filename | kernel32.dll | |
---|---|---|
size | 1114112 (0x110000) | |
md5 | 7a4e1785974b576ca299c729472591ef | |
type | PE32 executable (DLL) (console) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
Rich Header
lib id | version | times used |
---|---|---|
147 | 30729 | 49 |
1 | 0 | 883 |
146 | 30729 | 1 |
149 | 30729 | 8 |
131 | 30729 | 252 |
132 | 30729 | 227 |
148 | 30729 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x10000 | 0xc0b42 | 0xd0000 | R-X CODE | |
.data | 0xe0000 | 0x1014 | 0x10000 | RW- IDATA | |
.rsrc | 0xf0000 | 0x530 | 0x10000 | R-- IDATA | |
.reloc | 0x100000 | 0xaddc | 0x10000 | R-- IDATA DISCARDABLE |
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
API-MS-Win-Core-RtlSupport-L1-1-0.dll | 3 | RtlUnwind | |
API-MS-Win-Core-RtlSupport-L1-1-0.dll | RtlCaptureContext | ||
API-MS-Win-Core-RtlSupport-L1-1-0.dll | 1 | RtlCaptureStackBackTrace | |
ntdll.dll | 229 | NtCreateEvent | |
ntdll.dll | 277 | NtDuplicateObject | |
ntdll.dll | 689 | RtlConvertSidToUnicodeString | |
ntdll.dll | 339 | NtNotifyChangeKey | |
ntdll.dll | 1155 | RtlRunOnceInitialize | |
ntdll.dll | 467 | NtResetEvent | |
ntdll.dll | 1278 | RtlValidSecurityDescriptor | |
ntdll.dll | 1077 | RtlOpenCurrentUser | |
ntdll.dll | 1978 | strncat | |
ntdll.dll | 1894 | _strlwr | |
ntdll.dll | 408 | NtQueryInstallUILanguage | |
ntdll.dll | 1302 | RtlpConvertCultureNamesToLCIDs | |
ntdll.dll | 1303 | RtlpConvertLCIDsToCultureNames | |
ntdll.dll | 53 | EtwEventEnabled | |
ntdll.dll | 1186 | RtlSetProcessPreferredUILanguages | |
ntdll.dll | 825 | RtlExpandEnvironmentStrings_U | |
ntdll.dll | 1244 | RtlUnicodeStringToInteger | |
ntdll.dll | 1017 | RtlLCIDToCultureName | |
ntdll.dll | 930 | RtlIdnToUnicode | |
ntdll.dll | 929 | RtlIdnToNameprepUnicode | |
ntdll.dll | 928 | RtlIdnToAscii | |
ntdll.dll | 1010 | RtlIsNormalizedString | |
ntdll.dll | 1065 | RtlNormalizeString | |
ntdll.dll | 975 | RtlIntegerToUnicodeString | |
ntdll.dll | 1902 | _ui64tow | |
ntdll.dll | 1925 | _wtol | |
ntdll.dll | 1915 | _wcslwr | |
ntdll.dll | 1239 | RtlUnhandledExceptionFilter | |
ntdll.dll | 537 | NtTerminateProcess | |
ntdll.dll | 2015 | wcsncpy | |
ntdll.dll | 2014 | wcsncmp | |
ntdll.dll | 1121 | RtlReadThreadProfilingData | |
ntdll.dll | 1110 | RtlQueryThreadProfiling | |
ntdll.dll | 777 | RtlDisableThreadProfiling | |
ntdll.dll | 794 | RtlEnableThreadProfiling | |
ntdll.dll | 1175 | RtlSetExtendedFeaturesMask | |
ntdll.dll | 888 | RtlGetExtendedFeaturesMask | |
ntdll.dll | 1034 | RtlLocateExtendedFeature | |
ntdll.dll | 693 | RtlCopyContext | |
ntdll.dll | 886 | RtlGetEnabledExtendedFeatures | |
ntdll.dll | 887 | RtlGetExtendedContextLength | |
ntdll.dll | 958 | RtlInitializeExtendedContext | |
ntdll.dll | 1035 | RtlLocateLegacyContext | |
ntdll.dll | 438 | NtRaiseException | |
ntdll.dll | 62 | EtwEventWriteNoRegistration | |
ntdll.dll | 1126 | RtlRegisterWait | |
ntdll.dll | 1179 | RtlSetIoCompletionCallback | |
ntdll.dll | 1113 | RtlQueueWorkItem | |
ntdll.dll | 765 | RtlDeregisterWait | |
ntdll.dll | 344 | NtOpenEvent | |
ntdll.dll | 468 | NtResetWriteWatch | |
ntdll.dll | 311 | NtGetWriteWatch | |
ntdll.dll | 334 | NtMapUserPhysicalPagesScatter | |
ntdll.dll | 333 | NtMapUserPhysicalPages | |
ntdll.dll | 296 | NtFreeUserPhysicalPages | |
ntdll.dll | 182 | NtAllocateUserPhysicalPages | |
ntdll.dll | 551 | NtUnlockVirtualMemory | |
ntdll.dll | 329 | NtLockVirtualMemory | |
ntdll.dll | 1075 | RtlOemStringToUnicodeString | |
ntdll.dll | 1172 | RtlSetEnvironmentStrings | |
ntdll.dll | 680 | RtlComputeImportTableHash | |
ntdll.dll | 1930 | bsearch | |
ntdll.dll | 796 | RtlEncodeSystemPointer | |
ntdll.dll | 839 | RtlFindCharInUnicodeString | |
ntdll.dll | 1066 | RtlNtPathNameToDosPathName | |
ntdll.dll | 206 | NtApphelpCacheControl | |
ntdll.dll | 1116 | RtlRandom | |
ntdll.dll | 837 | RtlFindActivationContextSectionGuid | |
ntdll.dll | 838 | RtlFindActivationContextSectionString | |
ntdll.dll | 780 | RtlDoesFileExists_U | |
ntdll.dll | 706 | RtlCreateActivationContext | |
ntdll.dll | 33 | DbgPrintEx | |
ntdll.dll | 933 | RtlImageNtHeaderEx | |
ntdll.dll | 1194 | RtlSetThreadPreferredUILanguages | |
ntdll.dll | 1087 | RtlQueryActivationContextApplicationSettings | |
ntdll.dll | 918 | RtlGetThreadPreferredUILanguages | |
ntdll.dll | 1097 | RtlQueryInformationActivationContext | |
ntdll.dll | 1054 | RtlMultiAppendUnicodeStringBuffer | |
ntdll.dll | 1305 | RtlpEnsureBufferSize | |
ntdll.dll | 898 | RtlGetLengthWithoutLastFullDosOrNtPathElement | |
ntdll.dll | 1299 | RtlpApplyLengthFunction | |
ntdll.dll | 873 | RtlGetActiveActivationContext | |
ntdll.dll | 740 | RtlDeactivateActivationContext | |
ntdll.dll | 604 | RtlActivateActivationContext | |
ntdll.dll | 1298 | RtlZombifyActivationContext | |
ntdll.dll | 1127 | RtlReleaseActivationContext | |
ntdll.dll | 623 | RtlAddRefActivationContext | |
ntdll.dll | 497 | NtSetInformationJobObject | |
ntdll.dll | 234 | NtCreateJobSet | |
ntdll.dll | 399 | NtQueryInformationJobObject | |
ntdll.dll | 536 | NtTerminateJobObject | |
ntdll.dll | 208 | NtAssignProcessToJobObject | |
ntdll.dll | 348 | NtOpenJobObject | |
ntdll.dll | 233 | NtCreateJobObject | |
ntdll.dll | 1995 | tolower | |
ntdll.dll | 1929 | atol | |
ntdll.dll | 1938 | isdigit | |
ntdll.dll | 1996 | toupper | |
ntdll.dll | 878 | RtlGetCurrentDirectory_U | |
ntdll.dll | 695 | RtlCopyLuid | |
ntdll.dll | 865 | RtlFreeOemString | |
ntdll.dll | 711 | RtlCreateEnvironment | |
ntdll.dll | 712 | RtlCreateEnvironmentEx | |
ntdll.dll | 768 | RtlDestroyEnvironment | |
ntdll.dll | 394 | NtQueryEvent | |
ntdll.dll | 24 | CsrClientCallServer | |
ntdll.dll | 18 | CsrAllocateCaptureBuffer | |
ntdll.dll | 19 | CsrAllocateMessagePointer | |
ntdll.dll | 26 | CsrFreeCaptureBuffer | |
ntdll.dll | 273 | NtDeviceIoControlFile | |
ntdll.dll | 720 | RtlCreateQueryDebugBuffer | |
ntdll.dll | 1104 | RtlQueryProcessDebugInformation | |
ntdll.dll | 774 | RtlDestroyQueryDebugBuffer | |
