chromium/chrome/test/delayload/supported_imports_10.0.10240.txt

# Output of dumpbin /exports *.dll for system dlls that Chrome imports.
# Consumed by generate_allowed_imports.py to build delayload_unittest.

Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file advapi32.dll

File Type: DLL

  Section contains the following exports for ADVAPI32.dll

    00000000 characteristics
    559F308F time date stamp Thu Jul  9 19:40:15 2015
        0.00 version
        1000 ordinal base
         850 number of functions
         849 number of names

    ordinal hint RVA      name

       1002    0          A_SHAFinal (forwarded to NTDLL.A_SHAFinal)
       1003    1          A_SHAInit (forwarded to NTDLL.A_SHAInit)
       1004    2          A_SHAUpdate (forwarded to NTDLL.A_SHAUpdate)
       1005    3 00045E70 AbortSystemShutdownA
       1006    4 00045EF0 AbortSystemShutdownW
       1007    5 00002690 AccessCheck
       1008    6 0002D250 AccessCheckAndAuditAlarmA
       1009    7 0002FD80 AccessCheckAndAuditAlarmW
       1010    8 00030080 AccessCheckByType
       1011    9 0002D3B0 AccessCheckByTypeAndAuditAlarmA
       1012    A 0002FDF0 AccessCheckByTypeAndAuditAlarmW
       1013    B 00030010 AccessCheckByTypeResultList
       1014    C 0002D540 AccessCheckByTypeResultListAndAuditAlarmA
       1015    D 0002D6D0 AccessCheckByTypeResultListAndAuditAlarmByHandleA
       1016    E 0002FEA0 AccessCheckByTypeResultListAndAuditAlarmByHandleW
       1017    F 0002FF60 AccessCheckByTypeResultListAndAuditAlarmW
       1018   10 000189A0 AddAccessAllowedAce
       1019   11 00018FB0 AddAccessAllowedAceEx
       1020   12 000300F0 AddAccessAllowedObjectAce
       1021   13 00030110 AddAccessDeniedAce
       1022   14 00030100 AddAccessDeniedAceEx
       1023   15 00030120 AddAccessDeniedObjectAce
       1024   16 0001B330 AddAce
       1025   17 00030140 AddAuditAccessAce
       1026   18 00030130 AddAuditAccessAceEx
       1027   19 00030150 AddAuditAccessObjectAce
       1028   1A 00049C50 AddConditionalAce
       1029   1B          AddMandatoryAce (forwarded to KERNELBASE.AddMandatoryAce)
       1030   1C 0002EF60 AddUsersToEncryptedFile
       1031   1D 0002EFE0 AddUsersToEncryptedFileEx
       1032   1E 00030160 AdjustTokenGroups
       1033   1F 000186C0 AdjustTokenPrivileges
       1034   20 000177B0 AllocateAndInitializeSid
       1035   21 00030170 AllocateLocallyUniqueId
       1036   22 00030180 AreAllAccessesGranted
       1037   23 00030190 AreAnyAccessesGranted
       1038   24 000301A0 AuditComputeEffectivePolicyBySid
       1039   25 00031C80 AuditComputeEffectivePolicyByToken
       1040   26 000301B0 AuditEnumerateCategories
       1041   27 000301C0 AuditEnumeratePerUserPolicy
       1042   28 000301D0 AuditEnumerateSubCategories
       1043   29 0001CA30 AuditFree
       1044   2A 00031DB0 AuditLookupCategoryGuidFromCategoryId
       1045   2B 00031DF0 AuditLookupCategoryIdFromCategoryGuid
       1046   2C 00031E60 AuditLookupCategoryNameA
       1047   2D 000301E0 AuditLookupCategoryNameW
       1048   2E 00031EF0 AuditLookupSubCategoryNameA
       1049   2F 000301F0 AuditLookupSubCategoryNameW
       1050   30 00031F80 AuditQueryGlobalSaclA
       1051   31 00030200 AuditQueryGlobalSaclW
       1052   32 00030210 AuditQueryPerUserPolicy
       1053   33 00030220 AuditQuerySecurity
       1054   34 0001CA20 AuditQuerySystemPolicy
       1055   35 00032040 AuditSetGlobalSaclA
       1056   36 00030230 AuditSetGlobalSaclW
       1057   37 00030240 AuditSetPerUserPolicy
       1058   38 00030250 AuditSetSecurity
       1059   39 00030260 AuditSetSystemPolicy
       1060   3A 0002C1B0 BackupEventLogA
       1061   3B 0002C220 BackupEventLogW
       1062   3C 00046380 BaseRegCloseKey
       1063   3D 000463A0 BaseRegCreateKey
       1064   3E 00046410 BaseRegDeleteKeyEx
       1065   3F 00046450 BaseRegDeleteValue
       1066   40 00046480 BaseRegFlushKey
       1067   41 000464A0 BaseRegGetVersion
       1068   42 000464D0 BaseRegLoadKey
       1069   43 00046500 BaseRegOpenKey
       1070   44 00046540 BaseRegRestoreKey
       1071   45 00046570 BaseRegSaveKeyEx
       1072   46 000465B0 BaseRegSetKeySecurity
       1073   47 000465E0 BaseRegSetValue
       1074   48 00046620 BaseRegUnLoadKey
       1075   49 0001C940 BuildExplicitAccessWithNameA
       1076   4A 0001C940 BuildExplicitAccessWithNameW
       1077   4B 0003D000 BuildImpersonateExplicitAccessWithNameA
       1078   4C 0003D000 BuildImpersonateExplicitAccessWithNameW
       1079   4D 0003DC30 BuildImpersonateTrusteeA
       1080   4E 0003DC30 BuildImpersonateTrusteeW
       1081   4F 0003D030 BuildSecurityDescriptorA
       1082   50 00017FB0 BuildSecurityDescriptorW
       1083   51 0001C970 BuildTrusteeWithNameA
       1084   52 0001C970 BuildTrusteeWithNameW
       1085   53 0003DC50 BuildTrusteeWithObjectsAndNameA
       1086   54 0003DC50 BuildTrusteeWithObjectsAndNameW
       1087   55 0003DCA0 BuildTrusteeWithObjectsAndSidA
       1088   56 0003DCA0 BuildTrusteeWithObjectsAndSidW
       1089   57 000191E0 BuildTrusteeWithSidA
       1090   58 000191E0 BuildTrusteeWithSidW
       1091   59 0003E3A0 CancelOverlappedAccess
       1092   5A 00030270 ChangeServiceConfig2A
       1093   5B 00030280 ChangeServiceConfig2W
       1094   5C 00030290 ChangeServiceConfigA
       1095   5D 0001C9B0 ChangeServiceConfigW
       1096   5E 0001BDE0 CheckForHiberboot
       1097   5F 000189B0 CheckTokenMembership
       1098   60 0002C550 ClearEventLogA
       1099   61 0002C5C0 ClearEventLogW
       1100   62 00016CC0 CloseCodeAuthzLevel
       1101   63 0002F080 CloseEncryptedFileRaw
       1102   64 0001C540 CloseEventLog
       1103   65 00018FA0 CloseServiceHandle
       1104   66 0005DFE0 CloseThreadWaitChainSession
       1105   67 00019250 CloseTrace
       1106   68 00001E20 CommandLineFromMsiDescriptor
       1107   69 00003BA0 ComputeAccessTokenFromCodeAuthzLevel
       1108   6A 0001DAE0 ControlService
       1109   6B 00030300 ControlServiceExA
       1110   6C 00030310 ControlServiceExW
       1111   6D 0001E6F0 ControlTraceA
       1112   6E 000192A0 ControlTraceW
       1113   6F 0003E420 ConvertAccessToSecurityDescriptorA
       1114   70 0003E5A0 ConvertAccessToSecurityDescriptorW
       1115   71 0004A3A0 ConvertSDToStringSDDomainW
       1116   72 0004A430 ConvertSDToStringSDRootDomainA
       1117   73 0004A580 ConvertSDToStringSDRootDomainW
       1118   74 0003E640 ConvertSecurityDescriptorToAccessA
       1119   75 0003E640 ConvertSecurityDescriptorToAccessNamedA
       1120   76 0003E680 ConvertSecurityDescriptorToAccessNamedW
       1121   77 0003E680 ConvertSecurityDescriptorToAccessW
       1122   78 0004A600 ConvertSecurityDescriptorToStringSecurityDescriptorA
       1123   79 0004A730 ConvertSecurityDescriptorToStringSecurityDescriptorW
       1124   7A 00016A30 ConvertSidToStringSidA
       1125   7B 00016B40 ConvertSidToStringSidW
       1126   7C 0004A7F0 ConvertStringSDToSDDomainA
       1127   7D 0001CF80 ConvertStringSDToSDDomainW
       1128   7E 0004A900 ConvertStringSDToSDRootDomainA
       1129   7F 0004A9B0 ConvertStringSDToSDRootDomainW
       1130   80 0001D610 ConvertStringSecurityDescriptorToSecurityDescriptorA
       1131   81 00010940 ConvertStringSecurityDescriptorToSecurityDescriptorW
       1132   82 0004AA20 ConvertStringSidToSidA
       1133   83 00011280 ConvertStringSidToSidW
       1134   84 00030320 ConvertToAutoInheritPrivateObjectSecurity
       1135   85 00017860 CopySid
       1136   86 00036DA0 CreateCodeAuthzLevel
       1137   87 0001B0A0 CreatePrivateObjectSecurity
       1138   88 00030330 CreatePrivateObjectSecurityEx
       1139   89 00030340 CreatePrivateObjectSecurityWithMultipleInheritance
       1140   8A 00030350 CreateProcessAsUserA
       1141   8B 00018E50 CreateProcessAsUserW
       1142   8C 00031A10 CreateProcessWithLogonW
       1143   8D 00002970 CreateProcessWithTokenW
       1144   8E 000303C0 CreateRestrictedToken
       1145   8F 000303D0 CreateServiceA
       1146   90 00030460 CreateServiceW
       1147   91          CreateTraceInstanceId (forwarded to ntdll.EtwCreateTraceInstanceId)
       1148   92 00019230 CreateWellKnownSid
       1149   93 000304F0 CredBackupCredentials
       1150   94 00030500 CredDeleteA
       1151   95 00030510 CredDeleteW
       1152   96 00030520 CredEncryptAndMarshalBinaryBlob
       1153   97 00030530 CredEnumerateA
       1154   98 00030540 CredEnumerateW
       1155   99 00030550 CredFindBestCredentialA
       1156   9A 00030560 CredFindBestCredentialW
       1157   9B 00030570 CredFree
       1158   9C 00030580 CredGetSessionTypes
       1159   9D 00030590 CredGetTargetInfoA
       1160   9E 000305A0 CredGetTargetInfoW
       1161   9F 000323B0 CredIsMarshaledCredentialA
       1162   A0 000305B0 CredIsMarshaledCredentialW
       1163   A1 000305C0 CredIsProtectedA
       1164   A2 000305D0 CredIsProtectedW
       1165   A3 000305E0 CredMarshalCredentialA
       1166   A4 000305F0 CredMarshalCredentialW
       1167   A5 00030610 CredProfileLoaded
       1168   A6 00030600 CredProfileLoadedEx
       1169   A7 00030620 CredProfileUnloaded
       1170   A8 00030630 CredProtectA
       1171   A9 00030640 CredProtectW
       1172   AA 00030650 CredReadA
       1173   AB 00030660 CredReadByTokenHandle
       1174   AC 00030670 CredReadDomainCredentialsA
       1175   AD 00030680 CredReadDomainCredentialsW
       1176   AE 00030690 CredReadW
       1177   AF 000323F0 CredRenameA
       1178   B0 000323F0 CredRenameW
       1179   B1 000306A0 CredRestoreCredentials
       1180   B2 000306B0 CredUnmarshalCredentialA
       1181   B3 000306C0 CredUnmarshalCredentialW
       1182   B4 000306D0 CredUnprotectA
       1183   B5 000306E0 CredUnprotectW
       1184   B6 000306F0 CredWriteA
       1185   B7 00030700 CredWriteDomainCredentialsA
       1186   B8 00030710 CredWriteDomainCredentialsW
       1187   B9 00030720 CredWriteW
       1188   BA 00030730 CredpConvertCredential
       1189   BB 00030740 CredpConvertOneCredentialSize
       1190   BC 00030750 CredpConvertTargetInfo
       1191   BD 00030760 CredpDecodeCredential
       1192   BE 00030770 CredpEncodeCredential
       1193   BF 00030780 CredpEncodeSecret
       1194   C0 00018E10 CryptAcquireContextA
       1195   C1 000189E0 CryptAcquireContextW
       1196   C2 00030790 CryptContextAddRef
       1197   C3 00017BF0 CryptCreateHash
       1198   C4 00019140 CryptDecrypt
       1199   C5 000307A0 CryptDeriveKey
       1200   C6 000186A0 CryptDestroyHash
       1201   C7 000186B0 CryptDestroyKey
       1202   C8 000307B0 CryptDuplicateHash
       1203   C9 000307C0 CryptDuplicateKey
       1204   CA 0001D7E0 CryptEncrypt
       1205   CB 000307D0 CryptEnumProviderTypesA
       1206   CC 000307E0 CryptEnumProviderTypesW
       1207   CD 000307F0 CryptEnumProvidersA
       1208   CE 00030800 CryptEnumProvidersW
       1209   CF 00017B50 CryptExportKey
       1210   D0 0001CAB0 CryptGenKey
       1211   D1 000190D0 CryptGenRandom
       1212   D2 00030810 CryptGetDefaultProviderA
       1213   D3 00019060 CryptGetDefaultProviderW
       1214   D4 00017970 CryptGetHashParam
       1215   D5 0001DAD0 CryptGetKeyParam
       1216   D6 00030820 CryptGetProvParam
       1217   D7 0001DB20 CryptGetUserKey
       1218   D8 00017D80 CryptHashData
       1219   D9 00030830 CryptHashSessionKey
       1220   DA 00017B40 CryptImportKey
       1221   DB 00018EE0 CryptReleaseContext
       1222   DC 00030840 CryptSetHashParam
       1223   DD 00030850 CryptSetKeyParam
       1224   DE 00030860 CryptSetProvParam
       1225   DF 00030870 CryptSetProviderA
       1226   E0 00030880 CryptSetProviderExA
       1227   E1 00030890 CryptSetProviderExW
       1228   E2 000308A0 CryptSetProviderW
       1229   E3 0001DA70 CryptSignHashA
       1230   E4 0001DAC0 CryptSignHashW
       1231   E5 0001DAA0 CryptVerifySignatureA
       1232   E6 00018EF0 CryptVerifySignatureW
       1233   E7 0002F0C0 DecryptFileA
       1234   E8 0002F170 DecryptFileW
       1235   E9 00018ED0 DeleteAce
       1236   EA 000308B0 DeleteService
       1237   EB 000198B0 DeregisterEventSource
       1238   EC 0001B0C0 DestroyPrivateObjectSecurity
       1239   ED 0002F200 DuplicateEncryptionInfoFile
       1240   EE 0001B090 DuplicateToken
       1241   EF 00018F80 DuplicateTokenEx
       1242   F0 00050760 ElfBackupEventLogFileA
       1243   F1 00050850 ElfBackupEventLogFileW
       1244   F2 00050940 ElfChangeNotify
       1245   F3 00050A40 ElfClearEventLogFileA
       1246   F4 00050B20 ElfClearEventLogFileW
       1247   F5 0001C570 ElfCloseEventLog
       1248   F6 000198E0 ElfDeregisterEventSource
       1249   F7 00050BF0 ElfFlushEventLog
       1250   F8 00050C60 ElfNumberOfRecords
       1251   F9 00050D40 ElfOldestRecord
       1252   FA 00050E20 ElfOpenBackupEventLogA
       1253   FB 00050F50 ElfOpenBackupEventLogW
       1254   FC 00051080 ElfOpenEventLogA
       1255   FD 0001C2B0 ElfOpenEventLogW
       1256   FE 00051290 ElfReadEventLogA
       1257   FF 000513F0 ElfReadEventLogW
       1258  100 000517B0 ElfRegisterEventSourceA
       1259  101 000199C0 ElfRegisterEventSourceW
       1260  102 00051900 ElfReportEventA
       1261  103 00051BB0 ElfReportEventAndSourceW
       1262  104 00019630 ElfReportEventW
       1263  105 0001C770 EnableTrace
       1264  106 000186D0 EnableTraceEx
       1265  107 00019160 EnableTraceEx2
       1266  108 0002F2B0 EncryptFileA
       1267  109 0002F350 EncryptFileW
       1268  10A 0002F3D0 EncryptedFileKeyInfo
       1269  10B 0002F460 EncryptionDisable
       1270  10C 00049040 EnumDependentServicesA
       1271  10D 000308C0 EnumDependentServicesW
       1272  10E 000308D0 EnumDynamicTimeZoneInformation
       1273  10F 000491E0 EnumServiceGroupW
       1274  110 00049490 EnumServicesStatusA
       1275  111 00019D00 EnumServicesStatusExA
       1276  112 00002620 EnumServicesStatusExW
       1277  113 000496D0 EnumServicesStatusW
       1278  114 0001A6E0 EnumerateTraceGuids
       1279  115 000308E0 EnumerateTraceGuidsEx
       1280  116 000308F0 EqualDomainSid
       1281  117 00030900 EqualPrefixSid
       1282  118 000190E0 EqualSid
       1283  119 00002860 EtwLogSysConfigExtension
       1284  11A 00030910 EventAccessControl
       1285  11B 00030920 EventAccessQuery
       1286  11C 00030930 EventAccessRemove
       1287  11D          EventActivityIdControl (forwarded to ntdll.EtwEventActivityIdControl)
       1288  11E          EventEnabled (forwarded to ntdll.EtwEventEnabled)
       1289  11F          EventProviderEnabled (forwarded to ntdll.EtwEventProviderEnabled)
       1290  120          EventRegister (forwarded to ntdll.EtwEventRegister)
       1291  121          EventSetInformation (forwarded to ntdll.EtwEventSetInformation)
       1292  122          EventUnregister (forwarded to ntdll.EtwEventUnregister)
       1293  123          EventWrite (forwarded to ntdll.EtwEventWrite)
       1294  124          EventWriteEndScenario (forwarded to ntdll.EtwEventWriteEndScenario)
       1295  125          EventWriteEx (forwarded to ntdll.EtwEventWriteEx)
       1296  126          EventWriteStartScenario (forwarded to ntdll.EtwEventWriteStartScenario)
       1297  127          EventWriteString (forwarded to ntdll.EtwEventWriteString)
       1298  128          EventWriteTransfer (forwarded to ntdll.EtwEventWriteTransfer)
       1299  129 0002F4C0 FileEncryptionStatusA
       1300  12A 0002F570 FileEncryptionStatusW
       1301  12B 00030940 FindFirstFreeAce
       1302  12C 0002F5D0 FlushEfsCache
       1303  12D 00041C20 FlushTraceA
       1304  12E 00041C40 FlushTraceW
       1305  12F 0002F670 FreeEncryptedFileKeyInfo
       1306  130 0001F930 FreeEncryptedFileMetadata
       1307  131 0002F6C0 FreeEncryptionCertificateHashList
       1308  132 0003D1A0 FreeInheritedFromArray
       1309  133 000189C0 FreeSid
       1310  134 0003E6C0 GetAccessPermissionsForObjectA
       1311  135 0003E9C0 GetAccessPermissionsForObjectW
       1312  136 00018EC0 GetAce
       1313  137 0001B980 GetAclInformation
       1314  138 0003D200 GetAuditedPermissionsFromAclA
       1315  139 0003D280 GetAuditedPermissionsFromAclW
       1316  13A 0002D010 GetCurrentHwProfileA
       1317  13B 00014840 GetCurrentHwProfileW
       1318  13C 00030950 GetDynamicTimeZoneInformationEffectiveYears
       1319  13D 0003D330 GetEffectiveRightsFromAclA
       1320  13E 0003D3A0 GetEffectiveRightsFromAclW
       1321  13F 00049030 GetEncryptedFileMetadata
       1322  140 0001C140 GetEventLogInformation
       1323  141 00030960 GetExplicitEntriesFromAclA
       1324  142 00030960 GetExplicitEntriesFromAclW
       1325  143 0002D870 GetFileSecurityA
       1326  144 00019130 GetFileSecurityW
       1327  145 000376E0 GetInformationCodeAuthzLevelW
       1328  146 00005B60 GetInformationCodeAuthzPolicyW
       1329  147 0003DB10 GetInheritanceSourceA
       1330  148 0003D450 GetInheritanceSourceW
       1331  149 0001BA40 GetKernelObjectSecurity
       1332  14A 00017840 GetLengthSid
       1333  14B 00001D10 GetLocalManagedApplicationData
       1334  14C 00035630 GetLocalManagedApplications
       1335  14D 000358F0 GetManagedApplicationCategories
       1336  14E 00035960 GetManagedApplications
       1337  14F 0003DD40 GetMultipleTrusteeA
       1338  150 0003DD20 GetMultipleTrusteeOperationA
       1339  151 0003DD20 GetMultipleTrusteeOperationW
       1340  152 0003DD40 GetMultipleTrusteeW
       1341  153 0003D520 GetNamedSecurityInfoA
       1342  154 0003EB00 GetNamedSecurityInfoExA
       1343  155 0003ED60 GetNamedSecurityInfoExW
       1344  156 0001B990 GetNamedSecurityInfoW
       1345  157 0002C730 GetNumberOfEventLogRecords
       1346  158 0002C760 GetOldestEventLogRecord
       1347  159 0003F030 GetOverlappedAccessResults
       1348  15A 00030970 GetPrivateObjectSecurity
       1349  15B 0001D7D0 GetSecurityDescriptorControl
       1350  15C 00018F00 GetSecurityDescriptorDacl
       1351  15D 0001DA90 GetSecurityDescriptorGroup
       1352  15E 00019260 GetSecurityDescriptorLength
       1353  15F 00019190 GetSecurityDescriptorOwner
       1354  160 00030980 GetSecurityDescriptorRMControl
       1355  161 0001CA90 GetSecurityDescriptorSacl
       1356  162 00018610 GetSecurityInfo
       1357  163 0003F150 GetSecurityInfoExA
       1358  164 0003F380 GetSecurityInfoExW
       1359  165 00049720 GetServiceDisplayNameA
       1360  166 00030990 GetServiceDisplayNameW
       1361  167 000497C0 GetServiceKeyNameA
       1362  168 000309A0 GetServiceKeyNameW
       1363  169 0001D600 GetSidIdentifierAuthority
       1364  16A 0001B950 GetSidLengthRequired
       1365  16B 00018FC0 GetSidSubAuthority
       1366  16C 00018F90 GetSidSubAuthorityCount
       1367  16D 00049EE0 GetStringConditionFromBinary
       1368  16E 0005E060 GetThreadWaitChain
       1369  16F 000172D0 GetTokenInformation
       1370  170          GetTraceEnableFlags (forwarded to ntdll.EtwGetTraceEnableFlags)
       1371  171          GetTraceEnableLevel (forwarded to ntdll.EtwGetTraceEnableLevel)
       1372  172          GetTraceLoggerHandle (forwarded to ntdll.EtwGetTraceLoggerHandle)
       1373  173 0003DD60 GetTrusteeFormA
       1374  174 0003DD60 GetTrusteeFormW
       1375  175 0003DD80 GetTrusteeNameA
       1376  176 0003DD80 GetTrusteeNameW
       1377  177 0003DD90 GetTrusteeTypeA
       1378  178 0003DD90 GetTrusteeTypeW
       1379  179 0002EC40 GetUserNameA
       1380  17A 0001DA40 GetUserNameW
       1381  17B 000309B0 GetWindowsAccountDomainSid
       1382  17C          I_QueryTagInformation (forwarded to api-ms-win-service-private-l1-1-0.I_QueryTagInformation)
       1001  17D 00049030 I_ScGetCurrentGroupStateW
       1383  17E          I_ScIsSecurityProcess (forwarded to api-ms-win-service-private-l1-1-0.I_ScIsSecurityProcess)
       1384  17F          I_ScPnPGetServiceName (forwarded to api-ms-win-service-private-l1-1-0.I_ScPnPGetServiceName)
       1385  180          I_ScQueryServiceConfig (forwarded to api-ms-win-service-private-l1-1-0.I_ScQueryServiceConfig)
       1386  181 0001E8F0 I_ScRegisterPreshutdownRestart
       1387  182          I_ScSendPnPMessage (forwarded to api-ms-win-service-private-l1-1-0.I_ScSendPnPMessage)
       1388  183          I_ScSendTSMessage (forwarded to api-ms-win-service-private-l1-1-0.I_ScSendTSMessage)
       1389  184 000309C0 I_ScSetServiceBitsA
       1390  185 000309D0 I_ScSetServiceBitsW
       1391  186          I_ScValidatePnPService (forwarded to api-ms-win-service-private-l1-1-0.I_ScValidatePnPService)
       1392  187 0000A7D0 IdentifyCodeAuthzLevelW
       1393  188 000309E0 ImpersonateAnonymousToken
       1394  189 000190A0 ImpersonateLoggedOnUser
       1395  18A 000309F0 ImpersonateNamedPipeClient
       1396  18B 00019300 ImpersonateSelf
       1397  18C 00018E20 InitializeAcl
       1398  18D 00018E40 InitializeSecurityDescriptor
       1399  18E 0001B960 InitializeSid
       1400  18F 00045F60 InitiateShutdownA
       1401  190 0001BC00 InitiateShutdownW
       1402  191 00046060 InitiateSystemShutdownA
       1403  192 00046170 InitiateSystemShutdownExA
       1404  193 00048C50 InitiateSystemShutdownExW
       1405  194 00046280 InitiateSystemShutdownW
       1406  195 00035970 InstallApplication
       1407  196 00016C80 IsTextUnicode
       1408  197 00030A00 IsTokenRestricted
       1409  198 00037480 IsTokenUntrusted
       1410  199 00030A10 IsValidAcl
       1411  19A          IsValidRelativeSecurityDescriptor (forwarded to KERNELBASE.IsValidRelativeSecurityDescriptor)
       1412  19B 00030A20 IsValidSecurityDescriptor
       1413  19C 00017870 IsValidSid
       1414  19D 0001DB70 IsWellKnownSid
       1415  19E 00049860 LockServiceDatabase
       1416  19F 0002ED60 LogonUserA
       1417  1A0 0002EF00 LogonUserExA
       1418  1A1 00030A30 LogonUserExExW
       1419  1A2 0001D910 LogonUserExW
       1420  1A3 00016D80 LogonUserW
       1421  1A4 0002D920 LookupAccountNameA
       1422  1A5 00017680 LookupAccountNameW
       1423  1A6 0002DD80 LookupAccountSidA
       1424  1A7 00017600 LookupAccountSidW
       1425  1A8 0002E2B0 LookupPrivilegeDisplayNameA
       1426  1A9 0002E450 LookupPrivilegeDisplayNameW
       1427  1AA 0002E5C0 LookupPrivilegeNameA
       1428  1AB 000187B0 LookupPrivilegeNameW
       1429  1AC 0002E720 LookupPrivilegeValueA
       1430  1AD 0000E920 LookupPrivilegeValueW
       1431  1AE 0003D5C0 LookupSecurityDescriptorPartsA
       1432  1AF 0003D840 LookupSecurityDescriptorPartsW
       1433  1B0 00030AA0 LsaAddAccountRights
       1434  1B1 00032410 LsaAddPrivilegesToAccount
       1435  1B2 00032490 LsaClearAuditLog
       1436  1B3 00019210 LsaClose
       1437  1B4 00032510 LsaCreateAccount
       1438  1B5 00030AB0 LsaCreateSecret
       1439  1B6 00032610 LsaCreateTrustedDomain
       1440  1B7 00033EA0 LsaCreateTrustedDomainEx
       1441  1B8 00030AC0 LsaDelete
       1442  1B9 00033FE0 LsaDeleteTrustedDomain
       1443  1BA 00030AD0 LsaEnumerateAccountRights
       1444  1BB 00032710 LsaEnumerateAccounts
       1445  1BC 00030AE0 LsaEnumerateAccountsWithUserRight
       1446  1BD 000327E0 LsaEnumeratePrivileges
       1447  1BE 000328B0 LsaEnumeratePrivilegesOfAccount
       1448  1BF 00032930 LsaEnumerateTrustedDomains
       1449  1C0 00034060 LsaEnumerateTrustedDomainsEx
       1450  1C1 00019080 LsaFreeMemory
       1451  1C2 00032A00 LsaGetAppliedCAPIDs
       1452  1C3 00032B40 LsaGetQuotasForAccount
       1453  1C4 00032BC0 LsaGetRemoteUserName
       1454  1C5 00032D90 LsaGetSystemAccessAccount
       1455  1C6 00011810 LsaGetUserName
       1456  1C7 00030AF0 LsaICLookupNames
       1457  1C8 00030B50 LsaICLookupNamesWithCreds
       1458  1C9 00030BD0 LsaICLookupSids
       1459  1CA 00030BE0 LsaICLookupSidsWithCreds
       1460  1CB 00032E10 LsaLookupNames
       1461  1CC 00030C60 LsaLookupNames2
       1462  1CD 00032F80 LsaLookupPrivilegeDisplayName
       1463  1CE 000188E0 LsaLookupPrivilegeName
       1464  1CF 0000EA00 LsaLookupPrivilegeValue
       1465  1D0 000191B0 LsaLookupSids
       1466  1D1 00030C70 LsaLookupSids2
       1467  1D2 0001D510 LsaManageSidNameMapping
       1468  1D3 00017270 LsaNtStatusToWinError
       1469  1D4 00033240 LsaOpenAccount
       1470  1D5 00019220 LsaOpenPolicy
       1471  1D6 00033340 LsaOpenPolicySce
       1472  1D7 00030C80 LsaOpenSecret
       1473  1D8 00033440 LsaOpenTrustedDomain
       1474  1D9 00034130 LsaOpenTrustedDomainByName
       1475  1DA 00033540 LsaQueryCAPs
       1476  1DB 00034230 LsaQueryDomainInformationPolicy
       1477  1DC 000342D0 LsaQueryForestTrustInformation
       1478  1DD 00033680 LsaQueryInfoTrustedDomain
       1479  1DE 00019240 LsaQueryInformationPolicy
       1480  1DF 00030C90 LsaQuerySecret
       1481  1E0 00033740 LsaQuerySecurityObject
       1482  1E1 00034360 LsaQueryTrustedDomainInfo
       1483  1E2 00034440 LsaQueryTrustedDomainInfoByName
       1484  1E3 00030CA0 LsaRemoveAccountRights
       1485  1E4 000337F0 LsaRemovePrivilegesFromAccount
       1486  1E5 00030CB0 LsaRetrievePrivateData
       1487  1E6 00033870 LsaSetCAPs
       1488  1E7 000344E0 LsaSetDomainInformationPolicy
       1489  1E8 00034570 LsaSetForestTrustInformation
       1490  1E9 00030CC0 LsaSetInformationPolicy
       1491  1EA 00033980 LsaSetInformationTrustedDomain
       1492  1EB 00033BD0 LsaSetQuotasForAccount
       1493  1EC 00030CD0 LsaSetSecret
       1494  1ED 00033C50 LsaSetSecurityObject
       1495  1EE 00033D80 LsaSetSystemAccessAccount
       1496  1EF 00034610 LsaSetTrustedDomainInfoByName
       1497  1F0 00034870 LsaSetTrustedDomainInformation
       1498  1F1 0001CC60 LsaStorePrivateData
       1499  1F2          MD4Final (forwarded to NTDLL.MD4Final)
       1500  1F3          MD4Init (forwarded to NTDLL.MD4Init)
       1501  1F4          MD4Update (forwarded to NTDLL.MD4Update)
       1502  1F5          MD5Final (forwarded to NTDLL.MD5Final)
       1503  1F6          MD5Init (forwarded to NTDLL.MD5Init)
       1504  1F7          MD5Update (forwarded to NTDLL.MD5Update)
       1505  1F8 000565D0 MIDL_user_free_Ext
       1506  1F9 000310D0 MSChapSrvChangePassword
       1507  1FA 000313D0 MSChapSrvChangePassword2
       1508  1FB 00018F10 MakeAbsoluteSD
       1509  1FC 00030D40 MakeAbsoluteSD2
       1510  1FD 00019320 MakeSelfRelativeSD
       1511  1FE 00030D50 MapGenericMask
       1512  1FF 0001C5F0 NotifyBootConfigStatus
       1513  200 0002C790 NotifyChangeEventLog
       1514  201 0001E8E0 NotifyServiceStatusChange
       1515  202 00030D60 NotifyServiceStatusChangeA
       1516  203 0001CAC0 NotifyServiceStatusChangeW
       1517  204 0002CF30 NpGetUserName
       1518  205 0002E7E0 ObjectCloseAuditAlarmA
       1519  206 00030D70 ObjectCloseAuditAlarmW
       1520  207 0002E860 ObjectDeleteAuditAlarmA
       1521  208 00030D80 ObjectDeleteAuditAlarmW
       1522  209 0002E8E0 ObjectOpenAuditAlarmA
       1523  20A 00030D90 ObjectOpenAuditAlarmW
       1524  20B 0002EA40 ObjectPrivilegeAuditAlarmA
       1525  20C 00030E10 ObjectPrivilegeAuditAlarmW
       1526  20D 0002C7C0 OpenBackupEventLogA
       1527  20E 0002C890 OpenBackupEventLogW
       1528  20F 0002F7F0 OpenEncryptedFileRawA
       1529  210 0002F8A0 OpenEncryptedFileRawW
       1530  211 0002CA10 OpenEventLogA
       1531  212 0001C170 OpenEventLogW
       1532  213 00017B00 OpenProcessToken
       1533  214 000192E0 OpenSCManagerA
       1534  215 000191A0 OpenSCManagerW
       1535  216 00030E20 OpenServiceA
       1536  217 00018FE0 OpenServiceW
       1537  218 00017EF0 OpenThreadToken
       1538  219 0005E230 OpenThreadWaitChainSession
       1539  21A 00041FE0 OpenTraceA
       1540  21B 00019280 OpenTraceW
       1541  21C 000316B0 OperationEnd
       1542  21D 00031790 OperationStart
       1543  21E 000161D0 PerfAddCounters
       1544  21F 00015890 PerfCloseQueryHandle
       1545  220          PerfCreateInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfCreateInstance)
       1546  221          PerfDecrementULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDecrementULongCounterValue)
       1547  222          PerfDecrementULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDecrementULongLongCounterValue)
       1548  223 00046690 PerfDeleteCounters
       1549  224          PerfDeleteInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfDeleteInstance)
       1550  225 00005590 PerfEnumerateCounterSet
       1551  226 000150C0 PerfEnumerateCounterSetInstances
       1552  227          PerfIncrementULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfIncrementULongCounterValue)
       1553  228          PerfIncrementULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfIncrementULongLongCounterValue)
       1554  229 00015940 PerfOpenQueryHandle
       1555  22A 000146A0 PerfQueryCounterData
       1556  22B 000160F0 PerfQueryCounterInfo
       1557  22C 00015190 PerfQueryCounterSetRegistrationInfo
       1558  22D          PerfQueryInstance (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfQueryInstance)
       1559  22E 0001B0D0 PerfRegCloseKey
       1560  22F 00051C80 PerfRegEnumKey
       1561  230 00051CE0 PerfRegEnumValue
       1562  231 0001B3D0 PerfRegQueryInfoKey
       1563  232 000109B0 PerfRegQueryValue
       1564  233 00051ED0 PerfRegSetValue
       1565  234          PerfSetCounterRefValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetCounterRefValue)
       1566  235          PerfSetCounterSetInfo (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetCounterSetInfo)
       1567  236          PerfSetULongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetULongCounterValue)
       1568  237          PerfSetULongLongCounterValue (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfSetULongLongCounterValue)
       1569  238          PerfStartProvider (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStartProvider)
       1570  239          PerfStartProviderEx (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStartProviderEx)
       1571  23A          PerfStopProvider (forwarded to api-ms-win-core-perfcounters-l1-1-0.PerfStopProvider)
       1572  23B 00030E30 PrivilegeCheck
       1573  23C 0002EAE0 PrivilegedServiceAuditAlarmA
       1574  23D 00030E40 PrivilegedServiceAuditAlarmW
       1575  23E 00031B60 ProcessIdleTasks
       1576  23F 00031BF0 ProcessIdleTasksW
       1577  240 00019270 ProcessTrace
       1578  241 0001E700 QueryAllTracesA
       1579  242 00002930 QueryAllTracesW
       1580  243 0002F920 QueryRecoveryAgentsOnEncryptedFile
       1581  244 00030E50 QuerySecurityAccessMask
       1582  245 00030E60 QueryServiceConfig2A
       1583  246 0001DB30 QueryServiceConfig2W
       1584  247 00030E70 QueryServiceConfigA
       1585  248 00019050 QueryServiceConfigW
       1586  249 00030E80 QueryServiceDynamicInformation
       1587  24A 000498E0 QueryServiceLockStatusA
       1588  24B 00049A50 QueryServiceLockStatusW
       1589  24C 00030E90 QueryServiceObjectSecurity
       1590  24D 0001BA90 QueryServiceStatus
       1591  24E 0001CAA0 QueryServiceStatusEx
       1592  24F 00041C60 QueryTraceA
       1593  250 000192B0 QueryTraceW
       1594  251 0002F9A0 QueryUsersOnEncryptedFile
       1595  252 0002FA20 ReadEncryptedFileRaw
       1596  253 0002CA80 ReadEventLogA
       1597  254 0002CB10 ReadEventLogW
       1598  255 000172E0 RegCloseKey
       1599  256 00046AB0 RegConnectRegistryA
       1600  257 00046AD0 RegConnectRegistryExA
       1601  258 0001C670 RegConnectRegistryExW
       1602  259 0001C650 RegConnectRegistryW
       1603  25A 00046D40 RegCopyTreeA
       1604  25B 00030EA0 RegCopyTreeW
       1605  25C 00046DC0 RegCreateKeyA
       1606  25D 00019070 RegCreateKeyExA
       1607  25E 000175F0 RegCreateKeyExW
       1608  25F 00046E40 RegCreateKeyTransactedA
       1609  260 0001B340 RegCreateKeyTransactedW
       1610  261 00018FF0 RegCreateKeyW
       1611  262 00002580 RegDeleteKeyA
       1612  263 00030EB0 RegDeleteKeyExA
       1613  264 0001D440 RegDeleteKeyExW
       1614  265 00047000 RegDeleteKeyTransactedA
       1615  266 0001AFE0 RegDeleteKeyTransactedW
       1616  267 00030EC0 RegDeleteKeyValueA
       1617  268 00030ED0 RegDeleteKeyValueW
       1618  269 00017F00 RegDeleteKeyW
       1619  26A 00030EE0 RegDeleteTreeA
       1620  26B 0001DB60 RegDeleteTreeW
       1621  26C 00002960 RegDeleteValueA
       1622  26D 000190B0 RegDeleteValueW
       1623  26E 00019100 RegDisablePredefinedCache
       1624  26F 00030EF0 RegDisablePredefinedCacheEx
       1625  270 0001F960 RegDisableReflectionKey
       1626  271 0001F960 RegEnableReflectionKey
       1627  272 0001D780 RegEnumKeyA
       1628  273 000025D0 RegEnumKeyExA
       1629  274 00017180 RegEnumKeyExW
       1630  275 00017280 RegEnumKeyW
       1631  276 00030F00 RegEnumValueA
       1632  277 00017220 RegEnumValueW
       1633  278 0001BA30 RegFlushKey
       1634  279 00019200 RegGetKeySecurity
       1635  27A 00030F50 RegGetValueA
       1636  27B 00017D90 RegGetValueW
       1637  27C 00030F60 RegLoadAppKeyA
       1638  27D 0001DB80 RegLoadAppKeyW
       1639  27E 00030F70 RegLoadKeyA
       1640  27F 00030F80 RegLoadKeyW
       1641  280 00030F90 RegLoadMUIStringA
       1642  281 00030FA0 RegLoadMUIStringW
       1643  282 00018FD0 RegNotifyChangeKeyValue
       1644  283 00019150 RegOpenCurrentUser
       1645  284 0001B9E0 RegOpenKeyA
       1646  285 00017D70 RegOpenKeyExA
       1647  286 00016CB0 RegOpenKeyExW
       1648  287 00046ED0 RegOpenKeyTransactedA
       1649  288 0001B7E0 RegOpenKeyTransactedW
       1650  289 00017AB0 RegOpenKeyW
       1651  28A 00030FB0 RegOpenUserClassesRoot
       1652  28B 00046F10 RegOverridePredefKey
       1653  28C 000028B0 RegQueryInfoKeyA
       1654  28D 000177C0 RegQueryInfoKeyW
       1655  28E 000473E0 RegQueryMultipleValuesA
       1656  28F 00047A70 RegQueryMultipleValuesW
       1657  290 000316A0 RegQueryReflectionKey
       1658  291 00048180 RegQueryValueA
       1659  292 00017DD0 RegQueryValueExA
       1660  293 00016C70 RegQueryValueExW
       1661  294 00017980 RegQueryValueW
       1662  295 00046F80 RegRenameKey
       1663  296 00048440 RegReplaceKeyA
       1664  297 00048D80 RegReplaceKeyW
       1665  298 00030FC0 RegRestoreKeyA
       1666  299 00030FD0 RegRestoreKeyW
       1667  29A 00048670 RegSaveKeyA
       1668  29B 00030FE0 RegSaveKeyExA
       1669  29C 00030FF0 RegSaveKeyExW
       1670  29D 00048820 RegSaveKeyW
       1671  29E 0001DA80 RegSetKeySecurity
       1672  29F 00031000 RegSetKeyValueA
       1673  2A0 0001B080 RegSetKeyValueW
       1674  2A1 000489A0 RegSetValueA
       1675  2A2 00002680 RegSetValueExA
       1676  2A3 00017850 RegSetValueExW
       1677  2A4 00048AF0 RegSetValueW
       1678  2A5 00031010 RegUnLoadKeyA
       1679  2A6 00031020 RegUnLoadKeyW
       1680  2A7 0002CB90 RegisterEventSourceA
       1681  2A8 00019960 RegisterEventSourceW
       1682  2A9 0001B820 RegisterIdleTask
       1683  2AA 0001DB50 RegisterServiceCtrlHandlerA
       1684  2AB 00031030 RegisterServiceCtrlHandlerExA
       1685  2AC 000192C0 RegisterServiceCtrlHandlerExW
       1686  2AD 00019310 RegisterServiceCtrlHandlerW
       1687  2AE          RegisterTraceGuidsA (forwarded to ntdll.EtwRegisterTraceGuidsA)
       1688  2AF          RegisterTraceGuidsW (forwarded to ntdll.EtwRegisterTraceGuidsW)
       1689  2B0 0005E330 RegisterWaitChainCOMCallback
       1690  2B1 00047040 RemoteRegEnumKeyWrapper
       1691  2B2 000471A0 RemoteRegEnumValueWrapper
       1692  2B3 000472C0 RemoteRegQueryInfoKeyWrapper
       1693  2B4 000483B0 RemoteRegQueryValueWrapper
       1694  2B5          RemoveTraceCallback (forwarded to sechost.RemoveTraceCallback)
       1695  2B6 0002FA80 RemoveUsersFromEncryptedFile
       1696  2B7 0002CBF0 ReportEventA
       1697  2B8 000193F0 ReportEventW
       1698  2B9 000189D0 RevertToSelf
       1699  2BA 00046650 SafeBaseRegGetKeySecurity
       1700  2BB 00016CC0 SaferCloseLevel
       1701  2BC 00003BA0 SaferComputeTokenFromLevel
       1702  2BD 00036DA0 SaferCreateLevel
       1703  2BE 000376E0 SaferGetLevelInformation
       1704  2BF 00005B60 SaferGetPolicyInformation
       1705  2C0 0000A7D0 SaferIdentifyLevel
       1706  2C1 00038FA0 SaferRecordEventLogEntry
       1707  2C2 00039650 SaferSetLevelInformation
       1708  2C3 000381B0 SaferSetPolicyInformation
       1709  2C4 0003A810 SaferiChangeRegistryScope
       1710  2C5 00004280 SaferiCompareTokenLevels
       1711  2C6 000387E0 SaferiIsDllAllowed
       1712  2C7 0003AF00 SaferiIsExecutableFileType
       1713  2C8 0003A840 SaferiPopulateDefaultsInRegistry
       1714  2C9 00038FA0 SaferiRecordEventLogEntry
       1715  2CA 00017B60 SaferiSearchMatchingHashRules
       1716  2CB 00031040 SetAclInformation
       1717  2CC 00049030 SetEncryptedFileMetadata
       1718  2CD 0003F660 SetEntriesInAccessListA
       1719  2CE 0003F6B0 SetEntriesInAccessListW
       1720  2CF 0001D7F0 SetEntriesInAclA
       1721  2D0 00019170 SetEntriesInAclW
       1722  2D1 0003F700 SetEntriesInAuditListA
       1723  2D2 0003F740 SetEntriesInAuditListW
       1724  2D3 0002EBB0 SetFileSecurityA
       1725  2D4 000192F0 SetFileSecurityW
       1726  2D5 00039650 SetInformationCodeAuthzLevelW
       1727  2D6 000381B0 SetInformationCodeAuthzPolicyW
       1728  2D7 0001BA80 SetKernelObjectSecurity
       1729  2D8 0003DA80 SetNamedSecurityInfoA
       1730  2D9 0003F780 SetNamedSecurityInfoExA
       1731  2DA 0003FBB0 SetNamedSecurityInfoExW
       1732  2DB 0001B970 SetNamedSecurityInfoW
       1733  2DC 00031060 SetPrivateObjectSecurity
       1734  2DD 00031050 SetPrivateObjectSecurityEx
       1735  2DE 00031070 SetSecurityAccessMask
       1736  2DF 0001DAB0 SetSecurityDescriptorControl
       1737  2E0 00018E30 SetSecurityDescriptorDacl
       1738  2E1 0001BA70 SetSecurityDescriptorGroup
       1739  2E2 000190F0 SetSecurityDescriptorOwner
       1740  2E3 00031080 SetSecurityDescriptorRMControl
       1741  2E4 0001B0B0 SetSecurityDescriptorSacl
       1742  2E5 00018970 SetSecurityInfo
       1743  2E6 0003FEE0 SetSecurityInfoExA
       1744  2E7 000402C0 SetSecurityInfoExW
       1745  2E8 0001DAF0 SetServiceBits
       1746  2E9 00031090 SetServiceObjectSecurity
       1747  2EA 000190C0 SetServiceStatus
       1748  2EB 00002940 SetThreadToken
       1749  2EC 00019290 SetTokenInformation
       1750  2ED          SetTraceCallback (forwarded to sechost.SetTraceCallback)
       1751  2EE 0002FB00 SetUserFileEncryptionKey
       1752  2EF 0002FB60 SetUserFileEncryptionKeyEx
       1753  2F0 000310A0 StartServiceA
       1754  2F1 0001DB40 StartServiceCtrlDispatcherA
       1755  2F2 00019180 StartServiceCtrlDispatcherW
       1756  2F3 0001BDD0 StartServiceW
       1757  2F4 0001E710 StartTraceA
       1758  2F5 000192D0 StartTraceW
       1759  2F6 00041C70 StopTraceA
       1760  2F7 00002950 StopTraceW
       1761  2F8          SystemFunction001 (forwarded to CRYPTBASE.SystemFunction001)
       1762  2F9          SystemFunction002 (forwarded to CRYPTBASE.SystemFunction002)
       1763  2FA          SystemFunction003 (forwarded to CRYPTBASE.SystemFunction003)
       1764  2FB          SystemFunction004 (forwarded to CRYPTBASE.SystemFunction004)
       1765  2FC          SystemFunction005 (forwarded to CRYPTBASE.SystemFunction005)
       1766  2FD          SystemFunction006 (forwarded to CRYPTSP.SystemFunction006)
       1767  2FE          SystemFunction007 (forwarded to CRYPTSP.SystemFunction007)
       1768  2FF          SystemFunction008 (forwarded to CRYPTSP.SystemFunction008)
       1769  300          SystemFunction009 (forwarded to CRYPTSP.SystemFunction009)
       1770  301          SystemFunction010 (forwarded to CRYPTSP.SystemFunction010)
       1771  302          SystemFunction011 (forwarded to CRYPTSP.SystemFunction011)
       1772  303          SystemFunction012 (forwarded to CRYPTSP.SystemFunction012)
       1773  304          SystemFunction013 (forwarded to CRYPTSP.SystemFunction013)
       1774  305          SystemFunction014 (forwarded to CRYPTSP.SystemFunction014)
       1775  306          SystemFunction015 (forwarded to CRYPTSP.SystemFunction015)
       1776  307          SystemFunction016 (forwarded to CRYPTSP.SystemFunction016)
       1777  308 00031C20 SystemFunction017
       1778  309          SystemFunction018 (forwarded to CRYPTSP.SystemFunction018)
       1779  30A 00031C70 SystemFunction019
       1780  30B          SystemFunction020 (forwarded to CRYPTSP.SystemFunction020)
       1781  30C          SystemFunction021 (forwarded to CRYPTSP.SystemFunction021)
       1782  30D          SystemFunction022 (forwarded to CRYPTSP.SystemFunction022)
       1783  30E          SystemFunction023 (forwarded to CRYPTSP.SystemFunction023)
       1784  30F          SystemFunction024 (forwarded to CRYPTSP.SystemFunction024)
       1785  310          SystemFunction025 (forwarded to CRYPTSP.SystemFunction025)
       1786  311          SystemFunction026 (forwarded to CRYPTSP.SystemFunction026)
       1787  312          SystemFunction027 (forwarded to CRYPTSP.SystemFunction027)
       1788  313          SystemFunction028 (forwarded to CRYPTBASE.SystemFunction028)
       1789  314          SystemFunction029 (forwarded to CRYPTBASE.SystemFunction029)
       1790  315          SystemFunction030 (forwarded to CRYPTSP.SystemFunction030)
       1791  316          SystemFunction031 (forwarded to CRYPTSP.SystemFunction031)
       1792  317          SystemFunction032 (forwarded to CRYPTSP.SystemFunction032)
       1793  318          SystemFunction033 (forwarded to CRYPTSP.SystemFunction033)
       1794  319          SystemFunction034 (forwarded to CRYPTBASE.SystemFunction034)
       1795  31A          SystemFunction035 (forwarded to CRYPTSP.CheckSignatureInFile)
       1796  31B          SystemFunction036 (forwarded to CRYPTBASE.SystemFunction036)
       1797  31C          SystemFunction040 (forwarded to CRYPTBASE.SystemFunction040)
       1798  31D          SystemFunction041 (forwarded to CRYPTBASE.SystemFunction041)
       1799  31E          TraceEvent (forwarded to ntdll.EtwLogTraceEvent)
       1800  31F          TraceEventInstance (forwarded to ntdll.EtwTraceEventInstance)
       1801  320          TraceMessage (forwarded to ntdll.EtwTraceMessage)
       1802  321          TraceMessageVa (forwarded to ntdll.EtwTraceMessageVa)
       1803  322          TraceQueryInformation (forwarded to api-ms-win-eventing-controller-l1-1-0.TraceQueryInformation)
       1804  323 000310B0 TraceSetInformation
       1805  324 0003DB10 TreeResetNamedSecurityInfoA
       1806  325 000026E0 TreeResetNamedSecurityInfoW
       1807  326 0003DB10 TreeSetNamedSecurityInfoA
       1808  327 0003DB20 TreeSetNamedSecurityInfoW
       1809  328 000405F0 TrusteeAccessToObjectA
       1810  329 00040840 TrusteeAccessToObjectW
       1811  32A 00035980 UninstallApplication
       1812  32B 00049BD0 UnlockServiceDatabase
       1813  32C 00031C00 UnregisterIdleTask
       1814  32D          UnregisterTraceGuids (forwarded to ntdll.EtwUnregisterTraceGuids)
       1815  32E 00041C90 UpdateTraceA
       1816  32F 00041CB0 UpdateTraceW
       1817  330 0002FBF0 UsePinForEncryptedFilesA
       1818  331 0002FC80 UsePinForEncryptedFilesW
       1819  332 000310C0 WaitServiceState
       1820  333 0001B020 WmiCloseBlock
       1821  334 00056AB0 WmiDevInstToInstanceNameA
       1822  335 00056B90 WmiDevInstToInstanceNameW
       1823  336 00056C70 WmiEnumerateGuids
       1824  337 00056E20 WmiExecuteMethodA
       1825  338 00056F10 WmiExecuteMethodW
       1826  339 00057250 WmiFileHandleToInstanceNameA
       1827  33A 000574A0 WmiFileHandleToInstanceNameW
       1828  33B 00057680 WmiFreeBuffer
       1829  33C 00058AE0 WmiMofEnumerateResourcesA
       1830  33D 00058D00 WmiMofEnumerateResourcesW
       1831  33E 000576C0 WmiNotificationRegistrationA
       1832  33F 00057740 WmiNotificationRegistrationW
       1833  340 0001A870 WmiOpenBlock
       1834  341 000577C0 WmiQueryAllDataA
       1835  342 00057830 WmiQueryAllDataMultipleA
       1836  343 000578B0 WmiQueryAllDataMultipleW
       1837  344 00057AB0 WmiQueryAllDataW
       1838  345 00057CF0 WmiQueryGuidInformation
       1839  346 00057D90 WmiQuerySingleInstanceA
       1840  347 00057E60 WmiQuerySingleInstanceMultipleA
       1841  348 00057FF0 WmiQuerySingleInstanceMultipleW
       1842  349 0001AA00 WmiQuerySingleInstanceW
       1843  34A 00058220 WmiReceiveNotificationsA
       1844  34B 00058290 WmiReceiveNotificationsW
       1845  34C 00058300 WmiSetSingleInstanceA
       1846  34D 000583C0 WmiSetSingleInstanceW
       1847  34E 00058580 WmiSetSingleItemA
       1848  34F 00058650 WmiSetSingleItemW
       1849  350 0002FD20 WriteEncryptedFileRaw
       1000      00038950 [NONAME]

