLSearch"
- ASCII "LdrpTouchThreadStack"
- ASCII "Function %s raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpGenericExceptionFilter"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "
- ***Exception thrown within loader***
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? "
- ASCII "Execute '.cxr %p' to dump context
- "
- UNICODE ".DLL"
- UNICODE "\microsoft.system.package.metadata\Application"
- UNICODE ".Local"
- UNICODE ".DLL"
- ASCII "Resource @ %lx
- "
- ASCII " NumberOfWaitingShared = %lx
- "
- ASCII " NumberOfWaitingExclusive = %lx
- "
- ASCII " NumberOfActive = %lx
- "
- ASCII "NTDLL: Calling thread (%X) not owner of CritSect: %p Owner ThreadId: %X
- "
- UNICODE "Objects>%4u"
- UNICODE "Objects=%4u"
- UNICODE "VirtualAlloc"
- ASCII "AVRF: AVrfDllUnloadNotification called for a provider (%p)
- "
- ASCII "AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled
- "
- ASCII "AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.
- "
- ASCII "AVRF: -*- final list of providers -*-
- "
- UNICODE "VerifierFlags"
- UNICODE "HandleTraces"
- UNICODE "VerifierDebug"
- UNICODE "VerifierDlls"
- ASCII "AVRF: Checking %ws for duplicate (%ws: %s)
- "
- ASCII "AVRF: Chaining (%ws: %s) to %ws
- "
- ASCII "AVRF: warning: did not find `%s' export in %ws .
- "
- ASCII "AVRF: (%ws) %s export found.
- "
- ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
- "
- ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
- "
- ASCII "AVRF: provider %ws
- "
- ASCII "AVRF: failed to enable handle checking (status %X)
- "
- ASCII "AVRF: chain: searching in %ws
- "
- ASCII "AVRF: chain: dll: %ws
- "
- ASCII "AVRF: chain: thunk: %s == %s ?
- "
- ASCII "AVRF: Found duplicate for (%ws: %s) in %ws
- "
- UNICODE "\REGISTRY\USER\"
- ASCII "AVRF: verifier dll `%ws'
- "
- ASCII "AVRF: Cannot load %ws from arbitrary location
- "
- ASCII "AVRF: %ws: failed to load provider `%ws' (status %08X) from %ws
- "
- ASCII "AVRF: provider %ws is not a DLL image
- "
- ASCII "AVRF: cannot find an entry point for provider %ws
- "
- ASCII "AVRF: provider %ws passed an invalid descriptor @ %p
- "
- ASCII "AVRF: initialized provider %ws (descriptor @ %p)
- "
- ASCII "AVRF: provider %ws did not initialize correctly
- "
- ASCII "AVRF: exception raised in provider %ws initialization routine
- "
- ASCII "AVRF: exception raised while probing provider %ws
- "
- UNICODE "verifier.dll"
- ASCII "AVRF: resnapping %ws ...
- "
- ASCII "AVRF: skipped resnapping provider %ws ...
- "
- ASCII "AVRF: internal error: New thunk for %s is null.
- "
- ASCII "AVRF: Snapped (%ws: %s) with (%ws: %p).
- "
- UNICODE "verifier.dll"
- ASCII "AVRF: Failed to find verifier.dll among loaded providers!
- "
- ASCII "VerifierStopMessage"
- ASCII "AVRF: Failed to find `VerifierStopMessage()' export in verifier.dll!
- "
- UNICODE "\KnownDlls"
- UNICODE "KnownDllPath"
- UNICODE "\SystemRoot"
- UNICODE "\System32\"
- ASCII "
- ===========================================================
- VERIFIER STOP %p: pid 0x%X: %s
- %p : %s
- %p : %s
- %p : %s
- %p : %s
- ===========================================================
- "
- UNICODE "WinShipAssert"
- UNICODE "WindowsMessageReportingB1"
- UNICODE "%d.%d.%d.%d"
- UNICODE "%X"
- UNICODE "%d"
- UNICODE "%X"
- UNICODE "%X"
- UNICODE "%d.%d.%d.%d"
- UNICODE "%X"
- UNICODE "%X"
- UNICODE "\REGISTRY\USER\"
- UNICODE "\Software\Microsoft\Windows"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\Escalation"
- UNICODE "DisableEscalation"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR"
- UNICODE "WMRSendMessageString"
- UNICODE "(null)"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\AdaptiveSqm\Throttling"
- UNICODE "%u"
- UNICODE "(null)"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\"
- ASCII "RtlpQueryAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
- "
- ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
- "
- ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid file index (%d) in Assembly (%d)
- "
- ASCII "SXS: Unable to open storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Unabel to query location from storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Assembly storage root location value type is not REG_SZ
- "
- ASCII "SXS: Assembly storage root location value has non-even size
- "
- ASCII "SXS: Assembly storage root location for %wZ does not fit in a UNICODE STRING
- "
- UNICODE "Type:"
- UNICODE " Name:"
- UNICODE " Language:"
- UNICODE " Item:"
- UNICODE "SR - "
- UNICODE "LdrResRelease Enter"
- UNICODE "LdrResRelease Exit"
- UNICODE "LdrResGetRCConfig Enter"
- UNICODE "LdrResGetRCConfig Exit"
- UNICODE "LdrpResMapFile Enter"
- UNICODE "LdrpResMapFile Exit"
- UNICODE "LdrpResSearchResourceHandle Enter"
- UNICODE "LdrpResSearchResourceHandle Exit"
- UNICODE "LdrpResValidateFilePath Enter"
- UNICODE "LdrpResValidateFilePath Exit"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p modified at %p past requested size of %Ix
- "
- ASCII "
- *** Assertion failed: %s%s
- *** Source File: %s, line %ld
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process, or terminate Thread (boipt)? "
- ASCII "Execute '.cxr %p' to dump context
- "
- UNICODE "PortableOperatingSystem"
- UNICODE "TimeZoneInformation"
- UNICODE "Bias"
- UNICODE "StandardName"
- UNICODE "StandardBias"
- UNICODE "StandardStart"
- UNICODE "DaylightName"
- UNICODE "DaylightBias"
- UNICODE "DaylightStart"
- UNICODE "TimeZoneKeyName"
- UNICODE "DynamicDaylightTimeDisabled"
- ASCII "*** ASSERT FAILED: Input parameter pwmszLanguage for function RtlGetUILanguageInfo is not a valid multi-string!
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "MachineLanguageConfiguration"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\CMF\SQMData\BootLanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlpSetPreferredUILanguages is not a valid multi-string!
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- UNICODE "Control Panel\Desktop"
- UNICODE "PreferredUILanguagesPending"
- UNICODE "LanguageConfigurationPending"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "LanguageConfiguration"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "VirtualProtect Failed 0x%08x %x
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "VirtualQuery Failed 0x%08x %x
- "
- UNICODE "Objects>%4u"
- UNICODE "Objects=%4u"
- UNICODE "VirtualAlloc"
- UNICODE "\SystemRoot\bootstat.dat"
- ASCII 41,"DMAVQBwADQANwA0AHIAcwBYAHYASQBYAHAAMQBDAFQAdABNAEsAVwBjAFIATgAyAC"
- ASCII "busy "
- ASCII "virtual "
- ASCII "UCR "
- ASCII "free "
- ASCII "extra "
- ASCII "fill "
- ASCII "user_flag "
- ASCII "%p %p %p %8lx %p "
- UNICODE "
- \SmApiPort"
- ASCII "Conflicting descriptors %08lx
- "
- ASCII "Unable to allocate page descriptor
- "
- ASCII "Entry User Heap Size Req.Size Flags
- "
- ASCII "------------------------------------------------------------
- "
- ASCII "Error
- "
- ASCII "Not enough memory to complete
- "
- ASCII "%02X-%02X-%02X-%02X-%02X-%02X"
- ASCII ":%u"
- ASCII "%%%u"
- ASCII "]:%u"
- UNICODE "%02X-%02X-%02X-%02X-%02X-%02X"
- UNICODE "\SystemRoot\Globalization\"
- UNICODE ".nlp"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII " Leaked Block 0x%p size 0x%p (stack %p depth %u)
- "
- ASCII "
- *** Unhandled exception 0x%08lx, hit in %ws:%s
- "
- ASCII "
- *** A stack buffer overrun occurred in %ws:%s
- "
- ASCII "This is usually the result of a memory copy to a local buffer or structure where the size is not properly calculated/checked.
- "
- ASCII "If this bug ends up in the shipping product, it could be a severe security hole.
- "
- ASCII "The stack trace should show the guilty function (the function directly above __report_gsfailure).
- "
- ASCII "
- *** Resource timeout (%p) in %ws:%s
- "
- ASCII "The resource is owned exclusively by thread %x
- "
- ASCII "The resource is owned shared by %d threads
- "
- ASCII "The resource is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Critical Section Timeout (%p) in %ws:%s
- "
- ASCII "The critical section is owned by thread %x.
- "
- ASCII "Go determine why that thread has not released the critical section.
- "
- ASCII "The critical section is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Inpage error in %ws:%s
- "
- ASCII "The instruction at %p referenced memory at %p.
- "
- ASCII "This failed because of error %Ix.
- "
- ASCII "This means that the I/O device reported an I/O error. Check your hardware."
- ASCII "This means the data could not be read, typically because of a bad block on the disk. Check your hardware.
- "
- ASCII "This means the machine is out of memory. Use !vm to see where all the memory is being used.
- "
- ASCII "
- *** An Access Violation occurred in %ws:%s
- "
- ASCII "write to"
- ASCII "read from"
- ASCII "The instruction at %p tried to %s "
- ASCII "an invalid address, %p
- "
- ASCII "a NULL pointer
- "
- ASCII " *** enter .exr %p for the exception record
- "
- ASCII " *** enter .cxr %p for the context
- "
- ASCII " *** then kb to get the faulting stack
- "
- ASCII " *** Restarting wait on critsec or resource at %p (in %ws:%s)
- "
- ASCII "Trace database: failed to release segment %p
- "
- ASCII "Trace database: failing attempt to save biiiiig trace (size %u)
- "
- UNICODE "Control Panel\Desktop"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "MachineUILock"
- UNICODE "PreferredUILanguages"
- UNICODE "AlternateCodePage"
- UNICODE "WindowsExcludedProcs"
- UNICODE "Kernel-MUI-Number-Allowed"
- UNICODE "Kernel-MUI-Language-Allowed"
- UNICODE "Kernel-MUI-Language-Disallowed"
- UNICODE "Kernel-MUI-Language-SKU"
- ASCII "Entry"
- UNICODE "DefaultFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- UNICODE "Type"
- UNICODE "DefaultFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete"
- ASCII "Critical error detected %lx
- "
- UNICODE "QueryDebugInformation request"
- ASCII "RtlAllocateHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just allocated block at %p for %Ix bytes
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just allocated block at %p for 0x%Ix bytes with tag %ws
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid allocation size - %Ix (exceeded %Ix)
- "
- ASCII "RtlCompactHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid ReserveSize parameter - %Ix
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid CommitSize parameter - %Ix
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "May not specify Lock parameter with HEAP_NO_SERIALIZE
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Specified HeapBase (%p) invalid, Status = %lx
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Specified HeapBase (%p) != to BaseAddress (%p)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Specified HeapBase (%p) is free or not writable
- "
- ASCII "RtlCreateTagHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "May not destroy the process heap at %p
- "
- ASCII "RtlDestroyHeap"
- ASCII "RtlFreeHeap"
- ASCII "RtlFreeHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to free block at %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to free block at %p with tag %ws
- "
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlQueryTagHeap"
- ASCII "RtlReAllocateHeap"
- ASCII "RtlReAllocateHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to reallocate block at %p to %Ix bytes
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to rellocate block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just reallocated block at %p to %Ix bytes
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just reallocated block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid allocation size - %Ix (exceeded %Ix)
- "
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSizeHeap"
- ASCII "RtlSizeHeap"
- ASCII "RtlWalkHeap"
- ASCII "RtlZeroHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Non-Dedicated free list element %p is out of order
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "dedicated (%04Ix) free list element %p is marked busy
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Number of free blocks in arena (%ld) does not match number in the free lists (%ld)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Total size of free blocks in arena (%Id) does not match number total in heap header (%Id)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Pseudo Tag %04x size incorrect (%Ix != %Ix) %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Tag %04x (%ws) size incorrect (%Ix != %Ix) %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap %p - headers modified (%p is %lx instead of %lx)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII " This is located in the %s field of the heap header.
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p has corrupted PreviousSize (%lx)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p is not last block in segment (%p)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p has incorrect segment offset (%x)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap entry %p has incorrect PreviousSize field (%04x instead of %04x)
- "
- ASCII "HEAP: "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)
- "
- ASCII "HEAP: "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap error detected at %p (heap handle %p)
- "
- ASCII "heap_failure_internal"
- ASCII "heap_failure_unknown"
- ASCII "heap_failure_generic"
- ASCII "heap_failure_entry_corruption"
- ASCII "heap_failure_multiple_entries_corruption"
- ASCII "heap_failure_virtual_block_corruption"
- ASCII "heap_failure_buffer_overrun"
- ASCII "heap_failure_buffer_underrun"
- ASCII "heap_failure_block_not_busy"
- ASCII "heap_failure_invalid_argument"
- ASCII "heap_failure_usage_after_free"
- ASCII "heap_failure_cross_heap_operation"
- ASCII "heap_failure_freelists_corruption"
- ASCII "heap_failure_listentry_corruption"
- ASCII "heap_failure_lfh_bitmap_mismatch"
- ASCII "HEAP[%wZ]: "
- ASCII "Error code: %d - %s
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Parameter1: %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Parameter2: %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Parameter3: %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Last known valid blocks: before - %p, after - %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Stack trace available at %p
- "
- ASCII "Enabling heap debug options
- "
- UNICODE "%d"
- UNICODE "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
- UNICODE "BuildLabEx"
- ASCII "(l7"
- ASCII "(l7"
- ASCII ".sb_data"
- ASCII "*** RESCACHE: Segment %u magic field is corrupt!!! ***
- "
- ASCII "*** --------> Follow-up: avgarcia;erik;muidev ***
- "
- ASCII "*** RESCACHE: Segment %u is no longer valid. It may have been unmapped already!!! ***
- "
- ASCII "*** --------> Follow-up: avgarcia;erik;muidev ***
- "
- UNICODE "\??\%C:"
- ASCII "PE"
- UNICODE "System\CurrentControlSet\Control\CMF\LatestIndex"
- UNICODE ".init"
- UNICODE "%s%s"
- UNICODE "*.*"
- UNICODE "rc"
- UNICODE "%s\%s"
- UNICODE "CmfHits"
- UNICODE "%s%04d-%s"
- UNICODE "ResCache.hit"
- UNICODE "rc"
- UNICODE "%s\%s%04d\%s"
- UNICODE ".tmp"
- UNICODE "Upd"
- UNICODE "%s\%s%04d%s"
- UNICODE "Segment"
- UNICODE ".toc"
- UNICODE "Segment"
- UNICODE ".cmf"
- UNICODE "Directory"
- UNICODE ".init"
- UNICODE "Directory"
- UNICODE "%s%04d-%s%s"
- UNICODE ".owner"
- UNICODE "ResCache.dir"
- UNICODE ".init"
- UNICODE "rc"
- UNICODE "Global\%s/%s%04d%s"
- UNICODE ".owner"
- UNICODE "rc"
- UNICODE "%s\%s%04d"
- UNICODE "rc"
- UNICODE "%s\%s%04d\%s*%s"
- UNICODE ".owner"
- UNICODE "%s%s%d%s"
- UNICODE ".init"
- UNICODE "%s%s%d"
- UNICODE "%s\%s%d%s"
- UNICODE "%s"
- UNICODE ".owner"
- UNICODE "Global\%s/base%s"
- UNICODE "rc"
- UNICODE "%s\%s*"
- UNICODE "ResCache.ccm"
- UNICODE "ResCache.mni"
- UNICODE "ResCache.dir"
- UNICODE "%s\*\%s"
- UNICODE "ResCache.dir"
- UNICODE "Directory"
- UNICODE ".cmf"
- UNICODE "Segment"
- UNICODE "%s\%s*%s"
- UNICODE ".toc"
- UNICODE "ResCache.hit"
- UNICODE "ResCache.hit"
- UNICODE "CmfHits"
- UNICODE "ResCache.usg"
- UNICODE ".owner"
- UNICODE "wip"
- UNICODE "Global\%s%s%s"
- UNICODE "wip"
- UNICODE "%s\%s"
- UNICODE ".tmp"
- UNICODE "Upd"
- UNICODE "%s\"
- UNICODE "upd"
- UNICODE "tmp"
- UNICODE "upd"
- UNICODE "%s\%s\%s"
- UNICODE "Rdy-"
- UNICODE "Upd-"
- UNICODE "%s%s"
- UNICODE "%s\%s"
- UNICODE "%s%s"
- UNICODE ".cmf"
- UNICODE "Segment"
- UNICODE "rc"
- UNICODE "%s\%s%04d\%s%d%s"
- ASCII "ntdll.dll"
- ASCII "RtlActivateActivationContextUnsafeFast"
- ASCII "RtlDeactivateActivationContextUnsafeFast"
- ASCII "RtlInterlockedPushListSList"
- ASCII "RtlUlongByteSwap"
- ASCII "RtlUlonglongByteSwap"
- ASCII "RtlUshortByteSwap"
- ASCII "ExpInterlockedPopEntrySListEnd"
- ASCII "ExpInterlockedPopEntrySListFault"
- ASCII "ExpInterlockedPopEntrySListResume"
- ASCII "A_SHAFinal"
- ASCII "A_SHAInit"
- ASCII "A_SHAUpdate"
- ASCII "AlpcAdjustCompletionListConcurrencyCount"
- ASCII "AlpcFreeCompletionListMessage"
- ASCII "AlpcGetCompletionListLastMessageInformation"
- ASCII "AlpcGetCompletionListMessageAttributes"
- ASCII "AlpcGetHeaderSize"
- ASCII "AlpcGetMessageAttribute"
- ASCII "AlpcGetMessageFromCompletionList"
- ASCII "AlpcGetOutstandingCompletionListMessageCount"
- ASCII "AlpcInitializeMessageAttribute"
- ASCII "AlpcMaxAllowedMessageLength"
- ASCII "AlpcRegisterCompletionList"
- ASCII "AlpcRegisterCompletionListWorkerThread"
- ASCII "AlpcRundownCompletionList"
- ASCII "AlpcUnregisterCompletionList"
- ASCII "AlpcUnregisterCompletionListWorkerThread"
- ASCII "ApiSetQueryApiSetPresence"
- ASCII "CsrAllocateCaptureBuffer"
- ASCII "CsrAllocateMessagePointer"
- ASCII "CsrCaptureMessageBuffer"
- ASCII "CsrCaptureMessageMultiUnicodeStringsInPlace"
- ASCII "CsrCaptureMessageString"
- ASCII "CsrCaptureTimeout"
- ASCII "CsrClientCallServer"
- ASCII "CsrClientConnectToServer"
- ASCII "CsrFreeCaptureBuffer"
- ASCII "CsrGetProcessId"
- ASCII "CsrIdentifyAlertableThread"
- ASCII "CsrSetPriorityClass"
- ASCII "CsrVerifyRegion"
- ASCII "DbgBreakPoint"
- ASCII "DbgPrint"
- ASCII "DbgPrintEx"
- ASCII "DbgPrintReturnControlC"
- ASCII "DbgPrompt"
- ASCII "DbgQueryDebugFilterState"
- ASCII "DbgSetDebugFilterState"
- ASCII "DbgUiConnectToDbg"
- ASCII "DbgUiContinue"
- ASCII "DbgUiConvertStateChangeStructure"
- ASCII "DbgUiDebugActiveProcess"
- ASCII "DbgUiGetThreadDebugObject"
- ASCII "DbgUiIssueRemoteBreakin"
- ASCII "DbgUiRemoteBreakin"
- ASCII "DbgUiSetThreadDebugObject"
- ASCII "DbgUiStopDebugging"
- ASCII "DbgUiWaitStateChange"
- ASCII "DbgUserBreakPoint"
- ASCII "EtwCreateTraceInstanceId"
- ASCII "EtwDeliverDataBlock"
- ASCII "EtwEnumerateProcessRegGuids"
- ASCII "EtwEventActivityIdControl"
- ASCII "EtwEventEnabled"
- ASCII "EtwEventProviderEnabled"
- ASCII "EtwEventRegister"
- ASCII "EtwEventSetInformation"
- ASCII "EtwEventUnregister"
- ASCII "EtwEventWrite"
- ASCII "EtwEventWriteEndScenario"
- ASCII "EtwEventWriteEx"
- ASCII "EtwEventWriteFull"
- ASCII "EtwEventWriteNoRegistration"
- ASCII "EtwEventWriteStartScenario"
- ASCII "EtwEventWriteString"
- ASCII "EtwEventWriteTransfer"
- ASCII "EtwGetTraceEnableFlags"
- ASCII "EtwGetTraceEnableLevel"
- ASCII "EtwGetTraceLoggerHandle"
- ASCII "EtwLogTraceEvent"
- ASCII "EtwNotificationRegister"
- ASCII "EtwNotificationUnregister"
- ASCII "EtwProcessPrivateLoggerRequest"
- ASCII "EtwRegisterSecurityProvider"
- ASCII "EtwRegisterTraceGuidsA"
- ASCII "EtwRegisterTraceGuidsW"
- ASCII "EtwReplyNotification"
- ASCII "EtwSendNotification"
- ASCII "EtwSetMark"
- ASCII "EtwTraceEventInstance"
- ASCII "EtwTraceMessage"
- ASCII "EtwTraceMessageVa"
- ASCII "EtwUnregisterTraceGuids"
- ASCII "EtwWriteUMSecurityEvent"
- ASCII "EtwpCreateEtwThread"
- ASCII "EtwpGetCpuSpeed"
- ASCII "EvtIntReportAuthzEventAndSourceAsync"
- ASCII "EvtIntReportEventAndSourceAsync"
- ASCII "KiFastSystemCall"
- ASCII "KiFastSystemCallRet"
- ASCII "KiIntSystemCall"
- ASCII "KiRaiseUserExceptionDispatcher"
- ASCII "KiUserApcDispatcher"
- ASCII "KiUserCallbackDispatcher"
- ASCII "KiUserExceptionDispatcher"
- ASCII "LdrAccessResource"
- ASCII "LdrAddDllDirectory"
- ASCII "LdrAddLoadAsDataTable"
- ASCII "LdrAddRefDll"
- ASCII "LdrAppxHandleIntegrityFailure"
- ASCII "LdrDisableThreadCalloutsForDll"
- ASCII "LdrEnumResources"
- ASCII "LdrEnumerateLoadedModules"
- ASCII "LdrFindEntryForAddress"
- ASCII "LdrFindResourceDirectory_U"
- ASCII "LdrFindResourceEx_U"
- ASCII "LdrFindResource_U"
- ASCII "LdrFlushAlternateResourceModules"
- ASCII "LdrGetDllDirectory"
- ASCII "LdrGetDllFullName"
- ASCII "LdrGetDllHandle"
- ASCII "LdrGetDllHandleByMapping"
- ASCII "LdrGetDllHandleByName"
- ASCII "LdrGetDllHandleEx"
- ASCII "LdrGetDllPath"
- ASCII "LdrGetFailureData"
- ASCII "LdrGetFileNameFromLoadAsDataTable"
- ASCII "LdrGetProcedureAddress"
- ASCII "LdrGetProcedureAddressEx"
- ASCII "LdrGetProcedureAddressForCaller"
- ASCII "LdrInitShimEngineDynamic"
- ASCII "LdrInitializeThunk"
- ASCII "LdrLoadAlternateResourceModule"
- ASCII "LdrLoadAlternateResourceModuleEx"
- ASCII "LdrLoadDll"
- ASCII "LdrLockLoaderLock"
- ASCII "LdrOpenImageFileOptionsKey"
- ASCII "LdrProcessRelocationBlock"
- ASCII "LdrProcessRelocationBlockEx"
- ASCII "LdrQueryImageFileExecutionOptions"
- ASCII "LdrQueryImageFileExecutionOptionsEx"
- ASCII "LdrQueryImageFileKeyOption"
- ASCII "LdrQueryModuleServiceTags"
- ASCII "LdrQueryOptionalDelayLoadedAPI"
- ASCII "LdrQueryProcessModuleInformation"
- ASCII "LdrRegisterDllNotification"
- ASCII "LdrRemoveDllDirectory"
- ASCII "LdrRemoveLoadAsDataTable"
- ASCII "LdrResFindResource"
- ASCII "LdrResFindResourceDirectory"
- ASCII "LdrResGetRCConfig"
- ASCII "LdrResRelease"
- ASCII "LdrResSearchResource"
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "LdrResolveDelayLoadsFromDll"
- ASCII "LdrRscIsTypeExist"
- ASCII "LdrSetAppCompatDllRedirectionCallback"
- ASCII "LdrSetDefaultDllDirectories"
- ASCII "LdrSetDllDirectory"
- ASCII "LdrSetDllManifestProber"
- ASCII "LdrSetImplicitPathOptions"
- ASCII "LdrSetMUICacheType"
- ASCII "LdrShutdownProcess"
- ASCII "LdrShutdownThread"
- ASCII "LdrStandardizeSystemPath"
- ASCII "LdrSystemDllInitBlock"
- ASCII "LdrUnloadAlternateResourceModule"
- ASCII "LdrUnloadAlternateResourceModuleEx"
- ASCII "LdrUnloadDll"
- ASCII "LdrUnlockLoaderLock"
- ASCII "LdrUnregisterDllNotification"
- ASCII "LdrVerifyImageMatchesChecksum"
- ASCII "LdrVerifyImageMatchesChecksumEx"
- ASCII "LdrpResGetMappingSize"
- ASCII "LdrpResGetResourceDirectory"
- ASCII "MD4Final"
- ASCII "MD4Init"
- ASCII "MD4Update"
- ASCII "MD5Final"
- ASCII "MD5Init"
- ASCII "MD5Update"
- ASCII "NlsAnsiCodePage"
- ASCII "NlsMbCodePageTag"
- ASCII "NlsMbOemCodePageTag"
- ASCII "NtAcceptConnectPort"
- ASCII "NtAccessCheck"
- ASCII "NtAccessCheckAndAuditAlarm"
- ASCII "NtAccessCheckByType"
- ASCII "NtAccessCheckByTypeAndAuditAlarm"
- ASCII "NtAccessCheckByTypeResultList"
- ASCII "NtAccessCheckByTypeResultListAndAuditAlarm"
- ASCII "NtAccessCheckByTypeResultListAndAuditAlarmByHandle"
- ASCII "NtAddAtom"
- ASCII "NtAddAtomEx"
- ASCII "NtAddBootEntry"
- ASCII "NtAddDriverEntry"
- ASCII "NtAdjustGroupsToken"
- ASCII "NtAdjustPrivilegesToken"
- ASCII "NtAdjustTokenClaimsAndDeviceGroups"
- ASCII "NtAlertResumeThread"
- ASCII "NtAlertThread"
- ASCII "NtAlertThreadByThreadId"
- ASCII "NtAllocateLocallyUniqueId"
- ASCII "NtAllocateReserveObject"
- ASCII "NtAllocateUserPhysicalPages"
- ASCII "NtAllocateUuids"
- ASCII "NtAllocateVirtualMemory"
- ASCII "NtAlpcAcceptConnectPort"
- ASCII "NtAlpcCancelMessage"
- ASCII "NtAlpcConnectPort"
- ASCII "NtAlpcConnectPortEx"
- ASCII "NtAlpcCreatePort"
- ASCII "NtAlpcCreatePortSection"
- ASCII "NtAlpcCreateResourceReserve"
- ASCII "NtAlpcCreateSectionView"
- ASCII "NtAlpcCreateSecurityContext"
- ASCII "NtAlpcDeletePortSection"
- ASCII "NtAlpcDeleteResourceReserve"
- ASCII "NtAlpcDeleteSectionView"
- ASCII "NtAlpcDeleteSecurityContext"
- ASCII "NtAlpcDisconnectPort"
- ASCII "NtAlpcImpersonateClientOfPort"
- ASCII "NtAlpcOpenSenderProcess"
- ASCII "NtAlpcOpenSenderThread"
- ASCII "NtAlpcQueryInformation"
- ASCII "NtAlpcQueryInformationMessage"
- ASCII "NtAlpcRevokeSecurityContext"
- ASCII "NtAlpcSendWaitReceivePort"
- ASCII "NtAlpcSetInformation"
- ASCII "NtApphelpCacheControl"
- ASCII "NtAreMappedFilesTheSame"
- ASCII "NtAssignProcessToJobObject"
- ASCII "NtAssociateWaitCompletionPacket"
- ASCII "NtCallbackReturn"
- ASCII "NtCancelIoFile"
- ASCII "NtCancelIoFileEx"
- ASCII "NtCancelSynchronousIoFile"
- ASCII "NtCancelTimer2"
- ASCII "NtCancelTimer"
- ASCII "NtCancelWaitCompletionPacket"
- ASCII "NtClearEvent"
- ASCII "NtClose"
- ASCII "NtCloseObjectAuditAlarm"
- ASCII "NtCommitComplete"
- ASCII "NtCommitEnlistment"
- ASCII "NtCommitTransaction"
- ASCII "NtCompactKeys"
- ASCII "NtCompareTokens"
- ASCII "NtCompleteConnectPort"
- ASCII "NtCompressKey"
- ASCII "NtConnectPort"
- ASCII "NtContinue"
- ASCII "NtCreateDebugObject"
- ASCII "NtCreateDirectoryObject"
- ASCII "NtCreateDirectoryObjectEx"
- ASCII "NtCreateEnlistment"
- ASCII "NtCreateEvent"
- ASCII "NtCreateEventPair"
- ASCII "NtCreateFile"
- ASCII "NtCreateIRTimer"
- ASCII "NtCreateIoCompletion"
- ASCII "NtCreateJobObject"
- ASCII "NtCreateJobSet"
- ASCII "NtCreateKey"
- ASCII "NtCreateKeyTransacted"
- ASCII "NtCreateKeyedEvent"
- ASCII "NtCreateLowBoxToken"
- ASCII "NtCreateMailslotFile"
- ASCII "NtCreateMutant"
- ASCII "NtCreateNamedPipeFile"
- ASCII "NtCreatePagingFile"
- ASCII "NtCreatePort"
- ASCII "NtCreatePrivateNamespace"
- ASCII "NtCreateProcess"
- ASCII "NtCreateProcessEx"
- ASCII "NtCreateProfile"
- ASCII "NtCreateProfileEx"
- ASCII "NtCreateResourceManager"
- ASCII "NtCreateSection"
- ASCII "NtCreateSemaphore"
- ASCII "NtCreateSymbolicLinkObject"
- ASCII "NtCreateThread"
- ASCII "NtCreateThreadEx"
- ASCII "NtCreateTimer2"
- ASCII "NtCreateTimer"
- ASCII "NtCreateToken"
- ASCII "NtCreateTokenEx"
- ASCII "NtCreateTransaction"
- ASCII "NtCreateTransactionManager"
- ASCII "NtCreateUserProcess"
- ASCII "NtCreateWaitCompletionPacket"
- ASCII "NtCreateWaitablePort"
- ASCII "NtCreateWnfStateName"
- ASCII "NtCreateWorkerFactory"
- ASCII "NtCurrentTeb"
- ASCII "NtDebugActiveProcess"
- ASCII "NtDebugContinue"
- ASCII "NtDelayExecution"
- ASCII "NtDeleteAtom"
- ASCII "NtDeleteBootEntry"
- ASCII "NtDeleteDriverEntry"
- ASCII "NtDeleteFile"
- ASCII "NtDeleteKey"
- ASCII "NtDeleteObjectAuditAlarm"
- ASCII "NtDeletePrivateNamespace"
- ASCII "NtDeleteValueKey"
- ASCII "NtDeleteWnfStateData"
- ASCII "NtDeleteWnfStateName"
- ASCII "NtDeviceIoControlFile"
- ASCII "NtDisableLastKnownGood"
- ASCII "NtDisplayString"
- ASCII "NtDrawText"
- ASCII "NtDuplicateObject"
- ASCII "NtDuplicateToken"
- ASCII "NtEnableLastKnownGood"
- ASCII "NtEnumerateBootEntries"
- ASCII "NtEnumerateDriverEntries"
- ASCII "NtEnumerateKey"
- ASCII "NtEnumerateSystemEnvironmentValuesEx"
- ASCII "NtEnumerateTransactionObject"
- ASCII "NtEnumerateValueKey"
- ASCII "NtExtendSection"
- ASCII "NtFilterBootOption"
- ASCII "NtFilterToken"
- ASCII "NtFilterTokenEx"
- ASCII "NtFindAtom"
- ASCII "NtFlushBuffersFile"
- ASCII "NtFlushBuffersFileEx"
- ASCII "NtFlushInstallUILanguage"
- ASCII "NtFlushInstructionCache"
- ASCII "NtFlushKey"
- ASCII "NtFlushProcessWriteBuffers"
- ASCII "NtFlushVirtualMemory"
- ASCII "NtFlushWriteBuffer"
- ASCII "NtFreeUserPhysicalPages"
- ASCII "NtFreeVirtualMemory"
- ASCII "NtFreezeRegistry"
- ASCII "NtFreezeTransactions"
- ASCII "NtFsControlFile"
- ASCII "NtGetCachedSigningLevel"
- ASCII "NtGetCompleteWnfStateSubscription"
- ASCII "NtGetContextThread"
- ASCII "NtGetCurrentProcessorNumber"
- ASCII "NtGetDevicePowerState"
- ASCII "NtGetMUIRegistryInfo"
- ASCII "NtGetNextProcess"
- ASCII "NtGetNextThread"
- ASCII "NtGetNlsSectionPtr"
- ASCII "NtGetNotificationResourceManager"
- ASCII "NtGetTickCount"
- ASCII "NtGetWriteWatch"
- ASCII "NtImpersonateAnonymousToken"
- ASCII "NtImpersonateClientOfPort"
- ASCII "NtImpersonateThread"
- ASCII "NtInitializeNlsFiles"
- ASCII "NtInitializeRegistry"
- ASCII "NtInitiatePowerAction"
- ASCII "NtIsProcessInJob"
- ASCII "NtIsSystemResumeAutomatic"
- ASCII "NtIsUILanguageComitted"
- ASCII "NtListenPort"
- ASCII "NtLoadDriver"
- ASCII "NtLoadKey2"
- ASCII "NtLoadKey"
- ASCII "NtLoadKeyEx"
- ASCII "NtLockFile"
- ASCII "NtLockProductActivationKeys"
- ASCII "NtLockRegistryKey"
- ASCII "NtLockVirtualMemory"
- ASCII "NtMakePermanentObject"
- ASCII "NtMakeTemporaryObject"
- ASCII "NtMapCMFModule"
- ASCII "NtMapUserPhysicalPages"
- ASCII "NtMapUserPhysicalPagesScatter"
- ASCII "NtMapViewOfSection"
- ASCII "NtModifyBootEntry"
- ASCII "NtModifyDriverEntry"
- ASCII "NtNotifyChangeDirectoryFile"
- ASCII "NtNotifyChangeKey"
- ASCII "NtNotifyChangeMultipleKeys"
- ASCII "NtNotifyChangeSession"
- ASCII "NtOpenDirectoryObject"
- ASCII "NtOpenEnlistment"
- ASCII "NtOpenEvent"
- ASCII "NtOpenEventPair"
- ASCII "NtOpenFile"
- ASCII "NtOpenIoCompletion"
- ASCII "NtOpenJobObject"
- ASCII "NtOpenKey"
- ASCII "NtOpenKeyEx"
- ASCII "NtOpenKeyTransacted"
- ASCII "NtOpenKeyTransactedEx"
- ASCII "NtOpenKeyedEvent"
- ASCII "NtOpenMutant"
- ASCII "NtOpenObjectAuditAlarm"
- ASCII "NtOpenPrivateNamespace"
- ASCII "NtOpenProcess"
- ASCII "NtOpenProcessToken"
- ASCII "NtOpenProcessTokenEx"
- ASCII "NtOpenResourceManager"
- ASCII "NtOpenSection"
- ASCII "NtOpenSemaphore"
- ASCII "NtOpenSession"
- ASCII "NtOpenSymbolicLinkObject"
- ASCII "NtOpenThread"
- ASCII "NtOpenThreadToken"
- ASCII "NtOpenThreadTokenEx"
- ASCII "NtOpenTimer"
- ASCII "NtOpenTransaction"
- ASCII "NtOpenTransactionManager"
- ASCII "NtPlugPlayControl"
- ASCII "NtPowerInformation"
- ASCII "NtPrePrepareComplete"
- ASCII "NtPrePrepareEnlistment"
- ASCII "NtPrepareComplete"
- ASCII "NtPrepareEnlistment"
- ASCII "NtPrivilegeCheck"
- ASCII "NtPrivilegeObjectAuditAlarm"
- ASCII "NtPrivilegedServiceAuditAlarm"
- ASCII "NtPropagationComplete"
- ASCII "NtPropagationFailed"
- ASCII "NtProtectVirtualMemory"
- ASCII "NtPulseEvent"
- ASCII "NtQueryAttributesFile"
- ASCII "NtQueryBootEntryOrder"
- ASCII "NtQueryBootOptions"
- ASCII "NtQueryDebugFilterState"
- ASCII "NtQueryDefaultLocale"
- ASCII "NtQueryDefaultUILanguage"
- ASCII "NtQueryDirectoryFile"
- ASCII "NtQueryDirectoryObject"
- ASCII "NtQueryDriverEntryOrder"
- ASCII "NtQueryEaFile"
- ASCII "NtQueryEvent"
- ASCII "NtQueryFullAttributesFile"
- ASCII "NtQueryInformationAtom"
- ASCII "NtQueryInformationEnlistment"
- ASCII "NtQueryInformationFile"
- ASCII "NtQueryInformationJobObject"
- ASCII "NtQueryInformationPort"
- ASCII "NtQueryInformationProcess"
- ASCII "NtQueryInformationResourceManager"
- ASCII "NtQueryInformationThread"
- ASCII "NtQueryInformationToken"
- ASCII "NtQueryInformationTransaction"
- ASCII "NtQueryInformationTransactionManager"
- ASCII "NtQueryInformationWorkerFactory"
- ASCII "NtQueryInstallUILanguage"
- ASCII "NtQueryIntervalProfile"
- ASCII "NtQueryIoCompletion"
- ASCII "NtQueryKey"
- ASCII "NtQueryLicenseValue"
- ASCII "NtQueryMultipleValueKey"
- ASCII "NtQueryMutant"
- ASCII "NtQueryObject"
- ASCII "NtQueryOpenSubKeys"
- ASCII "NtQueryOpenSubKeysEx"
- ASCII "NtQueryPerformanceCounter"
- ASCII "NtQueryPortInformationProcess"
- ASCII "NtQueryQuotaInformationFile"
- ASCII "NtQuerySection"
- ASCII "NtQuerySecurityAttributesToken"
- ASCII "NtQuerySecurityObject"
- ASCII "NtQuerySemaphore"
- ASCII "NtQuerySymbolicLinkObject"
- ASCII "NtQuerySystemEnvironmentValue"
- ASCII "NtQuerySystemEnvironmentValueEx"
- ASCII "NtQuerySystemInformation"
- ASCII "NtQuerySystemInformationEx"
- ASCII "NtQuerySystemTime"
- ASCII "NtQueryTimer"
- ASCII "NtQueryTimerResolution"
- ASCII "NtQueryValueKey"
- ASCII "NtQueryVirtualMemory"
- ASCII "NtQueryVolumeInformationFile"
- ASCII "NtQueryWnfStateData"
- ASCII "NtQueryWnfStateNameInformation"
- ASCII "NtQueueApcThread"
- ASCII "NtQueueApcThreadEx"
- ASCII "NtRaiseException"
- ASCII "NtRaiseHardError"
- ASCII "NtReadFile"
- ASCII "NtReadFileScatter"
- ASCII "NtReadOnlyEnlistment"
- ASCII "NtReadRequestData"
- ASCII "NtReadVirtualMemory"
- ASCII "NtRecoverEnlistment"
- ASCII "NtRecoverResourceManager"
- ASCII "NtRecoverTransactionManager"
- ASCII "NtRegisterProtocolAddressInformation"
- ASCII "NtRegisterThreadTerminatePort"
- ASCII "NtReleaseKeyedEvent"
- ASCII "NtReleaseMutant"
- ASCII "NtReleaseSemaphore"
- ASCII "NtReleaseWorkerFactoryWorker"
- ASCII "NtRemoveIoCompletion"
- ASCII "NtRemoveIoCompletionEx"
- ASCII "NtRemoveProcessDebug"
- ASCII "NtRenameKey"
- ASCII "NtRenameTransactionManager"
- ASCII "NtReplaceKey"
- ASCII "NtReplacePartitionUnit"
- ASCII "NtReplyPort"
- ASCII "NtReplyWaitReceivePort"
- ASCII "NtReplyWaitReceivePortEx"
- ASCII "NtReplyWaitReplyPort"
- ASCII "NtRequestPort"
- ASCII "NtRequestWaitReplyPort"
- ASCII "NtResetEvent"
- ASCII "NtResetWriteWatch"
- ASCII "NtRestoreKey"
- ASCII "NtResumeProcess"
- ASCII "NtResumeThread"
- ASCII "NtRollbackComplete"
- ASCII "NtRollbackEnlistment"
- ASCII "NtRollbackTransaction"
- ASCII "NtRollforwardTransactionManager"
- ASCII "NtSaveKey"
- ASCII "NtSaveKeyEx"
- ASCII "NtSaveMergedKeys"
- ASCII "NtSecureConnectPort"
- ASCII "NtSerializeBoot"
- ASCII "NtSetBootEntryOrder"
- ASCII "NtSetBootOptions"
- ASCII "NtSetCachedSigningLevel"
- ASCII "NtSetContextThread"
- ASCII "NtSetDebugFilterState"
- ASCII "NtSetDefaultHardErrorPort"
- ASCII "NtSetDefaultLocale"
- ASCII "NtSetDefaultUILanguage"
- ASCII "NtSetDriverEntryOrder"
- ASCII "NtSetEaFile"
- ASCII "NtSetEvent"
- ASCII "NtSetEventBoostPriority"
- ASCII "NtSetHighEventPair"
- ASCII "NtSetHighWaitLowEventPair"
- ASCII "NtSetIRTimer"
- ASCII "NtSetInformationDebugObject"
- ASCII "NtSetInformationEnlistment"
- ASCII "NtSetInformationFile"
- ASCII "NtSetInformationJobObject"
- ASCII "NtSetInformationKey"
- ASCII "NtSetInformationObject"
- ASCII "NtSetInformationProcess"
- ASCII "NtSetInformationResourceManager"
- ASCII "NtSetInformationThread"
- ASCII "NtSetInformationToken"
- ASCII "NtSetInformationTransaction"
- ASCII "NtSetInformationTransactionManager"
- ASCII "NtSetInformationVirtualMemory"
- ASCII "NtSetInformationWorkerFactory"
- ASCII "NtSetIntervalProfile"
- ASCII "NtSetIoCompletion"
- ASCII "NtSetIoCompletionEx"
- ASCII "NtSetLdtEntries"
- ASCII "NtSetLowEventPair"
- ASCII "NtSetLowWaitHighEventPair"
- ASCII "NtSetQuotaInformationFile"
- ASCII "NtSetSecurityObject"
- ASCII "NtSetSystemEnvironmentValue"
- ASCII "NtSetSystemEnvironmentValueEx"
- ASCII "NtSetSystemInformation"
- ASCII "NtSetSystemPowerState"
- ASCII "NtSetSystemTime"
- ASCII "NtSetThreadExecutionState"
- ASCII "NtSetTimer2"
- ASCII "NtSetTimer"
- ASCII "NtSetTimerEx"
- ASCII "NtSetTimerResolution"
- ASCII "NtSetUuidSeed"
- ASCII "NtSetValueKey"
- ASCII "NtSetVolumeInformationFile"
- ASCII "NtSetWnfProcessNotificationEvent"
- ASCII "NtShutdownSystem"
- ASCII "NtShutdownWorkerFactory"
- ASCII "NtSignalAndWaitForSingleObject"
- ASCII "NtSinglePhaseReject"
- ASCII "NtStartProfile"
- ASCII "NtStopProfile"
- ASCII "NtSubscribeWnfStateChange"
- ASCII "NtSuspendProcess"
- ASCII "NtSuspendThread"
- ASCII "NtSystemDebugControl"
- ASCII "NtTerminateJobObject"
- ASCII "NtTerminateProcess"
- ASCII "NtTerminateThread"
- ASCII "NtTestAlert"
- ASCII "NtThawRegistry"
- ASCII "NtThawTransactions"
- ASCII "NtTraceControl"
- ASCII "NtTraceEvent"
- ASCII "NtTranslateFilePath"
- ASCII "NtUmsThreadYield"
- ASCII "NtUnloadDriver"
- ASCII "NtUnloadKey2"
- ASCII "NtUnloadKey"
- ASCII "NtUnloadKeyEx"
- ASCII "NtUnlockFile"
- ASCII "NtUnlockVirtualMemory"
- ASCII "NtUnmapViewOfSection"
- ASCII "NtUnmapViewOfSectionEx"
- ASCII "NtUnsubscribeWnfStateChange"
- ASCII "NtUpdateWnfStateData"
- ASCII "NtVdmControl"
- ASCII "NtWaitForAlertByThreadId"
- ASCII "NtWaitForDebugEvent"
- ASCII "NtWaitForKeyedEvent"
- ASCII "NtWaitForMultipleObjects32"
- ASCII "NtWaitForMultipleObjects"
- ASCII "NtWaitForSingleObject"
- ASCII "NtWaitForWorkViaWorkerFactory"
- ASCII "NtWaitHighEventPair"
- ASCII "NtWaitLowEventPair"
- ASCII "NtWorkerFactoryWorkerReady"
- ASCII "NtWriteFile"
- ASCII "NtWriteFileGather"
- ASCII "NtWriteRequestData"
- ASCII "NtWriteVirtualMemory"
- ASCII "NtYieldExecution"
- ASCII "NtdllDefWindowProc_A"
- ASCII "NtdllDefWindowProc_W"
- ASCII "NtdllDialogWndProc_A"
- ASCII "NtdllDialogWndProc_W"
- ASCII "PfxFindPrefix"
- ASCII "PfxInitialize"
- ASCII "PfxInsertPrefix"
- ASCII "PfxRemovePrefix"
- ASCII "PssNtCaptureSnapshot"
- ASCII "PssNtDuplicateSnapshot"
- ASCII "PssNtFreeRemoteSnapshot"
- ASCII "PssNtFreeSnapshot"
- ASCII "PssNtFreeWalkMarker"
- ASCII "PssNtQuerySnapshot"
- ASCII "PssNtValidateDescriptor"
- ASCII "PssNtWalkSnapshot"
- ASCII "RtlAbortRXact"
- ASCII "RtlAbsoluteToSelfRelativeSD"
- ASCII "RtlAcquirePebLock"
- ASCII "RtlAcquirePrivilege"
- ASCII "RtlAcquireReleaseSRWLockExclusive"
- ASCII "RtlAcquireResourceExclusive"
- ASCII "RtlAcquireResourceShared"
- ASCII "RtlAcquireSRWLockExclusive"
- ASCII "RtlAcquireSRWLockShared"
- ASCII "RtlActivateActivationContext"
- ASCII "RtlActivateActivationContextEx"
- ASCII "RtlAddAccessAllowedAce"
- ASCII "RtlAddAccessAllowedAceEx"
- ASCII "RtlAddAccessAllowedObjectAce"
- ASCII "RtlAddAccessDeniedAce"
- ASCII "RtlAddAccessDeniedAceEx"
- ASCII "RtlAddAccessDeniedObjectAce"
- ASCII "RtlAddAce"
- ASCII "RtlAddActionToRXact"
- ASCII "RtlAddAtomToAtomTable"
- ASCII "RtlAddAttributeActionToRXact"
- ASCII "RtlAddAuditAccessAce"
- ASCII "RtlAddAuditAccessAceEx"
- ASCII "RtlAddAuditAccessObjectAce"
- ASCII "RtlAddCompoundAce"
- ASCII "RtlAddIntegrityLabelToBoundaryDescriptor"
- ASCII "RtlAddMandatoryAce"
- ASCII "RtlAddProcessTrustLabelAce"
- ASCII "RtlAddRefActivationContext"
- ASCII "RtlAddRefMemoryStream"
- ASCII "RtlAddResourceAttributeAce"
- ASCII "RtlAddSIDToBoundaryDescriptor"
- ASCII "RtlAddScopedPolicyIDAce"
- ASCII "RtlAddVectoredContinueHandler"
- ASCII "RtlAddVectoredExceptionHandler"
- ASCII "RtlAddressInSectionTable"
- ASCII "RtlAdjustPrivilege"
- ASCII "RtlAllocateActivationContextStack"
- ASCII "RtlAllocateAndInitializeSid"
- ASCII "RtlAllocateAndInitializeSidEx"
- ASCII "RtlAllocateHandle"
- ASCII "RtlAllocateHeap"
- ASCII "RtlAllocateMemoryBlockLookaside"
- ASCII "RtlAllocateMemoryZone"
- ASCII "RtlAllocateWnfSerializationGroup"
- ASCII "RtlAnsiCharToUnicodeChar"
- ASCII "RtlAnsiStringToUnicodeSize"
- ASCII "RtlAnsiStringToUnicodeString"
- ASCII "RtlAppendAsciizToString"
- ASCII "RtlAppendPathElement"
- ASCII "RtlAppendStringToString"
- ASCII "RtlAppendUnicodeStringToString"
- ASCII "RtlAppendUnicodeToString"
- ASCII "RtlApplicationVerifierStop"
- ASCII "RtlApplyRXact"
- ASCII "RtlApplyRXactNoFlush"
- ASCII "RtlAppxIsFileOwnedByTrustedInstaller"
- ASCII "RtlAreAllAccessesGranted"
- ASCII "RtlAreAnyAccessesGranted"
- ASCII "RtlAreBitsClear"
- ASCII "RtlAreBitsSet"
- ASCII "RtlAssert"
- ASCII "RtlAvlInsertNodeEx"
- ASCII "RtlAvlRemoveNode"
- ASCII "RtlBarrier"
- ASCII "RtlBarrierForDelete"
- ASCII "RtlCancelTimer"
- ASCII "RtlCanonicalizeDomainName"
- ASCII "RtlCaptureContext"
- ASCII "RtlCaptureStackBackTrace"
- ASCII "RtlCaptureStackContext"
- ASCII "RtlCharToInteger"
- ASCII "RtlCheckForOrphanedCriticalSections"
- ASCII "RtlCheckPortableOperatingSystem"
- ASCII "RtlCheckRegistryKey"
- ASCII "RtlCheckTokenCapability"
- ASCII "RtlCheckTokenMembership"
- ASCII "RtlCheckTokenMembershipEx"
- ASCII "RtlCleanUpTEBLangLists"
- ASCII "RtlClearAllBits"
- ASCII "RtlClearBit"
- ASCII "RtlClearBits"
- ASCII "RtlCloneMemoryStream"
- ASCII "RtlCloneUserProcess"
- ASCII "RtlCmDecodeMemIoResource"
- ASCII "RtlCmEncodeMemIoResource"
- ASCII "RtlCommitDebugInfo"
- ASCII "RtlCommitMemoryStream"
- ASCII "RtlCompactHeap"
- ASCII "RtlCompareAltitudes"
- ASCII "RtlCompareMemory"
- ASCII "RtlCompareMemoryUlong"
- ASCII "RtlCompareString"
- ASCII "RtlCompareUnicodeString"
- ASCII "RtlCompareUnicodeStrings"
- ASCII "RtlCompressBuffer"
- ASCII "RtlComputeCrc32"
- ASCII "RtlComputeImportTableHash"
- ASCII "RtlComputePrivatizedDllName_U"
- ASCII "RtlConnectToSm"
- ASCII "RtlConsoleMultiByteToUnicodeN"
- ASCII "RtlContractHashTable"
- ASCII "RtlConvertExclusiveToShared"
- ASCII "RtlConvertLCIDToString"
- ASCII "RtlConvertLongToLargeInteger"
- ASCII "RtlConvertSharedToExclusive"
- ASCII "RtlConvertSidToUnicodeString"
- ASCII "RtlConvertToAutoInheritSecurityObject"
- ASCII "RtlConvertUlongToLargeInteger"
- ASCII "RtlCopyBitMap"
- ASCII "RtlCopyContext"
- ASCII "RtlCopyExtendedContext"
- ASCII "RtlCopyLuid"
- ASCII "RtlCopyLuidAndAttributesArray"
- ASCII "RtlCopyMappedMemory"
- ASCII "RtlCopyMemoryStreamTo"
- ASCII "RtlCopyOutOfProcessMemoryStreamTo"
- ASCII "RtlCopySecurityDescriptor"
- ASCII "RtlCopySid"
- ASCII "RtlCopySidAndAttributesArray"
- ASCII "RtlCopyString"
- ASCII "RtlCopyUnicodeString"
- ASCII "RtlCrc32"
- ASCII "RtlCrc64"
- ASCII "RtlCreateAcl"
- ASCII "RtlCreateActivationContext"
- ASCII "RtlCreateAndSetSD"
- ASCII "RtlCreateAtomTable"
- ASCII "RtlCreateBootStatusDataFile"
- ASCII "RtlCreateBoundaryDescriptor"
- ASCII "RtlCreateEnvironment"
- ASCII "RtlCreateEnvironmentEx"
- ASCII "RtlCreateHashTable"
- ASCII "RtlCreateHashTableEx"
- ASCII "RtlCreateHeap"
- ASCII "RtlCreateMemoryBlockLookaside"
- ASCII "RtlCreateMemoryZone"
- ASCII "RtlCreateProcessParameters"
- ASCII "RtlCreateProcessParametersEx"
- ASCII "RtlCreateProcessReflection"
- ASCII "RtlCreateQueryDebugBuffer"
- ASCII "RtlCreateRegistryKey"
- ASCII "RtlCreateSecurityDescriptor"
- ASCII "RtlCreateServiceSid"
- ASCII "RtlCreateSystemVolumeInformationFolder"
- ASCII "RtlCreateTagHeap"
- ASCII "RtlCreateTimer"
- ASCII "RtlCreateTimerQueue"
- ASCII "RtlCreateUnicodeString"
- ASCII "RtlCreateUnicodeStringFromAsciiz"
- ASCII "RtlCreateUserProcess"
- ASCII "RtlCreateUserSecurityObject"
- ASCII "RtlCreateUserStack"
- ASCII "RtlCreateUserThread"
- ASCII "RtlCreateVirtualAccountSid"
- ASCII "RtlCultureNameToLCID"
- ASCII "RtlCustomCPToUnicodeN"
- ASCII "RtlCutoverTimeToSystemTime"
- ASCII "RtlDeCommitDebugInfo"
- ASCII "RtlDeNormalizeProcessParams"
- ASCII "RtlDeactivateActivationContext"
- ASCII "RtlDebugPrintTimes"
- ASCII "RtlDecodePointer"
- ASCII "RtlDecodeSystemPointer"
- ASCII "RtlDecompressBuffer"
- ASCII "RtlDecompressBufferEx"
- ASCII "RtlDecompressFragment"
- ASCII "RtlDefaultNpAcl"
- ASCII "RtlDelete"
- ASCII "RtlDeleteAce"
- ASCII "RtlDeleteAtomFromAtomTable"
- ASCII "RtlDeleteBarrier"
- ASCII "RtlDeleteBoundaryDescriptor"
- ASCII "RtlDeleteCriticalSection"
- ASCII "RtlDeleteElementGenericTable"
- ASCII "RtlDeleteElementGenericTableAvl"
- ASCII "RtlDeleteElementGenericTableAvlEx"
- ASCII "RtlDeleteHashTable"
- ASCII "RtlDeleteNoSplay"
- ASCII "RtlDeleteRegistryValue"
- ASCII "RtlDeleteResource"
- ASCII "RtlDeleteSecurityObject"
- ASCII "RtlDeleteTimer"
- ASCII "RtlDeleteTimerQueue"
- ASCII "RtlDeleteTimerQueueEx"
- ASCII "RtlDeregisterSecureMemoryCacheCallback"
- ASCII "RtlDeregisterWait"
- ASCII "RtlDeregisterWaitEx"
- ASCII "RtlDestroyAtomTable"
- ASCII "RtlDestroyEnvironment"
- ASCII "RtlDestroyHandleTable"
- ASCII "RtlDestroyHeap"
- ASCII "RtlDestroyMemoryBlockLookaside"
- ASCII "RtlDestroyMemoryZone"
- ASCII "RtlDestroyProcessParameters"
- ASCII "RtlDestroyQueryDebugBuffer"
- ASCII "RtlDetectHeapLeaks"
- ASCII "RtlDetermineDosPathNameType_U"
- ASCII "RtlDisableThreadProfiling"
- ASCII "RtlDllShutdownInProgress"
- ASCII "RtlDnsHostNameToComputerName"
- ASCII "RtlDoesFileExists_U"
- ASCII "RtlDosApplyFileIsolationRedirection_Ustr"
- ASCII "RtlDosPathNameToNtPathName_U"
- ASCII "RtlDosPathNameToNtPathName_U_WithStatus"
- ASCII "RtlDosPathNameToRelativeNtPathName_U"
- ASCII "RtlDosPathNameToRelativeNtPathName_U_WithStatus"
- ASCII "RtlDosSearchPath_U"
- ASCII "RtlDosSearchPath_Ustr"
- ASCII "RtlDowncaseUnicodeChar"
- ASCII "RtlDowncaseUnicodeString"
- ASCII "RtlDumpResource"
- ASCII "RtlDuplicateUnicodeString"
- ASCII "RtlEmptyAtomTable"
- ASCII "RtlEnableEarlyCriticalSectionEventCreation"
- ASCII "RtlEnableThreadProfiling"
- ASCII "RtlEncodePointer"
- ASCII "RtlEncodeSystemPointer"
- ASCII "RtlEndEnumerationHashTable"
- ASCII "RtlEndWeakEnumerationHashTable"
- ASCII "RtlEnlargedIntegerMultiply"
- ASCII "RtlEnlargedUnsignedMultiply"
- ASCII "RtlEnterCriticalSection"
- ASCII "RtlEnumProcessHeaps"
- ASCII "RtlEnumerateEntryHashTable"
- ASCII "RtlEnumerateGenericTable"
- ASCII "RtlEnumerateGenericTableAvl"
- ASCII "RtlEnumerateGenericTableLikeADirectory"
- ASCII "RtlEnumerateGenericTableWithoutSplaying"
- ASCII "RtlEnumerateGenericTableWithoutSplayingAvl"
- ASCII "RtlEqualComputerName"
- ASCII "RtlEqualDomainName"
- ASCII "RtlEqualLuid"
- ASCII "RtlEqualPrefixSid"
- ASCII "RtlEqualSid"
- ASCII "RtlEqualString"
- ASCII "RtlEqualUnicodeString"
- ASCII "RtlEqualWnfChangeStamps"
- ASCII "RtlEraseUnicodeString"
- ASCII "RtlEthernetAddressToStringA"
- ASCII "RtlEthernetAddressToStringW"
- ASCII "RtlEthernetStringToAddressA"
- ASCII "RtlEthernetStringToAddressW"
- ASCII "RtlExitUserProcess"
- ASCII "RtlExitUserThread"
- ASCII "RtlExpandEnvironmentStrings"
- ASCII "RtlExpandEnvironmentStrings_U"
- ASCII "RtlExpandHashTable"
- ASCII "RtlExtendMemoryBlockLookaside"
- ASCII "RtlExtendMemoryZone"
- ASCII "RtlExtendedIntegerMultiply"
- ASCII "RtlExtendedLargeIntegerDivide"
- ASCII "RtlExtendedMagicDivide"
- ASCII "RtlExtractBitMap"
- ASCII "RtlFillMemory"
- ASCII "RtlFillMemoryUlong"
- ASCII "RtlFillMemoryUlonglong"
- ASCII "RtlFinalReleaseOutOfProcessMemoryStream"
- ASCII "RtlFindAceByType"
- ASCII "RtlFindActivationContextSectionGuid"
- ASCII "RtlFindActivationContextSectionString"
- ASCII "RtlFindCharInUnicodeString"
- ASCII "RtlFindClearBits"
- ASCII "RtlFindClearBitsAndSet"
- ASCII "RtlFindClearRuns"
- ASCII "RtlFindClosestEncodableLength"
- ASCII "RtlFindLastBackwardRunClear"
- ASCII "RtlFindLeastSignificantBit"
- ASCII "RtlFindLongestRunClear"
- ASCII "RtlFindMessage"
- ASCII "RtlFindMostSignificantBit"
- ASCII "RtlFindNextForwardRunClear"
- ASCII "RtlFindSetBits"
- ASCII "RtlFindSetBitsAndClear"
- ASCII "RtlFirstEntrySList"
- ASCII "RtlFirstFreeAce"
- ASCII "RtlFlsAlloc"
- ASCII "RtlFlsFree"
- ASCII "RtlFlushHeaps"
- ASCII "RtlFlushSecureMemoryCache"
- ASCII "RtlFormatCurrentUserKeyPath"
- ASCII "RtlFormatMessage"
- ASCII "RtlFormatMessageEx"
- ASCII "RtlFreeActivationContextStack"
- ASCII "RtlFreeAnsiString"
- ASCII "RtlFreeHandle"
- ASCII "RtlFreeHeap"
- ASCII "RtlFreeMemoryBlockLookaside"
- ASCII "RtlFreeOemString"
- ASCII "RtlFreeSid"
- ASCII "RtlFreeThreadActivationContextStack"
- ASCII "RtlFreeUnicodeString"
- ASCII "RtlFreeUserStack"
- ASCII "RtlGUIDFromString"
- ASCII "RtlGenerate8dot3Name"
- ASCII "RtlGetAce"
- ASCII "RtlGetActiveActivationContext"
- ASCII "RtlGetAppContainerNamedObjectPath"
- ASCII "RtlGetAppContainerParent"
- ASCII "RtlGetAppContainerSidType"
- ASCII "RtlGetCallersAddress"
- ASCII "RtlGetCompressionWorkSpaceSize"
- ASCII "RtlGetControlSecurityDescriptor"
- ASCII "RtlGetCriticalSectionRecursionCount"
- ASCII "RtlGetCurrentDirectory_U"
- ASCII "RtlGetCurrentPeb"
- ASCII "RtlGetCurrentProcessorNumber"
- ASCII "RtlGetCurrentProcessorNumberEx"
- ASCII "RtlGetCurrentTransaction"
- ASCII "RtlGetDaclSecurityDescriptor"
- ASCII "RtlGetElementGenericTable"
- ASCII "RtlGetElementGenericTableAvl"
- ASCII "RtlGetEnabledExtendedFeatures"
- ASCII "RtlGetExePath"
- ASCII "RtlGetExtendedContextLength"
- ASCII "RtlGetExtendedFeaturesMask"
- ASCII "RtlGetFileMUIPath"
- ASCII "RtlGetFrame"
- ASCII "RtlGetFullPathName_U"
- ASCII "RtlGetFullPathName_UEx"
- ASCII "RtlGetFullPathName_UstrEx"
- ASCII "RtlGetGroupSecurityDescriptor"
- ASCII "RtlGetIntegerAtom"
- ASCII "RtlGetLastNtStatus"
- ASCII "RtlGetLastWin32Error"
- ASCII "RtlGetLengthWithoutLastFullDosOrNtPathElement"
- ASCII "RtlGetLengthWithoutTrailingPathSeperators"
- ASCII "RtlGetLocaleFileMappingAddress"
- ASCII "RtlGetLongestNtPathLength"
- ASCII "RtlGetNativeSystemInformation"
- ASCII "RtlGetNextEntryHashTable"
- ASCII "RtlGetNtGlobalFlags"
- ASCII "RtlGetNtProductType"
- ASCII "RtlGetNtVersionNumbers"
- ASCII "RtlGetOwnerSecurityDescriptor"
- ASCII "RtlGetParentLocaleName"
- ASCII "RtlGetProcessHeaps"
- ASCII "RtlGetProcessPreferredUILanguages"
- ASCII "RtlGetProductInfo"
- ASCII "RtlGetSaclSecurityDescriptor"
- ASCII "RtlGetSearchPath"
- ASCII "RtlGetSecurityDescriptorRMControl"
- ASCII "RtlGetSetBootStatusData"