ntdll.dll | 335 | NtMapViewOfSection | |
ntdll.dll | 552 | NtUnmapViewOfSection | |
ntdll.dll | 869 | RtlFreeUserStack | |
ntdll.dll | 1084 | RtlProcessFlsData | |
ntdll.dll | 630 | RtlAllocateActivationContextStack | |
ntdll.dll | 860 | RtlFreeActivationContextStack | |
ntdll.dll | 732 | RtlCreateUserStack | |
ntdll.dll | 1362 | TpCaptureCaller | |
ntdll.dll | 534 | NtSuspendThread | |
ntdll.dll | 483 | NtSetContextThread | |
ntdll.dll | 301 | NtGetContextThread | |
ntdll.dll | 631 | RtlAllocateAndInitializeSid | |
ntdll.dll | 866 | RtlFreeSid | |
ntdll.dll | 529 | NtSignalAndWaitForSingleObject | |
ntdll.dll | 1153 | RtlRunOnceComplete | |
ntdll.dll | 1152 | RtlRunOnceBeginInitialize | |
ntdll.dll | 1154 | RtlRunOnceExecuteOnce | |
ntdll.dll | 1208 | RtlSleepConditionVariableSRW | |
ntdll.dll | 1207 | RtlSleepConditionVariableCS | |
ntdll.dll | 356 | NtOpenPrivateNamespace | |
ntdll.dll | 243 | NtCreatePrivateNamespace | |
ntdll.dll | 271 | NtDeletePrivateNamespace | |
ntdll.dll | 966 | RtlInitializeSRWLock | |
ntdll.dll | 621 | RtlAddIntegrityLabelToBoundaryDescriptor | |
ntdll.dll | 625 | RtlAddSIDToBoundaryDescriptor | |
ntdll.dll | 710 | RtlCreateBoundaryDescriptor | |
ntdll.dll | 382 | NtProtectVirtualMemory | |
ntdll.dll | 1975 | strcpy_s | |
ntdll.dll | 460 | NtReplacePartitionUnit | |
ntdll.dll | 676 | RtlCompareUnicodeString | |
ntdll.dll | 1115 | RtlRaiseStatus | |
ntdll.dll | 404 | NtQueryInformationToken | |
ntdll.dll | 967 | RtlInitializeSid | |
ntdll.dll | 1214 | RtlSubAuthoritySid | |
ntdll.dll | 123 | LdrLoadDll | |
ntdll.dll | 116 | LdrGetProcedureAddress | |
ntdll.dll | 148 | LdrUnloadDll | |
ntdll.dll | 1107 | RtlQueryRegistryValues | |
ntdll.dll | 429 | NtQuerySystemInformationEx | |
ntdll.dll | 744 | RtlDecodeSystemPointer | |
ntdll.dll | 1293 | RtlWow64LogMessageInEventLogger | |
ntdll.dll | 1334 | RtlxAnsiStringToUnicodeSize | |
ntdll.dll | 319 | NtIsSystemResumeAutomatic | |
ntdll.dll | 303 | NtGetDevicePowerState | |
ntdll.dll | 520 | NtSetThreadExecutionState | |
ntdll.dll | 317 | NtInitiatePowerAction | |
ntdll.dll | 372 | NtPowerInformation | |
ntdll.dll | 526 | NtSetVolumeInformationFile | |
ntdll.dll | 1094 | RtlQueryEnvironmentVariable_U | |
ntdll.dll | 891 | RtlGetFullPathName_U | |
ntdll.dll | 1009 | RtlIsNameLegalDOS8Dot3 | |
ntdll.dll | 881 | RtlGetCurrentProcessorNumberEx | |
ntdll.dll | 1858 | _allshl | |
ntdll.dll | 366 | NtOpenThreadToken | |
ntdll.dll | 502 | NtSetInformationThread | |
ntdll.dll | 122 | LdrLoadAlternateResourceModuleEx | |
ntdll.dll | 121 | LdrLoadAlternateResourceModule | |
ntdll.dll | 154 | LdrpResGetMappingSize | |
ntdll.dll | 139 | LdrRscIsTypeExist | |
ntdll.dll | 108 | LdrFindResource_U | |
ntdll.dll | 1892 | _strcmpi | |
ntdll.dll | 1979 | strncat_s | |
ntdll.dll | 603 | RtlAcquireSRWLockShared | |
ntdll.dll | 1134 | RtlReleaseSRWLockShared | |
ntdll.dll | 1972 | strchr | |
ntdll.dll | 939 | RtlInitAnsiStringEx | |
ntdll.dll | 728 | RtlCreateUnicodeString | |
ntdll.dll | 1261 | RtlUpcaseUnicodeChar | |
ntdll.dll | 2024 | wcstoul | |
ntdll.dll | 115 | LdrGetFileNameFromLoadAsDataTable | |
ntdll.dll | 2019 | wcsrchr | |
ntdll.dll | 434 | NtQueryVirtualMemory | |
ntdll.dll | 735 | RtlCultureNameToLCID | |
ntdll.dll | 135 | LdrResFindResourceDirectory | |
ntdll.dll | 134 | LdrResFindResource | |
ntdll.dll | 107 | LdrFindResourceEx_U | |
ntdll.dll | 155 | LdrpResGetResourceDirectory | |
ntdll.dll | 931 | RtlImageDirectoryEntryToData | |
ntdll.dll | 136 | LdrResGetRCConfig | |
ntdll.dll | 1283 | RtlVerifyVersionInfo | |
ntdll.dll | 911 | RtlGetProductInfo | |
ntdll.dll | 1026 | RtlLcidToLocaleName | |
ntdll.dll | 919 | RtlGetUILanguageInfo | |
ntdll.dll | 238 | NtCreateMailslotFile | |
ntdll.dll | 830 | RtlExtendedLargeIntegerDivide | |
ntdll.dll | 1893 | _stricmp | |
ntdll.dll | 662 | RtlCleanUpTEBLangLists | |
ntdll.dll | 932 | RtlImageNtHeader | |
ntdll.dll | 1193 | RtlSetThreadPoolStartFunc | |
ntdll.dll | 141 | LdrSetDllManifestProber | |
ntdll.dll | 1198 | RtlSetUserCallbackExceptionFilter | |
ntdll.dll | 1197 | RtlSetUnhandledExceptionFilter | |
ntdll.dll | 795 | RtlEncodePointer | |
ntdll.dll | 902 | RtlGetNativeSystemInformation | |
ntdll.dll | 602 | RtlAcquireSRWLockExclusive | |
ntdll.dll | 1133 | RtlReleaseSRWLockExclusive | |
ntdll.dll | 127 | LdrQueryImageFileExecutionOptions | |
ntdll.dll | 1861 | _aulldiv | |
ntdll.dll | 1200 | RtlSetUserValueHeap | |
ntdll.dll | 1118 | RtlReAllocateHeap | |
ntdll.dll | 632 | RtlAllocateHandle | |
ntdll.dll | 862 | RtlFreeHandle | |
ntdll.dll | 764 | RtlDeregisterSecureMemoryCacheCallback | |
ntdll.dll | 1124 | RtlRegisterSecureMemoryCacheCallback | |
ntdll.dll | 671 | RtlCompactHeap | |
ntdll.dll | 1206 | RtlSizeHeap | |
ntdll.dll | 922 | RtlGetUserInfoHeap | |
ntdll.dll | 1038 | RtlLockHeap | |
ntdll.dll | 1013 | RtlIsValidHandle | |
ntdll.dll | 1255 | RtlUnlockHeap | |
ntdll.dll | 428 | NtQuerySystemInformation | |
ntdll.dll | 946 | RtlInitString | |
ntdll.dll | 516 | NtSetSystemEnvironmentValueEx | |
ntdll.dll | 870 | RtlGUIDFromString | |
ntdll.dll | 427 | NtQuerySystemEnvironmentValueEx | |
ntdll.dll | 1992 | swprintf_s | |
ntdll.dll | 1851 | _alldiv | |
ntdll.dll | 289 | NtFlushBuffersFile | |
ntdll.dll | 896 | RtlGetLastNtStatus | |
ntdll.dll | 783 | RtlDosPathNameToNtPathName_U_WithStatus | |
ntdll.dll | 814 | RtlEqualSid | |
ntdll.dll | 1096 | RtlQueryInformationAcl | |
ntdll.dll | 872 | RtlGetAce | |
ntdll.dll | 439 | NtRaiseHardError | |
ntdll.dll | 435 | NtQueryVolumeInformationFile | |
ntdll.dll | 101 | LdrAddRefDll | |
ntdll.dll | 236 | NtCreateKeyTransacted | |
ntdll.dll | 776 | RtlDetermineDosPathNameType_U | |
ntdll.dll | 1911 | _vsnwprintf | |
ntdll.dll | 1246 | RtlUnicodeStringToOemString | |
ntdll.dll | 1291 | RtlWow64EnableFsRedirection | |
ntdll.dll | 210 | NtCancelIoFile | |
ntdll.dll | 212 | NtCancelSynchronousIoFile | |
ntdll.dll | 338 | NtNotifyChangeDirectoryFile | |
ntdll.dll | 606 | RtlActivateActivationContextUnsafeFast | |
