kernel32.dll - kernel32 - Windows NT BASE API Client DLL

filename	kernel32.dll
size	772744 (0xbca88)
md5	53c343d7a728c0d04e01b32a8538c4b9

type	PE32+ executable (DLL) (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
257	27412	4
147	30729	193
1	0	1328
260	27412	9
259	27412	3
256	27412	1
269	27412	209
255	27412	1
258	27412	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x6024807a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.20
SizeOfCode	0x7ea00
SizeOfInitializedData	0x3aa00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x176a0
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	10.0
ImageVersion	10.0
SubsystemVersion	10.0
Reserved1	0
SizeOfImage	0xbf000
SizeOfHeaders	0x400
CheckSum	0xc2e18
Subsystem	3
DllCharacteristics	0x4160
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x7e98b	0x7ea00	R-X CODE
.rdata	0x80000	0x3319e	0x33200	R-- IDATA
.data	0xb4000	0x12bc	0x600	RW- IDATA
.pdata	0xb6000	0x5628	0x5800	R-- IDATA
.didat	0xbc000	0x68	0x200	RW- IDATA
.rsrc	0xbd000	0x520	0x600	R-- IDATA
.reloc	0xbe000	0x310	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x9a330	0xdf0c
IMPORT	0xa823c	0x794
RESOURCE	0xbd000	0x520
EXCEPTION	0xb6000	0x5628
SECURITY	0xb8a00	0x4088
BASERELOC	0xbe000	0x310
DEBUG	0x87b80	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x807f0	0x118
Bound_IAT	0	0
IAT	0x817c0	0x2a70
Delay_IAT	0x9a0f0	0x60
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	200	0
VERSION	#1	932	0

