filenamekernel32.dll
size983552 (0xf0200)
md5888190e31455fad793312f8d087146eb
typePE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
10393
9340353
9240351
9440351
1540355
954035221
9640354
9040351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x411096b4
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.10
SizeOfCode0x81e00
SizeOfInitializedData0x6fe00
SizeOfUninitializedData0
AddressOfEntryPoint0xb436
BaseOfCode0x1000
BaseOfData0x7f000
ImageBase0x7c800000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0xf4000
SizeOfHeaders0x400
CheckSum0xff848
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x81c210x81e00R-X CODE
.data0x830000x41800x2400RW- IDATA
.rsrc0x880000x65ee80x66000R-- IDATA
.reloc0xee0000x5bd00x5c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x262c0x6c7b
IMPORT0x802dc0x28
RESOURCE0x880000x65ee8
EXCEPTION00
SECURITY00
BASERELOC0xee0000x5bd0
DEBUG0x82bc00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x4e0800x48
Bound_IAT0x2800x1c
IAT0x10000x620
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#112520
STRING#29540
STRING#310160
STRING#48280
STRING#58900
STRING#66220
STRING#77140
STRING#86660
STRING#98840
STRING#108120
STRING#117660
STRING#128280
STRING#1311060
STRING#149920
STRING#159640
STRING#1610560
STRING#174700
STRING#191420
STRING#2012980
STRING#219820
STRING#2210660
STRING#231600
STRING#28920
STRING#321060
STRING#45800
STRING#461040
STRING#47860
STRING#49780
STRING#545580
STRING#554580
STRING#592000
STRING#601800
STRING#659640
STRING#666860
STRING#676120
STRING#683060
STRING#693720
STRING#701680
STRING#71620
STRING#7210260
STRING#794980
STRING#86820
STRING#1294480
STRING#1303500
STRING#131860
STRING#1321180
STRING#133860
STRING#1934460
STRING#194820
STRING#2574220
STRING#3214740
STRING#3852520
STRING#4492440
STRING#5131760
STRING#5771840
STRING#6265780
STRING#6271720
STRING#630840
STRING#6311280
STRING#6411560
STRING#7052100
STRING#7691840
STRING#8332160
STRING#8971260
STRING#946640
STRING#9611340
STRING#10251220
STRING#1089980
STRING#1153860
STRING#1217900
STRING#12272000
STRING#12513300
STRING#12572580
STRING#1258700
STRING#12671380
STRING#12684660
STRING#12691920
STRING#12772100
STRING#1281980
STRING#13031660
STRING#13051480
STRING#13061160
STRING#1307940
STRING#13081460
STRING#13091800
STRING#13151980
STRING#1328680
STRING#1367900
STRING#1551600
STRING#1787900
STRING#17885960
STRING#24131240
STRING#31393340
STRING#31402380
STRING#31846760
STRING#3246780
STRING#32472080
STRING#33091100
STRING#34341060
STRING#35633420
STRING#35642680
STRING#4063960
MESSAGETABLE#13736640
VERSION#19280
idlangstring
01033Language Neutral$$$$$$Default
11033$$Western Europe and United States
21033$$Central Europe$$Antigua and Barbuda$Antigua and Barbuda
31033$$Baltic$$Afghanistan$Islamic State of Afghanistan
41033$$Greek$$Algeria$Democratic and Popular Republic of Algeria
51033$$Cyrillic$$Azerbaijan$Azerbaijani Republic
61033$$Turkic$$Albania$Republic of Albania
71033$$Japanese$$Armenia$Republic of Armenia
81033$$Korean$$Andorra$Principality of Andorra
91033$$Traditional Chinese$$Angola$Republic of Angola
101033$$Simplified Chinese$$American Samoa
111033$$Thai$$Argentina$Argentine Republic
121033$$Hebrew$$Australia$Commonwealth of Australia
131033$$Arabic
141033$$Vietnamese$$Austria$Republic of Austria
151033$$Indic
161033$$Georgian
171033$$Armenian$$Bahrain$State of Bahrain
181033$$$$Barbados$Barbados
191033$$$$Botswana$Republic of Botswana
201033$$$$Bermuda
211033$$$$Belgium$Kingdom of Belgium
221033$$$$Bahamas, The$Commonwealth of The Bahamas
231033$$$$Bangladesh$People’s Republic of Bangladesh
241033$$$$Belize$Belize
251033$$$$Bosnia and Herzegovina$Republic of Bosnia and Herzegovina
261033$$$$Bolivia$Republic of Bolivia
271033$$$$Myanmar$Union of Myanmar
281033$$$$Benin$Republic of Benin
291033$$$$Belarus$Republic of Belarus
301033$$$$Solomon Islands$Solomon Islands
321033$$$$Brazil$Federative Republic of Brazil
341033$$$$Bhutan$Kingdom of Bhutan
351033$$$$Bulgaria$Republic of Bulgaria
371033$$$37 (IBM EBCDIC - U.S./Canada)$Brunei$Negara Brunei Darussalam (Nation of Brunei, Abode of Peace)
381033$$$$Burundi$Republic of Burundi
391033$$$$Canada$Canada
401033$$$$Cambodia
411033$$$$Chad$Republic of Chad
421033$$$$Sri Lanka$Democratic Socialist Republic of Sri Lanka
431033$$$$Congo$Republic of the Congo
441033$$$$Congo (DRC)$Democratic Republic of the Congo (DRC)
451033$$$$China$People’s Republic of China
461033$$$$Chile$Republic of Chile
491033$$$$Cameroon$Republic of Cameroon
501033$$$$Comoros$Federal Islamic Republic of the Comoros
511033$$$$Colombia$Republic of Colombia
541033$$$$Costa Rica$Republic of Costa Rica
551033$$$$Central African Republic$Central African Republic
561033$$$$Cuba$Republic of Cuba
571033$$$$Cape Verde$Republic of Cape Verde
591033$$$$Cyprus$Republic of Cyprus
611033$$$$Denmark$Kingdom of Denmark
621033$$$$Djibouti$Republic of Djibouti
631033$$$$Dominica$Commonwealth of Dominica
651033$$$$Dominican Republic$Dominican Republic
661033$$$$Ecuador$Republic of Ecuador
671033$$$$Egypt$Arab Republic of Egypt
681033$$$$Ireland$Ireland
691033$$$$Equatorial Guinea$Republic of Equatorial Guinea
701033$$$$Estonia$Republic of Estonia
711033$$$$Eritrea$State of Eritrea
721033$$$$El Salvador$Republic of El Salvador
731033$$$$Ethiopia$Federal Democratic Republic of Ethiopia
751033$$$$Czech Republic$Czech Republic
771033$$$$Finland$Republic of Finland
781033$$$$Fiji Islands$Republic of Fiji Islands
801033$$$$Micronesia$Federated States of Micronesia
811033$$$$Faroe Islands
841033$$$$France$French Republic
861033$$$$Gambia, The$Republic of The Gambia
871033$$$$Gabon$Gabonese Republic
881033$$$$Georgia$Republic of Georgia
891033$$$$Ghana$Republic of Ghana
901033$$$$Gibraltar
911033$$$$Grenada$Grenada
931033$$$$Greenland
941033$$$$Germany$Federal Republic of Germany
981033$$$$Greece$Hellenic Republic
991033$$$$Guatemala$Republic of Guatemala
1001033$$$$Guinea$Republic of Guinea
1011033$$$$Guyana$Cooperative Republic of Guyana
1031033$$$$Haiti$Republic of Haiti
1041033$$$$Hong Kong S.A.R.
1061033$$$$Honduras$Republic of Honduras
1081033$$$$Croatia$Republic of Croatia
1091033$$$$Hungary$Republic of Hungary
1101033$$$$Iceland$Republic of Iceland
1111033$$$$Indonesia$Republic of Indonesia
1131033$$$$India$Republic of India
1141033$$$$British Indian Ocean Territory
1161033$$$$Iran$Islamic Republic of Iran
1171033$$$$Israel$State of Israel
1181033$$$$Italy$Italian Republic
1191033$$$$Côte d’Ivoire$Republic of Côte d’Ivoire
1211033$$$$Iraq$Republic of Iraq
1221033$$$$Japan$Japan
1241033$$$$Jamaica$Jamaica
1251033$$$$Jan Mayen
1261033$$$$Jordan$Hashemite Kingdom of Jordan
1271033$$$$Johnston Atoll
1291033$$$$Kenya$Republic of Kenya
1301033$$$$Kyrgyzstan$Kyrgyz Republic
1311033$$$$North Korea$Democratic People’s Republic of Korea
1331033$$$$Kiribati$Republic of Kiribati
1341033$$$$Korea$Republic of Korea
1361033$$$$Kuwait$State of Kuwait
1371033$$$$Kazakhstan$Republic of Kazakhstan
1381033$$$$Laos$Lao People’s Democratic Republic
1391033$$$$Lebanon$Lebanese Republic
1401033$$$$Latvia$Republic of Latvia
1411033$$$$Lithuania$Republic of Lithuania
1421033$$$$Liberia$Republic of Liberia
1431033$$$$Slovakia$Slovak Republic
1451033$$$$Liechtenstein$Principality of Liechtenstein
1461033$$$$Lesotho$Kingdom of Lesotho
1471033$$$$Luxembourg$Grand Duchy of Luxembourg
1481033$$$$Libya$Socialist People’s Libyan Arab Jamahiriya
1491033$$$$Madagascar$Republic of Madagascar
1511033$$$$Macau S.A.R.