ntdll.dll | 741 | RtlDeactivateActivationContextUnsafeFast | |
ntdll.dll | 390 | NtQueryDirectoryFile | |
ntdll.dll | 558 | NtWaitForSingleObject | |
ntdll.dll | 916 | RtlGetThreadErrorMode | |
ntdll.dll | 1191 | RtlSetThreadErrorMode | |
ntdll.dll | 1181 | RtlSetLastWin32ErrorAndNtStatusFromNtStatus | |
ntdll.dll | 358 | NtOpenProcessToken | |
ntdll.dll | 1068 | RtlNtStatusToDosErrorNoTeb | |
ntdll.dll | 55 | EtwEventRegister | |
ntdll.dll | 58 | EtwEventWrite | |
ntdll.dll | 57 | EtwEventUnregister | |
ntdll.dll | 249 | NtCreateSection | |
ntdll.dll | 421 | NtQuerySection | |
ntdll.dll | 924 | RtlGetVersion | |
ntdll.dll | 1092 | RtlQueryElevationFlags | |
ntdll.dll | 500 | NtSetInformationProcess | |
ntdll.dll | 658 | RtlCharToInteger | |
ntdll.dll | 1982 | strncpy_s | |
ntdll.dll | 901 | RtlGetLongestNtPathLength | |
ntdll.dll | 815 | RtlEqualString | |
ntdll.dll | 861 | RtlFreeAnsiString | |
ntdll.dll | 704 | RtlCopyUnicodeString | |
ntdll.dll | 782 | RtlDosPathNameToNtPathName_U | |
ntdll.dll | 326 | NtLockFile | |
ntdll.dll | 440 | NtReadFile | |
ntdll.dll | 1011 | RtlIsTextUnicode | |
ntdll.dll | 272 | NtDeleteValueKey | |
ntdll.dll | 282 | NtEnumerateKey | |
ntdll.dll | 857 | RtlFormatCurrentUserKeyPath | |
ntdll.dll | 643 | RtlAppendUnicodeToString | |
ntdll.dll | 642 | RtlAppendUnicodeStringToString | |
ntdll.dll | 1083 | RtlPrefixUnicodeString | |
ntdll.dll | 30 | CsrVerifyRegion | |
ntdll.dll | 184 | NtAllocateVirtualMemory | |
ntdll.dll | 582 | NtWriteFile | |
ntdll.dll | 297 | NtFreeVirtualMemory | |
ntdll.dll | 550 | NtUnlockFile | |
ntdll.dll | 285 | NtEnumerateValueKey | |
ntdll.dll | 1056 | RtlMultiByteToUnicodeSize | |
ntdll.dll | 1248 | RtlUnicodeToMultiByteN | |
ntdll.dll | 1055 | RtlMultiByteToUnicodeN | |
ntdll.dll | 1088 | RtlQueryAtomInAtomTable | |
ntdll.dll | 396 | NtQueryInformationAtom | |
ntdll.dll | 750 | RtlDeleteAtomFromAtomTable | |
ntdll.dll | 265 | NtDeleteAtom | |
ntdll.dll | 1044 | RtlLookupAtomInAtomTable | |
ntdll.dll | 288 | NtFindAtom | |
ntdll.dll | 615 | RtlAddAtomToAtomTable | |
ntdll.dll | 173 | NtAddAtom | |
ntdll.dll | 708 | RtlCreateAtomTable | |
ntdll.dll | 767 | RtlDestroyAtomTable | |
ntdll.dll | 784 | RtlDosPathNameToRelativeNtPathName_U | |
ntdll.dll | 1131 | RtlReleaseRelativeName | |
ntdll.dll | 816 | RtlEqualUnicodeString | |
ntdll.dll | 1005 | RtlIsDosDeviceName_U | |
ntdll.dll | 46 | DbgUiStopDebugging | |
ntdll.dll | 39 | DbgUiContinue | |
ntdll.dll | 47 | DbgUiWaitStateChange | |
ntdll.dll | 40 | DbgUiConvertStateChangeStructure | |
ntdll.dll | 291 | NtFlushInstructionCache | |
ntdll.dll | 403 | NtQueryInformationThread | |
ntdll.dll | 42 | DbgUiGetThreadDebugObject | |
ntdll.dll | 494 | NtSetInformationDebugObject | |
ntdll.dll | 43 | DbgUiIssueRemoteBreakin | |
ntdll.dll | 38 | DbgUiConnectToDbg | |
ntdll.dll | 41 | DbgUiDebugActiveProcess | |
ntdll.dll | 27 | CsrGetProcessId | |
ntdll.dll | 357 | NtOpenProcess | |
ntdll.dll | 519 | NtSetSystemTime | |
ntdll.dll | 1130 | RtlReleasePrivilege | |
ntdll.dll | 598 | RtlAcquirePrivilege | |
ntdll.dll | 1853 | _allmul | |
ntdll.dll | 737 | RtlCutoverTimeToSystemTime | |
ntdll.dll | 517 | NtSetSystemInformation | |
ntdll.dll | 1219 | RtlTimeFieldsToTime | |
ntdll.dll | 1223 | RtlTimeToTimeFields | |
ntdll.dll | 401 | NtQueryInformationProcess | |
ntdll.dll | 882 | RtlGetCurrentTransaction | |
ntdll.dll | 1169 | RtlSetCurrentTransaction | |
ntdll.dll | 1914 | _wcsicmp | |
ntdll.dll | 2016 | wcsncpy_s | |
ntdll.dll | 2005 | wcscat_s | |
ntdll.dll | 1082 | RtlPrefixString | |
ntdll.dll | 2021 | wcsstr | |
ntdll.dll | 2006 | wcschr | |
ntdll.dll | 729 | RtlCreateUnicodeStringFromAsciiz | |
ntdll.dll | 938 | RtlInitAnsiString | |
ntdll.dll | 638 | RtlAnsiStringToUnicodeString | |
ntdll.dll | 948 | RtlInitUnicodeStringEx | |
ntdll.dll | 163 | NlsMbCodePageTag | |
ntdll.dll | 1336 | RtlxUnicodeStringToAnsiSize | |
ntdll.dll | 1242 | RtlUnicodeStringToAnsiString | |
ntdll.dll | 802 | RtlEnterCriticalSection | |
ntdll.dll | 1027 | RtlLeaveCriticalSection | |
ntdll.dll | 1067 | RtlNtStatusToDosError | |
ntdll.dll | 779 | RtlDnsHostNameToComputerName | |
ntdll.dll | 868 | RtlFreeUnicodeString | |
ntdll.dll | 1249 | RtlUnicodeToMultiByteSize | |
ntdll.dll | 2010 | wcscspn | |
ntdll.dll | 2009 | wcscpy_s | |
ntdll.dll | 1959 | memmove | |
ntdll.dll | 1883 | _memicmp | |
ntdll.dll | 235 | NtCreateKey | |
ntdll.dll | 525 | NtSetValueKey | |
ntdll.dll | 292 | NtFlushKey | |
ntdll.dll | 947 | RtlInitUnicodeString | |
ntdll.dll | 349 | NtOpenKey | |
ntdll.dll | 433 | NtQueryValueKey | |
ntdll.dll | 215 | NtClose | |
ntdll.dll | 753 | RtlDeleteCriticalSection | |
ntdll.dll | 954 | RtlInitializeCriticalSection | |
ntdll.dll | 496 | NtSetInformationFile | |
ntdll.dll | 514 | NtSetSecurityObject | |
ntdll.dll | 489 | NtSetEaFile | |
ntdll.dll | 423 | NtQuerySecurityObject | |
ntdll.dll | 1029 | RtlLengthSecurityDescriptor | |
ntdll.dll | 393 | NtQueryEaFile | |
ntdll.dll | 398 | NtQueryInformationFile | |
ntdll.dll | 346 | NtOpenFile | |
ntdll.dll | 1961 | memset | |
ntdll.dll | 1916 | _wcsnicmp | |
ntdll.dll | 231 | NtCreateFile | |
ntdll.dll | 300 | NtFsControlFile | |
ntdll.dll | 1957 | memcpy | |
ntdll.dll | 1180 | RtlSetLastWin32Error | |
ntdll.dll | 633 | RtlAllocateHeap | |
ntdll.dll | 705 | RtlCreateAcl | |
ntdll.dll | 607 | RtlAddAccessAllowedAce | |
ntdll.dll | 722 | RtlCreateSecurityDescriptor | |
ntdll.dll | 1183 | RtlSetOwnerSecurityDescriptor | |
ntdll.dll | 1176 | RtlSetGroupSecurityDescriptor | |
ntdll.dll | 1170 | RtlSetDaclSecurityDescriptor | |
ntdll.dll | 863 | RtlFreeHeap | |
ntdll.dll | 957 | RtlInitializeExceptionChain | |
ntdll.dll | 1348 | TpAllocPool | |
ntdll.dll | 1382 | TpSetPoolMinThreads | |
ntdll.dll | 1383 | TpSetPoolStackInformation | |
ntdll.dll | 1370 | TpQueryPoolStackInformation | |
ntdll.dll | 1346 | TpAllocCleanupGroup | |
ntdll.dll | 1386 | TpSimpleTryPost | |
ntdll.dll | 1351 | TpAllocWork | |
ntdll.dll | 1349 | TpAllocTimer | |
