sysopfb

djb2 hashes for kernel32 and ntdll

May 1st, 2020
507
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 97.90 KB | None | 0 0
  1. Kernel 32 Export | djb2 hash
  2. --- | ---
  3. GetStartupInfoA | 0x348b7545L
  4. CreateProcessW | 0xaeb52e2fL
  5. CreateProcessA | 0xaeb52e19L
  6. Sleep | 0xe19e5fe
  7. GetTickCount | 0x41ad16b9L
  8. ReleaseMutex | 0x585f7d19L
  9. WaitForSingleObject | 0xeccda1baL
  10. WaitForSingleObjectEx | 0x56bd0197L
  11. SetLastError | 0x6beb4b6fL
  12. GetLastError | 0x2082eae3L
  13. TlsGetValue | 0xb00ef115L
  14. GetCurrentProcessId | 0xa3bf64b4L
  15. SleepEx | 0xfc2b66db
  16. GetProcAddress | 0xcf31bb1fL
  17. GetModuleHandleA | 0x5a153f58L
  18. FlsGetValue | 0x64fd0787L
  19. ProcessIdToSessionId | 0xe7e26065L
  20. WriteFile | 0x663cecb0
  21. WriteConsoleA | 0xee4211a4L
  22. GetConsoleMode | 0x349bd73dL
  23. InterlockedDecrement | 0x5bc18b0L
  24. InterlockedIncrement | 0x9a7ac99eL
  25. CloseHandle | 0x3870ca07L
  26. GetCurrentThreadId | 0xd29e428dL
  27. InterlockedExchange | 0xe05935dcL
  28. InterlockedCompareExchange | 0x7421ec23L
  29. RegKrnGetGlobalState | 0xf8640fc0L
  30. GetModuleFileNameA | 0x13b8a14dL
  31. HeapFree | 0x374893c5
  32. GetProcessHeap | 0xc6580d02L
  33. TlsSetValue | 0xc324eba1L
  34. OpenEventW | 0x5e65b4f0
  35. BaseSetLastNTError | 0xbf23c2ecL
  36. LocalAlloc | 0x73cebc5b
  37. SetEvent | 0x877ebbd3
  38. ResetEvent | 0xa2eff2a
  39. lstrlenW | 0xd2c4ab20
  40. WideCharToMultiByte | 0xe65d31ceL
  41. QueryPerformanceCounter | 0xdb4e150dL
  42. IsDBCSLeadByte | 0x3ad13a87L
  43. OpenFileMappingW | 0x73c4b65aL
  44. GetACP | 0xb4e1adb9
  45. LCMapStringW | 0x8b4a0260L
  46. SetFilePointer | 0x53ef6bf2L
  47. GetCurrentThread | 0xe03908c0L
  48. GetCurrentProcess | 0xca8d7527L
  49. UnmapViewOfFile | 0xd639f256L
  50. CreateEventW | 0x5d01f1b2L
  51. VirtualAlloc | 0x382c0f97L
  52. VirtualFree | 0x668fcf2eL
  53. DuplicateHandle | 0xee96b40cL
  54. MapViewOfFile | 0x11deb0b3L
  55. CreateFileMappingW | 0xf33ffc9cL
  56. InitializeCriticalSectionAndSpinCount | 0xa0c64cedL
  57. MultiByteToWideChar | 0xe2fdda8eL
  58. GetStringTypeW | 0xdc3bf0b5L
  59. IsWow64Process | 0xa0074567L
  60. GetFileSize | 0x7891c520L
  61. OpenProcess | 0x7136fdd6L
  62. WaitForMultipleObjectsEx | 0x579e5b14L
  63. GetVersionExW | 0x45c02effL
  64. SetErrorMode | 0x975945e0L
  65. GetFileAttributesW | 0xcc9c6ce3L
  66. CompareFileTime | 0xb5717f3bL
  67. GetEnvironmentVariableW | 0x87889717L
  68. MulDiv | 0xc3fdd856
  69. RegQueryValueExW | 0x6b95d12aL
  70. RegCloseKey | 0x736b3702L
  71. RegOpenKeyExW | 0x74a9772L
  72. LocalFree | 0xa66df372
  73. RegEnumKeyExW | 0x6d0b1b75L
  74. FindAtomW | 0xb4c7764e
  75. GlobalAddAtomW | 0xe765e467L
  76. DeviceIoControl | 0x59440ceL
  77. CreateEventA | 0x5d01f19cL
  78. FindResourceExW | 0x19bcb6c2L
  79. GetSystemDefaultLCID | 0xcee92c8bL
  80. SetThreadPriority | 0x1c7c81abL
  81. <ModuleEntryPoint> | 0x1bfb8241L
  82. RegKrnInitialize | 0x3cca2120L
  83. GetEnvironmentVariableA | 0x87889701L
  84. BaseThreadInitThunk | 0x98649676L
  85. VerifyConsoleIoHandle | 0x45598a31L
  86. GetModuleHandleW | 0x5a153f6eL
  87. FreeLibrary | 0x30eece3cL
  88. CreateThread | 0x7f08f451L
  89. GetSystemTimeAsFileTime | 0x4bbf083cL
  90. GetVersionExA | 0x45c02ee9L
  91. GetFileType | 0x78929447L
  92. TlsFree | 0x4a12077a
  93. FlsFree | 0x1462b4ec
  94. HeapDestroy | 0xec0fb46dL
  95. GetThreadLocale | 0x88b7330dL
  96. CompareStringW | 0xd1ff039aL
  97. GetLocaleInfoW | 0x4db8d678L
  98. CompareStringA | 0xd1ff0384L
  99. GetUserDefaultLCID | 0xf640b645L
  100. lstrcmpiA | 0x2abba0b4
  101. ReadFile | 0x71019921
  102. CreateFileW | 0xeb96c610L
  103. GetFullPathNameW | 0x3524e9fdL
  104. ExpandEnvironmentStringsW | 0x7487495bL
  105. GetDriveTypeW | 0x74bb7698L
  106. QueryPerformanceFrequency | 0x40d0207fL
  107. FlsSetValue | 0x78130213L
  108. WaitForMultipleObjects | 0x6da077f7L
  109. CreateMutexW | 0x6fa13223L
  110. CreateDirectoryW | 0x41fac005L
  111. VirtualProtect | 0x844ff18dL
  112. FlushInstructionCache | 0xb7dcedddL
  113. GetThreadPriority | 0x3a45e99fL
  114. GetWindowsDirectoryW | 0x95bc69dcL
  115. ResumeThread | 0x74162a6eL
  116. GetFileTime | 0x78924fd4L
  117. FindFirstFileW | 0xae2636e5L
  118. FindClose | 0xb4e7451c
  119. VirtualQuery | 0x395269c2L
  120. GetVersion | 0x2782618b
  121. IsValidCodePage | 0x8edf3829L
  122. GetUserDefaultUILanguage | 0xb16cda6bL
  123. GetFileAttributesExW | 0x656af4e0L
  124. FormatMessageW | 0x128804eaL
  125. GetTimeZoneInformation | 0xced1f16L
  126. FlushFileBuffers | 0x661c94L
  127. HeapCompact | 0xb5f9ff8aL
  128. RegOpenKeyExA | 0x74a975cL
  129. DisableThreadLibraryCalls | 0x530574f5L
  130. LoadLibraryExA | 0x4f803c78L
  131. LoadLibraryW | 0x5fbff111L
  132. GetModuleFileNameW | 0x13b8a163L
  133. LoadLibraryExW | 0x4f803c8eL
  134. Basep8BitStringToDynamicUnicodeString | 0x172d5924L
  135. TlsAlloc | 0x8bf55163
  136. GetSystemInfo | 0x8308eff6L
  137. LoadLibraryA | 0x5fbff0fbL
  138. HeapCreate | 0x24bd1d77
  139. OpenEventA | 0x5e65b4da
  140. IsDebuggerPresent | 0xe6a24847L
  141. GetModuleHandleExW | 0x3462962bL
  142. RegQueryValueExA | 0x6b95d114L
  143. OpenFileMappingA | 0x73c4b644L
  144. CreateMutexA | 0x6fa1320dL
  145. MapViewOfFileEx | 0x44db2d0L
  146. InitializeCriticalSectionEx | 0x72f31ed4L
  147. GetStartupInfoW | 0x348b755bL
  148. RegGetValueW | 0x79fe96f7L
  149. FlsAlloc | 0xa05bad15
  150. GetSystemDirectoryW | 0xe643c476L
  151. OpenMutexW | 0x7104f561
  152. RegOpenCurrentUser | 0x5fd39cb7L
  153. GetCPInfo | 0xfa1799c4
  154. GetCommandLineA | 0xb511fc4dL
  155. GetStdHandle | 0xf178843cL
  156. FreeEnvironmentStringsW | 0x38d10c3dL
  157. GetEnvironmentStringsW | 0x4b44f97bL
  158. GetSystemWindowsDirectoryW | 0xe02583e1L
  159. GetCommandLineW | 0xb511fc63L
  160. IsProcessorFeaturePresent | 0xc24a5f0eL
  161. LoadStringBaseExW | 0x32e87d0bL
  162. GetLogicalDrives | 0x30bc770dL
  163. GetFileInformationByHandle | 0xc500df72L
  164. CreateFileA | 0xeb96c5faL
  165. GetFileAttributesA | 0xcc9c6ccdL
  166. FileTimeToSystemTime | 0x1fb7928bL
  167. DeleteFileA | 0x1cd88719L
  168. DeactivateActCtx | 0x78eebe46L
  169. ActivateActCtx | 0xb635a7fdL
  170. ReleaseActCtx | 0x470aeeedL
  171. FindNextFileW | 0xf3b43c5cL
  172. CreateFileMappingA | 0xf33ffc86L
  173. GlobalFree | 0x4b816b98
  174. GetStringTypeExW | 0xdafab532L
  175. GetCurrentDirectoryW | 0x2ced73f4L
  176. HeapSetInformation | 0xf3baa215L
  177. FindActCtxSectionGuid | 0x39768f2bL
  178. GlobalAlloc | 0xbb513941L
  179. RaiseException | 0x8b8deae8L
  180. _lread | 0xed5bacac
  181. _llseek | 0x986c6e04
  182. lstrcmpW | 0xd2bfde01
  183. LoadResource | 0xdcde594dL
  184. LockResource | 0x145a9296L
  185. FindResourceW | 0x3c704e45L
  186. LocalLock | 0xa67130b9
  187. LocalUnlock | 0x1c71a5bcL
  188. LocalReAlloc | 0xabad9db2L
  189. GetFileSizeEx | 0xe417967dL
  190. IsThreadAFiber | 0xcc37d4e2L
  191. lstrlenA | 0xd2c4ab0a
  192. SystemTimeToFileTime | 0xbc59c04bL
  193. GetSystemTime | 0x830ee3b9L
  194. GetLocalTime | 0x12d7e0dfL
  195. SizeofResource | 0xc17a85dL
  196. RegSetValueExW | 0x34587300L
  197. RegisterWaitForInputIdle | 0xfab34fb4L
  198. LoadAppInitDlls | 0xfc7483c9L
  199. QueryActCtxSettingsW | 0x958ba82aL
  200. SortGetHandle | 0xaf4ffbf9L
  201. ExitProcess | 0xb769339eL
  202. TerminateThread | 0x87ae6a46L
  203. RegEnumValueW | 0x8665212cL
  204. RegQueryInfoKeyW | 0x4679d725L
  205. RegCreateKeyExW | 0x46ceb3b4L
  206. SetUnhandledExceptionFilter | 0x252c3659L
  207. DeleteFileW | 0x1cd8872fL
  208. SetThreadLocale | 0x30105819L
  209. SetEnvironmentVariableW | 0xea0c0823L
  210. SetConsoleCtrlHandler | 0x3e24e177L
  211. GlobalMemoryStatus | 0x960c7d3L
  212. CreateActCtxW | 0x9dfd10d7L
  213. GetLongPathNameW | 0xe22f879aL
  214. FindActCtxSectionStringW | 0x3644efb0L
  215. GetProcessAffinityMask | 0x1acd1c0aL
  216. SetHandleCount | 0x8c675806L
  217. QueryActCtxW | 0x66875219L
  218. GetShortPathNameW | 0xaa90c53aL
  219. SetThreadStackGuarantee | 0xc6cc019bL
  220. CreateMemoryResourceNotification | 0xdf5ac5a1L
  221. GetSystemWow64DirectoryW | 0xc8727abdL
  222. GetComputerNameW | 0xaa63bfccL
  223. FileTimeToLocalFileTime | 0x39515df1L
  224. GetFullPathNameA | 0x3524e9e7L
  225. FindFirstFileA | 0xae2636cfL
  226. SetEnvironmentVariableA | 0xea0c080dL
  227. FreeEnvironmentStringsA | 0x38d10c27L
  228. GetEnvironmentStrings | 0xc43864a4L
  229. GetEnvironmentStringsA | 0x4b44f965L
  230. GetLogicalDriveStringsA | 0x89478d45L
  231. BaseDllReadWriteIniFile | 0x6d9e2e3L
  232. GetPrivateProfileStringW | 0x1607711fL
  233. GetVolumeNameForVolumeMountPointW | 0x34d49f91L
  234. GetVolumePathNameW | 0x6b2fa162L
  235. GetVolumePathNamesForVolumeNameW | 0xe8f10f55L
  236. BaseIsAppcompatInfrastructureDisabled | 0x129519aL
  237. GetNativeSystemInfo | 0x395dc89dL
  238. RegNotifyChangeKeyValue | 0x1d0575a8L
  239. OpenThread | 0x806cb78f
  240. SetCurrentDirectoryW | 0xbec3a080L
  241. BaseFormatObjectAttributes | 0xaf295167L
  242. RegCreateKeyExA | 0x46ceb39eL
  243. RegSetValueExA | 0x345872eaL
  244. QueryFullProcessImageNameW | 0xd2b32468L
  245. GetProductInfo | 0x5cfdefb2L
  246. GetExitCodeProcess | 0xe21026f9L
  247. FindFirstFileExW | 0xd08f4762L
  248. SetCurrentDirectoryA | 0xbec3a06aL
  249. GetPrivateProfileStringA | 0x16077109L
  250. lstrcpynA | 0x2abd6cc5
  251. SetHandleInformation | 0x70ea2e03L
  252. RegQueryInfoKeyA | 0x4679d70fL
  253. SetProcessWorkingSetSize | 0xec7294f8L
  254. SetProcessWorkingSetSizeEx | 0xd36bbc55L
  255. BaseCheckAppcompatCacheEx | 0x44744994L
  256. BasepCheckBadapp | 0xc61d4d16L
  257. CheckElevationEnabled | 0x521be915L
  258. BaseGenerateAppCompatData | 0xb6ae452aL
  259. CreateProcessInternalW | 0x4da0acccL
  260. BasepFreeAppCompatData | 0x48a22011L
  261. BasepCheckWinSaferRestrictions | 0xbcbfb6L
  262. MoveFileWithProgressW | 0x394bc704L
  263. MoveFileW | 0xd834fdd3
  264. GetConsoleOutputCP | 0xdbbfa5cL
  265. MoveFileExW | 0xb96b81d0L
  266. BaseCheckRunApp | 0xef17ce74L
  267. SearchPathA | 0xd6583fc9L
  268. OpenFile | 0x5064e57
  269. CreateProcessInternalA | 0x4da0acb6L
  270. SetConsoleMode | 0xfb9e8ac9L
  271. SetConsoleInputExeNameW | 0x5b3966ceL
  272. SetThreadUILanguage | 0x974d454bL
  273. GetConsoleTitleW | 0xdadf1511L
  274. GetErrorMode | 0x4bf0e554L
  275. HeapValidate | 0xc59b33cdL
  276. NeedCurrentDirectoryForExePathW | 0xadc6e86L
  277. RegOpenUserClassesRoot | 0x6e3939e6L
  278. GetSystemDirectoryA | 0xe643c460L
  279. GetComputerNameA | 0xaa63bfb6L
  280. GetFileInformationByHandleEx | 0x8b68d4fL
  281. SetFilePointerEx | 0xd7a39cfL
  282. GetVolumeInformationW | 0xc948a23aL
  283. FileTimeToDosDateTime | 0xaf0ce60aL
  284. CreateSemaphoreW | 0xf8ef4914L
  285. QueueUserWorkItem | 0xb00c9f9bL
  286. GetModuleHandleExA | 0x34629615L
  287. GetOverlappedResult | 0x71d7cf76L
  288. _lclose | 0x97c5e726
  289. SearchPathW | 0xd6583fdfL
  290. GlobalFindAtomW | 0x7aca41fL
  291. GlobalDeleteAtom | 0xd7f651aL
  292. RtlCaptureStackBackTrace | 0xd43e9c41L
  293. AddAtomW | 0x7847acb6
  294. DeleteAtom | 0x5df47d29
  295. SetEndOfFile | 0x6520767dL
  296. IsValidLocale | 0x38263b21L
  297. ConvertDefaultLocale | 0xb427eb5bL
  298. SetPriorityClass | 0xcc04b069L
  299. CallbackMayRunLong | 0x8f7beedeL
  300. ReadProcessMemory | 0xb8932459L
  301. GlobalUnlock | 0x5443bf62L
  302. GlobalLock | 0x4b84a8df
  303. GlobalSize | 0x4b8868f1
  304. GlobalGetAtomNameW | 0x224de8bfL
  305. NlsGetCacheUpdateCount | 0x19093a12L
  306. InterlockedExchangeAdd | 0xcb42da25L
  307. ReleaseSemaphore | 0x19e5986aL
  308. GetQueuedCompletionStatus | 0xf80f04ccL
  309. FreeResource | 0xcbe6fe4fL
  310. VerifyVersionInfoW | 0x4ef5bdc3L
  311. GetTempPathW | 0x9ef979ffL
  312. SetFileAttributesW | 0xf5a6066fL
  313. GetDiskFreeSpaceExW | 0x3dfe2f52L
  314. GetCalendarInfoW | 0x2382e4a2L
  315. AddRefActCtx | 0x432def92L
  316. GetCurrentActCtx | 0xb38d14efL
  317. FreeLibraryAndExitThread | 0xe222dba1L
  318. GetExitCodeThread | 0xb263c852L
  319. lstrcmpiW | 0x2abba0ca
  320. GetLocaleInfoA | 0x4db8d662L
  321. GetUserDefaultLangID | 0x8b7b2338L
  322. GetProcessTimes | 0x923536e6L
  323. InitOnceExecuteOnce | 0xfafa8756L
  324. Wow64DisableWow64FsRedirection | 0xd859b1d8L
  325. Wow64RevertWow64FsRedirection | 0x72f47e1cL
  326. TerminateProcess | 0x60af076dL
  327. FindFirstChangeNotificationW | 0xca3b9fd2L
  328. ReadDirectoryChangesW | 0x923a9d06L
  329. BindIoCompletionCallback | 0x4758d561L
  330. SetProcessPriorityBoost | 0x4275d839L
  331. VirtualAllocEx | 0xf36e5ab4L
  332. VirtualFreeEx | 0x49c05c0bL
  333. WriteProcessMemory | 0x6f22e8c8L
  334. WerRegisterMemoryBlock | 0x4b9219fcL
  335. GlobalReAlloc | 0xddc2ec18L
  336. GetAtomNameW | 0x6469408eL
  337. GetNumberFormatW | 0x8993af4eL
  338. LocalSize | 0xa674f0cb
  339. BasepMapModuleHandle | 0xe628caa0L
  340. FindResourceExA | 0x19bcb6acL
  341. FindResourceA | 0x3c704e2fL
  342. RegDeleteValueW | 0xb9a29e6aL
  343. ExpandEnvironmentStringsA | 0x74874945L
  344. SetProcessDEPPolicy | 0x65f570f9L
  345. Wow64EnableWow64FsRedirection | 0x79fbe6abL
  346. CreateBoundaryDescriptorW | 0x8a12d533L
  347. VirtualLock | 0x66930c75L
  348. OpenMutexA | 0x7104f54b
  349. SetFileTime | 0xb8eacee0L
  350. SetFileAttributesA | 0xf5a60659L
  351. lstrcmpA | 0xd2bfddeb
  352. AddAtomA | 0x7847aca0
  353. FindAtomA | 0xb4c77638
  354. OpenSemaphoreW | 0xc0de7b52L
  355. CreateThreadpoolWork | 0x462abfeeL
  356. CreateThreadpoolTimer | 0xb49144cL
  357. CreateThreadpoolCleanupGroup | 0x8cd9d3e0L
  358. GetTickCount64 | 0x614db023L
  359. CreateIoCompletionPort | 0x825d7290L
  360. PostQueuedCompletionStatus | 0x735f0c32L
  361. VirtualUnlock | 0x6c796078L
  362. GetDriveTypeA | 0x74bb7682L
  363. CancelIoEx | 0xa40ceac0
  364. FindCloseChangeNotification | 0x12a93269L
  365. SwitchToThread | 0x3d8342d2L
  366. DosDateTimeToFileTime | 0x2d4be84aL
  367. CreateThreadpoolWait | 0x462a8340L
  368. GetTimeFormatW | 0x4b56b494L
  369. GetSystemPowerStatus | 0x83c2d7bbL
  370. TrySubmitThreadpoolCallback | 0x2d0ca5f7L
  371. SetThreadExecutionState | 0x4526589eL
  372. GetDiskFreeSpaceW | 0x5dda62d5L
  373. DeleteTimerQueueTimer | 0x92d38a7fL
  374. CreateTimerQueueTimer | 0x117296a0L
  375. VerifyVersionInfoA | 0x4ef5bdadL
  376. SignalObjectAndWait | 0x1c821902L
  377. BaseFormatTimeOut | 0x2634b230L
  378. RegEnumKeyExA | 0x6d0b1b5fL
  379. K32GetModuleBaseNameW | 0xf0a8cf4eL
  380. K32GetModuleBaseNameA | 0xf0a8cf38L
  381. RegDeleteValueA | 0xb9a29e54L
  382. RegEnumValueA | 0x86652116L
  383. CreateSemaphoreExA | 0xf1e5a13bL
  384. GlobalAddAtomA | 0xe765e451L
  385. CreateEventExA | 0xa544e959L
  386. SetThreadAffinityMask | 0x8e6a9f8fL
  387. CompareStringOrdinal | 0xfbe507ccL
  388. DeleteTimerQueueEx | 0x60fa315bL
  389. SystemTimeToTzSpecificLocalTime | 0x99a3156aL
