CoCalc -- supported_imports

GitHub Repository: chromium/chromium
Path: blob/main/chrome/test/delayload/supported_imports_10.0.10240.txt
¹¹²⁵⁴⁸ views
1
# Output of dumpbin /exports *.dll for system dlls that Chrome imports.
2
# Consumed by generate_allowed_imports.py to build delayload_unittest.
3

4
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
5
Copyright (C) Microsoft Corporation.  All rights reserved.
6

7

8
Dump of file advapi32.dll
9

10
File Type: DLL
11

12
  Section contains the following exports for ADVAPI32.dll
13

14
    00000000 characteristics
15
    559F308F time date stamp Thu Jul  9 19:40:15 2015
16
        0.00 version
17
        1000 ordinal base
18
         850 number of functions
19
         849 number of names
20

21
    ordinal hint RVA      name
22

23
       1002    0          A_SHAFinal (forwarded to NTDLL.A_SHAFinal)
24
       1003    1          A_SHAInit (forwarded to NTDLL.A_SHAInit)
25
       1004    2          A_SHAUpdate (forwarded to NTDLL.A_SHAUpdate)
26
       1005    3 00045E70 AbortSystemShutdownA
27
       1006    4 00045EF0 AbortSystemShutdownW
28
       1007    5 00002690 AccessCheck
29
       1008    6 0002D250 AccessCheckAndAuditAlarmA
30
       1009    7 0002FD80 AccessCheckAndAuditAlarmW
31
       1010    8 00030080 AccessCheckByType
32
       1011    9 0002D3B0 AccessCheckByTypeAndAuditAlarmA
33
       1012    A 0002FDF0 AccessCheckByTypeAndAuditAlarmW
34
       1013    B 00030010 AccessCheckByTypeResultList
35
       1014    C 0002D540 AccessCheckByTypeResultListAndAuditAlarmA
36
       1015    D 0002D6D0 AccessCheckByTypeResultListAndAuditAlarmByHandleA
37
       1016    E 0002FEA0 AccessCheckByTypeResultListAndAuditAlarmByHandleW
38
       1017    F 0002FF60 AccessCheckByTypeResultListAndAuditAlarmW
39
       1018   10 000189A0 AddAccessAllowedAce
40
       1019   11 00018FB0 AddAccessAllowedAceEx
41
       1020   12 000300F0 AddAccessAllowedObjectAce
42
       1021   13 00030110 AddAccessDeniedAce
43
       1022   14 00030100 AddAccessDeniedAceEx
44
       1023   15 00030120 AddAccessDeniedObjectAce
45
       1024   16 0001B330 AddAce
46
       1025   17 00030140 AddAuditAccessAce
47
       1026   18 00030130 AddAuditAccessAceEx
48
       1027   19 00030150 AddAuditAccessObjectAce
49
       1028   1A 00049C50 AddConditionalAce
50
       1029   1B          AddMandatoryAce (forwarded to KERNELBASE.AddMandatoryAce)
51
       1030   1C 0002EF60 AddUsersToEncryptedFile
52
       1031   1D 0002EFE0 AddUsersToEncryptedFileEx
53
       1032   1E 00030160 AdjustTokenGroups
54
       1033   1F 000186C0 AdjustTokenPrivileges
55
       1034   20 000177B0 AllocateAndInitializeSid
56
       1035   21 00030170 AllocateLocallyUniqueId
57
       1036   22 00030180 AreAllAccessesGranted
58
       1037   23 00030190 AreAnyAccessesGranted
59
       1038   24 000301A0 AuditComputeEffectivePolicyBySid
60
       1039   25 00031C80 AuditComputeEffectivePolicyByToken
61
       1040   26 000301B0 AuditEnumerateCategories
62
       1041   27 000301C0 AuditEnumeratePerUserPolicy
63
       1042   28 000301D0 AuditEnumerateSubCategories
64
       1043   29 0001CA30 AuditFree
65
       1044   2A 00031DB0 AuditLookupCategoryGuidFromCategoryId
66
       1045   2B 00031DF0 AuditLookupCategoryIdFromCategoryGuid
67
       1046   2C 00031E60 AuditLookupCategoryNameA
68
       1047   2D 000301E0 AuditLookupCategoryNameW
69
       1048   2E 00031EF0 AuditLookupSubCategoryNameA
70
       1049   2F 000301F0 AuditLookupSubCategoryNameW
71
       1050   30 00031F80 AuditQueryGlobalSaclA
72
       1051   31 00030200 AuditQueryGlobalSaclW
73
       1052   32 00030210 AuditQueryPerUserPolicy
74
       1053   33 00030220 AuditQuerySecurity
75
       1054   34 0001CA20 AuditQuerySystemPolicy
76
       1055   35 00032040 AuditSetGlobalSaclA
77
       1056   36 00030230 AuditSetGlobalSaclW
78
       1057   37 00030240 AuditSetPerUserPolicy
79
       1058   38 00030250 AuditSetSecurity
80
       1059   39 00030260 AuditSetSystemPolicy
81
       1060   3A 0002C1B0 BackupEventLogA
82
       1061   3B 0002C220 BackupEventLogW
83
       1062   3C 00046380 BaseRegCloseKey
84
       1063   3D 000463A0 BaseRegCreateKey
85
       1064   3E 00046410 BaseRegDeleteKeyEx
86
       1065   3F 00046450 BaseRegDeleteValue
87
       1066   40 00046480 BaseRegFlushKey
88
       1067   41 000464A0 BaseRegGetVersion
89
       1068   42 000464D0 BaseRegLoadKey
90
       1069   43 00046500 BaseRegOpenKey
91
       1070   44 00046540 BaseRegRestoreKey
92
       1071   45 00046570 BaseRegSaveKeyEx
93
       1072   46 000465B0 BaseRegSetKeySecurity
94
       1073   47 000465E0 BaseRegSetValue
95
       1074   48 00046620 BaseRegUnLoadKey
96
       1075   49 0001C940 BuildExplicitAccessWithNameA
97
       1076   4A 0001C940 BuildExplicitAccessWithNameW
98
       1077   4B 0003D000 BuildImpersonateExplicitAccessWithNameA
99
       1078   4C 0003D000 BuildImpersonateExplicitAccessWithNameW
100
       1079   4D 0003DC30 BuildImpersonateTrusteeA
101
       1080   4E 0003DC30 BuildImpersonateTrusteeW
102
       1081   4F 0003D030 BuildSecurityDescriptorA
103
       1082   50 00017FB0 BuildSecurityDescriptorW
104
       1083   51 0001C970 BuildTrusteeWithNameA
105
       1084   52 0001C970 BuildTrusteeWithNameW
106
       1085   53 0003DC50 BuildTrusteeWithObjectsAndNameA
107
       1086   54 0003DC50 BuildTrusteeWithObjectsAndNameW
108
       1087   55 0003DCA0 BuildTrusteeWithObjectsAndSidA
109
       1088   56 0003DCA0 BuildTrusteeWithObjectsAndSidW
110
       1089   57 000191E0 BuildTrusteeWithSidA
111
       1090   58 000191E0 BuildTrusteeWithSidW
112
       1091   59 0003E3A0 CancelOverlappedAccess
113
       1092   5A 00030270 ChangeServiceConfig2A
114
       1093   5B 00030280 ChangeServiceConfig2W
115
       1094   5C 00030290 ChangeServiceConfigA
116
       1095   5D 0001C9B0 ChangeServiceConfigW
117
       1096   5E 0001BDE0 CheckForHiberboot
118
       1097   5F 000189B0 CheckTokenMembership
119
       1098   60 0002C550 ClearEventLogA
120
       1099   61 0002C5C0 ClearEventLogW
121
       1100   62 00016CC0 CloseCodeAuthzLevel
122
       1101   63 0002F080 CloseEncryptedFileRaw
123
       1102   64 0001C540 CloseEventLog
124
       1103   65 00018FA0 CloseServiceHandle
125
       1104   66 0005DFE0 CloseThreadWaitChainSession
126
       1105   67 00019250 CloseTrace
127
       1106   68 00001E20 CommandLineFromMsiDescriptor
128
       1107   69 00003BA0 ComputeAccessTokenFromCodeAuthzLevel
129
       1108   6A 0001DAE0 ControlService
130
       1109   6B 00030300 ControlServiceExA
131
       1110   6C 00030310 ControlServiceExW
132
       1111   6D 0001E6F0 ControlTraceA
133
       1112   6E 000192A0 ControlTraceW
134
       1113   6F 0003E420 ConvertAccessToSecurityDescriptorA
135
       1114   70 0003E5A0 ConvertAccessToSecurityDescriptorW
136
       1115   71 0004A3A0 ConvertSDToStringSDDomainW
137
       1116   72 0004A430 ConvertSDToStringSDRootDomainA
138
       1117   73 0004A580 ConvertSDToStringSDRootDomainW
139
       1118   74 0003E640 ConvertSecurityDescriptorToAccessA
140
       1119   75 0003E640 ConvertSecurityDescriptorToAccessNamedA
141
       1120   76 0003E680 ConvertSecurityDescriptorToAccessNamedW
142
       1121   77 0003E680 ConvertSecurityDescriptorToAccessW
143
       1122   78 0004A600 ConvertSecurityDescriptorToStringSecurityDescriptorA
144
       1123   79 0004A730 ConvertSecurityDescriptorToStringSecurityDescriptorW
145
       1124   7A 00016A30 ConvertSidToStringSidA
146
       1125   7B 00016B40 ConvertSidToStringSidW
147
       1126   7C 0004A7F0 ConvertStringSDToSDDomainA
148
       1127   7D 0001CF80 ConvertStringSDToSDDomainW
149
       1128   7E 0004A900 ConvertStringSDToSDRootDomainA
150
       1129   7F 0004A9B0 ConvertStringSDToSDRootDomainW
151
       1130   80 0001D610 ConvertStringSecurityDescriptorToSecurityDescriptorA
152
       1131   81 00010940 ConvertStringSecurityDescriptorToSecurityDescriptorW
153
       1132   82 0004AA20 ConvertStringSidToSidA
154
       1133   83 00011280 ConvertStringSidToSidW
155
       1134   84 00030320 ConvertToAutoInheritPrivateObjectSecurity
156
       1135   85 00017860 CopySid
157
       1136   86 00036DA0 CreateCodeAuthzLevel
158
       1137   87 0001B0A0 CreatePrivateObjectSecurity
159
       1138   88 00030330 CreatePrivateObjectSecurityEx
160
       1139   89 00030340 CreatePrivateObjectSecurityWithMultipleInheritance
161
       1140   8A 00030350 CreateProcessAsUserA
162
       1141   8B 00018E50 CreateProcessAsUserW
163
       1142   8C 00031A10 CreateProcessWithLogonW
164
       1143   8D 00002970 CreateProcessWithTokenW
165
       1144   8E 000303C0 CreateRestrictedToken
166
       1145   8F 000303D0 CreateServiceA
167
       1146   90 00030460 CreateServiceW
168
       1147   91          CreateTraceInstanceId (forwarded to ntdll.EtwCreateTraceInstanceId)
169
       1148   92 00019230 CreateWellKnownSid
170
       1149   93 000304F0 CredBackupCredentials
171
       1150   94 00030500 CredDeleteA
172
       1151   95 00030510 CredDeleteW
173
       1152   96 00030520 CredEncryptAndMarshalBinaryBlob
174
       1153   97 00030530 CredEnumerateA
175
       1154   98 00030540 CredEnumerateW
176
       1155   99 00030550 CredFindBestCredentialA
177
       1156   9A 00030560 CredFindBestCredentialW
178
       1157   9B 00030570 CredFree
179
       1158   9C 00030580 CredGetSessionTypes
180
       1159   9D 00030590 CredGetTargetInfoA
181
       1160   9E 000305A0 CredGetTargetInfoW
182
       1161   9F 000323B0 CredIsMarshaledCredentialA
183
       1162   A0 000305B0 CredIsMarshaledCredentialW
184
       1163   A1 000305C0 CredIsProtectedA
185
       1164   A2 000305D0 CredIsProtectedW
186
       1165   A3 000305E0 CredMarshalCredentialA
187
       1166   A4 000305F0 CredMarshalCredentialW
188
       1167   A5 00030610 CredProfileLoaded
189
       1168   A6 00030600 CredProfileLoadedEx
190
       1169   A7 00030620 CredProfileUnloaded
191
       1170   A8 00030630 CredProtectA
192
       1171   A9 00030640 CredProtectW
193
       1172   AA 00030650 CredReadA
194
       1173   AB 00030660 CredReadByTokenHandle
195
       1174   AC 00030670 CredReadDomainCredentialsA
196
       1175   AD 00030680 CredReadDomainCredentialsW
197
       1176   AE 00030690 CredReadW
198
       1177   AF 000323F0 CredRenameA
199
       1178   B0 000323F0 CredRenameW
200
       1179   B1 000306A0 CredRestoreCredentials
201
       1180   B2 000306B0 CredUnmarshalCredentialA
202
       1181   B3 000306C0 CredUnmarshalCredentialW
203
       1182   B4 000306D0 CredUnprotectA
204
       1183   B5 000306E0 CredUnprotectW
205
       1184   B6 000306F0 CredWriteA
206
       1185   B7 00030700 CredWriteDomainCredentialsA
207
       1186   B8 00030710 CredWriteDomainCredentialsW
208
       1187   B9 00030720 CredWriteW
209
       1188   BA 00030730 CredpConvertCredential
210
       1189   BB 00030740 CredpConvertOneCredentialSize
211
       1190   BC 00030750 CredpConvertTargetInfo
212
       1191   BD 00030760 CredpDecodeCredential
213
       1192   BE 00030770 CredpEncodeCredential
214
       1193   BF 00030780 CredpEncodeSecret
215
       1194   C0 00018E10 CryptAcquireContextA
216
       1195   C1 000189E0 CryptAcquireContextW
217
       1196   C2 00030790 CryptContextAddRef
218
       1197   C3 00017BF0 CryptCreateHash
219
       1198   C4 00019140 CryptDecrypt
220
       1199   C5 000307A0 CryptDeriveKey
221
       1200   C6 000186A0 CryptDestroyHash
222
       1201   C7 000186B0 CryptDestroyKey
223
       1202   C8 000307B0 CryptDuplicateHash
224
       1203   C9 000307C0 CryptDuplicateKey
225
       1204   CA 0001D7E0 CryptEncrypt
226
       1205   CB 000307D0 CryptEnumProviderTypesA
227
       1206   CC 000307E0 CryptEnumProviderTypesW
228
       1207   CD 000307F0 CryptEnumProvidersA
229
       1208   CE 00030800 CryptEnumProvidersW
230
       1209   CF 00017B50 CryptExportKey
231
       1210   D0 0001CAB0 CryptGenKey
232
       1211   D1 000190D0 CryptGenRandom
233
       1212   D2 00030810 CryptGetDefaultProviderA
234
       1213   D3 00019060 CryptGetDefaultProviderW
235
       1214   D4 00017970 CryptGetHashParam
236
       1215   D5 0001DAD0 CryptGetKeyParam
237
       1216   D6 00030820 CryptGetProvParam
238
       1217   D7 0001DB20 CryptGetUserKey
239
       1218   D8 00017D80 CryptHashData
240
       1219   D9 00030830 CryptHashSessionKey
241
       1220   DA 00017B40 CryptImportKey
242
       1221   DB 00018EE0 CryptReleaseContext
243
       1222   DC 00030840 CryptSetHashParam
244
       1223   DD 00030850 CryptSetKeyParam
245
       1224   DE 00030860 CryptSetProvParam
246
       1225   DF 00030870 CryptSetProviderA
247
       1226   E0 00030880 CryptSetProviderExA
248
       1227   E1 00030890 CryptSetProviderExW
249
       1228   E2 000308A0 CryptSetProviderW
250
       1229   E3 0001DA70 CryptSignHashA
251
       1230   E4 0001DAC0 CryptSignHashW
252
       1231   E5 0001DAA0 CryptVerifySignatureA
253
       1232   E6 00018EF0 CryptVerifySignatureW
254
       1233   E7 0002F0C0 DecryptFileA
255
       1234   E8 0002F170 DecryptFileW
256
       1235   E9 00018ED0 DeleteAce
257
       1236   EA 000308B0 DeleteService
258
       1237   EB 000198B0 DeregisterEventSource
259
       1238   EC 0001B0C0 DestroyPrivateObjectSecurity
260
       1239   ED 0002F200 DuplicateEncryptionInfoFile
261
       1240   EE 0001B090 DuplicateToken
262
       1241   EF 00018F80 DuplicateTokenEx
263
       1242   F0 00050760 ElfBackupEventLogFileA
264
       1243   F1 00050850 ElfBackupEventLogFileW
265
       1244   F2 00050940 ElfChangeNotify
266
       1245   F3 00050A40 ElfClearEventLogFileA
267
       1246   F4 00050B20 ElfClearEventLogFileW
268
       1247   F5 0001C570 ElfCloseEventLog
269
       1248   F6 000198E0 ElfDeregisterEventSource
270
       1249   F7 00050BF0 ElfFlushEventLog
271
       1250   F8 00050C60 ElfNumberOfRecords
272
       1251   F9 00050D40 ElfOldestRecord
273
       1252   FA 00050E20 ElfOpenBackupEventLogA
274
       1253   FB 00050F50 ElfOpenBackupEventLogW
275
       1254   FC 00051080 ElfOpenEventLogA
276
       1255   FD 0001C2B0 ElfOpenEventLogW
277
       1256   FE 00051290 ElfReadEventLogA
278
       1257   FF 000513F0 ElfReadEventLogW
279
       1258  100 000517B0 ElfRegisterEventSourceA
280
       1259  101 000199C0 ElfRegisterEventSourceW
281
       1260  102 00051900 ElfReportEventA
282
       1261  103 00051BB0 ElfReportEventAndSourceW
283
       1262  104 00019630 ElfReportEventW
284
       1263  105 0001C770 EnableTrace
285
       1264  106 000186D0 EnableTraceEx
286
       1265  107 00019160 EnableTraceEx2
287
       1266  108 0002F2B0 EncryptFileA
288
       1267  109 0002F350 EncryptFileW
289
       1268  10A 0002F3D0 EncryptedFileKeyInfo
290
       1269  10B 0002F460 EncryptionDisable
291
       1270  10C 00049040 EnumDependentServicesA
292
       1271  10D 000308C0 EnumDependentServicesW
293
       1272  10E 000308D0 EnumDynamicTimeZoneInformation
294
       1273  10F 000491E0 EnumServiceGroupW
295
       1274  110 00049490 EnumServicesStatusA
296
       1275  111 00019D00 EnumServicesStatusExA
297
       1276  112 00002620 EnumServicesStatusExW
298
       1277  113 000496D0 EnumServicesStatusW
299
       1278  114 0001A6E0 EnumerateTraceGuids
300
       1279  115 000308E0 EnumerateTraceGuidsEx
301
       1280  116 000308F0 EqualDomainSid
302
       1281  117 00030900 EqualPrefixSid
303
       1282  118 000190E0 EqualSid
304
       1283  119 00002860 EtwLogSysConfigExtension
305
       1284  11A 00030910 EventAccessControl
306
       1285  11B 00030920 EventAccessQuery
307
       1286  11C 00030930 EventAccessRemove
308
       1287  11D          EventActivityIdControl (forwarded to ntdll.EtwEventActivityIdControl)
309
       1288  11E          EventEnabled (forwarded to ntdll.EtwEventEnabled)
310
       1289  11F          EventProviderEnabled (forwarded to ntdll.EtwEventProviderEnabled)
311
       1290  120          EventRegister (forwarded to ntdll.EtwEventRegister)
312
       1291  121          EventSetInformation (forwarded to ntdll.EtwEventSetInformation)
313
       1292  122          EventUnregister (forwarded to ntdll.EtwEventUnregister)
314
       1293  123          EventWrite (forwarded to ntdll.EtwEventWrite)
315
       1294  124          EventWriteEndScenario (forwarded to ntdll.EtwEventWriteEndScenario)
316
       1295  125          EventWriteEx (forwarded to ntdll.EtwEventWriteEx)
317
       1296  126          EventWriteStartScenario (forwarded to ntdll.EtwEventWriteStartScenario)
318
       1297  127          EventWriteString (forwarded to ntdll.EtwEventWriteString)
319
       1298  128          EventWriteTransfer (forwarded to ntdll.EtwEventWriteTransfer)
320
       1299  129 0002F4C0 FileEncryptionStatusA
321
       1300  12A 0002F570 FileEncryptionStatusW
322
       1301  12B 00030940 FindFirstFreeAce
323
       1302  12C 0002F5D0 FlushEfsCache
324
       1303  12D 00041C20 FlushTraceA
325
       1304  12E 00041C40 FlushTraceW
326
       1305  12F 0002F670 FreeEncryptedFileKeyInfo
327
       1306  130 0001F930 FreeEncryptedFileMetadata
328
       1307  131 0002F6C0 FreeEncryptionCertificateHashList
329
       1308  132 0003D1A0 FreeInheritedFromArray
330
       1309  133 000189C0 FreeSid
331
       1310  134 0003E6C0 GetAccessPermissionsForObjectA
332
       1311  135 0003E9C0 GetAccessPermissionsForObjectW
333
       1312  136 00018EC0 GetAce
334
       1313  137 0001B980 GetAclInformation
335
       1314  138 0003D200 GetAuditedPermissionsFromAclA
336
       1315  139 0003D280 GetAuditedPermissionsFromAclW
337
       1316  13A 0002D010 GetCurrentHwProfileA
338
       1317  13B 00014840 GetCurrentHwProfileW
339
       1318  13C 00030950 GetDynamicTimeZoneInformationEffectiveYears
340
       1319  13D 0003D330 GetEffectiveRightsFromAclA
341
       1320  13E 0003D3A0 GetEffectiveRightsFromAclW
342
       1321  13F 00049030 GetEncryptedFileMetadata
343
       1322  140 0001C140 GetEventLogInformation
344
       1323  141 00030960 GetExplicitEntriesFromAclA
345
       1324  142 00030960 GetExplicitEntriesFromAclW
346
       1325  143 0002D870 GetFileSecurityA
347
       1326  144 00019130 GetFileSecurityW
348
       1327  145 000376E0 GetInformationCodeAuthzLevelW
349
       1328  146 00005B60 GetInformationCodeAuthzPolicyW
350
       1329  147 0003DB10 GetInheritanceSourceA
351
       1330  148 0003D450 GetInheritanceSourceW
352
       1331  149 0001BA40 GetKernelObjectSecurity
353
       1332  14A 00017840 GetLengthSid
354
       1333  14B 00001D10 GetLocalManagedApplicationData
355
       1334  14C 00035630 GetLocalManagedApplications
356
       1335  14D 000358F0 GetManagedApplicationCategories
357
       1336  14E 00035960 GetManagedApplications
358
       1337  14F 0003DD40 GetMultipleTrusteeA
359
       1338  150 0003DD20 GetMultipleTrusteeOperationA
360
       1339  151 0003DD20 GetMultipleTrusteeOperationW
361
       1340  152 0003DD40 GetMultipleTrusteeW
362
       1341  153 0003D520 GetNamedSecurityInfoA
363
       1342  154 0003EB00 GetNamedSecurityInfoExA
364
       1343  155 0003ED60 GetNamedSecurityInfoExW
365
       1344  156 0001B990 GetNamedSecurityInfoW
366
       1345  157 0002C730 GetNumberOfEventLogRecords
367
       1346  158 0002C760 GetOldestEventLogRecord
368
       1347  159 0003F030 GetOverlappedAccessResults
369
       1348  15A 00030970 GetPrivateObjectSecurity
370
       1349  15B 0001D7D0 GetSecurityDescriptorControl
371
       1350  15C 00018F00 GetSecurityDescriptorDacl
372
       1351  15D 0001DA90 GetSecurityDescriptorGroup
373
       1352  15E 00019260 GetSecurityDescriptorLength
374
       1353  15F 00019190 GetSecurityDescriptorOwner
375
       1354  160 00030980 GetSecurityDescriptorRMControl
376
       1355  161 0001CA90 GetSecurityDescriptorSacl
377
       1356  162 00018610 GetSecurityInfo
378
       1357  163 0003F150 GetSecurityInfoExA
379
       1358  164 0003F380 GetSecurityInfoExW
380
       1359  165 00049720 GetServiceDisplayNameA
381
       1360  166 00030990 GetServiceDisplayNameW
382
       1361  167 000497C0 GetServiceKeyNameA
383
       1362  168 000309A0 GetServiceKeyNameW
384
       1363  169 0001D600 GetSidIdentifierAuthority
385
       1364  16A 0001B950 GetSidLengthRequired
386
       1365  16B 00018FC0 GetSidSubAuthority
387
       1366  16C 00018F90 GetSidSubAuthorityCount
388
       1367  16D 00049EE0 GetStringConditionFromBinary
389
       1368  16E 0005E060 GetThreadWaitChain
390
       1369  16F 000172D0 GetTokenInformation
391
       1370  170          GetTraceEnableFlags (forwarded to ntdll.EtwGetTraceEnableFlags)
392
       1371  171          GetTraceEnableLevel (forwarded to ntdll.EtwGetTraceEnableLevel)
393
       1372  172          GetTraceLoggerHandle (forwarded to ntdll.EtwGetTraceLoggerHandle)
394
       1373  173 0003DD60 GetTrusteeFormA
395
       1374  174 0003DD60 GetTrusteeFormW
396
       1375  175 0003DD80 GetTrusteeNameA
397
       1376  176 0003DD80 GetTrusteeNameW
398
       1377  177 0003DD90 GetTrusteeTypeA
399
       1378  178 0003DD90 GetTrusteeTypeW
400
       1379  179 0002EC40 GetUserNameA
401
       1380  17A 0001DA40 GetUserNameW
402
       1381  17B 000309B0 GetWindowsAccountDomainSid
403
       1382  17C          I_QueryTagInformation (forwarded to api-ms-win-service-private-l1-1-0.I_QueryTagInformation)
404
       1001  17D 00049030 I_ScGetCurrentGroupStateW
405
       1383  17E          I_ScIsSecurityProcess (forwarded to api-ms-win-service-private-l1-1-0.I_ScIsSecurityProcess)
406
       1384  17F          I_ScPnPGetServiceName (forwarded to api-ms-win-service-private-l1-1-0.I_ScPnPGetServiceName)
407
       1385  180          I_ScQueryServiceConfig (forwarded to api-ms-win-service-private-l1-1-0.I_ScQueryServiceConfig)
408
       1386  181 0001E8F0 I_ScRegisterPreshutdownRestart
409
       1387  182          I_ScSendPnPMessage (forwarded to api-ms-win-service-private-l1-1-0.I_ScSendPnPMessage)
410
       1388  183          I_ScSendTSMessage (forwarded to api-ms-win-service-private-l1-1-0.I_ScSendTSMessage)
411
       1389  184 000309C0 I_ScSetServiceBitsA
412
       1390  185 000309D0 I_ScSetServiceBitsW
413
       1391  186          I_ScValidatePnPService (forwarded to api-ms-win-service-private-l1-1-0.I_ScValidatePnPService)
414
       1392  187 0000A7D0 IdentifyCodeAuthzLevelW
415
       1393  188 000309E0 ImpersonateAnonymousToken
416
       1394  189 000190A0 ImpersonateLoggedOnUser
417
       1395  18A 000309F0 ImpersonateNamedPipeClient
418
       1396  18B 00019300 ImpersonateSelf
419
       1397  18C 00018E20 InitializeAcl
420
       1398  18D 00018E40 InitializeSecurityDescriptor
421
       1399  18E 0001B960 InitializeSid
422
       1400  18F 00045F60 InitiateShutdownA
423
       1401  190 0001BC00 InitiateShutdownW
424
       1402  191 00046060 InitiateSystemShutdownA
425
       1403  192 00046170 InitiateSystemShutdownExA
426
       1404  193 00048C50 InitiateSystemShutdownExW
427
       1405  194 00046280 InitiateSystemShutdownW
428
       1406  195 00035970 InstallApplication
429
       1407  196 00016C80 IsTextUnicode
430
       1408  197 00030A00 IsTokenRestricted
431
       1409  198 00037480 IsTokenUntrusted
432
       1410  199 00030A10 IsValidAcl
433
       1411  19A          IsValidRelativeSecurityDescriptor (forwarded to KERNELBASE.IsValidRelativeSecurityDescriptor)
434
       1412  19B 00030A20 IsValidSecurityDescriptor
435
       1413  19C 00017870 IsValidSid
436
       1414  19D 0001DB70 IsWellKnownSid
437
       1415  19E 00049860 LockServiceDatabase
438
       1416  19F 0002ED60 LogonUserA
439
       1417  1A0 0002EF00 LogonUserExA
440
       1418  1A1 00030A30 LogonUserExExW
441
       1419  1A2 0001D910 LogonUserExW
442
       1420  1A3 00016D80 LogonUserW
443
       1421  1A4 0002D920 LookupAccountNameA
444
       1422  1A5 00017680 LookupAccountNameW
445
       1423  1A6 0002DD80 LookupAccountSidA
446
       1424  1A7 00017600 LookupAccountSidW
447
       1425  1A8 0002E2B0 LookupPrivilegeDisplayNameA
448
       1426  1A9 0002E450 LookupPrivilegeDisplayNameW
449
       1427  1AA 0002E5C0 LookupPrivilegeNameA
450
       1428  1AB 000187B0 LookupPrivilegeNameW
451
       1429  1AC 0002E720 LookupPrivilegeValueA
452
       1430  1AD 0000E920 LookupPrivilegeValueW
453
       1431  1AE 0003D5C0 LookupSecurityDescriptorPartsA
454
       1432  1AF 0003D840 LookupSecurityDescriptorPartsW
455
       1433  1B0 00030AA0 LsaAddAccountRights
456
       1434  1B1 00032410 LsaAddPrivilegesToAccount
457
       1435  1B2 00032490 LsaClearAuditLog
458
       1436  1B3 00019210 LsaClose
459
       1437  1B4 00032510 LsaCreateAccount
460
       1438  1B5 00030AB0 LsaCreateSecret
461
       1439  1B6 00032610 LsaCreateTrustedDomain
462
       1440  1B7 00033EA0 LsaCreateTrustedDomainEx
463
       1441  1B8 00030AC0 LsaDelete
464
       1442  1B9 00033FE0 LsaDeleteTrustedDomain
465
       1443  1BA 00030AD0 LsaEnumerateAccountRights
466
       1444  1BB 00032710 LsaEnumerateAccounts
467
       1445  1BC 00030AE0 LsaEnumerateAccountsWithUserRight
468
       1446  1BD 000327E0 LsaEnumeratePrivileges
469
       1447  1BE 000328B0 LsaEnumeratePrivilegesOfAccount
470
       1448  1BF 00032930 LsaEnumerateTrustedDomains
471
       1449  1C0 00034060 LsaEnumerateTrustedDomainsEx
472
       1450  1C1 00019080 LsaFreeMemory
473
       1451  1C2 00032A00 LsaGetAppliedCAPIDs
474
       1452  1C3 00032B40 LsaGetQuotasForAccount
475
       1453  1C4 00032BC0 LsaGetRemoteUserName
476
       1454  1C5 00032D90 LsaGetSystemAccessAccount
477
       1455  1C6 00011810 LsaGetUserName
478
       1456  1C7 00030AF0 LsaICLookupNames
479
       1457  1C8 00030B50 LsaICLookupNamesWithCreds
480
       1458  1C9 00030BD0 LsaICLookupSids
481
       1459  1CA 00030BE0 LsaICLookupSidsWithCreds
482
       1460  1CB 00032E10 LsaLookupNames
483
       1461  1CC 00030C60 LsaLookupNames2
484
       1462  1CD 00032F80 LsaLookupPrivilegeDisplayName
485
       1463  1CE 000188E0 LsaLookupPrivilegeName
486
       1464  1CF 0000EA00 LsaLookupPrivilegeValue
487
       1465  1D0 000191B0 LsaLookupSids
488
       1466  1D1 00030C70 LsaLookupSids2
489
       1467  1D2 0001D510 LsaManageSidNameMapping
490
       1468  1D3 00017270 LsaNtStatusToWinError
491
       1469  1D4 00033240 LsaOpenAccount
492
       1470  1D5 00019220 LsaOpenPolicy
493
       1471  1D6 00033340 LsaOpenPolicySce
494
       1472  1D7 00030C80 LsaOpenSecret
495
       1473  1D8 00033440 LsaOpenTrustedDomain
496
       1474  1D9 00034130 LsaOpenTrustedDomainByName
497
       1475  1DA 00033540 LsaQueryCAPs
498
       1476  1DB 00034230 LsaQueryDomainInformationPolicy
499
       1477  1DC 000342D0 LsaQueryForestTrustInformation
500
       1478  1DD 00033680 LsaQueryInfoTrustedDomain
501
       1479  1DE 00019240 LsaQueryInformationPolicy
502
       1480  1DF 00030C90 LsaQuerySecret
503
       1481  1E0 00033740 LsaQuerySecurityObject
504
       1482  1E1 00034360 LsaQueryTrustedDomainInfo
505
       1483  1E2 00034440 LsaQueryTrustedDomainInfoByName
506
       1484  1E3 00030CA0 LsaRemoveAccountRights
507
       1485  1E4 000337F0 LsaRemovePrivilegesFromAccount
508
       1486  1E5 00030CB0 LsaRetrievePrivateData
509
       1487  1E6 00033870 LsaSetCAPs
510
       1488  1E7 000344E0 LsaSetDomainInformationPolicy
511
       1489  1E8 00034570 LsaSetForestTrustInformation
512
       1490  1E9 00030CC0 LsaSetInformationPolicy
513
       1491  1EA 00033980 LsaSetInformationTrustedDomain
514
       1492  1EB 00033BD0 LsaSetQuotasForAccount
515
       1493  1EC 00030CD0 LsaSetSecret
516
       1494  1ED 00033C50 LsaSetSecurityObject
517
       1495  1EE 00033D80 LsaSetSystemAccessAccount
518
       1496  1EF 00034610 LsaSetTrustedDomainInfoByName
519
       1497  1F0 00034870 LsaSetTrustedDomainInformation
520
       1498  1F1 0001CC60 LsaStorePrivateData
521
       1499  1F2          MD4Final (forwarded to NTDLL.MD4Final)
522
       1500  1F3          MD4Init (forwarded to NTDLL.MD4Init)
523
       1501  1F4          MD4Update (forwarded to NTDLL.MD4Update)
524
       1502  1F5          MD5Final (forwarded to NTDLL.MD5Final)
525
       1503  1F6          MD5Init (forwarded to NTDLL.MD5Init)
526
       1504  1F7          MD5Update (forwarded to NTDLL.MD5Update)
527
       1505  1F8 000565D0 MIDL_user_free_Ext
528
       1506  1F9 000310D0 MSChapSrvChangePassword
529
       1507  1FA 000313D0 MSChapSrvChangePassword2
530
       1508  1FB 00018F10 MakeAbsoluteSD
531
       1509  1FC 00030D40 MakeAbsoluteSD2
532
       1510  1FD 00019320 MakeSelfRelativeSD
533
       1511  1FE 00030D50 MapGenericMask
534
       1512  1FF 0001C5F0 NotifyBootConfigStatus
535
       1513  200 0002C790 NotifyChangeEventLog
536
       1514  201 0001E8E0 NotifyServiceStatusChange
537
       1515  202 00030D60 NotifyServiceStatusChangeA
538
       1516  203 0001CAC0 NotifyServiceStatusChangeW
539
       1517  204 0002CF30 NpGetUserName
540
       1518  205 0002E7E0 ObjectCloseAuditAlarmA
541
       1519  206 00030D70 ObjectCloseAuditAlarmW
542
       1520  207 0002E860 ObjectDeleteAuditAlarmA
543
       1521  208 00030D80 ObjectDeleteAuditAlarmW
544
       1522  209 0002E8E0 ObjectOpenAuditAlarmA
545
       1523  20A 00030D90 ObjectOpenAuditAlarmW
546
       1524  20B 0002EA40 ObjectPrivilegeAuditAlarmA
547
       1525  20C 00030E10 ObjectPrivilegeAuditAlarmW
548
       1526  20D 0002C7C0 OpenBackupEventLogA
549
       1527  20E 0002C890 OpenBackupEventLogW
550
       1528  20F 0002F7F0 OpenEncryptedFileRawA
551
       1529  210 0002F8A0 OpenEncryptedFileRawW
552
       1530  211 0002CA10 OpenEventLogA
553
       1531  212 0001C170 OpenEventLogW
554
       1532  213 00017B00 OpenProcessToken
555
       1533  214 000192E0 OpenSCManagerA
556
       1534  215 000191A0 OpenSCManagerW
557
       1535  216 00030E20 OpenServiceA
558
       1536  217 00018FE0 OpenServiceW
559
       1537  218 00017EF0 OpenThreadToken
560
       1538  219 0005E230 OpenThreadWaitChainSession
561
       1539  21A 00041FE0 OpenTraceA
562
       1540  21B 00019280 OpenTraceW
563
       1541  21C 000316B0 OperationEnd
564
       1542  21D 00031790 OperationStart
565
       1543  21E 000161D0 PerfAddCounters
566
       1544  21F 00015890 PerfCloseQueryHandle
567
       1545  220          PerfCreateInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfCreateInstance)
568
       1546  221          PerfDecrementULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDecrementULongCounterValue)
569
       1547  222          PerfDecrementULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDecrementULongLongCounterValue)
570
       1548  223 00046690 PerfDeleteCounters
571
       1549  224          PerfDeleteInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDeleteInstance)
572
       1550  225 00005590 PerfEnumerateCounterSet
573
       1551  226 000150C0 PerfEnumerateCounterSetInstances
574
       1552  227          PerfIncrementULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfIncrementULongCounterValue)
575
       1553  228          PerfIncrementULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfIncrementULongLongCounterValue)
576
       1554  229 00015940 PerfOpenQueryHandle
577
       1555  22A 000146A0 PerfQueryCounterData
578
       1556  22B 000160F0 PerfQueryCounterInfo
579
       1557  22C 00015190 PerfQueryCounterSetRegistrationInfo
580
       1558  22D          PerfQueryInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfQueryInstance)
581
       1559  22E 0001B0D0 PerfRegCloseKey
582
       1560  22F 00051C80 PerfRegEnumKey
583
       1561  230 00051CE0 PerfRegEnumValue
584
       1562  231 0001B3D0 PerfRegQueryInfoKey
585
       1563  232 000109B0 PerfRegQueryValue
586
       1564  233 00051ED0 PerfRegSetValue
587
       1565  234          PerfSetCounterRefValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetCounterRefValue)
588
       1566  235          PerfSetCounterSetInfo (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetCounterSetInfo)
589
       1567  236          PerfSetULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetULongCounterValue)
590
       1568  237          PerfSetULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetULongLongCounterValue)
591
       1569  238          PerfStartProvider (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStartProvider)
592
       1570  239          PerfStartProviderEx (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStartProviderEx)
593
       1571  23A          PerfStopProvider (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStopProvider)
594
       1572  23B 00030E30 PrivilegeCheck
595
       1573  23C 0002EAE0 PrivilegedServiceAuditAlarmA
596
       1574  23D 00030E40 PrivilegedServiceAuditAlarmW
597
       1575  23E 00031B60 ProcessIdleTasks
598
       1576  23F 00031BF0 ProcessIdleTasksW
599
       1577  240 00019270 ProcessTrace
600
       1578  241 0001E700 QueryAllTracesA
601
       1579  242 00002930 QueryAllTracesW
602
       1580  243 0002F920 QueryRecoveryAgentsOnEncryptedFile
603
       1581  244 00030E50 QuerySecurityAccessMask
604
       1582  245 00030E60 QueryServiceConfig2A
605
       1583  246 0001DB30 QueryServiceConfig2W
606
       1584  247 00030E70 QueryServiceConfigA
607
       1585  248 00019050 QueryServiceConfigW
608
       1586  249 00030E80 QueryServiceDynamicInformation
609
       1587  24A 000498E0 QueryServiceLockStatusA
610
       1588  24B 00049A50 QueryServiceLockStatusW
611
       1589  24C 00030E90 QueryServiceObjectSecurity
612
       1590  24D 0001BA90 QueryServiceStatus
613
       1591  24E 0001CAA0 QueryServiceStatusEx
614
       1592  24F 00041C60 QueryTraceA
615
       1593  250 000192B0 QueryTraceW
616
       1594  251 0002F9A0 QueryUsersOnEncryptedFile
617
       1595  252 0002FA20 ReadEncryptedFileRaw
618
       1596  253 0002CA80 ReadEventLogA
619
       1597  254 0002CB10 ReadEventLogW
620
       1598  255 000172E0 RegCloseKey
621
       1599  256 00046AB0 RegConnectRegistryA
622
       1600  257 00046AD0 RegConnectRegistryExA
623
       1601  258 0001C670 RegConnectRegistryExW
624
       1602  259 0001C650 RegConnectRegistryW
625
       1603  25A 00046D40 RegCopyTreeA
626
       1604  25B 00030EA0 RegCopyTreeW
627
       1605  25C 00046DC0 RegCreateKeyA
628
       1606  25D 00019070 RegCreateKeyExA
629
       1607  25E 000175F0 RegCreateKeyExW
630
       1608  25F 00046E40 RegCreateKeyTransactedA
631
       1609  260 0001B340 RegCreateKeyTransactedW
632
       1610  261 00018FF0 RegCreateKeyW
633
       1611  262 00002580 RegDeleteKeyA
634
       1612  263 00030EB0 RegDeleteKeyExA
635
       1613  264 0001D440 RegDeleteKeyExW
636
       1614  265 00047000 RegDeleteKeyTransactedA
637
       1615  266 0001AFE0 RegDeleteKeyTransactedW
638
       1616  267 00030EC0 RegDeleteKeyValueA
639
       1617  268 00030ED0 RegDeleteKeyValueW
640
       1618  269 00017F00 RegDeleteKeyW
641
       1619  26A 00030EE0 RegDeleteTreeA
642
       1620  26B 0001DB60 RegDeleteTreeW
643
       1621  26C 00002960 RegDeleteValueA
644
       1622  26D 000190B0 RegDeleteValueW
645
       1623  26E 00019100 RegDisablePredefinedCache
646
       1624  26F 00030EF0 RegDisablePredefinedCacheEx
647
       1625  270 0001F960 RegDisableReflectionKey
648
       1626  271 0001F960 RegEnableReflectionKey
649
       1627  272 0001D780 RegEnumKeyA
650
       1628  273 000025D0 RegEnumKeyExA
651
       1629  274 00017180 RegEnumKeyExW
652
       1630  275 00017280 RegEnumKeyW
653
       1631  276 00030F00 RegEnumValueA
654
       1632  277 00017220 RegEnumValueW
655
       1633  278 0001BA30 RegFlushKey
656
       1634  279 00019200 RegGetKeySecurity
657
       1635  27A 00030F50 RegGetValueA
658
       1636  27B 00017D90 RegGetValueW
659
       1637  27C 00030F60 RegLoadAppKeyA
660
       1638  27D 0001DB80 RegLoadAppKeyW
661
       1639  27E 00030F70 RegLoadKeyA
662
       1640  27F 00030F80 RegLoadKeyW
663
       1641  280 00030F90 RegLoadMUIStringA
664
       1642  281 00030FA0 RegLoadMUIStringW
665
       1643  282 00018FD0 RegNotifyChangeKeyValue
666
       1644  283 00019150 RegOpenCurrentUser
667
       1645  284 0001B9E0 RegOpenKeyA
668
       1646  285 00017D70 RegOpenKeyExA
669
       1647  286 00016CB0 RegOpenKeyExW
670
       1648  287 00046ED0 RegOpenKeyTransactedA
671
       1649  288 0001B7E0 RegOpenKeyTransactedW
672
       1650  289 00017AB0 RegOpenKeyW
673
       1651  28A 00030FB0 RegOpenUserClassesRoot
674
       1652  28B 00046F10 RegOverridePredefKey
675
       1653  28C 000028B0 RegQueryInfoKeyA
676
       1654  28D 000177C0 RegQueryInfoKeyW
677
       1655  28E 000473E0 RegQueryMultipleValuesA
678
       1656  28F 00047A70 RegQueryMultipleValuesW
679
       1657  290 000316A0 RegQueryReflectionKey
680
       1658  291 00048180 RegQueryValueA
681
       1659  292 00017DD0 RegQueryValueExA
682
       1660  293 00016C70 RegQueryValueExW
683
       1661  294 00017980 RegQueryValueW
684
       1662  295 00046F80 RegRenameKey
685
       1663  296 00048440 RegReplaceKeyA
686
       1664  297 00048D80 RegReplaceKeyW
687
       1665  298 00030FC0 RegRestoreKeyA
688
       1666  299 00030FD0 RegRestoreKeyW
689
       1667  29A 00048670 RegSaveKeyA
690
       1668  29B 00030FE0 RegSaveKeyExA
691
       1669  29C 00030FF0 RegSaveKeyExW
692
       1670  29D 00048820 RegSaveKeyW
693
       1671  29E 0001DA80 RegSetKeySecurity
694
       1672  29F 00031000 RegSetKeyValueA
695
       1673  2A0 0001B080 RegSetKeyValueW
696
       1674  2A1 000489A0 RegSetValueA
697
       1675  2A2 00002680 RegSetValueExA
698
       1676  2A3 00017850 RegSetValueExW
699
       1677  2A4 00048AF0 RegSetValueW
700
       1678  2A5 00031010 RegUnLoadKeyA
701
       1679  2A6 00031020 RegUnLoadKeyW
702
       1680  2A7 0002CB90 RegisterEventSourceA
703
       1681  2A8 00019960 RegisterEventSourceW
704
       1682  2A9 0001B820 RegisterIdleTask
705
       1683  2AA 0001DB50 RegisterServiceCtrlHandlerA
706
       1684  2AB 00031030 RegisterServiceCtrlHandlerExA
707
       1685  2AC 000192C0 RegisterServiceCtrlHandlerExW
708
       1686  2AD 00019310 RegisterServiceCtrlHandlerW
709
       1687  2AE          RegisterTraceGuidsA (forwarded to ntdll.EtwRegisterTraceGuidsA)
710
       1688  2AF          RegisterTraceGuidsW (forwarded to ntdll.EtwRegisterTraceGuidsW)
711
       1689  2B0 0005E330 RegisterWaitChainCOMCallback
712
       1690  2B1 00047040 RemoteRegEnumKeyWrapper
713
       1691  2B2 000471A0 RemoteRegEnumValueWrapper
714
       1692  2B3 000472C0 RemoteRegQueryInfoKeyWrapper
715
       1693  2B4 000483B0 RemoteRegQueryValueWrapper
716
       1694  2B5          RemoveTraceCallback (forwarded to sechost.RemoveTraceCallback)
717
       1695  2B6 0002FA80 RemoveUsersFromEncryptedFile
718
       1696  2B7 0002CBF0 ReportEventA
719
       1697  2B8 000193F0 ReportEventW
720
       1698  2B9 000189D0 RevertToSelf
721
       1699  2BA 00046650 SafeBaseRegGetKeySecurity
722
       1700  2BB 00016CC0 SaferCloseLevel
723
       1701  2BC 00003BA0 SaferComputeTokenFromLevel
724
       1702  2BD 00036DA0 SaferCreateLevel
725
       1703  2BE 000376E0 SaferGetLevelInformation
726
       1704  2BF 00005B60 SaferGetPolicyInformation
727
       1705  2C0 0000A7D0 SaferIdentifyLevel
728
       1706  2C1 00038FA0 SaferRecordEventLogEntry
729
       1707  2C2 00039650 SaferSetLevelInformation
730
       1708  2C3 000381B0 SaferSetPolicyInformation
731
       1709  2C4 0003A810 SaferiChangeRegistryScope
732
       1710  2C5 00004280 SaferiCompareTokenLevels
733
       1711  2C6 000387E0 SaferiIsDllAllowed
734
       1712  2C7 0003AF00 SaferiIsExecutableFileType
735
       1713  2C8 0003A840 SaferiPopulateDefaultsInRegistry
736
       1714  2C9 00038FA0 SaferiRecordEventLogEntry
737
       1715  2CA 00017B60 SaferiSearchMatchingHashRules
738
       1716  2CB 00031040 SetAclInformation
739
       1717  2CC 00049030 SetEncryptedFileMetadata
740
       1718  2CD 0003F660 SetEntriesInAccessListA
741
       1719  2CE 0003F6B0 SetEntriesInAccessListW
742
       1720  2CF 0001D7F0 SetEntriesInAclA
743
       1721  2D0 00019170 SetEntriesInAclW
744
       1722  2D1 0003F700 SetEntriesInAuditListA
745
       1723  2D2 0003F740 SetEntriesInAuditListW
746
       1724  2D3 0002EBB0 SetFileSecurityA
747
       1725  2D4 000192F0 SetFileSecurityW
748
       1726  2D5 00039650 SetInformationCodeAuthzLevelW
749
       1727  2D6 000381B0 SetInformationCodeAuthzPolicyW
750
       1728  2D7 0001BA80 SetKernelObjectSecurity
751
       1729  2D8 0003DA80 SetNamedSecurityInfoA
752
       1730  2D9 0003F780 SetNamedSecurityInfoExA
753
       1731  2DA 0003FBB0 SetNamedSecurityInfoExW
754
       1732  2DB 0001B970 SetNamedSecurityInfoW
755
       1733  2DC 00031060 SetPrivateObjectSecurity
756
       1734  2DD 00031050 SetPrivateObjectSecurityEx
757
       1735  2DE 00031070 SetSecurityAccessMask
758
       1736  2DF 0001DAB0 SetSecurityDescriptorControl
759
       1737  2E0 00018E30 SetSecurityDescriptorDacl
760
       1738  2E1 0001BA70 SetSecurityDescriptorGroup
761
       1739  2E2 000190F0 SetSecurityDescriptorOwner
762
       1740  2E3 00031080 SetSecurityDescriptorRMControl
763
       1741  2E4 0001B0B0 SetSecurityDescriptorSacl
764
       1742  2E5 00018970 SetSecurityInfo
765
       1743  2E6 0003FEE0 SetSecurityInfoExA
766
       1744  2E7 000402C0 SetSecurityInfoExW
767
       1745  2E8 0001DAF0 SetServiceBits
768
       1746  2E9 00031090 SetServiceObjectSecurity
769
       1747  2EA 000190C0 SetServiceStatus
770
       1748  2EB 00002940 SetThreadToken
771
       1749  2EC 00019290 SetTokenInformation
772
       1750  2ED          SetTraceCallback (forwarded to sechost.SetTraceCallback)
773
       1751  2EE 0002FB00 SetUserFileEncryptionKey
774
       1752  2EF 0002FB60 SetUserFileEncryptionKeyEx
775
       1753  2F0 000310A0 StartServiceA
776
       1754  2F1 0001DB40 StartServiceCtrlDispatcherA
777
       1755  2F2 00019180 StartServiceCtrlDispatcherW
778
       1756  2F3 0001BDD0 StartServiceW
779
       1757  2F4 0001E710 StartTraceA
780
       1758  2F5 000192D0 StartTraceW
781
       1759  2F6 00041C70 StopTraceA
782
       1760  2F7 00002950 StopTraceW
783
       1761  2F8          SystemFunction001 (forwarded to CRYPTBASE.SystemFunction001)
784
       1762  2F9          SystemFunction002 (forwarded to CRYPTBASE.SystemFunction002)
785
       1763  2FA          SystemFunction003 (forwarded to CRYPTBASE.SystemFunction003)
786
       1764  2FB          SystemFunction004 (forwarded to CRYPTBASE.SystemFunction004)
787
       1765  2FC          SystemFunction005 (forwarded to CRYPTBASE.SystemFunction005)
788
       1766  2FD          SystemFunction006 (forwarded to CRYPTSP.SystemFunction006)
789
       1767  2FE          SystemFunction007 (forwarded to CRYPTSP.SystemFunction007)
790
       1768  2FF          SystemFunction008 (forwarded to CRYPTSP.SystemFunction008)
791
       1769  300          SystemFunction009 (forwarded to CRYPTSP.SystemFunction009)
792
       1770  301          SystemFunction010 (forwarded to CRYPTSP.SystemFunction010)
793
       1771  302          SystemFunction011 (forwarded to CRYPTSP.SystemFunction011)
794
       1772  303          SystemFunction012 (forwarded to CRYPTSP.SystemFunction012)
795
       1773  304          SystemFunction013 (forwarded to CRYPTSP.SystemFunction013)
796
       1774  305          SystemFunction014 (forwarded to CRYPTSP.SystemFunction014)
797
       1775  306          SystemFunction015 (forwarded to CRYPTSP.SystemFunction015)
798
       1776  307          SystemFunction016 (forwarded to CRYPTSP.SystemFunction016)
799
       1777  308 00031C20 SystemFunction017
800
       1778  309          SystemFunction018 (forwarded to CRYPTSP.SystemFunction018)
801
       1779  30A 00031C70 SystemFunction019
802
       1780  30B          SystemFunction020 (forwarded to CRYPTSP.SystemFunction020)
803
       1781  30C          SystemFunction021 (forwarded to CRYPTSP.SystemFunction021)
804
       1782  30D          SystemFunction022 (forwarded to CRYPTSP.SystemFunction022)
805
       1783  30E          SystemFunction023 (forwarded to CRYPTSP.SystemFunction023)
806
       1784  30F          SystemFunction024 (forwarded to CRYPTSP.SystemFunction024)
807
       1785  310          SystemFunction025 (forwarded to CRYPTSP.SystemFunction025)
808
       1786  311          SystemFunction026 (forwarded to CRYPTSP.SystemFunction026)
809
       1787  312          SystemFunction027 (forwarded to CRYPTSP.SystemFunction027)
810
       1788  313          SystemFunction028 (forwarded to CRYPTBASE.SystemFunction028)
811
       1789  314          SystemFunction029 (forwarded to CRYPTBASE.SystemFunction029)
812
       1790  315          SystemFunction030 (forwarded to CRYPTSP.SystemFunction030)
813
       1791  316          SystemFunction031 (forwarded to CRYPTSP.SystemFunction031)
814
       1792  317          SystemFunction032 (forwarded to CRYPTSP.SystemFunction032)
815
       1793  318          SystemFunction033 (forwarded to CRYPTSP.SystemFunction033)
816
       1794  319          SystemFunction034 (forwarded to CRYPTBASE.SystemFunction034)
817
       1795  31A          SystemFunction035 (forwarded to CRYPTSP.CheckSignatureInFile)
818
       1796  31B          SystemFunction036 (forwarded to CRYPTBASE.SystemFunction036)
819
       1797  31C          SystemFunction040 (forwarded to CRYPTBASE.SystemFunction040)
820
       1798  31D          SystemFunction041 (forwarded to CRYPTBASE.SystemFunction041)
821
       1799  31E          TraceEvent (forwarded to ntdll.EtwLogTraceEvent)
822
       1800  31F          TraceEventInstance (forwarded to ntdll.EtwTraceEventInstance)
823
       1801  320          TraceMessage (forwarded to ntdll.EtwTraceMessage)
824
       1802  321          TraceMessageVa (forwarded to ntdll.EtwTraceMessageVa)
825
       1803  322          TraceQueryInformation (forwarded to api-ms-win-eventing-controller-l1-1-0.TraceQueryInformation)
826
       1804  323 000310B0 TraceSetInformation
827
       1805  324 0003DB10 TreeResetNamedSecurityInfoA
828
       1806  325 000026E0 TreeResetNamedSecurityInfoW
829
       1807  326 0003DB10 TreeSetNamedSecurityInfoA
830
       1808  327 0003DB20 TreeSetNamedSecurityInfoW
831
       1809  328 000405F0 TrusteeAccessToObjectA
832
       1810  329 00040840 TrusteeAccessToObjectW
833
       1811  32A 00035980 UninstallApplication
834
       1812  32B 00049BD0 UnlockServiceDatabase
835
       1813  32C 00031C00 UnregisterIdleTask
836
       1814  32D          UnregisterTraceGuids (forwarded to ntdll.EtwUnregisterTraceGuids)
837
       1815  32E 00041C90 UpdateTraceA
838
       1816  32F 00041CB0 UpdateTraceW
839
       1817  330 0002FBF0 UsePinForEncryptedFilesA
840
       1818  331 0002FC80 UsePinForEncryptedFilesW
841
       1819  332 000310C0 WaitServiceState
842
       1820  333 0001B020 WmiCloseBlock
843
       1821  334 00056AB0 WmiDevInstToInstanceNameA
844
       1822  335 00056B90 WmiDevInstToInstanceNameW
845
       1823  336 00056C70 WmiEnumerateGuids
846
       1824  337 00056E20 WmiExecuteMethodA
847
       1825  338 00056F10 WmiExecuteMethodW
848
       1826  339 00057250 WmiFileHandleToInstanceNameA
849
       1827  33A 000574A0 WmiFileHandleToInstanceNameW
850
       1828  33B 00057680 WmiFreeBuffer
851
       1829  33C 00058AE0 WmiMofEnumerateResourcesA
852
       1830  33D 00058D00 WmiMofEnumerateResourcesW
853
       1831  33E 000576C0 WmiNotificationRegistrationA
854
       1832  33F 00057740 WmiNotificationRegistrationW
855
       1833  340 0001A870 WmiOpenBlock
856
       1834  341 000577C0 WmiQueryAllDataA
857
       1835  342 00057830 WmiQueryAllDataMultipleA
858
       1836  343 000578B0 WmiQueryAllDataMultipleW
859
       1837  344 00057AB0 WmiQueryAllDataW
860
       1838  345 00057CF0 WmiQueryGuidInformation
861
       1839  346 00057D90 WmiQuerySingleInstanceA
862
       1840  347 00057E60 WmiQuerySingleInstanceMultipleA
863
       1841  348 00057FF0 WmiQuerySingleInstanceMultipleW
864
       1842  349 0001AA00 WmiQuerySingleInstanceW
865
       1843  34A 00058220 WmiReceiveNotificationsA
866
       1844  34B 00058290 WmiReceiveNotificationsW
867
       1845  34C 00058300 WmiSetSingleInstanceA
868
       1846  34D 000583C0 WmiSetSingleInstanceW
869
       1847  34E 00058580 WmiSetSingleItemA
870
       1848  34F 00058650 WmiSetSingleItemW
871
       1849  350 0002FD20 WriteEncryptedFileRaw
872
       1000      00038950 [NONAME]
873

874
  Summary
875

876
        5000 .data
877
        1000 .didat
878
        5000 .pdata
879
       34000 .rdata
880
        2000 .reloc
881
        1000 .rsrc
882
       63000 .text
883

884
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
885
Copyright (C) Microsoft Corporation.  All rights reserved.
886

887

888
Dump of file bcrypt.dll
889

890
File Type: DLL
891

892
  Section contains the following exports for bcrypt.dll
893

894
    00000000 characteristics
895
    559F3035 time date stamp Thu Jul  9 19:38:45 2015
896
        0.00 version
897
           1 ordinal base
898
          58 number of functions
899
          58 number of names
900

901
    ordinal hint RVA      name
902

903
          1    0 000183C0 BCryptAddContextFunction
904
          2    1 00018590 BCryptAddContextFunctionProvider
905
          3    2 00003810 BCryptCloseAlgorithmProvider
906
          4    3 00018780 BCryptConfigureContext
907
          5    4 00018920 BCryptConfigureContextFunction
908
          6    5 00018AE0 BCryptCreateContext
909
          7    6 00003F60 BCryptCreateHash
910
          8    7 00011B00 BCryptCreateMultiHash
911
          9    8 00006070 BCryptDecrypt
912
         10    9 00018C80 BCryptDeleteContext
913
         11    A 00006A70 BCryptDeriveKey
914
         12    B 00002B00 BCryptDeriveKeyCapi
915
         13    C 000031B0 BCryptDeriveKeyPBKDF2
916
         14    D 00004780 BCryptDestroyHash
917
         15    E 00006560 BCryptDestroyKey
918
         16    F 00006990 BCryptDestroySecret
919
         17   10 00001A60 BCryptDuplicateHash
920
         18   11 00001010 BCryptDuplicateKey
921
         19   12 00006D30 BCryptEncrypt
922
         20   13 00011D60 BCryptEnumAlgorithms
923
         21   14 0000AC90 BCryptEnumContextFunctionProviders
924
         22   15 0000AAB0 BCryptEnumContextFunctions
925
         23   16 00018E10 BCryptEnumContexts
926
         24   17 00012190 BCryptEnumProviders
927
         25   18 00018F70 BCryptEnumRegisteredProviders
928
         26   19 00002550 BCryptExportKey
929
         27   1A 000068F0 BCryptFinalizeKeyPair
930
         28   1B 00004860 BCryptFinishHash
931
         29   1C 00005ED0 BCryptFreeBuffer
932
         30   1D 00003620 BCryptGenRandom
933
         31   1E 00002220 BCryptGenerateKeyPair
934
         32   1F 000038B0 BCryptGenerateSymmetricKey
935
         33   20 00006270 BCryptGetFipsAlgorithmMode
936
         34   21 00004270 BCryptGetProperty
937
         35   22 00012530 BCryptHash
938
         36   23 000046E0 BCryptHashData
939
         37   24 00001FA0 BCryptImportKey
940
         38   25 00002F00 BCryptImportKeyPair
941
         39   26 000066E0 BCryptKeyDerivation
942
         40   27 00004A00 BCryptOpenAlgorithmProvider
943
         41   28 000125D0 BCryptProcessMultiOperations
944
         42   29 00019040 BCryptQueryContextConfiguration
945
         43   2A 00019220 BCryptQueryContextFunctionConfiguration
946
         44   2B 00019460 BCryptQueryContextFunctionProperty
947
         45   2C 0000AED0 BCryptQueryProviderRegistration
948
         46   2D 0000B420 BCryptRegisterConfigChangeNotify
949
         47   2E 000196C0 BCryptRegisterProvider
950
         48   2F 000198C0 BCryptRemoveContextFunction
951
         49   30 00019A80 BCryptRemoveContextFunctionProvider
952
         50   31 00005520 BCryptResolveProviders
953
         51   32 000067D0 BCryptSecretAgreement
954
         52   33 0000B600 BCryptSetAuditingInterface
955
         53   34 00019C50 BCryptSetContextFunctionProperty
956
         54   35 00003700 BCryptSetProperty
957
         55   36 0000B6E0 BCryptSignHash
958
         56   37 00019E60 BCryptUnregisterConfigChangeNotify
959
         57   38 00019F60 BCryptUnregisterProvider
960
         58   39 00005F20 BCryptVerifySignature
961

962
Dump of file bcryptprimitives.dll
963

964
File Type: DLL
965

966
  Section contains the following exports for bcryptPrimitives.dll
967

968
    00000000 characteristics
969
    559F301F time date stamp Thu Jul  9 19:38:23 2015
970
        0.00 version
971
           1 ordinal base
972
           9 number of functions
973
           9 number of names
974

975
    ordinal hint RVA      name
976

977
          1    0 00020780 GetAsymmetricEncryptionInterface
978
          2    1 00016D20 GetCipherInterface
979
          3    2 00020B90 GetHashInterface
980
          4    3 00001F30 GetKeyDerivationInterface
981
          5    4 00021940 GetRngInterface
982
          6    5 000219C0 GetSecretAgreementInterface
983
          7    6 00001E60 GetSignatureInterface
984
          8    7 0001B980 ProcessPrng
985
          9    8 00036400 ProcessPrngGuid
986

987
  Summary
988

989
        2000 .data
990
        5000 .pdata
991
       18000 .rdata
992
        2000 .reloc
993
        2000 .rsrc
994
       6E000 .text
995

996
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
997
Copyright (C) Microsoft Corporation.  All rights reserved.
998

999

1000
Dump of file cfgmgr32.dll
1001

1002
File Type: DLL
1003

1004
  Section contains the following exports for CFGMGR32.dll
1005

1006
    00000000 characteristics
1007
    559F2B9C time date stamp Thu Jul  9 19:19:08 2015
1008
        0.00 version
1009
           1 ordinal base
1010
         276 number of functions
1011
         276 number of names
1012

1013
    ordinal hint RVA      name
1014

1015
          1    0 0001D320 CMP_GetBlockedDriverInfo
1016
          2    1 0001D390 CMP_GetServerSideDeviceInstallFlags
1017
          3    2 0001D400 CMP_Init_Detection
1018
          4    3 0001D990 CMP_RegisterServiceNotification
1019
          5    4 00002F00 CMP_Register_Notification
1020
          6    5 0001D420 CMP_Report_LogOn
1021
          7    6 0000E840 CMP_WaitNoPendingInstallEvents
1022
          8    7 0001D440 CMP_WaitServicesAvailable
1023
          9    8 0001D9A0 CM_Add_Driver_PackageW
1024
         10    9 0001DAE0 CM_Add_Driver_Package_ExW
1025
         11    A 0001DE10 CM_Add_Empty_Log_Conf
1026
         12    B 0001DF60 CM_Add_Empty_Log_Conf_Ex
1027
         13    C 0001E5F0 CM_Add_IDA
1028
         14    D 0001E600 CM_Add_IDW
1029
         15    E 0001E700 CM_Add_ID_ExA
1030
         16    F 0001E780 CM_Add_ID_ExW
1031
         17   10 0001F730 CM_Add_Range
1032
         18   11 00020BF0 CM_Add_Res_Des
1033
         19   12 00020E90 CM_Add_Res_Des_Ex
1034
         20   13 0001EE50 CM_Apply_PowerScheme
1035
         21   14 0001D460 CM_Connect_MachineA
1036
         22   15 0001D4D0 CM_Connect_MachineW
1037
         23   16 0001E7A0 CM_Create_DevNodeA
1038
         24   17 0001E7C0 CM_Create_DevNodeW
1039
         25   18 0001E9A0 CM_Create_DevNode_ExA
1040
         26   19 0001EA30 CM_Create_DevNode_ExW
1041
         27   1A 0001F840 CM_Create_Range_List
1042
         28   1B 00021E40 CM_Delete_Class_Key
1043
         29   1C 00021EB0 CM_Delete_Class_Key_Ex
1044
         30   1D 00021ED0 CM_Delete_DevNode_Key
1045
         31   1E 00021FD0 CM_Delete_DevNode_Key_Ex
1046
         32   1F 00021FF0 CM_Delete_Device_Interface_KeyA
1047
         33   20 00022000 CM_Delete_Device_Interface_KeyW
1048
         34   21 00022060 CM_Delete_Device_Interface_Key_ExA
1049
         35   22 000220D0 CM_Delete_Device_Interface_Key_ExW
1050
         36   23 0001DC00 CM_Delete_Driver_PackageW
1051
         37   24 0001DD00 CM_Delete_Driver_Package_ExW
1052
         38   25 0001EE50 CM_Delete_PowerScheme
1053
         39   26 0001F930 CM_Delete_Range
1054
         40   27 00020EC0 CM_Detect_Resource_Conflict
1055
         41   28 00020EF0 CM_Detect_Resource_Conflict_Ex
1056
         42   29 0001EA60 CM_Disable_DevNode
1057
         43   2A 0001EB90 CM_Disable_DevNode_Ex
1058
         44   2B 0001D550 CM_Disconnect_Machine
1059
         45   2C 0001FB10 CM_Dup_Range_List
1060
         46   2D 0001EE50 CM_Duplicate_PowerScheme
1061
         47   2E 0001EBB0 CM_Enable_DevNode
1062
         48   2F 0001ECD0 CM_Enable_DevNode_Ex
1063
         49   30 000220F0 CM_Enumerate_Classes
1064
         50   31 00022160 CM_Enumerate_Classes_Ex
1065
         51   32 00023E10 CM_Enumerate_EnumeratorsA
1066
         52   33 00023E30 CM_Enumerate_EnumeratorsW
1067
         53   34 00023EA0 CM_Enumerate_Enumerators_ExA
1068
         54   35 00023F40 CM_Enumerate_Enumerators_ExW
1069
         55   36 0001FC50 CM_Find_Range
1070
         56   37 0001FE50 CM_First_Range
1071
         57   38 0001DF90 CM_Free_Log_Conf
1072
         58   39 0001E0E0 CM_Free_Log_Conf_Ex
1073
         59   3A 0001E100 CM_Free_Log_Conf_Handle
1074
         60   3B 0001FF70 CM_Free_Range_List
1075
         61   3C 000210D0 CM_Free_Res_Des
1076
         62   3D 00021290 CM_Free_Res_Des_Ex
1077
         63   3E 000212B0 CM_Free_Res_Des_Handle
1078
         64   3F 00024370 CM_Free_Resource_Conflict_Handle
1079
         65   40 0000B840 CM_Get_Child
1080
         66   41 00023F70 CM_Get_Child_Ex
1081
         67   42 00022180 CM_Get_Class_Key_NameA
1082
         68   43 000221A0 CM_Get_Class_Key_NameW
1083
         69   44 00022250 CM_Get_Class_Key_Name_ExA
1084
         70   45 000222F0 CM_Get_Class_Key_Name_ExW
1085
         71   46 00022300 CM_Get_Class_NameA
1086
         72   47 00022320 CM_Get_Class_NameW
1087
         73   48 00022440 CM_Get_Class_Name_ExA
1088
         74   49 000224F0 CM_Get_Class_Name_ExW
1089
         75   4A 00005490 CM_Get_Class_PropertyW
1090
         76   4B 00004CB0 CM_Get_Class_Property_ExW
1091
         77   4C 00024CF0 CM_Get_Class_Property_Keys
1092
         78   4D 00024DD0 CM_Get_Class_Property_Keys_Ex
1093
         79   4E 00022520 CM_Get_Class_Registry_PropertyA
1094
         80   4F 000226A0 CM_Get_Class_Registry_PropertyW
1095
         81   50 00012750 CM_Get_Depth
1096
         82   51 00023F90 CM_Get_Depth_Ex
1097
         83   52 000229C0 CM_Get_DevNode_Custom_PropertyA
1098
         84   53 00005620 CM_Get_DevNode_Custom_PropertyW
1099
         85   54 00001010 CM_Get_DevNode_Custom_Property_ExA
1100
         86   55 000012A0 CM_Get_DevNode_Custom_Property_ExW
1101
         87   56 00007060 CM_Get_DevNode_PropertyW
1102
         88   57 00007040 CM_Get_DevNode_Property_ExW
1103
         89   58 00024E00 CM_Get_DevNode_Property_Keys
1104
         90   59 00024F20 CM_Get_DevNode_Property_Keys_Ex
1105
         91   5A 000229F0 CM_Get_DevNode_Registry_PropertyA
1106
         92   5B 00007910 CM_Get_DevNode_Registry_PropertyW
1107
         93   5C 00022A20 CM_Get_DevNode_Registry_Property_ExA
1108
         94   5D 00006340 CM_Get_DevNode_Registry_Property_ExW
1109
         95   5E 00005D20 CM_Get_DevNode_Status
1110
         96   5F 00012920 CM_Get_DevNode_Status_Ex
1111
         97   60 00005B70 CM_Get_Device_IDA
1112
         98   61 0000CBE0 CM_Get_Device_IDW
1113
         99   62 00023FB0 CM_Get_Device_ID_ExA
1114
        100   63 00006060 CM_Get_Device_ID_ExW
1115
        101   64 00024080 CM_Get_Device_ID_ListA
1116
        102   65 00010E90 CM_Get_Device_ID_ListW
1117
        103   66 000240A0 CM_Get_Device_ID_List_ExA
1118
        104   67 00010E70 CM_Get_Device_ID_List_ExW
1119
        105   68 000241D0 CM_Get_Device_ID_List_SizeA
1120
        106   69 00012940 CM_Get_Device_ID_List_SizeW
1121
        107   6A 000241E0 CM_Get_Device_ID_List_Size_ExA
1122
        108   6B 00024270 CM_Get_Device_ID_List_Size_ExW
1123
        109   6C 00012BA0 CM_Get_Device_ID_Size
1124
        110   6D 000058D0 CM_Get_Device_ID_Size_Ex
1125
        111   6E 00022BD0 CM_Get_Device_Interface_AliasA
1126
        112   6F 0000B570 CM_Get_Device_Interface_AliasW
1127
        113   70 00022C00 CM_Get_Device_Interface_Alias_ExA
1128
        114   71 0000B9C0 CM_Get_Device_Interface_Alias_ExW
1129
        115   72 00022D90 CM_Get_Device_Interface_ListA
1130
        116   73 0000BB70 CM_Get_Device_Interface_ListW
1131
        117   74 00022DC0 CM_Get_Device_Interface_List_ExA
1132
        118   75 0000BB50 CM_Get_Device_Interface_List_ExW
1133
        119   76 00022F00 CM_Get_Device_Interface_List_SizeA
1134
        120   77 0000BA00 CM_Get_Device_Interface_List_SizeW
1135
        121   78 00022F20 CM_Get_Device_Interface_List_Size_ExA
1136
        122   79 0000B9E0 CM_Get_Device_Interface_List_Size_ExW
1137
        123   7A 00006220 CM_Get_Device_Interface_PropertyW
1138
        124   7B 00006200 CM_Get_Device_Interface_Property_ExW
1139
        125   7C 00024F50 CM_Get_Device_Interface_Property_KeysW
1140
        126   7D 00024FE0 CM_Get_Device_Interface_Property_Keys_ExW
1141
        127   7E 0000FB90 CM_Get_First_Log_Conf
1142
        128   7F 0001E180 CM_Get_First_Log_Conf_Ex
1143
        129   80 0001D570 CM_Get_Global_State
1144
        130   81 0001D600 CM_Get_Global_State_Ex
1145
        131   82 00025140 CM_Get_HW_Prof_FlagsA
1146
        132   83 00025160 CM_Get_HW_Prof_FlagsW
1147
        133   84 00025230 CM_Get_HW_Prof_Flags_ExA
1148
        134   85 000252B0 CM_Get_HW_Prof_Flags_ExW
1149
        135   86 000252E0 CM_Get_Hardware_Profile_InfoA
1150
        136   87 000252F0 CM_Get_Hardware_Profile_InfoW
1151
        137   88 00025360 CM_Get_Hardware_Profile_Info_ExA
1152
        138   89 00025410 CM_Get_Hardware_Profile_Info_ExW
1153
        139   8A 0001E1A0 CM_Get_Log_Conf_Priority
1154
        140   8B 0001E2F0 CM_Get_Log_Conf_Priority_Ex
1155
        141   8C 0001E310 CM_Get_Next_Log_Conf
1156
        142   8D 0001E470 CM_Get_Next_Log_Conf_Ex
1157
        143   8E 00021330 CM_Get_Next_Res_Des
1158
        144   8F 00021500 CM_Get_Next_Res_Des_Ex
1159
        145   90 0000AA10 CM_Get_Parent
1160
        146   91 00011470 CM_Get_Parent_Ex
1161
        147   92 00021530 CM_Get_Res_Des_Data
1162
        148   93 000216F0 CM_Get_Res_Des_Data_Ex
1163
        149   94 00021720 CM_Get_Res_Des_Data_Size
1164
        150   95 00021910 CM_Get_Res_Des_Data_Size_Ex
1165
        151   96 000243D0 CM_Get_Resource_Conflict_Count
1166
        152   97 00024440 CM_Get_Resource_Conflict_DetailsA
1167
        153   98 000245B0 CM_Get_Resource_Conflict_DetailsW
1168
        154   99 0000CDA0 CM_Get_Sibling
1169
        155   9A 00024290 CM_Get_Sibling_Ex
1170
        156   9B 0001D620 CM_Get_Version
1171
        157   9C 0001D630 CM_Get_Version_Ex
1172
        158   9D 0001EE50 CM_Import_PowerScheme
1173
        159   9E 00025710 CM_Install_DevNodeW
1174
        160   9F 000258A0 CM_Install_DevNode_ExW
1175
        161   A0 00020080 CM_Intersect_Range_List
1176
        162   A1 000202E0 CM_Invert_Range_List
1177
        163   A2 00025430 CM_Is_Dock_Station_Present
1178
        164   A3 00025500 CM_Is_Dock_Station_Present_Ex
1179
        165   A4 0001D650 CM_Is_Version_Available
1180
        166   A5 0001D680 CM_Is_Version_Available_Ex
1181
        167   A6 000242B0 CM_Locate_DevNodeA
1182
        168   A7 00006380 CM_Locate_DevNodeW
1183
        169   A8 000242C0 CM_Locate_DevNode_ExA
1184
        170   A9 00006360 CM_Locate_DevNode_ExW
1185
        171   AA 0000C820 CM_MapCrToSpErr
1186
        172   AB 0000C7A0 CM_MapCrToWin32Err
1187
        173   AC 000204A0 CM_Merge_Range_List
1188
        174   AD 00021930 CM_Modify_Res_Des
1189
        175   AE 00021BE0 CM_Modify_Res_Des_Ex
1190
        176   AF 0001EE50 CM_Move_DevNode
1191
        177   B0 0001EE50 CM_Move_DevNode_Ex
1192
        178   B1 000207D0 CM_Next_Range
1193
        179   B2 00023090 CM_Open_Class_KeyA
1194
        180   B3 00004CD0 CM_Open_Class_KeyW
1195
        181   B4 000230C0 CM_Open_Class_Key_ExA
1196
        182   B5 00001970 CM_Open_Class_Key_ExW
1197
        183   B6 00010D00 CM_Open_DevNode_Key
1198
        184   B7 00010CE0 CM_Open_DevNode_Key_Ex
1199
        185   B8 00023180 CM_Open_Device_Interface_KeyA
1200
        186   B9 0000CC60 CM_Open_Device_Interface_KeyW
1201
        187   BA 000231B0 CM_Open_Device_Interface_Key_ExA
1202
        188   BB 0000CC40 CM_Open_Device_Interface_Key_ExW
1203
        189   BC 0001ECF0 CM_Query_And_Remove_SubTreeA
1204
        190   BD 00011690 CM_Query_And_Remove_SubTreeW
1205
        191   BE 0001ED20 CM_Query_And_Remove_SubTree_ExA
1206
        192   BF 00011670 CM_Query_And_Remove_SubTree_ExW
1207
        193   C0 0001D6A0 CM_Query_Arbitrator_Free_Data
1208
        194   C1 0001D7C0 CM_Query_Arbitrator_Free_Data_Ex
1209
        195   C2 0001D7F0 CM_Query_Arbitrator_Free_Size
1210
        196   C3 0001D910 CM_Query_Arbitrator_Free_Size_Ex
1211
        197   C4 0001EE50 CM_Query_Remove_SubTree
1212
        198   C5 0001EE50 CM_Query_Remove_SubTree_Ex
1213
        199   C6 000248C0 CM_Query_Resource_Conflict_List
1214
        200   C7 0001EE60 CM_Reenumerate_DevNode
1215
        201   C8 0001EF90 CM_Reenumerate_DevNode_Ex
1216
        202   C9 0001EFB0 CM_Register_Device_Driver
1217
        203   CA 0001F0B0 CM_Register_Device_Driver_Ex
1218
        204   CB 00023250 CM_Register_Device_InterfaceA
1219
        205   CC 00023280 CM_Register_Device_InterfaceW
1220
        206   CD 000233C0 CM_Register_Device_Interface_ExA
1221
        207   CE 00023560 CM_Register_Device_Interface_ExW
1222
        208   CF 00002140 CM_Register_Notification
1223
        209   D0 0001EE50 CM_Remove_SubTree
1224
        210   D1 0001EE50 CM_Remove_SubTree_Ex
1225
        211   D2 0001F0D0 CM_Request_Device_EjectA
1226
        212   D3 0001F100 CM_Request_Device_EjectW
1227
        213   D4 0001F260 CM_Request_Device_Eject_ExA
1228
        214   D5 0001F380 CM_Request_Device_Eject_ExW
1229
        215   D6 00025520 CM_Request_Eject_PC
1230
        216   D7 000255F0 CM_Request_Eject_PC_Ex
1231
        217   D8 0001EE50 CM_RestoreAll_DefaultPowerSchemes
1232
        218   D9 0001EE50 CM_Restore_DefaultPowerScheme
1233
        219   DA 0001D940 CM_Run_Detection
1234
        220   DB 0001D960 CM_Run_Detection_Ex
1235
        221   DC 0001EE50 CM_Set_ActiveScheme
1236
        222   DD 00025010 CM_Set_Class_PropertyW
1237
        223   DE 00025110 CM_Set_Class_Property_ExW
1238
        224   DF 00023590 CM_Set_Class_Registry_PropertyA
1239
        225   E0 000236E0 CM_Set_Class_Registry_PropertyW
1240
        226   E1 0001F3B0 CM_Set_DevNode_Problem
1241
        227   E2 0001F4F0 CM_Set_DevNode_Problem_Ex
1242
        228   E3 00010730 CM_Set_DevNode_PropertyW
1243
        229   E4 00010710 CM_Set_DevNode_Property_ExW
1244
        230   E5 00023A90 CM_Set_DevNode_Registry_PropertyA
1245
        231   E6 00012090 CM_Set_DevNode_Registry_PropertyW
1246
        232   E7 00023AC0 CM_Set_DevNode_Registry_Property_ExA
1247
        233   E8 00012070 CM_Set_DevNode_Registry_Property_ExW
1248
        234   E9 0000DD00 CM_Set_Device_Interface_PropertyW
1249
        235   EA 0000DCE0 CM_Set_Device_Interface_Property_ExW
1250
        236   EB 00025610 CM_Set_HW_Prof
1251
        237   EC 00025630 CM_Set_HW_Prof_Ex
1252
        238   ED 00025660 CM_Set_HW_Prof_FlagsA
1253
        239   EE 00011550 CM_Set_HW_Prof_FlagsW
1254
        240   EF 00025680 CM_Set_HW_Prof_Flags_ExA
1255
        241   F0 00011530 CM_Set_HW_Prof_Flags_ExW
1256
        242   F1 000117F0 CM_Setup_DevNode
1257
        243   F2 00011650 CM_Setup_DevNode_Ex
1258
        244   F3 000208E0 CM_Test_Range_Available
1259
        245   F4 0001F510 CM_Uninstall_DevNode
1260
        246   F5 0001F600 CM_Uninstall_DevNode_Ex
1261
        247   F6 00023C30 CM_Unregister_Device_InterfaceA
1262
        248   F7 00023C40 CM_Unregister_Device_InterfaceW
1263
        249   F8 00023CA0 CM_Unregister_Device_Interface_ExA
1264
        250   F9 00023D70 CM_Unregister_Device_Interface_ExW
1265
        251   FA 00001AE0 CM_Unregister_Notification
1266
        252   FB 0001EE50 CM_Write_UserPowerKey
1267
        253   FC 00002160 DevCloseObjectQuery
1268
        254   FD 000021B0 DevCreateObjectQuery
1269
        255   FE 00002600 DevCreateObjectQueryEx
1270
        256   FF 00011310 DevCreateObjectQueryFromId
1271
        257  100 00011380 DevCreateObjectQueryFromIdEx
1272
        258  101 0002E2C0 DevCreateObjectQueryFromIds
1273
        259  102 0002E330 DevCreateObjectQueryFromIdsEx
1274
        260  103 0000CB10 DevFindProperty
1275
        261  104 0000C5B0 DevFreeObjectProperties
1276
        262  105 0000C610 DevFreeObjects
1277
        263  106 000034D0 DevGetObjectProperties
1278
        264  107 00003520 DevGetObjectPropertiesEx
1279
        265  108 00001720 DevGetObjects
1280
        266  109 00001770 DevGetObjectsEx
1281
        267  10A 0000EFD0 DevSetObjectProperties
1282
        268  10B 00011490 SwDeviceClose
1283
        269  10C 0000EB10 SwDeviceCreate
1284
        270  10D 0002F2A0 SwDeviceGetLifetime
1285
        271  10E 0000D890 SwDeviceInterfacePropertySet
1286
        272  10F 0000E550 SwDeviceInterfaceRegister
1287
        273  110 0000D9F0 SwDeviceInterfaceSetState
1288
        274  111 0000DB20 SwDevicePropertySet
1289
        275  112 0000E420 SwDeviceSetLifetime
1290
        276  113 00002240 SwMemFree
1291

1292
  Summary
1293

1294
        1000 .data
1295
        1000 .didat
1296
        3000 .pdata
1297
        D000 .rdata
1298
        1000 .reloc
1299
        1000 .rsrc
1300
       2F000 .text
1301

1302
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
1303
Copyright (C) Microsoft Corporation.  All rights reserved.
1304

1305

1306
Dump of file crypt32.dll
1307

1308
File Type: DLL
1309

1310
  Section contains the following exports for CRYPT32.dll
1311

1312
    00000000 characteristics
1313
    64CAB2D6 time date stamp Wed Aug  2 12:47:34 2023
1314
        0.00 version
1315
        1001 ordinal base
1316
        1000 number of functions
1317
         290 number of names
1318

1319
    ordinal hint RVA      name
1320

1321
       1020    0 00088A30 CertAddCRLContextToStore
1322
       1021    1 00088AB0 CertAddCRLLinkToStore
1323
       1022    2 00088A30 CertAddCTLContextToStore
1324
       1023    3 00088AB0 CertAddCTLLinkToStore
1325
       1024    4 0000D5B0 CertAddCertificateContextToStore
1326
       1025    5 00088AB0 CertAddCertificateLinkToStore
1327
       1026    6 000421F0 CertAddEncodedCRLToStore
1328
       1027    7 0000E8E0 CertAddEncodedCTLToStore
1329
       1028    8 00026570 CertAddEncodedCertificateToStore
1330
       1029    9 000899B0 CertAddEncodedCertificateToSystemStoreA
1331
       1030    A 00089A30 CertAddEncodedCertificateToSystemStoreW
1332
       1031    B 00089FB0 CertAddEnhancedKeyUsageIdentifier
1333
       1032    C 0008AFB0 CertAddRefServerOcspResponse
1334
       1033    D 0008AFC0 CertAddRefServerOcspResponseContext
1335
       1034    E 000115A0 CertAddSerializedElementToStore
1336
       1035    F 0004C0A0 CertAddStoreToCollection
1337
       1036   10 0008B250 CertAlgIdToOID
1338
       1037   11 0008AFD0 CertCloseServerOcspResponse
1339
       1038   12 00035E60 CertCloseStore
1340
       1039   13 00010660 CertCompareCertificate
1341
       1040   14 000122B0 CertCompareCertificateName
1342
       1041   15 000106C0 CertCompareIntegerBlob
1343
       1042   16 0002F3E0 CertComparePublicKeyInfo
1344
       1043   17 00035710 CertControlStore
1345
       1044   18 00045830 CertCreateCRLContext
1346
       1045   19 0000E8A0 CertCreateCTLContext
1347
       1046   1A 00088B10 CertCreateCTLEntryFromCertificateContextProperties
1348
       1047   1B 00054C80 CertCreateCertificateChainEngine
1349
       1048   1C 00028630 CertCreateCertificateContext
1350
       1049   1D 0003DDE0 CertCreateContext
1351
       1050   1E 0008B8C0 CertCreateSelfSignCertificate
1352
       1051   1F 00089000 CertDeleteCRLFromStore
1353
       1052   20 00089000 CertDeleteCTLFromStore
1354
       1053   21 00089000 CertDeleteCertificateFromStore
1355
       1054   22 000179D0 CertDuplicateCRLContext
1356
       1055   23 000127F0 CertDuplicateCTLContext
1357
       1056   24 00057040 CertDuplicateCertificateChain
1358
       1057   25 00018420 CertDuplicateCertificateContext
1359
       1058   26 0004C2D0 CertDuplicateStore
1360
       1059   27 00089020 CertEnumCRLContextProperties
1361
       1060   28 00011DF0 CertEnumCRLsInStore
1362
       1061   29 00089020 CertEnumCTLContextProperties
1363
       1062   2A 00017DB0 CertEnumCTLsInStore
1364
       1063   2B 00089020 CertEnumCertificateContextProperties
1365
       1064   2C 000190B0 CertEnumCertificatesInStore
1366
       1065   2D 0008FB30 CertEnumPhysicalStore
1367
       1066   2E 00089040 CertEnumSubjectInSortedCTL
1368
       1067   2F 0008FB50 CertEnumSystemStore
1369
       1068   30 0008FEE0 CertEnumSystemStoreLocation
1370
       1069   31 00013040 CertFindAttribute
1371
       1070   32 00006150 CertFindCRLInStore
1372
       1071   33 000891A0 CertFindCTLInStore
1373
       1072   34 00011EF0 CertFindCertificateInCRL
1374
       1073   35 00018FE0 CertFindCertificateInStore
1375
       1074   36 00090BB0 CertFindChainInStore
1376
       1075   37 00016230 CertFindExtension
1377
       1076   38 000072D0 CertFindRDNAttr
1378
       1077   39 000486E0 CertFindSubjectInCTL
1379
       1078   3A 00016B90 CertFindSubjectInSortedCTL
1380
       1079   3B 00017EB0 CertFreeCRLContext
1381
       1080   3C 00017EB0 CertFreeCTLContext
1382
       1081   3D 0000F7B0 CertFreeCertificateChain
1383
       1082   3E 00058200 CertFreeCertificateChainEngine
1384
       1083   3F 000584D0 CertFreeCertificateChainList
1385
       1084   40 0003C4B0 CertFreeCertificateContext
1386
       1085   41 0008B030 CertFreeServerOcspResponseContext
1387
       1086   42 00089200 CertGetCRLContextProperty
1388
       1087   43 000083E0 CertGetCRLFromStore
1389
       1088   44 00089200 CertGetCTLContextProperty
1390
       1089   45 00027680 CertGetCertificateChain
1391
       1090   46 0001F3B0 CertGetCertificateContextProperty
1392
       1091   47 00018DA0 CertGetEnhancedKeyUsage
1393
       1092   48 0008B290 CertGetIntendedKeyUsage
1394
       1093   49 00089230 CertGetIssuerCertificateFromStore
1395
       1094   4A 00091B40 CertGetNameStringA
1396
       1095   4B 00039EA0 CertGetNameStringW
1397
       1096   4C 00028F40 CertGetPublicKeyLength
1398
       1097   4D 0008B070 CertGetServerOcspResponseContext
1399
       1098   4E 00089330 CertGetStoreProperty
1400
       1099   4F 00052DC0 CertGetSubjectCertificateFromStore
1401
       1100   50 00012B80 CertGetValidUsages
1402
       1101   51 0008B3D0 CertIsRDNAttrsInCertificateName
1403
       1102   52 000938F0 CertIsStrongHashToSign
1404
       1103   53 00015EB0 CertIsValidCRLForCertificate
1405
       1104   54 000265F0 CertIsWeakHash
1406
       1105   55 00091C00 CertNameToStrA
1407
       1106   56 00058520 CertNameToStrW
1408
       1107   57 000488B0 CertOIDToAlgId
1409
       1108   58 0005ADC0 CertOpenServerOcspResponse
1410
       1109   59 00037580 CertOpenStore
1411
       1110   5A 00089AB0 CertOpenSystemStoreA
1412
       1111   5B 0005B4F0 CertOpenSystemStoreW
1413
       1112   5C 00091CA0 CertRDNValueToStrA
1414
       1113   5D 00091D70 CertRDNValueToStrW
1415
       1114   5E 0008FFB0 CertRegisterPhysicalStore
1416
       1115   5F 00090250 CertRegisterSystemStore
1417
       1116   60 0008A170 CertRemoveEnhancedKeyUsageIdentifier
1418
       1117   61 00007250 CertRemoveStoreFromCollection
1419
       1118   62 000C54D0 CertResyncCertificateChainEngine
1420
       1119   63 00093C50 CertRetrieveLogoOrBiometricInfo
1421
       1120   64 00016910 CertSaveStore
1422
       1121   65 00011910 CertSelectCertificateChains
1423
       1122   66 000169F0 CertSerializeCRLStoreElement
1424
       1123   67 000169F0 CertSerializeCTLStoreElement
1425
       1124   68 000169F0 CertSerializeCertificateStoreElement
1426
       1125   69 00012220 CertSetCRLContextProperty
1427
       1126   6A 000894D0 CertSetCTLContextProperty
1428
       1127   6B 0000D760 CertSetCertificateContextPropertiesFromCTLEntry
1429
       1128   6C 00012220 CertSetCertificateContextProperty
1430
       1129   6D 0008A270 CertSetEnhancedKeyUsage
1431
       1130   6E 00089500 CertSetStoreProperty
1432
       1131   6F 00091F10 CertStrToNameA
1433
       1132   70 0000E9F0 CertStrToNameW
1434
       1133   71 00090340 CertUnregisterPhysicalStore
1435
       1134   72 00090450 CertUnregisterSystemStore
1436
       1135   73 0008B5E0 CertVerifyCRLRevocation
1437
       1136   74 0008B670 CertVerifyCRLTimeValidity
1438
       1137   75 00094460 CertVerifyCTLUsage
1439
       1138   76 00027C90 CertVerifyCertificateChainPolicy
1440
       1139   77 00017270 CertVerifyRevocation
1441
       1140   78 00089570 CertVerifySubjectCertificateContext
1442
       1141   79 000105C0 CertVerifyTimeValidity
1443
       1142   7A 0008B710 CertVerifyValidityNesting
1444
       1143   7B 00057330 CryptAcquireCertificatePrivateKey
1445
       1144   7C 00058C10 CryptBinaryToStringA
1446
       1145   7D 00058AF0 CryptBinaryToStringW
1447
       1146   7E 000B7650 CryptCloseAsyncHandle
1448
       1147   7F 00095010 CryptCreateAsyncHandle
1449
       1148   80 00092DB0 CryptCreateKeyIdentifierFromCSP
1450
       1149   81 000968D0 CryptDecodeMessage
1451
       1150   82 000321A0 CryptDecodeObject
1452
       1151   83 00032300 CryptDecodeObjectEx
1453
       1152   84 00096970 CryptDecryptAndVerifyMessageSignature
1454
       1153   85 00096B90 CryptDecryptMessage
1455
       1154   86 0002A700 CryptEncodeObject
1456
       1155   87 0002A730 CryptEncodeObjectEx
1457
       1156   88 00096C00 CryptEncryptMessage
1458
       1157   89 000895B0 CryptEnumKeyIdentifierProperties
1459
       1158   8A 0002D150 CryptEnumOIDFunction
1460
       1159   8B 000A4C20 CryptEnumOIDInfo
1461
       1160   8C 000CCD50 CryptExportPKCS8
1462
       1161   8D 00008900 CryptExportPublicKeyInfo
1463
       1162   8E 00054F20 CryptExportPublicKeyInfoEx
1464
       1163   8F 00092E40 CryptExportPublicKeyInfoFromBCryptKeyHandle
1465
       1164   90 0008B760 CryptFindCertificateKeyProvInfo
1466
       1165   91 000A4D20 CryptFindLocalizedName
1467
       1166   92 0002E760 CryptFindOIDInfo
1468
       1167   93 000AEA00 CryptFormatObject
1469
       1168   94 00029360 CryptFreeOIDFunctionAddress
1470
       1169   95 00095030 CryptGetAsyncParam
1471
       1170   96 00017700 CryptGetDefaultOIDDllList
1472
       1171   97 000177B0 CryptGetDefaultOIDFunctionAddress
1473
       1172   98 000896B0 CryptGetKeyIdentifierProperty
1474
       1173   99 00096CE0 CryptGetMessageCertificates
1475
       1174   9A 00096D20 CryptGetMessageSignerCount
1476
       1175   9B 0002AF80 CryptGetOIDFunctionAddress
1477
       1176   9C 000A3320 CryptGetOIDFunctionValue
1478
       1177   9D 00050460 CryptHashCertificate
1479
       1178   9E 0002CF40 CryptHashCertificate2
1480
       1179   9F 00096DD0 CryptHashMessage
1481
       1180   A0 00092E90 CryptHashPublicKeyInfo
1482
       1181   A1 0002E5A0 CryptHashToBeSigned
1483
       1182   A2 000CD120 CryptImportPKCS8
1484
       1183   A3 0004FEA0 CryptImportPublicKeyInfo
1485
       1184   A4 00029E10 CryptImportPublicKeyInfoEx
1486
       1185   A5 0002B290 CryptImportPublicKeyInfoEx2
1487
       1186   A6 0003F640 CryptInitOIDFunctionSet
1488
       1187   A7 000B3A80 CryptInstallDefaultContext
1489
       1188   A8 0003F720 CryptInstallOIDFunctionAddress
1490
       1189   A9 000D9160 CryptLoadSip
1491
       1190   AA 00052BA0 CryptMemAlloc
1492
       1191   AB 00027550 CryptMemFree
1493
       1192   AC 000B3EA0 CryptMemRealloc
1494
       1193   AD 000029B0 CryptMsgCalculateEncodedLength
1495
       1194   AE 0003BDB0 CryptMsgClose
1496
       1195   AF 0003FF60 CryptMsgControl
1497
       1196   B0 000E2FD0 CryptMsgCountersign
1498
       1197   B1 000E3190 CryptMsgCountersignEncoded
1499
       1198   B2 00057730 CryptMsgDuplicate
1500
       1199   B3 00001ED0 CryptMsgEncodeAndSignCTL
1501
       1200   B4 0000E520 CryptMsgGetAndVerifySigner
1502
       1201   B5 0002F8A0 CryptMsgGetParam
1503
       1202   B6 0003C980 CryptMsgOpenToDecode
1504
       1203   B7 000020B0 CryptMsgOpenToEncode
1505
       1204   B8 00001FB0 CryptMsgSignCTL
1506
       1205   B9 0003AE10 CryptMsgUpdate
1507
       1206   BA 000E3510 CryptMsgVerifyCountersignatureEncoded
1508
       1207   BB 00056210 CryptMsgVerifyCountersignatureEncodedEx
1509
       1012   BC 000CA2F0 CryptObjectLocatorFree
1510
       1013   BD 000CA330 CryptObjectLocatorGet
1511
       1014   BE 000CA370 CryptObjectLocatorGetContent
1512
       1015   BF 000CA420 CryptObjectLocatorGetUpdated
1513
       1016   C0 000CA460 CryptObjectLocatorInitialize
1514
       1017   C1 000CA7D0 CryptObjectLocatorIsChanged
1515
       1018   C2 000CA7F0 CryptObjectLocatorRelease
1516
       1208   C3 00054860 CryptProtectData
1517
       1209   C4          CryptProtectMemory (forwarded to DPAPI.CryptProtectMemory)
1518
       1210   C5 0003CA90 CryptQueryObject
1519
       1211   C6 000A3410 CryptRegisterDefaultOIDFunction
1520
       1212   C7 000A3710 CryptRegisterOIDFunction
1521
       1213   C8 000A4DD0 CryptRegisterOIDInfo
1522
       1214   C9 000D9650 CryptRetrieveTimeStamp
1523
       1215   CA 000D9200 CryptSIPAddProvider
1524
       1216   CB 0002A2B0 CryptSIPCreateIndirectData
1525
       1217   CC 00052E30 CryptSIPGetCaps
1526
       1218   CD 000D9570 CryptSIPGetSealedDigest
1527
       1219   CE 0002A170 CryptSIPGetSignedDataMsg
1528
       1220   CF 0002A460 CryptSIPLoad
1529
       1221   D0 00007EA0 CryptSIPPutSignedDataMsg
1530
       1222   D1 000D93D0 CryptSIPRemoveProvider
1531
       1223   D2 00008310 CryptSIPRemoveSignedDataMsg
1532
       1224   D3 0004D320 CryptSIPRetrieveSubjectGuid
1533
       1225   D4 0004D0A0 CryptSIPRetrieveSubjectGuidForCatalogFile
1534
       1226   D5 00053490 CryptSIPVerifyIndirectData
1535
       1227   D6 000B7650 CryptSetAsyncParam
1536
       1228   D7 000897D0 CryptSetKeyIdentifierProperty
1537
       1229   D8 000A3810 CryptSetOIDFunctionValue
1538
       1230   D9 000501B0 CryptSignAndEncodeCertificate
1539
       1231   DA 00097030 CryptSignAndEncryptMessage
1540
       1232   DB 00050350 CryptSignCertificate
1541
       1233   DC 00097190 CryptSignMessage
1542
       1234   DD 000972A0 CryptSignMessageWithKey
1543
       1235   DE 0007A470 CryptStringToBinaryA
1544
       1236   DF 00045D50 CryptStringToBinaryW
1545
       1237   E0 000B3C40 CryptUninstallDefaultContext
1546
       1238   E1 0004C5F0 CryptUnprotectData
1547
       1239   E2          CryptUnprotectMemory (forwarded to DPAPI.CryptUnprotectMemory)
1548
       1240   E3 000A3900 CryptUnregisterDefaultOIDFunction
1549
       1241   E4 000A3BB0 CryptUnregisterOIDFunction
1550
       1242   E5 000A4FD0 CryptUnregisterOIDInfo
1551
       1243   E6          CryptUpdateProtectedState (forwarded to DPAPI.CryptUpdateProtectedState)
1552
       1244   E7 0008B870 CryptVerifyCertificateSignature
1553
       1245   E8 00019150 CryptVerifyCertificateSignatureEx
1554
       1246   E9 00097510 CryptVerifyDetachedMessageHash
1555
       1247   EA 00097570 CryptVerifyDetachedMessageSignature
1556
       1248   EB 000975F0 CryptVerifyMessageHash
1557
       1249   EC 00097640 CryptVerifyMessageSignature
1558
       1250   ED 000976C0 CryptVerifyMessageSignatureWithKey
1559
       1251   EE 000D9990 CryptVerifyTimeStampSignature
1560
       1252   EF 00017B50 I_CertChainEngineIsDisallowedCertificate
1561
       1253   F0 000277F0 I_CertDiagControl
1562
       1254   F1 000514B0 I_CertProtectFunction
1563
       1255   F2 000122F0 I_CertSrvProtectFunction
1564
       1256   F3 00089990 I_CertSyncStore
1565
       1257   F4 00056490 I_CertUpdateStore
1566
       1258   F5 000561E0 I_CryptAddRefLruEntry
1567
       1259   F6 000B7340 I_CryptAddSmartCardCertToStore
1568
       1260   F7 00058130 I_CryptAllocTls
1569
       1261   F8 0003F4B0 I_CryptAllocTlsEx
1570
       1262   F9 00027460 I_CryptCreateLruCache
1571
       1263   FA 00025460 I_CryptCreateLruEntry
1572
       1264   FB 000525A0 I_CryptDetachTls
1573
       1265   FC 000C5630 I_CryptDisableLruOfEntries
1574
       1266   FD 000C5670 I_CryptEnableLruOfEntries
1575
       1267   FE 00027590 I_CryptEnumMatchingLruEntries
1576
       1268   FF 000256A0 I_CryptFindLruEntry
1577
       1269  100 000C56E0 I_CryptFindLruEntryData
1578
       1270  101 000B7430 I_CryptFindSmartCardCertInStore
1579
       1271  102 000556F0 I_CryptFlushLruCache
1580
       1272  103 000561B0 I_CryptFreeLruCache
1581
       1273  104 00052950 I_CryptFreeTls
1582
       1274  105 0002C980 I_CryptGetAsn1Decoder
1583
       1275  106 00040AA0 I_CryptGetAsn1Encoder
1584
       1276  107 0003AD20 I_CryptGetDefaultCryptProv
1585
       1277  108 000B3D80 I_CryptGetDefaultCryptProvForEncrypt
1586
       1278  109 00079FE0 I_CryptGetFileVersion
1587
       1279  10A 00054C00 I_CryptGetLruEntryData
1588
       1280  10B 000C5710 I_CryptGetLruEntryIdentifier
1589
       1281  10C 000B7670 I_CryptGetOssGlobal
1590
       1282  10D 00015640 I_CryptGetTls
1591
       1283  10E 00025DB0 I_CryptInsertLruEntry
1592
       1284  10F 00055EC0 I_CryptInstallAsn1Module
1593
       1285  110 000B7670 I_CryptInstallOssGlobal
1594
       1286  111 0004CC10 I_CryptReadTrustedPublisherDWORDValueFromRegistry
1595
       1287  112 000B7650 I_CryptRegisterSmartCardStore
1596
       1288  113 00025620 I_CryptReleaseLruEntry
1597
       1289  114 00057120 I_CryptRemoveLruEntry
1598
       1290  115 00017230 I_CryptSetTls
1599
       1291  116 000578D0 I_CryptTouchLruEntry
1600
       1292  117 00052940 I_CryptUninstallAsn1Module
1601
       1293  118 000B7670 I_CryptUninstallOssGlobal
1602
       1294  119 000B7650 I_CryptUnregisterSmartCardStore
1603
       1295  11A 00058340 I_CryptWalkAllLruCacheEntries
1604
       1019  11B 0000C0A0 I_PFXImportCertStoreEx
1605
       1296  11C 000CBC20 PFXExportCertStore
1606
       1297  11D 000CBD30 PFXExportCertStore2
1607
       1298  11E 000CBD50 PFXExportCertStoreEx
1608
       1299  11F 0000D010 PFXImportCertStore
1609
       1300  120 0000C660 PFXIsPFXBlob
1610
       1301  121 000CBF40 PFXVerifyPassword
1611
       1001      0005D750 [NONAME]
1612
       1002      0007A0E0 [NONAME]
1613
       1003      00079C10 [NONAME]
1614
       1004      00079C00 [NONAME]
1615
       1005      00079CA0 [NONAME]
1616
       1006      00079C90 [NONAME]
1617
       1007      00079BB0 [NONAME]
1618
       1008      00079BF0 [NONAME]
1619
       1009      00079C50 [NONAME]
1620
       1010      00079C80 [NONAME]
1621
       1011      00079BA0 [NONAME]
1622
       2000      0000B100 [NONAME]
1623