ntdll.dll | 1350 | TpAllocWait | |
ntdll.dll | 1347 | TpAllocIoCompletion | |
ntdll.dll | 1356 | TpCallbackMayRunLong | |
ntdll.dll | 1093 | RtlQueryEnvironmentVariable | |
ntdll.dll | 585 | NtWriteVirtualMemory | |
ntdll.dll | 342 | NtOpenDirectoryObject | |
ntdll.dll | 425 | NtQuerySymbolicLinkObject | |
ntdll.dll | 364 | NtOpenSymbolicLinkObject | |
ntdll.dll | 2018 | wcspbrk | |
ntdll.dll | 581 | NtWow64WriteVirtualMemory64 | |
ntdll.dll | 773 | RtlDestroyProcessParameters | |
ntdll.dll | 718 | RtlCreateProcessParametersEx | |
ntdll.dll | 471 | NtResumeThread | |
ntdll.dll | 32 | DbgPrint | |
ntdll.dll | 456 | NtRemoveProcessDebug | |
ntdll.dll | 129 | LdrQueryImageFileKeyOption | |
ntdll.dll | 258 | NtCreateUserProcess | |
ntdll.dll | 893 | RtlGetFullPathName_UstrEx | |
ntdll.dll | 743 | RtlDecodePointer | |
ntdll.dll | 1016 | RtlKnownExceptionFilter | |
ntdll.dll | 1114 | RtlRaiseException | |
ntdll.dll | 466 | NtRequestWaitReplyPort | |
ntdll.dll | 351 | NtOpenKeyTransacted | |
ntdll.dll | 411 | NtQueryKey | |
ntdll.dll | 350 | NtOpenKeyEx | |
ntdll.dll | 352 | NtOpenKeyTransactedEx | |
ntdll.dll | 1277 | RtlValidRelativeSecurityDescriptor | |
ntdll.dll | 269 | NtDeleteKey | |
ntdll.dll | 323 | NtLoadKey | |
ntdll.dll | 547 | NtUnloadKey | |
ntdll.dll | 340 | NtNotifyChangeMultipleKeys | |
ntdll.dll | 469 | NtRestoreKey | |
ntdll.dll | 477 | NtSaveKeyEx | |
ntdll.dll | 1030 | RtlLengthSid | |
ntdll.dll | 1050 | RtlMakeSelfRelativeSD | |
ntdll.dll | 1895 | _strnicmp | |
ntdll.dll | 1980 | strncmp | |
ntdll.dll | 278 | NtDuplicateToken | |
ntdll.dll | 1232 | RtlTryAcquirePebLock | |
ntdll.dll | 1909 | _vsnprintf | |
ntdll.dll | 556 | NtWaitForMultipleObjects | |
ntdll.dll | 1129 | RtlReleasePebLock | |
ntdll.dll | 214 | NtClearEvent | |
ntdll.dll | 1289 | RtlWerpReportException | |
ntdll.dll | 138 | LdrResSearchResource | |
ntdll.dll | 580 | NtWow64ReadVirtualMemory64 | |
ntdll.dll | 578 | NtWow64QueryInformationProcess64 | |
ntdll.dll | 673 | RtlCompareMemory | |
ntdll.dll | 1394 | WerReportSQMEvent | |
ntdll.dll | 149 | LdrUnlockLoaderLock | |
ntdll.dll | 124 | LdrLockLoaderLock | |
ntdll.dll | 166 | NtAccessCheck | |
ntdll.dll | 1393 | VerSetConditionMask | |
ntdll.dll | 1413 | WinSqmIsOptedIn | |
ntdll.dll | 1971 | strcat_s | |
ntdll.dll | 823 | RtlExitUserThread | |
ntdll.dll | 822 | RtlExitUserProcess | |
ntdll.dll | 1863 | _aullrem | |
KERNELBASE.dll | 34 | BaseReleaseProcessDllPath | |
KERNELBASE.dll | 31 | BaseGetProcessExePath | |
KERNELBASE.dll | 30 | BaseGetProcessDllPath | |
KERNELBASE.dll | 424 | LoadStringByReference | |
KERNELBASE.dll | 385 | InternalLcidToName | |
KERNELBASE.dll | 451 | NlsIsUserDefaultLocale | |
KERNELBASE.dll | 333 | GetUserInfo | |
KERNELBASE.dll | 282 | GetPtrCalDataArray | |
KERNELBASE.dll | 281 | GetPtrCalData | |
KERNELBASE.dll | 299 | GetStringTableEntry | |
KERNELBASE.dll | 47 | CheckGroupPolicyEnabled | |
KERNELBASE.dll | 468 | OpenRegKey | |
KERNELBASE.dll | 190 | GetCPHashNode | |
KERNELBASE.dll | 389 | Internal_EnumSystemCodePages | |
KERNELBASE.dll | 393 | Internal_EnumUILanguages | |
KERNELBASE.dll | 388 | Internal_EnumLanguageGroupLocales | |
KERNELBASE.dll | 390 | Internal_EnumSystemLanguageGroups | |
KERNELBASE.dll | 387 | Internal_EnumDateFormats | |
KERNELBASE.dll | 392 | Internal_EnumTimeFormats | |
KERNELBASE.dll | 412 | KernelBaseGetGlobalData | |
KERNELBASE.dll | 394 | InvalidateTzSpecificCache | |
KERNELBASE.dll | 395 | IsDBCSLeadByte | |
KERNELBASE.dll | 73 | CreateFileMappingNumaW | |
KERNELBASE.dll | 58 | CompareStringA | |
KERNELBASE.dll | 423 | LoadStringBaseExW | |
KERNELBASE.dll | 32 | BaseInvalidateDllSearchPathCache | |
KERNELBASE.dll | 33 | BaseInvalidateProcessSearchPathCache | |
KERNELBASE.dll | 28 | BaseDllFreeResourceId | |
KERNELBASE.dll | 29 | BaseDllMapResourceIdW | |
KERNELBASE.dll | 332 | GetUserDefaultUILanguage | |
KERNELBASE.dll | 138 | EnumUILanguagesW | |
KERNELBASE.dll | 27 | AreFileApisANSI | |
KERNELBASE.dll | 125 | EnumCalendarInfoExW | |
KERNELBASE.dll | 126 | EnumCalendarInfoW | |
KERNELBASE.dll | 128 | EnumDateFormatsExW | |
KERNELBASE.dll | 129 | EnumDateFormatsW | |
KERNELBASE.dll | 130 | EnumLanguageGroupLocalesW | |
KERNELBASE.dll | 131 | EnumSystemCodePagesW | |
KERNELBASE.dll | 132 | EnumSystemLanguageGroupsW | |
KERNELBASE.dll | 134 | EnumSystemLocalesEx | |
KERNELBASE.dll | 135 | EnumSystemLocalesW | |
KERNELBASE.dll | 137 | EnumTimeFormatsW | |
KERNELBASE.dll | 246 | GetLocaleInfoA | |
KERNELBASE.dll | 300 | GetStringTypeA | |
KERNELBASE.dll | 306 | GetSystemDefaultUILanguage | |
KERNELBASE.dll | 396 | IsDBCSLeadByteEx | |
KERNELBASE.dll | 442 | MapViewOfFileExNuma | |
KERNELBASE.dll | 522 | SetFileApisToANSI | |
KERNELBASE.dll | 523 | SetFileApisToOEM | |
KERNELBASE.dll | 599 | VirtualAllocExNuma | |
KERNELBASE.dll | 124 | EnumCalendarInfoExEx | |
KERNELBASE.dll | 127 | EnumDateFormatsExEx | |
KERNELBASE.dll | 136 | EnumTimeFormatsEx | |
KERNELBASE.dll | 200 | GetCurrencyFormatEx | |
KERNELBASE.dll | 220 | GetEraNameCountedString | |
KERNELBASE.dll | 267 | GetNumberFormatEx | |
KERNELBASE.dll | 305 | GetSystemDefaultLocaleName | |
KERNELBASE.dll | 331 | GetUserDefaultLocaleName | |
KERNELBASE.dll | 413 | LCIDToLocaleName | |
KERNELBASE.dll | 264 | GetNamedLocaleHashNode | |
KERNELBASE.dll | 248 | GetLocaleInfoHelper | |
KERNELBASE.dll | 334 | GetUserInfoWord | |
KERNELBASE.dll | 193 | GetCalendar | |
KERNELBASE.dll | 569 | SpecialMBToWC | |
KERNELBASE.dll | 386 | Internal_EnumCalendarInfo | |
KERNELBASE.dll | 454 | NlsValidateLocale | |