module_name	hint	function_name
api-ms-win-core-rtlsupport-l1-1-0.dll	2	RtlCaptureContext
api-ms-win-core-rtlsupport-l1-1-0.dll	10	RtlLookupFunctionEntry
api-ms-win-core-rtlsupport-l1-1-0.dll	9	RtlInstallFunctionTableCallback
api-ms-win-core-rtlsupport-l1-1-0.dll	5	RtlCompareMemory
api-ms-win-core-rtlsupport-l1-1-0.dll	6	RtlDeleteFunctionTable
api-ms-win-core-rtlsupport-l1-1-0.dll	16	RtlVirtualUnwind
api-ms-win-core-rtlsupport-l1-1-0.dll	15	RtlUnwindEx
api-ms-win-core-rtlsupport-l1-1-0.dll	12	RtlRaiseException
api-ms-win-core-rtlsupport-l1-1-0.dll		RtlAddFunctionTable
api-ms-win-core-rtlsupport-l1-1-0.dll	4	RtlCaptureStackBackTrace
api-ms-win-core-rtlsupport-l1-1-0.dll	13	RtlRestoreContext
api-ms-win-core-rtlsupport-l1-1-0.dll	14	RtlUnwind
api-ms-win-core-rtlsupport-l1-1-0.dll	11	RtlPcToFileHeader
ntdll.dll	2310	_wcslwr
ntdll.dll	1101	RtlGetUILanguageInfo
ntdll.dll	57	EtwEventEnabled
ntdll.dll	1625	RtlpConvertLCIDsToCultureNames
ntdll.dll	341	NtEnumerateKey
ntdll.dll	1169	RtlIntegerToUnicodeString
ntdll.dll	1506	RtlTimeToTimeFields
ntdll.dll	1502	RtlTimeFieldsToTime
ntdll.dll	1524	RtlUnhandledExceptionFilter
ntdll.dll	628	NtTerminateProcess
ntdll.dll	2420	wcsncmp
ntdll.dll	2421	wcsncpy
ntdll.dll	115	LdrFindResourceEx_U
ntdll.dll	1368	RtlReadThreadProfilingData
ntdll.dll	1345	RtlQueryThreadProfiling
ntdll.dll	911	RtlDisableThreadProfiling
ntdll.dll	1281	RtlNtStatusToDosErrorNoTeb
ntdll.dll	933	RtlEnableThreadProfiling
ntdll.dll	1529	RtlUnicodeStringToInteger
ntdll.dll	870	RtlDecodeSystemPointer
ntdll.dll	2329	bsearch
ntdll.dll	793	RtlComputeImportTableHash
ntdll.dll	979	RtlFindActivationContextSectionGuid
ntdll.dll	1308	RtlQueryActivationContextApplicationSettings
ntdll.dll	1490	RtlSubAuthorityCountSid
ntdll.dll	154	LdrResFindResourceDirectory
ntdll.dll	1323	RtlQueryInformationActivationContext
ntdll.dll	1724	TpSetPoolStackInformation
ntdll.dll	1686	TpAllocWait
ntdll.dll	328	NtDeleteValueKey
ntdll.dll	613	NtSetValueKey
ntdll.dll	2403	towlower
ntdll.dll	1306	RtlPublishWnfStateData
ntdll.dll	489	NtQueryLicenseValue
ntdll.dll	2323	_wtol
ntdll.dll	2365	memmove_s
ntdll.dll	1230	RtlLCIDToCultureName
ntdll.dll	1481	RtlSizeHeap
ntdll.dll	1624	RtlpConvertCultureNamesToLCIDs
ntdll.dll	485	NtQueryInstallUILanguage
ntdll.dll	61	EtwEventUnregister
ntdll.dll	62	EtwEventWrite
ntdll.dll	59	EtwEventRegister
ntdll.dll	1025	RtlGUIDFromString
ntdll.dll	2370	sin
ntdll.dll	403	NtMapUserPhysicalPagesScatter
ntdll.dll	968	RtlExpandEnvironmentStrings_U
ntdll.dll	1685	TpAllocTimer
ntdll.dll	1682	TpAllocIoCompletion
ntdll.dll	1465	RtlSetThreadPreferredUILanguages
ntdll.dll	1265	RtlMultiAppendUnicodeStringBuffer
ntdll.dll	2398	swprintf_s
ntdll.dll	1118	RtlImageNtHeaderEx
ntdll.dll	404	NtMapViewOfSection
ntdll.dll	301	NtCreateSection
ntdll.dll	921	RtlDosPathNameToNtPathName_U_WithStatus
ntdll.dll	1028	RtlGetActiveActivationContext
ntdll.dll	865	RtlDeactivateActivationContext
ntdll.dll	688	RtlActivateActivationContext
ntdll.dll	1619	RtlZombifyActivationContext
ntdll.dll	1376	RtlReleaseActivationContext
ntdll.dll	711	RtlAddRefActivationContext
ntdll.dll	825	RtlCreateActivationContext
ntdll.dll	1065	RtlGetLengthWithoutLastFullDosOrNtPathElement
ntdll.dll	1620	RtlpApplyLengthFunction
ntdll.dll	1056	RtlGetFullPathName_U
ntdll.dll	915	RtlDoesFileExists_U
ntdll.dll	910	RtlDetermineDosPathNameType_U
ntdll.dll	1628	RtlpEnsureBufferSize
ntdll.dll	35	DbgPrintEx
ntdll.dll	643	NtUnmapViewOfSection
ntdll.dll	1327	RtlQueryPackageClaims
ntdll.dll	2401	tolower
ntdll.dll	2328	atol
ntdll.dll	2402	toupper
ntdll.dll	2338	isdigit
ntdll.dll	480	NtQueryInformationThread
ntdll.dll	943	RtlEnterUmsSchedulingMode
ntdll.dll	850	RtlCreateUmsThreadContext
ntdll.dll	1687	TpAllocWork
ntdll.dll	1471	RtlSetUmsThreadInformation
ntdll.dll	1348	RtlQueryUmsThreadInformation
ntdll.dll	1072	RtlGetNextUmsListItem
ntdll.dll	1044	RtlGetCurrentUmsThread
ntdll.dll	894	RtlDeleteUmsCompletionList
ntdll.dll	1523	RtlUmsThreadYield
ntdll.dll	964	RtlExecuteUmsThread
ntdll.dll	1102	RtlGetUmsCompletionListEvent
ntdll.dll	896	RtlDequeueUmsCompletionListItems
ntdll.dll	1444	RtlSetLastWin32ErrorAndNtStatusFromNtStatus
ntdll.dll	849	RtlCreateUmsCompletionList
ntdll.dll	902	RtlDestroyEnvironment
ntdll.dll	831	RtlCreateEnvironmentEx
ntdll.dll	830	RtlCreateEnvironment
ntdll.dll	470	NtQueryEvent
ntdll.dll	851	RtlCreateUnicodeString
ntdll.dll	519	NtRaiseHardError
ntdll.dll	1013	RtlFreeAnsiString
ntdll.dll	1018	RtlFreeOemString
ntdll.dll	1038	RtlGetCurrentDirectory_U
ntdll.dll	2425	wcsrchr
ntdll.dll	2312	_wcsnicmp
ntdll.dll	1531	RtlUnicodeStringToOemString
ntdll.dll	513	NtQueryVolumeInformationFile
ntdll.dll	28	CsrFreeCaptureBuffer
ntdll.dll	21	CsrAllocateMessagePointer
ntdll.dll	20	CsrAllocateCaptureBuffer
ntdll.dll	957	RtlEqualUnicodeString
ntdll.dll	1527	RtlUnicodeStringToAnsiString
ntdll.dll	966	RtlExitUserThread
ntdll.dll	708	RtlAddIntegrityLabelToBoundaryDescriptor
ntdll.dll	1337	RtlQueryProtectedPolicy
ntdll.dll	540	NtReplacePartitionUnit
ntdll.dll	788	RtlCompareUnicodeString
ntdll.dll	965	RtlExitUserProcess
ntdll.dll	1138	RtlInitUnicodeStringEx
ntdll.dll	1328	RtlQueryPackageIdentity
ntdll.dll	66	EtwEventWriteNoRegistration
ntdll.dll	1605	RtlWow64LogMessageInEventLogger
ntdll.dll	173	LdrUnloadDll
ntdll.dll	128	LdrGetProcedureAddress
ntdll.dll	137	LdrLoadDll
ntdll.dll	735	RtlAppendUnicodeToString
ntdll.dll	734	RtlAppendUnicodeStringToString
ntdll.dll	1009	RtlFormatCurrentUserKeyPath
ntdll.dll	511	NtQueryValueKey
ntdll.dll	955	RtlEqualSid
ntdll.dll	1491	RtlSubAuthoritySid
ntdll.dll	1159	RtlInitializeSid
ntdll.dll	481	NtQueryInformationToken
ntdll.dll	430	NtOpenProcessToken
ntdll.dll	588	NtSetInformationThread
ntdll.dll	439	NtOpenThreadToken
ntdll.dll	1383	RtlReleaseSRWLockExclusive
ntdll.dll	1340	RtlQueryRegistryValuesEx
ntdll.dll	420	NtOpenKey
ntdll.dll	686	RtlAcquireSRWLockExclusive
ntdll.dll	730	RtlAnsiStringToUnicodeString
ntdll.dll	1669	RtlxAnsiStringToUnicodeSize
ntdll.dll	1125	RtlInitAnsiStringEx
ntdll.dll	384	NtIsSystemResumeAutomatic
ntdll.dll	382	NtInitiatePowerAction
ntdll.dll	1211	RtlIsNameLegalDOS8Dot3
ntdll.dll	1041	RtlGetCurrentProcessorNumberEx
ntdll.dll	653	NtWaitForSingleObject
ntdll.dll	277	NtCreateEvent
ntdll.dll	1455	RtlSetSearchPathMode
ntdll.dll	118	LdrGetDllDirectory
ntdll.dll	1541	RtlUnlockHeap
ntdll.dll	1105	RtlGetUserInfoHeap
ntdll.dll	1246	RtlLockHeap
ntdll.dll	897	RtlDeregisterSecureMemoryCacheCallback
ntdll.dll	1373	RtlRegisterSecureMemoryCacheCallback
ntdll.dll	783	RtlCompactHeap
ntdll.dll	362	NtFsControlFile
ntdll.dll	417	NtOpenFile
ntdll.dll	253	NtClose
ntdll.dll	103	LdrAddRefDll
ntdll.dll	475	NtQueryInformationFile
ntdll.dll	581	NtSetInformationFile
ntdll.dll	2415	wcscpy_s
ntdll.dll	1029	RtlGetActiveConsoleId
ntdll.dll	866	RtlDeactivateActivationContextUnsafeFast
ntdll.dll	690	RtlActivateActivationContextUnsafeFast
ntdll.dll	1280	RtlNtStatusToDosError
ntdll.dll	1022	RtlFreeUnicodeString
ntdll.dll	1603	RtlWow64GetThreadSelectorEntry
ntdll.dll	579	NtSetInformationDebugObject
ntdll.dll	45	DbgUiGetThreadDebugObject
ntdll.dll	46	DbgUiIssueRemoteBreakin
ntdll.dll	604	NtSetSystemInformation
ntdll.dll	478	NtQueryInformationProcess
ntdll.dll	1430	RtlSetCurrentTransaction
ntdll.dll	1043	RtlGetCurrentTransaction
ntdll.dll	1443	RtlSetLastWin32Error
ntdll.dll	26	CsrClientCallServer
ntdll.dll	109	LdrDisableThreadCalloutsForDll
ntdll.dll	1693	TpCallbackMayRunLong
ntdll.dll	1681	TpAllocCleanupGroup
ntdll.dll	1732	TpSimpleTryPost
ntdll.dll	1709	TpQueryPoolStackInformation
ntdll.dll	1684	TpAllocPool
ntdll.dll	895	RtlDeleteUmsThreadContext
ntdll.dll	1723	TpSetPoolMinThreads
ntdll.dll	32	CsrVerifyRegion
ntdll.dll	759	RtlCharToInteger
ntdll.dll	1124	RtlInitAnsiString
ntdll.dll	1553	RtlUpcaseUnicodeChar
ntdll.dll	1535	RtlUnicodeToMultiByteSize
ntdll.dll	901	RtlDestroyAtomTable
ntdll.dll	349	NtFindAtom
ntdll.dll	472	NtQueryInformationAtom
ntdll.dll	700	RtlAddAtomToAtomTable
ntdll.dll	201	NtAddAtomEx
ntdll.dll	321	NtDeleteAtom
ntdll.dll	827	RtlCreateAtomTable
ntdll.dll	877	RtlDeleteAtomFromAtomTable
ntdll.dll	1252	RtlLookupAtomInAtomTable
ntdll.dll	1310	RtlQueryAtomInAtomTable
ntdll.dll	914	RtlDnsHostNameToComputerName
ntdll.dll	1301	RtlPrefixString
ntdll.dll	354	NtFlushKey
ntdll.dll	2273	_memicmp
ntdll.dll	1671	RtlxUnicodeStringToAnsiSize
ntdll.dll	942	RtlEnterCriticalSection
ntdll.dll	2412	wcschr
ntdll.dll	2427	wcsstr
ntdll.dll	1233	RtlLeaveCriticalSection
ntdll.dll	284	NtCreateKey
ntdll.dll	279	NtCreateFile
ntdll.dll	852	RtlCreateUnicodeStringFromAsciiz
ntdll.dll	2422	wcsncpy_s
ntdll.dll	2416	wcscspn
ntdll.dll	283	NtCreateJobSet
ntdll.dll	1380	RtlReleasePrivilege
ntdll.dll	582	NtSetInformationJobObject
ntdll.dll	476	NtQueryInformationJobObject
ntdll.dll	282	NtCreateJobObject
ntdll.dll	682	RtlAcquirePrivilege
ntdll.dll	242	NtAssignProcessToJobObject
ntdll.dll	627	NtTerminateJobObject
ntdll.dll	419	NtOpenJobObject
ntdll.dll	1235	RtlLengthSecurityDescriptor
ntdll.dll	573	NtSetEaFile
ntdll.dll	601	NtSetSecurityObject
ntdll.dll	469	NtQueryEaFile
ntdll.dll	500	NtQuerySecurityObject
ntdll.dll	146	LdrQueryImageFileKeyOption
ntdll.dll	140	LdrOpenImageFileOptionsKey
ntdll.dll	1314	RtlQueryElevationFlags
ntdll.dll	585	NtSetInformationProcess
ntdll.dll	1360	RtlRaiseStatus
ntdll.dll	498	NtQuerySection
ntdll.dll	359	NtFreeVirtualMemory
ntdll.dll	658	NtWriteFile
ntdll.dll	344	NtEnumerateValueKey
ntdll.dll	956	RtlEqualString
ntdll.dll	1534	RtlUnicodeToMultiByteN
ntdll.dll	2388	strncpy_s
ntdll.dll	641	NtUnlockFile
ntdll.dll	920	RtlDosPathNameToNtPathName_U
ntdll.dll	520	NtReadFile
ntdll.dll	393	NtLockFile
ntdll.dll	821	RtlCopyUnicodeString
ntdll.dll	24	CsrCaptureMessageString
ntdll.dll	1221	RtlIsTextUnicode
ntdll.dll	215	NtAllocateVirtualMemory
ntdll.dll	1068	RtlGetLongestNtPathLength
ntdll.dll	1302	RtlPrefixUnicodeString
ntdll.dll	1266	RtlMultiByteToUnicodeN
ntdll.dll	1267	RtlMultiByteToUnicodeSize
ntdll.dll	922	RtlDosPathNameToRelativeNtPathName_U
ntdll.dll	1381	RtlReleaseRelativeName
ntdll.dll	1442	RtlSetIoCompletionCallback
ntdll.dll	898	RtlDeregisterWait
ntdll.dll	1375	RtlRegisterWait
ntdll.dll	1116	RtlImageDirectoryEntryToData
ntdll.dll	512	NtQueryVirtualMemory
ntdll.dll	829	RtlCreateBoundaryDescriptor
ntdll.dll	455	NtProtectVirtualMemory
ntdll.dll	1096	RtlGetThreadErrorMode
ntdll.dll	288	NtCreateMailslotFile
ntdll.dll	908	RtlDestroyQueryDebugBuffer
ntdll.dll	1333	RtlQueryProcessDebugInformation
ntdll.dll	841	RtlCreateQueryDebugBuffer
ntdll.dll	465	NtQueryDirectoryFile
ntdll.dll	2381	strcpy_s
ntdll.dll	980	RtlFindActivationContextSectionString
ntdll.dll	163	LdrSetDllDirectory
ntdll.dll	116	LdrFindResource_U
ntdll.dll	1496	RtlSwitchedVVI
ntdll.dll	514	NtQueryWnfStateData
ntdll.dll	445	NtPowerInformation
ntdll.dll	368	NtGetDevicePowerState
ntdll.dll	607	NtSetThreadExecutionState
ntdll.dll	603	NtSetSystemEnvironmentValueEx
ntdll.dll	505	NtQuerySystemEnvironmentValueEx
ntdll.dll	1132	RtlInitString
ntdll.dll	614	NtSetVolumeInformationFile
ntdll.dll	331	NtDeviceIoControlFile
ntdll.dll	1224	RtlIsValidHandle
ntdll.dll	723	RtlAllocateHandle
ntdll.dll	1365	RtlReAllocateHeap
ntdll.dll	1014	RtlFreeHandle
ntdll.dll	1474	RtlSetUserValueHeap
ntdll.dll	1550	RtlUnsubscribeWnfStateChangeNotification
ntdll.dll	1493	RtlSubscribeWnfStateChangeNotification
ntdll.dll	1352	RtlQueryWnfStateData
ntdll.dll	2378	strchr
ntdll.dll	1433	RtlSetEnvironmentStrings
ntdll.dll	1293	RtlOemStringToUnicodeString
ntdll.dll	2411	wcscat_s
ntdll.dll	721	RtlAllocateAndInitializeSid
ntdll.dll	1316	RtlQueryEnvironmentVariable_U
ntdll.dll	458	NtQueryAttributesFile
ntdll.dll	1019	RtlFreeSid
ntdll.dll	2391	strrchr
ntdll.dll	471	NtQueryFullAttributesFile
ntdll.dll	1701	TpCaptureCaller
ntdll.dll	1594	RtlWow64EnableFsRedirection
ntdll.dll	2285	_stricmp
ntdll.dll	611	NtSetTimerResolution
ntdll.dll	510	NtQueryTimerResolution
ntdll.dll	1032	RtlGetAppContainerSidType
ntdll.dll	805	RtlConvertSidToUnicodeString
ntdll.dll	1435	RtlSetEnvironmentVariable
ntdll.dll	1031	RtlGetAppContainerParent
ntdll.dll	1315	RtlQueryEnvironmentVariable
ntdll.dll	23	CsrCaptureMessageMultiUnicodeStringsInPlace
ntdll.dll	2423	wcsnlen
ntdll.dll	2377	strcat_s
ntdll.dll	2389	strnlen
ntdll.dll	188	NlsMbCodePageTag
ntdll.dll	1411	RtlRunOnceExecuteOnce
ntdll.dll	1146	RtlInitializeCriticalSection
ntdll.dll	1098	RtlGetThreadPreferredUILanguages
ntdll.dll	524	NtReadVirtualMemory
ntdll.dll	157	LdrResSearchResource
ntdll.dll	2288	_strnicmp
ntdll.dll	2386	strncmp
ntdll.dll	1515	RtlTryAcquirePebLock
ntdll.dll	1379	RtlReleasePebLock
ntdll.dll	938	RtlEncodeSystemPointer
ntdll.dll	1076	RtlGetNtSystemRoot
ntdll.dll	651	NtWaitForMultipleObjects
ntdll.dll	252	NtClearEvent
ntdll.dll	1590	RtlWerpReportException
ntdll.dll	34	DbgPrint
ntdll.dll	1046	RtlGetDeviceFamilyInfoEnum
ntdll.dll	1110	RtlHashUnicodeString
ntdll.dll	240	NtApphelpCacheControl
ntdll.dll	1057	RtlGetFullPathName_UEx
ntdll.dll	1838	ZwClose
ntdll.dll	2001	ZwOpenFile
ntdll.dll	2004	ZwOpenKey
ntdll.dll	1926	ZwEnumerateKey
ntdll.dll	2095	ZwQueryValueKey
ntdll.dll	1864	ZwCreateFile
ntdll.dll	2059	ZwQueryInformationFile
ntdll.dll	1886	ZwCreateSection
ntdll.dll	2049	ZwQueryDirectoryFile
ntdll.dll	1279	RtlNtPathNameToDosPathName
ntdll.dll	1070	RtlGetNativeSystemInformation
ntdll.dll	2090	ZwQuerySystemInformation
ntdll.dll	2227	ZwUnmapViewOfSection
ntdll.dll	1988	ZwMapViewOfSection
ntdll.dll	1742	VerSetConditionMask
ntdll.dll	1577	RtlVerifyVersionInfo
ntdll.dll	1107	RtlGetVersion
ntdll.dll	1042	RtlGetCurrentServiceSessionId
ntdll.dll	1090	RtlGetSuiteMask
ntdll.dll	144	LdrQueryImageFileExecutionOptions
ntdll.dll	1137	RtlInitUnicodeString
ntdll.dll	2306	_vsnwprintf
ntdll.dll	1452	RtlSetProtectedPolicy
ntdll.dll	164	LdrSetDllManifestProber
ntdll.dll	1464	RtlSetThreadPoolStartFunc
ntdll.dll	1117	RtlImageNtHeader
ntdll.dll	506	NtQuerySystemInformation
ntdll.dll	1015	RtlFreeHeap
ntdll.dll	1431	RtlSetDaclSecurityDescriptor
ntdll.dll	1438	RtlSetGroupSecurityDescriptor
ntdll.dll	1446	RtlSetOwnerSecurityDescriptor
ntdll.dll	843	RtlCreateSecurityDescriptor
ntdll.dll	691	RtlAddAccessAllowedAce
ntdll.dll	824	RtlCreateAcl
ntdll.dll	724	RtlAllocateHeap
ntdll.dll	2309	_wcsicmp
ntdll.dll	2247	__C_specific_handler
ntdll.dll	2364	memmove
ntdll.dll	1080	RtlGetPersistedStateLocation
ntdll.dll	2266	_local_unwind
ntdll.dll	2332	cos
ntdll.dll	2334	floor
ntdll.dll	2361	memcmp
ntdll.dll	2362	memcpy
ntdll.dll	2366	memset
ntdll.dll	2413	wcscmp
KERNELBASE.dll	245	NotifyMountMgr
KERNELBASE.dll	36	BaseFormatObjectAttributes
KERNELBASE.dll	207	GetVolumeNameForVolumeMountPointW
KERNELBASE.dll	379	lstrcmpW
KERNELBASE.dll	381	lstrcmpiW
KERNELBASE.dll	174	GetRegistryExtensionFlags
KERNELBASE.dll	228	KernelBaseGetGlobalData
KERNELBASE.dll	209	GlobalFree
KERNELBASE.dll	231	LoadStringBaseExW
KERNELBASE.dll	200	GetUnicodeStringToEightBitStringRoutine
KERNELBASE.dll	199	GetUnicodeStringToEightBitSizeRoutine
KERNELBASE.dll	58	CompareStringA
KERNELBASE.dll	130	GetNamedPipeAttribute
KERNELBASE.dll	28	AppXPreCreationExtension
KERNELBASE.dll	27	AppXPostSuccessExtension
KERNELBASE.dll	29	AppXReleaseAppXContext
KERNELBASE.dll	32	AreFileApisANSI
KERNELBASE.dll	62	CreateProcessInternalA
KERNELBASE.dll	63	CreateProcessInternalW
KERNELBASE.dll	61	CreateProcessAsUserW
KERNELBASE.dll	60	CreateProcessAsUserA
KERNELBASE.dll	76	EnumLanguageGroupLocalesW
KERNELBASE.dll	7	AppContainerLookupMoniker
KERNELBASE.dll	77	EnumSystemLanguageGroupsW
KERNELBASE.dll	78	EnumSystemLocalesEx
KERNELBASE.dll	266	PackageIdFromFullName
KERNELBASE.dll	141	GetPackageFullName
KERNELBASE.dll	104	GetCurrentPackageFullName
KERNELBASE.dll	48	CheckIsMSIXPackage
KERNELBASE.dll	51	ClosePackageInfo
KERNELBASE.dll	21	AppXGetOSMaxVersionTested
KERNELBASE.dll	164	GetPackageTargetPlatformProperty
KERNELBASE.dll	198	GetTargetPlatformContext
KERNELBASE.dll	250	OpenPackageInfoByFullNameForUser
KERNELBASE.dll	5	AppContainerFreeMemory
KERNELBASE.dll	43	BasepNotifyTrackingService
KERNELBASE.dll	238	MoveFileWithProgressTransactedW
KERNELBASE.dll	40	BasepAdjustObjectAttributesForPrivateNamespace
KERNELBASE.dll	118	GetEightBitStringToUnicodeStringRoutine
KERNELBASE.dll	188	GetStringTableEntry
KERNELBASE.dll	46	CheckGroupPolicyEnabled
KERNELBASE.dll	251	OpenRegKey
KERNELBASE.dll	212	InternalLcidToName
KERNELBASE.dll	243	NlsIsUserDefaultLocale
KERNELBASE.dll	171	GetPtrCalDataArray
KERNELBASE.dll	205	GetUserOverrideString
KERNELBASE.dll	170	GetPtrCalData
KERNELBASE.dll	213	Internal_EnumCalendarInfo
KERNELBASE.dll	215	Internal_EnumLanguageGroupLocales
KERNELBASE.dll	216	Internal_EnumSystemCodePages
KERNELBASE.dll	214	Internal_EnumDateFormats
KERNELBASE.dll	220	Internal_EnumUILanguages
KERNELBASE.dll	217	Internal_EnumSystemLanguageGroups
KERNELBASE.dll	244	NlsValidateLocale
KERNELBASE.dll	219	Internal_EnumTimeFormats
KERNELBASE.dll	129	GetNamedLocaleHashNode
KERNELBASE.dll	206	GetUserOverrideWord
KERNELBASE.dll	128	GetLocaleInfoHelper
KERNELBASE.dll	96	GetCalendar
KERNELBASE.dll	34	BaseDllFreeResourceId
KERNELBASE.dll	35	BaseDllMapResourceIdW
KERNELBASE.dll	45	CheckAllowDecryptedRemoteDestinationPolicy
KERNELBASE.dll	277	PrivCopyFileExW
KERNELBASE.dll	79	EnumUILanguagesW
KERNELBASE.dll	230	LCIDToLocaleName
KERNELBASE.dll	201	GetUserDefaultLocaleName
KERNELBASE.dll	192	GetSystemDefaultLocaleName
KERNELBASE.dll	119	GetEraNameCountedString
KERNELBASE.dll	85	FatalAppExitW
KERNELBASE.dll	84	FatalAppExitA
KERNELBASE.dll	385	lstrlenW
KERNELBASE.dll	384	lstrlenA
KERNELBASE.dll	383	lstrcpynW
KERNELBASE.dll	382	lstrcpynA
KERNELBASE.dll	332	Sleep
KERNELBASE.dll	323	SetFileApisToOEM
KERNELBASE.dll	322	SetFileApisToANSI
KERNELBASE.dll	281	PulseEvent
KERNELBASE.dll	237	MapViewOfFileExNuma
KERNELBASE.dll	235	LocalUnlock
KERNELBASE.dll	234	LocalReAlloc
KERNELBASE.dll	233	LocalLock
KERNELBASE.dll	232	LocalAlloc
KERNELBASE.dll	210	HeapSummary
KERNELBASE.dll	208	GlobalAlloc
KERNELBASE.dll	202	GetUserDefaultUILanguage
KERNELBASE.dll	193	GetSystemDefaultUILanguage
KERNELBASE.dll	189	GetStringTypeA
KERNELBASE.dll	167	GetProcAddressForCaller
KERNELBASE.dll	38	BaseGetNamedObjectDirectory
api-ms-win-core-processthreads-l1-1-0.dll	3	CreateProcessW
api-ms-win-core-processthreads-l1-1-0.dll	52	ProcessIdToSessionId
api-ms-win-core-processthreads-l1-1-0.dll	50	OpenThread
api-ms-win-core-processthreads-l1-1-0.dll	31	GetProcessVersion
api-ms-win-core-processthreads-l1-1-0.dll	20	GetExitCodeThread
api-ms-win-core-processthreads-l1-1-0.dll	21	GetPriorityClass
api-ms-win-core-processthreads-l1-1-0.dll	81	TlsAlloc
api-ms-win-core-processthreads-l1-1-0.dll	25	GetProcessIdOfThread
api-ms-win-core-processthreads-l1-1-0.dll	24	GetProcessId
api-ms-win-core-processthreads-l1-1-0.dll	30	GetProcessTimes
api-ms-win-core-processthreads-l1-1-0.dll	32	GetStartupInfoW
api-ms-win-core-processthreads-l1-1-0.dll	72	SetThreadPriority
api-ms-win-core-processthreads-l1-1-0.dll	65	SetProcessShutdownParameters
api-ms-win-core-processthreads-l1-1-0.dll	38	GetThreadId
api-ms-win-core-processthreads-l1-1-0.dll	57	SetPriorityClass
api-ms-win-core-processthreads-l1-1-0.dll		CreateProcessA
api-ms-win-core-processthreads-l1-1-0.dll	41	GetThreadPriority
api-ms-win-core-processthreads-l1-1-0.dll	42	GetThreadPriorityBoost
api-ms-win-core-processthreads-l1-1-0.dll	58	SetProcessAffinityUpdateMode
api-ms-win-core-processthreads-l1-1-0.dll	19	GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-0.dll	73	SetThreadPriorityBoost
api-ms-win-core-processthreads-l1-1-0.dll	75	SetThreadStackGuarantee
api-ms-win-core-processthreads-l1-1-0.dll	77	SuspendThread
api-ms-win-core-processthreads-l1-1-0.dll	49	OpenProcessToken
api-ms-win-core-processthreads-l1-1-0.dll	7	DeleteProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-0.dll	85	UpdateProcThreadAttribute
api-ms-win-core-processthreads-l1-1-0.dll	45	InitializeProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-0.dll	4	CreateRemoteThread
api-ms-win-core-processthreads-l1-1-0.dll	78	SwitchToThread
api-ms-win-core-processthreads-l1-1-0.dll	79	TerminateProcess
api-ms-win-core-processthreads-l1-1-0.dll	80	TerminateThread
api-ms-win-core-processthreads-l1-1-0.dll	84	TlsSetValue
api-ms-win-core-processthreads-l1-1-0.dll	55	QueueUserAPC
api-ms-win-core-processthreads-l1-1-0.dll	82	TlsFree
api-ms-win-core-processthreads-l1-1-0.dll	56	ResumeThread
api-ms-win-core-processthreads-l1-1-0.dll	13	GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-0.dll	12	GetCurrentProcess
api-ms-win-core-processthreads-l1-1-0.dll	5	CreateRemoteThreadEx
api-ms-win-core-processthreads-l1-1-0.dll	53	QueryProcessAffinityUpdateMode
api-ms-win-core-processthreads-l1-1-3.dll	29	GetProcessShutdownParameters
api-ms-win-core-processthreads-l1-1-3.dll	62	SetProcessInformation
api-ms-win-core-processthreads-l1-1-3.dll	26	GetProcessInformation
api-ms-win-core-processthreads-l1-1-3.dll	69	SetThreadIdealProcessor
api-ms-win-core-processthreads-l1-1-2.dll	37	GetThreadIOPendingFlag
api-ms-win-core-processthreads-l1-1-2.dll	40	GetThreadInformation
api-ms-win-core-processthreads-l1-1-2.dll	71	SetThreadInformation
api-ms-win-core-processthreads-l1-1-2.dll	64	SetProcessPriorityBoost
api-ms-win-core-processthreads-l1-1-2.dll	28	GetProcessPriorityBoost
api-ms-win-core-processthreads-l1-1-2.dll	34	GetSystemTimes
api-ms-win-core-processthreads-l1-1-1.dll	48	OpenProcess
api-ms-win-core-processthreads-l1-1-1.dll	47	IsProcessorFeaturePresent
api-ms-win-core-processthreads-l1-1-1.dll	44	GetThreadTimes