  Summary

        5000 .data
        1000 .didat
        5000 .pdata
       34000 .rdata
        2000 .reloc
        1000 .rsrc
       63000 .text

Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file bcrypt.dll

File Type: DLL

  Section contains the following exports for bcrypt.dll

    00000000 characteristics
    559F3035 time date stamp Thu Jul  9 19:38:45 2015
        0.00 version
           1 ordinal base
          58 number of functions
          58 number of names

    ordinal hint RVA      name

          1    0 000183C0 BCryptAddContextFunction
          2    1 00018590 BCryptAddContextFunctionProvider
          3    2 00003810 BCryptCloseAlgorithmProvider
          4    3 00018780 BCryptConfigureContext
          5    4 00018920 BCryptConfigureContextFunction
          6    5 00018AE0 BCryptCreateContext
          7    6 00003F60 BCryptCreateHash
          8    7 00011B00 BCryptCreateMultiHash
          9    8 00006070 BCryptDecrypt
         10    9 00018C80 BCryptDeleteContext
         11    A 00006A70 BCryptDeriveKey
         12    B 00002B00 BCryptDeriveKeyCapi
         13    C 000031B0 BCryptDeriveKeyPBKDF2
         14    D 00004780 BCryptDestroyHash
         15    E 00006560 BCryptDestroyKey
         16    F 00006990 BCryptDestroySecret
         17   10 00001A60 BCryptDuplicateHash
         18   11 00001010 BCryptDuplicateKey
         19   12 00006D30 BCryptEncrypt
         20   13 00011D60 BCryptEnumAlgorithms
         21   14 0000AC90 BCryptEnumContextFunctionProviders
         22   15 0000AAB0 BCryptEnumContextFunctions
         23   16 00018E10 BCryptEnumContexts
         24   17 00012190 BCryptEnumProviders
         25   18 00018F70 BCryptEnumRegisteredProviders
         26   19 00002550 BCryptExportKey
         27   1A 000068F0 BCryptFinalizeKeyPair
         28   1B 00004860 BCryptFinishHash
         29   1C 00005ED0 BCryptFreeBuffer
         30   1D 00003620 BCryptGenRandom
         31   1E 00002220 BCryptGenerateKeyPair
         32   1F 000038B0 BCryptGenerateSymmetricKey
         33   20 00006270 BCryptGetFipsAlgorithmMode
         34   21 00004270 BCryptGetProperty
         35   22 00012530 BCryptHash
         36   23 000046E0 BCryptHashData
         37   24 00001FA0 BCryptImportKey
         38   25 00002F00 BCryptImportKeyPair
         39   26 000066E0 BCryptKeyDerivation
         40   27 00004A00 BCryptOpenAlgorithmProvider
         41   28 000125D0 BCryptProcessMultiOperations
         42   29 00019040 BCryptQueryContextConfiguration
         43   2A 00019220 BCryptQueryContextFunctionConfiguration
         44   2B 00019460 BCryptQueryContextFunctionProperty
         45   2C 0000AED0 BCryptQueryProviderRegistration
         46   2D 0000B420 BCryptRegisterConfigChangeNotify
         47   2E 000196C0 BCryptRegisterProvider
         48   2F 000198C0 BCryptRemoveContextFunction
         49   30 00019A80 BCryptRemoveContextFunctionProvider
         50   31 00005520 BCryptResolveProviders
         51   32 000067D0 BCryptSecretAgreement
         52   33 0000B600 BCryptSetAuditingInterface
         53   34 00019C50 BCryptSetContextFunctionProperty
         54   35 00003700 BCryptSetProperty
         55   36 0000B6E0 BCryptSignHash
         56   37 00019E60 BCryptUnregisterConfigChangeNotify
         57   38 00019F60 BCryptUnregisterProvider
         58   39 00005F20 BCryptVerifySignature

Dump of file bcryptprimitives.dll

File Type: DLL

  Section contains the following exports for bcryptPrimitives.dll

    00000000 characteristics
    559F301F time date stamp Thu Jul  9 19:38:23 2015
        0.00 version
           1 ordinal base
           9 number of functions
           9 number of names

    ordinal hint RVA      name

          1    0 00020780 GetAsymmetricEncryptionInterface
          2    1 00016D20 GetCipherInterface
          3    2 00020B90 GetHashInterface
          4    3 00001F30 GetKeyDerivationInterface
          5    4 00021940 GetRngInterface
          6    5 000219C0 GetSecretAgreementInterface
          7    6 00001E60 GetSignatureInterface
          8    7 0001B980 ProcessPrng
          9    8 00036400 ProcessPrngGuid

  Summary

        2000 .data
        5000 .pdata
       18000 .rdata
        2000 .reloc
        2000 .rsrc
       6E000 .text

Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file cfgmgr32.dll

File Type: DLL

  Section contains the following exports for CFGMGR32.dll

    00000000 characteristics
    559F2B9C time date stamp Thu Jul  9 19:19:08 2015
        0.00 version
           1 ordinal base
         276 number of functions
         276 number of names

    ordinal hint RVA      name

          1    0 0001D320 CMP_GetBlockedDriverInfo
          2    1 0001D390 CMP_GetServerSideDeviceInstallFlags
          3    2 0001D400 CMP_Init_Detection
          4    3 0001D990 CMP_RegisterServiceNotification
          5    4 00002F00 CMP_Register_Notification
          6    5 0001D420 CMP_Report_LogOn
          7    6 0000E840 CMP_WaitNoPendingInstallEvents
          8    7 0001D440 CMP_WaitServicesAvailable
          9    8 0001D9A0 CM_Add_Driver_PackageW
         10    9 0001DAE0 CM_Add_Driver_Package_ExW
         11    A 0001DE10 CM_Add_Empty_Log_Conf
         12    B 0001DF60 CM_Add_Empty_Log_Conf_Ex
         13    C 0001E5F0 CM_Add_IDA
         14    D 0001E600 CM_Add_IDW
         15    E 0001E700 CM_Add_ID_ExA
         16    F 0001E780 CM_Add_ID_ExW
         17   10 0001F730 CM_Add_Range
         18   11 00020BF0 CM_Add_Res_Des
         19   12 00020E90 CM_Add_Res_Des_Ex
         20   13 0001EE50 CM_Apply_PowerScheme
         21   14 0001D460 CM_Connect_MachineA
         22   15 0001D4D0 CM_Connect_MachineW
         23   16 0001E7A0 CM_Create_DevNodeA
         24   17 0001E7C0 CM_Create_DevNodeW
         25   18 0001E9A0 CM_Create_DevNode_ExA
         26   19 0001EA30 CM_Create_DevNode_ExW
         27   1A 0001F840 CM_Create_Range_List
         28   1B 00021E40 CM_Delete_Class_Key
         29   1C 00021EB0 CM_Delete_Class_Key_Ex
         30   1D 00021ED0 CM_Delete_DevNode_Key
         31   1E 00021FD0 CM_Delete_DevNode_Key_Ex
         32   1F 00021FF0 CM_Delete_Device_Interface_KeyA
         33   20 00022000 CM_Delete_Device_Interface_KeyW
         34   21 00022060 CM_Delete_Device_Interface_Key_ExA
         35   22 000220D0 CM_Delete_Device_Interface_Key_ExW
         36   23 0001DC00 CM_Delete_Driver_PackageW
         37   24 0001DD00 CM_Delete_Driver_Package_ExW
         38   25 0001EE50 CM_Delete_PowerScheme
         39   26 0001F930 CM_Delete_Range
         40   27 00020EC0 CM_Detect_Resource_Conflict
         41   28 00020EF0 CM_Detect_Resource_Conflict_Ex
         42   29 0001EA60 CM_Disable_DevNode
         43   2A 0001EB90 CM_Disable_DevNode_Ex
         44   2B 0001D550 CM_Disconnect_Machine
         45   2C 0001FB10 CM_Dup_Range_List
         46   2D 0001EE50 CM_Duplicate_PowerScheme
         47   2E 0001EBB0 CM_Enable_DevNode
         48   2F 0001ECD0 CM_Enable_DevNode_Ex
         49   30 000220F0 CM_Enumerate_Classes
         50   31 00022160 CM_Enumerate_Classes_Ex
         51   32 00023E10 CM_Enumerate_EnumeratorsA
         52   33 00023E30 CM_Enumerate_EnumeratorsW
         53   34 00023EA0 CM_Enumerate_Enumerators_ExA
         54   35 00023F40 CM_Enumerate_Enumerators_ExW
         55   36 0001FC50 CM_Find_Range
         56   37 0001FE50 CM_First_Range
         57   38 0001DF90 CM_Free_Log_Conf
         58   39 0001E0E0 CM_Free_Log_Conf_Ex
         59   3A 0001E100 CM_Free_Log_Conf_Handle
         60   3B 0001FF70 CM_Free_Range_List
         61   3C 000210D0 CM_Free_Res_Des
         62   3D 00021290 CM_Free_Res_Des_Ex
         63   3E 000212B0 CM_Free_Res_Des_Handle
         64   3F 00024370 CM_Free_Resource_Conflict_Handle
         65   40 0000B840 CM_Get_Child
         66   41 00023F70 CM_Get_Child_Ex
         67   42 00022180 CM_Get_Class_Key_NameA
         68   43 000221A0 CM_Get_Class_Key_NameW
         69   44 00022250 CM_Get_Class_Key_Name_ExA
         70   45 000222F0 CM_Get_Class_Key_Name_ExW
         71   46 00022300 CM_Get_Class_NameA
         72   47 00022320 CM_Get_Class_NameW
         73   48 00022440 CM_Get_Class_Name_ExA
         74   49 000224F0 CM_Get_Class_Name_ExW
         75   4A 00005490 CM_Get_Class_PropertyW
         76   4B 00004CB0 CM_Get_Class_Property_ExW
         77   4C 00024CF0 CM_Get_Class_Property_Keys
         78   4D 00024DD0 CM_Get_Class_Property_Keys_Ex
         79   4E 00022520 CM_Get_Class_Registry_PropertyA
         80   4F 000226A0 CM_Get_Class_Registry_PropertyW
         81   50 00012750 CM_Get_Depth
         82   51 00023F90 CM_Get_Depth_Ex
         83   52 000229C0 CM_Get_DevNode_Custom_PropertyA
         84   53 00005620 CM_Get_DevNode_Custom_PropertyW
         85   54 00001010 CM_Get_DevNode_Custom_Property_ExA
         86   55 000012A0 CM_Get_DevNode_Custom_Property_ExW
         87   56 00007060 CM_Get_DevNode_PropertyW
         88   57 00007040 CM_Get_DevNode_Property_ExW
         89   58 00024E00 CM_Get_DevNode_Property_Keys
         90   59 00024F20 CM_Get_DevNode_Property_Keys_Ex
         91   5A 000229F0 CM_Get_DevNode_Registry_PropertyA
         92   5B 00007910 CM_Get_DevNode_Registry_PropertyW
         93   5C 00022A20 CM_Get_DevNode_Registry_Property_ExA
         94   5D 00006340 CM_Get_DevNode_Registry_Property_ExW
         95   5E 00005D20 CM_Get_DevNode_Status
         96   5F 00012920 CM_Get_DevNode_Status_Ex
         97   60 00005B70 CM_Get_Device_IDA
         98   61 0000CBE0 CM_Get_Device_IDW
         99   62 00023FB0 CM_Get_Device_ID_ExA
        100   63 00006060 CM_Get_Device_ID_ExW
        101   64 00024080 CM_Get_Device_ID_ListA
        102   65 00010E90 CM_Get_Device_ID_ListW
        103   66 000240A0 CM_Get_Device_ID_List_ExA
        104   67 00010E70 CM_Get_Device_ID_List_ExW
        105   68 000241D0 CM_Get_Device_ID_List_SizeA
        106   69 00012940 CM_Get_Device_ID_List_SizeW
        107   6A 000241E0 CM_Get_Device_ID_List_Size_ExA
        108   6B 00024270 CM_Get_Device_ID_List_Size_ExW
        109   6C 00012BA0 CM_Get_Device_ID_Size
        110   6D 000058D0 CM_Get_Device_ID_Size_Ex
        111   6E 00022BD0 CM_Get_Device_Interface_AliasA
        112   6F 0000B570 CM_Get_Device_Interface_AliasW
        113   70 00022C00 CM_Get_Device_Interface_Alias_ExA
        114   71 0000B9C0 CM_Get_Device_Interface_Alias_ExW
        115   72 00022D90 CM_Get_Device_Interface_ListA
        116   73 0000BB70 CM_Get_Device_Interface_ListW
        117   74 00022DC0 CM_Get_Device_Interface_List_ExA
        118   75 0000BB50 CM_Get_Device_Interface_List_ExW
        119   76 00022F00 CM_Get_Device_Interface_List_SizeA
        120   77 0000BA00 CM_Get_Device_Interface_List_SizeW
        121   78 00022F20 CM_Get_Device_Interface_List_Size_ExA
        122   79 0000B9E0 CM_Get_Device_Interface_List_Size_ExW
        123   7A 00006220 CM_Get_Device_Interface_PropertyW
        124   7B 00006200 CM_Get_Device_Interface_Property_ExW
        125   7C 00024F50 CM_Get_Device_Interface_Property_KeysW
        126   7D 00024FE0 CM_Get_Device_Interface_Property_Keys_ExW
        127   7E 0000FB90 CM_Get_First_Log_Conf
        128   7F 0001E180 CM_Get_First_Log_Conf_Ex
        129   80 0001D570 CM_Get_Global_State
        130   81 0001D600 CM_Get_Global_State_Ex
        131   82 00025140 CM_Get_HW_Prof_FlagsA
        132   83 00025160 CM_Get_HW_Prof_FlagsW
        133   84 00025230 CM_Get_HW_Prof_Flags_ExA
        134   85 000252B0 CM_Get_HW_Prof_Flags_ExW
        135   86 000252E0 CM_Get_Hardware_Profile_InfoA
        136   87 000252F0 CM_Get_Hardware_Profile_InfoW
        137   88 00025360 CM_Get_Hardware_Profile_Info_ExA
        138   89 00025410 CM_Get_Hardware_Profile_Info_ExW
        139   8A 0001E1A0 CM_Get_Log_Conf_Priority
        140   8B 0001E2F0 CM_Get_Log_Conf_Priority_Ex
        141   8C 0001E310 CM_Get_Next_Log_Conf
        142   8D 0001E470 CM_Get_Next_Log_Conf_Ex
        143   8E 00021330 CM_Get_Next_Res_Des
        144   8F 00021500 CM_Get_Next_Res_Des_Ex
        145   90 0000AA10 CM_Get_Parent
        146   91 00011470 CM_Get_Parent_Ex
        147   92 00021530 CM_Get_Res_Des_Data
        148   93 000216F0 CM_Get_Res_Des_Data_Ex
        149   94 00021720 CM_Get_Res_Des_Data_Size
        150   95 00021910 CM_Get_Res_Des_Data_Size_Ex
        151   96 000243D0 CM_Get_Resource_Conflict_Count
        152   97 00024440 CM_Get_Resource_Conflict_DetailsA
        153   98 000245B0 CM_Get_Resource_Conflict_DetailsW
        154   99 0000CDA0 CM_Get_Sibling
        155   9A 00024290 CM_Get_Sibling_Ex
        156   9B 0001D620 CM_Get_Version
        157   9C 0001D630 CM_Get_Version_Ex
        158   9D 0001EE50 CM_Import_PowerScheme
        159   9E 00025710 CM_Install_DevNodeW
        160   9F 000258A0 CM_Install_DevNode_ExW
        161   A0 00020080 CM_Intersect_Range_List
        162   A1 000202E0 CM_Invert_Range_List
        163   A2 00025430 CM_Is_Dock_Station_Present
        164   A3 00025500 CM_Is_Dock_Station_Present_Ex
        165   A4 0001D650 CM_Is_Version_Available
        166   A5 0001D680 CM_Is_Version_Available_Ex
        167   A6 000242B0 CM_Locate_DevNodeA
        168   A7 00006380 CM_Locate_DevNodeW
        169   A8 000242C0 CM_Locate_DevNode_ExA
        170   A9 00006360 CM_Locate_DevNode_ExW
        171   AA 0000C820 CM_MapCrToSpErr
        172   AB 0000C7A0 CM_MapCrToWin32Err
        173   AC 000204A0 CM_Merge_Range_List
        174   AD 00021930 CM_Modify_Res_Des
        175   AE 00021BE0 CM_Modify_Res_Des_Ex
        176   AF 0001EE50 CM_Move_DevNode
        177   B0 0001EE50 CM_Move_DevNode_Ex
        178   B1 000207D0 CM_Next_Range
        179   B2 00023090 CM_Open_Class_KeyA
        180   B3 00004CD0 CM_Open_Class_KeyW
        181   B4 000230C0 CM_Open_Class_Key_ExA
        182   B5 00001970 CM_Open_Class_Key_ExW
        183   B6 00010D00 CM_Open_DevNode_Key
        184   B7 00010CE0 CM_Open_DevNode_Key_Ex
        185   B8 00023180 CM_Open_Device_Interface_KeyA
        186   B9 0000CC60 CM_Open_Device_Interface_KeyW
        187   BA 000231B0 CM_Open_Device_Interface_Key_ExA
        188   BB 0000CC40 CM_Open_Device_Interface_Key_ExW
        189   BC 0001ECF0 CM_Query_And_Remove_SubTreeA
        190   BD 00011690 CM_Query_And_Remove_SubTreeW
        191   BE 0001ED20 CM_Query_And_Remove_SubTree_ExA
        192   BF 00011670 CM_Query_And_Remove_SubTree_ExW
        193   C0 0001D6A0 CM_Query_Arbitrator_Free_Data
        194   C1 0001D7C0 CM_Query_Arbitrator_Free_Data_Ex
        195   C2 0001D7F0 CM_Query_Arbitrator_Free_Size
        196   C3 0001D910 CM_Query_Arbitrator_Free_Size_Ex
        197   C4 0001EE50 CM_Query_Remove_SubTree
        198   C5 0001EE50 CM_Query_Remove_SubTree_Ex
        199   C6 000248C0 CM_Query_Resource_Conflict_List
        200   C7 0001EE60 CM_Reenumerate_DevNode
        201   C8 0001EF90 CM_Reenumerate_DevNode_Ex
        202   C9 0001EFB0 CM_Register_Device_Driver
        203   CA 0001F0B0 CM_Register_Device_Driver_Ex
        204   CB 00023250 CM_Register_Device_InterfaceA
        205   CC 00023280 CM_Register_Device_InterfaceW
        206   CD 000233C0 CM_Register_Device_Interface_ExA
        207   CE 00023560 CM_Register_Device_Interface_ExW
        208   CF 00002140 CM_Register_Notification
        209   D0 0001EE50 CM_Remove_SubTree
        210   D1 0001EE50 CM_Remove_SubTree_Ex
        211   D2 0001F0D0 CM_Request_Device_EjectA
        212   D3 0001F100 CM_Request_Device_EjectW
        213   D4 0001F260 CM_Request_Device_Eject_ExA
        214   D5 0001F380 CM_Request_Device_Eject_ExW
        215   D6 00025520 CM_Request_Eject_PC
        216   D7 000255F0 CM_Request_Eject_PC_Ex
        217   D8 0001EE50 CM_RestoreAll_DefaultPowerSchemes
        218   D9 0001EE50 CM_Restore_DefaultPowerScheme
        219   DA 0001D940 CM_Run_Detection
        220   DB 0001D960 CM_Run_Detection_Ex
        221   DC 0001EE50 CM_Set_ActiveScheme
        222   DD 00025010 CM_Set_Class_PropertyW
        223   DE 00025110 CM_Set_Class_Property_ExW
        224   DF 00023590 CM_Set_Class_Registry_PropertyA
        225   E0 000236E0 CM_Set_Class_Registry_PropertyW
        226   E1 0001F3B0 CM_Set_DevNode_Problem
        227   E2 0001F4F0 CM_Set_DevNode_Problem_Ex
        228   E3 00010730 CM_Set_DevNode_PropertyW
        229   E4 00010710 CM_Set_DevNode_Property_ExW
        230   E5 00023A90 CM_Set_DevNode_Registry_PropertyA
        231   E6 00012090 CM_Set_DevNode_Registry_PropertyW
        232   E7 00023AC0 CM_Set_DevNode_Registry_Property_ExA
        233   E8 00012070 CM_Set_DevNode_Registry_Property_ExW
        234   E9 0000DD00 CM_Set_Device_Interface_PropertyW
        235   EA 0000DCE0 CM_Set_Device_Interface_Property_ExW
        236   EB 00025610 CM_Set_HW_Prof
        237   EC 00025630 CM_Set_HW_Prof_Ex
        238   ED 00025660 CM_Set_HW_Prof_FlagsA
        239   EE 00011550 CM_Set_HW_Prof_FlagsW
        240   EF 00025680 CM_Set_HW_Prof_Flags_ExA
        241   F0 00011530 CM_Set_HW_Prof_Flags_ExW
        242   F1 000117F0 CM_Setup_DevNode
        243   F2 00011650 CM_Setup_DevNode_Ex
        244   F3 000208E0 CM_Test_Range_Available
        245   F4 0001F510 CM_Uninstall_DevNode
        246   F5 0001F600 CM_Uninstall_DevNode_Ex
        247   F6 00023C30 CM_Unregister_Device_InterfaceA
        248   F7 00023C40 CM_Unregister_Device_InterfaceW
        249   F8 00023CA0 CM_Unregister_Device_Interface_ExA
        250   F9 00023D70 CM_Unregister_Device_Interface_ExW
        251   FA 00001AE0 CM_Unregister_Notification
        252   FB 0001EE50 CM_Write_UserPowerKey
        253   FC 00002160 DevCloseObjectQuery
        254   FD 000021B0 DevCreateObjectQuery
        255   FE 00002600 DevCreateObjectQueryEx
        256   FF 00011310 DevCreateObjectQueryFromId
        257  100 00011380 DevCreateObjectQueryFromIdEx
        258  101 0002E2C0 DevCreateObjectQueryFromIds
        259  102 0002E330 DevCreateObjectQueryFromIdsEx
        260  103 0000CB10 DevFindProperty
        261  104 0000C5B0 DevFreeObjectProperties
        262  105 0000C610 DevFreeObjects
        263  106 000034D0 DevGetObjectProperties
        264  107 00003520 DevGetObjectPropertiesEx
        265  108 00001720 DevGetObjects
        266  109 00001770 DevGetObjectsEx
        267  10A 0000EFD0 DevSetObjectProperties
        268  10B 00011490 SwDeviceClose
        269  10C 0000EB10 SwDeviceCreate
        270  10D 0002F2A0 SwDeviceGetLifetime
        271  10E 0000D890 SwDeviceInterfacePropertySet
        272  10F 0000E550 SwDeviceInterfaceRegister
        273  110 0000D9F0 SwDeviceInterfaceSetState
        274  111 0000DB20 SwDevicePropertySet
        275  112 0000E420 SwDeviceSetLifetime
        276  113 00002240 SwMemFree

  Summary

        1000 .data
        1000 .didat
        3000 .pdata
        D000 .rdata
        1000 .reloc
        1000 .rsrc
       2F000 .text

Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\crypt32.dll

File Type: DLL

  Section contains the following exports for CRYPT32.dll

    00000000 characteristics
    64CAB2D6 time date stamp Wed Aug  2 12:47:34 2023
        0.00 version
        1001 ordinal base
        1000 number of functions
         290 number of names

    ordinal hint RVA      name

       1020    0 00088A30 CertAddCRLContextToStore
       1021    1 00088AB0 CertAddCRLLinkToStore
       1022    2 00088A30 CertAddCTLContextToStore
       1023    3 00088AB0 CertAddCTLLinkToStore
       1024    4 0000D5B0 CertAddCertificateContextToStore
       1025    5 00088AB0 CertAddCertificateLinkToStore
       1026    6 000421F0 CertAddEncodedCRLToStore
       1027    7 0000E8E0 CertAddEncodedCTLToStore
       1028    8 00026570 CertAddEncodedCertificateToStore
       1029    9 000899B0 CertAddEncodedCertificateToSystemStoreA
       1030    A 00089A30 CertAddEncodedCertificateToSystemStoreW
       1031    B 00089FB0 CertAddEnhancedKeyUsageIdentifier
       1032    C 0008AFB0 CertAddRefServerOcspResponse
       1033    D 0008AFC0 CertAddRefServerOcspResponseContext
       1034    E 000115A0 CertAddSerializedElementToStore
       1035    F 0004C0A0 CertAddStoreToCollection
       1036   10 0008B250 CertAlgIdToOID
       1037   11 0008AFD0 CertCloseServerOcspResponse
       1038   12 00035E60 CertCloseStore
       1039   13 00010660 CertCompareCertificate
       1040   14 000122B0 CertCompareCertificateName
       1041   15 000106C0 CertCompareIntegerBlob
       1042   16 0002F3E0 CertComparePublicKeyInfo
       1043   17 00035710 CertControlStore
       1044   18 00045830 CertCreateCRLContext
       1045   19 0000E8A0 CertCreateCTLContext
       1046   1A 00088B10 CertCreateCTLEntryFromCertificateContextProperties
       1047   1B 00054C80 CertCreateCertificateChainEngine
       1048   1C 00028630 CertCreateCertificateContext
       1049   1D 0003DDE0 CertCreateContext
       1050   1E 0008B8C0 CertCreateSelfSignCertificate
       1051   1F 00089000 CertDeleteCRLFromStore
       1052   20 00089000 CertDeleteCTLFromStore
       1053   21 00089000 CertDeleteCertificateFromStore
       1054   22 000179D0 CertDuplicateCRLContext
       1055   23 000127F0 CertDuplicateCTLContext
       1056   24 00057040 CertDuplicateCertificateChain
       1057   25 00018420 CertDuplicateCertificateContext
       1058   26 0004C2D0 CertDuplicateStore
       1059   27 00089020 CertEnumCRLContextProperties
       1060   28 00011DF0 CertEnumCRLsInStore
       1061   29 00089020 CertEnumCTLContextProperties
       1062   2A 00017DB0 CertEnumCTLsInStore
       1063   2B 00089020 CertEnumCertificateContextProperties
       1064   2C 000190B0 CertEnumCertificatesInStore
       1065   2D 0008FB30 CertEnumPhysicalStore
       1066   2E 00089040 CertEnumSubjectInSortedCTL
       1067   2F 0008FB50 CertEnumSystemStore
       1068   30 0008FEE0 CertEnumSystemStoreLocation
       1069   31 00013040 CertFindAttribute
       1070   32 00006150 CertFindCRLInStore
       1071   33 000891A0 CertFindCTLInStore
       1072   34 00011EF0 CertFindCertificateInCRL
       1073   35 00018FE0 CertFindCertificateInStore
       1074   36 00090BB0 CertFindChainInStore
       1075   37 00016230 CertFindExtension
       1076   38 000072D0 CertFindRDNAttr
       1077   39 000486E0 CertFindSubjectInCTL
       1078   3A 00016B90 CertFindSubjectInSortedCTL
       1079   3B 00017EB0 CertFreeCRLContext
       1080   3C 00017EB0 CertFreeCTLContext
       1081   3D 0000F7B0 CertFreeCertificateChain
       1082   3E 00058200 CertFreeCertificateChainEngine
       1083   3F 000584D0 CertFreeCertificateChainList
       1084   40 0003C4B0 CertFreeCertificateContext
       1085   41 0008B030 CertFreeServerOcspResponseContext
       1086   42 00089200 CertGetCRLContextProperty
       1087   43 000083E0 CertGetCRLFromStore
       1088   44 00089200 CertGetCTLContextProperty
       1089   45 00027680 CertGetCertificateChain
       1090   46 0001F3B0 CertGetCertificateContextProperty
       1091   47 00018DA0 CertGetEnhancedKeyUsage
       1092   48 0008B290 CertGetIntendedKeyUsage
       1093   49 00089230 CertGetIssuerCertificateFromStore
       1094   4A 00091B40 CertGetNameStringA
       1095   4B 00039EA0 CertGetNameStringW
       1096   4C 00028F40 CertGetPublicKeyLength
       1097   4D 0008B070 CertGetServerOcspResponseContext
       1098   4E 00089330 CertGetStoreProperty
       1099   4F 00052DC0 CertGetSubjectCertificateFromStore
       1100   50 00012B80 CertGetValidUsages
       1101   51 0008B3D0 CertIsRDNAttrsInCertificateName
       1102   52 000938F0 CertIsStrongHashToSign
       1103   53 00015EB0 CertIsValidCRLForCertificate
       1104   54 000265F0 CertIsWeakHash
       1105   55 00091C00 CertNameToStrA
       1106   56 00058520 CertNameToStrW
       1107   57 000488B0 CertOIDToAlgId
       1108   58 0005ADC0 CertOpenServerOcspResponse
       1109   59 00037580 CertOpenStore
       1110   5A 00089AB0 CertOpenSystemStoreA
       1111   5B 0005B4F0 CertOpenSystemStoreW
       1112   5C 00091CA0 CertRDNValueToStrA
       1113   5D 00091D70 CertRDNValueToStrW
       1114   5E 0008FFB0 CertRegisterPhysicalStore
       1115   5F 00090250 CertRegisterSystemStore
       1116   60 0008A170 CertRemoveEnhancedKeyUsageIdentifier
       1117   61 00007250 CertRemoveStoreFromCollection
       1118   62 000C54D0 CertResyncCertificateChainEngine
       1119   63 00093C50 CertRetrieveLogoOrBiometricInfo
       1120   64 00016910 CertSaveStore
       1121   65 00011910 CertSelectCertificateChains
       1122   66 000169F0 CertSerializeCRLStoreElement
       1123   67 000169F0 CertSerializeCTLStoreElement
       1124   68 000169F0 CertSerializeCertificateStoreElement
       1125   69 00012220 CertSetCRLContextProperty
       1126   6A 000894D0 CertSetCTLContextProperty
       1127   6B 0000D760 CertSetCertificateContextPropertiesFromCTLEntry
       1128   6C 00012220 CertSetCertificateContextProperty
       1129   6D 0008A270 CertSetEnhancedKeyUsage
       1130   6E 00089500 CertSetStoreProperty
       1131   6F 00091F10 CertStrToNameA
       1132   70 0000E9F0 CertStrToNameW
       1133   71 00090340 CertUnregisterPhysicalStore
       1134   72 00090450 CertUnregisterSystemStore
       1135   73 0008B5E0 CertVerifyCRLRevocation
       1136   74 0008B670 CertVerifyCRLTimeValidity
       1137   75 00094460 CertVerifyCTLUsage
       1138   76 00027C90 CertVerifyCertificateChainPolicy
       1139   77 00017270 CertVerifyRevocation
       1140   78 00089570 CertVerifySubjectCertificateContext
       1141   79 000105C0 CertVerifyTimeValidity
       1142   7A 0008B710 CertVerifyValidityNesting
       1143   7B 00057330 CryptAcquireCertificatePrivateKey
       1144   7C 00058C10 CryptBinaryToStringA
       1145   7D 00058AF0 CryptBinaryToStringW
       1146   7E 000B7650 CryptCloseAsyncHandle
       1147   7F 00095010 CryptCreateAsyncHandle
       1148   80 00092DB0 CryptCreateKeyIdentifierFromCSP
       1149   81 000968D0 CryptDecodeMessage
       1150   82 000321A0 CryptDecodeObject
       1151   83 00032300 CryptDecodeObjectEx
       1152   84 00096970 CryptDecryptAndVerifyMessageSignature
       1153   85 00096B90 CryptDecryptMessage
       1154   86 0002A700 CryptEncodeObject
       1155   87 0002A730 CryptEncodeObjectEx
       1156   88 00096C00 CryptEncryptMessage
       1157   89 000895B0 CryptEnumKeyIdentifierProperties
       1158   8A 0002D150 CryptEnumOIDFunction
       1159   8B 000A4C20 CryptEnumOIDInfo
       1160   8C 000CCD50 CryptExportPKCS8
       1161   8D 00008900 CryptExportPublicKeyInfo
       1162   8E 00054F20 CryptExportPublicKeyInfoEx
       1163   8F 00092E40 CryptExportPublicKeyInfoFromBCryptKeyHandle
       1164   90 0008B760 CryptFindCertificateKeyProvInfo
       1165   91 000A4D20 CryptFindLocalizedName
       1166   92 0002E760 CryptFindOIDInfo
       1167   93 000AEA00 CryptFormatObject
       1168   94 00029360 CryptFreeOIDFunctionAddress
       1169   95 00095030 CryptGetAsyncParam
       1170   96 00017700 CryptGetDefaultOIDDllList
       1171   97 000177B0 CryptGetDefaultOIDFunctionAddress
       1172   98 000896B0 CryptGetKeyIdentifierProperty
       1173   99 00096CE0 CryptGetMessageCertificates
       1174   9A 00096D20 CryptGetMessageSignerCount
       1175   9B 0002AF80 CryptGetOIDFunctionAddress
       1176   9C 000A3320 CryptGetOIDFunctionValue
       1177   9D 00050460 CryptHashCertificate
       1178   9E 0002CF40 CryptHashCertificate2
       1179   9F 00096DD0 CryptHashMessage
       1180   A0 00092E90 CryptHashPublicKeyInfo
       1181   A1 0002E5A0 CryptHashToBeSigned
       1182   A2 000CD120 CryptImportPKCS8
       1183   A3 0004FEA0 CryptImportPublicKeyInfo
       1184   A4 00029E10 CryptImportPublicKeyInfoEx
       1185   A5 0002B290 CryptImportPublicKeyInfoEx2
       1186   A6 0003F640 CryptInitOIDFunctionSet
       1187   A7 000B3A80 CryptInstallDefaultContext
       1188   A8 0003F720 CryptInstallOIDFunctionAddress
       1189   A9 000D9160 CryptLoadSip
       1190   AA 00052BA0 CryptMemAlloc
       1191   AB 00027550 CryptMemFree
       1192   AC 000B3EA0 CryptMemRealloc
       1193   AD 000029B0 CryptMsgCalculateEncodedLength
       1194   AE 0003BDB0 CryptMsgClose
       1195   AF 0003FF60 CryptMsgControl
       1196   B0 000E2FD0 CryptMsgCountersign
       1197   B1 000E3190 CryptMsgCountersignEncoded
       1198   B2 00057730 CryptMsgDuplicate
       1199   B3 00001ED0 CryptMsgEncodeAndSignCTL
       1200   B4 0000E520 CryptMsgGetAndVerifySigner
       1201   B5 0002F8A0 CryptMsgGetParam
       1202   B6 0003C980 CryptMsgOpenToDecode
       1203   B7 000020B0 CryptMsgOpenToEncode
       1204   B8 00001FB0 CryptMsgSignCTL
       1205   B9 0003AE10 CryptMsgUpdate
       1206   BA 000E3510 CryptMsgVerifyCountersignatureEncoded
       1207   BB 00056210 CryptMsgVerifyCountersignatureEncodedEx
       1012   BC 000CA2F0 CryptObjectLocatorFree
       1013   BD 000CA330 CryptObjectLocatorGet
       1014   BE 000CA370 CryptObjectLocatorGetContent
       1015   BF 000CA420 CryptObjectLocatorGetUpdated
       1016   C0 000CA460 CryptObjectLocatorInitialize
       1017   C1 000CA7D0 CryptObjectLocatorIsChanged
       1018   C2 000CA7F0 CryptObjectLocatorRelease
       1208   C3 00054860 CryptProtectData
       1209   C4          CryptProtectMemory (forwarded to DPAPI.CryptProtectMemory)
       1210   C5 0003CA90 CryptQueryObject
       1211   C6 000A3410 CryptRegisterDefaultOIDFunction
       1212   C7 000A3710 CryptRegisterOIDFunction
       1213   C8 000A4DD0 CryptRegisterOIDInfo
       1214   C9 000D9650 CryptRetrieveTimeStamp
       1215   CA 000D9200 CryptSIPAddProvider
       1216   CB 0002A2B0 CryptSIPCreateIndirectData
       1217   CC 00052E30 CryptSIPGetCaps
       1218   CD 000D9570 CryptSIPGetSealedDigest
       1219   CE 0002A170 CryptSIPGetSignedDataMsg
       1220   CF 0002A460 CryptSIPLoad
       1221   D0 00007EA0 CryptSIPPutSignedDataMsg
       1222   D1 000D93D0 CryptSIPRemoveProvider
       1223   D2 00008310 CryptSIPRemoveSignedDataMsg
       1224   D3 0004D320 CryptSIPRetrieveSubjectGuid
       1225   D4 0004D0A0 CryptSIPRetrieveSubjectGuidForCatalogFile
       1226   D5 00053490 CryptSIPVerifyIndirectData
       1227   D6 000B7650 CryptSetAsyncParam
       1228   D7 000897D0 CryptSetKeyIdentifierProperty
       1229   D8 000A3810 CryptSetOIDFunctionValue
       1230   D9 000501B0 CryptSignAndEncodeCertificate
       1231   DA 00097030 CryptSignAndEncryptMessage
       1232   DB 00050350 CryptSignCertificate
       1233   DC 00097190 CryptSignMessage
       1234   DD 000972A0 CryptSignMessageWithKey
       1235   DE 0007A470 CryptStringToBinaryA
       1236   DF 00045D50 CryptStringToBinaryW
       1237   E0 000B3C40 CryptUninstallDefaultContext
       1238   E1 0004C5F0 CryptUnprotectData
       1239   E2          CryptUnprotectMemory (forwarded to DPAPI.CryptUnprotectMemory)
       1240   E3 000A3900 CryptUnregisterDefaultOIDFunction
       1241   E4 000A3BB0 CryptUnregisterOIDFunction
       1242   E5 000A4FD0 CryptUnregisterOIDInfo
       1243   E6          CryptUpdateProtectedState (forwarded to DPAPI.CryptUpdateProtectedState)
       1244   E7 0008B870 CryptVerifyCertificateSignature
       1245   E8 00019150 CryptVerifyCertificateSignatureEx
       1246   E9 00097510 CryptVerifyDetachedMessageHash
       1247   EA 00097570 CryptVerifyDetachedMessageSignature
       1248   EB 000975F0 CryptVerifyMessageHash
       1249   EC 00097640 CryptVerifyMessageSignature
       1250   ED 000976C0 CryptVerifyMessageSignatureWithKey
       1251   EE 000D9990 CryptVerifyTimeStampSignature
       1252   EF 00017B50 I_CertChainEngineIsDisallowedCertificate
       1253   F0 000277F0 I_CertDiagControl
       1254   F1 000514B0 I_CertProtectFunction
       1255   F2 000122F0 I_CertSrvProtectFunction
       1256   F3 00089990 I_CertSyncStore
       1257   F4 00056490 I_CertUpdateStore
       1258   F5 000561E0 I_CryptAddRefLruEntry
       1259   F6 000B7340 I_CryptAddSmartCardCertToStore
       1260   F7 00058130 I_CryptAllocTls
       1261   F8 0003F4B0 I_CryptAllocTlsEx
       1262   F9 00027460 I_CryptCreateLruCache
       1263   FA 00025460 I_CryptCreateLruEntry
       1264   FB 000525A0 I_CryptDetachTls
       1265   FC 000C5630 I_CryptDisableLruOfEntries
       1266   FD 000C5670 I_CryptEnableLruOfEntries
       1267   FE 00027590 I_CryptEnumMatchingLruEntries
       1268   FF 000256A0 I_CryptFindLruEntry
       1269  100 000C56E0 I_CryptFindLruEntryData
       1270  101 000B7430 I_CryptFindSmartCardCertInStore
       1271  102 000556F0 I_CryptFlushLruCache
       1272  103 000561B0 I_CryptFreeLruCache
       1273  104 00052950 I_CryptFreeTls
       1274  105 0002C980 I_CryptGetAsn1Decoder
       1275  106 00040AA0 I_CryptGetAsn1Encoder
       1276  107 0003AD20 I_CryptGetDefaultCryptProv
       1277  108 000B3D80 I_CryptGetDefaultCryptProvForEncrypt
       1278  109 00079FE0 I_CryptGetFileVersion
       1279  10A 00054C00 I_CryptGetLruEntryData
       1280  10B 000C5710 I_CryptGetLruEntryIdentifier
       1281  10C 000B7670 I_CryptGetOssGlobal
       1282  10D 00015640 I_CryptGetTls
       1283  10E 00025DB0 I_CryptInsertLruEntry
       1284  10F 00055EC0 I_CryptInstallAsn1Module
       1285  110 000B7670 I_CryptInstallOssGlobal
       1286  111 0004CC10 I_CryptReadTrustedPublisherDWORDValueFromRegistry
       1287  112 000B7650 I_CryptRegisterSmartCardStore
       1288  113 00025620 I_CryptReleaseLruEntry
       1289  114 00057120 I_CryptRemoveLruEntry
       1290  115 00017230 I_CryptSetTls
       1291  116 000578D0 I_CryptTouchLruEntry
       1292  117 00052940 I_CryptUninstallAsn1Module
       1293  118 000B7670 I_CryptUninstallOssGlobal
       1294  119 000B7650 I_CryptUnregisterSmartCardStore
       1295  11A 00058340 I_CryptWalkAllLruCacheEntries
       1019  11B 0000C0A0 I_PFXImportCertStoreEx
       1296  11C 000CBC20 PFXExportCertStore
       1297  11D 000CBD30 PFXExportCertStore2
       1298  11E 000CBD50 PFXExportCertStoreEx
       1299  11F 0000D010 PFXImportCertStore
       1300  120 0000C660 PFXIsPFXBlob
       1301  121 000CBF40 PFXVerifyPassword
       1001      0005D750 [NONAME]
       1002      0007A0E0 [NONAME]
       1003      00079C10 [NONAME]
       1004      00079C00 [NONAME]
       1005      00079CA0 [NONAME]
       1006      00079C90 [NONAME]
       1007      00079BB0 [NONAME]
       1008      00079BF0 [NONAME]
       1009      00079C50 [NONAME]
       1010      00079C80 [NONAME]
       1011      00079BA0 [NONAME]
       2000      0000B100 [NONAME]