- ASCII "RtlGetSystemPreferredUILanguages"
- ASCII "RtlGetSystemTimePrecise"
- ASCII "RtlGetThreadErrorMode"
- ASCII "RtlGetThreadLangIdByIndex"
- ASCII "RtlGetThreadPreferredUILanguages"
- ASCII "RtlGetUILanguageInfo"
- ASCII "RtlGetUnloadEventTrace"
- ASCII "RtlGetUnloadEventTraceEx"
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlGetUserPreferredUILanguages"
- ASCII "RtlGetVersion"
- ASCII "RtlHashUnicodeString"
- ASCII "RtlHeapTrkInitialize"
- ASCII "RtlIdentifierAuthoritySid"
- ASCII "RtlIdnToAscii"
- ASCII "RtlIdnToNameprepUnicode"
- ASCII "RtlIdnToUnicode"
- ASCII "RtlImageDirectoryEntryToData"
- ASCII "RtlImageNtHeader"
- ASCII "RtlImageNtHeaderEx"
- ASCII "RtlImageRvaToSection"
- ASCII "RtlImageRvaToVa"
- ASCII "RtlImpersonateSelf"
- ASCII "RtlImpersonateSelfEx"
- ASCII "RtlInitAnsiString"
- ASCII "RtlInitAnsiStringEx"
- ASCII "RtlInitBarrier"
- ASCII "RtlInitCodePageTable"
- ASCII "RtlInitEnumerationHashTable"
- ASCII "RtlInitMemoryStream"
- ASCII "RtlInitNlsTables"
- ASCII "RtlInitOutOfProcessMemoryStream"
- ASCII "RtlInitString"
- ASCII "RtlInitUnicodeString"
- ASCII "RtlInitUnicodeStringEx"
- ASCII "RtlInitWeakEnumerationHashTable"
- ASCII "RtlInitializeAtomPackage"
- ASCII "RtlInitializeBitMap"
- ASCII "RtlInitializeConditionVariable"
- ASCII "RtlInitializeContext"
- ASCII "RtlInitializeCriticalSection"
- ASCII "RtlInitializeCriticalSectionAndSpinCount"
- ASCII "RtlInitializeCriticalSectionEx"
- ASCII "RtlInitializeExceptionChain"
- ASCII "RtlInitializeExtendedContext"
- ASCII "RtlInitializeGenericTable"
- ASCII "RtlInitializeGenericTableAvl"
- ASCII "RtlInitializeHandleTable"
- ASCII "RtlInitializeNtUserPfn"
- ASCII "RtlInitializeRXact"
- ASCII "RtlInitializeResource"
- ASCII "RtlInitializeSListHead"
- ASCII "RtlInitializeSRWLock"
- ASCII "RtlInitializeSid"
- ASCII "RtlInsertElementGenericTable"
- ASCII "RtlInsertElementGenericTableAvl"
- ASCII "RtlInsertElementGenericTableFull"
- ASCII "RtlInsertElementGenericTableFullAvl"
- ASCII "RtlInsertEntryHashTable"
- ASCII "RtlInt64ToUnicodeString"
- ASCII "RtlIntegerToChar"
- ASCII "RtlIntegerToUnicodeString"
- ASCII "RtlInterlockedClearBitRun"
- ASCII "RtlInterlockedCompareExchange64"
- ASCII "RtlInterlockedFlushSList"
- ASCII "RtlInterlockedPopEntrySList"
- ASCII "RtlInterlockedPushEntrySList"
- ASCII "RtlInterlockedPushListSListEx"
- ASCII "RtlInterlockedSetBitRun"
- ASCII "RtlIoDecodeMemIoResource"
- ASCII "RtlIoEncodeMemIoResource"
- ASCII "RtlIpv4AddressToStringA"
- ASCII "RtlIpv4AddressToStringExA"
- ASCII "RtlIpv4AddressToStringExW"
- ASCII "RtlIpv4AddressToStringW"
- ASCII "RtlIpv4StringToAddressA"
- ASCII "RtlIpv4StringToAddressExA"
- ASCII "RtlIpv4StringToAddressExW"
- ASCII "RtlIpv4StringToAddressW"
- ASCII "RtlIpv6AddressToStringA"
- ASCII "RtlIpv6AddressToStringExA"
- ASCII "RtlIpv6AddressToStringExW"
- ASCII "RtlIpv6AddressToStringW"
- ASCII "RtlIpv6StringToAddressA"
- ASCII "RtlIpv6StringToAddressExA"
- ASCII "RtlIpv6StringToAddressExW"
- ASCII "RtlIpv6StringToAddressW"
- ASCII "RtlIsActivationContextActive"
- ASCII "RtlIsCapabilitySid"
- ASCII "RtlIsCriticalSectionLocked"
- ASCII "RtlIsCriticalSectionLockedByThread"
- ASCII "RtlIsCurrentThreadAttachExempt"
- ASCII "RtlIsDosDeviceName_U"
- ASCII "RtlIsGenericTableEmpty"
- ASCII "RtlIsGenericTableEmptyAvl"
- ASCII "RtlIsNameInExpression"
- ASCII "RtlIsNameLegalDOS8Dot3"
- ASCII "RtlIsNormalizedString"
- ASCII "RtlIsPackageSid"
- ASCII "RtlIsParentOfChildAppContainer"
- ASCII "RtlIsTextUnicode"
- ASCII "RtlIsThreadWithinLoaderCallout"
- ASCII "RtlIsUntrustedObject"
- ASCII "RtlIsValidHandle"
- ASCII "RtlIsValidIndexHandle"
- ASCII "RtlIsValidLocaleName"
- ASCII "RtlIsValidProcessTrustLabelSid"
- ASCII "RtlKnownExceptionFilter"
- ASCII "RtlLCIDToCultureName"
- ASCII "RtlLargeIntegerAdd"
- ASCII "RtlLargeIntegerArithmeticShift"
- ASCII "RtlLargeIntegerDivide"
- ASCII "RtlLargeIntegerNegate"
- ASCII "RtlLargeIntegerShiftLeft"
- ASCII "RtlLargeIntegerShiftRight"
- ASCII "RtlLargeIntegerSubtract"
- ASCII "RtlLargeIntegerToChar"
- ASCII "RtlLcidToLocaleName"
- ASCII "RtlLeaveCriticalSection"
- ASCII "RtlLengthRequiredSid"
- ASCII "RtlLengthSecurityDescriptor"
- ASCII "RtlLengthSid"
- ASCII "RtlLengthSidAsUnicodeString"
- ASCII "RtlLoadString"
- ASCII "RtlLocalTimeToSystemTime"
- ASCII "RtlLocaleNameToLcid"
- ASCII "RtlLocateExtendedFeature"
- ASCII "RtlLocateLegacyContext"
- ASCII "RtlLockBootStatusData"
- ASCII "RtlLockCurrentThread"
- ASCII "RtlLockHeap"
- ASCII "RtlLockMemoryBlockLookaside"
- ASCII "RtlLockMemoryStreamRegion"
- ASCII "RtlLockMemoryZone"
- ASCII "RtlLockModuleSection"
- ASCII "RtlLogStackBackTrace"
- ASCII "RtlLookupAtomInAtomTable"
- ASCII "RtlLookupElementGenericTable"
- ASCII "RtlLookupElementGenericTableAvl"
- ASCII "RtlLookupElementGenericTableFull"
- ASCII "RtlLookupElementGenericTableFullAvl"
- ASCII "RtlLookupEntryHashTable"
- ASCII "RtlMakeSelfRelativeSD"
- ASCII "RtlMapGenericMask"
- ASCII "RtlMapSecurityErrorToNtStatus"
- ASCII "RtlMoveMemory"
- ASCII "RtlMultiAppendUnicodeStringBuffer"
- ASCII "RtlMultiByteToUnicodeN"
- ASCII "RtlMultiByteToUnicodeSize"
- ASCII "RtlMultipleAllocateHeap"
- ASCII "RtlMultipleFreeHeap"
- ASCII "RtlNewInstanceSecurityObject"
- ASCII "RtlNewSecurityGrantedAccess"
- ASCII "RtlNewSecurityObject"
- ASCII "RtlNewSecurityObjectEx"
- ASCII "RtlNewSecurityObjectWithMultipleInheritance"
- ASCII "RtlNormalizeProcessParams"
- ASCII "RtlNormalizeString"
- ASCII "RtlNtPathNameToDosPathName"
- ASCII "RtlNtStatusToDosError"
- ASCII "RtlNtStatusToDosErrorNoTeb"
- ASCII "RtlNumberGenericTableElements"
- ASCII "RtlNumberGenericTableElementsAvl"
- ASCII "RtlNumberOfClearBits"
- ASCII "RtlNumberOfClearBitsInRange"
- ASCII "RtlNumberOfSetBits"
- ASCII "RtlNumberOfSetBitsInRange"
- ASCII "RtlNumberOfSetBitsUlongPtr"
- ASCII "RtlOemStringToUnicodeSize"
- ASCII "RtlOemStringToUnicodeString"
- ASCII "RtlOemToUnicodeN"
- ASCII "RtlOpenCurrentUser"
- ASCII "RtlOwnerAcesPresent"
- ASCII "RtlPcToFileHeader"
- ASCII "RtlPinAtomInAtomTable"
- ASCII "RtlPopFrame"
- ASCII "RtlPrefixString"
- ASCII "RtlPrefixUnicodeString"
- ASCII "RtlProcessFlsData"
- ASCII "RtlProtectHeap"
- ASCII "RtlPublishWnfStateData"
- ASCII "RtlPushFrame"
- ASCII "RtlQueryActivationContextApplicationSettings"
- ASCII "RtlQueryAtomInAtomTable"
- ASCII "RtlQueryCriticalSectionOwner"
- ASCII "RtlQueryDepthSList"
- ASCII "RtlQueryDynamicTimeZoneInformation"
- ASCII "RtlQueryElevationFlags"
- ASCII "RtlQueryEnvironmentVariable"
- ASCII "RtlQueryEnvironmentVariable_U"
- ASCII "RtlQueryHeapInformation"
- ASCII "RtlQueryInformationAcl"
- ASCII "RtlQueryInformationActivationContext"
- ASCII "RtlQueryInformationActiveActivationContext"
- ASCII "RtlQueryInterfaceMemoryStream"
- ASCII "RtlQueryModuleInformation"
- ASCII "RtlQueryPackageIdentity"
- ASCII "RtlQueryPackageIdentityEx"
- ASCII "RtlQueryPerformanceCounter"
- ASCII "RtlQueryPerformanceFrequency"
- ASCII "RtlQueryProcessBackTraceInformation"
- ASCII "RtlQueryProcessDebugInformation"
- ASCII "RtlQueryProcessHeapInformation"
- ASCII "RtlQueryProcessLockInformation"
- ASCII "RtlQueryRegistryValues"
- ASCII "RtlQueryRegistryValuesEx"
- ASCII "RtlQueryResourcePolicy"
- ASCII "RtlQuerySecurityObject"
- ASCII "RtlQueryTagHeap"
- ASCII "RtlQueryThreadProfiling"
- ASCII "RtlQueryTimeZoneInformation"
- ASCII "RtlQueryUnbiasedInterruptTime"
- ASCII "RtlQueryValidationRunlevel"
- ASCII "RtlQueryWnfMetaNotification"
- ASCII "RtlQueryWnfStateData"
- ASCII "RtlQueryWnfStateDataWithExplicitScope"
- ASCII "RtlQueueApcWow64Thread"
- ASCII "RtlQueueWorkItem"
- ASCII "RtlRaiseException"
- ASCII "RtlRaiseStatus"
- ASCII "RtlRandom"
- ASCII "RtlRandomEx"
- ASCII "RtlRbInsertNodeEx"
- ASCII "RtlRbRemoveNode"
- ASCII "RtlReAllocateHeap"
- ASCII "RtlReadMemoryStream"
- ASCII "RtlReadOutOfProcessMemoryStream"
- ASCII "RtlReadThreadProfilingData"
- ASCII "RtlRealPredecessor"
- ASCII "RtlRealSuccessor"
- ASCII "RtlRegisterForWnfMetaNotification"
- ASCII "RtlRegisterSecureMemoryCacheCallback"
- ASCII "RtlRegisterThreadWithCsrss"
- ASCII "RtlRegisterWait"
- ASCII "RtlReleaseActivationContext"
- ASCII "RtlReleaseMemoryStream"
- ASCII "RtlReleasePath"
- ASCII "RtlReleasePebLock"
- ASCII "RtlReleasePrivilege"
- ASCII "RtlReleaseRelativeName"
- ASCII "RtlReleaseResource"
- ASCII "RtlReleaseSRWLockExclusive"
- ASCII "RtlReleaseSRWLockShared"
- ASCII "RtlRemoteCall"
- ASCII "RtlRemoveEntryHashTable"
- ASCII "RtlRemovePrivileges"
- ASCII "RtlRemoveVectoredContinueHandler"
- ASCII "RtlRemoveVectoredExceptionHandler"
- ASCII "RtlReplaceSidInSd"
- ASCII "RtlReportException"
- ASCII "RtlReportSilentProcessExit"
- ASCII "RtlReportSqmEscalation"
- ASCII "RtlResetMemoryBlockLookaside"
- ASCII "RtlResetMemoryZone"
- ASCII "RtlResetNtUserPfn"
- ASCII "RtlResetRtlTranslations"
- ASCII "RtlRestoreLastWin32Error"
- ASCII "RtlRetrieveNtUserPfn"
- ASCII "RtlRevertMemoryStream"
- ASCII "RtlRunDecodeUnicodeString"
- ASCII "RtlRunEncodeUnicodeString"
- ASCII "RtlRunOnceBeginInitialize"
- ASCII "RtlRunOnceComplete"
- ASCII "RtlRunOnceExecuteOnce"
- ASCII "RtlRunOnceInitialize"
- ASCII "RtlSecondsSince1970ToTime"
- ASCII "RtlSecondsSince1980ToTime"
- ASCII "RtlSeekMemoryStream"
- ASCII "RtlSelfRelativeToAbsoluteSD2"
- ASCII "RtlSelfRelativeToAbsoluteSD"
- ASCII "RtlSendMsgToSm"
- ASCII "RtlSetAllBits"
- ASCII "RtlSetAttributesSecurityDescriptor"
- ASCII "RtlSetBit"
- ASCII "RtlSetBits"
- ASCII "RtlSetControlSecurityDescriptor"
- ASCII "RtlSetCriticalSectionSpinCount"
- ASCII "RtlSetCurrentDirectory_U"
- ASCII "RtlSetCurrentEnvironment"
- ASCII "RtlSetCurrentTransaction"
- ASCII "RtlSetDaclSecurityDescriptor"
- ASCII "RtlSetDynamicTimeZoneInformation"
- ASCII "RtlSetEnvironmentStrings"
- ASCII "RtlSetEnvironmentVar"
- ASCII "RtlSetEnvironmentVariable"
- ASCII "RtlSetExtendedFeaturesMask"
- ASCII "RtlSetGroupSecurityDescriptor"
- ASCII "RtlSetHeapInformation"
- ASCII "RtlSetInformationAcl"
- ASCII "RtlSetIoCompletionCallback"
- ASCII "RtlSetLastWin32Error"
- ASCII "RtlSetLastWin32ErrorAndNtStatusFromNtStatus"
- ASCII "RtlSetMemoryStreamSize"
- ASCII "RtlSetOwnerSecurityDescriptor"
- ASCII "RtlSetPortableOperatingSystem"
- ASCII "RtlSetProcessDebugInformation"
- ASCII "RtlSetProcessIsCritical"
- ASCII "RtlSetProcessPreferredUILanguages"
- ASCII "RtlSetSaclSecurityDescriptor"
- ASCII "RtlSetSearchPathMode"
- ASCII "RtlSetSecurityDescriptorRMControl"
- ASCII "RtlSetSecurityObject"
- ASCII "RtlSetSecurityObjectEx"
- ASCII "RtlSetThreadErrorMode"
- ASCII "RtlSetThreadIsCritical"
- ASCII "RtlSetThreadPoolStartFunc"
- ASCII "RtlSetThreadPreferredUILanguages"
- ASCII "RtlSetTimeZoneInformation"
- ASCII "RtlSetTimer"
- ASCII "RtlSetUnhandledExceptionFilter"
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSidDominates"
- ASCII "RtlSidDominatesForTrust"
- ASCII "RtlSidEqualLevel"
- ASCII "RtlSidHashInitialize"
- ASCII "RtlSidHashLookup"
- ASCII "RtlSidIsHigherLevel"
- ASCII "RtlSizeHeap"
- ASCII "RtlSleepConditionVariableCS"
- ASCII "RtlSleepConditionVariableSRW"
- ASCII "RtlSplay"
- ASCII "RtlStartRXact"
- ASCII "RtlStatMemoryStream"
- ASCII "RtlStringFromGUID"
- ASCII "RtlStringFromGUIDEx"
- ASCII "RtlSubAuthorityCountSid"
- ASCII "RtlSubAuthoritySid"
- ASCII "RtlSubscribeWnfStateChangeNotification"
- ASCII "RtlSubtreePredecessor"
- ASCII "RtlSubtreeSuccessor"
- ASCII "RtlSystemTimeToLocalTime"
- ASCII "RtlTestAndPublishWnfStateData"
- ASCII "RtlTestBit"
- ASCII "RtlTestProtectedAccess"
- ASCII "RtlTimeFieldsToTime"
- ASCII "RtlTimeToElapsedTimeFields"
- ASCII "RtlTimeToSecondsSince1970"
- ASCII "RtlTimeToSecondsSince1980"
- ASCII "RtlTimeToTimeFields"
- ASCII "RtlTraceDatabaseAdd"
- ASCII "RtlTraceDatabaseCreate"
- ASCII "RtlTraceDatabaseDestroy"
- ASCII "RtlTraceDatabaseEnumerate"
- ASCII "RtlTraceDatabaseFind"
- ASCII "RtlTraceDatabaseLock"
- ASCII "RtlTraceDatabaseUnlock"
- ASCII "RtlTraceDatabaseValidate"
- ASCII "RtlTryAcquirePebLock"
- ASCII "RtlTryAcquireSRWLockExclusive"
- ASCII "RtlTryAcquireSRWLockShared"
- ASCII "RtlTryConvertSRWLockSharedToExclusiveOrRelease"
- ASCII "RtlTryEnterCriticalSection"
- ASCII "RtlUTF8ToUnicodeN"
- ASCII "RtlUnhandledExceptionFilter2"
- ASCII "RtlUnhandledExceptionFilter"
- ASCII "RtlUnicodeStringToAnsiSize"
- ASCII "RtlUnicodeStringToAnsiString"
- ASCII "RtlUnicodeStringToCountedOemString"
- ASCII "RtlUnicodeStringToInteger"
- ASCII "RtlUnicodeStringToOemSize"
- ASCII "RtlUnicodeStringToOemString"
- ASCII "RtlUnicodeToCustomCPN"
- ASCII "RtlUnicodeToMultiByteN"
- ASCII "RtlUnicodeToMultiByteSize"
- ASCII "RtlUnicodeToOemN"
- ASCII "RtlUnicodeToUTF8N"
- ASCII "RtlUniform"
- ASCII "RtlUnlockBootStatusData"
- ASCII "RtlUnlockCurrentThread"
- ASCII "RtlUnlockHeap"
- ASCII "RtlUnlockMemoryBlockLookaside"
- ASCII "RtlUnlockMemoryStreamRegion"
- ASCII "RtlUnlockMemoryZone"
- ASCII "RtlUnlockModuleSection"
- ASCII "RtlUnsubscribeWnfNotificationWaitForCompletion"
- ASCII "RtlUnsubscribeWnfNotificationWithCompletionCallback"
- ASCII "RtlUnsubscribeWnfStateChangeNotification"
- ASCII "RtlUnwind"
- ASCII "RtlUpcaseUnicodeChar"
- ASCII "RtlUpcaseUnicodeString"
- ASCII "RtlUpcaseUnicodeStringToAnsiString"
- ASCII "RtlUpcaseUnicodeStringToCountedOemString"
- ASCII "RtlUpcaseUnicodeStringToOemString"
- ASCII "RtlUpcaseUnicodeToCustomCPN"
- ASCII "RtlUpcaseUnicodeToMultiByteN"
- ASCII "RtlUpcaseUnicodeToOemN"
- ASCII "RtlUpdateClonedCriticalSection"
- ASCII "RtlUpdateClonedSRWLock"
- ASCII "RtlUpdateTimer"
- ASCII "RtlUpperChar"
- ASCII "RtlUpperString"
- ASCII "RtlUserThreadStart"
- ASCII "RtlValidAcl"
- ASCII "RtlValidProcessProtection"
- ASCII "RtlValidRelativeSecurityDescriptor"
- ASCII "RtlValidSecurityDescriptor"
- ASCII "RtlValidSid"
- ASCII "RtlValidateHeap"
- ASCII "RtlValidateProcessHeaps"
- ASCII "RtlValidateUnicodeString"
- ASCII "RtlVerifyVersionInfo"
- ASCII "RtlWaitForWnfMetaNotification"
- ASCII "RtlWaitOnAddress"
- ASCII "RtlWakeAddressAll"
- ASCII "RtlWakeAddressAllNoFence"
- ASCII "RtlWakeAddressSingle"
- ASCII "RtlWakeAddressSingleNoFence"
- ASCII "RtlWakeAllConditionVariable"
- ASCII "RtlWakeConditionVariable"
- ASCII "RtlWalkFrameChain"
- ASCII "RtlWalkHeap"
- ASCII "RtlWeaklyEnumerateEntryHashTable"
- ASCII "RtlWerpReportException"
- ASCII "RtlWnfCompareChangeStamp"
- ASCII "RtlWnfDllUnloadCallback"
- ASCII "RtlWow64CallFunction64"
- ASCII "RtlWow64EnableFsRedirection"
- ASCII "RtlWow64EnableFsRedirectionEx"
- ASCII "RtlWriteMemoryStream"
- ASCII "RtlWriteRegistryValue"
- ASCII "RtlZeroHeap"
- ASCII "RtlZeroMemory"
- ASCII "RtlZombifyActivationContext"
- ASCII "RtlpApplyLengthFunction"
- ASCII "RtlpCheckDynamicTimeZoneInformation"
- ASCII "RtlpCleanupRegistryKeys"
- ASCII "RtlpConvertAbsoluteToRelativeSecurityAttribute"
- ASCII "RtlpConvertCultureNamesToLCIDs"
- ASCII "RtlpConvertLCIDsToCultureNames"
- ASCII "RtlpConvertRelativeToAbsoluteSecurityAttribute"
- ASCII "RtlpCreateProcessRegistryInfo"
- ASCII "RtlpEnsureBufferSize"
- ASCII "RtlpFreezeTimeBias"
- ASCII "RtlpGetLCIDFromLangInfoNode"
- ASCII "RtlpGetNameFromLangInfoNode"
- ASCII "RtlpGetSystemDefaultUILanguage"
- ASCII "RtlpGetUserOrMachineUILanguage4NLS"
- ASCII "RtlpInitializeLangRegistryInfo"
- ASCII "RtlpIsQualifiedLanguage"
- ASCII "RtlpLoadMachineUIByPolicy"
- ASCII "RtlpLoadUserUIByPolicy"
- ASCII "RtlpMergeSecurityAttributeInformation"
- ASCII "RtlpMuiFreeLangRegistryInfo"
- ASCII "RtlpMuiRegCreateRegistryInfo"
- ASCII "RtlpMuiRegFreeRegistryInfo"
- ASCII "RtlpMuiRegLoadRegistryInfo"
- ASCII "RtlpNotOwnerCriticalSection"
- ASCII "RtlpNtCreateKey"
- ASCII "RtlpNtEnumerateSubKey"
- ASCII "RtlpNtMakeTemporaryKey"
- ASCII "RtlpNtOpenKey"
- ASCII "RtlpNtQueryValueKey"
- ASCII "RtlpNtSetValueKey"
- ASCII "RtlpQueryDefaultUILanguage"
- ASCII "RtlpRefreshCachedUILanguage"
- ASCII "RtlpSetInstallLanguage"
- ASCII "RtlpSetPreferredUILanguages"
- ASCII "RtlpSetUserPreferredUILanguages"
- ASCII "RtlpUnWaitCriticalSection"
- ASCII "RtlpVerifyAndCommitUILanguageSettings"
- ASCII "RtlpWaitForCriticalSection"
- ASCII "RtlxAnsiStringToUnicodeSize"
- ASCII "RtlxOemStringToUnicodeSize"
- ASCII "RtlxUnicodeStringToAnsiSize"
- ASCII "RtlxUnicodeStringToOemSize"
- ASCII "SbExecuteProcedure"
- ASCII "SbSelectProcedure"
- ASCII "ShipAssert"
- ASCII "ShipAssertGetBufferInfo"
- ASCII "ShipAssertMsgA"
- ASCII "ShipAssertMsgW"
- ASCII "TpAllocAlpcCompletion"
- ASCII "TpAllocAlpcCompletionEx"
- ASCII "TpAllocCleanupGroup"
- ASCII "TpAllocIoCompletion"
- ASCII "TpAllocJobNotification"
- ASCII "TpAllocPool"
- ASCII "TpAllocTimer"
- ASCII "TpAllocWait"
- ASCII "TpAllocWork"
- ASCII "TpAlpcRegisterCompletionList"
- ASCII "TpAlpcUnregisterCompletionList"
- ASCII "TpCallbackDetectedUnrecoverableError"
- ASCII "TpCallbackIndependent"
- ASCII "TpCallbackLeaveCriticalSectionOnCompletion"
- ASCII "TpCallbackMayRunLong"
- ASCII "TpCallbackReleaseMutexOnCompletion"
- ASCII "TpCallbackReleaseSemaphoreOnCompletion"
- ASCII "TpCallbackSendAlpcMessageOnCompletion"
- ASCII "TpCallbackSendPendingAlpcMessage"
- ASCII "TpCallbackSetEventOnCompletion"
- ASCII "TpCallbackUnloadDllOnCompletion"
- ASCII "TpCancelAsyncIoOperation"
- ASCII "TpCaptureCaller"
- ASCII "TpCheckTerminateWorker"
- ASCII "TpDbgDumpHeapUsage"
- ASCII "TpDbgSetLogRoutine"
- ASCII "TpDisablePoolCallbackChecks"
- ASCII "TpDisassociateCallback"
- ASCII "TpIsTimerSet"
- ASCII "TpPostWork"
- ASCII "TpQueryPoolStackInformation"
- ASCII "TpReleaseAlpcCompletion"
- ASCII "TpReleaseCleanupGroup"
- ASCII "TpReleaseCleanupGroupMembers"
- ASCII "TpReleaseIoCompletion"
- ASCII "TpReleaseJobNotification"
- ASCII "TpReleasePool"
- ASCII "TpReleaseTimer"
- ASCII "TpReleaseWait"
- ASCII "TpReleaseWork"
- ASCII "TpSetDefaultPoolMaxThreads"
- ASCII "TpSetDefaultPoolStackInformation"
- ASCII "TpSetPoolMaxThreads"
- ASCII "TpSetPoolMinThreads"
- ASCII "TpSetPoolStackInformation"
- ASCII "TpSetPoolThreadBasePriority"
- ASCII "TpSetTimer"
- ASCII "TpSetTimerEx"
- ASCII "TpSetWait"
- ASCII "TpSetWaitEx"
- ASCII "TpSimpleTryPost"
- ASCII "TpStartAsyncIoOperation"
- ASCII "TpTimerOutstandingCallbackCount"
- ASCII "TpTrimPools"
- ASCII "TpWaitForAlpcCompletion"
- ASCII "TpWaitForIoCompletion"
- ASCII "TpWaitForJobNotification"
- ASCII "TpWaitForTimer"
- ASCII "TpWaitForWait"
- ASCII "TpWaitForWork"
- ASCII "VerSetConditionMask"
- ASCII "WerReportSQMEvent"
- ASCII "WinSqmAddToAverageDWORD"
- ASCII "WinSqmAddToStream"
- ASCII "WinSqmAddToStreamEx"
- ASCII "WinSqmCheckEscalationAddToStreamEx"
- ASCII "WinSqmCheckEscalationSetDWORD64"
- ASCII "WinSqmCheckEscalationSetDWORD"
- ASCII "WinSqmCheckEscalationSetString"
- ASCII "WinSqmCommonDatapointDelete"
- ASCII "WinSqmCommonDatapointSetDWORD64"
- ASCII "WinSqmCommonDatapointSetDWORD"
- ASCII "WinSqmCommonDatapointSetStreamEx"
- ASCII "WinSqmCommonDatapointSetString"
- ASCII "WinSqmEndSession"
- ASCII "WinSqmEventEnabled"
- ASCII "WinSqmEventWrite"
- ASCII "WinSqmGetEscalationRuleStatus"
- ASCII "WinSqmGetInstrumentationProperty"
- ASCII "WinSqmIncrementDWORD"
- ASCII "WinSqmIsOptedIn"
- ASCII "WinSqmIsOptedInEx"
- ASCII "WinSqmIsSessionDisabled"
- ASCII "WinSqmSetDWORD64"
- ASCII "WinSqmSetDWORD"
- ASCII "WinSqmSetEscalationInfo"
- ASCII "WinSqmSetIfMaxDWORD"
- ASCII "WinSqmSetIfMinDWORD"
- ASCII "WinSqmSetString"
- ASCII "WinSqmStartSession"
- ASCII "WinSqmStartSessionForPartner"
- ASCII "ZwAcceptConnectPort"
- ASCII "ZwAccessCheck"
- ASCII "ZwAccessCheckAndAuditAlarm"
- ASCII "ZwAccessCheckByType"
- ASCII "ZwAccessCheckByTypeAndAuditAlarm"
- ASCII "ZwAccessCheckByTypeResultList"
- ASCII "ZwAccessCheckByTypeResultListAndAuditAlarm"
- ASCII "ZwAccessCheckByTypeResultListAndAuditAlarmByHandle"
- ASCII "ZwAddAtom"
- ASCII "ZwAddAtomEx"
- ASCII "ZwAddBootEntry"
- ASCII "ZwAddDriverEntry"
- ASCII "ZwAdjustGroupsToken"
- ASCII "ZwAdjustPrivilegesToken"
- ASCII "ZwAdjustTokenClaimsAndDeviceGroups"
- ASCII "ZwAlertResumeThread"
- ASCII "ZwAlertThread"
- ASCII "ZwAlertThreadByThreadId"
- ASCII "ZwAllocateLocallyUniqueId"
- ASCII "ZwAllocateReserveObject"
- ASCII "ZwAllocateUserPhysicalPages"
- ASCII "ZwAllocateUuids"
- ASCII "ZwAllocateVirtualMemory"
- ASCII "ZwAlpcAcceptConnectPort"
- ASCII "ZwAlpcCancelMessage"
- ASCII "ZwAlpcConnectPort"
- ASCII "ZwAlpcConnectPortEx"
- ASCII "ZwAlpcCreatePort"
- ASCII "ZwAlpcCreatePortSection"
- ASCII "ZwAlpcCreateResourceReserve"
- ASCII "ZwAlpcCreateSectionView"
- ASCII "ZwAlpcCreateSecurityContext"
- ASCII "ZwAlpcDeletePortSection"
- ASCII "ZwAlpcDeleteResourceReserve"
- ASCII "ZwAlpcDeleteSectionView"
- ASCII "ZwAlpcDeleteSecurityContext"
- ASCII "ZwAlpcDisconnectPort"
- ASCII "ZwAlpcImpersonateClientOfPort"
- ASCII "ZwAlpcOpenSenderProcess"
- ASCII "ZwAlpcOpenSenderThread"
- ASCII "ZwAlpcQueryInformation"
- ASCII "ZwAlpcQueryInformationMessage"
- ASCII "ZwAlpcRevokeSecurityContext"
- ASCII "ZwAlpcSendWaitReceivePort"
- ASCII "ZwAlpcSetInformation"
- ASCII "ZwApphelpCacheControl"
- ASCII "ZwAreMappedFilesTheSame"
- ASCII "ZwAssignProcessToJobObject"
- ASCII "ZwAssociateWaitCompletionPacket"
- ASCII "ZwCallbackReturn"
- ASCII "ZwCancelIoFile"
- ASCII "ZwCancelIoFileEx"
- ASCII "ZwCancelSynchronousIoFile"
- ASCII "ZwCancelTimer2"
- ASCII "ZwCancelTimer"
- ASCII "ZwCancelWaitCompletionPacket"
- ASCII "ZwClearEvent"
- ASCII "ZwClose"
- ASCII "ZwCloseObjectAuditAlarm"
- ASCII "ZwCommitComplete"
- ASCII "ZwCommitEnlistment"
- ASCII "ZwCommitTransaction"
- ASCII "ZwCompactKeys"
- ASCII "ZwCompareTokens"
- ASCII "ZwCompleteConnectPort"
- ASCII "ZwCompressKey"
- ASCII "ZwConnectPort"
- ASCII "ZwContinue"
- ASCII "ZwCreateDebugObject"
- ASCII "ZwCreateDirectoryObject"
- ASCII "ZwCreateDirectoryObjectEx"
- ASCII "ZwCreateEnlistment"
- ASCII "ZwCreateEvent"
- ASCII "ZwCreateEventPair"
- ASCII "ZwCreateFile"
- ASCII "ZwCreateIRTimer"
- ASCII "ZwCreateIoCompletion"
- ASCII "ZwCreateJobObject"
- ASCII "ZwCreateJobSet"
- ASCII "ZwCreateKey"
- ASCII "ZwCreateKeyTransacted"
- ASCII "ZwCreateKeyedEvent"
- ASCII "ZwCreateLowBoxToken"
- ASCII "ZwCreateMailslotFile"
- ASCII "ZwCreateMutant"
- ASCII "ZwCreateNamedPipeFile"
- ASCII "ZwCreatePagingFile"
- ASCII "ZwCreatePort"
- ASCII "ZwCreatePrivateNamespace"
- ASCII "ZwCreateProcess"
- ASCII "ZwCreateProcessEx"
- ASCII "ZwCreateProfile"
- ASCII "ZwCreateProfileEx"
- ASCII "ZwCreateResourceManager"
- ASCII "ZwCreateSection"
- ASCII "ZwCreateSemaphore"
- ASCII "ZwCreateSymbolicLinkObject"
- ASCII "ZwCreateThread"
- ASCII "ZwCreateThreadEx"
- ASCII "ZwCreateTimer2"
- ASCII "ZwCreateTimer"
- ASCII "ZwCreateToken"
- ASCII "ZwCreateTokenEx"
- ASCII "ZwCreateTransaction"
- ASCII "ZwCreateTransactionManager"
- ASCII "ZwCreateUserProcess"
- ASCII "ZwCreateWaitCompletionPacket"
- ASCII "ZwCreateWaitablePort"
- ASCII "ZwCreateWnfStateName"
- ASCII "ZwCreateWorkerFactory"
- ASCII "ZwDebugActiveProcess"
- ASCII "ZwDebugContinue"
- ASCII "ZwDelayExecution"
- ASCII "ZwDeleteAtom"
- ASCII "ZwDeleteBootEntry"
- ASCII "ZwDeleteDriverEntry"
- ASCII "ZwDeleteFile"
- ASCII "ZwDeleteKey"
- ASCII "ZwDeleteObjectAuditAlarm"
- ASCII "ZwDeletePrivateNamespace"
- ASCII "ZwDeleteValueKey"
- ASCII "ZwDeleteWnfStateData"
- ASCII "ZwDeleteWnfStateName"
- ASCII "ZwDeviceIoControlFile"
- ASCII "ZwDisableLastKnownGood"
- ASCII "ZwDisplayString"
- ASCII "ZwDrawText"
- ASCII "ZwDuplicateObject"
- ASCII "ZwDuplicateToken"
- ASCII "ZwEnableLastKnownGood"
- ASCII "ZwEnumerateBootEntries"
- ASCII "ZwEnumerateDriverEntries"
- ASCII "ZwEnumerateKey"
- ASCII "ZwEnumerateSystemEnvironmentValuesEx"
- ASCII "ZwEnumerateTransactionObject"
- ASCII "ZwEnumerateValueKey"
- ASCII "ZwExtendSection"
- ASCII "ZwFilterBootOption"
- ASCII "ZwFilterToken"
- ASCII "ZwFilterTokenEx"
- ASCII "ZwFindAtom"
- ASCII "ZwFlushBuffersFile"
- ASCII "ZwFlushBuffersFileEx"
- ASCII "ZwFlushInstallUILanguage"
- ASCII "ZwFlushInstructionCache"
- ASCII "ZwFlushKey"
- ASCII "ZwFlushProcessWriteBuffers"
- ASCII "ZwFlushVirtualMemory"
- ASCII "ZwFlushWriteBuffer"
- ASCII "ZwFreeUserPhysicalPages"
- ASCII "ZwFreeVirtualMemory"
- ASCII "ZwFreezeRegistry"
- ASCII "ZwFreezeTransactions"
- ASCII "ZwFsControlFile"
- ASCII "ZwGetCachedSigningLevel"
- ASCII "ZwGetCompleteWnfStateSubscription"
- ASCII "ZwGetContextThread"
- ASCII "ZwGetCurrentProcessorNumber"
- ASCII "ZwGetDevicePowerState"
- ASCII "ZwGetMUIRegistryInfo"
- ASCII "ZwGetNextProcess"
- ASCII "ZwGetNextThread"
- ASCII "ZwGetNlsSectionPtr"
- ASCII "ZwGetNotificationResourceManager"
- ASCII "ZwGetWriteWatch"
- ASCII "ZwImpersonateAnonymousToken"
- ASCII "ZwImpersonateClientOfPort"
- ASCII "ZwImpersonateThread"
- ASCII "ZwInitializeNlsFiles"
- ASCII "ZwInitializeRegistry"
- ASCII "ZwInitiatePowerAction"
- ASCII "ZwIsProcessInJob"
- ASCII "ZwIsSystemResumeAutomatic"
- ASCII "ZwIsUILanguageComitted"
- ASCII "ZwListenPort"
- ASCII "ZwLoadDriver"
- ASCII "ZwLoadKey2"
- ASCII "ZwLoadKey"
- ASCII "ZwLoadKeyEx"
- ASCII "ZwLockFile"
- ASCII "ZwLockProductActivationKeys"
- ASCII "ZwLockRegistryKey"
- ASCII "ZwLockVirtualMemory"
- ASCII "ZwMakePermanentObject"
- ASCII "ZwMakeTemporaryObject"
- ASCII "ZwMapCMFModule"
- ASCII "ZwMapUserPhysicalPages"
- ASCII "ZwMapUserPhysicalPagesScatter"
- ASCII "ZwMapViewOfSection"
- ASCII "ZwModifyBootEntry"
- ASCII "ZwModifyDriverEntry"
- ASCII "ZwNotifyChangeDirectoryFile"
- ASCII "ZwNotifyChangeKey"
- ASCII "ZwNotifyChangeMultipleKeys"
- ASCII "ZwNotifyChangeSession"
- ASCII "ZwOpenDirectoryObject"
- ASCII "ZwOpenEnlistment"
- ASCII "ZwOpenEvent"
- ASCII "ZwOpenEventPair"
- ASCII "ZwOpenFile"
- ASCII "ZwOpenIoCompletion"
- ASCII "ZwOpenJobObject"
- ASCII "ZwOpenKey"
- ASCII "ZwOpenKeyEx"
- ASCII "ZwOpenKeyTransacted"
- ASCII "ZwOpenKeyTransactedEx"
- ASCII "ZwOpenKeyedEvent"
- ASCII "ZwOpenMutant"
- ASCII "ZwOpenObjectAuditAlarm"
- ASCII "ZwOpenPrivateNamespace"
- ASCII "ZwOpenProcess"
- ASCII "ZwOpenProcessToken"
- ASCII "ZwOpenProcessTokenEx"
- ASCII "ZwOpenResourceManager"
- ASCII "ZwOpenSection"
- ASCII "ZwOpenSemaphore"
- ASCII "ZwOpenSession"
- ASCII "ZwOpenSymbolicLinkObject"
- ASCII "ZwOpenThread"
- ASCII "ZwOpenThreadToken"
- ASCII "ZwOpenThreadTokenEx"
- ASCII "ZwOpenTimer"
- ASCII "ZwOpenTransaction"
- ASCII "ZwOpenTransactionManager"
- ASCII "ZwPlugPlayControl"
- ASCII "ZwPowerInformation"
- ASCII "ZwPrePrepareComplete"
- ASCII "ZwPrePrepareEnlistment"
- ASCII "ZwPrepareComplete"
- ASCII "ZwPrepareEnlistment"
- ASCII "ZwPrivilegeCheck"
- ASCII "ZwPrivilegeObjectAuditAlarm"
- ASCII "ZwPrivilegedServiceAuditAlarm"
- ASCII "ZwPropagationComplete"
- ASCII "ZwPropagationFailed"
- ASCII "ZwProtectVirtualMemory"
- ASCII "ZwPulseEvent"
- ASCII "ZwQueryAttributesFile"
- ASCII "ZwQueryBootEntryOrder"
- ASCII "ZwQueryBootOptions"
- ASCII "ZwQueryDebugFilterState"
- ASCII "ZwQueryDefaultLocale"
- ASCII "ZwQueryDefaultUILanguage"
- ASCII "ZwQueryDirectoryFile"
- ASCII "ZwQueryDirectoryObject"
- ASCII "ZwQueryDriverEntryOrder"
- ASCII "ZwQueryEaFile"
- ASCII "ZwQueryEvent"
- ASCII "ZwQueryFullAttributesFile"
- ASCII "ZwQueryInformationAtom"
- ASCII "ZwQueryInformationEnlistment"
- ASCII "ZwQueryInformationFile"
- ASCII "ZwQueryInformationJobObject"
- ASCII "ZwQueryInformationPort"
- ASCII "ZwQueryInformationProcess"
- ASCII "ZwQueryInformationResourceManager"
- ASCII "ZwQueryInformationThread"
- ASCII "ZwQueryInformationToken"
- ASCII "ZwQueryInformationTransaction"
- ASCII "ZwQueryInformationTransactionManager"
- ASCII "ZwQueryInformationWorkerFactory"
- ASCII "ZwQueryInstallUILanguage"
- ASCII "ZwQueryIntervalProfile"
- ASCII "ZwQueryIoCompletion"
- ASCII "ZwQueryKey"
- ASCII "ZwQueryLicenseValue"
- ASCII "ZwQueryMultipleValueKey"
- ASCII "ZwQueryMutant"
- ASCII "ZwQueryObject"
- ASCII "ZwQueryOpenSubKeys"
- ASCII "ZwQueryOpenSubKeysEx"
- ASCII "ZwQueryPerformanceCounter"
- ASCII "ZwQueryPortInformationProcess"
- ASCII "ZwQueryQuotaInformationFile"
- ASCII "ZwQuerySection"
- ASCII "ZwQuerySecurityAttributesToken"
- ASCII "ZwQuerySecurityObject"
- ASCII "ZwQuerySemaphore"
- ASCII "ZwQuerySymbolicLinkObject"
- ASCII "ZwQuerySystemEnvironmentValue"
- ASCII "ZwQuerySystemEnvironmentValueEx"
- ASCII "ZwQuerySystemInformation"
- ASCII "ZwQuerySystemInformationEx"
- ASCII "ZwQuerySystemTime"
- ASCII "ZwQueryTimer"
- ASCII "ZwQueryTimerResolution"
- ASCII "ZwQueryValueKey"
- ASCII "ZwQueryVirtualMemory"
- ASCII "ZwQueryVolumeInformationFile"
- ASCII "ZwQueryWnfStateData"
- ASCII "ZwQueryWnfStateNameInformation"
- ASCII "ZwQueueApcThread"
- ASCII "ZwQueueApcThreadEx"
- ASCII "ZwRaiseException"
- ASCII "ZwRaiseHardError"
- ASCII "ZwReadFile"
- ASCII "ZwReadFileScatter"
- ASCII "ZwReadOnlyEnlistment"
- ASCII "ZwReadRequestData"
- ASCII "ZwReadVirtualMemory"
- ASCII "ZwRecoverEnlistment"
- ASCII "ZwRecoverResourceManager"
- ASCII "ZwRecoverTransactionManager"
- ASCII "ZwRegisterProtocolAddressInformation"
- ASCII "ZwRegisterThreadTerminatePort"
- ASCII "ZwReleaseKeyedEvent"
- ASCII "ZwReleaseMutant"
- ASCII "ZwReleaseSemaphore"
- ASCII "ZwReleaseWorkerFactoryWorker"
- ASCII "ZwRemoveIoCompletion"
- ASCII "ZwRemoveIoCompletionEx"
- ASCII "ZwRemoveProcessDebug"
- ASCII "ZwRenameKey"
- ASCII "ZwRenameTransactionManager"
- ASCII "ZwReplaceKey"
- ASCII "ZwReplacePartitionUnit"
- ASCII "ZwReplyPort"
- ASCII "ZwReplyWaitReceivePort"
- ASCII "ZwReplyWaitReceivePortEx"
- ASCII "ZwReplyWaitReplyPort"
- ASCII "ZwRequestPort"
- ASCII "ZwRequestWaitReplyPort"
- ASCII "ZwResetEvent"
- ASCII "ZwResetWriteWatch"
- ASCII "ZwRestoreKey"
- ASCII "ZwResumeProcess"
- ASCII "ZwResumeThread"
- ASCII "ZwRollbackComplete"
- ASCII "ZwRollbackEnlistment"
- ASCII "ZwRollbackTransaction"
- ASCII "ZwRollforwardTransactionManager"
- ASCII "ZwSaveKey"
- ASCII "ZwSaveKeyEx"
- ASCII "ZwSaveMergedKeys"
- ASCII "ZwSecureConnectPort"
- ASCII "ZwSerializeBoot"
- ASCII "ZwSetBootEntryOrder"
- ASCII "ZwSetBootOptions"
- ASCII "ZwSetCachedSigningLevel"
- ASCII "ZwSetContextThread"
- ASCII "ZwSetDebugFilterState"
- ASCII "ZwSetDefaultHardErrorPort"
- ASCII "ZwSetDefaultLocale"
- ASCII "ZwSetDefaultUILanguage"
- ASCII "ZwSetDriverEntryOrder"
- ASCII "ZwSetEaFile"
- ASCII "ZwSetEvent"
- ASCII "ZwSetEventBoostPriority"
- ASCII "ZwSetHighEventPair"
- ASCII "ZwSetHighWaitLowEventPair"
- ASCII "ZwSetIRTimer"
- ASCII "ZwSetInformationDebugObject"
- ASCII "ZwSetInformationEnlistment"
- ASCII "ZwSetInformationFile"
- ASCII "ZwSetInformationJobObject"
- ASCII "ZwSetInformationKey"
- ASCII "ZwSetInformationObject"
- ASCII "ZwSetInformationProcess"
- ASCII "ZwSetInformationResourceManager"
- ASCII "ZwSetInformationThread"
- ASCII "ZwSetInformationToken"
- ASCII "ZwSetInformationTransaction"
- ASCII "ZwSetInformationTransactionManager"
- ASCII "ZwSetInformationVirtualMemory"
- ASCII "ZwSetInformationWorkerFactory"
- ASCII "ZwSetIntervalProfile"
- ASCII "ZwSetIoCompletion"
- ASCII "ZwSetIoCompletionEx"
- ASCII "ZwSetLdtEntries"
- ASCII "ZwSetLowEventPair"
- ASCII "ZwSetLowWaitHighEventPair"
- ASCII "ZwSetQuotaInformationFile"
- ASCII "ZwSetSecurityObject"
- ASCII "ZwSetSystemEnvironmentValue"
- ASCII "ZwSetSystemEnvironmentValueEx"
- ASCII "ZwSetSystemInformation"
- ASCII "ZwSetSystemPowerState"
- ASCII "ZwSetSystemTime"
- ASCII "ZwSetThreadExecutionState"
- ASCII "ZwSetTimer2"
- ASCII "ZwSetTimer"
- ASCII "ZwSetTimerEx"
- ASCII "ZwSetTimerResolution"
- ASCII "ZwSetUuidSeed"
- ASCII "ZwSetValueKey"
- ASCII "ZwSetVolumeInformationFile"
- ASCII "ZwSetWnfProcessNotificationEvent"
- ASCII "ZwShutdownSystem"
- ASCII "ZwShutdownWorkerFactory"
- ASCII "ZwSignalAndWaitForSingleObject"
- ASCII "ZwSinglePhaseReject"
- ASCII "ZwStartProfile"
- ASCII "ZwStopProfile"
- ASCII "ZwSubscribeWnfStateChange"
- ASCII "ZwSuspendProcess"
- ASCII "ZwSuspendThread"
- ASCII "ZwSystemDebugControl"
- ASCII "ZwTerminateJobObject"
- ASCII "ZwTerminateProcess"
- ASCII "ZwTerminateThread"
- ASCII "ZwTestAlert"
- ASCII "ZwThawRegistry"
- ASCII "ZwThawTransactions"
- ASCII "ZwTraceControl"
- ASCII "ZwTraceEvent"
- ASCII "ZwTranslateFilePath"
- ASCII "ZwUmsThreadYield"
- ASCII "ZwUnloadDriver"
- ASCII "ZwUnloadKey2"
- ASCII "ZwUnloadKey"
- ASCII "ZwUnloadKeyEx"
- ASCII "ZwUnlockFile"
- ASCII "ZwUnlockVirtualMemory"
- ASCII "ZwUnmapViewOfSection"
- ASCII "ZwUnmapViewOfSectionEx"
- ASCII "ZwUnsubscribeWnfStateChange"
- ASCII "ZwUpdateWnfStateData"
- ASCII "ZwVdmControl"
- ASCII "ZwWaitForAlertByThreadId"
- ASCII "ZwWaitForDebugEvent"
- ASCII "ZwWaitForKeyedEvent"
- ASCII "ZwWaitForMultipleObjects32"
- ASCII "ZwWaitForMultipleObjects"
- ASCII "ZwWaitForSingleObject"
- ASCII "ZwWaitForWorkViaWorkerFactory"
- ASCII "ZwWaitHighEventPair"
- ASCII "ZwWaitLowEventPair"
- ASCII "ZwWorkerFactoryWorkerReady"
- ASCII "ZwWriteFile"
- ASCII "ZwWriteFileGather"
- ASCII "ZwWriteRequestData"
- ASCII "ZwWriteVirtualMemory"
- ASCII "ZwYieldExecution"
- ASCII "_CIcos"
- ASCII "_CIlog"
- ASCII "_CIpow"
- ASCII "_CIsin"
- ASCII "_CIsqrt"
- ASCII "__isascii"
- ASCII "__iscsym"
- ASCII "__iscsymf"
- ASCII "__toascii"
- ASCII "_alldiv"
- ASCII "_alldvrm"
- ASCII "_allmul"
- ASCII "_alloca_probe"
- ASCII "_alloca_probe_16"
- ASCII "_alloca_probe_8"
- ASCII "_allrem"
- ASCII "_allshl"
- ASCII "_allshr"
- ASCII "_atoi64"
- ASCII "_aulldiv"
- ASCII "_aulldvrm"
- ASCII "_aullrem"
- ASCII "_aullshr"
- ASCII "_chkstk"
- ASCII "_errno"
- ASCII "_except_handler4_common"
- ASCII "_fltused"
- ASCII "_ftol"
- ASCII "_ftol2"
- ASCII "_ftol2_sse"
- ASCII "_i64toa"
- ASCII "_i64toa_s"
- ASCII "_i64tow"
- ASCII "_i64tow_s"
- ASCII "_itoa"
- ASCII "_itoa_s"
- ASCII "_itow"
- ASCII "_itow_s"
- ASCII "_lfind"
- ASCII "_local_unwind4"
- ASCII "_ltoa"
- ASCII "_ltoa_s"
- ASCII "_ltow"
- ASCII "_ltow_s"
- ASCII "_makepath_s"
- ASCII "_memccpy"
- ASCII "_memicmp"
- ASCII "_snprintf"
- ASCII "_snprintf_s"
- ASCII "_snscanf_s"
- ASCII "_snwprintf"
- ASCII "_snwprintf_s"
- ASCII "_snwscanf_s"
- ASCII "_splitpath"
- ASCII "_splitpath_s"
- ASCII "_strcmpi"
- ASCII "_stricmp"
- ASCII "_strlwr"
- ASCII "_strlwr_s"
- ASCII "_strnicmp"
- ASCII "_strnset_s"
- ASCII "_strset_s"
- ASCII "_strupr"
- ASCII "_strupr_s"
- ASCII "_swprintf"
- ASCII "_ui64toa"
- ASCII "_ui64toa_s"
- ASCII "_ui64tow"
- ASCII "_ui64tow_s"
- ASCII "_ultoa"
- ASCII "_ultoa_s"
- ASCII "_ultow"
- ASCII "_ultow_s"
- ASCII "_vscwprintf"
- ASCII "_vsnprintf"
- ASCII "_vsnprintf_s"
- ASCII "_vsnwprintf"
- ASCII "_vsnwprintf_s"
- ASCII "_vswprintf"
- ASCII "_wcsicmp"
- ASCII "_wcslwr"
- ASCII "_wcslwr_s"
- ASCII "_wcsnicmp"
- ASCII "_wcsnset_s"
- ASCII "_wcsset_s"
- ASCII "_wcstoi64"
- ASCII "_wcstoui64"
- ASCII "_wcsupr"
- ASCII "_wcsupr_s"
- ASCII "_wmakepath_s"
- ASCII "_wsplitpath_s"
- ASCII "_wtoi"
- ASCII "_wtoi64"
- ASCII "_wtol"
- ASCII "abs"
- ASCII "atan"
- ASCII "atoi"
- ASCII "atol"
- ASCII "bsearch"
- ASCII "ceil"
- ASCII "cos"
- ASCII "fabs"
- ASCII "floor"
- ASCII "isalnum"
- ASCII "isalpha"
- ASCII "iscntrl"
- ASCII "isdigit"
- ASCII "isgraph"
- ASCII "islower"
- ASCII "isprint"
- ASCII "ispunct"
- ASCII "isspace"
- ASCII "isupper"
- ASCII "iswalnum"
- ASCII "iswalpha"
- ASCII "iswascii"
- ASCII "iswctype"
- ASCII "iswdigit"
- ASCII "iswgraph"
- ASCII "iswlower"
- ASCII "iswprint"
- ASCII "iswspace"
- ASCII "iswxdigit"
- ASCII "isxdigit"
- ASCII "labs"
- ASCII "log"
- ASCII "mbstowcs"
- ASCII "memchr"
- ASCII "memcmp"
- ASCII "memcpy"
- ASCII "memcpy_s"
- ASCII "memmove"
- ASCII "memmove_s"
- ASCII "memset"
- ASCII "pow"
- ASCII "qsort"
- ASCII "qsort_s"
- ASCII "sin"
- ASCII "sprintf"
- ASCII "sprintf_s"
- ASCII "sqrt"
- ASCII "sscanf"
- ASCII "sscanf_s"
- ASCII "strcat"
- ASCII "strcat_s"
- ASCII "strchr"
- ASCII "strcmp"
- ASCII "strcpy"
- ASCII "strcpy_s"
- ASCII "strcspn"
- ASCII "strlen"
- ASCII "strncat"
- ASCII "strncat_s"
- ASCII "strncmp"
- ASCII "strncpy"
- ASCII "strncpy_s"
- ASCII "strnlen"
- ASCII "strpbrk"
- ASCII "strrchr"
- ASCII "strspn"
- ASCII "strstr"
- ASCII "strtok_s"
- ASCII "strtol"
- ASCII "strtoul"
- ASCII "swprintf"
- ASCII "swprintf_s"
- ASCII "swscanf_s"
- ASCII "tan"
- ASCII "tolower"
- ASCII "toupper"
- ASCII "towlower"
- ASCII "towupper"
- ASCII "vDbgPrintEx"
- ASCII "vDbgPrintExWithPrefix"
- ASCII "vsprintf"
- ASCII "vsprintf_s"
- ASCII "vswprintf_s"
- ASCII "wcscat"
- ASCII "wcscat_s"
- ASCII "wcschr"
- ASCII "wcscmp"
- ASCII "wcscpy"
- ASCII "wcscpy_s"
- ASCII "wcscspn"
- ASCII "wcslen"
- ASCII "wcsncat"
- ASCII "wcsncat_s"
- ASCII "wcsncmp"
- ASCII "wcsncpy"
- ASCII "wcsncpy_s"
- ASCII "wcsnlen"
- ASCII "wcspbrk"
- ASCII "wcsrchr"
- ASCII "wcsspn"
- ASCII "wcsstr"
- ASCII "wcstok_s"
- ASCII "wcstol"
- ASCII "wcstombs"
- [/CODE]
- FAKECCLEANER.exe
- [CODE]
- Search - Text strings referenced in FAKECCLEANER
- Comments
- ASCII "bad locale name"
- ASCII "ios_base::badbit set"
- ASCII "ios_base::failbit set"
- ASCII "ios_base::eofbit set"
- UNICODE "cmd.exe /C ping 1.1.1.1 -n 1 -w %d > Nul & %s %s"
- UNICODE "Del"
- ASCII "@="
- ASCII "c pp "
- ASCII "s h i "
- ASCII "c p "
- ASCII "w s o "
- ASCII "g e c "
- ASCII "@="
- ASCII "p="
- ASCII "`<"
- UNICODE "wb"
- ASCII "p="
- ASCII "`<"
- ASCII "`<"
- ASCII "p="
- ASCII "`<"
- ASCII "invalid string position"
- ASCII "string too long"
- ASCII "invalid string position"
- ASCII "`<"
- ASCII "p="
- ASCII "string too long"
- ASCII "string too long"
- ASCII "invalid string position"
- ASCII "string too long"
- ASCII "invalid string position"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "invalid string position"
- ASCII "bad cast"
- ASCII "invalid string position"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "invalid string position"
- ASCII "string too long"
- ASCII "string too long"
- ASCII "\\.\VBoxMiniRdrDN"
- ASCII "%s:%s"
- ASCII "http://%s:%s"
- ASCII "realloc() failed
- "
- ASCII "send"
- ASCII "submit"
- ASCII "Expect:"
- ASCII "TRUE"
- ASCII "FALSE"
- ASCII "TRUE"
- ASCII "FALSE"
- ASCII "%lu "
- ASCII "/gtk"
- UNICODE "InstallDate"
- UNICODE "SOFTWARE\Microsoft\Windows NT\CurrentVersion"
- ASCII "%lu"
- ASCII "P@$sw0rD$nd"
- ASCII "$t@k0v2rF10w"
- ASCII "$t@k0v2rF10w"
- ASCII "$t@k0v2rF10w"
- ASCII "/feedback"
- ASCII "P@$sw0rD$nd"
- ASCII "value"
- ASCII "vector<T> too long"
- ASCII "$t@k0v2rF10w"
- ASCII "$t@k0v2rF10w"
- ASCII "$t@k0v2rF10w"
- ASCII "$t@k0v2rF10w"
- ASCII "$t@k0v2rF10w"
- ASCII "P@$sw0rD$nd"
- ASCII "$t@k0v2rF10w"
- ASCII "P@$sw0rD$nd"
- ASCII "P@$sw0rD$nd"
- ASCII "FN_cn"
- ASCII "cn"
- ASCII "FN_un"
- ASCII "un"
- ASCII "FN_av"
- ASCII "av"
- ASCII "FN_os"
- ASCII "os"
- ASCII "FN_gd"
- ASCII "gd"
- ASCII "FN_nn"
- ASCII "nn"
- ASCII "FN_joha"
- ASCII "joha"
- ASCII "FN_gid"
- ASCII "gid"
- ASCII "FN_sd"
- ASCII "sd"
- ASCII "P@$sw0rD$nd"
- UNICODE "Heap terminate-on-corruption has been enabled.
- "
- UNICODE "Failed to enable heap terminate-on-corruption with LastError %d.
- "
- UNICODE "|*|123xXx(Mutex)xXx321|*|6-21-2014-03:06PM"
- UNICODE "|*|123xXx(Mutex)xXx321|*|6-21-2014-03:06PM"
- ASCII "EncryptorFunctionPointer %d"
- ASCII "DnsFlushResolverCache"
- UNICODE "dnsapi.dll"
- ASCII "vector<T> too long"
- ASCII "vector<T> too long"
- ASCII "vector<T> too long"
- UNICODE "/C "
- ASCII "string too long"
- ASCII "string too long"
- ASCII "Software\Microsoft\Windows\CurrentVersion\Internet Settings"
- ASCII "ProxyEnable"
- ASCII "ProxyServer"
- ASCII "delay"
- ASCII "tols"
- ASCII "img"
- ASCII "cms"
- ASCII "qlt"
- ASCII "wth"
- ASCII "id"
- ASCII "action"
- ASCII "url"
- ASCII "md5"
- ASCII "location"
- ASCII "cmi"
- ASCII "vector<T> too long"
- ASCII "cmt"
- ASCII "cmp"
- ASCII "vector<T> too long"
- ASCII "vector<T> too long"
- ASCII "vector<T> too long"
- ASCII "Unexpected EOF in string (at %d:%d)"
- ASCII "Invalid character value `%c` (at %d:%d)"
- ASCII "Invalid character value `%c` (at %d:%d)"
- ASCII "%d:%d: Unexpected EOF in block comment"
- ASCII "%d:%d: Comment not allowed here"
- ASCII "%d:%d: EOF unexpected"
- ASCII "%d:%d: Unexpected `%c` in comment opening sequence"
- ASCII "%d:%d: Trailing garbage: `%c`"
- ASCII "%d:%d: Unexpected ]"
- ASCII "%d:%d: Expected , before %c"
- ASCII "%d:%d: Expected : before %c"
- ASCII "%d:%d: Unknown value"
- ASCII "%d:%d: Unexpected %c when seeking value"
- ASCII "Memory allocation failure"
- ASCII "%d:%d: Unexpected `0` before `%c`"
- ASCII "%d:%d: Expected digit before `.`"
- ASCII "%d:%d: Expected digit after `.`"
- ASCII "%d:%d: Expected digit after `e`"
- ASCII "%d:%d: Expected , before ""
- ASCII "%d:%d: Too long (caught overflow)"
- ASCII "%d:%d: Unexpected `%c` in object"
- ASCII "Could not open file mapping object (%d).
- "
- ASCII "-1"
- ASCII "Could not map view of file (%d).
- "
- ASCII "-2"
- ASCII "Software\Microsoft\Windows\CurrentVersion\Run"
- ASCII "%s\%s.lnk"
- ASCII "Config"
- ASCII "AppData"
- ASCII "aes"
- ASCII "!@#$%^&*()_+1234567890-="
- ASCII ".exe"
- ASCII "%s%s%s%s"
- ASCII "rb"
- ASCII "wb"
- ASCII "%02X"
- ASCII "0000000000000000"
- UNICODE "image/jpeg"
- UNICODE "DISPLAY"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\rapidjson.h"
- UNICODE "((uintptr_t)buffer & 3) == 0"
- ASCII "cmi"
- ASCII "cmi"
- ASCII "cmi"
- ASCII "status"
- ASCII "status"
- ASCII "status"
- ASCII "out"
- ASCII "out"
- ASCII "out"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\rapidjson.h"
- UNICODE "((uintptr_t)buffer & 3) == 0"
- ASCII "newName"
- ASCII "newName"
- ASCII "newName"
- ASCII "id"
- ASCII "id"
- ASCII "id"
- ASCII "status"
- ASCII "status"
- ASCII "status"
- ASCII "tols"
- ASCII "tols"
- ASCII "tols"
- ASCII "cms"
- ASCII "cms"
- ASCII "cms"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= count * sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/document.h"
- UNICODE "IsArray()"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/document.h"
- UNICODE "IsArray()"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "stack_capacity_ > 0"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/document.h"
- UNICODE "IsObject()"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/document.h"
- UNICODE "name.IsString()"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\rapidjson.h"
- UNICODE "((uintptr_t)buffer & 3) == 0"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\rapidjson.h"
- UNICODE "((uintptr_t)originalPtr & 3) == 0"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\rapidjson.h"
- UNICODE "newBuffer != 0"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "Base::level_stack_.GetSize() >= sizeof(typename Base::Level)"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "!Base::level_stack_.template Top<typename Base::Level>()->inArray"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= count * sizeof(T)"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "Base::level_stack_.GetSize() >= sizeof(typename Base::Level)"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "Base::level_stack_.template Top<typename Base::Level>()->inArray"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= count * sizeof(T)"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\internal/stack.h"
- UNICODE "GetSize() >= sizeof(T)"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kStringType"
- UNICODE "D:\Acms\2\docs\Visual Studio 2013\Projects\DownloadExcute\DownloadExcute\DownExecute\json\rapidjson/prettywriter.h"
- UNICODE "type == kObjectType || type == kArrayType"
- ASCII "%g"
- UNICODE "d:\acms\2\docs\visual studio 2013\projects\downloadexcute\downloadexcute\downexecute\json\rapidjson\writer.h"
- UNICODE "ret >= 1"
- ASCII "%ProgramW6432%"
- ASCII "\*.*"
- ASCII "%s , %s"
- ASCII "%s"
- ASCII "avira"
- ASCII "avast"
- ASCII "avg"
- ASCII "eset"
- ASCII "kaspersky"
- ASCII "alwil"
- ASCII "onecare"
- ASCII "security"
- ASCII "mcafee"
- ASCII "symantec"
- ASCII "norton"
- ASCII "defender"
- ASCII "bitdefender"
- ASCII "%04X%04X"
- UNICODE "c:\"
- ASCII "%X"
- ASCII "%02X%02X%02X%02X%02X%02X"
- ASCII "Mac:%s-Cpu:%s-HD:%s"
- ASCII "IsWow64Process"
- ASCII "kernel32"
- ASCII "GetProductInfo"
- UNICODE "kernel32.dll"
- ASCII "win 8.1"
- ASCII "win Server 2012 R2"
- ASCII "win 8"
- ASCII "win Srv 2012"
- ASCII "win 7"
- ASCII "win srv 2008 R2"
- ASCII "win srv 2008"
- ASCII "win vsta"
- ASCII "win srv 2003 R2"
- ASCII "win hm srv"
- ASCII "win Strg srv 2003"
- ASCII "win srv 2003"
- ASCII "win XP prof x64 edt"
- ASCII "win XP"
- ASCII "win 2000"
- ASCII "<Win Name Error>"
- ASCII "Datacenter Edition"
- ASCII "Enterprise Edition"
- ASCII "Enterprise Edition for Itanium-based Systems"
- ASCII "Standard Edition"
- ASCII "ult edt"
- ASCII "prof"
- ASCII "Hm Prm Edt"
- ASCII "hm bsic edt"
- ASCII "entr edt"
- ASCII "bus edt"
- ASCII "Starter Edition"
- ASCII "Cluster Server Edition"
- ASCII "Datacenter Edition (core installation)"
- ASCII "Enterprise Edition (core installation)"
- ASCII "Small Business Server"
- ASCII "Small Business Server Premium Edition"
- ASCII "Standard Edition (core installation)"
- ASCII "Web Server Edition"
- ASCII "Datacenter Edition for Itanium-based Systems"
- ASCII "Datacenter x64 Edition"
- ASCII "Enterprise x64 Edition"
- ASCII "Standard x64 Edition"
- ASCII "Compute Cluster Edition"
- ASCII "Web Edition"
- ASCII "Home Edition"
- ASCII "Professional"
- ASCII "Datacenter Server"
- ASCII "Advanced Server"
- ASCII "Server"
- ASCII "Arm"
- ASCII "Intel"
- ASCII "64-bit"
- ASCII "32-bit"
- ASCII "%s %s %s (build %d) %s %s"
- ASCII "<Win Get Version Info Name Error>"
- ASCII "easy handle already used in multi handle"
- ASCII "Internal error clearing splay node = %d
- "
- ASCII "Internal error removing splay node = %d
- "
- ASCII "Curl_poll(%d ds, %d ms)
- "
- ASCII "Pipe broke: handle 0x%p, url = %s
- "
- ASCII "In state %d with no easy_conn, bail out!
- "
- ASCII "Resolving timed out after %ld milliseconds"
- ASCII "Connection timed out after %ld milliseconds"
- ASCII "Operation timed out after %ld milliseconds with %I64d out of %I64d bytes received"
- ASCII "Operation timed out after %ld milliseconds with %I64d bytes received"
- ASCII "Hostname was found in DNS cache
- "
- ASCII "Hostname in DNS cache was stale, zapped
- "
- ASCII "application/octet-stream"
- ASCII "; filename="%s""
- ASCII "rb"
- ASCII "------------------------%08x%08x"
- ASCII "Content-Type: multipart/form-data"
- ASCII "%s; boundary=%s
- "
- ASCII "
- "
- ASCII "--%s
- "
- ASCII "Content-Disposition: form-data; name=""
- ASCII "
- Content-Type: multipart/mixed; boundary=%s
- "
- ASCII "
- --%s
- Content-Disposition: attachment"
- ASCII "
- Content-Type: %s"
- ASCII "
- %s"
- ASCII "
- "
- ASCII "rb"
- ASCII "couldn't open file "%s""
- ASCII "
- --%s--"
- ASCII "
- --%s--
- "
- ASCII "security.dll"
- ASCII "secur32.dll"
- ASCII "InitSecurityInterfaceA"
- ASCII "%d"
- ASCII "proxy"
- ASCII "host"
- ASCII "Could not resolve %s: %s"
- ASCII "%d"
- ASCII "init_resolve_thread() failed for %s; %s
- "
- ASCII "getaddrinfo() failed for %s:%d; %s
- "
- ASCII "WARNING: Using weak random seed
- "
- ASCII "%s:%d"
- ASCII "NOT "
- ASCII "Hostname was %sfound in DNS cache
- "
- ASCII "Hostname in DNS cache was stale, zapped
- "
- ASCII "%255[^:]:%d:%255s"
- ASCII "Resolve %s found illegal!
- "
- ASCII "Added %s:%d:%s to DNS cache
- "
- ASCII "rcmd"
- ASCII "Connected to %s (%s) port %ld (#%ld)
- "
- ASCII "Failed to convert %s to ACE;
- "
- ASCII "Protocol "%s" not supported or disabled in libcurl"
- ASCII "%I64u-"
- ASCII ", "
- ASCII ", "
- ASCII "no_proxy"
- ASCII "NO_PROXY"
- ASCII "_proxy"
- ASCII "http_proxy"
- ASCII "all_proxy"
- ASCII "ALL_PROXY"
- ASCII "[%*45[0123456789abcdefABCDEF:.]%c"
- ASCII ";type=%c"
- ASCII "%s://%s%s%s:%hu%s%s%s"
- ASCII "Port number out of range"
- ASCII "Couldn't find host %s in the _netrc file; using defaults
- "
- ASCII "anonymous"
- ASCII "ftp@example.com"
- ASCII "Couldn't resolve proxy '%s'"
- ASCII "Couldn't resolve host '%s'"
- ASCII "User-Agent: %s
- "
- ASCII "CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!"
- ASCII "identity"
- ASCII "ALL"
- ASCII "SESS"
- ASCII "FLUSH"
- ASCII "RELOAD"
- ASCII "Set-Cookie:"
- ASCII "Set-Cookie:"
- ASCII "Closing connection %ld
- "
- ASCII "Connection %ld seems to be dead!
- "
- ASCII "Found bundle for host %s: %p
- "
- ASCII "Server doesn't support pipelining
- "
- ASCII "Connection #%ld is still name resolving, can't reuse
- "
- ASCII "Connection #%ld isn't open enough, can't reuse
- "
- ASCII "Connection cache is full, closing the oldest one.