1624
  Summary
1625

1626
        7000 .data
1627
        1000 .didat
1628
        D000 .pdata
1629
       35000 .rdata
1630
        2000 .reloc
1631
       B5000 .rsrc
1632
       F1000 .text
1633

1634
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
1635
Copyright (C) Microsoft Corporation.  All rights reserved.
1636

1637

1638
Dump of file cryptsp.dll
1639

1640
File Type: DLL
1641

1642
  Section contains the following exports for CRYPTSP.dll
1643

1644
    00000000 characteristics
1645
    559F3032 time date stamp Thu Jul  9 19:38:42 2015
1646
        0.00 version
1647
           1 ordinal base
1648
          65 number of functions
1649
          65 number of names
1650

1651
    ordinal hint RVA      name
1652

1653
          1    0 00005C50 CheckSignatureInFile
1654
          2    1 00002F80 CryptAcquireContextA
1655
          3    2 00002E20 CryptAcquireContextW
1656
          4    3 00001010 CryptContextAddRef
1657
          5    4 00002210 CryptCreateHash
1658
          6    5 000016B0 CryptDecrypt
1659
          7    6 00006050 CryptDeriveKey
1660
          8    7 00002420 CryptDestroyHash
1661
          9    8 000020E0 CryptDestroyKey
1662
         10    9 00006270 CryptDuplicateHash
1663
         11    A 00001090 CryptDuplicateKey
1664
         12    B 00001530 CryptEncrypt
1665
         13    C 00006450 CryptEnumProviderTypesA
1666
         14    D 00006800 CryptEnumProviderTypesW
1667
         15    E 000069F0 CryptEnumProvidersA
1668
         16    F 00006D10 CryptEnumProvidersW
1669
         17   10 00001C90 CryptExportKey
1670
         18   11 00001240 CryptGenKey
1671
         19   12 00002750 CryptGenRandom
1672
         20   13 00002BD0 CryptGetDefaultProviderA
1673
         21   14 00002A20 CryptGetDefaultProviderW
1674
         22   15 00002510 CryptGetHashParam
1675
         23   16 00001B80 CryptGetKeyParam
1676
         24   17 00004370 CryptGetProvParam
1677
         25   18 00004070 CryptGetUserKey
1678
         26   19 00002620 CryptHashData
1679
         27   1A 00006EF0 CryptHashSessionKey
1680
         28   1B 00001E50 CryptImportKey
1681
         29   1C 00003E00 CryptReleaseContext
1682
         30   1D 00001820 CryptSetHashParam
1683
         31   1E 00004450 CryptSetKeyParam
1684
         32   1F 00004550 CryptSetProvParam
1685
         33   20 00007050 CryptSetProviderA
1686
         34   21 000071A0 CryptSetProviderExA
1687
         35   22 00007660 CryptSetProviderExW
1688
         36   23 00007730 CryptSetProviderW
1689
         37   24 00004290 CryptSignHashA
1690
         38   25 00001230 CryptSignHashW
1691
         39   26 00001930 CryptVerifySignatureA
1692
         40   27 00001920 CryptVerifySignatureW
1693
         41   28 00002870 SystemFunction006
1694
         42   29 00003C20 SystemFunction007
1695
         43   2A 00009BB0 SystemFunction008
1696
         44   2B 00009C70 SystemFunction009
1697
         45   2C 00009C80 SystemFunction010
1698
         46   2D 00009CE0 SystemFunction011
1699
         47   2E 00009CF0 SystemFunction012
1700
         48   2F 00009D40 SystemFunction013
1701
         49   30 00009DF0 SystemFunction014
1702
         50   31 00009E00 SystemFunction015
1703
         51   32 00009D90 SystemFunction016
1704
         52   33 00009DE0 SystemFunction018
1705
         53   34 00009DF0 SystemFunction020
1706
         54   35 00009E00 SystemFunction021
1707
         55   36 00009DF0 SystemFunction022
1708
         56   37 00009E00 SystemFunction023
1709
         57   38 000041E0 SystemFunction024
1710
         58   39 00009E10 SystemFunction025
1711
         59   3A 000041E0 SystemFunction026
1712
         60   3B 00003D60 SystemFunction027
1713
         61   3C 00009B80 SystemFunction030
1714
         62   3D 00003F50 SystemFunction031
1715
         63   3E 00009E90 SystemFunction032
1716
         64   3F 00009E90 SystemFunction033
1717
         65   40 00005C50 SystemFunction035
1718

1719
  Summary
1720

1721
        1000 .data
1722
        1000 .didat
1723
        1000 .pdata
1724
        6000 .rdata
1725
        1000 .reloc
1726
        1000 .rsrc
1727
        B000 .text
1728

1729
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
1730
Copyright (C) Microsoft Corporation.  All rights reserved.
1731

1732

1733
Dump of file dbghelp.dll
1734

1735
File Type: DLL
1736

1737
  Section contains the following exports for dbghelp.dll
1738

1739
    00000000 characteristics
1740
    6270626D time date stamp Mon May  2 15:59:57 2022
1741
        0.00 version
1742
           1 ordinal base
1743
         232 number of functions
1744
         232 number of names
1745

1746
    ordinal hint RVA      name
1747

1748
          5    0 000E9620 DbgHelpCreateUserDump
1749
          6    1 000E9700 DbgHelpCreateUserDumpW
1750
          7    2 000E2A50 EnumDirTree
1751
          8    3 000E2B70 EnumDirTreeW
1752
          9    4 000DBDD0 EnumerateLoadedModules
1753
         10    5 000DBDD0 EnumerateLoadedModules64
1754
         11    6 000DBE50 EnumerateLoadedModulesEx
1755
         12    7 000DBED0 EnumerateLoadedModulesExW
1756
         13    8 000DBF50 EnumerateLoadedModulesW64
1757
         14    9 0000E0C0 ExtensionApiVersion
1758
         15    A 000E2BC0 FindDebugInfoFile
1759
         16    B 000E2BE0 FindDebugInfoFileEx
1760
         17    C 000E2CB0 FindDebugInfoFileExW
1761
         18    D 000E2D00 FindExecutableImage
1762
         19    E 000E2D20 FindExecutableImageEx
1763
         20    F 000E2E20 FindExecutableImageExW
1764
         21   10 000E2E70 FindFileInPath
1765
         22   11 000E2EC0 FindFileInSearchPath
1766
         23   12 000DBFD0 GetSymLoadError
1767
         24   13 000D52A0 GetTimestampForLoadedLibrary
1768
         25   14 000D4E10 ImageDirectoryEntryToData
1769
         26   15 000D4E30 ImageDirectoryEntryToDataEx
1770
         27   16 000D4F50 ImageNtHeader
1771
         28   17 000D4F80 ImageRvaToSection
1772
         29   18 000D4FE0 ImageRvaToVa
1773
         30   19 000E2F00 ImagehlpApiVersion
1774
         31   1A 0000DFB0 ImagehlpApiVersionEx
1775
         32   1B 000E2F10 MakeSureDirectoryPathExists
1776
         33   1C          MiniDumpReadDumpStream (forwarded to dbgcore.MiniDumpReadDumpStream)
1777
         34   1D          MiniDumpWriteDump (forwarded to dbgcore.MiniDumpWriteDump)
1778
         35   1E 000EF2D0 RangeMapAddPeImageSections
1779
         36   1F 000EF3C0 RangeMapCreate
1780
         37   20 000EF420 RangeMapFree
1781
         38   21 000EF440 RangeMapRead
1782
         39   22 000EF4E0 RangeMapRemove
1783
         40   23 000EF530 RangeMapWrite
1784
         41   24 0000DEC0 RemoveInvalidModuleList
1785
         42   25 0000DBF0 ReportSymbolLoadSummary
1786
         43   26 000E3080 SearchTreeForFile
1787
         44   27 000E30B0 SearchTreeForFileW
1788
         45   28 0000E0B0 SetCheckUserInterruptShared
1789
         46   29 000DBFE0 SetSymLoadError
1790
         47   2A 000EE730 StackWalk
1791
         48   2B 000EE730 StackWalk64
1792
         49   2C 00007030 StackWalkEx
1793
         50   2D 000DBFF0 SymAddSourceStream
1794
         51   2E 000DC000 SymAddSourceStreamA
1795
         52   2F 000DC070 SymAddSourceStreamW
1796
         53   30 000DC1E0 SymAddSymbol
1797
         54   31 000DC260 SymAddSymbolW
1798
         55   32 0000E050 SymAddrIncludeInlineTrace
1799
         56   33 0000DCE0 SymCleanup
1800
         57   34 000DC350 SymCompareInlineTrace
1801
         58   35 000DC880 SymDeleteSymbol
1802
         59   36 000DC8F0 SymDeleteSymbolW
1803
         60   37 000DC9C0 SymEnumLines
1804
         61   38 000DCA90 SymEnumLinesW
1805
         62   39 000DCB40 SymEnumProcesses
1806
         63   3A 000DCBE0 SymEnumSourceFileTokens
1807
         64   3B 000DCC80 SymEnumSourceFiles
1808
         65   3C 000DCD30 SymEnumSourceFilesW
1809
         66   3D 000DCDD0 SymEnumSourceLines
1810
         67   3E 000DCEC0 SymEnumSourceLinesW
1811
         68   3F 000DCF80 SymEnumSym
1812
         69   40 000DCFB0 SymEnumSymbols
1813
         70   41 000DCFE0 SymEnumSymbolsEx
1814
         71   42 000DD090 SymEnumSymbolsExW
1815
         72   43 000DD130 SymEnumSymbolsForAddr
1816
         73   44 000DD250 SymEnumSymbolsForAddrW
1817
         74   45 000DD370 SymEnumSymbolsW
1818
         75   46 000DD3A0 SymEnumTypes
1819
         76   47 000DD420 SymEnumTypesByName
1820
         77   48 000DD500 SymEnumTypesByNameW
1821
         78   49 000DD590 SymEnumTypesW
1822
         79   4A 000DD620 SymEnumerateModules
1823
         80   4B 000DD620 SymEnumerateModules64
1824
         81   4C 000DD690 SymEnumerateModulesW64
1825
         82   4D 000DD700 SymEnumerateSymbols
1826
         83   4E 000DD700 SymEnumerateSymbols64
1827
         84   4F 000DD780 SymEnumerateSymbolsW
1828
         85   50 000DD780 SymEnumerateSymbolsW64
1829
         86   51 000E30E0 SymFindDebugInfoFile
1830
         87   52 000E31D0 SymFindDebugInfoFileW
1831
         88   53 000E3250 SymFindExecutableImage
1832
         89   54 000E3340 SymFindExecutableImageW
1833
         90   55 000E33C0 SymFindFileInPath
1834
         91   56 000E34F0 SymFindFileInPathW
1835
          1   57 000DB350 SymFreeDiaString
1836
         92   58 000DD800 SymFromAddr
1837
         93   59 000DD820 SymFromAddrW
1838
         94   5A 000DD840 SymFromIndex
1839
         95   5B 000DD8B0 SymFromIndexW
1840
         96   5C 000DD990 SymFromInlineContext
1841
         97   5D 000DD9E0 SymFromInlineContextW
1842
         98   5E 000DDA30 SymFromName
1843
         99   5F 000DDAB0 SymFromNameW
1844
        100   60 000DDAE0 SymFromToken
1845
        101   61 000DDB90 SymFromTokenW
1846
        102   62 00009D10 SymFunctionTableAccess
1847
        103   63 00009D10 SymFunctionTableAccess64
1848
        104   64 00009D30 SymFunctionTableAccess64AccessRoutines
1849
          2   65 000DB360 SymGetDiaSession
1850
        105   66 000D5FE0 SymGetFileLineOffsets64
1851
        106   67 000DDC80 SymGetHomeDirectory
1852
        107   68 000DDD00 SymGetHomeDirectoryW
1853
        108   69 000DDDC0 SymGetLineFromAddr
1854
        109   6A 000DDDC0 SymGetLineFromAddr64
1855
        110   6B 000DDDF0 SymGetLineFromAddrW64
1856
        111   6C 000DDE20 SymGetLineFromInlineContext
1857
        112   6D 000DDEF0 SymGetLineFromInlineContextW
1858
        113   6E 000DE050 SymGetLineFromName
1859
        114   6F 000DE050 SymGetLineFromName64
1860
        115   70 000DE120 SymGetLineFromNameW64
1861
        116   71 000DE6C0 SymGetLineNext
1862
        117   72 000DE6C0 SymGetLineNext64
1863
        118   73 000DE730 SymGetLineNextW64
1864
        119   74 000DE750 SymGetLinePrev
1865
        120   75 000DE750 SymGetLinePrev64
1866
        121   76 000DE7C0 SymGetLinePrevW64
1867
        122   77 000DE7D0 SymGetModuleBase
1868
        123   78 000DE7D0 SymGetModuleBase64
1869
        124   79 000DE830 SymGetModuleInfo
1870
        125   7A 000DE830 SymGetModuleInfo64
1871
        126   7B 0000AED0 SymGetModuleInfoW
1872
        127   7C 0000AED0 SymGetModuleInfoW64
1873
          3   7D 000DB390 SymGetOmapBlockBase
1874
        128   7E 000DE8D0 SymGetOmaps
1875
        129   7F 0000F1C0 SymGetOptions
1876
        130   80 000DE9B0 SymGetScope
1877
        131   81 000DEA30 SymGetScopeW
1878
        132   82 000DEB40 SymGetSearchPath
1879
        133   83 000DEBC0 SymGetSearchPathW
1880
        134   84 000DEC20 SymGetSourceFile
1881
        135   85 000DECA0 SymGetSourceFileFromToken
1882
        136   86 000DED50 SymGetSourceFileFromTokenW
1883
        137   87 000DEDC0 SymGetSourceFileToken
1884
        138   88 000DEE30 SymGetSourceFileTokenW
1885
        139   89 000DEEF0 SymGetSourceFileW
1886
        140   8A 000DEF70 SymGetSourceVarFromToken
1887
        141   8B 000DF040 SymGetSourceVarFromTokenW
1888
        142   8C 000DF0F0 SymGetSymFromAddr
1889
        143   8D 000DF0F0 SymGetSymFromAddr64
1890
        144   8E 000DF130 SymGetSymFromName
1891
        145   8F 000DF130 SymGetSymFromName64
1892
        146   90 000DF1A0 SymGetSymNext
1893
        147   91 000DF1A0 SymGetSymNext64
1894
        148   92 000DF1C0 SymGetSymPrev
1895
        149   93 000DF1C0 SymGetSymPrev64
1896
        150   94 000E80D0 SymGetSymbolFile
1897
        151   95 000E8200 SymGetSymbolFileW
1898
        152   96 000DF1D0 SymGetTypeFromName
1899
        153   97 000DF280 SymGetTypeFromNameW
1900
        154   98 000DF3E0 SymGetTypeInfo
1901
        155   99 000DF420 SymGetTypeInfoEx
1902
        156   9A 000DF450 SymGetUnwindInfo
1903
        157   9B 0000F250 SymInitialize
1904
        158   9C 0000E120 SymInitializeW
1905
        159   9D 000DF5F0 SymLoadModule
1906
        160   9E 000DF5F0 SymLoadModule64
1907
        161   9F 000DF630 SymLoadModuleEx
1908
        162   A0 0000B500 SymLoadModuleExW
1909
        163   A1 000DF710 SymMatchFileName
1910
        164   A2 000DF810 SymMatchFileNameW
1911
        165   A3 000DF8F0 SymMatchString
1912
        166   A4 000DF930 SymMatchStringA
1913
        167   A5 000DF940 SymMatchStringW
1914
        168   A6 000DF980 SymNext
1915
        169   A7 000DFA20 SymNextW
1916
        170   A8 000DFA40 SymPrev
1917
        171   A9 000DFAE0 SymPrevW
1918
        172   AA 000DFAF0 SymQueryInlineTrace
1919
        173   AB 000DFE00 SymRefreshModuleList
1920
        174   AC 000DFE70 SymRegisterCallback
1921
        175   AD 000DFE70 SymRegisterCallback64
1922
        176   AE 0000DE40 SymRegisterCallbackW64
1923
        177   AF 0000DF40 SymRegisterFunctionEntryCallback
1924
        178   B0 0000DF40 SymRegisterFunctionEntryCallback64
1925
        179   B1 000DFEE0 SymSearch
1926
        180   B2 000DFFB0 SymSearchW
1927
        181   B3 000E0070 SymSetContext
1928
        182   B4 000E0120 SymSetHomeDirectory
1929
        183   B5 000E01C0 SymSetHomeDirectoryW
1930
        184   B6 0000E930 SymSetOptions
1931
        185   B7 000E0240 SymSetParentWindow
1932
        186   B8 000E0270 SymSetScopeFromAddr
1933
        187   B9 000E0280 SymSetScopeFromIndex
1934
        188   BA 0000DAC0 SymSetScopeFromInlineContext
1935
        189   BB 000E0340 SymSetSearchPath
1936
        190   BC 0000E380 SymSetSearchPathW
1937
        191   BD 000E86A0 SymSrvDeltaName
1938
        192   BE 000E8770 SymSrvDeltaNameW
1939
        193   BF 000E8920 SymSrvGetFileIndexInfo
1940
        194   C0 000E89F0 SymSrvGetFileIndexInfoW
1941
        195   C1 000E8B20 SymSrvGetFileIndexString
1942
        196   C2 000E8BE0 SymSrvGetFileIndexStringW
1943
        197   C3 000E8CB0 SymSrvGetFileIndexes
1944
        198   C4 000E8D20 SymSrvGetFileIndexesW
1945
        199   C5 000E8DE0 SymSrvGetSupplement
1946
        200   C6 000E8EA0 SymSrvGetSupplementW
1947
        201   C7 000E8FB0 SymSrvIsStore
1948
        202   C8 000E8FF0 SymSrvIsStoreW
1949
        203   C9 000E90E0 SymSrvStoreFile
1950
        204   CA 000E9180 SymSrvStoreFileW
1951
        205   CB 000E9240 SymSrvStoreSupplement
1952
        206   CC 000E9300 SymSrvStoreSupplementW
1953
        207   CD 000E0380 SymUnDName
1954
        208   CE 000E0380 SymUnDName64
1955
        209   CF 00009FD0 SymUnloadModule
1956
        210   D0 00009FD0 SymUnloadModule64
1957
        211   D1 000E03D0 UnDecorateSymbolName
1958
        212   D2 000E0460 UnDecorateSymbolNameW
1959
        213   D3 0000DFF0 WinDbgExtensionDllInit
1960
          4   D4 000CE2A0 _EFN_DumpImage
1961
        214   D5 000D2E10 block
1962
        215   D6 000D3010 chksym
1963
        216   D7 000E0510 dbghelp
1964
        217   D8 000D3210 dh
1965
        218   D9 000D3220 fptr
1966
        219   DA 000D32B0 homedir
1967
        220   DB 000D3410 inlinedbg
1968
        221   DC 000D3490 itoldyouso
1969
        222   DD 000D3690 lmi
1970
        223   DE 000D39C0 lminfo
1971
        224   DF 000D3C10 omap
1972
        225   E0 000D3E50 optdbgdump
1973
        226   E1 000D3FC0 optdbgdumpaddr
1974
        227   E2 000D4150 srcfiles
1975
        228   E3 000D42A0 stack_force_ebp
1976
        229   E4 000D44A0 stackdbg
1977
        230   E5 000D46C0 sym
1978
        231   E6 000D4840 symsrv
1979
        232   E7 000D48B0 vc7fpo
1980

1981
  Summary
1982

1983
       1F000 .data
1984
        1000 .didat
1985
        3000 .mrdata
1986
       10000 .pdata
1987
       48000 .rdata
1988
        5000 .reloc
1989
        1000 .rsrc
1990
      108000 .text
1991
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
1992
Copyright (C) Microsoft Corporation.  All rights reserved.
1993

1994

1995
Dump of file dhcpcsvc.dll
1996

1997
File Type: DLL
1998

1999
  Section contains the following exports for dhcpcsvc.DLL
2000

2001
    00000000 characteristics
2002
    633AE20A time date stamp Mon Oct  3 06:22:18 2022
2003
        0.00 version
2004
           1 ordinal base
2005
          67 number of functions
2006
          67 number of names
2007

2008
    ordinal hint RVA      name
2009

2010
          1    0 000033E0 DhcpAcquireParameters
2011
          2    1 00003510 DhcpAcquireParametersByBroadcast
2012
          3    2 000026D0 DhcpCApiCleanup
2013
          4    3 00003640 DhcpCApiInitialize
2014
          5    4 00003660 DhcpClient_Generalize
2015
          6    5 00003830 DhcpDeRegisterConnectionStateNotification
2016
          7    6 00003930 DhcpDeRegisterOptions
2017
          8    7 00003940 DhcpDeRegisterParamChange
2018
          9    8 00003A80 DhcpDelPersistentRequestParams
2019
         10    9 00003DC0 DhcpEnableDhcp
2020
         11    A 00004080 DhcpEnableTracing
2021
         12    B 0000A490 DhcpEnumClasses
2022
         13    C 00001F90 DhcpEnumInterfaces
2023
         14    D 00004110 DhcpFallbackRefreshParams
2024
         15    E 000015C0 DhcpFreeEnumeratedInterfaces
2025
         16    F 00002280 DhcpFreeLeaseInfo
2026
         17   10 00001340 DhcpFreeLeaseInfoArray
2027
         18   11 00004240 DhcpFreeMem
2028
         19   12 00004270 DhcpGetClassId
2029
         20   13 000043F0 DhcpGetClientId
2030
         21   14 00004570 DhcpGetDhcpServicedConnections
2031
         22   15 000047B0 DhcpGetFallbackParams
2032
         23   16 00004890 DhcpGetNotificationStatus
2033
         24   17 00004BC0 DhcpGetOriginalSubnetMask
2034
         25   18 00004CA0 DhcpGetTraceArray
2035
         26   19 0001582C DhcpGlobalIsShuttingDown
2036
         27   1A 00015820 DhcpGlobalServiceSyncEvent
2037
         28   1B 00015818 DhcpGlobalTerminateEvent
2038
         29   1C 0000A680 DhcpHandlePnPEvent
2039
         30   1D 00001010 DhcpIsEnabled
2040
         31   1E 00005130 DhcpLeaseIpAddress
2041
         32   1F 00005170 DhcpLeaseIpAddressEx
2042
         33   20 0000A880 DhcpNotifyConfigChange
2043
         34   21 0000A8C0 DhcpNotifyConfigChangeEx
2044
         35   22 00005570 DhcpNotifyMediaReconnected
2045
         36   23 0000AA50 DhcpOpenGlobalEvent
2046
         37   24 000056A0 DhcpPersistentRequestParams
2047
         38   25 00002110 DhcpQueryLeaseInfo
2048
         39   26 00001C50 DhcpQueryLeaseInfoArray
2049
         40   27 00002030 DhcpQueryLeaseInfoEx
2050
         41   28 00005990 DhcpRegisterConnectionStateNotification
2051
         42   29 00005B60 DhcpRegisterOptions
2052
         43   2A 00005CD0 DhcpRegisterParamChange
2053
         44   2B 00006D30 DhcpReleaseIpAddressLease
2054
         45   2C 00006D50 DhcpReleaseIpAddressLeaseEx
2055
         46   2D 00007100 DhcpReleaseParameters
2056
         47   2E 00007230 DhcpRemoveDNSRegistrations
2057
         48   2F 00007330 DhcpRenewIpAddressLease
2058
         49   30 00007360 DhcpRenewIpAddressLeaseEx
2059
         50   31 00007750 DhcpRequestCachedParams
2060
         51   32 00007A90 DhcpRequestOptions
2061
         52   33 000017F0 DhcpRequestParams
2062
         53   34 00008050 DhcpSetClassId
2063
         54   35 00008260 DhcpSetClientId
2064
         55   36 00008430 DhcpSetFallbackParams
2065
         56   37 00008600 DhcpSetMSFTVendorSpecificOptions
2066
         57   38 000088D0 DhcpStaticRefreshParams
2067
         58   39 00008A10 DhcpUndoRequestParams
2068
         59   3A 00008A40 Dhcpv4CheckServerAvailability
2069
         60   3B 00008B60 Dhcpv4EnableDhcpEx
2070
         61   3C 00008C90 McastApiCleanup
2071
         62   3D 00008D50 McastApiStartup
2072
         63   3E 00008E40 McastEnumerateScopes
2073
         64   3F 000090B0 McastGenUID
2074
         65   40 00009220 McastReleaseAddress
2075
         66   41 00009470 McastRenewAddress
2076
         67   42 000097B0 McastRequestAddress
2077

2078
  Summary
2079

2080
        1000 .data
2081
        1000 .didat
2082
        1000 .pdata
2083
        8000 .rdata
2084
        1000 .reloc
2085
        1000 .rsrc
2086
        C000 .text
2087
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
2088
Copyright (C) Microsoft Corporation.  All rights reserved.
2089

2090

2091
Dump of file DWrite.dll
2092

2093
File Type: DLL
2094

2095
  Section contains the following exports for DWrite.dll
2096

2097
    00000000 characteristics
2098
    621EE1CA time date stamp Tue Mar  1 19:17:30 2022
2099
        0.00 version
2100
           1 ordinal base
2101
           1 number of functions
2102
           1 number of names
2103

2104
    ordinal hint RVA      name
2105

2106
          1    0 0006A440 DWriteCreateFactory
2107

2108
  Summary
2109

2110
        8000 .data
2111
        1000 .didat
2112
       13000 .pdata
2113
       A9000 .rdata
2114
        2000 .reloc
2115
       3C000 .rsrc
2116
      153000 .text
2117
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
2118
Copyright (C) Microsoft Corporation.  All rights reserved.
2119

2120

2121
Dump of file dxgi.dll
2122

2123
File Type: DLL
2124

2125
  Section contains the following exports for dxgi.dll
2126

2127
    00000000 characteristics
2128
    559F2BA5 time date stamp Thu Jul  9 19:19:17 2015
2129
        0.00 version
2130
           1 ordinal base
2131
          19 number of functions
2132
          19 number of names
2133

2134
    ordinal hint RVA      name
2135

2136
          1    0 000097B0 ApplyCompatResolutionQuirking
2137
          2    1 000192D0 CompatString
2138
          3    2 00019240 CompatValue
2139
         10    3 00005DE0 CreateDXGIFactory
2140
         11    4 00006180 CreateDXGIFactory1
2141
         12    5 00005F30 CreateDXGIFactory2
2142
         13    6 0001F1C0 DXGID3D10CreateDevice
2143
         14    7 0001F1C0 DXGID3D10CreateLayeredDevice
2144
         15    8 000095D0 DXGID3D10ETWRundown
2145
         16    9 00043720 DXGID3D10GetLayeredDeviceSize
2146
         17    A 0001F1C0 DXGID3D10RegisterLayers
2147
          4    B 00041590 DXGIDumpJournal
2148
         18    C 00043730 DXGIGetDebugInterface1
2149
         19    D 00001F20 DXGIReportAdapterConfiguration
2150
          5    E 000417B0 DXGIRevertToSxS
2151
          6    F 0001F950 PIXBeginCapture
2152
          7   10 0001F950 PIXEndCapture
2153
          8   11 0001F950 PIXGetCaptureState
2154
          9   12 00042560 SetAppCompatStringPointer
2155

2156
  Summary
2157

2158
        3000 .data
2159
        1000 .didat
2160
        5000 .pdata
2161
       1F000 .rdata
2162
        1000 .reloc
2163
       16000 .rsrc
2164
       5C000 .text
2165
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
2166
Copyright (C) Microsoft Corporation.  All rights reserved.
2167

2168

2169
Dump of file FirewallAPI.dll
2170

2171
File Type: DLL
2172

2173
  Section contains the following exports for FirewallAPI.dll
2174

2175
    00000000 characteristics
2176
    559F2D18 time date stamp Thu Jul  9 19:25:28 2015
2177
        0.00 version
2178
           1 ordinal base
2179
         197 number of functions
2180
         197 number of names
2181

2182
    ordinal hint RVA      name
2183

2184
          6    0 00001C90 DllCanUnloadNow
2185
          7    1 00001D50 DllGetClassObject
2186
          8    2 00017660 DllRegisterServer
2187
          9    3 000176B0 DllUnregisterServer
2188
         10    4 00038730 FWAddAuthenticationSet
2189
         11    5 000388B0 FWAddConnectionSecurityRule
2190
         12    6 00038A30 FWAddCryptoSet
2191
         13    7 00038B80 FWAddFirewallRule
2192
         14    8 00038D20 FWAddMainModeRule
2193
         15    9 00038E50 FWAddSecurityRealm
2194
         16    A 00001E30 FWChangeNotificationCreate
2195
         17    B 0001D590 FWChangeNotificationDestroy
2196
         18    C 000390A0 FWChangeTransactionalState
2197
         19    D 000033E0 FWClosePolicyStore
2198
         20    E 00039220 FWCopyAuthenticationSet
2199
         21    F 00039270 FWCopyConnectionSecurityRule
2200
         22   10 000392D0 FWCopyCryptoSet
2201
         23   11 00039330 FWCopyFirewallRule
2202
         24   12 00039390 FWDeleteAllAuthenticationSets
2203
         25   13 00039470 FWDeleteAllConnectionSecurityRules
2204
         26   14 00039540 FWDeleteAllCryptoSets
2205
         27   15 00039620 FWDeleteAllFirewallRules
2206
         28   16 000396F0 FWDeleteAllMainModeRules
2207
         29   17 000397C0 FWDeleteAuthenticationSet
2208
         30   18 000398A0 FWDeleteConnectionSecurityRule
2209
         31   19 00039980 FWDeleteCryptoSet
2210
         32   1A 00039A60 FWDeleteFirewallRule
2211
         33   1B 00039B40 FWDeleteMainModeRule
2212
         34   1C 00039C20 FWDeletePhase1SAs
2213
         35   1D 00039CE0 FWDeletePhase2SAs
2214
         36   1E 00039DA0 FWDeleteSecurityRealm
2215
         37   1F 00039DD0 FWDiagGetAppList
2216
         38   20 00039ED0 FWEnumAdapters
2217
         39   21 00039FE0 FWEnumAuthenticationSets
2218
         40   22 0003A180 FWEnumConnectionSecurityRules
2219
         41   23 0003A320 FWEnumCryptoSets
2220
         42   24 00007540 FWEnumFirewallRules
2221
         43   25 0003A490 FWEnumMainModeRules
2222
         44   26 0003A5E0 FWEnumNetworks
2223
         45   27 0003A6F0 FWEnumPhase1SAs
2224
         46   28 0003A7D0 FWEnumPhase2SAs
2225
         47   29 0003A8B0 FWEnumProducts
2226
         48   2A 0003A9C0 FWExportPolicy
2227
         49   2B 00006ED0 FWFreeAdapters
2228
         50   2C 0003AB00 FWFreeAuthenticationSet
2229
         51   2D 0003AB10 FWFreeAuthenticationSets
2230
         52   2E 0003ABD0 FWFreeAuthenticationSetsByHandle
2231
         53   2F 0003ACC0 FWFreeConnectionSecurityRule
2232
         54   30 0003ACD0 FWFreeConnectionSecurityRules
2233
         55   31 0003AD90 FWFreeConnectionSecurityRulesByHandle
2234
         56   32 0003AE80 FWFreeCryptoSet
2235
         57   33 0003AE90 FWFreeCryptoSets
2236
         58   34 0003AF50 FWFreeCryptoSetsByHandle
2237
         59   35 00006ED0 FWFreeDiagAppList
2238
         60   36 0003B060 FWFreeFirewallRule
2239
         61   37 000098D0 FWFreeFirewallRules
2240
         62   38 0003B070 FWFreeFirewallRulesByHandle
2241
         63   39 0003B160 FWFreeFirewallRulesOld
2242
         64   3A 0003B230 FWFreeMainModeRule
2243
         65   3B 0003B240 FWFreeMainModeRules
2244
         66   3C 0003B300 FWFreeMainModeRulesByHandle
2245
         67   3D 00006ED0 FWFreeNetworks
2246
         68   3E 0003B3F0 FWFreePhase1SAs
2247
         69   3F 0003B4E0 FWFreePhase2SAs
2248
         70   40 00006ED0 FWFreeProducts
2249
         71   41 00006400 FWGetConfig
2250
         72   42 00006970 FWGetConfig2
2251
         73   43 00009220 FWGetGlobalConfig
2252
         74   44 00009780 FWGetGlobalConfig2
2253
         75   45 0003B5A0 FWGetGlobalConfig3
2254
         76   46 000066C0 FWGetIndicatedPortInUse
2255
         77   47 0003B6B0 FWImportPolicy
2256
         78   48 000035D0 FWIndicatePortInUse
2257
         79   49 0003B7F0 FWIndicateProxyForUrl
2258
         80   4A 0003B8F0 FWIndicateProxyResolverRefresh
2259
         81   4B 0003B900 FWIndicateTupleInUse
2260
         82   4C 0003BA80 FWIndicateTupleInUse2
2261
         83   4D 0003BC00 FWIsTargetAProxy
2262
         84   4E 000030A0 FWOpenPolicyStore
2263
         85   4F 0003BDE0 FWQueryAuthenticationSets
2264
         86   50 0003BF10 FWQueryConnectionSecurityRules
2265
         87   51 0003C040 FWQueryCryptoSets
2266
         88   52 000064E0 FWQueryFirewallRules
2267
         89   53 0003C170 FWQueryIsolationType
2268
         90   54 0003C2B0 FWQueryMainModeRules
2269
         91   55 0003C3D0 FWRegisterProduct
2270
         92   56 000065F0 FWResetIndicatedPortInUse
2271
         93   57 00006D90 FWResetIndicatedTupleInUse
2272
         94   58 0003C560 FWRestoreDefaults
2273
         95   59 0003C820 FWRestoreGPODefaults
2274
         96   5A 0003C980 FWRevertTransaction
2275
         97   5B 0003CA90 FWSelectConSecRule
2276
         98   5C 0003CC60 FWSetAuthenticationSet
2277
         99   5D 0003CDE0 FWSetConfig
2278
        100   5E 0003CED0 FWSetConnectionSecurityRule
2279
        101   5F 0003D050 FWSetCryptoSet
2280
        102   60 0003D1A0 FWSetFirewallRule
2281
        103   61 0003D340 FWSetGlobalConfig
2282
        104   62 0003D490 FWSetGlobalConfig2
2283
        105   63 0003D5E0 FWSetMainModeRule
2284
        106   64 0003D710 FWStatusMessageFromStatusCode
2285
        107   65 0003D8D0 FWUnregisterProduct
2286
        108   66 0003D990 FWVerifyAuthenticationSet
2287
        109   67 0003D9F0 FWVerifyAuthenticationSetQuery
2288
        110   68 0003DA50 FWVerifyConnectionSecurityRule
2289
        111   69 0003DAB0 FWVerifyConnectionSecurityRuleQuery
2290
        112   6A 0003DB10 FWVerifyCryptoSet
2291
        113   6B 0003DB70 FWVerifyCryptoSetQuery
2292
        114   6C 0003DBD0 FWVerifyFirewallRule
2293
        115   6D 00003070 FWVerifyFirewallRuleQuery
2294
        116   6E 0003DC30 FWVerifyMainModeRule
2295
        117   6F 0003DC90 FWVerifyMainModeRuleQuery
2296
        118   70 0001EA90 FwActivate
2297
        119   71 00001610 FwAlloc
2298
        120   72 00006940 FwAllocCheckSize
2299
        121   73 00021060 FwAllowedProgramsAdd
2300
        122   74 00021230 FwAllowedProgramsDelete
2301
        123   75 00006210 FwAnalyzeFirewallPolicy
2302
        124   76 00001F00 FwAnalyzeFirewallPolicyOnProfile
2303
        125   77 00021390 FwApiHelperFree
2304
        126   78 00021420 FwApiHelperInit
2305
          1   79 00018E60 FwBstrToPorts
2306
        127   7A 0003DCF0 FwConvertIPv6SubNetToRange
2307
        128   7B 0003DD00 FwCopyAuthSet
2308
        129   7C 0003DD60 FwCopyMainModeRule
2309
        130   7D 0003DDC0 FwCopyWFAddressesContents
2310
        131   7E 00006EC0 FwEmptyWFAddresses
2311
        132   7F 00006ED0 FwFree
2312
        133   80 00006EC0 FwFreeAddresses
2313
        134   81 0003DE20 FwFreePorts
2314
        135   82 0003DE50 FwGetAddressesAsString
2315
          2   83 0001BCD0 FwGetCurrentProfile
2316
          3   84 00019110 FwGetVersionField
2317
        136   85 000214D0 FwIcmpSettingsEnum
2318
        137   86 00021650 FwIcmpSettingsSet
2319
        138   87 0003DEB0 FwIsGroupPolicyEnforced
2320
        139   88 0001D3A0 FwIsRemoteManagementEnabled
2321
        140   89 000217C0 FwLogSettingsSet
2322
        141   8A 0003E400 FwMergeAddresses
2323
        142   8B 00021A00 FwMulticastBroadcastResponsesEnum
2324
        143   8C 00021B70 FwMulticastBroadcastResponsesSet
2325
        144   8D 00021CD0 FwNotificationsEnum
2326
        145   8E 00021E40 FwNotificationsSet
2327
        146   8F 00021FA0 FwOpModesEnum
2328
        147   90 00022110 FwOpModesSet
2329
        148   91 00022260 FwPortOpeningsAdd
2330
        149   92 00022460 FwPortOpeningsDelete
2331
        150   93 000225D0 FwProfileTypeCurrentGet
2332
        151   94 00022680 FwProfileTypeGet
2333
        152   95 00022730 FwRestoreDefaults
2334
        153   96 000227C0 FwServicesEnum
2335
        154   97 000229A0 FwServicesSet
2336
        155   98 0003E410 FwStringToAddresses
2337
        156   99 0003E4C0 FwStringToPorts
2338
          4   9A 0001BDA0 GetDisabledInterfaces
2339
        157   9B 00006E40 IcfAddrChangeNotificationCreate
2340
        158   9C 00001E30 IcfChangeNotificationCreate
2341
        159   9D 0001D590 IcfChangeNotificationDestroy
2342
        160   9E 0001D610 IcfConnect
2343
        161   9F 0000D370 IcfDisconnect
2344
        162   A0 0001D620 IcfFreeDynamicFwPorts
2345
        163   A1 0001D6D0 IcfFreeProfile
2346
        164   A2 0001D950 IcfFreeTickets
2347
        165   A3 0001D9E0 IcfGetCurrentProfileType
2348
        166   A4 0001DA80 IcfGetDynamicFwPorts
2349
        167   A5 0001DD90 IcfGetOperationalMode
2350
        168   A6 0001DF00 IcfGetProfile
2351
        169   A7 0001E210 IcfGetTickets
2352
        170   A8 00022DD0 IcfIsPortAllowed
2353
        171   A9 0000D370 IcfOpenDynamicFwPortWithoutSocket
2354
        172   AA 0001E4E0 IcfSubNetsGetScope
2355
        173   AB 000060D0 IsFirewallInCoExistanceMode
2356
        174   AC 00008730 IsPortOrICMPAllowed
2357
        175   AD 0003E590 NetworkIsolationAddAllowEnterpriseIdRule
2358
        176   AE 0003E680 NetworkIsolationCreateAllInterfacesContainer
2359
        177   AF 0003E920 NetworkIsolationCreateAppContainer
2360
        178   B0 0003EBD0 NetworkIsolationCreateInterfaceContainer
2361
        179   B1 0003EE80 NetworkIsolationDeleteAllInterfacesContainer
2362
        180   B2 0003EF40 NetworkIsolationDeleteAllowEnterpriseIdRule
2363
        181   B3 0003EF50 NetworkIsolationDeleteAppContainer
2364
        182   B4 0003F1C0 NetworkIsolationDeleteInterfaceContainer
2365
        183   B5 00001130 NetworkIsolationDiagnoseConnectFailure
2366
        184   B6 000012A0 NetworkIsolationDiagnoseConnectFailureAndGetInfo
2367
        185   B7 00001360 NetworkIsolationDiagnoseListen
2368
        186   B8 0003F290 NetworkIsolationDiagnoseSocketCreation
2369
        187   B9 0003F400 NetworkIsolationEnumAppContainers
2370
        188   BA 0003F570 NetworkIsolationEnumerateAppContainerRules
2371
          5   BB 00006ED0 NetworkIsolationFreeAppContainers
2372
        189   BC 0003F5F0 NetworkIsolationGetAppContainer
2373
        190   BD 0003F740 NetworkIsolationGetAppContainerConfig
2374
        191   BE 0003F8A0 NetworkIsolationGetEnterpriseId
2375
        192   BF 0003F920 NetworkIsolationGetEnterpriseIdAsync
2376
        193   C0 0003FCF0 NetworkIsolationGetEnterpriseIdClose
2377
        194   C1 0003FE80 NetworkIsolationRegisterForAppContainerChanges
2378
        195   C2 00040290 NetworkIsolationSetAppContainerConfig
2379
        196   C3 00040370 NetworkIsolationSetupAppContainerBinaries
2380
        197   C4 00040640 NetworkIsolationUnregisterForAppContainerChanges
2381

2382
  Summary
2383

2384
        2000 .data
2385
        1000 .didat
2386
        4000 .pdata
2387
       2C000 .rdata
2388
        2000 .reloc
2389
        7000 .rsrc
2390
       45000 .text
2391
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
2392
Copyright (C) Microsoft Corporation.  All rights reserved.
2393

2394

2395
Dump of file gdi32.dll
2396

2397
File Type: DLL
2398

2399
  Section contains the following exports for GDI32.dll
2400

2401
    00000000 characteristics
2402
    559F30AB time date stamp Thu Jul  9 19:40:43 2015
2403
        0.00 version
2404
        1000 ordinal base
2405
        1001 number of functions
2406
         861 number of names
2407

2408
    ordinal hint RVA      name
2409

2410
       1011    0 00086060 AbortDoc
2411
       1012    1 000888C0 AbortPath
2412
       1015    2 00078480 AddFontMemResourceEx
2413
       1016    3 000784D0 AddFontResourceA
2414
       1017    4 000784E0 AddFontResourceExA
2415
       1018    5 00078630 AddFontResourceExW
2416
       1019    6 00078660 AddFontResourceTracking
2417
       1020    7 00078800 AddFontResourceW
2418
       1021    8 000861E0 AngleArc
2419
       1022    9 000887B0 AnimatePalette
2420
       1023    A 00078890 AnyLinkedFonts
2421
       1024    B 00086300 Arc
2422
       1025    C 000864B0 ArcTo
2423
       1026    D 0004EC40 BRUSHOBJ_hGetColorTransform
2424
       1027    E 0004EC50 BRUSHOBJ_pvAllocRbrush
2425
       1028    F 0004EC60 BRUSHOBJ_pvGetRbrush
2426
       1029   10 0004EC70 BRUSHOBJ_ulGetBrushColor
2427
       1030   11 0004EC80 BeginGdiRendering
2428
       1031   12 000440F0 BeginPath
2429
       1032   13 0003F3E0 BitBlt
2430
       1033   14 0004EC90 CLIPOBJ_bEnum
2431
       1034   15 0004ECA0 CLIPOBJ_cEnumStart
2432
       1035   16 0004ECB0 CLIPOBJ_ppoGetPath
2433
       1036   17 0004C0D0 CancelDC
2434
       1037   18 0007A410 CheckColorsInGamut
2435
       1038   19 00088C40 ChoosePixelFormat
2436
       1039   1A 00086620 Chord
2437
       1040   1B 0004C3B0 ClearBitmapAttributes
2438
       1041   1C 00073840 ClearBrushAttributes
2439
       1042   1D 0000A7A0 CloseEnhMetaFile
2440
       1043   1E 0004BA10 CloseFigure
2441
       1044   1F 00083030 CloseMetaFile
2442
       1045   20 0007A630 ColorCorrectPalette
2443
       1046   21 0007A8D0 ColorMatchToTarget
2444
       1047   22 0003DA30 CombineRgn
2445
       1048   23 00073A20 CombineTransform
2446
       1049   24 0004ED20 ConfigureOPMProtectedOutput
2447
       1050   25 0008E740 CopyEnhMetaFileA
2448
       1051   26 0008E810 CopyEnhMetaFileW
2449
       1052   27 00083230 CopyMetaFileA
2450
       1053   28 00083300 CopyMetaFileW
2451
       1054   29 00042130 CreateBitmap
2452
       1055   2A 0004ED40 CreateBitmapFromDxSurface
2453
       1056   2B 0004ED50 CreateBitmapFromDxSurface2
2454
       1057   2C 00073860 CreateBitmapIndirect
2455
       1058   2D 0003E420 CreateBrushIndirect
2456
       1059   2E 0007AB50 CreateColorSpaceA
2457
       1060   2F 0007AEE0 CreateColorSpaceW
2458
       1061   30 00028590 CreateCompatibleBitmap
2459
       1062   31 0003F7C0 CreateCompatibleDC
2460
       1063   32 00040370 CreateDCA
2461
       1064   33 00040230 CreateDCW
2462
       1065   34 000857E0 CreateDIBPatternBrush
2463
       1066   35 00085830 CreateDIBPatternBrushPt
2464
       1067   36 0001DA50 CreateDIBSection
2465
       1068   37 0001BAA0 CreateDIBitmap
2466
       1069   38 00085860 CreateDiscardableBitmap
2467
       1070   39 00085870 CreateEllipticRgn
2468
       1071   3A 00085880 CreateEllipticRgnIndirect
2469
       1072   3B 000093E0 CreateEnhMetaFileA
2470
       1073   3C 00009480 CreateEnhMetaFileW
2471
       1074   3D 00043B40 CreateFontA
2472
       1075   3E 00043C20 CreateFontIndirectA
2473
       1076   3F 000858A0 CreateFontIndirectExA
2474
       1077   40 0001C510 CreateFontIndirectExW
2475
       1078   41 0001C480 CreateFontIndirectW
2476
       1079   42 00044AA0 CreateFontW
2477
       1080   43 0004E420 CreateHalftonePalette
2478
       1081   44 00085930 CreateHatchBrush
2479
       1082   45 00040210 CreateICA
2480
       1083   46 0003FE80 CreateICW
2481
       1084   47 00083480 CreateMetaFileA
2482
       1085   48 00083510 CreateMetaFileW
2483
       1086   49 0004EDA0 CreateOPMProtectedOutputs
2484
       1087   4A 000450F0 CreatePalette
2485
       1088   4B 00044790 CreatePatternBrush
2486
       1089   4C 0003E2A0 CreatePen
2487
       1090   4D 0000BA00 CreatePenIndirect
2488
       1091   4E 00088F20 CreatePolyPolygonRgn
2489
       1092   4F 0004C150 CreatePolygonRgn
2490
       1093   50 00019370 CreateRectRgn
2491
       1094   51 0003E500 CreateRectRgnIndirect
2492
       1095   52 000443A0 CreateRoundRectRgn
2493
       1096   53 000788A0 CreateScalableFontResourceA
2494
       1097   54 00078F20 CreateScalableFontResourceW
2495
       1098   55 0004CE90 CreateSessionMappedDIBSection
2496
       1099   56 0003E4D0 CreateSolidBrush
2497
       1100   57 0004EF20 D3DKMTAbandonSwapChain
2498
       1101   58 0004EF30 D3DKMTAcquireKeyedMutex
2499
       1102   59 0004EF40 D3DKMTAcquireKeyedMutex2
2500
       1103   5A 0004EF50 D3DKMTAcquireSwapChain
2501
       1104   5B 0004EF60 D3DKMTAdjustFullscreenGamma
2502
       1105   5C 0004EF70 D3DKMTCacheHybridQueryValue
2503
       1106   5D 0004EF80 D3DKMTChangeVideoMemoryReservation
2504
       1107   5E 0004EF90 D3DKMTCheckExclusiveOwnership
2505
       1108   5F 0004EFA0 D3DKMTCheckMonitorPowerState
2506
       1109   60 0004EFB0 D3DKMTCheckMultiPlaneOverlaySupport
2507
       1110   61 0004EFC0 D3DKMTCheckMultiPlaneOverlaySupport2
2508
       1111   62 0004EFD0 D3DKMTCheckOcclusion
2509
       1112   63 0004EFE0 D3DKMTCheckSharedResourceAccess
2510
       1113   64 0004EFF0 D3DKMTCheckVidPnExclusiveOwnership
2511
       1114   65 0004F000 D3DKMTCloseAdapter
2512
       1115   66 0004F010 D3DKMTConfigureSharedResource
2513
       1116   67 0003DF00 D3DKMTCreateAllocation
2514
       1117   68 0004F020 D3DKMTCreateAllocation2
2515
       1118   69 0004F030 D3DKMTCreateContext
2516
       1119   6A 0004F040 D3DKMTCreateContextVirtual
2517
       1120   6B 0004F050 D3DKMTCreateDCFromMemory
2518
       1121   6C 0004F060 D3DKMTCreateDevice
2519
       1122   6D 0004F070 D3DKMTCreateKeyedMutex
2520
       1123   6E 0004F080 D3DKMTCreateKeyedMutex2
2521
       1124   6F 0004F090 D3DKMTCreateOutputDupl
2522
       1125   70 0004F0A0 D3DKMTCreateOverlay
2523
       1126   71 0004F0B0 D3DKMTCreatePagingQueue
2524
       1127   72 0004F0C0 D3DKMTCreateSwapChain
2525
       1128   73 0003ECC0 D3DKMTCreateSynchronizationObject
2526
       1129   74 0004F0D0 D3DKMTCreateSynchronizationObject2
2527
       1130   75 0004F0E0 D3DKMTDestroyAllocation
2528
       1131   76 0004F0F0 D3DKMTDestroyAllocation2
2529
       1132   77 0004F100 D3DKMTDestroyContext
2530
       1133   78 0004F110 D3DKMTDestroyDCFromMemory
2531
       1134   79 0004F120 D3DKMTDestroyDevice
2532
       1135   7A 0004F130 D3DKMTDestroyKeyedMutex
2533
       1136   7B 0004F140 D3DKMTDestroyOutputDupl
2534
       1137   7C 0004F150 D3DKMTDestroyOverlay
2535
       1138   7D 0004F160 D3DKMTDestroyPagingQueue
2536
       1139   7E 0004F170 D3DKMTDestroySynchronizationObject
2537
       1140   7F 0004F180 D3DKMTEnumAdapters
2538
       1141   80 0004F190 D3DKMTEnumAdapters2
2539
       1142   81 0004F1A0 D3DKMTEscape
2540
       1143   82 0004F1B0 D3DKMTEvict
2541
       1144   83 0004F1C0 D3DKMTFlipOverlay
2542
       1145   84 0004F1D0 D3DKMTFreeGpuVirtualAddress
2543
       1146   85 0004F1E0 D3DKMTGetCachedHybridQueryValue
2544
       1147   86 0004F1F0 D3DKMTGetContextInProcessSchedulingPriority
2545
       1148   87 0004F200 D3DKMTGetContextSchedulingPriority
2546
       1149   88 0004F210 D3DKMTGetDWMVerticalBlankEvent
2547
       1150   89 0004F220 D3DKMTGetDeviceState
2548
       1151   8A 0004F230 D3DKMTGetDisplayModeList
2549
       1152   8B 0004F240 D3DKMTGetMultisampleMethodList
2550
       1153   8C 0004F250 D3DKMTGetOverlayState
2551
       1154   8D 0004F260 D3DKMTGetPresentHistory
2552
       1155   8E 0004F270 D3DKMTGetPresentQueueEvent
2553
       1156   8F 0004F280 D3DKMTGetProcessSchedulingPriorityClass
2554
       1157   90 0004F290 D3DKMTGetResourcePresentPrivateDriverData
2555
       1158   91 0004F2A0 D3DKMTGetRuntimeData
2556
       1159   92 0004F2B0 D3DKMTGetScanLine
2557
       1160   93 0004F2C0 D3DKMTGetSetSwapChainMetadata
2558
       1161   94 0004F2D0 D3DKMTGetSharedPrimaryHandle
2559
       1162   95 0004F2E0 D3DKMTGetSharedResourceAdapterLuid
2560
       1163   96 0004F2F0 D3DKMTInvalidateActiveVidPn
2561
       1164   97 0004F300 D3DKMTInvalidateCache
2562
       1165   98 0004F310 D3DKMTLock
2563
       1166   99 0004F320 D3DKMTLock2
2564
       1167   9A 0004F330 D3DKMTMakeResident
2565
       1168   9B 0004F340 D3DKMTMapGpuVirtualAddress
2566
       1169   9C 0004F350 D3DKMTMarkDeviceAsError
2567
       1170   9D 0004F360 D3DKMTNetDispGetNextChunkInfo
2568
       1171   9E 0004F370 D3DKMTNetDispQueryMiracastDisplayDeviceStatus
2569
       1172   9F 0004F380 D3DKMTNetDispQueryMiracastDisplayDeviceSupport
2570
       1173   A0 00075F20 D3DKMTNetDispStartMiracastDisplayDevice
2571
       1174   A1 0004F390 D3DKMTNetDispStartMiracastDisplayDevice2
2572
       1175   A2 0004F3A0 D3DKMTNetDispStartMiracastDisplayDeviceEx
2573
       1176   A3 0004F3B0 D3DKMTNetDispStopMiracastDisplayDevice
2574
       1177   A4 0004F3C0 D3DKMTNetDispStopSessions
2575
       1178   A5 0004F3D0 D3DKMTOfferAllocations
2576
       1179   A6 0004F3E0 D3DKMTOpenAdapterFromDeviceName
2577
       1180   A7 00012DA0 D3DKMTOpenAdapterFromGdiDisplayName
2578
       1181   A8 0004F3F0 D3DKMTOpenAdapterFromHdc
2579
       1182   A9 0004F400 D3DKMTOpenAdapterFromLuid
2580
       1183   AA 0004F410 D3DKMTOpenKeyedMutex
2581
       1184   AB 0004F420 D3DKMTOpenKeyedMutex2
2582
       1185   AC 0004F430 D3DKMTOpenNtHandleFromName
2583
       1186   AD 000425A0 D3DKMTOpenResource
2584
       1187   AE 0004F440 D3DKMTOpenResource2
2585
       1188   AF 0004F450 D3DKMTOpenResourceFromNtHandle
2586
       1189   B0 0004F460 D3DKMTOpenSwapChain
2587
       1190   B1 0004F470 D3DKMTOpenSyncObjectFromNtHandle
2588
       1191   B2 0004F480 D3DKMTOpenSyncObjectFromNtHandle2
2589
       1192   B3 0004F490 D3DKMTOpenSyncObjectNtHandleFromName
2590
       1193   B4 0004F4A0 D3DKMTOpenSynchronizationObject
2591
       1194   B5 0004F4B0 D3DKMTOutputDuplGetFrameInfo
2592
       1195   B6 0004F4C0 D3DKMTOutputDuplGetMetaData
2593
       1196   B7 0004F4D0 D3DKMTOutputDuplGetPointerShapeData
2594
       1197   B8 0004F4E0 D3DKMTOutputDuplPresent
2595
       1198   B9 0004F4F0 D3DKMTOutputDuplReleaseFrame
2596
       1199   BA 0004F500 D3DKMTPinDirectFlipResources
2597
       1200   BB 0004F510 D3DKMTPollDisplayChildren
2598
       1201   BC 0004F520 D3DKMTPresent
2599
       1202   BD 0004F530 D3DKMTPresentMultiPlaneOverlay
2600
       1203   BE 0004F540 D3DKMTPresentMultiPlaneOverlay2
2601
       1204   BF 0004F550 D3DKMTQueryAdapterInfo
2602
       1205   C0 0004F560 D3DKMTQueryAllocationResidency
2603
       1206   C1 0004F570 D3DKMTQueryClockCalibration
2604
       1207   C2 0004F580 D3DKMTQueryRemoteVidPnSourceFromGdiDisplayName
2605
       1208   C3 0004F590 D3DKMTQueryResourceInfo
2606
       1209   C4 0004F5A0 D3DKMTQueryResourceInfoFromNtHandle
2607
       1210   C5 0004F5B0 D3DKMTQueryStatistics
2608
       1211   C6 0004F5C0 D3DKMTQueryVidPnExclusiveOwnership
2609
       1212   C7 0004F5D0 D3DKMTQueryVideoMemoryInfo
2610
       1213   C8 0004F5E0 D3DKMTReclaimAllocations
2611
       1214   C9 0004F5F0 D3DKMTReclaimAllocations2
2612
       1215   CA 00075F40 D3DKMTRegisterTrimNotification
2613
       1216   CB 0004F600 D3DKMTReleaseKeyedMutex
2614
       1217   CC 0004F610 D3DKMTReleaseKeyedMutex2
2615
       1218   CD 0004F620 D3DKMTReleaseProcessVidPnSourceOwners
2616
       1219   CE 0004F630 D3DKMTReleaseSwapChain
2617
       1220   CF 0004F640 D3DKMTRender
2618
       1221   D0 0004F650 D3DKMTReserveGpuVirtualAddress
2619
       1222   D1 0004F660 D3DKMTSetAllocationPriority
2620
       1223   D2 0004F670 D3DKMTSetContextInProcessSchedulingPriority
2621
       1224   D3 0004F680 D3DKMTSetContextSchedulingPriority
2622
       1225   D4 0004F690 D3DKMTSetDisplayMode
2623
       1226   D5 0004F6A0 D3DKMTSetDisplayPrivateDriverFormat
2624
       1227   D6 0004F6B0 D3DKMTSetDodIndirectSwapchain
2625
       1228   D7 0004F6C0 D3DKMTSetGammaRamp
2626
       1229   D8 0004F6D0 D3DKMTSetProcessSchedulingPriorityClass
2627
       1230   D9 0004F6E0 D3DKMTSetQueuedLimit
2628
       1231   DA 0004F6F0 D3DKMTSetStablePowerState
2629
       1232   DB 0004F700 D3DKMTSetStereoEnabled
2630
       1233   DC 0004F710 D3DKMTSetSyncRefreshCountWaitTarget
2631
       1234   DD 0004F720 D3DKMTSetVidPnSourceHwProtection
2632
       1235   DE 0004F730 D3DKMTSetVidPnSourceOwner
2633
       1236   DF 0004F740 D3DKMTSetVidPnSourceOwner1
2634
       1237   E0 0004F750 D3DKMTShareObjects
2635
       1238   E1 0004F760 D3DKMTSharedPrimaryLockNotification
2636
       1239   E2 0004F770 D3DKMTSharedPrimaryUnLockNotification
2637
       1240   E3 0003EFC0 D3DKMTSignalSynchronizationObject
2638
       1241   E4 0004F780 D3DKMTSignalSynchronizationObject2
2639
       1242   E5 0004F790 D3DKMTSignalSynchronizationObjectFromCpu
2640
       1243   E6 0004F7A0 D3DKMTSignalSynchronizationObjectFromGpu
2641
       1244   E7 0004F7B0 D3DKMTSignalSynchronizationObjectFromGpu2
2642
       1245   E8 0004F7C0 D3DKMTSubmitCommand
2643
       1246   E9 0004F7D0 D3DKMTUnlock
2644
       1247   EA 0004F7E0 D3DKMTUnlock2
2645
       1248   EB 0004F7F0 D3DKMTUnpinDirectFlipResources
2646
       1249   EC 00045590 D3DKMTUnregisterTrimNotification
2647
       1250   ED 0004F800 D3DKMTUpdateGpuVirtualAddress
2648
       1251   EE 0004F810 D3DKMTUpdateOverlay
2649
       1252   EF 0004F820 D3DKMTWaitForIdle
2650
       1253   F0 0003F340 D3DKMTWaitForSynchronizationObject
2651
       1254   F1 0004F830 D3DKMTWaitForSynchronizationObject2
2652
       1255   F2 0004F840 D3DKMTWaitForSynchronizationObjectFromCpu
2653
       1256   F3 0004F850 D3DKMTWaitForSynchronizationObjectFromGpu
2654
       1257   F4 0004F860 D3DKMTWaitForVerticalBlankEvent
2655
       1258   F5 0004F870 D3DKMTWaitForVerticalBlankEvent2
2656
       1259   F6 0004EE20 DDCCIGetCapabilitiesString
2657
       1260   F7 0004EE30 DDCCIGetCapabilitiesStringLength
2658
       1261   F8 0004EE40 DDCCIGetTimingReport
2659
       1262   F9 0004EE50 DDCCIGetVCPFeature
2660
       1263   FA 0004EE60 DDCCISaveCurrentSettings
2661
       1264   FB 0004EE70 DDCCISetVCPFeature
2662
       1265   FC 00020F60 DPtoLP
2663
       1266   FD 0004EF00 DdCreateFullscreenSprite
2664
       1267   FE 0004F8A0 DdDestroyFullscreenSprite
2665
       1268   FF 0004FC30 DdEntry0
2666
       1269  100 0004EDE0 DdEntry1
2667
       1270  101 0004EEB0 DdEntry10
2668
       1271  102 0004DD20 DdEntry11
2669
       1272  103 0004DF70 DdEntry12
2670
       1273  104 0004EEC0 DdEntry13
2671
       1274  105 0004EED0 DdEntry14
2672
       1275  106 0004EEF0 DdEntry15
2673
       1276  107 0004DF80 DdEntry16
2674
       1277  108 0004EEE0 DdEntry17
2675
       1278  109 0004EF10 DdEntry18
2676
       1279  10A 0004E180 DdEntry19
2677
       1280  10B 0004EDF0 DdEntry2
2678
       1281  10C 0004F880 DdEntry20
2679
       1282  10D 0004DF60 DdEntry21
2680
       1283  10E 0004F8B0 DdEntry22
2681
       1284  10F 0004DFA0 DdEntry23
2682
       1285  110 0004F890 DdEntry24
2683
       1286  111 0004F8C0 DdEntry25
2684
       1287  112 0004F8D0 DdEntry26
2685
       1288  113 0004F8E0 DdEntry27
2686
       1289  114 0004F8F0 DdEntry28
2687
       1290  115 0004F900 DdEntry29
2688
       1291  116 0004EE00 DdEntry3
2689
       1292  117 0004F910 DdEntry30
2690
       1293  118 0004F920 DdEntry31
2691
       1294  119 0004F940 DdEntry32
2692
       1295  11A 0004F950 DdEntry33
2693
       1296  11B 0004F960 DdEntry34
2694
       1297  11C 0004F970 DdEntry35
2695
       1298  11D 0004F990 DdEntry36
2696
       1299  11E 0004F980 DdEntry37
2697
       1300  11F 0004F9A0 DdEntry38
2698
       1301  120 0004F9B0 DdEntry39
2699
       1302  121 0004EE10 DdEntry4
2700
       1303  122 0004E1A0 DdEntry40
2701
       1304  123 0004F9D0 DdEntry41
2702
       1305  124 0004F9E0 DdEntry42
2703
       1306  125 0004FA00 DdEntry43
2704
       1307  126 0004FA10 DdEntry44
2705
       1308  127 0004FA20 DdEntry45
2706
       1309  128 0004DFF0 DdEntry46
2707
       1310  129 0004FA30 DdEntry47
2708
       1311  12A 0004FA40 DdEntry48
2709
       1312  12B 0004FA50 DdEntry49
2710
       1313  12C 0004DBA0 DdEntry5
2711
       1314  12D 0004E170 DdEntry50
2712
       1315  12E 0004FA60 DdEntry51
2713
       1316  12F 0004FA70 DdEntry52
2714
       1317  130 0004FA80 DdEntry53
2715
       1318  131 0004E1B0 DdEntry54
2716
       1319  132 0004FA90 DdEntry55
2717
       1320  133 0004FAA0 DdEntry56
2718
       1321  134 0004F930 DdEntry6
2719
       1322  135 0004EE80 DdEntry7
2720
       1323  136 0004EE90 DdEntry8
2721
       1324  137 0004EEA0 DdEntry9
2722
       1325  138 0004F9C0 DdNotifyFullscreenSpriteUpdate
2723
       1326  139 0004F9F0 DdQueryVisRgnUniqueness
2724
       1327  13A 0007AEF0 DeleteColorSpace
2725
       1328  13B 00018500 DeleteDC
2726
       1329  13C 00010A60 DeleteEnhMetaFile
2727
       1330  13D 00011DF0 DeleteMetaFile
2728
       1331  13E 0001BE10 DeleteObject
2729
       1332  13F 00088CC0 DescribePixelFormat
2730
       1333  140 0004FAD0 DestroyOPMProtectedOutput
2731
       1334  141 0004FAE0 DestroyPhysicalMonitorInternal
2732
       1335  142 000867D0 DeviceCapabilitiesExA
2733
       1336  143 000867D0 DeviceCapabilitiesExW
2734
       1337  144 00086910 DrawEscape
2735
       1338  145 0000AC10 Ellipse
2736
       1339  146 0004FC50 EnableEUDC
2737
       1340  147 00046140 EndDoc
2738
       1341  148 000869C0 EndFormPage
2739
       1342  149 0004FC70 EndGdiRendering
2740
       1343  14A 000869D0 EndPage
2741
       1344  14B 00044070 EndPath
2742
       1345  14C 0008D4B0 EngAcquireSemaphore
2743
       1346  14D 0004FC90 EngAlphaBlend
2744
       1347  14E 0004FCA0 EngAssociateSurface
2745
       1348  14F 0004FCB0 EngBitBlt
2746
       1349  150 0004FCC0 EngCheckAbort
2747
       1350  151 0008D4C0 EngComputeGlyphSet
2748
       1351  152 0004FCE0 EngCopyBits
2749
       1352  153 0004FCF0 EngCreateBitmap
2750
       1353  154 0004FD00 EngCreateClip
2751
       1354  155 0004FD10 EngCreateDeviceBitmap
2752
       1355  156 0004FD20 EngCreateDeviceSurface
2753
       1356  157 0004FD30 EngCreatePalette
2754
       1357  158 0008D530 EngCreateSemaphore
2755
       1358  159 0004FD40 EngDeleteClip
2756
       1359  15A 0004FD50 EngDeletePalette
2757
       1360  15B 0004FD60 EngDeletePath
2758
       1361  15C 0008D570 EngDeleteSemaphore
2759
       1362  15D 0004FD70 EngDeleteSurface
2760
       1363  15E 0004FD80 EngEraseSurface
2761
       1364  15F 0004FD90 EngFillPath
2762
       1365  160 0008D5B0 EngFindResource
2763
       1366  161 0008D650 EngFreeModule
2764
       1367  162 0004BFC0 EngGetCurrentCodePage
2765
       1368  163 0008D660 EngGetDriverName
2766
       1369  164 0008D690 EngGetPrinterDataFileName
2767
       1370  165 0004FDA0 EngGradientFill
2768
       1371  166 0004FDB0 EngLineTo
2769
       1372  167 0008D6C0 EngLoadModule
2770
       1373  168 0004FDC0 EngLockSurface
2771
       1374  169 0004FDD0 EngMarkBandingSurface
2772
       1375  16A 0008D6E0 EngMultiByteToUnicodeN
2773
       1376  16B 0008D6F0 EngMultiByteToWideChar
2774
       1377  16C 0004FDE0 EngPaint
2775
       1378  16D 0004FDF0 EngPlgBlt
2776
       1379  16E 00051C70 EngQueryEMFInfo
2777
       1380  16F 0008D730 EngQueryLocalTime
2778
       1381  170 0008D7C0 EngReleaseSemaphore
2779
       1382  171 0004FE00 EngStretchBlt
2780
       1383  172 0004FE10 EngStretchBltROP
2781
       1384  173 0004FE20 EngStrokeAndFillPath
2782
       1385  174 0004FE30 EngStrokePath
2783
       1386  175 0004FE40 EngTextOut
2784
       1387  176 0004FE50 EngTransparentBlt
2785
       1388  177 0008D7D0 EngUnicodeToMultiByteN
2786
       1389  178 0004FE60 EngUnlockSurface
2787
       1390  179 0008D7E0 EngWideCharToMultiByte
2788
       1391  17A 00010B80 EnumEnhMetaFile
2789
       1392  17B 000790D0 EnumFontFamiliesA
2790
       1393  17C 00041BE0 EnumFontFamiliesExA
2791
       1394  17D 00041CC0 EnumFontFamiliesExW
2792
       1395  17E 00041BB0 EnumFontFamiliesW
2793
       1396  17F 00079100 EnumFontsA
2794
       1397  180 00079130 EnumFontsW
2795
       1398  181 0007AF00 EnumICMProfilesA
2796
       1399  182 0007AFA0 EnumICMProfilesW
2797
       1400  183 00008880 EnumMetaFile
2798
       1401  184 00085950 EnumObjects
2799
       1402  185 00045A80 EqualRgn
2800
       1403  186 000869E0 Escape
2801
       1404  187 00089660 EudcLoadLinkW
2802
       1405  188 000896C0 EudcUnloadLinkW
2803
       1406  189 00043F00 ExcludeClipRect
2804
       1407  18A 00085A70 ExtCreatePen
2805
       1408  18B 0001B300 ExtCreateRegion
2806
       1409  18C 0004C190 ExtEscape
2807
       1410  18D 000870A0 ExtFloodFill
2808
       1411  18E 0001C760 ExtSelectClipRgn
2809
       1412  18F 00008810 ExtTextOutA
2810
       1413  190 00024B10 ExtTextOutW
2811
       1414  191 0004FEB0 FONTOBJ_cGetAllGlyphHandles
2812
       1415  192 0004FEC0 FONTOBJ_cGetGlyphs
2813
       1416  193 0004FED0 FONTOBJ_pQueryGlyphAttrs
2814
       1417  194 0004FEE0 FONTOBJ_pfdg
2815
       1418  195 0004FEF0 FONTOBJ_pifi
2816
       1419  196 0004FF00 FONTOBJ_pvTrueTypeFontFile
2817
       1420  197 0004FF10 FONTOBJ_pxoGetXform
2818
       1421  198 0004FF20 FONTOBJ_vGetInfo
2819
       1422  199 00044C10 FillPath
2820
       1423  19A 00087230 FillRgn
2821
       1424  19B 00051C70 FixBrushOrgEx
2822
       1425  19C 00088930 FlattenPath
2823
       1426  19D 00087330 FloodFill
2824
       1427  19E 00079160 FontIsLinked
2825
       1428  19F 00087350 FrameRgn
2826
       1429  1A0 0004C490 GdiAddFontResourceW
2827
       1430  1A1 00090890 GdiAddGlsBounds
2828
       1431  1A2 000908C0 GdiAddGlsRecord
2829
       1432  1A3 0003F930 GdiAlphaBlend
2830
       1433  1A4 0009BBE0 GdiArtificialDecrementDriver
2831
       1434  1A5 00082360 GdiCleanCacheDC
2832
       1435  1A6 000443B0 GdiClearStockObjectCache
2833
       1436  1A7 0004A760 GdiComment
2834
       1437  1A8 00087470 GdiConsoleTextOut
2835
       1438  1A9 000441E0 GdiConvertAndCheckDC
2836
       1439  1AA 00082390 GdiConvertBitmap
2837
       1440  1AB 0007B040 GdiConvertBitmapV5
2838
       1441  1AC 00082390 GdiConvertBrush
2839
       1442  1AD 00082390 GdiConvertDC
2840
       1443  1AE 00094F00 GdiConvertEnhMetaFile
2841
       1444  1AF 00082390 GdiConvertFont
2842
       1445  1B0 00094F80 GdiConvertMetaFilePict
2843
       1446  1B1 00082390 GdiConvertPalette
2844
       1447  1B2 00082390 GdiConvertRegion
2845
       1448  1B3 00085BF0 GdiConvertToDevmodeW
2846
       1449  1B4 00095020 GdiCreateLocalEnhMetaFile
2847
       1450  1B5 00095030 GdiCreateLocalMetaFilePict
2848
       1451  1B6 0004CFF0 GdiDeleteLocalDC
2849
       1452  1B7 0004BB50 GdiDeleteSpoolFileHandle
2850
       1453  1B8 00088D50 GdiDescribePixelFormat
2851
       1454  1B9 0001BA30 GdiDllInitialize
2852
       1455  1BA 00040DA0 GdiDrawStream
2853
       1456  1BB 00045FE0 GdiEndDocEMF
2854
       1457  1BC 00046AB0 GdiEndPageEMF
2855
       1458  1BD 00077900 GdiEntry1
2856
       1459  1BE 000779B0 GdiEntry10
2857
       1460  1BF 000779D0 GdiEntry11
2858
       1461  1C0 00077A40 GdiEntry12
2859
       1462  1C1 000411E0 GdiEntry13
2860
       1463  1C2 00077A60 GdiEntry14
2861
       1464  1C3 00077AA0 GdiEntry15
2862
       1465  1C4 0004CFF0 GdiEntry16
2863
       1466  1C5 00077AD0 GdiEntry2
2864
       1467  1C6 00078180 GdiEntry3
2865
       1468  1C7 000781D0 GdiEntry4
2866
       1469  1C8 000781E0 GdiEntry5
2867
       1470  1C9 00078210 GdiEntry6
2868
       1471  1CA 00078220 GdiEntry7
2869
       1472  1CB 00078230 GdiEntry8
2870
       1473  1CC 00078240 GdiEntry9
2871
       1474  1CD 00040C80 GdiFixUpHandle
2872
       1475  1CE 00041660 GdiFlush
2873
       1476  1CF 0004FF70 GdiFullscreenControl
2874
       1477  1D0 00087490 GdiGetBatchLimit
2875
       1478  1D1 000413A0 GdiGetBitmapBitsSize
2876
       1479  1D2 00041810 GdiGetCharDimensions
2877
       1480  1D3 00042180 GdiGetCodePage
2878
       1481  1D4 0004C130 GdiGetDC
2879
       1482  1D5 00049AF0 GdiGetDevmodeForPage
2880
       1483  1D6 00082390 GdiGetLocalBrush
2881
       1484  1D7 00082390 GdiGetLocalDC
2882
       1485  1D8 00082390 GdiGetLocalFont
2883
       1486  1D9 00089F70 GdiGetPageCount
2884
       1487  1DA 00049A10 GdiGetPageHandle
2885
       1488  1DB 00048DC0 GdiGetSpoolFileHandle
2886
       1489  1DC 000501F0 GdiGetSpoolMessage
2887
       1490  1DD 00042870 GdiGradientFill
2888
       1491  1DE 000502D0 GdiInitSpool
2889
       1492  1DF 0001A210 GdiInitializeLanguagePack
2890
       1493  1E0 000823A0 GdiIsMetaFileDC
2891
       1494  1E1 00082400 GdiIsMetaPrintDC
2892
       1495  1E2 00081CB0 GdiIsPlayMetafileDC
2893
       1496  1E3 00085D40 GdiIsScreenDC
2894
       1497  1E4 000473C0 GdiIsUMPDSandboxingEnabled
2895
       1498  1E5 0004CF70 GdiLoadType1Fonts
2896
       1499  1E6 00051C70 GdiPlayDCScript
2897
       1500  1E7 00089FF0 GdiPlayEMF
2898
       1501  1E8 00051C70 GdiPlayJournal
2899
       1502  1E9 0004A040 GdiPlayPageEMF
2900
       1503  1EA 0008A170 GdiPlayPrivatePageEMF
2901
       1504  1EB 00051C70 GdiPlayScript
2902
       1505  1EC 000477C0 GdiPrinterThunk
2903
       1506  1ED 00019DE0 GdiProcessSetup
2904
       1507  1EE 00050410 GdiQueryFonts
2905
       1508  1EF 00082450 GdiQueryTable
2906
       1509  1F0 00028150 GdiRealizationInfo
2907
       1510  1F1 0003EBE0 GdiReleaseDC
2908
       1511  1F2 0004CFF0 GdiReleaseLocalDC
2909
       1512  1F3 0008A1B0 GdiResetDCEMF
2910
       1513  1F4 0004CFF0 GdiSetAttrs
2911
       1514  1F5 000874A0 GdiSetBatchLimit
2912
       1515  1F6 00085DC0 GdiSetLastError
2913
       1516  1F7 00088D60 GdiSetPixelFormat
2914
       1517  1F8 0004D3A0 GdiSetServerAttr
2915
       1518  1F9 00049740 GdiStartDocEMF
2916
       1519  1FA 0004BC80 GdiStartPageEMF
2917
       1520  1FB 0004CFF0 GdiSupportsFontChangeEvent
2918
       1521  1FC 00088D70 GdiSwapBuffers
2919
       1522  1FD 00011570 GdiTransparentBlt
2920
       1523  1FE 00044150 GdiValidateHandle
2921
       1524  1FF 00073F90 GetArcDirection
2922
       1525  200 00073FB0 GetAspectRatioFilterEx
2923
       1526  201 000739E0 GetBitmapAttributes
2924
       1527  202 000118D0 GetBitmapBits
2925
       1528  203 00085DE0 GetBitmapDimensionEx
2926
       1529  204 00042810 GetBkColor
2927
       1530  205 0001FF70 GetBkMode
2928
       1531  206 00045830 GetBoundsRect
2929
       1532  207 000739E0 GetBrushAttributes
2930
       1533  208 000443D0 GetBrushOrgEx
2931
       1534  209 0004FF90 GetCOPPCompatibleOPMInformation
2932
       1535  20A 0004FFA0 GetCertificate
2933
       1536  20B 0004FFB0 GetCertificateSize
2934
       1537  20C 00073FD0 GetCharABCWidthsA
2935
       1538  20D 00073FF0 GetCharABCWidthsFloatA
2936
       1539  20E 00074010 GetCharABCWidthsFloatW
2937
       1540  20F 00074030 GetCharABCWidthsI
2938
       1541  210 00074060 GetCharABCWidthsW
2939
       1542  211 00074080 GetCharWidth32A
2940
       1543  212 000740A0 GetCharWidth32W
2941
       1544  213 000740C0 GetCharWidthA
2942
       1545  214 000740E0 GetCharWidthFloatA
2943
       1546  215 00074100 GetCharWidthFloatW
2944
       1547  216 00074120 GetCharWidthI
2945
       1548  217 0004E210 GetCharWidthInfo
2946
       1549  218 00012550 GetCharWidthW
2947
       1550  219 00074180 GetCharacterPlacementA
2948
       1551  21A 000744A0 GetCharacterPlacementW
2949
       1552  21B 00043F80 GetClipBox
2950
       1553  21C 0003ED40 GetClipRgn
2951
       1554  21D 00074560 GetColorAdjustment
2952
       1555  21E 0007B880 GetColorSpace
2953
       1556  21F 00044700 GetCurrentDpiInfo
2954
       1557  220 000289A0 GetCurrentObject
2955
       1558  221 00020D50 GetCurrentPositionEx
2956
       1559  222 00081D10 GetDCBrushColor
2957
       1560  223 00043DC0 GetDCOrgEx
2958
       1561  224 00081D80 GetDCPenColor
2959
       1562  225 00044740 GetDIBColorTable
2960
       1563  226 0003E7A0 GetDIBits
2961
       1564  227 0001B390 GetDeviceCaps
2962
       1565  228 0007B8F0 GetDeviceGammaRamp
2963
       1566  229 00074570 GetETM
2964
       1567  22A 00089770 GetEUDCTimeStamp
2965
       1568  22B 00089790 GetEUDCTimeStampExW
2966
       1569  22C 0008E970 GetEnhMetaFileA
2967
       1570  22D 0008EA20 GetEnhMetaFileBits
2968
       1571  22E 0008EAD0 GetEnhMetaFileDescriptionA
2969
       1572  22F 0008EAE0 GetEnhMetaFileDescriptionW
2970
       1573  230 00044610 GetEnhMetaFileHeader
2971
       1574  231 0008EB00 GetEnhMetaFilePaletteEntries
2972
       1575  232 0008EC20 GetEnhMetaFilePixelFormat
2973
       1576  233 0008ED20 GetEnhMetaFileW
2974
       1577  234 00045810 GetFontAssocStatus
2975
       1578  235 00017B10 GetFontData
2976
       1579  236 00079170 GetFontFileData
2977
       1580  237 000791B0 GetFontFileInfo
2978
       1581  238 00081DF0 GetFontLanguageInfo
2979
       1582  239 00026CA0 GetFontRealizationInfo
2980
       1583  23A 00079400 GetFontResourceInfoW
2981
       1584  23B 000500D0 GetFontUnicodeRanges
2982
       1585  23C 000745C0 GetGlyphIndicesA
2983
       1586  23D 000747B0 GetGlyphIndicesW
2984
       1587  23E 000747C0 GetGlyphOutline
2985
       1588  23F 000747C0 GetGlyphOutlineA
2986
       1589  240 0004CEE0 GetGlyphOutlineW
2987
       1590  241 00074920 GetGlyphOutlineWow
2988
       1591  242 0000ADB0 GetGraphicsMode
2989
       1592  243 00040CC0 GetHFONT
2990
       1593  244 0007B970 GetICMProfileA
2991
       1594  245 0007BA90 GetICMProfileW
2992
       1595  246 00074960 GetKerningPairs
2993
       1596  247 00074960 GetKerningPairsA
2994
       1597  248 00074C20 GetKerningPairsW
2995
       1598  249 00022BE0 GetLayout
2996
       1599  24A 0007BC30 GetLogColorSpaceA
2997
       1600  24B 0007BDA0 GetLogColorSpaceW
2998
       1601  24C 00043460 GetMapMode
2999
       1602  24D 000829E0 GetMetaFileA
3000
       1603  24E 00009BF0 GetMetaFileBitsEx
3001
       1604  24F 00082AA0 GetMetaFileW
3002
       1605  250 00012E20 GetMetaRgn
3003
       1606  251 00074C50 GetMiterLimit
3004
       1607  252 00044CF0 GetNearestColor
3005
       1608  253 00085DF0 GetNearestPaletteIndex
3006
       1609  254 00050150 GetNumberOfPhysicalMonitors
3007
       1610  255 00050160 GetOPMInformation
3008
       1611  256 00050170 GetOPMRandomNumber
3009
       1612  257 000286D0 GetObjectA
3010
       1613  258 0003D680 GetObjectType
3011
       1614  259 00040BC0 GetObjectW
3012
       1615  25A 00074C60 GetOutlineTextMetricsA
3013
       1616  25B 000281C0 GetOutlineTextMetricsW
3014
       1617  25C 000457E0 GetPaletteEntries
3015
       1618  25D 000889A0 GetPath
3016
       1619  25E 000501B0 GetPhysicalMonitorDescription
3017
       1620  25F 000501C0 GetPhysicalMonitors
3018
       1621  260 0003D8E0 GetPixel
3019
       1622  261 000097E0 GetPixelFormat
3020
       1623  262 00081E60 GetPolyFillMode
3021
       1624  263 00081EC0 GetROP2
3022
       1625  264 00043F90 GetRandomRgn
3023
       1626  265 000795A0 GetRasterizerCaps
3024
       1627  266 0003FAE0 GetRegionData
3025
       1628  267 00081F20 GetRelAbs
3026
       1629  268 0003EB30 GetRgnBox
3027
       1630  269 0001CAD0 GetStockObject
3028
       1631  26A 00081F40 GetStretchBltMode
3029
       1632  26B 000897C0 GetStringBitmapA
3030
       1633  26C 00050210 GetStringBitmapW
3031
       1634  26D 00050220 GetSuggestedOPMProtectedOutputArraySize
3032
       1635  26E 00044990 GetSystemPaletteEntries
3033
       1636  26F 00074F70 GetSystemPaletteUse
3034
       1637  270 0001FF10 GetTextAlign
3035
       1638  271 00012E40 GetTextCharacterExtra
3036
       1639  272 000457D0 GetTextCharset
3037
       1640  273 0004DA30 GetTextCharsetInfo
3038
       1641  274 00042BB0 GetTextColor
3039
       1642  275 00074F80 GetTextExtentExPointA
3040
       1643  276 00075270 GetTextExtentExPointI
3041
       1644  277 00009380 GetTextExtentExPointW
3042
       1645  278 0003C530 GetTextExtentExPointWPri
3043
       1646  279 000752B0 GetTextExtentPoint32A
3044
       1647  27A 00027060 GetTextExtentPoint32W
3045
       1648  27B 000752D0 GetTextExtentPointA
3046
       1649  27C 00075650 GetTextExtentPointI
3047
       1650  27D 00027080 GetTextExtentPointW
3048
       1651  27E 00075670 GetTextFaceA
3049
       1652  27F 000195B0 GetTextFaceAliasW
3050
       1653  280 00018F80 GetTextFaceW
3051
       1654  281 00041680 GetTextMetricsA
3052
       1655  282 0003EE00 GetTextMetricsW
3053
       1656  283 00073A30 GetTransform
3054
       1657  284 00028A90 GetViewportExtEx
3055
       1658  285 00040F00 GetViewportOrgEx
3056
       1659  286 0008ED90 GetWinMetaFileBits
3057
       1660  287 00028B10 GetWindowExtEx
3058
       1661  288 00043DE0 GetWindowOrgEx
3059
       1662  289 00044020 GetWorldTransform
3060
       1663  28A 00050290 HT_Get8BPPFormatPalette
3061
       1664  28B 000502A0 HT_Get8BPPMaskPalette
3062
       1665  28C 0003FA40 IntersectClipRect
3063
       1666  28D 000875D0 InvertRgn
3064
       1667  28E 0008EF80 IsValidEnhMetaRecord
3065
       1668  28F 0008EFF0 IsValidEnhMetaRecordOffExt
3066
       1669  290 00040F80 LPtoDP
3067
       1670  291 00082180 LineDDA
3068
       1671  292 00043E50 LineTo
3069
       1672  293 00021DD0 LpkDrawTextEx
3070
       1673  294 00162160 LpkEditControl
3071
       1674  295 00008D80 LpkExtTextOut
3072
       1675  296 000B46C0 LpkGetCharacterPlacement
3073
       1676  297 0003BF60 LpkGetTextExtentExPoint
3074
       1677  298 0001A290 LpkInitialize
3075
       1678  299 000B2D90 LpkPSMTextOut
3076
       1679  29A 0009BE60 LpkPresent
3077
       1680  29B 000B4FA0 LpkTabbedTextOut
3078
       1681  29C 000B4D40 LpkUseGDIWidthCache
3079
       1682  29D 000426F0 MaskBlt
3080
       1683  29E 00089210 MirrorRgn
3081
       1684  29F 0001E460 ModifyWorldTransform
3082
       1685  2A0 00020C50 MoveToEx
3083
       1686  2A1 000876C0 NamedEscape
3084
       1687  2A2 00047120 OffsetClipRgn
3085
       1688  2A3 00040A60 OffsetRgn
3086
       1689  2A4 000430B0 OffsetViewportOrgEx
3087
       1690  2A5 00041560 OffsetWindowOrgEx
3088
       1691  2A6 00050360 PATHOBJ_bEnum
3089
       1692  2A7 00050370 PATHOBJ_bEnumClipLines
3090
       1693  2A8 00050380 PATHOBJ_vEnumStart
3091
       1694  2A9 00050390 PATHOBJ_vEnumStartClipLines
3092
       1695  2AA 000503A0 PATHOBJ_vGetBounds
3093
       1696  2AB 000877F0 PaintRgn
3094
       1697  2AC 0003F4F0 PatBlt
3095
       1698  2AD 000889D0 PathToRegion
3096
       1699  2AE 000878E0 Pie
3097
       1700  2AF 000470E0 PlayEnhMetaFile
3098
       1701  2B0 0001F4F0 PlayEnhMetaFileRecord
3099
       1702  2B1 00008860 PlayMetaFile
3100
       1703  2B2 0000A210 PlayMetaFileRecord
3101
       1704  2B3 00087A90 PlgBlt
3102
       1705  2B4 00012380 PolyBezier
3103
       1706  2B5 0004B930 PolyBezierTo
3104
       1707  2B6 00088F50 PolyDraw
3105
       1708  2B7 0003F070 PolyPatBlt
3106
       1709  2B8 0004A940 PolyPolygon
3107
       1710  2B9 00089030 PolyPolyline
3108
       1711  2BA 00087C60 PolyTextOutA
3109
       1712  2BB 0003F850 PolyTextOutW
3110
       1713  2BC 00042390 Polygon
3111
       1714  2BD 00012320 Polyline
3112
       1715  2BE 0004BA60 PolylineTo
3113
       1716  2BF 00011C50 PtInRegion
3114
       1717  2C0 00089480 PtVisible
3115
       1718  2C1 00045A50 QueryFontAssocStatus
3116
       1719  2C2 0004C000 RealizePalette
3117
       1720  2C3 00089490 RectInRegion
3118
       1721  2C4 00044140 RectVisible
3119
       1722  2C5 00045000 Rectangle
3120
       1723  2C6 000795B0 RemoveFontMemResourceEx
3121
       1724  2C7 000795E0 RemoveFontResourceA
3122
       1725  2C8 000796E0 RemoveFontResourceExA
3123
       1726  2C9 00079840 RemoveFontResourceExW
3124
       1727  2CA 00079900 RemoveFontResourceTracking
3125
       1728  2CB 000799F0 RemoveFontResourceW
3126
       1729  2CC 00085E00 ResetDCA
3127
       1730  2CD 00085E80 ResetDCW
3128
       1731  2CE 00085E90 ResizePalette
3129
       1732  2CF 00021500 RestoreDC
3130
       1733  2D0 00010BB0 RoundRect
3131
       1734  2D1 00050470 STROBJ_bEnum
3132
       1735  2D2 00050480 STROBJ_bEnumPositionsOnly
3133
       1736  2D3 00050490 STROBJ_bGetAdvanceWidths
3134
       1737  2D4 000504A0 STROBJ_dwGetCodePage
3135
       1738  2D5 000504B0 STROBJ_vEnumStart
3136
       1739  2D6 00021940 SaveDC
3137
       1740  2D7 00073A40 ScaleViewportExtEx
3138
       1741  2D8 00073B90 ScaleWindowExtEx
3139
       1742  2D9 000200C0 ScriptApplyDigitSubstitution
3140
       1743  2DA 0009BE80 ScriptApplyLogicalWidth
3141
       1744  2DB 00025960 ScriptBreak
3142
       1745  2DC 0003CAD0 ScriptCPtoX
3143
       1746  2DD 0009C130 ScriptCacheGetHeight
3144
       1747  2DE 0000E8A0 ScriptFreeCache
3145
       1748  2DF 00045190 ScriptGetCMap
3146
       1749  2E0 0009D320 ScriptGetFontAlternateGlyphs
3147
       1750  2E1 0009D480 ScriptGetFontFeatureTags
3148
       1751  2E2 0009D6C0 ScriptGetFontLanguageTags
3149
       1752  2E3 00045390 ScriptGetFontProperties
3150
       1753  2E4 0009D890 ScriptGetFontScriptTags
3151
       1754  2E5 0009C1D0 ScriptGetGlyphABCWidth
3152
       1755  2E6 0009C280 ScriptGetLogicalWidths
3153
       1756  2E7 0001A3F0 ScriptGetProperties
3154
       1757  2E8 0003BB70 ScriptIsComplex
3155
       1758  2E9 00044DC0 ScriptItemize
3156
       1759  2EA 0009D9B0 ScriptItemizeOpenType
3157
       1760  2EB 0009C580 ScriptJustify
3158
       1761  2EC 0009CD20 ScriptLayout
3159
       1762  2ED 0009CDE0 ScriptPlace
3160
       1763  2EE 0009DA80 ScriptPlaceOpenType
3161
       1764  2EF 0009DF60 ScriptPositionSingleGlyph
3162
       1765  2F0 00027820 ScriptRecordDigitSubstitution
3163
       1766  2F1 00027D40 ScriptShape
3164
       1767  2F2 0009E180 ScriptShapeOpenType
3165
       1768  2F3 00039AE0 ScriptStringAnalyse
3166
       1769  2F4 0003C960 ScriptStringCPtoX
3167
       1770  2F5 0003C7B0 ScriptStringFree
3168
       1771  2F6 0009D060 ScriptStringGetLogicalWidths
3169
       1772  2F7 00044E30 ScriptStringGetOrder
3170
       1773  2F8 00022510 ScriptStringOut
3171
       1774  2F9 0009D1C0 ScriptStringValidate
3172
       1775  2FA 0003D470 ScriptStringXtoCP
3173
       1776  2FB 0009D2E0 ScriptString_pLogAttr
3174
       1777  2FC 0009D300 ScriptString_pSize
3175
       1778  2FD 00045A60 ScriptString_pcOutChars
3176
       1779  2FE 0009E650 ScriptSubstituteSingleGlyph
3177
       1780  2FF 00022EA0 ScriptTextOut
3178
       1781  300 0003D2A0 ScriptXtoCP
3179
       1782  301 00082490 SelectBrushLocal
3180
       1783  302 0004B7D0 SelectClipPath
3181
       1784  303 0001C740 SelectClipRgn
3182
       1785  304 00082490 SelectFontLocal
3183
       1786  305 0001F7B0 SelectObject
3184
       1787  306 0001E7C0 SelectPalette
3185
       1788  307 00087F70 SetAbortProc
3186
       1789  308 00018EB0 SetArcDirection
3187
       1790  309 0004CEC0 SetBitmapAttributes
3188
       1791  30A 00045180 SetBitmapBits
3189
       1792  30B 00085F00 SetBitmapDimensionEx
3190
       1793  30C 000187D0 SetBkColor
3191
       1794  30D 0001FFD0 SetBkMode
3192
       1795  30E 00045730 SetBoundsRect
3193
       1796  30F 00073A00 SetBrushAttributes
3194
       1797  310 00018B80 SetBrushOrgEx
3195
       1798  311 00073E40 SetColorAdjustment
3196
       1799  312 0004AD30 SetColorSpace
3197
       1800  313 00042990 SetDCBrushColor
3198
       1801  314 00081FA0 SetDCPenColor
3199
       1802  315 0004BEB0 SetDIBColorTable
3200
       1803  316 0001E610 SetDIBits
3201
       1804  317 0001CB80 SetDIBitsToDevice
3202
       1805  318 00081880 SetDeviceGammaRamp
3203
       1806  319 00010C60 SetEnhMetaFileBits
3204
       1807  31A 00079A80 SetFontEnumeration
3205
       1808  31B 00022C60 SetGraphicsMode
3206
       1809  31C 00019200 SetICMMode
3207
       1810  31D 000818C0 SetICMProfileA
3208
       1811  31E 00081AC0 SetICMProfileW
3209
       1812  31F 00042470 SetLayout
3210
       1813  320 00073CE0 SetLayoutWidth
3211
       1814  321 00050590 SetMagicColors
3212
       1815  322 00015A60 SetMapMode
3213
       1816  323 00073EC0 SetMapperFlags
3214
       1817  324 00011310 SetMetaFileBitsEx
3215
       1818  325 00042540 SetMetaRgn
3216
       1819  326 00018D80 SetMiterLimit
3217
       1820  327 000505A0 SetOPMSigningKeyAndSequenceNumbers
3218
       1821  328 00088840 SetPaletteEntries
3219
       1822  329 0003D740 SetPixel
3220
       1823  32A 00088DD0 SetPixelFormat
3221
       1824  32B 00045460 SetPixelV
3222
       1825  32C 0001B1F0 SetPolyFillMode
3223
       1826  32D 000189B0 SetROP2
3224
       1827  32E 0003DDB0 SetRectRgn
3225
       1828  32F 00082150 SetRelAbs
3226
       1829  330 00018AA0 SetStretchBltMode
3227
       1830  331 00073F80 SetSystemPaletteUse
3228
       1831  332 00020B60 SetTextAlign
3229
       1832  333 000188E0 SetTextCharacterExtra
3230
       1833  334 0001B780 SetTextColor
3231
       1834  335 00018DF0 SetTextJustification
3232
       1835  336 0000BAC0 SetViewportExtEx
3233
       1836  337 00019920 SetViewportOrgEx
3234
       1837  338 00073D70 SetVirtualResolution
3235
       1838  339 0008F020 SetWinMetaFileBits
3236
       1839  33A 0000BCD0 SetWindowExtEx
3237
       1840  33B 00018FA0 SetWindowOrgEx
3238
       1841  33C 0001E440 SetWorldTransform
3239
       1842  33D 00088000 StartDocA
3240
       1843  33E 000881A0 StartDocW
3241
       1844  33F 00088720 StartFormPage
3242
       1845  340 000469B0 StartPage
3243
       1846  341 0003FD80 StretchBlt
3244
       1847  342 0001CF20 StretchDIBits
3245
       1848  343 00088A70 StrokeAndFillPath
3246
       1849  344 00088B20 StrokePath
3247
       1850  345 00088EB0 SwapBuffers
3248
       1851  346 000088B0 TextOutA
3249
       1852  347 00012D30 TextOutW
3250
       1853  348 00013570 TranslateCharsetInfo
3251
       1854  349 00079A90 UnloadNetworkFonts
3252
       1855  34A 00085F10 UnrealizeObject
3253
       1856  34B 00088730 UpdateColors
3254
       1857  34C 0008D990 UpdateICMRegKeyA
3255
       1858  34D 0008D990 UpdateICMRegKeyW
3256
       1859  34E 00017BD0 UspAllocCache
3257
       1860  34F 0001FE00 UspAllocTemp
3258
       1861  350 00022780 UspFreeMem
3259
       1862  351 00088BD0 WidenPath
3260
       1863  352 000506E0 XFORMOBJ_bApplyXform
3261
       1864  353 000506F0 XFORMOBJ_iGetXform
3262
       1865  354 00050700 XLATEOBJ_cGetPalette
3263
       1866  355 00050710 XLATEOBJ_hGetColorTransform
3264
       1867  356 00050720 XLATEOBJ_iXlate
3265
       1868  357 0008D820 XLATEOBJ_piVector
3266
       1869  358 0004CD40 bInitSystemAndFontsDirectoriesW
3267
       1870  359 0004CC30 bMakePathNameW
3268
       1871  35A 0004CA20 cGetTTFFromFOT
3269
       1872  35B 000B5410 ftsWordBreak
3270
       1873  35C 00085F50 gdiPlaySpoolStream
3271
       1000      00044360 [NONAME]
3272
       1001      0008D9E0 [NONAME]
3273
       1002      0008DA10 [NONAME]
3274
       1003      000446D0 [NONAME]
3275
       1004      00042110 [NONAME]
3276
       1005      00044000 [NONAME]
3277
       1006      0008D9B0 [NONAME]
3278
       1007      00042A70 [NONAME]
3279
       1008      0008D990 [NONAME]
3280
       1009      00044770 [NONAME]
3281
       1010      000447A0 [NONAME]
3282
       1013      0008D960 [NONAME]
3283
       1014      0004C400 [NONAME]
3284
       2000      0004C3D0 [NONAME]
3285