1521033$$$$Moldova$Republic of Moldova
1541033$$$$Mongolia$Mongolia
1561033$$$$Malawi$Republic of Malawi
1571033$$$$Mali$Republic of Mali
1581033$$$$Monaco$Principality of Monaco
1591033$$$$Morocco$Kingdom of Morocco
1601033$$$$Mauritius$Republic of Mauritius
1621033$$$$Mauritania$Islamic Republic of Mauritania
1631033$$$$Malta$Republic of Malta
1641033$$$$Oman$Sultanate of Oman
1651033$$$$Maldives$Republic of Maldives
1661033$$$$Mexico$United Mexican States
1671033$$$$Malaysia$Federation of Malaysia
1681033$$$$Mozambique$Republic of Mozambique
1731033$$$$Niger$Republic of Niger
1741033$$$$Vanuatu$Republic of Vanuatu
1751033$$$$Nigeria$Federal Republic of Nigeria
1761033$$$$Netherlands, The$Kingdom of the Netherlands
1771033$$$$Norway$Kingdom of Norway
1781033$$$$Nepal$Kingdom of Nepal
1801033$$$$Nauru$Republic of Nauru
1811033$$$$Suriname$Republic of Suriname
1821033$$$$Nicaragua$Republic of Nicaragua
1831033$$$$New Zealand$New Zealand
1841033$$$$Palestinian Authority$Palestinian Authority
1851033$$$$Paraguay$Republic of Paraguay
1871033$$$$Peru$Republic of Peru
1901033$$$$Pakistan$Islamic Republic of Pakistan
1911033$$$$Poland$Republic of Poland
1921033$$$$Panama$Republic of Panama
1931033$$$$Portugal$Portuguese Republic
1941033$$$$Papua New Guinea$Independent State of Papua New Guinea
1951033$$$$Palau$Republic of Palau
1961033$$$$Guinea-Bissau$Republic of Guinea-Bissau
1971033$$$$Qatar$State of Qatar
1981033$$$$Reunion
1991033$$$$Marshall Islands$Republic of the Marshall Islands
2001033$$$$Romania$Romania
2011033$$$$Philippines$Republic of the Philippines
2021033$$$$Puerto Rico
2031033$$$$Russia$Russian Federation
2041033$$$$Rwanda$Rwandese Republic
2051033$$$$Saudi Arabia$Kingdom of Saudi Arabia
2061033$$$$St. Pierre and Miquelon
2071033$$$$St. Kitts and Nevis$Federation of Saint Kitts and Nevis
2081033$$$$Seychelles$Republic of Seychelles
2091033$$$$South Africa$Republic of South Africa
2101033$$$$Senegal$Republic of Senegal
2121033$$$$Slovenia$Republic of Slovenia
2131033$$$$Sierra Leone$Republic of Sierra Leone
2141033$$$$San Marino$Republic of San Marino
2151033$$$$Singapore$Republic of Singapore
2161033$$$$Somalia$Somali Democratic Republic
2171033$$$$Spain$Kingdom of Spain
2181033$$$$St. Lucia$Saint Lucia
2191033$$$$Sudan$Republic of the Sudan
2201033$$$$Svalbard
2211033$$$$Sweden$Kingdom of Sweden
2221033$$$$Syria$Syrian Arab Republic
2231033$$$$Switzerland$Swiss Confederation
2241033$$$$United Arab Emirates$United Arab Emirates
2251033$$$$Trinidad and Tobago$Republic of Trinidad and Tobago
2271033$$$$Thailand$Kingdom of Thailand
2281033$$$$Tajikistan$Republic of Tajikistan
2311033$$$$Tonga$Kingdom of Tonga
2321033$$$$Togo$Togolese Republic
2331033$$$$São Tomé and Príncipe$Democratic Republic of São Tomé and Príncipe
2341033$$$$Tunisia$Republic of Tunisia
2351033$$$$Turkey$Republic of Turkey
2361033$$$$Tuvalu$Tuvalu
2371033$$$$Taiwan$Taiwan
2381033$$$$Turkmenistan$Republic of Turkmenistan
2391033$$$$Tanzania$United Republic of Tanzania
2401033$$$$Uganda$Republic of Uganda
2411033$$$$Ukraine$Ukraine
2421033$$$$United Kingdom$United Kingdom of Great Britain and Northern Ireland
2441033$$$$United States$United States of America
2451033$$$$Burkina Faso$Burkina Faso
2461033$$$$Uruguay$Oriental Republic of Uruguay
2471033$$$$Uzbekistan$Republic of Uzbekistan
2481033$$$$St. Vincent and the Grenadines$Saint Vincent and the Grenadines
2491033$$$$Venezuela$Bolivarian Republic of Venezuela
2511033$$$$Vietnam$Socialist Republic of Vietnam
2521033$$$$Virgin Islands
2531033$$$$Vatican City$State of the Vatican City
2541033$$$$Namibia$Republic of Namibia
2581033$$$$Wake Island
2591033$$$$Samoa$Independent State of Samoa
2601033$$$$Swaziland$Kingdom of Swaziland
2611033$$$$Yemen$Republic of Yemen
2631033$$$$Zambia$Republic of Zambia
2641033$$$$Zimbabwe$Republic of Zimbabwe
2691033$$$$Yugoslavia$Federal Republic of Yugoslavia
3001033$$$$Anguilla
3011033$$$$Antarctica
3021033$$$$Aruba
3031033$$$$Ascension Island
3041033$$$$Ashmore and Cartier Islands$Territory of Ashmore and Cartier Islands
3051033$$$$Baker Island
3061033$$$$Bouvet Island
3071033$$$$Cayman Islands
3081033$$$$Channel Islands
3091033$$$$Christmas Island$Territory of Christmas Island
3101033$$$$Clipperton Island
3111033$$$$Cocos (Keeling) Islands$Territory of Cocos (Keeling) Islands
3121033$$$$Cook Islands
3131033$$$$Coral Sea Islands$Coral Sea Islands Territory
3141033$$$$Diego Garcia
3151033$$$$Falkland Islands (Islas Malvinas)$Falkland Islands (Islas Malvinas)
3161033$$$$France, Metropolitan
3171033$$$$French Guiana$Department of Guiana
3181033$$$$French Polynesia$Territory of French Polynesia
3191033$$$$French Southern and Antarctic Lands$Territory of the French Southern and Antarctic Lands
3211033$$$$Guadeloupe$Department of Guadeloupe
3221033$$$$Guam$Territory of Guam
3231033$$$$Guantanamo Bay
3241033$$$$Guernsey$Balliwick of Guernsey
3251033$$$$Heard Island and McDonald Islands$Territory of Heard Island and McDonald Islands
3261033$$$$Howland Island
3271033$$$$Jarvis Island
3281033$$$$Jersey$Balliwick of Jersey
3291033$$$$Kingman Reef
3301033$$$$Martinique$Department of Martinique
3311033$$$$Mayotte$Territorial Collectivity of Mayotte
3321033$$$$Montserrat
3331033$$$$Netherlands Antilles
3341033$$$$New Caledonia$Territory of New Caledonia and Dependencies
3351033$$$$Niue
3361033$$$$Norfolk Island$Territory of Norfolk Island
3371033$$$$Northern Mariana Islands$Commonwealth of the Northern Mariana Islands
3381033$$$$Palmyra Atoll
3391033$$$$Pitcairn Islands$Pitcairn, Henderson, Ducie, and Oeno Islands
3401033$$$$Rota Island
3411033$$$$Saipan
3421033$$$$South Georgia and the South Sandwich Islands$South Georgia and the South Sandwich Islands
3431033$$$$St. Helena$Saint Helena
3461033$$$$Tinian Island
3471033$$$$Tokelau
3481033$$$$Tristan da Cunha
3491033$$$$Turks and Caicos Islands
3501033$$$$U.S. Minor Outlying Islands$United States Minor Outlying Islands
3511033$$$$Virgin Islands, British
3521033$$$$Wallis and Futuna$Territory of the Wallis and Futuna Islands
4371033$$$437 (OEM - United States)
5001033$$$500 (IBM EBCDIC - International)
7081033$$$708 (Arabic - ASMO)
7201033$$$720 (Arabic - Transparent ASMO)
7371033$$$737 (OEM - Greek 437G)
7751033$$$775 (OEM - Baltic)
8501033$$$850 (OEM - Multilingual Latin I)
8521033$$$852 (OEM - Latin II)
8551033$$$855 (OEM - Cyrillic)
8571033$$$857 (OEM - Turkish)
8581033$$$858 (OEM - Multilingual Latin I + Euro)
8601033$$$860 (OEM - Portuguese)
8611033$$$861 (OEM - Icelandic)
8621033$$$862 (OEM - Hebrew)
8631033$$$863 (OEM - Canadian French)
8641033$$$864 (OEM - Arabic)
8651033$$$865 (OEM - Nordic)
8661033$$$866 (OEM - Russian)
8691033$$$869 (OEM - Modern Greek)
8701033$$$870 (IBM EBCDIC - Multilingual/ROECE (Latin-2))
8741033$$$874 (ANSI/OEM - Thai)
8751033$$$875 (IBM EBCDIC - Modern Greek)
9321033$$$932 (ANSI/OEM - Japanese Shift-JIS)
9361033$$$936 (ANSI/OEM - Simplified Chinese GBK)
9491033$$$949 (ANSI/OEM - Korean)
9501033$$$950 (ANSI/OEM - Traditional Chinese Big5)
10241033Process Default Language
10251033Arabic (Saudi Arabia)$Saudi Arabia
10261033Bulgarian$Bulgaria$$1026 (IBM EBCDIC - Turkish (Latin-5))
10271033Catalan$Spain
10281033Chinese (Taiwan)$Taiwan$$$$$Stroke Count$$$Bopomofo
10291033Czech$Czech Republic
10301033Danish$Denmark
10311033German (Germany)$Germany$$$$$Dictionary$Phone Book (DIN)
10321033Greek$Greece
10331033English (United States)$United States
10341033Spanish (Traditional Sort)$Spain$$$$$Traditional
10351033Finnish$Finland
10361033French (France)$France
10371033Hebrew$Israel
10381033Hungarian$Hungary$$$$$$Technical
10391033Icelandic$Iceland
10401033Italian (Italy)$Italy
10411033Japanese$Japan$$$$$XJIS
10421033Korean$Korea$$$$$Dictionary
10431033Dutch (Netherlands)$Netherlands
10441033Norwegian (Bokmal)$Norway
10451033Polish$Poland
10461033Portuguese (Brazil)$Brazil
10471033$$$1047 (IBM EBCDIC - Latin-1/Open System)
10481033Romanian$Romania
10491033Russian$Russia
10501033Croatian$Croatia
10511033Slovak$Slovakia
10521033Albanian$Albania
10531033Swedish$Sweden
10541033Thai$Thailand
10551033Turkish$Turkey