- "
- ASCII "://"
- ASCII "socks5h"
- ASCII "socks5h"
- ASCII "socks5"
- ASCII "socks5"
- ASCII "socks4a"
- ASCII "socks4a"
- ASCII "socks4"
- ASCII "socks4"
- ASCII "socks"
- ASCII "socks"
- ASCII "%25"
- ASCII "Please URL encode %% as %%25, see RFC 6874.
- "
- ASCII "Invalid IPv6 address format
- "
- ASCII "Connection #%ld to host %s left intact
- "
- ASCII "%15[^:]:%[^
- ]"
- ASCII "file"
- ASCII "file"
- ASCII "%15[^
- :]://%[^
- /?]%[^
- ]"
- ASCII "%[^
- /?]%[^
- ]"
- ASCII "<url> malformed"
- ASCII "FTP."
- ASCII "FTP."
- ASCII "ftp"
- ASCII "DICT."
- ASCII "DICT."
- ASCII "DICT"
- ASCII "LDAP."
- ASCII "LDAP."
- ASCII "LDAP"
- ASCII "IMAP."
- ASCII "IMAP."
- ASCII "IMAP"
- ASCII "SMTP."
- ASCII "SMTP."
- ASCII "smtp"
- ASCII "POP3."
- ASCII "POP3."
- ASCII "pop3"
- ASCII "http"
- ASCII "://"
- ASCII "Rebuilt URL to: %s
- "
- ASCII "%25"
- ASCII "Please URL encode %% as %%25, see RFC 6874.
- "
- ASCII "Invalid IPv6 address format
- "
- ASCII "%s://%s"
- ASCII "memory shortage"
- ASCII "Found connection %ld, with requests in the pipe (%zu)
- "
- ASCII "We can reuse, but we want a new connection anyway
- "
- ASCII "Re-using existing connection! (#%ld) with host %s
- "
- ASCII "No connections available.
- "
- ASCII "NTLM picked AND auth done set, clear picked!
- "
- ASCII "NTLM-proxy picked AND auth done set, clear picked!
- "
- ASCII "* "
- ASCII "Data"
- ASCII "Header"
- ASCII "to"
- ASCII "Header"
- ASCII "from"
- ASCII "[%s %s %s]"
- ASCII "%s"
- ASCII "Send failure: %s"
- ASCII "Recv failure: %s"
- ASCII "Write callback asked for PAUSE when not supported!"
- ASCII "Failed writing body (%zu != %zu)"
- ASCII "Failed writing header"
- ASCII "%1023[^;
- =]=%4999[^;
- ]"
- ASCII "secure"
- ASCII "httponly"
- ASCII "path"
- ASCII "domain"
- ASCII "skipped cookie with bad tailmatch domain: %s
- "
- ASCII "version"
- ASCII "max-age"
- ASCII "expires"
- ASCII "#HttpOnly_"
- ASCII "TRUE"
- ASCII "FALSE"
- ASCII "TRUE"
- ASCII "TRUE"
- ASCII "Replaced"
- ASCII "Added"
- ASCII "%s cookie %s="%s" for domain %s, path %s, expire %I64d
- "
- ASCII "none"
- ASCII "Set-Cookie:"
- ASCII "Set-Cookie:"
- ASCII "TRUE"
- ASCII "FALSE"
- ASCII "unknown"
- ASCII "#HttpOnly_"
- ASCII "%s%s%s %s %s %s %I64d %s %s"
- ASCII "# Netscape HTTP Cookie File
- # http://curl.haxx.se/docs/http-cookies.html
- # This file was generated by libcurl! Edit at your own risk.
- "
- ASCII "%s
- "
- ASCII "#
- # Fatal libcurl error
- "
- ASCII "WARNING: failed to save cookies in %s
- "
- ASCII "Failed to set SO_KEEPALIVE on fd %d
- "
- ASCII "Failed to set SIO_KEEPALIVE_VALS on fd %d: %d
- "
- ASCII "Local Interface %s is ip %s using address family %i
- "
- ASCII "Couldn't bind to interface '%s'"
- ASCII "Name '%s' family %i resolved to '%s' family %i
- "
- ASCII "Couldn't bind to '%s'"
- ASCII "Bind to local port %hu failed, trying next
- "
- ASCII "getsockname() failed with errno %d: %s"
- ASCII "Local port: %hu
- "
- ASCII "bind failed with errno %d: %s"
- ASCII "getpeername() failed with errno %d: %s"
- ASCII "getsockname() failed with errno %d: %s"
- ASCII "ssrem inet_ntop() failed with errno %d: %s"
- ASCII "ssloc inet_ntop() failed with errno %d: %s"
- ASCII "Could not set TCP_NODELAY: %s
- "
- ASCII "TCP_NODELAY set
- "
- ASCII "sa_addr inet_ntop() failed with errno %d: %s"
- ASCII " Trying %s...
- "
- ASCII "Immediate connect fail for %s: %s
- "
- ASCII "Connection time-out"
- ASCII "Connection time-out"
- ASCII "After %ldms connect time, move on!
- "
- ASCII "Connection failed
- "
- ASCII "connect to %s port %ld failed: %s
- "
- ASCII "Failed to connect to %s port %ld: %s"
- ASCII "operation aborted by callback"
- ASCII "Read callback asked for PAUSE when not supported!"
- ASCII "read function returned funny value"
- ASCII "
- "
- ASCII "%x%s"
- ASCII "seek callback returned error %d"
- ASCII "the ioctl callback returned %d
- "
- ASCII "ioctl callback returned error %d"
- ASCII "necessary data rewind wasn't possible"
- ASCII "The requested document is not new enough
- "
- ASCII "The requested document is not old enough
- "
- ASCII "Ignoring the response-body
- "
- ASCII "Leftovers after chunking: %zu bytes
- "
- ASCII "Rewinding %zu bytes
- "
- ASCII "Rewinding stream by : %zu bytes on url %s (size = %I64d, maxdownload = %I64d, bytecount = %I64d, nread = %zd)
- "
- ASCII "Excess found in a non pipelined read: excess = %zu, size = %I64d, maxdownload = %I64d, bytecount = %I64d
- "
- ASCII "Rewinding stream by : %zd bytes on url %s (zero-length body)
- "
- ASCII "Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
- "
- ASCII "The entire document is already downloaded"
- ASCII "HTTP server doesn't seem to support byte ranges. Cannot resume."
- ASCII "Simulate a HTTP 304 response!
- "
- ASCII "Failed writing data"
- ASCII "%s in chunked-encoding"
- ASCII "we are done reading and this is set to close, stop send
- "
- ASCII "Failed to alloc scratch buffer!"
- ASCII "We are completely uploaded and fine
- "
- ASCII "select/poll returned error"
- ASCII "Done waiting for 100-continue
- "
- ASCII "Operation timed out after %ld milliseconds with %I64d out of %I64d bytes received"
- ASCII "Operation timed out after %ld milliseconds with %I64d bytes received"
- ASCII "transfer closed with %I64d bytes remaining to read"
- ASCII "transfer closed with outstanding read data remaining"
- ASCII "No URL set!"
- ASCII "%15[^?&/:]://%c"
- ASCII "//"
- ASCII "Maximum (%ld) redirects followed"
- ASCII "Issue another request to this URL: '%s'
- "
- ASCII "HEAD"
- ASCII "GET"
- ASCII "Disables POST, goes with %s
- "
- ASCII "Switch from POST to GET
- "
- ASCII "Re-used connection seems dead, get a new one
- "
- ASCII "Connection died, retrying a fresh connect
- "
- ASCII "TRUE"
- ASCII "FALSE"
- ASCII "Conn: %ld (%p) Receive pipe weight: (%I64d/%zu), penalized: %s
- "
- ASCII "Site %s:%d is pipeline blacklisted
- "
- ASCII "Server %s is blacklisted
- "
- ASCII "Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds"
- ASCII "--:--:--"
- ASCII "%2I64d:%02I64d:%02I64d"
- ASCII "%3I64dd %02I64dh"
- ASCII "%7I64dd"
- ASCII "%5I64d"
- ASCII "%4I64dk"
- ASCII "%2I64d.%0I64dM"
- ASCII "%4I64dM"
- ASCII "%2I64d.%0I64dG"
- ASCII "%4I64dG"
- ASCII "%4I64dT"
- ASCII "%4I64dP"
- ASCII "Callback aborted"
- ASCII "** Resuming transfer from byte position %I64d
- "
- ASCII " %% Total %% Received %% Xferd Average Speed Time Time Time Current
- Dload Upload Total Spent Left Speed
- "
- ASCII "%3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s"
- ASCII "%s:%s"
- ASCII "Proxy-"
- ASCII "%sAuthorization: Basic %s
- "
- ASCII "NTLM send, close instead of sending %I64d bytes
- "
- ASCII "Rewind stream after send
- "
- ASCII "Negotiate"
- ASCII "NTLM"
- ASCII "Digest"
- ASCII "Proxy-authorization:"
- ASCII "Basic"
- ASCII "Authorization:"
- ASCII "Proxy"
- ASCII "Server"
- ASCII "%s auth using %s with user '%s'
- "
- ASCII "Negotiate"
- ASCII "Negotiate"
- ASCII "NTLM"
- ASCII "NTLM"
- ASCII "Digest"
- ASCII "Digest"
- ASCII "Ignoring duplicate digest auth header.
- "
- ASCII "Basic"
- ASCII "Basic"
- ASCII "Authentication problem. Ignoring this.
- "
- ASCII "Empty reply from server"
- ASCII "HTTP/"
- ASCII "HTTP/"
- ASCII "RTSP/"
- ASCII "RTSP/"
- ASCII "Avoided giant realloc for header (max is %d)!"
- ASCII "Failed to alloc memory for big header!"
- ASCII "HTTP"
- ASCII "The requested URL returned error: %s"
- ASCII "The requested URL returned error: %d"
- ASCII "The requested URL returned error: %d"
- ASCII "Expect:"
- ASCII "Expect:"
- ASCII "100-continue"
- ASCII "Expect: 100-continue
- "
- ASCII "%s
- "
- ASCII "Host:"
- ASCII "Host:"
- ASCII "Content-Type:"
- ASCII "Content-Type:"
- ASCII "Content-Length"
- ASCII "Content-Length"
- ASCII "Connection"
- ASCII "Connection"
- ASCII "Invalid TIMEVALUE"
- ASCII "%s, %02d %s %4d %02d:%02d:%02d GMT"
- ASCII "If-Modified-Since: %s
- "
- ASCII "Last-Modified: %s
- "
- ASCII "If-Unmodified-Since: %s
- "
- ASCII "HEAD"
- ASCII "PUT"
- ASCII "POST"
- ASCII "GET"
- ASCII "User-Agent:"
- ASCII "Referer:"
- ASCII "Referer: %s
- "
- ASCII "Cookie:"
- ASCII "Accept-Encoding:"
- ASCII "Accept-Encoding: %s
- "
- ASCII "Transfer-Encoding:"
- ASCII "Transfer-Encoding:"
- ASCII "chunked"
- ASCII "Chunky upload is not supported by HTTP 1.0"
- ASCII "Transfer-Encoding: chunked
- "
- ASCII "Host:"
- ASCII "Host: %s%s%s
- "
- ASCII "Host: %s%s%s:%hu
- "
- ASCII "ftp://"
- ASCII "ftp://"
- ASCII ";type="
- ASCII ";type=%c"
- ASCII "Content-Type:"
- ASCII "Accept:"
- ASCII "Could not seek stream"
- ASCII "File already completely uploaded"
- ASCII "Could only read %I64d bytes from the input"
- ASCII "Range:"
- ASCII "Range: bytes=%s
- "
- ASCII "Content-Range:"
- ASCII "Content-Range: bytes 0-%I64d/%I64d
- "
- ASCII "Content-Range: bytes %s%I64d/%I64d
- "
- ASCII "Content-Range: bytes %s/%I64d
- "
- ASCII "1.1"
- ASCII "1.0"
- ASCII "%s "
- ASCII "ftp://%s:%s@%s"
- ASCII "Proxy-Connection:"
- ASCII "Proxy-Connection: Keep-Alive
- "
- ASCII "%s HTTP/%s
- %s%s%s%s%s%s%s%s%s%s%s"
- ASCII "Cookie: "
- ASCII "%s%s=%s"
- ASCII "Cookie: "
- ASCII "%s%s"
- ASCII "
- "
- ASCII "
- "
- ASCII "Failed sending HTTP request"
- ASCII "; "
- ASCII "; "
- ASCII "Content-Length:"
- ASCII "Content-Length: %I64d
- "
- ASCII "
- "
- ASCII "Failed sending PUT request"
- ASCII "Internal HTTP POST error!"
- ASCII "Content-Length:"
- ASCII "Content-Length: %I64d
- "
- ASCII "Could not get Content-Type header line!"
- ASCII "
- "
- ASCII "Failed sending POST request"
- ASCII "Content-Length: 0
- "
- ASCII "Failed sending POST request"
- ASCII "Content-Length:"
- ASCII "Content-Length: %I64d
- "
- ASCII "Content-Type:"
- ASCII "Content-Type: application/x-www-form-urlencoded
- "
- ASCII "Expect:"
- ASCII "Expect:"
- ASCII "100-continue"
- ASCII "
- "
- ASCII "
- "
- ASCII "%x
- "
- ASCII "0
- "
- ASCII "
- "
- ASCII "
- "
- ASCII "0
- "
- ASCII "Failed sending HTTP POST request"
- ASCII "upload completely sent off: %I64d out of %I64d bytes
- "
- ASCII " HTTP/%d.%d %d"
- ASCII " HTTP %3d"
- ASCII " RTSP/%d.%d %3d"
- ASCII "HTTP 1.0, assume close after body
- "
- ASCII "Content-Length:"
- ASCII "Content-Length:"
- ASCII "Negative content-length: %I64d, closing after transfer
- "
- ASCII "Content-Type:"
- ASCII "Content-Type:"
- ASCII "Server:"
- ASCII "Server:"
- ASCII "keep-alive"
- ASCII "Proxy-Connection:"
- ASCII "HTTP/1.0 proxy connection set to keep alive!
- "
- ASCII "close"
- ASCII "Proxy-Connection:"
- ASCII "HTTP/1.1 proxy connection set close!
- "
- ASCII "keep-alive"
- ASCII "Connection:"
- ASCII "HTTP/1.0 connection set to keep alive!
- "
- ASCII "close"
- ASCII "Connection:"
- ASCII "Transfer-Encoding:"
- ASCII "Transfer-Encoding:"
- ASCII "chunked"
- ASCII "chunked"
- ASCII "identity"
- ASCII "identity"
- ASCII "deflate"
- ASCII "deflate"
- ASCII "gzip"
- ASCII "gzip"
- ASCII "x-gzip"
- ASCII "x-gzip"
- ASCII "compress"
- ASCII "compress"
- ASCII "x-compress"
- ASCII "x-compress"
- ASCII "Content-Encoding:"
- ASCII "Content-Encoding:"
- ASCII "identity"
- ASCII "identity"
- ASCII "deflate"
- ASCII "deflate"
- ASCII "gzip"
- ASCII "gzip"
- ASCII "x-gzip"
- ASCII "x-gzip"
- ASCII "compress"
- ASCII "compress"
- ASCII "x-compress"
- ASCII "x-compress"
- ASCII "Content-Range:"
- ASCII "Content-Range:"
- ASCII "Set-Cookie:"
- ASCII "Set-Cookie:"
- ASCII "Last-Modified:"
- ASCII "Last-Modified:"
- ASCII "Last-Modified:"
- ASCII "WWW-Authenticate:"
- ASCII "WWW-Authenticate:"
- ASCII "Proxy-authenticate:"
- ASCII "Proxy-authenticate:"
- ASCII "Location:"
- ASCII "Location:"
- ASCII "Received 101
- "
- ASCII "no chunk, no close, no size. Assume close to signal end
- "
- ASCII "HTTP error before end of send, stop sending
- "
- ASCII "Keep sending data to get tossed away!
- "
- ASCII "Maximum file size exceeded"
- ASCII "The requested URL returned error: %d"
- ASCII "I32"
- ASCII "I64"
- ASCII "I32"
- ASCII "I64"
- ASCII "0123456789abcdefghijklmnopqrstuvwxyz"
- ASCII "%ld"
- ASCII ".%ld"
- ASCII "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
- ASCII "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
- ASCII "(nil)"
- ASCII "(nil)"
- ASCII "0123456789abcdefghijklmnopqrstuvwxyz"
- ASCII "No error"
- ASCII "Unsupported protocol"
- ASCII "Failed initialization"
- ASCII "URL using bad/illegal format or missing URL"
- ASCII "A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision."
- ASCII "Couldn't resolve proxy name"
- ASCII "Couldn't resolve host name"
- ASCII "Couldn't connect to server"
- ASCII "FTP: weird server reply"
- ASCII "Access denied to remote resource"
- ASCII "FTP: The server failed to connect to data port"
- ASCII "FTP: Accepting server connect has timed out"
- ASCII "FTP: The server did not accept the PRET command."
- ASCII "FTP: unknown PASS reply"
- ASCII "FTP: unknown PASV reply"
- ASCII "FTP: unknown 227 response format"
- ASCII "FTP: can't figure out the host in the PASV response"
- ASCII "Error in the HTTP2 framing layer"
- ASCII "FTP: couldn't set file type"
- ASCII "Transferred a partial file"
- ASCII "FTP: couldn't retrieve (RETR failed) the specified file"
- ASCII "Quote command returned error"
- ASCII "HTTP response code said error"
- ASCII "Failed writing received data to disk/application"
- ASCII "Upload failed (at start/before it took off)"
- ASCII "Failed to open/read local data from file/application"
- ASCII "Out of memory"
- ASCII "Timeout was reached"
- ASCII "FTP: command PORT failed"
- ASCII "FTP: command REST failed"
- ASCII "Requested range was not delivered by the server"
- ASCII "Internal problem setting up the POST"
- ASCII "SSL connect error"
- ASCII "Couldn't resume download"
- ASCII "Couldn't read a file:// file"
- ASCII "LDAP: cannot bind"
- ASCII "LDAP: search failed"
- ASCII "A required function in the library was not found"
- ASCII "Operation was aborted by an application callback"
- ASCII "A libcurl function was given a bad argument"
- ASCII "Failed binding local connection end"
- ASCII "Number of redirects hit maximum amount"
- ASCII "An unknown option was passed in to libcurl"
- ASCII "Malformed telnet option"
- ASCII "SSL peer certificate or SSH remote key was not OK"
- ASCII "Server returned nothing (no headers, no data)"
- ASCII "SSL crypto engine not found"
- ASCII "Can not set SSL crypto engine as default"
- ASCII "Failed to initialise SSL crypto engine"
- ASCII "Failed sending data to the peer"
- ASCII "Failure when receiving data from the peer"
- ASCII "Problem with the local SSL certificate"
- ASCII "Couldn't use specified SSL cipher"
- ASCII "Peer certificate cannot be authenticated with given CA certificates"
- ASCII "Problem with the SSL CA cert (path? access rights?)"
- ASCII "Unrecognized or bad HTTP Content or Transfer-Encoding"
- ASCII "Invalid LDAP URL"
- ASCII "Maximum file size exceeded"
- ASCII "Requested SSL level failed"
- ASCII "Failed to shut down the SSL connection"
- ASCII "Failed to load CRL file (path? access rights?, format?)"
- ASCII "Issuer check against peer certificate failed"
- ASCII "Send failed since rewinding of the data stream failed"
- ASCII "Login denied"
- ASCII "TFTP: File Not Found"
- ASCII "TFTP: Access Violation"
- ASCII "Disk full or allocation exceeded"
- ASCII "TFTP: Illegal operation"
- ASCII "TFTP: Unknown transfer ID"
- ASCII "Remote file already exists"
- ASCII "TFTP: No such user"
- ASCII "Conversion failed"
- ASCII "Caller must register CURLOPT_CONV_ callback options"
- ASCII "Remote file not found"
- ASCII "Error in the SSH layer"
- ASCII "Socket not ready for send/recv"
- ASCII "RTSP CSeq mismatch or invalid CSeq"
- ASCII "RTSP session error"
- ASCII "Unable to parse FTP file list"
- ASCII "Chunk callback failed"
- ASCII "The max connection limit is reached"
- ASCII "SSL public key does not match pinned public key"
- ASCII "Unknown error"
- ASCII "Call interrupted"
- ASCII "Bad file"
- ASCII "Bad access"
- ASCII "Bad argument"
- ASCII "Invalid arguments"
- ASCII "Out of file descriptors"
- ASCII "Call would block"
- ASCII "Blocking call in progress"
- ASCII "Descriptor is not a socket"
- ASCII "Need destination address"
- ASCII "Bad message size"
- ASCII "Bad protocol"
- ASCII "Protocol option is unsupported"
- ASCII "Protocol is unsupported"
- ASCII "Socket is unsupported"
- ASCII "Operation not supported"
- ASCII "Address family not supported"
- ASCII "Protocol family not supported"
- ASCII "Address already in use"
- ASCII "Address not available"
- ASCII "Network down"
- ASCII "Network unreachable"
- ASCII "Network has been reset"
- ASCII "Connection was aborted"
- ASCII "Connection was reset"
- ASCII "No buffer space"
- ASCII "Socket is already connected"
- ASCII "Socket is not connected"
- ASCII "Socket has been shut down"
- ASCII "Too many references"
- ASCII "Timed out"
- ASCII "Connection refused"
- ASCII "Loop??"
- ASCII "Name too long"
- ASCII "Host down"
- ASCII "Host unreachable"
- ASCII "Not empty"
- ASCII "Process limit reached"
- ASCII "Too many users"
- ASCII "Bad quota"
- ASCII "Something is stale"
- ASCII "Remote error"
- ASCII "Winsock library is not ready"
- ASCII "Winsock library not initialised"
- ASCII "Winsock version not supported"
- ASCII "Disconnected"
- ASCII "No data record of requested type"
- ASCII "Unrecoverable error in call to nameserver"
- ASCII "Host not found, try again"
- ASCII "Host not found"
- ASCII "Unknown error %d (%#x)"
- ASCII "SEC_E_ALGORITHM_MISMATCH"
- ASCII "SEC_E_BAD_BINDINGS"
- ASCII "SEC_E_BAD_PKGID"
- ASCII "SEC_E_BUFFER_TOO_SMALL"
- ASCII "SEC_E_CANNOT_INSTALL"
- ASCII "SEC_E_CANNOT_PACK"
- ASCII "SEC_E_CERT_EXPIRED"
- ASCII "SEC_E_CERT_UNKNOWN"
- ASCII "SEC_E_CERT_WRONG_USAGE"
- ASCII "SEC_E_CONTEXT_EXPIRED"
- ASCII "SEC_E_CROSSREALM_DELEGATION_FAILURE"
- ASCII "SEC_E_CRYPTO_SYSTEM_INVALID"
- ASCII "SEC_E_DECRYPT_FAILURE"
- ASCII "SEC_E_DELEGATION_POLICY"
- ASCII "SEC_E_DELEGATION_REQUIRED"
- ASCII "SEC_E_DOWNGRADE_DETECTED"
- ASCII "SEC_E_ENCRYPT_FAILURE"
- ASCII "SEC_E_ILLEGAL_MESSAGE"
- ASCII "SEC_E_INCOMPLETE_CREDENTIALS"
- ASCII "SEC_E_INCOMPLETE_MESSAGE"
- ASCII "SEC_E_INSUFFICIENT_MEMORY"
- ASCII "SEC_E_INTERNAL_ERROR"
- ASCII "SEC_E_INVALID_HANDLE"
- ASCII "SEC_E_INVALID_PARAMETER"
- ASCII "SEC_E_INVALID_TOKEN"
- ASCII "SEC_E_ISSUING_CA_UNTRUSTED"
- ASCII "SEC_E_ISSUING_CA_UNTRUSTED_KDC"
- ASCII "SEC_E_KDC_CERT_EXPIRED"
- ASCII "SEC_E_KDC_CERT_REVOKED"
- ASCII "SEC_E_KDC_INVALID_REQUEST"
- ASCII "SEC_E_KDC_UNABLE_TO_REFER"
- ASCII "SEC_E_KDC_UNKNOWN_ETYPE"
- ASCII "SEC_E_LOGON_DENIED"
- ASCII "SEC_E_MAX_REFERRALS_EXCEEDED"
- ASCII "SEC_E_MESSAGE_ALTERED"
- ASCII "SEC_E_MULTIPLE_ACCOUNTS"
- ASCII "SEC_E_MUST_BE_KDC"
- ASCII "SEC_E_NOT_OWNER"
- ASCII "SEC_E_NO_AUTHENTICATING_AUTHORITY"
- ASCII "SEC_E_NO_CREDENTIALS"
- ASCII "SEC_E_NO_IMPERSONATION"
- ASCII "SEC_E_NO_IP_ADDRESSES"
- ASCII "SEC_E_NO_KERB_KEY"
- ASCII "SEC_E_NO_PA_DATA"
- ASCII "SEC_E_NO_S4U_PROT_SUPPORT"
- ASCII "SEC_E_NO_TGT_REPLY"
- ASCII "SEC_E_OUT_OF_SEQUENCE"
- ASCII "SEC_E_PKINIT_CLIENT_FAILURE"
- ASCII "SEC_E_PKINIT_NAME_MISMATCH"
- ASCII "SEC_E_POLICY_NLTM_ONLY"
- ASCII "SEC_E_QOP_NOT_SUPPORTED"
- ASCII "SEC_E_REVOCATION_OFFLINE_C"
- ASCII "SEC_E_REVOCATION_OFFLINE_KDC"
- ASCII "SEC_E_SECPKG_NOT_FOUND"
- ASCII "SEC_E_SECURITY_QOS_FAILED"
- ASCII "SEC_E_SHUTDOWN_IN_PROGRESS"
- ASCII "SEC_E_SMARTCARD_CERT_EXPIRED"
- ASCII "SEC_E_SMARTCARD_CERT_REVOKED"
- ASCII "SEC_E_SMARTCARD_LOGON_REQUIRED"
- ASCII "SEC_E_STRONG_CRYPTO_NOT_SUPPORTED"
- ASCII "SEC_E_TARGET_UNKNOWN"
- ASCII "SEC_E_TIME_SKEW"
- ASCII "SEC_E_TOO_MANY_PRINCIPALS"
- ASCII "SEC_E_UNFINISHED_CONTEXT_DELETED"
- ASCII "SEC_E_UNKNOWN_CREDENTIALS"
- ASCII "SEC_E_UNSUPPORTED_FUNCTION"
- ASCII "SEC_E_UNSUPPORTED_PREAUTH"
- ASCII "SEC_E_UNTRUSTED_ROOT"
- ASCII "SEC_E_WRONG_CREDENTIAL_HANDLE"
- ASCII "SEC_E_WRONG_PRINCIPAL"
- ASCII "No error"
- ASCII "SEC_I_LOCAL_LOGON"
- ASCII "%s (0x%04X%04X)"
- ASCII "%s - %s"
- ASCII "SEC_I_COMPLETE_AND_CONTINUE"
- ASCII "SEC_I_COMPLETE_NEEDED"
- ASCII "SEC_I_CONTINUE_NEEDED"
- ASCII "SEC_I_CONTEXT_EXPIRED"
- ASCII "Unknown error"
- ASCII "SEC_I_SIGNATURE_NEEDED"
- ASCII "SEC_I_NO_LSA_CONTEXT"
- ASCII "SEC_I_RENEGOTIATE"
- ASCII "SEC_I_INCOMPLETE_CREDENTIALS"
- ASCII "0123456789"
- ASCII "schannel: SSL/TLS connection with %s port %hu (step 1/3)
- "
- ASCII "schannel: re-using existing credential handle
- "
- ASCII "schannel: using IP address, SNI is not supported by OS.
- "
- ASCII "schannel: SNI or certificate check failed: %s"
- ASCII "schannel: checking server certificate revocation
- "
- ASCII "schannel: disable server certificate revocation checks
- "
- ASCII "schannel: verifyhost setting prevents Schannel from comparing the supplied target name with the subject names in server certificates. Also disables SNI.
- "
- ASCII "schannel: unable to allocate memory"
- ASCII "Microsoft Unified Security Protocol Provider"
- ASCII "schannel: SNI or certificate check failed: %s"
- ASCII "schannel: AcquireCredentialsHandle failed: %s"
- ASCII "schannel: initial InitializeSecurityContext failed: %s"
- ASCII "schannel: sending initial handshake data: sending %lu bytes...
- "
- ASCII "schannel: sent initial handshake data: sent %zd bytes
- "
- ASCII "schannel: failed to send initial handshake data: sent %zd of %lu bytes"
- ASCII "schannel: SSL/TLS connection with %s port %hu (step 2/3)
- "
- ASCII "schannel: unable to allocate memory"
- ASCII "schannel: unable to re-allocate memory"
- ASCII "schannel: encrypted data buffer: offset %zu length %zu
- "
- ASCII "schannel: sending next handshake data: sending %lu bytes...
- "
- ASCII "schannel: encrypted data length: %lu
- "
- ASCII "schannel: failed to receive handshake, need more data
- "
- ASCII "schannel: failed to receive handshake, SSL/TLS connection failed"
- ASCII "schannel: unable to allocate memory"
- ASCII "schannel: received incomplete message, need more data
- "
- ASCII "schannel: SNI or certificate check failed: %s"
- ASCII "schannel: next InitializeSecurityContext failed: %s"
- ASCII "schannel: failed to send next handshake data: sent %zd of %lu bytes"
- ASCII "schannel: SSL/TLS handshake complete
- "
- ASCII "schannel: SSL/TLS connection with %s port %hu (step 3/3)
- "
- ASCII "schannel: failed to setup sequence detection"
- ASCII "schannel: failed to setup replay detection"
- ASCII "schannel: failed to setup confidentiality"
- ASCII "schannel: failed to setup memory allocation"
- ASCII "schannel: failed to setup stream orientation"
- ASCII "schannel: incremented credential handle refcount = %d
- "
- ASCII "schannel: old credential handle is stale, removing
- "
- ASCII "schannel: failed to store credential handle"
- ASCII "schannel: stored credential handle in session cache
- "
- ASCII "schannel: timed out sending data (bytes sent: %zd)"
- ASCII "select/poll on SSL socket, errno: %d"
- ASCII "schannel: client wants to read %zu bytes
- "
- ASCII "schannel: unable to allocate memory"
- ASCII "schannel: unable to re-allocate memory"
- ASCII "schannel: encrypted data buffer: offset %zu length %zu
- "
- ASCII "schannel: encrypted data got %zd
- "
- ASCII "schannel: encrypted data buffer: offset %zu length %zu
- "
- ASCII "schannel: decrypted data length: %lu
- "
- ASCII "schannel: decrypted data added: %zu
- "
- ASCII "schannel: decrypted data cached: offset %zu length %zu
- "
- ASCII "schannel: encrypted data length: %lu
- "
- ASCII "schannel: encrypted data cached: offset %zu length %zu
- "
- ASCII "schannel: remote party requests SSL/TLS renegotiation
- "
- ASCII "schannel: renegotiating SSL/TLS connection
- "
- ASCII "schannel: decrypted data buffer: offset %zu length %zu
- "
- ASCII "schannel: decrypted data buffer: offset %zu length %zu
- "
- ASCII "schannel: decrypted data returned %zd
- "
- ASCII "schannel: server closed the connection
- "
- ASCII "schannel: failed to decrypt data, need more data
- "
- ASCII "schannel: SSL/TLS connection renegotiated
- "
- ASCII "schannel: failed to read data from server: %s
- "
- ASCII "schannel: shutting down SSL/TLS connection with %s port %hu
- "
- ASCII "schannel: ApplyControlToken failure: %s"
- ASCII "schannel: failed to send close msg: %s (bytes written: %zd)
- "
- ASCII "schannel: clear security context handle
- "
- ASCII "schannel: decremented credential handle refcount = %d
- "
- ASCII "schannel: clear credential handle
- "
- ASCII "select/poll on SSL/TLS socket, errno: %d"
- ASCII "SSL/TLS connection timeout"
- ASCII "%d.%d.%d.%d"
- ASCII "Failed sending Gopher request"
- ASCII "
- "
- ASCII "
- "
- ASCII "Failed sending Gopher request"
- ASCII "The CSeq of this request %ld did not match the response %ld"
- ASCII "Got an RTP Receive with a CSeq of %ld
- "
- ASCII "Got invalid RTSP request: RTSPREQ_NONE"
- ASCII "OPTIONS"
- ASCII "Refusing to issue an RTSP request [%s] without a session ID."
- ASCII "DESCRIBE"
- ASCII "ANNOUNCE"
- ASCII "SETUP"
- ASCII "PLAY"
- ASCII "PAUSE"
- ASCII "TEARDOWN"
- ASCII "GET_PARAMETER"
- ASCII "SET_PARAMETER"
- ASCII "RECORD"
- ASCII "Got invalid RTSP request: RTSPREQ_LAST"
- ASCII "Transport:"
- ASCII "Transport: %s
- "
- ASCII "Refusing to issue an RTSP SETUP without a Transport: header."
- ASCII "Accept:"
- ASCII "Accept-Encoding:"
- ASCII "Accept-Encoding: %s
- "
- ASCII "User-Agent:"
- ASCII "User-Agent:"
- ASCII "Referer:"
- ASCII "Referer: %s
- "
- ASCII "Range:"
- ASCII "Range: %s
- "
- ASCII "CSeq:"
- ASCII "CSeq cannot be set as a custom header."
- ASCII "Session:"
- ASCII "Session ID cannot be set as a custom header."
- ASCII "%s %s RTSP/1.0
- CSeq: %ld
- "
- ASCII "Session: %s
- "
- ASCII "%s%s%s%s%s%s"
- ASCII "Content-Length:"
- ASCII "Content-Length: %I64d
- "
- ASCII "Content-Type:"
- ASCII "Content-Type:"
- ASCII "Content-Type: text/parameters
- "
- ASCII "Content-Type: application/sdp
- "
- ASCII "
- "
- ASCII "Failed sending RTSP request"
- ASCII "Cannot write a 0 size RTP packet."
- ASCII "Cannot pause RTP"
- ASCII "Failed writing RTP data"
- ASCII "CSeq:"
- ASCII "CSeq:"
- ASCII ": %ld"
- ASCII "Unable to read the CSeq header: [%s]"
- ASCII "Session:"
- ASCII "Session:"
- ASCII "Got a blank Session ID"
- ASCII "Got RTSP Session ID Line [%s], but wanted ID [%s]"
- ASCII "Got an error writing an RTP packet"
- ASCII "EHLO %s"
- ASCII "HELO %s"
- ASCII "STARTTLS"
- ASCII "%s"
- ASCII "AUTH %s %s"
- ASCII "AUTH %s"
- ASCII "VRFY"
- ASCII "%s %s"
- ASCII "HELP"
- ASCII "%s"
- ASCII "%s"
- ASCII "<>"
- ASCII "%s"
- ASCII "<%s>"
- ASCII "<>"
- ASCII "%I64d"
- ASCII "MAIL FROM:%s"
- ASCII "MAIL FROM:%s AUTH=%s"
- ASCII "MAIL FROM:%s AUTH=%s SIZE=%s"
- ASCII "MAIL FROM:%s SIZE=%s"
- ASCII "RCPT TO:%s"
- ASCII "RCPT TO:<%s>"
- ASCII "QUIT"
- ASCII "%s"
- ASCII "Got unexpected smtp-server response: %d"
- ASCII "Remote access denied: %d"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "smtp"
- ASCII "%s"
- ASCII "%s"
- ASCII "Authentication failed: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "smtp"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Authentication failed: %d"
- ASCII "Command failed: %d"
- ASCII "MAIL failed: %d"
- ASCII "RCPT failed: %d"
- ASCII "DATA"
- ASCII "%s"
- ASCII "DATA failed: %d"
- ASCII "
- .
- "
- ASCII ".
- "
- ASCII "AUTH"
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "CRAM-MD5"
- ASCII "DIGEST-MD5"
- ASCII "GSSAPI"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "localhost"
- ASCII "GSSAPI"
- ASCII "smtp"
- ASCII "DIGEST-MD5"
- ASCII "CRAM-MD5"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "Failed to alloc scratch buffer!"
- ASCII "
- .
- "
- ASCII "
- .."
- ASCII "
- .
- "
- ASCII "No known authentication mechanisms supported!
- "
- ASCII "STARTTLS denied. %c"
- ASCII "Remote access denied: %d"
- ASCII "STARTTLS"
- ASCII "SIZE"
- ASCII "AUTH "
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "CRAM-MD5"
- ASCII "DIGEST-MD5"
- ASCII "GSSAPI"
- ASCII "EXTERNAL"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "STARTTLS not supported."
- ASCII "Authentication cancelled"
- ASCII "-ERR"
- ASCII "+OK"
- ASCII "CAPA"
- ASCII "%s"
- ASCII "STLS"
- ASCII "%s"
- ASCII "USER %s"
- ASCII "%02x"
- ASCII "APOP %s %s"
- ASCII "AUTH %s %s"
- ASCII "AUTH %s"
- ASCII "RETR"
- ASCII "LIST"
- ASCII "%s %s"
- ASCII "%s"
- ASCII "QUIT"
- ASCII "%s"
- ASCII "Got unexpected pop3-server response"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "pop"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "pop"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Authentication failed: %d"
- ASCII "Access denied. %c"
- ASCII "PASS %s"
- ASCII "Access denied. %c"
- ASCII "AUTH"
- ASCII "+APOP"
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "CRAM-MD5"
- ASCII "DIGEST-MD5"
- ASCII "GSSAPI"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "GSSAPI"
- ASCII "pop"
- ASCII "DIGEST-MD5"
- ASCII "CRAM-MD5"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "
- .
- "
- ASCII "
- .
- "
- ASCII "No known authentication mechanisms supported!
- "
- ASCII "STLS"
- ASCII "USER"
- ASCII "SASL "
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "CRAM-MD5"
- ASCII "DIGEST-MD5"
- ASCII "GSSAPI"
- ASCII "EXTERNAL"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "STLS not supported."
- ASCII "STARTTLS denied. %c"
- ASCII "Authentication cancelled"
- ASCII "OK"
- ASCII "NO"
- ASCII "BAD"
- ASCII "Bad tagged response"
- ASCII "* "
- ASCII "SEARCH"
- ASCII "FETCH"
- ASCII "LIST"
- ASCII "STORE"
- ASCII "FETCH"
- ASCII "SELECT"
- ASCII "EXAMINE"
- ASCII "SEARCH"
- ASCII "EXPUNGE"
- ASCII "LSUB"
- ASCII "UID"
- ASCII "NOOP"
- ASCII "CAPABILITY"
- ASCII "+ "
- ASCII "Unexpected continuation response"
- ASCII "Access denied. %c"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "imap"
- ASCII "%s"
- ASCII "%s"
- ASCII "Authentication failed: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "imap"
- ASCII "%s"
- ASCII "Access denied: %d"
- ASCII "%s"
- ASCII "%s"
- ASCII "Authentication failed: %d"
- ASCII "Access denied. %c"
- ASCII "Found %I64u bytes to download
- "
- ASCII "Written %I64u bytes, %I64u bytes are left for transfer
- "
- ASCII "Failed to parse FETCH response."
- ASCII "%s"
- ASCII "%c%03d"
- ASCII "%s %s"
- ASCII "AUTH"
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "CRAM-MD5"
- ASCII "DIGEST-MD5"
- ASCII "GSSAPI"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "UIDVALIDITY"
- ASCII "UID"
- ASCII "SECTION"
- ASCII "PARTIAL"
- ASCII "GSSAPI"
- ASCII "imap"
- ASCII "DIGEST-MD5"
- ASCII "CRAM-MD5"
- ASCII "NTLM"
- ASCII "LOGIN"
- ASCII "XOAUTH2"
- ASCII "PLAIN"
- ASCII "CAPABILITY"
- ASCII "STARTTLS"
- ASCII "LOGIN %s %s"
- ASCII "AUTHENTICATE %s %s"
- ASCII "AUTHENTICATE %s"
- ASCII "No known authentication mechanisms supported!
- "
- ASCII "%s%s"
- ASCII "LIST "%s" *"
- ASCII "Cannot SELECT without a mailbox."
- ASCII "SELECT %s"
- ASCII "Cannot FETCH without a UID."
- ASCII "FETCH %s BODY[%s]<%s>"
- ASCII "FETCH %s BODY[%s]"
- ASCII "Cannot APPEND without a mailbox."
- ASCII "Cannot APPEND with unknown input file size
- "
- ASCII "APPEND %s (\Seen) {%I64d}"
- ASCII "Cannot SEARCH without a query string."
- ASCII "SEARCH %s"
- ASCII "LOGOUT"
- ASCII "Got unexpected imap-server response"
- ASCII "STARTTLS"
- ASCII "LOGINDISABLED"
- ASCII "SASL-IR"
- ASCII "AUTH="
- ASCII "LOGIN"
- ASCII "PLAIN"
- ASCII "CRAM-MD5"
- ASCII "DIGEST-MD5"
- ASCII "GSSAPI"
- ASCII "EXTERNAL"
- ASCII "NTLM"
- ASCII "XOAUTH2"
- ASCII "STARTTLS not supported."
- ASCII "STARTTLS denied. %c"
- ASCII "Authentication cancelled"
- ASCII "OK [UIDVALIDITY %19[0123456789]]"
- ASCII "Mailbox UIDVALIDITY has changed"
- ASCII "Select failed"
- ASCII "Connection time-out"
- ASCII "set timeouts for state %d; Total %ld, retry %d maxtry %d
- "
- ASCII "got option=(%s) value=(%s)
- "
- ASCII "blksize"
- ASCII "requested"
- ASCII "blksize parsed from OACK"
- ASCII "%s (%d) %s (%d)
- "
- ASCII "tsize"
- ASCII "tsize parsed from OACK"
- ASCII "%s (%ld)
- "
- ASCII "Malformed ACK packet, rejecting"
- ASCII "invalid blocksize value in OACK packet"
- ASCII "blksize is larger than max supported"
- ASCII "%s (%d)"
- ASCII "blksize is smaller than min supported"
- ASCII "server requested blksize larger than allocated"
- ASCII "%s (%ld)"
- ASCII "invalid tsize -:%s:- value in OACK packet"
- ASCII "tftp_rx: internal error"
- ASCII "%s"
- ASCII "Timeout waiting for block %d ACK. Retries = %d
- "
- ASCII "Received last DATA packet block %d again.
- "
- ASCII "%s"
- ASCII "Received unexpected DATA packet block %d, expecting block %d
- "
- ASCII "tftp_tx: internal error, event: %i"
- ASCII "Timeout waiting for block %d ACK. Retries = %d
- "
- ASCII "Received ACK for block %d, expecting %d
- "
- ASCII "tftp_tx: giving up waiting for block %d ack"
- ASCII "%s"
- ASCII "%s"
- ASCII "bind() failed; %s"
- ASCII ";mode="
- ASCII ";mode="
- ASCII "Connected for transmit"
- ASCII "%s
- "
- ASCII "Connected for receive"
- ASCII "%s
- "
- ASCII "octet"
- ASCII "netascii"
- ASCII "tftp_send_first: internal error"
- ASCII "%s%c%s%c"
- ASCII "%I64d"
- ASCII "tsize"
- ASCII "%d"
- ASCII "blksize"
- ASCII "%d"
- ASCII "timeout"
- ASCII "%s"
- ASCII "Internal state machine error"
- ASCII "%s"
- ASCII "TFTP finished"
- ASCII "%s
- "
- ASCII "Received too short packet"
- ASCII "Internal error: Unexpected packet"
- ASCII "%s"
- ASCII "%s
- "
- ASCII "TFTP response timeout"
- ASCII "%s"
- ASCII "Can't open %s for writing"
- ASCII "Can't get the size of %s"
- ASCII "Content-Length: %I64d
- "
- ASCII "Accept-ranges: bytes
- "
- ASCII "Last-Modified: %s, %02d %s %4d %02d:%02d:%02d GMT
- "
- ASCII "Can't get the size of file."
- ASCII "failed to resume file:// transfer"
- ASCII "Couldn't open file %s"
- ASCII "one"
- ASCII "onetree"
- ASCII "base"
- ASCII "sub"
- ASCII "subtree"
- ASCII "LDAP"
- ASCII "LDAP"
- ASCII "Microsoft Corporation."
- ASCII "LDAP local: LDAP Vendor = %s ; LDAP Version = %d
- "
- ASCII "LDAP local: %s
- "
- ASCII "LDAP local: %s"
- ASCII "encrypted"
- ASCII "cleartext"
- ASCII "LDAP local: trying to establish %s connection
- "
- ASCII "LDAP local: Cannot connect to %s:%ld"
- ASCII "LDAP local: ldap_simple_bind_s %s"
- ASCII "LDAP remote: %s"
- ASCII "DN: "
- ASCII ": "
- ASCII ";binary"
- ASCII "There are more than %d entries
- "
- ASCII "/MATCH:"
- ASCII "/M:"
- ASCII "/FIND:"
- ASCII "/DEFINE:"
- ASCII "/D:"
- ASCII "/LOOKUP:"
- ASCII "CLIENT libcurl 7.39.0
- %s
- QUIT
- "
- ASCII "lookup word is missing
- "
- ASCII "default"
- ASCII "CLIENT libcurl 7.39.0
- DEFINE %s %s
- QUIT
- "
- ASCII "Failed sending DICT request"
- ASCII "lookup word is missing
- "
- ASCII "default"
- ASCII "CLIENT libcurl 7.39.0
- MATCH %s %s %s
- QUIT
- "
- ASCII "Failed sending DICT request"
- ASCII "WSAStartup failed (%d)"
- ASCII "insufficient winsock version to support telnet"
- ASCII "%s IAC %s
- "
- ASCII "%s IAC %d
- "
- ASCII "WILL"
- ASCII "WONT"
- ASCII "DO"
- ASCII "EXOPL"
- ASCII "%s %s %s
- "
- ASCII "%s %s %d
- "
- ASCII "%s %d %d
- "
- ASCII "Sending data failed (%d)"
- ASCII "SENT"
- ASCII "RCVD"
- ASCII "SENT"
- ASCII "%s IAC SB "
- ASCII "(terminated by "
- ASCII "%s "
- ASCII "%u "
- ASCII "%s"
- ASCII "%d"
- ASCII ", not IAC SE!) "
- ASCII "(Empty suboption?)"
- ASCII "%s (unsupported)"
- ASCII "%s"
- ASCII "%d (unknown)"
- ASCII " NAME"
- ASCII " INFO/REPLY"
- ASCII " SEND"
- ASCII " IS"
- ASCII " %.2x"
- ASCII "%c"
- ASCII " = "
- ASCII ", "
- ASCII " "%s""
- ASCII "Width: %hu ; Height: %hu"
- ASCII "USER,%s"
- ASCII "%127[^= ]%*[ =]%255s"
- ASCII "TTYPE"
- ASCII "XDISPLOC"
- ASCII "NEW_ENV"
- ASCII "WS"
- ASCII "%hu%*[xX]%hu"
- ASCII "BINARY"
- ASCII "Unknown telnet option %s"
- ASCII "Syntax error in telnet option: %s"
- ASCII "%c%c%c%c"
- ASCII "%127[^,],%127s"
- ASCII "%c%s%c%s"
- ASCII "%c%c"
- ASCII "%c%c%c%c%s%c%c"
- ASCII "Sending data failed (%d)"
- ASCII "Sending data failed (%d)"
- ASCII "Sending data failed (%d)"
- ASCII "RCVD"
- ASCII "RCVD"
- ASCII "RCVD"
- ASCII "RCVD"
- ASCII "In SUBOPTION processing, RCVD"
- ASCII "RCVD"
- ASCII "WS2_32.DLL"
- ASCII "failed to load WS2_32.DLL (%d)"
- ASCII "WSACreateEvent"
- ASCII "failed to find WSACreateEvent function (%d)"
- ASCII "WSACloseEvent"
- ASCII "failed to find WSACloseEvent function (%d)"
- ASCII "WSAEventSelect"
- ASCII "failed to find WSAEventSelect function (%d)"
- ASCII "WSAEnumNetworkEvents"
- ASCII "failed to find WSAEnumNetworkEvents function (%d)"
- ASCII "WSACreateEvent failed (%d)"
- ASCII "Time-out"
- ASCII "WSACloseEvent failed (%d)"
- ASCII "FreeLibrary(wsock2) failed (%d)"
- ASCII "WSAEnumNetworkEvents failed (%d)"
- ASCII "Error accept()ing server connect"
- ASCII "Connection accepted from server
- "
- ASCII "USER %s"
- ASCII "PWD"
- ASCII "%s"
- ASCII "getsockname() failed: %s"
- ASCII "failed to resolve the address provided to PORT: %s"
- ASCII "socket failure: %s"
- ASCII "bind(port=%hu) on non-local address failed: %s
- "
- ASCII "bind() failed, we ran out of ports!"
- ASCII "getsockname() failed: %s"
- ASCII "bind(port=%hu) failed: %s"
- ASCII "socket failure: %s"
- ASCII "EPRT"
- ASCII "%s |%d|%s|%hu|"
- ASCII "Failure sending EPRT command: %s"
- ASCII ",%d,%d"
- ASCII "PORT"
- ASCII "%s %s"
- ASCII "Failure sending PORT command: %s"
- ASCII "EPSV"
- ASCII "%s"
- ASCII "Connect data stream passively
- "
- ASCII "NLST"
- ASCII "LIST"
- ASCII "%s%s%s"
- ASCII "%s"
- ASCII "SIZE %s"
- ASCII "Could not seek stream"
- ASCII "File already completely uploaded
- "
- ASCII "Failed to read data"
- ASCII "APPE %s"
- ASCII "STOR %s"
- ASCII "Failed EPSV attempt. Disabling EPSV
- "
- ASCII "PASV"
- ASCII "%s"
- ASCII "unknown proxytype option given"
- ASCII "Maximum file size exceeded"
- ASCII "ftp server doesn't support SIZE
- "
- ASCII "Offset (%I64d) was beyond file size (%I64d)"
- ASCII "File already completely downloaded
- "
- ASCII "Instructs server to resume from offset %I64d
- "
- ASCII "REST %I64d"
- ASCII "RETR %s"
- ASCII "PBSZ %d"
- ASCII "PASS %s"
- ASCII "ACCT %s"
- ASCII "ACCT requested but none available"
- ASCII "%s"
- ASCII "Access denied: %03d"
- ASCII "ACCT rejected by server: %03d"
- ASCII "Connecting to %s (%s) port %d
- "
- ASCII "QUIT"
- ASCII "%s"
- ASCII "Failure sending QUIT command: %s"
- ASCII "no memory"
- ASCII "no memory"
- ASCII "Uploading to a URL without a file name!"
- ASCII "Request has same path as previous transfer
- "
- ASCII ";type="
- ASCII ";type="
- ASCII "Doing the SSL/TLS handshake on the data stream
- "
- ASCII "We got a 421 - timeout!
- "
- ASCII "FTP response timeout"
- ASCII "FTP response aborted due to select/poll error: %d"
- ASCII "MDTM %s"
- ASCII "%c%c%c%u%c"
- ASCII "Illegal port number in EPSV reply"
- ASCII "%s"
- ASCII "Weirdly formatted EPSV reply"
- ASCII "%d,%d,%d,%d,%d,%d"
- ASCII "Couldn't interpret the 227-response"
- ASCII "Skips %d.%d.%d.%d for data connection, uses %s instead
- "
- ASCII "%s"
- ASCII "%d.%d.%d.%d"
- ASCII "Can't resolve proxy host %s:%hu"
- ASCII "Can't resolve new host %s:%hu"
- ASCII "Bad PASV/EPSV response: %03d"
- ASCII "unsupported MDTM reply format
- "
- ASCII "Given file does not exist"
- ASCII "%04d%02d%02d%02d%02d%02d"
- ASCII "%04d%02d%02d %02d:%02d:%02d GMT"
- ASCII "Last-Modified: %s, %02d %s %4d %02d:%02d:%02d GMT
- "
- ASCII "The requested document is not new enough
- "
- ASCII "The requested document is not old enough
- "
- ASCII "Skipping time comparison
- "
- ASCII "%s"
- ASCII "QUOT string not accepted: %s"
- ASCII "Wildcard - Parsing started
- "
- ASCII "%s%s"
- ASCII "Wildcard - START of "%s"
- "
- ASCII "Wildcard - "%s" skipped by user
- "
- ASCII "Checking for server connect
- "
- ASCII "Accept timeout occurred while waiting server connect"
- ASCII "There is negative response in cache while serv connect
- "
- ASCII "Ready to accept data connection from server
- "
- ASCII "Ctrl conn has data while waiting for data conn
- "
- ASCII "Error while waiting for server connect"
- ASCII "Preparing for accepting server on data port
- "
- ASCII "Accept timeout occurred while waiting server connect"
- ASCII "CWD %s"
- ASCII "%s"
- ASCII "SIZE %s"
- ASCII "Failed FTP upload: %0d"
- ASCII "Data conn was not available immediately
- "
- ASCII "RETR response: %03d"
- ASCII " bytes"
- ASCII "Maxdownload = %I64d
- "
- ASCII "Getting file with size: %I64d
- "
- ASCII "Data conn was not available immediately
- "
- ASCII "Remembering we are in dir "%s"
- "
- ASCII "ABOR"
- ASCII "%s"
- ASCII "Failure sending ABOR command: %s"
- ASCII "control connection looks dead"
- ASCII "partial download completed, closing connection
- "
- ASCII "server did not report OK, got %d"
- ASCII "Uploaded unaligned file size (%I64d out of %I64d bytes)"
- ASCII "Received only partial file: %I64d bytes"
- ASCII "No data was received!"
- ASCII "ftp_perform ends with SECONDARY: %d
- "
- ASCII "NLST"
- ASCII "LIST"
- ASCII "PRET %s"
- ASCII "PRET STOR %s"
- ASCII "PRET RETR %s"
- ASCII "REST %d"
- ASCII "SIZE %s"
- ASCII "Couldn't set desired mode"
- ASCII "Got a %03d response code instead of the assumed 200
- "
- ASCII "Content-Length: %I64d
- "
- ASCII "Accept-ranges: bytes
- "
- ASCII "Couldn't use REST"
- ASCII "RETR %s"
- ASCII "TYPE %c"
- ASCII "Connection to proxy confirmed
- "
- ASCII "disabling EPRT usage
- "
- ASCII "Failed to do PORT"
- ASCII "Connect data stream actively
- "
- ASCII "Got a %03d ftp-server response when 220 was expected"
- ASCII "AUTH %s"
- ASCII "unsupported parameter to CURLOPT_FTPSSLAUTH: %d"
- ASCII "AUTH %s"
- ASCII "PROT %c"
- ASCII "CCC"
- ASCII "%s"
- ASCII "Failed to clear the command channel (CCC)"
- ASCII "SYST"
- ASCII "%s"
- ASCII "Entry path is '%s'
- "
- ASCII "Entry path is '%s'
- "
- ASCII "Failed to figure out path
- "
- ASCII "OS/400"
- ASCII "SITE NAMEFMT 1"
- ASCII "%s"
- ASCII "QUOT command failed with %03d"
- ASCII "MKD %s"
- ASCII "Server denied you to change to the given directory"
- ASCII "Failed to MKD dir: %03d"
- ASCII "CWD %s"
- ASCII "PRET command not accepted: %03d"
- ASCII "Connection time-out"
- ASCII "SOCKS4 communication to %s:%d
- "
- ASCII "%hu.%hu.%hu.%hu"
- ASCII "SOCKS4 connect to %s (locally resolved)
- "
- ASCII "Failed to resolve "%s" for SOCKS4 connect."
- ASCII "Too long SOCKS proxy name, can't use!
- "
- ASCII "SOCKS4 reply has wrong version, version should be 4."
- ASCII "Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown."
- ASCII "Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids."
- ASCII "Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client."
- ASCII "Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed."
- ASCII "SOCKS4%s request granted.
- "
- ASCII "Failed to receive SOCKS4 connect request ack."
- ASCII "Failed to send SOCKS4 connect request."
- ASCII "SOCKS5: server resolving disabled for hostnames of length > 255 [actual len=%zu]
- "
- ASCII "Connection time-out"
- ASCII "SOCKS5: no connection here"
- ASCII "SOCKS5: connection timeout"
- ASCII "SOCKS5: error occurred during connection"
- ASCII "SOCKS5 nothing to read"
- ASCII "SOCKS5 read timeout"
- ASCII "SOCKS5 read error occurred"
- ASCII "Received invalid version in initial SOCKS5 response."
- ASCII "Unable to negotiate SOCKS5 GSS-API context."
- ASCII "User was rejected by the SOCKS5 server (%d %d)."
- ASCII "SOCKS5 GSS-API protection not yet implemented."
- ASCII "SOCKS5 GSS-API protection not yet implemented."
- ASCII "%d
- "
- ASCII "Failed to resolve "%s" for SOCKS5 connect."
- ASCII "SOCKS5 reply has wrong version, version should be 5."
- ASCII "Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)"
- ASCII "Can't complete SOCKS5 connection to %s:%d. (%d)"
- ASCII "Can't complete SOCKS5 connection to %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%d. (%d)"
- ASCII "Failed to receive SOCKS5 connect request ack."
- ASCII "Failed to send SOCKS5 connect request."
- ASCII "Unable to receive SOCKS5 sub-negotiation response."
- ASCII "Failed to send SOCKS5 sub-negotiation request."
- ASCII "No authentication method was acceptable."
- ASCII "No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)"
- ASCII "Undocumented SOCKS5 mode attempted to be used by server."
- ASCII "Unable to receive initial SOCKS5 response."
- ASCII "Unable to send initial SOCKS5 request."
- ASCII "Establish HTTP proxy tunnel to %s:%hu
- "
- ASCII "%s:%hu"
- ASCII "CONNECT"
- ASCII "1.0"
- ASCII "1.1"
- ASCII "%s%s%s:%hu"
- ASCII "Host:"
- ASCII "Host: %s
- "
- ASCII "Proxy-Connection:"
- ASCII "Proxy-Connection: Keep-Alive
- "
- ASCII "User-Agent:"
- ASCII "CONNECT %s HTTP/%s
- %s%s%s%s"
- ASCII "
- "
- ASCII "Failed sending CONNECT to proxy"
- ASCII "Proxy CONNECT connection closed"
- ASCII "Proxy CONNECT aborted"
- ASCII "chunk reading DONE
- "
- ASCII "Read %zd bytes of chunk, continue
- "
- ASCII "WWW-Authenticate:"
- ASCII "WWW-Authenticate:"
- ASCII "Proxy-authenticate:"
- ASCII "Proxy-authenticate:"
- ASCII "Content-Length:"
- ASCII "Content-Length:"
- ASCII "Content-Length:"
- ASCII "close"
- ASCII "Connection:"
- ASCII "chunked"
- ASCII "Transfer-Encoding:"
- ASCII "CONNECT responded chunked
- "
- ASCII "close"
- ASCII "Proxy-Connection:"
- ASCII "HTTP/1.%d %d"
- ASCII "Ignore %I64d bytes of response-body
- "
- ASCII "%zd bytes of chunk left
- "
- ASCII "chunk reading DONE
- "
- ASCII "Read %zd bytes of chunk, continue
- "
- ASCII "Proxy CONNECT followed by %zd bytes of opaque data. Data ignored (known bug #39)"
- ASCII "Proxy CONNECT aborted due to select/poll error"
- ASCII "Proxy CONNECT aborted due to timeout"
- ASCII "TUNNEL_STATE switched to: %d
- "
- ASCII "Proxy CONNECT aborted due to timeout"
- ASCII "Connect me again please
- "
- ASCII "Received HTTP code %d from proxy after CONNECT"
- ASCII "Proxy replied OK to CONNECT request
- "
- UNICODE "ERROR %d converting to Punycode
- "
- ASCII "HOME"
- ASCII "_netrc"
- ASCII "%s%s%s"
- ASCII "
- "
- ASCII "login"
- ASCII "password"
- ASCII "machine"
- ASCII "machine"
- ASCII "
- "
- ASCII "%02x"
- ASCII "%08x%08x%08x%08x"
- ASCII "%s:%s:%s"
- ASCII "%s:%s:%s"
- ASCII "%s:%.*s"
- ASCII "auth-int"
- ASCII "d41d8cd98f00b204e9800998ecf8427e"
- ASCII "%s:%s"
- ASCII "%s:%s:%08x:%s:%s:%s"
- ASCII "%s:%s:%s"
- ASCII "Proxy-"
- ASCII "%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%.*s", cnonce="%s", nc=%08x, qop=%s, response="%s""
- ASCII "auth"
- ASCII "Proxy-"
- ASCII "%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%.*s", response="%s""
- ASCII "%s, opaque="%s""
- ASCII "%s, algorithm="%s""
- ASCII "
- "
- ASCII "Digest"
- ASCII "Digest"
- ASCII "nonce"
- ASCII "stale"
- ASCII "true"
- ASCII "realm"
- ASCII "opaque"
- ASCII "qop"
- ASCII "auth"
- ASCII "auth-int"
- ASCII "auth"
- ASCII "auth-int"
- ASCII "algorithm"
- ASCII "MD5-sess"
- ASCII "MD5"
- ASCII "Proxy-"
- ASCII "%sAuthorization: NTLM %s
- "
- ASCII "Proxy-"
- ASCII "%sAuthorization: NTLM %s
- "
- ASCII "NTLM"
- ASCII "NTLM"
- ASCII "NTLM handshake rejected
- "
- ASCII "NTLM handshake failure (internal error)
- "
- ASCII "./"
- ASCII "../"
- ASCII "/./"
- ASCII "/."
- ASCII "/../"
- ASCII "/.."
- ASCII ".."
- ASCII "GMT"
- ASCII "%31[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]"
- ASCII "%02d:%02d:%02d"
- ASCII "%02d:%02d"
- ASCII "OK"
- ASCII "Out of memory"
- ASCII "Bad content-encoding found"
- ASCII "Write error"
- ASCII "Malformed encoding found"
- ASCII "Illegal or missing hexadecimal sequence"
- ASCII "Too long hexadecimal number"
- ASCII "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
- ASCII "%c%c%c%c"
- ASCII "%c%c%c="
- ASCII "%c%c=="
- ASCII "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
- ASCII "Proxy-"
- ASCII "%sAuthorization: Negotiate %s
- "
- ASCII "HTTP"
- ASCII "Negotiate"
- ASCII "Negotiate"
- ASCII "Negotiate"
- ASCII "%s
- "
- ASCII "response reading failed"
- ASCII "Excessive server response line length received, %zd bytes. Stripping
- "
- ASCII "server response timeout"
- ASCII "select/poll error"
- ASCII "%s %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
- ASCII "%s/%s"
- ASCII "WDigest"
- ASCII "WDigest"
- ASCII "Kerberos"
- ASCII "Kerberos"
- ASCII " -> "
- ASCII "<DIR>"
- ASCII "APM0123456789:"
- ASCII "0123456789-"
- ASCII "total "
- ASCII "rwx-tTsS"
- ASCII "SSPI error: %s failed: %s"
- ASCII "%s/%s"
- ASCII "Kerberos"
- ASCII "AcquireCredentialsHandle"
- ASCII "Failed to acquire credentials."
- ASCII "InitializeSecurityContext"
- ASCII "Failed to initialise security context."
- ASCII "Failed to send SSPI authentication token."
- ASCII "Failed to send SSPI authentication request."
- ASCII "QueryCredentialAttributes"
- ASCII "Failed to determine user name."
- ASCII "SOCKS5 server authencticated user %s with GSS-API.
- "
- ASCII "confidentiality"
- ASCII "SOCKS5 server supports GSS-API %s data protection.
- "
- ASCII "integrity"
- ASCII "no"
- ASCII "QueryContextAttributes"
- ASCII "Failed to query security context attributes."
- ASCII "EncryptMessage"
- ASCII "Failed to send SSPI encryption type."
- ASCII "User was rejected by the SOCKS5 server (%u %u)."
- ASCII "Invalid SSPI encryption response type (%u %u)."
- ASCII "DecryptMessage"
- ASCII "Invalid SSPI encryption response length (%lu)."
- ASCII "Invalid SSPI encryption response length (%lu)."
- ASCII "out GSS-API data"
- ASCII " GSS-API integrity"
- ASCII " GSS-API confidentiality"
- ASCII "SOCKS5 access with%s protection granted.
- "
- ASCII "Failed to receive SSPI encryption type."
- ASCII "Failed to receive SSPI encryption response."
- ASCII "Failed to send SSPI encryption type."
- ASCII "Failed to send SSPI encryption request."
- ASCII "User was rejected by the SOCKS5 server (%u %u)."
- ASCII "Invalid SSPI authentication response type (%u %u)."
- ASCII "Failed to receive SSPI authentication token."
- ASCII "Failed to receive SSPI authentication response."
- ASCII "NTLM handshake failure (empty type-2 message)
- "
- ASCII "NTLM"
- ASCII "NTLM"
- ASCII "NTLM handshake failure (type-3 message): Status=%x
- "
- ASCII "6\"
- ASCII "digit"
- ASCII "alnum"
- ASCII "alpha"
- ASCII "xdigit"
- ASCII "print"
- ASCII "graph"
- ASCII "space"
- ASCII "blank"
- ASCII "upper"
- ASCII "lower"
- ASCII "iostream stream error"
- ASCII "bad function call"
- ASCII "Unknown exception"
- ASCII "bad allocation"
- UNICODE "mscoree.dll"
- ASCII "CorExitProcess"
- UNICODE "Assertion failed!"
- UNICODE "Program: "
- UNICODE "<program name unknown>"
- UNICODE "File: "
- UNICODE "Line: "
- UNICODE "Expression: "
- UNICODE "For information on how your program can cause an assertion
- failure, see the Visual C++ documentation on asserts"
- UNICODE "(Press Retry to debug the application - JIT must be enabled)"
- UNICODE "Microsoft Visual C++ Runtime Library"
- UNICODE "Assertion failed: %s, file %s, line %d
- "
- UNICODE "Assertion failed: %s, file %s, line %d
- "
- ASCII "?*"
- ASCII "./\"
- ASCII "Visual C++ CRT: Not enough memory to complete call to strerror."
- ASCII "Visual C++ CRT: Not enough memory to complete call to strerror."
- ASCII "_.,"
- ASCII "_.,"
- ASCII "=;"
- ASCII "bad exception"
- UNICODE "Runtime Error!
- Program: "
- UNICODE "<program name unknown>"
- UNICODE "..."
