LdrCreateOutOfProcessImage LdrDestroyOutOfProcessImage NtIsProcessInJob ZwIsProcessInJob NtOpenProcessTokenEx ZwOpenProcessTokenEx NtOpenThreadTokenEx ZwOpenThreadTokenEx NtSetDebugFilterState ZwSetDebugFilterState RtlDecodePointer RtlEncodePointer RtlDecodeSystemPointer RtlEncodeSystemPointer RtlSetLastWin32Error ZwQueryDebugFilterState