Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Kernel 32 Export | djb2 hash
- --- | ---
- GetStartupInfoA | 0x348b7545L
- CreateProcessW | 0xaeb52e2fL
- CreateProcessA | 0xaeb52e19L
- Sleep | 0xe19e5fe
- GetTickCount | 0x41ad16b9L
- ReleaseMutex | 0x585f7d19L
- WaitForSingleObject | 0xeccda1baL
- WaitForSingleObjectEx | 0x56bd0197L
- SetLastError | 0x6beb4b6fL
- GetLastError | 0x2082eae3L
- TlsGetValue | 0xb00ef115L
- GetCurrentProcessId | 0xa3bf64b4L
- SleepEx | 0xfc2b66db
- GetProcAddress | 0xcf31bb1fL
- GetModuleHandleA | 0x5a153f58L
- FlsGetValue | 0x64fd0787L
- ProcessIdToSessionId | 0xe7e26065L
- WriteFile | 0x663cecb0
- WriteConsoleA | 0xee4211a4L
- GetConsoleMode | 0x349bd73dL
- InterlockedDecrement | 0x5bc18b0L
- InterlockedIncrement | 0x9a7ac99eL
- CloseHandle | 0x3870ca07L
- GetCurrentThreadId | 0xd29e428dL
- InterlockedExchange | 0xe05935dcL
- InterlockedCompareExchange | 0x7421ec23L
- RegKrnGetGlobalState | 0xf8640fc0L
- GetModuleFileNameA | 0x13b8a14dL
- HeapFree | 0x374893c5
- GetProcessHeap | 0xc6580d02L
- TlsSetValue | 0xc324eba1L
- OpenEventW | 0x5e65b4f0
- BaseSetLastNTError | 0xbf23c2ecL
- LocalAlloc | 0x73cebc5b
- SetEvent | 0x877ebbd3
- ResetEvent | 0xa2eff2a
- lstrlenW | 0xd2c4ab20
- WideCharToMultiByte | 0xe65d31ceL
- QueryPerformanceCounter | 0xdb4e150dL
- IsDBCSLeadByte | 0x3ad13a87L
- OpenFileMappingW | 0x73c4b65aL
- GetACP | 0xb4e1adb9
- LCMapStringW | 0x8b4a0260L
- SetFilePointer | 0x53ef6bf2L
- GetCurrentThread | 0xe03908c0L
- GetCurrentProcess | 0xca8d7527L
- UnmapViewOfFile | 0xd639f256L
- CreateEventW | 0x5d01f1b2L
- VirtualAlloc | 0x382c0f97L
- VirtualFree | 0x668fcf2eL
- DuplicateHandle | 0xee96b40cL
- MapViewOfFile | 0x11deb0b3L
- CreateFileMappingW | 0xf33ffc9cL
- InitializeCriticalSectionAndSpinCount | 0xa0c64cedL
- MultiByteToWideChar | 0xe2fdda8eL
- GetStringTypeW | 0xdc3bf0b5L
- IsWow64Process | 0xa0074567L
- GetFileSize | 0x7891c520L
- OpenProcess | 0x7136fdd6L
- WaitForMultipleObjectsEx | 0x579e5b14L
- GetVersionExW | 0x45c02effL
- SetErrorMode | 0x975945e0L
- GetFileAttributesW | 0xcc9c6ce3L
- CompareFileTime | 0xb5717f3bL
- GetEnvironmentVariableW | 0x87889717L
- MulDiv | 0xc3fdd856
- RegQueryValueExW | 0x6b95d12aL
- RegCloseKey | 0x736b3702L
- RegOpenKeyExW | 0x74a9772L
- LocalFree | 0xa66df372
- RegEnumKeyExW | 0x6d0b1b75L
- FindAtomW | 0xb4c7764e
- GlobalAddAtomW | 0xe765e467L
- DeviceIoControl | 0x59440ceL
- CreateEventA | 0x5d01f19cL
- FindResourceExW | 0x19bcb6c2L
- GetSystemDefaultLCID | 0xcee92c8bL
- SetThreadPriority | 0x1c7c81abL
- <ModuleEntryPoint> | 0x1bfb8241L
- RegKrnInitialize | 0x3cca2120L
- GetEnvironmentVariableA | 0x87889701L
- BaseThreadInitThunk | 0x98649676L
- VerifyConsoleIoHandle | 0x45598a31L
- GetModuleHandleW | 0x5a153f6eL
- FreeLibrary | 0x30eece3cL
- CreateThread | 0x7f08f451L
- GetSystemTimeAsFileTime | 0x4bbf083cL
- GetVersionExA | 0x45c02ee9L
- GetFileType | 0x78929447L
- TlsFree | 0x4a12077a
- FlsFree | 0x1462b4ec
- HeapDestroy | 0xec0fb46dL
- GetThreadLocale | 0x88b7330dL
- CompareStringW | 0xd1ff039aL
- GetLocaleInfoW | 0x4db8d678L
- CompareStringA | 0xd1ff0384L
- GetUserDefaultLCID | 0xf640b645L
- lstrcmpiA | 0x2abba0b4
- ReadFile | 0x71019921
- CreateFileW | 0xeb96c610L
- GetFullPathNameW | 0x3524e9fdL
- ExpandEnvironmentStringsW | 0x7487495bL
- GetDriveTypeW | 0x74bb7698L
- QueryPerformanceFrequency | 0x40d0207fL
- FlsSetValue | 0x78130213L
- WaitForMultipleObjects | 0x6da077f7L
- CreateMutexW | 0x6fa13223L
- CreateDirectoryW | 0x41fac005L
- VirtualProtect | 0x844ff18dL
- FlushInstructionCache | 0xb7dcedddL
- GetThreadPriority | 0x3a45e99fL
- GetWindowsDirectoryW | 0x95bc69dcL
- ResumeThread | 0x74162a6eL
- GetFileTime | 0x78924fd4L
- FindFirstFileW | 0xae2636e5L
- FindClose | 0xb4e7451c
- VirtualQuery | 0x395269c2L
- GetVersion | 0x2782618b
- IsValidCodePage | 0x8edf3829L
- GetUserDefaultUILanguage | 0xb16cda6bL
- GetFileAttributesExW | 0x656af4e0L
- FormatMessageW | 0x128804eaL
- GetTimeZoneInformation | 0xced1f16L
- FlushFileBuffers | 0x661c94L
- HeapCompact | 0xb5f9ff8aL
- RegOpenKeyExA | 0x74a975cL
- DisableThreadLibraryCalls | 0x530574f5L
- LoadLibraryExA | 0x4f803c78L
- LoadLibraryW | 0x5fbff111L
- GetModuleFileNameW | 0x13b8a163L
- LoadLibraryExW | 0x4f803c8eL
- Basep8BitStringToDynamicUnicodeString | 0x172d5924L
- TlsAlloc | 0x8bf55163
- GetSystemInfo | 0x8308eff6L
- LoadLibraryA | 0x5fbff0fbL
- HeapCreate | 0x24bd1d77
- OpenEventA | 0x5e65b4da
- IsDebuggerPresent | 0xe6a24847L
- GetModuleHandleExW | 0x3462962bL
- RegQueryValueExA | 0x6b95d114L
- OpenFileMappingA | 0x73c4b644L
- CreateMutexA | 0x6fa1320dL
- MapViewOfFileEx | 0x44db2d0L
- InitializeCriticalSectionEx | 0x72f31ed4L
- GetStartupInfoW | 0x348b755bL
- RegGetValueW | 0x79fe96f7L
- FlsAlloc | 0xa05bad15
- GetSystemDirectoryW | 0xe643c476L
- OpenMutexW | 0x7104f561
- RegOpenCurrentUser | 0x5fd39cb7L
- GetCPInfo | 0xfa1799c4
- GetCommandLineA | 0xb511fc4dL
- GetStdHandle | 0xf178843cL
- FreeEnvironmentStringsW | 0x38d10c3dL
- GetEnvironmentStringsW | 0x4b44f97bL
- GetSystemWindowsDirectoryW | 0xe02583e1L
- GetCommandLineW | 0xb511fc63L
- IsProcessorFeaturePresent | 0xc24a5f0eL
- LoadStringBaseExW | 0x32e87d0bL
- GetLogicalDrives | 0x30bc770dL
- GetFileInformationByHandle | 0xc500df72L
- CreateFileA | 0xeb96c5faL
- GetFileAttributesA | 0xcc9c6ccdL
- FileTimeToSystemTime | 0x1fb7928bL
- DeleteFileA | 0x1cd88719L
- DeactivateActCtx | 0x78eebe46L
- ActivateActCtx | 0xb635a7fdL
- ReleaseActCtx | 0x470aeeedL
- FindNextFileW | 0xf3b43c5cL
- CreateFileMappingA | 0xf33ffc86L
- GlobalFree | 0x4b816b98
- GetStringTypeExW | 0xdafab532L
- GetCurrentDirectoryW | 0x2ced73f4L
- HeapSetInformation | 0xf3baa215L
- FindActCtxSectionGuid | 0x39768f2bL
- GlobalAlloc | 0xbb513941L
- RaiseException | 0x8b8deae8L
- _lread | 0xed5bacac
- _llseek | 0x986c6e04
- lstrcmpW | 0xd2bfde01
- LoadResource | 0xdcde594dL
- LockResource | 0x145a9296L
- FindResourceW | 0x3c704e45L
- LocalLock | 0xa67130b9
- LocalUnlock | 0x1c71a5bcL
- LocalReAlloc | 0xabad9db2L
- GetFileSizeEx | 0xe417967dL
- IsThreadAFiber | 0xcc37d4e2L
- lstrlenA | 0xd2c4ab0a
- SystemTimeToFileTime | 0xbc59c04bL
- GetSystemTime | 0x830ee3b9L
- GetLocalTime | 0x12d7e0dfL
- SizeofResource | 0xc17a85dL
- RegSetValueExW | 0x34587300L
- RegisterWaitForInputIdle | 0xfab34fb4L
- LoadAppInitDlls | 0xfc7483c9L
- QueryActCtxSettingsW | 0x958ba82aL
- SortGetHandle | 0xaf4ffbf9L
- ExitProcess | 0xb769339eL
- TerminateThread | 0x87ae6a46L
- RegEnumValueW | 0x8665212cL
- RegQueryInfoKeyW | 0x4679d725L
- RegCreateKeyExW | 0x46ceb3b4L
- SetUnhandledExceptionFilter | 0x252c3659L
- DeleteFileW | 0x1cd8872fL
- SetThreadLocale | 0x30105819L
- SetEnvironmentVariableW | 0xea0c0823L
- SetConsoleCtrlHandler | 0x3e24e177L
- GlobalMemoryStatus | 0x960c7d3L
- CreateActCtxW | 0x9dfd10d7L
- GetLongPathNameW | 0xe22f879aL
- FindActCtxSectionStringW | 0x3644efb0L
- GetProcessAffinityMask | 0x1acd1c0aL
- SetHandleCount | 0x8c675806L
- QueryActCtxW | 0x66875219L
- GetShortPathNameW | 0xaa90c53aL
- SetThreadStackGuarantee | 0xc6cc019bL
- CreateMemoryResourceNotification | 0xdf5ac5a1L
- GetSystemWow64DirectoryW | 0xc8727abdL
- GetComputerNameW | 0xaa63bfccL
- FileTimeToLocalFileTime | 0x39515df1L
- GetFullPathNameA | 0x3524e9e7L
- FindFirstFileA | 0xae2636cfL
- SetEnvironmentVariableA | 0xea0c080dL
- FreeEnvironmentStringsA | 0x38d10c27L
- GetEnvironmentStrings | 0xc43864a4L
- GetEnvironmentStringsA | 0x4b44f965L
- GetLogicalDriveStringsA | 0x89478d45L
- BaseDllReadWriteIniFile | 0x6d9e2e3L
- GetPrivateProfileStringW | 0x1607711fL
- GetVolumeNameForVolumeMountPointW | 0x34d49f91L
- GetVolumePathNameW | 0x6b2fa162L
- GetVolumePathNamesForVolumeNameW | 0xe8f10f55L
- BaseIsAppcompatInfrastructureDisabled | 0x129519aL
- GetNativeSystemInfo | 0x395dc89dL
- RegNotifyChangeKeyValue | 0x1d0575a8L
- OpenThread | 0x806cb78f
- SetCurrentDirectoryW | 0xbec3a080L
- BaseFormatObjectAttributes | 0xaf295167L
- RegCreateKeyExA | 0x46ceb39eL
- RegSetValueExA | 0x345872eaL
- QueryFullProcessImageNameW | 0xd2b32468L
- GetProductInfo | 0x5cfdefb2L
- GetExitCodeProcess | 0xe21026f9L
- FindFirstFileExW | 0xd08f4762L
- SetCurrentDirectoryA | 0xbec3a06aL
- GetPrivateProfileStringA | 0x16077109L
- lstrcpynA | 0x2abd6cc5
- SetHandleInformation | 0x70ea2e03L
- RegQueryInfoKeyA | 0x4679d70fL
- SetProcessWorkingSetSize | 0xec7294f8L
- SetProcessWorkingSetSizeEx | 0xd36bbc55L
- BaseCheckAppcompatCacheEx | 0x44744994L
- BasepCheckBadapp | 0xc61d4d16L
- CheckElevationEnabled | 0x521be915L
- BaseGenerateAppCompatData | 0xb6ae452aL
- CreateProcessInternalW | 0x4da0acccL
- BasepFreeAppCompatData | 0x48a22011L
- BasepCheckWinSaferRestrictions | 0xbcbfb6L
- MoveFileWithProgressW | 0x394bc704L
- MoveFileW | 0xd834fdd3
- GetConsoleOutputCP | 0xdbbfa5cL
- MoveFileExW | 0xb96b81d0L
- BaseCheckRunApp | 0xef17ce74L
- SearchPathA | 0xd6583fc9L
- OpenFile | 0x5064e57
- CreateProcessInternalA | 0x4da0acb6L
- SetConsoleMode | 0xfb9e8ac9L
- SetConsoleInputExeNameW | 0x5b3966ceL
- SetThreadUILanguage | 0x974d454bL
- GetConsoleTitleW | 0xdadf1511L
- GetErrorMode | 0x4bf0e554L
- HeapValidate | 0xc59b33cdL
- NeedCurrentDirectoryForExePathW | 0xadc6e86L
- RegOpenUserClassesRoot | 0x6e3939e6L
- GetSystemDirectoryA | 0xe643c460L
- GetComputerNameA | 0xaa63bfb6L
- GetFileInformationByHandleEx | 0x8b68d4fL
- SetFilePointerEx | 0xd7a39cfL
- GetVolumeInformationW | 0xc948a23aL
- FileTimeToDosDateTime | 0xaf0ce60aL
- CreateSemaphoreW | 0xf8ef4914L
- QueueUserWorkItem | 0xb00c9f9bL
- GetModuleHandleExA | 0x34629615L
- GetOverlappedResult | 0x71d7cf76L
- _lclose | 0x97c5e726
- SearchPathW | 0xd6583fdfL
- GlobalFindAtomW | 0x7aca41fL
- GlobalDeleteAtom | 0xd7f651aL
- RtlCaptureStackBackTrace | 0xd43e9c41L
- AddAtomW | 0x7847acb6
- DeleteAtom | 0x5df47d29
- SetEndOfFile | 0x6520767dL
- IsValidLocale | 0x38263b21L
- ConvertDefaultLocale | 0xb427eb5bL
- SetPriorityClass | 0xcc04b069L
- CallbackMayRunLong | 0x8f7beedeL
- ReadProcessMemory | 0xb8932459L
- GlobalUnlock | 0x5443bf62L
- GlobalLock | 0x4b84a8df
- GlobalSize | 0x4b8868f1
- GlobalGetAtomNameW | 0x224de8bfL
- NlsGetCacheUpdateCount | 0x19093a12L
- InterlockedExchangeAdd | 0xcb42da25L
- ReleaseSemaphore | 0x19e5986aL
- GetQueuedCompletionStatus | 0xf80f04ccL
- FreeResource | 0xcbe6fe4fL
- VerifyVersionInfoW | 0x4ef5bdc3L
- GetTempPathW | 0x9ef979ffL
- SetFileAttributesW | 0xf5a6066fL
- GetDiskFreeSpaceExW | 0x3dfe2f52L
- GetCalendarInfoW | 0x2382e4a2L
- AddRefActCtx | 0x432def92L
- GetCurrentActCtx | 0xb38d14efL
- FreeLibraryAndExitThread | 0xe222dba1L
- GetExitCodeThread | 0xb263c852L
- lstrcmpiW | 0x2abba0ca
- GetLocaleInfoA | 0x4db8d662L
- GetUserDefaultLangID | 0x8b7b2338L
- GetProcessTimes | 0x923536e6L
- InitOnceExecuteOnce | 0xfafa8756L
- Wow64DisableWow64FsRedirection | 0xd859b1d8L
- Wow64RevertWow64FsRedirection | 0x72f47e1cL
- TerminateProcess | 0x60af076dL
- FindFirstChangeNotificationW | 0xca3b9fd2L
- ReadDirectoryChangesW | 0x923a9d06L
- BindIoCompletionCallback | 0x4758d561L
- SetProcessPriorityBoost | 0x4275d839L
- VirtualAllocEx | 0xf36e5ab4L
- VirtualFreeEx | 0x49c05c0bL
- WriteProcessMemory | 0x6f22e8c8L
- WerRegisterMemoryBlock | 0x4b9219fcL
- GlobalReAlloc | 0xddc2ec18L
- GetAtomNameW | 0x6469408eL
- GetNumberFormatW | 0x8993af4eL
- LocalSize | 0xa674f0cb
- BasepMapModuleHandle | 0xe628caa0L
- FindResourceExA | 0x19bcb6acL
- FindResourceA | 0x3c704e2fL
- RegDeleteValueW | 0xb9a29e6aL
- ExpandEnvironmentStringsA | 0x74874945L
- SetProcessDEPPolicy | 0x65f570f9L
- Wow64EnableWow64FsRedirection | 0x79fbe6abL
- CreateBoundaryDescriptorW | 0x8a12d533L
- VirtualLock | 0x66930c75L
- OpenMutexA | 0x7104f54b
- SetFileTime | 0xb8eacee0L
- SetFileAttributesA | 0xf5a60659L
- lstrcmpA | 0xd2bfddeb
- AddAtomA | 0x7847aca0
- FindAtomA | 0xb4c77638
- OpenSemaphoreW | 0xc0de7b52L
- CreateThreadpoolWork | 0x462abfeeL
- CreateThreadpoolTimer | 0xb49144cL
- CreateThreadpoolCleanupGroup | 0x8cd9d3e0L
- GetTickCount64 | 0x614db023L
- CreateIoCompletionPort | 0x825d7290L
- PostQueuedCompletionStatus | 0x735f0c32L
- VirtualUnlock | 0x6c796078L
- GetDriveTypeA | 0x74bb7682L
- CancelIoEx | 0xa40ceac0
- FindCloseChangeNotification | 0x12a93269L
- SwitchToThread | 0x3d8342d2L
- DosDateTimeToFileTime | 0x2d4be84aL
- CreateThreadpoolWait | 0x462a8340L
- GetTimeFormatW | 0x4b56b494L
- GetSystemPowerStatus | 0x83c2d7bbL
- TrySubmitThreadpoolCallback | 0x2d0ca5f7L
- SetThreadExecutionState | 0x4526589eL
- GetDiskFreeSpaceW | 0x5dda62d5L
- DeleteTimerQueueTimer | 0x92d38a7fL
- CreateTimerQueueTimer | 0x117296a0L
- VerifyVersionInfoA | 0x4ef5bdadL
- SignalObjectAndWait | 0x1c821902L
- BaseFormatTimeOut | 0x2634b230L
- RegEnumKeyExA | 0x6d0b1b5fL
- K32GetModuleBaseNameW | 0xf0a8cf4eL
- K32GetModuleBaseNameA | 0xf0a8cf38L
- RegDeleteValueA | 0xb9a29e54L
- RegEnumValueA | 0x86652116L
- CreateSemaphoreExA | 0xf1e5a13bL
- GlobalAddAtomA | 0xe765e451L
- CreateEventExA | 0xa544e959L
- SetThreadAffinityMask | 0x8e6a9f8fL
