filenamekernel32.dll
size1038336 (0xfd800)
md51d9a52e6ec83701464959078868295d4
typePE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
10418
9340353
9240351
1540355
954035251
9640354
9440351
9040351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x49c51f0a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.10
SizeOfCode0x89c00
SizeOfInitializedData0x75a00
SizeOfUninitializedData0
AddressOfEntryPoint0x246b6
BaseOfCode0x1000
BaseOfData0x87000
ImageBase0x77e40000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion5.2
SubsystemVersion4.0
Reserved10
SizeOfImage0x102000
SizeOfHeaders0x400
CheckSum0x101b44
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x89a010x89c00R-X CODE
.data0x8b0000x47400x2600RW- IDATA
.rsrc0x900000x6a6c80x6a800R-- IDATA
.reloc0xfb0000x691c0x6a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x80cf80x7078
IMPORT0x87d700x28
RESOURCE0x900000x6a6c8
EXCEPTION00
SECURITY00
BASERELOC0xfb0000x691c
DEBUG0x8a9a00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x4cb680x40
Bound_IAT00
IAT0x10000x688
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#112520
STRING#29540
STRING#310160
STRING#48280
STRING#58900
STRING#66220
STRING#77140
STRING#86660
STRING#98840
STRING#108120
STRING#117660
STRING#128280
STRING#1311060
STRING#149920
STRING#159640
STRING#1610560
STRING#174700
STRING#191420
STRING#2012980
STRING#219820
STRING#2210660
STRING#231600
STRING#28920
STRING#321060
STRING#45800
STRING#461040
STRING#47860
STRING#49780
STRING#545580
STRING#554580
STRING#592000
STRING#601800
STRING#659640
STRING#666860
STRING#676120
STRING#683020
STRING#693720
STRING#701680
STRING#71620
STRING#7210260
STRING#794980
STRING#86820
STRING#1294480
STRING#1303500
STRING#131860
STRING#1321180
STRING#133860
STRING#1934460
STRING#194820
STRING#2574220
STRING#3214740
STRING#3852520
STRING#4492440
STRING#5131760
STRING#5771840
STRING#6265780
STRING#6271720
STRING#630840
STRING#6311280
STRING#6411560
STRING#7052100
STRING#7691840
STRING#8332160
STRING#8971260
STRING#946640
STRING#9611340
STRING#10251220
STRING#1089980
STRING#1153860
STRING#1217900
STRING#12272000
STRING#12513300
STRING#12572580
STRING#1258700
STRING#12671380
STRING#12684660
STRING#12691920
STRING#12772100
STRING#1281980
STRING#13031660
STRING#13051480
STRING#13061160
STRING#1307940
STRING#13081460
STRING#13091800
STRING#13151980
STRING#1328680
STRING#1367900
STRING#1551600
STRING#1787900
STRING#17886560
STRING#24131240
STRING#31393340
STRING#31402380
STRING#31846760
STRING#3246780
STRING#32472080
STRING#33091100
STRING#34341060
STRING#35633420
STRING#35642680
STRING#4063960
MESSAGETABLE#13920120
VERSION#19280
idlangstring
01033Language Neutral$$$$$$Default
11033$$Western Europe and United States
21033$$Central Europe$$Antigua and Barbuda$Antigua and Barbuda
31033$$Baltic$$Afghanistan$Islamic State of Afghanistan
41033$$Greek$$Algeria$Democratic and Popular Republic of Algeria
51033$$Cyrillic$$Azerbaijan$Azerbaijani Republic
61033$$Turkic$$Albania$Republic of Albania
71033$$Japanese$$Armenia$Republic of Armenia
81033$$Korean$$Andorra$Principality of Andorra
91033$$Traditional Chinese$$Angola$Republic of Angola
101033$$Simplified Chinese$$American Samoa
111033$$Thai$$Argentina$Argentine Republic
121033$$Hebrew$$Australia$Commonwealth of Australia
131033$$Arabic
141033$$Vietnamese$$Austria$Republic of Austria
151033$$Indic
161033$$Georgian
171033$$Armenian$$Bahrain$State of Bahrain
181033$$$$Barbados$Barbados
191033$$$$Botswana$Republic of Botswana
201033$$$$Bermuda
211033$$$$Belgium$Kingdom of Belgium
221033$$$$Bahamas, The$Commonwealth of The Bahamas
231033$$$$Bangladesh$People’s Republic of Bangladesh
241033$$$$Belize$Belize
251033$$$$Bosnia and Herzegovina$Republic of Bosnia and Herzegovina
261033$$$$Bolivia$Republic of Bolivia
271033$$$$Myanmar$Union of Myanmar
281033$$$$Benin$Republic of Benin
291033$$$$Belarus$Republic of Belarus
301033$$$$Solomon Islands$Solomon Islands
321033$$$$Brazil$Federative Republic of Brazil
341033$$$$Bhutan$Kingdom of Bhutan
351033$$$$Bulgaria$Republic of Bulgaria
371033$$$37 (IBM EBCDIC - U.S./Canada)$Brunei$Negara Brunei Darussalam (Nation of Brunei, Abode of Peace)
381033$$$$Burundi$Republic of Burundi
391033$$$$Canada$Canada
401033$$$$Cambodia
411033$$$$Chad$Republic of Chad
421033$$$$Sri Lanka$Democratic Socialist Republic of Sri Lanka
431033$$$$Congo$Republic of the Congo
441033$$$$Congo (DRC)$Democratic Republic of the Congo (DRC)
451033$$$$China$People’s Republic of China
461033$$$$Chile$Republic of Chile
491033$$$$Cameroon$Republic of Cameroon
501033$$$$Comoros$Federal Islamic Republic of the Comoros
511033$$$$Colombia$Republic of Colombia
541033$$$$Costa Rica$Republic of Costa Rica
551033$$$$Central African Republic$Central African Republic
561033$$$$Cuba$Republic of Cuba
571033$$$$Cape Verde$Republic of Cape Verde
591033$$$$Cyprus$Republic of Cyprus
611033$$$$Denmark$Kingdom of Denmark
621033$$$$Djibouti$Republic of Djibouti
631033$$$$Dominica$Commonwealth of Dominica
651033$$$$Dominican Republic$Dominican Republic
661033$$$$Ecuador$Republic of Ecuador
671033$$$$Egypt$Arab Republic of Egypt
681033$$$$Ireland$Ireland
691033$$$$Equatorial Guinea$Republic of Equatorial Guinea
701033$$$$Estonia$Republic of Estonia
711033$$$$Eritrea$State of Eritrea
721033$$$$El Salvador$Republic of El Salvador
731033$$$$Ethiopia$Federal Democratic Republic of Ethiopia
751033$$$$Czech Republic$Czech Republic
771033$$$$Finland$Republic of Finland
781033$$$$Fiji Islands$Republic of Fiji Islands
801033$$$$Micronesia$Federated States of Micronesia
811033$$$$Faroe Islands
841033$$$$France$French Republic
861033$$$$Gambia, The$Republic of The Gambia
871033$$$$Gabon$Gabonese Republic
881033$$$$Georgia$Republic of Georgia
891033$$$$Ghana$Republic of Ghana
901033$$$$Gibraltar
911033$$$$Grenada$Grenada
931033$$$$Greenland
941033$$$$Germany$Federal Republic of Germany
981033$$$$Greece$Hellenic Republic
991033$$$$Guatemala$Republic of Guatemala
1001033$$$$Guinea$Republic of Guinea
1011033$$$$Guyana$Cooperative Republic of Guyana
1031033$$$$Haiti$Republic of Haiti
1041033$$$$Hong Kong S.A.R.
1061033$$$$Honduras$Republic of Honduras
1081033$$$$Croatia$Republic of Croatia
1091033$$$$Hungary$Republic of Hungary
1101033$$$$Iceland$Republic of Iceland
1111033$$$$Indonesia$Republic of Indonesia
1131033$$$$India$Republic of India
1141033$$$$British Indian Ocean Territory
1161033$$$$Iran$Islamic Republic of Iran
1171033$$$$Israel$State of Israel
1181033$$$$Italy$Italian Republic
1191033$$$$Côte d’Ivoire$Republic of Côte d’Ivoire
1211033$$$$Iraq$Republic of Iraq
1221033$$$$Japan$Japan
1241033$$$$Jamaica$Jamaica
1251033$$$$Jan Mayen
1261033$$$$Jordan$Hashemite Kingdom of Jordan
1271033$$$$Johnston Atoll
1291033$$$$Kenya$Republic of Kenya
1301033$$$$Kyrgyzstan$Kyrgyz Republic
1311033$$$$North Korea$Democratic People’s Republic of Korea
1331033$$$$Kiribati$Republic of Kiribati
1341033$$$$Korea$Republic of Korea
1361033$$$$Kuwait$State of Kuwait
1371033$$$$Kazakhstan$Republic of Kazakhstan
1381033$$$$Laos$Lao People’s Democratic Republic
1391033$$$$Lebanon$Lebanese Republic
1401033$$$$Latvia$Republic of Latvia
1411033$$$$Lithuania$Republic of Lithuania
1421033$$$$Liberia$Republic of Liberia
1431033$$$$Slovakia$Slovak Republic
1451033$$$$Liechtenstein$Principality of Liechtenstein
1461033$$$$Lesotho$Kingdom of Lesotho
1471033$$$$Luxembourg$Grand Duchy of Luxembourg
1481033$$$$Libya$Socialist People’s Libyan Arab Jamahiriya
1491033$$$$Madagascar$Republic of Madagascar
1511033$$$$Macau S.A.R.