KERNELBASE.dll | 35 | BaseReleaseProcessExePath | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 46 | TlsGetValue | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 36 | SetThreadPriority | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 35 | SetProcessShutdownParameters | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 33 | SetPriorityClass | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 32 | ResumeThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 31 | QueueUserAPC | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 29 | ProcessIdToSessionId | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 27 | OpenThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 24 | GetThreadPriorityBoost | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 23 | GetThreadPriority | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 21 | GetStartupInfoW | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 19 | GetProcessTimes | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 16 | GetPriorityClass | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 15 | GetExitCodeThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 13 | GetCurrentThreadId | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 12 | GetCurrentThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 17 | GetProcessId | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 18 | GetProcessIdOfThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 22 | GetThreadId | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 11 | GetCurrentProcessId | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 4 | CreateRemoteThreadEx | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 14 | GetExitCodeProcess | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 45 | TlsFree | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 44 | TlsAlloc | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 43 | TerminateThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 42 | TerminateProcess | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 41 | SwitchToThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 40 | SuspendThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 38 | SetThreadStackGuarantee | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 37 | SetThreadPriorityBoost | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 26 | OpenProcessToken | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 47 | TlsSetValue | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 34 | SetProcessAffinityUpdateMode | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 30 | QueryProcessAffinityUpdateMode | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 20 | GetProcessVersion | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 3 | CreateRemoteThread | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 25 | InitializeProcThreadAttributeList | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 48 | UpdateProcThreadAttribute | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 6 | DeleteProcThreadAttributeList | |
API-MS-Win-Core-ProcessThreads-L1-1-0.dll | 10 | GetCurrentProcess | |
API-MS-Win-Core-Heap-L1-1-0.dll | 4 | HeapCreate | |
API-MS-Win-Core-Heap-L1-1-0.dll | 10 | HeapSetInformation | |
API-MS-Win-Core-Heap-L1-1-0.dll | 8 | HeapQueryInformation | |
API-MS-Win-Core-Heap-L1-1-0.dll | 7 | HeapLock | |
API-MS-Win-Core-Heap-L1-1-0.dll | 5 | HeapDestroy | |
API-MS-Win-Core-Heap-L1-1-0.dll | GetProcessHeap | ||
API-MS-Win-Core-Heap-L1-1-0.dll | 1 | GetProcessHeaps | |
API-MS-Win-Core-Heap-L1-1-0.dll | 15 | HeapWalk | |
API-MS-Win-Core-Heap-L1-1-0.dll | 14 | HeapValidate | |
API-MS-Win-Core-Heap-L1-1-0.dll | 13 | HeapUnlock | |
API-MS-Win-Core-Heap-L1-1-0.dll | 3 | HeapCompact | |
API-MS-Win-Core-Heap-L1-1-0.dll | 12 | HeapSummary | |
API-MS-Win-Core-Memory-L1-1-0.dll | 3 | MapViewOfFileEx | |
API-MS-Win-Core-Memory-L1-1-0.dll | 5 | ReadProcessMemory | |
API-MS-Win-Core-Memory-L1-1-0.dll | 6 | UnmapViewOfFile | |
API-MS-Win-Core-Memory-L1-1-0.dll | 7 | VirtualAlloc | |
API-MS-Win-Core-Memory-L1-1-0.dll | 8 | VirtualAllocEx | |
API-MS-Win-Core-Memory-L1-1-0.dll | 9 | VirtualFree | |
API-MS-Win-Core-Memory-L1-1-0.dll | 10 | VirtualFreeEx | |
API-MS-Win-Core-Memory-L1-1-0.dll | 11 | VirtualProtect | |
API-MS-Win-Core-Memory-L1-1-0.dll | 15 | WriteProcessMemory | |
API-MS-Win-Core-Memory-L1-1-0.dll | 14 | VirtualQueryEx | |
API-MS-Win-Core-Memory-L1-1-0.dll | 13 | VirtualQuery | |
API-MS-Win-Core-Memory-L1-1-0.dll | 12 | VirtualProtectEx | |
API-MS-Win-Core-Memory-L1-1-0.dll | 1 | FlushViewOfFile | |
API-MS-Win-Core-Memory-L1-1-0.dll | CreateFileMappingW | ||
API-MS-Win-Core-Memory-L1-1-0.dll | 4 | OpenFileMappingW | |
API-MS-Win-Core-Memory-L1-1-0.dll | 2 | MapViewOfFile | |
API-MS-Win-Core-Handle-L1-1-0.dll | 1 | DuplicateHandle | |
API-MS-Win-Core-Handle-L1-1-0.dll | 2 | GetHandleInformation | |
API-MS-Win-Core-Handle-L1-1-0.dll | 3 | SetHandleInformation | |
API-MS-Win-Core-Handle-L1-1-0.dll | CloseHandle | ||
API-MS-Win-Core-Synch-L1-1-0.dll | 23 | OpenProcess | |
API-MS-Win-Core-Synch-L1-1-0.dll | 24 | OpenSemaphoreW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 25 | OpenWaitableTimerW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 26 | ReleaseMutex | |
API-MS-Win-Core-Synch-L1-1-0.dll | 29 | ReleaseSemaphore | |
API-MS-Win-Core-Synch-L1-1-0.dll | 22 | OpenMutexW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 32 | SetEvent | |
API-MS-Win-Core-Synch-L1-1-0.dll | 33 | SetWaitableTimer | |
API-MS-Win-Core-Synch-L1-1-0.dll | 35 | SleepEx | |
API-MS-Win-Core-Synch-L1-1-0.dll | 39 | WaitForMultipleObjectsEx | |
API-MS-Win-Core-Synch-L1-1-0.dll | 41 | WaitForSingleObjectEx | |
API-MS-Win-Core-Synch-L1-1-0.dll | 21 | OpenEventW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 20 | OpenEventA | |
API-MS-Win-Core-Synch-L1-1-0.dll | 17 | InitializeCriticalSectionEx | |
API-MS-Win-Core-Synch-L1-1-0.dll | 16 | InitializeCriticalSectionAndSpinCount | |
API-MS-Win-Core-Synch-L1-1-0.dll | 12 | CreateWaitableTimerExW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 11 | CreateSemaphoreExW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 3 | CreateEventA | |
API-MS-Win-Core-Synch-L1-1-0.dll | 6 | CreateEventW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 2 | CancelWaitableTimer | |
API-MS-Win-Core-Synch-L1-1-0.dll | 4 | CreateEventExA | |