- CompareStringOrdinal | 0xfbe507ccL
- DeleteTimerQueueEx | 0x60fa315bL
- SystemTimeToTzSpecificLocalTime | 0x99a3156aL
- TzSpecificLocalTimeToSystemTime | 0xfaf4528aL
- RegDeleteKeyExW | 0xa04898b3L
- ClosePrivateNamespace | 0x25933a3L
- GetFinalPathNameByHandleW | 0x9238907bL
- CreatePrivateNamespaceW | 0xf2c2c478L
- GetNLSVersion | 0x67d7f0b8L
- ReplaceFileW | 0xc7c7aa58L
- GetDurationFormat | 0x22454554L
- GetDurationFormatEx | 0xc8abf3b1L
- GetTempPathA | 0x9ef979e9L
- EnumSystemLocalesA | 0x863ece83L
- GetProfileStringA | 0x46a957ceL
- GetPrivateProfileIntW | 0x750eb53L
- GetProfileIntW | 0xadb5c038L
- GetProcessHeaps | 0x9159adb5L
- lstrcpyA | 0xd2bfebd7
- GetWindowsDirectoryA | 0x95bc69c6L
- GetSystemDefaultUILanguage | 0xcc826d31L
- IsBadCodePtr | 0xddfa11d9L
- lstrcatA | 0xd2bfab63
- GlobalFlags | 0xbbab8403L
- RegGetKeySecurity | 0x91fbe704L
- IsBadStringPtrW | 0xc91c298cL
- lstrcpyW | 0xd2bfebed
- IsBadStringPtrA | 0xc91c2976L
- GetDateFormatW | 0x49dee83L
- GetTimeZoneInformationForYear | 0xfe5736aeL
- CopyFileExW | 0x3e0668d4L
- BaseUpdateAppcompatCache | 0x854412fcL
- BaseQueryModuleData | 0xe32f08d6L
- CopyFileA | 0xac2253c1
- GetShortPathNameA | 0xaa90c524L
- FindNextChangeNotification | 0x8b810af2L
- FormatMessageA | 0x128804d4L
- WritePrivateProfileStringW | 0x30b214caL
- TermsrvAppInstallMode | 0xd1f7bd55L
- WriteProfileStringW | 0xc9f195efL
- K32EnumProcesses | 0x6f39e3a1L
- GetPrivateProfileSectionW | 0x3213193dL
- GetVolumeInformationA | 0xc948a224L
- WritePrivateProfileStringA | 0x30b214b4L
- CreateToolhelp32Snapshot | 0x66851295L
- RegLoadMUIStringW | 0xf8b5a2fcL
- GetThreadId | 0x2537b22aL
- RegisterWaitForSingleObjectEx | 0xf1cc601cL
- UnhandledExceptionFilter | 0x437d25edL
- CheckForReadOnlyResource | 0xd3edde90L
- Wow64GetThreadContext | 0xe02cdc29L
- Module32FirstW | 0xc9dc792fL
- WriteConsoleW | 0xee4211baL
- SetConsoleTextAttribute | 0x4a3a951dL
- WerGetFlags | 0xae42f780L
- GetThreadSelectorEntry | 0x322bb90L
- SuspendThread | 0x8bf7525fL
- Module32NextW | 0xa1d369e6L
- GetApplicationRecoveryCallback | 0xce9e7a75L
- GetStringTypeExA | 0xdafab51cL
- lstrcatW | 0xd2bfab79
- CopyFileW | 0xac2253d7
- GetProfileSectionW | 0x76f1d8a2L
- Process32Next | 0x90177f28L
- Process32NextW | 0x9307647fL
- Process32First | 0x9278b871L
- Process32FirstW | 0xe18fc6e8L
- SetProcessShutdownParameters | 0xe60ea420L
- AddSIDToBoundaryDescriptor | 0xfc966834L
- CreateActCtxA | 0x9dfd10c1L
- GetSystemWindowsDirectoryA | 0xe02583cbL
- RegSetKeySecurity | 0x58fe9a90L
- GetTempFileNameA | 0x79096fbdL
- EnumDateFormatsW | 0x6fa1550bL
- EnumTimeFormatsW | 0x8d72dd3cL
- EnumCalendarInfoA | 0xe37abd61L
- QueueUserAPC | 0x76c0c4bdL
- GetCalendarInfoA | 0x2382e48cL
- GetBinaryTypeW | 0xfe850e43L
- GetNumberFormatA | 0x8993af38L
- FoldStringW | 0x9d919398L
- GetTimeFormatA | 0x4b56b47eL
- GetDateFormatA | 0x49dee6dL
- EnumResourceNamesA | 0xb018b77L
- EnumResourceNamesExA | 0xd19265f4L
- GetUserGeoID | 0x9b47362cL
- CreateThreadpoolIo | 0x8f7646c3L
- GetCPInfoExW | 0xab09a898L
- CreateTimerQueue | 0x5e1c3ffL
- CreateThreadpool | 0x85c062bL
- SetThreadpoolThreadMinimum | 0xfe23ee57L
- OpenPrivateNamespaceW | 0xab5744f6L
- CheckRemoteDebuggerPresent | 0x6638c15L
- K32GetModuleFileNameExW | 0xc479e510L
- OutputDebugStringA | 0x79729f95L
- SetThreadIdealProcessor | 0xa40f4de8L
- K32GetModuleFileNameExA | 0xc479e4faL
- K32EnumProcessModules | 0x9bf78f42L
- RegisterApplicationRestart | 0x6742bc63L
- DeleteFiber | 0x1cd85cc0L
- FlushViewOfFile | 0x8fb94397L
- UnregisterWaitEx | 0xf4bda21fL
- WerUnregisterMemoryBlock | 0x98542d5fL
- CreateWaitableTimerW | 0x9463edaL
- GetConsoleScreenBufferInfo | 0x3658299eL
- SetWaitableTimer | 0x4525bfbL
- GetComputerNameExW | 0xd252a609L
- IdnToUnicode | 0x637bcdcaL
- LCMapStringA | 0x8b4a024aL
- SwitchToFiber | 0xc2d09e02L
- CreateFiber | 0xeb969ba1L
- CreateFiberEx | 0x2bac113eL
- ConvertThreadToFiber | 0xc1283ae9L
- ConvertThreadToFiberEx | 0xac22a286L
- EnumResourceNamesExW | 0xd192660aL
- IsProcessInJob | 0xf17c5352L
- CreateJobObjectW | 0xb0766c42L
- AssignProcessToJobObject | 0xcfb1997eL
- SetInformationJobObject | 0x27a4f2e9L
- CreateProcessAsUserW | 0xb053cc42L
- RegisterWaitForSingleObject | 0xccf99affL
- GetHandleInformation | 0xdf140177L
- IdnToAscii | 0xab78674c
- SetFileInformationByHandle | 0xfaa144feL
- GetFileAttributesExA | 0x656af4caL
- MoveFileExA | 0xb96b81baL
- MoveFileWithProgressA | 0x394bc6eeL
- GetPrivateProfileIntA | 0x750eb3dL
- GetProfileIntA | 0xadb5c022L
- LCIDToLocaleName | 0x377c5455L
- QueryDosDeviceW | 0x99c32da8L
- GetProcessId | 0x4986c7f1L
- GetThreadUILanguage | 0x4d107a3fL
- LockFile | 0xee65f82e
- UnlockFile | 0x9595e7f1
- IsDBCSLeadByteEx | 0x340a01a4L
- WerSetFlags | 0xc158f20cL
- IsBadReadPtr | 0x491934faL
- CreateSemaphoreA | 0xf8ef48feL
- GetOEMCP | 0x75026bf9
- GetTempFileNameW | 0x79096fd3L
- RtlUnwind | 0x97aee78c
- OutputDebugStringW | 0x79729fabL
- IsBadWritePtr | 0x613cb09L
- GlobalHandle | 0x35065bc2L
- GetSystemDefaultLangID | 0x301a42feL
- GlobalFindAtomA | 0x7aca409L
- GetProcessVersion | 0x85606b6aL
- GlobalMemoryStatusEx | 0xe4b211f0L
- GetCurrentDirectoryA | 0x2ced73deL
- LocalFileTimeToFileTime | 0x985a871L
- CreateDirectoryA | 0x41fabfefL
- FindNextFileA | 0xf3b43c46L
- lstrcpynW | 0x2abd6cdb
- LockFileEx | 0x1fc4c50b
- UnlockFileEx | 0x52afb18eL
- GetProfileStringW | 0x46a957e4L
- EnumResourceNamesW | 0xb018b8dL
- LocalFlags | 0x7429071d
- LocalHandle | 0xfd34421cL
- BackupSeek | 0x6a05b63
- BackupRead | 0x69fce77
- BackupWrite | 0xdafb5d46L
- Beep | 0x7c82fba1
- SetComputerNameW | 0x3ce18658L
- SetComputerNameA | 0x3ce18642L
- DnsHostnameToComputerNameW | 0xc3035d93L
- DnsHostnameToComputerNameA | 0xc3035d7dL
- SetComputerNameExW | 0xfb5c3f95L
- SetComputerNameExA | 0xfb5c3f7fL
- AddLocalAlternateComputerNameW | 0x682f0c20L
- AddLocalAlternateComputerNameA | 0x682f0c0aL
- RemoveLocalAlternateComputerNameW | 0x2e0350a5L
- RemoveLocalAlternateComputerNameA | 0x2e03508fL
- SetLocalPrimaryComputerNameW | 0x141aea47L
- SetLocalPrimaryComputerNameA | 0x141aea31L
- EnumerateLocalComputerNamesW | 0x5f981d50L
- EnumerateLocalComputerNamesA | 0x5f981d3aL
- LZCopy | 0xbfaa5666
- CopyLZFile | 0x3d4790a6
- GetFullPathNameTransactedA | 0x81b89590L
- GetFullPathNameTransactedW | 0x81b895a6L
- SetSystemTimeAdjustment | 0xc165d384L
- IsTimeZoneRedirectionEnabled | 0x3e1e8afL
- SetSystemTime | 0x3b8355c5L
- SetClientTimeZoneInformation | 0x564b0da1L
- SetTimeZoneInformation | 0x6d009ea2L
- SetDynamicTimeZoneInformation | 0x745bca87L
- DebugActiveProcess | 0xe26e6467L
- DebugBreakProcess | 0x6c0f18d0L
- DebugSetProcessKillOnExit | 0xbb0c6a5aL
- Wow64GetThreadSelectorEntry | 0x6ab43937L
- WaitForDebugEvent | 0xbe7a3faaL
- ContinueDebugEvent | 0x97f8f4f3L
- DebugActiveProcessStop | 0x8277bf8dL
- RemoveDirectoryTransactedW | 0x5c96d868L
- CreateDirectoryExW | 0xabaa9882L
- RemoveDirectoryTransactedA | 0x5c96d852L
- CreateDirectoryTransactedW | 0x73795aeL
- CreateDirectoryExA | 0xabaa986cL
- CreateDirectoryTransactedA | 0x7379598L
- InitAtomTable | 0xa5cdfaf2L
- GlobalGetAtomNameA | 0x224de8a9L
- GetAtomNameA | 0x64694078L
- GetPrivateProfileSectionA | 0x32131927L
- WritePrivateProfileSectionA | 0xa2123232L
- WritePrivateProfileSectionW | 0xa2123248L
- GetPrivateProfileSectionNamesA | 0x474fc49bL
- GetPrivateProfileSectionNamesW | 0x474fc4b1L
- GetPrivateProfileStructA | 0x160dd877L
- GetPrivateProfileStructW | 0x160dd88dL
- WritePrivateProfileStructA | 0x30b87c22L
- WritePrivateProfileStructW | 0x30b87c38L
- WriteProfileStringA | 0xc9f195d9L
- GetProfileSectionA | 0x76f1d88cL
- WriteProfileSectionA | 0x6341d7f7L
- WriteProfileSectionW | 0x6341d80dL
- DefineDosDeviceA | 0x53c94407L
- QueryDosDeviceA | 0x99c32d92L
- BasepCheckAppCompat | 0xd04f8773L
- CheckElevation | 0xea812c4aL
- SetFileIoOverlappedRange | 0x3bbe3ec8L
- SetFileCompletionNotificationModes | 0x5e02e20aL
- SetThreadErrorMode | 0x5f708c98L
- GetThreadErrorMode | 0x3666f30cL
- OpenFileById | 0xa1c9df5fL
- FindFirstFileTransactedA | 0x51cd2478L
- FindFirstFileTransactedW | 0x51cd248eL
- FindNextStreamW | 0xb47f6408L
- FindFirstStreamW | 0xd35a24d1L
- FindFirstFileNameW | 0x321552a6L
- FindNextFileNameW | 0xf1873b9dL
- FindFirstStreamTransactedW | 0x9804697aL
- FindFirstFileNameTransactedW | 0x1e7ea58fL
- CancelSynchronousIo | 0x9d65640eL
- CancelIo | 0x838f2ca3
- SetFileBandwidthReservation | 0x78a34618L
- GetFileBandwidthReservation | 0x8ef62f0cL
- SetFileShortNameW | 0x55452259L
- SetFileShortNameA | 0x55452243L
- CreateFileMappingNumaA | 0x558412d7L
- SetFileAttributesTransactedW | 0x1e956898L
- GetFileAttributesTransactedW | 0xff45700cL
- DeleteFileTransactedW | 0xcc6fd958L
- PrivMoveFileIdentityW | 0x8aa6197eL
- GetCompressedFileSizeW | 0x14ab576cL
- SetFileAttributesTransactedA | 0x1e956882L
- GetFileAttributesTransactedA | 0xff456ff6L
- DeleteFileTransactedA | 0xcc6fd942L
- GetCompressedFileSizeTransactedW | 0x4d1dd9d5L
- GetCompressedFileSizeA | 0x14ab5756L
- CreateSymbolicLinkW | 0x4fa6ee20L
- GetCompressedFileSizeTransactedA | 0x4d1dd9bfL
- CreateSymbolicLinkTransactedW | 0xd53c6189L
- CreateSymbolicLinkA | 0x4fa6ee0aL
- CreateSymbolicLinkTransactedA | 0xd53c6173L
- MoveFileTransactedA | 0x95bbece6L
- MoveFileTransactedW | 0x95bbecfcL
- MoveFileA | 0xd834fdbd
- ReOpenFile | 0xff7bf58e
- CreateFileTransactedW | 0x4b0ee579L
- CreateFileTransactedA | 0x4b0ee563L
- PrivCopyFileExW | 0x72d5b9f5L
- ReplaceFileA | 0xc7c7aa42L
- CopyFileTransactedW | 0x303f9800L
- CopyFileExA | 0x3e0668beL
- CopyFileTransactedA | 0x303f97eaL
- GetFirmwareEnvironmentVariableW | 0xe4ca0b4L
- SetFirmwareEnvironmentVariableW | 0xa7865dc0L
- GetFirmwareEnvironmentVariableA | 0xe4ca09eL
- SetFirmwareEnvironmentVariableA | 0xa7865daaL
- RegisterWowBaseHandlers | 0x41c36f13L
- LocalCompact | 0x4375dc17L
- GlobalFix | 0x38974fbd
- GlobalUnfix | 0xbcbc21e0L
- GlobalWire | 0x4b8a996d
- GlobalUnWire | 0x543823d0L
- AddSecureMemoryCacheCallback | 0xb99759cfL
- RemoveSecureMemoryCacheCallback | 0x6216b914L
- EnumSystemFirmwareTables | 0x69032c17L
- GetSystemFirmwareTable | 0x650be28fL
- GetPhysicallyInstalledSystemMemory | 0x436bc4e5L
- _lopen | 0xed5a36e2
- _lcreat | 0x97c9049f
- _lwrite | 0x9933021b
- LocalShrink | 0x175df39fL
- GetMailslotInfo | 0xedf28896L
- SetMailslotInfo | 0x954bada2L
- CreateMailslotW | 0xbfa0f2b5L
- CreateMailslotA | 0xbfa0f29fL
- LoadStringBaseW | 0xd633ee4eL
- UTRegister | 0xc9c5bbf3
- SetDllDirectoryW | 0x5399e1d9L
- SetDllDirectoryA | 0x5399e1c3L
- GetDllDirectoryW | 0xc11c1b4dL
- GetDllDirectoryA | 0xc11c1b37L
- SetSearchPathMode | 0x4f29ea99L
- EnumResourceTypesExW | 0x99928f4bL
- EnumResourceTypesW | 0x1ab4708eL
- EnumResourceTypesExA | 0x99928f35L
- EnumResourceTypesA | 0x1ab47078L
- EnumResourceLanguagesExW | 0x299f4b8dL
- EnumResourceLanguagesW | 0x4813450L
- EnumResourceLanguagesExA | 0x299f4b77L
- EnumResourceLanguagesA | 0x481343aL
- CreateNamedPipeA | 0x28fe1bedL
- GetNamedPipeHandleStateW | 0xbaa3ca3cL
- GetNamedPipeInfo | 0x750210a4L
- CallNamedPipeW | 0xcf472f4bL
- WaitNamedPipeA | 0x85741aeL
- GetNamedPipeClientComputerNameA | 0xc9b970a8L
- GetNamedPipeClientProcessId | 0x6995cfe3L
- GetNamedPipeClientSessionId | 0x2134ebc8L
- GetNamedPipeServerProcessId | 0x51741ffbL
- GetNamedPipeServerSessionId | 0x9133be0L
- GetNamedPipeHandleStateA | 0xbaa3ca26L
- CallNamedPipeA | 0xcf472f35L
- SetNamedPipeAttribute | 0xadefe1f8L
- GetNumaHighestNodeNumber | 0x274efc11L
- GetNumaProcessorNodeEx | 0x6bc16299L
- GetNumaNodeProcessorMaskEx | 0x931f5f65L
- GetNumaAvailableMemoryNodeEx | 0x12ddccf3L
- GetNumaProximityNodeEx | 0x982fe16eL
- GetNumaNodeNumberFromHandle | 0xc3c27845L
- GetNumaProcessorNode | 0xebe1da3cL
- GetNumaNodeProcessorMask | 0x19c23408L
- GetNumaAvailableMemoryNode | 0xd04be616L
- GetNumaProximityNode | 0x93889fd1L
- GetSystemWow64DirectoryA | 0xc8727aa7L
- CheckNameLegalDOS8Dot3W | 0xff4092b8L
- SetVolumeLabelW | 0xc61a15c0L
- CheckNameLegalDOS8Dot3A | 0xff4092a2L
- SetVolumeLabelA | 0xc61a15aaL
- SetSystemPowerState | 0xd9ddd944L
- PowerCreateRequest | 0x3eb6864fL
- PowerClearRequest | 0xe4aa6422L
- PowerSetRequest | 0xd723c147L
- GetDevicePowerState | 0xd2ce2283L
- IsSystemResumeAutomatic | 0x9726697eL
- RequestWakeupLatency | 0x431b988bL
- SetMessageWaitingIndicator | 0xa6296606L
- WinExec | 0x29a65678
- FatalExit | 0x1c873fa7
- GetSystemDEPPolicy | 0x6c168d53L
- GetProcessorSystemCycleTime | 0x4fc43f89L
- GetActiveProcessorGroupCount | 0xbfa5dd57L
- GetMaximumProcessorGroupCount | 0x3de1f039L
- GetActiveProcessorCount | 0x395531eaL
- GetMaximumProcessorCount | 0xc0bf6f8cL
- IsBadHugeReadPtr | 0x14714b83L
- IsBadHugeWritePtr | 0x3c6eb2b2L
- GetProcessShutdownParameters | 0xc6beab94L
- GetProcessGroupAffinity | 0x1b84522bL
- SetProcessAffinityMask | 0x7ae09b96L
- GetProcessPriorityBoost | 0xdff2672dL
- GetProcessIoCounters | 0x248b844fL
- GetProcessHandleCount | 0x94e285d9L
- GetProcessDEPPolicy | 0x1bb8a5edL