1521033$$$$Moldova$Republic of Moldova
1541033$$$$Mongolia$Mongolia
1561033$$$$Malawi$Republic of Malawi
1571033$$$$Mali$Republic of Mali
1581033$$$$Monaco$Principality of Monaco
1591033$$$$Morocco$Kingdom of Morocco
1601033$$$$Mauritius$Republic of Mauritius
1621033$$$$Mauritania$Islamic Republic of Mauritania
1631033$$$$Malta$Republic of Malta
1641033$$$$Oman$Sultanate of Oman
1651033$$$$Maldives$Republic of Maldives
1661033$$$$Mexico$United Mexican States
1671033$$$$Malaysia$Federation of Malaysia
1681033$$$$Mozambique$Republic of Mozambique
1731033$$$$Niger$Republic of Niger
1741033$$$$Vanuatu$Republic of Vanuatu
1751033$$$$Nigeria$Federal Republic of Nigeria
1761033$$$$Netherlands, The$Kingdom of the Netherlands
1771033$$$$Norway$Kingdom of Norway
1781033$$$$Nepal$Kingdom of Nepal
1801033$$$$Nauru$Republic of Nauru
1811033$$$$Suriname$Republic of Suriname
1821033$$$$Nicaragua$Republic of Nicaragua
1831033$$$$New Zealand$New Zealand
1841033$$$$Palestinian Authority$Palestinian Authority
1851033$$$$Paraguay$Republic of Paraguay
1871033$$$$Peru$Republic of Peru
1901033$$$$Pakistan$Islamic Republic of Pakistan
1911033$$$$Poland$Republic of Poland
1921033$$$$Panama$Republic of Panama
1931033$$$$Portugal$Portuguese Republic
1941033$$$$Papua New Guinea$Independent State of Papua New Guinea
1951033$$$$Palau$Republic of Palau
1961033$$$$Guinea-Bissau$Republic of Guinea-Bissau
1971033$$$$Qatar$State of Qatar
1981033$$$$Reunion
1991033$$$$Marshall Islands$Republic of the Marshall Islands
2001033$$$$Romania$Romania
2011033$$$$Philippines$Republic of the Philippines
2021033$$$$Puerto Rico
2031033$$$$Russia$Russian Federation
2041033$$$$Rwanda$Rwandese Republic
2051033$$$$Saudi Arabia$Kingdom of Saudi Arabia
2061033$$$$St. Pierre and Miquelon
2071033$$$$St. Kitts and Nevis$Federation of Saint Kitts and Nevis
2081033$$$$Seychelles$Republic of Seychelles
2091033$$$$South Africa$Republic of South Africa
2101033$$$$Senegal$Republic of Senegal
2121033$$$$Slovenia$Republic of Slovenia
2131033$$$$Sierra Leone$Republic of Sierra Leone
2141033$$$$San Marino$Republic of San Marino
2151033$$$$Singapore$Republic of Singapore
2161033$$$$Somalia$Somali Democratic Republic
2171033$$$$Spain$Kingdom of Spain
2181033$$$$St. Lucia$Saint Lucia
2191033$$$$Sudan$Republic of the Sudan
2201033$$$$Svalbard
2211033$$$$Sweden$Kingdom of Sweden
2221033$$$$Syria$Syrian Arab Republic
2231033$$$$Switzerland$Swiss Confederation
2241033$$$$United Arab Emirates$United Arab Emirates
2251033$$$$Trinidad and Tobago$Republic of Trinidad and Tobago
2271033$$$$Thailand$Kingdom of Thailand
2281033$$$$Tajikistan$Republic of Tajikistan
2311033$$$$Tonga$Kingdom of Tonga
2321033$$$$Togo$Togolese Republic
2331033$$$$São Tomé and Príncipe$Democratic Republic of São Tomé and Príncipe
2341033$$$$Tunisia$Republic of Tunisia
2351033$$$$Turkey$Republic of Turkey
2361033$$$$Tuvalu$Tuvalu
2371033$$$$Taiwan$Taiwan
2381033$$$$Turkmenistan$Republic of Turkmenistan
2391033$$$$Tanzania$United Republic of Tanzania
2401033$$$$Uganda$Republic of Uganda
2411033$$$$Ukraine$Ukraine
2421033$$$$United Kingdom$United Kingdom of Great Britain and Northern Ireland
2441033$$$$United States$United States of America
2451033$$$$Burkina Faso$Burkina Faso
2461033$$$$Uruguay$Oriental Republic of Uruguay
2471033$$$$Uzbekistan$Republic of Uzbekistan
2481033$$$$St. Vincent and the Grenadines$Saint Vincent and the Grenadines
2491033$$$$Venezuela$Bolivarian Republic of Venezuela
2511033$$$$Vietnam$Socialist Republic of Vietnam
2521033$$$$Virgin Islands
2531033$$$$Vatican City$State of the Vatican City
2541033$$$$Namibia$Republic of Namibia
2581033$$$$Wake Island
2591033$$$$Samoa$Independent State of Samoa
2601033$$$$Swaziland$Kingdom of Swaziland
2611033$$$$Yemen$Republic of Yemen
2631033$$$$Zambia$Republic of Zambia
2641033$$$$Zimbabwe$Republic of Zimbabwe
2691033$$$$Yugoslavia$Federal Republic of Yugoslavia
3001033$$$$Anguilla
3011033$$$$Antarctica
3021033$$$$Aruba
3031033$$$$Ascension Island
3041033$$$$Ashmore and Cartier Islands$Territory of Ashmore and Cartier Islands
3051033$$$$Baker Island
3061033$$$$Bouvet Island
3071033$$$$Cayman Islands
3081033$$$$Channel Islands
3091033$$$$Christmas Island$Territory of Christmas Island
3101033$$$$Clipperton Island
3111033$$$$Cocos (Keeling) Islands$Territory of Cocos (Keeling) Islands
3121033$$$$Cook Islands
3131033$$$$Coral Sea Islands$Coral Sea Islands Territory
3141033$$$$Diego Garcia
3151033$$$$Falkland Islands (Islas Malvinas)$Falkland Islands (Islas Malvinas)
3161033$$$$France, Metropolitan
3171033$$$$French Guiana$Department of Guiana
3181033$$$$French Polynesia$Territory of French Polynesia
3191033$$$$French Southern and Antarctic Lands$Territory of the French Southern and Antarctic Lands
3211033$$$$Guadeloupe$Department of Guadeloupe
3221033$$$$Guam$Territory of Guam
3231033$$$$Guantanamo Bay
3241033$$$$Guernsey$Balliwick of Guernsey
3251033$$$$Heard Island and McDonald Islands$Territory of Heard Island and McDonald Islands
3261033$$$$Howland Island
3271033$$$$Jarvis Island
3281033$$$$Jersey$Balliwick of Jersey
3291033$$$$Kingman Reef
3301033$$$$Martinique$Department of Martinique
3311033$$$$Mayotte$Territorial Collectivity of Mayotte
3321033$$$$Montserrat
3331033$$$$Netherlands Antilles
3341033$$$$New Caledonia$Territory of New Caledonia and Dependencies
3351033$$$$Niue
3361033$$$$Norfolk Island$Territory of Norfolk Island
3371033$$$$Northern Mariana Islands$Commonwealth of the Northern Mariana Islands
3381033$$$$Palmyra Atoll
3391033$$$$Pitcairn Islands$Pitcairn, Henderson, Ducie, and Oeno Islands
3401033$$$$Rota Island
3411033$$$$Saipan
3421033$$$$South Georgia and the South Sandwich Islands$South Georgia and the South Sandwich Islands
3431033$$$$St. Helena$Saint Helena
3461033$$$$Tinian Island
3471033$$$$Tokelau
3481033$$$$Tristan da Cunha
3491033$$$$Turks and Caicos Islands
3501033$$$$U.S. Minor Outlying Islands$United States Minor Outlying Islands
3511033$$$$Virgin Islands, British
3521033$$$$Wallis and Futuna$Territory of the Wallis and Futuna Islands
4371033$$$437 (OEM - United States)
5001033$$$500 (IBM EBCDIC - International)
7081033$$$708 (Arabic - ASMO)
7201033$$$720 (Arabic - Transparent ASMO)
7371033$$$737 (OEM - Greek 437G)
7751033$$$775 (OEM - Baltic)
8501033$$$850 (OEM - Multilingual Latin I)
8521033$$$852 (OEM - Latin II)
8551033$$$855 (OEM - Cyrillic)
8571033$$$857 (OEM - Turkish)
8581033$$$858 (OEM - Multilingual Latin I + Euro)
8601033$$$860 (OEM - Portuguese)
8611033$$$861 (OEM - Icelandic)
8621033$$$862 (OEM - Hebrew)
8631033$$$863 (OEM - Canadian French)
8641033$$$864 (OEM - Arabic)
8651033$$$865 (OEM - Nordic)
8661033$$$866 (OEM - Russian)
8691033$$$869 (OEM - Modern Greek)
8701033$$$870 (IBM EBCDIC - Multilingual/ROECE (Latin-2))
8741033$$$874 (ANSI/OEM - Thai)
8751033$$$875 (IBM EBCDIC - Modern Greek)
9321033$$$932 (ANSI/OEM - Japanese Shift-JIS)
9361033$$$936 (ANSI/OEM - Simplified Chinese GBK)
9491033$$$949 (ANSI/OEM - Korean)
9501033$$$950 (ANSI/OEM - Traditional Chinese Big5)
10241033Process Default Language
10251033Arabic (Saudi Arabia)$Saudi Arabia
10261033Bulgarian$Bulgaria$$1026 (IBM EBCDIC - Turkish (Latin-5))
10271033Catalan$Spain
10281033Chinese (Taiwan)$Taiwan$$$$$Stroke Count$$$Bopomofo
10291033Czech$Czech Republic
10301033Danish$Denmark
10311033German (Germany)$Germany$$$$$Dictionary$Phone Book (DIN)
10321033Greek$Greece
10331033English (United States)$United States
10341033Spanish (Traditional Sort)$Spain$$$$$Traditional
10351033Finnish$Finland
10361033French (France)$France
10371033Hebrew$Israel
10381033Hungarian$Hungary$$$$$$Technical
10391033Icelandic$Iceland
10401033Italian (Italy)$Italy
10411033Japanese$Japan$$$$$XJIS
10421033Korean$Korea$$$$$Dictionary
10431033Dutch (Netherlands)$Netherlands
10441033Norwegian (Bokmal)$Norway
10451033Polish$Poland
10461033Portuguese (Brazil)$Brazil
10471033$$$1047 (IBM EBCDIC - Latin-1/Open System)
10481033Romanian$Romania
10491033Russian$Russia
10501033Croatian$Croatia
10511033Slovak$Slovakia
10521033Albanian$Albania
10531033Swedish$Sweden
10541033Thai$Thailand
10551033Turkish$Turkey
10561033Urdu$Islamic Republic of Pakistan
10571033Indonesian$Indonesia
10581033Ukrainian$Ukraine
10591033Belarusian$Belarus
10601033Slovenian$Slovenia
10611033Estonian$Estonia
10621033Latvian$Latvia
10631033Lithuanian$Lithuania
10651033Farsi$Iran
10661033Vietnamese$Viet Nam
10671033Armenian$Armenia
10681033Azeri (Latin)$Azerbaijan
10691033Basque$Spain
10711033FYRO Macedonian$Former Yugoslav Republic of Macedonia
10781033Afrikaans$South Africa
10791033Georgian$Georgia$$$$$Traditional$Modern
10801033Faroese$Faroe Islands
10811033Hindi$India
10861033Malay (Malaysia)$Malaysia
10871033Kazakh$Kazakhstan
10881033Kyrgyz (Cyrillic)$Kyrgyzstan
10891033Swahili$Kenya
10911033Uzbek (Latin)$Uzbekistan
10921033Tatar$Tatarstan
10941033Punjabi$India
10951033Gujarati$India
10971033Tamil$India
10981033Telugu$India
10991033Kannada$India
11021033Marathi$India
11031033Sanskrit$India
11041033Mongolian (Cyrillic)$Mongolia
11101033Galician$Spain
11111033Konkani$India
11141033Syriac$Syria
11251033Divehi$Maldives
11401033$$$1140 (IBM EBCDIC - U.S./Canada (37 + Euro))
11411033$$$1141 (IBM EBCDIC - Germany (20273 + Euro))
11421033$$$1142 (IBM EBCDIC - Denmark/Norway (20277 + Euro))
11431033$$$1143 (IBM EBCDIC - Finland/Sweden (20278 + Euro))
11441033$$$1144 (IBM EBCDIC - Italy (20280 + Euro))
11451033$$$1145 (IBM EBCDIC - Latin America/Spain (20284 + Euro))
11461033$$$1146 (IBM EBCDIC - United Kingdom (20285 + Euro))
11471033$$$1147 (IBM EBCDIC - France (20297 + Euro))
11481033$$$1148 (IBM EBCDIC - International (500 + Euro))
11491033$$$1149 (IBM EBCDIC - Icelandic (20871 + Euro))
12501033$$$1250 (ANSI - Central Europe)
12511033$$$1251 (ANSI - Cyrillic)
12521033$$$1252 (ANSI - Latin I)
12531033$$$1253 (ANSI - Greek)
12541033$$$1254 (ANSI - Turkish)
12551033$$$1255 (ANSI - Hebrew)
12561033$$$1256 (ANSI - Arabic)
12571033$$$1257 (ANSI - Baltic)
12581033$$$1258 (ANSI/OEM - Viet Nam)
13611033$$$1361 (Korean - Johab)
20491033Arabic (Iraq)$Iraq
20521033Chinese (PRC)$People's Republic of China$$$$$Pronunciation$$Stroke Count
20551033German (Switzerland)$Switzerland
20571033English (United Kingdom)$United Kingdom
20581033Spanish (Mexico)$Mexico
20601033French (Belgium)$Belgium
20641033Italian (Switzerland)$Switzerland
20671033Dutch (Belgium)$Belgium
20681033Norwegian (Nynorsk)$Norway
20701033Portuguese (Portugal)$Portugal
20741033Serbian (Latin)$Serbia
20771033Swedish (Finland)$Finland
20921033Azeri (Cyrillic)$Azerbaijan
21101033Malay (Brunei Darussalam)$Brunei Darussalam
21151033Uzbek (Cyrillic)$Uzbekistan
30731033Arabic (Egypt)$Egypt
30761033Chinese (Hong Kong S.A.R.)$Hong Kong S.A.R.$$$$$Stroke Count
30791033German (Austria)$Austria
30811033English (Australia)$Australia
30821033Spanish (International Sort)$Spain$$$$$International
30841033French (Canada)$Canada
30981033Serbian (Cyrillic)$Serbia
40971033Arabic (Libya)$Libya
41001033Chinese (Singapore)$Singapore$$$$$Pronunciation$$Stroke Count
41031033German (Luxembourg)$Luxembourg
41051033English (Canada)$Canada
41061033Spanish (Guatemala)$Guatemala
41081033French (Switzerland)$Switzerland
51211033Arabic (Algeria)$Algeria
51241033Chinese (Macau S.A.R.)$Macau S.A.R.$$$$$Pronunciation$$Stroke Count
51271033German (Liechtenstein)$Liechtenstein
51291033English (New Zealand)$New Zealand
51301033Spanish (Costa Rica)$Costa Rica
51321033French (Luxembourg)$Luxembourg
61451033Arabic (Morocco)$Morocco
61531033English (Ireland)$Ireland
61541033Spanish (Panama)$Panama
61561033French (Monaco)$Principality of Monaco
71691033Arabic (Tunisia)$Tunisia
71771033English (South Africa)$South Africa
71781033Spanish (Dominican Republic)$Dominican Republic
81931033Arabic (Oman)$Oman
82011033English (Jamaica)$Jamaica
82021033Spanish (Venezuela)$Venezuela
92171033Arabic (Yemen)$Yemen
92251033English (Caribbean)$Caribbean
92261033Spanish (Colombia)$Colombia
100001033$$$10000 (MAC - Roman)
100011033$$$10001 (MAC - Japanese)
100021033$$$10002 (MAC - Traditional Chinese Big5)
100031033$$$10003 (MAC - Korean)
100041033$$$10004 (MAC - Arabic)
100051033$$$10005 (MAC - Hebrew)
100061033$$$10006 (MAC - Greek I)
100071033$$$10007 (MAC - Cyrillic)
100081033$$$10008 (MAC - Simplified Chinese GB 2312)
100101033$$$10010 (MAC - Romania)
100171033$$$10017 (MAC - Ukraine)
100211033$$$10021 (MAC - Thai)
100291033$$$10029 (MAC - Latin II)
100791033$$$10079 (MAC - Icelandic)
100811033$$$10081 (MAC - Turkish)
100821033$$$10082 (MAC - Croatia)
102411033Arabic (Syria)$Syria
102491033English (Belize)$Belize
102501033Spanish (Peru)$Peru
112651033Arabic (Jordan)$Jordan
112731033English (Trinidad)$Trinidad and Tobago
112741033Spanish (Argentina)$Argentina
122891033Arabic (Lebanon)$Lebanon
122971033English (Zimbabwe)$Zimbabwe
122981033Spanish (Ecuador)$Ecuador
133131033Arabic (Kuwait)$Kuwait
133211033English (Philippines)$Republic of the Philippines
133221033Spanish (Chile)$Chile
143371033Arabic (U.A.E.)$U.A.E.