  390. TzSpecificLocalTimeToSystemTime | 0xfaf4528aL
  391. RegDeleteKeyExW | 0xa04898b3L
  392. ClosePrivateNamespace | 0x25933a3L
  393. GetFinalPathNameByHandleW | 0x9238907bL
  394. CreatePrivateNamespaceW | 0xf2c2c478L
  395. GetNLSVersion | 0x67d7f0b8L
  396. ReplaceFileW | 0xc7c7aa58L
  397. GetDurationFormat | 0x22454554L
  398. GetDurationFormatEx | 0xc8abf3b1L
  399. GetTempPathA | 0x9ef979e9L
  400. EnumSystemLocalesA | 0x863ece83L
  401. GetProfileStringA | 0x46a957ceL
  402. GetPrivateProfileIntW | 0x750eb53L
  403. GetProfileIntW | 0xadb5c038L
  404. GetProcessHeaps | 0x9159adb5L
  405. lstrcpyA | 0xd2bfebd7
  406. GetWindowsDirectoryA | 0x95bc69c6L
  407. GetSystemDefaultUILanguage | 0xcc826d31L
  408. IsBadCodePtr | 0xddfa11d9L
  409. lstrcatA | 0xd2bfab63
  410. GlobalFlags | 0xbbab8403L
  411. RegGetKeySecurity | 0x91fbe704L
  412. IsBadStringPtrW | 0xc91c298cL
  413. lstrcpyW | 0xd2bfebed
  414. IsBadStringPtrA | 0xc91c2976L
  415. GetDateFormatW | 0x49dee83L
  416. GetTimeZoneInformationForYear | 0xfe5736aeL
  417. CopyFileExW | 0x3e0668d4L
  418. BaseUpdateAppcompatCache | 0x854412fcL
  419. BaseQueryModuleData | 0xe32f08d6L
  420. CopyFileA | 0xac2253c1
  421. GetShortPathNameA | 0xaa90c524L
  422. FindNextChangeNotification | 0x8b810af2L
  423. FormatMessageA | 0x128804d4L
  424. WritePrivateProfileStringW | 0x30b214caL
  425. TermsrvAppInstallMode | 0xd1f7bd55L
  426. WriteProfileStringW | 0xc9f195efL
  427. K32EnumProcesses | 0x6f39e3a1L
  428. GetPrivateProfileSectionW | 0x3213193dL
  429. GetVolumeInformationA | 0xc948a224L
  430. WritePrivateProfileStringA | 0x30b214b4L
  431. CreateToolhelp32Snapshot | 0x66851295L
  432. RegLoadMUIStringW | 0xf8b5a2fcL
  433. GetThreadId | 0x2537b22aL
  434. RegisterWaitForSingleObjectEx | 0xf1cc601cL
  435. UnhandledExceptionFilter | 0x437d25edL
  436. CheckForReadOnlyResource | 0xd3edde90L
  437. Wow64GetThreadContext | 0xe02cdc29L
  438. Module32FirstW | 0xc9dc792fL
  439. WriteConsoleW | 0xee4211baL
  440. SetConsoleTextAttribute | 0x4a3a951dL
  441. WerGetFlags | 0xae42f780L
  442. GetThreadSelectorEntry | 0x322bb90L
  443. SuspendThread | 0x8bf7525fL
  444. Module32NextW | 0xa1d369e6L
  445. GetApplicationRecoveryCallback | 0xce9e7a75L
  446. GetStringTypeExA | 0xdafab51cL
  447. lstrcatW | 0xd2bfab79
  448. CopyFileW | 0xac2253d7
  449. GetProfileSectionW | 0x76f1d8a2L
  450. Process32Next | 0x90177f28L
  451. Process32NextW | 0x9307647fL
  452. Process32First | 0x9278b871L
  453. Process32FirstW | 0xe18fc6e8L
  454. SetProcessShutdownParameters | 0xe60ea420L
  455. AddSIDToBoundaryDescriptor | 0xfc966834L
  456. CreateActCtxA | 0x9dfd10c1L
  457. GetSystemWindowsDirectoryA | 0xe02583cbL
  458. RegSetKeySecurity | 0x58fe9a90L
  459. GetTempFileNameA | 0x79096fbdL
  460. EnumDateFormatsW | 0x6fa1550bL
  461. EnumTimeFormatsW | 0x8d72dd3cL
  462. EnumCalendarInfoA | 0xe37abd61L
  463. QueueUserAPC | 0x76c0c4bdL
  464. GetCalendarInfoA | 0x2382e48cL
  465. GetBinaryTypeW | 0xfe850e43L
  466. GetNumberFormatA | 0x8993af38L
  467. FoldStringW | 0x9d919398L
  468. GetTimeFormatA | 0x4b56b47eL
  469. GetDateFormatA | 0x49dee6dL
  470. EnumResourceNamesA | 0xb018b77L
  471. EnumResourceNamesExA | 0xd19265f4L
  472. GetUserGeoID | 0x9b47362cL
  473. CreateThreadpoolIo | 0x8f7646c3L
  474. GetCPInfoExW | 0xab09a898L
  475. CreateTimerQueue | 0x5e1c3ffL
  476. CreateThreadpool | 0x85c062bL
  477. SetThreadpoolThreadMinimum | 0xfe23ee57L
  478. OpenPrivateNamespaceW | 0xab5744f6L
  479. CheckRemoteDebuggerPresent | 0x6638c15L
  480. K32GetModuleFileNameExW | 0xc479e510L
  481. OutputDebugStringA | 0x79729f95L
  482. SetThreadIdealProcessor | 0xa40f4de8L
  483. K32GetModuleFileNameExA | 0xc479e4faL
  484. K32EnumProcessModules | 0x9bf78f42L
  485. RegisterApplicationRestart | 0x6742bc63L
  486. DeleteFiber | 0x1cd85cc0L
  487. FlushViewOfFile | 0x8fb94397L
  488. UnregisterWaitEx | 0xf4bda21fL
  489. WerUnregisterMemoryBlock | 0x98542d5fL
  490. CreateWaitableTimerW | 0x9463edaL
  491. GetConsoleScreenBufferInfo | 0x3658299eL
  492. SetWaitableTimer | 0x4525bfbL
  493. GetComputerNameExW | 0xd252a609L
  494. IdnToUnicode | 0x637bcdcaL
  495. LCMapStringA | 0x8b4a024aL
  496. SwitchToFiber | 0xc2d09e02L
  497. CreateFiber | 0xeb969ba1L
  498. CreateFiberEx | 0x2bac113eL
  499. ConvertThreadToFiber | 0xc1283ae9L
  500. ConvertThreadToFiberEx | 0xac22a286L
  501. EnumResourceNamesExW | 0xd192660aL
  502. IsProcessInJob | 0xf17c5352L
  503. CreateJobObjectW | 0xb0766c42L
  504. AssignProcessToJobObject | 0xcfb1997eL
  505. SetInformationJobObject | 0x27a4f2e9L
  506. CreateProcessAsUserW | 0xb053cc42L
  507. RegisterWaitForSingleObject | 0xccf99affL
  508. GetHandleInformation | 0xdf140177L
  509. IdnToAscii | 0xab78674c
  510. SetFileInformationByHandle | 0xfaa144feL
  511. GetFileAttributesExA | 0x656af4caL
  512. MoveFileExA | 0xb96b81baL
  513. MoveFileWithProgressA | 0x394bc6eeL
  514. GetPrivateProfileIntA | 0x750eb3dL
  515. GetProfileIntA | 0xadb5c022L
  516. LCIDToLocaleName | 0x377c5455L
  517. QueryDosDeviceW | 0x99c32da8L
  518. GetProcessId | 0x4986c7f1L
  519. GetThreadUILanguage | 0x4d107a3fL
  520. LockFile | 0xee65f82e
  521. UnlockFile | 0x9595e7f1
  522. IsDBCSLeadByteEx | 0x340a01a4L
  523. WerSetFlags | 0xc158f20cL
  524. IsBadReadPtr | 0x491934faL
  525. CreateSemaphoreA | 0xf8ef48feL
  526. GetOEMCP | 0x75026bf9
  527. GetTempFileNameW | 0x79096fd3L
  528. RtlUnwind | 0x97aee78c
  529. OutputDebugStringW | 0x79729fabL
  530. IsBadWritePtr | 0x613cb09L
  531. GlobalHandle | 0x35065bc2L
  532. GetSystemDefaultLangID | 0x301a42feL
  533. GlobalFindAtomA | 0x7aca409L
  534. GetProcessVersion | 0x85606b6aL
  535. GlobalMemoryStatusEx | 0xe4b211f0L
  536. GetCurrentDirectoryA | 0x2ced73deL
  537. LocalFileTimeToFileTime | 0x985a871L
  538. CreateDirectoryA | 0x41fabfefL
  539. FindNextFileA | 0xf3b43c46L
  540. lstrcpynW | 0x2abd6cdb
  541. LockFileEx | 0x1fc4c50b
  542. UnlockFileEx | 0x52afb18eL
  543. GetProfileStringW | 0x46a957e4L
  544. EnumResourceNamesW | 0xb018b8dL
  545. LocalFlags | 0x7429071d
  546. LocalHandle | 0xfd34421cL
  547. BackupSeek | 0x6a05b63
  548. BackupRead | 0x69fce77
  549. BackupWrite | 0xdafb5d46L
  550. Beep | 0x7c82fba1
  551. SetComputerNameW | 0x3ce18658L
  552. SetComputerNameA | 0x3ce18642L
  553. DnsHostnameToComputerNameW | 0xc3035d93L
  554. DnsHostnameToComputerNameA | 0xc3035d7dL
  555. SetComputerNameExW | 0xfb5c3f95L
  556. SetComputerNameExA | 0xfb5c3f7fL
  557. AddLocalAlternateComputerNameW | 0x682f0c20L
  558. AddLocalAlternateComputerNameA | 0x682f0c0aL
  559. RemoveLocalAlternateComputerNameW | 0x2e0350a5L
  560. RemoveLocalAlternateComputerNameA | 0x2e03508fL
  561. SetLocalPrimaryComputerNameW | 0x141aea47L
  562. SetLocalPrimaryComputerNameA | 0x141aea31L
  563. EnumerateLocalComputerNamesW | 0x5f981d50L
  564. EnumerateLocalComputerNamesA | 0x5f981d3aL
  565. LZCopy | 0xbfaa5666
  566. CopyLZFile | 0x3d4790a6
  567. GetFullPathNameTransactedA | 0x81b89590L
  568. GetFullPathNameTransactedW | 0x81b895a6L
  569. SetSystemTimeAdjustment | 0xc165d384L
  570. IsTimeZoneRedirectionEnabled | 0x3e1e8afL
  571. SetSystemTime | 0x3b8355c5L
  572. SetClientTimeZoneInformation | 0x564b0da1L
  573. SetTimeZoneInformation | 0x6d009ea2L
  574. SetDynamicTimeZoneInformation | 0x745bca87L
  575. DebugActiveProcess | 0xe26e6467L
  576. DebugBreakProcess | 0x6c0f18d0L
  577. DebugSetProcessKillOnExit | 0xbb0c6a5aL
  578. Wow64GetThreadSelectorEntry | 0x6ab43937L
  579. WaitForDebugEvent | 0xbe7a3faaL
  580. ContinueDebugEvent | 0x97f8f4f3L
  581. DebugActiveProcessStop | 0x8277bf8dL
  582. RemoveDirectoryTransactedW | 0x5c96d868L
  583. CreateDirectoryExW | 0xabaa9882L
  584. RemoveDirectoryTransactedA | 0x5c96d852L
  585. CreateDirectoryTransactedW | 0x73795aeL
  586. CreateDirectoryExA | 0xabaa986cL
  587. CreateDirectoryTransactedA | 0x7379598L
  588. InitAtomTable | 0xa5cdfaf2L
  589. GlobalGetAtomNameA | 0x224de8a9L
  590. GetAtomNameA | 0x64694078L
  591. GetPrivateProfileSectionA | 0x32131927L
  592. WritePrivateProfileSectionA | 0xa2123232L
  593. WritePrivateProfileSectionW | 0xa2123248L
  594. GetPrivateProfileSectionNamesA | 0x474fc49bL
  595. GetPrivateProfileSectionNamesW | 0x474fc4b1L
  596. GetPrivateProfileStructA | 0x160dd877L
  597. GetPrivateProfileStructW | 0x160dd88dL
  598. WritePrivateProfileStructA | 0x30b87c22L
  599. WritePrivateProfileStructW | 0x30b87c38L
  600. WriteProfileStringA | 0xc9f195d9L
  601. GetProfileSectionA | 0x76f1d88cL
  602. WriteProfileSectionA | 0x6341d7f7L
  603. WriteProfileSectionW | 0x6341d80dL
  604. DefineDosDeviceA | 0x53c94407L
  605. QueryDosDeviceA | 0x99c32d92L
  606. BasepCheckAppCompat | 0xd04f8773L
  607. CheckElevation | 0xea812c4aL
  608. SetFileIoOverlappedRange | 0x3bbe3ec8L
  609. SetFileCompletionNotificationModes | 0x5e02e20aL
  610. SetThreadErrorMode | 0x5f708c98L
  611. GetThreadErrorMode | 0x3666f30cL
  612. OpenFileById | 0xa1c9df5fL
  613. FindFirstFileTransactedA | 0x51cd2478L
  614. FindFirstFileTransactedW | 0x51cd248eL
  615. FindNextStreamW | 0xb47f6408L
  616. FindFirstStreamW | 0xd35a24d1L
  617. FindFirstFileNameW | 0x321552a6L
  618. FindNextFileNameW | 0xf1873b9dL
  619. FindFirstStreamTransactedW | 0x9804697aL
  620. FindFirstFileNameTransactedW | 0x1e7ea58fL
  621. CancelSynchronousIo | 0x9d65640eL
  622. CancelIo | 0x838f2ca3
  623. SetFileBandwidthReservation | 0x78a34618L
  624. GetFileBandwidthReservation | 0x8ef62f0cL
  625. SetFileShortNameW | 0x55452259L
  626. SetFileShortNameA | 0x55452243L
  627. CreateFileMappingNumaA | 0x558412d7L
  628. SetFileAttributesTransactedW | 0x1e956898L
  629. GetFileAttributesTransactedW | 0xff45700cL
  630. DeleteFileTransactedW | 0xcc6fd958L
  631. PrivMoveFileIdentityW | 0x8aa6197eL
  632. GetCompressedFileSizeW | 0x14ab576cL
  633. SetFileAttributesTransactedA | 0x1e956882L
  634. GetFileAttributesTransactedA | 0xff456ff6L
  635. DeleteFileTransactedA | 0xcc6fd942L
  636. GetCompressedFileSizeTransactedW | 0x4d1dd9d5L
  637. GetCompressedFileSizeA | 0x14ab5756L
  638. CreateSymbolicLinkW | 0x4fa6ee20L
  639. GetCompressedFileSizeTransactedA | 0x4d1dd9bfL
  640. CreateSymbolicLinkTransactedW | 0xd53c6189L
  641. CreateSymbolicLinkA | 0x4fa6ee0aL
  642. CreateSymbolicLinkTransactedA | 0xd53c6173L
  643. MoveFileTransactedA | 0x95bbece6L
  644. MoveFileTransactedW | 0x95bbecfcL
  645. MoveFileA | 0xd834fdbd
  646. ReOpenFile | 0xff7bf58e
  647. CreateFileTransactedW | 0x4b0ee579L
  648. CreateFileTransactedA | 0x4b0ee563L
  649. PrivCopyFileExW | 0x72d5b9f5L
  650. ReplaceFileA | 0xc7c7aa42L
  651. CopyFileTransactedW | 0x303f9800L
  652. CopyFileExA | 0x3e0668beL
  653. CopyFileTransactedA | 0x303f97eaL
  654. GetFirmwareEnvironmentVariableW | 0xe4ca0b4L
  655. SetFirmwareEnvironmentVariableW | 0xa7865dc0L
  656. GetFirmwareEnvironmentVariableA | 0xe4ca09eL
  657. SetFirmwareEnvironmentVariableA | 0xa7865daaL
  658. RegisterWowBaseHandlers | 0x41c36f13L
  659. LocalCompact | 0x4375dc17L
  660. GlobalFix | 0x38974fbd
  661. GlobalUnfix | 0xbcbc21e0L
  662. GlobalWire | 0x4b8a996d
  663. GlobalUnWire | 0x543823d0L
  664. AddSecureMemoryCacheCallback | 0xb99759cfL
  665. RemoveSecureMemoryCacheCallback | 0x6216b914L
  666. EnumSystemFirmwareTables | 0x69032c17L
  667. GetSystemFirmwareTable | 0x650be28fL
  668. GetPhysicallyInstalledSystemMemory | 0x436bc4e5L
  669. _lopen | 0xed5a36e2
  670. _lcreat | 0x97c9049f
  671. _lwrite | 0x9933021b
  672. LocalShrink | 0x175df39fL
  673. GetMailslotInfo | 0xedf28896L
  674. SetMailslotInfo | 0x954bada2L
  675. CreateMailslotW | 0xbfa0f2b5L
  676. CreateMailslotA | 0xbfa0f29fL
  677. LoadStringBaseW | 0xd633ee4eL
  678. UTRegister | 0xc9c5bbf3
  679. SetDllDirectoryW | 0x5399e1d9L
  680. SetDllDirectoryA | 0x5399e1c3L
  681. GetDllDirectoryW | 0xc11c1b4dL
  682. GetDllDirectoryA | 0xc11c1b37L
  683. SetSearchPathMode | 0x4f29ea99L
  684. EnumResourceTypesExW | 0x99928f4bL
  685. EnumResourceTypesW | 0x1ab4708eL
  686. EnumResourceTypesExA | 0x99928f35L
  687. EnumResourceTypesA | 0x1ab47078L
  688. EnumResourceLanguagesExW | 0x299f4b8dL
  689. EnumResourceLanguagesW | 0x4813450L
  690. EnumResourceLanguagesExA | 0x299f4b77L
  691. EnumResourceLanguagesA | 0x481343aL
  692. CreateNamedPipeA | 0x28fe1bedL
  693. GetNamedPipeHandleStateW | 0xbaa3ca3cL
  694. GetNamedPipeInfo | 0x750210a4L
  695. CallNamedPipeW | 0xcf472f4bL
  696. WaitNamedPipeA | 0x85741aeL
  697. GetNamedPipeClientComputerNameA | 0xc9b970a8L
  698. GetNamedPipeClientProcessId | 0x6995cfe3L
  699. GetNamedPipeClientSessionId | 0x2134ebc8L
  700. GetNamedPipeServerProcessId | 0x51741ffbL
  701. GetNamedPipeServerSessionId | 0x9133be0L
  702. GetNamedPipeHandleStateA | 0xbaa3ca26L
  703. CallNamedPipeA | 0xcf472f35L
  704. SetNamedPipeAttribute | 0xadefe1f8L
  705. GetNumaHighestNodeNumber | 0x274efc11L
  706. GetNumaProcessorNodeEx | 0x6bc16299L
  707. GetNumaNodeProcessorMaskEx | 0x931f5f65L
  708. GetNumaAvailableMemoryNodeEx | 0x12ddccf3L
  709. GetNumaProximityNodeEx | 0x982fe16eL
  710. GetNumaNodeNumberFromHandle | 0xc3c27845L
  711. GetNumaProcessorNode | 0xebe1da3cL
  712. GetNumaNodeProcessorMask | 0x19c23408L
  713. GetNumaAvailableMemoryNode | 0xd04be616L
  714. GetNumaProximityNode | 0x93889fd1L
  715. GetSystemWow64DirectoryA | 0xc8727aa7L
  716. CheckNameLegalDOS8Dot3W | 0xff4092b8L
  717. SetVolumeLabelW | 0xc61a15c0L
  718. CheckNameLegalDOS8Dot3A | 0xff4092a2L
  719. SetVolumeLabelA | 0xc61a15aaL
  720. SetSystemPowerState | 0xd9ddd944L
  721. PowerCreateRequest | 0x3eb6864fL
  722. PowerClearRequest | 0xe4aa6422L
  723. PowerSetRequest | 0xd723c147L
  724. GetDevicePowerState | 0xd2ce2283L
  725. IsSystemResumeAutomatic | 0x9726697eL
  726. RequestWakeupLatency | 0x431b988bL
  727. SetMessageWaitingIndicator | 0xa6296606L
  728. WinExec | 0x29a65678
  729. FatalExit | 0x1c873fa7
  730. GetSystemDEPPolicy | 0x6c168d53L
  731. GetProcessorSystemCycleTime | 0x4fc43f89L
  732. GetActiveProcessorGroupCount | 0xbfa5dd57L
  733. GetMaximumProcessorGroupCount | 0x3de1f039L
  734. GetActiveProcessorCount | 0x395531eaL
  735. GetMaximumProcessorCount | 0xc0bf6f8cL
  736. IsBadHugeReadPtr | 0x14714b83L
  737. IsBadHugeWritePtr | 0x3c6eb2b2L
  738. GetProcessShutdownParameters | 0xc6beab94L
  739. GetProcessGroupAffinity | 0x1b84522bL
  740. SetProcessAffinityMask | 0x7ae09b96L
  741. GetProcessPriorityBoost | 0xdff2672dL
  742. GetProcessIoCounters | 0x248b844fL
  743. GetProcessHandleCount | 0x94e285d9L
  744. GetProcessDEPPolicy | 0x1bb8a5edL
  745. SetProcessUserModeExceptionPolicy | 0x48eaf233L
  746. GetProcessUserModeExceptionPolicy | 0x7a4dc227L
  747. GetSystemRegistryQuota | 0x73f9ec6dL
  748. LoadModule | 0x3d26076b
  749. GetSystemTimes | 0xe4eb5b4cL
  750. ReplacePartitionUnit | 0x1799ad5bL
  751. DosPathToSessionPathW | 0x90fb0443L