- SetProcessUserModeExceptionPolicy | 0x48eaf233L
- GetProcessUserModeExceptionPolicy | 0x7a4dc227L
- GetSystemRegistryQuota | 0x73f9ec6dL
- LoadModule | 0x3d26076b
- GetSystemTimes | 0xe4eb5b4cL
- ReplacePartitionUnit | 0x1799ad5bL
- DosPathToSessionPathW | 0x90fb0443L
- WTSGetActiveConsoleSessionId | 0x9ee5e903L
- DosPathToSessionPathA | 0x90fb042dL
- AreFileApisANSI | 0x27e57275L
- CancelWaitableTimer | 0xfc9418d5L
- ChangeTimerQueueTimer | 0xf6906f72L
- ConnectNamedPipe | 0xc003c602L
- CreateEventExW | 0xa544e96fL
- CreateFileMappingNumaW | 0x558412edL
- CreateMutexExA | 0xdcb60a0aL
- CreateMutexExW | 0xdcb60a20L
- CreateNamedPipeW | 0x28fe1c03L
- CreatePipe | 0x9a8deee7
- CreateRemoteThread | 0xaa30775dL
- CreateSemaphoreExW | 0xf1e5a151L
- CreateWaitableTimerExW | 0x73d12097L
- DebugBreak | 0xd2542b91
- DefineDosDeviceW | 0x53c9441dL
- DeleteVolumeMountPointW | 0x6111ec24L
- DisconnectNamedPipe | 0x55668f42L
- EnumCalendarInfoExW | 0xad1fba74L
- EnumCalendarInfoW | 0xe37abd77L
- EnumDateFormatsExW | 0xdd4a8708L
- EnumLanguageGroupLocalesW | 0x4aa03685L
- EnumSystemCodePagesW | 0xcb596921L
- EnumSystemLanguageGroupsW | 0x53b3d29aL
- EnumSystemLocalesEx | 0x4e189fdfL
- EnumSystemLocalesW | 0x863ece99L
- EnumUILanguagesW | 0x4421d4a6L
- FindFirstFileExA | 0xd08f474cL
- FindFirstChangeNotificationA | 0xca3b9fbcL
- FindFirstVolumeW | 0xae3b74fdL
- FindNextVolumeW | 0x8f60b434L
- FindNLSString | 0x7766b8caL
- FindStringOrdinal | 0xd27f1686L
- FindVolumeClose | 0x29599fb4L
- GetComputerNameExA | 0xd252a5f3L
- GetCurrencyFormatW | 0xfc94c650L
- GetNamedPipeAttribute | 0xe15423ecL
- GetNamedPipeClientComputerNameW | 0xc9b970beL
- GetProcessIdOfThread | 0x3414963eL
- GetDiskFreeSpaceA | 0x5dda62bfL
- GetDiskFreeSpaceExA | 0x3dfe2f3cL
- SetEnvironmentStringsW | 0xab587907L
- GetLogicalDriveStringsW | 0x89478d5bL
- GetLongPathNameA | 0xe22f8784L
- GetPriorityClass | 0x3986e9ddL
- GetProcessPreferredUILanguages | 0xf2904098L
- GetQueuedCompletionStatusEx | 0x37e37129L
- GetSystemTimeAdjustment | 0x5ee26278L
- GetThreadPriorityBoost | 0x672cdbc6L
- GetVolumeInformationByHandleW | 0x628946e1L
- HeapLock | 0x374bd10c
- HeapQueryInformation | 0x8fc157ffL
- HeapSummary | 0x939b1c31L
- HeapUnlock | 0x4e75a6cf
- HeapWalk | 0x37519ed2
- IsNLSDefinedString | 0xf1d95ed4L
- IsValidLanguageGroup | 0xe8c3b6a2L
- MapViewOfFileExNuma | 0x6b76081L
- NeedCurrentDirectoryForExePathA | 0xadc6e70L
- OpenWaitableTimerW | 0xbde06018L
- PulseEvent | 0xe6c60bf0
- ReadFileScatter | 0xd5c53297L
- ReadFileEx | 0xb7cc6ebe
- RemoveDirectoryA | 0x41927229L
- RemoveDirectoryW | 0x4192723fL
- SetCalendarInfoW | 0xb600ab2eL
- SetFileApisToANSI | 0x2b77b7acL
- SetFileApisToOEM | 0x2fdd1162L
- SetFileValidData | 0xb6dc43bbL
- SetLocaleInfoW | 0x14bb8a04L
- SetLocalTime | 0x5e40416bL
- SetNamedPipeHandleState | 0x87331251L
- SetStdHandle | 0x3ce0e4c8L
- SetStdHandleEx | 0xf8ad4025L
- SetThreadPriorityBoost | 0xc7405b52L
- TransactNamedPipe | 0xc1d97cb8L
- VerLanguageNameA | 0x5bc4f698L
- VerLanguageNameW | 0x5bc4f6aeL
- VirtualAllocExNuma | 0x63f15a65L
- VirtualProtectEx | 0xd812922aL
- VirtualQueryEx | 0xd793eb9fL
- WaitNamedPipeW | 0x85741c4L
- WriteFileEx | 0xe92ae20dL
- WriteFileGather | 0x6c02a20bL
- GetDynamicTimeZoneInformation | 0x6b0cc07bL
- SetThreadpoolStackInformation | 0x9f62973fL
- QueryThreadpoolStackInformation | 0xdabb8c69L
- SetProcessAffinityUpdateMode | 0xf02bf5f2L
- QueryProcessAffinityUpdateMode | 0x2845eddcL
- NlsEventDataDescCreate | 0xd4296901L
- NlsWriteEtwEvent | 0xe268910fL
- FatalAppExitA | 0x7c48b9a9L
- FatalAppExitW | 0x7c48b9bfL
- CompareStringEx | 0x11df7500L
- EnumCalendarInfoExEx | 0x5117071aL
- EnumDateFormatsExEx | 0x869b662eL
- EnumTimeFormatsEx | 0x3bce82e2L
- FindNLSStringEx | 0xebf81ca7L
- GetCurrencyFormatEx | 0x8f2d8e76L
- GetEraNameCountedString | 0x7bfe1927L
- GetFileMUIInfo | 0x67006e3cL
- GetFileMUIPath | 0x67040f5dL
- GetFinalPathNameByHandleA | 0x92389065L
- GetLocaleInfoEx | 0x4d3a39eL
- GetLogicalProcessorInformation | 0x47e780e6L
- GetNumberFormatEx | 0xbc099734L
- GetSystemDefaultLocaleName | 0x27a25520L
- GetSystemPreferredUILanguages | 0x4906fc3eL
- GetThreadPreferredUILanguages | 0xdc586f11L
- GetUILanguageInfo | 0x14e00a33L
- GetUserDefaultLocaleName | 0xc8cc25aL
- GetUserPreferredUILanguages | 0x39961738L
- IsValidLocaleName | 0x94d5442L
- LCMapStringEx | 0xf48a4c86L
- LocaleNameToLCID | 0x8bb88cd5L
- NotifyMountMgr | 0x99c0f597L
- PeekNamedPipe | 0x94f08b9dL
- ResolveLocaleName | 0x46613cd6L
- RtlCaptureContext | 0x7733eed0L
- RtlFillMemory | 0xd133097L
- CreateBoundaryDescriptorA | 0x8a12d51dL
- AddIntegrityLabelToBoundaryDescriptor | 0xc0eb6113L
- CreatePrivateNamespaceA | 0xf2c2c462L
- OpenPrivateNamespaceA | 0xab5744e0L
- QueryFullProcessImageNameA | 0xd2b32452L
- OpenSemaphoreA | 0xc0de7b3cL
- CreateWaitableTimerExA | 0x73d12081L
- OpenWaitableTimerA | 0xbde06002L
- SleepConditionVariableCS | 0xeacba6a1L
- SleepConditionVariableSRW | 0x4440bf07L
- InitOnceBeginInitialize | 0x8d633df5L
- InitOnceComplete | 0xd04fd817L
- CreateWaitableTimerA | 0x9463ec4L
- SetTermsrvAppInstallMode | 0xd6aec541L
- Wow64SetThreadContext | 0x72aaa2b5L
- Wow64SuspendThread | 0x3a736026L
- GetThreadTimes | 0x9055227fL
- GetThreadIOPendingFlag | 0x86b92eb4L
- SetThreadGroupAffinity | 0x2d24650L
- GetThreadGroupAffinity | 0xa2bec6c4L
- SetThreadIdealProcessorEx | 0xe51a7145L
- ConvertFiberToThread | 0x1f194e49L
- GetThreadIdealProcessorEx | 0xd3f68d39L
- Heap32ListFirst | 0xe2b6816cL
- Heap32ListNext | 0x44f294c3L
- Heap32First | 0x55463d30L
- Heap32Next | 0xfad7e807
- Toolhelp32ReadProcessMemory | 0x295d19c5L
- Thread32First | 0x93049a4aL
- Thread32Next | 0x695209e1L
- Module32First | 0xa144bdd8L
- Module32Next | 0x3b34f3afL
- LZInit | 0xbfad9b7f
- LZSeek | 0xbfb2f073
- LZRead | 0xbfb26387
- LZCloseFile | 0x8b0b7161L
- LZClose | 0xb4f37961
- GetExpandedNameA | 0x40fb1c10L
- GetExpandedNameW | 0x40fb1c26L
- LZCreateFileW | 0x32edf9b6L
- LZOpenFileA | 0xa25a2b9eL
- LZOpenFileW | 0xa25a2bb4L
- ClearCommError | 0x66325422L
- SetupComm | 0xe6cea042
- EscapeCommFunction | 0x1a4b8248L
- GetCommMask | 0x848c327dL
- GetCommModemStatus | 0x131589e7L
- GetCommProperties | 0xbfc1c5feL
- GetCommState | 0x16893552L
- GetCommTimeouts | 0x4b9d398bL
- PurgeComm | 0x9212db74
- SetCommBreak | 0x60bceb22L
- SetCommMask | 0xc4e4b189L
- SetCommState | 0x61f195deL
- SetCommTimeouts | 0xf2f65e97L
- TransmitCommChar | 0x7593e141L
- WaitCommEvent | 0x315c23a8L
- CommConfigDialogW | 0x1e851aeeL
- CommConfigDialogA | 0x1e851ad8L
- GetDefaultCommConfigW | 0x39963cc3L
- GetDefaultCommConfigA | 0x39963cadL
- SetDefaultCommConfigW | 0x631facfL
- SetDefaultCommConfigA | 0x631fab9L
- ClearCommBreak | 0x65fbd17dL
- GetCommConfig | 0xc209c147L
- SetCommConfig | 0x7a7e3353L
- GetNextVDMCommand | 0x49e921caL
- ExitVDM | 0xe2ca28a6
- SetVDMCurrentDirectories | 0x4cc2d7b8L
- GetVDMCurrentDirectories | 0x99d1452cL
- RegisterWowExec | 0x65cc508cL
- GetLongPathNameTransactedA | 0x28469b6dL
- GetLongPathNameTransactedW | 0x28469b83L
- VDMOperationStarted | 0xa64a52f4L
- GetBinaryTypeA | 0xfe850e2dL
- FindVolumeMountPointClose | 0x64278411L
- DeleteVolumeMountPointA | 0x6111ec0eL
- FindFirstVolumeA | 0xae3b74e7L
- FindNextVolumeA | 0x8f60b41eL
- FindFirstVolumeMountPointW | 0xb2eedcdaL
- FindNextVolumeMountPointW | 0x7dd9ccd1L
- GetVolumeNameForVolumeMountPointA | 0x34d49f7bL
- SetVolumeMountPointW | 0x739d125dL
- GetVolumePathNameA | 0x6b2fa14cL
- FindFirstVolumeMountPointA | 0xb2eedcc4L
- FindNextVolumeMountPointA | 0x7dd9ccbbL
- SetVolumeMountPointA | 0x739d1247L
- GetVolumePathNamesForVolumeNameA | 0xe8f10f3fL
- BuildCommDCBAndTimeoutsA | 0xecb44258L
- BuildCommDCBA | 0x66a5654bL
- BuildCommDCBAndTimeoutsW | 0xecb4426eL
- BuildCommDCBW | 0x66a56561L
- SetTapePosition | 0x7b69ccd0L
- GetTapePosition | 0xd410a7c4L
- PrepareTape | 0xf30d47beL
- EraseTape | 0xcb5d77bf
- CreateTapePartition | 0x410bc47dL
- WriteTapemark | 0x6c9d9685L
- GetTapeParameters | 0x575de823L
- SetTapeParameters | 0x3994802fL
- GetTapeStatus | 0x2a88efd3L
- OpenJobObjectW | 0x78659e80L
- TerminateJobObject | 0xb146c860L
- QueryInformationJobObject | 0x3adfd093L
- CreateJobSet | 0x682af780L
- CreateJobObjectA | 0xb0766c2cL
- OpenJobObjectA | 0x78659e6aL
- CreateHardLinkW | 0x1892353dL
- CreateHardLinkTransactedW | 0xd1acf0e6L
- CreateHardLinkA | 0x18923527L
- CreateHardLinkTransactedA | 0xd1acf0d0L
- GetHandleContext | 0xb0a419d6L
- SetHandleContext | 0x4321e062L
- ZombifyActCtx | 0xccda5a4cL
- FindActCtxSectionStringA | 0x3644ef9aL
- SetComPlusPackageInstallStatus | 0xc904f71bL
- GetComPlusPackageInstallStatus | 0x95d4ab8fL
- BaseCleanupAppcompatCacheSupport | 0x720cd8beL
- BaseDumpAppcompatCache | 0xc5716a6fL
- BaseFlushAppcompatCache | 0xa92ab69bL
- BaseCheckAppcompatCache | 0xd728c677L
- BaseInitAppcompatCacheSupport | 0x3b2ad44aL
- RegisterApplicationRecoveryCallback | 0xc1deb5aL
- UnregisterApplicationRecoveryCallback | 0x562c013dL
- UnregisterApplicationRestart | 0x30044ee6L
- GetApplicationRestartSettings | 0xb042fd0fL
- ApplicationRecoveryFinished | 0xf29359f2L
- ApplicationRecoveryInProgress | 0x331530b4L
- WerpInitiateRemoteRecovery | 0x55580455L
- WerRegisterFile | 0x78ace958L
- WerUnregisterFile | 0x753b561bL
- WerRegisterRuntimeExceptionModule | 0xdcaeaf71L
- WerUnregisterRuntimeExceptionModule | 0x6a3bfef4L
- WerpNotifyLoadStringResource | 0xfa82e29bL
- WerpNotifyUseStringResource | 0xf7bfdcc8L
- WerpCleanupMessageMapping | 0x5d2b019cL
- WerpNotifyLoadStringResourceEx | 0xa6c5feb8L
- WerpStringLookup | 0x82372e94L
- QueryThreadCycleTime | 0x84b91eb2L
- QueryProcessCycleTime | 0x69a3ad59L
- QueryIdleProcessorCycleTime | 0xcb8ba418L
- QueryIdleProcessorCycleTimeEx | 0xdd051375L
- QueryUnbiasedInterruptTime | 0x8de8d402L
- SetEnvironmentStringsA | 0xab5878f1L
- GetProcessWorkingSetSizeEx | 0x9dcb56c9L
- GetProcessWorkingSetSize | 0x3981026cL
- SetSystemFileCacheSize | 0x60d9a2c5L
- AllocateUserPhysicalPages | 0x9c2b3fd6L
- AllocateUserPhysicalPagesNuma | 0x3d000087L
- FreeUserPhysicalPages | 0xe9fdbf3L
- MapUserPhysicalPages | 0x2144566fL
- MapUserPhysicalPagesScatter | 0xfe002c25L
- GetWriteWatch | 0x27b8f3c7L
- ResetWriteWatch | 0xa570578aL
- GetLargePageMinimum | 0x468441a9L
- QueryMemoryResourceNotification | 0x3c855ba3L
- GetSystemFileCacheSize | 0xc62339L
- UnregisterWait | 0x9b9c8042L
- SetTimerQueueTimer | 0x41bdce78L
- DeleteTimerQueue | 0xa3b4107eL
- CancelTimerQueueTimer | 0x516229d2L
- RaiseFailFastException | 0x76c4b8b2L
- InitializeContext | 0x56f5bbdcL
- CopyContext | 0x65439945L
- GetEnabledXStateFeatures | 0x743c8cc8L
- LocateXStateFeature | 0xd22fa202L
- GetXStateFeaturesMask | 0x126ee8a9L
- SetXStateFeaturesMask | 0xdf0aa6b5L
- EnableThreadProfiling | 0x3959cb6eL
- DisableThreadProfiling | 0x14a04dbL
- QueryThreadProfiling | 0x874f7a1dL
- ReadThreadProfilingData | 0x1670879dL
- UpdateResourceW | 0x7529d5c7L
- UpdateResourceA | 0x7529d5b1L
- EndUpdateResourceW | 0x450512deL
- EndUpdateResourceA | 0x450512c8L
- BeginUpdateResourceW | 0x2f321decL
- BeginUpdateResourceA | 0x2f321dd6L
- GetCalendarDaysInMonth | 0x28fb668dL
- IsValidCalDateTime | 0x74e2312eL
- IsCalendarLeapYear | 0x8f4333aeL
- IsCalendarLeapMonth | 0x76d63723L
- IsCalendarLeapDay | 0xd5cb61fbL
- UpdateCalendarDayOfWeek | 0x646de781L
- ConvertCalDateTimeToSystemTime | 0x1a8d0d1aL
- ConvertNLSDayOfWeekToWin32DayOfWeek | 0x49dd027L
- CompareCalendarDates | 0xd6196b57L
- GetCalendarDifferenceInDays | 0x54484552L
- GetCalendarSupportedDateRange | 0xf63895f0L
- GetCalendarMonthsInYear | 0xa77a1680L
- ConvertSystemTimeToCalDateTime | 0x63027a7aL
- GetCalendarDateFormatEx | 0xb3bd7be3L
- GetCalendarDateFormat | 0xc2931906L
- AdjustCalendarDate | 0xf3d6b6c8L
- GetCalendarWeekNumber | 0xea6281b4L
- EnumCalendarInfoExA | 0xad1fba5eL
- EnumTimeFormatsA | 0x8d72dd26L
- EnumDateFormatsA | 0x6fa154f5L
- EnumDateFormatsExA | 0xdd4a86f2L
- EnumSystemLanguageGroupsA | 0x53b3d284L
- EnumLanguageGroupLocalesA | 0x4aa0366fL
- EnumUILanguagesA | 0x4421d490L
- EnumSystemCodePagesA | 0xcb59690bL
- GetGeoInfoA | 0x35fe32adL
- SetLocaleInfoA | 0x14bb89eeL
- SetCalendarInfoA | 0xb600ab18L
- GetCurrencyFormatA | 0xfc94c63aL
- FoldStringA | 0x9d919382L
- GetCPInfoExA | 0xab09a882L
- EnumSystemGeoID | 0x190f8f87L
- SetUserGeoID | 0xe6af96b8L
- GetGeoInfoW | 0x35fe32c3L
- GetTimeFormatEx | 0xb62d453aL
- GetDateFormatEx | 0x985bbd09L
- VerifyScripts | 0x6b9811e2L
- NormalizeString | 0xfd7be12dL
- IsNormalizedString | 0xf9d0f66dL
- IdnToNameprepUnicode | 0x17658fc2L
- GetStringScripts | 0x5ad613a4L
- SetThreadPreferredUILanguages | 0xe5a7791dL
- SetProcessPreferredUILanguages | 0x25c08c24L
- NotifyUILanguageChange | 0xba56b946L
- GetNLSVersionEx | 0xbd970815L
- SortCloseHandle | 0xdc6524fL
- DelayLoadFailureHook | 0x8f46570dL
- UTUnRegister | 0xc49795d6L
- OpenProfileUserMapping | 0x44c11b33L
- LZDone | 0xbfaae271
- SetConsoleMaximumWindowSize | 0x4fe38a55L