api-ms-win-core-processthreads-l1-1-1.dll	39	GetThreadIdealProcessorEx
api-ms-win-core-processthreads-l1-1-1.dll	35	GetThreadContext
api-ms-win-core-processthreads-l1-1-1.dll	70	SetThreadIdealProcessorEx
api-ms-win-core-processthreads-l1-1-1.dll	10	FlushInstructionCache
api-ms-win-core-processthreads-l1-1-1.dll	63	SetProcessMitigationPolicy
api-ms-win-core-processthreads-l1-1-1.dll	27	GetProcessMitigationPolicy
api-ms-win-core-processthreads-l1-1-1.dll	67	SetThreadContext
api-ms-win-core-processthreads-l1-1-1.dll	23	GetProcessHandleCount
api-ms-win-core-registry-l1-1-0.dll	9	RegDeleteTreeW
api-ms-win-core-registry-l1-1-0.dll	10	RegDeleteValueA
api-ms-win-core-registry-l1-1-0.dll	11	RegDeleteValueW
api-ms-win-core-registry-l1-1-0.dll	12	RegDisablePredefinedCacheEx
api-ms-win-core-registry-l1-1-0.dll	13	RegEnumKeyExA
api-ms-win-core-registry-l1-1-0.dll	14	RegEnumKeyExW
api-ms-win-core-registry-l1-1-0.dll	15	RegEnumValueA
api-ms-win-core-registry-l1-1-0.dll	16	RegEnumValueW
api-ms-win-core-registry-l1-1-0.dll	17	RegFlushKey
api-ms-win-core-registry-l1-1-0.dll	18	RegGetKeySecurity
api-ms-win-core-registry-l1-1-0.dll	19	RegGetValueA
api-ms-win-core-registry-l1-1-0.dll	23	RegLoadKeyA
api-ms-win-core-registry-l1-1-0.dll	20	RegGetValueW
api-ms-win-core-registry-l1-1-0.dll	25	RegLoadMUIStringA
api-ms-win-core-registry-l1-1-0.dll	26	RegLoadMUIStringW
api-ms-win-core-registry-l1-1-0.dll	27	RegNotifyChangeKeyValue
api-ms-win-core-registry-l1-1-0.dll	5	RegDeleteKeyExW
api-ms-win-core-registry-l1-1-0.dll	29	RegOpenKeyExA
api-ms-win-core-registry-l1-1-0.dll	31	RegOpenUserClassesRoot
api-ms-win-core-registry-l1-1-0.dll	32	RegQueryInfoKeyA
api-ms-win-core-registry-l1-1-0.dll	33	RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll	36	RegQueryValueExA
api-ms-win-core-registry-l1-1-0.dll	37	RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll	38	RegRestoreKeyA
api-ms-win-core-registry-l1-1-0.dll	39	RegRestoreKeyW
api-ms-win-core-registry-l1-1-0.dll	40	RegSaveKeyExA
api-ms-win-core-registry-l1-1-0.dll	41	RegSaveKeyExW
api-ms-win-core-registry-l1-1-0.dll	42	RegSetKeySecurity
api-ms-win-core-registry-l1-1-0.dll	45	RegSetValueExA
api-ms-win-core-registry-l1-1-0.dll	46	RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll	30	RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll	4	RegDeleteKeyExA
api-ms-win-core-registry-l1-1-0.dll	22	RegLoadAppKeyW
api-ms-win-core-registry-l1-1-0.dll	48	RegUnLoadKeyW
api-ms-win-core-registry-l1-1-0.dll	47	RegUnLoadKeyA
api-ms-win-core-registry-l1-1-0.dll	8	RegDeleteTreeA
api-ms-win-core-registry-l1-1-0.dll	3	RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll	2	RegCreateKeyExA
api-ms-win-core-registry-l1-1-0.dll	1	RegCopyTreeW
api-ms-win-core-registry-l1-1-0.dll	28	RegOpenCurrentUser
api-ms-win-core-registry-l1-1-0.dll		RegCloseKey
api-ms-win-core-registry-l1-1-0.dll	24	RegLoadKeyW
api-ms-win-core-heap-l1-1-0.dll	6	HeapFree
api-ms-win-core-heap-l1-1-0.dll		GetProcessHeap
api-ms-win-core-heap-l1-1-0.dll	9	HeapReAlloc
api-ms-win-core-heap-l1-1-0.dll	1	GetProcessHeaps
api-ms-win-core-heap-l1-1-0.dll	3	HeapCompact
api-ms-win-core-heap-l1-1-0.dll	4	HeapCreate
api-ms-win-core-heap-l1-1-0.dll	5	HeapDestroy
api-ms-win-core-heap-l1-1-0.dll	14	HeapWalk
api-ms-win-core-heap-l1-1-0.dll	13	HeapValidate
api-ms-win-core-heap-l1-1-0.dll	12	HeapUnlock
api-ms-win-core-heap-l1-1-0.dll	10	HeapSetInformation
api-ms-win-core-heap-l1-1-0.dll	8	HeapQueryInformation
api-ms-win-core-heap-l1-1-0.dll	7	HeapLock
api-ms-win-core-heap-l1-1-0.dll	2	HeapAlloc
api-ms-win-core-heap-l2-1-0.dll	3	LocalFree
api-ms-win-core-memory-l1-1-1.dll	4	CreateFileMappingNumaW
api-ms-win-core-memory-l1-1-1.dll	6	CreateMemoryResourceNotification
api-ms-win-core-memory-l1-1-1.dll	31	ResetWriteWatch
api-ms-win-core-memory-l1-1-1.dll	14	GetWriteWatch
api-ms-win-core-memory-l1-1-1.dll	54	VirtualUnlock
api-ms-win-core-memory-l1-1-1.dll	48	VirtualLock
api-ms-win-core-memory-l1-1-1.dll	10	GetLargePageMinimum
api-ms-win-core-memory-l1-1-1.dll	35	SetSystemFileCacheSize
api-ms-win-core-memory-l1-1-1.dll	34	SetProcessWorkingSetSizeEx
api-ms-win-core-memory-l1-1-1.dll	26	QueryMemoryResourceNotification
api-ms-win-core-memory-l1-1-1.dll	13	GetSystemFileCacheSize
api-ms-win-core-memory-l1-1-1.dll	12	GetProcessWorkingSetSizeEx
api-ms-win-core-memory-l1-1-0.dll	53	VirtualQueryEx
api-ms-win-core-memory-l1-1-0.dll	52	VirtualQuery
api-ms-win-core-memory-l1-1-0.dll	50	VirtualProtectEx
api-ms-win-core-memory-l1-1-0.dll	49	VirtualProtect
api-ms-win-core-memory-l1-1-0.dll	47	VirtualFreeEx
api-ms-win-core-memory-l1-1-0.dll	46	VirtualFree
api-ms-win-core-memory-l1-1-0.dll	43	VirtualAllocEx
api-ms-win-core-memory-l1-1-0.dll	40	VirtualAlloc
api-ms-win-core-memory-l1-1-0.dll	36	UnmapViewOfFile
api-ms-win-core-memory-l1-1-0.dll	28	ReadProcessMemory
api-ms-win-core-memory-l1-1-0.dll	24	OpenFileMappingW
api-ms-win-core-memory-l1-1-0.dll	19	MapViewOfFileEx
api-ms-win-core-memory-l1-1-0.dll	16	MapViewOfFile
api-ms-win-core-memory-l1-1-0.dll	8	FlushViewOfFile
api-ms-win-core-memory-l1-1-0.dll	5	CreateFileMappingW
api-ms-win-core-memory-l1-1-0.dll	56	WriteProcessMemory
api-ms-win-core-memory-l1-1-2.dll	1	AllocateUserPhysicalPagesNuma
api-ms-win-core-memory-l1-1-2.dll		AllocateUserPhysicalPages
api-ms-win-core-memory-l1-1-2.dll	44	VirtualAllocExNuma
api-ms-win-core-memory-l1-1-2.dll	11	GetMemoryErrorHandlingCapabilities
api-ms-win-core-memory-l1-1-2.dll	39	UnregisterBadMemoryNotification
api-ms-win-core-memory-l1-1-2.dll	30	RegisterBadMemoryNotification
api-ms-win-core-memory-l1-1-2.dll	15	MapUserPhysicalPages
api-ms-win-core-memory-l1-1-2.dll	9	FreeUserPhysicalPages
api-ms-win-core-handle-l1-1-0.dll		CloseHandle
api-ms-win-core-handle-l1-1-0.dll	2	DuplicateHandle
api-ms-win-core-handle-l1-1-0.dll	4	SetHandleInformation
api-ms-win-core-handle-l1-1-0.dll	3	GetHandleInformation
api-ms-win-core-synch-l1-1-0.dll	55	WaitForSingleObjectEx
api-ms-win-core-synch-l1-1-0.dll	15	DeleteCriticalSection
api-ms-win-core-synch-l1-1-0.dll	29	LeaveCriticalSection
api-ms-win-core-synch-l1-1-0.dll	17	EnterCriticalSection
api-ms-win-core-synch-l1-1-0.dll	6	CreateEventW
api-ms-win-core-synch-l1-1-0.dll	54	WaitForSingleObject
api-ms-win-core-synch-l1-1-0.dll	42	SetWaitableTimer
api-ms-win-core-synch-l1-1-0.dll	41	SetEvent
api-ms-win-core-synch-l1-1-0.dll	8	CreateMutexExA
api-ms-win-core-synch-l1-1-0.dll	39	ResetEvent
api-ms-win-core-synch-l1-1-0.dll	38	ReleaseSemaphore
api-ms-win-core-synch-l1-1-0.dll	35	ReleaseMutex
api-ms-win-core-synch-l1-1-0.dll	48	SleepEx
api-ms-win-core-synch-l1-1-0.dll	5	CreateEventExW
api-ms-win-core-synch-l1-1-0.dll	4	CreateEventExA
api-ms-win-core-synch-l1-1-0.dll	3	CreateEventA
api-ms-win-core-synch-l1-1-0.dll	2	CancelWaitableTimer
api-ms-win-core-synch-l1-1-0.dll	34	OpenWaitableTimerW
api-ms-win-core-synch-l1-1-0.dll	33	OpenSemaphoreW
api-ms-win-core-synch-l1-1-0.dll	32	OpenMutexW
api-ms-win-core-synch-l1-1-0.dll	31	OpenEventW
api-ms-win-core-synch-l1-1-0.dll	30	OpenEventA
api-ms-win-core-synch-l1-1-0.dll	26	InitializeCriticalSectionEx
api-ms-win-core-synch-l1-1-0.dll	25	InitializeCriticalSectionAndSpinCount
api-ms-win-core-synch-l1-1-0.dll	13	CreateWaitableTimerExW
api-ms-win-core-synch-l1-1-0.dll	7	CreateMutexA
api-ms-win-core-synch-l1-1-0.dll	11	CreateSemaphoreExW
api-ms-win-core-synch-l1-1-0.dll	10	CreateMutexW
api-ms-win-core-synch-l1-1-0.dll	9	CreateMutexExW
api-ms-win-core-synch-l1-1-0.dll	24	InitializeCriticalSection
api-ms-win-core-synch-l1-1-0.dll	53	WaitForMultipleObjectsEx
api-ms-win-core-synch-l1-2-1.dll	12	CreateSemaphoreW
api-ms-win-core-synch-l1-2-1.dll	52	WaitForMultipleObjects
api-ms-win-core-synch-l1-2-0.dll	28	InitializeSynchronizationBarrier
api-ms-win-core-synch-l1-2-0.dll	18	EnterSynchronizationBarrier
api-ms-win-core-synch-l1-2-0.dll	21	InitOnceExecuteOnce
api-ms-win-core-synch-l1-2-0.dll	44	SignalObjectAndWait
api-ms-win-core-synch-l1-2-0.dll	16	DeleteSynchronizationBarrier
api-ms-win-core-file-l1-1-0.dll	36	GetDiskFreeSpaceW
api-ms-win-core-file-l1-1-0.dll	39	GetDriveTypeA
api-ms-win-core-file-l1-1-0.dll	40	GetDriveTypeW
api-ms-win-core-file-l1-1-0.dll	41	GetFileAttributesA
api-ms-win-core-file-l1-1-0.dll	42	GetFileAttributesExA
api-ms-win-core-file-l1-1-0.dll	43	GetFileAttributesExW
api-ms-win-core-file-l1-1-0.dll	44	GetFileAttributesW
api-ms-win-core-file-l1-1-0.dll	45	GetFileInformationByHandle
api-ms-win-core-file-l1-1-0.dll	46	GetFileSize
api-ms-win-core-file-l1-1-0.dll	47	GetFileSizeEx
api-ms-win-core-file-l1-1-0.dll	48	GetFileTime
api-ms-win-core-file-l1-1-0.dll	35	GetDiskFreeSpaceExW
api-ms-win-core-file-l1-1-0.dll	49	GetFileType
api-ms-win-core-file-l1-1-0.dll	30	FlushFileBuffers
api-ms-win-core-file-l1-1-0.dll	34	GetDiskFreeSpaceExA
api-ms-win-core-file-l1-1-0.dll	50	GetFinalPathNameByHandleA
api-ms-win-core-file-l1-1-0.dll	9	DeleteFileW
api-ms-win-core-file-l1-1-0.dll	17	FindFirstFileExA
api-ms-win-core-file-l1-1-0.dll	18	FindFirstFileExW
api-ms-win-core-file-l1-1-0.dll	20	FindFirstFileW
api-ms-win-core-file-l1-1-0.dll	22	FindFirstVolumeW
api-ms-win-core-file-l1-1-0.dll	8	DeleteFileA
api-ms-win-core-file-l1-1-0.dll	7	DefineDosDeviceW
api-ms-win-core-file-l1-1-0.dll	6	CreateFileW
api-ms-win-core-file-l1-1-0.dll	5	CreateFileA
api-ms-win-core-file-l1-1-0.dll	54	GetLogicalDriveStringsW
api-ms-win-core-file-l1-1-0.dll	3	CreateDirectoryW
api-ms-win-core-file-l1-1-0.dll	64	GetVolumeInformationByHandleW
api-ms-win-core-file-l1-1-0.dll	65	GetVolumeInformationW
api-ms-win-core-file-l1-1-0.dll	67	GetVolumePathNameW
api-ms-win-core-file-l1-1-0.dll	69	LocalFileTimeToFileTime
api-ms-win-core-file-l1-1-0.dll	70	LockFile
api-ms-win-core-file-l1-1-0.dll	71	LockFileEx
api-ms-win-core-file-l1-1-0.dll	72	QueryDosDeviceW
api-ms-win-core-file-l1-1-0.dll	73	ReadFile
api-ms-win-core-file-l1-1-0.dll	74	ReadFileEx
api-ms-win-core-file-l1-1-0.dll	75	ReadFileScatter
api-ms-win-core-file-l1-1-0.dll	76	RemoveDirectoryA
api-ms-win-core-file-l1-1-0.dll	77	RemoveDirectoryW
api-ms-win-core-file-l1-1-0.dll	78	SetEndOfFile
api-ms-win-core-file-l1-1-0.dll	81	SetFileAttributesA
api-ms-win-core-file-l1-1-0.dll	82	SetFileAttributesW
api-ms-win-core-file-l1-1-0.dll	83	SetFileInformationByHandle
api-ms-win-core-file-l1-1-0.dll	85	SetFilePointer
api-ms-win-core-file-l1-1-0.dll	86	SetFilePointerEx
api-ms-win-core-file-l1-1-0.dll	87	SetFileTime
api-ms-win-core-file-l1-1-0.dll	88	SetFileValidData
api-ms-win-core-file-l1-1-0.dll	89	UnlockFile
api-ms-win-core-file-l1-1-0.dll	90	UnlockFileEx
api-ms-win-core-file-l1-1-0.dll	91	WriteFile
api-ms-win-core-file-l1-1-0.dll	92	WriteFileEx
api-ms-win-core-file-l1-1-0.dll	93	WriteFileGather
api-ms-win-core-file-l1-1-0.dll	23	FindNextChangeNotification
api-ms-win-core-file-l1-1-0.dll	24	FindNextFileA
api-ms-win-core-file-l1-1-0.dll	53	GetFullPathNameW
api-ms-win-core-file-l1-1-0.dll	52	GetFullPathNameA
api-ms-win-core-file-l1-1-0.dll	33	GetDiskFreeSpaceA
api-ms-win-core-file-l1-1-0.dll	51	GetFinalPathNameByHandleW
api-ms-win-core-file-l1-1-0.dll	60	GetTempFileNameW
api-ms-win-core-file-l1-1-0.dll	10	DeleteVolumeMountPointW
api-ms-win-core-file-l1-1-0.dll	2	CreateDirectoryA
api-ms-win-core-file-l1-1-0.dll	26	FindNextFileW
api-ms-win-core-file-l1-1-0.dll	28	FindNextVolumeW
api-ms-win-core-file-l1-1-0.dll	29	FindVolumeClose
api-ms-win-core-file-l1-1-0.dll	1	CompareFileTime
api-ms-win-core-file-l1-1-0.dll	11	FileTimeToLocalFileTime
api-ms-win-core-file-l1-1-0.dll	12	FindClose
api-ms-win-core-file-l1-1-0.dll	13	FindCloseChangeNotification
api-ms-win-core-file-l1-1-0.dll	14	FindFirstChangeNotificationA
api-ms-win-core-file-l1-1-0.dll	15	FindFirstChangeNotificationW
api-ms-win-core-file-l1-1-0.dll	16	FindFirstFileA
api-ms-win-core-file-l1-2-0.dll	68	GetVolumePathNamesForVolumeNameW
api-ms-win-core-file-l1-2-0.dll	4	CreateFile2
api-ms-win-core-file-l1-2-0.dll	62	GetTempPathW
api-ms-win-core-file-l1-2-2.dll	61	GetTempPathA
api-ms-win-core-file-l1-2-2.dll	59	GetTempFileNameA
api-ms-win-core-file-l1-2-2.dll	21	FindFirstStreamW
api-ms-win-core-file-l1-2-2.dll	19	FindFirstFileNameW
api-ms-win-core-file-l1-2-2.dll	25	FindNextFileNameW
api-ms-win-core-file-l1-2-2.dll	63	GetVolumeInformationA
api-ms-win-core-file-l1-2-1.dll	32	GetCompressedFileSizeW
api-ms-win-core-file-l1-2-1.dll	84	SetFileIoOverlappedRange
api-ms-win-core-file-l1-2-1.dll	31	GetCompressedFileSizeA
api-ms-win-core-delayload-l1-1-0.dll		DelayLoadFailureHook
api-ms-win-core-io-l1-1-0.dll	8	GetQueuedCompletionStatusEx
api-ms-win-core-io-l1-1-0.dll	1	CancelIoEx
api-ms-win-core-io-l1-1-0.dll	4	DeviceIoControl
api-ms-win-core-io-l1-1-0.dll	7	GetQueuedCompletionStatus
api-ms-win-core-io-l1-1-0.dll	5	GetOverlappedResult
api-ms-win-core-io-l1-1-0.dll	3	CreateIoCompletionPort
api-ms-win-core-io-l1-1-0.dll	9	PostQueuedCompletionStatus
api-ms-win-core-io-l1-1-1.dll	2	CancelSynchronousIo
api-ms-win-core-io-l1-1-1.dll		CancelIo
api-ms-win-core-job-l1-1-0.dll		IsProcessInJob
api-ms-win-core-threadpool-legacy-l1-1-0.dll	6	UnregisterWaitEx
api-ms-win-core-threadpool-legacy-l1-1-0.dll	3	DeleteTimerQueueEx
api-ms-win-core-threadpool-legacy-l1-1-0.dll	2	CreateTimerQueueTimer
api-ms-win-core-threadpool-legacy-l1-1-0.dll	1	CreateTimerQueue
api-ms-win-core-threadpool-legacy-l1-1-0.dll	5	QueueUserWorkItem
api-ms-win-core-threadpool-legacy-l1-1-0.dll		ChangeTimerQueueTimer
api-ms-win-core-threadpool-legacy-l1-1-0.dll	4	DeleteTimerQueueTimer
api-ms-win-core-threadpool-private-l1-1-0.dll		RegisterWaitForSingleObjectEx
api-ms-win-core-largeinteger-l1-1-0.dll		MulDiv
api-ms-win-core-libraryloader-l1-2-2.dll	6	EnumResourceNamesW
api-ms-win-core-libraryloader-l1-2-0.dll	20	GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll	18	GetModuleHandleExA
api-ms-win-core-libraryloader-l1-2-0.dll	8	EnumResourceTypesExW
api-ms-win-core-libraryloader-l1-2-0.dll	16	GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll	15	GetModuleFileNameA
api-ms-win-core-libraryloader-l1-2-0.dll	14	FreeResource
api-ms-win-core-libraryloader-l1-2-0.dll	13	FreeLibraryAndExitThread
api-ms-win-core-libraryloader-l1-2-0.dll	19	GetModuleHandleExW
api-ms-win-core-libraryloader-l1-2-0.dll	3	EnumResourceLanguagesExW
api-ms-win-core-libraryloader-l1-2-0.dll	7	EnumResourceTypesExA
api-ms-win-core-libraryloader-l1-2-0.dll	17	GetModuleHandleA
api-ms-win-core-libraryloader-l1-2-0.dll	4	EnumResourceNamesExA
api-ms-win-core-libraryloader-l1-2-0.dll	12	FreeLibrary
api-ms-win-core-libraryloader-l1-2-0.dll	24	LoadLibraryExW
api-ms-win-core-libraryloader-l1-2-0.dll	2	EnumResourceLanguagesExA
api-ms-win-core-libraryloader-l1-2-0.dll	1	DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll	5	EnumResourceNamesExW
api-ms-win-core-libraryloader-l1-2-0.dll	9	FindResourceExW
api-ms-win-core-libraryloader-l1-2-0.dll	11	FindStringOrdinal
api-ms-win-core-libraryloader-l1-2-0.dll	21	GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll	23	LoadLibraryExA
api-ms-win-core-libraryloader-l1-2-0.dll	32	SizeofResource
api-ms-win-core-libraryloader-l1-2-0.dll	29	LockResource
api-ms-win-core-libraryloader-l1-2-0.dll	26	LoadResource
api-ms-win-core-libraryloader-l1-2-1.dll	22	LoadLibraryA
api-ms-win-core-libraryloader-l1-2-1.dll	25	LoadLibraryW
api-ms-win-core-libraryloader-l1-2-1.dll	10	FindResourceW
api-ms-win-core-libraryloader-l2-1-0.dll		LoadPackagedLibrary
api-ms-win-core-namedpipe-l1-2-2.dll		CallNamedPipeW
api-ms-win-core-namedpipe-l1-1-0.dll	2	CreateNamedPipeW
api-ms-win-core-namedpipe-l1-1-0.dll	1	ConnectNamedPipe
api-ms-win-core-namedpipe-l1-1-0.dll	3	CreatePipe
api-ms-win-core-namedpipe-l1-1-0.dll	4	DisconnectNamedPipe
api-ms-win-core-namedpipe-l1-1-0.dll	5	GetNamedPipeClientComputerNameW
api-ms-win-core-namedpipe-l1-1-0.dll	9	PeekNamedPipe
api-ms-win-core-namedpipe-l1-1-0.dll	10	SetNamedPipeHandleState
api-ms-win-core-namedpipe-l1-1-0.dll	11	TransactNamedPipe
api-ms-win-core-namedpipe-l1-1-0.dll	12	WaitNamedPipeW
api-ms-win-core-namedpipe-l1-2-1.dll	6	GetNamedPipeHandleStateW
api-ms-win-core-datetime-l1-1-0.dll		GetDateFormatA
api-ms-win-core-datetime-l1-1-0.dll	4	GetTimeFormatA
api-ms-win-core-datetime-l1-1-0.dll	6	GetTimeFormatW
api-ms-win-core-datetime-l1-1-0.dll	2	GetDateFormatW
api-ms-win-core-datetime-l1-1-1.dll	5	GetTimeFormatEx
api-ms-win-core-datetime-l1-1-1.dll	1	GetDateFormatEx
api-ms-win-core-datetime-l1-1-2.dll	3	GetDurationFormatEx
api-ms-win-core-sysinfo-l1-2-0.dll	23	GetSystemTimePreciseAsFileTime
api-ms-win-core-sysinfo-l1-2-0.dll	1	EnumSystemFirmwareTables
api-ms-win-core-sysinfo-l1-2-0.dll	13	GetProductInfo
api-ms-win-core-sysinfo-l1-2-0.dll	42	SetSystemTime
api-ms-win-core-sysinfo-l1-2-0.dll	39	SetComputerNameExW
api-ms-win-core-sysinfo-l1-2-0.dll	16	GetSystemFirmwareTable
api-ms-win-core-sysinfo-l1-2-0.dll	8	GetNativeSystemInfo
api-ms-win-core-sysinfo-l1-1-0.dll	33	GlobalMemoryStatusEx
api-ms-win-core-sysinfo-l1-1-0.dll	32	GetWindowsDirectoryW
api-ms-win-core-sysinfo-l1-1-0.dll	31	GetWindowsDirectoryA
api-ms-win-core-sysinfo-l1-1-0.dll	30	GetVersionExW
api-ms-win-core-sysinfo-l1-1-0.dll	29	GetVersionExA
api-ms-win-core-sysinfo-l1-1-0.dll	28	GetVersion
api-ms-win-core-sysinfo-l1-1-0.dll	41	SetLocalTime
api-ms-win-core-sysinfo-l1-1-0.dll	20	GetSystemTimeAdjustment
api-ms-win-core-sysinfo-l1-1-0.dll	19	GetSystemTime
api-ms-win-core-sysinfo-l1-1-0.dll	17	GetSystemInfo
api-ms-win-core-sysinfo-l1-1-0.dll	5	GetLocalTime
api-ms-win-core-sysinfo-l1-1-0.dll	3	GetComputerNameExW
api-ms-win-core-sysinfo-l1-1-0.dll	2	GetComputerNameExA
api-ms-win-core-sysinfo-l1-1-0.dll	7	GetLogicalProcessorInformationEx
api-ms-win-core-sysinfo-l1-1-0.dll	22	GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-1-0.dll	26	GetTickCount
api-ms-win-core-sysinfo-l1-1-0.dll	6	GetLogicalProcessorInformation
api-ms-win-core-sysinfo-l1-2-3.dll	40	SetComputerNameW
api-ms-win-core-sysinfo-l1-2-3.dll	38	SetComputerNameExA
api-ms-win-core-sysinfo-l1-2-3.dll	36	SetComputerNameA
api-ms-win-core-sysinfo-l1-2-1.dll	11	GetPhysicallyInstalledSystemMemory
api-ms-win-core-sysinfo-l1-2-1.dll		DnsHostnameToComputerNameExW
api-ms-win-core-sysinfo-l1-2-1.dll	37	SetComputerNameEx2W
api-ms-win-core-timezone-l1-1-0.dll	5	GetTimeZoneInformationForYear
api-ms-win-core-timezone-l1-1-0.dll	11	SystemTimeToTzSpecificLocalTime
api-ms-win-core-timezone-l1-1-0.dll	1	FileTimeToSystemTime
api-ms-win-core-timezone-l1-1-0.dll	8	SetDynamicTimeZoneInformation
api-ms-win-core-timezone-l1-1-0.dll	13	TzSpecificLocalTimeToSystemTime
api-ms-win-core-timezone-l1-1-0.dll	4	GetTimeZoneInformation
api-ms-win-core-timezone-l1-1-0.dll	10	SystemTimeToFileTime
api-ms-win-core-timezone-l1-1-0.dll	2	GetDynamicTimeZoneInformation
api-ms-win-core-timezone-l1-1-0.dll	9	SetTimeZoneInformation
api-ms-win-core-localization-l1-2-0.dll	7	FindNLSStringEx
api-ms-win-core-localization-l1-2-0.dll	32	GetThreadUILanguage
api-ms-win-core-localization-l1-2-0.dll	59	SetProcessPreferredUILanguages
api-ms-win-core-localization-l1-2-0.dll	15	GetFileMUIInfo
api-ms-win-core-localization-l1-2-0.dll	11	GetCPInfo
api-ms-win-core-localization-l1-2-0.dll	12	GetCPInfoExW
api-ms-win-core-localization-l1-2-0.dll	22	GetNLSVersion
api-ms-win-core-localization-l1-2-0.dll	49	IsValidNLSVersion
api-ms-win-core-localization-l1-2-0.dll	61	SetThreadPreferredUILanguages
api-ms-win-core-localization-l1-2-0.dll	63	SetThreadUILanguage
api-ms-win-core-localization-l1-2-0.dll	19	GetLocaleInfoA
api-ms-win-core-localization-l1-2-0.dll	21	GetLocaleInfoW
api-ms-win-core-localization-l1-2-0.dll	24	GetOEMCP
api-ms-win-core-localization-l1-2-0.dll	29	GetSystemPreferredUILanguages
api-ms-win-core-localization-l1-2-0.dll	10	GetACP
api-ms-win-core-localization-l1-2-0.dll	16	GetFileMUIPath
api-ms-win-core-localization-l1-2-0.dll	40	IdnToAscii
api-ms-win-core-localization-l1-2-0.dll	9	FormatMessageW
api-ms-win-core-localization-l1-2-0.dll	25	GetProcessPreferredUILanguages
api-ms-win-core-localization-l1-2-0.dll	13	GetCalendarInfoEx
api-ms-win-core-localization-l1-2-0.dll	26	GetSystemDefaultLCID
api-ms-win-core-localization-l1-2-0.dll	30	GetThreadLocale
api-ms-win-core-localization-l1-2-0.dll	36	GetUserDefaultLangID
api-ms-win-core-localization-l1-2-0.dll	35	GetUserDefaultLCID
api-ms-win-core-localization-l1-2-0.dll	42	IsDBCSLeadByte
api-ms-win-core-localization-l1-2-0.dll	43	IsDBCSLeadByteEx
api-ms-win-core-localization-l1-2-0.dll	44	IsNLSDefinedString
api-ms-win-core-localization-l1-2-0.dll	45	IsValidCodePage
api-ms-win-core-localization-l1-2-0.dll	46	IsValidLanguageGroup
api-ms-win-core-localization-l1-2-0.dll	47	IsValidLocale
api-ms-win-core-localization-l1-2-0.dll	51	LCMapStringA
api-ms-win-core-localization-l1-2-0.dll	20	GetLocaleInfoEx
api-ms-win-core-localization-l1-2-0.dll	53	LCMapStringW
api-ms-win-core-localization-l1-2-0.dll	57	SetCalendarInfoW
api-ms-win-core-localization-l1-2-0.dll	58	SetLocaleInfoW
api-ms-win-core-localization-l1-2-0.dll	39	GetUserPreferredUILanguages
api-ms-win-core-localization-l1-2-0.dll	8	FormatMessageA
api-ms-win-core-localization-l1-2-0.dll	6	FindNLSString
api-ms-win-core-localization-l1-2-0.dll	41	IdnToUnicode
api-ms-win-core-localization-l1-2-0.dll	3	EnumSystemLocalesA
api-ms-win-core-localization-l1-2-0.dll	60	SetThreadLocale
api-ms-win-core-localization-l1-2-0.dll	55	ResolveLocaleName
api-ms-win-core-localization-l1-2-0.dll	54	LocaleNameToLCID
api-ms-win-core-localization-l1-2-0.dll	52	LCMapStringEx
api-ms-win-core-localization-l1-2-0.dll	48	IsValidLocaleName