  752. WTSGetActiveConsoleSessionId | 0x9ee5e903L
  753. DosPathToSessionPathA | 0x90fb042dL
  754. AreFileApisANSI | 0x27e57275L
  755. CancelWaitableTimer | 0xfc9418d5L
  756. ChangeTimerQueueTimer | 0xf6906f72L
  757. ConnectNamedPipe | 0xc003c602L
  758. CreateEventExW | 0xa544e96fL
  759. CreateFileMappingNumaW | 0x558412edL
  760. CreateMutexExA | 0xdcb60a0aL
  761. CreateMutexExW | 0xdcb60a20L
  762. CreateNamedPipeW | 0x28fe1c03L
  763. CreatePipe | 0x9a8deee7
  764. CreateRemoteThread | 0xaa30775dL
  765. CreateSemaphoreExW | 0xf1e5a151L
  766. CreateWaitableTimerExW | 0x73d12097L
  767. DebugBreak | 0xd2542b91
  768. DefineDosDeviceW | 0x53c9441dL
  769. DeleteVolumeMountPointW | 0x6111ec24L
  770. DisconnectNamedPipe | 0x55668f42L
  771. EnumCalendarInfoExW | 0xad1fba74L
  772. EnumCalendarInfoW | 0xe37abd77L
  773. EnumDateFormatsExW | 0xdd4a8708L
  774. EnumLanguageGroupLocalesW | 0x4aa03685L
  775. EnumSystemCodePagesW | 0xcb596921L
  776. EnumSystemLanguageGroupsW | 0x53b3d29aL
  777. EnumSystemLocalesEx | 0x4e189fdfL
  778. EnumSystemLocalesW | 0x863ece99L
  779. EnumUILanguagesW | 0x4421d4a6L
  780. FindFirstFileExA | 0xd08f474cL
  781. FindFirstChangeNotificationA | 0xca3b9fbcL
  782. FindFirstVolumeW | 0xae3b74fdL
  783. FindNextVolumeW | 0x8f60b434L
  784. FindNLSString | 0x7766b8caL
  785. FindStringOrdinal | 0xd27f1686L
  786. FindVolumeClose | 0x29599fb4L
  787. GetComputerNameExA | 0xd252a5f3L
  788. GetCurrencyFormatW | 0xfc94c650L
  789. GetNamedPipeAttribute | 0xe15423ecL
  790. GetNamedPipeClientComputerNameW | 0xc9b970beL
  791. GetProcessIdOfThread | 0x3414963eL
  792. GetDiskFreeSpaceA | 0x5dda62bfL
  793. GetDiskFreeSpaceExA | 0x3dfe2f3cL
  794. SetEnvironmentStringsW | 0xab587907L
  795. GetLogicalDriveStringsW | 0x89478d5bL
  796. GetLongPathNameA | 0xe22f8784L
  797. GetPriorityClass | 0x3986e9ddL
  798. GetProcessPreferredUILanguages | 0xf2904098L
  799. GetQueuedCompletionStatusEx | 0x37e37129L
  800. GetSystemTimeAdjustment | 0x5ee26278L
  801. GetThreadPriorityBoost | 0x672cdbc6L
  802. GetVolumeInformationByHandleW | 0x628946e1L
  803. HeapLock | 0x374bd10c
  804. HeapQueryInformation | 0x8fc157ffL
  805. HeapSummary | 0x939b1c31L
  806. HeapUnlock | 0x4e75a6cf
  807. HeapWalk | 0x37519ed2
  808. IsNLSDefinedString | 0xf1d95ed4L
  809. IsValidLanguageGroup | 0xe8c3b6a2L
  810. MapViewOfFileExNuma | 0x6b76081L
  811. NeedCurrentDirectoryForExePathA | 0xadc6e70L
  812. OpenWaitableTimerW | 0xbde06018L
  813. PulseEvent | 0xe6c60bf0
  814. ReadFileScatter | 0xd5c53297L
  815. ReadFileEx | 0xb7cc6ebe
  816. RemoveDirectoryA | 0x41927229L
  817. RemoveDirectoryW | 0x4192723fL
  818. SetCalendarInfoW | 0xb600ab2eL
  819. SetFileApisToANSI | 0x2b77b7acL
  820. SetFileApisToOEM | 0x2fdd1162L
  821. SetFileValidData | 0xb6dc43bbL
  822. SetLocaleInfoW | 0x14bb8a04L
  823. SetLocalTime | 0x5e40416bL
  824. SetNamedPipeHandleState | 0x87331251L
  825. SetStdHandle | 0x3ce0e4c8L
  826. SetStdHandleEx | 0xf8ad4025L
  827. SetThreadPriorityBoost | 0xc7405b52L
  828. TransactNamedPipe | 0xc1d97cb8L
  829. VerLanguageNameA | 0x5bc4f698L
  830. VerLanguageNameW | 0x5bc4f6aeL
  831. VirtualAllocExNuma | 0x63f15a65L
  832. VirtualProtectEx | 0xd812922aL
  833. VirtualQueryEx | 0xd793eb9fL
  834. WaitNamedPipeW | 0x85741c4L
  835. WriteFileEx | 0xe92ae20dL
  836. WriteFileGather | 0x6c02a20bL
  837. GetDynamicTimeZoneInformation | 0x6b0cc07bL
  838. SetThreadpoolStackInformation | 0x9f62973fL
  839. QueryThreadpoolStackInformation | 0xdabb8c69L
  840. SetProcessAffinityUpdateMode | 0xf02bf5f2L
  841. QueryProcessAffinityUpdateMode | 0x2845eddcL
  842. NlsEventDataDescCreate | 0xd4296901L
  843. NlsWriteEtwEvent | 0xe268910fL
  844. FatalAppExitA | 0x7c48b9a9L
  845. FatalAppExitW | 0x7c48b9bfL
  846. CompareStringEx | 0x11df7500L
  847. EnumCalendarInfoExEx | 0x5117071aL
  848. EnumDateFormatsExEx | 0x869b662eL
  849. EnumTimeFormatsEx | 0x3bce82e2L
  850. FindNLSStringEx | 0xebf81ca7L
  851. GetCurrencyFormatEx | 0x8f2d8e76L
  852. GetEraNameCountedString | 0x7bfe1927L
  853. GetFileMUIInfo | 0x67006e3cL
  854. GetFileMUIPath | 0x67040f5dL
  855. GetFinalPathNameByHandleA | 0x92389065L
  856. GetLocaleInfoEx | 0x4d3a39eL
  857. GetLogicalProcessorInformation | 0x47e780e6L
  858. GetNumberFormatEx | 0xbc099734L
  859. GetSystemDefaultLocaleName | 0x27a25520L
  860. GetSystemPreferredUILanguages | 0x4906fc3eL
  861. GetThreadPreferredUILanguages | 0xdc586f11L
  862. GetUILanguageInfo | 0x14e00a33L
  863. GetUserDefaultLocaleName | 0xc8cc25aL
  864. GetUserPreferredUILanguages | 0x39961738L
  865. IsValidLocaleName | 0x94d5442L
  866. LCMapStringEx | 0xf48a4c86L
  867. LocaleNameToLCID | 0x8bb88cd5L
  868. NotifyMountMgr | 0x99c0f597L
  869. PeekNamedPipe | 0x94f08b9dL
  870. ResolveLocaleName | 0x46613cd6L
  871. RtlCaptureContext | 0x7733eed0L
  872. RtlFillMemory | 0xd133097L
  873. CreateBoundaryDescriptorA | 0x8a12d51dL
  874. AddIntegrityLabelToBoundaryDescriptor | 0xc0eb6113L
  875. CreatePrivateNamespaceA | 0xf2c2c462L
  876. OpenPrivateNamespaceA | 0xab5744e0L
  877. QueryFullProcessImageNameA | 0xd2b32452L
  878. OpenSemaphoreA | 0xc0de7b3cL
  879. CreateWaitableTimerExA | 0x73d12081L
  880. OpenWaitableTimerA | 0xbde06002L
  881. SleepConditionVariableCS | 0xeacba6a1L
  882. SleepConditionVariableSRW | 0x4440bf07L
  883. InitOnceBeginInitialize | 0x8d633df5L
  884. InitOnceComplete | 0xd04fd817L
  885. CreateWaitableTimerA | 0x9463ec4L
  886. SetTermsrvAppInstallMode | 0xd6aec541L
  887. Wow64SetThreadContext | 0x72aaa2b5L
  888. Wow64SuspendThread | 0x3a736026L
  889. GetThreadTimes | 0x9055227fL
  890. GetThreadIOPendingFlag | 0x86b92eb4L
  891. SetThreadGroupAffinity | 0x2d24650L
  892. GetThreadGroupAffinity | 0xa2bec6c4L
  893. SetThreadIdealProcessorEx | 0xe51a7145L
  894. ConvertFiberToThread | 0x1f194e49L
  895. GetThreadIdealProcessorEx | 0xd3f68d39L
  896. Heap32ListFirst | 0xe2b6816cL
  897. Heap32ListNext | 0x44f294c3L
  898. Heap32First | 0x55463d30L
  899. Heap32Next | 0xfad7e807
  900. Toolhelp32ReadProcessMemory | 0x295d19c5L
  901. Thread32First | 0x93049a4aL
  902. Thread32Next | 0x695209e1L
  903. Module32First | 0xa144bdd8L
  904. Module32Next | 0x3b34f3afL
  905. LZInit | 0xbfad9b7f
  906. LZSeek | 0xbfb2f073
  907. LZRead | 0xbfb26387
  908. LZCloseFile | 0x8b0b7161L
  909. LZClose | 0xb4f37961
  910. GetExpandedNameA | 0x40fb1c10L
  911. GetExpandedNameW | 0x40fb1c26L
  912. LZCreateFileW | 0x32edf9b6L
  913. LZOpenFileA | 0xa25a2b9eL
  914. LZOpenFileW | 0xa25a2bb4L
  915. ClearCommError | 0x66325422L
  916. SetupComm | 0xe6cea042
  917. EscapeCommFunction | 0x1a4b8248L
  918. GetCommMask | 0x848c327dL
  919. GetCommModemStatus | 0x131589e7L
  920. GetCommProperties | 0xbfc1c5feL
  921. GetCommState | 0x16893552L
  922. GetCommTimeouts | 0x4b9d398bL
  923. PurgeComm | 0x9212db74
  924. SetCommBreak | 0x60bceb22L
  925. SetCommMask | 0xc4e4b189L
  926. SetCommState | 0x61f195deL
  927. SetCommTimeouts | 0xf2f65e97L
  928. TransmitCommChar | 0x7593e141L
  929. WaitCommEvent | 0x315c23a8L
  930. CommConfigDialogW | 0x1e851aeeL
  931. CommConfigDialogA | 0x1e851ad8L
  932. GetDefaultCommConfigW | 0x39963cc3L
  933. GetDefaultCommConfigA | 0x39963cadL
  934. SetDefaultCommConfigW | 0x631facfL
  935. SetDefaultCommConfigA | 0x631fab9L
  936. ClearCommBreak | 0x65fbd17dL
  937. GetCommConfig | 0xc209c147L
  938. SetCommConfig | 0x7a7e3353L
  939. GetNextVDMCommand | 0x49e921caL
  940. ExitVDM | 0xe2ca28a6
  941. SetVDMCurrentDirectories | 0x4cc2d7b8L
  942. GetVDMCurrentDirectories | 0x99d1452cL
  943. RegisterWowExec | 0x65cc508cL
  944. GetLongPathNameTransactedA | 0x28469b6dL
  945. GetLongPathNameTransactedW | 0x28469b83L
  946. VDMOperationStarted | 0xa64a52f4L
  947. GetBinaryTypeA | 0xfe850e2dL
  948. FindVolumeMountPointClose | 0x64278411L
  949. DeleteVolumeMountPointA | 0x6111ec0eL
  950. FindFirstVolumeA | 0xae3b74e7L
  951. FindNextVolumeA | 0x8f60b41eL
  952. FindFirstVolumeMountPointW | 0xb2eedcdaL
  953. FindNextVolumeMountPointW | 0x7dd9ccd1L
  954. GetVolumeNameForVolumeMountPointA | 0x34d49f7bL
  955. SetVolumeMountPointW | 0x739d125dL
  956. GetVolumePathNameA | 0x6b2fa14cL
  957. FindFirstVolumeMountPointA | 0xb2eedcc4L
  958. FindNextVolumeMountPointA | 0x7dd9ccbbL
  959. SetVolumeMountPointA | 0x739d1247L
  960. GetVolumePathNamesForVolumeNameA | 0xe8f10f3fL
  961. BuildCommDCBAndTimeoutsA | 0xecb44258L
  962. BuildCommDCBA | 0x66a5654bL
  963. BuildCommDCBAndTimeoutsW | 0xecb4426eL
  964. BuildCommDCBW | 0x66a56561L
  965. SetTapePosition | 0x7b69ccd0L
  966. GetTapePosition | 0xd410a7c4L
  967. PrepareTape | 0xf30d47beL
  968. EraseTape | 0xcb5d77bf
  969. CreateTapePartition | 0x410bc47dL
  970. WriteTapemark | 0x6c9d9685L
  971. GetTapeParameters | 0x575de823L
  972. SetTapeParameters | 0x3994802fL
  973. GetTapeStatus | 0x2a88efd3L
  974. OpenJobObjectW | 0x78659e80L
  975. TerminateJobObject | 0xb146c860L
  976. QueryInformationJobObject | 0x3adfd093L
  977. CreateJobSet | 0x682af780L
  978. CreateJobObjectA | 0xb0766c2cL
  979. OpenJobObjectA | 0x78659e6aL
  980. CreateHardLinkW | 0x1892353dL
  981. CreateHardLinkTransactedW | 0xd1acf0e6L
  982. CreateHardLinkA | 0x18923527L
  983. CreateHardLinkTransactedA | 0xd1acf0d0L
  984. GetHandleContext | 0xb0a419d6L
  985. SetHandleContext | 0x4321e062L
  986. ZombifyActCtx | 0xccda5a4cL
  987. FindActCtxSectionStringA | 0x3644ef9aL
  988. SetComPlusPackageInstallStatus | 0xc904f71bL
  989. GetComPlusPackageInstallStatus | 0x95d4ab8fL
  990. BaseCleanupAppcompatCacheSupport | 0x720cd8beL
  991. BaseDumpAppcompatCache | 0xc5716a6fL
  992. BaseFlushAppcompatCache | 0xa92ab69bL
  993. BaseCheckAppcompatCache | 0xd728c677L
  994. BaseInitAppcompatCacheSupport | 0x3b2ad44aL
  995. RegisterApplicationRecoveryCallback | 0xc1deb5aL
  996. UnregisterApplicationRecoveryCallback | 0x562c013dL
  997. UnregisterApplicationRestart | 0x30044ee6L
  998. GetApplicationRestartSettings | 0xb042fd0fL
  999. ApplicationRecoveryFinished | 0xf29359f2L
  1000. ApplicationRecoveryInProgress | 0x331530b4L
  1001. WerpInitiateRemoteRecovery | 0x55580455L
  1002. WerRegisterFile | 0x78ace958L
  1003. WerUnregisterFile | 0x753b561bL
  1004. WerRegisterRuntimeExceptionModule | 0xdcaeaf71L
  1005. WerUnregisterRuntimeExceptionModule | 0x6a3bfef4L
  1006. WerpNotifyLoadStringResource | 0xfa82e29bL
  1007. WerpNotifyUseStringResource | 0xf7bfdcc8L
  1008. WerpCleanupMessageMapping | 0x5d2b019cL
  1009. WerpNotifyLoadStringResourceEx | 0xa6c5feb8L
  1010. WerpStringLookup | 0x82372e94L
  1011. QueryThreadCycleTime | 0x84b91eb2L
  1012. QueryProcessCycleTime | 0x69a3ad59L
  1013. QueryIdleProcessorCycleTime | 0xcb8ba418L
  1014. QueryIdleProcessorCycleTimeEx | 0xdd051375L
  1015. QueryUnbiasedInterruptTime | 0x8de8d402L
  1016. SetEnvironmentStringsA | 0xab5878f1L
  1017. GetProcessWorkingSetSizeEx | 0x9dcb56c9L
  1018. GetProcessWorkingSetSize | 0x3981026cL
  1019. SetSystemFileCacheSize | 0x60d9a2c5L
  1020. AllocateUserPhysicalPages | 0x9c2b3fd6L
  1021. AllocateUserPhysicalPagesNuma | 0x3d000087L
  1022. FreeUserPhysicalPages | 0xe9fdbf3L
  1023. MapUserPhysicalPages | 0x2144566fL
  1024. MapUserPhysicalPagesScatter | 0xfe002c25L
  1025. GetWriteWatch | 0x27b8f3c7L
  1026. ResetWriteWatch | 0xa570578aL
  1027. GetLargePageMinimum | 0x468441a9L
  1028. QueryMemoryResourceNotification | 0x3c855ba3L
  1029. GetSystemFileCacheSize | 0xc62339L
  1030. UnregisterWait | 0x9b9c8042L
  1031. SetTimerQueueTimer | 0x41bdce78L
  1032. DeleteTimerQueue | 0xa3b4107eL
  1033. CancelTimerQueueTimer | 0x516229d2L
  1034. RaiseFailFastException | 0x76c4b8b2L
  1035. InitializeContext | 0x56f5bbdcL
  1036. CopyContext | 0x65439945L
  1037. GetEnabledXStateFeatures | 0x743c8cc8L
  1038. LocateXStateFeature | 0xd22fa202L
  1039. GetXStateFeaturesMask | 0x126ee8a9L
  1040. SetXStateFeaturesMask | 0xdf0aa6b5L
  1041. EnableThreadProfiling | 0x3959cb6eL
  1042. DisableThreadProfiling | 0x14a04dbL
  1043. QueryThreadProfiling | 0x874f7a1dL
  1044. ReadThreadProfilingData | 0x1670879dL
  1045. UpdateResourceW | 0x7529d5c7L
  1046. UpdateResourceA | 0x7529d5b1L
  1047. EndUpdateResourceW | 0x450512deL
  1048. EndUpdateResourceA | 0x450512c8L
  1049. BeginUpdateResourceW | 0x2f321decL
  1050. BeginUpdateResourceA | 0x2f321dd6L
  1051. GetCalendarDaysInMonth | 0x28fb668dL
  1052. IsValidCalDateTime | 0x74e2312eL
  1053. IsCalendarLeapYear | 0x8f4333aeL
  1054. IsCalendarLeapMonth | 0x76d63723L
  1055. IsCalendarLeapDay | 0xd5cb61fbL
  1056. UpdateCalendarDayOfWeek | 0x646de781L
  1057. ConvertCalDateTimeToSystemTime | 0x1a8d0d1aL
  1058. ConvertNLSDayOfWeekToWin32DayOfWeek | 0x49dd027L
  1059. CompareCalendarDates | 0xd6196b57L
  1060. GetCalendarDifferenceInDays | 0x54484552L
  1061. GetCalendarSupportedDateRange | 0xf63895f0L
  1062. GetCalendarMonthsInYear | 0xa77a1680L
  1063. ConvertSystemTimeToCalDateTime | 0x63027a7aL
  1064. GetCalendarDateFormatEx | 0xb3bd7be3L
  1065. GetCalendarDateFormat | 0xc2931906L
  1066. AdjustCalendarDate | 0xf3d6b6c8L
  1067. GetCalendarWeekNumber | 0xea6281b4L
  1068. EnumCalendarInfoExA | 0xad1fba5eL
  1069. EnumTimeFormatsA | 0x8d72dd26L
  1070. EnumDateFormatsA | 0x6fa154f5L
  1071. EnumDateFormatsExA | 0xdd4a86f2L
  1072. EnumSystemLanguageGroupsA | 0x53b3d284L
  1073. EnumLanguageGroupLocalesA | 0x4aa0366fL
  1074. EnumUILanguagesA | 0x4421d490L
  1075. EnumSystemCodePagesA | 0xcb59690bL
  1076. GetGeoInfoA | 0x35fe32adL
  1077. SetLocaleInfoA | 0x14bb89eeL
  1078. SetCalendarInfoA | 0xb600ab18L
  1079. GetCurrencyFormatA | 0xfc94c63aL
  1080. FoldStringA | 0x9d919382L
  1081. GetCPInfoExA | 0xab09a882L
  1082. EnumSystemGeoID | 0x190f8f87L
  1083. SetUserGeoID | 0xe6af96b8L
  1084. GetGeoInfoW | 0x35fe32c3L
  1085. GetTimeFormatEx | 0xb62d453aL
  1086. GetDateFormatEx | 0x985bbd09L
  1087. VerifyScripts | 0x6b9811e2L
  1088. NormalizeString | 0xfd7be12dL
  1089. IsNormalizedString | 0xf9d0f66dL
  1090. IdnToNameprepUnicode | 0x17658fc2L
  1091. GetStringScripts | 0x5ad613a4L
  1092. SetThreadPreferredUILanguages | 0xe5a7791dL
  1093. SetProcessPreferredUILanguages | 0x25c08c24L
  1094. NotifyUILanguageChange | 0xba56b946L
  1095. GetNLSVersionEx | 0xbd970815L
  1096. SortCloseHandle | 0xdc6524fL
  1097. DelayLoadFailureHook | 0x8f46570dL
  1098. UTUnRegister | 0xc49795d6L
  1099. OpenProfileUserMapping | 0x44c11b33L
  1100. LZDone | 0xbfaae271
  1101. SetConsoleMaximumWindowSize | 0x4fe38a55L
  1102. RegFlushKey | 0x46314e8eL
  1103. RegDisablePredefinedCacheEx | 0xde4c2bdeL
  1104. RegDeleteKeyExA | 0xa048989dL
  1105. RegDeleteTreeW | 0x3bd2a93dL
  1106. RegDeleteTreeA | 0x3bd2a927L
  1107. RegGetValueA | 0x79fe96e1L
  1108. RegLoadKeyA | 0x86e4efedL
  1109. RegLoadKeyW | 0x86e4f003L
  1110. RegUnLoadKeyA | 0xa4444310L
  1111. RegUnLoadKeyW | 0xa4444326L
  1112. RegLoadMUIStringA | 0xf8b5a2e6L
  1113. RegRestoreKeyA | 0x2cb543b1L