10561033Urdu$Islamic Republic of Pakistan
10571033Indonesian$Indonesia
10581033Ukrainian$Ukraine
10591033Belarusian$Belarus
10601033Slovenian$Slovenia
10611033Estonian$Estonia
10621033Latvian$Latvia
10631033Lithuanian$Lithuania
10651033Farsi$Iran
10661033Vietnamese$Viet Nam
10671033Armenian$Armenia
10681033Azeri (Latin)$Azerbaijan
10691033Basque$Spain
10711033FYRO Macedonian$Former Yugoslav Republic of Macedonia
10781033Afrikaans$South Africa
10791033Georgian$Georgia$$$$$Traditional$Modern
10801033Faeroese$Faeroe Islands
10811033Hindi$India
10861033Malay (Malaysia)$Malaysia
10871033Kazakh$Kazakhstan
10881033Kyrgyz (Cyrillic)$Kyrgyzstan
10891033Swahili$Kenya
10911033Uzbek (Latin)$Uzbekistan
10921033Tatar$Tatarstan
10941033Punjabi$India
10951033Gujarati$India
10971033Tamil$India
10981033Telugu$India
10991033Kannada$India
11021033Marathi$India
11031033Sanskrit$India
11041033Mongolian (Cyrillic)$Mongolia
11101033Galician$Spain
11111033Konkani$India
11141033Syriac$Syria
11251033Divehi$Maldives
11401033$$$1140 (IBM EBCDIC - U.S./Canada (37 + Euro))
11411033$$$1141 (IBM EBCDIC - Germany (20273 + Euro))
11421033$$$1142 (IBM EBCDIC - Denmark/Norway (20277 + Euro))
11431033$$$1143 (IBM EBCDIC - Finland/Sweden (20278 + Euro))
11441033$$$1144 (IBM EBCDIC - Italy (20280 + Euro))
11451033$$$1145 (IBM EBCDIC - Latin America/Spain (20284 + Euro))
11461033$$$1146 (IBM EBCDIC - United Kingdom (20285 + Euro))
11471033$$$1147 (IBM EBCDIC - France (20297 + Euro))
11481033$$$1148 (IBM EBCDIC - International (500 + Euro))
11491033$$$1149 (IBM EBCDIC - Icelandic (20871 + Euro))
12501033$$$1250 (ANSI - Central Europe)
12511033$$$1251 (ANSI - Cyrillic)
12521033$$$1252 (ANSI - Latin I)
12531033$$$1253 (ANSI - Greek)
12541033$$$1254 (ANSI - Turkish)
12551033$$$1255 (ANSI - Hebrew)
12561033$$$1256 (ANSI - Arabic)
12571033$$$1257 (ANSI - Baltic)
12581033$$$1258 (ANSI/OEM - Viet Nam)
13611033$$$1361 (Korean - Johab)
20491033Arabic (Iraq)$Iraq
20521033Chinese (PRC)$People's Republic of China$$$$$Pronunciation$$Stroke Count
20551033German (Switzerland)$Switzerland
20571033English (United Kingdom)$United Kingdom
20581033Spanish (Mexico)$Mexico
20601033French (Belgium)$Belgium
20641033Italian (Switzerland)$Switzerland
20671033Dutch (Belgium)$Belgium
20681033Norwegian (Nynorsk)$Norway
20701033Portuguese (Portugal)$Portugal
20741033Serbian (Latin)$Serbia
20771033Swedish (Finland)$Finland
20921033Azeri (Cyrillic)$Azerbaijan
21101033Malay (Brunei Darussalam)$Brunei Darussalam
21151033Uzbek (Cyrillic)$Uzbekistan
30731033Arabic (Egypt)$Egypt
30761033Chinese (Hong Kong S.A.R.)$Hong Kong S.A.R.$$$$$Stroke Count
30791033German (Austria)$Austria
30811033English (Australia)$Australia
30821033Spanish (International Sort)$Spain$$$$$International
30841033French (Canada)$Canada
30981033Serbian (Cyrillic)$Serbia
40971033Arabic (Libya)$Libya
41001033Chinese (Singapore)$Singapore$$$$$Pronunciation$$Stroke Count
41031033German (Luxembourg)$Luxembourg
41051033English (Canada)$Canada
41061033Spanish (Guatemala)$Guatemala
41081033French (Switzerland)$Switzerland
51211033Arabic (Algeria)$Algeria
51241033Chinese (Macau S.A.R.)$Macau S.A.R.$$$$$Pronunciation$$Stroke Count
51271033German (Liechtenstein)$Liechtenstein
51291033English (New Zealand)$New Zealand
51301033Spanish (Costa Rica)$Costa Rica
51321033French (Luxembourg)$Luxembourg
61451033Arabic (Morocco)$Morocco
61531033English (Ireland)$Ireland
61541033Spanish (Panama)$Panama
61561033French (Monaco)$Principality of Monaco
71691033Arabic (Tunisia)$Tunisia
71771033English (South Africa)$South Africa
71781033Spanish (Dominican Republic)$Dominican Republic
81931033Arabic (Oman)$Oman
82011033English (Jamaica)$Jamaica
82021033Spanish (Venezuela)$Venezuela
92171033Arabic (Yemen)$Yemen
92251033English (Caribbean)$Caribbean
92261033Spanish (Colombia)$Colombia
100001033$$$10000 (MAC - Roman)
100011033$$$10001 (MAC - Japanese)
100021033$$$10002 (MAC - Traditional Chinese Big5)
100031033$$$10003 (MAC - Korean)
100041033$$$10004 (MAC - Arabic)
100051033$$$10005 (MAC - Hebrew)
100061033$$$10006 (MAC - Greek I)
100071033$$$10007 (MAC - Cyrillic)
100081033$$$10008 (MAC - Simplified Chinese GB 2312)
100101033$$$10010 (MAC - Romania)
100171033$$$10017 (MAC - Ukraine)
100211033$$$10021 (MAC - Thai)
100291033$$$10029 (MAC - Latin II)
100791033$$$10079 (MAC - Icelandic)
100811033$$$10081 (MAC - Turkish)
100821033$$$10082 (MAC - Croatia)
102411033Arabic (Syria)$Syria
102491033English (Belize)$Belize
102501033Spanish (Peru)$Peru
112651033Arabic (Jordan)$Jordan
112731033English (Trinidad)$Trinidad and Tobago
112741033Spanish (Argentina)$Argentina
122891033Arabic (Lebanon)$Lebanon
122971033English (Zimbabwe)$Zimbabwe
122981033Spanish (Ecuador)$Ecuador
133131033Arabic (Kuwait)$Kuwait
133211033English (Philippines)$Republic of the Philippines
133221033Spanish (Chile)$Chile
143371033Arabic (U.A.E.)$U.A.E.
143461033Spanish (Uruguay)$Uruguay
151261033$$$$Man, Isle of
153611033Arabic (Bahrain)$Bahrain
153701033Spanish (Paraguay)$Paraguay
163851033Arabic (Qatar)$Qatar
163941033Spanish (Bolivia)$Bolivia
174181033Spanish (El Salvador)$El Salvador
184421033Spanish (Honduras)$Honduras
194661033Spanish (Nicaragua)$Nicaragua
196181033$$$$Macedonia, Former Yugoslav Republic of$The Former Yugoslav Republic of Macedonia
200001033$$$20000 (CNS - Taiwan)
200011033$$$20001 (TCA - Taiwan)
200021033$$$20002 (Eten - Taiwan)
200031033$$$20003 (IBM5550 - Taiwan)
200041033$$$20004 (TeleText - Taiwan)
200051033$$$20005 (Wang - Taiwan)
201051033$$$20105 (IA5 IRV International Alphabet No.5)
201061033$$$20106 (IA5 German)
201071033$$$20107 (IA5 Swedish)
201081033$$$20108 (IA5 Norwegian)
201271033$$$20127 (US-ASCII)
202611033$$$20261 (T.61)
202691033$$$20269 (ISO 6937 Non-Spacing Accent)
202731033$$$20273 (IBM EBCDIC - Germany)
202771033$$$20277 (IBM EBCDIC - Denmark/Norway)
202781033$$$20278 (IBM EBCDIC - Finland/Sweden)
202801033$$$20280 (IBM EBCDIC - Italy)
202841033$$$20284 (IBM EBCDIC - Latin America/Spain)
202851033$$$20285 (IBM EBCDIC - United Kingdom)
202901033$$$20290 (IBM EBCDIC - Japanese Katakana Extended)
202971033$$$20297 (IBM EBCDIC - France)
204201033$$$20420 (IBM EBCDIC - Arabic)
204231033$$$20423 (IBM EBCDIC - Greek)
204241033$$$20424 (IBM EBCDIC - Hebrew)
204901033Spanish (Puerto Rico)$Puerto Rico
208331033$$$20833 (IBM EBCDIC - Korean Extended)
208381033$$$20838 (IBM EBCDIC - Thai)
208661033$$$20866 (Russian - KOI8)
208711033$$$20871 (IBM EBCDIC - Icelandic)
208801033$$$20880 (IBM EBCDIC - Cyrillic (Russian))
209051033$$$20905 (IBM EBCDIC - Turkish)
209241033$$$20924 (IBM EBCDIC - Latin-1/Open System (1047 + Euro))
209321033$$$20932 (JIS X 0208-1990 & 0212-1990)
209361033$$$20936 (Simplified Chinese GB2312)
210251033$$$21025 (IBM EBCDIC - Cyrillic (Serbian, Bulgarian))
210271033$$$21027 (Ext Alpha Lowercase)
212421033$$$$Midway Islands
218661033$$$21866 (Ukrainian - KOI8-U)
248071033$$$$East Timor
285911033$$$28591 (ISO 8859-1 Latin I)
285921033$$$28592 (ISO 8859-2 Central Europe)
285931033$$$28593 (ISO 8859-3 Latin 3)
285941033$$$28594 (ISO 8859-4 Baltic)
285951033$$$28595 (ISO 8859-5 Cyrillic)
285961033$$$28596 (ISO 8859-6 Arabic)
285971033$$$28597 (ISO 8859-7 Greek)
285981033$$$28598 (ISO 8859-8 Hebrew: Visual Ordering)
285991033$$$28599 (ISO 8859-9 Latin 5)
286051033$$$28605 (ISO 8859-15 Latin 9)
385981033$$$38598 (ISO 8859-8 Hebrew: Logical Ordering)
502201033$$$50220 (ISO-2022 Japanese with no halfwidth Katakana)
502211033$$$50221 (ISO-2022 Japanese with halfwidth Katakana)
502221033$$$50222 (ISO-2022 Japanese JIS X 0201-1989)
502251033$$$50225 (ISO-2022 Korean)
502271033$$$50227 (ISO-2022 Simplified Chinese)
502291033$$$50229 (ISO-2022 Traditional Chinese)
509301033$$$50930 (IBM EBCDIC - Japanese (Katakana) Extended and Japanese)
509311033$$$50931 (IBM EBCDIC - US/Canada and Japanese)
509331033$$$50933 (IBM EBCDIC - Korean Extended and Korean)
509351033$$$50935 (IBM EBCDIC - Simplified Chinese)
509371033$$$50937 (IBM EBCDIC - US/Canada and Traditional Chinese)
509391033$$$50939 (IBM EBCDIC - Japanese (Latin) Extended and Japanese)
519321033$$$51932 (EUC-Japanese)
519361033$$$51936 (EUC-Simplified Chinese)