api-ms-win-core-localization-l1-2-0.dll	23	GetNLSVersionEx
api-ms-win-core-localization-l1-2-0.dll	27	GetSystemDefaultLangID
api-ms-win-core-localization-l1-2-0.dll	31	GetThreadPreferredUILanguages
api-ms-win-core-localization-l1-2-0.dll	33	GetUILanguageInfo
api-ms-win-core-localization-l1-2-0.dll		ConvertDefaultLocale
api-ms-win-core-localization-l1-2-0.dll	67	VerLanguageNameW
api-ms-win-core-localization-l1-2-0.dll	14	GetCalendarInfoW
api-ms-win-core-localization-l1-2-0.dll	66	VerLanguageNameA
api-ms-win-core-localization-l1-2-0.dll	5	EnumSystemLocalesW
api-ms-win-core-processsnapshot-l1-1-0.dll	2	PssFreeSnapshot
api-ms-win-core-processsnapshot-l1-1-0.dll	3	PssQuerySnapshot
api-ms-win-core-processsnapshot-l1-1-0.dll	9	PssWalkSnapshot
api-ms-win-core-processsnapshot-l1-1-0.dll	7	PssWalkMarkerSeekToBeginning
api-ms-win-core-processsnapshot-l1-1-0.dll	8	PssWalkMarkerSetPosition
api-ms-win-core-processsnapshot-l1-1-0.dll	6	PssWalkMarkerGetPosition
api-ms-win-core-processsnapshot-l1-1-0.dll	5	PssWalkMarkerFree
api-ms-win-core-processsnapshot-l1-1-0.dll	4	PssWalkMarkerCreate
api-ms-win-core-processsnapshot-l1-1-0.dll		PssCaptureSnapshot
api-ms-win-core-processsnapshot-l1-1-0.dll	1	PssDuplicateSnapshot
api-ms-win-core-processenvironment-l1-1-0.dll	18	SetCurrentDirectoryW
api-ms-win-core-processenvironment-l1-1-0.dll	23	SetStdHandleEx
api-ms-win-core-processenvironment-l1-1-0.dll	22	SetStdHandle
api-ms-win-core-processenvironment-l1-1-0.dll	10	GetEnvironmentVariableA
api-ms-win-core-processenvironment-l1-1-0.dll	19	SetEnvironmentStringsW
api-ms-win-core-processenvironment-l1-1-0.dll	20	SetEnvironmentVariableA
api-ms-win-core-processenvironment-l1-1-0.dll	8	GetEnvironmentStrings
api-ms-win-core-processenvironment-l1-1-0.dll	11	GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-1-0.dll		ExpandEnvironmentStringsA
api-ms-win-core-processenvironment-l1-1-0.dll	1	ExpandEnvironmentStringsW
api-ms-win-core-processenvironment-l1-1-0.dll	2	FreeEnvironmentStringsA
api-ms-win-core-processenvironment-l1-1-0.dll	3	FreeEnvironmentStringsW
api-ms-win-core-processenvironment-l1-1-0.dll	4	GetCommandLineA
api-ms-win-core-processenvironment-l1-1-0.dll	5	GetCommandLineW
api-ms-win-core-processenvironment-l1-1-0.dll	16	SearchPathW
api-ms-win-core-processenvironment-l1-1-0.dll	12	GetStdHandle
api-ms-win-core-processenvironment-l1-1-0.dll	9	GetEnvironmentStringsW
api-ms-win-core-processenvironment-l1-1-0.dll	7	GetCurrentDirectoryW
api-ms-win-core-processenvironment-l1-1-0.dll	21	SetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-1-0.dll	6	GetCurrentDirectoryA
api-ms-win-core-processenvironment-l1-1-0.dll	17	SetCurrentDirectoryA
api-ms-win-core-processenvironment-l1-2-0.dll	13	NeedCurrentDirectoryForExePathA
api-ms-win-core-processenvironment-l1-2-0.dll	14	NeedCurrentDirectoryForExePathW
api-ms-win-core-processenvironment-l1-2-0.dll	15	SearchPathA
api-ms-win-core-string-l1-1-0.dll	1	CompareStringOrdinal
api-ms-win-core-string-l1-1-0.dll		CompareStringEx
api-ms-win-core-string-l1-1-0.dll	7	WideCharToMultiByte
api-ms-win-core-string-l1-1-0.dll	5	GetStringTypeW
api-ms-win-core-string-l1-1-0.dll	4	GetStringTypeExW
api-ms-win-core-string-l1-1-0.dll	3	FoldStringW
api-ms-win-core-string-l1-1-0.dll	2	CompareStringW
api-ms-win-core-string-l1-1-0.dll	6	MultiByteToWideChar
api-ms-win-core-debug-l1-1-1.dll	1	ContinueDebugEvent
api-ms-win-core-debug-l1-1-1.dll	8	WaitForDebugEvent
api-ms-win-core-debug-l1-1-1.dll		CheckRemoteDebuggerPresent
api-ms-win-core-debug-l1-1-1.dll	3	DebugActiveProcessStop
api-ms-win-core-debug-l1-1-1.dll	2	DebugActiveProcess
api-ms-win-core-debug-l1-1-0.dll	7	OutputDebugStringW
api-ms-win-core-debug-l1-1-0.dll	4	DebugBreak
api-ms-win-core-debug-l1-1-0.dll	5	IsDebuggerPresent
api-ms-win-core-debug-l1-1-0.dll	6	OutputDebugStringA
api-ms-win-core-errorhandling-l1-1-0.dll	5	GetLastError
api-ms-win-core-errorhandling-l1-1-0.dll	4	GetErrorMode
api-ms-win-core-errorhandling-l1-1-0.dll	15	SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll	13	SetLastError
api-ms-win-core-errorhandling-l1-1-0.dll	17	UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll	12	SetErrorMode
api-ms-win-core-errorhandling-l1-1-0.dll	7	RaiseException
api-ms-win-core-errorhandling-l1-1-3.dll	14	SetThreadErrorMode
api-ms-win-core-errorhandling-l1-1-3.dll	6	GetThreadErrorMode
api-ms-win-core-fibers-l1-1-0.dll	1	FlsFree
api-ms-win-core-fibers-l1-1-0.dll	2	FlsGetValue
api-ms-win-core-fibers-l1-1-0.dll	3	FlsSetValue
api-ms-win-core-fibers-l1-1-0.dll		FlsAlloc
api-ms-win-core-util-l1-1-0.dll		Beep
api-ms-win-core-profile-l1-1-0.dll	1	QueryPerformanceFrequency
api-ms-win-core-profile-l1-1-0.dll		QueryPerformanceCounter
api-ms-win-security-base-l1-1-0.dll	44	EqualSid
api-ms-win-security-base-l1-1-0.dll	65	GetSidSubAuthorityCount
api-ms-win-security-base-l1-1-0.dll	66	GetTokenInformation
api-ms-win-security-base-l1-1-0.dll	35	CreateWellKnownSid
api-ms-win-security-base-l1-1-0.dll	64	GetSidSubAuthority
api-ms-win-security-base-l1-1-0.dll	73	InitializeSid
api-ms-win-security-base-l1-1-0.dll		AccessCheck
api-ms-win-security-base-l1-1-0.dll	22	AllocateAndInitializeSid
api-ms-win-security-base-l1-1-0.dll	46	FreeSid
api-ms-win-security-base-l1-1-0.dll	40	DuplicateToken
api-ms-win-security-base-l1-2-0.dll	18	AddResourceAttributeAce
api-ms-win-security-base-l1-2-0.dll	91	SetCachedSigningLevel
api-ms-win-security-base-l1-2-0.dll	50	GetCachedSigningLevel
api-ms-win-security-base-l1-2-0.dll	49	GetAppContainerAce
api-ms-win-security-base-l1-2-0.dll	28	CheckTokenMembershipEx
api-ms-win-security-base-l1-2-0.dll	26	CheckTokenCapability
api-ms-win-security-base-l1-2-0.dll	19	AddScopedPolicyIDAce
api-ms-win-security-appcontainer-l1-1-0.dll		GetAppContainerNamedObjectPath
api-ms-win-core-comm-l1-1-0.dll	12	SetCommBreak
api-ms-win-core-comm-l1-1-0.dll	13	SetCommConfig
api-ms-win-core-comm-l1-1-0.dll	9	GetCommTimeouts
api-ms-win-core-comm-l1-1-0.dll	8	GetCommState
api-ms-win-core-comm-l1-1-0.dll	14	SetCommMask
api-ms-win-core-comm-l1-1-0.dll	5	GetCommModemStatus
api-ms-win-core-comm-l1-1-0.dll	4	GetCommMask
api-ms-win-core-comm-l1-1-0.dll	3	GetCommConfig
api-ms-win-core-comm-l1-1-0.dll	2	EscapeCommFunction
api-ms-win-core-comm-l1-1-0.dll	1	ClearCommError
api-ms-win-core-comm-l1-1-0.dll	7	GetCommProperties
api-ms-win-core-comm-l1-1-0.dll	19	WaitCommEvent
api-ms-win-core-comm-l1-1-0.dll	18	TransmitCommChar
api-ms-win-core-comm-l1-1-0.dll	17	SetupComm
api-ms-win-core-comm-l1-1-0.dll	16	SetCommTimeouts
api-ms-win-core-comm-l1-1-0.dll	15	SetCommState
api-ms-win-core-comm-l1-1-0.dll	11	PurgeComm
api-ms-win-core-comm-l1-1-0.dll		ClearCommBreak
api-ms-win-core-realtime-l1-1-0.dll	8	QueryThreadCycleTime
api-ms-win-core-realtime-l1-1-0.dll	9	QueryUnbiasedInterruptTime
api-ms-win-core-realtime-l1-1-0.dll	7	QueryProcessCycleTime
api-ms-win-core-realtime-l1-1-0.dll	4	QueryIdleProcessorCycleTimeEx
api-ms-win-core-realtime-l1-1-0.dll	3	QueryIdleProcessorCycleTime
api-ms-win-core-wow64-l1-1-1.dll	6	IsWow64Process2
api-ms-win-core-wow64-l1-1-1.dll	1	GetSystemWow64Directory2W
api-ms-win-core-wow64-l1-1-1.dll	2	GetSystemWow64DirectoryA
api-ms-win-core-wow64-l1-1-1.dll	3	GetSystemWow64DirectoryW
api-ms-win-core-wow64-l1-1-0.dll	5	IsWow64Process
api-ms-win-core-wow64-l1-1-0.dll	7	Wow64DisableWow64FsRedirection
api-ms-win-core-wow64-l1-1-0.dll	9	Wow64RevertWow64FsRedirection
api-ms-win-core-wow64-l1-1-3.dll	12	Wow64SuspendThread
api-ms-win-core-wow64-l1-1-3.dll	10	Wow64SetThreadContext
api-ms-win-core-wow64-l1-1-3.dll	8	Wow64GetThreadContext
api-ms-win-core-systemtopology-l1-1-1.dll	2	GetNumaProximityNodeEx
api-ms-win-core-systemtopology-l1-1-0.dll		GetNumaHighestNodeNumber
api-ms-win-core-systemtopology-l1-1-0.dll	1	GetNumaNodeProcessorMaskEx
api-ms-win-core-processtopology-l1-1-0.dll	2	SetThreadGroupAffinity
api-ms-win-core-processtopology-l1-1-0.dll	1	GetThreadGroupAffinity
api-ms-win-core-processtopology-l1-1-0.dll		GetProcessGroupAffinity
api-ms-win-core-namespace-l1-1-0.dll	4	DeleteBoundaryDescriptor
api-ms-win-core-namespace-l1-1-0.dll	1	ClosePrivateNamespace
api-ms-win-core-namespace-l1-1-0.dll		AddSIDToBoundaryDescriptor
api-ms-win-core-namespace-l1-1-0.dll	2	CreateBoundaryDescriptorW
api-ms-win-core-namespace-l1-1-0.dll	5	OpenPrivateNamespaceW
api-ms-win-core-namespace-l1-1-0.dll	3	CreatePrivateNamespaceW
api-ms-win-core-file-l2-1-2.dll	2	CopyFileW
api-ms-win-core-file-l2-1-2.dll	4	CreateHardLinkA
api-ms-win-core-file-l2-1-0.dll	14	ReplaceFileW
api-ms-win-core-file-l2-1-0.dll		CopyFile2
api-ms-win-core-file-l2-1-0.dll	1	CopyFileExW
api-ms-win-core-file-l2-1-0.dll	13	ReadDirectoryChangesW
api-ms-win-core-file-l2-1-0.dll	11	ReOpenFile
api-ms-win-core-file-l2-1-0.dll	6	CreateSymbolicLinkW
api-ms-win-core-file-l2-1-0.dll	5	CreateHardLinkW
api-ms-win-core-file-l2-1-0.dll	7	GetFileInformationByHandleEx
api-ms-win-core-file-l2-1-0.dll	3	CreateDirectoryExW
api-ms-win-core-file-l2-1-0.dll	9	MoveFileWithProgressW
api-ms-win-core-file-l2-1-0.dll	8	MoveFileExW
api-ms-win-core-file-l2-1-3.dll	12	ReadDirectoryChangesExW
api-ms-win-core-file-l2-1-1.dll	10	OpenFileById
api-ms-win-core-xstate-l2-1-0.dll		CopyContext
api-ms-win-core-xstate-l2-1-0.dll	6	SetXStateFeaturesMask
api-ms-win-core-xstate-l2-1-0.dll	2	GetXStateFeaturesMask
api-ms-win-core-xstate-l2-1-0.dll	5	LocateXStateFeature
api-ms-win-core-xstate-l2-1-0.dll	3	InitializeContext
api-ms-win-core-xstate-l2-1-0.dll	1	GetEnabledXStateFeatures
api-ms-win-core-xstate-l2-1-1.dll	4	InitializeContext2
api-ms-win-core-localization-l2-1-0.dll		EnumCalendarInfoExEx
api-ms-win-core-localization-l2-1-0.dll	3	EnumDateFormatsExEx
api-ms-win-core-localization-l2-1-0.dll	7	EnumTimeFormatsEx
api-ms-win-core-localization-l2-1-0.dll	9	GetCurrencyFormatEx
api-ms-win-core-localization-l2-1-0.dll	8	EnumTimeFormatsW
api-ms-win-core-localization-l2-1-0.dll	6	EnumSystemCodePagesW
api-ms-win-core-localization-l2-1-0.dll	5	EnumDateFormatsW
api-ms-win-core-localization-l2-1-0.dll	4	EnumDateFormatsExW
api-ms-win-core-localization-l2-1-0.dll	2	EnumCalendarInfoW
api-ms-win-core-localization-l2-1-0.dll	1	EnumCalendarInfoExW
api-ms-win-core-localization-l2-1-0.dll	11	GetNumberFormatEx
api-ms-win-core-normalization-l1-1-0.dll	1	IdnToNameprepUnicode
api-ms-win-core-normalization-l1-1-0.dll		GetStringScripts
api-ms-win-core-normalization-l1-1-0.dll	2	IsNormalizedString
api-ms-win-core-normalization-l1-1-0.dll	3	NormalizeString
api-ms-win-core-normalization-l1-1-0.dll	4	VerifyScripts
api-ms-win-core-fibers-l2-1-0.dll	6	SwitchToFiber
api-ms-win-core-fibers-l2-1-0.dll	3	CreateFiber
api-ms-win-core-fibers-l2-1-0.dll		ConvertFiberToThread
api-ms-win-core-fibers-l2-1-0.dll	5	DeleteFiber
api-ms-win-core-fibers-l2-1-0.dll	1	ConvertThreadToFiber
api-ms-win-core-fibers-l2-1-1.dll	4	CreateFiberEx
api-ms-win-core-fibers-l2-1-1.dll	2	ConvertThreadToFiberEx
api-ms-win-core-localization-private-l1-1-0.dll	2	NlsCheckPolicy
api-ms-win-core-localization-private-l1-1-0.dll	3	NlsGetCacheUpdateCount
api-ms-win-core-localization-private-l1-1-0.dll	5	NlsUpdateSystemLocale
api-ms-win-core-localization-private-l1-1-0.dll	4	NlsUpdateLocale
api-ms-win-core-sidebyside-l1-1-0.dll	9	ReleaseActCtx
api-ms-win-core-sidebyside-l1-1-0.dll		ActivateActCtx
api-ms-win-core-sidebyside-l1-1-0.dll	1	AddRefActCtx
api-ms-win-core-sidebyside-l1-1-0.dll	10	ZombifyActCtx
api-ms-win-core-sidebyside-l1-1-0.dll	2	CreateActCtxW
api-ms-win-core-sidebyside-l1-1-0.dll	3	DeactivateActCtx
api-ms-win-core-sidebyside-l1-1-0.dll	4	FindActCtxSectionGuid
api-ms-win-core-sidebyside-l1-1-0.dll	5	FindActCtxSectionStringW
api-ms-win-core-sidebyside-l1-1-0.dll	6	GetCurrentActCtx
api-ms-win-core-sidebyside-l1-1-0.dll	8	QueryActCtxW
api-ms-win-core-sidebyside-l1-1-0.dll	7	QueryActCtxSettingsW
api-ms-win-core-appcompat-l1-1-0.dll	9	BaseUpdateAppcompatCache
api-ms-win-core-appcompat-l1-1-0.dll	4	BaseFlushAppcompatCache
api-ms-win-core-appcompat-l1-1-0.dll	3	BaseDumpAppcompatCache
api-ms-win-core-appcompat-l1-1-0.dll	6	BaseInitAppcompatCacheSupport
api-ms-win-core-appcompat-l1-1-0.dll	2	BaseCleanupAppcompatCacheSupport
api-ms-win-core-appcompat-l1-1-0.dll	1	BaseCheckAppcompatCacheEx
api-ms-win-core-appcompat-l1-1-0.dll		BaseCheckAppcompatCache
api-ms-win-core-windowserrorreporting-l1-1-0.dll	19	WerUnregisterMemoryBlock
api-ms-win-core-windowserrorreporting-l1-1-0.dll	9	WerRegisterFile
api-ms-win-core-windowserrorreporting-l1-1-0.dll	20	WerUnregisterRuntimeExceptionModule
api-ms-win-core-windowserrorreporting-l1-1-0.dll	11	WerRegisterRuntimeExceptionModule
api-ms-win-core-windowserrorreporting-l1-1-0.dll	18	WerUnregisterFile
api-ms-win-core-windowserrorreporting-l1-1-0.dll	1	GetApplicationRestartSettings
api-ms-win-core-windowserrorreporting-l1-1-0.dll		GetApplicationRecoveryCallback
api-ms-win-core-windowserrorreporting-l1-1-0.dll	10	WerRegisterMemoryBlock
api-ms-win-core-windowserrorreporting-l1-1-3.dll	2	RegisterApplicationRestart
api-ms-win-core-windowserrorreporting-l1-1-3.dll	3	UnregisterApplicationRestart
api-ms-win-core-windowserrorreporting-l1-1-1.dll	5	WerRegisterAdditionalProcess
api-ms-win-core-windowserrorreporting-l1-1-1.dll	14	WerUnregisterAdditionalProcess
api-ms-win-core-windowserrorreporting-l1-1-1.dll	16	WerUnregisterCustomMetadata
api-ms-win-core-windowserrorreporting-l1-1-1.dll	7	WerRegisterCustomMetadata
api-ms-win-core-windowserrorreporting-l1-1-1.dll	17	WerUnregisterExcludedMemoryBlock
api-ms-win-core-windowserrorreporting-l1-1-1.dll	8	WerRegisterExcludedMemoryBlock
api-ms-win-core-windowserrorreporting-l1-1-2.dll	6	WerRegisterAppLocalDump
api-ms-win-core-windowserrorreporting-l1-1-2.dll	15	WerUnregisterAppLocalDump
api-ms-win-core-console-l1-1-0.dll	6	GetConsoleMode
api-ms-win-core-console-l1-1-0.dll	7	GetConsoleOutputCP
api-ms-win-core-console-l1-1-0.dll	5	GetConsoleCP
api-ms-win-core-console-l1-1-0.dll	19	WriteConsoleW
api-ms-win-core-console-l1-1-0.dll	8	GetNumberOfConsoleInputEvents
api-ms-win-core-console-l1-1-0.dll	11	ReadConsoleA
api-ms-win-core-console-l1-1-0.dll	12	ReadConsoleInputA
api-ms-win-core-console-l1-1-0.dll	13	ReadConsoleInputW
api-ms-win-core-console-l1-1-0.dll	14	ReadConsoleW
api-ms-win-core-console-l1-1-0.dll	16	SetConsoleCtrlHandler
api-ms-win-core-console-l1-1-0.dll	17	SetConsoleMode
api-ms-win-core-console-l1-1-0.dll	18	WriteConsoleA
api-ms-win-core-console-l1-1-0.dll		AllocConsole
api-ms-win-core-console-l1-2-0.dll	9	PeekConsoleInputA
api-ms-win-core-console-l1-2-0.dll	1	AttachConsole
api-ms-win-core-console-l1-2-0.dll	4	FreeConsole
api-ms-win-core-console-l1-2-0.dll	10	PeekConsoleInputW
api-ms-win-core-console-l1-2-1.dll	3	CreatePseudoConsole
api-ms-win-core-console-l1-2-1.dll	2	ClosePseudoConsole
api-ms-win-core-console-l1-2-1.dll	15	ResizePseudoConsole
api-ms-win-core-console-l2-1-0.dll	37	WriteConsoleOutputCharacterW
api-ms-win-core-console-l2-1-0.dll	5	GenerateConsoleCtrlEvent
api-ms-win-core-console-l2-1-0.dll	6	GetConsoleCursorInfo
api-ms-win-core-console-l2-1-0.dll	9	GetConsoleScreenBufferInfo
api-ms-win-core-console-l2-1-0.dll	4	FlushConsoleInputBuffer
api-ms-win-core-console-l2-1-0.dll	16	ReadConsoleOutputCharacterA
api-ms-win-core-console-l2-1-0.dll		CreateConsoleScreenBuffer
api-ms-win-core-console-l2-1-0.dll	26	SetConsoleScreenBufferInfoEx
api-ms-win-core-console-l2-1-0.dll	13	GetLargestConsoleWindowSize
api-ms-win-core-console-l2-1-0.dll	14	ReadConsoleOutputA
api-ms-win-core-console-l2-1-0.dll	15	ReadConsoleOutputAttribute
api-ms-win-core-console-l2-1-0.dll	1	FillConsoleOutputAttribute
api-ms-win-core-console-l2-1-0.dll	3	FillConsoleOutputCharacterW
api-ms-win-core-console-l2-1-0.dll	10	GetConsoleScreenBufferInfoEx
api-ms-win-core-console-l2-1-0.dll	38	WriteConsoleOutputW
api-ms-win-core-console-l2-1-0.dll	2	FillConsoleOutputCharacterA
api-ms-win-core-console-l2-1-0.dll	17	ReadConsoleOutputCharacterW
api-ms-win-core-console-l2-1-0.dll	18	ReadConsoleOutputW
api-ms-win-core-console-l2-1-0.dll	19	ScrollConsoleScreenBufferA
api-ms-win-core-console-l2-1-0.dll	20	ScrollConsoleScreenBufferW
api-ms-win-core-console-l2-1-0.dll	21	SetConsoleActiveScreenBuffer
api-ms-win-core-console-l2-1-0.dll	22	SetConsoleCP
api-ms-win-core-console-l2-1-0.dll	23	SetConsoleCursorInfo
api-ms-win-core-console-l2-1-0.dll	24	SetConsoleCursorPosition
api-ms-win-core-console-l2-1-0.dll	36	WriteConsoleOutputCharacterA
api-ms-win-core-console-l2-1-0.dll	35	WriteConsoleOutputAttribute
api-ms-win-core-console-l2-1-0.dll	34	WriteConsoleOutputA
api-ms-win-core-console-l2-1-0.dll	33	WriteConsoleInputW
api-ms-win-core-console-l2-1-0.dll	32	WriteConsoleInputA
api-ms-win-core-console-l2-1-0.dll	31	SetConsoleWindowInfo
api-ms-win-core-console-l2-1-0.dll	28	SetConsoleTextAttribute
api-ms-win-core-console-l2-1-0.dll	27	SetConsoleScreenBufferSize
api-ms-win-core-console-l2-1-0.dll	25	SetConsoleOutputCP
api-ms-win-core-console-l2-2-0.dll	8	GetConsoleOriginalTitleW
api-ms-win-core-console-l2-2-0.dll	11	GetConsoleTitleA
api-ms-win-core-console-l2-2-0.dll	30	SetConsoleTitleW
api-ms-win-core-console-l2-2-0.dll	29	SetConsoleTitleA
api-ms-win-core-console-l2-2-0.dll	12	GetConsoleTitleW
api-ms-win-core-console-l2-2-0.dll	7	GetConsoleOriginalTitleA
api-ms-win-core-console-l3-2-0.dll		AddConsoleAliasA
api-ms-win-core-console-l3-2-0.dll	1	AddConsoleAliasW
api-ms-win-core-console-l3-2-0.dll	2	ExpungeConsoleCommandHistoryA
api-ms-win-core-console-l3-2-0.dll	3	ExpungeConsoleCommandHistoryW
api-ms-win-core-console-l3-2-0.dll	4	GetConsoleAliasA
api-ms-win-core-console-l3-2-0.dll	31	SetCurrentConsoleFontEx
api-ms-win-core-console-l3-2-0.dll	30	SetConsoleNumberOfCommandsW
api-ms-win-core-console-l3-2-0.dll	29	SetConsoleNumberOfCommandsA
api-ms-win-core-console-l3-2-0.dll	28	SetConsoleHistoryInfo
api-ms-win-core-console-l3-2-0.dll	5	GetConsoleAliasExesA
api-ms-win-core-console-l3-2-0.dll	26	GetNumberOfConsoleMouseButtons
api-ms-win-core-console-l3-2-0.dll	25	GetCurrentConsoleFontEx
api-ms-win-core-console-l3-2-0.dll	24	GetCurrentConsoleFont
api-ms-win-core-console-l3-2-0.dll	23	GetConsoleWindow
api-ms-win-core-console-l3-2-0.dll	22	GetConsoleSelectionInfo
api-ms-win-core-console-l3-2-0.dll	21	GetConsoleProcessList
api-ms-win-core-console-l3-2-0.dll	20	GetConsoleHistoryInfo
api-ms-win-core-console-l3-2-0.dll	19	GetConsoleFontSize
api-ms-win-core-console-l3-2-0.dll	18	GetConsoleDisplayMode
api-ms-win-core-console-l3-2-0.dll	17	GetConsoleCommandHistoryW
api-ms-win-core-console-l3-2-0.dll	16	GetConsoleCommandHistoryLengthW
api-ms-win-core-console-l3-2-0.dll	15	GetConsoleCommandHistoryLengthA
api-ms-win-core-console-l3-2-0.dll	14	GetConsoleCommandHistoryA
api-ms-win-core-console-l3-2-0.dll	13	GetConsoleAliasesW
api-ms-win-core-console-l3-2-0.dll	12	GetConsoleAliasesLengthW
api-ms-win-core-console-l3-2-0.dll	11	GetConsoleAliasesLengthA
api-ms-win-core-console-l3-2-0.dll	10	GetConsoleAliasesA
api-ms-win-core-console-l3-2-0.dll	9	GetConsoleAliasW
api-ms-win-core-console-l3-2-0.dll	8	GetConsoleAliasExesW
api-ms-win-core-console-l3-2-0.dll	7	GetConsoleAliasExesLengthW
api-ms-win-core-console-l3-2-0.dll	6	GetConsoleAliasExesLengthA
api-ms-win-core-console-l3-2-0.dll	27	SetConsoleDisplayMode
api-ms-win-core-psapi-l1-1-0.dll		K32EmptyWorkingSet
api-ms-win-core-psapi-l1-1-0.dll	18	K32QueryWorkingSet
api-ms-win-core-psapi-l1-1-0.dll	20	QueryFullProcessImageNameW
api-ms-win-core-psapi-l1-1-0.dll	11	K32GetModuleInformation
api-ms-win-core-psapi-l1-1-0.dll	4	K32EnumProcessModulesEx
api-ms-win-core-psapi-l1-1-0.dll	9	K32GetModuleBaseNameW
api-ms-win-core-psapi-l1-1-0.dll	3	K32EnumProcessModules
api-ms-win-core-psapi-l1-1-0.dll	5	K32EnumProcesses
api-ms-win-core-psapi-l1-1-0.dll	19	K32QueryWorkingSetEx
api-ms-win-core-psapi-l1-1-0.dll	17	K32InitializeProcessForWsWatch
api-ms-win-core-psapi-l1-1-0.dll	15	K32GetWsChanges
api-ms-win-core-psapi-l1-1-0.dll	16	K32GetWsChangesEx
api-ms-win-core-psapi-l1-1-0.dll	8	K32GetMappedFileNameW
api-ms-win-core-psapi-l1-1-0.dll	1	K32EnumDeviceDrivers
api-ms-win-core-psapi-l1-1-0.dll	6	K32GetDeviceDriverBaseNameW
api-ms-win-core-psapi-l1-1-0.dll	7	K32GetDeviceDriverFileNameW
api-ms-win-core-psapi-l1-1-0.dll	14	K32GetProcessMemoryInfo
api-ms-win-core-psapi-l1-1-0.dll	12	K32GetPerformanceInfo
api-ms-win-core-psapi-l1-1-0.dll	2	K32EnumPageFilesW
api-ms-win-core-psapi-l1-1-0.dll	13	K32GetProcessImageFileNameW
api-ms-win-core-psapi-l1-1-0.dll	10	K32GetModuleFileNameExW
api-ms-win-core-psapi-ansi-l1-1-0.dll	7	QueryFullProcessImageNameA
api-ms-win-core-psapi-ansi-l1-1-0.dll	4	K32GetModuleBaseNameA
api-ms-win-core-psapi-ansi-l1-1-0.dll	3	K32GetMappedFileNameA
api-ms-win-core-psapi-ansi-l1-1-0.dll	1	K32GetDeviceDriverBaseNameA
api-ms-win-core-psapi-ansi-l1-1-0.dll	2	K32GetDeviceDriverFileNameA
api-ms-win-core-psapi-ansi-l1-1-0.dll		K32EnumPageFilesA
api-ms-win-core-psapi-ansi-l1-1-0.dll	6	K32GetProcessImageFileNameA
api-ms-win-core-psapi-ansi-l1-1-0.dll	5	K32GetModuleFileNameExA
api-ms-win-eventing-provider-l1-1-0.dll	3	EventRegister
api-ms-win-eventing-provider-l1-1-0.dll	5	EventUnregister
api-ms-win-eventing-provider-l1-1-0.dll	9	EventWriteTransfer
api-ms-win-eventing-provider-l1-1-0.dll	4	EventSetInformation
api-ms-win-core-apiquery-l1-1-0.dll		ApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dll	1	ResolveDelayLoadedAPI
api-ms-win-core-appcompat-l1-1-1.dll	8	BaseReadAppCompatDataForProcess
api-ms-win-core-appcompat-l1-1-1.dll	5	BaseFreeAppCompatDataForProcess