  Summary

        7000 .data
        1000 .didat
        D000 .pdata
       35000 .rdata
        2000 .reloc
       B5000 .rsrc
       F1000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\dbghelp.dll

File Type: DLL

  Section contains the following exports for dbghelp.dll

    00000000 characteristics
    6270626D time date stamp Mon May  2 15:59:57 2022
        0.00 version
           1 ordinal base
         232 number of functions
         232 number of names

    ordinal hint RVA      name

          5    0 000E9620 DbgHelpCreateUserDump
          6    1 000E9700 DbgHelpCreateUserDumpW
          7    2 000E2A50 EnumDirTree
          8    3 000E2B70 EnumDirTreeW
          9    4 000DBDD0 EnumerateLoadedModules
         10    5 000DBDD0 EnumerateLoadedModules64
         11    6 000DBE50 EnumerateLoadedModulesEx
         12    7 000DBED0 EnumerateLoadedModulesExW
         13    8 000DBF50 EnumerateLoadedModulesW64
         14    9 0000E0C0 ExtensionApiVersion
         15    A 000E2BC0 FindDebugInfoFile
         16    B 000E2BE0 FindDebugInfoFileEx
         17    C 000E2CB0 FindDebugInfoFileExW
         18    D 000E2D00 FindExecutableImage
         19    E 000E2D20 FindExecutableImageEx
         20    F 000E2E20 FindExecutableImageExW
         21   10 000E2E70 FindFileInPath
         22   11 000E2EC0 FindFileInSearchPath
         23   12 000DBFD0 GetSymLoadError
         24   13 000D52A0 GetTimestampForLoadedLibrary
         25   14 000D4E10 ImageDirectoryEntryToData
         26   15 000D4E30 ImageDirectoryEntryToDataEx
         27   16 000D4F50 ImageNtHeader
         28   17 000D4F80 ImageRvaToSection
         29   18 000D4FE0 ImageRvaToVa
         30   19 000E2F00 ImagehlpApiVersion
         31   1A 0000DFB0 ImagehlpApiVersionEx
         32   1B 000E2F10 MakeSureDirectoryPathExists
         33   1C          MiniDumpReadDumpStream (forwarded to dbgcore.MiniDumpReadDumpStream)
         34   1D          MiniDumpWriteDump (forwarded to dbgcore.MiniDumpWriteDump)
         35   1E 000EF2D0 RangeMapAddPeImageSections
         36   1F 000EF3C0 RangeMapCreate
         37   20 000EF420 RangeMapFree
         38   21 000EF440 RangeMapRead
         39   22 000EF4E0 RangeMapRemove
         40   23 000EF530 RangeMapWrite
         41   24 0000DEC0 RemoveInvalidModuleList
         42   25 0000DBF0 ReportSymbolLoadSummary
         43   26 000E3080 SearchTreeForFile
         44   27 000E30B0 SearchTreeForFileW
         45   28 0000E0B0 SetCheckUserInterruptShared
         46   29 000DBFE0 SetSymLoadError
         47   2A 000EE730 StackWalk
         48   2B 000EE730 StackWalk64
         49   2C 00007030 StackWalkEx
         50   2D 000DBFF0 SymAddSourceStream
         51   2E 000DC000 SymAddSourceStreamA
         52   2F 000DC070 SymAddSourceStreamW
         53   30 000DC1E0 SymAddSymbol
         54   31 000DC260 SymAddSymbolW
         55   32 0000E050 SymAddrIncludeInlineTrace
         56   33 0000DCE0 SymCleanup
         57   34 000DC350 SymCompareInlineTrace
         58   35 000DC880 SymDeleteSymbol
         59   36 000DC8F0 SymDeleteSymbolW
         60   37 000DC9C0 SymEnumLines
         61   38 000DCA90 SymEnumLinesW
         62   39 000DCB40 SymEnumProcesses
         63   3A 000DCBE0 SymEnumSourceFileTokens
         64   3B 000DCC80 SymEnumSourceFiles
         65   3C 000DCD30 SymEnumSourceFilesW
         66   3D 000DCDD0 SymEnumSourceLines
         67   3E 000DCEC0 SymEnumSourceLinesW
         68   3F 000DCF80 SymEnumSym
         69   40 000DCFB0 SymEnumSymbols
         70   41 000DCFE0 SymEnumSymbolsEx
         71   42 000DD090 SymEnumSymbolsExW
         72   43 000DD130 SymEnumSymbolsForAddr
         73   44 000DD250 SymEnumSymbolsForAddrW
         74   45 000DD370 SymEnumSymbolsW
         75   46 000DD3A0 SymEnumTypes
         76   47 000DD420 SymEnumTypesByName
         77   48 000DD500 SymEnumTypesByNameW
         78   49 000DD590 SymEnumTypesW
         79   4A 000DD620 SymEnumerateModules
         80   4B 000DD620 SymEnumerateModules64
         81   4C 000DD690 SymEnumerateModulesW64
         82   4D 000DD700 SymEnumerateSymbols
         83   4E 000DD700 SymEnumerateSymbols64
         84   4F 000DD780 SymEnumerateSymbolsW
         85   50 000DD780 SymEnumerateSymbolsW64
         86   51 000E30E0 SymFindDebugInfoFile
         87   52 000E31D0 SymFindDebugInfoFileW
         88   53 000E3250 SymFindExecutableImage
         89   54 000E3340 SymFindExecutableImageW
         90   55 000E33C0 SymFindFileInPath
         91   56 000E34F0 SymFindFileInPathW
          1   57 000DB350 SymFreeDiaString
         92   58 000DD800 SymFromAddr
         93   59 000DD820 SymFromAddrW
         94   5A 000DD840 SymFromIndex
         95   5B 000DD8B0 SymFromIndexW
         96   5C 000DD990 SymFromInlineContext
         97   5D 000DD9E0 SymFromInlineContextW
         98   5E 000DDA30 SymFromName
         99   5F 000DDAB0 SymFromNameW
        100   60 000DDAE0 SymFromToken
        101   61 000DDB90 SymFromTokenW
        102   62 00009D10 SymFunctionTableAccess
        103   63 00009D10 SymFunctionTableAccess64
        104   64 00009D30 SymFunctionTableAccess64AccessRoutines
          2   65 000DB360 SymGetDiaSession
        105   66 000D5FE0 SymGetFileLineOffsets64
        106   67 000DDC80 SymGetHomeDirectory
        107   68 000DDD00 SymGetHomeDirectoryW
        108   69 000DDDC0 SymGetLineFromAddr
        109   6A 000DDDC0 SymGetLineFromAddr64
        110   6B 000DDDF0 SymGetLineFromAddrW64
        111   6C 000DDE20 SymGetLineFromInlineContext
        112   6D 000DDEF0 SymGetLineFromInlineContextW
        113   6E 000DE050 SymGetLineFromName
        114   6F 000DE050 SymGetLineFromName64
        115   70 000DE120 SymGetLineFromNameW64
        116   71 000DE6C0 SymGetLineNext
        117   72 000DE6C0 SymGetLineNext64
        118   73 000DE730 SymGetLineNextW64
        119   74 000DE750 SymGetLinePrev
        120   75 000DE750 SymGetLinePrev64
        121   76 000DE7C0 SymGetLinePrevW64
        122   77 000DE7D0 SymGetModuleBase
        123   78 000DE7D0 SymGetModuleBase64
        124   79 000DE830 SymGetModuleInfo
        125   7A 000DE830 SymGetModuleInfo64
        126   7B 0000AED0 SymGetModuleInfoW
        127   7C 0000AED0 SymGetModuleInfoW64
          3   7D 000DB390 SymGetOmapBlockBase
        128   7E 000DE8D0 SymGetOmaps
        129   7F 0000F1C0 SymGetOptions
        130   80 000DE9B0 SymGetScope
        131   81 000DEA30 SymGetScopeW
        132   82 000DEB40 SymGetSearchPath
        133   83 000DEBC0 SymGetSearchPathW
        134   84 000DEC20 SymGetSourceFile
        135   85 000DECA0 SymGetSourceFileFromToken
        136   86 000DED50 SymGetSourceFileFromTokenW
        137   87 000DEDC0 SymGetSourceFileToken
        138   88 000DEE30 SymGetSourceFileTokenW
        139   89 000DEEF0 SymGetSourceFileW
        140   8A 000DEF70 SymGetSourceVarFromToken
        141   8B 000DF040 SymGetSourceVarFromTokenW
        142   8C 000DF0F0 SymGetSymFromAddr
        143   8D 000DF0F0 SymGetSymFromAddr64
        144   8E 000DF130 SymGetSymFromName
        145   8F 000DF130 SymGetSymFromName64
        146   90 000DF1A0 SymGetSymNext
        147   91 000DF1A0 SymGetSymNext64
        148   92 000DF1C0 SymGetSymPrev
        149   93 000DF1C0 SymGetSymPrev64
        150   94 000E80D0 SymGetSymbolFile
        151   95 000E8200 SymGetSymbolFileW
        152   96 000DF1D0 SymGetTypeFromName
        153   97 000DF280 SymGetTypeFromNameW
        154   98 000DF3E0 SymGetTypeInfo
        155   99 000DF420 SymGetTypeInfoEx
        156   9A 000DF450 SymGetUnwindInfo
        157   9B 0000F250 SymInitialize
        158   9C 0000E120 SymInitializeW
        159   9D 000DF5F0 SymLoadModule
        160   9E 000DF5F0 SymLoadModule64
        161   9F 000DF630 SymLoadModuleEx
        162   A0 0000B500 SymLoadModuleExW
        163   A1 000DF710 SymMatchFileName
        164   A2 000DF810 SymMatchFileNameW
        165   A3 000DF8F0 SymMatchString
        166   A4 000DF930 SymMatchStringA
        167   A5 000DF940 SymMatchStringW
        168   A6 000DF980 SymNext
        169   A7 000DFA20 SymNextW
        170   A8 000DFA40 SymPrev
        171   A9 000DFAE0 SymPrevW
        172   AA 000DFAF0 SymQueryInlineTrace
        173   AB 000DFE00 SymRefreshModuleList
        174   AC 000DFE70 SymRegisterCallback
        175   AD 000DFE70 SymRegisterCallback64
        176   AE 0000DE40 SymRegisterCallbackW64
        177   AF 0000DF40 SymRegisterFunctionEntryCallback
        178   B0 0000DF40 SymRegisterFunctionEntryCallback64
        179   B1 000DFEE0 SymSearch
        180   B2 000DFFB0 SymSearchW
        181   B3 000E0070 SymSetContext
        182   B4 000E0120 SymSetHomeDirectory
        183   B5 000E01C0 SymSetHomeDirectoryW
        184   B6 0000E930 SymSetOptions
        185   B7 000E0240 SymSetParentWindow
        186   B8 000E0270 SymSetScopeFromAddr
        187   B9 000E0280 SymSetScopeFromIndex
        188   BA 0000DAC0 SymSetScopeFromInlineContext
        189   BB 000E0340 SymSetSearchPath
        190   BC 0000E380 SymSetSearchPathW
        191   BD 000E86A0 SymSrvDeltaName
        192   BE 000E8770 SymSrvDeltaNameW
        193   BF 000E8920 SymSrvGetFileIndexInfo
        194   C0 000E89F0 SymSrvGetFileIndexInfoW
        195   C1 000E8B20 SymSrvGetFileIndexString
        196   C2 000E8BE0 SymSrvGetFileIndexStringW
        197   C3 000E8CB0 SymSrvGetFileIndexes
        198   C4 000E8D20 SymSrvGetFileIndexesW
        199   C5 000E8DE0 SymSrvGetSupplement
        200   C6 000E8EA0 SymSrvGetSupplementW
        201   C7 000E8FB0 SymSrvIsStore
        202   C8 000E8FF0 SymSrvIsStoreW
        203   C9 000E90E0 SymSrvStoreFile
        204   CA 000E9180 SymSrvStoreFileW
        205   CB 000E9240 SymSrvStoreSupplement
        206   CC 000E9300 SymSrvStoreSupplementW
        207   CD 000E0380 SymUnDName
        208   CE 000E0380 SymUnDName64
        209   CF 00009FD0 SymUnloadModule
        210   D0 00009FD0 SymUnloadModule64
        211   D1 000E03D0 UnDecorateSymbolName
        212   D2 000E0460 UnDecorateSymbolNameW
        213   D3 0000DFF0 WinDbgExtensionDllInit
          4   D4 000CE2A0 _EFN_DumpImage
        214   D5 000D2E10 block
        215   D6 000D3010 chksym
        216   D7 000E0510 dbghelp
        217   D8 000D3210 dh
        218   D9 000D3220 fptr
        219   DA 000D32B0 homedir
        220   DB 000D3410 inlinedbg
        221   DC 000D3490 itoldyouso
        222   DD 000D3690 lmi
        223   DE 000D39C0 lminfo
        224   DF 000D3C10 omap
        225   E0 000D3E50 optdbgdump
        226   E1 000D3FC0 optdbgdumpaddr
        227   E2 000D4150 srcfiles
        228   E3 000D42A0 stack_force_ebp
        229   E4 000D44A0 stackdbg
        230   E5 000D46C0 sym
        231   E6 000D4840 symsrv
        232   E7 000D48B0 vc7fpo

  Summary

       1F000 .data
        1000 .didat
        3000 .mrdata
       10000 .pdata
       48000 .rdata
        5000 .reloc
        1000 .rsrc
      108000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\dhcpcsvc.dll

File Type: DLL

  Section contains the following exports for dhcpcsvc.DLL

    00000000 characteristics
    633AE20A time date stamp Mon Oct  3 06:22:18 2022
        0.00 version
           1 ordinal base
          67 number of functions
          67 number of names

    ordinal hint RVA      name

          1    0 000033E0 DhcpAcquireParameters
          2    1 00003510 DhcpAcquireParametersByBroadcast
          3    2 000026D0 DhcpCApiCleanup
          4    3 00003640 DhcpCApiInitialize
          5    4 00003660 DhcpClient_Generalize
          6    5 00003830 DhcpDeRegisterConnectionStateNotification
          7    6 00003930 DhcpDeRegisterOptions
          8    7 00003940 DhcpDeRegisterParamChange
          9    8 00003A80 DhcpDelPersistentRequestParams
         10    9 00003DC0 DhcpEnableDhcp
         11    A 00004080 DhcpEnableTracing
         12    B 0000A490 DhcpEnumClasses
         13    C 00001F90 DhcpEnumInterfaces
         14    D 00004110 DhcpFallbackRefreshParams
         15    E 000015C0 DhcpFreeEnumeratedInterfaces
         16    F 00002280 DhcpFreeLeaseInfo
         17   10 00001340 DhcpFreeLeaseInfoArray
         18   11 00004240 DhcpFreeMem
         19   12 00004270 DhcpGetClassId
         20   13 000043F0 DhcpGetClientId
         21   14 00004570 DhcpGetDhcpServicedConnections
         22   15 000047B0 DhcpGetFallbackParams
         23   16 00004890 DhcpGetNotificationStatus
         24   17 00004BC0 DhcpGetOriginalSubnetMask
         25   18 00004CA0 DhcpGetTraceArray
         26   19 0001582C DhcpGlobalIsShuttingDown
         27   1A 00015820 DhcpGlobalServiceSyncEvent
         28   1B 00015818 DhcpGlobalTerminateEvent
         29   1C 0000A680 DhcpHandlePnPEvent
         30   1D 00001010 DhcpIsEnabled
         31   1E 00005130 DhcpLeaseIpAddress
         32   1F 00005170 DhcpLeaseIpAddressEx
         33   20 0000A880 DhcpNotifyConfigChange
         34   21 0000A8C0 DhcpNotifyConfigChangeEx
         35   22 00005570 DhcpNotifyMediaReconnected
         36   23 0000AA50 DhcpOpenGlobalEvent
         37   24 000056A0 DhcpPersistentRequestParams
         38   25 00002110 DhcpQueryLeaseInfo
         39   26 00001C50 DhcpQueryLeaseInfoArray
         40   27 00002030 DhcpQueryLeaseInfoEx
         41   28 00005990 DhcpRegisterConnectionStateNotification
         42   29 00005B60 DhcpRegisterOptions
         43   2A 00005CD0 DhcpRegisterParamChange
         44   2B 00006D30 DhcpReleaseIpAddressLease
         45   2C 00006D50 DhcpReleaseIpAddressLeaseEx
         46   2D 00007100 DhcpReleaseParameters
         47   2E 00007230 DhcpRemoveDNSRegistrations
         48   2F 00007330 DhcpRenewIpAddressLease
         49   30 00007360 DhcpRenewIpAddressLeaseEx
         50   31 00007750 DhcpRequestCachedParams
         51   32 00007A90 DhcpRequestOptions
         52   33 000017F0 DhcpRequestParams
         53   34 00008050 DhcpSetClassId
         54   35 00008260 DhcpSetClientId
         55   36 00008430 DhcpSetFallbackParams
         56   37 00008600 DhcpSetMSFTVendorSpecificOptions
         57   38 000088D0 DhcpStaticRefreshParams
         58   39 00008A10 DhcpUndoRequestParams
         59   3A 00008A40 Dhcpv4CheckServerAvailability
         60   3B 00008B60 Dhcpv4EnableDhcpEx
         61   3C 00008C90 McastApiCleanup
         62   3D 00008D50 McastApiStartup
         63   3E 00008E40 McastEnumerateScopes
         64   3F 000090B0 McastGenUID
         65   40 00009220 McastReleaseAddress
         66   41 00009470 McastRenewAddress
         67   42 000097B0 McastRequestAddress

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        8000 .rdata
        1000 .reloc
        1000 .rsrc
        C000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\DWrite.dll

File Type: DLL

  Section contains the following exports for DWrite.dll

    00000000 characteristics
    621EE1CA time date stamp Tue Mar  1 19:17:30 2022
        0.00 version
           1 ordinal base
           1 number of functions
           1 number of names

    ordinal hint RVA      name

          1    0 0006A440 DWriteCreateFactory

  Summary

        8000 .data
        1000 .didat
       13000 .pdata
       A9000 .rdata
        2000 .reloc
       3C000 .rsrc
      153000 .text
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file dxgi.dll

File Type: DLL

  Section contains the following exports for dxgi.dll

    00000000 characteristics
    559F2BA5 time date stamp Thu Jul  9 19:19:17 2015
        0.00 version
           1 ordinal base
          19 number of functions
          19 number of names

    ordinal hint RVA      name

          1    0 000097B0 ApplyCompatResolutionQuirking
          2    1 000192D0 CompatString
          3    2 00019240 CompatValue
         10    3 00005DE0 CreateDXGIFactory
         11    4 00006180 CreateDXGIFactory1
         12    5 00005F30 CreateDXGIFactory2
         13    6 0001F1C0 DXGID3D10CreateDevice
         14    7 0001F1C0 DXGID3D10CreateLayeredDevice
         15    8 000095D0 DXGID3D10ETWRundown
         16    9 00043720 DXGID3D10GetLayeredDeviceSize
         17    A 0001F1C0 DXGID3D10RegisterLayers
          4    B 00041590 DXGIDumpJournal
         18    C 00043730 DXGIGetDebugInterface1
         19    D 00001F20 DXGIReportAdapterConfiguration
          5    E 000417B0 DXGIRevertToSxS
          6    F 0001F950 PIXBeginCapture
          7   10 0001F950 PIXEndCapture
          8   11 0001F950 PIXGetCaptureState
          9   12 00042560 SetAppCompatStringPointer

  Summary

        3000 .data
        1000 .didat
        5000 .pdata
       1F000 .rdata
        1000 .reloc
       16000 .rsrc
       5C000 .text
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file gdi32.dll

File Type: DLL

  Section contains the following exports for GDI32.dll

    00000000 characteristics
    559F30AB time date stamp Thu Jul  9 19:40:43 2015
        0.00 version
        1000 ordinal base
        1001 number of functions
         861 number of names