519491033$$$51949 (EUC-Korean)
519501033$$$51950 (EUC-Traditional Chinese)
529361033$$$52936 (HZ-GB2312 Simplified Chinese)
549361033$$$54936 (GB18030 Simplified Chinese)
570021033$$$57002 (ISCII - Devanagari)
570031033$$$57003 (ISCII - Bengali)
570041033$$$57004 (ISCII - Tamil)
570051033$$$57005 (ISCII - Telugu)
570061033$$$57006 (ISCII - Assamese)
570071033$$$57007 (ISCII - Oriya)
570081033$$$57008 (ISCII - Kannada)
570091033$$$57009 (ISCII - Malayalam)
570101033$$$57010 (ISCII - Gujarati)
570111033$$$57011 (ISCII - Punjabi (Gurmukhi))
650001033$$$65000 (UTF-7)
650011033$$$65001 (UTF-8)
module_namehintordfunction_name
ntdll.dll1230_wcsnicmp
ntdll.dll164NtFsControlFile
ntdll.dll115NtCreateFile
ntdll.dll398RtlAllocateHeap
ntdll.dll576RtlFreeHeap
ntdll.dll196NtOpenFile
ntdll.dll232NtQueryInformationFile
ntdll.dll228NtQueryEaFile
ntdll.dll692RtlLengthSecurityDescriptor
ntdll.dll250NtQuerySecurityObject
ntdll.dll301NtSetEaFile
ntdll.dll320NtSetSecurityObject
ntdll.dll307NtSetInformationFile
ntdll.dll6CsrClientCallServer
ntdll.dll146NtDeviceIoControlFile
ntdll.dll103NtClose
ntdll.dll630RtlInitUnicodeString
ntdll.dll1303wcscspn
ntdll.dll844RtlUnicodeToMultiByteSize
ntdll.dll1304wcslen
ntdll.dll1211_memicmp
ntdll.dll1267memmove
ntdll.dll259NtQueryValueKey
ntdll.dll199NtOpenKey
ntdll.dll159NtFlushKey
ntdll.dll330NtSetValueKey
ntdll.dll119NtCreateKey
ntdll.dll717RtlNtStatusToDosError
ntdll.dll581RtlFreeUnicodeString
ntdll.dll513RtlDnsHostNameToComputerName
ntdll.dll1307wcsncpy
ntdll.dll837RtlUnicodeStringToAnsiString
ntdll.dll892RtlxUnicodeStringToAnsiSize
ntdll.dll76NlsMbCodePageTag
ntdll.dll401RtlAnsiStringToUnicodeString
ntdll.dll624RtlInitAnsiString
ntdll.dll473RtlCreateUnicodeStringFromAsciiz
ntdll.dll1300wcschr
ntdll.dll1311wcsstr
ntdll.dll730RtlPrefixString
ntdll.dll1228_wcsicmp
ntdll.dll597RtlGetFullPathName_U
ntdll.dll590RtlGetCurrentDirectory_U
ntdll.dll235NtQueryInformationProcess
ntdll.dll841RtlUnicodeStringToOemString
ntdll.dll765RtlReleasePebLock
ntdll.dll543RtlEqualUnicodeString
ntdll.dll370RtlAcquirePebLock
ntdll.dll574RtlFreeAnsiString
ntdll.dll784RtlSetCurrentDirectory_U
ntdll.dll822RtlTimeToTimeFields
ntdll.dll325NtSetSystemTime
ntdll.dll818RtlTimeFieldsToTime
ntdll.dll255NtQuerySystemInformation
ntdll.dll803RtlSetTimeZoneInformation
ntdll.dll323NtSetSystemInformation
ntdll.dll478RtlCutoverTimeToSystemTime
ntdll.dll1190_allmul
ntdll.dll15DbgBreakPoint
ntdll.dll579RtlFreeSid
ntdll.dll786RtlSetDaclSecurityDescriptor
ntdll.dll467RtlCreateSecurityDescriptor
ntdll.dll376RtlAddAccessAllowedAce
ntdll.dll457RtlCreateAcl
ntdll.dll693RtlLengthSid
ntdll.dll396RtlAllocateAndInitializeSid
ntdll.dll16DbgPrint
ntdll.dll203NtOpenProcess
ntdll.dll9CsrGetProcessId
ntdll.dll25DbgUiDebugActiveProcess
ntdll.dll22DbgUiConnectToDbg
ntdll.dll27DbgUiIssueRemoteBreakin
ntdll.dll306NtSetInformationDebugObject
ntdll.dll26DbgUiGetThreadDebugObject
ntdll.dll236NtQueryInformationThread
ntdll.dll24DbgUiConvertStateChangeStructure
ntdll.dll31DbgUiWaitStateChange
ntdll.dll23DbgUiContinue
ntdll.dll30DbgUiStopDebugging
ntdll.dll516RtlDosPathNameToNtPathName_U
ntdll.dll673RtlIsDosDeviceName_U
ntdll.dll460RtlCreateAtomTable
ntdll.dll86NtAddAtom
ntdll.dll384RtlAddAtomToAtomTable
ntdll.dll156NtFindAtom
ntdll.dll699RtlLookupAtomInAtomTable
ntdll.dll140NtDeleteAtom
ntdll.dll490RtlDeleteAtomFromAtomTable
ntdll.dll231NtQueryInformationAtom
ntdll.dll734RtlQueryAtomInAtomTable
ntdll.dll724RtlOemStringToUnicodeString
ntdll.dll708RtlMultiByteToUnicodeN
ntdll.dll843RtlUnicodeToMultiByteN
ntdll.dll709RtlMultiByteToUnicodeSize
ntdll.dll731RtlPrefixUnicodeString
ntdll.dll690RtlLeaveCriticalSection
ntdll.dll530RtlEnterCriticalSection
ntdll.dll153NtEnumerateValueKey
ntdll.dll678RtlIsTextUnicode
ntdll.dll265NtReadFile
ntdll.dll95NtAllocateVirtualMemory
ntdll.dll348NtUnlockFile
ntdll.dll180NtLockFile
ntdll.dll405RtlAppendUnicodeStringToString
ntdll.dll406RtlAppendUnicodeToString
ntdll.dll456RtlCopyUnicodeString
ntdll.dll163NtFreeVirtualMemory
ntdll.dll358NtWriteFile
ntdll.dll472RtlCreateUnicodeString
ntdll.dll572RtlFormatCurrentUserKeyPath
ntdll.dll603RtlGetLongestNtPathLength
ntdll.dll148NtDuplicateObject
ntdll.dll241NtQueryKey
ntdll.dll151NtEnumerateKey
ntdll.dll145NtDeleteValueKey
ntdll.dll542RtlEqualString
ntdll.dll8CsrFreeCaptureBuffer
ntdll.dll4CsrCaptureMessageString
ntdll.dllCsrAllocateCaptureBuffer
ntdll.dll1283strncpy
ntdll.dll420RtlCharToInteger
ntdll.dll851RtlUpcaseUnicodeChar
ntdll.dll852RtlUpcaseUnicodeString
ntdll.dll1CsrAllocateMessagePointer
ntdll.dll244NtQueryObject
ntdll.dll1301wcscmp
ntdll.dll429RtlCompareMemory
ntdll.dll227NtQueryDirectoryObject
ntdll.dll252NtQuerySymbolicLinkObject
ntdll.dll208NtOpenSymbolicLinkObject
ntdll.dll193NtOpenDirectoryObject
ntdll.dll116NtCreateIoCompletion
ntdll.dll315NtSetIoCompletion
ntdll.dll273NtRemoveIoCompletion
ntdll.dll311NtSetInformationProcess
ntdll.dll226NtQueryDirectoryFile
ntdll.dll491RtlDeleteCriticalSection
ntdll.dll190NtNotifyChangeDirectoryFile
ntdll.dll355NtWaitForSingleObject
ntdll.dll635RtlInitializeCriticalSection
ntdll.dll261NtQueryVolumeInformationFile
ntdll.dll157NtFlushBuffersFile
ntdll.dll481RtlDeactivateActivationContextUnsafeFast
ntdll.dll375RtlActivateActivationContextUnsafeFast
ntdll.dll100NtCancelIoFile
ntdll.dll266NtReadFileScatter
ntdll.dll359NtWriteFileGather
ntdll.dll1302wcscpy
ntdll.dll206NtOpenSection
ntdll.dll188NtMapViewOfSection
ntdll.dll160NtFlushVirtualMemory
ntdll.dll571RtlFlushSecureMemoryCache
ntdll.dll350NtUnmapViewOfSection
ntdll.dll129NtCreateSection
ntdll.dll230NtQueryFullAttributesFile
ntdll.dll1290swprintf
ntdll.dll220NtQueryAttributesFile
ntdll.dll511RtlDetermineDosPathNameType_U
ntdll.dll264NtRaiseHardError
ntdll.dll254NtQuerySystemEnvironmentValueEx
ntdll.dll583RtlGUIDFromString
ntdll.dll322NtSetSystemEnvironmentValueEx
ntdll.dll629RtlInitString
ntdll.dll848RtlUnlockHeap
ntdll.dll807RtlSetUserValueHeap
ntdll.dll575RtlFreeHandle
ntdll.dll397RtlAllocateHandle
ntdll.dll696RtlLockHeap
ntdll.dll808RtlSizeHeap
ntdll.dll615RtlGetUserInfoHeap
ntdll.dll756RtlReAllocateHeap
ntdll.dll680RtlIsValidHandle
ntdll.dll428RtlCompactHeap
ntdll.dll620RtlImageNtHeader
ntdll.dll218NtProtectVirtualMemory
ntdll.dll260NtQueryVirtualMemory
ntdll.dll183NtLockVirtualMemory
ntdll.dll349NtUnlockVirtualMemory
ntdll.dll158NtFlushInstructionCache
ntdll.dll93NtAllocateUserPhysicalPages
ntdll.dll162NtFreeUserPhysicalPages
ntdll.dll186NtMapUserPhysicalPages
ntdll.dll187NtMapUserPhysicalPagesScatter
ntdll.dll168NtGetWriteWatch
ntdll.dll286NtResetWriteWatch
ntdll.dll310NtSetInformationObject
ntdll.dll11CsrNewThread
ntdll.dll7CsrClientConnectToServer
ntdll.dll469RtlCreateTagHeap
ntdll.dll68LdrSetDllManifestProber
ntdll.dll802RtlSetThreadPoolStartFunc
ntdll.dll525RtlEncodePointer
ntdll.dll1216_stricmp
ntdll.dll1299wcscat
ntdll.dll463RtlCreateHeap
ntdll.dll508RtlDestroyHeap
ntdll.dll547RtlExtendHeap
ntdll.dll748RtlQueryTagHeap
ntdll.dll862RtlUsageHeap
ntdll.dll868RtlValidateHeap
ntdll.dll610RtlGetProcessHeaps
ntdll.dll873RtlWalkHeap
ntdll.dll789RtlSetHeapInformation
ntdll.dll737RtlQueryHeapInformation
ntdll.dll639RtlInitializeHandleTable
ntdll.dll549RtlExtendedLargeIntegerDivide
ntdll.dll121NtCreateMailslotFile
ntdll.dll573RtlFormatMessage
ntdll.dll563RtlFindMessage
ntdll.dll72LdrUnloadDll
ntdll.dll71LdrUnloadAlternateResourceModule
ntdll.dll46LdrDisableThreadCalloutsForDll
ntdll.dll1276strchr
ntdll.dll55LdrGetDllHandle
ntdll.dll73LdrUnlockLoaderLock
ntdll.dll42LdrAddRefDll
ntdll.dll436RtlComputePrivatizedDllName_U
ntdll.dll727RtlPcToFileHeader
ntdll.dll63LdrLockLoaderLock
ntdll.dll616RtlGetVersion
ntdll.dll871RtlVerifyVersionInfo
ntdll.dll48LdrEnumerateLoadedModules
ntdll.dll839RtlUnicodeStringToInteger
ntdll.dll61LdrLoadAlternateResourceModule
ntdll.dll515RtlDosApplyFileIsolationRedirection_Ustr
ntdll.dll62LdrLoadDll
ntdll.dll57LdrGetProcedureAddress
ntdll.dll53LdrFindResource_U
ntdll.dll41LdrAccessResource
ntdll.dll51LdrFindResourceDirectory_U
ntdll.dll619RtlImageDirectoryEntryToData
ntdll.dll1215_strcmpi
ntdll.dll312NtSetInformationThread
ntdll.dll210NtOpenThreadToken
ntdll.dll123NtCreateNamedPipeFile
ntdll.dll487RtlDefaultNpAcl
ntdll.dll518RtlDosSearchPath_Ustr
ntdll.dll631RtlInitUnicodeStringEx
ntdll.dll736RtlQueryEnvironmentVariable_U
ntdll.dll399RtlAnsiCharToUnicodeChar
ntdll.dll649RtlIntegerToChar
ntdll.dll331NtSetVolumeInformationFile
ntdll.dll676RtlIsNameLegalDOS8Dot3
ntdll.dll246NtQueryPerformanceCounter
ntdll.dll1272sprintf
ntdll.dll214NtPowerInformation
ntdll.dll173NtInitiatePowerAction
ntdll.dll326NtSetThreadExecutionState
ntdll.dll284NtRequestWakeupLatency
ntdll.dll166NtGetDevicePowerState
ntdll.dll175NtIsSystemResumeAutomatic
ntdll.dll281NtRequestDeviceWakeup
ntdll.dll99NtCancelDeviceWakeupRequest
ntdll.dll361NtWriteVirtualMemory
ntdll.dll69LdrShutdownProcess
ntdll.dll340NtTerminateProcess
ntdll.dll753RtlRaiseStatus
ntdll.dll787RtlSetEnvironmentVariable
ntdll.dll546RtlExpandEnvironmentStrings_U
ntdll.dll268NtReadVirtualMemory
ntdll.dll432RtlCompareUnicodeString
ntdll.dll746RtlQueryRegistryValues
ntdll.dll118NtCreateJobSet
ntdll.dll117NtCreateJobObject
ntdll.dll174NtIsProcessInJob
ntdll.dll541RtlEqualSid
ntdll.dll814RtlSubAuthoritySid
ntdll.dll644RtlInitializeSid
ntdll.dll237NtQueryInformationToken
ntdll.dll204NtOpenProcessToken
ntdll.dll289NtResumeThread
ntdll.dll97NtAssignProcessToJobObject
ntdll.dll3CsrCaptureMessageMultiUnicodeStringsInPlace
ntdll.dll132NtCreateThread
ntdll.dll127NtCreateProcessEx
ntdll.dll65LdrQueryImageFileExecutionOptions
ntdll.dll506RtlDestroyEnvironment
ntdll.dll249NtQuerySection
ntdll.dll233NtQueryInformationJobObject
ntdll.dll604RtlGetNativeSystemInformation
ntdll.dll890RtlxAnsiStringToUnicodeSize
ntdll.dll194NtOpenEvent
ntdll.dll229NtQueryEvent
ntdll.dll341NtTerminateThread
ntdll.dll1309wcsrchr
ntdll.dll77NlsMbOemCodePageTag
ntdll.dll893RtlxUnicodeStringToOemSize
ntdll.dll89NtAdjustPrivilegesToken
ntdll.dll623RtlImpersonateSelf
ntdll.dll509RtlDestroyProcessParameters
ntdll.dll464RtlCreateProcessParameters
ntdll.dll636RtlInitializeCriticalSectionAndSpinCount
ntdll.dll302NtSetEvent
ntdll.dll102NtClearEvent
ntdll.dll219NtPulseEvent
ntdll.dll130NtCreateSemaphore
ntdll.dll207NtOpenSemaphore
ntdll.dll272NtReleaseSemaphore
ntdll.dll122NtCreateMutant
ntdll.dll201NtOpenMutant
ntdll.dll271NtReleaseMutant
ntdll.dll333NtSignalAndWaitForSingleObject
ntdll.dll354NtWaitForMultipleObjects
ntdll.dll139NtDelayExecution
ntdll.dll133NtCreateTimer
ntdll.dll212NtOpenTimer
ntdll.dll327NtSetTimer
ntdll.dll101NtCancelTimer
ntdll.dll113NtCreateEvent
ntdll.dll447RtlCopyLuid
ntdll.dll1285strrchr
ntdll.dll1227_vsnwprintf
ntdll.dll763RtlReleaseActivationContext
ntdll.dll374RtlActivateActivationContextEx
ntdll.dll739RtlQueryInformationActivationContext
ntdll.dll209NtOpenThread
ntdll.dll70LdrShutdownThread
ntdll.dll580RtlFreeThreadActivationContextStack
ntdll.dll165NtGetContextThread
ntdll.dll296NtSetContextThread
ntdll.dll337NtSuspendThread
ntdll.dll752RtlRaiseException
ntdll.dll483RtlDecodePointer
ntdll.dll1294towlower
ntdll.dll425RtlClearBits
ntdll.dll558RtlFindClearBitsAndSet
ntdll.dll413RtlAreBitsSet
ntdll.dll262NtQueueApcThread
ntdll.dll362NtYieldExecution
ntdll.dll762RtlRegisterWait
ntdll.dll503RtlDeregisterWait
ntdll.dll504RtlDeregisterWaitEx
ntdll.dll751RtlQueueWorkItem
ntdll.dll791RtlSetIoCompletionCallback
ntdll.dll471RtlCreateTimerQueue
ntdll.dll470RtlCreateTimer
ntdll.dll859RtlUpdateTimer
ntdll.dll500RtlDeleteTimer
ntdll.dll502RtlDeleteTimerQueueEx
ntdll.dll10CsrIdentifyAlertableThread
ntdll.dll407RtlApplicationVerifierStop
ntdll.dll1191_alloca_probe
ntdll.dll510RtlDestroyQueryDebugBuffer
ntdll.dll743RtlQueryProcessDebugInformation
ntdll.dll465RtlCreateQueryDebugBuffer
ntdll.dll462RtlCreateEnvironment
ntdll.dll577RtlFreeOemString
ntdll.dll1287strstr
ntdll.dll1293toupper
ntdll.dll1247isdigit
ntdll.dll1238atol
ntdll.dll1292tolower
ntdll.dll198NtOpenJobObject
ntdll.dll339NtTerminateJobObject
ntdll.dll308NtSetInformationJobObject
ntdll.dll391RtlAddRefActivationContext
ntdll.dll878RtlZombifyActivationContext
ntdll.dll373RtlActivateActivationContext
ntdll.dll480RtlDeactivateActivationContext
ntdll.dll586RtlGetActiveActivationContext
ntdll.dll17DbgPrintEx
ntdll.dll45LdrDestroyOutOfProcessImage
ntdll.dll40LdrAccessOutOfProcessResource
ntdll.dll49LdrFindCreateProcessManifest
ntdll.dll44LdrCreateOutOfProcessImage
ntdll.dll718RtlNtStatusToDosErrorNoTeb
ntdll.dll879RtlpApplyLengthFunction
ntdll.dll601RtlGetLengthWithoutLastFullDosOrNtPathElement
ntdll.dll880RtlpEnsureBufferSize
ntdll.dll707RtlMultiAppendUnicodeStringBuffer
ntdll.dll1213_snwprintf
ntdll.dll458RtlCreateActivationContext
ntdll.dll555RtlFindActivationContextSectionString
ntdll.dll554RtlFindActivationContextSectionGuid
ntdll.dll1193_allshl
ntdll.dll716RtlNtPathNameToDosPathName
ntdll.dll1306wcsncmp
ntdll.dll834RtlUnhandledExceptionFilter
ntdll.dll2CsrCaptureMessageBuffer
ntdll.dll238NtQueryInstallUILanguage
ntdll.dll225NtQueryDefaultUILanguage
ntdll.dll1308wcspbrk
ntdll.dll726RtlOpenCurrentUser
ntdll.dll592RtlGetDaclSecurityDescriptor
ntdll.dll112NtCreateDirectoryObject
ntdll.dll1229_wcslwr
ntdll.dll1234_wtol
ntdll.dll650RtlIntegerToUnicodeString
ntdll.dll224NtQueryDefaultLocale
ntdll.dll1217_strlwr
ntdll.dll850RtlUnwind
ordentry_vafunction_name
10xa634ActivateActCtx
20x392a3AddAtomA
30x22469AddAtomW
40x7096fAddConsoleAliasA
50x70931AddConsoleAliasW
60x58d0aAddLocalAlternateComputerNameA
70x58beeAddLocalAlternateComputerNameW
80x38682AddRefActCtx
90x8f73AddVectoredExceptionHandler
100x70fc1AllocConsole
110x5e4f2AllocateUserPhysicalPages
120x22b95AreFileApisANSI
130x37f88AssignProcessToJobObject
140x711a9AttachConsole
150x56bb6BackupRead
160x55cc7BackupSeek
170x571d5BackupWrite
180x1654fBaseCheckAppcompatCache
190x6ba76BaseCleanupAppcompatCache
200x6bafaBaseCleanupAppcompatCacheSupport
210x6b931BaseDumpAppcompatCache
220x6b8afBaseFlushAppcompatCache
230x16245BaseInitAppcompatCache
240x35c3dBaseInitAppcompatCacheSupport
250x171bbBaseProcessInitPostImport
260x32b5cBaseQueryModuleData
270x14e99BaseUpdateAppcompatCache
280x194d5BasepCheckWinSaferRestrictions
290x38a53Beep
300x6f92fBeginUpdateResourceA
310x6f78cBeginUpdateResourceW
320x340ccBindIoCompletionCallback
330x6ab5dBuildCommDCBA
340x6ab2fBuildCommDCBAndTimeoutsA
350x6ab8fBuildCommDCBAndTimeoutsW
360x6abe9BuildCommDCBW
370x5fbaeCallNamedPipeA
380x5f95fCallNamedPipeW
390x60977CancelDeviceWakeupRequest
400x23880CancelIo
410x62b18CancelTimerQueueTimer
420x3487aCancelWaitableTimer
430x1f3aaChangeTimerQueueTimer
440x60831CheckNameLegalDOS8Dot3A
450x605f1CheckNameLegalDOS8Dot3W
460x59902CheckRemoteDebuggerPresent
470x66961ClearCommBreak
480x651ecClearCommError
490x1d946CloseConsoleHandle
500x9b77CloseHandle
510x345e1CloseProfileUserMapping
520x2501fCmdBatNotification
530x664e1CommConfigDialogA
540x663edCommConfigDialogW
550x10cf1CompareFileTime
560xd293CompareStringA
570xa34eCompareStringW
580x1f6c3ConnectNamedPipe
590x71c6fConsoleMenuControl
600x5a34dContinueDebugEvent
610x32a49ConvertDefaultLocale
620x25af2ConvertFiberToThread
630x25b31ConvertThreadToFiber
640x30053CopyFileA
650x5e1a4CopyFileExA
660x2eff2CopyFileExW
670x25779CopyFileW
680x59192CopyLZFile
690x6b415CreateActCtxA
700x151d4CreateActCtxW
710x72d18CreateConsoleScreenBuffer
720x26219CreateDirectoryA
730x5b023CreateDirectoryExA
740x5a3daCreateDirectoryExW
750x1e968CreateDirectoryW
760x1e4bdCreateEventA
770xa699CreateEventW
780x25bcaCreateFiber
790x25beaCreateFiberEx
800x1a24CreateFileA
810x946cCreateFileMappingA
820x939eCreateFileMappingW
830x10976CreateFileW
840x6b299CreateHardLinkA
850x6b0dcCreateHardLinkW
860x1f5edCreateIoCompletionPort
870x6affcCreateJobObjectA
880x34ffaCreateJobObjectW
890x6afceCreateJobSet
900x34df0CreateMailslotA
910x34e41CreateMailslotW
920x331f7CreateMemoryResourceNotification
930xeb3fCreateMutexA
940xeab7CreateMutexW
950x5fa54CreateNamedPipeA
960x2631dCreateNamedPipeW
970x37945CreateNlsSecurityDescriptor
980x1dd9aCreatePipe
990x2367CreateProcessA
1000x1da9eCreateProcessInternalA
1010x191ebCreateProcessInternalW
1020x7e68aCreateProcessInternalWSecure
1030x2332CreateProcessW
1040x10626CreateRemoteThread
1050x12b8dCreateSemaphoreA
1060x10286CreateSemaphoreW
1070x6b304CreateSocketHandle
1080x6adbeCreateTapePartition
1090x1082fCreateThread
1100x34076CreateTimerQueue
1110x25911CreateTimerQueueTimer
1120x647b7CreateToolhelp32Snapshot
1130x28deeCreateVirtualBuffer
1140x61861CreateWaitableTimerA
1150x25da6CreateWaitableTimerW
1160xa665DeactivateActCtx
1170x59f0bDebugActiveProcess
1180x5a391DebugActiveProcessStop
1190x59956DebugBreak
1200x59f5eDebugBreakProcess
1210x59f85DebugSetProcessKillOnExit
1220x8f98DecodePointer
1230x8fafDecodeSystemPointer
1240x5c0a5DefineDosDeviceA
1250x267aeDefineDosDeviceW
1260x7db1dDelayLoadFailureHook
1270x1fadcDeleteAtom
1280x8fccDeleteCriticalSection
1290x25a9fDeleteFiber
1300x1e85cDeleteFileA
1310x1f73dDeleteFileW
1320x62aebDeleteTimerQueue
1330x62aa4DeleteTimerQueueEx
1340x258c4DeleteTimerQueueTimer
1350x69d4eDeleteVolumeMountPointA
1360x695a0DeleteVolumeMountPointW
1370x1625DeviceIoControl
1380x11476DisableThreadLibraryCalls
1390xcdb6DisconnectNamedPipe
1400x583a7DnsHostnameToComputerNameA
1410x35119DnsHostnameToComputerNameW
1420x1ef41DosDateTimeToFileTime
1430x61579DosPathToSessionPathA
1440x34287DosPathToSessionPathW
1450x1da15DuplicateConsoleHandle
1460xe016DuplicateHandle
1470x8febEncodePointer
1480x9002EncodeSystemPointer
1490x6f5fdEndUpdateResourceA
1500x6f426EndUpdateResourceW
1510x901fEnterCriticalSection
1520x3761cEnumCalendarInfoA
1530x753f9EnumCalendarInfoExA
1540x78431EnumCalendarInfoExW
1550x7840eEnumCalendarInfoW
1560x7543aEnumDateFormatsA
1570x7545aEnumDateFormatsExA
1580x78454EnumDateFormatsExW
1590x302b7EnumDateFormatsW
1600x75498EnumLanguageGroupLocalesA
1610x783b7EnumLanguageGroupLocalesW
1620x351c7EnumResourceLanguagesA
1630x5f411EnumResourceLanguagesW
1640x5f009EnumResourceNamesA
1650x554e1EnumResourceNamesW
1660x5ee1cEnumResourceTypesA
1670x5f229EnumResourceTypesW
1680x754d7EnumSystemCodePagesA
1690x783f3EnumSystemCodePagesW
1700x7888dEnumSystemGeoID
1710x7547aEnumSystemLanguageGroupsA
1720x78399EnumSystemLanguageGroupsW
1730x370edEnumSystemLocalesA
1740x783d8EnumSystemLocalesW
1750x7541cEnumTimeFormatsA
1760x30394EnumTimeFormatsW
1770x754b9EnumUILanguagesA
1780x380a9EnumUILanguagesW
1790x582fbEnumerateLocalComputerNamesA
1800x5817bEnumerateLocalComputerNamesW
1810x6ad8bEraseTape
1820x653feEscapeCommFunction
1830x1caa2ExitProcess
1840xcca9ExitThread
1850x67305ExitVDM
1860x227c7ExpandEnvironmentStringsA
1870x1dfb1ExpandEnvironmentStringsW
1880x702d7ExpungeConsoleCommandHistoryA
1890x702bfExpungeConsoleCommandHistoryW
1900x5e9d4ExtendVirtualBuffer
1910x60ad8FatalAppExitA
1920x60a8aFatalAppExitW
1930x60b26FatalExit
1940x1e018FileTimeToDosDateTime
1950xea66FileTimeToLocalFileTime
1960xe9ecFileTimeToSystemTime
1970x72cf4FillConsoleOutputAttribute
1980x72ca9FillConsoleOutputCharacterA
1990x72cd0FillConsoleOutputCharacterW
2000x1ec4cFindActCtxSectionGuid
2010x6b77fFindActCtxSectionStringA
2020x23537FindActCtxSectionStringW
2030xcb96FindAtomA
2040x3995fFindAtomW
2050xefd7FindClose
2060x1e584FindCloseChangeNotification
2070x5c28bFindFirstChangeNotificationA
2080x290bcFindFirstChangeNotificationW
2090x13559FindFirstFileA
2100x5c2f2FindFirstFileExA
2110xec7dFindFirstFileExW
2120xf0e1FindFirstFileW
2130x69ec9FindFirstVolumeA
2140x69989FindFirstVolumeMountPointA
2150x68a21FindFirstVolumeMountPointW
2160x356a3FindFirstVolumeW
2170x1ff3fFindNextChangeNotification
2180x39019FindNextFileA
2190xf13aFindNextFileW
2200x6986fFindNextVolumeA
2210x69ab9FindNextVolumeMountPointA
2220x68ccdFindNextVolumeMountPointW
2230x3538fFindNextVolumeW
2240xc7b1FindResourceA
2250x22c2dFindResourceExA
2260xab10FindResourceExW
2270xba56FindResourceW
2280x35354FindVolumeClose
2290x1e584FindVolumeMountPointClose
2300x737ccFlushConsoleInputBuffer
2310xcd58FlushFileBuffers
2320x39277FlushInstructionCache
2330x1ff03FlushViewOfFile
2340x75b61FoldStringA
2350x792e6FoldStringW
2360x25f62FormatMessageA
2370x29047FormatMessageW
2380x70d3dFreeConsole
2390x1dc3fFreeEnvironmentStringsA
2400x1485fFreeEnvironmentStringsW
2410xaa66FreeLibrary
2420xcea1FreeLibraryAndExitThread
2430x2d582FreeResource
2440x5e520FreeUserPhysicalPages
2450x29021FreeVirtualBuffer
2460x736d1GenerateConsoleCtrlEvent
2470x9943GetACP
2480x5b093GetAtomNameA
2490x233e2GetAtomNameW
2500x67c9bGetBinaryType
2510x67c9bGetBinaryTypeA
2520x6783cGetBinaryTypeW
2530x32bf3GetCPFileNameFromRegistry
2540x12be6GetCPInfo
2550x75cf7GetCPInfoExA
2560x79e79GetCPInfoExW
2570x7561bGetCalendarInfoA
2580x32668GetCalendarInfoW
2590x6b812GetComPlusPackageInstallStatus
2600x66979GetCommConfig
2610x654faGetCommMask
2620x65583GetCommModemStatus
2630x6560cGetCommProperties
2640x656c4GetCommState
2650x33942GetCommTimeouts
2660x12c8dGetCommandLineA
2670x16cfbGetCommandLineW
2680x5d279GetCompressedFileSizeA
2690x5d151GetCompressedFileSizeW
2700x260a9GetComputerNameA
2710x5807fGetComputerNameExA
2720x2411eGetComputerNameExW
2730x1ff97GetComputerNameW
2740x6fd62GetConsoleAliasA
2750x701fcGetConsoleAliasExesA
2760x6ff02GetConsoleAliasExesLengthA
2770x6fef5GetConsoleAliasExesLengthW
2780x701e1GetConsoleAliasExesW
2790x6fd36GetConsoleAliasW
2800x70097GetConsoleAliasesA
2810x6fe69GetConsoleAliasesLengthA
2820x6fe51GetConsoleAliasesLengthW
2830x70079GetConsoleAliasesW
2840x73d83GetConsoleCP
2850x74e53GetConsoleCharType
2860x70657GetConsoleCommandHistoryA
2870x704b5GetConsoleCommandHistoryLengthA
2880x7049dGetConsoleCommandHistoryLengthW
2890x70639GetConsoleCommandHistoryW
2900x73211GetConsoleCursorInfo
2910x744afGetConsoleCursorMode
2920x38c2fGetConsoleDisplayMode
2930x73449GetConsoleFontInfo
2940x73571GetConsoleFontSize
2950x718c9GetConsoleHardwareState
2960x709acGetConsoleInputExeNameA
2970x70781GetConsoleInputExeNameW
2980x712a9GetConsoleInputWaitHandle
2990x73fd9GetConsoleKeyboardLayoutNameA
3000x73ff1GetConsoleKeyboardLayoutNameW
3010x1abe4GetConsoleMode
3020x74c37GetConsoleNlsMode
3030x1ae5fGetConsoleOutputCP
3040x74075GetConsoleProcessList
3050x1b8f3GetConsoleScreenBufferInfo
3060x732d9GetConsoleSelectionInfo
3070x706e9GetConsoleTitleA
3080x1b709GetConsoleTitleW
3090x74009GetConsoleWindow
3100x75829GetCurrencyFormatA
3110x7b33bGetCurrencyFormatW
3120x25893GetCurrentActCtx
3130x735ffGetCurrentConsoleFont
3140x397a1GetCurrentDirectoryA
3150xb6ffGetCurrentDirectoryW
3160xe00dGetCurrentProcess
3170x994eGetCurrentProcessId
3180x9919GetCurrentThread
3190x9737GetCurrentThreadId
3200x26e0cGetDateFormatA
3210x27c79GetDateFormatW
3220x666b1GetDefaultCommConfigA
3230x665b9GetDefaultCommConfigW
3240x7a6bdGetDefaultSortkeySize
3250x608fcGetDevicePowerState
3260x27373GetDiskFreeSpaceA
3270x27421GetDiskFreeSpaceExA
3280x1e6d6GetDiskFreeSpaceExW
3290x27235GetDiskFreeSpaceW
3300x5ed27GetDllDirectoryA
3310x5ebb7GetDllDirectoryW
3320x22cfbGetDriveTypeA
3330xb158GetDriveTypeW
3340x1cc23GetEnvironmentStrings
3350x1cc23GetEnvironmentStringsA
3360x12c78GetEnvironmentStringsW
3370x1486aGetEnvironmentVariableA
3380xf2f4GetEnvironmentVariableW
3390x1aae7GetExitCodeProcess
3400x229a2GetExitCodeThread
3410x6483fGetExpandedNameA
3420x648ecGetExpandedNameW
3430x1174cGetFileAttributesA
3440x13531GetFileAttributesExA
3450x1130dGetFileAttributesExW
3460xb5d4GetFileAttributesW
3470x10e85GetFileInformationByHandle
3480x10c8fGetFileSize
3490x10c21GetFileSizeEx
3500x1f8e2GetFileTime
3510x11069GetFileType
3520x5e314GetFirmwareEnvironmentVariableA
3530x5e1fdGetFirmwareEnvironmentVariableW
3540x1367cGetFullPathNameA
3550xb6daGetFullPathNameW
3560x754f2GetGeoInfoA
3570x784fbGetGeoInfoW
3580x6b2f3GetHandleContext
3590x3857fGetHandleInformation
3600x742e1GetLargestConsoleWindowSize
3610x903dGetLastError
3620x7a6e7GetLinguistLangSize
3630xc9c1GetLocalTime
3640xd47eGetLocaleInfoA
3650x11772GetLocaleInfoW
3660x34373GetLogicalDriveStringsA
3670x601afGetLogicalDriveStringsW
3680x1e3b9GetLogicalDrives
3690x681f6GetLongPathNameA
3700x130c3GetLongPathNameW
3710x5e938GetMailslotInfo
3720xb357GetModuleFileNameA
3730xb25dGetModuleFileNameW
3740xb529GetModuleHandleA
3750x5edc6GetModuleHandleExA
3760x23ba9GetModuleHandleExW
3770xe63cGetModuleHandleW
3780x5facbGetNamedPipeHandleStateA
3790x5f865GetNamedPipeHandleStateW
3800x5f66aGetNamedPipeInfo
3810x30185GetNativeSystemInfo
3820x66bb3GetNextVDMCommand
3830x17c61GetNlsSectionName
3840x5fda4GetNumaAvailableMemory
3850x5fdeaGetNumaAvailableMemoryNode
3860x5fc21GetNumaHighestNodeNumber