  1114. RegRestoreKeyW | 0x2cb543c7L
  1115. RegSaveKeyExA | 0x3fbd3cf9L
  1116. RegSaveKeyExW | 0x3fbd3d0fL
  1117. BasepAnsiStringToDynamicUnicodeString | 0xa6208af8L
  1118. BaseVerifyUnicodeString | 0xa0253c73L
  1119. BaseGetNamedObjectDirectory | 0xadf05191L
  1120. BasepAllocateActivationContextActivati | 0x116cf01L
  1121. BasepFreeActivationContextActivationBl | 0x1ef33489L
  1122. AddConsoleAliasW | 0xe333a62L
  1123. AddConsoleAliasA | 0xe333a4cL
  1124. GetConsoleAliasW | 0xaebd2579L
  1125. GetConsoleAliasA | 0xaebd2563L
  1126. GetConsoleAliasesLengthW | 0x75286c13L
  1127. GetConsoleAliasesLengthA | 0x75286bfdL
  1128. GetConsoleAliasExesLengthW | 0xd6ff9e90L
  1129. GetConsoleAliasExesLengthA | 0xd6ff9e7aL
  1130. GetConsoleAliasesW | 0x529cb271L
  1131. GetConsoleAliasesA | 0x529cb25bL
  1132. GetConsoleAliasExesW | 0x6a530b2eL
  1133. GetConsoleAliasExesA | 0x6a530b18L
  1134. ExpungeConsoleCommandHistoryW | 0x4711e5cL
  1135. ExpungeConsoleCommandHistoryA | 0x4711e46L
  1136. SetConsoleNumberOfCommandsW | 0x126b738bL
  1137. SetConsoleNumberOfCommandsA | 0x126b7375L
  1138. GetConsoleCommandHistoryLengthW | 0x95749d62L
  1139. GetConsoleCommandHistoryLengthA | 0x95749d4cL
  1140. GetConsoleCommandHistoryW | 0x1b6dd480L
  1141. GetConsoleCommandHistoryA | 0x1b6dd46aL
  1142. GetConsoleOriginalTitleA | 0x79b3cab0L
  1143. GetConsoleOriginalTitleW | 0x79b3cac6L
  1144. GetConsoleTitleA | 0xdadf14fbL
  1145. SetConsoleTitleA | 0x6d5cdb87L
  1146. SetConsoleTitleW | 0x6d5cdb9dL
  1147. GetConsoleInputExeNameW | 0xf8b5f5c2L
  1148. GetConsoleInputExeNameA | 0xf8b5f5acL
  1149. SetConsoleInputExeNameA | 0x5b3966b8L
  1150. FreeConsole | 0x8afb8c5aL
  1151. AllocConsole | 0xcddb7fc3L
  1152. AttachConsole | 0xefb65e6dL
  1153. CtrlRoutine | 0xe641cc00L
  1154. SetLastConsoleEventActive | 0x5df21416L
  1155. PeekConsoleInputA | 0xb80db1eeL
  1156. PeekConsoleInputW | 0xb80db204L
  1157. ReadConsoleInputA | 0xb1e22b85L
  1158. ReadConsoleInputW | 0xb1e22b9bL
  1159. ReadConsoleInputExA | 0xb31b4182L
  1160. ReadConsoleInputExW | 0xb31b4198L
  1161. WriteConsoleInputA | 0x6871eff4L
  1162. WriteConsoleInputW | 0x6871f00aL
  1163. ReadConsoleOutputW | 0xcc9ed45cL
  1164. ReadConsoleOutputA | 0xcc9ed446L
  1165. WriteConsoleOutputW | 0x552726abL
  1166. WriteConsoleOutputA | 0x55272695L
  1167. ReadConsoleOutputCharacterA | 0xc9f9fc53L
  1168. ReadConsoleOutputCharacterW | 0xc9f9fc69L
  1169. ReadConsoleOutputAttribute | 0x73019a79L
  1170. WriteConsoleOutputCharacterA | 0xd415782L
  1171. WriteConsoleOutputCharacterW | 0xd415798L
  1172. WriteConsoleOutputAttribute | 0xd222cbc8L
  1173. FillConsoleOutputCharacterA | 0x792ef9deL
  1174. FillConsoleOutputCharacterW | 0x792ef9f4L
  1175. FillConsoleOutputAttribute | 0x137792a4L
  1176. GetConsoleInputWaitHandle | 0xb2a1eae9L
  1177. OpenConsoleW | 0xb0a1eee1L
  1178. ReadConsoleA | 0xeb798e95L
  1179. ReadConsoleW | 0xeb798eabL
  1180. ScrollConsoleScreenBufferA | 0xaacae9a2L
  1181. ScrollConsoleScreenBufferW | 0xaacae9b8L
  1182. SetConsoleOutputCP | 0x36c593e8L
  1183. GetConsoleKeyboardLayoutNameA | 0xffa64c49L
  1184. GetConsoleKeyboardLayoutNameW | 0xffa64c5fL
  1185. UnregisterConsoleIME | 0x4091841bL
  1186. SetConsolePalette | 0xd1d1c073L
  1187. WriteConsoleInputVDMA | 0xe2720adbL
  1188. WriteConsoleInputVDMW | 0xe2720af1L
  1189. VDMConsoleOperation | 0xf549c4d0L
  1190. CloseConsoleHandle | 0x51a5baL
  1191. DuplicateConsoleHandle | 0x84b5781fL
  1192. CreateConsoleScreenBuffer | 0xfdcbf326L
  1193. InvalidateConsoleDIBits | 0x30fe0018L
  1194. GetConsoleHistoryInfo | 0x98eec556L
  1195. GetConsoleScreenBufferInfoEx | 0x2d09127bL
  1196. GetConsoleProcessList | 0x66066a33L
  1197. GetNumberOfConsoleFonts | 0x4c52a2c0L
  1198. GetNumberOfConsoleInputEvents | 0x2fb6b97bL
  1199. GetLargestConsoleWindowSize | 0x20b6b09dL
  1200. GetConsoleCursorInfo | 0x3c70f302L
  1201. GetConsoleSelectionInfo | 0x3e74ac0aL
  1202. GetNumberOfConsoleMouseButtons | 0xdae7538eL
  1203. GetConsoleFontInfo | 0xe3bf4a9bL
  1204. GetConsoleFontSize | 0xe3c4b3aaL
  1205. GetCurrentConsoleFont | 0xff6adb72L
  1206. GetCurrentConsoleFontEx | 0x858f894fL
  1207. GenerateConsoleCtrlEvent | 0xbc6641daL
  1208. SetConsoleActiveScreenBuffer | 0xb12770faL
  1209. FlushConsoleInputBuffer | 0x336889e4L
  1210. SetConsoleScreenBufferSize | 0x6bfdf839L
  1211. SetConsoleCursorPosition | 0xb5b72bf7L
  1212. SetConsoleCursorInfo | 0xce471f8eL
  1213. SetConsoleHistoryInfo | 0x658a8362L
  1214. SetConsoleScreenBufferInfoEx | 0x4c590b07L
  1215. SetConsoleWindowInfo | 0x75eec1c8L
  1216. SetCurrentConsoleFontEx | 0xe812fa5bL
  1217. SetConsoleFont | 0xfb9ab57bL
  1218. SetConsoleIcon | 0xfb9c27adL
  1219. GetConsoleCP | 0x7378bb8bL
  1220. SetConsoleCP | 0xbee11c17L
  1221. GetConsoleWindow | 0xe1db2410L
  1222. SetConsoleCursor | 0x468d5562L
  1223. ShowConsoleCursor | 0xaf888e37L
  1224. ConsoleMenuControl | 0x5cdbe76eL
  1225. RegisterConsoleVDM | 0x6fccfac4L
  1226. SetConsoleDisplayMode | 0x907c275fL
  1227. GetConsoleHardwareState | 0x5a30d967L
  1228. SetConsoleHardwareState | 0xbcb44a73L
  1229. GetConsoleDisplayMode | 0xc3e06953L
  1230. SetConsoleKeyShortcuts | 0x3e6bb9fcL
  1231. SetConsoleMenuClose | 0x9ca1d34fL
  1232. GetConsoleCharType | 0xe5b119b8L
  1233. SetConsoleLocalEUDC | 0xe81fff50L
  1234. SetConsoleCursorMode | 0xce495507L
  1235. GetConsoleCursorMode | 0x3c73287bL
  1236. RegisterConsoleOS2 | 0x6fccded1L
  1237. SetConsoleOS2OemFormat | 0xeb2513a2L
  1238. GetConsoleNlsMode | 0x6fc0d8eaL
  1239. SetConsoleNlsMode | 0x51f770f6L
  1240. K32EmptyWorkingSet | 0x3094a051L
  1241. K32QueryWorkingSet | 0xe6f36f18L
  1242. K32QueryWorkingSetEx | 0x718b9e75L
  1243. K32EnumDeviceDrivers | 0x2b29d699L
  1244. K32GetDeviceDriverFileNameA | 0xb3ecacd3L
  1245. K32GetDeviceDriverBaseNameA | 0x9ac3eb0eL
  1246. K32GetDeviceDriverFileNameW | 0xb3ecace9L
  1247. K32GetDeviceDriverBaseNameW | 0x9ac3eb24L
  1248. K32GetPerformanceInfo | 0xd478ec33L
  1249. K32EnumPageFilesW | 0x890ff251L
  1250. K32EnumPageFilesA | 0x890ff23bL
  1251. K32EnumProcessModulesEx | 0x7818711fL
  1252. K32GetModuleInformation | 0xd6caa3a1L
  1253. K32GetProcessMemoryInfo | 0x446a0b79L
  1254. K32InitializeProcessForWsWatch | 0x7889b1eeL
  1255. K32GetWsChanges | 0x9a56aa38L
  1256. K32GetWsChangesEx | 0x8aaa2195L
  1257. K32GetProcessImageFileNameW | 0xd12d782fL
  1258. K32GetProcessImageFileNameA | 0xd12d7819L
  1259. K32GetMappedFileNameW | 0xe66e8384L
  1260. K32GetMappedFileNameA | 0xe66e836eL
  1261. GetCalendarInfoEx | 0x93df7708L
  1262. NlsCheckPolicy | 0x60c88760L
  1263. NlsUpdateLocale | 0x763e1a45L
  1264. NlsUpdateSystemLocale | 0xf3e5c96aL
  1265.  
  1266. ntdll export | hash
  1267. --- | ---
  1268. DbgUserBreakPoint | 0x28ee1420L
  1269. DbgBreakPoint | 0x321c9581L
  1270. KiUserApcDispatcher | 0x6eabdf93L
  1271. KiUserCallbackDispatcher | 0xde5fd7ccL
  1272. KiUserExceptionDispatcher | 0xbfc3faaeL
  1273. KiRaiseUserExceptionDispatcher | 0x25e54bc2L
  1274. RtlUserThreadStart | 0xdaa22b3cL
  1275. KiFastSystemCall | 0x50398a88L
  1276. KiFastSystemCallRet | 0xdd9147d3L
  1277. KiIntSystemCall | 0x29c07265L
  1278. NtMapUserPhysicalPagesScatter | 0xa4b5b2a7L
  1279. NtWaitForSingleObject | 0x4c6dc63cL
  1280. NtCallbackReturn | 0xf0dfb354L
  1281. NtReadFile | 0x2e979ae3
  1282. NtDeviceIoControlFile | 0xa40c4bd0L
  1283. NtWriteFile | 0xd69326b2L
  1284. NtRemoveIoCompletion | 0x7099b467L
  1285. NtReleaseSemaphore | 0xd03a3c2cL
  1286. NtReplyWaitReceivePort | 0xf2eafe90L
  1287. NtReplyPort | 0x9a6b06b8L
  1288. NtSetInformationThread | 0x54212e31L
  1289. NtSetEvent | 0x4514bd95
  1290. NtClose | 0x8b8e133d
  1291. NtQueryObject | 0x218116f4L
  1292. NtQueryInformationFile | 0x4725f863L
  1293. NtOpenKey | 0x4bb73e02
  1294. NtEnumerateValueKey | 0xa1ed48d3L
  1295. NtFindAtom | 0x6dbb14d9
  1296. NtQueryDefaultLocale | 0x8b004932L
  1297. NtQueryKey | 0x1c670286
  1298. NtQueryValueKey | 0xb4c18a83L
  1299. NtAllocateVirtualMemory | 0x6793c34cL
  1300. NtQueryInformationProcess | 0xd034fc62L
  1301. NtWaitForMultipleObjects32 | 0xa4339e3eL
  1302. NtWriteFileGather | 0x9090d58dL
  1303. NtSetInformationProcess | 0xbb7a48b8L
  1304. NtCreateKey | 0x5dbf4a84L
  1305. NtFreeVirtualMemory | 0x471aa7e9L
  1306. NtImpersonateClientOfPort | 0x5f1af9a7L
  1307. NtReleaseMutant | 0x29567961L
  1308. NtQueryInformationToken | 0x2ce5a244L
  1309. NtRequestWaitReplyPort | 0xa1f611b6L
  1310. NtQueryVirtualMemory | 0xe39d8e5dL
  1311. NtOpenThreadToken | 0xfc45b972L
  1312. NtQueryInformationThread | 0xc91f149bL
  1313. NtOpenProcess | 0x5003c058L
  1314. NtSetInformationFile | 0x6e88b479L
  1315. NtMapViewOfSection | 0x231f196aL
  1316. NtAccessCheckAndAuditAlarm | 0x4553ab4eL
  1317. NtUnmapViewOfSection | 0x595014adL
  1318. NtReplyWaitReceivePortEx | 0x59a4ebedL
  1319. NtTerminateProcess | 0x1703ab2fL
  1320. NtSetEventBoostPriority | 0x1e484feL
  1321. NtReadFileScatter | 0xfa536619L
  1322. NtOpenThreadTokenEx | 0x2499e74fL
  1323. NtOpenProcessTokenEx | 0xb1bef7f6L
  1324. NtQueryPerformanceCounter | 0x9f90aa8fL
  1325. NtEnumerateKey | 0x6a5e8ed6L
  1326. NtOpenFile | 0xc29c5019
  1327. NtDelayExecution | 0xa49084aL
  1328. NtQueryDirectoryFile | 0xa9053f72L
  1329. NtQuerySystemInformation | 0xee4f73a8L
  1330. NtOpenSection | 0x17cfa34eL
  1331. NtQueryTimer | 0xd2d6a47eL
  1332. NtFsControlFile | 0xf89ddf61L
  1333. NtWriteVirtualMemory | 0x95f3a792L
  1334. NtCloseObjectAuditAlarm | 0xbf879458L
  1335. NtDuplicateObject | 0x2388ee19L
  1336. NtQueryAttributesFile | 0x8810a944L
  1337. NtClearEvent | 0x53e826f0L
  1338. NtReadVirtualMemory | 0xc24062e3L
  1339. NtOpenEvent | 0x161b3f7bL
  1340. NtAdjustPrivilegesToken | 0x6921f9cdL
  1341. NtDuplicateToken | 0x3000ecc3L
  1342. NtContinue | 0x780a612c
  1343. NtQueryDefaultUILanguage | 0xdc921ae4L
  1344. NtQueueApcThread | 0xd4612238L
  1345. NtYieldExecution | 0x33803cf2L
  1346. NtAddAtom | 0xf9dfee01
  1347. NtCreateEvent | 0xca58747dL
  1348. NtQueryVolumeInformationFile | 0xf1bb8e3bL
  1349. NtCreateSection | 0xd02e20d0L
  1350. NtFlushBuffersFile | 0x832e7ed6L
  1351. NtApphelpCacheControl | 0x9dfbae06L
  1352. NtCreateProcessEx | 0xa9e925b7L
  1353. NtCreateThread | 0x376e0713L
  1354. NtIsProcessInJob | 0x57711e94L
  1355. NtProtectVirtualMemory | 0x82962c8L
  1356. NtQuerySection | 0x8c1609d2L
  1357. NtResumeThread | 0x2c7b3d30L
  1358. NtTerminateThread | 0xac3c9dc8L
  1359. NtReadRequestData | 0xc53523c6L
  1360. NtCreateFile | 0x15a5ecdbL
  1361. NtQueryEvent | 0xd1ce34ffL
  1362. NtWriteRequestData | 0xca170b5L
  1363. NtOpenDirectoryObject | 0x145af005L
  1364. NtAccessCheckByTypeAndAuditAlarm | 0xd60c078bL
  1365. NtQuerySystemTime | 0xf6096a71L
  1366. NtWaitForMultipleObjects | 0x3d456539L
  1367. NtSetInformationObject | 0x48066d50L
  1368. NtCancelIoFile | 0x93580865L
  1369. NtTraceEvent | 0x1e2085f8L
  1370. NtPowerInformation | 0xa3561b1aL
  1371. NtSetValueKey | 0xf52d5359L
  1372. NtCancelTimer | 0x53b70aeL
  1373. NtSetTimer | 0x461d2d14
  1374. NtAcceptConnectPort | 0xee791d66L
  1375. NtAccessCheck | 0x1e9116d7L
  1376. NtAccessCheckByType | 0xd164cbf4L
  1377. NtAccessCheckByTypeResultList | 0x13327d4fL
  1378. NtAccessCheckByTypeResultListAndAuditA | 0xfd50f31aL
  1379. NtAccessCheckByTypeResultListAndAuditA | 0xfd50f31aL
  1380. NtAddBootEntry | 0x180024b6L
  1381. NtAddDriverEntry | 0xf255cf2eL
  1382. NtAdjustGroupsToken | 0x917fc8f3L
  1383. NtAlertResumeThread | 0x482e8408L
  1384. NtAlertThread | 0x328e39d7L
  1385. NtAllocateLocallyUniqueId | 0xc9d6a620L
  1386. NtAllocateReserveObject | 0x9c940c5fL
  1387. NtAllocateUserPhysicalPages | 0x7b693dd8L
  1388. NtAllocateUuids | 0x67d2f656L
  1389. NtAlpcAcceptConnectPort | 0x44fbb3c6L
  1390. NtAlpcCancelMessage | 0xad187472L
  1391. NtAlpcConnectPort | 0x6143cbb6L
  1392. NtAlpcCreatePort | 0x5bf48560L
  1393. NtAlpcCreatePortSection | 0x95b856b5L
  1394. NtAlpcCreateResourceReserve | 0x352c38dfL
  1395. NtAlpcCreateSectionView | 0xdfa593ebL
  1396. NtAlpcCreateSecurityContext | 0x1981b6b8L
  1397. NtAlpcDeletePortSection | 0xedd43314L
  1398. NtAlpcDeleteResourceReserve | 0xb68d2cbeL
  1399. NtAlpcDeleteSectionView | 0x37c1704aL
  1400. NtAlpcDeleteSecurityContext | 0x9ae2aa97L
  1401. NtAlpcDisconnectPort | 0x5bb5b9b6L
  1402. NtAlpcImpersonateClientOfPort | 0x8c8cd807L
  1403. NtAlpcOpenSenderProcess | 0x104f0df9L
  1404. NtAlpcOpenSenderThread | 0x10e1cf52L
  1405. NtAlpcQueryInformation | 0xa28819c3L
  1406. NtAlpcQueryInformationMessage | 0xf8b629c8L
  1407. NtAlpcRevokeSecurityContext | 0x1554bf70L
  1408. NtAlpcSendWaitReceivePort | 0xa4a8a58eL
  1409. NtAlpcSetInformation | 0x7f9e22d9L
  1410. NtAreMappedFilesTheSame | 0xf1881b90L
  1411. NtAssignProcessToJobObject | 0x1c46df40L
  1412. NtCancelIoFileEx | 0xc97bbf02L
  1413. NtCancelSynchronousIoFile | 0x9edf8010L
  1414. NtCommitComplete | 0xab54ac89L
  1415. NtCommitEnlistment | 0x7110e9d3L
  1416. NtCommitTransaction | 0xe2b88016L
  1417. NtCompactKeys | 0x81f5db8aL
  1418. NtCompareTokens | 0x41b85862L
  1419. NtCompleteConnectPort | 0x72a802fL
  1420. NtCompressKey | 0xa3419b1cL
  1421. NtConnectPort | 0x51da7d56L
  1422. NtCreateDebugObject | 0x4b11f539L
  1423. NtCreateDirectoryObject | 0x3517cf87L
  1424. NtCreateEnlistment | 0x1277585eL
  1425. NtCreateEventPair | 0x7275f3e9L
  1426. NtCreateIoCompletion | 0x2c4c8badL
  1427. NtCreateJobObject | 0x12a14e0dL
  1428. NtCreateJobSet | 0x20900a42L
  1429. NtCreateKeyTransacted | 0x475fc28dL
  1430. NtCreateKeyedEvent | 0xb77ab0cfL
  1431. NtCreateMailslotFile | 0x3ebc0960L
  1432. NtCreateMutant | 0x280632b4L
  1433. NtCreateNamedPipeFile | 0xdf32e02eL
  1434. NtCreatePagingFile | 0xaaa65391L
  1435. NtCreatePort | 0x15ab8300L
  1436. NtCreatePrivateNamespace | 0x531f3143L
  1437. NtCreateProcess | 0x8623ddaL
  1438. NtCreateProfile | 0x863f30cL
  1439. NtCreateProfileEx | 0xb12cef69L
  1440. NtCreateResourceManager | 0x41f0c33eL
  1441. NtCreateSemaphore | 0x6a28d89fL
  1442. NtCreateSymbolicLinkObject | 0xbee5ff42L
  1443. NtCreateThreadEx | 0xcb0c2130L
  1444. NtCreateTimer | 0xcb60e3fcL
  1445. NtCreateToken | 0xcb6425bcL
  1446. NtCreateTransaction | 0xb0ecc001L
  1447. NtCreateTransactionManager | 0x4cdcbbbcL
  1448. NtCreateUserProcess | 0x5f8e4559L
  1449. NtCreateWaitablePort | 0x25b08c89L
  1450. NtCreateWorkerFactory | 0x35e46bedL
  1451. NtDebugActiveProcess | 0x807b00a9L
  1452. NtDebugContinue | 0x9a696173L
  1453. NtDeleteAtom | 0xd911f76bL
  1454. NtDeleteBootEntry | 0x3c22a060L
  1455. NtDeleteDriverEntry | 0xa905dd58L
  1456. NtDeleteFile | 0xd914861aL
  1457. NtDeleteKey | 0xf71037e3L
  1458. NtDeleteObjectAuditAlarm | 0xf591b4b5L
  1459. NtDeletePrivateNamespace | 0x9ea102L
  1460. NtDeleteValueKey | 0x1b63a200L
  1461. NtDisableLastKnownGood | 0x416080e5L
  1462. NtDisplayString | 0xde1f21d4L
  1463. NtDrawText | 0x2d127bda