    ordinal hint RVA      name

       1011    0 00086060 AbortDoc
       1012    1 000888C0 AbortPath
       1015    2 00078480 AddFontMemResourceEx
       1016    3 000784D0 AddFontResourceA
       1017    4 000784E0 AddFontResourceExA
       1018    5 00078630 AddFontResourceExW
       1019    6 00078660 AddFontResourceTracking
       1020    7 00078800 AddFontResourceW
       1021    8 000861E0 AngleArc
       1022    9 000887B0 AnimatePalette
       1023    A 00078890 AnyLinkedFonts
       1024    B 00086300 Arc
       1025    C 000864B0 ArcTo
       1026    D 0004EC40 BRUSHOBJ_hGetColorTransform
       1027    E 0004EC50 BRUSHOBJ_pvAllocRbrush
       1028    F 0004EC60 BRUSHOBJ_pvGetRbrush
       1029   10 0004EC70 BRUSHOBJ_ulGetBrushColor
       1030   11 0004EC80 BeginGdiRendering
       1031   12 000440F0 BeginPath
       1032   13 0003F3E0 BitBlt
       1033   14 0004EC90 CLIPOBJ_bEnum
       1034   15 0004ECA0 CLIPOBJ_cEnumStart
       1035   16 0004ECB0 CLIPOBJ_ppoGetPath
       1036   17 0004C0D0 CancelDC
       1037   18 0007A410 CheckColorsInGamut
       1038   19 00088C40 ChoosePixelFormat
       1039   1A 00086620 Chord
       1040   1B 0004C3B0 ClearBitmapAttributes
       1041   1C 00073840 ClearBrushAttributes
       1042   1D 0000A7A0 CloseEnhMetaFile
       1043   1E 0004BA10 CloseFigure
       1044   1F 00083030 CloseMetaFile
       1045   20 0007A630 ColorCorrectPalette
       1046   21 0007A8D0 ColorMatchToTarget
       1047   22 0003DA30 CombineRgn
       1048   23 00073A20 CombineTransform
       1049   24 0004ED20 ConfigureOPMProtectedOutput
       1050   25 0008E740 CopyEnhMetaFileA
       1051   26 0008E810 CopyEnhMetaFileW
       1052   27 00083230 CopyMetaFileA
       1053   28 00083300 CopyMetaFileW
       1054   29 00042130 CreateBitmap
       1055   2A 0004ED40 CreateBitmapFromDxSurface
       1056   2B 0004ED50 CreateBitmapFromDxSurface2
       1057   2C 00073860 CreateBitmapIndirect
       1058   2D 0003E420 CreateBrushIndirect
       1059   2E 0007AB50 CreateColorSpaceA
       1060   2F 0007AEE0 CreateColorSpaceW
       1061   30 00028590 CreateCompatibleBitmap
       1062   31 0003F7C0 CreateCompatibleDC
       1063   32 00040370 CreateDCA
       1064   33 00040230 CreateDCW
       1065   34 000857E0 CreateDIBPatternBrush
       1066   35 00085830 CreateDIBPatternBrushPt
       1067   36 0001DA50 CreateDIBSection
       1068   37 0001BAA0 CreateDIBitmap
       1069   38 00085860 CreateDiscardableBitmap
       1070   39 00085870 CreateEllipticRgn
       1071   3A 00085880 CreateEllipticRgnIndirect
       1072   3B 000093E0 CreateEnhMetaFileA
       1073   3C 00009480 CreateEnhMetaFileW
       1074   3D 00043B40 CreateFontA
       1075   3E 00043C20 CreateFontIndirectA
       1076   3F 000858A0 CreateFontIndirectExA
       1077   40 0001C510 CreateFontIndirectExW
       1078   41 0001C480 CreateFontIndirectW
       1079   42 00044AA0 CreateFontW
       1080   43 0004E420 CreateHalftonePalette
       1081   44 00085930 CreateHatchBrush
       1082   45 00040210 CreateICA
       1083   46 0003FE80 CreateICW
       1084   47 00083480 CreateMetaFileA
       1085   48 00083510 CreateMetaFileW
       1086   49 0004EDA0 CreateOPMProtectedOutputs
       1087   4A 000450F0 CreatePalette
       1088   4B 00044790 CreatePatternBrush
       1089   4C 0003E2A0 CreatePen
       1090   4D 0000BA00 CreatePenIndirect
       1091   4E 00088F20 CreatePolyPolygonRgn
       1092   4F 0004C150 CreatePolygonRgn
       1093   50 00019370 CreateRectRgn
       1094   51 0003E500 CreateRectRgnIndirect
       1095   52 000443A0 CreateRoundRectRgn
       1096   53 000788A0 CreateScalableFontResourceA
       1097   54 00078F20 CreateScalableFontResourceW
       1098   55 0004CE90 CreateSessionMappedDIBSection
       1099   56 0003E4D0 CreateSolidBrush
       1100   57 0004EF20 D3DKMTAbandonSwapChain
       1101   58 0004EF30 D3DKMTAcquireKeyedMutex
       1102   59 0004EF40 D3DKMTAcquireKeyedMutex2
       1103   5A 0004EF50 D3DKMTAcquireSwapChain
       1104   5B 0004EF60 D3DKMTAdjustFullscreenGamma
       1105   5C 0004EF70 D3DKMTCacheHybridQueryValue
       1106   5D 0004EF80 D3DKMTChangeVideoMemoryReservation
       1107   5E 0004EF90 D3DKMTCheckExclusiveOwnership
       1108   5F 0004EFA0 D3DKMTCheckMonitorPowerState
       1109   60 0004EFB0 D3DKMTCheckMultiPlaneOverlaySupport
       1110   61 0004EFC0 D3DKMTCheckMultiPlaneOverlaySupport2
       1111   62 0004EFD0 D3DKMTCheckOcclusion
       1112   63 0004EFE0 D3DKMTCheckSharedResourceAccess
       1113   64 0004EFF0 D3DKMTCheckVidPnExclusiveOwnership
       1114   65 0004F000 D3DKMTCloseAdapter
       1115   66 0004F010 D3DKMTConfigureSharedResource
       1116   67 0003DF00 D3DKMTCreateAllocation
       1117   68 0004F020 D3DKMTCreateAllocation2
       1118   69 0004F030 D3DKMTCreateContext
       1119   6A 0004F040 D3DKMTCreateContextVirtual
       1120   6B 0004F050 D3DKMTCreateDCFromMemory
       1121   6C 0004F060 D3DKMTCreateDevice
       1122   6D 0004F070 D3DKMTCreateKeyedMutex
       1123   6E 0004F080 D3DKMTCreateKeyedMutex2
       1124   6F 0004F090 D3DKMTCreateOutputDupl
       1125   70 0004F0A0 D3DKMTCreateOverlay
       1126   71 0004F0B0 D3DKMTCreatePagingQueue
       1127   72 0004F0C0 D3DKMTCreateSwapChain
       1128   73 0003ECC0 D3DKMTCreateSynchronizationObject
       1129   74 0004F0D0 D3DKMTCreateSynchronizationObject2
       1130   75 0004F0E0 D3DKMTDestroyAllocation
       1131   76 0004F0F0 D3DKMTDestroyAllocation2
       1132   77 0004F100 D3DKMTDestroyContext
       1133   78 0004F110 D3DKMTDestroyDCFromMemory
       1134   79 0004F120 D3DKMTDestroyDevice
       1135   7A 0004F130 D3DKMTDestroyKeyedMutex
       1136   7B 0004F140 D3DKMTDestroyOutputDupl
       1137   7C 0004F150 D3DKMTDestroyOverlay
       1138   7D 0004F160 D3DKMTDestroyPagingQueue
       1139   7E 0004F170 D3DKMTDestroySynchronizationObject
       1140   7F 0004F180 D3DKMTEnumAdapters
       1141   80 0004F190 D3DKMTEnumAdapters2
       1142   81 0004F1A0 D3DKMTEscape
       1143   82 0004F1B0 D3DKMTEvict
       1144   83 0004F1C0 D3DKMTFlipOverlay
       1145   84 0004F1D0 D3DKMTFreeGpuVirtualAddress
       1146   85 0004F1E0 D3DKMTGetCachedHybridQueryValue
       1147   86 0004F1F0 D3DKMTGetContextInProcessSchedulingPriority
       1148   87 0004F200 D3DKMTGetContextSchedulingPriority
       1149   88 0004F210 D3DKMTGetDWMVerticalBlankEvent
       1150   89 0004F220 D3DKMTGetDeviceState
       1151   8A 0004F230 D3DKMTGetDisplayModeList
       1152   8B 0004F240 D3DKMTGetMultisampleMethodList
       1153   8C 0004F250 D3DKMTGetOverlayState
       1154   8D 0004F260 D3DKMTGetPresentHistory
       1155   8E 0004F270 D3DKMTGetPresentQueueEvent
       1156   8F 0004F280 D3DKMTGetProcessSchedulingPriorityClass
       1157   90 0004F290 D3DKMTGetResourcePresentPrivateDriverData
       1158   91 0004F2A0 D3DKMTGetRuntimeData
       1159   92 0004F2B0 D3DKMTGetScanLine
       1160   93 0004F2C0 D3DKMTGetSetSwapChainMetadata
       1161   94 0004F2D0 D3DKMTGetSharedPrimaryHandle
       1162   95 0004F2E0 D3DKMTGetSharedResourceAdapterLuid
       1163   96 0004F2F0 D3DKMTInvalidateActiveVidPn
       1164   97 0004F300 D3DKMTInvalidateCache
       1165   98 0004F310 D3DKMTLock
       1166   99 0004F320 D3DKMTLock2
       1167   9A 0004F330 D3DKMTMakeResident
       1168   9B 0004F340 D3DKMTMapGpuVirtualAddress
       1169   9C 0004F350 D3DKMTMarkDeviceAsError
       1170   9D 0004F360 D3DKMTNetDispGetNextChunkInfo
       1171   9E 0004F370 D3DKMTNetDispQueryMiracastDisplayDeviceStatus
       1172   9F 0004F380 D3DKMTNetDispQueryMiracastDisplayDeviceSupport
       1173   A0 00075F20 D3DKMTNetDispStartMiracastDisplayDevice
       1174   A1 0004F390 D3DKMTNetDispStartMiracastDisplayDevice2
       1175   A2 0004F3A0 D3DKMTNetDispStartMiracastDisplayDeviceEx
       1176   A3 0004F3B0 D3DKMTNetDispStopMiracastDisplayDevice
       1177   A4 0004F3C0 D3DKMTNetDispStopSessions
       1178   A5 0004F3D0 D3DKMTOfferAllocations
       1179   A6 0004F3E0 D3DKMTOpenAdapterFromDeviceName
       1180   A7 00012DA0 D3DKMTOpenAdapterFromGdiDisplayName
       1181   A8 0004F3F0 D3DKMTOpenAdapterFromHdc
       1182   A9 0004F400 D3DKMTOpenAdapterFromLuid
       1183   AA 0004F410 D3DKMTOpenKeyedMutex
       1184   AB 0004F420 D3DKMTOpenKeyedMutex2
       1185   AC 0004F430 D3DKMTOpenNtHandleFromName
       1186   AD 000425A0 D3DKMTOpenResource
       1187   AE 0004F440 D3DKMTOpenResource2
       1188   AF 0004F450 D3DKMTOpenResourceFromNtHandle
       1189   B0 0004F460 D3DKMTOpenSwapChain
       1190   B1 0004F470 D3DKMTOpenSyncObjectFromNtHandle
       1191   B2 0004F480 D3DKMTOpenSyncObjectFromNtHandle2
       1192   B3 0004F490 D3DKMTOpenSyncObjectNtHandleFromName
       1193   B4 0004F4A0 D3DKMTOpenSynchronizationObject
       1194   B5 0004F4B0 D3DKMTOutputDuplGetFrameInfo
       1195   B6 0004F4C0 D3DKMTOutputDuplGetMetaData
       1196   B7 0004F4D0 D3DKMTOutputDuplGetPointerShapeData
       1197   B8 0004F4E0 D3DKMTOutputDuplPresent
       1198   B9 0004F4F0 D3DKMTOutputDuplReleaseFrame
       1199   BA 0004F500 D3DKMTPinDirectFlipResources
       1200   BB 0004F510 D3DKMTPollDisplayChildren
       1201   BC 0004F520 D3DKMTPresent
       1202   BD 0004F530 D3DKMTPresentMultiPlaneOverlay
       1203   BE 0004F540 D3DKMTPresentMultiPlaneOverlay2
       1204   BF 0004F550 D3DKMTQueryAdapterInfo
       1205   C0 0004F560 D3DKMTQueryAllocationResidency
       1206   C1 0004F570 D3DKMTQueryClockCalibration
       1207   C2 0004F580 D3DKMTQueryRemoteVidPnSourceFromGdiDisplayName
       1208   C3 0004F590 D3DKMTQueryResourceInfo
       1209   C4 0004F5A0 D3DKMTQueryResourceInfoFromNtHandle
       1210   C5 0004F5B0 D3DKMTQueryStatistics
       1211   C6 0004F5C0 D3DKMTQueryVidPnExclusiveOwnership
       1212   C7 0004F5D0 D3DKMTQueryVideoMemoryInfo
       1213   C8 0004F5E0 D3DKMTReclaimAllocations
       1214   C9 0004F5F0 D3DKMTReclaimAllocations2
       1215   CA 00075F40 D3DKMTRegisterTrimNotification
       1216   CB 0004F600 D3DKMTReleaseKeyedMutex
       1217   CC 0004F610 D3DKMTReleaseKeyedMutex2
       1218   CD 0004F620 D3DKMTReleaseProcessVidPnSourceOwners
       1219   CE 0004F630 D3DKMTReleaseSwapChain
       1220   CF 0004F640 D3DKMTRender
       1221   D0 0004F650 D3DKMTReserveGpuVirtualAddress
       1222   D1 0004F660 D3DKMTSetAllocationPriority
       1223   D2 0004F670 D3DKMTSetContextInProcessSchedulingPriority
       1224   D3 0004F680 D3DKMTSetContextSchedulingPriority
       1225   D4 0004F690 D3DKMTSetDisplayMode
       1226   D5 0004F6A0 D3DKMTSetDisplayPrivateDriverFormat
       1227   D6 0004F6B0 D3DKMTSetDodIndirectSwapchain
       1228   D7 0004F6C0 D3DKMTSetGammaRamp
       1229   D8 0004F6D0 D3DKMTSetProcessSchedulingPriorityClass
       1230   D9 0004F6E0 D3DKMTSetQueuedLimit
       1231   DA 0004F6F0 D3DKMTSetStablePowerState
       1232   DB 0004F700 D3DKMTSetStereoEnabled
       1233   DC 0004F710 D3DKMTSetSyncRefreshCountWaitTarget
       1234   DD 0004F720 D3DKMTSetVidPnSourceHwProtection
       1235   DE 0004F730 D3DKMTSetVidPnSourceOwner
       1236   DF 0004F740 D3DKMTSetVidPnSourceOwner1
       1237   E0 0004F750 D3DKMTShareObjects
       1238   E1 0004F760 D3DKMTSharedPrimaryLockNotification
       1239   E2 0004F770 D3DKMTSharedPrimaryUnLockNotification
       1240   E3 0003EFC0 D3DKMTSignalSynchronizationObject
       1241   E4 0004F780 D3DKMTSignalSynchronizationObject2
       1242   E5 0004F790 D3DKMTSignalSynchronizationObjectFromCpu
       1243   E6 0004F7A0 D3DKMTSignalSynchronizationObjectFromGpu
       1244   E7 0004F7B0 D3DKMTSignalSynchronizationObjectFromGpu2
       1245   E8 0004F7C0 D3DKMTSubmitCommand
       1246   E9 0004F7D0 D3DKMTUnlock
       1247   EA 0004F7E0 D3DKMTUnlock2
       1248   EB 0004F7F0 D3DKMTUnpinDirectFlipResources
       1249   EC 00045590 D3DKMTUnregisterTrimNotification
       1250   ED 0004F800 D3DKMTUpdateGpuVirtualAddress
       1251   EE 0004F810 D3DKMTUpdateOverlay
       1252   EF 0004F820 D3DKMTWaitForIdle
       1253   F0 0003F340 D3DKMTWaitForSynchronizationObject
       1254   F1 0004F830 D3DKMTWaitForSynchronizationObject2
       1255   F2 0004F840 D3DKMTWaitForSynchronizationObjectFromCpu
       1256   F3 0004F850 D3DKMTWaitForSynchronizationObjectFromGpu
       1257   F4 0004F860 D3DKMTWaitForVerticalBlankEvent
       1258   F5 0004F870 D3DKMTWaitForVerticalBlankEvent2
       1259   F6 0004EE20 DDCCIGetCapabilitiesString
       1260   F7 0004EE30 DDCCIGetCapabilitiesStringLength
       1261   F8 0004EE40 DDCCIGetTimingReport
       1262   F9 0004EE50 DDCCIGetVCPFeature
       1263   FA 0004EE60 DDCCISaveCurrentSettings
       1264   FB 0004EE70 DDCCISetVCPFeature
       1265   FC 00020F60 DPtoLP
       1266   FD 0004EF00 DdCreateFullscreenSprite
       1267   FE 0004F8A0 DdDestroyFullscreenSprite
       1268   FF 0004FC30 DdEntry0
       1269  100 0004EDE0 DdEntry1
       1270  101 0004EEB0 DdEntry10
       1271  102 0004DD20 DdEntry11
       1272  103 0004DF70 DdEntry12
       1273  104 0004EEC0 DdEntry13
       1274  105 0004EED0 DdEntry14
       1275  106 0004EEF0 DdEntry15
       1276  107 0004DF80 DdEntry16
       1277  108 0004EEE0 DdEntry17
       1278  109 0004EF10 DdEntry18
       1279  10A 0004E180 DdEntry19
       1280  10B 0004EDF0 DdEntry2
       1281  10C 0004F880 DdEntry20
       1282  10D 0004DF60 DdEntry21
       1283  10E 0004F8B0 DdEntry22
       1284  10F 0004DFA0 DdEntry23
       1285  110 0004F890 DdEntry24
       1286  111 0004F8C0 DdEntry25
       1287  112 0004F8D0 DdEntry26
       1288  113 0004F8E0 DdEntry27
       1289  114 0004F8F0 DdEntry28
       1290  115 0004F900 DdEntry29
       1291  116 0004EE00 DdEntry3
       1292  117 0004F910 DdEntry30
       1293  118 0004F920 DdEntry31
       1294  119 0004F940 DdEntry32
       1295  11A 0004F950 DdEntry33
       1296  11B 0004F960 DdEntry34
       1297  11C 0004F970 DdEntry35
       1298  11D 0004F990 DdEntry36
       1299  11E 0004F980 DdEntry37
       1300  11F 0004F9A0 DdEntry38
       1301  120 0004F9B0 DdEntry39
       1302  121 0004EE10 DdEntry4
       1303  122 0004E1A0 DdEntry40
       1304  123 0004F9D0 DdEntry41
       1305  124 0004F9E0 DdEntry42
       1306  125 0004FA00 DdEntry43
       1307  126 0004FA10 DdEntry44
       1308  127 0004FA20 DdEntry45
       1309  128 0004DFF0 DdEntry46
       1310  129 0004FA30 DdEntry47
       1311  12A 0004FA40 DdEntry48
       1312  12B 0004FA50 DdEntry49
       1313  12C 0004DBA0 DdEntry5
       1314  12D 0004E170 DdEntry50
       1315  12E 0004FA60 DdEntry51
       1316  12F 0004FA70 DdEntry52
       1317  130 0004FA80 DdEntry53
       1318  131 0004E1B0 DdEntry54
       1319  132 0004FA90 DdEntry55
       1320  133 0004FAA0 DdEntry56
       1321  134 0004F930 DdEntry6
       1322  135 0004EE80 DdEntry7
       1323  136 0004EE90 DdEntry8
       1324  137 0004EEA0 DdEntry9
       1325  138 0004F9C0 DdNotifyFullscreenSpriteUpdate
       1326  139 0004F9F0 DdQueryVisRgnUniqueness
       1327  13A 0007AEF0 DeleteColorSpace
       1328  13B 00018500 DeleteDC
       1329  13C 00010A60 DeleteEnhMetaFile
       1330  13D 00011DF0 DeleteMetaFile
       1331  13E 0001BE10 DeleteObject
       1332  13F 00088CC0 DescribePixelFormat
       1333  140 0004FAD0 DestroyOPMProtectedOutput
       1334  141 0004FAE0 DestroyPhysicalMonitorInternal
       1335  142 000867D0 DeviceCapabilitiesExA
       1336  143 000867D0 DeviceCapabilitiesExW
       1337  144 00086910 DrawEscape
       1338  145 0000AC10 Ellipse
       1339  146 0004FC50 EnableEUDC
       1340  147 00046140 EndDoc
       1341  148 000869C0 EndFormPage
       1342  149 0004FC70 EndGdiRendering
       1343  14A 000869D0 EndPage
       1344  14B 00044070 EndPath
       1345  14C 0008D4B0 EngAcquireSemaphore
       1346  14D 0004FC90 EngAlphaBlend
       1347  14E 0004FCA0 EngAssociateSurface
       1348  14F 0004FCB0 EngBitBlt
       1349  150 0004FCC0 EngCheckAbort
       1350  151 0008D4C0 EngComputeGlyphSet
       1351  152 0004FCE0 EngCopyBits
       1352  153 0004FCF0 EngCreateBitmap
       1353  154 0004FD00 EngCreateClip
       1354  155 0004FD10 EngCreateDeviceBitmap
       1355  156 0004FD20 EngCreateDeviceSurface
       1356  157 0004FD30 EngCreatePalette
       1357  158 0008D530 EngCreateSemaphore
       1358  159 0004FD40 EngDeleteClip
       1359  15A 0004FD50 EngDeletePalette
       1360  15B 0004FD60 EngDeletePath
       1361  15C 0008D570 EngDeleteSemaphore
       1362  15D 0004FD70 EngDeleteSurface
       1363  15E 0004FD80 EngEraseSurface
       1364  15F 0004FD90 EngFillPath
       1365  160 0008D5B0 EngFindResource
       1366  161 0008D650 EngFreeModule
       1367  162 0004BFC0 EngGetCurrentCodePage
       1368  163 0008D660 EngGetDriverName
       1369  164 0008D690 EngGetPrinterDataFileName
       1370  165 0004FDA0 EngGradientFill
       1371  166 0004FDB0 EngLineTo
       1372  167 0008D6C0 EngLoadModule
       1373  168 0004FDC0 EngLockSurface
       1374  169 0004FDD0 EngMarkBandingSurface
       1375  16A 0008D6E0 EngMultiByteToUnicodeN
       1376  16B 0008D6F0 EngMultiByteToWideChar
       1377  16C 0004FDE0 EngPaint
       1378  16D 0004FDF0 EngPlgBlt
       1379  16E 00051C70 EngQueryEMFInfo
       1380  16F 0008D730 EngQueryLocalTime
       1381  170 0008D7C0 EngReleaseSemaphore
       1382  171 0004FE00 EngStretchBlt
       1383  172 0004FE10 EngStretchBltROP
       1384  173 0004FE20 EngStrokeAndFillPath
       1385  174 0004FE30 EngStrokePath
       1386  175 0004FE40 EngTextOut
       1387  176 0004FE50 EngTransparentBlt
       1388  177 0008D7D0 EngUnicodeToMultiByteN
       1389  178 0004FE60 EngUnlockSurface
       1390  179 0008D7E0 EngWideCharToMultiByte
       1391  17A 00010B80 EnumEnhMetaFile
       1392  17B 000790D0 EnumFontFamiliesA
       1393  17C 00041BE0 EnumFontFamiliesExA
       1394  17D 00041CC0 EnumFontFamiliesExW
       1395  17E 00041BB0 EnumFontFamiliesW
       1396  17F 00079100 EnumFontsA
       1397  180 00079130 EnumFontsW
       1398  181 0007AF00 EnumICMProfilesA
       1399  182 0007AFA0 EnumICMProfilesW
       1400  183 00008880 EnumMetaFile
       1401  184 00085950 EnumObjects
       1402  185 00045A80 EqualRgn
       1403  186 000869E0 Escape
       1404  187 00089660 EudcLoadLinkW
       1405  188 000896C0 EudcUnloadLinkW
       1406  189 00043F00 ExcludeClipRect
       1407  18A 00085A70 ExtCreatePen
       1408  18B 0001B300 ExtCreateRegion
       1409  18C 0004C190 ExtEscape
       1410  18D 000870A0 ExtFloodFill
       1411  18E 0001C760 ExtSelectClipRgn
       1412  18F 00008810 ExtTextOutA
       1413  190 00024B10 ExtTextOutW
       1414  191 0004FEB0 FONTOBJ_cGetAllGlyphHandles
       1415  192 0004FEC0 FONTOBJ_cGetGlyphs
       1416  193 0004FED0 FONTOBJ_pQueryGlyphAttrs
       1417  194 0004FEE0 FONTOBJ_pfdg
       1418  195 0004FEF0 FONTOBJ_pifi
       1419  196 0004FF00 FONTOBJ_pvTrueTypeFontFile
       1420  197 0004FF10 FONTOBJ_pxoGetXform
       1421  198 0004FF20 FONTOBJ_vGetInfo
       1422  199 00044C10 FillPath
       1423  19A 00087230 FillRgn
       1424  19B 00051C70 FixBrushOrgEx
       1425  19C 00088930 FlattenPath
       1426  19D 00087330 FloodFill
       1427  19E 00079160 FontIsLinked
       1428  19F 00087350 FrameRgn
       1429  1A0 0004C490 GdiAddFontResourceW
       1430  1A1 00090890 GdiAddGlsBounds
       1431  1A2 000908C0 GdiAddGlsRecord
       1432  1A3 0003F930 GdiAlphaBlend
       1433  1A4 0009BBE0 GdiArtificialDecrementDriver
       1434  1A5 00082360 GdiCleanCacheDC
       1435  1A6 000443B0 GdiClearStockObjectCache
       1436  1A7 0004A760 GdiComment
       1437  1A8 00087470 GdiConsoleTextOut
       1438  1A9 000441E0 GdiConvertAndCheckDC
       1439  1AA 00082390 GdiConvertBitmap
       1440  1AB 0007B040 GdiConvertBitmapV5
       1441  1AC 00082390 GdiConvertBrush
       1442  1AD 00082390 GdiConvertDC
       1443  1AE 00094F00 GdiConvertEnhMetaFile
       1444  1AF 00082390 GdiConvertFont
       1445  1B0 00094F80 GdiConvertMetaFilePict
       1446  1B1 00082390 GdiConvertPalette
       1447  1B2 00082390 GdiConvertRegion
       1448  1B3 00085BF0 GdiConvertToDevmodeW
       1449  1B4 00095020 GdiCreateLocalEnhMetaFile
       1450  1B5 00095030 GdiCreateLocalMetaFilePict
       1451  1B6 0004CFF0 GdiDeleteLocalDC
       1452  1B7 0004BB50 GdiDeleteSpoolFileHandle
       1453  1B8 00088D50 GdiDescribePixelFormat
       1454  1B9 0001BA30 GdiDllInitialize
       1455  1BA 00040DA0 GdiDrawStream
       1456  1BB 00045FE0 GdiEndDocEMF
       1457  1BC 00046AB0 GdiEndPageEMF
       1458  1BD 00077900 GdiEntry1
       1459  1BE 000779B0 GdiEntry10
       1460  1BF 000779D0 GdiEntry11
       1461  1C0 00077A40 GdiEntry12
       1462  1C1 000411E0 GdiEntry13
       1463  1C2 00077A60 GdiEntry14
       1464  1C3 00077AA0 GdiEntry15
       1465  1C4 0004CFF0 GdiEntry16
       1466  1C5 00077AD0 GdiEntry2
       1467  1C6 00078180 GdiEntry3
       1468  1C7 000781D0 GdiEntry4
       1469  1C8 000781E0 GdiEntry5
       1470  1C9 00078210 GdiEntry6
       1471  1CA 00078220 GdiEntry7
       1472  1CB 00078230 GdiEntry8
       1473  1CC 00078240 GdiEntry9
       1474  1CD 00040C80 GdiFixUpHandle
       1475  1CE 00041660 GdiFlush
       1476  1CF 0004FF70 GdiFullscreenControl
       1477  1D0 00087490 GdiGetBatchLimit
       1478  1D1 000413A0 GdiGetBitmapBitsSize
       1479  1D2 00041810 GdiGetCharDimensions
       1480  1D3 00042180 GdiGetCodePage
       1481  1D4 0004C130 GdiGetDC
       1482  1D5 00049AF0 GdiGetDevmodeForPage
       1483  1D6 00082390 GdiGetLocalBrush
       1484  1D7 00082390 GdiGetLocalDC
       1485  1D8 00082390 GdiGetLocalFont
       1486  1D9 00089F70 GdiGetPageCount
       1487  1DA 00049A10 GdiGetPageHandle
       1488  1DB 00048DC0 GdiGetSpoolFileHandle
       1489  1DC 000501F0 GdiGetSpoolMessage
       1490  1DD 00042870 GdiGradientFill
       1491  1DE 000502D0 GdiInitSpool
       1492  1DF 0001A210 GdiInitializeLanguagePack
       1493  1E0 000823A0 GdiIsMetaFileDC
       1494  1E1 00082400 GdiIsMetaPrintDC
       1495  1E2 00081CB0 GdiIsPlayMetafileDC
       1496  1E3 00085D40 GdiIsScreenDC
       1497  1E4 000473C0 GdiIsUMPDSandboxingEnabled
       1498  1E5 0004CF70 GdiLoadType1Fonts
       1499  1E6 00051C70 GdiPlayDCScript
       1500  1E7 00089FF0 GdiPlayEMF
       1501  1E8 00051C70 GdiPlayJournal
       1502  1E9 0004A040 GdiPlayPageEMF
       1503  1EA 0008A170 GdiPlayPrivatePageEMF
       1504  1EB 00051C70 GdiPlayScript
       1505  1EC 000477C0 GdiPrinterThunk
       1506  1ED 00019DE0 GdiProcessSetup
       1507  1EE 00050410 GdiQueryFonts
       1508  1EF 00082450 GdiQueryTable
       1509  1F0 00028150 GdiRealizationInfo
       1510  1F1 0003EBE0 GdiReleaseDC
       1511  1F2 0004CFF0 GdiReleaseLocalDC
       1512  1F3 0008A1B0 GdiResetDCEMF
       1513  1F4 0004CFF0 GdiSetAttrs
       1514  1F5 000874A0 GdiSetBatchLimit
       1515  1F6 00085DC0 GdiSetLastError
       1516  1F7 00088D60 GdiSetPixelFormat
       1517  1F8 0004D3A0 GdiSetServerAttr
       1518  1F9 00049740 GdiStartDocEMF
       1519  1FA 0004BC80 GdiStartPageEMF
       1520  1FB 0004CFF0 GdiSupportsFontChangeEvent
       1521  1FC 00088D70 GdiSwapBuffers
       1522  1FD 00011570 GdiTransparentBlt
       1523  1FE 00044150 GdiValidateHandle
       1524  1FF 00073F90 GetArcDirection
       1525  200 00073FB0 GetAspectRatioFilterEx
       1526  201 000739E0 GetBitmapAttributes
       1527  202 000118D0 GetBitmapBits
       1528  203 00085DE0 GetBitmapDimensionEx
       1529  204 00042810 GetBkColor
       1530  205 0001FF70 GetBkMode
       1531  206 00045830 GetBoundsRect
       1532  207 000739E0 GetBrushAttributes
       1533  208 000443D0 GetBrushOrgEx
       1534  209 0004FF90 GetCOPPCompatibleOPMInformation
       1535  20A 0004FFA0 GetCertificate
       1536  20B 0004FFB0 GetCertificateSize
       1537  20C 00073FD0 GetCharABCWidthsA
       1538  20D 00073FF0 GetCharABCWidthsFloatA
       1539  20E 00074010 GetCharABCWidthsFloatW
       1540  20F 00074030 GetCharABCWidthsI
       1541  210 00074060 GetCharABCWidthsW
       1542  211 00074080 GetCharWidth32A
       1543  212 000740A0 GetCharWidth32W
       1544  213 000740C0 GetCharWidthA
       1545  214 000740E0 GetCharWidthFloatA
       1546  215 00074100 GetCharWidthFloatW
       1547  216 00074120 GetCharWidthI
       1548  217 0004E210 GetCharWidthInfo
       1549  218 00012550 GetCharWidthW
       1550  219 00074180 GetCharacterPlacementA
       1551  21A 000744A0 GetCharacterPlacementW
       1552  21B 00043F80 GetClipBox
       1553  21C 0003ED40 GetClipRgn
       1554  21D 00074560 GetColorAdjustment
       1555  21E 0007B880 GetColorSpace
       1556  21F 00044700 GetCurrentDpiInfo
       1557  220 000289A0 GetCurrentObject
       1558  221 00020D50 GetCurrentPositionEx
       1559  222 00081D10 GetDCBrushColor
       1560  223 00043DC0 GetDCOrgEx
       1561  224 00081D80 GetDCPenColor
       1562  225 00044740 GetDIBColorTable
       1563  226 0003E7A0 GetDIBits
       1564  227 0001B390 GetDeviceCaps
       1565  228 0007B8F0 GetDeviceGammaRamp
       1566  229 00074570 GetETM
       1567  22A 00089770 GetEUDCTimeStamp
       1568  22B 00089790 GetEUDCTimeStampExW
       1569  22C 0008E970 GetEnhMetaFileA
       1570  22D 0008EA20 GetEnhMetaFileBits
       1571  22E 0008EAD0 GetEnhMetaFileDescriptionA
       1572  22F 0008EAE0 GetEnhMetaFileDescriptionW
       1573  230 00044610 GetEnhMetaFileHeader
       1574  231 0008EB00 GetEnhMetaFilePaletteEntries
       1575  232 0008EC20 GetEnhMetaFilePixelFormat
       1576  233 0008ED20 GetEnhMetaFileW
       1577  234 00045810 GetFontAssocStatus
       1578  235 00017B10 GetFontData
       1579  236 00079170 GetFontFileData
       1580  237 000791B0 GetFontFileInfo
       1581  238 00081DF0 GetFontLanguageInfo
       1582  239 00026CA0 GetFontRealizationInfo
       1583  23A 00079400 GetFontResourceInfoW
       1584  23B 000500D0 GetFontUnicodeRanges
       1585  23C 000745C0 GetGlyphIndicesA
       1586  23D 000747B0 GetGlyphIndicesW
       1587  23E 000747C0 GetGlyphOutline
       1588  23F 000747C0 GetGlyphOutlineA
       1589  240 0004CEE0 GetGlyphOutlineW
       1590  241 00074920 GetGlyphOutlineWow
       1591  242 0000ADB0 GetGraphicsMode
       1592  243 00040CC0 GetHFONT
       1593  244 0007B970 GetICMProfileA
       1594  245 0007BA90 GetICMProfileW
       1595  246 00074960 GetKerningPairs
       1596  247 00074960 GetKerningPairsA
       1597  248 00074C20 GetKerningPairsW
       1598  249 00022BE0 GetLayout
       1599  24A 0007BC30 GetLogColorSpaceA
       1600  24B 0007BDA0 GetLogColorSpaceW
       1601  24C 00043460 GetMapMode
       1602  24D 000829E0 GetMetaFileA
       1603  24E 00009BF0 GetMetaFileBitsEx
       1604  24F 00082AA0 GetMetaFileW
       1605  250 00012E20 GetMetaRgn
       1606  251 00074C50 GetMiterLimit
       1607  252 00044CF0 GetNearestColor
       1608  253 00085DF0 GetNearestPaletteIndex
       1609  254 00050150 GetNumberOfPhysicalMonitors
       1610  255 00050160 GetOPMInformation
       1611  256 00050170 GetOPMRandomNumber
       1612  257 000286D0 GetObjectA
       1613  258 0003D680 GetObjectType
       1614  259 00040BC0 GetObjectW
       1615  25A 00074C60 GetOutlineTextMetricsA
       1616  25B 000281C0 GetOutlineTextMetricsW
       1617  25C 000457E0 GetPaletteEntries
       1618  25D 000889A0 GetPath
       1619  25E 000501B0 GetPhysicalMonitorDescription
       1620  25F 000501C0 GetPhysicalMonitors
       1621  260 0003D8E0 GetPixel
       1622  261 000097E0 GetPixelFormat
       1623  262 00081E60 GetPolyFillMode
       1624  263 00081EC0 GetROP2
       1625  264 00043F90 GetRandomRgn
       1626  265 000795A0 GetRasterizerCaps
       1627  266 0003FAE0 GetRegionData
       1628  267 00081F20 GetRelAbs
       1629  268 0003EB30 GetRgnBox
       1630  269 0001CAD0 GetStockObject
       1631  26A 00081F40 GetStretchBltMode
       1632  26B 000897C0 GetStringBitmapA
       1633  26C 00050210 GetStringBitmapW
       1634  26D 00050220 GetSuggestedOPMProtectedOutputArraySize
       1635  26E 00044990 GetSystemPaletteEntries
       1636  26F 00074F70 GetSystemPaletteUse
       1637  270 0001FF10 GetTextAlign
       1638  271 00012E40 GetTextCharacterExtra
       1639  272 000457D0 GetTextCharset
       1640  273 0004DA30 GetTextCharsetInfo
       1641  274 00042BB0 GetTextColor
       1642  275 00074F80 GetTextExtentExPointA
       1643  276 00075270 GetTextExtentExPointI
       1644  277 00009380 GetTextExtentExPointW
       1645  278 0003C530 GetTextExtentExPointWPri
       1646  279 000752B0 GetTextExtentPoint32A
       1647  27A 00027060 GetTextExtentPoint32W
       1648  27B 000752D0 GetTextExtentPointA
       1649  27C 00075650 GetTextExtentPointI
       1650  27D 00027080 GetTextExtentPointW
       1651  27E 00075670 GetTextFaceA
       1652  27F 000195B0 GetTextFaceAliasW
       1653  280 00018F80 GetTextFaceW
       1654  281 00041680 GetTextMetricsA
       1655  282 0003EE00 GetTextMetricsW
       1656  283 00073A30 GetTransform
       1657  284 00028A90 GetViewportExtEx
       1658  285 00040F00 GetViewportOrgEx
       1659  286 0008ED90 GetWinMetaFileBits
       1660  287 00028B10 GetWindowExtEx
       1661  288 00043DE0 GetWindowOrgEx
       1662  289 00044020 GetWorldTransform
       1663  28A 00050290 HT_Get8BPPFormatPalette
       1664  28B 000502A0 HT_Get8BPPMaskPalette
       1665  28C 0003FA40 IntersectClipRect
       1666  28D 000875D0 InvertRgn
       1667  28E 0008EF80 IsValidEnhMetaRecord
       1668  28F 0008EFF0 IsValidEnhMetaRecordOffExt
       1669  290 00040F80 LPtoDP
       1670  291 00082180 LineDDA
       1671  292 00043E50 LineTo
       1672  293 00021DD0 LpkDrawTextEx
       1673  294 00162160 LpkEditControl
       1674  295 00008D80 LpkExtTextOut
       1675  296 000B46C0 LpkGetCharacterPlacement
       1676  297 0003BF60 LpkGetTextExtentExPoint
       1677  298 0001A290 LpkInitialize
       1678  299 000B2D90 LpkPSMTextOut
       1679  29A 0009BE60 LpkPresent
       1680  29B 000B4FA0 LpkTabbedTextOut
       1681  29C 000B4D40 LpkUseGDIWidthCache
       1682  29D 000426F0 MaskBlt
       1683  29E 00089210 MirrorRgn
       1684  29F 0001E460 ModifyWorldTransform
       1685  2A0 00020C50 MoveToEx
       1686  2A1 000876C0 NamedEscape
       1687  2A2 00047120 OffsetClipRgn
       1688  2A3 00040A60 OffsetRgn
       1689  2A4 000430B0 OffsetViewportOrgEx
       1690  2A5 00041560 OffsetWindowOrgEx
       1691  2A6 00050360 PATHOBJ_bEnum
       1692  2A7 00050370 PATHOBJ_bEnumClipLines
       1693  2A8 00050380 PATHOBJ_vEnumStart
       1694  2A9 00050390 PATHOBJ_vEnumStartClipLines
       1695  2AA 000503A0 PATHOBJ_vGetBounds
       1696  2AB 000877F0 PaintRgn
       1697  2AC 0003F4F0 PatBlt
       1698  2AD 000889D0 PathToRegion
       1699  2AE 000878E0 Pie
       1700  2AF 000470E0 PlayEnhMetaFile
       1701  2B0 0001F4F0 PlayEnhMetaFileRecord
       1702  2B1 00008860 PlayMetaFile
       1703  2B2 0000A210 PlayMetaFileRecord
       1704  2B3 00087A90 PlgBlt
       1705  2B4 00012380 PolyBezier
       1706  2B5 0004B930 PolyBezierTo
       1707  2B6 00088F50 PolyDraw
       1708  2B7 0003F070 PolyPatBlt
       1709  2B8 0004A940 PolyPolygon
       1710  2B9 00089030 PolyPolyline
       1711  2BA 00087C60 PolyTextOutA
       1712  2BB 0003F850 PolyTextOutW
       1713  2BC 00042390 Polygon
       1714  2BD 00012320 Polyline
       1715  2BE 0004BA60 PolylineTo
       1716  2BF 00011C50 PtInRegion
       1717  2C0 00089480 PtVisible
       1718  2C1 00045A50 QueryFontAssocStatus
       1719  2C2 0004C000 RealizePalette
       1720  2C3 00089490 RectInRegion
       1721  2C4 00044140 RectVisible
       1722  2C5 00045000 Rectangle
       1723  2C6 000795B0 RemoveFontMemResourceEx
       1724  2C7 000795E0 RemoveFontResourceA
       1725  2C8 000796E0 RemoveFontResourceExA
       1726  2C9 00079840 RemoveFontResourceExW
       1727  2CA 00079900 RemoveFontResourceTracking
       1728  2CB 000799F0 RemoveFontResourceW
       1729  2CC 00085E00 ResetDCA
       1730  2CD 00085E80 ResetDCW
       1731  2CE 00085E90 ResizePalette
       1732  2CF 00021500 RestoreDC
       1733  2D0 00010BB0 RoundRect
       1734  2D1 00050470 STROBJ_bEnum
       1735  2D2 00050480 STROBJ_bEnumPositionsOnly
       1736  2D3 00050490 STROBJ_bGetAdvanceWidths
       1737  2D4 000504A0 STROBJ_dwGetCodePage
       1738  2D5 000504B0 STROBJ_vEnumStart
       1739  2D6 00021940 SaveDC
       1740  2D7 00073A40 ScaleViewportExtEx
       1741  2D8 00073B90 ScaleWindowExtEx
       1742  2D9 000200C0 ScriptApplyDigitSubstitution
       1743  2DA 0009BE80 ScriptApplyLogicalWidth
       1744  2DB 00025960 ScriptBreak
       1745  2DC 0003CAD0 ScriptCPtoX
       1746  2DD 0009C130 ScriptCacheGetHeight
       1747  2DE 0000E8A0 ScriptFreeCache
       1748  2DF 00045190 ScriptGetCMap
       1749  2E0 0009D320 ScriptGetFontAlternateGlyphs
       1750  2E1 0009D480 ScriptGetFontFeatureTags
       1751  2E2 0009D6C0 ScriptGetFontLanguageTags
       1752  2E3 00045390 ScriptGetFontProperties
       1753  2E4 0009D890 ScriptGetFontScriptTags
       1754  2E5 0009C1D0 ScriptGetGlyphABCWidth
       1755  2E6 0009C280 ScriptGetLogicalWidths
       1756  2E7 0001A3F0 ScriptGetProperties
       1757  2E8 0003BB70 ScriptIsComplex
       1758  2E9 00044DC0 ScriptItemize
       1759  2EA 0009D9B0 ScriptItemizeOpenType
       1760  2EB 0009C580 ScriptJustify
       1761  2EC 0009CD20 ScriptLayout
       1762  2ED 0009CDE0 ScriptPlace
       1763  2EE 0009DA80 ScriptPlaceOpenType
       1764  2EF 0009DF60 ScriptPositionSingleGlyph
       1765  2F0 00027820 ScriptRecordDigitSubstitution
       1766  2F1 00027D40 ScriptShape
       1767  2F2 0009E180 ScriptShapeOpenType
       1768  2F3 00039AE0 ScriptStringAnalyse
       1769  2F4 0003C960 ScriptStringCPtoX
       1770  2F5 0003C7B0 ScriptStringFree
       1771  2F6 0009D060 ScriptStringGetLogicalWidths
       1772  2F7 00044E30 ScriptStringGetOrder
       1773  2F8 00022510 ScriptStringOut
       1774  2F9 0009D1C0 ScriptStringValidate
       1775  2FA 0003D470 ScriptStringXtoCP
       1776  2FB 0009D2E0 ScriptString_pLogAttr
       1777  2FC 0009D300 ScriptString_pSize
       1778  2FD 00045A60 ScriptString_pcOutChars
       1779  2FE 0009E650 ScriptSubstituteSingleGlyph
       1780  2FF 00022EA0 ScriptTextOut
       1781  300 0003D2A0 ScriptXtoCP
       1782  301 00082490 SelectBrushLocal
       1783  302 0004B7D0 SelectClipPath
       1784  303 0001C740 SelectClipRgn
       1785  304 00082490 SelectFontLocal
       1786  305 0001F7B0 SelectObject
       1787  306 0001E7C0 SelectPalette
       1788  307 00087F70 SetAbortProc
       1789  308 00018EB0 SetArcDirection
       1790  309 0004CEC0 SetBitmapAttributes
       1791  30A 00045180 SetBitmapBits
       1792  30B 00085F00 SetBitmapDimensionEx
       1793  30C 000187D0 SetBkColor
       1794  30D 0001FFD0 SetBkMode
       1795  30E 00045730 SetBoundsRect
       1796  30F 00073A00 SetBrushAttributes
       1797  310 00018B80 SetBrushOrgEx
       1798  311 00073E40 SetColorAdjustment
       1799  312 0004AD30 SetColorSpace
       1800  313 00042990 SetDCBrushColor
       1801  314 00081FA0 SetDCPenColor
       1802  315 0004BEB0 SetDIBColorTable
       1803  316 0001E610 SetDIBits
       1804  317 0001CB80 SetDIBitsToDevice
       1805  318 00081880 SetDeviceGammaRamp
       1806  319 00010C60 SetEnhMetaFileBits
       1807  31A 00079A80 SetFontEnumeration
       1808  31B 00022C60 SetGraphicsMode
       1809  31C 00019200 SetICMMode
       1810  31D 000818C0 SetICMProfileA
       1811  31E 00081AC0 SetICMProfileW
       1812  31F 00042470 SetLayout
       1813  320 00073CE0 SetLayoutWidth
       1814  321 00050590 SetMagicColors
       1815  322 00015A60 SetMapMode
       1816  323 00073EC0 SetMapperFlags
       1817  324 00011310 SetMetaFileBitsEx
       1818  325 00042540 SetMetaRgn
       1819  326 00018D80 SetMiterLimit
       1820  327 000505A0 SetOPMSigningKeyAndSequenceNumbers
       1821  328 00088840 SetPaletteEntries
       1822  329 0003D740 SetPixel
       1823  32A 00088DD0 SetPixelFormat
       1824  32B 00045460 SetPixelV
       1825  32C 0001B1F0 SetPolyFillMode
       1826  32D 000189B0 SetROP2
       1827  32E 0003DDB0 SetRectRgn
       1828  32F 00082150 SetRelAbs
       1829  330 00018AA0 SetStretchBltMode
       1830  331 00073F80 SetSystemPaletteUse
       1831  332 00020B60 SetTextAlign
       1832  333 000188E0 SetTextCharacterExtra
       1833  334 0001B780 SetTextColor
       1834  335 00018DF0 SetTextJustification
       1835  336 0000BAC0 SetViewportExtEx
       1836  337 00019920 SetViewportOrgEx
       1837  338 00073D70 SetVirtualResolution
       1838  339 0008F020 SetWinMetaFileBits
       1839  33A 0000BCD0 SetWindowExtEx
       1840  33B 00018FA0 SetWindowOrgEx
       1841  33C 0001E440 SetWorldTransform
       1842  33D 00088000 StartDocA
       1843  33E 000881A0 StartDocW
       1844  33F 00088720 StartFormPage
       1845  340 000469B0 StartPage
       1846  341 0003FD80 StretchBlt
       1847  342 0001CF20 StretchDIBits
       1848  343 00088A70 StrokeAndFillPath
       1849  344 00088B20 StrokePath
       1850  345 00088EB0 SwapBuffers
       1851  346 000088B0 TextOutA
       1852  347 00012D30 TextOutW
       1853  348 00013570 TranslateCharsetInfo
       1854  349 00079A90 UnloadNetworkFonts
       1855  34A 00085F10 UnrealizeObject
       1856  34B 00088730 UpdateColors
       1857  34C 0008D990 UpdateICMRegKeyA
       1858  34D 0008D990 UpdateICMRegKeyW
       1859  34E 00017BD0 UspAllocCache
       1860  34F 0001FE00 UspAllocTemp
       1861  350 00022780 UspFreeMem
       1862  351 00088BD0 WidenPath
       1863  352 000506E0 XFORMOBJ_bApplyXform
       1864  353 000506F0 XFORMOBJ_iGetXform
       1865  354 00050700 XLATEOBJ_cGetPalette
       1866  355 00050710 XLATEOBJ_hGetColorTransform
       1867  356 00050720 XLATEOBJ_iXlate
       1868  357 0008D820 XLATEOBJ_piVector
       1869  358 0004CD40 bInitSystemAndFontsDirectoriesW
       1870  359 0004CC30 bMakePathNameW
       1871  35A 0004CA20 cGetTTFFromFOT
       1872  35B 000B5410 ftsWordBreak
       1873  35C 00085F50 gdiPlaySpoolStream
       1000      00044360 [NONAME]
       1001      0008D9E0 [NONAME]
       1002      0008DA10 [NONAME]
       1003      000446D0 [NONAME]
       1004      00042110 [NONAME]
       1005      00044000 [NONAME]
       1006      0008D9B0 [NONAME]
       1007      00042A70 [NONAME]
       1008      0008D990 [NONAME]
       1009      00044770 [NONAME]
       1010      000447A0 [NONAME]
       1013      0008D960 [NONAME]
       1014      0004C400 [NONAME]
       2000      0004C3D0 [NONAME]

  Summary

        4000 .data
        B000 .pdata
       98000 .rdata
        2000 .reloc
       12000 .rsrc
       C9000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\IPHLPAPI.DLL

File Type: DLL

  Section contains the following exports for IPHLPAPI.DLL

    00000000 characteristics
    559F3036 time date stamp Thu Jul  9 19:38:46 2015
        0.00 version
           1 ordinal base
         277 number of functions
         277 number of names

    ordinal hint RVA      name

          1    0 0001E0D0 AddIPAddress
          2    1 0001C5B0 AllocateAndGetInterfaceInfoFromStack
          3    2 0001D5F0 AllocateAndGetIpAddrTableFromStack
          4    3 0000B0C0 CancelIPChangeNotify
          5    4 0000A280 CancelMibChangeNotify2
          6    5 00022FE0 CloseCompartment
          7    6 0001D620 CloseGetIPPhysicalInterfaceForDestination
          8    7 000237D0 ConvertCompartmentGuidToId
          9    8 00023860 ConvertCompartmentIdToGuid
         10    9 0000A820 ConvertGuidToStringA
         11    A 000086C0 ConvertGuidToStringW
         12    B 00023960 ConvertInterfaceAliasToLuid
         13    C 000036F0 ConvertInterfaceGuidToLuid
         14    D 00003810 ConvertInterfaceIndexToLuid
         15    E 0000C490 ConvertInterfaceLuidToAlias
         16    F 000091B0 ConvertInterfaceLuidToGuid
         17   10 00008640 ConvertInterfaceLuidToIndex
         18   11 00023AF0 ConvertInterfaceLuidToNameA
         19   12 00003D70 ConvertInterfaceLuidToNameW
         20   13 00023BA0 ConvertInterfaceNameToLuidA
         21   14 00004100 ConvertInterfaceNameToLuidW
         22   15 00023C80 ConvertInterfacePhysicalAddressToLuid
         23   16 00022DA0 ConvertIpv4MaskToLength
         24   17 00001F80 ConvertLengthToIpv4Mask
         25   18 0001C7B0 ConvertRemoteInterfaceAliasToLuid
         26   19 0001C950 ConvertRemoteInterfaceGuidToLuid
         27   1A 0001CAA0 ConvertRemoteInterfaceIndexToLuid
         28   1B 0001CB10 ConvertRemoteInterfaceLuidToAlias
         29   1C 0001CC50 ConvertRemoteInterfaceLuidToGuid
         30   1D 0001CCD0 ConvertRemoteInterfaceLuidToIndex
         31   1E 0001CD50 ConvertStringToGuidA
         32   1F 0000ECA0 ConvertStringToGuidW
         33   20 00023E00 ConvertStringToInterfacePhysicalAddress
         34   21 00023F80 CreateAnycastIpAddressEntry
         35   22 00022FF0 CreateCompartment
         36   23 0001E220 CreateIpForwardEntry
         37   24 00025180 CreateIpForwardEntry2
         38   25 0001E230 CreateIpNetEntry
         39   26 00025940 CreateIpNetEntry2
         40   27 000209F0 CreatePersistentTcpPortReservation
         41   28 00020A30 CreatePersistentUdpPortReservation
         42   29 0001E500 CreateProxyArpEntry
         43   2A 00026080 CreateSortedAddressPairs
         44   2B 00023FA0 CreateUnicastIpAddressEntry
         45   2C 00023FC0 DeleteAnycastIpAddressEntry
         46   2D 00023170 DeleteCompartment
         47   2E 0001E520 DeleteIPAddress
         48   2F 0001E610 DeleteIpForwardEntry
         49   30 000251A0 DeleteIpForwardEntry2
         50   31 0001E6E0 DeleteIpNetEntry
         51   32 00025960 DeleteIpNetEntry2
         52   33 00020A70 DeletePersistentTcpPortReservation
         53   34 00020AB0 DeletePersistentUdpPortReservation
         54   35 0001E790 DeleteProxyArpEntry
         55   36 00023FE0 DeleteUnicastIpAddressEntry
         56   37 00010420 DisableMediaSense
         57   38 0001E7B0 EnableRouter
         58   39 0001E810 FlushIpNetTable
         59   3A 00025980 FlushIpNetTable2
         60   3B 000263A0 FlushIpPathTable
         61   3C 0000A320 FreeMibTable
         62   3D 0001CDE0 GetAdapterIndex
         63   3E 0001CE70 GetAdapterOrderMap
         64   3F 000028D0 GetAdaptersAddresses
         65   40 00001DA0 GetAdaptersInfo
         66   41 00024000 GetAnycastIpAddressEntry
         67   42 00024020 GetAnycastIpAddressTable
         68   43 00009000 GetBestInterface
         69   44 00008FF0 GetBestInterfaceEx
         70   45 0001E890 GetBestRoute
         71   46 00009500 GetBestRoute2
         72   47 000069D0 GetCurrentThreadCompartmentId
         73   48 00003BC0 GetCurrentThreadCompartmentScope
         74   49 0000B2B0 GetExtendedTcpTable
         75   4A 0000C1A0 GetExtendedUdpTable
         76   4B 0001CF90 GetFriendlyIfIndex
         77   4C 0001EA30 GetIcmpStatistics
         78   4D 0000EF90 GetIcmpStatisticsEx
         79   4E 00008EC0 GetIfEntry
         80   4F 000042E0 GetIfEntry2
         81   50 000024D0 GetIfStackTable
         82   51 0001CFA0 GetIfTable
         83   52 00003880 GetIfTable2
         84   53 00001610 GetIfTable2Ex
         85   54 0001D150 GetInterfaceInfo
         86   55 00026930 GetInvertedIfStackTable
         87   56 0001EB50 GetIpAddrTable
         88   57 0001C4E0 GetIpErrorString
         89   58 000251C0 GetIpForwardEntry2
         90   59 0001ED50 GetIpForwardTable
         91   5A 0000AAD0 GetIpForwardTable2
         92   5B 0000A260 GetIpInterfaceEntry
         93   5C 0000AAF0 GetIpInterfaceTable
         94   5D 0000A800 GetIpNetEntry2
         95   5E 0001F0B0 GetIpNetTable
         96   5F 00025A60 GetIpNetTable2
         97   60 00026940 GetIpNetworkConnectionBandwidthEstimates
         98   61 00026490 GetIpPathEntry
         99   62 00026680 GetIpPathTable
        100   63 0001F2E0 GetIpStatistics
        101   64 00003980 GetIpStatisticsEx
        102   65 000231C0 GetJobCompartmentId
        103   66 00024040 GetMulticastIpAddressEntry
        104   67 00024060 GetMulticastIpAddressTable
        105   68 00023220 GetNetworkInformation
        106   69 000011F0 GetNetworkParams
        107   6A 0000EF00 GetNumberOfInterfaces
        108   6B 0001BC90 GetOwnerModuleFromPidAndInfo
        109   6C 00021490 GetOwnerModuleFromTcp6Entry
        110   6D 000214D0 GetOwnerModuleFromTcpEntry
        111   6E 000223D0 GetOwnerModuleFromUdp6Entry
        112   6F 00022410 GetOwnerModuleFromUdpEntry
        113   70 0001C370 GetPerAdapterInfo
        114   71 0000B8E0 GetPerTcp6ConnectionEStats
        115   72 00021510 GetPerTcp6ConnectionStats
        116   73 0000BB20 GetPerTcpConnectionEStats
        117   74 000215D0 GetPerTcpConnectionStats
        118   75 0001FC70 GetRTTAndHopCount
        119   76 000038A0 GetSessionCompartmentId
        120   77 00021670 GetTcp6Table
        121   78 000218C0 GetTcp6Table2
        122   79 00021E30 GetTcpStatistics
        123   7A 0000F0D0 GetTcpStatisticsEx
        124   7B 00021E40 GetTcpTable
        125   7C 00021E60 GetTcpTable2
        126   7D 00026F80 GetTeredoPort
        127   7E 00022450 GetUdp6Table
        128   7F 000228C0 GetUdpStatistics
        129   80 0000F210 GetUdpStatisticsEx
        130   81 000228D0 GetUdpTable
        131   82 0001F2F0 GetUniDirectionalAdapterInfo
        132   83 0000A510 GetUnicastIpAddressEntry
        133   84 000064E0 GetUnicastIpAddressTable
        134   85 00022B40 GetWPAOACSupportLevel
        135   86 0000AE90 Icmp6CreateFile
        136   87 00001A50 Icmp6ParseReplies
        137   88 000017A0 Icmp6SendEcho2
        138   89 00001120 IcmpCloseHandle
        139   8A 0001FE90 IcmpCreateFile
        140   8B 000200E0 IcmpParseReplies
        141   8C 00020130 IcmpSendEcho
        142   8D 00020190 IcmpSendEcho2
        143   8E 00020200 IcmpSendEcho2Ex
        144   8F 00023310 InitializeCompartmentEntry
        145   90 0000EE70 InitializeIpForwardEntry
        146   91 00026A40 InitializeIpInterfaceEntry
        147   92 00024080 InitializeUnicastIpAddressEntry
        148   93 00026BC0 InternalCleanupPersistentStore
        149   94 000241F0 InternalCreateAnycastIpAddressEntry
        150   95 0001D740 InternalCreateIpForwardEntry
        151   96 000253B0 InternalCreateIpForwardEntry2
        152   97 0001D760 InternalCreateIpNetEntry
        153   98 00025B90 InternalCreateIpNetEntry2
        154   99 00024210 InternalCreateUnicastIpAddressEntry
        155   9A 00024230 InternalDeleteAnycastIpAddressEntry
        156   9B 0001D780 InternalDeleteIpForwardEntry
        157   9C 000253D0 InternalDeleteIpForwardEntry2
        158   9D 0001D790 InternalDeleteIpNetEntry
        159   9E 00025BB0 InternalDeleteIpNetEntry2
        160   9F 00024250 InternalDeleteUnicastIpAddressEntry
        161   A0 00024270 InternalFindInterfaceByAddress
        162   A1 00024360 InternalGetAnycastIpAddressEntry
        163   A2 00024380 InternalGetAnycastIpAddressTable
        164   A3 0001D7A0 InternalGetBoundTcp6EndpointTable
        165   A4 0001D7E0 InternalGetBoundTcpEndpointTable
        166   A5 00008830 InternalGetForwardIpTable2
        167   A6 0000A900 InternalGetIPPhysicalInterfaceForDestination
        168   A7 00004B90 InternalGetIfEntry2
        169   A8 0001D970 InternalGetIfTable
        170   A9 00026C70 InternalGetIfTable2
        171   AA 0001D9B0 InternalGetIpAddrTable
        172   AB 000253F0 InternalGetIpForwardEntry2
        173   AC 0001D9F0 InternalGetIpForwardTable
        174   AD 0000A0B0 InternalGetIpInterfaceEntry
        175   AE 00009AE0 InternalGetIpInterfaceTable
        176   AF 0000A600 InternalGetIpNetEntry2
        177   B0 0001DA30 InternalGetIpNetTable
        178   B1 00025BD0 InternalGetIpNetTable2
        179   B2 000243A0 InternalGetMulticastIpAddressEntry
        180   B3 000243C0 InternalGetMulticastIpAddressTable
        181   B4 0000C5A0 InternalGetRtcSlotInformation
        182   B5 0001DB50 InternalGetTcp6Table2
        183   B6 0001DB90 InternalGetTcp6TableWithOwnerModule
        184   B7 0001DBD0 InternalGetTcp6TableWithOwnerPid
        185   B8 0001DC10 InternalGetTcpTable
        186   B9 0001DC50 InternalGetTcpTable2
        187   BA 0001DC90 InternalGetTcpTableEx
        188   BB 0001DCD0 InternalGetTcpTableWithOwnerModule
        189   BC 0001DD10 InternalGetTcpTableWithOwnerPid
        190   BD 00003130 InternalGetTunnelPhysicalAdapter
        191   BE 0001DD50 InternalGetUdp6TableWithOwnerModule
        192   BF 0001DD90 InternalGetUdp6TableWithOwnerPid
        193   C0 0001DDD0 InternalGetUdpTable
        194   C1 0001DE10 InternalGetUdpTableEx
        195   C2 0001DE50 InternalGetUdpTableWithOwnerModule
        196   C3 0001DE90 InternalGetUdpTableWithOwnerPid
        197   C4 000243E0 InternalGetUnicastIpAddressEntry
        198   C5 000243F0 InternalGetUnicastIpAddressTable
        199   C6 0001DED0 InternalIcmpCreateFileEx
        200   C7 0001DF00 InternalSetIfEntry
        201   C8 0001DF10 InternalSetIpForwardEntry
        202   C9 00025670 InternalSetIpForwardEntry2
        203   CA 00026C80 InternalSetIpInterfaceEntry
        204   CB 0001DF30 InternalSetIpNetEntry
        205   CC 00025E90 InternalSetIpNetEntry2
        206   CD 0001DF50 InternalSetIpStats
        207   CE 0001DF70 InternalSetTcpEntry
        208   CF 00027000 InternalSetTeredoPort
        209   D0 000246D0 InternalSetUnicastIpAddressEntry
        210   D1 0001F410 IpReleaseAddress
        211   D2 0001F460 IpRenewAddress
        212   D3 00020BD0 LookupPersistentTcpPortReservation
        213   D4 00020C10 LookupPersistentUdpPortReservation
        214   D5 0001F890 NTPTimeToNTFileTime
        215   D6 0001F920 NTTimeToNTPTime
        216   D7 0001D360 NhGetGuidFromInterfaceName
        217   D8 0001D390 NhGetInterfaceDescriptionFromGuid
        218   D9 0000C430 NhGetInterfaceNameFromDeviceGuid
        219   DA 0000C430 NhGetInterfaceNameFromGuid
        220   DB 0001C5B0 NhpAllocateAndGetInterfaceInfoFromStack
        221   DC 0000AE60 NotifyAddrChange
        222   DD 000233D0 NotifyCompartmentChange
        223   DE 00009870 NotifyIpInterfaceChange
        224   DF 0001F4B0 NotifyRouteChange
        225   E0 0000EB30 NotifyRouteChange2
        226   E1 00024F40 NotifyStableUnicastIpAddressTable
        227   E2 000270C0 NotifyTeredoPortChange
        228   E3 00009AB0 NotifyUnicastIpAddressChange
        229   E4 00023480 OpenCompartment
        230   E5 0000F300 ParseNetworkString
        231   E6 0001FC60 PfAddFiltersToInterface
        232   E7 0001FC60 PfAddGlobalFilterToInterface
        233   E8 0001FC60 PfBindInterfaceToIPAddress
        234   E9 0001FC60 PfBindInterfaceToIndex
        235   EA 0001FC60 PfCreateInterface
        236   EB 0001FC60 PfDeleteInterface
        237   EC 0001FC60 PfDeleteLog
        238   ED 0001FC60 PfGetInterfaceStatistics
        239   EE 0001FC60 PfMakeLog
        240   EF 0001FC60 PfRebindFilters
        241   F0 0001FC60 PfRemoveFilterHandles
        242   F1 0001FC60 PfRemoveFiltersFromInterface
        243   F2 0001FC60 PfRemoveGlobalFilterFromInterface
        244   F3 0001FC60 PfSetLogBuffer
        245   F4 0001FC60 PfTestPacket
        246   F5 0001FC60 PfUnBindInterface
        247   F6 0000ED00 ResolveIpNetEntry2
        248   F7 0001F4E0 ResolveNeighbor
        249   F8 00010420 RestoreMediaSense
        250   F9 0001F4F0 SendARP
        251   FA 0001DF80 SetAdapterIpAddress
        252   FB 000235E0 SetCurrentThreadCompartmentId
        253   FC 00009D60 SetCurrentThreadCompartmentScope
        254   FD 0001D4B0 SetIfEntry
        255   FE 0001F5D0 SetIpForwardEntry
        256   FF 00025920 SetIpForwardEntry2
        257  100 00026F60 SetIpInterfaceEntry
        258  101 0001F5E0 SetIpNetEntry
        259  102 00026060 SetIpNetEntry2
        260  103 0001F5F0 SetIpStatistics
        261  104 0001F600 SetIpStatisticsEx
        262  105 0001F6E0 SetIpTTL
        263  106 00023630 SetJobCompartmentId
        264  107 00023690 SetNetworkInformation
        265  108 0000B0F0 SetPerTcp6ConnectionEStats
        266  109 000221B0 SetPerTcp6ConnectionStats
        267  10A 0000B1E0 SetPerTcpConnectionEStats
        268  10B 00022250 SetPerTcpConnectionStats
        269  10C 00023770 SetSessionCompartmentId
        270  10D 000222E0 SetTcpEntry
        271  10E 00025160 SetUnicastIpAddressEntry
        272  10F 0001F810 UnenableRouter
        273  110 00020690 do_echo_rep
        274  111 00020860 do_echo_req
        275  112 00023EE0 if_indextoname
        276  113 00023F30 if_nametoindex
        277  114 000209B0 register_icmp

  Summary

        1000 .data
        1000 .didat
        2000 .pdata
        A000 .rdata
        1000 .reloc
        1000 .rsrc
       27000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\kernel32.dll

File Type: DLL

  Section contains the following exports for KERNEL32.dll

    00000000 characteristics
    64099EB2 time date stamp Thu Mar  9 00:54:10 2023
        0.00 version
           1 ordinal base
        1596 number of functions
        1596 number of names

    ordinal hint RVA      name

          1    0          AcquireSRWLockExclusive (forwarded to NTDLL.RtlAcquireSRWLockExclusive)
          2    1          AcquireSRWLockShared (forwarded to NTDLL.RtlAcquireSRWLockShared)
          3    2 00021980 ActivateActCtx
          4    3 00019510 ActivateActCtxWorker
          5    4 00024640 AddAtomA
          6    5 00014870 AddAtomW
          7    6 000640D0 AddConsoleAliasA
          8    7 00064230 AddConsoleAliasW
          9    8          AddDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.AddDllDirectory)
         10    9 00043200 AddIntegrityLabelToBoundaryDescriptor
         11    A 00039410 AddLocalAlternateComputerNameA
         12    B 00039470 AddLocalAlternateComputerNameW
         13    C 000243C0 AddRefActCtx
         14    D 0001DD10 AddRefActCtxWorker
         15    E 00041F00 AddResourceAttributeAce
         16    F 00020D10 AddSIDToBoundaryDescriptor
         17   10 00041F10 AddScopedPolicyIDAce
         18   11 0003F0C0 AddSecureMemoryCacheCallback
         19   12          AddVectoredContinueHandler (forwarded to NTDLL.RtlAddVectoredContinueHandler)
         20   13          AddVectoredExceptionHandler (forwarded to NTDLL.RtlAddVectoredExceptionHandler)
         21   14 00018010 AdjustCalendarDate
         22   15 00026A20 AllocConsole
         23   16 00041F30 AllocateUserPhysicalPages
         24   17 00041F20 AllocateUserPhysicalPagesNuma
         25   18          AppXGetOSMaxVersionTested (forwarded to kernelbase.AppXGetOSMaxVersionTested)
         26   19 0004E830 ApplicationRecoveryFinished
         27   1A 0004E840 ApplicationRecoveryInProgress
         28   1B 00020C00 AreFileApisANSI
         29   1C 00016860 AssignProcessToJobObject
         30   1D 00026B00 AttachConsole
         31   1E 00037110 BackupRead
         32   1F 00037FD0 BackupSeek
         33   20 000382A0 BackupWrite
         34   21 00041FA0 BaseCheckAppcompatCache
         35   22 00041F40 BaseCheckAppcompatCacheEx
         36   23 00023920 BaseCheckAppcompatCacheExWorker
         37   24 00023920 BaseCheckAppcompatCacheWorker
         38   25 00019F70 BaseCheckElevation
         39   26 00041FB0 BaseCleanupAppcompatCacheSupport
         40   27 00024D30 BaseCleanupAppcompatCacheSupportWorker
         41   28 000487B0 BaseDestroyVDMEnvironment
         42   29 00012240 BaseDllReadWriteIniFile
         43   2A 00041FC0 BaseDumpAppcompatCache
         44   2B 000271A0 BaseDumpAppcompatCacheWorker
         45   2C 0001F160 BaseElevationPostProcessing
         46   2D 00041FD0 BaseFlushAppcompatCache
         47   2E 0006AD20 BaseFlushAppcompatCacheWorker
         48   2F 0001DC40 BaseFormatObjectAttributes
         49   30 000627D0 BaseFormatTimeOut
         50   31 00023680 BaseFreeAppCompatDataForProcessWorker
         51   32 0001FDB0 BaseGenerateAppCompatData
         52   33 00041FE0 BaseGetNamedObjectDirectory
         53   34 00041FF0 BaseInitAppcompatCacheSupport
         54   35 00024D30 BaseInitAppcompatCacheSupportWorker
         55   36 00023920 BaseIsAppcompatInfrastructureDisabled
         56   37 00023920 BaseIsAppcompatInfrastructureDisabledWorker
         57   38 000232D0 BaseIsDosApplication
         58   39 0006ADB0 BaseQueryModuleData
         59   3A 00020D50 BaseReadAppCompatDataForProcessWorker
         60   3B 00015000 BaseSetLastNTError
         61   3C 000110E0 BaseThreadInitThunk
         62   3D 00042000 BaseUpdateAppcompatCache
         63   3E 0006AD80 BaseUpdateAppcompatCacheWorker
         64   3F 00048AC0 BaseUpdateVDMEntry
         65   40 00062860 BaseVerifyUnicodeString
         66   41 0003C960 BaseWriteErrorElevationRequiredEvent
         67   42 00016B60 Basep8BitStringToDynamicUnicodeString
         68   43 000628C0 BasepAllocateActivationContextActivationBlock
         69   44 00062800 BasepAnsiStringToDynamicUnicodeString
         70   45 0001B930 BasepAppContainerEnvironmentExtension
         71   46 00023110 BasepAppXExtension
         72   47 0001A7A0 BasepCheckAppCompat
         73   48 0001F200 BasepCheckWebBladeHashes
         74   49 0001B430 BasepCheckWinSaferRestrictions
         75   4A 0000CFE0 BasepConstructSxsCreateProcessMessage
         76   4B 0001D410 BasepCopyEncryption
         77   4C 00062A30 BasepFreeActivationContextActivationBlock
         78   4D 0001D810 BasepFreeAppCompatData
         79   4E 0000B880 BasepGetAppCompatData
         80   4F 0001C950 BasepGetComputerNameFromNtPath
         81   50 0001A880 BasepGetExeArchType
         82   51 0001D8A0 BasepIsProcessAllowed
         83   52 00016450 BasepMapModuleHandle
         84   53 00011630 BasepNotifyLoadStringResource
         85   54 000239F0 BasepPostSuccessAppXExtension
         86   55 00023150 BasepProcessInvalidImage
         87   56 0000C2D0 BasepQueryAppCompat
         88   57 000239E0 BasepReleaseAppXContext
         89   58 0000A560 BasepReleaseSxsCreateProcessUtilityStruct
         90   59 000219B0 BasepReportFault
         91   5A 00022340 BasepSetFileEncryptionCompression
         92   5B 00039210 Beep
         93   5C 000544B0 BeginUpdateResourceA
         94   5D 00054510 BeginUpdateResourceW
         95   5E 00025A70 BindIoCompletionCallback
         96   5F 0004C260 BuildCommDCBA
         97   60 0004C290 BuildCommDCBAndTimeoutsA
         98   61 0004C2C0 BuildCommDCBAndTimeoutsW
         99   62 0004C330 BuildCommDCBW
        100   63 0003F970 CallNamedPipeA
        101   64 0003FA00 CallNamedPipeW
        102   65 00023A00 CallbackMayRunLong
        103   66 00026950 CalloutOnFiberStack
        104   67 00040B30 CancelDeviceWakeupRequest
        105   68 00023AC0 CancelIo
        106   69 00022FA0 CancelIoEx
        107   6A 00001420 CancelSynchronousIo
        108   6B          CancelThreadpoolIo (forwarded to NTDLL.TpCancelAsyncIoOperation)
        109   6C 0004EAC0 CancelTimerQueueTimer
        110   6D 00026120 CancelWaitableTimer
        111   6E          CeipIsOptedIn (forwarded to kernelbase.CeipIsOptedIn)
        112   6F 00023AD0 ChangeTimerQueueTimer
        113   70 0003DE80 CheckAllowDecryptedRemoteDestinationPolicy
        114   71 00019E40 CheckElevation
        115   72 0000C5F0 CheckElevationEnabled
        116   73 00043230 CheckForReadOnlyResource
        117   74 00023C30 CheckForReadOnlyResourceFilter
        118   75 00040520 CheckNameLegalDOS8Dot3A
        119   76 000405C0 CheckNameLegalDOS8Dot3W
        120   77 00023CD0 CheckRemoteDebuggerPresent
        121   78 00042010 CheckTokenCapability
        122   79 00042020 CheckTokenMembershipEx
        123   7A 00026800 ClearCommBreak
        124   7B 00026810 ClearCommError
        125   7C 00064B00 CloseConsoleHandle
        126   7D 000260E0 CloseHandle
        127   7E          ClosePackageInfo (forwarded to kernelbase.ClosePackageInfo)
        128   7F 00024A20 ClosePrivateNamespace
        129   80 00024D30 CloseProfileUserMapping
        130   81          CloseState (forwarded to kernelbase.CloseState)
        131   82          CloseThreadpool (forwarded to NTDLL.TpReleasePool)
        132   83          CloseThreadpoolCleanupGroup (forwarded to NTDLL.TpReleaseCleanupGroup)
        133   84          CloseThreadpoolCleanupGroupMembers (forwarded to NTDLL.TpReleaseCleanupGroupMembers)
        134   85          CloseThreadpoolIo (forwarded to NTDLL.TpReleaseIoCompletion)
        135   86          CloseThreadpoolTimer (forwarded to NTDLL.TpReleaseTimer)
        136   87          CloseThreadpoolWait (forwarded to NTDLL.TpReleaseWait)
        137   88          CloseThreadpoolWork (forwarded to NTDLL.TpReleaseWork)
        138   89 00022270 CmdBatNotification
        139   8A 00045F60 CommConfigDialogA
        140   8B 00045FF0 CommConfigDialogW
        141   8C 00054DC0 CompareCalendarDates
        142   8D 000262F0 CompareFileTime
        143   8E 000217C0 CompareStringA
        144   8F 00016CA0 CompareStringEx
        145   90 0001C380 CompareStringOrdinal
        146   91 0001E160 CompareStringW
        147   92 00023C20 ConnectNamedPipe
        148   93 00064BD0 ConsoleMenuControl
        149   94 00042030 ContinueDebugEvent
        150   95 00054E70 ConvertCalDateTimeToSystemTime
        151   96 00023B90 ConvertDefaultLocale
        152   97 00026960 ConvertFiberToThread
        153   98 00054F60 ConvertNLSDayOfWeekToWin32DayOfWeek
        154   99 000182A0 ConvertSystemTimeToCalDateTime
        155   9A 00026970 ConvertThreadToFiber
        156   9B 00026980 ConvertThreadToFiberEx
        157   9C 00042040 CopyContext
        158   9D 00042050 CopyFile2
        159   9E 0003DF50 CopyFileA
        160   9F 0003DFE0 CopyFileExA
        161   A0 000230F0 CopyFileExW
        162   A1 0003E090 CopyFileTransactedA
        163   A2 00025910 CopyFileTransactedW
        164   A3 00026940 CopyFileW
        165   A4 0003AA80 CopyLZFile
        166   A5 00023FD0 CreateActCtxA
        167   A6 000239D0 CreateActCtxW
        168   A7 00008F00 CreateActCtxWWorker
        169   A8 000433A0 CreateBoundaryDescriptorA
        170   A9 00020D00 CreateBoundaryDescriptorW
        171   AA 00026B10 CreateConsoleScreenBuffer
        172   AB 00026300 CreateDirectoryA
        173   AC 0003AE80 CreateDirectoryExA
        174   AD 00042060 CreateDirectoryExW
        175   AE 0003AF00 CreateDirectoryTransactedA
        176   AF 0003AFA0 CreateDirectoryTransactedW
        177   B0 00026310 CreateDirectoryW
        178   B1 00026130 CreateEventA
        179   B2 00026140 CreateEventExA
        180   B3 00026150 CreateEventExW
        181   B4 00026160 CreateEventW
        182   B5 00026990 CreateFiber
        183   B6 000269A0 CreateFiberEx
        184   B7 00026320 CreateFile2
        185   B8 00026330 CreateFileA
        186   B9 00016890 CreateFileMappingA
        187   BA          CreateFileMappingFromApp (forwarded to api-ms-win-core-memory-l1-1-1.CreateFileMappingFromApp)
        188   BB 0003D000 CreateFileMappingNumaA
        189   BC 00042070 CreateFileMappingNumaW
        190   BD 0001E190 CreateFileMappingW
        191   BE 0003E380 CreateFileTransactedA
        192   BF 0003E440 CreateFileTransactedW
        193   C0 00026340 CreateFileW
        194   C1 00042080 CreateHardLinkA
        195   C2 0004DF80 CreateHardLinkTransactedA
        196   C3 0004E020 CreateHardLinkTransactedW
        197   C4 00024CA0 CreateHardLinkW
        198   C5 0001F1F0 CreateIoCompletionPort
        199   C6 0004DA20 CreateJobObjectA
        200   C7 0001DA20 CreateJobObjectW
        201   C8 0004DA90 CreateJobSet
        202   C9 00016950 CreateMailslotA
        203   CA 000169C0 CreateMailslotW
        204   CB 000230D0 CreateMemoryResourceNotification
        205   CC 00026170 CreateMutexA
        206   CD 00026180 CreateMutexExA
        207   CE 00026190 CreateMutexExW
        208   CF 000261A0 CreateMutexW
        209   D0 0003FB90 CreateNamedPipeA
        210   D1 00023890 CreateNamedPipeW
        211   D2 00023100 CreatePipe
        212   D3 00043400 CreatePrivateNamespaceA
        213   D4 00023420 CreatePrivateNamespaceW
        214   D5 0001DD60 CreateProcessA
        215   D6 00042090 CreateProcessAsUserA
        216   D7 000207C0 CreateProcessAsUserW
        217   D8 00042100 CreateProcessInternalA
        218   D9 00042180 CreateProcessInternalW
        219   DA 0001E6D0 CreateProcessW
        220   DB 00042200 CreateRemoteThread
        221   DC          CreateRemoteThreadEx (forwarded to api-ms-win-core-processthreads-l1-1-0.CreateRemoteThreadEx)
        222   DD 00016BC0 CreateSemaphoreA
        223   DE 00016BF0 CreateSemaphoreExA
        224   DF 000261B0 CreateSemaphoreExW
        225   E0 000261C0 CreateSemaphoreW
        226   E1 0003D280 CreateSymbolicLinkA
        227   E2 0003D320 CreateSymbolicLinkTransactedA
        228   E3 0003D3D0 CreateSymbolicLinkTransactedW
        229   E4 00042250 CreateSymbolicLinkW
        230   E5 0004D1B0 CreateTapePartition
        231   E6 0001C4A0 CreateThread
        232   E7 00023930 CreateThreadpool
        233   E8 00023A80 CreateThreadpoolCleanupGroup
        234   E9 00024850 CreateThreadpoolIo
        235   EA 0001F8C0 CreateThreadpoolTimer
        236   EB 000233D0 CreateThreadpoolWait
        237   EC 00023010 CreateThreadpoolWork
        238   ED 00023B70 CreateTimerQueue
        239   EE 0001DD20 CreateTimerQueueTimer
        240   EF 00027400 CreateToolhelp32Snapshot
        241   F0 0004BF30 CreateUmsCompletionList
        242   F1 0004BF60 CreateUmsThreadContext
        243   F2 00024440 CreateWaitableTimerA
        244   F3 00024470 CreateWaitableTimerExA
        245   F4 000261D0 CreateWaitableTimerExW
        246   F5 00023720 CreateWaitableTimerW
        247   F6          CtrlRoutine (forwarded to kernelbase.CtrlRoutine)
        248   F7 00021990 DeactivateActCtx
        249   F8 00019560 DeactivateActCtxWorker
        250   F9 00042270 DebugActiveProcess
        251   FA 00042260 DebugActiveProcessStop
        252   FB 00042280 DebugBreak
        253   FC 0003AD50 DebugBreakProcess
        254   FD 0003AD80 DebugSetProcessKillOnExit
        255   FE          DecodePointer (forwarded to NTDLL.RtlDecodePointer)
        256   FF          DecodeSystemPointer (forwarded to NTDLL.RtlDecodeSystemPointer)
        257  100 0003C640 DefineDosDeviceA
        258  101 00026350 DefineDosDeviceW
        259  102 00042290 DelayLoadFailureHook
        260  103 000147E0 DeleteAtom
        261  104 00020CF0 DeleteBoundaryDescriptor
        262  105          DeleteCriticalSection (forwarded to NTDLL.RtlDeleteCriticalSection)
        263  106 000269B0 DeleteFiber
        264  107 00026360 DeleteFileA
        265  108 0003D480 DeleteFileTransactedA
        266  109 000259C0 DeleteFileTransactedW
        267  10A 00026370 DeleteFileW
        268  10B          DeleteProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.DeleteProcThreadAttributeList)
        269  10C 000422A0 DeleteSynchronizationBarrier
        270  10D 00023AF0 DeleteTimerQueue
        271  10E 00023BD0 DeleteTimerQueueEx
        272  10F 0001F5E0 DeleteTimerQueueTimer
        273  110 0004BF90 DeleteUmsCompletionList
        274  111 0004BFC0 DeleteUmsThreadContext
        275  112 0004A440 DeleteVolumeMountPointA
        276  113 00062A80 DeleteVolumeMountPointW
        277  114 0004BFF0 DequeueUmsCompletionListItems
        278  115 00017060 DeviceIoControl
        279  116 00022D40 DisableThreadLibraryCalls
        280  117 0004EB40 DisableThreadProfiling
        281  118          DisassociateCurrentThreadFromCallback (forwarded to NTDLL.TpDisassociateCallback)
        282  119          DiscardVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.DiscardVirtualMemory)
        283  11A 000243F0 DisconnectNamedPipe
        284  11B 0003A190 DnsHostnameToComputerNameA
        285  11C 000422B0 DnsHostnameToComputerNameExW
        286  11D 0001DF10 DnsHostnameToComputerNameW
        287  11E 00014890 DosDateTimeToFileTime
        288  11F 00041BB0 DosPathToSessionPathA
        289  120 00041D80 DosPathToSessionPathW
        290  121 00064B10 DuplicateConsoleHandle
        291  122 0003E5C0 DuplicateEncryptionInfoFileExt
        292  123 000260F0 DuplicateHandle
        293  124 0004EB70 EnableThreadProfiling
        294  125          EncodePointer (forwarded to NTDLL.RtlEncodePointer)
        295  126          EncodeSystemPointer (forwarded to NTDLL.RtlEncodeSystemPointer)
        296  127 00054720 EndUpdateResourceA
        297  128 00054730 EndUpdateResourceW
        298  129          EnterCriticalSection (forwarded to NTDLL.RtlEnterCriticalSection)
        299  12A 000422C0 EnterSynchronizationBarrier
        300  12B 0004C040 EnterUmsSchedulingMode
        301  12C 000559D0 EnumCalendarInfoA
        302  12D 00055A60 EnumCalendarInfoExA
        303  12E 00021400 EnumCalendarInfoExEx
        304  12F 000422D0 EnumCalendarInfoExW
        305  130 000422E0 EnumCalendarInfoW
        306  131 00055AF0 EnumDateFormatsA
        307  132 00055B50 EnumDateFormatsExA
        308  133 000422F0 EnumDateFormatsExEx
        309  134 00042300 EnumDateFormatsExW
        310  135 00042310 EnumDateFormatsW
        311  136 00055BB0 EnumLanguageGroupLocalesA
        312  137 00042320 EnumLanguageGroupLocalesW
        313  138 0003F5F0 EnumResourceLanguagesA
        314  139 00042330 EnumResourceLanguagesExA
        315  13A 00042350 EnumResourceLanguagesExW
        316  13B 00024D00 EnumResourceLanguagesW
        317  13C 0003F620 EnumResourceNamesA
        318  13D 00042370 EnumResourceNamesExA
        319  13E 00042390 EnumResourceNamesExW
        320  13F 000242A0 EnumResourceNamesW
        321  140 0003F650 EnumResourceTypesA
        322  141 000423B0 EnumResourceTypesExA
        323  142 000423D0 EnumResourceTypesExW
        324  143 0003F670 EnumResourceTypesW
        325  144 00055BD0 EnumSystemCodePagesA
        326  145 000423F0 EnumSystemCodePagesW
        327  146 0003F0F0 EnumSystemFirmwareTables
        328  147 0005EC90 EnumSystemGeoID
        329  148 00055BE0 EnumSystemLanguageGroupsA
        330  149 00024D90 EnumSystemLanguageGroupsW
        331  14A 00042400 EnumSystemLocalesA
        332  14B 00042410 EnumSystemLocalesEx
        333  14C 00042420 EnumSystemLocalesW
        334  14D 00055BF0 EnumTimeFormatsA
        335  14E 00023A60 EnumTimeFormatsEx
        336  14F 00042430 EnumTimeFormatsW
        337  150 00055C60 EnumUILanguagesA
        338  151 00024D60 EnumUILanguagesW
        339  152 0003A270 EnumerateLocalComputerNamesA
        340  153 0003A380 EnumerateLocalComputerNamesW
        341  154 0004D210 EraseTape
        342  155 00026820 EscapeCommFunction
        343  156 0004C070 ExecuteUmsThread
        344  157 0001F700 ExitProcess
        345  158          ExitThread (forwarded to NTDLL.RtlExitUserThread)
        346  159 00048BC0 ExitVDM
        347  15A 00025B70 ExpandEnvironmentStringsA
        348  15B 0001EC10 ExpandEnvironmentStringsW
        349  15C 000642A0 ExpungeConsoleCommandHistoryA
        350  15D 00064320 ExpungeConsoleCommandHistoryW
        351  15E 00042440 FatalAppExitA
        352  15F 00042450 FatalAppExitW
        353  160 0001F700 FatalExit
        354  161 00014DC0 FileTimeToDosDateTime
        355  162 00026380 FileTimeToLocalFileTime
        356  163 000267C0 FileTimeToSystemTime
        357  164 00026B20 FillConsoleOutputAttribute
        358  165 00026B30 FillConsoleOutputCharacterA
        359  166 00026B40 FillConsoleOutputCharacterW
        360  167 0001C4F0 FindActCtxSectionGuid
        361  168 00014E80 FindActCtxSectionGuidWorker
        362  169 0004E6F0 FindActCtxSectionStringA
        363  16A 000230A0 FindActCtxSectionStringW
        364  16B 00014670 FindActCtxSectionStringWWorker
        365  16C 000147C0 FindAtomA
        366  16D 00014C40 FindAtomW
        367  16E 00026390 FindClose
        368  16F 000263A0 FindCloseChangeNotification
        369  170 000263B0 FindFirstChangeNotificationA
        370  171 000263C0 FindFirstChangeNotificationW
        371  172 000263D0 FindFirstFileA
        372  173 000263E0 FindFirstFileExA
        373  174 000263F0 FindFirstFileExW
        374  175 0003C9B0 FindFirstFileNameTransactedW
        375  176 00026400 FindFirstFileNameW
        376  177 0003CA70 FindFirstFileTransactedA
        377  178 0003CB40 FindFirstFileTransactedW
        378  179 00026410 FindFirstFileW
        379  17A 0003CC10 FindFirstStreamTransactedW
        380  17B          FindFirstStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindFirstStreamW)
        381  17C 0004A480 FindFirstVolumeA
        382  17D 0004A600 FindFirstVolumeMountPointA
        383  17E 0004A7D0 FindFirstVolumeMountPointW
        384  17F 0001E1E0 FindFirstVolumeW
        385  180 00042460 FindNLSString
        386  181 00018AB0 FindNLSStringEx
        387  182 00026420 FindNextChangeNotification
        388  183 00026430 FindNextFileA
        389  184 00026440 FindNextFileNameW
        390  185 00026450 FindNextFileW
        391  186          FindNextStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindNextStreamW)
        392  187 0004A9F0 FindNextVolumeA
        393  188 0004AB60 FindNextVolumeMountPointA
        394  189 0004B1A0 FindNextVolumeMountPointW
        395  18A 0001E380 FindNextVolumeW
        396  18B          FindPackagesByPackageFamily (forwarded to kernelbase.FindPackagesByPackageFamily)
        397  18C 00016270 FindResourceA
        398  18D 00016290 FindResourceExA
        399  18E 0001EEB0 FindResourceExW
        400  18F 00020CE0 FindResourceW
        401  190 00042470 FindStringOrdinal
        402  191 000236C0 FindVolumeClose
        403  192 0004B1B0 FindVolumeMountPointClose
        404  193 00020C40 FlsAlloc
        405  194 00022F60 FlsFree
        406  195 00017050 FlsGetValue
        407  196 0001E180 FlsSetValue
        408  197 00026B50 FlushConsoleInputBuffer
        409  198 00026460 FlushFileBuffers
        410  199 0001C420 FlushInstructionCache
        411  19A          FlushProcessWriteBuffers (forwarded to NTDLL.NtFlushProcessWriteBuffers)
        412  19B 00023AE0 FlushViewOfFile
        413  19C 00055C70 FoldStringA
        414  19D 00042480 FoldStringW
        415  19E          FormatApplicationUserModelId (forwarded to kernelbase.FormatApplicationUserModelId)
        416  19F 00024340 FormatMessageA
        417  1A0 0001F260 FormatMessageW
        418  1A1 00026B60 FreeConsole
        419  1A2 00021660 FreeEnvironmentStringsA
        420  1A3 0001FD80 FreeEnvironmentStringsW
        421  1A4 0001F380 FreeLibrary
        422  1A5 00021930 FreeLibraryAndExitThread
        423  1A6          FreeLibraryWhenCallbackReturns (forwarded to NTDLL.TpCallbackUnloadDllOnCompletion)
        424  1A7 0004DAC0 FreeMemoryJobObject
        425  1A8 00024A10 FreeResource
        426  1A9 00042490 FreeUserPhysicalPages
        427  1AA 00026B70 GenerateConsoleCtrlEvent
        428  1AB 00019760 GetACP
        429  1AC 0001F720 GetActiveProcessorCount
        430  1AD 000013B0 GetActiveProcessorGroupCount
        431  1AE 000424A0 GetAppContainerAce
        432  1AF 00022F70 GetAppContainerNamedObjectPath
        433  1B0 000424B0 GetApplicationRecoveryCallback
        434  1B1 00020240 GetApplicationRecoveryCallbackWorker
        435  1B2 000424C0 GetApplicationRestartSettings
        436  1B3 000200F0 GetApplicationRestartSettingsWorker
        437  1B4          GetApplicationUserModelId (forwarded to kernelbase.GetApplicationUserModelId)
        438  1B5 0003B160 GetAtomNameA
        439  1B6 00014340 GetAtomNameW
        440  1B7 00048C50 GetBinaryType
        441  1B8 00048C50 GetBinaryTypeA
        442  1B9 00048CA0 GetBinaryTypeW
        443  1BA 0001DE70 GetCPInfo
        444  1BB 00055EE0 GetCPInfoExA
        445  1BC 000424D0 GetCPInfoExW
        446  1BD 000424E0 GetCachedSigningLevel
        447  1BE 00054F90 GetCalendarDateFormat
        448  1BF 000183E0 GetCalendarDateFormatEx
        449  1C0 000181C0 GetCalendarDaysInMonth
        450  1C1 00055240 GetCalendarDifferenceInDays
        451  1C2 00055FB0 GetCalendarInfoA
        452  1C3 000267D0 GetCalendarInfoEx
        453  1C4 000267E0 GetCalendarInfoW
        454  1C5 00055380 GetCalendarMonthsInYear
        455  1C6 00017F50 GetCalendarSupportedDateRange
        456  1C7 00055450 GetCalendarWeekNumber
        457  1C8 0004E790 GetComPlusPackageInstallStatus
        458  1C9 00026830 GetCommConfig
        459  1CA 00026840 GetCommMask
        460  1CB 00026850 GetCommModemStatus
        461  1CC 00026860 GetCommProperties
        462  1CD 00026870 GetCommState
        463  1CE 00026880 GetCommTimeouts
        464  1CF 00020AB0 GetCommandLineA
        465  1D0 00020AC0 GetCommandLineW
        466  1D1 000424F0 GetCompressedFileSizeA
        467  1D2 0003D4D0 GetCompressedFileSizeTransactedA
        468  1D3 0003D530 GetCompressedFileSizeTransactedW
        469  1D4 00023A40 GetCompressedFileSizeW
        470  1D5 0001CAD0 GetComputerNameA
        471  1D6 00042500 GetComputerNameExA
        472  1D7 000234D0 GetComputerNameExW
        473  1D8 0001CC40 GetComputerNameW
        474  1D9 00064330 GetConsoleAliasA
        475  1DA 00064370 GetConsoleAliasExesA
        476  1DB 00064400 GetConsoleAliasExesLengthA
        477  1DC 00064460 GetConsoleAliasExesLengthW
        478  1DD 00064470 GetConsoleAliasExesW
        479  1DE 00064570 GetConsoleAliasW
        480  1DF 000645C0 GetConsoleAliasesA
        481  1E0 00064670 GetConsoleAliasesLengthA
        482  1E1 00064710 GetConsoleAliasesLengthW
        483  1E2 00064720 GetConsoleAliasesW
        484  1E3 00026A30 GetConsoleCP
        485  1E4 000650F0 GetConsoleCharType
        486  1E5 00064730 GetConsoleCommandHistoryA
        487  1E6 000647F0 GetConsoleCommandHistoryLengthA
        488  1E7 00064890 GetConsoleCommandHistoryLengthW
        489  1E8 000648A0 GetConsoleCommandHistoryW
        490  1E9 00026B80 GetConsoleCursorInfo
        491  1EA 00065150 GetConsoleCursorMode
        492  1EB 00064C30 GetConsoleDisplayMode
        493  1EC 00065440 GetConsoleFontInfo
        494  1ED 000654E0 GetConsoleFontSize
        495  1EE 00064C80 GetConsoleHardwareState
        496  1EF 00065530 GetConsoleHistoryInfo
        497  1F0          GetConsoleInputExeNameA (forwarded to kernelbase.GetConsoleInputExeNameA)
        498  1F1          GetConsoleInputExeNameW (forwarded to kernelbase.GetConsoleInputExeNameW)
        499  1F2 00064B60 GetConsoleInputWaitHandle
        500  1F3 000655B0 GetConsoleKeyboardLayoutNameA
        501  1F4 000655D0 GetConsoleKeyboardLayoutNameW
        502  1F5 00026A40 GetConsoleMode
        503  1F6 000651C0 GetConsoleNlsMode
        504  1F7 000648B0 GetConsoleOriginalTitleA
        505  1F8 000648D0 GetConsoleOriginalTitleW
        506  1F9 00026A50 GetConsoleOutputCP
        507  1FA 00065680 GetConsoleProcessList
        508  1FB 00026B90 GetConsoleScreenBufferInfo
        509  1FC 00026BA0 GetConsoleScreenBufferInfoEx
        510  1FD 00065710 GetConsoleSelectionInfo
        511  1FE 000648F0 GetConsoleTitleA
        512  1FF 00026BB0 GetConsoleTitleW
        513  200 00021110 GetConsoleWindow
        514  201 000561E0 GetCurrencyFormatA
        515  202 00042510 GetCurrencyFormatEx
        516  203 00042520 GetCurrencyFormatW
        517  204 000242D0 GetCurrentActCtx
        518  205 0001B180 GetCurrentActCtxWorker
        519  206          GetCurrentApplicationUserModelId (forwarded to kernelbase.GetCurrentApplicationUserModelId)
        520  207 00065770 GetCurrentConsoleFont
        521  208 00021090 GetCurrentConsoleFontEx
        522  209 00023980 GetCurrentDirectoryA
        523  20A 00021800 GetCurrentDirectoryW
        524  20B          GetCurrentPackageFamilyName (forwarded to kernelbase.GetCurrentPackageFamilyName)
        525  20C          GetCurrentPackageFullName (forwarded to kernelbase.GetCurrentPackageFullName)
        526  20D          GetCurrentPackageId (forwarded to kernelbase.GetCurrentPackageId)
        527  20E          GetCurrentPackageInfo (forwarded to kernelbase.GetCurrentPackageInfo)
        528  20F          GetCurrentPackagePath (forwarded to kernelbase.GetCurrentPackagePath)
        529  210 00018B10 GetCurrentProcess
        530  211 00016D00 GetCurrentProcessId
        531  212          GetCurrentProcessorNumber (forwarded to NTDLL.RtlGetCurrentProcessorNumber)
        532  213          GetCurrentProcessorNumberEx (forwarded to NTDLL.RtlGetCurrentProcessorNumberEx)
        533  214 00017100 GetCurrentThread
        534  215 00016CC0 GetCurrentThreadId
        535  216          GetCurrentThreadStackLimits (forwarded to api-ms-win-core-processthreads-l1-1-0.GetCurrentThreadStackLimits)
        536  217 0004C0A0 GetCurrentUmsThread
        537  218 00024630 GetDateFormatA
        538  219 000244E0 GetDateFormatAWorker
        539  21A 00042530 GetDateFormatEx
        540  21B 000234E0 GetDateFormatW
        541  21C 0000F2D0 GetDateFormatWWorker
        542  21D 00046220 GetDefaultCommConfigA
        543  21E 000462B0 GetDefaultCommConfigW
        544  21F 00040B50 GetDevicePowerState
        545  220 00026470 GetDiskFreeSpaceA
        546  221 00026480 GetDiskFreeSpaceExA
        547  222 00026490 GetDiskFreeSpaceExW
        548  223 000264A0 GetDiskFreeSpaceW
        549  224 0003F690 GetDllDirectoryA
        550  225 00024200 GetDllDirectoryW
        551  226 000264B0 GetDriveTypeA
        552  227 000264C0 GetDriveTypeW
        553  228 00056E40 GetDurationFormat
        554  229 00042540 GetDurationFormatEx
        555  22A 00023B20 GetDynamicTimeZoneInformation
        556  22B 00023C60 GetEnabledXStateFeatures
        557  22C 0003E6A0 GetEncryptedFileVersionExt
        558  22D 00021650 GetEnvironmentStrings
        559  22E 000267F0 GetEnvironmentStringsA
        560  22F 0001FD70 GetEnvironmentStringsW
        561  230 0001F590 GetEnvironmentVariableA
        562  231 0001DD30 GetEnvironmentVariableW
        563  232 00042550 GetEraNameCountedString
        564  233 00023CF0 GetErrorMode
        565  234 0001EC40 GetExitCodeProcess
        566  235 00020CD0 GetExitCodeThread
        567  236 00045410 GetExpandedNameA
        568  237 00045510 GetExpandedNameW
        569  238 000264D0 GetFileAttributesA
        570  239 000264E0 GetFileAttributesExA
        571  23A 000264F0 GetFileAttributesExW
        572  23B 0003D5D0 GetFileAttributesTransactedA
        573  23C 0003D630 GetFileAttributesTransactedW
        574  23D 00026500 GetFileAttributesW
        575  23E 0003CCD0 GetFileBandwidthReservation
        576  23F 00026510 GetFileInformationByHandle
        577  240 00023C00 GetFileInformationByHandleEx
        578  241 00042560 GetFileMUIInfo
        579  242 00022FC0 GetFileMUIPath
        580  243 00026520 GetFileSize
        581  244 00026530 GetFileSizeEx
        582  245 00026540 GetFileTime
        583  246 00026550 GetFileType
        584  247 00026560 GetFinalPathNameByHandleA
        585  248 00026570 GetFinalPathNameByHandleW
        586  249 0003EDB0 GetFirmwareEnvironmentVariableA
        587  24A 0003EDD0 GetFirmwareEnvironmentVariableExA
        588  24B 00024AB0 GetFirmwareEnvironmentVariableExW
        589  24C 00024A90 GetFirmwareEnvironmentVariableW
        590  24D 000392A0 GetFirmwareType
        591  24E 00026580 GetFullPathNameA
        592  24F 0003AB90 GetFullPathNameTransactedA
        593  250 0003AC50 GetFullPathNameTransactedW
        594  251 00026590 GetFullPathNameW
        595  252 00056590 GetGeoInfoA
        596  253 00017120 GetGeoInfoW
        597  254 00026100 GetHandleInformation
        598  255 00042570 GetLargePageMinimum
        599  256 00026BC0 GetLargestConsoleWindowSize
        600  257 00016CF0 GetLastError
        601  258 0001F1D0 GetLocalTime
        602  259 0001EEA0 GetLocaleInfoA
        603  25A 00020CB0 GetLocaleInfoEx
        604  25B 00020BF0 GetLocaleInfoW
        605  25C 00018BA0 GetLogicalDriveStringsA
        606  25D 000265A0 GetLogicalDriveStringsW
        607  25E 00018C60 GetLogicalDrives
        608  25F 00021950 GetLogicalProcessorInformation
        609  260          GetLogicalProcessorInformationEx (forwarded to api-ms-win-core-sysinfo-l1-1-0.GetLogicalProcessorInformationEx)
        610  261 00063770 GetLongPathNameA
        611  262 00048FD0 GetLongPathNameTransactedA
        612  263 00049080 GetLongPathNameTransactedW
        613  264 00017750 GetLongPathNameW
        614  265 0003F4F0 GetMailslotInfo
        615  266 00040DE0 GetMaximumProcessorCount
        616  267 00024A30 GetMaximumProcessorGroupCount
        617  268 00042580 GetMemoryErrorHandlingCapabilities
        618  269 00021610 GetModuleFileNameA
        619  26A 0001F490 GetModuleFileNameW
        620  26B 0001EEC0 GetModuleHandleA
        621  26C 00021960 GetModuleHandleExA
        622  26D 0001FD10 GetModuleHandleExW
        623  26E 0001EBA0 GetModuleHandleW
        624  26F 00024D50 GetNLSVersion
        625  270 00042590 GetNLSVersionEx
        626  271 000425A0 GetNamedPipeAttribute
        627  272 0003FC30 GetNamedPipeClientComputerNameA
        628  273 000425B0 GetNamedPipeClientComputerNameW
        629  274 0003FD60 GetNamedPipeClientProcessId
        630  275 0003FDA0 GetNamedPipeClientSessionId
        631  276 0003FDF0 GetNamedPipeHandleStateA
        632  277 000425C0 GetNamedPipeHandleStateW
        633  278          GetNamedPipeInfo (forwarded to api-ms-win-core-namedpipe-l1-2-1.GetNamedPipeInfo)
        634  279 0003FF50 GetNamedPipeServerProcessId
        635  27A 0003FF90 GetNamedPipeServerSessionId
        636  27B 00023140 GetNativeSystemInfo
        637  27C 0004C0D0 GetNextUmsListItem
        638  27D 00049130 GetNextVDMCommand
        639  27E 000401F0 GetNumaAvailableMemoryNode
        640  27F 000258A0 GetNumaAvailableMemoryNodeEx
        641  280 00023440 GetNumaHighestNodeNumber
        642  281 00040200 GetNumaNodeNumberFromHandle
        643  282 00040250 GetNumaNodeProcessorMask
        644  283 00025B40 GetNumaNodeProcessorMaskEx
        645  284 000251C0 GetNumaProcessorNode
        646  285 00025210 GetNumaProcessorNodeEx
        647  286 000402D0 GetNumaProximityNode
        648  287 00040300 GetNumaProximityNodeEx
        649  288 0001C520 GetNumberFormatA
        650  289 000425D0 GetNumberFormatEx
        651  28A 00001100 GetNumberFormatW
        652  28B 000657E0 GetNumberOfConsoleFonts
        653  28C 00026A60 GetNumberOfConsoleInputEvents
        654  28D 00065830 GetNumberOfConsoleMouseButtons
        655  28E 00025B50 GetOEMCP
        656  28F 0001C3F0 GetOverlappedResult
        657  290          GetOverlappedResultEx (forwarded to api-ms-win-core-io-l1-1-1.GetOverlappedResultEx)
        658  291          GetPackageApplicationIds (forwarded to kernelbase.GetPackageApplicationIds)
        659  292          GetPackageFamilyName (forwarded to kernelbase.GetPackageFamilyName)
        660  293          GetPackageFullName (forwarded to kernelbase.GetPackageFullName)
        661  294          GetPackageId (forwarded to kernelbase.GetPackageId)
        662  295          GetPackageInfo (forwarded to kernelbase.GetPackageInfo)
        663  296          GetPackagePath (forwarded to kernelbase.GetPackagePath)
        664  297          GetPackagePathByFullName (forwarded to kernelbase.GetPackagePathByFullName)
        665  298          GetPackagesByPackageFamily (forwarded to kernelbase.GetPackagesByPackageFamily)
        666  299 00023C10 GetPhysicallyInstalledSystemMemory
        667  29A 000237E0 GetPriorityClass
        668  29B 000167E0 GetPrivateProfileIntA
        669  29C 00016100 GetPrivateProfileIntW
        670  29D 00024DC0 GetPrivateProfileSectionA
        671  29E 0003BE80 GetPrivateProfileSectionNamesA
        672  29F 0003BEB0 GetPrivateProfileSectionNamesW
        673  2A0 00015FA0 GetPrivateProfileSectionW
        674  2A1 000166C0 GetPrivateProfileStringA
        675  2A2 000141D0 GetPrivateProfileStringW
        676  2A3 0003BEE0 GetPrivateProfileStructA
        677  2A4 0003C060 GetPrivateProfileStructW
        678  2A5 0001B2C0 GetProcAddress
        679  2A6 00019C90 GetProcessAffinityMask
        680  2A7 00040E90 GetProcessDEPPolicy
        681  2A8          GetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetProcessDefaultCpuSets)
        682  2A9 000425E0 GetProcessGroupAffinity
        683  2AA 000425F0 GetProcessHandleCount
        684  2AB 00018A20 GetProcessHeap
        685  2AC 00042600 GetProcessHeaps
        686  2AD 0001F1B0 GetProcessId
        687  2AE 00023BF0 GetProcessIdOfThread
        688  2AF 000260A0 GetProcessInformation
        689  2B0 00023460 GetProcessIoCounters
        690  2B1          GetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.GetProcessMitigationPolicy)
        691  2B2 00042610 GetProcessPreferredUILanguages
        692  2B3 00042620 GetProcessPriorityBoost
        693  2B4 00042630 GetProcessShutdownParameters
        694  2B5 000191F0 GetProcessTimes
        695  2B6 00023C50 GetProcessVersion
        696  2B7 0004EA70 GetProcessWorkingSetSize
        697  2B8 00042640 GetProcessWorkingSetSizeEx
        698  2B9          GetProcessorSystemCycleTime (forwarded to api-ms-win-core-sysinfo-l1-2-2.GetProcessorSystemCycleTime)
        699  2BA 00023990 GetProductInfo
        700  2BB 00016850 GetProfileIntA
        701  2BC 00016260 GetProfileIntW
        702  2BD 0003C210 GetProfileSectionA
        703  2BE 00024CF0 GetProfileSectionW
        704  2BF 0003C220 GetProfileStringA
        705  2C0 0003C250 GetProfileStringW
        706  2C1 00018B20 GetQueuedCompletionStatus
        707  2C2 00001110 GetQueuedCompletionStatusEx
        708  2C3 00049A90 GetShortPathNameA
        709  2C4 000172C0 GetShortPathNameW
        710  2C5          GetStagedPackagePathByFullName (forwarded to kernelbase.GetStagedPackagePathByFullName)
        711  2C6 0001EF10 GetStartupInfoA
        712  2C7 0001F570 GetStartupInfoW
        713  2C8          GetStateFolder (forwarded to kernelbase.GetStateFolder)
        714  2C9 0001EC30 GetStdHandle
        715  2CA 00042650 GetStringScripts
        716  2CB 00022B50 GetStringTypeA
        717  2CC 00022B50 GetStringTypeExA
        718  2CD 00024620 GetStringTypeExW
        719  2CE 0001F510 GetStringTypeW
        720  2CF          GetSystemAppDataKey (forwarded to kernelbase.GetSystemAppDataKey)
        721  2D0          GetSystemCpuSetInformation (forwarded to api-ms-win-core-processthreads-l1-1-3.GetSystemCpuSetInformation)
        722  2D1 00040EE0 GetSystemDEPPolicy
        723  2D2 0001F4E0 GetSystemDefaultLCID
        724  2D3 000236B0 GetSystemDefaultLangID
        725  2D4 00042660 GetSystemDefaultLocaleName
        726  2D5 00023630 GetSystemDefaultUILanguage
        727  2D6 00021670 GetSystemDirectoryA
        728  2D7 0001B210 GetSystemDirectoryW
        729  2D8 00042670 GetSystemFileCacheSize
        730  2D9 000239A0 GetSystemFirmwareTable
        731  2DA 0001FD30 GetSystemInfo
        732  2DB 0001C0B0 GetSystemPowerStatus
        733  2DC 00042680 GetSystemPreferredUILanguages
        734  2DD 00040F20 GetSystemRegistryQuota
        735  2DE 0001B1C0 GetSystemTime
        736  2DF 00022D50 GetSystemTimeAdjustment
        737  2E0 00019D10 GetSystemTimeAsFileTime
        738  2E1 000267B0 GetSystemTimePreciseAsFileTime
        739  2E2 00025410 GetSystemTimes
        740  2E3 00042690 GetSystemWindowsDirectoryA
        741  2E4 00013D50 GetSystemWindowsDirectoryW
        742  2E5 00026920 GetSystemWow64DirectoryA
        743  2E6 00026930 GetSystemWow64DirectoryW
        744  2E7 0004D250 GetTapeParameters
        745  2E8 0004D2B0 GetTapePosition
        746  2E9 0004D340 GetTapeStatus
        747  2EA 000265B0 GetTempFileNameA
        748  2EB 000265C0 GetTempFileNameW
        749  2EC 000265D0 GetTempPathA
        750  2ED 000265E0 GetTempPathW
        751  2EE 000218C0 GetThreadContext
        752  2EF 000426A0 GetThreadErrorMode
        753  2F0 000426B0 GetThreadGroupAffinity
        754  2F1 000426C0 GetThreadIOPendingFlag
        755  2F2 00023620 GetThreadId
        756  2F3 000426D0 GetThreadIdealProcessorEx
        757  2F4 000260B0 GetThreadInformation
        758  2F5 0001C410 GetThreadLocale
        759  2F6 0001EE90 GetThreadPreferredUILanguages
        760  2F7 0001B1D0 GetThreadPriority
        761  2F8 000426E0 GetThreadPriorityBoost
        762  2F9          GetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetThreadSelectedCpuSets)
        763  2FA 0003ADF0 GetThreadSelectorEntry
        764  2FB 00019770 GetThreadTimes
        765  2FC 00001430 GetThreadUILanguage
        766  2FD 00016D30 GetTickCount
        767  2FE 00018B30 GetTickCount64
        768  2FF 000252C0 GetTimeFormatA
        769  300 00024E50 GetTimeFormatAWorker
        770  301 000426F0 GetTimeFormatEx
        771  302 00023650 GetTimeFormatW
        772  303 00012F00 GetTimeFormatWWorker
        773  304 0001F500 GetTimeZoneInformation
        774  305 00023CE0 GetTimeZoneInformationForYear
        775  306 00042700 GetUILanguageInfo
        776  307 0004C100 GetUmsCompletionListEvent
        777  308 0004C130 GetUmsSystemThreadInformation
        778  309 0001F270 GetUserDefaultLCID
        779  30A 00024D70 GetUserDefaultLangID
        780  30B 000230E0 GetUserDefaultLocaleName
        781  30C 00023500 GetUserDefaultUILanguage
        782  30D 00022B60 GetUserGeoID
        783  30E 00023670 GetUserPreferredUILanguages
        784  30F 00049CF0 GetVDMCurrentDirectories
        785  310 00022910 GetVersion
        786  311 00021910 GetVersionExA
        787  312 0001B2B0 GetVersionExW
        788  313 000265F0 GetVolumeInformationA
        789  314 00026600 GetVolumeInformationByHandleW
        790  315 00026610 GetVolumeInformationW
        791  316 00025720 GetVolumeNameForVolumeMountPointA
        792  317 00020930 GetVolumeNameForVolumeMountPointW
        793  318 0004B210 GetVolumePathNameA
        794  319 0000DE90 GetVolumePathNameW
        795  31A 0004B3D0 GetVolumePathNamesForVolumeNameA
        796  31B 0001E7A0 GetVolumePathNamesForVolumeNameW
        797  31C 00024D80 GetWindowsDirectoryA
        798  31D 00023450 GetWindowsDirectoryW
        799  31E 0001F1E0 GetWriteWatch
        800  31F 000239B0 GetXStateFeaturesMask
        801  320 00016240 GlobalAddAtomA
        802  321 0003B190 GlobalAddAtomExA
        803  322 00014320 GlobalAddAtomExW
        804  323 00014960 GlobalAddAtomW
        805  324 0001C090 GlobalAlloc
        806  325 0003F2B0 GlobalCompact
        807  326 000147F0 GlobalDeleteAtom
        808  327 0003B1B0 GlobalFindAtomA
        809  328 00014C60 GlobalFindAtomW
        810  329 0003F100 GlobalFix
        811  32A 00022D60 GlobalFlags
        812  32B 00018D90 GlobalFree
        813  32C 0003B1D0 GlobalGetAtomNameA
        814  32D 00014370 GlobalGetAtomNameW
        815  32E 00021820 GlobalHandle
        816  32F 00016EC0 GlobalLock
        817  330 0001F280 GlobalMemoryStatus
        818  331 000229A0 GlobalMemoryStatusEx
        819  332 00018E00 GlobalReAlloc
        820  333 00019630 GlobalSize
        821  334 0003F120 GlobalUnWire
        822  335 0003F130 GlobalUnfix
        823  336 00016E00 GlobalUnlock
        824  337 0003F150 GlobalWire
        825  338 00044860 Heap32First
        826  339 00044AB0 Heap32ListFirst
        827  33A 00044BA0 Heap32ListNext
        828  33B 00044C80 Heap32Next
        829  33C          HeapAlloc (forwarded to NTDLL.RtlAllocateHeap)
        830  33D 00042710 HeapCompact
        831  33E 00021920 HeapCreate
        832  33F 000239C0 HeapDestroy
        833  340 00016CE0 HeapFree
        834  341 00042720 HeapLock
        835  342 00042730 HeapQueryInformation
        836  343          HeapReAlloc (forwarded to NTDLL.RtlReAllocateHeap)
        837  344 000218E0 HeapSetInformation
        838  345          HeapSize (forwarded to NTDLL.RtlSizeHeap)
        839  346 00042740 HeapSummary
        840  347 00042750 HeapUnlock
        841  348 0001DD50 HeapValidate
        842  349 00042760 HeapWalk
        843  34A 00025B60 IdnToAscii
        844  34B 00042770 IdnToNameprepUnicode
        845  34C 00042780 IdnToUnicode
        846  34D 00024C30 InitAtomTable
        847  34E          InitOnceBeginInitialize (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceBeginInitialize)
        848  34F          InitOnceComplete (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceComplete)
        849  350          InitOnceExecuteOnce (forwarded to api-ms-win-core-synch-l1-1-0.InitOnceExecuteOnce)
        850  351          InitOnceInitialize (forwarded to NTDLL.RtlRunOnceInitialize)
        851  352          InitializeConditionVariable (forwarded to NTDLL.RtlInitializeConditionVariable)
        852  353 00023AB0 InitializeContext
        853  354          InitializeCriticalSection (forwarded to NTDLL.RtlInitializeCriticalSection)
        854  355 000261E0 InitializeCriticalSectionAndSpinCount
        855  356 000261F0 InitializeCriticalSectionEx
        856  357          InitializeProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.InitializeProcThreadAttributeList)
        857  358          InitializeSListHead (forwarded to NTDLL.RtlInitializeSListHead)
        858  359          InitializeSRWLock (forwarded to NTDLL.RtlInitializeSRWLock)
        859  35A 00042790 InitializeSynchronizationBarrier
        860  35B          InstallELAMCertificateInfo (forwarded to api-ms-win-core-sysinfo-l1-2-1.InstallELAMCertificateInfo)
        861  35C          InterlockedFlushSList (forwarded to NTDLL.RtlInterlockedFlushSList)
        862  35D          InterlockedPopEntrySList (forwarded to NTDLL.RtlInterlockedPopEntrySList)
        863  35E          InterlockedPushEntrySList (forwarded to NTDLL.RtlInterlockedPushEntrySList)
        864  35F          InterlockedPushListSList (forwarded to NTDLL.RtlInterlockedPushListSList)
        865  360          InterlockedPushListSListEx (forwarded to NTDLL.RtlInterlockedPushListSListEx)
        866  361 00065A40 InvalidateConsoleDIBits
        867  362 00040FA0 IsBadCodePtr
        868  363 00040FB0 IsBadHugeReadPtr
        869  364 00040FC0 IsBadHugeWritePtr
        870  365 00016FC0 IsBadReadPtr
        871  366 00040FD0 IsBadStringPtrA
        872  367 00041020 IsBadStringPtrW
        873  368 00041080 IsBadWritePtr
        874  369 00055750 IsCalendarLeapDay
        875  36A 00055830 IsCalendarLeapMonth
        876  36B 00055910 IsCalendarLeapYear
        877  36C 00023D20 IsDBCSLeadByte
        878  36D 000253F0 IsDBCSLeadByteEx
        879  36E 00022900 IsDebuggerPresent
        880  36F 000427A0 IsNLSDefinedString
        881  370 00039320 IsNativeVhdBoot
        882  371 000427B0 IsNormalizedString
        883  372          IsProcessCritical (forwarded to api-ms-win-core-processthreads-l1-1-2.IsProcessCritical)
        884  373 000427C0 IsProcessInJob
        885  374 0001EC80 IsProcessorFeaturePresent
        886  375 00040BA0 IsSystemResumeAutomatic
        887  376 000427D0 IsThreadAFiber
        888  377          IsThreadpoolTimerSet (forwarded to NTDLL.TpIsTimerSet)
        889  378 00018620 IsValidCalDateTime
        890  379 0001DF00 IsValidCodePage
        891  37A 000427F0 IsValidLanguageGroup
        892  37B 0001F4D0 IsValidLocale
        893  37C 00042800 IsValidLocaleName
        894  37D 00042810 IsValidNLSVersion
        895  37E 0001F150 IsWow64Process
        896  37F 00042820 K32EmptyWorkingSet
        897  380 00042830 K32EnumDeviceDrivers
        898  381 00042840 K32EnumPageFilesA
        899  382 00042850 K32EnumPageFilesW
        900  383 000238A0 K32EnumProcessModules
        901  384 00042860 K32EnumProcessModulesEx
        902  385 00001410 K32EnumProcesses
        903  386 00042870 K32GetDeviceDriverBaseNameA
        904  387 00042880 K32GetDeviceDriverBaseNameW
        905  388 00042890 K32GetDeviceDriverFileNameA
        906  389 000428A0 K32GetDeviceDriverFileNameW
        907  38A 000428B0 K32GetMappedFileNameA
        908  38B 000428C0 K32GetMappedFileNameW
        909  38C 000428D0 K32GetModuleBaseNameA
        910  38D 000428E0 K32GetModuleBaseNameW
        911  38E 000428F0 K32GetModuleFileNameExA
        912  38F 00042900 K32GetModuleFileNameExW
        913  390 00023910 K32GetModuleInformation
        914  391 00042910 K32GetPerformanceInfo
        915  392 00042920 K32GetProcessImageFileNameA
        916  393 0001B200 K32GetProcessImageFileNameW
        917  394 00042930 K32GetProcessMemoryInfo
        918  395 00042950 K32GetWsChanges
        919  396 00042940 K32GetWsChangesEx
        920  397 00042960 K32InitializeProcessForWsWatch
        921  398 00042970 K32QueryWorkingSet
        922  399 000234F0 K32QueryWorkingSetEx
        923  39A 00023880 LCIDToLocaleName
        924  39B 00042980 LCMapStringA
        925  39C 00016C90 LCMapStringEx
        926  39D 00019B80 LCMapStringW
        927  39E 00045620 LZClose
        928  39F 000456D0 LZCloseFile
        929  3A0 0003AA90 LZCopy
        930  3A1 00045780 LZCreateFileW
        931  3A2 000271A0 LZDone
        932  3A3 000458B0 LZInit
        933  3A4 00045A40 LZOpenFileA
        934  3A5 00045B30 LZOpenFileW
        935  3A6 00045BD0 LZRead
        936  3A7 00045E30 LZSeek
        937  3A8 00024D30 LZStart
        938  3A9          LeaveCriticalSection (forwarded to NTDLL.RtlLeaveCriticalSection)
        939  3AA          LeaveCriticalSectionWhenCallbackReturns (forwarded to NTDLL.TpCallbackLeaveCriticalSectionOnCompletion)
        940  3AB 00019790 LoadAppInitDlls
        941  3AC 00022D30 LoadLibraryA
        942  3AD 00020CC0 LoadLibraryExA
        943  3AE 0001C0A0 LoadLibraryExW
        944  3AF 0001F580 LoadLibraryW
        945  3B0 00041110 LoadModule
        946  3B1 000267A0 LoadPackagedLibrary
        947  3B2 0001EC20 LoadResource
        948  3B3 00042990 LoadStringBaseExW
        949  3B4 0003F5D0 LoadStringBaseW
        950  3B5 00019B90 LocalAlloc
        951  3B6 0003F2B0 LocalCompact
        952  3B7 00026620 LocalFileTimeToFileTime
        953  3B8 0003F2D0 LocalFlags
        954  3B9 00019BA0 LocalFree
        955  3BA 0003F410 LocalHandle
        956  3BB 00022F40 LocalLock
        957  3BC 000237F0 LocalReAlloc
        958  3BD 0003F2B0 LocalShrink
        959  3BE 0001D2D0 LocalSize
        960  3BF 00022F30 LocalUnlock
        961  3C0 00022F50 LocaleNameToLCID
        962  3C1 00023BA0 LocateXStateFeature
        963  3C2 00026630 LockFile
        964  3C3 00026640 LockFileEx
        965  3C4 0001EED0 LockResource
        966  3C5 000429B0 MapUserPhysicalPages
        967  3C6 0004EA90 MapUserPhysicalPagesScatter
        968  3C7 0001F140 MapViewOfFile
        969  3C8 0001DEF0 MapViewOfFileEx
        970  3C9 000429C0 MapViewOfFileExNuma
        971  3CA          MapViewOfFileFromApp (forwarded to api-ms-win-core-memory-l1-1-1.MapViewOfFileFromApp)
        972  3CB 00044EE0 Module32First
        973  3CC 0001FBE0 Module32FirstW
        974  3CD 00045000 Module32Next
        975  3CE 0001B2E0 Module32NextW
        976  3CF 0003D6F0 MoveFileA
        977  3D0 0003D720 MoveFileExA
        978  3D1 00023B80 MoveFileExW
        979  3D2 0003D750 MoveFileTransactedA
        980  3D3 00025680 MoveFileTransactedW
        981  3D4 00021620 MoveFileW
        982  3D5 0003D820 MoveFileWithProgressA
        983  3D6 000429D0 MoveFileWithProgressW
        984  3D7 00026790 MulDiv
        985  3D8 00018A30 MultiByteToWideChar
        986  3D9 000429E0 NeedCurrentDirectoryForExePathA
        987  3DA 000429F0 NeedCurrentDirectoryForExePathW
        988  3DB 000269D0 NlsCheckPolicy
        989  3DC 00042A00 NlsEventDataDescCreate
        990  3DD 000269E0 NlsGetCacheUpdateCount
        991  3DE 000269F0 NlsUpdateLocale
        992  3DF 00026A00 NlsUpdateSystemLocale
        993  3E0 00042A10 NlsWriteEtwEvent
        994  3E1 00042A20 NormalizeString
        995  3E2 00042A30 NotifyMountMgr
        996  3E3 00058A20 NotifyUILanguageChange
        997  3E4 000415C0 NtVdm64CreateProcessInternalW
        998  3E5 000238B0 OOBEComplete
        999  3E6          OfferVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.OfferVirtualMemory)
       1000  3E7 00064B80 OpenConsoleW
       1001  3E8 00042A40 OpenConsoleWStub
       1002  3E9 00026200 OpenEventA
       1003  3EA 00026210 OpenEventW
       1004  3EB 0003E790 OpenFile
       1005  3EC 00042A50 OpenFileById
       1006  3ED 000247E0 OpenFileMappingA
       1007  3EE 0001FBD0 OpenFileMappingW
       1008  3EF 0004DAD0 OpenJobObjectA
       1009  3F0 0004DB50 OpenJobObjectW
       1010  3F1 00016B00 OpenMutexA
       1011  3F2 00026220 OpenMutexW
       1012  3F3          OpenPackageInfoByFullName (forwarded to kernelbase.OpenPackageInfoByFullName)
       1013  3F4 00043470 OpenPrivateNamespaceA
       1014  3F5 00024F90 OpenPrivateNamespaceW
       1015  3F6 0001B170 OpenProcess
       1016  3F7          OpenProcessToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenProcessToken)
       1017  3F8 00024D30 OpenProfileUserMapping
       1018  3F9 000434D0 OpenSemaphoreA
       1019  3FA 00026230 OpenSemaphoreW
       1020  3FB          OpenState (forwarded to kernelbase.OpenState)
       1021  3FC          OpenStateExplicit (forwarded to kernelbase.OpenStateExplicit)
       1022  3FD 0001B1F0 OpenThread
       1023  3FE          OpenThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenThreadToken)
       1024  3FF 00043540 OpenWaitableTimerA
       1025  400 00026240 OpenWaitableTimerW
       1026  401 00022990 OutputDebugStringA
       1027  402 0001B420 OutputDebugStringW
       1028  403          PackageFamilyNameFromFullName (forwarded to kernelbase.PackageFamilyNameFromFullName)
       1029  404          PackageFamilyNameFromId (forwarded to kernelbase.PackageFamilyNameFromId)
       1030  405          PackageFullNameFromId (forwarded to kernelbase.PackageFullNameFromId)
       1031  406          PackageIdFromFullName (forwarded to kernelbase.PackageIdFromFullName)
       1032  407          PackageNameAndPublisherIdFromFamilyName (forwarded to kernelbase.PackageNameAndPublisherIdFromFamilyName)
       1033  408          ParseApplicationUserModelId (forwarded to kernelbase.ParseApplicationUserModelId)
       1034  409 00026A70 PeekConsoleInputA
       1035  40A 00026BD0 PeekConsoleInputW
       1036  40B 00025A60 PeekNamedPipe
       1037  40C 0001E170 PostQueuedCompletionStatus
       1038  40D 00021730 PowerClearRequest
       1039  40E 0001F900 PowerCreateRequest
       1040  40F 00016480 PowerSetRequest
       1041  410          PrefetchVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-1.PrefetchVirtualMemory)
       1042  411 0004D370 PrepareTape
       1043  412 00025400 PrivCopyFileExW
       1044  413 0003D910 PrivMoveFileIdentityW
       1045  414 00045120 Process32First
       1046  415 00020990 Process32FirstW
       1047  416 00045210 Process32Next
       1048  417 0001C170 Process32NextW
       1049  418 0001E6C0 ProcessIdToSessionId
       1050  419 00042A60 PssCaptureSnapshot
       1051  41A 00042A70 PssDuplicateSnapshot
       1052  41B 00042A80 PssFreeSnapshot
       1053  41C 00042A90 PssQuerySnapshot
       1054  41D 00042AA0 PssWalkMarkerCreate
       1055  41E 00042AB0 PssWalkMarkerFree
       1056  41F 00042AC0 PssWalkMarkerGetPosition
       1057  420 00042AD0 PssWalkMarkerRewind
       1058  421 00042AE0 PssWalkMarkerSeek
       1059  422 00042AD0 PssWalkMarkerSeekToBeginning
       1060  423 00042AE0 PssWalkMarkerSetPosition
       1061  424 00042AC0 PssWalkMarkerTell
       1062  425 00042AF0 PssWalkSnapshot
       1063  426 0001DCF0 PulseEvent
       1064  427 00026890 PurgeComm
       1065  428 00042B00 QueryActCtxSettingsW
       1066  429 00014AC0 QueryActCtxSettingsWWorker
       1067  42A 0001F400 QueryActCtxW
       1068  42B 00014520 QueryActCtxWWorker
       1069  42C          QueryDepthSList (forwarded to NTDLL.RtlQueryDepthSList)
       1070  42D 0003C6D0 QueryDosDeviceA
       1071  42E 00026650 QueryDosDeviceW
       1072  42F 00023CB0 QueryFullProcessImageNameA
       1073  430 000219A0 QueryFullProcessImageNameW
       1074  431 0001FD90 QueryIdleProcessorCycleTime
       1075  432 00042B10 QueryIdleProcessorCycleTimeEx
       1076  433 00023520 QueryInformationJobObject
       1077  434 0004DC00 QueryIoRateControlInformationJobObject
       1078  435 00042B20 QueryMemoryResourceNotification
       1079  436 00017110 QueryPerformanceCounter
       1080  437 00019550 QueryPerformanceFrequency
       1081  438 00042B30 QueryProcessAffinityUpdateMode
       1082  439 0001FDA0 QueryProcessCycleTime
       1083  43A          QueryProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.QueryProtectedPolicy)
       1084  43B 0001B2A0 QueryThreadCycleTime
       1085  43C 0004EBA0 QueryThreadProfiling
       1086  43D 00042B40 QueryThreadpoolStackInformation
       1087  43E 0004C1A0 QueryUmsThreadInformation
       1088  43F 0001F4C0 QueryUnbiasedInterruptTime
       1089  440 000207B0 QueueUserAPC
       1090  441 00021900 QueueUserWorkItem
       1091  442 0006AE70 QuirkGetData2Worker
       1092  443 0006AF40 QuirkGetDataWorker
       1093  444 0006B000 QuirkIsEnabled2Worker
       1094  445 000194A0 QuirkIsEnabled3Worker
       1095  446 00024350 QuirkIsEnabledForPackage2Worker
       1096  447 000081A0 QuirkIsEnabledForPackage3Worker
       1097  448 000082F0 QuirkIsEnabledForPackage4Worker
       1098  449 00007CF0 QuirkIsEnabledForPackageWorker
       1099  44A 0006B120 QuirkIsEnabledForProcessWorker
       1100  44B 00007830 QuirkIsEnabledWorker
       1101  44C 0001F390 RaiseException
       1102  44D          RaiseFailFastException (forwarded to kernelbase.RaiseFailFastException)
       1103  44E 000417C0 RaiseInvalid16BitExeError
       1104  44F 00042B70 ReOpenFile
       1105  450 00026A80 ReadConsoleA
       1106  451 00026A90 ReadConsoleInputA
       1107  452          ReadConsoleInputExA (forwarded to kernelbase.ReadConsoleInputExA)
       1108  453          ReadConsoleInputExW (forwarded to kernelbase.ReadConsoleInputExW)
       1109  454 00026AA0 ReadConsoleInputW
       1110  455 00026BE0 ReadConsoleOutputA
       1111  456 00026BF0 ReadConsoleOutputAttribute
       1112  457 00026C00 ReadConsoleOutputCharacterA
       1113  458 00026C10 ReadConsoleOutputCharacterW
       1114  459 00026C20 ReadConsoleOutputW
       1115  45A 00026AB0 ReadConsoleW
       1116  45B 000252D0 ReadDirectoryChangesW
       1117  45C 00026660 ReadFile
       1118  45D 00026670 ReadFileEx
       1119  45E 00026680 ReadFileScatter
       1120  45F 0001C500 ReadProcessMemory
       1121  460 0004EBD0 ReadThreadProfilingData
       1122  461          ReclaimVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.ReclaimVirtualMemory)
       1123  462 00023510 RegCloseKey
       1124  463 00042B80 RegCopyTreeW
       1125  464 00042B90 RegCreateKeyExA
       1126  465 000230B0 RegCreateKeyExW
       1127  466 00042BA0 RegDeleteKeyExA
       1128  467 00042BB0 RegDeleteKeyExW
       1129  468 00042BC0 RegDeleteTreeA
       1130  469 00042BD0 RegDeleteTreeW
       1131  46A 00042BE0 RegDeleteValueA
       1132  46B 00024C90 RegDeleteValueW
       1133  46C 00042BF0 RegDisablePredefinedCacheEx
       1134  46D 00042C00 RegEnumKeyExA
       1135  46E 0001F3B0 RegEnumKeyExW
       1136  46F 00042C50 RegEnumValueA
       1137  470 00023050 RegEnumValueW
       1138  471 00042CA0 RegFlushKey
       1139  472 00042CB0 RegGetKeySecurity
       1140  473 00042CC0 RegGetValueA
       1141  474 00023700 RegGetValueW
       1142  475 00042CD0 RegLoadKeyA
       1143  476 00042CE0 RegLoadKeyW
       1144  477 00042CF0 RegLoadMUIStringA
       1145  478 00042D00 RegLoadMUIStringW
       1146  479 00023640 RegNotifyChangeKeyValue
       1147  47A 000243D0 RegOpenCurrentUser
       1148  47B 00042D10 RegOpenKeyExA
       1149  47C 0001F870 RegOpenKeyExW
       1150  47D 00042D20 RegOpenUserClassesRoot
       1151  47E 00042D30 RegQueryInfoKeyA
       1152  47F 0001F410 RegQueryInfoKeyW
       1153  480 00042DB0 RegQueryValueExA
       1154  481 0001F4A0 RegQueryValueExW
       1155  482 00042DC0 RegRestoreKeyA
       1156  483 00042DD0 RegRestoreKeyW
       1157  484 00042DE0 RegSaveKeyExA
       1158  485 00042DF0 RegSaveKeyExW
       1159  486 00042E00 RegSetKeySecurity
       1160  487 00042E10 RegSetValueExA
       1161  488 00023410 RegSetValueExW
       1162  489 00042E20 RegUnLoadKeyA
       1163  48A 00042E30 RegUnLoadKeyW
       1164  48B 00023D80 RegisterApplicationRecoveryCallback
       1165  48C 00016540 RegisterApplicationRestart
       1166  48D 00042E40 RegisterBadMemoryNotification
       1167  48E 00064DE0 RegisterConsoleIME
       1168  48F 00065220 RegisterConsoleOS2
       1169  490 00064CF0 RegisterConsoleVDM
       1170  491 00021810 RegisterWaitForInputIdle
       1171  492 0001DE80 RegisterWaitForSingleObject
       1172  493 00042E50 RegisterWaitForSingleObjectEx
       1173  494 000403B0 RegisterWaitUntilOOBECompleted
       1174  495 0003F160 RegisterWowBaseHandlers
       1175  496 0004A110 RegisterWowExec
       1176  497 00022F20 ReleaseActCtx
       1177  498 0001C940 ReleaseActCtxWorker
       1178  499 00026250 ReleaseMutex
       1179  49A          ReleaseMutexWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseMutexOnCompletion)
       1180  49B          ReleaseSRWLockExclusive (forwarded to NTDLL.RtlReleaseSRWLockExclusive)
       1181  49C          ReleaseSRWLockShared (forwarded to NTDLL.RtlReleaseSRWLockShared)
       1182  49D 00026260 ReleaseSemaphore
       1183  49E          ReleaseSemaphoreWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseSemaphoreOnCompletion)
       1184  49F 00026690 RemoveDirectoryA
       1185  4A0 0003B070 RemoveDirectoryTransactedA
       1186  4A1 0003B0C0 RemoveDirectoryTransactedW
       1187  4A2 000266A0 RemoveDirectoryW
       1188  4A3          RemoveDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.RemoveDllDirectory)
       1189  4A4 0003A570 RemoveLocalAlternateComputerNameA
       1190  4A5 0003A5D0 RemoveLocalAlternateComputerNameW
       1191  4A6 0003F170 RemoveSecureMemoryCacheCallback
       1192  4A7          RemoveVectoredContinueHandler (forwarded to NTDLL.RtlRemoveVectoredContinueHandler)
       1193  4A8          RemoveVectoredExceptionHandler (forwarded to NTDLL.RtlRemoveVectoredExceptionHandler)
       1194  4A9 00042E60 ReplaceFile
       1195  4AA 0003EC90 ReplaceFileA
       1196  4AB 00042E60 ReplaceFileW
       1197  4AC 00041B40 ReplacePartitionUnit
       1198  4AD 00040B30 RequestDeviceWakeup
       1199  4AE 00040B30 RequestWakeupLatency
       1200  4AF 00026270 ResetEvent
       1201  4B0 000212C0 ResetWriteWatch
       1202  4B1          ResolveDelayLoadedAPI (forwarded to NTDLL.LdrResolveDelayLoadedAPI)
       1203  4B2          ResolveDelayLoadsFromDll (forwarded to NTDLL.LdrResolveDelayLoadsFromDll)
       1204  4B3 00023A50 ResolveLocaleName
       1205  4B4          RestoreLastError (forwarded to NTDLL.RtlRestoreLastWin32Error)
       1206  4B5 0001FD20 ResumeThread
       1207  4B6 000213F0 RtlAddFunctionTable
       1208  4B7 00025EE0 RtlCaptureContext
       1209  4B8 0001D890 RtlCaptureStackBackTrace
       1210  4B9 00023870 RtlCompareMemory
       1211  4BA 00042E70 RtlCopyMemory
       1212  4BB 00021410 RtlDeleteFunctionTable
       1213  4BC 00042E90 RtlFillMemory
       1214  4BD 00042EC0 RtlInstallFunctionTableCallback
       1215  4BE 0001F5D0 RtlLookupFunctionEntry
       1216  4BF 00025F10 RtlMoveMemory
       1217  4C0 0001F4F0 RtlPcToFileHeader
       1218  4C1 00042ED0 RtlRaiseException
       1219  4C2 00042EE0 RtlRestoreContext
       1220  4C3 00042EF0 RtlUnwind
       1221  4C4 0001E690 RtlUnwindEx
       1222  4C5 00042F00 RtlVirtualUnwind
       1223  4C6          RtlZeroMemory (forwarded to NTDLL.RtlZeroMemory)
       1224  4C7 00026C30 ScrollConsoleScreenBufferA
       1225  4C8 00026C40 ScrollConsoleScreenBufferW
       1226  4C9 00042F50 SearchPathA
       1227  4CA 00023A30 SearchPathW
       1228  4CB 00023C70 SetCachedSigningLevel
       1229  4CC 00056660 SetCalendarInfoA
       1230  4CD 00042F60 SetCalendarInfoW
       1231  4CE 0004E7E0 SetComPlusPackageInstallStatus
       1232  4CF 000268A0 SetCommBreak
       1233  4D0 000268B0 SetCommConfig
       1234  4D1 000268C0 SetCommMask
       1235  4D2 000268D0 SetCommState
       1236  4D3 000268E0 SetCommTimeouts
       1237  4D4 00042F70 SetComputerNameA
       1238  4D5 00042F80 SetComputerNameEx2W
       1239  4D6 00042F90 SetComputerNameExA
       1240  4D7 00042FA0 SetComputerNameExW
       1241  4D8 00042FB0 SetComputerNameW
       1242  4D9 00026C50 SetConsoleActiveScreenBuffer
       1243  4DA 00026C60 SetConsoleCP
       1244  4DB 00026AC0 SetConsoleCtrlHandler
       1245  4DC 00064D90 SetConsoleCursor
       1246  4DD 00026C70 SetConsoleCursorInfo
       1247  4DE 00065280 SetConsoleCursorMode
       1248  4DF 00026C80 SetConsoleCursorPosition
       1249  4E0 00064DE0 SetConsoleDisplayMode
       1250  4E1 00065890 SetConsoleFont
       1251  4E2 00064E00 SetConsoleHardwareState
       1252  4E3 000658E0 SetConsoleHistoryInfo
       1253  4E4 00065950 SetConsoleIcon
       1254  4E5          SetConsoleInputExeNameA (forwarded to kernelbase.SetConsoleInputExeNameA)
       1255  4E6          SetConsoleInputExeNameW (forwarded to kernelbase.SetConsoleInputExeNameW)
       1256  4E7 00064E60 SetConsoleKeyShortcuts
       1257  4E8 000652E0 SetConsoleLocalEUDC
       1258  4E9 00024D30 SetConsoleMaximumWindowSize
       1259  4EA 00064EF0 SetConsoleMenuClose
       1260  4EB 00026AD0 SetConsoleMode
       1261  4EC 00065390 SetConsoleNlsMode
       1262  4ED 000649B0 SetConsoleNumberOfCommandsA
       1263  4EE 00064A60 SetConsoleNumberOfCommandsW
       1264  4EF 000653E0 SetConsoleOS2OemFormat
       1265  4F0 00026C90 SetConsoleOutputCP
       1266  4F1 00064F50 SetConsolePalette
       1267  4F2 00026CA0 SetConsoleScreenBufferInfoEx
       1268  4F3 00026CB0 SetConsoleScreenBufferSize
       1269  4F4 00026CC0 SetConsoleTextAttribute
       1270  4F5 00064A70 SetConsoleTitleA
       1271  4F6 00026CD0 SetConsoleTitleW
       1272  4F7 00026CE0 SetConsoleWindowInfo
       1273  4F8          SetCriticalSectionSpinCount (forwarded to NTDLL.RtlSetCriticalSectionSpinCount)
       1274  4F9 000659A0 SetCurrentConsoleFontEx
       1275  4FA 00042FC0 SetCurrentDirectoryA
       1276  4FB 00023BB0 SetCurrentDirectoryW
       1277  4FC 00046900 SetDefaultCommConfigA
       1278  4FD 00046990 SetDefaultCommConfigW
       1279  4FE          SetDefaultDllDirectories (forwarded to api-ms-win-core-libraryloader-l1-1-0.SetDefaultDllDirectories)
       1280  4FF 0003F810 SetDllDirectoryA
       1281  500 00022E90 SetDllDirectoryW
       1282  501 00042FD0 SetDynamicTimeZoneInformation
       1283  502 000266B0 SetEndOfFile
       1284  503 0004E9A0 SetEnvironmentStringsA
       1285  504 00042FE0 SetEnvironmentStringsW
       1286  505 0001F250 SetEnvironmentVariableA
       1287  506 00022FF0 SetEnvironmentVariableW
       1288  507 0001DD40 SetErrorMode
       1289  508 00026280 SetEvent
       1290  509          SetEventWhenCallbackReturns (forwarded to NTDLL.TpCallbackSetEventOnCompletion)
       1291  50A 00042FF0 SetFileApisToANSI
       1292  50B 00043000 SetFileApisToOEM
       1293  50C 000266C0 SetFileAttributesA
       1294  50D 0003DD60 SetFileAttributesTransactedA
       1295  50E 0003DDB0 SetFileAttributesTransactedW
       1296  50F 000266D0 SetFileAttributesW
       1297  510 0003CD80 SetFileBandwidthReservation
       1298  511 00020C50 SetFileCompletionNotificationModes
       1299  512 000266E0 SetFileInformationByHandle
       1300  513 00043010 SetFileIoOverlappedRange
       1301  514 000266F0 SetFilePointer
       1302  515 00026700 SetFilePointerEx
       1303  516 0003CEA0 SetFileShortNameA
       1304  517 0003CEE0 SetFileShortNameW
       1305  518 00026710 SetFileTime
       1306  519 00026720 SetFileValidData
       1307  51A 0003EED0 SetFirmwareEnvironmentVariableA
       1308  51B 0003EEF0 SetFirmwareEnvironmentVariableExA
       1309  51C 0003EFE0 SetFirmwareEnvironmentVariableExW
       1310  51D 0003F0A0 SetFirmwareEnvironmentVariableW
       1311  51E 00023660 SetHandleCount
       1312  51F 00026110 SetHandleInformation
       1313  520 00021530 SetInformationJobObject
       1314  521 0004DEB0 SetIoRateControlInformationJobObject
       1315  522          SetLastConsoleEventActive (forwarded to kernelbase.SetLastConsoleEventActive)
       1316  523 00016DF0 SetLastError
       1317  524 0003A710 SetLocalPrimaryComputerNameA
       1318  525 0003A770 SetLocalPrimaryComputerNameW
       1319  526 00043020 SetLocalTime
       1320  527 00056740 SetLocaleInfoA
       1321  528 00043030 SetLocaleInfoW
       1322  529 00022920 SetMailslotInfo
       1323  52A 00040B30 SetMessageWaitingIndicator
       1324  52B 0003FFD0 SetNamedPipeAttribute
       1325  52C 000243E0 SetNamedPipeHandleState
       1326  52D 00023000 SetPriorityClass
       1327  52E 00041950 SetProcessAffinityMask
       1328  52F 00025AA0 SetProcessAffinityUpdateMode
       1329  530 00024380 SetProcessDEPPolicy
       1330  531          SetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetProcessDefaultCpuSets)
       1331  532 000260C0 SetProcessInformation
       1332  533          SetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.SetProcessMitigationPolicy)
       1333  534 00043040 SetProcessPreferredUILanguages
       1334  535 00023CA0 SetProcessPriorityBoost
       1335  536 000236F0 SetProcessShutdownParameters
       1336  537 00023BE0 SetProcessWorkingSetSize
       1337  538 00043050 SetProcessWorkingSetSizeEx
       1338  539          SetProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.SetProtectedPolicy)
       1339  53A 0003F8C0 SetSearchPathMode
       1340  53B 00021970 SetStdHandle
       1341  53C 00043060 SetStdHandleEx
       1342  53D 00043070 SetSystemFileCacheSize
       1343  53E 00040BC0 SetSystemPowerState
       1344  53F 00043080 SetSystemTime
       1345  540 0003AD10 SetSystemTimeAdjustment
       1346  541 0004D3B0 SetTapeParameters
       1347  542 0004D400 SetTapePosition
       1348  543 00043790 SetTermsrvAppInstallMode
       1349  544 00016D50 SetThreadAffinityMask
       1350  545 00023CC0 SetThreadContext
       1351  546 0001D880 SetThreadErrorMode
       1352  547 00024270 SetThreadExecutionState
       1353  548 00043090 SetThreadGroupAffinity
       1354  549 0001B290 SetThreadIdealProcessor
       1355  54A 000430A0 SetThreadIdealProcessorEx
       1356  54B 000260D0 SetThreadInformation
       1357  54C 0001C430 SetThreadLocale
       1358  54D 0001F530 SetThreadPreferredUILanguages
       1359  54E 0001F1C0 SetThreadPriority
       1360  54F 00024D40 SetThreadPriorityBoost
       1361  550          SetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetThreadSelectedCpuSets)
       1362  551 000217B0 SetThreadStackGuarantee
       1363  552          SetThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.SetThreadToken)
       1364  553 0001DD00 SetThreadUILanguage
       1365  554 000430B0 SetThreadpoolStackInformation
       1366  555          SetThreadpoolThreadMaximum (forwarded to NTDLL.TpSetPoolMaxThreads)
       1367  556 00024B70 SetThreadpoolThreadMinimum
       1368  557          SetThreadpoolTimer (forwarded to NTDLL.TpSetTimer)
       1369  558          SetThreadpoolTimerEx (forwarded to NTDLL.TpSetTimerEx)
       1370  559          SetThreadpoolWait (forwarded to NTDLL.TpSetWait)
       1371  55A          SetThreadpoolWaitEx (forwarded to NTDLL.TpSetWaitEx)
       1372  55B 000430E0 SetTimeZoneInformation
       1373  55C 0004EAF0 SetTimerQueueTimer
       1374  55D 0004C1E0 SetUmsThreadInformation
       1375  55E 00021720 SetUnhandledExceptionFilter
       1376  55F 0005F100 SetUserGeoID
       1377  560 0004A170 SetVDMCurrentDirectories
       1378  561 00040700 SetVolumeLabelA
       1379  562 000407A0 SetVolumeLabelW
       1380  563 0004B780 SetVolumeMountPointA
       1381  564 0004B7F0 SetVolumeMountPointW
       1382  565 000430F0 SetVolumeMountPointWStub
       1383  566 00026290 SetWaitableTimer
       1384  567          SetWaitableTimerEx (forwarded to api-ms-win-core-synch-l1-1-0.SetWaitableTimerEx)
       1385  568 00023C80 SetXStateFeaturesMask
       1386  569 000268F0 SetupComm
       1387  56A 00064FB0 ShowConsoleCursor
       1388  56B 00043100 SignalObjectAndWait
       1389  56C 0001EEE0 SizeofResource
       1390  56D 00019780 Sleep
       1391  56E          SleepConditionVariableCS (forwarded to api-ms-win-core-synch-l1-1-0.SleepConditionVariableCS)
       1392  56F          SleepConditionVariableSRW (forwarded to api-ms-win-core-synch-l1-1-0.SleepConditionVariableSRW)
       1393  570 000262A0 SleepEx
       1394  571 00023680 SortCloseHandle
       1395  572 0000F700 SortGetHandle
       1396  573          StartThreadpoolIo (forwarded to NTDLL.TpStartAsyncIoOperation)
       1397  574          SubmitThreadpoolWork (forwarded to NTDLL.TpPostWork)
       1398  575 00021710 SuspendThread
       1399  576 000269C0 SwitchToFiber
       1400  577 0001B1E0 SwitchToThread
       1401  578 0001F520 SystemTimeToFileTime
       1402  579 000230C0 SystemTimeToTzSpecificLocalTime
       1403  57A          SystemTimeToTzSpecificLocalTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.SystemTimeToTzSpecificLocalTimeEx)
       1404  57B 00023750 TerminateJobObject
       1405  57C 00023710 TerminateProcess
       1406  57D 000228F0 TerminateThread
       1407  57E 00015160 TermsrvAppInstallMode
       1408  57F 00012D50 TermsrvConvertSysRootToUserDir
       1409  580 0001EBB0 TermsrvCreateRegEntry
       1410  581 0001F540 TermsrvDeleteKey
       1411  582 0001F880 TermsrvDeleteValue
       1412  583 0001C2B0 TermsrvGetPreSetValue
       1413  584 00024CB0 TermsrvGetWindowsDirectoryA
       1414  585 00012D10 TermsrvGetWindowsDirectoryW
       1415  586 00018A60 TermsrvOpenRegEntry
       1416  587 0001E1A0 TermsrvOpenUserClasses
       1417  588 00044730 TermsrvRestoreKey
       1418  589 0001C440 TermsrvSetKeySecurity
       1419  58A 0001C310 TermsrvSetValueKey
       1420  58B 00014020 TermsrvSyncUserIniFileExt
       1421  58C 00020B20 Thread32First
       1422  58D 00018CB0 Thread32Next
       1423  58E 0001E6B0 TlsAlloc
       1424  58F 0001EEF0 TlsFree
       1425  590 00016CB0 TlsGetValue
       1426  591 00018A50 TlsSetValue
       1427  592 00045300 Toolhelp32ReadProcessMemory
       1428  593 00043110 TransactNamedPipe
       1429  594 00026900 TransmitCommChar
       1430  595          TryAcquireSRWLockExclusive (forwarded to NTDLL.RtlTryAcquireSRWLockExclusive)
       1431  596          TryAcquireSRWLockShared (forwarded to NTDLL.RtlTryAcquireSRWLockShared)
       1432  597          TryEnterCriticalSection (forwarded to NTDLL.RtlTryEnterCriticalSection)
       1433  598 000234A0 TrySubmitThreadpoolCallback
       1434  599 00024DA0 TzSpecificLocalTimeToSystemTime
       1435  59A          TzSpecificLocalTimeToSystemTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.TzSpecificLocalTimeToSystemTimeEx)
       1436  59B 0003F8F0 UTRegister
       1437  59C 000271A0 UTUnRegister
       1438  59D 0004C210 UmsThreadYield
       1439  59E 00043120 UnhandledExceptionFilter
       1440  59F 00026730 UnlockFile
       1441  5A0 00026740 UnlockFileEx
       1442  5A1 0001F4B0 UnmapViewOfFile
       1443  5A2          UnmapViewOfFileEx (forwarded to api-ms-win-core-memory-l1-1-1.UnmapViewOfFileEx)
       1444  5A3 00023D60 UnregisterApplicationRecoveryCallback
       1445  5A4 000059A0 UnregisterApplicationRestart
       1446  5A5 00043130 UnregisterBadMemoryNotification
       1447  5A6 00064DE0 UnregisterConsoleIME
       1448  5A7 00016500 UnregisterWait
       1449  5A8 00023970 UnregisterWaitEx
       1450  5A9 000404E0 UnregisterWaitUntilOOBECompleted
       1451  5AA 00018680 UpdateCalendarDayOfWeek
       1452  5AB          UpdateProcThreadAttribute (forwarded to api-ms-win-core-processthreads-l1-1-0.UpdateProcThreadAttribute)
       1453  5AC 00054A20 UpdateResourceA
       1454  5AD 00054BA0 UpdateResourceW
       1455  5AE 00065A90 VDMConsoleOperation
       1456  5AF 0004A420 VDMOperationStarted
       1457  5B0 00023C90 VerLanguageNameA
       1458  5B1 00023BC0 VerLanguageNameW
       1459  5B2          VerSetConditionMask (forwarded to NTDLL.VerSetConditionMask)
       1460  5B3 00023920 VerifyConsoleIoHandle
       1461  5B4 00043140 VerifyScripts
       1462  5B5 00019BB0 VerifyVersionInfoA
       1463  5B6 00019C50 VerifyVersionInfoW
       1464  5B7 0001C370 VirtualAlloc
       1465  5B8 00023D00 VirtualAllocEx
       1466  5B9 00024DB0 VirtualAllocExNuma
       1467  5BA 0001C490 VirtualFree
       1468  5BB 00023D10 VirtualFreeEx
       1469  5BC 00043150 VirtualLock
       1470  5BD 0001DEE0 VirtualProtect
       1471  5BE 00043160 VirtualProtectEx
       1472  5BF 0001E6A0 VirtualQuery
       1473  5C0 00022FB0 VirtualQueryEx
       1474  5C1 0001F3A0 VirtualUnlock
       1475  5C2 00022330 WTSGetActiveConsoleSessionId
       1476  5C3 00026910 WaitCommEvent
       1477  5C4 00043170 WaitForDebugEvent
       1478  5C5          WaitForDebugEventEx (forwarded to api-ms-win-core-debug-l1-1-2.WaitForDebugEventEx)
       1479  5C6 000262B0 WaitForMultipleObjects
       1480  5C7 000262C0 WaitForMultipleObjectsEx
       1481  5C8 000262D0 WaitForSingleObject
       1482  5C9 000262E0 WaitForSingleObjectEx
       1483  5CA          WaitForThreadpoolIoCallbacks (forwarded to NTDLL.TpWaitForIoCompletion)
       1484  5CB          WaitForThreadpoolTimerCallbacks (forwarded to NTDLL.TpWaitForTimer)
       1485  5CC          WaitForThreadpoolWaitCallbacks (forwarded to NTDLL.TpWaitForWait)
       1486  5CD          WaitForThreadpoolWorkCallbacks (forwarded to NTDLL.TpWaitForWork)
       1487  5CE 000401A0 WaitNamedPipeA
       1488  5CF 00043180 WaitNamedPipeW
       1489  5D0          WakeAllConditionVariable (forwarded to NTDLL.RtlWakeAllConditionVariable)
       1490  5D1          WakeConditionVariable (forwarded to NTDLL.RtlWakeConditionVariable)
       1491  5D2 000203F0 WerGetFlags
       1492  5D3 000203F0 WerGetFlagsWorker
       1493  5D4 00022F90 WerRegisterFile
       1494  5D5 00008720 WerRegisterFileWorker
       1495  5D6 000218D0 WerRegisterMemoryBlock
       1496  5D7 0000AFC0 WerRegisterMemoryBlockWorker
       1497  5D8 00023430 WerRegisterRuntimeExceptionModule
       1498  5D9 00007DF0 WerRegisterRuntimeExceptionModuleWorker
       1499  5DA 00007820 WerSetFlags
       1500  5DB 00007820 WerSetFlagsWorker
       1501  5DC 00022F80 WerUnregisterFile
       1502  5DD 00008710 WerUnregisterFileWorker
       1503  5DE 000218F0 WerUnregisterMemoryBlock
       1504  5DF 0000AB20 WerUnregisterMemoryBlockWorker
       1505  5E0 00043190 WerUnregisterRuntimeExceptionModule
       1506  5E1 0004E850 WerUnregisterRuntimeExceptionModuleWorker
       1507  5E2 0004E8C0 WerpCleanupMessageMapping
       1508  5E3 00067620 WerpGetDebugger
       1509  5E4 0004E860 WerpInitiateRemoteRecovery
       1510  5E5 00067C00 WerpLaunchAeDebug
       1511  5E6 000431A0 WerpNotifyLoadStringResource
       1512  5E7 0004E910 WerpNotifyLoadStringResourceEx
       1513  5E8 0004E920 WerpNotifyLoadStringResourceWorker
       1514  5E9 000431B0 WerpNotifyUseStringResource
       1515  5EA 00025AB0 WerpNotifyUseStringResourceWorker
       1516  5EB 0004E930 WerpStringLookup
       1517  5EC 00016D20 WideCharToMultiByte
       1518  5ED 00041990 WinExec
       1519  5EE 000431C0 Wow64DisableWow64FsRedirection
       1520  5EF 00023D30 Wow64EnableWow64FsRedirection
       1521  5F0 00044790 Wow64GetThreadContext
       1522  5F1 0003AE10 Wow64GetThreadSelectorEntry
       1523  5F2 000431D0 Wow64RevertWow64FsRedirection
       1524  5F3 000447C0 Wow64SetThreadContext
       1525  5F4 000447F0 Wow64SuspendThread
       1526  5F5 00026AE0 WriteConsoleA
       1527  5F6 00026CF0 WriteConsoleInputA
       1528  5F7 00064FF0 WriteConsoleInputVDMA
       1529  5F8 00065070 WriteConsoleInputVDMW
       1530  5F9 00026D00 WriteConsoleInputW
       1531  5FA 00026D10 WriteConsoleOutputA
       1532  5FB 00026D20 WriteConsoleOutputAttribute
       1533  5FC 00026D30 WriteConsoleOutputCharacterA
       1534  5FD 00026D40 WriteConsoleOutputCharacterW
       1535  5FE 00026D50 WriteConsoleOutputW
       1536  5FF 00026AF0 WriteConsoleW
       1537  600 00026750 WriteFile
       1538  601 00026760 WriteFileEx
       1539  602 00026770 WriteFileGather
       1540  603 0003C280 WritePrivateProfileSectionA
       1541  604 00025420 WritePrivateProfileSectionW
       1542  605 0003C2E0 WritePrivateProfileStringA
       1543  606 00015100 WritePrivateProfileStringW
       1544  607 0003C350 WritePrivateProfileStructA
       1545  608 0003C4A0 WritePrivateProfileStructW
       1546  609 0001EF00 WriteProcessMemory
       1547  60A 0003C600 WriteProfileSectionA
       1548  60B 0003C610 WriteProfileSectionW
       1549  60C 0003C620 WriteProfileStringA
       1550  60D 0003C630 WriteProfileStringW
       1551  60E 0004D470 WriteTapemark
       1552  60F 000431E0 ZombifyActCtx
       1553  610 0004E6C0 ZombifyActCtxWorker
       1554  611          __C_specific_handler (forwarded to NTDLL.__C_specific_handler)
       1555  612          __chkstk (forwarded to NTDLL.__chkstk)
       1556  613          __misaligned_access (forwarded to NTDLL.__misaligned_access)
       1557  614 00018DD0 _hread
       1558  615 0003F260 _hwrite
       1559  616 0001D3F0 _lclose
       1560  617 0003F190 _lcreat
       1561  618 00018B70 _llseek
       1562  619          _local_unwind (forwarded to NTDLL._local_unwind)
       1563  61A 0003F1F0 _lopen
       1564  61B 00018DD0 _lread
       1565  61C 0003F260 _lwrite
       1566  61D 000217D0 lstrcat
       1567  61E 000217D0 lstrcatA
       1568  61F 00024400 lstrcatW
       1569  620 0001E730 lstrcmp
       1570  621 0001E730 lstrcmpA
       1571  622 0001C510 lstrcmpW
       1572  623 0001C390 lstrcmpi
       1573  624 0001C390 lstrcmpiA
       1574  625 00018B60 lstrcmpiW
       1575  626 0001F5A0 lstrcpy
       1576  627 0001F5A0 lstrcpyA
       1577  628 00021420 lstrcpyW
       1578  629 000431F0 lstrcpyn
       1579  62A 000431F0 lstrcpynA
       1580  62B 00023A70 lstrcpynW
       1581  62C 0001C400 lstrlen
       1582  62D 0001C400 lstrlenA
       1583  62E 00018A40 lstrlenW
       1584  62F 000212D0 timeBeginPeriod
       1585  630 0001F5F0 timeEndPeriod
       1586  631 000242E0 timeGetDevCaps
       1587  632 00044820 timeGetSystemTime
       1588  633 0001E0C0 timeGetTime
       1589  634 0001C510 uaw_lstrcmpW
       1590  635 00018B60 uaw_lstrcmpiW
       1591  636 00036BA0 uaw_lstrlenW
       1592  637 00036BF0 uaw_wcschr
       1593  638 00036C10 uaw_wcscpy
       1594  639 00036C40 uaw_wcsicmp
       1595  63A 00036C50 uaw_wcslen
       1596  63B 00036C70 uaw_wcsrchr