3870x5fcf9GetNumaNodeProcessorMask
3880x5fd5eGetNumaProcessorMap
3890x5fc6cGetNumaProcessorNode
3900x291dfGetNumberFormatA
3910x28978GetNumberFormatW
3920x741b1GetNumberOfConsoleFonts
3930x7421dGetNumberOfConsoleInputEvents
3940x73391GetNumberOfConsoleMouseButtons
3950x1e82aGetOEMCP
3960x1fcf4GetOverlappedResult
3970x60bf3GetPriorityClass
3980x23ebeGetPrivateProfileIntA
3990x22586GetPrivateProfileIntW
4000x22326GetPrivateProfileSectionA
4010x22159GetPrivateProfileSectionNamesA
4020x5b8f2GetPrivateProfileSectionNamesW
4030x2104dGetPrivateProfileSectionW
4040x22a54GetPrivateProfileStringA
4050xfb5dGetPrivateProfileStringW
4060x5b913GetPrivateProfileStructA
4070x5ba7cGetPrivateProfileStructW
4080xac28GetProcAddress
4090x25992GetProcessAffinityMask
4100x60f66GetProcessHandleCount
4110xaa49GetProcessHeap
4120x5e7bbGetProcessHeaps
4130x60a55GetProcessId
4140x60f35GetProcessIoCounters
4150x60efbGetProcessPriorityBoost
4160x60c59GetProcessShutdownParameters
4170x237baGetProcessTimes
4180x12996GetProcessVersion
4190x60e48GetProcessWorkingSetSize
4200x23f37GetProfileIntA
4210x257a0GetProfileIntW
4220x5bebaGetProfileSectionA
4230x5bef3GetProfileSectionW
4240x22d47GetProfileStringA
4250x25a62GetProfileStringW
4260xcbb0GetQueuedCompletionStatus
4270x21f87GetShortPathNameA
4280x219beGetShortPathNameW
4290x1eeeGetStartupInfoA
4300x1e50GetStartupInfoW
4310x12ca9GetStdHandle
4320x38cb9GetStringTypeA
4330x75d7fGetStringTypeExA
4340xc958GetStringTypeExW
4350xa480GetStringTypeW
4360xc865GetSystemDefaultLCID
4370x1e835GetSystemDefaultLangID
4380x12da8GetSystemDefaultUILanguage
4390x14c63GetSystemDirectoryA
4400x1fa55GetSystemDirectoryW
4410x12ac6GetSystemInfo
4420x1f3e7GetSystemPowerStatus
4430x60fa0GetSystemRegistryQuota
4440x176bGetSystemTime
4450x339d3GetSystemTimeAdjustment
4460x17e5GetSystemTimeAsFileTime
4470x60d02GetSystemTimes
4480x228c9GetSystemWindowsDirectoryA
4490xabb1GetSystemWindowsDirectoryW
4500x2570eGetSystemWow64DirectoryA
4510x2570eGetSystemWow64DirectoryW
4520x6ae32GetTapeParameters
4530x6acfcGetTapePosition
4540x6aecfGetTapeStatus
4550x606dfGetTempFileNameA
4560x217d7GetTempFileNameW
4570x221cfGetTempPathA
4580x1e5e9GetTempPathW
4590x38eebGetThreadContext
4600x62a31GetThreadIOPendingFlag
4610xa405GetThreadLocale
4620xcc26GetThreadPriority
4630x6280fGetThreadPriorityBoost
4640x59fd0GetThreadSelectorEntry
4650x629c4GetThreadTimes
4660x92acGetTickCount
4670x26f4bGetTimeFormatA
4680x284d5GetTimeFormatW
4690x394aeGetTimeZoneInformation
4700x9fc0GetUserDefaultLCID
4710x1e685GetUserDefaultLangID
4720x12de0GetUserDefaultUILanguage
4730x301ceGetUserGeoID
4740x674b9GetVDMCurrentDirectories
4750x114abGetVersion
4760x12851GetVersionExA
4770xacedGetVersionExW
4780x27052GetVolumeInformationA
4790xfbe5GetVolumeInformationW
4800x69bd1GetVolumeNameForVolumeMountPointA
4810x23a71GetVolumeNameForVolumeMountPointW
4820x33caeGetVolumePathNameA
4830x33a18GetVolumePathNameW
4840x69d70GetVolumePathNamesForVolumeNameA
4850x24c3cGetVolumePathNamesForVolumeNameW
4860x2293bGetWindowsDirectoryA
4870xac03GetWindowsDirectoryW
4880x5e5aaGetWriteWatch
4890x23039GlobalAddAtomA
4900x1026cGlobalAddAtomW
4910xff2dGlobalAlloc
4920x5e450GlobalCompact
4930x1e19aGlobalDeleteAtom
4940x23094GlobalFindAtomA
4950x39374GlobalFindAtomW
4960x5e466GlobalFix
4970x278f0GlobalFlags
4980xfe2fGlobalFree
4990x5b073GlobalGetAtomNameA
5000x34bd9GlobalGetAtomNameW
5010x38f36GlobalHandle
5020x10119GlobalLock
5030x1f1b7GlobalMemoryStatus
5040x238a8GlobalMemoryStatusEx
5050x125c9GlobalReAlloc
5060x39166GlobalSize
5070x5e4aaGlobalUnWire
5080x5e480GlobalUnfix
5090x10082GlobalUnlock
5100x5e49aGlobalWire
5110x6374eHeap32First
5120x63609Heap32ListFirst
5130x636b7Heap32ListNext
5140x63868Heap32Next
5150x9058HeapAlloc
5160x230aeHeapCompact
5170x12929HeapCreate
5180x5e6a9HeapCreateTagsW
5190x11110HeapDestroy
5200x5e678HeapExtend
5210x906eHeapFree
5220x5e7ccHeapLock
5230x5e905HeapQueryInformation
5240x5e6baHeapQueryTagW
5250x9080HeapReAlloc
5260x364ecHeapSetInformation
5270x9098HeapSize
5280x5e6cbHeapSummary
5290x5e7e6HeapUnlock
5300x5e727HeapUsage
5310x5e79bHeapValidate
5320x5e800HeapWalk
5330x3583fInitAtomTable
5340x9fa1InitializeCriticalSection
5350xb6b1InitializeCriticalSectionAndSpinCount
5360x90aaInitializeSListHead
5370x97c6InterlockedCompareExchange
5380x9794InterlockedDecrement
5390x97adInterlockedExchange
5400x97dfInterlockedExchangeAdd
5410x90c7InterlockedFlushSList
5420x977bInterlockedIncrement
5430x90e6InterlockedPopEntrySList
5440x9108InterlockedPushEntrySList
5450x72ec5InvalidateConsoleDIBits
5460xbb57IsBadCodePtr
5470x1fe82IsBadHugeReadPtr
5480xc91cIsBadHugeWritePtr
5490x9eb3IsBadReadPtr
5500x1f04cIsBadStringPtrA
5510xa5cdIsBadStringPtrW
5520x9f29IsBadWritePtr
5530xb664IsDBCSLeadByte
5540x7a17aIsDBCSLeadByteEx
5550x12e03IsDebuggerPresent
5560x6af94IsProcessInJob
5570xacb2IsProcessorFeaturePresent
5580x60940IsSystemResumeAutomatic
5590x112e3IsValidCodePage
5600x7609fIsValidLanguageGroup
5610x1c153IsValidLocale
5620x761abIsValidUILanguage
5630x14f11IsWow64Process
5640x32e2bLCMapStringA
5650xcec4LCMapStringW
5660x6512bLZClose
5670x650b4LZCloseFile
5680x590dcLZCopy
5690x64bf5LZCreateFileW
5700x7e68aLZDone
5710x64a9aLZInit
5720x64cc3LZOpenFileA
5730x64d84LZOpenFileW
5740x64ea6LZRead
5750x64e1bLZSeek
5760x7e692LZStart
5770x912bLeaveCriticalSection
5780x1d77LoadLibraryA
5790x1d4fLoadLibraryExA
5800x1af1LoadLibraryExW
5810xacd3LoadLibraryW
5820x6125eLoadModule
5830xa065LoadResource
5840x99bdLocalAlloc
5850x5e450LocalCompact
5860x395eaLocalFileTimeToFileTime
5870x557e6LocalFlags
5880x995dLocalFree
5890x558e1LocalHandle
5900x22d88LocalLock
5910x1e2b1LocalReAlloc
5920x5e662LocalShrink
5930x2237cLocalSize
5940x22e21LocalUnlock
5950x1fe92LockFile
5960x24f7fLockFileEx
5970xc6cfLockResource
5980x5e54eMapUserPhysicalPages
5990x5e57cMapUserPhysicalPagesScatter
6000xb78dMapViewOfFile
6010xb71eMapViewOfFileEx
6020x63ed8Module32First
6030x63e1fModule32FirstW
6040x6405dModule32Next
6050x63fbcModule32NextW
6060x22294MoveFileA
6070x5d2a3MoveFileExA
6080x3991fMoveFileExW
6090x39659MoveFileW
6100x222b3MoveFileWithProgressA
6110x21565MoveFileWithProgressW
6120x97f4MulDiv
6130x9cadMultiByteToWideChar
6140x14cd5NlsConvertIntegerToString
6150x39230NlsGetCacheUpdateCount
6160x76079NlsResetProcessLocale
6170x5feb2NumaVirtualQueryNode
6180x111f9OpenConsoleW
6190x37a71OpenDataFile
6200x12f7cOpenEventA
6210x12eb0OpenEventW
6220x26b99OpenFile
6230xb9feOpenFileMappingA
6240xb962OpenFileMappingW
6250x6b068OpenJobObjectA
6260x6aef0OpenJobObjectW
6270xec1bOpenMutexA
6280xeb95OpenMutexW
6290x1e079OpenProcess
6300x23e0aOpenProfileUserMapping
6310x347bbOpenSemaphoreA
6320x25650OpenSemaphoreW
6330x38403OpenThread
6340x618d0OpenWaitableTimerA
6350x61765OpenWaitableTimerW
6360x59b5cOutputDebugStringA
6370x5a215OutputDebugStringW
6380x7313dPeekConsoleInputA
6390x73160PeekConsoleInputW
6400x5f6efPeekNamedPipe
6410xce70PostQueuedCompletionStatus
6420x6ad58PrepareTape
6430x2fd35PrivCopyFileExW
6440x5cec9PrivMoveFileIdentityW
6450x63a8dProcess32First
6460x639d4Process32FirstW
6470x63c00Process32Next
6480x63b5fProcess32NextW
6490x12cf9ProcessIdToSessionId
6500x340fePulseEvent
6510x65972PurgeComm
6520x16053QueryActCtxW
6530x9149QueryDepthSList
6540x5c14cQueryDosDeviceA
6550x2661eQueryDosDeviceW
6560x35879QueryInformationJobObject
6570x3317fQueryMemoryResourceNotification
6580xa417QueryPerformanceCounter
6590x256daQueryPerformanceFrequency
6600x5b504QueryWin31IniFilesMappedToRegistry
6610x34122QueueUserAPC
6620x1e0faQueueUserWorkItem
6630x1eae1RaiseException
6640x716cdReadConsoleA
6650x73183ReadConsoleInputA
6660x731c9ReadConsoleInputExA
6670x731edReadConsoleInputExW
6680x731a6ReadConsoleInputW
6690x724b5ReadConsoleOutputA
6700x729d5ReadConsoleOutputAttribute
6710x72989ReadConsoleOutputCharacterA
6720x729afReadConsoleOutputCharacterW
6730x72491ReadConsoleOutputW
6740x7171cReadConsoleW
6750x1fd5fReadDirectoryChangesW
6760x180eReadFile
6770x384c5ReadFileEx
6780x36e99ReadFileScatter
6790x21ccReadProcessMemory
6800x74769RegisterConsoleIME
6810x74579RegisterConsoleOS2
6820x71772RegisterConsoleVDM
6830x16d06RegisterWaitForInputIdle