- RegFlushKey | 0x46314e8eL
- RegDisablePredefinedCacheEx | 0xde4c2bdeL
- RegDeleteKeyExA | 0xa048989dL
- RegDeleteTreeW | 0x3bd2a93dL
- RegDeleteTreeA | 0x3bd2a927L
- RegGetValueA | 0x79fe96e1L
- RegLoadKeyA | 0x86e4efedL
- RegLoadKeyW | 0x86e4f003L
- RegUnLoadKeyA | 0xa4444310L
- RegUnLoadKeyW | 0xa4444326L
- RegLoadMUIStringA | 0xf8b5a2e6L
- RegRestoreKeyA | 0x2cb543b1L
- RegRestoreKeyW | 0x2cb543c7L
- RegSaveKeyExA | 0x3fbd3cf9L
- RegSaveKeyExW | 0x3fbd3d0fL
- BasepAnsiStringToDynamicUnicodeString | 0xa6208af8L
- BaseVerifyUnicodeString | 0xa0253c73L
- BaseGetNamedObjectDirectory | 0xadf05191L
- BasepAllocateActivationContextActivati | 0x116cf01L
- BasepFreeActivationContextActivationBl | 0x1ef33489L
- AddConsoleAliasW | 0xe333a62L
- AddConsoleAliasA | 0xe333a4cL
- GetConsoleAliasW | 0xaebd2579L
- GetConsoleAliasA | 0xaebd2563L
- GetConsoleAliasesLengthW | 0x75286c13L
- GetConsoleAliasesLengthA | 0x75286bfdL
- GetConsoleAliasExesLengthW | 0xd6ff9e90L
- GetConsoleAliasExesLengthA | 0xd6ff9e7aL
- GetConsoleAliasesW | 0x529cb271L
- GetConsoleAliasesA | 0x529cb25bL
- GetConsoleAliasExesW | 0x6a530b2eL
- GetConsoleAliasExesA | 0x6a530b18L
- ExpungeConsoleCommandHistoryW | 0x4711e5cL
- ExpungeConsoleCommandHistoryA | 0x4711e46L
- SetConsoleNumberOfCommandsW | 0x126b738bL
- SetConsoleNumberOfCommandsA | 0x126b7375L
- GetConsoleCommandHistoryLengthW | 0x95749d62L
- GetConsoleCommandHistoryLengthA | 0x95749d4cL
- GetConsoleCommandHistoryW | 0x1b6dd480L
- GetConsoleCommandHistoryA | 0x1b6dd46aL
- GetConsoleOriginalTitleA | 0x79b3cab0L
- GetConsoleOriginalTitleW | 0x79b3cac6L
- GetConsoleTitleA | 0xdadf14fbL
- SetConsoleTitleA | 0x6d5cdb87L
- SetConsoleTitleW | 0x6d5cdb9dL
- GetConsoleInputExeNameW | 0xf8b5f5c2L
- GetConsoleInputExeNameA | 0xf8b5f5acL
- SetConsoleInputExeNameA | 0x5b3966b8L
- FreeConsole | 0x8afb8c5aL
- AllocConsole | 0xcddb7fc3L
- AttachConsole | 0xefb65e6dL
- CtrlRoutine | 0xe641cc00L
- SetLastConsoleEventActive | 0x5df21416L
- PeekConsoleInputA | 0xb80db1eeL
- PeekConsoleInputW | 0xb80db204L
- ReadConsoleInputA | 0xb1e22b85L
- ReadConsoleInputW | 0xb1e22b9bL
- ReadConsoleInputExA | 0xb31b4182L
- ReadConsoleInputExW | 0xb31b4198L
- WriteConsoleInputA | 0x6871eff4L
- WriteConsoleInputW | 0x6871f00aL
- ReadConsoleOutputW | 0xcc9ed45cL
- ReadConsoleOutputA | 0xcc9ed446L
- WriteConsoleOutputW | 0x552726abL
- WriteConsoleOutputA | 0x55272695L
- ReadConsoleOutputCharacterA | 0xc9f9fc53L
- ReadConsoleOutputCharacterW | 0xc9f9fc69L
- ReadConsoleOutputAttribute | 0x73019a79L
- WriteConsoleOutputCharacterA | 0xd415782L
- WriteConsoleOutputCharacterW | 0xd415798L
- WriteConsoleOutputAttribute | 0xd222cbc8L
- FillConsoleOutputCharacterA | 0x792ef9deL
- FillConsoleOutputCharacterW | 0x792ef9f4L
- FillConsoleOutputAttribute | 0x137792a4L
- GetConsoleInputWaitHandle | 0xb2a1eae9L
- OpenConsoleW | 0xb0a1eee1L
- ReadConsoleA | 0xeb798e95L
- ReadConsoleW | 0xeb798eabL
- ScrollConsoleScreenBufferA | 0xaacae9a2L
- ScrollConsoleScreenBufferW | 0xaacae9b8L
- SetConsoleOutputCP | 0x36c593e8L
- GetConsoleKeyboardLayoutNameA | 0xffa64c49L
- GetConsoleKeyboardLayoutNameW | 0xffa64c5fL
- UnregisterConsoleIME | 0x4091841bL
- SetConsolePalette | 0xd1d1c073L
- WriteConsoleInputVDMA | 0xe2720adbL
- WriteConsoleInputVDMW | 0xe2720af1L
- VDMConsoleOperation | 0xf549c4d0L
- CloseConsoleHandle | 0x51a5baL
- DuplicateConsoleHandle | 0x84b5781fL
- CreateConsoleScreenBuffer | 0xfdcbf326L
- InvalidateConsoleDIBits | 0x30fe0018L
- GetConsoleHistoryInfo | 0x98eec556L
- GetConsoleScreenBufferInfoEx | 0x2d09127bL
- GetConsoleProcessList | 0x66066a33L
- GetNumberOfConsoleFonts | 0x4c52a2c0L
- GetNumberOfConsoleInputEvents | 0x2fb6b97bL
- GetLargestConsoleWindowSize | 0x20b6b09dL
- GetConsoleCursorInfo | 0x3c70f302L
- GetConsoleSelectionInfo | 0x3e74ac0aL
- GetNumberOfConsoleMouseButtons | 0xdae7538eL
- GetConsoleFontInfo | 0xe3bf4a9bL
- GetConsoleFontSize | 0xe3c4b3aaL
- GetCurrentConsoleFont | 0xff6adb72L
- GetCurrentConsoleFontEx | 0x858f894fL
- GenerateConsoleCtrlEvent | 0xbc6641daL
- SetConsoleActiveScreenBuffer | 0xb12770faL
- FlushConsoleInputBuffer | 0x336889e4L
- SetConsoleScreenBufferSize | 0x6bfdf839L
- SetConsoleCursorPosition | 0xb5b72bf7L
- SetConsoleCursorInfo | 0xce471f8eL
- SetConsoleHistoryInfo | 0x658a8362L
- SetConsoleScreenBufferInfoEx | 0x4c590b07L
- SetConsoleWindowInfo | 0x75eec1c8L
- SetCurrentConsoleFontEx | 0xe812fa5bL
- SetConsoleFont | 0xfb9ab57bL
- SetConsoleIcon | 0xfb9c27adL
- GetConsoleCP | 0x7378bb8bL
- SetConsoleCP | 0xbee11c17L
- GetConsoleWindow | 0xe1db2410L
- SetConsoleCursor | 0x468d5562L
- ShowConsoleCursor | 0xaf888e37L
- ConsoleMenuControl | 0x5cdbe76eL
- RegisterConsoleVDM | 0x6fccfac4L
- SetConsoleDisplayMode | 0x907c275fL
- GetConsoleHardwareState | 0x5a30d967L
- SetConsoleHardwareState | 0xbcb44a73L
- GetConsoleDisplayMode | 0xc3e06953L
- SetConsoleKeyShortcuts | 0x3e6bb9fcL
- SetConsoleMenuClose | 0x9ca1d34fL
- GetConsoleCharType | 0xe5b119b8L
- SetConsoleLocalEUDC | 0xe81fff50L
- SetConsoleCursorMode | 0xce495507L
- GetConsoleCursorMode | 0x3c73287bL
- RegisterConsoleOS2 | 0x6fccded1L
- SetConsoleOS2OemFormat | 0xeb2513a2L
- GetConsoleNlsMode | 0x6fc0d8eaL
- SetConsoleNlsMode | 0x51f770f6L
- K32EmptyWorkingSet | 0x3094a051L
- K32QueryWorkingSet | 0xe6f36f18L
- K32QueryWorkingSetEx | 0x718b9e75L
- K32EnumDeviceDrivers | 0x2b29d699L
- K32GetDeviceDriverFileNameA | 0xb3ecacd3L
- K32GetDeviceDriverBaseNameA | 0x9ac3eb0eL
- K32GetDeviceDriverFileNameW | 0xb3ecace9L
- K32GetDeviceDriverBaseNameW | 0x9ac3eb24L
- K32GetPerformanceInfo | 0xd478ec33L
- K32EnumPageFilesW | 0x890ff251L
- K32EnumPageFilesA | 0x890ff23bL
- K32EnumProcessModulesEx | 0x7818711fL
- K32GetModuleInformation | 0xd6caa3a1L
- K32GetProcessMemoryInfo | 0x446a0b79L
- K32InitializeProcessForWsWatch | 0x7889b1eeL
- K32GetWsChanges | 0x9a56aa38L
- K32GetWsChangesEx | 0x8aaa2195L
- K32GetProcessImageFileNameW | 0xd12d782fL
- K32GetProcessImageFileNameA | 0xd12d7819L
- K32GetMappedFileNameW | 0xe66e8384L
- K32GetMappedFileNameA | 0xe66e836eL
- GetCalendarInfoEx | 0x93df7708L
- NlsCheckPolicy | 0x60c88760L
- NlsUpdateLocale | 0x763e1a45L
- NlsUpdateSystemLocale | 0xf3e5c96aL
- ntdll export | hash
- --- | ---
- DbgUserBreakPoint | 0x28ee1420L
- DbgBreakPoint | 0x321c9581L
- KiUserApcDispatcher | 0x6eabdf93L
- KiUserCallbackDispatcher | 0xde5fd7ccL
- KiUserExceptionDispatcher | 0xbfc3faaeL
- KiRaiseUserExceptionDispatcher | 0x25e54bc2L
- RtlUserThreadStart | 0xdaa22b3cL
- KiFastSystemCall | 0x50398a88L
- KiFastSystemCallRet | 0xdd9147d3L
- KiIntSystemCall | 0x29c07265L
- NtMapUserPhysicalPagesScatter | 0xa4b5b2a7L
- NtWaitForSingleObject | 0x4c6dc63cL
- NtCallbackReturn | 0xf0dfb354L
- NtReadFile | 0x2e979ae3
- NtDeviceIoControlFile | 0xa40c4bd0L
- NtWriteFile | 0xd69326b2L
- NtRemoveIoCompletion | 0x7099b467L
- NtReleaseSemaphore | 0xd03a3c2cL
- NtReplyWaitReceivePort | 0xf2eafe90L
- NtReplyPort | 0x9a6b06b8L
- NtSetInformationThread | 0x54212e31L
- NtSetEvent | 0x4514bd95
- NtClose | 0x8b8e133d
- NtQueryObject | 0x218116f4L
- NtQueryInformationFile | 0x4725f863L
- NtOpenKey | 0x4bb73e02
- NtEnumerateValueKey | 0xa1ed48d3L
- NtFindAtom | 0x6dbb14d9
- NtQueryDefaultLocale | 0x8b004932L
- NtQueryKey | 0x1c670286
- NtQueryValueKey | 0xb4c18a83L
- NtAllocateVirtualMemory | 0x6793c34cL
- NtQueryInformationProcess | 0xd034fc62L
- NtWaitForMultipleObjects32 | 0xa4339e3eL
- NtWriteFileGather | 0x9090d58dL
- NtSetInformationProcess | 0xbb7a48b8L
- NtCreateKey | 0x5dbf4a84L
- NtFreeVirtualMemory | 0x471aa7e9L
- NtImpersonateClientOfPort | 0x5f1af9a7L
- NtReleaseMutant | 0x29567961L
- NtQueryInformationToken | 0x2ce5a244L
- NtRequestWaitReplyPort | 0xa1f611b6L
- NtQueryVirtualMemory | 0xe39d8e5dL
- NtOpenThreadToken | 0xfc45b972L
- NtQueryInformationThread | 0xc91f149bL
- NtOpenProcess | 0x5003c058L
- NtSetInformationFile | 0x6e88b479L
- NtMapViewOfSection | 0x231f196aL
- NtAccessCheckAndAuditAlarm | 0x4553ab4eL
- NtUnmapViewOfSection | 0x595014adL
- NtReplyWaitReceivePortEx | 0x59a4ebedL
- NtTerminateProcess | 0x1703ab2fL
- NtSetEventBoostPriority | 0x1e484feL
- NtReadFileScatter | 0xfa536619L
- NtOpenThreadTokenEx | 0x2499e74fL
- NtOpenProcessTokenEx | 0xb1bef7f6L
- NtQueryPerformanceCounter | 0x9f90aa8fL
- NtEnumerateKey | 0x6a5e8ed6L
- NtOpenFile | 0xc29c5019
- NtDelayExecution | 0xa49084aL
- NtQueryDirectoryFile | 0xa9053f72L
- NtQuerySystemInformation | 0xee4f73a8L
- NtOpenSection | 0x17cfa34eL
- NtQueryTimer | 0xd2d6a47eL
- NtFsControlFile | 0xf89ddf61L
- NtWriteVirtualMemory | 0x95f3a792L
- NtCloseObjectAuditAlarm | 0xbf879458L
- NtDuplicateObject | 0x2388ee19L
- NtQueryAttributesFile | 0x8810a944L
- NtClearEvent | 0x53e826f0L
- NtReadVirtualMemory | 0xc24062e3L
- NtOpenEvent | 0x161b3f7bL
- NtAdjustPrivilegesToken | 0x6921f9cdL
- NtDuplicateToken | 0x3000ecc3L
- NtContinue | 0x780a612c
- NtQueryDefaultUILanguage | 0xdc921ae4L
- NtQueueApcThread | 0xd4612238L
- NtYieldExecution | 0x33803cf2L
- NtAddAtom | 0xf9dfee01
- NtCreateEvent | 0xca58747dL
- NtQueryVolumeInformationFile | 0xf1bb8e3bL
- NtCreateSection | 0xd02e20d0L
- NtFlushBuffersFile | 0x832e7ed6L
- NtApphelpCacheControl | 0x9dfbae06L
- NtCreateProcessEx | 0xa9e925b7L
- NtCreateThread | 0x376e0713L
- NtIsProcessInJob | 0x57711e94L
- NtProtectVirtualMemory | 0x82962c8L
- NtQuerySection | 0x8c1609d2L
- NtResumeThread | 0x2c7b3d30L
- NtTerminateThread | 0xac3c9dc8L
- NtReadRequestData | 0xc53523c6L
- NtCreateFile | 0x15a5ecdbL
- NtQueryEvent | 0xd1ce34ffL
- NtWriteRequestData | 0xca170b5L
- NtOpenDirectoryObject | 0x145af005L
- NtAccessCheckByTypeAndAuditAlarm | 0xd60c078bL
- NtQuerySystemTime | 0xf6096a71L
- NtWaitForMultipleObjects | 0x3d456539L
- NtSetInformationObject | 0x48066d50L
- NtCancelIoFile | 0x93580865L
- NtTraceEvent | 0x1e2085f8L
- NtPowerInformation | 0xa3561b1aL
- NtSetValueKey | 0xf52d5359L
- NtCancelTimer | 0x53b70aeL
- NtSetTimer | 0x461d2d14
- NtAcceptConnectPort | 0xee791d66L
- NtAccessCheck | 0x1e9116d7L
- NtAccessCheckByType | 0xd164cbf4L
- NtAccessCheckByTypeResultList | 0x13327d4fL
- NtAccessCheckByTypeResultListAndAuditA | 0xfd50f31aL
- NtAccessCheckByTypeResultListAndAuditA | 0xfd50f31aL
- NtAddBootEntry | 0x180024b6L
- NtAddDriverEntry | 0xf255cf2eL
- NtAdjustGroupsToken | 0x917fc8f3L
- NtAlertResumeThread | 0x482e8408L
- NtAlertThread | 0x328e39d7L
- NtAllocateLocallyUniqueId | 0xc9d6a620L
- NtAllocateReserveObject | 0x9c940c5fL
- NtAllocateUserPhysicalPages | 0x7b693dd8L
- NtAllocateUuids | 0x67d2f656L
- NtAlpcAcceptConnectPort | 0x44fbb3c6L
- NtAlpcCancelMessage | 0xad187472L
- NtAlpcConnectPort | 0x6143cbb6L
- NtAlpcCreatePort | 0x5bf48560L
- NtAlpcCreatePortSection | 0x95b856b5L
- NtAlpcCreateResourceReserve | 0x352c38dfL
- NtAlpcCreateSectionView | 0xdfa593ebL
- NtAlpcCreateSecurityContext | 0x1981b6b8L
- NtAlpcDeletePortSection | 0xedd43314L
- NtAlpcDeleteResourceReserve | 0xb68d2cbeL
- NtAlpcDeleteSectionView | 0x37c1704aL
- NtAlpcDeleteSecurityContext | 0x9ae2aa97L
- NtAlpcDisconnectPort | 0x5bb5b9b6L
- NtAlpcImpersonateClientOfPort | 0x8c8cd807L
- NtAlpcOpenSenderProcess | 0x104f0df9L
- NtAlpcOpenSenderThread | 0x10e1cf52L
- NtAlpcQueryInformation | 0xa28819c3L
- NtAlpcQueryInformationMessage | 0xf8b629c8L
- NtAlpcRevokeSecurityContext | 0x1554bf70L
- NtAlpcSendWaitReceivePort | 0xa4a8a58eL
- NtAlpcSetInformation | 0x7f9e22d9L
- NtAreMappedFilesTheSame | 0xf1881b90L
- NtAssignProcessToJobObject | 0x1c46df40L
- NtCancelIoFileEx | 0xc97bbf02L
- NtCancelSynchronousIoFile | 0x9edf8010L
- NtCommitComplete | 0xab54ac89L
- NtCommitEnlistment | 0x7110e9d3L
- NtCommitTransaction | 0xe2b88016L
- NtCompactKeys | 0x81f5db8aL
- NtCompareTokens | 0x41b85862L
- NtCompleteConnectPort | 0x72a802fL
- NtCompressKey | 0xa3419b1cL
- NtConnectPort | 0x51da7d56L
- NtCreateDebugObject | 0x4b11f539L
- NtCreateDirectoryObject | 0x3517cf87L
- NtCreateEnlistment | 0x1277585eL
- NtCreateEventPair | 0x7275f3e9L
- NtCreateIoCompletion | 0x2c4c8badL
- NtCreateJobObject | 0x12a14e0dL
- NtCreateJobSet | 0x20900a42L
- NtCreateKeyTransacted | 0x475fc28dL
- NtCreateKeyedEvent | 0xb77ab0cfL
- NtCreateMailslotFile | 0x3ebc0960L
- NtCreateMutant | 0x280632b4L
- NtCreateNamedPipeFile | 0xdf32e02eL
- NtCreatePagingFile | 0xaaa65391L
- NtCreatePort | 0x15ab8300L
- NtCreatePrivateNamespace | 0x531f3143L
- NtCreateProcess | 0x8623ddaL
- NtCreateProfile | 0x863f30cL
- NtCreateProfileEx | 0xb12cef69L
- NtCreateResourceManager | 0x41f0c33eL
- NtCreateSemaphore | 0x6a28d89fL
- NtCreateSymbolicLinkObject | 0xbee5ff42L
- NtCreateThreadEx | 0xcb0c2130L
- NtCreateTimer | 0xcb60e3fcL
- NtCreateToken | 0xcb6425bcL
- NtCreateTransaction | 0xb0ecc001L
- NtCreateTransactionManager | 0x4cdcbbbcL
- NtCreateUserProcess | 0x5f8e4559L
- NtCreateWaitablePort | 0x25b08c89L
- NtCreateWorkerFactory | 0x35e46bedL
- NtDebugActiveProcess | 0x807b00a9L
- NtDebugContinue | 0x9a696173L
- NtDeleteAtom | 0xd911f76bL
- NtDeleteBootEntry | 0x3c22a060L
- NtDeleteDriverEntry | 0xa905dd58L