  Summary

        1000 .data
        1000 .didat
        6000 .pdata
       2F000 .rdata
        1000 .reloc
        1000 .rsrc
       73000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\ntdll.dll

File Type: DLL

  Section contains the following exports for ntdll.dll

    00000000 characteristics
    64781AF1 time date stamp Wed May 31 21:13:37 2023
        0.00 version
           8 ordinal base
        2224 number of functions
        2223 number of names

    ordinal hint RVA      name

          9    0 0004F0D0 A_SHAFinal
         10    1 0004F210 A_SHAInit
         11    2 0004F250 A_SHAUpdate
         12    3 00079380 AlpcAdjustCompletionListConcurrencyCount
         13    4 00062D50 AlpcFreeCompletionListMessage
         14    5 000CAC90 AlpcGetCompletionListLastMessageInformation
         15    6 000CACB0 AlpcGetCompletionListMessageAttributes
         16    7 0006AB50 AlpcGetHeaderSize
         17    8 0006AB10 AlpcGetMessageAttribute
         18    9 00034CB0 AlpcGetMessageFromCompletionList
         19    A 00079020 AlpcGetOutstandingCompletionListMessageCount
         20    B 0006AAB0 AlpcInitializeMessageAttribute
         21    C 000779C0 AlpcMaxAllowedMessageLength
         22    D 00078630 AlpcRegisterCompletionList
         23    E 00064CF0 AlpcRegisterCompletionListWorkerThread
         24    F 00078FE0 AlpcRundownCompletionList
         25   10 00079000 AlpcUnregisterCompletionList
         26   11 00064C80 AlpcUnregisterCompletionListWorkerThread
         27   12 00021030 ApiSetQueryApiSetPresence
         28   13 00008010 CsrAllocateCaptureBuffer
         29   14 00007FD0 CsrAllocateMessagePointer
         30   15 00007D90 CsrCaptureMessageBuffer
         31   16 00007DF0 CsrCaptureMessageMultiUnicodeStringsInPlace
         32   17 00007F10 CsrCaptureMessageString
         33   18 000BADB0 CsrCaptureTimeout
         34   19 00007C10 CsrClientCallServer
         35   1A 00004320 CsrClientConnectToServer
         36   1B 00007BE0 CsrFreeCaptureBuffer
         37   1C 000BADD0 CsrGetProcessId
         38   1D 000759D0 CsrIdentifyAlertableThread
         39   1E 000C0F00 CsrSetPriorityClass
         40   1F 000BADF0 CsrVerifyRegion
         41   20 00094F40 DbgBreakPoint
         42   21 00010000 DbgPrint
         43   22 0000F9B0 DbgPrintEx
         44   23 000CACF0 DbgPrintReturnControlC
         45   24 000CAD40 DbgPrompt
         46   25 000CAD80 DbgQueryDebugFilterState
         47   26 000CAD90 DbgSetDebugFilterState
         48   27 000BBF00 DbgUiConnectToDbg
         49   28 000BBF70 DbgUiContinue
         50   29 000BBFA0 DbgUiConvertStateChangeStructure
         51   2A 000BBFB0 DbgUiConvertStateChangeStructureEx
         52   2B 000BC250 DbgUiDebugActiveProcess
         53   2C 000BC2B0 DbgUiGetThreadDebugObject
         54   2D 000BC2D0 DbgUiIssueRemoteBreakin
         55   2E 000BC340 DbgUiRemoteBreakin
         56   2F 000BC3B0 DbgUiSetThreadDebugObject
         57   30 000BC3D0 DbgUiStopDebugging
         58   31 000BC3F0 DbgUiWaitStateChange
         59   32 00094F50 DbgUserBreakPoint
         60   33 000F3B40 EtwCreateTraceInstanceId
         61   34 0000C140 EtwDeliverDataBlock
         62   35 000F3BA0 EtwEnumerateProcessRegGuids
         63   36 000639F0 EtwEventActivityIdControl
         64   37 0000CD00 EtwEventEnabled
         65   38 00075700 EtwEventProviderEnabled
         66   39 000390B0 EtwEventRegister
         67   3A 0000E180 EtwEventSetInformation
         68   3B 0000E360 EtwEventUnregister
         69   3C 0000F6B0 EtwEventWrite
         70   3D 0000CDE0 EtwEventWriteEndScenario
         71   3E 0000F660 EtwEventWriteEx
         72   3F 0000F610 EtwEventWriteFull
         73   40 00077810 EtwEventWriteNoRegistration
         74   41 00081390 EtwEventWriteStartScenario
         75   42 000F3CC0 EtwEventWriteString
         76   43 0000F6F0 EtwEventWriteTransfer
         77   44 00075790 EtwGetTraceEnableFlags
         78   45 000757D0 EtwGetTraceEnableLevel
         79   46 00074C20 EtwGetTraceLoggerHandle
         80   47 0007EB10 EtwLogTraceEvent
         81   48 00038930 EtwNotificationRegister
         82   49 0000E370 EtwNotificationUnregister
         83   4A 0000A160 EtwProcessPrivateLoggerRequest
         84   4B 00081720 EtwRegisterSecurityProvider
         85   4C 00069BE0 EtwRegisterTraceGuidsA
         86   4D 00069C20 EtwRegisterTraceGuidsW
         87   4E 00002A90 EtwReplyNotification
         88   4F 0000EA20 EtwSendNotification
         89   50 000F3EF0 EtwSetMark
         90   51 000F3F20 EtwTraceEventInstance
         91   52 0000E4E0 EtwTraceMessage
         92   53 0000E510 EtwTraceMessageVa
         93   54 0000E310 EtwUnregisterTraceGuids
         94   55 0006DE30 EtwWriteUMSecurityEvent
         95   56 00076080 EtwpCreateEtwThread
         96   57 0000CAA0 EtwpGetCpuSpeed
         97   58 000F4EB0 EvtIntReportAuthzEventAndSourceAsync
         98   59 0000E5E0 EvtIntReportEventAndSourceAsync
         99   5A 00094FF0 ExpInterlockedPopEntrySListEnd
        100   5B 00094FE7 ExpInterlockedPopEntrySListFault
        101   5C 00094FD7 ExpInterlockedPopEntrySListResume
        102   5D 00095310 KiRaiseUserExceptionDispatcher
        103   5E 00095150 KiUserApcDispatcher
        104   5F 00095250 KiUserCallbackDispatcher
        105   60 000952A0 KiUserExceptionDispatcher
        106   61 00157320 KiUserInvertedFunctionTable
        107   62 00073690 LdrAccessResource
        108   63 00059690 LdrAddDllDirectory
        109   64 0006AE70 LdrAddLoadAsDataTable
        110   65 0007C880 LdrAddRefDll
        111   66 000BAE40 LdrAppxHandleIntegrityFailure
        112   67 0006F270 LdrDisableThreadCalloutsForDll
        113   68 000CB040 LdrEnumResources
        114   69 000754A0 LdrEnumerateLoadedModules
        115   6A 000BC670 LdrFastFailInLoaderCallout
        116   6B 00069A90 LdrFindEntryForAddress
        117   6C 000CB310 LdrFindResourceDirectory_U
        118   6D 00074A00 LdrFindResourceEx_U
        119   6E 0006FE80 LdrFindResource_U
        120   6F 00080390 LdrFlushAlternateResourceModules
        121   70 00072060 LdrGetDllDirectory
        122   71 0006C070 LdrGetDllFullName
        123   72 00018950 LdrGetDllHandle
        124   73 0006BD10 LdrGetDllHandleByMapping
        125   74 0006CB20 LdrGetDllHandleByName
        126   75 000185D0 LdrGetDllHandleEx
        127   76 00036750 LdrGetDllPath
        128   77 000BC6A0 LdrGetFailureData
        129   78 000CB330 LdrGetFileNameFromLoadAsDataTable
        130   79 00074080 LdrGetKnownDllSectionHandle
        131   7A 00003560 LdrGetProcedureAddress
        132   7B 00079CC0 LdrGetProcedureAddressEx
        133   7C 00016020 LdrGetProcedureAddressForCaller
        134   7D 000BDBA0 LdrInitShimEngineDynamic
        135   7E 0006B9A0 LdrInitializeThunk
        136   7F 00066340 LdrLoadAlternateResourceModule
        137   80 0001C360 LdrLoadAlternateResourceModuleEx
        138   81 0001AF60 LdrLoadDll
        139   82 000086A0 LdrLockLoaderLock
        140   83 000CBE70 LdrOpenImageFileOptionsKey
        141   84 000778D0 LdrProcessInitializationComplete
        142   85 000CBF60 LdrProcessRelocationBlock
        143   86 000CBF90 LdrProcessRelocationBlockEx
        144   87 00070D60 LdrQueryImageFileExecutionOptions
        145   88 00070DA0 LdrQueryImageFileExecutionOptionsEx
        146   89 000710F0 LdrQueryImageFileKeyOption
        147   8A 000BC6B0 LdrQueryModuleServiceTags
        148   8B 000BCCB0 LdrQueryOptionalDelayLoadedAPI
        149   8C 00002FF0 LdrQueryProcessModuleInformation
        150   8D 00078530 LdrRegisterDllNotification
        151   8E 000C9170 LdrRemoveDllDirectory
        152   8F 0006B320 LdrRemoveLoadAsDataTable
        153   90 000CC450 LdrResFindResource
        154   91 0006D940 LdrResFindResourceDirectory
        155   92 00056B30 LdrResGetRCConfig
        156   93 00080D20 LdrResRelease
        157   94 0001AAA0 LdrResSearchResource
        158   95 00016DF0 LdrResolveDelayLoadedAPI
        159   96 000BCD90 LdrResolveDelayLoadsFromDll
        160   97 0001A8A0 LdrRscIsTypeExist
        161   98 000759D0 LdrSetAppCompatDllRedirectionCallback
        162   99 00077980 LdrSetDefaultDllDirectories
        163   9A 00001540 LdrSetDllDirectory
        164   9B 00076DB0 LdrSetDllManifestProber
        165   9C 000BCB30 LdrSetImplicitPathOptions
        166   9D 00081760 LdrSetMUICacheType
        167   9E 00044390 LdrShutdownProcess
        168   9F 00021580 LdrShutdownThread
        169   A0 000756F0 LdrStandardizeSystemPath
        170   A1 00157290 LdrSystemDllInitBlock
        171   A2 00043260 LdrUnloadAlternateResourceModule
        172   A3 00043270 LdrUnloadAlternateResourceModuleEx
        173   A4 00038190 LdrUnloadDll
        174   A5 00070620 LdrUnlockLoaderLock
        175   A6 000BCB90 LdrUnregisterDllNotification
        176   A7 000BCC40 LdrVerifyImageMatchesChecksum
        177   A8 0007ED70 LdrVerifyImageMatchesChecksumEx
        178   A9 0001ADA0 LdrpResGetMappingSize
        179   AA 00018C10 LdrpResGetResourceDirectory
        180   AB 000F3910 MD4Final
        181   AC 000F39E0 MD4Init
        182   AD 000F3A10 MD4Update
        183   AE 00062340 MD5Final
        184   AF 000741E0 MD5Init
        185   B0 00062410 MD5Update
        186   B1 00144B42 NlsAnsiCodePage
        187   B2 00144FA3 NlsMbCodePageTag
        188   B3 00144FA2 NlsMbOemCodePageTag
        189   B4 00093390 NtAcceptConnectPort
        190   B5 00093370 NtAccessCheck
        191   B6 00093600 NtAccessCheckAndAuditAlarm
        192   B7 000939A0 NtAccessCheckByType
        193   B8 00093900 NtAccessCheckByTypeAndAuditAlarm
        194   B9 000939B0 NtAccessCheckByTypeResultList
        195   BA 000939C0 NtAccessCheckByTypeResultListAndAuditAlarm
        196   BB 000939D0 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
        197   BC 000937E0 NtAddAtom
        198   BD 000939E0 NtAddAtomEx
        199   BE 000939F0 NtAddBootEntry
        200   BF 00093A00 NtAddDriverEntry
        201   C0 00093A10 NtAdjustGroupsToken
        202   C1 00093780 NtAdjustPrivilegesToken
        203   C2 00093A20 NtAdjustTokenClaimsAndDeviceGroups
        204   C3 00093A30 NtAlertResumeThread
        205   C4 00093A40 NtAlertThread
        206   C5 00093A50 NtAlertThreadByThreadId
        207   C6 00093A60 NtAllocateLocallyUniqueId
        208   C7 00093A70 NtAllocateReserveObject
        209   C8 00093A80 NtAllocateUserPhysicalPages
        210   C9 00093A90 NtAllocateUuids
        211   CA 000934F0 NtAllocateVirtualMemory
        212   CB 00093AA0 NtAlpcAcceptConnectPort
        213   CC 00093AB0 NtAlpcCancelMessage
        214   CD 00093AC0 NtAlpcConnectPort
        215   CE 00093AD0 NtAlpcConnectPortEx
        216   CF 00093AE0 NtAlpcCreatePort
        217   D0 00093AF0 NtAlpcCreatePortSection
        218   D1 00093B00 NtAlpcCreateResourceReserve
        219   D2 00093B10 NtAlpcCreateSectionView
        220   D3 00093B20 NtAlpcCreateSecurityContext
        221   D4 00093B30 NtAlpcDeletePortSection
        222   D5 00093B40 NtAlpcDeleteResourceReserve
        223   D6 00093B50 NtAlpcDeleteSectionView
        224   D7 00093B60 NtAlpcDeleteSecurityContext
        225   D8 00093B70 NtAlpcDisconnectPort
        226   D9 00093B80 NtAlpcImpersonateClientContainerOfPort
        227   DA 00093B90 NtAlpcImpersonateClientOfPort
        228   DB 00093BA0 NtAlpcOpenSenderProcess
        229   DC 00093BB0 NtAlpcOpenSenderThread
        230   DD 00093BC0 NtAlpcQueryInformation
        231   DE 00093BD0 NtAlpcQueryInformationMessage
        232   DF 00093BE0 NtAlpcRevokeSecurityContext
        233   E0 00093BF0 NtAlpcSendWaitReceivePort
        234   E1 00093C00 NtAlpcSetInformation
        235   E2 00093830 NtApphelpCacheControl
        236   E3 00093C10 NtAreMappedFilesTheSame
        237   E4 00093C20 NtAssignProcessToJobObject
        238   E5 00093C30 NtAssociateWaitCompletionPacket
        239   E6 000933C0 NtCallbackReturn
        240   E7 00093940 NtCancelIoFile
        241   E8 00093C40 NtCancelIoFileEx
        242   E9 00093C50 NtCancelSynchronousIoFile
        243   EA 00093980 NtCancelTimer
        244   EB 00093C60 NtCancelTimer2
        245   EC 00093C70 NtCancelWaitCompletionPacket
        246   ED 00093750 NtClearEvent
        247   EE 00093460 NtClose
        248   EF 00093720 NtCloseObjectAuditAlarm
        249   F0 00093C80 NtCommitComplete
        250   F1 00093C90 NtCommitEnlistment
        251   F2 00093CA0 NtCommitTransaction
        252   F3 00093CB0 NtCompactKeys
        253   F4 00093CC0 NtCompareObjects
        254   F5 00093CD0 NtCompareTokens
        255   F6 00093CE0 NtCompleteConnectPort
        256   F7 00093CF0 NtCompressKey
        257   F8 00093D00 NtConnectPort
        258   F9 000937A0 NtContinue
        259   FA 00093D10 NtCreateDebugObject
        260   FB 00093D20 NtCreateDirectoryObject
        261   FC 00093D30 NtCreateDirectoryObjectEx
        262   FD 00093D40 NtCreateEnlistment
        263   FE 000937F0 NtCreateEvent
        264   FF 00093D50 NtCreateEventPair
        265  100 000938C0 NtCreateFile
        266  101 00093D60 NtCreateIRTimer
        267  102 00093D70 NtCreateIoCompletion
        268  103 00093D80 NtCreateJobObject
        269  104 00093D90 NtCreateJobSet
        270  105 00093540 NtCreateKey
        271  106 00093DA0 NtCreateKeyTransacted
        272  107 00093DB0 NtCreateKeyedEvent
        273  108 00093DC0 NtCreateLowBoxToken
        274  109 00093DD0 NtCreateMailslotFile
        275  10A 00093DE0 NtCreateMutant
        276  10B 00093DF0 NtCreateNamedPipeFile
        277  10C 00093E00 NtCreatePagingFile
        278  10D 00093E10 NtCreatePartition
        279  10E 00093E20 NtCreatePort
        280  10F 00093E30 NtCreatePrivateNamespace
        281  110 00093E40 NtCreateProcess
        282  111 00093840 NtCreateProcessEx
        283  112 00093E50 NtCreateProfile
        284  113 00093E60 NtCreateProfileEx
        285  114 00093E70 NtCreateResourceManager
        286  115 00093810 NtCreateSection
        287  116 00093E80 NtCreateSemaphore
        288  117 00093E90 NtCreateSymbolicLinkObject
        289  118 00093850 NtCreateThread
        290  119 00093EA0 NtCreateThreadEx
        291  11A 00093EB0 NtCreateTimer
        292  11B 00093EC0 NtCreateTimer2
        293  11C 00093ED0 NtCreateToken
        294  11D 00093EE0 NtCreateTokenEx
        295  11E 00093EF0 NtCreateTransaction
        296  11F 00093F00 NtCreateTransactionManager
        297  120 00093F10 NtCreateUserProcess
        298  121 00093F20 NtCreateWaitCompletionPacket
        299  122 00093F30 NtCreateWaitablePort
        300  123 00093F40 NtCreateWnfStateName
        301  124 00093F50 NtCreateWorkerFactory
        302  125 00093F60 NtDebugActiveProcess
        303  126 00093F70 NtDebugContinue
        304  127 000936B0 NtDelayExecution
        305  128 00093F80 NtDeleteAtom
        306  129 00093F90 NtDeleteBootEntry
        307  12A 00093FA0 NtDeleteDriverEntry
        308  12B 00093FB0 NtDeleteFile
        309  12C 00093FC0 NtDeleteKey
        310  12D 00093FD0 NtDeleteObjectAuditAlarm
        311  12E 00093FE0 NtDeletePrivateNamespace
        312  12F 00093FF0 NtDeleteValueKey
        313  130 00094000 NtDeleteWnfStateData
        314  131 00094010 NtDeleteWnfStateName
        315  132 000933E0 NtDeviceIoControlFile
        316  133 00094020 NtDisableLastKnownGood
        317  134 00094030 NtDisplayString
        318  135 00094040 NtDrawText
        319  136 00093730 NtDuplicateObject
        320  137 00093790 NtDuplicateToken
        321  138 00094050 NtEnableLastKnownGood
        322  139 00094060 NtEnumerateBootEntries
        323  13A 00094070 NtEnumerateDriverEntries
        324  13B 00093690 NtEnumerateKey
        325  13C 00094080 NtEnumerateSystemEnvironmentValuesEx
        326  13D 00094090 NtEnumerateTransactionObject
        327  13E 000934A0 NtEnumerateValueKey
        328  13F 000940A0 NtExtendSection
        329  140 000940B0 NtFilterBootOption
        330  141 000940C0 NtFilterToken
        331  142 000940D0 NtFilterTokenEx
        332  143 000934B0 NtFindAtom
        333  144 00093820 NtFlushBuffersFile
        334  145 000940E0 NtFlushBuffersFileEx
        335  146 000940F0 NtFlushInstallUILanguage
        336  147 00094100 NtFlushInstructionCache
        337  148 00094110 NtFlushKey
        338  149 00094120 NtFlushProcessWriteBuffers
        339  14A 00094130 NtFlushVirtualMemory
        340  14B 00094140 NtFlushWriteBuffer
        341  14C 00094150 NtFreeUserPhysicalPages
        342  14D 00093550 NtFreeVirtualMemory
        343  14E 00094160 NtFreezeRegistry
        344  14F 00094170 NtFreezeTransactions
        345  150 00093700 NtFsControlFile
        346  151 00094180 NtGetCachedSigningLevel
        347  152 00094190 NtGetCompleteWnfStateSubscription
        348  153 000941A0 NtGetContextThread
        349  154 000941B0 NtGetCurrentProcessorNumber
        350  155 000941C0 NtGetCurrentProcessorNumberEx
        351  156 000941D0 NtGetDevicePowerState
        352  157 000941E0 NtGetMUIRegistryInfo
        353  158 000941F0 NtGetNextProcess
        354  159 00094200 NtGetNextThread
        355  15A 00094210 NtGetNlsSectionPtr
        356  15B 00094220 NtGetNotificationResourceManager
        357  15C 000CE160 NtGetTickCount
        358  15D 00094230 NtGetWriteWatch
        359  15E 00094240 NtImpersonateAnonymousToken
        360  15F 00093560 NtImpersonateClientOfPort
        361  160 00094250 NtImpersonateThread
        362  161 00094260 NtInitializeNlsFiles
        363  162 00094270 NtInitializeRegistry
        364  163 00094280 NtInitiatePowerAction
        365  164 00093860 NtIsProcessInJob
        366  165 00094290 NtIsSystemResumeAutomatic
        367  166 000942A0 NtIsUILanguageComitted
        368  167 000942B0 NtListenPort
        369  168 000942C0 NtLoadDriver
        370  169 000942D0 NtLoadKey
        371  16A 000942E0 NtLoadKey2
        372  16B 00094F00 NtLoadKey3
        373  16C 000942F0 NtLoadKeyEx
        374  16D 00094300 NtLockFile
        375  16E 00094310 NtLockProductActivationKeys
        376  16F 00094320 NtLockRegistryKey
        377  170 00094330 NtLockVirtualMemory
        378  171 00094340 NtMakePermanentObject
        379  172 00094350 NtMakeTemporaryObject
        380  173 00094360 NtManagePartition
        381  174 00094370 NtMapCMFModule
        382  175 00094380 NtMapUserPhysicalPages
        383  176 000933A0 NtMapUserPhysicalPagesScatter
        384  177 000935F0 NtMapViewOfSection
        385  178 00094390 NtModifyBootEntry
        386  179 000943A0 NtModifyDriverEntry
        387  17A 000943B0 NtNotifyChangeDirectoryFile
        388  17B 000943C0 NtNotifyChangeKey
        389  17C 000943D0 NtNotifyChangeMultipleKeys
        390  17D 000943E0 NtNotifyChangeSession
        391  17E 000938F0 NtOpenDirectoryObject
        392  17F 000943F0 NtOpenEnlistment
        393  180 00093770 NtOpenEvent
        394  181 00094400 NtOpenEventPair
        395  182 000936A0 NtOpenFile
        396  183 00094410 NtOpenIoCompletion
        397  184 00094420 NtOpenJobObject
        398  185 00093490 NtOpenKey
        399  186 00094430 NtOpenKeyEx
        400  187 00094440 NtOpenKeyTransacted
        401  188 00094450 NtOpenKeyTransactedEx
        402  189 00094460 NtOpenKeyedEvent
        403  18A 00094470 NtOpenMutant
        404  18B 00094480 NtOpenObjectAuditAlarm
        405  18C 00094490 NtOpenPartition
        406  18D 000944A0 NtOpenPrivateNamespace
        407  18E 000935D0 NtOpenProcess
        408  18F 000944B0 NtOpenProcessToken
        409  190 00093670 NtOpenProcessTokenEx
        410  191 000944C0 NtOpenResourceManager
        411  192 000936E0 NtOpenSection
        412  193 000944D0 NtOpenSemaphore
        413  194 000944E0 NtOpenSession
        414  195 000944F0 NtOpenSymbolicLinkObject
        415  196 00094500 NtOpenThread
        416  197 000935B0 NtOpenThreadToken
        417  198 00093660 NtOpenThreadTokenEx
        418  199 00094510 NtOpenTimer
        419  19A 00094520 NtOpenTransaction
        420  19B 00094530 NtOpenTransactionManager
        421  19C 00094540 NtPlugPlayControl
        422  19D 00093960 NtPowerInformation
        423  19E 00094550 NtPrePrepareComplete
        424  19F 00094560 NtPrePrepareEnlistment
        425  1A0 00094570 NtPrepareComplete
        426  1A1 00094580 NtPrepareEnlistment
        427  1A2 00094590 NtPrivilegeCheck
        428  1A3 000945A0 NtPrivilegeObjectAuditAlarm
        429  1A4 000945B0 NtPrivilegedServiceAuditAlarm
        430  1A5 000945C0 NtPropagationComplete
        431  1A6 000945D0 NtPropagationFailed
        432  1A7 00093870 NtProtectVirtualMemory
        433  1A8 000945E0 NtPulseEvent
        434  1A9 00093740 NtQueryAttributesFile
        435  1AA 000945F0 NtQueryBootEntryOrder
        436  1AB 00094600 NtQueryBootOptions
        437  1AC 00094610 NtQueryDebugFilterState
        438  1AD 000934C0 NtQueryDefaultLocale
        439  1AE 000937B0 NtQueryDefaultUILanguage
        440  1AF 000936C0 NtQueryDirectoryFile
        441  1B0 00094620 NtQueryDirectoryObject
        442  1B1 00094630 NtQueryDriverEntryOrder
        443  1B2 00094640 NtQueryEaFile
        444  1B3 000938D0 NtQueryEvent
        445  1B4 00094650 NtQueryFullAttributesFile
        446  1B5 00094660 NtQueryInformationAtom
        447  1B6 00094670 NtQueryInformationEnlistment
        448  1B7 00093480 NtQueryInformationFile
        449  1B8 00094680 NtQueryInformationJobObject
        450  1B9 00094690 NtQueryInformationPort
        451  1BA 00093500 NtQueryInformationProcess
        452  1BB 000946A0 NtQueryInformationResourceManager
        453  1BC 000935C0 NtQueryInformationThread
        454  1BD 00093580 NtQueryInformationToken
        455  1BE 000946B0 NtQueryInformationTransaction
        456  1BF 000946C0 NtQueryInformationTransactionManager
        457  1C0 000946D0 NtQueryInformationWorkerFactory
        458  1C1 000946E0 NtQueryInstallUILanguage
        459  1C2 000946F0 NtQueryIntervalProfile
        460  1C3 00094700 NtQueryIoCompletion
        461  1C4 000934D0 NtQueryKey
        462  1C5 00094710 NtQueryLicenseValue
        463  1C6 00094720 NtQueryMultipleValueKey
        464  1C7 00094730 NtQueryMutant
        465  1C8 00093470 NtQueryObject
        466  1C9 00094740 NtQueryOpenSubKeys
        467  1CA 00094750 NtQueryOpenSubKeysEx
        468  1CB 00093680 NtQueryPerformanceCounter
        469  1CC 00094760 NtQueryPortInformationProcess
        470  1CD 00094770 NtQueryQuotaInformationFile
        471  1CE 00093880 NtQuerySection
        472  1CF 00094780 NtQuerySecurityAttributesToken
        473  1D0 00094790 NtQuerySecurityObject
        474  1D1 000947A0 NtQuerySemaphore
        475  1D2 000947B0 NtQuerySymbolicLinkObject
        476  1D3 000947C0 NtQuerySystemEnvironmentValue
        477  1D4 000947D0 NtQuerySystemEnvironmentValueEx
        478  1D5 000936D0 NtQuerySystemInformation
        479  1D6 000947E0 NtQuerySystemInformationEx
        480  1D7 00093910 NtQuerySystemTime
        481  1D8 000936F0 NtQueryTimer
        482  1D9 000947F0 NtQueryTimerResolution
        483  1DA 000934E0 NtQueryValueKey
        484  1DB 000935A0 NtQueryVirtualMemory
        485  1DC 00093800 NtQueryVolumeInformationFile
        486  1DD 00094800 NtQueryWnfStateData
        487  1DE 00094810 NtQueryWnfStateNameInformation
        488  1DF 000937C0 NtQueueApcThread
        489  1E0 00094820 NtQueueApcThreadEx
        490  1E1 00094830 NtRaiseException
        491  1E2 00094840 NtRaiseHardError
        492  1E3 000933D0 NtReadFile
        493  1E4 00093650 NtReadFileScatter
        494  1E5 00094850 NtReadOnlyEnlistment
        495  1E6 000938B0 NtReadRequestData
        496  1E7 00093760 NtReadVirtualMemory
        497  1E8 00094860 NtRecoverEnlistment
        498  1E9 00094870 NtRecoverResourceManager
        499  1EA 00094880 NtRecoverTransactionManager
        500  1EB 00094890 NtRegisterProtocolAddressInformation
        501  1EC 000948A0 NtRegisterThreadTerminatePort
        502  1ED 000948B0 NtReleaseKeyedEvent
        503  1EE 00093570 NtReleaseMutant
        504  1EF 00093410 NtReleaseSemaphore
        505  1F0 000948C0 NtReleaseWorkerFactoryWorker
        506  1F1 00093400 NtRemoveIoCompletion
        507  1F2 000948D0 NtRemoveIoCompletionEx
        508  1F3 000948E0 NtRemoveProcessDebug
        509  1F4 000948F0 NtRenameKey
        510  1F5 00094900 NtRenameTransactionManager
        511  1F6 00094910 NtReplaceKey
        512  1F7 00094920 NtReplacePartitionUnit
        513  1F8 00093430 NtReplyPort
        514  1F9 00093420 NtReplyWaitReceivePort
        515  1FA 00093620 NtReplyWaitReceivePortEx
        516  1FB 00094930 NtReplyWaitReplyPort
        517  1FC 00094940 NtRequestPort
        518  1FD 00093590 NtRequestWaitReplyPort
        519  1FE 00094950 NtResetEvent
        520  1FF 00094960 NtResetWriteWatch
        521  200 00094970 NtRestoreKey
        522  201 00094980 NtResumeProcess
        523  202 00093890 NtResumeThread
        524  203 00094990 NtRevertContainerImpersonation
        525  204 000949A0 NtRollbackComplete
        526  205 000949B0 NtRollbackEnlistment
        527  206 000949C0 NtRollbackTransaction
        528  207 000949D0 NtRollforwardTransactionManager
        529  208 000949E0 NtSaveKey
        530  209 000949F0 NtSaveKeyEx
        531  20A 00094A00 NtSaveMergedKeys
        532  20B 00094A10 NtSecureConnectPort
        533  20C 00094A20 NtSerializeBoot
        534  20D 00094A30 NtSetBootEntryOrder
        535  20E 00094A40 NtSetBootOptions
        536  20F 00094A50 NtSetCachedSigningLevel
        537  210 00094A60 NtSetContextThread
        538  211 00094A70 NtSetDebugFilterState
        539  212 00094A80 NtSetDefaultHardErrorPort
        540  213 00094A90 NtSetDefaultLocale
        541  214 00094AA0 NtSetDefaultUILanguage
        542  215 00094AB0 NtSetDriverEntryOrder
        543  216 00094AC0 NtSetEaFile
        544  217 00093450 NtSetEvent
        545  218 00093640 NtSetEventBoostPriority
        546  219 00094AD0 NtSetHighEventPair
        547  21A 00094AE0 NtSetHighWaitLowEventPair
        548  21B 00094AF0 NtSetIRTimer
        549  21C 00094B00 NtSetInformationDebugObject
        550  21D 00094B10 NtSetInformationEnlistment
        551  21E 000935E0 NtSetInformationFile
        552  21F 00094B20 NtSetInformationJobObject
        553  220 00094B30 NtSetInformationKey
        554  221 00093930 NtSetInformationObject
        555  222 00093530 NtSetInformationProcess
        556  223 00094B40 NtSetInformationResourceManager
        557  224 00094B50 NtSetInformationSymbolicLink
        558  225 00093440 NtSetInformationThread
        559  226 00094B60 NtSetInformationToken
        560  227 00094B70 NtSetInformationTransaction
        561  228 00094B80 NtSetInformationTransactionManager
        562  229 00094B90 NtSetInformationVirtualMemory
        563  22A 00094BA0 NtSetInformationWorkerFactory
        564  22B 00094BB0 NtSetIntervalProfile
        565  22C 00094BC0 NtSetIoCompletion
        566  22D 00094BD0 NtSetIoCompletionEx
        567  22E 00094BE0 NtSetLdtEntries
        568  22F 00094BF0 NtSetLowEventPair
        569  230 00094C00 NtSetLowWaitHighEventPair
        570  231 00094C10 NtSetQuotaInformationFile
        571  232 00094C20 NtSetSecurityObject
        572  233 00094C30 NtSetSystemEnvironmentValue
        573  234 00094C40 NtSetSystemEnvironmentValueEx
        574  235 00094C50 NtSetSystemInformation
        575  236 00094C60 NtSetSystemPowerState
        576  237 00094C70 NtSetSystemTime
        577  238 00094C80 NtSetThreadExecutionState
        578  239 00093990 NtSetTimer
        579  23A 00094C90 NtSetTimer2
        580  23B 00094CA0 NtSetTimerEx
        581  23C 00094CB0 NtSetTimerResolution
        582  23D 00094CC0 NtSetUuidSeed
        583  23E 00093970 NtSetValueKey
        584  23F 00094CD0 NtSetVolumeInformationFile
        585  240 00094CE0 NtSetWnfProcessNotificationEvent
        586  241 00094CF0 NtShutdownSystem
        587  242 00094D00 NtShutdownWorkerFactory
        588  243 00094D10 NtSignalAndWaitForSingleObject
        589  244 00094D20 NtSinglePhaseReject
        590  245 00094D30 NtStartProfile
        591  246 00094D40 NtStopProfile
        592  247 00094D50 NtSubscribeWnfStateChange
        593  248 00094D60 NtSuspendProcess
        594  249 00094D70 NtSuspendThread
        595  24A 00094D80 NtSystemDebugControl
        596  24B 00094D90 NtTerminateJobObject
        597  24C 00093630 NtTerminateProcess
        598  24D 000938A0 NtTerminateThread
        599  24E 00094DA0 NtTestAlert
        600  24F 00094DB0 NtThawRegistry
        601  250 00094DC0 NtThawTransactions
        602  251 00094DD0 NtTraceControl
        603  252 00093950 NtTraceEvent
        604  253 00094DE0 NtTranslateFilePath
        605  254 00094DF0 NtUmsThreadYield
        606  255 00094E00 NtUnloadDriver
        607  256 00094E10 NtUnloadKey
        608  257 00094E20 NtUnloadKey2
        609  258 00094E30 NtUnloadKeyEx
        610  259 00094E40 NtUnlockFile
        611  25A 00094E50 NtUnlockVirtualMemory
        612  25B 00093610 NtUnmapViewOfSection
        613  25C 00094E60 NtUnmapViewOfSectionEx
        614  25D 00094E70 NtUnsubscribeWnfStateChange
        615  25E 00094E80 NtUpdateWnfStateData
        616  25F 00094E90 NtVdmControl
        617  260 00094EA0 NtWaitForAlertByThreadId
        618  261 00094EB0 NtWaitForDebugEvent
        619  262 00094EC0 NtWaitForKeyedEvent
        620  263 00093920 NtWaitForMultipleObjects
        621  264 00093510 NtWaitForMultipleObjects32
        622  265 000933B0 NtWaitForSingleObject
        623  266 00094ED0 NtWaitForWorkViaWorkerFactory
        624  267 00094EE0 NtWaitHighEventPair
        625  268 00094EF0 NtWaitLowEventPair
        626  269 00093380 NtWorkerFactoryWorkerReady
        627  26A 000933F0 NtWriteFile
        628  26B 00093520 NtWriteFileGather
        629  26C 000938E0 NtWriteRequestData
        630  26D 00093710 NtWriteVirtualMemory
        631  26E 000937D0 NtYieldExecution
        632  26F 00093060 NtdllDefWindowProc_A
        633  270 00093070 NtdllDefWindowProc_W
        634  271 00093120 NtdllDialogWndProc_A
        635  272 00093130 NtdllDialogWndProc_W
        636  273 000CE430 PfxFindPrefix
        637  274 000CE510 PfxInitialize
        638  275 000CE530 PfxInsertPrefix
        639  276 000CE650 PfxRemovePrefix
        640  277 00058B60 PssNtCaptureSnapshot
        641  278 000833D0 PssNtDuplicateSnapshot
        642  279 000F6620 PssNtFreeRemoteSnapshot
        643  27A 000593C0 PssNtFreeSnapshot
        644  27B 00083440 PssNtFreeWalkMarker
        645  27C 00081EA0 PssNtQuerySnapshot
        646  27D 00059530 PssNtValidateDescriptor
        647  27E 000817F0 PssNtWalkSnapshot
        648  27F 0007DED0 RtlAbortRXact
        649  280 00063EB0 RtlAbsoluteToSelfRelativeSD
        650  281 00038170 RtlAcquirePebLock
        651  282 0006E1E0 RtlAcquirePrivilege
        652  283 0006C4E0 RtlAcquireReleaseSRWLockExclusive