6840x25c7dRegisterWaitForSingleObject
6850x35936RegisterWaitForSingleObjectEx
6860x5e43aRegisterWowBaseHandlers
6870x67619RegisterWowExec
6880x12dcfReleaseActCtx
6890x24a7ReleaseMutex
6900xc8c4ReleaseSemaphore
6910x5b001RemoveDirectoryA
6920x328fdRemoveDirectoryW
6930x58e34RemoveLocalAlternateComputerNameA
6940x58d53RemoveLocalAlternateComputerNameW
6950x9162RemoveVectoredExceptionHandler
6960x38736ReplaceFile
6970x5e0e7ReplaceFileA
6980x38736ReplaceFileW
6990x6094fRequestDeviceWakeup
7000x608d4RequestWakeupLatency
7010x9c4cResetEvent
7020x5e5e3ResetWriteWatch
7030x918aRestoreLastError
7040x1e92aResumeThread
7050x91a9RtlCaptureContext
7060x91c1RtlCaptureStackBackTrace
7070x91e0RtlFillMemory
7080x91f4RtlMoveMemory
7090x9208RtlUnwind
7100x9218RtlZeroMemory
7110x73bd1ScrollConsoleScreenBufferA
7120x73bf5ScrollConsoleScreenBufferW
7130x26a01SearchPathA
7140xe8dcSearchPathW
7150x79473SetCPGlobal
7160x75786SetCalendarInfoA
7170x769cbSetCalendarInfoW
7180x59815SetClientTimeZoneInformation
7190x6b7d5SetComPlusPackageInstallStatus
7200x659fcSetCommBreak
7210x66b1bSetCommConfig
7220x65a14SetCommMask
7230x65ab3SetCommState
7240x65dbbSetCommTimeouts
7250x5800cSetComputerNameA
7260x58124SetComputerNameExA
7270x57f8bSetComputerNameExW
7280x57e65SetComputerNameW
7290x73758SetConsoleActiveScreenBuffer
7300x73df3SetConsoleCP
7310x70675SetConsoleCommandHistoryMode
7320x1b25bSetConsoleCtrlHandler
7330x71b9aSetConsoleCursor
7340x73934SetConsoleCursorInfo
7350x7442fSetConsoleCursorMode
7360x738baSetConsoleCursorPosition
7370x71d50SetConsoleDisplayMode
7380x73c95SetConsoleFont
7390x71999SetConsoleHardwareState
7400x73d0fSetConsoleIcon
7410x70a58SetConsoleInputExeNameA
7420x1b025SetConsoleInputExeNameW
7430x71a19SetConsoleKeyShortcuts
7440x74369SetConsoleLocalEUDC
7450x7ee68SetConsoleMaximumWindowSize
7460x71ae0SetConsoleMenuClose
7470x1aec0SetConsoleMode
7480x74d89SetConsoleNlsMode
7490x703d5SetConsoleNumberOfCommandsA
7500x703baSetConsoleNumberOfCommandsW
7510x745edSetConsoleOS2OemFormat
7520x73f11SetConsoleOutputCP
7530x71e79SetConsolePalette
7540x73840SetConsoleScreenBufferSize
7550x73c19SetConsoleTextAttribute
7560x70711SetConsoleTitleA
7570x36a52SetConsoleTitleW
7580x73a01SetConsoleWindowInfo
7590x922cSetCriticalSectionSpinCount
7600x23053SetCurrentDirectoryA
7610xf4eeSetCurrentDirectoryW
7620x66881SetDefaultCommConfigA
7630x66789SetDefaultCommConfigW
7640x5eb26SetDllDirectoryA
7650x5ea90SetDllDirectoryW
7660x1f850SetEndOfFile
7670x226a9SetEnvironmentVariableA
7680x103b8SetEnvironmentVariableW
7690xaa97SetErrorMode
7700x9c28SetEvent
7710x26188SetFileApisToANSI
7720x1cd46SetFileApisToOEM
7730x1fb44SetFileAttributesA
7740x1fc05SetFileAttributesW
7750x10da6SetFilePointer
7760x1f475SetFilePointerEx
7770x5c6a4SetFileShortNameA
7780x5c5d7SetFileShortNameW
7790x1f955SetFileTime
7800x5c581SetFileValidData
7810x5e3a7SetFirmwareEnvironmentVariableA
7820x5e28cSetFirmwareEnvironmentVariableW
7830x2570eSetHandleContext
7840xc6cfSetHandleCount
7850x254cdSetHandleInformation
7860x34f96SetInformationJobObject
7870x75183SetLastConsoleEventActive
7880x9251SetLastError
7890x59093SetLocalPrimaryComputerNameA
7900x58e7dSetLocalPrimaryComputerNameW
7910x556f9SetLocalTime
7920x7557bSetLocaleInfoA
7930x76b23SetLocaleInfoW
7940x34f3dSetMailslotInfo
7950x6099fSetMessageWaitingIndicator
7960x1f654SetNamedPipeHandleState
7970x34b53SetPriorityClass
7980x60e90SetProcessAffinityMask
7990x60ec0SetProcessPriorityBoost
8000x34661SetProcessShutdownParameters
8010x27456SetProcessWorkingSetSize
8020x1d8cbSetStdHandle
8030x6088bSetSystemPowerState
8040x591a2SetSystemTime
8050x59368SetSystemTimeAdjustment
8060x6ae8eSetTapeParameters
8070x6acb6SetTapePosition
8080x61944SetTermsrvAppInstallMode
8090x2571fSetThreadAffinityMask
8100x62849SetThreadContext
8110x26978SetThreadExecutionState
8120x62a70SetThreadIdealProcessor
8130x1b882SetThreadLocale
8140xcc67SetThreadPriority
8150x627d4SetThreadPriorityBoost
8160x1af28SetThreadUILanguage
8170x59242SetTimeZoneInformation
8180x35b1dSetTimerQueueTimer
8190x10386SetUnhandledExceptionFilter
8200x78910SetUserGeoID
8210x67384SetVDMCurrentDirectories
8220x607cdSetVolumeLabelA
8230x60279SetVolumeLabelW
8240x69d01SetVolumeMountPointA
8250x69005SetVolumeMountPointW
8260x9608SetWaitableTimer
8270x65337SetupComm
8280x71c14ShowConsoleCursor
8290x236d7SignalObjectAndWait
8300xbaf1SizeofResource
8310x2442Sleep
8320x239cSleepEx
8330x38f10SuspendThread
8340x10879SwitchToFiber
8350x1e950SwitchToThread
8360x10d34SystemTimeToFileTime
8370x33dc1SystemTimeToTzSpecificLocalTime
8380x6af67TerminateJobObject
8390x1e16TerminateProcess
8400x1cacbTerminateThread
8410x2125eTermsrvAppInstallMode
8420x63cd2Thread32First
8430x63d86Thread32Next
8440x12b0fTlsAlloc
8450x13453TlsFree
8460x9750TlsGetValue
8470x9bf5TlsSetValue
8480x63994Toolhelp32ReadProcessMemory
8490x1f54eTransactNamedPipe
8500x65e66TransmitCommChar
8510x5ea2eTrimVirtualBuffer
8520x926cTryEnterCriticalSection
8530x593a5TzSpecificLocalTimeToSystemTime
8540x5ecd0UTRegister
8550x7e625UTUnRegister
8560x62b8aUnhandledExceptionFilter
8570x1fdddUnlockFile
8580x1fe1cUnlockFileEx
8590xb7fcUnmapViewOfFile
8600x74836UnregisterConsoleIME
8610x34098UnregisterWait
8620x25cf3UnregisterWaitEx
8630x6f35cUpdateResourceA
8640x6f255UpdateResourceW
8650x75194VDMConsoleOperation
8660x67a89VDMOperationStarted
8670x7a711ValidateLCType
8680x37c2cValidateLocale
8690x2953bVerLanguageNameA
8700x295c3VerLanguageNameW
8710x928dVerSetConditionMask
8720x1ab7aVerifyConsoleIoHandle
8730x5ec26VerifyVersionInfoA
8740x23a0fVerifyVersionInfoW
8750x9a81VirtualAlloc
8760x9aa2VirtualAllocEx
8770x5ea51VirtualBufferExceptionHandler
8780x9b14VirtualFree
8790x9b32VirtualFreeEx
8800x359efVirtualLock
8810x1ad0VirtualProtect
8820x1a5dVirtualProtectEx
8830xb859VirtualQuery
8840xb828VirtualQueryEx
8850x5e4baVirtualUnlock
8860x1305eWTSGetActiveConsoleSessionId
8870x65ef0WaitCommEvent
8880x5a268WaitForDebugEvent
8890x9c6eWaitForMultipleObjects
8900x952aWaitForMultipleObjectsEx
8910x2530WaitForSingleObject
8920x2550WaitForSingleObjectEx
8930x5fa19WaitNamedPipeA
8940x343d8WaitNamedPipeW
8950xa0c7WideCharToMultiByte
8960x6114dWinExec
8970x1cbedWriteConsoleA
8980x72075WriteConsoleInputA
8990x71b54WriteConsoleInputVDMA
9000x71b77WriteConsoleInputVDMW
9010x72098WriteConsoleInputW
9020x727f5WriteConsoleOutputA
9030x72ba1WriteConsoleOutputAttribute
9040x72b55WriteConsoleOutputCharacterA
9050x72b7bWriteConsoleOutputCharacterW
9060x727d1WriteConsoleOutputW
9070x39882WriteConsoleW
9080x10f9fWriteFile
9090x5c4e1WriteFileEx
9100x36decWriteFileGather
9110x5b864WritePrivateProfileSectionA
9120x5b8abWritePrivateProfileSectionW
9130x22bb7WritePrivateProfileStringA
9140x210dcWritePrivateProfileStringW
9150x5bc06WritePrivateProfileStructA
9160x5bd48WritePrivateProfileStructW
9170x220fWriteProcessMemory
9180x5bed8WriteProfileSectionA
9190x5bf11WriteProfileSectionW
9200x5be9cWriteProfileStringA
9210x231d5WriteProfileStringW
9220x6adf8WriteTapemark
9230x6b36bZombifyActCtx
9240x39418_hread
9250x38d93_hwrite
9260x39308_lclose
9270x27778_lcreat
9280x39450_llseek
9290x5e610_lopen
9300x39418_lread
9310x38d93_lwrite
9320x38fb9lstrcat
9330x38fb9lstrcatA
9340x1114alstrcatW
9350x1ee79lstrcmp
9360x1ee79lstrcmpA
9370xa859lstrcmpW
9380xb929lstrcmpi
9390xb929lstrcmpiA
9400xa823lstrcmpiW
9410xc729lstrcpy
9420xc729lstrcpyA
9430xb8eclstrcpyW
9440x10311lstrcpyn
9450x10311lstrcpynA
9460xb877lstrcpynW
9470xc6e0lstrlen
9480xc6e0lstrlenA
9490x9a39lstrlenW
module_nameKERNEL32.dll
flags0
timestamp2004-08-04 06:14:57
version0.0
ordinal_base1
nFunctions949
nNames949
Names(949)0x3528
Functions(949)0x2654
NameOrdinals(949)0x43fc

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows NT BASE API Client DLL
FileVersion5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
InternalNamekernel32
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamekernel32
ProductNameMicrosoft® Windows® Operating System
ProductVersion5.1.2600.2180

VS_FIXEDFILEINFO

FileVersion5.1.2600.2180
ProductVersion5.1.2600.2180
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0983552DLL08/04/2004 07:56:36#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x280