| filename | kernel32.dll | |
|---|---|---|
| size | 857088 (0xd1400) | |
| md5 | 4605f7ee9805f7e1c98d6c959dd2949c | |
| type | PE32 executable (DLL) (console) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xe0 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 147 | 30729 | 49 |
| 1 | 0 | 877 |
| 146 | 30729 | 1 |
| 149 | 30729 | 7 |
| 131 | 30729 | 246 |
| 132 | 30729 | 227 |
| 148 | 30729 | 1 |
| 145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0xc44c1 | 0xc4600 | R-X CODE | |
| .data | 0xc6000 | 0xfec | 0xe00 | RW- IDATA | |
| .rsrc | 0xc7000 | 0x520 | 0x600 | R-- IDATA | |
| .reloc | 0xc8000 | 0xb098 | 0xb200 | R-- IDATA DISCARDABLE |
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| API-MS-Win-Core-RtlSupport-L1-1-0.dll | 3 | RtlUnwind | |
| API-MS-Win-Core-RtlSupport-L1-1-0.dll | RtlCaptureContext | ||
| API-MS-Win-Core-RtlSupport-L1-1-0.dll | 1 | RtlCaptureStackBackTrace | |
| ntdll.dll | 1069 | RtlQueryEnvironmentVariable | |
| ntdll.dll | 1329 | TpCallbackMayRunLong | |
| ntdll.dll | 1320 | TpAllocIoCompletion | |
| ntdll.dll | 1323 | TpAllocWait | |
| ntdll.dll | 1322 | TpAllocTimer | |
| ntdll.dll | 1324 | TpAllocWork | |
| ntdll.dll | 1361 | TpSimpleTryPost | |
| ntdll.dll | 1319 | TpAllocCleanupGroup | |
| ntdll.dll | 1345 | TpQueryPoolStackInformation | |
| ntdll.dll | 1358 | TpSetPoolStackInformation | |
| ntdll.dll | 1357 | TpSetPoolMinThreads | |
| ntdll.dll | 1321 | TpAllocPool | |
| ntdll.dll | 226 | NtCreateEvent | |
| ntdll.dll | 274 | NtDuplicateObject | |
| ntdll.dll | 666 | RtlConvertSidToUnicodeString | |
| ntdll.dll | 336 | NtNotifyChangeKey | |
| ntdll.dll | 1131 | RtlRunOnceInitialize | |
| ntdll.dll | 464 | NtResetEvent | |
| ntdll.dll | 1253 | RtlValidSecurityDescriptor | |
| ntdll.dll | 1053 | RtlOpenCurrentUser | |
| ntdll.dll | 1934 | strncat | |
| ntdll.dll | 1850 | _strlwr | |
| ntdll.dll | 405 | NtQueryInstallUILanguage | |
| ntdll.dll | 1276 | RtlpConvertCultureNamesToLCIDs | |
| ntdll.dll | 1277 | RtlpConvertLCIDsToCultureNames | |
| ntdll.dll | 53 | EtwEventEnabled | |
| ntdll.dll | 1162 | RtlSetProcessPreferredUILanguages | |
| ntdll.dll | 801 | RtlExpandEnvironmentStrings_U | |
| ntdll.dll | 1219 | RtlUnicodeStringToInteger | |
| ntdll.dll | 993 | RtlLCIDToCultureName | |
| ntdll.dll | 906 | RtlIdnToUnicode | |
| ntdll.dll | 905 | RtlIdnToNameprepUnicode | |
| ntdll.dll | 904 | RtlIdnToAscii | |
| ntdll.dll | 986 | RtlIsNormalizedString | |
| ntdll.dll | 1041 | RtlNormalizeString | |
| ntdll.dll | 951 | RtlIntegerToUnicodeString | |
| ntdll.dll | 1817 | _aulldiv | |
| ntdll.dll | 1858 | _ui64tow | |
| ntdll.dll | 1881 | _wtol | |
| ntdll.dll | 1871 | _wcslwr | |
| ntdll.dll | 1214 | RtlUnhandledExceptionFilter | |
| ntdll.dll | 534 | NtTerminateProcess | |
| ntdll.dll | 1971 | wcsncpy | |
| ntdll.dll | 1970 | wcsncmp | |
| ntdll.dll | 1097 | RtlReadThreadProfilingData | |
| ntdll.dll | 1086 | RtlQueryThreadProfiling | |
| ntdll.dll | 753 | RtlDisableThreadProfiling | |
| ntdll.dll | 770 | RtlEnableThreadProfiling | |
| ntdll.dll | 934 | RtlInitializeExtendedContext | |
| ntdll.dll | 863 | RtlGetExtendedContextLength | |
| ntdll.dll | 670 | RtlCopyExtendedContext | |
| ntdll.dll | 435 | NtRaiseException | |
| ntdll.dll | 61 | EtwEventWriteNoRegistration | |
| ntdll.dll | 1102 | RtlRegisterWait | |
| ntdll.dll | 1155 | RtlSetIoCompletionCallback | |
| ntdll.dll | 1089 | RtlQueueWorkItem | |
| ntdll.dll | 741 | RtlDeregisterWait | |
| ntdll.dll | 341 | NtOpenEvent | |
| ntdll.dll | 465 | NtResetWriteWatch | |
| ntdll.dll | 308 | NtGetWriteWatch | |
| ntdll.dll | 331 | NtMapUserPhysicalPagesScatter | |
| ntdll.dll | 330 | NtMapUserPhysicalPages | |
| ntdll.dll | 293 | NtFreeUserPhysicalPages | |
| ntdll.dll | 179 | NtAllocateUserPhysicalPages | |
| ntdll.dll | 548 | NtUnlockVirtualMemory | |
| ntdll.dll | 326 | NtLockVirtualMemory | |
| ntdll.dll | 1051 | RtlOemStringToUnicodeString | |
| ntdll.dll | 1148 | RtlSetEnvironmentStrings | |
| ntdll.dll | 20 | CsrCaptureMessageBuffer | |
| ntdll.dll | 657 | RtlComputeImportTableHash | |
| ntdll.dll | 1886 | bsearch | |
| ntdll.dll | 772 | RtlEncodeSystemPointer | |
| ntdll.dll | 815 | RtlFindCharInUnicodeString | |
| ntdll.dll | 1042 | RtlNtPathNameToDosPathName | |
| ntdll.dll | 203 | NtApphelpCacheControl | |
| ntdll.dll | 1092 | RtlRandom | |
| ntdll.dll | 21 | CsrCaptureMessageMultiUnicodeStringsInPlace | |
| ntdll.dll | 813 | RtlFindActivationContextSectionGuid | |
| ntdll.dll | 814 | RtlFindActivationContextSectionString | |
| ntdll.dll | 756 | RtlDoesFileExists_U | |
| ntdll.dll | 682 | RtlCreateActivationContext | |
| ntdll.dll | 33 | DbgPrintEx | |
| ntdll.dll | 909 | RtlImageNtHeaderEx | |
| ntdll.dll | 1170 | RtlSetThreadPreferredUILanguages | |
| ntdll.dll | 1063 | RtlQueryActivationContextApplicationSettings | |
| ntdll.dll | 894 | RtlGetThreadPreferredUILanguages | |
| ntdll.dll | 1073 | RtlQueryInformationActivationContext | |
| ntdll.dll | 1030 | RtlMultiAppendUnicodeStringBuffer | |
| ntdll.dll | 1279 | RtlpEnsureBufferSize | |
| ntdll.dll | 874 | RtlGetLengthWithoutLastFullDosOrNtPathElement | |
| ntdll.dll | 1273 | RtlpApplyLengthFunction | |
| ntdll.dll | 849 | RtlGetActiveActivationContext | |
| ntdll.dll | 716 | RtlDeactivateActivationContext | |
| ntdll.dll | 582 | RtlActivateActivationContext | |
| ntdll.dll | 1272 | RtlZombifyActivationContext | |
| ntdll.dll | 1103 | RtlReleaseActivationContext | |
| ntdll.dll | 601 | RtlAddRefActivationContext | |
| ntdll.dll | 494 | NtSetInformationJobObject | |
| ntdll.dll | 231 | NtCreateJobSet | |
| ntdll.dll | 396 | NtQueryInformationJobObject | |
| ntdll.dll | 533 | NtTerminateJobObject | |
| ntdll.dll | 205 | NtAssignProcessToJobObject | |
| ntdll.dll | 345 | NtOpenJobObject | |
| ntdll.dll | 230 | NtCreateJobObject | |
| ntdll.dll | 1951 | tolower | |
| ntdll.dll | 1885 | atol | |
| ntdll.dll | 1894 | isdigit | |
| ntdll.dll | 1952 | toupper | |
| ntdll.dll | 854 | RtlGetCurrentDirectory_U | |
| ntdll.dll | 671 | RtlCopyLuid | |
| ntdll.dll | 841 | RtlFreeOemString | |
| ntdll.dll | 687 | RtlCreateEnvironment | |
| ntdll.dll | 688 | RtlCreateEnvironmentEx | |
| ntdll.dll | 744 | RtlDestroyEnvironment | |
| ntdll.dll | 391 | NtQueryEvent | |
| ntdll.dll | 19 | CsrAllocateMessagePointer | |