143461033Spanish (Uruguay)$Uruguay
151261033$$$$Man, Isle of
153611033Arabic (Bahrain)$Bahrain
153701033Spanish (Paraguay)$Paraguay
163851033Arabic (Qatar)$Qatar
163941033Spanish (Bolivia)$Bolivia
174181033Spanish (El Salvador)$El Salvador
184421033Spanish (Honduras)$Honduras
194661033Spanish (Nicaragua)$Nicaragua
196181033$$$$Macedonia, Former Yugoslav Republic of$The Former Yugoslav Republic of Macedonia
200001033$$$20000 (CNS - Taiwan)
200011033$$$20001 (TCA - Taiwan)
200021033$$$20002 (Eten - Taiwan)
200031033$$$20003 (IBM5550 - Taiwan)
200041033$$$20004 (TeleText - Taiwan)
200051033$$$20005 (Wang - Taiwan)
201051033$$$20105 (IA5 IRV International Alphabet No.5)
201061033$$$20106 (IA5 German)
201071033$$$20107 (IA5 Swedish)
201081033$$$20108 (IA5 Norwegian)
201271033$$$20127 (US-ASCII)
202611033$$$20261 (T.61)
202691033$$$20269 (ISO 6937 Non-Spacing Accent)
202731033$$$20273 (IBM EBCDIC - Germany)
202771033$$$20277 (IBM EBCDIC - Denmark/Norway)
202781033$$$20278 (IBM EBCDIC - Finland/Sweden)
202801033$$$20280 (IBM EBCDIC - Italy)
202841033$$$20284 (IBM EBCDIC - Latin America/Spain)
202851033$$$20285 (IBM EBCDIC - United Kingdom)
202901033$$$20290 (IBM EBCDIC - Japanese Katakana Extended)
202971033$$$20297 (IBM EBCDIC - France)
204201033$$$20420 (IBM EBCDIC - Arabic)
204231033$$$20423 (IBM EBCDIC - Greek)
204241033$$$20424 (IBM EBCDIC - Hebrew)
204901033Spanish (Puerto Rico)$Puerto Rico
208331033$$$20833 (IBM EBCDIC - Korean Extended)
208381033$$$20838 (IBM EBCDIC - Thai)
208661033$$$20866 (Russian - KOI8)
208711033$$$20871 (IBM EBCDIC - Icelandic)
208801033$$$20880 (IBM EBCDIC - Cyrillic (Russian))
209051033$$$20905 (IBM EBCDIC - Turkish)
209241033$$$20924 (IBM EBCDIC - Latin-1/Open System (1047 + Euro))
209321033$$$20932 (JIS X 0208-1990 & 0212-1990)
209361033$$$20936 (Simplified Chinese GB2312)
210251033$$$21025 (IBM EBCDIC - Cyrillic (Serbian, Bulgarian))
210271033$$$21027 (Ext Alpha Lowercase)
212421033$$$$Midway Islands
218661033$$$21866 (Ukrainian - KOI8-U)
248071033$$$$East Timor
285911033$$$28591 (ISO 8859-1 Latin I)
285921033$$$28592 (ISO 8859-2 Central Europe)
285931033$$$28593 (ISO 8859-3 Latin 3)
285941033$$$28594 (ISO 8859-4 Baltic)
285951033$$$28595 (ISO 8859-5 Cyrillic)
285961033$$$28596 (ISO 8859-6 Arabic)
285971033$$$28597 (ISO 8859-7 Greek)
285981033$$$28598 (ISO 8859-8 Hebrew: Visual Ordering)
285991033$$$28599 (ISO 8859-9 Latin 5)
286031033$$$28603 (ISO 8859-13 Latin 7)
286051033$$$28605 (ISO 8859-15 Latin 9)
385981033$$$38598 (ISO 8859-8 Hebrew: Logical Ordering)
502201033$$$50220 (ISO-2022 Japanese with no halfwidth Katakana)
502211033$$$50221 (ISO-2022 Japanese with halfwidth Katakana)
502221033$$$50222 (ISO-2022 Japanese JIS X 0201-1989)
502251033$$$50225 (ISO-2022 Korean)
502271033$$$50227 (ISO-2022 Simplified Chinese)
502291033$$$50229 (ISO-2022 Traditional Chinese)
509301033$$$50930 (IBM EBCDIC - Japanese (Katakana) Extended and Japanese)
509311033$$$50931 (IBM EBCDIC - US/Canada and Japanese)
509331033$$$50933 (IBM EBCDIC - Korean Extended and Korean)
509351033$$$50935 (IBM EBCDIC - Simplified Chinese)
509371033$$$50937 (IBM EBCDIC - US/Canada and Traditional Chinese)
509391033$$$50939 (IBM EBCDIC - Japanese (Latin) Extended and Japanese)
519321033$$$51932 (EUC-Japanese)
519361033$$$51936 (EUC-Simplified Chinese)
519491033$$$51949 (EUC-Korean)
519501033$$$51950 (EUC-Traditional Chinese)
529361033$$$52936 (HZ-GB2312 Simplified Chinese)
549361033$$$54936 (GB18030 Simplified Chinese)
570021033$$$57002 (ISCII - Devanagari)
570031033$$$57003 (ISCII - Bengali)
570041033$$$57004 (ISCII - Tamil)
570051033$$$57005 (ISCII - Telugu)
570061033$$$57006 (ISCII - Assamese)
570071033$$$57007 (ISCII - Oriya)
570081033$$$57008 (ISCII - Kannada)
570091033$$$57009 (ISCII - Malayalam)
570101033$$$57010 (ISCII - Gujarati)
570111033$$$57011 (ISCII - Punjabi (Gurmukhi))
650001033$$$65000 (UTF-7)
650011033$$$65001 (UTF-8)
module_namehintordfunction_name
ntdll.dll207NtFsControlFile
ntdll.dll156NtCreateFile
ntdll.dll1314_wcsnicmp
ntdll.dll452RtlAllocateHeap
ntdll.dll632RtlFreeHeap
ntdll.dll243NtOpenFile
ntdll.dll280NtQueryInformationFile
ntdll.dll276NtQueryEaFile
ntdll.dll752RtlLengthSecurityDescriptor
ntdll.dll299NtQuerySecurityObject
ntdll.dll351NtSetEaFile
ntdll.dll370NtSetSecurityObject
ntdll.dll357NtSetInformationFile
ntdll.dll6CsrClientCallServer
ntdll.dll144NtClose
ntdll.dll188NtDeviceIoControlFile
ntdll.dll689RtlInitUnicodeString
ntdll.dll78LdrAddRefDll
ntdll.dll1389wcslen
ntdll.dll308NtQueryValueKey
ntdll.dll246NtOpenKey
ntdll.dll202NtFlushKey
ntdll.dll380NtSetValueKey
ntdll.dll160NtCreateKey
ntdll.dll1294_memicmp
ntdll.dll1352memmove
ntdll.dll1388wcscspn
ntdll.dll913RtlUnicodeToMultiByteSize
ntdll.dll1392wcsncpy
ntdll.dll636RtlFreeUnicodeString
ntdll.dll565RtlDnsHostNameToComputerName
ntdll.dll906RtlUnicodeStringToAnsiString
ntdll.dll963RtlxUnicodeStringToAnsiSize
ntdll.dll115NlsMbCodePageTag
ntdll.dll455RtlAnsiStringToUnicodeString
ntdll.dll682RtlInitAnsiString
ntdll.dll527RtlCreateUnicodeStringFromAsciiz
ntdll.dll780RtlNtStatusToDosError
ntdll.dll1385wcschr
ntdll.dll1396wcsstr
ntdll.dll793RtlPrefixString
ntdll.dll1312_wcsicmp
ntdll.dll1384wcscat
ntdll.dll1387wcscpy
ntdll.dll653RtlGetFullPathName_U
ntdll.dll646RtlGetCurrentDirectory_U
ntdll.dll283NtQueryInformationProcess
ntdll.dll828RtlReleasePebLock
ntdll.dll598RtlEqualUnicodeString
ntdll.dll422RtlAcquirePebLock
ntdll.dll630RtlFreeAnsiString
ntdll.dll850RtlSetCurrentDirectory_U
ntdll.dll690RtlInitUnicodeStringEx
ntdll.dll891RtlTimeToTimeFields
ntdll.dll887RtlTimeFieldsToTime
ntdll.dll304NtQuerySystemInformation
ntdll.dll373NtSetSystemInformation
ntdll.dll532RtlCutoverTimeToSystemTime
ntdll.dll1273_allmul
ntdll.dll423RtlAcquirePrivilege
ntdll.dll829RtlReleasePrivilege
ntdll.dll375NtSetSystemTime
ntdll.dll871RtlSetTimeZoneInformation
ntdll.dll15DbgBreakPoint
ntdll.dll634RtlFreeSid
ntdll.dll852RtlSetDaclSecurityDescriptor
ntdll.dll520RtlCreateSecurityDescriptor
ntdll.dll429RtlAddAccessAllowedAce
ntdll.dll510RtlCreateAcl
ntdll.dll753RtlLengthSid
ntdll.dll450RtlAllocateAndInitializeSid
ntdll.dll16DbgPrint
ntdll.dll250NtOpenProcess
ntdll.dll9CsrGetProcessId
ntdll.dll25DbgUiDebugActiveProcess
ntdll.dll22DbgUiConnectToDbg
ntdll.dll27DbgUiIssueRemoteBreakin
ntdll.dll356NtSetInformationDebugObject
ntdll.dll26DbgUiGetThreadDebugObject
ntdll.dll284NtQueryInformationThread
ntdll.dll24DbgUiConvertStateChangeStructure
ntdll.dll31DbgUiWaitStateChange
ntdll.dll23DbgUiContinue
ntdll.dll30DbgUiStopDebugging
ntdll.dll830RtlReleaseRelativeName
ntdll.dll570RtlDosPathNameToRelativeNtPathName_U
ntdll.dll734RtlIsDosDeviceName_U
ntdll.dll513RtlCreateAtomTable
ntdll.dll181NtDeleteAtom
ntdll.dll544RtlDeleteAtomFromAtomTable
ntdll.dll279NtQueryInformationAtom
ntdll.dll797RtlQueryAtomInAtomTable
ntdll.dll125NtAddAtom
ntdll.dll437RtlAddAtomToAtomTable
ntdll.dll199NtFindAtom
ntdll.dll759RtlLookupAtomInAtomTable
ntdll.dll769RtlMultiByteToUnicodeN
ntdll.dll912RtlUnicodeToMultiByteN
ntdll.dll770RtlMultiByteToUnicodeSize
ntdll.dll794RtlPrefixUnicodeString
ntdll.dll750RtlLeaveCriticalSection
ntdll.dll585RtlEnterCriticalSection
ntdll.dll196NtEnumerateValueKey
ntdll.dll738RtlIsTextUnicode
ntdll.dll314NtReadFile
ntdll.dll135NtAllocateVirtualMemory
ntdll.dll399NtUnlockFile
ntdll.dll226NtLockFile
ntdll.dll568RtlDosPathNameToNtPathName_U
ntdll.dll459RtlAppendUnicodeStringToString
ntdll.dll460RtlAppendUnicodeToString
ntdll.dll509RtlCopyUnicodeString
ntdll.dll206NtFreeVirtualMemory
ntdll.dll410NtWriteFile
ntdll.dll526RtlCreateUnicodeString
ntdll.dll626RtlFormatCurrentUserKeyPath
ntdll.dll660RtlGetLongestNtPathLength
ntdll.dll190NtDuplicateObject