3286
  Summary
3287

3288
        4000 .data
3289
        B000 .pdata
3290
       98000 .rdata
3291
        2000 .reloc
3292
       12000 .rsrc
3293
       C9000 .text
3294
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
3295
Copyright (C) Microsoft Corporation.  All rights reserved.
3296

3297

3298
Dump of file IPHLPAPI.DLL
3299

3300
File Type: DLL
3301

3302
  Section contains the following exports for IPHLPAPI.DLL
3303

3304
    00000000 characteristics
3305
    559F3036 time date stamp Thu Jul  9 19:38:46 2015
3306
        0.00 version
3307
           1 ordinal base
3308
         277 number of functions
3309
         277 number of names
3310

3311
    ordinal hint RVA      name
3312

3313
          1    0 0001E0D0 AddIPAddress
3314
          2    1 0001C5B0 AllocateAndGetInterfaceInfoFromStack
3315
          3    2 0001D5F0 AllocateAndGetIpAddrTableFromStack
3316
          4    3 0000B0C0 CancelIPChangeNotify
3317
          5    4 0000A280 CancelMibChangeNotify2
3318
          6    5 00022FE0 CloseCompartment
3319
          7    6 0001D620 CloseGetIPPhysicalInterfaceForDestination
3320
          8    7 000237D0 ConvertCompartmentGuidToId
3321
          9    8 00023860 ConvertCompartmentIdToGuid
3322
         10    9 0000A820 ConvertGuidToStringA
3323
         11    A 000086C0 ConvertGuidToStringW
3324
         12    B 00023960 ConvertInterfaceAliasToLuid
3325
         13    C 000036F0 ConvertInterfaceGuidToLuid
3326
         14    D 00003810 ConvertInterfaceIndexToLuid
3327
         15    E 0000C490 ConvertInterfaceLuidToAlias
3328
         16    F 000091B0 ConvertInterfaceLuidToGuid
3329
         17   10 00008640 ConvertInterfaceLuidToIndex
3330
         18   11 00023AF0 ConvertInterfaceLuidToNameA
3331
         19   12 00003D70 ConvertInterfaceLuidToNameW
3332
         20   13 00023BA0 ConvertInterfaceNameToLuidA
3333
         21   14 00004100 ConvertInterfaceNameToLuidW
3334
         22   15 00023C80 ConvertInterfacePhysicalAddressToLuid
3335
         23   16 00022DA0 ConvertIpv4MaskToLength
3336
         24   17 00001F80 ConvertLengthToIpv4Mask
3337
         25   18 0001C7B0 ConvertRemoteInterfaceAliasToLuid
3338
         26   19 0001C950 ConvertRemoteInterfaceGuidToLuid
3339
         27   1A 0001CAA0 ConvertRemoteInterfaceIndexToLuid
3340
         28   1B 0001CB10 ConvertRemoteInterfaceLuidToAlias
3341
         29   1C 0001CC50 ConvertRemoteInterfaceLuidToGuid
3342
         30   1D 0001CCD0 ConvertRemoteInterfaceLuidToIndex
3343
         31   1E 0001CD50 ConvertStringToGuidA
3344
         32   1F 0000ECA0 ConvertStringToGuidW
3345
         33   20 00023E00 ConvertStringToInterfacePhysicalAddress
3346
         34   21 00023F80 CreateAnycastIpAddressEntry
3347
         35   22 00022FF0 CreateCompartment
3348
         36   23 0001E220 CreateIpForwardEntry
3349
         37   24 00025180 CreateIpForwardEntry2
3350
         38   25 0001E230 CreateIpNetEntry
3351
         39   26 00025940 CreateIpNetEntry2
3352
         40   27 000209F0 CreatePersistentTcpPortReservation
3353
         41   28 00020A30 CreatePersistentUdpPortReservation
3354
         42   29 0001E500 CreateProxyArpEntry
3355
         43   2A 00026080 CreateSortedAddressPairs
3356
         44   2B 00023FA0 CreateUnicastIpAddressEntry
3357
         45   2C 00023FC0 DeleteAnycastIpAddressEntry
3358
         46   2D 00023170 DeleteCompartment
3359
         47   2E 0001E520 DeleteIPAddress
3360
         48   2F 0001E610 DeleteIpForwardEntry
3361
         49   30 000251A0 DeleteIpForwardEntry2
3362
         50   31 0001E6E0 DeleteIpNetEntry
3363
         51   32 00025960 DeleteIpNetEntry2
3364
         52   33 00020A70 DeletePersistentTcpPortReservation
3365
         53   34 00020AB0 DeletePersistentUdpPortReservation
3366
         54   35 0001E790 DeleteProxyArpEntry
3367
         55   36 00023FE0 DeleteUnicastIpAddressEntry
3368
         56   37 00010420 DisableMediaSense
3369
         57   38 0001E7B0 EnableRouter
3370
         58   39 0001E810 FlushIpNetTable
3371
         59   3A 00025980 FlushIpNetTable2
3372
         60   3B 000263A0 FlushIpPathTable
3373
         61   3C 0000A320 FreeMibTable
3374
         62   3D 0001CDE0 GetAdapterIndex
3375
         63   3E 0001CE70 GetAdapterOrderMap
3376
         64   3F 000028D0 GetAdaptersAddresses
3377
         65   40 00001DA0 GetAdaptersInfo
3378
         66   41 00024000 GetAnycastIpAddressEntry
3379
         67   42 00024020 GetAnycastIpAddressTable
3380
         68   43 00009000 GetBestInterface
3381
         69   44 00008FF0 GetBestInterfaceEx
3382
         70   45 0001E890 GetBestRoute
3383
         71   46 00009500 GetBestRoute2
3384
         72   47 000069D0 GetCurrentThreadCompartmentId
3385
         73   48 00003BC0 GetCurrentThreadCompartmentScope
3386
         74   49 0000B2B0 GetExtendedTcpTable
3387
         75   4A 0000C1A0 GetExtendedUdpTable
3388
         76   4B 0001CF90 GetFriendlyIfIndex
3389
         77   4C 0001EA30 GetIcmpStatistics
3390
         78   4D 0000EF90 GetIcmpStatisticsEx
3391
         79   4E 00008EC0 GetIfEntry
3392
         80   4F 000042E0 GetIfEntry2
3393
         81   50 000024D0 GetIfStackTable
3394
         82   51 0001CFA0 GetIfTable
3395
         83   52 00003880 GetIfTable2
3396
         84   53 00001610 GetIfTable2Ex
3397
         85   54 0001D150 GetInterfaceInfo
3398
         86   55 00026930 GetInvertedIfStackTable
3399
         87   56 0001EB50 GetIpAddrTable
3400
         88   57 0001C4E0 GetIpErrorString
3401
         89   58 000251C0 GetIpForwardEntry2
3402
         90   59 0001ED50 GetIpForwardTable
3403
         91   5A 0000AAD0 GetIpForwardTable2
3404
         92   5B 0000A260 GetIpInterfaceEntry
3405
         93   5C 0000AAF0 GetIpInterfaceTable
3406
         94   5D 0000A800 GetIpNetEntry2
3407
         95   5E 0001F0B0 GetIpNetTable
3408
         96   5F 00025A60 GetIpNetTable2
3409
         97   60 00026940 GetIpNetworkConnectionBandwidthEstimates
3410
         98   61 00026490 GetIpPathEntry
3411
         99   62 00026680 GetIpPathTable
3412
        100   63 0001F2E0 GetIpStatistics
3413
        101   64 00003980 GetIpStatisticsEx
3414
        102   65 000231C0 GetJobCompartmentId
3415
        103   66 00024040 GetMulticastIpAddressEntry
3416
        104   67 00024060 GetMulticastIpAddressTable
3417
        105   68 00023220 GetNetworkInformation
3418
        106   69 000011F0 GetNetworkParams
3419
        107   6A 0000EF00 GetNumberOfInterfaces
3420
        108   6B 0001BC90 GetOwnerModuleFromPidAndInfo
3421
        109   6C 00021490 GetOwnerModuleFromTcp6Entry
3422
        110   6D 000214D0 GetOwnerModuleFromTcpEntry
3423
        111   6E 000223D0 GetOwnerModuleFromUdp6Entry
3424
        112   6F 00022410 GetOwnerModuleFromUdpEntry
3425
        113   70 0001C370 GetPerAdapterInfo
3426
        114   71 0000B8E0 GetPerTcp6ConnectionEStats
3427
        115   72 00021510 GetPerTcp6ConnectionStats
3428
        116   73 0000BB20 GetPerTcpConnectionEStats
3429
        117   74 000215D0 GetPerTcpConnectionStats
3430
        118   75 0001FC70 GetRTTAndHopCount
3431
        119   76 000038A0 GetSessionCompartmentId
3432
        120   77 00021670 GetTcp6Table
3433
        121   78 000218C0 GetTcp6Table2
3434
        122   79 00021E30 GetTcpStatistics
3435
        123   7A 0000F0D0 GetTcpStatisticsEx
3436
        124   7B 00021E40 GetTcpTable
3437
        125   7C 00021E60 GetTcpTable2
3438
        126   7D 00026F80 GetTeredoPort
3439
        127   7E 00022450 GetUdp6Table
3440
        128   7F 000228C0 GetUdpStatistics
3441
        129   80 0000F210 GetUdpStatisticsEx
3442
        130   81 000228D0 GetUdpTable
3443
        131   82 0001F2F0 GetUniDirectionalAdapterInfo
3444
        132   83 0000A510 GetUnicastIpAddressEntry
3445
        133   84 000064E0 GetUnicastIpAddressTable
3446
        134   85 00022B40 GetWPAOACSupportLevel
3447
        135   86 0000AE90 Icmp6CreateFile
3448
        136   87 00001A50 Icmp6ParseReplies
3449
        137   88 000017A0 Icmp6SendEcho2
3450
        138   89 00001120 IcmpCloseHandle
3451
        139   8A 0001FE90 IcmpCreateFile
3452
        140   8B 000200E0 IcmpParseReplies
3453
        141   8C 00020130 IcmpSendEcho
3454
        142   8D 00020190 IcmpSendEcho2
3455
        143   8E 00020200 IcmpSendEcho2Ex
3456
        144   8F 00023310 InitializeCompartmentEntry
3457
        145   90 0000EE70 InitializeIpForwardEntry
3458
        146   91 00026A40 InitializeIpInterfaceEntry
3459
        147   92 00024080 InitializeUnicastIpAddressEntry
3460
        148   93 00026BC0 InternalCleanupPersistentStore
3461
        149   94 000241F0 InternalCreateAnycastIpAddressEntry
3462
        150   95 0001D740 InternalCreateIpForwardEntry
3463
        151   96 000253B0 InternalCreateIpForwardEntry2
3464
        152   97 0001D760 InternalCreateIpNetEntry
3465
        153   98 00025B90 InternalCreateIpNetEntry2
3466
        154   99 00024210 InternalCreateUnicastIpAddressEntry
3467
        155   9A 00024230 InternalDeleteAnycastIpAddressEntry
3468
        156   9B 0001D780 InternalDeleteIpForwardEntry
3469
        157   9C 000253D0 InternalDeleteIpForwardEntry2
3470
        158   9D 0001D790 InternalDeleteIpNetEntry
3471
        159   9E 00025BB0 InternalDeleteIpNetEntry2
3472
        160   9F 00024250 InternalDeleteUnicastIpAddressEntry
3473
        161   A0 00024270 InternalFindInterfaceByAddress
3474
        162   A1 00024360 InternalGetAnycastIpAddressEntry
3475
        163   A2 00024380 InternalGetAnycastIpAddressTable
3476
        164   A3 0001D7A0 InternalGetBoundTcp6EndpointTable
3477
        165   A4 0001D7E0 InternalGetBoundTcpEndpointTable
3478
        166   A5 00008830 InternalGetForwardIpTable2
3479
        167   A6 0000A900 InternalGetIPPhysicalInterfaceForDestination
3480
        168   A7 00004B90 InternalGetIfEntry2
3481
        169   A8 0001D970 InternalGetIfTable
3482
        170   A9 00026C70 InternalGetIfTable2
3483
        171   AA 0001D9B0 InternalGetIpAddrTable
3484
        172   AB 000253F0 InternalGetIpForwardEntry2
3485
        173   AC 0001D9F0 InternalGetIpForwardTable
3486
        174   AD 0000A0B0 InternalGetIpInterfaceEntry
3487
        175   AE 00009AE0 InternalGetIpInterfaceTable
3488
        176   AF 0000A600 InternalGetIpNetEntry2
3489
        177   B0 0001DA30 InternalGetIpNetTable
3490
        178   B1 00025BD0 InternalGetIpNetTable2
3491
        179   B2 000243A0 InternalGetMulticastIpAddressEntry
3492
        180   B3 000243C0 InternalGetMulticastIpAddressTable
3493
        181   B4 0000C5A0 InternalGetRtcSlotInformation
3494
        182   B5 0001DB50 InternalGetTcp6Table2
3495
        183   B6 0001DB90 InternalGetTcp6TableWithOwnerModule
3496
        184   B7 0001DBD0 InternalGetTcp6TableWithOwnerPid
3497
        185   B8 0001DC10 InternalGetTcpTable
3498
        186   B9 0001DC50 InternalGetTcpTable2
3499
        187   BA 0001DC90 InternalGetTcpTableEx
3500
        188   BB 0001DCD0 InternalGetTcpTableWithOwnerModule
3501
        189   BC 0001DD10 InternalGetTcpTableWithOwnerPid
3502
        190   BD 00003130 InternalGetTunnelPhysicalAdapter
3503
        191   BE 0001DD50 InternalGetUdp6TableWithOwnerModule
3504
        192   BF 0001DD90 InternalGetUdp6TableWithOwnerPid
3505
        193   C0 0001DDD0 InternalGetUdpTable
3506
        194   C1 0001DE10 InternalGetUdpTableEx
3507
        195   C2 0001DE50 InternalGetUdpTableWithOwnerModule
3508
        196   C3 0001DE90 InternalGetUdpTableWithOwnerPid
3509
        197   C4 000243E0 InternalGetUnicastIpAddressEntry
3510
        198   C5 000243F0 InternalGetUnicastIpAddressTable
3511
        199   C6 0001DED0 InternalIcmpCreateFileEx
3512
        200   C7 0001DF00 InternalSetIfEntry
3513
        201   C8 0001DF10 InternalSetIpForwardEntry
3514
        202   C9 00025670 InternalSetIpForwardEntry2
3515
        203   CA 00026C80 InternalSetIpInterfaceEntry
3516
        204   CB 0001DF30 InternalSetIpNetEntry
3517
        205   CC 00025E90 InternalSetIpNetEntry2
3518
        206   CD 0001DF50 InternalSetIpStats
3519
        207   CE 0001DF70 InternalSetTcpEntry
3520
        208   CF 00027000 InternalSetTeredoPort
3521
        209   D0 000246D0 InternalSetUnicastIpAddressEntry
3522
        210   D1 0001F410 IpReleaseAddress
3523
        211   D2 0001F460 IpRenewAddress
3524
        212   D3 00020BD0 LookupPersistentTcpPortReservation
3525
        213   D4 00020C10 LookupPersistentUdpPortReservation
3526
        214   D5 0001F890 NTPTimeToNTFileTime
3527
        215   D6 0001F920 NTTimeToNTPTime
3528
        216   D7 0001D360 NhGetGuidFromInterfaceName
3529
        217   D8 0001D390 NhGetInterfaceDescriptionFromGuid
3530
        218   D9 0000C430 NhGetInterfaceNameFromDeviceGuid
3531
        219   DA 0000C430 NhGetInterfaceNameFromGuid
3532
        220   DB 0001C5B0 NhpAllocateAndGetInterfaceInfoFromStack
3533
        221   DC 0000AE60 NotifyAddrChange
3534
        222   DD 000233D0 NotifyCompartmentChange
3535
        223   DE 00009870 NotifyIpInterfaceChange
3536
        224   DF 0001F4B0 NotifyRouteChange
3537
        225   E0 0000EB30 NotifyRouteChange2
3538
        226   E1 00024F40 NotifyStableUnicastIpAddressTable
3539
        227   E2 000270C0 NotifyTeredoPortChange
3540
        228   E3 00009AB0 NotifyUnicastIpAddressChange
3541
        229   E4 00023480 OpenCompartment
3542
        230   E5 0000F300 ParseNetworkString
3543
        231   E6 0001FC60 PfAddFiltersToInterface
3544
        232   E7 0001FC60 PfAddGlobalFilterToInterface
3545
        233   E8 0001FC60 PfBindInterfaceToIPAddress
3546
        234   E9 0001FC60 PfBindInterfaceToIndex
3547
        235   EA 0001FC60 PfCreateInterface
3548
        236   EB 0001FC60 PfDeleteInterface
3549
        237   EC 0001FC60 PfDeleteLog
3550
        238   ED 0001FC60 PfGetInterfaceStatistics
3551
        239   EE 0001FC60 PfMakeLog
3552
        240   EF 0001FC60 PfRebindFilters
3553
        241   F0 0001FC60 PfRemoveFilterHandles
3554
        242   F1 0001FC60 PfRemoveFiltersFromInterface
3555
        243   F2 0001FC60 PfRemoveGlobalFilterFromInterface
3556
        244   F3 0001FC60 PfSetLogBuffer
3557
        245   F4 0001FC60 PfTestPacket
3558
        246   F5 0001FC60 PfUnBindInterface
3559
        247   F6 0000ED00 ResolveIpNetEntry2
3560
        248   F7 0001F4E0 ResolveNeighbor
3561
        249   F8 00010420 RestoreMediaSense
3562
        250   F9 0001F4F0 SendARP
3563
        251   FA 0001DF80 SetAdapterIpAddress
3564
        252   FB 000235E0 SetCurrentThreadCompartmentId
3565
        253   FC 00009D60 SetCurrentThreadCompartmentScope
3566
        254   FD 0001D4B0 SetIfEntry
3567
        255   FE 0001F5D0 SetIpForwardEntry
3568
        256   FF 00025920 SetIpForwardEntry2
3569
        257  100 00026F60 SetIpInterfaceEntry
3570
        258  101 0001F5E0 SetIpNetEntry
3571
        259  102 00026060 SetIpNetEntry2
3572
        260  103 0001F5F0 SetIpStatistics
3573
        261  104 0001F600 SetIpStatisticsEx
3574
        262  105 0001F6E0 SetIpTTL
3575
        263  106 00023630 SetJobCompartmentId
3576
        264  107 00023690 SetNetworkInformation
3577
        265  108 0000B0F0 SetPerTcp6ConnectionEStats
3578
        266  109 000221B0 SetPerTcp6ConnectionStats
3579
        267  10A 0000B1E0 SetPerTcpConnectionEStats
3580
        268  10B 00022250 SetPerTcpConnectionStats
3581
        269  10C 00023770 SetSessionCompartmentId
3582
        270  10D 000222E0 SetTcpEntry
3583
        271  10E 00025160 SetUnicastIpAddressEntry
3584
        272  10F 0001F810 UnenableRouter
3585
        273  110 00020690 do_echo_rep
3586
        274  111 00020860 do_echo_req
3587
        275  112 00023EE0 if_indextoname
3588
        276  113 00023F30 if_nametoindex
3589
        277  114 000209B0 register_icmp
3590

3591
  Summary
3592

3593
        1000 .data
3594
        1000 .didat
3595
        2000 .pdata
3596
        A000 .rdata
3597
        1000 .reloc
3598
        1000 .rsrc
3599
       27000 .text
3600
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
3601
Copyright (C) Microsoft Corporation.  All rights reserved.
3602

3603

3604
Dump of file kernel32.dll
3605

3606
File Type: DLL
3607

3608
  Section contains the following exports for KERNEL32.dll
3609

3610
    00000000 characteristics
3611
    64099EB2 time date stamp Thu Mar  9 00:54:10 2023
3612
        0.00 version
3613
           1 ordinal base
3614
        1596 number of functions
3615
        1596 number of names
3616

3617
    ordinal hint RVA      name
3618

3619
          1    0          AcquireSRWLockExclusive (forwarded to NTDLL.RtlAcquireSRWLockExclusive)
3620
          2    1          AcquireSRWLockShared (forwarded to NTDLL.RtlAcquireSRWLockShared)
3621
          3    2 00021980 ActivateActCtx
3622
          4    3 00019510 ActivateActCtxWorker
3623
          5    4 00024640 AddAtomA
3624
          6    5 00014870 AddAtomW
3625
          7    6 000640D0 AddConsoleAliasA
3626
          8    7 00064230 AddConsoleAliasW
3627
          9    8          AddDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.AddDllDirectory)
3628
         10    9 00043200 AddIntegrityLabelToBoundaryDescriptor
3629
         11    A 00039410 AddLocalAlternateComputerNameA
3630
         12    B 00039470 AddLocalAlternateComputerNameW
3631
         13    C 000243C0 AddRefActCtx
3632
         14    D 0001DD10 AddRefActCtxWorker
3633
         15    E 00041F00 AddResourceAttributeAce
3634
         16    F 00020D10 AddSIDToBoundaryDescriptor
3635
         17   10 00041F10 AddScopedPolicyIDAce
3636
         18   11 0003F0C0 AddSecureMemoryCacheCallback
3637
         19   12          AddVectoredContinueHandler (forwarded to NTDLL.RtlAddVectoredContinueHandler)
3638
         20   13          AddVectoredExceptionHandler (forwarded to NTDLL.RtlAddVectoredExceptionHandler)
3639
         21   14 00018010 AdjustCalendarDate
3640
         22   15 00026A20 AllocConsole
3641
         23   16 00041F30 AllocateUserPhysicalPages
3642
         24   17 00041F20 AllocateUserPhysicalPagesNuma
3643
         25   18          AppXGetOSMaxVersionTested (forwarded to kernelbase.AppXGetOSMaxVersionTested)
3644
         26   19 0004E830 ApplicationRecoveryFinished
3645
         27   1A 0004E840 ApplicationRecoveryInProgress
3646
         28   1B 00020C00 AreFileApisANSI
3647
         29   1C 00016860 AssignProcessToJobObject
3648
         30   1D 00026B00 AttachConsole
3649
         31   1E 00037110 BackupRead
3650
         32   1F 00037FD0 BackupSeek
3651
         33   20 000382A0 BackupWrite
3652
         34   21 00041FA0 BaseCheckAppcompatCache
3653
         35   22 00041F40 BaseCheckAppcompatCacheEx
3654
         36   23 00023920 BaseCheckAppcompatCacheExWorker
3655
         37   24 00023920 BaseCheckAppcompatCacheWorker
3656
         38   25 00019F70 BaseCheckElevation
3657
         39   26 00041FB0 BaseCleanupAppcompatCacheSupport
3658
         40   27 00024D30 BaseCleanupAppcompatCacheSupportWorker
3659
         41   28 000487B0 BaseDestroyVDMEnvironment
3660
         42   29 00012240 BaseDllReadWriteIniFile
3661
         43   2A 00041FC0 BaseDumpAppcompatCache
3662
         44   2B 000271A0 BaseDumpAppcompatCacheWorker
3663
         45   2C 0001F160 BaseElevationPostProcessing
3664
         46   2D 00041FD0 BaseFlushAppcompatCache
3665
         47   2E 0006AD20 BaseFlushAppcompatCacheWorker
3666
         48   2F 0001DC40 BaseFormatObjectAttributes
3667
         49   30 000627D0 BaseFormatTimeOut
3668
         50   31 00023680 BaseFreeAppCompatDataForProcessWorker
3669
         51   32 0001FDB0 BaseGenerateAppCompatData
3670
         52   33 00041FE0 BaseGetNamedObjectDirectory
3671
         53   34 00041FF0 BaseInitAppcompatCacheSupport
3672
         54   35 00024D30 BaseInitAppcompatCacheSupportWorker
3673
         55   36 00023920 BaseIsAppcompatInfrastructureDisabled
3674
         56   37 00023920 BaseIsAppcompatInfrastructureDisabledWorker
3675
         57   38 000232D0 BaseIsDosApplication
3676
         58   39 0006ADB0 BaseQueryModuleData
3677
         59   3A 00020D50 BaseReadAppCompatDataForProcessWorker
3678
         60   3B 00015000 BaseSetLastNTError
3679
         61   3C 000110E0 BaseThreadInitThunk
3680
         62   3D 00042000 BaseUpdateAppcompatCache
3681
         63   3E 0006AD80 BaseUpdateAppcompatCacheWorker
3682
         64   3F 00048AC0 BaseUpdateVDMEntry
3683
         65   40 00062860 BaseVerifyUnicodeString
3684
         66   41 0003C960 BaseWriteErrorElevationRequiredEvent
3685
         67   42 00016B60 Basep8BitStringToDynamicUnicodeString
3686
         68   43 000628C0 BasepAllocateActivationContextActivationBlock
3687
         69   44 00062800 BasepAnsiStringToDynamicUnicodeString
3688
         70   45 0001B930 BasepAppContainerEnvironmentExtension
3689
         71   46 00023110 BasepAppXExtension
3690
         72   47 0001A7A0 BasepCheckAppCompat
3691
         73   48 0001F200 BasepCheckWebBladeHashes
3692
         74   49 0001B430 BasepCheckWinSaferRestrictions
3693
         75   4A 0000CFE0 BasepConstructSxsCreateProcessMessage
3694
         76   4B 0001D410 BasepCopyEncryption
3695
         77   4C 00062A30 BasepFreeActivationContextActivationBlock
3696
         78   4D 0001D810 BasepFreeAppCompatData
3697
         79   4E 0000B880 BasepGetAppCompatData
3698
         80   4F 0001C950 BasepGetComputerNameFromNtPath
3699
         81   50 0001A880 BasepGetExeArchType
3700
         82   51 0001D8A0 BasepIsProcessAllowed
3701
         83   52 00016450 BasepMapModuleHandle
3702
         84   53 00011630 BasepNotifyLoadStringResource
3703
         85   54 000239F0 BasepPostSuccessAppXExtension
3704
         86   55 00023150 BasepProcessInvalidImage
3705
         87   56 0000C2D0 BasepQueryAppCompat
3706
         88   57 000239E0 BasepReleaseAppXContext
3707
         89   58 0000A560 BasepReleaseSxsCreateProcessUtilityStruct
3708
         90   59 000219B0 BasepReportFault
3709
         91   5A 00022340 BasepSetFileEncryptionCompression
3710
         92   5B 00039210 Beep
3711
         93   5C 000544B0 BeginUpdateResourceA
3712
         94   5D 00054510 BeginUpdateResourceW
3713
         95   5E 00025A70 BindIoCompletionCallback
3714
         96   5F 0004C260 BuildCommDCBA
3715
         97   60 0004C290 BuildCommDCBAndTimeoutsA
3716
         98   61 0004C2C0 BuildCommDCBAndTimeoutsW
3717
         99   62 0004C330 BuildCommDCBW
3718
        100   63 0003F970 CallNamedPipeA
3719
        101   64 0003FA00 CallNamedPipeW
3720
        102   65 00023A00 CallbackMayRunLong
3721
        103   66 00026950 CalloutOnFiberStack
3722
        104   67 00040B30 CancelDeviceWakeupRequest
3723
        105   68 00023AC0 CancelIo
3724
        106   69 00022FA0 CancelIoEx
3725
        107   6A 00001420 CancelSynchronousIo
3726
        108   6B          CancelThreadpoolIo (forwarded to NTDLL.TpCancelAsyncIoOperation)
3727
        109   6C 0004EAC0 CancelTimerQueueTimer
3728
        110   6D 00026120 CancelWaitableTimer
3729
        111   6E          CeipIsOptedIn (forwarded to kernelbase.CeipIsOptedIn)
3730
        112   6F 00023AD0 ChangeTimerQueueTimer
3731
        113   70 0003DE80 CheckAllowDecryptedRemoteDestinationPolicy
3732
        114   71 00019E40 CheckElevation
3733
        115   72 0000C5F0 CheckElevationEnabled
3734
        116   73 00043230 CheckForReadOnlyResource
3735
        117   74 00023C30 CheckForReadOnlyResourceFilter
3736
        118   75 00040520 CheckNameLegalDOS8Dot3A
3737
        119   76 000405C0 CheckNameLegalDOS8Dot3W
3738
        120   77 00023CD0 CheckRemoteDebuggerPresent
3739
        121   78 00042010 CheckTokenCapability
3740
        122   79 00042020 CheckTokenMembershipEx
3741
        123   7A 00026800 ClearCommBreak
3742
        124   7B 00026810 ClearCommError
3743
        125   7C 00064B00 CloseConsoleHandle
3744
        126   7D 000260E0 CloseHandle
3745
        127   7E          ClosePackageInfo (forwarded to kernelbase.ClosePackageInfo)
3746
        128   7F 00024A20 ClosePrivateNamespace
3747
        129   80 00024D30 CloseProfileUserMapping
3748
        130   81          CloseState (forwarded to kernelbase.CloseState)
3749
        131   82          CloseThreadpool (forwarded to NTDLL.TpReleasePool)
3750
        132   83          CloseThreadpoolCleanupGroup (forwarded to NTDLL.TpReleaseCleanupGroup)
3751
        133   84          CloseThreadpoolCleanupGroupMembers (forwarded to NTDLL.TpReleaseCleanupGroupMembers)
3752
        134   85          CloseThreadpoolIo (forwarded to NTDLL.TpReleaseIoCompletion)
3753
        135   86          CloseThreadpoolTimer (forwarded to NTDLL.TpReleaseTimer)
3754
        136   87          CloseThreadpoolWait (forwarded to NTDLL.TpReleaseWait)
3755
        137   88          CloseThreadpoolWork (forwarded to NTDLL.TpReleaseWork)
3756
        138   89 00022270 CmdBatNotification
3757
        139   8A 00045F60 CommConfigDialogA
3758
        140   8B 00045FF0 CommConfigDialogW
3759
        141   8C 00054DC0 CompareCalendarDates
3760
        142   8D 000262F0 CompareFileTime
3761
        143   8E 000217C0 CompareStringA
3762
        144   8F 00016CA0 CompareStringEx
3763
        145   90 0001C380 CompareStringOrdinal
3764
        146   91 0001E160 CompareStringW
3765
        147   92 00023C20 ConnectNamedPipe
3766
        148   93 00064BD0 ConsoleMenuControl
3767
        149   94 00042030 ContinueDebugEvent
3768
        150   95 00054E70 ConvertCalDateTimeToSystemTime
3769
        151   96 00023B90 ConvertDefaultLocale
3770
        152   97 00026960 ConvertFiberToThread
3771
        153   98 00054F60 ConvertNLSDayOfWeekToWin32DayOfWeek
3772
        154   99 000182A0 ConvertSystemTimeToCalDateTime
3773
        155   9A 00026970 ConvertThreadToFiber
3774
        156   9B 00026980 ConvertThreadToFiberEx
3775
        157   9C 00042040 CopyContext
3776
        158   9D 00042050 CopyFile2
3777
        159   9E 0003DF50 CopyFileA
3778
        160   9F 0003DFE0 CopyFileExA
3779
        161   A0 000230F0 CopyFileExW
3780
        162   A1 0003E090 CopyFileTransactedA
3781
        163   A2 00025910 CopyFileTransactedW
3782
        164   A3 00026940 CopyFileW
3783
        165   A4 0003AA80 CopyLZFile
3784
        166   A5 00023FD0 CreateActCtxA
3785
        167   A6 000239D0 CreateActCtxW
3786
        168   A7 00008F00 CreateActCtxWWorker
3787
        169   A8 000433A0 CreateBoundaryDescriptorA
3788
        170   A9 00020D00 CreateBoundaryDescriptorW
3789
        171   AA 00026B10 CreateConsoleScreenBuffer
3790
        172   AB 00026300 CreateDirectoryA
3791
        173   AC 0003AE80 CreateDirectoryExA
3792
        174   AD 00042060 CreateDirectoryExW
3793
        175   AE 0003AF00 CreateDirectoryTransactedA
3794
        176   AF 0003AFA0 CreateDirectoryTransactedW
3795
        177   B0 00026310 CreateDirectoryW
3796
        178   B1 00026130 CreateEventA
3797
        179   B2 00026140 CreateEventExA
3798
        180   B3 00026150 CreateEventExW
3799
        181   B4 00026160 CreateEventW
3800
        182   B5 00026990 CreateFiber
3801
        183   B6 000269A0 CreateFiberEx
3802
        184   B7 00026320 CreateFile2
3803
        185   B8 00026330 CreateFileA
3804
        186   B9 00016890 CreateFileMappingA
3805
        187   BA          CreateFileMappingFromApp (forwarded to api-ms-win-core-memory-l1-1-1.CreateFileMappingFromApp)
3806
        188   BB 0003D000 CreateFileMappingNumaA
3807
        189   BC 00042070 CreateFileMappingNumaW
3808
        190   BD 0001E190 CreateFileMappingW
3809
        191   BE 0003E380 CreateFileTransactedA
3810
        192   BF 0003E440 CreateFileTransactedW
3811
        193   C0 00026340 CreateFileW
3812
        194   C1 00042080 CreateHardLinkA
3813
        195   C2 0004DF80 CreateHardLinkTransactedA
3814
        196   C3 0004E020 CreateHardLinkTransactedW
3815
        197   C4 00024CA0 CreateHardLinkW
3816
        198   C5 0001F1F0 CreateIoCompletionPort
3817
        199   C6 0004DA20 CreateJobObjectA
3818
        200   C7 0001DA20 CreateJobObjectW
3819
        201   C8 0004DA90 CreateJobSet
3820
        202   C9 00016950 CreateMailslotA
3821
        203   CA 000169C0 CreateMailslotW
3822
        204   CB 000230D0 CreateMemoryResourceNotification
3823
        205   CC 00026170 CreateMutexA
3824
        206   CD 00026180 CreateMutexExA
3825
        207   CE 00026190 CreateMutexExW
3826
        208   CF 000261A0 CreateMutexW
3827
        209   D0 0003FB90 CreateNamedPipeA
3828
        210   D1 00023890 CreateNamedPipeW
3829
        211   D2 00023100 CreatePipe
3830
        212   D3 00043400 CreatePrivateNamespaceA
3831
        213   D4 00023420 CreatePrivateNamespaceW
3832
        214   D5 0001DD60 CreateProcessA
3833
        215   D6 00042090 CreateProcessAsUserA
3834
        216   D7 000207C0 CreateProcessAsUserW
3835
        217   D8 00042100 CreateProcessInternalA
3836
        218   D9 00042180 CreateProcessInternalW
3837
        219   DA 0001E6D0 CreateProcessW
3838
        220   DB 00042200 CreateRemoteThread
3839
        221   DC          CreateRemoteThreadEx (forwarded to api-ms-win-core-processthreads-l1-1-0.CreateRemoteThreadEx)
3840
        222   DD 00016BC0 CreateSemaphoreA
3841
        223   DE 00016BF0 CreateSemaphoreExA
3842
        224   DF 000261B0 CreateSemaphoreExW
3843
        225   E0 000261C0 CreateSemaphoreW
3844
        226   E1 0003D280 CreateSymbolicLinkA
3845
        227   E2 0003D320 CreateSymbolicLinkTransactedA
3846
        228   E3 0003D3D0 CreateSymbolicLinkTransactedW
3847
        229   E4 00042250 CreateSymbolicLinkW
3848
        230   E5 0004D1B0 CreateTapePartition
3849
        231   E6 0001C4A0 CreateThread
3850
        232   E7 00023930 CreateThreadpool
3851
        233   E8 00023A80 CreateThreadpoolCleanupGroup
3852
        234   E9 00024850 CreateThreadpoolIo
3853
        235   EA 0001F8C0 CreateThreadpoolTimer
3854
        236   EB 000233D0 CreateThreadpoolWait
3855
        237   EC 00023010 CreateThreadpoolWork
3856
        238   ED 00023B70 CreateTimerQueue
3857
        239   EE 0001DD20 CreateTimerQueueTimer
3858
        240   EF 00027400 CreateToolhelp32Snapshot
3859
        241   F0 0004BF30 CreateUmsCompletionList
3860
        242   F1 0004BF60 CreateUmsThreadContext
3861
        243   F2 00024440 CreateWaitableTimerA
3862
        244   F3 00024470 CreateWaitableTimerExA
3863
        245   F4 000261D0 CreateWaitableTimerExW
3864
        246   F5 00023720 CreateWaitableTimerW
3865
        247   F6          CtrlRoutine (forwarded to kernelbase.CtrlRoutine)
3866
        248   F7 00021990 DeactivateActCtx
3867
        249   F8 00019560 DeactivateActCtxWorker
3868
        250   F9 00042270 DebugActiveProcess
3869
        251   FA 00042260 DebugActiveProcessStop
3870
        252   FB 00042280 DebugBreak
3871
        253   FC 0003AD50 DebugBreakProcess
3872
        254   FD 0003AD80 DebugSetProcessKillOnExit
3873
        255   FE          DecodePointer (forwarded to NTDLL.RtlDecodePointer)
3874
        256   FF          DecodeSystemPointer (forwarded to NTDLL.RtlDecodeSystemPointer)
3875
        257  100 0003C640 DefineDosDeviceA
3876
        258  101 00026350 DefineDosDeviceW
3877
        259  102 00042290 DelayLoadFailureHook
3878
        260  103 000147E0 DeleteAtom
3879
        261  104 00020CF0 DeleteBoundaryDescriptor
3880
        262  105          DeleteCriticalSection (forwarded to NTDLL.RtlDeleteCriticalSection)
3881
        263  106 000269B0 DeleteFiber
3882
        264  107 00026360 DeleteFileA
3883
        265  108 0003D480 DeleteFileTransactedA
3884
        266  109 000259C0 DeleteFileTransactedW
3885
        267  10A 00026370 DeleteFileW
3886
        268  10B          DeleteProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.DeleteProcThreadAttributeList)
3887
        269  10C 000422A0 DeleteSynchronizationBarrier
3888
        270  10D 00023AF0 DeleteTimerQueue
3889
        271  10E 00023BD0 DeleteTimerQueueEx
3890
        272  10F 0001F5E0 DeleteTimerQueueTimer
3891
        273  110 0004BF90 DeleteUmsCompletionList
3892
        274  111 0004BFC0 DeleteUmsThreadContext
3893
        275  112 0004A440 DeleteVolumeMountPointA
3894
        276  113 00062A80 DeleteVolumeMountPointW
3895
        277  114 0004BFF0 DequeueUmsCompletionListItems
3896
        278  115 00017060 DeviceIoControl
3897
        279  116 00022D40 DisableThreadLibraryCalls
3898
        280  117 0004EB40 DisableThreadProfiling
3899
        281  118          DisassociateCurrentThreadFromCallback (forwarded to NTDLL.TpDisassociateCallback)
3900
        282  119          DiscardVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.DiscardVirtualMemory)
3901
        283  11A 000243F0 DisconnectNamedPipe
3902
        284  11B 0003A190 DnsHostnameToComputerNameA
3903
        285  11C 000422B0 DnsHostnameToComputerNameExW
3904
        286  11D 0001DF10 DnsHostnameToComputerNameW
3905
        287  11E 00014890 DosDateTimeToFileTime
3906
        288  11F 00041BB0 DosPathToSessionPathA
3907
        289  120 00041D80 DosPathToSessionPathW
3908
        290  121 00064B10 DuplicateConsoleHandle
3909
        291  122 0003E5C0 DuplicateEncryptionInfoFileExt
3910
        292  123 000260F0 DuplicateHandle
3911
        293  124 0004EB70 EnableThreadProfiling
3912
        294  125          EncodePointer (forwarded to NTDLL.RtlEncodePointer)
3913
        295  126          EncodeSystemPointer (forwarded to NTDLL.RtlEncodeSystemPointer)
3914
        296  127 00054720 EndUpdateResourceA
3915
        297  128 00054730 EndUpdateResourceW
3916
        298  129          EnterCriticalSection (forwarded to NTDLL.RtlEnterCriticalSection)
3917
        299  12A 000422C0 EnterSynchronizationBarrier
3918
        300  12B 0004C040 EnterUmsSchedulingMode
3919
        301  12C 000559D0 EnumCalendarInfoA
3920
        302  12D 00055A60 EnumCalendarInfoExA
3921
        303  12E 00021400 EnumCalendarInfoExEx
3922
        304  12F 000422D0 EnumCalendarInfoExW
3923
        305  130 000422E0 EnumCalendarInfoW
3924
        306  131 00055AF0 EnumDateFormatsA
3925
        307  132 00055B50 EnumDateFormatsExA
3926
        308  133 000422F0 EnumDateFormatsExEx
3927
        309  134 00042300 EnumDateFormatsExW
3928
        310  135 00042310 EnumDateFormatsW
3929
        311  136 00055BB0 EnumLanguageGroupLocalesA
3930
        312  137 00042320 EnumLanguageGroupLocalesW
3931
        313  138 0003F5F0 EnumResourceLanguagesA
3932
        314  139 00042330 EnumResourceLanguagesExA
3933
        315  13A 00042350 EnumResourceLanguagesExW
3934
        316  13B 00024D00 EnumResourceLanguagesW
3935
        317  13C 0003F620 EnumResourceNamesA
3936
        318  13D 00042370 EnumResourceNamesExA
3937
        319  13E 00042390 EnumResourceNamesExW
3938
        320  13F 000242A0 EnumResourceNamesW
3939
        321  140 0003F650 EnumResourceTypesA
3940
        322  141 000423B0 EnumResourceTypesExA
3941
        323  142 000423D0 EnumResourceTypesExW
3942
        324  143 0003F670 EnumResourceTypesW
3943
        325  144 00055BD0 EnumSystemCodePagesA
3944
        326  145 000423F0 EnumSystemCodePagesW
3945
        327  146 0003F0F0 EnumSystemFirmwareTables
3946
        328  147 0005EC90 EnumSystemGeoID
3947
        329  148 00055BE0 EnumSystemLanguageGroupsA
3948
        330  149 00024D90 EnumSystemLanguageGroupsW
3949
        331  14A 00042400 EnumSystemLocalesA
3950
        332  14B 00042410 EnumSystemLocalesEx
3951
        333  14C 00042420 EnumSystemLocalesW
3952
        334  14D 00055BF0 EnumTimeFormatsA
3953
        335  14E 00023A60 EnumTimeFormatsEx
3954
        336  14F 00042430 EnumTimeFormatsW
3955
        337  150 00055C60 EnumUILanguagesA
3956
        338  151 00024D60 EnumUILanguagesW
3957
        339  152 0003A270 EnumerateLocalComputerNamesA
3958
        340  153 0003A380 EnumerateLocalComputerNamesW
3959
        341  154 0004D210 EraseTape
3960
        342  155 00026820 EscapeCommFunction
3961
        343  156 0004C070 ExecuteUmsThread
3962
        344  157 0001F700 ExitProcess
3963
        345  158          ExitThread (forwarded to NTDLL.RtlExitUserThread)
3964
        346  159 00048BC0 ExitVDM
3965
        347  15A 00025B70 ExpandEnvironmentStringsA
3966
        348  15B 0001EC10 ExpandEnvironmentStringsW
3967
        349  15C 000642A0 ExpungeConsoleCommandHistoryA
3968
        350  15D 00064320 ExpungeConsoleCommandHistoryW
3969
        351  15E 00042440 FatalAppExitA
3970
        352  15F 00042450 FatalAppExitW
3971
        353  160 0001F700 FatalExit
3972
        354  161 00014DC0 FileTimeToDosDateTime
3973
        355  162 00026380 FileTimeToLocalFileTime
3974
        356  163 000267C0 FileTimeToSystemTime
3975
        357  164 00026B20 FillConsoleOutputAttribute
3976
        358  165 00026B30 FillConsoleOutputCharacterA
3977
        359  166 00026B40 FillConsoleOutputCharacterW
3978
        360  167 0001C4F0 FindActCtxSectionGuid
3979
        361  168 00014E80 FindActCtxSectionGuidWorker
3980
        362  169 0004E6F0 FindActCtxSectionStringA
3981
        363  16A 000230A0 FindActCtxSectionStringW
3982
        364  16B 00014670 FindActCtxSectionStringWWorker
3983
        365  16C 000147C0 FindAtomA
3984
        366  16D 00014C40 FindAtomW
3985
        367  16E 00026390 FindClose
3986
        368  16F 000263A0 FindCloseChangeNotification
3987
        369  170 000263B0 FindFirstChangeNotificationA
3988
        370  171 000263C0 FindFirstChangeNotificationW
3989
        371  172 000263D0 FindFirstFileA
3990
        372  173 000263E0 FindFirstFileExA
3991
        373  174 000263F0 FindFirstFileExW
3992
        374  175 0003C9B0 FindFirstFileNameTransactedW
3993
        375  176 00026400 FindFirstFileNameW
3994
        376  177 0003CA70 FindFirstFileTransactedA
3995
        377  178 0003CB40 FindFirstFileTransactedW
3996
        378  179 00026410 FindFirstFileW
3997
        379  17A 0003CC10 FindFirstStreamTransactedW
3998
        380  17B          FindFirstStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindFirstStreamW)
3999
        381  17C 0004A480 FindFirstVolumeA
4000
        382  17D 0004A600 FindFirstVolumeMountPointA
4001
        383  17E 0004A7D0 FindFirstVolumeMountPointW
4002
        384  17F 0001E1E0 FindFirstVolumeW
4003
        385  180 00042460 FindNLSString
4004
        386  181 00018AB0 FindNLSStringEx
4005
        387  182 00026420 FindNextChangeNotification
4006
        388  183 00026430 FindNextFileA
4007
        389  184 00026440 FindNextFileNameW
4008
        390  185 00026450 FindNextFileW
4009
        391  186          FindNextStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindNextStreamW)
4010
        392  187 0004A9F0 FindNextVolumeA
4011
        393  188 0004AB60 FindNextVolumeMountPointA
4012
        394  189 0004B1A0 FindNextVolumeMountPointW
4013
        395  18A 0001E380 FindNextVolumeW
4014
        396  18B          FindPackagesByPackageFamily (forwarded to kernelbase.FindPackagesByPackageFamily)
4015
        397  18C 00016270 FindResourceA
4016
        398  18D 00016290 FindResourceExA
4017
        399  18E 0001EEB0 FindResourceExW
4018
        400  18F 00020CE0 FindResourceW
4019
        401  190 00042470 FindStringOrdinal
4020
        402  191 000236C0 FindVolumeClose
4021
        403  192 0004B1B0 FindVolumeMountPointClose
4022
        404  193 00020C40 FlsAlloc
4023
        405  194 00022F60 FlsFree
4024
        406  195 00017050 FlsGetValue
4025
        407  196 0001E180 FlsSetValue
4026
        408  197 00026B50 FlushConsoleInputBuffer
4027
        409  198 00026460 FlushFileBuffers
4028
        410  199 0001C420 FlushInstructionCache
4029
        411  19A          FlushProcessWriteBuffers (forwarded to NTDLL.NtFlushProcessWriteBuffers)
4030
        412  19B 00023AE0 FlushViewOfFile
4031
        413  19C 00055C70 FoldStringA
4032
        414  19D 00042480 FoldStringW
4033
        415  19E          FormatApplicationUserModelId (forwarded to kernelbase.FormatApplicationUserModelId)
4034
        416  19F 00024340 FormatMessageA
4035
        417  1A0 0001F260 FormatMessageW
4036
        418  1A1 00026B60 FreeConsole
4037
        419  1A2 00021660 FreeEnvironmentStringsA
4038
        420  1A3 0001FD80 FreeEnvironmentStringsW
4039
        421  1A4 0001F380 FreeLibrary
4040
        422  1A5 00021930 FreeLibraryAndExitThread
4041
        423  1A6          FreeLibraryWhenCallbackReturns (forwarded to NTDLL.TpCallbackUnloadDllOnCompletion)
4042
        424  1A7 0004DAC0 FreeMemoryJobObject
4043
        425  1A8 00024A10 FreeResource
4044
        426  1A9 00042490 FreeUserPhysicalPages
4045
        427  1AA 00026B70 GenerateConsoleCtrlEvent
4046
        428  1AB 00019760 GetACP
4047
        429  1AC 0001F720 GetActiveProcessorCount
4048
        430  1AD 000013B0 GetActiveProcessorGroupCount
4049
        431  1AE 000424A0 GetAppContainerAce
4050
        432  1AF 00022F70 GetAppContainerNamedObjectPath
4051
        433  1B0 000424B0 GetApplicationRecoveryCallback
4052
        434  1B1 00020240 GetApplicationRecoveryCallbackWorker
4053
        435  1B2 000424C0 GetApplicationRestartSettings
4054
        436  1B3 000200F0 GetApplicationRestartSettingsWorker
4055
        437  1B4          GetApplicationUserModelId (forwarded to kernelbase.GetApplicationUserModelId)
4056
        438  1B5 0003B160 GetAtomNameA
4057
        439  1B6 00014340 GetAtomNameW
4058
        440  1B7 00048C50 GetBinaryType
4059
        441  1B8 00048C50 GetBinaryTypeA
4060
        442  1B9 00048CA0 GetBinaryTypeW
4061
        443  1BA 0001DE70 GetCPInfo
4062
        444  1BB 00055EE0 GetCPInfoExA
4063
        445  1BC 000424D0 GetCPInfoExW
4064
        446  1BD 000424E0 GetCachedSigningLevel
4065
        447  1BE 00054F90 GetCalendarDateFormat
4066
        448  1BF 000183E0 GetCalendarDateFormatEx
4067
        449  1C0 000181C0 GetCalendarDaysInMonth
4068
        450  1C1 00055240 GetCalendarDifferenceInDays
4069
        451  1C2 00055FB0 GetCalendarInfoA
4070
        452  1C3 000267D0 GetCalendarInfoEx
4071
        453  1C4 000267E0 GetCalendarInfoW
4072
        454  1C5 00055380 GetCalendarMonthsInYear
4073
        455  1C6 00017F50 GetCalendarSupportedDateRange
4074
        456  1C7 00055450 GetCalendarWeekNumber
4075
        457  1C8 0004E790 GetComPlusPackageInstallStatus
4076
        458  1C9 00026830 GetCommConfig
4077
        459  1CA 00026840 GetCommMask
4078
        460  1CB 00026850 GetCommModemStatus
4079
        461  1CC 00026860 GetCommProperties
4080
        462  1CD 00026870 GetCommState
4081
        463  1CE 00026880 GetCommTimeouts
4082
        464  1CF 00020AB0 GetCommandLineA
4083
        465  1D0 00020AC0 GetCommandLineW
4084
        466  1D1 000424F0 GetCompressedFileSizeA
4085
        467  1D2 0003D4D0 GetCompressedFileSizeTransactedA
4086
        468  1D3 0003D530 GetCompressedFileSizeTransactedW
4087
        469  1D4 00023A40 GetCompressedFileSizeW
4088
        470  1D5 0001CAD0 GetComputerNameA
4089
        471  1D6 00042500 GetComputerNameExA
4090
        472  1D7 000234D0 GetComputerNameExW
4091
        473  1D8 0001CC40 GetComputerNameW
4092
        474  1D9 00064330 GetConsoleAliasA
4093
        475  1DA 00064370 GetConsoleAliasExesA
4094
        476  1DB 00064400 GetConsoleAliasExesLengthA
4095
        477  1DC 00064460 GetConsoleAliasExesLengthW
4096
        478  1DD 00064470 GetConsoleAliasExesW
4097
        479  1DE 00064570 GetConsoleAliasW
4098
        480  1DF 000645C0 GetConsoleAliasesA
4099
        481  1E0 00064670 GetConsoleAliasesLengthA
4100
        482  1E1 00064710 GetConsoleAliasesLengthW
4101
        483  1E2 00064720 GetConsoleAliasesW
4102
        484  1E3 00026A30 GetConsoleCP
4103
        485  1E4 000650F0 GetConsoleCharType
4104
        486  1E5 00064730 GetConsoleCommandHistoryA
4105
        487  1E6 000647F0 GetConsoleCommandHistoryLengthA
4106
        488  1E7 00064890 GetConsoleCommandHistoryLengthW
4107
        489  1E8 000648A0 GetConsoleCommandHistoryW
4108
        490  1E9 00026B80 GetConsoleCursorInfo
4109
        491  1EA 00065150 GetConsoleCursorMode
4110
        492  1EB 00064C30 GetConsoleDisplayMode
4111
        493  1EC 00065440 GetConsoleFontInfo
4112
        494  1ED 000654E0 GetConsoleFontSize
4113
        495  1EE 00064C80 GetConsoleHardwareState
4114
        496  1EF 00065530 GetConsoleHistoryInfo
4115
        497  1F0          GetConsoleInputExeNameA (forwarded to kernelbase.GetConsoleInputExeNameA)
4116
        498  1F1          GetConsoleInputExeNameW (forwarded to kernelbase.GetConsoleInputExeNameW)
4117
        499  1F2 00064B60 GetConsoleInputWaitHandle
4118
        500  1F3 000655B0 GetConsoleKeyboardLayoutNameA
4119
        501  1F4 000655D0 GetConsoleKeyboardLayoutNameW
4120
        502  1F5 00026A40 GetConsoleMode
4121
        503  1F6 000651C0 GetConsoleNlsMode
4122
        504  1F7 000648B0 GetConsoleOriginalTitleA
4123
        505  1F8 000648D0 GetConsoleOriginalTitleW
4124
        506  1F9 00026A50 GetConsoleOutputCP
4125
        507  1FA 00065680 GetConsoleProcessList
4126
        508  1FB 00026B90 GetConsoleScreenBufferInfo
4127
        509  1FC 00026BA0 GetConsoleScreenBufferInfoEx
4128
        510  1FD 00065710 GetConsoleSelectionInfo
4129
        511  1FE 000648F0 GetConsoleTitleA
4130
        512  1FF 00026BB0 GetConsoleTitleW
4131
        513  200 00021110 GetConsoleWindow
4132
        514  201 000561E0 GetCurrencyFormatA
4133
        515  202 00042510 GetCurrencyFormatEx
4134
        516  203 00042520 GetCurrencyFormatW
4135
        517  204 000242D0 GetCurrentActCtx
4136
        518  205 0001B180 GetCurrentActCtxWorker
4137
        519  206          GetCurrentApplicationUserModelId (forwarded to kernelbase.GetCurrentApplicationUserModelId)
4138
        520  207 00065770 GetCurrentConsoleFont
4139
        521  208 00021090 GetCurrentConsoleFontEx
4140
        522  209 00023980 GetCurrentDirectoryA
4141
        523  20A 00021800 GetCurrentDirectoryW
4142
        524  20B          GetCurrentPackageFamilyName (forwarded to kernelbase.GetCurrentPackageFamilyName)
4143
        525  20C          GetCurrentPackageFullName (forwarded to kernelbase.GetCurrentPackageFullName)
4144
        526  20D          GetCurrentPackageId (forwarded to kernelbase.GetCurrentPackageId)
4145
        527  20E          GetCurrentPackageInfo (forwarded to kernelbase.GetCurrentPackageInfo)
4146
        528  20F          GetCurrentPackagePath (forwarded to kernelbase.GetCurrentPackagePath)
4147
        529  210 00018B10 GetCurrentProcess
4148
        530  211 00016D00 GetCurrentProcessId
4149
        531  212          GetCurrentProcessorNumber (forwarded to NTDLL.RtlGetCurrentProcessorNumber)
4150
        532  213          GetCurrentProcessorNumberEx (forwarded to NTDLL.RtlGetCurrentProcessorNumberEx)
4151
        533  214 00017100 GetCurrentThread
4152
        534  215 00016CC0 GetCurrentThreadId
4153
        535  216          GetCurrentThreadStackLimits (forwarded to api-ms-win-core-processthreads-l1-1-0.GetCurrentThreadStackLimits)
4154
        536  217 0004C0A0 GetCurrentUmsThread
4155
        537  218 00024630 GetDateFormatA
4156
        538  219 000244E0 GetDateFormatAWorker
4157
        539  21A 00042530 GetDateFormatEx
4158
        540  21B 000234E0 GetDateFormatW
4159
        541  21C 0000F2D0 GetDateFormatWWorker
4160
        542  21D 00046220 GetDefaultCommConfigA
4161
        543  21E 000462B0 GetDefaultCommConfigW
4162
        544  21F 00040B50 GetDevicePowerState
4163
        545  220 00026470 GetDiskFreeSpaceA
4164
        546  221 00026480 GetDiskFreeSpaceExA
4165
        547  222 00026490 GetDiskFreeSpaceExW
4166
        548  223 000264A0 GetDiskFreeSpaceW
4167
        549  224 0003F690 GetDllDirectoryA
4168
        550  225 00024200 GetDllDirectoryW
4169
        551  226 000264B0 GetDriveTypeA
4170
        552  227 000264C0 GetDriveTypeW
4171
        553  228 00056E40 GetDurationFormat
4172
        554  229 00042540 GetDurationFormatEx
4173
        555  22A 00023B20 GetDynamicTimeZoneInformation
4174
        556  22B 00023C60 GetEnabledXStateFeatures
4175
        557  22C 0003E6A0 GetEncryptedFileVersionExt
4176
        558  22D 00021650 GetEnvironmentStrings
4177
        559  22E 000267F0 GetEnvironmentStringsA
4178
        560  22F 0001FD70 GetEnvironmentStringsW
4179
        561  230 0001F590 GetEnvironmentVariableA
4180
        562  231 0001DD30 GetEnvironmentVariableW
4181
        563  232 00042550 GetEraNameCountedString
4182
        564  233 00023CF0 GetErrorMode
4183
        565  234 0001EC40 GetExitCodeProcess
4184
        566  235 00020CD0 GetExitCodeThread
4185
        567  236 00045410 GetExpandedNameA
4186
        568  237 00045510 GetExpandedNameW
4187
        569  238 000264D0 GetFileAttributesA
4188
        570  239 000264E0 GetFileAttributesExA
4189
        571  23A 000264F0 GetFileAttributesExW
4190
        572  23B 0003D5D0 GetFileAttributesTransactedA
4191
        573  23C 0003D630 GetFileAttributesTransactedW
4192
        574  23D 00026500 GetFileAttributesW
4193
        575  23E 0003CCD0 GetFileBandwidthReservation
4194
        576  23F 00026510 GetFileInformationByHandle
4195
        577  240 00023C00 GetFileInformationByHandleEx
4196
        578  241 00042560 GetFileMUIInfo
4197
        579  242 00022FC0 GetFileMUIPath
4198
        580  243 00026520 GetFileSize
4199
        581  244 00026530 GetFileSizeEx
4200
        582  245 00026540 GetFileTime
4201
        583  246 00026550 GetFileType
4202
        584  247 00026560 GetFinalPathNameByHandleA
4203
        585  248 00026570 GetFinalPathNameByHandleW
4204
        586  249 0003EDB0 GetFirmwareEnvironmentVariableA
4205
        587  24A 0003EDD0 GetFirmwareEnvironmentVariableExA
4206
        588  24B 00024AB0 GetFirmwareEnvironmentVariableExW
4207
        589  24C 00024A90 GetFirmwareEnvironmentVariableW
4208
        590  24D 000392A0 GetFirmwareType
4209
        591  24E 00026580 GetFullPathNameA
4210
        592  24F 0003AB90 GetFullPathNameTransactedA
4211
        593  250 0003AC50 GetFullPathNameTransactedW
4212
        594  251 00026590 GetFullPathNameW
4213
        595  252 00056590 GetGeoInfoA
4214
        596  253 00017120 GetGeoInfoW
4215
        597  254 00026100 GetHandleInformation
4216
        598  255 00042570 GetLargePageMinimum
4217
        599  256 00026BC0 GetLargestConsoleWindowSize
4218
        600  257 00016CF0 GetLastError
4219
        601  258 0001F1D0 GetLocalTime
4220
        602  259 0001EEA0 GetLocaleInfoA
4221
        603  25A 00020CB0 GetLocaleInfoEx
4222
        604  25B 00020BF0 GetLocaleInfoW
4223
        605  25C 00018BA0 GetLogicalDriveStringsA
4224
        606  25D 000265A0 GetLogicalDriveStringsW
4225
        607  25E 00018C60 GetLogicalDrives
4226
        608  25F 00021950 GetLogicalProcessorInformation
4227
        609  260          GetLogicalProcessorInformationEx (forwarded to api-ms-win-core-sysinfo-l1-1-0.GetLogicalProcessorInformationEx)
4228
        610  261 00063770 GetLongPathNameA
4229
        611  262 00048FD0 GetLongPathNameTransactedA
4230
        612  263 00049080 GetLongPathNameTransactedW
4231
        613  264 00017750 GetLongPathNameW
4232
        614  265 0003F4F0 GetMailslotInfo
4233
        615  266 00040DE0 GetMaximumProcessorCount
4234
        616  267 00024A30 GetMaximumProcessorGroupCount
4235
        617  268 00042580 GetMemoryErrorHandlingCapabilities
4236
        618  269 00021610 GetModuleFileNameA
4237
        619  26A 0001F490 GetModuleFileNameW
4238
        620  26B 0001EEC0 GetModuleHandleA
4239
        621  26C 00021960 GetModuleHandleExA
4240
        622  26D 0001FD10 GetModuleHandleExW
4241
        623  26E 0001EBA0 GetModuleHandleW
4242
        624  26F 00024D50 GetNLSVersion
4243
        625  270 00042590 GetNLSVersionEx
4244
        626  271 000425A0 GetNamedPipeAttribute
4245
        627  272 0003FC30 GetNamedPipeClientComputerNameA
4246
        628  273 000425B0 GetNamedPipeClientComputerNameW
4247
        629  274 0003FD60 GetNamedPipeClientProcessId
4248
        630  275 0003FDA0 GetNamedPipeClientSessionId
4249
        631  276 0003FDF0 GetNamedPipeHandleStateA
4250
        632  277 000425C0 GetNamedPipeHandleStateW
4251
        633  278          GetNamedPipeInfo (forwarded to api-ms-win-core-namedpipe-l1-2-1.GetNamedPipeInfo)
4252
        634  279 0003FF50 GetNamedPipeServerProcessId
4253
        635  27A 0003FF90 GetNamedPipeServerSessionId
4254
        636  27B 00023140 GetNativeSystemInfo
4255
        637  27C 0004C0D0 GetNextUmsListItem
4256
        638  27D 00049130 GetNextVDMCommand
4257
        639  27E 000401F0 GetNumaAvailableMemoryNode
4258
        640  27F 000258A0 GetNumaAvailableMemoryNodeEx
4259
        641  280 00023440 GetNumaHighestNodeNumber
4260
        642  281 00040200 GetNumaNodeNumberFromHandle
4261
        643  282 00040250 GetNumaNodeProcessorMask
4262
        644  283 00025B40 GetNumaNodeProcessorMaskEx
4263
        645  284 000251C0 GetNumaProcessorNode
4264
        646  285 00025210 GetNumaProcessorNodeEx
4265
        647  286 000402D0 GetNumaProximityNode
4266
        648  287 00040300 GetNumaProximityNodeEx
4267
        649  288 0001C520 GetNumberFormatA
4268
        650  289 000425D0 GetNumberFormatEx
4269
        651  28A 00001100 GetNumberFormatW
4270
        652  28B 000657E0 GetNumberOfConsoleFonts
4271
        653  28C 00026A60 GetNumberOfConsoleInputEvents
4272
        654  28D 00065830 GetNumberOfConsoleMouseButtons
4273
        655  28E 00025B50 GetOEMCP
4274
        656  28F 0001C3F0 GetOverlappedResult
4275
        657  290          GetOverlappedResultEx (forwarded to api-ms-win-core-io-l1-1-1.GetOverlappedResultEx)
4276
        658  291          GetPackageApplicationIds (forwarded to kernelbase.GetPackageApplicationIds)
4277
        659  292          GetPackageFamilyName (forwarded to kernelbase.GetPackageFamilyName)
4278
        660  293          GetPackageFullName (forwarded to kernelbase.GetPackageFullName)
4279
        661  294          GetPackageId (forwarded to kernelbase.GetPackageId)
4280
        662  295          GetPackageInfo (forwarded to kernelbase.GetPackageInfo)
4281
        663  296          GetPackagePath (forwarded to kernelbase.GetPackagePath)
4282
        664  297          GetPackagePathByFullName (forwarded to kernelbase.GetPackagePathByFullName)
4283
        665  298          GetPackagesByPackageFamily (forwarded to kernelbase.GetPackagesByPackageFamily)
4284
        666  299 00023C10 GetPhysicallyInstalledSystemMemory
4285
        667  29A 000237E0 GetPriorityClass
4286
        668  29B 000167E0 GetPrivateProfileIntA
4287
        669  29C 00016100 GetPrivateProfileIntW
4288
        670  29D 00024DC0 GetPrivateProfileSectionA
4289
        671  29E 0003BE80 GetPrivateProfileSectionNamesA
4290
        672  29F 0003BEB0 GetPrivateProfileSectionNamesW
4291
        673  2A0 00015FA0 GetPrivateProfileSectionW
4292
        674  2A1 000166C0 GetPrivateProfileStringA
4293
        675  2A2 000141D0 GetPrivateProfileStringW
4294
        676  2A3 0003BEE0 GetPrivateProfileStructA
4295
        677  2A4 0003C060 GetPrivateProfileStructW
4296
        678  2A5 0001B2C0 GetProcAddress
4297
        679  2A6 00019C90 GetProcessAffinityMask
4298
        680  2A7 00040E90 GetProcessDEPPolicy
4299
        681  2A8          GetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetProcessDefaultCpuSets)
4300
        682  2A9 000425E0 GetProcessGroupAffinity
4301
        683  2AA 000425F0 GetProcessHandleCount
4302
        684  2AB 00018A20 GetProcessHeap
4303
        685  2AC 00042600 GetProcessHeaps
4304
        686  2AD 0001F1B0 GetProcessId
4305
        687  2AE 00023BF0 GetProcessIdOfThread
4306
        688  2AF 000260A0 GetProcessInformation
4307
        689  2B0 00023460 GetProcessIoCounters
4308
        690  2B1          GetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.GetProcessMitigationPolicy)
4309
        691  2B2 00042610 GetProcessPreferredUILanguages
4310
        692  2B3 00042620 GetProcessPriorityBoost
4311
        693  2B4 00042630 GetProcessShutdownParameters
4312
        694  2B5 000191F0 GetProcessTimes
4313
        695  2B6 00023C50 GetProcessVersion
4314
        696  2B7 0004EA70 GetProcessWorkingSetSize
4315
        697  2B8 00042640 GetProcessWorkingSetSizeEx
4316
        698  2B9          GetProcessorSystemCycleTime (forwarded to api-ms-win-core-sysinfo-l1-2-2.GetProcessorSystemCycleTime)
4317
        699  2BA 00023990 GetProductInfo
4318
        700  2BB 00016850 GetProfileIntA
4319
        701  2BC 00016260 GetProfileIntW
4320
        702  2BD 0003C210 GetProfileSectionA
4321
        703  2BE 00024CF0 GetProfileSectionW
4322
        704  2BF 0003C220 GetProfileStringA
4323
        705  2C0 0003C250 GetProfileStringW
4324
        706  2C1 00018B20 GetQueuedCompletionStatus
4325
        707  2C2 00001110 GetQueuedCompletionStatusEx
4326
        708  2C3 00049A90 GetShortPathNameA
4327
        709  2C4 000172C0 GetShortPathNameW
4328
        710  2C5          GetStagedPackagePathByFullName (forwarded to kernelbase.GetStagedPackagePathByFullName)
4329
        711  2C6 0001EF10 GetStartupInfoA
4330
        712  2C7 0001F570 GetStartupInfoW
4331
        713  2C8          GetStateFolder (forwarded to kernelbase.GetStateFolder)
4332
        714  2C9 0001EC30 GetStdHandle
4333
        715  2CA 00042650 GetStringScripts
4334
        716  2CB 00022B50 GetStringTypeA
4335
        717  2CC 00022B50 GetStringTypeExA
4336
        718  2CD 00024620 GetStringTypeExW
4337
        719  2CE 0001F510 GetStringTypeW
4338
        720  2CF          GetSystemAppDataKey (forwarded to kernelbase.GetSystemAppDataKey)
4339
        721  2D0          GetSystemCpuSetInformation (forwarded to api-ms-win-core-processthreads-l1-1-3.GetSystemCpuSetInformation)
4340
        722  2D1 00040EE0 GetSystemDEPPolicy
4341
        723  2D2 0001F4E0 GetSystemDefaultLCID
4342
        724  2D3 000236B0 GetSystemDefaultLangID
4343
        725  2D4 00042660 GetSystemDefaultLocaleName
4344
        726  2D5 00023630 GetSystemDefaultUILanguage
4345
        727  2D6 00021670 GetSystemDirectoryA
4346
        728  2D7 0001B210 GetSystemDirectoryW
4347
        729  2D8 00042670 GetSystemFileCacheSize
4348
        730  2D9 000239A0 GetSystemFirmwareTable
4349
        731  2DA 0001FD30 GetSystemInfo
4350
        732  2DB 0001C0B0 GetSystemPowerStatus
4351
        733  2DC 00042680 GetSystemPreferredUILanguages
4352
        734  2DD 00040F20 GetSystemRegistryQuota
4353
        735  2DE 0001B1C0 GetSystemTime
4354
        736  2DF 00022D50 GetSystemTimeAdjustment
4355
        737  2E0 00019D10 GetSystemTimeAsFileTime
4356
        738  2E1 000267B0 GetSystemTimePreciseAsFileTime
4357
        739  2E2 00025410 GetSystemTimes
4358
        740  2E3 00042690 GetSystemWindowsDirectoryA
4359
        741  2E4 00013D50 GetSystemWindowsDirectoryW
4360
        742  2E5 00026920 GetSystemWow64DirectoryA
4361
        743  2E6 00026930 GetSystemWow64DirectoryW
4362
        744  2E7 0004D250 GetTapeParameters
4363
        745  2E8 0004D2B0 GetTapePosition
4364
        746  2E9 0004D340 GetTapeStatus
4365
        747  2EA 000265B0 GetTempFileNameA
4366
        748  2EB 000265C0 GetTempFileNameW
4367
        749  2EC 000265D0 GetTempPathA
4368
        750  2ED 000265E0 GetTempPathW
4369
        751  2EE 000218C0 GetThreadContext
4370
        752  2EF 000426A0 GetThreadErrorMode
4371
        753  2F0 000426B0 GetThreadGroupAffinity
4372
        754  2F1 000426C0 GetThreadIOPendingFlag
4373
        755  2F2 00023620 GetThreadId
4374
        756  2F3 000426D0 GetThreadIdealProcessorEx
4375
        757  2F4 000260B0 GetThreadInformation
4376
        758  2F5 0001C410 GetThreadLocale
4377
        759  2F6 0001EE90 GetThreadPreferredUILanguages
4378
        760  2F7 0001B1D0 GetThreadPriority
4379
        761  2F8 000426E0 GetThreadPriorityBoost
4380
        762  2F9          GetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetThreadSelectedCpuSets)
4381
        763  2FA 0003ADF0 GetThreadSelectorEntry
4382
        764  2FB 00019770 GetThreadTimes
4383
        765  2FC 00001430 GetThreadUILanguage
4384
        766  2FD 00016D30 GetTickCount
4385
        767  2FE 00018B30 GetTickCount64
4386
        768  2FF 000252C0 GetTimeFormatA
4387
        769  300 00024E50 GetTimeFormatAWorker
4388
        770  301 000426F0 GetTimeFormatEx
4389
        771  302 00023650 GetTimeFormatW
4390
        772  303 00012F00 GetTimeFormatWWorker
4391
        773  304 0001F500 GetTimeZoneInformation
4392
        774  305 00023CE0 GetTimeZoneInformationForYear
4393
        775  306 00042700 GetUILanguageInfo
4394
        776  307 0004C100 GetUmsCompletionListEvent
4395
        777  308 0004C130 GetUmsSystemThreadInformation
4396
        778  309 0001F270 GetUserDefaultLCID
4397
        779  30A 00024D70 GetUserDefaultLangID
4398
        780  30B 000230E0 GetUserDefaultLocaleName
4399
        781  30C 00023500 GetUserDefaultUILanguage
4400
        782  30D 00022B60 GetUserGeoID
4401
        783  30E 00023670 GetUserPreferredUILanguages
4402
        784  30F 00049CF0 GetVDMCurrentDirectories
4403
        785  310 00022910 GetVersion
4404
        786  311 00021910 GetVersionExA
4405
        787  312 0001B2B0 GetVersionExW
4406
        788  313 000265F0 GetVolumeInformationA
4407
        789  314 00026600 GetVolumeInformationByHandleW
4408
        790  315 00026610 GetVolumeInformationW
4409
        791  316 00025720 GetVolumeNameForVolumeMountPointA
4410
        792  317 00020930 GetVolumeNameForVolumeMountPointW
4411
        793  318 0004B210 GetVolumePathNameA
4412
        794  319 0000DE90 GetVolumePathNameW
4413
        795  31A 0004B3D0 GetVolumePathNamesForVolumeNameA
4414
        796  31B 0001E7A0 GetVolumePathNamesForVolumeNameW
4415
        797  31C 00024D80 GetWindowsDirectoryA
4416
        798  31D 00023450 GetWindowsDirectoryW
4417
        799  31E 0001F1E0 GetWriteWatch
4418
        800  31F 000239B0 GetXStateFeaturesMask
4419
        801  320 00016240 GlobalAddAtomA
4420
        802  321 0003B190 GlobalAddAtomExA
4421
        803  322 00014320 GlobalAddAtomExW
4422
        804  323 00014960 GlobalAddAtomW
4423
        805  324 0001C090 GlobalAlloc
4424
        806  325 0003F2B0 GlobalCompact
4425
        807  326 000147F0 GlobalDeleteAtom
4426
        808  327 0003B1B0 GlobalFindAtomA
4427
        809  328 00014C60 GlobalFindAtomW
4428
        810  329 0003F100 GlobalFix
4429
        811  32A 00022D60 GlobalFlags
4430
        812  32B 00018D90 GlobalFree
4431
        813  32C 0003B1D0 GlobalGetAtomNameA
4432
        814  32D 00014370 GlobalGetAtomNameW
4433
        815  32E 00021820 GlobalHandle
4434
        816  32F 00016EC0 GlobalLock
4435
        817  330 0001F280 GlobalMemoryStatus
4436
        818  331 000229A0 GlobalMemoryStatusEx
4437
        819  332 00018E00 GlobalReAlloc
4438
        820  333 00019630 GlobalSize
4439
        821  334 0003F120 GlobalUnWire
4440
        822  335 0003F130 GlobalUnfix
4441
        823  336 00016E00 GlobalUnlock
4442
        824  337 0003F150 GlobalWire
4443
        825  338 00044860 Heap32First
4444
        826  339 00044AB0 Heap32ListFirst
4445
        827  33A 00044BA0 Heap32ListNext
4446
        828  33B 00044C80 Heap32Next
4447
        829  33C          HeapAlloc (forwarded to NTDLL.RtlAllocateHeap)
4448
        830  33D 00042710 HeapCompact
4449
        831  33E 00021920 HeapCreate
4450
        832  33F 000239C0 HeapDestroy
4451
        833  340 00016CE0 HeapFree
4452
        834  341 00042720 HeapLock
4453
        835  342 00042730 HeapQueryInformation
4454
        836  343          HeapReAlloc (forwarded to NTDLL.RtlReAllocateHeap)
4455
        837  344 000218E0 HeapSetInformation
4456
        838  345          HeapSize (forwarded to NTDLL.RtlSizeHeap)
4457
        839  346 00042740 HeapSummary
4458
        840  347 00042750 HeapUnlock
4459
        841  348 0001DD50 HeapValidate
4460
        842  349 00042760 HeapWalk
4461
        843  34A 00025B60 IdnToAscii
4462
        844  34B 00042770 IdnToNameprepUnicode
4463
        845  34C 00042780 IdnToUnicode
4464
        846  34D 00024C30 InitAtomTable
4465
        847  34E          InitOnceBeginInitialize (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceBeginInitialize)
4466
        848  34F          InitOnceComplete (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceComplete)
4467
        849  350          InitOnceExecuteOnce (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceExecuteOnce)
4468
        850  351          InitOnceInitialize (forwarded to NTDLL.RtlRunOnceInitialize)
4469
        851  352          InitializeConditionVariable (forwarded to NTDLL.RtlInitializeConditionVariable)
4470
        852  353 00023AB0 InitializeContext
4471
        853  354          InitializeCriticalSection (forwarded to NTDLL.RtlInitializeCriticalSection)
4472
        854  355 000261E0 InitializeCriticalSectionAndSpinCount
4473
        855  356 000261F0 InitializeCriticalSectionEx
4474
        856  357          InitializeProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.InitializeProcThreadAttributeList)
4475
        857  358          InitializeSListHead (forwarded to NTDLL.RtlInitializeSListHead)
4476
        858  359          InitializeSRWLock (forwarded to NTDLL.RtlInitializeSRWLock)
4477
        859  35A 00042790 InitializeSynchronizationBarrier
4478
        860  35B          InstallELAMCertificateInfo (forwarded to api-ms-win-core-sysinfo-l1-2-1.InstallELAMCertificateInfo)
4479
        861  35C          InterlockedFlushSList (forwarded to NTDLL.RtlInterlockedFlushSList)
4480
        862  35D          InterlockedPopEntrySList (forwarded to NTDLL.RtlInterlockedPopEntrySList)
4481
        863  35E          InterlockedPushEntrySList (forwarded to NTDLL.RtlInterlockedPushEntrySList)
4482
        864  35F          InterlockedPushListSList (forwarded to NTDLL.RtlInterlockedPushListSList)
4483
        865  360          InterlockedPushListSListEx (forwarded to NTDLL.RtlInterlockedPushListSListEx)
4484
        866  361 00065A40 InvalidateConsoleDIBits
4485
        867  362 00040FA0 IsBadCodePtr
4486
        868  363 00040FB0 IsBadHugeReadPtr
4487
        869  364 00040FC0 IsBadHugeWritePtr
4488
        870  365 00016FC0 IsBadReadPtr
4489
        871  366 00040FD0 IsBadStringPtrA
4490
        872  367 00041020 IsBadStringPtrW
4491
        873  368 00041080 IsBadWritePtr
4492
        874  369 00055750 IsCalendarLeapDay
4493
        875  36A 00055830 IsCalendarLeapMonth
4494
        876  36B 00055910 IsCalendarLeapYear
4495
        877  36C 00023D20 IsDBCSLeadByte
4496
        878  36D 000253F0 IsDBCSLeadByteEx
4497
        879  36E 00022900 IsDebuggerPresent
4498
        880  36F 000427A0 IsNLSDefinedString
4499
        881  370 00039320 IsNativeVhdBoot
4500
        882  371 000427B0 IsNormalizedString
4501
        883  372          IsProcessCritical (forwarded to api-ms-win-core-processthreads-l1-1-2.IsProcessCritical)
4502
        884  373 000427C0 IsProcessInJob
4503
        885  374 0001EC80 IsProcessorFeaturePresent
4504
        886  375 00040BA0 IsSystemResumeAutomatic
4505
        887  376 000427D0 IsThreadAFiber
4506
        888  377          IsThreadpoolTimerSet (forwarded to NTDLL.TpIsTimerSet)
4507
        889  378 00018620 IsValidCalDateTime
4508
        890  379 0001DF00 IsValidCodePage
4509
        891  37A 000427F0 IsValidLanguageGroup
4510
        892  37B 0001F4D0 IsValidLocale
4511
        893  37C 00042800 IsValidLocaleName
4512
        894  37D 00042810 IsValidNLSVersion
4513
        895  37E 0001F150 IsWow64Process
4514
        896  37F 00042820 K32EmptyWorkingSet
4515
        897  380 00042830 K32EnumDeviceDrivers
4516
        898  381 00042840 K32EnumPageFilesA
4517
        899  382 00042850 K32EnumPageFilesW
4518
        900  383 000238A0 K32EnumProcessModules
4519
        901  384 00042860 K32EnumProcessModulesEx
4520
        902  385 00001410 K32EnumProcesses
4521
        903  386 00042870 K32GetDeviceDriverBaseNameA
4522
        904  387 00042880 K32GetDeviceDriverBaseNameW
4523
        905  388 00042890 K32GetDeviceDriverFileNameA
4524
        906  389 000428A0 K32GetDeviceDriverFileNameW
4525
        907  38A 000428B0 K32GetMappedFileNameA
4526
        908  38B 000428C0 K32GetMappedFileNameW
4527
        909  38C 000428D0 K32GetModuleBaseNameA
4528
        910  38D 000428E0 K32GetModuleBaseNameW
4529
        911  38E 000428F0 K32GetModuleFileNameExA
4530
        912  38F 00042900 K32GetModuleFileNameExW
4531
        913  390 00023910 K32GetModuleInformation
4532
        914  391 00042910 K32GetPerformanceInfo
4533
        915  392 00042920 K32GetProcessImageFileNameA
4534
        916  393 0001B200 K32GetProcessImageFileNameW
4535
        917  394 00042930 K32GetProcessMemoryInfo
4536
        918  395 00042950 K32GetWsChanges
4537
        919  396 00042940 K32GetWsChangesEx
4538
        920  397 00042960 K32InitializeProcessForWsWatch
4539
        921  398 00042970 K32QueryWorkingSet
4540
        922  399 000234F0 K32QueryWorkingSetEx
4541
        923  39A 00023880 LCIDToLocaleName
4542
        924  39B 00042980 LCMapStringA
4543
        925  39C 00016C90 LCMapStringEx
4544
        926  39D 00019B80 LCMapStringW
4545
        927  39E 00045620 LZClose
4546
        928  39F 000456D0 LZCloseFile
4547
        929  3A0 0003AA90 LZCopy
4548
        930  3A1 00045780 LZCreateFileW
4549
        931  3A2 000271A0 LZDone
4550
        932  3A3 000458B0 LZInit
4551
        933  3A4 00045A40 LZOpenFileA
4552
        934  3A5 00045B30 LZOpenFileW
4553
        935  3A6 00045BD0 LZRead
4554
        936  3A7 00045E30 LZSeek
4555
        937  3A8 00024D30 LZStart
4556
        938  3A9          LeaveCriticalSection (forwarded to NTDLL.RtlLeaveCriticalSection)
4557
        939  3AA          LeaveCriticalSectionWhenCallbackReturns (forwarded to NTDLL.TpCallbackLeaveCriticalSectionOnCompletion)
4558
        940  3AB 00019790 LoadAppInitDlls
4559
        941  3AC 00022D30 LoadLibraryA
4560
        942  3AD 00020CC0 LoadLibraryExA
4561
        943  3AE 0001C0A0 LoadLibraryExW
4562
        944  3AF 0001F580 LoadLibraryW
4563
        945  3B0 00041110 LoadModule
4564
        946  3B1 000267A0 LoadPackagedLibrary
4565
        947  3B2 0001EC20 LoadResource
4566
        948  3B3 00042990 LoadStringBaseExW
4567
        949  3B4 0003F5D0 LoadStringBaseW
4568
        950  3B5 00019B90 LocalAlloc
4569
        951  3B6 0003F2B0 LocalCompact
4570
        952  3B7 00026620 LocalFileTimeToFileTime
4571
        953  3B8 0003F2D0 LocalFlags
4572
        954  3B9 00019BA0 LocalFree
4573
        955  3BA 0003F410 LocalHandle
4574
        956  3BB 00022F40 LocalLock
4575
        957  3BC 000237F0 LocalReAlloc
4576
        958  3BD 0003F2B0 LocalShrink
4577
        959  3BE 0001D2D0 LocalSize
4578
        960  3BF 00022F30 LocalUnlock
4579
        961  3C0 00022F50 LocaleNameToLCID
4580
        962  3C1 00023BA0 LocateXStateFeature
4581
        963  3C2 00026630 LockFile
4582
        964  3C3 00026640 LockFileEx
4583
        965  3C4 0001EED0 LockResource
4584
        966  3C5 000429B0 MapUserPhysicalPages
4585
        967  3C6 0004EA90 MapUserPhysicalPagesScatter
4586
        968  3C7 0001F140 MapViewOfFile
4587
        969  3C8 0001DEF0 MapViewOfFileEx
4588
        970  3C9 000429C0 MapViewOfFileExNuma
4589
        971  3CA          MapViewOfFileFromApp (forwarded to api-ms-win-core-memory-l1-1-1.MapViewOfFileFromApp)
4590
        972  3CB 00044EE0 Module32First
4591
        973  3CC 0001FBE0 Module32FirstW
4592
        974  3CD 00045000 Module32Next
4593
        975  3CE 0001B2E0 Module32NextW
4594
        976  3CF 0003D6F0 MoveFileA
4595
        977  3D0 0003D720 MoveFileExA
4596
        978  3D1 00023B80 MoveFileExW
4597
        979  3D2 0003D750 MoveFileTransactedA
4598
        980  3D3 00025680 MoveFileTransactedW
4599
        981  3D4 00021620 MoveFileW
4600
        982  3D5 0003D820 MoveFileWithProgressA
4601
        983  3D6 000429D0 MoveFileWithProgressW
4602
        984  3D7 00026790 MulDiv
4603
        985  3D8 00018A30 MultiByteToWideChar
4604
        986  3D9 000429E0 NeedCurrentDirectoryForExePathA
4605
        987  3DA 000429F0 NeedCurrentDirectoryForExePathW
4606
        988  3DB 000269D0 NlsCheckPolicy
4607
        989  3DC 00042A00 NlsEventDataDescCreate
4608
        990  3DD 000269E0 NlsGetCacheUpdateCount
4609
        991  3DE 000269F0 NlsUpdateLocale
4610
        992  3DF 00026A00 NlsUpdateSystemLocale
4611
        993  3E0 00042A10 NlsWriteEtwEvent
4612
        994  3E1 00042A20 NormalizeString
4613
        995  3E2 00042A30 NotifyMountMgr
4614
        996  3E3 00058A20 NotifyUILanguageChange
4615
        997  3E4 000415C0 NtVdm64CreateProcessInternalW
4616
        998  3E5 000238B0 OOBEComplete
4617
        999  3E6          OfferVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.OfferVirtualMemory)
4618
       1000  3E7 00064B80 OpenConsoleW
4619
       1001  3E8 00042A40 OpenConsoleWStub
4620
       1002  3E9 00026200 OpenEventA
4621
       1003  3EA 00026210 OpenEventW
4622
       1004  3EB 0003E790 OpenFile
4623
       1005  3EC 00042A50 OpenFileById
4624
       1006  3ED 000247E0 OpenFileMappingA
4625
       1007  3EE 0001FBD0 OpenFileMappingW
4626
       1008  3EF 0004DAD0 OpenJobObjectA
4627
       1009  3F0 0004DB50 OpenJobObjectW
4628
       1010  3F1 00016B00 OpenMutexA
4629
       1011  3F2 00026220 OpenMutexW
4630
       1012  3F3          OpenPackageInfoByFullName (forwarded to kernelbase.OpenPackageInfoByFullName)
4631
       1013  3F4 00043470 OpenPrivateNamespaceA
4632
       1014  3F5 00024F90 OpenPrivateNamespaceW
4633
       1015  3F6 0001B170 OpenProcess
4634
       1016  3F7          OpenProcessToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenProcessToken)
4635
       1017  3F8 00024D30 OpenProfileUserMapping
4636
       1018  3F9 000434D0 OpenSemaphoreA
4637
       1019  3FA 00026230 OpenSemaphoreW
4638
       1020  3FB          OpenState (forwarded to kernelbase.OpenState)
4639
       1021  3FC          OpenStateExplicit (forwarded to kernelbase.OpenStateExplicit)
4640
       1022  3FD 0001B1F0 OpenThread
4641
       1023  3FE          OpenThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenThreadToken)
4642
       1024  3FF 00043540 OpenWaitableTimerA
4643
       1025  400 00026240 OpenWaitableTimerW
4644
       1026  401 00022990 OutputDebugStringA
4645
       1027  402 0001B420 OutputDebugStringW
4646
       1028  403          PackageFamilyNameFromFullName (forwarded to kernelbase.PackageFamilyNameFromFullName)
4647
       1029  404          PackageFamilyNameFromId (forwarded to kernelbase.PackageFamilyNameFromId)
4648
       1030  405          PackageFullNameFromId (forwarded to kernelbase.PackageFullNameFromId)
4649
       1031  406          PackageIdFromFullName (forwarded to kernelbase.PackageIdFromFullName)
4650
       1032  407          PackageNameAndPublisherIdFromFamilyName (forwarded to kernelbase.PackageNameAndPublisherIdFromFamilyName)
4651
       1033  408          ParseApplicationUserModelId (forwarded to kernelbase.ParseApplicationUserModelId)
4652
       1034  409 00026A70 PeekConsoleInputA
4653
       1035  40A 00026BD0 PeekConsoleInputW
4654
       1036  40B 00025A60 PeekNamedPipe
4655
       1037  40C 0001E170 PostQueuedCompletionStatus
4656
       1038  40D 00021730 PowerClearRequest
4657
       1039  40E 0001F900 PowerCreateRequest
4658
       1040  40F 00016480 PowerSetRequest
4659
       1041  410          PrefetchVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-1.PrefetchVirtualMemory)
4660
       1042  411 0004D370 PrepareTape
4661
       1043  412 00025400 PrivCopyFileExW
4662
       1044  413 0003D910 PrivMoveFileIdentityW
4663
       1045  414 00045120 Process32First
4664
       1046  415 00020990 Process32FirstW
4665
       1047  416 00045210 Process32Next
4666
       1048  417 0001C170 Process32NextW
4667
       1049  418 0001E6C0 ProcessIdToSessionId
4668
       1050  419 00042A60 PssCaptureSnapshot
4669
       1051  41A 00042A70 PssDuplicateSnapshot
4670
       1052  41B 00042A80 PssFreeSnapshot
4671
       1053  41C 00042A90 PssQuerySnapshot
4672
       1054  41D 00042AA0 PssWalkMarkerCreate
4673
       1055  41E 00042AB0 PssWalkMarkerFree
4674
       1056  41F 00042AC0 PssWalkMarkerGetPosition
4675
       1057  420 00042AD0 PssWalkMarkerRewind
4676
       1058  421 00042AE0 PssWalkMarkerSeek
4677
       1059  422 00042AD0 PssWalkMarkerSeekToBeginning
4678
       1060  423 00042AE0 PssWalkMarkerSetPosition
4679
       1061  424 00042AC0 PssWalkMarkerTell
4680
       1062  425 00042AF0 PssWalkSnapshot
4681
       1063  426 0001DCF0 PulseEvent
4682
       1064  427 00026890 PurgeComm
4683
       1065  428 00042B00 QueryActCtxSettingsW
4684
       1066  429 00014AC0 QueryActCtxSettingsWWorker
4685
       1067  42A 0001F400 QueryActCtxW
4686
       1068  42B 00014520 QueryActCtxWWorker
4687
       1069  42C          QueryDepthSList (forwarded to NTDLL.RtlQueryDepthSList)
4688
       1070  42D 0003C6D0 QueryDosDeviceA
4689
       1071  42E 00026650 QueryDosDeviceW
4690
       1072  42F 00023CB0 QueryFullProcessImageNameA
4691
       1073  430 000219A0 QueryFullProcessImageNameW
4692
       1074  431 0001FD90 QueryIdleProcessorCycleTime
4693
       1075  432 00042B10 QueryIdleProcessorCycleTimeEx
4694
       1076  433 00023520 QueryInformationJobObject
4695
       1077  434 0004DC00 QueryIoRateControlInformationJobObject
4696
       1078  435 00042B20 QueryMemoryResourceNotification
4697
       1079  436 00017110 QueryPerformanceCounter
4698
       1080  437 00019550 QueryPerformanceFrequency
4699
       1081  438 00042B30 QueryProcessAffinityUpdateMode
4700
       1082  439 0001FDA0 QueryProcessCycleTime
4701
       1083  43A          QueryProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.QueryProtectedPolicy)
4702
       1084  43B 0001B2A0 QueryThreadCycleTime
4703
       1085  43C 0004EBA0 QueryThreadProfiling
4704
       1086  43D 00042B40 QueryThreadpoolStackInformation
4705
       1087  43E 0004C1A0 QueryUmsThreadInformation
4706
       1088  43F 0001F4C0 QueryUnbiasedInterruptTime
4707
       1089  440 000207B0 QueueUserAPC
4708
       1090  441 00021900 QueueUserWorkItem
4709
       1091  442 0006AE70 QuirkGetData2Worker
4710
       1092  443 0006AF40 QuirkGetDataWorker
4711
       1093  444 0006B000 QuirkIsEnabled2Worker
4712
       1094  445 000194A0 QuirkIsEnabled3Worker
4713
       1095  446 00024350 QuirkIsEnabledForPackage2Worker
4714
       1096  447 000081A0 QuirkIsEnabledForPackage3Worker
4715
       1097  448 000082F0 QuirkIsEnabledForPackage4Worker
4716
       1098  449 00007CF0 QuirkIsEnabledForPackageWorker
4717
       1099  44A 0006B120 QuirkIsEnabledForProcessWorker
4718
       1100  44B 00007830 QuirkIsEnabledWorker
4719
       1101  44C 0001F390 RaiseException
4720
       1102  44D          RaiseFailFastException (forwarded to kernelbase.RaiseFailFastException)
4721
       1103  44E 000417C0 RaiseInvalid16BitExeError
4722
       1104  44F 00042B70 ReOpenFile
4723
       1105  450 00026A80 ReadConsoleA
4724
       1106  451 00026A90 ReadConsoleInputA
4725
       1107  452          ReadConsoleInputExA (forwarded to kernelbase.ReadConsoleInputExA)
4726
       1108  453          ReadConsoleInputExW (forwarded to kernelbase.ReadConsoleInputExW)
4727
       1109  454 00026AA0 ReadConsoleInputW
4728
       1110  455 00026BE0 ReadConsoleOutputA
4729
       1111  456 00026BF0 ReadConsoleOutputAttribute
4730
       1112  457 00026C00 ReadConsoleOutputCharacterA
4731
       1113  458 00026C10 ReadConsoleOutputCharacterW
4732
       1114  459 00026C20 ReadConsoleOutputW
4733
       1115  45A 00026AB0 ReadConsoleW
4734
       1116  45B 000252D0 ReadDirectoryChangesW
4735
       1117  45C 00026660 ReadFile
4736
       1118  45D 00026670 ReadFileEx
4737
       1119  45E 00026680 ReadFileScatter
4738
       1120  45F 0001C500 ReadProcessMemory
4739
       1121  460 0004EBD0 ReadThreadProfilingData
4740
       1122  461          ReclaimVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.ReclaimVirtualMemory)
4741
       1123  462 00023510 RegCloseKey
4742
       1124  463 00042B80 RegCopyTreeW
4743
       1125  464 00042B90 RegCreateKeyExA
4744
       1126  465 000230B0 RegCreateKeyExW
4745
       1127  466 00042BA0 RegDeleteKeyExA
4746
       1128  467 00042BB0 RegDeleteKeyExW
4747
       1129  468 00042BC0 RegDeleteTreeA
4748
       1130  469 00042BD0 RegDeleteTreeW
4749
       1131  46A 00042BE0 RegDeleteValueA
4750
       1132  46B 00024C90 RegDeleteValueW
4751
       1133  46C 00042BF0 RegDisablePredefinedCacheEx
4752
       1134  46D 00042C00 RegEnumKeyExA
4753
       1135  46E 0001F3B0 RegEnumKeyExW
4754
       1136  46F 00042C50 RegEnumValueA
4755
       1137  470 00023050 RegEnumValueW
4756
       1138  471 00042CA0 RegFlushKey
4757
       1139  472 00042CB0 RegGetKeySecurity
4758
       1140  473 00042CC0 RegGetValueA
4759
       1141  474 00023700 RegGetValueW
4760
       1142  475 00042CD0 RegLoadKeyA
4761
       1143  476 00042CE0 RegLoadKeyW
4762
       1144  477 00042CF0 RegLoadMUIStringA
4763
       1145  478 00042D00 RegLoadMUIStringW
4764
       1146  479 00023640 RegNotifyChangeKeyValue
4765
       1147  47A 000243D0 RegOpenCurrentUser
4766
       1148  47B 00042D10 RegOpenKeyExA
4767
       1149  47C 0001F870 RegOpenKeyExW
4768
       1150  47D 00042D20 RegOpenUserClassesRoot
4769
       1151  47E 00042D30 RegQueryInfoKeyA
4770
       1152  47F 0001F410 RegQueryInfoKeyW
4771
       1153  480 00042DB0 RegQueryValueExA
4772
       1154  481 0001F4A0 RegQueryValueExW
4773
       1155  482 00042DC0 RegRestoreKeyA
4774
       1156  483 00042DD0 RegRestoreKeyW
4775
       1157  484 00042DE0 RegSaveKeyExA
4776
       1158  485 00042DF0 RegSaveKeyExW
4777
       1159  486 00042E00 RegSetKeySecurity
4778
       1160  487 00042E10 RegSetValueExA
4779
       1161  488 00023410 RegSetValueExW
4780
       1162  489 00042E20 RegUnLoadKeyA
4781
       1163  48A 00042E30 RegUnLoadKeyW
4782
       1164  48B 00023D80 RegisterApplicationRecoveryCallback
4783
       1165  48C 00016540 RegisterApplicationRestart
4784
       1166  48D 00042E40 RegisterBadMemoryNotification
4785
       1167  48E 00064DE0 RegisterConsoleIME
4786
       1168  48F 00065220 RegisterConsoleOS2
4787
       1169  490 00064CF0 RegisterConsoleVDM
4788
       1170  491 00021810 RegisterWaitForInputIdle
4789
       1171  492 0001DE80 RegisterWaitForSingleObject
4790
       1172  493 00042E50 RegisterWaitForSingleObjectEx
4791
       1173  494 000403B0 RegisterWaitUntilOOBECompleted
4792
       1174  495 0003F160 RegisterWowBaseHandlers
4793
       1175  496 0004A110 RegisterWowExec
4794
       1176  497 00022F20 ReleaseActCtx
4795
       1177  498 0001C940 ReleaseActCtxWorker
4796
       1178  499 00026250 ReleaseMutex
4797
       1179  49A          ReleaseMutexWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseMutexOnCompletion)
4798
       1180  49B          ReleaseSRWLockExclusive (forwarded to NTDLL.RtlReleaseSRWLockExclusive)
4799
       1181  49C          ReleaseSRWLockShared (forwarded to NTDLL.RtlReleaseSRWLockShared)
4800
       1182  49D 00026260 ReleaseSemaphore
4801
       1183  49E          ReleaseSemaphoreWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseSemaphoreOnCompletion)
4802
       1184  49F 00026690 RemoveDirectoryA
4803
       1185  4A0 0003B070 RemoveDirectoryTransactedA
4804
       1186  4A1 0003B0C0 RemoveDirectoryTransactedW
4805
       1187  4A2 000266A0 RemoveDirectoryW
4806
       1188  4A3          RemoveDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.RemoveDllDirectory)
4807
       1189  4A4 0003A570 RemoveLocalAlternateComputerNameA
4808
       1190  4A5 0003A5D0 RemoveLocalAlternateComputerNameW
4809
       1191  4A6 0003F170 RemoveSecureMemoryCacheCallback
4810
       1192  4A7          RemoveVectoredContinueHandler (forwarded to NTDLL.RtlRemoveVectoredContinueHandler)
4811
       1193  4A8          RemoveVectoredExceptionHandler (forwarded to NTDLL.RtlRemoveVectoredExceptionHandler)
4812
       1194  4A9 00042E60 ReplaceFile
4813
       1195  4AA 0003EC90 ReplaceFileA
4814
       1196  4AB 00042E60 ReplaceFileW
4815
       1197  4AC 00041B40 ReplacePartitionUnit
4816
       1198  4AD 00040B30 RequestDeviceWakeup
4817
       1199  4AE 00040B30 RequestWakeupLatency
4818
       1200  4AF 00026270 ResetEvent
4819
       1201  4B0 000212C0 ResetWriteWatch
4820
       1202  4B1          ResolveDelayLoadedAPI (forwarded to NTDLL.LdrResolveDelayLoadedAPI)
4821
       1203  4B2          ResolveDelayLoadsFromDll (forwarded to NTDLL.LdrResolveDelayLoadsFromDll)
4822
       1204  4B3 00023A50 ResolveLocaleName
4823
       1205  4B4          RestoreLastError (forwarded to NTDLL.RtlRestoreLastWin32Error)
4824
       1206  4B5 0001FD20 ResumeThread
4825
       1207  4B6 000213F0 RtlAddFunctionTable
4826
       1208  4B7 00025EE0 RtlCaptureContext
4827
       1209  4B8 0001D890 RtlCaptureStackBackTrace
4828
       1210  4B9 00023870 RtlCompareMemory
4829
       1211  4BA 00042E70 RtlCopyMemory
4830
       1212  4BB 00021410 RtlDeleteFunctionTable
4831
       1213  4BC 00042E90 RtlFillMemory
4832
       1214  4BD 00042EC0 RtlInstallFunctionTableCallback
4833
       1215  4BE 0001F5D0 RtlLookupFunctionEntry
4834
       1216  4BF 00025F10 RtlMoveMemory
4835
       1217  4C0 0001F4F0 RtlPcToFileHeader
4836
       1218  4C1 00042ED0 RtlRaiseException
4837
       1219  4C2 00042EE0 RtlRestoreContext
4838
       1220  4C3 00042EF0 RtlUnwind
4839
       1221  4C4 0001E690 RtlUnwindEx
4840
       1222  4C5 00042F00 RtlVirtualUnwind
4841
       1223  4C6          RtlZeroMemory (forwarded to NTDLL.RtlZeroMemory)
4842
       1224  4C7 00026C30 ScrollConsoleScreenBufferA
4843
       1225  4C8 00026C40 ScrollConsoleScreenBufferW
4844
       1226  4C9 00042F50 SearchPathA
4845
       1227  4CA 00023A30 SearchPathW
4846
       1228  4CB 00023C70 SetCachedSigningLevel
4847
       1229  4CC 00056660 SetCalendarInfoA
4848
       1230  4CD 00042F60 SetCalendarInfoW
4849
       1231  4CE 0004E7E0 SetComPlusPackageInstallStatus
4850
       1232  4CF 000268A0 SetCommBreak
4851
       1233  4D0 000268B0 SetCommConfig
4852
       1234  4D1 000268C0 SetCommMask
4853
       1235  4D2 000268D0 SetCommState
4854
       1236  4D3 000268E0 SetCommTimeouts
4855
       1237  4D4 00042F70 SetComputerNameA
4856
       1238  4D5 00042F80 SetComputerNameEx2W
4857
       1239  4D6 00042F90 SetComputerNameExA
4858
       1240  4D7 00042FA0 SetComputerNameExW
4859
       1241  4D8 00042FB0 SetComputerNameW
4860
       1242  4D9 00026C50 SetConsoleActiveScreenBuffer
4861
       1243  4DA 00026C60 SetConsoleCP
4862
       1244  4DB 00026AC0 SetConsoleCtrlHandler
4863
       1245  4DC 00064D90 SetConsoleCursor
4864
       1246  4DD 00026C70 SetConsoleCursorInfo
4865
       1247  4DE 00065280 SetConsoleCursorMode
4866
       1248  4DF 00026C80 SetConsoleCursorPosition
4867
       1249  4E0 00064DE0 SetConsoleDisplayMode
4868
       1250  4E1 00065890 SetConsoleFont
4869
       1251  4E2 00064E00 SetConsoleHardwareState
4870
       1252  4E3 000658E0 SetConsoleHistoryInfo
4871
       1253  4E4 00065950 SetConsoleIcon
4872
       1254  4E5          SetConsoleInputExeNameA (forwarded to kernelbase.SetConsoleInputExeNameA)
4873
       1255  4E6          SetConsoleInputExeNameW (forwarded to kernelbase.SetConsoleInputExeNameW)
4874
       1256  4E7 00064E60 SetConsoleKeyShortcuts
4875
       1257  4E8 000652E0 SetConsoleLocalEUDC
4876
       1258  4E9 00024D30 SetConsoleMaximumWindowSize
4877
       1259  4EA 00064EF0 SetConsoleMenuClose
4878
       1260  4EB 00026AD0 SetConsoleMode
4879
       1261  4EC 00065390 SetConsoleNlsMode
4880
       1262  4ED 000649B0 SetConsoleNumberOfCommandsA
4881
       1263  4EE 00064A60 SetConsoleNumberOfCommandsW
4882
       1264  4EF 000653E0 SetConsoleOS2OemFormat
4883
       1265  4F0 00026C90 SetConsoleOutputCP
4884
       1266  4F1 00064F50 SetConsolePalette
4885
       1267  4F2 00026CA0 SetConsoleScreenBufferInfoEx
4886
       1268  4F3 00026CB0 SetConsoleScreenBufferSize
4887
       1269  4F4 00026CC0 SetConsoleTextAttribute
4888
       1270  4F5 00064A70 SetConsoleTitleA
4889
       1271  4F6 00026CD0 SetConsoleTitleW
4890
       1272  4F7 00026CE0 SetConsoleWindowInfo
4891
       1273  4F8          SetCriticalSectionSpinCount (forwarded to NTDLL.RtlSetCriticalSectionSpinCount)
4892
       1274  4F9 000659A0 SetCurrentConsoleFontEx
4893
       1275  4FA 00042FC0 SetCurrentDirectoryA
4894
       1276  4FB 00023BB0 SetCurrentDirectoryW
4895
       1277  4FC 00046900 SetDefaultCommConfigA
4896
       1278  4FD 00046990 SetDefaultCommConfigW
4897
       1279  4FE          SetDefaultDllDirectories (forwarded to api-ms-win-core-libraryloader-l1-1-0.SetDefaultDllDirectories)
4898
       1280  4FF 0003F810 SetDllDirectoryA
4899
       1281  500 00022E90 SetDllDirectoryW
4900
       1282  501 00042FD0 SetDynamicTimeZoneInformation
4901
       1283  502 000266B0 SetEndOfFile
4902
       1284  503 0004E9A0 SetEnvironmentStringsA
4903
       1285  504 00042FE0 SetEnvironmentStringsW
4904
       1286  505 0001F250 SetEnvironmentVariableA
4905
       1287  506 00022FF0 SetEnvironmentVariableW
4906
       1288  507 0001DD40 SetErrorMode
4907
       1289  508 00026280 SetEvent
4908
       1290  509          SetEventWhenCallbackReturns (forwarded to NTDLL.TpCallbackSetEventOnCompletion)
4909
       1291  50A 00042FF0 SetFileApisToANSI
4910
       1292  50B 00043000 SetFileApisToOEM
4911
       1293  50C 000266C0 SetFileAttributesA
4912
       1294  50D 0003DD60 SetFileAttributesTransactedA
4913
       1295  50E 0003DDB0 SetFileAttributesTransactedW
4914
       1296  50F 000266D0 SetFileAttributesW
4915
       1297  510 0003CD80 SetFileBandwidthReservation
4916
       1298  511 00020C50 SetFileCompletionNotificationModes
4917
       1299  512 000266E0 SetFileInformationByHandle
4918
       1300  513 00043010 SetFileIoOverlappedRange
4919
       1301  514 000266F0 SetFilePointer
4920
       1302  515 00026700 SetFilePointerEx
4921
       1303  516 0003CEA0 SetFileShortNameA
4922
       1304  517 0003CEE0 SetFileShortNameW
4923
       1305  518 00026710 SetFileTime
4924
       1306  519 00026720 SetFileValidData
4925
       1307  51A 0003EED0 SetFirmwareEnvironmentVariableA
4926
       1308  51B 0003EEF0 SetFirmwareEnvironmentVariableExA
4927
       1309  51C 0003EFE0 SetFirmwareEnvironmentVariableExW
4928
       1310  51D 0003F0A0 SetFirmwareEnvironmentVariableW
4929
       1311  51E 00023660 SetHandleCount
4930
       1312  51F 00026110 SetHandleInformation
4931
       1313  520 00021530 SetInformationJobObject
4932
       1314  521 0004DEB0 SetIoRateControlInformationJobObject
4933
       1315  522          SetLastConsoleEventActive (forwarded to kernelbase.SetLastConsoleEventActive)
4934
       1316  523 00016DF0 SetLastError
4935
       1317  524 0003A710 SetLocalPrimaryComputerNameA
4936
       1318  525 0003A770 SetLocalPrimaryComputerNameW
4937
       1319  526 00043020 SetLocalTime
4938
       1320  527 00056740 SetLocaleInfoA
4939
       1321  528 00043030 SetLocaleInfoW
4940
       1322  529 00022920 SetMailslotInfo
4941
       1323  52A 00040B30 SetMessageWaitingIndicator
4942
       1324  52B 0003FFD0 SetNamedPipeAttribute
4943
       1325  52C 000243E0 SetNamedPipeHandleState
4944
       1326  52D 00023000 SetPriorityClass
4945
       1327  52E 00041950 SetProcessAffinityMask
4946
       1328  52F 00025AA0 SetProcessAffinityUpdateMode
4947
       1329  530 00024380 SetProcessDEPPolicy
4948
       1330  531          SetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetProcessDefaultCpuSets)
4949
       1331  532 000260C0 SetProcessInformation
4950
       1332  533          SetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.SetProcessMitigationPolicy)
4951
       1333  534 00043040 SetProcessPreferredUILanguages
4952
       1334  535 00023CA0 SetProcessPriorityBoost
4953
       1335  536 000236F0 SetProcessShutdownParameters
4954
       1336  537 00023BE0 SetProcessWorkingSetSize
4955
       1337  538 00043050 SetProcessWorkingSetSizeEx
4956
       1338  539          SetProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.SetProtectedPolicy)
4957
       1339  53A 0003F8C0 SetSearchPathMode
4958
       1340  53B 00021970 SetStdHandle
4959
       1341  53C 00043060 SetStdHandleEx
4960
       1342  53D 00043070 SetSystemFileCacheSize
4961
       1343  53E 00040BC0 SetSystemPowerState
4962
       1344  53F 00043080 SetSystemTime
4963
       1345  540 0003AD10 SetSystemTimeAdjustment
4964
       1346  541 0004D3B0 SetTapeParameters
4965
       1347  542 0004D400 SetTapePosition
4966
       1348  543 00043790 SetTermsrvAppInstallMode
4967
       1349  544 00016D50 SetThreadAffinityMask
4968
       1350  545 00023CC0 SetThreadContext
4969
       1351  546 0001D880 SetThreadErrorMode
4970
       1352  547 00024270 SetThreadExecutionState
4971
       1353  548 00043090 SetThreadGroupAffinity
4972
       1354  549 0001B290 SetThreadIdealProcessor
4973
       1355  54A 000430A0 SetThreadIdealProcessorEx
4974
       1356  54B 000260D0 SetThreadInformation
4975
       1357  54C 0001C430 SetThreadLocale
4976
       1358  54D 0001F530 SetThreadPreferredUILanguages
4977
       1359  54E 0001F1C0 SetThreadPriority
4978
       1360  54F 00024D40 SetThreadPriorityBoost
4979
       1361  550          SetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetThreadSelectedCpuSets)
4980
       1362  551 000217B0 SetThreadStackGuarantee
4981
       1363  552          SetThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.SetThreadToken)
4982
       1364  553 0001DD00 SetThreadUILanguage
4983
       1365  554 000430B0 SetThreadpoolStackInformation
4984
       1366  555          SetThreadpoolThreadMaximum (forwarded to NTDLL.TpSetPoolMaxThreads)
4985
       1367  556 00024B70 SetThreadpoolThreadMinimum
4986
       1368  557          SetThreadpoolTimer (forwarded to NTDLL.TpSetTimer)
4987
       1369  558          SetThreadpoolTimerEx (forwarded to NTDLL.TpSetTimerEx)
4988
       1370  559          SetThreadpoolWait (forwarded to NTDLL.TpSetWait)
4989
       1371  55A          SetThreadpoolWaitEx (forwarded to NTDLL.TpSetWaitEx)
4990
       1372  55B 000430E0 SetTimeZoneInformation
4991
       1373  55C 0004EAF0 SetTimerQueueTimer
4992
       1374  55D 0004C1E0 SetUmsThreadInformation
4993
       1375  55E 00021720 SetUnhandledExceptionFilter
4994
       1376  55F 0005F100 SetUserGeoID
4995
       1377  560 0004A170 SetVDMCurrentDirectories
4996
       1378  561 00040700 SetVolumeLabelA
4997
       1379  562 000407A0 SetVolumeLabelW
4998
       1380  563 0004B780 SetVolumeMountPointA
4999
       1381  564 0004B7F0 SetVolumeMountPointW
5000
       1382  565 000430F0 SetVolumeMountPointWStub
5001
       1383  566 00026290 SetWaitableTimer
5002
       1384  567          SetWaitableTimerEx (forwarded to api-ms-win-core-synch-l1-1-0.SetWaitableTimerEx)
5003
       1385  568 00023C80 SetXStateFeaturesMask
5004
       1386  569 000268F0 SetupComm
5005
       1387  56A 00064FB0 ShowConsoleCursor
5006
       1388  56B 00043100 SignalObjectAndWait
5007
       1389  56C 0001EEE0 SizeofResource
5008
       1390  56D 00019780 Sleep
5009
       1391  56E          SleepConditionVariableCS (forwarded to api-ms-win-core-synch-l1-1-0.SleepConditionVariableCS)
5010
       1392  56F          SleepConditionVariableSRW (forwarded to api-ms-win-core-synch-l1-1-0.SleepConditionVariableSRW)
5011
       1393  570 000262A0 SleepEx
5012
       1394  571 00023680 SortCloseHandle
5013
       1395  572 0000F700 SortGetHandle
5014
       1396  573          StartThreadpoolIo (forwarded to NTDLL.TpStartAsyncIoOperation)
5015
       1397  574          SubmitThreadpoolWork (forwarded to NTDLL.TpPostWork)
5016
       1398  575 00021710 SuspendThread
5017
       1399  576 000269C0 SwitchToFiber
5018
       1400  577 0001B1E0 SwitchToThread
5019
       1401  578 0001F520 SystemTimeToFileTime
5020
       1402  579 000230C0 SystemTimeToTzSpecificLocalTime
5021
       1403  57A          SystemTimeToTzSpecificLocalTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.SystemTimeToTzSpecificLocalTimeEx)
5022
       1404  57B 00023750 TerminateJobObject
5023
       1405  57C 00023710 TerminateProcess
5024
       1406  57D 000228F0 TerminateThread
5025
       1407  57E 00015160 TermsrvAppInstallMode
5026
       1408  57F 00012D50 TermsrvConvertSysRootToUserDir
5027
       1409  580 0001EBB0 TermsrvCreateRegEntry
5028
       1410  581 0001F540 TermsrvDeleteKey
5029
       1411  582 0001F880 TermsrvDeleteValue
5030
       1412  583 0001C2B0 TermsrvGetPreSetValue
5031
       1413  584 00024CB0 TermsrvGetWindowsDirectoryA
5032
       1414  585 00012D10 TermsrvGetWindowsDirectoryW
5033
       1415  586 00018A60 TermsrvOpenRegEntry
5034
       1416  587 0001E1A0 TermsrvOpenUserClasses
5035
       1417  588 00044730 TermsrvRestoreKey
5036
       1418  589 0001C440 TermsrvSetKeySecurity
5037
       1419  58A 0001C310 TermsrvSetValueKey
5038
       1420  58B 00014020 TermsrvSyncUserIniFileExt
5039
       1421  58C 00020B20 Thread32First
5040
       1422  58D 00018CB0 Thread32Next
5041
       1423  58E 0001E6B0 TlsAlloc
5042
       1424  58F 0001EEF0 TlsFree
5043
       1425  590 00016CB0 TlsGetValue
5044
       1426  591 00018A50 TlsSetValue
5045
       1427  592 00045300 Toolhelp32ReadProcessMemory
5046
       1428  593 00043110 TransactNamedPipe
5047
       1429  594 00026900 TransmitCommChar
5048
       1430  595          TryAcquireSRWLockExclusive (forwarded to NTDLL.RtlTryAcquireSRWLockExclusive)
5049
       1431  596          TryAcquireSRWLockShared (forwarded to NTDLL.RtlTryAcquireSRWLockShared)
5050
       1432  597          TryEnterCriticalSection (forwarded to NTDLL.RtlTryEnterCriticalSection)
5051
       1433  598 000234A0 TrySubmitThreadpoolCallback
5052
       1434  599 00024DA0 TzSpecificLocalTimeToSystemTime
5053
       1435  59A          TzSpecificLocalTimeToSystemTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.TzSpecificLocalTimeToSystemTimeEx)
5054
       1436  59B 0003F8F0 UTRegister
5055
       1437  59C 000271A0 UTUnRegister
5056
       1438  59D 0004C210 UmsThreadYield
5057
       1439  59E 00043120 UnhandledExceptionFilter
5058
       1440  59F 00026730 UnlockFile
5059
       1441  5A0 00026740 UnlockFileEx
5060
       1442  5A1 0001F4B0 UnmapViewOfFile
5061
       1443  5A2          UnmapViewOfFileEx (forwarded to api-ms-win-core-memory-l1-1-1.UnmapViewOfFileEx)
5062
       1444  5A3 00023D60 UnregisterApplicationRecoveryCallback
5063
       1445  5A4 000059A0 UnregisterApplicationRestart
5064
       1446  5A5 00043130 UnregisterBadMemoryNotification
5065
       1447  5A6 00064DE0 UnregisterConsoleIME
5066
       1448  5A7 00016500 UnregisterWait
5067
       1449  5A8 00023970 UnregisterWaitEx
5068
       1450  5A9 000404E0 UnregisterWaitUntilOOBECompleted
5069
       1451  5AA 00018680 UpdateCalendarDayOfWeek
5070
       1452  5AB          UpdateProcThreadAttribute (forwarded to api-ms-win-core-processthreads-l1-1-0.UpdateProcThreadAttribute)
5071
       1453  5AC 00054A20 UpdateResourceA
5072
       1454  5AD 00054BA0 UpdateResourceW
5073
       1455  5AE 00065A90 VDMConsoleOperation
5074
       1456  5AF 0004A420 VDMOperationStarted
5075
       1457  5B0 00023C90 VerLanguageNameA
5076
       1458  5B1 00023BC0 VerLanguageNameW
5077
       1459  5B2          VerSetConditionMask (forwarded to NTDLL.VerSetConditionMask)
5078
       1460  5B3 00023920 VerifyConsoleIoHandle
5079
       1461  5B4 00043140 VerifyScripts
5080
       1462  5B5 00019BB0 VerifyVersionInfoA
5081
       1463  5B6 00019C50 VerifyVersionInfoW
5082
       1464  5B7 0001C370 VirtualAlloc
5083
       1465  5B8 00023D00 VirtualAllocEx
5084
       1466  5B9 00024DB0 VirtualAllocExNuma
5085
       1467  5BA 0001C490 VirtualFree
5086
       1468  5BB 00023D10 VirtualFreeEx
5087
       1469  5BC 00043150 VirtualLock
5088
       1470  5BD 0001DEE0 VirtualProtect
5089
       1471  5BE 00043160 VirtualProtectEx
5090
       1472  5BF 0001E6A0 VirtualQuery
5091
       1473  5C0 00022FB0 VirtualQueryEx
5092
       1474  5C1 0001F3A0 VirtualUnlock
5093
       1475  5C2 00022330 WTSGetActiveConsoleSessionId
5094
       1476  5C3 00026910 WaitCommEvent
5095
       1477  5C4 00043170 WaitForDebugEvent
5096
       1478  5C5          WaitForDebugEventEx (forwarded to api-ms-win-core-debug-l1-1-2.WaitForDebugEventEx)
5097
       1479  5C6 000262B0 WaitForMultipleObjects
5098
       1480  5C7 000262C0 WaitForMultipleObjectsEx
5099
       1481  5C8 000262D0 WaitForSingleObject
5100
       1482  5C9 000262E0 WaitForSingleObjectEx
5101
       1483  5CA          WaitForThreadpoolIoCallbacks (forwarded to NTDLL.TpWaitForIoCompletion)
5102
       1484  5CB          WaitForThreadpoolTimerCallbacks (forwarded to NTDLL.TpWaitForTimer)
5103
       1485  5CC          WaitForThreadpoolWaitCallbacks (forwarded to NTDLL.TpWaitForWait)
5104
       1486  5CD          WaitForThreadpoolWorkCallbacks (forwarded to NTDLL.TpWaitForWork)
5105
       1487  5CE 000401A0 WaitNamedPipeA
5106
       1488  5CF 00043180 WaitNamedPipeW
5107
       1489  5D0          WakeAllConditionVariable (forwarded to NTDLL.RtlWakeAllConditionVariable)
5108
       1490  5D1          WakeConditionVariable (forwarded to NTDLL.RtlWakeConditionVariable)
5109
       1491  5D2 000203F0 WerGetFlags
5110
       1492  5D3 000203F0 WerGetFlagsWorker
5111
       1493  5D4 00022F90 WerRegisterFile
5112
       1494  5D5 00008720 WerRegisterFileWorker
5113
       1495  5D6 000218D0 WerRegisterMemoryBlock
5114
       1496  5D7 0000AFC0 WerRegisterMemoryBlockWorker
5115
       1497  5D8 00023430 WerRegisterRuntimeExceptionModule
5116
       1498  5D9 00007DF0 WerRegisterRuntimeExceptionModuleWorker
5117
       1499  5DA 00007820 WerSetFlags
5118
       1500  5DB 00007820 WerSetFlagsWorker
5119
       1501  5DC 00022F80 WerUnregisterFile
5120
       1502  5DD 00008710 WerUnregisterFileWorker
5121
       1503  5DE 000218F0 WerUnregisterMemoryBlock
5122
       1504  5DF 0000AB20 WerUnregisterMemoryBlockWorker
5123
       1505  5E0 00043190 WerUnregisterRuntimeExceptionModule
5124
       1506  5E1 0004E850 WerUnregisterRuntimeExceptionModuleWorker
5125
       1507  5E2 0004E8C0 WerpCleanupMessageMapping
5126
       1508  5E3 00067620 WerpGetDebugger
5127
       1509  5E4 0004E860 WerpInitiateRemoteRecovery
5128
       1510  5E5 00067C00 WerpLaunchAeDebug
5129
       1511  5E6 000431A0 WerpNotifyLoadStringResource
5130
       1512  5E7 0004E910 WerpNotifyLoadStringResourceEx
5131
       1513  5E8 0004E920 WerpNotifyLoadStringResourceWorker
5132
       1514  5E9 000431B0 WerpNotifyUseStringResource
5133
       1515  5EA 00025AB0 WerpNotifyUseStringResourceWorker
5134
       1516  5EB 0004E930 WerpStringLookup
5135
       1517  5EC 00016D20 WideCharToMultiByte
5136
       1518  5ED 00041990 WinExec
5137
       1519  5EE 000431C0 Wow64DisableWow64FsRedirection
5138
       1520  5EF 00023D30 Wow64EnableWow64FsRedirection
5139
       1521  5F0 00044790 Wow64GetThreadContext
5140
       1522  5F1 0003AE10 Wow64GetThreadSelectorEntry
5141
       1523  5F2 000431D0 Wow64RevertWow64FsRedirection
5142
       1524  5F3 000447C0 Wow64SetThreadContext
5143
       1525  5F4 000447F0 Wow64SuspendThread
5144
       1526  5F5 00026AE0 WriteConsoleA
5145
       1527  5F6 00026CF0 WriteConsoleInputA
5146
       1528  5F7 00064FF0 WriteConsoleInputVDMA
5147
       1529  5F8 00065070 WriteConsoleInputVDMW
5148
       1530  5F9 00026D00 WriteConsoleInputW
5149
       1531  5FA 00026D10 WriteConsoleOutputA
5150
       1532  5FB 00026D20 WriteConsoleOutputAttribute
5151
       1533  5FC 00026D30 WriteConsoleOutputCharacterA
5152
       1534  5FD 00026D40 WriteConsoleOutputCharacterW
5153
       1535  5FE 00026D50 WriteConsoleOutputW
5154
       1536  5FF 00026AF0 WriteConsoleW
5155
       1537  600 00026750 WriteFile
5156
       1538  601 00026760 WriteFileEx
5157
       1539  602 00026770 WriteFileGather
5158
       1540  603 0003C280 WritePrivateProfileSectionA
5159
       1541  604 00025420 WritePrivateProfileSectionW
5160
       1542  605 0003C2E0 WritePrivateProfileStringA
5161
       1543  606 00015100 WritePrivateProfileStringW
5162
       1544  607 0003C350 WritePrivateProfileStructA
5163
       1545  608 0003C4A0 WritePrivateProfileStructW
5164
       1546  609 0001EF00 WriteProcessMemory
5165
       1547  60A 0003C600 WriteProfileSectionA
5166
       1548  60B 0003C610 WriteProfileSectionW
5167
       1549  60C 0003C620 WriteProfileStringA
5168
       1550  60D 0003C630 WriteProfileStringW
5169
       1551  60E 0004D470 WriteTapemark
5170
       1552  60F 000431E0 ZombifyActCtx
5171
       1553  610 0004E6C0 ZombifyActCtxWorker
5172
       1554  611          __C_specific_handler (forwarded to NTDLL.__C_specific_handler)
5173
       1555  612          __chkstk (forwarded to NTDLL.__chkstk)
5174
       1556  613          __misaligned_access (forwarded to NTDLL.__misaligned_access)
5175
       1557  614 00018DD0 _hread
5176
       1558  615 0003F260 _hwrite
5177
       1559  616 0001D3F0 _lclose
5178
       1560  617 0003F190 _lcreat
5179
       1561  618 00018B70 _llseek
5180
       1562  619          _local_unwind (forwarded to NTDLL._local_unwind)
5181
       1563  61A 0003F1F0 _lopen
5182
       1564  61B 00018DD0 _lread
5183
       1565  61C 0003F260 _lwrite
5184
       1566  61D 000217D0 lstrcat
5185
       1567  61E 000217D0 lstrcatA
5186
       1568  61F 00024400 lstrcatW
5187
       1569  620 0001E730 lstrcmp
5188
       1570  621 0001E730 lstrcmpA
5189
       1571  622 0001C510 lstrcmpW
5190
       1572  623 0001C390 lstrcmpi
5191
       1573  624 0001C390 lstrcmpiA
5192
       1574  625 00018B60 lstrcmpiW
5193
       1575  626 0001F5A0 lstrcpy
5194
       1576  627 0001F5A0 lstrcpyA
5195
       1577  628 00021420 lstrcpyW
5196
       1578  629 000431F0 lstrcpyn
5197
       1579  62A 000431F0 lstrcpynA
5198
       1580  62B 00023A70 lstrcpynW
5199
       1581  62C 0001C400 lstrlen
5200
       1582  62D 0001C400 lstrlenA
5201
       1583  62E 00018A40 lstrlenW
5202
       1584  62F 000212D0 timeBeginPeriod
5203
       1585  630 0001F5F0 timeEndPeriod
5204
       1586  631 000242E0 timeGetDevCaps
5205
       1587  632 00044820 timeGetSystemTime
5206
       1588  633 0001E0C0 timeGetTime
5207
       1589  634 0001C510 uaw_lstrcmpW
5208
       1590  635 00018B60 uaw_lstrcmpiW
5209
       1591  636 00036BA0 uaw_lstrlenW
5210
       1592  637 00036BF0 uaw_wcschr
5211
       1593  638 00036C10 uaw_wcscpy
5212
       1594  639 00036C40 uaw_wcsicmp
5213
       1595  63A 00036C50 uaw_wcslen
5214
       1596  63B 00036C70 uaw_wcsrchr
5215