- NtDeleteFile | 0xd914861aL
- NtDeleteKey | 0xf71037e3L
- NtDeleteObjectAuditAlarm | 0xf591b4b5L
- NtDeletePrivateNamespace | 0x9ea102L
- NtDeleteValueKey | 0x1b63a200L
- NtDisableLastKnownGood | 0x416080e5L
- NtDisplayString | 0xde1f21d4L
- NtDrawText | 0x2d127bda
- NtEnableLastKnownGood | 0x1b92f678L
- NtEnumerateBootEntries | 0x10af9bbbL
- NtEnumerateDriverEntries | 0x2aa43f73L
- NtEnumerateSystemEnvironmentValuesEx | 0xb9f03d34L
- NtEnumerateTransactionObject | 0xe8cf2eaaL
- NtExtendSection | 0xce0ccc84L
- NtFilterToken | 0x8b0e8feeL
- NtFlushInstallUILanguage | 0x57bd5022L
- NtFlushInstructionCache | 0x80183adfL
- NtFlushKey | 0x66220a32
- NtFlushProcessWriteBuffers | 0x713a0560L
- NtFlushVirtualMemory | 0xf6571d09L
- NtFlushWriteBuffer | 0x40f6b26eL
- NtFreeUserPhysicalPages | 0xd6db28f5L
- NtFreezeRegistry | 0xd1b675a1L
- NtFreezeTransactions | 0x896637c1L
- NtGetContextThread | 0x9e0e1a44L
- NtGetCurrentProcessorNumber | 0xfbd50d53L
- NtGetDevicePowerState | 0x326e4705L
- NtGetMUIRegistryInfo | 0xb0377f17L
- NtGetNextProcess | 0x62b37525L
- NtGetNextThread | 0x8f8000feL
- NtGetNlsSectionPtr | 0x59ce419fL
- NtGetNotificationResourceManager | 0xe68dfcd1L
- NtGetPlugPlayEvent | 0x80010ab7L
- NtGetWriteWatch | 0xecc05ec9L
- NtImpersonateAnonymousToken | 0xe79fb9f8L
- NtImpersonateThread | 0x1b20b786L
- NtInitializeNlsFiles | 0x1c0aa3f9L
- NtInitializeRegistry | 0x98bb5fd2L
- NtInitiatePowerAction | 0x74d30849L
- NtIsSystemResumeAutomatic | 0x5b68ff00L
- NtIsUILanguageComitted | 0x2b40dcdeL
- NtListenPort | 0xa17c45dbL
- NtLoadDriver | 0xa37e1ed3L
- NtLoadKey | 0x62258150
- NtLoadKey2 | 0xa6d5ab82
- NtLoadKeyEx | 0x818b1eadL
- NtLockFile | 0xabfbf9f0
- NtLockProductActivationKeys | 0xd5df505fL
- NtLockRegistryKey | 0xcf7b0872L
- NtLockVirtualMemory | 0xb0890090L
- NtMakePermanentObject | 0x22ca85a6L
- NtMakeTemporaryObject | 0x711c129fL
- NtMapCMFModule | 0x6b74ff81L
- NtMapUserPhysicalPages | 0x74e90b31L
- NtModifyBootEntry | 0x98be52f5L
- NtModifyDriverEntry | 0x9b58892dL
- NtNotifyChangeDirectoryFile | 0xfe21e71bL
- NtNotifyChangeKey | 0xef5952efL
- NtNotifyChangeMultipleKeys | 0x4f15860eL
- NtNotifyChangeSession | 0x383d626aL
- NtOpenEnlistment | 0x8a06b21cL
- NtOpenEventPair | 0x28820de7L
- NtOpenIoCompletion | 0xc5194cebL
- NtOpenJobObject | 0xc8ad680bL
- NtOpenKeyEx | 0x167ecfdfL
- NtOpenKeyTransacted | 0xf9c4ab8bL
- NtOpenKeyTransactedEx | 0x7d9dc3a8L
- NtOpenKeyedEvent | 0x2f0a0a8dL
- NtOpenMutant | 0xec225d72L
- NtOpenObjectAuditAlarm | 0xfb97534L
- NtOpenPrivateNamespace | 0x1ac66181L
- NtOpenProcessToken | 0x7bd07459L
- NtOpenResourceManager | 0x2133e3bcL
- NtOpenSemaphore | 0x2034f29dL
- NtOpenSession | 0x18f09efdL
- NtOpenSymbolicLinkObject | 0xd1a3700L
- NtOpenThread | 0xfb8a31d1L
- NtOpenTimer | 0x1723aefaL
- NtOpenTransaction | 0x1a67517fL
- NtOpenTransactionManager | 0x9b10f37aL
- NtPlugPlayControl | 0x1b9cd576L
- NtPrePrepareComplete | 0x4393ae96L
- NtPrePrepareEnlistment | 0x1518a320L
- NtPrepareComplete | 0x67a9e36fL
- NtPrepareEnlistment | 0x978f7239L
- NtPrivilegeCheck | 0xc758b06cL
- NtPrivilegeObjectAuditAlarm | 0x16c1cac9L
- NtPrivilegedServiceAuditAlarm | 0x2bfb61a7L
- NtPropagationComplete | 0x947045e4L
- NtPropagationFailed | 0x1b4af730L
- NtPulseEvent | 0x61e38632L
- NtQueryBootEntryOrder | 0xd6c4a4ffL
- NtQueryBootOptions | 0x4d749b7dL
- NtQueryDebugFilterState | 0x60c1a1ebL
- NtQueryDirectoryObject | 0x13d19a89L
- NtQueryDriverEntryOrder | 0x73c779b7L
- NtQueryEaFile | 0xa07bca3L
- NtQueryFullAttributesFile | 0x15863797L
- NtQueryInformationAtom | 0x472369b4L
- NtQueryInformationEnlistment | 0x983e9e6L
- NtQueryInformationJobObject | 0x1a1dce95L
- NtQueryInformationPort | 0x472b8e88L
- NtQueryInformationResourceManager | 0xf9bd89c6L
- NtQueryInformationTransaction | 0x898b8289L
- NtQueryInformationTransactionManager | 0xee065544L
- NtQueryInformationWorkerFactory | 0xb13df075L
- NtQueryInstallUILanguage | 0x7ac44b76L
- NtQueryIntervalProfile | 0xf9da7a73L
- NtQueryIoCompletion | 0xf73865efL
- NtQueryLicenseValue | 0x201e9a1dL
- NtQueryMultipleValueKey | 0x34ceec4fL
- NtQueryMutant | 0x1e340376L
- NtQueryOpenSubKeys | 0x3f096235L
- NtQueryOpenSubKeysEx | 0x26eaccd2L
- NtQueryPortInformationProcess | 0x3cacfc7L
- NtQueryQuotaInformationFile | 0xa04f65edL
- NtQuerySecurityAttributesToken | 0xc9ea70ddL
- NtQuerySecurityObject | 0xfe62d8cL
- NtQuerySemaphore | 0xbfaf0a21L
- NtQuerySymbolicLinkObject | 0xbe510304L
- NtQuerySystemEnvironmentValue | 0xcdeb22d4L
- NtQuerySystemEnvironmentValueEx | 0xf53f3131L
- NtQuerySystemInformationEx | 0xbffb0705L
- NtQueryTimerResolution | 0xa516a4f2L
- NtQueueApcThreadEx | 0x71329995L
- NtRaiseException | 0xf182b62aL
- NtRaiseHardError | 0x92573f84L
- NtReadOnlyEnlistment | 0x225c74a8L
- NtRecoverEnlistment | 0x68e672a0L
- NtRecoverResourceManager | 0x35d496c0L
- NtRecoverTransactionManager | 0x4ddaf7feL
- NtRegisterProtocolAddressInformation | 0xba6bc92aL
- NtRegisterThreadTerminatePort | 0xb7489ef2L
- NtReleaseKeyedEvent | 0xdfb885fcL
- NtReleaseWorkerFactoryWorker | 0xfc75a7f4L
- NtRemoveIoCompletionEx | 0xfdd87384L
- NtRemoveProcessDebug | 0x2629b3bbL
- NtRenameKey | 0xe5ff9168L
- NtRenameTransactionManager | 0xb4cdfe20L
- NtReplaceKey | 0xb121bd0cL
- NtReplacePartitionUnit | 0x6b3e621dL
- NtReplyWaitReplyPort | 0xafca1fb9L
- NtRequestPort | 0xf2742015L
- NtResetEvent | 0x854c796cL
- NtResetWriteWatch | 0xc9fe8b0cL
- NtRestoreKey | 0xff70ca14L
- NtResumeProcess | 0x9f163797L
- NtRollbackComplete | 0x65d7ff4aL
- NtRollbackEnlistment | 0xd9b3f0d4L
- NtRollbackTransaction | 0x5fbc6737L
- NtRollforwardTransactionManager | 0x9cc77936L
- NtSaveKey | 0x5dd180bf
- NtSaveKeyEx | 0x1834b5dcL
- NtSaveMergedKeys | 0x360b8da6L
- NtSecureConnectPort | 0xceb4819dL
- NtSerializeBoot | 0xcee394c3L
- NtSetBootEntryOrder | 0x54153655L
- NtSetBootOptions | 0xa820bc93L
- NtSetContextThread | 0x308be0d0L
- NtSetDebugFilterState | 0x747be0c1L
- NtSetDefaultHardErrorPort | 0x6c177ac6L
- NtSetDefaultLocale | 0x413907c8L
- NtSetDefaultUILanguage | 0x6794347aL
- NtSetDriverEntryOrder | 0x8781b88dL
- NtSetEaFile | 0xe61f57f9L
- NtSetHighEventPair | 0x145c5621L
- NtSetHighWaitLowEventPair | 0x774d2428L
- NtSetInformationDebugObject | 0x8ed03f17L
- NtSetInformationEnlistment | 0x1484de7cL
- NtSetInformationJobObject | 0xebe7886bL
- NtSetInformationKey | 0x7f789662L
- NtSetInformationResourceManager | 0x6d5ccc1cL
- NtSetInformationToken | 0x409fe11aL
- NtSetInformationTransaction | 0xf4ab09dfL
- NtSetInformationTransactionManager | 0xd5a57fdaL
- NtSetInformationWorkerFactory | 0x625ca54bL
- NtSetIntervalProfile | 0x213d3689L
- NtSetIoCompletion | 0xa768a9c5L
- NtSetIoCompletionEx | 0x243a3862L
- NtSetLdtEntries | 0x35e9bcd1L
- NtSetLowEventPair | 0xf5337273L
- NtSetLowWaitHighEventPair | 0x8dbb8cc8L
- NtSetQuotaInformationFile | 0x72191fc3L
- NtSetSecurityObject | 0x8d36bee2L
- NtSetSystemEnvironmentValue | 0x390aaa2aL
- NtSetSystemEnvironmentValueEx | 0xa65de607L
- NtSetSystemInformation | 0x79518d3eL
- NtSetSystemPowerState | 0x397dfdc6L
- NtSetSystemTime | 0x8ac0c7L
- NtSetThreadExecutionState | 0x968ee20L
- NtSetTimerEx | 0x421ccb71L
- NtSetTimerResolution | 0xcc796108L
- NtSetUuidSeed | 0x43bb2cbL
- NtSetVolumeInformationFile | 0xfcbc82d1L
- NtShutdownSystem | 0x7aa5aae8L
- NtShutdownWorkerFactory | 0x7f852e15L
- NtSignalAndWaitForSingleObject | 0x7bdd15cdL
- NtSinglePhaseReject | 0x1d970b77L
- NtStartProfile | 0xf36274a6L
- NtStopProfile | 0xdb02a2deL
- NtSuspendProcess | 0x5409bde8L
- NtSuspendThread | 0x50febd61L
- NtSystemDebugControl | 0xe0fb2214L
- NtTerminateJobObject | 0x4f5364a2L
- NtTestAlert | 0x7915b7dfL
- NtThawRegistry | 0x263c94L
- NtThawTransactions | 0x67764034L
- NtTraceControl | 0x7eb77b17L
- NtTranslateFilePath | 0xbb380522L
- NtUmsThreadYield | 0x7e2c5c8bL
- NtUnloadDriver | 0x13b0a3d6L
- NtUnloadKey | 0x179f6d33L
- NtUnloadKey2 | 0xb8d13c5L
- NtUnloadKeyEx | 0x7d2f8f50L
- NtUnlockFile | 0x10b36233L
- NtUnlockVirtualMemory | 0xacd96433L
- NtVdmControl | 0x556e7e2fL
- NtWaitForDebugEvent | 0x3f635bacL
- NtWaitForKeyedEvent | 0xbef42dd7L
- NtWaitForWorkViaWorkerFactory | 0xc4374898L
- NtWaitHighEventPair | 0xb87246aaL
- NtWaitLowEventPair | 0xac98f5dcL
- NtWorkerFactoryWorkerReady | 0xc6bb7708L
- NtWow64CsrClientConnectToServer | 0xe5562ff9L
- NtWow64CsrIdentifyAlertableThread | 0xda9e7ed6L
- NtWow64CsrClientCallServer | 0x92175c68L
- NtWow64CsrAllocateCaptureBuffer | 0x85c115e9L
- NtWow64CsrFreeCaptureBuffer | 0xcacc0b06L
- NtWow64CsrAllocateMessagePointer | 0xaf1eb481L
- NtWow64CsrCaptureMessageBuffer | 0xf55731c9L
- NtWow64CsrCaptureMessageString | 0x1cf36e66L
- NtWow64CsrGetProcessId | 0xcd425e62L
- NtWow64CsrVerifyRegion | 0xca98b60fL
- NtWow64DebuggerCall | 0x1266c76fL
- NtWow64GetCurrentProcessorNumberEx | 0x658536b7L
- NtWow64GetNativeSystemInformation | 0x33495360L
- NtWow64InterlockedPopEntrySList | 0x3ec25e72L
- NtWow64QueryInformationProcess64 | 0x1156a593L
- NtWow64ReadVirtualMemory64 | 0x67f0d714L
- NtWow64WriteVirtualMemory64 | 0x770d0c63L
- NtWow64QueryVirtualMemory64 | 0xd6cbd1eeL
- NtWow64CallFunction64 | 0x1fb0eb1aL
- RtlDeactivateActivationContextUnsafeFa | 0x8c886871L
- RtlActivateActivationContextUnsafeFast | 0x9180bd8fL
- RtlLeaveCriticalSection | 0x682e97e4L
- RtlEnterCriticalSection | 0x94a95e55L
- RtlSetLastWin32Error | 0x98920d14L
- memcpy | 0xd827590
- memset | 0xd82b830
- RtlFreeHeap | 0x70ba71d7L
- RtlAllocateHeap | 0xc0b381daL
- RtlFreeUnicodeString | 0x9c1d3997L
- RtlInitString | 0x11be8782L
- RtlInitAnsiString | 0xffa3b90dL
- RtlInitUnicodeString | 0x29b75f89L
- RtlMultiByteToUnicodeN | 0x4814178eL
- RtlDeleteBoundaryDescriptor | 0xf9f3e4edL
- RtlAnsiStringToUnicodeString | 0xaadebf7aL
- RtlEqualUnicodeString | 0x7dd2af8dL
- RtlUpcaseUnicodeChar | 0xc1caadfdL
- bsearch | 0x8f26ed5d
- RtlFindActivationContextSectionString | 0xa24cb13bL
- RtlHashUnicodeString | 0x91f22719L
- RtlDosApplyFileIsolationRedirection_Us | 0xea3793f4L
- RtlImageNtHeaderEx | 0x3d84b642L
- RtlImageDirectoryEntryToData | 0x9fce97feL
- RtlAddRefActivationContext | 0xbb0eb8b4L
- _wcsnicmp | 0xd7ecfc68
- RtlInitAnsiStringEx | 0x777639aaL
- _aulldvrm | 0xe3623ccb
- RtlAnsiCharToUnicodeChar | 0x853aace8L
- RtlFindCharInUnicodeString | 0xbf26590bL
- RtlValidateUnicodeString | 0x881ea09fL
- LdrGetDllHandle | 0x5b10e5afL
- LdrGetDllHandleEx | 0x62e116ccL
- LdrGetProcedureAddress | 0x2e5a99f6L
- LdrGetProcedureAddressEx | 0x2f68f8d3L
- wcsstr | 0x24b569ab
- memcmp | 0xd827524
- _snwprintf | 0x63a85b4f
- wcscmp | 0x24b524b2
- RtlTryEnterCriticalSection | 0xdafbe4f4L
- RtlAcquireSRWLockShared | 0xc6539abdL
- RtlReleaseSRWLockShared | 0x2433efb4L
- NtdllDefWindowProc_W | 0x58790f4L
- RtlInitializeCriticalSectionAndSpinCou | 0xe168a05dL
- RtlDllShutdownInProgress | 0x62b6893bL
- ExpInterlockedPopEntrySListResume | 0x61e81d07L
- ExpInterlockedPopEntrySListFault | 0xbc4ac032L
- ExpInterlockedPopEntrySListEnd | 0xfff012adL
- RtlInterlockedPushListSList | 0x9856fd76L
- RtlFirstEntrySList | 0xa34a6c60L
- RtlInterlockedCompareExchange64 | 0xd0ff211fL
- RtlInterlockedFlushSList | 0x3f01583cL
- RtlReleaseSRWLockExclusive | 0x113478f5L
- RtlInitializeBitMap | 0x46e6c4a6L
- RtlAcquireSRWLockExclusive | 0xd0bd335eL
- RtlGetCurrentProcessorNumberEx | 0xbc11efc0L
- RtlInitializeCriticalSection | 0x91692e09L
- RtlSizeHeap | 0xec4273b0L
- _allshl | 0x7ec01464
- RtlImageNtHeader | 0xc63a2fa5L
- RtlDeleteCriticalSection | 0x89164ccaL
- RtlQueryDepthSList | 0x754271b1L
- RtlInterlockedPushEntrySList | 0x78bae6ecL
- RtlInterlockedPopEntrySList | 0xb3258c1bL
- RtlInitializeCriticalSectionEx | 0x906cdda6L
- RtlNtStatusToDosError | 0x35abf270L
- RtlNtStatusToDosErrorNoTeb | 0x3f6c088L
- RtlUnicodeToMultiByteN | 0xfe4ae70eL
- RtlUnicodeStringToAnsiString | 0x2fa17f9aL
- LdrLockLoaderLock | 0x773c3a30L
- LdrUnlockLoaderLock | 0xa53238b3L
- RtlInitUnicodeStringEx | 0x750d6f26L
- RtlGetNtGlobalFlags | 0x83fc49f7L
- RtlRunOnceExecuteOnce | 0x5b3689e9L
- RtlRunOnceBeginInitialize | 0xda345208L
- wcsrchr | 0xbb61c981
- wcschr | 0x24b5240f
- RtlAcquirePebLock | 0xf5b565c1L
- RtlReleasePebLock | 0x8d530d78L
- wcsncmp | 0xbb5f98a0
- RtlGetCurrentTransaction | 0xd4dc5f20L
- RtlSetCurrentTransaction | 0xa1781d2cL
- RtlpCreateProcessRegistryInfo | 0x3acade3fL
- RtlUnlockHeap | 0xaab836e1L
- RtlLockHeap | 0xf18fa9eL
- RtlIsValidHandle | 0x6326adcfL
- RtlAllocateHandle | 0xbb59fa88L
- RtlFreeHandle | 0x88dcddc5L
- RtlCompareUnicodeStrings | 0x5d844acfL
- RtlCreateUnicodeStringFromAsciiz | 0x47432700L
- RtlRunOnceInitialize | 0x4dab2d83L
- RtlCompareUnicodeString | 0x86b66edcL
- RtlAppendUnicodeStringToString | 0xd83e67c7L
- RtlCopyUnicodeString | 0x640659d0L
- RtlAppendUnicodeToString | 0x2241130L
- wcscpy_s | 0x2692f150
- RtlGetVersion | 0x3ca3aa1dL
- RtlGetNtProductType | 0x16c3b07cL
- RtlQueryPerformanceFrequency | 0x80c802d1L
- _aullshr | 0x6bbd669f
- RtlQueryPerformanceCounter | 0x58e53adfL
- EtwEventEnabled | 0x7e9600e2L