ntdll.dll289NtQueryKey
ntdll.dll194NtEnumerateKey
ntdll.dll187NtDeleteValueKey
ntdll.dll597RtlEqualString
ntdll.dll8CsrFreeCaptureBuffer
ntdll.dll4CsrCaptureMessageString
ntdll.dllCsrAllocateCaptureBuffer
ntdll.dll1368strncpy
ntdll.dll473RtlCharToInteger
ntdll.dll860RtlSetLastWin32ErrorAndNtStatusFromNtStatus
ntdll.dll920RtlUpcaseUnicodeChar
ntdll.dll921RtlUpcaseUnicodeString
ntdll.dll1CsrAllocateMessagePointer
ntdll.dll1386wcscmp
ntdll.dll292NtQueryObject
ntdll.dll482RtlCompareMemory
ntdll.dll274NtQueryDirectoryObject
ntdll.dll301NtQuerySymbolicLinkObject
ntdll.dll255NtOpenSymbolicLinkObject
ntdll.dll240NtOpenDirectoryObject
ntdll.dll157NtCreateIoCompletion
ntdll.dll365NtSetIoCompletion
ntdll.dll322NtRemoveIoCompletion
ntdll.dll361NtSetInformationProcess
ntdll.dll237NtNotifyChangeDirectoryFile
ntdll.dll407NtWaitForSingleObject
ntdll.dll694RtlInitializeCriticalSection
ntdll.dll273NtQueryDirectoryFile
ntdll.dll545RtlDeleteCriticalSection
ntdll.dll310NtQueryVolumeInformationFile
ntdll.dll200NtFlushBuffersFile
ntdll.dll535RtlDeactivateActivationContextUnsafeFast
ntdll.dll428RtlActivateActivationContextUnsafeFast
ntdll.dll141NtCancelIoFile
ntdll.dll315NtReadFileScatter
ntdll.dll411NtWriteFileGather
ntdll.dll943RtlWow64EnableFsRedirection
ntdll.dll944RtlWow64EnableFsRedirectionEx
ntdll.dll170NtCreateSection
ntdll.dll253NtOpenSection
ntdll.dll234NtMapViewOfSection
ntdll.dll203NtFlushVirtualMemory
ntdll.dll625RtlFlushSecureMemoryCache
ntdll.dll401NtUnmapViewOfSection
ntdll.dll910RtlUnicodeStringToOemString
ntdll.dll1375swprintf
ntdll.dll267NtQueryAttributesFile
ntdll.dll278NtQueryFullAttributesFile
ntdll.dll563RtlDetermineDosPathNameType_U
ntdll.dll571RtlDosPathNameToRelativeNtPathName_U_WithStatus
ntdll.dll640RtlGetAce
ntdll.dll801RtlQueryInformationAcl
ntdll.dll596RtlEqualSid
ntdll.dll569RtlDosPathNameToNtPathName_U_WithStatus
ntdll.dll313NtRaiseHardError
ntdll.dll670RtlGetThreadErrorMode
ntdll.dll303NtQuerySystemEnvironmentValueEx
ntdll.dll638RtlGUIDFromString
ntdll.dll372NtSetSystemEnvironmentValueEx
ntdll.dll688RtlInitString
ntdll.dll917RtlUnlockHeap
ntdll.dll876RtlSetUserValueHeap
ntdll.dll631RtlFreeHandle
ntdll.dll451RtlAllocateHandle
ntdll.dll756RtlLockHeap
ntdll.dll877RtlSizeHeap
ntdll.dll672RtlGetUserInfoHeap
ntdll.dll819RtlReAllocateHeap
ntdll.dll740RtlIsValidHandle
ntdll.dll481RtlCompactHeap
ntdll.dll677RtlImageNtHeader
ntdll.dll265NtProtectVirtualMemory
ntdll.dll309NtQueryVirtualMemory
ntdll.dll229NtLockVirtualMemory
ntdll.dll400NtUnlockVirtualMemory
ntdll.dll201NtFlushInstructionCache
ntdll.dll133NtAllocateUserPhysicalPages
ntdll.dll205NtFreeUserPhysicalPages
ntdll.dll232NtMapUserPhysicalPages
ntdll.dll233NtMapUserPhysicalPagesScatter
ntdll.dll213NtGetWriteWatch
ntdll.dll335NtResetWriteWatch
ntdll.dll360NtSetInformationObject
ntdll.dll787RtlOemStringToUnicodeString
ntdll.dll102LdrQueryImageFileExecutionOptions
ntdll.dll11CsrNewThread
ntdll.dll7CsrClientConnectToServer
ntdll.dll523RtlCreateTagHeap
ntdll.dll107LdrSetDllManifestProber
ntdll.dll873RtlSetUnhandledExceptionFilter
ntdll.dll870RtlSetThreadPoolStartFunc
ntdll.dll580RtlEncodePointer
ntdll.dll362NtSetInformationThread
ntdll.dll257NtOpenThreadToken
ntdll.dll1299_stricmp
ntdll.dll516RtlCreateHeap
ntdll.dll560RtlDestroyHeap
ntdll.dll602RtlExtendHeap
ntdll.dll811RtlQueryTagHeap
ntdll.dll931RtlUsageHeap
ntdll.dll937RtlValidateHeap
ntdll.dll666RtlGetProcessHeaps
ntdll.dll942RtlWalkHeap
ntdll.dll856RtlSetHeapInformation
ntdll.dll800RtlQueryHeapInformation
ntdll.dll698RtlInitializeHandleTable
ntdll.dll604RtlExtendedLargeIntegerDivide
ntdll.dll162NtCreateMailslotFile
ntdll.dll628RtlFormatMessageEx
ntdll.dll618RtlFindMessage
ntdll.dll111LdrUnloadDll
ntdll.dll110LdrUnloadAlternateResourceModule
ntdll.dll82LdrDisableThreadCalloutsForDll
ntdll.dll683RtlInitAnsiStringEx
ntdll.dll1361strchr
ntdll.dll91LdrGetDllHandle
ntdll.dll112LdrUnlockLoaderLock
ntdll.dll489RtlComputePrivatizedDllName_U
ntdll.dll790RtlPcToFileHeader
ntdll.dll99LdrLockLoaderLock
ntdll.dll673RtlGetVersion
ntdll.dll940RtlVerifyVersionInfo
ntdll.dll84LdrEnumerateLoadedModules
ntdll.dll908RtlUnicodeStringToInteger
ntdll.dll97LdrLoadAlternateResourceModule
ntdll.dll678RtlImageNtHeaderEx
ntdll.dll567RtlDosApplyFileIsolationRedirection_Ustr
ntdll.dll98LdrLoadDll
ntdll.dll1366strncat
ntdll.dll1298_strcmpi
ntdll.dll93LdrGetProcedureAddress
ntdll.dll89LdrFindResource_U
ntdll.dll77LdrAccessResource
ntdll.dll87LdrFindResourceDirectory_U
ntdll.dll676RtlImageDirectoryEntryToData
ntdll.dll154NtCreateEvent
ntdll.dll164NtCreateNamedPipeFile
ntdll.dll541RtlDefaultNpAcl
ntdll.dll1276_allshl
ntdll.dll573RtlDosSearchPath_Ustr
ntdll.dll799RtlQueryEnvironmentVariable_U
ntdll.dll453RtlAnsiCharToUnicodeChar
ntdll.dll708RtlIntegerToChar
ntdll.dll868RtlSetThreadErrorMode
ntdll.dll381NtSetVolumeInformationFile
ntdll.dll737RtlIsNameLegalDOS8Dot3
ntdll.dll295NtQueryPerformanceCounter
ntdll.dll261NtPowerInformation
ntdll.dll218NtInitiatePowerAction
ntdll.dll376NtSetThreadExecutionState
ntdll.dll333NtRequestWakeupLatency
ntdll.dll210NtGetDevicePowerState
ntdll.dll220NtIsSystemResumeAutomatic
ntdll.dll330NtRequestDeviceWakeup
ntdll.dll140NtCancelDeviceWakeupRequest
ntdll.dll809RtlQueryRegistryValues
ntdll.dll413NtWriteVirtualMemory
ntdll.dll108LdrShutdownProcess
ntdll.dll390NtTerminateProcess
ntdll.dll816RtlRaiseStatus
ntdll.dll914RtlUnicodeToOemN
ntdll.dll853RtlSetEnvironmentStrings
ntdll.dll854RtlSetEnvironmentVariable
ntdll.dll601RtlExpandEnvironmentStrings_U
ntdll.dll317NtReadVirtualMemory
ntdll.dll485RtlCompareUnicodeString
ntdll.dll159NtCreateJobSet
ntdll.dll158NtCreateJobObject
ntdll.dll219NtIsProcessInJob
ntdll.dll883RtlSubAuthoritySid
ntdll.dll702RtlInitializeSid
ntdll.dll285NtQueryInformationToken
ntdll.dll251NtOpenProcessToken
ntdll.dll338NtResumeThread
ntdll.dll138NtAssignProcessToJobObject
ntdll.dll3CsrCaptureMessageMultiUnicodeStringsInPlace
ntdll.dll173NtCreateThread
ntdll.dll168NtCreateProcessEx
ntdll.dll104LdrQueryImageFileKeyOption
ntdll.dll100LdrOpenImageFileOptionsKey
ntdll.dll558RtlDestroyEnvironment
ntdll.dll298NtQuerySection
ntdll.dll654RtlGetFullPathName_UstrEx
ntdll.dll661RtlGetNativeSystemInformation
ntdll.dll961RtlxAnsiStringToUnicodeSize
ntdll.dll241NtOpenEvent
ntdll.dll277NtQueryEvent
ntdll.dll391NtTerminateThread
ntdll.dll1394wcsrchr
ntdll.dll962RtlxOemStringToUnicodeSize
ntdll.dll116NlsMbOemCodePageTag
ntdll.dll964RtlxUnicodeStringToOemSize
ntdll.dll1274_alloca_probe
ntdll.dll1391wcsncmp
ntdll.dll561RtlDestroyProcessParameters
ntdll.dll517RtlCreateProcessParameters
ntdll.dll695RtlInitializeCriticalSectionAndSpinCount
ntdll.dll352NtSetEvent
ntdll.dll143NtClearEvent
ntdll.dll266NtPulseEvent
ntdll.dll171NtCreateSemaphore
ntdll.dll254NtOpenSemaphore
ntdll.dll321NtReleaseSemaphore
ntdll.dll163NtCreateMutant
ntdll.dll248NtOpenMutant
ntdll.dll320NtReleaseMutant
ntdll.dll383NtSignalAndWaitForSingleObject
ntdll.dll405NtWaitForMultipleObjects
ntdll.dll180NtDelayExecution
ntdll.dll174NtCreateTimer
ntdll.dll259NtOpenTimer
ntdll.dll377NtSetTimer
ntdll.dll142NtCancelTimer
ntdll.dll500RtlCopyLuid
ntdll.dll1370strrchr
ntdll.dll1311_vsnwprintf
ntdll.dll629RtlFreeActivationContextStack
ntdll.dll826RtlReleaseActivationContext
ntdll.dll427RtlActivateActivationContextEx
ntdll.dll802RtlQueryInformationActivationContext
ntdll.dll449RtlAllocateActivationContextStack
ntdll.dll256NtOpenThread
ntdll.dll109LdrShutdownThread
ntdll.dll208NtGetContextThread
ntdll.dll345NtSetContextThread
ntdll.dll387NtSuspendThread
ntdll.dll815RtlRaiseException
ntdll.dll537RtlDecodePointer
ntdll.dll1379towlower
ntdll.dll478RtlClearBits
ntdll.dll613RtlFindClearBitsAndSet
ntdll.dll467RtlAreBitsSet