5216
  Summary
5217

5218
        1000 .data
5219
        1000 .didat
5220
        6000 .pdata
5221
       2F000 .rdata
5222
        1000 .reloc
5223
        1000 .rsrc
5224
       73000 .text
5225
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
5226
Copyright (C) Microsoft Corporation.  All rights reserved.
5227

5228

5229
Dump of file ntdll.dll
5230

5231
File Type: DLL
5232

5233
  Section contains the following exports for ntdll.dll
5234

5235
    00000000 characteristics
5236
    64781AF1 time date stamp Wed May 31 21:13:37 2023
5237
        0.00 version
5238
           8 ordinal base
5239
        2224 number of functions
5240
        2223 number of names
5241

5242
    ordinal hint RVA      name
5243

5244
          9    0 0004F0D0 A_SHAFinal
5245
         10    1 0004F210 A_SHAInit
5246
         11    2 0004F250 A_SHAUpdate
5247
         12    3 00079380 AlpcAdjustCompletionListConcurrencyCount
5248
         13    4 00062D50 AlpcFreeCompletionListMessage
5249
         14    5 000CAC90 AlpcGetCompletionListLastMessageInformation
5250
         15    6 000CACB0 AlpcGetCompletionListMessageAttributes
5251
         16    7 0006AB50 AlpcGetHeaderSize
5252
         17    8 0006AB10 AlpcGetMessageAttribute
5253
         18    9 00034CB0 AlpcGetMessageFromCompletionList
5254
         19    A 00079020 AlpcGetOutstandingCompletionListMessageCount
5255
         20    B 0006AAB0 AlpcInitializeMessageAttribute
5256
         21    C 000779C0 AlpcMaxAllowedMessageLength
5257
         22    D 00078630 AlpcRegisterCompletionList
5258
         23    E 00064CF0 AlpcRegisterCompletionListWorkerThread
5259
         24    F 00078FE0 AlpcRundownCompletionList
5260
         25   10 00079000 AlpcUnregisterCompletionList
5261
         26   11 00064C80 AlpcUnregisterCompletionListWorkerThread
5262
         27   12 00021030 ApiSetQueryApiSetPresence
5263
         28   13 00008010 CsrAllocateCaptureBuffer
5264
         29   14 00007FD0 CsrAllocateMessagePointer
5265
         30   15 00007D90 CsrCaptureMessageBuffer
5266
         31   16 00007DF0 CsrCaptureMessageMultiUnicodeStringsInPlace
5267
         32   17 00007F10 CsrCaptureMessageString
5268
         33   18 000BADB0 CsrCaptureTimeout
5269
         34   19 00007C10 CsrClientCallServer
5270
         35   1A 00004320 CsrClientConnectToServer
5271
         36   1B 00007BE0 CsrFreeCaptureBuffer
5272
         37   1C 000BADD0 CsrGetProcessId
5273
         38   1D 000759D0 CsrIdentifyAlertableThread
5274
         39   1E 000C0F00 CsrSetPriorityClass
5275
         40   1F 000BADF0 CsrVerifyRegion
5276
         41   20 00094F40 DbgBreakPoint
5277
         42   21 00010000 DbgPrint
5278
         43   22 0000F9B0 DbgPrintEx
5279
         44   23 000CACF0 DbgPrintReturnControlC
5280
         45   24 000CAD40 DbgPrompt
5281
         46   25 000CAD80 DbgQueryDebugFilterState
5282
         47   26 000CAD90 DbgSetDebugFilterState
5283
         48   27 000BBF00 DbgUiConnectToDbg
5284
         49   28 000BBF70 DbgUiContinue
5285
         50   29 000BBFA0 DbgUiConvertStateChangeStructure
5286
         51   2A 000BBFB0 DbgUiConvertStateChangeStructureEx
5287
         52   2B 000BC250 DbgUiDebugActiveProcess
5288
         53   2C 000BC2B0 DbgUiGetThreadDebugObject
5289
         54   2D 000BC2D0 DbgUiIssueRemoteBreakin
5290
         55   2E 000BC340 DbgUiRemoteBreakin
5291
         56   2F 000BC3B0 DbgUiSetThreadDebugObject
5292
         57   30 000BC3D0 DbgUiStopDebugging
5293
         58   31 000BC3F0 DbgUiWaitStateChange
5294
         59   32 00094F50 DbgUserBreakPoint
5295
         60   33 000F3B40 EtwCreateTraceInstanceId
5296
         61   34 0000C140 EtwDeliverDataBlock
5297
         62   35 000F3BA0 EtwEnumerateProcessRegGuids
5298
         63   36 000639F0 EtwEventActivityIdControl
5299
         64   37 0000CD00 EtwEventEnabled
5300
         65   38 00075700 EtwEventProviderEnabled
5301
         66   39 000390B0 EtwEventRegister
5302
         67   3A 0000E180 EtwEventSetInformation
5303
         68   3B 0000E360 EtwEventUnregister
5304
         69   3C 0000F6B0 EtwEventWrite
5305
         70   3D 0000CDE0 EtwEventWriteEndScenario
5306
         71   3E 0000F660 EtwEventWriteEx
5307
         72   3F 0000F610 EtwEventWriteFull
5308
         73   40 00077810 EtwEventWriteNoRegistration
5309
         74   41 00081390 EtwEventWriteStartScenario
5310
         75   42 000F3CC0 EtwEventWriteString
5311
         76   43 0000F6F0 EtwEventWriteTransfer
5312
         77   44 00075790 EtwGetTraceEnableFlags
5313
         78   45 000757D0 EtwGetTraceEnableLevel
5314
         79   46 00074C20 EtwGetTraceLoggerHandle
5315
         80   47 0007EB10 EtwLogTraceEvent
5316
         81   48 00038930 EtwNotificationRegister
5317
         82   49 0000E370 EtwNotificationUnregister
5318
         83   4A 0000A160 EtwProcessPrivateLoggerRequest
5319
         84   4B 00081720 EtwRegisterSecurityProvider
5320
         85   4C 00069BE0 EtwRegisterTraceGuidsA
5321
         86   4D 00069C20 EtwRegisterTraceGuidsW
5322
         87   4E 00002A90 EtwReplyNotification
5323
         88   4F 0000EA20 EtwSendNotification
5324
         89   50 000F3EF0 EtwSetMark
5325
         90   51 000F3F20 EtwTraceEventInstance
5326
         91   52 0000E4E0 EtwTraceMessage
5327
         92   53 0000E510 EtwTraceMessageVa
5328
         93   54 0000E310 EtwUnregisterTraceGuids
5329
         94   55 0006DE30 EtwWriteUMSecurityEvent
5330
         95   56 00076080 EtwpCreateEtwThread
5331
         96   57 0000CAA0 EtwpGetCpuSpeed
5332
         97   58 000F4EB0 EvtIntReportAuthzEventAndSourceAsync
5333
         98   59 0000E5E0 EvtIntReportEventAndSourceAsync
5334
         99   5A 00094FF0 ExpInterlockedPopEntrySListEnd
5335
        100   5B 00094FE7 ExpInterlockedPopEntrySListFault
5336
        101   5C 00094FD7 ExpInterlockedPopEntrySListResume
5337
        102   5D 00095310 KiRaiseUserExceptionDispatcher
5338
        103   5E 00095150 KiUserApcDispatcher
5339
        104   5F 00095250 KiUserCallbackDispatcher
5340
        105   60 000952A0 KiUserExceptionDispatcher
5341
        106   61 00157320 KiUserInvertedFunctionTable
5342
        107   62 00073690 LdrAccessResource
5343
        108   63 00059690 LdrAddDllDirectory
5344
        109   64 0006AE70 LdrAddLoadAsDataTable
5345
        110   65 0007C880 LdrAddRefDll
5346
        111   66 000BAE40 LdrAppxHandleIntegrityFailure
5347
        112   67 0006F270 LdrDisableThreadCalloutsForDll
5348
        113   68 000CB040 LdrEnumResources
5349
        114   69 000754A0 LdrEnumerateLoadedModules
5350
        115   6A 000BC670 LdrFastFailInLoaderCallout
5351
        116   6B 00069A90 LdrFindEntryForAddress
5352
        117   6C 000CB310 LdrFindResourceDirectory_U
5353
        118   6D 00074A00 LdrFindResourceEx_U
5354
        119   6E 0006FE80 LdrFindResource_U
5355
        120   6F 00080390 LdrFlushAlternateResourceModules
5356
        121   70 00072060 LdrGetDllDirectory
5357
        122   71 0006C070 LdrGetDllFullName
5358
        123   72 00018950 LdrGetDllHandle
5359
        124   73 0006BD10 LdrGetDllHandleByMapping
5360
        125   74 0006CB20 LdrGetDllHandleByName
5361
        126   75 000185D0 LdrGetDllHandleEx
5362
        127   76 00036750 LdrGetDllPath
5363
        128   77 000BC6A0 LdrGetFailureData
5364
        129   78 000CB330 LdrGetFileNameFromLoadAsDataTable
5365
        130   79 00074080 LdrGetKnownDllSectionHandle
5366
        131   7A 00003560 LdrGetProcedureAddress
5367
        132   7B 00079CC0 LdrGetProcedureAddressEx
5368
        133   7C 00016020 LdrGetProcedureAddressForCaller
5369
        134   7D 000BDBA0 LdrInitShimEngineDynamic
5370
        135   7E 0006B9A0 LdrInitializeThunk
5371
        136   7F 00066340 LdrLoadAlternateResourceModule
5372
        137   80 0001C360 LdrLoadAlternateResourceModuleEx
5373
        138   81 0001AF60 LdrLoadDll
5374
        139   82 000086A0 LdrLockLoaderLock
5375
        140   83 000CBE70 LdrOpenImageFileOptionsKey
5376
        141   84 000778D0 LdrProcessInitializationComplete
5377
        142   85 000CBF60 LdrProcessRelocationBlock
5378
        143   86 000CBF90 LdrProcessRelocationBlockEx
5379
        144   87 00070D60 LdrQueryImageFileExecutionOptions
5380
        145   88 00070DA0 LdrQueryImageFileExecutionOptionsEx
5381
        146   89 000710F0 LdrQueryImageFileKeyOption
5382
        147   8A 000BC6B0 LdrQueryModuleServiceTags
5383
        148   8B 000BCCB0 LdrQueryOptionalDelayLoadedAPI
5384
        149   8C 00002FF0 LdrQueryProcessModuleInformation
5385
        150   8D 00078530 LdrRegisterDllNotification
5386
        151   8E 000C9170 LdrRemoveDllDirectory
5387
        152   8F 0006B320 LdrRemoveLoadAsDataTable
5388
        153   90 000CC450 LdrResFindResource
5389
        154   91 0006D940 LdrResFindResourceDirectory
5390
        155   92 00056B30 LdrResGetRCConfig
5391
        156   93 00080D20 LdrResRelease
5392
        157   94 0001AAA0 LdrResSearchResource
5393
        158   95 00016DF0 LdrResolveDelayLoadedAPI
5394
        159   96 000BCD90 LdrResolveDelayLoadsFromDll
5395
        160   97 0001A8A0 LdrRscIsTypeExist
5396
        161   98 000759D0 LdrSetAppCompatDllRedirectionCallback
5397
        162   99 00077980 LdrSetDefaultDllDirectories
5398
        163   9A 00001540 LdrSetDllDirectory
5399
        164   9B 00076DB0 LdrSetDllManifestProber
5400
        165   9C 000BCB30 LdrSetImplicitPathOptions
5401
        166   9D 00081760 LdrSetMUICacheType
5402
        167   9E 00044390 LdrShutdownProcess
5403
        168   9F 00021580 LdrShutdownThread
5404
        169   A0 000756F0 LdrStandardizeSystemPath
5405
        170   A1 00157290 LdrSystemDllInitBlock
5406
        171   A2 00043260 LdrUnloadAlternateResourceModule
5407
        172   A3 00043270 LdrUnloadAlternateResourceModuleEx
5408
        173   A4 00038190 LdrUnloadDll
5409
        174   A5 00070620 LdrUnlockLoaderLock
5410
        175   A6 000BCB90 LdrUnregisterDllNotification
5411
        176   A7 000BCC40 LdrVerifyImageMatchesChecksum
5412
        177   A8 0007ED70 LdrVerifyImageMatchesChecksumEx
5413
        178   A9 0001ADA0 LdrpResGetMappingSize
5414
        179   AA 00018C10 LdrpResGetResourceDirectory
5415
        180   AB 000F3910 MD4Final
5416
        181   AC 000F39E0 MD4Init
5417
        182   AD 000F3A10 MD4Update
5418
        183   AE 00062340 MD5Final
5419
        184   AF 000741E0 MD5Init
5420
        185   B0 00062410 MD5Update
5421
        186   B1 00144B42 NlsAnsiCodePage
5422
        187   B2 00144FA3 NlsMbCodePageTag
5423
        188   B3 00144FA2 NlsMbOemCodePageTag
5424
        189   B4 00093390 NtAcceptConnectPort
5425
        190   B5 00093370 NtAccessCheck
5426
        191   B6 00093600 NtAccessCheckAndAuditAlarm
5427
        192   B7 000939A0 NtAccessCheckByType
5428
        193   B8 00093900 NtAccessCheckByTypeAndAuditAlarm
5429
        194   B9 000939B0 NtAccessCheckByTypeResultList
5430
        195   BA 000939C0 NtAccessCheckByTypeResultListAndAuditAlarm
5431
        196   BB 000939D0 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
5432
        197   BC 000937E0 NtAddAtom
5433
        198   BD 000939E0 NtAddAtomEx
5434
        199   BE 000939F0 NtAddBootEntry
5435
        200   BF 00093A00 NtAddDriverEntry
5436
        201   C0 00093A10 NtAdjustGroupsToken
5437
        202   C1 00093780 NtAdjustPrivilegesToken
5438
        203   C2 00093A20 NtAdjustTokenClaimsAndDeviceGroups
5439
        204   C3 00093A30 NtAlertResumeThread
5440
        205   C4 00093A40 NtAlertThread
5441
        206   C5 00093A50 NtAlertThreadByThreadId
5442
        207   C6 00093A60 NtAllocateLocallyUniqueId
5443
        208   C7 00093A70 NtAllocateReserveObject
5444
        209   C8 00093A80 NtAllocateUserPhysicalPages
5445
        210   C9 00093A90 NtAllocateUuids
5446
        211   CA 000934F0 NtAllocateVirtualMemory
5447
        212   CB 00093AA0 NtAlpcAcceptConnectPort
5448
        213   CC 00093AB0 NtAlpcCancelMessage
5449
        214   CD 00093AC0 NtAlpcConnectPort
5450
        215   CE 00093AD0 NtAlpcConnectPortEx
5451
        216   CF 00093AE0 NtAlpcCreatePort
5452
        217   D0 00093AF0 NtAlpcCreatePortSection
5453
        218   D1 00093B00 NtAlpcCreateResourceReserve
5454
        219   D2 00093B10 NtAlpcCreateSectionView
5455
        220   D3 00093B20 NtAlpcCreateSecurityContext
5456
        221   D4 00093B30 NtAlpcDeletePortSection
5457
        222   D5 00093B40 NtAlpcDeleteResourceReserve
5458
        223   D6 00093B50 NtAlpcDeleteSectionView
5459
        224   D7 00093B60 NtAlpcDeleteSecurityContext
5460
        225   D8 00093B70 NtAlpcDisconnectPort
5461
        226   D9 00093B80 NtAlpcImpersonateClientContainerOfPort
5462
        227   DA 00093B90 NtAlpcImpersonateClientOfPort
5463
        228   DB 00093BA0 NtAlpcOpenSenderProcess
5464
        229   DC 00093BB0 NtAlpcOpenSenderThread
5465
        230   DD 00093BC0 NtAlpcQueryInformation
5466
        231   DE 00093BD0 NtAlpcQueryInformationMessage
5467
        232   DF 00093BE0 NtAlpcRevokeSecurityContext
5468
        233   E0 00093BF0 NtAlpcSendWaitReceivePort
5469
        234   E1 00093C00 NtAlpcSetInformation
5470
        235   E2 00093830 NtApphelpCacheControl
5471
        236   E3 00093C10 NtAreMappedFilesTheSame
5472
        237   E4 00093C20 NtAssignProcessToJobObject
5473
        238   E5 00093C30 NtAssociateWaitCompletionPacket
5474
        239   E6 000933C0 NtCallbackReturn
5475
        240   E7 00093940 NtCancelIoFile
5476
        241   E8 00093C40 NtCancelIoFileEx
5477
        242   E9 00093C50 NtCancelSynchronousIoFile
5478
        243   EA 00093980 NtCancelTimer
5479
        244   EB 00093C60 NtCancelTimer2
5480
        245   EC 00093C70 NtCancelWaitCompletionPacket
5481
        246   ED 00093750 NtClearEvent
5482
        247   EE 00093460 NtClose
5483
        248   EF 00093720 NtCloseObjectAuditAlarm
5484
        249   F0 00093C80 NtCommitComplete
5485
        250   F1 00093C90 NtCommitEnlistment
5486
        251   F2 00093CA0 NtCommitTransaction
5487
        252   F3 00093CB0 NtCompactKeys
5488
        253   F4 00093CC0 NtCompareObjects
5489
        254   F5 00093CD0 NtCompareTokens
5490
        255   F6 00093CE0 NtCompleteConnectPort
5491
        256   F7 00093CF0 NtCompressKey
5492
        257   F8 00093D00 NtConnectPort
5493
        258   F9 000937A0 NtContinue
5494
        259   FA 00093D10 NtCreateDebugObject
5495
        260   FB 00093D20 NtCreateDirectoryObject
5496
        261   FC 00093D30 NtCreateDirectoryObjectEx
5497
        262   FD 00093D40 NtCreateEnlistment
5498
        263   FE 000937F0 NtCreateEvent
5499
        264   FF 00093D50 NtCreateEventPair
5500
        265  100 000938C0 NtCreateFile
5501
        266  101 00093D60 NtCreateIRTimer
5502
        267  102 00093D70 NtCreateIoCompletion
5503
        268  103 00093D80 NtCreateJobObject
5504
        269  104 00093D90 NtCreateJobSet
5505
        270  105 00093540 NtCreateKey
5506
        271  106 00093DA0 NtCreateKeyTransacted
5507
        272  107 00093DB0 NtCreateKeyedEvent
5508
        273  108 00093DC0 NtCreateLowBoxToken
5509
        274  109 00093DD0 NtCreateMailslotFile
5510
        275  10A 00093DE0 NtCreateMutant
5511
        276  10B 00093DF0 NtCreateNamedPipeFile
5512
        277  10C 00093E00 NtCreatePagingFile
5513
        278  10D 00093E10 NtCreatePartition
5514
        279  10E 00093E20 NtCreatePort
5515
        280  10F 00093E30 NtCreatePrivateNamespace
5516
        281  110 00093E40 NtCreateProcess
5517
        282  111 00093840 NtCreateProcessEx
5518
        283  112 00093E50 NtCreateProfile
5519
        284  113 00093E60 NtCreateProfileEx
5520
        285  114 00093E70 NtCreateResourceManager
5521
        286  115 00093810 NtCreateSection
5522
        287  116 00093E80 NtCreateSemaphore
5523
        288  117 00093E90 NtCreateSymbolicLinkObject
5524
        289  118 00093850 NtCreateThread
5525
        290  119 00093EA0 NtCreateThreadEx
5526
        291  11A 00093EB0 NtCreateTimer
5527
        292  11B 00093EC0 NtCreateTimer2
5528
        293  11C 00093ED0 NtCreateToken
5529
        294  11D 00093EE0 NtCreateTokenEx
5530
        295  11E 00093EF0 NtCreateTransaction
5531
        296  11F 00093F00 NtCreateTransactionManager
5532
        297  120 00093F10 NtCreateUserProcess
5533
        298  121 00093F20 NtCreateWaitCompletionPacket
5534
        299  122 00093F30 NtCreateWaitablePort
5535
        300  123 00093F40 NtCreateWnfStateName
5536
        301  124 00093F50 NtCreateWorkerFactory
5537
        302  125 00093F60 NtDebugActiveProcess
5538
        303  126 00093F70 NtDebugContinue
5539
        304  127 000936B0 NtDelayExecution
5540
        305  128 00093F80 NtDeleteAtom
5541
        306  129 00093F90 NtDeleteBootEntry
5542
        307  12A 00093FA0 NtDeleteDriverEntry
5543
        308  12B 00093FB0 NtDeleteFile
5544
        309  12C 00093FC0 NtDeleteKey
5545
        310  12D 00093FD0 NtDeleteObjectAuditAlarm
5546
        311  12E 00093FE0 NtDeletePrivateNamespace
5547
        312  12F 00093FF0 NtDeleteValueKey
5548
        313  130 00094000 NtDeleteWnfStateData
5549
        314  131 00094010 NtDeleteWnfStateName
5550
        315  132 000933E0 NtDeviceIoControlFile
5551
        316  133 00094020 NtDisableLastKnownGood
5552
        317  134 00094030 NtDisplayString
5553
        318  135 00094040 NtDrawText
5554
        319  136 00093730 NtDuplicateObject
5555
        320  137 00093790 NtDuplicateToken
5556
        321  138 00094050 NtEnableLastKnownGood
5557
        322  139 00094060 NtEnumerateBootEntries
5558
        323  13A 00094070 NtEnumerateDriverEntries
5559
        324  13B 00093690 NtEnumerateKey
5560
        325  13C 00094080 NtEnumerateSystemEnvironmentValuesEx
5561
        326  13D 00094090 NtEnumerateTransactionObject
5562
        327  13E 000934A0 NtEnumerateValueKey
5563
        328  13F 000940A0 NtExtendSection
5564
        329  140 000940B0 NtFilterBootOption
5565
        330  141 000940C0 NtFilterToken
5566
        331  142 000940D0 NtFilterTokenEx
5567
        332  143 000934B0 NtFindAtom
5568
        333  144 00093820 NtFlushBuffersFile
5569
        334  145 000940E0 NtFlushBuffersFileEx
5570
        335  146 000940F0 NtFlushInstallUILanguage
5571
        336  147 00094100 NtFlushInstructionCache
5572
        337  148 00094110 NtFlushKey
5573
        338  149 00094120 NtFlushProcessWriteBuffers
5574
        339  14A 00094130 NtFlushVirtualMemory
5575
        340  14B 00094140 NtFlushWriteBuffer
5576
        341  14C 00094150 NtFreeUserPhysicalPages
5577
        342  14D 00093550 NtFreeVirtualMemory
5578
        343  14E 00094160 NtFreezeRegistry
5579
        344  14F 00094170 NtFreezeTransactions
5580
        345  150 00093700 NtFsControlFile
5581
        346  151 00094180 NtGetCachedSigningLevel
5582
        347  152 00094190 NtGetCompleteWnfStateSubscription
5583
        348  153 000941A0 NtGetContextThread
5584
        349  154 000941B0 NtGetCurrentProcessorNumber
5585
        350  155 000941C0 NtGetCurrentProcessorNumberEx
5586
        351  156 000941D0 NtGetDevicePowerState
5587
        352  157 000941E0 NtGetMUIRegistryInfo
5588
        353  158 000941F0 NtGetNextProcess
5589
        354  159 00094200 NtGetNextThread
5590
        355  15A 00094210 NtGetNlsSectionPtr
5591
        356  15B 00094220 NtGetNotificationResourceManager
5592
        357  15C 000CE160 NtGetTickCount
5593
        358  15D 00094230 NtGetWriteWatch
5594
        359  15E 00094240 NtImpersonateAnonymousToken
5595
        360  15F 00093560 NtImpersonateClientOfPort
5596
        361  160 00094250 NtImpersonateThread
5597
        362  161 00094260 NtInitializeNlsFiles
5598
        363  162 00094270 NtInitializeRegistry
5599
        364  163 00094280 NtInitiatePowerAction
5600
        365  164 00093860 NtIsProcessInJob
5601
        366  165 00094290 NtIsSystemResumeAutomatic
5602
        367  166 000942A0 NtIsUILanguageComitted
5603
        368  167 000942B0 NtListenPort
5604
        369  168 000942C0 NtLoadDriver
5605
        370  169 000942D0 NtLoadKey
5606
        371  16A 000942E0 NtLoadKey2
5607
        372  16B 00094F00 NtLoadKey3
5608
        373  16C 000942F0 NtLoadKeyEx
5609
        374  16D 00094300 NtLockFile
5610
        375  16E 00094310 NtLockProductActivationKeys
5611
        376  16F 00094320 NtLockRegistryKey
5612
        377  170 00094330 NtLockVirtualMemory
5613
        378  171 00094340 NtMakePermanentObject
5614
        379  172 00094350 NtMakeTemporaryObject
5615
        380  173 00094360 NtManagePartition
5616
        381  174 00094370 NtMapCMFModule
5617
        382  175 00094380 NtMapUserPhysicalPages
5618
        383  176 000933A0 NtMapUserPhysicalPagesScatter
5619
        384  177 000935F0 NtMapViewOfSection
5620
        385  178 00094390 NtModifyBootEntry
5621
        386  179 000943A0 NtModifyDriverEntry
5622
        387  17A 000943B0 NtNotifyChangeDirectoryFile
5623
        388  17B 000943C0 NtNotifyChangeKey
5624
        389  17C 000943D0 NtNotifyChangeMultipleKeys
5625
        390  17D 000943E0 NtNotifyChangeSession
5626
        391  17E 000938F0 NtOpenDirectoryObject
5627
        392  17F 000943F0 NtOpenEnlistment
5628
        393  180 00093770 NtOpenEvent
5629
        394  181 00094400 NtOpenEventPair
5630
        395  182 000936A0 NtOpenFile
5631
        396  183 00094410 NtOpenIoCompletion
5632
        397  184 00094420 NtOpenJobObject
5633
        398  185 00093490 NtOpenKey
5634
        399  186 00094430 NtOpenKeyEx
5635
        400  187 00094440 NtOpenKeyTransacted
5636
        401  188 00094450 NtOpenKeyTransactedEx
5637
        402  189 00094460 NtOpenKeyedEvent
5638
        403  18A 00094470 NtOpenMutant
5639
        404  18B 00094480 NtOpenObjectAuditAlarm
5640
        405  18C 00094490 NtOpenPartition
5641
        406  18D 000944A0 NtOpenPrivateNamespace
5642
        407  18E 000935D0 NtOpenProcess
5643
        408  18F 000944B0 NtOpenProcessToken
5644
        409  190 00093670 NtOpenProcessTokenEx
5645
        410  191 000944C0 NtOpenResourceManager
5646
        411  192 000936E0 NtOpenSection
5647
        412  193 000944D0 NtOpenSemaphore
5648
        413  194 000944E0 NtOpenSession
5649
        414  195 000944F0 NtOpenSymbolicLinkObject
5650
        415  196 00094500 NtOpenThread
5651
        416  197 000935B0 NtOpenThreadToken
5652
        417  198 00093660 NtOpenThreadTokenEx
5653
        418  199 00094510 NtOpenTimer
5654
        419  19A 00094520 NtOpenTransaction
5655
        420  19B 00094530 NtOpenTransactionManager
5656
        421  19C 00094540 NtPlugPlayControl
5657
        422  19D 00093960 NtPowerInformation
5658
        423  19E 00094550 NtPrePrepareComplete
5659
        424  19F 00094560 NtPrePrepareEnlistment
5660
        425  1A0 00094570 NtPrepareComplete
5661
        426  1A1 00094580 NtPrepareEnlistment
5662
        427  1A2 00094590 NtPrivilegeCheck
5663
        428  1A3 000945A0 NtPrivilegeObjectAuditAlarm
5664
        429  1A4 000945B0 NtPrivilegedServiceAuditAlarm
5665
        430  1A5 000945C0 NtPropagationComplete
5666
        431  1A6 000945D0 NtPropagationFailed
5667
        432  1A7 00093870 NtProtectVirtualMemory
5668
        433  1A8 000945E0 NtPulseEvent
5669
        434  1A9 00093740 NtQueryAttributesFile
5670
        435  1AA 000945F0 NtQueryBootEntryOrder
5671
        436  1AB 00094600 NtQueryBootOptions
5672
        437  1AC 00094610 NtQueryDebugFilterState
5673
        438  1AD 000934C0 NtQueryDefaultLocale
5674
        439  1AE 000937B0 NtQueryDefaultUILanguage
5675
        440  1AF 000936C0 NtQueryDirectoryFile
5676
        441  1B0 00094620 NtQueryDirectoryObject
5677
        442  1B1 00094630 NtQueryDriverEntryOrder
5678
        443  1B2 00094640 NtQueryEaFile
5679
        444  1B3 000938D0 NtQueryEvent
5680
        445  1B4 00094650 NtQueryFullAttributesFile
5681
        446  1B5 00094660 NtQueryInformationAtom
5682
        447  1B6 00094670 NtQueryInformationEnlistment
5683
        448  1B7 00093480 NtQueryInformationFile
5684
        449  1B8 00094680 NtQueryInformationJobObject
5685
        450  1B9 00094690 NtQueryInformationPort
5686
        451  1BA 00093500 NtQueryInformationProcess
5687
        452  1BB 000946A0 NtQueryInformationResourceManager
5688
        453  1BC 000935C0 NtQueryInformationThread
5689
        454  1BD 00093580 NtQueryInformationToken
5690
        455  1BE 000946B0 NtQueryInformationTransaction
5691
        456  1BF 000946C0 NtQueryInformationTransactionManager
5692
        457  1C0 000946D0 NtQueryInformationWorkerFactory
5693
        458  1C1 000946E0 NtQueryInstallUILanguage
5694
        459  1C2 000946F0 NtQueryIntervalProfile
5695
        460  1C3 00094700 NtQueryIoCompletion
5696
        461  1C4 000934D0 NtQueryKey
5697
        462  1C5 00094710 NtQueryLicenseValue
5698
        463  1C6 00094720 NtQueryMultipleValueKey
5699
        464  1C7 00094730 NtQueryMutant
5700
        465  1C8 00093470 NtQueryObject
5701
        466  1C9 00094740 NtQueryOpenSubKeys
5702
        467  1CA 00094750 NtQueryOpenSubKeysEx
5703
        468  1CB 00093680 NtQueryPerformanceCounter
5704
        469  1CC 00094760 NtQueryPortInformationProcess
5705
        470  1CD 00094770 NtQueryQuotaInformationFile
5706
        471  1CE 00093880 NtQuerySection
5707
        472  1CF 00094780 NtQuerySecurityAttributesToken
5708
        473  1D0 00094790 NtQuerySecurityObject
5709
        474  1D1 000947A0 NtQuerySemaphore
5710
        475  1D2 000947B0 NtQuerySymbolicLinkObject
5711
        476  1D3 000947C0 NtQuerySystemEnvironmentValue
5712
        477  1D4 000947D0 NtQuerySystemEnvironmentValueEx
5713
        478  1D5 000936D0 NtQuerySystemInformation
5714
        479  1D6 000947E0 NtQuerySystemInformationEx
5715
        480  1D7 00093910 NtQuerySystemTime
5716
        481  1D8 000936F0 NtQueryTimer
5717
        482  1D9 000947F0 NtQueryTimerResolution
5718
        483  1DA 000934E0 NtQueryValueKey
5719
        484  1DB 000935A0 NtQueryVirtualMemory
5720
        485  1DC 00093800 NtQueryVolumeInformationFile
5721
        486  1DD 00094800 NtQueryWnfStateData
5722
        487  1DE 00094810 NtQueryWnfStateNameInformation
5723
        488  1DF 000937C0 NtQueueApcThread
5724
        489  1E0 00094820 NtQueueApcThreadEx
5725
        490  1E1 00094830 NtRaiseException
5726
        491  1E2 00094840 NtRaiseHardError
5727
        492  1E3 000933D0 NtReadFile
5728
        493  1E4 00093650 NtReadFileScatter
5729
        494  1E5 00094850 NtReadOnlyEnlistment
5730
        495  1E6 000938B0 NtReadRequestData
5731
        496  1E7 00093760 NtReadVirtualMemory
5732
        497  1E8 00094860 NtRecoverEnlistment
5733
        498  1E9 00094870 NtRecoverResourceManager
5734
        499  1EA 00094880 NtRecoverTransactionManager
5735
        500  1EB 00094890 NtRegisterProtocolAddressInformation
5736
        501  1EC 000948A0 NtRegisterThreadTerminatePort
5737
        502  1ED 000948B0 NtReleaseKeyedEvent
5738
        503  1EE 00093570 NtReleaseMutant
5739
        504  1EF 00093410 NtReleaseSemaphore
5740
        505  1F0 000948C0 NtReleaseWorkerFactoryWorker
5741
        506  1F1 00093400 NtRemoveIoCompletion
5742
        507  1F2 000948D0 NtRemoveIoCompletionEx
5743
        508  1F3 000948E0 NtRemoveProcessDebug
5744
        509  1F4 000948F0 NtRenameKey
5745
        510  1F5 00094900 NtRenameTransactionManager
5746
        511  1F6 00094910 NtReplaceKey
5747
        512  1F7 00094920 NtReplacePartitionUnit
5748
        513  1F8 00093430 NtReplyPort
5749
        514  1F9 00093420 NtReplyWaitReceivePort
5750
        515  1FA 00093620 NtReplyWaitReceivePortEx
5751
        516  1FB 00094930 NtReplyWaitReplyPort
5752
        517  1FC 00094940 NtRequestPort
5753
        518  1FD 00093590 NtRequestWaitReplyPort
5754
        519  1FE 00094950 NtResetEvent
5755
        520  1FF 00094960 NtResetWriteWatch
5756
        521  200 00094970 NtRestoreKey
5757
        522  201 00094980 NtResumeProcess
5758
        523  202 00093890 NtResumeThread
5759
        524  203 00094990 NtRevertContainerImpersonation
5760
        525  204 000949A0 NtRollbackComplete
5761
        526  205 000949B0 NtRollbackEnlistment
5762
        527  206 000949C0 NtRollbackTransaction
5763
        528  207 000949D0 NtRollforwardTransactionManager
5764
        529  208 000949E0 NtSaveKey
5765
        530  209 000949F0 NtSaveKeyEx
5766
        531  20A 00094A00 NtSaveMergedKeys
5767
        532  20B 00094A10 NtSecureConnectPort
5768
        533  20C 00094A20 NtSerializeBoot
5769
        534  20D 00094A30 NtSetBootEntryOrder
5770
        535  20E 00094A40 NtSetBootOptions
5771
        536  20F 00094A50 NtSetCachedSigningLevel
5772
        537  210 00094A60 NtSetContextThread
5773
        538  211 00094A70 NtSetDebugFilterState
5774
        539  212 00094A80 NtSetDefaultHardErrorPort
5775
        540  213 00094A90 NtSetDefaultLocale
5776
        541  214 00094AA0 NtSetDefaultUILanguage
5777
        542  215 00094AB0 NtSetDriverEntryOrder
5778
        543  216 00094AC0 NtSetEaFile
5779
        544  217 00093450 NtSetEvent
5780
        545  218 00093640 NtSetEventBoostPriority
5781
        546  219 00094AD0 NtSetHighEventPair
5782
        547  21A 00094AE0 NtSetHighWaitLowEventPair
5783
        548  21B 00094AF0 NtSetIRTimer
5784
        549  21C 00094B00 NtSetInformationDebugObject
5785
        550  21D 00094B10 NtSetInformationEnlistment
5786
        551  21E 000935E0 NtSetInformationFile
5787
        552  21F 00094B20 NtSetInformationJobObject
5788
        553  220 00094B30 NtSetInformationKey
5789
        554  221 00093930 NtSetInformationObject
5790
        555  222 00093530 NtSetInformationProcess
5791
        556  223 00094B40 NtSetInformationResourceManager
5792
        557  224 00094B50 NtSetInformationSymbolicLink
5793
        558  225 00093440 NtSetInformationThread
5794
        559  226 00094B60 NtSetInformationToken
5795
        560  227 00094B70 NtSetInformationTransaction
5796
        561  228 00094B80 NtSetInformationTransactionManager
5797
        562  229 00094B90 NtSetInformationVirtualMemory
5798
        563  22A 00094BA0 NtSetInformationWorkerFactory
5799
        564  22B 00094BB0 NtSetIntervalProfile
5800
        565  22C 00094BC0 NtSetIoCompletion
5801
        566  22D 00094BD0 NtSetIoCompletionEx
5802
        567  22E 00094BE0 NtSetLdtEntries
5803
        568  22F 00094BF0 NtSetLowEventPair
5804
        569  230 00094C00 NtSetLowWaitHighEventPair
5805
        570  231 00094C10 NtSetQuotaInformationFile
5806
        571  232 00094C20 NtSetSecurityObject
5807
        572  233 00094C30 NtSetSystemEnvironmentValue
5808
        573  234 00094C40 NtSetSystemEnvironmentValueEx
5809
        574  235 00094C50 NtSetSystemInformation
5810
        575  236 00094C60 NtSetSystemPowerState
5811
        576  237 00094C70 NtSetSystemTime
5812
        577  238 00094C80 NtSetThreadExecutionState
5813
        578  239 00093990 NtSetTimer
5814
        579  23A 00094C90 NtSetTimer2
5815
        580  23B 00094CA0 NtSetTimerEx
5816
        581  23C 00094CB0 NtSetTimerResolution
5817
        582  23D 00094CC0 NtSetUuidSeed
5818
        583  23E 00093970 NtSetValueKey
5819
        584  23F 00094CD0 NtSetVolumeInformationFile
5820
        585  240 00094CE0 NtSetWnfProcessNotificationEvent
5821
        586  241 00094CF0 NtShutdownSystem
5822
        587  242 00094D00 NtShutdownWorkerFactory
5823
        588  243 00094D10 NtSignalAndWaitForSingleObject
5824
        589  244 00094D20 NtSinglePhaseReject
5825
        590  245 00094D30 NtStartProfile
5826
        591  246 00094D40 NtStopProfile
5827
        592  247 00094D50 NtSubscribeWnfStateChange
5828
        593  248 00094D60 NtSuspendProcess
5829
        594  249 00094D70 NtSuspendThread
5830
        595  24A 00094D80 NtSystemDebugControl
5831
        596  24B 00094D90 NtTerminateJobObject
5832
        597  24C 00093630 NtTerminateProcess
5833
        598  24D 000938A0 NtTerminateThread
5834
        599  24E 00094DA0 NtTestAlert
5835
        600  24F 00094DB0 NtThawRegistry
5836
        601  250 00094DC0 NtThawTransactions
5837
        602  251 00094DD0 NtTraceControl
5838
        603  252 00093950 NtTraceEvent
5839
        604  253 00094DE0 NtTranslateFilePath
5840
        605  254 00094DF0 NtUmsThreadYield
5841
        606  255 00094E00 NtUnloadDriver
5842
        607  256 00094E10 NtUnloadKey
5843
        608  257 00094E20 NtUnloadKey2
5844
        609  258 00094E30 NtUnloadKeyEx
5845
        610  259 00094E40 NtUnlockFile
5846
        611  25A 00094E50 NtUnlockVirtualMemory
5847
        612  25B 00093610 NtUnmapViewOfSection
5848
        613  25C 00094E60 NtUnmapViewOfSectionEx
5849
        614  25D 00094E70 NtUnsubscribeWnfStateChange
5850
        615  25E 00094E80 NtUpdateWnfStateData
5851
        616  25F 00094E90 NtVdmControl
5852
        617  260 00094EA0 NtWaitForAlertByThreadId
5853
        618  261 00094EB0 NtWaitForDebugEvent
5854
        619  262 00094EC0 NtWaitForKeyedEvent
5855
        620  263 00093920 NtWaitForMultipleObjects
5856
        621  264 00093510 NtWaitForMultipleObjects32
5857
        622  265 000933B0 NtWaitForSingleObject
5858
        623  266 00094ED0 NtWaitForWorkViaWorkerFactory
5859
        624  267 00094EE0 NtWaitHighEventPair
5860
        625  268 00094EF0 NtWaitLowEventPair
5861
        626  269 00093380 NtWorkerFactoryWorkerReady
5862
        627  26A 000933F0 NtWriteFile
5863
        628  26B 00093520 NtWriteFileGather
5864
        629  26C 000938E0 NtWriteRequestData
5865
        630  26D 00093710 NtWriteVirtualMemory
5866
        631  26E 000937D0 NtYieldExecution
5867
        632  26F 00093060 NtdllDefWindowProc_A
5868
        633  270 00093070 NtdllDefWindowProc_W
5869
        634  271 00093120 NtdllDialogWndProc_A
5870
        635  272 00093130 NtdllDialogWndProc_W
5871
        636  273 000CE430 PfxFindPrefix
5872
        637  274 000CE510 PfxInitialize
5873
        638  275 000CE530 PfxInsertPrefix
5874
        639  276 000CE650 PfxRemovePrefix
5875
        640  277 00058B60 PssNtCaptureSnapshot
5876
        641  278 000833D0 PssNtDuplicateSnapshot
5877
        642  279 000F6620 PssNtFreeRemoteSnapshot
5878
        643  27A 000593C0 PssNtFreeSnapshot
5879
        644  27B 00083440 PssNtFreeWalkMarker
5880
        645  27C 00081EA0 PssNtQuerySnapshot
5881
        646  27D 00059530 PssNtValidateDescriptor
5882
        647  27E 000817F0 PssNtWalkSnapshot
5883
        648  27F 0007DED0 RtlAbortRXact
5884
        649  280 00063EB0 RtlAbsoluteToSelfRelativeSD
5885
        650  281 00038170 RtlAcquirePebLock
5886
        651  282 0006E1E0 RtlAcquirePrivilege
5887
        652  283 0006C4E0 RtlAcquireReleaseSRWLockExclusive
5888
        653  284 000618F0 RtlAcquireResourceExclusive
5889
        654  285 000617A0 RtlAcquireResourceShared
5890
        655  286 0002A1D0 RtlAcquireSRWLockExclusive
5891
        656  287 00030590 RtlAcquireSRWLockShared
5892
        657  288 000532D0 RtlActivateActivationContext
5893
        658  289 00053320 RtlActivateActivationContextEx
5894
        659  28A 00021A70 RtlActivateActivationContextUnsafeFast
5895
        660  28B 0001FAC0 RtlAddAccessAllowedAce
5896
        661  28C 00070BA0 RtlAddAccessAllowedAceEx
5897
        662  28D 00073900 RtlAddAccessAllowedObjectAce
5898
        663  28E 00078EC0 RtlAddAccessDeniedAce
5899
        664  28F 00078940 RtlAddAccessDeniedAceEx
5900
        665  290 00073850 RtlAddAccessDeniedObjectAce
5901
        666  291 00066920 RtlAddAce
5902
        667  292 00075B40 RtlAddActionToRXact
5903
        668  293 00051DA0 RtlAddAtomToAtomTable
5904
        669  294 00075BC0 RtlAddAttributeActionToRXact
5905
        670  295 00078360 RtlAddAuditAccessAce
5906
        671  296 00077340 RtlAddAuditAccessAceEx
5907
        672  297 000738A0 RtlAddAuditAccessObjectAce
5908
        673  298 000D0500 RtlAddCompoundAce
5909
        674  299 000723F0 RtlAddFunctionTable
5910
        675  29A 00062E80 RtlAddGrowableFunctionTable
5911
        676  29B 000D1E70 RtlAddIntegrityLabelToBoundaryDescriptor
5912
        677  29C 0004AA90 RtlAddMandatoryAce
5913
        678  29D 00080750 RtlAddProcessTrustLabelAce
5914
        679  29E 0003E5E0 RtlAddRefActivationContext
5915
        680  29F 000759D0 RtlAddRefMemoryStream
5916
        681  2A0 000D0670 RtlAddResourceAttributeAce
5917
        682  2A1 00052A80 RtlAddSIDToBoundaryDescriptor
5918
        683  2A2 000D09D0 RtlAddScopedPolicyIDAce
5919
        684  2A3 00083610 RtlAddVectoredContinueHandler
5920
        685  2A4 00066CB0 RtlAddVectoredExceptionHandler
5921
        686  2A5 00017410 RtlAddressInSectionTable
5922
        687  2A6 0006F080 RtlAdjustPrivilege
5923
        688  2A7 0006C960 RtlAllocateActivationContextStack
5924
        689  2A8 0004EFA0 RtlAllocateAndInitializeSid
5925
        690  2A9 000CE700 RtlAllocateAndInitializeSidEx
5926
        691  2AA 00052430 RtlAllocateHandle
5927
        692  2AB 0002EAB0 RtlAllocateHeap
5928
        693  2AC 000FD010 RtlAllocateMemoryBlockLookaside
5929
        694  2AD 000FD0F0 RtlAllocateMemoryZone
5930
        695  2AE 00076DD0 RtlAllocateWnfSerializationGroup
5931
        696  2AF 00023800 RtlAnsiCharToUnicodeChar
5932
        697  2B0 000D2500 RtlAnsiStringToUnicodeSize
5933
        698  2B1 00023710 RtlAnsiStringToUnicodeString
5934
        699  2B2 000D2560 RtlAppendAsciizToString
5935
        700  2B3 000BB960 RtlAppendPathElement
5936
        701  2B4 000D25D0 RtlAppendStringToString
5937
        702  2B5 0003FE70 RtlAppendUnicodeStringToString
5938
        703  2B6 0001F7D0 RtlAppendUnicodeToString
5939
        704  2B7 000C6C60 RtlApplicationVerifierStop
5940
        705  2B8 0007DDF0 RtlApplyRXact
5941
        706  2B9 0007DEA0 RtlApplyRXactNoFlush
5942
        707  2BA 000BB470 RtlAppxIsFileOwnedByTrustedInstaller
5943
        708  2BB 00071710 RtlAreAllAccessesGranted
5944
        709  2BC 000CE7D0 RtlAreAnyAccessesGranted
5945
        710  2BD 00077690 RtlAreBitsClear
5946
        711  2BE 00063950 RtlAreBitsSet
5947
        712  2BF 000D3800 RtlAssert
5948
        713  2C0 000745B0 RtlAvlInsertNodeEx
5949
        714  2C1 00074210 RtlAvlRemoveNode
5950
        715  2C2 000D3930 RtlBarrier
5951
        716  2C3 000D3A70 RtlBarrierForDelete
5952
        717  2C4 000F5FC0 RtlCancelTimer
5953
        718  2C5 0005D5A0 RtlCanonicalizeDomainName
5954
        719  2C6 0004A510 RtlCapabilityCheck
5955
        720  2C7 000953F0 RtlCaptureContext
5956
        721  2C8 00012600 RtlCaptureStackBackTrace
5957
        722  2C9 0006DAB0 RtlCharToInteger
5958
        723  2CA 0006C9F0 RtlCheckForOrphanedCriticalSections
5959
        724  2CB 0000CED0 RtlCheckPortableOperatingSystem
5960
        725  2CC 0000D540 RtlCheckRegistryKey
5961
        726  2CD 000C2C70 RtlCheckSandboxedToken
5962
        727  2CE 0004A810 RtlCheckTokenCapability
5963
        728  2CF 000CE7E0 RtlCheckTokenMembership
5964
        729  2D0 0004AC70 RtlCheckTokenMembershipEx
5965
        730  2D1 00047350 RtlCleanUpTEBLangLists
5966
        731  2D2 00058740 RtlClearAllBits
5967
        732  2D3 000D26A0 RtlClearBit
5968
        733  2D4 00056360 RtlClearBits
5969
        734  2D5 000C14B0 RtlCloneMemoryStream
5970
        735  2D6 000C23C0 RtlCloneUserProcess
5971
        736  2D7 000D7C10 RtlCmDecodeMemIoResource
5972
        737  2D8 000D7C80 RtlCmEncodeMemIoResource
5973
        738  2D9 000C3580 RtlCommitDebugInfo
5974
        739  2DA 000C14B0 RtlCommitMemoryStream
5975
        740  2DB 000789C0 RtlCompactHeap
5976
        741  2DC 000DB7F0 RtlCompareAltitudes
5977
        742  2DD 00095950 RtlCompareMemory
5978
        743  2DE 000959D0 RtlCompareMemoryUlong
5979
        744  2DF 0007FA20 RtlCompareString
5980
        745  2E0 00035550 RtlCompareUnicodeString
5981
        746  2E1 00035590 RtlCompareUnicodeStrings
5982
        747  2E2 000C26A0 RtlCompleteProcessCloning
5983
        748  2E3 0005B050 RtlCompressBuffer
5984
        749  2E4 0005D1D0 RtlComputeCrc32
5985
        750  2E5 000CA9B0 RtlComputeImportTableHash
5986
        751  2E6 000C1150 RtlComputePrivatizedDllName_U
5987
        752  2E7 000804F0 RtlConnectToSm
5988
        753  2E8 00071720 RtlConsoleMultiByteToUnicodeN
5989
        754  2E9 00074AA0 RtlContractHashTable
5990
        755  2EA 000455C0 RtlConvertDeviceFamilyInfoToString
5991
        756  2EB 00075A50 RtlConvertExclusiveToShared
5992
        757  2EC 000D4710 RtlConvertLCIDToString
5993
        758  2ED 000D0430 RtlConvertSRWLockExclusiveToShared
5994
        759  2EE 00061890 RtlConvertSharedToExclusive
5995
        760  2EF 0001FAF0 RtlConvertSidToUnicodeString
5996
        761  2F0 000C2FD0 RtlConvertToAutoInheritSecurityObject
5997
        762  2F1 000D26B0 RtlCopyBitMap
5998
        763  2F2 00066E30 RtlCopyContext
5999
        764  2F3 000DBC70 RtlCopyExtendedContext
6000
        765  2F4 0006C9E0 RtlCopyLuid
6001
        766  2F5 000CE800 RtlCopyLuidAndAttributesArray
6002
        767  2F6 00076F60 RtlCopyMappedMemory
6003
        768  2F7 00097C40 RtlCopyMemory
6004
        769  2F8 00095A00 RtlCopyMemoryNonTemporal
6005
        770  2F9 000C14B0 RtlCopyMemoryStreamTo
6006
        771  2FA 000C14B0 RtlCopyOutOfProcessMemoryStreamTo
6007
        772  2FB 00063C40 RtlCopySecurityDescriptor
6008
        773  2FC 0004E670 RtlCopySid
6009
        774  2FD 000CE830 RtlCopySidAndAttributesArray
6010
        775  2FE 00077640 RtlCopyString
6011
        776  2FF 0001FA40 RtlCopyUnicodeString
6012
        777  300 000DC3E0 RtlCrc32
6013
        778  301 000DC400 RtlCrc64
6014
        779  302 0004C940 RtlCreateAcl
6015
        780  303 00056410 RtlCreateActivationContext
6016
        781  304 0007FC10 RtlCreateAndSetSD
6017
        782  305 000789B0 RtlCreateAtomTable
6018
        783  306 000DC8C0 RtlCreateBootStatusDataFile
6019
        784  307 00076A30 RtlCreateBoundaryDescriptor
6020
        785  308 00045F30 RtlCreateEnvironment
6021
        786  309 00046570 RtlCreateEnvironmentEx
6022
        787  30A 00065460 RtlCreateHashTable
6023
        788  30B 000DBB90 RtlCreateHashTableEx
6024
        789  30C 00005330 RtlCreateHeap
6025
        790  30D 00072720 RtlCreateMemoryBlockLookaside
6026
        791  30E 000728F0 RtlCreateMemoryZone
6027
        792  30F 000C27B0 RtlCreateProcessParameters
6028
        793  310 00045F50 RtlCreateProcessParametersEx
6029
        794  311 000C15C0 RtlCreateProcessReflection
6030
        795  312 00052C80 RtlCreateQueryDebugBuffer
6031
        796  313 000D4050 RtlCreateRegistryKey
6032
        797  314 0004E5C0 RtlCreateSecurityDescriptor
6033
        798  315 0004EE80 RtlCreateServiceSid
6034
        799  316 0007F270 RtlCreateSystemVolumeInformationFolder
6035
        800  317 00003610 RtlCreateTagHeap
6036
        801  318 0007C410 RtlCreateTimer
6037
        802  319 0007A9C0 RtlCreateTimerQueue
6038
        803  31A 000DDC20 RtlCreateUmsCompletionList
6039
        804  31B 000DDD40 RtlCreateUmsThreadContext
6040
        805  31C 00020B50 RtlCreateUnicodeString
6041
        806  31D 00020C20 RtlCreateUnicodeStringFromAsciiz
6042
        807  31E 0007FF60 RtlCreateUserProcess
6043
        808  31F 000C2FE0 RtlCreateUserSecurityObject
6044
        809  320 00001780 RtlCreateUserStack
6045
        810  321 000760F0 RtlCreateUserThread
6046
        811  322 00052A90 RtlCreateVirtualAccountSid
6047
        812  323 0001EEE0 RtlCultureNameToLCID
6048
        813  324 000CD1A0 RtlCustomCPToUnicodeN
6049
        814  325 0005CB50 RtlCutoverTimeToSystemTime
6050
        815  326 000C3590 RtlDeCommitDebugInfo
6051
        816  327 000C2820 RtlDeNormalizeProcessParams
6052
        817  328 00063700 RtlDeactivateActivationContext
6053
        818  329 00023B70 RtlDeactivateActivationContextUnsafeFast
6054
        819  32A 000756F0 RtlDebugPrintTimes
6055
        820  32B 00065F20 RtlDecodePointer
6056
        821  32C 000C74B0 RtlDecodeRemotePointer
6057
        822  32D 000777E0 RtlDecodeSystemPointer
6058
        823  32E 0005A4C0 RtlDecompressBuffer
6059
        824  32F 0005A560 RtlDecompressBufferEx
6060
        825  330 000DB9F0 RtlDecompressFragment
6061
        826  331 00050950 RtlDefaultNpAcl
6062
        827  332 00061280 RtlDelete
6063
        828  333 0006EFA0 RtlDeleteAce
6064
        829  334 00051CA0 RtlDeleteAtomFromAtomTable
6065
        830  335 000D3BC0 RtlDeleteBarrier
6066
        831  336 00029F80 RtlDeleteBoundaryDescriptor
6067
        832  337 000081B0 RtlDeleteCriticalSection
6068
        833  338 00060D50 RtlDeleteElementGenericTable
6069
        834  339 000604B0 RtlDeleteElementGenericTableAvl
6070
        835  33A 00060750 RtlDeleteElementGenericTableAvlEx
6071
        836  33B 000701E0 RtlDeleteFunctionTable
6072
        837  33C 000706B0 RtlDeleteGrowableFunctionTable
6073
        838  33D 00077D20 RtlDeleteHashTable
6074
        839  33E 00061320 RtlDeleteNoSplay
6075
        840  33F 00081660 RtlDeleteRegistryValue
6076
        841  340 00008160 RtlDeleteResource
6077
        842  341 000705B0 RtlDeleteSecurityObject
6078
        843  342 0007C2C0 RtlDeleteTimer
6079
        844  343 000F5FD0 RtlDeleteTimerQueue
6080
        845  344 0007A630 RtlDeleteTimerQueueEx
6081
        846  345 000DDE50 RtlDeleteUmsCompletionList
6082
        847  346 000DDEB0 RtlDeleteUmsThreadContext
6083
        848  347 000DDF10 RtlDequeueUmsCompletionListItems
6084
        849  348 000DE880 RtlDeregisterSecureMemoryCacheCallback
6085
        850  349 0007A620 RtlDeregisterWait
6086
        851  34A 0007B3C0 RtlDeregisterWaitEx
6087
        852  34B 00050D00 RtlDeriveCapabilitySidsFromName
6088
        853  34C 000D1C10 RtlDestroyAtomTable
6089
        854  34D 00046550 RtlDestroyEnvironment
6090
        855  34E 00078E30 RtlDestroyHandleTable
6091
        856  34F 00004920 RtlDestroyHeap
6092
        857  350 00078870 RtlDestroyMemoryBlockLookaside
6093
        858  351 000788D0 RtlDestroyMemoryZone
6094
        859  352 00074990 RtlDestroyProcessParameters
6095
        860  353 00069220 RtlDestroyQueryDebugBuffer
6096
        861  354 00044990 RtlDetectHeapLeaks
6097
        862  355 00057720 RtlDetermineDosPathNameType_U
6098
        863  356 000BB660 RtlDisableThreadProfiling
6099
        864  357 00038910 RtlDllShutdownInProgress
6100
        865  358 0006CF30 RtlDnsHostNameToComputerName
6101
        866  359 00079060 RtlDoesFileExists_U
6102
        867  35A 00024620 RtlDosApplyFileIsolationRedirection_Ustr
6103
        868  35B 0006DB60 RtlDosPathNameToNtPathName_U
6104
        869  35C 0001BFF0 RtlDosPathNameToNtPathName_U_WithStatus
6105
        870  35D 0001BD70 RtlDosPathNameToRelativeNtPathName_U
6106
        871  35E 00025870 RtlDosPathNameToRelativeNtPathName_U_WithStatus
6107
        872  35F 00057510 RtlDosSearchPath_U
6108
        873  360 0005F890 RtlDosSearchPath_Ustr
6109
        874  361 000D2040 RtlDowncaseUnicodeChar
6110
        875  362 0006A620 RtlDowncaseUnicodeString
6111
        876  363 000C1F00 RtlDumpResource
6112
        877  364 0006B800 RtlDuplicateUnicodeString
6113
        878  365 000D1CF0 RtlEmptyAtomTable
6114
        879  366 000C1F50 RtlEnableEarlyCriticalSectionEventCreation
6115
        880  367 000BB6D0 RtlEnableThreadProfiling
6116
        881  368 00066DE0 RtlEncodePointer
6117
        882  369 000C7520 RtlEncodeRemotePointer
6118
        883  36A 00077D00 RtlEncodeSystemPointer
6119
        884  36B 00073640 RtlEndEnumerationHashTable
6120
        885  36C 000756F0 RtlEndStrongEnumerationHashTable
6121
        886  36D 000DBBA0 RtlEndWeakEnumerationHashTable
6122
        887  36E 00034F30 RtlEnterCriticalSection
6123
        888  36F 000DDFA0 RtlEnterUmsSchedulingMode
6124
        889  370 000D8080 RtlEnumProcessHeaps
6125
        890  371 00065360 RtlEnumerateEntryHashTable
6126
        891  372 00060CC0 RtlEnumerateGenericTable
6127
        892  373 00062270 RtlEnumerateGenericTableAvl
6128
        893  374 000DE620 RtlEnumerateGenericTableLikeADirectory
6129
        894  375 00061720 RtlEnumerateGenericTableWithoutSplaying
6130
        895  376 00062290 RtlEnumerateGenericTableWithoutSplayingAvl
6131
        896  377 0005D4E0 RtlEqualComputerName
6132
        897  378 0005D520 RtlEqualDomainName
6133
        898  379 000CE8F0 RtlEqualLuid
6134
        899  37A 0004D4E0 RtlEqualPrefixSid
6135
        900  37B 0004A430 RtlEqualSid
6136
        901  37C 00064E70 RtlEqualString
6137
        902  37D 00023CC0 RtlEqualUnicodeString
6138
        903  37E 000790C0 RtlEqualWnfChangeStamps
6139
        904  37F 00083480 RtlEraseUnicodeString
6140
        905  380 000DF690 RtlEthernetAddressToStringA
6141
        906  381 000DF8F0 RtlEthernetAddressToStringW
6142
        907  382 000DF960 RtlEthernetStringToAddressA
6143
        908  383 000DFAB0 RtlEthernetStringToAddressW
6144
        909  384 000DE080 RtlExecuteUmsThread
6145
        910  385 000442C0 RtlExitUserProcess
6146
        911  386 00009FA0 RtlExitUserThread
6147
        912  387 00038310 RtlExpandEnvironmentStrings
6148
        913  388 0000F480 RtlExpandEnvironmentStrings_U
6149
        914  389 00064FA0 RtlExpandHashTable
6150
        915  38A 000D1E80 RtlExtendMemoryBlockLookaside
6151
        916  38B 000D1EF0 RtlExtendMemoryZone
6152
        917  38C 000D28B0 RtlExtractBitMap
6153
        918  38D 00095B20 RtlFillMemory
6154
        919  38E 000756F0 RtlFinalReleaseOutOfProcessMemoryStream
6155
        920  38F 0004D7F0 RtlFindAceByType
6156
        921  390 000240F0 RtlFindActivationContextSectionGuid
6157
        922  391 00024ED0 RtlFindActivationContextSectionString
6158
        923  392 00026DA0 RtlFindCharInUnicodeString
6159
        924  393 00001010 RtlFindClearBits
6160
        925  394 00055DD0 RtlFindClearBitsAndSet
6161
        926  395 000D2A50 RtlFindClearRuns
6162
        927  396 000D7D70 RtlFindClosestEncodableLength
6163
        928  397 00059F40 RtlFindLastBackwardRunClear
6164
        929  398 00078220 RtlFindLeastSignificantBit
6165
        930  399 000D2D10 RtlFindLongestRunClear
6166
        931  39A 000655B0 RtlFindMessage
6167
        932  39B 00078340 RtlFindMostSignificantBit
6168
        933  39C 00003180 RtlFindNextForwardRunClear
6169
        934  39D 00081040 RtlFindSetBits
6170
        935  39E 000D2D50 RtlFindSetBitsAndClear
6171
        936  39F 000D20A0 RtlFindUnicodeSubstring
6172
        937  3A0 00094FC0 RtlFirstEntrySList
6173
        938  3A1 0001FF30 RtlFirstFreeAce
6174
        939  3A2 00055BF0 RtlFlsAlloc
6175
        940  3A3 00056230 RtlFlsFree
6176
        941  3A4 000094D0 RtlFlushHeaps
6177
        942  3A5 000DE940 RtlFlushSecureMemoryCache
6178
        943  3A6 0001F8D0 RtlFormatCurrentUserKeyPath
6179
        944  3A7 000DFBF0 RtlFormatMessage
6180
        945  3A8 00010330 RtlFormatMessageEx
6181
        946  3A9 00063620 RtlFreeActivationContextStack
6182
        947  3AA 00027180 RtlFreeAnsiString
6183
        948  3AB 00051C60 RtlFreeHandle
6184
        949  3AC 0002A900 RtlFreeHeap
6185
        950  3AD 000FD150 RtlFreeMemoryBlockLookaside
6186
        951  3AE 00076E70 RtlFreeOemString
6187
        952  3AF 0006D900 RtlFreeSid
6188
        953  3B0 000635E0 RtlFreeThreadActivationContextStack
6189
        954  3B1 00027180 RtlFreeUnicodeString
6190
        955  3B2 00002EB0 RtlFreeUserStack
6191
        956  3B3 000648E0 RtlGUIDFromString
6192
        957  3B4 000DFDF0 RtlGenerate8dot3Name
6193
        958  3B5 0006BB40 RtlGetAce
6194
        959  3B6 0003DA60 RtlGetActiveActivationContext
6195
        960  3B7 0003EB80 RtlGetAppContainerNamedObjectPath
6196
        961  3B8 000030B0 RtlGetAppContainerParent
6197
        962  3B9 0004A790 RtlGetAppContainerSidType
6198
        963  3BA 000D3CE0 RtlGetCallersAddress
6199
        964  3BB 00073720 RtlGetCompressionWorkSpaceSize
6200
        965  3BC 00070090 RtlGetControlSecurityDescriptor
6201
        966  3BD 00068600 RtlGetCriticalSectionRecursionCount
6202
        967  3BE 0006F630 RtlGetCurrentDirectory_U
6203
        968  3BF 0007EBA0 RtlGetCurrentPeb
6204
        969  3C0 00092F60 RtlGetCurrentProcessorNumber
6205
        970  3C1 00092F90 RtlGetCurrentProcessorNumberEx
6206
        971  3C2 00069F90 RtlGetCurrentTransaction
6207
        972  3C3 00061680 RtlGetCurrentUmsThread
6208
        973  3C4 0006C720 RtlGetDaclSecurityDescriptor
6209
        974  3C5 000456A0 RtlGetDeviceFamilyInfoEnum
6210
        975  3C6 00074AE0 RtlGetElementGenericTable
6211
        976  3C7 000DE750 RtlGetElementGenericTableAvl
6212
        977  3C8 000778B0 RtlGetEnabledExtendedFeatures
6213
        978  3C9 00076DF0 RtlGetExePath
6214
        979  3CA 000670B0 RtlGetExtendedContextLength
6215
        980  3CB 00077930 RtlGetExtendedFeaturesMask
6216
        981  3CC 000542E0 RtlGetFileMUIPath
6217
        982  3CD 000BC4E0 RtlGetFrame
6218
        983  3CE 00054A30 RtlGetFullPathName_U
6219
        984  3CF 0001BDA0 RtlGetFullPathName_UEx
6220
        985  3D0 0005FE20 RtlGetFullPathName_UstrEx
6221
        986  3D1 00079110 RtlGetFunctionTableListHead
6222
        987  3D2 000705E0 RtlGetGroupSecurityDescriptor
6223
        988  3D3 00052230 RtlGetIntegerAtom
6224
        989  3D4 000CE0A0 RtlGetInterruptTimePrecise
6225
        990  3D5 00078050 RtlGetLastNtStatus
6226
        991  3D6 00079040 RtlGetLastWin32Error
6227
        992  3D7 00061E70 RtlGetLengthWithoutLastFullDosOrNtPathElement
6228
        993  3D8 00062210 RtlGetLengthWithoutTrailingPathSeperators
6229
        994  3D9 00048C00 RtlGetLocaleFileMappingAddress
6230
        995  3DA 00077CF0 RtlGetLongestNtPathLength
6231
        996  3DB 000936D0 RtlGetNativeSystemInformation
6232
        997  3DC 00071470 RtlGetNextEntryHashTable
6233
        998  3DD 000DE220 RtlGetNextUmsListItem
6234
        999  3DE 000D4090 RtlGetNtGlobalFlags
6235
       1000  3DF 00042670 RtlGetNtProductType
6236
       1001  3E0 00074B80 RtlGetNtVersionNumbers
6237
       1002  3E1 0006F370 RtlGetOwnerSecurityDescriptor
6238
       1003  3E2 00049F00 RtlGetParentLocaleName
6239
       1004  3E3 0007EC00 RtlGetProcessHeaps
6240
       1005  3E4 000D4820 RtlGetProcessPreferredUILanguages
6241
       1006  3E5 00072990 RtlGetProductInfo
6242
       1007  3E6 0006EF40 RtlGetSaclSecurityDescriptor
6243
       1008  3E7 00075670 RtlGetSearchPath
6244
       1009  3E8 00075DA0 RtlGetSecurityDescriptorRMControl
6245
       1010  3E9 00078070 RtlGetSetBootStatusData
6246
       1011  3EA 0006BE50 RtlGetSystemPreferredUILanguages
6247
       1012  3EB 00059070 RtlGetSystemTimePrecise
6248
       1013  3EC 00072CC0 RtlGetThreadErrorMode
6249
       1014  3ED 000D4920 RtlGetThreadLangIdByIndex
6250
       1015  3EE 0001D130 RtlGetThreadPreferredUILanguages
6251
       1016  3EF 000D49F0 RtlGetUILanguageInfo
6252
       1017  3F0 000DE250 RtlGetUmsCompletionListEvent
6253
       1018  3F1 000BCCA0 RtlGetUnloadEventTrace
6254
       1019  3F2 00078F90 RtlGetUnloadEventTraceEx
6255
       1020  3F3 000578B0 RtlGetUserInfoHeap
6256
       1021  3F4 0006CBC0 RtlGetUserPreferredUILanguages
6257
       1022  3F5 00041EE0 RtlGetVersion
6258
       1023  3F6 000CAEC0 RtlGrowFunctionTable
6259
       1024  3F7 00026CA0 RtlHashUnicodeString
6260
       1025  3F8 000E0E80 RtlHeapTrkInitialize
6261
       1026  3F9 0006F260 RtlIdentifierAuthoritySid
6262
       1027  3FA 0005D4F0 RtlIdnToAscii
6263
       1028  3FB 000E2330 RtlIdnToNameprepUnicode
6264
       1029  3FC 0005E4D0 RtlIdnToUnicode
6265
       1030  3FD 00016860 RtlImageDirectoryEntryToData
6266
       1031  3FE 00016830 RtlImageNtHeader
6267
       1032  3FF 00015E10 RtlImageNtHeaderEx
6268
       1033  400 00017440 RtlImageRvaToSection
6269
       1034  401 000716A0 RtlImageRvaToVa
6270
       1035  402 0006E430 RtlImpersonateSelf
6271
       1036  403 0006E440 RtlImpersonateSelfEx
6272
       1037  404 0006A390 RtlInitAnsiString
6273
       1038  405 00020BE0 RtlInitAnsiStringEx
6274
       1039  406 000D3C10 RtlInitBarrier
6275
       1040  407 00077480 RtlInitCodePageTable
6276
       1041  408 00065170 RtlInitEnumerationHashTable
6277
       1042  409 000756F0 RtlInitMemoryStream
6278
       1043  40A 000CD410 RtlInitNlsTables
6279
       1044  40B 000756F0 RtlInitOutOfProcessMemoryStream
6280
       1045  40C 0006A390 RtlInitString
6281
       1046  40D 000D2630 RtlInitStringEx
6282
       1047  40E 000DBBB0 RtlInitStrongEnumerationHashTable
6283
       1048  40F 0001F140 RtlInitUnicodeString
6284
       1049  410 0001F880 RtlInitUnicodeStringEx
6285
       1050  411 000DBBF0 RtlInitWeakEnumerationHashTable
6286
       1051  412 000759D0 RtlInitializeAtomPackage
6287
       1052  413 0006C060 RtlInitializeBitMap
6288
       1053  414 00064CE0 RtlInitializeConditionVariable
6289
       1054  415 000E2370 RtlInitializeContext
6290
       1055  416 00060AC0 RtlInitializeCriticalSection
6291
       1056  417 000603B0 RtlInitializeCriticalSectionAndSpinCount
6292
       1057  418 00007900 RtlInitializeCriticalSectionEx
6293
       1058  419 00066F90 RtlInitializeExtendedContext
6294
       1059  41A 00073810 RtlInitializeGenericTable
6295
       1060  41B 00075D40 RtlInitializeGenericTableAvl
6296
       1061  41C 00072BB0 RtlInitializeHandleTable
6297
       1062  41D 00083790 RtlInitializeNtUserPfn
6298
       1063  41E 0007F0A0 RtlInitializeRXact
6299
       1064  41F 000076C0 RtlInitializeResource
6300
       1065  420 00065F80 RtlInitializeSListHead
6301
       1066  421 00064CE0 RtlInitializeSRWLock
6302
       1067  422 0004E850 RtlInitializeSid
6303
       1068  423 0004EE20 RtlInitializeSidEx
6304
       1069  424 00060DF0 RtlInsertElementGenericTable
6305
       1070  425 000604F0 RtlInsertElementGenericTableAvl
6306
       1071  426 00060E60 RtlInsertElementGenericTableFull
6307
       1072  427 00060560 RtlInsertElementGenericTableFullAvl
6308
       1073  428 000651E0 RtlInsertEntryHashTable
6309
       1074  429 00073E50 RtlInstallFunctionTableCallback
6310
       1075  42A 000D3D40 RtlInt64ToUnicodeString
6311
       1076  42B 000213F0 RtlIntegerToChar
6312
       1077  42C 000214F0 RtlIntegerToUnicodeString
6313
       1078  42D 0006E7A0 RtlInterlockedClearBitRun
6314
       1079  42E 00068430 RtlInterlockedFlushSList
6315
       1080  42F 00094FD0 RtlInterlockedPopEntrySList
6316
       1081  430 00060B50 RtlInterlockedPushEntrySList
6317
       1082  431 00095080 RtlInterlockedPushListSList
6318
       1083  432 000E2630 RtlInterlockedPushListSListEx
6319
       1084  433 000D3100 RtlInterlockedSetBitRun
6320
       1085  434 000D7E20 RtlIoDecodeMemIoResource
6321
       1086  435 000D7EC0 RtlIoEncodeMemIoResource
6322
       1087  436 000772C0 RtlIpv4AddressToStringA
6323
       1088  437 000DF700 RtlIpv4AddressToStringExA
6324
       1089  438 00071C40 RtlIpv4AddressToStringExW
6325
       1090  439 00071D10 RtlIpv4AddressToStringW
6326
       1091  43A 0006FCB0 RtlIpv4StringToAddressA
6327
       1092  43B 0006FC40 RtlIpv4StringToAddressExA
6328
       1093  43C 0005E180 RtlIpv4StringToAddressExW
6329
       1094  43D 0005E2C0 RtlIpv4StringToAddressW
6330
       1095  43E 0000FDD0 RtlIpv6AddressToStringA
6331
       1096  43F 000DF7C0 RtlIpv6AddressToStringExA
6332