  1464. NtEnableLastKnownGood | 0x1b92f678L
  1465. NtEnumerateBootEntries | 0x10af9bbbL
  1466. NtEnumerateDriverEntries | 0x2aa43f73L
  1467. NtEnumerateSystemEnvironmentValuesEx | 0xb9f03d34L
  1468. NtEnumerateTransactionObject | 0xe8cf2eaaL
  1469. NtExtendSection | 0xce0ccc84L
  1470. NtFilterToken | 0x8b0e8feeL
  1471. NtFlushInstallUILanguage | 0x57bd5022L
  1472. NtFlushInstructionCache | 0x80183adfL
  1473. NtFlushKey | 0x66220a32
  1474. NtFlushProcessWriteBuffers | 0x713a0560L
  1475. NtFlushVirtualMemory | 0xf6571d09L
  1476. NtFlushWriteBuffer | 0x40f6b26eL
  1477. NtFreeUserPhysicalPages | 0xd6db28f5L
  1478. NtFreezeRegistry | 0xd1b675a1L
  1479. NtFreezeTransactions | 0x896637c1L
  1480. NtGetContextThread | 0x9e0e1a44L
  1481. NtGetCurrentProcessorNumber | 0xfbd50d53L
  1482. NtGetDevicePowerState | 0x326e4705L
  1483. NtGetMUIRegistryInfo | 0xb0377f17L
  1484. NtGetNextProcess | 0x62b37525L
  1485. NtGetNextThread | 0x8f8000feL
  1486. NtGetNlsSectionPtr | 0x59ce419fL
  1487. NtGetNotificationResourceManager | 0xe68dfcd1L
  1488. NtGetPlugPlayEvent | 0x80010ab7L
  1489. NtGetWriteWatch | 0xecc05ec9L
  1490. NtImpersonateAnonymousToken | 0xe79fb9f8L
  1491. NtImpersonateThread | 0x1b20b786L
  1492. NtInitializeNlsFiles | 0x1c0aa3f9L
  1493. NtInitializeRegistry | 0x98bb5fd2L
  1494. NtInitiatePowerAction | 0x74d30849L
  1495. NtIsSystemResumeAutomatic | 0x5b68ff00L
  1496. NtIsUILanguageComitted | 0x2b40dcdeL
  1497. NtListenPort | 0xa17c45dbL
  1498. NtLoadDriver | 0xa37e1ed3L
  1499. NtLoadKey | 0x62258150
  1500. NtLoadKey2 | 0xa6d5ab82
  1501. NtLoadKeyEx | 0x818b1eadL
  1502. NtLockFile | 0xabfbf9f0
  1503. NtLockProductActivationKeys | 0xd5df505fL
  1504. NtLockRegistryKey | 0xcf7b0872L
  1505. NtLockVirtualMemory | 0xb0890090L
  1506. NtMakePermanentObject | 0x22ca85a6L
  1507. NtMakeTemporaryObject | 0x711c129fL
  1508. NtMapCMFModule | 0x6b74ff81L
  1509. NtMapUserPhysicalPages | 0x74e90b31L
  1510. NtModifyBootEntry | 0x98be52f5L
  1511. NtModifyDriverEntry | 0x9b58892dL
  1512. NtNotifyChangeDirectoryFile | 0xfe21e71bL
  1513. NtNotifyChangeKey | 0xef5952efL
  1514. NtNotifyChangeMultipleKeys | 0x4f15860eL
  1515. NtNotifyChangeSession | 0x383d626aL
  1516. NtOpenEnlistment | 0x8a06b21cL
  1517. NtOpenEventPair | 0x28820de7L
  1518. NtOpenIoCompletion | 0xc5194cebL
  1519. NtOpenJobObject | 0xc8ad680bL
  1520. NtOpenKeyEx | 0x167ecfdfL
  1521. NtOpenKeyTransacted | 0xf9c4ab8bL
  1522. NtOpenKeyTransactedEx | 0x7d9dc3a8L
  1523. NtOpenKeyedEvent | 0x2f0a0a8dL
  1524. NtOpenMutant | 0xec225d72L
  1525. NtOpenObjectAuditAlarm | 0xfb97534L
  1526. NtOpenPrivateNamespace | 0x1ac66181L
  1527. NtOpenProcessToken | 0x7bd07459L
  1528. NtOpenResourceManager | 0x2133e3bcL
  1529. NtOpenSemaphore | 0x2034f29dL
  1530. NtOpenSession | 0x18f09efdL
  1531. NtOpenSymbolicLinkObject | 0xd1a3700L
  1532. NtOpenThread | 0xfb8a31d1L
  1533. NtOpenTimer | 0x1723aefaL
  1534. NtOpenTransaction | 0x1a67517fL
  1535. NtOpenTransactionManager | 0x9b10f37aL
  1536. NtPlugPlayControl | 0x1b9cd576L
  1537. NtPrePrepareComplete | 0x4393ae96L
  1538. NtPrePrepareEnlistment | 0x1518a320L
  1539. NtPrepareComplete | 0x67a9e36fL
  1540. NtPrepareEnlistment | 0x978f7239L
  1541. NtPrivilegeCheck | 0xc758b06cL
  1542. NtPrivilegeObjectAuditAlarm | 0x16c1cac9L
  1543. NtPrivilegedServiceAuditAlarm | 0x2bfb61a7L
  1544. NtPropagationComplete | 0x947045e4L
  1545. NtPropagationFailed | 0x1b4af730L
  1546. NtPulseEvent | 0x61e38632L
  1547. NtQueryBootEntryOrder | 0xd6c4a4ffL
  1548. NtQueryBootOptions | 0x4d749b7dL
  1549. NtQueryDebugFilterState | 0x60c1a1ebL
  1550. NtQueryDirectoryObject | 0x13d19a89L
  1551. NtQueryDriverEntryOrder | 0x73c779b7L
  1552. NtQueryEaFile | 0xa07bca3L
  1553. NtQueryFullAttributesFile | 0x15863797L
  1554. NtQueryInformationAtom | 0x472369b4L
  1555. NtQueryInformationEnlistment | 0x983e9e6L
  1556. NtQueryInformationJobObject | 0x1a1dce95L
  1557. NtQueryInformationPort | 0x472b8e88L
  1558. NtQueryInformationResourceManager | 0xf9bd89c6L
  1559. NtQueryInformationTransaction | 0x898b8289L
  1560. NtQueryInformationTransactionManager | 0xee065544L
  1561. NtQueryInformationWorkerFactory | 0xb13df075L
  1562. NtQueryInstallUILanguage | 0x7ac44b76L
  1563. NtQueryIntervalProfile | 0xf9da7a73L
  1564. NtQueryIoCompletion | 0xf73865efL
  1565. NtQueryLicenseValue | 0x201e9a1dL
  1566. NtQueryMultipleValueKey | 0x34ceec4fL
  1567. NtQueryMutant | 0x1e340376L
  1568. NtQueryOpenSubKeys | 0x3f096235L
  1569. NtQueryOpenSubKeysEx | 0x26eaccd2L
  1570. NtQueryPortInformationProcess | 0x3cacfc7L
  1571. NtQueryQuotaInformationFile | 0xa04f65edL
  1572. NtQuerySecurityAttributesToken | 0xc9ea70ddL
  1573. NtQuerySecurityObject | 0xfe62d8cL
  1574. NtQuerySemaphore | 0xbfaf0a21L
  1575. NtQuerySymbolicLinkObject | 0xbe510304L
  1576. NtQuerySystemEnvironmentValue | 0xcdeb22d4L
  1577. NtQuerySystemEnvironmentValueEx | 0xf53f3131L
  1578. NtQuerySystemInformationEx | 0xbffb0705L
  1579. NtQueryTimerResolution | 0xa516a4f2L
  1580. NtQueueApcThreadEx | 0x71329995L
  1581. NtRaiseException | 0xf182b62aL
  1582. NtRaiseHardError | 0x92573f84L
  1583. NtReadOnlyEnlistment | 0x225c74a8L
  1584. NtRecoverEnlistment | 0x68e672a0L
  1585. NtRecoverResourceManager | 0x35d496c0L
  1586. NtRecoverTransactionManager | 0x4ddaf7feL
  1587. NtRegisterProtocolAddressInformation | 0xba6bc92aL
  1588. NtRegisterThreadTerminatePort | 0xb7489ef2L
  1589. NtReleaseKeyedEvent | 0xdfb885fcL
  1590. NtReleaseWorkerFactoryWorker | 0xfc75a7f4L
  1591. NtRemoveIoCompletionEx | 0xfdd87384L
  1592. NtRemoveProcessDebug | 0x2629b3bbL
  1593. NtRenameKey | 0xe5ff9168L
  1594. NtRenameTransactionManager | 0xb4cdfe20L
  1595. NtReplaceKey | 0xb121bd0cL
  1596. NtReplacePartitionUnit | 0x6b3e621dL
  1597. NtReplyWaitReplyPort | 0xafca1fb9L
  1598. NtRequestPort | 0xf2742015L
  1599. NtResetEvent | 0x854c796cL
  1600. NtResetWriteWatch | 0xc9fe8b0cL
  1601. NtRestoreKey | 0xff70ca14L
  1602. NtResumeProcess | 0x9f163797L
  1603. NtRollbackComplete | 0x65d7ff4aL
  1604. NtRollbackEnlistment | 0xd9b3f0d4L
  1605. NtRollbackTransaction | 0x5fbc6737L
  1606. NtRollforwardTransactionManager | 0x9cc77936L
  1607. NtSaveKey | 0x5dd180bf
  1608. NtSaveKeyEx | 0x1834b5dcL
  1609. NtSaveMergedKeys | 0x360b8da6L
  1610. NtSecureConnectPort | 0xceb4819dL
  1611. NtSerializeBoot | 0xcee394c3L
  1612. NtSetBootEntryOrder | 0x54153655L
  1613. NtSetBootOptions | 0xa820bc93L
  1614. NtSetContextThread | 0x308be0d0L
  1615. NtSetDebugFilterState | 0x747be0c1L
  1616. NtSetDefaultHardErrorPort | 0x6c177ac6L
  1617. NtSetDefaultLocale | 0x413907c8L
  1618. NtSetDefaultUILanguage | 0x6794347aL
  1619. NtSetDriverEntryOrder | 0x8781b88dL
  1620. NtSetEaFile | 0xe61f57f9L
  1621. NtSetHighEventPair | 0x145c5621L
  1622. NtSetHighWaitLowEventPair | 0x774d2428L
  1623. NtSetInformationDebugObject | 0x8ed03f17L
  1624. NtSetInformationEnlistment | 0x1484de7cL
  1625. NtSetInformationJobObject | 0xebe7886bL
  1626. NtSetInformationKey | 0x7f789662L
  1627. NtSetInformationResourceManager | 0x6d5ccc1cL
  1628. NtSetInformationToken | 0x409fe11aL
  1629. NtSetInformationTransaction | 0xf4ab09dfL
  1630. NtSetInformationTransactionManager | 0xd5a57fdaL
  1631. NtSetInformationWorkerFactory | 0x625ca54bL
  1632. NtSetIntervalProfile | 0x213d3689L
  1633. NtSetIoCompletion | 0xa768a9c5L
  1634. NtSetIoCompletionEx | 0x243a3862L
  1635. NtSetLdtEntries | 0x35e9bcd1L
  1636. NtSetLowEventPair | 0xf5337273L
  1637. NtSetLowWaitHighEventPair | 0x8dbb8cc8L
  1638. NtSetQuotaInformationFile | 0x72191fc3L
  1639. NtSetSecurityObject | 0x8d36bee2L
  1640. NtSetSystemEnvironmentValue | 0x390aaa2aL
  1641. NtSetSystemEnvironmentValueEx | 0xa65de607L
  1642. NtSetSystemInformation | 0x79518d3eL
  1643. NtSetSystemPowerState | 0x397dfdc6L
  1644. NtSetSystemTime | 0x8ac0c7L
  1645. NtSetThreadExecutionState | 0x968ee20L
  1646. NtSetTimerEx | 0x421ccb71L
  1647. NtSetTimerResolution | 0xcc796108L
  1648. NtSetUuidSeed | 0x43bb2cbL
  1649. NtSetVolumeInformationFile | 0xfcbc82d1L
  1650. NtShutdownSystem | 0x7aa5aae8L
  1651. NtShutdownWorkerFactory | 0x7f852e15L
  1652. NtSignalAndWaitForSingleObject | 0x7bdd15cdL
  1653. NtSinglePhaseReject | 0x1d970b77L
  1654. NtStartProfile | 0xf36274a6L
  1655. NtStopProfile | 0xdb02a2deL
  1656. NtSuspendProcess | 0x5409bde8L
  1657. NtSuspendThread | 0x50febd61L
  1658. NtSystemDebugControl | 0xe0fb2214L
  1659. NtTerminateJobObject | 0x4f5364a2L
  1660. NtTestAlert | 0x7915b7dfL
  1661. NtThawRegistry | 0x263c94L
  1662. NtThawTransactions | 0x67764034L
  1663. NtTraceControl | 0x7eb77b17L
  1664. NtTranslateFilePath | 0xbb380522L
  1665. NtUmsThreadYield | 0x7e2c5c8bL
  1666. NtUnloadDriver | 0x13b0a3d6L
  1667. NtUnloadKey | 0x179f6d33L
  1668. NtUnloadKey2 | 0xb8d13c5L
  1669. NtUnloadKeyEx | 0x7d2f8f50L
  1670. NtUnlockFile | 0x10b36233L
  1671. NtUnlockVirtualMemory | 0xacd96433L
  1672. NtVdmControl | 0x556e7e2fL
  1673. NtWaitForDebugEvent | 0x3f635bacL
  1674. NtWaitForKeyedEvent | 0xbef42dd7L
  1675. NtWaitForWorkViaWorkerFactory | 0xc4374898L
  1676. NtWaitHighEventPair | 0xb87246aaL
  1677. NtWaitLowEventPair | 0xac98f5dcL
  1678. NtWorkerFactoryWorkerReady | 0xc6bb7708L
  1679. NtWow64CsrClientConnectToServer | 0xe5562ff9L
  1680. NtWow64CsrIdentifyAlertableThread | 0xda9e7ed6L
  1681. NtWow64CsrClientCallServer | 0x92175c68L
  1682. NtWow64CsrAllocateCaptureBuffer | 0x85c115e9L
  1683. NtWow64CsrFreeCaptureBuffer | 0xcacc0b06L
  1684. NtWow64CsrAllocateMessagePointer | 0xaf1eb481L
  1685. NtWow64CsrCaptureMessageBuffer | 0xf55731c9L
  1686. NtWow64CsrCaptureMessageString | 0x1cf36e66L
  1687. NtWow64CsrGetProcessId | 0xcd425e62L
  1688. NtWow64CsrVerifyRegion | 0xca98b60fL
  1689. NtWow64DebuggerCall | 0x1266c76fL
  1690. NtWow64GetCurrentProcessorNumberEx | 0x658536b7L
  1691. NtWow64GetNativeSystemInformation | 0x33495360L
  1692. NtWow64InterlockedPopEntrySList | 0x3ec25e72L
  1693. NtWow64QueryInformationProcess64 | 0x1156a593L
  1694. NtWow64ReadVirtualMemory64 | 0x67f0d714L
  1695. NtWow64WriteVirtualMemory64 | 0x770d0c63L
  1696. NtWow64QueryVirtualMemory64 | 0xd6cbd1eeL
  1697. NtWow64CallFunction64 | 0x1fb0eb1aL
  1698. RtlDeactivateActivationContextUnsafeFa | 0x8c886871L
  1699. RtlActivateActivationContextUnsafeFast | 0x9180bd8fL
  1700. RtlLeaveCriticalSection | 0x682e97e4L
  1701. RtlEnterCriticalSection | 0x94a95e55L
  1702. RtlSetLastWin32Error | 0x98920d14L
  1703. memcpy | 0xd827590
  1704. memset | 0xd82b830
  1705. RtlFreeHeap | 0x70ba71d7L
  1706. RtlAllocateHeap | 0xc0b381daL
  1707. RtlFreeUnicodeString | 0x9c1d3997L
  1708. RtlInitString | 0x11be8782L
  1709. RtlInitAnsiString | 0xffa3b90dL
  1710. RtlInitUnicodeString | 0x29b75f89L
  1711. RtlMultiByteToUnicodeN | 0x4814178eL
  1712. RtlDeleteBoundaryDescriptor | 0xf9f3e4edL
  1713. RtlAnsiStringToUnicodeString | 0xaadebf7aL
  1714. RtlEqualUnicodeString | 0x7dd2af8dL
  1715. RtlUpcaseUnicodeChar | 0xc1caadfdL
  1716. bsearch | 0x8f26ed5d
  1717. RtlFindActivationContextSectionString | 0xa24cb13bL
  1718. RtlHashUnicodeString | 0x91f22719L
  1719. RtlDosApplyFileIsolationRedirection_Us | 0xea3793f4L
  1720. RtlImageNtHeaderEx | 0x3d84b642L
  1721. RtlImageDirectoryEntryToData | 0x9fce97feL
  1722. RtlAddRefActivationContext | 0xbb0eb8b4L
  1723. _wcsnicmp | 0xd7ecfc68
  1724. RtlInitAnsiStringEx | 0x777639aaL
  1725. _aulldvrm | 0xe3623ccb
  1726. RtlAnsiCharToUnicodeChar | 0x853aace8L
  1727. RtlFindCharInUnicodeString | 0xbf26590bL
  1728. RtlValidateUnicodeString | 0x881ea09fL
  1729. LdrGetDllHandle | 0x5b10e5afL
  1730. LdrGetDllHandleEx | 0x62e116ccL
  1731. LdrGetProcedureAddress | 0x2e5a99f6L
  1732. LdrGetProcedureAddressEx | 0x2f68f8d3L
  1733. wcsstr | 0x24b569ab
  1734. memcmp | 0xd827524
  1735. _snwprintf | 0x63a85b4f
  1736. wcscmp | 0x24b524b2
  1737. RtlTryEnterCriticalSection | 0xdafbe4f4L
  1738. RtlAcquireSRWLockShared | 0xc6539abdL
  1739. RtlReleaseSRWLockShared | 0x2433efb4L
  1740. NtdllDefWindowProc_W | 0x58790f4L
  1741. RtlInitializeCriticalSectionAndSpinCou | 0xe168a05dL
  1742. RtlDllShutdownInProgress | 0x62b6893bL
  1743. ExpInterlockedPopEntrySListResume | 0x61e81d07L
  1744. ExpInterlockedPopEntrySListFault | 0xbc4ac032L
  1745. ExpInterlockedPopEntrySListEnd | 0xfff012adL
  1746. RtlInterlockedPushListSList | 0x9856fd76L
  1747. RtlFirstEntrySList | 0xa34a6c60L
  1748. RtlInterlockedCompareExchange64 | 0xd0ff211fL
  1749. RtlInterlockedFlushSList | 0x3f01583cL
  1750. RtlReleaseSRWLockExclusive | 0x113478f5L
  1751. RtlInitializeBitMap | 0x46e6c4a6L
  1752. RtlAcquireSRWLockExclusive | 0xd0bd335eL
  1753. RtlGetCurrentProcessorNumberEx | 0xbc11efc0L
  1754. RtlInitializeCriticalSection | 0x91692e09L
  1755. RtlSizeHeap | 0xec4273b0L
  1756. _allshl | 0x7ec01464
  1757. RtlImageNtHeader | 0xc63a2fa5L
  1758. RtlDeleteCriticalSection | 0x89164ccaL
  1759. RtlQueryDepthSList | 0x754271b1L
  1760. RtlInterlockedPushEntrySList | 0x78bae6ecL
  1761. RtlInterlockedPopEntrySList | 0xb3258c1bL
  1762. RtlInitializeCriticalSectionEx | 0x906cdda6L
  1763. RtlNtStatusToDosError | 0x35abf270L
  1764. RtlNtStatusToDosErrorNoTeb | 0x3f6c088L
  1765. RtlUnicodeToMultiByteN | 0xfe4ae70eL
  1766. RtlUnicodeStringToAnsiString | 0x2fa17f9aL
  1767. LdrLockLoaderLock | 0x773c3a30L
  1768. LdrUnlockLoaderLock | 0xa53238b3L
  1769. RtlInitUnicodeStringEx | 0x750d6f26L
  1770. RtlGetNtGlobalFlags | 0x83fc49f7L
  1771. RtlRunOnceExecuteOnce | 0x5b3689e9L
  1772. RtlRunOnceBeginInitialize | 0xda345208L
  1773. wcsrchr | 0xbb61c981
  1774. wcschr | 0x24b5240f
  1775. RtlAcquirePebLock | 0xf5b565c1L
  1776. RtlReleasePebLock | 0x8d530d78L
  1777. wcsncmp | 0xbb5f98a0
  1778. RtlGetCurrentTransaction | 0xd4dc5f20L
  1779. RtlSetCurrentTransaction | 0xa1781d2cL
  1780. RtlpCreateProcessRegistryInfo | 0x3acade3fL
  1781. RtlUnlockHeap | 0xaab836e1L
  1782. RtlLockHeap | 0xf18fa9eL
  1783. RtlIsValidHandle | 0x6326adcfL
  1784. RtlAllocateHandle | 0xbb59fa88L
  1785. RtlFreeHandle | 0x88dcddc5L
  1786. RtlCompareUnicodeStrings | 0x5d844acfL
  1787. RtlCreateUnicodeStringFromAsciiz | 0x47432700L
  1788. RtlRunOnceInitialize | 0x4dab2d83L
  1789. RtlCompareUnicodeString | 0x86b66edcL
  1790. RtlAppendUnicodeStringToString | 0xd83e67c7L
  1791. RtlCopyUnicodeString | 0x640659d0L
  1792. RtlAppendUnicodeToString | 0x2241130L
  1793. wcscpy_s | 0x2692f150
  1794. RtlGetVersion | 0x3ca3aa1dL
  1795. RtlGetNtProductType | 0x16c3b07cL
  1796. RtlQueryPerformanceFrequency | 0x80c802d1L
  1797. _aullshr | 0x6bbd669f
  1798. RtlQueryPerformanceCounter | 0x58e53adfL
  1799. EtwEventEnabled | 0x7e9600e2L
  1800. _allshr | 0x7ec0146a
  1801. RtlIntegerToChar | 0x7a8ae106L
  1802. RtlIntegerToUnicodeString | 0xf4b722c6L
  1803. RtlpUnWaitCriticalSection | 0xd2b83c5fL
  1804. memmove | 0xbdd69f1b
  1805. RtlValidSid | 0x28e54487L
  1806. RtlCopySid | 0x25d264d2