| ntdll.dll | 270 | NtDeviceIoControlFile | |
| ntdll.dll | 696 | RtlCreateQueryDebugBuffer | |
| ntdll.dll | 1080 | RtlQueryProcessDebugInformation | |
| ntdll.dll | 750 | RtlDestroyQueryDebugBuffer | |
| ntdll.dll | 332 | NtMapViewOfSection | |
| ntdll.dll | 549 | NtUnmapViewOfSection | |
| ntdll.dll | 845 | RtlFreeUserStack | |
| ntdll.dll | 1060 | RtlProcessFlsData | |
| ntdll.dll | 608 | RtlAllocateActivationContextStack | |
| ntdll.dll | 836 | RtlFreeActivationContextStack | |
| ntdll.dll | 708 | RtlCreateUserStack | |
| ntdll.dll | 1335 | TpCaptureCaller | |
| ntdll.dll | 480 | NtSetContextThread | |
| ntdll.dll | 298 | NtGetContextThread | |
| ntdll.dll | 609 | RtlAllocateAndInitializeSid | |
| ntdll.dll | 842 | RtlFreeSid | |
| ntdll.dll | 526 | NtSignalAndWaitForSingleObject | |
| ntdll.dll | 1129 | RtlRunOnceComplete | |
| ntdll.dll | 1128 | RtlRunOnceBeginInitialize | |
| ntdll.dll | 1130 | RtlRunOnceExecuteOnce | |
| ntdll.dll | 1183 | RtlSleepConditionVariableSRW | |
| ntdll.dll | 1182 | RtlSleepConditionVariableCS | |
| ntdll.dll | 353 | NtOpenPrivateNamespace | |
| ntdll.dll | 240 | NtCreatePrivateNamespace | |
| ntdll.dll | 268 | NtDeletePrivateNamespace | |
| ntdll.dll | 942 | RtlInitializeSRWLock | |
| ntdll.dll | 599 | RtlAddIntegrityLabelToBoundaryDescriptor | |
| ntdll.dll | 603 | RtlAddSIDToBoundaryDescriptor | |
| ntdll.dll | 686 | RtlCreateBoundaryDescriptor | |
| ntdll.dll | 581 | RtlAcquireSRWLockShared | |
| ntdll.dll | 1110 | RtlReleaseSRWLockShared | |
| ntdll.dll | 379 | NtProtectVirtualMemory | |
| ntdll.dll | 1931 | strcpy_s | |
| ntdll.dll | 457 | NtReplacePartitionUnit | |
| ntdll.dll | 653 | RtlCompareUnicodeString | |
| ntdll.dll | 1091 | RtlRaiseStatus | |
| ntdll.dll | 401 | NtQueryInformationToken | |
| ntdll.dll | 943 | RtlInitializeSid | |
| ntdll.dll | 1189 | RtlSubAuthoritySid | |
| ntdll.dll | 122 | LdrLoadDll | |
| ntdll.dll | 115 | LdrGetProcedureAddress | |
| ntdll.dll | 146 | LdrUnloadDll | |
| ntdll.dll | 1083 | RtlQueryRegistryValues | |
| ntdll.dll | 426 | NtQuerySystemInformationEx | |
| ntdll.dll | 878 | RtlGetNativeSystemInformation | |
| ntdll.dll | 720 | RtlDecodeSystemPointer | |
| ntdll.dll | 1307 | RtlxAnsiStringToUnicodeSize | |
| ntdll.dll | 316 | NtIsSystemResumeAutomatic | |
| ntdll.dll | 300 | NtGetDevicePowerState | |
| ntdll.dll | 517 | NtSetThreadExecutionState | |
| ntdll.dll | 314 | NtInitiatePowerAction | |
| ntdll.dll | 369 | NtPowerInformation | |
| ntdll.dll | 523 | NtSetVolumeInformationFile | |
| ntdll.dll | 1070 | RtlQueryEnvironmentVariable_U | |
| ntdll.dll | 867 | RtlGetFullPathName_U | |
| ntdll.dll | 985 | RtlIsNameLegalDOS8Dot3 | |
| ntdll.dll | 857 | RtlGetCurrentProcessorNumberEx | |
| ntdll.dll | 1814 | _allshl | |
| ntdll.dll | 363 | NtOpenThreadToken | |
| ntdll.dll | 499 | NtSetInformationThread | |
| ntdll.dll | 121 | LdrLoadAlternateResourceModuleEx | |
| ntdll.dll | 120 | LdrLoadAlternateResourceModule | |
| ntdll.dll | 151 | LdrpResGetMappingSize | |
| ntdll.dll | 138 | LdrRscIsTypeExist | |
| ntdll.dll | 107 | LdrFindResource_U | |
| ntdll.dll | 1848 | _strcmpi | |
| ntdll.dll | 1935 | strncat_s | |
| ntdll.dll | 1928 | strchr | |
| ntdll.dll | 915 | RtlInitAnsiStringEx | |
| ntdll.dll | 704 | RtlCreateUnicodeString | |
| ntdll.dll | 1236 | RtlUpcaseUnicodeChar | |
| ntdll.dll | 1980 | wcstoul | |
| ntdll.dll | 114 | LdrGetFileNameFromLoadAsDataTable | |
| ntdll.dll | 1975 | wcsrchr | |
| ntdll.dll | 431 | NtQueryVirtualMemory | |
| ntdll.dll | 711 | RtlCultureNameToLCID | |
| ntdll.dll | 134 | LdrResFindResourceDirectory | |
| ntdll.dll | 133 | LdrResFindResource | |
| ntdll.dll | 106 | LdrFindResourceEx_U | |
| ntdll.dll | 152 | LdrpResGetResourceDirectory | |
| ntdll.dll | 907 | RtlImageDirectoryEntryToData | |
| ntdll.dll | 135 | LdrResGetRCConfig | |
| ntdll.dll | 1258 | RtlVerifyVersionInfo | |
| ntdll.dll | 887 | RtlGetProductInfo | |
| ntdll.dll | 1002 | RtlLcidToLocaleName | |
| ntdll.dll | 895 | RtlGetUILanguageInfo | |
| ntdll.dll | 235 | NtCreateMailslotFile | |
| ntdll.dll | 806 | RtlExtendedLargeIntegerDivide | |
| ntdll.dll | 1849 | _stricmp | |
| ntdll.dll | 639 | RtlCleanUpTEBLangLists | |
| ntdll.dll | 1169 | RtlSetThreadPoolStartFunc | |
| ntdll.dll | 140 | LdrSetDllManifestProber | |
| ntdll.dll | 1173 | RtlSetUnhandledExceptionFilter | |
| ntdll.dll | 771 | RtlEncodePointer | |
| ntdll.dll | 580 | RtlAcquireSRWLockExclusive | |
| ntdll.dll | 1109 | RtlReleaseSRWLockExclusive | |
| ntdll.dll | 126 | LdrQueryImageFileExecutionOptions | |
| ntdll.dll | 908 | RtlImageNtHeader | |
| ntdll.dll | 1175 | RtlSetUserValueHeap | |
| ntdll.dll | 1094 | RtlReAllocateHeap | |
| ntdll.dll | 610 | RtlAllocateHandle | |
| ntdll.dll | 838 | RtlFreeHandle | |
| ntdll.dll | 740 | RtlDeregisterSecureMemoryCacheCallback | |
| ntdll.dll | 1100 | RtlRegisterSecureMemoryCacheCallback | |
| ntdll.dll | 648 | RtlCompactHeap | |
| ntdll.dll | 1181 | RtlSizeHeap | |
| ntdll.dll | 898 | RtlGetUserInfoHeap | |
| ntdll.dll | 1014 | RtlLockHeap | |
| ntdll.dll | 989 | RtlIsValidHandle | |
| ntdll.dll | 1230 | RtlUnlockHeap | |
| ntdll.dll | 425 | NtQuerySystemInformation | |
| ntdll.dll | 922 | RtlInitString | |
| ntdll.dll | 513 | NtSetSystemEnvironmentValueEx | |
| ntdll.dll | 846 | RtlGUIDFromString | |
| ntdll.dll | 424 | NtQuerySystemEnvironmentValueEx | |
| ntdll.dll | 1948 | swprintf_s | |
| ntdll.dll | 1807 | _alldiv | |
| ntdll.dll | 286 | NtFlushBuffersFile | |
| ntdll.dll | 872 | RtlGetLastNtStatus | |
| ntdll.dll | 759 | RtlDosPathNameToNtPathName_U_WithStatus | |
| ntdll.dll | 790 | RtlEqualSid | |
| ntdll.dll | 1072 | RtlQueryInformationAcl | |
| ntdll.dll | 848 | RtlGetAce | |
| ntdll.dll | 436 | NtRaiseHardError | |
| ntdll.dll | 432 | NtQueryVolumeInformationFile | |
| ntdll.dll | 100 | LdrAddRefDll | |
| ntdll.dll | 233 | NtCreateKeyTransacted | |
| ntdll.dll | 752 | RtlDetermineDosPathNameType_U | |
| ntdll.dll | 1867 | _vsnwprintf | |
| ntdll.dll | 1221 | RtlUnicodeStringToOemString | |
| ntdll.dll | 1266 | RtlWow64EnableFsRedirection | |
| ntdll.dll | 207 | NtCancelIoFile | |
| ntdll.dll | 209 | NtCancelSynchronousIoFile | |
| ntdll.dll | 335 | NtNotifyChangeDirectoryFile | |
| ntdll.dll | 584 | RtlActivateActivationContextUnsafeFast | |