- _allshr | 0x7ec0146a
- RtlIntegerToChar | 0x7a8ae106L
- RtlIntegerToUnicodeString | 0xf4b722c6L
- RtlpUnWaitCriticalSection | 0xd2b83c5fL
- memmove | 0xbdd69f1b
- RtlValidSid | 0x28e54487L
- RtlCopySid | 0x25d264d2
- RtlLengthSid | 0x2f9699L
- _wcsicmp | 0xdfbe86da
- RtlLengthRequiredSid | 0x3a91205aL
- RtlFreeSid | 0x12ee8fd9
- RtlAllocateAndInitializeSid | 0x35f62ce1L
- RtlInitializeSListHead | 0x14f0b70aL
- RtlEqualSid | 0x5c9bfa4fL
- RtlSetCriticalSectionSpinCount | 0x550823a6L
- TpIsTimerSet | 0x59d988d2L
- RtlQueryEnvironmentVariable | 0x1920eec8L
- RtlQueryEnvironmentVariable_U | 0xe517cd5cL
- RtlProcessFlsData | 0xb2476d35L
- RtlIsCurrentThreadAttachExempt | 0x11c6b656L
- TpCheckTerminateWorker | 0x757edbaaL
- strchr | 0x1c9395bb
- RtlDecodePointer | 0x2a58243cL
- LdrInitializeThunk | 0x82c54123L
- RtlInitializeExceptionChain | 0x90958e9bL
- RtlAllocateActivationContextStack | 0xa9b3c849L
- RtlGetCurrentPeb | 0x1fad4fd1L
- RtlRegisterThreadWithCsrss | 0xda7f82feL
- RtlDetermineDosPathNameType_U | 0xafc6205eL
- RtlReleaseRelativeName | 0xe8d352f5L
- RtlDosPathNameToRelativeNtPathName_U_W | 0xc023df04L
- RtlIsDosDeviceName_U | 0x6d87f2feL
- SbSelectProcedure | 0x2f76d903L
- RtlGetFullPathName_UstrEx | 0x58b95702L
- RtlExpandEnvironmentStrings | 0x14fc1896L
- RtlGetFullPathName_UEx | 0x411e7a9L
- _chkstk | 0x832178cc
- RtlDecodeSystemPointer | 0x4d258c81L
- RtlConvertSidToUnicodeString | 0xbf34cf19L
- RtlFormatCurrentUserKeyPath | 0xca8698L
- RtlQueryInformationActivationContext | 0xb0f9c56aL
- RtlReleaseActivationContext | 0xa0d5436fL
- RtlGetActiveActivationContext | 0x1b773d2aL
- LdrEnumerateLoadedModules | 0xd48047efL
- RtlRunOnceComplete | 0xf939ab8aL
- LdrLoadDll | 0x307db23
- _stricmp | 0xd36b2e06
- LdrpResGetMappingSize | 0xcdd6f068L
- LdrpResGetResourceDirectory | 0xf76098deL
- LdrResSearchResource | 0x913b90fL
- LdrResFindResourceDirectory | 0xda31e0fL
- RtlEncodeSystemPointer | 0x5cc725ebL
- RtlFindClearBits | 0xbd96cd31L
- RtlFindClearBitsAndSet | 0xd4404ab0L
- RtlSetBits | 0xde4d32d5
- RtlFlsAlloc | 0xc10da927L
- EtwNotificationRegister | 0x50523021L
- EtwEventRegister | 0xaa63801cL
- EtwRegisterTraceGuidsW | 0xef64877cL
- RtlInitializeGenericTable | 0x1183728eL
- LdrAddRefDll | 0x7b814ca9L
- RtlPcToFileHeader | 0x9fd8f4d6L
- RtlRandomEx | 0x7c3439f5L
- RtlCreateHeap | 0xafaac189L
- _aullrem | 0x6bbd61f6
- LdrDisableThreadCalloutsForDll | 0xbe0586ddL
- RtlSubAuthoritySid | 0xf7a9564aL
- RtlInitializeSid | 0x98176969L
- RtlEncodePointer | 0x32457626L
- LdrUnloadDll | 0x7afa7706L
- RtlDosPathNameToRelativeNtPathName_U | 0xda905eeeL
- RtlDosPathNameToNtPathName_U_WithStatu | 0x44f3beL
- LdrAccessResource | 0x180e29e1L
- LdrFindResource_U | 0x48904244L
- RtlReAllocateHeap | 0xbbc97911L
- RtlGetIntegerAtom | 0x87a48736L
- RtlQueryInformationActiveActivationCon | 0x528d9221L
- RtlIsThreadWithinLoaderCallout | 0x6209a2e9L
- TpCaptureCaller | 0xc69c0b0L
- RtlIsValidIndexHandle | 0x32b0b707L
- NtdllDefWindowProc_A | 0x58790deL
- RtlLargeIntegerAdd | 0x7ff06939L
- RtlEnlargedIntegerMultiply | 0x670b8387L
- RtlEnlargedUnsignedMultiply | 0x88b9b056L
- RtlEnlargedUnsignedDivide | 0xc3842a4bL
- RtlExtendedLargeIntegerDivide | 0xc54b6a76L
- RtlExtendedMagicDivide | 0x17f9d93eL
- RtlExtendedIntegerMultiply | 0xd1efbf6L
- RtlLargeIntegerShiftLeft | 0xd389d7f9L
- RtlLargeIntegerShiftRight | 0x45339eccL
- RtlLargeIntegerArithmeticShift | 0xf0648cb8L
- RtlLargeIntegerNegate | 0x120b8464L
- RtlLargeIntegerSubtract | 0x25980bb8L
- RtlConvertLongToLargeInteger | 0xc350e5a4L
- RtlConvertUlongToLargeInteger | 0x1c126c59L
- _allmul | 0x7ebffc8b
- RtlPrefixUnicodeString | 0x5502cfe3L
- RtlFirstFreeAce | 0x9cef172aL
- RtlValidAcl | 0x28e4f737L
- RtlCreateSecurityDescriptor | 0xb7687da2L
- RtlSetDaclSecurityDescriptor | 0x867409ceL
- RtlCreateAcl | 0x245a63fbL
- RtlAddAccessAllowedAce | 0xdcb226e3L
- RtlSetOwnerSecurityDescriptor | 0x56a330a5L
- RtlSetGroupSecurityDescriptor | 0x8963d987L
- RtlLookupAtomInAtomTable | 0x510cc252L
- LdrRscIsTypeExist | 0x753660faL
- RtlAddressInSectionTable | 0x12173571L
- RtlImageRvaToSection | 0xf6dc9a9bL
- LdrLoadAlternateResourceModuleEx | 0xff2c0512L
- RtlLoadString | 0x60a838ceL
- TpSetTimer | 0x8c6acfd6
- RtlTryAcquireSRWLockExclusive | 0x97a1299dL
- TpCallbackIndependent | 0x1a8e9c84L
- RtlIsCriticalSectionLockedByThread | 0xdba8c1b8L
- TpDisassociateCallback | 0x62fb2932L
- RtlDosSearchPath_Ustr | 0x7825fedL
- RtlCaptureContext | 0x7733eed0L
- RtlUnwind | 0x97aee78c
- RtlRaiseException | 0x6a652c7aL
- RtlRaiseStatus | 0xf5c4960fL
- TpReleasePool | 0xcb5cfd84L
- LdrResGetRCConfig | 0xa719717cL
- TpAllocIoCompletion | 0xbb8a5046L
- RtlDuplicateUnicodeString | 0x936d0d90L
- RtlStringFromGUID | 0x1e5aabcbL
- RtlDowncaseUnicodeString | 0x9094c89L
- wcscat_s | 0x268aa25c
- toupper | 0xf09449f4
- RtlUpcaseUnicodeToMultiByteN | 0x9c7d25efL
- RtlSetCurrentDirectory_U | 0xf2c73b2fL
- RtlInsertElementGenericTable | 0x75917bfbL
- RtlInsertElementGenericTableFull | 0x99bd640eL
- RtlAcquirePrivilege | 0xb4664da8L
- RtlReleasePrivilege | 0xaa0cbf1fL
- RtlDestroyHeap | 0x5e4d39ffL
- RtlSetSaclSecurityDescriptor | 0x3e8c693dL
- RtlAddAccessAllowedAceEx | 0xd1d77500L
- RtlGetSaclSecurityDescriptor | 0x2d688531L
- RtlSplay | 0xc375a20
- RtlLookupElementGenericTable | 0x9a8166a0L
- RtlLookupElementGenericTableFull | 0x343c1933L
- RtlDeleteElementGenericTable | 0x5399519L
- RtlRealSuccessor | 0xcda4c15L
- RtlDelete | 0x6f5e3fea
- RtlIsTextUnicode | 0xdbc65bbfL
- RtlSetThreadErrorMode | 0x7452472aL
- RtlFormatMessageEx | 0x1d481422L
- RtlFindMessage | 0x36d1f8bdL
- RtlGetProductInfo | 0x3bd53144L
- wcstol | 0x24b56d41
- RtlSubtreePredecessor | 0x73a74990L
- RtlGUIDFromString | 0x1215e90bL
- RtlIpv4StringToAddressW | 0xbb2e3b1L
- RtlIpv6StringToAddressExW | 0x25af23b0L
- RtlIpv6StringToAddressW | 0x3166a7b3L
- RtlIpv4AddressToStringExW | 0x35ffaaeeL
- RtlIpv4AddressToStringW | 0xc0d04771L
- RtlDestroyProcessParameters | 0xe916bc14L
- RtlQueryElevationFlags | 0x111999e1L
- RtlIsGenericTableEmpty | 0xac697027L
- RtlCreateProcessParametersEx | 0x19132cbbL
- LdrQueryImageFileExecutionOptions | 0xf737ade0L
- LdrQueryImageFileExecutionOptionsEx | 0xa3daaf3dL
- RtlAcquireResourceShared | 0x926c4be0L
- isdigit | 0xa9f0b332
- __isascii | 0x7eb8b088
- RtlIpv4StringToAddressA | 0xbb2e39bL
- RtlTimeToSecondsSince1970 | 0xcd0d8a7bL
- RtlIpv4StringToAddressExW | 0xc3fa572eL
- isxdigit | 0x1654daca
- RtlIpv6StringToAddressA | 0x3166a79dL
- strtol | 0x1c93deed
- RtlCompactHeap | 0x5c71cb9cL
- RtlValidateHeap | 0x3b058fdfL
- RtlIpv6AddressToStringW | 0xe6840b73L
- RtlIpv6AddressToStringExW | 0x97b47770L
- _itoa | 0xef1a7f1
- atoi | 0x7c943c72
- atol | 0x7c943c75
- RtlCreateEnvironmentEx | 0x17dd98ddL
- RtlSetThreadPreferredUILanguages | 0x488c346fL
- LdrResFindResource | 0xa1ce499aL
- wcsncat_s | 0x11a1c9ca
- RtlCopyString | 0x64ab93a9L
- RtlNtPathNameToDosPathName | 0x4fc1a3feL
- RtlDestroyEnvironment | 0xa2b74736L
- _vsnwprintf | 0xf3be9105L
- RtlInitializeHandleTable | 0xf70f94bdL
- RtlLcidToLocaleName | 0xe6005ec7L
- RtlGetThreadPreferredUILanguages | 0x3f3d2a63L
- RtlLCIDToCultureName | 0x2c67263bL
- TpSetWait | 0x70ddf58a
- RtlSetEnvironmentVar | 0xec19a061L
- RtlSetEnvironmentVariable | 0x8704f1deL
- RtlSetUnhandledExceptionFilter | 0x42a5f52bL
- RtlCreateTagHeap | 0x8448d5e5L
- RtlGetLocaleFileMappingAddress | 0x725c7bf9L
- LdrSetDllManifestProber | 0x5fbee590L
- CsrClientConnectToServer | 0x293d7d90L
- RtlSetThreadPoolStartFunc | 0x5e41c12fL
- RtlGetNtVersionNumbers | 0x4803847bL
- RtlNormalizeProcessParams | 0x2ec5f80bL
- RtlSetUserCallbackExceptionFilter | 0xed76ecc4L
- RtlReleaseMemoryStream | 0xfd8a103dL
- RtlResetRtlTranslations | 0x414366eeL
- RtlInitNlsTables | 0x5de15833L
- RtlInitCodePageTable | 0x150f504bL
- RtlUniform | 0x8c8ce357
- TpAllocPool | 0x357ebe2eL
- RtlInitializeNtUserPfn | 0xb44645ceL
- RtlTimeToSecondsSince1980 | 0xcd0d8a9cL
- RtlQueryActivationContextApplicationSe | 0xd7aad3f0L
- RtlpGetNameFromLangInfoNode | 0xb298ed10L
- RtlpMuiRegCreateRegistryInfo | 0x13bbe0a9L
- RtlpLoadUserUIByPolicy | 0xab8e4f2fL
- RtlpMuiRegFreeRegistryInfo | 0xbb221cb7L
- RtlpInitializeLangRegistryInfo | 0x6f261720L
- RtlpMuiRegLoadRegistryInfo | 0xde2ac6b5L
- TpSetPoolStackInformation | 0xc580d36bL
- TpDisablePoolCallbackChecks | 0xdd6fd7d5L
- RtlpGetSystemDefaultUILanguage | 0x77af8113L
- RtlLocaleNameToLcid | 0x7d670747L
- RtlGetParentLocaleName | 0x83a7e932L
- RtlDoesFileExists_U | 0x4112dd56L
- RtlCreateAtomTable | 0x5a694444L
- RtlpApplyLengthFunction | 0xfecdf195L
- RtlGetLengthWithoutLastFullDosOrNtPath | 0x14b6c66aL
- RtlCreateActivationContext | 0x46f498e2L
- RtlReportSilentProcessExit | 0xa262e05bL
- RtlExitUserProcess | 0x3aa1f0efL
- LdrShutdownProcess | 0xf413b8c2L
- RtlDetectHeapLeaks | 0xef906edeL
- EtwNotificationUnregister | 0xa84c69a4L
- EtwEventUnregister | 0xcbf1a45fL
- EtwUnregisterTraceGuids | 0x1ee76a08L
- RtlClearBits | 0x9a98b0d0L
- RtlAreBitsSet | 0x3cc63ccdL
- RtlNumberGenericTableElements | 0x42f8122L
- RtlEnumerateGenericTableWithoutSplayin | 0xa2332a56L
- RtlDeleteResource | 0x2718acd2L
- RtlFlsFree | 0x5dc76be
- RtlDestroyHandleTable | 0xd6093655L
- WinSqmIsOptedIn | 0x1be1daf3L
- WinSqmIsOptedInEx | 0x9bc46d10L
- TpAllocTimer | 0xe59b92b5L
- RtlInitializeResource | 0x2bfc06f1L
- RtlReleaseResource | 0x3a5cfc00L
- RtlAcquireResourceExclusive | 0xa6f775a1L
- RtlCultureNameToLCID | 0x2eabcddbL
- RtlMultiAppendUnicodeStringBuffer | 0x10612d12L
- RtlGetDaclSecurityDescriptor | 0x755025c2L
- RtlRetrieveNtUserPfn | 0xf5c03702L
- RtlOpenCurrentUser | 0x37a1982bL
- RtlSubAuthorityCountSid | 0xaafc3813L
- _aulldiv | 0x6bbd26f5
- RtlGetFullPathName_U | 0x12ddb4cL
- RtlUpcaseUnicodeString | 0x85630c16L
- LdrFindResourceEx_U | 0xad9c42e1L
- wcspbrk | 0xbb60adc1
- iswctype | 0x13f3ef3d
- iswalpha | 0x13cb33de
- RtlCreateUnicodeString | 0xbb2f5189L
- RtlpQueryDefaultUILanguage | 0x437a084L
- _strnicmp | 0x412e8914
- RtlSetLastWin32ErrorAndNtStatusFromNtS | 0x8012fb36L
- RtlUnicodeToMultiByteSize | 0x50c1c0fbL
- RtlExpandEnvironmentStrings_U | 0x4464a2aaL
- RtlUnicodeStringToInteger | 0x56cb9006L
- LdrGetDllHandleByName | 0x8126ac0bL
- RtlGetLongestNtPathLength | 0xf087e544L
- RtlGetAce | 0x76618180
- RtlDosPathNameToNtPathName_U | 0xbfe457b2L
- RtlSetUserValueHeap | 0xe3b0103dL
- LdrShutdownThread | 0x93e7c4fbL
- RtlFreeThreadActivationContextStack | 0x6ce8dd3eL
- RtlFreeActivationContextStack | 0x6c878586L
- RtlExitUserThread | 0x8e492b88L
- RtlCleanUpTEBLangLists | 0xedb46febL
- RtlGetLastWin32Error | 0xb65b7508L
- LdrFindEntryForAddress | 0x604df667L
- LdrGetDllHandleByMapping | 0xc9011656L
- LdrAddLoadAsDataTable | 0xce9ccf66L
- RtlUnicodeToOemN | 0x3ee18d90L
- LdrUnloadAlternateResourceModule | 0xb83fc5d8L
- LdrUnloadAlternateResourceModuleEx | 0xc748a535L
- LdrRemoveLoadAsDataTable | 0xe3159d2bL
- RtlTimeToTimeFields | 0xd34c5bafL
- RtlTimeFieldsToTime | 0xb0643b6fL
- EtwEventWrite | 0x24a8d022L
- WinSqmEventEnabled | 0xca42a9b1L
- WinSqmEventWrite | 0x9826f931L
- WinSqmIncrementDWORD | 0x43815b29L
- RtlGetCurrentDirectory_U | 0x262b7d23L
- RtlSetHeapInformation | 0xd192ef67L
- iswdigit | 0x13ffb229
- EtwpNotificationThread | 0x7a001ec4L
- EtwDeliverDataBlock | 0x7322bc25L
- EtwGetTraceLoggerHandle | 0xcfb51b90L
- EtwGetTraceEnableLevel | 0x37a0dc43L
- EtwGetTraceEnableFlags | 0x3737c6d8L
- RtlEqualString | 0x64cd9406L
- RtlUpperChar | 0xd475bae1L
- swprintf_s | 0xcd7754f4
- vswprintf_s | 0xfbeec98aL
- RtlpEnsureBufferSize | 0xa899fbceL
- RtlUTF8ToUnicodeN | 0x888ccb76L
- RtlUnicodeToUTF8N | 0x1b75d7b6L
- strncmp | 0xaf0c3fcc
- LdrQueryImageFileKeyOption | 0x2215caa2L
- LdrOpenImageFileOptionsKey | 0xa74371L
- RtlDeleteAce | 0xbdab5153L
- RtlAddVectoredContinueHandler | 0x7f7a9a1fL
- RtlCompareMemory | 0xa0f57717L
- RtlCompareMemoryUlong | 0x53ddbffcL
- RtlFillMemory | 0xd133097L
- RtlFillMemoryUlonglong | 0x9198e72cL
- RtlFillMemoryUlong | 0x8f0b697cL
- RtlZeroMemory | 0xfc6e76b0L
- RtlMoveMemory | 0x4027607L
- RtlFindActivationContextSectionGuid | 0xed512fadL
- RtlWakeAllConditionVariable | 0x64a74d05L
- NtdllDialogWndProc_W | 0xe0602446L
- RtlGetControlSecurityDescriptor | 0x21c76f6fL
- RtlWow64EnableFsRedirectionEx | 0x15a56313L
- RtlTryAcquirePebLock | 0x750b2120L
- RtlCheckForOrphanedCriticalSections | 0xb95d86c0L
- RtlDeactivateActivationContext | 0xb8f307e8L
- RtlActivateActivationContext | 0xfeec34bfL
- RtlActivateActivationContextEx | 0x6acc69dcL
- RtlCaptureStackBackTrace | 0xd43e9c41L
- RtlWalkFrameChain | 0xbbda3e34L
- RtlAddAtomToAtomTable | 0x226ec60dL
- RtlDeleteAtomFromAtomTable | 0xd3dd4408L
- RtlMakeSelfRelativeSD | 0xb768ec72L
- RtlAbsoluteToSelfRelativeSD | 0x729b74f6L
- RtlNormalizeString | 0xb73b54ffL
- strcat_s | 0x8fcc2f08
- strcpy_s | 0x8fd47dfc
- TpAllocAlpcCompletionEx | 0x712b112bL
- RtlGetOwnerSecurityDescriptor | 0x2102cb19L
- RtlGetGroupSecurityDescriptor | 0x53c373fbL