API-MS-Win-Core-Synch-L1-1-0.dll | 5 | CreateEventExW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 7 | CreateMutexA | |
API-MS-Win-Core-Synch-L1-1-0.dll | 8 | CreateMutexExA | |
API-MS-Win-Core-Synch-L1-1-0.dll | 9 | CreateMutexExW | |
API-MS-Win-Core-Synch-L1-1-0.dll | 30 | ResetEvent | |
API-MS-Win-Core-Synch-L1-1-0.dll | 10 | CreateMutexW | |
API-MS-Win-Core-File-L1-1-0.dll | 44 | GetFullPathNameW | |
API-MS-Win-Core-File-L1-1-0.dll | 43 | GetFullPathNameA | |
API-MS-Win-Core-File-L1-1-0.dll | 69 | SetFileTime | |
API-MS-Win-Core-File-L1-1-0.dll | 57 | QueryDosDeviceW | |
API-MS-Win-Core-File-L1-1-0.dll | 4 | CreateFileW | |
API-MS-Win-Core-File-L1-1-0.dll | 55 | LockFile | |
API-MS-Win-Core-File-L1-1-0.dll | 37 | GetFileSize | |
API-MS-Win-Core-File-L1-1-0.dll | 63 | SetEndOfFile | |
API-MS-Win-Core-File-L1-1-0.dll | 73 | WriteFile | |
API-MS-Win-Core-File-L1-1-0.dll | 67 | SetFilePointer | |
API-MS-Win-Core-File-L1-1-0.dll | 58 | ReadFile | |
API-MS-Win-Core-File-L1-1-0.dll | 74 | WriteFileEx | |
API-MS-Win-Core-File-L1-1-0.dll | 75 | WriteFileGather | |
API-MS-Win-Core-File-L1-1-0.dll | 41 | GetFinalPathNameByHandleA | |
API-MS-Win-Core-File-L1-1-0.dll | 42 | GetFinalPathNameByHandleW | |
API-MS-Win-Core-File-L1-1-0.dll | 62 | RemoveDirectoryW | |
API-MS-Win-Core-File-L1-1-0.dll | 29 | GetDiskFreeSpaceW | |
API-MS-Win-Core-File-L1-1-0.dll | 2 | CreateDirectoryW | |
API-MS-Win-Core-File-L1-1-0.dll | 5 | DefineDosDeviceW | |
API-MS-Win-Core-File-L1-1-0.dll | 16 | FindFirstFileExA | |
API-MS-Win-Core-File-L1-1-0.dll | 17 | FindFirstFileExW | |
API-MS-Win-Core-File-L1-1-0.dll | 11 | FindClose | |
API-MS-Win-Core-File-L1-1-0.dll | 40 | GetFileType | |
API-MS-Win-Core-File-L1-1-0.dll | 25 | FlushFileBuffers | |
API-MS-Win-Core-File-L1-1-0.dll | 65 | SetFileAttributesW | |
API-MS-Win-Core-File-L1-1-0.dll | 34 | GetFileAttributesExW | |
API-MS-Win-Core-File-L1-1-0.dll | 7 | DeleteFileW | |
API-MS-Win-Core-File-L1-1-0.dll | 39 | GetFileTime | |
API-MS-Win-Core-File-L1-1-0.dll | 6 | DeleteFileA | |
API-MS-Win-Core-File-L1-1-0.dll | 32 | GetFileAttributesA | |
API-MS-Win-Core-File-L1-1-0.dll | 22 | FindNextFileW | |
API-MS-Win-Core-File-L1-1-0.dll | 18 | FindFirstFileW | |
API-MS-Win-Core-File-L1-1-0.dll | 45 | GetLogicalDriveStringsW | |
API-MS-Win-Core-File-L1-1-0.dll | 50 | GetTempFileNameW | |
API-MS-Win-Core-File-L1-1-0.dll | 52 | GetVolumeInformationW | |
API-MS-Win-Core-File-L1-1-0.dll | CompareFileTime | ||
API-MS-Win-Core-File-L1-1-0.dll | 1 | CreateDirectoryA | |
API-MS-Win-Core-File-L1-1-0.dll | 9 | FileTimeToLocalFileTime | |
API-MS-Win-Core-File-L1-1-0.dll | 10 | FileTimeToSystemTime | |
API-MS-Win-Core-File-L1-1-0.dll | 12 | FindCloseChangeNotification | |
API-MS-Win-Core-File-L1-1-0.dll | 15 | FindFirstFileA | |
API-MS-Win-Core-File-L1-1-0.dll | 13 | FindFirstChangeNotificationA | |
API-MS-Win-Core-File-L1-1-0.dll | 14 | FindFirstChangeNotificationW | |
API-MS-Win-Core-File-L1-1-0.dll | 20 | FindNextChangeNotification | |
API-MS-Win-Core-File-L1-1-0.dll | 21 | FindNextFileA | |
API-MS-Win-Core-File-L1-1-0.dll | 26 | GetDiskFreeSpaceA | |
API-MS-Win-Core-File-L1-1-0.dll | 27 | GetDiskFreeSpaceExA | |
API-MS-Win-Core-File-L1-1-0.dll | 28 | GetDiskFreeSpaceExW | |
API-MS-Win-Core-File-L1-1-0.dll | 72 | UnlockFileEx | |
API-MS-Win-Core-File-L1-1-0.dll | 30 | GetDriveTypeA | |
API-MS-Win-Core-File-L1-1-0.dll | 31 | GetDriveTypeW | |
API-MS-Win-Core-File-L1-1-0.dll | 33 | GetFileAttributesExA | |
API-MS-Win-Core-File-L1-1-0.dll | 35 | GetFileAttributesW | |
API-MS-Win-Core-File-L1-1-0.dll | 36 | GetFileInformationByHandle | |
API-MS-Win-Core-File-L1-1-0.dll | 38 | GetFileSizeEx | |
API-MS-Win-Core-File-L1-1-0.dll | 51 | GetVolumeInformationByHandleW | |
API-MS-Win-Core-File-L1-1-0.dll | 54 | LocalFileTimeToFileTime | |
API-MS-Win-Core-File-L1-1-0.dll | 56 | LockFileEx | |
API-MS-Win-Core-File-L1-1-0.dll | 60 | ReadFileScatter | |
API-MS-Win-Core-File-L1-1-0.dll | 59 | ReadFileEx | |
API-MS-Win-Core-File-L1-1-0.dll | 61 | RemoveDirectoryA | |
API-MS-Win-Core-File-L1-1-0.dll | 64 | SetFileAttributesA | |
API-MS-Win-Core-File-L1-1-0.dll | 66 | SetFileInformationByHandle | |
API-MS-Win-Core-File-L1-1-0.dll | 68 | SetFilePointerEx | |
API-MS-Win-Core-File-L1-1-0.dll | 70 | SetFileValidData | |
API-MS-Win-Core-File-L1-1-0.dll | 71 | UnlockFile | |
API-MS-Win-Core-IO-L1-1-0.dll | 6 | PostQueuedCompletionStatus | |
API-MS-Win-Core-IO-L1-1-0.dll | 5 | GetQueuedCompletionStatusEx | |
API-MS-Win-Core-IO-L1-1-0.dll | 4 | GetQueuedCompletionStatus | |
API-MS-Win-Core-IO-L1-1-0.dll | 1 | CreateIoCompletionPort | |
API-MS-Win-Core-IO-L1-1-0.dll | CancelIoEx | ||
API-MS-Win-Core-IO-L1-1-0.dll | 3 | GetOverlappedResult | |
API-MS-Win-Core-IO-L1-1-0.dll | 2 | DeviceIoControl | |
API-MS-Win-Core-ThreadPool-L1-1-0.dll | 2 | ChangeTimerQueueTimer | |
API-MS-Win-Core-ThreadPool-L1-1-0.dll | 16 | CreateTimerQueue | |
API-MS-Win-Core-ThreadPool-L1-1-0.dll | 37 | UnregisterWaitEx | |
API-MS-Win-Core-ThreadPool-L1-1-0.dll | 19 | DeleteTimerQueueTimer | |
API-MS-Win-Core-ThreadPool-L1-1-0.dll | 18 | DeleteTimerQueueEx | |
API-MS-Win-Core-ThreadPool-L1-1-0.dll | 17 | CreateTimerQueueTimer | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 9 | GetModuleHandleA | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 12 | GetModuleHandleW | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 10 | GetModuleHandleExA | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 11 | GetModuleHandleExW | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 16 | LoadResource | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 19 | LockResource | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 22 | SizeofResource | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 13 | GetProcAddress | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 7 | GetModuleFileNameA | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 5 | FreeLibraryAndExitThread | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 3 | FindStringOrdinal | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 1 | DisableThreadLibraryCalls | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 14 | LoadLibraryExA | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 8 | GetModuleFileNameW | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 2 | FindResourceExW | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 4 | FreeLibrary | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 15 | LoadLibraryExW | |