- UNICODE "
- "
- UNICODE "Microsoft Visual C++ Runtime Library"
- UNICODE "ccs"
- UNICODE "UTF-8"
- UNICODE "UTF-16LE"
- UNICODE "UNICODE"
- UNICODE "KERNEL32.DLL"
- UNICODE "KERNEL32.DLL"
- ASCII "FlsAlloc"
- ASCII "FlsGetValue"
- ASCII "FlsSetValue"
- ASCII "FlsFree"
- ASCII "ccs"
- ASCII "UTF-8"
- ASCII "UTF-16LE"
- ASCII "UNICODE"
- UNICODE "USER32.DLL"
- ASCII "MessageBoxW"
- ASCII "GetActiveWindow"
- ASCII "GetLastActivePopup"
- ASCII "GetUserObjectInformationW"
- ASCII "GetProcessWindowStation"
- ASCII ".exe"
- ASCII ".cmd"
- ASCII ".bat"
- ASCII ".com"
- ASCII "e+000"
- ASCII "ACP"
- ASCII "OCP"
- ASCII "Norwegian-Nynorsk"
- ASCII "TZ"
- UNICODE "CONOUT$"
- ASCII "1#SNAN"
- ASCII "1#IND"
- ASCII "1#INF"
- ASCII "1#QNAN"
- ASCII "pow"
- ASCII "exp"
- ASCII "exp"
- ASCII "log10"
- ASCII "log10"
- ASCII "log"
- ASCII "log"
- ASCII "pow"
- ASCII "asin"
- ASCII "acos"
- ASCII "pow"
- ASCII "pow"
- ASCII "exp10"
- ASCII "log"
- ASCII "log10"
- ASCII "exp"
- ASCII "atan"
- ASCII "ceil"
- ASCII "floor"
- ASCII "modf"
- ASCII "sin"
- ASCII "cos"
- ASCII "tan"
- [/CODE]
- fattura.exe
- [CODE]
- Search - Text strings referenced in fattura
- Address Command Comments
- 00402261 PUSH 0040506C UNICODE "kernel32.dll"
- 004025BF MOV EAX,00404028 ASCII "LP@"
- 00402A79 MOV EAX,00404178 ASCII "h*@"
- 00402A94 MOV DWORD PTR DS:[EAX],00404218 ASCII "r4@"
- 00402B04 PUSH 00405088 UNICODE "Rocal OppWizard-Generated Applications"
- 00402B34 PUSH 00404028 ASCII "LP@"
- 00402DCC MOV DWORD PTR DS:[EAX],004043D0 ASCII "~-@"
- 0040308C MOV EAX,004044A0 ASCII "{0@"
- 004030A5 MOV DWORD PTR DS:[EAX],00404508 ASCII "m0@"
- 004030BA MOV DWORD PTR DS:[EAX],00404508 ASCII "m0@"
- 0040399B PUSH 00405058 ASCII "GetModuleFileNameW"
- 004060E9 IMUL EAX,DWORD PTR DS:[EAX],699000 ASCII "0u"
- 004060F9 IMUL EAX,DWORD PTR DS:[EAX],695000 UNICODE "his copy of Windows &legal?"
- 00417E67 SBB EAX,76D55DCD ASCII "illColor"
- 0041E7BC SBB EAX,7715AA54 UNICODE "sport can only process the specified request on the server side of a session.
- "
- 0041F152 MOV ECX,6E39979A ASCII "E?AV?$fpos@H@2@V32@H@Z"
- 00434A9C MOV EBP,76D861A9 ASCII "tationFUSCanRemoteUserDisconnect"
- 0043B3A6 MOV EDI,76D712C2 ASCII "HeapCostReduced"
- 0043E857 MOV ESI,74BE43EA ASCII "escriptor"
- 0043F25C ADD EAX,755D6E04 ASCII "nitterm_e"
- [/CODE]
- locker.exe
- [CODE]
- Search - Text strings referenced in KERNELBASE
- Comments
- ASCII "KERNELBASE.dll"
- ASCII "AccessCheck"
- ASCII "AccessCheckAndAuditAlarmW"
- ASCII "AccessCheckByType"
- ASCII "AccessCheckByTypeAndAuditAlarmW"
- ASCII "AccessCheckByTypeResultList"
- ASCII "AccessCheckByTypeResultListAndAuditAlarmByHandleW"
- ASCII "AccessCheckByTypeResultListAndAuditAlarmW"
- ASCII "AcquireSRWLockExclusive"
- ASCII "AcquireSRWLockShared"
- ASCII "AcquireStateLock"
- ASCII "ActivateActCtx"
- ASCII "AddAccessAllowedAce"
- ASCII "AddAccessAllowedAceEx"
- ASCII "AddAccessAllowedObjectAce"
- ASCII "AddAccessDeniedAce"
- ASCII "AddAccessDeniedAceEx"
- ASCII "AddAccessDeniedObjectAce"
- ASCII "AddAce"
- ASCII "AddAuditAccessAce"
- ASCII "AddAuditAccessAceEx"
- ASCII "AddAuditAccessObjectAce"
- ASCII "AddDllDirectory"
- ASCII "AddMandatoryAce"
- ASCII "AddRefActCtx"
- ASCII "AddResourceAttributeAce"
- ASCII "AddSIDToBoundaryDescriptor"
- ASCII "AddScopedPolicyIDAce"
- ASCII "AddVectoredContinueHandler"
- ASCII "AddVectoredExceptionHandler"
- ASCII "AdjustTokenGroups"
- ASCII "AdjustTokenPrivileges"
- ASCII "AllocConsole"
- ASCII "AllocateAndInitializeSid"
- ASCII "AllocateLocallyUniqueId"
- ASCII "AllocateUserPhysicalPages"
- ASCII "AllocateUserPhysicalPagesNuma"
- ASCII "AppContainerDeriveSidFromMoniker"
- ASCII "AppContainerFreeMemory"
- ASCII "AppContainerLookupDisplayNameMrtReference"
- ASCII "AppContainerLookupMoniker"
- ASCII "AppContainerRegisterSid"
- ASCII "AppContainerUnregisterSid"
- ASCII "AppXFreeMemory"
- ASCII "AppXGetApplicationData"
- ASCII "AppXGetDevelopmentMode"
- ASCII "AppXGetOSMaxVersionTested"
- ASCII "AppXGetOSMinVersion"
- ASCII "AppXGetPackageCapabilities"
- ASCII "AppXGetPackageSid"
- ASCII "AppXGetPackageState"
- ASCII "AppXLookupDisplayName"
- ASCII "AppXLookupMoniker"
- ASCII "AppXPostSuccessExtension"
- ASCII "AppXPreCreationExtension"
- ASCII "AppXReleaseAppXContext"
- ASCII "AppXSetPackageState"
- ASCII "AreAllAccessesGranted"
- ASCII "AreAnyAccessesGranted"
- ASCII "AreFileApisANSI"
- ASCII "AreThereVisibleLogoffScriptsInternal"
- ASCII "AreThereVisibleShutdownScriptsInternal"
- ASCII "AttachConsole"
- ASCII "BaseCheckAppcompatCache"
- ASCII "BaseCheckAppcompatCacheEx"
- ASCII "BaseCleanupAppcompatCacheSupport"
- ASCII "BaseDllFreeResourceId"
- ASCII "BaseDllMapResourceIdW"
- ASCII "BaseDumpAppcompatCache"
- ASCII "BaseFlushAppcompatCache"
- ASCII "BaseFormatObjectAttributes"
- ASCII "BaseFreeAppCompatDataForProcess"
- ASCII "BaseInitAppcompatCacheSupport"
- ASCII "BaseIsAppcompatInfrastructureDisabled"
- ASCII "BaseMarkFileForDelete"
- ASCII "BaseReadAppCompatDataForProcess"
- ASCII "BaseUpdateAppcompatCache"
- ASCII "BasepAdjustObjectAttributesForPrivateNamespace"
- ASCII "BasepCopyFileCallback"
- ASCII "BasepCopyFileExW"
- ASCII "BasepNotifyTrackingService"
- ASCII "Beep"
- ASCII "BemCopyReference"
- ASCII "BemCreateContractFrom"
- ASCII "BemCreateReference"
- ASCII "BemFreeContract"
- ASCII "BemFreeReference"
- ASCII "CLOSE_LOCAL_HANDLE_INTERNAL"
- ASCII "CallbackMayRunLong"
- ASCII "CancelIo"
- ASCII "CancelIoEx"
- ASCII "CancelSynchronousIo"
- ASCII "CancelThreadpoolIo"
- ASCII "CancelWaitableTimer"
- ASCII "ChangeTimerQueueTimer"
- ASCII "CharLowerA"
- ASCII "CharLowerBuffA"
- ASCII "CharLowerBuffW"
- ASCII "CharLowerW"
- ASCII "CharNextA"
- ASCII "CharNextExA"
- ASCII "CharNextW"
- ASCII "CharPrevA"
- ASCII "CharPrevExA"
- ASCII "CharPrevW"
- ASCII "CharUpperA"
- ASCII "CharUpperBuffA"
- ASCII "CharUpperBuffW"
- ASCII "CharUpperW"
- ASCII "CheckGroupPolicyEnabled"
- ASCII "CheckIfStateChangeNotificationExists"
- ASCII "CheckRemoteDebuggerPresent"
- ASCII "CheckTokenCapability"
- ASCII "CheckTokenMembership"
- ASCII "CheckTokenMembershipEx"
- ASCII "ChrCmpIA"
- ASCII "ChrCmpIW"
- ASCII "ClearCommBreak"
- ASCII "ClearCommError"
- ASCII "CloseHandle"
- ASCII "ClosePackageInfo"
- ASCII "ClosePrivateNamespace"
- ASCII "CloseState"
- ASCII "CloseStateAtom"
- ASCII "CloseStateChangeNotification"
- ASCII "CloseStateContainer"
- ASCII "CloseStateLock"
- ASCII "CloseThreadpool"
- ASCII "CloseThreadpoolCleanupGroup"
- ASCII "CloseThreadpoolCleanupGroupMembers"
- ASCII "CloseThreadpoolIo"
- ASCII "CloseThreadpoolTimer"
- ASCII "CloseThreadpoolWait"
- ASCII "CloseThreadpoolWork"
- ASCII "CommitStateAtom"
- ASCII "CompareFileTime"
- ASCII "CompareStringA"
- ASCII "CompareStringEx"
- ASCII "CompareStringOrdinal"
- ASCII "CompareStringW"
- ASCII "ConnectNamedPipe"
- ASCII "ContinueDebugEvent"
- ASCII "ConvertDefaultLocale"
- ASCII "ConvertToAutoInheritPrivateObjectSecurity"
- ASCII "CopyContext"
- ASCII "CopyFile2"
- ASCII "CopyFileExW"
- ASCII "CopySid"
- ASCII "CreateActCtxW"
- ASCII "CreateAppContainerToken"
- ASCII "CreateBoundaryDescriptorW"
- ASCII "CreateConsoleScreenBuffer"
- ASCII "CreateDirectoryA"
- ASCII "CreateDirectoryExW"
- ASCII "CreateDirectoryW"
- ASCII "CreateEventA"
- ASCII "CreateEventExA"
- ASCII "CreateEventExW"
- ASCII "CreateEventW"
- ASCII "CreateFile2"
- ASCII "CreateFileA"
- ASCII "CreateFileMappingFromApp"
- ASCII "CreateFileMappingNumaW"
- ASCII "CreateFileMappingW"
- ASCII "CreateFileW"
- ASCII "CreateHardLinkW"
- ASCII "CreateIoCompletionPort"
- ASCII "CreateMemoryResourceNotification"
- ASCII "CreateMutexA"
- ASCII "CreateMutexExA"
- ASCII "CreateMutexExW"
- ASCII "CreateMutexW"
- ASCII "CreateNamedPipeW"
- ASCII "CreatePipe"
- ASCII "CreatePrivateNamespaceW"
- ASCII "CreatePrivateObjectSecurity"
- ASCII "CreatePrivateObjectSecurityEx"
- ASCII "CreatePrivateObjectSecurityWithMultipleInheritance"
- ASCII "CreateProcessA"
- ASCII "CreateProcessAsUserW"
- ASCII "CreateProcessInternalA"
- ASCII "CreateProcessInternalW"
- ASCII "CreateProcessW"
- ASCII "CreateRemoteThread"
- ASCII "CreateRemoteThreadEx"
- ASCII "CreateRestrictedToken"
- ASCII "CreateSemaphoreExW"
- ASCII "CreateStateAtom"
- ASCII "CreateStateChangeNotification"
- ASCII "CreateStateContainer"
- ASCII "CreateStateLock"
- ASCII "CreateStateSubcontainer"
- ASCII "CreateSymbolicLinkW"
- ASCII "CreateThread"
- ASCII "CreateThreadpool"
- ASCII "CreateThreadpoolCleanupGroup"
- ASCII "CreateThreadpoolIo"
- ASCII "CreateThreadpoolTimer"
- ASCII "CreateThreadpoolWait"
- ASCII "CreateThreadpoolWork"
- ASCII "CreateTimerQueue"
- ASCII "CreateTimerQueueTimer"
- ASCII "CreateWaitableTimerExW"
- ASCII "CreateWellKnownSid"
- ASCII "CtrlRoutine"
- ASCII "DeactivateActCtx"
- ASCII "DebugActiveProcess"
- ASCII "DebugActiveProcessStop"
- ASCII "DebugBreak"
- ASCII "DecodePointer"
- ASCII "DecodeSystemPointer"
- ASCII "DefineDosDeviceW"
- ASCII "DelayLoadFailureHook"
- ASCII "DelayLoadFailureHookLookup"
- ASCII "DeleteAce"
- ASCII "DeleteBoundaryDescriptor"
- ASCII "DeleteCriticalSection"
- ASCII "DeleteFileA"
- ASCII "DeleteFileW"
- ASCII "DeleteProcThreadAttributeList"
- ASCII "DeleteStateAtomValue"
- ASCII "DeleteStateContainer"
- ASCII "DeleteStateContainerValue"
- ASCII "DeleteSynchronizationBarrier"
- ASCII "DeleteTimerQueueEx"
- ASCII "DeleteTimerQueueTimer"
- ASCII "DeleteVolumeMountPointW"
- ASCII "DestroyPrivateObjectSecurity"
- ASCII "DeviceIoControl"
- ASCII "DisablePredefinedHandleTableInternal"
- ASCII "DisableThreadLibraryCalls"
- ASCII "DisassociateCurrentThreadFromCallback"
- ASCII "DiscardVirtualMemory"
- ASCII "DisconnectNamedPipe"
- ASCII "DnsHostnameToComputerNameExW"
- ASCII "DsBindWithSpnExW"
- ASCII "DsCrackNamesW"
- ASCII "DsFreeDomainControllerInfoW"
- ASCII "DsFreeNameResultW"
- ASCII "DsFreePasswordCredentials"
- ASCII "DsGetDomainControllerInfoW"
- ASCII "DsMakePasswordCredentialsW"
- ASCII "DsUnBindW"
- ASCII "DuplicateHandle"
- ASCII "DuplicateStateContainerHandle"
- ASCII "DuplicateToken"
- ASCII "DuplicateTokenEx"
- ASCII "EmptyWorkingSet"
- ASCII "EncodePointer"
- ASCII "EncodeSystemPointer"
- ASCII "EnterCriticalPolicySectionInternal"
- ASCII "EnterCriticalSection"
- ASCII "EnterSynchronizationBarrier"
- ASCII "EnumCalendarInfoExEx"
- ASCII "EnumCalendarInfoExW"
- ASCII "EnumCalendarInfoW"
- ASCII "EnumDateFormatsExEx"
- ASCII "EnumDateFormatsExW"
- ASCII "EnumDateFormatsW"
- ASCII "EnumDeviceDrivers"
- ASCII "EnumDynamicTimeZoneInformation"
- ASCII "EnumLanguageGroupLocalesW"
- ASCII "EnumPageFilesA"
- ASCII "EnumPageFilesW"
- ASCII "EnumProcessModules"
- ASCII "EnumProcessModulesEx"
- ASCII "EnumProcesses"
- ASCII "EnumResourceLanguagesExA"
- ASCII "EnumResourceLanguagesExW"
- ASCII "EnumResourceNamesExA"
- ASCII "EnumResourceNamesExW"
- ASCII "EnumResourceTypesExA"
- ASCII "EnumResourceTypesExW"
- ASCII "EnumSystemCodePagesW"
- ASCII "EnumSystemFirmwareTables"
- ASCII "EnumSystemGeoID"
- ASCII "EnumSystemLanguageGroupsW"
- ASCII "EnumSystemLocalesA"
- ASCII "EnumSystemLocalesEx"
- ASCII "EnumSystemLocalesW"
- ASCII "EnumTimeFormatsEx"
- ASCII "EnumTimeFormatsW"
- ASCII "EnumUILanguagesW"
- ASCII "EnumerateStateAtomValues"
- ASCII "EnumerateStateContainerItems"
- ASCII "EqualDomainSid"
- ASCII "EqualPrefixSid"
- ASCII "EqualSid"
- ASCII "EscapeCommFunction"
- ASCII "EventActivityIdControl"
- ASCII "EventEnabled"
- ASCII "EventProviderEnabled"
- ASCII "EventRegister"
- ASCII "EventSetInformation"
- ASCII "EventUnregister"
- ASCII "EventWrite"
- ASCII "EventWriteEx"
- ASCII "EventWriteString"
- ASCII "EventWriteTransfer"
- ASCII "ExitProcess"
- ASCII "ExitThread"
- ASCII "ExpandEnvironmentStringsA"
- ASCII "ExpandEnvironmentStringsW"
- ASCII "FatalAppExitA"
- ASCII "FatalAppExitW"
- ASCII "FileTimeToLocalFileTime"
- ASCII "FileTimeToSystemTime"
- ASCII "FillConsoleOutputAttribute"
- ASCII "FillConsoleOutputCharacterA"
- ASCII "FillConsoleOutputCharacterW"
- ASCII "FindActCtxSectionGuid"
- ASCII "FindActCtxSectionStringW"
- ASCII "FindClose"
- ASCII "FindCloseChangeNotification"
- ASCII "FindFirstChangeNotificationA"
- ASCII "FindFirstChangeNotificationW"
- ASCII "FindFirstFileA"
- ASCII "FindFirstFileExA"
- ASCII "FindFirstFileExW"
- ASCII "FindFirstFileW"
- ASCII "FindFirstFreeAce"
- ASCII "FindFirstVolumeW"
- ASCII "FindNLSString"
- ASCII "FindNLSStringEx"
- ASCII "FindNextChangeNotification"
- ASCII "FindNextFileA"
- ASCII "FindNextFileW"
- ASCII "FindNextVolumeW"
- ASCII "FindPackagesByPackageFamily"
- ASCII "FindResourceExW"
- ASCII "FindStringOrdinal"
- ASCII "FindVolumeClose"
- ASCII "FlsAlloc"
- ASCII "FlsFree"
- ASCII "FlsGetValue"
- ASCII "FlsSetValue"
- ASCII "FlushConsoleInputBuffer"
- ASCII "FlushFileBuffers"
- ASCII "FlushInstructionCache"
- ASCII "FlushProcessWriteBuffers"
- ASCII "FlushViewOfFile"
- ASCII "FoldStringW"
- ASCII "ForceSyncFgPolicyInternal"
- ASCII "FormatApplicationUserModelId"
- ASCII "FormatMessageA"
- ASCII "FormatMessageW"
- ASCII "FreeConsole"
- ASCII "FreeEnvironmentStringsA"
- ASCII "FreeEnvironmentStringsW"
- ASCII "FreeGPOListInternalA"
- ASCII "FreeGPOListInternalW"
- ASCII "FreeLibrary"
- ASCII "FreeLibraryAndExitThread"
- ASCII "FreeLibraryWhenCallbackReturns"
- ASCII "FreeResource"
- ASCII "FreeSid"
- ASCII "FreeUserPhysicalPages"
- ASCII "GenerateConsoleCtrlEvent"
- ASCII "GenerateGPNotificationInternal"
- ASCII "GetACP"
- ASCII "GetAcceptLanguagesA"
- ASCII "GetAcceptLanguagesW"
- ASCII "GetAce"
- ASCII "GetAclInformation"
- ASCII "GetAdjustObjectAttributesForPrivateNamespaceRoutine"
- ASCII "GetAppContainerAce"
- ASCII "GetAppContainerNamedObjectPath"
- ASCII "GetAppModelVersion"
- ASCII "GetApplicationRecoveryCallback"
- ASCII "GetApplicationRestartSettings"
- ASCII "GetApplicationUserModelId"
- ASCII "GetAppliedGPOListInternalA"
- ASCII "GetAppliedGPOListInternalW"
- ASCII "GetCPFileNameFromRegistry"
- ASCII "GetCPHashNode"
- ASCII "GetCPInfo"
- ASCII "GetCPInfoExW"
- ASCII "GetCachedSigningLevel"
- ASCII "GetCalendar"
- ASCII "GetCalendarInfoEx"
- ASCII "GetCalendarInfoW"
- ASCII "GetCommConfig"
- ASCII "GetCommMask"
- ASCII "GetCommModemStatus"
- ASCII "GetCommProperties"
- ASCII "GetCommState"
- ASCII "GetCommTimeouts"
- ASCII "GetCommandLineA"
- ASCII "GetCommandLineW"
- ASCII "GetCompressedFileSizeA"
- ASCII "GetCompressedFileSizeW"
- ASCII "GetComputerNameExA"
- ASCII "GetComputerNameExW"
- ASCII "GetConsoleCP"
- ASCII "GetConsoleCursorInfo"
- ASCII "GetConsoleInputExeNameA"
- ASCII "GetConsoleInputExeNameW"
- ASCII "GetConsoleMode"
- ASCII "GetConsoleOutputCP"
- ASCII "GetConsoleScreenBufferInfo"
- ASCII "GetConsoleScreenBufferInfoEx"
- ASCII "GetConsoleTitleW"
- ASCII "GetCurrencyFormatEx"
- ASCII "GetCurrencyFormatW"
- ASCII "GetCurrentActCtx"
- ASCII "GetCurrentApplicationUserModelId"
- ASCII "GetCurrentDirectoryA"
- ASCII "GetCurrentDirectoryW"
- ASCII "GetCurrentPackageApplicationContext"
- ASCII "GetCurrentPackageApplicationResourcesContext"
- ASCII "GetCurrentPackageContext"
- ASCII "GetCurrentPackageFamilyName"
- ASCII "GetCurrentPackageFullName"
- ASCII "GetCurrentPackageId"
- ASCII "GetCurrentPackageInfo"
- ASCII "GetCurrentPackagePath"
- ASCII "GetCurrentPackageResourcesContext"
- ASCII "GetCurrentPackageSecurityContext"
- ASCII "GetCurrentProcess"
- ASCII "GetCurrentProcessId"
- ASCII "GetCurrentProcessorNumber"
- ASCII "GetCurrentProcessorNumberEx"
- ASCII "GetCurrentThread"
- ASCII "GetCurrentThreadId"
- ASCII "GetCurrentThreadStackLimits"
- ASCII "GetDateFormatA"
- ASCII "GetDateFormatEx"
- ASCII "GetDateFormatW"
- ASCII "GetDeviceDriverBaseNameA"
- ASCII "GetDeviceDriverBaseNameW"
- ASCII "GetDeviceDriverFileNameA"
- ASCII "GetDeviceDriverFileNameW"
- ASCII "GetDiskFreeSpaceA"
- ASCII "GetDiskFreeSpaceExA"
- ASCII "GetDiskFreeSpaceExW"
- ASCII "GetDiskFreeSpaceW"
- ASCII "GetDriveTypeA"
- ASCII "GetDriveTypeW"
- ASCII "GetDynamicTimeZoneInformation"
- ASCII "GetDynamicTimeZoneInformationEffectiveYears"
- ASCII "GetEightBitStringToUnicodeSizeRoutine"
- ASCII "GetEightBitStringToUnicodeStringRoutine"
- ASCII "GetEnabledXStateFeatures"
- ASCII "GetEnvironmentStrings"
- ASCII "GetEnvironmentStringsA"
- ASCII "GetEnvironmentStringsW"
- ASCII "GetEnvironmentVariableA"
- ASCII "GetEnvironmentVariableW"
- ASCII "GetEraNameCountedString"
- ASCII "GetErrorMode"
- ASCII "GetExitCodeProcess"
- ASCII "GetExitCodeThread"
- ASCII "GetFallbackDisplayName"
- ASCII "GetFileAttributesA"
- ASCII "GetFileAttributesExA"
- ASCII "GetFileAttributesExW"
- ASCII "GetFileAttributesW"
- ASCII "GetFileInformationByHandle"
- ASCII "GetFileInformationByHandleEx"
- ASCII "GetFileMUIInfo"
- ASCII "GetFileMUIPath"
- ASCII "GetFileSecurityW"
- ASCII "GetFileSize"
- ASCII "GetFileSizeEx"
- ASCII "GetFileTime"
- ASCII "GetFileType"
- ASCII "GetFileVersionInfoByHandle"
- ASCII "GetFileVersionInfoExA"
- ASCII "GetFileVersionInfoExW"
- ASCII "GetFileVersionInfoSizeExA"
- ASCII "GetFileVersionInfoSizeExW"
- ASCII "GetFinalPathNameByHandleA"
- ASCII "GetFinalPathNameByHandleW"
- ASCII "GetFullPathNameA"
- ASCII "GetFullPathNameW"
- ASCII "GetGPOListInternalA"
- ASCII "GetGPOListInternalW"
- ASCII "GetGeoInfoW"
- ASCII "GetHandleInformation"
- ASCII "GetHivePath"
- ASCII "GetKernelObjectSecurity"
- ASCII "GetLargePageMinimum"
- ASCII "GetLargestConsoleWindowSize"
- ASCII "GetLastError"
- ASCII "GetLengthSid"
- ASCII "GetLocalTime"
- ASCII "GetLocaleInfoA"
- ASCII "GetLocaleInfoEx"
- ASCII "GetLocaleInfoHelper"
- ASCII "GetLocaleInfoW"
- ASCII "GetLogicalDriveStringsW"
- ASCII "GetLogicalDrives"
- ASCII "GetLogicalProcessorInformation"
- ASCII "GetLogicalProcessorInformationEx"
- ASCII "GetLongPathNameA"
- ASCII "GetLongPathNameW"
- ASCII "GetMappedFileNameA"
- ASCII "GetMappedFileNameW"
- ASCII "GetMemoryErrorHandlingCapabilities"
- ASCII "GetModuleBaseNameA"
- ASCII "GetModuleBaseNameW"
- ASCII "GetModuleFileNameA"
- ASCII "GetModuleFileNameExA"
- ASCII "GetModuleFileNameExW"
- ASCII "GetModuleFileNameW"
- ASCII "GetModuleHandleA"
- ASCII "GetModuleHandleExA"
- ASCII "GetModuleHandleExW"
- ASCII "GetModuleHandleW"
- ASCII "GetModuleInformation"
- ASCII "GetNLSVersion"
- ASCII "GetNLSVersionEx"
- ASCII "GetNamedLocaleHashNode"
- ASCII "GetNamedPipeAttribute"
- ASCII "GetNamedPipeClientComputerNameW"
- ASCII "GetNativeSystemInfo"
- ASCII "GetNextFgPolicyRefreshInfoInternal"
- ASCII "GetNumaHighestNodeNumber"
- ASCII "GetNumaNodeProcessorMaskEx"
- ASCII "GetNumberFormatEx"
- ASCII "GetNumberFormatW"
- ASCII "GetNumberOfConsoleInputEvents"
- ASCII "GetOEMCP"
- ASCII "GetOsSafeBootMode"
- ASCII "GetOverlappedResult"
- ASCII "GetOverlappedResultEx"
- ASCII "GetPackageApplicationContext"
- ASCII "GetPackageApplicationIds"
- ASCII "GetPackageApplicationProperty"
- ASCII "GetPackageApplicationPropertyString"
- ASCII "GetPackageApplicationResourcesContext"
- ASCII "GetPackageContext"
- ASCII "GetPackageFamilyName"
- ASCII "GetPackageFullName"
- ASCII "GetPackageId"
- ASCII "GetPackageInfo"
- ASCII "GetPackageInstallTime"
- ASCII "GetPackageOSMaxVersionTested"
- ASCII "GetPackagePath"
- ASCII "GetPackagePathByFullName"
- ASCII "GetPackageProperty"
- ASCII "GetPackagePropertyString"
- ASCII "GetPackageResourcesContext"
- ASCII "GetPackageResourcesProperty"
- ASCII "GetPackageSecurityContext"
- ASCII "GetPackageSecurityProperty"
- ASCII "GetPackagesByPackageFamily"
- ASCII "GetPerformanceInfo"
- ASCII "GetPhysicallyInstalledSystemMemory"
- ASCII "GetPreviousFgPolicyRefreshInfoInternal"
- ASCII "GetPriorityClass"
- ASCII "GetPrivateObjectSecurity"
- ASCII "GetProcAddress"
- ASCII "GetProcAddressForCaller"
- ASCII "GetProcessGroupAffinity"
- ASCII "GetProcessHandleCount"
- ASCII "GetProcessHeap"
- ASCII "GetProcessHeaps"
- ASCII "GetProcessId"
- ASCII "GetProcessIdOfThread"
- ASCII "GetProcessImageFileNameA"
- ASCII "GetProcessImageFileNameW"
- ASCII "GetProcessMemoryInfo"
- ASCII "GetProcessMitigationPolicy"
- ASCII "GetProcessPreferredUILanguages"
- ASCII "GetProcessPriorityBoost"
- ASCII "GetProcessTimes"
- ASCII "GetProcessVersion"
- ASCII "GetProcessWorkingSetSizeEx"
- ASCII "GetProductInfo"
- ASCII "GetPtrCalData"
- ASCII "GetPtrCalDataArray"
- ASCII "GetQueuedCompletionStatus"
- ASCII "GetQueuedCompletionStatusEx"
- ASCII "GetRegistryExtensionFlags"
- ASCII "GetRoamingLastObservedChangeTime"
- ASCII "GetSecurityDescriptorControl"
- ASCII "GetSecurityDescriptorDacl"
- ASCII "GetSecurityDescriptorGroup"
- ASCII "GetSecurityDescriptorLength"
- ASCII "GetSecurityDescriptorOwner"
- ASCII "GetSecurityDescriptorRMControl"
- ASCII "GetSecurityDescriptorSacl"
- ASCII "GetSerializedAtomBytes"
- ASCII "GetShortPathNameW"
- ASCII "GetSidIdentifierAuthority"
- ASCII "GetSidLengthRequired"
- ASCII "GetSidSubAuthority"
- ASCII "GetSidSubAuthorityCount"
- ASCII "GetStagedPackageOrigin"
- ASCII "GetStagedPackagePathByFullName"
- ASCII "GetStartupInfoW"
- ASCII "GetStateContainerDepth"
- ASCII "GetStateFolder"
- ASCII "GetStateRootFolder"
- ASCII "GetStateSettingsFolder"
- ASCII "GetStateVersion"
- ASCII "GetStdHandle"
- ASCII "GetStringScripts"
- ASCII "GetStringTableEntry"
- ASCII "GetStringTypeA"
- ASCII "GetStringTypeExW"
- ASCII "GetStringTypeW"
- ASCII "GetSystemAppDataFolder"
- ASCII "GetSystemAppDataKey"
- ASCII "GetSystemDefaultLCID"
- ASCII "GetSystemDefaultLangID"
- ASCII "GetSystemDefaultLocaleName"
- ASCII "GetSystemDefaultUILanguage"
- ASCII "GetSystemDirectoryA"
- ASCII "GetSystemDirectoryW"
- ASCII "GetSystemFileCacheSize"
- ASCII "GetSystemFirmwareTable"
- ASCII "GetSystemInfo"
- ASCII "GetSystemPreferredUILanguages"
- ASCII "GetSystemTime"
- ASCII "GetSystemTimeAdjustment"
- ASCII "GetSystemTimeAsFileTime"
- ASCII "GetSystemTimePreciseAsFileTime"
- ASCII "GetSystemTimes"
- ASCII "GetSystemWindowsDirectoryA"
- ASCII "GetSystemWindowsDirectoryW"
- ASCII "GetTempFileNameW"
- ASCII "GetTempPathW"
- ASCII "GetThreadContext"
- ASCII "GetThreadGroupAffinity"
- ASCII "GetThreadIOPendingFlag"
- ASCII "GetThreadId"
- ASCII "GetThreadIdealProcessorEx"
- ASCII "GetThreadInformation"
- ASCII "GetThreadLocale"
- ASCII "GetThreadPreferredUILanguages"
- ASCII "GetThreadPriority"
- ASCII "GetThreadPriorityBoost"
- ASCII "GetThreadTimes"
- ASCII "GetThreadUILanguage"
- ASCII "GetTickCount"
- ASCII "GetTickCount64"
- ASCII "GetTimeFormatA"
- ASCII "GetTimeFormatEx"
- ASCII "GetTimeFormatW"
- ASCII "GetTimeZoneInformation"
- ASCII "GetTimeZoneInformationForYear"
- ASCII "GetTokenInformation"
- ASCII "GetTraceEnableFlags"
- ASCII "GetTraceEnableLevel"
- ASCII "GetTraceLoggerHandle"
- ASCII "GetUILanguageInfo"
- ASCII "GetUnicodeStringToEightBitSizeRoutine"
- ASCII "GetUnicodeStringToEightBitStringRoutine"
- ASCII "GetUserDefaultLCID"
- ASCII "GetUserDefaultLangID"
- ASCII "GetUserDefaultLocaleName"
- ASCII "GetUserDefaultUILanguage"
- ASCII "GetUserGeoID"
- ASCII "GetUserInfo"
- ASCII "GetUserInfoWord"
- ASCII "GetUserPreferredUILanguages"
- ASCII "GetVersion"
- ASCII "GetVersionExA"
- ASCII "GetVersionExW"
- ASCII "GetVolumeInformationByHandleW"
- ASCII "GetVolumeInformationW"
- ASCII "GetVolumeNameForVolumeMountPointW"
- ASCII "GetVolumePathNameW"
- ASCII "GetVolumePathNamesForVolumeNameW"
- ASCII "GetWindowsAccountDomainSid"
- ASCII "GetWindowsDirectoryA"
- ASCII "GetWindowsDirectoryW"
- ASCII "GetWriteWatch"
- ASCII "GetWsChanges"
- ASCII "GetWsChangesEx"
- ASCII "GetXStateFeaturesMask"
- ASCII "GlobalAlloc"
- ASCII "GlobalFree"
- ASCII "GlobalMemoryStatusEx"
- ASCII "HasPolicyForegroundProcessingCompletedInternal"
- ASCII "HashData"
- ASCII "HeapAlloc"
- ASCII "HeapCompact"
- ASCII "HeapCreate"
- ASCII "HeapDestroy"
- ASCII "HeapFree"
- ASCII "HeapLock"
- ASCII "HeapQueryInformation"
- ASCII "HeapReAlloc"
- ASCII "HeapSetInformation"
- ASCII "HeapSize"
- ASCII "HeapSummary"
- ASCII "HeapUnlock"
- ASCII "HeapValidate"
- ASCII "HeapWalk"
- ASCII "IdnToAscii"
- ASCII "IdnToNameprepUnicode"
- ASCII "IdnToUnicode"
- ASCII "ImpersonateAnonymousToken"
- ASCII "ImpersonateLoggedOnUser"
- ASCII "ImpersonateNamedPipeClient"
- ASCII "ImpersonateSelf"
- ASCII "InitOnceBeginInitialize"
- ASCII "InitOnceComplete"
- ASCII "InitOnceExecuteOnce"
- ASCII "InitOnceInitialize"
- ASCII "InitializeAcl"
- ASCII "InitializeConditionVariable"
- ASCII "InitializeContext"
- ASCII "InitializeCriticalSection"
- ASCII "InitializeCriticalSectionAndSpinCount"
- ASCII "InitializeCriticalSectionEx"
- ASCII "InitializeProcThreadAttributeList"
- ASCII "InitializeProcessForWsWatch"
- ASCII "InitializeSListHead"
- ASCII "InitializeSRWLock"
- ASCII "InitializeSecurityDescriptor"
- ASCII "InitializeSid"
- ASCII "InitializeSynchronizationBarrier"
- ASCII "InstallELAMCertificateInfo"
- ASCII "InterlockedCompareExchange"
- ASCII "InterlockedCompareExchange64"
- ASCII "InterlockedDecrement"
- ASCII "InterlockedExchange"
- ASCII "InterlockedExchangeAdd"
- ASCII "InterlockedFlushSList"
- ASCII "InterlockedIncrement"
- ASCII "InterlockedPopEntrySList"
- ASCII "InterlockedPushEntrySList"
- ASCII "InterlockedPushListSList"
- ASCII "InterlockedPushListSListEx"
- ASCII "InternalLcidToName"
- ASCII "Internal_EnumCalendarInfo"
- ASCII "Internal_EnumDateFormats"
- ASCII "Internal_EnumLanguageGroupLocales"
- ASCII "Internal_EnumSystemCodePages"
- ASCII "Internal_EnumSystemLanguageGroups"
- ASCII "Internal_EnumSystemLocales"
- ASCII "Internal_EnumTimeFormats"
- ASCII "Internal_EnumUILanguages"
- ASCII "InternetTimeFromSystemTimeA"
- ASCII "InternetTimeFromSystemTimeW"
- ASCII "InternetTimeToSystemTimeA"
- ASCII "InternetTimeToSystemTimeW"
- ASCII "InvalidateAppModelVersionCache"
- ASCII "IsCharAlphaA"
- ASCII "IsCharAlphaNumericA"
- ASCII "IsCharAlphaNumericW"
- ASCII "IsCharAlphaW"
- ASCII "IsCharBlankW"
- ASCII "IsCharCntrlW"
- ASCII "IsCharDigitW"
- ASCII "IsCharLowerA"
- ASCII "IsCharLowerW"
- ASCII "IsCharPunctW"
- ASCII "IsCharSpaceA"
- ASCII "IsCharSpaceW"
- ASCII "IsCharUpperA"
- ASCII "IsCharUpperW"
- ASCII "IsCharXDigitW"
- ASCII "IsDBCSLeadByte"
- ASCII "IsDBCSLeadByteEx"
- ASCII "IsDebuggerPresent"
- ASCII "IsInternetESCEnabled"
- ASCII "IsNLSDefinedString"
- ASCII "IsNormalizedString"
- ASCII "IsProcessCritical"
- ASCII "IsProcessInJob"
- ASCII "IsProcessorFeaturePresent"
- ASCII "IsSyncForegroundPolicyRefresh"
- ASCII "IsThreadAFiber"
- ASCII "IsThreadpoolTimerSet"
- ASCII "IsTimeZoneRedirectionEnabled"
- ASCII "IsTokenRestricted"
- ASCII "IsValidAcl"
- ASCII "IsValidCodePage"
- ASCII "IsValidLanguageGroup"
- ASCII "IsValidLocale"
- ASCII "IsValidLocaleName"
- ASCII "IsValidNLSVersion"
- ASCII "IsValidRelativeSecurityDescriptor"
- ASCII "IsValidSecurityDescriptor"
- ASCII "IsValidSid"
- ASCII "IsWellKnownSid"
- ASCII "IsWow64Process"
- ASCII "K32EmptyWorkingSet"
- ASCII "K32EnumDeviceDrivers"
- ASCII "K32EnumPageFilesA"
- ASCII "K32EnumPageFilesW"
- ASCII "K32EnumProcessModules"
- ASCII "K32EnumProcessModulesEx"
- ASCII "K32EnumProcesses"
- ASCII "K32GetDeviceDriverBaseNameA"
- ASCII "K32GetDeviceDriverBaseNameW"
- ASCII "K32GetDeviceDriverFileNameA"
- ASCII "K32GetDeviceDriverFileNameW"
- ASCII "K32GetMappedFileNameA"
- ASCII "K32GetMappedFileNameW"
- ASCII "K32GetModuleBaseNameA"
- ASCII "K32GetModuleBaseNameW"
- ASCII "K32GetModuleFileNameExA"
- ASCII "K32GetModuleFileNameExW"
- ASCII "K32GetModuleInformation"
- ASCII "K32GetPerformanceInfo"
- ASCII "K32GetProcessImageFileNameA"
- ASCII "K32GetProcessImageFileNameW"
- ASCII "K32GetProcessMemoryInfo"
- ASCII "K32GetWsChanges"
- ASCII "K32GetWsChangesEx"
- ASCII "K32InitializeProcessForWsWatch"
- ASCII "K32QueryWorkingSet"
- ASCII "K32QueryWorkingSetEx"
- ASCII "KernelBaseGetGlobalData"
- ASCII "LCIDToLocaleName"
- ASCII "LCMapStringA"
- ASCII "LCMapStringEx"
- ASCII "LCMapStringW"
- ASCII "LeaveCriticalPolicySectionInternal"
- ASCII "LeaveCriticalSection"
- ASCII "LeaveCriticalSectionWhenCallbackReturns"
- ASCII "LoadAppInitDlls"
- ASCII "LoadLibraryExA"
- ASCII "LoadLibraryExW"
- ASCII "LoadResource"
- ASCII "LoadStringA"
- ASCII "LoadStringBaseExW"
- ASCII "LoadStringByReference"
- ASCII "LoadStringW"
- ASCII "LocalAlloc"
- ASCII "LocalFileTimeToFileTime"
- ASCII "LocalFree"
- ASCII "LocalLock"
- ASCII "LocalReAlloc"
- ASCII "LocalUnlock"
- ASCII "LocaleNameToLCID"
- ASCII "LocateXStateFeature"
- ASCII "LockFile"
- ASCII "LockFileEx"
- ASCII "LockResource"
- ASCII "MakeAbsoluteSD"
- ASCII "MakeAbsoluteSD2"
- ASCII "MakeSelfRelativeSD"
- ASCII "MapGenericMask"
- ASCII "MapPredefinedHandleInternal"
- ASCII "MapUserPhysicalPages"
- ASCII "MapViewOfFile"
- ASCII "MapViewOfFileEx"
- ASCII "MapViewOfFileExNuma"
- ASCII "MapViewOfFileFromApp"
- ASCII "MoveFileExW"
- ASCII "MoveFileWithProgressTransactedW"
- ASCII "MoveFileWithProgressW"
- ASCII "MultiByteToWideChar"
- ASCII "NeedCurrentDirectoryForExePathA"
- ASCII "NeedCurrentDirectoryForExePathW"
- ASCII "NlsCheckPolicy"
- ASCII "NlsDispatchAnsiEnumProc"
- ASCII "NlsEventDataDescCreate"
- ASCII "NlsGetACPFromLocale"
- ASCII "NlsGetCacheUpdateCount"
- ASCII "NlsIsUserDefaultLocale"
- ASCII "NlsUpdateLocale"
- ASCII "NlsUpdateSystemLocale"
- ASCII "NlsValidateLocale"
- ASCII "NlsWriteEtwEvent"
- ASCII "NormalizeString"
- ASCII "NotifyMountMgr"
- ASCII "NotifyRedirectedStringChange"
- ASCII "ObjectCloseAuditAlarmW"
- ASCII "ObjectDeleteAuditAlarmW"
- ASCII "ObjectOpenAuditAlarmW"
- ASCII "ObjectPrivilegeAuditAlarmW"
- ASCII "OfferVirtualMemory"
- ASCII "OpenEventA"
- ASCII "OpenEventW"
- ASCII "OpenFileById"
- ASCII "OpenFileMappingW"
- ASCII "OpenMutexW"
- ASCII "OpenPackageInfoByFullName"
- ASCII "OpenPrivateNamespaceW"
- ASCII "OpenProcess"
- ASCII "OpenProcessToken"
- ASCII "OpenRegKey"
- ASCII "OpenSemaphoreW"
- ASCII "OpenState"
- ASCII "OpenStateAtom"
- ASCII "OpenStateExplicit"
- ASCII "OpenThread"
- ASCII "OpenThreadToken"
- ASCII "OpenWaitableTimerW"
- ASCII "OutputDebugStringA"
- ASCII "OutputDebugStringW"
- ASCII "OverrideRoamingDataModificationTimesInRange"
- ASCII "PackageFamilyNameFromFullName"
- ASCII "PackageFamilyNameFromId"
- ASCII "PackageFullNameFromId"
- ASCII "PackageIdFromFullName"
- ASCII "PackageNameAndPublisherIdFromFamilyName"
- ASCII "ParseApplicationUserModelId"
- ASCII "ParseURLA"
- ASCII "ParseURLW"
- ASCII "PathAddBackslashA"
- ASCII "PathAddBackslashW"
- ASCII "PathAddExtensionA"
- ASCII "PathAddExtensionW"
- ASCII "PathAllocCanonicalize"
- ASCII "PathAllocCombine"
- ASCII "PathAppendA"
- ASCII "PathAppendW"
- ASCII "PathCanonicalizeA"
- ASCII "PathCanonicalizeW"
- ASCII "PathCchAddBackslash"
- ASCII "PathCchAddBackslashEx"
- ASCII "PathCchAddExtension"
- ASCII "PathCchAppend"
- ASCII "PathCchAppendEx"
- ASCII "PathCchCanonicalize"
- ASCII "PathCchCanonicalizeEx"
- ASCII "PathCchCombine"
- ASCII "PathCchCombineEx"
- ASCII "PathCchFindExtension"
- ASCII "PathCchIsRoot"
- ASCII "PathCchRemoveBackslash"
- ASCII "PathCchRemoveBackslashEx"
- ASCII "PathCchRemoveExtension"
- ASCII "PathCchRemoveFileSpec"
- ASCII "PathCchRenameExtension"
- ASCII "PathCchSkipRoot"
- ASCII "PathCchStripPrefix"
- ASCII "PathCchStripToRoot"
- ASCII "PathCleanupSpec"
- ASCII "PathCombineA"
- ASCII "PathCombineW"
- ASCII "PathCommonPrefixA"
- ASCII "PathCommonPrefixW"
- ASCII "PathCreateFromUrlA"
- ASCII "PathCreateFromUrlAlloc"
- ASCII "PathCreateFromUrlW"
- ASCII "PathFileExistsA"
- ASCII "PathFileExistsW"
- ASCII "PathFindExtensionA"
- ASCII "PathFindExtensionW"
- ASCII "PathFindFileNameA"
- ASCII "PathFindFileNameW"
- ASCII "PathFindNextComponentA"
- ASCII "PathFindNextComponentW"
- ASCII "PathGetArgsA"
- ASCII "PathGetArgsW"
- ASCII "PathGetCharTypeA"
- ASCII "PathGetCharTypeW"
- ASCII "PathGetDriveNumberA"
- ASCII "PathGetDriveNumberW"
- ASCII "PathIsExe"
- ASCII "PathIsFileSpecA"
- ASCII "PathIsFileSpecW"
- ASCII "PathIsLFNFileSpecA"
- ASCII "PathIsLFNFileSpecW"
- ASCII "PathIsPrefixA"
- ASCII "PathIsPrefixW"
- ASCII "PathIsRelativeA"
- ASCII "PathIsRelativeW"
- ASCII "PathIsRootA"
- ASCII "PathIsRootW"
- ASCII "PathIsSameRootA"
- ASCII "PathIsSameRootW"
- ASCII "PathIsUNCA"
- ASCII "PathIsUNCEx"
- ASCII "PathIsUNCServerA"
- ASCII "PathIsUNCServerShareA"
- ASCII "PathIsUNCServerShareW"
- ASCII "PathIsUNCServerW"
- ASCII "PathIsUNCW"
- ASCII "PathIsURLA"
- ASCII "PathIsURLW"
- ASCII "PathIsValidCharA"
- ASCII "PathIsValidCharW"
- ASCII "PathMatchSpecA"
- ASCII "PathMatchSpecExA"
- ASCII "PathMatchSpecExW"
- ASCII "PathMatchSpecW"
- ASCII "PathParseIconLocationA"
- ASCII "PathParseIconLocationW"
- ASCII "PathQuoteSpacesA"
- ASCII "PathQuoteSpacesW"
- ASCII "PathRelativePathToA"
- ASCII "PathRelativePathToW"
- ASCII "PathRemoveBackslashA"
- ASCII "PathRemoveBackslashW"
- ASCII "PathRemoveBlanksA"
- ASCII "PathRemoveBlanksW"
- ASCII "PathRemoveExtensionA"
- ASCII "PathRemoveExtensionW"
- ASCII "PathRemoveFileSpecA"
- ASCII "PathRemoveFileSpecW"
- ASCII "PathRenameExtensionA"
- ASCII "PathRenameExtensionW"
- ASCII "PathSearchAndQualifyA"
- ASCII "PathSearchAndQualifyW"
- ASCII "PathSkipRootA"
- ASCII "PathSkipRootW"
- ASCII "PathStripPathA"
- ASCII "PathStripPathW"
- ASCII "PathStripToRootA"
- ASCII "PathStripToRootW"
- ASCII "PathUnExpandEnvStringsA"
- ASCII "PathUnExpandEnvStringsW"
- ASCII "PathUnquoteSpacesA"
- ASCII "PathUnquoteSpacesW"
- ASCII "PeekConsoleInputA"
- ASCII "PeekConsoleInputW"
- ASCII "PeekNamedPipe"
- ASCII "PoolPerAppKeyStateInternal"
- ASCII "PostQueuedCompletionStatus"
- ASCII "PrefetchVirtualMemory"
- ASCII "PrivCopyFileExW"
- ASCII "PrivilegeCheck"
- ASCII "PrivilegedServiceAuditAlarmW"
- ASCII "ProcessIdToSessionId"
- ASCII "PsmCreateKey"
- ASCII "PsmEqualApplication"
- ASCII "PsmEqualPackage"
- ASCII "PsmGetApplicationNameFromKey"
- ASCII "PsmGetKeyFromProcess"
- ASCII "PsmGetKeyFromToken"
- ASCII "PsmGetPackageFullNameFromKey"
- ASCII "PsmIsChildKey"
- ASCII "PsmIsDynamicKey"
- ASCII "PsmIsValidKey"
- ASCII "PublishStateChangeNotification"
- ASCII "PulseEvent"
- ASCII "PurgeComm"
- ASCII "QISearch"
- ASCII "QueryActCtxSettingsW"
- ASCII "QueryActCtxW"
- ASCII "QueryDepthSList"
- ASCII "QueryDosDeviceW"
- ASCII "QueryFullProcessImageNameA"
- ASCII "QueryFullProcessImageNameW"
- ASCII "QueryIdleProcessorCycleTime"
- ASCII "QueryIdleProcessorCycleTimeEx"
- ASCII "QueryMemoryResourceNotification"
- ASCII "QueryOptionalDelayLoadedAPI"
- ASCII "QueryPerformanceCounter"
- ASCII "QueryPerformanceFrequency"
- ASCII "QueryProcessAffinityUpdateMode"
- ASCII "QueryProcessCycleTime"
- ASCII "QuerySecurityAccessMask"
- ASCII "QueryStateAtomValueInfo"
- ASCII "QueryStateContainerItemInfo"
- ASCII "QueryThreadCycleTime"
- ASCII "QueryThreadpoolStackInformation"
- ASCII "QueryUnbiasedInterruptTime"
- ASCII "QueryWorkingSet"
- ASCII "QueryWorkingSetEx"
- ASCII "QueueUserAPC"
- ASCII "QueueUserWorkItem"
- ASCII "QuirkGetData"
- ASCII "QuirkGetData2"
- ASCII "QuirkIsEnabled"
- ASCII "QuirkIsEnabled2"
- ASCII "QuirkIsEnabled3"
- ASCII "QuirkIsEnabledForPackage"
- ASCII "QuirkIsEnabledForPackage2"
- ASCII "QuirkIsEnabledForProcess"
- ASCII "RaiseException"
- ASCII "ReOpenFile"
- ASCII "ReadConsoleA"
- ASCII "ReadConsoleInputA"
- ASCII "ReadConsoleInputExA"
- ASCII "ReadConsoleInputExW"
- ASCII "ReadConsoleInputW"
- ASCII "ReadConsoleOutputA"
- ASCII "ReadConsoleOutputAttribute"
- ASCII "ReadConsoleOutputCharacterA"
- ASCII "ReadConsoleOutputCharacterW"
- ASCII "ReadConsoleOutputW"
- ASCII "ReadConsoleW"
- ASCII "ReadDirectoryChangesW"
- ASCII "ReadFile"
- ASCII "ReadFileEx"
- ASCII "ReadFileScatter"
- ASCII "ReadProcessMemory"
- ASCII "ReadStateAtomValue"
- ASCII "ReadStateContainerValue"
- ASCII "ReclaimVirtualMemory"
- ASCII "RefreshPolicyExInternal"
- ASCII "RefreshPolicyInternal"
- ASCII "RegCloseKey"
- ASCII "RegCopyTreeW"
- ASCII "RegCreateKeyExA"
- ASCII "RegCreateKeyExInternalA"
- ASCII "RegCreateKeyExInternalW"
- ASCII "RegCreateKeyExW"
- ASCII "RegDeleteKeyExA"
- ASCII "RegDeleteKeyExInternalA"
- ASCII "RegDeleteKeyExInternalW"
- ASCII "RegDeleteKeyExW"
- ASCII "RegDeleteTreeA"
- ASCII "RegDeleteTreeW"
- ASCII "RegDeleteValueA"
- ASCII "RegDeleteValueW"
- ASCII "RegDisablePredefinedCacheEx"
- ASCII "RegEnumKeyExA"
- ASCII "RegEnumKeyExW"
- ASCII "RegEnumValueA"
- ASCII "RegEnumValueW"
- ASCII "RegFlushKey"
- ASCII "RegGetKeySecurity"
- ASCII "RegGetValueA"
- ASCII "RegGetValueW"
- ASCII "RegKrnGetAppKeyEventAddressInternal"
- ASCII "RegKrnGetAppKeyLoaded"
- ASCII "RegKrnGetClassesEnumTableAddressInternal"
- ASCII "RegKrnGetHKEY_ClassesRootAddress"
- ASCII "RegKrnGetTermsrvRegistryExtensionFlags"
- ASCII "RegKrnResetAppKeyLoaded"
- ASCII "RegKrnSetDllHasThreadStateGlobal"
- ASCII "RegKrnSetTermsrvRegistryExtensionFlags"
- ASCII "RegLoadAppKeyA"
- ASCII "RegLoadAppKeyW"
- ASCII "RegLoadKeyA"
- ASCII "RegLoadKeyW"
- ASCII "RegLoadMUIStringA"
- ASCII "RegLoadMUIStringW"
- ASCII "RegNotifyChangeKeyValue"
- ASCII "RegOpenCurrentUser"
- ASCII "RegOpenKeyExA"
- ASCII "RegOpenKeyExInternalA"
- ASCII "RegOpenKeyExInternalW"
- ASCII "RegOpenKeyExW"
- ASCII "RegOpenUserClassesRoot"
- ASCII "RegQueryInfoKeyA"
- ASCII "RegQueryInfoKeyW"
- ASCII "RegQueryValueExA"
- ASCII "RegQueryValueExW"
- ASCII "RegRestoreKeyA"
- ASCII "RegRestoreKeyW"
- ASCII "RegSaveKeyExA"
- ASCII "RegSaveKeyExW"
- ASCII "RegSetKeySecurity"
- ASCII "RegSetValueExA"
- ASCII "RegSetValueExW"
- ASCII "RegUnLoadKeyA"
- ASCII "RegUnLoadKeyW"
- ASCII "RegisterBadMemoryNotification"
- ASCII "RegisterGPNotificationInternal"
- ASCII "RegisterStateChangeNotification"
- ASCII "RegisterStateLock"
- ASCII "RegisterTraceGuidsW"
- ASCII "RegisterWaitForSingleObjectEx"
- ASCII "ReleaseActCtx"
- ASCII "ReleaseMutex"
- ASCII "ReleaseMutexWhenCallbackReturns"
- ASCII "ReleaseSRWLockExclusive"
- ASCII "ReleaseSRWLockShared"
- ASCII "ReleaseSemaphore"
- ASCII "ReleaseSemaphoreWhenCallbackReturns"
- ASCII "ReleaseStateLock"
- ASCII "RemapPredefinedHandleInternal"
- ASCII "RemoveDirectoryA"
- ASCII "RemoveDirectoryW"
- ASCII "RemoveDllDirectory"
- ASCII "RemoveVectoredContinueHandler"
- ASCII "RemoveVectoredExceptionHandler"
- ASCII "ReplaceFileExInternal"
- ASCII "ReplaceFileW"
- ASCII "ResetEvent"
- ASCII "ResetState"
- ASCII "ResetWriteWatch"
- ASCII "ResolveDelayLoadedAPI"
- ASCII "ResolveDelayLoadsFromDll"
- ASCII "ResolveLocaleName"
- ASCII "RestoreLastError"
- ASCII "ResumeThread"
- ASCII "RevertToSelf"
- ASCII "RsopLoggingEnabledInternal"
- ASCII "SHCoCreateInstance"
- ASCII "SHCreateDirectoryExW"
- ASCII "SHExpandEnvironmentStringsA"
- ASCII "SHExpandEnvironmentStringsW"
- ASCII "SHGetDesktopFolder"
- ASCII "SHGetFileInfoW"
- ASCII "SHGetFolderLocation"
- ASCII "SHGetFolderPathA"
- ASCII "SHGetFolderPathAndSubDirW"
- ASCII "SHGetFolderPathW"
- ASCII "SHGetInstanceExplorer"
- ASCII "SHGetKnownFolderPath"
- ASCII "SHGetSpecialFolderPathA"
- ASCII "SHGetSpecialFolderPathW"
- ASCII "SHLoadIndirectString"
- ASCII "SHRegCloseUSKey"
- ASCII "SHRegCreateUSKeyA"
- ASCII "SHRegCreateUSKeyW"
- ASCII "SHRegDeleteEmptyUSKeyA"
- ASCII "SHRegDeleteEmptyUSKeyW"
- ASCII "SHRegDeleteUSValueA"
- ASCII "SHRegDeleteUSValueW"
- ASCII "SHRegEnumUSKeyA"
- ASCII "SHRegEnumUSKeyW"
- ASCII "SHRegEnumUSValueA"
- ASCII "SHRegEnumUSValueW"
- ASCII "SHRegGetBoolUSValueA"
- ASCII "SHRegGetBoolUSValueW"
- ASCII "SHRegGetUSValueA"
- ASCII "SHRegGetUSValueW"
- ASCII "SHRegOpenUSKeyA"
- ASCII "SHRegOpenUSKeyW"
- ASCII "SHRegQueryInfoUSKeyA"
- ASCII "SHRegQueryInfoUSKeyW"
- ASCII "SHRegQueryUSValueA"
- ASCII "SHRegQueryUSValueW"
- ASCII "SHRegSetUSValueA"
- ASCII "SHRegSetUSValueW"
- ASCII "SHRegWriteUSValueA"
- ASCII "SHRegWriteUSValueW"
- ASCII "SHSetKnownFolderPath"
- ASCII "SHTruncateString"
- ASCII "ScrollConsoleScreenBufferA"
- ASCII "ScrollConsoleScreenBufferW"
- ASCII "SearchPathA"
- ASCII "SearchPathW"
- ASCII "SetAclInformation"
- ASCII "SetCachedSigningLevel"
- ASCII "SetCalendarInfoW"
- ASCII "SetClientDynamicTimeZoneInformation"
- ASCII "SetClientTimeZoneInformation"
- ASCII "SetCommBreak"
- ASCII "SetCommConfig"
- ASCII "SetCommMask"
- ASCII "SetCommState"
- ASCII "SetCommTimeouts"
- ASCII "SetComputerNameEx2W"
- ASCII "SetComputerNameExW"
- ASCII "SetConsoleActiveScreenBuffer"
- ASCII "SetConsoleCP"
- ASCII "SetConsoleCtrlHandler"
- ASCII "SetConsoleCursorInfo"
- ASCII "SetConsoleCursorPosition"
- ASCII "SetConsoleInputExeNameA"
- ASCII "SetConsoleInputExeNameW"
- ASCII "SetConsoleMode"
- ASCII "SetConsoleOutputCP"
- ASCII "SetConsoleScreenBufferInfoEx"
- ASCII "SetConsoleScreenBufferSize"
- ASCII "SetConsoleTextAttribute"
- ASCII "SetConsoleTitleW"
- ASCII "SetConsoleWindowInfo"
- ASCII "SetCriticalSectionSpinCount"
- ASCII "SetCurrentDirectoryA"
- ASCII "SetCurrentDirectoryW"
- ASCII "SetDefaultDllDirectories"
- ASCII "SetDynamicTimeZoneInformation"
- ASCII "SetEndOfFile"
- ASCII "SetEnvironmentStringsW"
- ASCII "SetEnvironmentVariableA"
- ASCII "SetEnvironmentVariableW"
- ASCII "SetErrorMode"
- ASCII "SetEvent"
- ASCII "SetEventWhenCallbackReturns"
- ASCII "SetFileApisToANSI"
- ASCII "SetFileApisToOEM"
- ASCII "SetFileAttributesA"
- ASCII "SetFileAttributesW"
- ASCII "SetFileInformationByHandle"
- ASCII "SetFileIoOverlappedRange"
- ASCII "SetFilePointer"
- ASCII "SetFilePointerEx"
- ASCII "SetFileSecurityW"
- ASCII "SetFileTime"
- ASCII "SetFileValidData"
- ASCII "SetHandleCount"
- ASCII "SetHandleInformation"
- ASCII "SetKernelObjectSecurity"
- ASCII "SetLastConsoleEventActive"
- ASCII "SetLastError"
- ASCII "SetLocalTime"
- ASCII "SetLocaleInfoW"
- ASCII "SetNamedPipeHandleState"
- ASCII "SetPriorityClass"
- ASCII "SetPrivateObjectSecurity"
- ASCII "SetPrivateObjectSecurityEx"
- ASCII "SetProcessAffinityUpdateMode"
- ASCII "SetProcessGroupAffinity"
- ASCII "SetProcessMitigationPolicy"
- ASCII "SetProcessPreferredUILanguages"
- ASCII "SetProcessPriorityBoost"
- ASCII "SetProcessShutdownParameters"
- ASCII "SetProcessWorkingSetSizeEx"
- ASCII "SetRoamingLastObservedChangeTime"
- ASCII "SetSecurityAccessMask"
- ASCII "SetSecurityDescriptorControl"
- ASCII "SetSecurityDescriptorDacl"
- ASCII "SetSecurityDescriptorGroup"
- ASCII "SetSecurityDescriptorOwner"
- ASCII "SetSecurityDescriptorRMControl"
- ASCII "SetSecurityDescriptorSacl"
- ASCII "SetStateVersion"
- ASCII "SetStdHandle"
- ASCII "SetStdHandleEx"
- ASCII "SetSystemFileCacheSize"
- ASCII "SetSystemTime"
- ASCII "SetSystemTimeAdjustment"
- ASCII "SetThreadContext"
- ASCII "SetThreadGroupAffinity"
- ASCII "SetThreadIdealProcessorEx"
- ASCII "SetThreadInformation"
- ASCII "SetThreadLocale"
- ASCII "SetThreadPreferredUILanguages"
- ASCII "SetThreadPriority"
- ASCII "SetThreadPriorityBoost"
- ASCII "SetThreadStackGuarantee"
- ASCII "SetThreadToken"
- ASCII "SetThreadUILanguage"
- ASCII "SetThreadpoolStackInformation"
- ASCII "SetThreadpoolThreadMaximum"
- ASCII "SetThreadpoolThreadMinimum"
- ASCII "SetThreadpoolTimer"
- ASCII "SetThreadpoolTimerEx"
- ASCII "SetThreadpoolWait"
- ASCII "SetThreadpoolWaitEx"
- ASCII "SetTimeZoneInformation"
- ASCII "SetTokenInformation"
- ASCII "SetUnhandledExceptionFilter"
- ASCII "SetUserGeoID"
- ASCII "SetWaitableTimer"
- ASCII "SetWaitableTimerEx"
- ASCII "SetXStateFeaturesMask"
- ASCII "SetupComm"
- ASCII "SignalObjectAndWait"
- ASCII "SizeofResource"
- ASCII "Sleep"
- ASCII "SleepConditionVariableCS"
- ASCII "SleepConditionVariableSRW"
- ASCII "SleepEx"
- ASCII "SpecialMBToWC"
- ASCII "StartThreadpoolIo"
- ASCII "StrCSpnA"
- ASCII "StrCSpnIA"
- ASCII "StrCSpnIW"
- ASCII "StrCSpnW"
- ASCII "StrCatBuffA"
- ASCII "StrCatBuffW"
- ASCII "StrCatChainW"
- ASCII "StrChrA"
- ASCII "StrChrA_MB"
- ASCII "StrChrIA"
- ASCII "StrChrIW"
- ASCII "StrChrNIW"
- ASCII "StrChrNW"
- ASCII "StrChrW"
- ASCII "StrCmpCA"
- ASCII "StrCmpCW"
- ASCII "StrCmpICA"
- ASCII "StrCmpICW"
- ASCII "StrCmpIW"
- ASCII "StrCmpLogicalW"
- ASCII "StrCmpNA"
- ASCII "StrCmpNCA"
- ASCII "StrCmpNCW"
- ASCII "StrCmpNIA"
- ASCII "StrCmpNICA"
- ASCII "StrCmpNICW"
- ASCII "StrCmpNIW"
- ASCII "StrCmpNW"
- ASCII "StrCmpW"
- ASCII "StrCpyNW"
- ASCII "StrCpyNXA"
- ASCII "StrCpyNXW"
- ASCII "StrDupA"
- ASCII "StrDupW"
- ASCII "StrIsIntlEqualA"
- ASCII "StrIsIntlEqualW"
- ASCII "StrPBrkA"
- ASCII "StrPBrkW"
- ASCII "StrRChrA"
- ASCII "StrRChrIA"
- ASCII "StrRChrIW"
- ASCII "StrRChrW"
- ASCII "StrRStrIA"
- ASCII "StrRStrIW"
- ASCII "StrSpnA"
- ASCII "StrSpnW"
- ASCII "StrStrA"
- ASCII "StrStrIA"
- ASCII "StrStrIW"
- ASCII "StrStrNIW"
- ASCII "StrStrNW"
- ASCII "StrStrW"
- ASCII "StrToInt64ExA"
- ASCII "StrToInt64ExW"
- ASCII "StrToIntA"
- ASCII "StrToIntExA"
- ASCII "StrToIntExW"
- ASCII "StrToIntW"
- ASCII "StrTrimA"
- ASCII "StrTrimW"
- ASCII "SubmitThreadpoolWork"
- ASCII "SubscribeStateChangeNotification"
- ASCII "SuspendThread"
- ASCII "SwitchToThread"
- ASCII "SystemTimeToFileTime"
- ASCII "SystemTimeToTzSpecificLocalTime"
- ASCII "SystemTimeToTzSpecificLocalTimeEx"
- ASCII "TerminateProcess"
- ASCII "TerminateThread"
- ASCII "TlsAlloc"
- ASCII "TlsFree"
- ASCII "TlsGetValue"
- ASCII "TlsSetValue"
- ASCII "TraceEvent"
- ASCII "TraceMessage"
- ASCII "TraceMessageVa"
- ASCII "TransactNamedPipe"
- ASCII "TransmitCommChar"
- ASCII "TryAcquireSRWLockExclusive"
- ASCII "TryAcquireSRWLockShared"
- ASCII "TryEnterCriticalSection"
- ASCII "TrySubmitThreadpoolCallback"
- ASCII "TzSpecificLocalTimeToSystemTime"
- ASCII "TzSpecificLocalTimeToSystemTimeEx"
- ASCII "UnhandledExceptionFilter"
- ASCII "UnlockFile"
- ASCII "UnlockFileEx"
- ASCII "UnmapViewOfFile"
- ASCII "UnmapViewOfFileEx"
- ASCII "UnregisterBadMemoryNotification"
- ASCII "UnregisterGPNotificationInternal"
- ASCII "UnregisterStateChangeNotification"
- ASCII "UnregisterStateLock"
- ASCII "UnregisterTraceGuids"
- ASCII "UnregisterWaitEx"
- ASCII "UnsubscribeStateChangeNotification"
- ASCII "UpdateProcThreadAttribute"
- ASCII "UrlApplySchemeA"
- ASCII "UrlApplySchemeW"
- ASCII "UrlCanonicalizeA"
- ASCII "UrlCanonicalizeW"
- ASCII "UrlCombineA"
- ASCII "UrlCombineW"
- ASCII "UrlCompareA"
- ASCII "UrlCompareW"
- ASCII "UrlCreateFromPathA"
- ASCII "UrlCreateFromPathW"
- ASCII "UrlEscapeA"
- ASCII "UrlEscapeW"
- ASCII "UrlFixupW"
- ASCII "UrlGetLocationA"
- ASCII "UrlGetLocationW"
- ASCII "UrlGetPartA"
- ASCII "UrlGetPartW"
- ASCII "UrlHashA"
- ASCII "UrlHashW"
- ASCII "UrlIsA"
- ASCII "UrlIsNoHistoryA"
- ASCII "UrlIsNoHistoryW"
- ASCII "UrlIsOpaqueA"
- ASCII "UrlIsOpaqueW"
- ASCII "UrlIsW"
- ASCII "UrlUnescapeA"
- ASCII "UrlUnescapeW"
- ASCII "VerFindFileA"
- ASCII "VerFindFileW"
- ASCII "VerLanguageNameA"
- ASCII "VerLanguageNameW"
- ASCII "VerQueryValueA"
- ASCII "VerQueryValueW"
- ASCII "VerSetConditionMask"
- ASCII "VerifyScripts"
- ASCII "VirtualAlloc"
- ASCII "VirtualAllocEx"
- ASCII "VirtualAllocExNuma"
- ASCII "VirtualFree"
- ASCII "VirtualFreeEx"
- ASCII "VirtualLock"
- ASCII "VirtualProtect"
- ASCII "VirtualProtectEx"
- ASCII "VirtualQuery"
- ASCII "VirtualQueryEx"
- ASCII "VirtualUnlock"
- ASCII "WaitCommEvent"
- ASCII "WaitForDebugEvent"
- ASCII "WaitForMachinePolicyForegroundProcessingInternal"
- ASCII "WaitForMultipleObjectsEx"
- ASCII "WaitForSingleObject"
- ASCII "WaitForSingleObjectEx"
- ASCII "WaitForThreadpoolIoCallbacks"
- ASCII "WaitForThreadpoolTimerCallbacks"
- ASCII "WaitForThreadpoolWaitCallbacks"
- ASCII "WaitForThreadpoolWorkCallbacks"
- ASCII "WaitForUserPolicyForegroundProcessingInternal"
- ASCII "WaitNamedPipeW"
- ASCII "WaitOnAddress"
- ASCII "WakeAllConditionVariable"
- ASCII "WakeByAddressAll"
- ASCII "WakeByAddressSingle"
- ASCII "WakeConditionVariable"
- ASCII "WerRegisterFile"
- ASCII "WerRegisterMemoryBlock"
- ASCII "WerRegisterRuntimeExceptionModule"
- ASCII "WerUnregisterFile"
- ASCII "WerUnregisterMemoryBlock"
- ASCII "WerUnregisterRuntimeExceptionModule"
- ASCII "WerpNotifyLoadStringResource"
- ASCII "WerpNotifyUseStringResource"
- ASCII "WideCharToMultiByte"
- ASCII "Wow64DisableWow64FsRedirection"
- ASCII "Wow64RevertWow64FsRedirection"
- ASCII "WriteConsoleA"
- ASCII "WriteConsoleInputA"
- ASCII "WriteConsoleInputW"
- ASCII "WriteConsoleOutputA"
- ASCII "WriteConsoleOutputAttribute"
- ASCII "WriteConsoleOutputCharacterA"
- ASCII "WriteConsoleOutputCharacterW"
- ASCII "WriteConsoleOutputW"
- ASCII "WriteConsoleW"
- ASCII "WriteFile"
- ASCII "WriteFileEx"
- ASCII "WriteFileGather"
- ASCII "WriteProcessMemory"
- ASCII "WriteStateAtomValue"
- ASCII "WriteStateContainerValue"
- ASCII "ZombifyActCtx"
- ASCII "_AddMUIStringToCache"
- ASCII "_GetMUIStringFromCache"
- ASCII "_OpenMuiStringCache"
- ASCII "__dllonexit3"
- ASCII "__wgetmainargs"
- ASCII "_amsg_exit"
- ASCII "_c_exit"
- ASCII "_cexit"
- ASCII "_exit"
- ASCII "_initterm"
- ASCII "_initterm_e"
- ASCII "_invalid_parameter"
- ASCII "_onexit"
- ASCII "_purecall"
- ASCII "_time64"
- ASCII "atexit"
- ASCII "exit"
- ASCII "hgets"
- ASCII "hwprintf"
- ASCII "lstrcmp"
- ASCII "lstrcmpA"
- ASCII "lstrcmpW"
- ASCII "lstrcmpi"
- ASCII "lstrcmpiA"
- ASCII "lstrcmpiW"
- ASCII "lstrcpyn"
- ASCII "lstrcpynA"
- ASCII "lstrcpynW"
- ASCII "lstrlen"
- ASCII "lstrlenA"
- ASCII "lstrlenW"
- ASCII "time"
- ASCII "wprintf"
- ASCII "NTDLL.RtlAcquireSRWLockExclusive"
- ASCII "NTDLL.RtlAcquireSRWLockShared"
- ASCII "NTDLL.RtlAddVectoredContinueHandler"
- ASCII "NTDLL.RtlAddVectoredExceptionHandler"
- ASCII "NTDLL.TpCancelAsyncIoOperation"
- ASCII "NTDLL.TpReleasePool"
- ASCII "NTDLL.TpReleaseCleanupGroup"
- ASCII "NTDLL.TpReleaseCleanupGroupMembers"
- ASCII "NTDLL.TpReleaseIoCompletion"
- ASCII "NTDLL.TpReleaseTimer"
- ASCII "NTDLL.TpReleaseWait"
- ASCII "NTDLL.TpReleaseWork"
- ASCII "NTDLL.RtlDecodePointer"
- ASCII "NTDLL.RtlDecodeSystemPointer"
- ASCII "NTDLL.RtlDeleteCriticalSection"
- ASCII "NTDLL.RtlDeleteBarrier"
- ASCII "NTDLL.TpDisassociateCallback"
- ASCII "NTDLL.RtlEncodePointer"
- ASCII "NTDLL.RtlEncodeSystemPointer"
- ASCII "NTDLL.RtlEnterCriticalSection"
- ASCII "NTDLL.EtwEventActivityIdControl"
- ASCII "NTDLL.EtwEventEnabled"
- ASCII "NTDLL.EtwEventProviderEnabled"
- ASCII "NTDLL.EtwEventRegister"
- ASCII "NTDLL.EtwEventSetInformation"
- ASCII "NTDLL.EtwEventUnregister"
- ASCII "NTDLL.EtwEventWrite"
- ASCII "NTDLL.EtwEventWriteEx"
- ASCII "NTDLL.EtwEventWriteString"
- ASCII "NTDLL.EtwEventWriteTransfer"
- ASCII "NTDLL.RtlExitUserProcess"
- ASCII "NTDLL.RtlExitUserThread"
- ASCII "NTDLL.NtFlushProcessWriteBuffers"
- ASCII "NTDLL.TpCallbackUnloadDllOnCompletion"
- ASCII "NTDLL.RtlGetCurrentProcessorNumber"
- ASCII "NTDLL.RtlGetCurrentProcessorNumberEx"
- ASCII "NTDLL.EtwGetTraceEnableFlags"
- ASCII "NTDLL.EtwGetTraceEnableLevel"
- ASCII "NTDLL.EtwGetTraceLoggerHandle"
- ASCII "NTDLL.RtlAllocateHeap"
- ASCII "NTDLL.RtlFreeHeap"
- ASCII "NTDLL.RtlReAllocateHeap"
- ASCII "NTDLL.RtlSizeHeap"
- ASCII "NTDLL.RtlRunOnceInitialize"
- ASCII "NTDLL.RtlInitializeConditionVariable"
- ASCII "NTDLL.RtlInitializeCriticalSection"
- ASCII "NTDLL.RtlInitializeSListHead"
- ASCII "NTDLL.RtlInitializeSRWLock"
- ASCII "NTDLL.RtlInterlockedCompareExchange64"
- ASCII "NTDLL.RtlInterlockedFlushSList"
- ASCII "NTDLL.RtlInterlockedPopEntrySList"
- ASCII "NTDLL.RtlInterlockedPushEntrySList"
- ASCII "NTDLL.RtlInterlockedPushListSList"
- ASCII "NTDLL.RtlInterlockedPushListSListEx"
- ASCII "NTDLL.TpIsTimerSet"
- ASCII "NTDLL.RtlLeaveCriticalSection"
- ASCII "NTDLL.TpCallbackLeaveCriticalSectionOnCompletion"
- ASCII "NTDLL.RtlQueryDepthSList"
- ASCII "NTDLL.RtlQueryPerformanceCounter"
- ASCII "NTDLL.RtlQueryPerformanceFrequency"
- ASCII "NTDLL.RtlQueryUnbiasedInterruptTime"
- ASCII "NTDLL.EtwRegisterTraceGuidsW"
- ASCII "NTDLL.TpCallbackReleaseMutexOnCompletion"
- ASCII "NTDLL.RtlReleaseSRWLockExclusive"
- ASCII "NTDLL.RtlReleaseSRWLockShared"
- ASCII "NTDLL.TpCallbackReleaseSemaphoreOnCompletion"
- ASCII "NTDLL.RtlRemoveVectoredContinueHandler"
- ASCII "NTDLL.RtlRemoveVectoredExceptionHandler"
- ASCII "NTDLL.RtlRestoreLastWin32Error"
- ASCII "NTDLL.RtlSetCriticalSectionSpinCount"
- ASCII "NTDLL.TpCallbackSetEventOnCompletion"
- ASCII "NTDLL.RtlSetLastWin32Error"
- ASCII "NTDLL.TpSetPoolMaxThreads"
- ASCII "NTDLL.TpSetTimer"
- ASCII "NTDLL.TpSetTimerEx"
- ASCII "NTDLL.TpSetWait"
- ASCII "NTDLL.TpSetWaitEx"
- ASCII "NTDLL.TpStartAsyncIoOperation"
- ASCII "NTDLL.TpPostWork"
- ASCII "NTDLL.EtwLogTraceEvent"
- ASCII "NTDLL.EtwTraceMessage"
- ASCII "NTDLL.EtwTraceMessageVa"
- ASCII "NTDLL.RtlTryAcquireSRWLockExclusive"
- ASCII "NTDLL.RtlTryAcquireSRWLockShared"
- ASCII "NTDLL.RtlTryEnterCriticalSection"
- ASCII "NTDLL.EtwUnregisterTraceGuids"
- ASCII "NTDLL.VerSetConditionMask"
- ASCII "NTDLL.TpWaitForIoCompletion"
- ASCII "NTDLL.TpWaitForTimer"
- ASCII "NTDLL.TpWaitForWait"
- ASCII "NTDLL.TpWaitForWork"
- ASCII "NTDLL.RtlWakeAllConditionVariable"
- ASCII "NTDLL.RtlWakeAddressAll"
- ASCII "NTDLL.RtlWakeAddressSingle"
- ASCII "NTDLL.RtlWakeConditionVariable"
- UNICODE "Win32AppCompat"
- UNICODE "Allows getting the 6.2 version only"
- UNICODE "Routine for current OS that gets the correct version."