- RtlLengthSecurityDescriptor | 0xd3d04d30L
- RtlValidSecurityDescriptor | 0x7e7915eL
- RtlTestBit | 0x2b501ab6
- TpSimpleTryPost | 0x24a483d8L
- RtlQueryInformationAcl | 0x53a0c283L
- RtlLockMemoryZone | 0xcfdb7a15L
- RtlLockModuleSection | 0xb773dd9bL
- RtlUnlockMemoryZone | 0x32759c98L
- RtlUnlockModuleSection | 0x5eba953eL
- RtlQueryAtomInAtomTable | 0x5981296eL
- isalpha | 0xa9bc34e7
- EtwTraceMessage | 0xb2296129L
- EtwTraceMessageVa | 0xe2065ae0L
- RtlGetUserInfoHeap | 0xfc5ff8a0L
- RtlQueueWorkItem | 0x4699d00eL
- EtwRegisterTraceGuidsA | 0xef648766L
- WinSqmSetDWORD | 0x70237e50L
- TpAllocCleanupGroup | 0xa4b2e229L
- RtlCreateBoundaryDescriptor | 0xeed9896eL
- RtlAddMandatoryAce | 0xde4c3558L
- A_SHAInit | 0xd3fa7d95
- RtlCreateServiceSid | 0xc7b8c55cL
- A_SHAFinal | 0x53113c0b
- A_SHAUpdate | 0xd8af5004L
- RtlAddSIDToBoundaryDescriptor | 0x3b8a94c6L
- RtlCreateMemoryZone | 0xddf8540L
- RtlCreateMemoryBlockLookaside | 0x732a7e8aL
- TpStartAsyncIoOperation | 0x6e73d63eL
- RtlInitializeGenericTableAvl | 0x857533f1L
- RtlInsertElementGenericTableAvl | 0x1bee623eL
- RtlInsertElementGenericTableFullAvl | 0xd37bb571L
- RtlLookupElementGenericTableAvl | 0x4f2886c3L
- RtlLookupElementGenericTableFullAvl | 0xa88e9476L
- RtlOemToUnicodeN | 0x9012bfd0L
- RtlOemStringToUnicodeString | 0x499c4010L
- RtlUnicodeStringToOemString | 0x60a796d0L
- WinSqmAddToStreamEx | 0x1070a4b9L
- RtlDestroyMemoryZone | 0x75d3fe36L
- RtlDestroyMemoryBlockLookaside | 0xf82b2300L
- TpReleaseTimer | 0x3741bccbL
- TpWaitForTimer | 0xdd334fc6L
- TpAllocWork | 0x35829537L
- TpAllocWait | 0x35825889L
- LdrRegisterDllNotification | 0xed7fa36fL
- TpWaitForWait | 0xa99e377aL
- TpReleaseWait | 0xcb6097dfL
- RtlDeleteTimer | 0xd7203d6bL
- TpSetPoolMinThreads | 0xf94b415eL
- TpSetPoolMaxThreads | 0x8ffa0a20L
- RtlCreateTimerQueue | 0xf78fb211L
- RtlCreateTimer | 0xa5de7c4cL
- TpReleaseIoCompletion | 0x1105859cL
- TpReleaseCleanupGroup | 0xfa2e177fL
- RtlEnumerateGenericTableAvl | 0xea6a0c25L
- TpWaitForIoCompletion | 0xadca9037L
- TpCancelAsyncIoOperation | 0x942ca116L
- TpWaitForWork | 0xa99e7428L
- TpReleaseWork | 0xcb60d48dL
- RtlEnumerateGenericTableWithoutSplayin | 0xa2332a56L
- RtlDeleteElementGenericTableAvl | 0x785c4e9cL
- RtlAddAce | 0x6847af29
- TpReleaseAlpcCompletion | 0x4a89f24L
- _ui64tow | 0x4f5c62e6
- RtlClearAllBits | 0xcde82769L
- RtlConvertSharedToExclusive | 0x5f4d78aL
- RtlPrefixString | 0xb2ab091cL
- LdrInitShimEngineDynamic | 0xaa41d4e7L
- TpCallbackMayRunLong | 0x330a0862L
- wcsncpy_s | 0x11aa18be
- RtlFreeUserStack | 0x960c0d6eL
- EtwEventActivityIdControl | 0xa7405132L
- EtwEventWriteTransfer | 0x98547547L
- RtlMapGenericMask | 0x56e52e3eL
- RtlEqualPrefixSid | 0x78db18bdL
- RtlDeleteSecurityObject | 0xfa432119L
- RtlFindAceByType | 0x3e86519eL
- RtlNewSecurityObjectEx | 0x4ba497cdL
- RtlRegisterWait | 0xe4da1c11L
- RtlIdnToAscii | 0xc099afdeL
- RtlCreateUserStack | 0x91bbfc60L
- RtlDeregisterWaitEx | 0x59613077L
- LdrUnregisterDllNotification | 0x2c7ba552L
- RtlGetCurrentProcessorNumber | 0x5c8ef1a3L
- WinSqmSetIfMaxDWORD | 0xb2901d65L
- RtlGetThreadErrorMode | 0x4b48ad9eL
- RtlKnownExceptionFilter | 0xf2991319L
- EtwEventWriteNoRegistration | 0x21e92d7aL
- _ultoa | 0xedfb8089
- _ui64toa | 0x4f5c62d0
- RtlImpersonateSelf | 0xa13434c8L
- RtlImpersonateSelfEx | 0xbf149025L
- EtwProcessPrivateLoggerRequest | 0xa070edf8L
- RtlGetUnloadEventTraceEx | 0x22cb2c48L
- RtlCreateQueryDebugBuffer | 0x21726502L
- RtlAddAccessDeniedAce | 0x59ff7f64L
- MD5Init | 0xcd8baa7f
- MD5Final | 0x7ec80635
- MD5Update | 0x7b3f5f6e
- RtlDestroyQueryDebugBuffer | 0xf5573e78L
- RtlQueryProcessDebugInformation | 0x2d846419L
- RtlQueryHeapInformation | 0xb3f10751L
- RtlWerpReportException | 0x5f3b4220L
- TpReleaseCleanupGroupMembers | 0x3400090aL
- RtlDeleteTimerQueueEx | 0x75dbebedL
- RtlCutoverTimeToSystemTime | 0x514c5ac5L
- RtlQueryRegistryValues | 0xe6b6f616L
- RtlpCheckDynamicTimeZoneInformation | 0x8e350dbL
- _itow_s | 0x91fbd279
- RtlValidRelativeSecurityDescriptor | 0xc986fe9aL
- DbgPrintEx | 0xe65be5c
- strncpy | 0xaf0c4038
- RtlRemoveVectoredExceptionHandler | 0x880c210eL
- RtlGetProcessHeaps | 0x4b192187L
- WinSqmAddToStream | 0x419a145cL
- LdrLoadAlternateResourceModule | 0x391f8a75L
- WinSqmEndSession | 0xc89b0c5fL
- WinSqmStartSession | 0x509fbef6L
- RtlInterlockedClearBitRun | 0x86df27e6L
- EtwSendNotification | 0xd6f74ce6L
- RtlQueryTimeZoneInformation | 0xcc9d4f1eL
- EtwpGetCpuSpeed | 0xbb28d97eL
- #8 | 0x596f00
- RtlAddVectoredExceptionHandler | 0x554bafa9L
- _vscwprintf | 0xccea6b5aL
- RtlNewSecurityObject | 0x3f4e3270L
- RtlSelfRelativeToAbsoluteSD | 0xb375c0b6L
- TpPostWork | 0xc94fc392
- _wtol | 0xef9554a
- RtlSetIoCompletionCallback | 0x16ebcc62L
- _alldiv | 0x7ebfd4c0
- VerSetConditionMask | 0x7df255b1L
- RtlVerifyVersionInfo | 0x8ea9703eL
- _vsnprintf | 0xa99ab3ee
- strncpy_s | 0xa31d3aea
- wcscspn | 0xbb59d4e6
- AlpcGetMessageAttribute | 0x143e523eL
- AlpcInitializeMessageAttribute | 0xab0d1e50L
- AlpcGetHeaderSize | 0xa40bb489L
- RtlMultiByteToUnicodeSize | 0x4c83217bL
- mbstowcs | 0xa0396ff7
- RtlCharToInteger | 0x4599d166L
- DbgPrint | 0xab26693f
- RtlIdentifierAuthoritySid | 0xeb7a5e83L
- _wtoi | 0xef95547
- NtdllDialogWndProc_A | 0xe0602430L
- cos | 0xb8866ca
- _CIcos | 0xea5f3dd5
- log | 0xb888d07
- _CIlog | 0xea5f6412
- pow | 0xb889e1b
- _CIpow | 0xea5f7526
- sin | 0xb88aa0f
- _CIsin | 0xea5f811a
- _CIsqrt | 0x364fc75a
- sqrt | 0x7c9e0eef
- _alldvrm | 0x56baa3f6
- _alloca_probe_16 | 0xdba3248dL
- _alloca_probe_8 | 0xb914757eL
- _allrem | 0x7ec00fc1
- _ftol | 0xef002d9
- _memccpy | 0xe2329bb2
- atan | 0x7c943aa9
- ceil | 0x7c9514a2
- floor | 0xf71e367
- memchr | 0xd827481
- strcpy | 0x1c9396ca
- strcat | 0x1c9394d6
- strcmp | 0x1c93965e
- strcspn | 0xaf067c12
- strlen | 0x1c93bb9d
- strncat | 0xaf0c3e44
- strpbrk | 0xaf0d54ed
- strrchr | 0xaf0e70ad
- strspn | 0x1c93dacf
- strstr | 0x1c93db57
- tan | 0xb88ad48
- RtlUshortByteSwap | 0xeb93362bL
- RtlUlongByteSwap | 0x7278dbabL
- RtlUlonglongByteSwap | 0x2ddc495bL
- RtlFreeOemString | 0x115df0f1L
- NtCurrentTeb | 0x6ccf7265L
- RtlEnableThreadProfiling | 0x94e954c0L
- RtlDisableThreadProfiling | 0xcecab86dL
- RtlQueryThreadProfiling | 0x5b8a212fL
- RtlReadThreadProfilingData | 0x9407ad6fL
- RtlAppendPathElement | 0x3935706L
- RtlGetLengthWithoutTrailingPathSeperat | 0x22c80c48L
- RtlDosSearchPath_U | 0x532587d4L
- DbgUiConnectToDbg | 0x8de9064aL
- DbgUiGetThreadDebugObject | 0x92513cc6L
- DbgUiSetThreadDebugObject | 0x24276952L
- DbgUiWaitStateChange | 0x152306ecL
- DbgUiContinue | 0x44fe2675L
- DbgUiStopDebugging | 0x7a8aae22L
- DbgUiRemoteBreakin | 0x6f0bdb18L
- DbgUiIssueRemoteBreakin | 0xba0770c1L
- DbgUiDebugActiveProcess | 0xb818b532L
- DbgUiConvertStateChangeStructure | 0x93927189L
- RtlPushFrame | 0x163c51c2L
- RtlPopFrame | 0xdbeccc11L
- RtlGetFrame | 0x952a9322L
- LdrHotPatchRoutine | 0xd17143a8L
- RtlGetUnloadEventTrace | 0xd53f6c2bL
- LdrVerifyImageMatchesChecksumEx | 0x4748d834L
- LdrQueryProcessModuleInformation | 0xb5402408L
- LdrSetAppCompatDllRedirectionCallback | 0xc8a5da99L
- LdrQueryModuleServiceTags | 0x3a1d00c3L
- LdrGetFailureData | 0x29d06169L
- LdrVerifyImageMatchesChecksum | 0x10492d17L
- RtlComputePrivatizedDllName_U | 0xa70a0b67L
- CsrSetPriorityClass | 0xe3ebca91L
- RtlInitOutOfProcessMemoryStream | 0x304e303cL
- RtlWriteMemoryStream | 0xb2508a7L
- RtlSeekMemoryStream | 0x8fd522c4L
- RtlCommitMemoryStream | 0x5f223485L
- RtlRevertMemoryStream | 0xfed04df4L
- RtlUnlockMemoryStreamRegion | 0x3ca9740cL
- RtlStatMemoryStream | 0xfe5b0018L
- RtlCreateProcessReflection | 0x9b7ad675L
- RtlIsCriticalSectionLocked | 0x1e0aec85L
- RtlGetCriticalSectionRecursionCount | 0xbd9f1edaL
- RtlpWaitForCriticalSection | 0xde9f8443L
- RtlConvertExclusiveToShared | 0x3c435acaL
- RtlDumpResource | 0xfe597c75L
- RtlUpdateClonedCriticalSection | 0xff8405cfL
- RtlEnableEarlyCriticalSectionEventCrea | 0x8995b058L
- RtlpNotOwnerCriticalSection | 0x3c26aca3L
- RtlQueryCriticalSectionOwner | 0xffcfc858L
- RtlNewSecurityObjectWithMultipleInheri | 0xb94f4db7L
- RtlSetSecurityObject | 0x33b95332L
- RtlSetSecurityObjectEx | 0x75af10fL
- RtlQuerySecurityObject | 0x615f15dcL
- RtlNewInstanceSecurityObject | 0x24e477e5L
- RtlNewSecurityGrantedAccess | 0x1147edd0L
- RtlCopySecurityDescriptor | 0xcd82ca49L
- RtlCreateAndSetSD | 0x66fdbca1L
- RtlCreateUserSecurityObject | 0xcda817b9L
- RtlConvertToAutoInheritSecurityObject | 0x95b2a836L
- RtlDefaultNpAcl | 0x20cdc72aL
- RtlConvertUiListToApiList | 0x84ec9ccbL
- RtlpQueryProcessDebugInformationRemote | 0x206ae575L
- RtlCommitDebugInfo | 0xa184def3L
- RtlDeCommitDebugInfo | 0xc01f42bcL
- RtlSetProcessDebugInformation | 0x2540022fL
- RtlQueryProcessBackTraceInformation | 0x9e21c852L
- RtlQueryProcessLockInformation | 0x4b88de9bL
- RtlQueryProcessHeapInformation | 0xc3eba730L
- LdrWx86FormatVirtualImage | 0xca0cf7d7L
- RtlRemoveVectoredContinueHandler | 0xaf8ff2e4L
- RtlApplicationVerifierStop | 0x1ea51aedL
- RtlQueueApcWow64Thread | 0xc9835f0fL
- RtlWow64CallFunction64 | 0x7129d36aL
- RtlWow64EnableFsRedirection | 0xb9f77436L
- RtlWakeConditionVariable | 0x5afdf16cL
- RtlSleepConditionVariableCS | 0x1b4786b3L
- RtlSleepConditionVariableSRW | 0x8438a159L
- RtlTryAcquireSRWLockShared | 0xca6215cL
- RtlUpdateClonedSRWLock | 0x16a414d4L
- RtlAcquireReleaseSRWLockExclusive | 0x3ac89c1fL
- RtlReportException | 0x83990a2L
- RtlReportSqmEscalation | 0xa867f467L
- ShipAssert | 0xc24d94b
- ShipAssertMsgW | 0xda62b6c9L
- ShipAssertGetBufferInfo | 0x3e09e751L
- WerReportSQMEvent | 0xb127fe22L
- WinSqmSetEscalationInfo | 0xbb77b47fL
- WinSqmCommonDatapointSetDWORD | 0x72fbe47dL
- WinSqmCommonDatapointSetDWORD64 | 0x2186fee7L
- WinSqmCommonDatapointDelete | 0x1c1a0fa4L
- WinSqmCheckEscalationSetDWORD | 0xfc9073f1L
- WinSqmCheckEscalationSetDWORD64 | 0x627d3b5bL
- WinSqmCheckEscalationSetString | 0xb3bcb308L
- WinSqmCheckEscalationAddToStreamEx | 0x37cd46faL
- WinSqmGetEscalationRuleStatus | 0x9ea0aa03L
- WinSqmGetInstrumentationProperty | 0x8bb8273dL
- WinSqmCommonDatapointSetString | 0xf7963514L
- WinSqmCommonDatapointSetStreamEx | 0x35a86a06L
- WinSqmSetString | 0x99b10947L
- WinSqmSetDWORD64 | 0x6fc597aL
- WinSqmAddToAverageDWORD | 0x35e74e8bL
- WinSqmSetIfMinDWORD | 0x30e6d23L
- #6 | 0x596efe
- #5 | 0x596efd
- #3 | 0x596efb
- #4 | 0x596efc
- #7 | 0x596eff
- #1 | 0x596ef9
- #2 | 0x596efa
- RtlZombifyActivationContext | 0x699b756eL
- RtlIsActivationContextActive | 0x8dbbf2e6L
- RtlComputeImportTableHash | 0xea0521dbL
- CsrIdentifyAlertableThread | 0xb58f8e2dL
- CsrClientCallServer | 0x1e6b0f9fL
- CsrAllocateCaptureBuffer | 0xc9a86380L
- CsrFreeCaptureBuffer | 0xe196251dL
- CsrAllocateMessagePointer | 0x6fefb4f8L
- CsrCaptureMessageBuffer | 0x1e2fa880L
- CsrCaptureMessageString | 0x45cbe51dL
- CsrCaptureTimeout | 0xb26c0a68L
- CsrGetProcessId | 0x3be70e19L
- CsrCaptureMessageMultiUnicodeStringsIn | 0x53ea8f9L
- CsrVerifyRegion | 0x393d65c6L
- AlpcGetMessageFromCompletionList | 0x864b7874L
- AlpcFreeCompletionListMessage | 0xa8d25402L
- AlpcGetCompletionListMessageAttributes | 0x5b410d27L
- AlpcGetCompletionListLastMessageInform | 0x7b8412bfL
- AlpcGetOutstandingCompletionListMessag | 0x52ccf8bL
- AlpcRegisterCompletionListWorkerThread | 0xca3b2972L
- AlpcUnregisterCompletionListWorkerThre | 0xbd89610L
- AlpcRegisterCompletionList | 0xae67a880L
- AlpcUnregisterCompletionList | 0xef6c4983L
- AlpcRundownCompletionList | 0xe6a34a28L
- AlpcAdjustCompletionListConcurrencyCou | 0x3a447b8L
- AlpcMaxAllowedMessageLength | 0x24b1755aL
- DbgPrompt | 0xff6d714
- DbgQueryDebugFilterState | 0x522ebf36L
- DbgSetDebugFilterState | 0xd0db2f4cL
- DbgPrintReturnControlC | 0x35e7be83L
- vDbgPrintEx | 0x3cdd32f2L
- vDbgPrintExWithPrefix | 0x1f2a975cL
- LdrGetFileNameFromLoadAsDataTable | 0x2533e0f2L
- LdrEnumResources | 0xc6d21877L
- LdrFlushAlternateResourceModules | 0x32521baaL
- LdrSetMUICacheType | 0x9c3ed34L
- LdrFindResourceDirectory_U | 0xe7adb0b9L
- RtlDeNormalizeProcessParams | 0x91231fb4L
- RtlWow64LogMessageInEventLogger | 0x763f589eL
- RtlCreateUserProcess | 0x610d9a9L
- RtlCreateUserThread | 0xcac0e502L
- RtlCloneUserProcess | 0x42580a46L
- RtlCreateProcessParameters | 0x9896b3deL
- RtlQueryModuleInformation | 0x4f0b95f9L
- LdrProcessRelocationBlock | 0xa34bbde1L
- LdrResRelease | 0x7d34ed32L
- RtlUpcaseUnicodeToOemN | 0x874a77b1L
- RtlCustomCPToUnicodeN | 0xa91a457dL
- RtlUnicodeToCustomCPN | 0x67a78addL
- RtlUpcaseUnicodeToCustomCPN | 0x552cf19eL
- RtlConsoleMultiByteToUnicodeN | 0x354ebea1L
- RtlTimeToElapsedTimeFields | 0xbd582edL
- RtlSecondsSince1980ToTime | 0x8ff38a9cL
- RtlSecondsSince1970ToTime | 0xa3b1b5bbL
- RtlSystemTimeToLocalTime | 0x2b1ce988L
- RtlLocalTimeToSystemTime | 0x9afa6968L
- NtGetTickCount | 0xfa12297bL
- PfxInitialize | 0x38003bc5L
- PfxRemovePrefix | 0xfd8df54fL
- PfxInsertPrefix | 0x524744b6L
- PfxFindPrefix | 0x79f67302L
- RtlStartRXact | 0x43944ea7L
- RtlAbortRXact | 0xb5afcc91L