| ntdll.dll | 717 | RtlDeactivateActivationContextUnsafeFast | |
| ntdll.dll | 387 | NtQueryDirectoryFile | |
| ntdll.dll | 555 | NtWaitForSingleObject | |
| ntdll.dll | 892 | RtlGetThreadErrorMode | |
| ntdll.dll | 1167 | RtlSetThreadErrorMode | |
| ntdll.dll | 1157 | RtlSetLastWin32ErrorAndNtStatusFromNtStatus | |
| ntdll.dll | 355 | NtOpenProcessToken | |
| ntdll.dll | 1044 | RtlNtStatusToDosErrorNoTeb | |
| ntdll.dll | 55 | EtwEventRegister | |
| ntdll.dll | 57 | EtwEventWrite | |
| ntdll.dll | 56 | EtwEventUnregister | |
| ntdll.dll | 246 | NtCreateSection | |
| ntdll.dll | 418 | NtQuerySection | |
| ntdll.dll | 900 | RtlGetVersion | |
| ntdll.dll | 1068 | RtlQueryElevationFlags | |
| ntdll.dll | 497 | NtSetInformationProcess | |
| ntdll.dll | 636 | RtlCharToInteger | |
| ntdll.dll | 1938 | strncpy_s | |
| ntdll.dll | 18 | CsrAllocateCaptureBuffer | |
| ntdll.dll | 22 | CsrCaptureMessageString | |
| ntdll.dll | 26 | CsrFreeCaptureBuffer | |
| ntdll.dll | 877 | RtlGetLongestNtPathLength | |
| ntdll.dll | 791 | RtlEqualString | |
| ntdll.dll | 837 | RtlFreeAnsiString | |
| ntdll.dll | 680 | RtlCopyUnicodeString | |
| ntdll.dll | 758 | RtlDosPathNameToNtPathName_U | |
| ntdll.dll | 323 | NtLockFile | |
| ntdll.dll | 437 | NtReadFile | |
| ntdll.dll | 987 | RtlIsTextUnicode | |
| ntdll.dll | 269 | NtDeleteValueKey | |
| ntdll.dll | 279 | NtEnumerateKey | |
| ntdll.dll | 833 | RtlFormatCurrentUserKeyPath | |
| ntdll.dll | 621 | RtlAppendUnicodeToString | |
| ntdll.dll | 620 | RtlAppendUnicodeStringToString | |
| ntdll.dll | 1059 | RtlPrefixUnicodeString | |
| ntdll.dll | 30 | CsrVerifyRegion | |
| ntdll.dll | 181 | NtAllocateVirtualMemory | |
| ntdll.dll | 560 | NtWriteFile | |
| ntdll.dll | 294 | NtFreeVirtualMemory | |
| ntdll.dll | 547 | NtUnlockFile | |
| ntdll.dll | 282 | NtEnumerateValueKey | |
| ntdll.dll | 1032 | RtlMultiByteToUnicodeSize | |
| ntdll.dll | 1223 | RtlUnicodeToMultiByteN | |
| ntdll.dll | 1031 | RtlMultiByteToUnicodeN | |
| ntdll.dll | 1064 | RtlQueryAtomInAtomTable | |
| ntdll.dll | 393 | NtQueryInformationAtom | |
| ntdll.dll | 726 | RtlDeleteAtomFromAtomTable | |
| ntdll.dll | 262 | NtDeleteAtom | |
| ntdll.dll | 1020 | RtlLookupAtomInAtomTable | |
| ntdll.dll | 285 | NtFindAtom | |
| ntdll.dll | 593 | RtlAddAtomToAtomTable | |
| ntdll.dll | 170 | NtAddAtom | |
| ntdll.dll | 684 | RtlCreateAtomTable | |
| ntdll.dll | 743 | RtlDestroyAtomTable | |
| ntdll.dll | 760 | RtlDosPathNameToRelativeNtPathName_U | |
| ntdll.dll | 1107 | RtlReleaseRelativeName | |
| ntdll.dll | 792 | RtlEqualUnicodeString | |
| ntdll.dll | 981 | RtlIsDosDeviceName_U | |
| ntdll.dll | 46 | DbgUiStopDebugging | |
| ntdll.dll | 39 | DbgUiContinue | |
| ntdll.dll | 47 | DbgUiWaitStateChange | |
| ntdll.dll | 40 | DbgUiConvertStateChangeStructure | |
| ntdll.dll | 288 | NtFlushInstructionCache | |
| ntdll.dll | 400 | NtQueryInformationThread | |
| ntdll.dll | 42 | DbgUiGetThreadDebugObject | |
| ntdll.dll | 491 | NtSetInformationDebugObject | |
| ntdll.dll | 43 | DbgUiIssueRemoteBreakin | |
| ntdll.dll | 38 | DbgUiConnectToDbg | |
| ntdll.dll | 41 | DbgUiDebugActiveProcess | |
| ntdll.dll | 27 | CsrGetProcessId | |
| ntdll.dll | 354 | NtOpenProcess | |
| ntdll.dll | 516 | NtSetSystemTime | |
| ntdll.dll | 1106 | RtlReleasePrivilege | |
| ntdll.dll | 576 | RtlAcquirePrivilege | |
| ntdll.dll | 1809 | _allmul | |
| ntdll.dll | 713 | RtlCutoverTimeToSystemTime | |
| ntdll.dll | 514 | NtSetSystemInformation | |
| ntdll.dll | 1194 | RtlTimeFieldsToTime | |
| ntdll.dll | 1198 | RtlTimeToTimeFields | |
| ntdll.dll | 398 | NtQueryInformationProcess | |
| ntdll.dll | 858 | RtlGetCurrentTransaction | |
| ntdll.dll | 1145 | RtlSetCurrentTransaction | |
| ntdll.dll | 1870 | _wcsicmp | |
| ntdll.dll | 1972 | wcsncpy_s | |
| ntdll.dll | 1961 | wcscat_s | |
| ntdll.dll | 1058 | RtlPrefixString | |
| ntdll.dll | 1977 | wcsstr | |
| ntdll.dll | 1962 | wcschr | |
| ntdll.dll | 705 | RtlCreateUnicodeStringFromAsciiz | |
| ntdll.dll | 914 | RtlInitAnsiString | |
| ntdll.dll | 616 | RtlAnsiStringToUnicodeString | |
| ntdll.dll | 924 | RtlInitUnicodeStringEx | |
| ntdll.dll | 160 | NlsMbCodePageTag | |
| ntdll.dll | 1309 | RtlxUnicodeStringToAnsiSize | |
| ntdll.dll | 1217 | RtlUnicodeStringToAnsiString | |
| ntdll.dll | 778 | RtlEnterCriticalSection | |
| ntdll.dll | 1003 | RtlLeaveCriticalSection | |
| ntdll.dll | 1043 | RtlNtStatusToDosError | |
| ntdll.dll | 755 | RtlDnsHostNameToComputerName | |
| ntdll.dll | 844 | RtlFreeUnicodeString | |
| ntdll.dll | 1224 | RtlUnicodeToMultiByteSize | |
| ntdll.dll | 1966 | wcscspn | |
| ntdll.dll | 1965 | wcscpy_s | |
| ntdll.dll | 1915 | memmove | |
| ntdll.dll | 1839 | _memicmp | |
| ntdll.dll | 232 | NtCreateKey | |
| ntdll.dll | 522 | NtSetValueKey | |
| ntdll.dll | 289 | NtFlushKey | |
| ntdll.dll | 923 | RtlInitUnicodeString | |
| ntdll.dll | 346 | NtOpenKey | |
| ntdll.dll | 430 | NtQueryValueKey | |
| ntdll.dll | 212 | NtClose | |
| ntdll.dll | 729 | RtlDeleteCriticalSection | |
| ntdll.dll | 930 | RtlInitializeCriticalSection | |
| ntdll.dll | 24 | CsrClientCallServer | |
| ntdll.dll | 493 | NtSetInformationFile | |
| ntdll.dll | 511 | NtSetSecurityObject | |
| ntdll.dll | 486 | NtSetEaFile | |
| ntdll.dll | 420 | NtQuerySecurityObject | |
| ntdll.dll | 1005 | RtlLengthSecurityDescriptor | |
| ntdll.dll | 390 | NtQueryEaFile | |
| ntdll.dll | 395 | NtQueryInformationFile | |
| ntdll.dll | 343 | NtOpenFile | |
| ntdll.dll | 1917 | memset | |
| ntdll.dll | 1872 | _wcsnicmp | |
| ntdll.dll | 228 | NtCreateFile | |
| ntdll.dll | 297 | NtFsControlFile | |
| ntdll.dll | 1913 | memcpy | |
| ntdll.dll | 1156 | RtlSetLastWin32Error | |
| ntdll.dll | 611 | RtlAllocateHeap | |
| ntdll.dll | 681 | RtlCreateAcl | |
| ntdll.dll | 585 | RtlAddAccessAllowedAce | |
| ntdll.dll | 698 | RtlCreateSecurityDescriptor | |
| ntdll.dll | 1159 | RtlSetOwnerSecurityDescriptor | |
| ntdll.dll | 1152 | RtlSetGroupSecurityDescriptor | |
| ntdll.dll | 1146 | RtlSetDaclSecurityDescriptor | |
| ntdll.dll | 839 | RtlFreeHeap | |
| ntdll.dll | 933 | RtlInitializeExceptionChain | |
| ntdll.dll | 339 | NtOpenDirectoryObject | |
| ntdll.dll | 422 | NtQuerySymbolicLinkObject | |
| ntdll.dll | 361 | NtOpenSymbolicLinkObject | |
| ntdll.dll | 1974 | wcspbrk | |