  1807. RtlLengthSid | 0x2f9699L
  1808. _wcsicmp | 0xdfbe86da
  1809. RtlLengthRequiredSid | 0x3a91205aL
  1810. RtlFreeSid | 0x12ee8fd9
  1811. RtlAllocateAndInitializeSid | 0x35f62ce1L
  1812. RtlInitializeSListHead | 0x14f0b70aL
  1813. RtlEqualSid | 0x5c9bfa4fL
  1814. RtlSetCriticalSectionSpinCount | 0x550823a6L
  1815. TpIsTimerSet | 0x59d988d2L
  1816. RtlQueryEnvironmentVariable | 0x1920eec8L
  1817. RtlQueryEnvironmentVariable_U | 0xe517cd5cL
  1818. RtlProcessFlsData | 0xb2476d35L
  1819. RtlIsCurrentThreadAttachExempt | 0x11c6b656L
  1820. TpCheckTerminateWorker | 0x757edbaaL
  1821. strchr | 0x1c9395bb
  1822. RtlDecodePointer | 0x2a58243cL
  1823. LdrInitializeThunk | 0x82c54123L
  1824. RtlInitializeExceptionChain | 0x90958e9bL
  1825. RtlAllocateActivationContextStack | 0xa9b3c849L
  1826. RtlGetCurrentPeb | 0x1fad4fd1L
  1827. RtlRegisterThreadWithCsrss | 0xda7f82feL
  1828. RtlDetermineDosPathNameType_U | 0xafc6205eL
  1829. RtlReleaseRelativeName | 0xe8d352f5L
  1830. RtlDosPathNameToRelativeNtPathName_U_W | 0xc023df04L
  1831. RtlIsDosDeviceName_U | 0x6d87f2feL
  1832. SbSelectProcedure | 0x2f76d903L
  1833. RtlGetFullPathName_UstrEx | 0x58b95702L
  1834. RtlExpandEnvironmentStrings | 0x14fc1896L
  1835. RtlGetFullPathName_UEx | 0x411e7a9L
  1836. _chkstk | 0x832178cc
  1837. RtlDecodeSystemPointer | 0x4d258c81L
  1838. RtlConvertSidToUnicodeString | 0xbf34cf19L
  1839. RtlFormatCurrentUserKeyPath | 0xca8698L
  1840. RtlQueryInformationActivationContext | 0xb0f9c56aL
  1841. RtlReleaseActivationContext | 0xa0d5436fL
  1842. RtlGetActiveActivationContext | 0x1b773d2aL
  1843. LdrEnumerateLoadedModules | 0xd48047efL
  1844. RtlRunOnceComplete | 0xf939ab8aL
  1845. LdrLoadDll | 0x307db23
  1846. _stricmp | 0xd36b2e06
  1847. LdrpResGetMappingSize | 0xcdd6f068L
  1848. LdrpResGetResourceDirectory | 0xf76098deL
  1849. LdrResSearchResource | 0x913b90fL
  1850. LdrResFindResourceDirectory | 0xda31e0fL
  1851. RtlEncodeSystemPointer | 0x5cc725ebL
  1852. RtlFindClearBits | 0xbd96cd31L
  1853. RtlFindClearBitsAndSet | 0xd4404ab0L
  1854. RtlSetBits | 0xde4d32d5
  1855. RtlFlsAlloc | 0xc10da927L
  1856. EtwNotificationRegister | 0x50523021L
  1857. EtwEventRegister | 0xaa63801cL
  1858. EtwRegisterTraceGuidsW | 0xef64877cL
  1859. RtlInitializeGenericTable | 0x1183728eL
  1860. LdrAddRefDll | 0x7b814ca9L
  1861. RtlPcToFileHeader | 0x9fd8f4d6L
  1862. RtlRandomEx | 0x7c3439f5L
  1863. RtlCreateHeap | 0xafaac189L
  1864. _aullrem | 0x6bbd61f6
  1865. LdrDisableThreadCalloutsForDll | 0xbe0586ddL
  1866. RtlSubAuthoritySid | 0xf7a9564aL
  1867. RtlInitializeSid | 0x98176969L
  1868. RtlEncodePointer | 0x32457626L
  1869. LdrUnloadDll | 0x7afa7706L
  1870. RtlDosPathNameToRelativeNtPathName_U | 0xda905eeeL
  1871. RtlDosPathNameToNtPathName_U_WithStatu | 0x44f3beL
  1872. LdrAccessResource | 0x180e29e1L
  1873. LdrFindResource_U | 0x48904244L
  1874. RtlReAllocateHeap | 0xbbc97911L
  1875. RtlGetIntegerAtom | 0x87a48736L
  1876. RtlQueryInformationActiveActivationCon | 0x528d9221L
  1877. RtlIsThreadWithinLoaderCallout | 0x6209a2e9L
  1878. TpCaptureCaller | 0xc69c0b0L
  1879. RtlIsValidIndexHandle | 0x32b0b707L
  1880. NtdllDefWindowProc_A | 0x58790deL
  1881. RtlLargeIntegerAdd | 0x7ff06939L
  1882. RtlEnlargedIntegerMultiply | 0x670b8387L
  1883. RtlEnlargedUnsignedMultiply | 0x88b9b056L
  1884. RtlEnlargedUnsignedDivide | 0xc3842a4bL
  1885. RtlExtendedLargeIntegerDivide | 0xc54b6a76L
  1886. RtlExtendedMagicDivide | 0x17f9d93eL
  1887. RtlExtendedIntegerMultiply | 0xd1efbf6L
  1888. RtlLargeIntegerShiftLeft | 0xd389d7f9L
  1889. RtlLargeIntegerShiftRight | 0x45339eccL
  1890. RtlLargeIntegerArithmeticShift | 0xf0648cb8L
  1891. RtlLargeIntegerNegate | 0x120b8464L
  1892. RtlLargeIntegerSubtract | 0x25980bb8L
  1893. RtlConvertLongToLargeInteger | 0xc350e5a4L
  1894. RtlConvertUlongToLargeInteger | 0x1c126c59L
  1895. _allmul | 0x7ebffc8b
  1896. RtlPrefixUnicodeString | 0x5502cfe3L
  1897. RtlFirstFreeAce | 0x9cef172aL
  1898. RtlValidAcl | 0x28e4f737L
  1899. RtlCreateSecurityDescriptor | 0xb7687da2L
  1900. RtlSetDaclSecurityDescriptor | 0x867409ceL
  1901. RtlCreateAcl | 0x245a63fbL
  1902. RtlAddAccessAllowedAce | 0xdcb226e3L
  1903. RtlSetOwnerSecurityDescriptor | 0x56a330a5L
  1904. RtlSetGroupSecurityDescriptor | 0x8963d987L
  1905. RtlLookupAtomInAtomTable | 0x510cc252L
  1906. LdrRscIsTypeExist | 0x753660faL
  1907. RtlAddressInSectionTable | 0x12173571L
  1908. RtlImageRvaToSection | 0xf6dc9a9bL
  1909. LdrLoadAlternateResourceModuleEx | 0xff2c0512L
  1910. RtlLoadString | 0x60a838ceL
  1911. TpSetTimer | 0x8c6acfd6
  1912. RtlTryAcquireSRWLockExclusive | 0x97a1299dL
  1913. TpCallbackIndependent | 0x1a8e9c84L
  1914. RtlIsCriticalSectionLockedByThread | 0xdba8c1b8L
  1915. TpDisassociateCallback | 0x62fb2932L
  1916. RtlDosSearchPath_Ustr | 0x7825fedL
  1917. RtlCaptureContext | 0x7733eed0L
  1918. RtlUnwind | 0x97aee78c
  1919. RtlRaiseException | 0x6a652c7aL
  1920. RtlRaiseStatus | 0xf5c4960fL
  1921. TpReleasePool | 0xcb5cfd84L
  1922. LdrResGetRCConfig | 0xa719717cL
  1923. TpAllocIoCompletion | 0xbb8a5046L
  1924. RtlDuplicateUnicodeString | 0x936d0d90L
  1925. RtlStringFromGUID | 0x1e5aabcbL
  1926. RtlDowncaseUnicodeString | 0x9094c89L
  1927. wcscat_s | 0x268aa25c
  1928. toupper | 0xf09449f4
  1929. RtlUpcaseUnicodeToMultiByteN | 0x9c7d25efL
  1930. RtlSetCurrentDirectory_U | 0xf2c73b2fL
  1931. RtlInsertElementGenericTable | 0x75917bfbL
  1932. RtlInsertElementGenericTableFull | 0x99bd640eL
  1933. RtlAcquirePrivilege | 0xb4664da8L
  1934. RtlReleasePrivilege | 0xaa0cbf1fL
  1935. RtlDestroyHeap | 0x5e4d39ffL
  1936. RtlSetSaclSecurityDescriptor | 0x3e8c693dL
  1937. RtlAddAccessAllowedAceEx | 0xd1d77500L
  1938. RtlGetSaclSecurityDescriptor | 0x2d688531L
  1939. RtlSplay | 0xc375a20
  1940. RtlLookupElementGenericTable | 0x9a8166a0L
  1941. RtlLookupElementGenericTableFull | 0x343c1933L
  1942. RtlDeleteElementGenericTable | 0x5399519L
  1943. RtlRealSuccessor | 0xcda4c15L
  1944. RtlDelete | 0x6f5e3fea
  1945. RtlIsTextUnicode | 0xdbc65bbfL
  1946. RtlSetThreadErrorMode | 0x7452472aL
  1947. RtlFormatMessageEx | 0x1d481422L
  1948. RtlFindMessage | 0x36d1f8bdL
  1949. RtlGetProductInfo | 0x3bd53144L
  1950. wcstol | 0x24b56d41
  1951. RtlSubtreePredecessor | 0x73a74990L
  1952. RtlGUIDFromString | 0x1215e90bL
  1953. RtlIpv4StringToAddressW | 0xbb2e3b1L
  1954. RtlIpv6StringToAddressExW | 0x25af23b0L
  1955. RtlIpv6StringToAddressW | 0x3166a7b3L
  1956. RtlIpv4AddressToStringExW | 0x35ffaaeeL
  1957. RtlIpv4AddressToStringW | 0xc0d04771L
  1958. RtlDestroyProcessParameters | 0xe916bc14L
  1959. RtlQueryElevationFlags | 0x111999e1L
  1960. RtlIsGenericTableEmpty | 0xac697027L
  1961. RtlCreateProcessParametersEx | 0x19132cbbL
  1962. LdrQueryImageFileExecutionOptions | 0xf737ade0L
  1963. LdrQueryImageFileExecutionOptionsEx | 0xa3daaf3dL
  1964. RtlAcquireResourceShared | 0x926c4be0L
  1965. isdigit | 0xa9f0b332
  1966. __isascii | 0x7eb8b088
  1967. RtlIpv4StringToAddressA | 0xbb2e39bL
  1968. RtlTimeToSecondsSince1970 | 0xcd0d8a7bL
  1969. RtlIpv4StringToAddressExW | 0xc3fa572eL
  1970. isxdigit | 0x1654daca
  1971. RtlIpv6StringToAddressA | 0x3166a79dL
  1972. strtol | 0x1c93deed
  1973. RtlCompactHeap | 0x5c71cb9cL
  1974. RtlValidateHeap | 0x3b058fdfL
  1975. RtlIpv6AddressToStringW | 0xe6840b73L
  1976. RtlIpv6AddressToStringExW | 0x97b47770L
  1977. _itoa | 0xef1a7f1
  1978. atoi | 0x7c943c72
  1979. atol | 0x7c943c75
  1980. RtlCreateEnvironmentEx | 0x17dd98ddL
  1981. RtlSetThreadPreferredUILanguages | 0x488c346fL
  1982. LdrResFindResource | 0xa1ce499aL
  1983. wcsncat_s | 0x11a1c9ca
  1984. RtlCopyString | 0x64ab93a9L
  1985. RtlNtPathNameToDosPathName | 0x4fc1a3feL
  1986. RtlDestroyEnvironment | 0xa2b74736L
  1987. _vsnwprintf | 0xf3be9105L
  1988. RtlInitializeHandleTable | 0xf70f94bdL
  1989. RtlLcidToLocaleName | 0xe6005ec7L
  1990. RtlGetThreadPreferredUILanguages | 0x3f3d2a63L
  1991. RtlLCIDToCultureName | 0x2c67263bL
  1992. TpSetWait | 0x70ddf58a
  1993. RtlSetEnvironmentVar | 0xec19a061L
  1994. RtlSetEnvironmentVariable | 0x8704f1deL
  1995. RtlSetUnhandledExceptionFilter | 0x42a5f52bL
  1996. RtlCreateTagHeap | 0x8448d5e5L
  1997. RtlGetLocaleFileMappingAddress | 0x725c7bf9L
  1998. LdrSetDllManifestProber | 0x5fbee590L
  1999. CsrClientConnectToServer | 0x293d7d90L
  2000. RtlSetThreadPoolStartFunc | 0x5e41c12fL
  2001. RtlGetNtVersionNumbers | 0x4803847bL
  2002. RtlNormalizeProcessParams | 0x2ec5f80bL
  2003. RtlSetUserCallbackExceptionFilter | 0xed76ecc4L
  2004. RtlReleaseMemoryStream | 0xfd8a103dL
  2005. RtlResetRtlTranslations | 0x414366eeL
  2006. RtlInitNlsTables | 0x5de15833L
  2007. RtlInitCodePageTable | 0x150f504bL
  2008. RtlUniform | 0x8c8ce357
  2009. TpAllocPool | 0x357ebe2eL
  2010. RtlInitializeNtUserPfn | 0xb44645ceL
  2011. RtlTimeToSecondsSince1980 | 0xcd0d8a9cL
  2012. RtlQueryActivationContextApplicationSe | 0xd7aad3f0L
  2013. RtlpGetNameFromLangInfoNode | 0xb298ed10L
  2014. RtlpMuiRegCreateRegistryInfo | 0x13bbe0a9L
  2015. RtlpLoadUserUIByPolicy | 0xab8e4f2fL
  2016. RtlpMuiRegFreeRegistryInfo | 0xbb221cb7L
  2017. RtlpInitializeLangRegistryInfo | 0x6f261720L
  2018. RtlpMuiRegLoadRegistryInfo | 0xde2ac6b5L
  2019. TpSetPoolStackInformation | 0xc580d36bL
  2020. TpDisablePoolCallbackChecks | 0xdd6fd7d5L
  2021. RtlpGetSystemDefaultUILanguage | 0x77af8113L
  2022. RtlLocaleNameToLcid | 0x7d670747L
  2023. RtlGetParentLocaleName | 0x83a7e932L
  2024. RtlDoesFileExists_U | 0x4112dd56L
  2025. RtlCreateAtomTable | 0x5a694444L
  2026. RtlpApplyLengthFunction | 0xfecdf195L
  2027. RtlGetLengthWithoutLastFullDosOrNtPath | 0x14b6c66aL
  2028. RtlCreateActivationContext | 0x46f498e2L
  2029. RtlReportSilentProcessExit | 0xa262e05bL
  2030. RtlExitUserProcess | 0x3aa1f0efL
  2031. LdrShutdownProcess | 0xf413b8c2L
  2032. RtlDetectHeapLeaks | 0xef906edeL
  2033. EtwNotificationUnregister | 0xa84c69a4L
  2034. EtwEventUnregister | 0xcbf1a45fL
  2035. EtwUnregisterTraceGuids | 0x1ee76a08L
  2036. RtlClearBits | 0x9a98b0d0L
  2037. RtlAreBitsSet | 0x3cc63ccdL
  2038. RtlNumberGenericTableElements | 0x42f8122L
  2039. RtlEnumerateGenericTableWithoutSplayin | 0xa2332a56L
  2040. RtlDeleteResource | 0x2718acd2L
  2041. RtlFlsFree | 0x5dc76be
  2042. RtlDestroyHandleTable | 0xd6093655L
  2043. WinSqmIsOptedIn | 0x1be1daf3L
  2044. WinSqmIsOptedInEx | 0x9bc46d10L
  2045. TpAllocTimer | 0xe59b92b5L
  2046. RtlInitializeResource | 0x2bfc06f1L
  2047. RtlReleaseResource | 0x3a5cfc00L
  2048. RtlAcquireResourceExclusive | 0xa6f775a1L
  2049. RtlCultureNameToLCID | 0x2eabcddbL
  2050. RtlMultiAppendUnicodeStringBuffer | 0x10612d12L
  2051. RtlGetDaclSecurityDescriptor | 0x755025c2L
  2052. RtlRetrieveNtUserPfn | 0xf5c03702L
  2053. RtlOpenCurrentUser | 0x37a1982bL
  2054. RtlSubAuthorityCountSid | 0xaafc3813L
  2055. _aulldiv | 0x6bbd26f5
  2056. RtlGetFullPathName_U | 0x12ddb4cL
  2057. RtlUpcaseUnicodeString | 0x85630c16L
  2058. LdrFindResourceEx_U | 0xad9c42e1L
  2059. wcspbrk | 0xbb60adc1
  2060. iswctype | 0x13f3ef3d
  2061. iswalpha | 0x13cb33de
  2062. RtlCreateUnicodeString | 0xbb2f5189L
  2063. RtlpQueryDefaultUILanguage | 0x437a084L
  2064. _strnicmp | 0x412e8914
  2065. RtlSetLastWin32ErrorAndNtStatusFromNtS | 0x8012fb36L
  2066. RtlUnicodeToMultiByteSize | 0x50c1c0fbL
  2067. RtlExpandEnvironmentStrings_U | 0x4464a2aaL
  2068. RtlUnicodeStringToInteger | 0x56cb9006L
  2069. LdrGetDllHandleByName | 0x8126ac0bL
  2070. RtlGetLongestNtPathLength | 0xf087e544L
  2071. RtlGetAce | 0x76618180
  2072. RtlDosPathNameToNtPathName_U | 0xbfe457b2L
  2073. RtlSetUserValueHeap | 0xe3b0103dL
  2074. LdrShutdownThread | 0x93e7c4fbL
  2075. RtlFreeThreadActivationContextStack | 0x6ce8dd3eL
  2076. RtlFreeActivationContextStack | 0x6c878586L
  2077. RtlExitUserThread | 0x8e492b88L
  2078. RtlCleanUpTEBLangLists | 0xedb46febL
  2079. RtlGetLastWin32Error | 0xb65b7508L
  2080. LdrFindEntryForAddress | 0x604df667L
  2081. LdrGetDllHandleByMapping | 0xc9011656L
  2082. LdrAddLoadAsDataTable | 0xce9ccf66L
  2083. RtlUnicodeToOemN | 0x3ee18d90L
  2084. LdrUnloadAlternateResourceModule | 0xb83fc5d8L
  2085. LdrUnloadAlternateResourceModuleEx | 0xc748a535L
  2086. LdrRemoveLoadAsDataTable | 0xe3159d2bL
  2087. RtlTimeToTimeFields | 0xd34c5bafL
  2088. RtlTimeFieldsToTime | 0xb0643b6fL
  2089. EtwEventWrite | 0x24a8d022L
  2090. WinSqmEventEnabled | 0xca42a9b1L
  2091. WinSqmEventWrite | 0x9826f931L
  2092. WinSqmIncrementDWORD | 0x43815b29L
  2093. RtlGetCurrentDirectory_U | 0x262b7d23L
  2094. RtlSetHeapInformation | 0xd192ef67L
  2095. iswdigit | 0x13ffb229
  2096. EtwpNotificationThread | 0x7a001ec4L
  2097. EtwDeliverDataBlock | 0x7322bc25L
  2098. EtwGetTraceLoggerHandle | 0xcfb51b90L
  2099. EtwGetTraceEnableLevel | 0x37a0dc43L
  2100. EtwGetTraceEnableFlags | 0x3737c6d8L
  2101. RtlEqualString | 0x64cd9406L
  2102. RtlUpperChar | 0xd475bae1L
  2103. swprintf_s | 0xcd7754f4
  2104. vswprintf_s | 0xfbeec98aL
  2105. RtlpEnsureBufferSize | 0xa899fbceL
  2106. RtlUTF8ToUnicodeN | 0x888ccb76L
  2107. RtlUnicodeToUTF8N | 0x1b75d7b6L
  2108. strncmp | 0xaf0c3fcc
  2109. LdrQueryImageFileKeyOption | 0x2215caa2L
  2110. LdrOpenImageFileOptionsKey | 0xa74371L
  2111. RtlDeleteAce | 0xbdab5153L
  2112. RtlAddVectoredContinueHandler | 0x7f7a9a1fL
  2113. RtlCompareMemory | 0xa0f57717L
  2114. RtlCompareMemoryUlong | 0x53ddbffcL
  2115. RtlFillMemory | 0xd133097L
  2116. RtlFillMemoryUlonglong | 0x9198e72cL
  2117. RtlFillMemoryUlong | 0x8f0b697cL
  2118. RtlZeroMemory | 0xfc6e76b0L
  2119. RtlMoveMemory | 0x4027607L
  2120. RtlFindActivationContextSectionGuid | 0xed512fadL
  2121. RtlWakeAllConditionVariable | 0x64a74d05L
  2122. NtdllDialogWndProc_W | 0xe0602446L
  2123. RtlGetControlSecurityDescriptor | 0x21c76f6fL
  2124. RtlWow64EnableFsRedirectionEx | 0x15a56313L
  2125. RtlTryAcquirePebLock | 0x750b2120L
  2126. RtlCheckForOrphanedCriticalSections | 0xb95d86c0L
  2127. RtlDeactivateActivationContext | 0xb8f307e8L
  2128. RtlActivateActivationContext | 0xfeec34bfL
  2129. RtlActivateActivationContextEx | 0x6acc69dcL
  2130. RtlCaptureStackBackTrace | 0xd43e9c41L
  2131. RtlWalkFrameChain | 0xbbda3e34L
  2132. RtlAddAtomToAtomTable | 0x226ec60dL
  2133. RtlDeleteAtomFromAtomTable | 0xd3dd4408L
  2134. RtlMakeSelfRelativeSD | 0xb768ec72L
  2135. RtlAbsoluteToSelfRelativeSD | 0x729b74f6L
  2136. RtlNormalizeString | 0xb73b54ffL
  2137. strcat_s | 0x8fcc2f08
  2138. strcpy_s | 0x8fd47dfc
  2139. TpAllocAlpcCompletionEx | 0x712b112bL
  2140. RtlGetOwnerSecurityDescriptor | 0x2102cb19L
  2141. RtlGetGroupSecurityDescriptor | 0x53c373fbL
  2142. RtlLengthSecurityDescriptor | 0xd3d04d30L
  2143. RtlValidSecurityDescriptor | 0x7e7915eL
  2144. RtlTestBit | 0x2b501ab6
  2145. TpSimpleTryPost | 0x24a483d8L
  2146. RtlQueryInformationAcl | 0x53a0c283L
  2147. RtlLockMemoryZone | 0xcfdb7a15L