- RtlAddAttributeActionToRXact | 0x25a1e377L
- RtlAddActionToRXact | 0x32d06583L
- RtlInitializeRXact | 0xfb7bfd2bL
- RtlApplyRXact | 0x3e8c2e1fL
- RtlApplyRXactNoFlush | 0xd5a042feL
- RtlSelfRelativeToAbsoluteSD2 | 0x222dd7a8L
- RtlRunEncodeUnicodeString | 0x6c251298L
- RtlRunDecodeUnicodeString | 0x5c83792eL
- RtlEraseUnicodeString | 0xf8c9c025L
- RtlAdjustPrivilege | 0x30e19609L
- RtlCopySidAndAttributesArray | 0x6b29eabL
- RtlCreateVirtualAccountSid | 0x71b2e89fL
- RtlRemovePrivileges | 0x57d5367fL
- RtlEqualLuid | 0xf017a19dL
- RtlCopyLuid | 0xe01b5c80L
- RtlCopyLuidAndAttributesArray | 0xf014d5d9L
- RtlSetControlSecurityDescriptor | 0x411767fbL
- RtlAreAllAccessesGranted | 0x2824d157L
- RtlAreAnyAccessesGranted | 0xec8b81c6L
- RtlOwnerAcesPresent | 0x8f5a20ffL
- RtlGetSecurityDescriptorRMControl | 0x49cc4aceL
- RtlSetSecurityDescriptorRMControl | 0x7cfc965aL
- RtlMapSecurityErrorToNtStatus | 0xd45d4600L
- RtlSidHashInitialize | 0xe5f3e64dL
- RtlSidHashLookup | 0xf0da3215L
- RtlSidIsHigherLevel | 0xd2fb13e2L
- RtlSidEqualLevel | 0x3253faa7L
- RtlSidDominates | 0x865755bbL
- RtlReplaceSidInSd | 0x9f484601L
- RtlSetAttributesSecurityDescriptor | 0xb092b3a1L
- RtlSetInformationAcl | 0x25faffd9L
- RtlAddCompoundAce | 0x2dc812eeL
- RtlAddAccessDeniedAceEx | 0xd7dcf1c1L
- RtlAddAuditAccessAce | 0x170f6972L
- RtlAddAuditAccessAceEx | 0x188f974fL
- RtlAddAccessAllowedObjectAce | 0x67634d1aL
- RtlAddAccessDeniedObjectAce | 0xb96b425bL
- RtlAddAuditAccessObjectAce | 0xb6f1fee9L
- RtlDestroyAtomTable | 0x7c97767aL
- RtlEmptyAtomTable | 0x76d419dfL
- RtlPinAtomInAtomTable | 0xaf094fdfL
- RtlAddIntegrityLabelToBoundaryDescript | 0xbb5b06a4L
- RtlImageRvaToVa | 0x579624fdL
- RtlZeroHeap | 0x1c3202d5L
- RtlExtendMemoryBlockLookaside | 0x196f8ebeL
- RtlLockMemoryBlockLookaside | 0x7dca419fL
- RtlResetMemoryBlockLookaside | 0x2a97d599L
- RtlUnlockMemoryBlockLookaside | 0xf767a3e2L
- RtlExtendMemoryZone | 0x5250474L
- RtlResetMemoryZone | 0x9d4eed8fL
- RtlDowncaseUnicodeChar | 0xa5f035b0L
- RtlxUnicodeStringToOemSize | 0x7a98c50cL
- RtlxOemStringToUnicodeSize | 0x2fd21e4cL
- RtlUpcaseUnicodeStringToAnsiString | 0x6df9a33bL
- RtlUpcaseUnicodeStringToOemString | 0x5ac94a51L
- RtlUnicodeStringToCountedOemString | 0x91702fe2L
- RtlUpcaseUnicodeStringToCountedOemStri | 0xef80762eL
- RtlEqualDomainName | 0xe6bdb3a8L
- RtlEqualComputerName | 0x470d2b1fL
- RtlDnsHostNameToComputerName | 0x9a6243eeL
- RtlCompareString | 0xb0067e35L
- RtlUpperString | 0xef04e1faL
- RtlAppendAsciizToString | 0xffda672cL
- RtlAppendStringToString | 0xc6f86940L
- RtlSetAllBits | 0x2c68274eL
- RtlFindSetBits | 0x4a6c2f6L
- RtlFindClearRuns | 0xbd9fc587L
- RtlFindLongestRunClear | 0xd461b090L
- RtlNumberOfSetBits | 0x17a0e093L
- RtlNumberOfClearBits | 0x778ec60eL
- RtlAreBitsClear | 0x862abfc8L
- RtlFindNextForwardRunClear | 0x5ee44928L
- RtlInterlockedSetBitRun | 0x5a33b22bL
- RtlFindLastBackwardRunClear | 0xdbab9ce7L
- RtlFindMostSignificantBit | 0xb110be49L
- RtlFindLeastSignificantBit | 0x104fb9fL
- RtlFindSetBitsAndClear | 0x8657bd30L
- RtlAssert | 0x695ff389
- RtlBarrier | 0xb850a6be
- RtlBarrierForDelete | 0x2443c9d8L
- RtlInitBarrier | 0xa44552L
- RtlDeleteBarrier | 0xa4453c31L
- RtlCaptureStackContext | 0x4f5cb086L
- RtlGetCallersAddress | 0xba4b4ac3L
- RtlLargeIntegerToChar | 0x20abcaf1L
- RtlInt64ToUnicodeString | 0xe4d094adL
- RtlWriteRegistryValue | 0xf7636678L
- RtlCheckRegistryKey | 0x7e77ba57L
- RtlCreateRegistryKey | 0x6331b94dL
- RtlDeleteRegistryValue | 0xc5ce64e0L
- RtlSetTimeZoneInformation | 0x3a815234L
- RtlSetDynamicTimeZoneInformation | 0xd74085d9L
- RtlQueryDynamicTimeZoneInformation | 0x5eb59783L
- RtlGetThreadLangIdByIndex | 0xe3ea0671L
- RtlpGetLCIDFromLangInfoNode | 0xf77fa5ebL
- RtlGetProcessPreferredUILanguages | 0xb20c662aL
- RtlpIsQualifiedLanguage | 0x4705d4dbL
- RtlConvertLCIDToString | 0x2021a88eL
- RtlpConvertLCIDsToCultureNames | 0x8e9ebd32L
- RtlpConvertCultureNamesToLCIDs | 0x6ca26552L
- RtlpVerifyAndCommitUILanguageSettings | 0x2ee688cbL
- RtlpCleanupRegistryKeys | 0xd4d19d44L
- RtlGetSystemPreferredUILanguages | 0xabebb790L
- RtlpSetUserPreferredUILanguages | 0x3412be66L
- RtlSetProcessPreferredUILanguages | 0xe53cb1b6L
- RtlGetUILanguageInfo | 0x3c4bba85L
- RtlGetFileMUIPath | 0x45db50efL
- RtlGetUserPreferredUILanguages | 0x570fd60aL
- RtlpSetInstallLanguage | 0x7ff19eeeL
- RtlIoEncodeMemIoResource | 0x53dfcb5cL
- RtlCmEncodeMemIoResource | 0xd5438f94L
- RtlIoDecodeMemIoResource | 0x443e31f2L
- RtlCmDecodeMemIoResource | 0xc5a1f62aL
- RtlFindClosestEncodableLength | 0x1e73a5f4L
- RtlProtectHeap | 0xfc2fdbd6L
- RtlSetUserFlagsHeap | 0x5451a7cdL
- RtlQueryTagHeap | 0xfa1c74e7L
- RtlEnumProcessHeaps | 0x5a4d2dfcL
- RtlWalkHeap | 0x153c3b64L
- RtlMultipleAllocateHeap | 0xf7d143a6L
- RtlMultipleFreeHeap | 0xdb872da3L
- RtlValidateProcessHeaps | 0xe310cad1L
- RtlCompareAltitudes | 0x4716a5adL
- RtlGetCompressionWorkSpaceSize | 0xfb210f3L
- RtlCompressBuffer | 0x21abfa7dL
- RtlDecompressBuffer | 0xf73bbd46L
- RtlDecompressFragment | 0x73a54bc0L
- RtlComputeCrc32 | 0x591d2f51L
- RtlConnectToSm | 0x2c5a4324L
- RtlSendMsgToSm | 0xc1b348bL
- RtlDeleteHashTable | 0xb997ef16L
- RtlInsertEntryHashTable | 0x61c9c84aL
- RtlRemoveEntryHashTable | 0x1f2001e3L
- RtlLookupEntryHashTable | 0xc75e37cfL
- RtlGetNextEntryHashTable | 0x76dac194L
- RtlInitEnumerationHashTable | 0x1b0d717eL
- RtlEnumerateEntryHashTable | 0xa9a50dbbL
- RtlEndEnumerationHashTable | 0x599444a1L
- RtlInitWeakEnumerationHashTable | 0x99a75286L
- RtlWeaklyEnumerateEntryHashTable | 0xb82d8848L
- RtlEndWeakEnumerationHashTable | 0x97d8ff29L
- RtlExpandHashTable | 0x181b83a3L
- RtlContractHashTable | 0x7bca88e1L
- RtlCreateHashTable | 0x292cb677L
- RtlLocateLegacyContext | 0x606c9529L
- RtlSetExtendedFeaturesMask | 0x3d33871fL
- RtlCopyExtendedContext | 0xce86b468L
- RtlCopyContext | 0x1e8df417L
- RtlInitializeExtendedContext | 0x1d80537fL
- RtlGetExtendedContextLength | 0x5cfa1d8fL
- RtlGetExtendedFeaturesMask | 0xdab01613L
- RtlLocateExtendedFeature | 0x75c719ecL
- RtlCopyMappedMemory | 0x1c7b9ce2L
- RtlLockBootStatusData | 0xb5a149d2L
- RtlUnlockBootStatusData | 0x45bef5d5L
- RtlGetSetBootStatusData | 0x1ab654b5L
- RtlCreateBootStatusDataFile | 0xc1e4187dL
- RtlCreateEnvironment | 0x3c33af80L
- RtlSetCurrentEnvironment | 0x863c785bL
- RtlSetEnvironmentStrings | 0xec63ac02L
- RtlCreateSystemVolumeInformationFolder | 0x7e687acaL
- RtlSubtreeSuccessor | 0x5da66babL
- RtlRealPredecessor | 0xbf54ec7aL
- RtlDeleteNoSplay | 0x5e7649f0L
- RtlGetElementGenericTable | 0x149c7f46L
- RtlEnumerateGenericTable | 0x7ea81742L
- RtlIsGenericTableEmptyAvl | 0xfd49f6eaL
- RtlGetElementGenericTableAvl | 0x64e7a5a9L
- RtlNumberGenericTableElementsAvl | 0x909faa05L
- RtlEnumerateGenericTableLikeADirectory | 0xd94c6f3dL
- RtlRegisterSecureMemoryCacheCallback | 0x822da75dL
- RtlDeregisterSecureMemoryCacheCallback | 0x1b459386L
- RtlFlushSecureMemoryCache | 0x964e8bcdL
- RtlIpv6AddressToStringA | 0xe6840b5dL
- RtlIpv6AddressToStringExA | 0x97b4775aL
- RtlIpv4AddressToStringA | 0xc0d0475bL
- RtlIpv4AddressToStringExA | 0x35ffaad8L
- RtlEthernetAddressToStringA | 0x1774b857L
- RtlEthernetAddressToStringW | 0x1774b86dL
- RtlIpv6StringToAddressExA | 0x25af239aL
- RtlIpv4StringToAddressExA | 0xc3fa5718L
- RtlEthernetStringToAddressA | 0x62575497L
- RtlEthernetStringToAddressW | 0x625754adL
- RtlFormatMessage | 0xf7cc9585L
- RtlIsNameLegalDOS8Dot3 | 0x8a05ad1L
- RtlGenerate8dot3Name | 0xd5988935L
- RtlSetProcessIsCritical | 0x27e56ac9L
- RtlSetThreadIsCritical | 0xf7da8242L
- RtlGetEnabledExtendedFeatures | 0x65094bb2L
- RtlGetLastNtStatus | 0x4416c6d1L
- RtlIsValidLocaleName | 0x30b90494L
- RtlHeapTrkInitialize | 0x15449778L
- RtlIdnToNameprepUnicode | 0xeba036d4L
- RtlIdnToUnicode | 0x461182dcL
- RtlInitializeContext | 0x7e616c2eL
- RtlRemoteCall | 0x99b2b17fL
- RtlIsNameInExpression | 0xfd736a9bL
- RtlIsNormalizedString | 0xeb2b0ffL
- RtlUnhandledExceptionFilter2 | 0xf319c611L
- RtlUnhandledExceptionFilter | 0x73f905ffL
- RtlLargeIntegerDivide | 0xfb08a9c5L
- RtlLockCurrentThread | 0xe640bafbL
- RtlUnlockCurrentThread | 0x8d87729eL
- RtlLogStackBackTrace | 0x82115a8fL
- RtlNumberOfSetBitsUlongPtr | 0x745017aeL
- RtlRandom | 0x8fbf2a98
- RtlTraceDatabaseEnumerate | 0x21e3c1a1L
- RtlTraceDatabaseCreate | 0x1503b88fL
- RtlTraceDatabaseDestroy | 0xe529b285L
- RtlTraceDatabaseValidate | 0xe1f4f4e5L
- RtlTraceDatabaseFind | 0x867d63bcL
- RtlTraceDatabaseLock | 0x8680c624L
- RtlTraceDatabaseUnlock | 0x3ebc41e7L
- RtlTraceDatabaseAdd | 0x80324264L
- RtlpGetUserOrMachineUILanguage4NLS | 0xa2a2173fL
- RtlpRefreshCachedUILanguage | 0x8e6ee490L
- RtlpMuiFreeLangRegistryInfo | 0xedd5cbbL
- RtlpLoadMachineUIByPolicy | 0xb3a4e805L
- RtlpNtOpenKey | 0x690959a4L
- RtlpNtCreateKey | 0x1806d6a6L
- RtlpNtQueryValueKey | 0x225657a5L
- RtlpNtSetValueKey | 0x5f886ffbL
- RtlpNtMakeTemporaryKey | 0xf704f7f3L
- RtlpNtEnumerateSubKey | 0x3dad41a2L
- isupper | 0xab28502d
- islower | 0xaa85050a
- isspace | 0xab03df0d
- ispunct | 0xaad08acb
- isalnum | 0xa9bc2e1e
- isprint | 0xaaced1ce
- isgraph | 0xaa2bd373
- iscntrl | 0xa9e19104
- __toascii | 0xc424aa4f
- __iscsym | 0xb644c3db
- __iscsymf | 0x7edd3fa1
- _atoi64 | 0x7f524c5b
- _ltoa | 0xef34d14
- _i64toa | 0x8d797e1b
- _itow | 0xef1a807
- _ltow | 0xef34d2a
- _ultow | 0xedfb809f
- _i64tow | 0x8d797e31
- _lfind | 0xed552ad1
- _memicmp | 0xe235e58c
- _snprintf | 0x6eef5cf8
- _splitpath | 0xdd3f1cbd
- _strlwr | 0xa950e232
- _strupr | 0xa9510794
- _vswprintf | 0x5e66d6b7
- _wcslwr | 0xb1727086
- _wcsnset_s | 0xd642b33d
- _wcsset_s | 0xd8458bef
- _wcstoui64 | 0xe401d6bc
- _wcsupr | 0xb17295e8
- _wtoi64 | 0xb2a3ca31
- labs | 0x7c99f227
- fabs | 0x7c96a7e1
- iswlower | 0x14940401
- iswxdigit | 0xc243b8a1
- iswspace | 0x1512de04
- qsort | 0x103cc7fe
- sprintf | 0xa5b50f0b
- sscanf | 0x1c793bc3
- strnlen | 0xaf0c650b
- strtoul | 0xaf0fbe22
- swprintf | 0x73244fc2
- tolower | 0xeff0fed1
- towlower | 0x77f36a8
- towupper | 0x82281cb
- vsprintf | 0x400db61
- wcscat | 0x24b5232a
- wcscpy | 0x24b5251e
- wcslen | 0x24b549f1
- wcsncat | 0xbb5f9718
- wcsncpy | 0xbb5f990c
- wcsnlen | 0xbb5fbddf
- wcsspn | 0x24b56923
- wcstoul | 0xbb6316f6
- wcstombs | 0x27c5d2d7
- _itoa_s | 0x91fb74e3
- _ltoa_s | 0x98faeec6
- _ultoa_s | 0x5addd37b
- _i64toa_s | 0xd1d17d8d
- _ui64toa_s | 0x98006382
- _ltow_s | 0x98fb4c5c
- _ultow_s | 0x5ade3111
- _i64tow_s | 0xd1d1db23
- _ui64tow_s | 0x9800c118
- _makepath_s | 0x6f140c01L
- _vsnprintf_s | 0x7b177420L
- _snprintf_s | 0xe83a87aaL
- _snscanf_s | 0x103b50c2
- _vsnwprintf_s | 0xdda6f2f7L
- _snwprintf_s | 0xef2c77c1L
- _snwscanf_s | 0x9c1419f9L
- _splitpath_s | 0x29794cafL
- _strnset_s | 0x67b5d569
- _strset_s | 0x4187189b
- _wmakepath_s | 0x874dadb8L
- _wsplitpath_s | 0x48e72546L
- memcpy_s | 0x77f62642
- memmove_s | 0x8dfade8d
- vsprintf_s | 0x7a54453
- sprintf_s | 0xe7350a7d
- sscanf_s | 0x1fb74535
- strncat_s | 0xa314ebf6
- strtok_s | 0x9107569e
- swscanf_s | 0x9b0e9ccc
- MD4Init | 0xcd7991fe
- MD4Update | 0x2e4522ad
- MD4Final | 0x7c72dd94
- EtwCreateTraceInstanceId | 0x5522231aL
- EtwRegisterSecurityProvider | 0xe0c1d0fdL
- EtwEventProviderEnabled | 0x828371adL
- EtwEventWriteString | 0x575078b9L
- EtwWriteUMSecurityEvent | 0x37f302dcL
- EtwEnumerateProcessRegGuids | 0xe840554L
- EtwEventWriteEx | 0xf21d69ffL
- EtwEventWriteFull | 0xef2073b5L
- EtwEventWriteStartScenario | 0xdc059524L
- EtwEventWriteEndScenario | 0xa8b0c82dL
- EtwLogTraceEvent | 0x6eb5a2e8L
- EtwTraceEventInstance | 0x36e9043bL
- EtwSetMark | 0xd09ddfac
- EtwReplyNotification | 0x44b9a148L
- EtwpCreateEtwThread | 0x636a1c81L
- EvtIntReportEventAndSourceAsync | 0x65f4d39fL
- EvtIntReportAuthzEventAndSourceAsync | 0x2b5fb16bL
- TpAllocAlpcCompletion | 0x638abc4eL
- TpWaitForAlpcCompletion | 0xe6dabc7fL
- TpAlpcRegisterCompletionList | 0x37290604L
- TpAlpcUnregisterCompletionList | 0xadfb1807L
- TpQueryPoolStackInformation | 0xdf16c215L
- TpSetDefaultPoolMaxThreads | 0xdcfb2045L
- TpSetDefaultPoolStackInformation | 0xb0a53150L
- TpPoolFreeUnusedNodes | 0xf4c9d912L
- TpCallbackSetEventOnCompletion | 0xb73a27fbL
- TpCallbackReleaseSemaphoreOnCompletion | 0xed226012L
- TpCallbackReleaseMutexOnCompletion | 0x8dcf42c1L
- TpCallbackLeaveCriticalSectionOnComple | 0xf5711ba0L
- TpCallbackUnloadDllOnCompletion | 0x676dde0cL
- TpDbgSetLogRoutine | 0x4490240aL
- TpDbgGetFreeInfo | 0x31721004L
- TpDbgDumpHeapUsage | 0x8469f6ffL
- RtlDebugPrintTimes | 0xae1cc40dL
- RtlDeleteTimerQueue | 0x9561fe90L
- RtlUpdateTimer | 0x89d1a79bL
- RtlCancelTimer | 0xdfb908feL
- RtlSetTimer | 0xa9392764L
- RtlDeregisterWait | 0xc0d8989aL
- SbExecuteProcedure | 0xfd89b7b6L
- RtlAllocateMemoryZone | 0xcda57e51L
- RtlFreeMemoryBlockLookaside | 0xfbfd0ad8L
- RtlAllocateMemoryBlockLookaside | 0x74a3c0dbL
- NlsMbCodePageTag | 0xe91e6575L
- NlsMbOemCodePageTag | 0x73fd34b6L
- NlsAnsiCodePage | 0x796c7bd5L
- _fltused | 0xd837dbbb
Add Comment
Please, Sign In to add comment