       1097  440 0000F9F0 RtlIpv6AddressToStringExW
6333
       1098  441 0000FB40 RtlIpv6AddressToStringW
6334
       1099  442 00068090 RtlIpv6StringToAddressA
6335
       1100  443 00067FE0 RtlIpv6StringToAddressExA
6336
       1101  444 0005D7A0 RtlIpv6StringToAddressExW
6337
       1102  445 0005D920 RtlIpv6StringToAddressW
6338
       1103  446 000C9EB0 RtlIsActivationContextActive
6339
       1104  447 0004E6B0 RtlIsCapabilitySid
6340
       1105  448 000C1F80 RtlIsCriticalSectionLocked
6341
       1106  449 00040920 RtlIsCriticalSectionLockedByThread
6342
       1107  44A 000C28E0 RtlIsCurrentThreadAttachExempt
6343
       1108  44B 0006FF00 RtlIsDosDeviceName_U
6344
       1109  44C 00060D40 RtlIsGenericTableEmpty
6345
       1110  44D 000DE870 RtlIsGenericTableEmptyAvl
6346
       1111  44E 0004A170 RtlIsMultiSessionSku
6347
       1112  44F 000E2690 RtlIsNameInExpression
6348
       1113  450 000E0270 RtlIsNameLegalDOS8Dot3
6349
       1114  451 000E3F10 RtlIsNormalizedString
6350
       1115  452 00075AF0 RtlIsPackageSid
6351
       1116  453 00047B30 RtlIsParentOfChildAppContainer
6352
       1117  454 00071F20 RtlIsProcessorFeaturePresent
6353
       1118  455 0005A000 RtlIsTextUnicode
6354
       1119  456 00076D70 RtlIsThreadWithinLoaderCallout
6355
       1120  457 000CE910 RtlIsUntrustedObject
6356
       1121  458 00052370 RtlIsValidHandle
6357
       1122  459 00052330 RtlIsValidIndexHandle
6358
       1123  45A 000E0570 RtlIsValidLocaleName
6359
       1124  45B 0004E600 RtlIsValidProcessTrustLabelSid
6360
       1125  45C 00003020 RtlKnownExceptionFilter
6361
       1126  45D 0001EA10 RtlLCIDToCultureName
6362
       1127  45E 000D3DE0 RtlLargeIntegerToChar
6363
       1128  45F 0001F190 RtlLcidToLocaleName
6364
       1129  460 00034480 RtlLeaveCriticalSection
6365
       1130  461 0004F0B0 RtlLengthRequiredSid
6366
       1131  462 00066770 RtlLengthSecurityDescriptor
6367
       1132  463 00061700 RtlLengthSid
6368
       1133  464 0001F9E0 RtlLengthSidAsUnicodeString
6369
       1134  465 00066110 RtlLoadString
6370
       1135  466 000CE180 RtlLocalTimeToSystemTime
6371
       1136  467 0001F480 RtlLocaleNameToLcid
6372
       1137  468 000DBC90 RtlLocateExtendedFeature
6373
       1138  469 000756B0 RtlLocateLegacyContext
6374
       1139  46A 00078CF0 RtlLockBootStatusData
6375
       1140  46B 00077AD0 RtlLockCurrentThread
6376
       1141  46C 000271B0 RtlLockHeap
6377
       1142  46D 00074EE0 RtlLockMemoryBlockLookaside
6378
       1143  46E 000C14B0 RtlLockMemoryStreamRegion
6379
       1144  46F 00074F50 RtlLockMemoryZone
6380
       1145  470 000752B0 RtlLockModuleSection
6381
       1146  471 000E4780 RtlLogStackBackTrace
6382
       1147  472 00051FC0 RtlLookupAtomInAtomTable
6383
       1148  473 00060F80 RtlLookupElementGenericTable
6384
       1149  474 00060B60 RtlLookupElementGenericTableAvl
6385
       1150  475 000DE5D0 RtlLookupElementGenericTableFull
6386
       1151  476 00060470 RtlLookupElementGenericTableFullAvl
6387
       1152  477 00065270 RtlLookupEntryHashTable
6388
       1153  478 00014E40 RtlLookupFunctionEntry
6389
       1154  479 000CAFC0 RtlLookupFunctionTable
6390
       1155  47A 00063ED0 RtlMakeSelfRelativeSD
6391
       1156  47B 0004D5A0 RtlMapGenericMask
6392
       1157  47C 00079070 RtlMapSecurityErrorToNtStatus
6393
       1158  47D 00097C40 RtlMoveMemory
6394
       1159  47E 00068440 RtlMultiAppendUnicodeStringBuffer
6395
       1160  47F 00023880 RtlMultiByteToUnicodeN
6396
       1161  480 00077310 RtlMultiByteToUnicodeSize
6397
       1162  481 000D82F0 RtlMultipleAllocateHeap
6398
       1163  482 000D8370 RtlMultipleFreeHeap
6399
       1164  483 000C3060 RtlNewInstanceSecurityObject
6400
       1165  484 000C3170 RtlNewSecurityGrantedAccess
6401
       1166  485 00047BE0 RtlNewSecurityObject
6402
       1167  486 0004AC00 RtlNewSecurityObjectEx
6403
       1168  487 00048A00 RtlNewSecurityObjectWithMultipleInheritance
6404
       1169  488 000802F0 RtlNormalizeProcessParams
6405
       1170  489 0005EC40 RtlNormalizeString
6406
       1171  48A 000BBBC0 RtlNtPathNameToDosPathName
6407
       1172  48B 0000F0C0 RtlNtStatusToDosError
6408
       1173  48C 0006DB90 RtlNtStatusToDosErrorNoTeb
6409
       1174  48D 0010CB20 RtlNtdllName
6410
       1175  48E 00077680 RtlNumberGenericTableElements
6411
       1176  48F 00077040 RtlNumberGenericTableElementsAvl
6412
       1177  490 000D31C0 RtlNumberOfClearBits
6413
       1178  491 000D31E0 RtlNumberOfClearBitsInRange
6414
       1179  492 000D3210 RtlNumberOfSetBits
6415
       1180  493 000D33C0 RtlNumberOfSetBitsInRange
6416
       1181  494 00078DD0 RtlNumberOfSetBitsUlongPtr
6417
       1182  495 000D2500 RtlOemStringToUnicodeSize
6418
       1183  496 0006D030 RtlOemStringToUnicodeString
6419
       1184  497 0006D120 RtlOemToUnicodeN
6420
       1185  498 00049900 RtlOpenCurrentUser
6421
       1186  499 000E51D0 RtlOsDeploymentState
6422
       1187  49A 0007ED60 RtlOwnerAcesPresent
6423
       1188  49B 00018580 RtlPcToFileHeader
6424
       1189  49C 000D1DB0 RtlPinAtomInAtomTable
6425
       1190  49D 00063930 RtlPopFrame
6426
       1191  49E 00064DE0 RtlPrefixString
6427
       1192  49F 00062130 RtlPrefixUnicodeString
6428
       1193  4A0 000C2920 RtlPrepareForProcessCloning
6429
       1194  4A1 00044810 RtlProcessFlsData
6430
       1195  4A2 00005E30 RtlProtectHeap
6431
       1196  4A3 00072E70 RtlPublishWnfStateData
6432
       1197  4A4 00063340 RtlPushFrame
6433
       1198  4A5 00071510 RtlQueryActivationContextApplicationSettings
6434
       1199  4A6 000527A0 RtlQueryAtomInAtomTable
6435
       1200  4A7 000C1FA0 RtlQueryCriticalSectionOwner
6436
       1201  4A8 00064C70 RtlQueryDepthSList
6437
       1202  4A9 000D40B0 RtlQueryDynamicTimeZoneInformation
6438
       1203  4AA 000726E0 RtlQueryElevationFlags
6439
       1204  4AB 00035150 RtlQueryEnvironmentVariable
6440
       1205  4AC 00046840 RtlQueryEnvironmentVariable_U
6441
       1206  4AD 00078680 RtlQueryHeapInformation
6442
       1207  4AE 0006FBB0 RtlQueryInformationAcl
6443
       1208  4AF 0003DF30 RtlQueryInformationActivationContext
6444
       1209  4B0 00074B50 RtlQueryInformationActiveActivationContext
6445
       1210  4B1 000C14B0 RtlQueryInterfaceMemoryStream
6446
       1211  4B2 000CC1F0 RtlQueryModuleInformation
6447
       1212  4B3 00064510 RtlQueryPackageClaims
6448
       1213  4B4 00064450 RtlQueryPackageIdentity
6449
       1214  4B5 000644A0 RtlQueryPackageIdentityEx
6450
       1215  4B6 00059130 RtlQueryPerformanceCounter
6451
       1216  4B7 00065FB0 RtlQueryPerformanceFrequency
6452
       1217  4B8 000C35A0 RtlQueryProcessBackTraceInformation
6453
       1218  4B9 00068620 RtlQueryProcessDebugInformation
6454
       1219  4BA 000C3730 RtlQueryProcessHeapInformation
6455
       1220  4BB 000C3B10 RtlQueryProcessLockInformation
6456
       1221  4BC 00078970 RtlQueryProtectedPolicy
6457
       1222  4BD 000D40C0 RtlQueryRegistryValues
6458
       1223  4BE 0000D730 RtlQueryRegistryValuesEx
6459
       1224  4BF 00004FE0 RtlQueryResourcePolicy
6460
       1225  4C0 000C32B0 RtlQuerySecurityObject
6461
       1226  4C1 000D83E0 RtlQueryTagHeap
6462
       1227  4C2 000BB7D0 RtlQueryThreadProfiling
6463
       1228  4C3 0000CF90 RtlQueryTimeZoneInformation
6464
       1229  4C4 000DE2B0 RtlQueryUmsThreadInformation
6465
       1230  4C5 000713A0 RtlQueryUnbiasedInterruptTime
6466
       1231  4C6 000E55F0 RtlQueryValidationRunlevel
6467
       1232  4C7 00078260 RtlQueryWnfMetaNotification
6468
       1233  4C8 0006D830 RtlQueryWnfStateData
6469
       1234  4C9 00076E90 RtlQueryWnfStateDataWithExplicitScope
6470
       1235  4CA 000C6E80 RtlQueueApcWow64Thread
6471
       1236  4CB 0007BFA0 RtlQueueWorkItem
6472
       1237  4CC 00011EA0 RtlRaiseException
6473
       1238  4CD 00092D30 RtlRaiseStatus
6474
       1239  4CE 0006E120 RtlRandom
6475
       1240  4CF 0006E120 RtlRandomEx
6476
       1241  4D0 000277C0 RtlRbInsertNodeEx
6477
       1242  4D1 00027E20 RtlRbRemoveNode
6478
       1243  4D2 0002D790 RtlReAllocateHeap
6479
       1244  4D3 000C14B0 RtlReadMemoryStream
6480
       1245  4D4 000C14B0 RtlReadOutOfProcessMemoryStream
6481
       1246  4D5 000BB800 RtlReadThreadProfilingData
6482
       1247  4D6 000DE550 RtlRealPredecessor
6483
       1248  4D7 00061530 RtlRealSuccessor
6484
       1249  4D8 00076C70 RtlRegisterForWnfMetaNotification
6485
       1250  4D9 000DE9B0 RtlRegisterSecureMemoryCacheCallback
6486
       1251  4DA 00072280 RtlRegisterThreadWithCsrss
6487
       1252  4DB 0007B9A0 RtlRegisterWait
6488
       1253  4DC 0003D740 RtlReleaseActivationContext
6489
       1254  4DD 000759D0 RtlReleaseMemoryStream
6490
       1255  4DE 00035800 RtlReleasePath
6491
       1256  4DF 00038010 RtlReleasePebLock
6492
       1257  4E0 000770B0 RtlReleasePrivilege
6493
       1258  4E1 000542A0 RtlReleaseRelativeName
6494
       1259  4E2 000619F0 RtlReleaseResource
6495
       1260  4E3 000331E0 RtlReleaseSRWLockExclusive
6496
       1261  4E4 000304B0 RtlReleaseSRWLockShared
6497
       1262  4E5 000E24A0 RtlRemoteCall
6498
       1263  4E6 00070D00 RtlRemoveEntryHashTable
6499
       1264  4E7 0007FAD0 RtlRemovePrivileges
6500
       1265  4E8 000C4B50 RtlRemoveVectoredContinueHandler
6501
       1266  4E9 000758E0 RtlRemoveVectoredExceptionHandler
6502
       1267  4EA 000CEAA0 RtlReplaceSidInSd
6503
       1268  4EB 000C75D0 RtlReportException
6504
       1269  4EC 00044600 RtlReportSilentProcessExit
6505
       1270  4ED 000C7CE0 RtlReportSqmEscalation
6506
       1271  4EE 000D1E90 RtlResetMemoryBlockLookaside
6507
       1272  4EF 000D1FF0 RtlResetMemoryZone
6508
       1273  4F0 00083970 RtlResetNtUserPfn
6509
       1274  4F1 000CD480 RtlResetRtlTranslations
6510
       1275  4F2 000714B0 RtlRestoreContext
6511
       1276  4F3 0000F090 RtlRestoreLastWin32Error
6512
       1277  4F4 000839F0 RtlRetrieveNtUserPfn
6513
       1278  4F5 000C14B0 RtlRevertMemoryStream
6514
       1279  4F6 00077FF0 RtlRunDecodeUnicodeString
6515
       1280  4F7 00077A30 RtlRunEncodeUnicodeString
6516
       1281  4F8 00034B00 RtlRunOnceBeginInitialize
6517
       1282  4F9 0006C850 RtlRunOnceComplete
6518
       1283  4FA 00034BE0 RtlRunOnceExecuteOnce
6519
       1284  4FB 00064CE0 RtlRunOnceInitialize
6520
       1285  4FC 000736A0 RtlSecondsSince1970ToTime
6521
       1286  4FD 000CE1F0 RtlSecondsSince1980ToTime
6522
       1287  4FE 000C14B0 RtlSeekMemoryStream
6523
       1288  4FF 00063CF0 RtlSelfRelativeToAbsoluteSD
6524
       1289  500 00063AE0 RtlSelfRelativeToAbsoluteSD2
6525
       1290  501 00080680 RtlSendMsgToSm
6526
       1291  502 00072340 RtlSetAllBits
6527
       1292  503 000CEDC0 RtlSetAttributesSecurityDescriptor
6528
       1293  504 00067FD0 RtlSetBit
6529
       1294  505 00056120 RtlSetBits
6530
       1295  506 00075AA0 RtlSetControlSecurityDescriptor
6531
       1296  507 00069F40 RtlSetCriticalSectionSpinCount
6532
       1297  508 0006F750 RtlSetCurrentDirectory_U
6533
       1298  509 000787A0 RtlSetCurrentEnvironment
6534
       1299  50A 000641F0 RtlSetCurrentTransaction
6535
       1300  50B 0004AEF0 RtlSetDaclSecurityDescriptor
6536
       1301  50C 000D40F0 RtlSetDynamicTimeZoneInformation
6537
       1302  50D 00074E10 RtlSetEnvironmentStrings
6538
       1303  50E 00046900 RtlSetEnvironmentVar
6539
       1304  50F 000468B0 RtlSetEnvironmentVariable
6540
       1305  510 00077900 RtlSetExtendedFeaturesMask
6541
       1306  511 0004E500 RtlSetGroupSecurityDescriptor
6542
       1307  512 0006F3B0 RtlSetHeapInformation
6543
       1308  513 000D0C50 RtlSetInformationAcl
6544
       1309  514 0007E110 RtlSetIoCompletionCallback
6545
       1310  515 0000F090 RtlSetLastWin32Error
6546
       1311  516 0000F070 RtlSetLastWin32ErrorAndNtStatusFromNtStatus
6547
       1312  517 000C14B0 RtlSetMemoryStreamSize
6548
       1313  518 0004E560 RtlSetOwnerSecurityDescriptor
6549
       1314  519 000D4010 RtlSetPortableOperatingSystem
6550
       1315  51A 000C3DA0 RtlSetProcessDebugInformation
6551
       1316  51B 000815E0 RtlSetProcessIsCritical
6552
       1317  51C 0006ABB0 RtlSetProcessPreferredUILanguages
6553
       1318  51D 000E5310 RtlSetProtectedPolicy
6554
       1319  51E 0006E850 RtlSetSaclSecurityDescriptor
6555
       1320  51F 000598A0 RtlSetSearchPathMode
6556
       1321  520 00078240 RtlSetSecurityDescriptorRMControl
6557
       1322  521 00047BB0 RtlSetSecurityObject
6558
       1323  522 00047500 RtlSetSecurityObjectEx
6559
       1324  523 00045EC0 RtlSetThreadErrorMode
6560
       1325  524 00080310 RtlSetThreadIsCritical
6561
       1326  525 00076D90 RtlSetThreadPoolStartFunc
6562
       1327  526 0001C020 RtlSetThreadPreferredUILanguages
6563
       1328  527 0003C080 RtlSetThreadSubProcessTag
6564
       1329  528 000D4100 RtlSetTimeZoneInformation
6565
       1330  529 000F5FE0 RtlSetTimer
6566
       1331  52A 000DE360 RtlSetUmsThreadInformation
6567
       1332  52B 00066DC0 RtlSetUnhandledExceptionFilter
6568
       1333  52C 000D8670 RtlSetUserFlagsHeap
6569
       1334  52D 00057C60 RtlSetUserValueHeap
6570
       1335  52E 0004A190 RtlSidDominates
6571
       1336  52F 0004E470 RtlSidDominatesForTrust
6572
       1337  530 000CEDF0 RtlSidEqualLevel
6573
       1338  531 0006A570 RtlSidHashInitialize
6574
       1339  532 0006A9A0 RtlSidHashLookup
6575
       1340  533 000CEE80 RtlSidIsHigherLevel
6576
       1341  534 0002A380 RtlSizeHeap
6577
       1342  535 00065CB0 RtlSleepConditionVariableCS
6578
       1343  536 00065B30 RtlSleepConditionVariableSRW
6579
       1344  537 00061070 RtlSplay
6580
       1345  538 00072B50 RtlStartRXact
6581
       1346  539 000C14B0 RtlStatMemoryStream
6582
       1347  53A 000649E0 RtlStringFromGUID
6583
       1348  53B 000649F0 RtlStringFromGUIDEx
6584
       1349  53C 000DBC00 RtlStronglyEnumerateEntryHashTable
6585
       1350  53D 00065750 RtlSubAuthorityCountSid
6586
       1351  53E 00064C50 RtlSubAuthoritySid
6587
       1352  53F 0000A870 RtlSubscribeWnfStateChangeNotification
6588
       1353  540 00061500 RtlSubtreePredecessor
6589
       1354  541 000DE5A0 RtlSubtreeSuccessor
6590
       1355  542 00042010 RtlSwitchedVVI
6591
       1356  543 00071400 RtlSystemTimeToLocalTime
6592
       1357  544 00077400 RtlTestAndPublishWnfStateData
6593
       1358  545 000D3640 RtlTestBit
6594
       1359  546 000816D0 RtlTestProtectedAccess
6595
       1360  547 0005CCF0 RtlTimeFieldsToTime
6596
       1361  548 0006E560 RtlTimeToElapsedTimeFields
6597
       1362  549 0006E690 RtlTimeToSecondsSince1970
6598
       1363  54A 0006E650 RtlTimeToSecondsSince1980
6599
       1364  54B 0005CF00 RtlTimeToTimeFields
6600
       1365  54C 000E5A40 RtlTraceDatabaseAdd
6601
       1366  54D 000E5AC0 RtlTraceDatabaseCreate
6602
       1367  54E 000E5BF0 RtlTraceDatabaseDestroy
6603
       1368  54F 000E5C70 RtlTraceDatabaseEnumerate
6604
       1369  550 000E5D50 RtlTraceDatabaseFind
6605
       1370  551 000E5DD0 RtlTraceDatabaseLock
6606
       1371  552 000E5E00 RtlTraceDatabaseUnlock
6607
       1372  553 000E5E20 RtlTraceDatabaseValidate
6608
       1373  554 00008860 RtlTryAcquirePebLock
6609
       1374  555 0000BE80 RtlTryAcquireSRWLockExclusive
6610
       1375  556 00070830 RtlTryAcquireSRWLockShared
6611
       1376  557 000D0480 RtlTryConvertSRWLockSharedToExclusiveOrRelease
6612
       1377  558 00008880 RtlTryEnterCriticalSection
6613
       1378  559 0005C520 RtlUTF8ToUnicodeN
6614
       1379  55A 000DE3A0 RtlUmsThreadYield
6615
       1380  55B 000E3FF0 RtlUnhandledExceptionFilter
6616
       1381  55C 000E4010 RtlUnhandledExceptionFilter2
6617
       1382  55D 000D2530 RtlUnicodeStringToAnsiSize
6618
       1383  55E 00023E30 RtlUnicodeStringToAnsiString
6619
       1384  55F 000D2140 RtlUnicodeStringToCountedOemString
6620
       1385  560 0006A3D0 RtlUnicodeStringToInteger
6621
       1386  561 000D2530 RtlUnicodeStringToOemSize
6622
       1387  562 000630A0 RtlUnicodeStringToOemString
6623
       1388  563 000CD650 RtlUnicodeToCustomCPN
6624
       1389  564 00023F10 RtlUnicodeToMultiByteN
6625
       1390  565 0006FF30 RtlUnicodeToMultiByteSize
6626
       1391  566 00063170 RtlUnicodeToOemN
6627
       1392  567 00059980 RtlUnicodeToUTF8N
6628
       1393  568 00071ED0 RtlUniform
6629
       1394  569 00078EF0 RtlUnlockBootStatusData
6630
       1395  56A 00077B90 RtlUnlockCurrentThread
6631
       1396  56B 000330E0 RtlUnlockHeap
6632
       1397  56C 00075090 RtlUnlockMemoryBlockLookaside
6633
       1398  56D 000C14B0 RtlUnlockMemoryStreamRegion
6634
       1399  56E 000750F0 RtlUnlockMemoryZone
6635
       1400  56F 000753B0 RtlUnlockModuleSection
6636
       1401  570 0000B080 RtlUnsubscribeWnfNotificationWaitForCompletion
6637
       1402  571 0000AEE0 RtlUnsubscribeWnfNotificationWithCompletionCallback
6638
       1403  572 0000B0E0 RtlUnsubscribeWnfStateChangeNotification
6639
       1404  573 000E5180 RtlUnwind
6640
       1405  574 00014200 RtlUnwindEx
6641
       1406  575 000507F0 RtlUpcaseUnicodeChar
6642
       1407  576 00050850 RtlUpcaseUnicodeString
6643
       1408  577 000D2290 RtlUpcaseUnicodeStringToAnsiString
6644
       1409  578 000D23B0 RtlUpcaseUnicodeStringToCountedOemString
6645
       1410  579 0006CE30 RtlUpcaseUnicodeStringToOemString
6646
       1411  57A 000CD880 RtlUpcaseUnicodeToCustomCPN
6647
       1412  57B 0006F520 RtlUpcaseUnicodeToMultiByteN
6648
       1413  57C 0006D3A0 RtlUpcaseUnicodeToOemN
6649
       1414  57D 00044770 RtlUpdateClonedCriticalSection
6650
       1415  57E 00059670 RtlUpdateClonedSRWLock
6651
       1416  57F 0007A8D0 RtlUpdateTimer
6652
       1417  580 00064F10 RtlUpperChar
6653
       1418  581 000D2640 RtlUpperString
6654
       1419  582 00009F30 RtlUserThreadStart
6655
       1420  583 000200D0 RtlValidAcl
6656
       1421  584 000CBF10 RtlValidProcessProtection
6657
       1422  585 00069430 RtlValidRelativeSecurityDescriptor
6658
       1423  586 0001FF90 RtlValidSecurityDescriptor
6659
       1424  587 00020090 RtlValidSid
6660
       1425  588 000384A0 RtlValidateHeap
6661
       1426  589 000D87D0 RtlValidateProcessHeaps
6662
       1427  58A 0006B950 RtlValidateUnicodeString
6663
       1428  58B 00045350 RtlVerifyVersionInfo
6664
       1429  58C 00011740 RtlVirtualUnwind
6665
       1430  58D 00076B00 RtlWaitForWnfMetaNotification
6666
       1431  58E 00077FD0 RtlWaitOnAddress
6667
       1432  58F 00036540 RtlWakeAddressAll
6668
       1433  590 000E6170 RtlWakeAddressAllNoFence
6669
       1434  591 00003090 RtlWakeAddressSingle
6670
       1435  592 000E6180 RtlWakeAddressSingleNoFence
6671
       1436  593 00009A40 RtlWakeAllConditionVariable
6672
       1437  594 000634A0 RtlWakeConditionVariable
6673
       1438  595 000126A0 RtlWalkFrameChain
6674
       1439  596 000D8900 RtlWalkHeap
6675
       1440  597 000DBC60 RtlWeaklyEnumerateEntryHashTable
6676
       1441  598 00001C20 RtlWerpReportException
6677
       1442  599 000C8BD0 RtlWnfCompareChangeStamp
6678
       1443  59A 0000C5F0 RtlWnfDllUnloadCallback
6679
       1444  59B 000671B0 RtlWoW64GetCpuAreaInfo
6680
       1445  59C 00067130 RtlWoW64GetCurrentCpuArea
6681
       1446  59D 00078FC0 RtlWow64CallFunction64
6682
       1447  59E 00078FC0 RtlWow64EnableFsRedirection
6683
       1448  59F 00078FC0 RtlWow64EnableFsRedirectionEx
6684
       1449  5A0 000C6EA0 RtlWow64GetThreadContext
6685
       1450  5A1 000C6ED0 RtlWow64GetThreadSelectorEntry
6686
       1451  5A2 000C2A40 RtlWow64LogMessageInEventLogger
6687
       1452  5A3 000C7070 RtlWow64SetThreadContext
6688
       1453  5A4 000C7090 RtlWow64SuspendThread
6689
       1454  5A5 000C70A0 RtlWow64SuspendThreadEx
6690
       1455  5A6 000C14B0 RtlWriteMemoryStream
6691
       1456  5A7 0007EA40 RtlWriteRegistryValue
6692
       1457  5A8 000DCA80 RtlZeroHeap
6693
       1458  5A9 00095B50 RtlZeroMemory
6694
       1459  5AA 000C9BC0 RtlZombifyActivationContext
6695
       1460  5AB 00061DC0 RtlpApplyLengthFunction
6696
       1461  5AC 0000D1B0 RtlpCheckDynamicTimeZoneInformation
6697
       1462  5AD 000D5500 RtlpCleanupRegistryKeys
6698
       1463  5AE 000D0C90 RtlpConvertAbsoluteToRelativeSecurityAttribute
6699
       1464  5AF 000D5A20 RtlpConvertCultureNamesToLCIDs
6700
       1465  5B0 000D5C40 RtlpConvertLCIDsToCultureNames
6701
       1466  5B1 000D0FF0 RtlpConvertRelativeToAbsoluteSecurityAttribute
6702
       1467  5B2 0001DAD0 RtlpCreateProcessRegistryInfo
6703
       1468  5B3 00068550 RtlpEnsureBufferSize
6704
       1469  5B4 00095B71 RtlpExecuteUmsThread
6705
       1470  5B5 00147198 RtlpFreezeTimeBias
6706
       1471  5B6 000456B0 RtlpGetDeviceFamilyInfoEnum
6707
       1472  5B7 00074940 RtlpGetLCIDFromLangInfoNode
6708
       1473  5B8 00072DD0 RtlpGetNameFromLangInfoNode
6709
       1474  5B9 0001F6A0 RtlpGetSystemDefaultUILanguage
6710
       1475  5BA 000E6190 RtlpGetUserOrMachineUILanguage4NLS
6711
       1476  5BB 00048CA0 RtlpInitializeLangRegistryInfo
6712
       1477  5BC 00054F50 RtlpIsQualifiedLanguage
6713
       1478  5BD 00048A60 RtlpLoadMachineUIByPolicy
6714
       1479  5BE 000499E0 RtlpLoadUserUIByPolicy
6715
       1480  5BF 000025A0 RtlpMergeSecurityAttributeInformation
6716
       1481  5C0 00047980 RtlpMuiFreeLangRegistryInfo
6717
       1482  5C1 000E6FB0 RtlpMuiRegCreateRegistryInfo
6718
       1483  5C2 00048F20 RtlpMuiRegFreeRegistryInfo
6719
       1484  5C3 00048E30 RtlpMuiRegLoadRegistryInfo
6720
       1485  5C4 000C21A0 RtlpNotOwnerCriticalSection
6721
       1486  5C5 0007EB60 RtlpNtCreateKey
6722
       1487  5C6 000733D0 RtlpNtEnumerateSubKey
6723
       1488  5C7 000EA340 RtlpNtMakeTemporaryKey
6724
       1489  5C8 000735A0 RtlpNtOpenKey
6725
       1490  5C9 00071200 RtlpNtQueryValueKey
6726
       1491  5CA 0007EAE0 RtlpNtSetValueKey
6727
       1492  5CB 00048770 RtlpQueryDefaultUILanguage
6728
       1493  5CC 000C4160 RtlpQueryProcessDebugInformationFromWow64
6729
       1494  5CD 000E87D0 RtlpRefreshCachedUILanguage
6730
       1495  5CE 000D6730 RtlpSetInstallLanguage
6731
       1496  5CF 000D6E70 RtlpSetPreferredUILanguages
6732
       1497  5D0 000D6E70 RtlpSetUserPreferredUILanguages
6733
       1498  5D1 00095E96 RtlpUmsExecuteYieldThreadEnd
6734
       1499  5D2 00095DA3 RtlpUmsThreadYield
6735
       1500  5D3 000364F0 RtlpUnWaitCriticalSection
6736
       1501  5D4 00080A30 RtlpVerifyAndCommitUILanguageSettings
6737
       1502  5D5 000756F0 RtlpWaitForCriticalSection
6738
       1503  5D6 000D2500 RtlxAnsiStringToUnicodeSize
6739
       1504  5D7 000D2500 RtlxOemStringToUnicodeSize
6740
       1505  5D8 000D2530 RtlxUnicodeStringToAnsiSize
6741
       1506  5D9 000D2530 RtlxUnicodeStringToOemSize
6742
       1507  5DA 000F6320 SbExecuteProcedure
6743
       1508  5DB 00041A90 SbSelectProcedure
6744
       1509  5DC 000C81A0 ShipAssert
6745
       1510  5DD 000C82C0 ShipAssertGetBufferInfo
6746
       1511  5DE 000C82F0 ShipAssertMsgA
6747
       1512  5DF 000C82F0 ShipAssertMsgW
6748
       1513  5E0 0007A400 TpAllocAlpcCompletion
6749
       1514  5E1 0007AC20 TpAllocAlpcCompletionEx
6750
       1515  5E2 000734D0 TpAllocCleanupGroup
6751
       1516  5E3 0007AC50 TpAllocIoCompletion
6752
       1517  5E4 0007A430 TpAllocJobNotification
6753
       1518  5E5 0007B340 TpAllocPool
6754
       1519  5E6 0003C430 TpAllocTimer
6755
       1520  5E7 0007CBB0 TpAllocWait
6756
       1521  5E8 0003D920 TpAllocWork
6757
       1522  5E9 00079160 TpAlpcRegisterCompletionList
6758
       1523  5EA 00079120 TpAlpcUnregisterCompletionList
6759
       1524  5EB 000F59F0 TpCallbackDetectedUnrecoverableError
6760
       1525  5EC 00079230 TpCallbackIndependent
6761
       1526  5ED 00078F60 TpCallbackLeaveCriticalSectionOnCompletion
6762
       1527  5EE 0003BB00 TpCallbackMayRunLong
6763
       1528  5EF 000F5A20 TpCallbackReleaseMutexOnCompletion
6764
       1529  5F0 000F5A60 TpCallbackReleaseSemaphoreOnCompletion
6765
       1530  5F1 00061AF0 TpCallbackSendAlpcMessageOnCompletion
6766
       1531  5F2 00072B10 TpCallbackSendPendingAlpcMessage
6767
       1532  5F3 000782B0 TpCallbackSetEventOnCompletion
6768
       1533  5F4 000749C0 TpCallbackUnloadDllOnCompletion
6769
       1534  5F5 0006F300 TpCancelAsyncIoOperation
6770
       1535  5F6 00066710 TpCaptureCaller
6771
       1536  5F7 0000A000 TpCheckTerminateWorker
6772
       1537  5F8 000F5AA0 TpDbgDumpHeapUsage
6773
       1538  5F9 000756F0 TpDbgSetLogRoutine
6774
       1539  5FA 000782F0 TpDisablePoolCallbackChecks
6775
       1540  5FB 00074D90 TpDisassociateCallback
6776
       1541  5FC 0003CB90 TpIsTimerSet
6777
       1542  5FD 00027420 TpPostWork
6778
       1543  5FE 000F5690 TpQueryPoolStackInformation
6779
       1544  5FF 0007A7A0 TpReleaseAlpcCompletion
6780
       1545  600 000759E0 TpReleaseCleanupGroup
6781
       1546  601 0007D660 TpReleaseCleanupGroupMembers
6782
       1547  602 000725C0 TpReleaseIoCompletion
6783
       1548  603 0007A240 TpReleaseJobNotification
6784
       1549  604 00073AE0 TpReleasePool
6785
       1550  605 0003EAD0 TpReleaseTimer
6786
       1551  606 0007CEB0 TpReleaseWait
6787
       1552  607 0003C790 TpReleaseWork
6788
       1553  608 000F5700 TpSetDefaultPoolMaxThreads
6789
       1554  609 0007A040 TpSetDefaultPoolStackInformation
6790
       1555  60A 0007B270 TpSetPoolMaxThreads
6791
       1556  60B 000736D0 TpSetPoolMaxThreadsSoftLimit
6792
       1557  60C 00077520 TpSetPoolMinThreads
6793
       1558  60D 0007A160 TpSetPoolStackInformation
6794
       1559  60E 00078E60 TpSetPoolThreadBasePriority
6795
       1560  60F 0007B2E0 TpSetPoolWorkerThreadIdleTimeout
6796
       1561  610 0003CBD0 TpSetTimer
6797
       1562  611 0003CBE0 TpSetTimerEx
6798
       1563  612 0003C530 TpSetWait
6799
       1564  613 0003C5A0 TpSetWaitEx
6800
       1565  614 0007D460 TpSimpleTryPost
6801
       1566  615 0003C540 TpStartAsyncIoOperation
6802
       1567  616 0007C7B0 TpTimerOutstandingCallbackCount
6803
       1568  617 00065760 TpTrimPools
6804
       1569  618 0007A190 TpWaitForAlpcCompletion
6805
       1570  619 00076FD0 TpWaitForIoCompletion
6806
       1571  61A 0007A200 TpWaitForJobNotification
6807
       1572  61B 0007D140 TpWaitForTimer
6808
       1573  61C 0007D010 TpWaitForWait
6809
       1574  61D 0007D100 TpWaitForWork
6810
       1575  61E 000696D0 VerSetConditionMask
6811
       1576  61F 000C87D0 WerReportSQMEvent
6812
       1577  620 000756F0 WinSqmAddToAverageDWORD
6813
       1578  621 000756F0 WinSqmAddToStream
6814
       1579  622 000756F0 WinSqmAddToStreamEx
6815
       1580  623 000759D0 WinSqmCheckEscalationAddToStreamEx
6816
       1581  624 000759D0 WinSqmCheckEscalationSetDWORD
6817
       1582  625 000759D0 WinSqmCheckEscalationSetDWORD64
6818
       1583  626 000759D0 WinSqmCheckEscalationSetString
6819
       1584  627 00042FF0 WinSqmCommonDatapointDelete
6820
       1585  628 00042FF0 WinSqmCommonDatapointSetDWORD
6821
       1586  629 00042FF0 WinSqmCommonDatapointSetDWORD64
6822
       1587  62A 00042FF0 WinSqmCommonDatapointSetStreamEx
6823
       1588  62B 00042FF0 WinSqmCommonDatapointSetString
6824
       1589  62C 000756F0 WinSqmEndSession
6825
       1590  62D 000759D0 WinSqmEventEnabled
6826
       1591  62E 000759D0 WinSqmEventWrite
6827
       1592  62F 000759D0 WinSqmGetEscalationRuleStatus
6828
       1593  630 000C8BB0 WinSqmGetInstrumentationProperty
6829
       1594  631 000756F0 WinSqmIncrementDWORD
6830
       1595  632 000759D0 WinSqmIsOptedIn
6831
       1596  633 000759D0 WinSqmIsOptedInEx
6832
       1597  634 00042FF0 WinSqmIsSessionDisabled
6833
       1598  635 000756F0 WinSqmSetDWORD
6834
       1599  636 000756F0 WinSqmSetDWORD64
6835
       1600  637 00042FF0 WinSqmSetEscalationInfo
6836
       1601  638 000756F0 WinSqmSetIfMaxDWORD
6837
       1602  639 000756F0 WinSqmSetIfMinDWORD
6838
       1603  63A 000756F0 WinSqmSetString
6839
       1604  63B 00078FD0 WinSqmStartSession
6840
       1605  63C 00078FD0 WinSqmStartSessionForPartner
6841
       1606  63D 000759D0 WinSqmStartSqmOptinListener
6842
       1607  63E 00093390 ZwAcceptConnectPort
6843
       1608  63F 00093370 ZwAccessCheck
6844
       1609  640 00093600 ZwAccessCheckAndAuditAlarm
6845
       1610  641 000939A0 ZwAccessCheckByType
6846
       1611  642 00093900 ZwAccessCheckByTypeAndAuditAlarm
6847
       1612  643 000939B0 ZwAccessCheckByTypeResultList
6848
       1613  644 000939C0 ZwAccessCheckByTypeResultListAndAuditAlarm
6849
       1614  645 000939D0 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
6850
       1615  646 000937E0 ZwAddAtom
6851
       1616  647 000939E0 ZwAddAtomEx
6852
       1617  648 000939F0 ZwAddBootEntry
6853
       1618  649 00093A00 ZwAddDriverEntry
6854
       1619  64A 00093A10 ZwAdjustGroupsToken
6855
       1620  64B 00093780 ZwAdjustPrivilegesToken
6856
       1621  64C 00093A20 ZwAdjustTokenClaimsAndDeviceGroups
6857
       1622  64D 00093A30 ZwAlertResumeThread
6858
       1623  64E 00093A40 ZwAlertThread
6859
       1624  64F 00093A50 ZwAlertThreadByThreadId
6860
       1625  650 00093A60 ZwAllocateLocallyUniqueId
6861
       1626  651 00093A70 ZwAllocateReserveObject
6862
       1627  652 00093A80 ZwAllocateUserPhysicalPages
6863
       1628  653 00093A90 ZwAllocateUuids
6864
       1629  654 000934F0 ZwAllocateVirtualMemory
6865
       1630  655 00093AA0 ZwAlpcAcceptConnectPort
6866
       1631  656 00093AB0 ZwAlpcCancelMessage
6867
       1632  657 00093AC0 ZwAlpcConnectPort
6868
       1633  658 00093AD0 ZwAlpcConnectPortEx
6869
       1634  659 00093AE0 ZwAlpcCreatePort
6870
       1635  65A 00093AF0 ZwAlpcCreatePortSection
6871
       1636  65B 00093B00 ZwAlpcCreateResourceReserve
6872
       1637  65C 00093B10 ZwAlpcCreateSectionView
6873
       1638  65D 00093B20 ZwAlpcCreateSecurityContext
6874
       1639  65E 00093B30 ZwAlpcDeletePortSection
6875
       1640  65F 00093B40 ZwAlpcDeleteResourceReserve
6876
       1641  660 00093B50 ZwAlpcDeleteSectionView
6877
       1642  661 00093B60 ZwAlpcDeleteSecurityContext
6878
       1643  662 00093B70 ZwAlpcDisconnectPort
6879
       1644  663 00093B80 ZwAlpcImpersonateClientContainerOfPort
6880
       1645  664 00093B90 ZwAlpcImpersonateClientOfPort
6881
       1646  665 00093BA0 ZwAlpcOpenSenderProcess
6882
       1647  666 00093BB0 ZwAlpcOpenSenderThread
6883
       1648  667 00093BC0 ZwAlpcQueryInformation
6884
       1649  668 00093BD0 ZwAlpcQueryInformationMessage
6885
       1650  669 00093BE0 ZwAlpcRevokeSecurityContext
6886
       1651  66A 00093BF0 ZwAlpcSendWaitReceivePort
6887
       1652  66B 00093C00 ZwAlpcSetInformation
6888
       1653  66C 00093830 ZwApphelpCacheControl
6889
       1654  66D 00093C10 ZwAreMappedFilesTheSame
6890
       1655  66E 00093C20 ZwAssignProcessToJobObject
6891
       1656  66F 00093C30 ZwAssociateWaitCompletionPacket
6892
       1657  670 000933C0 ZwCallbackReturn
6893
       1658  671 00093940 ZwCancelIoFile
6894
       1659  672 00093C40 ZwCancelIoFileEx
6895
       1660  673 00093C50 ZwCancelSynchronousIoFile
6896
       1661  674 00093980 ZwCancelTimer
6897
       1662  675 00093C60 ZwCancelTimer2
6898
       1663  676 00093C70 ZwCancelWaitCompletionPacket
6899
       1664  677 00093750 ZwClearEvent
6900
       1665  678 00093460 ZwClose
6901
       1666  679 00093720 ZwCloseObjectAuditAlarm
6902
       1667  67A 00093C80 ZwCommitComplete
6903
       1668  67B 00093C90 ZwCommitEnlistment
6904
       1669  67C 00093CA0 ZwCommitTransaction
6905
       1670  67D 00093CB0 ZwCompactKeys
6906
       1671  67E 00093CC0 ZwCompareObjects
6907
       1672  67F 00093CD0 ZwCompareTokens
6908
       1673  680 00093CE0 ZwCompleteConnectPort
6909
       1674  681 00093CF0 ZwCompressKey
6910
       1675  682 00093D00 ZwConnectPort
6911
       1676  683 000937A0 ZwContinue
6912
       1677  684 00093D10 ZwCreateDebugObject
6913
       1678  685 00093D20 ZwCreateDirectoryObject
6914
       1679  686 00093D30 ZwCreateDirectoryObjectEx
6915
       1680  687 00093D40 ZwCreateEnlistment
6916
       1681  688 000937F0 ZwCreateEvent
6917
       1682  689 00093D50 ZwCreateEventPair
6918
       1683  68A 000938C0 ZwCreateFile
6919
       1684  68B 00093D60 ZwCreateIRTimer
6920
       1685  68C 00093D70 ZwCreateIoCompletion
6921
       1686  68D 00093D80 ZwCreateJobObject
6922
       1687  68E 00093D90 ZwCreateJobSet
6923
       1688  68F 00093540 ZwCreateKey
6924
       1689  690 00093DA0 ZwCreateKeyTransacted
6925
       1690  691 00093DB0 ZwCreateKeyedEvent
6926
       1691  692 00093DC0 ZwCreateLowBoxToken
6927
       1692  693 00093DD0 ZwCreateMailslotFile
6928
       1693  694 00093DE0 ZwCreateMutant
6929
       1694  695 00093DF0 ZwCreateNamedPipeFile
6930
       1695  696 00093E00 ZwCreatePagingFile
6931
       1696  697 00093E10 ZwCreatePartition
6932
       1697  698 00093E20 ZwCreatePort
6933
       1698  699 00093E30 ZwCreatePrivateNamespace
6934
       1699  69A 00093E40 ZwCreateProcess
6935
       1700  69B 00093840 ZwCreateProcessEx
6936
       1701  69C 00093E50 ZwCreateProfile
6937
       1702  69D 00093E60 ZwCreateProfileEx
6938
       1703  69E 00093E70 ZwCreateResourceManager
6939
       1704  69F 00093810 ZwCreateSection
6940
       1705  6A0 00093E80 ZwCreateSemaphore
6941
       1706  6A1 00093E90 ZwCreateSymbolicLinkObject
6942
       1707  6A2 00093850 ZwCreateThread
6943
       1708  6A3 00093EA0 ZwCreateThreadEx
6944
       1709  6A4 00093EB0 ZwCreateTimer
6945
       1710  6A5 00093EC0 ZwCreateTimer2
6946
       1711  6A6 00093ED0 ZwCreateToken
6947
       1712  6A7 00093EE0 ZwCreateTokenEx
6948
       1713  6A8 00093EF0 ZwCreateTransaction
6949
       1714  6A9 00093F00 ZwCreateTransactionManager
6950
       1715  6AA 00093F10 ZwCreateUserProcess
6951
       1716  6AB 00093F20 ZwCreateWaitCompletionPacket
6952
       1717  6AC 00093F30 ZwCreateWaitablePort
6953
       1718  6AD 00093F40 ZwCreateWnfStateName
6954
       1719  6AE 00093F50 ZwCreateWorkerFactory
6955
       1720  6AF 00093F60 ZwDebugActiveProcess
6956
       1721  6B0 00093F70 ZwDebugContinue
6957
       1722  6B1 000936B0 ZwDelayExecution
6958
       1723  6B2 00093F80 ZwDeleteAtom
6959
       1724  6B3 00093F90 ZwDeleteBootEntry
6960
       1725  6B4 00093FA0 ZwDeleteDriverEntry
6961
       1726  6B5 00093FB0 ZwDeleteFile
6962
       1727  6B6 00093FC0 ZwDeleteKey
6963
       1728  6B7 00093FD0 ZwDeleteObjectAuditAlarm
6964
       1729  6B8 00093FE0 ZwDeletePrivateNamespace
6965
       1730  6B9 00093FF0 ZwDeleteValueKey
6966
       1731  6BA 00094000 ZwDeleteWnfStateData
6967
       1732  6BB 00094010 ZwDeleteWnfStateName
6968
       1733  6BC 000933E0 ZwDeviceIoControlFile
6969
       1734  6BD 00094020 ZwDisableLastKnownGood
6970
       1735  6BE 00094030 ZwDisplayString
6971
       1736  6BF 00094040 ZwDrawText
6972
       1737  6C0 00093730 ZwDuplicateObject
6973
       1738  6C1 00093790 ZwDuplicateToken
6974
       1739  6C2 00094050 ZwEnableLastKnownGood
6975
       1740  6C3 00094060 ZwEnumerateBootEntries
6976
       1741  6C4 00094070 ZwEnumerateDriverEntries
6977
       1742  6C5 00093690 ZwEnumerateKey
6978
       1743  6C6 00094080 ZwEnumerateSystemEnvironmentValuesEx
6979
       1744  6C7 00094090 ZwEnumerateTransactionObject
6980
       1745  6C8 000934A0 ZwEnumerateValueKey
6981
       1746  6C9 000940A0 ZwExtendSection
6982
       1747  6CA 000940B0 ZwFilterBootOption
6983
       1748  6CB 000940C0 ZwFilterToken
6984
       1749  6CC 000940D0 ZwFilterTokenEx
6985
       1750  6CD 000934B0 ZwFindAtom
6986
       1751  6CE 00093820 ZwFlushBuffersFile
6987
       1752  6CF 000940E0 ZwFlushBuffersFileEx
6988
       1753  6D0 000940F0 ZwFlushInstallUILanguage
6989
       1754  6D1 00094100 ZwFlushInstructionCache
6990
       1755  6D2 00094110 ZwFlushKey
6991
       1756  6D3 00094120 ZwFlushProcessWriteBuffers
6992
       1757  6D4 00094130 ZwFlushVirtualMemory
6993
       1758  6D5 00094140 ZwFlushWriteBuffer
6994
       1759  6D6 00094150 ZwFreeUserPhysicalPages
6995
       1760  6D7 00093550 ZwFreeVirtualMemory
6996
       1761  6D8 00094160 ZwFreezeRegistry
6997
       1762  6D9 00094170 ZwFreezeTransactions
6998
       1763  6DA 00093700 ZwFsControlFile
6999
       1764  6DB 00094180 ZwGetCachedSigningLevel
7000
       1765  6DC 00094190 ZwGetCompleteWnfStateSubscription
7001
       1766  6DD 000941A0 ZwGetContextThread
7002
       1767  6DE 000941B0 ZwGetCurrentProcessorNumber
7003
       1768  6DF 000941C0 ZwGetCurrentProcessorNumberEx
7004
       1769  6E0 000941D0 ZwGetDevicePowerState
7005
       1770  6E1 000941E0 ZwGetMUIRegistryInfo
7006
       1771  6E2 000941F0 ZwGetNextProcess
7007
       1772  6E3 00094200 ZwGetNextThread
7008
       1773  6E4 00094210 ZwGetNlsSectionPtr
7009
       1774  6E5 00094220 ZwGetNotificationResourceManager
7010
       1775  6E6 00094230 ZwGetWriteWatch
7011
       1776  6E7 00094240 ZwImpersonateAnonymousToken
7012
       1777  6E8 00093560 ZwImpersonateClientOfPort
7013
       1778  6E9 00094250 ZwImpersonateThread
7014
       1779  6EA 00094260 ZwInitializeNlsFiles
7015
       1780  6EB 00094270 ZwInitializeRegistry
7016
       1781  6EC 00094280 ZwInitiatePowerAction
7017
       1782  6ED 00093860 ZwIsProcessInJob
7018
       1783  6EE 00094290 ZwIsSystemResumeAutomatic
7019
       1784  6EF 000942A0 ZwIsUILanguageComitted
7020
       1785  6F0 000942B0 ZwListenPort
7021
       1786  6F1 000942C0 ZwLoadDriver
7022
       1787  6F2 000942D0 ZwLoadKey
7023
       1788  6F3 000942E0 ZwLoadKey2
7024
       1789  6F4 00094F00 ZwLoadKey3
7025
       1790  6F5 000942F0 ZwLoadKeyEx
7026
       1791  6F6 00094300 ZwLockFile
7027
       1792  6F7 00094310 ZwLockProductActivationKeys
7028
       1793  6F8 00094320 ZwLockRegistryKey
7029
       1794  6F9 00094330 ZwLockVirtualMemory
7030
       1795  6FA 00094340 ZwMakePermanentObject
7031
       1796  6FB 00094350 ZwMakeTemporaryObject
7032
       1797  6FC 00094360 ZwManagePartition
7033
       1798  6FD 00094370 ZwMapCMFModule
7034
       1799  6FE 00094380 ZwMapUserPhysicalPages
7035
       1800  6FF 000933A0 ZwMapUserPhysicalPagesScatter
7036
       1801  700 000935F0 ZwMapViewOfSection
7037
       1802  701 00094390 ZwModifyBootEntry
7038
       1803  702 000943A0 ZwModifyDriverEntry
7039
       1804  703 000943B0 ZwNotifyChangeDirectoryFile
7040
       1805  704 000943C0 ZwNotifyChangeKey
7041
       1806  705 000943D0 ZwNotifyChangeMultipleKeys
7042
       1807  706 000943E0 ZwNotifyChangeSession
7043
       1808  707 000938F0 ZwOpenDirectoryObject
7044
       1809  708 000943F0 ZwOpenEnlistment
7045
       1810  709 00093770 ZwOpenEvent
7046
       1811  70A 00094400 ZwOpenEventPair
7047
       1812  70B 000936A0 ZwOpenFile
7048
       1813  70C 00094410 ZwOpenIoCompletion
7049
       1814  70D 00094420 ZwOpenJobObject
7050
       1815  70E 00093490 ZwOpenKey
7051
       1816  70F 00094430 ZwOpenKeyEx
7052
       1817  710 00094440 ZwOpenKeyTransacted
7053
       1818  711 00094450 ZwOpenKeyTransactedEx
7054
       1819  712 00094460 ZwOpenKeyedEvent
7055
       1820  713 00094470 ZwOpenMutant
7056
       1821  714 00094480 ZwOpenObjectAuditAlarm
7057
       1822  715 00094490 ZwOpenPartition
7058
       1823  716 000944A0 ZwOpenPrivateNamespace
7059
       1824  717 000935D0 ZwOpenProcess
7060
       1825  718 000944B0 ZwOpenProcessToken
7061
       1826  719 00093670 ZwOpenProcessTokenEx
7062
       1827  71A 000944C0 ZwOpenResourceManager
7063
       1828  71B 000936E0 ZwOpenSection
7064
       1829  71C 000944D0 ZwOpenSemaphore
7065
       1830  71D 000944E0 ZwOpenSession
7066
       1831  71E 000944F0 ZwOpenSymbolicLinkObject
7067
       1832  71F 00094500 ZwOpenThread
7068
       1833  720 000935B0 ZwOpenThreadToken
7069
       1834  721 00093660 ZwOpenThreadTokenEx
7070
       1835  722 00094510 ZwOpenTimer
7071
       1836  723 00094520 ZwOpenTransaction
7072
       1837  724 00094530 ZwOpenTransactionManager
7073
       1838  725 00094540 ZwPlugPlayControl
7074
       1839  726 00093960 ZwPowerInformation
7075
       1840  727 00094550 ZwPrePrepareComplete
7076
       1841  728 00094560 ZwPrePrepareEnlistment
7077
       1842  729 00094570 ZwPrepareComplete
7078
       1843  72A 00094580 ZwPrepareEnlistment
7079
       1844  72B 00094590 ZwPrivilegeCheck
7080
       1845  72C 000945A0 ZwPrivilegeObjectAuditAlarm
7081
       1846  72D 000945B0 ZwPrivilegedServiceAuditAlarm
7082
       1847  72E 000945C0 ZwPropagationComplete
7083
       1848  72F 000945D0 ZwPropagationFailed
7084
       1849  730 00093870 ZwProtectVirtualMemory
7085
       1850  731 000945E0 ZwPulseEvent
7086
       1851  732 00093740 ZwQueryAttributesFile
7087
       1852  733 000945F0 ZwQueryBootEntryOrder
7088
       1853  734 00094600 ZwQueryBootOptions
7089
       1854  735 00094610 ZwQueryDebugFilterState
7090
       1855  736 000934C0 ZwQueryDefaultLocale
7091
       1856  737 000937B0 ZwQueryDefaultUILanguage
7092
       1857  738 000936C0 ZwQueryDirectoryFile
7093
       1858  739 00094620 ZwQueryDirectoryObject
7094
       1859  73A 00094630 ZwQueryDriverEntryOrder
7095
       1860  73B 00094640 ZwQueryEaFile
7096
       1861  73C 000938D0 ZwQueryEvent
7097
       1862  73D 00094650 ZwQueryFullAttributesFile
7098
       1863  73E 00094660 ZwQueryInformationAtom
7099
       1864  73F 00094670 ZwQueryInformationEnlistment
7100
       1865  740 00093480 ZwQueryInformationFile
7101
       1866  741 00094680 ZwQueryInformationJobObject
7102
       1867  742 00094690 ZwQueryInformationPort
7103
       1868  743 00093500 ZwQueryInformationProcess
7104
       1869  744 000946A0 ZwQueryInformationResourceManager
7105
       1870  745 000935C0 ZwQueryInformationThread
7106
       1871  746 00093580 ZwQueryInformationToken
7107
       1872  747 000946B0 ZwQueryInformationTransaction
7108
       1873  748 000946C0 ZwQueryInformationTransactionManager
7109
       1874  749 000946D0 ZwQueryInformationWorkerFactory
7110
       1875  74A 000946E0 ZwQueryInstallUILanguage
7111
       1876  74B 000946F0 ZwQueryIntervalProfile
7112
       1877  74C 00094700 ZwQueryIoCompletion
7113
       1878  74D 000934D0 ZwQueryKey
7114
       1879  74E 00094710 ZwQueryLicenseValue
7115
       1880  74F 00094720 ZwQueryMultipleValueKey
7116
       1881  750 00094730 ZwQueryMutant
7117
       1882  751 00093470 ZwQueryObject
7118
       1883  752 00094740 ZwQueryOpenSubKeys
7119
       1884  753 00094750 ZwQueryOpenSubKeysEx
7120
       1885  754 00093680 ZwQueryPerformanceCounter
7121
       1886  755 00094760 ZwQueryPortInformationProcess
7122
       1887  756 00094770 ZwQueryQuotaInformationFile
7123
       1888  757 00093880 ZwQuerySection
7124
       1889  758 00094780 ZwQuerySecurityAttributesToken
7125
       1890  759 00094790 ZwQuerySecurityObject
7126
       1891  75A 000947A0 ZwQuerySemaphore
7127
       1892  75B 000947B0 ZwQuerySymbolicLinkObject
7128
       1893  75C 000947C0 ZwQuerySystemEnvironmentValue
7129
       1894  75D 000947D0 ZwQuerySystemEnvironmentValueEx
7130
       1895  75E 000936D0 ZwQuerySystemInformation
7131
       1896  75F 000947E0 ZwQuerySystemInformationEx
7132
       1897  760 00093910 ZwQuerySystemTime
7133
       1898  761 000936F0 ZwQueryTimer
7134
       1899  762 000947F0 ZwQueryTimerResolution
7135
       1900  763 000934E0 ZwQueryValueKey
7136
       1901  764 000935A0 ZwQueryVirtualMemory
7137
       1902  765 00093800 ZwQueryVolumeInformationFile
7138
       1903  766 00094800 ZwQueryWnfStateData
7139
       1904  767 00094810 ZwQueryWnfStateNameInformation
7140
       1905  768 000937C0 ZwQueueApcThread
7141
       1906  769 00094820 ZwQueueApcThreadEx
7142
       1907  76A 00094830 ZwRaiseException
7143
       1908  76B 00094840 ZwRaiseHardError
7144
       1909  76C 000933D0 ZwReadFile
7145
       1910  76D 00093650 ZwReadFileScatter
7146
       1911  76E 00094850 ZwReadOnlyEnlistment
7147
       1912  76F 000938B0 ZwReadRequestData
7148
       1913  770 00093760 ZwReadVirtualMemory
7149
       1914  771 00094860 ZwRecoverEnlistment
7150
       1915  772 00094870 ZwRecoverResourceManager
7151
       1916  773 00094880 ZwRecoverTransactionManager
7152
       1917  774 00094890 ZwRegisterProtocolAddressInformation
7153
       1918  775 000948A0 ZwRegisterThreadTerminatePort
7154
       1919  776 000948B0 ZwReleaseKeyedEvent
7155
       1920  777 00093570 ZwReleaseMutant
7156
       1921  778 00093410 ZwReleaseSemaphore
7157
       1922  779 000948C0 ZwReleaseWorkerFactoryWorker
7158
       1923  77A 00093400 ZwRemoveIoCompletion
7159
       1924  77B 000948D0 ZwRemoveIoCompletionEx
7160
       1925  77C 000948E0 ZwRemoveProcessDebug
7161
       1926  77D 000948F0 ZwRenameKey
7162
       1927  77E 00094900 ZwRenameTransactionManager
7163
       1928  77F 00094910 ZwReplaceKey
7164
       1929  780 00094920 ZwReplacePartitionUnit
7165
       1930  781 00093430 ZwReplyPort
7166
       1931  782 00093420 ZwReplyWaitReceivePort
7167
       1932  783 00093620 ZwReplyWaitReceivePortEx
7168
       1933  784 00094930 ZwReplyWaitReplyPort
7169
       1934  785 00094940 ZwRequestPort
7170
       1935  786 00093590 ZwRequestWaitReplyPort
7171
       1936  787 00094950 ZwResetEvent
7172
       1937  788 00094960 ZwResetWriteWatch
7173
       1938  789 00094970 ZwRestoreKey
7174
       1939  78A 00094980 ZwResumeProcess
7175
       1940  78B 00093890 ZwResumeThread
7176
       1941  78C 00094990 ZwRevertContainerImpersonation
7177
       1942  78D 000949A0 ZwRollbackComplete
7178
       1943  78E 000949B0 ZwRollbackEnlistment
7179
       1944  78F 000949C0 ZwRollbackTransaction
7180
       1945  790 000949D0 ZwRollforwardTransactionManager
7181
       1946  791 000949E0 ZwSaveKey
7182
       1947  792 000949F0 ZwSaveKeyEx
7183
       1948  793 00094A00 ZwSaveMergedKeys
7184
       1949  794 00094A10 ZwSecureConnectPort
7185
       1950  795 00094A20 ZwSerializeBoot
7186
       1951  796 00094A30 ZwSetBootEntryOrder
7187
       1952  797 00094A40 ZwSetBootOptions
7188
       1953  798 00094A50 ZwSetCachedSigningLevel
7189
       1954  799 00094A60 ZwSetContextThread
7190
       1955  79A 00094A70 ZwSetDebugFilterState
7191
       1956  79B 00094A80 ZwSetDefaultHardErrorPort
7192
       1957  79C 00094A90 ZwSetDefaultLocale
7193
       1958  79D 00094AA0 ZwSetDefaultUILanguage
7194
       1959  79E 00094AB0 ZwSetDriverEntryOrder
7195
       1960  79F 00094AC0 ZwSetEaFile
7196
       1961  7A0 00093450 ZwSetEvent
7197
       1962  7A1 00093640 ZwSetEventBoostPriority
7198
       1963  7A2 00094AD0 ZwSetHighEventPair
7199
       1964  7A3 00094AE0 ZwSetHighWaitLowEventPair
7200
       1965  7A4 00094AF0 ZwSetIRTimer
7201
       1966  7A5 00094B00 ZwSetInformationDebugObject
7202
       1967  7A6 00094B10 ZwSetInformationEnlistment
7203
       1968  7A7 000935E0 ZwSetInformationFile
7204
       1969  7A8 00094B20 ZwSetInformationJobObject
7205
       1970  7A9 00094B30 ZwSetInformationKey
7206
       1971  7AA 00093930 ZwSetInformationObject
7207
       1972  7AB 00093530 ZwSetInformationProcess
7208
       1973  7AC 00094B40 ZwSetInformationResourceManager
7209
       1974  7AD 00094B50 ZwSetInformationSymbolicLink
7210
       1975  7AE 00093440 ZwSetInformationThread
7211
       1976  7AF 00094B60 ZwSetInformationToken
7212
       1977  7B0 00094B70 ZwSetInformationTransaction
7213
       1978  7B1 00094B80 ZwSetInformationTransactionManager
7214
       1979  7B2 00094B90 ZwSetInformationVirtualMemory
7215
       1980  7B3 00094BA0 ZwSetInformationWorkerFactory
7216
       1981  7B4 00094BB0 ZwSetIntervalProfile
7217
       1982  7B5 00094BC0 ZwSetIoCompletion
7218
       1983  7B6 00094BD0 ZwSetIoCompletionEx
7219
       1984  7B7 00094BE0 ZwSetLdtEntries
7220
       1985  7B8 00094BF0 ZwSetLowEventPair
7221
       1986  7B9 00094C00 ZwSetLowWaitHighEventPair
7222
       1987  7BA 00094C10 ZwSetQuotaInformationFile
7223
       1988  7BB 00094C20 ZwSetSecurityObject
7224
       1989  7BC 00094C30 ZwSetSystemEnvironmentValue
7225
       1990  7BD 00094C40 ZwSetSystemEnvironmentValueEx
7226
       1991  7BE 00094C50 ZwSetSystemInformation
7227
       1992  7BF 00094C60 ZwSetSystemPowerState
7228
       1993  7C0 00094C70 ZwSetSystemTime
7229
       1994  7C1 00094C80 ZwSetThreadExecutionState
7230
       1995  7C2 00093990 ZwSetTimer
7231
       1996  7C3 00094C90 ZwSetTimer2
7232
       1997  7C4 00094CA0 ZwSetTimerEx
7233
       1998  7C5 00094CB0 ZwSetTimerResolution
7234
       1999  7C6 00094CC0 ZwSetUuidSeed
7235
       2000  7C7 00093970 ZwSetValueKey
7236
       2001  7C8 00094CD0 ZwSetVolumeInformationFile
7237
       2002  7C9 00094CE0 ZwSetWnfProcessNotificationEvent
7238
       2003  7CA 00094CF0 ZwShutdownSystem
7239
       2004  7CB 00094D00 ZwShutdownWorkerFactory
7240
       2005  7CC 00094D10 ZwSignalAndWaitForSingleObject
7241
       2006  7CD 00094D20 ZwSinglePhaseReject
7242
       2007  7CE 00094D30 ZwStartProfile
7243
       2008  7CF 00094D40 ZwStopProfile
7244
       2009  7D0 00094D50 ZwSubscribeWnfStateChange
7245
       2010  7D1 00094D60 ZwSuspendProcess
7246
       2011  7D2 00094D70 ZwSuspendThread
7247
       2012  7D3 00094D80 ZwSystemDebugControl
7248
       2013  7D4 00094D90 ZwTerminateJobObject
7249
       2014  7D5 00093630 ZwTerminateProcess
7250
       2015  7D6 000938A0 ZwTerminateThread
7251
       2016  7D7 00094DA0 ZwTestAlert
7252
       2017  7D8 00094DB0 ZwThawRegistry
7253
       2018  7D9 00094DC0 ZwThawTransactions
7254
       2019  7DA 00094DD0 ZwTraceControl
7255
       2020  7DB 00093950 ZwTraceEvent
7256
       2021  7DC 00094DE0 ZwTranslateFilePath
7257
       2022  7DD 00094DF0 ZwUmsThreadYield
7258
       2023  7DE 00094E00 ZwUnloadDriver
7259
       2024  7DF 00094E10 ZwUnloadKey
7260
       2025  7E0 00094E20 ZwUnloadKey2
7261
       2026  7E1 00094E30 ZwUnloadKeyEx
7262
       2027  7E2 00094E40 ZwUnlockFile
7263
       2028  7E3 00094E50 ZwUnlockVirtualMemory
7264
       2029  7E4 00093610 ZwUnmapViewOfSection
7265
       2030  7E5 00094E60 ZwUnmapViewOfSectionEx
7266
       2031  7E6 00094E70 ZwUnsubscribeWnfStateChange
7267
       2032  7E7 00094E80 ZwUpdateWnfStateData
7268
       2033  7E8 00094E90 ZwVdmControl
7269
       2034  7E9 00094EA0 ZwWaitForAlertByThreadId
7270
       2035  7EA 00094EB0 ZwWaitForDebugEvent
7271
       2036  7EB 00094EC0 ZwWaitForKeyedEvent
7272
       2037  7EC 00093920 ZwWaitForMultipleObjects
7273
       2038  7ED 00093510 ZwWaitForMultipleObjects32
7274
       2039  7EE 000933B0 ZwWaitForSingleObject
7275
       2040  7EF 00094ED0 ZwWaitForWorkViaWorkerFactory
7276
       2041  7F0 00094EE0 ZwWaitHighEventPair
7277
       2042  7F1 00094EF0 ZwWaitLowEventPair
7278
       2043  7F2 00093380 ZwWorkerFactoryWorkerReady
7279
       2044  7F3 000933F0 ZwWriteFile
7280
       2045  7F4 00093520 ZwWriteFileGather
7281
       2046  7F5 000938E0 ZwWriteRequestData
7282
       2047  7F6 00093710 ZwWriteVirtualMemory
7283
       2048  7F7 000937D0 ZwYieldExecution
7284
       2049  7F8 00083D50 __C_specific_handler
7285
       2050  7F9 00096080 __chkstk
7286
       2051  7FA 00083F10 __isascii
7287
       2052  7FB 00083F30 __iscsym
7288
       2053  7FC 00083F80 __iscsymf
7289
       2054  7FD 000756F0 __misaligned_access
7290
       2055  7FE 00083FC0 __toascii
7291
       2056  7FF 000841E0 _atoi64
7292
       2057  800 000748E0 _errno
7293
       2058  801 00140010 _fltused
7294
       2059  802 00084250 _i64toa
7295
       2060  803 0008DA60 _i64toa_s
7296
       2061  804 00084430 _i64tow
7297
       2062  805 0008DD50 _i64tow_s
7298
       2063  806 00084290 _itoa
7299
       2064  807 0008DA90 _itoa_s
7300
       2065  808 00084470 _itow
7301
       2066  809 0008DD80 _itow_s
7302
       2067  80A 00084600 _lfind
7303
       2068  80B 000846C0 _local_unwind
7304
       2069  80C 000842C0 _ltoa
7305
       2070  80D 0008DAC0 _ltoa_s
7306
       2071  80E 000844A0 _ltow
7307
       2072  80F 0008DDB0 _ltow_s
7308
       2073  810 0008E070 _makepath_s
7309
       2074  811 000846F0 _memccpy
7310
       2075  812 00084780 _memicmp
7311
       2076  813 00096DC0 _setjmp
7312
       2077  814 00096E80 _setjmpex
7313
       2078  815 000847A0 _snprintf
7314
       2079  816 0008E1B0 _snprintf_s
7315
       2080  817 0008E280 _snscanf_s
7316
       2081  818 00084850 _snwprintf
7317
       2082  819 0008E2C0 _snwprintf_s
7318
       2083  81A 0008E3A0 _snwscanf_s
7319
       2084  81B 00084930 _splitpath
7320
       2085  81C 0008E3E0 _splitpath_s
7321
       2086  81D 00084C80 _strcmpi
7322
       2087  81E 00084C80 _stricmp
7323
       2088  81F 00084C90 _strlwr
7324
       2089  820 00084CC0 _strlwr_s
7325
       2090  821 00084D80 _strnicmp
7326
       2091  822 0008E680 _strnset_s
7327
       2092  823 0008E710 _strset_s
7328
       2093  824 00084D90 _strupr
7329
       2094  825 00084DE0 _strupr_s
7330
       2095  826 00084E50 _swprintf
7331
       2096  827 000842F0 _ui64toa
7332
       2097  828 0008DAF0 _ui64toa_s
7333
       2098  829 000844D0 _ui64tow
7334
       2099  82A 0008DDE0 _ui64tow_s
7335
       2100  82B 00084350 _ultoa
7336
       2101  82C 0008DB10 _ultoa_s
7337
       2102  82D 000844F0 _ultow
7338
       2103  82E 0008DE00 _ultow_s
7339
       2104  82F 00084F10 _vscwprintf
7340
       2105  830 00085080 _vsnprintf
7341
       2106  831 0008E1E0 _vsnprintf_s
7342
       2107  832 00085150 _vsnwprintf
7343
       2108  833 0008E2F0 _vsnwprintf_s
7344
       2109  834 00084FC0 _vswprintf
7345
       2110  835 00085250 _wcsicmp
7346
       2111  836 000852A0 _wcslwr
7347
       2112  837 000852F0 _wcslwr_s
7348
       2113  838 00085370 _wcsnicmp
7349
       2114  839 000853D0 _wcsnset_s
7350
       2115  83A 00085460 _wcsset_s
7351
       2116  83B 000854C0 _wcstoi64
7352
       2117  83C 000854F0 _wcstoui64
7353
       2118  83D 00085790 _wcsupr
7354
       2119  83E 000857D0 _wcsupr_s
7355
       2120  83F 0008E770 _wmakepath_s
7356
       2121  840 0008E8E0 _wsplitpath_s
7357
       2122  841 00085850 _wtoi
7358
       2123  842 00085880 _wtoi64
7359
       2124  843 000858A0 _wtol
7360
       2125  844 000858C0 abs
7361
       2126  845 000858D0 atan
7362
       2127  846 00085B40 atan2
7363
       2128  847 00084200 atoi
7364
       2129  848 00084230 atol
7365
       2130  849 00086310 bsearch
7366
       2131  84A 00086420 ceil
7367
       2132  84B 00086540 cos
7368
       2133  84C 00086E50 fabs
7369
       2134  84D 00086F40 floor
7370
       2135  84E 00083FD0 isalnum
7371
       2136  84F 00084000 isalpha
7372
       2137  850 00084030 iscntrl
7373
       2138  851 00084060 isdigit
7374
       2139  852 00084090 isgraph
7375
       2140  853 000840C0 islower
7376
       2141  854 000840F0 isprint
7377
       2142  855 00084120 ispunct
7378
       2143  856 00084150 isspace
7379
       2144  857 00084180 isupper
7380
       2145  858 00087070 iswalnum
7381
       2146  859 00087080 iswalpha
7382
       2147  85A 00087090 iswascii
7383
       2148  85B 00087140 iswctype
7384
       2149  85C 000870B0 iswdigit
7385
       2150  85D 000870C0 iswgraph
7386
       2151  85E 000870D0 iswlower
7387
       2152  85F 000870E0 iswprint
7388
       2153  860 000870F0 iswspace
7389
       2154  861 00087100 iswxdigit
7390
       2155  862 000841B0 isxdigit
7391
       2156  863 000858C0 labs
7392
       2157  864 00087170 log
7393
       2158  865 00087460 longjmp
7394
       2159  866 00087490 mbstowcs
7395
       2160  867 00087560 memchr
7396
       2161  868 00087590 memcmp
7397
       2162  869 00097C40 memcpy
7398
       2163  86A 0008EBA0 memcpy_s
7399
       2164  86B 00097C40 memmove
7400
       2165  86C 0008EC50 memmove_s
7401
       2166  86D 00097F80 memset
7402
       2167  86E 00096F20 pow
7403
       2168  86F 00087670 qsort
7404
       2169  870 00087A70 qsort_s
7405
       2170  871 00086960 sin
7406
       2171  872 00087EA0 sprintf
7407
       2172  873 0008ECD0 sprintf_s
7408
       2173  874 00087F40 sqrt
7409
       2174  875 00088050 sscanf
7410
       2175  876 0008ED50 sscanf_s
7411
       2176  877 00088140 strcat
7412
       2177  878 0008EDB0 strcat_s
7413
       2178  879 000882A0 strchr
7414
       2179  87A 000882D0 strcmp
7415
       2180  87B 000881E0 strcpy
7416
       2181  87C 0008EE50 strcpy_s
7417
       2182  87D 00088390 strcspn
7418
       2183  87E 00088440 strlen
7419
       2184  87F 00088500 strncat
7420
       2185  880 0008EEE0 strncat_s
7421
       2186  881 000886B0 strncmp
7422
       2187  882 00088780 strncpy
7423
       2188  883 0008EFE0 strncpy_s
7424
       2189  884 000888F0 strnlen
7425
       2190  885 00088910 strpbrk
7426
       2191  886 000889C0 strrchr
7427
       2192  887 000889F0 strspn
7428
       2193  888 00088AC0 strstr
7429
       2194  889 0008F0D0 strtok_s
7430
       2195  88A 00088D60 strtol
7431
       2196  88B 00088DC0 strtoul
7432
       2197  88C 00084E50 swprintf
7433
       2198  88D 0008F1F0 swprintf_s
7434
       2199  88E 0008F280 swscanf_s
7435
       2200  88F 00088E00 tan
7436
       2201  890 000892B0 tolower
7437
       2202  891 000892F0 toupper
7438
       2203  892 00089360 towlower
7439
       2204  893 00089390 towupper
7440
       2205  894 000CADA0 vDbgPrintEx
7441
       2206  895 000CADD0 vDbgPrintExWithPrefix
7442
       2207  896 00089420 vsprintf
7443
       2208  897 0008ED00 vsprintf_s
7444
       2209  898 0008F220 vswprintf_s
7445
       2210  899 00089440 wcscat
7446
       2211  89A 0008F2E0 wcscat_s
7447
       2212  89B 000894B0 wcschr
7448
       2213  89C 000894E0 wcscmp
7449
       2214  89D 00089480 wcscpy
7450
       2215  89E 0008F390 wcscpy_s
7451
       2216  89F 00089520 wcscspn
7452
       2217  8A0 00089570 wcslen
7453
       2218  8A1 00089590 wcsncat
7454
       2219  8A2 0008F420 wcsncat_s
7455
       2220  8A3 000895E0 wcsncmp
7456
       2221  8A4 00089620 wcsncpy
7457
       2222  8A5 0008F530 wcsncpy_s
7458
       2223  8A6 00089670 wcsnlen
7459
       2224  8A7 000896A0 wcspbrk
7460
       2225  8A8 000896F0 wcsrchr
7461
       2226  8A9 00089730 wcsspn
7462
       2227  8AA 00089780 wcsstr
7463
       2228  8AB 0008F640 wcstok_s
7464
       2229  8AC 00089A00 wcstol
7465
       2230  8AD 00089AA0 wcstombs
7466
       2231  8AE 00089A60 wcstoul
7467
          8      00077370 [NONAME]
7468

7469
  Summary
7470

7471
        9000 .data
7472
        4000 .mrdata
7473
        E000 .pdata
7474
       42000 .rdata
7475
        1000 .reloc
7476
       66000 .rsrc
7477
       FC000 .text
7478
        1000 RT
7479
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
7480
Copyright (C) Microsoft Corporation.  All rights reserved.
7481

7482

7483
Dump of file ole32.dll
7484

7485
File Type: DLL
7486

7487
  Section contains the following exports for ole32.dll
7488

7489
    00000000 characteristics
7490
    559F30B9 time date stamp Thu Jul  9 19:40:57 2015
7491
        0.00 version
7492
         800 ordinal base
7493
         553 number of functions
7494
         545 number of names
7495