API-MS-Win-Core-LibraryLoader-L1-1-0.dll | 6 | FreeResource | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 7 | PeekNamedPipe | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 3 | DisconnectNamedPipe | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 2 | CreatePipe | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | ConnectNamedPipe | ||
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 4 | GetNamedPipeAttribute | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 5 | GetNamedPipeClientComputerNameW | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 10 | WaitNamedPipeW | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 8 | SetNamedPipeHandleState | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 1 | CreateNamedPipeW | |
API-MS-Win-Core-NamedPipe-L1-1-0.dll | 9 | TransactNamedPipe | |
API-MS-Win-Core-Misc-L1-1-0.dll | 8 | IsWow64Process | |
API-MS-Win-Core-Misc-L1-1-0.dll | 9 | LCMapStringA | |
API-MS-Win-Core-Misc-L1-1-0.dll | 12 | LocalLock | |
API-MS-Win-Core-Misc-L1-1-0.dll | 13 | LocalReAlloc | |
API-MS-Win-Core-Misc-L1-1-0.dll | 14 | LocalUnlock | |
API-MS-Win-Core-Misc-L1-1-0.dll | 5 | GlobalAlloc | |
API-MS-Win-Core-Misc-L1-1-0.dll | 4 | FormatMessageW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 3 | FormatMessageA | |
API-MS-Win-Core-Misc-L1-1-0.dll | 15 | NeedCurrentDirectoryForExePathA | |
API-MS-Win-Core-Misc-L1-1-0.dll | EnumSystemLocalesA | ||
API-MS-Win-Core-Misc-L1-1-0.dll | 17 | PulseEvent | |
API-MS-Win-Core-Misc-L1-1-0.dll | 19 | Sleep | |
API-MS-Win-Core-Misc-L1-1-0.dll | 20 | Wow64DisableWow64FsRedirection | |
API-MS-Win-Core-Misc-L1-1-0.dll | 21 | Wow64RevertWow64FsRedirection | |
API-MS-Win-Core-Misc-L1-1-0.dll | 24 | lstrcmpW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 27 | lstrcmpiW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 29 | lstrcpynA | |
API-MS-Win-Core-Misc-L1-1-0.dll | 30 | lstrcpynW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 32 | lstrlenA | |
API-MS-Win-Core-Misc-L1-1-0.dll | 1 | FatalAppExitA | |
API-MS-Win-Core-Misc-L1-1-0.dll | 16 | NeedCurrentDirectoryForExePathW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 2 | FatalAppExitW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 10 | LocalAlloc | |
API-MS-Win-Core-Misc-L1-1-0.dll | 6 | GlobalFree | |
API-MS-Win-Core-Misc-L1-1-0.dll | 33 | lstrlenW | |
API-MS-Win-Core-Misc-L1-1-0.dll | 11 | LocalFree | |
API-MS-Win-Core-Misc-L1-1-0.dll | 7 | IsProcessInJob | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 3 | GetLocalTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 10 | GetSystemTimeAdjustment | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 11 | GetSystemTimeAsFileTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 15 | GetTickCount64 | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 16 | GetTimeZoneInformation | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 17 | GetTimeZoneInformationForYear | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 18 | GetVersion | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 19 | GetVersionExA | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 20 | GetVersionExW | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 22 | GetWindowsDirectoryW | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 24 | SetLocalTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 26 | SystemTimeToTzSpecificLocalTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 27 | TzSpecificLocalTimeToSystemTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 2 | GetDynamicTimeZoneInformation | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 4 | GetLogicalProcessorInformation | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 8 | GetSystemInfo | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 5 | GetLogicalProcessorInformationEx | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 21 | GetWindowsDirectoryA | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 23 | GlobalMemoryStatusEx | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 14 | GetTickCount | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 9 | GetSystemTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 25 | SystemTimeToFileTime | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | 1 | GetComputerNameExW | |
API-MS-Win-Core-SysInfo-L1-1-0.dll | GetComputerNameExA | ||
API-MS-Win-Core-Localization-L1-1-0.dll | 45 | VerLanguageNameA | |
API-MS-Win-Core-Localization-L1-1-0.dll | 2 | FindNLSStringEx | |
API-MS-Win-Core-Localization-L1-1-0.dll | 44 | SetThreadLocale | |
API-MS-Win-Core-Localization-L1-1-0.dll | 40 | NlsWriteEtwEvent | |
API-MS-Win-Core-Localization-L1-1-0.dll | 36 | NlsEventDataDescCreate | |
API-MS-Win-Core-Localization-L1-1-0.dll | ConvertDefaultLocale | ||
API-MS-Win-Core-Localization-L1-1-0.dll | 46 | VerLanguageNameW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 43 | SetLocaleInfoW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 42 | SetCalendarInfoW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 33 | LCMapStringW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 30 | IsValidLocale | |
API-MS-Win-Core-Localization-L1-1-0.dll | 29 | IsValidLanguageGroup | |
API-MS-Win-Core-Localization-L1-1-0.dll | 28 | IsValidCodePage | |
API-MS-Win-Core-Localization-L1-1-0.dll | 27 | IsNLSDefinedString | |
API-MS-Win-Core-Localization-L1-1-0.dll | 24 | GetUserDefaultLCID | |