ord	entry_va	function_name
1	0x9e347	AcquireSRWLockExclusive
2	0x9e37d	AcquireSRWLockShared
3	0x207e0	ActivateActCtx
4	0x1be70	ActivateActCtxWorker
5	0x5a6f0	AddAtomA
6	0x128f0	AddAtomW
7	0x25da0	AddConsoleAliasA
8	0x25db0	AddConsoleAliasW
9	0x9e403	AddDllDirectory
10	0x3d290	AddIntegrityLabelToBoundaryDescriptor
11	0x5a830	AddLocalAlternateComputerNameA
12	0x5a890	AddLocalAlternateComputerNameW
13	0x229d0	AddRefActCtx
14	0x1ea20	AddRefActCtxWorker
15	0x3abd0	AddResourceAttributeAce
16	0x21000	AddSIDToBoundaryDescriptor
17	0x3abf0	AddScopedPolicyIDAce
18	0x38ff0	AddSecureMemoryCacheCallback
19	0x9e53c	AddVectoredContinueHandler
20	0x9e57c	AddVectoredExceptionHandler
21	0x7200	AdjustCalendarDate
22	0x259f0	AllocConsole
23	0x3ac30	AllocateUserPhysicalPages
24	0x3ac10	AllocateUserPhysicalPagesNuma
25	0x9e60f	AppPolicyGetClrCompat
26	0x9e64d	AppPolicyGetCreateFileAccess
27	0x9e695	AppPolicyGetLifecycleManagement
28	0x9e6e8	AppPolicyGetMediaFoundationCodecLoading
29	0x9e740	AppPolicyGetProcessTerminationMethod
30	0x9e794	AppPolicyGetShowDeveloperDiagnostic
31	0x9e7e8	AppPolicyGetThreadInitializationType
32	0x9e833	AppPolicyGetWindowingModel
33	0x9e873	AppXGetOSMaxVersionTested
34	0x443e0	ApplicationRecoveryFinished
35	0x443f0	ApplicationRecoveryInProgress
36	0x21350	AreFileApisANSI
37	0x20660	AssignProcessToJobObject
38	0x25a00	AttachConsole
39	0x5d290	BackupRead
40	0x5e450	BackupSeek
41	0x5e730	BackupWrite
42	0x3acb0	BaseCheckAppcompatCache
43	0x3ac50	BaseCheckAppcompatCacheEx
44	0x216c0	BaseCheckAppcompatCacheExWorker
45	0x216c0	BaseCheckAppcompatCacheWorker
46	0x18ec0	BaseCheckElevation
47	0x3acd0	BaseCleanupAppcompatCacheSupport
48	0x21b40	BaseCleanupAppcompatCacheSupportWorker
49	0x40be0	BaseDestroyVDMEnvironment
50	0xc500	BaseDllReadWriteIniFile
51	0x3acf0	BaseDumpAppcompatCache
52	0x38110	BaseDumpAppcompatCacheWorker
53	0x1da70	BaseElevationPostProcessing
54	0x3ad10	BaseFlushAppcompatCache
55	0x71060	BaseFlushAppcompatCacheWorker
56	0x24fc0	BaseFormatObjectAttributes
57	0x59f10	BaseFormatTimeOut
58	0x205c0	BaseFreeAppCompatDataForProcessWorker
59	0x16d80	BaseGenerateAppCompatData
60	0x3ad30	BaseGetNamedObjectDirectory
61	0x3ad50	BaseInitAppcompatCacheSupport
62	0x21b40	BaseInitAppcompatCacheSupportWorker
63	0x216c0	BaseIsAppcompatInfrastructureDisabled
64	0x216c0	BaseIsAppcompatInfrastructureDisabledWorker
65	0x613d0	BaseIsDosApplication
66	0x714d0	BaseQueryModuleData
67	0x1fe50	BaseReadAppCompatDataForProcessWorker
68	0x130e0	BaseSetLastNTError
69	0x175f0	BaseThreadInitThunk
70	0x3ad70	BaseUpdateAppcompatCache
71	0x710c0	BaseUpdateAppcompatCacheWorker
72	0x40f40	BaseUpdateVDMEntry
73	0x59fb0	BaseVerifyUnicodeString
74	0x5fba0	BaseWriteErrorElevationRequiredEvent
75	0x1c7f0	Basep8BitStringToDynamicUnicodeString
76	0x5a010	BasepAllocateActivationContextActivationBlock
77	0x59f40	BasepAnsiStringToDynamicUnicodeString
78	0x7600	BasepAppContainerEnvironmentExtension
79	0x20b00	BasepAppXExtension
80	0x19470	BasepCheckAppCompat
81	0x1d770	BasepCheckWebBladeHashes
82	0x11df0	BasepCheckWinSaferRestrictions
83	0xdd40	BasepConstructSxsCreateProcessMessage
84	0x38aa0	BasepCopyEncryption
85	0x26250	BasepFinishPackageActivationForSxS
86	0x5a1a0	BasepFreeActivationContextActivationBlock
87	0x1c2f0	BasepFreeAppCompatData
88	0x163e0	BasepGetAppCompatData
89	0x1a8c0	BasepGetComputerNameFromNtPath
90	0x19c50	BasepGetExeArchType
91	0x26290	BasepGetPackageActivationTokenForSxS
92	0x711f0	BasepInitAppCompatData
93	0x1c920	BasepIsProcessAllowed
94	0x13740	BasepMapModuleHandle
95	0x1bd80	BasepNotifyLoadStringResource
96	0x21310	BasepPostSuccessAppXExtension
97	0x39c40	BasepProcessInvalidImage
98	0xcee0	BasepQueryAppCompat
99	0x71280	BasepQueryModuleChpeSettings
100	0x212f0	BasepReleaseAppXContext
101	0x151a0	BasepReleaseSxsCreateProcessUtilityStruct
102	0x446a0	BasepReportFault
103	0x1eb10	BasepSetFileEncryptionCompression
104	0x37e40	Beep
105	0x4a1e0	BeginUpdateResourceA
106	0x4a250	BeginUpdateResourceW
107	0x249c0	BindIoCompletionCallback
108	0x42b90	BuildCommDCBA
109	0x42bf0	BuildCommDCBAndTimeoutsA
110	0x42c30	BuildCommDCBAndTimeoutsW
111	0x42cc0	BuildCommDCBW
112	0x61c20	CallNamedPipeA
113	0x25790	CallNamedPipeW
114	0x3ad90	CallbackMayRunLong
115	0x39b90	CancelDeviceWakeupRequest
116	0x213d0	CancelIo
117	0x207a0	CancelIoEx
118	0x3add0	CancelSynchronousIo
119	0x9f12d	CancelThreadpoolIo
120	0x44600	CancelTimerQueueTimer
121	0x25080	CancelWaitableTimer
122	0x9f184	CeipIsOptedIn
123	0x219e0	ChangeTimerQueueTimer
124	0x3adf0	CheckAllowDecryptedRemoteDestinationPolicy
125	0x18d80	CheckElevation
126	0x20d50	CheckElevationEnabled
127	0x62120	CheckForReadOnlyResource
128	0x3d2c0	CheckForReadOnlyResourceFilter
129	0x9f24e	CheckIsMSIXPackage
130	0x399a0	CheckNameLegalDOS8Dot3A
131	0x39a50	CheckNameLegalDOS8Dot3W
132	0x1250	CheckRemoteDebuggerPresent
133	0x3ae10	CheckTokenCapability
134	0x3ae30	CheckTokenMembershipEx
135	0x257f0	ClearCommBreak
136	0x25800	ClearCommError
137	0x69fc0	CloseConsoleHandle
138	0x25040	CloseHandle
139	0x9f331	ClosePackageInfo
140	0x22970	ClosePrivateNamespace
141	0x21b40	CloseProfileUserMapping
142	0x25a10	ClosePseudoConsole
143	0x9f399	CloseState
144	0x9f3bf	CloseThreadpool
145	0x9f3ef	CloseThreadpoolCleanupGroup
146	0x9f42e	CloseThreadpoolCleanupGroupMembers
147	0x9f463	CloseThreadpoolIo
148	0x9f494	CloseThreadpoolTimer
149	0x9f4bd	CloseThreadpoolWait
150	0x9f4e5	CloseThreadpoolWork
151	0x206d0	CmdBatNotification
152	0x3e050	CommConfigDialogA
153	0x3e100	CommConfigDialogW
154	0x4abf0	CompareCalendarDates
155	0x25270	CompareFileTime
156	0x1dd80	CompareStringA
157	0x16220	CompareStringEx
158	0x163c0	CompareStringOrdinal
159	0x1ce00	CompareStringW
160	0x21730	ConnectNamedPipe
161	0x6a100	ConsoleMenuControl
162	0x3ae50	ContinueDebugEvent
163	0x4aca0	ConvertCalDateTimeToSystemTime
164	0x3ae70	ConvertDefaultLocale
165	0x25940	ConvertFiberToThread
166	0x4ada0	ConvertNLSDayOfWeekToWin32DayOfWeek
167	0x74b0	ConvertSystemTimeToCalDateTime
168	0x25950	ConvertThreadToFiber
169	0x25960	ConvertThreadToFiberEx
170	0x3ae90	CopyContext
171	0x3aeb0	CopyFile2
172	0x62470	CopyFileA
173	0x62520	CopyFileExA
174	0x20e20	CopyFileExW
175	0x625e0	CopyFileTransactedA
176	0x626d0	CopyFileTransactedW
177	0x25930	CopyFileW
178	0x38000	CopyLZFile
179	0x22320	CreateActCtxA
180	0x218f0	CreateActCtxW
181	0x137b0	CreateActCtxWWorker
182	0x622e0	CreateBoundaryDescriptorA
183	0x20fa0	CreateBoundaryDescriptorW
184	0x25b30	CreateConsoleScreenBuffer
185	0x25280	CreateDirectoryA
186	0x63100	CreateDirectoryExA
187	0x3aed0	CreateDirectoryExW
188	0x38360	CreateDirectoryTransactedA
189	0x63190	CreateDirectoryTransactedW
190	0x25290	CreateDirectoryW
191	0x9f806	CreateEnclave
192	0x25090	CreateEventA
193	0x250a0	CreateEventExA
194	0x250b0	CreateEventExW
195	0x250c0	CreateEventW
196	0x25970	CreateFiber
197	0x25980	CreateFiberEx
198	0x252a0	CreateFile2
199	0x252b0	CreateFileA
200	0x1c410	CreateFileMappingA
201	0x9f8c9	CreateFileMappingFromApp
202	0x63340	CreateFileMappingNumaA
203	0x3aef0	CreateFileMappingNumaW
204	0x1d040	CreateFileMappingW
205	0x627d0	CreateFileTransactedA
206	0x62890	CreateFileTransactedW
207	0x252c0	CreateFileW
208	0x3af10	CreateHardLinkA
209	0x43dc0	CreateHardLinkTransactedA
210	0x63410	CreateHardLinkTransactedW
211	0x3af30	CreateHardLinkW
212	0x1e0b0	CreateIoCompletionPort
213	0x5c820	CreateJobObjectA
214	0x1e950	CreateJobObjectW
215	0x5c890	CreateJobSet
216	0x1c5c0	CreateMailslotA
217	0x1c630	CreateMailslotW
218	0x21040	CreateMemoryResourceNotification
219	0x250d0	CreateMutexA
220	0x250e0	CreateMutexExA
221	0x250f0	CreateMutexExW
222	0x25100	CreateMutexW
223	0x61cc0	CreateNamedPipeA
224	0x209d0	CreateNamedPipeW
225	0x209b0	CreatePipe
226	0x62350	CreatePrivateNamespaceA
227	0x20f60	CreatePrivateNamespaceW
228	0x1cec0	CreateProcessA
229	0x3af50	CreateProcessAsUserA
230	0x1e220	CreateProcessAsUserW
231	0x3afd0	CreateProcessInternalA
232	0x3b050	CreateProcessInternalW
233	0x1d2c0	CreateProcessW
234	0x25a20	CreatePseudoConsole
235	0x3b0d0	CreateRemoteThread
236	0x9fb9b	CreateRemoteThreadEx
237	0x1c4e0	CreateSemaphoreA
238	0x1c510	CreateSemaphoreExA
239	0x25110	CreateSemaphoreExW
240	0x25120	CreateSemaphoreW
241	0x639e0	CreateSymbolicLinkA
242	0x63aa0	CreateSymbolicLinkTransactedA
243	0x63b60	CreateSymbolicLinkTransactedW
244	0x3b120	CreateSymbolicLinkW
245	0x43b00	CreateTapePartition
246	0x1bd10	CreateThread
247	0x21390	CreateThreadpool
248	0x21910	CreateThreadpoolCleanupGroup
249	0x214c0	CreateThreadpoolIo
250	0x1cdc0	CreateThreadpoolTimer
251	0x20f00	CreateThreadpoolWait
252	0x20d10	CreateThreadpoolWork
253	0x219a0	CreateTimerQueue
254	0x1ea00	CreateTimerQueueTimer
255	0x28150	CreateToolhelp32Snapshot
256	0x42710	CreateUmsCompletionList
257	0x42750	CreateUmsThreadContext
258	0x63660	CreateWaitableTimerA
259	0x63680	CreateWaitableTimerExA
260	0x25130	CreateWaitableTimerExW
261	0x10b0	CreateWaitableTimerW
262	0x9fdf7	CtrlRoutine
263	0x20800	DeactivateActCtx
264	0x1bfb0	DeactivateActCtxWorker
265	0x3b160	DebugActiveProcess
266	0x3b140	DebugActiveProcessStop
267	0x3b180	DebugBreak
268	0x38250	DebugBreakProcess
269	0x38280	DebugSetProcessKillOnExit
270	0x9fea5	DecodePointer
271	0x9fed0	DecodeSystemPointer
272	0x65310	DefineDosDeviceA
273	0x252d0	DefineDosDeviceW
274	0x24a70	DelayLoadFailureHook
275	0x12860	DeleteAtom
276	0x20f80	DeleteBoundaryDescriptor
277	0x9ff5e	DeleteCriticalSection
278	0x25990	DeleteFiber
279	0x252e0	DeleteFileA
280	0x63c40	DeleteFileTransactedA
281	0x248d0	DeleteFileTransactedW
282	0x252f0	DeleteFileW
283	0x9ffeb	DeleteProcThreadAttributeList
284	0x3b1a0	DeleteSynchronizationBarrier
285	0x21950	DeleteTimerQueue
286	0x219c0	DeleteTimerQueueEx
287	0x20b80	DeleteTimerQueueTimer
288	0x42790	DeleteUmsCompletionList
289	0x427d0	DeleteUmsThreadContext
290	0x655b0	DeleteVolumeMountPointA
291	0x25300	DeleteVolumeMountPointW
292	0x42810	DequeueUmsCompletionListItems
293	0x15b60	DeviceIoControl
294	0x20620	DisableThreadLibraryCalls
295	0x446e0	DisableThreadProfiling
296	0xa016a	DisassociateCurrentThreadFromCallback
297	0xa019c	DiscardVirtualMemory
298	0x226c0	DisconnectNamedPipe
299	0x5b7c0	DnsHostnameToComputerNameA
300	0x3b1c0	DnsHostnameToComputerNameExW
301	0x1cc70	DnsHostnameToComputerNameW
302	0x12a90	DosDateTimeToFileTime
303	0x669b0	DosPathToSessionPathA
304	0x66bb0	DosPathToSessionPathW
305	0x69fe0	DuplicateConsoleHandle
306	0x38df0	DuplicateEncryptionInfoFileExt
307	0x25050	DuplicateHandle
308	0x44720	EnableThreadProfiling
309	0xa02e2	EncodePointer
310	0xa030d	EncodeSystemPointer
311	0x4a4a0	EndUpdateResourceA
312	0x4a4b0	EndUpdateResourceW
313	0xa0365	EnterCriticalSection
314	0x3b1e0	EnterSynchronizationBarrier
315	0x42870	EnterUmsSchedulingMode
316	0x4b890	EnumCalendarInfoA
317	0x4b930	EnumCalendarInfoExA
318	0x1cea0	EnumCalendarInfoExEx
319	0x3b200	EnumCalendarInfoExW
320	0x3b220	EnumCalendarInfoW
321	0x4b9d0	EnumDateFormatsA
322	0x4ba30	EnumDateFormatsExA
323	0x3b240	EnumDateFormatsExEx
324	0x3b260	EnumDateFormatsExW
325	0x3b280	EnumDateFormatsW
326	0x4baa0	EnumLanguageGroupLocalesA
327	0x3b2a0	EnumLanguageGroupLocalesW
328	0x39240	EnumResourceLanguagesA
329	0x3b2c0	EnumResourceLanguagesExA
330	0x3b2e0	EnumResourceLanguagesExW
331	0x39280	EnumResourceLanguagesW
332	0x392c0	EnumResourceNamesA
333	0x3b300	EnumResourceNamesExA
334	0x3b320	EnumResourceNamesExW
335	0x25770	EnumResourceNamesW
336	0x392f0	EnumResourceTypesA
337	0x3b340	EnumResourceTypesExA
338	0x3b360	EnumResourceTypesExW
339	0x39320	EnumResourceTypesW
340	0x4bad0	EnumSystemCodePagesA
341	0x3b380	EnumSystemCodePagesW
342	0x39020	EnumSystemFirmwareTables
343	0x54ad0	EnumSystemGeoID
344	0x54bc0	EnumSystemGeoNames
345	0x4baf0	EnumSystemLanguageGroupsA
346	0x3b3a0	EnumSystemLanguageGroupsW
347	0x3b3c0	EnumSystemLocalesA
348	0x3b3e0	EnumSystemLocalesEx
349	0x3b400	EnumSystemLocalesW
350	0x4bb10	EnumTimeFormatsA
351	0x20ba0	EnumTimeFormatsEx
352	0x3b420	EnumTimeFormatsW
353	0x4bb90	EnumUILanguagesA
354	0x3b440	EnumUILanguagesW
355	0x5b8b0	EnumerateLocalComputerNamesA
356	0x5b9e0	EnumerateLocalComputerNamesW
357	0x43b60	EraseTape
358	0x25810	EscapeCommFunction
359	0x42920	ExecuteUmsThread
360	0x1e800	ExitProcess
361	0xa0750	ExitThread
362	0x411e0	ExitVDM
363	0x229b0	ExpandEnvironmentStringsA
364	0x1bf00	ExpandEnvironmentStringsW
365	0x25dc0	ExpungeConsoleCommandHistoryA
366	0x25dd0	ExpungeConsoleCommandHistoryW
367	0x3b460	FatalAppExitA
368	0x3b480	FatalAppExitW
369	0x1e800	FatalExit
370	0x12d30	FileTimeToDosDateTime
371	0x25310	FileTimeToLocalFileTime
372	0x257b0	FileTimeToSystemTime
373	0x25b40	FillConsoleOutputAttribute
374	0x25b50	FillConsoleOutputCharacterA
375	0x25b60	FillConsoleOutputCharacterW
376	0x1c3f0	FindActCtxSectionGuid
377	0x12f90	FindActCtxSectionGuidWorker
378	0x66d40	FindActCtxSectionStringA
379	0x21860	FindActCtxSectionStringW
380	0x132b0	FindActCtxSectionStringWWorker
381	0x15810	FindAtomA
382	0x12d10	FindAtomW
383	0x25320	FindClose
384	0x25330	FindCloseChangeNotification
385	0x25340	FindFirstChangeNotificationA
386	0x25350	FindFirstChangeNotificationW
387	0x25360	FindFirstFileA
388	0x25370	FindFirstFileExA
389	0x25380	FindFirstFileExW
390	0x38460	FindFirstFileNameTransactedW
391	0x25390	FindFirstFileNameW
392	0x38540	FindFirstFileTransactedA
393	0x66de0	FindFirstFileTransactedW
394	0x253a0	FindFirstFileW
395	0x38630	FindFirstStreamTransactedW
396	0xa0a61	FindFirstStreamW
397	0x65600	FindFirstVolumeA
398	0x657a0	FindFirstVolumeMountPointA
399	0x65990	FindFirstVolumeMountPointW
400	0x253b0	FindFirstVolumeW
401	0x3b4a0	FindNLSString
402	0x15e00	FindNLSStringEx
403	0x253c0	FindNextChangeNotification
404	0x253d0	FindNextFileA
405	0x253e0	FindNextFileNameW
406	0x253f0	FindNextFileW
407	0xa0b5d	FindNextStreamW
408	0x65c20	FindNextVolumeA
409	0x65dc0	FindNextVolumeMountPointA
410	0x664b0	FindNextVolumeMountPointW
411	0x25400	FindNextVolumeW
412	0xa0bf9	FindPackagesByPackageFamily
413	0x13530	FindResourceA
414	0x13550	FindResourceExA
415	0x1baf0	FindResourceExW
416	0x20990	FindResourceW
417	0x3b4c0	FindStringOrdinal
418	0x25410	FindVolumeClose
419	0x664c0	FindVolumeMountPointClose
420	0x20930	FlsAlloc
421	0x21270	FlsFree
422	0x18c50	FlsGetValue
423	0x1ca30	FlsSetValue
424	0x25b70	FlushConsoleInputBuffer
425	0x25420	FlushFileBuffers
426	0x1b5f0	FlushInstructionCache
427	0xa0d19	FlushProcessWriteBuffers
428	0x3b4e0	FlushViewOfFile
429	0x4bbb0	FoldStringA
430	0x3b500	FoldStringW
431	0xa0d7f	FormatApplicationUserModelId
432	0x227e0	FormatMessageA
433	0x1cff0	FormatMessageW
434	0x25a30	FreeConsole
435	0x20500	FreeEnvironmentStringsA
436	0x1fe10	FreeEnvironmentStringsW
437	0x1cf30	FreeLibrary
438	0x21790	FreeLibraryAndExitThread
439	0xa0e45	FreeLibraryWhenCallbackReturns
440	0x5c8c0	FreeMemoryJobObject
441	0x22570	FreeResource
442	0x3b520	FreeUserPhysicalPages
443	0x25b80	GenerateConsoleCtrlEvent
444	0x1e7c0	GetACP
445	0x1dc10	GetActiveProcessorCount
446	0x66f80	GetActiveProcessorGroupCount
447	0x3b540	GetAppContainerAce
448	0x3b560	GetAppContainerNamedObjectPath
449	0x3b580	GetApplicationRecoveryCallback
450	0x44400	GetApplicationRecoveryCallbackWorker
451	0x3b5a0	GetApplicationRestartSettings
452	0x444c0	GetApplicationRestartSettingsWorker
453	0xa0fc9	GetApplicationUserModelId
454	0x5a710	GetAtomNameA
455	0x12630	GetAtomNameW
456	0x614e0	GetBinaryType
457	0x614e0	GetBinaryTypeA
458	0x61530	GetBinaryTypeW
459	0x1ea40	GetCPInfo
460	0x4be60	GetCPInfoExA
461	0x3b5c0	GetCPInfoExW
462	0x3b5e0	GetCachedSigningLevel
463	0x4ade0	GetCalendarDateFormat
464	0x86b0	GetCalendarDateFormatEx
465	0x73b0	GetCalendarDaysInMonth
466	0x4b0c0	GetCalendarDifferenceInDays
467	0x4bf40	GetCalendarInfoA
468	0x257c0	GetCalendarInfoEx
469	0x257d0	GetCalendarInfoW
470	0x4b220	GetCalendarMonthsInYear
471	0x7130	GetCalendarSupportedDateRange
472	0x4b2f0	GetCalendarWeekNumber
473	0x44330	GetComPlusPackageInstallStatus
474	0x25820	GetCommConfig
475	0x25830	GetCommMask
476	0x25840	GetCommModemStatus
477	0x25850	GetCommProperties
478	0x25860	GetCommState
479	0x25870	GetCommTimeouts
480	0x205a0	GetCommandLineA
481	0x1fb20	GetCommandLineW
482	0x3b600	GetCompressedFileSizeA
483	0x63c90	GetCompressedFileSizeTransactedA
484	0x63cf0	GetCompressedFileSizeTransactedW
485	0x3b620	GetCompressedFileSizeW
486	0x1aa70	GetComputerNameA
487	0x249f0	GetComputerNameExA
488	0x20950	GetComputerNameExW
489	0x1abd0	GetComputerNameW
490	0x25de0	GetConsoleAliasA
491	0x25df0	GetConsoleAliasExesA
492	0x25e00	GetConsoleAliasExesLengthA
493	0x25e10	GetConsoleAliasExesLengthW
494	0x25e20	GetConsoleAliasExesW
495	0x25e30	GetConsoleAliasW
496	0x25e40	GetConsoleAliasesA
497	0x25e50	GetConsoleAliasesLengthA
498	0x25e60	GetConsoleAliasesLengthW
499	0x25e70	GetConsoleAliasesW
500	0x25a40	GetConsoleCP
501	0x6a610	GetConsoleCharType
502	0x25e80	GetConsoleCommandHistoryA
503	0x25e90	GetConsoleCommandHistoryLengthA
504	0x25ea0	GetConsoleCommandHistoryLengthW
505	0x25eb0	GetConsoleCommandHistoryW
506	0x25b90	GetConsoleCursorInfo
507	0x6a680	GetConsoleCursorMode
508	0x25ec0	GetConsoleDisplayMode
509	0x6a9f0	GetConsoleFontInfo
510	0x25ed0	GetConsoleFontSize
511	0x6a160	GetConsoleHardwareState
512	0x25ee0	GetConsoleHistoryInfo
513	0xa14bc	GetConsoleInputExeNameA
514	0xa14f7	GetConsoleInputExeNameW
515	0x6a080	GetConsoleInputWaitHandle
516	0x6aaa0	GetConsoleKeyboardLayoutNameA
517	0x6aac0	GetConsoleKeyboardLayoutNameW
518	0x25a50	GetConsoleMode
519	0x6a700	GetConsoleNlsMode
520	0x25ba0	GetConsoleOriginalTitleA
521	0x25bb0	GetConsoleOriginalTitleW
522	0x25a60	GetConsoleOutputCP
523	0x25ef0	GetConsoleProcessList
524	0x25bc0	GetConsoleScreenBufferInfo
525	0x25bd0	GetConsoleScreenBufferInfoEx
526	0x25f00	GetConsoleSelectionInfo
527	0x25be0	GetConsoleTitleA
528	0x25bf0	GetConsoleTitleW
529	0x25f10	GetConsoleWindow
530	0x4c1a0	GetCurrencyFormatA
531	0x3b640	GetCurrencyFormatEx
532	0x3b660	GetCurrencyFormatW
533	0x226e0	GetCurrentActCtx
534	0x1ce40	GetCurrentActCtxWorker
535	0xa16f2	GetCurrentApplicationUserModelId