7496
    ordinal hint RVA      name
7497

7498
        840    0 00008F60 BindMoniker
7499
        841    1          CLIPFORMAT_UserFree (forwarded to COMBASE.CLIPFORMAT_UserFree)
7500
        842    2          CLIPFORMAT_UserFree64 (forwarded to COMBASE.CLIPFORMAT_UserFree64)
7501
        805    3 000BC340 CLIPFORMAT_UserFreeExt
7502
        843    4          CLIPFORMAT_UserMarshal (forwarded to COMBASE.CLIPFORMAT_UserMarshal)
7503
        844    5          CLIPFORMAT_UserMarshal64 (forwarded to COMBASE.CLIPFORMAT_UserMarshal64)
7504
        806    6 000BC350 CLIPFORMAT_UserMarshalExt
7505
        845    7          CLIPFORMAT_UserSize (forwarded to COMBASE.CLIPFORMAT_UserSize)
7506
        846    8          CLIPFORMAT_UserSize64 (forwarded to COMBASE.CLIPFORMAT_UserSize64)
7507
        807    9 000BC360 CLIPFORMAT_UserSizeExt
7508
        847    A          CLIPFORMAT_UserUnmarshal (forwarded to COMBASE.CLIPFORMAT_UserUnmarshal)
7509
        848    B          CLIPFORMAT_UserUnmarshal64 (forwarded to COMBASE.CLIPFORMAT_UserUnmarshal64)
7510
        808    C 000BC370 CLIPFORMAT_UserUnmarshalExt
7511
        849    D          CLSIDFromOle1Class (forwarded to api-ms-win-core-com-private-l1-1-1.CLSIDFromOle1Class)
7512
        850    E          CLSIDFromProgID (forwarded to api-ms-win-core-com-l1-1-0.CLSIDFromProgID)
7513
        851    F 00014260 CLSIDFromProgIDEx
7514
        852   10          CLSIDFromString (forwarded to api-ms-win-core-com-l1-1-0.CLSIDFromString)
7515
        853   11          CStdAsyncStubBuffer2_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Connect)
7516
        854   12          CStdAsyncStubBuffer2_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Disconnect)
7517
        855   13          CStdAsyncStubBuffer2_Release (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Release)
7518
        856   14          CStdAsyncStubBuffer_AddRef (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_AddRef)
7519
        857   15          CStdAsyncStubBuffer_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Connect)
7520
        858   16          CStdAsyncStubBuffer_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Disconnect)
7521
        859   17          CStdAsyncStubBuffer_Invoke (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Invoke)
7522
        860   18          CStdAsyncStubBuffer_QueryInterface (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_QueryInterface)
7523
        861   19          CStdAsyncStubBuffer_Release (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Release)
7524
        862   1A          CStdStubBuffer2_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_Connect)
7525
        863   1B          CStdStubBuffer2_CountRefs (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_CountRefs)
7526
        864   1C          CStdStubBuffer2_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_Disconnect)
7527
        865   1D          CStdStubBuffer2_QueryInterface (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_QueryInterface)
7528
        866   1E 0000F4F0 CheckInitDde
7529
        867   1F 00009870 CleanROTForApartment
7530
        809   20 0000EFC0 ClipboardProcessUninitialize
7531
        868   21          CoAddRefServerProcess (forwarded to api-ms-win-core-com-l1-1-0.CoAddRefServerProcess)
7532
        869   22 0003CD10 CoAicGetTokenForCOM
7533
        870   23 0000B7A0 CoAllowSetForegroundWindow
7534
        871   24          CoAllowUnmarshalerCLSID (forwarded to api-ms-win-core-com-l1-1-0.CoAllowUnmarshalerCLSID)
7535
        872   25 0004AB10 CoBuildVersion
7536
        873   26          CoCancelCall (forwarded to api-ms-win-core-com-l1-1-0.CoCancelCall)
7537
        874   27 0003CD90 CoCheckElevationEnabled
7538
        875   28          CoCopyProxy (forwarded to api-ms-win-core-com-l1-1-0.CoCopyProxy)
7539
        876   29          CoCreateFreeThreadedMarshaler (forwarded to api-ms-win-core-com-l1-1-0.CoCreateFreeThreadedMarshaler)
7540
        877   2A          CoCreateGuid (forwarded to api-ms-win-core-com-l1-1-0.CoCreateGuid)
7541
        878   2B          CoCreateInstance (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstance)
7542
        879   2C          CoCreateInstanceEx (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstanceEx)
7543
        880   2D          CoCreateInstanceFromApp (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstanceFromApp)
7544
        881   2E          CoCreateObjectInContext (forwarded to api-ms-win-core-com-private-l1-1-1.CoCreateObjectInContext)
7545
        882   2F          CoDeactivateObject (forwarded to api-ms-win-core-com-private-l1-1-1.CoDeactivateObject)
7546
        883   30          CoDecodeProxy (forwarded to COMBASE.CoDecodeProxy)
7547
        884   31          CoDecrementMTAUsage (forwarded to api-ms-win-core-com-l1-1-0.CoDecrementMTAUsage)
7548
        885   32          CoDisableCallCancellation (forwarded to api-ms-win-core-com-l1-1-0.CoDisableCallCancellation)
7549
        886   33          CoDisconnectContext (forwarded to api-ms-win-core-com-l1-1-0.CoDisconnectContext)
7550
        887   34          CoDisconnectObject (forwarded to api-ms-win-core-com-l1-1-0.CoDisconnectObject)
7551
        888   35 0004CB80 CoDosDateTimeToFileTime
7552
        889   36          CoEnableCallCancellation (forwarded to api-ms-win-core-com-l1-1-0.CoEnableCallCancellation)
7553
        890   37 000130F0 CoFileTimeNow
7554
        891   38 0004CBC0 CoFileTimeToDosDateTime
7555
        892   39 000254D0 CoFreeAllLibraries
7556
        893   3A 0004AB20 CoFreeLibrary
7557
        894   3B          CoFreeUnusedLibraries (forwarded to api-ms-win-core-com-l1-1-0.CoFreeUnusedLibraries)
7558
        895   3C          CoFreeUnusedLibrariesEx (forwarded to api-ms-win-core-com-l1-1-0.CoFreeUnusedLibrariesEx)
7559
        896   3D          CoGetActivationState (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetActivationState)
7560
        897   3E          CoGetApartmentID (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetApartmentID)
7561
        898   3F          CoGetApartmentType (forwarded to api-ms-win-core-com-l1-1-0.CoGetApartmentType)
7562
        899   40          CoGetCallContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetCallContext)
7563
        900   41          CoGetCallState (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetCallState)
7564
        901   42          CoGetCallerTID (forwarded to api-ms-win-core-com-l1-1-0.CoGetCallerTID)
7565
        902   43          CoGetCancelObject (forwarded to api-ms-win-core-com-l1-1-0.CoGetCancelObject)
7566
        903   44          CoGetClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoGetClassObject)
7567
        904   45          CoGetClassVersion (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetClassVersion)
7568
        905   46          CoGetComCatalog (forwarded to api-ms-win-core-com-private-l1-1-1.GetCatalogHelper)
7569
        906   47          CoGetContextToken (forwarded to api-ms-win-core-com-l1-1-0.CoGetContextToken)
7570
        907   48          CoGetCurrentLogicalThreadId (forwarded to api-ms-win-core-com-l1-1-0.CoGetCurrentLogicalThreadId)
7571
        908   49          CoGetCurrentProcess (forwarded to api-ms-win-core-com-l1-1-0.CoGetCurrentProcess)
7572
        909   4A          CoGetDefaultContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetDefaultContext)
7573
        910   4B          CoGetInstanceFromFile (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetInstanceFromFile)
7574
        911   4C          CoGetInstanceFromIStorage (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetInstanceFromIStorage)
7575
        912   4D 000566F0 CoGetInterceptor
7576
        913   4E 0000B3B0 CoGetInterceptorForOle32
7577
        914   4F 00023F50 CoGetInterceptorFromTypeInfo
7578
        915   50          CoGetInterfaceAndReleaseStream (forwarded to api-ms-win-core-com-l1-1-0.CoGetInterfaceAndReleaseStream)
7579
        916   51          CoGetMalloc (forwarded to api-ms-win-core-com-l1-1-0.CoGetMalloc)
7580
        917   52          CoGetMarshalSizeMax (forwarded to api-ms-win-core-com-l1-1-0.CoGetMarshalSizeMax)
7581
        918   53          CoGetModuleType (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetModuleType)
7582
        919   54 00009D70 CoGetObject
7583
        920   55          CoGetObjectContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetObjectContext)
7584
        921   56          CoGetPSClsid (forwarded to api-ms-win-core-com-l1-1-0.CoGetPSClsid)
7585
        922   57          CoGetProcessIdentifier (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetProcessIdentifier)
7586
        923   58          CoGetStandardMarshal (forwarded to api-ms-win-core-com-l1-1-0.CoGetStandardMarshal)
7587
        924   59          CoGetStdMarshalEx (forwarded to api-ms-win-core-com-l1-1-0.CoGetStdMarshalEx)
7588
        925   5A          CoGetSystemSecurityPermissions (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetSystemSecurityPermissions)
7589
        926   5B 0003CDA0 CoGetSystemWow64DirectoryW
7590
        927   5C          CoGetTreatAsClass (forwarded to api-ms-win-core-com-l1-1-0.CoGetTreatAsClass)
7591
        928   5D          CoHandlePriorityEventsFromMessagePump (forwarded to COMBASE.#111)
7592
        929   5E          CoImpersonateClient (forwarded to api-ms-win-core-com-l1-1-0.CoImpersonateClient)
7593
        930   5F          CoIncrementMTAUsage (forwarded to api-ms-win-core-com-l1-1-0.CoIncrementMTAUsage)
7594
        931   60 00013870 CoInitialize
7595
        932   61          CoInitializeEx (forwarded to api-ms-win-core-com-l1-1-0.CoInitializeEx)
7596
        933   62          CoInitializeSecurity (forwarded to api-ms-win-core-com-l1-1-0.CoInitializeSecurity)
7597
        934   63 00025FA0 CoInitializeWOW
7598
        935   64 0004AB30 CoInstall
7599
        936   65          CoInvalidateRemoteMachineBindings (forwarded to api-ms-win-core-com-private-l1-1-1.CoInvalidateRemoteMachineBindings)
7600
        937   66          CoIsHandlerConnected (forwarded to api-ms-win-core-com-l1-1-0.CoIsHandlerConnected)
7601
        938   67 0001EAA0 CoIsOle1Class
7602
        939   68 000201C0 CoLoadLibrary
7603
        940   69          CoLockObjectExternal (forwarded to api-ms-win-core-com-l1-1-0.CoLockObjectExternal)
7604
        941   6A          CoMarshalHresult (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalHresult)
7605
        942   6B          CoMarshalInterThreadInterfaceInStream (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalInterThreadInterfaceInStream)
7606
        943   6C          CoMarshalInterface (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalInterface)
7607
        944   6D          CoPopServiceDomain (forwarded to api-ms-win-core-com-private-l1-1-1.CoPopServiceDomain)
7608
        945   6E          CoPushServiceDomain (forwarded to api-ms-win-core-com-private-l1-1-1.CoPushServiceDomain)
7609
        946   6F          CoQueryAuthenticationServices (forwarded to api-ms-win-core-com-l1-1-0.CoQueryAuthenticationServices)
7610
        947   70          CoQueryClientBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoQueryClientBlanket)
7611
        948   71          CoQueryProxyBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoQueryProxyBlanket)
7612
        949   72 0002F9F0 CoQueryReleaseObject
7613
        950   73          CoReactivateObject (forwarded to api-ms-win-core-com-private-l1-1-1.CoReactivateObject)
7614
        951   74          CoRegisterActivationFilter (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterActivationFilter)
7615
        952   75          CoRegisterChannelHook (forwarded to COMBASE.#112)
7616
        953   76          CoRegisterClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterClassObject)
7617
        954   77          CoRegisterInitializeSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRegisterInitializeSpy)
7618
        955   78          CoRegisterMallocSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRegisterMallocSpy)
7619
        956   79 00025FB0 CoRegisterMessageFilter
7620
        957   7A          CoRegisterPSClsid (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterPSClsid)
7621
        958   7B          CoRegisterSurrogate (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterSurrogate)
7622
        959   7C 00025FC0 CoRegisterSurrogateEx
7623
        960   7D          CoReleaseMarshalData (forwarded to api-ms-win-core-com-l1-1-0.CoReleaseMarshalData)
7624
        961   7E          CoReleaseServerProcess (forwarded to api-ms-win-core-com-l1-1-0.CoReleaseServerProcess)
7625
        962   7F          CoResumeClassObjects (forwarded to api-ms-win-core-com-l1-1-0.CoResumeClassObjects)
7626
        963   80          CoRetireServer (forwarded to api-ms-win-core-com-private-l1-1-1.CoRetireServer)
7627
        964   81          CoRevertToSelf (forwarded to api-ms-win-core-com-l1-1-0.CoRevertToSelf)
7628
        965   82          CoRevokeClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoRevokeClassObject)
7629
        966   83          CoRevokeInitializeSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRevokeInitializeSpy)
7630
        967   84          CoRevokeMallocSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRevokeMallocSpy)
7631
        968   85          CoSetCancelObject (forwarded to api-ms-win-core-com-l1-1-0.CoSetCancelObject)
7632
        969   86          CoSetMessageDispatcher (forwarded to COMBASE.#110)
7633
        970   87          CoSetProxyBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoSetProxyBlanket)
7634
        971   88 00030090 CoSetState
7635
        972   89          CoSuspendClassObjects (forwarded to api-ms-win-core-com-l1-1-0.CoSuspendClassObjects)
7636
        973   8A          CoSwitchCallContext (forwarded to api-ms-win-core-com-l1-1-0.CoSwitchCallContext)
7637
        974   8B          CoTaskMemAlloc (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemAlloc)
7638
        975   8C          CoTaskMemFree (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemFree)
7639
        976   8D          CoTaskMemRealloc (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemRealloc)
7640
        977   8E          CoTestCancel (forwarded to api-ms-win-core-com-l1-1-0.CoTestCancel)
7641
        978   8F 0004C360 CoTreatAsClass
7642
        979   90          CoUninitialize (forwarded to api-ms-win-core-com-l1-1-0.CoUninitialize)
7643
        980   91 00025FD0 CoUnloadingWOW
7644
        981   92          CoUnmarshalHresult (forwarded to api-ms-win-core-com-l1-1-0.CoUnmarshalHresult)
7645
        982   93          CoUnmarshalInterface (forwarded to api-ms-win-core-com-l1-1-0.CoUnmarshalInterface)
7646
        983   94          CoVrfCheckThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfCheckThreadState)
7647
        984   95          CoVrfGetThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfGetThreadState)
7648
        985   96          CoVrfReleaseThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfReleaseThreadState)
7649
        986   97          CoWaitForMultipleHandles (forwarded to api-ms-win-core-com-l1-1-0.CoWaitForMultipleHandles)
7650
        987   98          CoWaitForMultipleObjects (forwarded to api-ms-win-core-com-l1-1-0.CoWaitForMultipleObjects)
7651
        988   99 0002F9F0 ComPs_NdrDllCanUnloadNow
7652
        989   9A 00056A50 ComPs_NdrDllGetClassObject
7653
        990   9B 00057090 ComPs_NdrDllRegisterProxy
7654
        991   9C 000570D0 ComPs_NdrDllUnregisterProxy
7655
        992   9D 0003D740 CreateAntiMoniker
7656
        993   9E 0000D450 CreateBindCtx
7657
        994   9F 0003F260 CreateClassMoniker
7658
        995   A0 000134C0 CreateDataAdviseHolder
7659
        996   A1 00078E20 CreateDataCache
7660
        997   A2          CreateErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoCreateErrorInfo)
7661
        998   A3 0001F490 CreateFileMoniker
7662
        999   A4 0000AB60 CreateGenericComposite
7663
       1000   A5 000201A0 CreateILockBytesOnHGlobal
7664
       1001   A6 00003EA0 CreateItemMoniker
7665
       1002   A7 0003D790 CreateObjrefMoniker
7666
       1003   A8 00013420 CreateOleAdviseHolder
7667
       1004   A9 000093B0 CreatePointerMoniker
7668
       1005   AA 000429A0 CreateStdProgressIndicator
7669
       1006   AB          CreateStreamOnHGlobal (forwarded to api-ms-win-core-com-l1-1-0.CreateStreamOnHGlobal)
7670
       1007   AC          DcomChannelSetHResult (forwarded to COMBASE.DcomChannelSetHResult)
7671
       1008   AD 00064910 DdeBindToObject
7672
       1009   AE 0003CDB0 DeletePatternAndExtensionTables
7673
       1010   AF 00003D20 DestroyRunningObjectTable
7674
       1011   B0          DllDebugObjectRPCHook (forwarded to api-ms-win-core-com-private-l1-1-1.DllDebugObjectRPCHook)
7675
       1012   B1 0000A5E0 DllGetClassObject
7676
       1013   B2 0000A5E0 DllGetClassObjectWOW
7677
       1014   B3 00030090 DllRegisterServer
7678
       1015   B4 00092A70 DoDragDrop
7679
       1016   B5 00092C20 DragDropSetFDT
7680
       1017   B6          EnableHookObject (forwarded to api-ms-win-core-com-private-l1-1-1.EnableHookObject)
7681
       1018   B7 00045CD0 FindExt
7682
       1019   B8 0003D0A0 FmtIdToPropStgName
7683
       1020   B9 00024B80 FreePropVariantArray
7684
       1021   BA 00003BD0 GetActiveObjectExt
7685
       1022   BB 00008940 GetClassFile
7686
       1023   BC 0003D0B0 GetConvertStg
7687
       1024   BD 0003D0C0 GetDocumentBitStg
7688
       1025   BE          GetErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetErrorInfo)
7689
       1026   BF 0003D0D0 GetHGlobalFromILockBytes
7690
       1027   C0          GetHGlobalFromStream (forwarded to api-ms-win-core-com-l1-1-0.GetHGlobalFromStream)
7691
       1028   C1          GetHookInterface (forwarded to api-ms-win-core-com-private-l1-1-1.GetHookInterface)
7692
       1029   C2 000631F0 GetObjectFromRotByPath
7693
       1030   C3 000090F0 GetRunningObjectTable
7694
       1031   C4          HACCEL_UserFree (forwarded to COMBASE.HACCEL_UserFree)
7695
       1032   C5          HACCEL_UserFree64 (forwarded to COMBASE.HACCEL_UserFree64)
7696
       1033   C6          HACCEL_UserMarshal (forwarded to COMBASE.HACCEL_UserMarshal)
7697
       1034   C7          HACCEL_UserMarshal64 (forwarded to COMBASE.HACCEL_UserMarshal64)
7698
       1035   C8          HACCEL_UserSize (forwarded to COMBASE.HACCEL_UserSize)
7699
       1036   C9          HACCEL_UserSize64 (forwarded to COMBASE.HACCEL_UserSize64)
7700
       1037   CA          HACCEL_UserUnmarshal (forwarded to COMBASE.HACCEL_UserUnmarshal)
7701
       1038   CB          HACCEL_UserUnmarshal64 (forwarded to COMBASE.HACCEL_UserUnmarshal64)
7702
       1039   CC          HBITMAP_UserFree (forwarded to COMBASE.HBITMAP_UserFree)
7703
       1040   CD          HBITMAP_UserFree64 (forwarded to COMBASE.HBITMAP_UserFree64)
7704
       1041   CE          HBITMAP_UserMarshal (forwarded to COMBASE.HBITMAP_UserMarshal)
7705
       1042   CF          HBITMAP_UserMarshal64 (forwarded to COMBASE.HBITMAP_UserMarshal64)
7706
       1043   D0          HBITMAP_UserSize (forwarded to COMBASE.HBITMAP_UserSize)
7707
       1044   D1          HBITMAP_UserSize64 (forwarded to COMBASE.HBITMAP_UserSize64)
7708
       1045   D2          HBITMAP_UserUnmarshal (forwarded to COMBASE.HBITMAP_UserUnmarshal)
7709
       1046   D3          HBITMAP_UserUnmarshal64 (forwarded to COMBASE.HBITMAP_UserUnmarshal64)
7710
       1047   D4          HBRUSH_UserFree (forwarded to COMBASE.HBRUSH_UserFree)
7711
       1048   D5          HBRUSH_UserFree64 (forwarded to COMBASE.HBRUSH_UserFree64)
7712
       1049   D6          HBRUSH_UserMarshal (forwarded to COMBASE.HBRUSH_UserMarshal)
7713
       1050   D7          HBRUSH_UserMarshal64 (forwarded to COMBASE.HBRUSH_UserMarshal64)
7714
       1051   D8          HBRUSH_UserSize (forwarded to COMBASE.HBRUSH_UserSize)
7715
       1052   D9          HBRUSH_UserSize64 (forwarded to COMBASE.HBRUSH_UserSize64)
7716
       1053   DA          HBRUSH_UserUnmarshal (forwarded to COMBASE.HBRUSH_UserUnmarshal)
7717
       1054   DB          HBRUSH_UserUnmarshal64 (forwarded to COMBASE.HBRUSH_UserUnmarshal64)
7718
       1055   DC          HDC_UserFree (forwarded to COMBASE.HDC_UserFree)
7719
       1056   DD          HDC_UserFree64 (forwarded to COMBASE.HDC_UserFree64)
7720
       1057   DE          HDC_UserMarshal (forwarded to COMBASE.HDC_UserMarshal)
7721
       1058   DF          HDC_UserMarshal64 (forwarded to COMBASE.HDC_UserMarshal64)
7722
       1059   E0          HDC_UserSize (forwarded to COMBASE.HDC_UserSize)
7723
       1060   E1          HDC_UserSize64 (forwarded to COMBASE.HDC_UserSize64)
7724
       1061   E2          HDC_UserUnmarshal (forwarded to COMBASE.HDC_UserUnmarshal)
7725
       1062   E3          HDC_UserUnmarshal64 (forwarded to COMBASE.HDC_UserUnmarshal64)
7726
       1063   E4 0004D810 HENHMETAFILE_UserFree
7727
       1064   E5 0004D810 HENHMETAFILE_UserFree64
7728
       1065   E6 0004D860 HENHMETAFILE_UserMarshal
7729
       1066   E7 0004D930 HENHMETAFILE_UserMarshal64
7730
       1067   E8 0004DA10 HENHMETAFILE_UserSize
7731
       1068   E9 0004DA80 HENHMETAFILE_UserSize64
7732
       1069   EA 0004DB10 HENHMETAFILE_UserUnmarshal
7733
       1070   EB 0004DB90 HENHMETAFILE_UserUnmarshal64
7734
       1071   EC          HGLOBAL_UserFree (forwarded to COMBASE.HGLOBAL_UserFree)
7735
       1072   ED          HGLOBAL_UserFree64 (forwarded to COMBASE.HGLOBAL_UserFree64)
7736
       1073   EE          HGLOBAL_UserMarshal (forwarded to COMBASE.HGLOBAL_UserMarshal)
7737
       1074   EF          HGLOBAL_UserMarshal64 (forwarded to COMBASE.HGLOBAL_UserMarshal64)
7738
       1075   F0          HGLOBAL_UserSize (forwarded to COMBASE.HGLOBAL_UserSize)
7739
       1076   F1          HGLOBAL_UserSize64 (forwarded to COMBASE.HGLOBAL_UserSize64)
7740
       1077   F2          HGLOBAL_UserUnmarshal (forwarded to COMBASE.HGLOBAL_UserUnmarshal)
7741
       1078   F3          HGLOBAL_UserUnmarshal64 (forwarded to COMBASE.HGLOBAL_UserUnmarshal64)
7742
       1079   F4          HICON_UserFree (forwarded to COMBASE.HICON_UserFree)
7743
       1080   F5          HICON_UserFree64 (forwarded to COMBASE.HICON_UserFree64)
7744
       1081   F6          HICON_UserMarshal (forwarded to COMBASE.HICON_UserMarshal)
7745
       1082   F7          HICON_UserMarshal64 (forwarded to COMBASE.HICON_UserMarshal64)
7746
       1083   F8          HICON_UserSize (forwarded to COMBASE.HICON_UserSize)
7747
       1084   F9          HICON_UserSize64 (forwarded to COMBASE.HICON_UserSize64)
7748
       1085   FA          HICON_UserUnmarshal (forwarded to COMBASE.HICON_UserUnmarshal)
7749
       1086   FB          HICON_UserUnmarshal64 (forwarded to COMBASE.HICON_UserUnmarshal64)
7750
       1087   FC          HMENU_UserFree (forwarded to COMBASE.HMENU_UserFree)
7751
       1088   FD          HMENU_UserFree64 (forwarded to COMBASE.HMENU_UserFree64)
7752
       1089   FE          HMENU_UserMarshal (forwarded to COMBASE.HMENU_UserMarshal)
7753
       1090   FF          HMENU_UserMarshal64 (forwarded to COMBASE.HMENU_UserMarshal64)
7754
       1091  100          HMENU_UserSize (forwarded to COMBASE.HMENU_UserSize)
7755
       1092  101          HMENU_UserSize64 (forwarded to COMBASE.HMENU_UserSize64)
7756
       1093  102          HMENU_UserUnmarshal (forwarded to COMBASE.HMENU_UserUnmarshal)
7757
       1094  103          HMENU_UserUnmarshal64 (forwarded to COMBASE.HMENU_UserUnmarshal64)
7758
       1095  104 0004DC10 HMETAFILEPICT_UserFree
7759
       1096  105 0004DC10 HMETAFILEPICT_UserFree64
7760
       1097  106 0004DCA0 HMETAFILEPICT_UserMarshal
7761
       1098  107 0004DDE0 HMETAFILEPICT_UserMarshal64
7762
       1099  108 0004DF80 HMETAFILEPICT_UserSize
7763
       1100  109 0004E030 HMETAFILEPICT_UserSize64
7764
       1101  10A 0004E100 HMETAFILEPICT_UserUnmarshal
7765
       1102  10B 0004E180 HMETAFILEPICT_UserUnmarshal64
7766
       1103  10C 0004E200 HMETAFILE_UserFree
7767
       1104  10D 0004E200 HMETAFILE_UserFree64
7768
       1105  10E 0004E250 HMETAFILE_UserMarshal
7769
       1106  10F 0004E320 HMETAFILE_UserMarshal64
7770
       1107  110 0004E400 HMETAFILE_UserSize
7771
       1108  111 0004E470 HMETAFILE_UserSize64
7772
       1109  112 0004E500 HMETAFILE_UserUnmarshal
7773
       1110  113 0004E680 HMETAFILE_UserUnmarshal64
7774
       1111  114          HMONITOR_UserFree (forwarded to COMBASE.HMONITOR_UserFree)
7775
       1112  115          HMONITOR_UserFree64 (forwarded to COMBASE.HMONITOR_UserFree64)
7776
       1113  116          HMONITOR_UserMarshal (forwarded to COMBASE.HMONITOR_UserMarshal)
7777
       1114  117          HMONITOR_UserMarshal64 (forwarded to COMBASE.HMONITOR_UserMarshal64)
7778
       1115  118          HMONITOR_UserSize (forwarded to COMBASE.HMONITOR_UserSize)
7779
       1116  119          HMONITOR_UserSize64 (forwarded to COMBASE.HMONITOR_UserSize64)
7780
       1117  11A          HMONITOR_UserUnmarshal (forwarded to COMBASE.HMONITOR_UserUnmarshal)
7781
       1118  11B          HMONITOR_UserUnmarshal64 (forwarded to COMBASE.HMONITOR_UserUnmarshal64)
7782
       1119  11C          HPALETTE_UserFree (forwarded to COMBASE.HPALETTE_UserFree)
7783
       1120  11D          HPALETTE_UserFree64 (forwarded to COMBASE.HPALETTE_UserFree64)
7784
        810  11E 000BC380 HPALETTE_UserFreeExt
7785
       1121  11F          HPALETTE_UserMarshal (forwarded to COMBASE.HPALETTE_UserMarshal)
7786
       1122  120          HPALETTE_UserMarshal64 (forwarded to COMBASE.HPALETTE_UserMarshal64)
7787
        811  121 000BC3D0 HPALETTE_UserMarshalExt
7788
       1123  122          HPALETTE_UserSize (forwarded to COMBASE.HPALETTE_UserSize)
7789
       1124  123          HPALETTE_UserSize64 (forwarded to COMBASE.HPALETTE_UserSize64)
7790
        812  124 000BC3E0 HPALETTE_UserSizeExt
7791
       1125  125          HPALETTE_UserUnmarshal (forwarded to COMBASE.HPALETTE_UserUnmarshal)
7792
       1126  126          HPALETTE_UserUnmarshal64 (forwarded to COMBASE.HPALETTE_UserUnmarshal64)
7793
        813  127 000BC3F0 HPALETTE_UserUnmarshalExt
7794
        814  128          HRGN_UserFree (forwarded to COMBASE.HRGN_UserFree)
7795
        815  129          HRGN_UserMarshal (forwarded to COMBASE.HRGN_UserMarshal)
7796
        816  12A          HRGN_UserSize (forwarded to COMBASE.HRGN_UserSize)
7797
        817  12B          HRGN_UserUnmarshal (forwarded to COMBASE.HRGN_UserUnmarshal)
7798
       1127  12C          HWND_UserFree (forwarded to COMBASE.HWND_UserFree)
7799
       1128  12D          HWND_UserFree64 (forwarded to COMBASE.HWND_UserFree64)
7800
        818  12E 000254D0 HWND_UserFree64Ext
7801
        819  12F 000254D0 HWND_UserFreeExt
7802
       1129  130          HWND_UserMarshal (forwarded to COMBASE.HWND_UserMarshal)
7803
       1130  131          HWND_UserMarshal64 (forwarded to COMBASE.HWND_UserMarshal64)
7804
        824  132 000BC470 HWND_UserMarshal64Ext
7805
        825  133 000BC470 HWND_UserMarshalExt
7806
       1131  134          HWND_UserSize (forwarded to COMBASE.HWND_UserSize)
7807
       1132  135          HWND_UserSize64 (forwarded to COMBASE.HWND_UserSize64)
7808
        826  136 000BC480 HWND_UserSize64Ext
7809
        827  137 000BC480 HWND_UserSizeExt
7810
       1133  138          HWND_UserUnmarshal (forwarded to COMBASE.HWND_UserUnmarshal)
7811
       1134  139          HWND_UserUnmarshal64 (forwarded to COMBASE.HWND_UserUnmarshal64)
7812
        828  13A 000BC490 HWND_UserUnmarshal64Ext
7813
        829  13B 000BC490 HWND_UserUnmarshalExt
7814
       1135  13C          HkOleRegisterObject (forwarded to api-ms-win-core-com-private-l1-1-1.HkOleRegisterObject)
7815
       1136  13D          IIDFromString (forwarded to api-ms-win-core-com-l1-1-0.IIDFromString)
7816
       1137  13E 00094E50 IsAccelerator
7817
       1138  13F 0000BF50 IsEqualGUID
7818
       1139  140 000247F0 IsRoInitializeASTAAllowedInDesktop
7819
       1140  141 0002F9F0 IsValidIid
7820
       1141  142 0000D420 IsValidInterface
7821
       1142  143 0002F9F0 IsValidPtrIn
7822
       1143  144 0002F9F0 IsValidPtrOut
7823
       1144  145 0000D7E0 MkParseDisplayName
7824
       1145  146 00041CB0 MonikerCommonPrefixWith
7825
        830  147 000BC4A0 MonikerLoadTypeLib
7826
       1146  148 00041D70 MonikerRelativePathTo
7827
       1147  149          NdrOleInitializeExtension (forwarded to api-ms-win-core-com-private-l1-1-1.NdrOleInitializeExtension)
7828
       1148  14A          NdrProxyForwardingFunction10 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction10)
7829
       1149  14B          NdrProxyForwardingFunction11 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction11)
7830
       1150  14C          NdrProxyForwardingFunction12 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction12)
7831
       1151  14D          NdrProxyForwardingFunction13 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction13)
7832
       1152  14E          NdrProxyForwardingFunction14 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction14)
7833
       1153  14F          NdrProxyForwardingFunction15 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction15)
7834
       1154  150          NdrProxyForwardingFunction16 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction16)
7835
       1155  151          NdrProxyForwardingFunction17 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction17)
7836
       1156  152          NdrProxyForwardingFunction18 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction18)
7837
       1157  153          NdrProxyForwardingFunction19 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction19)
7838
       1158  154          NdrProxyForwardingFunction20 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction20)
7839
       1159  155          NdrProxyForwardingFunction21 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction21)
7840
       1160  156          NdrProxyForwardingFunction22 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction22)
7841
       1161  157          NdrProxyForwardingFunction23 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction23)
7842
       1162  158          NdrProxyForwardingFunction24 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction24)
7843
       1163  159          NdrProxyForwardingFunction25 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction25)
7844
       1164  15A          NdrProxyForwardingFunction26 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction26)
7845
       1165  15B          NdrProxyForwardingFunction27 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction27)
7846
       1166  15C          NdrProxyForwardingFunction28 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction28)
7847
       1167  15D          NdrProxyForwardingFunction29 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction29)
7848
       1168  15E          NdrProxyForwardingFunction3 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction3)
7849
       1169  15F          NdrProxyForwardingFunction30 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction30)
7850
       1170  160          NdrProxyForwardingFunction31 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction31)
7851
       1171  161          NdrProxyForwardingFunction32 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction32)
7852
       1172  162          NdrProxyForwardingFunction4 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction4)
7853
       1173  163          NdrProxyForwardingFunction5 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction5)
7854
       1174  164          NdrProxyForwardingFunction6 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction6)
7855
       1175  165          NdrProxyForwardingFunction7 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction7)
7856
       1176  166          NdrProxyForwardingFunction8 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction8)
7857
       1177  167          NdrProxyForwardingFunction9 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction9)
7858
       1178  168          ObjectStublessClient10 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient10)
7859
       1179  169          ObjectStublessClient11 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient11)
7860
       1180  16A          ObjectStublessClient12 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient12)
7861
       1181  16B          ObjectStublessClient13 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient13)
7862
       1182  16C          ObjectStublessClient14 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient14)
7863
       1183  16D          ObjectStublessClient15 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient15)
7864
       1184  16E          ObjectStublessClient16 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient16)
7865
       1185  16F          ObjectStublessClient17 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient17)
7866
       1186  170          ObjectStublessClient18 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient18)
7867
       1187  171          ObjectStublessClient19 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient19)
7868
       1188  172          ObjectStublessClient20 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient20)
7869
       1189  173          ObjectStublessClient21 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient21)
7870
       1190  174          ObjectStublessClient22 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient22)
7871
       1191  175          ObjectStublessClient23 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient23)
7872
       1192  176          ObjectStublessClient24 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient24)
7873
       1193  177          ObjectStublessClient25 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient25)
7874
       1194  178          ObjectStublessClient26 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient26)
7875
       1195  179          ObjectStublessClient27 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient27)
7876
       1196  17A          ObjectStublessClient28 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient28)
7877
       1197  17B          ObjectStublessClient29 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient29)
7878
       1198  17C          ObjectStublessClient3 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient3)
7879
       1199  17D          ObjectStublessClient30 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient30)
7880
       1200  17E          ObjectStublessClient31 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient31)
7881
       1201  17F          ObjectStublessClient32 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient32)
7882
       1202  180          ObjectStublessClient4 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient4)
7883
       1203  181          ObjectStublessClient5 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient5)
7884
       1204  182          ObjectStublessClient6 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient6)
7885
       1205  183          ObjectStublessClient7 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient7)
7886
       1206  184          ObjectStublessClient8 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient8)
7887
       1207  185          ObjectStublessClient9 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient9)
7888
       1208  186 0000A5D0 Ole32DllGetClassObject
7889
       1209  187 0004AB10 OleBuildVersion
7890
       1210  188 000A4C60 OleConvertIStorageToOLESTREAM
7891
       1211  189 000A4CF0 OleConvertIStorageToOLESTREAMEx
7892
       1212  18A 000A4F00 OleConvertOLESTREAMToIStorage
7893
       1213  18B 000A4FC0 OleConvertOLESTREAMToIStorageEx
7894
       1214  18C 00075940 OleCreate
7895
       1215  18D 00019160 OleCreateDefaultHandler
7896
       1216  18E 00019190 OleCreateEmbeddingHelper
7897
       1217  18F 000759D0 OleCreateEx
7898
       1218  190 00008130 OleCreateFontIndirectExt
7899
       1219  191 00075C20 OleCreateFromData
7900
       1220  192 00075CB0 OleCreateFromDataEx
7901
       1221  193 00075F20 OleCreateFromFile
7902
       1222  194 00075FC0 OleCreateFromFileEx
7903
       1223  195 00076250 OleCreateLink
7904
       1224  196 000762E0 OleCreateLinkEx
7905
       1225  197 00076490 OleCreateLinkFromData
7906
       1226  198 00076520 OleCreateLinkFromDataEx
7907
       1227  199 00076810 OleCreateLinkToFile
7908
       1228  19A 000768A0 OleCreateLinkToFileEx
7909
       1229  19B 00095070 OleCreateMenuDescriptor
7910
       1230  19C 00006C00 OleCreatePictureIndirectExt
7911
       1231  19D 000B6C10 OleCreatePropertyFrameIndirectExt
7912
       1232  19E 0001AD40 OleCreateStaticFromData
7913
       1233  19F 000951D0 OleDestroyMenuDescriptor
7914
       1234  1A0 000192B0 OleDoAutoConvert
7915
       1235  1A1 000770A0 OleDraw
7916
       1236  1A2 0001B200 OleDuplicateData
7917
       1237  1A3 00005FE0 OleFlushClipboard
7918
       1238  1A4 00019A00 OleGetAutoConvert
7919
       1239  1A5 00012460 OleGetClipboard
7920
       1240  1A6 00018140 OleGetIconOfClass
7921
       1241  1A7 000977B0 OleGetIconOfFile
7922
        802  1A8 00087100 OleGetPackageClipboardOwner
7923
       1242  1A9 000B48B0 OleIconToCursorExt
7924
       1243  1AA 0000EE90 OleInitialize
7925
       1244  1AB 000775A0 OleInitializeWOW
7926
       1245  1AC 00006430 OleIsCurrentClipboard
7927
       1246  1AD 00077190 OleIsRunning
7928
       1247  1AE 00018EF0 OleLoad
7929
       1248  1AF 0003DCC0 OleLoadFromStream
7930
       1249  1B0 000B4D10 OleLoadPictureExt
7931
       1250  1B1 000B7020 OleLoadPictureFileExt
7932
       1251  1B2 000B4E50 OleLoadPicturePathExt
7933
       1252  1B3 000143C0 OleLockRunning
7934
       1253  1B4 00018640 OleMetafilePictFromIconAndLabel
7935
       1254  1B5 00077230 OleNoteObjectVisible
7936
       1255  1B6 00076B60 OleQueryCreateFromData
7937
       1256  1B7 00076BB0 OleQueryLinkFromData
7938
       1257  1B8 0001F260 OleRegEnumFormatEtc
7939
       1258  1B9 00099460 OleRegEnumVerbs
7940
       1259  1BA 0000F220 OleRegGetMiscStatus
7941
       1260  1BB 00019890 OleRegGetUserType
7942
       1261  1BC 000139B0 OleReleaseEnumVerbCache
7943
       1262  1BD 00008CE0 OleRun
7944
       1263  1BE 0001FC50 OleSave
7945
       1264  1BF 000B7150 OleSavePictureFileExt
7946
       1265  1C0 00024690 OleSaveToStream
7947
       1266  1C1 00097410 OleSetAutoConvert
7948
       1267  1C2 000802D0 OleSetClipboard
7949
       1268  1C3 0001FDC0 OleSetContainedObject
7950
       1269  1C4 00095220 OleSetMenuDescriptor
7951
       1270  1C5 000953D0 OleTranslateAccelerator
7952
       1271  1C6 000142C0 OleTranslateColorExt
7953
       1272  1C7 0000A4A0 OleUninitialize
7954
       1273  1C8 0001E840 OpenOrCreateStream
7955
       1274  1C9          ProgIDFromCLSID (forwarded to api-ms-win-core-com-l1-1-0.ProgIDFromCLSID)
7956
       1275  1CA 0003D0E0 PropStgNameToFmtId
7957
       1276  1CB 0003D0F0 PropSysAllocString
7958
       1277  1CC 0003D100 PropSysFreeString
7959
       1278  1CD 0003D110 PropVariantChangeType
7960
       1279  1CE 00024B90 PropVariantClear
7961
       1280  1CF 00024BA0 PropVariantCopy
7962
       1281  1D0 000201B0 ReadClassStg
7963
       1282  1D1 00024780 ReadClassStm
7964
       1283  1D2 0001A360 ReadFmtUserTypeStg
7965
       1284  1D3 0001F020 ReadOleStg
7966
        831  1D4 000201B0 ReadStorageProperties
7967
       1285  1D5 0001A590 ReadStringStream
7968
       1286  1D6 000BC610 RegisterActiveObjectExt
7969
       1287  1D7 0000E820 RegisterDragDrop
7970
       1288  1D8 0000D6A0 ReleaseStgMedium
7971
       1289  1D9 000BC6F0 RevokeActiveObjectExt
7972
       1290  1DA 00009710 RevokeDragDrop
7973
       1291  1DB          RoGetAgileReference (forwarded to api-ms-win-core-com-l1-1-1.RoGetAgileReference)
7974
       1292  1DC 0004E840 SNB_UserFree
7975
       1293  1DD 0004E840 SNB_UserFree64
7976
       1294  1DE 0004E8B0 SNB_UserMarshal
7977
       1295  1DF 0004E990 SNB_UserMarshal64
7978
       1296  1E0 0004EA70 SNB_UserSize
7979
       1297  1E1 0004EB00 SNB_UserSize64
7980
       1298  1E2 0004EB80 SNB_UserUnmarshal
7981
       1299  1E3 0004EEF0 SNB_UserUnmarshal64
7982
       1300  1E4 00050710 STGMEDIUM_UserFree
7983
       1301  1E5 00050710 STGMEDIUM_UserFree64
7984
        832  1E6 000BC580 STGMEDIUM_UserFreeExt
7985
       1302  1E7 000507D0 STGMEDIUM_UserMarshal
7986
       1303  1E8 000509B0 STGMEDIUM_UserMarshal64
7987
        833  1E9 000BC590 STGMEDIUM_UserMarshalExt
7988
       1304  1EA 00050BB0 STGMEDIUM_UserSize
7989
       1305  1EB 00050D40 STGMEDIUM_UserSize64
7990
        834  1EC 000BC5A0 STGMEDIUM_UserSizeExt
7991
       1306  1ED 00050EE0 STGMEDIUM_UserUnmarshal
7992
       1307  1EE 00050F60 STGMEDIUM_UserUnmarshal64
7993
        835  1EF 000BC5B0 STGMEDIUM_UserUnmarshalExt
7994
       1308  1F0 00077470 SetConvertStg
7995
       1309  1F1 00077490 SetDocumentBitStg
7996
       1310  1F2          SetErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoSetErrorInfo)
7997
        836  1F3 00013DC0 SetOleautModule
7998
       1311  1F4 000254D0 SetWOWThunkGlobalPtr
7999
        837  1F5 000ACA10 StdTypesGetClassObject
8000
        838  1F6 000ACA90 StdTypesRegisterServer
8001
       1312  1F7 0003D130 StgConvertPropertyToVariant
8002
       1313  1F8 0003D140 StgConvertVariantToProperty
8003
       1314  1F9 0003D150 StgCreateDocfile
8004
       1315  1FA 00014450 StgCreateDocfileOnILockBytes
8005
       1316  1FB 0003D160 StgCreatePropSetStg
8006
       1317  1FC 0003D170 StgCreatePropStg
8007
       1318  1FD 0003D180 StgCreateStorageEx
8008
       1319  1FE 0003D1D0 StgGetIFillLockBytesOnFile
8009
       1320  1FF 0003D1E0 StgGetIFillLockBytesOnILockBytes
8010
       1321  200 0003D1F0 StgIsStorageFile
8011
       1322  201 0003D200 StgIsStorageILockBytes
8012
       1323  202 0003D210 StgOpenAsyncDocfileOnIFillLockBytes
8013
       1324  203 0003D220 StgOpenPropStg
8014
       1325  204 00013DD0 StgOpenStorage
8015
       1326  205 00020150 StgOpenStorageEx
8016
       1327  206 0003D230 StgOpenStorageOnHandle
8017
       1328  207 00008E10 StgOpenStorageOnILockBytes
8018
       1329  208 0003D240 StgPropertyLengthAsVariant
8019
       1330  209 0003D250 StgSetTimes
8020
       1331  20A          StringFromCLSID (forwarded to api-ms-win-core-com-l1-1-0.StringFromCLSID)
8021
       1332  20B          StringFromGUID2 (forwarded to api-ms-win-core-com-l1-1-0.StringFromGUID2)
8022
       1333  20C          StringFromIID (forwarded to api-ms-win-core-com-l1-1-0.StringFromIID)
8023
       1334  20D          UpdateDCOMSettings (forwarded to api-ms-win-core-com-private-l1-1-1.UpdateDCOMSettings)
8024
       1335  20E          UpdateProcessTracing (forwarded to api-ms-win-core-com-private-l1-1-1.UpdateProcessTracing)
8025
       1336  20F 000A6AA0 UtConvertDvtd16toDvtd32
8026
       1337  210 000A6CF0 UtConvertDvtd32toDvtd16
8027
       1338  211 000A6FE0 UtGetDvtd16Info
8028
       1339  212 000A7130 UtGetDvtd32Info
8029
       1340  213          WdtpInterfacePointer_UserFree (forwarded to COMBASE.WdtpInterfacePointer_UserFree)
8030
       1341  214          WdtpInterfacePointer_UserFree64 (forwarded to COMBASE.WdtpInterfacePointer_UserFree64)
8031
       1342  215          WdtpInterfacePointer_UserMarshal (forwarded to COMBASE.WdtpInterfacePointer_UserMarshal)
8032
       1343  216          WdtpInterfacePointer_UserMarshal64 (forwarded to COMBASE.WdtpInterfacePointer_UserMarshal64)
8033
       1344  217          WdtpInterfacePointer_UserSize (forwarded to COMBASE.WdtpInterfacePointer_UserSize)
8034
       1345  218          WdtpInterfacePointer_UserSize64 (forwarded to COMBASE.WdtpInterfacePointer_UserSize64)
8035
       1346  219          WdtpInterfacePointer_UserUnmarshal (forwarded to COMBASE.WdtpInterfacePointer_UserUnmarshal)
8036
       1347  21A          WdtpInterfacePointer_UserUnmarshal64 (forwarded to COMBASE.WdtpInterfacePointer_UserUnmarshal64)
8037
       1348  21B 0003D260 WriteClassStg
8038
       1349  21C 0003D270 WriteClassStm
8039
       1350  21D 00019D40 WriteFmtUserTypeStg
8040
       1351  21E 0001EDF0 WriteOleStg
8041
        839  21F 000BC5C0 WriteStorageProperties
8042
       1352  220 00019F30 WriteStringStream
8043
        800      00008B70 [NONAME]
8044
        801      00024790 [NONAME]
8045
        803      00024750 [NONAME]
8046
        804      000867A0 [NONAME]
8047
        820      00092C70 [NONAME]
8048
        821      00092D80 [NONAME]
8049
        822      00092C50 [NONAME]
8050
        823      00092E70 [NONAME]
8051

8052
  Summary
8053

8054
        2000 .data
8055
        1000 .didat
8056
        E000 .pdata
8057
       55000 .rdata
8058
        6000 .reloc
8059
       13000 .rsrc
8060
       C1000 .text
8061
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
8062
Copyright (C) Microsoft Corporation.  All rights reserved.
8063

8064

8065
Dump of file oleaut32.dll
8066

8067
File Type: DLL
8068

8069
  Section contains the following exports for OLEAUT32.dll
8070

8071
    00000000 characteristics
8072
    64A473E2 time date stamp Tue Jul  4 12:32:50 2023
8073
        0.00 version
8074
           2 ordinal base
8075
         499 number of functions
8076
         425 number of names
8077

8078
    ordinal hint RVA      name
8079

8080
        286    0 0001AD60 BSTR_UserFree
8081
        144    1 0001AD50 BSTR_UserFree64
8082
        284    2 00018470 BSTR_UserMarshal
8083
        145    3 00014450 BSTR_UserMarshal64
8084
        283    4 00014110 BSTR_UserSize
8085
        151    5 000144E0 BSTR_UserSize64
8086
        285    6 000179C0 BSTR_UserUnmarshal
8087
        300    7 00016FE0 BSTR_UserUnmarshal64
8088
        414    8 00055710 BstrFromVector
8089
        171    9 000477E0 ClearCustData
8090
         31    A 000583F0 CreateDispTypeInfo
8091
        202    B 00020080 CreateErrorInfo
8092
         32    C 00058850 CreateStdDispatch
8093
        160    D 0002E900 CreateTypeLib
8094
        180    E 0001E980 CreateTypeLib2
8095
        146    F 00006D90 DispCallFunc
8096
         29   10 0001B960 DispGetIDsOfNames
8097
         28   11 00058860 DispGetParam
8098
         30   12 000040A0 DispInvoke
8099
        301   13 0001BD80 DllCanUnloadNow
8100
        302   14 00011C10 DllGetClassObject
8101
        320   15 00058F20 DllRegisterServer
8102
        321   16 00059220 DllUnregisterServer
8103
         14   17 0001EB40 DosDateTimeToVariantTime
8104
         35   18 0001BED0 GetActiveObject
8105
        332   19 00059740 GetAltMonthNames
8106
        200   1A 00020090 GetErrorInfo
8107
        322   1B 0005E670 GetRecordInfoFromGuids
8108
        323   1C 0005E7F0 GetRecordInfoFromTypeInfo
8109
        326   1D 0002F870 GetVarConversionLocaleSetting
8110
        445   1E          HWND_UserFree (forwarded to COMBASE.HWND_UserFree)
8111
        449   1F          HWND_UserFree64 (forwarded to COMBASE.HWND_UserFree64)
8112
        446   20          HWND_UserMarshal (forwarded to COMBASE.HWND_UserMarshal)
8113
        450   21          HWND_UserMarshal64 (forwarded to COMBASE.HWND_UserMarshal64)
8114
        447   22          HWND_UserSize (forwarded to COMBASE.HWND_UserSize)
8115
        451   23          HWND_UserSize64 (forwarded to COMBASE.HWND_UserSize64)
8116
        448   24          HWND_UserUnmarshal (forwarded to COMBASE.HWND_UserUnmarshal)
8117
        452   25          HWND_UserUnmarshal64 (forwarded to COMBASE.HWND_UserUnmarshal64)
8118
        165   26 0001BCC0 LHashValOfNameSys
8119
        166   27 000110A0 LHashValOfNameSysA
8120
        296   28 00015430 LPSAFEARRAY_Marshal
8121
        295   29 00015110 LPSAFEARRAY_Size
8122
        297   2A 00016620 LPSAFEARRAY_Unmarshal
8123
        294   2B 0001AC60 LPSAFEARRAY_UserFree
8124
        324   2C 000554C0 LPSAFEARRAY_UserFree64
8125
        292   2D 00018510 LPSAFEARRAY_UserMarshal
8126
        328   2E 000199A0 LPSAFEARRAY_UserMarshal64
8127
        291   2F 00018520 LPSAFEARRAY_UserSize
8128
        350   30 0001A100 LPSAFEARRAY_UserSize64
8129
        293   31 00018500 LPSAFEARRAY_UserUnmarshal
8130
        351   32 00018CA0 LPSAFEARRAY_UserUnmarshal64
8131
        162   33 00004DC0 LoadRegTypeLib
8132
        161   34 0001BD90 LoadTypeLib
8133
        183   35 000111C0 LoadTypeLibEx
8134
        500   36 00014220 OACleanup
8135
        352   37 0001E980 OACreateTypeLib2
8136
        170   38 00031850 OaBuildVersion
8137
        444   39 0002F8A0 OaEnablePerUserTLibRegistration
8138
        420   3A 0001BF20 OleCreateFontIndirect
8139
        419   3B 00002860 OleCreatePictureIndirect
8140
        417   3C 0005F4A0 OleCreatePropertyFrame
8141
        416   3D 0005F500 OleCreatePropertyFrameIndirect
8142
        415   3E 0005F540 OleIconToCursor
8143
        418   3F 0005F590 OleLoadPicture
8144
        401   40 0005F5C0 OleLoadPictureEx
8145
        422   41 0005F650 OleLoadPictureFile
8146
        402   42 0005F690 OleLoadPictureFileEx
8147
        424   43 0005F710 OleLoadPicturePath
8148
        423   44 0005F790 OleSavePictureFile
8149
        421   45 0001BDA0 OleTranslateColor
8150
        164   46 00030DA0 QueryPathOfRegTypeLib
8151
         33   47 000592E0 RegisterActiveObject
8152
        163   48 00030EA0 RegisterTypeLib
8153
        442   49 00030F50 RegisterTypeLibForUser
8154
         34   4A 00059340 RevokeActiveObject
8155
         23   4B 000183D0 SafeArrayAccessData
8156
        353   4C 0005FA20 SafeArrayAddRef
8157
         37   4D 0000D050 SafeArrayAllocData
8158
         36   4E 00014030 SafeArrayAllocDescriptor
8159
         41   4F 0000D130 SafeArrayAllocDescriptorEx
8160
         27   50 00010D70 SafeArrayCopy
8161
        412   51 00010E70 SafeArrayCopyData
8162
         15   52 0000CF90 SafeArrayCreate
8163
         42   53 0005FAA0 SafeArrayCreateEx
8164
        411   54 0000C850 SafeArrayCreateVector
8165
         43   55 0005FBE0 SafeArrayCreateVectorEx
8166
         16   56 0000CBD0 SafeArrayDestroy
8167
         39   57 0005FEB0 SafeArrayDestroyData
8168
         38   58 0001BBC0 SafeArrayDestroyDescriptor
8169
         17   59 0001AB20 SafeArrayGetDim
8170
         25   5A 0001A4E0 SafeArrayGetElement
8171
         18   5B 0001B500 SafeArrayGetElemsize
8172
         67   5C 0005FD70 SafeArrayGetIID
8173
         20   5D 0001A710 SafeArrayGetLBound
8174
         45   5E 0005FDA0 SafeArrayGetRecordInfo
8175
         19   5F 0001A440 SafeArrayGetUBound
8176
         77   60 0001A6C0 SafeArrayGetVartype
8177
         21   61 00011070 SafeArrayLock
8178
        148   62 0001A620 SafeArrayPtrOfIndex
8179
         26   63 0000D360 SafeArrayPutElement
8180
         40   64 0001B520 SafeArrayRedim
8181
        354   65 0005FE00 SafeArrayReleaseData
8182
        355   66 0005FE10 SafeArrayReleaseDescriptor
8183
         57   67 0001B880 SafeArraySetIID
8184
         44   68 0005FE20 SafeArraySetRecordInfo
8185
         24   69 0001A4B0 SafeArrayUnaccessData
8186
         22   6A 00011040 SafeArrayUnlock
8187
        201   6B 000200A0 SetErrorInfo
8188
        327   6C 0002F8C0 SetOaNoCache
8189
        325   6D 0002F8E0 SetVarConversionLocaleSetting
8190
        356   6E 00060020 SysAddRefString
8191
          2   6F 00009F10 SysAllocString
8192
        150   70 0000BEC0 SysAllocStringByteLen
8193
          4   71 0000C280 SysAllocStringLen
8194
          6   72 0000BF80 SysFreeString
8195
          3   73 00001B00 SysReAllocString
8196
          5   74 000181F0 SysReAllocStringLen
8197
        357   75 00060030 SysReleaseString
8198
        149   76 00014190 SysStringByteLen
8199
          7   77 0001AB00 SysStringLen
8200
        184   78 000050F0 SystemTimeToVariantTime
8201
        186   79 0002F1B0 UnRegisterTypeLib
8202
        443   7A 0002F240 UnRegisterTypeLibForUser
8203
        290   7B 0001AB70 VARIANT_UserFree
8204
        358   7C 0001AB60 VARIANT_UserFree64
8205
        288   7D 00018530 VARIANT_UserMarshal
8206
        359   7E 000195C0 VARIANT_UserMarshal64
8207
        287   7F 00018950 VARIANT_UserSize
8208
        380   80 00019E10 VARIANT_UserSize64
8209
        289   81 00017130 VARIANT_UserUnmarshal
8210
        381   82 00015930 VARIANT_UserUnmarshal64
8211
        168   83 0004E820 VarAbs
8212
        141   84 0004F620 VarAdd
8213
        142   85 00051EA0 VarAnd
8214
        124   86 000559E0 VarBoolFromCy
8215
        123   87 00055A00 VarBoolFromDate
8216
        236   88 00060060 VarBoolFromDec
8217
        126   89 00055A10 VarBoolFromDisp
8218
        233   8A 00055A60 VarBoolFromI1
8219
        119   8B 00055A70 VarBoolFromI2
8220
        120   8C 00055AF0 VarBoolFromI4
8221
        370   8D 00055A90 VarBoolFromI8
8222
        121   8E 00055AB0 VarBoolFromR4
8223
        122   8F 00055AD0 VarBoolFromR8
8224
        125   90 00004930 VarBoolFromStr
8225
        118   91 00055A60 VarBoolFromUI1
8226
        234   92 00055A70 VarBoolFromUI2
8227
        235   93 00055AF0 VarBoolFromUI4
8228
        371   94 00055A90 VarBoolFromUI8
8229
        313   95 0001B280 VarBstrCat
8230
        314   96 0001B330 VarBstrCmp
8231
        116   97 000048C0 VarBstrFromBool
8232
        113   98 00055B00 VarBstrFromCy
8233
        114   99 0001BFC0 VarBstrFromDate
8234
        232   9A 00001400 VarBstrFromDec
8235
        115   9B 00055ED0 VarBstrFromDisp
8236
        229   9C 00055F20 VarBstrFromI1
8237
        109   9D 00055F30 VarBstrFromI2
8238
        110   9E 00055FE0 VarBstrFromI4
8239
        368   9F 00056090 VarBstrFromI8
8240
        111   A0 00056150 VarBstrFromR4
8241
        112   A1 000056B0 VarBstrFromR8
8242
        108   A2 00056280 VarBstrFromUI1
8243
        230   A3 00056290 VarBstrFromUI2
8244
        231   A4 00004B40 VarBstrFromUI4
8245
        369   A5 00004110 VarBstrFromUI8
8246
        318   A6 00050010 VarCat
8247
        176   A7 0001AD90 VarCmp
8248
        306   A8 00052AF0 VarCyAbs
8249
        299   A9 00052B30 VarCyAdd
8250
        311   AA 00052B70 VarCyCmp
8251
        312   AB 00052B90 VarCyCmpR8
8252
        307   AC 00052BF0 VarCyFix
8253
        106   AD 00064430 VarCyFromBool
8254
        103   AE 00064480 VarCyFromDate
8255
        228   AF 00060090 VarCyFromDec
8256
        105   B0 000562A0 VarCyFromDisp
8257
        225   B1 000562F0 VarCyFromI1
8258
         99   B2 00064430 VarCyFromI2
8259
        100   B3 00064450 VarCyFromI4
8260
        366   B4 000646A0 VarCyFromI8
8261
        101   B5 00064470 VarCyFromR4
8262
        102   B6 00064480 VarCyFromR8
8263
        104   B7 00056310 VarCyFromStr
8264
         98   B8 000563A0 VarCyFromUI1
8265
        226   B9 000563C0 VarCyFromUI2
8266
        227   BA 000563E0 VarCyFromUI4
8267
        367   BB 00056400 VarCyFromUI8
8268
        308   BC 00052C30 VarCyInt
8269
        303   BD 00052CA0 VarCyMul
8270
        304   BE 00052E10 VarCyMulI4
8271
        329   BF 000500E0 VarCyMulI8
8272
        309   C0 00052E90 VarCyNeg
8273
        310   C1 0004EA80 VarCyRound
8274
        305   C2 00052EC0 VarCySub
8275
         96   C3 00056FD0 VarDateFromBool
8276
         93   C4 00056420 VarDateFromCy
8277
        224   C5 000603C0 VarDateFromDec
8278
         95   C6 00056460 VarDateFromDisp
8279
        221   C7 000564C0 VarDateFromI1
8280
         89   C8 00056FD0 VarDateFromI2
8281
         90   C9 00056500 VarDateFromI4
8282
        364   CA 00056540 VarDateFromI8
8283
         91   CB 00056580 VarDateFromR4
8284
         92   CC 000565B0 VarDateFromR8
8285
         94   CD 00063B90 VarDateFromStr
8286
         88   CE 00057050 VarDateFromUI1
8287
        222   CF 000565E0 VarDateFromUI2
8288
        223   D0 00056620 VarDateFromUI4
8289
        365   D1 00056660 VarDateFromUI8
8290
        330   D2 00006160 VarDateFromUdate
8291
        319   D3 00006180 VarDateFromUdateEx
8292
        182   D4 00053490 VarDecAbs
8293
        177   D5 000534C0 VarDecAdd
8294
        204   D6 000022C0 VarDecCmp
8295
        298   D7 00052A30 VarDecCmpR8
8296
        178   D8 000534D0 VarDecDiv
8297
        187   D9 00053B10 VarDecFix
8298
        199   DA 00060420 VarDecFromBool
8299
        196   DB 00060450 VarDecFromCy
8300
        195   DC 00060480 VarDecFromDate
8301
        198   DD 00060490 VarDecFromDisp
8302
        241   DE 000604F0 VarDecFromI1
8303
        191   DF 00060520 VarDecFromI2
8304
        192   E0 00002830 VarDecFromI4
8305
        374   E1 00060560 VarDecFromI8
8306
        193   E2 00001970 VarDecFromR4
8307
        194   E3 00001620 VarDecFromR8
8308
        197   E4 000605B0 VarDecFromStr
8309
        190   E5 00060640 VarDecFromUI1
8310
        242   E6 00060660 VarDecFromUI2
8311
        243   E7 00060680 VarDecFromUI4
8312
        375   E8 000606A0 VarDecFromUI8
8313
        188   E9 00053B30 VarDecInt
8314
        179   EA 00053B70 VarDecMul
8315
        189   EB 00053DE0 VarDecNeg
8316
        203   EC 000017A0 VarDecRound
8317
        181   ED 00053E10 VarDecSub
8318
        143   EE 00050150 VarDiv
8319
        152   EF 00052030 VarEqv
8320
        169   F0 0004EB00 VarFix
8321
         87   F1 00065C50 VarFormat
8322
        127   F2 00065D40 VarFormatCurrency
8323
         97   F3 00065E60 VarFormatDateTime
8324
        139   F4 00065EE0 VarFormatFromTokens
8325
        107   F5 00067F50 VarFormatNumber
8326
        117   F6 00068060 VarFormatPercent
8327
        253   F7 000566A0 VarI1FromBool
8328
        250   F8 000566B0 VarI1FromCy
8329
        249   F9 000566E0 VarI1FromDate
8330
        256   FA 000606C0 VarI1FromDec
8331
        252   FB 000566F0 VarI1FromDisp
8332
        245   FC 00056740 VarI1FromI2
8333
        246   FD 00056770 VarI1FromI4
8334
        376   FE 00056790 VarI1FromI8
8335
        247   FF 000567B0 VarI1FromR4
8336
        248  100 000567C0 VarI1FromR8
8337
        251  101 00056800 VarI1FromStr
8338
        244  102 00056830 VarI1FromUI1
8339
        254  103 00056850 VarI1FromUI2
8340
        255  104 00056870 VarI1FromUI4
8341
        377  105 00056890 VarI1FromUI8
8342
         56  106 00057250 VarI2FromBool
8343
         52  107 00064580 VarI2FromCy
8344
         53  108 000568B0 VarI2FromDate
8345
        208  109 00060740 VarI2FromDec
8346
         55  10A 000568C0 VarI2FromDisp
8347
        205  10B 00056910 VarI2FromI1
8348
         49  10C 00056920 VarI2FromI4
8349
        346  10D 00056940 VarI2FromI8
8350
         50  10E 00056970 VarI2FromR4
8351
         51  10F 00056980 VarI2FromR8
8352
         54  110 0001EA10 VarI2FromStr
8353
         48  111 000573A0 VarI2FromUI1
8354
        206  112 000569C0 VarI2FromUI2
8355
        207  113 000569E0 VarI2FromUI4
8356
        347  114 00056A00 VarI2FromUI8
8357
         66  115 00056A20 VarI4FromBool
8358
         62  116 000645D0 VarI4FromCy
8359
         63  117 00056A30 VarI4FromDate
8360
        212  118 000607C0 VarI4FromDec
8361
         65  119 00056A40 VarI4FromDisp
8362
        209  11A 00056A90 VarI4FromI1
8363
         59  11B 00056A20 VarI4FromI2
8364
        348  11C 00056AA0 VarI4FromI8
8365
         60  11D 00056AD0 VarI4FromR4
8366
         61  11E 000018F0 VarI4FromR8
8367
         64  11F 000055D0 VarI4FromStr
8368
         58  120 000574F0 VarI4FromUI1
8369
        210  121 00056AE0 VarI4FromUI2
8370
        211  122 00056B00 VarI4FromUI4
8371
        349  123 00056B20 VarI4FromUI8
8372
        341  124 00056B40 VarI8FromBool
8373
        337  125 000646E0 VarI8FromCy
8374
        338  126 00056B50 VarI8FromDate
8375
        345  127 00060840 VarI8FromDec
8376
        340  128 00056B60 VarI8FromDisp
8377
        342  129 00056BB0 VarI8FromI1
8378
        334  12A 00056B40 VarI8FromI2
8379
        335  12B 00056BC0 VarI8FromR4
8380
        336  12C 00056BD0 VarI8FromR8
8381
        339  12D 00056C10 VarI8FromStr
8382
        333  12E 00057650 VarI8FromUI1
8383
        343  12F 00056D70 VarI8FromUI2
8384
        344  130 00056D80 VarI8FromUI4
8385
        427  131 00056D90 VarI8FromUI8
8386
        153  132 00052060 VarIdiv
8387
        154  133 00052220 VarImp
8388
        172  134 0004ECF0 VarInt
8389
        155  135 00052310 VarMod
8390
        129  136 00068150 VarMonthName
8391
        156  137 000507E0 VarMul
8392
        173  138 0004EEC0 VarNeg
8393
        174  139 00052490 VarNot
8394
         47  13A 000067C0 VarNumFromParseNum
8395
        157  13B 00052530 VarOr
8396
         46  13C 00005990 VarParseNumFromStr
8397
        158  13D 000510C0 VarPow
8398
        316  13E 00052AA0 VarR4CmpR8
8399
         76  13F 00056E50 VarR4FromBool
8400
         72  140 00064650 VarR4FromCy
8401
         73  141 00056DC0 VarR4FromDate
8402
        216  142 000608E0 VarR4FromDec
8403
         75  143 00056DD0 VarR4FromDisp
8404
        213  144 00056E30 VarR4FromI1
8405
         69  145 00056E50 VarR4FromI2
8406
         70  146 00056E70 VarR4FromI4
8407
        360  147 00056E90 VarR4FromI8
8408
         71  148 000028C0 VarR4FromR8
8409
         74  149 00002100 VarR4FromStr
8410
         68  14A 00056EB0 VarR4FromUI1
8411
        214  14B 00056ED0 VarR4FromUI2
8412
        215  14C 00056EF0 VarR4FromUI4
8413
        361  14D 00056F10 VarR4FromUI8
8414
         86  14E 00056FD0 VarR8FromBool
8415
         82  14F 00064680 VarR8FromCy
8416
         83  150 00056F40 VarR8FromDate
8417
        220  151 00060930 VarR8FromDec
8418
         85  152 00056F50 VarR8FromDisp
8419
        217  153 00056FB0 VarR8FromI1
8420
         79  154 00056FD0 VarR8FromI2
8421
         80  155 00056FF0 VarR8FromI4
8422
        362  156 00057010 VarR8FromI8
8423
         81  157 00057030 VarR8FromR4
8424
         84  158 00005540 VarR8FromStr
8425
         78  159 00057050 VarR8FromUI1
8426
        218  15A 00057070 VarR8FromUI2
8427
        219  15B 00057090 VarR8FromUI4
8428
        363  15C 000570B0 VarR8FromUI8
8429
        315  15D 00051230 VarR8Pow
8430
        317  15E 0004F160 VarR8Round
8431
        175  15F 0004F250 VarRound
8432
        159  160 000512F0 VarSub
8433
        140  161 00068220 VarTokenizeFormatString
8434
        138  162 000566A0 VarUI1FromBool
8435
        134  163 000570E0 VarUI1FromCy
8436
        135  164 00057110 VarUI1FromDate
8437
        240  165 000609C0 VarUI1FromDec
8438
        137  166 00057120 VarUI1FromDisp
8439
        237  167 00057170 VarUI1FromI1
8440
        130  168 00057190 VarUI1FromI2
8441
        131  169 00001E90 VarUI1FromI4
8442
        372  16A 00057230 VarUI1FromI8
8443
        132  16B 000571B0 VarUI1FromR4
8444
        133  16C 000571C0 VarUI1FromR8
8445
        136  16D 00057200 VarUI1FromStr
8446
        238  16E 00057190 VarUI1FromUI2
8447
        239  16F 00001E90 VarUI1FromUI4
8448
        373  170 00057230 VarUI1FromUI8
8449
        266  171 00057250 VarUI2FromBool
8450
        263  172 00057260 VarUI2FromCy
8451
        262  173 00057290 VarUI2FromDate
8452
        269  174 00060A40 VarUI2FromDec
8453
        265  175 000572A0 VarUI2FromDisp
8454
        267  176 000572F0 VarUI2FromI1
8455
        258  177 00057310 VarUI2FromI2
8456
        259  178 00005520 VarUI2FromI4
8457
        378  179 00057330 VarUI2FromI8
8458
        260  17A 00057350 VarUI2FromR4
8459
        261  17B 00057360 VarUI2FromR8
8460
        264  17C 000054F0 VarUI2FromStr
8461
        257  17D 000573A0 VarUI2FromUI1
8462
        268  17E 00005520 VarUI2FromUI4
8463
        379  17F 00057330 VarUI2FromUI8
8464
        279  180 00056A20 VarUI4FromBool
8465
        276  181 000573B0 VarUI4FromCy
8466
        275  182 000573E0 VarUI4FromDate
8467
        282  183 000027D0 VarUI4FromDec
8468
        278  184 000573F0 VarUI4FromDisp
8469
        280  185 00057440 VarUI4FromI1
8470
        271  186 00057460 VarUI4FromI2
8471
        272  187 00057480 VarUI4FromI4
8472
        425  188 00001E70 VarUI4FromI8
8473
        273  189 000574A0 VarUI4FromR4
8474
        274  18A 000574B0 VarUI4FromR8
8475
        277  18B 00004FA0 VarUI4FromStr
8476
        270  18C 000574F0 VarUI4FromUI1
8477
        281  18D 00057500 VarUI4FromUI2
8478
        426  18E 00001E70 VarUI4FromUI8
8479
        437  18F 00056B40 VarUI8FromBool
8480
        433  190 00057510 VarUI8FromCy
8481
        434  191 00057540 VarUI8FromDate
8482
        441  192 00060AC0 VarUI8FromDec
8483
        436  193 00057550 VarUI8FromDisp
8484
        438  194 000575A0 VarUI8FromI1
8485
        430  195 000575C0 VarUI8FromI2
8486
        428  196 000575E0 VarUI8FromI8
8487
        431  197 00057600 VarUI8FromR4
8488
        432  198 00057610 VarUI8FromR8
8489
        435  199 00004280 VarUI8FromStr
8490
        429  19A 00057650 VarUI8FromUI1
8491
        439  19B 00056D70 VarUI8FromUI2
8492
        440  19C 00056D80 VarUI8FromUI4
8493
        331  19D 00006470 VarUdateFromDate
8494
        128  19E 000684A0 VarWeekdayName
8495
        167  19F 000526D0 VarXor
8496
         12  1A0 00006CA0 VariantChangeType
8497
        147  1A1 00009FF0 VariantChangeTypeEx
8498
          9  1A2 0008C680 VariantClear
8499
         10  1A3 0008C810 VariantCopy
8500
         11  1A4 0008C6D0 VariantCopyInd
8501
          8  1A5 0008C660 VariantInit
8502
         13  1A6 00059230 VariantTimeToDosDateTime
8503
        185  1A7 00005030 VariantTimeToSystemTime
8504
        413  1A8 00002240 VectorFromBstr
8505

8506
  Summary
8507

8508
        3000 .data
8509
        1000 .didat
8510
        9000 .pdata
8511
       24000 .rdata
8512
        3000 .reloc
8513
        1000 .rsrc
8514
       8C000 .text
8515
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
8516
Copyright (C) Microsoft Corporation.  All rights reserved.
8517

8518

8519
Dump of file rpcrt4.dll
8520

8521
File Type: DLL
8522

8523
  Section contains the following exports for RPCRT4.dll
8524

8525
    00000000 characteristics
8526
    559F3035 time date stamp Thu Jul  9 19:38:45 2015
8527
        0.00 version
8528
        1000 ordinal base
8529
         548 number of functions
8530
         547 number of names
8531

8532
    ordinal hint RVA      name
8533

8534
       1022    0 0006DCD0 CStdStubBuffer_AddRef
8535
       1023    1 000CB200 CStdStubBuffer_Connect
8536
       1024    2 000CB250 CStdStubBuffer_CountRefs
8537
       1025    3 000CB290 CStdStubBuffer_DebugServerQueryInterface
8538
       1026    4 000CB2E0 CStdStubBuffer_DebugServerRelease
8539
       1027    5 0006F740 CStdStubBuffer_Disconnect
8540
       1028    6 0006D120 CStdStubBuffer_Invoke
8541
       1029    7 000CB330 CStdStubBuffer_IsIIDSupported
8542
       1030    8 00072040 CStdStubBuffer_QueryInterface
8543
       1031    9 00070650 CreateProxyFromTypeInfo
8544
       1032    A 000701C0 CreateStubFromTypeInfo
8545
       1033    B 000B1260 DceErrorInqTextA
8546
       1034    C 000B12E0 DceErrorInqTextW
8547
       1035    D 000CB380 DllGetClassObject
8548
       1036    E 000CB400 DllRegisterServer
8549
       1037    F 0006C6F0 IUnknown_AddRef_Proxy
8550
       1038   10 0006B3A0 IUnknown_QueryInterface_Proxy
8551
       1039   11 0006C730 IUnknown_Release_Proxy
8552
       1040   12 000450D0 I_RpcAllocate
8553
       1041   13 000691D0 I_RpcAsyncAbortCall
8554
       1042   14 00053E00 I_RpcAsyncSetHandle
8555
       1043   15 00053DB0 I_RpcBCacheAllocate
8556
       1044   16 000AF7A0 I_RpcBCacheFree
8557
       1045   17 0001D090 I_RpcBindingCopy
8558
       1046   18 00004160 I_RpcBindingCreateNP
8559
       1047   19 000B76B0 I_RpcBindingHandleToAsyncHandle
8560
       1048   1A 0006C610 I_RpcBindingInqClientTokenAttributes
8561
       1001   1B 0006B170 I_RpcBindingInqCurrentModifiedId
8562
       1049   1C          I_RpcBindingInqDynamicEndpoint (forwarded to RPCRT4.I_RpcBindingInqDynamicEndpointW)
8563
       1050   1D 0007A690 I_RpcBindingInqDynamicEndpointA
8564
       1051   1E 00065BB0 I_RpcBindingInqDynamicEndpointW
8565
       1052   1F 0001B6E0 I_RpcBindingInqLocalClientPID
8566
       1053   20 000B7720 I_RpcBindingInqMarshalledTargetInfo
8567
       1054   21 00074990 I_RpcBindingInqSecurityContext
8568
       1055   22 000B15B0 I_RpcBindingInqSecurityContextKeyInfo
8569
       1056   23 00066C60 I_RpcBindingInqTransportType
8570
       1057   24 000B77A0 I_RpcBindingInqWireIdForSnego
8571
       1058   25 0001BD70 I_RpcBindingIsClientLocal
8572
       1059   26 000AFC80 I_RpcBindingIsServerLocal
8573
       1060   27 00074750 I_RpcBindingSetPrivateOption
8574
       1061   28 000B78E0 I_RpcBindingToStaticStringBindingW
8575
       1062   29 000B10E0 I_RpcCertProcessAndProvision
8576
       1063   2A 0006EDC0 I_RpcClearMutex
8577
       1064   2B 000AF820 I_RpcCompleteAndFree
8578
       1065   2C 000B7A90 I_RpcDeleteMutex
8579
       1066   2D 000B0FE0 I_RpcEnableWmiTrace
8580
       1067   2E 0006F6F0 I_RpcExceptionFilter
8581
       1068   2F 000B9B00 I_RpcFilterDCOMActivation
8582
       1002   30 000AF6B0 I_RpcFixTransferSyntax
8583
       1069   31 00061C70 I_RpcFree
8584
       1070   32 0002F080 I_RpcFreeBuffer
8585
       1071   33 000B9C00 I_RpcFreePipeBuffer
8586
       1003   34 000AFA50 I_RpcFwThisIsTheManager
8587
       1072   35 0006DB20 I_RpcGetBuffer
8588
       1073   36 0002EE30 I_RpcGetBufferWithObject
8589
       1074   37 000759B0 I_RpcGetCurrentCallHandle
8590
       1075   38 000AFD00 I_RpcGetDefaultSD
8591
       1076   39 000BA040 I_RpcGetExtendedError
8592
       1077   3A 00076780 I_RpcGetPortAllocationData
8593
       1078   3B 00065C30 I_RpcIfInqTransferSyntaxes
8594
       1004   3C 00076550 I_RpcInitFwImports
8595
       1005   3D 00004AD0 I_RpcInitHttpImports
8596
       1006   3E 00076A00 I_RpcInitImports
8597
       1007   3F 00073930 I_RpcInitNdrImports
8598
       1079   40 0000B320 I_RpcLogEvent
8599
       1080   41 00069190 I_RpcMapWin32Status
8600
       1081   42 000B1650 I_RpcMarshalBindingHandleAndInterfaceForNDF
8601
       1082   43 000AFD40 I_RpcMgmtEnableDedicatedThreadPool
8602
       1008   44 00074040 I_RpcMgmtQueryDedicatedThreadPool
8603
       1083   45 000C7F30 I_RpcNDRCGetWireRepresentation
8604
       1084   46 000C8290 I_RpcNDRSContextEmergencyCleanup
8605
       1085   47 000442C0 I_RpcNegotiateTransferSyntax
8606
       1086   48          I_RpcNsBindingSetEntryName (forwarded to RPCRT4.I_RpcNsBindingSetEntryNameW)
8607
       1087   49 0007A690 I_RpcNsBindingSetEntryNameA
8608
       1088   4A 000B16E0 I_RpcNsBindingSetEntryNameW
8609
       1089   4B 000B16E0 I_RpcNsInterfaceExported
8610
       1090   4C 000B16E0 I_RpcNsInterfaceUnexported
8611
       1091   4D 0001B4B0 I_RpcOpenClientProcess
8612
       1009   4E 000ADBA0 I_RpcOpenClientThread
8613
       1092   4F 00061E10 I_RpcParseSecurity
8614
       1093   50 000AF940 I_RpcPauseExecution
8615
       1094   51 000B9C50 I_RpcReallocPipeBuffer
8616
       1095   52 00019710 I_RpcReceive
8617
       1096   53 000BD050 I_RpcRecordCalloutFailure
8618
       1097   54 0006E7A0 I_RpcRequestMutex
8619
       1098   55 00076380 I_RpcSNCHOption
8620
       1099   56 00045570 I_RpcSend
8621
       1100   57 0006B1D0 I_RpcSendReceive
8622
       1101   58 00066D20 I_RpcServerAllocateIpPort
8623
       1102   59 00077840 I_RpcServerCheckClientRestriction
8624
       1103   5A 00076AA0 I_RpcServerDisableExceptionFilter
8625
       1104   5B 0001C350 I_RpcServerGetAssociationID
8626
       1105   5C 000AFD70 I_RpcServerInqAddressChangeFn
8627
       1106   5D 0001BC90 I_RpcServerInqLocalConnAddress
8628
       1107   5E 0001BE30 I_RpcServerInqRemoteConnAddress
8629
       1108   5F 000B9CC0 I_RpcServerInqTransportType
8630
       1109   60 000AFD80 I_RpcServerIsClientDisconnected
8631
       1110   61 00076A60 I_RpcServerRegisterForwardFunction
8632
       1111   62 00076AC0 I_RpcServerSetAddressChangeFn
8633
       1112   63 000AFE10 I_RpcServerStartService
8634
       1113   64 000728F0 I_RpcServerSubscribeForDisconnectNotification
8635
       1010   65 000AFBC0 I_RpcServerTurnOnOffKeepalives
8636
       1114   66 00067360 I_RpcServerUseProtseq2A
8637
       1115   67 000675C0 I_RpcServerUseProtseq2W
8638
       1116   68 00005200 I_RpcServerUseProtseqEp2A
8639
       1117   69 000671D0 I_RpcServerUseProtseqEp2W
8640
       1118   6A 000AFED0 I_RpcSessionStrictContextHandle
8641
       1119   6B 00075820 I_RpcSetDCOMAppId
8642
       1120   6C 000C82B0 I_RpcSsDontSerializeContext
8643
       1121   6D 00076830 I_RpcSystemFunction001
8644
       1122   6E 000B7810 I_RpcTransConnectionAllocatePacket
8645
       1123   6F 000AA900 I_RpcTransConnectionFreePacket
8646
       1124   70 00008B40 I_RpcTransConnectionReallocPacket
8647
       1125   71 0007A690 I_RpcTransDatagramAllocate
8648
       1126   72 0007A690 I_RpcTransDatagramAllocate2
8649
       1127   73 0007A690 I_RpcTransDatagramFree
8650
       1128   74 000BA080 I_RpcTransGetThreadEvent
8651
       1129   75 0000CDA0 I_RpcTransGetThreadEventThreadOptional
8652
       1130   76 000B7880 I_RpcTransIoCancelled
8653
       1131   77 0000B130 I_RpcTransServerNewConnection
8654
       1132   78 000B1730 I_RpcTurnOnEEInfoPropagation
8655
       1011   79 000B0CD0 I_RpcVerifierCorruptionExpected
8656
       1133   7A 000BE110 I_UuidCreate
8657
       1134   7B 00069530 MesBufferHandleReset
8658
       1135   7C 00069710 MesDecodeBufferHandleCreate
8659
       1136   7D 000692E0 MesDecodeIncrementalHandleCreate
8660
       1137   7E 000694A0 MesEncodeDynBufferHandleCreate
8661
       1138   7F 000698D0 MesEncodeFixedBufferHandleCreate
8662
       1139   80 00069240 MesEncodeIncrementalHandleCreate
8663
       1140   81 0006B100 MesHandleFree
8664
       1141   82 00069380 MesIncrementalHandleReset
8665
       1142   83 000CC170 MesInqProcEncodingId
8666
       1143   84 00068E70 NDRCContextBinding
8667
       1144   85 00052610 NDRCContextMarshall
8668
       1145   86 000C7F50 NDRCContextUnmarshall
8669
       1146   87 000C82D0 NDRSContextMarshall
8670
       1147   88 00052680 NDRSContextMarshall2
8671
       1148   89 000C8320 NDRSContextMarshallEx
8672
       1149   8A 000C8340 NDRSContextUnmarshall
8673
       1150   8B 00067FD0 NDRSContextUnmarshall2
8674
       1151   8C 000C8380 NDRSContextUnmarshallEx
8675
       1152   8D 000DF420 Ndr64AsyncClientCall
8676
       1153   8E 000E3480 Ndr64AsyncServerCall64
8677
       1154   8F 000E0A00 Ndr64AsyncServerCallAll
8678
       1155   90 000CB450 Ndr64DcomAsyncClientCall
8679
       1156   91 000CB4D0 Ndr64DcomAsyncStubCall
8680
       1157   92 000CD170 NdrAllocate
8681
       1158   93 00002800 NdrAsyncClientCall
8682
       1159   94 00002260 NdrAsyncServerCall
8683
       1160   95 00072B70 NdrByteCountPointerBufferSize
8684
       1161   96 00072D50 NdrByteCountPointerFree
8685
       1162   97 00072990 NdrByteCountPointerMarshall
8686
       1163   98 00070F50 NdrByteCountPointerUnmarshall
8687
       1164   99 0006FCA0 NdrCStdStubBuffer2_Release
8688
       1165   9A 0006D4F0 NdrCStdStubBuffer_Release
8689
       1166   9B 00002CD0 NdrClearOutParameters
8690
       1167   9C 00002B70 NdrClientCall2
8691
       1168   9D 000E1240 NdrClientCall3
8692
       1169   9E 000C8C20 NdrClientContextMarshall
8693
       1170   9F 000CA5D0 NdrClientContextUnmarshall
8694
       1171   A0 000CD180 NdrClientInitialize
8695
       1172   A1 00068FB0 NdrClientInitializeNew
8696
       1173   A2 0003A4C0 NdrComplexArrayBufferSize
8697
       1174   A3 0003E230 NdrComplexArrayFree
8698
       1175   A4 000381A0 NdrComplexArrayMarshall
8699
       1176   A5 0006D980 NdrComplexArrayMemorySize
8700
       1177   A6 0003B2D0 NdrComplexArrayUnmarshall
8701
       1178   A7 00039D70 NdrComplexStructBufferSize
8702
       1179   A8 0003E6B0 NdrComplexStructFree
8703
       1180   A9 00032DA0 NdrComplexStructMarshall
8704
       1181   AA 0003D420 NdrComplexStructMemorySize
8705
       1182   AB 00038DE0 NdrComplexStructUnmarshall
8706
       1183   AC 0003CE10 NdrConformantArrayBufferSize
8707
       1184   AD 00043FB0 NdrConformantArrayFree
8708
       1185   AE 0003CEA0 NdrConformantArrayMarshall
8709
       1186   AF 0006FFE0 NdrConformantArrayMemorySize
8710
       1187   B0 0003CF90 NdrConformantArrayUnmarshall
8711
       1188   B1 0006D3C0 NdrConformantStringBufferSize
8712
       1189   B2 00040390 NdrConformantStringMarshall
8713
       1190   B3 000439E0 NdrConformantStringMemorySize
8714
       1191   B4 0003FCE0 NdrConformantStringUnmarshall
8715
       1192   B5 00041390 NdrConformantStructBufferSize
8716
       1193   B6 000C87F0 NdrConformantStructFree
8717
       1194   B7 000401D0 NdrConformantStructMarshall
8718
       1195   B8 00070E20 NdrConformantStructMemorySize
8719
       1196   B9 0003F290 NdrConformantStructUnmarshall
8720
       1197   BA 0006C380 NdrConformantVaryingArrayBufferSize
8721
       1198   BB 000726A0 NdrConformantVaryingArrayFree
8722
       1199   BC 0006C230 NdrConformantVaryingArrayMarshall
8723
       1200   BD 0006F780 NdrConformantVaryingArrayMemorySize
8724
       1201   BE 00044000 NdrConformantVaryingArrayUnmarshall
8725
       1202   BF 000C9620 NdrConformantVaryingStructBufferSize
8726
       1203   C0 000C8860 NdrConformantVaryingStructFree
8727
       1204   C1 000C8C70 NdrConformantVaryingStructMarshall
8728
       1205   C2 000CDDB0 NdrConformantVaryingStructMemorySize
8729
       1206   C3 000CA630 NdrConformantVaryingStructUnmarshall
8730
       1207   C4 000679D0 NdrContextHandleInitialize
8731
       1208   C5 000C9720 NdrContextHandleSize
8732
       1209   C6 000D0570 NdrConvert
8733
       1210   C7 000D0680 NdrConvert2
8734
       1211   C8 000723E0 NdrCorrelationFree
8735
       1212   C9 0006FC60 NdrCorrelationInitialize
8736
       1213   CA 000D0920 NdrCorrelationPass
8737
       1214   CB 000CB560 NdrCreateServerInterfaceFromStub
8738
       1215   CC 000CB5C0 NdrDcomAsyncClientCall
8739
       1216   CD 000CB650 NdrDcomAsyncStubCall
8740
       1217   CE 0006B4F0 NdrDllCanUnloadNow
8741
       1218   CF 0006B550 NdrDllGetClassObject
8742
       1219   D0 000CB6E0 NdrDllRegisterProxy
8743
       1220   D1 000CB760 NdrDllUnregisterProxy
8744
       1221   D2 000C9760 NdrEncapsulatedUnionBufferSize
8745
       1222   D3 000C8900 NdrEncapsulatedUnionFree
8746
       1223   D4 000C8DC0 NdrEncapsulatedUnionMarshall
8747
       1224   D5 000CDF70 NdrEncapsulatedUnionMemorySize
8748
       1225   D6 000CAC30 NdrEncapsulatedUnionUnmarshall
8749
       1226   D7 0006EF60 NdrFixedArrayBufferSize
8750
       1227   D8 00073700 NdrFixedArrayFree
8751
       1228   D9 0006E920 NdrFixedArrayMarshall
8752
       1229   DA 0006EEC0 NdrFixedArrayMemorySize
8753
       1230   DB 0006EDD0 NdrFixedArrayUnmarshall
8754
       1231   DC 000443F0 NdrFreeBuffer
8755
       1012   DD 00045F50 NdrFullPointerFree
8756
       1013   DE 00044B00 NdrFullPointerInsertRefId
8757
       1014   DF 000448C0 NdrFullPointerQueryPointer
8758
       1015   E0 00044BB0 NdrFullPointerQueryRefId
8759
       1232   E1 00071CC0 NdrFullPointerXlatFree
8760
       1233   E2 00044CB0 NdrFullPointerXlatInit
8761
       1234   E3 000CB7E0 NdrGetBaseInterfaceFromStub
8762
       1235   E4 00068D40 NdrGetBuffer
8763
       1236   E5 000CB860 NdrGetDcomProtocolVersion
8764
       1237   E6 000D0990 NdrGetSimpleTypeBufferAlignment
8765
       1238   E7 000D09B0 NdrGetSimpleTypeBufferSize
8766
       1239   E8 00068B90 NdrGetSimpleTypeMemorySize
8767
       1240   E9 000723C0 NdrGetTypeFlags
8768
       1241   EA 0006B030 NdrGetUserMarshalInfo
8769
       1242   EB 000C97F0 NdrInterfacePointerBufferSize
8770
       1243   EC 000C8980 NdrInterfacePointerFree
8771
       1244   ED 000C8E50 NdrInterfacePointerMarshall
8772
       1245   EE 00079730 NdrInterfacePointerMemorySize
8773
       1246   EF 000794A0 NdrInterfacePointerUnmarshall
8774
       1247   F0 00072ED0 NdrMapCommAndFaultStatus
8775
       1248   F1 000CC2D0 NdrMesProcEncodeDecode
8776
       1249   F2 000CC670 NdrMesProcEncodeDecode2
8777
       1250   F3 00004610 NdrMesProcEncodeDecode3
8778
       1251   F4 000CC920 NdrMesSimpleTypeAlignSize
8779
       1252   F5 000D6AA0 NdrMesSimpleTypeAlignSizeAll
8780
       1253   F6 000CC970 NdrMesSimpleTypeDecode
8781
       1254   F7 000D6B50 NdrMesSimpleTypeDecodeAll
8782
       1255   F8 000CCA60 NdrMesSimpleTypeEncode
8783
       1256   F9 000D6CC0 NdrMesSimpleTypeEncodeAll
8784
       1257   FA 00042280 NdrMesTypeAlignSize
8785
       1258   FB 00042F10 NdrMesTypeAlignSize2
8786
       1259   FC 00071CD0 NdrMesTypeAlignSize3
8787
       1260   FD 000CCB40 NdrMesTypeDecode
8788
       1261   FE 00042890 NdrMesTypeDecode2
8789
       1262   FF 00042530 NdrMesTypeDecode3
8790
       1263  100 000CCC80 NdrMesTypeEncode
8791
       1264  101 000431B0 NdrMesTypeEncode2
8792
       1265  102 000423A0 NdrMesTypeEncode3
8793
       1266  103 0006FA40 NdrMesTypeFree2
8794
       1267  104 0006F930 NdrMesTypeFree3
8795
       1268  105 00077050 NdrNonConformantStringBufferSize
8796
       1269  106 00076F80 NdrNonConformantStringMarshall
8797
       1270  107 000CDFB0 NdrNonConformantStringMemorySize
8798
       1271  108 00076E30 NdrNonConformantStringUnmarshall
8799
       1272  109 0003DCB0 NdrNonEncapsulatedUnionBufferSize
8800
       1273  10A 00043C90 NdrNonEncapsulatedUnionFree
8801
       1274  10B 00041720 NdrNonEncapsulatedUnionMarshall
8802
       1275  10C 0003EDA0 NdrNonEncapsulatedUnionMemorySize
8803
       1276  10D 0003F520 NdrNonEncapsulatedUnionUnmarshall
8804
       1277  10E 000D0E10 NdrNsGetBuffer
8805
       1278  10F 000D0E10 NdrNsSendReceive
8806
       1279  110 0006AED0 NdrOleAllocate
8807
       1280  111 0006D240 NdrOleFree
8808
       1281  112 000D09D0 NdrOutInit
8809
       1282  113 000C9870 NdrPartialIgnoreClientBufferSize
8810
       1283  114 000C8EE0 NdrPartialIgnoreClientMarshall
8811
       1284  115 000D0B50 NdrPartialIgnoreServerInitialize
8812
       1285  116 000CAD20 NdrPartialIgnoreServerUnmarshall
8813
       1286  117 0003E090 NdrPointerBufferSize
8814
       1287  118 00043E10 NdrPointerFree
8815
       1288  119 00041480 NdrPointerMarshall
8816
       1289  11A 000CE0E0 NdrPointerMemorySize
8817
       1290  11B 00037AE0 NdrPointerUnmarshall
8818
       1291  11C 00070A50 NdrProxyErrorHandler
8819
       1292  11D 000CB8C0 NdrProxyFreeBuffer
8820
       1293  11E 000CB910 NdrProxyGetBuffer
8821
       1294  11F 000CB960 NdrProxyInitialize
8822
       1295  120 000CB9F0 NdrProxySendReceive
8823
       1296  121 0006A8A0 NdrRangeUnmarshall
8824
       1297  122 000D1460 NdrRpcSmClientAllocate
8825
       1298  123 000D14D0 NdrRpcSmClientFree
8826
       1299  124 000D1540 NdrRpcSmSetClientToOsf
8827
       1300  125 000D1560 NdrRpcSsDefaultAllocate
8828
       1301  126 000D1570 NdrRpcSsDefaultFree
8829
       1302  127 000D1580 NdrRpcSsDisableAllocate
8830
       1303  128 000D15C0 NdrRpcSsEnableAllocate
8831
       1304  129 000CD260 NdrSendReceive
8832
       1305  12A 0006D700 NdrServerCall2
8833
       1306  12B 00016570 NdrServerCallAll
8834
       1307  12C 000D6E30 NdrServerCallNdr64
8835
       1308  12D 000C8F10 NdrServerContextMarshall
8836
       1309  12E 0006EBA0 NdrServerContextNewMarshall
8837
       1310  12F 000CAD50 NdrServerContextNewUnmarshall
8838
       1311  130 000CAEA0 NdrServerContextUnmarshall
8839
       1312  131 000634A0 NdrServerInitialize
8840
       1313  132 00078850 NdrServerInitializeMarshall
8841
       1314  133 000CD2E0 NdrServerInitializeNew
8842
       1315  134 000CD390 NdrServerInitializePartial
8843
       1316  135 000CD400 NdrServerInitializeUnmarshall
8844
       1317  136 0006A820 NdrSimpleStructBufferSize
8845
       1318  137 000C89C0 NdrSimpleStructFree
8846
       1319  138 00043920 NdrSimpleStructMarshall
8847
       1320  139 0003DC20 NdrSimpleStructMemorySize
8848
       1321  13A 0003B1B0 NdrSimpleStructUnmarshall
8849
       1322  13B 000C8F60 NdrSimpleTypeMarshall
8850
       1323  13C 000405A0 NdrSimpleTypeUnmarshall
8851
       1324  13D 000344C0 NdrStubCall2
8852
       1325  13E 0006A200 NdrStubCall3
8853
       1326  13F 000738C0 NdrStubForwardingFunction
8854
       1327  140 000CBA40 NdrStubGetBuffer
8855
       1328  141 000CBAA0 NdrStubInitialize
8856
       1329  142 000CBB30 NdrStubInitializeMarshall
8857
       1330  143 000EC910 NdrTypeFlags
8858
       1331  144 000733C0 NdrTypeFree
8859
       1332  145 00073390 NdrTypeMarshall
8860
       1333  146 00073320 NdrTypeSize
8861
       1334  147 000733F0 NdrTypeUnmarshall
8862
       1335  148 000D1A50 NdrUnmarshallBasetypeInline
8863
       1336  149 0003E500 NdrUserMarshalBufferSize
8864
       1337  14A 0006D180 NdrUserMarshalFree
8865
       1338  14B 000408F0 NdrUserMarshalMarshall
8866
       1339  14C 0006E870 NdrUserMarshalMemorySize
8867
       1340  14D 000D0750 NdrUserMarshalSimpleTypeConvert
8868
       1341  14E 0006AA30 NdrUserMarshalUnmarshall
8869
       1342  14F 0006C170 NdrVaryingArrayBufferSize
8870
       1343  150 00074AA0 NdrVaryingArrayFree
8871
       1344  151 0006C060 NdrVaryingArrayMarshall
8872
       1345  152 00073730 NdrVaryingArrayMemorySize
8873
       1346  153 00073100 NdrVaryingArrayUnmarshall
8874
       1347  154 000C9890 NdrXmitOrRepAsBufferSize
8875
       1348  155 000C89E0 NdrXmitOrRepAsFree
8876
       1349  156 000C8FC0 NdrXmitOrRepAsMarshall
8877
       1350  157 000CE130 NdrXmitOrRepAsMemorySize
8878
       1351  158 000CAF10 NdrXmitOrRepAsUnmarshall
8879
       1016  159 000011D0 NdrpClientCall2
8880
       1352  15A 000CBBB0 NdrpCreateProxy
8881
       1353  15B 000CBC40 NdrpCreateStub
8882
       1354  15C 00074F50 NdrpGetProcFormatString
8883
       1355  15D 00075AD0 NdrpGetTypeFormatString
8884
       1356  15E 00076300 NdrpGetTypeGenCookie
8885
       1357  15F 0003AE10 NdrpMemoryIncrement
8886
       1358  160 00076950 NdrpReleaseTypeFormatString
8887
       1359  161 000762B0 NdrpReleaseTypeGenCookie
8888
       1360  162 00074BE0 NdrpVarVtOfTypeDesc
8889
       1361  163 000020F0 RpcAsyncAbortCall
8890
       1362  164 00075250 RpcAsyncCancelCall
8891
       1363  165 00001C20 RpcAsyncCompleteCall
8892
       1364  166 00019FE0 RpcAsyncGetCallStatus
8893
       1365  167 00002080 RpcAsyncInitializeHandle
8894
       1366  168 0007A8E0 RpcAsyncRegisterInfo
8895
       1367  169 00065080 RpcBindingBind
8896
       1368  16A 0001B5F0 RpcBindingCopy
8897
       1369  16B 000BD7A0 RpcBindingCreateA
8898
       1370  16C 00065110 RpcBindingCreateW
8899
       1371  16D 0001F390 RpcBindingFree
8900
       1372  16E 000745B0 RpcBindingFromStringBindingA
8901
       1373  16F 0001DF30 RpcBindingFromStringBindingW
8902
       1374  170 00075190 RpcBindingInqAuthClientA
8903
       1375  171 000751C0 RpcBindingInqAuthClientExA
8904
       1376  172 00019900 RpcBindingInqAuthClientExW
8905
       1377  173 000198D0 RpcBindingInqAuthClientW
8906
       1378  174 000BDAD0 RpcBindingInqAuthInfoA
8907
       1379  175 000BDB10 RpcBindingInqAuthInfoExA
8908
       1380  176 00070400 RpcBindingInqAuthInfoExW
8909
       1381  177 000B1750 RpcBindingInqAuthInfoW
8910
       1382  178 0006A780 RpcBindingInqObject
8911
       1383  179 000B7970 RpcBindingInqOption
8912
       1384  17A 000B17D0 RpcBindingReset
8913
       1385  17B 0000CBB0 RpcBindingServerFromClient
8914
       1386  17C 000BDBC0 RpcBindingSetAuthInfoA
8915
       1387  17D 000BDBF0 RpcBindingSetAuthInfoExA
8916
       1388  17E 000652D0 RpcBindingSetAuthInfoExW
8917
       1389  17F 00064DC0 RpcBindingSetAuthInfoW
8918
       1390  180 00072E70 RpcBindingSetObject
8919
       1391  181 0001DE70 RpcBindingSetOption
8920
       1392  182 00017A60 RpcBindingToStringBindingA
8921
       1393  183 00019820 RpcBindingToStringBindingW
8922
       1394  184 0001BC10 RpcBindingUnbind
8923
       1395  185 00072F50 RpcBindingVectorFree
8924
       1396  186 000BA0A0 RpcCancelThread
8925
       1397  187 000BA0F0 RpcCancelThreadEx
8926
       1398  188 000BDCE0 RpcCertGeneratePrincipalNameA
8927
       1399  189 000B11F0 RpcCertGeneratePrincipalNameW
8928
       1017  18A 000B1000 RpcCertMatchPrincipalName
8929
       1400  18B 00067340 RpcEpRegisterA
8930
       1401  18C 000BE200 RpcEpRegisterNoReplaceA
8931
       1402  18D 000BE2E0 RpcEpRegisterNoReplaceW
8932
       1403  18E 00063E50 RpcEpRegisterW
8933
       1404  18F 00072B00 RpcEpResolveBinding
8934
       1405  190 00066E80 RpcEpUnregister
8935
       1406  191 000BD140 RpcErrorAddRecord
8936
       1407  192 000BD290 RpcErrorClearInformation
8937
       1408  193 00073F70 RpcErrorEndEnumeration
8938
       1409  194 000706D0 RpcErrorGetNextRecord
8939
       1410  195 000BD2A0 RpcErrorGetNumberOfRecords
8940
       1411  196 000BD2D0 RpcErrorLoadErrorInfo
8941
       1412  197 000BD310 RpcErrorResetEnumeration
8942
       1413  198 000BD330 RpcErrorSaveErrorInfo
8943
       1414  199 0006DD60 RpcErrorStartEnumeration
8944
       1415  19A 0006F6F0 RpcExceptionFilter
8945
       1416  19B 00075130 RpcFreeAuthorizationContext
8946
       1417  19C 00073480 RpcGetAuthorizationContextForClient
8947
       1418  19D 000AFF10 RpcIfIdVectorFree
8948
       1419  19E 00065C70 RpcIfInqId
8949
       1420  19F 0000CF70 RpcImpersonateClient
8950
       1421  1A0 0001C390 RpcImpersonateClient2
8951
       1422  1A1 000AFF80 RpcImpersonateClientContainer
8952
       1423  1A2 00076A30 RpcMgmtEnableIdleCleanup
8953
       1424  1A3 000BE380 RpcMgmtEpEltInqBegin
8954
       1425  1A4 000BE630 RpcMgmtEpEltInqDone
8955
       1426  1A5 000BE710 RpcMgmtEpEltInqNextA
8956
       1427  1A6 000BEC30 RpcMgmtEpEltInqNextW
8957
       1428  1A7 000BEC90 RpcMgmtEpUnregister
8958
       1429  1A8 000B1360 RpcMgmtInqComTimeout
8959
       1430  1A9 000B7A00 RpcMgmtInqDefaultProtectLevel
8960
       1431  1AA 000B0020 RpcMgmtInqIfIds
8961
       1432  1AB 00066F80 RpcMgmtInqServerPrincNameA
8962
       1433  1AC 00066FE0 RpcMgmtInqServerPrincNameW
8963
       1434  1AD 000B00E0 RpcMgmtInqStats
8964
       1435  1AE 000676F0 RpcMgmtIsServerListening
8965
       1436  1AF 000BECB0 RpcMgmtSetAuthorizationFn
8966
       1437  1B0 00072A10 RpcMgmtSetCancelTimeout
8967
       1438  1B1 00065B10 RpcMgmtSetComTimeout
8968
       1439  1B2 00067280 RpcMgmtSetServerStackSize
8969
       1440  1B3 000B0220 RpcMgmtStatsVectorFree
8970
       1441  1B4 000769A0 RpcMgmtStopServerListening
8971
       1442  1B5 000B0260 RpcMgmtWaitServerListen
8972
       1443  1B6 000053F0 RpcNetworkInqProtseqsA
8973
       1444  1B7 00005480 RpcNetworkInqProtseqsW
8974
       1445  1B8 000BDD40 RpcNetworkIsProtseqValidA
8975
       1446  1B9 000B13C0 RpcNetworkIsProtseqValidW
8976
       1447  1BA 000BDEB0 RpcNsBindingInqEntryNameA
8977
       1448  1BB 000B16E0 RpcNsBindingInqEntryNameW
8978
       1449  1BC 000B0290 RpcObjectInqType
8979
       1450  1BD 000B0300 RpcObjectSetInqFn
8980
       1451  1BE 00066C20 RpcObjectSetType
8981
       1452  1BF 00005760 RpcProtseqVectorFreeA
8982
       1453  1C0 00005770 RpcProtseqVectorFreeW
8983
       1454  1C1 000690B0 RpcRaiseException
8984
       1455  1C2 000B0330 RpcRevertContainerImpersonation
8985
       1456  1C3 0000CE80 RpcRevertToSelf
8986
       1457  1C4 0001B870 RpcRevertToSelfEx
8987
       1458  1C5 000B0390 RpcServerCompleteSecurityCallback
8988
       1459  1C6 0001B6B0 RpcServerInqBindingHandle
8989
       1460  1C7 00074820 RpcServerInqBindings
8990
       1461  1C8 0006E590 RpcServerInqCallAttributesA
8991
       1462  1C9 000238E0 RpcServerInqCallAttributesW
8992
       1463  1CA 00005930 RpcServerInqDefaultPrincNameA
8993
       1464  1CB 00074500 RpcServerInqDefaultPrincNameW
8994
       1465  1CC 000B03F0 RpcServerInqIf
8995
       1466  1CD 00075A20 RpcServerInterfaceGroupActivate
8996
       1467  1CE 00076350 RpcServerInterfaceGroupClose
8997
       1468  1CF 000B0440 RpcServerInterfaceGroupCreateA
8998
       1469  1D0 000753C0 RpcServerInterfaceGroupCreateW
8999
       1470  1D1 00076060 RpcServerInterfaceGroupDeactivate
9000
       1471  1D2 000B0800 RpcServerInterfaceGroupInqBindings
9001
       1472  1D3 00074670 RpcServerListen
9002
       1473  1D4 000740E0 RpcServerRegisterAuthInfoA
9003
       1474  1D5 00074190 RpcServerRegisterAuthInfoW
9004
       1475  1D6 00076700 RpcServerRegisterIf
9005
       1476  1D7 00075780 RpcServerRegisterIf2
9006
       1477  1D8 00016630 RpcServerRegisterIf3
9007
       1478  1D9 00074200 RpcServerRegisterIfEx
9008
       1479  1DA 0006E490 RpcServerSubscribeForNotification
9009
       1480  1DB 0006C770 RpcServerTestCancel
9010
       1481  1DC 000169B0 RpcServerUnregisterIf
9011
       1482  1DD 00074910 RpcServerUnregisterIfEx
9012
       1483  1DE 0006E500 RpcServerUnsubscribeForNotification
9013
       1484  1DF 000B0850 RpcServerUseAllProtseqs
9014
       1485  1E0 000B0880 RpcServerUseAllProtseqsEx
9015
       1486  1E1 000B0A20 RpcServerUseAllProtseqsIf
9016
       1487  1E2 000B0A70 RpcServerUseAllProtseqsIfEx
9017
       1488  1E3 00067770 RpcServerUseProtseqA
9018
       1489  1E4 00005170 RpcServerUseProtseqEpA
9019
       1490  1E5 000051D0 RpcServerUseProtseqEpExA
9020
       1491  1E6 000671A0 RpcServerUseProtseqEpExW
9021
       1492  1E7 00067150 RpcServerUseProtseqEpW
9022
       1493  1E8 00005900 RpcServerUseProtseqExA
9023
       1494  1E9 00067590 RpcServerUseProtseqExW
9024
       1495  1EA 000BDF30 RpcServerUseProtseqIfA
9025
       1496  1EB 000BDF80 RpcServerUseProtseqIfExA
9026
       1497  1EC 000B0B40 RpcServerUseProtseqIfExW
9027
       1498  1ED 000B0C80 RpcServerUseProtseqIfW
9028
       1499  1EE 00067500 RpcServerUseProtseqW
9029
       1500  1EF 000BA140 RpcServerYield
9030
       1501  1F0 000D1620 RpcSmAllocate
9031
       1502  1F1 000D1660 RpcSmClientFree
9032
       1503  1F2 00005A20 RpcSmDestroyClientContext
9033
       1504  1F3 000D1680 RpcSmDisableAllocate
9034
       1505  1F4 000D16B0 RpcSmEnableAllocate
9035
       1506  1F5 000D16E0 RpcSmFree
9036
       1507  1F6 000D1700 RpcSmGetThreadHandle
9037
       1508  1F7 000D1740 RpcSmSetClientAllocFree
9038
       1509  1F8 000D1760 RpcSmSetThreadHandle
9039
       1510  1F9 000D1780 RpcSmSwapClientAllocFree
9040
       1511  1FA 000D17A0 RpcSsAllocate
9041
       1512  1FB 000726F0 RpcSsContextLockExclusive
9042
       1513  1FC 000C83A0 RpcSsContextLockShared
9043
       1514  1FD 000688A0 RpcSsDestroyClientContext
9044
       1515  1FE 000D1830 RpcSsDisableAllocate
9045
       1516  1FF          RpcSsDontSerializeContext (forwarded to RPCRT4.I_RpcSsDontSerializeContext)
9046
       1517  200 000D1840 RpcSsEnableAllocate
9047
       1518  201 000D1850 RpcSsFree
9048
       1519  202 00074630 RpcSsGetContextBinding
9049
       1520  203 000D1860 RpcSsGetThreadHandle
9050
       1521  204 000D18C0 RpcSsSetClientAllocFree
9051
       1522  205 000D1920 RpcSsSetThreadHandle
9052
       1523  206 000D19D0 RpcSsSwapClientAllocFree
9053
       1524  207 000620D0 RpcStringBindingComposeA
9054
       1525  208 0001C470 RpcStringBindingComposeW
9055
       1526  209 00017AC0 RpcStringBindingParseA
9056
       1527  20A 00017DF0 RpcStringBindingParseW
9057
       1528  20B 00064060 RpcStringFreeA
9058
       1529  20C 00065A80 RpcStringFreeW
9059
       1530  20D 000BA190 RpcTestCancel
9060
       1531  20E 000CD4A0 RpcUserFree
9061
       1532  20F 000F2670 SimpleTypeAlignment
9062
       1533  210 000F25B0 SimpleTypeBufferSize
9063
       1534  211 000EB430 SimpleTypeMemorySize
9064
       1535  212 0001BFE0 TowerConstruct
9065
       1536  213 00051CB0 TowerExplode
9066
       1537  214 000764E0 UuidCompare
9067
       1538  215 0006D0D0 UuidCreate
9068
       1539  216 000771A0 UuidCreateNil
9069
       1540  217 000677D0 UuidCreateSequential
9070
       1541  218 0006B350 UuidEqual
9071
       1542  219 00074C70 UuidFromStringA
9072
       1543  21A 0001C640 UuidFromStringW
9073
       1544  21B 000BE130 UuidHash
9074
       1545  21C 000195F0 UuidIsNil
9075
       1546  21D 000050F0 UuidToStringA
9076
       1547  21E 0001C580 UuidToStringW
9077
       1018  21F 000F5B08 pfnFreeRoutines
9078
       1019  220 000F5B10 pfnMarshallRoutines
9079
       1020  221 000F5B18 pfnSizeRoutines
9080
       1021  222 000F5B20 pfnUnmarshallRoutines
9081
       1000      00072DA0 [NONAME]
9082