API-MS-Win-Core-Localization-L1-1-0.dll | 25 | GetUserDefaultLangID | |
API-MS-Win-Core-Localization-L1-1-0.dll | 20 | GetThreadLocale | |
API-MS-Win-Core-Localization-L1-1-0.dll | 17 | GetSystemDefaultLCID | |
API-MS-Win-Core-Localization-L1-1-0.dll | 18 | GetSystemDefaultLangID | |
API-MS-Win-Core-Localization-L1-1-0.dll | 16 | GetProcessPreferredUILanguages | |
API-MS-Win-Core-Localization-L1-1-0.dll | 15 | GetOEMCP | |
API-MS-Win-Core-Localization-L1-1-0.dll | 12 | GetLocaleInfoW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 6 | GetCPInfoExW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 5 | GetCPInfo | |
API-MS-Win-Core-Localization-L1-1-0.dll | 3 | GetACP | |
API-MS-Win-Core-Localization-L1-1-0.dll | 10 | GetFileMUIPath | |
API-MS-Win-Core-Localization-L1-1-0.dll | 1 | FindNLSString | |
API-MS-Win-Core-Localization-L1-1-0.dll | 39 | NlsUpdateSystemLocale | |
API-MS-Win-Core-Localization-L1-1-0.dll | 38 | NlsUpdateLocale | |
API-MS-Win-Core-Localization-L1-1-0.dll | 37 | NlsGetCacheUpdateCount | |
API-MS-Win-Core-Localization-L1-1-0.dll | 35 | NlsCheckPolicy | |
API-MS-Win-Core-Localization-L1-1-0.dll | 8 | GetCalendarInfoW | |
API-MS-Win-Core-Localization-L1-1-0.dll | 7 | GetCalendarInfoEx | |
API-MS-Win-Core-Localization-L1-1-0.dll | 11 | GetLocaleInfoEx | |
API-MS-Win-Core-Localization-L1-1-0.dll | 19 | GetSystemPreferredUILanguages | |
API-MS-Win-Core-Localization-L1-1-0.dll | 21 | GetThreadPreferredUILanguages | |
API-MS-Win-Core-Localization-L1-1-0.dll | 22 | GetThreadUILanguage | |
API-MS-Win-Core-Localization-L1-1-0.dll | 23 | GetUILanguageInfo | |
API-MS-Win-Core-Localization-L1-1-0.dll | 26 | GetUserPreferredUILanguages | |
API-MS-Win-Core-Localization-L1-1-0.dll | 31 | IsValidLocaleName | |
API-MS-Win-Core-Localization-L1-1-0.dll | 32 | LCMapStringEx | |
API-MS-Win-Core-Localization-L1-1-0.dll | 34 | LocaleNameToLCID | |
API-MS-Win-Core-Localization-L1-1-0.dll | 41 | ResolveLocaleName | |
API-MS-Win-Core-Localization-L1-1-0.dll | 9 | GetFileMUIInfo | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 8 | GetEnvironmentStrings | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 12 | GetEnvironmentVariableW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 14 | SearchPathW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 21 | SetStdHandleEx | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | ExpandEnvironmentStringsA | ||
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 1 | ExpandEnvironmentStringsW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 2 | FreeEnvironmentStringsA | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 3 | FreeEnvironmentStringsW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 4 | GetCommandLineA | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 5 | GetCommandLineW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 6 | GetCurrentDirectoryA | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 7 | GetCurrentDirectoryW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 10 | GetEnvironmentStringsW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 17 | SetEnvironmentStringsW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 11 | GetEnvironmentVariableA | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 13 | GetStdHandle | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 15 | SetCurrentDirectoryA | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 16 | SetCurrentDirectoryW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 18 | SetEnvironmentVariableA | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 19 | SetEnvironmentVariableW | |
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll | 20 | SetStdHandle | |
API-MS-Win-Core-String-L1-1-0.dll | 5 | GetStringTypeW | |
API-MS-Win-Core-String-L1-1-0.dll | 4 | GetStringTypeExW | |
API-MS-Win-Core-String-L1-1-0.dll | 3 | FoldStringW | |
API-MS-Win-Core-String-L1-1-0.dll | 2 | CompareStringW | |
API-MS-Win-Core-String-L1-1-0.dll | 7 | WideCharToMultiByte | |
API-MS-Win-Core-String-L1-1-0.dll | 1 | CompareStringOrdinal | |
API-MS-Win-Core-String-L1-1-0.dll | CompareStringEx | ||
API-MS-Win-Core-String-L1-1-0.dll | 6 | MultiByteToWideChar | |
API-MS-Win-Core-Debug-L1-1-0.dll | DebugBreak | ||
API-MS-Win-Core-Debug-L1-1-0.dll | 2 | OutputDebugStringA | |
API-MS-Win-Core-Debug-L1-1-0.dll | 3 | OutputDebugStringW | |
API-MS-Win-Core-Debug-L1-1-0.dll | 1 | IsDebuggerPresent | |
API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 1 | GetLastError | |
API-MS-Win-Core-ErrorHandling-L1-1-0.dll | GetErrorMode | ||
API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 2 | RaiseException | |
API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 3 | SetErrorMode | |
API-MS-Win-Core-ErrorHandling-L1-1-0.dll | 4 | SetLastError | |
API-MS-Win-Core-Fibers-L1-1-0.dll | FlsAlloc | ||
API-MS-Win-Core-Fibers-L1-1-0.dll | 1 | FlsFree | |
API-MS-Win-Core-Fibers-L1-1-0.dll | 2 | FlsGetValue | |
API-MS-Win-Core-Fibers-L1-1-0.dll | 3 | FlsSetValue | |
API-MS-Win-Core-Util-L1-1-0.dll | Beep | ||
API-MS-Win-Core-Profile-L1-1-0.dll | 1 | QueryPerformanceFrequency | |
API-MS-Win-Core-Profile-L1-1-0.dll | QueryPerformanceCounter | ||
API-MS-Win-Security-Base-L1-1-0.dll | 20 | AllocateAndInitializeSid | |
API-MS-Win-Security-Base-L1-1-0.dll | 40 | FreeSid | |
API-MS-Win-Security-Base-L1-1-0.dll | 34 | DuplicateToken | |
API-MS-Win-Security-Base-L1-1-0.dll | AccessCheck |
StringTable 040904B0
CompanyName | Microsoft Corporation |
FileDescription | Windows NT BASE API Client DLL |
FileVersion | 6.1.7601.24384 (win7sp1_ldr_escrow.190220-1800) |
InternalName | kernel32 |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | kernel32 |
ProductName | Microsoft® Windows® Operating System |
ProductVersion | 6.1.7601.24384 |
VS_FIXEDFILEINFO
FileVersion | 6.1.7601.24384 |
ProductVersion | 6.1.7601.24384 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 2 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK