Permalink
Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
executable file 12682 lines (12681 sloc) 228 KB
## Memory tracing for PID = 5696 started
### Listing Symbols
unnamedImageEntryPoint
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InterlockedCompareExchange
InterlockedExchangeAdd
KernelBaseGetGlobalData
unnamedImageEntryPoint
GetErrorMode
SetErrorMode
CreateIoCompletionPort
PostQueuedCompletionStatus
GetOverlappedResult
GetQueuedCompletionStatus
GetQueuedCompletionStatusEx
GetLastError
CreatePipe
ConnectNamedPipe
DisconnectNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
GetNamedPipeAttribute
GetNamedPipeClientComputerNameW
CreateNamedPipeW
WaitNamedPipeW
PeekNamedPipe
Beep
FileTimeToSystemTime
SystemTimeToFileTime
CompareFileTime
GetSystemTimeAdjustment
GetLocalTime
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTickCount64
FileTimeToLocalFileTime
LocalFileTimeToFileTime
InvalidateTzSpecificCache
SetLocalTime
GetTimeZoneInformation
GetDynamicTimeZoneInformation
GetTimeZoneInformationForYear
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTimeEx
TzSpecificLocalTimeToSystemTimeEx
lstrcmpA
lstrcmp
lstrcmpiA
lstrcmpi
lstrcpynA
lstrcpyn
lstrlen
lstrlenA
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenW
UnregisterWaitEx
CreateTimerQueue
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
DeleteTimerQueueEx
RegisterWaitForSingleObjectEx
BaseReleaseProcessDllPath
BaseReleaseProcessExePath
BaseInvalidateDllSearchPathCache
BaseInvalidateProcessSearchPathCache
SetThreadStackGuarantee
BaseGetProcessDllPath
BaseGetProcessExePath
SetFileApisToANSI
SetFileApisToOEM
AreFileApisANSI
RaiseException
CloseHandle
DuplicateHandle
GetHandleInformation
SetHandleInformation
GetStdHandle
SetStdHandle
SetStdHandleEx
SetEndOfFile
SetFilePointer
SetFilePointerEx
GetFileInformationByHandle
GetFileTime
SetFileTime
LockFile
LockFileEx
UnlockFileEx
GetFileSizeEx
ReadFileEx
WriteFileEx
DeviceIoControl
CancelIoEx
ReadFileScatter
WriteFileGather
SetFileValidData
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
SetHandleCount
LockResource
GetFileType
ReadFile
WriteFile
FlushFileBuffers
UnlockFile
GetFileSize
GetFinalPathNameByHandleW
GetFinalPathNameByHandleA
CreateFileMappingNumaW
CreateFileMappingW
OpenFileMappingW
MapViewOfFileExNuma
FlushViewOfFile
UnmapViewOfFile
MapViewOfFile
MapViewOfFileEx
ReadProcessMemory
WriteProcessMemory
VirtualAllocExNuma
VirtualFreeEx
VirtualProtectEx
VirtualQueryEx
VirtualFree
VirtualAllocEx
VirtualProtect
VirtualQuery
VirtualAlloc
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
SetProcessAffinityUpdateMode
QueryProcessAffinityUpdateMode
IsWow64Process
OpenProcess
ExitProcess
TerminateProcess
GetExitCodeProcess
FatalAppExitW
GetCommandLineA
GetCommandLineW
GetCurrentProcess
GetProcessId
GetSystemInfo
SetPriorityClass
GetPriorityClass
GetProcessTimes
SetProcessShutdownParameters
NeedCurrentDirectoryForExePathA
NeedCurrentDirectoryForExePathW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
FatalAppExitA
GetStartupInfoW
GetCurrentProcessId
GetProcessVersion
DefineDosDeviceW
QueryDosDeviceW
SetEnvironmentStringsW
SetEnvironmentVariableA
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
ExpandEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
CreateEventExW
SetEvent
ResetEvent
PulseEvent
CreateSemaphoreExW
ReleaseSemaphore
CreateMutexExW
ReleaseMutex
CreateWaitableTimerExW
SetWaitableTimerEx
CancelWaitableTimer
CreateEventExA
CreateEventW
OpenEventW
OpenSemaphoreW
CreateMutexExA
CreateMutexW
OpenMutexW
WaitForSingleObjectEx
WaitForMultipleObjectsEx
OpenWaitableTimerW
SetWaitableTimer
CreateEventA
OpenEventA
CreateMutexA
WaitForSingleObject
FreeLibraryAndExitThread
DisableThreadLibraryCalls
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExA
GetModuleHandleExW
GetProcAddress
AddDllDirectory
RemoveDllDirectory
SetDefaultDllDirectories
GetVersion
GetVersionExW
BaseDllFreeResourceId
LoadResource
SizeofResource
FreeResource
LoadLibraryExW
LoadLibraryExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
BaseDllMapResourceIdW
FindResourceExW
DebugBreak
OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW
OpenThread
GetThreadPriority
SetThreadPriorityBoost
GetThreadPriorityBoost
TerminateThread
GetExitCodeThread
GetCurrentThread
GetCurrentThreadId
GetThreadId
GetProcessIdOfThread
SuspendThread
ResumeThread
SleepEx
TlsGetValue
TlsFree
QueueUserAPC
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
SwitchToThread
CreateRemoteThreadEx
SetThreadPriority
Sleep
TlsAlloc
TlsSetValue
CreateThread
CreateRemoteThread
ProcessIdToSessionId
LoadStringBaseExW
LoadStringA
LoadStringW
FormatMessageA
FormatMessageW
LocalFree
GlobalFree
GlobalAlloc
GlobalMemoryStatusEx
LocalLock
LocalUnlock
HeapCreate
HeapDestroy
HeapSummary
HeapValidate
GetProcessHeap
GetProcessHeaps
HeapCompact
HeapLock
HeapUnlock
HeapWalk
HeapSetInformation
HeapQueryInformation
LocalAlloc
LocalReAlloc
GetLogicalDrives
SearchPathW
GetTempFileNameW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetDriveTypeW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetVolumeInformationByHandleW
GetDriveTypeA
GetVolumeInformationW
FindNextVolumeW
FindFirstVolumeW
FindVolumeClose
NotifyMountMgr
DeleteVolumeMountPointW
GetVolumePathNameW
GetComputerNameExW
GetComputerNameExA
CreateDirectoryW
RemoveDirectoryW
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesW
GetFileAttributesW
GetFileAttributesExW
DeleteFileW
SetFileAttributesA
GetFileAttributesA
GetFileAttributesExA
DeleteFileA
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
FindNextFileW
FindClose
FindFirstFileExW
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindFirstFileExA
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetFullPathNameA
GetCurrentDirectoryA
GetShortPathNameW
GetLongPathNameW
GetLongPathNameA
SetFileInformationByHandle
DeleteProcThreadAttributeList
CreateFileW
CreateFileA
IsProcessInJob
DuplicateTokenEx
AllocateLocallyUniqueId
AccessCheck
AccessCheckByType
AccessCheckByTypeResultList
OpenProcessToken
OpenThreadToken
GetTokenInformation
SetTokenInformation
AdjustTokenPrivileges
AdjustTokenGroups
PrivilegeCheck
AccessCheckAndAuditAlarmW
AccessCheckByTypeAndAuditAlarmW
AccessCheckByTypeResultListAndAuditAlarmW
AccessCheckByTypeResultListAndAuditAlarmByHandleW
ObjectOpenAuditAlarmW
ObjectPrivilegeAuditAlarmW
ObjectCloseAuditAlarmW
ObjectDeleteAuditAlarmW
PrivilegedServiceAuditAlarmW
IsValidSid
EqualSid
EqualPrefixSid
GetSidLengthRequired
InitializeSid
FreeSid
AllocateAndInitializeSid
GetSidIdentifierAuthority
GetSidSubAuthority
GetSidSubAuthorityCount
GetLengthSid
CopySid
AreAllAccessesGranted
AreAnyAccessesGranted
MapGenericMask
IsValidAcl
InitializeAcl
GetAclInformation
SetAclInformation
AddAce
DeleteAce
GetAce
AddAccessAllowedAce
AddAccessAllowedAceEx
AddMandatoryAce
AddAccessDeniedAce
AddAccessDeniedAceEx
AddAuditAccessAce
AddAuditAccessAceEx
AddAccessAllowedObjectAce
AddAccessDeniedObjectAce
AddAuditAccessObjectAce
FindFirstFreeAce
InitializeSecurityDescriptor
IsValidSecurityDescriptor
IsValidRelativeSecurityDescriptor
GetSecurityDescriptorLength
GetSecurityDescriptorControl
SetSecurityDescriptorControl
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
SetSecurityDescriptorOwner
GetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetSecurityDescriptorGroup
CreatePrivateObjectSecurity
ConvertToAutoInheritPrivateObjectSecurity
CreatePrivateObjectSecurityEx
CreatePrivateObjectSecurityWithMultipleInheritance
SetPrivateObjectSecurity
SetPrivateObjectSecurityEx
GetPrivateObjectSecurity
DestroyPrivateObjectSecurity
MakeSelfRelativeSD
MakeAbsoluteSD
SetSecurityAccessMask
QuerySecurityAccessMask
SetFileSecurityW
GetFileSecurityW
SetKernelObjectSecurity
GetKernelObjectSecurity
ImpersonateNamedPipeClient
ImpersonateSelf
RevertToSelf
ImpersonateLoggedOnUser
SetThreadToken
ImpersonateAnonymousToken
CreateRestrictedToken
IsTokenRestricted
MakeAbsoluteSD2
GetSecurityDescriptorRMControl
SetSecurityDescriptorRMControl
IsWellKnownSid
CreateWellKnownSid
GetWindowsAccountDomainSid
EqualDomainSid
DuplicateToken
CheckTokenMembership
InternalLcidToName
GetCalendar
GetNamedLocaleHashNode
GetCPHashNode
NlsGetCacheUpdateCount
CheckGroupPolicyEnabled
NlsGetACPFromLocale
GetCPFileNameFromRegistry
GetStringTypeA
CompareStringA
GetLocaleInfoA
EnumSystemLocalesA
LCMapStringA
GetStringTypeW
FindStringOrdinal
GetStringTypeExW
CompareStringOrdinal
LCMapStringW
CompareStringW
FindNLSString
NlsCheckPolicy
GetFallbackDisplayName
IsValidLanguageGroup
GetThreadLocale
GetSystemDefaultLangID
GetSystemDefaultLCID
GetUserDefaultLCID
GetPtrCalData
GetPtrCalDataArray
GetEraNameCountedString
IsValidLocaleName
NlsValidateLocale
GetStringTableEntry
GetUserInfoWord
NlsIsUserDefaultLocale
IsValidLocale
ConvertDefaultLocale
SetThreadLocale
GetUserDefaultLangID
GetSystemDefaultLocaleName
GetUserDefaultLocaleName
VerLanguageNameW
VerLanguageNameA
SetCalendarInfoW
LCIDToLocaleName
LocaleNameToLCID
ResolveLocaleName
GetUserInfo
GetLocaleInfoHelper
SetLocaleInfoW
GetCalendarInfoW
GetCalendarInfoEx
GetLocaleInfoW
GetLocaleInfoEx
NlsUpdateSystemLocale
NlsUpdateLocale
NlsDispatchAnsiEnumProc
Internal_EnumSystemLanguageGroups
Internal_EnumLanguageGroupLocales
Internal_EnumUILanguages
Internal_EnumSystemLocales
Internal_EnumSystemCodePages
Internal_EnumCalendarInfo
EnumSystemLanguageGroupsW
EnumLanguageGroupLocalesW
EnumUILanguagesW
EnumSystemLocalesW
EnumSystemLocalesEx
EnumSystemCodePagesW
EnumCalendarInfoW
EnumCalendarInfoExW
EnumCalendarInfoExEx
Internal_EnumTimeFormats
Internal_EnumDateFormats
EnumTimeFormatsW
EnumTimeFormatsEx
EnumDateFormatsW
EnumDateFormatsExW
EnumDateFormatsExEx
FoldStringW
LCMapStringEx
GetACP
GetOEMCP
IsDBCSLeadByte
SpecialMBToWC
IsValidCodePage
GetCPInfo
GetCPInfoExW
IsDBCSLeadByteEx
MultiByteToWideChar
WideCharToMultiByte
GetNumberFormatW
GetNumberFormatEx
GetCurrencyFormatW
GetCurrencyFormatEx
GetFileMUIInfo
GetFileMUIPath
GetUILanguageInfo
GetThreadPreferredUILanguages
GetProcessPreferredUILanguages
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetSystemPreferredUILanguages
GetUserPreferredUILanguages
GetThreadUILanguage
NotifyRedirectedStringChange
LoadStringByReference
NlsEventDataDescCreate
NlsWriteEtwEvent
OpenRegKey
GetNLSVersion
GetNLSVersionEx
CompareStringEx
FindNLSStringEx
IsNLSDefinedString
CreateThreadpool
SetThreadpoolThreadMinimum
SetThreadpoolStackInformation
QueryThreadpoolStackInformation
CreateThreadpoolCleanupGroup
TrySubmitThreadpoolCallback
CreateThreadpoolWork
CreateThreadpoolTimer
CreateThreadpoolWait
CreateThreadpoolIo
CallbackMayRunLong
BemCreateReference
BemFreeReference
BemCopyReference
BemCreateContractFrom
BemFreeContract
GetStartupInfoA
CreateProcessW
CreateProcessA
Sleep
GetTickCount
ReleaseMutex
WaitForSingleObject
WaitForSingleObjectEx
SetLastError
GetLastError
TlsGetValue
GetCurrentProcessId
SleepEx
GetProcAddress
GetModuleHandleA
FlsGetValue
ProcessIdToSessionId
WriteFile
WriteConsoleA
GetConsoleMode
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetCurrentThreadId
InterlockedExchange
InterlockedCompareExchange
RegKrnGetGlobalState
GetModuleFileNameA
HeapFree
GetProcessHeap
TlsSetValue
OpenEventW
BaseSetLastNTError
LocalAlloc
SetEvent
ResetEvent
lstrlenW
WideCharToMultiByte
QueryPerformanceCounter
IsDBCSLeadByte
OpenFileMappingW
GetACP
LCMapStringW
SetFilePointer
GetCurrentThread
GetCurrentProcess
UnmapViewOfFile
CreateEventW
VirtualAlloc
VirtualFree
DuplicateHandle
MapViewOfFile
CreateFileMappingW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeW
IsWow64Process
GetFileSize
OpenProcess
WaitForMultipleObjectsEx
GetVersionExW