9083
  Summary
9084

9085
        2000 .data
9086
        1000 .didat
9087
        B000 .ndr64
9088
        D000 .pdata
9089
       2B000 .rdata
9090
        2000 .reloc
9091
        5000 .rsrc
9092
       D8000 .text
9093
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
9094
Copyright (C) Microsoft Corporation.  All rights reserved.
9095

9096

9097
Dump of file secur32.dll
9098

9099
File Type: DLL
9100

9101
  Section contains the following exports for Secur32.dll
9102

9103
    00000000 characteristics
9104
    559F300C time date stamp Thu Jul  9 19:38:04 2015
9105
        0.00 version
9106
           1 ordinal base
9107
         101 number of functions
9108
         101 number of names
9109

9110
    ordinal hint RVA      name
9111

9112
          4    0          AcceptSecurityContext (forwarded to SSPICLI.AcceptSecurityContext)
9113
          5    1          AcquireCredentialsHandleA (forwarded to SSPICLI.AcquireCredentialsHandleA)
9114
          6    2          AcquireCredentialsHandleW (forwarded to SSPICLI.AcquireCredentialsHandleW)
9115
          7    3          AddCredentialsA (forwarded to SSPICLI.AddCredentialsA)
9116
          8    4          AddCredentialsW (forwarded to SSPICLI.AddCredentialsW)
9117
          9    5          AddSecurityPackageA (forwarded to SSPICLI.AddSecurityPackageA)
9118
         10    6          AddSecurityPackageW (forwarded to SSPICLI.AddSecurityPackageW)
9119
         11    7          ApplyControlToken (forwarded to SSPICLI.ApplyControlToken)
9120
         12    8          ChangeAccountPasswordA (forwarded to SSPICLI.ChangeAccountPasswordA)
9121
         13    9          ChangeAccountPasswordW (forwarded to SSPICLI.ChangeAccountPasswordW)
9122
          1    A 00002000 CloseLsaPerformanceData
9123
          2    B 00001B00 CollectLsaPerformanceData
9124
         14    C          CompleteAuthToken (forwarded to SSPICLI.CompleteAuthToken)
9125
         15    D          CredMarshalTargetInfo (forwarded to SSPICLI.CredMarshalTargetInfo)
9126
         16    E          CredUnmarshalTargetInfo (forwarded to SSPICLI.CredUnmarshalTargetInfo)
9127
         17    F          DecryptMessage (forwarded to SSPICLI.DecryptMessage)
9128
         18   10          DeleteSecurityContext (forwarded to SSPICLI.DeleteSecurityContext)
9129
         19   11          DeleteSecurityPackageA (forwarded to SSPICLI.DeleteSecurityPackageA)
9130
         20   12          DeleteSecurityPackageW (forwarded to SSPICLI.DeleteSecurityPackageW)
9131
         21   13          EncryptMessage (forwarded to SSPICLI.EncryptMessage)
9132
         22   14          EnumerateSecurityPackagesA (forwarded to SSPICLI.EnumerateSecurityPackagesA)
9133
         23   15          EnumerateSecurityPackagesW (forwarded to SSPICLI.EnumerateSecurityPackagesW)
9134
         24   16          ExportSecurityContext (forwarded to SSPICLI.ExportSecurityContext)
9135
         25   17          FreeContextBuffer (forwarded to SSPICLI.FreeContextBuffer)
9136
         26   18          FreeCredentialsHandle (forwarded to SSPICLI.FreeCredentialsHandle)
9137
         27   19 000036A0 GetComputerObjectNameA
9138
         28   1A 00001080 GetComputerObjectNameW
9139
         29   1B          GetSecurityUserInfo (forwarded to SSPICLI.GetSecurityUserInfo)
9140
         30   1C          GetUserNameExA (forwarded to SSPICLI.GetUserNameExA)
9141
         31   1D          GetUserNameExW (forwarded to SSPICLI.GetUserNameExW)
9142
         32   1E          ImpersonateSecurityContext (forwarded to SSPICLI.ImpersonateSecurityContext)
9143
         33   1F          ImportSecurityContextA (forwarded to SSPICLI.ImportSecurityContextA)
9144
         34   20          ImportSecurityContextW (forwarded to SSPICLI.ImportSecurityContextW)
9145
         35   21          InitSecurityInterfaceA (forwarded to SSPICLI.InitSecurityInterfaceA)
9146
         36   22          InitSecurityInterfaceW (forwarded to SSPICLI.InitSecurityInterfaceW)
9147
         37   23          InitializeSecurityContextA (forwarded to SSPICLI.InitializeSecurityContextA)
9148
         38   24          InitializeSecurityContextW (forwarded to SSPICLI.InitializeSecurityContextW)
9149
         39   25          LsaCallAuthenticationPackage (forwarded to SSPICLI.LsaCallAuthenticationPackage)
9150
         40   26          LsaConnectUntrusted (forwarded to SSPICLI.LsaConnectUntrusted)
9151
         41   27          LsaDeregisterLogonProcess (forwarded to SSPICLI.LsaDeregisterLogonProcess)
9152
         42   28          LsaEnumerateLogonSessions (forwarded to SSPICLI.LsaEnumerateLogonSessions)
9153
         43   29          LsaFreeReturnBuffer (forwarded to SSPICLI.LsaFreeReturnBuffer)
9154
         44   2A          LsaGetLogonSessionData (forwarded to SSPICLI.LsaGetLogonSessionData)
9155
         45   2B          LsaLogonUser (forwarded to SSPICLI.LsaLogonUser)
9156
         46   2C          LsaLookupAuthenticationPackage (forwarded to SSPICLI.LsaLookupAuthenticationPackage)
9157
         47   2D          LsaRegisterLogonProcess (forwarded to SSPICLI.LsaRegisterLogonProcess)
9158
         48   2E          LsaRegisterPolicyChangeNotification (forwarded to SSPICLI.LsaRegisterPolicyChangeNotification)
9159
         49   2F          LsaUnregisterPolicyChangeNotification (forwarded to SSPICLI.LsaUnregisterPolicyChangeNotification)
9160
         50   30          MakeSignature (forwarded to SSPICLI.MakeSignature)
9161
          3   31 00001EF0 OpenLsaPerformanceData
9162
         51   32          QueryContextAttributesA (forwarded to SSPICLI.QueryContextAttributesA)
9163
         52   33          QueryContextAttributesW (forwarded to SSPICLI.QueryContextAttributesW)
9164
         53   34          QueryCredentialsAttributesA (forwarded to SSPICLI.QueryCredentialsAttributesA)
9165
         54   35          QueryCredentialsAttributesW (forwarded to SSPICLI.QueryCredentialsAttributesW)
9166
         55   36          QuerySecurityContextToken (forwarded to SSPICLI.QuerySecurityContextToken)
9167
         56   37          QuerySecurityPackageInfoA (forwarded to SSPICLI.QuerySecurityPackageInfoA)
9168
         57   38          QuerySecurityPackageInfoW (forwarded to SSPICLI.QuerySecurityPackageInfoW)
9169
         58   39          RevertSecurityContext (forwarded to SSPICLI.RevertSecurityContext)
9170
         59   3A          SaslAcceptSecurityContext (forwarded to SSPICLI.SaslAcceptSecurityContext)
9171
         60   3B          SaslEnumerateProfilesA (forwarded to SSPICLI.SaslEnumerateProfilesA)
9172
         61   3C          SaslEnumerateProfilesW (forwarded to SSPICLI.SaslEnumerateProfilesW)
9173
         62   3D          SaslGetContextOption (forwarded to SSPICLI.SaslGetContextOption)
9174
         63   3E          SaslGetProfilePackageA (forwarded to SSPICLI.SaslGetProfilePackageA)
9175
         64   3F          SaslGetProfilePackageW (forwarded to SSPICLI.SaslGetProfilePackageW)
9176
         65   40          SaslIdentifyPackageA (forwarded to SSPICLI.SaslIdentifyPackageA)
9177
         66   41          SaslIdentifyPackageW (forwarded to SSPICLI.SaslIdentifyPackageW)
9178
         67   42          SaslInitializeSecurityContextA (forwarded to SSPICLI.SaslInitializeSecurityContextA)
9179
         68   43          SaslInitializeSecurityContextW (forwarded to SSPICLI.SaslInitializeSecurityContextW)
9180
         69   44          SaslSetContextOption (forwarded to SSPICLI.SaslSetContextOption)
9181
         70   45          SealMessage (forwarded to SSPICLI.SealMessage)
9182
         71   46          SeciAllocateAndSetCallFlags (forwarded to SSPICLI.SeciAllocateAndSetCallFlags)
9183
         72   47          SeciAllocateAndSetIPAddress (forwarded to SSPICLI.SeciAllocateAndSetIPAddress)
9184
         73   48          SeciFreeCallContext (forwarded to SSPICLI.SeciFreeCallContext)
9185
         74   49 000024C0 SecpFreeMemory
9186
         75   4A 000013E0 SecpTranslateName
9187
         76   4B 00002070 SecpTranslateNameEx
9188
         77   4C          SetContextAttributesA (forwarded to SSPICLI.SetContextAttributesA)
9189
         78   4D          SetContextAttributesW (forwarded to SSPICLI.SetContextAttributesW)
9190
         79   4E          SetCredentialsAttributesA (forwarded to SSPICLI.SetCredentialsAttributesA)
9191
         80   4F          SetCredentialsAttributesW (forwarded to SSPICLI.SetCredentialsAttributesW)
9192
         81   50          SspiCompareAuthIdentities (forwarded to SSPICLI.SspiCompareAuthIdentities)
9193
         82   51          SspiCopyAuthIdentity (forwarded to SSPICLI.SspiCopyAuthIdentity)
9194
         83   52          SspiDecryptAuthIdentity (forwarded to SSPICLI.SspiDecryptAuthIdentity)
9195
         84   53          SspiEncodeAuthIdentityAsStrings (forwarded to SSPICLI.SspiEncodeAuthIdentityAsStrings)
9196
         85   54          SspiEncodeStringsAsAuthIdentity (forwarded to SSPICLI.SspiEncodeStringsAsAuthIdentity)
9197
         86   55          SspiEncryptAuthIdentity (forwarded to SSPICLI.SspiEncryptAuthIdentity)
9198
         87   56          SspiExcludePackage (forwarded to SSPICLI.SspiExcludePackage)
9199
         88   57          SspiFreeAuthIdentity (forwarded to SSPICLI.SspiFreeAuthIdentity)
9200
         89   58          SspiGetTargetHostName (forwarded to SSPICLI.SspiGetTargetHostName)
9201
         90   59          SspiIsAuthIdentityEncrypted (forwarded to SSPICLI.SspiIsAuthIdentityEncrypted)
9202
         91   5A          SspiLocalFree (forwarded to SSPICLI.SspiLocalFree)
9203
         92   5B          SspiMarshalAuthIdentity (forwarded to SSPICLI.SspiMarshalAuthIdentity)
9204
         93   5C          SspiPrepareForCredRead (forwarded to SSPICLI.SspiPrepareForCredRead)
9205
         94   5D          SspiPrepareForCredWrite (forwarded to SSPICLI.SspiPrepareForCredWrite)
9206
         95   5E          SspiUnmarshalAuthIdentity (forwarded to SSPICLI.SspiUnmarshalAuthIdentity)
9207
         96   5F          SspiValidateAuthIdentity (forwarded to SSPICLI.SspiValidateAuthIdentity)
9208
         97   60          SspiZeroAuthIdentity (forwarded to SSPICLI.SspiZeroAuthIdentity)
9209
         98   61 000037D0 TranslateNameA
9210
         99   62 00003950 TranslateNameW
9211
        100   63          UnsealMessage (forwarded to SSPICLI.UnsealMessage)
9212
        101   64          VerifySignature (forwarded to SSPICLI.VerifySignature)
9213

9214
  Summary
9215

9216
        1000 .data
9217
        1000 .didat
9218
        1000 .pdata
9219
        3000 .rdata
9220
        1000 .reloc
9221
        1000 .rsrc
9222
        3000 .text
9223
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
9224
Copyright (C) Microsoft Corporation.  All rights reserved.
9225

9226

9227
Dump of file shell32.dll
9228

9229
File Type: DLL
9230

9231
  Section contains the following exports for SHELL32.dll
9232

9233
    00000000 characteristics
9234
    559F3137 time date stamp Thu Jul  9 19:43:03 2015
9235
        0.00 version
9236
           2 ordinal base
9237
         942 number of functions
9238
         482 number of names
9239

9240
    ordinal hint RVA      name
9241

9242
        255    0 00219BE0 AppCompat_RunDLLW
9243
        263    1 000A6430 AssocCreateForClasses
9244
        267    2 0021C7D0 AssocGetDetailsOfPropKey
9245
        701    3 0021F7A0 CDefFolderMenu_Create2
9246
         83    4 00220580 CIDLData_CreateFromIDArray
9247
        937    5 001F3DA0 CStorageItem_GetValidatedStorageItemObject
9248
        268    6 00221950 CheckEscapesW
9249
        269    7 000E83B0 CommandLineToArgvW
9250
        272    8 00223F30 Control_RunDLL
9251
        273    9 00223F30 Control_RunDLLA
9252
        274    A 00223FB0 Control_RunDLLAsUserW
9253
        275    B 00223FF0 Control_RunDLLW
9254
        935    C 001F3DC0 CreateStorageItemFromPath_FullTrustCaller
9255
        936    D 001F3DD0 CreateStorageItemFromPath_FullTrustCaller_ForPackage
9256
        920    E 001F3DE0 CreateStorageItemFromPath_PartialTrustCaller
9257
        921    F 001F3DF0 CreateStorageItemFromShellItem_FullTrustCaller
9258
        925   10 00020890 CreateStorageItemFromShellItem_FullTrustCaller_ForPackage
9259
        929   11 001F3E00 CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle
9260
        931   12 00020DF0 CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage
9261
        129   13 00167E60 DAD_AutoScroll
9262
        131   14 000EE110 DAD_DragEnterEx
9263
         22   15 002377B0 DAD_DragEnterEx2
9264
        132   16 002378A0 DAD_DragLeave
9265
        134   17 002378E0 DAD_DragMove
9266
        136   18 000EE110 DAD_SetDragImage
9267
        137   19 000EE110 DAD_ShowDragImage
9268
        276   1A 000D4870 DllCanUnloadNow
9269
        277   1B 001F2790 DllGetActivationFactory
9270
        278   1C 00084F90 DllGetClassObject
9271
        279   1D 004E4240 DllGetVersion
9272
        280   1E 0023A080 DllInstall
9273
        281   1F 00167E60 DllRegisterServer
9274
        282   20 00167E60 DllUnregisterServer
9275
        283   21 001EE7F0 DoEnvironmentSubstA
9276
        284   22 000D7510 DoEnvironmentSubstW
9277
        285   23 000ED2B0 DragAcceptFiles
9278
        286   24 001F1C80 DragFinish
9279
        287   25 001F1C90 DragQueryFile
9280
        288   26 001F1C90 DragQueryFileA
9281
        289   27 000DFFF0 DragQueryFileAorW
9282
        290   28 000DFFD0 DragQueryFileW
9283
        291   29 001F1E50 DragQueryPoint
9284
         64   2A 00128690 DriveType
9285
        292   2B 000DCF90 DuplicateIcon
9286
        293   2C 001EDD20 ExtractAssociatedIconA
9287
        294   2D 001EDE10 ExtractAssociatedIconExA
9288
        295   2E 001EDF00 ExtractAssociatedIconExW
9289
        296   2F 001EE120 ExtractAssociatedIconW
9290
        297   30 001EE1E0 ExtractIconA
9291
        298   31 001EE260 ExtractIconEx
9292
        299   32 001EE260 ExtractIconExA
9293
        300   33 000D6050 ExtractIconExW
9294
        301   34 001EE2E0 ExtractIconW
9295
        302   35 00246BA0 FindExecutableA
9296
        303   36 00246C70 FindExecutableW
9297
        304   37 0010A0B0 FreeIconList
9298
        305   38 00222240 GetCurrentProcessExplicitAppUserModelID
9299
         63   39 00248630 GetFileNameFromBrowse
9300
        919   3A 001F3E10 GetSystemPersistedStorageItemList
9301
        154   3B 0024E4C0 ILAppendID
9302
         18   3C 000738A0 ILClone
9303
         19   3D 000DA910 ILCloneFirst
9304
         25   3E 0006F2D0 ILCombine
9305
        157   3F 001517C0 ILCreateFromPath
9306
        189   40 0024E5A0 ILCreateFromPathA
9307
        190   41 001517C0 ILCreateFromPathW
9308
         24   42 000ED470 ILFindChild
9309
         16   43 000739B0 ILFindLastID
9310
        155   44 000DC6C0 ILFree
9311
        153   45 000EDC10 ILGetNext
9312
        152   46 000DC7A0 ILGetSize
9313
         21   47 0007F340 ILIsEqual
9314
         23   48 0006FC60 ILIsParent
9315
        846   49 0001B560 ILLoadFromStreamEx
9316
         17   4A 00073860 ILRemoveLastID
9317
         27   4B 0001D120 ILSaveToStream
9318
        306   4C 0024ECA0 InitNetworkAddressControl
9319
        307   4D 00167E60 InternalExtractIconListA
9320
        308   4E 00167E60 InternalExtractIconListW
9321
        942   4F 000479A0 IsDesktopExplorerProcess
9322
        119   50 000E1F80 IsLFNDrive
9323
         41   51 00221A10 IsLFNDriveA
9324
         42   52 000E1F80 IsLFNDriveW
9325
         66   53 004E4300 IsNetDrive
9326
        941   54 000A5340 IsProcessAnExplorer
9327
        680   55 00251840 IsUserAnAdmin
9328
        309   56 001F27D0 LaunchMSHelp_RunDLLW
9329
         81   57 0010A0B0 OpenAs_RunDLL
9330
        125   58 0010A0B0 OpenAs_RunDLLA
9331
        133   59 001F4BF0 OpenAs_RunDLLW
9332
         85   5A 000EDEC0 OpenRegStream
9333
        310   5B 0049B860 Options_RunDLL
9334
        311   5C 0049B860 Options_RunDLLA
9335
        312   5D 0049B8B0 Options_RunDLLW
9336
        171   5E 000E1E30 PathCleanupSpec
9337
         92   5F 00221C90 PathGetShortPath
9338
         43   60 00221D00 PathIsExe
9339
        240   61 00221F20 PathIsSlowA
9340
        239   62 00221F80 PathIsSlowW
9341
         47   63 002220A0 PathMakeUniqueName
9342
         49   64 002220D0 PathQualify
9343
         51   65 00146180 PathResolve
9344
         75   66 00120400 PathYetAnotherMakeUniqueName
9345
         62   67 001F0C70 PickIconDlg
9346
         13   68 001F13B0 PifMgr_CloseProperties
9347
         10   69 00167E60 PifMgr_GetProperties
9348
          9   6A 00167E60 PifMgr_OpenProperties
9349
         11   6B 00167E60 PifMgr_SetProperties
9350
        135   6C 001F8840 PrepareDiscForBurnRunDllW
9351
        138   6D 00206210 PrintersGetCommand_RunDLL
9352
        139   6E 00206210 PrintersGetCommand_RunDLLA
9353
        150   6F 002062D0 PrintersGetCommand_RunDLLW
9354
        654   70 000E4C90 ReadCabinetState
9355
        524   71 002535D0 RealDriveType
9356
        199   72 00207260 RealShellExecuteA
9357
        207   73 00207260 RealShellExecuteExA
9358
        208   74 00207260 RealShellExecuteExW
9359
        226   75 00207260 RealShellExecuteW
9360
        313   76 000D65B0 RegenerateUserEnvironment
9361
         59   77 00238590 RestartDialog
9362
        730   78 002385A0 RestartDialogEx
9363
        314   79 001F3940 RunAsNewUser_RunDLLW
9364
        315   7A 002571F0 SHAddDefaultPropertiesByExt
9365
        167   7B 00257680 SHAddFromPropSheetExtArray
9366
        316   7C 0012A130 SHAddToRecentDocs
9367
        196   7D 000E9C50 SHAlloc
9368
        317   7E 00150B20 SHAppBarMessage
9369
        318   7F 000203C0 SHAssocEnumHandlers
9370
        319   80 0025D1A0 SHAssocEnumHandlersForProtocolByApplication
9371
        320   81 0009C230 SHBindToFolderIDListParent
9372
        321   82 0009C260 SHBindToFolderIDListParentEx
9373
        322   83 000739E0 SHBindToObject
9374
        323   84 000737B0 SHBindToParent
9375
        324   85 00261A30 SHBrowseForFolder
9376
        325   86 00261A30 SHBrowseForFolderA
9377
        326   87 00261C20 SHBrowseForFolderW
9378
        147   88 00039BB0 SHCLSIDFromString
9379
        644   89 000DD290 SHChangeNotification_Lock
9380
        645   8A 000DD270 SHChangeNotification_Unlock
9381
        327   8B 00073360 SHChangeNotify
9382
          4   8C 0006E940 SHChangeNotifyDeregister
9383
          2   8D 0006FD90 SHChangeNotifyRegister
9384
        328   8E 000EAB70 SHChangeNotifyRegisterThread
9385
        329   8F 000E7D80 SHChangeNotifySuspendResume
9386
         89   90 0014AA20 SHCloneSpecialIDList
9387
        102   91 000E2870 SHCoCreateInstance
9388
        330   92 00262C60 SHCoCreateInstanceWorker
9389
        331   93 000A3190 SHCreateAssociationRegistration
9390
        332   94 00266E00 SHCreateCategoryEnum
9391
        333   95 00017890 SHCreateDataObject
9392
        334   96 000E71F0 SHCreateDefaultContextMenu
9393
        335   97 00105B90 SHCreateDefaultExtractIcon
9394
        336   98 002572A0 SHCreateDefaultPropertiesOp
9395
        165   99 00020DD0 SHCreateDirectory
9396
        337   9A 00212830 SHCreateDirectoryExA
9397
        338   9B 000EC610 SHCreateDirectoryExW
9398
        339   9C 002692A0 SHCreateDrvExtIcon
9399
        743   9D 00250A20 SHCreateFileExtractIconW
9400
        340   9E 0009A0A0 SHCreateItemFromIDList
9401
        341   9F 00098810 SHCreateItemFromParsingName
9402
        342   A0 0009C000 SHCreateItemFromRelativeName
9403
        343   A1 0009C160 SHCreateItemInKnownFolder
9404
        344   A2 0009A6A0 SHCreateItemWithParent
9405
        345   A3 00020D20 SHCreateLocalServerRunDll
9406
        346   A4 00207BE0 SHCreateProcessAsUserW
9407
        168   A5 00257710 SHCreatePropSheetExtArray
9408
        347   A6 0012A0A0 SHCreateQueryCancelAutoPlayMoniker
9409
        256   A7 000EABC0 SHCreateShellFolderView
9410
        174   A8 0028D690 SHCreateShellFolderViewEx
9411
        348   A9 0009A170 SHCreateShellItem
9412
        349   AA 001F3E50 SHCreateShellItemArray
9413
        350   AB 001F3E60 SHCreateShellItemArrayFromDataObject
9414
        351   AC 000ED940 SHCreateShellItemArrayFromIDLists
9415
        352   AD 00020820 SHCreateShellItemArrayFromShellItem
9416
         74   AE 001ED680 SHCreateStdEnumFmtEtc
9417
          3   AF 00244CA0 SHDefExtractIconA
9418
          6   B0 00065160 SHDefExtractIconW
9419
        169   B1 002578C0 SHDestroyPropSheetExtArray
9420
         88   B2 002379D0 SHDoDragDrop
9421
        353   B3 000EE050 SHELL32_AddToBackIconTable
9422
        354   B4 000EAD00 SHELL32_AddToFrontIconTable
9423
        355   B5 0009D3A0 SHELL32_AreAllItemsAvailable
9424
        356   B6 002911B0 SHELL32_BindToFilePlaceholderHandler
9425
        357   B7 002911C0 SHELL32_CCommonPlacesFolder_CreateInstance
9426
        358   B8 002911D0 SHELL32_CDBurn_CloseSession
9427
        359   B9 00291250 SHELL32_CDBurn_DriveSupportedForDataBurn
9428
        360   BA 00291260 SHELL32_CDBurn_Erase
9429
        361   BB 0001FDB0 SHELL32_CDBurn_GetCDInfo
9430
        362   BC 002912C0 SHELL32_CDBurn_GetLiveFSDiscInfo
9431
        363   BD 0001B1D0 SHELL32_CDBurn_GetStagingPathOrNormalPath
9432
        364   BE 002912D0 SHELL32_CDBurn_GetTaskInfo
9433
        365   BF 002912E0 SHELL32_CDBurn_IsBlankDisc
9434
        366   C0 002912F0 SHELL32_CDBurn_IsBlankDisc2
9435
        367   C1 00291350 SHELL32_CDBurn_IsLiveFS
9436
        368   C2 00291360 SHELL32_CDBurn_OnDeviceChange
9437
        369   C3 00291370 SHELL32_CDBurn_OnEject
9438
        370   C4 002913E0 SHELL32_CDBurn_OnMediaChange
9439
        371   C5 002913F0 SHELL32_CDefFolderMenu_Create2
9440
        372   C6 00291450 SHELL32_CDefFolderMenu_Create2Ex
9441
        373   C7 002914B0 SHELL32_CDefFolderMenu_MergeMenu
9442
        374   C8 002914C0 SHELL32_CDrivesContextMenu_Create
9443
        375   C9 002914D0 SHELL32_CDrivesDropTarget_Create
9444
        376   CA 000A4AE0 SHELL32_CFSDropTarget_CreateInstance
9445
        377   CB 000EDD00 SHELL32_CFSFolderCallback_Create
9446
        378   CC 002914E0 SHELL32_CFillPropertiesTask_CreateInstance
9447
        379   CD 002914F0 SHELL32_CLibraryDropTarget_CreateInstance
9448
        380   CE 00291500 SHELL32_CLocationContextMenu_Create
9449
        381   CF 00291510 SHELL32_CMountPoint_DoAutorun
9450
        382   D0 00291520 SHELL32_CMountPoint_DoAutorunPrompt
9451
        383   D1 00291540 SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy
9452
        384   D2 00291550 SHELL32_CMountPoint_ProcessAutoRunFile
9453
        385   D3 00291560 SHELL32_CMountPoint_WantAutorunUI
9454
        386   D4 00291570 SHELL32_CMountPoint_WantAutorunUIGetReady
9455
        387   D5 000EFB80 SHELL32_CPL_CategoryIdArrayFromVariant
9456
        388   D6 00291580 SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey
9457
        389   D7 002915A0 SHELL32_CPL_ModifyWowDisplayName
9458
        390   D8 002915B0 SHELL32_CRecentDocsContextMenu_CreateInstance
9459
        391   D9 002915C0 SHELL32_CSyncRootManager_CreateInstance
9460
        392   DA 002915D0 SHELL32_CTransferConfirmation_CreateInstance
9461
        393   DB 000206F0 SHELL32_CallFileCopyHooks
9462
        394   DC 00019240 SHELL32_CanDisplayWin8CopyDialog
9463
        395   DD 002915E0 SHELL32_CloseAutoplayPrompt
9464
        396   DE 002915F0 SHELL32_CommandLineFromMsiDescriptor
9465
        397   DF 00291600 SHELL32_CopyExtrinsicPropertyStore
9466
        398   E0 00291610 SHELL32_CopyFilePlaceholderToNewFile
9467
        399   E1 00291620 SHELL32_CopySecondaryTiles
9468
        400   E2 00291630 SHELL32_CreateAlternateStreamFileName
9469
        401   E3 00291640 SHELL32_CreateConfirmationInterrupt
9470
        402   E4 00291650 SHELL32_CreateConflictInterrupt
9471
        403   E5 00291660 SHELL32_CreateDefaultOperationDataProvider
9472
        404   E6 00080220 SHELL32_CreateExtrinsicPropertyStore
9473
        405   E7 002916E0 SHELL32_CreateFileFolderContextMenu
9474
        406   E8 000ECA50 SHELL32_CreateLinkInfoW
9475
        407   E9 002916F0 SHELL32_CreatePlaceholderFile
9476
        408   EA 00291700 SHELL32_CreateQosRecorder
9477
        409   EB 00291710 SHELL32_CreateSharePointView
9478
        410   EC 00291720 SHELL32_Create_IEnumUICommand
9479
        411   ED 000ECA40 SHELL32_DestroyLinkInfo
9480
        412   EE 00291730 SHELL32_EncryptDirectory
9481
        413   EF 00291740 SHELL32_EncryptedFileKeyInfo
9482
        414   F0 00291750 SHELL32_EnumCommonTasks
9483
        415   F1 00291760 SHELL32_FilePlaceholder_BindToPrimaryStream
9484
        416   F2 00070C00 SHELL32_FilePlaceholder_CreateInstance
9485
        417   F3 00291770 SHELL32_FreeEncryptedFileKeyInfo
9486
        418   F4 00128890 SHELL32_GenerateAppID
9487
        419   F5 00291780 SHELL32_GetAppIDRoot
9488
        420   F6 00291790 SHELL32_GetCommandProviderForFolderType
9489
        421   F7 000E82C0 SHELL32_GetDPIAdjustedLogicalSize
9490
        422   F8 002917A0 SHELL32_GetDiskCleanupPath
9491
        423   F9 002917B0 SHELL32_GetFileNameFromBrowse
9492
        424   FA 000E8B70 SHELL32_GetIconOverlayManager
9493
        425   FB 002917C0 SHELL32_GetLinkInfoData
9494
        426   FC 000D8720 SHELL32_GetPlaceholderStatesFromFileAttributesAndReparsePointTag
9495
        427   FD 002917D0 SHELL32_GetRatingBucket
9496
        428   FE 00291800 SHELL32_GetSkyDriveNetworkStates
9497
        429   FF 00291810 SHELL32_GetSqmableFileName
9498
        430  100 00291820 SHELL32_GetThumbnailAdornerFromFactory
9499
        431  101 0009DE40 SHELL32_GetThumbnailAdornerFromFactory2
9500
        432  102 00291830 SHELL32_HandleUnrecognizedFileSystem
9501
        433  103 000AC410 SHELL32_IconCacheCreate
9502
        434  104 000EE160 SHELL32_IconCacheDestroy
9503
        435  105 00291840 SHELL32_IconCacheHandleAssociationChanged
9504
        436  106 000ABFE0 SHELL32_IconCacheRestore
9505
        437  107 000E52C0 SHELL32_IconCache_AboutToExtractIcons
9506
        438  108 000EA360 SHELL32_IconCache_DoneExtractingIcons
9507
        439  109 000E9A20 SHELL32_IconCache_ExpandEnvAndSearchPath
9508
        440  10A 000E5B00 SHELL32_IconCache_RememberRecentlyExtractedIconsW
9509
        441  10B 000E3DB0 SHELL32_IconOverlayManagerInit
9510
        442  10C 000EE110 SHELL32_IsGetKeyboardLayoutPresent
9511
        443  10D 00116CF0 SHELL32_IsSystemUpgradeInProgress
9512
        444  10E 000EC420 SHELL32_IsValidLinkInfo
9513
        445  10F 00291850 SHELL32_LegacyEnumSpecialTasksByType
9514
        446  110 00291860 SHELL32_LegacyEnumTasks
9515
        447  111 0006A270 SHELL32_LookupBackIconIndex
9516
        448  112 0006D550 SHELL32_LookupFrontIconIndex
9517
        449  113 00291870 SHELL32_NormalizeRating
9518
        450  114 00291880 SHELL32_NotifyLinkTrackingServiceOfMove
9519
        451  115 001F13B0 SHELL32_PifMgr_CloseProperties
9520
        452  116 00167E60 SHELL32_PifMgr_GetProperties
9521
        453  117 00167E60 SHELL32_PifMgr_OpenProperties
9522
        454  118 00167E60 SHELL32_PifMgr_SetProperties
9523
        455  119 00291890 SHELL32_Printers_CreateBindInfo
9524
        456  11A 002918A0 SHELL32_Printjob_GetPidl
9525
        457  11B 002918B0 SHELL32_PurgeSystemIcon
9526
        458  11C 000AB550 SHELL32_RefreshOverlayImages
9527
        459  11D 002918C0 SHELL32_ResolveLinkInfoW
9528
        460  11E 002918D0 SHELL32_SHAddSparseIcon
9529
        461  11F 002918E0 SHELL32_SHCreateByValueOperationInterrupt
9530
        462  120 000E71E0 SHELL32_SHCreateDefaultContextMenu
9531
        463  121 002918F0 SHELL32_SHCreateLocalServer
9532
        464  122 000EABB0 SHELL32_SHCreateShellFolderView
9533
        465  123 00291900 SHELL32_SHDuplicateEncryptionInfoFile
9534
        466  124 00291910 SHELL32_SHEncryptFile
9535
        467  125 00291920 SHELL32_SHFormatDriveAsync
9536
        468  126 002919B0 SHELL32_SHGetThreadUndoManager
9537
        469  127 002919C0 SHELL32_SHGetUserNameW
9538
        470  128 002919D0 SHELL32_SHIsVirtualDevice
9539
        471  129 002919E0 SHELL32_SHLaunchPropSheet
9540
        472  12A 002919F0 SHELL32_SHLogILFromFSIL
9541
        473  12B 00291A00 SHELL32_SHOpenWithDialog
9542
        474  12C 00244080 SHELL32_SHUICommandFromGUID
9543
        475  12D 0049D3C0 SHELL32_SendToMenu_InvokeTargetedCommand
9544
        476  12E 0049D410 SHELL32_SendToMenu_VerifyTargetedCommand
9545
        477  12F 00291A10 SHELL32_SetPlaceholderReparsePointAttribute
9546
        478  130 00291A30 SHELL32_SetPlaceholderReparsePointAttribute2
9547
        479  131 00291A40 SHELL32_ShowHideIconOnlyOnDesktop
9548
        480  132 00291A50 SHELL32_SimpleRatingToFilterCondition
9549
        481  133 00291A60 SHELL32_StampIconForElevation
9550
        482  134 00019E70 SHELL32_SuspendUndo
9551
        483  135 00291A70 SHELL32_TryVirtualDiscImageDriveEject
9552
        484  136 00291AB0 SHELL32_UpdateFilePlaceholderStates
9553
        485  137 000E7160 SHELL32_VerifySaferTrust
9554
        486  138 00292D10 SHEmptyRecycleBinA
9555
        487  139 00292DB0 SHEmptyRecycleBinW
9556
        488  13A 000E7320 SHEnableServiceObject
9557
        489  13B 00212BF0 SHEnumerateUnreadMailAccountsW
9558
        490  13C 000D99E0 SHEvaluateSystemCommandTemplate
9559
        491  13D 001EE6F0 SHExtractIconsW
9560
        492  13E 001F3E70 SHFileOperation
9561
        493  13F 001F3E70 SHFileOperationA
9562
        494  140 0001E600 SHFileOperationW
9563
         90  141 00212FB0 SHFindFiles
9564
        149  142 00294B10 SHFind_InitMenuPopup
9565
        526  143 00294CA0 SHFlushSFCache
9566
        495  144 00219FC0 SHFormatDrive
9567
        195  145 000DC6C0 SHFree
9568
        496  146 001F3E80 SHFreeNameMappings
9569
        750  147 002130A0 SHGetAttributesFromDataObject
9570
        497  148 00250DB0 SHGetDataFromIDListA
9571
        498  149 000E38D0 SHGetDataFromIDListW
9572
        499  14A 000ED850 SHGetDesktopFolder
9573
        500  14B 00250EB0 SHGetDiskFreeSpaceA
9574
        501  14C 00250EB0 SHGetDiskFreeSpaceExA
9575
        502  14D 00250F20 SHGetDiskFreeSpaceExW
9576
        503  14E 0029B560 SHGetDriveMedia
9577
        504  14F 0001E210 SHGetFileInfo
9578
        505  150 0001E210 SHGetFileInfoA
9579
        506  151 00129490 SHGetFileInfoW
9580
        507  152 000ECD30 SHGetFolderLocation
9581
        508  153 00257F20 SHGetFolderPathA
9582
        509  154 00257F30 SHGetFolderPathAndSubDirA
9583
        510  155 000EE060 SHGetFolderPathAndSubDirW
9584
        511  156 00156DD0 SHGetFolderPathEx
9585
        512  157 000E0080 SHGetFolderPathW
9586
        513  158 00098620 SHGetIDListFromObject
9587
        514  159 0029B9D0 SHGetIconOverlayIndexA
9588
        515  15A 0029BA40 SHGetIconOverlayIndexW
9589
        727  15B 00034980 SHGetImageList
9590
        516  15C 000EE0C0 SHGetInstanceExplorer
9591
        517  15D 000A3FC0 SHGetItemFromDataObject
9592
        518  15E 000E83C0 SHGetItemFromObject
9593
        519  15F 00156DE0 SHGetKnownFolderIDList
9594
        527  160 00156DF0 SHGetKnownFolderItem
9595
        528  161 000E4220 SHGetKnownFolderPath
9596
        529  162 00250F30 SHGetLocalizedName
9597
        530  163 00124FF0 SHGetMalloc
9598
        531  164 0009CCF0 SHGetNameFromIDList
9599
        532  165 00250FE0 SHGetNewLinkInfo
9600
        179  166 00250FE0 SHGetNewLinkInfoA
9601
        180  167 002510F0 SHGetNewLinkInfoW
9602
        533  168 00213240 SHGetPathFromIDList
9603
        534  169 00213240 SHGetPathFromIDListA
9604
        535  16A 0007FBC0 SHGetPathFromIDListEx
9605
        536  16B 00080200 SHGetPathFromIDListW
9606
        537  16C 000DC5D0 SHGetPropertyStoreForWindow
9607
        538  16D 00251120 SHGetPropertyStoreFromIDList
9608
        539  16E 002511C0 SHGetPropertyStoreFromParsingName
9609
         98  16F 00213350 SHGetRealIDL
9610
        709  170 001EEB00 SHGetSetFolderCustomSettings
9611
         68  171 000C1AE0 SHGetSetSettings
9612
        540  172 0029C110 SHGetSettings
9613
        541  173 001274E0 SHGetSpecialFolderLocation
9614
        542  174 00257F40 SHGetSpecialFolderPathA
9615
        543  175 000EC220 SHGetSpecialFolderPathW
9616
        544  176 0010DAD0 SHGetStockIconInfo
9617
        545  177 0009C850 SHGetTemporaryPropertyForItem
9618
        546  178 00213370 SHGetUnreadMailCountW
9619
        193  179 00151DA0 SHHandleUpdateImage
9620
        228  17A 00208070 SHHelpShortcuts_RunDLL
9621
        229  17B 00208070 SHHelpShortcuts_RunDLLA
9622
        238  17C 00208100 SHHelpShortcuts_RunDLLW
9623
         28  17D 00151810 SHILCreateFromPath
9624
        547  17E 00206800 SHInvokePrinterCommandA
9625
        548  17F 002068E0 SHInvokePrinterCommandW
9626
        549  180 00213730 SHIsFileAvailableOffline
9627
        747  181 0029D020 SHLimitInputEdit
9628
        550  182 0016DEE0 SHLoadInProc
9629
        551  183 002139F0 SHLoadNonloadedIconOverlayIdentifiers
9630
         77  184 00046F40 SHMapPIDLToSystemImageListIndex
9631
        716  185 0029ED30 SHMultiFileProperties
9632
        178  186 00208240 SHObjectProperties
9633
        552  187 00251290 SHOpenFolderAndSelectItems
9634
         80  188 0029ED50 SHOpenPropSheetW
9635
        553  189 001F5B00 SHOpenWithDialog
9636
        554  18A 0009A420 SHParseDisplayName
9637
        555  18B 001F3EA0 SHPathPrepareForWriteA
9638
        556  18C 001F3EB0 SHPathPrepareForWriteW
9639
        685  18D 004E4600 SHPropStgCreate
9640
        688  18E 004E4780 SHPropStgReadMultiple
9641
        689  18F 004E48E0 SHPropStgWriteMultiple
9642
        557  190 00292E30 SHQueryRecycleBinA
9643
        558  191 00292ED0 SHQueryRecycleBinW
9644
        559  192 0014A0B0 SHQueryUserNotificationState
9645
        560  193 002513E0 SHRemoveLocalizedName
9646
        170  194 00257930 SHReplaceFromPropSheetExtArray
9647
        561  195 00257F50 SHResolveLibrary
9648
        100  196 0009A260 SHRestricted
9649
        562  197 002573E0 SHSetDefaultProperties
9650
        231  198 00257F60 SHSetFolderPathA
9651
        232  199 00257F70 SHSetFolderPathW
9652
        176  19A 00020880 SHSetInstanceExplorer
9653
        563  19B 00257F80 SHSetKnownFolderPath
9654
        564  19C 00251480 SHSetLocalizedName
9655
        565  19D 0009C750 SHSetTemporaryPropertyForItem
9656
        566  19E 00213B50 SHSetUnreadMailCountW
9657
         73  19F 0028D740 SHShellFolderView_Message
9658
        567  1A0 004C9150 SHShowManageLibraryUI
9659
        162  1A1 00213D50 SHSimpleIDListFromPath
9660
         14  1A2 002522F0 SHStartNetConnectionDialogW
9661
        245  1A3 000EB730 SHTestTokenMembership
9662
        191  1A4 00256C70 SHUpdateImageA
9663
        192  1A5 00256CE0 SHUpdateImageW
9664
        568  1A6 0013F520 SHUpdateRecycleBinIcon
9665
        173  1A7 002470D0 SHValidateUNC
9666
        569  1A8 0012A140 SetCurrentProcessExplicitAppUserModelID
9667
        570  1A9 001F13C0 SheChangeDirA
9668
        571  1AA 001F1440 SheChangeDirExW
9669
        572  1AB 001F1970 SheGetDirA
9670
        573  1AC 001F1BC0 SheSetCurDrive
9671
        574  1AD 002A3BA0 ShellAboutA
9672
        575  1AE 002A3CB0 ShellAboutW
9673
        576  1AF 00207C00 ShellExec_RunDLL
9674
        577  1B0 00207C00 ShellExec_RunDLLA
9675
        578  1B1 00207CB0 ShellExec_RunDLLW
9676
        579  1B2 00207DE0 ShellExecuteA
9677
        580  1B3 00207E70 ShellExecuteEx
9678
        581  1B4 00207E70 ShellExecuteExA
9679
        582  1B5 000E2460 ShellExecuteExW
9680
        583  1B6 0014ABC0 ShellExecuteW
9681
        584  1B7 00167E60 ShellHookProc
9682
        183  1B8          ShellMessageBoxA (forwarded to shlwapi.ShellMessageBoxA)
9683
        182  1B9          ShellMessageBoxW (forwarded to shlwapi.ShellMessageBoxW)
9684
         72  1BA 00244D30 Shell_GetCachedImageIndex
9685
        585  1BB 00244D40 Shell_GetCachedImageIndexA
9686
        586  1BC 0006A820 Shell_GetCachedImageIndexW
9687
         71  1BD 000ABDB0 Shell_GetImageLists
9688
         67  1BE 000DA400 Shell_MergeMenus
9689
        587  1BF 00257F90 Shell_NotifyIcon
9690
        588  1C0 00257F90 Shell_NotifyIconA
9691
        589  1C1 00128060 Shell_NotifyIconGetRect
9692
        590  1C2 0006C420 Shell_NotifyIconW
9693
        103  1C3 000E3AB0 SignalFileOpen
9694
        682  1C4 002A3FC0 StgMakeUniqueName
9695
        591  1C5 00155260 StrChrA
9696
        592  1C6 00155270 StrChrIA
9697
        593  1C7 00155280 StrChrIW
9698
        594  1C8 00155290 StrChrW
9699
        595  1C9 001552A0 StrCmpNA
9700
        596  1CA 001552B0 StrCmpNIA
9701
        597  1CB 001552C0 StrCmpNIW
9702
        598  1CC 001552D0 StrCmpNW
9703
        599  1CD 001EFBB0 StrNCmpA
9704
        600  1CE 001EFC60 StrNCmpIA
9705
        601  1CF 001EFD10 StrNCmpIW
9706
        602  1D0 001EFDD0 StrNCmpW
9707
        603  1D1 001552E0 StrRChrA
9708
        604  1D2 001552F0 StrRChrIA
9709
        605  1D3 00155300 StrRChrIW
9710
        606  1D4 00155310 StrRChrW
9711
        607  1D5 001EFEB0 StrRStrA
9712
        608  1D6 00155320 StrRStrIA
9713
        609  1D7 00155330 StrRStrIW
9714
        610  1D8 001EFF70 StrRStrW
9715
        611  1D9 00155340 StrStrA
9716
        612  1DA 00155350 StrStrIA
9717
        613  1DB 00155360 StrStrIW
9718
        614  1DC 00155370 StrStrW
9719
        615  1DD 002A5560 UsersLibrariesFolderUI_CreateInstance
9720
        616  1DE 00207F50 WOWShellExecute
9721
        617  1DF 0023A330 WaitForExplorerRestartW
9722
        164  1E0 001F0740 Win32DeleteFile
9723
        652  1E1 001EDA20 WriteCabinetState
9724
          5               [NONAME] (forwarded to SHUNIMPL.#35)
9725
          7               [NONAME] (forwarded to SHUNIMPL.#192)
9726
          8               [NONAME] (forwarded to SHUNIMPL.#193)
9727
         12      00252270 [NONAME]
9728
         15      0024E610 [NONAME]
9729
         20      000738A0 [NONAME]
9730
         26               [NONAME] (forwarded to SHUNIMPL.#36)
9731
         29      00221D10 [NONAME]
9732
         30               [NONAME] (forwarded to shlwapi.PathBuildRootW)
9733
         31               [NONAME] (forwarded to shlwapi.PathFindExtensionW)
9734
         32               [NONAME] (forwarded to shlwapi.PathAddBackslashW)
9735
         33               [NONAME] (forwarded to shlwapi.PathRemoveBlanksW)
9736
         34               [NONAME] (forwarded to shlwapi.PathFindFileNameW)
9737
         35      002220F0 [NONAME]
9738
         36      00221A70 [NONAME]
9739
         37               [NONAME] (forwarded to shlwapi.PathCombineW)
9740
         38               [NONAME] (forwarded to shlwapi.PathStripPathW)
9741
         39               [NONAME] (forwarded to shlwapi.PathIsUNCW)
9742
         40               [NONAME] (forwarded to shlwapi.PathIsRelativeW)
9743
         44      00223FD0 [NONAME]
9744
         45      00221B10 [NONAME]
9745
         46               [NONAME] (forwarded to shlwapi.PathMatchSpecW)
9746
         48               [NONAME] (forwarded to shlwapi.PathSetDlgItemPathW)
9747
         50               [NONAME] (forwarded to shlwapi.PathStripToRootW)
9748
         52               [NONAME] (forwarded to shlwapi.PathGetArgsW)
9749
         53               [NONAME] (forwarded to SHUNIMPL.#388)
9750
         54      00238570 [NONAME]
9751
         55               [NONAME] (forwarded to shlwapi.PathQuoteSpacesW)
9752
         56               [NONAME] (forwarded to shlwapi.PathUnquoteSpacesW)
9753
         57               [NONAME] (forwarded to shlwapi.PathGetDriveNumberW)
9754
         58      00211D80 [NONAME]
9755
         60      00238520 [NONAME]
9756
         61      001048E0 [NONAME]
9757
         65      0010A0B0 [NONAME]
9758
         69      00252010 [NONAME]
9759
         70      001EDC70 [NONAME]
9760
         76      001F1CC0 [NONAME]
9761
         78               [NONAME] (forwarded to SHUNIMPL.#37)
9762
         79               [NONAME] (forwarded to SHUNIMPL.#38)
9763
         82               [NONAME] (forwarded to SHUNIMPL.#39)
9764
         84               [NONAME] (forwarded to SHUNIMPL.#40)
9765
         86               [NONAME] (forwarded to SHUNIMPL.#41)
9766
         87               [NONAME] (forwarded to SHUNIMPL.#42)
9767
         91      00212EC0 [NONAME]
9768
         93               [NONAME] (forwarded to shcore.Win32CreateDirectory)
9769
         94      001F0750 [NONAME]
9770
         95      000DE340 [NONAME]
9771
         96               [NONAME] (forwarded to SHUNIMPL.#43)
9772
         97      00167E60 [NONAME]
9773
         99      00050D00 [NONAME]
9774
        101               [NONAME] (forwarded to SHUNIMPL.#1)
9775
        104               [NONAME] (forwarded to SHUNIMPL.#2)
9776
        105               [NONAME] (forwarded to SHUNIMPL.#3)
9777
        106               [NONAME] (forwarded to SHUNIMPL.#4)
9778
        107               [NONAME] (forwarded to SHUNIMPL.#5)
9779
        108               [NONAME] (forwarded to SHUNIMPL.#6)
9780
        109               [NONAME] (forwarded to SHUNIMPL.#7)
9781
        110               [NONAME] (forwarded to SHUNIMPL.#8)
9782
        111               [NONAME] (forwarded to SHUNIMPL.#9)
9783
        112               [NONAME] (forwarded to SHUNIMPL.#10)
9784
        113               [NONAME] (forwarded to SHUNIMPL.#11)
9785
        114               [NONAME] (forwarded to SHUNIMPL.#12)
9786
        115               [NONAME] (forwarded to SHUNIMPL.#13)
9787
        116               [NONAME] (forwarded to SHUNIMPL.#14)
9788
        117               [NONAME] (forwarded to SHUNIMPL.#15)
9789
        118               [NONAME] (forwarded to SHUNIMPL.#16)
9790
        120               [NONAME] (forwarded to SHUNIMPL.#17)
9791
        121               [NONAME] (forwarded to SHUNIMPL.#44)
9792
        122               [NONAME] (forwarded to SHUNIMPL.#45)
9793
        123               [NONAME] (forwarded to SHUNIMPL.#46)
9794
        124               [NONAME] (forwarded to SHUNIMPL.#18)
9795
        126               [NONAME] (forwarded to SHUNIMPL.#47)
9796
        127               [NONAME] (forwarded to SHUNIMPL.#371)
9797
        128      00084F90 [NONAME]
9798
        130               [NONAME] (forwarded to SHUNIMPL.#48)
9799
        140               [NONAME] (forwarded to SHUNIMPL.#19)
9800
        141               [NONAME] (forwarded to SHUNIMPL.#20)
9801
        142               [NONAME] (forwarded to SHUNIMPL.#21)
9802
        143               [NONAME] (forwarded to SHUNIMPL.#22)
9803
        144               [NONAME] (forwarded to SHUNIMPL.#23)
9804
        145               [NONAME] (forwarded to shlwapi.PathFindOnPathW)
9805
        146               [NONAME] (forwarded to SHUNIMPL.#49)
9806
        148               [NONAME] (forwarded to SHUNIMPL.#50)
9807
        151               [NONAME] (forwarded to SHUNIMPL.#51)
9808
        156      000DC6C0 [NONAME]
9809
        158               [NONAME] (forwarded to SHUNIMPL.#389)
9810
        159               [NONAME] (forwarded to shlwapi.PathIsDirectoryW)
9811
        160      00252180 [NONAME]
9812
        161               [NONAME] (forwarded to SHUNIMPL.#214)
9813
        163               [NONAME] (forwarded to SHUNIMPL.#52)
9814
        166               [NONAME] (forwarded to SHUNIMPL.#53)
9815
        172      00250B50 [NONAME]
9816
        175      000EC220 [NONAME]
9817
        177               [NONAME] (forwarded to SHUNIMPL.#54)
9818
        181      0014B030 [NONAME]
9819
        184      00167E60 [NONAME]
9820
        185               [NONAME] (forwarded to SHUNIMPL.#390)
9821
        186      0024E630 [NONAME]
9822
        187               [NONAME] (forwarded to SHUNIMPL.#235)
9823
        188      00149C60 [NONAME]
9824
        194      00257720 [NONAME]
9825
        197               [NONAME] (forwarded to SHUNIMPL.#55)
9826
        198               [NONAME] (forwarded to SHUNIMPL.#56)
9827
        200      0013F560 [NONAME]
9828
        201      0013A720 [NONAME]
9829
        202               [NONAME] (forwarded to SHUNIMPL.#57)
9830
        203      0020F670 [NONAME]
9831
        204      002141B0 [NONAME]
9832
        205      002065D0 [NONAME]
9833
        206      0014D8C0 [NONAME]
9834
        209      00211350 [NONAME]
9835
        210      00211AC0 [NONAME]
9836
        211      001715B0 [NONAME]
9837
        212      00206490 [NONAME]
9838
        213      002066F0 [NONAME]
9839
        214      002067F0 [NONAME]
9840
        215      002522F0 [NONAME]
9841
        216               [NONAME] (forwarded to SHUNIMPL.#24)
9842
        217               [NONAME] (forwarded to SHUNIMPL.#25)
9843
        218               [NONAME] (forwarded to SHUNIMPL.#26)
9844
        219               [NONAME] (forwarded to SHUNIMPL.#27)
9845
        220               [NONAME] (forwarded to SHUNIMPL.#28)
9846
        221               [NONAME] (forwarded to SHUNIMPL.#29)
9847
        222               [NONAME] (forwarded to SHUNIMPL.#30)
9848
        223               [NONAME] (forwarded to SHUNIMPL.#31)
9849
        224               [NONAME] (forwarded to SHUNIMPL.#32)
9850
        225               [NONAME] (forwarded to SHUNIMPL.#33)
9851
        227               [NONAME] (forwarded to SHUNIMPL.#34)
9852
        230               [NONAME] (forwarded to SHUNIMPL.#372)
9853
        233               [NONAME] (forwarded to SHUNIMPL.#58)
9854
        234               [NONAME] (forwarded to SHUNIMPL.#59)
9855
        235               [NONAME] (forwarded to SHUNIMPL.#212)
9856
        236      00251860 [NONAME]
9857
        237      000EE110 [NONAME]
9858
        241      002135B0 [NONAME]
9859
        242               [NONAME] (forwarded to SHUNIMPL.#373)
9860
        243               [NONAME] (forwarded to SHUNIMPL.#374)
9861
        244      000E6B00 [NONAME]
9862
        246               [NONAME] (forwarded to SHUNIMPL.#375)
9863
        247               [NONAME] (forwarded to SHUNIMPL.#376)
9864
        248               [NONAME] (forwarded to SHUNIMPL.#377)
9865
        249               [NONAME] (forwarded to shlwapi.PathParseIconLocationW)
9866
        250               [NONAME] (forwarded to shlwapi.PathRemoveExtensionW)
9867
        251               [NONAME] (forwarded to shlwapi.PathRemoveArgsW)
9868
        252               [NONAME] (forwarded to api-ms-win-core-url-l1.PathIsURLW)
9869
        253               [NONAME] (forwarded to SHUNIMPL.#378)
9870
        254      00238500 [NONAME]
9871
        257      00167E60 [NONAME]
9872
        258      00129220 [NONAME]
9873
        259      000EE110 [NONAME]
9874
        260      00229890 [NONAME]
9875
        261      00296CD0 [NONAME]
9876
        262      00296FF0 [NONAME]
9877
        264      002298C0 [NONAME]
9878
        265      00247240 [NONAME]
9879
        266      00247270 [NONAME]
9880
        270      00295FD0 [NONAME]
9881
        271      00252310 [NONAME]
9882
        520               [NONAME] (forwarded to SHUNIMPL.#60)
9883
        521               [NONAME] (forwarded to SHUNIMPL.#61)
9884
        522               [NONAME] (forwarded to SHUNIMPL.#62)
9885
        523               [NONAME] (forwarded to SHUNIMPL.#63)
9886
        525               [NONAME] (forwarded to SHUNIMPL.#234)
9887
        640               [NONAME] (forwarded to SHUNIMPL.#64)
9888
        641               [NONAME] (forwarded to SHUNIMPL.#65)
9889
        643               [NONAME] (forwarded to SHUNIMPL.#66)
9890
        646               [NONAME] (forwarded to SHUNIMPL.#67)
9891
        648               [NONAME] (forwarded to SHUNIMPL.#379)
9892
        650               [NONAME] (forwarded to shlwapi.PathIsSameRootW)
9893
        651      001EDA10 [NONAME]
9894
        653               [NONAME] (forwarded to SHUNIMPL.#68)
9895
        660      000AB850 [NONAME]
9896
        681               [NONAME] (forwarded to SHUNIMPL.#428)
9897
        683      0016E1C0 [NONAME]
9898
        684      0016E1C0 [NONAME]
9899
        690      004E4520 [NONAME]
9900
        691               [NONAME] (forwarded to SHUNIMPL.#216)
9901
        700               [NONAME] (forwarded to SHUNIMPL.#380)
9902
        702      000DA370 [NONAME]
9903
        703               [NONAME] (forwarded to SHLWAPI.#269)
9904
        704               [NONAME] (forwarded to SHLWAPI.#270)
9905
        707               [NONAME] (forwarded to SHUNIMPL.#69)
9906
        708               [NONAME] (forwarded to SHUNIMPL.#70)
9907
        711      0020F9A0 [NONAME]
9908
        712               [NONAME] (forwarded to SHUNIMPL.#71)
9909
        713      00222010 [NONAME]
9910
        714      00127DD0 [NONAME]
9911
        715               [NONAME] (forwarded to SHUNIMPL.#191)
9912
        719      0049E310 [NONAME]
9913
        720               [NONAME] (forwarded to SHUNIMPL.#72)
9914
        721               [NONAME] (forwarded to SHUNIMPL.#73)
9915
        722               [NONAME] (forwarded to SHUNIMPL.#236)
9916
        723      00148E70 [NONAME]
9917
        724               [NONAME] (forwarded to SHUNIMPL.#381)
9918
        725               [NONAME] (forwarded to SHUNIMPL.#74)
9919
        726               [NONAME] (forwarded to SHUNIMPL.#75)
9920
        731      0014D6F0 [NONAME]
9921
        732      0014B310 [NONAME]
9922
        733      000EBB90 [NONAME]
9923
        740      0026A7A0 [NONAME]
9924
        744      002331D0 [NONAME]
9925
        745               [NONAME] (forwarded to SHUNIMPL.#382)
9926
        748      0029CFD0 [NONAME]
9927
        749               [NONAME] (forwarded to SHUNIMPL.#76)
9928
        751      00213D90 [NONAME]
9929
        752      00251DF0 [NONAME]
9930
        753      0014B240 [NONAME]
9931
        754      0029D270 [NONAME]
9932
        755      000DD000 [NONAME]
9933
        756               [NONAME] (forwarded to SHUNIMPL.#77)
9934
        757      0009D3B0 [NONAME]
9935
        758      00018A10 [NONAME]
9936
        759      00018950 [NONAME]
9937
        760      001F3E40 [NONAME]
9938
        761      00256C30 [NONAME]
9939
        762               [NONAME] (forwarded to SHUNIMPL.#383)
9940
        763      00233200 [NONAME]
9941
        764      0003C4E0 [NONAME]
9942
        765      0025D300 [NONAME]
9943
        766               [NONAME] (forwarded to SHUNIMPL.#385)
9944
        767      001671C0 [NONAME]
9945
        777      0001D520 [NONAME]
9946
        778      0021C9F0 [NONAME]
9947
        779      00211640 [NONAME]
9948
        781      00259400 [NONAME]
9949
        782      00248690 [NONAME]
9950
        786               [NONAME] (forwarded to SHUNIMPL.#237)
9951
        787      000DC7D0 [NONAME]
9952
        788      00276050 [NONAME]
9953
        789      00276100 [NONAME]
9954
        790      00251270 [NONAME]
9955
        791      00276000 [NONAME]
9956
        792      000DC8E0 [NONAME]
9957
        810      00296D00 [NONAME]
9958
        811      00296B40 [NONAME]
9959
        812      004E71C0 [NONAME]
9960
        813      004E7270 [NONAME]
9961
        814      00124F20 [NONAME]
9962
        815      001265F0 [NONAME]
9963
        816      00523E80 [NONAME]
9964
        817      00523F10 [NONAME]
9965
        818      0011F0F0 [NONAME]
9966
        819      00524160 [NONAME]
9967
        820               [NONAME] (forwarded to SHUNIMPL.#249)
9968
        821               [NONAME] (forwarded to SHUNIMPL.#250)
9969
        822               [NONAME] (forwarded to SHUNIMPL.#251)
9970
        823      000381F0 [NONAME]
9971
        824      00047700 [NONAME]
9972
        825      00523A90 [NONAME]
9973
        826               [NONAME] (forwarded to SHUNIMPL.#252)
9974
        827               [NONAME] (forwarded to SHUNIMPL.#253)
9975
        828      0021FC50 [NONAME]
9976
        829      00220000 [NONAME]
9977
        830      00524090 [NONAME]
9978
        831      00212840 [NONAME]
9979
        832               [NONAME] (forwarded to SHUNIMPL.#387)
9980
        833      00156E00 [NONAME]
9981
        834               [NONAME] (forwarded to SHUNIMPL.#254)
9982
        835               [NONAME] (forwarded to SHUNIMPL.#255)
9983
        836               [NONAME] (forwarded to SHUNIMPL.#256)
9984
        837               [NONAME] (forwarded to SHUNIMPL.#257)
9985
        838               [NONAME] (forwarded to SHUNIMPL.#258)
9986
        839               [NONAME] (forwarded to SHUNIMPL.#259)
9987
        840      00251C00 [NONAME]
9988
        841               [NONAME] (forwarded to SHUNIMPL.#424)
9989
        842               [NONAME] (forwarded to SHUNIMPL.#425)
9990
        843               [NONAME] (forwarded to SHUNIMPL.#386)
9991
        844      00524000 [NONAME]
9992
        845      005236C0 [NONAME]
9993
        847      00523B50 [NONAME]
9994
        848      0025D350 [NONAME]
9995
        849      001274F0 [NONAME]
9996
        850      000DD020 [NONAME]
9997
        851      0020BD40 [NONAME]
9998
        852               [NONAME] (forwarded to SHUNIMPL.#391)
9999
        854               [NONAME] (forwarded to SHUNIMPL.#260)
10000
        856               [NONAME] (forwarded to SHUNIMPL.#423)
10001
        857               [NONAME] (forwarded to SHUNIMPL.#426)
10002
        858               [NONAME] (forwarded to SHUNIMPL.#392)
10003
        859      002A76A0 [NONAME]
10004
        860      00019340 [NONAME]
10005
        861               [NONAME] (forwarded to SHUNIMPL.#261)
10006
        862      0024E880 [NONAME]
10007
        863               [NONAME] (forwarded to SHUNIMPL.#262)
10008
        864      00249290 [NONAME]
10009
        865      002116F0 [NONAME]
10010
        866      0005E8D0 [NONAME]
10011
        867               [NONAME] (forwarded to SHUNIMPL.#263)
10012
        868               [NONAME] (forwarded to SHUNIMPL.#264)
10013
        869               [NONAME] (forwarded to SHUNIMPL.#384)
10014
        870      000EE000 [NONAME]
10015
        871      000E9E90 [NONAME]
10016
        872               [NONAME] (forwarded to SHUNIMPL.#265)
10017
        873      000DC830 [NONAME]
10018
        874      00110C00 [NONAME]
10019
        875      00110B20 [NONAME]
10020
        876      00243B90 [NONAME]
10021
        877      00243FD0 [NONAME]
10022
        878      00243E40 [NONAME]
10023
        880      0020FDD0 [NONAME]
10024
        881      00293F40 [NONAME]
10025
        882      002940A0 [NONAME]
10026
        883      004E3750 [NONAME]
10027
        884      00237BA0 [NONAME]
10028
        885      0012EC70 [NONAME]
10029
        886      002138E0 [NONAME]
10030
        887      00262CF0 [NONAME]
10031
        888      0029D2F0 [NONAME]
10032
        889      001029E0 [NONAME]
10033
        890      00102990 [NONAME]
10034
        891      00151CF0 [NONAME]
10035
        892      00222250 [NONAME]
10036
        893      000C63E0 [NONAME]
10037
        894      001F3E20 [NONAME]
10038
        895      00149AC0 [NONAME]
10039
        896      001F3DB0 [NONAME]
10040
        897      002A2D10 [NONAME]
10041
        898      00250B80 [NONAME]
10042
        899      0014B2D0 [NONAME]
10043
        900      000E9B20 [NONAME]
10044
        901      00489640 [NONAME]
10045
        902               [NONAME] (forwarded to SHUNIMPL.#473)
10046
        903      000EDFC0 [NONAME]
10047
        904      0014A520 [NONAME]
10048
        905      0006D770 [NONAME]
10049
        906      0014B2F0 [NONAME]
10050
        907      00249110 [NONAME]
10051
        909      0002C5C0 [NONAME]
10052
        910      002290C0 [NONAME]
10053
        911      0020B010 [NONAME]
10054
        912      00231640 [NONAME]
10055
        913      00232160 [NONAME]
10056
        914      001F3CA0 [NONAME]
10057
        915      000DF910 [NONAME]
10058
        916      000C79A0 [NONAME]
10059
        922      0029FA10 [NONAME]
10060
        923      00020DE0 [NONAME]
10061
        924      001F3D90 [NONAME]
10062
        926      0025D1C0 [NONAME]
10063
        927      00268F90 [NONAME]
10064
        928      00291110 [NONAME]
10065
        930      00120630 [NONAME]
10066
        932      001F3EC0 [NONAME]
10067
        933      001F3E90 [NONAME]
10068
        938      00256B90 [NONAME]
10069
        939      00033F10 [NONAME]
10070
        940      001F3E30 [NONAME]
10071
        943      0049A700 [NONAME]
10072

10073
  Summary
10074

10075
        A000 .data
10076
        3000 .didat
10077
       4C000 .pdata
10078
      12C000 .rdata
10079
       15000 .reloc
10080
      DA5000 .rsrc
10081
      5E4000 .text
10082
        1000 .tls
10083
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
10084
Copyright (C) Microsoft Corporation.  All rights reserved.
10085

10086

10087
Dump of file user32.dll
10088

10089
File Type: DLL
10090

10091
  Section contains the following exports for USER32.dll
10092

10093
    00000000 characteristics
10094
    559F30A6 time date stamp Thu Jul  9 19:40:38 2015
10095
        0.00 version
10096
        1502 ordinal base
10097
        1201 number of functions
10098
         938 number of names
10099

