CsrCaptureMessageMultiUnicodeStringsInPlace LdrCreateOutOfProcessImage LdrDestroyOutOfProcessImage NtIsProcessInJob ZwIsProcessInJob NtOpenProcessTokenEx ZwOpenProcessTokenEx NtOpenThreadTokenEx ZwOpenThreadTokenEx NtSetDebugFilterState ZwSetDebugFilterState RtlDecodePointer RtlEncodePointer RtlDecodeSystemPointer RtlEncodeSystemPointer RtlIsActivationContextActive RtlSetLastWin32Error RtlZombifyActivationContext ZwQueryDebugFilterState