- UNICODE "GetVersionExWSwitch"
- UNICODE "Return 6.2 as the version from GetVersionExW."
- UNICODE "GetVersionExW_Win8"
- UNICODE "GetVersionExW_Current"
- UNICODE "_Classes"
- UNICODE "\REGISTRY\MACHINE"
- UNICODE "\REGISTRY\MACHINE"
- ASCII "kLsE"
- ASCII "kLsE"
- UNICODE "!x-sys-default-locale"
- UNICODE "!x-sys-default-locale"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "TMP"
- UNICODE "\Nls\Sorting\Versions"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Nls\Sorting\Versions"
- UNICODE "*.*"
- UNICODE "\Nls\Language Groups"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Nls\Language Groups"
- UNICODE "\Nls\Locale\Alternate Sorts"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Nls\Locale\Alternate Sorts"
- UNICODE "\Nls\Locale"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Nls\Locale"
- UNICODE "ext-ms-win-ntuser-string-l1-1-0"
- UNICODE "ext-ms-win-ntuser-string-l1-1-0"
- ASCII "%s"
- UNICODE "DBWIN_BUFFER"
- UNICODE "DBWIN_BUFFER"
- UNICODE "GetVersionSwitch"
- UNICODE "Return 6.2 as the version from GetVersion."
- UNICODE "GetVersion_Win8"
- UNICODE "GetVersion_Current"
- UNICODE "GetOverlappedResultSwitch"
- UNICODE "Perform fixed up behavior for GetOverlappedResult for Win7 and beyond."
- UNICODE "GetOverlappedResult_Win7"
- UNICODE "Allow race condition fix in GetOverlappedResult"
- UNICODE "GetOverlappedResult_Vista"
- UNICODE "Routine for downlevel that does nothing."
- UNICODE "CreateFileDowngradeSwitch"
- UNICODE "Allow denial of exclusive open of a file when caller does not have write privilege."
- UNICODE "CreateFileDowngrade_Win7"
- UNICODE "Allow flag to be passed with CreateFile call that indicates to perform downgrade if applicable."
- UNICODE "CreateFileDowngrade_Vista"
- ASCII "kLsE"
- UNICODE ":\"
- UNICODE ":/\"
- UNICODE "ext-ms-win-kernel32-datetime-l1-1-0"
- UNICODE "ext-ms-win-kernel32-datetime-l1-1-0"
- UNICODE ".DLL"
- UNICODE "Hostname"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "Hostname"
- UNICODE "_CLUSTER_NETWORK_NAME_"
- UNICODE "_CLUSTER_NETWORK_HOSTNAME_"
- UNICODE "_CLUSTER_NETWORK_DOMAIN_"
- UNICODE "_CLUSTER_NETWORK_FQDN_"
- UNICODE "_CLUSTER_NETWORK_NAME_"
- UNICODE "_CLUSTER_NETWORK_HOSTNAME_"
- UNICODE "_CLUSTER_NETWORK_DOMAIN_"
- UNICODE "_CLUSTER_NETWORK_FQDN_"
- UNICODE "OOBEInProgress"
- UNICODE "\Registry\Machine\System\Setup"
- UNICODE "SystemSetupInProgress"
- UNICODE "\Registry\Machine\System\Setup"
- UNICODE "OOBEInProgress"
- UNICODE "\Registry\Machine\System\Setup"
- UNICODE "SystemSetupInProgress"
- UNICODE "ComputerName"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ActiveComputerName"
- UNICODE "ComputerName"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ActiveComputerName"
- UNICODE "ComputerName"
- UNICODE "\REGISTRY\USER"
- UNICODE "\REGISTRY\USER"
- UNICODE "\REGISTRY\MACHINE\SOFTWARE\CLASSES"
- UNICODE "_Classes"
- UNICODE "\REGISTRY\MACHINE\SOFTWARE\CLASSES"
- UNICODE "\Registry\Machine\Software\Classes"
- UNICODE "\Registry\Machine\Software\Classes"
- UNICODE "\Registry\Machine\Software\Classes"
- UNICODE "\Registry\User"
- UNICODE "\Registry\User"
- UNICODE "_Classes"
- UNICODE "_Classes"
- UNICODE "\Registry\User\"
- UNICODE "_Classes"
- UNICODE "\Registry\User\"
- UNICODE "\\.\MountPointManager"
- UNICODE "shell32.dll"
- UNICODE "shell32.dll"
- UNICODE "::$DATA"
- UNICODE "\\?\Volume"
- UNICODE "\\?\Volume"
- UNICODE "%USERPROFILE%"
- UNICODE "!x-sys-default-locale"
- UNICODE "quc-Latn"
- UNICODE "quc-Latn"
- UNICODE "%s\%s\%s"
- UNICODE "LanguageList"
- UNICODE "%s\%s\%s"
- UNICODE "LanguageList"
- UNICODE "%x"
- UNICODE "Software\Classes\Local Settings\ImmutableMuiCache"
- UNICODE "Software\Classes\Local Settings\MuiCache"
- UNICODE "\Registry\Machine\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings"
- UNICODE "StringCacheGeneration"
- UNICODE "\Registry\Machine\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings"
- UNICODE "Software\Classes\Local Settings\ImmutableMuiCache"
- UNICODE "StringCacheGeneration"
- UNICODE "Software\Classes\Local Settings\MuiCache"
- UNICODE "ext-ms-win-kernel32-file-l1-1-0"
- UNICODE "ext-ms-win-kernel32-file-l1-1-0"
- UNICODE "ext-ms-win-advapi32-ntmarta-l1-1-0"
- UNICODE "ext-ms-win-advapi32-ntmarta-l1-1-0"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\System"
- UNICODE "CopyFileBufferedSynchronousIo"
- UNICODE "CopyFileBufferedSynchronousIo"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\System"
- UNICODE "CopyFileChunkSize"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\System"
- UNICODE "CopyFileChunkSize"
- UNICODE "CopyFileOverlappedCount"
- UNICODE "CopyFileOverlappedCount"
- UNICODE "ext-ms-win-advapi32-registry-l1-1-0"
- UNICODE "ext-ms-win-advapi32-registry-l1-1-0"
- UNICODE "con"
- UNICODE "prn"
- UNICODE "aux"
- UNICODE "nul"
- UNICODE "com1."
- UNICODE "com2."
- UNICODE "com3."
- UNICODE "com4."
- UNICODE "com5."
- UNICODE "com6."
- UNICODE "com7."
- UNICODE "com8."
- UNICODE "com9."
- UNICODE "lpt1."
- UNICODE "lpt2."
- UNICODE "lpt3."
- UNICODE "lpt4."
- UNICODE "lpt5."
- UNICODE "lpt6."
- UNICODE "lpt7."
- UNICODE "lpt8."
- UNICODE "lpt9."
- UNICODE ".xn--"
- UNICODE ".xn--"
- UNICODE "con."
- UNICODE "prn."
- UNICODE "aux."
- UNICODE "nul."
- UNICODE "com1."
- UNICODE "com2."
- UNICODE "com3."
- UNICODE "com4."
- UNICODE "com5."
- UNICODE "com6."
- UNICODE "com7."
- UNICODE "com8."
- UNICODE "com9."
- UNICODE "lpt1."
- UNICODE "lpt2."
- UNICODE "lpt3."
- UNICODE "lpt4."
- UNICODE "lpt5."
- UNICODE "lpt6."
- UNICODE "lpt7."
- UNICODE "lpt8."
- UNICODE "lpt9."
- UNICODE "xn--"
- UNICODE ".."
- UNICODE "con"
- UNICODE "prn"
- UNICODE "aux"
- UNICODE "nul"
- UNICODE "com1"
- UNICODE "com2"
- UNICODE "com3"
- UNICODE "com4"
- UNICODE "com5"
- UNICODE "com6"
- UNICODE "com7"
- UNICODE "com8"
- UNICODE "com9"
- UNICODE "lpt1"
- UNICODE "lpt2"
- UNICODE "lpt3"
- UNICODE "lpt4"
- UNICODE "lpt5"
- UNICODE "lpt6"
- UNICODE "lpt7"
- UNICODE "lpt8"
- UNICODE "lpt9"
- UNICODE "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890."
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "x86"
- UNICODE "neutral"
- UNICODE "PackageRootFolder"
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "ntdll.dll"
- ASCII "NtQuerySystemInformation"
- UNICODE "ntdll.dll"
- ASCII "NtQuerySystemInformation"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\"
- UNICODE "PackageRootFolder"
- UNICODE "%ws%wc%ws"
- UNICODE "%ws%wc%ws"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\%s"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\%s"
- UNICODE "Flags"
- UNICODE "%ws%wc%ws%ws"
- UNICODE "%ws%wc%ws%ws"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
- UNICODE "Moniker"
- UNICODE "Local"
- UNICODE "Session"
- UNICODE "\BaseNamedObjects"
- UNICODE "RPC Control"
- UNICODE "\RPC Control"
- UNICODE "\RPC Control"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects"
- UNICODE "%ws\%ld\AppContainerNamedObjects"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\BaseNamedObjects"
- UNICODE "%ws\%ld\BaseNamedObjects"
- UNICODE "RPC Control"
- UNICODE "%ws\%ws"
- UNICODE "\Device\NamedPipe%ws"
- UNICODE "%ws\%ws"
- UNICODE "\Device\NamedPipe%ws"
- UNICODE "\BaseNamedObjects"
- UNICODE "Session"
- UNICODE "Local"
- UNICODE "Global"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\"
- UNICODE "Path"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\"
- UNICODE "%s\microsoft.system.package.metadata\%s.pckgdep"
- UNICODE "%s\microsoft.system.package.metadata\%s.pckgdep"
- UNICODE "DefaultBrowser_NOPUBLISHERID"
- UNICODE "DefaultBrowser_NOPUBLISHERID"
- UNICODE "OSMaxVersionTested"
- UNICODE "OSMaxVersionTested"
- UNICODE "<PEB>"
- UNICODE "ntdll.dll"
- ASCII "NtQuerySystemInformation"
- UNICODE "ntdll.dll"
- ASCII "NtQuerySystemInformation"
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890."
- UNICODE "\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\"
- UNICODE "\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\"
- UNICODE "\Packages\"
- UNICODE "\Packages\"
- UNICODE "Software\Microsoft\Windows NT\CurrentVersion\ProfileList"
- UNICODE "%s\%s"
- UNICODE "Software\Microsoft\Windows NT\CurrentVersion\ProfileList"
- UNICODE "Local AppData"
- UNICODE "Local AppData"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
- UNICODE "%s\%s"
- UNICODE "%USERPROFILE%"
- UNICODE "%s\%s"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
- UNICODE "ProfileImagePath"
- UNICODE "ProfileImagePath"
- UNICODE "\LocalState"
- UNICODE "LocalState"
- UNICODE "\RoamingState"
- UNICODE "RoamingState"
- UNICODE "\TempState"
- UNICODE "TempState"
- UNICODE "\LocalCache"
- UNICODE "LocalCache"
- UNICODE "\LocalState"
- UNICODE "LocalState"
- UNICODE "\RoamingState"
- UNICODE "RoamingState"
- UNICODE "\TempState"
- UNICODE "TempState"
- UNICODE "\LocalCache"
- UNICODE "LocalCache"
- UNICODE "WnfStateName"
- UNICODE "WnfStateName"
- UNICODE "\PSR"
- UNICODE "\Settings\settings.dat"
- UNICODE "PackageState"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList"
- UNICODE "PackageRootFolder"
- UNICODE "PackageState"
- UNICODE "PackageSid"
- UNICODE "PackageSid"
- UNICODE "CapabilityCount"
- UNICODE "CapabilitySids"
- UNICODE "CapabilitySids"
- UNICODE "CapabilityCount"
- UNICODE "~RF%4x.TMP"
- UNICODE "~RF%4x.TMP"
- UNICODE "://"
- UNICODE "file://"
- UNICODE "////"
- UNICODE "DisplayName"
- UNICODE "DisplayName"
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "SHA256"
- UNICODE "ObjectLength"
- UNICODE "ObjectLength"
- UNICODE "HashDigestLength"
- UNICODE "HashDigestLength"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
- UNICODE "\Settings"
- UNICODE "\Settings"
- UNICODE "\roaming.lock"
- UNICODE "\roaming.lock"
- UNICODE "\Settings"
- UNICODE "PackageState"
- UNICODE "\Settings\settings.dat"
- UNICODE "\SystemAppData"
- UNICODE "\SystemAppData"
- UNICODE "\Settings"
- UNICODE "Children"
- UNICODE "DisplayName"
- UNICODE "Moniker"
- UNICODE "Children"
- UNICODE "PackageState"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList"
- UNICODE "WnfStateName"
- UNICODE "\PSR"
- ASCII "BCryptCloseAlgorithmProvider"
- ASCII "BCryptGetProperty"
- ASCII "BCryptCreateHash"
- ASCII "BCryptFinishHash"
- ASCII "BCryptDestroyHash"
- UNICODE "Bcrypt.dll"
- UNICODE "Bcrypt.dll"
- ASCII "BCryptOpenAlgorithmProvider"
- ASCII "BCryptCloseAlgorithmProvider"
- ASCII "BCryptGetProperty"
- ASCII "BCryptCreateHash"
- ASCII "BCryptHashData"
- ASCII "BCryptFinishHash"
- ASCII "BCryptDestroyHash"
- ASCII "BCryptOpenAlgorithmProvider"
- UNICODE "PackageState"
- UNICODE "\BaseNamedObjects"
- UNICODE "ReadStateContainerValue"
- UNICODE "ReadStateContainerValue"
- UNICODE "\Settings\settings.dat"
- UNICODE "\Settings\settings.dat"
- UNICODE "ext-ms-win-mrmcorer-resmanager-l1-1-0"
- UNICODE "ext-ms-win-mrmcorer-resmanager-l1-1-0"
- UNICODE "ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0"
- UNICODE "ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0"
- UNICODE "Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones"
- UNICODE "TZI"
- UNICODE "MUI_Dlt"
- UNICODE "MUI_Std"
- UNICODE "MUI_Dlt"
- UNICODE "MUI_Std"
- UNICODE "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones"
- UNICODE "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones"
- UNICODE "Dynamic DST"
- UNICODE "Dynamic DST"
- UNICODE "FirstEntry"
- UNICODE "LastEntry"
- UNICODE "FirstEntry"
- UNICODE "LastEntry"
- UNICODE "..\"
- UNICODE ".."
- UNICODE "\REGISTRY\A\"
- UNICODE "\REGISTRY\A\"
- UNICODE "\UNC\"
- UNICODE ":\"
- UNICODE "{00000000-0000-0000-0000-000000000000}"
- UNICODE "{00000000-0000-0000-0000-000000000000}"
- UNICODE "OpenState"
- UNICODE "OpenState"
- UNICODE "_Classes\Local Settings"
- UNICODE "_Classes\Local Settings"
- UNICODE "TransientLangId"
- UNICODE "TransientLangId"
- UNICODE "Control Panel\International\User Profile"
- UNICODE "Control Panel\International\User Profile"
- UNICODE "SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel"
- UNICODE "Version"
- UNICODE "SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel"
- UNICODE "\\.\MountPointManager"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"
- UNICODE "OptionValue"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"
- UNICODE "OptionValue"
- UNICODE "%APPDATA%"
- UNICODE "%USERPROFILE%"
- UNICODE "%APPDATA%"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap"
- UNICODE "IEharden"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap"
- UNICODE "IEharden"
- ASCII "Software\Microsoft\Windows\CurrentVersion\URL\Prefixes"
- ASCII "Software\Microsoft\Windows\CurrentVersion\URL\Prefixes"
- ASCII "kLsE"
- UNICODE "TMP"
- UNICODE "BASEDLL!"
- UNICODE "\Windows"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld%ws"
- UNICODE "TMP"
- UNICODE "BACKUP"
- UNICODE "INI"
- UNICODE "FIND"
- UNICODE "GMEM"
- UNICODE "LMEM"
- UNICODE "ENV"
- UNICODE "BASEDLL!"
- UNICODE "\Windows"
- UNICODE "%ws\%ld%ws"
- UNICODE "locker.exe"
- UNICODE "\Sessions"
- UNICODE "DBWinMutex"
- UNICODE "DBWinMutex"
- UNICODE "ext-ms-win-kernel32-registry-l1-1-0"
- UNICODE "ext-ms-win-kernel32-registry-l1-1-0"
- UNICODE "ext-ms-win-kernel32-sidebyside-l1-1-0"
- UNICODE "ext-ms-win-kernel32-sidebyside-l1-1-0"
- UNICODE "\Nls\CustomLocale"
- UNICODE "\Nls\ExtendedLocale"
- UNICODE "\Nls\CustomLocale"
- UNICODE "\Nls\ExtendedLocale"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "!x-sys-default-locale"
- ASCII "SortGetHandle"
- ASCII "SortCloseHandle"
- ASCII "server"
- UNICODE "\Connect"
- UNICODE "\Connect"
- UNICODE "dde."
- UNICODE "hotkey."
- UNICODE "locker.exe"
- UNICODE "NoDefaultCurrentDirectoryInExePath"
- UNICODE "NoDefaultCurrentDirectoryInExePath"
- UNICODE "ext-ms-win-kernel32-appcompat-l1-1-0"
- UNICODE "ext-ms-win-kernel32-appcompat-l1-1-0"
- UNICODE "ext-ms-win-kernelbase-processthread-l1-1-0"
- UNICODE "ext-ms-win-kernelbase-processthread-l1-1-0"
- UNICODE ".exe"
- UNICODE "ext-ms-win-shell32-shellfolders-l1-1-0"
- UNICODE "ext-ms-win-shell32-shellfolders-l1-1-0"
- UNICODE "ext-ms-win-shell32-shellcom-l1-1-0"
- UNICODE "ext-ms-win-shell32-shellcom-l1-1-0"
- UNICODE "\Nls\Codepage"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Nls\Codepage"
- UNICODE "YES"
- UNICODE "NO"
- UNICODE "YES"
- UNICODE "TRUE"
- UNICODE "NO"
- UNICODE "Nation"
- UNICODE "Control Panel\International\Geo"
- UNICODE "Control Panel\International\Geo"
- UNICODE "http"
- UNICODE "file"
- UNICODE "ftp"
- UNICODE "https"
- UNICODE "news"
- UNICODE "mailto"
- UNICODE "search"
- UNICODE "search-ms"
- UNICODE "gopher"
- UNICODE "nntp"
- UNICODE "telnet"
- UNICODE "wais"
- UNICODE "mk"
- UNICODE "shell"
- UNICODE "knownfolder"
- UNICODE "local"
- UNICODE "javascript"
- UNICODE "vbscript"
- UNICODE "snews"
- UNICODE "about"
- UNICODE "res"
- UNICODE "ms-shell-rooted"
- UNICODE "ms-shell-idlist"
- UNICODE "hcp"
- UNICODE "search-ms"
- UNICODE "res"
- UNICODE "ms-shell-idlist"
- UNICODE "https"
- UNICODE "hcp"
- UNICODE "about"
- UNICODE "knownfolder"
- UNICODE "javascript"
- UNICODE "shell"
- UNICODE "ms-shell-rooted"
- UNICODE "local"
- UNICODE "snews"
- UNICODE "vbscript"
- UNICODE "ext-ms-win-kernel32-windowserrorreporting-l1-1-0"
- UNICODE "ext-ms-win-kernel32-windowserrorreporting-l1-1-0"
- UNICODE "file:///C:/Users/Windows%208.1%2032bit/Desktop/6Samples/"
- UNICODE "file:///C:/Users/Windows%208.1%2032bit/Desktop/6Samples/"
- UNICODE "localhost"
- UNICODE "localhost"
- UNICODE "//"
- UNICODE "file"
- ASCII "0 "
- UNICODE "ext-ms-win-kernel32-quirks-l1-1-0"
- UNICODE "ext-ms-win-kernel32-quirks-l1-1-0"
- UNICODE "\KernelObjects\LowMemoryCondition"
- UNICODE "\KernelObjects\LowMemoryCondition"
- UNICODE "file:///C:/Users/Windows%208.1%2032bit/Desktop/6Samples/"
- UNICODE "file:///C:/Users/Windows%208.1%2032bit/Desktop/6Samples/"
- ASCII "Software\Microsoft\Internet Explorer\International"
- UNICODE "AcceptLanguage"
- ASCII "Software\Microsoft\Internet Explorer\International"
- UNICODE "AcceptLanguage"
- ASCII "eEf=ghfijklimnf=o"
- ASCII "f=pqrst"
- UNICODE "\Device\NamedPipe\"
- UNICODE "\Device\NamedPipe\"
- UNICODE "\??"
- UNICODE "Control Panel\International"
- UNICODE "Control Panel\International"
- UNICODE "sDecimal"
- UNICODE "sThousand"
- UNICODE "sGrouping"
- UNICODE "sCurrencyOverride"
- UNICODE "sMonDecimalSep"
- UNICODE "sMonThousandSep"
- UNICODE "sMonGrouping"
- UNICODE "sPositiveSign"
- UNICODE "s1159"
- UNICODE "CustomLocalesNoSelect"
- UNICODE "LocaleName"
- UNICODE "CustomLocalesNoSelect"
- UNICODE "LocaleName"
- UNICODE "iNegNumber"
- UNICODE "iFirstDayOfWeek"
- UNICODE "sMonGrouping"
- UNICODE "sShortTime"
- UNICODE "sList"
- UNICODE "sTimeFormat"
- UNICODE "iFirstWeekOfYear"
- UNICODE "sGrouping"
- UNICODE "iCalendarType"
- UNICODE "sYearMonth"
- UNICODE "iCurrDigits"
- UNICODE "NumShape"
- UNICODE "sMonDecimalSep"
- UNICODE "iDigits"
- UNICODE "sCurrencyOverride"
- UNICODE "s2359"
- UNICODE "iMeasure"
- UNICODE "iCurrency"
- UNICODE "iLZero"
- UNICODE "sMonThousandSep"
- UNICODE "sNativeDigits"
- UNICODE "s1159"
- UNICODE "iNegCurr"
- UNICODE "sNegativeSign"
- UNICODE "iPaperSize"
- UNICODE "sShortDate"
- UNICODE "iCountry"
- UNICODE "LocaleName"
- UNICODE "sCountry"
- UNICODE "sLongDate"
- UNICODE "sDecimal"
- UNICODE "sPositiveSign"
- UNICODE "sThousand"
- UNICODE "sList"
- UNICODE "iMeasure"
- UNICODE "sDecimal"
- UNICODE "sThousand"
- UNICODE "sGrouping"
- UNICODE "iDigits"
- UNICODE "iLZero"
- UNICODE "sNativeDigits"
- UNICODE "sCurrencyOverride"
- UNICODE "sCurrency"
- UNICODE "sMonDecimalSep"
- UNICODE "sMonThousandSep"
- UNICODE "sMonGrouping"
- UNICODE "iCurrDigits"
- UNICODE "iCurrency"
- UNICODE "iNegCurr"
- UNICODE "sTimeFormat"
- UNICODE "sTimeFormat"
- UNICODE "iTime"
- UNICODE "s1159"
- UNICODE "s2359"
- UNICODE "dMy"
- UNICODE "sShortDate"
- UNICODE "iDate"
- UNICODE "sDate"
- UNICODE "sShortDate"
- UNICODE "dMy"
- UNICODE "sLongDate"
- UNICODE "sPositiveSign"
- UNICODE "iPaperSize"
- UNICODE "iCalendarType"
- UNICODE "My"
- UNICODE "sYearMonth"
- UNICODE "sTimeFormat"
- UNICODE "iTime"
- UNICODE "iTLZero"
- UNICODE "iTimePrefix"
- UNICODE "sTime"
- UNICODE "sShortTime"
- UNICODE "sNegativeSign"
- UNICODE "iFirstDayOfWeek"
- UNICODE "sCountry"
- UNICODE "iCountry"
- UNICODE "sLanguage"
- UNICODE "NumShape"
- UNICODE "iNegNumber"
- UNICODE "iFirstWeekOfYear"
- UNICODE "sLanguage"
- UNICODE "iTime"
- UNICODE "iTLZero"
- UNICODE "iTimePrefix"
- UNICODE "sTime"
- UNICODE "dMy"
- UNICODE "iDate"
- UNICODE "iCountry"
- UNICODE "sCountry"
- UNICODE "sList"
- UNICODE "iMeasure"
- UNICODE "iPaperSize"
- UNICODE "iDigits"
- UNICODE "iNegNumber"
- UNICODE "sNativeDigits"
- UNICODE "NumShape"
- UNICODE "iCurrDigits"
- UNICODE "iCurrency"
- UNICODE "iNegCurr"
- UNICODE "sShortTime"
- UNICODE "sTimeFormat"
- UNICODE "sShortDate"
- UNICODE "sYearMonth"
- UNICODE "sLongDate"
- UNICODE "iCalendarType"
- UNICODE "iFirstDayOfWeek"
- UNICODE "iFirstWeekOfYear"
- UNICODE "sNegativeSign"
- UNICODE "\\?\UNC\"
- UNICODE "\\.\MountPointManager"
- UNICODE "\\"
- UNICODE "\\?\UNC\"
- UNICODE "\\"
- UNICODE "\\?\UNC\"
- UNICODE "\\.\MountPointManager"
- UNICODE "ext-ms-win-gpapi-grouppolicy-l1-1-0"
- UNICODE "ext-ms-win-gpapi-grouppolicy-l1-1-0"
- UNICODE "WIN://SYSAPPID"
- UNICODE "WIN://PKG"
- UNICODE "WIN://SYSAPPID"
- UNICODE "WIN://PKG"
- UNICODE "\??\%s\system32\conhost.exe 0xffffffff"
- UNICODE "\Device\ConDrv\Server"
- UNICODE "\Reference"
- UNICODE "\??\%s\system32\conhost.exe 0xffffffff"
- UNICODE "\Reference"
- UNICODE "\Device\ConDrv\Server"
- UNICODE "\Input"
- UNICODE "\Output"
- ASCII "ClientComputerName"
- ASCII "ClientComputerName"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "PrimaryDnsSuffix"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\System\DNSclient"
- UNICODE "Domain"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "PrimaryDnsSuffix"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\System\DNSclient"
- UNICODE "(null)"
- UNICODE "mferror.dll"
- UNICODE "mferror.dll"
- UNICODE ".tmp"
- UNICODE "\\.\pipe\"
- UNICODE "\DosDevices\pipe\"
- UNICODE "\\.\pipe\"
- UNICODE "\DosDevices\pipe\"
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890."
- UNICODE "file"
- UNICODE "0123456789ABCDEF"
- UNICODE "\Device\MUP"
- UNICODE "\\.\MountPointManager"
- UNICODE "\Device\MUP"
- UNICODE "netmsg.dll"
- UNICODE "netmsg.dll"
- UNICODE "QueryStateContainerItemInfo"
- UNICODE "QueryStateContainerItemInfo"
- UNICODE "DeleteStateContainerValue"
- UNICODE "DeleteStateContainerValue"
- UNICODE "ntdll.dll"
- ASCII "NtQuerySystemInformation"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Appx"
- UNICODE "PackageRoot"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Appx"
- UNICODE "PackageRoot"
- UNICODE "AcquireStateLock"
- UNICODE "AcquireStateLock"
- UNICODE "CreateStateSubcontainer"
- UNICODE "CreateStateSubcontainer"
- UNICODE "DefaultBrowser_NOPUBLISHERID!"
- UNICODE "DefaultBrowser_NOPUBLISHERID!"
- UNICODE "#IMMUTABLE"
- UNICODE "#IMMUTABLE"
- UNICODE "Strings"
- ASCII ".html"
- UNICODE ".html"
- ASCII ".htm"
- UNICODE ".htm"
- ASCII ".xml"
- UNICODE ".xml"
- ASCII ".doc"
- UNICODE ".doc"
- ASCII ".xls"
- UNICODE ".xls"
- ASCII ".ppt"
- UNICODE ".ppt"
- ASCII ".rtf"
- UNICODE ".rtf"
- ASCII ".dot"
- UNICODE ".dot"
- ASCII ".xlw"
- UNICODE ".xlw"
- ASCII ".pps"
- UNICODE ".pps"
- ASCII ".xlt"
- UNICODE ".xlt"
- ASCII ".hta"
- UNICODE ".hta"
- ASCII ".pot"
- UNICODE ".pot"
- ASCII ".pdf"
- UNICODE ".pdf"
- ASCII ".xps"
- UNICODE ".xps"
- ASCII ".xbap"
- UNICODE ".xbap"
- ASCII ".xlsx"
- UNICODE ".xlsx"
- ASCII ".pptx"
- UNICODE ".pptx"
- ASCII ".docx"
- UNICODE ".docx"
- UNICODE ".html"
- UNICODE ".xbap"
- UNICODE ".xlsx"
- UNICODE ".pptx"
- UNICODE "file://"
- UNICODE "\\"
- UNICODE "DeleteStateContainer"
- UNICODE "DeleteStateContainer"
- UNICODE "\REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENT"
- UNICODE "\REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENT"
- UNICODE "QueryStateAtomValueInfo"
- UNICODE "QueryStateAtomValueInfo"
- UNICODE "\GLOBAL??"
- UNICODE "SymbolicLink"
- UNICODE "SymbolicLink"
- UNICODE "\GLOBAL??"
- UNICODE "SymbolicLink"
- UNICODE "\GLOBAL??"
- UNICODE "NV Domain"
- UNICODE "DNSAPI.DLL"
- UNICODE "DNSAPI.DLL"
- ASCII "DnsValidateName_W"
- UNICODE "NV Domain"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "DNSAPI.DLL"
- ASCII "DnsValidateName_W"
- ASCII "DnsValidateName_W"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "NV Hostname"
- UNICODE "NV Hostname"
- UNICODE "ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0"
- UNICODE "ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0"
- UNICODE "\Registry\User"
- UNICODE "\Nls\ExtendedLocale"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Nls\CustomLocale"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "FullTrust"
- UNICODE "FullTrust"
- UNICODE ".bat"
- UNICODE ".cmd"
- UNICODE " /C "
- UNICODE ":80"
- UNICODE ":21"
- UNICODE ".exe"
- UNICODE "http://"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix"
- UNICODE "\Device\ConDrv\Server"
- ASCII "DllGetContractDescription"
- ASCII "DllGetContractDescription"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName"
- ASCII "csrsrv"
- ASCII "CsrCreateRemoteThread"
- ASCII "CsrCreateRemoteThread"
- UNICODE "\Device\ConDrv\Connect"
- UNICODE "\Device\ConDrv\Connect"
- UNICODE "qut-GT"
- UNICODE "dddd, MMMM dd"
- UNICODE "Region"
- UNICODE "Debugger"
- UNICODE "ComSpec"
- UNICODE "SystemRoot"
- UNICODE "\system32\cmd.exe"
- UNICODE " /c"
- ASCII "Kernel32: No mapping for ImageInformation.Machine == %04x
- "
- UNICODE "ComSpec"
- UNICODE "SystemRoot"
- UNICODE "\system32\cmd.exe"
- UNICODE " /c"
- UNICODE "Debugger"
- ASCII "Kernel32: No mapping for ImageInformation.Machine == %04x
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName"
- UNICODE "ComputerName"
- UNICODE "!x-sys-default-locale"
- UNICODE "HKCU\Control Panel\International"
- UNICODE "\\?\UNC\"
- UNICODE "HKCU\Control Panel\International"
- UNICODE "%s\%u-%u-%u-%u"
- UNICODE "%s\%u-%u-%u-%u"
- UNICODE "Restricted"
- ASCII "CreateRemoteThreadEx"
- ASCII "SXS: %s - Failing thread create because RtlQueryInformationActivationContext() failed with status %08lx
- "
- ASCII "CreateRemoteThreadEx"
- ASCII "SXS: %s - Failing thread create because RtlActivateActivationContextEx() failed with status %08lx
- "
- ASCII "CreateRemoteThreadEx"
- ASCII "SXS: %s - Failing thread create because RtlAllocateActivationContextStack() failed with status %08lx
- "
- ASCII "CreateRemoteThreadEx"
- ASCII "SXS: %s - Failing thread create because RtlQueryInformationActivationContext() failed with status %08lx
- "
- ASCII "SXS: %s - Failing thread create because RtlAllocateActivationContextStack() failed with status %08lx
- "
- ASCII "SXS: %s - Failing thread create because RtlActivateActivationContextEx() failed with status %08lx
- "
- UNICODE "\\?\GLOBALROOT"
- UNICODE "\\?\GLOBALROOT"
- UNICODE "1234567890abcdefghjkmnpqrstvwxyz"
- UNICODE "DeleteStateAtomValue"
- UNICODE "WriteStateAtomValue"
- UNICODE "ReadStateAtomValue"
- UNICODE "OpenStateAtom"
- UNICODE "WriteStateContainerValue"
- UNICODE "EnumerateStateAtomValues"
- UNICODE "EnumerateStateContainerItems"
- UNICODE "CreateStateAtom"
- ASCII "%04d-%02d-%02d"
- UNICODE "WriteStateContainerValue"
- UNICODE "EnumerateStateContainerItems"
- UNICODE "OpenStateAtom"
- UNICODE "CreateStateAtom"
- UNICODE "ReadStateAtomValue"
- UNICODE "WriteStateAtomValue"
- UNICODE "DeleteStateAtomValue"
- UNICODE "EnumerateStateAtomValues"
- UNICODE "ReleaseStateLock"
- ASCII "%02d:%02d:%02d"
- UNICODE "ReleaseStateLock"
- UNICODE "ext-ms-win-kernel32-errorhandling-l1-1-0"
- UNICODE "LastChange"
- UNICODE "SMBCACopyFileChunkSize"
- UNICODE "SMBCACopyFileOverlappedCount"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\System"
- UNICODE ":21"
- UNICODE ":70"
- ASCII "Sun"
- ASCII "Sep"
- ASCII "Wed"
- ASCII "Jul"
- ASCII "Fri"
- ASCII "Jun"
- ASCII "Sat"
- ASCII "Mar"
- ASCII "Mon"
- ASCII "Dec"
- ASCII "Apr"
- ASCII "May"
- ASCII "Jan"
- ASCII "Aug"
- ASCII "Feb"
- UNICODE "Software\Policies\Microsoft\Control Panel\International"
- UNICODE "\Registry\Machine\"
- UNICODE "dddd, MMMM dd"
- UNICODE "sCurrency"
- UNICODE "\Nls\Calendars\Japanese\Eras"
- UNICODE "Restricted"
- UNICODE "arm"
- UNICODE "x64"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Mappings"
- UNICODE "Children"
- UNICODE "api-ms-win-core-delayload-l1-1-0.dll"
- UNICODE "\Device\Beep"
- UNICODE "\Device\Beep"
- UNICODE "USERPROFILE"
- UNICODE "Classes\"
- UNICODE "Software\Classes\"
- UNICODE "\Registry\Machine\Software"
- UNICODE "\Registry\Machine"
- UNICODE "LastChange"
- ASCII "Invalid parameter passed to C runtime function.
- "
- ASCII "Invalid parameter passed to C runtime function.
- "
- UNICODE "ext-ms-win-kernel32-errorhandling-l1-1-0"
- ASCII "SbFilterProcedure_Scenario"
- ASCII "SbFilterProcedure_Scenario"
- ASCII "
- STATUS_STACK_BUFFER_OVERRUN encountered
- "
- ASCII "
- STATUS_STACK_BUFFER_OVERRUN encountered
- "
- ASCII "
- Unhandled exception encountered
- "
- ASCII "
- Unhandled exception encountered
- "
- UNICODE "RegisterStateLock"
- UNICODE "RegisterStateChangeNotification"
- UNICODE "CreateStateLock"
- UNICODE "CloseStateLock"
- UNICODE "CreateStateChangeNotification"
- UNICODE "UnregisterStateLock"
- UNICODE "UnregisterStateChangeNotification"
- UNICODE "GetSystemAppDataFolder"
- UNICODE "GetStateSettingsFolder"
- UNICODE "GetHivePath"
- UNICODE "StateSpace::LoadHive"
- UNICODE "GetStateRootFolder"
- UNICODE "GetStateRootFolder"
- UNICODE "GetSystemAppDataFolder"
- UNICODE "GetStateSettingsFolder"
- UNICODE "GetHivePath"
- UNICODE "RegisterStateLock"
- UNICODE "UnregisterStateLock"
- UNICODE "CreateStateLock"
- UNICODE "CloseStateLock"
- UNICODE "RegisterStateChangeNotification"
- UNICODE "UnregisterStateChangeNotification"
- UNICODE "CreateStateChangeNotification"
- UNICODE "StateSpace::LoadHive"
- UNICODE "CloseStateContainer"
- UNICODE "GetSystemAppDataKey"
- UNICODE "\\?\%s\microsoft.system.package.metadata\%s.pckgdep"
- UNICODE "OpenStateExplicit"
- UNICODE "OpenStateExplicit"
- UNICODE "GetSystemAppDataKey"
- UNICODE "CloseStateContainer"
- UNICODE "\\?\%s\microsoft.system.package.metadata\%s.pckgdep"
- UNICODE "GetStateFolder"
- UNICODE "\AC\#!"
- UNICODE "CreateStateContainer"
- UNICODE "StateContainer::CreateContainerKey"
- UNICODE "StateContainer::CreateContainerKey"
- UNICODE "StateSpace::GetHive"
- UNICODE "GetStateFolder"
- UNICODE "CreateStateContainer"
- UNICODE "StateSpace::GetHive"
- UNICODE "StateContainer::CreateContainerKey"
- UNICODE "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib"
- UNICODE "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib"
- UNICODE "arm"
- UNICODE "x64"
- UNICODE "file://"
- UNICODE "dddd, MMMM dd"
- UNICODE "en-US"
- UNICODE "Command Prompt"
- UNICODE "<PEB>"
- UNICODE "en-US"
- UNICODE "Command Prompt"
- UNICODE "dddd, MMMM dd"
- UNICODE "dflt"
- UNICODE "037"
- UNICODE ".nlp"
- UNICODE ".nlx"
- UNICODE "kernel32.dll"
- ASCII "DBWIN_BUFFER_READY"
- ASCII "DBWIN_DATA_READY"
- UNICODE "kernel32.dll"
- ASCII "DBWIN_BUFFER_READY"
- ASCII "DBWIN_DATA_READY"
- ASCII "OutputDebugString faulted during output
- "
- ASCII "gString faulted during output
- "
- UNICODE "%x"
- ASCII "AcceptLanguage"
- UNICODE "?\UNC"
- UNICODE "DevelopmentMode"
- UNICODE "<NULL>"
- UNICODE "Children"
- UNICODE "Moniker"
- UNICODE "ParentMoniker"
- UNICODE "DevelopmentMode"
- UNICODE "ParentMoniker"
- UNICODE "Children"
- UNICODE "\\?\UNC"
- UNICODE ":///"
- UNICODE ":443"
- UNICODE ":70"
- UNICODE ":80"
- UNICODE ":21"
- UNICODE "TEMP"
- UNICODE "USERPROFILE"
- ASCII "BasepAllocateActivationContextActivationBlock"
- ASCII "SXS: %s - Failure getting active activation context; ntstatus %08lx
- "
- ASCII "BasepAllocateActivationContextActivationBlock"
- ASCII "SXS: %s - Failure getting active activation context; ntstatus %08lx
- "
- UNICODE "%u-%u-%u-%u"
- UNICODE "RPC Control"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects\%ws"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects\%ws"
- UNICODE "%ws\%ld\AppContainerNamedObjects\%ws"
- UNICODE "%u-%u-%u-%u"
- UNICODE "%ALLUSERSPROFILE%"
- UNICODE "%ProgramFiles%"
- UNICODE "%SystemRoot%"
- UNICODE "%SystemDrive%"
- UNICODE "\\%COMPUTERNAME%"
- UNICODE "%04d-%02d-%02d"
- UNICODE "%02d:%02d:%02d"
- UNICODE "%04d-%02d-%02d"
- UNICODE "%02d:%02d:%02d"
- UNICODE "%ALLUSERSPROFILE%"
- UNICODE "%ProgramFiles%"
- UNICODE "%SystemRoot%"
- UNICODE "%SystemDrive%"
- UNICODE "\\%COMPUTERNAME%"
- UNICODE "pipe\"
- UNICODE "\DosDevices\UNC\"
- UNICODE "pipe\"
- UNICODE "\DosDevices\UNC\"
- UNICODE "Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "DefaultBrowser_NOPUBLISHERID"
- UNICODE "DefaultBrowser_NOPUBLISHERID"
- UNICODE "CloseState"
- UNICODE "CloseState"
- UNICODE "FALSE"
- ASCII "QueueUserAPC"
- ASCII "SXS: %s failing because RtlQueryInformationActivationContext() returned status %08lx
- "
- ASCII "SXS: %s failing because RtlQueryInformationActivationContext() returned status %08lx
- "
- UNICODE "\KernelObjects\HighMemoryCondition"
- UNICODE "\KernelObjects\HighMemoryCondition"
- UNICODE "dark"
- UNICODE "light"
- UNICODE "light"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Policies\Packages\Applications"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Policies\Packages\Applications"
- UNICODE "EnableDynamicContentUriRules"
- UNICODE "EnableDynamicContentUriRules"
- UNICODE "EnableDynamicContentUriRules"
- UNICODE "ContentUriRules"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Policies\Packages\Applications\ContentUriRules"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Policies\Packages\Applications"
- UNICODE "EnableDynamicContentUriRules"
- UNICODE "ContentUriRules"
- UNICODE "Software\Microsoft\Windows\CurrentVersion\Policies\Packages\Applications\ContentUriRules"
- UNICODE "SubscribeStateChangeNotification"
- UNICODE "SubscribeStateChangeNotification"
- UNICODE "CloseStateChangeNotification"
- UNICODE "StateChangeNotification::~StateChangeNotification"
- UNICODE "UnsubscribeStateChangeNotification"
- UNICODE "CloseStateChangeNotification"
- UNICODE "UnsubscribeStateChangeNotification"
- UNICODE "StateChangeNotification::~StateChangeNotification"
- UNICODE "00000c00"
- UNICODE "00000c00"
- UNICODE "\Input"
- UNICODE "\Output"
- UNICODE "\Output"
- UNICODE "USER32.DLL"
- ASCII "BroadcastSystemMessageW"
- UNICODE "USER32.DLL"
- ASCII "BroadcastSystemMessageW"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "NV Domain"
- UNICODE ":443"
- UNICODE ":70"
- UNICODE "CloseStateAtom"
- UNICODE "GetSerializedAtomBytes"
- UNICODE "CloseStateAtom"
- UNICODE "GetSerializedAtomBytes"
- UNICODE "SetRoamingLastObservedChangeTime"
- UNICODE "CheckIfStateChangeNotificationExists"
- UNICODE "CheckIfStateChangeNotificationExists"
- UNICODE "SetRoamingLastObservedChangeTime"
- UNICODE "\VarFileInfo\Translation"
- UNICODE "\VarFileInfo\Translation"
- UNICODE "SMBCACopyFileOverlappedCount"
- UNICODE "SMBCACopyFileChunkSize"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Session Manager"
- UNICODE "PendingFileRenameOperations"
- UNICODE "PendingFileRenameOperations%d"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Session Manager"
- UNICODE "PendingFileRenameOperations"
- UNICODE "PendingFileRenameOperations%d"
- UNICODE "\PendingRenameMutex"
- UNICODE "\PendingRenameMutex"
- UNICODE "UNC\"
- UNICODE "http"
- UNICODE "ftp"
- UNICODE "https"
- UNICODE "ftp"
- UNICODE "URL Protocol"
- UNICODE "URL Protocol"
- ASCII "%s, %02i %s %02i %02i:%02i:%02i GMT"
- ASCII "Sun"
- ASCII "Mon"
- ASCII "Tue"
- ASCII "Wed"
- ASCII "Thu"
- ASCII "Fri"
- ASCII "Sat"
- ASCII "Jan"
- ASCII "Feb"
- ASCII "Mar"
- ASCII "Apr"
- ASCII "May"
- ASCII "Jun"
- ASCII "Jul"
- ASCII "Aug"
- ASCII "Sep"
- ASCII "Oct"
- ASCII "Nov"
- ASCII "Dec"
- ASCII "%s, %02i %s %02i %02i:%02i:%02i GMT"
- UNICODE "-001"
- ASCII "NlsDllCodePageTranslation"
- ASCII "NlsDllCodePageTranslation"
- UNICODE "Software\Policies\Microsoft\Control Panel\International"
- UNICODE "\Registry\Machine\"
- UNICODE "Software\Policies\Microsoft\Control Panel\International"
- UNICODE "
- 0123456789"
- UNICODE "
- 0123456789"
- UNICODE "Software\Policies\Microsoft\Control Panel\International"
- UNICODE "\Registry\Machine\"
- UNICODE "RestrictSystemLocales"
- UNICODE "RestrictUserLocales"
- UNICODE "Software\Policies\Microsoft\Control Panel\International"
- UNICODE "RestrictUserLocales"
- UNICODE "AllowableSystemLocaleTagList"
- UNICODE "AllowableUserLocaleTagList"
- UNICODE "RestrictSystemLocales"
- UNICODE "RestrictUserLocales"
- UNICODE "AllowableSystemLocaleTagList"
- UNICODE "AllowableUserLocaleTagList"
- UNICODE "sCurrencyOverride"
- UNICODE "Unknown Language"
- UNICODE " ("
- UNICODE "Unknown Language"
- UNICODE "Unknown Locale"
- UNICODE " ("
- UNICODE "Unknown Locale"
- UNICODE "Unknown Region"
- UNICODE " ("
- UNICODE "Unknown Region"
- UNICODE "zh-TW"
- UNICODE "sMonDecimalSep"
- UNICODE "sCurrency"
- UNICODE "sGrouping"
- UNICODE "sThousand"
- UNICODE "sDecimal"
- UNICODE "sMonThousandSep"
- UNICODE "sNegativeSign"
- UNICODE "sPositiveSign"
- UNICODE "s2359"
- UNICODE "s1159"
- UNICODE "sMonGrouping"
- UNICODE "dMyg'"
- UNICODE "hHmst'"
- UNICODE "dMyg'"
- UNICODE "PreventUserOverrides"
- UNICODE "PreventUserOverrides"
- UNICODE "Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "Control Panel\International\Calendars"
- UNICODE "Control Panel\International\Calendars\TwoDigitYearMax"
- UNICODE "10"
- UNICODE "11"
- UNICODE "12"
- UNICODE "Control Panel\International\Calendars"
- UNICODE "Locale"
- UNICODE "Control Panel\International"
- UNICODE "65000"
- UNICODE "65001"
- UNICODE "65000"
- UNICODE "65001"
- UNICODE "65000"
- UNICODE "th"
- UNICODE "ae"
- UNICODE "ss"
- UNICODE "TH"
- UNICODE "AE"
- UNICODE "IJ"
- UNICODE "oe"
- UNICODE "OE"
- UNICODE "ij"
- UNICODE "Nj"
- UNICODE "NJ"
- UNICODE "lj"
- UNICODE "Lj"
- UNICODE "LJ"
- UNICODE "nj"
- UNICODE "Dz"
- UNICODE "DZ"
- UNICODE "dz"
- UNICODE "fn"
- UNICODE "Qp"
- UNICODE "Db"
- UNICODE "ls"
- UNICODE "lz"
- UNICODE "eV"
- UNICODE "Hg"
- UNICODE "da"
- UNICODE "dm"
- UNICODE "pc"
- UNICODE "oV"
- UNICODE "AU"
- UNICODE "IU"
- UNICODE "pA"
- UNICODE "nA"
- UNICODE "mA"
- UNICODE "kA"
- UNICODE "KB"
- UNICODE "MB"
- UNICODE "GB"
- UNICODE "pF"
- UNICODE "nF"
- UNICODE "mg"
- UNICODE "kg"
- UNICODE "Hz"
- UNICODE "fm"
- UNICODE "nm"
- UNICODE "mm"
- UNICODE "cm"
- UNICODE "km"
- UNICODE "Pa"
- UNICODE "ps"
- UNICODE "ns"
- UNICODE "ms"
- UNICODE "pV"
- UNICODE "nV"
- UNICODE "mV"
- UNICODE "kV"
- UNICODE "MV"
- UNICODE "pW"
- UNICODE "nW"
- UNICODE "mW"
- UNICODE "kW"
- UNICODE "MW"
- UNICODE "Bq"
- UNICODE "cc"
- UNICODE "cd"
- UNICODE "dB"
- UNICODE "Gy"
- UNICODE "ha"
- UNICODE "HP"
- UNICODE "in"
- UNICODE "KK"
- UNICODE "KM"
- UNICODE "kt"
- UNICODE "lm"
- UNICODE "PR"
- UNICODE "PH"
- UNICODE "mb"
- UNICODE "lx"
- UNICODE "ln"
- UNICODE "sr"
- UNICODE "fl"
- UNICODE "fi"
- UNICODE "ff"
- UNICODE "Wb"
- UNICODE "Sv"
- UNICODE "ffi"
- UNICODE "ffl"
- UNICODE "st"
- UNICODE "MACCP"
- UNICODE "MUI"
- UNICODE "Strings"
- UNICODE "Software\Classes\Local Settings\ImmutableMuiCache"
- UNICODE "%x"
- UNICODE "Software\Classes\Local Settings\MuiCache"
- UNICODE "\Registry\Machine\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings"
- UNICODE "StringCacheGeneration"
- UNICODE "\Globalization\"
- UNICODE "\Globalization\"
- UNICODE "\Nls\Calendars\Japanese\Eras"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE " with value "
- UNICODE "\Nls\Calendars\Japanese\Eras"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "%s%s%s"
- UNICODE " with value "
- ASCII "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
- UNICODE "PreventGeoIdChange"
- UNICODE "Nation"
- UNICODE "Region"
- UNICODE "Control Panel\International\Geo"
- UNICODE "PreventGeoIdChange"
- UNICODE "\\.\MountPointManager"
- UNICODE "\DosDevices\"
- UNICODE "\\.\MountPointManager"
- UNICODE "\DosDevices\"
- UNICODE "\\.\MountPointManager"
- ASCII "attach"
- ASCII "broker"
- UNICODE "\Reference"
- UNICODE "\Device\ConDrv\ScreenBuffer"
- UNICODE "\Device\ConDrv\ScreenBuffer"
- UNICODE "locker.exe"
- UNICODE "locker.exe"
- ASCII "::$DATA"
- ASCII "%APPDATA%"
- ASCII "%USERPROFILE%"
- ASCII "%ALLUSERSPROFILE%"
- ASCII "%ProgramFiles%"
- ASCII "%SystemRoot%"
- ASCII "%SystemDrive%"
- ASCII "\\%COMPUTERNAME%"
- ASCII "%ALLUSERSPROFILE%"
- ASCII "\\%COMPUTERNAME%"
- ASCII ".exe"
- ASCII "..\"
- ASCII ".."
- ASCII ":/\"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server"
- UNICODE "RegistryExtensionFlags"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server"
- UNICODE "RegistryExtensionFlags"
- UNICODE "CommitStateAtom"
- UNICODE "CommitStateAtom"
- UNICODE "GetRoamingLastObservedChangeTime"
- UNICODE "GetRoamingLastObservedChangeTime"
- UNICODE "GetStateContainerDepth"
- UNICODE "GetStateContainerDepth"
- UNICODE "GetStateVersion"
- UNICODE "GetStateVersion"
- UNICODE "OverrideRoamingDataModificationTimesInRange"
- UNICODE "OverrideRoamingDataModificationTimesInRange"
- UNICODE "PublishStateChangeNotification"
- UNICODE "PublishStateChangeNotification"
- UNICODE "ResetState"
- UNICODE "ResetState"
- UNICODE "SetStateVersion"
- UNICODE "SetStateVersion"
- UNICODE "<null>"
- UNICODE "LastChange"
- UNICODE "Version"
- UNICODE "StateSpace::GetStateVersion"
- UNICODE "StateSpace::GetStateVersion"
- UNICODE "Version"
- UNICODE "Version"
- UNICODE "StateSpace::SetStateVersion"
- UNICODE "StateSpace::SetStateVersion"
- UNICODE "RoamingTimestampFixer::FixStructuredRoamingTimestamps"
- UNICODE "RoamingTimestampFixer::FixStructuredRoamingTimestamps"
- UNICODE "RoamingTimestampFixer::FixUnstructuredRoamingTimestamps"
- UNICODE "RoamingTimestampFixer::FixUnstructuredRoamingTimestamps"
- UNICODE "<String too big>"
- UNICODE "<String too big>"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\%s\%s"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\%s\%s"
- UNICODE "InstallTime"
- UNICODE "InstallTime"
- UNICODE "neutral"
- UNICODE "x64"
- UNICODE "arm"
- UNICODE "x86"
- UNICODE "DisplayName"
- UNICODE "Moniker"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Mappings"
- UNICODE "\*"
- UNICODE "0123456789abcdefghjkmnpqrstvwxyz"
- UNICODE "ApplicationContentUris"
- UNICODE "ApplicationContentUris"
- UNICODE "PackageRootFolder"
- UNICODE "Applications"
- UNICODE "DisplayName"
- UNICODE "DefaultStartPage"
- UNICODE "ApplicationLogo"
- UNICODE "Applications"
- UNICODE "ApplicationLogo"
- UNICODE "DefaultStartPage"
- UNICODE "OSMinVersion"
- UNICODE "OSMinVersion"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
- UNICODE "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
- UNICODE "<NULL>"
- UNICODE "(null)"
- ASCII "DelayLoadFailureHook"
- ASCII "DelayLoadFailureHook"
- UNICODE "api-ms-win-core-delayload-l1-1-0.dll"
- UNICODE "\\.\MountPointManager"
- ASCII "kLsE"
- UNICODE "DNSAPI.DLL"
- ASCII "DnsValidateName_W"
- UNICODE "NV Hostname"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"
- UNICODE "ComputerName"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName"
- UNICODE "Classes\"
- UNICODE "Software\Classes\"
- UNICODE "\Registry\Machine\Software"
- UNICODE "\Registry\Machine"
- UNICODE "Classes\"
- UNICODE "Software\Classes\"
- ASCII "ext-ms-win-advapi32-registry-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-appcompat-l1-1-0.dll"
- ASCII "ext-ms-win-ntuser-string-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-file-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-datetime-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-quirks-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-sidebyside-l1-1-0.dll"
- ASCII "ext-ms-win-mrmcorer-resmanager-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-windowserrorreporting-l1-1-0.dll"
- ASCII "ext-ms-win-gpapi-grouppolicy-l1-1-0.dll"
- ASCII "ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0.dll"
- ASCII "ext-ms-win-shell32-shellcom-l1-1-0.dll"
- ASCII "ext-ms-win-shell32-shellfolders-l1-1-0.dll"
- ASCII "ext-ms-win-advapi32-ntmarta-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-errorhandling-l1-1-0.dll"
- ASCII "ext-ms-win-kernel32-registry-l1-1-0.dll"
- ASCII "ext-ms-win-kernelbase-processthread-l1-1-0.dll"
- ASCII "ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0.dll"
- ASCII "BaseRegGetVersion"
- ASCII "BaseRegDeleteKeyEx"
- ASCII "BaseRegDeleteValue"
- ASCII "RemoteRegEnumKeyWrapper"
- ASCII "RemoteRegEnumValueWrapper"
- ASCII "SafeBaseRegGetKeySecurity"
- ASCII "BaseRegSetKeySecurity"
- ASCII "MIDL_user_free_Ext"
- ASCII "RemoteRegQueryInfoKeyWrapper"
- ASCII "RemoteRegQueryValueWrapper"
- ASCII "BaseRegSaveKeyEx"
- ASCII "BaseRegRestoreKey"
- ASCII "PerfRegQueryValue"
- ASCII "PerfRegQueryInfoKey"
- ASCII "PerfRegEnumValue"
- ASCII "BaseRegUnLoadKey"
- ASCII "BaseRegCreateKey"
- ASCII "BaseCleanupAppcompatCacheSupportWorker"
- ASCII "BaseDumpAppcompatCacheWorker"
- ASCII "BaseCheckAppcompatCacheWorker"
- ASCII "BaseCheckAppcompatCacheExWorker"
- ASCII "BaseFreeAppCompatDataForProcessWorker"
- ASCII "BaseFlushAppcompatCacheWorker"
- ASCII "BaseIsAppcompatInfrastructureDisabledWorker"
- ASCII "BaseUpdateAppcompatCacheWorker"
- ASCII "BaseInitAppcompatCacheSupportWorker"
- ASCII "BaseReadAppCompatDataForProcessWorker"
- ASCII "CheckDBCSEnabledExt"
- ASCII "BasepGetComputerNameFromNtPath"
- ASCII "BasepSetFileEncryptionCompression"
- ASCII "DuplicateEncryptionInfoFileExt"
- ASCII "GetEncryptedFileVersionExt"
- ASCII "SetVolumeMountPointWStub"
- ASCII "BasepCopyEncryption"
- ASCII "GetDateFormatAWorker"
- ASCII "GetTimeFormatAWorker"
- ASCII "GetDateFormatWWorker"
- ASCII "GetTimeFormatWWorker"
- ASCII "QuirkIsEnabled3Worker"
- ASCII "QuirkIsEnabledWorker"
- ASCII "QuirkGetData2Worker"
- ASCII "QuirkIsEnabledForPackage2Worker"
- ASCII "QuirkIsEnabledForProcessWorker"
- ASCII "QuirkIsEnabled2Worker"
- ASCII "QuirkGetDataWorker"
- ASCII "QuirkIsEnabledForPackageWorker"
- ASCII "AddRefActCtxWorker"
- ASCII "ActivateActCtxWorker"
- ASCII "ZombifyActCtxWorker"
- ASCII "DeactivateActCtxWorker"
- ASCII "FindActCtxSectionStringWWorker"
- ASCII "ReleaseActCtxWorker"
- ASCII "GetCurrentActCtxWorker"
- ASCII "QueryActCtxWWorker"
- ASCII "CreateActCtxWWorker"
- ASCII "FindActCtxSectionGuidWorker"
- ASCII "QueryActCtxSettingsWWorker"
- ASCII "ResourceManagerQueueGetString"
- ASCII "ResourceManagerQueueIsResourceReference"
- ASCII "WerUnregisterRuntimeExceptionModuleWorker"
- ASCII "WerRegisterFileWorker"
- ASCII "WerUnregisterFileWorker"
- ASCII "WerUnregisterMemoryBlockWorker"
- ASCII "GetApplicationRestartSettingsWorker"
- ASCII "WerRegisterRuntimeExceptionModuleWorker"
- ASCII "GetApplicationRecoveryCallbackWorker"
- ASCII "WerpNotifyUseStringResourceWorker"
- ASCII "WerpNotifyLoadStringResourceWorker"
- ASCII "WerRegisterMemoryBlockWorker"
- ASCII "LeaveCriticalPolicySectionInternalWorker"
- ASCII "RefreshPolicyExInternalWorker"
- ASCII "GetAppliedGPOListInternalWWorker"
- ASCII "GetGPOListInternalWWorker"
- ASCII "GetNextFgPolicyRefreshInfoInternalWorker"
- ASCII "UnregisterGPNotificationInternalWorker"
- ASCII "RefreshPolicyInternalWorker"
- ASCII "RegisterGPNotificationInternalWorker"
- ASCII "AreThereVisibleShutdownScriptsInternalWorker"
- ASCII "GetAppliedGPOListInternalAWorker"
- ASCII "IsSyncForegroundPolicyRefreshWorker"
- ASCII "WaitForUserPolicyForegroundProcessingInternalWorker"
- ASCII "EnterCriticalPolicySectionInternalWorker"
- ASCII "FreeGPOListInternalAWorker"
- ASCII "GenerateGPNotificationInternalWorker"
- ASCII "WaitForMachinePolicyForegroundProcessingInternalWorker"
- ASCII "AreThereVisibleLogoffScriptsInternalWorker"
- ASCII "ForceSyncFgPolicyInternalWorker"
- ASCII "GetPreviousFgPolicyRefreshInfoInternalWorker"
- ASCII "HasPolicyForegroundProcessingCompletedInternalWorker"
- ASCII "GetGPOListInternalAWorker"
- ASCII "FreeGPOListInternalWWorker"
- ASCII "RsopLoggingEnabledInternalWorker"
- ASCII "DsFreeNameResultWWorker"
- ASCII "DsBindWithSpnExWWorker"
- ASCII "DsGetDomainControllerInfoWWorker"
- ASCII "DsFreePasswordCredentialsWorker"
- ASCII "DsMakePasswordCredentialsWWorker"
- ASCII "DsFreeDomainControllerInfoWWorker"
- ASCII "DsCrackNamesWWorker"
- ASCII "SHCoCreateInstanceWorker"
- ASCII "SHGetSpecialFolderPathAWorker"
- ASCII "SHCreateDirectoryExWWorker"
- ASCII "SHGetFileInfoWWorker"
- ASCII "SHGetSpecialFolderPathWWorker"
- ASCII "SHGetDesktopFolderWorker"
- ASCII "SHGetFolderPathAndSubDirWWorker"
- ASCII "SHGetFolderPathWWorker"
- ASCII "SHGetFolderLocationWorker"
- ASCII "SHGetFolderPathAWorker"
- ASCII "PathCleanupSpecWorker"
- ASCII "SHGetInstanceExplorerWorker"
- ASCII "SHSetKnownFolderPathWorker"
- ASCII "SHGetKnownFolderPathWorker"
- ASCII "WerpLaunchAeDebug"
- ASCII "CheckForReadOnlyResourceFilter"
- ASCII "BasepReportFault"
- ASCII "TermsrvOpenRegEntry"
- ASCII "TermsrvGetWindowsDirectoryA"
- ASCII "TermsrvGetWindowsDirectoryW"
- ASCII "TermsrvOpenUserClasses"
- ASCII "TermsrvCreateRegEntry"
- ASCII "TermsrvDeleteKey"
- ASCII "TermsrvDeleteValue"
- ASCII "TermsrvSetKeySecurity"
- ASCII "TermsrvRestoreKey"
- ASCII "TermsrvSetValueKey"
- ASCII "BasepNotifyLoadStringResource"
- ASCII "TermsrvGetPreSetValue"
- ASCII "BaseDestroyVDMEnvironment"
- ASCII "BasepFreeAppCompatData"
- ASCII "BasepReleaseAppXContext"
- ASCII "BasepQueryAppCompat"
- ASCII "BasepAppContainerEnvironmentExtension"
- ASCII "BasepReleaseSxsCreateProcessUtilityStruct"
- ASCII "BasepPostSuccessAppXExtension"
- ASCII "BaseElevationPostProcessing"
- ASCII "BasepGetAppCompatData"
- ASCII "BaseWriteErrorElevationRequiredEvent"
- ASCII "BaseCheckElevation"
- ASCII "BasepConstructSxsCreateProcessMessage"
- ASCII "BaseUpdateVDMEntry"
- ASCII "BasepIsProcessAllowed"
- ASCII "BasepCheckWebBladeHashes"
- ASCII "BasepAppXExtension"
- ASCII "BasepProcessInvalidImage"
- ASCII "BasepCheckWinSaferRestrictions"
- ASCII "BaseIsDosApplication"
- ASCII "AppxValidatePackages"
- [/CODE]
- MALWARE.exe
- [CODE]
- Search - Text strings referenced in ntdll
- Comments
- ASCII "Invalid parameter passed to C runtime function.
