handle new win8 syscalls relevant to core DR

_From [bruen...@google.com](https://code.google.com/u/109494838902877177630/) on September 17, 2012 15:04:57_

split from issue #565 # grep pdb ntdll.dll/6.2.9200.16384-wow64/syscalls | grep -v Zw | awk '{print $NF}' | sort > w8
# grep pdb ntdll.dll/6.1.7601.17514-wow64/syscalls | grep -v Zw | awk '{print $NF}' | sort > w7
# diff w7 w8 | grep '^>'
> NtAddAtomEx
> NtAdjustTokenClaimsAndDeviceGroups
> NtAlertThreadByThreadId
> NtAlpcConnectPortEx
> NtAssociateWaitCompletionPacket
> NtCancelWaitCompletionPacket
> NtCreateDirectoryObjectEx
> NtCreateIRTimer
> NtCreateLowBoxToken
> NtCreateTokenEx
> NtCreateWaitCompletionPacket
> NtCreateWnfStateName
> NtDeleteWnfStateData
> NtDeleteWnfStateName
> NtFilterBootOption
> NtFilterTokenEx
> NtFlushBuffersFileEx
> NtGetCachedSigningLevel
> NtQueryWnfStateData
> NtQueryWnfStateNameInformation
> NtSetCachedSigningLevel
> NtSetInformationVirtualMemory
> NtSetIRTimer
> NtSubscribeWnfStateChange
> NtUnmapViewOfSectionEx
> NtUnsubscribeWnfStateChange
> NtUpdateWnfStateData
> NtWaitForAlertByThreadId
> NtWaitForWnfNotifications
> NtWow64AllocateVirtualMemory64
# diff w7 w8 | grep '^<'
< NtGetPlugPlayEvent
< NtWow64InterlockedPopEntrySList

for core DR these are the ones to look at:
NtUnmapViewOfSectionEx
NtSetInformationVirtualMemory
NtWow64AllocateVirtualMemory64

_Original issue: http://code.google.com/p/dynamorio/issues/detail?id=899_