ntdll.dll311NtQueueApcThread
ntdll.dll414NtYieldExecution
ntdll.dll825RtlRegisterWait
ntdll.dll555RtlDeregisterWait
ntdll.dll556RtlDeregisterWaitEx
ntdll.dll814RtlQueueWorkItem
ntdll.dll858RtlSetIoCompletionCallback
ntdll.dll525RtlCreateTimerQueue
ntdll.dll524RtlCreateTimer
ntdll.dll928RtlUpdateTimer
ntdll.dll552RtlDeleteTimer
ntdll.dll554RtlDeleteTimerQueueEx
ntdll.dll10CsrIdentifyAlertableThread
ntdll.dll281NtQueryInformationJobObject
ntdll.dll562RtlDestroyQueryDebugBuffer
ntdll.dll806RtlQueryProcessDebugInformation
ntdll.dll518RtlCreateQueryDebugBuffer
ntdll.dll1296_snwprintf
ntdll.dll515RtlCreateEnvironment
ntdll.dll633RtlFreeOemString
ntdll.dll1378toupper
ntdll.dll1332isdigit
ntdll.dll1323atol
ntdll.dll1377tolower
ntdll.dll245NtOpenJobObject
ntdll.dll389NtTerminateJobObject
ntdll.dll358NtSetInformationJobObject
ntdll.dll443RtlAddRefActivationContext
ntdll.dll949RtlZombifyActivationContext
ntdll.dll426RtlActivateActivationContext
ntdll.dll534RtlDeactivateActivationContext
ntdll.dll641RtlGetActiveActivationContext
ntdll.dll17DbgPrintEx
ntdll.dll81LdrDestroyOutOfProcessImage
ntdll.dll76LdrAccessOutOfProcessResource
ntdll.dll85LdrFindCreateProcessManifest
ntdll.dll80LdrCreateOutOfProcessImage
ntdll.dll781RtlNtStatusToDosErrorNoTeb
ntdll.dll950RtlpApplyLengthFunction
ntdll.dll658RtlGetLengthWithoutLastFullDosOrNtPathElement
ntdll.dll951RtlpEnsureBufferSize
ntdll.dll768RtlMultiAppendUnicodeStringBuffer
ntdll.dll511RtlCreateActivationContext
ntdll.dll566RtlDoesFileExists_U
ntdll.dll610RtlFindActivationContextSectionString
ntdll.dll609RtlFindActivationContextSectionGuid
ntdll.dll332NtRequestWaitReplyPort
ntdll.dll136NtApphelpCacheControl
ntdll.dll779RtlNtPathNameToDosPathName
ntdll.dll611RtlFindCharInUnicodeString
ntdll.dll150NtConnectPort
ntdll.dll1324bsearch
ntdll.dll488RtlComputeImportTableHash
ntdll.dll903RtlUnhandledExceptionFilter
ntdll.dll2CsrCaptureMessageBuffer
ntdll.dll286NtQueryInstallUILanguage
ntdll.dll272NtQueryDefaultUILanguage
ntdll.dll1393wcspbrk
ntdll.dll649RtlGetDaclSecurityDescriptor
ntdll.dll153NtCreateDirectoryObject
ntdll.dll789RtlOpenCurrentUser
ntdll.dll1319_wtol
ntdll.dll1313_wcslwr
ntdll.dll709RtlIntegerToUnicodeString
ntdll.dll271NtQueryDefaultLocale
ntdll.dll1300_strlwr
ntdll.dll919RtlUnwind
ordentry_vafunction_name
10x1f326ActivateActCtx
20x117a9AddAtomA
30x1a59fAddAtomW
40x71bb5AddConsoleAliasA
50x71b77AddConsoleAliasW
60x5adfcAddLocalAlternateComputerNameA
70x5ad15AddLocalAlternateComputerNameW
80x37e82AddRefActCtx
90x879a8AddVectoredContinueHandler
100x879ccAddVectoredExceptionHandler
110x72499AllocConsole
120x61866AllocateUserPhysicalPages
130x3514fAreFileApisANSI
140x68b0AssignProcessToJobObject
150x72679AttachConsole
160x59522BackupRead
170x585f4BackupSeek
180x59b41BackupWrite
190x2c759BaseCheckAppcompatCache
200x2d4dbBaseCheckRunApp
210x6cec4BaseCleanupAppcompatCacheSupport
220x6cee7BaseDumpAppcompatCache
230x6cef7BaseFlushAppcompatCache
240x2951BaseInitAppcompatCacheSupport
250x2c89fBaseIsAppcompatInfrastructureDisabled
260x2b761BaseProcessInitPostImport
270x371ddBaseQueryModuleData
280x1a69cBaseUpdateAppcompatCache
290x2d0e0BasepCheckBadapp
300x2de24BasepCheckWinSaferRestrictions
310x2d081BasepFreeAppCompatData
320x32ec0Beep
330x70e71BeginUpdateResourceA
340x70d22BeginUpdateResourceW
350xf332BindIoCompletionCallback
360x6c45dBuildCommDCBA
370x6c42fBuildCommDCBAndTimeoutsA
380x6c48fBuildCommDCBAndTimeoutsW
390x6c4e9BuildCommDCBW
400x62f7eCallNamedPipeA
410x62d2fCallNamedPipeW
420x638bdCancelDeviceWakeupRequest
430x4ab4CancelIo
440x65f74CancelTimerQueueTimer
450xec25CancelWaitableTimer
460x722cChangeTimerQueueTimer
470x6374bCheckNameLegalDOS8Dot3A
480x635f9CheckNameLegalDOS8Dot3W
490x5c137CheckRemoteDebuggerPresent
500x685f9ClearCommBreak
510x66ebaClearCommError
520x315daCloseConsoleHandle
530x23e6fCloseHandle
540x44b9CloseProfileUserMapping
550xe5ceCmdBatNotification
560x68251CommConfigDialogA
570x6814dCommConfigDialogW
580x305a9CompareFileTime
590x1bc46CompareStringA
600x2210bCompareStringW
610x1c92cConnectNamedPipe
620x72b6eConsoleMenuControl
630x5c5f6ContinueDebugEvent
640x348dcConvertDefaultLocale
650xd9e7ConvertFiberToThread
660x1267dConvertThreadToFiber
670x12695ConvertThreadToFiberEx
680x36c9eCopyFileA
690x61566CopyFileExA
700x8e29CopyFileExW
710x8e91CopyFileW
720x5b9eeCopyLZFile
730x34154CreateActCtxA
740x1e29cCreateActCtxW
750x73be6CreateConsoleScreenBuffer
760x98ecCreateDirectoryA
770x5d315CreateDirectoryExA
780x5c683CreateDirectoryExW
790x1bf79CreateDirectoryW
800x1bd7dCreateEventA
810x29b31CreateEventW
820x1257bCreateFiber
830x1259bCreateFiberEx
840x1a63CreateFileA
850x21e17CreateFileMappingA
860x21e77CreateFileMappingW
870x24849CreateFileW
880x6cc89CreateHardLinkA
890x6caafCreateHardLinkW
900x1beddCreateIoCompletionPort
910x6c9cdCreateJobObjectA
920x3344CreateJobObjectW
930x6c99fCreateJobSet
940x7978CreateMailslotA
950x79caCreateMailslotW
960x33f9fCreateMemoryResourceNotification
970x293abCreateMutexA
980x29340CreateMutexW
990x62e24CreateNamedPipeA
1000x1c9a6CreateNamedPipeW
1010x813fCreateNlsSecurityDescriptor
1020xe363CreatePipe
1030x24b9CreateProcessA
1040x321e3CreateProcessInternalA
1050x2d146CreateProcessInternalW
1060x2484CreateProcessW
1070x24e9bCreateRemoteThread
1080x1fbf4CreateSemaphoreA
1090x257b6CreateSemaphoreW
1100x6ccf4CreateSocketHandle
1110x6c6beCreateTapePartition
1120x25117CreateThread
1130x7d2bCreateTimerQueue
1140x1acbbCreateTimerQueueTimer
1150x37830CreateToolhelp32Snapshot
1160x64ba6CreateWaitableTimerA
1170xf2c8CreateWaitableTimerW
1180x1f357DeactivateActCtx
1190x5c1fbDebugActiveProcess
1200x5c63aDebugActiveProcessStop
1210x5c18bDebugBreak
1220x5c24eDebugBreakProcess
1230x5c275DebugSetProcessKillOnExit
1240x879f1DecodePointer
1250x87a08DecodeSystemPointer
1260x5e38bDefineDosDeviceA
1270x464bDefineDosDeviceW
1280x7e19dDelayLoadFailureHook
1290x1a72eDeleteAtom
1300x87a25DeleteCriticalSection
1310xd94eDeleteFiber
1320xd30bDeleteFileA
1330xea61DeleteFileW
1340x65f47DeleteTimerQueue
1350x35b38DeleteTimerQueueEx
1360x1ad35DeleteTimerQueueTimer
1370x6b696DeleteVolumeMountPointA
1380x6af53DeleteVolumeMountPointW
1390x168dDeviceIoControl
1400x2931aDisableThreadLibraryCalls
1410x1f94bDisconnectNamedPipe
1420x5a5d5DnsHostnameToComputerNameA
1430x7751DnsHostnameToComputerNameW
1440x1a613DosDateTimeToFileTime
1450x64679DosPathToSessionPathA
1460x47f1DosPathToSessionPathW
1470x316a6DuplicateConsoleHandle
1480x24494DuplicateHandle
1490x87a44EncodePointer
1500x87a5bEncodeSystemPointer
1510x70b0dEndUpdateResourceA
1520x70939EndUpdateResourceW
1530x87a78EnterCriticalSection
1540x34df0EnumCalendarInfoA
1550x75bffEnumCalendarInfoExA
1560x78ae0EnumCalendarInfoExW
1570x78abdEnumCalendarInfoW
1580x75c40EnumDateFormatsA
1590x75c60EnumDateFormatsExA
1600x78b03EnumDateFormatsExW
1610x34d13EnumDateFormatsW
1620x75c9eEnumLanguageGroupLocalesA
1630x78d33EnumLanguageGroupLocalesW
1640x625a9EnumResourceLanguagesA
1650x32db0EnumResourceLanguagesW
1660x354d5EnumResourceNamesA
1670x57e3dEnumResourceNamesW
1680x623bfEnumResourceTypesA
1690x62701EnumResourceTypesW
1700x75cddEnumSystemCodePagesA
1710x78aa2EnumSystemCodePagesW
1720x6198fEnumSystemFirmwareTables
1730x78ddbEnumSystemGeoID
1740x75c80EnumSystemLanguageGroupsA
1750x78a69EnumSystemLanguageGroupsW
1760x6da6EnumSystemLocalesA
1770x78a87EnumSystemLocalesW
1780x75c22EnumTimeFormatsA
1790x34ef2EnumTimeFormatsW
1800x75cbfEnumUILanguagesA
1810xdda7EnumUILanguagesW
1820x5b12dEnumerateLocalComputerNamesA
1830x5af71EnumerateLocalComputerNamesW
1840x6c68bEraseTape
1850x670ccEscapeCommFunction
1860x268f9ExitProcess
1870xf901ExitThread
1880x68f85ExitVDM
1890x11281ExpandEnvironmentStringsA