- "
- ASCII "sin"
- ASCII "_y0"
- UNICODE "\/"
- UNICODE "csrsrv.dll"
- ASCII "CsrCallServerFromServer"
- ASCII "CsrCallServerFromServer"
- UNICODE "csrsrv.dll"
- UNICODE "LPT"
- UNICODE "COM"
- UNICODE "PRN"
- UNICODE "AUX"
- UNICODE "NUL"
- UNICODE "CON"
- UNICODE "CONOUT$"
- UNICODE "\??\UNC\"
- UNICODE "\\?"
- UNICODE "\\?\UNC"
- UNICODE "\\?\UNC\"
- UNICODE "COM"
- UNICODE "\\?"
- UNICODE "NUL"
- UNICODE "\\.\"
- UNICODE "CON"
- UNICODE "PRN"
- UNICODE "CONOUT$"
- UNICODE "\\?\"
- UNICODE "LPT"
- UNICODE "\??\"
- UNICODE "\??\UNC\"
- UNICODE "AUX"
- UNICODE "\\?\UNC\"
- UNICODE "CONIN$"
- UNICODE "\\?\UNC"
- UNICODE "__APPDIR__"
- UNICODE "FIRMWARE_TYPE"
- UNICODE "NUMBER_OF_PROCESSORS"
- UNICODE "__CD__"
- UNICODE "__APPDIR__"
- UNICODE "FIRMWARE_TYPE"
- UNICODE "NUMBER_OF_PROCESSORS"
- ASCII "ERROR"
- ASCII "WARNING"
- ASCII "INFO"
- ASCII "ENTER"
- ASCII "RETURN"
- ASCII "_CorExeMain"
- UNICODE "MSCOREE.DLL"
- ASCII "_CorExeMain"
- UNICODE "COMPLUS_InstallRoot"
- UNICODE "MSCOREE.DLL"
- UNICODE "ntdll.dll"
- ASCII "BaseThreadInitThunk"
- ASCII "TermsrvGetWindowsDirectoryW"
- UNICODE "\KnownDlls"
- UNICODE "KnownDllPath"
- UNICODE "ntdll.dll"
- UNICODE "TransparentEnabled"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Srp\GP\DLL"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- UNICODE ".DLL"
- UNICODE "\SYSTEM32\"
- UNICODE "KERNEL32.DLL"
- UNICODE "KERNELBASE.dll"
- UNICODE "KERNEL32.DLL"
- UNICODE "KERNELBASE.dll"
- UNICODE "\SYSTEM32\"
- ASCII "Actx "
- UNICODE "NoDefaultCurrentDirectoryInExePath"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"
- UNICODE "SafeProcessSearchMode"
- UNICODE "SafeDllSearchMode"
- UNICODE "."
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"
- ASCII "0123456789ABCDEF"
- ASCII "A!B!C!D!E!F!G!H!I!2"
- UNICODE "\Registry\MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CustomLocale"
- UNICODE "Kernel-ProductInfo"
- UNICODE "Kernel-ProductInfoLegacyMapping"
- UNICODE "Kernel-ProductInfo"
- UNICODE "Kernel-ProductInfoLegacyMapping"
- UNICODE "WIN://SYSAPPID"
- UNICODE "WIN://PKG"
- UNICODE " "$&(*,.02468:<>@"
- UNICODE "xmc^TPKGC?"
- UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion"
- UNICODE "\Registry\Machine\Hardware\DeviceMap"
- UNICODE "\Registry\User\.Default"
- UNICODE "DaylightBias"
- UNICODE "DaylightName"
- UNICODE "StandardBias"
- UNICODE "Time Zones\"
- UNICODE "\Dynamic DST"
- UNICODE "FirstEntry"
- UNICODE "StandardName"
- UNICODE "DaylightStart"
- UNICODE "LastEntry"
- UNICODE "StandardStart"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Services"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion"
- UNICODE "\Registry\Machine\Hardware\DeviceMap"
- UNICODE "\Registry\User\.Default"
- UNICODE "\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0"
- UNICODE "Cleanup Group"
- UNICODE "Alpc"
- UNICODE "Pool"
- UNICODE "Timer"
- UNICODE "Timer Queue"
- UNICODE "Waiter TCB"
- UNICODE "Wait"
- UNICODE "Threadpool!"
- UNICODE "windows vista"
- UNICODE "windows seven"
- UNICODE "windows eight"
- UNICODE "windows blue"
- UNICODE "windows vista"
- UNICODE "windows seven"
- UNICODE "windows eight"
- UNICODE "windows blue"
- UNICODE "\rescache"
- UNICODE "%SystemRoot%"
- UNICODE "\Registry\Machine\"
- UNICODE "System\CurrentControlSet\Control\CMF\Config"
- UNICODE "\\"
- UNICODE "COMPLUS_Version"
- UNICODE "_NO_DEBUG_HEAP"
- UNICODE "LargePageDLLs"
- UNICODE "BreakOnInitializeProcessFailure"
- UNICODE "KeepActivationContextsAlive"
- UNICODE "TrackActivationContextReleases"
- UNICODE "ADVAPI32.DLL"
- UNICODE "CheckAllProcessMachinePolicyEnabled"
- ASCII "SaferiIsDllAllowed"
- UNICODE "OptionValue"
- UNICODE "verifier.dll"
- UNICODE "vrfcore.dll"
- ASCII "AVrfAPILookupCallback"
- ASCII "AVrfAPILookupCallback"
- UNICODE "\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "vrfcore.dll"
- UNICODE "verifier.dll"
- UNICODE "Location"
- UNICODE "Location"
- UNICODE "FindResource API entry"
- UNICODE "FindResourceEx API entry"
- UNICODE "LoadResource API entry"
- UNICODE "FindResource API exit"
- UNICODE "FindResourceEx API exit"
- UNICODE "LoadResource API exit"
- UNICODE "FindResourceEx API exit"
- UNICODE "LoadResource API entry"
- UNICODE "LoadResource API exit"
- UNICODE "FindResource API entry"
- UNICODE "FindResourceEx API entry"
- UNICODE "FindResource API exit"
- ASCII "Crc32 Castagnoli"
- ASCII "Crc32 Castagnoli"
- ASCII "Crc64 ReFS-v1"
- UNICODE "LocaleName"
- UNICODE "Control Panel\International"
- ASCII "VirtualMemoryThreshold"
- ASCII "DeCommitFreeBlockThreshold"
- ASCII "DeCommitTotalFreeThreshold"
- ASCII "MaximumAllocationSize"
- ASCII "ProcessHeapsListIndex"
- ASCII "HeaderValidateLength"
- ASCII "HeaderValidateCopy"
- ASCII "NextAvailableTagIndex"
- ASCII "MaximumTagIndex"
- ASCII "VirtualAllocdBlocks"
- ASCII "SegmentList"
- ASCII "AllocatorBackTraceIndex"
- ASCII "NonDedicatedListLength"
- ASCII "PseudoTagEntries"
- ASCII "FrontHeapLockCount"
- ASCII "FrontEndHeapType"
- ASCII "Uncommitted Ranges"
- ASCII "Entry"
- ASCII "Signature"
- ASCII "Flags"
- ASCII "ForceFlags"
- ASCII "VirtualMemoryThreshold"
- ASCII "SegmentReserve"
- ASCII "SegmentCommit"
- ASCII "DeCommitFreeBlockThreshold"
- ASCII "DeCommitTotalFreeThreshold"
- ASCII "TotalFreeSize"
- ASCII "MaximumAllocationSize"
- ASCII "ProcessHeapsListIndex"
- ASCII "HeaderValidateLength"
- ASCII "HeaderValidateCopy"
- ASCII "NextAvailableTagIndex"
- ASCII "MaximumTagIndex"
- ASCII "TagEntries"
- ASCII "AlignRound"
- ASCII "AlignMask"
- ASCII "VirtualAllocdBlocks"
- ASCII "SegmentList"
- ASCII "AllocatorBackTraceIndex"
- ASCII "NonDedicatedListLength"
- ASCII "PseudoTagEntries"
- ASCII "FreeLists"
- ASCII "LockVariable"
- ASCII "FrontEndHeap"
- ASCII "FrontHeapLockCount"
- ASCII "FrontEndHeapType"
- ASCII "Uncommitted Ranges"
- UNICODE "TimeZoneKeyName"
- UNICODE "DynamicDaylightTimeDisabled"
- UNICODE "BuildLabEx"
- UNICODE "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
- ASCII "ThreadPool: callback %p(%p) returned with a transaction uncleared
- "
- ASCII "ThreadPool: callback %p(%p) returned with the loader lock held
- "
- ASCII "ThreadPool: callback %p(%p) returned with preferred languages set
- "
- ASCII "ThreadPool: callback %p(%p) returned with background priorities set
- "
- ASCII "ThreadPool: attempt to terminate a worker thread via handle %p
- Contact the owner of the function calling Terminate/Exit thread.
- "
- ASCII "*** RESCACHE: Segment %u is no longer valid. It may have been unmapped already!!! ***
- "
- ASCII "*** --------> Follow-up: avgarcia;erik;muidev ***
- "
- ASCII "*** RESCACHE: Segment %u magic field is corrupt!!! ***
- "
- UNICODE "*.*"
- UNICODE "Restricted"
- UNICODE "Restricted"
- UNICODE "System\CurrentControlSet\Control\CMF\LatestIndex"
- UNICODE "CON"
- UNICODE "CONOUT$"
- UNICODE "CONIN$"
- UNICODE "Global\%s/base%s"
- UNICODE "%s\*\%s"
- UNICODE "%s\%s*%s"
- UNICODE "Global\%s%s%s"
- UNICODE "%s\"
- UNICODE "%s\%s\%s"
- UNICODE "%s\%s%04d"
- UNICODE "Global\%s/%s%04d%s"
- UNICODE "%s\%s%04d\%s"
- UNICODE "%s%04d-%s"
- UNICODE "%s%04d-%s%s"
- UNICODE "%s\%s%04d%s"
- UNICODE "%s\%s%d%s"
- UNICODE "%s%s%d%s"
- UNICODE "%s\%s%04d\%s*%s"
- UNICODE "%s\%s%04d\%s%d%s"
- UNICODE "tmp"
- UNICODE "upd"
- UNICODE "Upd"
- UNICODE "wip"
- UNICODE "ResCache.usg"
- UNICODE "CmfHits"
- UNICODE "ResCache.hit"
- UNICODE "Segment"
- UNICODE "Directory"
- UNICODE "ResCache.dir"
- UNICODE "ResCache.mni"
- UNICODE "ResCache.ccm"
- UNICODE "\WindowsErrorReportingServicePort"
- UNICODE "\KernelObjects\SystemErrorPortReady"
- ASCII "::"
- ASCII "%x"
- UNICODE "MiniNT"
- UNICODE "PortableOperatingSystem"
- UNICODE "TimeZoneInformation"
- UNICODE "Bias"
- UNICODE "StandardName"
- UNICODE "StandardBias"
- UNICODE "StandardStart"
- UNICODE "DaylightName"
- UNICODE "DaylightBias"
- UNICODE "DaylightStart"
- UNICODE "Time Zones\"
- UNICODE "\Dynamic DST"
- UNICODE "FirstEntry"
- UNICODE "LastEntry"
- UNICODE "System\CurrentControlSet\Control\CMF\Config"
- UNICODE "System\CurrentControlSet\Control\CMF\Config"
- UNICODE "\Registry\Machine\"
- UNICODE "\rescache"
- UNICODE "%SystemRoot%"
- UNICODE "svchost.exe"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledProcesses\"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "CEIPEnable"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore"
- UNICODE "SampledOut"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows"
- UNICODE "StudyId"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects\"
- UNICODE "AppContainerNamedObjects\"
- UNICODE "ASqmManifestVersion"
- UNICODE "(null)"
- UNICODE "AdaptiveSqmNameSpaceBoundary"
- UNICODE "DPS"
- ASCII "%d"
- ASCII "%d"
- UNICODE "xn--"
- UNICODE "xl--"
- ASCII "LdrLoadDll"
- ASCII "EXT-"
- UNICODE "\REGISTRY\USER\"
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- UNICODE "S-1-"
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- ASCII "*** CreateLanguageList:%X ****
- "
- ASCII "SXS/RTL: Section found (offset %ld; length %lu) extends past end of activation context data (%lu bytes)
- "
- UNICODE "API-"
- UNICODE "EXT-"
- UNICODE "MUI"
- UNICODE "MUI"
- UNICODE ".mui"
- UNICODE ".mui"
- ASCII "Actx "
- UNICODE "LdrResFallbackLangList Enter"
- UNICODE "LdrResFallbackLangList Exit"
- UNICODE "RtlpResUltimateFallbackInfo Enter"
- UNICODE "MUI"
- UNICODE "LdrResGetRCConfig Enter"
- UNICODE "LdrResGetRCConfig Exit"
- UNICODE "LdrResSearchResource Enter"
- UNICODE "LdrResSearchResource Exit"
- UNICODE "LdrpResSearchResourceMappedFile Enter"
- UNICODE "LdrpResSearchResourceMappedFile Exit"
- UNICODE "MUI"
- UNICODE "LdrpResGetResourceDirectory Enter"
- UNICODE "LdrpResGetResourceDirectory Exit"
- UNICODE "LdrpResSearchResourceInsideDirectory Enter"
- UNICODE "LdrpResSearchResourceInsideDirectory Exit"
- UNICODE "LdrpResGetMappingSize Enter"
- UNICODE "LdrpResGetMappingSize Exit"
- UNICODE "SharedSection"
- UNICODE "ApiPort"
- UNICODE "CAPTURE"
- UNICODE "CSRPORT!"
- UNICODE "Control Panel\Desktop\MuiCached\MachineLanguageConfiguration"
- UNICODE "Software\Policies\Microsoft\Control Panel\Desktop"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "Software\Policies\Microsoft\Control Panel\Desktop"
- UNICODE "Control Panel\Desktop\LanguageConfiguration"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "Control Panel\Desktop"
- UNICODE "PreferredUILanguages"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "PreferredUILanguagesPending"
- UNICODE "\Registry\User\.Default"
- UNICODE ".mui"
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to get activation context data, storage map and assembly roster header. Status = 0x%08lx
- "
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to resolve storage map entry. Status = 0x%08lx
- "
- UNICODE ".Local\"
- UNICODE "\WinSxS\"
- UNICODE ".Local"
- ASCII "Actx "
- ASCII "SXS: Activation context data at %p has TOC header too small (%lu)
- "
- ASCII "SXS: Activation context data at %p has invalid assembly roster offset
- "
- ASCII "SXS: Activation context data at %p has invalid TOC entry array offset
- "
- ASCII "SXS: Activation context data at %p has invalid TOC header offset
- "
- ASCII "SXS: Warning: Activation context data at %p lacks assembly roster
- "
- UNICODE "MUI"
- UNICODE "\SYSTEM32\"
- UNICODE "PATH"
- UNICODE "PATH"
- UNICODE "NoDefaultCurrentDirectoryInExePath"
- UNICODE "%s"
- UNICODE "%%%u"
- UNICODE "%s"
- UNICODE "hs"
- UNICODE "]:%u"
- UNICODE "%%%u"
- UNICODE "%x"
- UNICODE "::"
- ASCII "ffff:"
- UNICODE "::%hs%u.%u.%u.%u"
- UNICODE ":%u.%u.%u.%u"
- UNICODE "%u"
- UNICODE "%wZ"
- UNICODE "%wZ"
- UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
- UNICODE "VS_VERSION_INFO"
- ASCII "RtlValidateHeap"
- ASCII "RtlValidateHeap"
- UNICODE ":%u"
- UNICODE "%u.%u.%u.%u"
- ASCII "CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions
- "
- UNICODE "ExecuteOptions"
- UNICODE "\DllNXOptions"
- UNICODE "UseFilter"
- ASCII "SE_InitializeEngine"
- ASCII "SE_ShimDllLoaded"
- ASCII "SE_InstallBeforeInit"
- ASCII "SE_InstallAfterInit"
- ASCII "SE_DllLoaded"
- ASCII "SE_DllUnloaded"
- ASCII "SE_LdrEntryRemoved"
- ASCII "SE_ProcessDying"
- ASCII "SE_LdrResolveDllName"
- ASCII "SE_GetProcAddressForCaller"
- ASCII "ApphelpCheckModule"
- UNICODE "Unknown"
- UNICODE "Unknown"
- UNICODE "GetExitCodeProcessW"
- UNICODE "\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- UNICODE "Cleanup Group"
- UNICODE "Threadpool!"
- UNICODE "http://schemas.microsoft.com/SMI/2005/WindowsSettings"
- ASCII ".aspack"
- ASCII ".pcle"
- ASCII ".sforce"
- UNICODE "COMPLUS_InstallRoot"
- UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
- ASCII "secserv.dll"
- ASCII "%u.%u.%u.%u"
- UNICODE "\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0"
- UNICODE "~MHz"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "GlobalFlag"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "\SystemRoot\bootstat.dat"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "WSqmConsLastRunTime"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\SysprepPerformed\"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\"
- UNICODE "System Volume Information"
- UNICODE "xn--"
- UNICODE "xl--"
- UNICODE "Log"
- UNICODE "\SmApiPort"
- UNICODE "RXACT"
- UNICODE "Log"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\CMF\SQMData\BootLanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- ASCII "User32 init not called"
- ASCII "Invalid parameter passed to C runtime function.
- "
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "(null)"
- ASCII "(null)"
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "pow"
- ASCII "exp"
- ASCII "exp"
- ASCII "log10"
- ASCII "log10"
- ASCII "log"
- ASCII "log"
- ASCII "pow"
- ASCII "asin"
- ASCII "acos"
- ASCII "pow"
- ASCII "pow"
- ASCII "exp10"
- ASCII "log"
- ASCII "log10"
- ASCII "exp"
- ASCII "atan"
- ASCII "ceil"
- ASCII "floor"
- ASCII "modf"
- ASCII "sin"
- ASCII "cos"
- ASCII "tan"
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "(null)"
- ASCII "(null)"
- ASCII "(null)"
- UNICODE "(null)"
- ASCII "User32 init not called"
- UNICODE "SharedSection"
- UNICODE "ApiPort"
- UNICODE "CSRPORT!"
- UNICODE "TrustedInstaller"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList\%ws"
- UNICODE "BinaryName"
- UNICODE "BinaryHash"
- ASCII "secserv.dll"
- ASCII ".txt2"
- ASCII ".aspack"
- ASCII ".pcle"
- ASCII ".sforce"
- ASCII "Set 0x%X protection for %p section for %d bytes, old protection 0x%X
- "
- ASCII "CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X
- "
- UNICODE "\DllNXOptions"
- ASCII "CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions
- "
- UNICODE "ExecuteOptions"
- ASCII "CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database
- "
- UNICODE "Execute=1"
- ASCII "CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ
- "
- ASCII "CLIENT(ntdll): Processing %ws for patching section protection for %wZ
- "
- ASCII "CLIENT(ntdll): Processing section info %ws...
- "
- UNICODE "Legacy"
- UNICODE "UEFI"
- ASCII "%04x:%04x @ %08d - %s - %s: "
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Nonpackaged process attempted to load a packaged DLL.
- "
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpLoadDll"
- ASCII "DLL %wZ was redirected to %wZ by SxS
- "
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "Loading DLL %wZ
- "
- ASCII "Could not validate the crypto signature for DLL %wZ
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "DLL name %wZ was redirected to %wZ by SxS
- "
- ASCII "Locating DLL %wZ
- "
- ASCII "LdrVerifyImageMatchesChecksumEx"
- ASCII "LdrpProtectedCopyMemory"
- ASCII "LdrLockLoaderLock"
- ASCII "LdrUnlockLoaderLock"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\"
- ASCII "Unknown"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in "%wZ" 0x%08lx
- "
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "minkernel\ntdll\ldrdload.c"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in module 0x%p 0x%08lx
- "
- ASCII "LdrpFindOrMapDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "LdrpFindLoadedDll"
- ASCII "LdrpFindKnownDll"
- ASCII "LdrpResolveDllName"
- ASCII "LdrpMapViewOfSection"
- ASCII "Querying large page info failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "Changing the protection of the executable at %p failed with status 0x%08lx
- "
- ASCII "LdrpRelocateImage"
- ASCII "BoG_ *90.0&!! Yy>"
- ASCII "stxt371"
- ASCII "Delaying execution failed with status 0x%08lx
- "
- ASCII "_LdrpInitialize"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization failed with status 0x%08lx
- "
- ASCII "LdrpInitializationFailure"
- ASCII "Process initialization raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpInitializeProcessWrapperFilter"
- ASCII "SE_InitializeEngine"
- ASCII "SE_ShimDllLoaded"
- ASCII "SE_InstallBeforeInit"
- ASCII "SE_InstallAfterInit"
- ASCII "SE_LdrEntryRemoved"
- ASCII "SE_ProcessDying"
- ASCII "SE_LdrResolveDllName"
- ASCII "SE_GetProcAddressForCaller"
- ASCII "ApphelpCheckModule"
- ASCII "Could not locate procedure "%s" in the shim engine DLL
- "
- ASCII "LdrpGetShimEngineInterface"
- ASCII "Loading the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpLoadShimEngine"
- ASCII "Initializing the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "Initializing a shim dependency "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeShimDllDependencies"
- ASCII "Loading the shim engine DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitShimEngine"
- ASCII "Getting the shim engine exports failed with status 0x%08lx
- "
- ASCII "Finding the shim engine entry failed with status 0x%08lx
- "
- ASCII "LdrInitShimEngineDynamic"
- ASCII "Failed to allocated memory for shimmed module list
- "
- ASCII "LdrpCheckModule"
- UNICODE "\system32\apphelp.dll"
- ASCII "LdrpGetProcApphelpCheckModule"
- ASCII "Getting ApphelpCheckModule failed with status 0x%08lx
- "
- ASCII "LdrpDynamicShimModule"
- ASCII "Failed to reallocate the system dirs string !
- "
- ASCII "LdrpInitializePerUserWindowsDirectory"
- ASCII "TermsrvGetWindowsDirectoryW"
- ASCII "BaseThreadInitThunk"
- UNICODE "\KnownDlls"
- UNICODE "KnownDllPath"
- ASCII "BaseQueryModuleData"
- ASCII "Initializing the execution options for the process %lx failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Initializing process 0x%lx
- "
- UNICODE "StackTraceDatabaseSizeInMb"
- ASCII "Stack trace database size is %Id Mb
- "
- ASCII "Creating the process heap failed
- "
- UNICODE "!Process"
- UNICODE "CSRSS Client"
- UNICODE "LDR Database"
- UNICODE "Current Directory"
- UNICODE "TLS Storage"
- UNICODE "DBGSS Client"
- UNICODE "SE Temporary"
- UNICODE "Temporary"
- UNICODE "LocalAtom"
- UNICODE "ServiceTag"
- UNICODE "ForwarderTag"
- UNICODE "NTDLL!"
- UNICODE "DebugProcessHeapOnly"
- ASCII "Querying the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "Opening the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "Allocating a buffer to hold the current working directory failed
- "
- ASCII "Failed to allocate the system dirs string!
- "
- UNICODE "\system;"
- ASCII "Allocating a data table entry for the system DLL failed
- "
- ASCII "Allocating a data table entry for the executable failed
- "
- ASCII "Beginning execution of %wZ (%wZ)
- Current directory: %wZ
- Package directories: %wZ
- "
- ASCII "Initializing the current directory to "%wZ" failed with status 0x%08lx
- "
- ASCII "Allocating a data table entry for the application verifier DLL failed
- "
- ASCII "Initializing TLS slots failed with status 0x%08lx
- "
- ASCII "Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpCodeAuthzInitialize failed with status 0x%08lx
- "
- ASCII "Walking the import tables of the executable and its static imports failed with status 0x%08lx
- "
- ASCII "Running the init routines of the executable's static imports failed with status 0x%08lx
- "
- ASCII "Process 0x%x (%wZ) exiting
- "
- ASCII "LdrShutdownProcess"
- UNICODE "SPPsvc.exe"
- UNICODE "PageHeapFlags"
- ASCII "Per-DLL page heap is disabled since fast fill heap is enabled
- "
- ASCII "LdrpInitializeApplicationVerifierPackage"
- ASCII "LdrpTouchThreadStack"
- UNICODE "%s!%s"
- UNICODE "DisableHeapLookaside"
- UNICODE "FrontEndHeapDebugOptions"
- UNICODE "ShutdownFlags"
- UNICODE "UnloadEventTraceDepth"
- UNICODE "TracingFlags"
- UNICODE "DisableExceptionChainValidation"
- UNICODE "LargePageDLLs"
- UNICODE "MinimumStackCommitInBytes"
- UNICODE "BreakOnInitializeProcessFailure"
- UNICODE "KeepActivationContextsAlive"
- UNICODE "TrackActivationContextReleases"
- UNICODE "MaxDeadActivationContexts"
- UNICODE "GlobalFlag"
- ASCII "Initializing the application verifier package failed with status 0x%08lx
- "
- ASCII "LdrpInitializeExecutionOptions"
- UNICODE "_NO_DEBUG_HEAP"
- UNICODE "CWDIllegalInDLLSearch"
- ASCII "Probing for the manifest of DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpFindDllActivationContext"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Querying the active activation context failed with status 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "DLL name %wZ was redirected to %wZ by SxS.
- "
- ASCII "Loading DLL %wZ failed with status 0x%08lx
- "
- ASCII "Locating procedure "%s" by name
- "
- ASCII "LdrpGetProcedureAddress"
- ASCII "Loading procedure 0x%lx by ordinal
- "
- ASCII "ParentModule: (%p) %wZ.
- "
- ASCII "LdrpResolveNonStaticDependency"
- ASCII "Calling init routine %p for DLL "%wZ"
- "
- ASCII "LdrpInitializeNode"
- ASCII "Init routine %p of DLL "%wZ" raised an exception %x
- "
- ASCII "Init routine %p for DLL "%wZ" failed during DLL_PROCESS_ATTACH
- "
- ASCII "Procedure "%s" could not be located in DLL at base 0x%p.
- "
- ASCII "LdrpNameToOrdinal"
- ASCII "Failed to load for appcompat reasons
- "
- ASCII "LdrpPrepareModuleForExecution"
- ASCII "Uninitializing DLL "%wZ" (Init routine: %p)
- "
- ASCII "LdrpProcessDetachNode"
- ASCII "DLL "%wZ" does not contain an export table
- "
- ASCII "Unmapping DLL "%wZ"
- "
- ASCII "Merging a cycle rooted at %wZ.
- "
- ASCII "minkernel\ntdll\ldrddag.c"
- ASCII "Adding cyclic module %wZ.
- "
- ASCII "DLL "%wZ" has TLS information at %p
- "
- ASCII "LdrpInitializeTls"
- ASCII "minkernel\ntdll\ldrtls.c"
- ASCII "LdrpAllocateTls"
- ASCII "TlsVector %p Index %d : %d bytes copied from %p to %p
- "
- ASCII "Calling TLS callback %p for DLL "%wZ" at %p
- "
- ASCII "LdrpCallTlsInitializers"
- ASCII "LdrpAllocateTlsEntry"
- ASCII "LdrpHandleTlsData"
- ASCII "Function %s raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpGenericExceptionFilter"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "
- ***Exception thrown within loader***
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? "
- ASCII "Execute '.cxr %p' to dump context
- "
- UNICODE "Unknown"
- UNICODE "#%d"
- ASCII "Locating export at ordinal %d for DLL "%wZ" failed with status: 0x%08lx.
- "
- ASCII "LdrpReportError"
- ASCII "Locating export "%wZ" for DLL "%wZ" failed with status: 0x%08lx.
- "
- UNICODE ".DLL"
- UNICODE "\microsoft.system.package.metadata\Application"
- UNICODE ".Local"
- ASCII "DLL search path passed in externally: %ws
- "
- ASCII "LdrpInitializeDllPath"
- ASCII "Lazy DLL search path computation failed with status: 0x%08lx.
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "DLL search path computed: %ws
- "
- ASCII "Packaged DLL search path computed. Package Dirs: %ws, DllPath: %ws
- "
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"
- UNICODE "OptionValue"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Srp\GP\DLL"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- UNICODE "TransparentEnabled"
- UNICODE "CheckAllProcessMachinePolicyEnabled"
- UNICODE "ADVAPI32.DLL"
- ASCII "SaferiIsDllAllowed"
- UNICODE "\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
- ASCII "RTL: Enter Critical Section Timeout (%I64u secs) %d
- "
- ASCII "RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu
- "
- ASCII "RTL: Re-Waiting
- "
- ASCII "RTL: Acquire Shared Sem Timeout %d(%I64u secs)
- "
- ASCII "RTL: Resource at %p
- "
- ASCII "RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)
- "
- ASCII "Resource @ %lx
- "
- ASCII " NumberOfWaitingShared = %lx
- "
- ASCII " NumberOfWaitingExclusive = %lx
- "
- ASCII " NumberOfActive = %lx
- "
- ASCII "NTDLL: Calling thread (%X) not owner of CritSect: %p Owner ThreadId: %X
- "
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section debug info address"
- ASCII "Critical section address"
- ASCII "undeleted critical section in freed memory"
- ASCII "Address of the debug info found in the active list."
- ASCII "Invalid debug info address of this critical section"
- ASCII "corrupted critical section"
- ASCII "Second initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "First initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section address."
- ASCII "double initialized or corrupted critical section"
- ASCII "Thread identifier"
- ASCII "Thread is in a state in which it cannot own a critical section"
- UNICODE "Objects=%4u"
- UNICODE "VirtualAlloc"
- UNICODE "Objects>%4u"
- UNICODE "\SystemRoot"
- UNICODE "\System32\"
- UNICODE "VerifierFlags"
- UNICODE "HandleTraces"
- UNICODE "VerifierDebug"
- UNICODE "VerifierDlls"
- ASCII "AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled
- "
- ASCII "AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.
- "
- ASCII "AVRF: -*- final list of providers -*-
- "
- ASCII "AVRF: resnapping %ws ...
- "
- ASCII "AVRF: skipped resnapping provider %ws ...
- "
- ASCII "AVRF: verifier dll `%ws'
- "
- ASCII "AVRF: Cannot load %ws from arbitrary location
- "
- ASCII "AVRF: %ws: failed to load provider `%ws' (status %08X) from %ws
- "
- ASCII "AVRF: provider %ws is not a DLL image
- "
- ASCII "AVRF: exception raised while probing provider %ws
- "
- ASCII "AVRF: cannot find an entry point for provider %ws
- "
- ASCII "AVRF: provider %ws passed an invalid descriptor @ %p
- "
- ASCII "AVRF: initialized provider %ws (descriptor @ %p)
- "
- ASCII "AVRF: provider %ws did not initialize correctly
- "
- ASCII "AVRF: exception raised in provider %ws initialization routine
- "
- ASCII "AVRF: provider %ws
- "
- ASCII "AVRF: chain: searching in %ws
- "
- ASCII "AVRF: chain: dll: %ws
- "
- ASCII "AVRF: chain: thunk: %s == %s ?
- "
- ASCII "AVRF: Found duplicate for (%ws: %s) in %ws
- "
- ASCII "AVRF: Checking %ws for duplicate (%ws: %s)
- "
- ASCII "AVRF: Chaining (%ws: %s) to %ws
- "
- ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
- "
- ASCII "AVRF: AVrfDllUnloadNotification called for a provider (%p)
- "
- ASCII "AVRF: internal error: New thunk for %s is null.
- "
- ASCII "AVRF: Snapped (%ws: %s) with (%ws: %p).
- "
- ASCII "AVRF: warning: did not find `%s' export in %ws .
- "
- ASCII "AVRF: (%ws) %s export found.
- "
- ASCII "AVRF: failed to enable handle checking (status %X)
- "
- UNICODE "verifier.dll"
- ASCII "AVRF: Failed to find verifier.dll among loaded providers!
- "
- ASCII "VerifierStopMessage"
- ASCII "AVRF: Failed to find `VerifierStopMessage()' export in verifier.dll!
- "
- ASCII "
- ===========================================================
- VERIFIER STOP %p: pid 0x%X: %s
- %p : %s
- %p : %s
- %p : %s
- %p : %s
- ===========================================================
- "
- UNICODE "\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "\REGISTRY\USER\"
- UNICODE "\KernelObjects\SystemErrorPortReady"
- UNICODE "\WindowsErrorReportingServicePort"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
- UNICODE "VS_VERSION_INFO"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR"
- UNICODE "WMRSendMessageString"
- UNICODE "DisableEscalation"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\Escalation"
- UNICODE "WinShipAssert"
- UNICODE "WindowsMessageReportingB1"
- UNICODE "%d.%d.%d.%d"
- UNICODE "\Software\Microsoft\Windows"
- UNICODE "svchost.exe"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledProcesses\"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\SysprepPerformed\"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\"
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows"
- UNICODE "StudyId"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\ThrottleStore"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows\winsqm8"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm\windows"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore\sqm"
- UNICODE "\Registry\Machine\Software\Microsoft\TelemetryClient\SampleStore"
- UNICODE "ThrottleExpiryTime"
- UNICODE "SampledOut"
- UNICODE "AdaptiveSqmNameSpaceBoundary"
- UNICODE "DPS"
- UNICODE "ASqmManifestVersion"
- UNICODE "ASqmManifest_%x"
- UNICODE "WSqmConsLastRunTime"
- UNICODE "CEIPEnable"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\AdaptiveSqm\Throttling"
- UNICODE "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"
- UNICODE "PATH"
- UNICODE "SafeDllSearchMode"
- UNICODE "SafeProcessSearchMode"
- ASCII "Status != STATUS_SXS_SECTION_NOT_FOUND"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "(This->PrivateDynamicallyAllocatedString == NULL) || (This->PrivateDynamicallyAllocatedString->Buffer == NULL)"
- ASCII "rUS.Length <= This->PrivatePreallocatedString->MaximumLength"
- ASCII "sxsisol_SearchActCtxForDllName"
- ASCII "[%x.%x] SXS: %s - Relative redirection plus env var expansion.
- "
- ASCII "!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)"
- ASCII "Status != STATUS_NOT_FOUND"
- ASCII "SXS: Warning: Activation context data at %p missing default TOC
- "
- ASCII "SXS: Warning: Activation context data at %p lacks assembly roster
- "
- ASCII "SXS: Activation context data at %p has invalid TOC header offset
- "
- ASCII "SXS: Activation context data at %p has TOC header too small (%lu)
- "
- ASCII "SXS: Activation context data at %p has invalid TOC entry array offset
- "
- ASCII "SXS: Activation context data at %p has invalid assembly roster offset
- "
- ASCII "SXS: Activation context data at %p has assembly roster header too small (%lu)
- "
- ASCII "RtlCreateActivationContext"
- ASCII "SXS: %s() passed the empty activation context data
- "
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid flags 0x%08lx
- "
- ASCII "SXS: %s() called with invalid cookie type 0x%08Ix
- "
- ASCII "SXS: %s() called with invalid cookie tid 0x%08Ix - should be %08Ix
- "
- ASCII "RtlDeactivateActivationContextUnsafeFast"
- ASCII "SXS: %s() Active frame is not the frame being deactivated %p != %p
- "
- ASCII "SXS/RTL: Activation context data at %p too small; TotalSize = %lu; HeaderSize = %lu
- "
- ASCII "SXS/RTL: Extended TOC offset (%ld) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)
- "
- ASCII "SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Section found (offset %ld; length %lu) extends past end of activation context data (%lu bytes)
- "
- ASCII "RtlpFindActivationContextSection_CheckParameters"
- ASCII "SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "RtlFindActivationContextSectionString() found section at %p (length %lu) which is not a string section
- "
- ASCII "RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.
- "
- ASCII "SXS: String hash collision chain offset at %p (= %ld) out of bounds
- "
- ASCII "SXS: String hash table entry at %p has invalid key offset (= %ld)
- Header = %p; Index = %lu; Bucket = %p; Chain = %p
- "
- ASCII "RtlFindActivationContextSectionGuid() found section at %p (length %lu) which is not a GUID section
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p only %Iu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!
- "
- ASCII "SXS: %s() found assembly information section with wrong magic value
- Expected %lu; got %lu
- "
- ASCII "SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!
- "
- ASCII "SXS: %s() passed string section at %p with too small of a header
- HeaderSize: %lu
- Required: %lu
- "
- ASCII "SXS: %s() found assembly information section with element list overlapping section header
- Section header: %p
- Header Size: %lu
- ElementListOffset: %lu
- "
- ASCII "SXS: %s() found assembly information section with search structure overlapping section header
- Section header: %p
- Header Size: %lu
- SearchStructureOffset: %lu
- "
- ASCII "SXS: %s() found assembly information section with user data overlapping section header
- Section header: %p
- Header Size: %lu
- User Data Offset: %lu
- "
- ASCII "SXS: %s() found assembly information section with user data too small
- Section header: %p
- UserDataSize: %lu; needed: %lu
- "
- ASCII "SXS: %s() found assembly information section with user data extending beyond section data
- Section header: %p
- UserDataSize: %lu
- UserDataOffset: %lu
- Section size: %Iu
- "
- ASCII "RtlpQueryInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root
- "
- ASCII "RtlpQueryAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
- "
- ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid file index (%d) in Assembly (%d)
- "
- ASCII "RtlpQueryRunLevel"
- ASCII "SXS: %s() found activation context data at %p with wrong format
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid flags (0x%08lx)
- "
- ASCII "SXS: %s() - Caller passed meaningless flags/class combination (0x%08lx/0x%08lx)
- "
- ASCII "SXS: %s() - caller asked for unknown information class %lu
- "
- ASCII "SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer
- "
- ASCII "SXS: %s() - caller supplied no buffer to populate and no place to return required byte count
- "
- ASCII "SXS: %s() - caller asked to use active activation context but passed %p
- "
- ASCII "SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL
- "
- ASCII "SXS: %s() - Caller passed invalid address, not in any .dll (%p)
- "
- ASCII "SXS: %s() - Caller asked to use activation context from hmodule but passed NULL
- "
- ASCII "SXS: %s() - Caller passed invalid hmodule (%p)
- "
- ASCII "SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu
- "
- UNICODE "http://schemas.microsoft.com/SMI/2005/WindowsSettings"
- ASCII "RtlpLocateActivationContextSection() found section at %p (length %lu) which is not a string section
- "
- ASCII "SXS: Unable to open registry key %wZ Status = 0x%08lx
- "
- UNICODE "\WinSxS\"
- ASCII "SXS: Unable to enumerate assembly storage subkey #%lu Status = 0x%08lx
- "
- ASCII "SXS: Attempt to get storage location from subkey %wZ failed; Status = 0x%08lx
- "
- ASCII "SXS: Unable to open storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Unabel to query location from storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Assembly storage root location value type is not REG_SZ
- "
- ASCII "SXS: Assembly storage root location value has non-even size
- "
- ASCII "SXS: Assembly storage root location for %wZ does not fit in a UNICODE STRING
- "
- ASCII "RtlpInitializeAssemblyStorageMap"
- ASCII "SXS: %s() bad parameters:
- SXS: Map : 0x%lx
- SXS: EntryCount : 0x%lx
- "
- ASCII "RtlpInsertAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: AssemblyRosterIndex : 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- SXS: StorageLocation : %p
- SXS: StorageLocation->Length: 0x%x
- SXS: StorageLocation->Buffer: %p
- "...
- ASCII "RtlpResolveAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: Data : %p
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- "
- ASCII "SXS: Assembly directory name stored in assembly information too long (%lu bytes) - ACTIVATION_CONTEXT_DATA at %p
- "
- ASCII "SXS: Attempt to probe known root of assembly storage ("%wZ") failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to insert well known storage root into assembly storage map assembly roster index %lu failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to probe assembly storage root %wZ for assembly directory %wZ failed with status = 0x%08lx
- "
- ASCII "SXS: Unable to resolve storage root for assembly directory %wZ in %Iu tries
- "
- ASCII "SXS: Attempt to translate DOS path name "%S" to NT format failed
- "
- ASCII "SXS: Unable to open assembly directory under storage root "%S"; Status = 0x%08lx
- "
- ASCII "SXS: Storage resolution failed to insert entry to storage map; Status = 0x%08lx
- "
- ASCII "RtlpProbeAssemblyStorageRootForAssembly"
- ASCII "SXS: %s() bad parameters
- SXS: Flags: 0x%lx
- SXS: Root: %p
- SXS: AssemblyDirectory: %p
- SXS: PreAllocatedString: %p
- SXS: DynamicString: %p
- SXS: StringUsed: %p
- SXS: OpenDirectoryHandle: %p"...
- ASCII "SXS: Assembly storage resolution failing probe because combined path length does not fit in an UNICODE_STRING.
- "
- ASCII "SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.
- "
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() passed the empty activation context
- "
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: AssemblyStorageRoot: %p
- SXS: Callback : %p
- "
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to get activation context data, storage map and assembly roster header. Status = 0x%08lx
- "
- ASCII "SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx
- "
- ASCII "SXS: RtlGetAssemblyStorageRoot() unable to resolve storage map entry. Status = 0x%08lx
- "
- ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: Peb : %p
- SXS: ActivationContextData: %p
- SXS: AssemblyStorageMap : %p
- "
- UNICODE ".mui"
- UNICODE "Type:"
- UNICODE " Name:"
- UNICODE " Language:"
- UNICODE " Item:"
- UNICODE "SR - "
- UNICODE "MUI"
- ASCII "LdrpLoadResourceFromAlternativeModule"
- ASCII "'LDR: %s(), invalid image format of MUI file
- "
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"
- UNICODE "UseFilter"
- UNICODE "FilterFullPath"
- UNICODE "LdrpResValidateFilePath Enter"
- UNICODE "LdrpResValidateFilePath Exit"
- UNICODE "LdrResGetRCConfig Enter"
- UNICODE "LdrResGetRCConfig Exit"
- UNICODE "LdrpResMapFile Enter"
- UNICODE "LdrpResMapFile Exit"
- UNICODE "LdrResRelease Enter"
- UNICODE "LdrResRelease Exit"
- UNICODE "RtlpResUltimateFallbackInfo Enter"
- UNICODE "LdrpResGetResourceDirectory Enter"
- UNICODE "LdrpResGetResourceDirectory Exit"
- UNICODE "LdrpResGetMappingSize Enter"
- UNICODE "LdrpResGetMappingSize Exit"
- UNICODE "LdrpResSearchResourceInsideDirectory Enter"
- UNICODE "LdrpResSearchResourceInsideDirectory Exit"
- UNICODE "LdrResFallbackLangList Enter"
- UNICODE "LdrResFallbackLangList Exit"
- UNICODE "LdrpResSearchResourceMappedFile Enter"
- UNICODE "LdrpResSearchResourceMappedFile Exit"
- UNICODE "LdrpResSearchResourceHandle Enter"
- UNICODE "LdrpResSearchResourceHandle Exit"
- UNICODE "LdrResSearchResource Enter"
- UNICODE "LdrResSearchResource Exit"
- UNICODE "RXACT"
- UNICODE "Log"
- UNICODE "%s\%u-%u-%u-%u"
- UNICODE "\Sessions"
- UNICODE "%ws\%ld\AppContainerNamedObjects\"
- UNICODE "AppContainerNamedObjects\"
- UNICODE "#%u"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "!(CheckedFlags & ~HEAP_CREATE_VALID_MASK)"
- ASCII "(HeapHandle != NULL)"
- ASCII "((PHEAP_ENTRY)LastKnownEntry <= Entry)"
- ASCII "(UCRBlock->Size >= *Size)"
- ASCII "(UCRBlock != NULL)"
- ASCII "((LONG)FreeEntry->Size > 1)"
- ASCII "(LONG)FreeEntry->Size > 1"
- ASCII "((FreeBlock->Flags & HEAP_ENTRY_DECOMMITTED) || (ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock))"
- ASCII "ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock"
- ASCII "Heap block at %p modified at %p past requested size of %Ix
- "
- ASCII "RtlpHeapFreeVirtualMemory failed %lx for heap %p (base %p, size %Ix)
- "
- ASCII "ZwAllocateVirtualMemory failed %lx for heap %p (base %p, size %p)
- "
- ASCII "
- *** Assertion failed: %s%s
- *** Source File: %s, line %ld
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process, or terminate Thread (boipt)? "
- UNICODE "MiniNT"
- UNICODE "PortableOperatingSystem"
- ASCII "RtlpQueryRegistryValues: Miscomputed buffer size at line %d
- "
- UNICODE "TimeZoneInformation"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "MachineLanguageConfiguration"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\CMF\SQMData\BootLanguages"
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlpSetPreferredUILanguages is not a valid multi-string!
- "
- UNICODE "Control Panel\Desktop"
- UNICODE "PreferredUILanguagesPending"
- UNICODE "LanguageConfigurationPending"
- UNICODE "LanguageConfiguration"
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetThreadPreferredUILanguages is not a valid multi-string!
- "
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetProcessPreferredUILanguages is not a valid multi-string!
- "
- ASCII "*** ASSERT FAILED: Input parameter pwmszLanguage for function RtlGetUILanguageInfo is not a valid multi-string!
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- ASCII "VirtualQuery Failed 0x%08x %x
- "
- ASCII "VirtualProtect Failed 0x%08x %x
- "
- ASCII "RtlLockHeap"
- ASCII "RtlUnlockHeap"
- ASCII "Unable to release memory at %p for %p bytes - Status == %x
- "
- UNICODE "GlobalTags"
- ASCII "RtlValidateHeap"
- ASCII "Invalid heap signature for heap at %x"
- UNICODE "
- \SmApiPort"
- UNICODE "\SystemRoot\bootstat.dat"
- UNICODE "System Volume Information"
- ASCII "Not enough memory to complete
- "
- ASCII "Conflicting descriptors %08lx
- "
- ASCII "Unable to allocate page descriptor
- "
- ASCII "Entry User Heap Size Req.Size Flags
- "
- ASCII "------------------------------------------------------------
- "
- ASCII "fill "
- ASCII "%p %p %p %8lx %p "
- ASCII "Inspecting leaks at process shutdown ...
- "
- ASCII "%ld leaks detected.
- "
- ASCII "No leaks detected.
- "
- ASCII "ffff:"
- ASCII "::%hs%u.%u.%u.%u"
- ASCII "::ffff:0:%u.%u.%u.%u"
- ASCII "%u.%u.%u.%u"
- ASCII ":%u"
- ASCII "%02X-%02X-%02X-%02X-%02X-%02X"
- UNICODE "::%hs%u.%u.%u.%u"
- UNICODE "::ffff:0:%u.%u.%u.%u"
- UNICODE ":%u.%u.%u.%u"
- UNICODE "%%%u"
- UNICODE "]:%u"
- UNICODE "%u.%u.%u.%u"
- UNICODE ":%u"
- UNICODE "%02X-%02X-%02X-%02X-%02X-%02X"
- UNICODE "%%%u!%s!"
- ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping
- "
- ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem
- "
- ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned
- "
- UNICODE "\Registry\MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CustomLocale"
- UNICODE "Control Panel\International"
- UNICODE "LocaleName"
- UNICODE "\SystemRoot\Globalization\"
- UNICODE "en-US"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ProductOptions"
- UNICODE "ProductType"
- UNICODE "WinNt"
- UNICODE "LanmanNt"
- UNICODE "ServerNt"
- ASCII " Leaked Block 0x%p size 0x%p (stack %p depth %u)
- "
- ASCII "
- *** Resource timeout (%p) in %ws:%s
- "
- ASCII "The resource is owned exclusively by thread %x
- "
- ASCII "The resource is owned shared by %d threads
- "
- ASCII "The resource is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Critical Section Timeout (%p) in %ws:%s
- "
- ASCII "The critical section is owned by thread %x.
- "
- ASCII "Go determine why that thread has not released the critical section.
- "
- ASCII "The critical section is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Inpage error in %ws:%s
- "
- ASCII "The instruction at %p referenced memory at %p.
- "
- ASCII "This failed because of error %Ix.
- "
- ASCII "This means the machine is out of memory. Use !vm to see where all the memory is being used.
- "
- ASCII "This means the data could not be read, typically because of a bad block on the disk. Check your hardware.
- "
- ASCII "This means that the I/O device reported an I/O error. Check your hardware."
- ASCII "
- *** An Access Violation occurred in %ws:%s
- "
- ASCII "read from"
- ASCII "The instruction at %p tried to %s "
- ASCII "an invalid address, %p
- "
- ASCII "a NULL pointer
- "
- ASCII "
- *** A stack buffer overrun occurred in %ws:%s
- "
- ASCII "This is usually the result of a memory copy to a local buffer or structure where the size is not properly calculated/checked.
- "
- ASCII "If this bug ends up in the shipping product, it could be a severe security hole.
- "
- ASCII "The stack trace should show the guilty function (the function directly above __report_gsfailure).
- "
- ASCII "
- *** Unhandled exception 0x%08lx, hit in %ws:%s
- "
- ASCII " *** enter .exr %p for the exception record
- "
- ASCII " *** enter .cxr %p for the context
- "
- ASCII " *** then kb to get the faulting stack
- "
- ASCII " *** Restarting wait on critsec or resource at %p (in %ws:%s)
- "
- UNICODE "WIN://SYSAPPID"
- UNICODE "WIN://PKG"
- UNICODE "%wZ"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ValidationRunlevels"
- ASCII "Trace database: failed to release segment %p
- "
- ASCII "Trace database: failing attempt to save biiiiig trace (size %u)
- "
- ASCII "!!!!FreeLanguageList:%X !!!!
- "
- UNICODE "\Registry\Machine\Software\Policies\Microsoft\MUI\Settings"
- UNICODE "Software\Policies\Microsoft\Control Panel\Desktop"
- UNICODE "Control Panel\Desktop\LanguageConfiguration"
- UNICODE "Control Panel\Desktop\MuiCached\MachineLanguageConfiguration"
- ASCII "*** CreateLanguageList:%X ****
- "
- UNICODE "MachineUILock"
- UNICODE "DefaultFallback"
- UNICODE "AlternateCodePage"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete"
- UNICODE "Type"
- UNICODE "WindowsExcludedProcs"
- UNICODE "Kernel-MUI-Number-Allowed"
- UNICODE "Kernel-MUI-Language-Allowed"
- UNICODE "Kernel-MUI-Language-Disallowed"
- UNICODE "Kernel-MUI-Language-SKU"
- ASCII "*** RtlpMuiRegLoadLicInformation failed with status %x"
- ASCII "Critical error detected %lx
- "
- UNICODE "QueryDebugInformation request"
- ASCII "Heap %p - headers modified (%p is %lx instead of %lx)
- "
- ASCII " This is located in the %s field of the heap header.
- "
- ASCII "Invalid ReserveSize parameter - %Ix
- "
- ASCII "Invalid CommitSize parameter - %Ix
- "
- ASCII "May not specify Lock parameter with HEAP_NO_SERIALIZE
- "
- ASCII "Specified HeapBase (%p) invalid, Status = %lx
- "
- ASCII "Specified HeapBase (%p) != to BaseAddress (%p)
- "
- ASCII "Specified HeapBase (%p) is free or not writable
- "
- ASCII "May not destroy the process heap at %p
- "
- ASCII "RtlAllocateHeap"
- ASCII "Invalid allocation size - %Ix (exceeded %Ix)
- "
- ASCII "Just allocated block at %p for %Ix bytes
- "
- ASCII "Just allocated block at %p for 0x%Ix bytes with tag %ws
- "
- ASCII "RtlReAllocateHeap"
- ASCII "About to reallocate block at %p to %Ix bytes
- "
- ASCII "About to rellocate block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "Just reallocated block at %p to %Ix bytes
- "
- ASCII "Just reallocated block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "RtlFreeHeap"
- ASCII "About to free block at %p
- "
- ASCII "About to free block at %p with tag %ws
- "
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSizeHeap"
- ASCII "RtlZeroHeap"
- ASCII "RtlCreateTagHeap"
- ASCII "RtlQueryTagHeap"
- ASCII "RtlWalkHeap"
- ASCII "Invalid address specified to %s( %p, %p )
- "
- ASCII "Heap entry %p has incorrect PreviousSize field (%04x instead of %04x)
- "
- ASCII "Free Heap block %p modified at %p after it was freed
- "
- ASCII "Heap block at %p has incorrect segment offset (%x)
- "
- ASCII "Heap block at %p is not last block in segment (%p)
- "
- ASCII "Heap block at %p has corrupted PreviousSize (%lx)
- "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)
- "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)
- "
- ASCII "dedicated (%04Ix) free list element %p is marked busy
- "
- ASCII "Non-Dedicated free list element %p is out of order
- "
- ASCII "Number of free blocks in arena (%ld) does not match number in the free lists (%ld)
- "
- ASCII "Total size of free blocks in arena (%Id) does not match number total in heap header (%Id)
- "
- ASCII "Pseudo Tag %04x size incorrect (%Ix != %Ix) %p
- "
- ASCII "Tag %04x (%ws) size incorrect (%Ix != %Ix) %p
- "
- ASCII "Heap error detected at %p (heap handle %p)
- "
- ASCII "heap_failure_internal"
- ASCII "heap_failure_unknown"
- ASCII "heap_failure_generic"
- ASCII "heap_failure_entry_corruption"
- ASCII "heap_failure_multiple_entries_corruption"
- ASCII "heap_failure_virtual_block_corruption"
- ASCII "heap_failure_buffer_overrun"
- ASCII "heap_failure_buffer_underrun"
- ASCII "heap_failure_block_not_busy"
- ASCII "heap_failure_invalid_argument"
- ASCII "heap_failure_usage_after_free"
- ASCII "heap_failure_cross_heap_operation"
- ASCII "heap_failure_freelists_corruption"
- ASCII "heap_failure_listentry_corruption"
- ASCII "heap_failure_lfh_bitmap_mismatch"
- ASCII "Error code: %d - %s
- "
- ASCII "Parameter1: %p
- "
- ASCII "Parameter2: %p
- "
- ASCII "Parameter3: %p
- "
- ASCII "Last known valid blocks: before - %p, after - %p
- "
- ASCII "Stack trace available at %p
- "
- ASCII "RtlpGetBitState(LookupTable, (ULONG)(LookupIndex - LookupTable->BaseIndex))"
- ASCII "(ROUND_UP_TO_POWER2(Size, PAGE_SIZE) == Size)"
- ASCII "Enabling heap debug options
- "
- ASCII "ffff:"
- ASCII "::%hs%u.%u.%u.%u"
- ASCII "::ffff:0:%u.%u.%u.%u"
- ASCII ":%u.%u.%u.%u"
- UNICODE "TimeZoneKeyName"
- UNICODE "DynamicDaylightTimeDisabled"
- ASCII "RtlpQueryRegistryValues: Miscomputed buffer size at line %d
- "
- ASCII "RtlpQueryRegistryValues: Miscomputed buffer size at line %d
- "
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetProcessPreferredUILanguages is not a valid multi-string!
- "
- ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping
- "
- ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem
- "
- ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned
- "
- UNICODE "ThrottleExpiryTime"
- UNICODE "SampledOut"
- UNICODE "CEIPEnable"
- UNICODE "ThrottleExpiryTime"
- UNICODE "%s\%u-%u-%u-%u"
- UNICODE "ASqmManifest_%x"
- ASCII "LdrpAllocateTlsEntry"
- ASCII "LdrpHandleTlsData"
- ASCII "HEAP: "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Inspecting leaks at process shutdown ...
- "
- ASCII "HEAP[%wZ]: "
- ASCII "%ld leaks detected.
- "
- ASCII "HEAP[%wZ]: "
- ASCII "No leaks detected.
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid heap signature for heap at %x"
- ASCII "RtlUnlockHeap"
- ASCII ", passed to %s"
- UNICODE "
- \SmApiPort"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid heap signature for heap at %x"
- ASCII "RtlLockHeap"
- ASCII ", passed to %s"
- UNICODE "
- \SmApiPort"
- ASCII "DLL "%wZ" has TLS information at %p
- "
- ASCII "LdrpInitializeTls"
- ASCII "minkernel\ntdll\ldrtls.c"
- ASCII "ThreadPool: attempt to terminate a worker thread via handle %p
- Contact the owner of the function calling Terminate/Exit thread.
- "
- ASCII "Delaying execution failed with status 0x%08lx
- "
- ASCII "_LdrpInitialize"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization failed with status 0x%08lx
- "
- ASCII "_LdrpInitialize"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "LdrpAllocateTls"
- ASCII "TlsVector %p Index %d : %d bytes copied from %p to %p
- "
- ASCII "LdrpAllocateTls"
- ASCII "minkernel\ntdll\ldrtls.c"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ProductOptions"
- UNICODE "ProductType"
- UNICODE "WinNt"
- UNICODE "LanmanNt"
- UNICODE "ServerNt"
- ASCII "Calling TLS callback %p for DLL "%wZ" at %p
- "
- ASCII "LdrpCallTlsInitializers"
- ASCII "minkernel\ntdll\ldrtls.c"
- ASCII "Process 0x%x (%wZ) exiting
- "
- ASCII "LdrShutdownProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Nonpackaged process attempted to load a packaged DLL.
- "
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Calling init routine %p for DLL "%wZ"
- "
- ASCII "LdrpInitializeNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Init routine %p of DLL "%wZ" raised an exception %x
- "
- ASCII "LdrpInitializeNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Init routine %p for DLL "%wZ" failed during DLL_PROCESS_ATTACH
- "
- ASCII "LdrpInitializeNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "RtlDeactivateActivationContextUnsafeFast"
- ASCII "SXS: %s() Active frame is not the frame being deactivated %p != %p
- "
- ASCII "Failed to allocated memory for shimmed module list
- "
- ASCII "LdrpCheckModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "DLL %wZ was redirected to %wZ by SxS
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Loading DLL %wZ
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Could not validate the crypto signature for DLL %wZ
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpLoadDll"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(UCRBlock->Size >= *Size)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((PHEAP_ENTRY)LastKnownEntry <= Entry)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(ROUND_UP_TO_POWER2(Size, PAGE_SIZE) == Size)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "ZwAllocateVirtualMemory failed %lx for heap %p (base %p, size %p)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((FreeBlock->Flags & HEAP_ENTRY_DECOMMITTED) || (ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock))"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock"
- UNICODE "en"
- UNICODE "en-US"
- UNICODE "en-US"
- UNICODE "en"
- UNICODE "en-US"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlSetThreadPreferredUILanguages is not a valid multi-string!
- "
- UNICODE "0x"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Unable to release memory at %p for %p bytes - Status == %x
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "HEAP: Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((FreeBlock->Flags & HEAP_ENTRY_DECOMMITTED) || (ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock))"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "ROUND_UP_TO_POWER2(FreeBlock, PAGE_SIZE) == (ULONG_PTR)FreeBlock"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(UCRBlock != NULL)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(!TrailingUCR)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "((LONG)FreeEntry->Size > 1)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(LONG)FreeEntry->Size > 1"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(!TrailingUCR)"
- ASCII "DLL name: %s.
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL name %wZ was redirected to %wZ by SxS.
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Loading DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindOrMapDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpFindOrMapDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindOrMapDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpResolveDllName"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpResolveDllName"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Unknown"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in "%wZ" 0x%08lx
- "
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "minkernel\ntdll\ldrdload.c"
- ASCII "Unknown"
- ASCII "Failed to find export %s!%s (Ordinal:%d) in module 0x%p 0x%08lx
- "
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "minkernel\ntdll\ldrdload.c"
- ASCII "DLL search path passed in externally: %ws
- "
- ASCII "LdrpInitializeDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "ParentModule: (%p) %wZ.
- "
- ASCII "LdrpResolveNonStaticDependency"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL "%wZ" does not contain an export table
- "
- ASCII "LdrpSnapModule"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Procedure "%s" could not be located in DLL at base 0x%p.
- "
- ASCII "LdrpNameToOrdinal"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "LdrpSnapModule"
- ASCII "Locating procedure "%s" by name
- "
- ASCII "LdrpGetProcedureAddress"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Procedure "%s" could not be located in DLL at base 0x%p.
- "
- ASCII "LdrpNameToOrdinal"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Loading procedure 0x%lx by ordinal
- "
- ASCII "LdrpGetProcedureAddress"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Status != STATUS_SXS_SECTION_NOT_FOUND"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "sxsisol_SearchActCtxForDllName"
- ASCII "[%x.%x] SXS: %s - Relative redirection plus env var expansion.
- "
- ASCII "!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)"
- ASCII "Status != STATUS_NOT_FOUND"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "RtlFindActivationContextSectionString() found section at %p (length %lu) which is not a string section
- "
- ASCII "RtlFindActivationContextSectionGuid() found section at %p (length %lu) which is not a GUID section
- "
- ASCII "SXS/RTL: Extended TOC offset (%ld) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)
- "
- ASCII "SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
- "
- ASCII "SXS/RTL: Activation context data at %p too small; TotalSize = %lu; HeaderSize = %lu
- "
- ASCII "RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.
- "
- ASCII "SXS: String hash table entry at %p has invalid key offset (= %ld)
- Header = %p; Index = %lu; Bucket = %p; Chain = %p
- "
- ASCII "SXS: String hash collision chain offset at %p (= %ld) out of bounds
- "
- ASCII "RtlpFindActivationContextSection_CheckParameters"
- ASCII "SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "RtlpFindActivationContextSection_CheckParameters"
- ASCII "SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0x%08lx.