536	0x25f20	GetCurrentConsoleFont
537	0x25f30	GetCurrentConsoleFontEx
538	0x217b0	GetCurrentDirectoryA
539	0x20690	GetCurrentDirectoryW
540	0xa1792	GetCurrentPackageFamilyName
541	0xa17d3	GetCurrentPackageFullName
542	0xa180c	GetCurrentPackageId
543	0xa1841	GetCurrentPackageInfo
544	0xa1878	GetCurrentPackagePath
545	0x24fe0	GetCurrentProcess
546	0x24ff0	GetCurrentProcessId
547	0xa18d9	GetCurrentProcessorNumber
548	0xa1918	GetCurrentProcessorNumberEx
549	0x15e70	GetCurrentThread
550	0x15b20	GetCurrentThreadId
551	0xa197d	GetCurrentThreadStackLimits
552	0x42960	GetCurrentUmsThread
553	0x3b670	GetDateFormatA
554	0x22a50	GetDateFormatAWorker
555	0x3b690	GetDateFormatEx
556	0x20e00	GetDateFormatW
557	0xa790	GetDateFormatWWorker
558	0x3e360	GetDefaultCommConfigA
559	0x3e410	GetDefaultCommConfigW
560	0x678a0	GetDevicePowerState
561	0x25430	GetDiskFreeSpaceA
562	0x25440	GetDiskFreeSpaceExA
563	0x25450	GetDiskFreeSpaceExW
564	0x25460	GetDiskFreeSpaceW
565	0xa1ad0	GetDiskSpaceInformationA
566	0xa1b1e	GetDiskSpaceInformationW
567	0x39350	GetDllDirectoryA
568	0x225e0	GetDllDirectoryW
569	0x25470	GetDriveTypeA
570	0x25480	GetDriveTypeW
571	0x4ce60	GetDurationFormat
572	0x3b6b0	GetDurationFormatEx
573	0x216a0	GetDynamicTimeZoneInformation
574	0x3b6d0	GetEnabledXStateFeatures
575	0x38ef0	GetEncryptedFileVersionExt
576	0x204e0	GetEnvironmentStrings
577	0x257e0	GetEnvironmentStringsA
578	0x1fdf0	GetEnvironmentStringsW
579	0x1eab0	GetEnvironmentVariableA
580	0x1bd90	GetEnvironmentVariableW
581	0x3b6f0	GetEraNameCountedString
582	0x22950	GetErrorMode
583	0x1d7c0	GetExitCodeProcess
584	0x20120	GetExitCodeThread
585	0x3d450	GetExpandedNameA
586	0x3d540	GetExpandedNameW
587	0x25490	GetFileAttributesA
588	0x254a0	GetFileAttributesExA
589	0x254b0	GetFileAttributesExW
590	0x63dc0	GetFileAttributesTransactedA
591	0x63e30	GetFileAttributesTransactedW
592	0x254c0	GetFileAttributesW
593	0x38710	GetFileBandwidthReservation
594	0x254d0	GetFileInformationByHandle
595	0x1fdb0	GetFileInformationByHandleEx
596	0x3b710	GetFileMUIInfo
597	0x20100	GetFileMUIPath
598	0x254e0	GetFileSize
599	0x254f0	GetFileSizeEx
600	0x25500	GetFileTime
601	0x25510	GetFileType
602	0x25520	GetFinalPathNameByHandleA
603	0x25530	GetFinalPathNameByHandleW
604	0x67900	GetFirmwareEnvironmentVariableA
605	0x67920	GetFirmwareEnvironmentVariableExA
606	0x159c0	GetFirmwareEnvironmentVariableExW
607	0x67a50	GetFirmwareEnvironmentVariableW
608	0x22f80	GetFirmwareType
609	0x25540	GetFullPathNameA
610	0x38120	GetFullPathNameTransactedA
611	0x67cc0	GetFullPathNameTransactedW
612	0x25550	GetFullPathNameW
613	0x4c5a0	GetGeoInfoA
614	0x54cf0	GetGeoInfoEx
615	0x6020	GetGeoInfoW
616	0x25060	GetHandleInformation
617	0x3b730	GetLargePageMinimum
618	0x25c00	GetLargestConsoleWindowSize
619	0x161c0	GetLastError
620	0x1e780	GetLocalTime
621	0x21330	GetLocaleInfoA
622	0x1d2a0	GetLocaleInfoEx
623	0x20580	GetLocaleInfoW
624	0x18470	GetLogicalDriveStringsA
625	0x25560	GetLogicalDriveStringsW
626	0x18530	GetLogicalDrives
627	0x217d0	GetLogicalProcessorInformation
628	0xa206a	GetLogicalProcessorInformationEx
629	0x5a200	GetLongPathNameA
630	0x41280	GetLongPathNameTransactedA
631	0x618b0	GetLongPathNameTransactedW
632	0x68c0	GetLongPathNameW
633	0x634f0	GetMailslotInfo
634	0x66fe0	GetMaximumProcessorCount
635	0x22f20	GetMaximumProcessorGroupCount
636	0x3b750	GetMemoryErrorHandlingCapabilities
637	0x1f900	GetModuleFileNameA
638	0x1e680	GetModuleFileNameW
639	0x1f810	GetModuleHandleA
640	0x216f0	GetModuleHandleExA
641	0x1fd90	GetModuleHandleExW
642	0x1d890	GetModuleHandleW
643	0x228f0	GetNLSVersion
644	0x3b770	GetNLSVersionEx
645	0x3b790	GetNamedPipeAttribute
646	0x61d70	GetNamedPipeClientComputerNameA
647	0x3b7b0	GetNamedPipeClientComputerNameW
648	0x61ec0	GetNamedPipeClientProcessId
649	0x395d0	GetNamedPipeClientSessionId
650	0x61f00	GetNamedPipeHandleStateA
651	0x3b7d0	GetNamedPipeHandleStateW
652	0xa22c9	GetNamedPipeInfo
653	0x62090	GetNamedPipeServerProcessId
654	0x39630	GetNamedPipeServerSessionId
655	0x20de0	GetNativeSystemInfo
656	0x429a0	GetNextUmsListItem
657	0x41350	GetNextVDMCommand
658	0x39880	GetNumaAvailableMemoryNode
659	0x68260	GetNumaAvailableMemoryNodeEx
660	0x20fc0	GetNumaHighestNodeNumber
661	0x39890	GetNumaNodeNumberFromHandle
662	0x682f0	GetNumaNodeProcessorMask
663	0x3b7f0	GetNumaNodeProcessorMaskEx
664	0x398f0	GetNumaProcessorNode
665	0x68370	GetNumaProcessorNodeEx
666	0x39960	GetNumaProximityNode
667	0x3b810	GetNumaProximityNodeEx
668	0x1b650	GetNumberFormatA
669	0x21d20	GetNumberFormatEx
670	0x1060	GetNumberFormatW
671	0x6ab70	GetNumberOfConsoleFonts
672	0x25a70	GetNumberOfConsoleInputEvents
673	0x25f40	GetNumberOfConsoleMouseButtons
674	0x21a20	GetOEMCP
675	0x1ce20	GetOverlappedResult
676	0xa2521	GetOverlappedResultEx
677	0xa256a	GetPackageApplicationIds
678	0xa25a3	GetPackageFamilyName
679	0xa25d6	GetPackageFullName
680	0xa2601	GetPackageId
681	0xa2628	GetPackageInfo
682	0xa2651	GetPackagePath
683	0xa2684	GetPackagePathByFullName
684	0xa26c3	GetPackagesByPackageFamily
685	0x1270	GetPhysicallyInstalledSystemMemory
686	0x21820	GetPriorityClass
687	0x15940	GetPrivateProfileIntA
688	0x131b0	GetPrivateProfileIntW
689	0x238e0	GetPrivateProfileSectionA
690	0x60ba0	GetPrivateProfileSectionNamesA
691	0x60bd0	GetPrivateProfileSectionNamesW
692	0x21430	GetPrivateProfileSectionW
693	0x15830	GetPrivateProfileStringA
694	0x12360	GetPrivateProfileStringW
695	0x60c00	GetPrivateProfileStructA
696	0x60da0	GetPrivateProfileStructW
697	0x1b630	GetProcAddress
698	0x1c870	GetProcessAffinityMask
699	0x3a590	GetProcessDEPPolicy
700	0xa2872	GetProcessDefaultCpuSets
701	0x3b830	GetProcessGroupAffinity
702	0x3b850	GetProcessHandleCount
703	0x16180	GetProcessHeap
704	0x3b870	GetProcessHeaps
705	0x1d730	GetProcessId
706	0x20f40	GetProcessIdOfThread
707	0x25000	GetProcessInformation
708	0x20520	GetProcessIoCounters
709	0xa2966	GetProcessMitigationPolicy
710	0x245d0	GetProcessPreferredUILanguages
711	0x3b890	GetProcessPriorityBoost
712	0x3b8b0	GetProcessShutdownParameters
713	0x1b240	GetProcessTimes
714	0x22800	GetProcessVersion
715	0x44580	GetProcessWorkingSetSize
716	0x3b8d0	GetProcessWorkingSetSizeEx
717	0xa2a6d	GetProcessorSystemCycleTime
718	0x218b0	GetProductInfo
719	0x159b0	GetProfileIntA
720	0x13520	GetProfileIntW
721	0x60f50	GetProfileSectionA
722	0x60f60	GetProfileSectionW
723	0x60f70	GetProfileStringA
724	0x60fa0	GetProfileStringW
725	0x163a0	GetQueuedCompletionStatus
726	0x3b8f0	GetQueuedCompletionStatusEx
727	0x61980	GetShortPathNameA
728	0x6400	GetShortPathNameW
729	0xa2b98	GetStagedPackagePathByFullName
730	0x220c0	GetStartupInfoA
731	0x1df90	GetStartupInfoW
732	0xa2bf1	GetStateFolder
733	0x1dbf0	GetStdHandle
734	0x3b910	GetStringScripts
735	0x3b930	GetStringTypeA
736	0x3b930	GetStringTypeExA
737	0x22dd0	GetStringTypeExW
738	0x1ea90	GetStringTypeW
739	0xa2c7d	GetSystemAppDataKey
740	0xa2cb7	GetSystemCpuSetInformation
741	0x3a5e0	GetSystemDEPPolicy
742	0x21410	GetSystemDefaultLCID
743	0x21750	GetSystemDefaultLangID
744	0x1100	GetSystemDefaultLocaleName
745	0x20dc0	GetSystemDefaultUILanguage
746	0x1db40	GetSystemDirectoryA
747	0x1b570	GetSystemDirectoryW
748	0x3b950	GetSystemFileCacheSize
749	0x39040	GetSystemFirmwareTable
750	0x1e310	GetSystemInfo
751	0x18330	GetSystemPowerStatus
752	0x21aa0	GetSystemPreferredUILanguages
753	0x3a620	GetSystemRegistryQuota
754	0x1bcf0	GetSystemTime
755	0x20ea0	GetSystemTimeAdjustment
756	0x182f0	GetSystemTimeAsFileTime
757	0x257a0	GetSystemTimePreciseAsFileTime
758	0x203f0	GetSystemTimes
759	0x3b970	GetSystemWindowsDirectoryA
760	0x9110	GetSystemWindowsDirectoryW
761	0x25910	GetSystemWow64DirectoryA
762	0x25920	GetSystemWow64DirectoryW
763	0x68540	GetTapeParameters
764	0x43ba0	GetTapePosition
765	0x43c30	GetTapeStatus
766	0x25570	GetTempFileNameA
767	0x25580	GetTempFileNameW
768	0x25590	GetTempPathA
769	0x255a0	GetTempPathW
770	0x20cd0	GetThreadContext
771	0xa2f81	GetThreadDescription
772	0x3b980	GetThreadErrorMode
773	0x3b9a0	GetThreadGroupAffinity
774	0x3b9c0	GetThreadIOPendingFlag
775	0x21370	GetThreadId
776	0x3b9e0	GetThreadIdealProcessorEx
777	0x25010	GetThreadInformation
778	0x1a860	GetThreadLocale
779	0x1d810	GetThreadPreferredUILanguages
780	0x1bfe0	GetThreadPriority
781	0x3ba00	GetThreadPriorityBoost
782	0xa30a8	GetThreadSelectedCpuSets
783	0x685a0	GetThreadSelectorEntry
784	0x16200	GetThreadTimes
785	0x24a90	GetThreadUILanguage
786	0x15c10	GetTickCount
787	0x16300	GetTickCount64
788	0x3ba20	GetTimeFormatA
789	0x245f0	GetTimeFormatAWorker
790	0x3ba40	GetTimeFormatEx
791	0x1f920	GetTimeFormatW
792	0x9a80	GetTimeFormatWWorker
793	0x21060	GetTimeZoneInformation
794	0x1070	GetTimeZoneInformationForYear
795	0x3ba60	GetUILanguageInfo
796	0x429e0	GetUmsCompletionListEvent
797	0x42a20	GetUmsSystemThreadInformation
798	0x54e50	GetUserDefaultGeoName
799	0x20300	GetUserDefaultLCID
800	0x3ba80	GetUserDefaultLangID
801	0x1ead0	GetUserDefaultLocaleName
802	0x21290	GetUserDefaultUILanguage
803	0x1f940	GetUserGeoID
804	0x20cf0	GetUserPreferredUILanguages
805	0x41d10	GetVDMCurrentDirectories
806	0x21770	GetVersion
807	0x20b60	GetVersionExA
808	0x200e0	GetVersionExW
809	0x255b0	GetVolumeInformationA
810	0x255c0	GetVolumeInformationByHandleW
811	0x255d0	GetVolumeInformationW
812	0x24730	GetVolumeNameForVolumeMountPointA
813	0x24fd0	GetVolumeNameForVolumeMountPointW
814	0x66540	GetVolumePathNameA
815	0x255e0	GetVolumePathNameW
816	0x66720	GetVolumePathNamesForVolumeNameA
817	0x255f0	GetVolumePathNamesForVolumeNameW
818	0x22990	GetWindowsDirectoryA
819	0x23020	GetWindowsDirectoryW
820	0x161a0	GetWriteWatch
821	0x3baa0	GetXStateFeaturesMask
822	0x12660	GlobalAddAtomA
823	0x5a740	GlobalAddAtomExA
824	0x13190	GlobalAddAtomExW
825	0x12910	GlobalAddAtomW
826	0x18580	GlobalAlloc
827	0x39060	GlobalCompact
828	0x12850	GlobalDeleteAtom
829	0x5a760	GlobalFindAtomA
830	0x12e00	GlobalFindAtomW
831	0x39080	GlobalFix
832	0x20170	GlobalFlags
833	0x16120	GlobalFree
834	0x5a780	GlobalGetAtomNameA
835	0x12680	GlobalGetAtomNameW
836	0x20850	GlobalHandle
837	0x15f60	GlobalLock
838	0x1d060	GlobalMemoryStatus
839	0x20c90	GlobalMemoryStatusEx
840	0x17180	GlobalReAlloc
841	0x185a0	GlobalSize
842	0x390a0	GlobalUnWire
843	0x390b0	GlobalUnfix
844	0x15e80	GlobalUnlock
845	0x390d0	GlobalWire
846	0x64750	Heap32First
847	0x649f0	Heap32ListFirst
848	0x64af0	Heap32ListNext
849	0x64bf0	Heap32Next
850	0xa35cd	HeapAlloc
851	0x3bac0	HeapCompact
852	0x206b0	HeapCreate
853	0x21a00	HeapDestroy
854	0x15b40	HeapFree
855	0x3bae0	HeapLock
856	0x3bb00	HeapQueryInformation
857	0xa3639	HeapReAlloc
858	0x20b40	HeapSetInformation
859	0xa366d	HeapSize
860	0x3bb20	HeapSummary
861	0x3bb40	HeapUnlock
862	0x1c850	HeapValidate
863	0x3bb60	HeapWalk
864	0x1090	IdnToAscii
865	0x3bb80	IdnToNameprepUnicode
866	0x3bba0	IdnToUnicode
867	0x5a7b0	InitAtomTable
868	0xa36ff	InitOnceBeginInitialize
869	0xa3745	InitOnceComplete
870	0xa3787	InitOnceExecuteOnce
871	0xa37cb	InitOnceInitialize
872	0xa3802	InitializeConditionVariable
873	0x3bbe0	InitializeContext
874	0x3bbc0	InitializeContext2
875	0xa3866	InitializeCriticalSection
876	0x25140	InitializeCriticalSectionAndSpinCount
877	0x25150	InitializeCriticalSectionEx
878	0xa38dd	InitializeEnclave
879	0xa3930	InitializeProcThreadAttributeList
880	0xa398c	InitializeSListHead
881	0xa39bb	InitializeSRWLock
882	0x3bc00	InitializeSynchronizationBarrier
883	0xa3a12	InstallELAMCertificateInfo
884	0xa3a62	InterlockedFlushSList
885	0xa3a9a	InterlockedPopEntrySList
886	0xa3ad6	InterlockedPushEntrySList
887	0xa3b12	InterlockedPushListSList
888	0xa3b4f	InterlockedPushListSListEx
889	0x6ac90	InvalidateConsoleDIBits
890	0x3a6b0	IsBadCodePtr
891	0x3a6c0	IsBadHugeReadPtr
892	0x3a6d0	IsBadHugeWritePtr
893	0x16070	IsBadReadPtr
894	0x3a6e0	IsBadStringPtrA
895	0x3a730	IsBadStringPtrW
896	0x670a0	IsBadWritePtr
897	0x4b5f0	IsCalendarLeapDay
898	0x4b6d0	IsCalendarLeapMonth
899	0x4b7c0	IsCalendarLeapYear
900	0x220a0	IsDBCSLeadByte
901	0x3bc20	IsDBCSLeadByteEx
902	0x20910	IsDebuggerPresent
903	0xa3c78	IsEnclaveTypeSupported
904	0x3bc40	IsNLSDefinedString
905	0x37ee0	IsNativeVhdBoot
906	0x3bc60	IsNormalizedString
907	0xa3cf6	IsProcessCritical
908	0x21020	IsProcessInJob
909	0x1e2a0	IsProcessorFeaturePresent
910	0x39bb0	IsSystemResumeAutomatic
911	0x1d850	IsThreadAFiber
912	0xa3d93	IsThreadpoolTimerSet
913	0xa3dc6	IsUserCetAvailableInEnvironment
914	0x82b0	IsValidCalDateTime
915	0x203d0	IsValidCodePage
916	0x3bc80	IsValidLanguageGroup
917	0x20600	IsValidLocale
918	0x3bca0	IsValidLocaleName
919	0x3bcc0	IsValidNLSVersion
920	0xa3e8c	IsWow64GuestMachineSupported
921	0x1fdd0	IsWow64Process
922	0xa3ee5	IsWow64Process2
923	0x3bce0	K32EmptyWorkingSet
924	0x3bd00	K32EnumDeviceDrivers
925	0x3bd20	K32EnumPageFilesA
926	0x3bd40	K32EnumPageFilesW
927	0x21840	K32EnumProcessModules
928	0x3bd60	K32EnumProcessModulesEx
929	0x3bd80	K32EnumProcesses
930	0x3bda0	K32GetDeviceDriverBaseNameA
931	0x3bdc0	K32GetDeviceDriverBaseNameW
932	0x3bde0	K32GetDeviceDriverFileNameA
933	0x3be00	K32GetDeviceDriverFileNameW
934	0x3be20	K32GetMappedFileNameA
935	0x3be40	K32GetMappedFileNameW
936	0x3be60	K32GetModuleBaseNameA
937	0x3be80	K32GetModuleBaseNameW
938	0x3bea0	K32GetModuleFileNameExA
939	0x24a50	K32GetModuleFileNameExW
940	0x1f830	K32GetModuleInformation
941	0x3bec0	K32GetPerformanceInfo
942	0x3bee0	K32GetProcessImageFileNameA
943	0x207c0	K32GetProcessImageFileNameW
944	0x3bf00	K32GetProcessMemoryInfo
945	0x3bf40	K32GetWsChanges
946	0x3bf20	K32GetWsChangesEx
947	0x3bf60	K32InitializeProcessForWsWatch
948	0x3bfa0	K32QueryWorkingSet
949	0x3bf80	K32QueryWorkingSetEx
950	0x20da0	LCIDToLocaleName
951	0x3bfc0	LCMapStringA
952	0x162a0	LCMapStringEx
953	0x18c10	LCMapStringW
954	0x3d670	LZClose
955	0x3d730	LZCloseFile
956	0x38010	LZCopy
957	0x3d800	LZCreateFileW
958	0x38110	LZDone
959	0x3d940	LZInit
960	0x3daf0	LZOpenFileA
961	0x3dbe0	LZOpenFileW
962	0x3dca0	LZRead
963	0x3df10	LZSeek
964	0x21b40	LZStart
965	0xa422f	LeaveCriticalSection
966	0xa4275	LeaveCriticalSectionWhenCallbackReturns
967	0x18700	LoadAppInitDlls
968	0xa42c6	LoadEnclaveData
969	0x20c50	LoadLibraryA
970	0x20320	LoadLibraryExA
971	0x1b530	LoadLibraryExW
972	0x20640	LoadLibraryW
973	0x67130	LoadModule
974	0x25780	LoadPackagedLibrary
975	0x1bad0	LoadResource
976	0x3bfe0	LoadStringBaseExW
977	0x39210	LoadStringBaseW
978	0x18c30	LocalAlloc
979	0x39060	LocalCompact
980	0x25600	LocalFileTimeToFileTime
981	0xa43ca	LocalFileTimeToLocalSystemTime
982	0x685c0	LocalFlags
983	0x182d0	LocalFree
984	0x39110	LocalHandle
985	0x3c000	LocalLock
986	0x204c0	LocalReAlloc
987	0x39060	LocalShrink
988	0x1bb90	LocalSize
989	0xa4476	LocalSystemTimeToLocalFileTime
990	0x3c020	LocalUnlock
991	0x1e7e0	LocaleNameToLCID
992	0x3c040	LocateXStateFeature
993	0x25610	LockFile
994	0x25620	LockFileEx
995	0x1bb30	LockResource
996	0x3c060	MapUserPhysicalPages
997	0x445b0	MapUserPhysicalPagesScatter
998	0x1df50	MapViewOfFile
999	0x1d150	MapViewOfFileEx
1000	0x3c080	MapViewOfFileExNuma
1001	0xa457f	MapViewOfFileFromApp
1002	0x64ea0	Module32First
1003	0x1e330	Module32FirstW
1004	0x64fe0	Module32Next
1005	0x1a710	Module32NextW
1006	0x63f10	MoveFileA
1007	0x63f40	MoveFileExA
1008	0x213f0	MoveFileExW
1009	0x63f70	MoveFileTransactedA
1010	0x24510	MoveFileTransactedW
1011	0x22ff0	MoveFileW
1012	0x64050	MoveFileWithProgressA
1013	0x3c0a0	MoveFileWithProgressW
1014	0x25760	MulDiv
1015	0x15de0	MultiByteToWideChar
1016	0x3c0c0	NeedCurrentDirectoryForExePathA
1017	0x3c0e0	NeedCurrentDirectoryForExePathW
1018	0x259b0	NlsCheckPolicy
1019	0x259c0	NlsGetCacheUpdateCount
1020	0x259d0	NlsUpdateLocale
1021	0x259e0	NlsUpdateSystemLocale
1022	0x3c100	NormalizeString
1023	0x3c120	NotifyMountMgr
1024	0x4e9a0	NotifyUILanguageChange
1025	0x3a790	NtVdm64CreateProcessInternalW
1026	0x1f1e0	OOBEComplete
1027	0xa4785	OfferVirtualMemory
1028	0x6a0a0	OpenConsoleW
1029	0x3c140	OpenConsoleWStub
1030	0x25160	OpenEventA
1031	0x25170	OpenEventW
1032	0x62a40	OpenFile
1033	0x3c150	OpenFileById
1034	0x21d70	OpenFileMappingA
1035	0x20e80	OpenFileMappingW
1036	0x5c8d0	OpenJobObjectA
1037	0x5c950	OpenJobObjectW
1038	0x1c780	OpenMutexA
1039	0x25180	OpenMutexW
1040	0xa4870	OpenPackageInfoByFullName
1041	0x623d0	OpenPrivateNamespaceA
1042	0x229f0	OpenPrivateNamespaceW
1043	0x1b550	OpenProcess
1044	0xa48de	OpenProcessToken
1045	0x21b40	OpenProfileUserMapping
1046	0x63710	OpenSemaphoreA
1047	0x25190	OpenSemaphoreW
1048	0xa4954	OpenState
1049	0xa497b	OpenStateExplicit
1050	0x1cfb0	OpenThread
1051	0xa49b3	OpenThreadToken
1052	0x63780	OpenWaitableTimerA
1053	0x251a0	OpenWaitableTimerW
1054	0x24a30	OutputDebugStringA
1055	0x1d870	OutputDebugStringW
1056	0xa4a53	PackageFamilyNameFromFullName
1057	0xa4a94	PackageFamilyNameFromId
1058	0xa4acd	PackageFullNameFromId
1059	0xa4b04	PackageIdFromFullName
1060	0xa4b4d	PackageNameAndPublisherIdFromFamilyName
1061	0xa4b9c	ParseApplicationUserModelId
1062	0x25a80	PeekConsoleInputA
1063	0x25a90	PeekConsoleInputW
1064	0x3c170	PeekNamedPipe
1065	0x1bb10	PostQueuedCompletionStatus
1066	0x20430	PowerClearRequest
1067	0x1f560	PowerCreateRequest
1068	0x20340	PowerSetRequest
1069	0xa4c5b	PrefetchVirtualMemory
1070	0x43c60	PrepareTape
1071	0x22d90	PrivCopyFileExW
1072	0x64160	PrivMoveFileIdentityW
1073	0x65110	Process32First
1074	0x22df0	Process32FirstW
1075	0x65210	Process32Next
1076	0x22b90	Process32NextW
1077	0x1cf50	ProcessIdToSessionId
1078	0x3c190	PssCaptureSnapshot
1079	0x3c1b0	PssDuplicateSnapshot
1080	0x3c1d0	PssFreeSnapshot
1081	0x3c1f0	PssQuerySnapshot
1082	0x3c210	PssWalkMarkerCreate
1083	0x3c230	PssWalkMarkerFree
1084	0x3c250	PssWalkMarkerGetPosition
1085	0x3c270	PssWalkMarkerRewind
1086	0x3c290	PssWalkMarkerSeek
1087	0x3c270	PssWalkMarkerSeekToBeginning
1088	0x3c290	PssWalkMarkerSetPosition
1089	0x3c250	PssWalkMarkerTell
1090	0x3c2b0	PssWalkSnapshot
1091	0x1ca10	PulseEvent
1092	0x25880	PurgeComm
1093	0x3c2d0	QueryActCtxSettingsW
1094	0x12b70	QueryActCtxSettingsWWorker
1095	0x1e700	QueryActCtxW
1096	0x124d0	QueryActCtxWWorker
1097	0xa4e8d	QueryDepthSList
1098	0x653b0	QueryDosDeviceA
1099	0x25630	QueryDosDeviceW
1100	0x3c2f0	QueryFullProcessImageNameA
1101	0x1cfd0	QueryFullProcessImageNameW
1102	0x22660	QueryIdleProcessorCycleTime
1103	0x3c310	QueryIdleProcessorCycleTimeEx
1104	0x1dfb0	QueryInformationJobObject
1105	0x5ca20	QueryIoRateControlInformationJobObject
1106	0x3c330	QueryMemoryResourceNotification
1107	0x161e0	QueryPerformanceCounter
1108	0x1b610	QueryPerformanceFrequency
1109	0x3c350	QueryProcessAffinityUpdateMode
1110	0x22680	QueryProcessCycleTime
1111	0xa5013	QueryProtectedPolicy
1112	0x10e0	QueryThreadCycleTime
1113	0x44760	QueryThreadProfiling
1114	0x3c370	QueryThreadpoolStackInformation
1115	0x42aa0	QueryUmsThreadInformation
1116	0x1d830	QueryUnbiasedInterruptTime
1117	0x1e840	QueueUserAPC
1118	0x21710	QueueUserWorkItem
1119	0x71580	QuirkGetData2Worker
1120	0x71650	QuirkGetDataWorker
1121	0x71710	QuirkIsEnabled2Worker
1122	0x16330	QuirkIsEnabled3Worker
1123	0x71860	QuirkIsEnabledForPackage2Worker
1124	0x9c60	QuirkIsEnabledForPackage3Worker
1125	0x9dd0	QuirkIsEnabledForPackage4Worker
1126	0x9060	QuirkIsEnabledForPackageWorker
1127	0x1fb40	QuirkIsEnabledForProcessWorker
1128	0x9120	QuirkIsEnabledWorker
1129	0x20410	RaiseException
1130	0xa5218	RaiseFailFastException
1131	0x3a9a0	RaiseInvalid16BitExeError
1132	0x3c3b0	ReOpenFile
1133	0x25aa0	ReadConsoleA
1134	0x25ab0	ReadConsoleInputA
1135	0xa5292	ReadConsoleInputExA
1136	0xa52c5	ReadConsoleInputExW
1137	0x25ac0	ReadConsoleInputW
1138	0x25c10	ReadConsoleOutputA
1139	0x25c20	ReadConsoleOutputAttribute
1140	0x25c30	ReadConsoleOutputCharacterA
1141	0x25c40	ReadConsoleOutputCharacterW
1142	0x25c50	ReadConsoleOutputW
1143	0x25ad0	ReadConsoleW
1144	0x3c3d0	ReadDirectoryChangesExW
1145	0x24a10	ReadDirectoryChangesW
1146	0x25640	ReadFile
1147	0x25650	ReadFileEx
1148	0x25660	ReadFileScatter
1149	0x1cc50	ReadProcessMemory
1150	0x447a0	ReadThreadProfilingData
1151	0xa540d	ReclaimVirtualMemory
1152	0x24980	RegCloseKey
1153	0x3c3f0	RegCopyTreeW
1154	0x3c410	RegCreateKeyExA
1155	0x3c430	RegCreateKeyExW
1156	0x3c450	RegDeleteKeyExA
1157	0x3c470	RegDeleteKeyExW
1158	0x3c490	RegDeleteTreeA
1159	0x3c4b0	RegDeleteTreeW
1160	0x3c4d0	RegDeleteValueA
1161	0x3c4f0	RegDeleteValueW
1162	0x3c510	RegDisablePredefinedCacheEx
1163	0x3c530	RegEnumKeyExA
1164	0x3c580	RegEnumKeyExW
1165	0x3c5d0	RegEnumValueA
1166	0x3c620	RegEnumValueW
1167	0x3c670	RegFlushKey
1168	0x3c690	RegGetKeySecurity
1169	0x3c6b0	RegGetValueA
1170	0x22550	RegGetValueW
1171	0x3c6d0	RegLoadKeyA
1172	0x3c6f0	RegLoadKeyW
1173	0x3c710	RegLoadMUIStringA
1174	0x3c730	RegLoadMUIStringW
1175	0x3c750	RegNotifyChangeKeyValue
1176	0x22a30	RegOpenCurrentUser
1177	0x3c770	RegOpenKeyExA
1178	0x21160	RegOpenKeyExW
1179	0x22a10	RegOpenUserClassesRoot
1180	0x3c790	RegQueryInfoKeyA
1181	0x3c810	RegQueryInfoKeyW
1182	0x3c890	RegQueryValueExA
1183	0x3c8b0	RegQueryValueExW
1184	0x3c8d0	RegRestoreKeyA
1185	0x3c8f0	RegRestoreKeyW
1186	0x3c910	RegSaveKeyExA
1187	0x3c930	RegSaveKeyExW
1188	0x3c950	RegSetKeySecurity
1189	0x3c970	RegSetValueExA
1190	0x3c990	RegSetValueExW
1191	0x3c9b0	RegUnLoadKeyA
1192	0x3c9d0	RegUnLoadKeyW
1193	0x21df0	RegisterApplicationRecoveryCallback
1194	0x21a80	RegisterApplicationRestart
1195	0x3c9f0	RegisterBadMemoryNotification
1196	0x6a770	RegisterConsoleIME
1197	0x6a7a0	RegisterConsoleOS2
1198	0x6a1e0	RegisterConsoleVDM
1199	0x20140	RegisterWaitForInputIdle
1200	0x15aa0	RegisterWaitForSingleObject
1201	0x3ca10	RegisterWaitForSingleObjectEx
1202	0x1f120	RegisterWaitUntilOOBECompleted
1203	0x390e0	RegisterWowBaseHandlers
1204	0x422a0	RegisterWowExec
1205	0x21980	ReleaseActCtx
1206	0x1df70	ReleaseActCtxWorker
1207	0x251b0	ReleaseMutex
1208	0xa5846	ReleaseMutexWhenCallbackReturns
1209	0xa5887	ReleaseSRWLockExclusive
1210	0xa58bd	ReleaseSRWLockShared
1211	0x251c0	ReleaseSemaphore
1212	0xa5910	ReleaseSemaphoreWhenCallbackReturns
1213	0x25670	RemoveDirectoryA
1214	0x38410	RemoveDirectoryTransactedA
1215	0x63280	RemoveDirectoryTransactedW
1216	0x25680	RemoveDirectoryW
1217	0xa59a8	RemoveDllDirectory
1218	0x5bc00	RemoveLocalAlternateComputerNameA
1219	0x5bc60	RemoveLocalAlternateComputerNameW
1220	0x390f0	RemoveSecureMemoryCacheCallback
1221	0xa5a62	RemoveVectoredContinueHandler
1222	0xa5aa8	RemoveVectoredExceptionHandler
1223	0x3ca30	ReplaceFile
1224	0x62fc0	ReplaceFileA
1225	0x3ca30	ReplaceFileW
1226	0x3ab50	ReplacePartitionUnit
1227	0x39b90	RequestDeviceWakeup
1228	0x39b90	RequestWakeupLatency
1229	0x251d0	ResetEvent
1230	0x182b0	ResetWriteWatch
1231	0x25ae0	ResizePseudoConsole
1232	0xa5b79	ResolveDelayLoadedAPI
1233	0xa5bb1	ResolveDelayLoadsFromDll
1234	0x21140	ResolveLocaleName
1235	0xa5bf6	RestoreLastError
1236	0x1e820	ResumeThread
1237	0x21b00	RtlAddFunctionTable
1238	0x24e20	RtlCaptureContext
1239	0x22590	RtlCaptureStackBackTrace
1240	0x3ca50	RtlCompareMemory
1241	0x3ca70	RtlCopyMemory
1242	0x3ca90	RtlDeleteFunctionTable
1243	0x3cab0	RtlFillMemory
1244	0x3cae0	RtlInstallFunctionTableCallback
1245	0x1da50	RtlLookupFunctionEntry
1246	0x24e50	RtlMoveMemory
1247	0x1db20	RtlPcToFileHeader
1248	0x3cb00	RtlRaiseException
1249	0x3cb20	RtlRestoreContext
1250	0x3cb40	RtlUnwind
1251	0x20150	RtlUnwindEx
1252	0x1010	RtlVirtualUnwind
1253	0xa5d55	RtlZeroMemory
1254	0x25c60	ScrollConsoleScreenBufferA
1255	0x25c70	ScrollConsoleScreenBufferW
1256	0x3cb60	SearchPathA
1257	0x22930	SearchPathW
1258	0x3cb80	SetCachedSigningLevel
1259	0x4c670	SetCalendarInfoA
1260	0x3cba0	SetCalendarInfoW
1261	0x44380	SetComPlusPackageInstallStatus
1262	0x25890	SetCommBreak
1263	0x258a0	SetCommConfig
1264	0x258b0	SetCommMask
1265	0x258c0	SetCommState
1266	0x258d0	SetCommTimeouts
1267	0x3cbc0	SetComputerNameA
1268	0x3cbe0	SetComputerNameEx2W
1269	0x3cc00	SetComputerNameExA
1270	0x3cc20	SetComputerNameExW
1271	0x3cc40	SetComputerNameW
1272	0x25c80	SetConsoleActiveScreenBuffer
1273	0x25c90	SetConsoleCP
1274	0x25af0	SetConsoleCtrlHandler
1275	0x6a290	SetConsoleCursor
1276	0x25ca0	SetConsoleCursorInfo
1277	0x6a800	SetConsoleCursorMode
1278	0x25cb0	SetConsoleCursorPosition
1279	0x25f50	SetConsoleDisplayMode
1280	0x6abd0	SetConsoleFont
1281	0x6a2f0	SetConsoleHardwareState
1282	0x25f60	SetConsoleHistoryInfo
1283	0x6ac30	SetConsoleIcon
1284	0xa5fbc	SetConsoleInputExeNameA
1285	0xa5ff7	SetConsoleInputExeNameW
1286	0x6a350	SetConsoleKeyShortcuts
1287	0x6a870	SetConsoleLocalEUDC
1288	0x21b40	SetConsoleMaximumWindowSize
1289	0x6a3e0	SetConsoleMenuClose
1290	0x25b00	SetConsoleMode
1291	0x6a930	SetConsoleNlsMode
1292	0x25f70	SetConsoleNumberOfCommandsA
1293	0x25f80	SetConsoleNumberOfCommandsW
1294	0x6a990	SetConsoleOS2OemFormat
1295	0x25cc0	SetConsoleOutputCP
1296	0x6a440	SetConsolePalette
1297	0x25cd0	SetConsoleScreenBufferInfoEx
1298	0x25ce0	SetConsoleScreenBufferSize
1299	0x25cf0	SetConsoleTextAttribute
1300	0x25d00	SetConsoleTitleA
1301	0x25d10	SetConsoleTitleW
1302	0x25d20	SetConsoleWindowInfo
1303	0xa61ad	SetCriticalSectionSpinCount
1304	0x25f90	SetCurrentConsoleFontEx
1305	0x3cc60	SetCurrentDirectoryA
1306	0x21ac0	SetCurrentDirectoryW
1307	0x3eb00	SetDefaultCommConfigA
1308	0x3ebb0	SetDefaultCommConfigW
1309	0xa6259	SetDefaultDllDirectories
1310	0x66ed0	SetDllDirectoryA
1311	0x211c0	SetDllDirectoryW
1312	0x3cc80	SetDynamicTimeZoneInformation
1313	0x25690	SetEndOfFile
1314	0x687c0	SetEnvironmentStringsA
1315	0x3cca0	SetEnvironmentStringsW
1316	0x1e7a0	SetEnvironmentVariableA
1317	0x21120	SetEnvironmentVariableW
1318	0x1cf70	SetErrorMode
1319	0x251e0	SetEvent
1320	0xa6374	SetEventWhenCallbackReturns
1321	0x3ccc0	SetFileApisToANSI
1322	0x3cce0	SetFileApisToOEM
1323	0x256a0	SetFileAttributesA
1324	0x64620	SetFileAttributesTransactedA
1325	0x64680	SetFileAttributesTransactedW
1326	0x256b0	SetFileAttributesW
1327	0x387c0	SetFileBandwidthReservation
1328	0x1e6a0	SetFileCompletionNotificationModes
1329	0x256c0	SetFileInformationByHandle
1330	0x3cd00	SetFileIoOverlappedRange
1331	0x256d0	SetFilePointer
1332	0x256e0	SetFilePointerEx
1333	0x38900	SetFileShortNameA
1334	0x38950	SetFileShortNameW
1335	0x256f0	SetFileTime
1336	0x25700	SetFileValidData
1337	0x67a70	SetFirmwareEnvironmentVariableA
1338	0x67a90	SetFirmwareEnvironmentVariableExA
1339	0x67bc0	SetFirmwareEnvironmentVariableExW
1340	0x67ca0	SetFirmwareEnvironmentVariableW
1341	0x21a40	SetHandleCount
1342	0x25070	SetHandleInformation
1343	0x1de60	SetInformationJobObject
1344	0x5cda0	SetIoRateControlInformationJobObject
1345	0xa65ef	SetLastConsoleEventActive
1346	0x16280	SetLastError
1347	0x5beb0	SetLocalPrimaryComputerNameA
1348	0x5bf10	SetLocalPrimaryComputerNameW
1349	0x3cd20	SetLocalTime
1350	0x4c760	SetLocaleInfoA
1351	0x3cd40	SetLocaleInfoW
1352	0x635e0	SetMailslotInfo
1353	0x39b90	SetMessageWaitingIndicator
1354	0x39670	SetNamedPipeAttribute
1355	0x226a0	SetNamedPipeHandleState
1356	0x212b0	SetPriorityClass
1357	0x67670	SetProcessAffinityMask
1358	0x24960	SetProcessAffinityUpdateMode
1359	0x228b0	SetProcessDEPPolicy
1360	0xa6751	SetProcessDefaultCpuSets
1361	0xa67b7	SetProcessDynamicEHContinuationTargets
1362	0xa6831	SetProcessDynamicEnforcedCetCompatibleRanges
1363	0x25020	SetProcessInformation
1364	0xa68b5	SetProcessMitigationPolicy
1365	0x3cd60	SetProcessPreferredUILanguages
1366	0x21ae0	SetProcessPriorityBoost
1367	0x20e60	SetProcessShutdownParameters
1368	0x445e0	SetProcessWorkingSetSize
1369	0x3cd80	SetProcessWorkingSetSizeEx
1370	0xa6991	SetProtectedPolicy
1371	0x39510	SetSearchPathMode
1372	0x20970	SetStdHandle
1373	0x3cda0	SetStdHandleEx
1374	0x3cdc0	SetSystemFileCacheSize
1375	0x39bd0	SetSystemPowerState
1376	0x3cde0	SetSystemTime
1377	0x38200	SetSystemTimeAdjustment
1378	0x43ca0	SetTapeParameters
1379	0x43cf0	SetTapePosition
1380	0x68da0	SetTermsrvAppInstallMode
1381	0x1f850	SetThreadAffinityMask
1382	0x3ce00	SetThreadContext
1383	0xa6ac0	SetThreadDescription
1384	0x1c240	SetThreadErrorMode
1385	0x21180	SetThreadExecutionState
1386	0x212d0	SetThreadGroupAffinity
1387	0x244a0	SetThreadIdealProcessor
1388	0x3ce20	SetThreadIdealProcessorEx
1389	0x25030	SetThreadInformation
1390	0x1a880	SetThreadLocale
1391	0x1e0d0	SetThreadPreferredUILanguages
1392	0x1bd60	SetThreadPriority
1393	0x21b50	SetThreadPriorityBoost
1394	0xa6bf4	SetThreadSelectedCpuSets
1395	0x1eaf0	SetThreadStackGuarantee
1396	0xa6c5a	SetThreadToken
1397	0x1cd70	SetThreadUILanguage
1398	0x3ce40	SetThreadpoolStackInformation
1399	0xa6cdc	SetThreadpoolThreadMaximum
1400	0x21880	SetThreadpoolThreadMinimum
1401	0xa6d24	SetThreadpoolTimer
1402	0xa6d4a	SetThreadpoolTimerEx
1403	0xa6d6f	SetThreadpoolWait
1404	0xa6d93	SetThreadpoolWaitEx
1405	0x3ce80	SetTimeZoneInformation
1406	0x44640	SetTimerQueueTimer
1407	0x42af0	SetUmsThreadInformation
1408	0x20560	SetUnhandledExceptionFilter
1409	0x55020	SetUserGeoID
1410	0x55040	SetUserGeoName
1411	0x42310	SetVDMCurrentDirectories
1412	0x67db0	SetVolumeLabelA
1413	0x67e60	SetVolumeLabelW
1414	0x66930	SetVolumeMountPointA
1415	0x23b20	SetVolumeMountPointW
1416	0x3cea0	SetVolumeMountPointWStub
1417	0x251f0	SetWaitableTimer
1418	0xa6ebf	SetWaitableTimerEx
1419	0x3ceb0	SetXStateFeaturesMask
1420	0x258e0	SetupComm
1421	0x6a4b0	ShowConsoleCursor
1422	0x3ced0	SignalObjectAndWait
1423	0x1bb50	SizeofResource
1424	0x1b510	Sleep
1425	0xa6f63	SleepConditionVariableCS
1426	0xa6fb3	SleepConditionVariableSRW
1427	0x25200	SleepEx
1428	0x205c0	SortCloseHandle
1429	0xa190	SortGetHandle
1430	0xa7022	StartThreadpoolIo
1431	0xa7055	SubmitThreadpoolWork
1432	0x20ee0	SuspendThread
1433	0x259a0	SwitchToFiber
1434	0x1bb70	SwitchToThread
1435	0x1fe30	SystemTimeToFileTime
1436	0x22910	SystemTimeToTzSpecificLocalTime
1437	0xa70e8	SystemTimeToTzSpecificLocalTimeEx
1438	0x217f0	TerminateJobObject
1439	0x20ec0	TerminateProcess
1440	0x3cef0	TerminateThread
1441	0x22db0	TermsrvAppInstallMode
1442	0x69160	TermsrvConvertSysRootToUserDir
1443	0x1db00	TermsrvCreateRegEntry
1444	0x1e740	TermsrvDeleteKey
1445	0x1e720	TermsrvDeleteValue
1446	0x1beb0	TermsrvGetPreSetValue
1447	0x22890	TermsrvGetWindowsDirectoryA
1448	0x1ce80	TermsrvGetWindowsDirectoryW
1449	0x17160	TermsrvOpenRegEntry
1450	0x1dac0	TermsrvOpenUserClasses
1451	0x69db0	TermsrvRestoreKey
1452	0x1c260	TermsrvSetKeySecurity
1453	0x1c220	TermsrvSetValueKey
1454	0x69dd0	TermsrvSyncUserIniFileExt
1455	0x22700	Thread32First
1456	0x21c20	Thread32Next
1457	0x1cf90	TlsAlloc
1458	0x1dae0	TlsFree
1459	0x15b10	TlsGetValue
1460	0x16160	TlsSetValue
1461	0x3d320	Toolhelp32ReadProcessMemory
1462	0x3cf10	TransactNamedPipe
1463	0x258f0	TransmitCommChar
1464	0xa7339	TryAcquireSRWLockExclusive
1465	0xa7375	TryAcquireSRWLockShared
1466	0xa73ae	TryEnterCriticalSection
1467	0x21a50	TrySubmitThreadpoolCallback
1468	0x3cf30	TzSpecificLocalTimeToSystemTime
1469	0xa742d	TzSpecificLocalTimeToSystemTimeEx
1470	0x39540	UTRegister
1471	0x38110	UTUnRegister
1472	0x42b30	UmsThreadYield
1473	0x3cf50	UnhandledExceptionFilter
1474	0x25710	UnlockFile
1475	0x25720	UnlockFileEx
1476	0x1e760	UnmapViewOfFile
1477	0xa74e9	UnmapViewOfFileEx
1478	0x444d0	UnregisterApplicationRecoveryCallback
1479	0x3cf70	UnregisterApplicationRestart
1480	0x3cf90	UnregisterBadMemoryNotification
1481	0x6a770	UnregisterConsoleIME
1482	0x13770	UnregisterWait
1483	0x218d0	UnregisterWaitEx
1484	0x68750	UnregisterWaitUntilOOBECompleted
1485	0x8230	UpdateCalendarDayOfWeek
1486	0xa7604	UpdateProcThreadAttribute
1487	0x4a7f0	UpdateResourceA
1488	0x4a9a0	UpdateResourceW
1489	0x6acf0	VDMConsoleOperation
1490	0x425e0	VDMOperationStarted
1491	0x21b20	VerLanguageNameA
1492	0x20c70	VerLanguageNameW
1493	0xa76c2	VerSetConditionMask
1494	0x216c0	VerifyConsoleIoHandle
1495	0x3cfb0	VerifyScripts
1496	0x22ce0	VerifyVersionInfoA
1497	0x18bc0	VerifyVersionInfoW
1498	0x18c70	VirtualAlloc
1499	0x3cfd0	VirtualAllocEx
1500	0x249a0	VirtualAllocExNuma
1501	0x1a8a0	VirtualFree
1502	0x3cff0	VirtualFreeEx
1503	0x24ab0	VirtualLock
1504	0x1c3d0	VirtualProtect
1505	0x3d010	VirtualProtectEx
1506	0x1c900	VirtualQuery
1507	0x1d750	VirtualQueryEx
1508	0x1cd50	VirtualUnlock
1509	0x20c00	WTSGetActiveConsoleSessionId
1510	0x25900	WaitCommEvent
1511	0x3d030	WaitForDebugEvent
1512	0xa7816	WaitForDebugEventEx
1513	0x25210	WaitForMultipleObjects
1514	0x25220	WaitForMultipleObjectsEx
1515	0x25230	WaitForSingleObject
1516	0x25240	WaitForSingleObjectEx
1517	0xa78be	WaitForThreadpoolIoCallbacks
1518	0xa78fa	WaitForThreadpoolTimerCallbacks
1519	0xa792e	WaitForThreadpoolWaitCallbacks
1520	0xa7961	WaitForThreadpoolWorkCallbacks
1521	0x620d0	WaitNamedPipeA
1522	0x3d050	WaitNamedPipeW
1523	0xa79ac	WakeAllConditionVariable
1524	0xa79e4	WakeConditionVariable
1525	0x444f0	WerGetFlags
1526	0x444f0	WerGetFlagsWorker
1527	0x3d070	WerRegisterAdditionalProcess
1528	0x3d090	WerRegisterAppLocalDump
1529	0x3d0b0	WerRegisterCustomMetadata
1530	0x3d0d0	WerRegisterExcludedMemoryBlock
1531	0x20be0	WerRegisterFile
1532	0x44500	WerRegisterFileWorker
1533	0x20e40	WerRegisterMemoryBlock
1534	0x44510	WerRegisterMemoryBlockWorker
1535	0x20fe0	WerRegisterRuntimeExceptionModule
1536	0x44520	WerRegisterRuntimeExceptionModuleWorker
1537	0x1d330	WerSetFlags
1538	0x1d330	WerSetFlagsWorker
1539	0x3d0f0	WerUnregisterAdditionalProcess
1540	0x3d110	WerUnregisterAppLocalDump
1541	0x3d130	WerUnregisterCustomMetadata
1542	0x3d150	WerUnregisterExcludedMemoryBlock
1543	0x20bc0	WerUnregisterFile
1544	0x44530	WerUnregisterFileWorker
1545	0x22300	WerUnregisterMemoryBlock
1546	0x44540	WerUnregisterMemoryBlockWorker
1547	0x3d170	WerUnregisterRuntimeExceptionModule
1548	0x44550	WerUnregisterRuntimeExceptionModuleWorker
1549	0x6d750	WerpGetDebugger
1550	0x44560	WerpInitiateRemoteRecovery
1551	0x6e140	WerpLaunchAeDebug
1552	0x1bd80	WerpNotifyLoadStringResourceWorker
1553	0x1bd80	WerpNotifyUseStringResourceWorker
1554	0x16100	WideCharToMultiByte
1555	0x676c0	WinExec
1556	0x3d190	Wow64DisableWow64FsRedirection
1557	0x21d40	Wow64EnableWow64FsRedirection
1558	0x3d1b0	Wow64GetThreadContext
1559	0x382f0	Wow64GetThreadSelectorEntry
1560	0x3d1d0	Wow64RevertWow64FsRedirection
1561	0x3d1f0	Wow64SetThreadContext
1562	0x3d210	Wow64SuspendThread
1563	0x25b10	WriteConsoleA
1564	0x25d30	WriteConsoleInputA
1565	0x6a4f0	WriteConsoleInputVDMA
1566	0x6a580	WriteConsoleInputVDMW
1567	0x25d40	WriteConsoleInputW
1568	0x25d50	WriteConsoleOutputA
1569	0x25d60	WriteConsoleOutputAttribute
1570	0x25d70	WriteConsoleOutputCharacterA
1571	0x25d80	WriteConsoleOutputCharacterW
1572	0x25d90	WriteConsoleOutputW
1573	0x25b20	WriteConsoleW
1574	0x25730	WriteFile
1575	0x25740	WriteFileEx
1576	0x25750	WriteFileGather
1577	0x60fd0	WritePrivateProfileSectionA
1578	0x244c0	WritePrivateProfileSectionW
1579	0x61040	WritePrivateProfileStringA
1580	0x18260	WritePrivateProfileStringW
1581	0x610b0	WritePrivateProfileStructA
1582	0x61220	WritePrivateProfileStructW
1583	0x3d230	WriteProcessMemory
1584	0x61390	WriteProfileSectionA
1585	0x613a0	WriteProfileSectionW
1586	0x613b0	WriteProfileStringA
1587	0x613c0	WriteProfileStringW
1588	0x43d60	WriteTapemark
1589	0x3d250	ZombifyActCtx
1590	0x44300	ZombifyActCtxWorker
1591	0xa802b	__C_specific_handler
1592	0xa804f	__chkstk
1593	0xa8072	__misaligned_access
1594	0x18430	_hread
1595	0x69ee0	_hwrite
1596	0x1cd90	_lclose
1597	0x69df0	_lcreat
1598	0x18400	_llseek
1599	0xa80c1	_local_unwind
1600	0x69e60	_lopen
1601	0x18430	_lread
1602	0x69ee0	_lwrite
1603	0x20820	lstrcat
1604	0x20820	lstrcatA
1605	0x69f30	lstrcatW
1606	0x1cbe0	lstrcmp
1607	0x1cbe0	lstrcmpA
1608	0x1bee0	lstrcmpW
1609	0x1ba70	lstrcmpi
1610	0x1ba70	lstrcmpiA
1611	0x18310	lstrcmpiW
1612	0x1ea60	lstrcpy
1613	0x1ea60	lstrcpyA
1614	0x225b0	lstrcpyW
1615	0x3d270	lstrcpyn
1616	0x3d270	lstrcpynA
1617	0x216d0	lstrcpynW
1618	0x1b220	lstrlen
1619	0x1b220	lstrlenA
1620	0x175d0	lstrlenW
1621	0x1e0f0	timeBeginPeriod
1622	0x1d170	timeEndPeriod
1623	0x22820	timeGetDevCaps
1624	0x69f80	timeGetSystemTime
1625	0x1c180	timeGetTime
1626	0x1bee0	uaw_lstrcmpW
1627	0x18310	uaw_lstrcmpiW
1628	0x37b00	uaw_lstrlenW
1629	0x37b50	uaw_wcschr
1630	0x37b80	uaw_wcscpy
1631	0x37bb0	uaw_wcsicmp
1632	0x37bd0	uaw_wcslen
1633	0x37c00	uaw_wcsrchr