10100
    ordinal hint RVA      name
10101

10102
       1503    0 00030E20 ActivateKeyboardLayout
10103
       1504    1 00033040 AddClipboardFormatListener
10104
       1505    2 0004C560 AdjustWindowRect
10105
       1506    3 000123C0 AdjustWindowRectEx
10106
       1507    4 00084C50 AlignRects
10107
       1508    5 0004C5C0 AllowForegroundActivation
10108
       1509    6 00026580 AllowSetForegroundWindow
10109
       1510    7 00080070 AnimateWindow
10110
       1511    8 00080D50 AnyPopup
10111
       1512    9 000827D0 AppendMenuA
10112
       1513    A 0001D8B0 AppendMenuW
10113
       1514    B 0004C5D0 ArrangeIconicWindows
10114
       1515    C 00030B00 AttachThreadInput
10115
       1516    D 00024D30 BeginDeferWindowPos
10116
       1517    E 0002FDC0 BeginPaint
10117
       1518    F 00033080 BlockInput
10118
       1519   10 00029F70 BringWindowToTop
10119
       1520   11 00082820 BroadcastSystemMessage
10120
       1521   12 00082820 BroadcastSystemMessageA
10121
       1522   13 00082850 BroadcastSystemMessageExA
10122
       1523   14 0002E680 BroadcastSystemMessageExW
10123
       1524   15 00015C40 BroadcastSystemMessageW
10124
       1525   16 0002DD70 BuildReasonArray
10125
       1526   17 000305B0 CalcMenuBar
10126
       1527   18 000330B0 CalculatePopupWindowPosition
10127
       1528   19 00083320 CallMsgFilter
10128
       1529   1A 00083320 CallMsgFilterA
10129
       1530   1B 000129D0 CallMsgFilterW
10130
       1531   1C 000152D0 CallNextHookEx
10131
       1532   1D 0004E0A0 CallWindowProcA
10132
       1533   1E 0000F900 CallWindowProcW
10133
       1534   1F 00057510 CancelShutdown
10134
       1535   20 0004C5E0 CascadeChildWindows
10135
       1536   21 00074E60 CascadeWindows
10136
       1537   22 00030DD0 ChangeClipboardChain
10137
       1538   23 00083430 ChangeDisplaySettingsA
10138
       1539   24 00029FA0 ChangeDisplaySettingsExA
10139
       1540   25 000238E0 ChangeDisplaySettingsExW
10140
       1541   26 000573A0 ChangeDisplaySettingsW
10141
       1542   27 00075E40 ChangeMenuA
10142
       1543   28 00075EE0 ChangeMenuW
10143
       1544   29 00025950 ChangeWindowMessageFilter
10144
       1545   2A 000330F0 ChangeWindowMessageFilterEx
10145
       1546   2B 00026FC0 CharLowerA
10146
       1547   2C 00084940 CharLowerBuffA
10147
       1548   2D 00026FD0 CharLowerBuffW
10148
       1549   2E 00026C80 CharLowerW
10149
       1555   2F 00024260 CharNextA
10150
       1556   30 00084950 CharNextExA
10151
       1557   31 00025980 CharNextW
10152
       1558   32 00026C90 CharPrevA
10153
       1559   33 00084960 CharPrevExA
10154
       1560   34 0002EFC0 CharPrevW
10155
       1561   35 000232A0 CharToOemA
10156
       1562   36 0007B630 CharToOemBuffA
10157
       1563   37 0007B680 CharToOemBuffW
10158
       1564   38 0007B6E0 CharToOemW
10159
       1565   39 00023E80 CharUpperA
10160
       1566   3A 00084970 CharUpperBuffA
10161
       1567   3B 00001210 CharUpperBuffW
10162
       1568   3C 000232F0 CharUpperW
10163
       1569   3D 0001FB40 CheckDBCSEnabledExt
10164
       1570   3E 00002460 CheckDlgButton
10165
       1571   3F 0001D430 CheckMenuItem
10166
       1572   40 00002180 CheckMenuRadioItem
10167
       1573   41 00033110 CheckProcessForClipboardAccess
10168
       1574   42 00033120 CheckProcessSession
10169
       1575   43 000019E0 CheckRadioButton
10170
       1576   44 00033130 CheckWindowThreadDesktop
10171
       1577   45 0004C610 ChildWindowFromPoint
10172
       1578   46 00033140 ChildWindowFromPointEx
10173
       1579   47 00047F20 CliImmSetHotKey
10174
       1580   48 00019D50 ClientThreadSetup
10175
       1581   49 0000BFE0 ClientToScreen
10176
       1582   4A 00033160 ClipCursor
10177
       1583   4B 00030920 CloseClipboard
10178
       1584   4C 000306A0 CloseDesktop
10179
       1585   4D 0004BDC0 CloseGestureInfoHandle
10180
       1586   4E 0004F6E0 CloseTouchInputHandle
10181
       1587   4F 0004C6A0 CloseWindow
10182
       1588   50 00030790 CloseWindowStation
10183
       1589   51 00023540 ConsoleControl
10184
       1590   52 00033A80 ControlMagnification
10185
       1591   53 0004ED70 CopyAcceleratorTableA
10186
       1592   54 0002FF10 CopyAcceleratorTableW
10187
       1593   55 00004AF0 CopyIcon
10188
       1594   56 00005A40 CopyImage
10189
       1595   57 0001FB00 CopyRect
10190
       1596   58 00030D30 CountClipboardFormats
10191
       1597   59 0004EDF0 CreateAcceleratorTableA
10192
       1598   5A 00030B50 CreateAcceleratorTableW
10193
       1599   5B 0002FF70 CreateCaret
10194
       1600   5C 0002A6C0 CreateCursor
10195
       1601   5D 00033180 CreateDCompositionHwndTarget
10196
       1602   5E 0002F0A0 CreateDesktopA
10197
       1603   5F 0002F0E0 CreateDesktopExA
10198
       1604   60 00026690 CreateDesktopExW
10199
       1605   61 00026650 CreateDesktopW
10200
       1606   62 0004EE70 CreateDialogIndirectParamA
10201
       1607   63 000180C0 CreateDialogIndirectParamAorW
10202
       1608   64 00002710 CreateDialogIndirectParamW
10203
       1609   65 0004EEA0 CreateDialogParamA
10204
       1610   66 000182A0 CreateDialogParamW
10205
       1611   67 0004EFB0 CreateIcon
10206
       1612   68 0004F060 CreateIconFromResource
10207
       1613   69 000052F0 CreateIconFromResourceEx
10208
       1614   6A 00007260 CreateIconIndirect
10209
       1615   6B 000751D0 CreateMDIWindowA
10210
       1616   6C 00075250 CreateMDIWindowW
10211
       1617   6D 00026FB0 CreateMenu
10212
       1618   6E 00026E90 CreatePopupMenu
10213
       1619   6F 0004DE20 CreateSystemThreads
10214
       1620   70 00024DF0 CreateWindowExA
10215
       1621   71 0000A9C0 CreateWindowExW
10216
       1622   72 00025170 CreateWindowInBand
10217
       1623   73 000259D0 CreateWindowInBandEx
10218
       1624   74 00080DA0 CreateWindowIndirect
10219
       1625   75 0002F1D0 CreateWindowStationA
10220
       1626   76 00018420 CreateWindowStationW
10221
       1627   77 0002E5B0 CsrBroadcastSystemMessageExW
10222
       1628   78 000189D0 CtxInitUser32
10223
       1629   79 000818D0 DdeAbandonTransaction
10224
       1630   7A 0006ADA0 DdeAccessData
10225
       1631   7B 0006AE50 DdeAddData
10226
       1632   7C 000819A0 DdeClientTransaction
10227
       1633   7D 0006B9B0 DdeCmpStringHandles
10228
       1634   7E 00054E40 DdeConnect
10229
       1635   7F 00054F40 DdeConnectList
10230
       1636   80 0006AFC0 DdeCreateDataHandle
10231
       1637   81 0006B9D0 DdeCreateStringHandleA
10232
       1638   82 000175E0 DdeCreateStringHandleW
10233
       1639   83 000551F0 DdeDisconnect
10234
       1640   84 00055290 DdeDisconnectList
10235
       1641   85 0004B140 DdeEnableCallback
10236
       1642   86 0006B0F0 DdeFreeDataHandle
10237
       1643   87 00019A00 DdeFreeStringHandle
10238
       1644   88 0006B160 DdeGetData
10239
       1645   89 00058540 DdeGetLastError
10240
       1646   8A 00006AC0 DdeGetQualityOfService
10241
       1647   8B 00058590 DdeImpersonateClient
10242
       1648   8C 00058610 DdeInitializeA
10243
       1649   8D 00025D60 DdeInitializeW
10244
       1650   8E 0006B9F0 DdeKeepStringHandle
10245
       1651   8F 00017390 DdeNameService
10246
       1652   90 00081FD0 DdePostAdvise
10247
       1653   91 00082280 DdeQueryConvInfo
10248
       1654   92 000553A0 DdeQueryNextServer
10249
       1655   93 0006BAB0 DdeQueryStringA
10250
       1656   94 0006BAD0 DdeQueryStringW
10251
       1657   95 000554F0 DdeReconnect
10252
       1658   96 00006AC0 DdeSetQualityOfService
10253
       1659   97 00082490 DdeSetUserHandle
10254
       1660   98 0006B290 DdeUnaccessData
10255
       1661   99 00019B20 DdeUninitialize
10256
       1662   9A          DefDlgProcA (forwarded to NTDLL.NtdllDialogWndProc_A)
10257
       1663   9B          DefDlgProcW (forwarded to NTDLL.NtdllDialogWndProc_W)
10258
       1664   9C 000752D0 DefFrameProcA
10259
       1665   9D 000291B0 DefFrameProcW
10260
       1666   9E 00075300 DefMDIChildProcA
10261
       1667   9F 00027430 DefMDIChildProcW
10262
       1668   A0 0004E1D0 DefRawInputProc
10263
       1669   A1          DefWindowProcA (forwarded to NTDLL.NtdllDefWindowProc_A)
10264
       1670   A2          DefWindowProcW (forwarded to NTDLL.NtdllDefWindowProc_W)
10265
       1671   A3 00023DB0 DeferWindowPos
10266
       1672   A4 0004C6E0 DeferWindowPosAndBand
10267
       1673   A5 00030800 DeleteMenu
10268
       1674   A6 00027010 DeregisterShellHookWindow
10269
       1675   A7 00003950 DestroyAcceleratorTable
10270
       1676   A8 00026F20 DestroyCaret
10271
       1677   A9 00024240 DestroyCursor
10272
       1678   AA 00033200 DestroyDCompositionHwndTarget
10273
       1679   AB 00024240 DestroyIcon
10274
       1680   AC 00030A10 DestroyMenu
10275
       1681   AD 0002E530 DestroyReasons
10276
       1682   AE 00030610 DestroyWindow
10277
       1683   AF 0004F090 DialogBoxIndirectParamA
10278
       1684   B0 00028D30 DialogBoxIndirectParamAorW
10279
       1685   B1 00028D00 DialogBoxIndirectParamW
10280
       1686   B2 0004F0C0 DialogBoxParamA
10281
       1687   B3 00028C50 DialogBoxParamW
10282
       1688   B4 0002B760 DisableProcessWindowsGhosting
10283
       1689   B5 000261E0 DispatchMessageA
10284
       1690   B6 0000FA50 DispatchMessageW
10285
       1691   B7 000252D0 DisplayConfigGetDeviceInfo
10286
       1692   B8 000849F0 DisplayConfigSetDeviceInfo
10287
       1693   B9 00057560 DisplayExitWindowsWarnings
10288
       1694   BA 000719B0 DlgDirListA
10289
       1695   BB 00053220 DlgDirListComboBoxA
10290
       1696   BC 00053310 DlgDirListComboBoxW
10291
       1697   BD 00071AA0 DlgDirListW
10292
       1698   BE 00053370 DlgDirSelectComboBoxExA
10293
       1699   BF 00053410 DlgDirSelectComboBoxExW
10294
       1700   C0 00071B00 DlgDirSelectExA
10295
       1701   C1 00071BB0 DlgDirSelectExW
10296
       1702   C2 00033280 DoSoundConnect
10297
       1703   C3 00033290 DoSoundDisconnect
10298
       1704   C4 000332A0 DragDetect
10299
       1705   C5 000332B0 DragObject
10300
       1706   C6 000332C0 DrawAnimatedRects
10301
       1707   C7 0007A820 DrawCaption
10302
       1708   C8 00083460 DrawCaptionTempA
10303
       1709   C9 000573D0 DrawCaptionTempW
10304
       1710   CA 00002FD0 DrawEdge
10305
       1711   CB 00001D10 DrawFocusRect
10306
       1712   CC 00085BA0 DrawFrame
10307
       1713   CD 00085E40 DrawFrameControl
10308
       1714   CE 0002AE90 DrawIcon
10309
       1715   CF 00022C50 DrawIconEx
10310
       1716   D0 0002AE80 DrawMenuBar
10311
       1717   D1 00075F80 DrawMenuBarTemp
10312
       1718   D2 00076930 DrawStateA
10313
       1719   D3 00025B50 DrawStateW
10314
       1720   D4 00057A20 DrawTextA
10315
       1721   D5 00057AA0 DrawTextExA
10316
       1722   D6 0001B420 DrawTextExW
10317
       1723   D7 0001B450 DrawTextW
10318
       1724   D8 000270A0 DwmGetDxSharedSurface
10319
       1725   D9 00033300 DwmGetRemoteSessionOcclusionEvent
10320
       1726   DA 00033310 DwmGetRemoteSessionOcclusionState
10321
       1727   DB 00033320 DwmKernelShutdown
10322
       1728   DC 00033330 DwmKernelStartup
10323
       1729   DD 0002ECB0 DwmLockScreenUpdates
10324
       1730   DE 00033340 DwmValidateWindow
10325
       1731   DF 00060AF0 EditWndProc
10326
       1732   E0 00030BC0 EmptyClipboard
10327
       1733   E1 00033350 EnableChildWindowDpiMessage
10328
       1734   E2 0002A240 EnableMenuItem
10329
       1735   E3 00033370 EnableMouseInPointer
10330
       1736   E4 0002AD30 EnableScrollBar
10331
       1737   E5 00026EA0 EnableSessionForMMCSS
10332
       1738   E6 00026130 EnableWindow
10333
       1739   E7 00025970 EndDeferWindowPos
10334
       1740   E8 0002FEB0 EndDeferWindowPosEx
10335
       1741   E9 0002A3D0 EndDialog
10336
       1742   EA 000333A0 EndMenu
10337
       1743   EB 0002FDE0 EndPaint
10338
       1744   EC 00057960 EndTask
10339
       1745   ED 0007BBE0 EnterReaderModeHelper
10340
       1746   EE 00014A80 EnumChildWindows
10341
       1747   EF 0002AE40 EnumClipboardFormats
10342
       1748   F0 00016160 EnumDesktopWindows
10343
       1749   F1 000203A0 EnumDesktopsA
10344
       1750   F2 000203E0 EnumDesktopsW
10345
       1751   F3 0001FB60 EnumDisplayDevicesA
10346
       1752   F4 00023AC0 EnumDisplayDevicesW
10347
       1753   F5 000300F0 EnumDisplayMonitors
10348
       1754   F6 000206C0 EnumDisplaySettingsA
10349
       1755   F7 000206E0 EnumDisplaySettingsExA
10350
       1756   F8 000205A0 EnumDisplaySettingsExW
10351
       1757   F9 00020580 EnumDisplaySettingsW
10352
       1758   FA 0004BC30 EnumPropsA
10353
       1759   FB 0004BC50 EnumPropsExA
10354
       1760   FC 00023C50 EnumPropsExW
10355
       1761   FD 0004BC70 EnumPropsW
10356
       1762   FE 000152A0 EnumThreadWindows
10357
       1763   FF 00020380 EnumWindowStationsA
10358
       1764  100 000203C0 EnumWindowStationsW
10359
       1765  101 00014A50 EnumWindows
10360
       1766  102 0001F2F0 EqualRect
10361
       1767  103 0007EE50 EvaluateProximityToPolygon
10362
       1768  104 0007F3A0 EvaluateProximityToRect
10363
       1769  105 00030150 ExcludeUpdateRgn
10364
       1770  106 0002E6B0 ExitWindowsEx
10365
       1771  107 000028C0 FillRect
10366
       1772  108 0007AE50 FindWindowA
10367
       1773  109 00021730 FindWindowExA
10368
       1774  10A 0001D1D0 FindWindowExW
10369
       1775  10B 00023300 FindWindowW
10370
       1776  10C 0004C7F0 FlashWindow
10371
       1777  10D 000333C0 FlashWindowEx
10372
       1778  10E 00001D70 FrameRect
10373
       1779  10F 000595F0 FreeDDElParam
10374
       1780  110 000333D0 FrostCrashedWindow
10375
       1781  111 00026970 GetActiveWindow
10376
       1782  112 00083570 GetAltTabInfo
10377
       1783  113 00083570 GetAltTabInfoA
10378
       1784  114 000574B0 GetAltTabInfoW
10379
       1785  115 00030760 GetAncestor
10380
       1786  116 00025290 GetAppCompatFlags
10381
       1787  117 00011F00 GetAppCompatFlags2
10382
       1788  118 00021C60 GetAsyncKeyState
10383
       1789  119 000333F0 GetAutoRotationState
10384
       1790  11A 00033400 GetCIMSSM
10385
       1791  11B 00023440 GetCapture
10386
       1792  11C 00030B80 GetCaretBlinkTime
10387
       1793  11D 00033410 GetCaretPos
10388
       1794  11E 00020F40 GetClassInfoA
10389
       1795  11F 000210E0 GetClassInfoExA
10390
       1796  120 00015A30 GetClassInfoExW
10391
       1797  121 000159E0 GetClassInfoW
10392
       1798  122 00082BD0 GetClassLongA
10393
       1799  123 00082C10 GetClassLongPtrA
10394
       1800  124 00013990 GetClassLongPtrW
10395
       1801  125 0000E530 GetClassLongW
10396
       1802  126 000133E0 GetClassNameA
10397
       1803  127 0001F910 GetClassNameW
10398
       1804  128 00013B50 GetClassWord
10399
       1805  129 0000BB00 GetClientRect
10400
       1806  12A 00033420 GetClipCursor
10401
       1807  12B 00033430 GetClipboardAccessToken
10402
       1808  12C 0002ABA0 GetClipboardData
10403
       1809  12D 000835A0 GetClipboardFormatNameA
10404
       1810  12E 00002790 GetClipboardFormatNameW
10405
       1811  12F 000308D0 GetClipboardOwner
10406
       1812  130 000301A0 GetClipboardSequenceNumber
10407
       1813  131 00033440 GetClipboardViewer
10408
       1814  132 00033450 GetComboBoxInfo
10409
       1815  133 00033460 GetCurrentInputMessageSource
10410
       1816  134 00001CA0 GetCursor
10411
       1817  135 00026D30 GetCursorFrameInfo
10412
       1818  136 00033480 GetCursorInfo
10413
       1819  137 00023420 GetCursorPos
10414
       1820  138 0002FCF0 GetDC
10415
       1821  139 00030560 GetDCEx
10416
       1822  13A 000334A0 GetDesktopID
10417
       1823  13B 00015E70 GetDesktopWindow
10418
       1824  13C 0002AA60 GetDialogBaseUnits
10419
       1825  13D 000334B0 GetDisplayAutoRotationPreferences
10420
       1826  13E 00026630 GetDisplayConfigBufferSizes
10421
       1827  13F 0001FD20 GetDlgCtrlID
10422
       1828  140 00013AA0 GetDlgItem
10423
       1829  141 00059F90 GetDlgItemInt
10424
       1830  142 00082C50 GetDlgItemTextA
10425
       1831  143 0002A500 GetDlgItemTextW
10426
       1832  144 000307A0 GetDoubleClickTime
10427
       1833  145 000237E0 GetDpiForMonitorInternal
10428
       1834  146 000334F0 GetDpiMetrics
10429
       1835  147 00022C40 GetFocus
10430
       1836  148 00030010 GetForegroundWindow
10431
       1837  149 00030C30 GetGUIThreadInfo
10432
       1838  14A 00033500 GetGestureConfig
10433
       1839  14B 0004C0D0 GetGestureExtraArgs
10434
       1840  14C 0004C0F0 GetGestureInfo
10435
       1841  14D 00033530 GetGuiResources
10436
       1842  14E 00004AC0 GetIconInfo
10437
       1843  14F 0004F1E0 GetIconInfoExA
10438
       1844  150 00024560 GetIconInfoExW
10439
       1845  151 0004C9F0 GetInputDesktop
10440
       1846  152 00033570 GetInputLocaleInfo
10441
       1847  153 00080EF0 GetInputState
10442
       1848  154 00033580 GetInternalWindowPos
10443
       1849  155 0004CA00 GetKBCodePage
10444
       1850  156 00083640 GetKeyNameTextA
10445
       1851  157 000574E0 GetKeyNameTextW
10446
       1852  158 0001FA50 GetKeyState
10447
       1853  159 00023110 GetKeyboardLayout
10448
       1854  15A 000301D0 GetKeyboardLayoutList
10449
       1855  15B 000836F0 GetKeyboardLayoutNameA
10450
       1856  15C 00026EC0 GetKeyboardLayoutNameW
10451
       1857  15D 000303C0 GetKeyboardState
10452
       1858  15E 0002ADB0 GetKeyboardType
10453
       1859  15F 00013630 GetLastActivePopup
10454
       1860  160 00022FE0 GetLastInputInfo
10455
       1861  161 000335B0 GetLayeredWindowAttributes
10456
       1862  162 000335C0 GetListBoxInfo
10457
       1863  163 00073AC0 GetMagnificationDesktopColorEffect
10458
       1864  164 00073BA0 GetMagnificationDesktopMagnification
10459
       1865  165 00033A90 GetMagnificationLensCtxInformation
10460
       1866  166 000147F0 GetMenu
10461
       1867  167 00030850 GetMenuBarInfo
10462
       1868  168 00076000 GetMenuCheckMarkDimensions
10463
       1869  169 00076180 GetMenuContextHelpId
10464
       1870  16A 000243B0 GetMenuDefaultItem
10465
       1871  16B 0004DEA0 GetMenuInfo
10466
       1872  16C 0000CAA0 GetMenuItemCount
10467
       1873  16D 00024E80 GetMenuItemID
10468
       1874  16E 0001D5F0 GetMenuItemInfoA
10469
       1875  16F 0001DAB0 GetMenuItemInfoW
10470
       1876  170 000335E0 GetMenuItemRect
10471
       1877  171 00027FB0 GetMenuState
10472
       1878  172 00082CA0 GetMenuStringA
10473
       1879  173 0001D4B0 GetMenuStringW
10474
       1880  174 0001AA50 GetMessageA
10475
       1881  175 00024740 GetMessageExtraInfo
10476
       1882  176 00025A70 GetMessagePos
10477
       1883  177 00025D50 GetMessageTime
10478
       1884  178 0001F8C0 GetMessageW
10479
       1885  179 0000B960 GetMonitorInfoA
10480
       1886  17A 0000A7F0 GetMonitorInfoW
10481
       1887  17B 000335F0 GetMouseMovePointsEx
10482
       1888  17C 0005A9A0 GetNextDlgGroupItem
10483
       1889  17D 00002600 GetNextDlgTabItem
10484
       1890  17E 000309C0 GetOpenClipboardWindow
10485
       1891  17F 0001CED0 GetParent
10486
       1892  180 00023420 GetPhysicalCursorPos
10487
       1893  181 00033610 GetPointerCursorId
10488
       1894  182 00033620 GetPointerDevice
10489
       1895  183 00033630 GetPointerDeviceCursors
10490
       1896  184 00033640 GetPointerDeviceProperties
10491
       1897  185 00033650 GetPointerDeviceRects
10492
       1898  186 00033660 GetPointerDevices
10493
       1899  187 00033670 GetPointerFrameArrivalTimes
10494
       1900  188 0004EA40 GetPointerFrameInfo
10495
       1901  189 00001FD0 GetPointerFrameInfoHistory
10496
       1902  18A 0004EA90 GetPointerFramePenInfo
10497
       1903  18B 0004EAD0 GetPointerFramePenInfoHistory
10498
       1904  18C 0004EB10 GetPointerFrameTouchInfo
10499
       1905  18D 0004EB50 GetPointerFrameTouchInfoHistory
10500
       1906  18E 00001AE0 GetPointerInfo
10501
       1907  18F 0004EB90 GetPointerInfoHistory
10502
       1908  190 00033690 GetPointerInputTransform
10503
       1909  191 0004EBE0 GetPointerPenInfo
10504
       1910  192 0004EC30 GetPointerPenInfoHistory
10505
       1911  193 0004EC80 GetPointerTouchInfo
10506
       1912  194 0004ECD0 GetPointerTouchInfoHistory
10507
       1913  195 000336A0 GetPointerType
10508
       1914  196 000336C0 GetPriorityClipboardFormat
10509
       1915  197 00027080 GetProcessDefaultLayout
10510
       1916  198 000233F0 GetProcessDpiAwarenessInternal
10511
       1917  199 0002FE70 GetProcessWindowStation
10512
       1918  19A 0004CA20 GetProgmanWindow
10513
       1919  19B 00020CC0 GetPropA
10514
       1920  19C 0001B070 GetPropW
10515
       1921  19D 0001AE40 GetQueueStatus
10516
       1922  19E 0006A740 GetRawInputBuffer
10517
       1923  19F 00033710 GetRawInputData
10518
       1924  1A0 00082CF0 GetRawInputDeviceInfoA
10519
       1925  1A1 0002B750 GetRawInputDeviceInfoW
10520
       1926  1A2 00033730 GetRawInputDeviceList
10521
       1927  1A3 00033740 GetRawPointerDeviceData
10522
       1928  1A4 0002B7C0 GetReasonTitleFromReasonCode
10523
       1929  1A5 00033750 GetRegisteredRawInputDevices
10524
       1930  1A6 00030570 GetScrollBarInfo
10525
       1931  1A7 00014160 GetScrollInfo
10526
       1932  1A8 0002A2E0 GetScrollPos
10527
       1933  1A9 00080F20 GetScrollRange
10528
       1934  1AA 0004CA80 GetSendMessageReceiver
10529
       1935  1AB 00024060 GetShellWindow
10530
       1936  1AC 00024D60 GetSubMenu
10531
       1937  1AD 0001A220 GetSysColor
10532
       1938  1AE 000235E0 GetSysColorBrush
10533
       1939  1AF 00030250 GetSystemMenu
10534
       1940  1B0 000110A0 GetSystemMetrics
10535
       1941  1B1 00057C40 GetTabbedTextExtentA
10536
       1942  1B2 00057D40 GetTabbedTextExtentW
10537
       1943  1B3 0002ED00 GetTaskmanWindow
10538
       1944  1B4 00030470 GetThreadDesktop
10539
       1945  1B5 00030530 GetTitleBarInfo
10540
       1946  1B6 00033760 GetTopLevelWindow
10541
       1947  1B7 0001D290 GetTopWindow
10542
       1948  1B8 0004F8A0 GetTouchInputInfo
10543
       1949  1B9 0004CD00 GetUnpredictedMessagePos
10544
       1950  1BA 00015820 GetUpdateRect
10545
       1951  1BB 000023F0 GetUpdateRgn
10546
       1952  1BC 00033790 GetUpdatedClipboardFormats
10547
       1953  1BD 00026980 GetUserObjectInformationA
10548
       1954  1BE 00030300 GetUserObjectInformationW
10549
       1955  1BF 0004CD10 GetUserObjectSecurity
10550
       1956  1C0 0004CD50 GetWinStationInfo
10551
       1957  1C1 00013DB0 GetWindow
10552
       1958  1C2 000337B0 GetWindowBand
10553
       1959  1C3 000337C0 GetWindowCompositionAttribute
10554
       1960  1C4 000337D0 GetWindowCompositionInfo
10555
       1961  1C5 0004CD60 GetWindowContextHelpId
10556
       1962  1C6 00030280 GetWindowDC
10557
       1963  1C7 00012780 GetWindowDPI
10558
       1964  1C8 000337E0 GetWindowDisplayAffinity
10559
       1965  1C9 000337F0 GetWindowFeedbackSetting
10560
       1966  1CA 00011880 GetWindowInfo
10561
       1967  1CB 0000EB70 GetWindowLongA
10562
       1968  1CC 0000CAE0 GetWindowLongPtrA
10563
       1969  1CD 0000EEF0 GetWindowLongPtrW
10564
       1970  1CE 0000EC80 GetWindowLongW
10565
       1971  1CF 00033800 GetWindowMinimizeRect
10566
       1972  1D0 00082E10 GetWindowModuleFileName
10567
       1973  1D1 00082E10 GetWindowModuleFileNameA
10568
       1974  1D2 0004DD40 GetWindowModuleFileNameW
10569
       1975  1D3 00030990 GetWindowPlacement
10570
       1976  1D4 0000B310 GetWindowRect
10571
       1977  1D5 0000E9C0 GetWindowRgn
10572
       1978  1D6 000132D0 GetWindowRgnBox
10573
       1979  1D7 00033810 GetWindowRgnEx
10574
       1980  1D8 00013F30 GetWindowTextA
10575
       1981  1D9 00082E50 GetWindowTextLengthA
10576
       1982  1DA 000141E0 GetWindowTextLengthW
10577
       1983  1DB 0000E2D0 GetWindowTextW
10578
       1984  1DC 00014040 GetWindowThreadProcessId
10579
       1985  1DD 00080FE0 GetWindowWord
10580
       1986  1DE 00033820 GhostWindowFromHungWindow
10581
       1987  1DF 0004CD70 GrayStringA
10582
       1988  1E0 0004CDD0 GrayStringW
10583
       1989  1E1 0002FE40 HideCaret
10584
       1990  1E2 00033860 HiliteMenuItem
10585
       1991  1E3 00033870 HungWindowFromGhostWindow
10586
       1992  1E4 00083DA0 IMPGetIMEA
10587
       1993  1E5 00083DF0 IMPGetIMEW
10588
       1994  1E6 00083E40 IMPQueryIMEA
10589
       1995  1E7 00083E80 IMPQueryIMEW
10590
       1996  1E8 00083EC0 IMPSetIMEA
10591
       1997  1E9 00083F10 IMPSetIMEW
10592
       1998  1EA 000338A0 ImpersonateDdeClientWindow
10593
       1999  1EB 0001F1B0 InSendMessage
10594
       2000  1EC 0001E630 InSendMessageEx
10595
       2003  1ED 00020F10 InflateRect
10596
       2004  1EE 00002940 InitDManipHook
10597
       2006  1EF 000338E0 InitializeInputDeviceInjection
10598
       2007  1F0 00023220 InitializeLpkHooks
10599
       2008  1F1 000338F0 InitializePointerDeviceInjection
10600
       2009  1F2 00033900 InitializeTouchInjection
10601
       2011  1F3 00033910 InjectDeviceInput
10602
       2012  1F4 00033930 InjectKeyboardInput
10603
       2013  1F5 00033940 InjectMouseInput
10604
       2014  1F6 00033950 InjectPointerInput
10605
       2015  1F7 00033960 InjectTouchInput
10606
       2016  1F8 00082EA0 InsertMenuA
10607
       2017  1F9 00082F20 InsertMenuItemA
10608
       2018  1FA 0001D900 InsertMenuItemW
10609
       2019  1FB 0001D500 InsertMenuW
10610
       2020  1FC 0002B790 InternalGetWindowIcon
10611
       2021  1FD 00023740 InternalGetWindowText
10612
       2022  1FE 00009C50 IntersectRect
10613
       2023  1FF 0002FC90 InvalidateRect
10614
       2024  200 000308C0 InvalidateRgn
10615
       2025  201 000865C0 InvertRect
10616
       2026  202 00084980 IsCharAlphaA
10617
       2027  203 00084990 IsCharAlphaNumericA
10618
       2028  204 0002AEF0 IsCharAlphaNumericW
10619
       2029  205 000849A0 IsCharAlphaW
10620
       2030  206 000849B0 IsCharLowerA
10621
       2031  207 000849C0 IsCharLowerW
10622
       2032  208 000849D0 IsCharUpperA
10623
       2033  209 000849E0 IsCharUpperW
10624
       2034  20A 00013480 IsChild
10625
       2035  20B 00033990 IsChildWindowDpiMessageEnabled
10626
       2036  20C 0002FF40 IsClipboardFormatAvailable
10627
       2037  20D 0005A7D0 IsDialogMessage
10628
       2038  20E 0005A7D0 IsDialogMessageA
10629
       2039  20F 00012020 IsDialogMessageW
10630
       2040  210 0005A360 IsDlgButtonChecked
10631
       2041  211 000265F0 IsGUIThread
10632
       2042  212 00024750 IsHungAppWindow
10633
       2043  213 0001F5D0 IsIconic
10634
       2044  214 000247C0 IsImmersiveProcess
10635
       2045  215 0002E320 IsInDesktopWindowBand
10636
       2046  216 0000CA80 IsMenu
10637
       2047  217 000339A0 IsMouseInPointerEnabled
10638
       2048  218 0001F190 IsProcessDPIAware
10639
       2049  219 0004D200 IsQueueAttached
10640
       2050  21A 0001EB90 IsRectEmpty
10641
       2051  21B 0007C400 IsSETEnabled
10642
       2052  21C 00022BB0 IsServerSideWindow
10643
       2053  21D 0000BF80 IsThreadDesktopComposited
10644
       2528  21E 00022AE0 IsThreadMessageQueueAttached
10645
       2054  21F 000339C0 IsTopLevelWindow
10646
       2055  220 000339D0 IsTouchWindow
10647
       2056  221 0001F200 IsWinEventHookInstalled
10648
       2057  222 000150E0 IsWindow
10649
       2058  223 000022E0 IsWindowArranged
10650
       2059  224 000339E0 IsWindowBroadcastingDpiToChildren
10651
       2060  225 0000E960 IsWindowEnabled
10652
       2061  226 0000CBC0 IsWindowInDestroy
10653
       2062  227 000231D0 IsWindowRedirectedForPrint
10654
       2063  228 00020BC0 IsWindowUnicode
10655
       2064  229 0001D070 IsWindowVisible
10656
       2065  22A 0004E530 IsWow64Message
10657
       2066  22B 0000C990 IsZoomed
10658
       2067  22C 0002FE00 KillTimer
10659
       2068  22D 0004F320 LoadAcceleratorsA
10660
       2069  22E 00004840 LoadAcceleratorsW
10661
       2070  22F 00002880 LoadBitmapA
10662
       2071  230 00003600 LoadBitmapW
10663
       2072  231 00004F00 LoadCursorA
10664
       2073  232 000482E0 LoadCursorFromFileA
10665
       2074  233 00048350 LoadCursorFromFileW
10666
       2075  234 00006330 LoadCursorW
10667
       2076  235 0002C9C0 LoadIconA
10668
       2077  236 00005E70 LoadIconW
10669
       2078  237 00004A60 LoadImageA
10670
       2079  238 00005390 LoadImageW
10671
       2080  239 0004D210 LoadKeyboardLayoutA
10672
       2081  23A 0004D290 LoadKeyboardLayoutEx
10673
       2082  23B 0002D730 LoadKeyboardLayoutW
10674
       2083  23C 0002ED70 LoadLocalFonts
10675
       2084  23D 0004DF40 LoadMenuA
10676
       2085  23E 00004E00 LoadMenuIndirectA
10677
       2086  23F 00004E00 LoadMenuIndirectW
10678
       2087  240 00004D90 LoadMenuW
10679
       2088  241 0002ECD0 LoadRemoteFonts
10680
       2089  242 0004F3F0 LoadStringA
10681
       2090  243 00023B90 LoadStringW
10682
       2091  244 0004D2C0 LockSetForegroundWindow
10683
       2092  245 00033A20 LockWindowStation
10684
       2093  246 00030CA0 LockWindowUpdate
10685
       2094  247 00033A30 LockWorkStation
10686
       2095  248 00033A50 LogicalToPhysicalPoint
10687
       2096  249 00033A40 LogicalToPhysicalPointForPerMonitorDPI
10688
       2097  24A 0004F480 LookupIconIdFromDirectory
10689
       2098  24B 00005150 LookupIconIdFromDirectoryEx
10690
       2099  24C 000219E0 MBToWCSEx
10691
       2100  24D 00020A20 MBToWCSExt
10692
       2101  24E 00078200 MB_GetString
10693
       2102  24F 0002A540 MapDialogRect
10694
       2103  250 00083750 MapVirtualKeyA
10695
       2104  251 000837B0 MapVirtualKeyExA
10696
       2105  252 000574F0 MapVirtualKeyExW
10697
       2106  253 00023E00 MapVirtualKeyW
10698
       2107  254 0001E670 MapWindowPoints
10699
       2108  255 00033AB0 MenuItemFromPoint
10700
       2109  256 0004E550 MenuWindowProcA
10701
       2110  257 0004E610 MenuWindowProcW
10702
       2111  258 0004D2E0 MessageBeep
10703
       2112  259 000788A0 MessageBoxA
10704
       2113  25A 00078900 MessageBoxExA
10705
       2114  25B 00078930 MessageBoxExW
10706
       2115  25C 00078960 MessageBoxIndirectA
10707
       2116  25D 00078B00 MessageBoxIndirectW
10708
       2117  25E 00078BC0 MessageBoxTimeoutA
10709
       2118  25F 00078D20 MessageBoxTimeoutW
10710
       2119  260 00078E00 MessageBoxW
10711
       2120  261 00082F90 ModifyMenuA
10712
       2121  262 0002AAD0 ModifyMenuW
10713
       2122  263 00008BA0 MonitorFromPoint
10714
       2123  264 00009990 MonitorFromRect
10715
       2124  265 0000E810 MonitorFromWindow
10716
       2125  266 00030220 MoveWindow
10717
       2126  267 0001EE80 MsgWaitForMultipleObjects
10718
       2127  268 0001A260 MsgWaitForMultipleObjectsEx
10719
       2128  269 0004D300 NotifyOverlayWindow
10720
       2129  26A 0001ED60 NotifyWinEvent
10721
       2130  26B 0007B750 OemKeyScan
10722
       2131  26C 0007B7D0 OemToCharA
10723
       2132  26D 0007B820 OemToCharBuffA
10724
       2133  26E 0007B870 OemToCharBuffW
10725
       2134  26F 0007B8C0 OemToCharW
10726
       2135  270 00013960 OffsetRect
10727
       2136  271 0002B6C0 OpenClipboard
10728
       2137  272 00024270 OpenDesktopA
10729
       2138  273 000242E0 OpenDesktopW
10730
       2139  274 0004D320 OpenIcon
10731
       2140  275 00033B00 OpenInputDesktop
10732
       2141  276 00033B10 OpenThreadDesktop
10733
       2142  277 000187A0 OpenWindowStationA
10734
       2143  278 00018800 OpenWindowStationW
10735
       2144  279 000596B0 PackDDElParam
10736
       2145  27A 0007F4D0 PackTouchHitTestingProximityEvaluation
10737
       2146  27B 0007A9A0 PaintDesktop
10738
       2147  27C 00030B20 PaintMenuBar
10739
       2148  27D 00033B20 PaintMonitor
10740
       2149  27E 0001A4C0 PeekMessageA
10741
       2150  27F 0001A5F0 PeekMessageW
10742
       2151  280 00033B40 PhysicalToLogicalPoint
10743
       2152  281 00033B30 PhysicalToLogicalPointForPerMonitorDPI
10744
       2153  282 00024900 PostMessageA
10745
       2154  283 000170A0 PostMessageW
10746
       2155  284 000265A0 PostQuitMessage
10747
       2156  285 00024880 PostThreadMessageA
10748
       2157  286 00022B00 PostThreadMessageW
10749
       2158  287 00033B50 PrintWindow
10750
       2159  288 0006A600 PrivateExtractIconExA
10751
       2160  289 00018A40 PrivateExtractIconExW
10752
       2161  28A 0006A690 PrivateExtractIconsA
10753
       2162  28B 00019440 PrivateExtractIconsW
10754
       2163  28C 0002B770 PrivateRegisterICSProc
10755
       2164  28D 00008DF0 PtInRect
10756
       2165  28E 00033B80 QueryBSDRWindow
10757
       2166  28F 00025D20 QueryDisplayConfig
10758
       2167  290 00033BC0 QuerySendMessage
10759
       2168  291 0007C990 RIMAddInputObserver
10760
       2169  292 0007C9A0 RIMAreSiblingDevices
10761
       2170  293 0007C9A0 RIMDeviceIoControl
10762
       2171  294 0002FA90 RIMFreeInputBuffer
10763
       2172  295 0007C9A0 RIMGetDevicePreparsedData
10764
       2173  296 0007C9B0 RIMGetDevicePreparsedDataLockfree
10765
       2174  297 0007C9A0 RIMGetDeviceProperties
10766
       2175  298 0007C9C0 RIMObserveNextInput
10767
       2176  299 0007C9A0 RIMOnPnpNotification
10768
       2177  29A 0007C9A0 RIMOnTimerNotification
10769
       2178  29B 0007C9A0 RIMReadInput
10770
       2179  29C 0007C9A0 RIMRegisterForInput
10771
       2180  29D 0007C9D0 RIMRemoveInputObserver
10772
       2181  29E 0007C9A0 RIMSetTestModeStatus
10773
       2182  29F 0007C9A0 RIMUnregisterForInput
10774
       2183  2A0 0007C9E0 RIMUpdateInputObserverRegistration
10775
       2184  2A1 00033BD0 RealChildWindowFromPoint
10776
       2185  2A2 00083890 RealGetWindowClass
10777
       2186  2A3 00083890 RealGetWindowClassA
10778
       2187  2A4 0001FE10 RealGetWindowClassW
10779
       2188  2A5 0007C7A0 ReasonCodeNeedsBugID
10780
       2189  2A6 0007C7B0 ReasonCodeNeedsComment
10781
       2190  2A7 0002B8A0 RecordShutdownReason
10782
       2191  2A8 0002FD80 RedrawWindow
10783
       2192  2A9 00033BF0 RegisterBSDRWindow
10784
       2193  2AA 00021310 RegisterClassA
10785
       2194  2AB 00083010 RegisterClassExA
10786
       2195  2AC 00008E20 RegisterClassExW
10787
       2196  2AD 00008F30 RegisterClassW
10788
       2197  2AE 000216D0 RegisterClipboardFormatA
10789
       2198  2AF 00022C00 RegisterClipboardFormatW
10790
       2199  2B0 0002E850 RegisterDManipHook
10791
       2200  2B1 000256A0 RegisterDeviceNotificationA
10792
       2201  2B2 000256A0 RegisterDeviceNotificationW
10793
       2202  2B3 00033C20 RegisterErrorReportingDialog
10794
       2203  2B4 0004D430 RegisterFrostWindow
10795
       2204  2B5 0002B7A0 RegisterGhostWindow
10796
       2205  2B6 00033C30 RegisterHotKey
10797
       2206  2B7 00026F80 RegisterLogonProcess
10798
       2207  2B8 00033C40 RegisterManipulationThread
10799
       2208  2B9 00026470 RegisterMessagePumpHook
10800
       2209  2BA 00033C50 RegisterPointerDeviceNotifications
10801
       2210  2BB 0004ED20 RegisterPointerInputTarget
10802
       2211  2BC 00026150 RegisterPowerSettingNotification
10803
       2212  2BD 00033C70 RegisterRawInputDevices
10804
       2213  2BE 00033C80 RegisterServicesProcess
10805
       2214  2BF 00033C90 RegisterSessionPort
10806
       2215  2C0 00026F50 RegisterShellHookWindow
10807
       2216  2C1 0007ACC0 RegisterSuspendResumeNotification
10808
       2217  2C2 0002AEC0 RegisterSystemThread
10809
       2218  2C3 00033CB0 RegisterTasklist
10810
       2219  2C4 00033CC0 RegisterTouchHitTestingWindow
10811
       2220  2C5 00027040 RegisterTouchWindow
10812
       2221  2C6 0002E910 RegisterUserApiHook
10813
       2222  2C7 000216D0 RegisterWindowMessageA
10814
       2223  2C8 00022C00 RegisterWindowMessageW
10815
       2224  2C9 00026CC0 ReleaseCapture
10816
       2225  2CA 000081F0 ReleaseDC
10817
       2226  2CB 00033CF0 ReleaseDwmHitTestWaiters
10818
       2227  2CC 00033D40 RemoveClipboardFormatListener
10819
       2228  2CD 00030BE0 RemoveMenu
10820
       2229  2CE 00083940 RemovePropA
10821
       2230  2CF 00021E60 RemovePropW
10822
       2231  2D0 00024780 ReplyMessage
10823
       2232  2D1 00033D60 ResolveDesktopForWOW
10824
       2233  2D2 00059730 ReuseDDElParam
10825
       2234  2D3 0000E0A0 ScreenToClient
10826
       2235  2D4 000753D0 ScrollChildren
10827
       2236  2D5 00022100 ScrollDC
10828
       2237  2D6 0004D490 ScrollWindow
10829
       2238  2D7 00024790 ScrollWindowEx
10830
       2239  2D8 00083050 SendDlgItemMessageA
10831
       2240  2D9 00001A90 SendDlgItemMessageW
10832
       2241  2DA 00083F60 SendIMEMessageExA
10833
       2242  2DB 00083FB0 SendIMEMessageExW
10834
       2243  2DC 00030460 SendInput
10835
       2244  2DD 000149C0 SendMessageA
10836
       2245  2DE 000839D0 SendMessageCallbackA
10837
       2246  2DF 0001F970 SendMessageCallbackW
10838
       2247  2E0 00024130 SendMessageTimeoutA
10839
       2248  2E1 0001CBC0 SendMessageTimeoutW
10840
       2249  2E2 0000F4B0 SendMessageW
10841
       2250  2E3 00029A50 SendNotifyMessageA
10842
       2251  2E4 00015F30 SendNotifyMessageW
10843
       2252  2E5 00030A40 SetActiveWindow
10844
       2253  2E6 000300E0 SetCapture
10845
       2254  2E7 00026F30 SetCaretBlinkTime
10846
       2255  2E8 00026C60 SetCaretPos
10847
       2256  2E9 00083AA0 SetClassLongA
10848
       2257  2EA 00083AC0 SetClassLongPtrA
10849
       2258  2EB 0002B620 SetClassLongPtrW
10850
       2259  2EC 0002AE70 SetClassLongW
10851
       2260  2ED 00033DF0 SetClassWord
10852
       2261  2EE 0002EDD0 SetClipboardData
10853
       2262  2EF 00030DE0 SetClipboardViewer
10854
       2263  2F0 0002FDD0 SetCoalescableTimer
10855
       2264  2F1 0002FDF0 SetCursor
10856
       2265  2F2 00033E20 SetCursorContents
10857
       2266  2F3 00026E30 SetCursorPos
10858
       2267  2F4 0002FA90 SetDebugErrorLevel
10859
       2268  2F5 0004D4F0 SetDeskWallpaper
10860
       2269  2F6 00033E30 SetDisplayAutoRotationPreferences
10861
       2270  2F7 00084A10 SetDisplayConfig
10862
       2271  2F8 00001B30 SetDlgItemInt
10863
       2272  2F9 000830A0 SetDlgItemTextA
10864
       2273  2FA 00017070 SetDlgItemTextW
10865
       2274  2FB 0004D510 SetDoubleClickTime
10866
       2275  2FC 00033E70 SetFeatureReportResponse
10867
       2276  2FD 00030160 SetFocus
10868
       2277  2FE 00026C50 SetForegroundWindow
10869
       2278  2FF 00033E80 SetGestureConfig
10870
       2279  300 00033EC0 SetImmersiveBackgroundWindow
10871
       2280  301 00033ED0 SetInternalWindowPos
10872
       2281  302 00030B30 SetKeyboardState
10873
       2282  303 0007B920 SetLastErrorEx
10874
       2283  304 00033EE0 SetLayeredWindowAttributes
10875
       2284  305 00073CD0 SetMagnificationDesktopColorEffect
10876
       2285  306 00073DA0 SetMagnificationDesktopMagnification
10877
       2286  307 00033AA0 SetMagnificationLensCtxInformation
10878
       2287  308 0004ED40 SetManipulationInputTarget
10879
       2288  309 00026F60 SetMenu
10880
       2289  30A 00033F10 SetMenuContextHelpId
10881
       2290  30B 00030C60 SetMenuDefaultItem
10882
       2291  30C 000761A0 SetMenuInfo
10883
       2292  30D 000761E0 SetMenuItemBitmaps
10884
       2293  30E 000830D0 SetMenuItemInfoA
10885
       2294  30F 0001D580 SetMenuItemInfoW
10886
       2295  310 0004EA30 SetMessageExtraInfo
10887
       2296  311 00006AC0 SetMessageQueue
10888
       2297  312 00033F30 SetMirrorRendering
10889
       2298  313 000303B0 SetParent
10890
       2299  314 0004D530 SetPhysicalCursorPos
10891
       2300  315 00026410 SetProcessDPIAware
10892
       2301  316 0004D540 SetProcessDefaultLayout
10893
       2302  317 00008BE0 SetProcessDpiAwarenessInternal
10894
       2303  318 00033F70 SetProcessRestrictionExemption
10895
       2304  319 000306C0 SetProcessWindowStation
10896
       2305  31A 0004D560 SetProgmanWindow
10897
       2306  31B 00083BF0 SetPropA
10898
       2307  31C 00021FF0 SetPropW
10899
       2308  31D 0001F940 SetRect
10900
       2309  31E 0001FB20 SetRectEmpty
10901
       2310  31F 0001F790 SetScrollInfo
10902
       2311  320 00002740 SetScrollPos
10903
       2312  321 0001F700 SetScrollRange
10904
       2313  322 0004D570 SetShellWindow
10905
       2314  323 00033F90 SetShellWindowEx
10906
       2315  324 00027060 SetSysColors
10907
       2316  325 0007B930 SetSysColorsTemp
10908
       2317  326 0007AD20 SetSystemCursor
10909
       2318  327 00030CB0 SetSystemMenu
10910
       2319  328 0002ECA0 SetTaskmanWindow
10911
       2320  329 00030550 SetThreadDesktop
10912
       2321  32A 00033FD0 SetThreadInputBlocked
10913
       2322  32B 00022590 SetTimer
10914
       2323  32C 00033F40 SetUserObjectInformationA
10915
       2324  32D 00033F40 SetUserObjectInformationW
10916
       2325  32E 0002EA80 SetUserObjectSecurity
10917
       2326  32F 00023F80 SetWinEventHook
10918
       2327  330 00034000 SetWindowBand
10919
       2328  331 00034010 SetWindowCompositionAttribute
10920
       2329  332 00034020 SetWindowCompositionTransition
10921
       2330  333 0004D5D0 SetWindowContextHelpId
10922
       2331  334 00034030 SetWindowDisplayAffinity
10923
       2332  335 00034040 SetWindowFeedbackSetting
10924
       2333  336 00026CD0 SetWindowLongA
10925
       2334  337 000161F0 SetWindowLongPtrA
10926
       2335  338 00014640 SetWindowLongPtrW
10927
       2336  339 00010F30 SetWindowLongW
10928
       2337  33A 00030A60 SetWindowPlacement
10929
       2338  33B 0002FE90 SetWindowPos
10930
       2339  33C 00014560 SetWindowRgn
10931
       2340  33D 0007AD80 SetWindowRgnEx
10932
       2341  33E 0002EA00 SetWindowStationUser
10933
       2342  33F 00083140 SetWindowTextA
10934
       2343  340 000148A0 SetWindowTextW
10935
       2344  341 00030AC0 SetWindowWord
10936
       2345  342 0004C530 SetWindowsHookA
10937
       2346  343 000027A0 SetWindowsHookExA
10938
       2347  344 00023610 SetWindowsHookExW
10939
       2348  345 0004C550 SetWindowsHookW
10940
       2349  346 0002FEA0 ShowCaret
10941
       2350  347 00027020 ShowCursor
10942
       2351  348 0002AE20 ShowOwnedPopups
10943
       2352  349 00030020 ShowScrollBar
10944
       2353  34A 0004D620 ShowStartGlass
10945
       2354  34B 00034080 ShowSystemCursor
10946
       2355  34C 000301C0 ShowWindow
10947
       2356  34D 00030DF0 ShowWindowAsync
10948
       2357  34E 0002E1F0 ShutdownBlockReasonCreate
10949
       2358  34F 000340B0 ShutdownBlockReasonDestroy
10950
       2359  350 000340A0 ShutdownBlockReasonQuery
10951
       2360  351 000340C0 SignalRedirectionStartComplete
10952
       2361  352 00033250 SkipPointerFrameMessages
10953
       2362  353 00079440 SoftModalMessageBox
10954
       2363  354 000340E0 SoundSentry
10955
       2364  355 00024A80 SubtractRect
10956
       2365  356 0004D6C0 SwapMouseButton
10957
       2366  357 00027000 SwitchDesktop
10958
       2367  358 00027090 SwitchDesktopWithFade
10959
       2368  359 000026F0 SwitchToThisWindow
10960
       2369  35A 000108A0 SystemParametersInfoA
10961
       2370  35B 0001E1A0 SystemParametersInfoW
10962
       2371  35C 00057F30 TabbedTextOutA
10963
       2372  35D 00058040 TabbedTextOutW
10964
       2373  35E 0004D6E0 TileChildWindows
10965
       2374  35F 000756D0 TileWindows
10966
       2375  360 0004D710 ToAscii
10967
       2376  361 0004D790 ToAsciiEx
10968
       2377  362 0007ADC0 ToUnicode
10969
       2378  363 00025900 ToUnicodeEx
10970
       2379  364 000309F0 TrackMouseEvent
10971
       2380  365 00076270 TrackPopupMenu
10972
       2381  366 00034110 TrackPopupMenuEx
10973
       2382  367 0004D900 TranslateAccelerator
10974
       2383  368 0004D900 TranslateAcceleratorA
10975
       2384  369 00022200 TranslateAcceleratorW
10976
       2385  36A 00075AA0 TranslateMDISysAccel
10977
       2386  36B 000136A0 TranslateMessage
10978
       2387  36C 000225B0 TranslateMessageEx
10979
       2388  36D 00030C90 UnhookWinEvent
10980
       2389  36E 0004D990 UnhookWindowsHook
10981
       2390  36F 00030340 UnhookWindowsHookEx
10982
       2391  370 00022130 UnionRect
10983
       2392  371 0004D9B0 UnloadKeyboardLayout
10984
       2393  372 00034160 UnlockWindowStation
10985
       2394  373 000597F0 UnpackDDElParam
10986
       2395  374 00020F70 UnregisterClassA
10987
       2396  375 0000B1C0 UnregisterClassW
10988
       2397  376 00026AB0 UnregisterDeviceNotification
10989
       2398  377 00034170 UnregisterHotKey
10990
       2399  378 000269E0 UnregisterMessagePumpHook
10991
       2400  379 0004ED60 UnregisterPointerInputTarget
10992
       2401  37A 00026940 UnregisterPowerSettingNotification
10993
       2402  37B 00034180 UnregisterSessionPort
10994
       2403  37C 0007AE10 UnregisterSuspendResumeNotification
10995
       2404  37D 0007AE40 UnregisterTouchWindow
10996
       2405  37E 00034190 UnregisterUserApiHook
10997
       2406  37F 000341A0 UpdateDefaultDesktopThumbnail
10998
       2407  380 000268D0 UpdateLayeredWindow
10999
       2408  381 00027160 UpdateLayeredWindowIndirect
11000
       2409  382 0002C9F0 UpdatePerUserSystemParameters
11001
       2410  383 0000CA00 UpdateWindow
11002
       2411  384 000341F0 UpdateWindowInputSinkHints
11003
       2412  385 00034200 UpdateWindowTransform
11004
       2413  386 00008E50 User32InitializeImmEntryTable
11005
       2414  387 00009D90 UserClientDllInitialize
11006
       2415  388 00034210 UserHandleGrantAccess
11007
       2416  389 00058090 UserLpkPSMTextOut
11008
       2417  38A 000582A0 UserLpkTabbedTextOut
11009
       2418  38B 0002AE10 UserRealizePalette
11010
       2419  38C 0004D9E0 UserRegisterWowHandlers
11011
       2420  38D 00034310 VRipOutput
11012
       2421  38E 00034310 VTagOutput
11013
       2422  38F 00030910 ValidateRect
11014
       2423  390 00002540 ValidateRgn
11015
       2424  391 00083C90 VkKeyScanA
11016
       2425  392 00083CF0 VkKeyScanExA
11017
       2426  393 00026AF0 VkKeyScanExW
11018
       2427  394 00026DC0 VkKeyScanW
11019
       2428  395 000208E0 WCSToMBEx
11020
       2429  396 00084000 WINNLSEnableIME
11021
       2430  397 00084050 WINNLSGetEnableStatus
11022
       2431  398 00034310 WINNLSGetIMEHotkey
11023
       2432  399 00026DE0 WaitForInputIdle
11024
       2433  39A 00034260 WaitForRedirectionStartComplete
11025
       2434  39B 0002FD10 WaitMessage
11026
       2435  39C 000297C0 WinHelpA
11027
       2436  39D 00029710 WinHelpW
11028
       2437  39E 00024250 WindowFromDC
11029
       2438  39F 00034270 WindowFromPhysicalPoint
11030
       2439  3A0 0002FD90 WindowFromPoint
11031
       2440  3A1 0007FC50 _UserTestTokenForInteractive
11032
       2441  3A2 000A2640 gSharedInfo
11033
       2442  3A3 0008D330 gapfnScSendMessage
11034
       2443  3A4 0007B5E0 keybd_event
11035
       2444  3A5 00026B40 mouse_event
11036
       2445  3A6 00022610 wsprintfA
11037
       2446  3A7 0002B1D0 wsprintfW
11038
       2447  3A8 00022640 wvsprintfA
11039
       2448  3A9 0002B200 wvsprintfW
11040
       1502      0004FAF0 [NONAME]
11041
       1550      0007C870 [NONAME]
11042
       1551      0007C960 [NONAME]
11043
       1552      0007C820 [NONAME]
11044
       1553      0007C7C0 [NONAME]
11045
       1554      0007C900 [NONAME]
11046
       2001      00073E10 [NONAME]
11047
       2002      00073C30 [NONAME]
11048
       2005      00033DE0 [NONAME]
11049
       2010      000340D0 [NONAME]
11050
       2503      000331F0 [NONAME]
11051
       2504      00034140 [NONAME]
11052
       2505      00033830 [NONAME]
11053
       2506      0004C340 [NONAME]
11054
       2507      00033DB0 [NONAME]
11055
       2508      00033B70 [NONAME]
11056
       2509      00033030 [NONAME]
11057
       2510      00033360 [NONAME]
11058
       2511      00033E60 [NONAME]
11059
       2512      000334C0 [NONAME]
11060
       2513      00033D90 [NONAME]
11061
       2514      00026FE0 [NONAME]
11062
       2515      0002BD80 [NONAME]
11063
       2516      000331E0 [NONAME]
11064
       2517      00033780 [NONAME]
11065
       2518      00018EE0 [NONAME]
11066
       2519      00033380 [NONAME]
11067
       2520      000339B0 [NONAME]
11068
       2521      000336E0 [NONAME]
11069
       2522      00033DC0 [NONAME]
11070
       2523      0001F320 [NONAME]
11071
       2524      0004BCC0 [NONAME]
11072
       2525      0002E4F0 [NONAME]
11073
       2526      0004BC90 [NONAME]
11074
       2527      0002E9D0 [NONAME]
11075
       2529      00033220 [NONAME]
11076
       2530      00034230 [NONAME]
11077
       2531      00033DD0 [NONAME]
11078
       2532      00033E50 [NONAME]
11079
       2533      000330D0 [NONAME]
11080
       2534      00033970 [NONAME]
11081
       2535      00080E40 [NONAME]
11082
       2536      00015610 [NONAME]
11083
       2537      00033D70 [NONAME]
11084
       2538      000339F0 [NONAME]
11085
       2539      00033850 [NONAME]
11086
       2540      000027C0 [NONAME]
11087
       2541      000336F0 [NONAME]
11088
       2542      00033CA0 [NONAME]
11089
       2544      00033390 [NONAME]
11090
       2545      00033600 [NONAME]
11091
       2546      00033CD0 [NONAME]
11092
       2547      00011060 [NONAME]
11093
       2548      000336B0 [NONAME]
11094
       2549      00033F50 [NONAME]
11095
       2550      00033170 [NONAME]
11096
       2551      00033D50 [NONAME]
11097
       2552      0004D450 [NONAME]
11098
       2553      0004D880 [NONAME]
11099
       2554      0004D360 [NONAME]
11100
       2555      00086B20 [NONAME]
11101
       2556      00033D80 [NONAME]
11102
       2557      00034120 [NONAME]
11103
       2558      00034130 [NONAME]
11104
       2559      0002FC20 [NONAME]
11105
       2560      00001C10 [NONAME]
11106
       2561      0002F240 [NONAME]
11107
       2562      0004D1F0 [NONAME]
11108
       2563      00033150 [NONAME]
11109
       2564      0002ED50 [NONAME]
11110
       2566      00033FF0 [NONAME]
11111
       2567      0002ED90 [NONAME]
11112
       2568      000024A0 [NONAME]
11113
       2569      0004CA10 [NONAME]
11114
       2570      0004D580 [NONAME]
11115
       2571      00033E00 [NONAME]
11116
       2572      0001EC40 [NONAME]
11117
       2573      00013290 [NONAME]
11118
       2574      00020DF0 [NONAME]
11119
       2575      0004C830 [NONAME]
11120
       2576      00033E10 [NONAME]
11121
       2577      00026B10 [NONAME]
11122
       2578      00033AE0 [NONAME]
11123
       2579      00034060 [NONAME]
11124
       2580      00010FF0 [NONAME]
11125
       2581      00026B30 [NONAME]
11126
       2582      00022600 [NONAME]
11127
       2700      0004C9C0 [NONAME]
11128
       2702      0002EDB0 [NONAME]
11129

11130
  Summary
11131

11132
        2000 .data
11133
        1000 .didat
11134
        A000 .pdata
11135
       18000 .rdata
11136
        1000 .reloc
11137
       9F000 .rsrc
11138
       88000 .text
11139
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
11140
Copyright (C) Microsoft Corporation.  All rights reserved.
11141

11142

11143
Dump of file userenv.dll
11144

11145
File Type: DLL
11146

11147
  Section contains the following exports for USERENV.dll
11148

11149
    00000000 characteristics
11150
    5F73FC88 time date stamp Tue Sep 29 20:33:28 2020
11151
        0.00 version
11152
         104 ordinal base
11153
         116 number of functions
11154
          59 number of names
11155

11156
    ordinal hint RVA      name
11157

11158
        106    0 0000E2E0 AreThereVisibleLogoffScripts
11159
        107    1 0000E2F0 AreThereVisibleShutdownScripts
11160
        108    2 00001140 CreateAppContainerProfile
11161
        109    3 00003270 CreateEnvironmentBlock
11162
        110    4 0000ED60 CreateProfile
11163
        111    5 000010F0 DeleteAppContainerProfile
11164
        112    6 0000FD20 DeleteProfileA
11165
        113    7 0000F220 DeleteProfileW
11166
        114    8 000032C0 DeriveAppContainerSidFromAppContainerName
11167
        115    9 000010A0 DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName
11168
        116    A 00003240 DestroyEnvironmentBlock
11169
        117    B 000031C0 DllCanUnloadNow
11170
        118    C 00003090 DllGetClassObject
11171
        119    D 000107E0 DllRegisterServer
11172
        120    E 00010820 DllUnregisterServer
11173
        121    F 000033E0 EnterCriticalPolicySection
11174
        123   10 0000FE30 ExpandEnvironmentStringsForUserA
11175
        124   11 00003190 ExpandEnvironmentStringsForUserW
11176
        125   12 0000E300 ForceSyncFgPolicy
11177
        126   13 0000E310 FreeGPOListA
11178
        127   14 0000E320 FreeGPOListW
11179
        128   15 0000E330 GenerateGPNotification
11180
        129   16 0000FF50 GetAllUsersProfileDirectoryA
11181
        130   17 000100B0 GetAllUsersProfileDirectoryW
11182
        131   18 00002FE0 GetAppContainerFolderPath
11183
        132   19 00003120 GetAppContainerRegistryLocation
11184
        133   1A 0000E340 GetAppliedGPOListA
11185
        134   1B 0000E350 GetAppliedGPOListW
11186
        136   1C 000100D0 GetDefaultUserProfileDirectoryA
11187
        138   1D 00010230 GetDefaultUserProfileDirectoryW
11188
        140   1E 0000E360 GetGPOListA
11189
        141   1F 0000E370 GetGPOListW
11190
        142   20 0000E380 GetNextFgPolicyRefreshInfo
11191
        143   21 0000E390 GetPreviousFgPolicyRefreshInfo
11192
        144   22 00002810 GetProfileType
11193
        145   23 00010250 GetProfilesDirectoryA
11194
        146   24 000033A0 GetProfilesDirectoryW
11195
        147   25 000103B0 GetUserProfileDirectoryA
11196
        148   26 000013A0 GetUserProfileDirectoryW
11197
        149   27 0000E3A0 HasPolicyForegroundProcessingCompleted
11198
        150   28 000033D0 LeaveCriticalPolicySection
11199
        151   29 0000F6B0 LoadProfileExtender
11200
        152   2A 00010520 LoadUserProfileA
11201
        153   2B 00001820 LoadUserProfileW
11202
        154   2C 0000E800 ProcessGroupPolicyCompleted
11203
        155   2D 0000E850 ProcessGroupPolicyCompletedEx
11204
        156   2E 0000E3B0 RefreshPolicy
11205
        157   2F 0000E3C0 RefreshPolicyEx
11206
        158   30 00003380 RegisterGPNotification
11207
        159   31 0000E8B0 RsopAccessCheckByType
11208
        160   32 0000E970 RsopFileAccessCheck
11209
        105   33 0000E2D0 RsopLoggingEnabled
11210
        161   34 0000E9E0 RsopResetPolicySettingStatus
11211
        162   35 0000EA30 RsopSetPolicySettingStatus
11212
        163   36 00003390 UnloadProfileExtender
11213
        164   37 000016D0 UnloadUserProfile
11214
        165   38 000033C0 UnregisterGPNotification
11215
        166   39 0000E3D0 WaitForMachinePolicyForegroundProcessing
11216
        167   3A 0000E3E0 WaitForUserPolicyForegroundProcessing
11217
        104      0000E6D0 [NONAME]
11218
        122      0000E710 [NONAME]
11219
        135      000113E0 [NONAME]
11220
        137      0000E5B0 [NONAME]
11221
        139      0000E610 [NONAME]
11222
        175      000111C0 [NONAME]
11223
        202      0000D5C0 [NONAME]
11224
        203      0000D190 [NONAME]
11225
        206      0000E580 [NONAME]
11226
        207      000059C0 [NONAME]
11227
        208      0000F7B0 [NONAME]
11228
        209      00003690 [NONAME]
11229
        210      0000EAA0 [NONAME]
11230
        211      0000E7C0 [NONAME]
11231
        212      00003300 [NONAME]
11232
        213      00001100 [NONAME]
11233
        214      000034D0 [NONAME]
11234
        217      000015F0 [NONAME]
11235
        218      0000E770 [NONAME]
11236
        219      0000D840 [NONAME]
11237

11238
  Summary
11239

11240
        1000 .data
11241
        1000 .didat
11242
        1000 .pdata
11243
        7000 .rdata
11244
        1000 .reloc
11245
        3000 .rsrc
11246
       11000 .text
11247
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
11248
Copyright (C) Microsoft Corporation.  All rights reserved.
11249

11250

11251
Dump of file version.dll
11252

11253
File Type: DLL
11254

11255
  Section contains the following exports for VERSION.dll
11256

11257
    00000000 characteristics
11258
    559F3095 time date stamp Thu Jul  9 19:40:21 2015
11259
        0.00 version
11260
           1 ordinal base
11261
          17 number of functions
11262
          17 number of names
11263

11264
    ordinal hint RVA      name
11265

11266
          1    0 00001DB0 GetFileVersionInfoA
11267
          2    1 00002160 GetFileVersionInfoByHandle
11268
          3    2 00001DC0 GetFileVersionInfoExA
11269
          4    3 00001040 GetFileVersionInfoExW
11270
          5    4 00001010 GetFileVersionInfoSizeA
11271
          6    5 00001DD0 GetFileVersionInfoSizeExA
11272
          7    6 00001050 GetFileVersionInfoSizeExW
11273
          8    7 00001060 GetFileVersionInfoSizeW
11274
          9    8 00001070 GetFileVersionInfoW
11275
         10    9 00001DE0 VerFindFileA
11276
         11    A 00002330 VerFindFileW
11277
         12    B 00001DF0 VerInstallFileA
11278
         13    C 00003020 VerInstallFileW
11279
         14    D          VerLanguageNameA (forwarded to KERNEL32.VerLanguageNameA)
11280
         15    E          VerLanguageNameW (forwarded to KERNEL32.VerLanguageNameW)
11281
         16    F 00001020 VerQueryValueA
11282
         17   10 00001030 VerQueryValueW
11283

11284
  Summary
11285

11286
        1000 .data
11287
        1000 .pdata
11288
        2000 .rdata
11289
        1000 .reloc
11290
        1000 .rsrc
11291
        3000 .text
11292
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
11293
Copyright (C) Microsoft Corporation.  All rights reserved.
11294

11295

11296
Dump of file winhttp.dll
11297

11298
File Type: DLL
11299

11300
  Section contains the following exports for WINHTTP.dll
11301

11302
    00000000 characteristics
11303
    5C5A3D83 time date stamp Tue Feb  5 17:50:59 2019
11304
        0.00 version
11305
           1 ordinal base
11306
          54 number of functions
11307
          54 number of names
11308

11309
    ordinal hint RVA      name
11310

11311
          1    0 00073EA0 DllCanUnloadNow
11312
          2    1 00073EC0 DllGetClassObject
11313
          3    2 00067080 Private1
11314
          4    3 000371B0 SvchostPushServiceGlobals
11315
          5    4 00017360 WinHttpAddRequestHeaders
11316
          6    5 000371C0 WinHttpAutoProxySvcMain
11317
          7    6 00041C80 WinHttpCheckPlatform
11318
          8    7 00015860 WinHttpCloseHandle
11319
          9    8 00019550 WinHttpConnect
11320
         10    9 00069590 WinHttpConnectionDeleteProxyInfo
11321
         11    A 00069610 WinHttpConnectionFreeNameList
11322
         12    B 00069660 WinHttpConnectionFreeProxyInfo
11323
         13    C 000696B0 WinHttpConnectionFreeProxyList
11324
         14    D 00069700 WinHttpConnectionGetNameList
11325
         15    E 00069760 WinHttpConnectionGetProxyInfo
11326
         16    F 000697C0 WinHttpConnectionGetProxyList
11327
         17   10 00069820 WinHttpConnectionSetProxyInfo
11328
         18   11 00007530 WinHttpCrackUrl
11329
         19   12 00024CA0 WinHttpCreateProxyResolver
11330
         20   13 00006CA0 WinHttpCreateUrl
11331
         21   14 0006A4D0 WinHttpDetectAutoProxyConfigUrl
11332
         22   15 000305A0 WinHttpFreeProxyResult
11333
         23   16 00025DE0 WinHttpGetDefaultProxyConfiguration
11334
         24   17 000255D0 WinHttpGetIEProxyConfigForCurrentUser
11335
         25   18 00024330 WinHttpGetProxyForUrl
11336
         26   19 00024ED0 WinHttpGetProxyForUrlEx
11337
         27   1A 0006A730 WinHttpGetProxyResult
11338
         28   1B 0006A8A0 WinHttpGetTunnelSocket
11339
         29   1C 0001BC40 WinHttpOpen
11340
         30   1D 00019C10 WinHttpOpenRequest
11341
         31   1E 00068410 WinHttpProbeConnectivity
11342
         32   1F 0006AE90 WinHttpQueryAuthSchemes
11343
         33   20 000268D0 WinHttpQueryDataAvailable
11344
         34   21 00016D90 WinHttpQueryHeaders
11345
         35   22 00001900 WinHttpQueryOption
11346
         36   23 00014200 WinHttpReadData
11347
         37   24 00018C80 WinHttpReceiveResponse
11348
         38   25 000352A0 WinHttpResetAutoProxy
11349
         39   26 00068480 WinHttpSaveProxyCredentials
11350
         40   27 00018330 WinHttpSendRequest
11351
         41   28 0006B070 WinHttpSetCredentials
11352
         42   29 00069090 WinHttpSetDefaultProxyConfiguration
11353
         43   2A 00017A20 WinHttpSetOption
11354
         44   2B 00017D90 WinHttpSetStatusCallback
11355
         45   2C 0001C2F0 WinHttpSetTimeouts
11356
         46   2D 000252C0 WinHttpTimeFromSystemTime
11357
         47   2E 00033080 WinHttpTimeToSystemTime
11358
         48   2F 00076B10 WinHttpWebSocketClose
11359
         49   30 00076F30 WinHttpWebSocketCompleteUpgrade
11360
         50   31 00076C10 WinHttpWebSocketQueryCloseStatus
11361
         51   32 00077950 WinHttpWebSocketReceive
11362
         52   33 000780C0 WinHttpWebSocketSend
11363
         53   34 000784F0 WinHttpWebSocketShutdown
11364
         54   35 00016180 WinHttpWriteData
11365

11366
  Summary
11367

11368
        2000 .data
11369
        1000 .didat
11370
        9000 .pdata
11371
       21000 .rdata
11372
        1000 .reloc
11373
        5000 .rsrc
11374
       9C000 .text
11375
        6000 .wpp_sf
11376
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
11377
Copyright (C) Microsoft Corporation.  All rights reserved.
11378

11379

11380
Dump of file winmm.dll
11381

11382
File Type: DLL
11383

11384
  Section contains the following exports for WINMM.dll
11385

11386
    00000000 characteristics
11387
    5A978C09 time date stamp Wed Feb 28 21:13:45 2018
11388
        0.00 version
11389
           2 ordinal base
11390
         181 number of functions
11391
         180 number of names
11392

11393
    ordinal hint RVA      name
11394

11395
          4    0 00005B60 CloseDriver
11396
          5    1 00005B70 DefDriverProc
11397
          6    2 00005B80 DriverCallback
11398
          7    3 00005B90 DrvGetModuleHandle
11399
          8    4 00005BA0 GetDriverModuleHandle
11400
          9    5 00005BC0 OpenDriver
11401
         10    6 00005BB0 PlaySound
11402
         11    7 0000E930 PlaySoundA
11403
         12    8 00001900 PlaySoundW
11404
         13    9 00005BD0 SendDriverMessage
11405
         14    A 0000FCF0 WOWAppExit
11406
         15    B 00005BE0 auxGetDevCapsA
11407
         16    C 00005BF0 auxGetDevCapsW
11408
         17    D 00005C00 auxGetNumDevs
11409
         18    E 00005C10 auxGetVolume
11410
         19    F 00005C20 auxOutMessage
11411
         20   10 00005C30 auxSetVolume
11412
         21   11 00005C40 joyConfigChanged
11413
         22   12 00005C50 joyGetDevCapsA
11414
         23   13 00005C60 joyGetDevCapsW
11415
         24   14 00005C70 joyGetNumDevs
11416
         25   15 00005C90 joyGetPos
11417
         26   16 00005C80 joyGetPosEx
11418
         27   17 00005CA0 joyGetThreshold
11419
         28   18 00005CB0 joyReleaseCapture
11420
         29   19 00005CC0 joySetCapture
11421
         30   1A 00005CD0 joySetThreshold
11422
         31   1B 0000C200 mciDriverNotify
11423
         32   1C 0000C220 mciDriverYield
11424
          3   1D 00006EA0 mciExecute
11425
         33   1E 0000A130 mciFreeCommandResource
11426
         34   1F 0000C690 mciGetCreatorTask
11427
         35   20 0000C700 mciGetDeviceIDA
11428
         36   21 0000C750 mciGetDeviceIDFromElementIDA
11429
         37   22 0000C7A0 mciGetDeviceIDFromElementIDW
11430
         38   23 0000C8A0 mciGetDeviceIDW
11431
         39   24 0000C8D0 mciGetDriverData
11432
         40   25 00008370 mciGetErrorStringA
11433
         41   26 00008490 mciGetErrorStringW
11434
         42   27 0000C970 mciGetYieldProc
11435
         43   28 0000A320 mciLoadCommandResource
11436
         44   29 00008790 mciSendCommandA
11437
         45   2A 00009020 mciSendCommandW
11438
         46   2B 00009150 mciSendStringA
11439
         47   2C 00009360 mciSendStringW
11440
         48   2D 0000CF60 mciSetDriverData
11441
         49   2E 0000D010 mciSetYieldProc
11442
         50   2F 00005CE0 midiConnect
11443
         51   30 00005CF0 midiDisconnect
11444
         52   31 00005D00 midiInAddBuffer
11445
         53   32 00005D10 midiInClose
11446
         54   33 00005D20 midiInGetDevCapsA
11447
         55   34 00005D30 midiInGetDevCapsW
11448
         56   35 00005D40 midiInGetErrorTextA
11449
         57   36 00005D50 midiInGetErrorTextW
11450
         58   37 00005D60 midiInGetID
11451
         59   38 00005D70 midiInGetNumDevs
11452
         60   39 00005D80 midiInMessage
11453
         61   3A 00005D90 midiInOpen
11454
         62   3B 00005DA0 midiInPrepareHeader
11455
         63   3C 00005DB0 midiInReset
11456
         64   3D 00005DC0 midiInStart
11457
         65   3E 00005DD0 midiInStop
11458
         66   3F 00005DE0 midiInUnprepareHeader
11459
         67   40 00005DF0 midiOutCacheDrumPatches
11460
         68   41 00005E00 midiOutCachePatches
11461
         69   42 00005E10 midiOutClose
11462
         70   43 00005E20 midiOutGetDevCapsA
11463
         71   44 00005E30 midiOutGetDevCapsW
11464
         72   45 00005E40 midiOutGetErrorTextA
11465
         73   46 00005E50 midiOutGetErrorTextW
11466
         74   47 00005E60 midiOutGetID
11467
         75   48 00005E70 midiOutGetNumDevs
11468
         76   49 00005E80 midiOutGetVolume
11469
         77   4A 00005E90 midiOutLongMsg
11470
         78   4B 00005EA0 midiOutMessage
11471
         79   4C 00005EB0 midiOutOpen
11472
         80   4D 00005EC0 midiOutPrepareHeader
11473
         81   4E 00005ED0 midiOutReset
11474
         82   4F 00005EE0 midiOutSetVolume
11475
         83   50 00005EF0 midiOutShortMsg
11476
         84   51 00005F00 midiOutUnprepareHeader
11477
         85   52 00005F10 midiStreamClose
11478
         86   53 00005F20 midiStreamOpen
11479
         87   54 00005F30 midiStreamOut
11480
         88   55 00005F40 midiStreamPause
11481
         89   56 00005F50 midiStreamPosition
11482
         90   57 00005F60 midiStreamProperty
11483
         91   58 00005F70 midiStreamRestart
11484
         92   59 00005F80 midiStreamStop
11485
         93   5A 00005F90 mixerClose
11486
         94   5B 00005FA0 mixerGetControlDetailsA
11487
         95   5C 00005FB0 mixerGetControlDetailsW
11488
         96   5D 00005FC0 mixerGetDevCapsA
11489
         97   5E 00005FD0 mixerGetDevCapsW
11490
         98   5F 00005FE0 mixerGetID
11491
         99   60 00005FF0 mixerGetLineControlsA
11492
        100   61 00006000 mixerGetLineControlsW
11493
        101   62 00006010 mixerGetLineInfoA
11494
        102   63 00006020 mixerGetLineInfoW
11495
        103   64 00006030 mixerGetNumDevs
11496
        104   65 00006040 mixerMessage
11497
        105   66 00006050 mixerOpen
11498
        106   67 00006060 mixerSetControlDetails
11499
        107   68 00006070 mmDrvInstall
11500
        108   69 00006080 mmGetCurrentTask
11501
        109   6A 00006090 mmTaskBlock
11502
        110   6B 000060A0 mmTaskCreate
11503
        111   6C 000060B0 mmTaskSignal
11504
        112   6D 000060C0 mmTaskYield
11505
        113   6E 000060D0 mmioAdvance
11506
        114   6F 000060E0 mmioAscend
11507
        115   70 000060F0 mmioClose
11508
        116   71 00006100 mmioCreateChunk
11509
        117   72 00006110 mmioDescend
11510
        118   73 00006120 mmioFlush
11511
        119   74 00006130 mmioGetInfo
11512
        120   75 00006140 mmioInstallIOProcA
11513
        121   76 00006150 mmioInstallIOProcW
11514
        122   77 00006160 mmioOpenA
11515
        123   78 00006170 mmioOpenW
11516
        124   79 00006180 mmioRead
11517
        125   7A 00006190 mmioRenameA
11518
        126   7B 000061A0 mmioRenameW
11519
        127   7C 000061B0 mmioSeek
11520
        128   7D 000061C0 mmioSendMessage
11521
        129   7E 000061D0 mmioSetBuffer
11522
        130   7F 000061E0 mmioSetInfo
11523
        131   80 000061F0 mmioStringToFOURCCA
11524
        132   81 00006200 mmioStringToFOURCCW
11525
        133   82 00006210 mmioWrite
11526
        134   83 0000FEC0 mmsystemGetVersion
11527
        135   84 0000EE00 sndPlaySoundA
11528
        136   85 0000EE10 sndPlaySoundW
11529
        137   86 00003070 timeBeginPeriod
11530
        138   87 00003080 timeEndPeriod
11531
        139   88 00006220 timeGetDevCaps
11532
        140   89 00006230 timeGetSystemTime
11533
        141   8A 000030A0 timeGetTime
11534
        142   8B 00002F70 timeKillEvent
11535
        143   8C 00002B80 timeSetEvent
11536
        144   8D 00006240 waveInAddBuffer
11537
        145   8E 00006250 waveInClose
11538
        146   8F 00006260 waveInGetDevCapsA
11539
        147   90 00006270 waveInGetDevCapsW
11540
        148   91 00006280 waveInGetErrorTextA
11541
        149   92 00006290 waveInGetErrorTextW
11542
        150   93 000062A0 waveInGetID
11543
        151   94 000062B0 waveInGetNumDevs
11544
        152   95 000062C0 waveInGetPosition
11545
        153   96 000062D0 waveInMessage
11546
        154   97 000062E0 waveInOpen
11547
        155   98 000062F0 waveInPrepareHeader
11548
        156   99 00006300 waveInReset
11549
        157   9A 00006310 waveInStart
11550
        158   9B 00006320 waveInStop
11551
        159   9C 00006330 waveInUnprepareHeader
11552
        160   9D 00006340 waveOutBreakLoop
11553
        161   9E 00006350 waveOutClose
11554
        162   9F 00006360 waveOutGetDevCapsA
11555
        163   A0 00006370 waveOutGetDevCapsW
11556
        164   A1 00006380 waveOutGetErrorTextA
11557
        165   A2 00006390 waveOutGetErrorTextW
11558
        166   A3 000063A0 waveOutGetID
11559
        167   A4 000063B0 waveOutGetNumDevs
11560
        168   A5 000063C0 waveOutGetPitch
11561
        169   A6 000063D0 waveOutGetPlaybackRate
11562
        170   A7 000063E0 waveOutGetPosition
11563
        171   A8 000063F0 waveOutGetVolume
11564
        172   A9 00006400 waveOutMessage
11565
        173   AA 00006410 waveOutOpen
11566
        174   AB 00006420 waveOutPause
11567
        175   AC 00006430 waveOutPrepareHeader
11568
        176   AD 00006440 waveOutReset
11569
        177   AE 00006450 waveOutRestart
11570
        178   AF 00006460 waveOutSetPitch
11571
        179   B0 00006470 waveOutSetPlaybackRate
11572
        180   B1 00006480 waveOutSetVolume
11573
        181   B2 00006490 waveOutUnprepareHeader
11574
        182   B3 000064A0 waveOutWrite
11575
          2      00005BB0 [NONAME]
11576

11577
  Summary
11578

11579
        2000 .data
11580
        1000 .didat
11581
        1000 .guids
11582
        1000 .pdata
11583
        7000 .rdata
11584
        1000 .reloc
11585
        5000 .rsrc
11586
       10000 .text
11587
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
11588
Copyright (C) Microsoft Corporation.  All rights reserved.
11589

11590

11591
Dump of file winspool.drv
11592

11593
File Type: DLL
11594

11595
  Section contains the following exports for WINSPOOL.DRV
11596

11597
    00000000 characteristics
11598
    64098C2B time date stamp Wed Mar  8 23:35:07 2023
11599
        0.00 version
11600
         100 ordinal base
11601
         269 number of functions
11602
         197 number of names
11603

11604
    ordinal hint RVA      name
11605

11606
        101    0 00018F90 ADVANCEDSETUPDIALOG
11607
        116    1 00024150 AbortPrinter
11608
        117    2 0001A2C0 AddFormA
11609
        118    3 000243A0 AddFormW
11610
        119    4 0001A390 AddJobA
11611
        120    5 00024570 AddJobW
11612
        121    6 0001A430 AddMonitorA
11613
        122    7 00024990 AddMonitorW
11614
        123    8 0001A610 AddPortA
11615
        124    9 0001A6C0 AddPortExA
11616
        125    A 00024BC0 AddPortExW
11617
        126    B 00024CC0 AddPortW
11618
        127    C 0001A8A0 AddPrintProcessorA
11619
        128    D 00024D20 AddPrintProcessorW
11620
        129    E 0001A9D0 AddPrintProvidorA
11621
        130    F 00024E80 AddPrintProvidorW
11622
        131   10 0001AAF0 AddPrinterA
11623
        132   11 0001AC00 AddPrinterConnection2A
11624
        133   12 00037B40 AddPrinterConnection2W
11625
        134   13 0001AC20 AddPrinterConnectionA
11626
        135   14 00037DF0 AddPrinterConnectionW
11627
        136   15 0001AC80 AddPrinterDriverA
11628
        137   16 0001ACE0 AddPrinterDriverExA
11629
        138   17 00025000 AddPrinterDriverExW
11630
        139   18 00025750 AddPrinterDriverW
11631
        140   19 0000EE60 AddPrinterW
11632
        141   1A 0001AF00 AdvancedDocumentPropertiesA
11633
        142   1B 000257B0 AdvancedDocumentPropertiesW
11634
        102   1C 00018F90 AdvancedSetupDialog
11635
        143   1D 00003080 ClosePrinter
11636
        144   1E 00025850 CloseSpoolFileHandle
11637
        145   1F 00025990 CommitSpoolData
11638
        146   20 0001B0E0 ConfigurePortA
11639
        147   21 00025B30 ConfigurePortW
11640
        148   22 00026210 ConnectToPrinterDlg
11641
        103   23 00019540 ConvertAnsiDevModeToUnicodeDevmode
11642
        104   24 00019600 ConvertUnicodeDevModeToAnsiDevmode
11643
        149   25 000388C0 CorePrinterDriverInstalledA
11644
        150   26 000389B0 CorePrinterDriverInstalledW
11645
        151   27 000384A0 CreatePrintAsyncNotifyChannel
11646
        152   28 00026490 CreatePrinterIC
11647
        153   29 0001B9F0 DEVICECAPABILITIES
11648
        105   2A 000198B0 DEVICEMODE
11649
        154   2B 0001B190 DeleteFormA
11650
        155   2C 00026640 DeleteFormW
11651
        156   2D 00039880 DeleteJobNamedProperty
11652
        157   2E 0001B200 DeleteMonitorA
11653
        158   2F 000267F0 DeleteMonitorW
11654
        159   30 0001B390 DeletePortA
11655
        160   31 000269D0 DeletePortW
11656
        161   32 0001B440 DeletePrintProcessorA
11657
        162   33 00026A30 DeletePrintProcessorW
11658
        163   34 0001B530 DeletePrintProvidorA
11659
        164   35 00026B70 DeletePrintProvidorW
11660
        165   36 0000EB60 DeletePrinter
11661
        166   37 0001B610 DeletePrinterConnectionA
11662
        167   38 00037E40 DeletePrinterConnectionW
11663
        168   39 0001B670 DeletePrinterDataA
11664
        169   3A 0001B6F0 DeletePrinterDataExA
11665
        170   3B 00026C90 DeletePrinterDataExW
11666
        171   3C 00026E20 DeletePrinterDataW
11667
        172   3D 0001B7A0 DeletePrinterDriverA
11668
        173   3E 0001B880 DeletePrinterDriverExA
11669
        174   3F 00026FA0 DeletePrinterDriverExW
11670
        175   40 00038B50 DeletePrinterDriverPackageA
11671
        176   41 00038C30 DeletePrinterDriverPackageW
11672
        177   42 00027100 DeletePrinterDriverW
11673
        178   43 00027240 DeletePrinterIC
11674
        179   44 0001B970 DeletePrinterKeyA
11675
        180   45 00027350 DeletePrinterKeyW
11676
        181   46 000274D0 DevQueryPrint
11677
        182   47 00027620 DevQueryPrintEx
11678
        183   48 0001B9F0 DeviceCapabilities
11679
        184   49 0001B9F0 DeviceCapabilitiesA
11680
        185   4A 00027760 DeviceCapabilitiesW
11681
        106   4B 000198B0 DeviceMode
11682
        186   4C 0002B900 DevicePropertySheets
11683
        107   4D 00005EE0 DocumentEvent
11684
        187   4E 0001BD00 DocumentPropertiesA
11685
        188   4F 0000B780 DocumentPropertiesW
11686
        189   50 0000BC70 DocumentPropertySheets
11687
        190   51 0001CCF0 EXTDEVICEMODE
11688
        191   52 000053F0 EndDocPrinter
11689
        192   53 000057F0 EndPagePrinter
11690
        193   54 0001BE80 EnumFormsA
11691
        194   55 00005940 EnumFormsW
11692
        195   56 00039A10 EnumJobNamedProperties
11693
        196   57 0001BF70 EnumJobsA
11694
        197   58 000063C0 EnumJobsW
11695
        198   59 0001C100 EnumMonitorsA
11696
        199   5A 000277D0 EnumMonitorsW
11697
        200   5B 0001C2E0 EnumPortsA
11698
        225   5C 0000ED10 EnumPortsW
11699
        232   5D 0001C3F0 EnumPrintProcessorDatatypesA
11700
        235   5E 00027AA0 EnumPrintProcessorDatatypesW
11701
        236   5F 0001C510 EnumPrintProcessorsA
11702
        237   60 00027C30 EnumPrintProcessorsW
11703
        238   61 0001C630 EnumPrinterDataA
11704
        239   62 0001C730 EnumPrinterDataExA
11705
        240   63 00027DE0 EnumPrinterDataExW
11706
        241   64 00028010 EnumPrinterDataW
11707
        242   65 0001C840 EnumPrinterDriversA
11708
        243   66 0000DFA0 EnumPrinterDriversW
11709
        244   67 0001CA50 EnumPrinterKeyA
11710
        245   68 00028260 EnumPrinterKeyW
11711
        246   69 0001CB90 EnumPrintersA
11712
        247   6A 0000B5E0 EnumPrintersW
11713
        248   6B 0001CCF0 ExtDeviceMode
11714
        249   6C 0000DAC0 FindClosePrinterChangeNotification
11715
        263   6D 0000AD70 FindFirstPrinterChangeNotification
11716
        264   6E 0000BA60 FindNextPrinterChangeNotification
11717
        265   6F 000284A0 FlushPrinter
11718
        266   70 00039CD0 FreePrintNamedPropertyArray
11719
        267   71 00039DB0 FreePrintPropertyValue
11720
        268   72 0000DD10 FreePrinterNotifyInfo
11721
        269   73 00038DA0 GetCorePrinterDriversA
11722
        270   74 00039000 GetCorePrinterDriversW
11723
        201   75 0001D030 GetDefaultPrinterA
11724
        203   76 0000D130 GetDefaultPrinterW
11725
        271   77 0001D0E0 GetFormA
11726
        272   78 0000A320 GetFormW
11727
        273   79 0001D1C0 GetJobA
11728
        274   7A 00039E40 GetJobNamedPropertyValue
11729
        275   7B 00028850 GetJobW
11730
        276   7C 000294F0 GetPrintExecutionData
11731
        277   7D 000295A0 GetPrintOutputInfo
11732
        278   7E 0001D2E0 GetPrintProcessorDirectoryA
11733
        279   7F 00029980 GetPrintProcessorDirectoryW
11734
        280   80 0001D3D0 GetPrinterA
11735
        281   81 0001D530 GetPrinterDataA
11736
        282   82 0001D860 GetPrinterDataExA
11737
        283   83 0000E9B0 GetPrinterDataExW
11738
        284   84 00003A50 GetPrinterDataW
11739
        285   85 0001AC00 GetPrinterDriver2A
11740
        286   86 00029B20 GetPrinterDriver2W
11741
        287   87 00009FE0 GetPrinterDriverA
11742
        288   88 0001DC10 GetPrinterDriverDirectoryA
11743
        289   89 000115A0 GetPrinterDriverDirectoryW
11744
        290   8A 000391E0 GetPrinterDriverPackagePathA
11745
        291   8B 000393D0 GetPrinterDriverPackagePathW
11746
        292   8C 0000C990 GetPrinterDriverW
11747
        293   8D 0000C390 GetPrinterW
11748
        294   8E 00029B30 GetSpoolFileHandle
11749
        295   8F 00039590 InstallPrinterDriverFromPackageA
11750
        296   90 000110B0 InstallPrinterDriverFromPackageW
11751
        297   91 0001DD00 IsValidDevmodeA
11752
        298   92 00009F50 IsValidDevmodeW
11753
        299   93 0001AC00 OpenPrinter2A
11754
        300   94 000032A0 OpenPrinter2W
11755
        301   95 0001DD50 OpenPrinterA
11756
        302   96 00003240 OpenPrinterW
11757
        108   97 0003BA20 PerfClose
11758
        109   98 0003BA30 PerfCollect
11759
        110   99 0003BB70 PerfOpen
11760
        303   9A 0002A380 PlayGdiScriptOnPrinterIC
11761
        304   9B 0001DE60 PrinterMessageBoxA
11762
        305   9C 0002A4B0 PrinterMessageBoxW
11763
        306   9D 0002A4C0 PrinterProperties
11764
        111   9E 00022570 QueryColorProfile
11765
        112   9F 00022740 QueryRemoteFonts
11766
        113   A0 00022870 QuerySpoolMode
11767
        307   A1 00005B90 ReadPrinter
11768
        308   A2 00007DC0 RegisterForPrintAsyncNotifications
11769
        309   A3 00038700 ReportJobProcessingProgress
11770
        310   A4 0001E050 ResetPrinterA
11771
        311   A5 00006610 ResetPrinterW
11772
        312   A6 0002A500 ScheduleJob
11773
        313   A7 00005D40 SeekPrinter
11774
        202   A8 0001E130 SetDefaultPrinterA
11775
        204   A9 0000F970 SetDefaultPrinterW
11776
        314   AA 0001E190 SetFormA
11777
        315   AB 0002A8B0 SetFormW
11778
        316   AC 0001E290 SetJobA
11779
        317   AD 000051D0 SetJobNamedProperty
11780
        318   AE 0002AA90 SetJobW
11781
        319   AF 0001E410 SetPortA
11782
        320   B0 0002AD50 SetPortW
11783
        321   B1 0001E520 SetPrinterA
11784
        322   B2 0001E790 SetPrinterDataA
11785
        323   B3 0001E890 SetPrinterDataExA
11786
        324   B4 0002AEC0 SetPrinterDataExW
11787
        325   B5 0000E880 SetPrinterDataW
11788
        326   B6 0000E270 SetPrinterW
11789
        327   B7 0002B0A0 SplDriverUnloadComplete
11790
        114   B8 000234E0 SpoolerDevQueryPrintW
11791
        328   B9 000113D0 SpoolerPrinterEvent
11792
        329   BA 0001E9D0 StartDocDlgA
11793
        115   BB 00023860 StartDocDlgW
11794
        330   BC 0001EBA0 StartDocPrinterA
11795
        331   BD 00006AB0 StartDocPrinterW
11796
        332   BE 00005610 StartPagePrinter
11797
        333   BF 00007EF0 UnRegisterForPrintAsyncNotifications
11798
        334   C0 000396C0 UploadPrinterDriverPackageA
11799
        335   C1 00010DC0 UploadPrinterDriverPackageW
11800
        336   C2 0002E070 WaitForPrinterChange
11801
        337   C3 00006B50 WritePrinter
11802
        339   C4 0002B620 XcvDataW
11803
        100      00028430 [NONAME]
11804
        205      0000A960 [NONAME]
11805
        206      0001A500 [NONAME]
11806
        207      00024AF0 [NONAME]
11807
        208      0001B2E0 [NONAME]
11808
        209      00026930 [NONAME]
11809
        210      0001C210 [NONAME]
11810
        211      00027980 [NONAME]
11811
        212      0000C180 [NONAME]
11812
        213      0000C270 [NONAME]
11813
        214      0000C090 [NONAME]
11814
        215      00011750 [NONAME]
11815
        216      0001DF30 [NONAME]
11816
        217      00031FC0 [NONAME]
11817
        218      0000A7C0 [NONAME]
11818
        219      00021EB0 [NONAME]
11819
        220      00021C30 [NONAME]
11820
        221      00021710 [NONAME]
11821
        222      0000E170 [NONAME]
11822
        223      0002C6F0 [NONAME]
11823
        224      00028450 [NONAME]
11824
        226      00013750 [NONAME]
11825
        227      00036600 [NONAME]
11826
        228      000365F0 [NONAME]
11827
        229      00021840 [NONAME]
11828
        230      00021D60 [NONAME]
11829
        231      00021FE0 [NONAME]
11830
        233      00019B70 [NONAME]
11831
        234      00020840 [NONAME]
11832
        250      000371B0 [NONAME]
11833
        251      00007F60 [NONAME]
11834
        252      00020100 [NONAME]
11835
        253      00002CC0 [NONAME]
11836
        254      00002C60 [NONAME]
11837
        255      000202C0 [NONAME]
11838
        256      0000AA00 [NONAME]
11839
        257      0002EED0 [NONAME]
11840
        258      0003B5E0 [NONAME]
11841
        259      0003B720 [NONAME]
11842
        260      0003B500 [NONAME]
11843
        261      00029C90 [NONAME]
11844
        262      0002A220 [NONAME]
11845
        338      0002EC90 [NONAME]
11846
        368      00038210 [NONAME]
11847

11848
  Summary
11849

11850
        2000 .data
11851
        1000 .didat
11852
        5000 .pdata
11853
       1E000 .rdata
11854
        1000 .reloc
11855
       16000 .rsrc
11856
       48000 .text
11857
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
11858
Copyright (C) Microsoft Corporation.  All rights reserved.
11859

11860

11861
Dump of file wintrust.dll
11862

11863
File Type: DLL
11864

11865
  Section contains the following exports for WINTRUST.dll
11866

11867
    00000000 characteristics
11868
    644C9A48 time date stamp Fri Apr 28 21:17:12 2023
11869
        0.00 version
11870
           1 ordinal base
11871
         148 number of functions
11872
         148 number of names
11873

11874
    ordinal hint RVA      name
11875

11876
         12    0 0002D2B0 AddPersonalTrustDBPages
11877
         13    1 0001ABA0 CatalogCompactHashDatabase
11878
          1    2 00027180 ComputeFirstPageHash
11879
         14    3 0002DD00 ConfigCiFinalPolicy
11880
         15    4 00018AC0 CryptCATAdminAcquireContext
11881
         16    5 00007020 CryptCATAdminAcquireContext2
11882
         17    6 00027E60 CryptCATAdminAddCatalog
11883
         18    7 000070D0 CryptCATAdminCalcHashFromFileHandle
11884
         19    8 00006FD0 CryptCATAdminCalcHashFromFileHandle2
11885
         20    9 00016C70 CryptCATAdminEnumCatalogFromHash
11886
         21    A 00028150 CryptCATAdminPauseServiceForBackup
11887
         22    B 00018750 CryptCATAdminReleaseCatalogContext
11888
         23    C 00014220 CryptCATAdminReleaseContext
11889
         24    D 00028190 CryptCATAdminRemoveCatalog
11890
         25    E 000281E0 CryptCATAdminResolveCatalogPath
11891
         26    F 00017D70 CryptCATAllocSortedMemberInfo
11892
         27   10 00004520 CryptCATCDFClose
11893
         28   11 00028490 CryptCATCDFEnumAttributes
11894
         29   12 00003B40 CryptCATCDFEnumAttributesWithCDFTag
11895
         30   13 000021B0 CryptCATCDFEnumCatAttributes
11896
         31   14 000284B0 CryptCATCDFEnumMembers
11897
         32   15 00028510 CryptCATCDFEnumMembersByCDFTag
11898
         33   16 000023D0 CryptCATCDFEnumMembersByCDFTagEx
11899
         34   17 00002B20 CryptCATCDFOpen
11900
         35   18 00018680 CryptCATCatalogInfoFromContext
11901
         36   19 0000E280 CryptCATClose
11902
         37   1A 00015770 CryptCATEnumerateAttr
11903
         38   1B 00015670 CryptCATEnumerateCatAttr
11904
         39   1C 000278F0 CryptCATEnumerateMember
11905
         40   1D 00018A40 CryptCATFreeSortedMemberInfo
11906
         41   1E 000156E0 CryptCATGetAttrInfo
11907
         42   1F 000155F0 CryptCATGetCatAttrInfo
11908
         43   20 000279F0 CryptCATGetMemberInfo
11909
         44   21 00014A80 CryptCATHandleFromStore
11910
         45   22 00013B70 CryptCATOpen
11911
         46   23 00027AE0 CryptCATPersistStore
11912
         47   24 00027B20 CryptCATPutAttrInfo
11913
         48   25 000038C0 CryptCATPutCatAttrInfo
11914
         49   26 00003580 CryptCATPutMemberInfo
11915
         50   27 00014A80 CryptCATStoreFromHandle
11916
          2   28 000278B0 CryptCATVerifyMember
11917
         51   29 0000F150 CryptSIPCreateIndirectData
11918
         52   2A 0000EFF0 CryptSIPGetCaps
11919
          3   2B 00029050 CryptSIPGetInfo
11920
          4   2C 00029040 CryptSIPGetRegWorkingFlags
11921
         53   2D 00029090 CryptSIPGetSealedDigest
11922
         54   2E 0000E650 CryptSIPGetSignedDataMsg
11923
         55   2F 00001FF0 CryptSIPPutSignedDataMsg
11924
         56   30 00001F40 CryptSIPRemoveSignedDataMsg
11925
         57   31 0000EE60 CryptSIPVerifyIndirectData
11926
         58   32 00023160 DllRegisterServer
11927
         59   33 000231C0 DllUnregisterServer
11928
         60   34 000151A0 DriverCleanupPolicy
11929
         61   35 00014D60 DriverFinalPolicy
11930
         62   36 000152A0 DriverInitializePolicy
11931
         63   37 0002F900 FindCertsByIssuer
11932
          5   38 0002C530 GenericChainCertificateTrust
11933
          6   39 0002C860 GenericChainFinalProv
11934
         64   3A 0002E310 GetAuthenticodeSha256Hash
11935
          7   3B 00006A00 HTTPSCertificateTrust
11936
         65   3C 000068E0 HTTPSFinalProv
11937
         66   3D 00028740 IsCatalogFile
11938
         67   3E 00013D90 MsCatConstructHashTag
11939
         68   3F 00028950 MsCatFreeHashTag
11940
         69   40 0002FCC0 OfficeCleanupPolicy
11941
         70   41 0002FCC0 OfficeInitializePolicy
11942
         71   42 0002D2D0 OpenPersonalTrustDBDialog
11943
         72   43 0002D2E0 OpenPersonalTrustDBDialogEx
11944
         73   44 0000CA60 SoftpubAuthenticode
11945
         74   45 000149D0 SoftpubCheckCert
11946
         75   46 0000B070 SoftpubCleanup
11947
          8   47 0002D020 SoftpubDefCertInit
11948
         76   48 0002FF70 SoftpubDllRegisterServer
11949
         77   49 000301E0 SoftpubDllUnregisterServer
11950
         78   4A 00030DE0 SoftpubDumpStructure
11951
          9   4B 0002D120 SoftpubFreeDefUsageCallData
11952
         79   4C 0000AEE0 SoftpubInitialize
11953
         10   4D 0002D170 SoftpubLoadDefUsageCallData
11954
         80   4E 0000A2B0 SoftpubLoadMessage
11955
         81   4F 00009C80 SoftpubLoadSignature
11956
         82   50 0000D7F0 TrustDecode
11957
         83   51 000254E0 TrustFindIssuerCertificate
11958
         84   52 000256D0 TrustFreeDecode
11959
         85   53 00025700 TrustIsCertificateSelfSigned
11960
         86   54 00025780 TrustOpenStores
11961
         87   55 00005E00 WTGetSignatureInfo
11962
         88   56 00026160 WTHelperCertCheckValidSignature
11963
         11   57 00022E40 WTHelperCertFindIssuerCertificate
11964
         89   58 00022E80 WTHelperCertIsSelfSigned
11965
         90   59 00026180 WTHelperCheckCertUsage
11966
         91   5A 000262C0 WTHelperGetAgencyInfo
11967
         92   5B 000263A0 WTHelperGetFileHandle
11968
         93   5C 00025F30 WTHelperGetFileHash
11969
         94   5D 000263D0 WTHelperGetFileName
11970
         95   5E 00026460 WTHelperGetKnownUsages
11971
         96   5F 00006DF0 WTHelperGetProvCertFromChain
11972
         97   60 000154A0 WTHelperGetProvPrivateDataFromChain
11973
         98   61 0000DC00 WTHelperGetProvSignerFromChain
11974
         99   62 00026500 WTHelperIsChainedToMicrosoft
11975
        100   63 00026680 WTHelperIsChainedToMicrosoftFromStateData
11976
        101   64 00026750 WTHelperIsInRootStore
11977
        102   65 00026850 WTHelperOpenKnownStores
11978
        103   66 00014A80 WTHelperProvDataFromStateData
11979
        104   67 00017FC0 WVTAsn1CatMemberInfo2Decode
11980
        105   68 000040B0 WVTAsn1CatMemberInfo2Encode
11981
        106   69 000237E0 WVTAsn1CatMemberInfoDecode
11982
        107   6A 000238B0 WVTAsn1CatMemberInfoEncode
11983
        108   6B 00018070 WVTAsn1CatNameValueDecode
11984
        109   6C 00003D50 WVTAsn1CatNameValueEncode
11985
        110   6D 00023910 WVTAsn1IntentToSealAttributeDecode
11986
        111   6E 000239B0 WVTAsn1IntentToSealAttributeEncode
11987
        112   6F 000239F0 WVTAsn1SealingSignatureAttributeDecode
11988
        113   70 00023AD0 WVTAsn1SealingSignatureAttributeEncode
11989
        114   71 00023B90 WVTAsn1SealingTimestampAttributeDecode
11990
        115   72 00023C70 WVTAsn1SealingTimestampAttributeEncode
11991
        116   73 00023CD0 WVTAsn1SpcFinancialCriteriaInfoDecode
11992
        117   74 00023D80 WVTAsn1SpcFinancialCriteriaInfoEncode
11993
        118   75 00012670 WVTAsn1SpcIndirectDataContentDecode
11994
        119   76 00003DC0 WVTAsn1SpcIndirectDataContentEncode
11995
        120   77 00023DC0 WVTAsn1SpcLinkDecode
11996
        121   78 00004150 WVTAsn1SpcLinkEncode
11997
        122   79 00023EA0 WVTAsn1SpcMinimalCriteriaInfoDecode
11998
        123   7A 00023F50 WVTAsn1SpcMinimalCriteriaInfoEncode
11999
        124   7B 000134F0 WVTAsn1SpcPeImageDataDecode
12000
        125   7C 00012B40 WVTAsn1SpcPeImageDataEncode
12001
        126   7D 00005450 WVTAsn1SpcSigInfoDecode
12002
        127   7E 00004020 WVTAsn1SpcSigInfoEncode
12003
        128   7F 00023F80 WVTAsn1SpcSpAgencyInfoDecode
12004
        129   80 00024210 WVTAsn1SpcSpAgencyInfoEncode
12005
        130   81 00013220 WVTAsn1SpcSpOpusInfoDecode
12006
        131   82 00003F60 WVTAsn1SpcSpOpusInfoEncode
12007
        132   83 000243C0 WVTAsn1SpcStatementTypeDecode
12008
        133   84 00003EA0 WVTAsn1SpcStatementTypeEncode
12009
        134   85 000089C0 WinVerifyTrust
12010
        135   86 00026020 WinVerifyTrustEx
12011
        136   87 000244F0 WintrustAddActionID
12012
        137   88 000258C0 WintrustAddDefaultForUsage
12013
        138   89 0000C0B0 WintrustCertificateTrust
12014
        139   8A 00025B40 WintrustGetDefaultForUsage
12015
        140   8B 00024A60 WintrustGetRegPolicyFlags
12016
        141   8C 00018240 WintrustLoadFunctionPointers
12017
        142   8D 000246D0 WintrustRemoveActionID
12018
        143   8E 00029ED0 WintrustSetDefaultIncludePEPageHashes
12019
        144   8F 00024B00 WintrustSetRegPolicyFlags
12020
        145   90 0000B070 mscat32DllRegisterServer
12021
        146   91 0000B070 mscat32DllUnregisterServer
12022
        147   92 00029180 mssip32DllRegisterServer
12023
        148   93 000293A0 mssip32DllUnregisterServer
12024

12025
  Summary
12026

12027
        1000 .data
12028
        1000 .didat
12029
        4000 .pdata
12030
       13000 .rdata
12031
        1000 .reloc
12032
        2000 .rsrc
12033
       37000 .text
12034
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
12035
Copyright (C) Microsoft Corporation.  All rights reserved.
12036

12037

12038
Dump of file ws2_32.dll
12039

12040
File Type: DLL
12041

12042
  Section contains the following exports for WS2_32.dll
12043

12044
    00000000 characteristics
12045
    57490AC3 time date stamp Fri May 27 20:04:35 2016
12046
        0.00 version
12047
           1 ordinal base
12048
         500 number of functions
12049
         195 number of names
12050

12051
    ordinal hint RVA      name
12052

12053
         25    0 00001A60 FreeAddrInfoEx
12054
         26    1 00001A60 FreeAddrInfoExW
12055
         27    2 00014AA0 FreeAddrInfoW
12056
         28    3 00025250 GetAddrInfoExA
12057
         29    4 000167C0 GetAddrInfoExCancel
12058
         30    5 00014B20 GetAddrInfoExOverlappedResult
12059
         31    6 00013590 GetAddrInfoExW
12060
         32    7 00010350 GetAddrInfoW
12061
         33    8 00017B00 GetHostNameW
12062
         34    9 00012F20 GetNameInfoW
12063
         35    A 000179F0 InetNtopW
12064
         36    B 00024640 InetPtonW
12065
         37    C 00025430 SetAddrInfoExA
12066
         38    D 000255B0 SetAddrInfoExW
12067
        500    E 00018450 WEP
12068
         39    F 00037070 WPUCompleteOverlappedRequest
12069
         40   10 000173D0 WPUGetProviderPathEx
12070
         41   11 00014140 WSAAccept
12071
         42   12 00014560 WSAAddressToStringA
12072
         43   13 00012400 WSAAddressToStringW
12073
         44   14 00039A60 WSAAdvertiseProvider
12074
        102   15 00029E40 WSAAsyncGetHostByAddr
12075
        103   16 00029F70 WSAAsyncGetHostByName
12076
        105   17 0002A0C0 WSAAsyncGetProtoByName
12077
        104   18 0002A210 WSAAsyncGetProtoByNumber
12078
        107   19 0002A310 WSAAsyncGetServByName
12079
        106   1A 0002A470 WSAAsyncGetServByPort
12080
        101   1B 00015350 WSAAsyncSelect
12081
        108   1C 0002A580 WSACancelAsyncRequest
12082
        113   1D 000285E0 WSACancelBlockingCall
12083
        116   1E 000142E0 WSACleanup
12084
         45   1F 00001740 WSACloseEvent
12085
         46   20 00015E70 WSAConnect
12086
         47   21 00035880 WSAConnectByList
12087
         48   22 00036170 WSAConnectByNameA
12088
         49   23 000363B0 WSAConnectByNameW
12089
         50   24 00001790 WSACreateEvent
12090
         58   25 000292A0 WSADuplicateSocketA
12091
         59   26 00029330 WSADuplicateSocketW
12092
         60   27 000321E0 WSAEnumNameSpaceProvidersA
12093
         61   28 00032280 WSAEnumNameSpaceProvidersExA
12094
         62   29 00032320 WSAEnumNameSpaceProvidersExW
12095
         63   2A 00003FB0 WSAEnumNameSpaceProvidersW
12096
         64   2B 00011B60 WSAEnumNetworkEvents
12097
         65   2C 0003D8C0 WSAEnumProtocolsA
12098
         66   2D 00016950 WSAEnumProtocolsW
12099
         67   2E 00011970 WSAEventSelect
12100
        111   2F 00001730 WSAGetLastError
12101
         68   30 00014440 WSAGetOverlappedResult
12102
         69   31 00030E10 WSAGetQOSByName
12103
         70   32 000323C0 WSAGetServiceClassInfoA
12104
         71   33 000324B0 WSAGetServiceClassInfoW
12105
         72   34 00032640 WSAGetServiceClassNameByClassIdA
12106
         73   35 00032950 WSAGetServiceClassNameByClassIdW
12107
         74   36 000246D0 WSAHtonl
12108
         75   37 00024800 WSAHtons
12109
         76   38 00032C30 WSAInstallServiceClassA
12110
         77   39 00032CF0 WSAInstallServiceClassW
12111
         78   3A 000113F0 WSAIoctl
12112
        114   3B 00028670 WSAIsBlocking
12113
         79   3C 00036E00 WSAJoinLeaf
12114
         80   3D 00032E50 WSALookupServiceBeginA
12115
         81   3E 0000BB50 WSALookupServiceBeginW
12116
         82   3F 0000B720 WSALookupServiceEnd
12117
         83   40 00032F60 WSALookupServiceNextA
12118
         84   41 0000C9B0 WSALookupServiceNextW
12119
         85   42 00033180 WSANSPIoctl
12120
         86   43 00024920 WSANtohl
12121
         87   44 00024A50 WSANtohs
12122
         88   45 00033EE0 WSAPoll
12123
         89   46 00039C00 WSAProviderCompleteAsyncCall
12124
         90   47 00016AA0 WSAProviderConfigChange
12125
         91   48 0000FDE0 WSARecv
12126
         92   49 00031BC0 WSARecvDisconnect
12127
         93   4A 00017760 WSARecvFrom
12128
         94   4B 000332B0 WSARemoveServiceClass
12129
         95   4C 00016380 WSAResetEvent
12130
         96   4D 0000F6E0 WSASend
12131
         97   4E 000341C0 WSASendDisconnect
12132
         98   4F 00011CE0 WSASendMsg
12133
         99   50 00034290 WSASendTo
12134
        109   51 00028710 WSASetBlockingHook
12135
        100   52 00016A50 WSASetEvent
12136
        112   53 000025F0 WSASetLastError
12137
        117   54 00033410 WSASetServiceA
12138
        118   55 000334D0 WSASetServiceW
12139
        119   56 000168D0 WSASocketA
12140
        120   57 00010C50 WSASocketW
12141
        115   58 000035B0 WSAStartup
12142
        121   59 000150A0 WSAStringToAddressA
12143
        122   5A 00014CD0 WSAStringToAddressW
12144
        123   5B 00039DB0 WSAUnadvertiseProvider
12145
        110   5C 000287D0 WSAUnhookBlockingHook
12146
        124   5D 00001A50 WSAWaitForMultipleEvents
12147
         24   5E 00037340 WSApSetPostRoutine
12148
        125   5F 0003DD60 WSCDeinstallProvider
12149
        126   60 0003FCC0 WSCDeinstallProvider32
12150
        127   61 0003DD90 WSCDeinstallProviderEx
12151
        128   62 0003FED0 WSCEnableNSProvider
12152
        129   63 00040750 WSCEnableNSProvider32
12153
        130   64 000336A0 WSCEnumNameSpaceProviders32
12154
        131   65 000337F0 WSCEnumNameSpaceProvidersEx32
12155
        132   66 00002B30 WSCEnumProtocols
12156
        133   67 0003DA70 WSCEnumProtocols32
12157
        134   68 00003050 WSCEnumProtocolsEx
12158
        135   69 0003DFE0 WSCGetApplicationCategory
12159
        136   6A 0003E030 WSCGetApplicationCategoryEx
12160
        137   6B 0003E3A0 WSCGetProviderInfo
12161
        138   6C 0003FCF0 WSCGetProviderInfo32
12162
        139   6D 00017D40 WSCGetProviderPath
12163
        140   6E 0003DAA0 WSCGetProviderPath32
12164
        141   6F 00040040 WSCInstallNameSpace
12165
        142   70 000408B0 WSCInstallNameSpace32
12166
        143   71 00040090 WSCInstallNameSpaceEx
12167
        144   72 000400E0 WSCInstallNameSpaceEx2
12168
        145   73 00040900 WSCInstallNameSpaceEx32
12169
        146   74 0003E660 WSCInstallProvider
12170
        147   75 0003FD30 WSCInstallProvider64_32
12171
        148   76 0002D470 WSCInstallProviderAndChains64_32
12172
        149   77 0003E6B0 WSCInstallProviderEx
12173
        150   78 0003F0C0 WSCSetApplicationCategory
12174
        152   79 0003F120 WSCSetApplicationCategoryEx
12175
        153   7A 0003F5C0 WSCSetProviderInfo
12176
        154   7B 0003FD80 WSCSetProviderInfo32
12177
        155   7C 00040390 WSCUnInstallNameSpace
12178
        156   7D 00040950 WSCUnInstallNameSpace32
12179
        157   7E 000403C0 WSCUnInstallNameSpaceEx2
12180
        158   7F 0003F850 WSCUpdateProvider
12181
        159   80 0003FDC0 WSCUpdateProvider32
12182
        160   81 0003F890 WSCUpdateProviderEx
12183
        161   82 00040570 WSCWriteNameSpaceOrder
12184
        162   83 00040980 WSCWriteNameSpaceOrder32
12185
        163   84 0003FA70 WSCWriteProviderOrder
12186
        164   85 0003FE00 WSCWriteProviderOrder32
12187
        165   86 0003FAA0 WSCWriteProviderOrderEx
12188
        166   87 00002810 WahCloseApcHelper
12189
        167   88 0003C150 WahCloseHandleHelper
12190
        168   89 0003CD20 WahCloseNotificationHandleHelper
12191
        169   8A 0003C1A0 WahCloseSocketHandle
12192
        170   8B 00012B50 WahCloseThread
12193
        171   8C 0003C210 WahCompleteRequest
12194
        172   8D 000032D0 WahCreateHandleContextTable
12195
        173   8E 00016D30 WahCreateNotificationHandle
12196
        174   8F 0003C300 WahCreateSocketHandle
12197
        175   90 00015E00 WahDestroyHandleContextTable
12198
        176   91 0003C4F0 WahDisableNonIFSHandleSupport
12199
        177   92 0003C5E0 WahEnableNonIFSHandleSupport
12200
        178   93 00001960 WahEnumerateHandleContexts
12201
        179   94 00015690 WahInsertHandleContext
12202
        180   95 0003CD60 WahNotifyAllProcesses
12203
        181   96 00003570 WahOpenApcHelper
12204
        182   97 00012AC0 WahOpenCurrentThread
12205
        183   98 0003C7D0 WahOpenHandleHelper
12206
        184   99 00016A60 WahOpenNotificationHandleHelper
12207
        185   9A 0003B8B0 WahQueueUserApc
12208
        186   9B 00001300 WahReferenceContextByHandle
12209
        187   9C 00001380 WahRemoveHandleContext
12210
        188   9D 00016C00 WahWaitForNotification
12211
        189   9E 0003CFA0 WahWriteLSPEvent
12212
        151   9F 00001030 __WSAFDIsSet
12213
          1   A0 000142C0 accept
12214
          2   A1 00012130 bind
12215
          3   A2 0000F2B0 closesocket
12216
          4   A3 00011E50 connect
12217
        190   A4 00014AA0 freeaddrinfo
12218
        191   A5 00012BC0 getaddrinfo
12219
         51   A6 0002A620 gethostbyaddr
12220
         52   A7 0002A7E0 gethostbyname
12221
         57   A8 0002A9B0 gethostname
12222
        192   A9 000130D0 getnameinfo
12223
          5   AA 000149C0 getpeername
12224
         53   AB 000297C0 getprotobyname
12225
         54   AC 00029930 getprotobynumber
12226
         55   AD 0002AB80 getservbyname
12227
         56   AE 0002ADA0 getservbyport
12228
          6   AF 00012660 getsockname
12229
          7   B0 00001170 getsockopt
12230
          8   B1 00001700 htonl
12231
          9   B2 00001770 htons
12232
         11   B3 00002100 inet_addr
12233
         12   B4 00001CF0 inet_ntoa
12234
        193   B5 00024B70 inet_ntop
12235
        194   B6 00024BF0 inet_pton
12236
         10   B7 000116B0 ioctlsocket
12237
         13   B8 00014FF0 listen
12238
         14   B9 00001700 ntohl
12239
         15   BA 00001770 ntohs
12240
         16   BB 0000F940 recv
12241
         17   BC 00015F80 recvfrom
12242
         18   BD 00010040 select
12243
         19   BE 0000F4B0 send
12244
         20   BF 00012280 sendto
12245
         21   C0 0000FBA0 setsockopt
12246
         22   C1 00013280 shutdown
12247
         23   C2 00010B00 socket
12248

12249
  Summary
12250

12251
        1000 .data
12252
        1000 .didat
12253
        4000 .pdata
12254
        D000 .rdata
12255
        1000 .reloc
12256
       11000 .rsrc
12257
       43000 .text
12258

12259