SetErrorMode
GetFileAttributesW
CompareFileTime
GetEnvironmentVariableW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
GetModuleHandleW
FreeLibrary
CreateThread
GetSystemTimeAsFileTime
GetVersionExA
GetFileType
TlsFree
FlsFree
HeapDestroy
GetThreadLocale
QueryPerformanceFrequency
FlsSetValue
WaitForMultipleObjects
GlobalAddAtomW
DeviceIoControl
CreateEventA
FindResourceExW
GetSystemDefaultLCID
SetThreadPriority
LocalFree
RegEnumKeyExW
FindAtomW
unnamedImageEntryPoint
RegKrnInitialize
GetEnvironmentVariableA
BaseThreadInitThunk
IsThreadAFiber
VerifyConsoleIoHandle
CompareStringW
GetLocaleInfoW
CompareStringA
GetUserDefaultLCID
lstrcmpi
lstrcmpiA
MulDiv
ReadFile
CreateFileW
GetFullPathNameW
ExpandEnvironmentStringsW
GetDriveTypeW
CreateMutexW
CreateDirectoryW
VirtualProtect
FlushInstructionCache
GetThreadPriority
GetWindowsDirectoryW
ResumeThread
GetFileTime
FindFirstFileW
FindClose
VirtualQuery
GetVersion
IsValidCodePage
GetUserDefaultUILanguage
GetFileAttributesExW
RegOpenKeyExA
DisableThreadLibraryCalls
LoadLibraryExA
LoadLibraryW
GetModuleFileNameW
LoadLibraryExW
Basep8BitStringToDynamicUnicodeString
TlsAlloc
GetSystemInfo
LoadLibraryA
HeapCreate
OpenEventA
IsDebuggerPresent
GetModuleHandleExW
RegQueryValueExA
OpenFileMappingA
CreateMutexA
MapViewOfFileEx
InitializeCriticalSectionEx
GetStartupInfoW
RegGetValueW
FlsAlloc
GetSystemDirectoryW
OpenMutexW
RegOpenCurrentUser
GetCPInfo
GetCommandLineA
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemWindowsDirectoryW
GetCommandLineW
IsProcessorFeaturePresent
FindActCtxSectionGuid
GlobalAlloc
RaiseException
hread
lread
llseek
lstrcmpW
LoadResource
LockResource
FindResourceW
LocalLock
LocalUnlock
LocalReAlloc
GetFileSizeEx
RegSetValueExW
lstrlen
lstrlenA
SystemTimeToFileTime
GetSystemTime
GetLocalTime
SizeofResource
FormatMessageW
GetTimeZoneInformation
FlushFileBuffers
HeapCompact
LoadStringBaseExW
GetLogicalDrives
GetFileInformationByHandle
CreateFileA
GetFileAttributesA
FileTimeToSystemTime
DeleteFileA
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
FindNextFileW
CreateFileMappingA
GlobalFree
GetStringTypeExW
GetCurrentDirectoryW
HeapSetInformation
RegisterWaitForInputIdle
LoadAppInitDlls
QueryActCtxSettingsW
SortGetHandle
ExitProcess
TerminateThread
RegEnumValueW
RegQueryInfoKeyW
RegCreateKeyExW
SetUnhandledExceptionFilter
DeleteFileW
SetThreadLocale
SetEnvironmentVariableW
SetConsoleCtrlHandler
GlobalMemoryStatus
CreateActCtxW
GetLongPathNameW
FindActCtxSectionStringW
GetProcessAffinityMask
SetHandleCount
QueryActCtxW
GetShortPathNameW
SetThreadStackGuarantee
CreateMemoryResourceNotification
GetSystemWow64DirectoryW
GetComputerNameW
FileTimeToLocalFileTime
GetFullPathNameA
FindFirstFileA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsA
GetLogicalDriveStringsA
BaseDllReadWriteIniFile
GetPrivateProfileStringW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GetVolumePathNamesForVolumeNameW
BaseIsAppcompatInfrastructureDisabled
GetNativeSystemInfo
RegNotifyChangeKeyValue
OpenThread
SetCurrentDirectoryW
BaseFormatObjectAttributes
RegCreateKeyExA
RegSetValueExA
QueryFullProcessImageNameW
GetProductInfo
GetExitCodeProcess
FindFirstFileExW
SetCurrentDirectoryA
GetPrivateProfileStringA
lstrcpynA
lstrcpyn
SetHandleInformation
RegQueryInfoKeyA
SetProcessWorkingSetSize
SetProcessWorkingSetSizeEx
BaseCheckAppcompatCacheEx
BasepCheckBadapp
CheckElevationEnabled
BaseGenerateAppCompatData
CreateProcessInternalW
BasepFreeAppCompatData
BasepCheckWinSaferRestrictions
MoveFileWithProgressW
MoveFileW
GetConsoleOutputCP
MoveFileExW
BaseCheckRunApp
SearchPathA
OpenFile
CreateProcessInternalA
SetConsoleMode
SetConsoleInputExeNameW
SetThreadUILanguage
GetConsoleTitleW
GetErrorMode
HeapValidate
NeedCurrentDirectoryForExePathW
RegOpenUserClassesRoot
GetSystemDirectoryA
GetComputerNameA
GetFileInformationByHandleEx
SetFilePointerEx
GetVolumeInformationW
FileTimeToDosDateTime
CreateSemaphoreW
QueueUserWorkItem
GetModuleHandleExA
GetOverlappedResult
lclose
SearchPathW
GlobalFindAtomW
GlobalDeleteAtom
RtlCaptureStackBackTrace
AddAtomW
DeleteAtom
SetEndOfFile
IsValidLocale
ConvertDefaultLocale
SetPriorityClass
CallbackMayRunLong
ReadProcessMemory
GlobalUnlock
GlobalLock
GlobalSize
GlobalGetAtomNameW
NlsGetCacheUpdateCount
InterlockedExchangeAdd
ReleaseSemaphore
GetQueuedCompletionStatus
FreeResource
VerifyVersionInfoW
GetTempPathW
SetFileAttributesW
GetDiskFreeSpaceExW
GetCalendarInfoW
AddRefActCtx
GetCurrentActCtx
FreeLibraryAndExitThread
GetExitCodeThread
lstrcmpiW
GetLocaleInfoA
GetUserDefaultLangID
GetProcessTimes
InitOnceExecuteOnce
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
TerminateProcess
FindFirstChangeNotificationW
ReadDirectoryChangesW
BindIoCompletionCallback
SetProcessPriorityBoost
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
WerRegisterMemoryBlock
GlobalReAlloc
GetAtomNameW
GetNumberFormatW
BasepMapModuleHandle
FindResourceExA
FindResourceA
DosDateTimeToFileTime
FindAtomA
OpenSemaphoreW
LocalSize
CreateThreadpoolWork
CreateThreadpoolTimer
CreateThreadpoolCleanupGroup
GetTickCount64
CreateIoCompletionPort
CreateThreadpoolWait
RegDeleteValueW
ExpandEnvironmentStringsA
SetProcessDEPPolicy
Wow64EnableWow64FsRedirection
CreateBoundaryDescriptorW
VirtualLock
OpenMutexA
SetFileTime
SetFileAttributesA
lstrcmpA
lstrcmp
AddAtomA
PostQueuedCompletionStatus
VirtualUnlock
GetDriveTypeA
CancelIoEx
FindCloseChangeNotification
SwitchToThread
RegEnumKeyExA
K32GetModuleBaseNameW
K32GetModuleBaseNameA
RegDeleteValueA
RegEnumValueA
CreateSemaphoreExA
GlobalAddAtomA
CreateEventExA
SetThreadAffinityMask
CompareStringOrdinal
DeleteTimerQueueEx
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
RegDeleteKeyExW
ClosePrivateNamespace
GetFinalPathNameByHandleW
CreatePrivateNamespaceW
GetNLSVersion
ReplaceFile
ReplaceFileW
GetDurationFormat
GetDurationFormatEx
GetTimeFormatW
GetSystemPowerStatus
TrySubmitThreadpoolCallback
SetThreadExecutionState
GetDiskFreeSpaceW
DeleteTimerQueueTimer
CreateTimerQueueTimer
VerifyVersionInfoA
SignalObjectAndWait
BaseFormatTimeOut
GetTempPathA
EnumSystemLocalesA
GetProfileStringA
GetPrivateProfileIntW
GetProfileIntW
GetProcessHeaps
lstrcpyA
lstrcpy
GetWindowsDirectoryA
GetSystemDefaultUILanguage
IsBadCodePtr
lstrcatA
lstrcat
GlobalFlags
RegGetKeySecurity
IsBadStringPtrW
lstrcpyW
IsBadStringPtrA
GetDateFormatW
GetTimeZoneInformationForYear
CopyFileExW
BaseUpdateAppcompatCache
BaseQueryModuleData
CopyFileA
GetShortPathNameA
FindNextChangeNotification
FormatMessageA
WritePrivateProfileStringW
TermsrvAppInstallMode
WriteProfileStringW
K32EnumProcesses
GetPrivateProfileSectionW
GetVolumeInformationA
WritePrivateProfileStringA
CreateToolhelp32Snapshot
RegLoadMUIStringW
GetThreadId
RegisterWaitForSingleObjectEx
UnhandledExceptionFilter
CheckForReadOnlyResource
GetThreadContext
Wow64GetThreadContext
Module32FirstW
WriteConsoleW
SetConsoleTextAttribute
WerGetFlags
GetThreadSelectorEntry
SuspendThread
Module32NextW
GetApplicationRecoveryCallback
GetStringTypeExA
GetStringTypeA
lstrcatW
CopyFileW
GetProfileSectionW
Process32Next
Process32NextW
Process32First
Process32FirstW
SetProcessShutdownParameters
AddSIDToBoundaryDescriptor
CreateActCtxA
GetSystemWindowsDirectoryA
RegSetKeySecurity
GetTempFileNameA
EnumDateFormatsW
EnumTimeFormatsW
EnumCalendarInfoA
QueueUserAPC
GetCalendarInfoA
GetBinaryTypeW
GetNumberFormatA
FoldStringW
GetTimeFormatA
GetDateFormatA
EnumResourceNamesA
EnumResourceNamesExA
GetUserGeoID
CreateThreadpoolIo
GetCPInfoExW
CreateTimerQueue
CreateThreadpool
SetThreadpoolThreadMinimum
OpenPrivateNamespaceW
CheckRemoteDebuggerPresent
K32GetModuleFileNameExW
OutputDebugStringA
SetThreadIdealProcessor
K32GetModuleFileNameExA
K32EnumProcessModules
GetPrivateProfileIntA
GetProfileIntA
LCIDToLocaleName
QueryDosDeviceW
GetProcessId
GetThreadUILanguage
LockFile
UnlockFile
IsDBCSLeadByteEx
WerSetFlags
RegisterWaitForSingleObject
GetHandleInformation
IdnToAscii
SetFileInformationByHandle
GetFileAttributesExA
MoveFileExA
MoveFileWithProgressA
IsBadReadPtr
CreateSemaphoreA
GetOEMCP
GetTempFileNameW
RtlUnwind
OutputDebugStringW
IsBadWritePtr
GlobalHandle
GetSystemDefaultLangID
GlobalFindAtomA
GetProcessVersion
GlobalMemoryStatusEx
GetCurrentDirectoryA
LocalFileTimeToFileTime
CreateDirectoryA
FindNextFileA
lstrcpynW
LockFileEx
UnlockFileEx
GetProfileStringW
RegisterApplicationRestart
DeleteFiber
FlushViewOfFile
UnregisterWaitEx
WerUnregisterMemoryBlock
CreateWaitableTimerW
GetConsoleScreenBufferInfo
SetWaitableTimer
GetComputerNameExW
IdnToUnicode
LCMapStringA
SwitchToFiber
CreateFiber
CreateFiberEx
ConvertThreadToFiber
ConvertThreadToFiberEx
EnumResourceNamesExW
IsProcessInJob
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
CreateProcessAsUserW
EnumResourceNamesW
LocalFlags
LocalHandle
BackupSeek
BackupRead
BackupWrite
Beep
SetComputerNameW
SetComputerNameA
DnsHostnameToComputerNameW
DnsHostnameToComputerNameA
SetComputerNameExW
SetComputerNameExA
AddLocalAlternateComputerNameW
AddLocalAlternateComputerNameA
RemoveLocalAlternateComputerNameW
RemoveLocalAlternateComputerNameA
SetLocalPrimaryComputerNameW
SetLocalPrimaryComputerNameA
EnumerateLocalComputerNamesW
EnumerateLocalComputerNamesA
LZCopy
CopyLZFile
GetFullPathNameTransactedA
GetFullPathNameTransactedW
SetSystemTimeAdjustment
IsTimeZoneRedirectionEnabled
SetSystemTime
SetClientDynamicTimeZoneInformation
SetClientTimeZoneInformation
SetTimeZoneInformation
SetDynamicTimeZoneInformation
DebugActiveProcess
DebugBreakProcess
DebugSetProcessKillOnExit
Wow64GetThreadSelectorEntry
WaitForDebugEvent
ContinueDebugEvent
DebugActiveProcessStop
RemoveDirectoryTransactedW
CreateDirectoryExW
RemoveDirectoryTransactedA
CreateDirectoryTransactedW
CreateDirectoryExA
CreateDirectoryTransactedA
InitAtomTable
GlobalGetAtomNameA
GetAtomNameA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileStructA
GetPrivateProfileStructW
WritePrivateProfileStructA
WritePrivateProfileStructW
WriteProfileStringA
GetProfileSectionA
WriteProfileSectionA
WriteProfileSectionW
DefineDosDeviceA
QueryDosDeviceA
BasepCheckAppCompat
CheckElevation
SetFileIoOverlappedRange
SetFileCompletionNotificationModes
SetThreadErrorMode
GetThreadErrorMode
OpenFileById
FindFirstFileTransactedA
FindFirstFileTransactedW
FindNextStreamW
FindFirstStreamW
FindFirstFileNameW
FindNextFileNameW
FindFirstStreamTransactedW
FindFirstFileNameTransactedW
CancelSynchronousIo
CancelIo
SetFileBandwidthReservation
GetFileBandwidthReservation
SetFileShortNameW
SetFileShortNameA
CreateFileMappingNumaA
SetFileAttributesTransactedW
GetFileAttributesTransactedW
DeleteFileTransactedW
PrivMoveFileIdentityW
GetCompressedFileSizeW
SetFileAttributesTransactedA
GetFileAttributesTransactedA
DeleteFileTransactedA
GetCompressedFileSizeTransactedW
GetCompressedFileSizeA
CreateSymbolicLinkW
GetCompressedFileSizeTransactedA
CreateSymbolicLinkTransactedW
CreateSymbolicLinkA
CreateSymbolicLinkTransactedA
MoveFileTransactedA
MoveFileTransactedW
MoveFileA
ReOpenFile
CreateFileTransactedW
CreateFileTransactedA
PrivCopyFileExW
ReplaceFileA
CopyFileTransactedW
CopyFileExA
CopyFileTransactedA
GetFirmwareEnvironmentVariableW
SetFirmwareEnvironmentVariableW
GetFirmwareEnvironmentVariableA
SetFirmwareEnvironmentVariableA
RegisterWowBaseHandlers
LocalCompact
GlobalCompact
GlobalFix
GlobalUnfix
GlobalWire
GlobalUnWire
AddSecureMemoryCacheCallback
RemoveSecureMemoryCacheCallback
EnumSystemFirmwareTables
GetSystemFirmwareTable
GetPhysicallyInstalledSystemMemory
lopen
lcreat
hwrite
lwrite
LocalShrink
GetMailslotInfo
SetMailslotInfo
CreateMailslotW
CreateMailslotA
LoadStringBaseW
UTRegister
SetDllDirectoryW
SetDllDirectoryA
GetDllDirectoryW
GetDllDirectoryA
SetSearchPathMode
EnumResourceTypesExW
EnumResourceTypesW
EnumResourceTypesExA
EnumResourceTypesA
EnumResourceLanguagesExW
EnumResourceLanguagesW
EnumResourceLanguagesExA
EnumResourceLanguagesA
CreateNamedPipeA
GetNamedPipeHandleStateW
GetNamedPipeInfo
CallNamedPipeW
WaitNamedPipeA
GetNamedPipeClientComputerNameA
GetNamedPipeClientProcessId
GetNamedPipeClientSessionId
GetNamedPipeServerProcessId
GetNamedPipeServerSessionId
GetNamedPipeHandleStateA
CallNamedPipeA
SetNamedPipeAttribute
GetNumaHighestNodeNumber
GetNumaProcessorNodeEx
GetNumaNodeProcessorMaskEx
GetNumaAvailableMemoryNodeEx
GetNumaProximityNodeEx
GetNumaNodeNumberFromHandle
GetNumaProcessorNode
GetNumaNodeProcessorMask
GetNumaAvailableMemoryNode
GetNumaProximityNode
GetSystemWow64DirectoryA
CheckNameLegalDOS8Dot3W
SetVolumeLabelW
CheckNameLegalDOS8Dot3A
SetVolumeLabelA
SetSystemPowerState
PowerCreateRequest
PowerClearRequest
PowerSetRequest
GetDevicePowerState
IsSystemResumeAutomatic
RequestWakeupLatency
RequestDeviceWakeup
CancelDeviceWakeupRequest
SetMessageWaitingIndicator
WinExec
FatalExit
GetSystemDEPPolicy
GetProcessorSystemCycleTime
GetActiveProcessorGroupCount
GetMaximumProcessorGroupCount
GetActiveProcessorCount
GetMaximumProcessorCount
IsBadHugeReadPtr
IsBadHugeWritePtr
GetProcessShutdownParameters
GetProcessGroupAffinity
SetProcessAffinityMask
GetProcessPriorityBoost
GetProcessIoCounters
GetProcessHandleCount
GetProcessDEPPolicy
SetProcessUserModeExceptionPolicy
GetProcessUserModeExceptionPolicy
GetSystemRegistryQuota
LoadModule
GetSystemTimes
ReplacePartitionUnit
DosPathToSessionPathW
WTSGetActiveConsoleSessionId
DosPathToSessionPathA
AreFileApisANSI
CancelWaitableTimer
ChangeTimerQueueTimer
ConnectNamedPipe
CreateEventExW
CreateFileMappingNumaW
CreateMutexExA
CreateMutexExW
CreateNamedPipeW
CreatePipe
CreateRemoteThread
CreateSemaphoreExW
CreateWaitableTimerExW
DebugBreak
DefineDosDeviceW
DeleteVolumeMountPointW
DisconnectNamedPipe
EnumCalendarInfoExW
EnumCalendarInfoW
EnumDateFormatsExW
EnumLanguageGroupLocalesW
EnumSystemCodePagesW
EnumSystemLanguageGroupsW
EnumSystemLocalesEx
EnumSystemLocalesW
EnumUILanguagesW
FindFirstFileExA
FindFirstChangeNotificationA
FindFirstVolumeW
FindNextVolumeW
FindNLSString
FindStringOrdinal
FindVolumeClose
GetComputerNameExA
GetCurrencyFormatW
GetNamedPipeAttribute
GetNamedPipeClientComputerNameW
GetProcessIdOfThread
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
SetEnvironmentStringsW
GetLogicalDriveStringsW
GetLongPathNameA
GetPriorityClass
GetProcessPreferredUILanguages
GetQueuedCompletionStatusEx
GetSystemTimeAdjustment
GetThreadPriorityBoost
GetVolumeInformationByHandleW
HeapLock
HeapQueryInformation
HeapSummary
HeapUnlock
HeapWalk
IsNLSDefinedString
IsValidLanguageGroup
MapViewOfFileExNuma
NeedCurrentDirectoryForExePathA
OpenWaitableTimerW
PulseEvent
ReadFileScatter
ReadFileEx
RemoveDirectoryA
RemoveDirectoryW
SetCalendarInfoW
SetFileApisToANSI
SetFileApisToOEM
SetFileValidData
SetLocaleInfoW
SetLocalTime
SetNamedPipeHandleState
SetStdHandle
SetStdHandleEx
SetThreadPriorityBoost
TransactNamedPipe
VerLanguageNameA
VerLanguageNameW
VirtualAllocExNuma
VirtualProtectEx
VirtualQueryEx
WaitNamedPipeW
WriteFileEx
WriteFileGather
GetDynamicTimeZoneInformation
SetThreadpoolStackInformation
QueryThreadpoolStackInformation
SetProcessAffinityUpdateMode
QueryProcessAffinityUpdateMode
NlsEventDataDescCreate
NlsWriteEtwEvent
FatalAppExitA
FatalAppExitW
CompareStringEx
EnumCalendarInfoExEx
EnumDateFormatsExEx
EnumTimeFormatsEx
FindNLSStringEx
GetCurrencyFormatEx
GetEraNameCountedString
GetFileMUIInfo
GetFileMUIPath
GetFinalPathNameByHandleA
GetLocaleInfoEx
GetLogicalProcessorInformation
GetNumberFormatEx
GetSystemDefaultLocaleName
GetSystemPreferredUILanguages
GetThreadPreferredUILanguages
GetUILanguageInfo
GetUserDefaultLocaleName
GetUserPreferredUILanguages
IsValidLocaleName
LCMapStringEx
LocaleNameToLCID
NotifyMountMgr
PeekNamedPipe
ResolveLocaleName
RtlCaptureContext
RtlFillMemory
CreateBoundaryDescriptorA
AddIntegrityLabelToBoundaryDescriptor
CreatePrivateNamespaceA
OpenPrivateNamespaceA
QueryFullProcessImageNameA
OpenSemaphoreA
CreateWaitableTimerExA
OpenWaitableTimerA
SleepConditionVariableCS
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
CreateWaitableTimerA
SetTermsrvAppInstallMode
Wow64SetThreadContext
SetThreadContext
Wow64SuspendThread
GetThreadTimes
GetThreadIOPendingFlag
SetThreadGroupAffinity
GetThreadGroupAffinity
SetThreadIdealProcessorEx
ConvertFiberToThread
GetThreadIdealProcessorEx
Heap32ListFirst
Heap32ListNext
Heap32First
Heap32Next
Toolhelp32ReadProcessMemory
Thread32First
Thread32Next
Module32First
Module32Next
LZInit
LZSeek
LZRead
LZCloseFile
LZClose
GetExpandedNameA
GetExpandedNameW
LZCreateFileW
LZOpenFileA
LZOpenFileW
ClearCommError
SetupComm
EscapeCommFunction
GetCommMask
GetCommModemStatus
GetCommProperties
GetCommState
GetCommTimeouts
PurgeComm
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
TransmitCommChar
WaitCommEvent
CommConfigDialogW
CommConfigDialogA
GetDefaultCommConfigW
GetDefaultCommConfigA
SetDefaultCommConfigW
SetDefaultCommConfigA
ClearCommBreak
GetCommConfig
SetCommConfig
GetNextVDMCommand
ExitVDM
SetVDMCurrentDirectories
GetVDMCurrentDirectories
RegisterWowExec
GetLongPathNameTransactedA
GetLongPathNameTransactedW
VDMOperationStarted
GetBinaryType
GetBinaryTypeA
FindVolumeMountPointClose
DeleteVolumeMountPointA
FindFirstVolumeA
FindNextVolumeA
FindFirstVolumeMountPointW
FindNextVolumeMountPointW
GetVolumeNameForVolumeMountPointA
SetVolumeMountPointW
GetVolumePathNameA
FindFirstVolumeMountPointA
FindNextVolumeMountPointA
SetVolumeMountPointA
GetVolumePathNamesForVolumeNameA
BuildCommDCBAndTimeoutsA
BuildCommDCBA
BuildCommDCBAndTimeoutsW
BuildCommDCBW
SetTapePosition
GetTapePosition
PrepareTape
EraseTape
CreateTapePartition
WriteTapemark
GetTapeParameters
SetTapeParameters
GetTapeStatus
OpenJobObjectW
TerminateJobObject
QueryInformationJobObject
CreateJobSet
CreateJobObjectA
OpenJobObjectA
CreateHardLinkW
CreateHardLinkTransactedW
CreateHardLinkA
CreateHardLinkTransactedA
GetHandleContext
SetHandleContext
RegisterConsoleIME
ZombifyActCtx
FindActCtxSectionStringA
SetComPlusPackageInstallStatus
GetComPlusPackageInstallStatus
BaseCleanupAppcompatCacheSupport
BaseDumpAppcompatCache
BaseFlushAppcompatCache
BaseCheckAppcompatCache
BaseInitAppcompatCacheSupport
RegisterApplicationRecoveryCallback
UnregisterApplicationRecoveryCallback
UnregisterApplicationRestart
GetApplicationRestartSettings
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
WerpInitiateRemoteRecovery
WerRegisterFile
WerUnregisterFile
WerRegisterRuntimeExceptionModule
WerUnregisterRuntimeExceptionModule
WerpNotifyLoadStringResource
WerpNotifyUseStringResource
WerpCleanupMessageMapping
WerpNotifyLoadStringResourceEx
WerpStringLookup
QueryThreadCycleTime
QueryProcessCycleTime
QueryIdleProcessorCycleTime
QueryIdleProcessorCycleTimeEx
QueryUnbiasedInterruptTime
SetEnvironmentStringsA
GetProcessWorkingSetSizeEx
GetProcessWorkingSetSize
SetSystemFileCacheSize
AllocateUserPhysicalPages
AllocateUserPhysicalPagesNuma
FreeUserPhysicalPages
MapUserPhysicalPages
MapUserPhysicalPagesScatter
GetWriteWatch
ResetWriteWatch
GetLargePageMinimum
QueryMemoryResourceNotification
GetSystemFileCacheSize
UnregisterWait
SetTimerQueueTimer
DeleteTimerQueue
CancelTimerQueueTimer
RaiseFailFastException
InitializeContext
CopyContext
GetEnabledXStateFeatures
LocateXStateFeature
GetXStateFeaturesMask
SetXStateFeaturesMask
EnableThreadProfiling
DisableThreadProfiling
QueryThreadProfiling
ReadThreadProfilingData
UpdateResourceW
UpdateResourceA
EndUpdateResourceW
EndUpdateResourceA
BeginUpdateResourceW
BeginUpdateResourceA
GetCalendarDaysInMonth
IsValidCalDateTime
IsCalendarLeapYear
IsCalendarLeapMonth
IsCalendarLeapDay
UpdateCalendarDayOfWeek
ConvertCalDateTimeToSystemTime
ConvertNLSDayOfWeekToWin32DayOfWeek
CompareCalendarDates
GetCalendarDifferenceInDays
GetCalendarSupportedDateRange
GetCalendarMonthsInYear
ConvertSystemTimeToCalDateTime
GetCalendarDateFormatEx
GetCalendarDateFormat
AdjustCalendarDate
GetCalendarWeekNumber
EnumCalendarInfoExA
EnumTimeFormatsA
EnumDateFormatsA
EnumDateFormatsExA
EnumSystemLanguageGroupsA
EnumLanguageGroupLocalesA
EnumUILanguagesA
EnumSystemCodePagesA
GetGeoInfoA
SetLocaleInfoA
SetCalendarInfoA
GetCurrencyFormatA
FoldStringA
GetCPInfoExA
EnumSystemGeoID
SetUserGeoID
GetGeoInfoW
GetTimeFormatEx
GetDateFormatEx
VerifyScripts
NormalizeString
IsNormalizedString
IdnToNameprepUnicode
GetStringScripts
SetThreadPreferredUILanguages
SetProcessPreferredUILanguages
NotifyUILanguageChange
GetNLSVersionEx
SortCloseHandle
DelayLoadFailureHook
SetConsoleMaximumWindowSize
UTUnRegister
CmdBatNotification
LZDone
OpenProfileUserMapping
LZStart
CloseProfileUserMapping
RegFlushKey
RegDisablePredefinedCacheEx
RegDeleteKeyExA
RegDeleteTreeW
RegDeleteTreeA
RegGetValueA
RegLoadKeyA
RegLoadKeyW
RegUnLoadKeyA
RegUnLoadKeyW
RegLoadMUIStringA
RegRestoreKeyA
RegRestoreKeyW
RegSaveKeyExA
RegSaveKeyExW
BasepAnsiStringToDynamicUnicodeString
BaseVerifyUnicodeString
BaseGetNamedObjectDirectory
BasepAllocateActivationContextActivationBlock
BasepFreeActivationContextActivationBlock
AddConsoleAliasW
AddConsoleAliasA
GetConsoleAliasW
GetConsoleAliasA
GetConsoleAliasesLengthW
GetConsoleAliasesLengthA
GetConsoleAliasExesLengthW
GetConsoleAliasExesLengthA
GetConsoleAliasesW
GetConsoleAliasesA
GetConsoleAliasExesW
GetConsoleAliasExesA
ExpungeConsoleCommandHistoryW
ExpungeConsoleCommandHistoryA
SetConsoleNumberOfCommandsW
SetConsoleNumberOfCommandsA
GetConsoleCommandHistoryLengthW
GetConsoleCommandHistoryLengthA
GetConsoleCommandHistoryW
GetConsoleCommandHistoryA
GetConsoleOriginalTitleA
GetConsoleOriginalTitleW
GetConsoleTitleA
SetConsoleTitleA
SetConsoleTitleW
GetConsoleInputExeNameW
GetConsoleInputExeNameA
SetConsoleInputExeNameA
FreeConsole
AllocConsole
AttachConsole
CtrlRoutine
SetLastConsoleEventActive
PeekConsoleInputA
PeekConsoleInputW
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleInputExA
ReadConsoleInputExW
WriteConsoleInputA
WriteConsoleInputW
ReadConsoleOutputW
ReadConsoleOutputA
WriteConsoleOutputW
WriteConsoleOutputA
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterW
ReadConsoleOutputAttribute
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
WriteConsoleOutputAttribute
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
GetConsoleInputWaitHandle
OpenConsoleW
ReadConsoleA
ReadConsoleW
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SetConsoleOutputCP
GetConsoleKeyboardLayoutNameA
GetConsoleKeyboardLayoutNameW
UnregisterConsoleIME
CreateSocketHandle
SetConsolePalette
WriteConsoleInputVDMA
WriteConsoleInputVDMW
VDMConsoleOperation
CloseConsoleHandle
DuplicateConsoleHandle
CreateConsoleScreenBuffer
InvalidateConsoleDIBits
GetConsoleHistoryInfo
GetConsoleScreenBufferInfoEx
GetConsoleProcessList
GetNumberOfConsoleFonts
GetNumberOfConsoleInputEvents
GetLargestConsoleWindowSize
GetConsoleCursorInfo
GetConsoleSelectionInfo
GetNumberOfConsoleMouseButtons
GetConsoleFontInfo
GetConsoleFontSize
GetCurrentConsoleFont
GetCurrentConsoleFontEx
GenerateConsoleCtrlEvent
SetConsoleActiveScreenBuffer
FlushConsoleInputBuffer
SetConsoleScreenBufferSize
SetConsoleCursorPosition
SetConsoleCursorInfo
SetConsoleHistoryInfo
SetConsoleScreenBufferInfoEx
SetConsoleWindowInfo
SetCurrentConsoleFontEx
SetConsoleFont
SetConsoleIcon
GetConsoleCP
SetConsoleCP
GetConsoleWindow
SetConsoleCursor
ShowConsoleCursor
ConsoleMenuControl
RegisterConsoleVDM
SetConsoleDisplayMode
GetConsoleHardwareState
SetConsoleHardwareState
GetConsoleDisplayMode
SetConsoleKeyShortcuts
SetConsoleMenuClose
GetConsoleCharType
SetConsoleLocalEUDC
SetConsoleCursorMode
GetConsoleCursorMode
RegisterConsoleOS2
SetConsoleOS2OemFormat
GetConsoleNlsMode
SetConsoleNlsMode
K32EmptyWorkingSet
K32QueryWorkingSet
K32QueryWorkingSetEx
K32EnumDeviceDrivers
K32GetDeviceDriverFileNameA
K32GetDeviceDriverBaseNameA
K32GetDeviceDriverFileNameW
K32GetDeviceDriverBaseNameW
K32GetPerformanceInfo
K32EnumPageFilesW
K32EnumPageFilesA
K32EnumProcessModulesEx
K32GetModuleInformation
K32GetProcessMemoryInfo
K32InitializeProcessForWsWatch
K32GetWsChanges
K32GetWsChangesEx
K32GetProcessImageFileNameW
K32GetProcessImageFileNameA
K32GetMappedFileNameW
K32GetMappedFileNameA
GetCalendarInfoEx
NlsCheckPolicy
NlsUpdateLocale
NlsUpdateSystemLocale
DbgUserBreakPoint
DbgBreakPoint
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
KiRaiseUserExceptionDispatcher
RtlUserThreadStart
KiFastSystemCall
KiFastSystemCallRet
KiIntSystemCall
ZwMapUserPhysicalPagesScatter
NtMapUserPhysicalPagesScatter
NtWaitForSingleObject
ZwWaitForSingleObject
NtCallbackReturn
ZwCallbackReturn
NtReadFile
ZwReadFile
ZwDeviceIoControlFile
NtDeviceIoControlFile
NtWriteFile
ZwWriteFile
NtRemoveIoCompletion
ZwRemoveIoCompletion
ZwReleaseSemaphore
NtReleaseSemaphore
NtReplyWaitReceivePort
ZwReplyWaitReceivePort
NtReplyPort
ZwReplyPort
NtSetInformationThread
ZwSetInformationThread
ZwSetEvent
NtSetEvent
ZwClose
NtClose
NtQueryObject
ZwQueryObject
ZwQueryInformationFile
NtQueryInformationFile
NtOpenKey
ZwOpenKey
NtEnumerateValueKey
ZwEnumerateValueKey
ZwFindAtom
NtFindAtom
ZwQueryDefaultLocale
NtQueryDefaultLocale
NtQueryKey
ZwQueryKey
ZwQueryValueKey
NtQueryValueKey
ZwAllocateVirtualMemory
NtAllocateVirtualMemory
NtQueryInformationProcess
ZwQueryInformationProcess
ZwWaitForMultipleObjects32
NtWaitForMultipleObjects32
NtWriteFileGather
ZwWriteFileGather
ZwSetInformationProcess
NtSetInformationProcess
ZwCreateKey
NtCreateKey
ZwFreeVirtualMemory
NtFreeVirtualMemory
NtImpersonateClientOfPort
ZwImpersonateClientOfPort
ZwReleaseMutant
NtReleaseMutant
ZwQueryInformationToken
NtQueryInformationToken
NtRequestWaitReplyPort
ZwRequestWaitReplyPort
NtQueryVirtualMemory
ZwQueryVirtualMemory
ZwOpenThreadToken
NtOpenThreadToken
NtQueryInformationThread
ZwQueryInformationThread
NtOpenProcess
ZwOpenProcess
NtSetInformationFile
ZwSetInformationFile
ZwMapViewOfSection
NtMapViewOfSection
ZwAccessCheckAndAuditAlarm
NtAccessCheckAndAuditAlarm
ZwUnmapViewOfSection
NtUnmapViewOfSection
NtReplyWaitReceivePortEx
ZwReplyWaitReceivePortEx
ZwTerminateProcess
NtTerminateProcess
NtSetEventBoostPriority
ZwSetEventBoostPriority
NtReadFileScatter
ZwReadFileScatter
NtOpenThreadTokenEx
ZwOpenThreadTokenEx
ZwOpenProcessTokenEx
NtOpenProcessTokenEx
NtQueryPerformanceCounter
ZwQueryPerformanceCounter
ZwEnumerateKey
NtEnumerateKey
ZwOpenFile
NtOpenFile
NtDelayExecution
ZwDelayExecution
ZwQueryDirectoryFile
NtQueryDirectoryFile
NtQuerySystemInformation
ZwQuerySystemInformation
ZwOpenSection
NtOpenSection
NtQueryTimer
ZwQueryTimer
NtFsControlFile
ZwFsControlFile
ZwWriteVirtualMemory
NtWriteVirtualMemory
ZwCloseObjectAuditAlarm
NtCloseObjectAuditAlarm
NtDuplicateObject
ZwDuplicateObject
ZwQueryAttributesFile
NtQueryAttributesFile
NtClearEvent
ZwClearEvent
NtReadVirtualMemory
ZwReadVirtualMemory
ZwOpenEvent
NtOpenEvent
NtAdjustPrivilegesToken
ZwAdjustPrivilegesToken
ZwDuplicateToken
NtDuplicateToken
NtContinue
ZwContinue
NtQueryDefaultUILanguage
ZwQueryDefaultUILanguage
ZwQueueApcThread
NtQueueApcThread
NtYieldExecution
ZwYieldExecution
NtAddAtom
ZwAddAtom
NtCreateEvent
ZwCreateEvent
NtQueryVolumeInformationFile
ZwQueryVolumeInformationFile
ZwCreateSection
NtCreateSection
NtFlushBuffersFile
ZwFlushBuffersFile
NtApphelpCacheControl
ZwApphelpCacheControl
NtCreateProcessEx
ZwCreateProcessEx
ZwCreateThread
NtCreateThread
ZwIsProcessInJob
NtIsProcessInJob
NtProtectVirtualMemory
ZwProtectVirtualMemory
NtQuerySection
ZwQuerySection
ZwResumeThread
NtResumeThread
NtTerminateThread
ZwTerminateThread
NtReadRequestData
ZwReadRequestData
NtCreateFile
ZwCreateFile
NtQueryEvent
ZwQueryEvent
NtWriteRequestData
ZwWriteRequestData
ZwOpenDirectoryObject
NtOpenDirectoryObject
ZwAccessCheckByTypeAndAuditAlarm
NtAccessCheckByTypeAndAuditAlarm
ZwQuerySystemTime
NtQuerySystemTime
ZwWaitForMultipleObjects
NtWaitForMultipleObjects
ZwSetInformationObject
NtSetInformationObject
ZwCancelIoFile
NtCancelIoFile
NtTraceEvent
ZwTraceEvent
NtPowerInformation
ZwPowerInformation
ZwSetValueKey
NtSetValueKey
ZwCancelTimer
NtCancelTimer
ZwSetTimer
NtSetTimer
NtAcceptConnectPort
ZwAcceptConnectPort
NtAccessCheck
ZwAccessCheck
NtAccessCheckByType
ZwAccessCheckByType
ZwAccessCheckByTypeResultList
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
ZwAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddBootEntry
ZwAddBootEntry
NtAddDriverEntry
ZwAddDriverEntry
NtAdjustGroupsToken
ZwAdjustGroupsToken
ZwAlertResumeThread
NtAlertResumeThread
ZwAlertThread
NtAlertThread
NtAllocateLocallyUniqueId
ZwAllocateLocallyUniqueId
NtAllocateReserveObject
ZwAllocateReserveObject
NtAllocateUserPhysicalPages
ZwAllocateUserPhysicalPages
NtAllocateUuids
ZwAllocateUuids
NtAlpcAcceptConnectPort
ZwAlpcAcceptConnectPort
NtAlpcCancelMessage
ZwAlpcCancelMessage
ZwAlpcConnectPort
NtAlpcConnectPort
ZwAlpcCreatePort
NtAlpcCreatePort
ZwAlpcCreatePortSection
NtAlpcCreatePortSection
NtAlpcCreateResourceReserve
ZwAlpcCreateResourceReserve
NtAlpcCreateSectionView
ZwAlpcCreateSectionView
NtAlpcCreateSecurityContext
ZwAlpcCreateSecurityContext
NtAlpcDeletePortSection
ZwAlpcDeletePortSection
NtAlpcDeleteResourceReserve
ZwAlpcDeleteResourceReserve
ZwAlpcDeleteSectionView
NtAlpcDeleteSectionView
NtAlpcDeleteSecurityContext
ZwAlpcDeleteSecurityContext
NtAlpcDisconnectPort
ZwAlpcDisconnectPort
ZwAlpcImpersonateClientOfPort
NtAlpcImpersonateClientOfPort
NtAlpcOpenSenderProcess
ZwAlpcOpenSenderProcess
NtAlpcOpenSenderThread
ZwAlpcOpenSenderThread
NtAlpcQueryInformation
ZwAlpcQueryInformation
ZwAlpcQueryInformationMessage
NtAlpcQueryInformationMessage
NtAlpcRevokeSecurityContext
ZwAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort
ZwAlpcSendWaitReceivePort
ZwAlpcSetInformation
NtAlpcSetInformation
NtAreMappedFilesTheSame
ZwAreMappedFilesTheSame
NtAssignProcessToJobObject
ZwAssignProcessToJobObject
NtCancelIoFileEx
ZwCancelIoFileEx
NtCancelSynchronousIoFile
ZwCancelSynchronousIoFile
ZwCommitComplete
NtCommitComplete
ZwCommitEnlistment
NtCommitEnlistment
ZwCommitTransaction
NtCommitTransaction
NtCompactKeys
ZwCompactKeys
NtCompareTokens
ZwCompareTokens
ZwCompleteConnectPort
NtCompleteConnectPort
NtCompressKey
ZwCompressKey
ZwConnectPort
NtConnectPort
ZwCreateDebugObject
NtCreateDebugObject
NtCreateDirectoryObject
ZwCreateDirectoryObject
ZwCreateEnlistment
NtCreateEnlistment
NtCreateEventPair
ZwCreateEventPair
NtCreateIoCompletion
ZwCreateIoCompletion
ZwCreateJobObject
NtCreateJobObject
NtCreateJobSet
ZwCreateJobSet
ZwCreateKeyTransacted
NtCreateKeyTransacted
ZwCreateKeyedEvent
NtCreateKeyedEvent
ZwCreateMailslotFile
NtCreateMailslotFile
ZwCreateMutant
NtCreateMutant
NtCreateNamedPipeFile
ZwCreateNamedPipeFile
NtCreatePagingFile
ZwCreatePagingFile
NtCreatePort
ZwCreatePort
NtCreatePrivateNamespace
ZwCreatePrivateNamespace
ZwCreateProcess
NtCreateProcess
NtCreateProfile
ZwCreateProfile
ZwCreateProfileEx
NtCreateProfileEx
ZwCreateResourceManager
NtCreateResourceManager
NtCreateSemaphore
ZwCreateSemaphore
ZwCreateSymbolicLinkObject
NtCreateSymbolicLinkObject
NtCreateThreadEx
ZwCreateThreadEx
ZwCreateTimer
NtCreateTimer
NtCreateToken
ZwCreateToken
NtCreateTransaction
ZwCreateTransaction
NtCreateTransactionManager
ZwCreateTransactionManager
NtCreateUserProcess
ZwCreateUserProcess
NtCreateWaitablePort
ZwCreateWaitablePort
NtCreateWorkerFactory
ZwCreateWorkerFactory
NtDebugActiveProcess
ZwDebugActiveProcess
NtDebugContinue
ZwDebugContinue
ZwDeleteAtom
NtDeleteAtom
NtDeleteBootEntry
ZwDeleteBootEntry
ZwDeleteDriverEntry
NtDeleteDriverEntry
ZwDeleteFile
NtDeleteFile
NtDeleteKey
ZwDeleteKey
NtDeleteObjectAuditAlarm
ZwDeleteObjectAuditAlarm
NtDeletePrivateNamespace
ZwDeletePrivateNamespace
ZwDeleteValueKey
NtDeleteValueKey
NtDisableLastKnownGood
ZwDisableLastKnownGood
NtDisplayString
ZwDisplayString
NtDrawText
ZwDrawText
ZwEnableLastKnownGood
NtEnableLastKnownGood
NtEnumerateBootEntries
ZwEnumerateBootEntries
NtEnumerateDriverEntries
ZwEnumerateDriverEntries
NtEnumerateSystemEnvironmentValuesEx
ZwEnumerateSystemEnvironmentValuesEx
NtEnumerateTransactionObject
ZwEnumerateTransactionObject
NtExtendSection
ZwExtendSection
ZwFilterToken
NtFilterToken
NtFlushInstallUILanguage
ZwFlushInstallUILanguage
NtFlushInstructionCache
ZwFlushInstructionCache
NtFlushKey
ZwFlushKey
NtFlushProcessWriteBuffers
ZwFlushProcessWriteBuffers
NtFlushVirtualMemory
ZwFlushVirtualMemory
NtFlushWriteBuffer
ZwFlushWriteBuffer
ZwFreeUserPhysicalPages
NtFreeUserPhysicalPages
ZwFreezeRegistry
NtFreezeRegistry
ZwFreezeTransactions
NtFreezeTransactions
ZwGetContextThread
NtGetContextThread
ZwGetCurrentProcessorNumber
NtGetCurrentProcessorNumber
ZwGetDevicePowerState
NtGetDevicePowerState
ZwGetMUIRegistryInfo
NtGetMUIRegistryInfo
NtGetNextProcess
ZwGetNextProcess
ZwGetNextThread
NtGetNextThread
ZwGetNlsSectionPtr
NtGetNlsSectionPtr
ZwGetNotificationResourceManager
NtGetNotificationResourceManager
ZwGetPlugPlayEvent
NtGetPlugPlayEvent
NtGetWriteWatch
ZwGetWriteWatch
NtImpersonateAnonymousToken
ZwImpersonateAnonymousToken
NtImpersonateThread
ZwImpersonateThread
ZwInitializeNlsFiles
NtInitializeNlsFiles
ZwInitializeRegistry
NtInitializeRegistry
ZwInitiatePowerAction
NtInitiatePowerAction
ZwIsSystemResumeAutomatic
NtIsSystemResumeAutomatic
ZwIsUILanguageComitted
NtIsUILanguageComitted
NtListenPort
ZwListenPort
NtLoadDriver
ZwLoadDriver
ZwLoadKey
NtLoadKey
ZwLoadKey2
NtLoadKey2
ZwLoadKeyEx
NtLoadKeyEx
ZwLockFile
NtLockFile
ZwLockProductActivationKeys
NtLockProductActivationKeys
NtLockRegistryKey
ZwLockRegistryKey
NtLockVirtualMemory
ZwLockVirtualMemory
NtMakePermanentObject
ZwMakePermanentObject
NtMakeTemporaryObject
ZwMakeTemporaryObject
NtMapCMFModule
ZwMapCMFModule
NtMapUserPhysicalPages
ZwMapUserPhysicalPages
ZwModifyBootEntry
NtModifyBootEntry
ZwModifyDriverEntry
NtModifyDriverEntry
ZwNotifyChangeDirectoryFile
NtNotifyChangeDirectoryFile
ZwNotifyChangeKey
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
ZwNotifyChangeMultipleKeys
ZwNotifyChangeSession
NtNotifyChangeSession
ZwOpenEnlistment
NtOpenEnlistment
ZwOpenEventPair
NtOpenEventPair
ZwOpenIoCompletion
NtOpenIoCompletion
ZwOpenJobObject
NtOpenJobObject
NtOpenKeyEx
ZwOpenKeyEx
NtOpenKeyTransacted
ZwOpenKeyTransacted
NtOpenKeyTransactedEx
ZwOpenKeyTransactedEx
NtOpenKeyedEvent
ZwOpenKeyedEvent
NtOpenMutant
ZwOpenMutant
NtOpenObjectAuditAlarm
ZwOpenObjectAuditAlarm
NtOpenPrivateNamespace
ZwOpenPrivateNamespace
ZwOpenProcessToken
NtOpenProcessToken
NtOpenResourceManager
ZwOpenResourceManager
NtOpenSemaphore
ZwOpenSemaphore
NtOpenSession
ZwOpenSession
NtOpenSymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwOpenThread
NtOpenThread
NtOpenTimer
ZwOpenTimer
NtOpenTransaction
ZwOpenTransaction
NtOpenTransactionManager
ZwOpenTransactionManager
NtPlugPlayControl
ZwPlugPlayControl
ZwPrePrepareComplete
NtPrePrepareComplete
NtPrePrepareEnlistment
ZwPrePrepareEnlistment
NtPrepareComplete
ZwPrepareComplete
NtPrepareEnlistment
ZwPrepareEnlistment
NtPrivilegeCheck
ZwPrivilegeCheck
NtPrivilegeObjectAuditAlarm
ZwPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
ZwPrivilegedServiceAuditAlarm
ZwPropagationComplete
NtPropagationComplete
ZwPropagationFailed
NtPropagationFailed
NtPulseEvent
ZwPulseEvent
ZwQueryBootEntryOrder
NtQueryBootEntryOrder
ZwQueryBootOptions
NtQueryBootOptions
ZwQueryDebugFilterState
NtQueryDebugFilterState
ZwQueryDirectoryObject
NtQueryDirectoryObject
NtQueryDriverEntryOrder
ZwQueryDriverEntryOrder
NtQueryEaFile
ZwQueryEaFile
NtQueryFullAttributesFile
ZwQueryFullAttributesFile
ZwQueryInformationAtom
NtQueryInformationAtom
NtQueryInformationEnlistment
ZwQueryInformationEnlistment
NtQueryInformationJobObject
ZwQueryInformationJobObject
NtQueryInformationPort
ZwQueryInformationPort
ZwQueryInformationResourceManager
NtQueryInformationResourceManager
ZwQueryInformationTransaction
NtQueryInformationTransaction
ZwQueryInformationTransactionManager
NtQueryInformationTransactionManager
NtQueryInformationWorkerFactory
ZwQueryInformationWorkerFactory
NtQueryInstallUILanguage
ZwQueryInstallUILanguage
NtQueryIntervalProfile
ZwQueryIntervalProfile
NtQueryIoCompletion
ZwQueryIoCompletion
NtQueryLicenseValue
ZwQueryLicenseValue
NtQueryMultipleValueKey
ZwQueryMultipleValueKey
NtQueryMutant
ZwQueryMutant
NtQueryOpenSubKeys
ZwQueryOpenSubKeys
NtQueryOpenSubKeysEx
ZwQueryOpenSubKeysEx
ZwQueryPortInformationProcess
NtQueryPortInformationProcess
ZwQueryQuotaInformationFile
NtQueryQuotaInformationFile
ZwQuerySecurityAttributesToken
NtQuerySecurityAttributesToken
NtQuerySecurityObject
ZwQuerySecurityObject
NtQuerySemaphore
ZwQuerySemaphore
NtQuerySymbolicLinkObject
ZwQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
ZwQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx
ZwQuerySystemEnvironmentValueEx
ZwQuerySystemInformationEx
NtQuerySystemInformationEx
NtQueryTimerResolution
ZwQueryTimerResolution
ZwQueueApcThreadEx
NtQueueApcThreadEx
ZwRaiseException
NtRaiseException
ZwRaiseHardError
NtRaiseHardError
ZwReadOnlyEnlistment
NtReadOnlyEnlistment
ZwRecoverEnlistment
NtRecoverEnlistment
ZwRecoverResourceManager
NtRecoverResourceManager
NtRecoverTransactionManager
ZwRecoverTransactionManager
ZwRegisterProtocolAddressInformation
NtRegisterProtocolAddressInformation
NtRegisterThreadTerminatePort
ZwRegisterThreadTerminatePort
ZwReleaseKeyedEvent
NtReleaseKeyedEvent
NtReleaseWorkerFactoryWorker
ZwReleaseWorkerFactoryWorker
ZwRemoveIoCompletionEx
NtRemoveIoCompletionEx
NtRemoveProcessDebug
ZwRemoveProcessDebug
NtRenameKey
ZwRenameKey
ZwRenameTransactionManager
NtRenameTransactionManager
ZwReplaceKey
NtReplaceKey
ZwReplacePartitionUnit
NtReplacePartitionUnit
ZwReplyWaitReplyPort
NtReplyWaitReplyPort
ZwRequestPort
NtRequestPort
ZwResetEvent
NtResetEvent
NtResetWriteWatch
ZwResetWriteWatch
NtRestoreKey
ZwRestoreKey
NtResumeProcess
ZwResumeProcess
ZwRollbackComplete
NtRollbackComplete
ZwRollbackEnlistment
NtRollbackEnlistment
ZwRollbackTransaction
NtRollbackTransaction
ZwRollforwardTransactionManager
NtRollforwardTransactionManager
NtSaveKey
ZwSaveKey
NtSaveKeyEx
ZwSaveKeyEx
ZwSaveMergedKeys
NtSaveMergedKeys
NtSecureConnectPort
ZwSecureConnectPort
NtSerializeBoot
ZwSerializeBoot
NtSetBootEntryOrder
ZwSetBootEntryOrder
ZwSetBootOptions
NtSetBootOptions
NtSetContextThread
ZwSetContextThread
ZwSetDebugFilterState
NtSetDebugFilterState
NtSetDefaultHardErrorPort
ZwSetDefaultHardErrorPort
NtSetDefaultLocale
ZwSetDefaultLocale
NtSetDefaultUILanguage
ZwSetDefaultUILanguage
ZwSetDriverEntryOrder
NtSetDriverEntryOrder
ZwSetEaFile
NtSetEaFile
ZwSetHighEventPair
NtSetHighEventPair
ZwSetHighWaitLowEventPair
NtSetHighWaitLowEventPair
NtSetInformationDebugObject
ZwSetInformationDebugObject
NtSetInformationEnlistment
ZwSetInformationEnlistment
NtSetInformationJobObject
ZwSetInformationJobObject
NtSetInformationKey
ZwSetInformationKey
NtSetInformationResourceManager
ZwSetInformationResourceManager
NtSetInformationToken
ZwSetInformationToken
ZwSetInformationTransaction
NtSetInformationTransaction
ZwSetInformationTransactionManager
NtSetInformationTransactionManager
NtSetInformationWorkerFactory
ZwSetInformationWorkerFactory
NtSetIntervalProfile
ZwSetIntervalProfile
NtSetIoCompletion
ZwSetIoCompletion
NtSetIoCompletionEx
ZwSetIoCompletionEx
NtSetLdtEntries
ZwSetLdtEntries
NtSetLowEventPair
ZwSetLowEventPair
NtSetLowWaitHighEventPair
ZwSetLowWaitHighEventPair
NtSetQuotaInformationFile
ZwSetQuotaInformationFile
NtSetSecurityObject
ZwSetSecurityObject
ZwSetSystemEnvironmentValue
NtSetSystemEnvironmentValue
NtSetSystemEnvironmentValueEx
ZwSetSystemEnvironmentValueEx
ZwSetSystemInformation
NtSetSystemInformation
NtSetSystemPowerState
ZwSetSystemPowerState
NtSetSystemTime
ZwSetSystemTime
NtSetThreadExecutionState
ZwSetThreadExecutionState
NtSetTimerEx
ZwSetTimerEx
ZwSetTimerResolution
NtSetTimerResolution
NtSetUuidSeed
ZwSetUuidSeed
NtSetVolumeInformationFile
ZwSetVolumeInformationFile
NtShutdownSystem
ZwShutdownSystem
NtShutdownWorkerFactory
ZwShutdownWorkerFactory
ZwSignalAndWaitForSingleObject
NtSignalAndWaitForSingleObject
NtSinglePhaseReject
ZwSinglePhaseReject
ZwStartProfile
NtStartProfile
ZwStopProfile
NtStopProfile
NtSuspendProcess
ZwSuspendProcess
ZwSuspendThread
NtSuspendThread
ZwSystemDebugControl
NtSystemDebugControl
ZwTerminateJobObject
NtTerminateJobObject
ZwTestAlert
NtTestAlert
ZwThawRegistry
NtThawRegistry
ZwThawTransactions
NtThawTransactions
ZwTraceControl
NtTraceControl
NtTranslateFilePath
ZwTranslateFilePath
NtUmsThreadYield
ZwUmsThreadYield
NtUnloadDriver
ZwUnloadDriver
NtUnloadKey
ZwUnloadKey
ZwUnloadKey2
NtUnloadKey2
NtUnloadKeyEx
ZwUnloadKeyEx
NtUnlockFile
ZwUnlockFile
ZwUnlockVirtualMemory
NtUnlockVirtualMemory
NtVdmControl
ZwVdmControl
ZwWaitForDebugEvent
NtWaitForDebugEvent
NtWaitForKeyedEvent
ZwWaitForKeyedEvent
ZwWaitForWorkViaWorkerFactory
NtWaitForWorkViaWorkerFactory
ZwWaitHighEventPair
NtWaitHighEventPair
ZwWaitLowEventPair
NtWaitLowEventPair
ZwWorkerFactoryWorkerReady
NtWorkerFactoryWorkerReady
NtWow64CsrClientConnectToServer
ZwWow64CsrClientConnectToServer
ZwWow64CsrIdentifyAlertableThread
NtWow64CsrIdentifyAlertableThread
NtWow64CsrClientCallServer
ZwWow64CsrClientCallServer
NtWow64CsrAllocateCaptureBuffer
ZwWow64CsrAllocateCaptureBuffer
NtWow64CsrFreeCaptureBuffer
ZwWow64CsrFreeCaptureBuffer
ZwWow64CsrAllocateMessagePointer
NtWow64CsrAllocateMessagePointer
ZwWow64CsrCaptureMessageBuffer
NtWow64CsrCaptureMessageBuffer
ZwWow64CsrCaptureMessageString
NtWow64CsrCaptureMessageString
NtWow64CsrGetProcessId
ZwWow64CsrGetProcessId
ZwWow64CsrVerifyRegion
NtWow64CsrVerifyRegion
ZwWow64DebuggerCall
NtWow64DebuggerCall
ZwWow64GetCurrentProcessorNumberEx
NtWow64GetCurrentProcessorNumberEx
RtlGetNativeSystemInformation
ZwWow64GetNativeSystemInformation
NtWow64GetNativeSystemInformation
ZwWow64InterlockedPopEntrySList
NtWow64InterlockedPopEntrySList
ZwWow64QueryInformationProcess64
NtWow64QueryInformationProcess64
ZwWow64ReadVirtualMemory64
NtWow64ReadVirtualMemory64
ZwWow64WriteVirtualMemory64
NtWow64WriteVirtualMemory64
ZwWow64QueryVirtualMemory64
NtWow64QueryVirtualMemory64
NtWow64CallFunction64
ZwWow64CallFunction64
RtlDeactivateActivationContextUnsafeFast
RtlActivateActivationContextUnsafeFast
RtlLeaveCriticalSection
RtlEnterCriticalSection
RtlSetLastWin32Error
RtlRestoreLastWin32Error
memcpy
memset
RtlFreeHeap
RtlAllocateHeap
RtlFreeAnsiString
RtlFreeUnicodeString
RtlInitString
RtlInitAnsiString
RtlInitUnicodeString
RtlMultiByteToUnicodeN
RtlDeleteBoundaryDescriptor
RtlAnsiStringToUnicodeString
RtlEqualUnicodeString
RtlUpcaseUnicodeChar
bsearch
RtlFindActivationContextSectionString
RtlHashUnicodeString
RtlDosApplyFileIsolationRedirection_Ustr
RtlImageNtHeaderEx
RtlImageDirectoryEntryToData
RtlAddRefActivationContext
wcsnicmp
RtlInitAnsiStringEx
aulldvrm
RtlAnsiCharToUnicodeChar
RtlFindCharInUnicodeString
RtlValidateUnicodeString
LdrGetDllHandle
LdrGetDllHandleEx
LdrGetProcedureAddress
LdrGetProcedureAddressEx
wcsstr
memcmp
snwprintf
wcscmp
RtlTryEnterCriticalSection
RtlAcquireSRWLockShared
RtlReleaseSRWLockShared
NtdllDefWindowProc_W
RtlInitializeCriticalSectionAndSpinCount
RtlDllShutdownInProgress
ExpInterlockedPopEntrySListResume
ExpInterlockedPopEntrySListFault
ExpInterlockedPopEntrySListEnd
RtlInterlockedPushListSList
RtlFirstEntrySList
RtlInterlockedCompareExchange64
RtlInterlockedFlushSList
aullshr
RtlQueryPerformanceCounter
RtlDeleteCriticalSection
RtlQueryDepthSList
RtlInterlockedPushEntrySList
RtlInterlockedPopEntrySList
RtlInitializeCriticalSectionEx
RtlReleaseSRWLockExclusive
RtlInitializeBitMap
RtlAcquireSRWLockExclusive
RtlGetCurrentProcessorNumberEx
RtlInitializeCriticalSection
RtlSizeHeap
allshl
RtlImageNtHeader
RtlNtStatusToDosError
RtlNtStatusToDosErrorNoTeb
RtlPrefixUnicodeString
RtlUnicodeToMultiByteN
RtlUnicodeStringToAnsiString
LdrLockLoaderLock
LdrUnlockLoaderLock
RtlInitUnicodeStringEx
RtlGetNtGlobalFlags
RtlRunOnceExecuteOnce
RtlRunOnceBeginInitialize
RtlGetCurrentTransaction
RtlSetCurrentTransaction
RtlpCreateProcessRegistryInfo
wcsrchr
wcschr
wcsncmp
RtlAcquirePebLock
RtlReleasePebLock
RtlUnlockHeap
RtlLockHeap
RtlIsValidHandle
RtlAllocateHandle
RtlFreeHandle
RtlGetVersion
RtlGetNtProductType
RtlQueryPerformanceFrequency
EtwEventEnabled
allshr
memmove
RtlValidSid
RtlCopySid
RtlLengthSid
wcsicmp
RtlLengthRequiredSid
RtlFreeSid
RtlAllocateAndInitializeSid
RtlInitializeSListHead
RtlEqualSid
RtlSetCriticalSectionSpinCount
TpIsTimerSet
RtlQueryEnvironmentVariable
RtlQueryEnvironmentVariable_U
RtlProcessFlsData
RtlIsCurrentThreadAttachExempt
TpCheckTerminateWorker
strchr
RtlDecodePointer
LdrInitializeThunk
RtlInitializeExceptionChain
RtlAllocateActivationContextStack
RtlGetCurrentPeb
RtlRegisterThreadWithCsrss
RtlDetermineDosPathNameType_U
RtlReleaseRelativeName
RtlDosPathNameToRelativeNtPathName_U_WithStatus
RtlIsDosDeviceName_U
SbSelectProcedure
RtlGetFullPathName_UstrEx
RtlExpandEnvironmentStrings
RtlGetFullPathName_UEx
alloca_probe
chkstk
RtlDecodeSystemPointer
RtlCompareUnicodeStrings
RtlCreateUnicodeStringFromAsciiz
RtlAppendUnicodeToString
wcscpy_s
RtlInitializeConditionVariable
RtlRunOnceInitialize
RtlInitializeSRWLock
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
RtlEncodePointer
RtlConvertSidToUnicodeString
RtlFormatCurrentUserKeyPath
RtlQueryInformationActivationContext
RtlReleaseActivationContext
RtlCompareUnicodeString
RtlGetActiveActivationContext
LdrEnumerateLoadedModules
RtlRunOnceComplete
LdrAccessResource
LdrFindResource_U
RtlReAllocateHeap
RtlGetIntegerAtom
RtlQueryInformationActiveActivationContext
RtlIsThreadWithinLoaderCallout
TpCaptureCaller
RtlIsValidIndexHandle
NtdllDefWindowProc_A
LdrUnloadDll
RtlLookupAtomInAtomTable
RtlFirstFreeAce
RtlValidAcl
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetOwnerSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlDosPathNameToRelativeNtPathName_U
RtlDosPathNameToNtPathName_U_WithStatus
RtlGetFullPathName_U
RtlRetrieveNtUserPfn
aulldiv
RtlUpcaseUnicodeString
LdrFindResourceEx_U
wcspbrk
LdrLoadDll
strcmpi
stricmp
RtlSubAuthoritySid
RtlInitializeSid
LdrpResGetMappingSize
LdrpResGetResourceDirectory
LdrResSearchResource
LdrResFindResourceDirectory
RtlEncodeSystemPointer
RtlFindClearBits
RtlFindClearBitsAndSet
RtlSetBits
RtlFlsAlloc
aullrem
LdrDisableThreadCalloutsForDll
RtlInitializeGenericTable
RtlMultiAppendUnicodeStringBuffer
RtlOpenCurrentUser
RtlSubAuthorityCountSid
EtwNotificationRegister
EtwEventRegister
EtwRegisterTraceGuidsW
RtlGetDaclSecurityDescriptor
LdrAddRefDll
RtlPcToFileHeader
WinSqmIsOptedIn
WinSqmIsOptedInEx
RtlLcidToLocaleName
RtlGetThreadPreferredUILanguages
RtlLCIDToCultureName
TpSetWait
strnicmp
TpAllocTimer
RtlInitializeResource
RtlReleaseResource
RtlAcquireResourceExclusive
RtlCultureNameToLCID
TpAllocPool
RtlpGetSystemDefaultUILanguage
RtlLocaleNameToLcid
RtlGetParentLocaleName
RtlInitializeNtUserPfn
RtlTimeToSecondsSince1980
RtlQueryActivationContextApplicationSettings
RtlpGetNameFromLangInfoNode
RtlpMuiRegCreateRegistryInfo
RtlpLoadUserUIByPolicy
RtlpMuiRegFreeRegistryInfo
RtlpInitializeLangRegistryInfo
RtlpMuiRegLoadRegistryInfo
TpSetPoolStackInformation
TpDisablePoolCallbackChecks
RtlSetEnvironmentVar
RtlSetEnvironmentVariable
RtlSetUnhandledExceptionFilter
RtlCreateTagHeap
RtlGetLocaleFileMappingAddress
LdrSetDllManifestProber
CsrClientConnectToServer
RtlSetThreadPoolStartFunc
RtlGetNtVersionNumbers
RtlNormalizeProcessParams
RtlSetUserCallbackExceptionFilter
RtlInitializeAtomPackage
RtlAddRefMemoryStream
RtlReleaseMemoryStream
RtlResetRtlTranslations
RtlInitNlsTables
RtlInitCodePageTable
RtlUniform
RtlDoesFileExists_U
RtlCreateAtomTable
RtlpApplyLengthFunction
RtlGetLengthWithoutLastFullDosOrNtPathElement
RtlCreateActivationContext
vsnwprintf
RtlInitializeHandleTable
RtlCreateHeap
RtlRandomEx
RtlpUnWaitCriticalSection
RtlIntegerToChar
RtlIntegerToUnicodeString
RtlLargeIntegerAdd
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedMultiply
RtlEnlargedUnsignedDivide
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlExtendedIntegerMultiply
RtlLargeIntegerShiftLeft
RtlLargeIntegerShiftRight
RtlLargeIntegerArithmeticShift
RtlLargeIntegerNegate
RtlLargeIntegerSubtract
RtlConvertLongToLargeInteger
RtlConvertUlongToLargeInteger
allmul
TpSetTimer
RtlTryAcquireSRWLockExclusive
TpCallbackIndependent
RtlIsCriticalSectionLockedByThread
TpDisassociateCallback
RtlDosPathNameToNtPathName_U
LdrRscIsTypeExist
RtlAddressInSectionTable
RtlImageRvaToSection
LdrLoadAlternateResourceModuleEx
RtlLoadString
LdrShutdownThread
RtlFreeThreadActivationContextStack
RtlFreeActivationContextStack
RtlExitUserThread
RtlCleanUpTEBLangLists
RtlSetUserValueHeap
RtlDosSearchPath_Ustr
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlUnicodeToMultiByteSize
RtlExpandEnvironmentStrings_U
RtlUnicodeStringToInteger
LdrGetDllHandleByName
RtlGetLongestNtPathLength
RtlGetAce
RtlGetLastWin32Error
LdrFindEntryForAddress
LdrGetDllHandleByMapping
LdrAddLoadAsDataTable
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
RtlUnicodeToOemN
RtlTimeToTimeFields
RtlTimeFieldsToTime
iswctype
iswalpha
RtlCreateUnicodeString
RtlpQueryDefaultUILanguage
swprintf_s
vswprintf_s
RtlpEnsureBufferSize
RtlUTF8ToUnicodeN
RtlUnicodeToUTF8N
strncmp
LdrQueryImageFileKeyOption
LdrOpenImageFileOptionsKey
RtlDeleteAce
RtlAddVectoredContinueHandler
RtlCompareMemory
RtlCompareMemoryUlong
RtlFillMemory
RtlFillMemoryUlonglong
RtlFillMemoryUlong
RtlZeroMemory
RtlMoveMemory
RtlReportSilentProcessExit
RtlExitUserProcess
LdrShutdownProcess
RtlDetectHeapLeaks
EtwNotificationUnregister
EtwEventUnregister
EtwUnregisterTraceGuids
RtlClearBits
RtlAreBitsSet
RtlNumberGenericTableElements
RtlEnumerateGenericTableWithoutSplaying
RtlDeleteResource
RtlFlsFree
RtlDestroyHandleTable
EtwEventWrite
WinSqmEventEnabled
WinSqmEventWrite
WinSqmIncrementDWORD
RtlGetCurrentDirectory_U
RtlSetHeapInformation
iswdigit
EtwpNotificationThread
EtwDeliverDataBlock
LdrUnloadAlternateResourceModule
LdrUnloadAlternateResourceModuleEx
LdrRemoveLoadAsDataTable
TpReleasePool
RtlAcquirePrivilege
RtlReleasePrivilege
LdrResGetRCConfig
TpAllocIoCompletion
RtlDuplicateUnicodeString
RtlStringFromGUID
RtlDowncaseUnicodeString
wcscat_s
toupper
RtlUpcaseUnicodeToMultiByteN
RtlSetCurrentDirectory_U
RtlInsertElementGenericTable
RtlInsertElementGenericTableFull
RtlDestroyHeap
RtlSetSaclSecurityDescriptor
RtlAddAccessAllowedAceEx
RtlGetSaclSecurityDescriptor
RtlSplay
RtlLookupElementGenericTable
RtlLookupElementGenericTableFull
RtlDeleteElementGenericTable
RtlRealSuccessor
RtlDelete
RtlIsTextUnicode
RtlSetThreadErrorMode
RtlFormatMessageEx
RtlGetProductInfo
wcstol
RtlSubtreePredecessor
RtlFindMessage
RtlEqualString
RtlUpperChar
RtlGUIDFromString
RtlIpv4StringToAddressW
RtlIpv6StringToAddressExW
RtlIpv6StringToAddressW
RtlIpv4AddressToStringExW
RtlIpv4AddressToStringW
RtlDestroyProcessParameters
RtlQueryElevationFlags
RtlIsGenericTableEmpty
RtlCreateProcessParametersEx
LdrQueryImageFileExecutionOptions
LdrQueryImageFileExecutionOptionsEx
RtlAcquireResourceShared
isdigit
_isascii
RtlIpv4StringToAddressA
RtlTimeToSecondsSince1970
RtlIpv4StringToAddressExW
isxdigit
RtlIpv6StringToAddressA
strtol
RtlCompactHeap
RtlValidateHeap
RtlIpv6AddressToStringW
RtlIpv6AddressToStringExW
itoa
atoi
atol
RtlCreateEnvironmentEx
RtlSetThreadPreferredUILanguages
LdrResFindResource
wcsncat_s
RtlCopyString
RtlNtPathNameToDosPathName
RtlDestroyEnvironment
RtlCaptureContext
RtlUnwind
RtlRaiseException
RtlRaiseStatus
RtlFindActivationContextSectionGuid
RtlWakeAllConditionVariable
NtdllDialogWndProc_W
RtlGetControlSecurityDescriptor
RtlWow64EnableFsRedirectionEx
RtlCheckForOrphanedCriticalSections
RtlTryAcquirePebLock
RtlCaptureStackBackTrace
RtlWalkFrameChain
RtlAddAtomToAtomTable
RtlDeleteAtomFromAtomTable
EtwTraceMessage
EtwTraceMessageVa
RtlGetUserInfoHeap
RtlQueryAtomInAtomTable
isalpha
alldiv
VerSetConditionMask
RtlVerifyVersionInfo
RtlTestBit
RtlDeactivateActivationContext
RtlActivateActivationContext
RtlActivateActivationContextEx
RtlMakeSelfRelativeSD
RtlAbsoluteToSelfRelativeSD
RtlNormalizeString
strcat_s
strcpy_s
TpAllocAlpcCompletionEx
RtlGetOwnerSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
vsnprintf
TpSimpleTryPost
RtlLockMemoryZone
RtlLockModuleSection
RtlUnlockMemoryZone
RtlUnlockModuleSection
TpReleaseAlpcCompletion
ui64tow
RtlClearAllBits
TpReleaseIoCompletion
RtlQueryInformationAcl
RtlQueueWorkItem
TpCallbackMayRunLong
RtlCreateBoundaryDescriptor
RtlCreateMemoryZone
RtlCreateMemoryBlockLookaside
RtlInitializeGenericTableAvl
RtlInsertElementGenericTableAvl
RtlInsertElementGenericTableFullAvl
RtlLookupElementGenericTableAvl
RtlLookupElementGenericTableFullAvl
EtwRegisterTraceGuidsA
WinSqmSetDWORD
TpAllocCleanupGroup
TpStartAsyncIoOperation
TpAllocWork
RtlDestroyMemoryZone
RtlDestroyMemoryBlockLookaside
RtlAddMandatoryAce
TpReleaseTimer
TpWaitForTimer
TpReleaseCleanupGroup
A_SHAInit
RtlCreateServiceSid
A_SHAFinal
A_SHAUpdate
RtlAddSIDToBoundaryDescriptor
RtlOemToUnicodeN
RtlOemStringToUnicodeString
RtlUnicodeStringToOemString
WinSqmAddToStreamEx
RtlMapGenericMask
RtlEqualPrefixSid
RtlDeleteSecurityObject
RtlFindAceByType
RtlNewSecurityObjectEx
TpWaitForWait
TpReleaseWait
RtlDeleteTimer
TpSetPoolMinThreads
TpSetPoolMaxThreads
RtlCreateTimerQueue
RtlCreateTimer
TpAllocWait
LdrRegisterDllNotification
TpPostWork
EtwEventActivityIdControl
EtwEventWriteTransfer
RtlRegisterWait
RtlIdnToAscii
RtlDeregisterWaitEx
LdrUnregisterDllNotification
wcsncpy_s
strncpy_s
RtlCharToInteger
AlpcGetMessageAttribute
AlpcInitializeMessageAttribute
AlpcGetHeaderSize
RtlMultiByteToUnicodeSize
wcscspn
wtol
RtlIdentifierAuthoritySid
wtoi
NtdllDialogWndProc_A
RtlFreeUserStack
TpReleaseCleanupGroupMembers
RtlDeleteTimerQueueEx
RtlCreateUserStack
DbgPrint
mbstowcs
DbgPrintEx
strncpy
RtlValidRelativeSecurityDescriptor
RtlGetProcessHeaps
RtlRemoveVectoredExceptionHandler
Ordinal_8
RtlAddVectoredExceptionHandler
vscwprintf
WinSqmAddToStream
LdrLoadAlternateResourceModule
WinSqmEndSession
WinSqmStartSession
RtlGetCurrentProcessorNumber
WinSqmSetIfMaxDWORD
RtlGetThreadErrorMode
RtlKnownExceptionFilter
EtwEventWriteNoRegistration
ultoa
ui64toa
RtlImpersonateSelf
RtlImpersonateSelfEx
EtwProcessPrivateLoggerRequest
RtlGetUnloadEventTraceEx
RtlCreateQueryDebugBuffer
RtlAddAccessDeniedAce
MD5Init
MD5Final
MD5Update
RtlDestroyQueryDebugBuffer
RtlQueryProcessDebugInformation
RtlQueryHeapInformation
RtlWerpReportException
RtlInterlockedClearBitRun
EtwSendNotification
RtlQueryTimeZoneInformation
EtwpGetCpuSpeed
RtlNewSecurityObject
RtlSelfRelativeToAbsoluteSD
RtlConvertSharedToExclusive
RtlPrefixString
LdrInitShimEngineDynamic
RtlCutoverTimeToSystemTime
RtlQueryRegistryValues
RtlpCheckDynamicTimeZoneInformation
itow_s
RtlEnumerateGenericTableAvl
TpWaitForIoCompletion
TpCancelAsyncIoOperation
TpWaitForWork
TpReleaseWork
RtlEnumerateGenericTableWithoutSplayingAvl
RtlDeleteElementGenericTableAvl
RtlAddAce
RtlSetIoCompletionCallback
cos
CIcos
log
CIlog
pow
CIpow
sin
CIsin
CIsqrt
sqrt
alldvrm
alloca_probe_16
alloca_probe_8
allrem
ftol
memccpy
atan
ceil
floor
memchr
strcpy
strcat
strcmp
strcspn
strlen
strncat
strpbrk
strrchr
strspn
strstr
tan
RtlUshortByteSwap
RtlUlongByteSwap
RtlUlonglongByteSwap
RtlFreeOemString
NtCurrentTeb
RtlEnableThreadProfiling
RtlDisableThreadProfiling
RtlQueryThreadProfiling
RtlReadThreadProfilingData
RtlAppendPathElement
RtlGetLengthWithoutTrailingPathSeperators
RtlDosSearchPath_U
DbgUiConnectToDbg
DbgUiGetThreadDebugObject
DbgUiSetThreadDebugObject
DbgUiWaitStateChange
DbgUiContinue
DbgUiStopDebugging
DbgUiRemoteBreakin
DbgUiIssueRemoteBreakin
DbgUiDebugActiveProcess
DbgUiConvertStateChangeStructure
RtlPushFrame
RtlPopFrame
RtlGetFrame
LdrHotPatchRoutine
RtlGetUnloadEventTrace
LdrVerifyImageMatchesChecksumEx
LdrQueryProcessModuleInformation
LdrQueryModuleServiceTags
LdrGetFailureData
LdrVerifyImageMatchesChecksum
RtlComputePrivatizedDllName_U
CsrSetPriorityClass
RtlFinalReleaseOutOfProcessMemoryStream
RtlInitOutOfProcessMemoryStream
RtlInitMemoryStream
RtlReadMemoryStream
RtlReadOutOfProcessMemoryStream
RtlWriteMemoryStream
RtlSeekMemoryStream
RtlCommitMemoryStream
RtlCloneMemoryStream
RtlRevertMemoryStream
RtlCopyOutOfProcessMemoryStreamTo
RtlCopyMemoryStreamTo
RtlUnlockMemoryStreamRegion
RtlLockMemoryStreamRegion
RtlStatMemoryStream
RtlQueryInterfaceMemoryStream
RtlSetMemoryStreamSize
RtlCreateProcessReflection
RtlIsCriticalSectionLocked
RtlGetCriticalSectionRecursionCount
RtlpWaitForCriticalSection
RtlConvertExclusiveToShared
RtlDumpResource
RtlUpdateClonedCriticalSection
RtlEnableEarlyCriticalSectionEventCreation
RtlpNotOwnerCriticalSection
RtlQueryCriticalSectionOwner
RtlNewSecurityObjectWithMultipleInheritance
RtlSetSecurityObject
RtlSetSecurityObjectEx
RtlQuerySecurityObject
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlCopySecurityDescriptor
RtlCreateAndSetSD
RtlCreateUserSecurityObject
RtlConvertToAutoInheritSecurityObject
RtlDefaultNpAcl
RtlCheckSandboxedToken
RtlConvertUiListToApiList
RtlpQueryProcessDebugInformationRemote
RtlCommitDebugInfo
RtlDeCommitDebugInfo
RtlSetProcessDebugInformation
RtlQueryProcessBackTraceInformation
RtlQueryProcessLockInformation
RtlQueryProcessHeapInformation
LdrWx86FormatVirtualImage
RtlRemoveVectoredContinueHandler
RtlApplicationVerifierStop
RtlQueueApcWow64Thread
RtlWow64CallFunction64
RtlWow64EnableFsRedirection
RtlWakeConditionVariable
RtlSleepConditionVariableCS
RtlSleepConditionVariableSRW
RtlTryAcquireSRWLockShared
RtlUpdateClonedSRWLock
RtlAcquireReleaseSRWLockExclusive
RtlReportException
RtlReportSqmEscalation
ShipAssert
ShipAssertMsgW
ShipAssertMsgA
ShipAssertGetBufferInfo
WerReportSQMEvent
WinSqmSetEscalationInfo
WinSqmCommonDatapointSetDWORD
WinSqmCommonDatapointSetDWORD64
WinSqmCommonDatapointDelete
WinSqmCheckEscalationSetDWORD
WinSqmCheckEscalationSetDWORD64
WinSqmCheckEscalationSetString
WinSqmCheckEscalationAddToStreamEx
WinSqmGetEscalationRuleStatus
WinSqmGetInstrumentationProperty
WinSqmCommonDatapointSetString
WinSqmCommonDatapointSetStreamEx
WinSqmSetString
WinSqmSetDWORD64
WinSqmAddToAverageDWORD
WinSqmSetIfMinDWORD
Ordinal_6
Ordinal_5
Ordinal_3
Ordinal_4
Ordinal_7
Ordinal_1
Ordinal_2
RtlZombifyActivationContext
RtlIsActivationContextActive
RtlComputeImportTableHash
CsrIdentifyAlertableThread
CsrClientCallServer
CsrAllocateCaptureBuffer
CsrFreeCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrGetProcessId
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrVerifyRegion
AlpcGetMessageFromCompletionList
AlpcFreeCompletionListMessage
AlpcGetCompletionListMessageAttributes
AlpcGetCompletionListLastMessageInformation
AlpcGetOutstandingCompletionListMessageCount
AlpcRegisterCompletionListWorkerThread
AlpcUnregisterCompletionListWorkerThread
AlpcRegisterCompletionList
AlpcUnregisterCompletionList
AlpcRundownCompletionList
AlpcAdjustCompletionListConcurrencyCount
AlpcMaxAllowedMessageLength
DbgPrompt
DbgQueryDebugFilterState
DbgSetDebugFilterState
DbgPrintReturnControlC
vDbgPrintEx
vDbgPrintExWithPrefix
LdrGetFileNameFromLoadAsDataTable
LdrEnumResources
LdrFlushAlternateResourceModules
LdrSetMUICacheType
LdrFindResourceDirectory_U
RtlDeNormalizeProcessParams
RtlWow64LogMessageInEventLogger
RtlCreateUserProcess
RtlCreateUserThread
RtlCloneUserProcess
RtlCreateProcessParameters
RtlQueryModuleInformation
LdrProcessRelocationBlock
LdrResRelease
RtlUpcaseUnicodeToOemN
RtlCustomCPToUnicodeN
RtlUnicodeToCustomCPN
RtlUpcaseUnicodeToCustomCPN
RtlConsoleMultiByteToUnicodeN
RtlTimeToElapsedTimeFields
RtlSecondsSince1980ToTime
RtlSecondsSince1970ToTime
RtlSystemTimeToLocalTime
RtlLocalTimeToSystemTime
NtGetTickCount
PfxInitialize
PfxRemovePrefix
PfxInsertPrefix
PfxFindPrefix
RtlStartRXact
RtlAbortRXact
RtlAddAttributeActionToRXact
RtlAddActionToRXact
RtlInitializeRXact
RtlApplyRXact
RtlApplyRXactNoFlush
RtlSelfRelativeToAbsoluteSD2
RtlRunEncodeUnicodeString
RtlRunDecodeUnicodeString
RtlEraseUnicodeString
RtlAdjustPrivilege
RtlCopySidAndAttributesArray
RtlCreateVirtualAccountSid
RtlRemovePrivileges
RtlEqualLuid
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlSetControlSecurityDescriptor
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlOwnerAcesPresent
RtlGetSecurityDescriptorRMControl
RtlSetSecurityDescriptorRMControl
RtlMapSecurityErrorToNtStatus
RtlSidHashInitialize
RtlSidHashLookup
RtlSidIsHigherLevel
RtlSidEqualLevel
RtlSidDominates
RtlReplaceSidInSd
RtlSetAttributesSecurityDescriptor
RtlSetInformationAcl
RtlAddCompoundAce
RtlAddAccessDeniedAceEx
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedObjectAce
RtlAddAuditAccessObjectAce
RtlDestroyAtomTable
RtlEmptyAtomTable
RtlPinAtomInAtomTable
RtlAddIntegrityLabelToBoundaryDescriptor
RtlImageRvaToVa
RtlZeroHeap
RtlExtendMemoryBlockLookaside
RtlLockMemoryBlockLookaside
RtlResetMemoryBlockLookaside
RtlUnlockMemoryBlockLookaside
RtlExtendMemoryZone
RtlResetMemoryZone
RtlDowncaseUnicodeChar
RtlxUnicodeStringToOemSize
RtlUnicodeStringToOemSize
RtlUnicodeStringToAnsiSize
RtlxUnicodeStringToAnsiSize
RtlxOemStringToUnicodeSize
RtlxAnsiStringToUnicodeSize
RtlOemStringToUnicodeSize
RtlAnsiStringToUnicodeSize
RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToOemString
RtlUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToCountedOemString
RtlEqualDomainName
RtlEqualComputerName
RtlDnsHostNameToComputerName
RtlCompareString
RtlUpperString
RtlAppendAsciizToString
RtlAppendStringToString
RtlSetAllBits
RtlFindSetBits
RtlFindClearRuns
RtlFindLongestRunClear
RtlNumberOfSetBits
RtlNumberOfClearBits
RtlAreBitsClear
RtlFindNextForwardRunClear
RtlInterlockedSetBitRun
RtlFindLastBackwardRunClear
RtlFindMostSignificantBit
RtlFindLeastSignificantBit
RtlFindSetBitsAndClear
RtlAssert
RtlBarrier
RtlBarrierForDelete
RtlInitBarrier
RtlDeleteBarrier
RtlCaptureStackContext
RtlGetCallersAddress
RtlLargeIntegerToChar
RtlInt64ToUnicodeString
RtlWriteRegistryValue
RtlCheckRegistryKey
RtlCreateRegistryKey
RtlDeleteRegistryValue
RtlSetTimeZoneInformation
RtlSetDynamicTimeZoneInformation
RtlQueryDynamicTimeZoneInformation
RtlGetThreadLangIdByIndex
RtlpGetLCIDFromLangInfoNode
RtlGetProcessPreferredUILanguages
RtlpIsQualifiedLanguage
RtlConvertLCIDToString
RtlpConvertLCIDsToCultureNames
RtlpConvertCultureNamesToLCIDs
RtlpVerifyAndCommitUILanguageSettings
RtlpCleanupRegistryKeys
RtlGetSystemPreferredUILanguages
RtlpSetUserPreferredUILanguages
RtlpSetPreferredUILanguages
RtlSetProcessPreferredUILanguages
RtlGetUILanguageInfo
RtlGetFileMUIPath
RtlGetUserPreferredUILanguages
RtlpSetInstallLanguage
RtlIoEncodeMemIoResource
RtlCmEncodeMemIoResource
RtlIoDecodeMemIoResource
RtlCmDecodeMemIoResource
RtlFindClosestEncodableLength
RtlSetUserFlagsHeap
RtlQueryTagHeap
RtlEnumProcessHeaps
RtlWalkHeap
RtlMultipleAllocateHeap
RtlMultipleFreeHeap
RtlProtectHeap
RtlValidateProcessHeaps
RtlCompareAltitudes
RtlGetCompressionWorkSpaceSize
RtlCompressBuffer
RtlDecompressBuffer
RtlDecompressFragment
RtlComputeCrc32
RtlConnectToSm
RtlSendMsgToSm
RtlDeleteHashTable
RtlInsertEntryHashTable
RtlRemoveEntryHashTable
RtlLookupEntryHashTable
RtlGetNextEntryHashTable
RtlInitEnumerationHashTable
RtlEnumerateEntryHashTable
RtlEndEnumerationHashTable
RtlInitWeakEnumerationHashTable
RtlWeaklyEnumerateEntryHashTable
RtlEndWeakEnumerationHashTable
RtlExpandHashTable
RtlContractHashTable
RtlCreateHashTable
RtlLocateLegacyContext
RtlSetExtendedFeaturesMask
RtlCopyExtendedContext
RtlCopyContext
RtlInitializeExtendedContext
RtlGetExtendedContextLength
RtlGetExtendedFeaturesMask
RtlLocateExtendedFeature
RtlCopyMappedMemory
RtlLockBootStatusData
RtlUnlockBootStatusData
RtlGetSetBootStatusData
RtlCreateBootStatusDataFile
RtlCreateEnvironment
RtlSetCurrentEnvironment
RtlSetEnvironmentStrings
RtlCreateSystemVolumeInformationFolder
RtlSubtreeSuccessor
RtlRealPredecessor
RtlDeleteNoSplay
RtlGetElementGenericTable
RtlEnumerateGenericTable
LdrSetAppCompatDllRedirectionCallback
RtlIsGenericTableEmptyAvl
RtlGetElementGenericTableAvl
RtlNumberGenericTableElementsAvl
RtlEnumerateGenericTableLikeADirectory
RtlRegisterSecureMemoryCacheCallback
RtlDeregisterSecureMemoryCacheCallback
RtlFlushSecureMemoryCache
RtlIpv6AddressToStringA
RtlIpv6AddressToStringExA
RtlIpv4AddressToStringA
RtlIpv4AddressToStringExA
RtlEthernetAddressToStringA
RtlEthernetAddressToStringW
RtlIpv6StringToAddressExA
RtlIpv4StringToAddressExA
RtlEthernetStringToAddressA
RtlEthernetStringToAddressW
RtlFormatMessage
RtlIsNameLegalDOS8Dot3
RtlGenerate8dot3Name
RtlSetProcessIsCritical
RtlSetThreadIsCritical
RtlGetEnabledExtendedFeatures
RtlGetLastNtStatus
RtlIsValidLocaleName
RtlHeapTrkInitialize
RtlIdnToNameprepUnicode
RtlIdnToUnicode
RtlInitializeContext
RtlRemoteCall
RtlIsNameInExpression
RtlIsNormalizedString
RtlUnhandledExceptionFilter2
RtlUnhandledExceptionFilter
RtlLargeIntegerDivide
RtlLockCurrentThread
RtlUnlockCurrentThread
RtlLogStackBackTrace
RtlNumberOfSetBitsUlongPtr
RtlRandom
RtlTraceDatabaseEnumerate
RtlTraceDatabaseCreate
RtlTraceDatabaseDestroy
RtlTraceDatabaseValidate
RtlTraceDatabaseFind
RtlTraceDatabaseLock
RtlTraceDatabaseUnlock
RtlTraceDatabaseAdd
RtlpGetUserOrMachineUILanguage4NLS
RtlpRefreshCachedUILanguage
RtlpMuiFreeLangRegistryInfo
RtlpLoadMachineUIByPolicy
RtlpNtOpenKey
RtlpNtCreateKey
RtlpNtQueryValueKey
RtlpNtSetValueKey
RtlpNtMakeTemporaryKey
RtlpNtEnumerateSubKey
isupper
islower
isspace
ispunct
isalnum
isprint
isgraph
iscntrl
_toascii
_iscsym
_iscsymf
atoi64
ltoa
i64toa
itow
ltow
ultow
i64tow
lfind
memicmp
snprintf
splitpath
strlwr
strupr
swprintf
swprintf
vswprintf
wcslwr
wcsnset_s
wcsset_s
wcstoui64
wcsupr
wtoi64
abs
labs
fabs
iswlower
iswxdigit
iswspace
qsort
sprintf
sscanf
strnlen
strtoul
tolower
towlower
towupper
vsprintf
wcscat
wcscpy
wcslen
wcsncat
wcsncpy
wcsnlen
wcsspn
wcstoul
wcstombs
itoa_s
ltoa_s
ultoa_s
i64toa_s
ui64toa_s
ltow_s
ultow_s
i64tow_s
ui64tow_s
makepath_s
vsnprintf_s
snprintf_s
snscanf_s
vsnwprintf_s
snwprintf_s
snwscanf_s
splitpath_s
strnset_s
strset_s
wmakepath_s
wsplitpath_s
memcpy_s
memmove_s
vsprintf_s
sprintf_s
sscanf_s
strncat_s
strtok_s
swscanf_s
MD4Init
MD4Update
MD4Final
EtwCreateTraceInstanceId
EtwRegisterSecurityProvider
EtwEventSetInformation
EtwEventProviderEnabled
EtwEventWriteString
EtwWriteUMSecurityEvent
EtwEnumerateProcessRegGuids
EtwEventWriteEx
EtwEventWriteFull
EtwEventWriteStartScenario
EtwEventWriteEndScenario
EtwLogTraceEvent
EtwTraceEventInstance
EtwSetMark
EtwReplyNotification
EtwpCreateEtwThread
EvtIntReportEventAndSourceAsync
EvtIntReportAuthzEventAndSourceAsync
TpAllocAlpcCompletion
TpWaitForAlpcCompletion
TpAlpcRegisterCompletionList
TpAlpcUnregisterCompletionList
TpQueryPoolStackInformation
TpSetDefaultPoolMaxThreads
TpSetDefaultPoolStackInformation
TpCallbackSetEventOnCompletion
TpCallbackReleaseSemaphoreOnCompletion
TpCallbackReleaseMutexOnCompletion
TpCallbackLeaveCriticalSectionOnCompletion
TpCallbackUnloadDllOnCompletion
TpDbgSetLogRoutine
TpDbgDumpHeapUsage
RtlDebugPrintTimes
RtlDeleteTimerQueue
RtlUpdateTimer
RtlCancelTimer
RtlSetTimer
RtlDeregisterWait
SbExecuteProcedure
RtlAllocateMemoryZone
RtlFreeMemoryBlockLookaside
RtlAllocateMemoryBlockLookaside
FindExecutableW
Ordinal_899
Ordinal_188
Ordinal_885
Ordinal_181
Ordinal_892
Ordinal_200
Ordinal_201
Ordinal_94
Ordinal_891
SHQueryUserNotificationState
SHValidateUNC
SHUpdateRecycleBinIcon
SHEnableServiceObject
Ordinal_753
Ordinal_731
DoEnvironmentSubstW
SHGetRealIDL
SHAppBarMessage
ShellExecuteW
PathResolve
SHSetInstanceExplorer
Ordinal_895
Ordinal_244
CommandLineToArgvW
IsLFNDriveW
IsLFNDrive
SHCloneSpecialIDList
SHAlloc
Shell_NotifyIconW
SHGetSpecialFolderPathW
Ordinal_175
SHGetMalloc
ShellExecuteExW
Ordinal_660
Ordinal_740
SHGetNameFromIDList
AssocCreateForClasses
SHCreateShellItemArray
SHCreateShellItemArrayFromShellItem
Ordinal_99
OpenRegStream
SHCreateShellFolderView
SHGetDataFromIDListW
SHGetFolderPathAndSubDirW
Ordinal_860
SHGetInstanceExplorer
ILGetNext
SHChangeNotifyRegisterThread
ILSaveToStream
SHGetItemFromObject
Shell_MergeMenus
Ordinal_777
SHCreateShellItemArrayFromDataObject
SHCreateDefaultContextMenu
Ordinal_702
SHGetItemFromDataObject
SHTestTokenMembership
SHCreateItemFromParsingName
IsUserAnAdmin
SHPathPrepareForWriteW
Ordinal_211
SHChangeNotify
SHChangeNotifySuspendResume
SHFileOperationW
PathIsExe
ILLoadFromStreamEx
SHGetPathFromIDListEx
SHILCreateFromPath
SHEvaluateSystemCommandTemplate
SHCreateShellItemArrayFromIDLists
SHDefExtractIconW
SHGetImageList
Ordinal_902
Ordinal_241
SHCreateDefaultExtractIcon
Shell_GetCachedImageIndexW
Ordinal_258
InitNetworkAddressControl
SHRestricted
unnamedImageEntryPoint
Ordinal_723
Ordinal_833
SHGetFolderPathEx
SHGetFolderPathW
InternalExtractIconListA
InternalExtractIconListW
DAD_AutoScroll
ShellHookProc
SHParseDisplayName
Ordinal_866
SHGetKnownFolderIDList
SHGetSetSettings
AssocGetDetailsOfPropKey
SHBindToParent
SHCreateItemWithParent
ILFindChild
SHCLSIDFromString
SHGetFolderLocation
SHGetSpecialFolderLocation
SHGetKnownFolderItem
Ordinal_757
SHGetPathFromIDListW
SHChangeNotifyRegister
Ordinal_850
Ordinal_755
ILIsParent
Ordinal_719
Ordinal_732
SHChangeNotifyDeregister
Ordinal_95
Ordinal_890
Ordinal_889
SHChangeNotification_Unlock
SHChangeNotification_Lock
DllRegisterServer
DllUnregisterServer
SHCoCreateInstance
ILFree
SHFree
Ordinal_156
Ordinal_764
DriveType
RealDriveType
Ordinal_257
ILGetSize
ILClone
Ordinal_20
ILCombine
SHGetDesktopFolder
SHGetIDListFromObject
SHBindToObject
ILFindLastID
ILCloneFirst
ILRemoveLastID
SHBindToFolderIDListParentEx
ILIsEqual
Ordinal_862
Ordinal_767
SHCreateItemFromIDList
SHBindToFolderIDListParent
IsNetDrive
Ordinal_787
DAD_SetDragImage
SHGetDiskFreeSpaceExW
SHCreateDirectoryExW
Ordinal_93
Ordinal_759
SHGetPropertyStoreForWindow
Ordinal_128
DllGetClassObject
SHFormatDrive
Ordinal_259
DAD_ShowDragImage
SHGetKnownFolderPath
DllCanUnloadNow
RegenerateUserEnvironment
StrCmpNIW
Ordinal_184
Shell_NotifyIconGetRect
Ordinal_881
Ordinal_882
Ordinal_237
ShellAboutW
Options_RunDLLW
Ordinal_819
SHCreatePropSheetExtArray
Ordinal_194
SHDestroyPropSheetExtArray
Control_RunDLLW
Ordinal_61
Ordinal_265
FreeIconList
Ordinal_864
SHPropStgWriteMultiple
Shell_GetCachedImageIndex
Ordinal_690
SHPropStgReadMultiple