- "
- ASCII "DLL name: %wZ
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "DLL name %wZ was redirected to %wZ by SxS
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Locating DLL %wZ
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "SxS redirection of DLL %wZ failed with status 0x%08lx
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrGetDllHandleEx"
- ASCII "minkernel\ntdll\ldrapi.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpFindLoadedDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindLoadedDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Failed to load for appcompat reasons
- "
- ASCII "LdrpPrepareModuleForExecution"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "ThreadPool: callback %p(%p) returned with a transaction uncleared
- "
- ASCII "ThreadPool: callback %p(%p) returned with the loader lock held
- "
- ASCII "ThreadPool: callback %p(%p) returned with preferred languages set
- "
- ASCII "ThreadPool: callback %p(%p) returned with background priorities set
- "
- ASCII "LdrUnlockLoaderLock"
- ASCII "LdrLockLoaderLock"
- ASCII "LdrpLoadResourceFromAlternativeModule"
- ASCII "'LDR: %s(), invalid image format of MUI file
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid flags (0x%08lx)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed meaningless flags/class combination (0x%08lx/0x%08lx)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller asked for unknown information class %lu
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller supplied no buffer to populate and no place to return required byte count
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller asked to use activation context from hmodule but passed NULL
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - caller asked to use active activation context but passed %p
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid address, not in any .dll (%p)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - Caller passed invalid hmodule (%p)
- "
- ASCII "RtlQueryInformationActivationContext"
- ASCII "SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "!(CheckedFlags & ~HEAP_CREATE_VALID_MASK)"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "RtlpGetBitState(LookupTable, (ULONG)(LookupIndex - LookupTable->BaseIndex))"
- ASCII "*** RtlpMuiRegLoadLicInformation failed with status %x"
- UNICODE "Control Panel\Desktop\MuiCached\MachineLanguageConfiguration"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "(HeapHandle != NULL)"
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() passed the empty activation context
- "
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx
- "
- ASCII "RtlGetAssemblyStorageRoot"
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: AssemblyStorageRoot: %p
- SXS: Callback : %p
- "
- ASCII "SXS: Assembly directory name stored in assembly information too long (%lu bytes) - ACTIVATION_CONTEXT_DATA at %p
- "
- ASCII "SXS: Attempt to probe known root of assembly storage ("%wZ") failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to insert well known storage root into assembly storage map assembly roster index %lu failed; Status = 0x%08lx
- "
- ASCII "SXS: Attempt to probe assembly storage root %wZ for assembly directory %wZ failed with status = 0x%08lx
- "
- ASCII "SXS: Unable to resolve storage root for assembly directory %wZ in %Iu tries
- "
- ASCII "SXS: Attempt to translate DOS path name "%S" to NT format failed
- "
- ASCII "SXS: Unable to open assembly directory under storage root "%S"; Status = 0x%08lx
- "
- ASCII "SXS: Storage resolution failed to insert entry to storage map; Status = 0x%08lx
- "
- ASCII "RtlpResolveAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: Data : %p
- SXS: AssemblyRosterIndex: 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- "
- ASCII "SXS: Unable to enumerate assembly storage subkey #%lu Status = 0x%08lx
- "
- ASCII "SXS: Attempt to get storage location from subkey %wZ failed; Status = 0x%08lx
- "
- ASCII "SXS: Unable to open registry key %wZ Status = 0x%08lx
- "
- ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
- ASCII "SXS: %s() passed the empty activation context
- "
- ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
- ASCII "SXS: %s() bad parameters:
- SXS: Flags : 0x%lx
- SXS: Peb : %p
- SXS: ActivationContextData: %p
- SXS: AssemblyStorageMap : %p
- "
- ASCII "RtlpInsertAssemblyStorageMapEntry"
- ASCII "SXS: %s() bad parameters
- SXS: Map : %p
- SXS: AssemblyRosterIndex : 0x%lx
- SXS: Map->AssemblyCount : 0x%lx
- SXS: StorageLocation : %p
- SXS: StorageLocation->Length: 0x%x
- SXS: StorageLocation->Buffer: %p
- "...
- ASCII "SXS: Assembly storage resolution failing probe because combined path length does not fit in an UNICODE_STRING.
- "
- ASCII "SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.
- "
- ASCII "SXS: Attempt to translate DOS path name "%S" to NT format failed
- "
- ASCII "SXS: Unable to open assembly directory under storage root "%S"; Status = 0x%08lx
- "
- ASCII "RtlpProbeAssemblyStorageRootForAssembly"
- ASCII "SXS: %s() bad parameters
- SXS: Flags: 0x%lx
- SXS: Root: %p
- SXS: AssemblyDirectory: %p
- SXS: PreAllocatedString: %p
- SXS: DynamicString: %p
- SXS: StringUsed: %p
- SXS: OpenDirectoryHandle: %p"...
- ASCII "RtlCreateActivationContext"
- ASCII "SXS: %s() passed the empty activation context data
- "
- ASCII "RtlpInitializeAssemblyStorageMap"
- ASCII "SXS: %s() bad parameters:
- SXS: Map : 0x%lx
- SXS: EntryCount : 0x%lx
- "
- ASCII "SXS: Activation context data at %p has assembly roster header too small (%lu)
- "
- ASCII "SXS: Warning: Activation context data at %p missing default TOC
- "
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpSearchPath"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpSearchPath"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Lazy DLL search path computation failed with status: 0x%08lx.
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "DLL search path computed: %ws
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "Packaged DLL search path computed. Package Dirs: %ws, DllPath: %ws
- "
- ASCII "LdrpComputeLazyDllPath"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "RtlpHeapFreeVirtualMemory failed %lx for heap %p (base %p, size %Ix)
- "
- ASCII "RTL: Acquire Shared Sem Timeout %d(%I64u secs)
- "
- ASCII "RTL: Resource at %p
- "
- ASCII "RTL: Re-Waiting
- "
- ASCII "RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)
- "
- ASCII "RTL: Resource at %p
- "
- ASCII "RTL: Re-Waiting
- "
- UNICODE "#%u"
- UNICODE "%%%u!%s!"
- UNICODE "hc"
- UNICODE "::ffff:0:%u.%u.%u.%u"
- UNICODE "UEFI"
- UNICODE "Legacy"
- ASCII "Unmapping DLL "%wZ"
- "
- ASCII "LdrpUnloadNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Merging a cycle rooted at %wZ.
- "
- ASCII "LdrpMergeNodes"
- ASCII "minkernel\ntdll\ldrddag.c"
- ASCII "Adding cyclic module %wZ.
- "
- ASCII "LdrpMergeNodes"
- ASCII "minkernel\ntdll\ldrddag.c"
- ASCII "Uninitializing DLL "%wZ" (Init routine: %p)
- "
- ASCII "LdrpProcessDetachNode"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid flags 0x%08lx
- "
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid cookie type 0x%08Ix
- "
- ASCII "RtlDeactivateActivationContext"
- ASCII "SXS: %s() called with invalid cookie tid 0x%08Ix - should be %08Ix
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid address specified to %s( %p, %p )
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid heap signature for heap at %x"
- ASCII ", passed to %s"
- UNICODE "
- \SmApiPort"
- ASCII "RTL: Enter Critical Section Timeout (%I64u secs) %d
- "
- ASCII "RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu
- "
- ASCII "RTL: Re-Waiting
- "
- ASCII "Probing for the manifest of DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpFindDllActivationContext"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "Querying the active activation context failed with status 0x%08lx
- "
- ASCII "LdrpFindDllActivationContext"
- ASCII "minkernel\ntdll\ldrsnap.c"
- ASCII "DLL name: %ws
- "
- ASCII "LdrpMapViewOfSection"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpMapViewOfSection"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpFindKnownDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpFindKnownDll"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section debug info address"
- ASCII "Critical section address"
- ASCII "undeleted critical section in freed memory"
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Address of the debug info found in the active list."
- ASCII "Invalid debug info address of this critical section"
- ASCII "Critical section address"
- ASCII "corrupted critical section"
- ASCII "Second initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "First initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Address of the debug info found in the active list."
- ASCII "Critical section address."
- ASCII "double initialized or corrupted critical section"
- ASCII "Initialization stack trace. Use dps to dump it if non-NULL."
- ASCII "Critical section debug info address"
- ASCII "Critical section address"
- ASCII "Thread identifier"
- ASCII "Thread is in a state in which it cannot own a critical section"
- ASCII "CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database
- "
- UNICODE "Execute=1"
- ASCII "CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ
- "
- ASCII "CLIENT(ntdll): Processing %ws for patching section protection for %wZ
- "
- ASCII "CLIENT(ntdll): Processing section info %ws...
- "
- UNICODE "FilterFullPath"
- ASCII "Loading the shim engine DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Getting the shim engine exports failed with status 0x%08lx
- "
- ASCII "LdrpInitShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Loading the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpLoadShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing the shim DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpLoadShimEngine"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing a shim dependency "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeShimDllDependencies"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Could not locate procedure "%s" in the shim engine DLL
- "
- ASCII "LdrpGetShimEngineInterface"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Locating export "%wZ" for DLL "%wZ" failed with status: 0x%08lx.
- "
- ASCII "LdrpReportError"
- ASCII "minkernel\ntdll\ldrutil.c"
- UNICODE "#%d"
- ASCII "Locating export at ordinal %d for DLL "%wZ" failed with status: 0x%08lx.
- "
- ASCII "LdrpReportError"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "Getting ApphelpCheckModule failed with status 0x%08lx
- "
- ASCII "LdrpDynamicShimModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "DLL name: %wZ
- "
- ASCII "LdrpRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Querying large page info failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Changing the protection of the executable at %p failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "Changing the protection of the executable at %p failed with status 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "Status: 0x%08lx
- "
- ASCII "LdrpProtectAndRelocateImage"
- ASCII "minkernel\ntdll\ldrfind.c"
- ASCII "RtlpQueryRunLevel"
- ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root
- "
- ASCII "RtlpQueryRunLevel"
- ASCII "SXS: %s() found activation context data at %p with wrong format
- "
- ASCII "RtlpQueryInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p only %Iu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with wrong magic value
- Expected %lu; got %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() passed string section at %p with too small of a header
- HeaderSize: %lu
- Required: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with element list overlapping section header
- Section header: %p
- Header Size: %lu
- ElementListOffset: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with search structure overlapping section header
- Section header: %p
- Header Size: %lu
- SearchStructureOffset: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with user data overlapping section header
- Section header: %p
- Header Size: %lu
- User Data Offset: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with user data too small
- Section header: %p
- UserDataSize: %lu; needed: %lu
- "
- ASCII "RtlpCrackActivationContextStringSectionHeader"
- ASCII "SXS: %s() found assembly information section with user data extending beyond section data
- Section header: %p
- UserDataSize: %lu
- UserDataOffset: %lu
- Section size: %Iu
- "
- ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping
- "
- ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem
- "
- ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned
- "
- UNICODE "GlobalTags"
- ASCII "RtlpLocateActivationContextSection() found section at %p (length %lu) which is not a string section
- "
- UNICODE "COMPLUS_Version"
- ASCII "This != NULL"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "(This->PrivateDynamicallyAllocatedString == NULL) || (This->PrivateDynamicallyAllocatedString->Buffer == NULL)"
- ASCII "rUS.Length <= This->PrivatePreallocatedString->MaximumLength"
- ASCII "minkernel\ntdll\sxsisol.cpp"
- ASCII "Internal error check failed"
- ASCII "Failed to reallocate the system dirs string !
- "
- ASCII "LdrpInitializePerUserWindowsDirectory"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII ".txt"
- ASCII ".txt2"
- UNICODE "%s_%d"
- UNICODE "xl--"
- UNICODE "xn--"
- ASCII "LdrVerifyImageMatchesChecksumEx"
- ASCII "LdrVerifyImageMatchesChecksumEx"
- UNICODE "BinaryHash"
- UNICODE "BinaryName"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange\PackageList\%ws"
- UNICODE "TrustedInstaller"
- ASCII "Set 0x%X protection for %p section for %d bytes, old protection 0x%X
- "
- ASCII "CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X
- "
- ASCII "%04x:%04x @ %08d - %s - %s: "
- ASCII "LdrpProtectedCopyMemory"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\"
- ASCII "Finding the shim engine entry failed with status 0x%08lx
- "
- ASCII "LdrInitShimEngineDynamic"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "BoG_ *90.0&!! Yy>"
- ASCII "stxt371"
- ASCII ".txt"
- ASCII ".txt2"
- UNICODE "%s!%s"
- UNICODE "\system32\apphelp.dll"
- ASCII "Loading the shim engine DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpGetProcApphelpCheckModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Getting the shim engine exports failed with status 0x%08lx
- "
- ASCII "LdrpGetProcApphelpCheckModule"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization failed with status 0x%08lx
- "
- ASCII "LdrpInitializationFailure"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "SPPsvc.exe"
- UNICODE "PageHeapFlags"
- ASCII "Per-DLL page heap is disabled since fast fill heap is enabled
- "
- ASCII "LdrpInitializeApplicationVerifierPackage"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "DisableHeapLookaside"
- UNICODE "FrontEndHeapDebugOptions"
- UNICODE "ShutdownFlags"
- UNICODE "UnloadEventTraceDepth"
- UNICODE "TracingFlags"
- UNICODE "ExecuteOptions"
- UNICODE "DisableExceptionChainValidation"
- UNICODE "MinimumStackCommitInBytes"
- UNICODE "MaxDeadActivationContexts"
- UNICODE "GlobalFlag"
- UNICODE "GlobalFlag"
- ASCII "Initializing the application verifier package failed with status 0x%08lx
- "
- ASCII "LdrpInitializeExecutionOptions"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "BaseQueryModuleData"
- ASCII "Initializing the execution options for the process %lx failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing process 0x%lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "StackTraceDatabaseSizeInMb"
- ASCII "Stack trace database size is %Id Mb
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Creating the process heap failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "!Process"
- UNICODE "NTDLL!"
- UNICODE "DebugProcessHeapOnly"
- ASCII "Allocating a buffer to hold the current working directory failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Allocating a data table entry for the system DLL failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Failed to allocate the system dirs string!
- "
- ASCII "LdrpInitializeProcess"
- UNICODE "\system;"
- ASCII "Allocating a data table entry for the executable failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Beginning execution of %wZ (%wZ)
- Current directory: %wZ
- Package directories: %wZ
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Initializing the current directory to "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Allocating a data table entry for the application verifier DLL failed
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Initializing TLS slots failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "LdrpCodeAuthzInitialize failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Walking the import tables of the executable and its static imports failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Running the init routines of the executable's static imports failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Loading Windows subsystem DLL "%wZ" failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Querying the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "Opening the known DLL directory link object failed with status 0x%08lx
- "
- ASCII "LdrpInitializeProcess"
- ASCII "minkernel\ntdll\ldrinit.c"
- ASCII "Process initialization raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpInitializeProcessWrapperFilter"
- ASCII "minkernel\ntdll\ldrinit.c"
- UNICODE "CWDIllegalInDLLSearch"
- ASCII "LdrpTouchThreadStack"
- ASCII "Function %s raised exception 0x%08lx
- Exception record: .exr %p
- Context record: .cxr %p
- "
- ASCII "LdrpGenericExceptionFilter"
- ASCII "minkernel\ntdll\ldrutil.c"
- ASCII "
- ***Exception thrown within loader***
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? "
- ASCII "Execute '.cxr %p' to dump context
- "
- UNICODE ".DLL"
- UNICODE "\microsoft.system.package.metadata\Application"
- UNICODE ".Local"
- UNICODE ".DLL"
- ASCII "Resource @ %lx
- "
- ASCII " NumberOfWaitingShared = %lx
- "
- ASCII " NumberOfWaitingExclusive = %lx
- "
- ASCII " NumberOfActive = %lx
- "
- ASCII "NTDLL: Calling thread (%X) not owner of CritSect: %p Owner ThreadId: %X
- "
- UNICODE "Objects>%4u"
- UNICODE "Objects=%4u"
- UNICODE "VirtualAlloc"
- ASCII "AVRF: AVrfDllUnloadNotification called for a provider (%p)
- "
- ASCII "AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled
- "
- ASCII "AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.
- "
- ASCII "AVRF: -*- final list of providers -*-
- "
- UNICODE "VerifierFlags"
- UNICODE "HandleTraces"
- UNICODE "VerifierDebug"
- UNICODE "VerifierDlls"
- ASCII "AVRF: Checking %ws for duplicate (%ws: %s)
- "
- ASCII "AVRF: Chaining (%ws: %s) to %ws
- "
- ASCII "AVRF: warning: did not find `%s' export in %ws .
- "
- ASCII "AVRF: (%ws) %s export found.
- "
- ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
- "
- ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
- "
- ASCII "AVRF: provider %ws
- "
- ASCII "AVRF: failed to enable handle checking (status %X)
- "
- ASCII "AVRF: chain: searching in %ws
- "
- ASCII "AVRF: chain: dll: %ws
- "
- ASCII "AVRF: chain: thunk: %s == %s ?
- "
- ASCII "AVRF: Found duplicate for (%ws: %s) in %ws
- "
- UNICODE "\REGISTRY\USER\"
- ASCII "AVRF: verifier dll `%ws'
- "
- ASCII "AVRF: Cannot load %ws from arbitrary location
- "
- ASCII "AVRF: %ws: failed to load provider `%ws' (status %08X) from %ws
- "
- ASCII "AVRF: provider %ws is not a DLL image
- "
- ASCII "AVRF: cannot find an entry point for provider %ws
- "
- ASCII "AVRF: provider %ws passed an invalid descriptor @ %p
- "
- ASCII "AVRF: initialized provider %ws (descriptor @ %p)
- "
- ASCII "AVRF: provider %ws did not initialize correctly
- "
- ASCII "AVRF: exception raised in provider %ws initialization routine
- "
- ASCII "AVRF: exception raised while probing provider %ws
- "
- UNICODE "verifier.dll"
- ASCII "AVRF: resnapping %ws ...
- "
- ASCII "AVRF: skipped resnapping provider %ws ...
- "
- ASCII "AVRF: internal error: New thunk for %s is null.
- "
- ASCII "AVRF: Snapped (%ws: %s) with (%ws: %p).
- "
- UNICODE "verifier.dll"
- ASCII "AVRF: Failed to find verifier.dll among loaded providers!
- "
- ASCII "VerifierStopMessage"
- ASCII "AVRF: Failed to find `VerifierStopMessage()' export in verifier.dll!
- "
- UNICODE "\KnownDlls"
- UNICODE "KnownDllPath"
- UNICODE "\SystemRoot"
- UNICODE "\System32\"
- ASCII "
- ===========================================================
- VERIFIER STOP %p: pid 0x%X: %s
- %p : %s
- %p : %s
- %p : %s
- %p : %s
- ===========================================================
- "
- UNICODE "WinShipAssert"
- UNICODE "WindowsMessageReportingB1"
- UNICODE "%d.%d.%d.%d"
- UNICODE "%X"
- UNICODE "%d"
- UNICODE "%X"
- UNICODE "%X"
- UNICODE "%d.%d.%d.%d"
- UNICODE "%X"
- UNICODE "%X"
- UNICODE "\REGISTRY\USER\"
- UNICODE "\Software\Microsoft\Windows"
- UNICODE "\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\Escalation"
- UNICODE "DisableEscalation"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR"
- UNICODE "WMRSendMessageString"
- UNICODE "(null)"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\AdaptiveSqm\Throttling"
- UNICODE "%u"
- UNICODE "(null)"
- UNICODE "\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\"
- ASCII "RtlpQueryAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
- "
- ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
- "
- ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
- ASCII "SXS: %s() received invalid file index (%d) in Assembly (%d)
- "
- ASCII "SXS: Unable to open storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Unabel to query location from storage root subkey %wZ; Status = 0x%08lx
- "
- ASCII "SXS: Assembly storage root location value type is not REG_SZ
- "
- ASCII "SXS: Assembly storage root location value has non-even size
- "
- ASCII "SXS: Assembly storage root location for %wZ does not fit in a UNICODE STRING
- "
- UNICODE "Type:"
- UNICODE " Name:"
- UNICODE " Language:"
- UNICODE " Item:"
- UNICODE "SR - "
- UNICODE "LdrResRelease Enter"
- UNICODE "LdrResRelease Exit"
- UNICODE "LdrResGetRCConfig Enter"
- UNICODE "LdrResGetRCConfig Exit"
- UNICODE "LdrpResMapFile Enter"
- UNICODE "LdrpResMapFile Exit"
- UNICODE "LdrpResSearchResourceHandle Enter"
- UNICODE "LdrpResSearchResourceHandle Exit"
- UNICODE "LdrpResValidateFilePath Enter"
- UNICODE "LdrpResValidateFilePath Exit"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p modified at %p past requested size of %Ix
- "
- ASCII "
- *** Assertion failed: %s%s
- *** Source File: %s, line %ld
- "
- ASCII "Break repeatedly, break Once, Ignore, terminate Process, or terminate Thread (boipt)? "
- ASCII "Execute '.cxr %p' to dump context
- "
- UNICODE "PortableOperatingSystem"
- UNICODE "TimeZoneInformation"
- UNICODE "Bias"
- UNICODE "StandardName"
- UNICODE "StandardBias"
- UNICODE "StandardStart"
- UNICODE "DaylightName"
- UNICODE "DaylightBias"
- UNICODE "DaylightStart"
- UNICODE "TimeZoneKeyName"
- UNICODE "DynamicDaylightTimeDisabled"
- ASCII "*** ASSERT FAILED: Input parameter pwmszLanguage for function RtlGetUILanguageInfo is not a valid multi-string!
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "MachineLanguageConfiguration"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\CMF\SQMData\BootLanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- ASCII "*** ASSERT FAILED: Input parameter LanguagesBuffer for function RtlpSetPreferredUILanguages is not a valid multi-string!
- "
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\NLS\Language"
- UNICODE "InstallLanguageFallback"
- UNICODE "Control Panel\Desktop"
- UNICODE "PreferredUILanguagesPending"
- UNICODE "LanguageConfigurationPending"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "LanguageConfiguration"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "VirtualProtect Failed 0x%08x %x
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "VirtualQuery Failed 0x%08x %x
- "
- UNICODE "Objects>%4u"
- UNICODE "Objects=%4u"
- UNICODE "VirtualAlloc"
- UNICODE "\SystemRoot\bootstat.dat"
- ASCII "busy "
- ASCII "virtual "
- ASCII "UCR "
- ASCII "free "
- ASCII "extra "
- ASCII "fill "
- ASCII "user_flag "
- ASCII "%p %p %p %8lx %p "
- UNICODE "
- \SmApiPort"
- ASCII "Conflicting descriptors %08lx
- "
- ASCII "Unable to allocate page descriptor
- "
- ASCII "Entry User Heap Size Req.Size Flags
- "
- ASCII "------------------------------------------------------------
- "
- ASCII "Error
- "
- ASCII "Not enough memory to complete
- "
- ASCII "%02X-%02X-%02X-%02X-%02X-%02X"
- ASCII ":%u"
- ASCII "%%%u"
- ASCII "]:%u"
- UNICODE "%02X-%02X-%02X-%02X-%02X-%02X"
- UNICODE "\SystemRoot\Globalization\"
- UNICODE ".nlp"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII " Leaked Block 0x%p size 0x%p (stack %p depth %u)
- "
- ASCII "
- *** Unhandled exception 0x%08lx, hit in %ws:%s
- "
- ASCII "
- *** A stack buffer overrun occurred in %ws:%s
- "
- ASCII "This is usually the result of a memory copy to a local buffer or structure where the size is not properly calculated/checked.
- "
- ASCII "If this bug ends up in the shipping product, it could be a severe security hole.
- "
- ASCII "The stack trace should show the guilty function (the function directly above __report_gsfailure).
- "
- ASCII "
- *** Resource timeout (%p) in %ws:%s
- "
- ASCII "The resource is owned exclusively by thread %x
- "
- ASCII "The resource is owned shared by %d threads
- "
- ASCII "The resource is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Critical Section Timeout (%p) in %ws:%s
- "
- ASCII "The critical section is owned by thread %x.
- "
- ASCII "Go determine why that thread has not released the critical section.
- "
- ASCII "The critical section is unowned. This usually implies a slow-moving machine due to memory pressure
- "
- ASCII "
- *** Inpage error in %ws:%s
- "
- ASCII "The instruction at %p referenced memory at %p.
- "
- ASCII "This failed because of error %Ix.
- "
- ASCII "This means that the I/O device reported an I/O error. Check your hardware."
- ASCII "This means the data could not be read, typically because of a bad block on the disk. Check your hardware.
- "
- ASCII "This means the machine is out of memory. Use !vm to see where all the memory is being used.
- "
- ASCII "
- *** An Access Violation occurred in %ws:%s
- "
- ASCII "write to"
- ASCII "read from"
- ASCII "The instruction at %p tried to %s "
- ASCII "an invalid address, %p
- "
- ASCII "a NULL pointer
- "
- ASCII " *** enter .exr %p for the exception record
- "
- ASCII " *** enter .cxr %p for the context
- "
- ASCII " *** then kb to get the faulting stack
- "
- ASCII " *** Restarting wait on critsec or resource at %p (in %ws:%s)
- "
- ASCII "Trace database: failed to release segment %p
- "
- ASCII "Trace database: failing attempt to save biiiiig trace (size %u)
- "
- UNICODE "Control Panel\Desktop"
- UNICODE "Control Panel\Desktop\MuiCached"
- UNICODE "MachinePreferredUILanguages"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\Settings"
- UNICODE "PreferredUILanguages"
- UNICODE "MachineUILock"
- UNICODE "PreferredUILanguages"
- UNICODE "AlternateCodePage"
- UNICODE "WindowsExcludedProcs"
- UNICODE "Kernel-MUI-Number-Allowed"
- UNICODE "Kernel-MUI-Language-Allowed"
- UNICODE "Kernel-MUI-Language-Disallowed"
- UNICODE "Kernel-MUI-Language-SKU"
- ASCII "Entry"
- UNICODE "DefaultFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages"
- UNICODE "Type"
- UNICODE "DefaultFallback"
- UNICODE "\Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete"
- ASCII "Critical error detected %lx
- "
- UNICODE "QueryDebugInformation request"
- ASCII "RtlAllocateHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just allocated block at %p for %Ix bytes
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just allocated block at %p for 0x%Ix bytes with tag %ws
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid allocation size - %Ix (exceeded %Ix)
- "
- ASCII "RtlCompactHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid ReserveSize parameter - %Ix
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid CommitSize parameter - %Ix
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "May not specify Lock parameter with HEAP_NO_SERIALIZE
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Specified HeapBase (%p) invalid, Status = %lx
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Specified HeapBase (%p) != to BaseAddress (%p)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Specified HeapBase (%p) is free or not writable
- "
- ASCII "RtlCreateTagHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "May not destroy the process heap at %p
- "
- ASCII "RtlDestroyHeap"
- ASCII "RtlFreeHeap"
- ASCII "RtlFreeHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to free block at %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to free block at %p with tag %ws
- "
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlQueryTagHeap"
- ASCII "RtlReAllocateHeap"
- ASCII "RtlReAllocateHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to reallocate block at %p to %Ix bytes
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "About to rellocate block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just reallocated block at %p to %Ix bytes
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Just reallocated block at %p to 0x%Ix bytes with tag %ws
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Invalid allocation size - %Ix (exceeded %Ix)
- "
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSizeHeap"
- ASCII "RtlSizeHeap"
- ASCII "RtlWalkHeap"
- ASCII "RtlZeroHeap"
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Non-Dedicated free list element %p is out of order
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "dedicated (%04Ix) free list element %p is marked busy
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Number of free blocks in arena (%ld) does not match number in the free lists (%ld)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Total size of free blocks in arena (%Id) does not match number total in heap header (%Id)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Pseudo Tag %04x size incorrect (%Ix != %Ix) %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Tag %04x (%ws) size incorrect (%Ix != %Ix) %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap %p - headers modified (%p is %lx instead of %lx)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII " This is located in the %s field of the heap header.
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Free Heap block %p modified at %p after it was freed
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p has corrupted PreviousSize (%lx)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p is not last block in segment (%p)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap block at %p has incorrect segment offset (%x)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap entry %p has incorrect PreviousSize field (%04x instead of %04x)
- "
- ASCII "HEAP: "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)
- "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)
- "
- ASCII "HEAP: "
- ASCII "HEAP[%wZ]: "
- ASCII "HEAP: "
- ASCII "Heap error detected at %p (heap handle %p)
- "
- ASCII "heap_failure_internal"
- ASCII "heap_failure_unknown"
- ASCII "heap_failure_generic"
- ASCII "heap_failure_entry_corruption"
- ASCII "heap_failure_multiple_entries_corruption"
- ASCII "heap_failure_virtual_block_corruption"
- ASCII "heap_failure_buffer_overrun"
- ASCII "heap_failure_buffer_underrun"
- ASCII "heap_failure_block_not_busy"
- ASCII "heap_failure_invalid_argument"
- ASCII "heap_failure_usage_after_free"
- ASCII "heap_failure_cross_heap_operation"
- ASCII "heap_failure_freelists_corruption"
- ASCII "heap_failure_listentry_corruption"
- ASCII "heap_failure_lfh_bitmap_mismatch"
- ASCII "HEAP[%wZ]: "
- ASCII "Error code: %d - %s
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Parameter1: %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Parameter2: %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Parameter3: %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Last known valid blocks: before - %p, after - %p
- "
- ASCII "HEAP[%wZ]: "
- ASCII "Stack trace available at %p
- "
- ASCII "Enabling heap debug options
- "
- UNICODE "%d"
- UNICODE "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
- UNICODE "BuildLabEx"
- ASCII ".sb_data"
- ASCII "*** RESCACHE: Segment %u magic field is corrupt!!! ***
- "
- ASCII "*** --------> Follow-up: avgarcia;erik;muidev ***
- "
- ASCII "*** RESCACHE: Segment %u is no longer valid. It may have been unmapped already!!! ***
- "
- ASCII "*** --------> Follow-up: avgarcia;erik;muidev ***
- "
- UNICODE "\??\%C:"
- UNICODE "System\CurrentControlSet\Control\CMF\LatestIndex"
- UNICODE ".init"
- UNICODE "%s%s"
- UNICODE "*.*"
- UNICODE "rc"
- UNICODE "%s\%s"
- UNICODE "CmfHits"
- UNICODE "%s%04d-%s"
- UNICODE "ResCache.hit"
- UNICODE "rc"
- UNICODE "%s\%s%04d\%s"
- UNICODE ".tmp"
- UNICODE "Upd"
- UNICODE "%s\%s%04d%s"
- UNICODE "Segment"
- UNICODE ".toc"
- UNICODE "Segment"
- UNICODE ".cmf"
- UNICODE "Directory"
- UNICODE ".init"
- UNICODE "Directory"
- UNICODE "%s%04d-%s%s"
- UNICODE ".owner"
- UNICODE "ResCache.dir"
- UNICODE ".init"
- UNICODE "rc"
- UNICODE "Global\%s/%s%04d%s"
- UNICODE ".owner"
- UNICODE "rc"
- UNICODE "%s\%s%04d"
- UNICODE "rc"
- UNICODE "%s\%s%04d\%s*%s"
- UNICODE ".owner"
- UNICODE "%s%s%d%s"
- UNICODE ".init"
- UNICODE "%s%s%d"
- UNICODE "%s\%s%d%s"
- UNICODE "%s"
- UNICODE ".owner"
- UNICODE "Global\%s/base%s"
- UNICODE "rc"
- UNICODE "%s\%s*"
- UNICODE "ResCache.ccm"
- UNICODE "ResCache.mni"
- UNICODE "ResCache.dir"
- UNICODE "%s\*\%s"
- UNICODE "ResCache.dir"
- UNICODE "Directory"
- UNICODE ".cmf"
- UNICODE "Segment"
- UNICODE "%s\%s*%s"
- UNICODE ".toc"
- UNICODE "ResCache.hit"
- UNICODE "ResCache.hit"
- UNICODE "CmfHits"
- UNICODE "ResCache.usg"
- UNICODE ".owner"
- UNICODE "wip"
- UNICODE "Global\%s%s%s"
- UNICODE "wip"
- UNICODE "%s\%s"
- UNICODE ".tmp"
- UNICODE "Upd"
- UNICODE "%s\"
- UNICODE "upd"
- UNICODE "tmp"
- UNICODE "upd"
- UNICODE "%s\%s\%s"
- UNICODE "Rdy-"
- UNICODE "Upd-"
- UNICODE "%s%s"
- UNICODE "%s\%s"
- UNICODE "%s%s"
- UNICODE ".cmf"
- UNICODE "Segment"
- UNICODE "rc"
- UNICODE "%s\%s%04d\%s%d%s"
- ASCII "ntdll.dll"
- ASCII "RtlActivateActivationContextUnsafeFast"
- ASCII "RtlDeactivateActivationContextUnsafeFast"
- ASCII "RtlInterlockedPushListSList"
- ASCII "RtlUlongByteSwap"
- ASCII "RtlUlonglongByteSwap"
- ASCII "RtlUshortByteSwap"
- ASCII "ExpInterlockedPopEntrySListEnd"
- ASCII "ExpInterlockedPopEntrySListFault"
- ASCII "ExpInterlockedPopEntrySListResume"
- ASCII "A_SHAFinal"
- ASCII "A_SHAInit"
- ASCII "A_SHAUpdate"
- ASCII "AlpcAdjustCompletionListConcurrencyCount"
- ASCII "AlpcFreeCompletionListMessage"
- ASCII "AlpcGetCompletionListLastMessageInformation"
- ASCII "AlpcGetCompletionListMessageAttributes"
- ASCII "AlpcGetHeaderSize"
- ASCII "AlpcGetMessageAttribute"
- ASCII "AlpcGetMessageFromCompletionList"
- ASCII "AlpcGetOutstandingCompletionListMessageCount"
- ASCII "AlpcInitializeMessageAttribute"
- ASCII "AlpcMaxAllowedMessageLength"
- ASCII "AlpcRegisterCompletionList"
- ASCII "AlpcRegisterCompletionListWorkerThread"
- ASCII "AlpcRundownCompletionList"
- ASCII "AlpcUnregisterCompletionList"
- ASCII "AlpcUnregisterCompletionListWorkerThread"
- ASCII "ApiSetQueryApiSetPresence"
- ASCII "CsrAllocateCaptureBuffer"
- ASCII "CsrAllocateMessagePointer"
- ASCII "CsrCaptureMessageBuffer"
- ASCII "CsrCaptureMessageMultiUnicodeStringsInPlace"
- ASCII "CsrCaptureMessageString"
- ASCII "CsrCaptureTimeout"
- ASCII "CsrClientCallServer"
- ASCII "CsrClientConnectToServer"
- ASCII "CsrFreeCaptureBuffer"
- ASCII "CsrGetProcessId"
- ASCII "CsrIdentifyAlertableThread"
- ASCII "CsrSetPriorityClass"
- ASCII "CsrVerifyRegion"
- ASCII "DbgBreakPoint"
- ASCII "DbgPrint"
- ASCII "DbgPrintEx"
- ASCII "DbgPrintReturnControlC"
- ASCII "DbgPrompt"
- ASCII "DbgQueryDebugFilterState"
- ASCII "DbgSetDebugFilterState"
- ASCII "DbgUiConnectToDbg"
- ASCII "DbgUiContinue"
- ASCII "DbgUiConvertStateChangeStructure"
- ASCII "DbgUiDebugActiveProcess"
- ASCII "DbgUiGetThreadDebugObject"
- ASCII "DbgUiIssueRemoteBreakin"
- ASCII "DbgUiRemoteBreakin"
- ASCII "DbgUiSetThreadDebugObject"
- ASCII "DbgUiStopDebugging"
- ASCII "DbgUiWaitStateChange"
- ASCII "DbgUserBreakPoint"
- ASCII "EtwCreateTraceInstanceId"
- ASCII "EtwDeliverDataBlock"
- ASCII "EtwEnumerateProcessRegGuids"
- ASCII "EtwEventActivityIdControl"
- ASCII "EtwEventEnabled"
- ASCII "EtwEventProviderEnabled"
- ASCII "EtwEventRegister"
- ASCII "EtwEventSetInformation"
- ASCII "EtwEventUnregister"
- ASCII "EtwEventWrite"
- ASCII "EtwEventWriteEndScenario"
- ASCII "EtwEventWriteEx"
- ASCII "EtwEventWriteFull"
- ASCII "EtwEventWriteNoRegistration"
- ASCII "EtwEventWriteStartScenario"
- ASCII "EtwEventWriteString"
- ASCII "EtwEventWriteTransfer"
- ASCII "EtwGetTraceEnableFlags"
- ASCII "EtwGetTraceEnableLevel"
- ASCII "EtwGetTraceLoggerHandle"
- ASCII "EtwLogTraceEvent"
- ASCII "EtwNotificationRegister"
- ASCII "EtwNotificationUnregister"
- ASCII "EtwProcessPrivateLoggerRequest"
- ASCII "EtwRegisterSecurityProvider"
- ASCII "EtwRegisterTraceGuidsA"
- ASCII "EtwRegisterTraceGuidsW"
- ASCII "EtwReplyNotification"
- ASCII "EtwSendNotification"
- ASCII "EtwSetMark"
- ASCII "EtwTraceEventInstance"
- ASCII "EtwTraceMessage"
- ASCII "EtwTraceMessageVa"
- ASCII "EtwUnregisterTraceGuids"
- ASCII "EtwWriteUMSecurityEvent"
- ASCII "EtwpCreateEtwThread"
- ASCII "EtwpGetCpuSpeed"
- ASCII "EvtIntReportAuthzEventAndSourceAsync"
- ASCII "EvtIntReportEventAndSourceAsync"
- ASCII "KiFastSystemCall"
- ASCII "KiFastSystemCallRet"
- ASCII "KiIntSystemCall"
- ASCII "KiRaiseUserExceptionDispatcher"
- ASCII "KiUserApcDispatcher"
- ASCII "KiUserCallbackDispatcher"
- ASCII "KiUserExceptionDispatcher"
- ASCII "LdrAccessResource"
- ASCII "LdrAddDllDirectory"
- ASCII "LdrAddLoadAsDataTable"
- ASCII "LdrAddRefDll"
- ASCII "LdrAppxHandleIntegrityFailure"
- ASCII "LdrDisableThreadCalloutsForDll"
- ASCII "LdrEnumResources"
- ASCII "LdrEnumerateLoadedModules"
- ASCII "LdrFindEntryForAddress"
- ASCII "LdrFindResourceDirectory_U"
- ASCII "LdrFindResourceEx_U"
- ASCII "LdrFindResource_U"
- ASCII "LdrFlushAlternateResourceModules"
- ASCII "LdrGetDllDirectory"
- ASCII "LdrGetDllFullName"
- ASCII "LdrGetDllHandle"
- ASCII "LdrGetDllHandleByMapping"
- ASCII "LdrGetDllHandleByName"
- ASCII "LdrGetDllHandleEx"
- ASCII "LdrGetDllPath"
- ASCII "LdrGetFailureData"
- ASCII "LdrGetFileNameFromLoadAsDataTable"
- ASCII "LdrGetProcedureAddress"
- ASCII "LdrGetProcedureAddressEx"
- ASCII "LdrGetProcedureAddressForCaller"
- ASCII "LdrInitShimEngineDynamic"
- ASCII "LdrInitializeThunk"
- ASCII "LdrLoadAlternateResourceModule"
- ASCII "LdrLoadAlternateResourceModuleEx"
- ASCII "LdrLoadDll"
- ASCII "LdrLockLoaderLock"
- ASCII "LdrOpenImageFileOptionsKey"
- ASCII "LdrProcessRelocationBlock"
- ASCII "LdrProcessRelocationBlockEx"
- ASCII "LdrQueryImageFileExecutionOptions"
- ASCII "LdrQueryImageFileExecutionOptionsEx"
- ASCII "LdrQueryImageFileKeyOption"
- ASCII "LdrQueryModuleServiceTags"
- ASCII "LdrQueryOptionalDelayLoadedAPI"
- ASCII "LdrQueryProcessModuleInformation"
- ASCII "LdrRegisterDllNotification"
- ASCII "LdrRemoveDllDirectory"
- ASCII "LdrRemoveLoadAsDataTable"
- ASCII "LdrResFindResource"
- ASCII "LdrResFindResourceDirectory"
- ASCII "LdrResGetRCConfig"
- ASCII "LdrResRelease"
- ASCII "LdrResSearchResource"
- ASCII "LdrResolveDelayLoadedAPI"
- ASCII "LdrResolveDelayLoadsFromDll"
- ASCII "LdrRscIsTypeExist"
- ASCII "LdrSetAppCompatDllRedirectionCallback"
- ASCII "LdrSetDefaultDllDirectories"
- ASCII "LdrSetDllDirectory"
- ASCII "LdrSetDllManifestProber"
- ASCII "LdrSetImplicitPathOptions"
- ASCII "LdrSetMUICacheType"
- ASCII "LdrShutdownProcess"
- ASCII "LdrShutdownThread"
- ASCII "LdrStandardizeSystemPath"
- ASCII "LdrSystemDllInitBlock"
- ASCII "LdrUnloadAlternateResourceModule"
- ASCII "LdrUnloadAlternateResourceModuleEx"
- ASCII "LdrUnloadDll"
- ASCII "LdrUnlockLoaderLock"
- ASCII "LdrUnregisterDllNotification"
- ASCII "LdrVerifyImageMatchesChecksum"
- ASCII "LdrVerifyImageMatchesChecksumEx"
- ASCII "LdrpResGetMappingSize"
- ASCII "LdrpResGetResourceDirectory"
- ASCII "MD4Final"
- ASCII "MD4Init"
- ASCII "MD4Update"
- ASCII "MD5Final"
- ASCII "MD5Init"
- ASCII "MD5Update"
- ASCII "NlsAnsiCodePage"
- ASCII "NlsMbCodePageTag"
- ASCII "NlsMbOemCodePageTag"
- ASCII "NtAcceptConnectPort"
- ASCII "NtAccessCheck"
- ASCII "NtAccessCheckAndAuditAlarm"
- ASCII "NtAccessCheckByType"
- ASCII "NtAccessCheckByTypeAndAuditAlarm"
- ASCII "NtAccessCheckByTypeResultList"
- ASCII "NtAccessCheckByTypeResultListAndAuditAlarm"
- ASCII "NtAccessCheckByTypeResultListAndAuditAlarmByHandle"
- ASCII "NtAddAtom"
- ASCII "NtAddAtomEx"
- ASCII "NtAddBootEntry"
- ASCII "NtAddDriverEntry"
- ASCII "NtAdjustGroupsToken"
- ASCII "NtAdjustPrivilegesToken"
- ASCII "NtAdjustTokenClaimsAndDeviceGroups"
- ASCII "NtAlertResumeThread"
- ASCII "NtAlertThread"
- ASCII "NtAlertThreadByThreadId"
- ASCII "NtAllocateLocallyUniqueId"
- ASCII "NtAllocateReserveObject"
- ASCII "NtAllocateUserPhysicalPages"
- ASCII "NtAllocateUuids"
- ASCII "NtAllocateVirtualMemory"
- ASCII "NtAlpcAcceptConnectPort"
- ASCII "NtAlpcCancelMessage"
- ASCII "NtAlpcConnectPort"
- ASCII "NtAlpcConnectPortEx"
- ASCII "NtAlpcCreatePort"
- ASCII "NtAlpcCreatePortSection"
- ASCII "NtAlpcCreateResourceReserve"
- ASCII "NtAlpcCreateSectionView"
- ASCII "NtAlpcCreateSecurityContext"
- ASCII "NtAlpcDeletePortSection"
- ASCII "NtAlpcDeleteResourceReserve"
- ASCII "NtAlpcDeleteSectionView"
- ASCII "NtAlpcDeleteSecurityContext"
- ASCII "NtAlpcDisconnectPort"
- ASCII "NtAlpcImpersonateClientOfPort"
- ASCII "NtAlpcOpenSenderProcess"
- ASCII "NtAlpcOpenSenderThread"
- ASCII "NtAlpcQueryInformation"
- ASCII "NtAlpcQueryInformationMessage"
- ASCII "NtAlpcRevokeSecurityContext"
- ASCII "NtAlpcSendWaitReceivePort"
- ASCII "NtAlpcSetInformation"
- ASCII "NtApphelpCacheControl"
- ASCII "NtAreMappedFilesTheSame"
- ASCII "NtAssignProcessToJobObject"
- ASCII "NtAssociateWaitCompletionPacket"
- ASCII "NtCallbackReturn"
- ASCII "NtCancelIoFile"
- ASCII "NtCancelIoFileEx"
- ASCII "NtCancelSynchronousIoFile"
- ASCII "NtCancelTimer2"
- ASCII "NtCancelTimer"
- ASCII "NtCancelWaitCompletionPacket"
- ASCII "NtClearEvent"
- ASCII "NtClose"
- ASCII "NtCloseObjectAuditAlarm"
- ASCII "NtCommitComplete"
- ASCII "NtCommitEnlistment"
- ASCII "NtCommitTransaction"
- ASCII "NtCompactKeys"
- ASCII "NtCompareTokens"
- ASCII "NtCompleteConnectPort"
- ASCII "NtCompressKey"
- ASCII "NtConnectPort"
- ASCII "NtContinue"
- ASCII "NtCreateDebugObject"
- ASCII "NtCreateDirectoryObject"
- ASCII "NtCreateDirectoryObjectEx"
- ASCII "NtCreateEnlistment"
- ASCII "NtCreateEvent"
- ASCII "NtCreateEventPair"
- ASCII "NtCreateFile"
- ASCII "NtCreateIRTimer"
- ASCII "NtCreateIoCompletion"
- ASCII "NtCreateJobObject"
- ASCII "NtCreateJobSet"
- ASCII "NtCreateKey"
- ASCII "NtCreateKeyTransacted"
- ASCII "NtCreateKeyedEvent"
- ASCII "NtCreateLowBoxToken"
- ASCII "NtCreateMailslotFile"
- ASCII "NtCreateMutant"
- ASCII "NtCreateNamedPipeFile"
- ASCII "NtCreatePagingFile"
- ASCII "NtCreatePort"
- ASCII "NtCreatePrivateNamespace"
- ASCII "NtCreateProcess"
- ASCII "NtCreateProcessEx"
- ASCII "NtCreateProfile"
- ASCII "NtCreateProfileEx"
- ASCII "NtCreateResourceManager"
- ASCII "NtCreateSection"
- ASCII "NtCreateSemaphore"
- ASCII "NtCreateSymbolicLinkObject"
- ASCII "NtCreateThread"
- ASCII "NtCreateThreadEx"
- ASCII "NtCreateTimer2"
- ASCII "NtCreateTimer"
- ASCII "NtCreateToken"
- ASCII "NtCreateTokenEx"
- ASCII "NtCreateTransaction"
- ASCII "NtCreateTransactionManager"
- ASCII "NtCreateUserProcess"
- ASCII "NtCreateWaitCompletionPacket"
- ASCII "NtCreateWaitablePort"
- ASCII "NtCreateWnfStateName"
- ASCII "NtCreateWorkerFactory"
- ASCII "NtCurrentTeb"
- ASCII "NtDebugActiveProcess"
- ASCII "NtDebugContinue"
- ASCII "NtDelayExecution"
- ASCII "NtDeleteAtom"
- ASCII "NtDeleteBootEntry"
- ASCII "NtDeleteDriverEntry"
- ASCII "NtDeleteFile"
- ASCII "NtDeleteKey"
- ASCII "NtDeleteObjectAuditAlarm"
- ASCII "NtDeletePrivateNamespace"
- ASCII "NtDeleteValueKey"
- ASCII "NtDeleteWnfStateData"
- ASCII "NtDeleteWnfStateName"
- ASCII "NtDeviceIoControlFile"
- ASCII "NtDisableLastKnownGood"
- ASCII "NtDisplayString"
- ASCII "NtDrawText"
- ASCII "NtDuplicateObject"
- ASCII "NtDuplicateToken"
- ASCII "NtEnableLastKnownGood"
- ASCII "NtEnumerateBootEntries"
- ASCII "NtEnumerateDriverEntries"
- ASCII "NtEnumerateKey"
- ASCII "NtEnumerateSystemEnvironmentValuesEx"
- ASCII "NtEnumerateTransactionObject"
- ASCII "NtEnumerateValueKey"
- ASCII "NtExtendSection"
- ASCII "NtFilterBootOption"
- ASCII "NtFilterToken"
- ASCII "NtFilterTokenEx"
- ASCII "NtFindAtom"
- ASCII "NtFlushBuffersFile"
- ASCII "NtFlushBuffersFileEx"
- ASCII "NtFlushInstallUILanguage"
- ASCII "NtFlushInstructionCache"
- ASCII "NtFlushKey"
- ASCII "NtFlushProcessWriteBuffers"
- ASCII "NtFlushVirtualMemory"
- ASCII "NtFlushWriteBuffer"
- ASCII "NtFreeUserPhysicalPages"
- ASCII "NtFreeVirtualMemory"
- ASCII "NtFreezeRegistry"
- ASCII "NtFreezeTransactions"
- ASCII "NtFsControlFile"
- ASCII "NtGetCachedSigningLevel"
- ASCII "NtGetCompleteWnfStateSubscription"
- ASCII "NtGetContextThread"
- ASCII "NtGetCurrentProcessorNumber"
- ASCII "NtGetDevicePowerState"
- ASCII "NtGetMUIRegistryInfo"
- ASCII "NtGetNextProcess"
- ASCII "NtGetNextThread"
- ASCII "NtGetNlsSectionPtr"
- ASCII "NtGetNotificationResourceManager"
- ASCII "NtGetTickCount"
- ASCII "NtGetWriteWatch"
- ASCII "NtImpersonateAnonymousToken"
- ASCII "NtImpersonateClientOfPort"
- ASCII "NtImpersonateThread"
- ASCII "NtInitializeNlsFiles"
- ASCII "NtInitializeRegistry"
- ASCII "NtInitiatePowerAction"
- ASCII "NtIsProcessInJob"
- ASCII "NtIsSystemResumeAutomatic"
- ASCII "NtIsUILanguageComitted"
- ASCII "NtListenPort"
- ASCII "NtLoadDriver"
- ASCII "NtLoadKey2"
- ASCII "NtLoadKey"
- ASCII "NtLoadKeyEx"
- ASCII "NtLockFile"
- ASCII "NtLockProductActivationKeys"
- ASCII "NtLockRegistryKey"
- ASCII "NtLockVirtualMemory"
- ASCII "NtMakePermanentObject"
- ASCII "NtMakeTemporaryObject"
- ASCII "NtMapCMFModule"
- ASCII "NtMapUserPhysicalPages"
- ASCII "NtMapUserPhysicalPagesScatter"
- ASCII "NtMapViewOfSection"
- ASCII "NtModifyBootEntry"
- ASCII "NtModifyDriverEntry"
- ASCII "NtNotifyChangeDirectoryFile"
- ASCII "NtNotifyChangeKey"
- ASCII "NtNotifyChangeMultipleKeys"
- ASCII "NtNotifyChangeSession"
- ASCII "NtOpenDirectoryObject"
- ASCII "NtOpenEnlistment"
- ASCII "NtOpenEvent"
- ASCII "NtOpenEventPair"
- ASCII "NtOpenFile"
- ASCII "NtOpenIoCompletion"
- ASCII "NtOpenJobObject"
- ASCII "NtOpenKey"
- ASCII "NtOpenKeyEx"
- ASCII "NtOpenKeyTransacted"
- ASCII "NtOpenKeyTransactedEx"
- ASCII "NtOpenKeyedEvent"
- ASCII "NtOpenMutant"
- ASCII "NtOpenObjectAuditAlarm"
- ASCII "NtOpenPrivateNamespace"
- ASCII "NtOpenProcess"
- ASCII "NtOpenProcessToken"
- ASCII "NtOpenProcessTokenEx"
- ASCII "NtOpenResourceManager"
- ASCII "NtOpenSection"
- ASCII "NtOpenSemaphore"
- ASCII "NtOpenSession"
- ASCII "NtOpenSymbolicLinkObject"
- ASCII "NtOpenThread"
- ASCII "NtOpenThreadToken"
- ASCII "NtOpenThreadTokenEx"
- ASCII "NtOpenTimer"
- ASCII "NtOpenTransaction"
- ASCII "NtOpenTransactionManager"
- ASCII "NtPlugPlayControl"
- ASCII "NtPowerInformation"
- ASCII "NtPrePrepareComplete"
- ASCII "NtPrePrepareEnlistment"
- ASCII "NtPrepareComplete"
- ASCII "NtPrepareEnlistment"
- ASCII "NtPrivilegeCheck"
- ASCII "NtPrivilegeObjectAuditAlarm"
- ASCII "NtPrivilegedServiceAuditAlarm"
- ASCII "NtPropagationComplete"
- ASCII "NtPropagationFailed"
- ASCII "NtProtectVirtualMemory"
- ASCII "NtPulseEvent"
- ASCII "NtQueryAttributesFile"
- ASCII "NtQueryBootEntryOrder"
- ASCII "NtQueryBootOptions"
- ASCII "NtQueryDebugFilterState"
- ASCII "NtQueryDefaultLocale"
- ASCII "NtQueryDefaultUILanguage"
- ASCII "NtQueryDirectoryFile"
- ASCII "NtQueryDirectoryObject"
- ASCII "NtQueryDriverEntryOrder"
- ASCII "NtQueryEaFile"
- ASCII "NtQueryEvent"
- ASCII "NtQueryFullAttributesFile"
- ASCII "NtQueryInformationAtom"
- ASCII "NtQueryInformationEnlistment"
- ASCII "NtQueryInformationFile"
- ASCII "NtQueryInformationJobObject"
- ASCII "NtQueryInformationPort"
- ASCII "NtQueryInformationProcess"
- ASCII "NtQueryInformationResourceManager"
- ASCII "NtQueryInformationThread"
- ASCII "NtQueryInformationToken"
- ASCII "NtQueryInformationTransaction"
- ASCII "NtQueryInformationTransactionManager"
- ASCII "NtQueryInformationWorkerFactory"
- ASCII "NtQueryInstallUILanguage"
- ASCII "NtQueryIntervalProfile"
- ASCII "NtQueryIoCompletion"
- ASCII "NtQueryKey"
- ASCII "NtQueryLicenseValue"
- ASCII "NtQueryMultipleValueKey"
- ASCII "NtQueryMutant"
- ASCII "NtQueryObject"
- ASCII "NtQueryOpenSubKeys"
- ASCII "NtQueryOpenSubKeysEx"
- ASCII "NtQueryPerformanceCounter"
- ASCII "NtQueryPortInformationProcess"
- ASCII "NtQueryQuotaInformationFile"
- ASCII "NtQuerySection"
- ASCII "NtQuerySecurityAttributesToken"
- ASCII "NtQuerySecurityObject"
- ASCII "NtQuerySemaphore"
- ASCII "NtQuerySymbolicLinkObject"
- ASCII "NtQuerySystemEnvironmentValue"
- ASCII "NtQuerySystemEnvironmentValueEx"
- ASCII "NtQuerySystemInformation"
- ASCII "NtQuerySystemInformationEx"
- ASCII "NtQuerySystemTime"
- ASCII "NtQueryTimer"
- ASCII "NtQueryTimerResolution"
- ASCII "NtQueryValueKey"
- ASCII "NtQueryVirtualMemory"
- ASCII "NtQueryVolumeInformationFile"
- ASCII "NtQueryWnfStateData"
- ASCII "NtQueryWnfStateNameInformation"
- ASCII "NtQueueApcThread"
- ASCII "NtQueueApcThreadEx"
- ASCII "NtRaiseException"
- ASCII "NtRaiseHardError"
- ASCII "NtReadFile"
- ASCII "NtReadFileScatter"
- ASCII "NtReadOnlyEnlistment"
- ASCII "NtReadRequestData"
- ASCII "NtReadVirtualMemory"
- ASCII "NtRecoverEnlistment"
- ASCII "NtRecoverResourceManager"
- ASCII "NtRecoverTransactionManager"
- ASCII "NtRegisterProtocolAddressInformation"
- ASCII "NtRegisterThreadTerminatePort"
- ASCII "NtReleaseKeyedEvent"
- ASCII "NtReleaseMutant"
- ASCII "NtReleaseSemaphore"
- ASCII "NtReleaseWorkerFactoryWorker"
- ASCII "NtRemoveIoCompletion"
- ASCII "NtRemoveIoCompletionEx"
- ASCII "NtRemoveProcessDebug"
- ASCII "NtRenameKey"
- ASCII "NtRenameTransactionManager"
- ASCII "NtReplaceKey"
- ASCII "NtReplacePartitionUnit"
- ASCII "NtReplyPort"
- ASCII "NtReplyWaitReceivePort"
- ASCII "NtReplyWaitReceivePortEx"
- ASCII "NtReplyWaitReplyPort"
- ASCII "NtRequestPort"
- ASCII "NtRequestWaitReplyPort"
- ASCII "NtResetEvent"
- ASCII "NtResetWriteWatch"
- ASCII "NtRestoreKey"
- ASCII "NtResumeProcess"
- ASCII "NtResumeThread"
- ASCII "NtRollbackComplete"
- ASCII "NtRollbackEnlistment"
- ASCII "NtRollbackTransaction"
- ASCII "NtRollforwardTransactionManager"
- ASCII "NtSaveKey"
- ASCII "NtSaveKeyEx"
- ASCII "NtSaveMergedKeys"
- ASCII "NtSecureConnectPort"
- ASCII "NtSerializeBoot"
- ASCII "NtSetBootEntryOrder"
- ASCII "NtSetBootOptions"
- ASCII "NtSetCachedSigningLevel"