| ntdll.dll | 749 | RtlDestroyProcessParameters | |
| ntdll.dll | 694 | RtlCreateProcessParametersEx | |
| ntdll.dll | 468 | NtResumeThread | |
| ntdll.dll | 32 | DbgPrint | |
| ntdll.dll | 453 | NtRemoveProcessDebug | |
| ntdll.dll | 128 | LdrQueryImageFileKeyOption | |
| ntdll.dll | 255 | NtCreateUserProcess | |
| ntdll.dll | 869 | RtlGetFullPathName_UstrEx | |
| ntdll.dll | 719 | RtlDecodePointer | |
| ntdll.dll | 992 | RtlKnownExceptionFilter | |
| ntdll.dll | 25 | CsrClientConnectToServer | |
| ntdll.dll | 553 | NtWaitForMultipleObjects | |
| ntdll.dll | 564 | NtYieldExecution | |
| ntdll.dll | 1090 | RtlRaiseException | |
| ntdll.dll | 463 | NtRequestWaitReplyPort | |
| ntdll.dll | 746 | RtlDestroyHeap | |
| ntdll.dll | 690 | RtlCreateHeap | |
| ntdll.dll | 221 | NtConnectPort | |
| ntdll.dll | 1927 | strcat_s | |
| ntdll.dll | 348 | NtOpenKeyTransacted | |
| ntdll.dll | 408 | NtQueryKey | |
| ntdll.dll | 347 | NtOpenKeyEx | |
| ntdll.dll | 349 | NtOpenKeyTransactedEx | |
| ntdll.dll | 1252 | RtlValidRelativeSecurityDescriptor | |
| ntdll.dll | 266 | NtDeleteKey | |
| ntdll.dll | 320 | NtLoadKey | |
| ntdll.dll | 544 | NtUnloadKey | |
| ntdll.dll | 337 | NtNotifyChangeMultipleKeys | |
| ntdll.dll | 466 | NtRestoreKey | |
| ntdll.dll | 474 | NtSaveKeyEx | |
| ntdll.dll | 1006 | RtlLengthSid | |
| ntdll.dll | 1026 | RtlMakeSelfRelativeSD | |
| ntdll.dll | 137 | LdrResSearchResource | |
| ntdll.dll | 441 | NtReadVirtualMemory | |
| ntdll.dll | 1851 | _strnicmp | |
| ntdll.dll | 1936 | strncmp | |
| ntdll.dll | 275 | NtDuplicateToken | |
| ntdll.dll | 1264 | RtlWerpReportException | |
| ntdll.dll | 1207 | RtlTryAcquirePebLock | |
| ntdll.dll | 1865 | _vsnprintf | |
| ntdll.dll | 1105 | RtlReleasePebLock | |
| ntdll.dll | 211 | NtClearEvent | |
| ntdll.dll | 650 | RtlCompareMemory | |
| ntdll.dll | 1369 | WerReportSQMEvent | |
| ntdll.dll | 147 | LdrUnlockLoaderLock | |
| ntdll.dll | 123 | LdrLockLoaderLock | |
| ntdll.dll | 163 | NtAccessCheck | |
| ntdll.dll | 1368 | VerSetConditionMask | |
| ntdll.dll | 1388 | WinSqmIsOptedIn | |
| ntdll.dll | 799 | RtlExitUserThread | |
| ntdll.dll | 798 | RtlExitUserProcess | |
| ntdll.dll | 1819 | _aullrem | |
| ntdll.dll | 563 | NtWriteVirtualMemory | |
| KERNELBASE.dll | 33 | BaseReleaseProcessDllPath | |
| KERNELBASE.dll | 30 | BaseGetProcessExePath | |
| KERNELBASE.dll | 29 | BaseGetProcessDllPath | |
| KERNELBASE.dll | 423 | LoadStringByReference | |
| KERNELBASE.dll | 384 | InternalLcidToName | |
| KERNELBASE.dll | 450 | NlsIsUserDefaultLocale | |
| KERNELBASE.dll | 332 | GetUserInfo | |
| KERNELBASE.dll | 281 | GetPtrCalDataArray | |
| KERNELBASE.dll | 280 | GetPtrCalData | |
| KERNELBASE.dll | 298 | GetStringTableEntry | |
| KERNELBASE.dll | 46 | CheckGroupPolicyEnabled | |
| KERNELBASE.dll | 467 | OpenRegKey | |
| KERNELBASE.dll | 189 | GetCPHashNode | |
| KERNELBASE.dll | 388 | Internal_EnumSystemCodePages | |
| KERNELBASE.dll | 392 | Internal_EnumUILanguages | |
| KERNELBASE.dll | 387 | Internal_EnumLanguageGroupLocales | |
| KERNELBASE.dll | 389 | Internal_EnumSystemLanguageGroups | |
| KERNELBASE.dll | 386 | Internal_EnumDateFormats | |
| KERNELBASE.dll | 391 | Internal_EnumTimeFormats | |
| KERNELBASE.dll | 453 | NlsValidateLocale | |
| KERNELBASE.dll | 385 | Internal_EnumCalendarInfo | |
| KERNELBASE.dll | 566 | SpecialMBToWC | |
| KERNELBASE.dll | 192 | GetCalendar | |
| KERNELBASE.dll | 333 | GetUserInfoWord | |
| KERNELBASE.dll | 247 | GetLocaleInfoHelper | |
| KERNELBASE.dll | 263 | GetNamedLocaleHashNode | |
| KERNELBASE.dll | 412 | LCIDToLocaleName | |
| KERNELBASE.dll | 411 | KernelBaseGetGlobalData | |
| KERNELBASE.dll | 393 | InvalidateTzSpecificCache | |
| KERNELBASE.dll | 394 | IsDBCSLeadByte | |
| KERNELBASE.dll | 72 | CreateFileMappingNumaW | |
| KERNELBASE.dll | 57 | CompareStringA | |
| KERNELBASE.dll | 422 | LoadStringBaseExW | |
| KERNELBASE.dll | 31 | BaseInvalidateDllSearchPathCache | |
| KERNELBASE.dll | 32 | BaseInvalidateProcessSearchPathCache | |
| KERNELBASE.dll | 27 | BaseDllFreeResourceId | |
| KERNELBASE.dll | 28 | BaseDllMapResourceIdW | |
| KERNELBASE.dll | 331 | GetUserDefaultUILanguage | |
| KERNELBASE.dll | 137 | EnumUILanguagesW | |
| KERNELBASE.dll | 26 | AreFileApisANSI | |
| KERNELBASE.dll | 124 | EnumCalendarInfoExW | |
| KERNELBASE.dll | 125 | EnumCalendarInfoW | |
| KERNELBASE.dll | 127 | EnumDateFormatsExW | |
| KERNELBASE.dll | 128 | EnumDateFormatsW | |
| KERNELBASE.dll | 129 | EnumLanguageGroupLocalesW | |
| KERNELBASE.dll | 130 | EnumSystemCodePagesW | |
| KERNELBASE.dll | 131 | EnumSystemLanguageGroupsW | |
| KERNELBASE.dll | 133 | EnumSystemLocalesEx | |
| KERNELBASE.dll | 134 | EnumSystemLocalesW | |
| KERNELBASE.dll | 136 | EnumTimeFormatsW | |
| KERNELBASE.dll | 245 | GetLocaleInfoA | |
| KERNELBASE.dll | 299 | GetStringTypeA | |
| KERNELBASE.dll | 305 | GetSystemDefaultUILanguage | |
| KERNELBASE.dll | 395 | IsDBCSLeadByteEx | |
| KERNELBASE.dll | 441 | MapViewOfFileExNuma | |
| KERNELBASE.dll | 519 | SetFileApisToANSI | |
| KERNELBASE.dll | 520 | SetFileApisToOEM | |
| KERNELBASE.dll | 594 | VirtualAllocExNuma | |
| KERNELBASE.dll | 123 | EnumCalendarInfoExEx | |
| KERNELBASE.dll | 126 | EnumDateFormatsExEx | |
| KERNELBASE.dll | 135 | EnumTimeFormatsEx | |
| KERNELBASE.dll | 199 | GetCurrencyFormatEx | |
| KERNELBASE.dll | 219 | GetEraNameCountedString | |
| KERNELBASE.dll | 266 | GetNumberFormatEx | |
| KERNELBASE.dll | 304 | GetSystemDefaultLocaleName | |
| KERNELBASE.dll | 330 | GetUserDefaultLocaleName | |