  2148. RtlLockModuleSection | 0xb773dd9bL
  2149. RtlUnlockMemoryZone | 0x32759c98L
  2150. RtlUnlockModuleSection | 0x5eba953eL
  2151. RtlQueryAtomInAtomTable | 0x5981296eL
  2152. isalpha | 0xa9bc34e7
  2153. EtwTraceMessage | 0xb2296129L
  2154. EtwTraceMessageVa | 0xe2065ae0L
  2155. RtlGetUserInfoHeap | 0xfc5ff8a0L
  2156. RtlQueueWorkItem | 0x4699d00eL
  2157. EtwRegisterTraceGuidsA | 0xef648766L
  2158. WinSqmSetDWORD | 0x70237e50L
  2159. TpAllocCleanupGroup | 0xa4b2e229L
  2160. RtlCreateBoundaryDescriptor | 0xeed9896eL
  2161. RtlAddMandatoryAce | 0xde4c3558L
  2162. A_SHAInit | 0xd3fa7d95
  2163. RtlCreateServiceSid | 0xc7b8c55cL
  2164. A_SHAFinal | 0x53113c0b
  2165. A_SHAUpdate | 0xd8af5004L
  2166. RtlAddSIDToBoundaryDescriptor | 0x3b8a94c6L
  2167. RtlCreateMemoryZone | 0xddf8540L
  2168. RtlCreateMemoryBlockLookaside | 0x732a7e8aL
  2169. TpStartAsyncIoOperation | 0x6e73d63eL
  2170. RtlInitializeGenericTableAvl | 0x857533f1L
  2171. RtlInsertElementGenericTableAvl | 0x1bee623eL
  2172. RtlInsertElementGenericTableFullAvl | 0xd37bb571L
  2173. RtlLookupElementGenericTableAvl | 0x4f2886c3L
  2174. RtlLookupElementGenericTableFullAvl | 0xa88e9476L
  2175. RtlOemToUnicodeN | 0x9012bfd0L
  2176. RtlOemStringToUnicodeString | 0x499c4010L
  2177. RtlUnicodeStringToOemString | 0x60a796d0L
  2178. WinSqmAddToStreamEx | 0x1070a4b9L
  2179. RtlDestroyMemoryZone | 0x75d3fe36L
  2180. RtlDestroyMemoryBlockLookaside | 0xf82b2300L
  2181. TpReleaseTimer | 0x3741bccbL
  2182. TpWaitForTimer | 0xdd334fc6L
  2183. TpAllocWork | 0x35829537L
  2184. TpAllocWait | 0x35825889L
  2185. LdrRegisterDllNotification | 0xed7fa36fL
  2186. TpWaitForWait | 0xa99e377aL
  2187. TpReleaseWait | 0xcb6097dfL
  2188. RtlDeleteTimer | 0xd7203d6bL
  2189. TpSetPoolMinThreads | 0xf94b415eL
  2190. TpSetPoolMaxThreads | 0x8ffa0a20L
  2191. RtlCreateTimerQueue | 0xf78fb211L
  2192. RtlCreateTimer | 0xa5de7c4cL
  2193. TpReleaseIoCompletion | 0x1105859cL
  2194. TpReleaseCleanupGroup | 0xfa2e177fL
  2195. RtlEnumerateGenericTableAvl | 0xea6a0c25L
  2196. TpWaitForIoCompletion | 0xadca9037L
  2197. TpCancelAsyncIoOperation | 0x942ca116L
  2198. TpWaitForWork | 0xa99e7428L
  2199. TpReleaseWork | 0xcb60d48dL
  2200. RtlEnumerateGenericTableWithoutSplayin | 0xa2332a56L
  2201. RtlDeleteElementGenericTableAvl | 0x785c4e9cL
  2202. RtlAddAce | 0x6847af29
  2203. TpReleaseAlpcCompletion | 0x4a89f24L
  2204. _ui64tow | 0x4f5c62e6
  2205. RtlClearAllBits | 0xcde82769L
  2206. RtlConvertSharedToExclusive | 0x5f4d78aL
  2207. RtlPrefixString | 0xb2ab091cL
  2208. LdrInitShimEngineDynamic | 0xaa41d4e7L
  2209. TpCallbackMayRunLong | 0x330a0862L
  2210. wcsncpy_s | 0x11aa18be
  2211. RtlFreeUserStack | 0x960c0d6eL
  2212. EtwEventActivityIdControl | 0xa7405132L
  2213. EtwEventWriteTransfer | 0x98547547L
  2214. RtlMapGenericMask | 0x56e52e3eL
  2215. RtlEqualPrefixSid | 0x78db18bdL
  2216. RtlDeleteSecurityObject | 0xfa432119L
  2217. RtlFindAceByType | 0x3e86519eL
  2218. RtlNewSecurityObjectEx | 0x4ba497cdL
  2219. RtlRegisterWait | 0xe4da1c11L
  2220. RtlIdnToAscii | 0xc099afdeL
  2221. RtlCreateUserStack | 0x91bbfc60L
  2222. RtlDeregisterWaitEx | 0x59613077L
  2223. LdrUnregisterDllNotification | 0x2c7ba552L
  2224. RtlGetCurrentProcessorNumber | 0x5c8ef1a3L
  2225. WinSqmSetIfMaxDWORD | 0xb2901d65L
  2226. RtlGetThreadErrorMode | 0x4b48ad9eL
  2227. RtlKnownExceptionFilter | 0xf2991319L
  2228. EtwEventWriteNoRegistration | 0x21e92d7aL
  2229. _ultoa | 0xedfb8089
  2230. _ui64toa | 0x4f5c62d0
  2231. RtlImpersonateSelf | 0xa13434c8L
  2232. RtlImpersonateSelfEx | 0xbf149025L
  2233. EtwProcessPrivateLoggerRequest | 0xa070edf8L
  2234. RtlGetUnloadEventTraceEx | 0x22cb2c48L
  2235. RtlCreateQueryDebugBuffer | 0x21726502L
  2236. RtlAddAccessDeniedAce | 0x59ff7f64L
  2237. MD5Init | 0xcd8baa7f
  2238. MD5Final | 0x7ec80635
  2239. MD5Update | 0x7b3f5f6e
  2240. RtlDestroyQueryDebugBuffer | 0xf5573e78L
  2241. RtlQueryProcessDebugInformation | 0x2d846419L
  2242. RtlQueryHeapInformation | 0xb3f10751L
  2243. RtlWerpReportException | 0x5f3b4220L
  2244. TpReleaseCleanupGroupMembers | 0x3400090aL
  2245. RtlDeleteTimerQueueEx | 0x75dbebedL
  2246. RtlCutoverTimeToSystemTime | 0x514c5ac5L
  2247. RtlQueryRegistryValues | 0xe6b6f616L
  2248. RtlpCheckDynamicTimeZoneInformation | 0x8e350dbL
  2249. _itow_s | 0x91fbd279
  2250. RtlValidRelativeSecurityDescriptor | 0xc986fe9aL
  2251. DbgPrintEx | 0xe65be5c
  2252. strncpy | 0xaf0c4038
  2253. RtlRemoveVectoredExceptionHandler | 0x880c210eL
  2254. RtlGetProcessHeaps | 0x4b192187L
  2255. WinSqmAddToStream | 0x419a145cL
  2256. LdrLoadAlternateResourceModule | 0x391f8a75L
  2257. WinSqmEndSession | 0xc89b0c5fL
  2258. WinSqmStartSession | 0x509fbef6L
  2259. RtlInterlockedClearBitRun | 0x86df27e6L
  2260. EtwSendNotification | 0xd6f74ce6L
  2261. RtlQueryTimeZoneInformation | 0xcc9d4f1eL
  2262. EtwpGetCpuSpeed | 0xbb28d97eL
  2263. #8 | 0x596f00
  2264. RtlAddVectoredExceptionHandler | 0x554bafa9L
  2265. _vscwprintf | 0xccea6b5aL
  2266. RtlNewSecurityObject | 0x3f4e3270L
  2267. RtlSelfRelativeToAbsoluteSD | 0xb375c0b6L
  2268. TpPostWork | 0xc94fc392
  2269. _wtol | 0xef9554a
  2270. RtlSetIoCompletionCallback | 0x16ebcc62L
  2271. _alldiv | 0x7ebfd4c0
  2272. VerSetConditionMask | 0x7df255b1L
  2273. RtlVerifyVersionInfo | 0x8ea9703eL
  2274. _vsnprintf | 0xa99ab3ee
  2275. strncpy_s | 0xa31d3aea
  2276. wcscspn | 0xbb59d4e6
  2277. AlpcGetMessageAttribute | 0x143e523eL
  2278. AlpcInitializeMessageAttribute | 0xab0d1e50L
  2279. AlpcGetHeaderSize | 0xa40bb489L
  2280. RtlMultiByteToUnicodeSize | 0x4c83217bL
  2281. mbstowcs | 0xa0396ff7
  2282. RtlCharToInteger | 0x4599d166L
  2283. DbgPrint | 0xab26693f
  2284. RtlIdentifierAuthoritySid | 0xeb7a5e83L
  2285. _wtoi | 0xef95547
  2286. NtdllDialogWndProc_A | 0xe0602430L
  2287. cos | 0xb8866ca
  2288. _CIcos | 0xea5f3dd5
  2289. log | 0xb888d07
  2290. _CIlog | 0xea5f6412
  2291. pow | 0xb889e1b
  2292. _CIpow | 0xea5f7526
  2293. sin | 0xb88aa0f
  2294. _CIsin | 0xea5f811a
  2295. _CIsqrt | 0x364fc75a
  2296. sqrt | 0x7c9e0eef
  2297. _alldvrm | 0x56baa3f6
  2298. _alloca_probe_16 | 0xdba3248dL
  2299. _alloca_probe_8 | 0xb914757eL
  2300. _allrem | 0x7ec00fc1
  2301. _ftol | 0xef002d9
  2302. _memccpy | 0xe2329bb2
  2303. atan | 0x7c943aa9
  2304. ceil | 0x7c9514a2
  2305. floor | 0xf71e367
  2306. memchr | 0xd827481
  2307. strcpy | 0x1c9396ca
  2308. strcat | 0x1c9394d6
  2309. strcmp | 0x1c93965e
  2310. strcspn | 0xaf067c12
  2311. strlen | 0x1c93bb9d
  2312. strncat | 0xaf0c3e44
  2313. strpbrk | 0xaf0d54ed
  2314. strrchr | 0xaf0e70ad
  2315. strspn | 0x1c93dacf
  2316. strstr | 0x1c93db57
  2317. tan | 0xb88ad48
  2318. RtlUshortByteSwap | 0xeb93362bL
  2319. RtlUlongByteSwap | 0x7278dbabL
  2320. RtlUlonglongByteSwap | 0x2ddc495bL
  2321. RtlFreeOemString | 0x115df0f1L
  2322. NtCurrentTeb | 0x6ccf7265L
  2323. RtlEnableThreadProfiling | 0x94e954c0L
  2324. RtlDisableThreadProfiling | 0xcecab86dL
  2325. RtlQueryThreadProfiling | 0x5b8a212fL
  2326. RtlReadThreadProfilingData | 0x9407ad6fL
  2327. RtlAppendPathElement | 0x3935706L
  2328. RtlGetLengthWithoutTrailingPathSeperat | 0x22c80c48L
  2329. RtlDosSearchPath_U | 0x532587d4L
  2330. DbgUiConnectToDbg | 0x8de9064aL
  2331. DbgUiGetThreadDebugObject | 0x92513cc6L
  2332. DbgUiSetThreadDebugObject | 0x24276952L
  2333. DbgUiWaitStateChange | 0x152306ecL
  2334. DbgUiContinue | 0x44fe2675L
  2335. DbgUiStopDebugging | 0x7a8aae22L
  2336. DbgUiRemoteBreakin | 0x6f0bdb18L
  2337. DbgUiIssueRemoteBreakin | 0xba0770c1L
  2338. DbgUiDebugActiveProcess | 0xb818b532L
  2339. DbgUiConvertStateChangeStructure | 0x93927189L
  2340. RtlPushFrame | 0x163c51c2L
  2341. RtlPopFrame | 0xdbeccc11L
  2342. RtlGetFrame | 0x952a9322L
  2343. LdrHotPatchRoutine | 0xd17143a8L
  2344. RtlGetUnloadEventTrace | 0xd53f6c2bL
  2345. LdrVerifyImageMatchesChecksumEx | 0x4748d834L
  2346. LdrQueryProcessModuleInformation | 0xb5402408L
  2347. LdrSetAppCompatDllRedirectionCallback | 0xc8a5da99L
  2348. LdrQueryModuleServiceTags | 0x3a1d00c3L
  2349. LdrGetFailureData | 0x29d06169L
  2350. LdrVerifyImageMatchesChecksum | 0x10492d17L
  2351. RtlComputePrivatizedDllName_U | 0xa70a0b67L
  2352. CsrSetPriorityClass | 0xe3ebca91L
  2353. RtlInitOutOfProcessMemoryStream | 0x304e303cL
  2354. RtlWriteMemoryStream | 0xb2508a7L
  2355. RtlSeekMemoryStream | 0x8fd522c4L
  2356. RtlCommitMemoryStream | 0x5f223485L
  2357. RtlRevertMemoryStream | 0xfed04df4L
  2358. RtlUnlockMemoryStreamRegion | 0x3ca9740cL
  2359. RtlStatMemoryStream | 0xfe5b0018L
  2360. RtlCreateProcessReflection | 0x9b7ad675L
  2361. RtlIsCriticalSectionLocked | 0x1e0aec85L
  2362. RtlGetCriticalSectionRecursionCount | 0xbd9f1edaL
  2363. RtlpWaitForCriticalSection | 0xde9f8443L
  2364. RtlConvertExclusiveToShared | 0x3c435acaL
  2365. RtlDumpResource | 0xfe597c75L
  2366. RtlUpdateClonedCriticalSection | 0xff8405cfL
  2367. RtlEnableEarlyCriticalSectionEventCrea | 0x8995b058L
  2368. RtlpNotOwnerCriticalSection | 0x3c26aca3L
  2369. RtlQueryCriticalSectionOwner | 0xffcfc858L
  2370. RtlNewSecurityObjectWithMultipleInheri | 0xb94f4db7L
  2371. RtlSetSecurityObject | 0x33b95332L
  2372. RtlSetSecurityObjectEx | 0x75af10fL
  2373. RtlQuerySecurityObject | 0x615f15dcL
  2374. RtlNewInstanceSecurityObject | 0x24e477e5L
  2375. RtlNewSecurityGrantedAccess | 0x1147edd0L
  2376. RtlCopySecurityDescriptor | 0xcd82ca49L
  2377. RtlCreateAndSetSD | 0x66fdbca1L
  2378. RtlCreateUserSecurityObject | 0xcda817b9L
  2379. RtlConvertToAutoInheritSecurityObject | 0x95b2a836L
  2380. RtlDefaultNpAcl | 0x20cdc72aL
  2381. RtlConvertUiListToApiList | 0x84ec9ccbL
  2382. RtlpQueryProcessDebugInformationRemote | 0x206ae575L
  2383. RtlCommitDebugInfo | 0xa184def3L
  2384. RtlDeCommitDebugInfo | 0xc01f42bcL
  2385. RtlSetProcessDebugInformation | 0x2540022fL
  2386. RtlQueryProcessBackTraceInformation | 0x9e21c852L
  2387. RtlQueryProcessLockInformation | 0x4b88de9bL
  2388. RtlQueryProcessHeapInformation | 0xc3eba730L
  2389. LdrWx86FormatVirtualImage | 0xca0cf7d7L
  2390. RtlRemoveVectoredContinueHandler | 0xaf8ff2e4L
  2391. RtlApplicationVerifierStop | 0x1ea51aedL
  2392. RtlQueueApcWow64Thread | 0xc9835f0fL
  2393. RtlWow64CallFunction64 | 0x7129d36aL
  2394. RtlWow64EnableFsRedirection | 0xb9f77436L
  2395. RtlWakeConditionVariable | 0x5afdf16cL
  2396. RtlSleepConditionVariableCS | 0x1b4786b3L
  2397. RtlSleepConditionVariableSRW | 0x8438a159L
  2398. RtlTryAcquireSRWLockShared | 0xca6215cL
  2399. RtlUpdateClonedSRWLock | 0x16a414d4L
  2400. RtlAcquireReleaseSRWLockExclusive | 0x3ac89c1fL
  2401. RtlReportException | 0x83990a2L
  2402. RtlReportSqmEscalation | 0xa867f467L
  2403. ShipAssert | 0xc24d94b
  2404. ShipAssertMsgW | 0xda62b6c9L
  2405. ShipAssertGetBufferInfo | 0x3e09e751L
  2406. WerReportSQMEvent | 0xb127fe22L
  2407. WinSqmSetEscalationInfo | 0xbb77b47fL
  2408. WinSqmCommonDatapointSetDWORD | 0x72fbe47dL
  2409. WinSqmCommonDatapointSetDWORD64 | 0x2186fee7L
  2410. WinSqmCommonDatapointDelete | 0x1c1a0fa4L
  2411. WinSqmCheckEscalationSetDWORD | 0xfc9073f1L
  2412. WinSqmCheckEscalationSetDWORD64 | 0x627d3b5bL
  2413. WinSqmCheckEscalationSetString | 0xb3bcb308L
  2414. WinSqmCheckEscalationAddToStreamEx | 0x37cd46faL
  2415. WinSqmGetEscalationRuleStatus | 0x9ea0aa03L
  2416. WinSqmGetInstrumentationProperty | 0x8bb8273dL
  2417. WinSqmCommonDatapointSetString | 0xf7963514L
  2418. WinSqmCommonDatapointSetStreamEx | 0x35a86a06L
  2419. WinSqmSetString | 0x99b10947L
  2420. WinSqmSetDWORD64 | 0x6fc597aL
  2421. WinSqmAddToAverageDWORD | 0x35e74e8bL
  2422. WinSqmSetIfMinDWORD | 0x30e6d23L
  2423. #6 | 0x596efe
  2424. #5 | 0x596efd
  2425. #3 | 0x596efb
  2426. #4 | 0x596efc
  2427. #7 | 0x596eff
  2428. #1 | 0x596ef9
  2429. #2 | 0x596efa
  2430. RtlZombifyActivationContext | 0x699b756eL
  2431. RtlIsActivationContextActive | 0x8dbbf2e6L
  2432. RtlComputeImportTableHash | 0xea0521dbL
  2433. CsrIdentifyAlertableThread | 0xb58f8e2dL
  2434. CsrClientCallServer | 0x1e6b0f9fL
  2435. CsrAllocateCaptureBuffer | 0xc9a86380L
  2436. CsrFreeCaptureBuffer | 0xe196251dL
  2437. CsrAllocateMessagePointer | 0x6fefb4f8L
  2438. CsrCaptureMessageBuffer | 0x1e2fa880L
  2439. CsrCaptureMessageString | 0x45cbe51dL
  2440. CsrCaptureTimeout | 0xb26c0a68L
  2441. CsrGetProcessId | 0x3be70e19L
  2442. CsrCaptureMessageMultiUnicodeStringsIn | 0x53ea8f9L
  2443. CsrVerifyRegion | 0x393d65c6L
  2444. AlpcGetMessageFromCompletionList | 0x864b7874L
  2445. AlpcFreeCompletionListMessage | 0xa8d25402L
  2446. AlpcGetCompletionListMessageAttributes | 0x5b410d27L
  2447. AlpcGetCompletionListLastMessageInform | 0x7b8412bfL
  2448. AlpcGetOutstandingCompletionListMessag | 0x52ccf8bL
  2449. AlpcRegisterCompletionListWorkerThread | 0xca3b2972L
  2450. AlpcUnregisterCompletionListWorkerThre | 0xbd89610L
  2451. AlpcRegisterCompletionList | 0xae67a880L
  2452. AlpcUnregisterCompletionList | 0xef6c4983L
  2453. AlpcRundownCompletionList | 0xe6a34a28L
  2454. AlpcAdjustCompletionListConcurrencyCou | 0x3a447b8L
  2455. AlpcMaxAllowedMessageLength | 0x24b1755aL
  2456. DbgPrompt | 0xff6d714
  2457. DbgQueryDebugFilterState | 0x522ebf36L
  2458. DbgSetDebugFilterState | 0xd0db2f4cL
  2459. DbgPrintReturnControlC | 0x35e7be83L
  2460. vDbgPrintEx | 0x3cdd32f2L
  2461. vDbgPrintExWithPrefix | 0x1f2a975cL
  2462. LdrGetFileNameFromLoadAsDataTable | 0x2533e0f2L
  2463. LdrEnumResources | 0xc6d21877L
  2464. LdrFlushAlternateResourceModules | 0x32521baaL
  2465. LdrSetMUICacheType | 0x9c3ed34L
  2466. LdrFindResourceDirectory_U | 0xe7adb0b9L
  2467. RtlDeNormalizeProcessParams | 0x91231fb4L
  2468. RtlWow64LogMessageInEventLogger | 0x763f589eL
  2469. RtlCreateUserProcess | 0x610d9a9L
  2470. RtlCreateUserThread | 0xcac0e502L
  2471. RtlCloneUserProcess | 0x42580a46L
  2472. RtlCreateProcessParameters | 0x9896b3deL
  2473. RtlQueryModuleInformation | 0x4f0b95f9L
  2474. LdrProcessRelocationBlock | 0xa34bbde1L
  2475. LdrResRelease | 0x7d34ed32L
  2476. RtlUpcaseUnicodeToOemN | 0x874a77b1L
  2477. RtlCustomCPToUnicodeN | 0xa91a457dL
  2478. RtlUnicodeToCustomCPN | 0x67a78addL
  2479. RtlUpcaseUnicodeToCustomCPN | 0x552cf19eL
  2480. RtlConsoleMultiByteToUnicodeN | 0x354ebea1L
  2481. RtlTimeToElapsedTimeFields | 0xbd582edL
  2482. RtlSecondsSince1980ToTime | 0x8ff38a9cL
  2483. RtlSecondsSince1970ToTime | 0xa3b1b5bbL
  2484. RtlSystemTimeToLocalTime | 0x2b1ce988L
  2485. RtlLocalTimeToSystemTime | 0x9afa6968L
  2486. NtGetTickCount | 0xfa12297bL
  2487. PfxInitialize | 0x38003bc5L
  2488. PfxRemovePrefix | 0xfd8df54fL
  2489. PfxInsertPrefix | 0x524744b6L
  2490. PfxFindPrefix | 0x79f67302L
  2491. RtlStartRXact | 0x43944ea7L
  2492. RtlAbortRXact | 0xb5afcc91L
  2493. RtlAddAttributeActionToRXact | 0x25a1e377L
  2494. RtlAddActionToRXact | 0x32d06583L
  2495. RtlInitializeRXact | 0xfb7bfd2bL