1900x1c714ExpandEnvironmentStringsW
1910x714ffExpungeConsoleCommandHistoryA
1920x714e7ExpungeConsoleCommandHistoryW
1930x63b15FatalAppExitA
1940x63ac6FatalAppExitW
1950x63b65FatalExit
1960x1183dFileTimeToDosDateTime
1970x23725FileTimeToLocalFileTime
1980x262c7FileTimeToSystemTime
1990x4207FillConsoleOutputAttribute
2000x73bbfFillConsoleOutputCharacterA
2010x663fFillConsoleOutputCharacterW
2020x20123FindActCtxSectionGuid
2030x6ce04FindActCtxSectionStringA
2040x1191aFindActCtxSectionStringW
2050x1fa37FindAtomA
2060x33315FindAtomW
2070x2bfb3FindClose
2080x8559FindCloseChangeNotification
2090x5e7b2FindFirstChangeNotificationA
2100xc9e9FindFirstChangeNotificationW
2110x31fe1FindFirstFileA
2120x5ea39FindFirstFileExA
2130x2b7dfFindFirstFileExW
2140x2bb49FindFirstFileW
2150x5e81aFindFirstStreamW
2160x6b7e9FindFirstVolumeA
2170x6b321FindFirstVolumeMountPointA
2180x6a41aFindFirstVolumeMountPointW
2190x3796FindFirstVolumeW
2200xb76aFindNextChangeNotification
2210xe041FindNextFileA
2220x1d7bfFindNextFileW
2230x5e733FindNextStreamW
2240x6b222FindNextVolumeA
2250x6b441FindNextVolumeMountPointA
2260x6a6cbFindNextVolumeMountPointW
2270x3480FindNextVolumeW
2280x111e1FindResourceA
2290x3388cFindResourceExA
2300x1c2b6FindResourceExW
2310x30491FindResourceW
2320x3445FindVolumeClose
2330x8559FindVolumeMountPointClose
2340x2b49cFlsAlloc
2350xf0f6FlsFree
2360x2209eFlsGetValue
2370x254c5FlsSetValue
2380x37ea9FlushConsoleInputBuffer
2390x1f897FlushFileBuffers
2400x33347FlushInstructionCache
2410x1206cFlushViewOfFile
2420x76375FoldStringA
2430x79bdeFoldStringW
2440xbf12FormatMessageA
2450xf831FormatMessageW
2460x72215FreeConsole
2470x2645cFreeEnvironmentStringsA
2480x2645cFreeEnvironmentStringsW
2490x2b1a1FreeLibrary
2500x12846FreeLibraryAndExitThread
2510x18f1bFreeResource
2520x61894FreeUserPhysicalPages
2530x74211GenerateConsoleCtrlEvent
2540x27955GetACP
2550x5d385GetAtomNameA
2560x1a8b2GetAtomNameW
2570x6997dGetBinaryType
2580x6997dGetBinaryTypeA
2590x69703GetBinaryTypeW
2600xa6b6GetCPFileNameFromRegistry
2610x26341GetCPInfo
2620x7650bGetCPInfoExA
2630x7a699GetCPInfoExW
2640x75e21GetCalendarInfoA
2650xc68aGetCalendarInfoW
2660x6ce97GetComPlusPackageInstallStatus
2670x68611GetCommConfig
2680x671c8GetCommMask
2690x67251GetCommModemStatus
2700x672daGetCommProperties
2710x67392GetCommState
2720x67640GetCommTimeouts
2730x2b487GetCommandLineA
2740x2b756GetCommandLineW
2750x5f3dbGetCompressedFileSizeA
2760x5f2a9GetCompressedFileSizeW
2770xcacfGetComputerNameA
2780x4064GetComputerNameExA
2790x1cf88GetComputerNameExW
2800x1c3ffGetComputerNameW
2810x71d64GetConsoleAliasA
2820x71424GetConsoleAliasExesA
2830x71122GetConsoleAliasExesLengthA
2840x71115GetConsoleAliasExesLengthW
2850x71409GetConsoleAliasExesW
2860x71d38GetConsoleAliasW
2870x712bfGetConsoleAliasesA
2880x71e6dGetConsoleAliasesLengthA
2890x71e55GetConsoleAliasesLengthW
2900x712a1GetConsoleAliasesW
2910x31f53GetConsoleCP
2920x756fbGetConsoleCharType
2930x71897GetConsoleCommandHistoryA
2940x716f0GetConsoleCommandHistoryLengthA
2950x716d8GetConsoleCommandHistoryLengthW
2960x71879GetConsoleCommandHistoryW
2970x74ba9GetConsoleCursorInfo
2980x7590fGetConsoleCursorMode
2990x3308eGetConsoleDisplayMode
3000x74de1GetConsoleFontInfo
3010x740b3GetConsoleFontSize
3020x72ec9GetConsoleHardwareState
3030x71e85GetConsoleInputExeNameA
3040x719c1GetConsoleInputExeNameW
3050x72779GetConsoleInputWaitHandle
3060x74819GetConsoleKeyboardLayoutNameA
3070x74831GetConsoleKeyboardLayoutNameW
3080x26b90GetConsoleMode
3090x754dfGetConsoleNlsMode
3100x26af4GetConsoleOutputCP
3110x748b5GetConsoleProcessList
3120xcd1fGetConsoleScreenBufferInfo
3130x74c71GetConsoleSelectionInfo
3140x71929GetConsoleTitleA
3150x31302GetConsoleTitleW
3160x74849GetConsoleWindow
3170x7602fGetCurrencyFormatA
3180x7b9baGetCurrencyFormatW
3190x333dfGetCurrentActCtx
3200x74141GetCurrentConsoleFont
3210x9978GetCurrentDirectoryA
3220x30531GetCurrentDirectoryW
3230x22f9dGetCurrentProcess
3240x23c78GetCurrentProcessId
3250x87a96GetCurrentProcessorNumber
3260x23868GetCurrentThread
3270x22fc7GetCurrentThreadId
3280x2fa9GetDateFormatA
3290x20254GetDateFormatW
3300x683d9GetDefaultCommConfigA
3310x682d9GetDefaultCommConfigW
3320x7ad1dGetDefaultSortkeySize
3330x63842GetDevicePowerState
3340x12bbcGetDiskFreeSpaceA
3350x33857GetDiskFreeSpaceExA
3360x3350bGetDiskFreeSpaceExW
3370x12a78GetDiskFreeSpaceW
3380x62238GetDllDirectoryA
3390x621c9GetDllDirectoryW
3400x9a05GetDriveTypeA
3410x253c0GetDriveTypeW
3420x3213cGetEnvironmentStrings
3430x3213cGetEnvironmentStringsA
3440x26484GetEnvironmentStringsW
3450x30be4GetEnvironmentVariableA
3460x29c5cGetEnvironmentVariableW
3470x26b55GetExitCodeProcess
3480xdad5GetExitCodeThread
3490x66542GetExpandedNameA
3500x665efGetExpandedNameW
3510x32116GetFileAttributesA
3520xb6cfGetFileAttributesExA
3530x1c7feGetFileAttributesExW
3540x24415GetFileAttributesW
3550x2c059GetFileInformationByHandle
3560x1e1a3GetFileSize
3570x26226GetFileSizeEx
3580x11136GetFileTime
3590x2b397GetFileType
3600x616d6GetFirmwareEnvironmentVariableA
3610x615bfGetFirmwareEnvironmentVariableW
3620x295ebGetFullPathNameA
3630x25791GetFullPathNameW
3640x75cf8GetGeoInfoA
3650x78fbaGetGeoInfoW
3660x6cce3GetHandleContext
3670x61b89GetHandleInformation
3680x61984GetLargePageMinimum
3690x74b21GetLargestConsoleWindowSize
3700x87ab9GetLastError
3710x7ad47GetLinguistLangSize
3720x32609GetLocalTime
3730x2f3cfGetLocaleInfoA
3740x2602bGetLocaleInfoW
3750x4970GetLogicalDriveStringsA
3760x631abGetLogicalDriveStringsW
3770x118c7GetLogicalDrives
3780x63b78GetLogicalProcessorInformation
3790x69f1aGetLongPathNameA
3800x30861GetLongPathNameW
3810x35d6bGetMailslotInfo
3820x245ffGetModuleFileNameA
3830x23c87GetModuleFileNameW
3840x24750GetModuleHandleA
3850xc32bGetModuleHandleExA
3860x1fa51GetModuleHandleExW
3870x2513eGetModuleHandleW
3880xa48aGetNLSVersion
3890x62e9cGetNamedPipeHandleStateA
3900x62c35GetNamedPipeHandleStateW
3910x62a02GetNamedPipeInfo
3920x2128fGetNativeSystemInfo
3930x6885dGetNextVDMCommand
3940x27be5GetNlsSectionName
3950x63146GetNumaAvailableMemoryNode
3960x62ff2GetNumaHighestNodeNumber
3970x630e1GetNumaNodeProcessorMask
3980x6303dGetNumaProcessorNode
3990xe85cGetNumberFormatA
4000x1b170GetNumberFormatW
4010x749f1GetNumberOfConsoleFonts
4020x74a5dGetNumberOfConsoleInputEvents
4030x74d29GetNumberOfConsoleMouseButtons
4040x880cGetOEMCP
4050xf42fGetOverlappedResult
4060x329d3GetPriorityClass
4070x33962GetPrivateProfileIntA
4080xb7f1GetPrivateProfileIntW
4090x5dd5dGetPrivateProfileSectionA
4100x5de6dGetPrivateProfileSectionNamesA
4110x5de8eGetPrivateProfileSectionNamesW
4120x12902GetPrivateProfileSectionW
4130x1152aGetPrivateProfileStringA
4140xfe9eGetPrivateProfileStringW
4150x5deafGetPrivateProfileStructA
4160x373d8GetPrivateProfileStructW
4170x23d7aGetProcAddress
4180x1fbadGetProcessAffinityMask
4190x63fa1GetProcessHandleCount
4200x23ec7GetProcessHeap
4210x61e5cGetProcessHeaps
4220x63a91GetProcessId
4230x65c1dGetProcessIdOfThread
4240x63f70GetProcessIoCounters
4250x63f36GetProcessPriorityBoost
4260x63c97GetProcessShutdownParameters
4270xbc47GetProcessTimes
4280x29402GetProcessVersion
4290x63ee6GetProcessWorkingSetSize
4300x63e96GetProcessWorkingSetSizeEx
4310x33944GetProfileIntA
4320x67fdGetProfileIntW
4330x5e2caGetProfileSectionA
4340x340bdGetProfileSectionW
4350x991cGetProfileStringA
4360x754cGetProfileStringW
4370x1be79GetQueuedCompletionStatus
4380x3704fGetShortPathNameA
4390x1db5eGetShortPathNameW
4400x20ecGetStartupInfoA
4410x204eGetStartupInfoW
4420x2b437GetStdHandle
4430x34a17GetStringTypeA
4440x34a0cGetStringTypeExA
4450x1d549GetStringTypeExW
4460x2b24bGetStringTypeW
4470x1fb28GetSystemDefaultLCID
4480xbf95GetSystemDefaultLangID