| KERNELBASE.dll | 34 | BaseReleaseProcessExePath | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 46 | TlsGetValue | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 36 | SetThreadPriority | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 35 | SetProcessShutdownParameters | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 33 | SetPriorityClass | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 32 | ResumeThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 31 | QueueUserAPC | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 29 | ProcessIdToSessionId | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 27 | OpenThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 24 | GetThreadPriorityBoost | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 23 | GetThreadPriority | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 21 | GetStartupInfoW | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 19 | GetProcessTimes | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 16 | GetPriorityClass | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 15 | GetExitCodeThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 13 | GetCurrentThreadId | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 12 | GetCurrentThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 17 | GetProcessId | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 18 | GetProcessIdOfThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 22 | GetThreadId | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 11 | GetCurrentProcessId | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 4 | CreateRemoteThreadEx | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 14 | GetExitCodeProcess | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 45 | TlsFree | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 44 | TlsAlloc | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 43 | TerminateThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 42 | TerminateProcess | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 41 | SwitchToThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 40 | SuspendThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 38 | SetThreadStackGuarantee | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 37 | SetThreadPriorityBoost | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 26 | OpenProcessToken | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 47 | TlsSetValue | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 34 | SetProcessAffinityUpdateMode | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 30 | QueryProcessAffinityUpdateMode | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 20 | GetProcessVersion | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 3 | CreateRemoteThread | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 25 | InitializeProcThreadAttributeList | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 48 | UpdateProcThreadAttribute | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 6 | DeleteProcThreadAttributeList | |
| API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 10 | GetCurrentProcess | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 4 | HeapCreate | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 10 | HeapSetInformation | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 8 | HeapQueryInformation | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 7 | HeapLock | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 5 | HeapDestroy | |
| API-MS-Win-Core-Heap-L1-1-0.dll | GetProcessHeap | ||
| API-MS-Win-Core-Heap-L1-1-0.dll | 1 | GetProcessHeaps | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 15 | HeapWalk | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 14 | HeapValidate | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 13 | HeapUnlock | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 3 | HeapCompact | |
| API-MS-Win-Core-Heap-L1-1-0.dll | 12 | HeapSummary | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 3 | MapViewOfFileEx | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 5 | ReadProcessMemory | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 6 | UnmapViewOfFile | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 7 | VirtualAlloc | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 8 | VirtualAllocEx | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 9 | VirtualFree | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 10 | VirtualFreeEx | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 11 | VirtualProtect | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 15 | WriteProcessMemory | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 14 | VirtualQueryEx | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 13 | VirtualQuery | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 12 | VirtualProtectEx | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 1 | FlushViewOfFile | |
| API-MS-Win-Core-Memory-L1-1-0.dll | CreateFileMappingW | ||
| API-MS-Win-Core-Memory-L1-1-0.dll | 4 | OpenFileMappingW | |
| API-MS-Win-Core-Memory-L1-1-0.dll | 2 | MapViewOfFile | |
| API-MS-Win-Core-Handle-L1-1-0.dll | 1 | DuplicateHandle | |
| API-MS-Win-Core-Handle-L1-1-0.dll | 2 | GetHandleInformation | |
| API-MS-Win-Core-Handle-L1-1-0.dll | 3 | SetHandleInformation | |
| API-MS-Win-Core-Handle-L1-1-0.dll | CloseHandle | ||
| API-MS-Win-Core-Synch-L1-1-0.dll | 23 | OpenProcess | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 24 | OpenSemaphoreW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 25 | OpenWaitableTimerW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 26 | ReleaseMutex | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 29 | ReleaseSemaphore | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 22 | OpenMutexW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 32 | SetEvent | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 33 | SetWaitableTimer | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 35 | SleepEx | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 39 | WaitForMultipleObjectsEx | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 41 | WaitForSingleObjectEx | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 21 | OpenEventW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 20 | OpenEventA | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 17 | InitializeCriticalSectionEx | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 16 | InitializeCriticalSectionAndSpinCount | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 12 | CreateWaitableTimerExW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 11 | CreateSemaphoreExW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 3 | CreateEventA | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 6 | CreateEventW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 2 | CancelWaitableTimer | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 4 | CreateEventExA | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 5 | CreateEventExW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 7 | CreateMutexA | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 8 | CreateMutexExA | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 9 | CreateMutexExW | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 30 | ResetEvent | |
| API-MS-Win-Core-Synch-L1-1-0.dll | 10 | CreateMutexW | |
| API-MS-Win-Core-File-L1-1-0.dll | 44 | GetFullPathNameW | |
| API-MS-Win-Core-File-L1-1-0.dll | 43 | GetFullPathNameA | |
| API-MS-Win-Core-File-L1-1-0.dll | 69 | SetFileTime | |
| API-MS-Win-Core-File-L1-1-0.dll | 57 | QueryDosDeviceW | |
| API-MS-Win-Core-File-L1-1-0.dll | 4 | CreateFileW | |
| API-MS-Win-Core-File-L1-1-0.dll | 55 | LockFile | |
| API-MS-Win-Core-File-L1-1-0.dll | 37 | GetFileSize | |
| API-MS-Win-Core-File-L1-1-0.dll | 63 | SetEndOfFile | |
| API-MS-Win-Core-File-L1-1-0.dll | 73 | WriteFile | |
| API-MS-Win-Core-File-L1-1-0.dll | 67 | SetFilePointer | |
| API-MS-Win-Core-File-L1-1-0.dll | 58 | ReadFile | |
| API-MS-Win-Core-File-L1-1-0.dll | 74 | WriteFileEx | |
| API-MS-Win-Core-File-L1-1-0.dll | 75 | WriteFileGather | |
| API-MS-Win-Core-File-L1-1-0.dll | 41 | GetFinalPathNameByHandleA | |
| API-MS-Win-Core-File-L1-1-0.dll | 42 | GetFinalPathNameByHandleW | |
| API-MS-Win-Core-File-L1-1-0.dll | 62 | RemoveDirectoryW | |
| API-MS-Win-Core-File-L1-1-0.dll | 29 | GetDiskFreeSpaceW | |
| API-MS-Win-Core-File-L1-1-0.dll | 2 | CreateDirectoryW | |
| API-MS-Win-Core-File-L1-1-0.dll | 5 | DefineDosDeviceW | |
| API-MS-Win-Core-File-L1-1-0.dll | 16 | FindFirstFileExA | |
| API-MS-Win-Core-File-L1-1-0.dll | 17 | FindFirstFileExW | |
| API-MS-Win-Core-File-L1-1-0.dll | 11 | FindClose | |
| API-MS-Win-Core-File-L1-1-0.dll | 40 | GetFileType | |
| API-MS-Win-Core-File-L1-1-0.dll | 25 | FlushFileBuffers | |
| API-MS-Win-Core-File-L1-1-0.dll | 65 | SetFileAttributesW | |
| API-MS-Win-Core-File-L1-1-0.dll | 34 | GetFileAttributesExW | |
| API-MS-Win-Core-File-L1-1-0.dll | 7 | DeleteFileW | |
| API-MS-Win-Core-File-L1-1-0.dll | 39 | GetFileTime | |
| API-MS-Win-Core-File-L1-1-0.dll | 6 | DeleteFileA | |
| API-MS-Win-Core-File-L1-1-0.dll | 32 | GetFileAttributesA | |
| API-MS-Win-Core-File-L1-1-0.dll | 22 | FindNextFileW | |
| API-MS-Win-Core-File-L1-1-0.dll | 18 | FindFirstFileW | |
| API-MS-Win-Core-File-L1-1-0.dll | 45 | GetLogicalDriveStringsW | |
| API-MS-Win-Core-File-L1-1-0.dll | 50 | GetTempFileNameW | |
| API-MS-Win-Core-File-L1-1-0.dll | 52 | GetVolumeInformationW | |
| API-MS-Win-Core-File-L1-1-0.dll | CompareFileTime | ||
| API-MS-Win-Core-File-L1-1-0.dll | 1 | CreateDirectoryA | |
| API-MS-Win-Core-File-L1-1-0.dll | 9 | FileTimeToLocalFileTime | |
| API-MS-Win-Core-File-L1-1-0.dll | 10 | FileTimeToSystemTime | |
| API-MS-Win-Core-File-L1-1-0.dll | 12 | FindCloseChangeNotification | |
| API-MS-Win-Core-File-L1-1-0.dll | 15 | FindFirstFileA | |
| API-MS-Win-Core-File-L1-1-0.dll | 13 | FindFirstChangeNotificationA | |
| API-MS-Win-Core-File-L1-1-0.dll | 14 | FindFirstChangeNotificationW | |
| API-MS-Win-Core-File-L1-1-0.dll | 20 | FindNextChangeNotification | |
| API-MS-Win-Core-File-L1-1-0.dll | 21 | FindNextFileA | |
| API-MS-Win-Core-File-L1-1-0.dll | 26 | GetDiskFreeSpaceA | |
| API-MS-Win-Core-File-L1-1-0.dll | 27 | GetDiskFreeSpaceExA | |
| API-MS-Win-Core-File-L1-1-0.dll | 28 | GetDiskFreeSpaceExW | |
| API-MS-Win-Core-File-L1-1-0.dll | 72 | UnlockFileEx | |
| API-MS-Win-Core-File-L1-1-0.dll | 30 | GetDriveTypeA | |
| API-MS-Win-Core-File-L1-1-0.dll | 31 | GetDriveTypeW | |
| API-MS-Win-Core-File-L1-1-0.dll | 33 | GetFileAttributesExA | |
| API-MS-Win-Core-File-L1-1-0.dll | 35 | GetFileAttributesW | |
| API-MS-Win-Core-File-L1-1-0.dll | 36 | GetFileInformationByHandle | |
| API-MS-Win-Core-File-L1-1-0.dll | 38 | GetFileSizeEx | |
| API-MS-Win-Core-File-L1-1-0.dll | 51 | GetVolumeInformationByHandleW | |
| API-MS-Win-Core-File-L1-1-0.dll | 54 | LocalFileTimeToFileTime | |
| API-MS-Win-Core-File-L1-1-0.dll | 56 | LockFileEx | |
| API-MS-Win-Core-File-L1-1-0.dll | 60 | ReadFileScatter | |
| API-MS-Win-Core-File-L1-1-0.dll | 59 | ReadFileEx | |
| API-MS-Win-Core-File-L1-1-0.dll | 61 | RemoveDirectoryA | |
| API-MS-Win-Core-File-L1-1-0.dll | 64 | SetFileAttributesA | |
| API-MS-Win-Core-File-L1-1-0.dll | 66 | SetFileInformationByHandle | |
| API-MS-Win-Core-File-L1-1-0.dll | 68 | SetFilePointerEx | |
| API-MS-Win-Core-File-L1-1-0.dll | 70 | SetFileValidData | |
| API-MS-Win-Core-File-L1-1-0.dll | 71 | UnlockFile | |
| API-MS-Win-Core-IO-L1-1-0.dll | 6 | PostQueuedCompletionStatus | |
| API-MS-Win-Core-IO-L1-1-0.dll | 5 | GetQueuedCompletionStatusEx | |
| API-MS-Win-Core-IO-L1-1-0.dll | 4 | GetQueuedCompletionStatus | |
| API-MS-Win-Core-IO-L1-1-0.dll | 1 | CreateIoCompletionPort | |
| API-MS-Win-Core-IO-L1-1-0.dll | CancelIoEx | ||
| API-MS-Win-Core-IO-L1-1-0.dll | 3 | GetOverlappedResult | |
| API-MS-Win-Core-IO-L1-1-0.dll | 2 | DeviceIoControl | |
| API-MS-Win-Core-ThreadPool-L1-1-0.dll | 2 | ChangeTimerQueueTimer | |
| API-MS-Win-Core-ThreadPool-L1-1-0.dll | 16 | CreateTimerQueue | |
| API-MS-Win-Core-ThreadPool-L1-1-0.dll | 37 | UnregisterWaitEx | |
| API-MS-Win-Core-ThreadPool-L1-1-0.dll | 19 | DeleteTimerQueueTimer | |
| API-MS-Win-Core-ThreadPool-L1-1-0.dll | 18 | DeleteTimerQueueEx | |
| API-MS-Win-Core-ThreadPool-L1-1-0.dll | 17 | CreateTimerQueueTimer | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 8 | GetModuleHandleA | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 11 | GetModuleHandleW | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 9 | GetModuleHandleExA | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 10 | GetModuleHandleExW | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 15 | LoadResource | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 18 | LockResource | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 19 | SizeofResource | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 12 | GetProcAddress | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 6 | GetModuleFileNameA | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 4 | FreeLibraryAndExitThread | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 2 | FindStringOrdinal | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | DisableThreadLibraryCalls | ||
