added rtlcreateuserprocess hook
added required structures for rtlcreateuserprocess
invalid stack pointer is suspicious, decrease depth-count for uninteresting backtraces
whitelist all dlls in windows directories
fix bitmap value calculations for retaddr tainting