- ASCII "NtSetContextThread"
- ASCII "NtSetDebugFilterState"
- ASCII "NtSetDefaultHardErrorPort"
- ASCII "NtSetDefaultLocale"
- ASCII "NtSetDefaultUILanguage"
- ASCII "NtSetDriverEntryOrder"
- ASCII "NtSetEaFile"
- ASCII "NtSetEvent"
- ASCII "NtSetEventBoostPriority"
- ASCII "NtSetHighEventPair"
- ASCII "NtSetHighWaitLowEventPair"
- ASCII "NtSetIRTimer"
- ASCII "NtSetInformationDebugObject"
- ASCII "NtSetInformationEnlistment"
- ASCII "NtSetInformationFile"
- ASCII "NtSetInformationJobObject"
- ASCII "NtSetInformationKey"
- ASCII "NtSetInformationObject"
- ASCII "NtSetInformationProcess"
- ASCII "NtSetInformationResourceManager"
- ASCII "NtSetInformationThread"
- ASCII "NtSetInformationToken"
- ASCII "NtSetInformationTransaction"
- ASCII "NtSetInformationTransactionManager"
- ASCII "NtSetInformationVirtualMemory"
- ASCII "NtSetInformationWorkerFactory"
- ASCII "NtSetIntervalProfile"
- ASCII "NtSetIoCompletion"
- ASCII "NtSetIoCompletionEx"
- ASCII "NtSetLdtEntries"
- ASCII "NtSetLowEventPair"
- ASCII "NtSetLowWaitHighEventPair"
- ASCII "NtSetQuotaInformationFile"
- ASCII "NtSetSecurityObject"
- ASCII "NtSetSystemEnvironmentValue"
- ASCII "NtSetSystemEnvironmentValueEx"
- ASCII "NtSetSystemInformation"
- ASCII "NtSetSystemPowerState"
- ASCII "NtSetSystemTime"
- ASCII "NtSetThreadExecutionState"
- ASCII "NtSetTimer2"
- ASCII "NtSetTimer"
- ASCII "NtSetTimerEx"
- ASCII "NtSetTimerResolution"
- ASCII "NtSetUuidSeed"
- ASCII "NtSetValueKey"
- ASCII "NtSetVolumeInformationFile"
- ASCII "NtSetWnfProcessNotificationEvent"
- ASCII "NtShutdownSystem"
- ASCII "NtShutdownWorkerFactory"
- ASCII "NtSignalAndWaitForSingleObject"
- ASCII "NtSinglePhaseReject"
- ASCII "NtStartProfile"
- ASCII "NtStopProfile"
- ASCII "NtSubscribeWnfStateChange"
- ASCII "NtSuspendProcess"
- ASCII "NtSuspendThread"
- ASCII "NtSystemDebugControl"
- ASCII "NtTerminateJobObject"
- ASCII "NtTerminateProcess"
- ASCII "NtTerminateThread"
- ASCII "NtTestAlert"
- ASCII "NtThawRegistry"
- ASCII "NtThawTransactions"
- ASCII "NtTraceControl"
- ASCII "NtTraceEvent"
- ASCII "NtTranslateFilePath"
- ASCII "NtUmsThreadYield"
- ASCII "NtUnloadDriver"
- ASCII "NtUnloadKey2"
- ASCII "NtUnloadKey"
- ASCII "NtUnloadKeyEx"
- ASCII "NtUnlockFile"
- ASCII "NtUnlockVirtualMemory"
- ASCII "NtUnmapViewOfSection"
- ASCII "NtUnmapViewOfSectionEx"
- ASCII "NtUnsubscribeWnfStateChange"
- ASCII "NtUpdateWnfStateData"
- ASCII "NtVdmControl"
- ASCII "NtWaitForAlertByThreadId"
- ASCII "NtWaitForDebugEvent"
- ASCII "NtWaitForKeyedEvent"
- ASCII "NtWaitForMultipleObjects32"
- ASCII "NtWaitForMultipleObjects"
- ASCII "NtWaitForSingleObject"
- ASCII "NtWaitForWorkViaWorkerFactory"
- ASCII "NtWaitHighEventPair"
- ASCII "NtWaitLowEventPair"
- ASCII "NtWorkerFactoryWorkerReady"
- ASCII "NtWriteFile"
- ASCII "NtWriteFileGather"
- ASCII "NtWriteRequestData"
- ASCII "NtWriteVirtualMemory"
- ASCII "NtYieldExecution"
- ASCII "NtdllDefWindowProc_A"
- ASCII "NtdllDefWindowProc_W"
- ASCII "NtdllDialogWndProc_A"
- ASCII "NtdllDialogWndProc_W"
- ASCII "PfxFindPrefix"
- ASCII "PfxInitialize"
- ASCII "PfxInsertPrefix"
- ASCII "PfxRemovePrefix"
- ASCII "PssNtCaptureSnapshot"
- ASCII "PssNtDuplicateSnapshot"
- ASCII "PssNtFreeRemoteSnapshot"
- ASCII "PssNtFreeSnapshot"
- ASCII "PssNtFreeWalkMarker"
- ASCII "PssNtQuerySnapshot"
- ASCII "PssNtValidateDescriptor"
- ASCII "PssNtWalkSnapshot"
- ASCII "RtlAbortRXact"
- ASCII "RtlAbsoluteToSelfRelativeSD"
- ASCII "RtlAcquirePebLock"
- ASCII "RtlAcquirePrivilege"
- ASCII "RtlAcquireReleaseSRWLockExclusive"
- ASCII "RtlAcquireResourceExclusive"
- ASCII "RtlAcquireResourceShared"
- ASCII "RtlAcquireSRWLockExclusive"
- ASCII "RtlAcquireSRWLockShared"
- ASCII "RtlActivateActivationContext"
- ASCII "RtlActivateActivationContextEx"
- ASCII "RtlAddAccessAllowedAce"
- ASCII "RtlAddAccessAllowedAceEx"
- ASCII "RtlAddAccessAllowedObjectAce"
- ASCII "RtlAddAccessDeniedAce"
- ASCII "RtlAddAccessDeniedAceEx"
- ASCII "RtlAddAccessDeniedObjectAce"
- ASCII "RtlAddAce"
- ASCII "RtlAddActionToRXact"
- ASCII "RtlAddAtomToAtomTable"
- ASCII "RtlAddAttributeActionToRXact"
- ASCII "RtlAddAuditAccessAce"
- ASCII "RtlAddAuditAccessAceEx"
- ASCII "RtlAddAuditAccessObjectAce"
- ASCII "RtlAddCompoundAce"
- ASCII "RtlAddIntegrityLabelToBoundaryDescriptor"
- ASCII "RtlAddMandatoryAce"
- ASCII "RtlAddProcessTrustLabelAce"
- ASCII "RtlAddRefActivationContext"
- ASCII "RtlAddRefMemoryStream"
- ASCII "RtlAddResourceAttributeAce"
- ASCII "RtlAddSIDToBoundaryDescriptor"
- ASCII "RtlAddScopedPolicyIDAce"
- ASCII "RtlAddVectoredContinueHandler"
- ASCII "RtlAddVectoredExceptionHandler"
- ASCII "RtlAddressInSectionTable"
- ASCII "RtlAdjustPrivilege"
- ASCII "RtlAllocateActivationContextStack"
- ASCII "RtlAllocateAndInitializeSid"
- ASCII "RtlAllocateAndInitializeSidEx"
- ASCII "RtlAllocateHandle"
- ASCII "RtlAllocateHeap"
- ASCII "RtlAllocateMemoryBlockLookaside"
- ASCII "RtlAllocateMemoryZone"
- ASCII "RtlAllocateWnfSerializationGroup"
- ASCII "RtlAnsiCharToUnicodeChar"
- ASCII "RtlAnsiStringToUnicodeSize"
- ASCII "RtlAnsiStringToUnicodeString"
- ASCII "RtlAppendAsciizToString"
- ASCII "RtlAppendPathElement"
- ASCII "RtlAppendStringToString"
- ASCII "RtlAppendUnicodeStringToString"
- ASCII "RtlAppendUnicodeToString"
- ASCII "RtlApplicationVerifierStop"
- ASCII "RtlApplyRXact"
- ASCII "RtlApplyRXactNoFlush"
- ASCII "RtlAppxIsFileOwnedByTrustedInstaller"
- ASCII "RtlAreAllAccessesGranted"
- ASCII "RtlAreAnyAccessesGranted"
- ASCII "RtlAreBitsClear"
- ASCII "RtlAreBitsSet"
- ASCII "RtlAssert"
- ASCII "RtlAvlInsertNodeEx"
- ASCII "RtlAvlRemoveNode"
- ASCII "RtlBarrier"
- ASCII "RtlBarrierForDelete"
- ASCII "RtlCancelTimer"
- ASCII "RtlCanonicalizeDomainName"
- ASCII "RtlCaptureContext"
- ASCII "RtlCaptureStackBackTrace"
- ASCII "RtlCaptureStackContext"
- ASCII "RtlCharToInteger"
- ASCII "RtlCheckForOrphanedCriticalSections"
- ASCII "RtlCheckPortableOperatingSystem"
- ASCII "RtlCheckRegistryKey"
- ASCII "RtlCheckTokenCapability"
- ASCII "RtlCheckTokenMembership"
- ASCII "RtlCheckTokenMembershipEx"
- ASCII "RtlCleanUpTEBLangLists"
- ASCII "RtlClearAllBits"
- ASCII "RtlClearBit"
- ASCII "RtlClearBits"
- ASCII "RtlCloneMemoryStream"
- ASCII "RtlCloneUserProcess"
- ASCII "RtlCmDecodeMemIoResource"
- ASCII "RtlCmEncodeMemIoResource"
- ASCII "RtlCommitDebugInfo"
- ASCII "RtlCommitMemoryStream"
- ASCII "RtlCompactHeap"
- ASCII "RtlCompareAltitudes"
- ASCII "RtlCompareMemory"
- ASCII "RtlCompareMemoryUlong"
- ASCII "RtlCompareString"
- ASCII "RtlCompareUnicodeString"
- ASCII "RtlCompareUnicodeStrings"
- ASCII "RtlCompressBuffer"
- ASCII "RtlComputeCrc32"
- ASCII "RtlComputeImportTableHash"
- ASCII "RtlComputePrivatizedDllName_U"
- ASCII "RtlConnectToSm"
- ASCII "RtlConsoleMultiByteToUnicodeN"
- ASCII "RtlContractHashTable"
- ASCII "RtlConvertExclusiveToShared"
- ASCII "RtlConvertLCIDToString"
- ASCII "RtlConvertLongToLargeInteger"
- ASCII "RtlConvertSharedToExclusive"
- ASCII "RtlConvertSidToUnicodeString"
- ASCII "RtlConvertToAutoInheritSecurityObject"
- ASCII "RtlConvertUlongToLargeInteger"
- ASCII "RtlCopyBitMap"
- ASCII "RtlCopyContext"
- ASCII "RtlCopyExtendedContext"
- ASCII "RtlCopyLuid"
- ASCII "RtlCopyLuidAndAttributesArray"
- ASCII "RtlCopyMappedMemory"
- ASCII "RtlCopyMemoryStreamTo"
- ASCII "RtlCopyOutOfProcessMemoryStreamTo"
- ASCII "RtlCopySecurityDescriptor"
- ASCII "RtlCopySid"
- ASCII "RtlCopySidAndAttributesArray"
- ASCII "RtlCopyString"
- ASCII "RtlCopyUnicodeString"
- ASCII "RtlCrc32"
- ASCII "RtlCrc64"
- ASCII "RtlCreateAcl"
- ASCII "RtlCreateActivationContext"
- ASCII "RtlCreateAndSetSD"
- ASCII "RtlCreateAtomTable"
- ASCII "RtlCreateBootStatusDataFile"
- ASCII "RtlCreateBoundaryDescriptor"
- ASCII "RtlCreateEnvironment"
- ASCII "RtlCreateEnvironmentEx"
- ASCII "RtlCreateHashTable"
- ASCII "RtlCreateHashTableEx"
- ASCII "RtlCreateHeap"
- ASCII "RtlCreateMemoryBlockLookaside"
- ASCII "RtlCreateMemoryZone"
- ASCII "RtlCreateProcessParameters"
- ASCII "RtlCreateProcessParametersEx"
- ASCII "RtlCreateProcessReflection"
- ASCII "RtlCreateQueryDebugBuffer"
- ASCII "RtlCreateRegistryKey"
- ASCII "RtlCreateSecurityDescriptor"
- ASCII "RtlCreateServiceSid"
- ASCII "RtlCreateSystemVolumeInformationFolder"
- ASCII "RtlCreateTagHeap"
- ASCII "RtlCreateTimer"
- ASCII "RtlCreateTimerQueue"
- ASCII "RtlCreateUnicodeString"
- ASCII "RtlCreateUnicodeStringFromAsciiz"
- ASCII "RtlCreateUserProcess"
- ASCII "RtlCreateUserSecurityObject"
- ASCII "RtlCreateUserStack"
- ASCII "RtlCreateUserThread"
- ASCII "RtlCreateVirtualAccountSid"
- ASCII "RtlCultureNameToLCID"
- ASCII "RtlCustomCPToUnicodeN"
- ASCII "RtlCutoverTimeToSystemTime"
- ASCII "RtlDeCommitDebugInfo"
- ASCII "RtlDeNormalizeProcessParams"
- ASCII "RtlDeactivateActivationContext"
- ASCII "RtlDebugPrintTimes"
- ASCII "RtlDecodePointer"
- ASCII "RtlDecodeSystemPointer"
- ASCII "RtlDecompressBuffer"
- ASCII "RtlDecompressBufferEx"
- ASCII "RtlDecompressFragment"
- ASCII "RtlDefaultNpAcl"
- ASCII "RtlDelete"
- ASCII "RtlDeleteAce"
- ASCII "RtlDeleteAtomFromAtomTable"
- ASCII "RtlDeleteBarrier"
- ASCII "RtlDeleteBoundaryDescriptor"
- ASCII "RtlDeleteCriticalSection"
- ASCII "RtlDeleteElementGenericTable"
- ASCII "RtlDeleteElementGenericTableAvl"
- ASCII "RtlDeleteElementGenericTableAvlEx"
- ASCII "RtlDeleteHashTable"
- ASCII "RtlDeleteNoSplay"
- ASCII "RtlDeleteRegistryValue"
- ASCII "RtlDeleteResource"
- ASCII "RtlDeleteSecurityObject"
- ASCII "RtlDeleteTimer"
- ASCII "RtlDeleteTimerQueue"
- ASCII "RtlDeleteTimerQueueEx"
- ASCII "RtlDeregisterSecureMemoryCacheCallback"
- ASCII "RtlDeregisterWait"
- ASCII "RtlDeregisterWaitEx"
- ASCII "RtlDestroyAtomTable"
- ASCII "RtlDestroyEnvironment"
- ASCII "RtlDestroyHandleTable"
- ASCII "RtlDestroyHeap"
- ASCII "RtlDestroyMemoryBlockLookaside"
- ASCII "RtlDestroyMemoryZone"
- ASCII "RtlDestroyProcessParameters"
- ASCII "RtlDestroyQueryDebugBuffer"
- ASCII "RtlDetectHeapLeaks"
- ASCII "RtlDetermineDosPathNameType_U"
- ASCII "RtlDisableThreadProfiling"
- ASCII "RtlDllShutdownInProgress"
- ASCII "RtlDnsHostNameToComputerName"
- ASCII "RtlDoesFileExists_U"
- ASCII "RtlDosApplyFileIsolationRedirection_Ustr"
- ASCII "RtlDosPathNameToNtPathName_U"
- ASCII "RtlDosPathNameToNtPathName_U_WithStatus"
- ASCII "RtlDosPathNameToRelativeNtPathName_U"
- ASCII "RtlDosPathNameToRelativeNtPathName_U_WithStatus"
- ASCII "RtlDosSearchPath_U"
- ASCII "RtlDosSearchPath_Ustr"
- ASCII "RtlDowncaseUnicodeChar"
- ASCII "RtlDowncaseUnicodeString"
- ASCII "RtlDumpResource"
- ASCII "RtlDuplicateUnicodeString"
- ASCII "RtlEmptyAtomTable"
- ASCII "RtlEnableEarlyCriticalSectionEventCreation"
- ASCII "RtlEnableThreadProfiling"
- ASCII "RtlEncodePointer"
- ASCII "RtlEncodeSystemPointer"
- ASCII "RtlEndEnumerationHashTable"
- ASCII "RtlEndWeakEnumerationHashTable"
- ASCII "RtlEnlargedIntegerMultiply"
- ASCII "RtlEnlargedUnsignedMultiply"
- ASCII "RtlEnterCriticalSection"
- ASCII "RtlEnumProcessHeaps"
- ASCII "RtlEnumerateEntryHashTable"
- ASCII "RtlEnumerateGenericTable"
- ASCII "RtlEnumerateGenericTableAvl"
- ASCII "RtlEnumerateGenericTableLikeADirectory"
- ASCII "RtlEnumerateGenericTableWithoutSplaying"
- ASCII "RtlEnumerateGenericTableWithoutSplayingAvl"
- ASCII "RtlEqualComputerName"
- ASCII "RtlEqualDomainName"
- ASCII "RtlEqualLuid"
- ASCII "RtlEqualPrefixSid"
- ASCII "RtlEqualSid"
- ASCII "RtlEqualString"
- ASCII "RtlEqualUnicodeString"
- ASCII "RtlEqualWnfChangeStamps"
- ASCII "RtlEraseUnicodeString"
- ASCII "RtlEthernetAddressToStringA"
- ASCII "RtlEthernetAddressToStringW"
- ASCII "RtlEthernetStringToAddressA"
- ASCII "RtlEthernetStringToAddressW"
- ASCII "RtlExitUserProcess"
- ASCII "RtlExitUserThread"
- ASCII "RtlExpandEnvironmentStrings"
- ASCII "RtlExpandEnvironmentStrings_U"
- ASCII "RtlExpandHashTable"
- ASCII "RtlExtendMemoryBlockLookaside"
- ASCII "RtlExtendMemoryZone"
- ASCII "RtlExtendedIntegerMultiply"
- ASCII "RtlExtendedLargeIntegerDivide"
- ASCII "RtlExtendedMagicDivide"
- ASCII "RtlExtractBitMap"
- ASCII "RtlFillMemory"
- ASCII "RtlFillMemoryUlong"
- ASCII "RtlFillMemoryUlonglong"
- ASCII "RtlFinalReleaseOutOfProcessMemoryStream"
- ASCII "RtlFindAceByType"
- ASCII "RtlFindActivationContextSectionGuid"
- ASCII "RtlFindActivationContextSectionString"
- ASCII "RtlFindCharInUnicodeString"
- ASCII "RtlFindClearBits"
- ASCII "RtlFindClearBitsAndSet"
- ASCII "RtlFindClearRuns"
- ASCII "RtlFindClosestEncodableLength"
- ASCII "RtlFindLastBackwardRunClear"
- ASCII "RtlFindLeastSignificantBit"
- ASCII "RtlFindLongestRunClear"
- ASCII "RtlFindMessage"
- ASCII "RtlFindMostSignificantBit"
- ASCII "RtlFindNextForwardRunClear"
- ASCII "RtlFindSetBits"
- ASCII "RtlFindSetBitsAndClear"
- ASCII "RtlFirstEntrySList"
- ASCII "RtlFirstFreeAce"
- ASCII "RtlFlsAlloc"
- ASCII "RtlFlsFree"
- ASCII "RtlFlushHeaps"
- ASCII "RtlFlushSecureMemoryCache"
- ASCII "RtlFormatCurrentUserKeyPath"
- ASCII "RtlFormatMessage"
- ASCII "RtlFormatMessageEx"
- ASCII "RtlFreeActivationContextStack"
- ASCII "RtlFreeAnsiString"
- ASCII "RtlFreeHandle"
- ASCII "RtlFreeHeap"
- ASCII "RtlFreeMemoryBlockLookaside"
- ASCII "RtlFreeOemString"
- ASCII "RtlFreeSid"
- ASCII "RtlFreeThreadActivationContextStack"
- ASCII "RtlFreeUnicodeString"
- ASCII "RtlFreeUserStack"
- ASCII "RtlGUIDFromString"
- ASCII "RtlGenerate8dot3Name"
- ASCII "RtlGetAce"
- ASCII "RtlGetActiveActivationContext"
- ASCII "RtlGetAppContainerNamedObjectPath"
- ASCII "RtlGetAppContainerParent"
- ASCII "RtlGetAppContainerSidType"
- ASCII "RtlGetCallersAddress"
- ASCII "RtlGetCompressionWorkSpaceSize"
- ASCII "RtlGetControlSecurityDescriptor"
- ASCII "RtlGetCriticalSectionRecursionCount"
- ASCII "RtlGetCurrentDirectory_U"
- ASCII "RtlGetCurrentPeb"
- ASCII "RtlGetCurrentProcessorNumber"
- ASCII "RtlGetCurrentProcessorNumberEx"
- ASCII "RtlGetCurrentTransaction"
- ASCII "RtlGetDaclSecurityDescriptor"
- ASCII "RtlGetElementGenericTable"
- ASCII "RtlGetElementGenericTableAvl"
- ASCII "RtlGetEnabledExtendedFeatures"
- ASCII "RtlGetExePath"
- ASCII "RtlGetExtendedContextLength"
- ASCII "RtlGetExtendedFeaturesMask"
- ASCII "RtlGetFileMUIPath"
- ASCII "RtlGetFrame"
- ASCII "RtlGetFullPathName_U"
- ASCII "RtlGetFullPathName_UEx"
- ASCII "RtlGetFullPathName_UstrEx"
- ASCII "RtlGetGroupSecurityDescriptor"
- ASCII "RtlGetIntegerAtom"
- ASCII "RtlGetLastNtStatus"
- ASCII "RtlGetLastWin32Error"
- ASCII "RtlGetLengthWithoutLastFullDosOrNtPathElement"
- ASCII "RtlGetLengthWithoutTrailingPathSeperators"
- ASCII "RtlGetLocaleFileMappingAddress"
- ASCII "RtlGetLongestNtPathLength"
- ASCII "RtlGetNativeSystemInformation"
- ASCII "RtlGetNextEntryHashTable"
- ASCII "RtlGetNtGlobalFlags"
- ASCII "RtlGetNtProductType"
- ASCII "RtlGetNtVersionNumbers"
- ASCII "RtlGetOwnerSecurityDescriptor"
- ASCII "RtlGetParentLocaleName"
- ASCII "RtlGetProcessHeaps"
- ASCII "RtlGetProcessPreferredUILanguages"
- ASCII "RtlGetProductInfo"
- ASCII "RtlGetSaclSecurityDescriptor"
- ASCII "RtlGetSearchPath"
- ASCII "RtlGetSecurityDescriptorRMControl"
- ASCII "RtlGetSetBootStatusData"
- ASCII "RtlGetSystemPreferredUILanguages"
- ASCII "RtlGetSystemTimePrecise"
- ASCII "RtlGetThreadErrorMode"
- ASCII "RtlGetThreadLangIdByIndex"
- ASCII "RtlGetThreadPreferredUILanguages"
- ASCII "RtlGetUILanguageInfo"
- ASCII "RtlGetUnloadEventTrace"
- ASCII "RtlGetUnloadEventTraceEx"
- ASCII "RtlGetUserInfoHeap"
- ASCII "RtlGetUserPreferredUILanguages"
- ASCII "RtlGetVersion"
- ASCII "RtlHashUnicodeString"
- ASCII "RtlHeapTrkInitialize"
- ASCII "RtlIdentifierAuthoritySid"
- ASCII "RtlIdnToAscii"
- ASCII "RtlIdnToNameprepUnicode"
- ASCII "RtlIdnToUnicode"
- ASCII "RtlImageDirectoryEntryToData"
- ASCII "RtlImageNtHeader"
- ASCII "RtlImageNtHeaderEx"
- ASCII "RtlImageRvaToSection"
- ASCII "RtlImageRvaToVa"
- ASCII "RtlImpersonateSelf"
- ASCII "RtlImpersonateSelfEx"
- ASCII "RtlInitAnsiString"
- ASCII "RtlInitAnsiStringEx"
- ASCII "RtlInitBarrier"
- ASCII "RtlInitCodePageTable"
- ASCII "RtlInitEnumerationHashTable"
- ASCII "RtlInitMemoryStream"
- ASCII "RtlInitNlsTables"
- ASCII "RtlInitOutOfProcessMemoryStream"
- ASCII "RtlInitString"
- ASCII "RtlInitUnicodeString"
- ASCII "RtlInitUnicodeStringEx"
- ASCII "RtlInitWeakEnumerationHashTable"
- ASCII "RtlInitializeAtomPackage"
- ASCII "RtlInitializeBitMap"
- ASCII "RtlInitializeConditionVariable"
- ASCII "RtlInitializeContext"
- ASCII "RtlInitializeCriticalSection"
- ASCII "RtlInitializeCriticalSectionAndSpinCount"
- ASCII "RtlInitializeCriticalSectionEx"
- ASCII "RtlInitializeExceptionChain"
- ASCII "RtlInitializeExtendedContext"
- ASCII "RtlInitializeGenericTable"
- ASCII "RtlInitializeGenericTableAvl"
- ASCII "RtlInitializeHandleTable"
- ASCII "RtlInitializeNtUserPfn"
- ASCII "RtlInitializeRXact"
- ASCII "RtlInitializeResource"
- ASCII "RtlInitializeSListHead"
- ASCII "RtlInitializeSRWLock"
- ASCII "RtlInitializeSid"
- ASCII "RtlInsertElementGenericTable"
- ASCII "RtlInsertElementGenericTableAvl"
- ASCII "RtlInsertElementGenericTableFull"
- ASCII "RtlInsertElementGenericTableFullAvl"
- ASCII "RtlInsertEntryHashTable"
- ASCII "RtlInt64ToUnicodeString"
- ASCII "RtlIntegerToChar"
- ASCII "RtlIntegerToUnicodeString"
- ASCII "RtlInterlockedClearBitRun"
- ASCII "RtlInterlockedCompareExchange64"
- ASCII "RtlInterlockedFlushSList"
- ASCII "RtlInterlockedPopEntrySList"
- ASCII "RtlInterlockedPushEntrySList"
- ASCII "RtlInterlockedPushListSListEx"
- ASCII "RtlInterlockedSetBitRun"
- ASCII "RtlIoDecodeMemIoResource"
- ASCII "RtlIoEncodeMemIoResource"
- ASCII "RtlIpv4AddressToStringA"
- ASCII "RtlIpv4AddressToStringExA"
- ASCII "RtlIpv4AddressToStringExW"
- ASCII "RtlIpv4AddressToStringW"
- ASCII "RtlIpv4StringToAddressA"
- ASCII "RtlIpv4StringToAddressExA"
- ASCII "RtlIpv4StringToAddressExW"
- ASCII "RtlIpv4StringToAddressW"
- ASCII "RtlIpv6AddressToStringA"
- ASCII "RtlIpv6AddressToStringExA"
- ASCII "RtlIpv6AddressToStringExW"
- ASCII "RtlIpv6AddressToStringW"
- ASCII "RtlIpv6StringToAddressA"
- ASCII "RtlIpv6StringToAddressExA"
- ASCII "RtlIpv6StringToAddressExW"
- ASCII "RtlIpv6StringToAddressW"
- ASCII "RtlIsActivationContextActive"
- ASCII "RtlIsCapabilitySid"
- ASCII "RtlIsCriticalSectionLocked"
- ASCII "RtlIsCriticalSectionLockedByThread"
- ASCII "RtlIsCurrentThreadAttachExempt"
- ASCII "RtlIsDosDeviceName_U"
- ASCII "RtlIsGenericTableEmpty"
- ASCII "RtlIsGenericTableEmptyAvl"
- ASCII "RtlIsNameInExpression"
- ASCII "RtlIsNameLegalDOS8Dot3"
- ASCII "RtlIsNormalizedString"
- ASCII "RtlIsPackageSid"
- ASCII "RtlIsParentOfChildAppContainer"
- ASCII "RtlIsTextUnicode"
- ASCII "RtlIsThreadWithinLoaderCallout"
- ASCII "RtlIsUntrustedObject"
- ASCII "RtlIsValidHandle"
- ASCII "RtlIsValidIndexHandle"
- ASCII "RtlIsValidLocaleName"
- ASCII "RtlIsValidProcessTrustLabelSid"
- ASCII "RtlKnownExceptionFilter"
- ASCII "RtlLCIDToCultureName"
- ASCII "RtlLargeIntegerAdd"
- ASCII "RtlLargeIntegerArithmeticShift"
- ASCII "RtlLargeIntegerDivide"
- ASCII "RtlLargeIntegerNegate"
- ASCII "RtlLargeIntegerShiftLeft"
- ASCII "RtlLargeIntegerShiftRight"
- ASCII "RtlLargeIntegerSubtract"
- ASCII "RtlLargeIntegerToChar"
- ASCII "RtlLcidToLocaleName"
- ASCII "RtlLeaveCriticalSection"
- ASCII "RtlLengthRequiredSid"
- ASCII "RtlLengthSecurityDescriptor"
- ASCII "RtlLengthSid"
- ASCII "RtlLengthSidAsUnicodeString"
- ASCII "RtlLoadString"
- ASCII "RtlLocalTimeToSystemTime"
- ASCII "RtlLocaleNameToLcid"
- ASCII "RtlLocateExtendedFeature"
- ASCII "RtlLocateLegacyContext"
- ASCII "RtlLockBootStatusData"
- ASCII "RtlLockCurrentThread"
- ASCII "RtlLockHeap"
- ASCII "RtlLockMemoryBlockLookaside"
- ASCII "RtlLockMemoryStreamRegion"
- ASCII "RtlLockMemoryZone"
- ASCII "RtlLockModuleSection"
- ASCII "RtlLogStackBackTrace"
- ASCII "RtlLookupAtomInAtomTable"
- ASCII "RtlLookupElementGenericTable"
- ASCII "RtlLookupElementGenericTableAvl"
- ASCII "RtlLookupElementGenericTableFull"
- ASCII "RtlLookupElementGenericTableFullAvl"
- ASCII "RtlLookupEntryHashTable"
- ASCII "RtlMakeSelfRelativeSD"
- ASCII "RtlMapGenericMask"
- ASCII "RtlMapSecurityErrorToNtStatus"
- ASCII "RtlMoveMemory"
- ASCII "RtlMultiAppendUnicodeStringBuffer"
- ASCII "RtlMultiByteToUnicodeN"
- ASCII "RtlMultiByteToUnicodeSize"
- ASCII "RtlMultipleAllocateHeap"
- ASCII "RtlMultipleFreeHeap"
- ASCII "RtlNewInstanceSecurityObject"
- ASCII "RtlNewSecurityGrantedAccess"
- ASCII "RtlNewSecurityObject"
- ASCII "RtlNewSecurityObjectEx"
- ASCII "RtlNewSecurityObjectWithMultipleInheritance"
- ASCII "RtlNormalizeProcessParams"
- ASCII "RtlNormalizeString"
- ASCII "RtlNtPathNameToDosPathName"
- ASCII "RtlNtStatusToDosError"
- ASCII "RtlNtStatusToDosErrorNoTeb"
- ASCII "RtlNumberGenericTableElements"
- ASCII "RtlNumberGenericTableElementsAvl"
- ASCII "RtlNumberOfClearBits"
- ASCII "RtlNumberOfClearBitsInRange"
- ASCII "RtlNumberOfSetBits"
- ASCII "RtlNumberOfSetBitsInRange"
- ASCII "RtlNumberOfSetBitsUlongPtr"
- ASCII "RtlOemStringToUnicodeSize"
- ASCII "RtlOemStringToUnicodeString"
- ASCII "RtlOemToUnicodeN"
- ASCII "RtlOpenCurrentUser"
- ASCII "RtlOwnerAcesPresent"
- ASCII "RtlPcToFileHeader"
- ASCII "RtlPinAtomInAtomTable"
- ASCII "RtlPopFrame"
- ASCII "RtlPrefixString"
- ASCII "RtlPrefixUnicodeString"
- ASCII "RtlProcessFlsData"
- ASCII "RtlProtectHeap"
- ASCII "RtlPublishWnfStateData"
- ASCII "RtlPushFrame"
- ASCII "RtlQueryActivationContextApplicationSettings"
- ASCII "RtlQueryAtomInAtomTable"
- ASCII "RtlQueryCriticalSectionOwner"
- ASCII "RtlQueryDepthSList"
- ASCII "RtlQueryDynamicTimeZoneInformation"
- ASCII "RtlQueryElevationFlags"
- ASCII "RtlQueryEnvironmentVariable"
- ASCII "RtlQueryEnvironmentVariable_U"
- ASCII "RtlQueryHeapInformation"
- ASCII "RtlQueryInformationAcl"
- ASCII "RtlQueryInformationActivationContext"
- ASCII "RtlQueryInformationActiveActivationContext"
- ASCII "RtlQueryInterfaceMemoryStream"
- ASCII "RtlQueryModuleInformation"
- ASCII "RtlQueryPackageIdentity"
- ASCII "RtlQueryPackageIdentityEx"
- ASCII "RtlQueryPerformanceCounter"
- ASCII "RtlQueryPerformanceFrequency"
- ASCII "RtlQueryProcessBackTraceInformation"
- ASCII "RtlQueryProcessDebugInformation"
- ASCII "RtlQueryProcessHeapInformation"
- ASCII "RtlQueryProcessLockInformation"
- ASCII "RtlQueryRegistryValues"
- ASCII "RtlQueryRegistryValuesEx"
- ASCII "RtlQueryResourcePolicy"
- ASCII "RtlQuerySecurityObject"
- ASCII "RtlQueryTagHeap"
- ASCII "RtlQueryThreadProfiling"
- ASCII "RtlQueryTimeZoneInformation"
- ASCII "RtlQueryUnbiasedInterruptTime"
- ASCII "RtlQueryValidationRunlevel"
- ASCII "RtlQueryWnfMetaNotification"
- ASCII "RtlQueryWnfStateData"
- ASCII "RtlQueryWnfStateDataWithExplicitScope"
- ASCII "RtlQueueApcWow64Thread"
- ASCII "RtlQueueWorkItem"
- ASCII "RtlRaiseException"
- ASCII "RtlRaiseStatus"
- ASCII "RtlRandom"
- ASCII "RtlRandomEx"
- ASCII "RtlRbInsertNodeEx"
- ASCII "RtlRbRemoveNode"
- ASCII "RtlReAllocateHeap"
- ASCII "RtlReadMemoryStream"
- ASCII "RtlReadOutOfProcessMemoryStream"
- ASCII "RtlReadThreadProfilingData"
- ASCII "RtlRealPredecessor"
- ASCII "RtlRealSuccessor"
- ASCII "RtlRegisterForWnfMetaNotification"
- ASCII "RtlRegisterSecureMemoryCacheCallback"
- ASCII "RtlRegisterThreadWithCsrss"
- ASCII "RtlRegisterWait"
- ASCII "RtlReleaseActivationContext"
- ASCII "RtlReleaseMemoryStream"
- ASCII "RtlReleasePath"
- ASCII "RtlReleasePebLock"
- ASCII "RtlReleasePrivilege"
- ASCII "RtlReleaseRelativeName"
- ASCII "RtlReleaseResource"
- ASCII "RtlReleaseSRWLockExclusive"
- ASCII "RtlReleaseSRWLockShared"
- ASCII "RtlRemoteCall"
- ASCII "RtlRemoveEntryHashTable"
- ASCII "RtlRemovePrivileges"
- ASCII "RtlRemoveVectoredContinueHandler"
- ASCII "RtlRemoveVectoredExceptionHandler"
- ASCII "RtlReplaceSidInSd"
- ASCII "RtlReportException"
- ASCII "RtlReportSilentProcessExit"
- ASCII "RtlReportSqmEscalation"
- ASCII "RtlResetMemoryBlockLookaside"
- ASCII "RtlResetMemoryZone"
- ASCII "RtlResetNtUserPfn"
- ASCII "RtlResetRtlTranslations"
- ASCII "RtlRestoreLastWin32Error"
- ASCII "RtlRetrieveNtUserPfn"
- ASCII "RtlRevertMemoryStream"
- ASCII "RtlRunDecodeUnicodeString"
- ASCII "RtlRunEncodeUnicodeString"
- ASCII "RtlRunOnceBeginInitialize"
- ASCII "RtlRunOnceComplete"
- ASCII "RtlRunOnceExecuteOnce"
- ASCII "RtlRunOnceInitialize"
- ASCII "RtlSecondsSince1970ToTime"
- ASCII "RtlSecondsSince1980ToTime"
- ASCII "RtlSeekMemoryStream"
- ASCII "RtlSelfRelativeToAbsoluteSD2"
- ASCII "RtlSelfRelativeToAbsoluteSD"
- ASCII "RtlSendMsgToSm"
- ASCII "RtlSetAllBits"
- ASCII "RtlSetAttributesSecurityDescriptor"
- ASCII "RtlSetBit"
- ASCII "RtlSetBits"
- ASCII "RtlSetControlSecurityDescriptor"
- ASCII "RtlSetCriticalSectionSpinCount"
- ASCII "RtlSetCurrentDirectory_U"
- ASCII "RtlSetCurrentEnvironment"
- ASCII "RtlSetCurrentTransaction"
- ASCII "RtlSetDaclSecurityDescriptor"
- ASCII "RtlSetDynamicTimeZoneInformation"
- ASCII "RtlSetEnvironmentStrings"
- ASCII "RtlSetEnvironmentVar"
- ASCII "RtlSetEnvironmentVariable"
- ASCII "RtlSetExtendedFeaturesMask"
- ASCII "RtlSetGroupSecurityDescriptor"
- ASCII "RtlSetHeapInformation"
- ASCII "RtlSetInformationAcl"
- ASCII "RtlSetIoCompletionCallback"
- ASCII "RtlSetLastWin32Error"
- ASCII "RtlSetLastWin32ErrorAndNtStatusFromNtStatus"
- ASCII "RtlSetMemoryStreamSize"
- ASCII "RtlSetOwnerSecurityDescriptor"
- ASCII "RtlSetPortableOperatingSystem"
- ASCII "RtlSetProcessDebugInformation"
- ASCII "RtlSetProcessIsCritical"
- ASCII "RtlSetProcessPreferredUILanguages"
- ASCII "RtlSetSaclSecurityDescriptor"
- ASCII "RtlSetSearchPathMode"
- ASCII "RtlSetSecurityDescriptorRMControl"
- ASCII "RtlSetSecurityObject"
- ASCII "RtlSetSecurityObjectEx"
- ASCII "RtlSetThreadErrorMode"
- ASCII "RtlSetThreadIsCritical"
- ASCII "RtlSetThreadPoolStartFunc"
- ASCII "RtlSetThreadPreferredUILanguages"
- ASCII "RtlSetTimeZoneInformation"
- ASCII "RtlSetTimer"
- ASCII "RtlSetUnhandledExceptionFilter"
- ASCII "RtlSetUserFlagsHeap"
- ASCII "RtlSetUserValueHeap"
- ASCII "RtlSidDominates"
- ASCII "RtlSidDominatesForTrust"
- ASCII "RtlSidEqualLevel"
- ASCII "RtlSidHashInitialize"
- ASCII "RtlSidHashLookup"
- ASCII "RtlSidIsHigherLevel"
- ASCII "RtlSizeHeap"
- ASCII "RtlSleepConditionVariableCS"
- ASCII "RtlSleepConditionVariableSRW"
- ASCII "RtlSplay"
- ASCII "RtlStartRXact"
- ASCII "RtlStatMemoryStream"
- ASCII "RtlStringFromGUID"
- ASCII "RtlStringFromGUIDEx"
- ASCII "RtlSubAuthorityCountSid"
- ASCII "RtlSubAuthoritySid"
- ASCII "RtlSubscribeWnfStateChangeNotification"
- ASCII "RtlSubtreePredecessor"
- ASCII "RtlSubtreeSuccessor"
- ASCII "RtlSystemTimeToLocalTime"
- ASCII "RtlTestAndPublishWnfStateData"
- ASCII "RtlTestBit"
- ASCII "RtlTestProtectedAccess"
- ASCII "RtlTimeFieldsToTime"
- ASCII "RtlTimeToElapsedTimeFields"
- ASCII "RtlTimeToSecondsSince1970"
- ASCII "RtlTimeToSecondsSince1980"
- ASCII "RtlTimeToTimeFields"
- ASCII "RtlTraceDatabaseAdd"
- ASCII "RtlTraceDatabaseCreate"
- ASCII "RtlTraceDatabaseDestroy"
- ASCII "RtlTraceDatabaseEnumerate"
- ASCII "RtlTraceDatabaseFind"
- ASCII "RtlTraceDatabaseLock"
- ASCII "RtlTraceDatabaseUnlock"
- ASCII "RtlTraceDatabaseValidate"
- ASCII "RtlTryAcquirePebLock"
- ASCII "RtlTryAcquireSRWLockExclusive"
- ASCII "RtlTryAcquireSRWLockShared"
- ASCII "RtlTryConvertSRWLockSharedToExclusiveOrRelease"
- ASCII "RtlTryEnterCriticalSection"
- ASCII "RtlUTF8ToUnicodeN"
- ASCII "RtlUnhandledExceptionFilter2"
- ASCII "RtlUnhandledExceptionFilter"
- ASCII "RtlUnicodeStringToAnsiSize"
- ASCII "RtlUnicodeStringToAnsiString"
- ASCII "RtlUnicodeStringToCountedOemString"
- ASCII "RtlUnicodeStringToInteger"
- ASCII "RtlUnicodeStringToOemSize"
- ASCII "RtlUnicodeStringToOemString"
- ASCII "RtlUnicodeToCustomCPN"
- ASCII "RtlUnicodeToMultiByteN"
- ASCII "RtlUnicodeToMultiByteSize"
- ASCII "RtlUnicodeToOemN"
- ASCII "RtlUnicodeToUTF8N"
- ASCII "RtlUniform"
- ASCII "RtlUnlockBootStatusData"
- ASCII "RtlUnlockCurrentThread"
- ASCII "RtlUnlockHeap"
- ASCII "RtlUnlockMemoryBlockLookaside"
- ASCII "RtlUnlockMemoryStreamRegion"
- ASCII "RtlUnlockMemoryZone"
- ASCII "RtlUnlockModuleSection"
- ASCII "RtlUnsubscribeWnfNotificationWaitForCompletion"
- ASCII "RtlUnsubscribeWnfNotificationWithCompletionCallback"
- ASCII "RtlUnsubscribeWnfStateChangeNotification"
- ASCII "RtlUnwind"
- ASCII "RtlUpcaseUnicodeChar"
- ASCII "RtlUpcaseUnicodeString"
- ASCII "RtlUpcaseUnicodeStringToAnsiString"
- ASCII "RtlUpcaseUnicodeStringToCountedOemString"
- ASCII "RtlUpcaseUnicodeStringToOemString"
- ASCII "RtlUpcaseUnicodeToCustomCPN"
- ASCII "RtlUpcaseUnicodeToMultiByteN"
- ASCII "RtlUpcaseUnicodeToOemN"
- ASCII "RtlUpdateClonedCriticalSection"
- ASCII "RtlUpdateClonedSRWLock"
- ASCII "RtlUpdateTimer"
- ASCII "RtlUpperChar"
- ASCII "RtlUpperString"
- ASCII "RtlUserThreadStart"
- ASCII "RtlValidAcl"
- ASCII "RtlValidProcessProtection"
- ASCII "RtlValidRelativeSecurityDescriptor"
- ASCII "RtlValidSecurityDescriptor"
- ASCII "RtlValidSid"
- ASCII "RtlValidateHeap"
- ASCII "RtlValidateProcessHeaps"
- ASCII "RtlValidateUnicodeString"
- ASCII "RtlVerifyVersionInfo"
- ASCII "RtlWaitForWnfMetaNotification"
- ASCII "RtlWaitOnAddress"
- ASCII "RtlWakeAddressAll"
- ASCII "RtlWakeAddressAllNoFence"
- ASCII "RtlWakeAddressSingle"
- ASCII "RtlWakeAddressSingleNoFence"
- ASCII "RtlWakeAllConditionVariable"
- ASCII "RtlWakeConditionVariable"
- ASCII "RtlWalkFrameChain"
- ASCII "RtlWalkHeap"
- ASCII "RtlWeaklyEnumerateEntryHashTable"
- ASCII "RtlWerpReportException"
- ASCII "RtlWnfCompareChangeStamp"
- ASCII "RtlWnfDllUnloadCallback"
- ASCII "RtlWow64CallFunction64"
- ASCII "RtlWow64EnableFsRedirection"
- ASCII "RtlWow64EnableFsRedirectionEx"
- ASCII "RtlWriteMemoryStream"
- ASCII "RtlWriteRegistryValue"
- ASCII "RtlZeroHeap"
- ASCII "RtlZeroMemory"
- ASCII "RtlZombifyActivationContext"
- ASCII "RtlpApplyLengthFunction"
- ASCII "RtlpCheckDynamicTimeZoneInformation"
- ASCII "RtlpCleanupRegistryKeys"
- ASCII "RtlpConvertAbsoluteToRelativeSecurityAttribute"
- ASCII "RtlpConvertCultureNamesToLCIDs"
- ASCII "RtlpConvertLCIDsToCultureNames"
- ASCII "RtlpConvertRelativeToAbsoluteSecurityAttribute"
- ASCII "RtlpCreateProcessRegistryInfo"
- ASCII "RtlpEnsureBufferSize"
- ASCII "RtlpFreezeTimeBias"
- ASCII "RtlpGetLCIDFromLangInfoNode"
- ASCII "RtlpGetNameFromLangInfoNode"
- ASCII "RtlpGetSystemDefaultUILanguage"
- ASCII "RtlpGetUserOrMachineUILanguage4NLS"
- ASCII "RtlpInitializeLangRegistryInfo"
- ASCII "RtlpIsQualifiedLanguage"
- ASCII "RtlpLoadMachineUIByPolicy"
- ASCII "RtlpLoadUserUIByPolicy"
- ASCII "RtlpMergeSecurityAttributeInformation"
- ASCII "RtlpMuiFreeLangRegistryInfo"
- ASCII "RtlpMuiRegCreateRegistryInfo"
- ASCII "RtlpMuiRegFreeRegistryInfo"
- ASCII "RtlpMuiRegLoadRegistryInfo"
- ASCII "RtlpNotOwnerCriticalSection"
- ASCII "RtlpNtCreateKey"
- ASCII "RtlpNtEnumerateSubKey"
- ASCII "RtlpNtMakeTemporaryKey"
- ASCII "RtlpNtOpenKey"
- ASCII "RtlpNtQueryValueKey"
- ASCII "RtlpNtSetValueKey"
- ASCII "RtlpQueryDefaultUILanguage"
- ASCII "RtlpRefreshCachedUILanguage"
- ASCII "RtlpSetInstallLanguage"
- ASCII "RtlpSetPreferredUILanguages"
- ASCII "RtlpSetUserPreferredUILanguages"
- ASCII "RtlpUnWaitCriticalSection"
- ASCII "RtlpVerifyAndCommitUILanguageSettings"
- ASCII "RtlpWaitForCriticalSection"
- ASCII "RtlxAnsiStringToUnicodeSize"
- ASCII "RtlxOemStringToUnicodeSize"
- ASCII "RtlxUnicodeStringToAnsiSize"
- ASCII "RtlxUnicodeStringToOemSize"
- ASCII "SbExecuteProcedure"
- ASCII "SbSelectProcedure"
- ASCII "ShipAssert"
- ASCII "ShipAssertGetBufferInfo"
- ASCII "ShipAssertMsgA"
- ASCII "ShipAssertMsgW"
- ASCII "TpAllocAlpcCompletion"
- ASCII "TpAllocAlpcCompletionEx"
- ASCII "TpAllocCleanupGroup"
- ASCII "TpAllocIoCompletion"
- ASCII "TpAllocJobNotification"
- ASCII "TpAllocPool"
- ASCII "TpAllocTimer"
- ASCII "TpAllocWait"
- ASCII "TpAllocWork"
- ASCII "TpAlpcRegisterCompletionList"
- ASCII "TpAlpcUnregisterCompletionList"
- ASCII "TpCallbackDetectedUnrecoverableError"
- ASCII "TpCallbackIndependent"
- ASCII "TpCallbackLeaveCriticalSectionOnCompletion"
- ASCII "TpCallbackMayRunLong"
- ASCII "TpCallbackReleaseMutexOnCompletion"
- ASCII "TpCallbackReleaseSemaphoreOnCompletion"
- ASCII "TpCallbackSendAlpcMessageOnCompletion"
- ASCII "TpCallbackSendPendingAlpcMessage"
- ASCII "TpCallbackSetEventOnCompletion"
- ASCII "TpCallbackUnloadDllOnCompletion"
- ASCII "TpCancelAsyncIoOperation"
- ASCII "TpCaptureCaller"
- ASCII "TpCheckTerminateWorker"
- ASCII "TpDbgDumpHeapUsage"
- ASCII "TpDbgSetLogRoutine"
- ASCII "TpDisablePoolCallbackChecks"
- ASCII "TpDisassociateCallback"
- ASCII "TpIsTimerSet"
- ASCII "TpPostWork"
- ASCII "TpQueryPoolStackInformation"
- ASCII "TpReleaseAlpcCompletion"
- ASCII "TpReleaseCleanupGroup"
- ASCII "TpReleaseCleanupGroupMembers"
- ASCII "TpReleaseIoCompletion"
- ASCII "TpReleaseJobNotification"
- ASCII "TpReleasePool"
- ASCII "TpReleaseTimer"
- ASCII "TpReleaseWait"
- ASCII "TpReleaseWork"
- ASCII "TpSetDefaultPoolMaxThreads"
- ASCII "TpSetDefaultPoolStackInformation"
- ASCII "TpSetPoolMaxThreads"
- ASCII "TpSetPoolMinThreads"
- ASCII "TpSetPoolStackInformation"
- ASCII "TpSetPoolThreadBasePriority"
- ASCII "TpSetTimer"
- ASCII "TpSetTimerEx"
- ASCII "TpSetWait"
- ASCII "TpSetWaitEx"
- ASCII "TpSimpleTryPost"
- ASCII "TpStartAsyncIoOperation"
- ASCII "TpTimerOutstandingCallbackCount"
- ASCII "TpTrimPools"
- ASCII "TpWaitForAlpcCompletion"
- ASCII "TpWaitForIoCompletion"
- ASCII "TpWaitForJobNotification"
- ASCII "TpWaitForTimer"
- ASCII "TpWaitForWait"
- ASCII "TpWaitForWork"
- ASCII "VerSetConditionMask"
- ASCII "WerReportSQMEvent"
- ASCII "WinSqmAddToAverageDWORD"
- ASCII "WinSqmAddToStream"
- ASCII "WinSqmAddToStreamEx"
- ASCII "WinSqmCheckEscalationAddToStreamEx"
- ASCII "WinSqmCheckEscalationSetDWORD64"
- ASCII "WinSqmCheckEscalationSetDWORD"
- ASCII "WinSqmCheckEscalationSetString"
- ASCII "WinSqmCommonDatapointDelete"
- ASCII "WinSqmCommonDatapointSetDWORD64"
- ASCII "WinSqmCommonDatapointSetDWORD"
- ASCII "WinSqmCommonDatapointSetStreamEx"
- ASCII "WinSqmCommonDatapointSetString"
- ASCII "WinSqmEndSession"
- ASCII "WinSqmEventEnabled"
- ASCII "WinSqmEventWrite"
- ASCII "WinSqmGetEscalationRuleStatus"
- ASCII "WinSqmGetInstrumentationProperty"
- ASCII "WinSqmIncrementDWORD"
- ASCII "WinSqmIsOptedIn"
- ASCII "WinSqmIsOptedInEx"
- ASCII "WinSqmIsSessionDisabled"
- ASCII "WinSqmSetDWORD64"
- ASCII "WinSqmSetDWORD"
- ASCII "WinSqmSetEscalationInfo"
- ASCII "WinSqmSetIfMaxDWORD"
- ASCII "WinSqmSetIfMinDWORD"
- ASCII "WinSqmSetString"
- ASCII "WinSqmStartSession"
- ASCII "WinSqmStartSessionForPartner"
- ASCII "ZwAcceptConnectPort"
- ASCII "ZwAccessCheck"
- ASCII "ZwAccessCheckAndAuditAlarm"
- ASCII "ZwAccessCheckByType"
- ASCII "ZwAccessCheckByTypeAndAuditAlarm"
- ASCII "ZwAccessCheckByTypeResultList"
- ASCII "ZwAccessCheckByTypeResultListAndAuditAlarm"
- ASCII "ZwAccessCheckByTypeResultListAndAuditAlarmByHandle"
- ASCII "ZwAddAtom"
- ASCII "ZwAddAtomEx"
- ASCII "ZwAddBootEntry"
- ASCII "ZwAddDriverEntry"
- ASCII "ZwAdjustGroupsToken"
- ASCII "ZwAdjustPrivilegesToken"
- ASCII "ZwAdjustTokenClaimsAndDeviceGroups"
- ASCII "ZwAlertResumeThread"
- ASCII "ZwAlertThread"
- ASCII "ZwAlertThreadByThreadId"
- ASCII "ZwAllocateLocallyUniqueId"
- ASCII "ZwAllocateReserveObject"
- ASCII "ZwAllocateUserPhysicalPages"
- ASCII "ZwAllocateUuids"
- ASCII "ZwAllocateVirtualMemory"
- ASCII "ZwAlpcAcceptConnectPort"
- ASCII "ZwAlpcCancelMessage"
- ASCII "ZwAlpcConnectPort"
- ASCII "ZwAlpcConnectPortEx"
- ASCII "ZwAlpcCreatePort"
- ASCII "ZwAlpcCreatePortSection"
- ASCII "ZwAlpcCreateResourceReserve"
- ASCII "ZwAlpcCreateSectionView"
- ASCII "ZwAlpcCreateSecurityContext"
- ASCII "ZwAlpcDeletePortSection"
- ASCII "ZwAlpcDeleteResourceReserve"
- ASCII "ZwAlpcDeleteSectionView"
- ASCII "ZwAlpcDeleteSecurityContext"
- ASCII "ZwAlpcDisconnectPort"
- ASCII "ZwAlpcImpersonateClientOfPort"
- ASCII "ZwAlpcOpenSenderProcess"
- ASCII "ZwAlpcOpenSenderThread"
- ASCII "ZwAlpcQueryInformation"
- ASCII "ZwAlpcQueryInformationMessage"
- ASCII "ZwAlpcRevokeSecurityContext"
- ASCII "ZwAlpcSendWaitReceivePort"
- ASCII "ZwAlpcSetInformation"
- ASCII "ZwApphelpCacheControl"
- ASCII "ZwAreMappedFilesTheSame"
- ASCII "ZwAssignProcessToJobObject"
- ASCII "ZwAssociateWaitCompletionPacket"
- ASCII "ZwCallbackReturn"
- ASCII "ZwCancelIoFile"
- ASCII "ZwCancelIoFileEx"
- ASCII "ZwCancelSynchronousIoFile"
- ASCII "ZwCancelTimer2"
- ASCII "ZwCancelTimer"
- ASCII "ZwCancelWaitCompletionPacket"
- ASCII "ZwClearEvent"
- ASCII "ZwClose"
- ASCII "ZwCloseObjectAuditAlarm"
- ASCII "ZwCommitComplete"
- ASCII "ZwCommitEnlistment"
- ASCII "ZwCommitTransaction"
- ASCII "ZwCompactKeys"
- ASCII "ZwCompareTokens"
- ASCII "ZwCompleteConnectPort"
- ASCII "ZwCompressKey"
- ASCII "ZwConnectPort"
- ASCII "ZwContinue"
- ASCII "ZwCreateDebugObject"
- ASCII "ZwCreateDirectoryObject"
- ASCII "ZwCreateDirectoryObjectEx"
- ASCII "ZwCreateEnlistment"
- ASCII "ZwCreateEvent"
- ASCII "ZwCreateEventPair"
- ASCII "ZwCreateFile"
- ASCII "ZwCreateIRTimer"
- ASCII "ZwCreateIoCompletion"
- ASCII "ZwCreateJobObject"
- ASCII "ZwCreateJobSet"
- ASCII "ZwCreateKey"
- ASCII "ZwCreateKeyTransacted"
- ASCII "ZwCreateKeyedEvent"
- ASCII "ZwCreateLowBoxToken"
- ASCII "ZwCreateMailslotFile"
- ASCII "ZwCreateMutant"
- ASCII "ZwCreateNamedPipeFile"
- ASCII "ZwCreatePagingFile"
- ASCII "ZwCreatePort"
- ASCII "ZwCreatePrivateNamespace"
- ASCII "ZwCreateProcess"
- ASCII "ZwCreateProcessEx"
- ASCII "ZwCreateProfile"
- ASCII "ZwCreateProfileEx"
- ASCII "ZwCreateResourceManager"
- ASCII "ZwCreateSection"
- ASCII "ZwCreateSemaphore"
- ASCII "ZwCreateSymbolicLinkObject"
- ASCII "ZwCreateThread"
- ASCII "ZwCreateThreadEx"
- ASCII "ZwCreateTimer2"
- ASCII "ZwCreateTimer"
- ASCII "ZwCreateToken"
- ASCII "ZwCreateTokenEx"
- ASCII "ZwCreateTransaction"
- ASCII "ZwCreateTransactionManager"
- ASCII "ZwCreateUserProcess"
- ASCII "ZwCreateWaitCompletionPacket"
- ASCII "ZwCreateWaitablePort"
- ASCII "ZwCreateWnfStateName"
- ASCII "ZwCreateWorkerFactory"
- ASCII "ZwDebugActiveProcess"
- ASCII "ZwDebugContinue"
- ASCII "ZwDelayExecution"
- ASCII "ZwDeleteAtom"
- ASCII "ZwDeleteBootEntry"
- ASCII "ZwDeleteDriverEntry"
- ASCII "ZwDeleteFile"
- ASCII "ZwDeleteKey"
- ASCII "ZwDeleteObjectAuditAlarm"
- ASCII "ZwDeletePrivateNamespace"
- ASCII "ZwDeleteValueKey"
- ASCII "ZwDeleteWnfStateData"
- ASCII "ZwDeleteWnfStateName"
- ASCII "ZwDeviceIoControlFile"
- ASCII "ZwDisableLastKnownGood"
- ASCII "ZwDisplayString"
- ASCII "ZwDrawText"
- ASCII "ZwDuplicateObject"
- ASCII "ZwDuplicateToken"
- ASCII "ZwEnableLastKnownGood"
- ASCII "ZwEnumerateBootEntries"
- ASCII "ZwEnumerateDriverEntries"
- ASCII "ZwEnumerateKey"
- ASCII "ZwEnumerateSystemEnvironmentValuesEx"
- ASCII "ZwEnumerateTransactionObject"
- ASCII "ZwEnumerateValueKey"
- ASCII "ZwExtendSection"
- ASCII "ZwFilterBootOption"
- ASCII "ZwFilterToken"
- ASCII "ZwFilterTokenEx"
- ASCII "ZwFindAtom"
- ASCII "ZwFlushBuffersFile"
- ASCII "ZwFlushBuffersFileEx"
- ASCII "ZwFlushInstallUILanguage"
- ASCII "ZwFlushInstructionCache"
- ASCII "ZwFlushKey"
- ASCII "ZwFlushProcessWriteBuffers"
- ASCII "ZwFlushVirtualMemory"
- ASCII "ZwFlushWriteBuffer"
- ASCII "ZwFreeUserPhysicalPages"
- ASCII "ZwFreeVirtualMemory"
- ASCII "ZwFreezeRegistry"
- ASCII "ZwFreezeTransactions"
- ASCII "ZwFsControlFile"
- ASCII "ZwGetCachedSigningLevel"
- ASCII "ZwGetCompleteWnfStateSubscription"
- ASCII "ZwGetContextThread"
- ASCII "ZwGetCurrentProcessorNumber"
- ASCII "ZwGetDevicePowerState"
- ASCII "ZwGetMUIRegistryInfo"
- ASCII "ZwGetNextProcess"
- ASCII "ZwGetNextThread"
- ASCII "ZwGetNlsSectionPtr"
- ASCII "ZwGetNotificationResourceManager"
- ASCII "ZwGetWriteWatch"
- ASCII "ZwImpersonateAnonymousToken"
- ASCII "ZwImpersonateClientOfPort"
- ASCII "ZwImpersonateThread"
- ASCII "ZwInitializeNlsFiles"
- ASCII "ZwInitializeRegistry"
- ASCII "ZwInitiatePowerAction"
- ASCII "ZwIsProcessInJob"
- ASCII "ZwIsSystemResumeAutomatic"
- ASCII "ZwIsUILanguageComitted"
- ASCII "ZwListenPort"
- ASCII "ZwLoadDriver"
- ASCII "ZwLoadKey2"
- ASCII "ZwLoadKey"
- ASCII "ZwLoadKeyEx"
- ASCII "ZwLockFile"
- ASCII "ZwLockProductActivationKeys"
- ASCII "ZwLockRegistryKey"
- ASCII "ZwLockVirtualMemory"
- ASCII "ZwMakePermanentObject"
- ASCII "ZwMakeTemporaryObject"
- ASCII "ZwMapCMFModule"
- ASCII "ZwMapUserPhysicalPages"
- ASCII "ZwMapUserPhysicalPagesScatter"
- ASCII "ZwMapViewOfSection"
- ASCII "ZwModifyBootEntry"
- ASCII "ZwModifyDriverEntry"
- ASCII "ZwNotifyChangeDirectoryFile"
- ASCII "ZwNotifyChangeKey"
- ASCII "ZwNotifyChangeMultipleKeys"
- ASCII "ZwNotifyChangeSession"
- ASCII "ZwOpenDirectoryObject"
- ASCII "ZwOpenEnlistment"
- ASCII "ZwOpenEvent"
- ASCII "ZwOpenEventPair"
- ASCII "ZwOpenFile"
- ASCII "ZwOpenIoCompletion"
- ASCII "ZwOpenJobObject"
- ASCII "ZwOpenKey"
- ASCII "ZwOpenKeyEx"
- ASCII "ZwOpenKeyTransacted"
- ASCII "ZwOpenKeyTransactedEx"
- ASCII "ZwOpenKeyedEvent"
- ASCII "ZwOpenMutant"
- ASCII "ZwOpenObjectAuditAlarm"
- ASCII "ZwOpenPrivateNamespace"
- ASCII "ZwOpenProcess"
- ASCII "ZwOpenProcessToken"
- ASCII "ZwOpenProcessTokenEx"
- ASCII "ZwOpenResourceManager"
- ASCII "ZwOpenSection"
- ASCII "ZwOpenSemaphore"
- ASCII "ZwOpenSession"
- ASCII "ZwOpenSymbolicLinkObject"
- ASCII "ZwOpenThread"
- ASCII "ZwOpenThreadToken"
- ASCII "ZwOpenThreadTokenEx"
- ASCII "ZwOpenTimer"
- ASCII "ZwOpenTransaction"
- ASCII "ZwOpenTransactionManager"
- ASCII "ZwPlugPlayControl"
- ASCII "ZwPowerInformation"
- ASCII "ZwPrePrepareComplete"
- ASCII "ZwPrePrepareEnlistment"
- ASCII "ZwPrepareComplete"
- ASCII "ZwPrepareEnlistment"
- ASCII "ZwPrivilegeCheck"
- ASCII "ZwPrivilegeObjectAuditAlarm"
- ASCII "ZwPrivilegedServiceAuditAlarm"
- ASCII "ZwPropagationComplete"
- ASCII "ZwPropagationFailed"
- ASCII "ZwProtectVirtualMemory"
- ASCII "ZwPulseEvent"
- ASCII "ZwQueryAttributesFile"
- ASCII "ZwQueryBootEntryOrder"
- ASCII "ZwQueryBootOptions"
- ASCII "ZwQueryDebugFilterState"
- ASCII "ZwQueryDefaultLocale"
- ASCII "ZwQueryDefaultUILanguage"
- ASCII "ZwQueryDirectoryFile"
- ASCII "ZwQueryDirectoryObject"
- ASCII "ZwQueryDriverEntryOrder"
- ASCII "ZwQueryEaFile"
- ASCII "ZwQueryEvent"
- ASCII "ZwQueryFullAttributesFile"
- ASCII "ZwQueryInformationAtom"
- ASCII "ZwQueryInformationEnlistment"
- ASCII "ZwQueryInformationFile"
- ASCII "ZwQueryInformationJobObject"
- ASCII "ZwQueryInformationPort"
- ASCII "ZwQueryInformationProcess"
- ASCII "ZwQueryInformationResourceManager"
- ASCII "ZwQueryInformationThread"
- ASCII "ZwQueryInformationToken"
- ASCII "ZwQueryInformationTransaction"
- ASCII "ZwQueryInformationTransactionManager"
- ASCII "ZwQueryInformationWorkerFactory"
- ASCII "ZwQueryInstallUILanguage"
- ASCII "ZwQueryIntervalProfile"
- ASCII "ZwQueryIoCompletion"
- ASCII "ZwQueryKey"
- ASCII "ZwQueryLicenseValue"
- ASCII "ZwQueryMultipleValueKey"
- ASCII "ZwQueryMutant"
- ASCII "ZwQueryObject"
- ASCII "ZwQueryOpenSubKeys"
- ASCII "ZwQueryOpenSubKeysEx"
- ASCII "ZwQueryPerformanceCounter"
- ASCII "ZwQueryPortInformationProcess"
- ASCII "ZwQueryQuotaInformationFile"
- ASCII "ZwQuerySection"
- ASCII "ZwQuerySecurityAttributesToken"
- ASCII "ZwQuerySecurityObject"
- ASCII "ZwQuerySemaphore"
- ASCII "ZwQuerySymbolicLinkObject"
- ASCII "ZwQuerySystemEnvironmentValue"
- ASCII "ZwQuerySystemEnvironmentValueEx"
- ASCII "ZwQuerySystemInformation"
- ASCII "ZwQuerySystemInformationEx"
- ASCII "ZwQuerySystemTime"
- ASCII "ZwQueryTimer"
- ASCII "ZwQueryTimerResolution"
- ASCII "ZwQueryValueKey"
- ASCII "ZwQueryVirtualMemory"
- ASCII "ZwQueryVolumeInformationFile"
- ASCII "ZwQueryWnfStateData"
- ASCII "ZwQueryWnfStateNameInformation"
- ASCII "ZwQueueApcThread"
- ASCII "ZwQueueApcThreadEx"
- ASCII "ZwRaiseException"
- ASCII "ZwRaiseHardError"
- ASCII "ZwReadFile"
- ASCII "ZwReadFileScatter"
- ASCII "ZwReadOnlyEnlistment"
- ASCII "ZwReadRequestData"
- ASCII "ZwReadVirtualMemory"
- ASCII "ZwRecoverEnlistment"
- ASCII "ZwRecoverResourceManager"
- ASCII "ZwRecoverTransactionManager"
- ASCII "ZwRegisterProtocolAddressInformation"
- ASCII "ZwRegisterThreadTerminatePort"
- ASCII "ZwReleaseKeyedEvent"
- ASCII "ZwReleaseMutant"
- ASCII "ZwReleaseSemaphore"
- ASCII "ZwReleaseWorkerFactoryWorker"
- ASCII "ZwRemoveIoCompletion"
- ASCII "ZwRemoveIoCompletionEx"
- ASCII "ZwRemoveProcessDebug"
- ASCII "ZwRenameKey"
- ASCII "ZwRenameTransactionManager"
- ASCII "ZwReplaceKey"
- ASCII "ZwReplacePartitionUnit"
- ASCII "ZwReplyPort"
- ASCII "ZwReplyWaitReceivePort"
- ASCII "ZwReplyWaitReceivePortEx"
- ASCII "ZwReplyWaitReplyPort"
- ASCII "ZwRequestPort"
- ASCII "ZwRequestWaitReplyPort"
- ASCII "ZwResetEvent"
- ASCII "ZwResetWriteWatch"
- ASCII "ZwRestoreKey"
- ASCII "ZwResumeProcess"
- ASCII "ZwResumeThread"
- ASCII "ZwRollbackComplete"
- ASCII "ZwRollbackEnlistment"
- ASCII "ZwRollbackTransaction"
- ASCII "ZwRollforwardTransactionManager"
- ASCII "ZwSaveKey"
- ASCII "ZwSaveKeyEx"
- ASCII "ZwSaveMergedKeys"
- ASCII "ZwSecureConnectPort"
- ASCII "ZwSerializeBoot"
- ASCII "ZwSetBootEntryOrder"
- ASCII "ZwSetBootOptions"
- ASCII "ZwSetCachedSigningLevel"
- ASCII "ZwSetContextThread"
- ASCII "ZwSetDebugFilterState"
- ASCII "ZwSetDefaultHardErrorPort"
- ASCII "ZwSetDefaultLocale"
- ASCII "ZwSetDefaultUILanguage"
- ASCII "ZwSetDriverEntryOrder"
- ASCII "ZwSetEaFile"
- ASCII "ZwSetEvent"
- ASCII "ZwSetEventBoostPriority"
- ASCII "ZwSetHighEventPair"
- ASCII "ZwSetHighWaitLowEventPair"
- ASCII "ZwSetIRTimer"
- ASCII "ZwSetInformationDebugObject"
- ASCII "ZwSetInformationEnlistment"
- ASCII "ZwSetInformationFile"
- ASCII "ZwSetInformationJobObject"
- ASCII "ZwSetInformationKey"
- ASCII "ZwSetInformationObject"
- ASCII "ZwSetInformationProcess"
- ASCII "ZwSetInformationResourceManager"
- ASCII "ZwSetInformationThread"
- ASCII "ZwSetInformationToken"
- ASCII "ZwSetInformationTransaction"
- ASCII "ZwSetInformationTransactionManager"
- ASCII "ZwSetInformationVirtualMemory"
- ASCII "ZwSetInformationWorkerFactory"
- ASCII "ZwSetIntervalProfile"
- ASCII "ZwSetIoCompletion"
- ASCII "ZwSetIoCompletionEx"
- ASCII "ZwSetLdtEntries"
- ASCII "ZwSetLowEventPair"
- ASCII "ZwSetLowWaitHighEventPair"
- ASCII "ZwSetQuotaInformationFile"
- ASCII "ZwSetSecurityObject"
- ASCII "ZwSetSystemEnvironmentValue"
- ASCII "ZwSetSystemEnvironmentValueEx"
- ASCII "ZwSetSystemInformation"
- ASCII "ZwSetSystemPowerState"
- ASCII "ZwSetSystemTime"
- ASCII "ZwSetThreadExecutionState"
- ASCII "ZwSetTimer2"
- ASCII "ZwSetTimer"
- ASCII "ZwSetTimerEx"
- ASCII "ZwSetTimerResolution"
- ASCII "ZwSetUuidSeed"
- ASCII "ZwSetValueKey"
- ASCII "ZwSetVolumeInformationFile"
- ASCII "ZwSetWnfProcessNotificationEvent"
- ASCII "ZwShutdownSystem"
- ASCII "ZwShutdownWorkerFactory"
- ASCII "ZwSignalAndWaitForSingleObject"
- ASCII "ZwSinglePhaseReject"
- ASCII "ZwStartProfile"
- ASCII "ZwStopProfile"
- ASCII "ZwSubscribeWnfStateChange"
- ASCII "ZwSuspendProcess"
- ASCII "ZwSuspendThread"
- ASCII "ZwSystemDebugControl"
- ASCII "ZwTerminateJobObject"
- ASCII "ZwTerminateProcess"
- ASCII "ZwTerminateThread"
- ASCII "ZwTestAlert"
- ASCII "ZwThawRegistry"
- ASCII "ZwThawTransactions"
- ASCII "ZwTraceControl"
- ASCII "ZwTraceEvent"
- ASCII "ZwTranslateFilePath"
- ASCII "ZwUmsThreadYield"
- ASCII "ZwUnloadDriver"
- ASCII "ZwUnloadKey2"
- ASCII "ZwUnloadKey"
- ASCII "ZwUnloadKeyEx"
- ASCII "ZwUnlockFile"
- ASCII "ZwUnlockVirtualMemory"
- ASCII "ZwUnmapViewOfSection"
- ASCII "ZwUnmapViewOfSectionEx"
- ASCII "ZwUnsubscribeWnfStateChange"
- ASCII "ZwUpdateWnfStateData"
- ASCII "ZwVdmControl"
- ASCII "ZwWaitForAlertByThreadId"
- ASCII "ZwWaitForDebugEvent"
- ASCII "ZwWaitForKeyedEvent"
- ASCII "ZwWaitForMultipleObjects32"
- ASCII "ZwWaitForMultipleObjects"
- ASCII "ZwWaitForSingleObject"
- ASCII "ZwWaitForWorkViaWorkerFactory"
- ASCII "ZwWaitHighEventPair"
- ASCII "ZwWaitLowEventPair"
- ASCII "ZwWorkerFactoryWorkerReady"
- ASCII "ZwWriteFile"
- ASCII "ZwWriteFileGather"
- ASCII "ZwWriteRequestData"
- ASCII "ZwWriteVirtualMemory"
- ASCII "ZwYieldExecution"
- ASCII "_CIcos"
- ASCII "_CIlog"
- ASCII "_CIpow"
- ASCII "_CIsin"
- ASCII "_CIsqrt"
- ASCII "__isascii"
- ASCII "__iscsym"
- ASCII "__iscsymf"
- ASCII "__toascii"
- ASCII "_alldiv"
- ASCII "_alldvrm"
- ASCII "_allmul"
- ASCII "_alloca_probe"
- ASCII "_alloca_probe_16"
- ASCII "_alloca_probe_8"
- ASCII "_allrem"
- ASCII "_allshl"
- ASCII "_allshr"
- ASCII "_atoi64"
- ASCII "_aulldiv"
- ASCII "_aulldvrm"
- ASCII "_aullrem"
- ASCII "_aullshr"
- ASCII "_chkstk"
- ASCII "_errno"
- ASCII "_except_handler4_common"
- ASCII "_fltused"
- ASCII "_ftol"
- ASCII "_ftol2"
- ASCII "_ftol2_sse"
- ASCII "_i64toa"
- ASCII "_i64toa_s"
- ASCII "_i64tow"
- ASCII "_i64tow_s"
- ASCII "_itoa"
- ASCII "_itoa_s"
- ASCII "_itow"
- ASCII "_itow_s"
- ASCII "_lfind"
- ASCII "_local_unwind4"
- ASCII "_ltoa"
- ASCII "_ltoa_s"
- ASCII "_ltow"
- ASCII "_ltow_s"
- ASCII "_makepath_s"
- ASCII "_memccpy"
- ASCII "_memicmp"
- ASCII "_snprintf"
- ASCII "_snprintf_s"
- ASCII "_snscanf_s"
- ASCII "_snwprintf"
- ASCII "_snwprintf_s"
- ASCII "_snwscanf_s"
- ASCII "_splitpath"
- ASCII "_splitpath_s"
- ASCII "_strcmpi"
- ASCII "_stricmp"
- ASCII "_strlwr"
- ASCII "_strlwr_s"
- ASCII "_strnicmp"
- ASCII "_strnset_s"
- ASCII "_strset_s"
- ASCII "_strupr"
- ASCII "_strupr_s"
- ASCII "_swprintf"
- ASCII "_ui64toa"
- ASCII "_ui64toa_s"
- ASCII "_ui64tow"
- ASCII "_ui64tow_s"
- ASCII "_ultoa"
- ASCII "_ultoa_s"
- ASCII "_ultow"
- ASCII "_ultow_s"
- ASCII "_vscwprintf"
- ASCII "_vsnprintf"
- ASCII "_vsnprintf_s"
- ASCII "_vsnwprintf"
- ASCII "_vsnwprintf_s"
- ASCII "_vswprintf"
- ASCII "_wcsicmp"
- ASCII "_wcslwr"
- ASCII "_wcslwr_s"
- ASCII "_wcsnicmp"
- ASCII "_wcsnset_s"
- ASCII "_wcsset_s"
- ASCII "_wcstoi64"
- ASCII "_wcstoui64"
- ASCII "_wcsupr"
- ASCII "_wcsupr_s"
- ASCII "_wmakepath_s"
- ASCII "_wsplitpath_s"
- ASCII "_wtoi"
- ASCII "_wtoi64"
- ASCII "_wtol"
- ASCII "abs"
- ASCII "atan"
- ASCII "atoi"
- ASCII "atol"
- ASCII "bsearch"
- ASCII "ceil"
- ASCII "cos"
- ASCII "fabs"
- ASCII "floor"
- ASCII "isalnum"
- ASCII "isalpha"
- ASCII "iscntrl"
- ASCII "isdigit"
- ASCII "isgraph"
- ASCII "islower"
- ASCII "isprint"
- ASCII "ispunct"
- ASCII "isspace"
- ASCII "isupper"
- ASCII "iswalnum"
- ASCII "iswalpha"
- ASCII "iswascii"
- ASCII "iswctype"
- ASCII "iswdigit"
- ASCII "iswgraph"
- ASCII "iswlower"
- ASCII "iswprint"
- ASCII "iswspace"
- ASCII "iswxdigit"
- ASCII "isxdigit"
- ASCII "labs"
- ASCII "log"
- ASCII "mbstowcs"
- ASCII "memchr"
- ASCII "memcmp"
- ASCII "memcpy"
- ASCII "memcpy_s"
- ASCII "memmove"
- ASCII "memmove_s"
- ASCII "memset"
- ASCII "pow"
- ASCII "qsort"
- ASCII "qsort_s"
- ASCII "sin"
- ASCII "sprintf"
- ASCII "sprintf_s"
- ASCII "sqrt"
- ASCII "sscanf"
- ASCII "sscanf_s"
- ASCII "strcat"
- ASCII "strcat_s"
- ASCII "strchr"
- ASCII "strcmp"
- ASCII "strcpy"
- ASCII "strcpy_s"
- ASCII "strcspn"
- ASCII "strlen"
- ASCII "strncat"
- ASCII "strncat_s"
- ASCII "strncmp"
- ASCII "strncpy"
- ASCII "strncpy_s"
- ASCII "strnlen"
- ASCII "strpbrk"
- ASCII "strrchr"
- ASCII "strspn"
- ASCII "strstr"
- ASCII "strtok_s"
- ASCII "strtol"
- ASCII "strtoul"
- ASCII "swprintf"
- ASCII "swprintf_s"
- ASCII "swscanf_s"
- ASCII "tan"
- ASCII "tolower"
- ASCII "toupper"
- ASCII "towlower"
- ASCII "towupper"
- ASCII "vDbgPrintEx"
- ASCII "vDbgPrintExWithPrefix"
- ASCII "vsprintf"
- ASCII "vsprintf_s"
- ASCII "vswprintf_s"
- ASCII "wcscat"
- ASCII "wcscat_s"
- ASCII "wcschr"
- ASCII "wcscmp"
- ASCII "wcscpy"
- ASCII "wcscpy_s"
- ASCII "wcscspn"
- ASCII "wcslen"
- ASCII "wcsncat"
- ASCII "wcsncat_s"
- ASCII "wcsncmp"
- ASCII "wcsncpy"
- ASCII "wcsncpy_s"
- ASCII "wcsnlen"
- ASCII "wcspbrk"
- ASCII "wcsrchr"
- ASCII "wcsspn"
- ASCII "wcsstr"
- ASCII "wcstok_s"
- ASCII "wcstol"
- ASCII "wcstombs"
- [/CODE]
Add Comment
Please, Sign In to add comment