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 13 | LoadLibraryExA | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 7 | GetModuleFileNameW | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 1 | FindResourceExW | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 3 | FreeLibrary | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 14 | LoadLibraryExW | |
| API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 5 | FreeResource | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 7 | PeekNamedPipe | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 3 | DisconnectNamedPipe | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 2 | CreatePipe | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | ConnectNamedPipe | ||
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 4 | GetNamedPipeAttribute | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 5 | GetNamedPipeClientComputerNameW | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 10 | WaitNamedPipeW | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 8 | SetNamedPipeHandleState | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 1 | CreateNamedPipeW | |
| API-MS-Win-Core-NamedPipe-L1-1-0.dll | 9 | TransactNamedPipe | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 8 | IsWow64Process | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 9 | LCMapStringA | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 12 | LocalLock | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 13 | LocalReAlloc | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 14 | LocalUnlock | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 5 | GlobalAlloc | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 4 | FormatMessageW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 3 | FormatMessageA | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 15 | NeedCurrentDirectoryForExePathA | |
| API-MS-Win-Core-Misc-L1-1-0.dll | EnumSystemLocalesA | ||
| API-MS-Win-Core-Misc-L1-1-0.dll | 17 | PulseEvent | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 19 | Sleep | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 20 | Wow64DisableWow64FsRedirection | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 21 | Wow64RevertWow64FsRedirection | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 24 | lstrcmpW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 27 | lstrcmpiW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 29 | lstrcpynA | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 30 | lstrcpynW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 32 | lstrlenA | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 1 | FatalAppExitA | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 16 | NeedCurrentDirectoryForExePathW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 2 | FatalAppExitW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 10 | LocalAlloc | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 6 | GlobalFree | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 33 | lstrlenW | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 11 | LocalFree | |
| API-MS-Win-Core-Misc-L1-1-0.dll | 7 | IsProcessInJob | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 3 | GetLocalTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 10 | GetSystemTimeAdjustment | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 11 | GetSystemTimeAsFileTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 15 | GetTickCount64 | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 16 | GetTimeZoneInformation | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 17 | GetTimeZoneInformationForYear | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 18 | GetVersion | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 19 | GetVersionExA | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 20 | GetVersionExW | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 22 | GetWindowsDirectoryW | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 24 | SetLocalTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 26 | SystemTimeToTzSpecificLocalTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 27 | TzSpecificLocalTimeToSystemTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 2 | GetDynamicTimeZoneInformation | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 4 | GetLogicalProcessorInformation | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 8 | GetSystemInfo | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 5 | GetLogicalProcessorInformationEx | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 21 | GetWindowsDirectoryA | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 23 | GlobalMemoryStatusEx | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 14 | GetTickCount | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 9 | GetSystemTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 25 | SystemTimeToFileTime | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | 1 | GetComputerNameExW | |
| API-MS-Win-Core-SysInfo-L1-1-0.dll | GetComputerNameExA | ||
| API-MS-Win-Core-Localization-L1-1-0.dll | 45 | VerLanguageNameA | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 2 | FindNLSStringEx | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 44 | SetThreadLocale | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 40 | NlsWriteEtwEvent | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 36 | NlsEventDataDescCreate | |
| API-MS-Win-Core-Localization-L1-1-0.dll | ConvertDefaultLocale | ||
| API-MS-Win-Core-Localization-L1-1-0.dll | 46 | VerLanguageNameW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 43 | SetLocaleInfoW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 42 | SetCalendarInfoW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 33 | LCMapStringW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 30 | IsValidLocale | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 29 | IsValidLanguageGroup | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 28 | IsValidCodePage | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 27 | IsNLSDefinedString | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 24 | GetUserDefaultLCID | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 25 | GetUserDefaultLangID | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 20 | GetThreadLocale | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 17 | GetSystemDefaultLCID | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 18 | GetSystemDefaultLangID | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 16 | GetProcessPreferredUILanguages | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 15 | GetOEMCP | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 12 | GetLocaleInfoW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 6 | GetCPInfoExW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 5 | GetCPInfo | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 3 | GetACP | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 10 | GetFileMUIPath | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 1 | FindNLSString | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 39 | NlsUpdateSystemLocale | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 38 | NlsUpdateLocale | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 37 | NlsGetCacheUpdateCount | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 35 | NlsCheckPolicy | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 8 | GetCalendarInfoW | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 7 | GetCalendarInfoEx | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 11 | GetLocaleInfoEx | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 19 | GetSystemPreferredUILanguages | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 21 | GetThreadPreferredUILanguages | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 22 | GetThreadUILanguage | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 23 | GetUILanguageInfo | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 26 | GetUserPreferredUILanguages | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 31 | IsValidLocaleName | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 32 | LCMapStringEx | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 34 | LocaleNameToLCID | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 41 | ResolveLocaleName | |
| API-MS-Win-Core-Localization-L1-1-0.dll | 9 | GetFileMUIInfo | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 8 | GetEnvironmentStrings | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 12 | GetEnvironmentVariableW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 14 | SearchPathW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 21 | SetStdHandleEx | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | ExpandEnvironmentStringsA | ||
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 1 | ExpandEnvironmentStringsW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 2 | FreeEnvironmentStringsA | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 3 | FreeEnvironmentStringsW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 4 | GetCommandLineA | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 5 | GetCommandLineW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 6 | GetCurrentDirectoryA | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 7 | GetCurrentDirectoryW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 10 | GetEnvironmentStringsW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 17 | SetEnvironmentStringsW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 11 | GetEnvironmentVariableA | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 13 | GetStdHandle | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 15 | SetCurrentDirectoryA | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 16 | SetCurrentDirectoryW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 18 | SetEnvironmentVariableA | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 19 | SetEnvironmentVariableW | |
| API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 20 | SetStdHandle | |
| API-MS-Win-Core-String-L1-1-0.dll | 5 | GetStringTypeW | |
| API-MS-Win-Core-String-L1-1-0.dll | 4 | GetStringTypeExW | |
| API-MS-Win-Core-String-L1-1-0.dll | 3 | FoldStringW | |
| API-MS-Win-Core-String-L1-1-0.dll | 2 | CompareStringW | |
| API-MS-Win-Core-String-L1-1-0.dll | 7 | WideCharToMultiByte | |
| API-MS-Win-Core-String-L1-1-0.dll | 1 | CompareStringOrdinal | |
| API-MS-Win-Core-String-L1-1-0.dll | CompareStringEx | ||
| API-MS-Win-Core-String-L1-1-0.dll | 6 | MultiByteToWideChar | |
| API-MS-Win-Core-Debug-L1-1-0.dll | DebugBreak | ||
| API-MS-Win-Core-Debug-L1-1-0.dll | 2 | OutputDebugStringA | |
| API-MS-Win-Core-Debug-L1-1-0.dll | 3 | OutputDebugStringW | |
| API-MS-Win-Core-Debug-L1-1-0.dll | 1 | IsDebuggerPresent | |
| API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 1 | GetLastError | |
| API-MS-Win-Core-ErrorHandling-L1-1-0.dll | GetErrorMode | ||
| API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 2 | RaiseException | |
| API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 3 | SetErrorMode | |
| API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 4 | SetLastError | |
| API-MS-Win-Core-Fibers-L1-1-0.dll | FlsAlloc | ||
| API-MS-Win-Core-Fibers-L1-1-0.dll | 1 | FlsFree | |
| API-MS-Win-Core-Fibers-L1-1-0.dll | 2 | FlsGetValue | |
| API-MS-Win-Core-Fibers-L1-1-0.dll | 3 | FlsSetValue | |
| API-MS-Win-Core-Util-L1-1-0.dll | Beep | ||
| API-MS-Win-Core-Profile-L1-1-0.dll | 1 | QueryPerformanceFrequency | |
| API-MS-Win-Core-Profile-L1-1-0.dll | QueryPerformanceCounter | ||
| API-MS-Win-Security-Base-L1-1-0.dll | 20 | AllocateAndInitializeSid | |
| API-MS-Win-Security-Base-L1-1-0.dll | 40 | FreeSid | |
| API-MS-Win-Security-Base-L1-1-0.dll | 34 | DuplicateToken | |
| API-MS-Win-Security-Base-L1-1-0.dll | AccessCheck |
StringTable 040904B0
| CompanyName | Microsoft Corporation |
| FileDescription | Windows NT BASE API Client DLL |
| FileVersion | 6.1.7600.16385 (win7_rtm.090713-1255) |
| InternalName | kernel32 |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | kernel32 |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 6.1.7600.16385 |
VS_FIXEDFILEINFO
| FileVersion | 6.1.7600.16385 |
| ProductVersion | 6.1.7600.16385 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 0x40004 |
| FileType | 2 |
| FileSubtype | 0 |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0x278