module_name	KERNEL32.dll
flags	0
timestamp	2021-02-11 00:55:22
version	0.0
ordinal_base	1
nFunctions	1633
nNames	1633
Names(1633)	0x9bcdc
Functions(1633)	0x9a358
NameOrdinals(1633)	0x9d660

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Windows NT BASE API Client DLL
FileVersion	10.0.19041.2788 (WinBuild.160101.0800)
InternalName	kernel32
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	kernel32
ProductName	Microsoft® Windows® Operating System
ProductVersion	10.0.19041.2788

VS_FIXEDFILEINFO

FileVersion	10.0.19041.2788
ProductVersion	10.0.19041.2788
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Production PCA 2011

serial: 330000040A87D0EA6786E36B0700000000040A

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:04:0a:87:d0:ea:67:86:e3:6b:07:00:00:00:00:04:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Production PCA 2011
        Validity
            Not Before: Jan  5 19:22:00 2023 GMT
            Not After : Dec 15 19:22:00 2023 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:42:a3:ce:18:9c:1e:01:87:96:13:30:62:
                    43:eb:85:84:c5:7d:03:c8:1f:3f:34:0b:62:b3:e6:
                    31:2b:7a:3c:d9:6a:d0:75:26:40:ed:eb:dd:22:b3:
                    d5:c7:93:ba:5c:1a:ce:c7:81:c9:a0:b0:31:be:5b:
                    0f:a8:81:11:84:d9:ba:10:44:37:b8:8d:0f:da:86:
                    8e:0c:0f:51:8a:5f:2b:c1:ac:93:80:28:6b:fb:42:
                    f1:ac:1b:29:f5:ce:e8:c0:9e:e7:7f:c0:45:8b:03:
                    a2:71:48:52:88:b9:c3:a6:ec:84:ed:b8:92:28:d9:
                    91:fd:59:1a:bb:e4:66:fc:d9:69:cf:54:a4:c1:3c:
                    de:fe:5e:f6:f3:bb:f3:e4:23:e1:c5:85:d3:96:15:
                    e7:ab:4d:f1:29:26:0c:f1:2c:2d:1a:3a:28:b4:45:
                    36:a3:5f:a5:48:5b:bd:e4:f6:99:25:38:3c:c9:48:
                    1f:ce:fe:30:1f:a1:30:5d:d0:82:1e:93:50:da:b9:
                    8f:9b:be:2c:38:2a:56:72:e3:1d:49:35:e5:6e:b8:
                    d7:a4:8d:84:de:72:40:f1:0b:14:e4:0a:4b:94:98:
                    ea:88:27:99:13:6d:ba:f4:9c:f9:1f:b7:37:ca:d6:
                    7b:5e:b4:94:d5:84:0c:36:e2:ea:24:d4:88:db:9e:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.10.3.24, 1.3.6.1.4.1.311.10.3.37, 1.3.6.1.4.1.311.10.3.6, Code Signing
            X509v3 Subject Key Identifier: 
                8A:BA:D8:B9:6F:D7:16:B7:52:CA:DE:2B:61:CF:37:FC:BE:BF:1A:32
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Ireland Operations Limited/serialNumber=232770\+500031
            X509v3 Authority Key Identifier: 
                A9:29:02:39:8E:16:C4:97:78:CD:90:F9:9E:4F:9A:E1:7C:55:AF:53
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ce:7e:15:f6:f0:30:bb:9b:10:6e:15:98:05:f9:80:0f:c5:36:
        7a:36:f5:07:27:b7:e2:3b:ca:ad:ed:45:91:13:58:db:12:a3:
        19:1d:71:4b:fa:e0:83:d1:ee:73:ba:ca:09:9c:6e:76:5a:ec:
        5a:2a:3f:7c:c4:a7:11:5d:7a:32:29:a9:95:9e:60:53:f6:97:
        f5:02:7c:49:19:34:67:a0:38:ba:e0:65:64:7b:7e:b3:f7:ef:
        b0:0f:d2:75:20:2c:60:e8:8b:9f:2b:a5:09:04:b8:0c:c1:51:
        8b:c4:7b:b0:9b:44:73:f9:7b:5a:7b:d2:04:68:dd:3a:76:74:
        99:58:0a:a2:e2:09:f7:80:a1:05:8c:b9:56:9f:fd:3c:d5:3d:
        ff:6f:58:e5:08:20:9b:13:8e:c2:6c:a9:27:c1:23:e8:c7:48:
        09:80:e1:45:1d:dc:a9:8d:05:ed:ea:d5:86:b5:f3:8e:88:3a:
        fa:78:8a:88:10:72:f6:ff:18:5e:c7:e9:38:c5:2f:ef:33:b9:
        f1:20:46:33:52:16:53:58:1b:08:67:cc:82:60:fa:c9:a7:42:
        fb:99:18:4c:b8:ed:fe:ff:84:64:13:e8:af:14:34:78:30:42:
        41:9a:1b:95:73:09:56:0a:5c:1b:d2:f3:3e:ff:66:d8:79:0d:
        35:61:bf:fb

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:76:56:00:00:00:00:00:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Oct 19 18:41:42 2011 GMT
            Not After : Oct 19 18:51:42 2026 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Production PCA 2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:bb:a2:e4:2e:09:e3:e7:c5:f7:96:69:bc:
                    00:21:bd:69:33:33:ef:ad:04:cb:54:80:ee:06:83:
                    bb:c5:20:84:d9:f7:d2:8b:f3:38:b0:ab:a4:ad:2d:
                    7c:62:79:05:ff:e3:4a:3f:04:35:20:70:e3:c4:e7:
                    6b:e0:9c:c0:36:75:e9:8a:31:dd:8d:70:e5:dc:37:
                    b5:74:46:96:28:5b:87:60:23:2c:bf:dc:47:a5:67:
                    f7:51:27:9e:72:eb:07:a6:c9:b9:1e:3b:53:35:7c:
                    e5:d3:ec:27:b9:87:1c:fe:b9:c9:23:09:6f:a8:46:
                    91:c1:6e:96:3c:41:d3:cb:a3:3f:5d:02:6a:4d:ec:
                    69:1f:25:28:5c:36:ff:fd:43:15:0a:94:e0:19:b4:
                    cf:df:c2:12:e2:c2:5b:27:ee:27:78:30:8b:5b:2a:
                    09:6b:22:89:53:60:16:2c:c0:68:1d:53:ba:ec:49:
                    f3:9d:61:8c:85:68:09:73:44:5d:7d:a2:54:2b:dd:
                    79:f7:15:cf:35:5d:6c:1c:2b:5c:ce:bc:9c:23:8b:
                    6f:6e:b5:26:d9:36:13:c3:4f:d6:27:ae:b9:32:3b:
                    41:92:2c:e1:c7:cd:77:e8:aa:54:4e:f7:5c:0b:04:
                    87:65:b4:43:18:a8:b2:e0:6d:19:77:ec:5a:24:fa:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                A9:29:02:39:8E:16:C4:97:78:CD:90:F9:9E:4F:9A:E1:7C:55:AF:53
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:fc:7c:71:51:a5:79:c2:6e:b2:ef:39:3e:bc:3c:52:0f:6e:
        2b:3f:10:13:73:fe:a8:68:d0:48:a6:34:4d:8a:96:05:26:ee:
        31:46:90:61:79:d6:ff:38:2e:45:6b:f4:c0:e5:28:b8:da:1d:
        8f:8a:db:09:d7:1a:c7:4c:0a:36:66:6a:8c:ec:1b:d7:04:90:
        a8:18:17:a4:9b:b9:e2:40:32:36:76:c4:c1:5a:c6:bf:e4:04:
        c0:ea:16:d3:ac:c3:68:ef:62:ac:dd:54:6c:50:30:58:a6:eb:
        7c:fe:94:a7:4e:8e:f4:ec:7c:86:73:57:c2:52:21:73:34:5a:
        f3:a3:8a:56:c8:04:da:07:09:ed:f8:8b:e3:ce:f4:7e:8e:ae:
        f0:f6:0b:8a:08:fb:3f:c9:1d:72:7f:53:b8:eb:be:63:e0:e3:
        3d:31:65:b0:81:e5:f2:ac:cd:16:a4:9f:3d:a8:b1:9b:c2:42:
        d0:90:84:5f:54:1d:ff:89:ea:ba:1d:47:90:6f:b0:73:4e:41:
        9f:40:9f:5f:e5:a1:2a:b2:11:91:73:8a:21:28:f0:ce:de:73:
        39:5f:3e:ab:5c:60:ec:df:03:10:a8:d3:09:e9:f4:f6:96:85:
        b6:7f:51:88:66:47:19:8d:a2:b0:12:3d:81:2a:68:05:77:bb:
        91:4c:62:7b:b6:c1:07:c7:ba:7a:87:34:03:0e:4b:62:7a:99:
        e9:ca:fc:ce:4a:37:c9:2d:a4:57:7c:1c:fe:3d:dc:b8:0f:5a:
        fa:d6:c4:b3:02:85:02:3a:ea:b3:d9:6e:e4:69:21:37:de:81:
        d1:f6:75:19:05:67:d3:93:57:5e:29:1b:39:c8:ee:2d:e1:cd:
        e4:45:73:5b:d0:d2:ce:7a:ab:16:19:82:46:58:d0:5e:9d:81:
        b3:67:af:6c:35:f2:bc:e5:3f:24:e2:35:a2:0a:75:06:f6:18:
        56:99:d4:78:2c:d1:05:1b:eb:d0:88:01:9d:aa:10:f1:05:df:
        ba:7e:2c:63:b7:06:9b:23:21:c4:f9:78:6c:e2:58:17:06:36:
        2b:91:12:03:cc:a4:d9:f2:2d:ba:f9:94:9d:40:ed:18:45:f1:
        ce:8a:5c:6b:3e:ab:03:d3:70:18:2a:0a:6a:e0:5f:47:d1:d5:
        63:0a:32:f2:af:d7:36:1f:2a:70:5a:e5:42:59:08:71:4b:57:
        ba:7e:83:81:f0:21:3c:f4:1c:c1:c5:b9:90:93:0e:88:45:93:
        86:e9:b1:20:99:be:98:cb:c5:95:a4:5d:62:d6:a0:63:08:20:
        bd:75:10:77:7d:3d:f3:45:b9:9f:97:9f:cb:57:80:6f:33:a9:
        04:cf:77:a4:62:1c:59:7e

undefined method `first' for #

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	767160	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi	Support Me on Ko-fi
Yandex.Money
Thank you!

everything is OK

kernel32.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

Certificates (2)

kernel32.dll
-