4490x1c7e4GetSystemDefaultUILanguage
4500x20037GetSystemDirectoryA
4510x1c256GetSystemDirectoryW
4520x641d0GetSystemFileCacheSize
4530x61a89GetSystemFirmwareTable
4540x2952eGetSystemInfo
4550xd0a7GetSystemPowerStatus
4560x63fdbGetSystemRegistryQuota
4570x1f50GetSystemTime
4580x2e31GetSystemTimeAdjustment
4590x1fcaGetSystemTimeAsFileTime
4600x63d50GetSystemTimes
4610x120a4GetSystemWindowsDirectoryA
4620x1b9dfGetSystemWindowsDirectoryW
4630x1dad9GetSystemWow64DirectoryA
4640x1dad9GetSystemWow64DirectoryW
4650x6c732GetTapeParameters
4660x6c5fcGetTapePosition
4670x6c7cfGetTapeStatus
4680x9b73GetTempFileNameA
4690xf4e4GetTempFileNameW
4700x9ac2GetTempPathA
4710x1ad81GetTempPathW
4720x37ae3GetThreadContext
4730x65deeGetThreadIOPendingFlag
4740x65be8GetThreadId
4750x222b7GetThreadLocale
4760x325c8GetThreadPriority
4770x65baeGetThreadPriorityBoost
4780x369cdGetThreadSelectorEntry
4790x65d81GetThreadTimes
4800x219d1GetTickCount
4810x2ea2GetTimeFormatA
4820x2095bGetTimeFormatW
4830x1fc7aGetTimeZoneInformation
4840x2376dGetUserDefaultLCID
4850x2152eGetUserDefaultLangID
4860x26501GetUserDefaultUILanguage
4870x36e4bGetUserGeoID
4880x69139GetVDMCurrentDirectories
4890x297cbGetVersion
4900x29d74GetVersionExA
4910x27888GetVersionExW
4920x3af0GetVolumeInformationA
4930x2661dGetVolumeInformationW
4940x6b539GetVolumeNameForVolumeMountPointA
4950x117fdGetVolumeNameForVolumeMountPointW
4960xdbd3GetVolumePathNameA
4970x2768fGetVolumePathNameW
4980x6b6b8GetVolumePathNamesForVolumeNameA
4990x11bb2GetVolumePathNamesForVolumeNameW
5000x12bf4GetWindowsDirectoryA
5010x1ab82GetWindowsDirectoryW
5020x6191eGetWriteWatch
5030x337a2GlobalAddAtomA
5040x1f7f3GlobalAddAtomW
5050x1ba9bGlobalAlloc
5060x61d0dGlobalCompact
5070x1a754GlobalDeleteAtom
5080x33788GlobalFindAtomA
5090x1c1bcGlobalFindAtomW
5100x61812GlobalFix
5110x36a98GlobalFlags
5120x1cbdaGlobalFree
5130x5d365GlobalGetAtomNameA
5140x1a76cGlobalGetAtomNameW
5150xe688GlobalHandle
5160x121a9GlobalLock
5170x23871GlobalMemoryStatus
5180x1d603GlobalMemoryStatusEx
5190x123f9GlobalReAlloc
5200x1278cGlobalSize
5210x61856GlobalUnWire
5220x6182cGlobalUnfix
5230x12111GlobalUnlock
5240x61846GlobalWire
5250x660fdHeap32First
5260x65fb8Heap32ListFirst
5270x66066Heap32ListNext
5280x66217Heap32Next
5290x87ad4HeapAlloc
5300x61e6dHeapCompact
5310x2b1deHeapCreate
5320x61d6aHeapCreateTagsW
5330xec49HeapDestroy
5340x61d39HeapExtend
5350x87aeaHeapFree
5360x61e7eHeapLock
5370x61fc0HeapQueryInformation
5380x61d7bHeapQueryTagW
5390x87afcHeapReAlloc
5400x1f1b1HeapSetInformation
5410x87b14HeapSize
5420x61d8cHeapSummary
5430x61e98HeapUnlock
5440x61de8HeapUsage
5450x45b5HeapValidate
5460x61eb2HeapWalk
5470x2c58InitAtomTable
5480x27869InitializeCriticalSection
5490x23ed9InitializeCriticalSectionAndSpinCount
5500x87b26InitializeSListHead
5510x87b43InterlockedCompareExchange64
5520x216a8InterlockedCompareExchange
5530x21680InterlockedDecrement
5540x21694InterlockedExchange
5550x216bcInterlockedExchangeAdd
5560x87b69InterlockedFlushSList
5570x2166cInterlockedIncrement
5580x87b88InterlockedPopEntrySList
5590x87baaInterlockedPushEntrySList
5600x73d8dInvalidateConsoleDIBits
5610x1ad9cIsBadCodePtr
5620x63c77IsBadHugeReadPtr
5630x63c87IsBadHugeWritePtr
5640x1c062IsBadReadPtr
5650x33a51IsBadStringPtrA
5660x1c153IsBadStringPtrW
5670x23a7aIsBadWritePtr
5680x1ba38IsDBCSLeadByte
5690x6d3eIsDBCSLeadByteEx
5700x1da00IsDebuggerPresent
5710x35c6cIsNLSDefinedString
5720x6c965IsProcessInJob
5730x2c4aeIsProcessorFeaturePresent
5740x63886IsSystemResumeAutomatic
5750x5bbf1IsTimeZoneRedirectionEnabled
5760x2f49bIsValidCodePage
5770x768a3IsValidLanguageGroup
5780x2f554IsValidLocale
5790x769afIsValidUILanguage
5800x30660IsWow64Process
5810x32825LCMapStringA
5820x23241LCMapStringW
5830x66df9LZClose
5840x66d82LZCloseFile
5850x5b938LZCopy
5860x668b8LZCreateFileW
5870x7f53eLZDone
5880x6677aLZInit
5890x6698bLZOpenFileA
5900x66a52LZOpenFileW
5910x66b74LZRead
5920x66ae9LZSeek
5930x7f535LZStart
5940x87bcdLeaveCriticalSection
5950x1dcaLoadLibraryA
5960x1da2LoadLibraryExA
5970x1b10LoadLibraryExW
5980x1c6faLoadLibraryW
5990x6435eLoadModule
6000x29bf9LoadResource
6010x2239cLocalAlloc
6020x61d0dLocalCompact
6030x7930LocalFileTimeToFileTime
6040x5814eLocalFlags
6050x22419LocalFree
6060x58249LocalHandle
6070x11f01LocalLock
6080x1f0f7LocalReAlloc
6090x61d23LocalShrink
6100x12de7LocalSize
6110x12d37LocalUnlock
6120xd255LockFile
6130xe784LockFileEx
6140x2b11bLockResource
6150x618c2MapUserPhysicalPages
6160x618f0MapUserPhysicalPagesScatter
6170x243f1MapViewOfFile
6180x23de2MapViewOfFileEx
6190x66383Module32First
6200x37b98Module32FirstW
6210x66467Module32Next
6220x3756fModule32NextW
6230x5f405MoveFileA
6240xdccaMoveFileExA
6250x1ceb2MoveFileExW
6260xe271MoveFileW
6270xdceaMoveFileWithProgressA
6280x1cc7eMoveFileWithProgressW
6290x216ccMulDiv
6300x22fd6MultiByteToWideChar
6310x64165NeedCurrentDirectoryForExePathA
6320x2e33dNeedCurrentDirectoryForExePathW
6330x27a63NlsConvertIntegerToString
6340xdac4NlsGetCacheUpdateCount
6350x7687dNlsResetProcessLocale
6360x24b71OpenConsoleW
6370x820cOpenDataFile
6380x1e123OpenEventA
6390x1da2aOpenEventW
6400x3d02OpenFile
6410x2b65fOpenFileMappingA
6420x2b6b8OpenFileMappingW
6430x6ca3aOpenJobObjectA
6440x6c7f0OpenJobObjectW
6450x30607OpenMutexA
6460x3041dOpenMutexW
6470x1fdd4OpenProcess
6480x1092fOpenProfileUserMapping
6490x64b31OpenSemaphoreA
6500x7810OpenSemaphoreW
6510x37a85OpenThread
6520x64c16OpenWaitableTimerA
6530x4bb8OpenWaitableTimerW
6540x6ca9OutputDebugStringA
6550x5c4beOutputDebugStringW
6560x73e59PeekConsoleInputA
6570x42e4PeekConsoleInputW
6580x62a87PeekNamedPipe
6590x1ac8aPostQueuedCompletionStatus
6600x6c658PrepareTape
6610x3f07PrivCopyFileExW
6620x5efb1PrivMoveFileIdentityW
6630x34783Process32First
6640x34847Process32FirstW
6650x34485Process32Next
6660x34549Process32NextW
6670x2f032ProcessIdToSessionId
6680x3aacPulseEvent
6690x676e3PurgeComm
6700x119c5QueryActCtxW
6710x87bebQueryDepthSList
6720x5e551QueryDosDeviceA
6730xaa10QueryDosDeviceW
6740x6c894QueryInformationJobObject
6750x37fdbQueryMemoryResourceNotification
6760x29577QueryPerformanceCounter
6770x1fb79QueryPerformanceFrequency
6780x65eb1QueueUserAPC
6790x1f4aaQueueUserWorkItem
6800xbebbRaiseException
6810x5f5b5ReOpenFile
6820x728c9ReadConsoleA
6830x73e7cReadConsoleInputA
6840x73ec2ReadConsoleInputExA
6850x73ee6ReadConsoleInputExW
6860x73e9fReadConsoleInputW
6870x734adReadConsoleOutputA
6880x739cdReadConsoleOutputAttribute
6890x73981ReadConsoleOutputCharacterA
6900x739a7ReadConsoleOutputCharacterW
6910x73489ReadConsoleOutputW
6920xcdf1ReadConsoleW
6930xbda4ReadDirectoryChangesW
6940x184fReadFile
6950xe125ReadFileEx
6960x37f3dReadFileScatter
6970x2322ReadProcessMemory
6980x75011RegisterConsoleIME
6990x759d9RegisterConsoleOS2
7000x72d71RegisterConsoleVDM
7010x29951RegisterWaitForInputIdle
7020x3251eRegisterWaitForSingleObject
7030x2be7RegisterWaitForSingleObjectEx
7040x617fcRegisterWowBaseHandlers
7050x69299RegisterWowExec
7060x123d8ReleaseActCtx
7070x219adReleaseMutex
7080x1bf51ReleaseSemaphore
7090x35fb3RemoveDirectoryA
7100x7fd9RemoveDirectoryW
7110x5af28RemoveLocalAlternateComputerNameA
7120x5ae45RemoveLocalAlternateComputerNameW
7130x87c04RemoveVectoredContinueHandler
7140x87c2bRemoveVectoredExceptionHandler
7150x6056dReplaceFile
7160x614a9ReplaceFileA
7170x6056dReplaceFileW
7180x63895RequestDeviceWakeup
7190x6381aRequestWakeupLatency
7200x1b0a0ResetEvent
7210x61957ResetWriteWatch
7220x87c53RestoreLastError
7230x1f38bResumeThread
7240x87c72RtlCaptureContext
7250x87c8aRtlCaptureStackBackTrace
7260x87ca9RtlFillMemory
7270x87cbdRtlMoveMemory
7280x87cd1RtlUnwind
7290x87ce1RtlZeroMemory
7300x74521ScrollConsoleScreenBufferA