SHPropStgCreate
SHAssocEnumHandlersForProtocolByApplication
Ordinal_840
SHCreateItemInKnownFolder
Ordinal_778
SHAddDefaultPropertiesByExt
SHCreateLocalServerRunDll
SHHandleUpdateImage
SHCreateAssociationRegistration
SHGetDriveMedia
SHCreateQueryCancelAutoPlayMoniker
Ordinal_859
SetCurrentProcessExplicitAppUserModelID
SHSetLocalizedName
ExtractIconW
SHCreateDirectory
SHCreateShellItem
Ordinal_901
Ordinal_711
SHCreateDirectoryExA
SHGetFolderPathA
Ordinal_714
Ordinal_894
Ordinal_903
SHAddToRecentDocs
PathCleanupSpec
PathYetAnotherMakeUniqueName
SHSimpleIDListFromPath
Win32DeleteFile
StrStrIW
ExtractIconExW
DragAcceptFiles
SHGetPathFromIDList
SHGetPathFromIDListA
Ordinal_815
Ordinal_825
Ordinal_847
Ordinal_818
Ordinal_880
ReadCabinetState
SHAssocEnumHandlers
SHGetSetFolderCustomSettings
Ordinal_878
Ordinal_824
Ordinal_849
Ordinal_814
Ordinal_830
PathIsSlowW
SHResolveLibrary
Ordinal_791
StrChrW
Ordinal_876
Ordinal_851
Ordinal_897
Ordinal_789
DAD_DragEnterEx
Ordinal_681
Shell_GetImageLists
SHMapPIDLToSystemImageListIndex
SignalFileOpen
Ordinal_870
Ordinal_893
Ordinal_875
Ordinal_874
Ordinal_744
Ordinal_823
Ordinal_900
Ordinal_65
Ordinal_871
SHGetTemporaryPropertyForItem
SHCreateDataObject
SHGetAttributesFromDataObject
Ordinal_70
SHCreateItemFromRelativeName
SHGetStockIconInfo
Ordinal_873
Ordinal_865
SHSetTemporaryPropertyForItem
SHGetFileInfoW
SHGetFileInfo
SHGetFileInfoA
Ordinal_733
SHCreateStdEnumFmtEtc
Ordinal_651
WriteCabinetState
DuplicateIcon
ExtractIconExA
ExtractIconEx
ExtractAssociatedIconExW
ExtractAssociatedIconExA
ExtractAssociatedIconW
SHExtractIconsW
ExtractIconA
ExtractAssociatedIconA
DoEnvironmentSubstA
StrNCmpW
StrNCmpA
StrNCmpIW
StrNCmpIA
StrRStrW
StrRStrA
PickIconDlg
PifMgr_CloseProperties
PifMgr_GetProperties
PifMgr_SetProperties
PifMgr_OpenProperties
SheGetDirA
SheChangeDirA
SheChangeDirExW
SheSetCurDrive
Ordinal_76
DragQueryPoint
DragFinish
DragQueryFileAorW
DragQueryFileW
DragQueryFileA
DragQueryFile
LaunchMSHelp_RunDLLW
RunAsNewUser_RunDLLW
SHOpenWithDialog
OpenAs_RunDLLA
OpenAs_RunDLL
OpenAs_RunDLLW
PrepareDiscForBurnRunDllW
Ordinal_213
Ordinal_214
Ordinal_205
Ordinal_212
SHInvokePrinterCommandW
SHInvokePrinterCommandA
PrintersGetCommand_RunDLL
PrintersGetCommand_RunDLLA
PrintersGetCommand_RunDLLW
SHHelpShortcuts_RunDLL
SHHelpShortcuts_RunDLLA
SHHelpShortcuts_RunDLLW
SHObjectProperties
Ordinal_203
Ordinal_204
Ordinal_58
SHEnumerateUnreadMailAccountsW
Ordinal_751
Ordinal_91
SHFindFiles
Ordinal_886
Ordinal_831
Ordinal_209
Ordinal_210
SHGetUnreadMailCountW
SHSetUnreadMailCountW
SHIsFileAvailableOffline
AppCompat_RunDLLW
Ordinal_828
Ordinal_829
CDefFolderMenu_Create2
CIDLData_CreateFromIDArray
Ordinal_713
Ordinal_35
Ordinal_29
Ordinal_45
Ordinal_36
IsLFNDriveA
PathQualify
PathMakeUniqueName
PathGetShortPath
PathIsSlowA
CheckEscapesW
Ordinal_896
GetCurrentProcessExplicitAppUserModelID
Ordinal_44
Control_RunDLLAsUserW
Control_RunDLL
Control_RunDLLA
Ordinal_264
Ordinal_260
Ordinal_763
DAD_DragLeave
DAD_DragMove
DAD_DragEnterEx2
SHDoDragDrop
Ordinal_884
RestartDialogEx
RestartDialog
Ordinal_54
Ordinal_254
Ordinal_60
WaitForExplorerRestartW
DllInstall
Ordinal_877
SHDefExtractIconA
Shell_GetCachedImageIndexA
Ordinal_97
FindExecutableA
Ordinal_266
GetFileNameFromBrowse
Ordinal_186
Ordinal_15
ILAppendID
ILCreateFromPathW
ILCreateFromPath
ILCreateFromPathA
SHGetDiskFreeSpaceExA
SHGetDiskFreeSpaceA
SHGetDataFromIDListA
SHOpenFolderAndSelectItems
SHGetPropertyStoreFromIDList
SHGetPropertyStoreFromParsingName
Ordinal_790
SHGetLocalizedName
SHRemoveLocalizedName
SHGetNewLinkInfoW
SHGetNewLinkInfo
SHGetNewLinkInfoA
Ordinal_898
Ordinal_172
SHCreateFileExtractIconW
Ordinal_236
Ordinal_160
Ordinal_69
SHStartNetConnectionDialogW
Ordinal_215
Ordinal_12
Ordinal_752
SHCreateProcessAsUserW
RealShellExecuteExA
RealShellExecuteExW
RealShellExecuteA
RealShellExecuteW
WOWShellExecute
ShellExecuteExA
ShellExecuteEx
ShellExecuteA
ShellExec_RunDLLW
ShellExec_RunDLLA
ShellExec_RunDLL
SHCreateDefaultPropertiesOp
SHSetDefaultProperties
SHAddFromPropSheetExtArray
SHReplaceFromPropSheetExtArray
Shell_NotifyIconA
Shell_NotifyIcon
Ordinal_781
Ordinal_848
SHBrowseForFolderW
SHBrowseForFolderA
SHBrowseForFolder
Ordinal_887
SHUpdateImageW
Ordinal_761
SHUpdateImageA
SHSetFolderPathW
SHSetFolderPathA
SHGetSpecialFolderPathA
SHGetFolderPathAndSubDirA
SHFreeNameMappings
Ordinal_760
SHFileOperation
SHFileOperationA
Ordinal_788
SHShellFolderView_Message
SHCreateShellFolderViewEx
Ordinal_758
SHQueryRecycleBinW
SHQueryRecycleBinA
SHEmptyRecycleBinW
SHEmptyRecycleBinA
SHFind_InitMenuPopup
SHFlushSFCache
Ordinal_270
Ordinal_810
Ordinal_261
Ordinal_811
Ordinal_262
SHGetIconOverlayIndexW
SHGetIconOverlayIndexA
SHGetSettings
Ordinal_888
Ordinal_754
SHLimitInputEdit
Ordinal_748
SHLoadNonloadedIconOverlayIdentifiers
SHOpenPropSheetW
SHMultiFileProperties
SHPathPrepareForWriteA
Ordinal_683
Ordinal_684
ShellAboutA
StgMakeUniqueName
SHLoadInProc
Options_RunDLL
Options_RunDLLA
SHSetKnownFolderPath
SHShowManageLibraryUI
Ordinal_883
DllGetVersion
Ordinal_812
Ordinal_813
Ordinal_817
Ordinal_816
Ordinal_844
Ordinal_845
StrChrA
StrChrIA
StrChrIW
StrCmpNA
StrCmpNIA
StrCmpNW
StrRChrA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIA
StrRStrIW
StrStrA
StrStrIA
StrStrW
wctype
ctype
sys_errlist
sys_nerr
exception::`vftable'
bad_typeid::`vftable'
__non_rtti_object::`vftable'
bad_cast::`vftable'
memset
free
memcpy
ftol2
malloc
finite
isnan
ftol2_sse
memmove
unlock
lock
unnamedImageEntryPoint
errno
isleadbyte_l
wcsrchr
wcsicmp
wcschr
iswctype
iswspace
wcsnicmp
fileno
iswctype_l
mbtowc
towlower_l
towlower
CrtSetDbgBlockType
CrtMemDumpStatistics
CrtMemDumpAllObjectsSince
CrtMemCheckpoint
CrtDoForAllClientObjects
CrtDbgBreak
memcpy_s
wcsncmp
operator delete
operator new
operator delete[]
operator new[]
realloc
wcstoul
bsearch
isdigit
strncmp
vsnwprintf
vsnwprintf_l
mbtowc_l
wcsstr
wcscpy_s
iswdigit
get_osplatform
rand
_p__iob
_iob_func
iswalpha
initterm
wcsncpy_s
isspace
calloc
memmove_s
wcsnlen
tolower
wcsicmp_l
flsbuf
wtol
wtoi
vsnprintf
vsnprintf
vsnprintf_l
qsort
wcstoui64
wctomb_s
wctomb_s_l
wcscspn
wcsupr
stricmp
strcmpi
strrchr
atoi
strchr
atol
strstr
strtok
controlfp
strcat_s
strncpy_s
woutput_s
vswprintf_s
swprintf_s
setjmp3
CIsqrt
CIcos
get_osfhandle
isatty
msize
_dllonexit
strcpy_s
ismbblead
towupper
towupper_l
time
time32
srand
isleadbyte
strpbrk
toupper
ultow_s
div
ldiv
iswalnum
floor
wcsdup
ultow
wcspbrk
wcslwr
ltow
vscwprintf
wcscat_s
wcstol
wcsspn
strtoul
itow
_p___initenv
mbstowcs
_doserrno
strnicmp
wcstoi64
wtoi64
__lc_codepage_func
localeconv
memicmp
wcstok
ui64tow
strncpy
_set_se_translator
control87
statusfp
clearfp
CIpow
ceil
CIfmod
isalpha
isalnum
iswascii
iswxdigit
isxdigit
onexit
CIlog
ltow_s
itow_s
endthreadex
beginthreadex
vsnwprintf_s
snwprintf_s
exception::~exception
exception::exception
freea
freea_s
_crtLCMapStringA
setmbcp
initterm_e
get_winmajor
_p__commode
_p__fmode
_set_app_type
wcsnicmp_l
open_osfhandle
_getmainargs
dup2
dup
rmtmp
flushall
exit
fcloseall
cexit
close
get_fmode
fclose
fprintf
write
fflush
lseeki64
strlen
filelength
wsplitpath_s
CIatan
ferror
set_error_mode
lseek
tell
longjmp
_wgetmainargs
setlocale
crtBreakAlloc
CrtMemDifference
crtDbgFlag
crtAssertBusy
CrtDbgReport
CrtSetReportMode
CrtSetReportHook2
CrtSetReportHook
CrtSetReportFile
CrtSetDumpClient
CrtSetDbgFlag
CrtSetBreakAlloc
CrtDbgReportV
CrtSetAllocHook
CrtReportBlockType
CrtDbgReportWV
CrtDumpMemoryLeaks
CrtDbgReportW
CrtIsMemoryBlock
itoa_s
gmtime32_s
localtime32_s
localtime
localtime32
modf
fwrite
memcmp
strcmp
stricmp_l
tolower_l
toupper_l
strcpy
mbscpy
strcat
mbscat
ftol
mbsrchr
mbsrchr_l
mbspbrk
mbspbrk_l
mbctolower
mbctolower_l
mbsicmp
mbsicmp_l
fullpath
stat
fgetc
getc
fdopen
clearerr
clearerr_s
getenv
remove
fsopen
sopen_s
access
access_s
strnicoll_l
mbsnbicoll
mbsnbicoll_l
strnicmp_l
vfwprintf
fopen
wgetenv
mbsdec
mbsdec_l
isdigit_l
swscanf
fgetws
EH_prolog
i64tow
scprintf
vscprintf
scwprintf
isupper
tolower
read
filbuf
printf
pipe
wcsnicoll
feof
strlwr
isalnum_l
setmode
_crtCompareStringA
wcstombs_s
wcstombs_s_l
mbstowcs_s_l
strcspn
wsetlocale
clock
wcslen
sprintf
wcscmp
wcsncpy
strupr
wcscpy
_isascii
iscntrl
mbsinc
$I10_OUTPUT
memchr
wfullpath
strupr_s_l
strnlen
_p__environ
getpid
strxfrm
strxfrm_l
sscanf
wfsopen
wsopen_s
wfopen
fread
fseek
wtof
wtof_l
mbstowcs_s
wcstod
atof
atof_l
fstat
asctime
asctime_s
ctime
ctime32
atoflt_l
snwscanf_s
mkgmtime
mkgmtime32
wfindfirst64
btowc
unlink
strtoui64
ftell
isprint
splitpath_s
winput_s
swscanf_s
wfopen_s
rand_s
mbsnbcmp
mbsnbcmp_l
_CxxFrameHandler3
_CxxFrameHandler2
_CxxFrameHandler
CxxThrowException
_DestructExceptionObject
except_handler4_common
local_unwind4
wcstombs
ltoa
itoa
_RTDynamicCast
fgets
waccess_s
waccess
strdup
mbsdup
sprintf_s
vsprintf_s
wcsupr_s_l
wcsupr_s
CIexp
wcslwr_s_l
wcslwr_s
_crtLCMapStringW
ui64tow_s
aligned_free
CIsin
CIatan2
isalpha_l
iswprint
strncoll
strncoll_l
wprintf
mktime
mktime32
__lc_handle_func
_pctype_func
difftime
difftime32
pow
fputws
CIacos
wcsftime
exception::exception
fputs
rewind
fwprintf
cwait
pclose
wfdopen
wpopen
wcsnicoll_l
_crtCompareStringW
frexp
isspace_l
strerror
stati64
fstati64
open
signal
mbschr
mbschr_l
mbscmp
mbscmp_l
mbsnbcpy_s
tzset
mbsstr
mbsstr_l
ispunct
mbsspn
mbsspn_l
strspn
mbscspn
mbscspn_l
fmod
ftime32
ftime
ftime32_s
_set_new_handler
_set_new_mode
CItan
sqrt
cos
sin
atan2
fputwc
fgetwc
iswpunct
vwprintf
ecvt
ecvt_s
snwprintf
wremove
_unDName
CrtCheckMemory
CrtIsValidHeapPointer
wctime64
wasctime
wasctime_s
localtime64_s
gmtime64_s
sscanf_s
except_handler3
wcsncat_s
local_unwind2
XcptFilter
global_unwind2
asin
acos
exp
tan
log
atan
fpclass
wsplitpath
swprintf
swprintf
strtol
hypot
fabs
abs
labs
set_terminate
wchdir
chdrive
splitpath
getcwd
ismbcdigit
ismbcdigit_l
strnicoll
islower
islower_l
strlwr_s_l
atoi64
strtoi64
wstrdate
wstrdate_s
wstrtime
wstrtime_s
beginthread
endthread
iswlower
wmakepath_s
getdrive
snprintf
_crtGetStringTypeW
_uncaught_exception
type_info::operator==
type_info::name
wcstok_s
aligned_malloc
aligned_malloc_dbg
aligned_offset_malloc
time64
wcsrev
iswcntrl
inp
inpw
inpd
outp
outpw
outpd
abnormal_termination
except_handler2
seh_longjmp_unwind
seh_longjmp_unwind4
longjmpex
setjmp
memccpy
strnset
strrev
strset
strncat
CIasin
sinh
cosh
tanh
CIsinh
CIcosh
CItanh
log10
CIlog10
adj_fdiv_r
adj_fdiv_m32
adj_fdiv_m64
adj_fdiv_m16i
adj_fdiv_m32i
adj_fdivr_m32
adj_fdivr_m64
adj_fdivr_m16i
adj_fdivr_m32i
safe_fdiv
safe_fdivr
adj_fprem
adj_fprem1
safe_fprem
safe_fprem1
adj_fpatan
adj_fptan
ftol2_sse_excpt
_STRINGTOLD
isupper_l
isxdigit_l
isprint_l
isgraph_l
isgraph
iscntrl_l
_toascii
_iscsymf
_iscsym
atodbl_l
atodbl
atoldbl_l
atoldbl
atol_l
atoi_l
atoi64_l
chvalidator_l
isctype_l
isctype
chvalidator
fcvt_s
fcvt
gcvt_s
gcvt
ultoa
i64toa
ui64toa
ltoa_s
ultoa_s
i64toa_s
ui64toa_s
i64tow_s
iswalpha_l
iswupper_l
iswupper
iswlower_l
iswdigit_l
iswxdigit_l
iswspace_l
iswpunct_l
iswalnum_l
iswprint_l
iswgraph_l
iswgraph
iswcntrl_l
is_wctype
mblen_l
mblen
mbstowcs_l
mbstrlen_l
mbstrlen
mbstrnlen_l
mbstrnlen
strtod_l
strtod
strtoi64_l
strtoui64_l
strtol_l
strtoul_l
swab
toupper
wcstoi64_l
wcstoui64_l
wcstol_l
wcstoul_l
wcstombs_l
wctomb_l
wctomb
wtol_l
wtoi_l
wtoi64_l
mbrlen
mbrtowc
mbsrtowcs
mbsrtowcs_s
wcrtomb_s
wcrtomb
wcsrtombs
wcsrtombs_s
wctob
sleep
beep
findclose
findfirst
findnext
findfirst64
findnext64
findfirsti64
findnexti64
getdiskfree
getdrives
seterrormode
wfindfirst
wfindnext
wfindnext64
wfindfirsti64
wfindnexti64
get_environ
get_wenviron
_p__acmdln
_p__wcmdln
_p__amblksiz
_p___argc
_p___argv
_p___wargv
_p__wenviron
_p__fileinfo
_p___winitenv
_p__mbctype