  2496. RtlApplyRXact | 0x3e8c2e1fL
  2497. RtlApplyRXactNoFlush | 0xd5a042feL
  2498. RtlSelfRelativeToAbsoluteSD2 | 0x222dd7a8L
  2499. RtlRunEncodeUnicodeString | 0x6c251298L
  2500. RtlRunDecodeUnicodeString | 0x5c83792eL
  2501. RtlEraseUnicodeString | 0xf8c9c025L
  2502. RtlAdjustPrivilege | 0x30e19609L
  2503. RtlCopySidAndAttributesArray | 0x6b29eabL
  2504. RtlCreateVirtualAccountSid | 0x71b2e89fL
  2505. RtlRemovePrivileges | 0x57d5367fL
  2506. RtlEqualLuid | 0xf017a19dL
  2507. RtlCopyLuid | 0xe01b5c80L
  2508. RtlCopyLuidAndAttributesArray | 0xf014d5d9L
  2509. RtlSetControlSecurityDescriptor | 0x411767fbL
  2510. RtlAreAllAccessesGranted | 0x2824d157L
  2511. RtlAreAnyAccessesGranted | 0xec8b81c6L
  2512. RtlOwnerAcesPresent | 0x8f5a20ffL
  2513. RtlGetSecurityDescriptorRMControl | 0x49cc4aceL
  2514. RtlSetSecurityDescriptorRMControl | 0x7cfc965aL
  2515. RtlMapSecurityErrorToNtStatus | 0xd45d4600L
  2516. RtlSidHashInitialize | 0xe5f3e64dL
  2517. RtlSidHashLookup | 0xf0da3215L
  2518. RtlSidIsHigherLevel | 0xd2fb13e2L
  2519. RtlSidEqualLevel | 0x3253faa7L
  2520. RtlSidDominates | 0x865755bbL
  2521. RtlReplaceSidInSd | 0x9f484601L
  2522. RtlSetAttributesSecurityDescriptor | 0xb092b3a1L
  2523. RtlSetInformationAcl | 0x25faffd9L
  2524. RtlAddCompoundAce | 0x2dc812eeL
  2525. RtlAddAccessDeniedAceEx | 0xd7dcf1c1L
  2526. RtlAddAuditAccessAce | 0x170f6972L
  2527. RtlAddAuditAccessAceEx | 0x188f974fL
  2528. RtlAddAccessAllowedObjectAce | 0x67634d1aL
  2529. RtlAddAccessDeniedObjectAce | 0xb96b425bL
  2530. RtlAddAuditAccessObjectAce | 0xb6f1fee9L
  2531. RtlDestroyAtomTable | 0x7c97767aL
  2532. RtlEmptyAtomTable | 0x76d419dfL
  2533. RtlPinAtomInAtomTable | 0xaf094fdfL
  2534. RtlAddIntegrityLabelToBoundaryDescript | 0xbb5b06a4L
  2535. RtlImageRvaToVa | 0x579624fdL
  2536. RtlZeroHeap | 0x1c3202d5L
  2537. RtlExtendMemoryBlockLookaside | 0x196f8ebeL
  2538. RtlLockMemoryBlockLookaside | 0x7dca419fL
  2539. RtlResetMemoryBlockLookaside | 0x2a97d599L
  2540. RtlUnlockMemoryBlockLookaside | 0xf767a3e2L
  2541. RtlExtendMemoryZone | 0x5250474L
  2542. RtlResetMemoryZone | 0x9d4eed8fL
  2543. RtlDowncaseUnicodeChar | 0xa5f035b0L
  2544. RtlxUnicodeStringToOemSize | 0x7a98c50cL
  2545. RtlxOemStringToUnicodeSize | 0x2fd21e4cL
  2546. RtlUpcaseUnicodeStringToAnsiString | 0x6df9a33bL
  2547. RtlUpcaseUnicodeStringToOemString | 0x5ac94a51L
  2548. RtlUnicodeStringToCountedOemString | 0x91702fe2L
  2549. RtlUpcaseUnicodeStringToCountedOemStri | 0xef80762eL
  2550. RtlEqualDomainName | 0xe6bdb3a8L
  2551. RtlEqualComputerName | 0x470d2b1fL
  2552. RtlDnsHostNameToComputerName | 0x9a6243eeL
  2553. RtlCompareString | 0xb0067e35L
  2554. RtlUpperString | 0xef04e1faL
  2555. RtlAppendAsciizToString | 0xffda672cL
  2556. RtlAppendStringToString | 0xc6f86940L
  2557. RtlSetAllBits | 0x2c68274eL
  2558. RtlFindSetBits | 0x4a6c2f6L
  2559. RtlFindClearRuns | 0xbd9fc587L
  2560. RtlFindLongestRunClear | 0xd461b090L
  2561. RtlNumberOfSetBits | 0x17a0e093L
  2562. RtlNumberOfClearBits | 0x778ec60eL
  2563. RtlAreBitsClear | 0x862abfc8L
  2564. RtlFindNextForwardRunClear | 0x5ee44928L
  2565. RtlInterlockedSetBitRun | 0x5a33b22bL
  2566. RtlFindLastBackwardRunClear | 0xdbab9ce7L
  2567. RtlFindMostSignificantBit | 0xb110be49L
  2568. RtlFindLeastSignificantBit | 0x104fb9fL
  2569. RtlFindSetBitsAndClear | 0x8657bd30L
  2570. RtlAssert | 0x695ff389
  2571. RtlBarrier | 0xb850a6be
  2572. RtlBarrierForDelete | 0x2443c9d8L
  2573. RtlInitBarrier | 0xa44552L
  2574. RtlDeleteBarrier | 0xa4453c31L
  2575. RtlCaptureStackContext | 0x4f5cb086L
  2576. RtlGetCallersAddress | 0xba4b4ac3L
  2577. RtlLargeIntegerToChar | 0x20abcaf1L
  2578. RtlInt64ToUnicodeString | 0xe4d094adL
  2579. RtlWriteRegistryValue | 0xf7636678L
  2580. RtlCheckRegistryKey | 0x7e77ba57L
  2581. RtlCreateRegistryKey | 0x6331b94dL
  2582. RtlDeleteRegistryValue | 0xc5ce64e0L
  2583. RtlSetTimeZoneInformation | 0x3a815234L
  2584. RtlSetDynamicTimeZoneInformation | 0xd74085d9L
  2585. RtlQueryDynamicTimeZoneInformation | 0x5eb59783L
  2586. RtlGetThreadLangIdByIndex | 0xe3ea0671L
  2587. RtlpGetLCIDFromLangInfoNode | 0xf77fa5ebL
  2588. RtlGetProcessPreferredUILanguages | 0xb20c662aL
  2589. RtlpIsQualifiedLanguage | 0x4705d4dbL
  2590. RtlConvertLCIDToString | 0x2021a88eL
  2591. RtlpConvertLCIDsToCultureNames | 0x8e9ebd32L
  2592. RtlpConvertCultureNamesToLCIDs | 0x6ca26552L
  2593. RtlpVerifyAndCommitUILanguageSettings | 0x2ee688cbL
  2594. RtlpCleanupRegistryKeys | 0xd4d19d44L
  2595. RtlGetSystemPreferredUILanguages | 0xabebb790L
  2596. RtlpSetUserPreferredUILanguages | 0x3412be66L
  2597. RtlSetProcessPreferredUILanguages | 0xe53cb1b6L
  2598. RtlGetUILanguageInfo | 0x3c4bba85L
  2599. RtlGetFileMUIPath | 0x45db50efL
  2600. RtlGetUserPreferredUILanguages | 0x570fd60aL
  2601. RtlpSetInstallLanguage | 0x7ff19eeeL
  2602. RtlIoEncodeMemIoResource | 0x53dfcb5cL
  2603. RtlCmEncodeMemIoResource | 0xd5438f94L
  2604. RtlIoDecodeMemIoResource | 0x443e31f2L
  2605. RtlCmDecodeMemIoResource | 0xc5a1f62aL
  2606. RtlFindClosestEncodableLength | 0x1e73a5f4L
  2607. RtlProtectHeap | 0xfc2fdbd6L
  2608. RtlSetUserFlagsHeap | 0x5451a7cdL
  2609. RtlQueryTagHeap | 0xfa1c74e7L
  2610. RtlEnumProcessHeaps | 0x5a4d2dfcL
  2611. RtlWalkHeap | 0x153c3b64L
  2612. RtlMultipleAllocateHeap | 0xf7d143a6L
  2613. RtlMultipleFreeHeap | 0xdb872da3L
  2614. RtlValidateProcessHeaps | 0xe310cad1L
  2615. RtlCompareAltitudes | 0x4716a5adL
  2616. RtlGetCompressionWorkSpaceSize | 0xfb210f3L
  2617. RtlCompressBuffer | 0x21abfa7dL
  2618. RtlDecompressBuffer | 0xf73bbd46L
  2619. RtlDecompressFragment | 0x73a54bc0L
  2620. RtlComputeCrc32 | 0x591d2f51L
  2621. RtlConnectToSm | 0x2c5a4324L
  2622. RtlSendMsgToSm | 0xc1b348bL
  2623. RtlDeleteHashTable | 0xb997ef16L
  2624. RtlInsertEntryHashTable | 0x61c9c84aL
  2625. RtlRemoveEntryHashTable | 0x1f2001e3L
  2626. RtlLookupEntryHashTable | 0xc75e37cfL
  2627. RtlGetNextEntryHashTable | 0x76dac194L
  2628. RtlInitEnumerationHashTable | 0x1b0d717eL
  2629. RtlEnumerateEntryHashTable | 0xa9a50dbbL
  2630. RtlEndEnumerationHashTable | 0x599444a1L
  2631. RtlInitWeakEnumerationHashTable | 0x99a75286L
  2632. RtlWeaklyEnumerateEntryHashTable | 0xb82d8848L
  2633. RtlEndWeakEnumerationHashTable | 0x97d8ff29L
  2634. RtlExpandHashTable | 0x181b83a3L
  2635. RtlContractHashTable | 0x7bca88e1L
  2636. RtlCreateHashTable | 0x292cb677L
  2637. RtlLocateLegacyContext | 0x606c9529L
  2638. RtlSetExtendedFeaturesMask | 0x3d33871fL
  2639. RtlCopyExtendedContext | 0xce86b468L
  2640. RtlCopyContext | 0x1e8df417L
  2641. RtlInitializeExtendedContext | 0x1d80537fL
  2642. RtlGetExtendedContextLength | 0x5cfa1d8fL
  2643. RtlGetExtendedFeaturesMask | 0xdab01613L
  2644. RtlLocateExtendedFeature | 0x75c719ecL
  2645. RtlCopyMappedMemory | 0x1c7b9ce2L
  2646. RtlLockBootStatusData | 0xb5a149d2L
  2647. RtlUnlockBootStatusData | 0x45bef5d5L
  2648. RtlGetSetBootStatusData | 0x1ab654b5L
  2649. RtlCreateBootStatusDataFile | 0xc1e4187dL
  2650. RtlCreateEnvironment | 0x3c33af80L
  2651. RtlSetCurrentEnvironment | 0x863c785bL
  2652. RtlSetEnvironmentStrings | 0xec63ac02L
  2653. RtlCreateSystemVolumeInformationFolder | 0x7e687acaL
  2654. RtlSubtreeSuccessor | 0x5da66babL
  2655. RtlRealPredecessor | 0xbf54ec7aL
  2656. RtlDeleteNoSplay | 0x5e7649f0L
  2657. RtlGetElementGenericTable | 0x149c7f46L
  2658. RtlEnumerateGenericTable | 0x7ea81742L
  2659. RtlIsGenericTableEmptyAvl | 0xfd49f6eaL
  2660. RtlGetElementGenericTableAvl | 0x64e7a5a9L
  2661. RtlNumberGenericTableElementsAvl | 0x909faa05L
  2662. RtlEnumerateGenericTableLikeADirectory | 0xd94c6f3dL
  2663. RtlRegisterSecureMemoryCacheCallback | 0x822da75dL
  2664. RtlDeregisterSecureMemoryCacheCallback | 0x1b459386L
  2665. RtlFlushSecureMemoryCache | 0x964e8bcdL
  2666. RtlIpv6AddressToStringA | 0xe6840b5dL
  2667. RtlIpv6AddressToStringExA | 0x97b4775aL
  2668. RtlIpv4AddressToStringA | 0xc0d0475bL
  2669. RtlIpv4AddressToStringExA | 0x35ffaad8L
  2670. RtlEthernetAddressToStringA | 0x1774b857L
  2671. RtlEthernetAddressToStringW | 0x1774b86dL
  2672. RtlIpv6StringToAddressExA | 0x25af239aL
  2673. RtlIpv4StringToAddressExA | 0xc3fa5718L
  2674. RtlEthernetStringToAddressA | 0x62575497L
  2675. RtlEthernetStringToAddressW | 0x625754adL
  2676. RtlFormatMessage | 0xf7cc9585L
  2677. RtlIsNameLegalDOS8Dot3 | 0x8a05ad1L
  2678. RtlGenerate8dot3Name | 0xd5988935L
  2679. RtlSetProcessIsCritical | 0x27e56ac9L
  2680. RtlSetThreadIsCritical | 0xf7da8242L
  2681. RtlGetEnabledExtendedFeatures | 0x65094bb2L
  2682. RtlGetLastNtStatus | 0x4416c6d1L
  2683. RtlIsValidLocaleName | 0x30b90494L
  2684. RtlHeapTrkInitialize | 0x15449778L
  2685. RtlIdnToNameprepUnicode | 0xeba036d4L
  2686. RtlIdnToUnicode | 0x461182dcL
  2687. RtlInitializeContext | 0x7e616c2eL
  2688. RtlRemoteCall | 0x99b2b17fL
  2689. RtlIsNameInExpression | 0xfd736a9bL
  2690. RtlIsNormalizedString | 0xeb2b0ffL
  2691. RtlUnhandledExceptionFilter2 | 0xf319c611L
  2692. RtlUnhandledExceptionFilter | 0x73f905ffL
  2693. RtlLargeIntegerDivide | 0xfb08a9c5L
  2694. RtlLockCurrentThread | 0xe640bafbL
  2695. RtlUnlockCurrentThread | 0x8d87729eL
  2696. RtlLogStackBackTrace | 0x82115a8fL
  2697. RtlNumberOfSetBitsUlongPtr | 0x745017aeL
  2698. RtlRandom | 0x8fbf2a98
  2699. RtlTraceDatabaseEnumerate | 0x21e3c1a1L
  2700. RtlTraceDatabaseCreate | 0x1503b88fL
  2701. RtlTraceDatabaseDestroy | 0xe529b285L
  2702. RtlTraceDatabaseValidate | 0xe1f4f4e5L
  2703. RtlTraceDatabaseFind | 0x867d63bcL
  2704. RtlTraceDatabaseLock | 0x8680c624L
  2705. RtlTraceDatabaseUnlock | 0x3ebc41e7L
  2706. RtlTraceDatabaseAdd | 0x80324264L
  2707. RtlpGetUserOrMachineUILanguage4NLS | 0xa2a2173fL
  2708. RtlpRefreshCachedUILanguage | 0x8e6ee490L
  2709. RtlpMuiFreeLangRegistryInfo | 0xedd5cbbL
  2710. RtlpLoadMachineUIByPolicy | 0xb3a4e805L
  2711. RtlpNtOpenKey | 0x690959a4L
  2712. RtlpNtCreateKey | 0x1806d6a6L
  2713. RtlpNtQueryValueKey | 0x225657a5L
  2714. RtlpNtSetValueKey | 0x5f886ffbL
  2715. RtlpNtMakeTemporaryKey | 0xf704f7f3L
  2716. RtlpNtEnumerateSubKey | 0x3dad41a2L
  2717. isupper | 0xab28502d
  2718. islower | 0xaa85050a
  2719. isspace | 0xab03df0d
  2720. ispunct | 0xaad08acb
  2721. isalnum | 0xa9bc2e1e
  2722. isprint | 0xaaced1ce
  2723. isgraph | 0xaa2bd373
  2724. iscntrl | 0xa9e19104
  2725. __toascii | 0xc424aa4f
  2726. __iscsym | 0xb644c3db
  2727. __iscsymf | 0x7edd3fa1
  2728. _atoi64 | 0x7f524c5b
  2729. _ltoa | 0xef34d14
  2730. _i64toa | 0x8d797e1b
  2731. _itow | 0xef1a807
  2732. _ltow | 0xef34d2a
  2733. _ultow | 0xedfb809f
  2734. _i64tow | 0x8d797e31
  2735. _lfind | 0xed552ad1
  2736. _memicmp | 0xe235e58c
  2737. _snprintf | 0x6eef5cf8
  2738. _splitpath | 0xdd3f1cbd
  2739. _strlwr | 0xa950e232
  2740. _strupr | 0xa9510794
  2741. _vswprintf | 0x5e66d6b7
  2742. _wcslwr | 0xb1727086
  2743. _wcsnset_s | 0xd642b33d
  2744. _wcsset_s | 0xd8458bef
  2745. _wcstoui64 | 0xe401d6bc
  2746. _wcsupr | 0xb17295e8
  2747. _wtoi64 | 0xb2a3ca31
  2748. labs | 0x7c99f227
  2749. fabs | 0x7c96a7e1
  2750. iswlower | 0x14940401
  2751. iswxdigit | 0xc243b8a1
  2752. iswspace | 0x1512de04
  2753. qsort | 0x103cc7fe
  2754. sprintf | 0xa5b50f0b
  2755. sscanf | 0x1c793bc3
  2756. strnlen | 0xaf0c650b
  2757. strtoul | 0xaf0fbe22
  2758. swprintf | 0x73244fc2
  2759. tolower | 0xeff0fed1
  2760. towlower | 0x77f36a8
  2761. towupper | 0x82281cb
  2762. vsprintf | 0x400db61
  2763. wcscat | 0x24b5232a
  2764. wcscpy | 0x24b5251e
  2765. wcslen | 0x24b549f1
  2766. wcsncat | 0xbb5f9718
  2767. wcsncpy | 0xbb5f990c
  2768. wcsnlen | 0xbb5fbddf
  2769. wcsspn | 0x24b56923
  2770. wcstoul | 0xbb6316f6
  2771. wcstombs | 0x27c5d2d7
  2772. _itoa_s | 0x91fb74e3
  2773. _ltoa_s | 0x98faeec6
  2774. _ultoa_s | 0x5addd37b
  2775. _i64toa_s | 0xd1d17d8d
  2776. _ui64toa_s | 0x98006382
  2777. _ltow_s | 0x98fb4c5c
  2778. _ultow_s | 0x5ade3111
  2779. _i64tow_s | 0xd1d1db23
  2780. _ui64tow_s | 0x9800c118
  2781. _makepath_s | 0x6f140c01L
  2782. _vsnprintf_s | 0x7b177420L
  2783. _snprintf_s | 0xe83a87aaL
  2784. _snscanf_s | 0x103b50c2
  2785. _vsnwprintf_s | 0xdda6f2f7L
  2786. _snwprintf_s | 0xef2c77c1L
  2787. _snwscanf_s | 0x9c1419f9L
  2788. _splitpath_s | 0x29794cafL
  2789. _strnset_s | 0x67b5d569
  2790. _strset_s | 0x4187189b
  2791. _wmakepath_s | 0x874dadb8L
  2792. _wsplitpath_s | 0x48e72546L
  2793. memcpy_s | 0x77f62642
  2794. memmove_s | 0x8dfade8d
  2795. vsprintf_s | 0x7a54453
  2796. sprintf_s | 0xe7350a7d
  2797. sscanf_s | 0x1fb74535
  2798. strncat_s | 0xa314ebf6
  2799. strtok_s | 0x9107569e
  2800. swscanf_s | 0x9b0e9ccc
  2801. MD4Init | 0xcd7991fe
  2802. MD4Update | 0x2e4522ad
  2803. MD4Final | 0x7c72dd94
  2804. EtwCreateTraceInstanceId | 0x5522231aL
  2805. EtwRegisterSecurityProvider | 0xe0c1d0fdL
  2806. EtwEventProviderEnabled | 0x828371adL
  2807. EtwEventWriteString | 0x575078b9L
  2808. EtwWriteUMSecurityEvent | 0x37f302dcL
  2809. EtwEnumerateProcessRegGuids | 0xe840554L
  2810. EtwEventWriteEx | 0xf21d69ffL
  2811. EtwEventWriteFull | 0xef2073b5L
  2812. EtwEventWriteStartScenario | 0xdc059524L
  2813. EtwEventWriteEndScenario | 0xa8b0c82dL
  2814. EtwLogTraceEvent | 0x6eb5a2e8L
  2815. EtwTraceEventInstance | 0x36e9043bL
  2816. EtwSetMark | 0xd09ddfac
  2817. EtwReplyNotification | 0x44b9a148L
  2818. EtwpCreateEtwThread | 0x636a1c81L
  2819. EvtIntReportEventAndSourceAsync | 0x65f4d39fL
  2820. EvtIntReportAuthzEventAndSourceAsync | 0x2b5fb16bL
  2821. TpAllocAlpcCompletion | 0x638abc4eL
  2822. TpWaitForAlpcCompletion | 0xe6dabc7fL
  2823. TpAlpcRegisterCompletionList | 0x37290604L
  2824. TpAlpcUnregisterCompletionList | 0xadfb1807L
  2825. TpQueryPoolStackInformation | 0xdf16c215L
  2826. TpSetDefaultPoolMaxThreads | 0xdcfb2045L
  2827. TpSetDefaultPoolStackInformation | 0xb0a53150L
  2828. TpPoolFreeUnusedNodes | 0xf4c9d912L
  2829. TpCallbackSetEventOnCompletion | 0xb73a27fbL
  2830. TpCallbackReleaseSemaphoreOnCompletion | 0xed226012L
  2831. TpCallbackReleaseMutexOnCompletion | 0x8dcf42c1L
  2832. TpCallbackLeaveCriticalSectionOnComple | 0xf5711ba0L
  2833. TpCallbackUnloadDllOnCompletion | 0x676dde0cL
  2834. TpDbgSetLogRoutine | 0x4490240aL
  2835. TpDbgGetFreeInfo | 0x31721004L
  2836. TpDbgDumpHeapUsage | 0x8469f6ffL
  2837. RtlDebugPrintTimes | 0xae1cc40dL
  2838. RtlDeleteTimerQueue | 0x9561fe90L
  2839. RtlUpdateTimer | 0x89d1a79bL
  2840. RtlCancelTimer | 0xdfb908feL
  2841. RtlSetTimer | 0xa9392764L
  2842. RtlDeregisterWait | 0xc0d8989aL
  2843. SbExecuteProcedure | 0xfd89b7b6L
  2844. RtlAllocateMemoryZone | 0xcda57e51L
  2845. RtlFreeMemoryBlockLookaside | 0xfbfd0ad8L
  2846. RtlAllocateMemoryBlockLookaside | 0x74a3c0dbL
  2847. NlsMbCodePageTag | 0xe91e6575L
  2848. NlsMbOemCodePageTag | 0x73fd34b6L
  2849. NlsAnsiCodePage | 0x796c7bd5L
  2850. _fltused | 0xd837dbbb
Add Comment
Please, Sign In to add comment