7310x3becScrollConsoleScreenBufferW
7320xb579SearchPathA
7330x29a21SearchPathW
7340x79d6bSetCPGlobal
7350x75f8cSetCalendarInfoA
7360x77119SetCalendarInfoW
7370x5bf25SetClientTimeZoneInformation
7380x6ce5aSetComPlusPackageInstallStatus
7390x6776dSetCommBreak
7400x687c5SetCommConfig
7410x67785SetCommMask
7420x67824SetCommState
7430x67b2cSetCommTimeouts
7440x5a562SetComputerNameA
7450x5b616SetComputerNameExA
7460x5b57aSetComputerNameExW
7470x5a43cSetComputerNameW
7480x74299SetConsoleActiveScreenBuffer
7490x74633SetConsoleCP
7500x718b5SetConsoleCommandHistoryMode
7510x2f259SetConsoleCtrlHandler
7520x72a99SetConsoleCursor
7530x74387SetConsoleCursorInfo
7540x7588fSetConsoleCursorMode
7550x6508SetConsoleCursorPosition
7560x72c4fSetConsoleDisplayMode
7570x74545SetConsoleFont
7580x72f99SetConsoleHardwareState
7590x745bfSetConsoleIcon
7600x71f31SetConsoleInputExeNameA
7610x26c89SetConsoleInputExeNameW
7620x72918SetConsoleKeyShortcuts
7630x757c9SetConsoleLocalEUDC
7640x7ecfbSetConsoleMaximumWindowSize
7650x729dfSetConsoleMenuClose
7660x26c21SetConsoleMode
7670x75631SetConsoleNlsMode
7680x7160eSetConsoleNumberOfCommandsA
7690x715f3SetConsoleNumberOfCommandsW
7700x75a4dSetConsoleOS2OemFormat
7710x74751SetConsoleOutputCP
7720x73019SetConsolePalette
7730x7430dSetConsoleScreenBufferSize
7740x4520SetConsoleTextAttribute
7750x71951SetConsoleTitleA
7760xcc28SetConsoleTitleW
7770x74451SetConsoleWindowInfo
7780x87cf5SetCriticalSectionSpinCount
7790xf1f3SetCurrentDirectoryA
7800x30d67SetCurrentDirectoryW
7810x68569SetDefaultCommConfigA
7820x68461SetDefaultCommConfigW
7830x6211bSetDllDirectoryA
7840x62085SetDllDirectoryW
7850x1af4dSetEndOfFile
7860x639e5SetEnvironmentStringsA
7870xcb9aSetEnvironmentStringsW
7880xc1e2SetEnvironmentVariableA
7890x263e1SetEnvironmentVariableW
7900x2c2dcSetErrorMode
7910x22311SetEvent
7920x61c18SetFileApisToANSI
7930x427dSetFileApisToOEM
7940x337bcSetFileAttributesA
7950x115c6SetFileAttributesW
7960x5e699SetFileCompletionNotificationModes
7970x25693SetFilePointer
7980x1aecdSetFilePointerEx
7990x5ed6eSetFileShortNameA
8000x5eca1SetFileShortNameW
8010x12ca1SetFileTime
8020x9a75SetFileValidData
8030x61769SetFirmwareEnvironmentVariableA
8040x6164eSetFirmwareEnvironmentVariableW
8050x1dad9SetHandleContext
8060x2b11bSetHandleCount
8070x1fa94SetHandleInformation
8080x33a9SetInformationJobObject
8090x75b0bSetLastConsoleEventActive
8100x87d1aSetLastError
8110x5b8efSetLocalPrimaryComputerNameA
8120x5b66dSetLocalPrimaryComputerNameW
8130x58069SetLocalTime
8140x75d81SetLocaleInfoA
8150x77367SetLocaleInfoW
8160x6843SetMailslotInfo
8170x638e5SetMessageWaitingIndicator
8180x1f1dcSetNamedPipeHandleState
8190x8648SetPriorityClass
8200x63f06SetProcessAffinityMask
8210x36fc7SetProcessPriorityBoost
8220x66fbSetProcessShutdownParameters
8230xc279SetProcessWorkingSetSize
8240xc297SetProcessWorkingSetSizeEx
8250x61ff4SetSearchPathMode
8260x312cbSetStdHandle
8270x6418eSetSystemFileCacheSize
8280x637a5SetSystemPowerState
8290x5bc09SetSystemTime
8300xbcd3SetSystemTimeAdjustment
8310x6c78eSetTapeParameters
8320x6c5b6SetTapePosition
8330x64ddfSetTermsrvAppInstallMode
8340x1fc20SetThreadAffinityMask
8350x36a26SetThreadContext
8360x637eeSetThreadExecutionState
8370x65f13SetThreadIdealProcessor
8380x788bSetThreadLocale
8390x324d7SetThreadPriority
8400x65b73SetThreadPriorityBoost
8410x648b7SetThreadStackGuarantee
8420x269efSetThreadUILanguage
8430x5c002SetTimeZoneInformation
8440x28f7SetTimerQueueTimer
8450x42220SetUnhandledExceptionFilter
8460x78e61SetUserGeoID
8470x69004SetVDMCurrentDirectories
8480x636e7SetVolumeLabelA
8490x63281SetVolumeLabelW
8500x6b649SetVolumeMountPointA
8510x6a9dfSetVolumeMountPointW
8520x23b6fSetWaitableTimer
8530x67005SetupComm
8540x72b13ShowConsoleCursor
8550x6499dSignalObjectAndWait
8560x30550SizeofResource
8570x24eeSleep
8580x1e88SleepEx
8590x37a5fSuspendThread
8600x21804SwitchToFiber
8610xe029SwitchToThread
8620x236b3SystemTimeToFileTime
8630x21020SystemTimeToTzSpecificLocalTime
8640x6c867TerminateJobObject
8650x2014TerminateProcess
8660x26930TerminateThread
8670xf0dfTermsrvAppInstallMode
8680x37b08Thread32First
8690x37c69Thread32Next
8700x278dfTlsAlloc
8710xeb7dTlsFree
8720x220e0TlsGetValue
8730x1ba69TlsSetValue
8740x66343Toolhelp32ReadProcessMemory
8750x1f24bTransactNamedPipe
8760x67bd7TransmitCommChar
8770x87d35TryEnterCriticalSection
8780x5bcb8TzSpecificLocalTimeToSystemTime
8790x62367UTRegister
8800x7fd71UTUnRegister
8810x3690dUnhandledExceptionFilter
8820xd216UnlockFile
8830xd1b0UnlockFileEx
8840x23f41UnmapViewOfFile
8850x750deUnregisterConsoleIME
8860x32594UnregisterWait
8870x7d78UnregisterWaitEx
8880x7082fUpdateResourceA
8890x706ceUpdateResourceW
8900x75b1cVDMConsoleOperation
8910x69961VDMOperationStarted
8920x7ad71ValidateLCType
8930xa8c9ValidateLocale
8940x32a79VerLanguageNameA
8950x33410VerLanguageNameW
8960x87d56VerSetConditionMask
8970x30f03VerifyConsoleIoHandle
8980x622bdVerifyVersionInfoA
8990x1cb59VerifyVersionInfoW
9000x245a9VirtualAlloc
9010x24545VirtualAllocEx
9020x23fbeVirtualFree
9030x23f79VirtualFreeEx
9040x2adaVirtualLock
9050x1ff3VirtualProtect
9060x1a9cVirtualProtectEx
9070x26ed9VirtualQuery
9080x26ea8VirtualQueryEx
9090xf3f7VirtualUnlock
9100x68d9WTSGetActiveConsoleSessionId
9110x67c61WaitCommEvent
9120x5c511WaitForDebugEvent
9130x22fa6WaitForMultipleObjects
9140x21f5aWaitForMultipleObjectsEx
9150x21c7bWaitForSingleObject
9160x21c96WaitForSingleObjectEx
9170x62de9WaitNamedPipeA
9180x312bWaitNamedPipeW
9190x23143WideCharToMultiByte
9200x6424eWinExec
9210x5edbaWow64DisableWow64FsRedirection
9220x5ed93Wow64EnableWow64FsRedirection
9230x5ede4Wow64RevertWow64FsRedirection
9240x320f5WriteConsoleA
9250x7406dWriteConsoleInputA
9260x72a53WriteConsoleInputVDMA
9270x72a76WriteConsoleInputVDMW
9280x74090WriteConsoleInputW
9290x737edWriteConsoleOutputA
9300x73b99WriteConsoleOutputAttribute
9310x73b4dWriteConsoleOutputCharacterA
9320x73b73WriteConsoleOutputCharacterW
9330x737c9WriteConsoleOutputW
9340xe5a4WriteConsoleW
9350x25531WriteFile
9360x5ec01WriteFileEx
9370xdb29WriteFileGather
9380x5dddfWritePrivateProfileSectionA
9390x5de26WritePrivateProfileSectionW
9400x35aedWritePrivateProfileStringA
9410xeca4WritePrivateProfileStringW
9420x5e019WritePrivateProfileStructA
9430x5e15aWritePrivateProfileStructW
9440x2365WriteProcessMemory
9450x5e2e8WriteProfileSectionA
9460x5e303WriteProfileSectionW
9470x5e2acWriteProfileStringA
9480xede5WriteProfileStringW
9490x6c6f8WriteTapemark
9500x6cd5bZombifyActCtx
9510x1234c_hread
9520x61ccb_hwrite
9530x12829_lclose
9540x61c98_lcreat
9550x1237a_llseek
9560x61c46_lopen
9570x1234c_lread
9580x61ccb_lwrite
9590x20f41lstrcat
9600x20f41lstrcatA
9610x1c36flstrcatW
9620x1c7a8lstrcmp
9630x1c7a8lstrcmpA
9640x2efablstrcmpW
9650x1f2edlstrcmpi
9660x1f2edlstrcmpiA
9670x1b06alstrcmpiW
9680x1da94lstrcpy
9690x1da94lstrcpyA
9700x23f02lstrcpyW
9710x1c0e3lstrcpyn
9720x1c0e3lstrcpynA
9730x1bda9lstrcpynW
9740x1be30lstrlen
9750x1be30lstrlenA
9760x222c9lstrlenW
module_nameKERNEL32.dll
flags0
timestamp2009-03-21 11:43:27
version0.0
ordinal_base1
nFunctions976
nNames976
Names(976)0x81c60
Functions(976)0x80d20
NameOrdinals(976)0x82ba0

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows NT BASE API Client DLL
FileVersion5.2.3790.4480 (srv03_sp2_gdr.090321-1244)
InternalNamekernel32
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamekernel32
ProductNameMicrosoft® Windows® Operating System
ProductVersion5.2.3790.4480

VS_FIXEDFILEINFO

FileVersion5.2.3790.4480
ProductVersion5.2.3790.4480
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
01038336DLL03/21/2009 17:08:26#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK