# Output of dumpbin /exports *.dll for system dlls that Chrome imports. # Consumed by generate_allowed_imports.py to build delayload_unittest. Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file advapi32.dll File Type: DLL Section contains the following exports for ADVAPI32.dll 00000000 characteristics 559F308F time date stamp Thu Jul 9 19:40:15 2015 0.00 version 1000 ordinal base 850 number of functions 849 number of names ordinal hint RVA name 1002 0 A_SHAFinal (forwarded to NTDLL.A_SHAFinal) 1003 1 A_SHAInit (forwarded to NTDLL.A_SHAInit) 1004 2 A_SHAUpdate (forwarded to NTDLL.A_SHAUpdate) 1005 3 00045E70 AbortSystemShutdownA 1006 4 00045EF0 AbortSystemShutdownW 1007 5 00002690 AccessCheck 1008 6 0002D250 AccessCheckAndAuditAlarmA 1009 7 0002FD80 AccessCheckAndAuditAlarmW 1010 8 00030080 AccessCheckByType 1011 9 0002D3B0 AccessCheckByTypeAndAuditAlarmA 1012 A 0002FDF0 AccessCheckByTypeAndAuditAlarmW 1013 B 00030010 AccessCheckByTypeResultList 1014 C 0002D540 AccessCheckByTypeResultListAndAuditAlarmA 1015 D 0002D6D0 AccessCheckByTypeResultListAndAuditAlarmByHandleA 1016 E 0002FEA0 AccessCheckByTypeResultListAndAuditAlarmByHandleW 1017 F 0002FF60 AccessCheckByTypeResultListAndAuditAlarmW 1018 10 000189A0 AddAccessAllowedAce 1019 11 00018FB0 AddAccessAllowedAceEx 1020 12 000300F0 AddAccessAllowedObjectAce 1021 13 00030110 AddAccessDeniedAce 1022 14 00030100 AddAccessDeniedAceEx 1023 15 00030120 AddAccessDeniedObjectAce 1024 16 0001B330 AddAce 1025 17 00030140 AddAuditAccessAce 1026 18 00030130 AddAuditAccessAceEx 1027 19 00030150 AddAuditAccessObjectAce 1028 1A 00049C50 AddConditionalAce 1029 1B AddMandatoryAce (forwarded to KERNELBASE.AddMandatoryAce) 1030 1C 0002EF60 AddUsersToEncryptedFile 1031 1D 0002EFE0 AddUsersToEncryptedFileEx 1032 1E 00030160 AdjustTokenGroups 1033 1F 000186C0 AdjustTokenPrivileges 1034 20 000177B0 AllocateAndInitializeSid 1035 21 00030170 AllocateLocallyUniqueId 1036 22 00030180 AreAllAccessesGranted 1037 23 00030190 AreAnyAccessesGranted 1038 24 000301A0 AuditComputeEffectivePolicyBySid 1039 25 00031C80 AuditComputeEffectivePolicyByToken 1040 26 000301B0 AuditEnumerateCategories 1041 27 000301C0 AuditEnumeratePerUserPolicy 1042 28 000301D0 AuditEnumerateSubCategories 1043 29 0001CA30 AuditFree 1044 2A 00031DB0 AuditLookupCategoryGuidFromCategoryId 1045 2B 00031DF0 AuditLookupCategoryIdFromCategoryGuid 1046 2C 00031E60 AuditLookupCategoryNameA 1047 2D 000301E0 AuditLookupCategoryNameW 1048 2E 00031EF0 AuditLookupSubCategoryNameA 1049 2F 000301F0 AuditLookupSubCategoryNameW 1050 30 00031F80 AuditQueryGlobalSaclA 1051 31 00030200 AuditQueryGlobalSaclW 1052 32 00030210 AuditQueryPerUserPolicy 1053 33 00030220 AuditQuerySecurity 1054 34 0001CA20 AuditQuerySystemPolicy 1055 35 00032040 AuditSetGlobalSaclA 1056 36 00030230 AuditSetGlobalSaclW 1057 37 00030240 AuditSetPerUserPolicy 1058 38 00030250 AuditSetSecurity 1059 39 00030260 AuditSetSystemPolicy 1060 3A 0002C1B0 BackupEventLogA 1061 3B 0002C220 BackupEventLogW 1062 3C 00046380 BaseRegCloseKey 1063 3D 000463A0 BaseRegCreateKey 1064 3E 00046410 BaseRegDeleteKeyEx 1065 3F 00046450 BaseRegDeleteValue 1066 40 00046480 BaseRegFlushKey 1067 41 000464A0 BaseRegGetVersion 1068 42 000464D0 BaseRegLoadKey 1069 43 00046500 BaseRegOpenKey 1070 44 00046540 BaseRegRestoreKey 1071 45 00046570 BaseRegSaveKeyEx 1072 46 000465B0 BaseRegSetKeySecurity 1073 47 000465E0 BaseRegSetValue 1074 48 00046620 BaseRegUnLoadKey 1075 49 0001C940 BuildExplicitAccessWithNameA 1076 4A 0001C940 BuildExplicitAccessWithNameW 1077 4B 0003D000 BuildImpersonateExplicitAccessWithNameA 1078 4C 0003D000 BuildImpersonateExplicitAccessWithNameW 1079 4D 0003DC30 BuildImpersonateTrusteeA 1080 4E 0003DC30 BuildImpersonateTrusteeW 1081 4F 0003D030 BuildSecurityDescriptorA 1082 50 00017FB0 BuildSecurityDescriptorW 1083 51 0001C970 BuildTrusteeWithNameA 1084 52 0001C970 BuildTrusteeWithNameW 1085 53 0003DC50 BuildTrusteeWithObjectsAndNameA 1086 54 0003DC50 BuildTrusteeWithObjectsAndNameW 1087 55 0003DCA0 BuildTrusteeWithObjectsAndSidA 1088 56 0003DCA0 BuildTrusteeWithObjectsAndSidW 1089 57 000191E0 BuildTrusteeWithSidA 1090 58 000191E0 BuildTrusteeWithSidW 1091 59 0003E3A0 CancelOverlappedAccess 1092 5A 00030270 ChangeServiceConfig2A 1093 5B 00030280 ChangeServiceConfig2W 1094 5C 00030290 ChangeServiceConfigA 1095 5D 0001C9B0 ChangeServiceConfigW 1096 5E 0001BDE0 CheckForHiberboot 1097 5F 000189B0 CheckTokenMembership 1098 60 0002C550 ClearEventLogA 1099 61 0002C5C0 ClearEventLogW 1100 62 00016CC0 CloseCodeAuthzLevel 1101 63 0002F080 CloseEncryptedFileRaw 1102 64 0001C540 CloseEventLog 1103 65 00018FA0 CloseServiceHandle 1104 66 0005DFE0 CloseThreadWaitChainSession 1105 67 00019250 CloseTrace 1106 68 00001E20 CommandLineFromMsiDescriptor 1107 69 00003BA0 ComputeAccessTokenFromCodeAuthzLevel 1108 6A 0001DAE0 ControlService 1109 6B 00030300 ControlServiceExA 1110 6C 00030310 ControlServiceExW 1111 6D 0001E6F0 ControlTraceA 1112 6E 000192A0 ControlTraceW 1113 6F 0003E420 ConvertAccessToSecurityDescriptorA 1114 70 0003E5A0 ConvertAccessToSecurityDescriptorW 1115 71 0004A3A0 ConvertSDToStringSDDomainW 1116 72 0004A430 ConvertSDToStringSDRootDomainA 1117 73 0004A580 ConvertSDToStringSDRootDomainW 1118 74 0003E640 ConvertSecurityDescriptorToAccessA 1119 75 0003E640 ConvertSecurityDescriptorToAccessNamedA 1120 76 0003E680 ConvertSecurityDescriptorToAccessNamedW 1121 77 0003E680 ConvertSecurityDescriptorToAccessW 1122 78 0004A600 ConvertSecurityDescriptorToStringSecurityDescriptorA 1123 79 0004A730 ConvertSecurityDescriptorToStringSecurityDescriptorW 1124 7A 00016A30 ConvertSidToStringSidA 1125 7B 00016B40 ConvertSidToStringSidW 1126 7C 0004A7F0 ConvertStringSDToSDDomainA 1127 7D 0001CF80 ConvertStringSDToSDDomainW 1128 7E 0004A900 ConvertStringSDToSDRootDomainA 1129 7F 0004A9B0 ConvertStringSDToSDRootDomainW 1130 80 0001D610 ConvertStringSecurityDescriptorToSecurityDescriptorA 1131 81 00010940 ConvertStringSecurityDescriptorToSecurityDescriptorW 1132 82 0004AA20 ConvertStringSidToSidA 1133 83 00011280 ConvertStringSidToSidW 1134 84 00030320 ConvertToAutoInheritPrivateObjectSecurity 1135 85 00017860 CopySid 1136 86 00036DA0 CreateCodeAuthzLevel 1137 87 0001B0A0 CreatePrivateObjectSecurity 1138 88 00030330 CreatePrivateObjectSecurityEx 1139 89 00030340 CreatePrivateObjectSecurityWithMultipleInheritance 1140 8A 00030350 CreateProcessAsUserA 1141 8B 00018E50 CreateProcessAsUserW 1142 8C 00031A10 CreateProcessWithLogonW 1143 8D 00002970 CreateProcessWithTokenW 1144 8E 000303C0 CreateRestrictedToken 1145 8F 000303D0 CreateServiceA 1146 90 00030460 CreateServiceW 1147 91 CreateTraceInstanceId (forwarded to ntdll.EtwCreateTraceInstanceId) 1148 92 00019230 CreateWellKnownSid 1149 93 000304F0 CredBackupCredentials 1150 94 00030500 CredDeleteA 1151 95 00030510 CredDeleteW 1152 96 00030520 CredEncryptAndMarshalBinaryBlob 1153 97 00030530 CredEnumerateA 1154 98 00030540 CredEnumerateW 1155 99 00030550 CredFindBestCredentialA 1156 9A 00030560 CredFindBestCredentialW 1157 9B 00030570 CredFree 1158 9C 00030580 CredGetSessionTypes 1159 9D 00030590 CredGetTargetInfoA 1160 9E 000305A0 CredGetTargetInfoW 1161 9F 000323B0 CredIsMarshaledCredentialA 1162 A0 000305B0 CredIsMarshaledCredentialW 1163 A1 000305C0 CredIsProtectedA 1164 A2 000305D0 CredIsProtectedW 1165 A3 000305E0 CredMarshalCredentialA 1166 A4 000305F0 CredMarshalCredentialW 1167 A5 00030610 CredProfileLoaded 1168 A6 00030600 CredProfileLoadedEx 1169 A7 00030620 CredProfileUnloaded 1170 A8 00030630 CredProtectA 1171 A9 00030640 CredProtectW 1172 AA 00030650 CredReadA 1173 AB 00030660 CredReadByTokenHandle 1174 AC 00030670 CredReadDomainCredentialsA 1175 AD 00030680 CredReadDomainCredentialsW 1176 AE 00030690 CredReadW 1177 AF 000323F0 CredRenameA 1178 B0 000323F0 CredRenameW 1179 B1 000306A0 CredRestoreCredentials 1180 B2 000306B0 CredUnmarshalCredentialA 1181 B3 000306C0 CredUnmarshalCredentialW 1182 B4 000306D0 CredUnprotectA 1183 B5 000306E0 CredUnprotectW 1184 B6 000306F0 CredWriteA 1185 B7 00030700 CredWriteDomainCredentialsA 1186 B8 00030710 CredWriteDomainCredentialsW 1187 B9 00030720 CredWriteW 1188 BA 00030730 CredpConvertCredential 1189 BB 00030740 CredpConvertOneCredentialSize 1190 BC 00030750 CredpConvertTargetInfo 1191 BD 00030760 CredpDecodeCredential 1192 BE 00030770 CredpEncodeCredential 1193 BF 00030780 CredpEncodeSecret 1194 C0 00018E10 CryptAcquireContextA 1195 C1 000189E0 CryptAcquireContextW 1196 C2 00030790 CryptContextAddRef 1197 C3 00017BF0 CryptCreateHash 1198 C4 00019140 CryptDecrypt 1199 C5 000307A0 CryptDeriveKey 1200 C6 000186A0 CryptDestroyHash 1201 C7 000186B0 CryptDestroyKey 1202 C8 000307B0 CryptDuplicateHash 1203 C9 000307C0 CryptDuplicateKey 1204 CA 0001D7E0 CryptEncrypt 1205 CB 000307D0 CryptEnumProviderTypesA 1206 CC 000307E0 CryptEnumProviderTypesW 1207 CD 000307F0 CryptEnumProvidersA 1208 CE 00030800 CryptEnumProvidersW 1209 CF 00017B50 CryptExportKey 1210 D0 0001CAB0 CryptGenKey 1211 D1 000190D0 CryptGenRandom 1212 D2 00030810 CryptGetDefaultProviderA 1213 D3 00019060 CryptGetDefaultProviderW 1214 D4 00017970 CryptGetHashParam 1215 D5 0001DAD0 CryptGetKeyParam 1216 D6 00030820 CryptGetProvParam 1217 D7 0001DB20 CryptGetUserKey 1218 D8 00017D80 CryptHashData 1219 D9 00030830 CryptHashSessionKey 1220 DA 00017B40 CryptImportKey 1221 DB 00018EE0 CryptReleaseContext 1222 DC 00030840 CryptSetHashParam 1223 DD 00030850 CryptSetKeyParam 1224 DE 00030860 CryptSetProvParam 1225 DF 00030870 CryptSetProviderA 1226 E0 00030880 CryptSetProviderExA 1227 E1 00030890 CryptSetProviderExW 1228 E2 000308A0 CryptSetProviderW 1229 E3 0001DA70 CryptSignHashA 1230 E4 0001DAC0 CryptSignHashW 1231 E5 0001DAA0 CryptVerifySignatureA 1232 E6 00018EF0 CryptVerifySignatureW 1233 E7 0002F0C0 DecryptFileA 1234 E8 0002F170 DecryptFileW 1235 E9 00018ED0 DeleteAce 1236 EA 000308B0 DeleteService 1237 EB 000198B0 DeregisterEventSource 1238 EC 0001B0C0 DestroyPrivateObjectSecurity 1239 ED 0002F200 DuplicateEncryptionInfoFile 1240 EE 0001B090 DuplicateToken 1241 EF 00018F80 DuplicateTokenEx 1242 F0 00050760 ElfBackupEventLogFileA 1243 F1 00050850 ElfBackupEventLogFileW 1244 F2 00050940 ElfChangeNotify 1245 F3 00050A40 ElfClearEventLogFileA 1246 F4 00050B20 ElfClearEventLogFileW 1247 F5 0001C570 ElfCloseEventLog 1248 F6 000198E0 ElfDeregisterEventSource 1249 F7 00050BF0 ElfFlushEventLog 1250 F8 00050C60 ElfNumberOfRecords 1251 F9 00050D40 ElfOldestRecord 1252 FA 00050E20 ElfOpenBackupEventLogA 1253 FB 00050F50 ElfOpenBackupEventLogW 1254 FC 00051080 ElfOpenEventLogA 1255 FD 0001C2B0 ElfOpenEventLogW 1256 FE 00051290 ElfReadEventLogA 1257 FF 000513F0 ElfReadEventLogW 1258 100 000517B0 ElfRegisterEventSourceA 1259 101 000199C0 ElfRegisterEventSourceW 1260 102 00051900 ElfReportEventA 1261 103 00051BB0 ElfReportEventAndSourceW 1262 104 00019630 ElfReportEventW 1263 105 0001C770 EnableTrace 1264 106 000186D0 EnableTraceEx 1265 107 00019160 EnableTraceEx2 1266 108 0002F2B0 EncryptFileA 1267 109 0002F350 EncryptFileW 1268 10A 0002F3D0 EncryptedFileKeyInfo 1269 10B 0002F460 EncryptionDisable 1270 10C 00049040 EnumDependentServicesA 1271 10D 000308C0 EnumDependentServicesW 1272 10E 000308D0 EnumDynamicTimeZoneInformation 1273 10F 000491E0 EnumServiceGroupW 1274 110 00049490 EnumServicesStatusA 1275 111 00019D00 EnumServicesStatusExA 1276 112 00002620 EnumServicesStatusExW 1277 113 000496D0 EnumServicesStatusW 1278 114 0001A6E0 EnumerateTraceGuids 1279 115 000308E0 EnumerateTraceGuidsEx 1280 116 000308F0 EqualDomainSid 1281 117 00030900 EqualPrefixSid 1282 118 000190E0 EqualSid 1283 119 00002860 EtwLogSysConfigExtension 1284 11A 00030910 EventAccessControl 1285 11B 00030920 EventAccessQuery 1286 11C 00030930 EventAccessRemove 1287 11D EventActivityIdControl (forwarded to ntdll.EtwEventActivityIdControl) 1288 11E EventEnabled (forwarded to ntdll.EtwEventEnabled) 1289 11F EventProviderEnabled (forwarded to ntdll.EtwEventProviderEnabled) 1290 120 EventRegister (forwarded to ntdll.EtwEventRegister) 1291 121 EventSetInformation (forwarded to ntdll.EtwEventSetInformation) 1292 122 EventUnregister (forwarded to ntdll.EtwEventUnregister) 1293 123 EventWrite (forwarded to ntdll.EtwEventWrite) 1294 124 EventWriteEndScenario (forwarded to ntdll.EtwEventWriteEndScenario) 1295 125 EventWriteEx (forwarded to ntdll.EtwEventWriteEx) 1296 126 EventWriteStartScenario (forwarded to ntdll.EtwEventWriteStartScenario) 1297 127 EventWriteString (forwarded to ntdll.EtwEventWriteString) 1298 128 EventWriteTransfer (forwarded to ntdll.EtwEventWriteTransfer) 1299 129 0002F4C0 FileEncryptionStatusA 1300 12A 0002F570 FileEncryptionStatusW 1301 12B 00030940 FindFirstFreeAce 1302 12C 0002F5D0 FlushEfsCache 1303 12D 00041C20 FlushTraceA 1304 12E 00041C40 FlushTraceW 1305 12F 0002F670 FreeEncryptedFileKeyInfo 1306 130 0001F930 FreeEncryptedFileMetadata 1307 131 0002F6C0 FreeEncryptionCertificateHashList 1308 132 0003D1A0 FreeInheritedFromArray 1309 133 000189C0 FreeSid 1310 134 0003E6C0 GetAccessPermissionsForObjectA 1311 135 0003E9C0 GetAccessPermissionsForObjectW 1312 136 00018EC0 GetAce 1313 137 0001B980 GetAclInformation 1314 138 0003D200 GetAuditedPermissionsFromAclA 1315 139 0003D280 GetAuditedPermissionsFromAclW 1316 13A 0002D010 GetCurrentHwProfileA 1317 13B 00014840 GetCurrentHwProfileW 1318 13C 00030950 GetDynamicTimeZoneInformationEffectiveYears 1319 13D 0003D330 GetEffectiveRightsFromAclA 1320 13E 0003D3A0 GetEffectiveRightsFromAclW 1321 13F 00049030 GetEncryptedFileMetadata 1322 140 0001C140 GetEventLogInformation 1323 141 00030960 GetExplicitEntriesFromAclA 1324 142 00030960 GetExplicitEntriesFromAclW 1325 143 0002D870 GetFileSecurityA 1326 144 00019130 GetFileSecurityW 1327 145 000376E0 GetInformationCodeAuthzLevelW 1328 146 00005B60 GetInformationCodeAuthzPolicyW 1329 147 0003DB10 GetInheritanceSourceA 1330 148 0003D450 GetInheritanceSourceW 1331 149 0001BA40 GetKernelObjectSecurity 1332 14A 00017840 GetLengthSid 1333 14B 00001D10 GetLocalManagedApplicationData 1334 14C 00035630 GetLocalManagedApplications 1335 14D 000358F0 GetManagedApplicationCategories 1336 14E 00035960 GetManagedApplications 1337 14F 0003DD40 GetMultipleTrusteeA 1338 150 0003DD20 GetMultipleTrusteeOperationA 1339 151 0003DD20 GetMultipleTrusteeOperationW 1340 152 0003DD40 GetMultipleTrusteeW 1341 153 0003D520 GetNamedSecurityInfoA 1342 154 0003EB00 GetNamedSecurityInfoExA 1343 155 0003ED60 GetNamedSecurityInfoExW 1344 156 0001B990 GetNamedSecurityInfoW 1345 157 0002C730 GetNumberOfEventLogRecords 1346 158 0002C760 GetOldestEventLogRecord 1347 159 0003F030 GetOverlappedAccessResults 1348 15A 00030970 GetPrivateObjectSecurity 1349 15B 0001D7D0 GetSecurityDescriptorControl 1350 15C 00018F00 GetSecurityDescriptorDacl 1351 15D 0001DA90 GetSecurityDescriptorGroup 1352 15E 00019260 GetSecurityDescriptorLength 1353 15F 00019190 GetSecurityDescriptorOwner 1354 160 00030980 GetSecurityDescriptorRMControl 1355 161 0001CA90 GetSecurityDescriptorSacl 1356 162 00018610 GetSecurityInfo 1357 163 0003F150 GetSecurityInfoExA 1358 164 0003F380 GetSecurityInfoExW 1359 165 00049720 GetServiceDisplayNameA 1360 166 00030990 GetServiceDisplayNameW 1361 167 000497C0 GetServiceKeyNameA 1362 168 000309A0 GetServiceKeyNameW 1363 169 0001D600 GetSidIdentifierAuthority 1364 16A 0001B950 GetSidLengthRequired 1365 16B 00018FC0 GetSidSubAuthority 1366 16C 00018F90 GetSidSubAuthorityCount 1367 16D 00049EE0 GetStringConditionFromBinary 1368 16E 0005E060 GetThreadWaitChain 1369 16F 000172D0 GetTokenInformation 1370 170 GetTraceEnableFlags (forwarded to ntdll.EtwGetTraceEnableFlags) 1371 171 GetTraceEnableLevel (forwarded to ntdll.EtwGetTraceEnableLevel) 1372 172 GetTraceLoggerHandle (forwarded to ntdll.EtwGetTraceLoggerHandle) 1373 173 0003DD60 GetTrusteeFormA 1374 174 0003DD60 GetTrusteeFormW 1375 175 0003DD80 GetTrusteeNameA 1376 176 0003DD80 GetTrusteeNameW 1377 177 0003DD90 GetTrusteeTypeA 1378 178 0003DD90 GetTrusteeTypeW 1379 179 0002EC40 GetUserNameA 1380 17A 0001DA40 GetUserNameW 1381 17B 000309B0 GetWindowsAccountDomainSid 1382 17C I_QueryTagInformation (forwarded to api-ms-win-service-private-l1-1-0.I_QueryTagInformation) 1001 17D 00049030 I_ScGetCurrentGroupStateW 1383 17E I_ScIsSecurityProcess (forwarded to api-ms-win-service-private-l1-1-0.I_ScIsSecurityProcess) 1384 17F I_ScPnPGetServiceName (forwarded to api-ms-win-service-private-l1-1-0.I_ScPnPGetServiceName) 1385 180 I_ScQueryServiceConfig (forwarded to api-ms-win-service-private-l1-1-0.I_ScQueryServiceConfig) 1386 181 0001E8F0 I_ScRegisterPreshutdownRestart 1387 182 I_ScSendPnPMessage (forwarded to api-ms-win-service-private-l1-1-0.I_ScSendPnPMessage) 1388 183 I_ScSendTSMessage (forwarded to api-ms-win-service-private-l1-1-0.I_ScSendTSMessage) 1389 184 000309C0 I_ScSetServiceBitsA 1390 185 000309D0 I_ScSetServiceBitsW 1391 186 I_ScValidatePnPService (forwarded to api-ms-win-service-private-l1-1-0.I_ScValidatePnPService) 1392 187 0000A7D0 IdentifyCodeAuthzLevelW 1393 188 000309E0 ImpersonateAnonymousToken 1394 189 000190A0 ImpersonateLoggedOnUser 1395 18A 000309F0 ImpersonateNamedPipeClient 1396 18B 00019300 ImpersonateSelf 1397 18C 00018E20 InitializeAcl 1398 18D 00018E40 InitializeSecurityDescriptor 1399 18E 0001B960 InitializeSid 1400 18F 00045F60 InitiateShutdownA 1401 190 0001BC00 InitiateShutdownW 1402 191 00046060 InitiateSystemShutdownA 1403 192 00046170 InitiateSystemShutdownExA 1404 193 00048C50 InitiateSystemShutdownExW 1405 194 00046280 InitiateSystemShutdownW 1406 195 00035970 InstallApplication 1407 196 00016C80 IsTextUnicode 1408 197 00030A00 IsTokenRestricted 1409 198 00037480 IsTokenUntrusted 1410 199 00030A10 IsValidAcl 1411 19A IsValidRelativeSecurityDescriptor (forwarded to KERNELBASE.IsValidRelativeSecurityDescriptor) 1412 19B 00030A20 IsValidSecurityDescriptor 1413 19C 00017870 IsValidSid 1414 19D 0001DB70 IsWellKnownSid 1415 19E 00049860 LockServiceDatabase 1416 19F 0002ED60 LogonUserA 1417 1A0 0002EF00 LogonUserExA 1418 1A1 00030A30 LogonUserExExW 1419 1A2 0001D910 LogonUserExW 1420 1A3 00016D80 LogonUserW 1421 1A4 0002D920 LookupAccountNameA 1422 1A5 00017680 LookupAccountNameW 1423 1A6 0002DD80 LookupAccountSidA 1424 1A7 00017600 LookupAccountSidW 1425 1A8 0002E2B0 LookupPrivilegeDisplayNameA 1426 1A9 0002E450 LookupPrivilegeDisplayNameW 1427 1AA 0002E5C0 LookupPrivilegeNameA 1428 1AB 000187B0 LookupPrivilegeNameW 1429 1AC 0002E720 LookupPrivilegeValueA 1430 1AD 0000E920 LookupPrivilegeValueW 1431 1AE 0003D5C0 LookupSecurityDescriptorPartsA 1432 1AF 0003D840 LookupSecurityDescriptorPartsW 1433 1B0 00030AA0 LsaAddAccountRights 1434 1B1 00032410 LsaAddPrivilegesToAccount 1435 1B2 00032490 LsaClearAuditLog 1436 1B3 00019210 LsaClose 1437 1B4 00032510 LsaCreateAccount 1438 1B5 00030AB0 LsaCreateSecret 1439 1B6 00032610 LsaCreateTrustedDomain 1440 1B7 00033EA0 LsaCreateTrustedDomainEx 1441 1B8 00030AC0 LsaDelete 1442 1B9 00033FE0 LsaDeleteTrustedDomain 1443 1BA 00030AD0 LsaEnumerateAccountRights 1444 1BB 00032710 LsaEnumerateAccounts 1445 1BC 00030AE0 LsaEnumerateAccountsWithUserRight 1446 1BD 000327E0 LsaEnumeratePrivileges 1447 1BE 000328B0 LsaEnumeratePrivilegesOfAccount 1448 1BF 00032930 LsaEnumerateTrustedDomains 1449 1C0 00034060 LsaEnumerateTrustedDomainsEx 1450 1C1 00019080 LsaFreeMemory 1451 1C2 00032A00 LsaGetAppliedCAPIDs 1452 1C3 00032B40 LsaGetQuotasForAccount 1453 1C4 00032BC0 LsaGetRemoteUserName 1454 1C5 00032D90 LsaGetSystemAccessAccount 1455 1C6 00011810 LsaGetUserName 1456 1C7 00030AF0 LsaICLookupNames 1457 1C8 00030B50 LsaICLookupNamesWithCreds 1458 1C9 00030BD0 LsaICLookupSids 1459 1CA 00030BE0 LsaICLookupSidsWithCreds 1460 1CB 00032E10 LsaLookupNames 1461 1CC 00030C60 LsaLookupNames2 1462 1CD 00032F80 LsaLookupPrivilegeDisplayName 1463 1CE 000188E0 LsaLookupPrivilegeName 1464 1CF 0000EA00 LsaLookupPrivilegeValue 1465 1D0 000191B0 LsaLookupSids 1466 1D1 00030C70 LsaLookupSids2 1467 1D2 0001D510 LsaManageSidNameMapping 1468 1D3 00017270 LsaNtStatusToWinError 1469 1D4 00033240 LsaOpenAccount 1470 1D5 00019220 LsaOpenPolicy 1471 1D6 00033340 LsaOpenPolicySce 1472 1D7 00030C80 LsaOpenSecret 1473 1D8 00033440 LsaOpenTrustedDomain 1474 1D9 00034130 LsaOpenTrustedDomainByName 1475 1DA 00033540 LsaQueryCAPs 1476 1DB 00034230 LsaQueryDomainInformationPolicy 1477 1DC 000342D0 LsaQueryForestTrustInformation 1478 1DD 00033680 LsaQueryInfoTrustedDomain 1479 1DE 00019240 LsaQueryInformationPolicy 1480 1DF 00030C90 LsaQuerySecret 1481 1E0 00033740 LsaQuerySecurityObject 1482 1E1 00034360 LsaQueryTrustedDomainInfo 1483 1E2 00034440 LsaQueryTrustedDomainInfoByName 1484 1E3 00030CA0 LsaRemoveAccountRights 1485 1E4 000337F0 LsaRemovePrivilegesFromAccount 1486 1E5 00030CB0 LsaRetrievePrivateData 1487 1E6 00033870 LsaSetCAPs 1488 1E7 000344E0 LsaSetDomainInformationPolicy 1489 1E8 00034570 LsaSetForestTrustInformation 1490 1E9 00030CC0 LsaSetInformationPolicy 1491 1EA 00033980 LsaSetInformationTrustedDomain 1492 1EB 00033BD0 LsaSetQuotasForAccount 1493 1EC 00030CD0 LsaSetSecret 1494 1ED 00033C50 LsaSetSecurityObject 1495 1EE 00033D80 LsaSetSystemAccessAccount 1496 1EF 00034610 LsaSetTrustedDomainInfoByName 1497 1F0 00034870 LsaSetTrustedDomainInformation 1498 1F1 0001CC60 LsaStorePrivateData 1499 1F2 MD4Final (forwarded to NTDLL.MD4Final) 1500 1F3 MD4Init (forwarded to NTDLL.MD4Init) 1501 1F4 MD4Update (forwarded to NTDLL.MD4Update) 1502 1F5 MD5Final (forwarded to NTDLL.MD5Final) 1503 1F6 MD5Init (forwarded to NTDLL.MD5Init) 1504 1F7 MD5Update (forwarded to NTDLL.MD5Update) 1505 1F8 000565D0 MIDL_user_free_Ext 1506 1F9 000310D0 MSChapSrvChangePassword 1507 1FA 000313D0 MSChapSrvChangePassword2 1508 1FB 00018F10 MakeAbsoluteSD 1509 1FC 00030D40 MakeAbsoluteSD2 1510 1FD 00019320 MakeSelfRelativeSD 1511 1FE 00030D50 MapGenericMask 1512 1FF 0001C5F0 NotifyBootConfigStatus 1513 200 0002C790 NotifyChangeEventLog 1514 201 0001E8E0 NotifyServiceStatusChange 1515 202 00030D60 NotifyServiceStatusChangeA 1516 203 0001CAC0 NotifyServiceStatusChangeW 1517 204 0002CF30 NpGetUserName 1518 205 0002E7E0 ObjectCloseAuditAlarmA 1519 206 00030D70 ObjectCloseAuditAlarmW 1520 207 0002E860 ObjectDeleteAuditAlarmA 1521 208 00030D80 ObjectDeleteAuditAlarmW 1522 209 0002E8E0 ObjectOpenAuditAlarmA 1523 20A 00030D90 ObjectOpenAuditAlarmW 1524 20B 0002EA40 ObjectPrivilegeAuditAlarmA 1525 20C 00030E10 ObjectPrivilegeAuditAlarmW 1526 20D 0002C7C0 OpenBackupEventLogA 1527 20E 0002C890 OpenBackupEventLogW 1528 20F 0002F7F0 OpenEncryptedFileRawA 1529 210 0002F8A0 OpenEncryptedFileRawW 1530 211 0002CA10 OpenEventLogA 1531 212 0001C170 OpenEventLogW 1532 213 00017B00 OpenProcessToken 1533 214 000192E0 OpenSCManagerA 1534 215 000191A0 OpenSCManagerW 1535 216 00030E20 OpenServiceA 1536 217 00018FE0 OpenServiceW 1537 218 00017EF0 OpenThreadToken 1538 219 0005E230 OpenThreadWaitChainSession 1539 21A 00041FE0 OpenTraceA 1540 21B 00019280 OpenTraceW 1541 21C 000316B0 OperationEnd 1542 21D 00031790 OperationStart 1543 21E 000161D0 PerfAddCounters 1544 21F 00015890 PerfCloseQueryHandle 1545 220 PerfCreateInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfCreateInstance) 1546 221 PerfDecrementULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDecrementULongCounterValue) 1547 222 PerfDecrementULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDecrementULongLongCounterValue) 1548 223 00046690 PerfDeleteCounters 1549 224 PerfDeleteInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDeleteInstance) 1550 225 00005590 PerfEnumerateCounterSet 1551 226 000150C0 PerfEnumerateCounterSetInstances 1552 227 PerfIncrementULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfIncrementULongCounterValue) 1553 228 PerfIncrementULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfIncrementULongLongCounterValue) 1554 229 00015940 PerfOpenQueryHandle 1555 22A 000146A0 PerfQueryCounterData 1556 22B 000160F0 PerfQueryCounterInfo 1557 22C 00015190 PerfQueryCounterSetRegistrationInfo 1558 22D PerfQueryInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfQueryInstance) 1559 22E 0001B0D0 PerfRegCloseKey 1560 22F 00051C80 PerfRegEnumKey 1561 230 00051CE0 PerfRegEnumValue 1562 231 0001B3D0 PerfRegQueryInfoKey 1563 232 000109B0 PerfRegQueryValue 1564 233 00051ED0 PerfRegSetValue 1565 234 PerfSetCounterRefValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetCounterRefValue) 1566 235 PerfSetCounterSetInfo (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetCounterSetInfo) 1567 236 PerfSetULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetULongCounterValue) 1568 237 PerfSetULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetULongLongCounterValue) 1569 238 PerfStartProvider (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStartProvider) 1570 239 PerfStartProviderEx (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStartProviderEx) 1571 23A PerfStopProvider (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStopProvider) 1572 23B 00030E30 PrivilegeCheck 1573 23C 0002EAE0 PrivilegedServiceAuditAlarmA 1574 23D 00030E40 PrivilegedServiceAuditAlarmW 1575 23E 00031B60 ProcessIdleTasks 1576 23F 00031BF0 ProcessIdleTasksW 1577 240 00019270 ProcessTrace 1578 241 0001E700 QueryAllTracesA 1579 242 00002930 QueryAllTracesW 1580 243 0002F920 QueryRecoveryAgentsOnEncryptedFile 1581 244 00030E50 QuerySecurityAccessMask 1582 245 00030E60 QueryServiceConfig2A 1583 246 0001DB30 QueryServiceConfig2W 1584 247 00030E70 QueryServiceConfigA 1585 248 00019050 QueryServiceConfigW 1586 249 00030E80 QueryServiceDynamicInformation 1587 24A 000498E0 QueryServiceLockStatusA 1588 24B 00049A50 QueryServiceLockStatusW 1589 24C 00030E90 QueryServiceObjectSecurity 1590 24D 0001BA90 QueryServiceStatus 1591 24E 0001CAA0 QueryServiceStatusEx 1592 24F 00041C60 QueryTraceA 1593 250 000192B0 QueryTraceW 1594 251 0002F9A0 QueryUsersOnEncryptedFile 1595 252 0002FA20 ReadEncryptedFileRaw 1596 253 0002CA80 ReadEventLogA 1597 254 0002CB10 ReadEventLogW 1598 255 000172E0 RegCloseKey 1599 256 00046AB0 RegConnectRegistryA 1600 257 00046AD0 RegConnectRegistryExA 1601 258 0001C670 RegConnectRegistryExW 1602 259 0001C650 RegConnectRegistryW 1603 25A 00046D40 RegCopyTreeA 1604 25B 00030EA0 RegCopyTreeW 1605 25C 00046DC0 RegCreateKeyA 1606 25D 00019070 RegCreateKeyExA 1607 25E 000175F0 RegCreateKeyExW 1608 25F 00046E40 RegCreateKeyTransactedA 1609 260 0001B340 RegCreateKeyTransactedW 1610 261 00018FF0 RegCreateKeyW 1611 262 00002580 RegDeleteKeyA 1612 263 00030EB0 RegDeleteKeyExA 1613 264 0001D440 RegDeleteKeyExW 1614 265 00047000 RegDeleteKeyTransactedA 1615 266 0001AFE0 RegDeleteKeyTransactedW 1616 267 00030EC0 RegDeleteKeyValueA 1617 268 00030ED0 RegDeleteKeyValueW 1618 269 00017F00 RegDeleteKeyW 1619 26A 00030EE0 RegDeleteTreeA 1620 26B 0001DB60 RegDeleteTreeW 1621 26C 00002960 RegDeleteValueA 1622 26D 000190B0 RegDeleteValueW 1623 26E 00019100 RegDisablePredefinedCache 1624 26F 00030EF0 RegDisablePredefinedCacheEx 1625 270 0001F960 RegDisableReflectionKey 1626 271 0001F960 RegEnableReflectionKey 1627 272 0001D780 RegEnumKeyA 1628 273 000025D0 RegEnumKeyExA 1629 274 00017180 RegEnumKeyExW 1630 275 00017280 RegEnumKeyW 1631 276 00030F00 RegEnumValueA 1632 277 00017220 RegEnumValueW 1633 278 0001BA30 RegFlushKey 1634 279 00019200 RegGetKeySecurity 1635 27A 00030F50 RegGetValueA 1636 27B 00017D90 RegGetValueW 1637 27C 00030F60 RegLoadAppKeyA 1638 27D 0001DB80 RegLoadAppKeyW 1639 27E 00030F70 RegLoadKeyA 1640 27F 00030F80 RegLoadKeyW 1641 280 00030F90 RegLoadMUIStringA 1642 281 00030FA0 RegLoadMUIStringW 1643 282 00018FD0 RegNotifyChangeKeyValue 1644 283 00019150 RegOpenCurrentUser 1645 284 0001B9E0 RegOpenKeyA 1646 285 00017D70 RegOpenKeyExA 1647 286 00016CB0 RegOpenKeyExW 1648 287 00046ED0 RegOpenKeyTransactedA 1649 288 0001B7E0 RegOpenKeyTransactedW 1650 289 00017AB0 RegOpenKeyW 1651 28A 00030FB0 RegOpenUserClassesRoot 1652 28B 00046F10 RegOverridePredefKey 1653 28C 000028B0 RegQueryInfoKeyA 1654 28D 000177C0 RegQueryInfoKeyW 1655 28E 000473E0 RegQueryMultipleValuesA 1656 28F 00047A70 RegQueryMultipleValuesW 1657 290 000316A0 RegQueryReflectionKey 1658 291 00048180 RegQueryValueA 1659 292 00017DD0 RegQueryValueExA 1660 293 00016C70 RegQueryValueExW 1661 294 00017980 RegQueryValueW 1662 295 00046F80 RegRenameKey 1663 296 00048440 RegReplaceKeyA 1664 297 00048D80 RegReplaceKeyW 1665 298 00030FC0 RegRestoreKeyA 1666 299 00030FD0 RegRestoreKeyW 1667 29A 00048670 RegSaveKeyA 1668 29B 00030FE0 RegSaveKeyExA 1669 29C 00030FF0 RegSaveKeyExW 1670 29D 00048820 RegSaveKeyW 1671 29E 0001DA80 RegSetKeySecurity 1672 29F 00031000 RegSetKeyValueA 1673 2A0 0001B080 RegSetKeyValueW 1674 2A1 000489A0 RegSetValueA 1675 2A2 00002680 RegSetValueExA 1676 2A3 00017850 RegSetValueExW 1677 2A4 00048AF0 RegSetValueW 1678 2A5 00031010 RegUnLoadKeyA 1679 2A6 00031020 RegUnLoadKeyW 1680 2A7 0002CB90 RegisterEventSourceA 1681 2A8 00019960 RegisterEventSourceW 1682 2A9 0001B820 RegisterIdleTask 1683 2AA 0001DB50 RegisterServiceCtrlHandlerA 1684 2AB 00031030 RegisterServiceCtrlHandlerExA 1685 2AC 000192C0 RegisterServiceCtrlHandlerExW 1686 2AD 00019310 RegisterServiceCtrlHandlerW 1687 2AE RegisterTraceGuidsA (forwarded to ntdll.EtwRegisterTraceGuidsA) 1688 2AF RegisterTraceGuidsW (forwarded to ntdll.EtwRegisterTraceGuidsW) 1689 2B0 0005E330 RegisterWaitChainCOMCallback 1690 2B1 00047040 RemoteRegEnumKeyWrapper 1691 2B2 000471A0 RemoteRegEnumValueWrapper 1692 2B3 000472C0 RemoteRegQueryInfoKeyWrapper 1693 2B4 000483B0 RemoteRegQueryValueWrapper 1694 2B5 RemoveTraceCallback (forwarded to sechost.RemoveTraceCallback) 1695 2B6 0002FA80 RemoveUsersFromEncryptedFile 1696 2B7 0002CBF0 ReportEventA 1697 2B8 000193F0 ReportEventW 1698 2B9 000189D0 RevertToSelf 1699 2BA 00046650 SafeBaseRegGetKeySecurity 1700 2BB 00016CC0 SaferCloseLevel 1701 2BC 00003BA0 SaferComputeTokenFromLevel 1702 2BD 00036DA0 SaferCreateLevel 1703 2BE 000376E0 SaferGetLevelInformation 1704 2BF 00005B60 SaferGetPolicyInformation 1705 2C0 0000A7D0 SaferIdentifyLevel 1706 2C1 00038FA0 SaferRecordEventLogEntry 1707 2C2 00039650 SaferSetLevelInformation 1708 2C3 000381B0 SaferSetPolicyInformation 1709 2C4 0003A810 SaferiChangeRegistryScope 1710 2C5 00004280 SaferiCompareTokenLevels 1711 2C6 000387E0 SaferiIsDllAllowed 1712 2C7 0003AF00 SaferiIsExecutableFileType 1713 2C8 0003A840 SaferiPopulateDefaultsInRegistry 1714 2C9 00038FA0 SaferiRecordEventLogEntry 1715 2CA 00017B60 SaferiSearchMatchingHashRules 1716 2CB 00031040 SetAclInformation 1717 2CC 00049030 SetEncryptedFileMetadata 1718 2CD 0003F660 SetEntriesInAccessListA 1719 2CE 0003F6B0 SetEntriesInAccessListW 1720 2CF 0001D7F0 SetEntriesInAclA 1721 2D0 00019170 SetEntriesInAclW 1722 2D1 0003F700 SetEntriesInAuditListA 1723 2D2 0003F740 SetEntriesInAuditListW 1724 2D3 0002EBB0 SetFileSecurityA 1725 2D4 000192F0 SetFileSecurityW 1726 2D5 00039650 SetInformationCodeAuthzLevelW 1727 2D6 000381B0 SetInformationCodeAuthzPolicyW 1728 2D7 0001BA80 SetKernelObjectSecurity 1729 2D8 0003DA80 SetNamedSecurityInfoA 1730 2D9 0003F780 SetNamedSecurityInfoExA 1731 2DA 0003FBB0 SetNamedSecurityInfoExW 1732 2DB 0001B970 SetNamedSecurityInfoW 1733 2DC 00031060 SetPrivateObjectSecurity 1734 2DD 00031050 SetPrivateObjectSecurityEx 1735 2DE 00031070 SetSecurityAccessMask 1736 2DF 0001DAB0 SetSecurityDescriptorControl 1737 2E0 00018E30 SetSecurityDescriptorDacl 1738 2E1 0001BA70 SetSecurityDescriptorGroup 1739 2E2 000190F0 SetSecurityDescriptorOwner 1740 2E3 00031080 SetSecurityDescriptorRMControl 1741 2E4 0001B0B0 SetSecurityDescriptorSacl 1742 2E5 00018970 SetSecurityInfo 1743 2E6 0003FEE0 SetSecurityInfoExA 1744 2E7 000402C0 SetSecurityInfoExW 1745 2E8 0001DAF0 SetServiceBits 1746 2E9 00031090 SetServiceObjectSecurity 1747 2EA 000190C0 SetServiceStatus 1748 2EB 00002940 SetThreadToken 1749 2EC 00019290 SetTokenInformation 1750 2ED SetTraceCallback (forwarded to sechost.SetTraceCallback) 1751 2EE 0002FB00 SetUserFileEncryptionKey 1752 2EF 0002FB60 SetUserFileEncryptionKeyEx 1753 2F0 000310A0 StartServiceA 1754 2F1 0001DB40 StartServiceCtrlDispatcherA 1755 2F2 00019180 StartServiceCtrlDispatcherW 1756 2F3 0001BDD0 StartServiceW 1757 2F4 0001E710 StartTraceA 1758 2F5 000192D0 StartTraceW 1759 2F6 00041C70 StopTraceA 1760 2F7 00002950 StopTraceW 1761 2F8 SystemFunction001 (forwarded to CRYPTBASE.SystemFunction001) 1762 2F9 SystemFunction002 (forwarded to CRYPTBASE.SystemFunction002) 1763 2FA SystemFunction003 (forwarded to CRYPTBASE.SystemFunction003) 1764 2FB SystemFunction004 (forwarded to CRYPTBASE.SystemFunction004) 1765 2FC SystemFunction005 (forwarded to CRYPTBASE.SystemFunction005) 1766 2FD SystemFunction006 (forwarded to CRYPTSP.SystemFunction006) 1767 2FE SystemFunction007 (forwarded to CRYPTSP.SystemFunction007) 1768 2FF SystemFunction008 (forwarded to CRYPTSP.SystemFunction008) 1769 300 SystemFunction009 (forwarded to CRYPTSP.SystemFunction009) 1770 301 SystemFunction010 (forwarded to CRYPTSP.SystemFunction010) 1771 302 SystemFunction011 (forwarded to CRYPTSP.SystemFunction011) 1772 303 SystemFunction012 (forwarded to CRYPTSP.SystemFunction012) 1773 304 SystemFunction013 (forwarded to CRYPTSP.SystemFunction013) 1774 305 SystemFunction014 (forwarded to CRYPTSP.SystemFunction014) 1775 306 SystemFunction015 (forwarded to CRYPTSP.SystemFunction015) 1776 307 SystemFunction016 (forwarded to CRYPTSP.SystemFunction016) 1777 308 00031C20 SystemFunction017 1778 309 SystemFunction018 (forwarded to CRYPTSP.SystemFunction018) 1779 30A 00031C70 SystemFunction019 1780 30B SystemFunction020 (forwarded to CRYPTSP.SystemFunction020) 1781 30C SystemFunction021 (forwarded to CRYPTSP.SystemFunction021) 1782 30D SystemFunction022 (forwarded to CRYPTSP.SystemFunction022) 1783 30E SystemFunction023 (forwarded to CRYPTSP.SystemFunction023) 1784 30F SystemFunction024 (forwarded to CRYPTSP.SystemFunction024) 1785 310 SystemFunction025 (forwarded to CRYPTSP.SystemFunction025) 1786 311 SystemFunction026 (forwarded to CRYPTSP.SystemFunction026) 1787 312 SystemFunction027 (forwarded to CRYPTSP.SystemFunction027) 1788 313 SystemFunction028 (forwarded to CRYPTBASE.SystemFunction028) 1789 314 SystemFunction029 (forwarded to CRYPTBASE.SystemFunction029) 1790 315 SystemFunction030 (forwarded to CRYPTSP.SystemFunction030) 1791 316 SystemFunction031 (forwarded to CRYPTSP.SystemFunction031) 1792 317 SystemFunction032 (forwarded to CRYPTSP.SystemFunction032) 1793 318 SystemFunction033 (forwarded to CRYPTSP.SystemFunction033) 1794 319 SystemFunction034 (forwarded to CRYPTBASE.SystemFunction034) 1795 31A SystemFunction035 (forwarded to CRYPTSP.CheckSignatureInFile) 1796 31B SystemFunction036 (forwarded to CRYPTBASE.SystemFunction036) 1797 31C SystemFunction040 (forwarded to CRYPTBASE.SystemFunction040) 1798 31D SystemFunction041 (forwarded to CRYPTBASE.SystemFunction041) 1799 31E TraceEvent (forwarded to ntdll.EtwLogTraceEvent) 1800 31F TraceEventInstance (forwarded to ntdll.EtwTraceEventInstance) 1801 320 TraceMessage (forwarded to ntdll.EtwTraceMessage) 1802 321 TraceMessageVa (forwarded to ntdll.EtwTraceMessageVa) 1803 322 TraceQueryInformation (forwarded to api-ms-win-eventing-controller-l1-1-0.TraceQueryInformation) 1804 323 000310B0 TraceSetInformation 1805 324 0003DB10 TreeResetNamedSecurityInfoA 1806 325 000026E0 TreeResetNamedSecurityInfoW 1807 326 0003DB10 TreeSetNamedSecurityInfoA 1808 327 0003DB20 TreeSetNamedSecurityInfoW 1809 328 000405F0 TrusteeAccessToObjectA 1810 329 00040840 TrusteeAccessToObjectW 1811 32A 00035980 UninstallApplication 1812 32B 00049BD0 UnlockServiceDatabase 1813 32C 00031C00 UnregisterIdleTask 1814 32D UnregisterTraceGuids (forwarded to ntdll.EtwUnregisterTraceGuids) 1815 32E 00041C90 UpdateTraceA 1816 32F 00041CB0 UpdateTraceW 1817 330 0002FBF0 UsePinForEncryptedFilesA 1818 331 0002FC80 UsePinForEncryptedFilesW 1819 332 000310C0 WaitServiceState 1820 333 0001B020 WmiCloseBlock 1821 334 00056AB0 WmiDevInstToInstanceNameA 1822 335 00056B90 WmiDevInstToInstanceNameW 1823 336 00056C70 WmiEnumerateGuids 1824 337 00056E20 WmiExecuteMethodA 1825 338 00056F10 WmiExecuteMethodW 1826 339 00057250 WmiFileHandleToInstanceNameA 1827 33A 000574A0 WmiFileHandleToInstanceNameW 1828 33B 00057680 WmiFreeBuffer 1829 33C 00058AE0 WmiMofEnumerateResourcesA 1830 33D 00058D00 WmiMofEnumerateResourcesW 1831 33E 000576C0 WmiNotificationRegistrationA 1832 33F 00057740 WmiNotificationRegistrationW 1833 340 0001A870 WmiOpenBlock 1834 341 000577C0 WmiQueryAllDataA 1835 342 00057830 WmiQueryAllDataMultipleA 1836 343 000578B0 WmiQueryAllDataMultipleW 1837 344 00057AB0 WmiQueryAllDataW 1838 345 00057CF0 WmiQueryGuidInformation 1839 346 00057D90 WmiQuerySingleInstanceA 1840 347 00057E60 WmiQuerySingleInstanceMultipleA 1841 348 00057FF0 WmiQuerySingleInstanceMultipleW 1842 349 0001AA00 WmiQuerySingleInstanceW 1843 34A 00058220 WmiReceiveNotificationsA 1844 34B 00058290 WmiReceiveNotificationsW 1845 34C 00058300 WmiSetSingleInstanceA 1846 34D 000583C0 WmiSetSingleInstanceW 1847 34E 00058580 WmiSetSingleItemA 1848 34F 00058650 WmiSetSingleItemW 1849 350 0002FD20 WriteEncryptedFileRaw 1000 00038950 [NONAME] Summary 5000 .data 1000 .didat 5000 .pdata 34000 .rdata 2000 .reloc 1000 .rsrc 63000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file bcrypt.dll File Type: DLL Section contains the following exports for bcrypt.dll 00000000 characteristics 559F3035 time date stamp Thu Jul 9 19:38:45 2015 0.00 version 1 ordinal base 58 number of functions 58 number of names ordinal hint RVA name 1 0 000183C0 BCryptAddContextFunction 2 1 00018590 BCryptAddContextFunctionProvider 3 2 00003810 BCryptCloseAlgorithmProvider 4 3 00018780 BCryptConfigureContext 5 4 00018920 BCryptConfigureContextFunction 6 5 00018AE0 BCryptCreateContext 7 6 00003F60 BCryptCreateHash 8 7 00011B00 BCryptCreateMultiHash 9 8 00006070 BCryptDecrypt 10 9 00018C80 BCryptDeleteContext 11 A 00006A70 BCryptDeriveKey 12 B 00002B00 BCryptDeriveKeyCapi 13 C 000031B0 BCryptDeriveKeyPBKDF2 14 D 00004780 BCryptDestroyHash 15 E 00006560 BCryptDestroyKey 16 F 00006990 BCryptDestroySecret 17 10 00001A60 BCryptDuplicateHash 18 11 00001010 BCryptDuplicateKey 19 12 00006D30 BCryptEncrypt 20 13 00011D60 BCryptEnumAlgorithms 21 14 0000AC90 BCryptEnumContextFunctionProviders 22 15 0000AAB0 BCryptEnumContextFunctions 23 16 00018E10 BCryptEnumContexts 24 17 00012190 BCryptEnumProviders 25 18 00018F70 BCryptEnumRegisteredProviders 26 19 00002550 BCryptExportKey 27 1A 000068F0 BCryptFinalizeKeyPair 28 1B 00004860 BCryptFinishHash 29 1C 00005ED0 BCryptFreeBuffer 30 1D 00003620 BCryptGenRandom 31 1E 00002220 BCryptGenerateKeyPair 32 1F 000038B0 BCryptGenerateSymmetricKey 33 20 00006270 BCryptGetFipsAlgorithmMode 34 21 00004270 BCryptGetProperty 35 22 00012530 BCryptHash 36 23 000046E0 BCryptHashData 37 24 00001FA0 BCryptImportKey 38 25 00002F00 BCryptImportKeyPair 39 26 000066E0 BCryptKeyDerivation 40 27 00004A00 BCryptOpenAlgorithmProvider 41 28 000125D0 BCryptProcessMultiOperations 42 29 00019040 BCryptQueryContextConfiguration 43 2A 00019220 BCryptQueryContextFunctionConfiguration 44 2B 00019460 BCryptQueryContextFunctionProperty 45 2C 0000AED0 BCryptQueryProviderRegistration 46 2D 0000B420 BCryptRegisterConfigChangeNotify 47 2E 000196C0 BCryptRegisterProvider 48 2F 000198C0 BCryptRemoveContextFunction 49 30 00019A80 BCryptRemoveContextFunctionProvider 50 31 00005520 BCryptResolveProviders 51 32 000067D0 BCryptSecretAgreement 52 33 0000B600 BCryptSetAuditingInterface 53 34 00019C50 BCryptSetContextFunctionProperty 54 35 00003700 BCryptSetProperty 55 36 0000B6E0 BCryptSignHash 56 37 00019E60 BCryptUnregisterConfigChangeNotify 57 38 00019F60 BCryptUnregisterProvider 58 39 00005F20 BCryptVerifySignature Dump of file bcryptprimitives.dll File Type: DLL Section contains the following exports for bcryptPrimitives.dll 00000000 characteristics 559F301F time date stamp Thu Jul 9 19:38:23 2015 0.00 version 1 ordinal base 9 number of functions 9 number of names ordinal hint RVA name 1 0 00020780 GetAsymmetricEncryptionInterface 2 1 00016D20 GetCipherInterface 3 2 00020B90 GetHashInterface 4 3 00001F30 GetKeyDerivationInterface 5 4 00021940 GetRngInterface 6 5 000219C0 GetSecretAgreementInterface 7 6 00001E60 GetSignatureInterface 8 7 0001B980 ProcessPrng 9 8 00036400 ProcessPrngGuid Summary 2000 .data 5000 .pdata 18000 .rdata 2000 .reloc 2000 .rsrc 6E000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file cfgmgr32.dll File Type: DLL Section contains the following exports for CFGMGR32.dll 00000000 characteristics 559F2B9C time date stamp Thu Jul 9 19:19:08 2015 0.00 version 1 ordinal base 276 number of functions 276 number of names ordinal hint RVA name 1 0 0001D320 CMP_GetBlockedDriverInfo 2 1 0001D390 CMP_GetServerSideDeviceInstallFlags 3 2 0001D400 CMP_Init_Detection 4 3 0001D990 CMP_RegisterServiceNotification 5 4 00002F00 CMP_Register_Notification 6 5 0001D420 CMP_Report_LogOn 7 6 0000E840 CMP_WaitNoPendingInstallEvents 8 7 0001D440 CMP_WaitServicesAvailable 9 8 0001D9A0 CM_Add_Driver_PackageW 10 9 0001DAE0 CM_Add_Driver_Package_ExW 11 A 0001DE10 CM_Add_Empty_Log_Conf 12 B 0001DF60 CM_Add_Empty_Log_Conf_Ex 13 C 0001E5F0 CM_Add_IDA 14 D 0001E600 CM_Add_IDW 15 E 0001E700 CM_Add_ID_ExA 16 F 0001E780 CM_Add_ID_ExW 17 10 0001F730 CM_Add_Range 18 11 00020BF0 CM_Add_Res_Des 19 12 00020E90 CM_Add_Res_Des_Ex 20 13 0001EE50 CM_Apply_PowerScheme 21 14 0001D460 CM_Connect_MachineA 22 15 0001D4D0 CM_Connect_MachineW 23 16 0001E7A0 CM_Create_DevNodeA 24 17 0001E7C0 CM_Create_DevNodeW 25 18 0001E9A0 CM_Create_DevNode_ExA 26 19 0001EA30 CM_Create_DevNode_ExW 27 1A 0001F840 CM_Create_Range_List 28 1B 00021E40 CM_Delete_Class_Key 29 1C 00021EB0 CM_Delete_Class_Key_Ex 30 1D 00021ED0 CM_Delete_DevNode_Key 31 1E 00021FD0 CM_Delete_DevNode_Key_Ex 32 1F 00021FF0 CM_Delete_Device_Interface_KeyA 33 20 00022000 CM_Delete_Device_Interface_KeyW 34 21 00022060 CM_Delete_Device_Interface_Key_ExA 35 22 000220D0 CM_Delete_Device_Interface_Key_ExW 36 23 0001DC00 CM_Delete_Driver_PackageW 37 24 0001DD00 CM_Delete_Driver_Package_ExW 38 25 0001EE50 CM_Delete_PowerScheme 39 26 0001F930 CM_Delete_Range 40 27 00020EC0 CM_Detect_Resource_Conflict 41 28 00020EF0 CM_Detect_Resource_Conflict_Ex 42 29 0001EA60 CM_Disable_DevNode 43 2A 0001EB90 CM_Disable_DevNode_Ex 44 2B 0001D550 CM_Disconnect_Machine 45 2C 0001FB10 CM_Dup_Range_List 46 2D 0001EE50 CM_Duplicate_PowerScheme 47 2E 0001EBB0 CM_Enable_DevNode 48 2F 0001ECD0 CM_Enable_DevNode_Ex 49 30 000220F0 CM_Enumerate_Classes 50 31 00022160 CM_Enumerate_Classes_Ex 51 32 00023E10 CM_Enumerate_EnumeratorsA 52 33 00023E30 CM_Enumerate_EnumeratorsW 53 34 00023EA0 CM_Enumerate_Enumerators_ExA 54 35 00023F40 CM_Enumerate_Enumerators_ExW 55 36 0001FC50 CM_Find_Range 56 37 0001FE50 CM_First_Range 57 38 0001DF90 CM_Free_Log_Conf 58 39 0001E0E0 CM_Free_Log_Conf_Ex 59 3A 0001E100 CM_Free_Log_Conf_Handle 60 3B 0001FF70 CM_Free_Range_List 61 3C 000210D0 CM_Free_Res_Des 62 3D 00021290 CM_Free_Res_Des_Ex 63 3E 000212B0 CM_Free_Res_Des_Handle 64 3F 00024370 CM_Free_Resource_Conflict_Handle 65 40 0000B840 CM_Get_Child 66 41 00023F70 CM_Get_Child_Ex 67 42 00022180 CM_Get_Class_Key_NameA 68 43 000221A0 CM_Get_Class_Key_NameW 69 44 00022250 CM_Get_Class_Key_Name_ExA 70 45 000222F0 CM_Get_Class_Key_Name_ExW 71 46 00022300 CM_Get_Class_NameA 72 47 00022320 CM_Get_Class_NameW 73 48 00022440 CM_Get_Class_Name_ExA 74 49 000224F0 CM_Get_Class_Name_ExW 75 4A 00005490 CM_Get_Class_PropertyW 76 4B 00004CB0 CM_Get_Class_Property_ExW 77 4C 00024CF0 CM_Get_Class_Property_Keys 78 4D 00024DD0 CM_Get_Class_Property_Keys_Ex 79 4E 00022520 CM_Get_Class_Registry_PropertyA 80 4F 000226A0 CM_Get_Class_Registry_PropertyW 81 50 00012750 CM_Get_Depth 82 51 00023F90 CM_Get_Depth_Ex 83 52 000229C0 CM_Get_DevNode_Custom_PropertyA 84 53 00005620 CM_Get_DevNode_Custom_PropertyW 85 54 00001010 CM_Get_DevNode_Custom_Property_ExA 86 55 000012A0 CM_Get_DevNode_Custom_Property_ExW 87 56 00007060 CM_Get_DevNode_PropertyW 88 57 00007040 CM_Get_DevNode_Property_ExW 89 58 00024E00 CM_Get_DevNode_Property_Keys 90 59 00024F20 CM_Get_DevNode_Property_Keys_Ex 91 5A 000229F0 CM_Get_DevNode_Registry_PropertyA 92 5B 00007910 CM_Get_DevNode_Registry_PropertyW 93 5C 00022A20 CM_Get_DevNode_Registry_Property_ExA 94 5D 00006340 CM_Get_DevNode_Registry_Property_ExW 95 5E 00005D20 CM_Get_DevNode_Status 96 5F 00012920 CM_Get_DevNode_Status_Ex 97 60 00005B70 CM_Get_Device_IDA 98 61 0000CBE0 CM_Get_Device_IDW 99 62 00023FB0 CM_Get_Device_ID_ExA 100 63 00006060 CM_Get_Device_ID_ExW 101 64 00024080 CM_Get_Device_ID_ListA 102 65 00010E90 CM_Get_Device_ID_ListW 103 66 000240A0 CM_Get_Device_ID_List_ExA 104 67 00010E70 CM_Get_Device_ID_List_ExW 105 68 000241D0 CM_Get_Device_ID_List_SizeA 106 69 00012940 CM_Get_Device_ID_List_SizeW 107 6A 000241E0 CM_Get_Device_ID_List_Size_ExA 108 6B 00024270 CM_Get_Device_ID_List_Size_ExW 109 6C 00012BA0 CM_Get_Device_ID_Size 110 6D 000058D0 CM_Get_Device_ID_Size_Ex 111 6E 00022BD0 CM_Get_Device_Interface_AliasA 112 6F 0000B570 CM_Get_Device_Interface_AliasW 113 70 00022C00 CM_Get_Device_Interface_Alias_ExA 114 71 0000B9C0 CM_Get_Device_Interface_Alias_ExW 115 72 00022D90 CM_Get_Device_Interface_ListA 116 73 0000BB70 CM_Get_Device_Interface_ListW 117 74 00022DC0 CM_Get_Device_Interface_List_ExA 118 75 0000BB50 CM_Get_Device_Interface_List_ExW 119 76 00022F00 CM_Get_Device_Interface_List_SizeA 120 77 0000BA00 CM_Get_Device_Interface_List_SizeW 121 78 00022F20 CM_Get_Device_Interface_List_Size_ExA 122 79 0000B9E0 CM_Get_Device_Interface_List_Size_ExW 123 7A 00006220 CM_Get_Device_Interface_PropertyW 124 7B 00006200 CM_Get_Device_Interface_Property_ExW 125 7C 00024F50 CM_Get_Device_Interface_Property_KeysW 126 7D 00024FE0 CM_Get_Device_Interface_Property_Keys_ExW 127 7E 0000FB90 CM_Get_First_Log_Conf 128 7F 0001E180 CM_Get_First_Log_Conf_Ex 129 80 0001D570 CM_Get_Global_State 130 81 0001D600 CM_Get_Global_State_Ex 131 82 00025140 CM_Get_HW_Prof_FlagsA 132 83 00025160 CM_Get_HW_Prof_FlagsW 133 84 00025230 CM_Get_HW_Prof_Flags_ExA 134 85 000252B0 CM_Get_HW_Prof_Flags_ExW 135 86 000252E0 CM_Get_Hardware_Profile_InfoA 136 87 000252F0 CM_Get_Hardware_Profile_InfoW 137 88 00025360 CM_Get_Hardware_Profile_Info_ExA 138 89 00025410 CM_Get_Hardware_Profile_Info_ExW 139 8A 0001E1A0 CM_Get_Log_Conf_Priority 140 8B 0001E2F0 CM_Get_Log_Conf_Priority_Ex 141 8C 0001E310 CM_Get_Next_Log_Conf 142 8D 0001E470 CM_Get_Next_Log_Conf_Ex 143 8E 00021330 CM_Get_Next_Res_Des 144 8F 00021500 CM_Get_Next_Res_Des_Ex 145 90 0000AA10 CM_Get_Parent 146 91 00011470 CM_Get_Parent_Ex 147 92 00021530 CM_Get_Res_Des_Data 148 93 000216F0 CM_Get_Res_Des_Data_Ex 149 94 00021720 CM_Get_Res_Des_Data_Size 150 95 00021910 CM_Get_Res_Des_Data_Size_Ex 151 96 000243D0 CM_Get_Resource_Conflict_Count 152 97 00024440 CM_Get_Resource_Conflict_DetailsA 153 98 000245B0 CM_Get_Resource_Conflict_DetailsW 154 99 0000CDA0 CM_Get_Sibling 155 9A 00024290 CM_Get_Sibling_Ex 156 9B 0001D620 CM_Get_Version 157 9C 0001D630 CM_Get_Version_Ex 158 9D 0001EE50 CM_Import_PowerScheme 159 9E 00025710 CM_Install_DevNodeW 160 9F 000258A0 CM_Install_DevNode_ExW 161 A0 00020080 CM_Intersect_Range_List 162 A1 000202E0 CM_Invert_Range_List 163 A2 00025430 CM_Is_Dock_Station_Present 164 A3 00025500 CM_Is_Dock_Station_Present_Ex 165 A4 0001D650 CM_Is_Version_Available 166 A5 0001D680 CM_Is_Version_Available_Ex 167 A6 000242B0 CM_Locate_DevNodeA 168 A7 00006380 CM_Locate_DevNodeW 169 A8 000242C0 CM_Locate_DevNode_ExA 170 A9 00006360 CM_Locate_DevNode_ExW 171 AA 0000C820 CM_MapCrToSpErr 172 AB 0000C7A0 CM_MapCrToWin32Err 173 AC 000204A0 CM_Merge_Range_List 174 AD 00021930 CM_Modify_Res_Des 175 AE 00021BE0 CM_Modify_Res_Des_Ex 176 AF 0001EE50 CM_Move_DevNode 177 B0 0001EE50 CM_Move_DevNode_Ex 178 B1 000207D0 CM_Next_Range 179 B2 00023090 CM_Open_Class_KeyA 180 B3 00004CD0 CM_Open_Class_KeyW 181 B4 000230C0 CM_Open_Class_Key_ExA 182 B5 00001970 CM_Open_Class_Key_ExW 183 B6 00010D00 CM_Open_DevNode_Key 184 B7 00010CE0 CM_Open_DevNode_Key_Ex 185 B8 00023180 CM_Open_Device_Interface_KeyA 186 B9 0000CC60 CM_Open_Device_Interface_KeyW 187 BA 000231B0 CM_Open_Device_Interface_Key_ExA 188 BB 0000CC40 CM_Open_Device_Interface_Key_ExW 189 BC 0001ECF0 CM_Query_And_Remove_SubTreeA 190 BD 00011690 CM_Query_And_Remove_SubTreeW 191 BE 0001ED20 CM_Query_And_Remove_SubTree_ExA 192 BF 00011670 CM_Query_And_Remove_SubTree_ExW 193 C0 0001D6A0 CM_Query_Arbitrator_Free_Data 194 C1 0001D7C0 CM_Query_Arbitrator_Free_Data_Ex 195 C2 0001D7F0 CM_Query_Arbitrator_Free_Size 196 C3 0001D910 CM_Query_Arbitrator_Free_Size_Ex 197 C4 0001EE50 CM_Query_Remove_SubTree 198 C5 0001EE50 CM_Query_Remove_SubTree_Ex 199 C6 000248C0 CM_Query_Resource_Conflict_List 200 C7 0001EE60 CM_Reenumerate_DevNode 201 C8 0001EF90 CM_Reenumerate_DevNode_Ex 202 C9 0001EFB0 CM_Register_Device_Driver 203 CA 0001F0B0 CM_Register_Device_Driver_Ex 204 CB 00023250 CM_Register_Device_InterfaceA 205 CC 00023280 CM_Register_Device_InterfaceW 206 CD 000233C0 CM_Register_Device_Interface_ExA 207 CE 00023560 CM_Register_Device_Interface_ExW 208 CF 00002140 CM_Register_Notification 209 D0 0001EE50 CM_Remove_SubTree 210 D1 0001EE50 CM_Remove_SubTree_Ex 211 D2 0001F0D0 CM_Request_Device_EjectA 212 D3 0001F100 CM_Request_Device_EjectW 213 D4 0001F260 CM_Request_Device_Eject_ExA 214 D5 0001F380 CM_Request_Device_Eject_ExW 215 D6 00025520 CM_Request_Eject_PC 216 D7 000255F0 CM_Request_Eject_PC_Ex 217 D8 0001EE50 CM_RestoreAll_DefaultPowerSchemes 218 D9 0001EE50 CM_Restore_DefaultPowerScheme 219 DA 0001D940 CM_Run_Detection 220 DB 0001D960 CM_Run_Detection_Ex 221 DC 0001EE50 CM_Set_ActiveScheme 222 DD 00025010 CM_Set_Class_PropertyW 223 DE 00025110 CM_Set_Class_Property_ExW 224 DF 00023590 CM_Set_Class_Registry_PropertyA 225 E0 000236E0 CM_Set_Class_Registry_PropertyW 226 E1 0001F3B0 CM_Set_DevNode_Problem 227 E2 0001F4F0 CM_Set_DevNode_Problem_Ex 228 E3 00010730 CM_Set_DevNode_PropertyW 229 E4 00010710 CM_Set_DevNode_Property_ExW 230 E5 00023A90 CM_Set_DevNode_Registry_PropertyA 231 E6 00012090 CM_Set_DevNode_Registry_PropertyW 232 E7 00023AC0 CM_Set_DevNode_Registry_Property_ExA 233 E8 00012070 CM_Set_DevNode_Registry_Property_ExW 234 E9 0000DD00 CM_Set_Device_Interface_PropertyW 235 EA 0000DCE0 CM_Set_Device_Interface_Property_ExW 236 EB 00025610 CM_Set_HW_Prof 237 EC 00025630 CM_Set_HW_Prof_Ex 238 ED 00025660 CM_Set_HW_Prof_FlagsA 239 EE 00011550 CM_Set_HW_Prof_FlagsW 240 EF 00025680 CM_Set_HW_Prof_Flags_ExA 241 F0 00011530 CM_Set_HW_Prof_Flags_ExW 242 F1 000117F0 CM_Setup_DevNode 243 F2 00011650 CM_Setup_DevNode_Ex 244 F3 000208E0 CM_Test_Range_Available 245 F4 0001F510 CM_Uninstall_DevNode 246 F5 0001F600 CM_Uninstall_DevNode_Ex 247 F6 00023C30 CM_Unregister_Device_InterfaceA 248 F7 00023C40 CM_Unregister_Device_InterfaceW 249 F8 00023CA0 CM_Unregister_Device_Interface_ExA 250 F9 00023D70 CM_Unregister_Device_Interface_ExW 251 FA 00001AE0 CM_Unregister_Notification 252 FB 0001EE50 CM_Write_UserPowerKey 253 FC 00002160 DevCloseObjectQuery 254 FD 000021B0 DevCreateObjectQuery 255 FE 00002600 DevCreateObjectQueryEx 256 FF 00011310 DevCreateObjectQueryFromId 257 100 00011380 DevCreateObjectQueryFromIdEx 258 101 0002E2C0 DevCreateObjectQueryFromIds 259 102 0002E330 DevCreateObjectQueryFromIdsEx 260 103 0000CB10 DevFindProperty 261 104 0000C5B0 DevFreeObjectProperties 262 105 0000C610 DevFreeObjects 263 106 000034D0 DevGetObjectProperties 264 107 00003520 DevGetObjectPropertiesEx 265 108 00001720 DevGetObjects 266 109 00001770 DevGetObjectsEx 267 10A 0000EFD0 DevSetObjectProperties 268 10B 00011490 SwDeviceClose 269 10C 0000EB10 SwDeviceCreate 270 10D 0002F2A0 SwDeviceGetLifetime 271 10E 0000D890 SwDeviceInterfacePropertySet 272 10F 0000E550 SwDeviceInterfaceRegister 273 110 0000D9F0 SwDeviceInterfaceSetState 274 111 0000DB20 SwDevicePropertySet 275 112 0000E420 SwDeviceSetLifetime 276 113 00002240 SwMemFree Summary 1000 .data 1000 .didat 3000 .pdata D000 .rdata 1000 .reloc 1000 .rsrc 2F000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file crypt32.dll File Type: DLL Section contains the following exports for CRYPT32.dll 00000000 characteristics 64CAB2D6 time date stamp Wed Aug 2 12:47:34 2023 0.00 version 1001 ordinal base 1000 number of functions 290 number of names ordinal hint RVA name 1020 0 00088A30 CertAddCRLContextToStore 1021 1 00088AB0 CertAddCRLLinkToStore 1022 2 00088A30 CertAddCTLContextToStore 1023 3 00088AB0 CertAddCTLLinkToStore 1024 4 0000D5B0 CertAddCertificateContextToStore 1025 5 00088AB0 CertAddCertificateLinkToStore 1026 6 000421F0 CertAddEncodedCRLToStore 1027 7 0000E8E0 CertAddEncodedCTLToStore 1028 8 00026570 CertAddEncodedCertificateToStore 1029 9 000899B0 CertAddEncodedCertificateToSystemStoreA 1030 A 00089A30 CertAddEncodedCertificateToSystemStoreW 1031 B 00089FB0 CertAddEnhancedKeyUsageIdentifier 1032 C 0008AFB0 CertAddRefServerOcspResponse 1033 D 0008AFC0 CertAddRefServerOcspResponseContext 1034 E 000115A0 CertAddSerializedElementToStore 1035 F 0004C0A0 CertAddStoreToCollection 1036 10 0008B250 CertAlgIdToOID 1037 11 0008AFD0 CertCloseServerOcspResponse 1038 12 00035E60 CertCloseStore 1039 13 00010660 CertCompareCertificate 1040 14 000122B0 CertCompareCertificateName 1041 15 000106C0 CertCompareIntegerBlob 1042 16 0002F3E0 CertComparePublicKeyInfo 1043 17 00035710 CertControlStore 1044 18 00045830 CertCreateCRLContext 1045 19 0000E8A0 CertCreateCTLContext 1046 1A 00088B10 CertCreateCTLEntryFromCertificateContextProperties 1047 1B 00054C80 CertCreateCertificateChainEngine 1048 1C 00028630 CertCreateCertificateContext 1049 1D 0003DDE0 CertCreateContext 1050 1E 0008B8C0 CertCreateSelfSignCertificate 1051 1F 00089000 CertDeleteCRLFromStore 1052 20 00089000 CertDeleteCTLFromStore 1053 21 00089000 CertDeleteCertificateFromStore 1054 22 000179D0 CertDuplicateCRLContext 1055 23 000127F0 CertDuplicateCTLContext 1056 24 00057040 CertDuplicateCertificateChain 1057 25 00018420 CertDuplicateCertificateContext 1058 26 0004C2D0 CertDuplicateStore 1059 27 00089020 CertEnumCRLContextProperties 1060 28 00011DF0 CertEnumCRLsInStore 1061 29 00089020 CertEnumCTLContextProperties 1062 2A 00017DB0 CertEnumCTLsInStore 1063 2B 00089020 CertEnumCertificateContextProperties 1064 2C 000190B0 CertEnumCertificatesInStore 1065 2D 0008FB30 CertEnumPhysicalStore 1066 2E 00089040 CertEnumSubjectInSortedCTL 1067 2F 0008FB50 CertEnumSystemStore 1068 30 0008FEE0 CertEnumSystemStoreLocation 1069 31 00013040 CertFindAttribute 1070 32 00006150 CertFindCRLInStore 1071 33 000891A0 CertFindCTLInStore 1072 34 00011EF0 CertFindCertificateInCRL 1073 35 00018FE0 CertFindCertificateInStore 1074 36 00090BB0 CertFindChainInStore 1075 37 00016230 CertFindExtension 1076 38 000072D0 CertFindRDNAttr 1077 39 000486E0 CertFindSubjectInCTL 1078 3A 00016B90 CertFindSubjectInSortedCTL 1079 3B 00017EB0 CertFreeCRLContext 1080 3C 00017EB0 CertFreeCTLContext 1081 3D 0000F7B0 CertFreeCertificateChain 1082 3E 00058200 CertFreeCertificateChainEngine 1083 3F 000584D0 CertFreeCertificateChainList 1084 40 0003C4B0 CertFreeCertificateContext 1085 41 0008B030 CertFreeServerOcspResponseContext 1086 42 00089200 CertGetCRLContextProperty 1087 43 000083E0 CertGetCRLFromStore 1088 44 00089200 CertGetCTLContextProperty 1089 45 00027680 CertGetCertificateChain 1090 46 0001F3B0 CertGetCertificateContextProperty 1091 47 00018DA0 CertGetEnhancedKeyUsage 1092 48 0008B290 CertGetIntendedKeyUsage 1093 49 00089230 CertGetIssuerCertificateFromStore 1094 4A 00091B40 CertGetNameStringA 1095 4B 00039EA0 CertGetNameStringW 1096 4C 00028F40 CertGetPublicKeyLength 1097 4D 0008B070 CertGetServerOcspResponseContext 1098 4E 00089330 CertGetStoreProperty 1099 4F 00052DC0 CertGetSubjectCertificateFromStore 1100 50 00012B80 CertGetValidUsages 1101 51 0008B3D0 CertIsRDNAttrsInCertificateName 1102 52 000938F0 CertIsStrongHashToSign 1103 53 00015EB0 CertIsValidCRLForCertificate 1104 54 000265F0 CertIsWeakHash 1105 55 00091C00 CertNameToStrA 1106 56 00058520 CertNameToStrW 1107 57 000488B0 CertOIDToAlgId 1108 58 0005ADC0 CertOpenServerOcspResponse 1109 59 00037580 CertOpenStore 1110 5A 00089AB0 CertOpenSystemStoreA 1111 5B 0005B4F0 CertOpenSystemStoreW 1112 5C 00091CA0 CertRDNValueToStrA 1113 5D 00091D70 CertRDNValueToStrW 1114 5E 0008FFB0 CertRegisterPhysicalStore 1115 5F 00090250 CertRegisterSystemStore 1116 60 0008A170 CertRemoveEnhancedKeyUsageIdentifier 1117 61 00007250 CertRemoveStoreFromCollection 1118 62 000C54D0 CertResyncCertificateChainEngine 1119 63 00093C50 CertRetrieveLogoOrBiometricInfo 1120 64 00016910 CertSaveStore 1121 65 00011910 CertSelectCertificateChains 1122 66 000169F0 CertSerializeCRLStoreElement 1123 67 000169F0 CertSerializeCTLStoreElement 1124 68 000169F0 CertSerializeCertificateStoreElement 1125 69 00012220 CertSetCRLContextProperty 1126 6A 000894D0 CertSetCTLContextProperty 1127 6B 0000D760 CertSetCertificateContextPropertiesFromCTLEntry 1128 6C 00012220 CertSetCertificateContextProperty 1129 6D 0008A270 CertSetEnhancedKeyUsage 1130 6E 00089500 CertSetStoreProperty 1131 6F 00091F10 CertStrToNameA 1132 70 0000E9F0 CertStrToNameW 1133 71 00090340 CertUnregisterPhysicalStore 1134 72 00090450 CertUnregisterSystemStore 1135 73 0008B5E0 CertVerifyCRLRevocation 1136 74 0008B670 CertVerifyCRLTimeValidity 1137 75 00094460 CertVerifyCTLUsage 1138 76 00027C90 CertVerifyCertificateChainPolicy 1139 77 00017270 CertVerifyRevocation 1140 78 00089570 CertVerifySubjectCertificateContext 1141 79 000105C0 CertVerifyTimeValidity 1142 7A 0008B710 CertVerifyValidityNesting 1143 7B 00057330 CryptAcquireCertificatePrivateKey 1144 7C 00058C10 CryptBinaryToStringA 1145 7D 00058AF0 CryptBinaryToStringW 1146 7E 000B7650 CryptCloseAsyncHandle 1147 7F 00095010 CryptCreateAsyncHandle 1148 80 00092DB0 CryptCreateKeyIdentifierFromCSP 1149 81 000968D0 CryptDecodeMessage 1150 82 000321A0 CryptDecodeObject 1151 83 00032300 CryptDecodeObjectEx 1152 84 00096970 CryptDecryptAndVerifyMessageSignature 1153 85 00096B90 CryptDecryptMessage 1154 86 0002A700 CryptEncodeObject 1155 87 0002A730 CryptEncodeObjectEx 1156 88 00096C00 CryptEncryptMessage 1157 89 000895B0 CryptEnumKeyIdentifierProperties 1158 8A 0002D150 CryptEnumOIDFunction 1159 8B 000A4C20 CryptEnumOIDInfo 1160 8C 000CCD50 CryptExportPKCS8 1161 8D 00008900 CryptExportPublicKeyInfo 1162 8E 00054F20 CryptExportPublicKeyInfoEx 1163 8F 00092E40 CryptExportPublicKeyInfoFromBCryptKeyHandle 1164 90 0008B760 CryptFindCertificateKeyProvInfo 1165 91 000A4D20 CryptFindLocalizedName 1166 92 0002E760 CryptFindOIDInfo 1167 93 000AEA00 CryptFormatObject 1168 94 00029360 CryptFreeOIDFunctionAddress 1169 95 00095030 CryptGetAsyncParam 1170 96 00017700 CryptGetDefaultOIDDllList 1171 97 000177B0 CryptGetDefaultOIDFunctionAddress 1172 98 000896B0 CryptGetKeyIdentifierProperty 1173 99 00096CE0 CryptGetMessageCertificates 1174 9A 00096D20 CryptGetMessageSignerCount 1175 9B 0002AF80 CryptGetOIDFunctionAddress 1176 9C 000A3320 CryptGetOIDFunctionValue 1177 9D 00050460 CryptHashCertificate 1178 9E 0002CF40 CryptHashCertificate2 1179 9F 00096DD0 CryptHashMessage 1180 A0 00092E90 CryptHashPublicKeyInfo 1181 A1 0002E5A0 CryptHashToBeSigned 1182 A2 000CD120 CryptImportPKCS8 1183 A3 0004FEA0 CryptImportPublicKeyInfo 1184 A4 00029E10 CryptImportPublicKeyInfoEx 1185 A5 0002B290 CryptImportPublicKeyInfoEx2 1186 A6 0003F640 CryptInitOIDFunctionSet 1187 A7 000B3A80 CryptInstallDefaultContext 1188 A8 0003F720 CryptInstallOIDFunctionAddress 1189 A9 000D9160 CryptLoadSip 1190 AA 00052BA0 CryptMemAlloc 1191 AB 00027550 CryptMemFree 1192 AC 000B3EA0 CryptMemRealloc 1193 AD 000029B0 CryptMsgCalculateEncodedLength 1194 AE 0003BDB0 CryptMsgClose 1195 AF 0003FF60 CryptMsgControl 1196 B0 000E2FD0 CryptMsgCountersign 1197 B1 000E3190 CryptMsgCountersignEncoded 1198 B2 00057730 CryptMsgDuplicate 1199 B3 00001ED0 CryptMsgEncodeAndSignCTL 1200 B4 0000E520 CryptMsgGetAndVerifySigner 1201 B5 0002F8A0 CryptMsgGetParam 1202 B6 0003C980 CryptMsgOpenToDecode 1203 B7 000020B0 CryptMsgOpenToEncode 1204 B8 00001FB0 CryptMsgSignCTL 1205 B9 0003AE10 CryptMsgUpdate 1206 BA 000E3510 CryptMsgVerifyCountersignatureEncoded 1207 BB 00056210 CryptMsgVerifyCountersignatureEncodedEx 1012 BC 000CA2F0 CryptObjectLocatorFree 1013 BD 000CA330 CryptObjectLocatorGet 1014 BE 000CA370 CryptObjectLocatorGetContent 1015 BF 000CA420 CryptObjectLocatorGetUpdated 1016 C0 000CA460 CryptObjectLocatorInitialize 1017 C1 000CA7D0 CryptObjectLocatorIsChanged 1018 C2 000CA7F0 CryptObjectLocatorRelease 1208 C3 00054860 CryptProtectData 1209 C4 CryptProtectMemory (forwarded to DPAPI.CryptProtectMemory) 1210 C5 0003CA90 CryptQueryObject 1211 C6 000A3410 CryptRegisterDefaultOIDFunction 1212 C7 000A3710 CryptRegisterOIDFunction 1213 C8 000A4DD0 CryptRegisterOIDInfo 1214 C9 000D9650 CryptRetrieveTimeStamp 1215 CA 000D9200 CryptSIPAddProvider 1216 CB 0002A2B0 CryptSIPCreateIndirectData 1217 CC 00052E30 CryptSIPGetCaps 1218 CD 000D9570 CryptSIPGetSealedDigest 1219 CE 0002A170 CryptSIPGetSignedDataMsg 1220 CF 0002A460 CryptSIPLoad 1221 D0 00007EA0 CryptSIPPutSignedDataMsg 1222 D1 000D93D0 CryptSIPRemoveProvider 1223 D2 00008310 CryptSIPRemoveSignedDataMsg 1224 D3 0004D320 CryptSIPRetrieveSubjectGuid 1225 D4 0004D0A0 CryptSIPRetrieveSubjectGuidForCatalogFile 1226 D5 00053490 CryptSIPVerifyIndirectData 1227 D6 000B7650 CryptSetAsyncParam 1228 D7 000897D0 CryptSetKeyIdentifierProperty 1229 D8 000A3810 CryptSetOIDFunctionValue 1230 D9 000501B0 CryptSignAndEncodeCertificate 1231 DA 00097030 CryptSignAndEncryptMessage 1232 DB 00050350 CryptSignCertificate 1233 DC 00097190 CryptSignMessage 1234 DD 000972A0 CryptSignMessageWithKey 1235 DE 0007A470 CryptStringToBinaryA 1236 DF 00045D50 CryptStringToBinaryW 1237 E0 000B3C40 CryptUninstallDefaultContext 1238 E1 0004C5F0 CryptUnprotectData 1239 E2 CryptUnprotectMemory (forwarded to DPAPI.CryptUnprotectMemory) 1240 E3 000A3900 CryptUnregisterDefaultOIDFunction 1241 E4 000A3BB0 CryptUnregisterOIDFunction 1242 E5 000A4FD0 CryptUnregisterOIDInfo 1243 E6 CryptUpdateProtectedState (forwarded to DPAPI.CryptUpdateProtectedState) 1244 E7 0008B870 CryptVerifyCertificateSignature 1245 E8 00019150 CryptVerifyCertificateSignatureEx 1246 E9 00097510 CryptVerifyDetachedMessageHash 1247 EA 00097570 CryptVerifyDetachedMessageSignature 1248 EB 000975F0 CryptVerifyMessageHash 1249 EC 00097640 CryptVerifyMessageSignature 1250 ED 000976C0 CryptVerifyMessageSignatureWithKey 1251 EE 000D9990 CryptVerifyTimeStampSignature 1252 EF 00017B50 I_CertChainEngineIsDisallowedCertificate 1253 F0 000277F0 I_CertDiagControl 1254 F1 000514B0 I_CertProtectFunction 1255 F2 000122F0 I_CertSrvProtectFunction 1256 F3 00089990 I_CertSyncStore 1257 F4 00056490 I_CertUpdateStore 1258 F5 000561E0 I_CryptAddRefLruEntry 1259 F6 000B7340 I_CryptAddSmartCardCertToStore 1260 F7 00058130 I_CryptAllocTls 1261 F8 0003F4B0 I_CryptAllocTlsEx 1262 F9 00027460 I_CryptCreateLruCache 1263 FA 00025460 I_CryptCreateLruEntry 1264 FB 000525A0 I_CryptDetachTls 1265 FC 000C5630 I_CryptDisableLruOfEntries 1266 FD 000C5670 I_CryptEnableLruOfEntries 1267 FE 00027590 I_CryptEnumMatchingLruEntries 1268 FF 000256A0 I_CryptFindLruEntry 1269 100 000C56E0 I_CryptFindLruEntryData 1270 101 000B7430 I_CryptFindSmartCardCertInStore 1271 102 000556F0 I_CryptFlushLruCache 1272 103 000561B0 I_CryptFreeLruCache 1273 104 00052950 I_CryptFreeTls 1274 105 0002C980 I_CryptGetAsn1Decoder 1275 106 00040AA0 I_CryptGetAsn1Encoder 1276 107 0003AD20 I_CryptGetDefaultCryptProv 1277 108 000B3D80 I_CryptGetDefaultCryptProvForEncrypt 1278 109 00079FE0 I_CryptGetFileVersion 1279 10A 00054C00 I_CryptGetLruEntryData 1280 10B 000C5710 I_CryptGetLruEntryIdentifier 1281 10C 000B7670 I_CryptGetOssGlobal 1282 10D 00015640 I_CryptGetTls 1283 10E 00025DB0 I_CryptInsertLruEntry 1284 10F 00055EC0 I_CryptInstallAsn1Module 1285 110 000B7670 I_CryptInstallOssGlobal 1286 111 0004CC10 I_CryptReadTrustedPublisherDWORDValueFromRegistry 1287 112 000B7650 I_CryptRegisterSmartCardStore 1288 113 00025620 I_CryptReleaseLruEntry 1289 114 00057120 I_CryptRemoveLruEntry 1290 115 00017230 I_CryptSetTls 1291 116 000578D0 I_CryptTouchLruEntry 1292 117 00052940 I_CryptUninstallAsn1Module 1293 118 000B7670 I_CryptUninstallOssGlobal 1294 119 000B7650 I_CryptUnregisterSmartCardStore 1295 11A 00058340 I_CryptWalkAllLruCacheEntries 1019 11B 0000C0A0 I_PFXImportCertStoreEx 1296 11C 000CBC20 PFXExportCertStore 1297 11D 000CBD30 PFXExportCertStore2 1298 11E 000CBD50 PFXExportCertStoreEx 1299 11F 0000D010 PFXImportCertStore 1300 120 0000C660 PFXIsPFXBlob 1301 121 000CBF40 PFXVerifyPassword 1001 0005D750 [NONAME] 1002 0007A0E0 [NONAME] 1003 00079C10 [NONAME] 1004 00079C00 [NONAME] 1005 00079CA0 [NONAME] 1006 00079C90 [NONAME] 1007 00079BB0 [NONAME] 1008 00079BF0 [NONAME] 1009 00079C50 [NONAME] 1010 00079C80 [NONAME] 1011 00079BA0 [NONAME] 2000 0000B100 [NONAME] Summary 7000 .data 1000 .didat D000 .pdata 35000 .rdata 2000 .reloc B5000 .rsrc F1000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file cryptsp.dll File Type: DLL Section contains the following exports for CRYPTSP.dll 00000000 characteristics 559F3032 time date stamp Thu Jul 9 19:38:42 2015 0.00 version 1 ordinal base 65 number of functions 65 number of names ordinal hint RVA name 1 0 00005C50 CheckSignatureInFile 2 1 00002F80 CryptAcquireContextA 3 2 00002E20 CryptAcquireContextW 4 3 00001010 CryptContextAddRef 5 4 00002210 CryptCreateHash 6 5 000016B0 CryptDecrypt 7 6 00006050 CryptDeriveKey 8 7 00002420 CryptDestroyHash 9 8 000020E0 CryptDestroyKey 10 9 00006270 CryptDuplicateHash 11 A 00001090 CryptDuplicateKey 12 B 00001530 CryptEncrypt 13 C 00006450 CryptEnumProviderTypesA 14 D 00006800 CryptEnumProviderTypesW 15 E 000069F0 CryptEnumProvidersA 16 F 00006D10 CryptEnumProvidersW 17 10 00001C90 CryptExportKey 18 11 00001240 CryptGenKey 19 12 00002750 CryptGenRandom 20 13 00002BD0 CryptGetDefaultProviderA 21 14 00002A20 CryptGetDefaultProviderW 22 15 00002510 CryptGetHashParam 23 16 00001B80 CryptGetKeyParam 24 17 00004370 CryptGetProvParam 25 18 00004070 CryptGetUserKey 26 19 00002620 CryptHashData 27 1A 00006EF0 CryptHashSessionKey 28 1B 00001E50 CryptImportKey 29 1C 00003E00 CryptReleaseContext 30 1D 00001820 CryptSetHashParam 31 1E 00004450 CryptSetKeyParam 32 1F 00004550 CryptSetProvParam 33 20 00007050 CryptSetProviderA 34 21 000071A0 CryptSetProviderExA 35 22 00007660 CryptSetProviderExW 36 23 00007730 CryptSetProviderW 37 24 00004290 CryptSignHashA 38 25 00001230 CryptSignHashW 39 26 00001930 CryptVerifySignatureA 40 27 00001920 CryptVerifySignatureW 41 28 00002870 SystemFunction006 42 29 00003C20 SystemFunction007 43 2A 00009BB0 SystemFunction008 44 2B 00009C70 SystemFunction009 45 2C 00009C80 SystemFunction010 46 2D 00009CE0 SystemFunction011 47 2E 00009CF0 SystemFunction012 48 2F 00009D40 SystemFunction013 49 30 00009DF0 SystemFunction014 50 31 00009E00 SystemFunction015 51 32 00009D90 SystemFunction016 52 33 00009DE0 SystemFunction018 53 34 00009DF0 SystemFunction020 54 35 00009E00 SystemFunction021 55 36 00009DF0 SystemFunction022 56 37 00009E00 SystemFunction023 57 38 000041E0 SystemFunction024 58 39 00009E10 SystemFunction025 59 3A 000041E0 SystemFunction026 60 3B 00003D60 SystemFunction027 61 3C 00009B80 SystemFunction030 62 3D 00003F50 SystemFunction031 63 3E 00009E90 SystemFunction032 64 3F 00009E90 SystemFunction033 65 40 00005C50 SystemFunction035 Summary 1000 .data 1000 .didat 1000 .pdata 6000 .rdata 1000 .reloc 1000 .rsrc B000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file dbghelp.dll File Type: DLL Section contains the following exports for dbghelp.dll 00000000 characteristics 6270626D time date stamp Mon May 2 15:59:57 2022 0.00 version 1 ordinal base 232 number of functions 232 number of names ordinal hint RVA name 5 0 000E9620 DbgHelpCreateUserDump 6 1 000E9700 DbgHelpCreateUserDumpW 7 2 000E2A50 EnumDirTree 8 3 000E2B70 EnumDirTreeW 9 4 000DBDD0 EnumerateLoadedModules 10 5 000DBDD0 EnumerateLoadedModules64 11 6 000DBE50 EnumerateLoadedModulesEx 12 7 000DBED0 EnumerateLoadedModulesExW 13 8 000DBF50 EnumerateLoadedModulesW64 14 9 0000E0C0 ExtensionApiVersion 15 A 000E2BC0 FindDebugInfoFile 16 B 000E2BE0 FindDebugInfoFileEx 17 C 000E2CB0 FindDebugInfoFileExW 18 D 000E2D00 FindExecutableImage 19 E 000E2D20 FindExecutableImageEx 20 F 000E2E20 FindExecutableImageExW 21 10 000E2E70 FindFileInPath 22 11 000E2EC0 FindFileInSearchPath 23 12 000DBFD0 GetSymLoadError 24 13 000D52A0 GetTimestampForLoadedLibrary 25 14 000D4E10 ImageDirectoryEntryToData 26 15 000D4E30 ImageDirectoryEntryToDataEx 27 16 000D4F50 ImageNtHeader 28 17 000D4F80 ImageRvaToSection 29 18 000D4FE0 ImageRvaToVa 30 19 000E2F00 ImagehlpApiVersion 31 1A 0000DFB0 ImagehlpApiVersionEx 32 1B 000E2F10 MakeSureDirectoryPathExists 33 1C MiniDumpReadDumpStream (forwarded to dbgcore.MiniDumpReadDumpStream) 34 1D MiniDumpWriteDump (forwarded to dbgcore.MiniDumpWriteDump) 35 1E 000EF2D0 RangeMapAddPeImageSections 36 1F 000EF3C0 RangeMapCreate 37 20 000EF420 RangeMapFree 38 21 000EF440 RangeMapRead 39 22 000EF4E0 RangeMapRemove 40 23 000EF530 RangeMapWrite 41 24 0000DEC0 RemoveInvalidModuleList 42 25 0000DBF0 ReportSymbolLoadSummary 43 26 000E3080 SearchTreeForFile 44 27 000E30B0 SearchTreeForFileW 45 28 0000E0B0 SetCheckUserInterruptShared 46 29 000DBFE0 SetSymLoadError 47 2A 000EE730 StackWalk 48 2B 000EE730 StackWalk64 49 2C 00007030 StackWalkEx 50 2D 000DBFF0 SymAddSourceStream 51 2E 000DC000 SymAddSourceStreamA 52 2F 000DC070 SymAddSourceStreamW 53 30 000DC1E0 SymAddSymbol 54 31 000DC260 SymAddSymbolW 55 32 0000E050 SymAddrIncludeInlineTrace 56 33 0000DCE0 SymCleanup 57 34 000DC350 SymCompareInlineTrace 58 35 000DC880 SymDeleteSymbol 59 36 000DC8F0 SymDeleteSymbolW 60 37 000DC9C0 SymEnumLines 61 38 000DCA90 SymEnumLinesW 62 39 000DCB40 SymEnumProcesses 63 3A 000DCBE0 SymEnumSourceFileTokens 64 3B 000DCC80 SymEnumSourceFiles 65 3C 000DCD30 SymEnumSourceFilesW 66 3D 000DCDD0 SymEnumSourceLines 67 3E 000DCEC0 SymEnumSourceLinesW 68 3F 000DCF80 SymEnumSym 69 40 000DCFB0 SymEnumSymbols 70 41 000DCFE0 SymEnumSymbolsEx 71 42 000DD090 SymEnumSymbolsExW 72 43 000DD130 SymEnumSymbolsForAddr 73 44 000DD250 SymEnumSymbolsForAddrW 74 45 000DD370 SymEnumSymbolsW 75 46 000DD3A0 SymEnumTypes 76 47 000DD420 SymEnumTypesByName 77 48 000DD500 SymEnumTypesByNameW 78 49 000DD590 SymEnumTypesW 79 4A 000DD620 SymEnumerateModules 80 4B 000DD620 SymEnumerateModules64 81 4C 000DD690 SymEnumerateModulesW64 82 4D 000DD700 SymEnumerateSymbols 83 4E 000DD700 SymEnumerateSymbols64 84 4F 000DD780 SymEnumerateSymbolsW 85 50 000DD780 SymEnumerateSymbolsW64 86 51 000E30E0 SymFindDebugInfoFile 87 52 000E31D0 SymFindDebugInfoFileW 88 53 000E3250 SymFindExecutableImage 89 54 000E3340 SymFindExecutableImageW 90 55 000E33C0 SymFindFileInPath 91 56 000E34F0 SymFindFileInPathW 1 57 000DB350 SymFreeDiaString 92 58 000DD800 SymFromAddr 93 59 000DD820 SymFromAddrW 94 5A 000DD840 SymFromIndex 95 5B 000DD8B0 SymFromIndexW 96 5C 000DD990 SymFromInlineContext 97 5D 000DD9E0 SymFromInlineContextW 98 5E 000DDA30 SymFromName 99 5F 000DDAB0 SymFromNameW 100 60 000DDAE0 SymFromToken 101 61 000DDB90 SymFromTokenW 102 62 00009D10 SymFunctionTableAccess 103 63 00009D10 SymFunctionTableAccess64 104 64 00009D30 SymFunctionTableAccess64AccessRoutines 2 65 000DB360 SymGetDiaSession 105 66 000D5FE0 SymGetFileLineOffsets64 106 67 000DDC80 SymGetHomeDirectory 107 68 000DDD00 SymGetHomeDirectoryW 108 69 000DDDC0 SymGetLineFromAddr 109 6A 000DDDC0 SymGetLineFromAddr64 110 6B 000DDDF0 SymGetLineFromAddrW64 111 6C 000DDE20 SymGetLineFromInlineContext 112 6D 000DDEF0 SymGetLineFromInlineContextW 113 6E 000DE050 SymGetLineFromName 114 6F 000DE050 SymGetLineFromName64 115 70 000DE120 SymGetLineFromNameW64 116 71 000DE6C0 SymGetLineNext 117 72 000DE6C0 SymGetLineNext64 118 73 000DE730 SymGetLineNextW64 119 74 000DE750 SymGetLinePrev 120 75 000DE750 SymGetLinePrev64 121 76 000DE7C0 SymGetLinePrevW64 122 77 000DE7D0 SymGetModuleBase 123 78 000DE7D0 SymGetModuleBase64 124 79 000DE830 SymGetModuleInfo 125 7A 000DE830 SymGetModuleInfo64 126 7B 0000AED0 SymGetModuleInfoW 127 7C 0000AED0 SymGetModuleInfoW64 3 7D 000DB390 SymGetOmapBlockBase 128 7E 000DE8D0 SymGetOmaps 129 7F 0000F1C0 SymGetOptions 130 80 000DE9B0 SymGetScope 131 81 000DEA30 SymGetScopeW 132 82 000DEB40 SymGetSearchPath 133 83 000DEBC0 SymGetSearchPathW 134 84 000DEC20 SymGetSourceFile 135 85 000DECA0 SymGetSourceFileFromToken 136 86 000DED50 SymGetSourceFileFromTokenW 137 87 000DEDC0 SymGetSourceFileToken 138 88 000DEE30 SymGetSourceFileTokenW 139 89 000DEEF0 SymGetSourceFileW 140 8A 000DEF70 SymGetSourceVarFromToken 141 8B 000DF040 SymGetSourceVarFromTokenW 142 8C 000DF0F0 SymGetSymFromAddr 143 8D 000DF0F0 SymGetSymFromAddr64 144 8E 000DF130 SymGetSymFromName 145 8F 000DF130 SymGetSymFromName64 146 90 000DF1A0 SymGetSymNext 147 91 000DF1A0 SymGetSymNext64 148 92 000DF1C0 SymGetSymPrev 149 93 000DF1C0 SymGetSymPrev64 150 94 000E80D0 SymGetSymbolFile 151 95 000E8200 SymGetSymbolFileW 152 96 000DF1D0 SymGetTypeFromName 153 97 000DF280 SymGetTypeFromNameW 154 98 000DF3E0 SymGetTypeInfo 155 99 000DF420 SymGetTypeInfoEx 156 9A 000DF450 SymGetUnwindInfo 157 9B 0000F250 SymInitialize 158 9C 0000E120 SymInitializeW 159 9D 000DF5F0 SymLoadModule 160 9E 000DF5F0 SymLoadModule64 161 9F 000DF630 SymLoadModuleEx 162 A0 0000B500 SymLoadModuleExW 163 A1 000DF710 SymMatchFileName 164 A2 000DF810 SymMatchFileNameW 165 A3 000DF8F0 SymMatchString 166 A4 000DF930 SymMatchStringA 167 A5 000DF940 SymMatchStringW 168 A6 000DF980 SymNext 169 A7 000DFA20 SymNextW 170 A8 000DFA40 SymPrev 171 A9 000DFAE0 SymPrevW 172 AA 000DFAF0 SymQueryInlineTrace 173 AB 000DFE00 SymRefreshModuleList 174 AC 000DFE70 SymRegisterCallback 175 AD 000DFE70 SymRegisterCallback64 176 AE 0000DE40 SymRegisterCallbackW64 177 AF 0000DF40 SymRegisterFunctionEntryCallback 178 B0 0000DF40 SymRegisterFunctionEntryCallback64 179 B1 000DFEE0 SymSearch 180 B2 000DFFB0 SymSearchW 181 B3 000E0070 SymSetContext 182 B4 000E0120 SymSetHomeDirectory 183 B5 000E01C0 SymSetHomeDirectoryW 184 B6 0000E930 SymSetOptions 185 B7 000E0240 SymSetParentWindow 186 B8 000E0270 SymSetScopeFromAddr 187 B9 000E0280 SymSetScopeFromIndex 188 BA 0000DAC0 SymSetScopeFromInlineContext 189 BB 000E0340 SymSetSearchPath 190 BC 0000E380 SymSetSearchPathW 191 BD 000E86A0 SymSrvDeltaName 192 BE 000E8770 SymSrvDeltaNameW 193 BF 000E8920 SymSrvGetFileIndexInfo 194 C0 000E89F0 SymSrvGetFileIndexInfoW 195 C1 000E8B20 SymSrvGetFileIndexString 196 C2 000E8BE0 SymSrvGetFileIndexStringW 197 C3 000E8CB0 SymSrvGetFileIndexes 198 C4 000E8D20 SymSrvGetFileIndexesW 199 C5 000E8DE0 SymSrvGetSupplement 200 C6 000E8EA0 SymSrvGetSupplementW 201 C7 000E8FB0 SymSrvIsStore 202 C8 000E8FF0 SymSrvIsStoreW 203 C9 000E90E0 SymSrvStoreFile 204 CA 000E9180 SymSrvStoreFileW 205 CB 000E9240 SymSrvStoreSupplement 206 CC 000E9300 SymSrvStoreSupplementW 207 CD 000E0380 SymUnDName 208 CE 000E0380 SymUnDName64 209 CF 00009FD0 SymUnloadModule 210 D0 00009FD0 SymUnloadModule64 211 D1 000E03D0 UnDecorateSymbolName 212 D2 000E0460 UnDecorateSymbolNameW 213 D3 0000DFF0 WinDbgExtensionDllInit 4 D4 000CE2A0 _EFN_DumpImage 214 D5 000D2E10 block 215 D6 000D3010 chksym 216 D7 000E0510 dbghelp 217 D8 000D3210 dh 218 D9 000D3220 fptr 219 DA 000D32B0 homedir 220 DB 000D3410 inlinedbg 221 DC 000D3490 itoldyouso 222 DD 000D3690 lmi 223 DE 000D39C0 lminfo 224 DF 000D3C10 omap 225 E0 000D3E50 optdbgdump 226 E1 000D3FC0 optdbgdumpaddr 227 E2 000D4150 srcfiles 228 E3 000D42A0 stack_force_ebp 229 E4 000D44A0 stackdbg 230 E5 000D46C0 sym 231 E6 000D4840 symsrv 232 E7 000D48B0 vc7fpo Summary 1F000 .data 1000 .didat 3000 .mrdata 10000 .pdata 48000 .rdata 5000 .reloc 1000 .rsrc 108000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file dhcpcsvc.dll File Type: DLL Section contains the following exports for dhcpcsvc.DLL 00000000 characteristics 633AE20A time date stamp Mon Oct 3 06:22:18 2022 0.00 version 1 ordinal base 67 number of functions 67 number of names ordinal hint RVA name 1 0 000033E0 DhcpAcquireParameters 2 1 00003510 DhcpAcquireParametersByBroadcast 3 2 000026D0 DhcpCApiCleanup 4 3 00003640 DhcpCApiInitialize 5 4 00003660 DhcpClient_Generalize 6 5 00003830 DhcpDeRegisterConnectionStateNotification 7 6 00003930 DhcpDeRegisterOptions 8 7 00003940 DhcpDeRegisterParamChange 9 8 00003A80 DhcpDelPersistentRequestParams 10 9 00003DC0 DhcpEnableDhcp 11 A 00004080 DhcpEnableTracing 12 B 0000A490 DhcpEnumClasses 13 C 00001F90 DhcpEnumInterfaces 14 D 00004110 DhcpFallbackRefreshParams 15 E 000015C0 DhcpFreeEnumeratedInterfaces 16 F 00002280 DhcpFreeLeaseInfo 17 10 00001340 DhcpFreeLeaseInfoArray 18 11 00004240 DhcpFreeMem 19 12 00004270 DhcpGetClassId 20 13 000043F0 DhcpGetClientId 21 14 00004570 DhcpGetDhcpServicedConnections 22 15 000047B0 DhcpGetFallbackParams 23 16 00004890 DhcpGetNotificationStatus 24 17 00004BC0 DhcpGetOriginalSubnetMask 25 18 00004CA0 DhcpGetTraceArray 26 19 0001582C DhcpGlobalIsShuttingDown 27 1A 00015820 DhcpGlobalServiceSyncEvent 28 1B 00015818 DhcpGlobalTerminateEvent 29 1C 0000A680 DhcpHandlePnPEvent 30 1D 00001010 DhcpIsEnabled 31 1E 00005130 DhcpLeaseIpAddress 32 1F 00005170 DhcpLeaseIpAddressEx 33 20 0000A880 DhcpNotifyConfigChange 34 21 0000A8C0 DhcpNotifyConfigChangeEx 35 22 00005570 DhcpNotifyMediaReconnected 36 23 0000AA50 DhcpOpenGlobalEvent 37 24 000056A0 DhcpPersistentRequestParams 38 25 00002110 DhcpQueryLeaseInfo 39 26 00001C50 DhcpQueryLeaseInfoArray 40 27 00002030 DhcpQueryLeaseInfoEx 41 28 00005990 DhcpRegisterConnectionStateNotification 42 29 00005B60 DhcpRegisterOptions 43 2A 00005CD0 DhcpRegisterParamChange 44 2B 00006D30 DhcpReleaseIpAddressLease 45 2C 00006D50 DhcpReleaseIpAddressLeaseEx 46 2D 00007100 DhcpReleaseParameters 47 2E 00007230 DhcpRemoveDNSRegistrations 48 2F 00007330 DhcpRenewIpAddressLease 49 30 00007360 DhcpRenewIpAddressLeaseEx 50 31 00007750 DhcpRequestCachedParams 51 32 00007A90 DhcpRequestOptions 52 33 000017F0 DhcpRequestParams 53 34 00008050 DhcpSetClassId 54 35 00008260 DhcpSetClientId 55 36 00008430 DhcpSetFallbackParams 56 37 00008600 DhcpSetMSFTVendorSpecificOptions 57 38 000088D0 DhcpStaticRefreshParams 58 39 00008A10 DhcpUndoRequestParams 59 3A 00008A40 Dhcpv4CheckServerAvailability 60 3B 00008B60 Dhcpv4EnableDhcpEx 61 3C 00008C90 McastApiCleanup 62 3D 00008D50 McastApiStartup 63 3E 00008E40 McastEnumerateScopes 64 3F 000090B0 McastGenUID 65 40 00009220 McastReleaseAddress 66 41 00009470 McastRenewAddress 67 42 000097B0 McastRequestAddress Summary 1000 .data 1000 .didat 1000 .pdata 8000 .rdata 1000 .reloc 1000 .rsrc C000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file DWrite.dll File Type: DLL Section contains the following exports for DWrite.dll 00000000 characteristics 621EE1CA time date stamp Tue Mar 1 19:17:30 2022 0.00 version 1 ordinal base 1 number of functions 1 number of names ordinal hint RVA name 1 0 0006A440 DWriteCreateFactory Summary 8000 .data 1000 .didat 13000 .pdata A9000 .rdata 2000 .reloc 3C000 .rsrc 153000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file dxgi.dll File Type: DLL Section contains the following exports for dxgi.dll 00000000 characteristics 559F2BA5 time date stamp Thu Jul 9 19:19:17 2015 0.00 version 1 ordinal base 19 number of functions 19 number of names ordinal hint RVA name 1 0 000097B0 ApplyCompatResolutionQuirking 2 1 000192D0 CompatString 3 2 00019240 CompatValue 10 3 00005DE0 CreateDXGIFactory 11 4 00006180 CreateDXGIFactory1 12 5 00005F30 CreateDXGIFactory2 13 6 0001F1C0 DXGID3D10CreateDevice 14 7 0001F1C0 DXGID3D10CreateLayeredDevice 15 8 000095D0 DXGID3D10ETWRundown 16 9 00043720 DXGID3D10GetLayeredDeviceSize 17 A 0001F1C0 DXGID3D10RegisterLayers 4 B 00041590 DXGIDumpJournal 18 C 00043730 DXGIGetDebugInterface1 19 D 00001F20 DXGIReportAdapterConfiguration 5 E 000417B0 DXGIRevertToSxS 6 F 0001F950 PIXBeginCapture 7 10 0001F950 PIXEndCapture 8 11 0001F950 PIXGetCaptureState 9 12 00042560 SetAppCompatStringPointer Summary 3000 .data 1000 .didat 5000 .pdata 1F000 .rdata 1000 .reloc 16000 .rsrc 5C000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file FirewallAPI.dll File Type: DLL Section contains the following exports for FirewallAPI.dll 00000000 characteristics 559F2D18 time date stamp Thu Jul 9 19:25:28 2015 0.00 version 1 ordinal base 197 number of functions 197 number of names ordinal hint RVA name 6 0 00001C90 DllCanUnloadNow 7 1 00001D50 DllGetClassObject 8 2 00017660 DllRegisterServer 9 3 000176B0 DllUnregisterServer 10 4 00038730 FWAddAuthenticationSet 11 5 000388B0 FWAddConnectionSecurityRule 12 6 00038A30 FWAddCryptoSet 13 7 00038B80 FWAddFirewallRule 14 8 00038D20 FWAddMainModeRule 15 9 00038E50 FWAddSecurityRealm 16 A 00001E30 FWChangeNotificationCreate 17 B 0001D590 FWChangeNotificationDestroy 18 C 000390A0 FWChangeTransactionalState 19 D 000033E0 FWClosePolicyStore 20 E 00039220 FWCopyAuthenticationSet 21 F 00039270 FWCopyConnectionSecurityRule 22 10 000392D0 FWCopyCryptoSet 23 11 00039330 FWCopyFirewallRule 24 12 00039390 FWDeleteAllAuthenticationSets 25 13 00039470 FWDeleteAllConnectionSecurityRules 26 14 00039540 FWDeleteAllCryptoSets 27 15 00039620 FWDeleteAllFirewallRules 28 16 000396F0 FWDeleteAllMainModeRules 29 17 000397C0 FWDeleteAuthenticationSet 30 18 000398A0 FWDeleteConnectionSecurityRule 31 19 00039980 FWDeleteCryptoSet 32 1A 00039A60 FWDeleteFirewallRule 33 1B 00039B40 FWDeleteMainModeRule 34 1C 00039C20 FWDeletePhase1SAs 35 1D 00039CE0 FWDeletePhase2SAs 36 1E 00039DA0 FWDeleteSecurityRealm 37 1F 00039DD0 FWDiagGetAppList 38 20 00039ED0 FWEnumAdapters 39 21 00039FE0 FWEnumAuthenticationSets 40 22 0003A180 FWEnumConnectionSecurityRules 41 23 0003A320 FWEnumCryptoSets 42 24 00007540 FWEnumFirewallRules 43 25 0003A490 FWEnumMainModeRules 44 26 0003A5E0 FWEnumNetworks 45 27 0003A6F0 FWEnumPhase1SAs 46 28 0003A7D0 FWEnumPhase2SAs 47 29 0003A8B0 FWEnumProducts 48 2A 0003A9C0 FWExportPolicy 49 2B 00006ED0 FWFreeAdapters 50 2C 0003AB00 FWFreeAuthenticationSet 51 2D 0003AB10 FWFreeAuthenticationSets 52 2E 0003ABD0 FWFreeAuthenticationSetsByHandle 53 2F 0003ACC0 FWFreeConnectionSecurityRule 54 30 0003ACD0 FWFreeConnectionSecurityRules 55 31 0003AD90 FWFreeConnectionSecurityRulesByHandle 56 32 0003AE80 FWFreeCryptoSet 57 33 0003AE90 FWFreeCryptoSets 58 34 0003AF50 FWFreeCryptoSetsByHandle 59 35 00006ED0 FWFreeDiagAppList 60 36 0003B060 FWFreeFirewallRule 61 37 000098D0 FWFreeFirewallRules 62 38 0003B070 FWFreeFirewallRulesByHandle 63 39 0003B160 FWFreeFirewallRulesOld 64 3A 0003B230 FWFreeMainModeRule 65 3B 0003B240 FWFreeMainModeRules 66 3C 0003B300 FWFreeMainModeRulesByHandle 67 3D 00006ED0 FWFreeNetworks 68 3E 0003B3F0 FWFreePhase1SAs 69 3F 0003B4E0 FWFreePhase2SAs 70 40 00006ED0 FWFreeProducts 71 41 00006400 FWGetConfig 72 42 00006970 FWGetConfig2 73 43 00009220 FWGetGlobalConfig 74 44 00009780 FWGetGlobalConfig2 75 45 0003B5A0 FWGetGlobalConfig3 76 46 000066C0 FWGetIndicatedPortInUse 77 47 0003B6B0 FWImportPolicy 78 48 000035D0 FWIndicatePortInUse 79 49 0003B7F0 FWIndicateProxyForUrl 80 4A 0003B8F0 FWIndicateProxyResolverRefresh 81 4B 0003B900 FWIndicateTupleInUse 82 4C 0003BA80 FWIndicateTupleInUse2 83 4D 0003BC00 FWIsTargetAProxy 84 4E 000030A0 FWOpenPolicyStore 85 4F 0003BDE0 FWQueryAuthenticationSets 86 50 0003BF10 FWQueryConnectionSecurityRules 87 51 0003C040 FWQueryCryptoSets 88 52 000064E0 FWQueryFirewallRules 89 53 0003C170 FWQueryIsolationType 90 54 0003C2B0 FWQueryMainModeRules 91 55 0003C3D0 FWRegisterProduct 92 56 000065F0 FWResetIndicatedPortInUse 93 57 00006D90 FWResetIndicatedTupleInUse 94 58 0003C560 FWRestoreDefaults 95 59 0003C820 FWRestoreGPODefaults 96 5A 0003C980 FWRevertTransaction 97 5B 0003CA90 FWSelectConSecRule 98 5C 0003CC60 FWSetAuthenticationSet 99 5D 0003CDE0 FWSetConfig 100 5E 0003CED0 FWSetConnectionSecurityRule 101 5F 0003D050 FWSetCryptoSet 102 60 0003D1A0 FWSetFirewallRule 103 61 0003D340 FWSetGlobalConfig 104 62 0003D490 FWSetGlobalConfig2 105 63 0003D5E0 FWSetMainModeRule 106 64 0003D710 FWStatusMessageFromStatusCode 107 65 0003D8D0 FWUnregisterProduct 108 66 0003D990 FWVerifyAuthenticationSet 109 67 0003D9F0 FWVerifyAuthenticationSetQuery 110 68 0003DA50 FWVerifyConnectionSecurityRule 111 69 0003DAB0 FWVerifyConnectionSecurityRuleQuery 112 6A 0003DB10 FWVerifyCryptoSet 113 6B 0003DB70 FWVerifyCryptoSetQuery 114 6C 0003DBD0 FWVerifyFirewallRule 115 6D 00003070 FWVerifyFirewallRuleQuery 116 6E 0003DC30 FWVerifyMainModeRule 117 6F 0003DC90 FWVerifyMainModeRuleQuery 118 70 0001EA90 FwActivate 119 71 00001610 FwAlloc 120 72 00006940 FwAllocCheckSize 121 73 00021060 FwAllowedProgramsAdd 122 74 00021230 FwAllowedProgramsDelete 123 75 00006210 FwAnalyzeFirewallPolicy 124 76 00001F00 FwAnalyzeFirewallPolicyOnProfile 125 77 00021390 FwApiHelperFree 126 78 00021420 FwApiHelperInit 1 79 00018E60 FwBstrToPorts 127 7A 0003DCF0 FwConvertIPv6SubNetToRange 128 7B 0003DD00 FwCopyAuthSet 129 7C 0003DD60 FwCopyMainModeRule 130 7D 0003DDC0 FwCopyWFAddressesContents 131 7E 00006EC0 FwEmptyWFAddresses 132 7F 00006ED0 FwFree 133 80 00006EC0 FwFreeAddresses 134 81 0003DE20 FwFreePorts 135 82 0003DE50 FwGetAddressesAsString 2 83 0001BCD0 FwGetCurrentProfile 3 84 00019110 FwGetVersionField 136 85 000214D0 FwIcmpSettingsEnum 137 86 00021650 FwIcmpSettingsSet 138 87 0003DEB0 FwIsGroupPolicyEnforced 139 88 0001D3A0 FwIsRemoteManagementEnabled 140 89 000217C0 FwLogSettingsSet 141 8A 0003E400 FwMergeAddresses 142 8B 00021A00 FwMulticastBroadcastResponsesEnum 143 8C 00021B70 FwMulticastBroadcastResponsesSet 144 8D 00021CD0 FwNotificationsEnum 145 8E 00021E40 FwNotificationsSet 146 8F 00021FA0 FwOpModesEnum 147 90 00022110 FwOpModesSet 148 91 00022260 FwPortOpeningsAdd 149 92 00022460 FwPortOpeningsDelete 150 93 000225D0 FwProfileTypeCurrentGet 151 94 00022680 FwProfileTypeGet 152 95 00022730 FwRestoreDefaults 153 96 000227C0 FwServicesEnum 154 97 000229A0 FwServicesSet 155 98 0003E410 FwStringToAddresses 156 99 0003E4C0 FwStringToPorts 4 9A 0001BDA0 GetDisabledInterfaces 157 9B 00006E40 IcfAddrChangeNotificationCreate 158 9C 00001E30 IcfChangeNotificationCreate 159 9D 0001D590 IcfChangeNotificationDestroy 160 9E 0001D610 IcfConnect 161 9F 0000D370 IcfDisconnect 162 A0 0001D620 IcfFreeDynamicFwPorts 163 A1 0001D6D0 IcfFreeProfile 164 A2 0001D950 IcfFreeTickets 165 A3 0001D9E0 IcfGetCurrentProfileType 166 A4 0001DA80 IcfGetDynamicFwPorts 167 A5 0001DD90 IcfGetOperationalMode 168 A6 0001DF00 IcfGetProfile 169 A7 0001E210 IcfGetTickets 170 A8 00022DD0 IcfIsPortAllowed 171 A9 0000D370 IcfOpenDynamicFwPortWithoutSocket 172 AA 0001E4E0 IcfSubNetsGetScope 173 AB 000060D0 IsFirewallInCoExistanceMode 174 AC 00008730 IsPortOrICMPAllowed 175 AD 0003E590 NetworkIsolationAddAllowEnterpriseIdRule 176 AE 0003E680 NetworkIsolationCreateAllInterfacesContainer 177 AF 0003E920 NetworkIsolationCreateAppContainer 178 B0 0003EBD0 NetworkIsolationCreateInterfaceContainer 179 B1 0003EE80 NetworkIsolationDeleteAllInterfacesContainer 180 B2 0003EF40 NetworkIsolationDeleteAllowEnterpriseIdRule 181 B3 0003EF50 NetworkIsolationDeleteAppContainer 182 B4 0003F1C0 NetworkIsolationDeleteInterfaceContainer 183 B5 00001130 NetworkIsolationDiagnoseConnectFailure 184 B6 000012A0 NetworkIsolationDiagnoseConnectFailureAndGetInfo 185 B7 00001360 NetworkIsolationDiagnoseListen 186 B8 0003F290 NetworkIsolationDiagnoseSocketCreation 187 B9 0003F400 NetworkIsolationEnumAppContainers 188 BA 0003F570 NetworkIsolationEnumerateAppContainerRules 5 BB 00006ED0 NetworkIsolationFreeAppContainers 189 BC 0003F5F0 NetworkIsolationGetAppContainer 190 BD 0003F740 NetworkIsolationGetAppContainerConfig 191 BE 0003F8A0 NetworkIsolationGetEnterpriseId 192 BF 0003F920 NetworkIsolationGetEnterpriseIdAsync 193 C0 0003FCF0 NetworkIsolationGetEnterpriseIdClose 194 C1 0003FE80 NetworkIsolationRegisterForAppContainerChanges 195 C2 00040290 NetworkIsolationSetAppContainerConfig 196 C3 00040370 NetworkIsolationSetupAppContainerBinaries 197 C4 00040640 NetworkIsolationUnregisterForAppContainerChanges Summary 2000 .data 1000 .didat 4000 .pdata 2C000 .rdata 2000 .reloc 7000 .rsrc 45000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file gdi32.dll File Type: DLL Section contains the following exports for GDI32.dll 00000000 characteristics 559F30AB time date stamp Thu Jul 9 19:40:43 2015 0.00 version 1000 ordinal base 1001 number of functions 861 number of names ordinal hint RVA name 1011 0 00086060 AbortDoc 1012 1 000888C0 AbortPath 1015 2 00078480 AddFontMemResourceEx 1016 3 000784D0 AddFontResourceA 1017 4 000784E0 AddFontResourceExA 1018 5 00078630 AddFontResourceExW 1019 6 00078660 AddFontResourceTracking 1020 7 00078800 AddFontResourceW 1021 8 000861E0 AngleArc 1022 9 000887B0 AnimatePalette 1023 A 00078890 AnyLinkedFonts 1024 B 00086300 Arc 1025 C 000864B0 ArcTo 1026 D 0004EC40 BRUSHOBJ_hGetColorTransform 1027 E 0004EC50 BRUSHOBJ_pvAllocRbrush 1028 F 0004EC60 BRUSHOBJ_pvGetRbrush 1029 10 0004EC70 BRUSHOBJ_ulGetBrushColor 1030 11 0004EC80 BeginGdiRendering 1031 12 000440F0 BeginPath 1032 13 0003F3E0 BitBlt 1033 14 0004EC90 CLIPOBJ_bEnum 1034 15 0004ECA0 CLIPOBJ_cEnumStart 1035 16 0004ECB0 CLIPOBJ_ppoGetPath 1036 17 0004C0D0 CancelDC 1037 18 0007A410 CheckColorsInGamut 1038 19 00088C40 ChoosePixelFormat 1039 1A 00086620 Chord 1040 1B 0004C3B0 ClearBitmapAttributes 1041 1C 00073840 ClearBrushAttributes 1042 1D 0000A7A0 CloseEnhMetaFile 1043 1E 0004BA10 CloseFigure 1044 1F 00083030 CloseMetaFile 1045 20 0007A630 ColorCorrectPalette 1046 21 0007A8D0 ColorMatchToTarget 1047 22 0003DA30 CombineRgn 1048 23 00073A20 CombineTransform 1049 24 0004ED20 ConfigureOPMProtectedOutput 1050 25 0008E740 CopyEnhMetaFileA 1051 26 0008E810 CopyEnhMetaFileW 1052 27 00083230 CopyMetaFileA 1053 28 00083300 CopyMetaFileW 1054 29 00042130 CreateBitmap 1055 2A 0004ED40 CreateBitmapFromDxSurface 1056 2B 0004ED50 CreateBitmapFromDxSurface2 1057 2C 00073860 CreateBitmapIndirect 1058 2D 0003E420 CreateBrushIndirect 1059 2E 0007AB50 CreateColorSpaceA 1060 2F 0007AEE0 CreateColorSpaceW 1061 30 00028590 CreateCompatibleBitmap 1062 31 0003F7C0 CreateCompatibleDC 1063 32 00040370 CreateDCA 1064 33 00040230 CreateDCW 1065 34 000857E0 CreateDIBPatternBrush 1066 35 00085830 CreateDIBPatternBrushPt 1067 36 0001DA50 CreateDIBSection 1068 37 0001BAA0 CreateDIBitmap 1069 38 00085860 CreateDiscardableBitmap 1070 39 00085870 CreateEllipticRgn 1071 3A 00085880 CreateEllipticRgnIndirect 1072 3B 000093E0 CreateEnhMetaFileA 1073 3C 00009480 CreateEnhMetaFileW 1074 3D 00043B40 CreateFontA 1075 3E 00043C20 CreateFontIndirectA 1076 3F 000858A0 CreateFontIndirectExA 1077 40 0001C510 CreateFontIndirectExW 1078 41 0001C480 CreateFontIndirectW 1079 42 00044AA0 CreateFontW 1080 43 0004E420 CreateHalftonePalette 1081 44 00085930 CreateHatchBrush 1082 45 00040210 CreateICA 1083 46 0003FE80 CreateICW 1084 47 00083480 CreateMetaFileA 1085 48 00083510 CreateMetaFileW 1086 49 0004EDA0 CreateOPMProtectedOutputs 1087 4A 000450F0 CreatePalette 1088 4B 00044790 CreatePatternBrush 1089 4C 0003E2A0 CreatePen 1090 4D 0000BA00 CreatePenIndirect 1091 4E 00088F20 CreatePolyPolygonRgn 1092 4F 0004C150 CreatePolygonRgn 1093 50 00019370 CreateRectRgn 1094 51 0003E500 CreateRectRgnIndirect 1095 52 000443A0 CreateRoundRectRgn 1096 53 000788A0 CreateScalableFontResourceA 1097 54 00078F20 CreateScalableFontResourceW 1098 55 0004CE90 CreateSessionMappedDIBSection 1099 56 0003E4D0 CreateSolidBrush 1100 57 0004EF20 D3DKMTAbandonSwapChain 1101 58 0004EF30 D3DKMTAcquireKeyedMutex 1102 59 0004EF40 D3DKMTAcquireKeyedMutex2 1103 5A 0004EF50 D3DKMTAcquireSwapChain 1104 5B 0004EF60 D3DKMTAdjustFullscreenGamma 1105 5C 0004EF70 D3DKMTCacheHybridQueryValue 1106 5D 0004EF80 D3DKMTChangeVideoMemoryReservation 1107 5E 0004EF90 D3DKMTCheckExclusiveOwnership 1108 5F 0004EFA0 D3DKMTCheckMonitorPowerState 1109 60 0004EFB0 D3DKMTCheckMultiPlaneOverlaySupport 1110 61 0004EFC0 D3DKMTCheckMultiPlaneOverlaySupport2 1111 62 0004EFD0 D3DKMTCheckOcclusion 1112 63 0004EFE0 D3DKMTCheckSharedResourceAccess 1113 64 0004EFF0 D3DKMTCheckVidPnExclusiveOwnership 1114 65 0004F000 D3DKMTCloseAdapter 1115 66 0004F010 D3DKMTConfigureSharedResource 1116 67 0003DF00 D3DKMTCreateAllocation 1117 68 0004F020 D3DKMTCreateAllocation2 1118 69 0004F030 D3DKMTCreateContext 1119 6A 0004F040 D3DKMTCreateContextVirtual 1120 6B 0004F050 D3DKMTCreateDCFromMemory 1121 6C 0004F060 D3DKMTCreateDevice 1122 6D 0004F070 D3DKMTCreateKeyedMutex 1123 6E 0004F080 D3DKMTCreateKeyedMutex2 1124 6F 0004F090 D3DKMTCreateOutputDupl 1125 70 0004F0A0 D3DKMTCreateOverlay 1126 71 0004F0B0 D3DKMTCreatePagingQueue 1127 72 0004F0C0 D3DKMTCreateSwapChain 1128 73 0003ECC0 D3DKMTCreateSynchronizationObject 1129 74 0004F0D0 D3DKMTCreateSynchronizationObject2 1130 75 0004F0E0 D3DKMTDestroyAllocation 1131 76 0004F0F0 D3DKMTDestroyAllocation2 1132 77 0004F100 D3DKMTDestroyContext 1133 78 0004F110 D3DKMTDestroyDCFromMemory 1134 79 0004F120 D3DKMTDestroyDevice 1135 7A 0004F130 D3DKMTDestroyKeyedMutex 1136 7B 0004F140 D3DKMTDestroyOutputDupl 1137 7C 0004F150 D3DKMTDestroyOverlay 1138 7D 0004F160 D3DKMTDestroyPagingQueue 1139 7E 0004F170 D3DKMTDestroySynchronizationObject 1140 7F 0004F180 D3DKMTEnumAdapters 1141 80 0004F190 D3DKMTEnumAdapters2 1142 81 0004F1A0 D3DKMTEscape 1143 82 0004F1B0 D3DKMTEvict 1144 83 0004F1C0 D3DKMTFlipOverlay 1145 84 0004F1D0 D3DKMTFreeGpuVirtualAddress 1146 85 0004F1E0 D3DKMTGetCachedHybridQueryValue 1147 86 0004F1F0 D3DKMTGetContextInProcessSchedulingPriority 1148 87 0004F200 D3DKMTGetContextSchedulingPriority 1149 88 0004F210 D3DKMTGetDWMVerticalBlankEvent 1150 89 0004F220 D3DKMTGetDeviceState 1151 8A 0004F230 D3DKMTGetDisplayModeList 1152 8B 0004F240 D3DKMTGetMultisampleMethodList 1153 8C 0004F250 D3DKMTGetOverlayState 1154 8D 0004F260 D3DKMTGetPresentHistory 1155 8E 0004F270 D3DKMTGetPresentQueueEvent 1156 8F 0004F280 D3DKMTGetProcessSchedulingPriorityClass 1157 90 0004F290 D3DKMTGetResourcePresentPrivateDriverData 1158 91 0004F2A0 D3DKMTGetRuntimeData 1159 92 0004F2B0 D3DKMTGetScanLine 1160 93 0004F2C0 D3DKMTGetSetSwapChainMetadata 1161 94 0004F2D0 D3DKMTGetSharedPrimaryHandle 1162 95 0004F2E0 D3DKMTGetSharedResourceAdapterLuid 1163 96 0004F2F0 D3DKMTInvalidateActiveVidPn 1164 97 0004F300 D3DKMTInvalidateCache 1165 98 0004F310 D3DKMTLock 1166 99 0004F320 D3DKMTLock2 1167 9A 0004F330 D3DKMTMakeResident 1168 9B 0004F340 D3DKMTMapGpuVirtualAddress 1169 9C 0004F350 D3DKMTMarkDeviceAsError 1170 9D 0004F360 D3DKMTNetDispGetNextChunkInfo 1171 9E 0004F370 D3DKMTNetDispQueryMiracastDisplayDeviceStatus 1172 9F 0004F380 D3DKMTNetDispQueryMiracastDisplayDeviceSupport 1173 A0 00075F20 D3DKMTNetDispStartMiracastDisplayDevice 1174 A1 0004F390 D3DKMTNetDispStartMiracastDisplayDevice2 1175 A2 0004F3A0 D3DKMTNetDispStartMiracastDisplayDeviceEx 1176 A3 0004F3B0 D3DKMTNetDispStopMiracastDisplayDevice 1177 A4 0004F3C0 D3DKMTNetDispStopSessions 1178 A5 0004F3D0 D3DKMTOfferAllocations 1179 A6 0004F3E0 D3DKMTOpenAdapterFromDeviceName 1180 A7 00012DA0 D3DKMTOpenAdapterFromGdiDisplayName 1181 A8 0004F3F0 D3DKMTOpenAdapterFromHdc 1182 A9 0004F400 D3DKMTOpenAdapterFromLuid 1183 AA 0004F410 D3DKMTOpenKeyedMutex 1184 AB 0004F420 D3DKMTOpenKeyedMutex2 1185 AC 0004F430 D3DKMTOpenNtHandleFromName 1186 AD 000425A0 D3DKMTOpenResource 1187 AE 0004F440 D3DKMTOpenResource2 1188 AF 0004F450 D3DKMTOpenResourceFromNtHandle 1189 B0 0004F460 D3DKMTOpenSwapChain 1190 B1 0004F470 D3DKMTOpenSyncObjectFromNtHandle 1191 B2 0004F480 D3DKMTOpenSyncObjectFromNtHandle2 1192 B3 0004F490 D3DKMTOpenSyncObjectNtHandleFromName 1193 B4 0004F4A0 D3DKMTOpenSynchronizationObject 1194 B5 0004F4B0 D3DKMTOutputDuplGetFrameInfo 1195 B6 0004F4C0 D3DKMTOutputDuplGetMetaData 1196 B7 0004F4D0 D3DKMTOutputDuplGetPointerShapeData 1197 B8 0004F4E0 D3DKMTOutputDuplPresent 1198 B9 0004F4F0 D3DKMTOutputDuplReleaseFrame 1199 BA 0004F500 D3DKMTPinDirectFlipResources 1200 BB 0004F510 D3DKMTPollDisplayChildren 1201 BC 0004F520 D3DKMTPresent 1202 BD 0004F530 D3DKMTPresentMultiPlaneOverlay 1203 BE 0004F540 D3DKMTPresentMultiPlaneOverlay2 1204 BF 0004F550 D3DKMTQueryAdapterInfo 1205 C0 0004F560 D3DKMTQueryAllocationResidency 1206 C1 0004F570 D3DKMTQueryClockCalibration 1207 C2 0004F580 D3DKMTQueryRemoteVidPnSourceFromGdiDisplayName 1208 C3 0004F590 D3DKMTQueryResourceInfo 1209 C4 0004F5A0 D3DKMTQueryResourceInfoFromNtHandle 1210 C5 0004F5B0 D3DKMTQueryStatistics 1211 C6 0004F5C0 D3DKMTQueryVidPnExclusiveOwnership 1212 C7 0004F5D0 D3DKMTQueryVideoMemoryInfo 1213 C8 0004F5E0 D3DKMTReclaimAllocations 1214 C9 0004F5F0 D3DKMTReclaimAllocations2 1215 CA 00075F40 D3DKMTRegisterTrimNotification 1216 CB 0004F600 D3DKMTReleaseKeyedMutex 1217 CC 0004F610 D3DKMTReleaseKeyedMutex2 1218 CD 0004F620 D3DKMTReleaseProcessVidPnSourceOwners 1219 CE 0004F630 D3DKMTReleaseSwapChain 1220 CF 0004F640 D3DKMTRender 1221 D0 0004F650 D3DKMTReserveGpuVirtualAddress 1222 D1 0004F660 D3DKMTSetAllocationPriority 1223 D2 0004F670 D3DKMTSetContextInProcessSchedulingPriority 1224 D3 0004F680 D3DKMTSetContextSchedulingPriority 1225 D4 0004F690 D3DKMTSetDisplayMode 1226 D5 0004F6A0 D3DKMTSetDisplayPrivateDriverFormat 1227 D6 0004F6B0 D3DKMTSetDodIndirectSwapchain 1228 D7 0004F6C0 D3DKMTSetGammaRamp 1229 D8 0004F6D0 D3DKMTSetProcessSchedulingPriorityClass 1230 D9 0004F6E0 D3DKMTSetQueuedLimit 1231 DA 0004F6F0 D3DKMTSetStablePowerState 1232 DB 0004F700 D3DKMTSetStereoEnabled 1233 DC 0004F710 D3DKMTSetSyncRefreshCountWaitTarget 1234 DD 0004F720 D3DKMTSetVidPnSourceHwProtection 1235 DE 0004F730 D3DKMTSetVidPnSourceOwner 1236 DF 0004F740 D3DKMTSetVidPnSourceOwner1 1237 E0 0004F750 D3DKMTShareObjects 1238 E1 0004F760 D3DKMTSharedPrimaryLockNotification 1239 E2 0004F770 D3DKMTSharedPrimaryUnLockNotification 1240 E3 0003EFC0 D3DKMTSignalSynchronizationObject 1241 E4 0004F780 D3DKMTSignalSynchronizationObject2 1242 E5 0004F790 D3DKMTSignalSynchronizationObjectFromCpu 1243 E6 0004F7A0 D3DKMTSignalSynchronizationObjectFromGpu 1244 E7 0004F7B0 D3DKMTSignalSynchronizationObjectFromGpu2 1245 E8 0004F7C0 D3DKMTSubmitCommand 1246 E9 0004F7D0 D3DKMTUnlock 1247 EA 0004F7E0 D3DKMTUnlock2 1248 EB 0004F7F0 D3DKMTUnpinDirectFlipResources 1249 EC 00045590 D3DKMTUnregisterTrimNotification 1250 ED 0004F800 D3DKMTUpdateGpuVirtualAddress 1251 EE 0004F810 D3DKMTUpdateOverlay 1252 EF 0004F820 D3DKMTWaitForIdle 1253 F0 0003F340 D3DKMTWaitForSynchronizationObject 1254 F1 0004F830 D3DKMTWaitForSynchronizationObject2 1255 F2 0004F840 D3DKMTWaitForSynchronizationObjectFromCpu 1256 F3 0004F850 D3DKMTWaitForSynchronizationObjectFromGpu 1257 F4 0004F860 D3DKMTWaitForVerticalBlankEvent 1258 F5 0004F870 D3DKMTWaitForVerticalBlankEvent2 1259 F6 0004EE20 DDCCIGetCapabilitiesString 1260 F7 0004EE30 DDCCIGetCapabilitiesStringLength 1261 F8 0004EE40 DDCCIGetTimingReport 1262 F9 0004EE50 DDCCIGetVCPFeature 1263 FA 0004EE60 DDCCISaveCurrentSettings 1264 FB 0004EE70 DDCCISetVCPFeature 1265 FC 00020F60 DPtoLP 1266 FD 0004EF00 DdCreateFullscreenSprite 1267 FE 0004F8A0 DdDestroyFullscreenSprite 1268 FF 0004FC30 DdEntry0 1269 100 0004EDE0 DdEntry1 1270 101 0004EEB0 DdEntry10 1271 102 0004DD20 DdEntry11 1272 103 0004DF70 DdEntry12 1273 104 0004EEC0 DdEntry13 1274 105 0004EED0 DdEntry14 1275 106 0004EEF0 DdEntry15 1276 107 0004DF80 DdEntry16 1277 108 0004EEE0 DdEntry17 1278 109 0004EF10 DdEntry18 1279 10A 0004E180 DdEntry19 1280 10B 0004EDF0 DdEntry2 1281 10C 0004F880 DdEntry20 1282 10D 0004DF60 DdEntry21 1283 10E 0004F8B0 DdEntry22 1284 10F 0004DFA0 DdEntry23 1285 110 0004F890 DdEntry24 1286 111 0004F8C0 DdEntry25 1287 112 0004F8D0 DdEntry26 1288 113 0004F8E0 DdEntry27 1289 114 0004F8F0 DdEntry28 1290 115 0004F900 DdEntry29 1291 116 0004EE00 DdEntry3 1292 117 0004F910 DdEntry30 1293 118 0004F920 DdEntry31 1294 119 0004F940 DdEntry32 1295 11A 0004F950 DdEntry33 1296 11B 0004F960 DdEntry34 1297 11C 0004F970 DdEntry35 1298 11D 0004F990 DdEntry36 1299 11E 0004F980 DdEntry37 1300 11F 0004F9A0 DdEntry38 1301 120 0004F9B0 DdEntry39 1302 121 0004EE10 DdEntry4 1303 122 0004E1A0 DdEntry40 1304 123 0004F9D0 DdEntry41 1305 124 0004F9E0 DdEntry42 1306 125 0004FA00 DdEntry43 1307 126 0004FA10 DdEntry44 1308 127 0004FA20 DdEntry45 1309 128 0004DFF0 DdEntry46 1310 129 0004FA30 DdEntry47 1311 12A 0004FA40 DdEntry48 1312 12B 0004FA50 DdEntry49 1313 12C 0004DBA0 DdEntry5 1314 12D 0004E170 DdEntry50 1315 12E 0004FA60 DdEntry51 1316 12F 0004FA70 DdEntry52 1317 130 0004FA80 DdEntry53 1318 131 0004E1B0 DdEntry54 1319 132 0004FA90 DdEntry55 1320 133 0004FAA0 DdEntry56 1321 134 0004F930 DdEntry6 1322 135 0004EE80 DdEntry7 1323 136 0004EE90 DdEntry8 1324 137 0004EEA0 DdEntry9 1325 138 0004F9C0 DdNotifyFullscreenSpriteUpdate 1326 139 0004F9F0 DdQueryVisRgnUniqueness 1327 13A 0007AEF0 DeleteColorSpace 1328 13B 00018500 DeleteDC 1329 13C 00010A60 DeleteEnhMetaFile 1330 13D 00011DF0 DeleteMetaFile 1331 13E 0001BE10 DeleteObject 1332 13F 00088CC0 DescribePixelFormat 1333 140 0004FAD0 DestroyOPMProtectedOutput 1334 141 0004FAE0 DestroyPhysicalMonitorInternal 1335 142 000867D0 DeviceCapabilitiesExA 1336 143 000867D0 DeviceCapabilitiesExW 1337 144 00086910 DrawEscape 1338 145 0000AC10 Ellipse 1339 146 0004FC50 EnableEUDC 1340 147 00046140 EndDoc 1341 148 000869C0 EndFormPage 1342 149 0004FC70 EndGdiRendering 1343 14A 000869D0 EndPage 1344 14B 00044070 EndPath 1345 14C 0008D4B0 EngAcquireSemaphore 1346 14D 0004FC90 EngAlphaBlend 1347 14E 0004FCA0 EngAssociateSurface 1348 14F 0004FCB0 EngBitBlt 1349 150 0004FCC0 EngCheckAbort 1350 151 0008D4C0 EngComputeGlyphSet 1351 152 0004FCE0 EngCopyBits 1352 153 0004FCF0 EngCreateBitmap 1353 154 0004FD00 EngCreateClip 1354 155 0004FD10 EngCreateDeviceBitmap 1355 156 0004FD20 EngCreateDeviceSurface 1356 157 0004FD30 EngCreatePalette 1357 158 0008D530 EngCreateSemaphore 1358 159 0004FD40 EngDeleteClip 1359 15A 0004FD50 EngDeletePalette 1360 15B 0004FD60 EngDeletePath 1361 15C 0008D570 EngDeleteSemaphore 1362 15D 0004FD70 EngDeleteSurface 1363 15E 0004FD80 EngEraseSurface 1364 15F 0004FD90 EngFillPath 1365 160 0008D5B0 EngFindResource 1366 161 0008D650 EngFreeModule 1367 162 0004BFC0 EngGetCurrentCodePage 1368 163 0008D660 EngGetDriverName 1369 164 0008D690 EngGetPrinterDataFileName 1370 165 0004FDA0 EngGradientFill 1371 166 0004FDB0 EngLineTo 1372 167 0008D6C0 EngLoadModule 1373 168 0004FDC0 EngLockSurface 1374 169 0004FDD0 EngMarkBandingSurface 1375 16A 0008D6E0 EngMultiByteToUnicodeN 1376 16B 0008D6F0 EngMultiByteToWideChar 1377 16C 0004FDE0 EngPaint 1378 16D 0004FDF0 EngPlgBlt 1379 16E 00051C70 EngQueryEMFInfo 1380 16F 0008D730 EngQueryLocalTime 1381 170 0008D7C0 EngReleaseSemaphore 1382 171 0004FE00 EngStretchBlt 1383 172 0004FE10 EngStretchBltROP 1384 173 0004FE20 EngStrokeAndFillPath 1385 174 0004FE30 EngStrokePath 1386 175 0004FE40 EngTextOut 1387 176 0004FE50 EngTransparentBlt 1388 177 0008D7D0 EngUnicodeToMultiByteN 1389 178 0004FE60 EngUnlockSurface 1390 179 0008D7E0 EngWideCharToMultiByte 1391 17A 00010B80 EnumEnhMetaFile 1392 17B 000790D0 EnumFontFamiliesA 1393 17C 00041BE0 EnumFontFamiliesExA 1394 17D 00041CC0 EnumFontFamiliesExW 1395 17E 00041BB0 EnumFontFamiliesW 1396 17F 00079100 EnumFontsA 1397 180 00079130 EnumFontsW 1398 181 0007AF00 EnumICMProfilesA 1399 182 0007AFA0 EnumICMProfilesW 1400 183 00008880 EnumMetaFile 1401 184 00085950 EnumObjects 1402 185 00045A80 EqualRgn 1403 186 000869E0 Escape 1404 187 00089660 EudcLoadLinkW 1405 188 000896C0 EudcUnloadLinkW 1406 189 00043F00 ExcludeClipRect 1407 18A 00085A70 ExtCreatePen 1408 18B 0001B300 ExtCreateRegion 1409 18C 0004C190 ExtEscape 1410 18D 000870A0 ExtFloodFill 1411 18E 0001C760 ExtSelectClipRgn 1412 18F 00008810 ExtTextOutA 1413 190 00024B10 ExtTextOutW 1414 191 0004FEB0 FONTOBJ_cGetAllGlyphHandles 1415 192 0004FEC0 FONTOBJ_cGetGlyphs 1416 193 0004FED0 FONTOBJ_pQueryGlyphAttrs 1417 194 0004FEE0 FONTOBJ_pfdg 1418 195 0004FEF0 FONTOBJ_pifi 1419 196 0004FF00 FONTOBJ_pvTrueTypeFontFile 1420 197 0004FF10 FONTOBJ_pxoGetXform 1421 198 0004FF20 FONTOBJ_vGetInfo 1422 199 00044C10 FillPath 1423 19A 00087230 FillRgn 1424 19B 00051C70 FixBrushOrgEx 1425 19C 00088930 FlattenPath 1426 19D 00087330 FloodFill 1427 19E 00079160 FontIsLinked 1428 19F 00087350 FrameRgn 1429 1A0 0004C490 GdiAddFontResourceW 1430 1A1 00090890 GdiAddGlsBounds 1431 1A2 000908C0 GdiAddGlsRecord 1432 1A3 0003F930 GdiAlphaBlend 1433 1A4 0009BBE0 GdiArtificialDecrementDriver 1434 1A5 00082360 GdiCleanCacheDC 1435 1A6 000443B0 GdiClearStockObjectCache 1436 1A7 0004A760 GdiComment 1437 1A8 00087470 GdiConsoleTextOut 1438 1A9 000441E0 GdiConvertAndCheckDC 1439 1AA 00082390 GdiConvertBitmap 1440 1AB 0007B040 GdiConvertBitmapV5 1441 1AC 00082390 GdiConvertBrush 1442 1AD 00082390 GdiConvertDC 1443 1AE 00094F00 GdiConvertEnhMetaFile 1444 1AF 00082390 GdiConvertFont 1445 1B0 00094F80 GdiConvertMetaFilePict 1446 1B1 00082390 GdiConvertPalette 1447 1B2 00082390 GdiConvertRegion 1448 1B3 00085BF0 GdiConvertToDevmodeW 1449 1B4 00095020 GdiCreateLocalEnhMetaFile 1450 1B5 00095030 GdiCreateLocalMetaFilePict 1451 1B6 0004CFF0 GdiDeleteLocalDC 1452 1B7 0004BB50 GdiDeleteSpoolFileHandle 1453 1B8 00088D50 GdiDescribePixelFormat 1454 1B9 0001BA30 GdiDllInitialize 1455 1BA 00040DA0 GdiDrawStream 1456 1BB 00045FE0 GdiEndDocEMF 1457 1BC 00046AB0 GdiEndPageEMF 1458 1BD 00077900 GdiEntry1 1459 1BE 000779B0 GdiEntry10 1460 1BF 000779D0 GdiEntry11 1461 1C0 00077A40 GdiEntry12 1462 1C1 000411E0 GdiEntry13 1463 1C2 00077A60 GdiEntry14 1464 1C3 00077AA0 GdiEntry15 1465 1C4 0004CFF0 GdiEntry16 1466 1C5 00077AD0 GdiEntry2 1467 1C6 00078180 GdiEntry3 1468 1C7 000781D0 GdiEntry4 1469 1C8 000781E0 GdiEntry5 1470 1C9 00078210 GdiEntry6 1471 1CA 00078220 GdiEntry7 1472 1CB 00078230 GdiEntry8 1473 1CC 00078240 GdiEntry9 1474 1CD 00040C80 GdiFixUpHandle 1475 1CE 00041660 GdiFlush 1476 1CF 0004FF70 GdiFullscreenControl 1477 1D0 00087490 GdiGetBatchLimit 1478 1D1 000413A0 GdiGetBitmapBitsSize 1479 1D2 00041810 GdiGetCharDimensions 1480 1D3 00042180 GdiGetCodePage 1481 1D4 0004C130 GdiGetDC 1482 1D5 00049AF0 GdiGetDevmodeForPage 1483 1D6 00082390 GdiGetLocalBrush 1484 1D7 00082390 GdiGetLocalDC 1485 1D8 00082390 GdiGetLocalFont 1486 1D9 00089F70 GdiGetPageCount 1487 1DA 00049A10 GdiGetPageHandle 1488 1DB 00048DC0 GdiGetSpoolFileHandle 1489 1DC 000501F0 GdiGetSpoolMessage 1490 1DD 00042870 GdiGradientFill 1491 1DE 000502D0 GdiInitSpool 1492 1DF 0001A210 GdiInitializeLanguagePack 1493 1E0 000823A0 GdiIsMetaFileDC 1494 1E1 00082400 GdiIsMetaPrintDC 1495 1E2 00081CB0 GdiIsPlayMetafileDC 1496 1E3 00085D40 GdiIsScreenDC 1497 1E4 000473C0 GdiIsUMPDSandboxingEnabled 1498 1E5 0004CF70 GdiLoadType1Fonts 1499 1E6 00051C70 GdiPlayDCScript 1500 1E7 00089FF0 GdiPlayEMF 1501 1E8 00051C70 GdiPlayJournal 1502 1E9 0004A040 GdiPlayPageEMF 1503 1EA 0008A170 GdiPlayPrivatePageEMF 1504 1EB 00051C70 GdiPlayScript 1505 1EC 000477C0 GdiPrinterThunk 1506 1ED 00019DE0 GdiProcessSetup 1507 1EE 00050410 GdiQueryFonts 1508 1EF 00082450 GdiQueryTable 1509 1F0 00028150 GdiRealizationInfo 1510 1F1 0003EBE0 GdiReleaseDC 1511 1F2 0004CFF0 GdiReleaseLocalDC 1512 1F3 0008A1B0 GdiResetDCEMF 1513 1F4 0004CFF0 GdiSetAttrs 1514 1F5 000874A0 GdiSetBatchLimit 1515 1F6 00085DC0 GdiSetLastError 1516 1F7 00088D60 GdiSetPixelFormat 1517 1F8 0004D3A0 GdiSetServerAttr 1518 1F9 00049740 GdiStartDocEMF 1519 1FA 0004BC80 GdiStartPageEMF 1520 1FB 0004CFF0 GdiSupportsFontChangeEvent 1521 1FC 00088D70 GdiSwapBuffers 1522 1FD 00011570 GdiTransparentBlt 1523 1FE 00044150 GdiValidateHandle 1524 1FF 00073F90 GetArcDirection 1525 200 00073FB0 GetAspectRatioFilterEx 1526 201 000739E0 GetBitmapAttributes 1527 202 000118D0 GetBitmapBits 1528 203 00085DE0 GetBitmapDimensionEx 1529 204 00042810 GetBkColor 1530 205 0001FF70 GetBkMode 1531 206 00045830 GetBoundsRect 1532 207 000739E0 GetBrushAttributes 1533 208 000443D0 GetBrushOrgEx 1534 209 0004FF90 GetCOPPCompatibleOPMInformation 1535 20A 0004FFA0 GetCertificate 1536 20B 0004FFB0 GetCertificateSize 1537 20C 00073FD0 GetCharABCWidthsA 1538 20D 00073FF0 GetCharABCWidthsFloatA 1539 20E 00074010 GetCharABCWidthsFloatW 1540 20F 00074030 GetCharABCWidthsI 1541 210 00074060 GetCharABCWidthsW 1542 211 00074080 GetCharWidth32A 1543 212 000740A0 GetCharWidth32W 1544 213 000740C0 GetCharWidthA 1545 214 000740E0 GetCharWidthFloatA 1546 215 00074100 GetCharWidthFloatW 1547 216 00074120 GetCharWidthI 1548 217 0004E210 GetCharWidthInfo 1549 218 00012550 GetCharWidthW 1550 219 00074180 GetCharacterPlacementA 1551 21A 000744A0 GetCharacterPlacementW 1552 21B 00043F80 GetClipBox 1553 21C 0003ED40 GetClipRgn 1554 21D 00074560 GetColorAdjustment 1555 21E 0007B880 GetColorSpace 1556 21F 00044700 GetCurrentDpiInfo 1557 220 000289A0 GetCurrentObject 1558 221 00020D50 GetCurrentPositionEx 1559 222 00081D10 GetDCBrushColor 1560 223 00043DC0 GetDCOrgEx 1561 224 00081D80 GetDCPenColor 1562 225 00044740 GetDIBColorTable 1563 226 0003E7A0 GetDIBits 1564 227 0001B390 GetDeviceCaps 1565 228 0007B8F0 GetDeviceGammaRamp 1566 229 00074570 GetETM 1567 22A 00089770 GetEUDCTimeStamp 1568 22B 00089790 GetEUDCTimeStampExW 1569 22C 0008E970 GetEnhMetaFileA 1570 22D 0008EA20 GetEnhMetaFileBits 1571 22E 0008EAD0 GetEnhMetaFileDescriptionA 1572 22F 0008EAE0 GetEnhMetaFileDescriptionW 1573 230 00044610 GetEnhMetaFileHeader 1574 231 0008EB00 GetEnhMetaFilePaletteEntries 1575 232 0008EC20 GetEnhMetaFilePixelFormat 1576 233 0008ED20 GetEnhMetaFileW 1577 234 00045810 GetFontAssocStatus 1578 235 00017B10 GetFontData 1579 236 00079170 GetFontFileData 1580 237 000791B0 GetFontFileInfo 1581 238 00081DF0 GetFontLanguageInfo 1582 239 00026CA0 GetFontRealizationInfo 1583 23A 00079400 GetFontResourceInfoW 1584 23B 000500D0 GetFontUnicodeRanges 1585 23C 000745C0 GetGlyphIndicesA 1586 23D 000747B0 GetGlyphIndicesW 1587 23E 000747C0 GetGlyphOutline 1588 23F 000747C0 GetGlyphOutlineA 1589 240 0004CEE0 GetGlyphOutlineW 1590 241 00074920 GetGlyphOutlineWow 1591 242 0000ADB0 GetGraphicsMode 1592 243 00040CC0 GetHFONT 1593 244 0007B970 GetICMProfileA 1594 245 0007BA90 GetICMProfileW 1595 246 00074960 GetKerningPairs 1596 247 00074960 GetKerningPairsA 1597 248 00074C20 GetKerningPairsW 1598 249 00022BE0 GetLayout 1599 24A 0007BC30 GetLogColorSpaceA 1600 24B 0007BDA0 GetLogColorSpaceW 1601 24C 00043460 GetMapMode 1602 24D 000829E0 GetMetaFileA 1603 24E 00009BF0 GetMetaFileBitsEx 1604 24F 00082AA0 GetMetaFileW 1605 250 00012E20 GetMetaRgn 1606 251 00074C50 GetMiterLimit 1607 252 00044CF0 GetNearestColor 1608 253 00085DF0 GetNearestPaletteIndex 1609 254 00050150 GetNumberOfPhysicalMonitors 1610 255 00050160 GetOPMInformation 1611 256 00050170 GetOPMRandomNumber 1612 257 000286D0 GetObjectA 1613 258 0003D680 GetObjectType 1614 259 00040BC0 GetObjectW 1615 25A 00074C60 GetOutlineTextMetricsA 1616 25B 000281C0 GetOutlineTextMetricsW 1617 25C 000457E0 GetPaletteEntries 1618 25D 000889A0 GetPath 1619 25E 000501B0 GetPhysicalMonitorDescription 1620 25F 000501C0 GetPhysicalMonitors 1621 260 0003D8E0 GetPixel 1622 261 000097E0 GetPixelFormat 1623 262 00081E60 GetPolyFillMode 1624 263 00081EC0 GetROP2 1625 264 00043F90 GetRandomRgn 1626 265 000795A0 GetRasterizerCaps 1627 266 0003FAE0 GetRegionData 1628 267 00081F20 GetRelAbs 1629 268 0003EB30 GetRgnBox 1630 269 0001CAD0 GetStockObject 1631 26A 00081F40 GetStretchBltMode 1632 26B 000897C0 GetStringBitmapA 1633 26C 00050210 GetStringBitmapW 1634 26D 00050220 GetSuggestedOPMProtectedOutputArraySize 1635 26E 00044990 GetSystemPaletteEntries 1636 26F 00074F70 GetSystemPaletteUse 1637 270 0001FF10 GetTextAlign 1638 271 00012E40 GetTextCharacterExtra 1639 272 000457D0 GetTextCharset 1640 273 0004DA30 GetTextCharsetInfo 1641 274 00042BB0 GetTextColor 1642 275 00074F80 GetTextExtentExPointA 1643 276 00075270 GetTextExtentExPointI 1644 277 00009380 GetTextExtentExPointW 1645 278 0003C530 GetTextExtentExPointWPri 1646 279 000752B0 GetTextExtentPoint32A 1647 27A 00027060 GetTextExtentPoint32W 1648 27B 000752D0 GetTextExtentPointA 1649 27C 00075650 GetTextExtentPointI 1650 27D 00027080 GetTextExtentPointW 1651 27E 00075670 GetTextFaceA 1652 27F 000195B0 GetTextFaceAliasW 1653 280 00018F80 GetTextFaceW 1654 281 00041680 GetTextMetricsA 1655 282 0003EE00 GetTextMetricsW 1656 283 00073A30 GetTransform 1657 284 00028A90 GetViewportExtEx 1658 285 00040F00 GetViewportOrgEx 1659 286 0008ED90 GetWinMetaFileBits 1660 287 00028B10 GetWindowExtEx 1661 288 00043DE0 GetWindowOrgEx 1662 289 00044020 GetWorldTransform 1663 28A 00050290 HT_Get8BPPFormatPalette 1664 28B 000502A0 HT_Get8BPPMaskPalette 1665 28C 0003FA40 IntersectClipRect 1666 28D 000875D0 InvertRgn 1667 28E 0008EF80 IsValidEnhMetaRecord 1668 28F 0008EFF0 IsValidEnhMetaRecordOffExt 1669 290 00040F80 LPtoDP 1670 291 00082180 LineDDA 1671 292 00043E50 LineTo 1672 293 00021DD0 LpkDrawTextEx 1673 294 00162160 LpkEditControl 1674 295 00008D80 LpkExtTextOut 1675 296 000B46C0 LpkGetCharacterPlacement 1676 297 0003BF60 LpkGetTextExtentExPoint 1677 298 0001A290 LpkInitialize 1678 299 000B2D90 LpkPSMTextOut 1679 29A 0009BE60 LpkPresent 1680 29B 000B4FA0 LpkTabbedTextOut 1681 29C 000B4D40 LpkUseGDIWidthCache 1682 29D 000426F0 MaskBlt 1683 29E 00089210 MirrorRgn 1684 29F 0001E460 ModifyWorldTransform 1685 2A0 00020C50 MoveToEx 1686 2A1 000876C0 NamedEscape 1687 2A2 00047120 OffsetClipRgn 1688 2A3 00040A60 OffsetRgn 1689 2A4 000430B0 OffsetViewportOrgEx 1690 2A5 00041560 OffsetWindowOrgEx 1691 2A6 00050360 PATHOBJ_bEnum 1692 2A7 00050370 PATHOBJ_bEnumClipLines 1693 2A8 00050380 PATHOBJ_vEnumStart 1694 2A9 00050390 PATHOBJ_vEnumStartClipLines 1695 2AA 000503A0 PATHOBJ_vGetBounds 1696 2AB 000877F0 PaintRgn 1697 2AC 0003F4F0 PatBlt 1698 2AD 000889D0 PathToRegion 1699 2AE 000878E0 Pie 1700 2AF 000470E0 PlayEnhMetaFile 1701 2B0 0001F4F0 PlayEnhMetaFileRecord 1702 2B1 00008860 PlayMetaFile 1703 2B2 0000A210 PlayMetaFileRecord 1704 2B3 00087A90 PlgBlt 1705 2B4 00012380 PolyBezier 1706 2B5 0004B930 PolyBezierTo 1707 2B6 00088F50 PolyDraw 1708 2B7 0003F070 PolyPatBlt 1709 2B8 0004A940 PolyPolygon 1710 2B9 00089030 PolyPolyline 1711 2BA 00087C60 PolyTextOutA 1712 2BB 0003F850 PolyTextOutW 1713 2BC 00042390 Polygon 1714 2BD 00012320 Polyline 1715 2BE 0004BA60 PolylineTo 1716 2BF 00011C50 PtInRegion 1717 2C0 00089480 PtVisible 1718 2C1 00045A50 QueryFontAssocStatus 1719 2C2 0004C000 RealizePalette 1720 2C3 00089490 RectInRegion 1721 2C4 00044140 RectVisible 1722 2C5 00045000 Rectangle 1723 2C6 000795B0 RemoveFontMemResourceEx 1724 2C7 000795E0 RemoveFontResourceA 1725 2C8 000796E0 RemoveFontResourceExA 1726 2C9 00079840 RemoveFontResourceExW 1727 2CA 00079900 RemoveFontResourceTracking 1728 2CB 000799F0 RemoveFontResourceW 1729 2CC 00085E00 ResetDCA 1730 2CD 00085E80 ResetDCW 1731 2CE 00085E90 ResizePalette 1732 2CF 00021500 RestoreDC 1733 2D0 00010BB0 RoundRect 1734 2D1 00050470 STROBJ_bEnum 1735 2D2 00050480 STROBJ_bEnumPositionsOnly 1736 2D3 00050490 STROBJ_bGetAdvanceWidths 1737 2D4 000504A0 STROBJ_dwGetCodePage 1738 2D5 000504B0 STROBJ_vEnumStart 1739 2D6 00021940 SaveDC 1740 2D7 00073A40 ScaleViewportExtEx 1741 2D8 00073B90 ScaleWindowExtEx 1742 2D9 000200C0 ScriptApplyDigitSubstitution 1743 2DA 0009BE80 ScriptApplyLogicalWidth 1744 2DB 00025960 ScriptBreak 1745 2DC 0003CAD0 ScriptCPtoX 1746 2DD 0009C130 ScriptCacheGetHeight 1747 2DE 0000E8A0 ScriptFreeCache 1748 2DF 00045190 ScriptGetCMap 1749 2E0 0009D320 ScriptGetFontAlternateGlyphs 1750 2E1 0009D480 ScriptGetFontFeatureTags 1751 2E2 0009D6C0 ScriptGetFontLanguageTags 1752 2E3 00045390 ScriptGetFontProperties 1753 2E4 0009D890 ScriptGetFontScriptTags 1754 2E5 0009C1D0 ScriptGetGlyphABCWidth 1755 2E6 0009C280 ScriptGetLogicalWidths 1756 2E7 0001A3F0 ScriptGetProperties 1757 2E8 0003BB70 ScriptIsComplex 1758 2E9 00044DC0 ScriptItemize 1759 2EA 0009D9B0 ScriptItemizeOpenType 1760 2EB 0009C580 ScriptJustify 1761 2EC 0009CD20 ScriptLayout 1762 2ED 0009CDE0 ScriptPlace 1763 2EE 0009DA80 ScriptPlaceOpenType 1764 2EF 0009DF60 ScriptPositionSingleGlyph 1765 2F0 00027820 ScriptRecordDigitSubstitution 1766 2F1 00027D40 ScriptShape 1767 2F2 0009E180 ScriptShapeOpenType 1768 2F3 00039AE0 ScriptStringAnalyse 1769 2F4 0003C960 ScriptStringCPtoX 1770 2F5 0003C7B0 ScriptStringFree 1771 2F6 0009D060 ScriptStringGetLogicalWidths 1772 2F7 00044E30 ScriptStringGetOrder 1773 2F8 00022510 ScriptStringOut 1774 2F9 0009D1C0 ScriptStringValidate 1775 2FA 0003D470 ScriptStringXtoCP 1776 2FB 0009D2E0 ScriptString_pLogAttr 1777 2FC 0009D300 ScriptString_pSize 1778 2FD 00045A60 ScriptString_pcOutChars 1779 2FE 0009E650 ScriptSubstituteSingleGlyph 1780 2FF 00022EA0 ScriptTextOut 1781 300 0003D2A0 ScriptXtoCP 1782 301 00082490 SelectBrushLocal 1783 302 0004B7D0 SelectClipPath 1784 303 0001C740 SelectClipRgn 1785 304 00082490 SelectFontLocal 1786 305 0001F7B0 SelectObject 1787 306 0001E7C0 SelectPalette 1788 307 00087F70 SetAbortProc 1789 308 00018EB0 SetArcDirection 1790 309 0004CEC0 SetBitmapAttributes 1791 30A 00045180 SetBitmapBits 1792 30B 00085F00 SetBitmapDimensionEx 1793 30C 000187D0 SetBkColor 1794 30D 0001FFD0 SetBkMode 1795 30E 00045730 SetBoundsRect 1796 30F 00073A00 SetBrushAttributes 1797 310 00018B80 SetBrushOrgEx 1798 311 00073E40 SetColorAdjustment 1799 312 0004AD30 SetColorSpace 1800 313 00042990 SetDCBrushColor 1801 314 00081FA0 SetDCPenColor 1802 315 0004BEB0 SetDIBColorTable 1803 316 0001E610 SetDIBits 1804 317 0001CB80 SetDIBitsToDevice 1805 318 00081880 SetDeviceGammaRamp 1806 319 00010C60 SetEnhMetaFileBits 1807 31A 00079A80 SetFontEnumeration 1808 31B 00022C60 SetGraphicsMode 1809 31C 00019200 SetICMMode 1810 31D 000818C0 SetICMProfileA 1811 31E 00081AC0 SetICMProfileW 1812 31F 00042470 SetLayout 1813 320 00073CE0 SetLayoutWidth 1814 321 00050590 SetMagicColors 1815 322 00015A60 SetMapMode 1816 323 00073EC0 SetMapperFlags 1817 324 00011310 SetMetaFileBitsEx 1818 325 00042540 SetMetaRgn 1819 326 00018D80 SetMiterLimit 1820 327 000505A0 SetOPMSigningKeyAndSequenceNumbers 1821 328 00088840 SetPaletteEntries 1822 329 0003D740 SetPixel 1823 32A 00088DD0 SetPixelFormat 1824 32B 00045460 SetPixelV 1825 32C 0001B1F0 SetPolyFillMode 1826 32D 000189B0 SetROP2 1827 32E 0003DDB0 SetRectRgn 1828 32F 00082150 SetRelAbs 1829 330 00018AA0 SetStretchBltMode 1830 331 00073F80 SetSystemPaletteUse 1831 332 00020B60 SetTextAlign 1832 333 000188E0 SetTextCharacterExtra 1833 334 0001B780 SetTextColor 1834 335 00018DF0 SetTextJustification 1835 336 0000BAC0 SetViewportExtEx 1836 337 00019920 SetViewportOrgEx 1837 338 00073D70 SetVirtualResolution 1838 339 0008F020 SetWinMetaFileBits 1839 33A 0000BCD0 SetWindowExtEx 1840 33B 00018FA0 SetWindowOrgEx 1841 33C 0001E440 SetWorldTransform 1842 33D 00088000 StartDocA 1843 33E 000881A0 StartDocW 1844 33F 00088720 StartFormPage 1845 340 000469B0 StartPage 1846 341 0003FD80 StretchBlt 1847 342 0001CF20 StretchDIBits 1848 343 00088A70 StrokeAndFillPath 1849 344 00088B20 StrokePath 1850 345 00088EB0 SwapBuffers 1851 346 000088B0 TextOutA 1852 347 00012D30 TextOutW 1853 348 00013570 TranslateCharsetInfo 1854 349 00079A90 UnloadNetworkFonts 1855 34A 00085F10 UnrealizeObject 1856 34B 00088730 UpdateColors 1857 34C 0008D990 UpdateICMRegKeyA 1858 34D 0008D990 UpdateICMRegKeyW 1859 34E 00017BD0 UspAllocCache 1860 34F 0001FE00 UspAllocTemp 1861 350 00022780 UspFreeMem 1862 351 00088BD0 WidenPath 1863 352 000506E0 XFORMOBJ_bApplyXform 1864 353 000506F0 XFORMOBJ_iGetXform 1865 354 00050700 XLATEOBJ_cGetPalette 1866 355 00050710 XLATEOBJ_hGetColorTransform 1867 356 00050720 XLATEOBJ_iXlate 1868 357 0008D820 XLATEOBJ_piVector 1869 358 0004CD40 bInitSystemAndFontsDirectoriesW 1870 359 0004CC30 bMakePathNameW 1871 35A 0004CA20 cGetTTFFromFOT 1872 35B 000B5410 ftsWordBreak 1873 35C 00085F50 gdiPlaySpoolStream 1000 00044360 [NONAME] 1001 0008D9E0 [NONAME] 1002 0008DA10 [NONAME] 1003 000446D0 [NONAME] 1004 00042110 [NONAME] 1005 00044000 [NONAME] 1006 0008D9B0 [NONAME] 1007 00042A70 [NONAME] 1008 0008D990 [NONAME] 1009 00044770 [NONAME] 1010 000447A0 [NONAME] 1013 0008D960 [NONAME] 1014 0004C400 [NONAME] 2000 0004C3D0 [NONAME] Summary 4000 .data B000 .pdata 98000 .rdata 2000 .reloc 12000 .rsrc C9000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file IPHLPAPI.DLL File Type: DLL Section contains the following exports for IPHLPAPI.DLL 00000000 characteristics 559F3036 time date stamp Thu Jul 9 19:38:46 2015 0.00 version 1 ordinal base 277 number of functions 277 number of names ordinal hint RVA name 1 0 0001E0D0 AddIPAddress 2 1 0001C5B0 AllocateAndGetInterfaceInfoFromStack 3 2 0001D5F0 AllocateAndGetIpAddrTableFromStack 4 3 0000B0C0 CancelIPChangeNotify 5 4 0000A280 CancelMibChangeNotify2 6 5 00022FE0 CloseCompartment 7 6 0001D620 CloseGetIPPhysicalInterfaceForDestination 8 7 000237D0 ConvertCompartmentGuidToId 9 8 00023860 ConvertCompartmentIdToGuid 10 9 0000A820 ConvertGuidToStringA 11 A 000086C0 ConvertGuidToStringW 12 B 00023960 ConvertInterfaceAliasToLuid 13 C 000036F0 ConvertInterfaceGuidToLuid 14 D 00003810 ConvertInterfaceIndexToLuid 15 E 0000C490 ConvertInterfaceLuidToAlias 16 F 000091B0 ConvertInterfaceLuidToGuid 17 10 00008640 ConvertInterfaceLuidToIndex 18 11 00023AF0 ConvertInterfaceLuidToNameA 19 12 00003D70 ConvertInterfaceLuidToNameW 20 13 00023BA0 ConvertInterfaceNameToLuidA 21 14 00004100 ConvertInterfaceNameToLuidW 22 15 00023C80 ConvertInterfacePhysicalAddressToLuid 23 16 00022DA0 ConvertIpv4MaskToLength 24 17 00001F80 ConvertLengthToIpv4Mask 25 18 0001C7B0 ConvertRemoteInterfaceAliasToLuid 26 19 0001C950 ConvertRemoteInterfaceGuidToLuid 27 1A 0001CAA0 ConvertRemoteInterfaceIndexToLuid 28 1B 0001CB10 ConvertRemoteInterfaceLuidToAlias 29 1C 0001CC50 ConvertRemoteInterfaceLuidToGuid 30 1D 0001CCD0 ConvertRemoteInterfaceLuidToIndex 31 1E 0001CD50 ConvertStringToGuidA 32 1F 0000ECA0 ConvertStringToGuidW 33 20 00023E00 ConvertStringToInterfacePhysicalAddress 34 21 00023F80 CreateAnycastIpAddressEntry 35 22 00022FF0 CreateCompartment 36 23 0001E220 CreateIpForwardEntry 37 24 00025180 CreateIpForwardEntry2 38 25 0001E230 CreateIpNetEntry 39 26 00025940 CreateIpNetEntry2 40 27 000209F0 CreatePersistentTcpPortReservation 41 28 00020A30 CreatePersistentUdpPortReservation 42 29 0001E500 CreateProxyArpEntry 43 2A 00026080 CreateSortedAddressPairs 44 2B 00023FA0 CreateUnicastIpAddressEntry 45 2C 00023FC0 DeleteAnycastIpAddressEntry 46 2D 00023170 DeleteCompartment 47 2E 0001E520 DeleteIPAddress 48 2F 0001E610 DeleteIpForwardEntry 49 30 000251A0 DeleteIpForwardEntry2 50 31 0001E6E0 DeleteIpNetEntry 51 32 00025960 DeleteIpNetEntry2 52 33 00020A70 DeletePersistentTcpPortReservation 53 34 00020AB0 DeletePersistentUdpPortReservation 54 35 0001E790 DeleteProxyArpEntry 55 36 00023FE0 DeleteUnicastIpAddressEntry 56 37 00010420 DisableMediaSense 57 38 0001E7B0 EnableRouter 58 39 0001E810 FlushIpNetTable 59 3A 00025980 FlushIpNetTable2 60 3B 000263A0 FlushIpPathTable 61 3C 0000A320 FreeMibTable 62 3D 0001CDE0 GetAdapterIndex 63 3E 0001CE70 GetAdapterOrderMap 64 3F 000028D0 GetAdaptersAddresses 65 40 00001DA0 GetAdaptersInfo 66 41 00024000 GetAnycastIpAddressEntry 67 42 00024020 GetAnycastIpAddressTable 68 43 00009000 GetBestInterface 69 44 00008FF0 GetBestInterfaceEx 70 45 0001E890 GetBestRoute 71 46 00009500 GetBestRoute2 72 47 000069D0 GetCurrentThreadCompartmentId 73 48 00003BC0 GetCurrentThreadCompartmentScope 74 49 0000B2B0 GetExtendedTcpTable 75 4A 0000C1A0 GetExtendedUdpTable 76 4B 0001CF90 GetFriendlyIfIndex 77 4C 0001EA30 GetIcmpStatistics 78 4D 0000EF90 GetIcmpStatisticsEx 79 4E 00008EC0 GetIfEntry 80 4F 000042E0 GetIfEntry2 81 50 000024D0 GetIfStackTable 82 51 0001CFA0 GetIfTable 83 52 00003880 GetIfTable2 84 53 00001610 GetIfTable2Ex 85 54 0001D150 GetInterfaceInfo 86 55 00026930 GetInvertedIfStackTable 87 56 0001EB50 GetIpAddrTable 88 57 0001C4E0 GetIpErrorString 89 58 000251C0 GetIpForwardEntry2 90 59 0001ED50 GetIpForwardTable 91 5A 0000AAD0 GetIpForwardTable2 92 5B 0000A260 GetIpInterfaceEntry 93 5C 0000AAF0 GetIpInterfaceTable 94 5D 0000A800 GetIpNetEntry2 95 5E 0001F0B0 GetIpNetTable 96 5F 00025A60 GetIpNetTable2 97 60 00026940 GetIpNetworkConnectionBandwidthEstimates 98 61 00026490 GetIpPathEntry 99 62 00026680 GetIpPathTable 100 63 0001F2E0 GetIpStatistics 101 64 00003980 GetIpStatisticsEx 102 65 000231C0 GetJobCompartmentId 103 66 00024040 GetMulticastIpAddressEntry 104 67 00024060 GetMulticastIpAddressTable 105 68 00023220 GetNetworkInformation 106 69 000011F0 GetNetworkParams 107 6A 0000EF00 GetNumberOfInterfaces 108 6B 0001BC90 GetOwnerModuleFromPidAndInfo 109 6C 00021490 GetOwnerModuleFromTcp6Entry 110 6D 000214D0 GetOwnerModuleFromTcpEntry 111 6E 000223D0 GetOwnerModuleFromUdp6Entry 112 6F 00022410 GetOwnerModuleFromUdpEntry 113 70 0001C370 GetPerAdapterInfo 114 71 0000B8E0 GetPerTcp6ConnectionEStats 115 72 00021510 GetPerTcp6ConnectionStats 116 73 0000BB20 GetPerTcpConnectionEStats 117 74 000215D0 GetPerTcpConnectionStats 118 75 0001FC70 GetRTTAndHopCount 119 76 000038A0 GetSessionCompartmentId 120 77 00021670 GetTcp6Table 121 78 000218C0 GetTcp6Table2 122 79 00021E30 GetTcpStatistics 123 7A 0000F0D0 GetTcpStatisticsEx 124 7B 00021E40 GetTcpTable 125 7C 00021E60 GetTcpTable2 126 7D 00026F80 GetTeredoPort 127 7E 00022450 GetUdp6Table 128 7F 000228C0 GetUdpStatistics 129 80 0000F210 GetUdpStatisticsEx 130 81 000228D0 GetUdpTable 131 82 0001F2F0 GetUniDirectionalAdapterInfo 132 83 0000A510 GetUnicastIpAddressEntry 133 84 000064E0 GetUnicastIpAddressTable 134 85 00022B40 GetWPAOACSupportLevel 135 86 0000AE90 Icmp6CreateFile 136 87 00001A50 Icmp6ParseReplies 137 88 000017A0 Icmp6SendEcho2 138 89 00001120 IcmpCloseHandle 139 8A 0001FE90 IcmpCreateFile 140 8B 000200E0 IcmpParseReplies 141 8C 00020130 IcmpSendEcho 142 8D 00020190 IcmpSendEcho2 143 8E 00020200 IcmpSendEcho2Ex 144 8F 00023310 InitializeCompartmentEntry 145 90 0000EE70 InitializeIpForwardEntry 146 91 00026A40 InitializeIpInterfaceEntry 147 92 00024080 InitializeUnicastIpAddressEntry 148 93 00026BC0 InternalCleanupPersistentStore 149 94 000241F0 InternalCreateAnycastIpAddressEntry 150 95 0001D740 InternalCreateIpForwardEntry 151 96 000253B0 InternalCreateIpForwardEntry2 152 97 0001D760 InternalCreateIpNetEntry 153 98 00025B90 InternalCreateIpNetEntry2 154 99 00024210 InternalCreateUnicastIpAddressEntry 155 9A 00024230 InternalDeleteAnycastIpAddressEntry 156 9B 0001D780 InternalDeleteIpForwardEntry 157 9C 000253D0 InternalDeleteIpForwardEntry2 158 9D 0001D790 InternalDeleteIpNetEntry 159 9E 00025BB0 InternalDeleteIpNetEntry2 160 9F 00024250 InternalDeleteUnicastIpAddressEntry 161 A0 00024270 InternalFindInterfaceByAddress 162 A1 00024360 InternalGetAnycastIpAddressEntry 163 A2 00024380 InternalGetAnycastIpAddressTable 164 A3 0001D7A0 InternalGetBoundTcp6EndpointTable 165 A4 0001D7E0 InternalGetBoundTcpEndpointTable 166 A5 00008830 InternalGetForwardIpTable2 167 A6 0000A900 InternalGetIPPhysicalInterfaceForDestination 168 A7 00004B90 InternalGetIfEntry2 169 A8 0001D970 InternalGetIfTable 170 A9 00026C70 InternalGetIfTable2 171 AA 0001D9B0 InternalGetIpAddrTable 172 AB 000253F0 InternalGetIpForwardEntry2 173 AC 0001D9F0 InternalGetIpForwardTable 174 AD 0000A0B0 InternalGetIpInterfaceEntry 175 AE 00009AE0 InternalGetIpInterfaceTable 176 AF 0000A600 InternalGetIpNetEntry2 177 B0 0001DA30 InternalGetIpNetTable 178 B1 00025BD0 InternalGetIpNetTable2 179 B2 000243A0 InternalGetMulticastIpAddressEntry 180 B3 000243C0 InternalGetMulticastIpAddressTable 181 B4 0000C5A0 InternalGetRtcSlotInformation 182 B5 0001DB50 InternalGetTcp6Table2 183 B6 0001DB90 InternalGetTcp6TableWithOwnerModule 184 B7 0001DBD0 InternalGetTcp6TableWithOwnerPid 185 B8 0001DC10 InternalGetTcpTable 186 B9 0001DC50 InternalGetTcpTable2 187 BA 0001DC90 InternalGetTcpTableEx 188 BB 0001DCD0 InternalGetTcpTableWithOwnerModule 189 BC 0001DD10 InternalGetTcpTableWithOwnerPid 190 BD 00003130 InternalGetTunnelPhysicalAdapter 191 BE 0001DD50 InternalGetUdp6TableWithOwnerModule 192 BF 0001DD90 InternalGetUdp6TableWithOwnerPid 193 C0 0001DDD0 InternalGetUdpTable 194 C1 0001DE10 InternalGetUdpTableEx 195 C2 0001DE50 InternalGetUdpTableWithOwnerModule 196 C3 0001DE90 InternalGetUdpTableWithOwnerPid 197 C4 000243E0 InternalGetUnicastIpAddressEntry 198 C5 000243F0 InternalGetUnicastIpAddressTable 199 C6 0001DED0 InternalIcmpCreateFileEx 200 C7 0001DF00 InternalSetIfEntry 201 C8 0001DF10 InternalSetIpForwardEntry 202 C9 00025670 InternalSetIpForwardEntry2 203 CA 00026C80 InternalSetIpInterfaceEntry 204 CB 0001DF30 InternalSetIpNetEntry 205 CC 00025E90 InternalSetIpNetEntry2 206 CD 0001DF50 InternalSetIpStats 207 CE 0001DF70 InternalSetTcpEntry 208 CF 00027000 InternalSetTeredoPort 209 D0 000246D0 InternalSetUnicastIpAddressEntry 210 D1 0001F410 IpReleaseAddress 211 D2 0001F460 IpRenewAddress 212 D3 00020BD0 LookupPersistentTcpPortReservation 213 D4 00020C10 LookupPersistentUdpPortReservation 214 D5 0001F890 NTPTimeToNTFileTime 215 D6 0001F920 NTTimeToNTPTime 216 D7 0001D360 NhGetGuidFromInterfaceName 217 D8 0001D390 NhGetInterfaceDescriptionFromGuid 218 D9 0000C430 NhGetInterfaceNameFromDeviceGuid 219 DA 0000C430 NhGetInterfaceNameFromGuid 220 DB 0001C5B0 NhpAllocateAndGetInterfaceInfoFromStack 221 DC 0000AE60 NotifyAddrChange 222 DD 000233D0 NotifyCompartmentChange 223 DE 00009870 NotifyIpInterfaceChange 224 DF 0001F4B0 NotifyRouteChange 225 E0 0000EB30 NotifyRouteChange2 226 E1 00024F40 NotifyStableUnicastIpAddressTable 227 E2 000270C0 NotifyTeredoPortChange 228 E3 00009AB0 NotifyUnicastIpAddressChange 229 E4 00023480 OpenCompartment 230 E5 0000F300 ParseNetworkString 231 E6 0001FC60 PfAddFiltersToInterface 232 E7 0001FC60 PfAddGlobalFilterToInterface 233 E8 0001FC60 PfBindInterfaceToIPAddress 234 E9 0001FC60 PfBindInterfaceToIndex 235 EA 0001FC60 PfCreateInterface 236 EB 0001FC60 PfDeleteInterface 237 EC 0001FC60 PfDeleteLog 238 ED 0001FC60 PfGetInterfaceStatistics 239 EE 0001FC60 PfMakeLog 240 EF 0001FC60 PfRebindFilters 241 F0 0001FC60 PfRemoveFilterHandles 242 F1 0001FC60 PfRemoveFiltersFromInterface 243 F2 0001FC60 PfRemoveGlobalFilterFromInterface 244 F3 0001FC60 PfSetLogBuffer 245 F4 0001FC60 PfTestPacket 246 F5 0001FC60 PfUnBindInterface 247 F6 0000ED00 ResolveIpNetEntry2 248 F7 0001F4E0 ResolveNeighbor 249 F8 00010420 RestoreMediaSense 250 F9 0001F4F0 SendARP 251 FA 0001DF80 SetAdapterIpAddress 252 FB 000235E0 SetCurrentThreadCompartmentId 253 FC 00009D60 SetCurrentThreadCompartmentScope 254 FD 0001D4B0 SetIfEntry 255 FE 0001F5D0 SetIpForwardEntry 256 FF 00025920 SetIpForwardEntry2 257 100 00026F60 SetIpInterfaceEntry 258 101 0001F5E0 SetIpNetEntry 259 102 00026060 SetIpNetEntry2 260 103 0001F5F0 SetIpStatistics 261 104 0001F600 SetIpStatisticsEx 262 105 0001F6E0 SetIpTTL 263 106 00023630 SetJobCompartmentId 264 107 00023690 SetNetworkInformation 265 108 0000B0F0 SetPerTcp6ConnectionEStats 266 109 000221B0 SetPerTcp6ConnectionStats 267 10A 0000B1E0 SetPerTcpConnectionEStats 268 10B 00022250 SetPerTcpConnectionStats 269 10C 00023770 SetSessionCompartmentId 270 10D 000222E0 SetTcpEntry 271 10E 00025160 SetUnicastIpAddressEntry 272 10F 0001F810 UnenableRouter 273 110 00020690 do_echo_rep 274 111 00020860 do_echo_req 275 112 00023EE0 if_indextoname 276 113 00023F30 if_nametoindex 277 114 000209B0 register_icmp Summary 1000 .data 1000 .didat 2000 .pdata A000 .rdata 1000 .reloc 1000 .rsrc 27000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file kernel32.dll File Type: DLL Section contains the following exports for KERNEL32.dll 00000000 characteristics 64099EB2 time date stamp Thu Mar 9 00:54:10 2023 0.00 version 1 ordinal base 1596 number of functions 1596 number of names ordinal hint RVA name 1 0 AcquireSRWLockExclusive (forwarded to NTDLL.RtlAcquireSRWLockExclusive) 2 1 AcquireSRWLockShared (forwarded to NTDLL.RtlAcquireSRWLockShared) 3 2 00021980 ActivateActCtx 4 3 00019510 ActivateActCtxWorker 5 4 00024640 AddAtomA 6 5 00014870 AddAtomW 7 6 000640D0 AddConsoleAliasA 8 7 00064230 AddConsoleAliasW 9 8 AddDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.AddDllDirectory) 10 9 00043200 AddIntegrityLabelToBoundaryDescriptor 11 A 00039410 AddLocalAlternateComputerNameA 12 B 00039470 AddLocalAlternateComputerNameW 13 C 000243C0 AddRefActCtx 14 D 0001DD10 AddRefActCtxWorker 15 E 00041F00 AddResourceAttributeAce 16 F 00020D10 AddSIDToBoundaryDescriptor 17 10 00041F10 AddScopedPolicyIDAce 18 11 0003F0C0 AddSecureMemoryCacheCallback 19 12 AddVectoredContinueHandler (forwarded to NTDLL.RtlAddVectoredContinueHandler) 20 13 AddVectoredExceptionHandler (forwarded to NTDLL.RtlAddVectoredExceptionHandler) 21 14 00018010 AdjustCalendarDate 22 15 00026A20 AllocConsole 23 16 00041F30 AllocateUserPhysicalPages 24 17 00041F20 AllocateUserPhysicalPagesNuma 25 18 AppXGetOSMaxVersionTested (forwarded to kernelbase.AppXGetOSMaxVersionTested) 26 19 0004E830 ApplicationRecoveryFinished 27 1A 0004E840 ApplicationRecoveryInProgress 28 1B 00020C00 AreFileApisANSI 29 1C 00016860 AssignProcessToJobObject 30 1D 00026B00 AttachConsole 31 1E 00037110 BackupRead 32 1F 00037FD0 BackupSeek 33 20 000382A0 BackupWrite 34 21 00041FA0 BaseCheckAppcompatCache 35 22 00041F40 BaseCheckAppcompatCacheEx 36 23 00023920 BaseCheckAppcompatCacheExWorker 37 24 00023920 BaseCheckAppcompatCacheWorker 38 25 00019F70 BaseCheckElevation 39 26 00041FB0 BaseCleanupAppcompatCacheSupport 40 27 00024D30 BaseCleanupAppcompatCacheSupportWorker 41 28 000487B0 BaseDestroyVDMEnvironment 42 29 00012240 BaseDllReadWriteIniFile 43 2A 00041FC0 BaseDumpAppcompatCache 44 2B 000271A0 BaseDumpAppcompatCacheWorker 45 2C 0001F160 BaseElevationPostProcessing 46 2D 00041FD0 BaseFlushAppcompatCache 47 2E 0006AD20 BaseFlushAppcompatCacheWorker 48 2F 0001DC40 BaseFormatObjectAttributes 49 30 000627D0 BaseFormatTimeOut 50 31 00023680 BaseFreeAppCompatDataForProcessWorker 51 32 0001FDB0 BaseGenerateAppCompatData 52 33 00041FE0 BaseGetNamedObjectDirectory 53 34 00041FF0 BaseInitAppcompatCacheSupport 54 35 00024D30 BaseInitAppcompatCacheSupportWorker 55 36 00023920 BaseIsAppcompatInfrastructureDisabled 56 37 00023920 BaseIsAppcompatInfrastructureDisabledWorker 57 38 000232D0 BaseIsDosApplication 58 39 0006ADB0 BaseQueryModuleData 59 3A 00020D50 BaseReadAppCompatDataForProcessWorker 60 3B 00015000 BaseSetLastNTError 61 3C 000110E0 BaseThreadInitThunk 62 3D 00042000 BaseUpdateAppcompatCache 63 3E 0006AD80 BaseUpdateAppcompatCacheWorker 64 3F 00048AC0 BaseUpdateVDMEntry 65 40 00062860 BaseVerifyUnicodeString 66 41 0003C960 BaseWriteErrorElevationRequiredEvent 67 42 00016B60 Basep8BitStringToDynamicUnicodeString 68 43 000628C0 BasepAllocateActivationContextActivationBlock 69 44 00062800 BasepAnsiStringToDynamicUnicodeString 70 45 0001B930 BasepAppContainerEnvironmentExtension 71 46 00023110 BasepAppXExtension 72 47 0001A7A0 BasepCheckAppCompat 73 48 0001F200 BasepCheckWebBladeHashes 74 49 0001B430 BasepCheckWinSaferRestrictions 75 4A 0000CFE0 BasepConstructSxsCreateProcessMessage 76 4B 0001D410 BasepCopyEncryption 77 4C 00062A30 BasepFreeActivationContextActivationBlock 78 4D 0001D810 BasepFreeAppCompatData 79 4E 0000B880 BasepGetAppCompatData 80 4F 0001C950 BasepGetComputerNameFromNtPath 81 50 0001A880 BasepGetExeArchType 82 51 0001D8A0 BasepIsProcessAllowed 83 52 00016450 BasepMapModuleHandle 84 53 00011630 BasepNotifyLoadStringResource 85 54 000239F0 BasepPostSuccessAppXExtension 86 55 00023150 BasepProcessInvalidImage 87 56 0000C2D0 BasepQueryAppCompat 88 57 000239E0 BasepReleaseAppXContext 89 58 0000A560 BasepReleaseSxsCreateProcessUtilityStruct 90 59 000219B0 BasepReportFault 91 5A 00022340 BasepSetFileEncryptionCompression 92 5B 00039210 Beep 93 5C 000544B0 BeginUpdateResourceA 94 5D 00054510 BeginUpdateResourceW 95 5E 00025A70 BindIoCompletionCallback 96 5F 0004C260 BuildCommDCBA 97 60 0004C290 BuildCommDCBAndTimeoutsA 98 61 0004C2C0 BuildCommDCBAndTimeoutsW 99 62 0004C330 BuildCommDCBW 100 63 0003F970 CallNamedPipeA 101 64 0003FA00 CallNamedPipeW 102 65 00023A00 CallbackMayRunLong 103 66 00026950 CalloutOnFiberStack 104 67 00040B30 CancelDeviceWakeupRequest 105 68 00023AC0 CancelIo 106 69 00022FA0 CancelIoEx 107 6A 00001420 CancelSynchronousIo 108 6B CancelThreadpoolIo (forwarded to NTDLL.TpCancelAsyncIoOperation) 109 6C 0004EAC0 CancelTimerQueueTimer 110 6D 00026120 CancelWaitableTimer 111 6E CeipIsOptedIn (forwarded to kernelbase.CeipIsOptedIn) 112 6F 00023AD0 ChangeTimerQueueTimer 113 70 0003DE80 CheckAllowDecryptedRemoteDestinationPolicy 114 71 00019E40 CheckElevation 115 72 0000C5F0 CheckElevationEnabled 116 73 00043230 CheckForReadOnlyResource 117 74 00023C30 CheckForReadOnlyResourceFilter 118 75 00040520 CheckNameLegalDOS8Dot3A 119 76 000405C0 CheckNameLegalDOS8Dot3W 120 77 00023CD0 CheckRemoteDebuggerPresent 121 78 00042010 CheckTokenCapability 122 79 00042020 CheckTokenMembershipEx 123 7A 00026800 ClearCommBreak 124 7B 00026810 ClearCommError 125 7C 00064B00 CloseConsoleHandle 126 7D 000260E0 CloseHandle 127 7E ClosePackageInfo (forwarded to kernelbase.ClosePackageInfo) 128 7F 00024A20 ClosePrivateNamespace 129 80 00024D30 CloseProfileUserMapping 130 81 CloseState (forwarded to kernelbase.CloseState) 131 82 CloseThreadpool (forwarded to NTDLL.TpReleasePool) 132 83 CloseThreadpoolCleanupGroup (forwarded to NTDLL.TpReleaseCleanupGroup) 133 84 CloseThreadpoolCleanupGroupMembers (forwarded to NTDLL.TpReleaseCleanupGroupMembers) 134 85 CloseThreadpoolIo (forwarded to NTDLL.TpReleaseIoCompletion) 135 86 CloseThreadpoolTimer (forwarded to NTDLL.TpReleaseTimer) 136 87 CloseThreadpoolWait (forwarded to NTDLL.TpReleaseWait) 137 88 CloseThreadpoolWork (forwarded to NTDLL.TpReleaseWork) 138 89 00022270 CmdBatNotification 139 8A 00045F60 CommConfigDialogA 140 8B 00045FF0 CommConfigDialogW 141 8C 00054DC0 CompareCalendarDates 142 8D 000262F0 CompareFileTime 143 8E 000217C0 CompareStringA 144 8F 00016CA0 CompareStringEx 145 90 0001C380 CompareStringOrdinal 146 91 0001E160 CompareStringW 147 92 00023C20 ConnectNamedPipe 148 93 00064BD0 ConsoleMenuControl 149 94 00042030 ContinueDebugEvent 150 95 00054E70 ConvertCalDateTimeToSystemTime 151 96 00023B90 ConvertDefaultLocale 152 97 00026960 ConvertFiberToThread 153 98 00054F60 ConvertNLSDayOfWeekToWin32DayOfWeek 154 99 000182A0 ConvertSystemTimeToCalDateTime 155 9A 00026970 ConvertThreadToFiber 156 9B 00026980 ConvertThreadToFiberEx 157 9C 00042040 CopyContext 158 9D 00042050 CopyFile2 159 9E 0003DF50 CopyFileA 160 9F 0003DFE0 CopyFileExA 161 A0 000230F0 CopyFileExW 162 A1 0003E090 CopyFileTransactedA 163 A2 00025910 CopyFileTransactedW 164 A3 00026940 CopyFileW 165 A4 0003AA80 CopyLZFile 166 A5 00023FD0 CreateActCtxA 167 A6 000239D0 CreateActCtxW 168 A7 00008F00 CreateActCtxWWorker 169 A8 000433A0 CreateBoundaryDescriptorA 170 A9 00020D00 CreateBoundaryDescriptorW 171 AA 00026B10 CreateConsoleScreenBuffer 172 AB 00026300 CreateDirectoryA 173 AC 0003AE80 CreateDirectoryExA 174 AD 00042060 CreateDirectoryExW 175 AE 0003AF00 CreateDirectoryTransactedA 176 AF 0003AFA0 CreateDirectoryTransactedW 177 B0 00026310 CreateDirectoryW 178 B1 00026130 CreateEventA 179 B2 00026140 CreateEventExA 180 B3 00026150 CreateEventExW 181 B4 00026160 CreateEventW 182 B5 00026990 CreateFiber 183 B6 000269A0 CreateFiberEx 184 B7 00026320 CreateFile2 185 B8 00026330 CreateFileA 186 B9 00016890 CreateFileMappingA 187 BA CreateFileMappingFromApp (forwarded to api-ms-win-core-memory-l1-1-1.CreateFileMappingFromApp) 188 BB 0003D000 CreateFileMappingNumaA 189 BC 00042070 CreateFileMappingNumaW 190 BD 0001E190 CreateFileMappingW 191 BE 0003E380 CreateFileTransactedA 192 BF 0003E440 CreateFileTransactedW 193 C0 00026340 CreateFileW 194 C1 00042080 CreateHardLinkA 195 C2 0004DF80 CreateHardLinkTransactedA 196 C3 0004E020 CreateHardLinkTransactedW 197 C4 00024CA0 CreateHardLinkW 198 C5 0001F1F0 CreateIoCompletionPort 199 C6 0004DA20 CreateJobObjectA 200 C7 0001DA20 CreateJobObjectW 201 C8 0004DA90 CreateJobSet 202 C9 00016950 CreateMailslotA 203 CA 000169C0 CreateMailslotW 204 CB 000230D0 CreateMemoryResourceNotification 205 CC 00026170 CreateMutexA 206 CD 00026180 CreateMutexExA 207 CE 00026190 CreateMutexExW 208 CF 000261A0 CreateMutexW 209 D0 0003FB90 CreateNamedPipeA 210 D1 00023890 CreateNamedPipeW 211 D2 00023100 CreatePipe 212 D3 00043400 CreatePrivateNamespaceA 213 D4 00023420 CreatePrivateNamespaceW 214 D5 0001DD60 CreateProcessA 215 D6 00042090 CreateProcessAsUserA 216 D7 000207C0 CreateProcessAsUserW 217 D8 00042100 CreateProcessInternalA 218 D9 00042180 CreateProcessInternalW 219 DA 0001E6D0 CreateProcessW 220 DB 00042200 CreateRemoteThread 221 DC CreateRemoteThreadEx (forwarded to api-ms-win-core-processthreads-l1-1-0.CreateRemoteThreadEx) 222 DD 00016BC0 CreateSemaphoreA 223 DE 00016BF0 CreateSemaphoreExA 224 DF 000261B0 CreateSemaphoreExW 225 E0 000261C0 CreateSemaphoreW 226 E1 0003D280 CreateSymbolicLinkA 227 E2 0003D320 CreateSymbolicLinkTransactedA 228 E3 0003D3D0 CreateSymbolicLinkTransactedW 229 E4 00042250 CreateSymbolicLinkW 230 E5 0004D1B0 CreateTapePartition 231 E6 0001C4A0 CreateThread 232 E7 00023930 CreateThreadpool 233 E8 00023A80 CreateThreadpoolCleanupGroup 234 E9 00024850 CreateThreadpoolIo 235 EA 0001F8C0 CreateThreadpoolTimer 236 EB 000233D0 CreateThreadpoolWait 237 EC 00023010 CreateThreadpoolWork 238 ED 00023B70 CreateTimerQueue 239 EE 0001DD20 CreateTimerQueueTimer 240 EF 00027400 CreateToolhelp32Snapshot 241 F0 0004BF30 CreateUmsCompletionList 242 F1 0004BF60 CreateUmsThreadContext 243 F2 00024440 CreateWaitableTimerA 244 F3 00024470 CreateWaitableTimerExA 245 F4 000261D0 CreateWaitableTimerExW 246 F5 00023720 CreateWaitableTimerW 247 F6 CtrlRoutine (forwarded to kernelbase.CtrlRoutine) 248 F7 00021990 DeactivateActCtx 249 F8 00019560 DeactivateActCtxWorker 250 F9 00042270 DebugActiveProcess 251 FA 00042260 DebugActiveProcessStop 252 FB 00042280 DebugBreak 253 FC 0003AD50 DebugBreakProcess 254 FD 0003AD80 DebugSetProcessKillOnExit 255 FE DecodePointer (forwarded to NTDLL.RtlDecodePointer) 256 FF DecodeSystemPointer (forwarded to NTDLL.RtlDecodeSystemPointer) 257 100 0003C640 DefineDosDeviceA 258 101 00026350 DefineDosDeviceW 259 102 00042290 DelayLoadFailureHook 260 103 000147E0 DeleteAtom 261 104 00020CF0 DeleteBoundaryDescriptor 262 105 DeleteCriticalSection (forwarded to NTDLL.RtlDeleteCriticalSection) 263 106 000269B0 DeleteFiber 264 107 00026360 DeleteFileA 265 108 0003D480 DeleteFileTransactedA 266 109 000259C0 DeleteFileTransactedW 267 10A 00026370 DeleteFileW 268 10B DeleteProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.DeleteProcThreadAttributeList) 269 10C 000422A0 DeleteSynchronizationBarrier 270 10D 00023AF0 DeleteTimerQueue 271 10E 00023BD0 DeleteTimerQueueEx 272 10F 0001F5E0 DeleteTimerQueueTimer 273 110 0004BF90 DeleteUmsCompletionList 274 111 0004BFC0 DeleteUmsThreadContext 275 112 0004A440 DeleteVolumeMountPointA 276 113 00062A80 DeleteVolumeMountPointW 277 114 0004BFF0 DequeueUmsCompletionListItems 278 115 00017060 DeviceIoControl 279 116 00022D40 DisableThreadLibraryCalls 280 117 0004EB40 DisableThreadProfiling 281 118 DisassociateCurrentThreadFromCallback (forwarded to NTDLL.TpDisassociateCallback) 282 119 DiscardVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.DiscardVirtualMemory) 283 11A 000243F0 DisconnectNamedPipe 284 11B 0003A190 DnsHostnameToComputerNameA 285 11C 000422B0 DnsHostnameToComputerNameExW 286 11D 0001DF10 DnsHostnameToComputerNameW 287 11E 00014890 DosDateTimeToFileTime 288 11F 00041BB0 DosPathToSessionPathA 289 120 00041D80 DosPathToSessionPathW 290 121 00064B10 DuplicateConsoleHandle 291 122 0003E5C0 DuplicateEncryptionInfoFileExt 292 123 000260F0 DuplicateHandle 293 124 0004EB70 EnableThreadProfiling 294 125 EncodePointer (forwarded to NTDLL.RtlEncodePointer) 295 126 EncodeSystemPointer (forwarded to NTDLL.RtlEncodeSystemPointer) 296 127 00054720 EndUpdateResourceA 297 128 00054730 EndUpdateResourceW 298 129 EnterCriticalSection (forwarded to NTDLL.RtlEnterCriticalSection) 299 12A 000422C0 EnterSynchronizationBarrier 300 12B 0004C040 EnterUmsSchedulingMode 301 12C 000559D0 EnumCalendarInfoA 302 12D 00055A60 EnumCalendarInfoExA 303 12E 00021400 EnumCalendarInfoExEx 304 12F 000422D0 EnumCalendarInfoExW 305 130 000422E0 EnumCalendarInfoW 306 131 00055AF0 EnumDateFormatsA 307 132 00055B50 EnumDateFormatsExA 308 133 000422F0 EnumDateFormatsExEx 309 134 00042300 EnumDateFormatsExW 310 135 00042310 EnumDateFormatsW 311 136 00055BB0 EnumLanguageGroupLocalesA 312 137 00042320 EnumLanguageGroupLocalesW 313 138 0003F5F0 EnumResourceLanguagesA 314 139 00042330 EnumResourceLanguagesExA 315 13A 00042350 EnumResourceLanguagesExW 316 13B 00024D00 EnumResourceLanguagesW 317 13C 0003F620 EnumResourceNamesA 318 13D 00042370 EnumResourceNamesExA 319 13E 00042390 EnumResourceNamesExW 320 13F 000242A0 EnumResourceNamesW 321 140 0003F650 EnumResourceTypesA 322 141 000423B0 EnumResourceTypesExA 323 142 000423D0 EnumResourceTypesExW 324 143 0003F670 EnumResourceTypesW 325 144 00055BD0 EnumSystemCodePagesA 326 145 000423F0 EnumSystemCodePagesW 327 146 0003F0F0 EnumSystemFirmwareTables 328 147 0005EC90 EnumSystemGeoID 329 148 00055BE0 EnumSystemLanguageGroupsA 330 149 00024D90 EnumSystemLanguageGroupsW 331 14A 00042400 EnumSystemLocalesA 332 14B 00042410 EnumSystemLocalesEx 333 14C 00042420 EnumSystemLocalesW 334 14D 00055BF0 EnumTimeFormatsA 335 14E 00023A60 EnumTimeFormatsEx 336 14F 00042430 EnumTimeFormatsW 337 150 00055C60 EnumUILanguagesA 338 151 00024D60 EnumUILanguagesW 339 152 0003A270 EnumerateLocalComputerNamesA 340 153 0003A380 EnumerateLocalComputerNamesW 341 154 0004D210 EraseTape 342 155 00026820 EscapeCommFunction 343 156 0004C070 ExecuteUmsThread 344 157 0001F700 ExitProcess 345 158 ExitThread (forwarded to NTDLL.RtlExitUserThread) 346 159 00048BC0 ExitVDM 347 15A 00025B70 ExpandEnvironmentStringsA 348 15B 0001EC10 ExpandEnvironmentStringsW 349 15C 000642A0 ExpungeConsoleCommandHistoryA 350 15D 00064320 ExpungeConsoleCommandHistoryW 351 15E 00042440 FatalAppExitA 352 15F 00042450 FatalAppExitW 353 160 0001F700 FatalExit 354 161 00014DC0 FileTimeToDosDateTime 355 162 00026380 FileTimeToLocalFileTime 356 163 000267C0 FileTimeToSystemTime 357 164 00026B20 FillConsoleOutputAttribute 358 165 00026B30 FillConsoleOutputCharacterA 359 166 00026B40 FillConsoleOutputCharacterW 360 167 0001C4F0 FindActCtxSectionGuid 361 168 00014E80 FindActCtxSectionGuidWorker 362 169 0004E6F0 FindActCtxSectionStringA 363 16A 000230A0 FindActCtxSectionStringW 364 16B 00014670 FindActCtxSectionStringWWorker 365 16C 000147C0 FindAtomA 366 16D 00014C40 FindAtomW 367 16E 00026390 FindClose 368 16F 000263A0 FindCloseChangeNotification 369 170 000263B0 FindFirstChangeNotificationA 370 171 000263C0 FindFirstChangeNotificationW 371 172 000263D0 FindFirstFileA 372 173 000263E0 FindFirstFileExA 373 174 000263F0 FindFirstFileExW 374 175 0003C9B0 FindFirstFileNameTransactedW 375 176 00026400 FindFirstFileNameW 376 177 0003CA70 FindFirstFileTransactedA 377 178 0003CB40 FindFirstFileTransactedW 378 179 00026410 FindFirstFileW 379 17A 0003CC10 FindFirstStreamTransactedW 380 17B FindFirstStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindFirstStreamW) 381 17C 0004A480 FindFirstVolumeA 382 17D 0004A600 FindFirstVolumeMountPointA 383 17E 0004A7D0 FindFirstVolumeMountPointW 384 17F 0001E1E0 FindFirstVolumeW 385 180 00042460 FindNLSString 386 181 00018AB0 FindNLSStringEx 387 182 00026420 FindNextChangeNotification 388 183 00026430 FindNextFileA 389 184 00026440 FindNextFileNameW 390 185 00026450 FindNextFileW 391 186 FindNextStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindNextStreamW) 392 187 0004A9F0 FindNextVolumeA 393 188 0004AB60 FindNextVolumeMountPointA 394 189 0004B1A0 FindNextVolumeMountPointW 395 18A 0001E380 FindNextVolumeW 396 18B FindPackagesByPackageFamily (forwarded to kernelbase.FindPackagesByPackageFamily) 397 18C 00016270 FindResourceA 398 18D 00016290 FindResourceExA 399 18E 0001EEB0 FindResourceExW 400 18F 00020CE0 FindResourceW 401 190 00042470 FindStringOrdinal 402 191 000236C0 FindVolumeClose 403 192 0004B1B0 FindVolumeMountPointClose 404 193 00020C40 FlsAlloc 405 194 00022F60 FlsFree 406 195 00017050 FlsGetValue 407 196 0001E180 FlsSetValue 408 197 00026B50 FlushConsoleInputBuffer 409 198 00026460 FlushFileBuffers 410 199 0001C420 FlushInstructionCache 411 19A FlushProcessWriteBuffers (forwarded to NTDLL.NtFlushProcessWriteBuffers) 412 19B 00023AE0 FlushViewOfFile 413 19C 00055C70 FoldStringA 414 19D 00042480 FoldStringW 415 19E FormatApplicationUserModelId (forwarded to kernelbase.FormatApplicationUserModelId) 416 19F 00024340 FormatMessageA 417 1A0 0001F260 FormatMessageW 418 1A1 00026B60 FreeConsole 419 1A2 00021660 FreeEnvironmentStringsA 420 1A3 0001FD80 FreeEnvironmentStringsW 421 1A4 0001F380 FreeLibrary 422 1A5 00021930 FreeLibraryAndExitThread 423 1A6 FreeLibraryWhenCallbackReturns (forwarded to NTDLL.TpCallbackUnloadDllOnCompletion) 424 1A7 0004DAC0 FreeMemoryJobObject 425 1A8 00024A10 FreeResource 426 1A9 00042490 FreeUserPhysicalPages 427 1AA 00026B70 GenerateConsoleCtrlEvent 428 1AB 00019760 GetACP 429 1AC 0001F720 GetActiveProcessorCount 430 1AD 000013B0 GetActiveProcessorGroupCount 431 1AE 000424A0 GetAppContainerAce 432 1AF 00022F70 GetAppContainerNamedObjectPath 433 1B0 000424B0 GetApplicationRecoveryCallback 434 1B1 00020240 GetApplicationRecoveryCallbackWorker 435 1B2 000424C0 GetApplicationRestartSettings 436 1B3 000200F0 GetApplicationRestartSettingsWorker 437 1B4 GetApplicationUserModelId (forwarded to kernelbase.GetApplicationUserModelId) 438 1B5 0003B160 GetAtomNameA 439 1B6 00014340 GetAtomNameW 440 1B7 00048C50 GetBinaryType 441 1B8 00048C50 GetBinaryTypeA 442 1B9 00048CA0 GetBinaryTypeW 443 1BA 0001DE70 GetCPInfo 444 1BB 00055EE0 GetCPInfoExA 445 1BC 000424D0 GetCPInfoExW 446 1BD 000424E0 GetCachedSigningLevel 447 1BE 00054F90 GetCalendarDateFormat 448 1BF 000183E0 GetCalendarDateFormatEx 449 1C0 000181C0 GetCalendarDaysInMonth 450 1C1 00055240 GetCalendarDifferenceInDays 451 1C2 00055FB0 GetCalendarInfoA 452 1C3 000267D0 GetCalendarInfoEx 453 1C4 000267E0 GetCalendarInfoW 454 1C5 00055380 GetCalendarMonthsInYear 455 1C6 00017F50 GetCalendarSupportedDateRange 456 1C7 00055450 GetCalendarWeekNumber 457 1C8 0004E790 GetComPlusPackageInstallStatus 458 1C9 00026830 GetCommConfig 459 1CA 00026840 GetCommMask 460 1CB 00026850 GetCommModemStatus 461 1CC 00026860 GetCommProperties 462 1CD 00026870 GetCommState 463 1CE 00026880 GetCommTimeouts 464 1CF 00020AB0 GetCommandLineA 465 1D0 00020AC0 GetCommandLineW 466 1D1 000424F0 GetCompressedFileSizeA 467 1D2 0003D4D0 GetCompressedFileSizeTransactedA 468 1D3 0003D530 GetCompressedFileSizeTransactedW 469 1D4 00023A40 GetCompressedFileSizeW 470 1D5 0001CAD0 GetComputerNameA 471 1D6 00042500 GetComputerNameExA 472 1D7 000234D0 GetComputerNameExW 473 1D8 0001CC40 GetComputerNameW 474 1D9 00064330 GetConsoleAliasA 475 1DA 00064370 GetConsoleAliasExesA 476 1DB 00064400 GetConsoleAliasExesLengthA 477 1DC 00064460 GetConsoleAliasExesLengthW 478 1DD 00064470 GetConsoleAliasExesW 479 1DE 00064570 GetConsoleAliasW 480 1DF 000645C0 GetConsoleAliasesA 481 1E0 00064670 GetConsoleAliasesLengthA 482 1E1 00064710 GetConsoleAliasesLengthW 483 1E2 00064720 GetConsoleAliasesW 484 1E3 00026A30 GetConsoleCP 485 1E4 000650F0 GetConsoleCharType 486 1E5 00064730 GetConsoleCommandHistoryA 487 1E6 000647F0 GetConsoleCommandHistoryLengthA 488 1E7 00064890 GetConsoleCommandHistoryLengthW 489 1E8 000648A0 GetConsoleCommandHistoryW 490 1E9 00026B80 GetConsoleCursorInfo 491 1EA 00065150 GetConsoleCursorMode 492 1EB 00064C30 GetConsoleDisplayMode 493 1EC 00065440 GetConsoleFontInfo 494 1ED 000654E0 GetConsoleFontSize 495 1EE 00064C80 GetConsoleHardwareState 496 1EF 00065530 GetConsoleHistoryInfo 497 1F0 GetConsoleInputExeNameA (forwarded to kernelbase.GetConsoleInputExeNameA) 498 1F1 GetConsoleInputExeNameW (forwarded to kernelbase.GetConsoleInputExeNameW) 499 1F2 00064B60 GetConsoleInputWaitHandle 500 1F3 000655B0 GetConsoleKeyboardLayoutNameA 501 1F4 000655D0 GetConsoleKeyboardLayoutNameW 502 1F5 00026A40 GetConsoleMode 503 1F6 000651C0 GetConsoleNlsMode 504 1F7 000648B0 GetConsoleOriginalTitleA 505 1F8 000648D0 GetConsoleOriginalTitleW 506 1F9 00026A50 GetConsoleOutputCP 507 1FA 00065680 GetConsoleProcessList 508 1FB 00026B90 GetConsoleScreenBufferInfo 509 1FC 00026BA0 GetConsoleScreenBufferInfoEx 510 1FD 00065710 GetConsoleSelectionInfo 511 1FE 000648F0 GetConsoleTitleA 512 1FF 00026BB0 GetConsoleTitleW 513 200 00021110 GetConsoleWindow 514 201 000561E0 GetCurrencyFormatA 515 202 00042510 GetCurrencyFormatEx 516 203 00042520 GetCurrencyFormatW 517 204 000242D0 GetCurrentActCtx 518 205 0001B180 GetCurrentActCtxWorker 519 206 GetCurrentApplicationUserModelId (forwarded to kernelbase.GetCurrentApplicationUserModelId) 520 207 00065770 GetCurrentConsoleFont 521 208 00021090 GetCurrentConsoleFontEx 522 209 00023980 GetCurrentDirectoryA 523 20A 00021800 GetCurrentDirectoryW 524 20B GetCurrentPackageFamilyName (forwarded to kernelbase.GetCurrentPackageFamilyName) 525 20C GetCurrentPackageFullName (forwarded to kernelbase.GetCurrentPackageFullName) 526 20D GetCurrentPackageId (forwarded to kernelbase.GetCurrentPackageId) 527 20E GetCurrentPackageInfo (forwarded to kernelbase.GetCurrentPackageInfo) 528 20F GetCurrentPackagePath (forwarded to kernelbase.GetCurrentPackagePath) 529 210 00018B10 GetCurrentProcess 530 211 00016D00 GetCurrentProcessId 531 212 GetCurrentProcessorNumber (forwarded to NTDLL.RtlGetCurrentProcessorNumber) 532 213 GetCurrentProcessorNumberEx (forwarded to NTDLL.RtlGetCurrentProcessorNumberEx) 533 214 00017100 GetCurrentThread 534 215 00016CC0 GetCurrentThreadId 535 216 GetCurrentThreadStackLimits (forwarded to api-ms-win-core-processthreads-l1-1-0.GetCurrentThreadStackLimits) 536 217 0004C0A0 GetCurrentUmsThread 537 218 00024630 GetDateFormatA 538 219 000244E0 GetDateFormatAWorker 539 21A 00042530 GetDateFormatEx 540 21B 000234E0 GetDateFormatW 541 21C 0000F2D0 GetDateFormatWWorker 542 21D 00046220 GetDefaultCommConfigA 543 21E 000462B0 GetDefaultCommConfigW 544 21F 00040B50 GetDevicePowerState 545 220 00026470 GetDiskFreeSpaceA 546 221 00026480 GetDiskFreeSpaceExA 547 222 00026490 GetDiskFreeSpaceExW 548 223 000264A0 GetDiskFreeSpaceW 549 224 0003F690 GetDllDirectoryA 550 225 00024200 GetDllDirectoryW 551 226 000264B0 GetDriveTypeA 552 227 000264C0 GetDriveTypeW 553 228 00056E40 GetDurationFormat 554 229 00042540 GetDurationFormatEx 555 22A 00023B20 GetDynamicTimeZoneInformation 556 22B 00023C60 GetEnabledXStateFeatures 557 22C 0003E6A0 GetEncryptedFileVersionExt 558 22D 00021650 GetEnvironmentStrings 559 22E 000267F0 GetEnvironmentStringsA 560 22F 0001FD70 GetEnvironmentStringsW 561 230 0001F590 GetEnvironmentVariableA 562 231 0001DD30 GetEnvironmentVariableW 563 232 00042550 GetEraNameCountedString 564 233 00023CF0 GetErrorMode 565 234 0001EC40 GetExitCodeProcess 566 235 00020CD0 GetExitCodeThread 567 236 00045410 GetExpandedNameA 568 237 00045510 GetExpandedNameW 569 238 000264D0 GetFileAttributesA 570 239 000264E0 GetFileAttributesExA 571 23A 000264F0 GetFileAttributesExW 572 23B 0003D5D0 GetFileAttributesTransactedA 573 23C 0003D630 GetFileAttributesTransactedW 574 23D 00026500 GetFileAttributesW 575 23E 0003CCD0 GetFileBandwidthReservation 576 23F 00026510 GetFileInformationByHandle 577 240 00023C00 GetFileInformationByHandleEx 578 241 00042560 GetFileMUIInfo 579 242 00022FC0 GetFileMUIPath 580 243 00026520 GetFileSize 581 244 00026530 GetFileSizeEx 582 245 00026540 GetFileTime 583 246 00026550 GetFileType 584 247 00026560 GetFinalPathNameByHandleA 585 248 00026570 GetFinalPathNameByHandleW 586 249 0003EDB0 GetFirmwareEnvironmentVariableA 587 24A 0003EDD0 GetFirmwareEnvironmentVariableExA 588 24B 00024AB0 GetFirmwareEnvironmentVariableExW 589 24C 00024A90 GetFirmwareEnvironmentVariableW 590 24D 000392A0 GetFirmwareType 591 24E 00026580 GetFullPathNameA 592 24F 0003AB90 GetFullPathNameTransactedA 593 250 0003AC50 GetFullPathNameTransactedW 594 251 00026590 GetFullPathNameW 595 252 00056590 GetGeoInfoA 596 253 00017120 GetGeoInfoW 597 254 00026100 GetHandleInformation 598 255 00042570 GetLargePageMinimum 599 256 00026BC0 GetLargestConsoleWindowSize 600 257 00016CF0 GetLastError 601 258 0001F1D0 GetLocalTime 602 259 0001EEA0 GetLocaleInfoA 603 25A 00020CB0 GetLocaleInfoEx 604 25B 00020BF0 GetLocaleInfoW 605 25C 00018BA0 GetLogicalDriveStringsA 606 25D 000265A0 GetLogicalDriveStringsW 607 25E 00018C60 GetLogicalDrives 608 25F 00021950 GetLogicalProcessorInformation 609 260 GetLogicalProcessorInformationEx (forwarded to api-ms-win-core-sysinfo-l1-1-0.GetLogicalProcessorInformationEx) 610 261 00063770 GetLongPathNameA 611 262 00048FD0 GetLongPathNameTransactedA 612 263 00049080 GetLongPathNameTransactedW 613 264 00017750 GetLongPathNameW 614 265 0003F4F0 GetMailslotInfo 615 266 00040DE0 GetMaximumProcessorCount 616 267 00024A30 GetMaximumProcessorGroupCount 617 268 00042580 GetMemoryErrorHandlingCapabilities 618 269 00021610 GetModuleFileNameA 619 26A 0001F490 GetModuleFileNameW 620 26B 0001EEC0 GetModuleHandleA 621 26C 00021960 GetModuleHandleExA 622 26D 0001FD10 GetModuleHandleExW 623 26E 0001EBA0 GetModuleHandleW 624 26F 00024D50 GetNLSVersion 625 270 00042590 GetNLSVersionEx 626 271 000425A0 GetNamedPipeAttribute 627 272 0003FC30 GetNamedPipeClientComputerNameA 628 273 000425B0 GetNamedPipeClientComputerNameW 629 274 0003FD60 GetNamedPipeClientProcessId 630 275 0003FDA0 GetNamedPipeClientSessionId 631 276 0003FDF0 GetNamedPipeHandleStateA 632 277 000425C0 GetNamedPipeHandleStateW 633 278 GetNamedPipeInfo (forwarded to api-ms-win-core-namedpipe-l1-2-1.GetNamedPipeInfo) 634 279 0003FF50 GetNamedPipeServerProcessId 635 27A 0003FF90 GetNamedPipeServerSessionId 636 27B 00023140 GetNativeSystemInfo 637 27C 0004C0D0 GetNextUmsListItem 638 27D 00049130 GetNextVDMCommand 639 27E 000401F0 GetNumaAvailableMemoryNode 640 27F 000258A0 GetNumaAvailableMemoryNodeEx 641 280 00023440 GetNumaHighestNodeNumber 642 281 00040200 GetNumaNodeNumberFromHandle 643 282 00040250 GetNumaNodeProcessorMask 644 283 00025B40 GetNumaNodeProcessorMaskEx 645 284 000251C0 GetNumaProcessorNode 646 285 00025210 GetNumaProcessorNodeEx 647 286 000402D0 GetNumaProximityNode 648 287 00040300 GetNumaProximityNodeEx 649 288 0001C520 GetNumberFormatA 650 289 000425D0 GetNumberFormatEx 651 28A 00001100 GetNumberFormatW 652 28B 000657E0 GetNumberOfConsoleFonts 653 28C 00026A60 GetNumberOfConsoleInputEvents 654 28D 00065830 GetNumberOfConsoleMouseButtons 655 28E 00025B50 GetOEMCP 656 28F 0001C3F0 GetOverlappedResult 657 290 GetOverlappedResultEx (forwarded to api-ms-win-core-io-l1-1-1.GetOverlappedResultEx) 658 291 GetPackageApplicationIds (forwarded to kernelbase.GetPackageApplicationIds) 659 292 GetPackageFamilyName (forwarded to kernelbase.GetPackageFamilyName) 660 293 GetPackageFullName (forwarded to kernelbase.GetPackageFullName) 661 294 GetPackageId (forwarded to kernelbase.GetPackageId) 662 295 GetPackageInfo (forwarded to kernelbase.GetPackageInfo) 663 296 GetPackagePath (forwarded to kernelbase.GetPackagePath) 664 297 GetPackagePathByFullName (forwarded to kernelbase.GetPackagePathByFullName) 665 298 GetPackagesByPackageFamily (forwarded to kernelbase.GetPackagesByPackageFamily) 666 299 00023C10 GetPhysicallyInstalledSystemMemory 667 29A 000237E0 GetPriorityClass 668 29B 000167E0 GetPrivateProfileIntA 669 29C 00016100 GetPrivateProfileIntW 670 29D 00024DC0 GetPrivateProfileSectionA 671 29E 0003BE80 GetPrivateProfileSectionNamesA 672 29F 0003BEB0 GetPrivateProfileSectionNamesW 673 2A0 00015FA0 GetPrivateProfileSectionW 674 2A1 000166C0 GetPrivateProfileStringA 675 2A2 000141D0 GetPrivateProfileStringW 676 2A3 0003BEE0 GetPrivateProfileStructA 677 2A4 0003C060 GetPrivateProfileStructW 678 2A5 0001B2C0 GetProcAddress 679 2A6 00019C90 GetProcessAffinityMask 680 2A7 00040E90 GetProcessDEPPolicy 681 2A8 GetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetProcessDefaultCpuSets) 682 2A9 000425E0 GetProcessGroupAffinity 683 2AA 000425F0 GetProcessHandleCount 684 2AB 00018A20 GetProcessHeap 685 2AC 00042600 GetProcessHeaps 686 2AD 0001F1B0 GetProcessId 687 2AE 00023BF0 GetProcessIdOfThread 688 2AF 000260A0 GetProcessInformation 689 2B0 00023460 GetProcessIoCounters 690 2B1 GetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.GetProcessMitigationPolicy) 691 2B2 00042610 GetProcessPreferredUILanguages 692 2B3 00042620 GetProcessPriorityBoost 693 2B4 00042630 GetProcessShutdownParameters 694 2B5 000191F0 GetProcessTimes 695 2B6 00023C50 GetProcessVersion 696 2B7 0004EA70 GetProcessWorkingSetSize 697 2B8 00042640 GetProcessWorkingSetSizeEx 698 2B9 GetProcessorSystemCycleTime (forwarded to api-ms-win-core-sysinfo-l1-2-2.GetProcessorSystemCycleTime) 699 2BA 00023990 GetProductInfo 700 2BB 00016850 GetProfileIntA 701 2BC 00016260 GetProfileIntW 702 2BD 0003C210 GetProfileSectionA 703 2BE 00024CF0 GetProfileSectionW 704 2BF 0003C220 GetProfileStringA 705 2C0 0003C250 GetProfileStringW 706 2C1 00018B20 GetQueuedCompletionStatus 707 2C2 00001110 GetQueuedCompletionStatusEx 708 2C3 00049A90 GetShortPathNameA 709 2C4 000172C0 GetShortPathNameW 710 2C5 GetStagedPackagePathByFullName (forwarded to kernelbase.GetStagedPackagePathByFullName) 711 2C6 0001EF10 GetStartupInfoA 712 2C7 0001F570 GetStartupInfoW 713 2C8 GetStateFolder (forwarded to kernelbase.GetStateFolder) 714 2C9 0001EC30 GetStdHandle 715 2CA 00042650 GetStringScripts 716 2CB 00022B50 GetStringTypeA 717 2CC 00022B50 GetStringTypeExA 718 2CD 00024620 GetStringTypeExW 719 2CE 0001F510 GetStringTypeW 720 2CF GetSystemAppDataKey (forwarded to kernelbase.GetSystemAppDataKey) 721 2D0 GetSystemCpuSetInformation (forwarded to api-ms-win-core-processthreads-l1-1-3.GetSystemCpuSetInformation) 722 2D1 00040EE0 GetSystemDEPPolicy 723 2D2 0001F4E0 GetSystemDefaultLCID 724 2D3 000236B0 GetSystemDefaultLangID 725 2D4 00042660 GetSystemDefaultLocaleName 726 2D5 00023630 GetSystemDefaultUILanguage 727 2D6 00021670 GetSystemDirectoryA 728 2D7 0001B210 GetSystemDirectoryW 729 2D8 00042670 GetSystemFileCacheSize 730 2D9 000239A0 GetSystemFirmwareTable 731 2DA 0001FD30 GetSystemInfo 732 2DB 0001C0B0 GetSystemPowerStatus 733 2DC 00042680 GetSystemPreferredUILanguages 734 2DD 00040F20 GetSystemRegistryQuota 735 2DE 0001B1C0 GetSystemTime 736 2DF 00022D50 GetSystemTimeAdjustment 737 2E0 00019D10 GetSystemTimeAsFileTime 738 2E1 000267B0 GetSystemTimePreciseAsFileTime 739 2E2 00025410 GetSystemTimes 740 2E3 00042690 GetSystemWindowsDirectoryA 741 2E4 00013D50 GetSystemWindowsDirectoryW 742 2E5 00026920 GetSystemWow64DirectoryA 743 2E6 00026930 GetSystemWow64DirectoryW 744 2E7 0004D250 GetTapeParameters 745 2E8 0004D2B0 GetTapePosition 746 2E9 0004D340 GetTapeStatus 747 2EA 000265B0 GetTempFileNameA 748 2EB 000265C0 GetTempFileNameW 749 2EC 000265D0 GetTempPathA 750 2ED 000265E0 GetTempPathW 751 2EE 000218C0 GetThreadContext 752 2EF 000426A0 GetThreadErrorMode 753 2F0 000426B0 GetThreadGroupAffinity 754 2F1 000426C0 GetThreadIOPendingFlag 755 2F2 00023620 GetThreadId 756 2F3 000426D0 GetThreadIdealProcessorEx 757 2F4 000260B0 GetThreadInformation 758 2F5 0001C410 GetThreadLocale 759 2F6 0001EE90 GetThreadPreferredUILanguages 760 2F7 0001B1D0 GetThreadPriority 761 2F8 000426E0 GetThreadPriorityBoost 762 2F9 GetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetThreadSelectedCpuSets) 763 2FA 0003ADF0 GetThreadSelectorEntry 764 2FB 00019770 GetThreadTimes 765 2FC 00001430 GetThreadUILanguage 766 2FD 00016D30 GetTickCount 767 2FE 00018B30 GetTickCount64 768 2FF 000252C0 GetTimeFormatA 769 300 00024E50 GetTimeFormatAWorker 770 301 000426F0 GetTimeFormatEx 771 302 00023650 GetTimeFormatW 772 303 00012F00 GetTimeFormatWWorker 773 304 0001F500 GetTimeZoneInformation 774 305 00023CE0 GetTimeZoneInformationForYear 775 306 00042700 GetUILanguageInfo 776 307 0004C100 GetUmsCompletionListEvent 777 308 0004C130 GetUmsSystemThreadInformation 778 309 0001F270 GetUserDefaultLCID 779 30A 00024D70 GetUserDefaultLangID 780 30B 000230E0 GetUserDefaultLocaleName 781 30C 00023500 GetUserDefaultUILanguage 782 30D 00022B60 GetUserGeoID 783 30E 00023670 GetUserPreferredUILanguages 784 30F 00049CF0 GetVDMCurrentDirectories 785 310 00022910 GetVersion 786 311 00021910 GetVersionExA 787 312 0001B2B0 GetVersionExW 788 313 000265F0 GetVolumeInformationA 789 314 00026600 GetVolumeInformationByHandleW 790 315 00026610 GetVolumeInformationW 791 316 00025720 GetVolumeNameForVolumeMountPointA 792 317 00020930 GetVolumeNameForVolumeMountPointW 793 318 0004B210 GetVolumePathNameA 794 319 0000DE90 GetVolumePathNameW 795 31A 0004B3D0 GetVolumePathNamesForVolumeNameA 796 31B 0001E7A0 GetVolumePathNamesForVolumeNameW 797 31C 00024D80 GetWindowsDirectoryA 798 31D 00023450 GetWindowsDirectoryW 799 31E 0001F1E0 GetWriteWatch 800 31F 000239B0 GetXStateFeaturesMask 801 320 00016240 GlobalAddAtomA 802 321 0003B190 GlobalAddAtomExA 803 322 00014320 GlobalAddAtomExW 804 323 00014960 GlobalAddAtomW 805 324 0001C090 GlobalAlloc 806 325 0003F2B0 GlobalCompact 807 326 000147F0 GlobalDeleteAtom 808 327 0003B1B0 GlobalFindAtomA 809 328 00014C60 GlobalFindAtomW 810 329 0003F100 GlobalFix 811 32A 00022D60 GlobalFlags 812 32B 00018D90 GlobalFree 813 32C 0003B1D0 GlobalGetAtomNameA 814 32D 00014370 GlobalGetAtomNameW 815 32E 00021820 GlobalHandle 816 32F 00016EC0 GlobalLock 817 330 0001F280 GlobalMemoryStatus 818 331 000229A0 GlobalMemoryStatusEx 819 332 00018E00 GlobalReAlloc 820 333 00019630 GlobalSize 821 334 0003F120 GlobalUnWire 822 335 0003F130 GlobalUnfix 823 336 00016E00 GlobalUnlock 824 337 0003F150 GlobalWire 825 338 00044860 Heap32First 826 339 00044AB0 Heap32ListFirst 827 33A 00044BA0 Heap32ListNext 828 33B 00044C80 Heap32Next 829 33C HeapAlloc (forwarded to NTDLL.RtlAllocateHeap) 830 33D 00042710 HeapCompact 831 33E 00021920 HeapCreate 832 33F 000239C0 HeapDestroy 833 340 00016CE0 HeapFree 834 341 00042720 HeapLock 835 342 00042730 HeapQueryInformation 836 343 HeapReAlloc (forwarded to NTDLL.RtlReAllocateHeap) 837 344 000218E0 HeapSetInformation 838 345 HeapSize (forwarded to NTDLL.RtlSizeHeap) 839 346 00042740 HeapSummary 840 347 00042750 HeapUnlock 841 348 0001DD50 HeapValidate 842 349 00042760 HeapWalk 843 34A 00025B60 IdnToAscii 844 34B 00042770 IdnToNameprepUnicode 845 34C 00042780 IdnToUnicode 846 34D 00024C30 InitAtomTable 847 34E InitOnceBeginInitialize (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceBeginInitialize) 848 34F InitOnceComplete (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceComplete) 849 350 InitOnceExecuteOnce (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceExecuteOnce) 850 351 InitOnceInitialize (forwarded to NTDLL.RtlRunOnceInitialize) 851 352 InitializeConditionVariable (forwarded to NTDLL.RtlInitializeConditionVariable) 852 353 00023AB0 InitializeContext 853 354 InitializeCriticalSection (forwarded to NTDLL.RtlInitializeCriticalSection) 854 355 000261E0 InitializeCriticalSectionAndSpinCount 855 356 000261F0 InitializeCriticalSectionEx 856 357 InitializeProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.InitializeProcThreadAttributeList) 857 358 InitializeSListHead (forwarded to NTDLL.RtlInitializeSListHead) 858 359 InitializeSRWLock (forwarded to NTDLL.RtlInitializeSRWLock) 859 35A 00042790 InitializeSynchronizationBarrier 860 35B InstallELAMCertificateInfo (forwarded to api-ms-win-core-sysinfo-l1-2-1.InstallELAMCertificateInfo) 861 35C InterlockedFlushSList (forwarded to NTDLL.RtlInterlockedFlushSList) 862 35D InterlockedPopEntrySList (forwarded to NTDLL.RtlInterlockedPopEntrySList) 863 35E InterlockedPushEntrySList (forwarded to NTDLL.RtlInterlockedPushEntrySList) 864 35F InterlockedPushListSList (forwarded to NTDLL.RtlInterlockedPushListSList) 865 360 InterlockedPushListSListEx (forwarded to NTDLL.RtlInterlockedPushListSListEx) 866 361 00065A40 InvalidateConsoleDIBits 867 362 00040FA0 IsBadCodePtr 868 363 00040FB0 IsBadHugeReadPtr 869 364 00040FC0 IsBadHugeWritePtr 870 365 00016FC0 IsBadReadPtr 871 366 00040FD0 IsBadStringPtrA 872 367 00041020 IsBadStringPtrW 873 368 00041080 IsBadWritePtr 874 369 00055750 IsCalendarLeapDay 875 36A 00055830 IsCalendarLeapMonth 876 36B 00055910 IsCalendarLeapYear 877 36C 00023D20 IsDBCSLeadByte 878 36D 000253F0 IsDBCSLeadByteEx 879 36E 00022900 IsDebuggerPresent 880 36F 000427A0 IsNLSDefinedString 881 370 00039320 IsNativeVhdBoot 882 371 000427B0 IsNormalizedString 883 372 IsProcessCritical (forwarded to api-ms-win-core-processthreads-l1-1-2.IsProcessCritical) 884 373 000427C0 IsProcessInJob 885 374 0001EC80 IsProcessorFeaturePresent 886 375 00040BA0 IsSystemResumeAutomatic 887 376 000427D0 IsThreadAFiber 888 377 IsThreadpoolTimerSet (forwarded to NTDLL.TpIsTimerSet) 889 378 00018620 IsValidCalDateTime 890 379 0001DF00 IsValidCodePage 891 37A 000427F0 IsValidLanguageGroup 892 37B 0001F4D0 IsValidLocale 893 37C 00042800 IsValidLocaleName 894 37D 00042810 IsValidNLSVersion 895 37E 0001F150 IsWow64Process 896 37F 00042820 K32EmptyWorkingSet 897 380 00042830 K32EnumDeviceDrivers 898 381 00042840 K32EnumPageFilesA 899 382 00042850 K32EnumPageFilesW 900 383 000238A0 K32EnumProcessModules 901 384 00042860 K32EnumProcessModulesEx 902 385 00001410 K32EnumProcesses 903 386 00042870 K32GetDeviceDriverBaseNameA 904 387 00042880 K32GetDeviceDriverBaseNameW 905 388 00042890 K32GetDeviceDriverFileNameA 906 389 000428A0 K32GetDeviceDriverFileNameW 907 38A 000428B0 K32GetMappedFileNameA 908 38B 000428C0 K32GetMappedFileNameW 909 38C 000428D0 K32GetModuleBaseNameA 910 38D 000428E0 K32GetModuleBaseNameW 911 38E 000428F0 K32GetModuleFileNameExA 912 38F 00042900 K32GetModuleFileNameExW 913 390 00023910 K32GetModuleInformation 914 391 00042910 K32GetPerformanceInfo 915 392 00042920 K32GetProcessImageFileNameA 916 393 0001B200 K32GetProcessImageFileNameW 917 394 00042930 K32GetProcessMemoryInfo 918 395 00042950 K32GetWsChanges 919 396 00042940 K32GetWsChangesEx 920 397 00042960 K32InitializeProcessForWsWatch 921 398 00042970 K32QueryWorkingSet 922 399 000234F0 K32QueryWorkingSetEx 923 39A 00023880 LCIDToLocaleName 924 39B 00042980 LCMapStringA 925 39C 00016C90 LCMapStringEx 926 39D 00019B80 LCMapStringW 927 39E 00045620 LZClose 928 39F 000456D0 LZCloseFile 929 3A0 0003AA90 LZCopy 930 3A1 00045780 LZCreateFileW 931 3A2 000271A0 LZDone 932 3A3 000458B0 LZInit 933 3A4 00045A40 LZOpenFileA 934 3A5 00045B30 LZOpenFileW 935 3A6 00045BD0 LZRead 936 3A7 00045E30 LZSeek 937 3A8 00024D30 LZStart 938 3A9 LeaveCriticalSection (forwarded to NTDLL.RtlLeaveCriticalSection) 939 3AA LeaveCriticalSectionWhenCallbackReturns (forwarded to NTDLL.TpCallbackLeaveCriticalSectionOnCompletion) 940 3AB 00019790 LoadAppInitDlls 941 3AC 00022D30 LoadLibraryA 942 3AD 00020CC0 LoadLibraryExA 943 3AE 0001C0A0 LoadLibraryExW 944 3AF 0001F580 LoadLibraryW 945 3B0 00041110 LoadModule 946 3B1 000267A0 LoadPackagedLibrary 947 3B2 0001EC20 LoadResource 948 3B3 00042990 LoadStringBaseExW 949 3B4 0003F5D0 LoadStringBaseW 950 3B5 00019B90 LocalAlloc 951 3B6 0003F2B0 LocalCompact 952 3B7 00026620 LocalFileTimeToFileTime 953 3B8 0003F2D0 LocalFlags 954 3B9 00019BA0 LocalFree 955 3BA 0003F410 LocalHandle 956 3BB 00022F40 LocalLock 957 3BC 000237F0 LocalReAlloc 958 3BD 0003F2B0 LocalShrink 959 3BE 0001D2D0 LocalSize 960 3BF 00022F30 LocalUnlock 961 3C0 00022F50 LocaleNameToLCID 962 3C1 00023BA0 LocateXStateFeature 963 3C2 00026630 LockFile 964 3C3 00026640 LockFileEx 965 3C4 0001EED0 LockResource 966 3C5 000429B0 MapUserPhysicalPages 967 3C6 0004EA90 MapUserPhysicalPagesScatter 968 3C7 0001F140 MapViewOfFile 969 3C8 0001DEF0 MapViewOfFileEx 970 3C9 000429C0 MapViewOfFileExNuma 971 3CA MapViewOfFileFromApp (forwarded to api-ms-win-core-memory-l1-1-1.MapViewOfFileFromApp) 972 3CB 00044EE0 Module32First 973 3CC 0001FBE0 Module32FirstW 974 3CD 00045000 Module32Next 975 3CE 0001B2E0 Module32NextW 976 3CF 0003D6F0 MoveFileA 977 3D0 0003D720 MoveFileExA 978 3D1 00023B80 MoveFileExW 979 3D2 0003D750 MoveFileTransactedA 980 3D3 00025680 MoveFileTransactedW 981 3D4 00021620 MoveFileW 982 3D5 0003D820 MoveFileWithProgressA 983 3D6 000429D0 MoveFileWithProgressW 984 3D7 00026790 MulDiv 985 3D8 00018A30 MultiByteToWideChar 986 3D9 000429E0 NeedCurrentDirectoryForExePathA 987 3DA 000429F0 NeedCurrentDirectoryForExePathW 988 3DB 000269D0 NlsCheckPolicy 989 3DC 00042A00 NlsEventDataDescCreate 990 3DD 000269E0 NlsGetCacheUpdateCount 991 3DE 000269F0 NlsUpdateLocale 992 3DF 00026A00 NlsUpdateSystemLocale 993 3E0 00042A10 NlsWriteEtwEvent 994 3E1 00042A20 NormalizeString 995 3E2 00042A30 NotifyMountMgr 996 3E3 00058A20 NotifyUILanguageChange 997 3E4 000415C0 NtVdm64CreateProcessInternalW 998 3E5 000238B0 OOBEComplete 999 3E6 OfferVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.OfferVirtualMemory) 1000 3E7 00064B80 OpenConsoleW 1001 3E8 00042A40 OpenConsoleWStub 1002 3E9 00026200 OpenEventA 1003 3EA 00026210 OpenEventW 1004 3EB 0003E790 OpenFile 1005 3EC 00042A50 OpenFileById 1006 3ED 000247E0 OpenFileMappingA 1007 3EE 0001FBD0 OpenFileMappingW 1008 3EF 0004DAD0 OpenJobObjectA 1009 3F0 0004DB50 OpenJobObjectW 1010 3F1 00016B00 OpenMutexA 1011 3F2 00026220 OpenMutexW 1012 3F3 OpenPackageInfoByFullName (forwarded to kernelbase.OpenPackageInfoByFullName) 1013 3F4 00043470 OpenPrivateNamespaceA 1014 3F5 00024F90 OpenPrivateNamespaceW 1015 3F6 0001B170 OpenProcess 1016 3F7 OpenProcessToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenProcessToken) 1017 3F8 00024D30 OpenProfileUserMapping 1018 3F9 000434D0 OpenSemaphoreA 1019 3FA 00026230 OpenSemaphoreW 1020 3FB OpenState (forwarded to kernelbase.OpenState) 1021 3FC OpenStateExplicit (forwarded to kernelbase.OpenStateExplicit) 1022 3FD 0001B1F0 OpenThread 1023 3FE OpenThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenThreadToken) 1024 3FF 00043540 OpenWaitableTimerA 1025 400 00026240 OpenWaitableTimerW 1026 401 00022990 OutputDebugStringA 1027 402 0001B420 OutputDebugStringW 1028 403 PackageFamilyNameFromFullName (forwarded to kernelbase.PackageFamilyNameFromFullName) 1029 404 PackageFamilyNameFromId (forwarded to kernelbase.PackageFamilyNameFromId) 1030 405 PackageFullNameFromId (forwarded to kernelbase.PackageFullNameFromId) 1031 406 PackageIdFromFullName (forwarded to kernelbase.PackageIdFromFullName) 1032 407 PackageNameAndPublisherIdFromFamilyName (forwarded to kernelbase.PackageNameAndPublisherIdFromFamilyName) 1033 408 ParseApplicationUserModelId (forwarded to kernelbase.ParseApplicationUserModelId) 1034 409 00026A70 PeekConsoleInputA 1035 40A 00026BD0 PeekConsoleInputW 1036 40B 00025A60 PeekNamedPipe 1037 40C 0001E170 PostQueuedCompletionStatus 1038 40D 00021730 PowerClearRequest 1039 40E 0001F900 PowerCreateRequest 1040 40F 00016480 PowerSetRequest 1041 410 PrefetchVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-1.PrefetchVirtualMemory) 1042 411 0004D370 PrepareTape 1043 412 00025400 PrivCopyFileExW 1044 413 0003D910 PrivMoveFileIdentityW 1045 414 00045120 Process32First 1046 415 00020990 Process32FirstW 1047 416 00045210 Process32Next 1048 417 0001C170 Process32NextW 1049 418 0001E6C0 ProcessIdToSessionId 1050 419 00042A60 PssCaptureSnapshot 1051 41A 00042A70 PssDuplicateSnapshot 1052 41B 00042A80 PssFreeSnapshot 1053 41C 00042A90 PssQuerySnapshot 1054 41D 00042AA0 PssWalkMarkerCreate 1055 41E 00042AB0 PssWalkMarkerFree 1056 41F 00042AC0 PssWalkMarkerGetPosition 1057 420 00042AD0 PssWalkMarkerRewind 1058 421 00042AE0 PssWalkMarkerSeek 1059 422 00042AD0 PssWalkMarkerSeekToBeginning 1060 423 00042AE0 PssWalkMarkerSetPosition 1061 424 00042AC0 PssWalkMarkerTell 1062 425 00042AF0 PssWalkSnapshot 1063 426 0001DCF0 PulseEvent 1064 427 00026890 PurgeComm 1065 428 00042B00 QueryActCtxSettingsW 1066 429 00014AC0 QueryActCtxSettingsWWorker 1067 42A 0001F400 QueryActCtxW 1068 42B 00014520 QueryActCtxWWorker 1069 42C QueryDepthSList (forwarded to NTDLL.RtlQueryDepthSList) 1070 42D 0003C6D0 QueryDosDeviceA 1071 42E 00026650 QueryDosDeviceW 1072 42F 00023CB0 QueryFullProcessImageNameA 1073 430 000219A0 QueryFullProcessImageNameW 1074 431 0001FD90 QueryIdleProcessorCycleTime 1075 432 00042B10 QueryIdleProcessorCycleTimeEx 1076 433 00023520 QueryInformationJobObject 1077 434 0004DC00 QueryIoRateControlInformationJobObject 1078 435 00042B20 QueryMemoryResourceNotification 1079 436 00017110 QueryPerformanceCounter 1080 437 00019550 QueryPerformanceFrequency 1081 438 00042B30 QueryProcessAffinityUpdateMode 1082 439 0001FDA0 QueryProcessCycleTime 1083 43A QueryProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.QueryProtectedPolicy) 1084 43B 0001B2A0 QueryThreadCycleTime 1085 43C 0004EBA0 QueryThreadProfiling 1086 43D 00042B40 QueryThreadpoolStackInformation 1087 43E 0004C1A0 QueryUmsThreadInformation 1088 43F 0001F4C0 QueryUnbiasedInterruptTime 1089 440 000207B0 QueueUserAPC 1090 441 00021900 QueueUserWorkItem 1091 442 0006AE70 QuirkGetData2Worker 1092 443 0006AF40 QuirkGetDataWorker 1093 444 0006B000 QuirkIsEnabled2Worker 1094 445 000194A0 QuirkIsEnabled3Worker 1095 446 00024350 QuirkIsEnabledForPackage2Worker 1096 447 000081A0 QuirkIsEnabledForPackage3Worker 1097 448 000082F0 QuirkIsEnabledForPackage4Worker 1098 449 00007CF0 QuirkIsEnabledForPackageWorker 1099 44A 0006B120 QuirkIsEnabledForProcessWorker 1100 44B 00007830 QuirkIsEnabledWorker 1101 44C 0001F390 RaiseException 1102 44D RaiseFailFastException (forwarded to kernelbase.RaiseFailFastException) 1103 44E 000417C0 RaiseInvalid16BitExeError 1104 44F 00042B70 ReOpenFile 1105 450 00026A80 ReadConsoleA 1106 451 00026A90 ReadConsoleInputA 1107 452 ReadConsoleInputExA (forwarded to kernelbase.ReadConsoleInputExA) 1108 453 ReadConsoleInputExW (forwarded to kernelbase.ReadConsoleInputExW) 1109 454 00026AA0 ReadConsoleInputW 1110 455 00026BE0 ReadConsoleOutputA 1111 456 00026BF0 ReadConsoleOutputAttribute 1112 457 00026C00 ReadConsoleOutputCharacterA 1113 458 00026C10 ReadConsoleOutputCharacterW 1114 459 00026C20 ReadConsoleOutputW 1115 45A 00026AB0 ReadConsoleW 1116 45B 000252D0 ReadDirectoryChangesW 1117 45C 00026660 ReadFile 1118 45D 00026670 ReadFileEx 1119 45E 00026680 ReadFileScatter 1120 45F 0001C500 ReadProcessMemory 1121 460 0004EBD0 ReadThreadProfilingData 1122 461 ReclaimVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.ReclaimVirtualMemory) 1123 462 00023510 RegCloseKey 1124 463 00042B80 RegCopyTreeW 1125 464 00042B90 RegCreateKeyExA 1126 465 000230B0 RegCreateKeyExW 1127 466 00042BA0 RegDeleteKeyExA 1128 467 00042BB0 RegDeleteKeyExW 1129 468 00042BC0 RegDeleteTreeA 1130 469 00042BD0 RegDeleteTreeW 1131 46A 00042BE0 RegDeleteValueA 1132 46B 00024C90 RegDeleteValueW 1133 46C 00042BF0 RegDisablePredefinedCacheEx 1134 46D 00042C00 RegEnumKeyExA 1135 46E 0001F3B0 RegEnumKeyExW 1136 46F 00042C50 RegEnumValueA 1137 470 00023050 RegEnumValueW 1138 471 00042CA0 RegFlushKey 1139 472 00042CB0 RegGetKeySecurity 1140 473 00042CC0 RegGetValueA 1141 474 00023700 RegGetValueW 1142 475 00042CD0 RegLoadKeyA 1143 476 00042CE0 RegLoadKeyW 1144 477 00042CF0 RegLoadMUIStringA 1145 478 00042D00 RegLoadMUIStringW 1146 479 00023640 RegNotifyChangeKeyValue 1147 47A 000243D0 RegOpenCurrentUser 1148 47B 00042D10 RegOpenKeyExA 1149 47C 0001F870 RegOpenKeyExW 1150 47D 00042D20 RegOpenUserClassesRoot 1151 47E 00042D30 RegQueryInfoKeyA 1152 47F 0001F410 RegQueryInfoKeyW 1153 480 00042DB0 RegQueryValueExA 1154 481 0001F4A0 RegQueryValueExW 1155 482 00042DC0 RegRestoreKeyA 1156 483 00042DD0 RegRestoreKeyW 1157 484 00042DE0 RegSaveKeyExA 1158 485 00042DF0 RegSaveKeyExW 1159 486 00042E00 RegSetKeySecurity 1160 487 00042E10 RegSetValueExA 1161 488 00023410 RegSetValueExW 1162 489 00042E20 RegUnLoadKeyA 1163 48A 00042E30 RegUnLoadKeyW 1164 48B 00023D80 RegisterApplicationRecoveryCallback 1165 48C 00016540 RegisterApplicationRestart 1166 48D 00042E40 RegisterBadMemoryNotification 1167 48E 00064DE0 RegisterConsoleIME 1168 48F 00065220 RegisterConsoleOS2 1169 490 00064CF0 RegisterConsoleVDM 1170 491 00021810 RegisterWaitForInputIdle 1171 492 0001DE80 RegisterWaitForSingleObject 1172 493 00042E50 RegisterWaitForSingleObjectEx 1173 494 000403B0 RegisterWaitUntilOOBECompleted 1174 495 0003F160 RegisterWowBaseHandlers 1175 496 0004A110 RegisterWowExec 1176 497 00022F20 ReleaseActCtx 1177 498 0001C940 ReleaseActCtxWorker 1178 499 00026250 ReleaseMutex 1179 49A ReleaseMutexWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseMutexOnCompletion) 1180 49B ReleaseSRWLockExclusive (forwarded to NTDLL.RtlReleaseSRWLockExclusive) 1181 49C ReleaseSRWLockShared (forwarded to NTDLL.RtlReleaseSRWLockShared) 1182 49D 00026260 ReleaseSemaphore 1183 49E ReleaseSemaphoreWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseSemaphoreOnCompletion) 1184 49F 00026690 RemoveDirectoryA 1185 4A0 0003B070 RemoveDirectoryTransactedA 1186 4A1 0003B0C0 RemoveDirectoryTransactedW 1187 4A2 000266A0 RemoveDirectoryW 1188 4A3 RemoveDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.RemoveDllDirectory) 1189 4A4 0003A570 RemoveLocalAlternateComputerNameA 1190 4A5 0003A5D0 RemoveLocalAlternateComputerNameW 1191 4A6 0003F170 RemoveSecureMemoryCacheCallback 1192 4A7 RemoveVectoredContinueHandler (forwarded to NTDLL.RtlRemoveVectoredContinueHandler) 1193 4A8 RemoveVectoredExceptionHandler (forwarded to NTDLL.RtlRemoveVectoredExceptionHandler) 1194 4A9 00042E60 ReplaceFile 1195 4AA 0003EC90 ReplaceFileA 1196 4AB 00042E60 ReplaceFileW 1197 4AC 00041B40 ReplacePartitionUnit 1198 4AD 00040B30 RequestDeviceWakeup 1199 4AE 00040B30 RequestWakeupLatency 1200 4AF 00026270 ResetEvent 1201 4B0 000212C0 ResetWriteWatch 1202 4B1 ResolveDelayLoadedAPI (forwarded to NTDLL.LdrResolveDelayLoadedAPI) 1203 4B2 ResolveDelayLoadsFromDll (forwarded to NTDLL.LdrResolveDelayLoadsFromDll) 1204 4B3 00023A50 ResolveLocaleName 1205 4B4 RestoreLastError (forwarded to NTDLL.RtlRestoreLastWin32Error) 1206 4B5 0001FD20 ResumeThread 1207 4B6 000213F0 RtlAddFunctionTable 1208 4B7 00025EE0 RtlCaptureContext 1209 4B8 0001D890 RtlCaptureStackBackTrace 1210 4B9 00023870 RtlCompareMemory 1211 4BA 00042E70 RtlCopyMemory 1212 4BB 00021410 RtlDeleteFunctionTable 1213 4BC 00042E90 RtlFillMemory 1214 4BD 00042EC0 RtlInstallFunctionTableCallback 1215 4BE 0001F5D0 RtlLookupFunctionEntry 1216 4BF 00025F10 RtlMoveMemory 1217 4C0 0001F4F0 RtlPcToFileHeader 1218 4C1 00042ED0 RtlRaiseException 1219 4C2 00042EE0 RtlRestoreContext 1220 4C3 00042EF0 RtlUnwind 1221 4C4 0001E690 RtlUnwindEx 1222 4C5 00042F00 RtlVirtualUnwind 1223 4C6 RtlZeroMemory (forwarded to NTDLL.RtlZeroMemory) 1224 4C7 00026C30 ScrollConsoleScreenBufferA 1225 4C8 00026C40 ScrollConsoleScreenBufferW 1226 4C9 00042F50 SearchPathA 1227 4CA 00023A30 SearchPathW 1228 4CB 00023C70 SetCachedSigningLevel 1229 4CC 00056660 SetCalendarInfoA 1230 4CD 00042F60 SetCalendarInfoW 1231 4CE 0004E7E0 SetComPlusPackageInstallStatus 1232 4CF 000268A0 SetCommBreak 1233 4D0 000268B0 SetCommConfig 1234 4D1 000268C0 SetCommMask 1235 4D2 000268D0 SetCommState 1236 4D3 000268E0 SetCommTimeouts 1237 4D4 00042F70 SetComputerNameA 1238 4D5 00042F80 SetComputerNameEx2W 1239 4D6 00042F90 SetComputerNameExA 1240 4D7 00042FA0 SetComputerNameExW 1241 4D8 00042FB0 SetComputerNameW 1242 4D9 00026C50 SetConsoleActiveScreenBuffer 1243 4DA 00026C60 SetConsoleCP 1244 4DB 00026AC0 SetConsoleCtrlHandler 1245 4DC 00064D90 SetConsoleCursor 1246 4DD 00026C70 SetConsoleCursorInfo 1247 4DE 00065280 SetConsoleCursorMode 1248 4DF 00026C80 SetConsoleCursorPosition 1249 4E0 00064DE0 SetConsoleDisplayMode 1250 4E1 00065890 SetConsoleFont 1251 4E2 00064E00 SetConsoleHardwareState 1252 4E3 000658E0 SetConsoleHistoryInfo 1253 4E4 00065950 SetConsoleIcon 1254 4E5 SetConsoleInputExeNameA (forwarded to kernelbase.SetConsoleInputExeNameA) 1255 4E6 SetConsoleInputExeNameW (forwarded to kernelbase.SetConsoleInputExeNameW) 1256 4E7 00064E60 SetConsoleKeyShortcuts 1257 4E8 000652E0 SetConsoleLocalEUDC 1258 4E9 00024D30 SetConsoleMaximumWindowSize 1259 4EA 00064EF0 SetConsoleMenuClose 1260 4EB 00026AD0 SetConsoleMode 1261 4EC 00065390 SetConsoleNlsMode 1262 4ED 000649B0 SetConsoleNumberOfCommandsA 1263 4EE 00064A60 SetConsoleNumberOfCommandsW 1264 4EF 000653E0 SetConsoleOS2OemFormat 1265 4F0 00026C90 SetConsoleOutputCP 1266 4F1 00064F50 SetConsolePalette 1267 4F2 00026CA0 SetConsoleScreenBufferInfoEx 1268 4F3 00026CB0 SetConsoleScreenBufferSize 1269 4F4 00026CC0 SetConsoleTextAttribute 1270 4F5 00064A70 SetConsoleTitleA 1271 4F6 00026CD0 SetConsoleTitleW 1272 4F7 00026CE0 SetConsoleWindowInfo 1273 4F8 SetCriticalSectionSpinCount (forwarded to NTDLL.RtlSetCriticalSectionSpinCount) 1274 4F9 000659A0 SetCurrentConsoleFontEx 1275 4FA 00042FC0 SetCurrentDirectoryA 1276 4FB 00023BB0 SetCurrentDirectoryW 1277 4FC 00046900 SetDefaultCommConfigA 1278 4FD 00046990 SetDefaultCommConfigW 1279 4FE SetDefaultDllDirectories (forwarded to api-ms-win-core-libraryloader-l1-1-0.SetDefaultDllDirectories) 1280 4FF 0003F810 SetDllDirectoryA 1281 500 00022E90 SetDllDirectoryW 1282 501 00042FD0 SetDynamicTimeZoneInformation 1283 502 000266B0 SetEndOfFile 1284 503 0004E9A0 SetEnvironmentStringsA 1285 504 00042FE0 SetEnvironmentStringsW 1286 505 0001F250 SetEnvironmentVariableA 1287 506 00022FF0 SetEnvironmentVariableW 1288 507 0001DD40 SetErrorMode 1289 508 00026280 SetEvent 1290 509 SetEventWhenCallbackReturns (forwarded to NTDLL.TpCallbackSetEventOnCompletion) 1291 50A 00042FF0 SetFileApisToANSI 1292 50B 00043000 SetFileApisToOEM 1293 50C 000266C0 SetFileAttributesA 1294 50D 0003DD60 SetFileAttributesTransactedA 1295 50E 0003DDB0 SetFileAttributesTransactedW 1296 50F 000266D0 SetFileAttributesW 1297 510 0003CD80 SetFileBandwidthReservation 1298 511 00020C50 SetFileCompletionNotificationModes 1299 512 000266E0 SetFileInformationByHandle 1300 513 00043010 SetFileIoOverlappedRange 1301 514 000266F0 SetFilePointer 1302 515 00026700 SetFilePointerEx 1303 516 0003CEA0 SetFileShortNameA 1304 517 0003CEE0 SetFileShortNameW 1305 518 00026710 SetFileTime 1306 519 00026720 SetFileValidData 1307 51A 0003EED0 SetFirmwareEnvironmentVariableA 1308 51B 0003EEF0 SetFirmwareEnvironmentVariableExA 1309 51C 0003EFE0 SetFirmwareEnvironmentVariableExW 1310 51D 0003F0A0 SetFirmwareEnvironmentVariableW 1311 51E 00023660 SetHandleCount 1312 51F 00026110 SetHandleInformation 1313 520 00021530 SetInformationJobObject 1314 521 0004DEB0 SetIoRateControlInformationJobObject 1315 522 SetLastConsoleEventActive (forwarded to kernelbase.SetLastConsoleEventActive) 1316 523 00016DF0 SetLastError 1317 524 0003A710 SetLocalPrimaryComputerNameA 1318 525 0003A770 SetLocalPrimaryComputerNameW 1319 526 00043020 SetLocalTime 1320 527 00056740 SetLocaleInfoA 1321 528 00043030 SetLocaleInfoW 1322 529 00022920 SetMailslotInfo 1323 52A 00040B30 SetMessageWaitingIndicator 1324 52B 0003FFD0 SetNamedPipeAttribute 1325 52C 000243E0 SetNamedPipeHandleState 1326 52D 00023000 SetPriorityClass 1327 52E 00041950 SetProcessAffinityMask 1328 52F 00025AA0 SetProcessAffinityUpdateMode 1329 530 00024380 SetProcessDEPPolicy 1330 531 SetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetProcessDefaultCpuSets) 1331 532 000260C0 SetProcessInformation 1332 533 SetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.SetProcessMitigationPolicy) 1333 534 00043040 SetProcessPreferredUILanguages 1334 535 00023CA0 SetProcessPriorityBoost 1335 536 000236F0 SetProcessShutdownParameters 1336 537 00023BE0 SetProcessWorkingSetSize 1337 538 00043050 SetProcessWorkingSetSizeEx 1338 539 SetProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.SetProtectedPolicy) 1339 53A 0003F8C0 SetSearchPathMode 1340 53B 00021970 SetStdHandle 1341 53C 00043060 SetStdHandleEx 1342 53D 00043070 SetSystemFileCacheSize 1343 53E 00040BC0 SetSystemPowerState 1344 53F 00043080 SetSystemTime 1345 540 0003AD10 SetSystemTimeAdjustment 1346 541 0004D3B0 SetTapeParameters 1347 542 0004D400 SetTapePosition 1348 543 00043790 SetTermsrvAppInstallMode 1349 544 00016D50 SetThreadAffinityMask 1350 545 00023CC0 SetThreadContext 1351 546 0001D880 SetThreadErrorMode 1352 547 00024270 SetThreadExecutionState 1353 548 00043090 SetThreadGroupAffinity 1354 549 0001B290 SetThreadIdealProcessor 1355 54A 000430A0 SetThreadIdealProcessorEx 1356 54B 000260D0 SetThreadInformation 1357 54C 0001C430 SetThreadLocale 1358 54D 0001F530 SetThreadPreferredUILanguages 1359 54E 0001F1C0 SetThreadPriority 1360 54F 00024D40 SetThreadPriorityBoost 1361 550 SetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetThreadSelectedCpuSets) 1362 551 000217B0 SetThreadStackGuarantee 1363 552 SetThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.SetThreadToken) 1364 553 0001DD00 SetThreadUILanguage 1365 554 000430B0 SetThreadpoolStackInformation 1366 555 SetThreadpoolThreadMaximum (forwarded to NTDLL.TpSetPoolMaxThreads) 1367 556 00024B70 SetThreadpoolThreadMinimum 1368 557 SetThreadpoolTimer (forwarded to NTDLL.TpSetTimer) 1369 558 SetThreadpoolTimerEx (forwarded to NTDLL.TpSetTimerEx) 1370 559 SetThreadpoolWait (forwarded to NTDLL.TpSetWait) 1371 55A SetThreadpoolWaitEx (forwarded to NTDLL.TpSetWaitEx) 1372 55B 000430E0 SetTimeZoneInformation 1373 55C 0004EAF0 SetTimerQueueTimer 1374 55D 0004C1E0 SetUmsThreadInformation 1375 55E 00021720 SetUnhandledExceptionFilter 1376 55F 0005F100 SetUserGeoID 1377 560 0004A170 SetVDMCurrentDirectories 1378 561 00040700 SetVolumeLabelA 1379 562 000407A0 SetVolumeLabelW 1380 563 0004B780 SetVolumeMountPointA 1381 564 0004B7F0 SetVolumeMountPointW 1382 565 000430F0 SetVolumeMountPointWStub 1383 566 00026290 SetWaitableTimer 1384 567 SetWaitableTimerEx (forwarded to api-ms-win-core-synch-l1-1-0.SetWaitableTimerEx) 1385 568 00023C80 SetXStateFeaturesMask 1386 569 000268F0 SetupComm 1387 56A 00064FB0 ShowConsoleCursor 1388 56B 00043100 SignalObjectAndWait 1389 56C 0001EEE0 SizeofResource 1390 56D 00019780 Sleep 1391 56E SleepConditionVariableCS (forwarded to api-ms-win-core-synch-l1-1-0.SleepConditionVariableCS) 1392 56F SleepConditionVariableSRW (forwarded to api-ms-win-core-synch-l1-1-0.SleepConditionVariableSRW) 1393 570 000262A0 SleepEx 1394 571 00023680 SortCloseHandle 1395 572 0000F700 SortGetHandle 1396 573 StartThreadpoolIo (forwarded to NTDLL.TpStartAsyncIoOperation) 1397 574 SubmitThreadpoolWork (forwarded to NTDLL.TpPostWork) 1398 575 00021710 SuspendThread 1399 576 000269C0 SwitchToFiber 1400 577 0001B1E0 SwitchToThread 1401 578 0001F520 SystemTimeToFileTime 1402 579 000230C0 SystemTimeToTzSpecificLocalTime 1403 57A SystemTimeToTzSpecificLocalTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.SystemTimeToTzSpecificLocalTimeEx) 1404 57B 00023750 TerminateJobObject 1405 57C 00023710 TerminateProcess 1406 57D 000228F0 TerminateThread 1407 57E 00015160 TermsrvAppInstallMode 1408 57F 00012D50 TermsrvConvertSysRootToUserDir 1409 580 0001EBB0 TermsrvCreateRegEntry 1410 581 0001F540 TermsrvDeleteKey 1411 582 0001F880 TermsrvDeleteValue 1412 583 0001C2B0 TermsrvGetPreSetValue 1413 584 00024CB0 TermsrvGetWindowsDirectoryA 1414 585 00012D10 TermsrvGetWindowsDirectoryW 1415 586 00018A60 TermsrvOpenRegEntry 1416 587 0001E1A0 TermsrvOpenUserClasses 1417 588 00044730 TermsrvRestoreKey 1418 589 0001C440 TermsrvSetKeySecurity 1419 58A 0001C310 TermsrvSetValueKey 1420 58B 00014020 TermsrvSyncUserIniFileExt 1421 58C 00020B20 Thread32First 1422 58D 00018CB0 Thread32Next 1423 58E 0001E6B0 TlsAlloc 1424 58F 0001EEF0 TlsFree 1425 590 00016CB0 TlsGetValue 1426 591 00018A50 TlsSetValue 1427 592 00045300 Toolhelp32ReadProcessMemory 1428 593 00043110 TransactNamedPipe 1429 594 00026900 TransmitCommChar 1430 595 TryAcquireSRWLockExclusive (forwarded to NTDLL.RtlTryAcquireSRWLockExclusive) 1431 596 TryAcquireSRWLockShared (forwarded to NTDLL.RtlTryAcquireSRWLockShared) 1432 597 TryEnterCriticalSection (forwarded to NTDLL.RtlTryEnterCriticalSection) 1433 598 000234A0 TrySubmitThreadpoolCallback 1434 599 00024DA0 TzSpecificLocalTimeToSystemTime 1435 59A TzSpecificLocalTimeToSystemTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.TzSpecificLocalTimeToSystemTimeEx) 1436 59B 0003F8F0 UTRegister 1437 59C 000271A0 UTUnRegister 1438 59D 0004C210 UmsThreadYield 1439 59E 00043120 UnhandledExceptionFilter 1440 59F 00026730 UnlockFile 1441 5A0 00026740 UnlockFileEx 1442 5A1 0001F4B0 UnmapViewOfFile 1443 5A2 UnmapViewOfFileEx (forwarded to api-ms-win-core-memory-l1-1-1.UnmapViewOfFileEx) 1444 5A3 00023D60 UnregisterApplicationRecoveryCallback 1445 5A4 000059A0 UnregisterApplicationRestart 1446 5A5 00043130 UnregisterBadMemoryNotification 1447 5A6 00064DE0 UnregisterConsoleIME 1448 5A7 00016500 UnregisterWait 1449 5A8 00023970 UnregisterWaitEx 1450 5A9 000404E0 UnregisterWaitUntilOOBECompleted 1451 5AA 00018680 UpdateCalendarDayOfWeek 1452 5AB UpdateProcThreadAttribute (forwarded to api-ms-win-core-processthreads-l1-1-0.UpdateProcThreadAttribute) 1453 5AC 00054A20 UpdateResourceA 1454 5AD 00054BA0 UpdateResourceW 1455 5AE 00065A90 VDMConsoleOperation 1456 5AF 0004A420 VDMOperationStarted 1457 5B0 00023C90 VerLanguageNameA 1458 5B1 00023BC0 VerLanguageNameW 1459 5B2 VerSetConditionMask (forwarded to NTDLL.VerSetConditionMask) 1460 5B3 00023920 VerifyConsoleIoHandle 1461 5B4 00043140 VerifyScripts 1462 5B5 00019BB0 VerifyVersionInfoA 1463 5B6 00019C50 VerifyVersionInfoW 1464 5B7 0001C370 VirtualAlloc 1465 5B8 00023D00 VirtualAllocEx 1466 5B9 00024DB0 VirtualAllocExNuma 1467 5BA 0001C490 VirtualFree 1468 5BB 00023D10 VirtualFreeEx 1469 5BC 00043150 VirtualLock 1470 5BD 0001DEE0 VirtualProtect 1471 5BE 00043160 VirtualProtectEx 1472 5BF 0001E6A0 VirtualQuery 1473 5C0 00022FB0 VirtualQueryEx 1474 5C1 0001F3A0 VirtualUnlock 1475 5C2 00022330 WTSGetActiveConsoleSessionId 1476 5C3 00026910 WaitCommEvent 1477 5C4 00043170 WaitForDebugEvent 1478 5C5 WaitForDebugEventEx (forwarded to api-ms-win-core-debug-l1-1-2.WaitForDebugEventEx) 1479 5C6 000262B0 WaitForMultipleObjects 1480 5C7 000262C0 WaitForMultipleObjectsEx 1481 5C8 000262D0 WaitForSingleObject 1482 5C9 000262E0 WaitForSingleObjectEx 1483 5CA WaitForThreadpoolIoCallbacks (forwarded to NTDLL.TpWaitForIoCompletion) 1484 5CB WaitForThreadpoolTimerCallbacks (forwarded to NTDLL.TpWaitForTimer) 1485 5CC WaitForThreadpoolWaitCallbacks (forwarded to NTDLL.TpWaitForWait) 1486 5CD WaitForThreadpoolWorkCallbacks (forwarded to NTDLL.TpWaitForWork) 1487 5CE 000401A0 WaitNamedPipeA 1488 5CF 00043180 WaitNamedPipeW 1489 5D0 WakeAllConditionVariable (forwarded to NTDLL.RtlWakeAllConditionVariable) 1490 5D1 WakeConditionVariable (forwarded to NTDLL.RtlWakeConditionVariable) 1491 5D2 000203F0 WerGetFlags 1492 5D3 000203F0 WerGetFlagsWorker 1493 5D4 00022F90 WerRegisterFile 1494 5D5 00008720 WerRegisterFileWorker 1495 5D6 000218D0 WerRegisterMemoryBlock 1496 5D7 0000AFC0 WerRegisterMemoryBlockWorker 1497 5D8 00023430 WerRegisterRuntimeExceptionModule 1498 5D9 00007DF0 WerRegisterRuntimeExceptionModuleWorker 1499 5DA 00007820 WerSetFlags 1500 5DB 00007820 WerSetFlagsWorker 1501 5DC 00022F80 WerUnregisterFile 1502 5DD 00008710 WerUnregisterFileWorker 1503 5DE 000218F0 WerUnregisterMemoryBlock 1504 5DF 0000AB20 WerUnregisterMemoryBlockWorker 1505 5E0 00043190 WerUnregisterRuntimeExceptionModule 1506 5E1 0004E850 WerUnregisterRuntimeExceptionModuleWorker 1507 5E2 0004E8C0 WerpCleanupMessageMapping 1508 5E3 00067620 WerpGetDebugger 1509 5E4 0004E860 WerpInitiateRemoteRecovery 1510 5E5 00067C00 WerpLaunchAeDebug 1511 5E6 000431A0 WerpNotifyLoadStringResource 1512 5E7 0004E910 WerpNotifyLoadStringResourceEx 1513 5E8 0004E920 WerpNotifyLoadStringResourceWorker 1514 5E9 000431B0 WerpNotifyUseStringResource 1515 5EA 00025AB0 WerpNotifyUseStringResourceWorker 1516 5EB 0004E930 WerpStringLookup 1517 5EC 00016D20 WideCharToMultiByte 1518 5ED 00041990 WinExec 1519 5EE 000431C0 Wow64DisableWow64FsRedirection 1520 5EF 00023D30 Wow64EnableWow64FsRedirection 1521 5F0 00044790 Wow64GetThreadContext 1522 5F1 0003AE10 Wow64GetThreadSelectorEntry 1523 5F2 000431D0 Wow64RevertWow64FsRedirection 1524 5F3 000447C0 Wow64SetThreadContext 1525 5F4 000447F0 Wow64SuspendThread 1526 5F5 00026AE0 WriteConsoleA 1527 5F6 00026CF0 WriteConsoleInputA 1528 5F7 00064FF0 WriteConsoleInputVDMA 1529 5F8 00065070 WriteConsoleInputVDMW 1530 5F9 00026D00 WriteConsoleInputW 1531 5FA 00026D10 WriteConsoleOutputA 1532 5FB 00026D20 WriteConsoleOutputAttribute 1533 5FC 00026D30 WriteConsoleOutputCharacterA 1534 5FD 00026D40 WriteConsoleOutputCharacterW 1535 5FE 00026D50 WriteConsoleOutputW 1536 5FF 00026AF0 WriteConsoleW 1537 600 00026750 WriteFile 1538 601 00026760 WriteFileEx 1539 602 00026770 WriteFileGather 1540 603 0003C280 WritePrivateProfileSectionA 1541 604 00025420 WritePrivateProfileSectionW 1542 605 0003C2E0 WritePrivateProfileStringA 1543 606 00015100 WritePrivateProfileStringW 1544 607 0003C350 WritePrivateProfileStructA 1545 608 0003C4A0 WritePrivateProfileStructW 1546 609 0001EF00 WriteProcessMemory 1547 60A 0003C600 WriteProfileSectionA 1548 60B 0003C610 WriteProfileSectionW 1549 60C 0003C620 WriteProfileStringA 1550 60D 0003C630 WriteProfileStringW 1551 60E 0004D470 WriteTapemark 1552 60F 000431E0 ZombifyActCtx 1553 610 0004E6C0 ZombifyActCtxWorker 1554 611 __C_specific_handler (forwarded to NTDLL.__C_specific_handler) 1555 612 __chkstk (forwarded to NTDLL.__chkstk) 1556 613 __misaligned_access (forwarded to NTDLL.__misaligned_access) 1557 614 00018DD0 _hread 1558 615 0003F260 _hwrite 1559 616 0001D3F0 _lclose 1560 617 0003F190 _lcreat 1561 618 00018B70 _llseek 1562 619 _local_unwind (forwarded to NTDLL._local_unwind) 1563 61A 0003F1F0 _lopen 1564 61B 00018DD0 _lread 1565 61C 0003F260 _lwrite 1566 61D 000217D0 lstrcat 1567 61E 000217D0 lstrcatA 1568 61F 00024400 lstrcatW 1569 620 0001E730 lstrcmp 1570 621 0001E730 lstrcmpA 1571 622 0001C510 lstrcmpW 1572 623 0001C390 lstrcmpi 1573 624 0001C390 lstrcmpiA 1574 625 00018B60 lstrcmpiW 1575 626 0001F5A0 lstrcpy 1576 627 0001F5A0 lstrcpyA 1577 628 00021420 lstrcpyW 1578 629 000431F0 lstrcpyn 1579 62A 000431F0 lstrcpynA 1580 62B 00023A70 lstrcpynW 1581 62C 0001C400 lstrlen 1582 62D 0001C400 lstrlenA 1583 62E 00018A40 lstrlenW 1584 62F 000212D0 timeBeginPeriod 1585 630 0001F5F0 timeEndPeriod 1586 631 000242E0 timeGetDevCaps 1587 632 00044820 timeGetSystemTime 1588 633 0001E0C0 timeGetTime 1589 634 0001C510 uaw_lstrcmpW 1590 635 00018B60 uaw_lstrcmpiW 1591 636 00036BA0 uaw_lstrlenW 1592 637 00036BF0 uaw_wcschr 1593 638 00036C10 uaw_wcscpy 1594 639 00036C40 uaw_wcsicmp 1595 63A 00036C50 uaw_wcslen 1596 63B 00036C70 uaw_wcsrchr Summary 1000 .data 1000 .didat 6000 .pdata 2F000 .rdata 1000 .reloc 1000 .rsrc 73000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file ntdll.dll File Type: DLL Section contains the following exports for ntdll.dll 00000000 characteristics 64781AF1 time date stamp Wed May 31 21:13:37 2023 0.00 version 8 ordinal base 2224 number of functions 2223 number of names ordinal hint RVA name 9 0 0004F0D0 A_SHAFinal 10 1 0004F210 A_SHAInit 11 2 0004F250 A_SHAUpdate 12 3 00079380 AlpcAdjustCompletionListConcurrencyCount 13 4 00062D50 AlpcFreeCompletionListMessage 14 5 000CAC90 AlpcGetCompletionListLastMessageInformation 15 6 000CACB0 AlpcGetCompletionListMessageAttributes 16 7 0006AB50 AlpcGetHeaderSize 17 8 0006AB10 AlpcGetMessageAttribute 18 9 00034CB0 AlpcGetMessageFromCompletionList 19 A 00079020 AlpcGetOutstandingCompletionListMessageCount 20 B 0006AAB0 AlpcInitializeMessageAttribute 21 C 000779C0 AlpcMaxAllowedMessageLength 22 D 00078630 AlpcRegisterCompletionList 23 E 00064CF0 AlpcRegisterCompletionListWorkerThread 24 F 00078FE0 AlpcRundownCompletionList 25 10 00079000 AlpcUnregisterCompletionList 26 11 00064C80 AlpcUnregisterCompletionListWorkerThread 27 12 00021030 ApiSetQueryApiSetPresence 28 13 00008010 CsrAllocateCaptureBuffer 29 14 00007FD0 CsrAllocateMessagePointer 30 15 00007D90 CsrCaptureMessageBuffer 31 16 00007DF0 CsrCaptureMessageMultiUnicodeStringsInPlace 32 17 00007F10 CsrCaptureMessageString 33 18 000BADB0 CsrCaptureTimeout 34 19 00007C10 CsrClientCallServer 35 1A 00004320 CsrClientConnectToServer 36 1B 00007BE0 CsrFreeCaptureBuffer 37 1C 000BADD0 CsrGetProcessId 38 1D 000759D0 CsrIdentifyAlertableThread 39 1E 000C0F00 CsrSetPriorityClass 40 1F 000BADF0 CsrVerifyRegion 41 20 00094F40 DbgBreakPoint 42 21 00010000 DbgPrint 43 22 0000F9B0 DbgPrintEx 44 23 000CACF0 DbgPrintReturnControlC 45 24 000CAD40 DbgPrompt 46 25 000CAD80 DbgQueryDebugFilterState 47 26 000CAD90 DbgSetDebugFilterState 48 27 000BBF00 DbgUiConnectToDbg 49 28 000BBF70 DbgUiContinue 50 29 000BBFA0 DbgUiConvertStateChangeStructure 51 2A 000BBFB0 DbgUiConvertStateChangeStructureEx 52 2B 000BC250 DbgUiDebugActiveProcess 53 2C 000BC2B0 DbgUiGetThreadDebugObject 54 2D 000BC2D0 DbgUiIssueRemoteBreakin 55 2E 000BC340 DbgUiRemoteBreakin 56 2F 000BC3B0 DbgUiSetThreadDebugObject 57 30 000BC3D0 DbgUiStopDebugging 58 31 000BC3F0 DbgUiWaitStateChange 59 32 00094F50 DbgUserBreakPoint 60 33 000F3B40 EtwCreateTraceInstanceId 61 34 0000C140 EtwDeliverDataBlock 62 35 000F3BA0 EtwEnumerateProcessRegGuids 63 36 000639F0 EtwEventActivityIdControl 64 37 0000CD00 EtwEventEnabled 65 38 00075700 EtwEventProviderEnabled 66 39 000390B0 EtwEventRegister 67 3A 0000E180 EtwEventSetInformation 68 3B 0000E360 EtwEventUnregister 69 3C 0000F6B0 EtwEventWrite 70 3D 0000CDE0 EtwEventWriteEndScenario 71 3E 0000F660 EtwEventWriteEx 72 3F 0000F610 EtwEventWriteFull 73 40 00077810 EtwEventWriteNoRegistration 74 41 00081390 EtwEventWriteStartScenario 75 42 000F3CC0 EtwEventWriteString 76 43 0000F6F0 EtwEventWriteTransfer 77 44 00075790 EtwGetTraceEnableFlags 78 45 000757D0 EtwGetTraceEnableLevel 79 46 00074C20 EtwGetTraceLoggerHandle 80 47 0007EB10 EtwLogTraceEvent 81 48 00038930 EtwNotificationRegister 82 49 0000E370 EtwNotificationUnregister 83 4A 0000A160 EtwProcessPrivateLoggerRequest 84 4B 00081720 EtwRegisterSecurityProvider 85 4C 00069BE0 EtwRegisterTraceGuidsA 86 4D 00069C20 EtwRegisterTraceGuidsW 87 4E 00002A90 EtwReplyNotification 88 4F 0000EA20 EtwSendNotification 89 50 000F3EF0 EtwSetMark 90 51 000F3F20 EtwTraceEventInstance 91 52 0000E4E0 EtwTraceMessage 92 53 0000E510 EtwTraceMessageVa 93 54 0000E310 EtwUnregisterTraceGuids 94 55 0006DE30 EtwWriteUMSecurityEvent 95 56 00076080 EtwpCreateEtwThread 96 57 0000CAA0 EtwpGetCpuSpeed 97 58 000F4EB0 EvtIntReportAuthzEventAndSourceAsync 98 59 0000E5E0 EvtIntReportEventAndSourceAsync 99 5A 00094FF0 ExpInterlockedPopEntrySListEnd 100 5B 00094FE7 ExpInterlockedPopEntrySListFault 101 5C 00094FD7 ExpInterlockedPopEntrySListResume 102 5D 00095310 KiRaiseUserExceptionDispatcher 103 5E 00095150 KiUserApcDispatcher 104 5F 00095250 KiUserCallbackDispatcher 105 60 000952A0 KiUserExceptionDispatcher 106 61 00157320 KiUserInvertedFunctionTable 107 62 00073690 LdrAccessResource 108 63 00059690 LdrAddDllDirectory 109 64 0006AE70 LdrAddLoadAsDataTable 110 65 0007C880 LdrAddRefDll 111 66 000BAE40 LdrAppxHandleIntegrityFailure 112 67 0006F270 LdrDisableThreadCalloutsForDll 113 68 000CB040 LdrEnumResources 114 69 000754A0 LdrEnumerateLoadedModules 115 6A 000BC670 LdrFastFailInLoaderCallout 116 6B 00069A90 LdrFindEntryForAddress 117 6C 000CB310 LdrFindResourceDirectory_U 118 6D 00074A00 LdrFindResourceEx_U 119 6E 0006FE80 LdrFindResource_U 120 6F 00080390 LdrFlushAlternateResourceModules 121 70 00072060 LdrGetDllDirectory 122 71 0006C070 LdrGetDllFullName 123 72 00018950 LdrGetDllHandle 124 73 0006BD10 LdrGetDllHandleByMapping 125 74 0006CB20 LdrGetDllHandleByName 126 75 000185D0 LdrGetDllHandleEx 127 76 00036750 LdrGetDllPath 128 77 000BC6A0 LdrGetFailureData 129 78 000CB330 LdrGetFileNameFromLoadAsDataTable 130 79 00074080 LdrGetKnownDllSectionHandle 131 7A 00003560 LdrGetProcedureAddress 132 7B 00079CC0 LdrGetProcedureAddressEx 133 7C 00016020 LdrGetProcedureAddressForCaller 134 7D 000BDBA0 LdrInitShimEngineDynamic 135 7E 0006B9A0 LdrInitializeThunk 136 7F 00066340 LdrLoadAlternateResourceModule 137 80 0001C360 LdrLoadAlternateResourceModuleEx 138 81 0001AF60 LdrLoadDll 139 82 000086A0 LdrLockLoaderLock 140 83 000CBE70 LdrOpenImageFileOptionsKey 141 84 000778D0 LdrProcessInitializationComplete 142 85 000CBF60 LdrProcessRelocationBlock 143 86 000CBF90 LdrProcessRelocationBlockEx 144 87 00070D60 LdrQueryImageFileExecutionOptions 145 88 00070DA0 LdrQueryImageFileExecutionOptionsEx 146 89 000710F0 LdrQueryImageFileKeyOption 147 8A 000BC6B0 LdrQueryModuleServiceTags 148 8B 000BCCB0 LdrQueryOptionalDelayLoadedAPI 149 8C 00002FF0 LdrQueryProcessModuleInformation 150 8D 00078530 LdrRegisterDllNotification 151 8E 000C9170 LdrRemoveDllDirectory 152 8F 0006B320 LdrRemoveLoadAsDataTable 153 90 000CC450 LdrResFindResource 154 91 0006D940 LdrResFindResourceDirectory 155 92 00056B30 LdrResGetRCConfig 156 93 00080D20 LdrResRelease 157 94 0001AAA0 LdrResSearchResource 158 95 00016DF0 LdrResolveDelayLoadedAPI 159 96 000BCD90 LdrResolveDelayLoadsFromDll 160 97 0001A8A0 LdrRscIsTypeExist 161 98 000759D0 LdrSetAppCompatDllRedirectionCallback 162 99 00077980 LdrSetDefaultDllDirectories 163 9A 00001540 LdrSetDllDirectory 164 9B 00076DB0 LdrSetDllManifestProber 165 9C 000BCB30 LdrSetImplicitPathOptions 166 9D 00081760 LdrSetMUICacheType 167 9E 00044390 LdrShutdownProcess 168 9F 00021580 LdrShutdownThread 169 A0 000756F0 LdrStandardizeSystemPath 170 A1 00157290 LdrSystemDllInitBlock 171 A2 00043260 LdrUnloadAlternateResourceModule 172 A3 00043270 LdrUnloadAlternateResourceModuleEx 173 A4 00038190 LdrUnloadDll 174 A5 00070620 LdrUnlockLoaderLock 175 A6 000BCB90 LdrUnregisterDllNotification 176 A7 000BCC40 LdrVerifyImageMatchesChecksum 177 A8 0007ED70 LdrVerifyImageMatchesChecksumEx 178 A9 0001ADA0 LdrpResGetMappingSize 179 AA 00018C10 LdrpResGetResourceDirectory 180 AB 000F3910 MD4Final 181 AC 000F39E0 MD4Init 182 AD 000F3A10 MD4Update 183 AE 00062340 MD5Final 184 AF 000741E0 MD5Init 185 B0 00062410 MD5Update 186 B1 00144B42 NlsAnsiCodePage 187 B2 00144FA3 NlsMbCodePageTag 188 B3 00144FA2 NlsMbOemCodePageTag 189 B4 00093390 NtAcceptConnectPort 190 B5 00093370 NtAccessCheck 191 B6 00093600 NtAccessCheckAndAuditAlarm 192 B7 000939A0 NtAccessCheckByType 193 B8 00093900 NtAccessCheckByTypeAndAuditAlarm 194 B9 000939B0 NtAccessCheckByTypeResultList 195 BA 000939C0 NtAccessCheckByTypeResultListAndAuditAlarm 196 BB 000939D0 NtAccessCheckByTypeResultListAndAuditAlarmByHandle 197 BC 000937E0 NtAddAtom 198 BD 000939E0 NtAddAtomEx 199 BE 000939F0 NtAddBootEntry 200 BF 00093A00 NtAddDriverEntry 201 C0 00093A10 NtAdjustGroupsToken 202 C1 00093780 NtAdjustPrivilegesToken 203 C2 00093A20 NtAdjustTokenClaimsAndDeviceGroups 204 C3 00093A30 NtAlertResumeThread 205 C4 00093A40 NtAlertThread 206 C5 00093A50 NtAlertThreadByThreadId 207 C6 00093A60 NtAllocateLocallyUniqueId 208 C7 00093A70 NtAllocateReserveObject 209 C8 00093A80 NtAllocateUserPhysicalPages 210 C9 00093A90 NtAllocateUuids 211 CA 000934F0 NtAllocateVirtualMemory 212 CB 00093AA0 NtAlpcAcceptConnectPort 213 CC 00093AB0 NtAlpcCancelMessage 214 CD 00093AC0 NtAlpcConnectPort 215 CE 00093AD0 NtAlpcConnectPortEx 216 CF 00093AE0 NtAlpcCreatePort 217 D0 00093AF0 NtAlpcCreatePortSection 218 D1 00093B00 NtAlpcCreateResourceReserve 219 D2 00093B10 NtAlpcCreateSectionView 220 D3 00093B20 NtAlpcCreateSecurityContext 221 D4 00093B30 NtAlpcDeletePortSection 222 D5 00093B40 NtAlpcDeleteResourceReserve 223 D6 00093B50 NtAlpcDeleteSectionView 224 D7 00093B60 NtAlpcDeleteSecurityContext 225 D8 00093B70 NtAlpcDisconnectPort 226 D9 00093B80 NtAlpcImpersonateClientContainerOfPort 227 DA 00093B90 NtAlpcImpersonateClientOfPort 228 DB 00093BA0 NtAlpcOpenSenderProcess 229 DC 00093BB0 NtAlpcOpenSenderThread 230 DD 00093BC0 NtAlpcQueryInformation 231 DE 00093BD0 NtAlpcQueryInformationMessage 232 DF 00093BE0 NtAlpcRevokeSecurityContext 233 E0 00093BF0 NtAlpcSendWaitReceivePort 234 E1 00093C00 NtAlpcSetInformation 235 E2 00093830 NtApphelpCacheControl 236 E3 00093C10 NtAreMappedFilesTheSame 237 E4 00093C20 NtAssignProcessToJobObject 238 E5 00093C30 NtAssociateWaitCompletionPacket 239 E6 000933C0 NtCallbackReturn 240 E7 00093940 NtCancelIoFile 241 E8 00093C40 NtCancelIoFileEx 242 E9 00093C50 NtCancelSynchronousIoFile 243 EA 00093980 NtCancelTimer 244 EB 00093C60 NtCancelTimer2 245 EC 00093C70 NtCancelWaitCompletionPacket 246 ED 00093750 NtClearEvent 247 EE 00093460 NtClose 248 EF 00093720 NtCloseObjectAuditAlarm 249 F0 00093C80 NtCommitComplete 250 F1 00093C90 NtCommitEnlistment 251 F2 00093CA0 NtCommitTransaction 252 F3 00093CB0 NtCompactKeys 253 F4 00093CC0 NtCompareObjects 254 F5 00093CD0 NtCompareTokens 255 F6 00093CE0 NtCompleteConnectPort 256 F7 00093CF0 NtCompressKey 257 F8 00093D00 NtConnectPort 258 F9 000937A0 NtContinue 259 FA 00093D10 NtCreateDebugObject 260 FB 00093D20 NtCreateDirectoryObject 261 FC 00093D30 NtCreateDirectoryObjectEx 262 FD 00093D40 NtCreateEnlistment 263 FE 000937F0 NtCreateEvent 264 FF 00093D50 NtCreateEventPair 265 100 000938C0 NtCreateFile 266 101 00093D60 NtCreateIRTimer 267 102 00093D70 NtCreateIoCompletion 268 103 00093D80 NtCreateJobObject 269 104 00093D90 NtCreateJobSet 270 105 00093540 NtCreateKey 271 106 00093DA0 NtCreateKeyTransacted 272 107 00093DB0 NtCreateKeyedEvent 273 108 00093DC0 NtCreateLowBoxToken 274 109 00093DD0 NtCreateMailslotFile 275 10A 00093DE0 NtCreateMutant 276 10B 00093DF0 NtCreateNamedPipeFile 277 10C 00093E00 NtCreatePagingFile 278 10D 00093E10 NtCreatePartition 279 10E 00093E20 NtCreatePort 280 10F 00093E30 NtCreatePrivateNamespace 281 110 00093E40 NtCreateProcess 282 111 00093840 NtCreateProcessEx 283 112 00093E50 NtCreateProfile 284 113 00093E60 NtCreateProfileEx 285 114 00093E70 NtCreateResourceManager 286 115 00093810 NtCreateSection 287 116 00093E80 NtCreateSemaphore 288 117 00093E90 NtCreateSymbolicLinkObject 289 118 00093850 NtCreateThread 290 119 00093EA0 NtCreateThreadEx 291 11A 00093EB0 NtCreateTimer 292 11B 00093EC0 NtCreateTimer2 293 11C 00093ED0 NtCreateToken 294 11D 00093EE0 NtCreateTokenEx 295 11E 00093EF0 NtCreateTransaction 296 11F 00093F00 NtCreateTransactionManager 297 120 00093F10 NtCreateUserProcess 298 121 00093F20 NtCreateWaitCompletionPacket 299 122 00093F30 NtCreateWaitablePort 300 123 00093F40 NtCreateWnfStateName 301 124 00093F50 NtCreateWorkerFactory 302 125 00093F60 NtDebugActiveProcess 303 126 00093F70 NtDebugContinue 304 127 000936B0 NtDelayExecution 305 128 00093F80 NtDeleteAtom 306 129 00093F90 NtDeleteBootEntry 307 12A 00093FA0 NtDeleteDriverEntry 308 12B 00093FB0 NtDeleteFile 309 12C 00093FC0 NtDeleteKey 310 12D 00093FD0 NtDeleteObjectAuditAlarm 311 12E 00093FE0 NtDeletePrivateNamespace 312 12F 00093FF0 NtDeleteValueKey 313 130 00094000 NtDeleteWnfStateData 314 131 00094010 NtDeleteWnfStateName 315 132 000933E0 NtDeviceIoControlFile 316 133 00094020 NtDisableLastKnownGood 317 134 00094030 NtDisplayString 318 135 00094040 NtDrawText 319 136 00093730 NtDuplicateObject 320 137 00093790 NtDuplicateToken 321 138 00094050 NtEnableLastKnownGood 322 139 00094060 NtEnumerateBootEntries 323 13A 00094070 NtEnumerateDriverEntries 324 13B 00093690 NtEnumerateKey 325 13C 00094080 NtEnumerateSystemEnvironmentValuesEx 326 13D 00094090 NtEnumerateTransactionObject 327 13E 000934A0 NtEnumerateValueKey 328 13F 000940A0 NtExtendSection 329 140 000940B0 NtFilterBootOption 330 141 000940C0 NtFilterToken 331 142 000940D0 NtFilterTokenEx 332 143 000934B0 NtFindAtom 333 144 00093820 NtFlushBuffersFile 334 145 000940E0 NtFlushBuffersFileEx 335 146 000940F0 NtFlushInstallUILanguage 336 147 00094100 NtFlushInstructionCache 337 148 00094110 NtFlushKey 338 149 00094120 NtFlushProcessWriteBuffers 339 14A 00094130 NtFlushVirtualMemory 340 14B 00094140 NtFlushWriteBuffer 341 14C 00094150 NtFreeUserPhysicalPages 342 14D 00093550 NtFreeVirtualMemory 343 14E 00094160 NtFreezeRegistry 344 14F 00094170 NtFreezeTransactions 345 150 00093700 NtFsControlFile 346 151 00094180 NtGetCachedSigningLevel 347 152 00094190 NtGetCompleteWnfStateSubscription 348 153 000941A0 NtGetContextThread 349 154 000941B0 NtGetCurrentProcessorNumber 350 155 000941C0 NtGetCurrentProcessorNumberEx 351 156 000941D0 NtGetDevicePowerState 352 157 000941E0 NtGetMUIRegistryInfo 353 158 000941F0 NtGetNextProcess 354 159 00094200 NtGetNextThread 355 15A 00094210 NtGetNlsSectionPtr 356 15B 00094220 NtGetNotificationResourceManager 357 15C 000CE160 NtGetTickCount 358 15D 00094230 NtGetWriteWatch 359 15E 00094240 NtImpersonateAnonymousToken 360 15F 00093560 NtImpersonateClientOfPort 361 160 00094250 NtImpersonateThread 362 161 00094260 NtInitializeNlsFiles 363 162 00094270 NtInitializeRegistry 364 163 00094280 NtInitiatePowerAction 365 164 00093860 NtIsProcessInJob 366 165 00094290 NtIsSystemResumeAutomatic 367 166 000942A0 NtIsUILanguageComitted 368 167 000942B0 NtListenPort 369 168 000942C0 NtLoadDriver 370 169 000942D0 NtLoadKey 371 16A 000942E0 NtLoadKey2 372 16B 00094F00 NtLoadKey3 373 16C 000942F0 NtLoadKeyEx 374 16D 00094300 NtLockFile 375 16E 00094310 NtLockProductActivationKeys 376 16F 00094320 NtLockRegistryKey 377 170 00094330 NtLockVirtualMemory 378 171 00094340 NtMakePermanentObject 379 172 00094350 NtMakeTemporaryObject 380 173 00094360 NtManagePartition 381 174 00094370 NtMapCMFModule 382 175 00094380 NtMapUserPhysicalPages 383 176 000933A0 NtMapUserPhysicalPagesScatter 384 177 000935F0 NtMapViewOfSection 385 178 00094390 NtModifyBootEntry 386 179 000943A0 NtModifyDriverEntry 387 17A 000943B0 NtNotifyChangeDirectoryFile 388 17B 000943C0 NtNotifyChangeKey 389 17C 000943D0 NtNotifyChangeMultipleKeys 390 17D 000943E0 NtNotifyChangeSession 391 17E 000938F0 NtOpenDirectoryObject 392 17F 000943F0 NtOpenEnlistment 393 180 00093770 NtOpenEvent 394 181 00094400 NtOpenEventPair 395 182 000936A0 NtOpenFile 396 183 00094410 NtOpenIoCompletion 397 184 00094420 NtOpenJobObject 398 185 00093490 NtOpenKey 399 186 00094430 NtOpenKeyEx 400 187 00094440 NtOpenKeyTransacted 401 188 00094450 NtOpenKeyTransactedEx 402 189 00094460 NtOpenKeyedEvent 403 18A 00094470 NtOpenMutant 404 18B 00094480 NtOpenObjectAuditAlarm 405 18C 00094490 NtOpenPartition 406 18D 000944A0 NtOpenPrivateNamespace 407 18E 000935D0 NtOpenProcess 408 18F 000944B0 NtOpenProcessToken 409 190 00093670 NtOpenProcessTokenEx 410 191 000944C0 NtOpenResourceManager 411 192 000936E0 NtOpenSection 412 193 000944D0 NtOpenSemaphore 413 194 000944E0 NtOpenSession 414 195 000944F0 NtOpenSymbolicLinkObject 415 196 00094500 NtOpenThread 416 197 000935B0 NtOpenThreadToken 417 198 00093660 NtOpenThreadTokenEx 418 199 00094510 NtOpenTimer 419 19A 00094520 NtOpenTransaction 420 19B 00094530 NtOpenTransactionManager 421 19C 00094540 NtPlugPlayControl 422 19D 00093960 NtPowerInformation 423 19E 00094550 NtPrePrepareComplete 424 19F 00094560 NtPrePrepareEnlistment 425 1A0 00094570 NtPrepareComplete 426 1A1 00094580 NtPrepareEnlistment 427 1A2 00094590 NtPrivilegeCheck 428 1A3 000945A0 NtPrivilegeObjectAuditAlarm 429 1A4 000945B0 NtPrivilegedServiceAuditAlarm 430 1A5 000945C0 NtPropagationComplete 431 1A6 000945D0 NtPropagationFailed 432 1A7 00093870 NtProtectVirtualMemory 433 1A8 000945E0 NtPulseEvent 434 1A9 00093740 NtQueryAttributesFile 435 1AA 000945F0 NtQueryBootEntryOrder 436 1AB 00094600 NtQueryBootOptions 437 1AC 00094610 NtQueryDebugFilterState 438 1AD 000934C0 NtQueryDefaultLocale 439 1AE 000937B0 NtQueryDefaultUILanguage 440 1AF 000936C0 NtQueryDirectoryFile 441 1B0 00094620 NtQueryDirectoryObject 442 1B1 00094630 NtQueryDriverEntryOrder 443 1B2 00094640 NtQueryEaFile 444 1B3 000938D0 NtQueryEvent 445 1B4 00094650 NtQueryFullAttributesFile 446 1B5 00094660 NtQueryInformationAtom 447 1B6 00094670 NtQueryInformationEnlistment 448 1B7 00093480 NtQueryInformationFile 449 1B8 00094680 NtQueryInformationJobObject 450 1B9 00094690 NtQueryInformationPort 451 1BA 00093500 NtQueryInformationProcess 452 1BB 000946A0 NtQueryInformationResourceManager 453 1BC 000935C0 NtQueryInformationThread 454 1BD 00093580 NtQueryInformationToken 455 1BE 000946B0 NtQueryInformationTransaction 456 1BF 000946C0 NtQueryInformationTransactionManager 457 1C0 000946D0 NtQueryInformationWorkerFactory 458 1C1 000946E0 NtQueryInstallUILanguage 459 1C2 000946F0 NtQueryIntervalProfile 460 1C3 00094700 NtQueryIoCompletion 461 1C4 000934D0 NtQueryKey 462 1C5 00094710 NtQueryLicenseValue 463 1C6 00094720 NtQueryMultipleValueKey 464 1C7 00094730 NtQueryMutant 465 1C8 00093470 NtQueryObject 466 1C9 00094740 NtQueryOpenSubKeys 467 1CA 00094750 NtQueryOpenSubKeysEx 468 1CB 00093680 NtQueryPerformanceCounter 469 1CC 00094760 NtQueryPortInformationProcess 470 1CD 00094770 NtQueryQuotaInformationFile 471 1CE 00093880 NtQuerySection 472 1CF 00094780 NtQuerySecurityAttributesToken 473 1D0 00094790 NtQuerySecurityObject 474 1D1 000947A0 NtQuerySemaphore 475 1D2 000947B0 NtQuerySymbolicLinkObject 476 1D3 000947C0 NtQuerySystemEnvironmentValue 477 1D4 000947D0 NtQuerySystemEnvironmentValueEx 478 1D5 000936D0 NtQuerySystemInformation 479 1D6 000947E0 NtQuerySystemInformationEx 480 1D7 00093910 NtQuerySystemTime 481 1D8 000936F0 NtQueryTimer 482 1D9 000947F0 NtQueryTimerResolution 483 1DA 000934E0 NtQueryValueKey 484 1DB 000935A0 NtQueryVirtualMemory 485 1DC 00093800 NtQueryVolumeInformationFile 486 1DD 00094800 NtQueryWnfStateData 487 1DE 00094810 NtQueryWnfStateNameInformation 488 1DF 000937C0 NtQueueApcThread 489 1E0 00094820 NtQueueApcThreadEx 490 1E1 00094830 NtRaiseException 491 1E2 00094840 NtRaiseHardError 492 1E3 000933D0 NtReadFile 493 1E4 00093650 NtReadFileScatter 494 1E5 00094850 NtReadOnlyEnlistment 495 1E6 000938B0 NtReadRequestData 496 1E7 00093760 NtReadVirtualMemory 497 1E8 00094860 NtRecoverEnlistment 498 1E9 00094870 NtRecoverResourceManager 499 1EA 00094880 NtRecoverTransactionManager 500 1EB 00094890 NtRegisterProtocolAddressInformation 501 1EC 000948A0 NtRegisterThreadTerminatePort 502 1ED 000948B0 NtReleaseKeyedEvent 503 1EE 00093570 NtReleaseMutant 504 1EF 00093410 NtReleaseSemaphore 505 1F0 000948C0 NtReleaseWorkerFactoryWorker 506 1F1 00093400 NtRemoveIoCompletion 507 1F2 000948D0 NtRemoveIoCompletionEx 508 1F3 000948E0 NtRemoveProcessDebug 509 1F4 000948F0 NtRenameKey 510 1F5 00094900 NtRenameTransactionManager 511 1F6 00094910 NtReplaceKey 512 1F7 00094920 NtReplacePartitionUnit 513 1F8 00093430 NtReplyPort 514 1F9 00093420 NtReplyWaitReceivePort 515 1FA 00093620 NtReplyWaitReceivePortEx 516 1FB 00094930 NtReplyWaitReplyPort 517 1FC 00094940 NtRequestPort 518 1FD 00093590 NtRequestWaitReplyPort 519 1FE 00094950 NtResetEvent 520 1FF 00094960 NtResetWriteWatch 521 200 00094970 NtRestoreKey 522 201 00094980 NtResumeProcess 523 202 00093890 NtResumeThread 524 203 00094990 NtRevertContainerImpersonation 525 204 000949A0 NtRollbackComplete 526 205 000949B0 NtRollbackEnlistment 527 206 000949C0 NtRollbackTransaction 528 207 000949D0 NtRollforwardTransactionManager 529 208 000949E0 NtSaveKey 530 209 000949F0 NtSaveKeyEx 531 20A 00094A00 NtSaveMergedKeys 532 20B 00094A10 NtSecureConnectPort 533 20C 00094A20 NtSerializeBoot 534 20D 00094A30 NtSetBootEntryOrder 535 20E 00094A40 NtSetBootOptions 536 20F 00094A50 NtSetCachedSigningLevel 537 210 00094A60 NtSetContextThread 538 211 00094A70 NtSetDebugFilterState 539 212 00094A80 NtSetDefaultHardErrorPort 540 213 00094A90 NtSetDefaultLocale 541 214 00094AA0 NtSetDefaultUILanguage 542 215 00094AB0 NtSetDriverEntryOrder 543 216 00094AC0 NtSetEaFile 544 217 00093450 NtSetEvent 545 218 00093640 NtSetEventBoostPriority 546 219 00094AD0 NtSetHighEventPair 547 21A 00094AE0 NtSetHighWaitLowEventPair 548 21B 00094AF0 NtSetIRTimer 549 21C 00094B00 NtSetInformationDebugObject 550 21D 00094B10 NtSetInformationEnlistment 551 21E 000935E0 NtSetInformationFile 552 21F 00094B20 NtSetInformationJobObject 553 220 00094B30 NtSetInformationKey 554 221 00093930 NtSetInformationObject 555 222 00093530 NtSetInformationProcess 556 223 00094B40 NtSetInformationResourceManager 557 224 00094B50 NtSetInformationSymbolicLink 558 225 00093440 NtSetInformationThread 559 226 00094B60 NtSetInformationToken 560 227 00094B70 NtSetInformationTransaction 561 228 00094B80 NtSetInformationTransactionManager 562 229 00094B90 NtSetInformationVirtualMemory 563 22A 00094BA0 NtSetInformationWorkerFactory 564 22B 00094BB0 NtSetIntervalProfile 565 22C 00094BC0 NtSetIoCompletion 566 22D 00094BD0 NtSetIoCompletionEx 567 22E 00094BE0 NtSetLdtEntries 568 22F 00094BF0 NtSetLowEventPair 569 230 00094C00 NtSetLowWaitHighEventPair 570 231 00094C10 NtSetQuotaInformationFile 571 232 00094C20 NtSetSecurityObject 572 233 00094C30 NtSetSystemEnvironmentValue 573 234 00094C40 NtSetSystemEnvironmentValueEx 574 235 00094C50 NtSetSystemInformation 575 236 00094C60 NtSetSystemPowerState 576 237 00094C70 NtSetSystemTime 577 238 00094C80 NtSetThreadExecutionState 578 239 00093990 NtSetTimer 579 23A 00094C90 NtSetTimer2 580 23B 00094CA0 NtSetTimerEx 581 23C 00094CB0 NtSetTimerResolution 582 23D 00094CC0 NtSetUuidSeed 583 23E 00093970 NtSetValueKey 584 23F 00094CD0 NtSetVolumeInformationFile 585 240 00094CE0 NtSetWnfProcessNotificationEvent 586 241 00094CF0 NtShutdownSystem 587 242 00094D00 NtShutdownWorkerFactory 588 243 00094D10 NtSignalAndWaitForSingleObject 589 244 00094D20 NtSinglePhaseReject 590 245 00094D30 NtStartProfile 591 246 00094D40 NtStopProfile 592 247 00094D50 NtSubscribeWnfStateChange 593 248 00094D60 NtSuspendProcess 594 249 00094D70 NtSuspendThread 595 24A 00094D80 NtSystemDebugControl 596 24B 00094D90 NtTerminateJobObject 597 24C 00093630 NtTerminateProcess 598 24D 000938A0 NtTerminateThread 599 24E 00094DA0 NtTestAlert 600 24F 00094DB0 NtThawRegistry 601 250 00094DC0 NtThawTransactions 602 251 00094DD0 NtTraceControl 603 252 00093950 NtTraceEvent 604 253 00094DE0 NtTranslateFilePath 605 254 00094DF0 NtUmsThreadYield 606 255 00094E00 NtUnloadDriver 607 256 00094E10 NtUnloadKey 608 257 00094E20 NtUnloadKey2 609 258 00094E30 NtUnloadKeyEx 610 259 00094E40 NtUnlockFile 611 25A 00094E50 NtUnlockVirtualMemory 612 25B 00093610 NtUnmapViewOfSection 613 25C 00094E60 NtUnmapViewOfSectionEx 614 25D 00094E70 NtUnsubscribeWnfStateChange 615 25E 00094E80 NtUpdateWnfStateData 616 25F 00094E90 NtVdmControl 617 260 00094EA0 NtWaitForAlertByThreadId 618 261 00094EB0 NtWaitForDebugEvent 619 262 00094EC0 NtWaitForKeyedEvent 620 263 00093920 NtWaitForMultipleObjects 621 264 00093510 NtWaitForMultipleObjects32 622 265 000933B0 NtWaitForSingleObject 623 266 00094ED0 NtWaitForWorkViaWorkerFactory 624 267 00094EE0 NtWaitHighEventPair 625 268 00094EF0 NtWaitLowEventPair 626 269 00093380 NtWorkerFactoryWorkerReady 627 26A 000933F0 NtWriteFile 628 26B 00093520 NtWriteFileGather 629 26C 000938E0 NtWriteRequestData 630 26D 00093710 NtWriteVirtualMemory 631 26E 000937D0 NtYieldExecution 632 26F 00093060 NtdllDefWindowProc_A 633 270 00093070 NtdllDefWindowProc_W 634 271 00093120 NtdllDialogWndProc_A 635 272 00093130 NtdllDialogWndProc_W 636 273 000CE430 PfxFindPrefix 637 274 000CE510 PfxInitialize 638 275 000CE530 PfxInsertPrefix 639 276 000CE650 PfxRemovePrefix 640 277 00058B60 PssNtCaptureSnapshot 641 278 000833D0 PssNtDuplicateSnapshot 642 279 000F6620 PssNtFreeRemoteSnapshot 643 27A 000593C0 PssNtFreeSnapshot 644 27B 00083440 PssNtFreeWalkMarker 645 27C 00081EA0 PssNtQuerySnapshot 646 27D 00059530 PssNtValidateDescriptor 647 27E 000817F0 PssNtWalkSnapshot 648 27F 0007DED0 RtlAbortRXact 649 280 00063EB0 RtlAbsoluteToSelfRelativeSD 650 281 00038170 RtlAcquirePebLock 651 282 0006E1E0 RtlAcquirePrivilege 652 283 0006C4E0 RtlAcquireReleaseSRWLockExclusive 653 284 000618F0 RtlAcquireResourceExclusive 654 285 000617A0 RtlAcquireResourceShared 655 286 0002A1D0 RtlAcquireSRWLockExclusive 656 287 00030590 RtlAcquireSRWLockShared 657 288 000532D0 RtlActivateActivationContext 658 289 00053320 RtlActivateActivationContextEx 659 28A 00021A70 RtlActivateActivationContextUnsafeFast 660 28B 0001FAC0 RtlAddAccessAllowedAce 661 28C 00070BA0 RtlAddAccessAllowedAceEx 662 28D 00073900 RtlAddAccessAllowedObjectAce 663 28E 00078EC0 RtlAddAccessDeniedAce 664 28F 00078940 RtlAddAccessDeniedAceEx 665 290 00073850 RtlAddAccessDeniedObjectAce 666 291 00066920 RtlAddAce 667 292 00075B40 RtlAddActionToRXact 668 293 00051DA0 RtlAddAtomToAtomTable 669 294 00075BC0 RtlAddAttributeActionToRXact 670 295 00078360 RtlAddAuditAccessAce 671 296 00077340 RtlAddAuditAccessAceEx 672 297 000738A0 RtlAddAuditAccessObjectAce 673 298 000D0500 RtlAddCompoundAce 674 299 000723F0 RtlAddFunctionTable 675 29A 00062E80 RtlAddGrowableFunctionTable 676 29B 000D1E70 RtlAddIntegrityLabelToBoundaryDescriptor 677 29C 0004AA90 RtlAddMandatoryAce 678 29D 00080750 RtlAddProcessTrustLabelAce 679 29E 0003E5E0 RtlAddRefActivationContext 680 29F 000759D0 RtlAddRefMemoryStream 681 2A0 000D0670 RtlAddResourceAttributeAce 682 2A1 00052A80 RtlAddSIDToBoundaryDescriptor 683 2A2 000D09D0 RtlAddScopedPolicyIDAce 684 2A3 00083610 RtlAddVectoredContinueHandler 685 2A4 00066CB0 RtlAddVectoredExceptionHandler 686 2A5 00017410 RtlAddressInSectionTable 687 2A6 0006F080 RtlAdjustPrivilege 688 2A7 0006C960 RtlAllocateActivationContextStack 689 2A8 0004EFA0 RtlAllocateAndInitializeSid 690 2A9 000CE700 RtlAllocateAndInitializeSidEx 691 2AA 00052430 RtlAllocateHandle 692 2AB 0002EAB0 RtlAllocateHeap 693 2AC 000FD010 RtlAllocateMemoryBlockLookaside 694 2AD 000FD0F0 RtlAllocateMemoryZone 695 2AE 00076DD0 RtlAllocateWnfSerializationGroup 696 2AF 00023800 RtlAnsiCharToUnicodeChar 697 2B0 000D2500 RtlAnsiStringToUnicodeSize 698 2B1 00023710 RtlAnsiStringToUnicodeString 699 2B2 000D2560 RtlAppendAsciizToString 700 2B3 000BB960 RtlAppendPathElement 701 2B4 000D25D0 RtlAppendStringToString 702 2B5 0003FE70 RtlAppendUnicodeStringToString 703 2B6 0001F7D0 RtlAppendUnicodeToString 704 2B7 000C6C60 RtlApplicationVerifierStop 705 2B8 0007DDF0 RtlApplyRXact 706 2B9 0007DEA0 RtlApplyRXactNoFlush 707 2BA 000BB470 RtlAppxIsFileOwnedByTrustedInstaller 708 2BB 00071710 RtlAreAllAccessesGranted 709 2BC 000CE7D0 RtlAreAnyAccessesGranted 710 2BD 00077690 RtlAreBitsClear 711 2BE 00063950 RtlAreBitsSet 712 2BF 000D3800 RtlAssert 713 2C0 000745B0 RtlAvlInsertNodeEx 714 2C1 00074210 RtlAvlRemoveNode 715 2C2 000D3930 RtlBarrier 716 2C3 000D3A70 RtlBarrierForDelete 717 2C4 000F5FC0 RtlCancelTimer 718 2C5 0005D5A0 RtlCanonicalizeDomainName 719 2C6 0004A510 RtlCapabilityCheck 720 2C7 000953F0 RtlCaptureContext 721 2C8 00012600 RtlCaptureStackBackTrace 722 2C9 0006DAB0 RtlCharToInteger 723 2CA 0006C9F0 RtlCheckForOrphanedCriticalSections 724 2CB 0000CED0 RtlCheckPortableOperatingSystem 725 2CC 0000D540 RtlCheckRegistryKey 726 2CD 000C2C70 RtlCheckSandboxedToken 727 2CE 0004A810 RtlCheckTokenCapability 728 2CF 000CE7E0 RtlCheckTokenMembership 729 2D0 0004AC70 RtlCheckTokenMembershipEx 730 2D1 00047350 RtlCleanUpTEBLangLists 731 2D2 00058740 RtlClearAllBits 732 2D3 000D26A0 RtlClearBit 733 2D4 00056360 RtlClearBits 734 2D5 000C14B0 RtlCloneMemoryStream 735 2D6 000C23C0 RtlCloneUserProcess 736 2D7 000D7C10 RtlCmDecodeMemIoResource 737 2D8 000D7C80 RtlCmEncodeMemIoResource 738 2D9 000C3580 RtlCommitDebugInfo 739 2DA 000C14B0 RtlCommitMemoryStream 740 2DB 000789C0 RtlCompactHeap 741 2DC 000DB7F0 RtlCompareAltitudes 742 2DD 00095950 RtlCompareMemory 743 2DE 000959D0 RtlCompareMemoryUlong 744 2DF 0007FA20 RtlCompareString 745 2E0 00035550 RtlCompareUnicodeString 746 2E1 00035590 RtlCompareUnicodeStrings 747 2E2 000C26A0 RtlCompleteProcessCloning 748 2E3 0005B050 RtlCompressBuffer 749 2E4 0005D1D0 RtlComputeCrc32 750 2E5 000CA9B0 RtlComputeImportTableHash 751 2E6 000C1150 RtlComputePrivatizedDllName_U 752 2E7 000804F0 RtlConnectToSm 753 2E8 00071720 RtlConsoleMultiByteToUnicodeN 754 2E9 00074AA0 RtlContractHashTable 755 2EA 000455C0 RtlConvertDeviceFamilyInfoToString 756 2EB 00075A50 RtlConvertExclusiveToShared 757 2EC 000D4710 RtlConvertLCIDToString 758 2ED 000D0430 RtlConvertSRWLockExclusiveToShared 759 2EE 00061890 RtlConvertSharedToExclusive 760 2EF 0001FAF0 RtlConvertSidToUnicodeString 761 2F0 000C2FD0 RtlConvertToAutoInheritSecurityObject 762 2F1 000D26B0 RtlCopyBitMap 763 2F2 00066E30 RtlCopyContext 764 2F3 000DBC70 RtlCopyExtendedContext 765 2F4 0006C9E0 RtlCopyLuid 766 2F5 000CE800 RtlCopyLuidAndAttributesArray 767 2F6 00076F60 RtlCopyMappedMemory 768 2F7 00097C40 RtlCopyMemory 769 2F8 00095A00 RtlCopyMemoryNonTemporal 770 2F9 000C14B0 RtlCopyMemoryStreamTo 771 2FA 000C14B0 RtlCopyOutOfProcessMemoryStreamTo 772 2FB 00063C40 RtlCopySecurityDescriptor 773 2FC 0004E670 RtlCopySid 774 2FD 000CE830 RtlCopySidAndAttributesArray 775 2FE 00077640 RtlCopyString 776 2FF 0001FA40 RtlCopyUnicodeString 777 300 000DC3E0 RtlCrc32 778 301 000DC400 RtlCrc64 779 302 0004C940 RtlCreateAcl 780 303 00056410 RtlCreateActivationContext 781 304 0007FC10 RtlCreateAndSetSD 782 305 000789B0 RtlCreateAtomTable 783 306 000DC8C0 RtlCreateBootStatusDataFile 784 307 00076A30 RtlCreateBoundaryDescriptor 785 308 00045F30 RtlCreateEnvironment 786 309 00046570 RtlCreateEnvironmentEx 787 30A 00065460 RtlCreateHashTable 788 30B 000DBB90 RtlCreateHashTableEx 789 30C 00005330 RtlCreateHeap 790 30D 00072720 RtlCreateMemoryBlockLookaside 791 30E 000728F0 RtlCreateMemoryZone 792 30F 000C27B0 RtlCreateProcessParameters 793 310 00045F50 RtlCreateProcessParametersEx 794 311 000C15C0 RtlCreateProcessReflection 795 312 00052C80 RtlCreateQueryDebugBuffer 796 313 000D4050 RtlCreateRegistryKey 797 314 0004E5C0 RtlCreateSecurityDescriptor 798 315 0004EE80 RtlCreateServiceSid 799 316 0007F270 RtlCreateSystemVolumeInformationFolder 800 317 00003610 RtlCreateTagHeap 801 318 0007C410 RtlCreateTimer 802 319 0007A9C0 RtlCreateTimerQueue 803 31A 000DDC20 RtlCreateUmsCompletionList 804 31B 000DDD40 RtlCreateUmsThreadContext 805 31C 00020B50 RtlCreateUnicodeString 806 31D 00020C20 RtlCreateUnicodeStringFromAsciiz 807 31E 0007FF60 RtlCreateUserProcess 808 31F 000C2FE0 RtlCreateUserSecurityObject 809 320 00001780 RtlCreateUserStack 810 321 000760F0 RtlCreateUserThread 811 322 00052A90 RtlCreateVirtualAccountSid 812 323 0001EEE0 RtlCultureNameToLCID 813 324 000CD1A0 RtlCustomCPToUnicodeN 814 325 0005CB50 RtlCutoverTimeToSystemTime 815 326 000C3590 RtlDeCommitDebugInfo 816 327 000C2820 RtlDeNormalizeProcessParams 817 328 00063700 RtlDeactivateActivationContext 818 329 00023B70 RtlDeactivateActivationContextUnsafeFast 819 32A 000756F0 RtlDebugPrintTimes 820 32B 00065F20 RtlDecodePointer 821 32C 000C74B0 RtlDecodeRemotePointer 822 32D 000777E0 RtlDecodeSystemPointer 823 32E 0005A4C0 RtlDecompressBuffer 824 32F 0005A560 RtlDecompressBufferEx 825 330 000DB9F0 RtlDecompressFragment 826 331 00050950 RtlDefaultNpAcl 827 332 00061280 RtlDelete 828 333 0006EFA0 RtlDeleteAce 829 334 00051CA0 RtlDeleteAtomFromAtomTable 830 335 000D3BC0 RtlDeleteBarrier 831 336 00029F80 RtlDeleteBoundaryDescriptor 832 337 000081B0 RtlDeleteCriticalSection 833 338 00060D50 RtlDeleteElementGenericTable 834 339 000604B0 RtlDeleteElementGenericTableAvl 835 33A 00060750 RtlDeleteElementGenericTableAvlEx 836 33B 000701E0 RtlDeleteFunctionTable 837 33C 000706B0 RtlDeleteGrowableFunctionTable 838 33D 00077D20 RtlDeleteHashTable 839 33E 00061320 RtlDeleteNoSplay 840 33F 00081660 RtlDeleteRegistryValue 841 340 00008160 RtlDeleteResource 842 341 000705B0 RtlDeleteSecurityObject 843 342 0007C2C0 RtlDeleteTimer 844 343 000F5FD0 RtlDeleteTimerQueue 845 344 0007A630 RtlDeleteTimerQueueEx 846 345 000DDE50 RtlDeleteUmsCompletionList 847 346 000DDEB0 RtlDeleteUmsThreadContext 848 347 000DDF10 RtlDequeueUmsCompletionListItems 849 348 000DE880 RtlDeregisterSecureMemoryCacheCallback 850 349 0007A620 RtlDeregisterWait 851 34A 0007B3C0 RtlDeregisterWaitEx 852 34B 00050D00 RtlDeriveCapabilitySidsFromName 853 34C 000D1C10 RtlDestroyAtomTable 854 34D 00046550 RtlDestroyEnvironment 855 34E 00078E30 RtlDestroyHandleTable 856 34F 00004920 RtlDestroyHeap 857 350 00078870 RtlDestroyMemoryBlockLookaside 858 351 000788D0 RtlDestroyMemoryZone 859 352 00074990 RtlDestroyProcessParameters 860 353 00069220 RtlDestroyQueryDebugBuffer 861 354 00044990 RtlDetectHeapLeaks 862 355 00057720 RtlDetermineDosPathNameType_U 863 356 000BB660 RtlDisableThreadProfiling 864 357 00038910 RtlDllShutdownInProgress 865 358 0006CF30 RtlDnsHostNameToComputerName 866 359 00079060 RtlDoesFileExists_U 867 35A 00024620 RtlDosApplyFileIsolationRedirection_Ustr 868 35B 0006DB60 RtlDosPathNameToNtPathName_U 869 35C 0001BFF0 RtlDosPathNameToNtPathName_U_WithStatus 870 35D 0001BD70 RtlDosPathNameToRelativeNtPathName_U 871 35E 00025870 RtlDosPathNameToRelativeNtPathName_U_WithStatus 872 35F 00057510 RtlDosSearchPath_U 873 360 0005F890 RtlDosSearchPath_Ustr 874 361 000D2040 RtlDowncaseUnicodeChar 875 362 0006A620 RtlDowncaseUnicodeString 876 363 000C1F00 RtlDumpResource 877 364 0006B800 RtlDuplicateUnicodeString 878 365 000D1CF0 RtlEmptyAtomTable 879 366 000C1F50 RtlEnableEarlyCriticalSectionEventCreation 880 367 000BB6D0 RtlEnableThreadProfiling 881 368 00066DE0 RtlEncodePointer 882 369 000C7520 RtlEncodeRemotePointer 883 36A 00077D00 RtlEncodeSystemPointer 884 36B 00073640 RtlEndEnumerationHashTable 885 36C 000756F0 RtlEndStrongEnumerationHashTable 886 36D 000DBBA0 RtlEndWeakEnumerationHashTable 887 36E 00034F30 RtlEnterCriticalSection 888 36F 000DDFA0 RtlEnterUmsSchedulingMode 889 370 000D8080 RtlEnumProcessHeaps 890 371 00065360 RtlEnumerateEntryHashTable 891 372 00060CC0 RtlEnumerateGenericTable 892 373 00062270 RtlEnumerateGenericTableAvl 893 374 000DE620 RtlEnumerateGenericTableLikeADirectory 894 375 00061720 RtlEnumerateGenericTableWithoutSplaying 895 376 00062290 RtlEnumerateGenericTableWithoutSplayingAvl 896 377 0005D4E0 RtlEqualComputerName 897 378 0005D520 RtlEqualDomainName 898 379 000CE8F0 RtlEqualLuid 899 37A 0004D4E0 RtlEqualPrefixSid 900 37B 0004A430 RtlEqualSid 901 37C 00064E70 RtlEqualString 902 37D 00023CC0 RtlEqualUnicodeString 903 37E 000790C0 RtlEqualWnfChangeStamps 904 37F 00083480 RtlEraseUnicodeString 905 380 000DF690 RtlEthernetAddressToStringA 906 381 000DF8F0 RtlEthernetAddressToStringW 907 382 000DF960 RtlEthernetStringToAddressA 908 383 000DFAB0 RtlEthernetStringToAddressW 909 384 000DE080 RtlExecuteUmsThread 910 385 000442C0 RtlExitUserProcess 911 386 00009FA0 RtlExitUserThread 912 387 00038310 RtlExpandEnvironmentStrings 913 388 0000F480 RtlExpandEnvironmentStrings_U 914 389 00064FA0 RtlExpandHashTable 915 38A 000D1E80 RtlExtendMemoryBlockLookaside 916 38B 000D1EF0 RtlExtendMemoryZone 917 38C 000D28B0 RtlExtractBitMap 918 38D 00095B20 RtlFillMemory 919 38E 000756F0 RtlFinalReleaseOutOfProcessMemoryStream 920 38F 0004D7F0 RtlFindAceByType 921 390 000240F0 RtlFindActivationContextSectionGuid 922 391 00024ED0 RtlFindActivationContextSectionString 923 392 00026DA0 RtlFindCharInUnicodeString 924 393 00001010 RtlFindClearBits 925 394 00055DD0 RtlFindClearBitsAndSet 926 395 000D2A50 RtlFindClearRuns 927 396 000D7D70 RtlFindClosestEncodableLength 928 397 00059F40 RtlFindLastBackwardRunClear 929 398 00078220 RtlFindLeastSignificantBit 930 399 000D2D10 RtlFindLongestRunClear 931 39A 000655B0 RtlFindMessage 932 39B 00078340 RtlFindMostSignificantBit 933 39C 00003180 RtlFindNextForwardRunClear 934 39D 00081040 RtlFindSetBits 935 39E 000D2D50 RtlFindSetBitsAndClear 936 39F 000D20A0 RtlFindUnicodeSubstring 937 3A0 00094FC0 RtlFirstEntrySList 938 3A1 0001FF30 RtlFirstFreeAce 939 3A2 00055BF0 RtlFlsAlloc 940 3A3 00056230 RtlFlsFree 941 3A4 000094D0 RtlFlushHeaps 942 3A5 000DE940 RtlFlushSecureMemoryCache 943 3A6 0001F8D0 RtlFormatCurrentUserKeyPath 944 3A7 000DFBF0 RtlFormatMessage 945 3A8 00010330 RtlFormatMessageEx 946 3A9 00063620 RtlFreeActivationContextStack 947 3AA 00027180 RtlFreeAnsiString 948 3AB 00051C60 RtlFreeHandle 949 3AC 0002A900 RtlFreeHeap 950 3AD 000FD150 RtlFreeMemoryBlockLookaside 951 3AE 00076E70 RtlFreeOemString 952 3AF 0006D900 RtlFreeSid 953 3B0 000635E0 RtlFreeThreadActivationContextStack 954 3B1 00027180 RtlFreeUnicodeString 955 3B2 00002EB0 RtlFreeUserStack 956 3B3 000648E0 RtlGUIDFromString 957 3B4 000DFDF0 RtlGenerate8dot3Name 958 3B5 0006BB40 RtlGetAce 959 3B6 0003DA60 RtlGetActiveActivationContext 960 3B7 0003EB80 RtlGetAppContainerNamedObjectPath 961 3B8 000030B0 RtlGetAppContainerParent 962 3B9 0004A790 RtlGetAppContainerSidType 963 3BA 000D3CE0 RtlGetCallersAddress 964 3BB 00073720 RtlGetCompressionWorkSpaceSize 965 3BC 00070090 RtlGetControlSecurityDescriptor 966 3BD 00068600 RtlGetCriticalSectionRecursionCount 967 3BE 0006F630 RtlGetCurrentDirectory_U 968 3BF 0007EBA0 RtlGetCurrentPeb 969 3C0 00092F60 RtlGetCurrentProcessorNumber 970 3C1 00092F90 RtlGetCurrentProcessorNumberEx 971 3C2 00069F90 RtlGetCurrentTransaction 972 3C3 00061680 RtlGetCurrentUmsThread 973 3C4 0006C720 RtlGetDaclSecurityDescriptor 974 3C5 000456A0 RtlGetDeviceFamilyInfoEnum 975 3C6 00074AE0 RtlGetElementGenericTable 976 3C7 000DE750 RtlGetElementGenericTableAvl 977 3C8 000778B0 RtlGetEnabledExtendedFeatures 978 3C9 00076DF0 RtlGetExePath 979 3CA 000670B0 RtlGetExtendedContextLength 980 3CB 00077930 RtlGetExtendedFeaturesMask 981 3CC 000542E0 RtlGetFileMUIPath 982 3CD 000BC4E0 RtlGetFrame 983 3CE 00054A30 RtlGetFullPathName_U 984 3CF 0001BDA0 RtlGetFullPathName_UEx 985 3D0 0005FE20 RtlGetFullPathName_UstrEx 986 3D1 00079110 RtlGetFunctionTableListHead 987 3D2 000705E0 RtlGetGroupSecurityDescriptor 988 3D3 00052230 RtlGetIntegerAtom 989 3D4 000CE0A0 RtlGetInterruptTimePrecise 990 3D5 00078050 RtlGetLastNtStatus 991 3D6 00079040 RtlGetLastWin32Error 992 3D7 00061E70 RtlGetLengthWithoutLastFullDosOrNtPathElement 993 3D8 00062210 RtlGetLengthWithoutTrailingPathSeperators 994 3D9 00048C00 RtlGetLocaleFileMappingAddress 995 3DA 00077CF0 RtlGetLongestNtPathLength 996 3DB 000936D0 RtlGetNativeSystemInformation 997 3DC 00071470 RtlGetNextEntryHashTable 998 3DD 000DE220 RtlGetNextUmsListItem 999 3DE 000D4090 RtlGetNtGlobalFlags 1000 3DF 00042670 RtlGetNtProductType 1001 3E0 00074B80 RtlGetNtVersionNumbers 1002 3E1 0006F370 RtlGetOwnerSecurityDescriptor 1003 3E2 00049F00 RtlGetParentLocaleName 1004 3E3 0007EC00 RtlGetProcessHeaps 1005 3E4 000D4820 RtlGetProcessPreferredUILanguages 1006 3E5 00072990 RtlGetProductInfo 1007 3E6 0006EF40 RtlGetSaclSecurityDescriptor 1008 3E7 00075670 RtlGetSearchPath 1009 3E8 00075DA0 RtlGetSecurityDescriptorRMControl 1010 3E9 00078070 RtlGetSetBootStatusData 1011 3EA 0006BE50 RtlGetSystemPreferredUILanguages 1012 3EB 00059070 RtlGetSystemTimePrecise 1013 3EC 00072CC0 RtlGetThreadErrorMode 1014 3ED 000D4920 RtlGetThreadLangIdByIndex 1015 3EE 0001D130 RtlGetThreadPreferredUILanguages 1016 3EF 000D49F0 RtlGetUILanguageInfo 1017 3F0 000DE250 RtlGetUmsCompletionListEvent 1018 3F1 000BCCA0 RtlGetUnloadEventTrace 1019 3F2 00078F90 RtlGetUnloadEventTraceEx 1020 3F3 000578B0 RtlGetUserInfoHeap 1021 3F4 0006CBC0 RtlGetUserPreferredUILanguages 1022 3F5 00041EE0 RtlGetVersion 1023 3F6 000CAEC0 RtlGrowFunctionTable 1024 3F7 00026CA0 RtlHashUnicodeString 1025 3F8 000E0E80 RtlHeapTrkInitialize 1026 3F9 0006F260 RtlIdentifierAuthoritySid 1027 3FA 0005D4F0 RtlIdnToAscii 1028 3FB 000E2330 RtlIdnToNameprepUnicode 1029 3FC 0005E4D0 RtlIdnToUnicode 1030 3FD 00016860 RtlImageDirectoryEntryToData 1031 3FE 00016830 RtlImageNtHeader 1032 3FF 00015E10 RtlImageNtHeaderEx 1033 400 00017440 RtlImageRvaToSection 1034 401 000716A0 RtlImageRvaToVa 1035 402 0006E430 RtlImpersonateSelf 1036 403 0006E440 RtlImpersonateSelfEx 1037 404 0006A390 RtlInitAnsiString 1038 405 00020BE0 RtlInitAnsiStringEx 1039 406 000D3C10 RtlInitBarrier 1040 407 00077480 RtlInitCodePageTable 1041 408 00065170 RtlInitEnumerationHashTable 1042 409 000756F0 RtlInitMemoryStream 1043 40A 000CD410 RtlInitNlsTables 1044 40B 000756F0 RtlInitOutOfProcessMemoryStream 1045 40C 0006A390 RtlInitString 1046 40D 000D2630 RtlInitStringEx 1047 40E 000DBBB0 RtlInitStrongEnumerationHashTable 1048 40F 0001F140 RtlInitUnicodeString 1049 410 0001F880 RtlInitUnicodeStringEx 1050 411 000DBBF0 RtlInitWeakEnumerationHashTable 1051 412 000759D0 RtlInitializeAtomPackage 1052 413 0006C060 RtlInitializeBitMap 1053 414 00064CE0 RtlInitializeConditionVariable 1054 415 000E2370 RtlInitializeContext 1055 416 00060AC0 RtlInitializeCriticalSection 1056 417 000603B0 RtlInitializeCriticalSectionAndSpinCount 1057 418 00007900 RtlInitializeCriticalSectionEx 1058 419 00066F90 RtlInitializeExtendedContext 1059 41A 00073810 RtlInitializeGenericTable 1060 41B 00075D40 RtlInitializeGenericTableAvl 1061 41C 00072BB0 RtlInitializeHandleTable 1062 41D 00083790 RtlInitializeNtUserPfn 1063 41E 0007F0A0 RtlInitializeRXact 1064 41F 000076C0 RtlInitializeResource 1065 420 00065F80 RtlInitializeSListHead 1066 421 00064CE0 RtlInitializeSRWLock 1067 422 0004E850 RtlInitializeSid 1068 423 0004EE20 RtlInitializeSidEx 1069 424 00060DF0 RtlInsertElementGenericTable 1070 425 000604F0 RtlInsertElementGenericTableAvl 1071 426 00060E60 RtlInsertElementGenericTableFull 1072 427 00060560 RtlInsertElementGenericTableFullAvl 1073 428 000651E0 RtlInsertEntryHashTable 1074 429 00073E50 RtlInstallFunctionTableCallback 1075 42A 000D3D40 RtlInt64ToUnicodeString 1076 42B 000213F0 RtlIntegerToChar 1077 42C 000214F0 RtlIntegerToUnicodeString 1078 42D 0006E7A0 RtlInterlockedClearBitRun 1079 42E 00068430 RtlInterlockedFlushSList 1080 42F 00094FD0 RtlInterlockedPopEntrySList 1081 430 00060B50 RtlInterlockedPushEntrySList 1082 431 00095080 RtlInterlockedPushListSList 1083 432 000E2630 RtlInterlockedPushListSListEx 1084 433 000D3100 RtlInterlockedSetBitRun 1085 434 000D7E20 RtlIoDecodeMemIoResource 1086 435 000D7EC0 RtlIoEncodeMemIoResource 1087 436 000772C0 RtlIpv4AddressToStringA 1088 437 000DF700 RtlIpv4AddressToStringExA 1089 438 00071C40 RtlIpv4AddressToStringExW 1090 439 00071D10 RtlIpv4AddressToStringW 1091 43A 0006FCB0 RtlIpv4StringToAddressA 1092 43B 0006FC40 RtlIpv4StringToAddressExA 1093 43C 0005E180 RtlIpv4StringToAddressExW 1094 43D 0005E2C0 RtlIpv4StringToAddressW 1095 43E 0000FDD0 RtlIpv6AddressToStringA 1096 43F 000DF7C0 RtlIpv6AddressToStringExA 1097 440 0000F9F0 RtlIpv6AddressToStringExW 1098 441 0000FB40 RtlIpv6AddressToStringW 1099 442 00068090 RtlIpv6StringToAddressA 1100 443 00067FE0 RtlIpv6StringToAddressExA 1101 444 0005D7A0 RtlIpv6StringToAddressExW 1102 445 0005D920 RtlIpv6StringToAddressW 1103 446 000C9EB0 RtlIsActivationContextActive 1104 447 0004E6B0 RtlIsCapabilitySid 1105 448 000C1F80 RtlIsCriticalSectionLocked 1106 449 00040920 RtlIsCriticalSectionLockedByThread 1107 44A 000C28E0 RtlIsCurrentThreadAttachExempt 1108 44B 0006FF00 RtlIsDosDeviceName_U 1109 44C 00060D40 RtlIsGenericTableEmpty 1110 44D 000DE870 RtlIsGenericTableEmptyAvl 1111 44E 0004A170 RtlIsMultiSessionSku 1112 44F 000E2690 RtlIsNameInExpression 1113 450 000E0270 RtlIsNameLegalDOS8Dot3 1114 451 000E3F10 RtlIsNormalizedString 1115 452 00075AF0 RtlIsPackageSid 1116 453 00047B30 RtlIsParentOfChildAppContainer 1117 454 00071F20 RtlIsProcessorFeaturePresent 1118 455 0005A000 RtlIsTextUnicode 1119 456 00076D70 RtlIsThreadWithinLoaderCallout 1120 457 000CE910 RtlIsUntrustedObject 1121 458 00052370 RtlIsValidHandle 1122 459 00052330 RtlIsValidIndexHandle 1123 45A 000E0570 RtlIsValidLocaleName 1124 45B 0004E600 RtlIsValidProcessTrustLabelSid 1125 45C 00003020 RtlKnownExceptionFilter 1126 45D 0001EA10 RtlLCIDToCultureName 1127 45E 000D3DE0 RtlLargeIntegerToChar 1128 45F 0001F190 RtlLcidToLocaleName 1129 460 00034480 RtlLeaveCriticalSection 1130 461 0004F0B0 RtlLengthRequiredSid 1131 462 00066770 RtlLengthSecurityDescriptor 1132 463 00061700 RtlLengthSid 1133 464 0001F9E0 RtlLengthSidAsUnicodeString 1134 465 00066110 RtlLoadString 1135 466 000CE180 RtlLocalTimeToSystemTime 1136 467 0001F480 RtlLocaleNameToLcid 1137 468 000DBC90 RtlLocateExtendedFeature 1138 469 000756B0 RtlLocateLegacyContext 1139 46A 00078CF0 RtlLockBootStatusData 1140 46B 00077AD0 RtlLockCurrentThread 1141 46C 000271B0 RtlLockHeap 1142 46D 00074EE0 RtlLockMemoryBlockLookaside 1143 46E 000C14B0 RtlLockMemoryStreamRegion 1144 46F 00074F50 RtlLockMemoryZone 1145 470 000752B0 RtlLockModuleSection 1146 471 000E4780 RtlLogStackBackTrace 1147 472 00051FC0 RtlLookupAtomInAtomTable 1148 473 00060F80 RtlLookupElementGenericTable 1149 474 00060B60 RtlLookupElementGenericTableAvl 1150 475 000DE5D0 RtlLookupElementGenericTableFull 1151 476 00060470 RtlLookupElementGenericTableFullAvl 1152 477 00065270 RtlLookupEntryHashTable 1153 478 00014E40 RtlLookupFunctionEntry 1154 479 000CAFC0 RtlLookupFunctionTable 1155 47A 00063ED0 RtlMakeSelfRelativeSD 1156 47B 0004D5A0 RtlMapGenericMask 1157 47C 00079070 RtlMapSecurityErrorToNtStatus 1158 47D 00097C40 RtlMoveMemory 1159 47E 00068440 RtlMultiAppendUnicodeStringBuffer 1160 47F 00023880 RtlMultiByteToUnicodeN 1161 480 00077310 RtlMultiByteToUnicodeSize 1162 481 000D82F0 RtlMultipleAllocateHeap 1163 482 000D8370 RtlMultipleFreeHeap 1164 483 000C3060 RtlNewInstanceSecurityObject 1165 484 000C3170 RtlNewSecurityGrantedAccess 1166 485 00047BE0 RtlNewSecurityObject 1167 486 0004AC00 RtlNewSecurityObjectEx 1168 487 00048A00 RtlNewSecurityObjectWithMultipleInheritance 1169 488 000802F0 RtlNormalizeProcessParams 1170 489 0005EC40 RtlNormalizeString 1171 48A 000BBBC0 RtlNtPathNameToDosPathName 1172 48B 0000F0C0 RtlNtStatusToDosError 1173 48C 0006DB90 RtlNtStatusToDosErrorNoTeb 1174 48D 0010CB20 RtlNtdllName 1175 48E 00077680 RtlNumberGenericTableElements 1176 48F 00077040 RtlNumberGenericTableElementsAvl 1177 490 000D31C0 RtlNumberOfClearBits 1178 491 000D31E0 RtlNumberOfClearBitsInRange 1179 492 000D3210 RtlNumberOfSetBits 1180 493 000D33C0 RtlNumberOfSetBitsInRange 1181 494 00078DD0 RtlNumberOfSetBitsUlongPtr 1182 495 000D2500 RtlOemStringToUnicodeSize 1183 496 0006D030 RtlOemStringToUnicodeString 1184 497 0006D120 RtlOemToUnicodeN 1185 498 00049900 RtlOpenCurrentUser 1186 499 000E51D0 RtlOsDeploymentState 1187 49A 0007ED60 RtlOwnerAcesPresent 1188 49B 00018580 RtlPcToFileHeader 1189 49C 000D1DB0 RtlPinAtomInAtomTable 1190 49D 00063930 RtlPopFrame 1191 49E 00064DE0 RtlPrefixString 1192 49F 00062130 RtlPrefixUnicodeString 1193 4A0 000C2920 RtlPrepareForProcessCloning 1194 4A1 00044810 RtlProcessFlsData 1195 4A2 00005E30 RtlProtectHeap 1196 4A3 00072E70 RtlPublishWnfStateData 1197 4A4 00063340 RtlPushFrame 1198 4A5 00071510 RtlQueryActivationContextApplicationSettings 1199 4A6 000527A0 RtlQueryAtomInAtomTable 1200 4A7 000C1FA0 RtlQueryCriticalSectionOwner 1201 4A8 00064C70 RtlQueryDepthSList 1202 4A9 000D40B0 RtlQueryDynamicTimeZoneInformation 1203 4AA 000726E0 RtlQueryElevationFlags 1204 4AB 00035150 RtlQueryEnvironmentVariable 1205 4AC 00046840 RtlQueryEnvironmentVariable_U 1206 4AD 00078680 RtlQueryHeapInformation 1207 4AE 0006FBB0 RtlQueryInformationAcl 1208 4AF 0003DF30 RtlQueryInformationActivationContext 1209 4B0 00074B50 RtlQueryInformationActiveActivationContext 1210 4B1 000C14B0 RtlQueryInterfaceMemoryStream 1211 4B2 000CC1F0 RtlQueryModuleInformation 1212 4B3 00064510 RtlQueryPackageClaims 1213 4B4 00064450 RtlQueryPackageIdentity 1214 4B5 000644A0 RtlQueryPackageIdentityEx 1215 4B6 00059130 RtlQueryPerformanceCounter 1216 4B7 00065FB0 RtlQueryPerformanceFrequency 1217 4B8 000C35A0 RtlQueryProcessBackTraceInformation 1218 4B9 00068620 RtlQueryProcessDebugInformation 1219 4BA 000C3730 RtlQueryProcessHeapInformation 1220 4BB 000C3B10 RtlQueryProcessLockInformation 1221 4BC 00078970 RtlQueryProtectedPolicy 1222 4BD 000D40C0 RtlQueryRegistryValues 1223 4BE 0000D730 RtlQueryRegistryValuesEx 1224 4BF 00004FE0 RtlQueryResourcePolicy 1225 4C0 000C32B0 RtlQuerySecurityObject 1226 4C1 000D83E0 RtlQueryTagHeap 1227 4C2 000BB7D0 RtlQueryThreadProfiling 1228 4C3 0000CF90 RtlQueryTimeZoneInformation 1229 4C4 000DE2B0 RtlQueryUmsThreadInformation 1230 4C5 000713A0 RtlQueryUnbiasedInterruptTime 1231 4C6 000E55F0 RtlQueryValidationRunlevel 1232 4C7 00078260 RtlQueryWnfMetaNotification 1233 4C8 0006D830 RtlQueryWnfStateData 1234 4C9 00076E90 RtlQueryWnfStateDataWithExplicitScope 1235 4CA 000C6E80 RtlQueueApcWow64Thread 1236 4CB 0007BFA0 RtlQueueWorkItem 1237 4CC 00011EA0 RtlRaiseException 1238 4CD 00092D30 RtlRaiseStatus 1239 4CE 0006E120 RtlRandom 1240 4CF 0006E120 RtlRandomEx 1241 4D0 000277C0 RtlRbInsertNodeEx 1242 4D1 00027E20 RtlRbRemoveNode 1243 4D2 0002D790 RtlReAllocateHeap 1244 4D3 000C14B0 RtlReadMemoryStream 1245 4D4 000C14B0 RtlReadOutOfProcessMemoryStream 1246 4D5 000BB800 RtlReadThreadProfilingData 1247 4D6 000DE550 RtlRealPredecessor 1248 4D7 00061530 RtlRealSuccessor 1249 4D8 00076C70 RtlRegisterForWnfMetaNotification 1250 4D9 000DE9B0 RtlRegisterSecureMemoryCacheCallback 1251 4DA 00072280 RtlRegisterThreadWithCsrss 1252 4DB 0007B9A0 RtlRegisterWait 1253 4DC 0003D740 RtlReleaseActivationContext 1254 4DD 000759D0 RtlReleaseMemoryStream 1255 4DE 00035800 RtlReleasePath 1256 4DF 00038010 RtlReleasePebLock 1257 4E0 000770B0 RtlReleasePrivilege 1258 4E1 000542A0 RtlReleaseRelativeName 1259 4E2 000619F0 RtlReleaseResource 1260 4E3 000331E0 RtlReleaseSRWLockExclusive 1261 4E4 000304B0 RtlReleaseSRWLockShared 1262 4E5 000E24A0 RtlRemoteCall 1263 4E6 00070D00 RtlRemoveEntryHashTable 1264 4E7 0007FAD0 RtlRemovePrivileges 1265 4E8 000C4B50 RtlRemoveVectoredContinueHandler 1266 4E9 000758E0 RtlRemoveVectoredExceptionHandler 1267 4EA 000CEAA0 RtlReplaceSidInSd 1268 4EB 000C75D0 RtlReportException 1269 4EC 00044600 RtlReportSilentProcessExit 1270 4ED 000C7CE0 RtlReportSqmEscalation 1271 4EE 000D1E90 RtlResetMemoryBlockLookaside 1272 4EF 000D1FF0 RtlResetMemoryZone 1273 4F0 00083970 RtlResetNtUserPfn 1274 4F1 000CD480 RtlResetRtlTranslations 1275 4F2 000714B0 RtlRestoreContext 1276 4F3 0000F090 RtlRestoreLastWin32Error 1277 4F4 000839F0 RtlRetrieveNtUserPfn 1278 4F5 000C14B0 RtlRevertMemoryStream 1279 4F6 00077FF0 RtlRunDecodeUnicodeString 1280 4F7 00077A30 RtlRunEncodeUnicodeString 1281 4F8 00034B00 RtlRunOnceBeginInitialize 1282 4F9 0006C850 RtlRunOnceComplete 1283 4FA 00034BE0 RtlRunOnceExecuteOnce 1284 4FB 00064CE0 RtlRunOnceInitialize 1285 4FC 000736A0 RtlSecondsSince1970ToTime 1286 4FD 000CE1F0 RtlSecondsSince1980ToTime 1287 4FE 000C14B0 RtlSeekMemoryStream 1288 4FF 00063CF0 RtlSelfRelativeToAbsoluteSD 1289 500 00063AE0 RtlSelfRelativeToAbsoluteSD2 1290 501 00080680 RtlSendMsgToSm 1291 502 00072340 RtlSetAllBits 1292 503 000CEDC0 RtlSetAttributesSecurityDescriptor 1293 504 00067FD0 RtlSetBit 1294 505 00056120 RtlSetBits 1295 506 00075AA0 RtlSetControlSecurityDescriptor 1296 507 00069F40 RtlSetCriticalSectionSpinCount 1297 508 0006F750 RtlSetCurrentDirectory_U 1298 509 000787A0 RtlSetCurrentEnvironment 1299 50A 000641F0 RtlSetCurrentTransaction 1300 50B 0004AEF0 RtlSetDaclSecurityDescriptor 1301 50C 000D40F0 RtlSetDynamicTimeZoneInformation 1302 50D 00074E10 RtlSetEnvironmentStrings 1303 50E 00046900 RtlSetEnvironmentVar 1304 50F 000468B0 RtlSetEnvironmentVariable 1305 510 00077900 RtlSetExtendedFeaturesMask 1306 511 0004E500 RtlSetGroupSecurityDescriptor 1307 512 0006F3B0 RtlSetHeapInformation 1308 513 000D0C50 RtlSetInformationAcl 1309 514 0007E110 RtlSetIoCompletionCallback 1310 515 0000F090 RtlSetLastWin32Error 1311 516 0000F070 RtlSetLastWin32ErrorAndNtStatusFromNtStatus 1312 517 000C14B0 RtlSetMemoryStreamSize 1313 518 0004E560 RtlSetOwnerSecurityDescriptor 1314 519 000D4010 RtlSetPortableOperatingSystem 1315 51A 000C3DA0 RtlSetProcessDebugInformation 1316 51B 000815E0 RtlSetProcessIsCritical 1317 51C 0006ABB0 RtlSetProcessPreferredUILanguages 1318 51D 000E5310 RtlSetProtectedPolicy 1319 51E 0006E850 RtlSetSaclSecurityDescriptor 1320 51F 000598A0 RtlSetSearchPathMode 1321 520 00078240 RtlSetSecurityDescriptorRMControl 1322 521 00047BB0 RtlSetSecurityObject 1323 522 00047500 RtlSetSecurityObjectEx 1324 523 00045EC0 RtlSetThreadErrorMode 1325 524 00080310 RtlSetThreadIsCritical 1326 525 00076D90 RtlSetThreadPoolStartFunc 1327 526 0001C020 RtlSetThreadPreferredUILanguages 1328 527 0003C080 RtlSetThreadSubProcessTag 1329 528 000D4100 RtlSetTimeZoneInformation 1330 529 000F5FE0 RtlSetTimer 1331 52A 000DE360 RtlSetUmsThreadInformation 1332 52B 00066DC0 RtlSetUnhandledExceptionFilter 1333 52C 000D8670 RtlSetUserFlagsHeap 1334 52D 00057C60 RtlSetUserValueHeap 1335 52E 0004A190 RtlSidDominates 1336 52F 0004E470 RtlSidDominatesForTrust 1337 530 000CEDF0 RtlSidEqualLevel 1338 531 0006A570 RtlSidHashInitialize 1339 532 0006A9A0 RtlSidHashLookup 1340 533 000CEE80 RtlSidIsHigherLevel 1341 534 0002A380 RtlSizeHeap 1342 535 00065CB0 RtlSleepConditionVariableCS 1343 536 00065B30 RtlSleepConditionVariableSRW 1344 537 00061070 RtlSplay 1345 538 00072B50 RtlStartRXact 1346 539 000C14B0 RtlStatMemoryStream 1347 53A 000649E0 RtlStringFromGUID 1348 53B 000649F0 RtlStringFromGUIDEx 1349 53C 000DBC00 RtlStronglyEnumerateEntryHashTable 1350 53D 00065750 RtlSubAuthorityCountSid 1351 53E 00064C50 RtlSubAuthoritySid 1352 53F 0000A870 RtlSubscribeWnfStateChangeNotification 1353 540 00061500 RtlSubtreePredecessor 1354 541 000DE5A0 RtlSubtreeSuccessor 1355 542 00042010 RtlSwitchedVVI 1356 543 00071400 RtlSystemTimeToLocalTime 1357 544 00077400 RtlTestAndPublishWnfStateData 1358 545 000D3640 RtlTestBit 1359 546 000816D0 RtlTestProtectedAccess 1360 547 0005CCF0 RtlTimeFieldsToTime 1361 548 0006E560 RtlTimeToElapsedTimeFields 1362 549 0006E690 RtlTimeToSecondsSince1970 1363 54A 0006E650 RtlTimeToSecondsSince1980 1364 54B 0005CF00 RtlTimeToTimeFields 1365 54C 000E5A40 RtlTraceDatabaseAdd 1366 54D 000E5AC0 RtlTraceDatabaseCreate 1367 54E 000E5BF0 RtlTraceDatabaseDestroy 1368 54F 000E5C70 RtlTraceDatabaseEnumerate 1369 550 000E5D50 RtlTraceDatabaseFind 1370 551 000E5DD0 RtlTraceDatabaseLock 1371 552 000E5E00 RtlTraceDatabaseUnlock 1372 553 000E5E20 RtlTraceDatabaseValidate 1373 554 00008860 RtlTryAcquirePebLock 1374 555 0000BE80 RtlTryAcquireSRWLockExclusive 1375 556 00070830 RtlTryAcquireSRWLockShared 1376 557 000D0480 RtlTryConvertSRWLockSharedToExclusiveOrRelease 1377 558 00008880 RtlTryEnterCriticalSection 1378 559 0005C520 RtlUTF8ToUnicodeN 1379 55A 000DE3A0 RtlUmsThreadYield 1380 55B 000E3FF0 RtlUnhandledExceptionFilter 1381 55C 000E4010 RtlUnhandledExceptionFilter2 1382 55D 000D2530 RtlUnicodeStringToAnsiSize 1383 55E 00023E30 RtlUnicodeStringToAnsiString 1384 55F 000D2140 RtlUnicodeStringToCountedOemString 1385 560 0006A3D0 RtlUnicodeStringToInteger 1386 561 000D2530 RtlUnicodeStringToOemSize 1387 562 000630A0 RtlUnicodeStringToOemString 1388 563 000CD650 RtlUnicodeToCustomCPN 1389 564 00023F10 RtlUnicodeToMultiByteN 1390 565 0006FF30 RtlUnicodeToMultiByteSize 1391 566 00063170 RtlUnicodeToOemN 1392 567 00059980 RtlUnicodeToUTF8N 1393 568 00071ED0 RtlUniform 1394 569 00078EF0 RtlUnlockBootStatusData 1395 56A 00077B90 RtlUnlockCurrentThread 1396 56B 000330E0 RtlUnlockHeap 1397 56C 00075090 RtlUnlockMemoryBlockLookaside 1398 56D 000C14B0 RtlUnlockMemoryStreamRegion 1399 56E 000750F0 RtlUnlockMemoryZone 1400 56F 000753B0 RtlUnlockModuleSection 1401 570 0000B080 RtlUnsubscribeWnfNotificationWaitForCompletion 1402 571 0000AEE0 RtlUnsubscribeWnfNotificationWithCompletionCallback 1403 572 0000B0E0 RtlUnsubscribeWnfStateChangeNotification 1404 573 000E5180 RtlUnwind 1405 574 00014200 RtlUnwindEx 1406 575 000507F0 RtlUpcaseUnicodeChar 1407 576 00050850 RtlUpcaseUnicodeString 1408 577 000D2290 RtlUpcaseUnicodeStringToAnsiString 1409 578 000D23B0 RtlUpcaseUnicodeStringToCountedOemString 1410 579 0006CE30 RtlUpcaseUnicodeStringToOemString 1411 57A 000CD880 RtlUpcaseUnicodeToCustomCPN 1412 57B 0006F520 RtlUpcaseUnicodeToMultiByteN 1413 57C 0006D3A0 RtlUpcaseUnicodeToOemN 1414 57D 00044770 RtlUpdateClonedCriticalSection 1415 57E 00059670 RtlUpdateClonedSRWLock 1416 57F 0007A8D0 RtlUpdateTimer 1417 580 00064F10 RtlUpperChar 1418 581 000D2640 RtlUpperString 1419 582 00009F30 RtlUserThreadStart 1420 583 000200D0 RtlValidAcl 1421 584 000CBF10 RtlValidProcessProtection 1422 585 00069430 RtlValidRelativeSecurityDescriptor 1423 586 0001FF90 RtlValidSecurityDescriptor 1424 587 00020090 RtlValidSid 1425 588 000384A0 RtlValidateHeap 1426 589 000D87D0 RtlValidateProcessHeaps 1427 58A 0006B950 RtlValidateUnicodeString 1428 58B 00045350 RtlVerifyVersionInfo 1429 58C 00011740 RtlVirtualUnwind 1430 58D 00076B00 RtlWaitForWnfMetaNotification 1431 58E 00077FD0 RtlWaitOnAddress 1432 58F 00036540 RtlWakeAddressAll 1433 590 000E6170 RtlWakeAddressAllNoFence 1434 591 00003090 RtlWakeAddressSingle 1435 592 000E6180 RtlWakeAddressSingleNoFence 1436 593 00009A40 RtlWakeAllConditionVariable 1437 594 000634A0 RtlWakeConditionVariable 1438 595 000126A0 RtlWalkFrameChain 1439 596 000D8900 RtlWalkHeap 1440 597 000DBC60 RtlWeaklyEnumerateEntryHashTable 1441 598 00001C20 RtlWerpReportException 1442 599 000C8BD0 RtlWnfCompareChangeStamp 1443 59A 0000C5F0 RtlWnfDllUnloadCallback 1444 59B 000671B0 RtlWoW64GetCpuAreaInfo 1445 59C 00067130 RtlWoW64GetCurrentCpuArea 1446 59D 00078FC0 RtlWow64CallFunction64 1447 59E 00078FC0 RtlWow64EnableFsRedirection 1448 59F 00078FC0 RtlWow64EnableFsRedirectionEx 1449 5A0 000C6EA0 RtlWow64GetThreadContext 1450 5A1 000C6ED0 RtlWow64GetThreadSelectorEntry 1451 5A2 000C2A40 RtlWow64LogMessageInEventLogger 1452 5A3 000C7070 RtlWow64SetThreadContext 1453 5A4 000C7090 RtlWow64SuspendThread 1454 5A5 000C70A0 RtlWow64SuspendThreadEx 1455 5A6 000C14B0 RtlWriteMemoryStream 1456 5A7 0007EA40 RtlWriteRegistryValue 1457 5A8 000DCA80 RtlZeroHeap 1458 5A9 00095B50 RtlZeroMemory 1459 5AA 000C9BC0 RtlZombifyActivationContext 1460 5AB 00061DC0 RtlpApplyLengthFunction 1461 5AC 0000D1B0 RtlpCheckDynamicTimeZoneInformation 1462 5AD 000D5500 RtlpCleanupRegistryKeys 1463 5AE 000D0C90 RtlpConvertAbsoluteToRelativeSecurityAttribute 1464 5AF 000D5A20 RtlpConvertCultureNamesToLCIDs 1465 5B0 000D5C40 RtlpConvertLCIDsToCultureNames 1466 5B1 000D0FF0 RtlpConvertRelativeToAbsoluteSecurityAttribute 1467 5B2 0001DAD0 RtlpCreateProcessRegistryInfo 1468 5B3 00068550 RtlpEnsureBufferSize 1469 5B4 00095B71 RtlpExecuteUmsThread 1470 5B5 00147198 RtlpFreezeTimeBias 1471 5B6 000456B0 RtlpGetDeviceFamilyInfoEnum 1472 5B7 00074940 RtlpGetLCIDFromLangInfoNode 1473 5B8 00072DD0 RtlpGetNameFromLangInfoNode 1474 5B9 0001F6A0 RtlpGetSystemDefaultUILanguage 1475 5BA 000E6190 RtlpGetUserOrMachineUILanguage4NLS 1476 5BB 00048CA0 RtlpInitializeLangRegistryInfo 1477 5BC 00054F50 RtlpIsQualifiedLanguage 1478 5BD 00048A60 RtlpLoadMachineUIByPolicy 1479 5BE 000499E0 RtlpLoadUserUIByPolicy 1480 5BF 000025A0 RtlpMergeSecurityAttributeInformation 1481 5C0 00047980 RtlpMuiFreeLangRegistryInfo 1482 5C1 000E6FB0 RtlpMuiRegCreateRegistryInfo 1483 5C2 00048F20 RtlpMuiRegFreeRegistryInfo 1484 5C3 00048E30 RtlpMuiRegLoadRegistryInfo 1485 5C4 000C21A0 RtlpNotOwnerCriticalSection 1486 5C5 0007EB60 RtlpNtCreateKey 1487 5C6 000733D0 RtlpNtEnumerateSubKey 1488 5C7 000EA340 RtlpNtMakeTemporaryKey 1489 5C8 000735A0 RtlpNtOpenKey 1490 5C9 00071200 RtlpNtQueryValueKey 1491 5CA 0007EAE0 RtlpNtSetValueKey 1492 5CB 00048770 RtlpQueryDefaultUILanguage 1493 5CC 000C4160 RtlpQueryProcessDebugInformationFromWow64 1494 5CD 000E87D0 RtlpRefreshCachedUILanguage 1495 5CE 000D6730 RtlpSetInstallLanguage 1496 5CF 000D6E70 RtlpSetPreferredUILanguages 1497 5D0 000D6E70 RtlpSetUserPreferredUILanguages 1498 5D1 00095E96 RtlpUmsExecuteYieldThreadEnd 1499 5D2 00095DA3 RtlpUmsThreadYield 1500 5D3 000364F0 RtlpUnWaitCriticalSection 1501 5D4 00080A30 RtlpVerifyAndCommitUILanguageSettings 1502 5D5 000756F0 RtlpWaitForCriticalSection 1503 5D6 000D2500 RtlxAnsiStringToUnicodeSize 1504 5D7 000D2500 RtlxOemStringToUnicodeSize 1505 5D8 000D2530 RtlxUnicodeStringToAnsiSize 1506 5D9 000D2530 RtlxUnicodeStringToOemSize 1507 5DA 000F6320 SbExecuteProcedure 1508 5DB 00041A90 SbSelectProcedure 1509 5DC 000C81A0 ShipAssert 1510 5DD 000C82C0 ShipAssertGetBufferInfo 1511 5DE 000C82F0 ShipAssertMsgA 1512 5DF 000C82F0 ShipAssertMsgW 1513 5E0 0007A400 TpAllocAlpcCompletion 1514 5E1 0007AC20 TpAllocAlpcCompletionEx 1515 5E2 000734D0 TpAllocCleanupGroup 1516 5E3 0007AC50 TpAllocIoCompletion 1517 5E4 0007A430 TpAllocJobNotification 1518 5E5 0007B340 TpAllocPool 1519 5E6 0003C430 TpAllocTimer 1520 5E7 0007CBB0 TpAllocWait 1521 5E8 0003D920 TpAllocWork 1522 5E9 00079160 TpAlpcRegisterCompletionList 1523 5EA 00079120 TpAlpcUnregisterCompletionList 1524 5EB 000F59F0 TpCallbackDetectedUnrecoverableError 1525 5EC 00079230 TpCallbackIndependent 1526 5ED 00078F60 TpCallbackLeaveCriticalSectionOnCompletion 1527 5EE 0003BB00 TpCallbackMayRunLong 1528 5EF 000F5A20 TpCallbackReleaseMutexOnCompletion 1529 5F0 000F5A60 TpCallbackReleaseSemaphoreOnCompletion 1530 5F1 00061AF0 TpCallbackSendAlpcMessageOnCompletion 1531 5F2 00072B10 TpCallbackSendPendingAlpcMessage 1532 5F3 000782B0 TpCallbackSetEventOnCompletion 1533 5F4 000749C0 TpCallbackUnloadDllOnCompletion 1534 5F5 0006F300 TpCancelAsyncIoOperation 1535 5F6 00066710 TpCaptureCaller 1536 5F7 0000A000 TpCheckTerminateWorker 1537 5F8 000F5AA0 TpDbgDumpHeapUsage 1538 5F9 000756F0 TpDbgSetLogRoutine 1539 5FA 000782F0 TpDisablePoolCallbackChecks 1540 5FB 00074D90 TpDisassociateCallback 1541 5FC 0003CB90 TpIsTimerSet 1542 5FD 00027420 TpPostWork 1543 5FE 000F5690 TpQueryPoolStackInformation 1544 5FF 0007A7A0 TpReleaseAlpcCompletion 1545 600 000759E0 TpReleaseCleanupGroup 1546 601 0007D660 TpReleaseCleanupGroupMembers 1547 602 000725C0 TpReleaseIoCompletion 1548 603 0007A240 TpReleaseJobNotification 1549 604 00073AE0 TpReleasePool 1550 605 0003EAD0 TpReleaseTimer 1551 606 0007CEB0 TpReleaseWait 1552 607 0003C790 TpReleaseWork 1553 608 000F5700 TpSetDefaultPoolMaxThreads 1554 609 0007A040 TpSetDefaultPoolStackInformation 1555 60A 0007B270 TpSetPoolMaxThreads 1556 60B 000736D0 TpSetPoolMaxThreadsSoftLimit 1557 60C 00077520 TpSetPoolMinThreads 1558 60D 0007A160 TpSetPoolStackInformation 1559 60E 00078E60 TpSetPoolThreadBasePriority 1560 60F 0007B2E0 TpSetPoolWorkerThreadIdleTimeout 1561 610 0003CBD0 TpSetTimer 1562 611 0003CBE0 TpSetTimerEx 1563 612 0003C530 TpSetWait 1564 613 0003C5A0 TpSetWaitEx 1565 614 0007D460 TpSimpleTryPost 1566 615 0003C540 TpStartAsyncIoOperation 1567 616 0007C7B0 TpTimerOutstandingCallbackCount 1568 617 00065760 TpTrimPools 1569 618 0007A190 TpWaitForAlpcCompletion 1570 619 00076FD0 TpWaitForIoCompletion 1571 61A 0007A200 TpWaitForJobNotification 1572 61B 0007D140 TpWaitForTimer 1573 61C 0007D010 TpWaitForWait 1574 61D 0007D100 TpWaitForWork 1575 61E 000696D0 VerSetConditionMask 1576 61F 000C87D0 WerReportSQMEvent 1577 620 000756F0 WinSqmAddToAverageDWORD 1578 621 000756F0 WinSqmAddToStream 1579 622 000756F0 WinSqmAddToStreamEx 1580 623 000759D0 WinSqmCheckEscalationAddToStreamEx 1581 624 000759D0 WinSqmCheckEscalationSetDWORD 1582 625 000759D0 WinSqmCheckEscalationSetDWORD64 1583 626 000759D0 WinSqmCheckEscalationSetString 1584 627 00042FF0 WinSqmCommonDatapointDelete 1585 628 00042FF0 WinSqmCommonDatapointSetDWORD 1586 629 00042FF0 WinSqmCommonDatapointSetDWORD64 1587 62A 00042FF0 WinSqmCommonDatapointSetStreamEx 1588 62B 00042FF0 WinSqmCommonDatapointSetString 1589 62C 000756F0 WinSqmEndSession 1590 62D 000759D0 WinSqmEventEnabled 1591 62E 000759D0 WinSqmEventWrite 1592 62F 000759D0 WinSqmGetEscalationRuleStatus 1593 630 000C8BB0 WinSqmGetInstrumentationProperty 1594 631 000756F0 WinSqmIncrementDWORD 1595 632 000759D0 WinSqmIsOptedIn 1596 633 000759D0 WinSqmIsOptedInEx 1597 634 00042FF0 WinSqmIsSessionDisabled 1598 635 000756F0 WinSqmSetDWORD 1599 636 000756F0 WinSqmSetDWORD64 1600 637 00042FF0 WinSqmSetEscalationInfo 1601 638 000756F0 WinSqmSetIfMaxDWORD 1602 639 000756F0 WinSqmSetIfMinDWORD 1603 63A 000756F0 WinSqmSetString 1604 63B 00078FD0 WinSqmStartSession 1605 63C 00078FD0 WinSqmStartSessionForPartner 1606 63D 000759D0 WinSqmStartSqmOptinListener 1607 63E 00093390 ZwAcceptConnectPort 1608 63F 00093370 ZwAccessCheck 1609 640 00093600 ZwAccessCheckAndAuditAlarm 1610 641 000939A0 ZwAccessCheckByType 1611 642 00093900 ZwAccessCheckByTypeAndAuditAlarm 1612 643 000939B0 ZwAccessCheckByTypeResultList 1613 644 000939C0 ZwAccessCheckByTypeResultListAndAuditAlarm 1614 645 000939D0 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle 1615 646 000937E0 ZwAddAtom 1616 647 000939E0 ZwAddAtomEx 1617 648 000939F0 ZwAddBootEntry 1618 649 00093A00 ZwAddDriverEntry 1619 64A 00093A10 ZwAdjustGroupsToken 1620 64B 00093780 ZwAdjustPrivilegesToken 1621 64C 00093A20 ZwAdjustTokenClaimsAndDeviceGroups 1622 64D 00093A30 ZwAlertResumeThread 1623 64E 00093A40 ZwAlertThread 1624 64F 00093A50 ZwAlertThreadByThreadId 1625 650 00093A60 ZwAllocateLocallyUniqueId 1626 651 00093A70 ZwAllocateReserveObject 1627 652 00093A80 ZwAllocateUserPhysicalPages 1628 653 00093A90 ZwAllocateUuids 1629 654 000934F0 ZwAllocateVirtualMemory 1630 655 00093AA0 ZwAlpcAcceptConnectPort 1631 656 00093AB0 ZwAlpcCancelMessage 1632 657 00093AC0 ZwAlpcConnectPort 1633 658 00093AD0 ZwAlpcConnectPortEx 1634 659 00093AE0 ZwAlpcCreatePort 1635 65A 00093AF0 ZwAlpcCreatePortSection 1636 65B 00093B00 ZwAlpcCreateResourceReserve 1637 65C 00093B10 ZwAlpcCreateSectionView 1638 65D 00093B20 ZwAlpcCreateSecurityContext 1639 65E 00093B30 ZwAlpcDeletePortSection 1640 65F 00093B40 ZwAlpcDeleteResourceReserve 1641 660 00093B50 ZwAlpcDeleteSectionView 1642 661 00093B60 ZwAlpcDeleteSecurityContext 1643 662 00093B70 ZwAlpcDisconnectPort 1644 663 00093B80 ZwAlpcImpersonateClientContainerOfPort 1645 664 00093B90 ZwAlpcImpersonateClientOfPort 1646 665 00093BA0 ZwAlpcOpenSenderProcess 1647 666 00093BB0 ZwAlpcOpenSenderThread 1648 667 00093BC0 ZwAlpcQueryInformation 1649 668 00093BD0 ZwAlpcQueryInformationMessage 1650 669 00093BE0 ZwAlpcRevokeSecurityContext 1651 66A 00093BF0 ZwAlpcSendWaitReceivePort 1652 66B 00093C00 ZwAlpcSetInformation 1653 66C 00093830 ZwApphelpCacheControl 1654 66D 00093C10 ZwAreMappedFilesTheSame 1655 66E 00093C20 ZwAssignProcessToJobObject 1656 66F 00093C30 ZwAssociateWaitCompletionPacket 1657 670 000933C0 ZwCallbackReturn 1658 671 00093940 ZwCancelIoFile 1659 672 00093C40 ZwCancelIoFileEx 1660 673 00093C50 ZwCancelSynchronousIoFile 1661 674 00093980 ZwCancelTimer 1662 675 00093C60 ZwCancelTimer2 1663 676 00093C70 ZwCancelWaitCompletionPacket 1664 677 00093750 ZwClearEvent 1665 678 00093460 ZwClose 1666 679 00093720 ZwCloseObjectAuditAlarm 1667 67A 00093C80 ZwCommitComplete 1668 67B 00093C90 ZwCommitEnlistment 1669 67C 00093CA0 ZwCommitTransaction 1670 67D 00093CB0 ZwCompactKeys 1671 67E 00093CC0 ZwCompareObjects 1672 67F 00093CD0 ZwCompareTokens 1673 680 00093CE0 ZwCompleteConnectPort 1674 681 00093CF0 ZwCompressKey 1675 682 00093D00 ZwConnectPort 1676 683 000937A0 ZwContinue 1677 684 00093D10 ZwCreateDebugObject 1678 685 00093D20 ZwCreateDirectoryObject 1679 686 00093D30 ZwCreateDirectoryObjectEx 1680 687 00093D40 ZwCreateEnlistment 1681 688 000937F0 ZwCreateEvent 1682 689 00093D50 ZwCreateEventPair 1683 68A 000938C0 ZwCreateFile 1684 68B 00093D60 ZwCreateIRTimer 1685 68C 00093D70 ZwCreateIoCompletion 1686 68D 00093D80 ZwCreateJobObject 1687 68E 00093D90 ZwCreateJobSet 1688 68F 00093540 ZwCreateKey 1689 690 00093DA0 ZwCreateKeyTransacted 1690 691 00093DB0 ZwCreateKeyedEvent 1691 692 00093DC0 ZwCreateLowBoxToken 1692 693 00093DD0 ZwCreateMailslotFile 1693 694 00093DE0 ZwCreateMutant 1694 695 00093DF0 ZwCreateNamedPipeFile 1695 696 00093E00 ZwCreatePagingFile 1696 697 00093E10 ZwCreatePartition 1697 698 00093E20 ZwCreatePort 1698 699 00093E30 ZwCreatePrivateNamespace 1699 69A 00093E40 ZwCreateProcess 1700 69B 00093840 ZwCreateProcessEx 1701 69C 00093E50 ZwCreateProfile 1702 69D 00093E60 ZwCreateProfileEx 1703 69E 00093E70 ZwCreateResourceManager 1704 69F 00093810 ZwCreateSection 1705 6A0 00093E80 ZwCreateSemaphore 1706 6A1 00093E90 ZwCreateSymbolicLinkObject 1707 6A2 00093850 ZwCreateThread 1708 6A3 00093EA0 ZwCreateThreadEx 1709 6A4 00093EB0 ZwCreateTimer 1710 6A5 00093EC0 ZwCreateTimer2 1711 6A6 00093ED0 ZwCreateToken 1712 6A7 00093EE0 ZwCreateTokenEx 1713 6A8 00093EF0 ZwCreateTransaction 1714 6A9 00093F00 ZwCreateTransactionManager 1715 6AA 00093F10 ZwCreateUserProcess 1716 6AB 00093F20 ZwCreateWaitCompletionPacket 1717 6AC 00093F30 ZwCreateWaitablePort 1718 6AD 00093F40 ZwCreateWnfStateName 1719 6AE 00093F50 ZwCreateWorkerFactory 1720 6AF 00093F60 ZwDebugActiveProcess 1721 6B0 00093F70 ZwDebugContinue 1722 6B1 000936B0 ZwDelayExecution 1723 6B2 00093F80 ZwDeleteAtom 1724 6B3 00093F90 ZwDeleteBootEntry 1725 6B4 00093FA0 ZwDeleteDriverEntry 1726 6B5 00093FB0 ZwDeleteFile 1727 6B6 00093FC0 ZwDeleteKey 1728 6B7 00093FD0 ZwDeleteObjectAuditAlarm 1729 6B8 00093FE0 ZwDeletePrivateNamespace 1730 6B9 00093FF0 ZwDeleteValueKey 1731 6BA 00094000 ZwDeleteWnfStateData 1732 6BB 00094010 ZwDeleteWnfStateName 1733 6BC 000933E0 ZwDeviceIoControlFile 1734 6BD 00094020 ZwDisableLastKnownGood 1735 6BE 00094030 ZwDisplayString 1736 6BF 00094040 ZwDrawText 1737 6C0 00093730 ZwDuplicateObject 1738 6C1 00093790 ZwDuplicateToken 1739 6C2 00094050 ZwEnableLastKnownGood 1740 6C3 00094060 ZwEnumerateBootEntries 1741 6C4 00094070 ZwEnumerateDriverEntries 1742 6C5 00093690 ZwEnumerateKey 1743 6C6 00094080 ZwEnumerateSystemEnvironmentValuesEx 1744 6C7 00094090 ZwEnumerateTransactionObject 1745 6C8 000934A0 ZwEnumerateValueKey 1746 6C9 000940A0 ZwExtendSection 1747 6CA 000940B0 ZwFilterBootOption 1748 6CB 000940C0 ZwFilterToken 1749 6CC 000940D0 ZwFilterTokenEx 1750 6CD 000934B0 ZwFindAtom 1751 6CE 00093820 ZwFlushBuffersFile 1752 6CF 000940E0 ZwFlushBuffersFileEx 1753 6D0 000940F0 ZwFlushInstallUILanguage 1754 6D1 00094100 ZwFlushInstructionCache 1755 6D2 00094110 ZwFlushKey 1756 6D3 00094120 ZwFlushProcessWriteBuffers 1757 6D4 00094130 ZwFlushVirtualMemory 1758 6D5 00094140 ZwFlushWriteBuffer 1759 6D6 00094150 ZwFreeUserPhysicalPages 1760 6D7 00093550 ZwFreeVirtualMemory 1761 6D8 00094160 ZwFreezeRegistry 1762 6D9 00094170 ZwFreezeTransactions 1763 6DA 00093700 ZwFsControlFile 1764 6DB 00094180 ZwGetCachedSigningLevel 1765 6DC 00094190 ZwGetCompleteWnfStateSubscription 1766 6DD 000941A0 ZwGetContextThread 1767 6DE 000941B0 ZwGetCurrentProcessorNumber 1768 6DF 000941C0 ZwGetCurrentProcessorNumberEx 1769 6E0 000941D0 ZwGetDevicePowerState 1770 6E1 000941E0 ZwGetMUIRegistryInfo 1771 6E2 000941F0 ZwGetNextProcess 1772 6E3 00094200 ZwGetNextThread 1773 6E4 00094210 ZwGetNlsSectionPtr 1774 6E5 00094220 ZwGetNotificationResourceManager 1775 6E6 00094230 ZwGetWriteWatch 1776 6E7 00094240 ZwImpersonateAnonymousToken 1777 6E8 00093560 ZwImpersonateClientOfPort 1778 6E9 00094250 ZwImpersonateThread 1779 6EA 00094260 ZwInitializeNlsFiles 1780 6EB 00094270 ZwInitializeRegistry 1781 6EC 00094280 ZwInitiatePowerAction 1782 6ED 00093860 ZwIsProcessInJob 1783 6EE 00094290 ZwIsSystemResumeAutomatic 1784 6EF 000942A0 ZwIsUILanguageComitted 1785 6F0 000942B0 ZwListenPort 1786 6F1 000942C0 ZwLoadDriver 1787 6F2 000942D0 ZwLoadKey 1788 6F3 000942E0 ZwLoadKey2 1789 6F4 00094F00 ZwLoadKey3 1790 6F5 000942F0 ZwLoadKeyEx 1791 6F6 00094300 ZwLockFile 1792 6F7 00094310 ZwLockProductActivationKeys 1793 6F8 00094320 ZwLockRegistryKey 1794 6F9 00094330 ZwLockVirtualMemory 1795 6FA 00094340 ZwMakePermanentObject 1796 6FB 00094350 ZwMakeTemporaryObject 1797 6FC 00094360 ZwManagePartition 1798 6FD 00094370 ZwMapCMFModule 1799 6FE 00094380 ZwMapUserPhysicalPages 1800 6FF 000933A0 ZwMapUserPhysicalPagesScatter 1801 700 000935F0 ZwMapViewOfSection 1802 701 00094390 ZwModifyBootEntry 1803 702 000943A0 ZwModifyDriverEntry 1804 703 000943B0 ZwNotifyChangeDirectoryFile 1805 704 000943C0 ZwNotifyChangeKey 1806 705 000943D0 ZwNotifyChangeMultipleKeys 1807 706 000943E0 ZwNotifyChangeSession 1808 707 000938F0 ZwOpenDirectoryObject 1809 708 000943F0 ZwOpenEnlistment 1810 709 00093770 ZwOpenEvent 1811 70A 00094400 ZwOpenEventPair 1812 70B 000936A0 ZwOpenFile 1813 70C 00094410 ZwOpenIoCompletion 1814 70D 00094420 ZwOpenJobObject 1815 70E 00093490 ZwOpenKey 1816 70F 00094430 ZwOpenKeyEx 1817 710 00094440 ZwOpenKeyTransacted 1818 711 00094450 ZwOpenKeyTransactedEx 1819 712 00094460 ZwOpenKeyedEvent 1820 713 00094470 ZwOpenMutant 1821 714 00094480 ZwOpenObjectAuditAlarm 1822 715 00094490 ZwOpenPartition 1823 716 000944A0 ZwOpenPrivateNamespace 1824 717 000935D0 ZwOpenProcess 1825 718 000944B0 ZwOpenProcessToken 1826 719 00093670 ZwOpenProcessTokenEx 1827 71A 000944C0 ZwOpenResourceManager 1828 71B 000936E0 ZwOpenSection 1829 71C 000944D0 ZwOpenSemaphore 1830 71D 000944E0 ZwOpenSession 1831 71E 000944F0 ZwOpenSymbolicLinkObject 1832 71F 00094500 ZwOpenThread 1833 720 000935B0 ZwOpenThreadToken 1834 721 00093660 ZwOpenThreadTokenEx 1835 722 00094510 ZwOpenTimer 1836 723 00094520 ZwOpenTransaction 1837 724 00094530 ZwOpenTransactionManager 1838 725 00094540 ZwPlugPlayControl 1839 726 00093960 ZwPowerInformation 1840 727 00094550 ZwPrePrepareComplete 1841 728 00094560 ZwPrePrepareEnlistment 1842 729 00094570 ZwPrepareComplete 1843 72A 00094580 ZwPrepareEnlistment 1844 72B 00094590 ZwPrivilegeCheck 1845 72C 000945A0 ZwPrivilegeObjectAuditAlarm 1846 72D 000945B0 ZwPrivilegedServiceAuditAlarm 1847 72E 000945C0 ZwPropagationComplete 1848 72F 000945D0 ZwPropagationFailed 1849 730 00093870 ZwProtectVirtualMemory 1850 731 000945E0 ZwPulseEvent 1851 732 00093740 ZwQueryAttributesFile 1852 733 000945F0 ZwQueryBootEntryOrder 1853 734 00094600 ZwQueryBootOptions 1854 735 00094610 ZwQueryDebugFilterState 1855 736 000934C0 ZwQueryDefaultLocale 1856 737 000937B0 ZwQueryDefaultUILanguage 1857 738 000936C0 ZwQueryDirectoryFile 1858 739 00094620 ZwQueryDirectoryObject 1859 73A 00094630 ZwQueryDriverEntryOrder 1860 73B 00094640 ZwQueryEaFile 1861 73C 000938D0 ZwQueryEvent 1862 73D 00094650 ZwQueryFullAttributesFile 1863 73E 00094660 ZwQueryInformationAtom 1864 73F 00094670 ZwQueryInformationEnlistment 1865 740 00093480 ZwQueryInformationFile 1866 741 00094680 ZwQueryInformationJobObject 1867 742 00094690 ZwQueryInformationPort 1868 743 00093500 ZwQueryInformationProcess 1869 744 000946A0 ZwQueryInformationResourceManager 1870 745 000935C0 ZwQueryInformationThread 1871 746 00093580 ZwQueryInformationToken 1872 747 000946B0 ZwQueryInformationTransaction 1873 748 000946C0 ZwQueryInformationTransactionManager 1874 749 000946D0 ZwQueryInformationWorkerFactory 1875 74A 000946E0 ZwQueryInstallUILanguage 1876 74B 000946F0 ZwQueryIntervalProfile 1877 74C 00094700 ZwQueryIoCompletion 1878 74D 000934D0 ZwQueryKey 1879 74E 00094710 ZwQueryLicenseValue 1880 74F 00094720 ZwQueryMultipleValueKey 1881 750 00094730 ZwQueryMutant 1882 751 00093470 ZwQueryObject 1883 752 00094740 ZwQueryOpenSubKeys 1884 753 00094750 ZwQueryOpenSubKeysEx 1885 754 00093680 ZwQueryPerformanceCounter 1886 755 00094760 ZwQueryPortInformationProcess 1887 756 00094770 ZwQueryQuotaInformationFile 1888 757 00093880 ZwQuerySection 1889 758 00094780 ZwQuerySecurityAttributesToken 1890 759 00094790 ZwQuerySecurityObject 1891 75A 000947A0 ZwQuerySemaphore 1892 75B 000947B0 ZwQuerySymbolicLinkObject 1893 75C 000947C0 ZwQuerySystemEnvironmentValue 1894 75D 000947D0 ZwQuerySystemEnvironmentValueEx 1895 75E 000936D0 ZwQuerySystemInformation 1896 75F 000947E0 ZwQuerySystemInformationEx 1897 760 00093910 ZwQuerySystemTime 1898 761 000936F0 ZwQueryTimer 1899 762 000947F0 ZwQueryTimerResolution 1900 763 000934E0 ZwQueryValueKey 1901 764 000935A0 ZwQueryVirtualMemory 1902 765 00093800 ZwQueryVolumeInformationFile 1903 766 00094800 ZwQueryWnfStateData 1904 767 00094810 ZwQueryWnfStateNameInformation 1905 768 000937C0 ZwQueueApcThread 1906 769 00094820 ZwQueueApcThreadEx 1907 76A 00094830 ZwRaiseException 1908 76B 00094840 ZwRaiseHardError 1909 76C 000933D0 ZwReadFile 1910 76D 00093650 ZwReadFileScatter 1911 76E 00094850 ZwReadOnlyEnlistment 1912 76F 000938B0 ZwReadRequestData 1913 770 00093760 ZwReadVirtualMemory 1914 771 00094860 ZwRecoverEnlistment 1915 772 00094870 ZwRecoverResourceManager 1916 773 00094880 ZwRecoverTransactionManager 1917 774 00094890 ZwRegisterProtocolAddressInformation 1918 775 000948A0 ZwRegisterThreadTerminatePort 1919 776 000948B0 ZwReleaseKeyedEvent 1920 777 00093570 ZwReleaseMutant 1921 778 00093410 ZwReleaseSemaphore 1922 779 000948C0 ZwReleaseWorkerFactoryWorker 1923 77A 00093400 ZwRemoveIoCompletion 1924 77B 000948D0 ZwRemoveIoCompletionEx 1925 77C 000948E0 ZwRemoveProcessDebug 1926 77D 000948F0 ZwRenameKey 1927 77E 00094900 ZwRenameTransactionManager 1928 77F 00094910 ZwReplaceKey 1929 780 00094920 ZwReplacePartitionUnit 1930 781 00093430 ZwReplyPort 1931 782 00093420 ZwReplyWaitReceivePort 1932 783 00093620 ZwReplyWaitReceivePortEx 1933 784 00094930 ZwReplyWaitReplyPort 1934 785 00094940 ZwRequestPort 1935 786 00093590 ZwRequestWaitReplyPort 1936 787 00094950 ZwResetEvent 1937 788 00094960 ZwResetWriteWatch 1938 789 00094970 ZwRestoreKey 1939 78A 00094980 ZwResumeProcess 1940 78B 00093890 ZwResumeThread 1941 78C 00094990 ZwRevertContainerImpersonation 1942 78D 000949A0 ZwRollbackComplete 1943 78E 000949B0 ZwRollbackEnlistment 1944 78F 000949C0 ZwRollbackTransaction 1945 790 000949D0 ZwRollforwardTransactionManager 1946 791 000949E0 ZwSaveKey 1947 792 000949F0 ZwSaveKeyEx 1948 793 00094A00 ZwSaveMergedKeys 1949 794 00094A10 ZwSecureConnectPort 1950 795 00094A20 ZwSerializeBoot 1951 796 00094A30 ZwSetBootEntryOrder 1952 797 00094A40 ZwSetBootOptions 1953 798 00094A50 ZwSetCachedSigningLevel 1954 799 00094A60 ZwSetContextThread 1955 79A 00094A70 ZwSetDebugFilterState 1956 79B 00094A80 ZwSetDefaultHardErrorPort 1957 79C 00094A90 ZwSetDefaultLocale 1958 79D 00094AA0 ZwSetDefaultUILanguage 1959 79E 00094AB0 ZwSetDriverEntryOrder 1960 79F 00094AC0 ZwSetEaFile 1961 7A0 00093450 ZwSetEvent 1962 7A1 00093640 ZwSetEventBoostPriority 1963 7A2 00094AD0 ZwSetHighEventPair 1964 7A3 00094AE0 ZwSetHighWaitLowEventPair 1965 7A4 00094AF0 ZwSetIRTimer 1966 7A5 00094B00 ZwSetInformationDebugObject 1967 7A6 00094B10 ZwSetInformationEnlistment 1968 7A7 000935E0 ZwSetInformationFile 1969 7A8 00094B20 ZwSetInformationJobObject 1970 7A9 00094B30 ZwSetInformationKey 1971 7AA 00093930 ZwSetInformationObject 1972 7AB 00093530 ZwSetInformationProcess 1973 7AC 00094B40 ZwSetInformationResourceManager 1974 7AD 00094B50 ZwSetInformationSymbolicLink 1975 7AE 00093440 ZwSetInformationThread 1976 7AF 00094B60 ZwSetInformationToken 1977 7B0 00094B70 ZwSetInformationTransaction 1978 7B1 00094B80 ZwSetInformationTransactionManager 1979 7B2 00094B90 ZwSetInformationVirtualMemory 1980 7B3 00094BA0 ZwSetInformationWorkerFactory 1981 7B4 00094BB0 ZwSetIntervalProfile 1982 7B5 00094BC0 ZwSetIoCompletion 1983 7B6 00094BD0 ZwSetIoCompletionEx 1984 7B7 00094BE0 ZwSetLdtEntries 1985 7B8 00094BF0 ZwSetLowEventPair 1986 7B9 00094C00 ZwSetLowWaitHighEventPair 1987 7BA 00094C10 ZwSetQuotaInformationFile 1988 7BB 00094C20 ZwSetSecurityObject 1989 7BC 00094C30 ZwSetSystemEnvironmentValue 1990 7BD 00094C40 ZwSetSystemEnvironmentValueEx 1991 7BE 00094C50 ZwSetSystemInformation 1992 7BF 00094C60 ZwSetSystemPowerState 1993 7C0 00094C70 ZwSetSystemTime 1994 7C1 00094C80 ZwSetThreadExecutionState 1995 7C2 00093990 ZwSetTimer 1996 7C3 00094C90 ZwSetTimer2 1997 7C4 00094CA0 ZwSetTimerEx 1998 7C5 00094CB0 ZwSetTimerResolution 1999 7C6 00094CC0 ZwSetUuidSeed 2000 7C7 00093970 ZwSetValueKey 2001 7C8 00094CD0 ZwSetVolumeInformationFile 2002 7C9 00094CE0 ZwSetWnfProcessNotificationEvent 2003 7CA 00094CF0 ZwShutdownSystem 2004 7CB 00094D00 ZwShutdownWorkerFactory 2005 7CC 00094D10 ZwSignalAndWaitForSingleObject 2006 7CD 00094D20 ZwSinglePhaseReject 2007 7CE 00094D30 ZwStartProfile 2008 7CF 00094D40 ZwStopProfile 2009 7D0 00094D50 ZwSubscribeWnfStateChange 2010 7D1 00094D60 ZwSuspendProcess 2011 7D2 00094D70 ZwSuspendThread 2012 7D3 00094D80 ZwSystemDebugControl 2013 7D4 00094D90 ZwTerminateJobObject 2014 7D5 00093630 ZwTerminateProcess 2015 7D6 000938A0 ZwTerminateThread 2016 7D7 00094DA0 ZwTestAlert 2017 7D8 00094DB0 ZwThawRegistry 2018 7D9 00094DC0 ZwThawTransactions 2019 7DA 00094DD0 ZwTraceControl 2020 7DB 00093950 ZwTraceEvent 2021 7DC 00094DE0 ZwTranslateFilePath 2022 7DD 00094DF0 ZwUmsThreadYield 2023 7DE 00094E00 ZwUnloadDriver 2024 7DF 00094E10 ZwUnloadKey 2025 7E0 00094E20 ZwUnloadKey2 2026 7E1 00094E30 ZwUnloadKeyEx 2027 7E2 00094E40 ZwUnlockFile 2028 7E3 00094E50 ZwUnlockVirtualMemory 2029 7E4 00093610 ZwUnmapViewOfSection 2030 7E5 00094E60 ZwUnmapViewOfSectionEx 2031 7E6 00094E70 ZwUnsubscribeWnfStateChange 2032 7E7 00094E80 ZwUpdateWnfStateData 2033 7E8 00094E90 ZwVdmControl 2034 7E9 00094EA0 ZwWaitForAlertByThreadId 2035 7EA 00094EB0 ZwWaitForDebugEvent 2036 7EB 00094EC0 ZwWaitForKeyedEvent 2037 7EC 00093920 ZwWaitForMultipleObjects 2038 7ED 00093510 ZwWaitForMultipleObjects32 2039 7EE 000933B0 ZwWaitForSingleObject 2040 7EF 00094ED0 ZwWaitForWorkViaWorkerFactory 2041 7F0 00094EE0 ZwWaitHighEventPair 2042 7F1 00094EF0 ZwWaitLowEventPair 2043 7F2 00093380 ZwWorkerFactoryWorkerReady 2044 7F3 000933F0 ZwWriteFile 2045 7F4 00093520 ZwWriteFileGather 2046 7F5 000938E0 ZwWriteRequestData 2047 7F6 00093710 ZwWriteVirtualMemory 2048 7F7 000937D0 ZwYieldExecution 2049 7F8 00083D50 __C_specific_handler 2050 7F9 00096080 __chkstk 2051 7FA 00083F10 __isascii 2052 7FB 00083F30 __iscsym 2053 7FC 00083F80 __iscsymf 2054 7FD 000756F0 __misaligned_access 2055 7FE 00083FC0 __toascii 2056 7FF 000841E0 _atoi64 2057 800 000748E0 _errno 2058 801 00140010 _fltused 2059 802 00084250 _i64toa 2060 803 0008DA60 _i64toa_s 2061 804 00084430 _i64tow 2062 805 0008DD50 _i64tow_s 2063 806 00084290 _itoa 2064 807 0008DA90 _itoa_s 2065 808 00084470 _itow 2066 809 0008DD80 _itow_s 2067 80A 00084600 _lfind 2068 80B 000846C0 _local_unwind 2069 80C 000842C0 _ltoa 2070 80D 0008DAC0 _ltoa_s 2071 80E 000844A0 _ltow 2072 80F 0008DDB0 _ltow_s 2073 810 0008E070 _makepath_s 2074 811 000846F0 _memccpy 2075 812 00084780 _memicmp 2076 813 00096DC0 _setjmp 2077 814 00096E80 _setjmpex 2078 815 000847A0 _snprintf 2079 816 0008E1B0 _snprintf_s 2080 817 0008E280 _snscanf_s 2081 818 00084850 _snwprintf 2082 819 0008E2C0 _snwprintf_s 2083 81A 0008E3A0 _snwscanf_s 2084 81B 00084930 _splitpath 2085 81C 0008E3E0 _splitpath_s 2086 81D 00084C80 _strcmpi 2087 81E 00084C80 _stricmp 2088 81F 00084C90 _strlwr 2089 820 00084CC0 _strlwr_s 2090 821 00084D80 _strnicmp 2091 822 0008E680 _strnset_s 2092 823 0008E710 _strset_s 2093 824 00084D90 _strupr 2094 825 00084DE0 _strupr_s 2095 826 00084E50 _swprintf 2096 827 000842F0 _ui64toa 2097 828 0008DAF0 _ui64toa_s 2098 829 000844D0 _ui64tow 2099 82A 0008DDE0 _ui64tow_s 2100 82B 00084350 _ultoa 2101 82C 0008DB10 _ultoa_s 2102 82D 000844F0 _ultow 2103 82E 0008DE00 _ultow_s 2104 82F 00084F10 _vscwprintf 2105 830 00085080 _vsnprintf 2106 831 0008E1E0 _vsnprintf_s 2107 832 00085150 _vsnwprintf 2108 833 0008E2F0 _vsnwprintf_s 2109 834 00084FC0 _vswprintf 2110 835 00085250 _wcsicmp 2111 836 000852A0 _wcslwr 2112 837 000852F0 _wcslwr_s 2113 838 00085370 _wcsnicmp 2114 839 000853D0 _wcsnset_s 2115 83A 00085460 _wcsset_s 2116 83B 000854C0 _wcstoi64 2117 83C 000854F0 _wcstoui64 2118 83D 00085790 _wcsupr 2119 83E 000857D0 _wcsupr_s 2120 83F 0008E770 _wmakepath_s 2121 840 0008E8E0 _wsplitpath_s 2122 841 00085850 _wtoi 2123 842 00085880 _wtoi64 2124 843 000858A0 _wtol 2125 844 000858C0 abs 2126 845 000858D0 atan 2127 846 00085B40 atan2 2128 847 00084200 atoi 2129 848 00084230 atol 2130 849 00086310 bsearch 2131 84A 00086420 ceil 2132 84B 00086540 cos 2133 84C 00086E50 fabs 2134 84D 00086F40 floor 2135 84E 00083FD0 isalnum 2136 84F 00084000 isalpha 2137 850 00084030 iscntrl 2138 851 00084060 isdigit 2139 852 00084090 isgraph 2140 853 000840C0 islower 2141 854 000840F0 isprint 2142 855 00084120 ispunct 2143 856 00084150 isspace 2144 857 00084180 isupper 2145 858 00087070 iswalnum 2146 859 00087080 iswalpha 2147 85A 00087090 iswascii 2148 85B 00087140 iswctype 2149 85C 000870B0 iswdigit 2150 85D 000870C0 iswgraph 2151 85E 000870D0 iswlower 2152 85F 000870E0 iswprint 2153 860 000870F0 iswspace 2154 861 00087100 iswxdigit 2155 862 000841B0 isxdigit 2156 863 000858C0 labs 2157 864 00087170 log 2158 865 00087460 longjmp 2159 866 00087490 mbstowcs 2160 867 00087560 memchr 2161 868 00087590 memcmp 2162 869 00097C40 memcpy 2163 86A 0008EBA0 memcpy_s 2164 86B 00097C40 memmove 2165 86C 0008EC50 memmove_s 2166 86D 00097F80 memset 2167 86E 00096F20 pow 2168 86F 00087670 qsort 2169 870 00087A70 qsort_s 2170 871 00086960 sin 2171 872 00087EA0 sprintf 2172 873 0008ECD0 sprintf_s 2173 874 00087F40 sqrt 2174 875 00088050 sscanf 2175 876 0008ED50 sscanf_s 2176 877 00088140 strcat 2177 878 0008EDB0 strcat_s 2178 879 000882A0 strchr 2179 87A 000882D0 strcmp 2180 87B 000881E0 strcpy 2181 87C 0008EE50 strcpy_s 2182 87D 00088390 strcspn 2183 87E 00088440 strlen 2184 87F 00088500 strncat 2185 880 0008EEE0 strncat_s 2186 881 000886B0 strncmp 2187 882 00088780 strncpy 2188 883 0008EFE0 strncpy_s 2189 884 000888F0 strnlen 2190 885 00088910 strpbrk 2191 886 000889C0 strrchr 2192 887 000889F0 strspn 2193 888 00088AC0 strstr 2194 889 0008F0D0 strtok_s 2195 88A 00088D60 strtol 2196 88B 00088DC0 strtoul 2197 88C 00084E50 swprintf 2198 88D 0008F1F0 swprintf_s 2199 88E 0008F280 swscanf_s 2200 88F 00088E00 tan 2201 890 000892B0 tolower 2202 891 000892F0 toupper 2203 892 00089360 towlower 2204 893 00089390 towupper 2205 894 000CADA0 vDbgPrintEx 2206 895 000CADD0 vDbgPrintExWithPrefix 2207 896 00089420 vsprintf 2208 897 0008ED00 vsprintf_s 2209 898 0008F220 vswprintf_s 2210 899 00089440 wcscat 2211 89A 0008F2E0 wcscat_s 2212 89B 000894B0 wcschr 2213 89C 000894E0 wcscmp 2214 89D 00089480 wcscpy 2215 89E 0008F390 wcscpy_s 2216 89F 00089520 wcscspn 2217 8A0 00089570 wcslen 2218 8A1 00089590 wcsncat 2219 8A2 0008F420 wcsncat_s 2220 8A3 000895E0 wcsncmp 2221 8A4 00089620 wcsncpy 2222 8A5 0008F530 wcsncpy_s 2223 8A6 00089670 wcsnlen 2224 8A7 000896A0 wcspbrk 2225 8A8 000896F0 wcsrchr 2226 8A9 00089730 wcsspn 2227 8AA 00089780 wcsstr 2228 8AB 0008F640 wcstok_s 2229 8AC 00089A00 wcstol 2230 8AD 00089AA0 wcstombs 2231 8AE 00089A60 wcstoul 8 00077370 [NONAME] Summary 9000 .data 4000 .mrdata E000 .pdata 42000 .rdata 1000 .reloc 66000 .rsrc FC000 .text 1000 RT Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file ole32.dll File Type: DLL Section contains the following exports for ole32.dll 00000000 characteristics 559F30B9 time date stamp Thu Jul 9 19:40:57 2015 0.00 version 800 ordinal base 553 number of functions 545 number of names ordinal hint RVA name 840 0 00008F60 BindMoniker 841 1 CLIPFORMAT_UserFree (forwarded to COMBASE.CLIPFORMAT_UserFree) 842 2 CLIPFORMAT_UserFree64 (forwarded to COMBASE.CLIPFORMAT_UserFree64) 805 3 000BC340 CLIPFORMAT_UserFreeExt 843 4 CLIPFORMAT_UserMarshal (forwarded to COMBASE.CLIPFORMAT_UserMarshal) 844 5 CLIPFORMAT_UserMarshal64 (forwarded to COMBASE.CLIPFORMAT_UserMarshal64) 806 6 000BC350 CLIPFORMAT_UserMarshalExt 845 7 CLIPFORMAT_UserSize (forwarded to COMBASE.CLIPFORMAT_UserSize) 846 8 CLIPFORMAT_UserSize64 (forwarded to COMBASE.CLIPFORMAT_UserSize64) 807 9 000BC360 CLIPFORMAT_UserSizeExt 847 A CLIPFORMAT_UserUnmarshal (forwarded to COMBASE.CLIPFORMAT_UserUnmarshal) 848 B CLIPFORMAT_UserUnmarshal64 (forwarded to COMBASE.CLIPFORMAT_UserUnmarshal64) 808 C 000BC370 CLIPFORMAT_UserUnmarshalExt 849 D CLSIDFromOle1Class (forwarded to api-ms-win-core-com-private-l1-1-1.CLSIDFromOle1Class) 850 E CLSIDFromProgID (forwarded to api-ms-win-core-com-l1-1-0.CLSIDFromProgID) 851 F 00014260 CLSIDFromProgIDEx 852 10 CLSIDFromString (forwarded to api-ms-win-core-com-l1-1-0.CLSIDFromString) 853 11 CStdAsyncStubBuffer2_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Connect) 854 12 CStdAsyncStubBuffer2_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Disconnect) 855 13 CStdAsyncStubBuffer2_Release (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Release) 856 14 CStdAsyncStubBuffer_AddRef (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_AddRef) 857 15 CStdAsyncStubBuffer_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Connect) 858 16 CStdAsyncStubBuffer_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Disconnect) 859 17 CStdAsyncStubBuffer_Invoke (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Invoke) 860 18 CStdAsyncStubBuffer_QueryInterface (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_QueryInterface) 861 19 CStdAsyncStubBuffer_Release (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Release) 862 1A CStdStubBuffer2_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_Connect) 863 1B CStdStubBuffer2_CountRefs (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_CountRefs) 864 1C CStdStubBuffer2_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_Disconnect) 865 1D CStdStubBuffer2_QueryInterface (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_QueryInterface) 866 1E 0000F4F0 CheckInitDde 867 1F 00009870 CleanROTForApartment 809 20 0000EFC0 ClipboardProcessUninitialize 868 21 CoAddRefServerProcess (forwarded to api-ms-win-core-com-l1-1-0.CoAddRefServerProcess) 869 22 0003CD10 CoAicGetTokenForCOM 870 23 0000B7A0 CoAllowSetForegroundWindow 871 24 CoAllowUnmarshalerCLSID (forwarded to api-ms-win-core-com-l1-1-0.CoAllowUnmarshalerCLSID) 872 25 0004AB10 CoBuildVersion 873 26 CoCancelCall (forwarded to api-ms-win-core-com-l1-1-0.CoCancelCall) 874 27 0003CD90 CoCheckElevationEnabled 875 28 CoCopyProxy (forwarded to api-ms-win-core-com-l1-1-0.CoCopyProxy) 876 29 CoCreateFreeThreadedMarshaler (forwarded to api-ms-win-core-com-l1-1-0.CoCreateFreeThreadedMarshaler) 877 2A CoCreateGuid (forwarded to api-ms-win-core-com-l1-1-0.CoCreateGuid) 878 2B CoCreateInstance (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstance) 879 2C CoCreateInstanceEx (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstanceEx) 880 2D CoCreateInstanceFromApp (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstanceFromApp) 881 2E CoCreateObjectInContext (forwarded to api-ms-win-core-com-private-l1-1-1.CoCreateObjectInContext) 882 2F CoDeactivateObject (forwarded to api-ms-win-core-com-private-l1-1-1.CoDeactivateObject) 883 30 CoDecodeProxy (forwarded to COMBASE.CoDecodeProxy) 884 31 CoDecrementMTAUsage (forwarded to api-ms-win-core-com-l1-1-0.CoDecrementMTAUsage) 885 32 CoDisableCallCancellation (forwarded to api-ms-win-core-com-l1-1-0.CoDisableCallCancellation) 886 33 CoDisconnectContext (forwarded to api-ms-win-core-com-l1-1-0.CoDisconnectContext) 887 34 CoDisconnectObject (forwarded to api-ms-win-core-com-l1-1-0.CoDisconnectObject) 888 35 0004CB80 CoDosDateTimeToFileTime 889 36 CoEnableCallCancellation (forwarded to api-ms-win-core-com-l1-1-0.CoEnableCallCancellation) 890 37 000130F0 CoFileTimeNow 891 38 0004CBC0 CoFileTimeToDosDateTime 892 39 000254D0 CoFreeAllLibraries 893 3A 0004AB20 CoFreeLibrary 894 3B CoFreeUnusedLibraries (forwarded to api-ms-win-core-com-l1-1-0.CoFreeUnusedLibraries) 895 3C CoFreeUnusedLibrariesEx (forwarded to api-ms-win-core-com-l1-1-0.CoFreeUnusedLibrariesEx) 896 3D CoGetActivationState (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetActivationState) 897 3E CoGetApartmentID (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetApartmentID) 898 3F CoGetApartmentType (forwarded to api-ms-win-core-com-l1-1-0.CoGetApartmentType) 899 40 CoGetCallContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetCallContext) 900 41 CoGetCallState (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetCallState) 901 42 CoGetCallerTID (forwarded to api-ms-win-core-com-l1-1-0.CoGetCallerTID) 902 43 CoGetCancelObject (forwarded to api-ms-win-core-com-l1-1-0.CoGetCancelObject) 903 44 CoGetClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoGetClassObject) 904 45 CoGetClassVersion (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetClassVersion) 905 46 CoGetComCatalog (forwarded to api-ms-win-core-com-private-l1-1-1.GetCatalogHelper) 906 47 CoGetContextToken (forwarded to api-ms-win-core-com-l1-1-0.CoGetContextToken) 907 48 CoGetCurrentLogicalThreadId (forwarded to api-ms-win-core-com-l1-1-0.CoGetCurrentLogicalThreadId) 908 49 CoGetCurrentProcess (forwarded to api-ms-win-core-com-l1-1-0.CoGetCurrentProcess) 909 4A CoGetDefaultContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetDefaultContext) 910 4B CoGetInstanceFromFile (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetInstanceFromFile) 911 4C CoGetInstanceFromIStorage (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetInstanceFromIStorage) 912 4D 000566F0 CoGetInterceptor 913 4E 0000B3B0 CoGetInterceptorForOle32 914 4F 00023F50 CoGetInterceptorFromTypeInfo 915 50 CoGetInterfaceAndReleaseStream (forwarded to api-ms-win-core-com-l1-1-0.CoGetInterfaceAndReleaseStream) 916 51 CoGetMalloc (forwarded to api-ms-win-core-com-l1-1-0.CoGetMalloc) 917 52 CoGetMarshalSizeMax (forwarded to api-ms-win-core-com-l1-1-0.CoGetMarshalSizeMax) 918 53 CoGetModuleType (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetModuleType) 919 54 00009D70 CoGetObject 920 55 CoGetObjectContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetObjectContext) 921 56 CoGetPSClsid (forwarded to api-ms-win-core-com-l1-1-0.CoGetPSClsid) 922 57 CoGetProcessIdentifier (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetProcessIdentifier) 923 58 CoGetStandardMarshal (forwarded to api-ms-win-core-com-l1-1-0.CoGetStandardMarshal) 924 59 CoGetStdMarshalEx (forwarded to api-ms-win-core-com-l1-1-0.CoGetStdMarshalEx) 925 5A CoGetSystemSecurityPermissions (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetSystemSecurityPermissions) 926 5B 0003CDA0 CoGetSystemWow64DirectoryW 927 5C CoGetTreatAsClass (forwarded to api-ms-win-core-com-l1-1-0.CoGetTreatAsClass) 928 5D CoHandlePriorityEventsFromMessagePump (forwarded to COMBASE.#111) 929 5E CoImpersonateClient (forwarded to api-ms-win-core-com-l1-1-0.CoImpersonateClient) 930 5F CoIncrementMTAUsage (forwarded to api-ms-win-core-com-l1-1-0.CoIncrementMTAUsage) 931 60 00013870 CoInitialize 932 61 CoInitializeEx (forwarded to api-ms-win-core-com-l1-1-0.CoInitializeEx) 933 62 CoInitializeSecurity (forwarded to api-ms-win-core-com-l1-1-0.CoInitializeSecurity) 934 63 00025FA0 CoInitializeWOW 935 64 0004AB30 CoInstall 936 65 CoInvalidateRemoteMachineBindings (forwarded to api-ms-win-core-com-private-l1-1-1.CoInvalidateRemoteMachineBindings) 937 66 CoIsHandlerConnected (forwarded to api-ms-win-core-com-l1-1-0.CoIsHandlerConnected) 938 67 0001EAA0 CoIsOle1Class 939 68 000201C0 CoLoadLibrary 940 69 CoLockObjectExternal (forwarded to api-ms-win-core-com-l1-1-0.CoLockObjectExternal) 941 6A CoMarshalHresult (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalHresult) 942 6B CoMarshalInterThreadInterfaceInStream (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalInterThreadInterfaceInStream) 943 6C CoMarshalInterface (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalInterface) 944 6D CoPopServiceDomain (forwarded to api-ms-win-core-com-private-l1-1-1.CoPopServiceDomain) 945 6E CoPushServiceDomain (forwarded to api-ms-win-core-com-private-l1-1-1.CoPushServiceDomain) 946 6F CoQueryAuthenticationServices (forwarded to api-ms-win-core-com-l1-1-0.CoQueryAuthenticationServices) 947 70 CoQueryClientBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoQueryClientBlanket) 948 71 CoQueryProxyBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoQueryProxyBlanket) 949 72 0002F9F0 CoQueryReleaseObject 950 73 CoReactivateObject (forwarded to api-ms-win-core-com-private-l1-1-1.CoReactivateObject) 951 74 CoRegisterActivationFilter (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterActivationFilter) 952 75 CoRegisterChannelHook (forwarded to COMBASE.#112) 953 76 CoRegisterClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterClassObject) 954 77 CoRegisterInitializeSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRegisterInitializeSpy) 955 78 CoRegisterMallocSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRegisterMallocSpy) 956 79 00025FB0 CoRegisterMessageFilter 957 7A CoRegisterPSClsid (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterPSClsid) 958 7B CoRegisterSurrogate (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterSurrogate) 959 7C 00025FC0 CoRegisterSurrogateEx 960 7D CoReleaseMarshalData (forwarded to api-ms-win-core-com-l1-1-0.CoReleaseMarshalData) 961 7E CoReleaseServerProcess (forwarded to api-ms-win-core-com-l1-1-0.CoReleaseServerProcess) 962 7F CoResumeClassObjects (forwarded to api-ms-win-core-com-l1-1-0.CoResumeClassObjects) 963 80 CoRetireServer (forwarded to api-ms-win-core-com-private-l1-1-1.CoRetireServer) 964 81 CoRevertToSelf (forwarded to api-ms-win-core-com-l1-1-0.CoRevertToSelf) 965 82 CoRevokeClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoRevokeClassObject) 966 83 CoRevokeInitializeSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRevokeInitializeSpy) 967 84 CoRevokeMallocSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRevokeMallocSpy) 968 85 CoSetCancelObject (forwarded to api-ms-win-core-com-l1-1-0.CoSetCancelObject) 969 86 CoSetMessageDispatcher (forwarded to COMBASE.#110) 970 87 CoSetProxyBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoSetProxyBlanket) 971 88 00030090 CoSetState 972 89 CoSuspendClassObjects (forwarded to api-ms-win-core-com-l1-1-0.CoSuspendClassObjects) 973 8A CoSwitchCallContext (forwarded to api-ms-win-core-com-l1-1-0.CoSwitchCallContext) 974 8B CoTaskMemAlloc (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemAlloc) 975 8C CoTaskMemFree (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemFree) 976 8D CoTaskMemRealloc (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemRealloc) 977 8E CoTestCancel (forwarded to api-ms-win-core-com-l1-1-0.CoTestCancel) 978 8F 0004C360 CoTreatAsClass 979 90 CoUninitialize (forwarded to api-ms-win-core-com-l1-1-0.CoUninitialize) 980 91 00025FD0 CoUnloadingWOW 981 92 CoUnmarshalHresult (forwarded to api-ms-win-core-com-l1-1-0.CoUnmarshalHresult) 982 93 CoUnmarshalInterface (forwarded to api-ms-win-core-com-l1-1-0.CoUnmarshalInterface) 983 94 CoVrfCheckThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfCheckThreadState) 984 95 CoVrfGetThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfGetThreadState) 985 96 CoVrfReleaseThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfReleaseThreadState) 986 97 CoWaitForMultipleHandles (forwarded to api-ms-win-core-com-l1-1-0.CoWaitForMultipleHandles) 987 98 CoWaitForMultipleObjects (forwarded to api-ms-win-core-com-l1-1-0.CoWaitForMultipleObjects) 988 99 0002F9F0 ComPs_NdrDllCanUnloadNow 989 9A 00056A50 ComPs_NdrDllGetClassObject 990 9B 00057090 ComPs_NdrDllRegisterProxy 991 9C 000570D0 ComPs_NdrDllUnregisterProxy 992 9D 0003D740 CreateAntiMoniker 993 9E 0000D450 CreateBindCtx 994 9F 0003F260 CreateClassMoniker 995 A0 000134C0 CreateDataAdviseHolder 996 A1 00078E20 CreateDataCache 997 A2 CreateErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoCreateErrorInfo) 998 A3 0001F490 CreateFileMoniker 999 A4 0000AB60 CreateGenericComposite 1000 A5 000201A0 CreateILockBytesOnHGlobal 1001 A6 00003EA0 CreateItemMoniker 1002 A7 0003D790 CreateObjrefMoniker 1003 A8 00013420 CreateOleAdviseHolder 1004 A9 000093B0 CreatePointerMoniker 1005 AA 000429A0 CreateStdProgressIndicator 1006 AB CreateStreamOnHGlobal (forwarded to api-ms-win-core-com-l1-1-0.CreateStreamOnHGlobal) 1007 AC DcomChannelSetHResult (forwarded to COMBASE.DcomChannelSetHResult) 1008 AD 00064910 DdeBindToObject 1009 AE 0003CDB0 DeletePatternAndExtensionTables 1010 AF 00003D20 DestroyRunningObjectTable 1011 B0 DllDebugObjectRPCHook (forwarded to api-ms-win-core-com-private-l1-1-1.DllDebugObjectRPCHook) 1012 B1 0000A5E0 DllGetClassObject 1013 B2 0000A5E0 DllGetClassObjectWOW 1014 B3 00030090 DllRegisterServer 1015 B4 00092A70 DoDragDrop 1016 B5 00092C20 DragDropSetFDT 1017 B6 EnableHookObject (forwarded to api-ms-win-core-com-private-l1-1-1.EnableHookObject) 1018 B7 00045CD0 FindExt 1019 B8 0003D0A0 FmtIdToPropStgName 1020 B9 00024B80 FreePropVariantArray 1021 BA 00003BD0 GetActiveObjectExt 1022 BB 00008940 GetClassFile 1023 BC 0003D0B0 GetConvertStg 1024 BD 0003D0C0 GetDocumentBitStg 1025 BE GetErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetErrorInfo) 1026 BF 0003D0D0 GetHGlobalFromILockBytes 1027 C0 GetHGlobalFromStream (forwarded to api-ms-win-core-com-l1-1-0.GetHGlobalFromStream) 1028 C1 GetHookInterface (forwarded to api-ms-win-core-com-private-l1-1-1.GetHookInterface) 1029 C2 000631F0 GetObjectFromRotByPath 1030 C3 000090F0 GetRunningObjectTable 1031 C4 HACCEL_UserFree (forwarded to COMBASE.HACCEL_UserFree) 1032 C5 HACCEL_UserFree64 (forwarded to COMBASE.HACCEL_UserFree64) 1033 C6 HACCEL_UserMarshal (forwarded to COMBASE.HACCEL_UserMarshal) 1034 C7 HACCEL_UserMarshal64 (forwarded to COMBASE.HACCEL_UserMarshal64) 1035 C8 HACCEL_UserSize (forwarded to COMBASE.HACCEL_UserSize) 1036 C9 HACCEL_UserSize64 (forwarded to COMBASE.HACCEL_UserSize64) 1037 CA HACCEL_UserUnmarshal (forwarded to COMBASE.HACCEL_UserUnmarshal) 1038 CB HACCEL_UserUnmarshal64 (forwarded to COMBASE.HACCEL_UserUnmarshal64) 1039 CC HBITMAP_UserFree (forwarded to COMBASE.HBITMAP_UserFree) 1040 CD HBITMAP_UserFree64 (forwarded to COMBASE.HBITMAP_UserFree64) 1041 CE HBITMAP_UserMarshal (forwarded to COMBASE.HBITMAP_UserMarshal) 1042 CF HBITMAP_UserMarshal64 (forwarded to COMBASE.HBITMAP_UserMarshal64) 1043 D0 HBITMAP_UserSize (forwarded to COMBASE.HBITMAP_UserSize) 1044 D1 HBITMAP_UserSize64 (forwarded to COMBASE.HBITMAP_UserSize64) 1045 D2 HBITMAP_UserUnmarshal (forwarded to COMBASE.HBITMAP_UserUnmarshal) 1046 D3 HBITMAP_UserUnmarshal64 (forwarded to COMBASE.HBITMAP_UserUnmarshal64) 1047 D4 HBRUSH_UserFree (forwarded to COMBASE.HBRUSH_UserFree) 1048 D5 HBRUSH_UserFree64 (forwarded to COMBASE.HBRUSH_UserFree64) 1049 D6 HBRUSH_UserMarshal (forwarded to COMBASE.HBRUSH_UserMarshal) 1050 D7 HBRUSH_UserMarshal64 (forwarded to COMBASE.HBRUSH_UserMarshal64) 1051 D8 HBRUSH_UserSize (forwarded to COMBASE.HBRUSH_UserSize) 1052 D9 HBRUSH_UserSize64 (forwarded to COMBASE.HBRUSH_UserSize64) 1053 DA HBRUSH_UserUnmarshal (forwarded to COMBASE.HBRUSH_UserUnmarshal) 1054 DB HBRUSH_UserUnmarshal64 (forwarded to COMBASE.HBRUSH_UserUnmarshal64) 1055 DC HDC_UserFree (forwarded to COMBASE.HDC_UserFree) 1056 DD HDC_UserFree64 (forwarded to COMBASE.HDC_UserFree64) 1057 DE HDC_UserMarshal (forwarded to COMBASE.HDC_UserMarshal) 1058 DF HDC_UserMarshal64 (forwarded to COMBASE.HDC_UserMarshal64) 1059 E0 HDC_UserSize (forwarded to COMBASE.HDC_UserSize) 1060 E1 HDC_UserSize64 (forwarded to COMBASE.HDC_UserSize64) 1061 E2 HDC_UserUnmarshal (forwarded to COMBASE.HDC_UserUnmarshal) 1062 E3 HDC_UserUnmarshal64 (forwarded to COMBASE.HDC_UserUnmarshal64) 1063 E4 0004D810 HENHMETAFILE_UserFree 1064 E5 0004D810 HENHMETAFILE_UserFree64 1065 E6 0004D860 HENHMETAFILE_UserMarshal 1066 E7 0004D930 HENHMETAFILE_UserMarshal64 1067 E8 0004DA10 HENHMETAFILE_UserSize 1068 E9 0004DA80 HENHMETAFILE_UserSize64 1069 EA 0004DB10 HENHMETAFILE_UserUnmarshal 1070 EB 0004DB90 HENHMETAFILE_UserUnmarshal64 1071 EC HGLOBAL_UserFree (forwarded to COMBASE.HGLOBAL_UserFree) 1072 ED HGLOBAL_UserFree64 (forwarded to COMBASE.HGLOBAL_UserFree64) 1073 EE HGLOBAL_UserMarshal (forwarded to COMBASE.HGLOBAL_UserMarshal) 1074 EF HGLOBAL_UserMarshal64 (forwarded to COMBASE.HGLOBAL_UserMarshal64) 1075 F0 HGLOBAL_UserSize (forwarded to COMBASE.HGLOBAL_UserSize) 1076 F1 HGLOBAL_UserSize64 (forwarded to COMBASE.HGLOBAL_UserSize64) 1077 F2 HGLOBAL_UserUnmarshal (forwarded to COMBASE.HGLOBAL_UserUnmarshal) 1078 F3 HGLOBAL_UserUnmarshal64 (forwarded to COMBASE.HGLOBAL_UserUnmarshal64) 1079 F4 HICON_UserFree (forwarded to COMBASE.HICON_UserFree) 1080 F5 HICON_UserFree64 (forwarded to COMBASE.HICON_UserFree64) 1081 F6 HICON_UserMarshal (forwarded to COMBASE.HICON_UserMarshal) 1082 F7 HICON_UserMarshal64 (forwarded to COMBASE.HICON_UserMarshal64) 1083 F8 HICON_UserSize (forwarded to COMBASE.HICON_UserSize) 1084 F9 HICON_UserSize64 (forwarded to COMBASE.HICON_UserSize64) 1085 FA HICON_UserUnmarshal (forwarded to COMBASE.HICON_UserUnmarshal) 1086 FB HICON_UserUnmarshal64 (forwarded to COMBASE.HICON_UserUnmarshal64) 1087 FC HMENU_UserFree (forwarded to COMBASE.HMENU_UserFree) 1088 FD HMENU_UserFree64 (forwarded to COMBASE.HMENU_UserFree64) 1089 FE HMENU_UserMarshal (forwarded to COMBASE.HMENU_UserMarshal) 1090 FF HMENU_UserMarshal64 (forwarded to COMBASE.HMENU_UserMarshal64) 1091 100 HMENU_UserSize (forwarded to COMBASE.HMENU_UserSize) 1092 101 HMENU_UserSize64 (forwarded to COMBASE.HMENU_UserSize64) 1093 102 HMENU_UserUnmarshal (forwarded to COMBASE.HMENU_UserUnmarshal) 1094 103 HMENU_UserUnmarshal64 (forwarded to COMBASE.HMENU_UserUnmarshal64) 1095 104 0004DC10 HMETAFILEPICT_UserFree 1096 105 0004DC10 HMETAFILEPICT_UserFree64 1097 106 0004DCA0 HMETAFILEPICT_UserMarshal 1098 107 0004DDE0 HMETAFILEPICT_UserMarshal64 1099 108 0004DF80 HMETAFILEPICT_UserSize 1100 109 0004E030 HMETAFILEPICT_UserSize64 1101 10A 0004E100 HMETAFILEPICT_UserUnmarshal 1102 10B 0004E180 HMETAFILEPICT_UserUnmarshal64 1103 10C 0004E200 HMETAFILE_UserFree 1104 10D 0004E200 HMETAFILE_UserFree64 1105 10E 0004E250 HMETAFILE_UserMarshal 1106 10F 0004E320 HMETAFILE_UserMarshal64 1107 110 0004E400 HMETAFILE_UserSize 1108 111 0004E470 HMETAFILE_UserSize64 1109 112 0004E500 HMETAFILE_UserUnmarshal 1110 113 0004E680 HMETAFILE_UserUnmarshal64 1111 114 HMONITOR_UserFree (forwarded to COMBASE.HMONITOR_UserFree) 1112 115 HMONITOR_UserFree64 (forwarded to COMBASE.HMONITOR_UserFree64) 1113 116 HMONITOR_UserMarshal (forwarded to COMBASE.HMONITOR_UserMarshal) 1114 117 HMONITOR_UserMarshal64 (forwarded to COMBASE.HMONITOR_UserMarshal64) 1115 118 HMONITOR_UserSize (forwarded to COMBASE.HMONITOR_UserSize) 1116 119 HMONITOR_UserSize64 (forwarded to COMBASE.HMONITOR_UserSize64) 1117 11A HMONITOR_UserUnmarshal (forwarded to COMBASE.HMONITOR_UserUnmarshal) 1118 11B HMONITOR_UserUnmarshal64 (forwarded to COMBASE.HMONITOR_UserUnmarshal64) 1119 11C HPALETTE_UserFree (forwarded to COMBASE.HPALETTE_UserFree) 1120 11D HPALETTE_UserFree64 (forwarded to COMBASE.HPALETTE_UserFree64) 810 11E 000BC380 HPALETTE_UserFreeExt 1121 11F HPALETTE_UserMarshal (forwarded to COMBASE.HPALETTE_UserMarshal) 1122 120 HPALETTE_UserMarshal64 (forwarded to COMBASE.HPALETTE_UserMarshal64) 811 121 000BC3D0 HPALETTE_UserMarshalExt 1123 122 HPALETTE_UserSize (forwarded to COMBASE.HPALETTE_UserSize) 1124 123 HPALETTE_UserSize64 (forwarded to COMBASE.HPALETTE_UserSize64) 812 124 000BC3E0 HPALETTE_UserSizeExt 1125 125 HPALETTE_UserUnmarshal (forwarded to COMBASE.HPALETTE_UserUnmarshal) 1126 126 HPALETTE_UserUnmarshal64 (forwarded to COMBASE.HPALETTE_UserUnmarshal64) 813 127 000BC3F0 HPALETTE_UserUnmarshalExt 814 128 HRGN_UserFree (forwarded to COMBASE.HRGN_UserFree) 815 129 HRGN_UserMarshal (forwarded to COMBASE.HRGN_UserMarshal) 816 12A HRGN_UserSize (forwarded to COMBASE.HRGN_UserSize) 817 12B HRGN_UserUnmarshal (forwarded to COMBASE.HRGN_UserUnmarshal) 1127 12C HWND_UserFree (forwarded to COMBASE.HWND_UserFree) 1128 12D HWND_UserFree64 (forwarded to COMBASE.HWND_UserFree64) 818 12E 000254D0 HWND_UserFree64Ext 819 12F 000254D0 HWND_UserFreeExt 1129 130 HWND_UserMarshal (forwarded to COMBASE.HWND_UserMarshal) 1130 131 HWND_UserMarshal64 (forwarded to COMBASE.HWND_UserMarshal64) 824 132 000BC470 HWND_UserMarshal64Ext 825 133 000BC470 HWND_UserMarshalExt 1131 134 HWND_UserSize (forwarded to COMBASE.HWND_UserSize) 1132 135 HWND_UserSize64 (forwarded to COMBASE.HWND_UserSize64) 826 136 000BC480 HWND_UserSize64Ext 827 137 000BC480 HWND_UserSizeExt 1133 138 HWND_UserUnmarshal (forwarded to COMBASE.HWND_UserUnmarshal) 1134 139 HWND_UserUnmarshal64 (forwarded to COMBASE.HWND_UserUnmarshal64) 828 13A 000BC490 HWND_UserUnmarshal64Ext 829 13B 000BC490 HWND_UserUnmarshalExt 1135 13C HkOleRegisterObject (forwarded to api-ms-win-core-com-private-l1-1-1.HkOleRegisterObject) 1136 13D IIDFromString (forwarded to api-ms-win-core-com-l1-1-0.IIDFromString) 1137 13E 00094E50 IsAccelerator 1138 13F 0000BF50 IsEqualGUID 1139 140 000247F0 IsRoInitializeASTAAllowedInDesktop 1140 141 0002F9F0 IsValidIid 1141 142 0000D420 IsValidInterface 1142 143 0002F9F0 IsValidPtrIn 1143 144 0002F9F0 IsValidPtrOut 1144 145 0000D7E0 MkParseDisplayName 1145 146 00041CB0 MonikerCommonPrefixWith 830 147 000BC4A0 MonikerLoadTypeLib 1146 148 00041D70 MonikerRelativePathTo 1147 149 NdrOleInitializeExtension (forwarded to api-ms-win-core-com-private-l1-1-1.NdrOleInitializeExtension) 1148 14A NdrProxyForwardingFunction10 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction10) 1149 14B NdrProxyForwardingFunction11 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction11) 1150 14C NdrProxyForwardingFunction12 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction12) 1151 14D NdrProxyForwardingFunction13 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction13) 1152 14E NdrProxyForwardingFunction14 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction14) 1153 14F NdrProxyForwardingFunction15 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction15) 1154 150 NdrProxyForwardingFunction16 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction16) 1155 151 NdrProxyForwardingFunction17 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction17) 1156 152 NdrProxyForwardingFunction18 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction18) 1157 153 NdrProxyForwardingFunction19 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction19) 1158 154 NdrProxyForwardingFunction20 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction20) 1159 155 NdrProxyForwardingFunction21 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction21) 1160 156 NdrProxyForwardingFunction22 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction22) 1161 157 NdrProxyForwardingFunction23 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction23) 1162 158 NdrProxyForwardingFunction24 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction24) 1163 159 NdrProxyForwardingFunction25 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction25) 1164 15A NdrProxyForwardingFunction26 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction26) 1165 15B NdrProxyForwardingFunction27 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction27) 1166 15C NdrProxyForwardingFunction28 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction28) 1167 15D NdrProxyForwardingFunction29 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction29) 1168 15E NdrProxyForwardingFunction3 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction3) 1169 15F NdrProxyForwardingFunction30 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction30) 1170 160 NdrProxyForwardingFunction31 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction31) 1171 161 NdrProxyForwardingFunction32 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction32) 1172 162 NdrProxyForwardingFunction4 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction4) 1173 163 NdrProxyForwardingFunction5 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction5) 1174 164 NdrProxyForwardingFunction6 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction6) 1175 165 NdrProxyForwardingFunction7 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction7) 1176 166 NdrProxyForwardingFunction8 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction8) 1177 167 NdrProxyForwardingFunction9 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction9) 1178 168 ObjectStublessClient10 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient10) 1179 169 ObjectStublessClient11 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient11) 1180 16A ObjectStublessClient12 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient12) 1181 16B ObjectStublessClient13 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient13) 1182 16C ObjectStublessClient14 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient14) 1183 16D ObjectStublessClient15 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient15) 1184 16E ObjectStublessClient16 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient16) 1185 16F ObjectStublessClient17 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient17) 1186 170 ObjectStublessClient18 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient18) 1187 171 ObjectStublessClient19 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient19) 1188 172 ObjectStublessClient20 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient20) 1189 173 ObjectStublessClient21 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient21) 1190 174 ObjectStublessClient22 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient22) 1191 175 ObjectStublessClient23 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient23) 1192 176 ObjectStublessClient24 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient24) 1193 177 ObjectStublessClient25 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient25) 1194 178 ObjectStublessClient26 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient26) 1195 179 ObjectStublessClient27 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient27) 1196 17A ObjectStublessClient28 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient28) 1197 17B ObjectStublessClient29 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient29) 1198 17C ObjectStublessClient3 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient3) 1199 17D ObjectStublessClient30 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient30) 1200 17E ObjectStublessClient31 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient31) 1201 17F ObjectStublessClient32 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient32) 1202 180 ObjectStublessClient4 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient4) 1203 181 ObjectStublessClient5 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient5) 1204 182 ObjectStublessClient6 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient6) 1205 183 ObjectStublessClient7 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient7) 1206 184 ObjectStublessClient8 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient8) 1207 185 ObjectStublessClient9 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient9) 1208 186 0000A5D0 Ole32DllGetClassObject 1209 187 0004AB10 OleBuildVersion 1210 188 000A4C60 OleConvertIStorageToOLESTREAM 1211 189 000A4CF0 OleConvertIStorageToOLESTREAMEx 1212 18A 000A4F00 OleConvertOLESTREAMToIStorage 1213 18B 000A4FC0 OleConvertOLESTREAMToIStorageEx 1214 18C 00075940 OleCreate 1215 18D 00019160 OleCreateDefaultHandler 1216 18E 00019190 OleCreateEmbeddingHelper 1217 18F 000759D0 OleCreateEx 1218 190 00008130 OleCreateFontIndirectExt 1219 191 00075C20 OleCreateFromData 1220 192 00075CB0 OleCreateFromDataEx 1221 193 00075F20 OleCreateFromFile 1222 194 00075FC0 OleCreateFromFileEx 1223 195 00076250 OleCreateLink 1224 196 000762E0 OleCreateLinkEx 1225 197 00076490 OleCreateLinkFromData 1226 198 00076520 OleCreateLinkFromDataEx 1227 199 00076810 OleCreateLinkToFile 1228 19A 000768A0 OleCreateLinkToFileEx 1229 19B 00095070 OleCreateMenuDescriptor 1230 19C 00006C00 OleCreatePictureIndirectExt 1231 19D 000B6C10 OleCreatePropertyFrameIndirectExt 1232 19E 0001AD40 OleCreateStaticFromData 1233 19F 000951D0 OleDestroyMenuDescriptor 1234 1A0 000192B0 OleDoAutoConvert 1235 1A1 000770A0 OleDraw 1236 1A2 0001B200 OleDuplicateData 1237 1A3 00005FE0 OleFlushClipboard 1238 1A4 00019A00 OleGetAutoConvert 1239 1A5 00012460 OleGetClipboard 1240 1A6 00018140 OleGetIconOfClass 1241 1A7 000977B0 OleGetIconOfFile 802 1A8 00087100 OleGetPackageClipboardOwner 1242 1A9 000B48B0 OleIconToCursorExt 1243 1AA 0000EE90 OleInitialize 1244 1AB 000775A0 OleInitializeWOW 1245 1AC 00006430 OleIsCurrentClipboard 1246 1AD 00077190 OleIsRunning 1247 1AE 00018EF0 OleLoad 1248 1AF 0003DCC0 OleLoadFromStream 1249 1B0 000B4D10 OleLoadPictureExt 1250 1B1 000B7020 OleLoadPictureFileExt 1251 1B2 000B4E50 OleLoadPicturePathExt 1252 1B3 000143C0 OleLockRunning 1253 1B4 00018640 OleMetafilePictFromIconAndLabel 1254 1B5 00077230 OleNoteObjectVisible 1255 1B6 00076B60 OleQueryCreateFromData 1256 1B7 00076BB0 OleQueryLinkFromData 1257 1B8 0001F260 OleRegEnumFormatEtc 1258 1B9 00099460 OleRegEnumVerbs 1259 1BA 0000F220 OleRegGetMiscStatus 1260 1BB 00019890 OleRegGetUserType 1261 1BC 000139B0 OleReleaseEnumVerbCache 1262 1BD 00008CE0 OleRun 1263 1BE 0001FC50 OleSave 1264 1BF 000B7150 OleSavePictureFileExt 1265 1C0 00024690 OleSaveToStream 1266 1C1 00097410 OleSetAutoConvert 1267 1C2 000802D0 OleSetClipboard 1268 1C3 0001FDC0 OleSetContainedObject 1269 1C4 00095220 OleSetMenuDescriptor 1270 1C5 000953D0 OleTranslateAccelerator 1271 1C6 000142C0 OleTranslateColorExt 1272 1C7 0000A4A0 OleUninitialize 1273 1C8 0001E840 OpenOrCreateStream 1274 1C9 ProgIDFromCLSID (forwarded to api-ms-win-core-com-l1-1-0.ProgIDFromCLSID) 1275 1CA 0003D0E0 PropStgNameToFmtId 1276 1CB 0003D0F0 PropSysAllocString 1277 1CC 0003D100 PropSysFreeString 1278 1CD 0003D110 PropVariantChangeType 1279 1CE 00024B90 PropVariantClear 1280 1CF 00024BA0 PropVariantCopy 1281 1D0 000201B0 ReadClassStg 1282 1D1 00024780 ReadClassStm 1283 1D2 0001A360 ReadFmtUserTypeStg 1284 1D3 0001F020 ReadOleStg 831 1D4 000201B0 ReadStorageProperties 1285 1D5 0001A590 ReadStringStream 1286 1D6 000BC610 RegisterActiveObjectExt 1287 1D7 0000E820 RegisterDragDrop 1288 1D8 0000D6A0 ReleaseStgMedium 1289 1D9 000BC6F0 RevokeActiveObjectExt 1290 1DA 00009710 RevokeDragDrop 1291 1DB RoGetAgileReference (forwarded to api-ms-win-core-com-l1-1-1.RoGetAgileReference) 1292 1DC 0004E840 SNB_UserFree 1293 1DD 0004E840 SNB_UserFree64 1294 1DE 0004E8B0 SNB_UserMarshal 1295 1DF 0004E990 SNB_UserMarshal64 1296 1E0 0004EA70 SNB_UserSize 1297 1E1 0004EB00 SNB_UserSize64 1298 1E2 0004EB80 SNB_UserUnmarshal 1299 1E3 0004EEF0 SNB_UserUnmarshal64 1300 1E4 00050710 STGMEDIUM_UserFree 1301 1E5 00050710 STGMEDIUM_UserFree64 832 1E6 000BC580 STGMEDIUM_UserFreeExt 1302 1E7 000507D0 STGMEDIUM_UserMarshal 1303 1E8 000509B0 STGMEDIUM_UserMarshal64 833 1E9 000BC590 STGMEDIUM_UserMarshalExt 1304 1EA 00050BB0 STGMEDIUM_UserSize 1305 1EB 00050D40 STGMEDIUM_UserSize64 834 1EC 000BC5A0 STGMEDIUM_UserSizeExt 1306 1ED 00050EE0 STGMEDIUM_UserUnmarshal 1307 1EE 00050F60 STGMEDIUM_UserUnmarshal64 835 1EF 000BC5B0 STGMEDIUM_UserUnmarshalExt 1308 1F0 00077470 SetConvertStg 1309 1F1 00077490 SetDocumentBitStg 1310 1F2 SetErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoSetErrorInfo) 836 1F3 00013DC0 SetOleautModule 1311 1F4 000254D0 SetWOWThunkGlobalPtr 837 1F5 000ACA10 StdTypesGetClassObject 838 1F6 000ACA90 StdTypesRegisterServer 1312 1F7 0003D130 StgConvertPropertyToVariant 1313 1F8 0003D140 StgConvertVariantToProperty 1314 1F9 0003D150 StgCreateDocfile 1315 1FA 00014450 StgCreateDocfileOnILockBytes 1316 1FB 0003D160 StgCreatePropSetStg 1317 1FC 0003D170 StgCreatePropStg 1318 1FD 0003D180 StgCreateStorageEx 1319 1FE 0003D1D0 StgGetIFillLockBytesOnFile 1320 1FF 0003D1E0 StgGetIFillLockBytesOnILockBytes 1321 200 0003D1F0 StgIsStorageFile 1322 201 0003D200 StgIsStorageILockBytes 1323 202 0003D210 StgOpenAsyncDocfileOnIFillLockBytes 1324 203 0003D220 StgOpenPropStg 1325 204 00013DD0 StgOpenStorage 1326 205 00020150 StgOpenStorageEx 1327 206 0003D230 StgOpenStorageOnHandle 1328 207 00008E10 StgOpenStorageOnILockBytes 1329 208 0003D240 StgPropertyLengthAsVariant 1330 209 0003D250 StgSetTimes 1331 20A StringFromCLSID (forwarded to api-ms-win-core-com-l1-1-0.StringFromCLSID) 1332 20B StringFromGUID2 (forwarded to api-ms-win-core-com-l1-1-0.StringFromGUID2) 1333 20C StringFromIID (forwarded to api-ms-win-core-com-l1-1-0.StringFromIID) 1334 20D UpdateDCOMSettings (forwarded to api-ms-win-core-com-private-l1-1-1.UpdateDCOMSettings) 1335 20E UpdateProcessTracing (forwarded to api-ms-win-core-com-private-l1-1-1.UpdateProcessTracing) 1336 20F 000A6AA0 UtConvertDvtd16toDvtd32 1337 210 000A6CF0 UtConvertDvtd32toDvtd16 1338 211 000A6FE0 UtGetDvtd16Info 1339 212 000A7130 UtGetDvtd32Info 1340 213 WdtpInterfacePointer_UserFree (forwarded to COMBASE.WdtpInterfacePointer_UserFree) 1341 214 WdtpInterfacePointer_UserFree64 (forwarded to COMBASE.WdtpInterfacePointer_UserFree64) 1342 215 WdtpInterfacePointer_UserMarshal (forwarded to COMBASE.WdtpInterfacePointer_UserMarshal) 1343 216 WdtpInterfacePointer_UserMarshal64 (forwarded to COMBASE.WdtpInterfacePointer_UserMarshal64) 1344 217 WdtpInterfacePointer_UserSize (forwarded to COMBASE.WdtpInterfacePointer_UserSize) 1345 218 WdtpInterfacePointer_UserSize64 (forwarded to COMBASE.WdtpInterfacePointer_UserSize64) 1346 219 WdtpInterfacePointer_UserUnmarshal (forwarded to COMBASE.WdtpInterfacePointer_UserUnmarshal) 1347 21A WdtpInterfacePointer_UserUnmarshal64 (forwarded to COMBASE.WdtpInterfacePointer_UserUnmarshal64) 1348 21B 0003D260 WriteClassStg 1349 21C 0003D270 WriteClassStm 1350 21D 00019D40 WriteFmtUserTypeStg 1351 21E 0001EDF0 WriteOleStg 839 21F 000BC5C0 WriteStorageProperties 1352 220 00019F30 WriteStringStream 800 00008B70 [NONAME] 801 00024790 [NONAME] 803 00024750 [NONAME] 804 000867A0 [NONAME] 820 00092C70 [NONAME] 821 00092D80 [NONAME] 822 00092C50 [NONAME] 823 00092E70 [NONAME] Summary 2000 .data 1000 .didat E000 .pdata 55000 .rdata 6000 .reloc 13000 .rsrc C1000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file oleaut32.dll File Type: DLL Section contains the following exports for OLEAUT32.dll 00000000 characteristics 64A473E2 time date stamp Tue Jul 4 12:32:50 2023 0.00 version 2 ordinal base 499 number of functions 425 number of names ordinal hint RVA name 286 0 0001AD60 BSTR_UserFree 144 1 0001AD50 BSTR_UserFree64 284 2 00018470 BSTR_UserMarshal 145 3 00014450 BSTR_UserMarshal64 283 4 00014110 BSTR_UserSize 151 5 000144E0 BSTR_UserSize64 285 6 000179C0 BSTR_UserUnmarshal 300 7 00016FE0 BSTR_UserUnmarshal64 414 8 00055710 BstrFromVector 171 9 000477E0 ClearCustData 31 A 000583F0 CreateDispTypeInfo 202 B 00020080 CreateErrorInfo 32 C 00058850 CreateStdDispatch 160 D 0002E900 CreateTypeLib 180 E 0001E980 CreateTypeLib2 146 F 00006D90 DispCallFunc 29 10 0001B960 DispGetIDsOfNames 28 11 00058860 DispGetParam 30 12 000040A0 DispInvoke 301 13 0001BD80 DllCanUnloadNow 302 14 00011C10 DllGetClassObject 320 15 00058F20 DllRegisterServer 321 16 00059220 DllUnregisterServer 14 17 0001EB40 DosDateTimeToVariantTime 35 18 0001BED0 GetActiveObject 332 19 00059740 GetAltMonthNames 200 1A 00020090 GetErrorInfo 322 1B 0005E670 GetRecordInfoFromGuids 323 1C 0005E7F0 GetRecordInfoFromTypeInfo 326 1D 0002F870 GetVarConversionLocaleSetting 445 1E HWND_UserFree (forwarded to COMBASE.HWND_UserFree) 449 1F HWND_UserFree64 (forwarded to COMBASE.HWND_UserFree64) 446 20 HWND_UserMarshal (forwarded to COMBASE.HWND_UserMarshal) 450 21 HWND_UserMarshal64 (forwarded to COMBASE.HWND_UserMarshal64) 447 22 HWND_UserSize (forwarded to COMBASE.HWND_UserSize) 451 23 HWND_UserSize64 (forwarded to COMBASE.HWND_UserSize64) 448 24 HWND_UserUnmarshal (forwarded to COMBASE.HWND_UserUnmarshal) 452 25 HWND_UserUnmarshal64 (forwarded to COMBASE.HWND_UserUnmarshal64) 165 26 0001BCC0 LHashValOfNameSys 166 27 000110A0 LHashValOfNameSysA 296 28 00015430 LPSAFEARRAY_Marshal 295 29 00015110 LPSAFEARRAY_Size 297 2A 00016620 LPSAFEARRAY_Unmarshal 294 2B 0001AC60 LPSAFEARRAY_UserFree 324 2C 000554C0 LPSAFEARRAY_UserFree64 292 2D 00018510 LPSAFEARRAY_UserMarshal 328 2E 000199A0 LPSAFEARRAY_UserMarshal64 291 2F 00018520 LPSAFEARRAY_UserSize 350 30 0001A100 LPSAFEARRAY_UserSize64 293 31 00018500 LPSAFEARRAY_UserUnmarshal 351 32 00018CA0 LPSAFEARRAY_UserUnmarshal64 162 33 00004DC0 LoadRegTypeLib 161 34 0001BD90 LoadTypeLib 183 35 000111C0 LoadTypeLibEx 500 36 00014220 OACleanup 352 37 0001E980 OACreateTypeLib2 170 38 00031850 OaBuildVersion 444 39 0002F8A0 OaEnablePerUserTLibRegistration 420 3A 0001BF20 OleCreateFontIndirect 419 3B 00002860 OleCreatePictureIndirect 417 3C 0005F4A0 OleCreatePropertyFrame 416 3D 0005F500 OleCreatePropertyFrameIndirect 415 3E 0005F540 OleIconToCursor 418 3F 0005F590 OleLoadPicture 401 40 0005F5C0 OleLoadPictureEx 422 41 0005F650 OleLoadPictureFile 402 42 0005F690 OleLoadPictureFileEx 424 43 0005F710 OleLoadPicturePath 423 44 0005F790 OleSavePictureFile 421 45 0001BDA0 OleTranslateColor 164 46 00030DA0 QueryPathOfRegTypeLib 33 47 000592E0 RegisterActiveObject 163 48 00030EA0 RegisterTypeLib 442 49 00030F50 RegisterTypeLibForUser 34 4A 00059340 RevokeActiveObject 23 4B 000183D0 SafeArrayAccessData 353 4C 0005FA20 SafeArrayAddRef 37 4D 0000D050 SafeArrayAllocData 36 4E 00014030 SafeArrayAllocDescriptor 41 4F 0000D130 SafeArrayAllocDescriptorEx 27 50 00010D70 SafeArrayCopy 412 51 00010E70 SafeArrayCopyData 15 52 0000CF90 SafeArrayCreate 42 53 0005FAA0 SafeArrayCreateEx 411 54 0000C850 SafeArrayCreateVector 43 55 0005FBE0 SafeArrayCreateVectorEx 16 56 0000CBD0 SafeArrayDestroy 39 57 0005FEB0 SafeArrayDestroyData 38 58 0001BBC0 SafeArrayDestroyDescriptor 17 59 0001AB20 SafeArrayGetDim 25 5A 0001A4E0 SafeArrayGetElement 18 5B 0001B500 SafeArrayGetElemsize 67 5C 0005FD70 SafeArrayGetIID 20 5D 0001A710 SafeArrayGetLBound 45 5E 0005FDA0 SafeArrayGetRecordInfo 19 5F 0001A440 SafeArrayGetUBound 77 60 0001A6C0 SafeArrayGetVartype 21 61 00011070 SafeArrayLock 148 62 0001A620 SafeArrayPtrOfIndex 26 63 0000D360 SafeArrayPutElement 40 64 0001B520 SafeArrayRedim 354 65 0005FE00 SafeArrayReleaseData 355 66 0005FE10 SafeArrayReleaseDescriptor 57 67 0001B880 SafeArraySetIID 44 68 0005FE20 SafeArraySetRecordInfo 24 69 0001A4B0 SafeArrayUnaccessData 22 6A 00011040 SafeArrayUnlock 201 6B 000200A0 SetErrorInfo 327 6C 0002F8C0 SetOaNoCache 325 6D 0002F8E0 SetVarConversionLocaleSetting 356 6E 00060020 SysAddRefString 2 6F 00009F10 SysAllocString 150 70 0000BEC0 SysAllocStringByteLen 4 71 0000C280 SysAllocStringLen 6 72 0000BF80 SysFreeString 3 73 00001B00 SysReAllocString 5 74 000181F0 SysReAllocStringLen 357 75 00060030 SysReleaseString 149 76 00014190 SysStringByteLen 7 77 0001AB00 SysStringLen 184 78 000050F0 SystemTimeToVariantTime 186 79 0002F1B0 UnRegisterTypeLib 443 7A 0002F240 UnRegisterTypeLibForUser 290 7B 0001AB70 VARIANT_UserFree 358 7C 0001AB60 VARIANT_UserFree64 288 7D 00018530 VARIANT_UserMarshal 359 7E 000195C0 VARIANT_UserMarshal64 287 7F 00018950 VARIANT_UserSize 380 80 00019E10 VARIANT_UserSize64 289 81 00017130 VARIANT_UserUnmarshal 381 82 00015930 VARIANT_UserUnmarshal64 168 83 0004E820 VarAbs 141 84 0004F620 VarAdd 142 85 00051EA0 VarAnd 124 86 000559E0 VarBoolFromCy 123 87 00055A00 VarBoolFromDate 236 88 00060060 VarBoolFromDec 126 89 00055A10 VarBoolFromDisp 233 8A 00055A60 VarBoolFromI1 119 8B 00055A70 VarBoolFromI2 120 8C 00055AF0 VarBoolFromI4 370 8D 00055A90 VarBoolFromI8 121 8E 00055AB0 VarBoolFromR4 122 8F 00055AD0 VarBoolFromR8 125 90 00004930 VarBoolFromStr 118 91 00055A60 VarBoolFromUI1 234 92 00055A70 VarBoolFromUI2 235 93 00055AF0 VarBoolFromUI4 371 94 00055A90 VarBoolFromUI8 313 95 0001B280 VarBstrCat 314 96 0001B330 VarBstrCmp 116 97 000048C0 VarBstrFromBool 113 98 00055B00 VarBstrFromCy 114 99 0001BFC0 VarBstrFromDate 232 9A 00001400 VarBstrFromDec 115 9B 00055ED0 VarBstrFromDisp 229 9C 00055F20 VarBstrFromI1 109 9D 00055F30 VarBstrFromI2 110 9E 00055FE0 VarBstrFromI4 368 9F 00056090 VarBstrFromI8 111 A0 00056150 VarBstrFromR4 112 A1 000056B0 VarBstrFromR8 108 A2 00056280 VarBstrFromUI1 230 A3 00056290 VarBstrFromUI2 231 A4 00004B40 VarBstrFromUI4 369 A5 00004110 VarBstrFromUI8 318 A6 00050010 VarCat 176 A7 0001AD90 VarCmp 306 A8 00052AF0 VarCyAbs 299 A9 00052B30 VarCyAdd 311 AA 00052B70 VarCyCmp 312 AB 00052B90 VarCyCmpR8 307 AC 00052BF0 VarCyFix 106 AD 00064430 VarCyFromBool 103 AE 00064480 VarCyFromDate 228 AF 00060090 VarCyFromDec 105 B0 000562A0 VarCyFromDisp 225 B1 000562F0 VarCyFromI1 99 B2 00064430 VarCyFromI2 100 B3 00064450 VarCyFromI4 366 B4 000646A0 VarCyFromI8 101 B5 00064470 VarCyFromR4 102 B6 00064480 VarCyFromR8 104 B7 00056310 VarCyFromStr 98 B8 000563A0 VarCyFromUI1 226 B9 000563C0 VarCyFromUI2 227 BA 000563E0 VarCyFromUI4 367 BB 00056400 VarCyFromUI8 308 BC 00052C30 VarCyInt 303 BD 00052CA0 VarCyMul 304 BE 00052E10 VarCyMulI4 329 BF 000500E0 VarCyMulI8 309 C0 00052E90 VarCyNeg 310 C1 0004EA80 VarCyRound 305 C2 00052EC0 VarCySub 96 C3 00056FD0 VarDateFromBool 93 C4 00056420 VarDateFromCy 224 C5 000603C0 VarDateFromDec 95 C6 00056460 VarDateFromDisp 221 C7 000564C0 VarDateFromI1 89 C8 00056FD0 VarDateFromI2 90 C9 00056500 VarDateFromI4 364 CA 00056540 VarDateFromI8 91 CB 00056580 VarDateFromR4 92 CC 000565B0 VarDateFromR8 94 CD 00063B90 VarDateFromStr 88 CE 00057050 VarDateFromUI1 222 CF 000565E0 VarDateFromUI2 223 D0 00056620 VarDateFromUI4 365 D1 00056660 VarDateFromUI8 330 D2 00006160 VarDateFromUdate 319 D3 00006180 VarDateFromUdateEx 182 D4 00053490 VarDecAbs 177 D5 000534C0 VarDecAdd 204 D6 000022C0 VarDecCmp 298 D7 00052A30 VarDecCmpR8 178 D8 000534D0 VarDecDiv 187 D9 00053B10 VarDecFix 199 DA 00060420 VarDecFromBool 196 DB 00060450 VarDecFromCy 195 DC 00060480 VarDecFromDate 198 DD 00060490 VarDecFromDisp 241 DE 000604F0 VarDecFromI1 191 DF 00060520 VarDecFromI2 192 E0 00002830 VarDecFromI4 374 E1 00060560 VarDecFromI8 193 E2 00001970 VarDecFromR4 194 E3 00001620 VarDecFromR8 197 E4 000605B0 VarDecFromStr 190 E5 00060640 VarDecFromUI1 242 E6 00060660 VarDecFromUI2 243 E7 00060680 VarDecFromUI4 375 E8 000606A0 VarDecFromUI8 188 E9 00053B30 VarDecInt 179 EA 00053B70 VarDecMul 189 EB 00053DE0 VarDecNeg 203 EC 000017A0 VarDecRound 181 ED 00053E10 VarDecSub 143 EE 00050150 VarDiv 152 EF 00052030 VarEqv 169 F0 0004EB00 VarFix 87 F1 00065C50 VarFormat 127 F2 00065D40 VarFormatCurrency 97 F3 00065E60 VarFormatDateTime 139 F4 00065EE0 VarFormatFromTokens 107 F5 00067F50 VarFormatNumber 117 F6 00068060 VarFormatPercent 253 F7 000566A0 VarI1FromBool 250 F8 000566B0 VarI1FromCy 249 F9 000566E0 VarI1FromDate 256 FA 000606C0 VarI1FromDec 252 FB 000566F0 VarI1FromDisp 245 FC 00056740 VarI1FromI2 246 FD 00056770 VarI1FromI4 376 FE 00056790 VarI1FromI8 247 FF 000567B0 VarI1FromR4 248 100 000567C0 VarI1FromR8 251 101 00056800 VarI1FromStr 244 102 00056830 VarI1FromUI1 254 103 00056850 VarI1FromUI2 255 104 00056870 VarI1FromUI4 377 105 00056890 VarI1FromUI8 56 106 00057250 VarI2FromBool 52 107 00064580 VarI2FromCy 53 108 000568B0 VarI2FromDate 208 109 00060740 VarI2FromDec 55 10A 000568C0 VarI2FromDisp 205 10B 00056910 VarI2FromI1 49 10C 00056920 VarI2FromI4 346 10D 00056940 VarI2FromI8 50 10E 00056970 VarI2FromR4 51 10F 00056980 VarI2FromR8 54 110 0001EA10 VarI2FromStr 48 111 000573A0 VarI2FromUI1 206 112 000569C0 VarI2FromUI2 207 113 000569E0 VarI2FromUI4 347 114 00056A00 VarI2FromUI8 66 115 00056A20 VarI4FromBool 62 116 000645D0 VarI4FromCy 63 117 00056A30 VarI4FromDate 212 118 000607C0 VarI4FromDec 65 119 00056A40 VarI4FromDisp 209 11A 00056A90 VarI4FromI1 59 11B 00056A20 VarI4FromI2 348 11C 00056AA0 VarI4FromI8 60 11D 00056AD0 VarI4FromR4 61 11E 000018F0 VarI4FromR8 64 11F 000055D0 VarI4FromStr 58 120 000574F0 VarI4FromUI1 210 121 00056AE0 VarI4FromUI2 211 122 00056B00 VarI4FromUI4 349 123 00056B20 VarI4FromUI8 341 124 00056B40 VarI8FromBool 337 125 000646E0 VarI8FromCy 338 126 00056B50 VarI8FromDate 345 127 00060840 VarI8FromDec 340 128 00056B60 VarI8FromDisp 342 129 00056BB0 VarI8FromI1 334 12A 00056B40 VarI8FromI2 335 12B 00056BC0 VarI8FromR4 336 12C 00056BD0 VarI8FromR8 339 12D 00056C10 VarI8FromStr 333 12E 00057650 VarI8FromUI1 343 12F 00056D70 VarI8FromUI2 344 130 00056D80 VarI8FromUI4 427 131 00056D90 VarI8FromUI8 153 132 00052060 VarIdiv 154 133 00052220 VarImp 172 134 0004ECF0 VarInt 155 135 00052310 VarMod 129 136 00068150 VarMonthName 156 137 000507E0 VarMul 173 138 0004EEC0 VarNeg 174 139 00052490 VarNot 47 13A 000067C0 VarNumFromParseNum 157 13B 00052530 VarOr 46 13C 00005990 VarParseNumFromStr 158 13D 000510C0 VarPow 316 13E 00052AA0 VarR4CmpR8 76 13F 00056E50 VarR4FromBool 72 140 00064650 VarR4FromCy 73 141 00056DC0 VarR4FromDate 216 142 000608E0 VarR4FromDec 75 143 00056DD0 VarR4FromDisp 213 144 00056E30 VarR4FromI1 69 145 00056E50 VarR4FromI2 70 146 00056E70 VarR4FromI4 360 147 00056E90 VarR4FromI8 71 148 000028C0 VarR4FromR8 74 149 00002100 VarR4FromStr 68 14A 00056EB0 VarR4FromUI1 214 14B 00056ED0 VarR4FromUI2 215 14C 00056EF0 VarR4FromUI4 361 14D 00056F10 VarR4FromUI8 86 14E 00056FD0 VarR8FromBool 82 14F 00064680 VarR8FromCy 83 150 00056F40 VarR8FromDate 220 151 00060930 VarR8FromDec 85 152 00056F50 VarR8FromDisp 217 153 00056FB0 VarR8FromI1 79 154 00056FD0 VarR8FromI2 80 155 00056FF0 VarR8FromI4 362 156 00057010 VarR8FromI8 81 157 00057030 VarR8FromR4 84 158 00005540 VarR8FromStr 78 159 00057050 VarR8FromUI1 218 15A 00057070 VarR8FromUI2 219 15B 00057090 VarR8FromUI4 363 15C 000570B0 VarR8FromUI8 315 15D 00051230 VarR8Pow 317 15E 0004F160 VarR8Round 175 15F 0004F250 VarRound 159 160 000512F0 VarSub 140 161 00068220 VarTokenizeFormatString 138 162 000566A0 VarUI1FromBool 134 163 000570E0 VarUI1FromCy 135 164 00057110 VarUI1FromDate 240 165 000609C0 VarUI1FromDec 137 166 00057120 VarUI1FromDisp 237 167 00057170 VarUI1FromI1 130 168 00057190 VarUI1FromI2 131 169 00001E90 VarUI1FromI4 372 16A 00057230 VarUI1FromI8 132 16B 000571B0 VarUI1FromR4 133 16C 000571C0 VarUI1FromR8 136 16D 00057200 VarUI1FromStr 238 16E 00057190 VarUI1FromUI2 239 16F 00001E90 VarUI1FromUI4 373 170 00057230 VarUI1FromUI8 266 171 00057250 VarUI2FromBool 263 172 00057260 VarUI2FromCy 262 173 00057290 VarUI2FromDate 269 174 00060A40 VarUI2FromDec 265 175 000572A0 VarUI2FromDisp 267 176 000572F0 VarUI2FromI1 258 177 00057310 VarUI2FromI2 259 178 00005520 VarUI2FromI4 378 179 00057330 VarUI2FromI8 260 17A 00057350 VarUI2FromR4 261 17B 00057360 VarUI2FromR8 264 17C 000054F0 VarUI2FromStr 257 17D 000573A0 VarUI2FromUI1 268 17E 00005520 VarUI2FromUI4 379 17F 00057330 VarUI2FromUI8 279 180 00056A20 VarUI4FromBool 276 181 000573B0 VarUI4FromCy 275 182 000573E0 VarUI4FromDate 282 183 000027D0 VarUI4FromDec 278 184 000573F0 VarUI4FromDisp 280 185 00057440 VarUI4FromI1 271 186 00057460 VarUI4FromI2 272 187 00057480 VarUI4FromI4 425 188 00001E70 VarUI4FromI8 273 189 000574A0 VarUI4FromR4 274 18A 000574B0 VarUI4FromR8 277 18B 00004FA0 VarUI4FromStr 270 18C 000574F0 VarUI4FromUI1 281 18D 00057500 VarUI4FromUI2 426 18E 00001E70 VarUI4FromUI8 437 18F 00056B40 VarUI8FromBool 433 190 00057510 VarUI8FromCy 434 191 00057540 VarUI8FromDate 441 192 00060AC0 VarUI8FromDec 436 193 00057550 VarUI8FromDisp 438 194 000575A0 VarUI8FromI1 430 195 000575C0 VarUI8FromI2 428 196 000575E0 VarUI8FromI8 431 197 00057600 VarUI8FromR4 432 198 00057610 VarUI8FromR8 435 199 00004280 VarUI8FromStr 429 19A 00057650 VarUI8FromUI1 439 19B 00056D70 VarUI8FromUI2 440 19C 00056D80 VarUI8FromUI4 331 19D 00006470 VarUdateFromDate 128 19E 000684A0 VarWeekdayName 167 19F 000526D0 VarXor 12 1A0 00006CA0 VariantChangeType 147 1A1 00009FF0 VariantChangeTypeEx 9 1A2 0008C680 VariantClear 10 1A3 0008C810 VariantCopy 11 1A4 0008C6D0 VariantCopyInd 8 1A5 0008C660 VariantInit 13 1A6 00059230 VariantTimeToDosDateTime 185 1A7 00005030 VariantTimeToSystemTime 413 1A8 00002240 VectorFromBstr Summary 3000 .data 1000 .didat 9000 .pdata 24000 .rdata 3000 .reloc 1000 .rsrc 8C000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file rpcrt4.dll File Type: DLL Section contains the following exports for RPCRT4.dll 00000000 characteristics 559F3035 time date stamp Thu Jul 9 19:38:45 2015 0.00 version 1000 ordinal base 548 number of functions 547 number of names ordinal hint RVA name 1022 0 0006DCD0 CStdStubBuffer_AddRef 1023 1 000CB200 CStdStubBuffer_Connect 1024 2 000CB250 CStdStubBuffer_CountRefs 1025 3 000CB290 CStdStubBuffer_DebugServerQueryInterface 1026 4 000CB2E0 CStdStubBuffer_DebugServerRelease 1027 5 0006F740 CStdStubBuffer_Disconnect 1028 6 0006D120 CStdStubBuffer_Invoke 1029 7 000CB330 CStdStubBuffer_IsIIDSupported 1030 8 00072040 CStdStubBuffer_QueryInterface 1031 9 00070650 CreateProxyFromTypeInfo 1032 A 000701C0 CreateStubFromTypeInfo 1033 B 000B1260 DceErrorInqTextA 1034 C 000B12E0 DceErrorInqTextW 1035 D 000CB380 DllGetClassObject 1036 E 000CB400 DllRegisterServer 1037 F 0006C6F0 IUnknown_AddRef_Proxy 1038 10 0006B3A0 IUnknown_QueryInterface_Proxy 1039 11 0006C730 IUnknown_Release_Proxy 1040 12 000450D0 I_RpcAllocate 1041 13 000691D0 I_RpcAsyncAbortCall 1042 14 00053E00 I_RpcAsyncSetHandle 1043 15 00053DB0 I_RpcBCacheAllocate 1044 16 000AF7A0 I_RpcBCacheFree 1045 17 0001D090 I_RpcBindingCopy 1046 18 00004160 I_RpcBindingCreateNP 1047 19 000B76B0 I_RpcBindingHandleToAsyncHandle 1048 1A 0006C610 I_RpcBindingInqClientTokenAttributes 1001 1B 0006B170 I_RpcBindingInqCurrentModifiedId 1049 1C I_RpcBindingInqDynamicEndpoint (forwarded to RPCRT4.I_RpcBindingInqDynamicEndpointW) 1050 1D 0007A690 I_RpcBindingInqDynamicEndpointA 1051 1E 00065BB0 I_RpcBindingInqDynamicEndpointW 1052 1F 0001B6E0 I_RpcBindingInqLocalClientPID 1053 20 000B7720 I_RpcBindingInqMarshalledTargetInfo 1054 21 00074990 I_RpcBindingInqSecurityContext 1055 22 000B15B0 I_RpcBindingInqSecurityContextKeyInfo 1056 23 00066C60 I_RpcBindingInqTransportType 1057 24 000B77A0 I_RpcBindingInqWireIdForSnego 1058 25 0001BD70 I_RpcBindingIsClientLocal 1059 26 000AFC80 I_RpcBindingIsServerLocal 1060 27 00074750 I_RpcBindingSetPrivateOption 1061 28 000B78E0 I_RpcBindingToStaticStringBindingW 1062 29 000B10E0 I_RpcCertProcessAndProvision 1063 2A 0006EDC0 I_RpcClearMutex 1064 2B 000AF820 I_RpcCompleteAndFree 1065 2C 000B7A90 I_RpcDeleteMutex 1066 2D 000B0FE0 I_RpcEnableWmiTrace 1067 2E 0006F6F0 I_RpcExceptionFilter 1068 2F 000B9B00 I_RpcFilterDCOMActivation 1002 30 000AF6B0 I_RpcFixTransferSyntax 1069 31 00061C70 I_RpcFree 1070 32 0002F080 I_RpcFreeBuffer 1071 33 000B9C00 I_RpcFreePipeBuffer 1003 34 000AFA50 I_RpcFwThisIsTheManager 1072 35 0006DB20 I_RpcGetBuffer 1073 36 0002EE30 I_RpcGetBufferWithObject 1074 37 000759B0 I_RpcGetCurrentCallHandle 1075 38 000AFD00 I_RpcGetDefaultSD 1076 39 000BA040 I_RpcGetExtendedError 1077 3A 00076780 I_RpcGetPortAllocationData 1078 3B 00065C30 I_RpcIfInqTransferSyntaxes 1004 3C 00076550 I_RpcInitFwImports 1005 3D 00004AD0 I_RpcInitHttpImports 1006 3E 00076A00 I_RpcInitImports 1007 3F 00073930 I_RpcInitNdrImports 1079 40 0000B320 I_RpcLogEvent 1080 41 00069190 I_RpcMapWin32Status 1081 42 000B1650 I_RpcMarshalBindingHandleAndInterfaceForNDF 1082 43 000AFD40 I_RpcMgmtEnableDedicatedThreadPool 1008 44 00074040 I_RpcMgmtQueryDedicatedThreadPool 1083 45 000C7F30 I_RpcNDRCGetWireRepresentation 1084 46 000C8290 I_RpcNDRSContextEmergencyCleanup 1085 47 000442C0 I_RpcNegotiateTransferSyntax 1086 48 I_RpcNsBindingSetEntryName (forwarded to RPCRT4.I_RpcNsBindingSetEntryNameW) 1087 49 0007A690 I_RpcNsBindingSetEntryNameA 1088 4A 000B16E0 I_RpcNsBindingSetEntryNameW 1089 4B 000B16E0 I_RpcNsInterfaceExported 1090 4C 000B16E0 I_RpcNsInterfaceUnexported 1091 4D 0001B4B0 I_RpcOpenClientProcess 1009 4E 000ADBA0 I_RpcOpenClientThread 1092 4F 00061E10 I_RpcParseSecurity 1093 50 000AF940 I_RpcPauseExecution 1094 51 000B9C50 I_RpcReallocPipeBuffer 1095 52 00019710 I_RpcReceive 1096 53 000BD050 I_RpcRecordCalloutFailure 1097 54 0006E7A0 I_RpcRequestMutex 1098 55 00076380 I_RpcSNCHOption 1099 56 00045570 I_RpcSend 1100 57 0006B1D0 I_RpcSendReceive 1101 58 00066D20 I_RpcServerAllocateIpPort 1102 59 00077840 I_RpcServerCheckClientRestriction 1103 5A 00076AA0 I_RpcServerDisableExceptionFilter 1104 5B 0001C350 I_RpcServerGetAssociationID 1105 5C 000AFD70 I_RpcServerInqAddressChangeFn 1106 5D 0001BC90 I_RpcServerInqLocalConnAddress 1107 5E 0001BE30 I_RpcServerInqRemoteConnAddress 1108 5F 000B9CC0 I_RpcServerInqTransportType 1109 60 000AFD80 I_RpcServerIsClientDisconnected 1110 61 00076A60 I_RpcServerRegisterForwardFunction 1111 62 00076AC0 I_RpcServerSetAddressChangeFn 1112 63 000AFE10 I_RpcServerStartService 1113 64 000728F0 I_RpcServerSubscribeForDisconnectNotification 1010 65 000AFBC0 I_RpcServerTurnOnOffKeepalives 1114 66 00067360 I_RpcServerUseProtseq2A 1115 67 000675C0 I_RpcServerUseProtseq2W 1116 68 00005200 I_RpcServerUseProtseqEp2A 1117 69 000671D0 I_RpcServerUseProtseqEp2W 1118 6A 000AFED0 I_RpcSessionStrictContextHandle 1119 6B 00075820 I_RpcSetDCOMAppId 1120 6C 000C82B0 I_RpcSsDontSerializeContext 1121 6D 00076830 I_RpcSystemFunction001 1122 6E 000B7810 I_RpcTransConnectionAllocatePacket 1123 6F 000AA900 I_RpcTransConnectionFreePacket 1124 70 00008B40 I_RpcTransConnectionReallocPacket 1125 71 0007A690 I_RpcTransDatagramAllocate 1126 72 0007A690 I_RpcTransDatagramAllocate2 1127 73 0007A690 I_RpcTransDatagramFree 1128 74 000BA080 I_RpcTransGetThreadEvent 1129 75 0000CDA0 I_RpcTransGetThreadEventThreadOptional 1130 76 000B7880 I_RpcTransIoCancelled 1131 77 0000B130 I_RpcTransServerNewConnection 1132 78 000B1730 I_RpcTurnOnEEInfoPropagation 1011 79 000B0CD0 I_RpcVerifierCorruptionExpected 1133 7A 000BE110 I_UuidCreate 1134 7B 00069530 MesBufferHandleReset 1135 7C 00069710 MesDecodeBufferHandleCreate 1136 7D 000692E0 MesDecodeIncrementalHandleCreate 1137 7E 000694A0 MesEncodeDynBufferHandleCreate 1138 7F 000698D0 MesEncodeFixedBufferHandleCreate 1139 80 00069240 MesEncodeIncrementalHandleCreate 1140 81 0006B100 MesHandleFree 1141 82 00069380 MesIncrementalHandleReset 1142 83 000CC170 MesInqProcEncodingId 1143 84 00068E70 NDRCContextBinding 1144 85 00052610 NDRCContextMarshall 1145 86 000C7F50 NDRCContextUnmarshall 1146 87 000C82D0 NDRSContextMarshall 1147 88 00052680 NDRSContextMarshall2 1148 89 000C8320 NDRSContextMarshallEx 1149 8A 000C8340 NDRSContextUnmarshall 1150 8B 00067FD0 NDRSContextUnmarshall2 1151 8C 000C8380 NDRSContextUnmarshallEx 1152 8D 000DF420 Ndr64AsyncClientCall 1153 8E 000E3480 Ndr64AsyncServerCall64 1154 8F 000E0A00 Ndr64AsyncServerCallAll 1155 90 000CB450 Ndr64DcomAsyncClientCall 1156 91 000CB4D0 Ndr64DcomAsyncStubCall 1157 92 000CD170 NdrAllocate 1158 93 00002800 NdrAsyncClientCall 1159 94 00002260 NdrAsyncServerCall 1160 95 00072B70 NdrByteCountPointerBufferSize 1161 96 00072D50 NdrByteCountPointerFree 1162 97 00072990 NdrByteCountPointerMarshall 1163 98 00070F50 NdrByteCountPointerUnmarshall 1164 99 0006FCA0 NdrCStdStubBuffer2_Release 1165 9A 0006D4F0 NdrCStdStubBuffer_Release 1166 9B 00002CD0 NdrClearOutParameters 1167 9C 00002B70 NdrClientCall2 1168 9D 000E1240 NdrClientCall3 1169 9E 000C8C20 NdrClientContextMarshall 1170 9F 000CA5D0 NdrClientContextUnmarshall 1171 A0 000CD180 NdrClientInitialize 1172 A1 00068FB0 NdrClientInitializeNew 1173 A2 0003A4C0 NdrComplexArrayBufferSize 1174 A3 0003E230 NdrComplexArrayFree 1175 A4 000381A0 NdrComplexArrayMarshall 1176 A5 0006D980 NdrComplexArrayMemorySize 1177 A6 0003B2D0 NdrComplexArrayUnmarshall 1178 A7 00039D70 NdrComplexStructBufferSize 1179 A8 0003E6B0 NdrComplexStructFree 1180 A9 00032DA0 NdrComplexStructMarshall 1181 AA 0003D420 NdrComplexStructMemorySize 1182 AB 00038DE0 NdrComplexStructUnmarshall 1183 AC 0003CE10 NdrConformantArrayBufferSize 1184 AD 00043FB0 NdrConformantArrayFree 1185 AE 0003CEA0 NdrConformantArrayMarshall 1186 AF 0006FFE0 NdrConformantArrayMemorySize 1187 B0 0003CF90 NdrConformantArrayUnmarshall 1188 B1 0006D3C0 NdrConformantStringBufferSize 1189 B2 00040390 NdrConformantStringMarshall 1190 B3 000439E0 NdrConformantStringMemorySize 1191 B4 0003FCE0 NdrConformantStringUnmarshall 1192 B5 00041390 NdrConformantStructBufferSize 1193 B6 000C87F0 NdrConformantStructFree 1194 B7 000401D0 NdrConformantStructMarshall 1195 B8 00070E20 NdrConformantStructMemorySize 1196 B9 0003F290 NdrConformantStructUnmarshall 1197 BA 0006C380 NdrConformantVaryingArrayBufferSize 1198 BB 000726A0 NdrConformantVaryingArrayFree 1199 BC 0006C230 NdrConformantVaryingArrayMarshall 1200 BD 0006F780 NdrConformantVaryingArrayMemorySize 1201 BE 00044000 NdrConformantVaryingArrayUnmarshall 1202 BF 000C9620 NdrConformantVaryingStructBufferSize 1203 C0 000C8860 NdrConformantVaryingStructFree 1204 C1 000C8C70 NdrConformantVaryingStructMarshall 1205 C2 000CDDB0 NdrConformantVaryingStructMemorySize 1206 C3 000CA630 NdrConformantVaryingStructUnmarshall 1207 C4 000679D0 NdrContextHandleInitialize 1208 C5 000C9720 NdrContextHandleSize 1209 C6 000D0570 NdrConvert 1210 C7 000D0680 NdrConvert2 1211 C8 000723E0 NdrCorrelationFree 1212 C9 0006FC60 NdrCorrelationInitialize 1213 CA 000D0920 NdrCorrelationPass 1214 CB 000CB560 NdrCreateServerInterfaceFromStub 1215 CC 000CB5C0 NdrDcomAsyncClientCall 1216 CD 000CB650 NdrDcomAsyncStubCall 1217 CE 0006B4F0 NdrDllCanUnloadNow 1218 CF 0006B550 NdrDllGetClassObject 1219 D0 000CB6E0 NdrDllRegisterProxy 1220 D1 000CB760 NdrDllUnregisterProxy 1221 D2 000C9760 NdrEncapsulatedUnionBufferSize 1222 D3 000C8900 NdrEncapsulatedUnionFree 1223 D4 000C8DC0 NdrEncapsulatedUnionMarshall 1224 D5 000CDF70 NdrEncapsulatedUnionMemorySize 1225 D6 000CAC30 NdrEncapsulatedUnionUnmarshall 1226 D7 0006EF60 NdrFixedArrayBufferSize 1227 D8 00073700 NdrFixedArrayFree 1228 D9 0006E920 NdrFixedArrayMarshall 1229 DA 0006EEC0 NdrFixedArrayMemorySize 1230 DB 0006EDD0 NdrFixedArrayUnmarshall 1231 DC 000443F0 NdrFreeBuffer 1012 DD 00045F50 NdrFullPointerFree 1013 DE 00044B00 NdrFullPointerInsertRefId 1014 DF 000448C0 NdrFullPointerQueryPointer 1015 E0 00044BB0 NdrFullPointerQueryRefId 1232 E1 00071CC0 NdrFullPointerXlatFree 1233 E2 00044CB0 NdrFullPointerXlatInit 1234 E3 000CB7E0 NdrGetBaseInterfaceFromStub 1235 E4 00068D40 NdrGetBuffer 1236 E5 000CB860 NdrGetDcomProtocolVersion 1237 E6 000D0990 NdrGetSimpleTypeBufferAlignment 1238 E7 000D09B0 NdrGetSimpleTypeBufferSize 1239 E8 00068B90 NdrGetSimpleTypeMemorySize 1240 E9 000723C0 NdrGetTypeFlags 1241 EA 0006B030 NdrGetUserMarshalInfo 1242 EB 000C97F0 NdrInterfacePointerBufferSize 1243 EC 000C8980 NdrInterfacePointerFree 1244 ED 000C8E50 NdrInterfacePointerMarshall 1245 EE 00079730 NdrInterfacePointerMemorySize 1246 EF 000794A0 NdrInterfacePointerUnmarshall 1247 F0 00072ED0 NdrMapCommAndFaultStatus 1248 F1 000CC2D0 NdrMesProcEncodeDecode 1249 F2 000CC670 NdrMesProcEncodeDecode2 1250 F3 00004610 NdrMesProcEncodeDecode3 1251 F4 000CC920 NdrMesSimpleTypeAlignSize 1252 F5 000D6AA0 NdrMesSimpleTypeAlignSizeAll 1253 F6 000CC970 NdrMesSimpleTypeDecode 1254 F7 000D6B50 NdrMesSimpleTypeDecodeAll 1255 F8 000CCA60 NdrMesSimpleTypeEncode 1256 F9 000D6CC0 NdrMesSimpleTypeEncodeAll 1257 FA 00042280 NdrMesTypeAlignSize 1258 FB 00042F10 NdrMesTypeAlignSize2 1259 FC 00071CD0 NdrMesTypeAlignSize3 1260 FD 000CCB40 NdrMesTypeDecode 1261 FE 00042890 NdrMesTypeDecode2 1262 FF 00042530 NdrMesTypeDecode3 1263 100 000CCC80 NdrMesTypeEncode 1264 101 000431B0 NdrMesTypeEncode2 1265 102 000423A0 NdrMesTypeEncode3 1266 103 0006FA40 NdrMesTypeFree2 1267 104 0006F930 NdrMesTypeFree3 1268 105 00077050 NdrNonConformantStringBufferSize 1269 106 00076F80 NdrNonConformantStringMarshall 1270 107 000CDFB0 NdrNonConformantStringMemorySize 1271 108 00076E30 NdrNonConformantStringUnmarshall 1272 109 0003DCB0 NdrNonEncapsulatedUnionBufferSize 1273 10A 00043C90 NdrNonEncapsulatedUnionFree 1274 10B 00041720 NdrNonEncapsulatedUnionMarshall 1275 10C 0003EDA0 NdrNonEncapsulatedUnionMemorySize 1276 10D 0003F520 NdrNonEncapsulatedUnionUnmarshall 1277 10E 000D0E10 NdrNsGetBuffer 1278 10F 000D0E10 NdrNsSendReceive 1279 110 0006AED0 NdrOleAllocate 1280 111 0006D240 NdrOleFree 1281 112 000D09D0 NdrOutInit 1282 113 000C9870 NdrPartialIgnoreClientBufferSize 1283 114 000C8EE0 NdrPartialIgnoreClientMarshall 1284 115 000D0B50 NdrPartialIgnoreServerInitialize 1285 116 000CAD20 NdrPartialIgnoreServerUnmarshall 1286 117 0003E090 NdrPointerBufferSize 1287 118 00043E10 NdrPointerFree 1288 119 00041480 NdrPointerMarshall 1289 11A 000CE0E0 NdrPointerMemorySize 1290 11B 00037AE0 NdrPointerUnmarshall 1291 11C 00070A50 NdrProxyErrorHandler 1292 11D 000CB8C0 NdrProxyFreeBuffer 1293 11E 000CB910 NdrProxyGetBuffer 1294 11F 000CB960 NdrProxyInitialize 1295 120 000CB9F0 NdrProxySendReceive 1296 121 0006A8A0 NdrRangeUnmarshall 1297 122 000D1460 NdrRpcSmClientAllocate 1298 123 000D14D0 NdrRpcSmClientFree 1299 124 000D1540 NdrRpcSmSetClientToOsf 1300 125 000D1560 NdrRpcSsDefaultAllocate 1301 126 000D1570 NdrRpcSsDefaultFree 1302 127 000D1580 NdrRpcSsDisableAllocate 1303 128 000D15C0 NdrRpcSsEnableAllocate 1304 129 000CD260 NdrSendReceive 1305 12A 0006D700 NdrServerCall2 1306 12B 00016570 NdrServerCallAll 1307 12C 000D6E30 NdrServerCallNdr64 1308 12D 000C8F10 NdrServerContextMarshall 1309 12E 0006EBA0 NdrServerContextNewMarshall 1310 12F 000CAD50 NdrServerContextNewUnmarshall 1311 130 000CAEA0 NdrServerContextUnmarshall 1312 131 000634A0 NdrServerInitialize 1313 132 00078850 NdrServerInitializeMarshall 1314 133 000CD2E0 NdrServerInitializeNew 1315 134 000CD390 NdrServerInitializePartial 1316 135 000CD400 NdrServerInitializeUnmarshall 1317 136 0006A820 NdrSimpleStructBufferSize 1318 137 000C89C0 NdrSimpleStructFree 1319 138 00043920 NdrSimpleStructMarshall 1320 139 0003DC20 NdrSimpleStructMemorySize 1321 13A 0003B1B0 NdrSimpleStructUnmarshall 1322 13B 000C8F60 NdrSimpleTypeMarshall 1323 13C 000405A0 NdrSimpleTypeUnmarshall 1324 13D 000344C0 NdrStubCall2 1325 13E 0006A200 NdrStubCall3 1326 13F 000738C0 NdrStubForwardingFunction 1327 140 000CBA40 NdrStubGetBuffer 1328 141 000CBAA0 NdrStubInitialize 1329 142 000CBB30 NdrStubInitializeMarshall 1330 143 000EC910 NdrTypeFlags 1331 144 000733C0 NdrTypeFree 1332 145 00073390 NdrTypeMarshall 1333 146 00073320 NdrTypeSize 1334 147 000733F0 NdrTypeUnmarshall 1335 148 000D1A50 NdrUnmarshallBasetypeInline 1336 149 0003E500 NdrUserMarshalBufferSize 1337 14A 0006D180 NdrUserMarshalFree 1338 14B 000408F0 NdrUserMarshalMarshall 1339 14C 0006E870 NdrUserMarshalMemorySize 1340 14D 000D0750 NdrUserMarshalSimpleTypeConvert 1341 14E 0006AA30 NdrUserMarshalUnmarshall 1342 14F 0006C170 NdrVaryingArrayBufferSize 1343 150 00074AA0 NdrVaryingArrayFree 1344 151 0006C060 NdrVaryingArrayMarshall 1345 152 00073730 NdrVaryingArrayMemorySize 1346 153 00073100 NdrVaryingArrayUnmarshall 1347 154 000C9890 NdrXmitOrRepAsBufferSize 1348 155 000C89E0 NdrXmitOrRepAsFree 1349 156 000C8FC0 NdrXmitOrRepAsMarshall 1350 157 000CE130 NdrXmitOrRepAsMemorySize 1351 158 000CAF10 NdrXmitOrRepAsUnmarshall 1016 159 000011D0 NdrpClientCall2 1352 15A 000CBBB0 NdrpCreateProxy 1353 15B 000CBC40 NdrpCreateStub 1354 15C 00074F50 NdrpGetProcFormatString 1355 15D 00075AD0 NdrpGetTypeFormatString 1356 15E 00076300 NdrpGetTypeGenCookie 1357 15F 0003AE10 NdrpMemoryIncrement 1358 160 00076950 NdrpReleaseTypeFormatString 1359 161 000762B0 NdrpReleaseTypeGenCookie 1360 162 00074BE0 NdrpVarVtOfTypeDesc 1361 163 000020F0 RpcAsyncAbortCall 1362 164 00075250 RpcAsyncCancelCall 1363 165 00001C20 RpcAsyncCompleteCall 1364 166 00019FE0 RpcAsyncGetCallStatus 1365 167 00002080 RpcAsyncInitializeHandle 1366 168 0007A8E0 RpcAsyncRegisterInfo 1367 169 00065080 RpcBindingBind 1368 16A 0001B5F0 RpcBindingCopy 1369 16B 000BD7A0 RpcBindingCreateA 1370 16C 00065110 RpcBindingCreateW 1371 16D 0001F390 RpcBindingFree 1372 16E 000745B0 RpcBindingFromStringBindingA 1373 16F 0001DF30 RpcBindingFromStringBindingW 1374 170 00075190 RpcBindingInqAuthClientA 1375 171 000751C0 RpcBindingInqAuthClientExA 1376 172 00019900 RpcBindingInqAuthClientExW 1377 173 000198D0 RpcBindingInqAuthClientW 1378 174 000BDAD0 RpcBindingInqAuthInfoA 1379 175 000BDB10 RpcBindingInqAuthInfoExA 1380 176 00070400 RpcBindingInqAuthInfoExW 1381 177 000B1750 RpcBindingInqAuthInfoW 1382 178 0006A780 RpcBindingInqObject 1383 179 000B7970 RpcBindingInqOption 1384 17A 000B17D0 RpcBindingReset 1385 17B 0000CBB0 RpcBindingServerFromClient 1386 17C 000BDBC0 RpcBindingSetAuthInfoA 1387 17D 000BDBF0 RpcBindingSetAuthInfoExA 1388 17E 000652D0 RpcBindingSetAuthInfoExW 1389 17F 00064DC0 RpcBindingSetAuthInfoW 1390 180 00072E70 RpcBindingSetObject 1391 181 0001DE70 RpcBindingSetOption 1392 182 00017A60 RpcBindingToStringBindingA 1393 183 00019820 RpcBindingToStringBindingW 1394 184 0001BC10 RpcBindingUnbind 1395 185 00072F50 RpcBindingVectorFree 1396 186 000BA0A0 RpcCancelThread 1397 187 000BA0F0 RpcCancelThreadEx 1398 188 000BDCE0 RpcCertGeneratePrincipalNameA 1399 189 000B11F0 RpcCertGeneratePrincipalNameW 1017 18A 000B1000 RpcCertMatchPrincipalName 1400 18B 00067340 RpcEpRegisterA 1401 18C 000BE200 RpcEpRegisterNoReplaceA 1402 18D 000BE2E0 RpcEpRegisterNoReplaceW 1403 18E 00063E50 RpcEpRegisterW 1404 18F 00072B00 RpcEpResolveBinding 1405 190 00066E80 RpcEpUnregister 1406 191 000BD140 RpcErrorAddRecord 1407 192 000BD290 RpcErrorClearInformation 1408 193 00073F70 RpcErrorEndEnumeration 1409 194 000706D0 RpcErrorGetNextRecord 1410 195 000BD2A0 RpcErrorGetNumberOfRecords 1411 196 000BD2D0 RpcErrorLoadErrorInfo 1412 197 000BD310 RpcErrorResetEnumeration 1413 198 000BD330 RpcErrorSaveErrorInfo 1414 199 0006DD60 RpcErrorStartEnumeration 1415 19A 0006F6F0 RpcExceptionFilter 1416 19B 00075130 RpcFreeAuthorizationContext 1417 19C 00073480 RpcGetAuthorizationContextForClient 1418 19D 000AFF10 RpcIfIdVectorFree 1419 19E 00065C70 RpcIfInqId 1420 19F 0000CF70 RpcImpersonateClient 1421 1A0 0001C390 RpcImpersonateClient2 1422 1A1 000AFF80 RpcImpersonateClientContainer 1423 1A2 00076A30 RpcMgmtEnableIdleCleanup 1424 1A3 000BE380 RpcMgmtEpEltInqBegin 1425 1A4 000BE630 RpcMgmtEpEltInqDone 1426 1A5 000BE710 RpcMgmtEpEltInqNextA 1427 1A6 000BEC30 RpcMgmtEpEltInqNextW 1428 1A7 000BEC90 RpcMgmtEpUnregister 1429 1A8 000B1360 RpcMgmtInqComTimeout 1430 1A9 000B7A00 RpcMgmtInqDefaultProtectLevel 1431 1AA 000B0020 RpcMgmtInqIfIds 1432 1AB 00066F80 RpcMgmtInqServerPrincNameA 1433 1AC 00066FE0 RpcMgmtInqServerPrincNameW 1434 1AD 000B00E0 RpcMgmtInqStats 1435 1AE 000676F0 RpcMgmtIsServerListening 1436 1AF 000BECB0 RpcMgmtSetAuthorizationFn 1437 1B0 00072A10 RpcMgmtSetCancelTimeout 1438 1B1 00065B10 RpcMgmtSetComTimeout 1439 1B2 00067280 RpcMgmtSetServerStackSize 1440 1B3 000B0220 RpcMgmtStatsVectorFree 1441 1B4 000769A0 RpcMgmtStopServerListening 1442 1B5 000B0260 RpcMgmtWaitServerListen 1443 1B6 000053F0 RpcNetworkInqProtseqsA 1444 1B7 00005480 RpcNetworkInqProtseqsW 1445 1B8 000BDD40 RpcNetworkIsProtseqValidA 1446 1B9 000B13C0 RpcNetworkIsProtseqValidW 1447 1BA 000BDEB0 RpcNsBindingInqEntryNameA 1448 1BB 000B16E0 RpcNsBindingInqEntryNameW 1449 1BC 000B0290 RpcObjectInqType 1450 1BD 000B0300 RpcObjectSetInqFn 1451 1BE 00066C20 RpcObjectSetType 1452 1BF 00005760 RpcProtseqVectorFreeA 1453 1C0 00005770 RpcProtseqVectorFreeW 1454 1C1 000690B0 RpcRaiseException 1455 1C2 000B0330 RpcRevertContainerImpersonation 1456 1C3 0000CE80 RpcRevertToSelf 1457 1C4 0001B870 RpcRevertToSelfEx 1458 1C5 000B0390 RpcServerCompleteSecurityCallback 1459 1C6 0001B6B0 RpcServerInqBindingHandle 1460 1C7 00074820 RpcServerInqBindings 1461 1C8 0006E590 RpcServerInqCallAttributesA 1462 1C9 000238E0 RpcServerInqCallAttributesW 1463 1CA 00005930 RpcServerInqDefaultPrincNameA 1464 1CB 00074500 RpcServerInqDefaultPrincNameW 1465 1CC 000B03F0 RpcServerInqIf 1466 1CD 00075A20 RpcServerInterfaceGroupActivate 1467 1CE 00076350 RpcServerInterfaceGroupClose 1468 1CF 000B0440 RpcServerInterfaceGroupCreateA 1469 1D0 000753C0 RpcServerInterfaceGroupCreateW 1470 1D1 00076060 RpcServerInterfaceGroupDeactivate 1471 1D2 000B0800 RpcServerInterfaceGroupInqBindings 1472 1D3 00074670 RpcServerListen 1473 1D4 000740E0 RpcServerRegisterAuthInfoA 1474 1D5 00074190 RpcServerRegisterAuthInfoW 1475 1D6 00076700 RpcServerRegisterIf 1476 1D7 00075780 RpcServerRegisterIf2 1477 1D8 00016630 RpcServerRegisterIf3 1478 1D9 00074200 RpcServerRegisterIfEx 1479 1DA 0006E490 RpcServerSubscribeForNotification 1480 1DB 0006C770 RpcServerTestCancel 1481 1DC 000169B0 RpcServerUnregisterIf 1482 1DD 00074910 RpcServerUnregisterIfEx 1483 1DE 0006E500 RpcServerUnsubscribeForNotification 1484 1DF 000B0850 RpcServerUseAllProtseqs 1485 1E0 000B0880 RpcServerUseAllProtseqsEx 1486 1E1 000B0A20 RpcServerUseAllProtseqsIf 1487 1E2 000B0A70 RpcServerUseAllProtseqsIfEx 1488 1E3 00067770 RpcServerUseProtseqA 1489 1E4 00005170 RpcServerUseProtseqEpA 1490 1E5 000051D0 RpcServerUseProtseqEpExA 1491 1E6 000671A0 RpcServerUseProtseqEpExW 1492 1E7 00067150 RpcServerUseProtseqEpW 1493 1E8 00005900 RpcServerUseProtseqExA 1494 1E9 00067590 RpcServerUseProtseqExW 1495 1EA 000BDF30 RpcServerUseProtseqIfA 1496 1EB 000BDF80 RpcServerUseProtseqIfExA 1497 1EC 000B0B40 RpcServerUseProtseqIfExW 1498 1ED 000B0C80 RpcServerUseProtseqIfW 1499 1EE 00067500 RpcServerUseProtseqW 1500 1EF 000BA140 RpcServerYield 1501 1F0 000D1620 RpcSmAllocate 1502 1F1 000D1660 RpcSmClientFree 1503 1F2 00005A20 RpcSmDestroyClientContext 1504 1F3 000D1680 RpcSmDisableAllocate 1505 1F4 000D16B0 RpcSmEnableAllocate 1506 1F5 000D16E0 RpcSmFree 1507 1F6 000D1700 RpcSmGetThreadHandle 1508 1F7 000D1740 RpcSmSetClientAllocFree 1509 1F8 000D1760 RpcSmSetThreadHandle 1510 1F9 000D1780 RpcSmSwapClientAllocFree 1511 1FA 000D17A0 RpcSsAllocate 1512 1FB 000726F0 RpcSsContextLockExclusive 1513 1FC 000C83A0 RpcSsContextLockShared 1514 1FD 000688A0 RpcSsDestroyClientContext 1515 1FE 000D1830 RpcSsDisableAllocate 1516 1FF RpcSsDontSerializeContext (forwarded to RPCRT4.I_RpcSsDontSerializeContext) 1517 200 000D1840 RpcSsEnableAllocate 1518 201 000D1850 RpcSsFree 1519 202 00074630 RpcSsGetContextBinding 1520 203 000D1860 RpcSsGetThreadHandle 1521 204 000D18C0 RpcSsSetClientAllocFree 1522 205 000D1920 RpcSsSetThreadHandle 1523 206 000D19D0 RpcSsSwapClientAllocFree 1524 207 000620D0 RpcStringBindingComposeA 1525 208 0001C470 RpcStringBindingComposeW 1526 209 00017AC0 RpcStringBindingParseA 1527 20A 00017DF0 RpcStringBindingParseW 1528 20B 00064060 RpcStringFreeA 1529 20C 00065A80 RpcStringFreeW 1530 20D 000BA190 RpcTestCancel 1531 20E 000CD4A0 RpcUserFree 1532 20F 000F2670 SimpleTypeAlignment 1533 210 000F25B0 SimpleTypeBufferSize 1534 211 000EB430 SimpleTypeMemorySize 1535 212 0001BFE0 TowerConstruct 1536 213 00051CB0 TowerExplode 1537 214 000764E0 UuidCompare 1538 215 0006D0D0 UuidCreate 1539 216 000771A0 UuidCreateNil 1540 217 000677D0 UuidCreateSequential 1541 218 0006B350 UuidEqual 1542 219 00074C70 UuidFromStringA 1543 21A 0001C640 UuidFromStringW 1544 21B 000BE130 UuidHash 1545 21C 000195F0 UuidIsNil 1546 21D 000050F0 UuidToStringA 1547 21E 0001C580 UuidToStringW 1018 21F 000F5B08 pfnFreeRoutines 1019 220 000F5B10 pfnMarshallRoutines 1020 221 000F5B18 pfnSizeRoutines 1021 222 000F5B20 pfnUnmarshallRoutines 1000 00072DA0 [NONAME] Summary 2000 .data 1000 .didat B000 .ndr64 D000 .pdata 2B000 .rdata 2000 .reloc 5000 .rsrc D8000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file secur32.dll File Type: DLL Section contains the following exports for Secur32.dll 00000000 characteristics 559F300C time date stamp Thu Jul 9 19:38:04 2015 0.00 version 1 ordinal base 101 number of functions 101 number of names ordinal hint RVA name 4 0 AcceptSecurityContext (forwarded to SSPICLI.AcceptSecurityContext) 5 1 AcquireCredentialsHandleA (forwarded to SSPICLI.AcquireCredentialsHandleA) 6 2 AcquireCredentialsHandleW (forwarded to SSPICLI.AcquireCredentialsHandleW) 7 3 AddCredentialsA (forwarded to SSPICLI.AddCredentialsA) 8 4 AddCredentialsW (forwarded to SSPICLI.AddCredentialsW) 9 5 AddSecurityPackageA (forwarded to SSPICLI.AddSecurityPackageA) 10 6 AddSecurityPackageW (forwarded to SSPICLI.AddSecurityPackageW) 11 7 ApplyControlToken (forwarded to SSPICLI.ApplyControlToken) 12 8 ChangeAccountPasswordA (forwarded to SSPICLI.ChangeAccountPasswordA) 13 9 ChangeAccountPasswordW (forwarded to SSPICLI.ChangeAccountPasswordW) 1 A 00002000 CloseLsaPerformanceData 2 B 00001B00 CollectLsaPerformanceData 14 C CompleteAuthToken (forwarded to SSPICLI.CompleteAuthToken) 15 D CredMarshalTargetInfo (forwarded to SSPICLI.CredMarshalTargetInfo) 16 E CredUnmarshalTargetInfo (forwarded to SSPICLI.CredUnmarshalTargetInfo) 17 F DecryptMessage (forwarded to SSPICLI.DecryptMessage) 18 10 DeleteSecurityContext (forwarded to SSPICLI.DeleteSecurityContext) 19 11 DeleteSecurityPackageA (forwarded to SSPICLI.DeleteSecurityPackageA) 20 12 DeleteSecurityPackageW (forwarded to SSPICLI.DeleteSecurityPackageW) 21 13 EncryptMessage (forwarded to SSPICLI.EncryptMessage) 22 14 EnumerateSecurityPackagesA (forwarded to SSPICLI.EnumerateSecurityPackagesA) 23 15 EnumerateSecurityPackagesW (forwarded to SSPICLI.EnumerateSecurityPackagesW) 24 16 ExportSecurityContext (forwarded to SSPICLI.ExportSecurityContext) 25 17 FreeContextBuffer (forwarded to SSPICLI.FreeContextBuffer) 26 18 FreeCredentialsHandle (forwarded to SSPICLI.FreeCredentialsHandle) 27 19 000036A0 GetComputerObjectNameA 28 1A 00001080 GetComputerObjectNameW 29 1B GetSecurityUserInfo (forwarded to SSPICLI.GetSecurityUserInfo) 30 1C GetUserNameExA (forwarded to SSPICLI.GetUserNameExA) 31 1D GetUserNameExW (forwarded to SSPICLI.GetUserNameExW) 32 1E ImpersonateSecurityContext (forwarded to SSPICLI.ImpersonateSecurityContext) 33 1F ImportSecurityContextA (forwarded to SSPICLI.ImportSecurityContextA) 34 20 ImportSecurityContextW (forwarded to SSPICLI.ImportSecurityContextW) 35 21 InitSecurityInterfaceA (forwarded to SSPICLI.InitSecurityInterfaceA) 36 22 InitSecurityInterfaceW (forwarded to SSPICLI.InitSecurityInterfaceW) 37 23 InitializeSecurityContextA (forwarded to SSPICLI.InitializeSecurityContextA) 38 24 InitializeSecurityContextW (forwarded to SSPICLI.InitializeSecurityContextW) 39 25 LsaCallAuthenticationPackage (forwarded to SSPICLI.LsaCallAuthenticationPackage) 40 26 LsaConnectUntrusted (forwarded to SSPICLI.LsaConnectUntrusted) 41 27 LsaDeregisterLogonProcess (forwarded to SSPICLI.LsaDeregisterLogonProcess) 42 28 LsaEnumerateLogonSessions (forwarded to SSPICLI.LsaEnumerateLogonSessions) 43 29 LsaFreeReturnBuffer (forwarded to SSPICLI.LsaFreeReturnBuffer) 44 2A LsaGetLogonSessionData (forwarded to SSPICLI.LsaGetLogonSessionData) 45 2B LsaLogonUser (forwarded to SSPICLI.LsaLogonUser) 46 2C LsaLookupAuthenticationPackage (forwarded to SSPICLI.LsaLookupAuthenticationPackage) 47 2D LsaRegisterLogonProcess (forwarded to SSPICLI.LsaRegisterLogonProcess) 48 2E LsaRegisterPolicyChangeNotification (forwarded to SSPICLI.LsaRegisterPolicyChangeNotification) 49 2F LsaUnregisterPolicyChangeNotification (forwarded to SSPICLI.LsaUnregisterPolicyChangeNotification) 50 30 MakeSignature (forwarded to SSPICLI.MakeSignature) 3 31 00001EF0 OpenLsaPerformanceData 51 32 QueryContextAttributesA (forwarded to SSPICLI.QueryContextAttributesA) 52 33 QueryContextAttributesW (forwarded to SSPICLI.QueryContextAttributesW) 53 34 QueryCredentialsAttributesA (forwarded to SSPICLI.QueryCredentialsAttributesA) 54 35 QueryCredentialsAttributesW (forwarded to SSPICLI.QueryCredentialsAttributesW) 55 36 QuerySecurityContextToken (forwarded to SSPICLI.QuerySecurityContextToken) 56 37 QuerySecurityPackageInfoA (forwarded to SSPICLI.QuerySecurityPackageInfoA) 57 38 QuerySecurityPackageInfoW (forwarded to SSPICLI.QuerySecurityPackageInfoW) 58 39 RevertSecurityContext (forwarded to SSPICLI.RevertSecurityContext) 59 3A SaslAcceptSecurityContext (forwarded to SSPICLI.SaslAcceptSecurityContext) 60 3B SaslEnumerateProfilesA (forwarded to SSPICLI.SaslEnumerateProfilesA) 61 3C SaslEnumerateProfilesW (forwarded to SSPICLI.SaslEnumerateProfilesW) 62 3D SaslGetContextOption (forwarded to SSPICLI.SaslGetContextOption) 63 3E SaslGetProfilePackageA (forwarded to SSPICLI.SaslGetProfilePackageA) 64 3F SaslGetProfilePackageW (forwarded to SSPICLI.SaslGetProfilePackageW) 65 40 SaslIdentifyPackageA (forwarded to SSPICLI.SaslIdentifyPackageA) 66 41 SaslIdentifyPackageW (forwarded to SSPICLI.SaslIdentifyPackageW) 67 42 SaslInitializeSecurityContextA (forwarded to SSPICLI.SaslInitializeSecurityContextA) 68 43 SaslInitializeSecurityContextW (forwarded to SSPICLI.SaslInitializeSecurityContextW) 69 44 SaslSetContextOption (forwarded to SSPICLI.SaslSetContextOption) 70 45 SealMessage (forwarded to SSPICLI.SealMessage) 71 46 SeciAllocateAndSetCallFlags (forwarded to SSPICLI.SeciAllocateAndSetCallFlags) 72 47 SeciAllocateAndSetIPAddress (forwarded to SSPICLI.SeciAllocateAndSetIPAddress) 73 48 SeciFreeCallContext (forwarded to SSPICLI.SeciFreeCallContext) 74 49 000024C0 SecpFreeMemory 75 4A 000013E0 SecpTranslateName 76 4B 00002070 SecpTranslateNameEx 77 4C SetContextAttributesA (forwarded to SSPICLI.SetContextAttributesA) 78 4D SetContextAttributesW (forwarded to SSPICLI.SetContextAttributesW) 79 4E SetCredentialsAttributesA (forwarded to SSPICLI.SetCredentialsAttributesA) 80 4F SetCredentialsAttributesW (forwarded to SSPICLI.SetCredentialsAttributesW) 81 50 SspiCompareAuthIdentities (forwarded to SSPICLI.SspiCompareAuthIdentities) 82 51 SspiCopyAuthIdentity (forwarded to SSPICLI.SspiCopyAuthIdentity) 83 52 SspiDecryptAuthIdentity (forwarded to SSPICLI.SspiDecryptAuthIdentity) 84 53 SspiEncodeAuthIdentityAsStrings (forwarded to SSPICLI.SspiEncodeAuthIdentityAsStrings) 85 54 SspiEncodeStringsAsAuthIdentity (forwarded to SSPICLI.SspiEncodeStringsAsAuthIdentity) 86 55 SspiEncryptAuthIdentity (forwarded to SSPICLI.SspiEncryptAuthIdentity) 87 56 SspiExcludePackage (forwarded to SSPICLI.SspiExcludePackage) 88 57 SspiFreeAuthIdentity (forwarded to SSPICLI.SspiFreeAuthIdentity) 89 58 SspiGetTargetHostName (forwarded to SSPICLI.SspiGetTargetHostName) 90 59 SspiIsAuthIdentityEncrypted (forwarded to SSPICLI.SspiIsAuthIdentityEncrypted) 91 5A SspiLocalFree (forwarded to SSPICLI.SspiLocalFree) 92 5B SspiMarshalAuthIdentity (forwarded to SSPICLI.SspiMarshalAuthIdentity) 93 5C SspiPrepareForCredRead (forwarded to SSPICLI.SspiPrepareForCredRead) 94 5D SspiPrepareForCredWrite (forwarded to SSPICLI.SspiPrepareForCredWrite) 95 5E SspiUnmarshalAuthIdentity (forwarded to SSPICLI.SspiUnmarshalAuthIdentity) 96 5F SspiValidateAuthIdentity (forwarded to SSPICLI.SspiValidateAuthIdentity) 97 60 SspiZeroAuthIdentity (forwarded to SSPICLI.SspiZeroAuthIdentity) 98 61 000037D0 TranslateNameA 99 62 00003950 TranslateNameW 100 63 UnsealMessage (forwarded to SSPICLI.UnsealMessage) 101 64 VerifySignature (forwarded to SSPICLI.VerifySignature) Summary 1000 .data 1000 .didat 1000 .pdata 3000 .rdata 1000 .reloc 1000 .rsrc 3000 .text Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file shell32.dll File Type: DLL Section contains the following exports for SHELL32.dll 00000000 characteristics 559F3137 time date stamp Thu Jul 9 19:43:03 2015 0.00 version 2 ordinal base 942 number of functions 482 number of names ordinal hint RVA name 255 0 00219BE0 AppCompat_RunDLLW 263 1 000A6430 AssocCreateForClasses 267 2 0021C7D0 AssocGetDetailsOfPropKey 701 3 0021F7A0 CDefFolderMenu_Create2 83 4 00220580 CIDLData_CreateFromIDArray 937 5 001F3DA0 CStorageItem_GetValidatedStorageItemObject 268 6 00221950 CheckEscapesW 269 7 000E83B0 CommandLineToArgvW 272 8 00223F30 Control_RunDLL 273 9 00223F30 Control_RunDLLA 274 A 00223FB0 Control_RunDLLAsUserW 275 B 00223FF0 Control_RunDLLW 935 C 001F3DC0 CreateStorageItemFromPath_FullTrustCaller 936 D 001F3DD0 CreateStorageItemFromPath_FullTrustCaller_ForPackage 920 E 001F3DE0 CreateStorageItemFromPath_PartialTrustCaller 921 F 001F3DF0 CreateStorageItemFromShellItem_FullTrustCaller 925 10 00020890 CreateStorageItemFromShellItem_FullTrustCaller_ForPackage 929 11 001F3E00 CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle 931 12 00020DF0 CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage 129 13 00167E60 DAD_AutoScroll 131 14 000EE110 DAD_DragEnterEx 22 15 002377B0 DAD_DragEnterEx2 132 16 002378A0 DAD_DragLeave 134 17 002378E0 DAD_DragMove 136 18 000EE110 DAD_SetDragImage 137 19 000EE110 DAD_ShowDragImage 276 1A 000D4870 DllCanUnloadNow 277 1B 001F2790 DllGetActivationFactory 278 1C 00084F90 DllGetClassObject 279 1D 004E4240 DllGetVersion 280 1E 0023A080 DllInstall 281 1F 00167E60 DllRegisterServer 282 20 00167E60 DllUnregisterServer 283 21 001EE7F0 DoEnvironmentSubstA 284 22 000D7510 DoEnvironmentSubstW 285 23 000ED2B0 DragAcceptFiles 286 24 001F1C80 DragFinish 287 25 001F1C90 DragQueryFile 288 26 001F1C90 DragQueryFileA 289 27 000DFFF0 DragQueryFileAorW 290 28 000DFFD0 DragQueryFileW 291 29 001F1E50 DragQueryPoint 64 2A 00128690 DriveType 292 2B 000DCF90 DuplicateIcon 293 2C 001EDD20 ExtractAssociatedIconA 294 2D 001EDE10 ExtractAssociatedIconExA 295 2E 001EDF00 ExtractAssociatedIconExW 296 2F 001EE120 ExtractAssociatedIconW 297 30 001EE1E0 ExtractIconA 298 31 001EE260 ExtractIconEx 299 32 001EE260 ExtractIconExA 300 33 000D6050 ExtractIconExW 301 34 001EE2E0 ExtractIconW 302 35 00246BA0 FindExecutableA 303 36 00246C70 FindExecutableW 304 37 0010A0B0 FreeIconList 305 38 00222240 GetCurrentProcessExplicitAppUserModelID 63 39 00248630 GetFileNameFromBrowse 919 3A 001F3E10 GetSystemPersistedStorageItemList 154 3B 0024E4C0 ILAppendID 18 3C 000738A0 ILClone 19 3D 000DA910 ILCloneFirst 25 3E 0006F2D0 ILCombine 157 3F 001517C0 ILCreateFromPath 189 40 0024E5A0 ILCreateFromPathA 190 41 001517C0 ILCreateFromPathW 24 42 000ED470 ILFindChild 16 43 000739B0 ILFindLastID 155 44 000DC6C0 ILFree 153 45 000EDC10 ILGetNext 152 46 000DC7A0 ILGetSize 21 47 0007F340 ILIsEqual 23 48 0006FC60 ILIsParent 846 49 0001B560 ILLoadFromStreamEx 17 4A 00073860 ILRemoveLastID 27 4B 0001D120 ILSaveToStream 306 4C 0024ECA0 InitNetworkAddressControl 307 4D 00167E60 InternalExtractIconListA 308 4E 00167E60 InternalExtractIconListW 942 4F 000479A0 IsDesktopExplorerProcess 119 50 000E1F80 IsLFNDrive 41 51 00221A10 IsLFNDriveA 42 52 000E1F80 IsLFNDriveW 66 53 004E4300 IsNetDrive 941 54 000A5340 IsProcessAnExplorer 680 55 00251840 IsUserAnAdmin 309 56 001F27D0 LaunchMSHelp_RunDLLW 81 57 0010A0B0 OpenAs_RunDLL 125 58 0010A0B0 OpenAs_RunDLLA 133 59 001F4BF0 OpenAs_RunDLLW 85 5A 000EDEC0 OpenRegStream 310 5B 0049B860 Options_RunDLL 311 5C 0049B860 Options_RunDLLA 312 5D 0049B8B0 Options_RunDLLW 171 5E 000E1E30 PathCleanupSpec 92 5F 00221C90 PathGetShortPath 43 60 00221D00 PathIsExe 240 61 00221F20 PathIsSlowA 239 62 00221F80 PathIsSlowW 47 63 002220A0 PathMakeUniqueName 49 64 002220D0 PathQualify 51 65 00146180 PathResolve 75 66 00120400 PathYetAnotherMakeUniqueName 62 67 001F0C70 PickIconDlg 13 68 001F13B0 PifMgr_CloseProperties 10 69 00167E60 PifMgr_GetProperties 9 6A 00167E60 PifMgr_OpenProperties 11 6B 00167E60 PifMgr_SetProperties 135 6C 001F8840 PrepareDiscForBurnRunDllW 138 6D 00206210 PrintersGetCommand_RunDLL 139 6E 00206210 PrintersGetCommand_RunDLLA 150 6F 002062D0 PrintersGetCommand_RunDLLW 654 70 000E4C90 ReadCabinetState 524 71 002535D0 RealDriveType 199 72 00207260 RealShellExecuteA 207 73 00207260 RealShellExecuteExA 208 74 00207260 RealShellExecuteExW 226 75 00207260 RealShellExecuteW 313 76 000D65B0 RegenerateUserEnvironment 59 77 00238590 RestartDialog 730 78 002385A0 RestartDialogEx 314 79 001F3940 RunAsNewUser_RunDLLW 315 7A 002571F0 SHAddDefaultPropertiesByExt 167 7B 00257680 SHAddFromPropSheetExtArray 316 7C 0012A130 SHAddToRecentDocs 196 7D 000E9C50 SHAlloc 317 7E 00150B20 SHAppBarMessage 318 7F 000203C0 SHAssocEnumHandlers 319 80 0025D1A0 SHAssocEnumHandlersForProtocolByApplication 320 81 0009C230 SHBindToFolderIDListParent 321 82 0009C260 SHBindToFolderIDListParentEx 322 83 000739E0 SHBindToObject 323 84 000737B0 SHBindToParent 324 85 00261A30 SHBrowseForFolder 325 86 00261A30 SHBrowseForFolderA 326 87 00261C20 SHBrowseForFolderW 147 88 00039BB0 SHCLSIDFromString 644 89 000DD290 SHChangeNotification_Lock 645 8A 000DD270 SHChangeNotification_Unlock 327 8B 00073360 SHChangeNotify 4 8C 0006E940 SHChangeNotifyDeregister 2 8D 0006FD90 SHChangeNotifyRegister 328 8E 000EAB70 SHChangeNotifyRegisterThread 329 8F 000E7D80 SHChangeNotifySuspendResume 89 90 0014AA20 SHCloneSpecialIDList 102 91 000E2870 SHCoCreateInstance 330 92 00262C60 SHCoCreateInstanceWorker 331 93 000A3190 SHCreateAssociationRegistration 332 94 00266E00 SHCreateCategoryEnum 333 95 00017890 SHCreateDataObject 334 96 000E71F0 SHCreateDefaultContextMenu 335 97 00105B90 SHCreateDefaultExtractIcon 336 98 002572A0 SHCreateDefaultPropertiesOp 165 99 00020DD0 SHCreateDirectory 337 9A 00212830 SHCreateDirectoryExA 338 9B 000EC610 SHCreateDirectoryExW 339 9C 002692A0 SHCreateDrvExtIcon 743 9D 00250A20 SHCreateFileExtractIconW 340 9E 0009A0A0 SHCreateItemFromIDList 341 9F 00098810 SHCreateItemFromParsingName 342 A0 0009C000 SHCreateItemFromRelativeName 343 A1 0009C160 SHCreateItemInKnownFolder 344 A2 0009A6A0 SHCreateItemWithParent 345 A3 00020D20 SHCreateLocalServerRunDll 346 A4 00207BE0 SHCreateProcessAsUserW 168 A5 00257710 SHCreatePropSheetExtArray 347 A6 0012A0A0 SHCreateQueryCancelAutoPlayMoniker 256 A7 000EABC0 SHCreateShellFolderView 174 A8 0028D690 SHCreateShellFolderViewEx 348 A9 0009A170 SHCreateShellItem 349 AA 001F3E50 SHCreateShellItemArray 350 AB 001F3E60 SHCreateShellItemArrayFromDataObject 351 AC 000ED940 SHCreateShellItemArrayFromIDLists 352 AD 00020820 SHCreateShellItemArrayFromShellItem 74 AE 001ED680 SHCreateStdEnumFmtEtc 3 AF 00244CA0 SHDefExtractIconA 6 B0 00065160 SHDefExtractIconW 169 B1 002578C0 SHDestroyPropSheetExtArray 88 B2 002379D0 SHDoDragDrop 353 B3 000EE050 SHELL32_AddToBackIconTable 354 B4 000EAD00 SHELL32_AddToFrontIconTable 355 B5 0009D3A0 SHELL32_AreAllItemsAvailable 356 B6 002911B0 SHELL32_BindToFilePlaceholderHandler 357 B7 002911C0 SHELL32_CCommonPlacesFolder_CreateInstance 358 B8 002911D0 SHELL32_CDBurn_CloseSession 359 B9 00291250 SHELL32_CDBurn_DriveSupportedForDataBurn 360 BA 00291260 SHELL32_CDBurn_Erase 361 BB 0001FDB0 SHELL32_CDBurn_GetCDInfo 362 BC 002912C0 SHELL32_CDBurn_GetLiveFSDiscInfo 363 BD 0001B1D0 SHELL32_CDBurn_GetStagingPathOrNormalPath 364 BE 002912D0 SHELL32_CDBurn_GetTaskInfo 365 BF 002912E0 SHELL32_CDBurn_IsBlankDisc 366 C0 002912F0 SHELL32_CDBurn_IsBlankDisc2 367 C1 00291350 SHELL32_CDBurn_IsLiveFS 368 C2 00291360 SHELL32_CDBurn_OnDeviceChange 369 C3 00291370 SHELL32_CDBurn_OnEject 370 C4 002913E0 SHELL32_CDBurn_OnMediaChange 371 C5 002913F0 SHELL32_CDefFolderMenu_Create2 372 C6 00291450 SHELL32_CDefFolderMenu_Create2Ex 373 C7 002914B0 SHELL32_CDefFolderMenu_MergeMenu 374 C8 002914C0 SHELL32_CDrivesContextMenu_Create 375 C9 002914D0 SHELL32_CDrivesDropTarget_Create 376 CA 000A4AE0 SHELL32_CFSDropTarget_CreateInstance 377 CB 000EDD00 SHELL32_CFSFolderCallback_Create 378 CC 002914E0 SHELL32_CFillPropertiesTask_CreateInstance 379 CD 002914F0 SHELL32_CLibraryDropTarget_CreateInstance 380 CE 00291500 SHELL32_CLocationContextMenu_Create 381 CF 00291510 SHELL32_CMountPoint_DoAutorun 382 D0 00291520 SHELL32_CMountPoint_DoAutorunPrompt 383 D1 00291540 SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy 384 D2 00291550 SHELL32_CMountPoint_ProcessAutoRunFile 385 D3 00291560 SHELL32_CMountPoint_WantAutorunUI 386 D4 00291570 SHELL32_CMountPoint_WantAutorunUIGetReady 387 D5 000EFB80 SHELL32_CPL_CategoryIdArrayFromVariant 388 D6 00291580 SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey 389 D7 002915A0 SHELL32_CPL_ModifyWowDisplayName 390 D8 002915B0 SHELL32_CRecentDocsContextMenu_CreateInstance 391 D9 002915C0 SHELL32_CSyncRootManager_CreateInstance 392 DA 002915D0 SHELL32_CTransferConfirmation_CreateInstance 393 DB 000206F0 SHELL32_CallFileCopyHooks 394 DC 00019240 SHELL32_CanDisplayWin8CopyDialog 395 DD 002915E0 SHELL32_CloseAutoplayPrompt 396 DE 002915F0 SHELL32_CommandLineFromMsiDescriptor 397 DF 00291600 SHELL32_CopyExtrinsicPropertyStore 398 E0 00291610 SHELL32_CopyFilePlaceholderToNewFile 399 E1 00291620 SHELL32_CopySecondaryTiles 400 E2 00291630 SHELL32_CreateAlternateStreamFileName 401 E3 00291640 SHELL32_CreateConfirmationInterrupt 402 E4 00291650 SHELL32_CreateConflictInterrupt 403 E5 00291660 SHELL32_CreateDefaultOperationDataProvider 404 E6 00080220 SHELL32_CreateExtrinsicPropertyStore 405 E7 002916E0 SHELL32_CreateFileFolderContextMenu 406 E8 000ECA50 SHELL32_CreateLinkInfoW 407 E9 002916F0 SHELL32_CreatePlaceholderFile 408 EA 00291700 SHELL32_CreateQosRecorder 409 EB 00291710 SHELL32_CreateSharePointView 410 EC 00291720 SHELL32_Create_IEnumUICommand 411 ED 000ECA40 SHELL32_DestroyLinkInfo 412 EE 00291730 SHELL32_EncryptDirectory 413 EF 00291740 SHELL32_EncryptedFileKeyInfo 414 F0 00291750 SHELL32_EnumCommonTasks 415 F1 00291760 SHELL32_FilePlaceholder_BindToPrimaryStream 416 F2 00070C00 SHELL32_FilePlaceholder_CreateInstance 417 F3 00291770 SHELL32_FreeEncryptedFileKeyInfo 418 F4 00128890 SHELL32_GenerateAppID 419 F5 00291780 SHELL32_GetAppIDRoot 420 F6 00291790 SHELL32_GetCommandProviderForFolderType 421 F7 000E82C0 SHELL32_GetDPIAdjustedLogicalSize 422 F8 002917A0 SHELL32_GetDiskCleanupPath 423 F9 002917B0 SHELL32_GetFileNameFromBrowse 424 FA 000E8B70 SHELL32_GetIconOverlayManager 425 FB 002917C0 SHELL32_GetLinkInfoData 426 FC 000D8720 SHELL32_GetPlaceholderStatesFromFileAttributesAndReparsePointTag 427 FD 002917D0 SHELL32_GetRatingBucket 428 FE 00291800 SHELL32_GetSkyDriveNetworkStates 429 FF 00291810 SHELL32_GetSqmableFileName 430 100 00291820 SHELL32_GetThumbnailAdornerFromFactory 431 101 0009DE40 SHELL32_GetThumbnailAdornerFromFactory2 432 102 00291830 SHELL32_HandleUnrecognizedFileSystem 433 103 000AC410 SHELL32_IconCacheCreate 434 104 000EE160 SHELL32_IconCacheDestroy 435 105 00291840 SHELL32_IconCacheHandleAssociationChanged 436 106 000ABFE0 SHELL32_IconCacheRestore 437 107 000E52C0 SHELL32_IconCache_AboutToExtractIcons 438 108 000EA360 SHELL32_IconCache_DoneExtractingIcons 439 109 000E9A20 SHELL32_IconCache_ExpandEnvAndSearchPath 440 10A 000E5B00 SHELL32_IconCache_RememberRecentlyExtractedIconsW 441 10B 000E3DB0 SHELL32_IconOverlayManagerInit 442 10C 000EE110 SHELL32_IsGetKeyboardLayoutPresent 443 10D 00116CF0 SHELL32_IsSystemUpgradeInProgress 444 10E 000EC420 SHELL32_IsValidLinkInfo 445 10F 00291850 SHELL32_LegacyEnumSpecialTasksByType 446 110 00291860 SHELL32_LegacyEnumTasks 447 111 0006A270 SHELL32_LookupBackIconIndex 448 112 0006D550 SHELL32_LookupFrontIconIndex 449 113 00291870 SHELL32_NormalizeRating 450 114 00291880 SHELL32_NotifyLinkTrackingServiceOfMove 451 115 001F13B0 SHELL32_PifMgr_CloseProperties 452 116 00167E60 SHELL32_PifMgr_GetProperties 453 117 00167E60 SHELL32_PifMgr_OpenProperties 454 118 00167E60 SHELL32_PifMgr_SetProperties 455 119 00291890 SHELL32_Printers_CreateBindInfo 456 11A 002918A0 SHELL32_Printjob_GetPidl 457 11B 002918B0 SHELL32_PurgeSystemIcon 458 11C 000AB550 SHELL32_RefreshOverlayImages 459 11D 002918C0 SHELL32_ResolveLinkInfoW 460 11E 002918D0 SHELL32_SHAddSparseIcon 461 11F 002918E0 SHELL32_SHCreateByValueOperationInterrupt 462 120 000E71E0 SHELL32_SHCreateDefaultContextMenu 463 121 002918F0 SHELL32_SHCreateLocalServer 464 122 000EABB0 SHELL32_SHCreateShellFolderView 465 123 00291900 SHELL32_SHDuplicateEncryptionInfoFile 466 124 00291910 SHELL32_SHEncryptFile 467 125 00291920 SHELL32_SHFormatDriveAsync 468 126 002919B0 SHELL32_SHGetThreadUndoManager 469 127 002919C0 SHELL32_SHGetUserNameW 470 128 002919D0 SHELL32_SHIsVirtualDevice 471 129 002919E0 SHELL32_SHLaunchPropSheet 472 12A 002919F0 SHELL32_SHLogILFromFSIL 473 12B 00291A00 SHELL32_SHOpenWithDialog 474 12C 00244080 SHELL32_SHUICommandFromGUID 475 12D 0049D3C0 SHELL32_SendToMenu_InvokeTargetedCommand 476 12E 0049D410 SHELL32_SendToMenu_VerifyTargetedCommand 477 12F 00291A10 SHELL32_SetPlaceholderReparsePointAttribute 478 130 00291A30 SHELL32_SetPlaceholderReparsePointAttribute2 479 131 00291A40 SHELL32_ShowHideIconOnlyOnDesktop 480 132 00291A50 SHELL32_SimpleRatingToFilterCondition 481 133 00291A60 SHELL32_StampIconForElevation 482 134 00019E70 SHELL32_SuspendUndo 483 135 00291A70 SHELL32_TryVirtualDiscImageDriveEject 484 136 00291AB0 SHELL32_UpdateFilePlaceholderStates 485 137 000E7160 SHELL32_VerifySaferTrust 486 138 00292D10 SHEmptyRecycleBinA 487 139 00292DB0 SHEmptyRecycleBinW 488 13A 000E7320 SHEnableServiceObject 489 13B 00212BF0 SHEnumerateUnreadMailAccountsW 490 13C 000D99E0 SHEvaluateSystemCommandTemplate 491 13D 001EE6F0 SHExtractIconsW 492 13E 001F3E70 SHFileOperation 493 13F 001F3E70 SHFileOperationA 494 140 0001E600 SHFileOperationW 90 141 00212FB0 SHFindFiles 149 142 00294B10 SHFind_InitMenuPopup 526 143 00294CA0 SHFlushSFCache 495 144 00219FC0 SHFormatDrive 195 145 000DC6C0 SHFree 496 146 001F3E80 SHFreeNameMappings 750 147 002130A0 SHGetAttributesFromDataObject 497 148 00250DB0 SHGetDataFromIDListA 498 149 000E38D0 SHGetDataFromIDListW 499 14A 000ED850 SHGetDesktopFolder 500 14B 00250EB0 SHGetDiskFreeSpaceA 501 14C 00250EB0 SHGetDiskFreeSpaceExA 502 14D 00250F20 SHGetDiskFreeSpaceExW 503 14E 0029B560 SHGetDriveMedia 504 14F 0001E210 SHGetFileInfo 505 150 0001E210 SHGetFileInfoA 506 151 00129490 SHGetFileInfoW 507 152 000ECD30 SHGetFolderLocation 508 153 00257F20 SHGetFolderPathA 509 154 00257F30 SHGetFolderPathAndSubDirA 510 155 000EE060 SHGetFolderPathAndSubDirW 511 156 00156DD0 SHGetFolderPathEx 512 157 000E0080 SHGetFolderPathW 513 158 00098620 SHGetIDListFromObject 514 159 0029B9D0 SHGetIconOverlayIndexA 515 15A 0029BA40 SHGetIconOverlayIndexW 727 15B 00034980 SHGetImageList 516 15C 000EE0C0 SHGetInstanceExplorer 517 15D 000A3FC0 SHGetItemFromDataObject 518 15E 000E83C0 SHGetItemFromObject 519 15F 00156DE0 SHGetKnownFolderIDList 527 160 00156DF0 SHGetKnownFolderItem 528 161 000E4220 SHGetKnownFolderPath 529 162 00250F30 SHGetLocalizedName 530 163 00124FF0 SHGetMalloc 531 164 0009CCF0 SHGetNameFromIDList 532 165 00250FE0 SHGetNewLinkInfo 179 166 00250FE0 SHGetNewLinkInfoA 180 167 002510F0 SHGetNewLinkInfoW 533 168 00213240 SHGetPathFromIDList 534 169 00213240 SHGetPathFromIDListA 535 16A 0007FBC0 SHGetPathFromIDListEx 536 16B 00080200 SHGetPathFromIDListW 537 16C 000DC5D0 SHGetPropertyStoreForWindow 538 16D 00251120 SHGetPropertyStoreFromIDList 539 16E 002511C0 SHGetPropertyStoreFromParsingName 98 16F 00213350 SHGetRealIDL 709 170 001EEB00 SHGetSetFolderCustomSettings 68 171 000C1AE0 SHGetSetSettings 540 172 0029C110 SHGetSettings 541 173 001274E0 SHGetSpecialFolderLocation 542 174 00257F40 SHGetSpecialFolderPathA 543 175 000EC220 SHGetSpecialFolderPathW 544 176 0010DAD0 SHGetStockIconInfo 545 177 0009C850 SHGetTemporaryPropertyForItem 546 178 00213370 SHGetUnreadMailCountW 193 179 00151DA0 SHHandleUpdateImage 228 17A 00208070 SHHelpShortcuts_RunDLL 229 17B 00208070 SHHelpShortcuts_RunDLLA 238 17C 00208100 SHHelpShortcuts_RunDLLW 28 17D 00151810 SHILCreateFromPath 547 17E 00206800 SHInvokePrinterCommandA 548 17F 002068E0 SHInvokePrinterCommandW 549 180 00213730 SHIsFileAvailableOffline 747 181 0029D020 SHLimitInputEdit 550 182 0016DEE0 SHLoadInProc 551 183 002139F0 SHLoadNonloadedIconOverlayIdentifiers 77 184 00046F40 SHMapPIDLToSystemImageListIndex 716 185 0029ED30 SHMultiFileProperties 178 186 00208240 SHObjectProperties 552 187 00251290 SHOpenFolderAndSelectItems 80 188 0029ED50 SHOpenPropSheetW 553 189 001F5B00 SHOpenWithDialog 554 18A 0009A420 SHParseDisplayName 555 18B 001F3EA0 SHPathPrepareForWriteA 556 18C 001F3EB0 SHPathPrepareForWriteW 685 18D 004E4600 SHPropStgCreate 688 18E 004E4780 SHPropStgReadMultiple 689 18F 004E48E0 SHPropStgWriteMultiple 557 190 00292E30 SHQueryRecycleBinA 558 191 00292ED0 SHQueryRecycleBinW 559 192 0014A0B0 SHQueryUserNotificationState 560 193 002513E0 SHRemoveLocalizedName 170 194 00257930 SHReplaceFromPropSheetExtArray 561 195 00257F50 SHResolveLibrary 100 196 0009A260 SHRestricted 562 197 002573E0 SHSetDefaultProperties 231 198 00257F60 SHSetFolderPathA 232 199 00257F70 SHSetFolderPathW 176 19A 00020880 SHSetInstanceExplorer 563 19B 00257F80 SHSetKnownFolderPath 564 19C 00251480 SHSetLocalizedName 565 19D 0009C750 SHSetTemporaryPropertyForItem 566 19E 00213B50 SHSetUnreadMailCountW 73 19F 0028D740 SHShellFolderView_Message 567 1A0 004C9150 SHShowManageLibraryUI 162 1A1 00213D50 SHSimpleIDListFromPath 14 1A2 002522F0 SHStartNetConnectionDialogW 245 1A3 000EB730 SHTestTokenMembership 191 1A4 00256C70 SHUpdateImageA 192 1A5 00256CE0 SHUpdateImageW 568 1A6 0013F520 SHUpdateRecycleBinIcon 173 1A7 002470D0 SHValidateUNC 569 1A8 0012A140 SetCurrentProcessExplicitAppUserModelID 570 1A9 001F13C0 SheChangeDirA 571 1AA 001F1440 SheChangeDirExW 572 1AB 001F1970 SheGetDirA 573 1AC 001F1BC0 SheSetCurDrive 574 1AD 002A3BA0 ShellAboutA 575 1AE 002A3CB0 ShellAboutW 576 1AF 00207C00 ShellExec_RunDLL 577 1B0 00207C00 ShellExec_RunDLLA 578 1B1 00207CB0 ShellExec_RunDLLW 579 1B2 00207DE0 ShellExecuteA 580 1B3 00207E70 ShellExecuteEx 581 1B4 00207E70 ShellExecuteExA 582 1B5 000E2460 ShellExecuteExW 583 1B6 0014ABC0 ShellExecuteW 584 1B7 00167E60 ShellHookProc 183 1B8 ShellMessageBoxA (forwarded to shlwapi.ShellMessageBoxA) 182 1B9 ShellMessageBoxW (forwarded to shlwapi.ShellMessageBoxW) 72 1BA 00244D30 Shell_GetCachedImageIndex 585 1BB 00244D40 Shell_GetCachedImageIndexA 586 1BC 0006A820 Shell_GetCachedImageIndexW 71 1BD 000ABDB0 Shell_GetImageLists 67 1BE 000DA400 Shell_MergeMenus 587 1BF 00257F90 Shell_NotifyIcon 588 1C0 00257F90 Shell_NotifyIconA 589 1C1 00128060 Shell_NotifyIconGetRect 590 1C2 0006C420 Shell_NotifyIconW 103 1C3 000E3AB0 SignalFileOpen 682 1C4 002A3FC0 StgMakeUniqueName 591 1C5 00155260 StrChrA 592 1C6 00155270 StrChrIA 593 1C7 00155280 StrChrIW 594 1C8 00155290 StrChrW 595 1C9 001552A0 StrCmpNA 596 1CA 001552B0 StrCmpNIA 597 1CB 001552C0 StrCmpNIW 598 1CC 001552D0 StrCmpNW 599 1CD 001EFBB0 StrNCmpA 600 1CE 001EFC60 StrNCmpIA 601 1CF 001EFD10 StrNCmpIW 602 1D0 001EFDD0 StrNCmpW 603 1D1 001552E0 StrRChrA 604 1D2 001552F0 StrRChrIA 605 1D3 00155300 StrRChrIW 606 1D4 00155310 StrRChrW 607 1D5 001EFEB0 StrRStrA 608 1D6 00155320 StrRStrIA 609 1D7 00155330 StrRStrIW 610 1D8 001EFF70 StrRStrW 611 1D9 00155340 StrStrA 612 1DA 00155350 StrStrIA 613 1DB 00155360 StrStrIW 614 1DC 00155370 StrStrW 615 1DD 002A5560 UsersLibrariesFolderUI_CreateInstance 616 1DE 00207F50 WOWShellExecute 617 1DF 0023A330 WaitForExplorerRestartW 164 1E0 001F0740 Win32DeleteFile 652 1E1 001EDA20 WriteCabinetState 5 [NONAME] (forwarded to SHUNIMPL.#35) 7 [NONAME] (forwarded to SHUNIMPL.#192) 8 [NONAME] (forwarded to SHUNIMPL.#193) 12 00252270 [NONAME] 15 0024E610 [NONAME] 20 000738A0 [NONAME] 26 [NONAME] (forwarded to SHUNIMPL.#36) 29 00221D10 [NONAME] 30 [NONAME] (forwarded to shlwapi.PathBuildRootW) 31 [NONAME] (forwarded to shlwapi.PathFindExtensionW) 32 [NONAME] (forwarded to shlwapi.PathAddBackslashW) 33 [NONAME] (forwarded to shlwapi.PathRemoveBlanksW) 34 [NONAME] (forwarded to shlwapi.PathFindFileNameW) 35 002220F0 [NONAME] 36 00221A70 [NONAME] 37 [NONAME] (forwarded to shlwapi.PathCombineW) 38 [NONAME] (forwarded to shlwapi.PathStripPathW) 39 [NONAME] (forwarded to shlwapi.PathIsUNCW) 40 [NONAME] (forwarded to shlwapi.PathIsRelativeW) 44 00223FD0 [NONAME] 45 00221B10 [NONAME] 46 [NONAME] (forwarded to shlwapi.PathMatchSpecW) 48 [NONAME] (forwarded to shlwapi.PathSetDlgItemPathW) 50 [NONAME] (forwarded to shlwapi.PathStripToRootW) 52 [NONAME] (forwarded to shlwapi.PathGetArgsW) 53 [NONAME] (forwarded to SHUNIMPL.#388) 54 00238570 [NONAME] 55 [NONAME] (forwarded to shlwapi.PathQuoteSpacesW) 56 [NONAME] (forwarded to shlwapi.PathUnquoteSpacesW) 57 [NONAME] (forwarded to shlwapi.PathGetDriveNumberW) 58 00211D80 [NONAME] 60 00238520 [NONAME] 61 001048E0 [NONAME] 65 0010A0B0 [NONAME] 69 00252010 [NONAME] 70 001EDC70 [NONAME] 76 001F1CC0 [NONAME] 78 [NONAME] (forwarded to SHUNIMPL.#37) 79 [NONAME] (forwarded to SHUNIMPL.#38) 82 [NONAME] (forwarded to SHUNIMPL.#39) 84 [NONAME] (forwarded to SHUNIMPL.#40) 86 [NONAME] (forwarded to SHUNIMPL.#41) 87 [NONAME] (forwarded to SHUNIMPL.#42) 91 00212EC0 [NONAME] 93 [NONAME] (forwarded to shcore.Win32CreateDirectory) 94 001F0750 [NONAME] 95 000DE340 [NONAME] 96 [NONAME] (forwarded to SHUNIMPL.#43) 97 00167E60 [NONAME] 99 00050D00 [NONAME] 101 [NONAME] (forwarded to SHUNIMPL.#1) 104 [NONAME] (forwarded to SHUNIMPL.#2) 105 [NONAME] (forwarded to SHUNIMPL.#3) 106 [NONAME] (forwarded to SHUNIMPL.#4) 107 [NONAME] (forwarded to SHUNIMPL.#5) 108 [NONAME] (forwarded to SHUNIMPL.#6) 109 [NONAME] (forwarded to SHUNIMPL.#7) 110 [NONAME] (forwarded to SHUNIMPL.#8) 111 [NONAME] (forwarded to SHUNIMPL.#9) 112 [NONAME] (forwarded to SHUNIMPL.#10) 113 [NONAME] (forwarded to SHUNIMPL.#11) 114 [NONAME] (forwarded to SHUNIMPL.#12) 115 [NONAME] (forwarded to SHUNIMPL.#13) 116 [NONAME] (forwarded to SHUNIMPL.#14) 117 [NONAME] (forwarded to SHUNIMPL.#15) 118 [NONAME] (forwarded to SHUNIMPL.#16) 120 [NONAME] (forwarded to SHUNIMPL.#17) 121 [NONAME] (forwarded to SHUNIMPL.#44) 122 [NONAME] (forwarded to SHUNIMPL.#45) 123 [NONAME] (forwarded to SHUNIMPL.#46) 124 [NONAME] (forwarded to SHUNIMPL.#18) 126 [NONAME] (forwarded to SHUNIMPL.#47) 127 [NONAME] (forwarded to SHUNIMPL.#371) 128 00084F90 [NONAME] 130 [NONAME] (forwarded to SHUNIMPL.#48) 140 [NONAME] (forwarded to SHUNIMPL.#19) 141 [NONAME] (forwarded to SHUNIMPL.#20) 142 [NONAME] (forwarded to SHUNIMPL.#21) 143 [NONAME] (forwarded to SHUNIMPL.#22) 144 [NONAME] (forwarded to SHUNIMPL.#23) 145 [NONAME] (forwarded to shlwapi.PathFindOnPathW) 146 [NONAME] (forwarded to SHUNIMPL.#49) 148 [NONAME] (forwarded to SHUNIMPL.#50) 151 [NONAME] (forwarded to SHUNIMPL.#51) 156 000DC6C0 [NONAME] 158 [NONAME] (forwarded to SHUNIMPL.#389) 159 [NONAME] (forwarded to shlwapi.PathIsDirectoryW) 160 00252180 [NONAME] 161 [NONAME] (forwarded to SHUNIMPL.#214) 163 [NONAME] (forwarded to SHUNIMPL.#52) 166 [NONAME] (forwarded to SHUNIMPL.#53) 172 00250B50 [NONAME] 175 000EC220 [NONAME] 177 [NONAME] (forwarded to SHUNIMPL.#54) 181 0014B030 [NONAME] 184 00167E60 [NONAME] 185 [NONAME] (forwarded to SHUNIMPL.#390) 186 0024E630 [NONAME] 187 [NONAME] (forwarded to SHUNIMPL.#235) 188 00149C60 [NONAME] 194 00257720 [NONAME] 197 [NONAME] (forwarded to SHUNIMPL.#55) 198 [NONAME] (forwarded to SHUNIMPL.#56) 200 0013F560 [NONAME] 201 0013A720 [NONAME] 202 [NONAME] (forwarded to SHUNIMPL.#57) 203 0020F670 [NONAME] 204 002141B0 [NONAME] 205 002065D0 [NONAME] 206 0014D8C0 [NONAME] 209 00211350 [NONAME] 210 00211AC0 [NONAME] 211 001715B0 [NONAME] 212 00206490 [NONAME] 213 002066F0 [NONAME] 214 002067F0 [NONAME] 215 002522F0 [NONAME] 216 [NONAME] (forwarded to SHUNIMPL.#24) 217 [NONAME] (forwarded to SHUNIMPL.#25) 218 [NONAME] (forwarded to SHUNIMPL.#26) 219 [NONAME] (forwarded to SHUNIMPL.#27) 220 [NONAME] (forwarded to SHUNIMPL.#28) 221 [NONAME] (forwarded to SHUNIMPL.#29) 222 [NONAME] (forwarded to SHUNIMPL.#30) 223 [NONAME] (forwarded to SHUNIMPL.#31) 224 [NONAME] (forwarded to SHUNIMPL.#32) 225 [NONAME] (forwarded to SHUNIMPL.#33) 227 [NONAME] (forwarded to SHUNIMPL.#34) 230 [NONAME] (forwarded to SHUNIMPL.#372) 233 [NONAME] (forwarded to SHUNIMPL.#58) 234 [NONAME] (forwarded to SHUNIMPL.#59) 235 [NONAME] (forwarded to SHUNIMPL.#212) 236 00251860 [NONAME] 237 000EE110 [NONAME] 241 002135B0 [NONAME] 242 [NONAME] (forwarded to SHUNIMPL.#373) 243 [NONAME] (forwarded to SHUNIMPL.#374) 244 000E6B00 [NONAME] 246 [NONAME] (forwarded to SHUNIMPL.#375) 247 [NONAME] (forwarded to SHUNIMPL.#376) 248 [NONAME] (forwarded to SHUNIMPL.#377) 249 [NONAME] (forwarded to shlwapi.PathParseIconLocationW) 250 [NONAME] (forwarded to shlwapi.PathRemoveExtensionW) 251 [NONAME] (forwarded to shlwapi.PathRemoveArgsW) 252 [NONAME] (forwarded to api-ms-win-core-url-l1.PathIsURLW) 253 [NONAME] (forwarded to SHUNIMPL.#378) 254 00238500 [NONAME] 257 00167E60 [NONAME] 258 00129220 [NONAME] 259 000EE110 [NONAME] 260 00229890 [NONAME] 261 00296CD0 [NONAME] 262 00296FF0 [NONAME] 264 002298C0 [NONAME] 265 00247240 [NONAME] 266 00247270 [NONAME] 270 00295FD0 [NONAME] 271 00252310 [NONAME] 520 [NONAME] (forwarded to SHUNIMPL.#60) 521 [NONAME] (forwarded to SHUNIMPL.#61) 522 [NONAME] (forwarded to SHUNIMPL.#62) 523 [NONAME] (forwarded to SHUNIMPL.#63) 525 [NONAME] (forwarded to SHUNIMPL.#234) 640 [NONAME] (forwarded to SHUNIMPL.#64) 641 [NONAME] (forwarded to SHUNIMPL.#65) 643 [NONAME] (forwarded to SHUNIMPL.#66) 646 [NONAME] (forwarded to SHUNIMPL.#67) 648 [NONAME] (forwarded to SHUNIMPL.#379) 650 [NONAME] (forwarded to shlwapi.PathIsSameRootW) 651 001EDA10 [NONAME] 653 [NONAME] (forwarded to SHUNIMPL.#68) 660 000AB850 [NONAME] 681 [NONAME] (forwarded to SHUNIMPL.#428) 683 0016E1C0 [NONAME] 684 0016E1C0 [NONAME] 690 004E4520 [NONAME] 691 [NONAME] (forwarded to SHUNIMPL.#216) 700 [NONAME] (forwarded to SHUNIMPL.#380) 702 000DA370 [NONAME] 703 [NONAME] (forwarded to SHLWAPI.#269) 704 [NONAME] (forwarded to SHLWAPI.#270) 707 [NONAME] (forwarded to SHUNIMPL.#69) 708 [NONAME] (forwarded to SHUNIMPL.#70) 711 0020F9A0 [NONAME] 712 [NONAME] (forwarded to SHUNIMPL.#71) 713 00222010 [NONAME] 714 00127DD0 [NONAME] 715 [NONAME] (forwarded to SHUNIMPL.#191) 719 0049E310 [NONAME] 720 [NONAME] (forwarded to SHUNIMPL.#72) 721 [NONAME] (forwarded to SHUNIMPL.#73) 722 [NONAME] (forwarded to SHUNIMPL.#236) 723 00148E70 [NONAME] 724 [NONAME] (forwarded to SHUNIMPL.#381) 725 [NONAME] (forwarded to SHUNIMPL.#74) 726 [NONAME] (forwarded to SHUNIMPL.#75) 731 0014D6F0 [NONAME] 732 0014B310 [NONAME] 733 000EBB90 [NONAME] 740 0026A7A0 [NONAME] 744 002331D0 [NONAME] 745 [NONAME] (forwarded to SHUNIMPL.#382) 748 0029CFD0 [NONAME] 749 [NONAME] (forwarded to SHUNIMPL.#76) 751 00213D90 [NONAME] 752 00251DF0 [NONAME] 753 0014B240 [NONAME] 754 0029D270 [NONAME] 755 000DD000 [NONAME] 756 [NONAME] (forwarded to SHUNIMPL.#77) 757 0009D3B0 [NONAME] 758 00018A10 [NONAME] 759 00018950 [NONAME] 760 001F3E40 [NONAME] 761 00256C30 [NONAME] 762 [NONAME] (forwarded to SHUNIMPL.#383) 763 00233200 [NONAME] 764 0003C4E0 [NONAME] 765 0025D300 [NONAME] 766 [NONAME] (forwarded to SHUNIMPL.#385) 767 001671C0 [NONAME] 777 0001D520 [NONAME] 778 0021C9F0 [NONAME] 779 00211640 [NONAME] 781 00259400 [NONAME] 782 00248690 [NONAME] 786 [NONAME] (forwarded to SHUNIMPL.#237) 787 000DC7D0 [NONAME] 788 00276050 [NONAME] 789 00276100 [NONAME] 790 00251270 [NONAME] 791 00276000 [NONAME] 792 000DC8E0 [NONAME] 810 00296D00 [NONAME] 811 00296B40 [NONAME] 812 004E71C0 [NONAME] 813 004E7270 [NONAME] 814 00124F20 [NONAME] 815 001265F0 [NONAME] 816 00523E80 [NONAME] 817 00523F10 [NONAME] 818 0011F0F0 [NONAME] 819 00524160 [NONAME] 820 [NONAME] (forwarded to SHUNIMPL.#249) 821 [NONAME] (forwarded to SHUNIMPL.#250) 822 [NONAME] (forwarded to SHUNIMPL.#251) 823 000381F0 [NONAME] 824 00047700 [NONAME] 825 00523A90 [NONAME] 826 [NONAME] (forwarded to SHUNIMPL.#252) 827 [NONAME] (forwarded to SHUNIMPL.#253) 828 0021FC50 [NONAME] 829 00220000 [NONAME] 830 00524090 [NONAME] 831 00212840 [NONAME] 832 [NONAME] (forwarded to SHUNIMPL.#387) 833 00156E00 [NONAME] 834 [NONAME] (forwarded to SHUNIMPL.#254) 835 [NONAME] (forwarded to SHUNIMPL.#255) 836 [NONAME] (forwarded to SHUNIMPL.#256) 837 [NONAME] (forwarded to SHUNIMPL.#257) 838 [NONAME] (forwarded to SHUNIMPL.#258) 839 [NONAME] (forwarded to SHUNIMPL.#259) 840 00251C00 [NONAME] 841 [NONAME] (forwarded to SHUNIMPL.#424) 842 [NONAME] (forwarded to SHUNIMPL.#425) 843 [NONAME] (forwarded to SHUNIMPL.#386) 844 00524000 [NONAME] 845 005236C0 [NONAME] 847 00523B50 [NONAME] 848 0025D350 [NONAME] 849 001274F0 [NONAME] 850 000DD020 [NONAME] 851 0020BD40 [NONAME] 852 [NONAME] (forwarded to SHUNIMPL.#391) 854 [NONAME] (forwarded to SHUNIMPL.#260) 856 [NONAME] (forwarded to SHUNIMPL.#423) 857 [NONAME] (forwarded to SHUNIMPL.#426) 858 [NONAME] (forwarded to SHUNIMPL.#392) 859 002A76A0 [NONAME] 860 00019340 [NONAME] 861 [NONAME] (forwarded to SHUNIMPL.#261) 862 0024E880 [NONAME] 863 [NONAME] (forwarded to SHUNIMPL.#262) 864 00249290 [NONAME] 865 002116F0 [NONAME] 866 0005E8D0 [NONAME] 867 [NONAME] (forwarded to SHUNIMPL.#263) 868 [NONAME] (forwarded to SHUNIMPL.#264) 869 [NONAME] (forwarded to SHUNIMPL.#384) 870 000EE000 [NONAME] 871 000E9E90 [NONAME] 872 [NONAME] (forwarded to SHUNIMPL.#265) 873 000DC830 [NONAME] 874 00110C00 [NONAME] 875 00110B20 [NONAME] 876 00243B90 [NONAME] 877 00243FD0 [NONAME] 878 00243E40 [NONAME] 880 0020FDD0 [NONAME] 881 00293F40 [NONAME] 882 002940A0 [NONAME] 883 004E3750 [NONAME] 884 00237BA0 [NONAME] 885 0012EC70 [NONAME] 886 002138E0 [NONAME] 887 00262CF0 [NONAME] 888 0029D2F0 [NONAME] 889 001029E0 [NONAME] 890 00102990 [NONAME] 891 00151CF0 [NONAME] 892 00222250 [NONAME] 893 000C63E0 [NONAME] 894 001F3E20 [NONAME] 895 00149AC0 [NONAME] 896 001F3DB0 [NONAME] 897 002A2D10 [NONAME] 898 00250B80 [NONAME] 899 0014B2D0 [NONAME] 900 000E9B20 [NONAME] 901 00489640 [NONAME] 902 [NONAME] (forwarded to SHUNIMPL.#473) 903 000EDFC0 [NONAME] 904 0014A520 [NONAME] 905 0006D770 [NONAME] 906 0014B2F0 [NONAME] 907 00249110 [NONAME] 909 0002C5C0 [NONAME] 910 002290C0 [NONAME] 911 0020B010 [NONAME] 912 00231640 [NONAME] 913 00232160 [NONAME] 914 001F3CA0 [NONAME] 915 000DF910 [NONAME] 916 000C79A0 [NONAME] 922 0029FA10 [NONAME] 923 00020DE0 [NONAME] 924 001F3D90 [NONAME] 926 0025D1C0 [NONAME] 927 00268F90 [NONAME] 928 00291110 [NONAME] 930 00120630 [NONAME] 932 001F3EC0 [NONAME] 933 001F3E90 [NONAME] 938 00256B90 [NONAME] 939 00033F10 [NONAME] 940 001F3E30 [NONAME] 943 0049A700 [NONAME] Summary A000 .data 3000 .didat 4C000 .pdata 12C000 .rdata 15000 .reloc DA5000 .rsrc 5E4000 .text 1000 .tls Microsoft (R) COFF/PE Dumper Version 14.31.31106.2 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file user32.dll File Type: DLL Section contains the following exports for USER32.dll 00000000 characteristics 559F30A6 time date stamp Thu Jul 9 19:40:38 2015 0.00 version 1502 ordinal base 1201 number of functions 938 number of names ordinal hint RVA name 1503 0 00030E20 ActivateKeyboardLayout 1504 1 00033040 AddClipboardFormatListener 1505 2 0004C560 AdjustWindowRect 1506 3 000123C0 AdjustWindowRectEx 1507 4 00084C50 AlignRects 1508 5 0004C5C0 AllowForegroundActivation 1509 6 00026580 AllowSetForegroundWindow 1510 7 00080070 AnimateWindow 1511 8 00080D50 AnyPopup 1512 9 000827D0 AppendMenuA 1513 A 0001D8B0 AppendMenuW 1514 B 0004C5D0 ArrangeIconicWindows 1515 C 00030B00 AttachThreadInput 1516 D 00024D30 BeginDeferWindowPos 1517 E 0002FDC0 BeginPaint 1518 F 00033080 BlockInput 1519 10 00029F70 BringWindowToTop 1520 11 00082820 BroadcastSystemMessage 1521 12 00082820 BroadcastSystemMessageA 1522 13 00082850 BroadcastSystemMessageExA 1523 14 0002E680 BroadcastSystemMessageExW 1524 15 00015C40 BroadcastSystemMessageW 1525 16 0002DD70 BuildReasonArray 1526 17 000305B0 CalcMenuBar 1527 18 000330B0 CalculatePopupWindowPosition 1528 19 00083320 CallMsgFilter 1529 1A 00083320 CallMsgFilterA 1530 1B 000129D0 CallMsgFilterW 1531 1C 000152D0 CallNextHookEx 1532 1D 0004E0A0 CallWindowProcA 1533 1E 0000F900 CallWindowProcW 1534 1F 00057510 CancelShutdown 1535 20 0004C5E0 CascadeChildWindows 1536 21 00074E60 CascadeWindows 1537 22 00030DD0 ChangeClipboardChain 1538 23 00083430 ChangeDisplaySettingsA 1539 24 00029FA0 ChangeDisplaySettingsExA 1540 25 000238E0 ChangeDisplaySettingsExW 1541 26 000573A0 ChangeDisplaySettingsW 1542 27 00075E40 ChangeMenuA 1543 28 00075EE0 ChangeMenuW 1544 29 00025950 ChangeWindowMessageFilter 1545 2A 000330F0 ChangeWindowMessageFilterEx 1546 2B 00026FC0 CharLowerA 1547 2C 00084940 CharLowerBuffA 1548 2D 00026FD0 CharLowerBuffW 1549 2E 00026C80 CharLowerW 1555 2F 00024260 CharNextA 1556 30 00084950 CharNextExA 1557 31 00025980 CharNextW 1558 32 00026C90 CharPrevA 1559 33 00084960 CharPrevExA 1560 34 0002EFC0 CharPrevW 1561 35 000232A0 CharToOemA 1562 36 0007B630 CharToOemBuffA 1563 37 0007B680 CharToOemBuffW 1564 38 0007B6E0 CharToOemW 1565 39 00023E80 CharUpperA 1566 3A 00084970 CharUpperBuffA 1567 3B 00001210 CharUpperBuffW 1568 3C 000232F0 CharUpperW 1569 3D 0001FB40 CheckDBCSEnabledExt 1570 3E 00002460 CheckDlgButton 1571 3F 0001D430 CheckMenuItem 1572 40 00002180 CheckMenuRadioItem 1573 41 00033110 CheckProcessForClipboardAccess 1574 42 00033120 CheckProcessSession 1575 43 000019E0 CheckRadioButton 1576 44 00033130 CheckWindowThreadDesktop 1577 45 0004C610 ChildWindowFromPoint 1578 46 00033140 ChildWindowFromPointEx 1579 47 00047F20 CliImmSetHotKey 1580 48 00019D50 ClientThreadSetup 1581 49 0000BFE0 ClientToScreen 1582 4A 00033160 ClipCursor 1583 4B 00030920 CloseClipboard 1584 4C 000306A0 CloseDesktop 1585 4D 0004BDC0 CloseGestureInfoHandle 1586 4E 0004F6E0 CloseTouchInputHandle 1587 4F 0004C6A0 CloseWindow 1588 50 00030790 CloseWindowStation 1589 51 00023540 ConsoleControl 1590 52 00033A80 ControlMagnification 1591 53 0004ED70 CopyAcceleratorTableA 1592 54 0002FF10 CopyAcceleratorTableW 1593 55 00004AF0 CopyIcon 1594 56 00005A40 CopyImage 1595 57 0001FB00 CopyRect 1596 58 00030D30 CountClipboardFormats 1597 59 0004EDF0 CreateAcceleratorTableA 1598 5A 00030B50 CreateAcceleratorTableW 1599 5B 0002FF70 CreateCaret 1600 5C 0002A6C0 CreateCursor 1601 5D 00033180 CreateDCompositionHwndTarget 1602 5E 0002F0A0 CreateDesktopA 1603 5F 0002F0E0 CreateDesktopExA 1604 60 00026690 CreateDesktopExW 1605 61 00026650 CreateDesktopW 1606 62 0004EE70 CreateDialogIndirectParamA 1607 63 000180C0 CreateDialogIndirectParamAorW 1608 64 00002710 CreateDialogIndirectParamW 1609 65 0004EEA0 CreateDialogParamA 1610 66 000182A0 CreateDialogParamW 1611 67 0004EFB0 CreateIcon 1612 68 0004F060 CreateIconFromResource 1613 69 000052F0 CreateIconFromResourceEx 1614 6A 00007260 CreateIconIndirect 1615 6B 000751D0 CreateMDIWindowA 1616 6C 00075250 CreateMDIWindowW 1617 6D 00026FB0 CreateMenu 1618 6E 00026E90 CreatePopupMenu 1619 6F 0004DE20 CreateSystemThreads 1620 70 00024DF0 CreateWindowExA 1621 71 0000A9C0 CreateWindowExW 1622 72 00025170 CreateWindowInBand 1623 73 000259D0 CreateWindowInBandEx 1624 74 00080DA0 CreateWindowIndirect 1625 75 0002F1D0 CreateWindowStationA 1626 76 00018420 CreateWindowStationW 1627 77 0002E5B0 CsrBroadcastSystemMessageExW 1628 78 000189D0 CtxInitUser32 1629 79 000818D0 DdeAbandonTransaction 1630 7A 0006ADA0 DdeAccessData 1631 7B 0006AE50 DdeAddData 1632 7C 000819A0 DdeClientTransaction 1633 7D 0006B9B0 DdeCmpStringHandles 1634 7E 00054E40 DdeConnect 1635 7F 00054F40 DdeConnectList 1636 80 0006AFC0 DdeCreateDataHandle 1637 81 0006B9D0 DdeCreateStringHandleA 1638 82 000175E0 DdeCreateStringHandleW 1639 83 000551F0 DdeDisconnect 1640 84 00055290 DdeDisconnectList 1641 85 0004B140 DdeEnableCallback 1642 86 0006B0F0 DdeFreeDataHandle 1643 87 00019A00 DdeFreeStringHandle 1644 88 0006B160 DdeGetData 1645 89 00058540 DdeGetLastError 1646 8A 00006AC0 DdeGetQualityOfService 1647 8B 00058590 DdeImpersonateClient 1648 8C 00058610 DdeInitializeA 1649 8D 00025D60 DdeInitializeW 1650 8E 0006B9F0 DdeKeepStringHandle 1651 8F 00017390 DdeNameService 1652 90 00081FD0 DdePostAdvise 1653 91 00082280 DdeQueryConvInfo 1654 92 000553A0 DdeQueryNextServer 1655 93 0006BAB0 DdeQueryStringA 1656 94 0006BAD0 DdeQueryStringW 1657 95 000554F0 DdeReconnect 1658 96 00006AC0 DdeSetQualityOfService 1659 97 00082490 DdeSetUserHandle 1660 98 0006B290 DdeUnaccessData 1661 99 00019B20 DdeUninitialize 1662 9A DefDlgProcA (forwarded to NTDLL.NtdllDialogWndProc_A) 1663 9B DefDlgProcW (forwarded to NTDLL.NtdllDialogWndProc_W) 1664 9C 000752D0 DefFrameProcA 1665 9D 000291B0 DefFrameProcW 1666 9E 00075300 DefMDIChildProcA 1667 9F 00027430 DefMDIChildProcW 1668 A0 0004E1D0 DefRawInputProc 1669 A1 DefWindowProcA (forwarded to NTDLL.NtdllDefWindowProc_A) 1670 A2 DefWindowProcW (forwarded to NTDLL.NtdllDefWindowProc_W) 1671 A3 00023DB0 DeferWindowPos 1672 A4 0004C6E0 DeferWindowPosAndBand 1673 A5 00030800 DeleteMenu 1674 A6 00027010 DeregisterShellHookWindow 1675 A7 00003950 DestroyAcceleratorTable 1676 A8 00026F20 DestroyCaret 1677 A9 00024240 DestroyCursor 1678 AA 00033200 DestroyDCompositionHwndTarget 1679 AB 00024240 DestroyIcon 1680 AC 00030A10 DestroyMenu 1681 AD 0002E530 DestroyReasons 1682 AE 00030610 DestroyWindow 1683 AF 0004F090 DialogBoxIndirectParamA 1684 B0 00028D30 DialogBoxIndirectParamAorW 1685 B1 00028D00 DialogBoxIndirectParamW 1686 B2 0004F0C0 DialogBoxParamA 1687 B3 00028C50 DialogBoxParamW 1688 B4 0002B760 DisableProcessWindowsGhosting 1689 B5 000261E0 DispatchMessageA 1690 B6 0000FA50 DispatchMessageW 1691 B7 000252D0 DisplayConfigGetDeviceInfo 1692 B8 000849F0 DisplayConfigSetDeviceInfo 1693 B9 00057560 DisplayExitWindowsWarnings 1694 BA 000719B0 DlgDirListA 1695 BB 00053220 DlgDirListComboBoxA 1696 BC 00053310 DlgDirListComboBoxW 1697 BD 00071AA0 DlgDirListW 1698 BE 00053370 DlgDirSelectComboBoxExA 1699 BF 00053410 DlgDirSelectComboBoxExW 1700 C0 00071B00 DlgDirSelectExA 1701 C1 00071BB0 DlgDirSelectExW 1702 C2 00033280 DoSoundConnect 1703 C3 00033290 DoSoundDisconnect 1704 C4 000332A0 DragDetect 1705 C5 000332B0 DragObject 1706 C6 000332C0 DrawAnimatedRects 1707 C7 0007A820 DrawCaption 1708 C8 00083460 DrawCaptionTempA 1709 C9 000573D0 DrawCaptionTempW 1710 CA 00002FD0 DrawEdge 1711 CB 00001D10 DrawFocusRect 1712 CC 00085BA0 DrawFrame 1713 CD 00085E40 DrawFrameControl 1714 CE 0002AE90 DrawIcon 1715 CF 00022C50 DrawIconEx 1716 D0 0002AE80 DrawMenuBar 1717 D1 00075F80 DrawMenuBarTemp 1718 D2 00076930 DrawStateA 1719 D3 00025B50 DrawStateW 1720 D4 00057A20 DrawTextA 1721 D5 00057AA0 DrawTextExA 1722 D6 0001B420 DrawTextExW 1723 D7 0001B450 DrawTextW 1724 D8 000270A0 DwmGetDxSharedSurface 1725 D9 00033300 DwmGetRemoteSessionOcclusionEvent 1726 DA 00033310 DwmGetRemoteSessionOcclusionState 1727 DB 00033320 DwmKernelShutdown 1728 DC 00033330 DwmKernelStartup 1729 DD 0002ECB0 DwmLockScreenUpdates 1730 DE 00033340 DwmValidateWindow 1731 DF 00060AF0 EditWndProc 1732 E0 00030BC0 EmptyClipboard 1733 E1 00033350 EnableChildWindowDpiMessage 1734 E2 0002A240 EnableMenuItem 1735 E3 00033370 EnableMouseInPointer 1736 E4 0002AD30 EnableScrollBar 1737 E5 00026EA0 EnableSessionForMMCSS 1738 E6 00026130 EnableWindow 1739 E7 00025970 EndDeferWindowPos 1740 E8 0002FEB0 EndDeferWindowPosEx 1741 E9 0002A3D0 EndDialog 1742 EA 000333A0 EndMenu 1743 EB 0002FDE0 EndPaint 1744 EC 00057960 EndTask 1745 ED 0007BBE0 EnterReaderModeHelper 1746 EE 00014A80 EnumChildWindows 1747 EF 0002AE40 EnumClipboardFormats 1748 F0 00016160 EnumDesktopWindows 1749 F1 000203A0 EnumDesktopsA 1750 F2 000203E0 EnumDesktopsW 1751 F3 0001FB60 EnumDisplayDevicesA 1752 F4 00023AC0 EnumDisplayDevicesW 1753 F5 000300F0 EnumDisplayMonitors 1754 F6 000206C0 EnumDisplaySettingsA 1755 F7 000206E0 EnumDisplaySettingsExA 1756 F8 000205A0 EnumDisplaySettingsExW 1757 F9 00020580 EnumDisplaySettingsW 1758 FA 0004BC30 EnumPropsA 1759 FB 0004BC50 EnumPropsExA 1760 FC 00023C50 EnumPropsExW 1761 FD 0004BC70 EnumPropsW 1762 FE 000152A0 EnumThreadWindows 1763 FF 00020380 EnumWindowStationsA 1764 100 000203C0 EnumWindowStationsW 1765 101 00014A50 EnumWindows 1766 102 0001F2F0 EqualRect 1767 103 0007EE50 EvaluateProximityToPolygon 1768 104 0007F3A0 EvaluateProximityToRect 1769 105 00030150 ExcludeUpdateRgn 1770 106 0002E6B0 ExitWindowsEx 1771 107 000028C0 FillRect 1772 108 0007AE50 FindWindowA 1773 109 00021730 FindWindowExA 1774 10A 0001D1D0 FindWindowExW 1775 10B 00023300 FindWindowW 1776 10C 0004C7F0 FlashWindow 1777 10D 000333C0 FlashWindowEx 1778 10E 00001D70 FrameRect 1779 10F 000595F0 FreeDDElParam 1780 110 000333D0 FrostCrashedWindow 1781 111 00026970 GetActiveWindow 1782 112 00083570 GetAltTabInfo 1783 113 00083570 GetAltTabInfoA 1784 114 000574B0 GetAltTabInfoW 1785 115 00030760 GetAncestor 1786 116 00025290 GetAppCompatFlags 1787 117 00011F00 GetAppCompatFlags2 1788 118 00021C60 GetAsyncKeyState 1789 119 000333F0 GetAutoRotationState 1790 11A 00033400 GetCIMSSM 1791 11B 00023440 GetCapture 1792 11C 00030B80 GetCaretBlinkTime 1793 11D 00033410 GetCaretPos 1794 11E 00020F40 GetClassInfoA 1795 11F 000210E0 GetClassInfoExA 1796 120 00015A30 GetClassInfoExW 1797 121 000159E0 GetClassInfoW 1798 122 00082BD0 GetClassLongA 1799 123 00082C10 GetClassLongPtrA 1800 124 00013990 GetClassLongPtrW 1801 125 0000E530 GetClassLongW 1802 126 000133E0 GetClassNameA 1803 127 0001F910 GetClassNameW 1804 128 00013B50 GetClassWord 1805 129 0000BB00 GetClientRect 1806 12A 00033420 GetClipCursor 1807 12B 00033430 GetClipboardAccessToken 1808 12C 0002ABA0 GetClipboardData 1809 12D 000835A0 GetClipboardFormatNameA 1810 12E 00002790 GetClipboardFormatNameW 1811 12F 000308D0 GetClipboardOwner 1812 130 000301A0 GetClipboardSequenceNumber 1813 131 00033440 GetClipboardViewer 1814 132 00033450 GetComboBoxInfo 1815 133 00033460 GetCurrentInputMessageSource 1816 134 00001CA0 GetCursor 1817 135 00026D30 GetCursorFrameInfo 1818 136 00033480 GetCursorInfo 1819 137 00023420 GetCursorPos 1820 138 0002FCF0 GetDC 1821 139 00030560 GetDCEx 1822 13A 000334A0 GetDesktopID 1823 13B 00015E70 GetDesktopWindow 1824 13C 0002AA60 GetDialogBaseUnits 1825 13D 000334B0 GetDisplayAutoRotationPreferences 1826 13E 00026630 GetDisplayConfigBufferSizes 1827 13F 0001FD20 GetDlgCtrlID 1828 140 00013AA0 GetDlgItem 1829 141 00059F90 GetDlgItemInt 1830 142 00082C50 GetDlgItemTextA 1831 143 0002A500 GetDlgItemTextW 1832 144 000307A0 GetDoubleClickTime 1833 145 000237E0 GetDpiForMonitorInternal 1834 146 000334F0 GetDpiMetrics 1835 147 00022C40 GetFocus 1836 148 00030010 GetForegroundWindow 1837 149 00030C30 GetGUIThreadInfo 1838 14A 00033500 GetGestureConfig 1839 14B 0004C0D0 GetGestureExtraArgs 1840 14C 0004C0F0 GetGestureInfo 1841 14D 00033530 GetGuiResources 1842 14E 00004AC0 GetIconInfo 1843 14F 0004F1E0 GetIconInfoExA 1844 150 00024560 GetIconInfoExW 1845 151 0004C9F0 GetInputDesktop 1846 152 00033570 GetInputLocaleInfo 1847 153 00080EF0 GetInputState 1848 154 00033580 GetInternalWindowPos 1849 155 0004CA00 GetKBCodePage 1850 156 00083640 GetKeyNameTextA 1851 157 000574E0 GetKeyNameTextW 1852 158 0001FA50 GetKeyState 1853 159 00023110 GetKeyboardLayout 1854 15A 000301D0 GetKeyboardLayoutList 1855 15B 000836F0 GetKeyboardLayoutNameA 1856 15C 00026EC0 GetKeyboardLayoutNameW 1857 15D 000303C0 GetKeyboardState 1858 15E 0002ADB0 GetKeyboardType 1859 15F 00013630 GetLastActivePopup 1860 160 00022FE0 GetLastInputInfo 1861 161 000335B0 GetLayeredWindowAttributes 1862 162 000335C0 GetListBoxInfo 1863 163 00073AC0 GetMagnificationDesktopColorEffect 1864 164 00073BA0 GetMagnificationDesktopMagnification 1865 165 00033A90 GetMagnificationLensCtxInformation 1866 166 000147F0 GetMenu 1867 167 00030850 GetMenuBarInfo 1868 168 00076000 GetMenuCheckMarkDimensions 1869 169 00076180 GetMenuContextHelpId 1870 16A 000243B0 GetMenuDefaultItem 1871 16B 0004DEA0 GetMenuInfo 1872 16C 0000CAA0 GetMenuItemCount 1873 16D 00024E80 GetMenuItemID 1874 16E 0001D5F0 GetMenuItemInfoA 1875 16F 0001DAB0 GetMenuItemInfoW 1876 170 000335E0 GetMenuItemRect 1877 171 00027FB0 GetMenuState 1878 172 00082CA0 GetMenuStringA 1879 173 0001D4B0 GetMenuStringW 1880 174 0001AA50 GetMessageA 1881 175 00024740 GetMessageExtraInfo 1882 176 00025A70 GetMessagePos 1883 177 00025D50 GetMessageTime 1884 178 0001F8C0 GetMessageW 1885 179 0000B960 GetMonitorInfoA 1886 17A 0000A7F0 GetMonitorInfoW 1887 17B 000335F0 GetMouseMovePointsEx 1888 17C 0005A9A0 GetNextDlgGroupItem 1889 17D 00002600 GetNextDlgTabItem 1890 17E 000309C0 GetOpenClipboardWindow 1891 17F 0001CED0 GetParent 1892 180 00023420 GetPhysicalCursorPos 1893 181 00033610 GetPointerCursorId 1894 182 00033620 GetPointerDevice 1895 183 00033630 GetPointerDeviceCursors 1896 184 00033640 GetPointerDeviceProperties 1897 185 00033650 GetPointerDeviceRects 1898 186 00033660 GetPointerDevices 1899 187 00033670 GetPointerFrameArrivalTimes 1900 188 0004EA40 GetPointerFrameInfo 1901 189 00001FD0 GetPointerFrameInfoHistory 1902 18A 0004EA90 GetPointerFramePenInfo 1903 18B 0004EAD0 GetPointerFramePenInfoHistory 1904 18C 0004EB10 GetPointerFrameTouchInfo 1905 18D 0004EB50 GetPointerFrameTouchInfoHistory 1906 18E 00001AE0 GetPointerInfo 1907 18F 0004EB90 GetPointerInfoHistory 1908 190 00033690 GetPointerInputTransform 1909 191 0004EBE0 GetPointerPenInfo 1910 192 0004EC30 GetPointerPenInfoHistory 1911 193 0004EC80 GetPointerTouchInfo 1912 194 0004ECD0 GetPointerTouchInfoHistory 1913 195 000336A0 GetPointerType 1914 196 000336C0 GetPriorityClipboardFormat 1915 197 00027080 GetProcessDefaultLayout 1916 198 000233F0 GetProcessDpiAwarenessInternal 1917 199 0002FE70 GetProcessWindowStation 1918 19A 0004CA20 GetProgmanWindow 1919 19B 00020CC0 GetPropA 1920 19C 0001B070 GetPropW 1921 19D 0001AE40 GetQueueStatus 1922 19E 0006A740 GetRawInputBuffer 1923 19F 00033710 GetRawInputData 1924 1A0 00082CF0 GetRawInputDeviceInfoA 1925 1A1 0002B750 GetRawInputDeviceInfoW 1926 1A2 00033730 GetRawInputDeviceList 1927 1A3 00033740 GetRawPointerDeviceData 1928 1A4 0002B7C0 GetReasonTitleFromReasonCode 1929 1A5 00033750 GetRegisteredRawInputDevices 1930 1A6 00030570 GetScrollBarInfo 1931 1A7 00014160 GetScrollInfo 1932 1A8 0002A2E0 GetScrollPos 1933 1A9 00080F20 GetScrollRange 1934 1AA 0004CA80 GetSendMessageReceiver 1935 1AB 00024060 GetShellWindow 1936 1AC 00024D60 GetSubMenu 1937 1AD 0001A220 GetSysColor 1938 1AE 000235E0 GetSysColorBrush 1939 1AF 00030250 GetSystemMenu 1940 1B0 000110A0 GetSystemMetrics 1941 1B1 00057C40 GetTabbedTextExtentA 1942 1B2 00057D40 GetTabbedTextExtentW 1943 1B3 0002ED00 GetTaskmanWindow 1944 1B4 00030470 GetThreadDesktop 1945 1B5 00030530 GetTitleBarInfo 1946 1B6 00033760 GetTopLevelWindow 1947 1B7 0001D290 GetTopWindow 1948 1B8 0004F8A0 GetTouchInputInfo 1949 1B9 0004CD00 GetUnpredictedMessagePos 1950 1BA 00015820 GetUpdateRect 1951 1BB 000023F0 GetUpdateRgn 1952 1BC 00033790 GetUpdatedClipboardFormats 1953 1BD 00026980 GetUserObjectInformationA 1954 1BE 00030300 GetUserObjectInformationW 1955 1BF 0004CD10 GetUserObjectSecurity 1956 1C0 0004CD50 GetWinStationInfo 1957 1C1 00013DB0 GetWindow 1958 1C2 000337B0 GetWindowBand 1959 1C3 000337C0 GetWindowCompositionAttribute 1960 1C4 000337D0 GetWindowCompositionInfo 1961 1C5 0004CD60 GetWindowContextHelpId 1962 1C6 00030280 GetWindowDC 1963 1C7 00012780 GetWindowDPI 1964 1C8 000337E0 GetWindowDisplayAffinity 1965 1C9 000337F0 GetWindowFeedbackSetting 1966 1CA 00011880 GetWindowInfo 1967 1CB 0000EB70 GetWindowLongA 1968 1CC 0000CAE0 GetWindowLongPtrA 1969 1CD 0000EEF0 GetWindowLongPtrW 1970 1CE 0000EC80 GetWindowLongW 1971 1CF 00033800 GetWindowMinimizeRect 1972 1D0 00082E10 GetWindowModuleFileName 1973 1D1 00082E10 GetWindowModuleFileNameA 1974 1D2 0004DD40 GetWindowModuleFileNameW 1975 1D3 00030990 GetWindowPlacement 1976 1D4 0000B310 GetWindowRect 1977 1D5 0000E9C0 GetWindowRgn 1978 1D6 000132D0 GetWindowRgnBox 1979 1D7 00033810 GetWindowRgnEx 1980 1D8 00013F30 GetWindowTextA 1981 1D9 00082E50 GetWindowTextLengthA 1982 1DA 000141E0 GetWindowTextLengthW 1983 1DB 0000E2D0 GetWindowTextW 1984 1DC 00014040 GetWindowThreadProcessId 1985 1DD 00080FE0 GetWindowWord 1986 1DE 00033820 GhostWindowFromHungWindow 1987 1DF 0004CD70 GrayStringA 1988 1E0 0004CDD0 GrayStringW 1989 1E1 0002FE40 HideCaret 1990 1E2 00033860 HiliteMenuItem 1991 1E3 00033870 HungWindowFromGhostWindow 1992 1E4 00083DA0 IMPGetIMEA 1993 1E5 00083DF0 IMPGetIMEW 1994 1E6 00083E40 IMPQueryIMEA 1995 1E7 00083E80 IMPQueryIMEW 1996 1E8 00083EC0 IMPSetIMEA 1997 1E9 00083F10 IMPSetIMEW 1998 1EA 000338A0 ImpersonateDdeClientWindow 1999 1EB 0001F1B0 InSendMessage 2000 1EC 0001E630 InSendMessageEx 2003 1ED 00020F10 InflateRect 2004 1EE 00002940 InitDManipHook 2006 1EF 000338E0 InitializeInputDeviceInjection 2007 1F0 00023220 InitializeLpkHooks 2008 1F1 000338F0 InitializePointerDeviceInjection 2009 1F2 00033900 InitializeTouchInjection 2011 1F3 00033910 InjectDeviceInput 2012 1F4 00033930 InjectKeyboardInput 2013 1F5 00033940 InjectMouseInput 2014 1F6 00033950 InjectPointerInput 2015 1F7 00033960 InjectTouchInput 2016 1F8 00082EA0 InsertMenuA 2017 1F9 00082F20 InsertMenuItemA 2018 1FA 0001D900 InsertMenuItemW 2019 1FB 0001D500 InsertMenuW 2020 1FC 0002B790 InternalGetWindowIcon 2021 1FD 00023740 InternalGetWindowText 2022 1FE 00009C50 IntersectRect 2023 1FF 0002FC90 InvalidateRect 2024 200 000308C0 InvalidateRgn 2025 201 000865C0 InvertRect 2026 202 00084980 IsCharAlphaA 2027 203 00084990 IsCharAlphaNumericA 2028 204 0002AEF0 IsCharAlphaNumericW 2029 205 000849A0 IsCharAlphaW 2030 206 000849B0 IsCharLowerA 2031 207 000849C0 IsCharLowerW 2032 208 000849D0 IsCharUpperA 2033 209 000849E0 IsCharUpperW 2034 20A 00013480 IsChild 2035 20B 00033990 IsChildWindowDpiMessageEnabled 2036 20C 0002FF40 IsClipboardFormatAvailable 2037 20D 0005A7D0 IsDialogMessage 2038 20E 0005A7D0 IsDialogMessageA 2039 20F 00012020 IsDialogMessageW 2040 210 0005A360 IsDlgButtonChecked 2041 211 000265F0 IsGUIThread 2042 212 00024750 IsHungAppWindow 2043 213 0001F5D0 IsIconic 2044 214 000247C0 IsImmersiveProcess 2045 215 0002E320 IsInDesktopWindowBand 2046 216 0000CA80 IsMenu 2047 217 000339A0 IsMouseInPointerEnabled 2048 218 0001F190 IsProcessDPIAware 2049 219 0004D200 IsQueueAttached 2050 21A 0001EB90 IsRectEmpty 2051 21B 0007C400 IsSETEnabled 2052 21C 00022BB0 IsServerSideWindow 2053 21D 0000BF80 IsThreadDesktopComposited 2528 21E 00022AE0 IsThreadMessageQueueAttached 2054 21F 000339C0 IsTopLevelWindow 2055 220 000339D0 IsTouchWindow 2056 221 0001F200 IsWinEventHookInstalled 2057 222 000150E0 IsWindow 2058 223 000022E0 IsWindowArranged 2059 224 000339E0 IsWindowBroadcastingDpiToChildren 2060 225 0000E960 IsWindowEnabled 2061 226 0000CBC0 IsWindowInDestroy 2062 227 000231D0 IsWindowRedirectedForPrint 2063 228 00020BC0 IsWindowUnicode 2064 229 0001D070 IsWindowVisible 2065 22A 0004E530 IsWow64Message 2066 22B 0000C990 IsZoomed 2067 22C 0002FE00 KillTimer 2068 22D 0004F320 LoadAcceleratorsA 2069 22E 00004840 LoadAcceleratorsW 2070 22F 00002880 LoadBitmapA 2071 230 00003600 LoadBitmapW 2072 231 00004F00 LoadCursorA 2073 232 000482E0 LoadCursorFromFileA 2074 233 00048350 LoadCursorFromFileW 2075 234 00006330 LoadCursorW 2076 235 0002C9C0 LoadIconA 2077 236 00005E70 LoadIconW 2078 237 00004A60 LoadImageA 2079 238 00005390 LoadImageW 2080 239 0004D210 LoadKeyboardLayoutA 2081 23A 0004D290 LoadKeyboardLayoutEx 2082 23B 0002D730 LoadKeyboardLayoutW 2083 23C 0002ED70 LoadLocalFonts 2084 23D 0004DF40 LoadMenuA 2085 23E 00004E00 LoadMenuIndirectA 2086 23F 00004E00 LoadMenuIndirectW 2087 240 00004D90 LoadMenuW 2088 241 0002ECD0 LoadRemoteFonts 2089 242 0004F3F0 LoadStringA 2090 243 00023B90 LoadStringW 2091 244 0004D2C0 LockSetForegroundWindow 2092 245 00033A20 LockWindowStation 2093 246 00030CA0 LockWindowUpdate 2094 247 00033A30 LockWorkStation 2095 248 00033A50 LogicalToPhysicalPoint 2096 249 00033A40 LogicalToPhysicalPointForPerMonitorDPI 2097 24A 0004F480 LookupIconIdFromDirectory 2098 24B 00005150 LookupIconIdFromDirectoryEx 2099 24C 000219E0 MBToWCSEx 2100 24D 00020A20 MBToWCSExt 2101 24E 00078200 MB_GetString 2102 24F 0002A540 MapDialogRect 2103 250 00083750 MapVirtualKeyA 2104 251 000837B0 MapVirtualKeyExA 2105 252 000574F0 MapVirtualKeyExW 2106 253 00023E00 MapVirtualKeyW 2107 254 0001E670 MapWindowPoints 2108 255 00033AB0 MenuItemFromPoint 2109 256 0004E550 MenuWindowProcA 2110 257 0004E610 MenuWindowProcW 2111 258 0004D2E0 MessageBeep 2112 259 000788A0 MessageBoxA 2113 25A 00078900 MessageBoxExA 2114 25B 00078930 MessageBoxExW 2115 25C 00078960 MessageBoxIndirectA 2116 25D 00078B00 MessageBoxIndirectW 2117 25E 00078BC0 MessageBoxTimeoutA 2118 25F 00078D20 MessageBoxTimeoutW 2119 260 00078E00 MessageBoxW 2120 261 00082F90 ModifyMenuA 2121 262 0002AAD0 ModifyMenuW 2122 263 00008BA0 MonitorFromPoint 2123 264 00009990 MonitorFromRect 2124 265 0000E810 MonitorFromWindow 2125 266 00030220 MoveWindow 2126 267 0001EE80 MsgWaitForMultipleObjects 2127 268 0001A260 MsgWaitForMultipleObjectsEx 2128 269 0004D300 NotifyOverlayWindow 2129 26A 0001ED60 NotifyWinEvent 2130 26B 0007B750 OemKeyScan 2131 26C 0007B7D0 OemToCharA 2132 26D 0007B820 OemToCharBuffA 2133 26E 0007B870 OemToCharBuffW 2134 26F 0007B8C0 OemToCharW 2135 270 00013960 OffsetRect 2136 271 0002B6C0 OpenClipboard 2137 272 00024270 OpenDesktopA 2138 273 000242E0 OpenDesktopW 2139 274 0004D320 OpenIcon 2140 275 00033B00 OpenInputDesktop 2141 276 00033B10 OpenThreadDesktop 2142 277 000187A0 OpenWindowStationA 2143 278 00018800 OpenWindowStationW 2144 279 000596B0 PackDDElParam 2145 27A 0007F4D0 PackTouchHitTestingProximityEvaluation 2146 27B 0007A9A0 PaintDesktop 2147 27C 00030B20 PaintMenuBar 2148 27D 00033B20 PaintMonitor 2149 27E 0001A4C0 PeekMessageA 2150 27F 0001A5F0 PeekMessageW 2151 280 00033B40 PhysicalToLogicalPoint 2152 281 00033B30 PhysicalToLogicalPointForPerMonitorDPI 2153 282 00024900 PostMessageA 2154 283 000170A0 PostMessageW 2155 284 000265A0 PostQuitMessage 2156 285 00024880 PostThreadMessageA 2157 286 00022B00 PostThreadMessageW 2158 287 00033B50 PrintWindow 2159 288 0006A600 PrivateExtractIconExA 2160 289 00018A40 PrivateExtractIconExW 2161 28A 0006A690 PrivateExtractIconsA 2162 28B 00019440 PrivateExtractIconsW 2163 28C 0002B770 PrivateRegisterICSProc 2164 28D 00008DF0 PtInRect 2165 28E 00033B80 QueryBSDRWindow 2166 28F 00025D20 QueryDisplayConfig 2167 290 00033BC0 QuerySendMessage 2168 291 0007C990 RIMAddInputObserver 2169 292 0007C9A0 RIMAreSiblingDevices 2170 293 0007C9A0 RIMDeviceIoControl 2171 294 0002FA90 RIMFreeInputBuffer 2172 295 0007C9A0 RIMGetDevicePreparsedData 2173 296 0007C9B0 RIMGetDevicePreparsedDataLockfree 2174 297 0007C9A0 RIMGetDeviceProperties 2175 298 0007C9C0 RIMObserveNextInput 2176 299 0007C9A0 RIMOnPnpNotification 2177 29A 0007C9A0 RIMOnTimerNotification 2178 29B 0007C9A0 RIMReadInput 2179 29C 0007C9A0 RIMRegisterForInput 2180 29D 0007C9D0 RIMRemoveInputObserver 2181 29E 0007C9A0 RIMSetTestModeStatus 2182 29F 0007C9A0 RIMUnregisterForInput 2183 2A0 0007C9E0 RIMUpdateInputObserverRegistration 2184 2A1 00033BD0 RealChildWindowFromPoint 2185 2A2 00083890 RealGetWindowClass 2186 2A3 00083890 RealGetWindowClassA 2187 2A4 0001FE10 RealGetWindowClassW 2188 2A5 0007C7A0 ReasonCodeNeedsBugID 2189 2A6 0007C7B0 ReasonCodeNeedsComment 2190 2A7 0002B8A0 RecordShutdownReason 2191 2A8 0002FD80 RedrawWindow 2192 2A9 00033BF0 RegisterBSDRWindow 2193 2AA 00021310 RegisterClassA 2194 2AB 00083010 RegisterClassExA 2195 2AC 00008E20 RegisterClassExW 2196 2AD 00008F30 RegisterClassW 2197 2AE 000216D0 RegisterClipboardFormatA 2198 2AF 00022C00 RegisterClipboardFormatW 2199 2B0 0002E850 RegisterDManipHook 2200 2B1 000256A0 RegisterDeviceNotificationA 2201 2B2 000256A0 RegisterDeviceNotificationW 2202 2B3 00033C20 RegisterErrorReportingDialog 2203 2B4 0004D430 RegisterFrostWindow 2204 2B5 0002B7A0 RegisterGhostWindow 2205 2B6 00033C30 RegisterHotKey 2206 2B7 00026F80 RegisterLogonProcess 2207 2B8 00033C40 RegisterManipulationThread 2208 2B9 00026470 RegisterMessagePumpHook 2209 2BA 00033C50 RegisterPointerDeviceNotifications 2210 2BB 0004ED20 RegisterPointerInputTarget 2211 2BC 00026150 RegisterPowerSettingNotification 2212 2BD 00033C70 RegisterRawInputDevices 2213 2BE 00033C80 RegisterServicesProcess 2214 2BF 00033C90 RegisterSessionPort 2215 2C0 00026F50 RegisterShellHookWindow 2216 2C1 0007ACC0 RegisterSuspendResumeNotification 2217 2C2 0002AEC0 RegisterSystemThread 2218 2C3 00033CB0 RegisterTasklist 2219 2C4 00033CC0 RegisterTouchHitTestingWindow 2220 2C5 00027040 RegisterTouchWindow 2221 2C6 0002E910 RegisterUserApiHook 2222 2C7 000216D0 RegisterWindowMessageA 2223 2C8 00022C00 RegisterWindowMessageW 2224 2C9 00026CC0 ReleaseCapture 2225 2CA 000081F0 ReleaseDC 2226 2CB 00033CF0 ReleaseDwmHitTestWaiters 2227 2CC 00033D40 RemoveClipboardFormatListener 2228 2CD 00030BE0 RemoveMenu 2229 2CE 00083940 RemovePropA 2230 2CF 00021E60 RemovePropW 2231 2D0 00024780 ReplyMessage 2232 2D1 00033D60 ResolveDesktopForWOW 2233 2D2 00059730 ReuseDDElParam 2234 2D3 0000E0A0 ScreenToClient 2235 2D4 000753D0 ScrollChildren 2236 2D5 00022100 ScrollDC 2237 2D6 0004D490 ScrollWindow 2238 2D7 00024790 ScrollWindowEx 2239 2D8 00083050 SendDlgItemMessageA 2240 2D9 00001A90 SendDlgItemMessageW 2241 2DA 00083F60 SendIMEMessageExA 2242 2DB 00083FB0 SendIMEMessageExW 2243 2DC 00030460 SendInput 2244 2DD 000149C0 SendMessageA 2245 2DE 000839D0 SendMessageCallbackA 2246 2DF 0001F970 SendMessageCallbackW 2247 2E0 00024130 SendMessageTimeoutA 2248 2E1 0001CBC0 SendMessageTimeoutW 2249 2E2 0000F4B0 SendMessageW 2250 2E3 00029A50 SendNotifyMessageA 2251 2E4 00015F30 SendNotifyMessageW 2252 2E5 00030A40 SetActiveWindow 2253 2E6 000300E0 SetCapture 2254 2E7 00026F30 SetCaretBlinkTime 2255 2E8 00026C60 SetCaretPos 2256 2E9 00083AA0 SetClassLongA 2257 2EA 00083AC0 SetClassLongPtrA 2258 2EB 0002B620 SetClassLongPtrW 2259 2EC 0002AE70 SetClassLongW 2260 2ED 00033DF0 SetClassWord 2261 2EE 0002EDD0 SetClipboardData 2262 2EF 00030DE0 SetClipboardViewer 2263 2F0 0002FDD0 SetCoalescableTimer 2264 2F1 0002FDF0 SetCursor 2265 2F2 00033E20 SetCursorContents 2266 2F3 00026E30 SetCursorPos 2267 2F4 0002FA90 SetDebugErrorLevel 2268 2F5 0004D4F0 SetDeskWallpaper 2269 2F6 00033E30 SetDisplayAutoRotationPreferences 2270 2F7 00084A10 SetDisplayConfig 2271 2F8 00001B30 SetDlgItemInt 2272 2F9 000830A0 SetDlgItemTextA 2273 2FA 00017070 SetDlgItemTextW 2274 2FB 0004D510 SetDoubleClickTime 2275 2FC 00033E70 SetFeatureReportResponse 2276 2FD 00030160 SetFocus 2277 2FE 00026C50 SetForegroundWindow 2278 2FF 00033E80 SetGestureConfig 2279 300 00033EC0 SetImmersiveBackgroundWindow 2280 301 00033ED0 SetInternalWindowPos 2281 302 00030B30 SetKeyboardState 2282 303 0007B920 SetLastErrorEx 2283 304 00033EE0 SetLayeredWindowAttributes 2284 305 00073CD0 SetMagnificationDesktopColorEffect 2285 306 00073DA0 SetMagnificationDesktopMagnification 2286 307 00033AA0 SetMagnificationLensCtxInformation 2287 308 0004ED40 SetManipulationInputTarget 2288 309 00026F60 SetMenu 2289 30A 00033F10 SetMenuContextHelpId 2290 30B 00030C60 SetMenuDefaultItem 2291 30C 000761A0 SetMenuInfo 2292 30D 000761E0 SetMenuItemBitmaps 2293 30E 000830D0 SetMenuItemInfoA 2294 30F 0001D580 SetMenuItemInfoW 2295 310 0004EA30 SetMessageExtraInfo 2296 311 00006AC0 SetMessageQueue 2297 312 00033F30 SetMirrorRendering 2298 313 000303B0 SetParent 2299 314 0004D530 SetPhysicalCursorPos 2300 315 00026410 SetProcessDPIAware 2301 316 0004D540 SetProcessDefaultLayout 2302 317 00008BE0 SetProcessDpiAwarenessInternal 2303 318 00033F70 SetProcessRestrictionExemption 2304 319 000306C0 SetProcessWindowStation 2305 31A 0004D560 SetProgmanWindow 2306 31B 00083BF0 SetPropA 2307 31C 00021FF0 SetPropW 2308 31D 0001F940 SetRect 2309 31E 0001FB20 SetRectEmpty 2310 31F 0001F790 SetScrollInfo 2311 320 00002740 SetScrollPos 2312 321 0001F700 SetScrollRange 2313 322 0004D570 SetShellWindow 2314 323 00033F90 SetShellWindowEx 2315 324 00027060 SetSysColors 2316 325 0007B930 SetSysColorsTemp 2317 326 0007AD20 SetSystemCursor 2318 327 00030CB0 SetSystemMenu 2319 328 0002ECA0 SetTaskmanWindow 2320 329 00030550 SetThreadDesktop 2321 32A 00033FD0 SetThreadInputBlocked 2322 32B 00022590 SetTimer 2323 32C 00033F40 SetUserObjectInformationA 2324 32D 00033F40 SetUserObjectInformationW 2325 32E 0002EA80 SetUserObjectSecurity 2326 32F 00023F80 SetWinEventHook 2327 330 00034000 SetWindowBand 2328 331 00034010 SetWindowCompositionAttribute 2329 332 00034020 SetWindowCompositionTransition 2330 333 0004D5D0 SetWindowContextHelpId 2331 334 00034030 SetWindowDisplayAffinity 2332 335 00034040 SetWindowFeedbackSetting 2333 336 00026CD0 SetWindowLongA 2334 337 000161F0 SetWindowLongPtrA 2335 338 00014640 SetWindowLongPtrW 2336 339 00010F30 SetWindowLongW 2337 33A 00030A60 SetWindowPlacement 2338 33B 0002FE90 SetWindowPos 2339 33C 00014560 SetWindowRgn 2340 33D 0007AD80 SetWindowRgnEx 2341 33E 0002EA00 SetWindowStationUser 2342 33F 00083140 SetWindowTextA 2343 340 000148A0 SetWindowTextW 2344 341 00030AC0 SetWindowWord 2345 342 0004C530 SetWindowsHookA 2346 343 000027A0 SetWindowsHookExA 2347 344 00023610 SetWindowsHookExW 2348 345 0004C550 SetWindowsHookW 2349 346 0002FEA0 ShowCaret 2350 347 00027020 ShowCursor 2351 348 0002AE20 ShowOwnedPopups 2352 349 00030020 ShowScrollBar 2353 34A 0004D620 ShowStartGlass 2354 34B 00034080 ShowSystemCursor 2355 34C 000301C0 ShowWindow 2356 34D 00030DF0 ShowWindowAsync 2357 34E 0002E1F0 ShutdownBlockReasonCreate 2358 34F 000340B0 ShutdownBlockReasonDestroy 2359 350 000340A0 ShutdownBlockReasonQuery 2360 351 000340C0 SignalRedirectionStartComplete 2361 352 00033250 SkipPointerFrameMessages 2362 353 00079440 SoftModalMessageBox 2363 354 000340E0 SoundSentry 2364 355 00024A80 SubtractRect 2365 356 0004D6C0 SwapMouseButton 2366 357 00027000 SwitchDesktop 2367 358 00027090 SwitchDesktopWithFade 2368 359 000026F0 SwitchToThisWindow 2369 35A 000108A0 SystemParametersInfoA 2370 35B 0001E1A0 SystemParametersInfoW 2371 35C 00057F30 TabbedTextOutA 2372 35D 00058040 TabbedTextOutW 2373 35E 0004D6E0 TileChildWindows 2374 35F 000756D0 TileWindows 2375 360 0004D710 ToAscii 2376 361 0004D790 ToAsciiEx 2377 362 0007ADC0 ToUnicode 2378 363 00025900 ToUnicodeEx 2379 364 000309F0 TrackMouseEvent 2380 365 00076270 TrackPopupMenu 2381 366 00034110 TrackPopupMenuEx 2382 367 0004D900 TranslateAccelerator 2383 368 0004D900 TranslateAcceleratorA 2384 369 00022200 TranslateAcceleratorW 2385 36A 00075AA0 TranslateMDISysAccel 2386 36B 000136A0 TranslateMessage 2387 36C 000225B0 TranslateMessageEx 2388 36D 00030C90 UnhookWinEvent 2389 36E 0004D990 UnhookWindowsHook 2390 36F 00030340 UnhookWindowsHookEx 2391 370 00022130 UnionRect 2392 371 0004D9B0 UnloadKeyboardLayout 2393 372 00034160 UnlockWindowStation 2394 373 000597F0 UnpackDDElParam 2395 374 00020F70 UnregisterClassA 2396 375 0000B1C0 UnregisterClassW 2397 376 00026AB0 UnregisterDeviceNotification 2398 377 00034170 UnregisterHotKey 2399 378 000269E0 UnregisterMessagePumpHook 2400 379 0004ED60 UnregisterPointerInputTarget 2401 37A 00026940 UnregisterPowerSettingNotification 2402 37B 00034180 UnregisterSessionPort 2403 37C 0007AE10 UnregisterSuspendResumeNotification 2404 37D 0007AE40 UnregisterTouchWindow 2405 37E 00034190 UnregisterUserApiHook 2406 37F 000341A0 UpdateDefaultDesktopThumbnail 2407 380 000268D0 UpdateLayeredWindow 2408 381 00027160 UpdateLayeredWindowIndirect 2409 382 0002C9F0 UpdatePerUserSystemParameters 2410 383 0000CA00 UpdateWindow 2411 384 000341F0 UpdateWindowInputSinkHints 2412 385 00034200 UpdateWindowTransform 2413 386 00008E50 User32InitializeImmEntryTable 2414 387 00009D90 UserClientDllInitialize 2415 388 00034210 UserHandleGrantAccess 2416 389 00058090 UserLpkPSMTextOut 2417 38A 000582A0 UserLpkTabbedTextOut 2418 38B 0002AE10 UserRealizePalette 2419 38C 0004D9E0 UserRegisterWowHandlers 2420 38D 00034310 VRipOutput 2421 38E 00034310 VTagOutput 2422 38F 00030910 ValidateRect 2423 390 00002540 ValidateRgn 2424 391 00083C90 VkKeyScanA 2425 392 00083CF0 VkKeyScanExA 2426 393 00026AF0 VkKeyScanExW 2427 394 00026DC0 VkKeyScanW 2428 395 000208E0 WCSToMBEx 2429 396 00084000 WINNLSEnableIME 2430 397 00084050 WINNLSGetEnableStatus 2431 398 00034310 WINNLSGetIMEHotkey 2432 399 00026DE0 WaitForInputIdle 2433 39A 00034260 WaitForRedirectionStartComplete 2434 39B 0002FD10 WaitMessage 2435 39C 000297C0 WinHelpA 2436 39D 00029710 WinHelpW 2437 39E 00024250 WindowFromDC 2438 39F 00034270 WindowFromPhysicalPoint 2439 3A0 0002FD90 WindowFromPoint 2440 3A1 0007FC50 _UserTestTokenForInteractive 2441 3A2 000A2640 gSharedInfo 2442 3A3 0008D330 gapfnScSendMessage 2443 3A4 0007B5E0 keybd_event 2444 3A5 00026B40 mouse_event 2445 3A6 00022610 wsprintfA 2446 3A7 0002B1D0 wsprintfW 2447 3A8 00022640 wvsprintfA 2448 3A9 0002B200 wvsprintfW 1502 0004FAF0 [NONAME] 1550 0007C870 [NONAME] 1551 0007C960 [NONAME] 1552 0007C820 [NONAME] 1553 0007C7C0 [NONAME] 1554 0007C900 [NONAME] 2001 00073E10 [NONAME] 2002 00073C30 [NONAME] 2005 00033DE0 [NONAME] 2010 000340D0 [NONAME] 2503 000331F0 [NONAME] 2504 00034140 [NONAME] 2505 00033830 [NONAME] 2506 0004C340 [NONAME] 2507 00033DB0 [NONAME] 2508 00033B70 [NONAME] 2509 00033030 [NONAME] 2510 00033360 [NONAME] 2511 00033E60 [NONAME] 2512 000334C0 [NONAME] 2513 00033D90 [NONAME] 2514 00026FE0 [NONAME] 2515 0002BD80 [NONAME] 2516 000331E0 [NONAME] 2517 00033780 [NONAME] 2518 00018EE0 [NONAME] 2519 00033380 [NONAME] 2520 000339B0 [NONAME] 2521 000336E0 [NONAME] 2522 00033DC0 [NONAME] 2523 0001F320 [NONAME] 2524 0004BCC0 [NONAME] 2525 0002E4F0 [NONAME] 2526 0004BC90 [NONAME] 2527 0002E9D0 [NONAME] 2529 00033220 [NONAME] 2530 00034230 [NONAME] 2531 00033DD0 [NONAME] 2532 00033E50 [NONAME] 2533 000330D0 [NONAME] 2534 00033970 [NONAME] 2535 00080E40 [NONAME] 2536 00015610 [NONAME] 2537 00033D70 [NONAME] 2538 000339F0 [NONAME] 2539 00033850 [NONAME] 2540 000027C0 [NONAME] 2541 000336F0 [NONAME] 2542 00033CA0 [NONAME] 2544 00033390 [NONAME] 2545 00033600 [NONAME] 2546 00033CD0 [NONAME] 2547 00011060 [NONAME] 2548 000336B0 [NONAME] 2549 00033F50 [NONAME] 2550 00033170 [NONAME] 2551 00033D50 [NONAME] 2552 0004D450 [NONAME] 2553 0004D880 [NONAME] 2554 0004D360 [NONAME] 2555 00086B20 [NONAME] 2556 00033D80 [NONAME] 2557 00034120 [NONAME] 2558 00034130 [NONAME] 2559 0002FC20 [NONAME] 2560 00001C10 [NONAME] 2561 0002F240 [NONAME] 2562 0004D1F0 [NONAME] 2563 00033150 [NONAME] 2564 0002ED50 [NONAME] 2566 00033FF0 [NONAME] 2567 0002ED90 [NONAME] 2568 000024A0 [NONAME] 2569 0004CA10 [NONAME] 2570 0004D580 [NONAME] 2571 00033E00 [NONAME] 2572 0001EC40 [NONAME] 2573 00013290 [NONAME] 2574 00020DF0 [NONAME] 2575 0004C830 [NONAME] 2576 00033E10 [NONAME] 2577 00026B10 [NONAME] 2578 00033AE0 [NONAME] 2579 00034060 [NONAME] 2580 00010FF0 [NONAME] 2581 00026B30 [NONAME] 2582 00022600 [NONAME] 2700 0004C9C0 [NONAME] 2702 0002EDB0 [NONAME] Summary 2000 .data 1000 .didat A000 .pdata 18000 .rdata 1000 .reloc 9F000 .rsrc 88000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file userenv.dll File Type: DLL Section contains the following exports for USERENV.dll 00000000 characteristics 5F73FC88 time date stamp Tue Sep 29 20:33:28 2020 0.00 version 104 ordinal base 116 number of functions 59 number of names ordinal hint RVA name 106 0 0000E2E0 AreThereVisibleLogoffScripts 107 1 0000E2F0 AreThereVisibleShutdownScripts 108 2 00001140 CreateAppContainerProfile 109 3 00003270 CreateEnvironmentBlock 110 4 0000ED60 CreateProfile 111 5 000010F0 DeleteAppContainerProfile 112 6 0000FD20 DeleteProfileA 113 7 0000F220 DeleteProfileW 114 8 000032C0 DeriveAppContainerSidFromAppContainerName 115 9 000010A0 DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName 116 A 00003240 DestroyEnvironmentBlock 117 B 000031C0 DllCanUnloadNow 118 C 00003090 DllGetClassObject 119 D 000107E0 DllRegisterServer 120 E 00010820 DllUnregisterServer 121 F 000033E0 EnterCriticalPolicySection 123 10 0000FE30 ExpandEnvironmentStringsForUserA 124 11 00003190 ExpandEnvironmentStringsForUserW 125 12 0000E300 ForceSyncFgPolicy 126 13 0000E310 FreeGPOListA 127 14 0000E320 FreeGPOListW 128 15 0000E330 GenerateGPNotification 129 16 0000FF50 GetAllUsersProfileDirectoryA 130 17 000100B0 GetAllUsersProfileDirectoryW 131 18 00002FE0 GetAppContainerFolderPath 132 19 00003120 GetAppContainerRegistryLocation 133 1A 0000E340 GetAppliedGPOListA 134 1B 0000E350 GetAppliedGPOListW 136 1C 000100D0 GetDefaultUserProfileDirectoryA 138 1D 00010230 GetDefaultUserProfileDirectoryW 140 1E 0000E360 GetGPOListA 141 1F 0000E370 GetGPOListW 142 20 0000E380 GetNextFgPolicyRefreshInfo 143 21 0000E390 GetPreviousFgPolicyRefreshInfo 144 22 00002810 GetProfileType 145 23 00010250 GetProfilesDirectoryA 146 24 000033A0 GetProfilesDirectoryW 147 25 000103B0 GetUserProfileDirectoryA 148 26 000013A0 GetUserProfileDirectoryW 149 27 0000E3A0 HasPolicyForegroundProcessingCompleted 150 28 000033D0 LeaveCriticalPolicySection 151 29 0000F6B0 LoadProfileExtender 152 2A 00010520 LoadUserProfileA 153 2B 00001820 LoadUserProfileW 154 2C 0000E800 ProcessGroupPolicyCompleted 155 2D 0000E850 ProcessGroupPolicyCompletedEx 156 2E 0000E3B0 RefreshPolicy 157 2F 0000E3C0 RefreshPolicyEx 158 30 00003380 RegisterGPNotification 159 31 0000E8B0 RsopAccessCheckByType 160 32 0000E970 RsopFileAccessCheck 105 33 0000E2D0 RsopLoggingEnabled 161 34 0000E9E0 RsopResetPolicySettingStatus 162 35 0000EA30 RsopSetPolicySettingStatus 163 36 00003390 UnloadProfileExtender 164 37 000016D0 UnloadUserProfile 165 38 000033C0 UnregisterGPNotification 166 39 0000E3D0 WaitForMachinePolicyForegroundProcessing 167 3A 0000E3E0 WaitForUserPolicyForegroundProcessing 104 0000E6D0 [NONAME] 122 0000E710 [NONAME] 135 000113E0 [NONAME] 137 0000E5B0 [NONAME] 139 0000E610 [NONAME] 175 000111C0 [NONAME] 202 0000D5C0 [NONAME] 203 0000D190 [NONAME] 206 0000E580 [NONAME] 207 000059C0 [NONAME] 208 0000F7B0 [NONAME] 209 00003690 [NONAME] 210 0000EAA0 [NONAME] 211 0000E7C0 [NONAME] 212 00003300 [NONAME] 213 00001100 [NONAME] 214 000034D0 [NONAME] 217 000015F0 [NONAME] 218 0000E770 [NONAME] 219 0000D840 [NONAME] Summary 1000 .data 1000 .didat 1000 .pdata 7000 .rdata 1000 .reloc 3000 .rsrc 11000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file version.dll File Type: DLL Section contains the following exports for VERSION.dll 00000000 characteristics 559F3095 time date stamp Thu Jul 9 19:40:21 2015 0.00 version 1 ordinal base 17 number of functions 17 number of names ordinal hint RVA name 1 0 00001DB0 GetFileVersionInfoA 2 1 00002160 GetFileVersionInfoByHandle 3 2 00001DC0 GetFileVersionInfoExA 4 3 00001040 GetFileVersionInfoExW 5 4 00001010 GetFileVersionInfoSizeA 6 5 00001DD0 GetFileVersionInfoSizeExA 7 6 00001050 GetFileVersionInfoSizeExW 8 7 00001060 GetFileVersionInfoSizeW 9 8 00001070 GetFileVersionInfoW 10 9 00001DE0 VerFindFileA 11 A 00002330 VerFindFileW 12 B 00001DF0 VerInstallFileA 13 C 00003020 VerInstallFileW 14 D VerLanguageNameA (forwarded to KERNEL32.VerLanguageNameA) 15 E VerLanguageNameW (forwarded to KERNEL32.VerLanguageNameW) 16 F 00001020 VerQueryValueA 17 10 00001030 VerQueryValueW Summary 1000 .data 1000 .pdata 2000 .rdata 1000 .reloc 1000 .rsrc 3000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file winhttp.dll File Type: DLL Section contains the following exports for WINHTTP.dll 00000000 characteristics 5C5A3D83 time date stamp Tue Feb 5 17:50:59 2019 0.00 version 1 ordinal base 54 number of functions 54 number of names ordinal hint RVA name 1 0 00073EA0 DllCanUnloadNow 2 1 00073EC0 DllGetClassObject 3 2 00067080 Private1 4 3 000371B0 SvchostPushServiceGlobals 5 4 00017360 WinHttpAddRequestHeaders 6 5 000371C0 WinHttpAutoProxySvcMain 7 6 00041C80 WinHttpCheckPlatform 8 7 00015860 WinHttpCloseHandle 9 8 00019550 WinHttpConnect 10 9 00069590 WinHttpConnectionDeleteProxyInfo 11 A 00069610 WinHttpConnectionFreeNameList 12 B 00069660 WinHttpConnectionFreeProxyInfo 13 C 000696B0 WinHttpConnectionFreeProxyList 14 D 00069700 WinHttpConnectionGetNameList 15 E 00069760 WinHttpConnectionGetProxyInfo 16 F 000697C0 WinHttpConnectionGetProxyList 17 10 00069820 WinHttpConnectionSetProxyInfo 18 11 00007530 WinHttpCrackUrl 19 12 00024CA0 WinHttpCreateProxyResolver 20 13 00006CA0 WinHttpCreateUrl 21 14 0006A4D0 WinHttpDetectAutoProxyConfigUrl 22 15 000305A0 WinHttpFreeProxyResult 23 16 00025DE0 WinHttpGetDefaultProxyConfiguration 24 17 000255D0 WinHttpGetIEProxyConfigForCurrentUser 25 18 00024330 WinHttpGetProxyForUrl 26 19 00024ED0 WinHttpGetProxyForUrlEx 27 1A 0006A730 WinHttpGetProxyResult 28 1B 0006A8A0 WinHttpGetTunnelSocket 29 1C 0001BC40 WinHttpOpen 30 1D 00019C10 WinHttpOpenRequest 31 1E 00068410 WinHttpProbeConnectivity 32 1F 0006AE90 WinHttpQueryAuthSchemes 33 20 000268D0 WinHttpQueryDataAvailable 34 21 00016D90 WinHttpQueryHeaders 35 22 00001900 WinHttpQueryOption 36 23 00014200 WinHttpReadData 37 24 00018C80 WinHttpReceiveResponse 38 25 000352A0 WinHttpResetAutoProxy 39 26 00068480 WinHttpSaveProxyCredentials 40 27 00018330 WinHttpSendRequest 41 28 0006B070 WinHttpSetCredentials 42 29 00069090 WinHttpSetDefaultProxyConfiguration 43 2A 00017A20 WinHttpSetOption 44 2B 00017D90 WinHttpSetStatusCallback 45 2C 0001C2F0 WinHttpSetTimeouts 46 2D 000252C0 WinHttpTimeFromSystemTime 47 2E 00033080 WinHttpTimeToSystemTime 48 2F 00076B10 WinHttpWebSocketClose 49 30 00076F30 WinHttpWebSocketCompleteUpgrade 50 31 00076C10 WinHttpWebSocketQueryCloseStatus 51 32 00077950 WinHttpWebSocketReceive 52 33 000780C0 WinHttpWebSocketSend 53 34 000784F0 WinHttpWebSocketShutdown 54 35 00016180 WinHttpWriteData Summary 2000 .data 1000 .didat 9000 .pdata 21000 .rdata 1000 .reloc 5000 .rsrc 9C000 .text 6000 .wpp_sf Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file winmm.dll File Type: DLL Section contains the following exports for WINMM.dll 00000000 characteristics 5A978C09 time date stamp Wed Feb 28 21:13:45 2018 0.00 version 2 ordinal base 181 number of functions 180 number of names ordinal hint RVA name 4 0 00005B60 CloseDriver 5 1 00005B70 DefDriverProc 6 2 00005B80 DriverCallback 7 3 00005B90 DrvGetModuleHandle 8 4 00005BA0 GetDriverModuleHandle 9 5 00005BC0 OpenDriver 10 6 00005BB0 PlaySound 11 7 0000E930 PlaySoundA 12 8 00001900 PlaySoundW 13 9 00005BD0 SendDriverMessage 14 A 0000FCF0 WOWAppExit 15 B 00005BE0 auxGetDevCapsA 16 C 00005BF0 auxGetDevCapsW 17 D 00005C00 auxGetNumDevs 18 E 00005C10 auxGetVolume 19 F 00005C20 auxOutMessage 20 10 00005C30 auxSetVolume 21 11 00005C40 joyConfigChanged 22 12 00005C50 joyGetDevCapsA 23 13 00005C60 joyGetDevCapsW 24 14 00005C70 joyGetNumDevs 25 15 00005C90 joyGetPos 26 16 00005C80 joyGetPosEx 27 17 00005CA0 joyGetThreshold 28 18 00005CB0 joyReleaseCapture 29 19 00005CC0 joySetCapture 30 1A 00005CD0 joySetThreshold 31 1B 0000C200 mciDriverNotify 32 1C 0000C220 mciDriverYield 3 1D 00006EA0 mciExecute 33 1E 0000A130 mciFreeCommandResource 34 1F 0000C690 mciGetCreatorTask 35 20 0000C700 mciGetDeviceIDA 36 21 0000C750 mciGetDeviceIDFromElementIDA 37 22 0000C7A0 mciGetDeviceIDFromElementIDW 38 23 0000C8A0 mciGetDeviceIDW 39 24 0000C8D0 mciGetDriverData 40 25 00008370 mciGetErrorStringA 41 26 00008490 mciGetErrorStringW 42 27 0000C970 mciGetYieldProc 43 28 0000A320 mciLoadCommandResource 44 29 00008790 mciSendCommandA 45 2A 00009020 mciSendCommandW 46 2B 00009150 mciSendStringA 47 2C 00009360 mciSendStringW 48 2D 0000CF60 mciSetDriverData 49 2E 0000D010 mciSetYieldProc 50 2F 00005CE0 midiConnect 51 30 00005CF0 midiDisconnect 52 31 00005D00 midiInAddBuffer 53 32 00005D10 midiInClose 54 33 00005D20 midiInGetDevCapsA 55 34 00005D30 midiInGetDevCapsW 56 35 00005D40 midiInGetErrorTextA 57 36 00005D50 midiInGetErrorTextW 58 37 00005D60 midiInGetID 59 38 00005D70 midiInGetNumDevs 60 39 00005D80 midiInMessage 61 3A 00005D90 midiInOpen 62 3B 00005DA0 midiInPrepareHeader 63 3C 00005DB0 midiInReset 64 3D 00005DC0 midiInStart 65 3E 00005DD0 midiInStop 66 3F 00005DE0 midiInUnprepareHeader 67 40 00005DF0 midiOutCacheDrumPatches 68 41 00005E00 midiOutCachePatches 69 42 00005E10 midiOutClose 70 43 00005E20 midiOutGetDevCapsA 71 44 00005E30 midiOutGetDevCapsW 72 45 00005E40 midiOutGetErrorTextA 73 46 00005E50 midiOutGetErrorTextW 74 47 00005E60 midiOutGetID 75 48 00005E70 midiOutGetNumDevs 76 49 00005E80 midiOutGetVolume 77 4A 00005E90 midiOutLongMsg 78 4B 00005EA0 midiOutMessage 79 4C 00005EB0 midiOutOpen 80 4D 00005EC0 midiOutPrepareHeader 81 4E 00005ED0 midiOutReset 82 4F 00005EE0 midiOutSetVolume 83 50 00005EF0 midiOutShortMsg 84 51 00005F00 midiOutUnprepareHeader 85 52 00005F10 midiStreamClose 86 53 00005F20 midiStreamOpen 87 54 00005F30 midiStreamOut 88 55 00005F40 midiStreamPause 89 56 00005F50 midiStreamPosition 90 57 00005F60 midiStreamProperty 91 58 00005F70 midiStreamRestart 92 59 00005F80 midiStreamStop 93 5A 00005F90 mixerClose 94 5B 00005FA0 mixerGetControlDetailsA 95 5C 00005FB0 mixerGetControlDetailsW 96 5D 00005FC0 mixerGetDevCapsA 97 5E 00005FD0 mixerGetDevCapsW 98 5F 00005FE0 mixerGetID 99 60 00005FF0 mixerGetLineControlsA 100 61 00006000 mixerGetLineControlsW 101 62 00006010 mixerGetLineInfoA 102 63 00006020 mixerGetLineInfoW 103 64 00006030 mixerGetNumDevs 104 65 00006040 mixerMessage 105 66 00006050 mixerOpen 106 67 00006060 mixerSetControlDetails 107 68 00006070 mmDrvInstall 108 69 00006080 mmGetCurrentTask 109 6A 00006090 mmTaskBlock 110 6B 000060A0 mmTaskCreate 111 6C 000060B0 mmTaskSignal 112 6D 000060C0 mmTaskYield 113 6E 000060D0 mmioAdvance 114 6F 000060E0 mmioAscend 115 70 000060F0 mmioClose 116 71 00006100 mmioCreateChunk 117 72 00006110 mmioDescend 118 73 00006120 mmioFlush 119 74 00006130 mmioGetInfo 120 75 00006140 mmioInstallIOProcA 121 76 00006150 mmioInstallIOProcW 122 77 00006160 mmioOpenA 123 78 00006170 mmioOpenW 124 79 00006180 mmioRead 125 7A 00006190 mmioRenameA 126 7B 000061A0 mmioRenameW 127 7C 000061B0 mmioSeek 128 7D 000061C0 mmioSendMessage 129 7E 000061D0 mmioSetBuffer 130 7F 000061E0 mmioSetInfo 131 80 000061F0 mmioStringToFOURCCA 132 81 00006200 mmioStringToFOURCCW 133 82 00006210 mmioWrite 134 83 0000FEC0 mmsystemGetVersion 135 84 0000EE00 sndPlaySoundA 136 85 0000EE10 sndPlaySoundW 137 86 00003070 timeBeginPeriod 138 87 00003080 timeEndPeriod 139 88 00006220 timeGetDevCaps 140 89 00006230 timeGetSystemTime 141 8A 000030A0 timeGetTime 142 8B 00002F70 timeKillEvent 143 8C 00002B80 timeSetEvent 144 8D 00006240 waveInAddBuffer 145 8E 00006250 waveInClose 146 8F 00006260 waveInGetDevCapsA 147 90 00006270 waveInGetDevCapsW 148 91 00006280 waveInGetErrorTextA 149 92 00006290 waveInGetErrorTextW 150 93 000062A0 waveInGetID 151 94 000062B0 waveInGetNumDevs 152 95 000062C0 waveInGetPosition 153 96 000062D0 waveInMessage 154 97 000062E0 waveInOpen 155 98 000062F0 waveInPrepareHeader 156 99 00006300 waveInReset 157 9A 00006310 waveInStart 158 9B 00006320 waveInStop 159 9C 00006330 waveInUnprepareHeader 160 9D 00006340 waveOutBreakLoop 161 9E 00006350 waveOutClose 162 9F 00006360 waveOutGetDevCapsA 163 A0 00006370 waveOutGetDevCapsW 164 A1 00006380 waveOutGetErrorTextA 165 A2 00006390 waveOutGetErrorTextW 166 A3 000063A0 waveOutGetID 167 A4 000063B0 waveOutGetNumDevs 168 A5 000063C0 waveOutGetPitch 169 A6 000063D0 waveOutGetPlaybackRate 170 A7 000063E0 waveOutGetPosition 171 A8 000063F0 waveOutGetVolume 172 A9 00006400 waveOutMessage 173 AA 00006410 waveOutOpen 174 AB 00006420 waveOutPause 175 AC 00006430 waveOutPrepareHeader 176 AD 00006440 waveOutReset 177 AE 00006450 waveOutRestart 178 AF 00006460 waveOutSetPitch 179 B0 00006470 waveOutSetPlaybackRate 180 B1 00006480 waveOutSetVolume 181 B2 00006490 waveOutUnprepareHeader 182 B3 000064A0 waveOutWrite 2 00005BB0 [NONAME] Summary 2000 .data 1000 .didat 1000 .guids 1000 .pdata 7000 .rdata 1000 .reloc 5000 .rsrc 10000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file winspool.drv File Type: DLL Section contains the following exports for WINSPOOL.DRV 00000000 characteristics 64098C2B time date stamp Wed Mar 8 23:35:07 2023 0.00 version 100 ordinal base 269 number of functions 197 number of names ordinal hint RVA name 101 0 00018F90 ADVANCEDSETUPDIALOG 116 1 00024150 AbortPrinter 117 2 0001A2C0 AddFormA 118 3 000243A0 AddFormW 119 4 0001A390 AddJobA 120 5 00024570 AddJobW 121 6 0001A430 AddMonitorA 122 7 00024990 AddMonitorW 123 8 0001A610 AddPortA 124 9 0001A6C0 AddPortExA 125 A 00024BC0 AddPortExW 126 B 00024CC0 AddPortW 127 C 0001A8A0 AddPrintProcessorA 128 D 00024D20 AddPrintProcessorW 129 E 0001A9D0 AddPrintProvidorA 130 F 00024E80 AddPrintProvidorW 131 10 0001AAF0 AddPrinterA 132 11 0001AC00 AddPrinterConnection2A 133 12 00037B40 AddPrinterConnection2W 134 13 0001AC20 AddPrinterConnectionA 135 14 00037DF0 AddPrinterConnectionW 136 15 0001AC80 AddPrinterDriverA 137 16 0001ACE0 AddPrinterDriverExA 138 17 00025000 AddPrinterDriverExW 139 18 00025750 AddPrinterDriverW 140 19 0000EE60 AddPrinterW 141 1A 0001AF00 AdvancedDocumentPropertiesA 142 1B 000257B0 AdvancedDocumentPropertiesW 102 1C 00018F90 AdvancedSetupDialog 143 1D 00003080 ClosePrinter 144 1E 00025850 CloseSpoolFileHandle 145 1F 00025990 CommitSpoolData 146 20 0001B0E0 ConfigurePortA 147 21 00025B30 ConfigurePortW 148 22 00026210 ConnectToPrinterDlg 103 23 00019540 ConvertAnsiDevModeToUnicodeDevmode 104 24 00019600 ConvertUnicodeDevModeToAnsiDevmode 149 25 000388C0 CorePrinterDriverInstalledA 150 26 000389B0 CorePrinterDriverInstalledW 151 27 000384A0 CreatePrintAsyncNotifyChannel 152 28 00026490 CreatePrinterIC 153 29 0001B9F0 DEVICECAPABILITIES 105 2A 000198B0 DEVICEMODE 154 2B 0001B190 DeleteFormA 155 2C 00026640 DeleteFormW 156 2D 00039880 DeleteJobNamedProperty 157 2E 0001B200 DeleteMonitorA 158 2F 000267F0 DeleteMonitorW 159 30 0001B390 DeletePortA 160 31 000269D0 DeletePortW 161 32 0001B440 DeletePrintProcessorA 162 33 00026A30 DeletePrintProcessorW 163 34 0001B530 DeletePrintProvidorA 164 35 00026B70 DeletePrintProvidorW 165 36 0000EB60 DeletePrinter 166 37 0001B610 DeletePrinterConnectionA 167 38 00037E40 DeletePrinterConnectionW 168 39 0001B670 DeletePrinterDataA 169 3A 0001B6F0 DeletePrinterDataExA 170 3B 00026C90 DeletePrinterDataExW 171 3C 00026E20 DeletePrinterDataW 172 3D 0001B7A0 DeletePrinterDriverA 173 3E 0001B880 DeletePrinterDriverExA 174 3F 00026FA0 DeletePrinterDriverExW 175 40 00038B50 DeletePrinterDriverPackageA 176 41 00038C30 DeletePrinterDriverPackageW 177 42 00027100 DeletePrinterDriverW 178 43 00027240 DeletePrinterIC 179 44 0001B970 DeletePrinterKeyA 180 45 00027350 DeletePrinterKeyW 181 46 000274D0 DevQueryPrint 182 47 00027620 DevQueryPrintEx 183 48 0001B9F0 DeviceCapabilities 184 49 0001B9F0 DeviceCapabilitiesA 185 4A 00027760 DeviceCapabilitiesW 106 4B 000198B0 DeviceMode 186 4C 0002B900 DevicePropertySheets 107 4D 00005EE0 DocumentEvent 187 4E 0001BD00 DocumentPropertiesA 188 4F 0000B780 DocumentPropertiesW 189 50 0000BC70 DocumentPropertySheets 190 51 0001CCF0 EXTDEVICEMODE 191 52 000053F0 EndDocPrinter 192 53 000057F0 EndPagePrinter 193 54 0001BE80 EnumFormsA 194 55 00005940 EnumFormsW 195 56 00039A10 EnumJobNamedProperties 196 57 0001BF70 EnumJobsA 197 58 000063C0 EnumJobsW 198 59 0001C100 EnumMonitorsA 199 5A 000277D0 EnumMonitorsW 200 5B 0001C2E0 EnumPortsA 225 5C 0000ED10 EnumPortsW 232 5D 0001C3F0 EnumPrintProcessorDatatypesA 235 5E 00027AA0 EnumPrintProcessorDatatypesW 236 5F 0001C510 EnumPrintProcessorsA 237 60 00027C30 EnumPrintProcessorsW 238 61 0001C630 EnumPrinterDataA 239 62 0001C730 EnumPrinterDataExA 240 63 00027DE0 EnumPrinterDataExW 241 64 00028010 EnumPrinterDataW 242 65 0001C840 EnumPrinterDriversA 243 66 0000DFA0 EnumPrinterDriversW 244 67 0001CA50 EnumPrinterKeyA 245 68 00028260 EnumPrinterKeyW 246 69 0001CB90 EnumPrintersA 247 6A 0000B5E0 EnumPrintersW 248 6B 0001CCF0 ExtDeviceMode 249 6C 0000DAC0 FindClosePrinterChangeNotification 263 6D 0000AD70 FindFirstPrinterChangeNotification 264 6E 0000BA60 FindNextPrinterChangeNotification 265 6F 000284A0 FlushPrinter 266 70 00039CD0 FreePrintNamedPropertyArray 267 71 00039DB0 FreePrintPropertyValue 268 72 0000DD10 FreePrinterNotifyInfo 269 73 00038DA0 GetCorePrinterDriversA 270 74 00039000 GetCorePrinterDriversW 201 75 0001D030 GetDefaultPrinterA 203 76 0000D130 GetDefaultPrinterW 271 77 0001D0E0 GetFormA 272 78 0000A320 GetFormW 273 79 0001D1C0 GetJobA 274 7A 00039E40 GetJobNamedPropertyValue 275 7B 00028850 GetJobW 276 7C 000294F0 GetPrintExecutionData 277 7D 000295A0 GetPrintOutputInfo 278 7E 0001D2E0 GetPrintProcessorDirectoryA 279 7F 00029980 GetPrintProcessorDirectoryW 280 80 0001D3D0 GetPrinterA 281 81 0001D530 GetPrinterDataA 282 82 0001D860 GetPrinterDataExA 283 83 0000E9B0 GetPrinterDataExW 284 84 00003A50 GetPrinterDataW 285 85 0001AC00 GetPrinterDriver2A 286 86 00029B20 GetPrinterDriver2W 287 87 00009FE0 GetPrinterDriverA 288 88 0001DC10 GetPrinterDriverDirectoryA 289 89 000115A0 GetPrinterDriverDirectoryW 290 8A 000391E0 GetPrinterDriverPackagePathA 291 8B 000393D0 GetPrinterDriverPackagePathW 292 8C 0000C990 GetPrinterDriverW 293 8D 0000C390 GetPrinterW 294 8E 00029B30 GetSpoolFileHandle 295 8F 00039590 InstallPrinterDriverFromPackageA 296 90 000110B0 InstallPrinterDriverFromPackageW 297 91 0001DD00 IsValidDevmodeA 298 92 00009F50 IsValidDevmodeW 299 93 0001AC00 OpenPrinter2A 300 94 000032A0 OpenPrinter2W 301 95 0001DD50 OpenPrinterA 302 96 00003240 OpenPrinterW 108 97 0003BA20 PerfClose 109 98 0003BA30 PerfCollect 110 99 0003BB70 PerfOpen 303 9A 0002A380 PlayGdiScriptOnPrinterIC 304 9B 0001DE60 PrinterMessageBoxA 305 9C 0002A4B0 PrinterMessageBoxW 306 9D 0002A4C0 PrinterProperties 111 9E 00022570 QueryColorProfile 112 9F 00022740 QueryRemoteFonts 113 A0 00022870 QuerySpoolMode 307 A1 00005B90 ReadPrinter 308 A2 00007DC0 RegisterForPrintAsyncNotifications 309 A3 00038700 ReportJobProcessingProgress 310 A4 0001E050 ResetPrinterA 311 A5 00006610 ResetPrinterW 312 A6 0002A500 ScheduleJob 313 A7 00005D40 SeekPrinter 202 A8 0001E130 SetDefaultPrinterA 204 A9 0000F970 SetDefaultPrinterW 314 AA 0001E190 SetFormA 315 AB 0002A8B0 SetFormW 316 AC 0001E290 SetJobA 317 AD 000051D0 SetJobNamedProperty 318 AE 0002AA90 SetJobW 319 AF 0001E410 SetPortA 320 B0 0002AD50 SetPortW 321 B1 0001E520 SetPrinterA 322 B2 0001E790 SetPrinterDataA 323 B3 0001E890 SetPrinterDataExA 324 B4 0002AEC0 SetPrinterDataExW 325 B5 0000E880 SetPrinterDataW 326 B6 0000E270 SetPrinterW 327 B7 0002B0A0 SplDriverUnloadComplete 114 B8 000234E0 SpoolerDevQueryPrintW 328 B9 000113D0 SpoolerPrinterEvent 329 BA 0001E9D0 StartDocDlgA 115 BB 00023860 StartDocDlgW 330 BC 0001EBA0 StartDocPrinterA 331 BD 00006AB0 StartDocPrinterW 332 BE 00005610 StartPagePrinter 333 BF 00007EF0 UnRegisterForPrintAsyncNotifications 334 C0 000396C0 UploadPrinterDriverPackageA 335 C1 00010DC0 UploadPrinterDriverPackageW 336 C2 0002E070 WaitForPrinterChange 337 C3 00006B50 WritePrinter 339 C4 0002B620 XcvDataW 100 00028430 [NONAME] 205 0000A960 [NONAME] 206 0001A500 [NONAME] 207 00024AF0 [NONAME] 208 0001B2E0 [NONAME] 209 00026930 [NONAME] 210 0001C210 [NONAME] 211 00027980 [NONAME] 212 0000C180 [NONAME] 213 0000C270 [NONAME] 214 0000C090 [NONAME] 215 00011750 [NONAME] 216 0001DF30 [NONAME] 217 00031FC0 [NONAME] 218 0000A7C0 [NONAME] 219 00021EB0 [NONAME] 220 00021C30 [NONAME] 221 00021710 [NONAME] 222 0000E170 [NONAME] 223 0002C6F0 [NONAME] 224 00028450 [NONAME] 226 00013750 [NONAME] 227 00036600 [NONAME] 228 000365F0 [NONAME] 229 00021840 [NONAME] 230 00021D60 [NONAME] 231 00021FE0 [NONAME] 233 00019B70 [NONAME] 234 00020840 [NONAME] 250 000371B0 [NONAME] 251 00007F60 [NONAME] 252 00020100 [NONAME] 253 00002CC0 [NONAME] 254 00002C60 [NONAME] 255 000202C0 [NONAME] 256 0000AA00 [NONAME] 257 0002EED0 [NONAME] 258 0003B5E0 [NONAME] 259 0003B720 [NONAME] 260 0003B500 [NONAME] 261 00029C90 [NONAME] 262 0002A220 [NONAME] 338 0002EC90 [NONAME] 368 00038210 [NONAME] Summary 2000 .data 1000 .didat 5000 .pdata 1E000 .rdata 1000 .reloc 16000 .rsrc 48000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file wintrust.dll File Type: DLL Section contains the following exports for WINTRUST.dll 00000000 characteristics 644C9A48 time date stamp Fri Apr 28 21:17:12 2023 0.00 version 1 ordinal base 148 number of functions 148 number of names ordinal hint RVA name 12 0 0002D2B0 AddPersonalTrustDBPages 13 1 0001ABA0 CatalogCompactHashDatabase 1 2 00027180 ComputeFirstPageHash 14 3 0002DD00 ConfigCiFinalPolicy 15 4 00018AC0 CryptCATAdminAcquireContext 16 5 00007020 CryptCATAdminAcquireContext2 17 6 00027E60 CryptCATAdminAddCatalog 18 7 000070D0 CryptCATAdminCalcHashFromFileHandle 19 8 00006FD0 CryptCATAdminCalcHashFromFileHandle2 20 9 00016C70 CryptCATAdminEnumCatalogFromHash 21 A 00028150 CryptCATAdminPauseServiceForBackup 22 B 00018750 CryptCATAdminReleaseCatalogContext 23 C 00014220 CryptCATAdminReleaseContext 24 D 00028190 CryptCATAdminRemoveCatalog 25 E 000281E0 CryptCATAdminResolveCatalogPath 26 F 00017D70 CryptCATAllocSortedMemberInfo 27 10 00004520 CryptCATCDFClose 28 11 00028490 CryptCATCDFEnumAttributes 29 12 00003B40 CryptCATCDFEnumAttributesWithCDFTag 30 13 000021B0 CryptCATCDFEnumCatAttributes 31 14 000284B0 CryptCATCDFEnumMembers 32 15 00028510 CryptCATCDFEnumMembersByCDFTag 33 16 000023D0 CryptCATCDFEnumMembersByCDFTagEx 34 17 00002B20 CryptCATCDFOpen 35 18 00018680 CryptCATCatalogInfoFromContext 36 19 0000E280 CryptCATClose 37 1A 00015770 CryptCATEnumerateAttr 38 1B 00015670 CryptCATEnumerateCatAttr 39 1C 000278F0 CryptCATEnumerateMember 40 1D 00018A40 CryptCATFreeSortedMemberInfo 41 1E 000156E0 CryptCATGetAttrInfo 42 1F 000155F0 CryptCATGetCatAttrInfo 43 20 000279F0 CryptCATGetMemberInfo 44 21 00014A80 CryptCATHandleFromStore 45 22 00013B70 CryptCATOpen 46 23 00027AE0 CryptCATPersistStore 47 24 00027B20 CryptCATPutAttrInfo 48 25 000038C0 CryptCATPutCatAttrInfo 49 26 00003580 CryptCATPutMemberInfo 50 27 00014A80 CryptCATStoreFromHandle 2 28 000278B0 CryptCATVerifyMember 51 29 0000F150 CryptSIPCreateIndirectData 52 2A 0000EFF0 CryptSIPGetCaps 3 2B 00029050 CryptSIPGetInfo 4 2C 00029040 CryptSIPGetRegWorkingFlags 53 2D 00029090 CryptSIPGetSealedDigest 54 2E 0000E650 CryptSIPGetSignedDataMsg 55 2F 00001FF0 CryptSIPPutSignedDataMsg 56 30 00001F40 CryptSIPRemoveSignedDataMsg 57 31 0000EE60 CryptSIPVerifyIndirectData 58 32 00023160 DllRegisterServer 59 33 000231C0 DllUnregisterServer 60 34 000151A0 DriverCleanupPolicy 61 35 00014D60 DriverFinalPolicy 62 36 000152A0 DriverInitializePolicy 63 37 0002F900 FindCertsByIssuer 5 38 0002C530 GenericChainCertificateTrust 6 39 0002C860 GenericChainFinalProv 64 3A 0002E310 GetAuthenticodeSha256Hash 7 3B 00006A00 HTTPSCertificateTrust 65 3C 000068E0 HTTPSFinalProv 66 3D 00028740 IsCatalogFile 67 3E 00013D90 MsCatConstructHashTag 68 3F 00028950 MsCatFreeHashTag 69 40 0002FCC0 OfficeCleanupPolicy 70 41 0002FCC0 OfficeInitializePolicy 71 42 0002D2D0 OpenPersonalTrustDBDialog 72 43 0002D2E0 OpenPersonalTrustDBDialogEx 73 44 0000CA60 SoftpubAuthenticode 74 45 000149D0 SoftpubCheckCert 75 46 0000B070 SoftpubCleanup 8 47 0002D020 SoftpubDefCertInit 76 48 0002FF70 SoftpubDllRegisterServer 77 49 000301E0 SoftpubDllUnregisterServer 78 4A 00030DE0 SoftpubDumpStructure 9 4B 0002D120 SoftpubFreeDefUsageCallData 79 4C 0000AEE0 SoftpubInitialize 10 4D 0002D170 SoftpubLoadDefUsageCallData 80 4E 0000A2B0 SoftpubLoadMessage 81 4F 00009C80 SoftpubLoadSignature 82 50 0000D7F0 TrustDecode 83 51 000254E0 TrustFindIssuerCertificate 84 52 000256D0 TrustFreeDecode 85 53 00025700 TrustIsCertificateSelfSigned 86 54 00025780 TrustOpenStores 87 55 00005E00 WTGetSignatureInfo 88 56 00026160 WTHelperCertCheckValidSignature 11 57 00022E40 WTHelperCertFindIssuerCertificate 89 58 00022E80 WTHelperCertIsSelfSigned 90 59 00026180 WTHelperCheckCertUsage 91 5A 000262C0 WTHelperGetAgencyInfo 92 5B 000263A0 WTHelperGetFileHandle 93 5C 00025F30 WTHelperGetFileHash 94 5D 000263D0 WTHelperGetFileName 95 5E 00026460 WTHelperGetKnownUsages 96 5F 00006DF0 WTHelperGetProvCertFromChain 97 60 000154A0 WTHelperGetProvPrivateDataFromChain 98 61 0000DC00 WTHelperGetProvSignerFromChain 99 62 00026500 WTHelperIsChainedToMicrosoft 100 63 00026680 WTHelperIsChainedToMicrosoftFromStateData 101 64 00026750 WTHelperIsInRootStore 102 65 00026850 WTHelperOpenKnownStores 103 66 00014A80 WTHelperProvDataFromStateData 104 67 00017FC0 WVTAsn1CatMemberInfo2Decode 105 68 000040B0 WVTAsn1CatMemberInfo2Encode 106 69 000237E0 WVTAsn1CatMemberInfoDecode 107 6A 000238B0 WVTAsn1CatMemberInfoEncode 108 6B 00018070 WVTAsn1CatNameValueDecode 109 6C 00003D50 WVTAsn1CatNameValueEncode 110 6D 00023910 WVTAsn1IntentToSealAttributeDecode 111 6E 000239B0 WVTAsn1IntentToSealAttributeEncode 112 6F 000239F0 WVTAsn1SealingSignatureAttributeDecode 113 70 00023AD0 WVTAsn1SealingSignatureAttributeEncode 114 71 00023B90 WVTAsn1SealingTimestampAttributeDecode 115 72 00023C70 WVTAsn1SealingTimestampAttributeEncode 116 73 00023CD0 WVTAsn1SpcFinancialCriteriaInfoDecode 117 74 00023D80 WVTAsn1SpcFinancialCriteriaInfoEncode 118 75 00012670 WVTAsn1SpcIndirectDataContentDecode 119 76 00003DC0 WVTAsn1SpcIndirectDataContentEncode 120 77 00023DC0 WVTAsn1SpcLinkDecode 121 78 00004150 WVTAsn1SpcLinkEncode 122 79 00023EA0 WVTAsn1SpcMinimalCriteriaInfoDecode 123 7A 00023F50 WVTAsn1SpcMinimalCriteriaInfoEncode 124 7B 000134F0 WVTAsn1SpcPeImageDataDecode 125 7C 00012B40 WVTAsn1SpcPeImageDataEncode 126 7D 00005450 WVTAsn1SpcSigInfoDecode 127 7E 00004020 WVTAsn1SpcSigInfoEncode 128 7F 00023F80 WVTAsn1SpcSpAgencyInfoDecode 129 80 00024210 WVTAsn1SpcSpAgencyInfoEncode 130 81 00013220 WVTAsn1SpcSpOpusInfoDecode 131 82 00003F60 WVTAsn1SpcSpOpusInfoEncode 132 83 000243C0 WVTAsn1SpcStatementTypeDecode 133 84 00003EA0 WVTAsn1SpcStatementTypeEncode 134 85 000089C0 WinVerifyTrust 135 86 00026020 WinVerifyTrustEx 136 87 000244F0 WintrustAddActionID 137 88 000258C0 WintrustAddDefaultForUsage 138 89 0000C0B0 WintrustCertificateTrust 139 8A 00025B40 WintrustGetDefaultForUsage 140 8B 00024A60 WintrustGetRegPolicyFlags 141 8C 00018240 WintrustLoadFunctionPointers 142 8D 000246D0 WintrustRemoveActionID 143 8E 00029ED0 WintrustSetDefaultIncludePEPageHashes 144 8F 00024B00 WintrustSetRegPolicyFlags 145 90 0000B070 mscat32DllRegisterServer 146 91 0000B070 mscat32DllUnregisterServer 147 92 00029180 mssip32DllRegisterServer 148 93 000293A0 mssip32DllUnregisterServer Summary 1000 .data 1000 .didat 4000 .pdata 13000 .rdata 1000 .reloc 2000 .rsrc 37000 .text Microsoft (R) COFF/PE Dumper Version 14.36.32538.0 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file ws2_32.dll File Type: DLL Section contains the following exports for WS2_32.dll 00000000 characteristics 57490AC3 time date stamp Fri May 27 20:04:35 2016 0.00 version 1 ordinal base 500 number of functions 195 number of names ordinal hint RVA name 25 0 00001A60 FreeAddrInfoEx 26 1 00001A60 FreeAddrInfoExW 27 2 00014AA0 FreeAddrInfoW 28 3 00025250 GetAddrInfoExA 29 4 000167C0 GetAddrInfoExCancel 30 5 00014B20 GetAddrInfoExOverlappedResult 31 6 00013590 GetAddrInfoExW 32 7 00010350 GetAddrInfoW 33 8 00017B00 GetHostNameW 34 9 00012F20 GetNameInfoW 35 A 000179F0 InetNtopW 36 B 00024640 InetPtonW 37 C 00025430 SetAddrInfoExA 38 D 000255B0 SetAddrInfoExW 500 E 00018450 WEP 39 F 00037070 WPUCompleteOverlappedRequest 40 10 000173D0 WPUGetProviderPathEx 41 11 00014140 WSAAccept 42 12 00014560 WSAAddressToStringA 43 13 00012400 WSAAddressToStringW 44 14 00039A60 WSAAdvertiseProvider 102 15 00029E40 WSAAsyncGetHostByAddr 103 16 00029F70 WSAAsyncGetHostByName 105 17 0002A0C0 WSAAsyncGetProtoByName 104 18 0002A210 WSAAsyncGetProtoByNumber 107 19 0002A310 WSAAsyncGetServByName 106 1A 0002A470 WSAAsyncGetServByPort 101 1B 00015350 WSAAsyncSelect 108 1C 0002A580 WSACancelAsyncRequest 113 1D 000285E0 WSACancelBlockingCall 116 1E 000142E0 WSACleanup 45 1F 00001740 WSACloseEvent 46 20 00015E70 WSAConnect 47 21 00035880 WSAConnectByList 48 22 00036170 WSAConnectByNameA 49 23 000363B0 WSAConnectByNameW 50 24 00001790 WSACreateEvent 58 25 000292A0 WSADuplicateSocketA 59 26 00029330 WSADuplicateSocketW 60 27 000321E0 WSAEnumNameSpaceProvidersA 61 28 00032280 WSAEnumNameSpaceProvidersExA 62 29 00032320 WSAEnumNameSpaceProvidersExW 63 2A 00003FB0 WSAEnumNameSpaceProvidersW 64 2B 00011B60 WSAEnumNetworkEvents 65 2C 0003D8C0 WSAEnumProtocolsA 66 2D 00016950 WSAEnumProtocolsW 67 2E 00011970 WSAEventSelect 111 2F 00001730 WSAGetLastError 68 30 00014440 WSAGetOverlappedResult 69 31 00030E10 WSAGetQOSByName 70 32 000323C0 WSAGetServiceClassInfoA 71 33 000324B0 WSAGetServiceClassInfoW 72 34 00032640 WSAGetServiceClassNameByClassIdA 73 35 00032950 WSAGetServiceClassNameByClassIdW 74 36 000246D0 WSAHtonl 75 37 00024800 WSAHtons 76 38 00032C30 WSAInstallServiceClassA 77 39 00032CF0 WSAInstallServiceClassW 78 3A 000113F0 WSAIoctl 114 3B 00028670 WSAIsBlocking 79 3C 00036E00 WSAJoinLeaf 80 3D 00032E50 WSALookupServiceBeginA 81 3E 0000BB50 WSALookupServiceBeginW 82 3F 0000B720 WSALookupServiceEnd 83 40 00032F60 WSALookupServiceNextA 84 41 0000C9B0 WSALookupServiceNextW 85 42 00033180 WSANSPIoctl 86 43 00024920 WSANtohl 87 44 00024A50 WSANtohs 88 45 00033EE0 WSAPoll 89 46 00039C00 WSAProviderCompleteAsyncCall 90 47 00016AA0 WSAProviderConfigChange 91 48 0000FDE0 WSARecv 92 49 00031BC0 WSARecvDisconnect 93 4A 00017760 WSARecvFrom 94 4B 000332B0 WSARemoveServiceClass 95 4C 00016380 WSAResetEvent 96 4D 0000F6E0 WSASend 97 4E 000341C0 WSASendDisconnect 98 4F 00011CE0 WSASendMsg 99 50 00034290 WSASendTo 109 51 00028710 WSASetBlockingHook 100 52 00016A50 WSASetEvent 112 53 000025F0 WSASetLastError 117 54 00033410 WSASetServiceA 118 55 000334D0 WSASetServiceW 119 56 000168D0 WSASocketA 120 57 00010C50 WSASocketW 115 58 000035B0 WSAStartup 121 59 000150A0 WSAStringToAddressA 122 5A 00014CD0 WSAStringToAddressW 123 5B 00039DB0 WSAUnadvertiseProvider 110 5C 000287D0 WSAUnhookBlockingHook 124 5D 00001A50 WSAWaitForMultipleEvents 24 5E 00037340 WSApSetPostRoutine 125 5F 0003DD60 WSCDeinstallProvider 126 60 0003FCC0 WSCDeinstallProvider32 127 61 0003DD90 WSCDeinstallProviderEx 128 62 0003FED0 WSCEnableNSProvider 129 63 00040750 WSCEnableNSProvider32 130 64 000336A0 WSCEnumNameSpaceProviders32 131 65 000337F0 WSCEnumNameSpaceProvidersEx32 132 66 00002B30 WSCEnumProtocols 133 67 0003DA70 WSCEnumProtocols32 134 68 00003050 WSCEnumProtocolsEx 135 69 0003DFE0 WSCGetApplicationCategory 136 6A 0003E030 WSCGetApplicationCategoryEx 137 6B 0003E3A0 WSCGetProviderInfo 138 6C 0003FCF0 WSCGetProviderInfo32 139 6D 00017D40 WSCGetProviderPath 140 6E 0003DAA0 WSCGetProviderPath32 141 6F 00040040 WSCInstallNameSpace 142 70 000408B0 WSCInstallNameSpace32 143 71 00040090 WSCInstallNameSpaceEx 144 72 000400E0 WSCInstallNameSpaceEx2 145 73 00040900 WSCInstallNameSpaceEx32 146 74 0003E660 WSCInstallProvider 147 75 0003FD30 WSCInstallProvider64_32 148 76 0002D470 WSCInstallProviderAndChains64_32 149 77 0003E6B0 WSCInstallProviderEx 150 78 0003F0C0 WSCSetApplicationCategory 152 79 0003F120 WSCSetApplicationCategoryEx 153 7A 0003F5C0 WSCSetProviderInfo 154 7B 0003FD80 WSCSetProviderInfo32 155 7C 00040390 WSCUnInstallNameSpace 156 7D 00040950 WSCUnInstallNameSpace32 157 7E 000403C0 WSCUnInstallNameSpaceEx2 158 7F 0003F850 WSCUpdateProvider 159 80 0003FDC0 WSCUpdateProvider32 160 81 0003F890 WSCUpdateProviderEx 161 82 00040570 WSCWriteNameSpaceOrder 162 83 00040980 WSCWriteNameSpaceOrder32 163 84 0003FA70 WSCWriteProviderOrder 164 85 0003FE00 WSCWriteProviderOrder32 165 86 0003FAA0 WSCWriteProviderOrderEx 166 87 00002810 WahCloseApcHelper 167 88 0003C150 WahCloseHandleHelper 168 89 0003CD20 WahCloseNotificationHandleHelper 169 8A 0003C1A0 WahCloseSocketHandle 170 8B 00012B50 WahCloseThread 171 8C 0003C210 WahCompleteRequest 172 8D 000032D0 WahCreateHandleContextTable 173 8E 00016D30 WahCreateNotificationHandle 174 8F 0003C300 WahCreateSocketHandle 175 90 00015E00 WahDestroyHandleContextTable 176 91 0003C4F0 WahDisableNonIFSHandleSupport 177 92 0003C5E0 WahEnableNonIFSHandleSupport 178 93 00001960 WahEnumerateHandleContexts 179 94 00015690 WahInsertHandleContext 180 95 0003CD60 WahNotifyAllProcesses 181 96 00003570 WahOpenApcHelper 182 97 00012AC0 WahOpenCurrentThread 183 98 0003C7D0 WahOpenHandleHelper 184 99 00016A60 WahOpenNotificationHandleHelper 185 9A 0003B8B0 WahQueueUserApc 186 9B 00001300 WahReferenceContextByHandle 187 9C 00001380 WahRemoveHandleContext 188 9D 00016C00 WahWaitForNotification 189 9E 0003CFA0 WahWriteLSPEvent 151 9F 00001030 __WSAFDIsSet 1 A0 000142C0 accept 2 A1 00012130 bind 3 A2 0000F2B0 closesocket 4 A3 00011E50 connect 190 A4 00014AA0 freeaddrinfo 191 A5 00012BC0 getaddrinfo 51 A6 0002A620 gethostbyaddr 52 A7 0002A7E0 gethostbyname 57 A8 0002A9B0 gethostname 192 A9 000130D0 getnameinfo 5 AA 000149C0 getpeername 53 AB 000297C0 getprotobyname 54 AC 00029930 getprotobynumber 55 AD 0002AB80 getservbyname 56 AE 0002ADA0 getservbyport 6 AF 00012660 getsockname 7 B0 00001170 getsockopt 8 B1 00001700 htonl 9 B2 00001770 htons 11 B3 00002100 inet_addr 12 B4 00001CF0 inet_ntoa 193 B5 00024B70 inet_ntop 194 B6 00024BF0 inet_pton 10 B7 000116B0 ioctlsocket 13 B8 00014FF0 listen 14 B9 00001700 ntohl 15 BA 00001770 ntohs 16 BB 0000F940 recv 17 BC 00015F80 recvfrom 18 BD 00010040 select 19 BE 0000F4B0 send 20 BF 00012280 sendto 21 C0 0000FBA0 setsockopt 22 C1 00013280 shutdown 23 C2 00010B00 socket Summary 1000 .data 1000 .didat 4000 .pdata D000 .rdata 1000 .reloc 11000 .rsrc 43000 .text