        653  284 000618F0 RtlAcquireResourceExclusive
        654  285 000617A0 RtlAcquireResourceShared
        655  286 0002A1D0 RtlAcquireSRWLockExclusive
        656  287 00030590 RtlAcquireSRWLockShared
        657  288 000532D0 RtlActivateActivationContext
        658  289 00053320 RtlActivateActivationContextEx
        659  28A 00021A70 RtlActivateActivationContextUnsafeFast
        660  28B 0001FAC0 RtlAddAccessAllowedAce
        661  28C 00070BA0 RtlAddAccessAllowedAceEx
        662  28D 00073900 RtlAddAccessAllowedObjectAce
        663  28E 00078EC0 RtlAddAccessDeniedAce
        664  28F 00078940 RtlAddAccessDeniedAceEx
        665  290 00073850 RtlAddAccessDeniedObjectAce
        666  291 00066920 RtlAddAce
        667  292 00075B40 RtlAddActionToRXact
        668  293 00051DA0 RtlAddAtomToAtomTable
        669  294 00075BC0 RtlAddAttributeActionToRXact
        670  295 00078360 RtlAddAuditAccessAce
        671  296 00077340 RtlAddAuditAccessAceEx
        672  297 000738A0 RtlAddAuditAccessObjectAce
        673  298 000D0500 RtlAddCompoundAce
        674  299 000723F0 RtlAddFunctionTable
        675  29A 00062E80 RtlAddGrowableFunctionTable
        676  29B 000D1E70 RtlAddIntegrityLabelToBoundaryDescriptor
        677  29C 0004AA90 RtlAddMandatoryAce
        678  29D 00080750 RtlAddProcessTrustLabelAce
        679  29E 0003E5E0 RtlAddRefActivationContext
        680  29F 000759D0 RtlAddRefMemoryStream
        681  2A0 000D0670 RtlAddResourceAttributeAce
        682  2A1 00052A80 RtlAddSIDToBoundaryDescriptor
        683  2A2 000D09D0 RtlAddScopedPolicyIDAce
        684  2A3 00083610 RtlAddVectoredContinueHandler
        685  2A4 00066CB0 RtlAddVectoredExceptionHandler
        686  2A5 00017410 RtlAddressInSectionTable
        687  2A6 0006F080 RtlAdjustPrivilege
        688  2A7 0006C960 RtlAllocateActivationContextStack
        689  2A8 0004EFA0 RtlAllocateAndInitializeSid
        690  2A9 000CE700 RtlAllocateAndInitializeSidEx
        691  2AA 00052430 RtlAllocateHandle
        692  2AB 0002EAB0 RtlAllocateHeap
        693  2AC 000FD010 RtlAllocateMemoryBlockLookaside
        694  2AD 000FD0F0 RtlAllocateMemoryZone
        695  2AE 00076DD0 RtlAllocateWnfSerializationGroup
        696  2AF 00023800 RtlAnsiCharToUnicodeChar
        697  2B0 000D2500 RtlAnsiStringToUnicodeSize
        698  2B1 00023710 RtlAnsiStringToUnicodeString
        699  2B2 000D2560 RtlAppendAsciizToString
        700  2B3 000BB960 RtlAppendPathElement
        701  2B4 000D25D0 RtlAppendStringToString
        702  2B5 0003FE70 RtlAppendUnicodeStringToString
        703  2B6 0001F7D0 RtlAppendUnicodeToString
        704  2B7 000C6C60 RtlApplicationVerifierStop
        705  2B8 0007DDF0 RtlApplyRXact
        706  2B9 0007DEA0 RtlApplyRXactNoFlush
        707  2BA 000BB470 RtlAppxIsFileOwnedByTrustedInstaller
        708  2BB 00071710 RtlAreAllAccessesGranted
        709  2BC 000CE7D0 RtlAreAnyAccessesGranted
        710  2BD 00077690 RtlAreBitsClear
        711  2BE 00063950 RtlAreBitsSet
        712  2BF 000D3800 RtlAssert
        713  2C0 000745B0 RtlAvlInsertNodeEx
        714  2C1 00074210 RtlAvlRemoveNode
        715  2C2 000D3930 RtlBarrier
        716  2C3 000D3A70 RtlBarrierForDelete
        717  2C4 000F5FC0 RtlCancelTimer
        718  2C5 0005D5A0 RtlCanonicalizeDomainName
        719  2C6 0004A510 RtlCapabilityCheck
        720  2C7 000953F0 RtlCaptureContext
        721  2C8 00012600 RtlCaptureStackBackTrace
        722  2C9 0006DAB0 RtlCharToInteger
        723  2CA 0006C9F0 RtlCheckForOrphanedCriticalSections
        724  2CB 0000CED0 RtlCheckPortableOperatingSystem
        725  2CC 0000D540 RtlCheckRegistryKey
        726  2CD 000C2C70 RtlCheckSandboxedToken
        727  2CE 0004A810 RtlCheckTokenCapability
        728  2CF 000CE7E0 RtlCheckTokenMembership
        729  2D0 0004AC70 RtlCheckTokenMembershipEx
        730  2D1 00047350 RtlCleanUpTEBLangLists
        731  2D2 00058740 RtlClearAllBits
        732  2D3 000D26A0 RtlClearBit
        733  2D4 00056360 RtlClearBits
        734  2D5 000C14B0 RtlCloneMemoryStream
        735  2D6 000C23C0 RtlCloneUserProcess
        736  2D7 000D7C10 RtlCmDecodeMemIoResource
        737  2D8 000D7C80 RtlCmEncodeMemIoResource
        738  2D9 000C3580 RtlCommitDebugInfo
        739  2DA 000C14B0 RtlCommitMemoryStream
        740  2DB 000789C0 RtlCompactHeap
        741  2DC 000DB7F0 RtlCompareAltitudes
        742  2DD 00095950 RtlCompareMemory
        743  2DE 000959D0 RtlCompareMemoryUlong
        744  2DF 0007FA20 RtlCompareString
        745  2E0 00035550 RtlCompareUnicodeString
        746  2E1 00035590 RtlCompareUnicodeStrings
        747  2E2 000C26A0 RtlCompleteProcessCloning
        748  2E3 0005B050 RtlCompressBuffer
        749  2E4 0005D1D0 RtlComputeCrc32
        750  2E5 000CA9B0 RtlComputeImportTableHash
        751  2E6 000C1150 RtlComputePrivatizedDllName_U
        752  2E7 000804F0 RtlConnectToSm
        753  2E8 00071720 RtlConsoleMultiByteToUnicodeN
        754  2E9 00074AA0 RtlContractHashTable
        755  2EA 000455C0 RtlConvertDeviceFamilyInfoToString
        756  2EB 00075A50 RtlConvertExclusiveToShared
        757  2EC 000D4710 RtlConvertLCIDToString
        758  2ED 000D0430 RtlConvertSRWLockExclusiveToShared
        759  2EE 00061890 RtlConvertSharedToExclusive
        760  2EF 0001FAF0 RtlConvertSidToUnicodeString
        761  2F0 000C2FD0 RtlConvertToAutoInheritSecurityObject
        762  2F1 000D26B0 RtlCopyBitMap
        763  2F2 00066E30 RtlCopyContext
        764  2F3 000DBC70 RtlCopyExtendedContext
        765  2F4 0006C9E0 RtlCopyLuid
        766  2F5 000CE800 RtlCopyLuidAndAttributesArray
        767  2F6 00076F60 RtlCopyMappedMemory
        768  2F7 00097C40 RtlCopyMemory
        769  2F8 00095A00 RtlCopyMemoryNonTemporal
        770  2F9 000C14B0 RtlCopyMemoryStreamTo
        771  2FA 000C14B0 RtlCopyOutOfProcessMemoryStreamTo
        772  2FB 00063C40 RtlCopySecurityDescriptor
        773  2FC 0004E670 RtlCopySid
        774  2FD 000CE830 RtlCopySidAndAttributesArray
        775  2FE 00077640 RtlCopyString
        776  2FF 0001FA40 RtlCopyUnicodeString
        777  300 000DC3E0 RtlCrc32
        778  301 000DC400 RtlCrc64
        779  302 0004C940 RtlCreateAcl
        780  303 00056410 RtlCreateActivationContext
        781  304 0007FC10 RtlCreateAndSetSD
        782  305 000789B0 RtlCreateAtomTable
        783  306 000DC8C0 RtlCreateBootStatusDataFile
        784  307 00076A30 RtlCreateBoundaryDescriptor
        785  308 00045F30 RtlCreateEnvironment
        786  309 00046570 RtlCreateEnvironmentEx
        787  30A 00065460 RtlCreateHashTable
        788  30B 000DBB90 RtlCreateHashTableEx
        789  30C 00005330 RtlCreateHeap
        790  30D 00072720 RtlCreateMemoryBlockLookaside
        791  30E 000728F0 RtlCreateMemoryZone
        792  30F 000C27B0 RtlCreateProcessParameters
        793  310 00045F50 RtlCreateProcessParametersEx
        794  311 000C15C0 RtlCreateProcessReflection
        795  312 00052C80 RtlCreateQueryDebugBuffer
        796  313 000D4050 RtlCreateRegistryKey
        797  314 0004E5C0 RtlCreateSecurityDescriptor
        798  315 0004EE80 RtlCreateServiceSid
        799  316 0007F270 RtlCreateSystemVolumeInformationFolder
        800  317 00003610 RtlCreateTagHeap
        801  318 0007C410 RtlCreateTimer
        802  319 0007A9C0 RtlCreateTimerQueue
        803  31A 000DDC20 RtlCreateUmsCompletionList
        804  31B 000DDD40 RtlCreateUmsThreadContext
        805  31C 00020B50 RtlCreateUnicodeString
        806  31D 00020C20 RtlCreateUnicodeStringFromAsciiz
        807  31E 0007FF60 RtlCreateUserProcess
        808  31F 000C2FE0 RtlCreateUserSecurityObject
        809  320 00001780 RtlCreateUserStack
        810  321 000760F0 RtlCreateUserThread
        811  322 00052A90 RtlCreateVirtualAccountSid
        812  323 0001EEE0 RtlCultureNameToLCID
        813  324 000CD1A0 RtlCustomCPToUnicodeN
        814  325 0005CB50 RtlCutoverTimeToSystemTime
        815  326 000C3590 RtlDeCommitDebugInfo
        816  327 000C2820 RtlDeNormalizeProcessParams
        817  328 00063700 RtlDeactivateActivationContext
        818  329 00023B70 RtlDeactivateActivationContextUnsafeFast
        819  32A 000756F0 RtlDebugPrintTimes
        820  32B 00065F20 RtlDecodePointer
        821  32C 000C74B0 RtlDecodeRemotePointer
        822  32D 000777E0 RtlDecodeSystemPointer
        823  32E 0005A4C0 RtlDecompressBuffer
        824  32F 0005A560 RtlDecompressBufferEx
        825  330 000DB9F0 RtlDecompressFragment
        826  331 00050950 RtlDefaultNpAcl
        827  332 00061280 RtlDelete
        828  333 0006EFA0 RtlDeleteAce
        829  334 00051CA0 RtlDeleteAtomFromAtomTable
        830  335 000D3BC0 RtlDeleteBarrier
        831  336 00029F80 RtlDeleteBoundaryDescriptor
        832  337 000081B0 RtlDeleteCriticalSection
        833  338 00060D50 RtlDeleteElementGenericTable
        834  339 000604B0 RtlDeleteElementGenericTableAvl
        835  33A 00060750 RtlDeleteElementGenericTableAvlEx
        836  33B 000701E0 RtlDeleteFunctionTable
        837  33C 000706B0 RtlDeleteGrowableFunctionTable
        838  33D 00077D20 RtlDeleteHashTable
        839  33E 00061320 RtlDeleteNoSplay
        840  33F 00081660 RtlDeleteRegistryValue
        841  340 00008160 RtlDeleteResource
        842  341 000705B0 RtlDeleteSecurityObject
        843  342 0007C2C0 RtlDeleteTimer
        844  343 000F5FD0 RtlDeleteTimerQueue
        845  344 0007A630 RtlDeleteTimerQueueEx
        846  345 000DDE50 RtlDeleteUmsCompletionList
        847  346 000DDEB0 RtlDeleteUmsThreadContext
        848  347 000DDF10 RtlDequeueUmsCompletionListItems
        849  348 000DE880 RtlDeregisterSecureMemoryCacheCallback
        850  349 0007A620 RtlDeregisterWait
        851  34A 0007B3C0 RtlDeregisterWaitEx
        852  34B 00050D00 RtlDeriveCapabilitySidsFromName
        853  34C 000D1C10 RtlDestroyAtomTable
        854  34D 00046550 RtlDestroyEnvironment
        855  34E 00078E30 RtlDestroyHandleTable
        856  34F 00004920 RtlDestroyHeap
        857  350 00078870 RtlDestroyMemoryBlockLookaside
        858  351 000788D0 RtlDestroyMemoryZone
        859  352 00074990 RtlDestroyProcessParameters
        860  353 00069220 RtlDestroyQueryDebugBuffer
        861  354 00044990 RtlDetectHeapLeaks
        862  355 00057720 RtlDetermineDosPathNameType_U
        863  356 000BB660 RtlDisableThreadProfiling
        864  357 00038910 RtlDllShutdownInProgress
        865  358 0006CF30 RtlDnsHostNameToComputerName
        866  359 00079060 RtlDoesFileExists_U
        867  35A 00024620 RtlDosApplyFileIsolationRedirection_Ustr
        868  35B 0006DB60 RtlDosPathNameToNtPathName_U
        869  35C 0001BFF0 RtlDosPathNameToNtPathName_U_WithStatus
        870  35D 0001BD70 RtlDosPathNameToRelativeNtPathName_U
        871  35E 00025870 RtlDosPathNameToRelativeNtPathName_U_WithStatus
        872  35F 00057510 RtlDosSearchPath_U
        873  360 0005F890 RtlDosSearchPath_Ustr
        874  361 000D2040 RtlDowncaseUnicodeChar
        875  362 0006A620 RtlDowncaseUnicodeString
        876  363 000C1F00 RtlDumpResource
        877  364 0006B800 RtlDuplicateUnicodeString
        878  365 000D1CF0 RtlEmptyAtomTable
        879  366 000C1F50 RtlEnableEarlyCriticalSectionEventCreation
        880  367 000BB6D0 RtlEnableThreadProfiling
        881  368 00066DE0 RtlEncodePointer
        882  369 000C7520 RtlEncodeRemotePointer
        883  36A 00077D00 RtlEncodeSystemPointer
        884  36B 00073640 RtlEndEnumerationHashTable
        885  36C 000756F0 RtlEndStrongEnumerationHashTable
        886  36D 000DBBA0 RtlEndWeakEnumerationHashTable
        887  36E 00034F30 RtlEnterCriticalSection
        888  36F 000DDFA0 RtlEnterUmsSchedulingMode
        889  370 000D8080 RtlEnumProcessHeaps
        890  371 00065360 RtlEnumerateEntryHashTable
        891  372 00060CC0 RtlEnumerateGenericTable
        892  373 00062270 RtlEnumerateGenericTableAvl
        893  374 000DE620 RtlEnumerateGenericTableLikeADirectory
        894  375 00061720 RtlEnumerateGenericTableWithoutSplaying
        895  376 00062290 RtlEnumerateGenericTableWithoutSplayingAvl
        896  377 0005D4E0 RtlEqualComputerName
        897  378 0005D520 RtlEqualDomainName
        898  379 000CE8F0 RtlEqualLuid
        899  37A 0004D4E0 RtlEqualPrefixSid
        900  37B 0004A430 RtlEqualSid
        901  37C 00064E70 RtlEqualString
        902  37D 00023CC0 RtlEqualUnicodeString
        903  37E 000790C0 RtlEqualWnfChangeStamps
        904  37F 00083480 RtlEraseUnicodeString
        905  380 000DF690 RtlEthernetAddressToStringA
        906  381 000DF8F0 RtlEthernetAddressToStringW
        907  382 000DF960 RtlEthernetStringToAddressA
        908  383 000DFAB0 RtlEthernetStringToAddressW
        909  384 000DE080 RtlExecuteUmsThread
        910  385 000442C0 RtlExitUserProcess
        911  386 00009FA0 RtlExitUserThread
        912  387 00038310 RtlExpandEnvironmentStrings
        913  388 0000F480 RtlExpandEnvironmentStrings_U
        914  389 00064FA0 RtlExpandHashTable
        915  38A 000D1E80 RtlExtendMemoryBlockLookaside
        916  38B 000D1EF0 RtlExtendMemoryZone
        917  38C 000D28B0 RtlExtractBitMap
        918  38D 00095B20 RtlFillMemory
        919  38E 000756F0 RtlFinalReleaseOutOfProcessMemoryStream
        920  38F 0004D7F0 RtlFindAceByType
        921  390 000240F0 RtlFindActivationContextSectionGuid
        922  391 00024ED0 RtlFindActivationContextSectionString
        923  392 00026DA0 RtlFindCharInUnicodeString
        924  393 00001010 RtlFindClearBits
        925  394 00055DD0 RtlFindClearBitsAndSet
        926  395 000D2A50 RtlFindClearRuns
        927  396 000D7D70 RtlFindClosestEncodableLength
        928  397 00059F40 RtlFindLastBackwardRunClear
        929  398 00078220 RtlFindLeastSignificantBit
        930  399 000D2D10 RtlFindLongestRunClear
        931  39A 000655B0 RtlFindMessage
        932  39B 00078340 RtlFindMostSignificantBit
        933  39C 00003180 RtlFindNextForwardRunClear
        934  39D 00081040 RtlFindSetBits
        935  39E 000D2D50 RtlFindSetBitsAndClear
        936  39F 000D20A0 RtlFindUnicodeSubstring
        937  3A0 00094FC0 RtlFirstEntrySList
        938  3A1 0001FF30 RtlFirstFreeAce
        939  3A2 00055BF0 RtlFlsAlloc
        940  3A3 00056230 RtlFlsFree
        941  3A4 000094D0 RtlFlushHeaps
        942  3A5 000DE940 RtlFlushSecureMemoryCache
        943  3A6 0001F8D0 RtlFormatCurrentUserKeyPath
        944  3A7 000DFBF0 RtlFormatMessage
        945  3A8 00010330 RtlFormatMessageEx
        946  3A9 00063620 RtlFreeActivationContextStack
        947  3AA 00027180 RtlFreeAnsiString
        948  3AB 00051C60 RtlFreeHandle
        949  3AC 0002A900 RtlFreeHeap
        950  3AD 000FD150 RtlFreeMemoryBlockLookaside
        951  3AE 00076E70 RtlFreeOemString
        952  3AF 0006D900 RtlFreeSid
        953  3B0 000635E0 RtlFreeThreadActivationContextStack
        954  3B1 00027180 RtlFreeUnicodeString
        955  3B2 00002EB0 RtlFreeUserStack
        956  3B3 000648E0 RtlGUIDFromString
        957  3B4 000DFDF0 RtlGenerate8dot3Name
        958  3B5 0006BB40 RtlGetAce
        959  3B6 0003DA60 RtlGetActiveActivationContext
        960  3B7 0003EB80 RtlGetAppContainerNamedObjectPath
        961  3B8 000030B0 RtlGetAppContainerParent
        962  3B9 0004A790 RtlGetAppContainerSidType
        963  3BA 000D3CE0 RtlGetCallersAddress
        964  3BB 00073720 RtlGetCompressionWorkSpaceSize
        965  3BC 00070090 RtlGetControlSecurityDescriptor
        966  3BD 00068600 RtlGetCriticalSectionRecursionCount
        967  3BE 0006F630 RtlGetCurrentDirectory_U
        968  3BF 0007EBA0 RtlGetCurrentPeb
        969  3C0 00092F60 RtlGetCurrentProcessorNumber
        970  3C1 00092F90 RtlGetCurrentProcessorNumberEx
        971  3C2 00069F90 RtlGetCurrentTransaction
        972  3C3 00061680 RtlGetCurrentUmsThread
        973  3C4 0006C720 RtlGetDaclSecurityDescriptor
        974  3C5 000456A0 RtlGetDeviceFamilyInfoEnum
        975  3C6 00074AE0 RtlGetElementGenericTable
        976  3C7 000DE750 RtlGetElementGenericTableAvl
        977  3C8 000778B0 RtlGetEnabledExtendedFeatures
        978  3C9 00076DF0 RtlGetExePath
        979  3CA 000670B0 RtlGetExtendedContextLength
        980  3CB 00077930 RtlGetExtendedFeaturesMask
        981  3CC 000542E0 RtlGetFileMUIPath
        982  3CD 000BC4E0 RtlGetFrame
        983  3CE 00054A30 RtlGetFullPathName_U
        984  3CF 0001BDA0 RtlGetFullPathName_UEx
        985  3D0 0005FE20 RtlGetFullPathName_UstrEx
        986  3D1 00079110 RtlGetFunctionTableListHead
        987  3D2 000705E0 RtlGetGroupSecurityDescriptor
        988  3D3 00052230 RtlGetIntegerAtom
        989  3D4 000CE0A0 RtlGetInterruptTimePrecise
        990  3D5 00078050 RtlGetLastNtStatus
        991  3D6 00079040 RtlGetLastWin32Error
        992  3D7 00061E70 RtlGetLengthWithoutLastFullDosOrNtPathElement
        993  3D8 00062210 RtlGetLengthWithoutTrailingPathSeperators
        994  3D9 00048C00 RtlGetLocaleFileMappingAddress
        995  3DA 00077CF0 RtlGetLongestNtPathLength
        996  3DB 000936D0 RtlGetNativeSystemInformation
        997  3DC 00071470 RtlGetNextEntryHashTable
        998  3DD 000DE220 RtlGetNextUmsListItem
        999  3DE 000D4090 RtlGetNtGlobalFlags
       1000  3DF 00042670 RtlGetNtProductType
       1001  3E0 00074B80 RtlGetNtVersionNumbers
       1002  3E1 0006F370 RtlGetOwnerSecurityDescriptor
       1003  3E2 00049F00 RtlGetParentLocaleName
       1004  3E3 0007EC00 RtlGetProcessHeaps
       1005  3E4 000D4820 RtlGetProcessPreferredUILanguages
       1006  3E5 00072990 RtlGetProductInfo
       1007  3E6 0006EF40 RtlGetSaclSecurityDescriptor
       1008  3E7 00075670 RtlGetSearchPath
       1009  3E8 00075DA0 RtlGetSecurityDescriptorRMControl
       1010  3E9 00078070 RtlGetSetBootStatusData
       1011  3EA 0006BE50 RtlGetSystemPreferredUILanguages
       1012  3EB 00059070 RtlGetSystemTimePrecise
       1013  3EC 00072CC0 RtlGetThreadErrorMode
       1014  3ED 000D4920 RtlGetThreadLangIdByIndex
       1015  3EE 0001D130 RtlGetThreadPreferredUILanguages
       1016  3EF 000D49F0 RtlGetUILanguageInfo
       1017  3F0 000DE250 RtlGetUmsCompletionListEvent
       1018  3F1 000BCCA0 RtlGetUnloadEventTrace
       1019  3F2 00078F90 RtlGetUnloadEventTraceEx
       1020  3F3 000578B0 RtlGetUserInfoHeap
       1021  3F4 0006CBC0 RtlGetUserPreferredUILanguages
       1022  3F5 00041EE0 RtlGetVersion
       1023  3F6 000CAEC0 RtlGrowFunctionTable
       1024  3F7 00026CA0 RtlHashUnicodeString
       1025  3F8 000E0E80 RtlHeapTrkInitialize
       1026  3F9 0006F260 RtlIdentifierAuthoritySid
       1027  3FA 0005D4F0 RtlIdnToAscii
       1028  3FB 000E2330 RtlIdnToNameprepUnicode
       1029  3FC 0005E4D0 RtlIdnToUnicode
       1030  3FD 00016860 RtlImageDirectoryEntryToData
       1031  3FE 00016830 RtlImageNtHeader
       1032  3FF 00015E10 RtlImageNtHeaderEx
       1033  400 00017440 RtlImageRvaToSection
       1034  401 000716A0 RtlImageRvaToVa
       1035  402 0006E430 RtlImpersonateSelf
       1036  403 0006E440 RtlImpersonateSelfEx
       1037  404 0006A390 RtlInitAnsiString
       1038  405 00020BE0 RtlInitAnsiStringEx
       1039  406 000D3C10 RtlInitBarrier
       1040  407 00077480 RtlInitCodePageTable
       1041  408 00065170 RtlInitEnumerationHashTable
       1042  409 000756F0 RtlInitMemoryStream
       1043  40A 000CD410 RtlInitNlsTables
       1044  40B 000756F0 RtlInitOutOfProcessMemoryStream
       1045  40C 0006A390 RtlInitString
       1046  40D 000D2630 RtlInitStringEx
       1047  40E 000DBBB0 RtlInitStrongEnumerationHashTable
       1048  40F 0001F140 RtlInitUnicodeString
       1049  410 0001F880 RtlInitUnicodeStringEx
       1050  411 000DBBF0 RtlInitWeakEnumerationHashTable
       1051  412 000759D0 RtlInitializeAtomPackage
       1052  413 0006C060 RtlInitializeBitMap
       1053  414 00064CE0 RtlInitializeConditionVariable
       1054  415 000E2370 RtlInitializeContext
       1055  416 00060AC0 RtlInitializeCriticalSection
       1056  417 000603B0 RtlInitializeCriticalSectionAndSpinCount
       1057  418 00007900 RtlInitializeCriticalSectionEx
       1058  419 00066F90 RtlInitializeExtendedContext
       1059  41A 00073810 RtlInitializeGenericTable
       1060  41B 00075D40 RtlInitializeGenericTableAvl
       1061  41C 00072BB0 RtlInitializeHandleTable
       1062  41D 00083790 RtlInitializeNtUserPfn
       1063  41E 0007F0A0 RtlInitializeRXact
       1064  41F 000076C0 RtlInitializeResource
       1065  420 00065F80 RtlInitializeSListHead
       1066  421 00064CE0 RtlInitializeSRWLock
       1067  422 0004E850 RtlInitializeSid
       1068  423 0004EE20 RtlInitializeSidEx
       1069  424 00060DF0 RtlInsertElementGenericTable
       1070  425 000604F0 RtlInsertElementGenericTableAvl
       1071  426 00060E60 RtlInsertElementGenericTableFull
       1072  427 00060560 RtlInsertElementGenericTableFullAvl
       1073  428 000651E0 RtlInsertEntryHashTable
       1074  429 00073E50 RtlInstallFunctionTableCallback
       1075  42A 000D3D40 RtlInt64ToUnicodeString
       1076  42B 000213F0 RtlIntegerToChar
       1077  42C 000214F0 RtlIntegerToUnicodeString
       1078  42D 0006E7A0 RtlInterlockedClearBitRun
       1079  42E 00068430 RtlInterlockedFlushSList
       1080  42F 00094FD0 RtlInterlockedPopEntrySList
       1081  430 00060B50 RtlInterlockedPushEntrySList
       1082  431 00095080 RtlInterlockedPushListSList
       1083  432 000E2630 RtlInterlockedPushListSListEx
       1084  433 000D3100 RtlInterlockedSetBitRun
       1085  434 000D7E20 RtlIoDecodeMemIoResource
       1086  435 000D7EC0 RtlIoEncodeMemIoResource
       1087  436 000772C0 RtlIpv4AddressToStringA
       1088  437 000DF700 RtlIpv4AddressToStringExA
       1089  438 00071C40 RtlIpv4AddressToStringExW
       1090  439 00071D10 RtlIpv4AddressToStringW
       1091  43A 0006FCB0 RtlIpv4StringToAddressA
       1092  43B 0006FC40 RtlIpv4StringToAddressExA
       1093  43C 0005E180 RtlIpv4StringToAddressExW
       1094  43D 0005E2C0 RtlIpv4StringToAddressW
       1095  43E 0000FDD0 RtlIpv6AddressToStringA
       1096  43F 000DF7C0 RtlIpv6AddressToStringExA
       1097  440 0000F9F0 RtlIpv6AddressToStringExW
       1098  441 0000FB40 RtlIpv6AddressToStringW
       1099  442 00068090 RtlIpv6StringToAddressA
       1100  443 00067FE0 RtlIpv6StringToAddressExA
       1101  444 0005D7A0 RtlIpv6StringToAddressExW
       1102  445 0005D920 RtlIpv6StringToAddressW
       1103  446 000C9EB0 RtlIsActivationContextActive
       1104  447 0004E6B0 RtlIsCapabilitySid
       1105  448 000C1F80 RtlIsCriticalSectionLocked
       1106  449 00040920 RtlIsCriticalSectionLockedByThread
       1107  44A 000C28E0 RtlIsCurrentThreadAttachExempt
       1108  44B 0006FF00 RtlIsDosDeviceName_U
       1109  44C 00060D40 RtlIsGenericTableEmpty
       1110  44D 000DE870 RtlIsGenericTableEmptyAvl
       1111  44E 0004A170 RtlIsMultiSessionSku
       1112  44F 000E2690 RtlIsNameInExpression
       1113  450 000E0270 RtlIsNameLegalDOS8Dot3
       1114  451 000E3F10 RtlIsNormalizedString
       1115  452 00075AF0 RtlIsPackageSid
       1116  453 00047B30 RtlIsParentOfChildAppContainer
       1117  454 00071F20 RtlIsProcessorFeaturePresent
       1118  455 0005A000 RtlIsTextUnicode
       1119  456 00076D70 RtlIsThreadWithinLoaderCallout
       1120  457 000CE910 RtlIsUntrustedObject
       1121  458 00052370 RtlIsValidHandle
       1122  459 00052330 RtlIsValidIndexHandle
       1123  45A 000E0570 RtlIsValidLocaleName
       1124  45B 0004E600 RtlIsValidProcessTrustLabelSid
       1125  45C 00003020 RtlKnownExceptionFilter
       1126  45D 0001EA10 RtlLCIDToCultureName
       1127  45E 000D3DE0 RtlLargeIntegerToChar
       1128  45F 0001F190 RtlLcidToLocaleName
       1129  460 00034480 RtlLeaveCriticalSection
       1130  461 0004F0B0 RtlLengthRequiredSid
       1131  462 00066770 RtlLengthSecurityDescriptor
       1132  463 00061700 RtlLengthSid
       1133  464 0001F9E0 RtlLengthSidAsUnicodeString
       1134  465 00066110 RtlLoadString
       1135  466 000CE180 RtlLocalTimeToSystemTime
       1136  467 0001F480 RtlLocaleNameToLcid
       1137  468 000DBC90 RtlLocateExtendedFeature
       1138  469 000756B0 RtlLocateLegacyContext
       1139  46A 00078CF0 RtlLockBootStatusData
       1140  46B 00077AD0 RtlLockCurrentThread
       1141  46C 000271B0 RtlLockHeap
       1142  46D 00074EE0 RtlLockMemoryBlockLookaside
       1143  46E 000C14B0 RtlLockMemoryStreamRegion
       1144  46F 00074F50 RtlLockMemoryZone
       1145  470 000752B0 RtlLockModuleSection
       1146  471 000E4780 RtlLogStackBackTrace
       1147  472 00051FC0 RtlLookupAtomInAtomTable
       1148  473 00060F80 RtlLookupElementGenericTable
       1149  474 00060B60 RtlLookupElementGenericTableAvl
       1150  475 000DE5D0 RtlLookupElementGenericTableFull
       1151  476 00060470 RtlLookupElementGenericTableFullAvl
       1152  477 00065270 RtlLookupEntryHashTable
       1153  478 00014E40 RtlLookupFunctionEntry
       1154  479 000CAFC0 RtlLookupFunctionTable
       1155  47A 00063ED0 RtlMakeSelfRelativeSD
       1156  47B 0004D5A0 RtlMapGenericMask
       1157  47C 00079070 RtlMapSecurityErrorToNtStatus
       1158  47D 00097C40 RtlMoveMemory
       1159  47E 00068440 RtlMultiAppendUnicodeStringBuffer
       1160  47F 00023880 RtlMultiByteToUnicodeN
       1161  480 00077310 RtlMultiByteToUnicodeSize
       1162  481 000D82F0 RtlMultipleAllocateHeap
       1163  482 000D8370 RtlMultipleFreeHeap
       1164  483 000C3060 RtlNewInstanceSecurityObject
       1165  484 000C3170 RtlNewSecurityGrantedAccess
       1166  485 00047BE0 RtlNewSecurityObject
       1167  486 0004AC00 RtlNewSecurityObjectEx
       1168  487 00048A00 RtlNewSecurityObjectWithMultipleInheritance
       1169  488 000802F0 RtlNormalizeProcessParams
       1170  489 0005EC40 RtlNormalizeString
       1171  48A 000BBBC0 RtlNtPathNameToDosPathName
       1172  48B 0000F0C0 RtlNtStatusToDosError
       1173  48C 0006DB90 RtlNtStatusToDosErrorNoTeb
       1174  48D 0010CB20 RtlNtdllName
       1175  48E 00077680 RtlNumberGenericTableElements
       1176  48F 00077040 RtlNumberGenericTableElementsAvl
       1177  490 000D31C0 RtlNumberOfClearBits
       1178  491 000D31E0 RtlNumberOfClearBitsInRange
       1179  492 000D3210 RtlNumberOfSetBits
       1180  493 000D33C0 RtlNumberOfSetBitsInRange
       1181  494 00078DD0 RtlNumberOfSetBitsUlongPtr
       1182  495 000D2500 RtlOemStringToUnicodeSize
       1183  496 0006D030 RtlOemStringToUnicodeString
       1184  497 0006D120 RtlOemToUnicodeN
       1185  498 00049900 RtlOpenCurrentUser
       1186  499 000E51D0 RtlOsDeploymentState
       1187  49A 0007ED60 RtlOwnerAcesPresent
       1188  49B 00018580 RtlPcToFileHeader
       1189  49C 000D1DB0 RtlPinAtomInAtomTable
       1190  49D 00063930 RtlPopFrame
       1191  49E 00064DE0 RtlPrefixString
       1192  49F 00062130 RtlPrefixUnicodeString
       1193  4A0 000C2920 RtlPrepareForProcessCloning
       1194  4A1 00044810 RtlProcessFlsData
       1195  4A2 00005E30 RtlProtectHeap
       1196  4A3 00072E70 RtlPublishWnfStateData
       1197  4A4 00063340 RtlPushFrame
       1198  4A5 00071510 RtlQueryActivationContextApplicationSettings
       1199  4A6 000527A0 RtlQueryAtomInAtomTable
       1200  4A7 000C1FA0 RtlQueryCriticalSectionOwner
       1201  4A8 00064C70 RtlQueryDepthSList
       1202  4A9 000D40B0 RtlQueryDynamicTimeZoneInformation
       1203  4AA 000726E0 RtlQueryElevationFlags
       1204  4AB 00035150 RtlQueryEnvironmentVariable
       1205  4AC 00046840 RtlQueryEnvironmentVariable_U
       1206  4AD 00078680 RtlQueryHeapInformation
       1207  4AE 0006FBB0 RtlQueryInformationAcl
       1208  4AF 0003DF30 RtlQueryInformationActivationContext
       1209  4B0 00074B50 RtlQueryInformationActiveActivationContext
       1210  4B1 000C14B0 RtlQueryInterfaceMemoryStream
       1211  4B2 000CC1F0 RtlQueryModuleInformation
       1212  4B3 00064510 RtlQueryPackageClaims
       1213  4B4 00064450 RtlQueryPackageIdentity
       1214  4B5 000644A0 RtlQueryPackageIdentityEx
       1215  4B6 00059130 RtlQueryPerformanceCounter
       1216  4B7 00065FB0 RtlQueryPerformanceFrequency
       1217  4B8 000C35A0 RtlQueryProcessBackTraceInformation
       1218  4B9 00068620 RtlQueryProcessDebugInformation
       1219  4BA 000C3730 RtlQueryProcessHeapInformation
       1220  4BB 000C3B10 RtlQueryProcessLockInformation
       1221  4BC 00078970 RtlQueryProtectedPolicy
       1222  4BD 000D40C0 RtlQueryRegistryValues
       1223  4BE 0000D730 RtlQueryRegistryValuesEx
       1224  4BF 00004FE0 RtlQueryResourcePolicy
       1225  4C0 000C32B0 RtlQuerySecurityObject
       1226  4C1 000D83E0 RtlQueryTagHeap
       1227  4C2 000BB7D0 RtlQueryThreadProfiling
       1228  4C3 0000CF90 RtlQueryTimeZoneInformation
       1229  4C4 000DE2B0 RtlQueryUmsThreadInformation
       1230  4C5 000713A0 RtlQueryUnbiasedInterruptTime
       1231  4C6 000E55F0 RtlQueryValidationRunlevel
       1232  4C7 00078260 RtlQueryWnfMetaNotification
       1233  4C8 0006D830 RtlQueryWnfStateData
       1234  4C9 00076E90 RtlQueryWnfStateDataWithExplicitScope
       1235  4CA 000C6E80 RtlQueueApcWow64Thread
       1236  4CB 0007BFA0 RtlQueueWorkItem
       1237  4CC 00011EA0 RtlRaiseException
       1238  4CD 00092D30 RtlRaiseStatus
       1239  4CE 0006E120 RtlRandom
       1240  4CF 0006E120 RtlRandomEx
       1241  4D0 000277C0 RtlRbInsertNodeEx
       1242  4D1 00027E20 RtlRbRemoveNode
       1243  4D2 0002D790 RtlReAllocateHeap
       1244  4D3 000C14B0 RtlReadMemoryStream
       1245  4D4 000C14B0 RtlReadOutOfProcessMemoryStream
       1246  4D5 000BB800 RtlReadThreadProfilingData
       1247  4D6 000DE550 RtlRealPredecessor
       1248  4D7 00061530 RtlRealSuccessor
       1249  4D8 00076C70 RtlRegisterForWnfMetaNotification
       1250  4D9 000DE9B0 RtlRegisterSecureMemoryCacheCallback
       1251  4DA 00072280 RtlRegisterThreadWithCsrss
       1252  4DB 0007B9A0 RtlRegisterWait
       1253  4DC 0003D740 RtlReleaseActivationContext
       1254  4DD 000759D0 RtlReleaseMemoryStream
       1255  4DE 00035800 RtlReleasePath
       1256  4DF 00038010 RtlReleasePebLock
       1257  4E0 000770B0 RtlReleasePrivilege
       1258  4E1 000542A0 RtlReleaseRelativeName
       1259  4E2 000619F0 RtlReleaseResource
       1260  4E3 000331E0 RtlReleaseSRWLockExclusive
       1261  4E4 000304B0 RtlReleaseSRWLockShared
       1262  4E5 000E24A0 RtlRemoteCall
       1263  4E6 00070D00 RtlRemoveEntryHashTable
       1264  4E7 0007FAD0 RtlRemovePrivileges
       1265  4E8 000C4B50 RtlRemoveVectoredContinueHandler
       1266  4E9 000758E0 RtlRemoveVectoredExceptionHandler
       1267  4EA 000CEAA0 RtlReplaceSidInSd
       1268  4EB 000C75D0 RtlReportException
       1269  4EC 00044600 RtlReportSilentProcessExit
       1270  4ED 000C7CE0 RtlReportSqmEscalation
       1271  4EE 000D1E90 RtlResetMemoryBlockLookaside
       1272  4EF 000D1FF0 RtlResetMemoryZone
       1273  4F0 00083970 RtlResetNtUserPfn
       1274  4F1 000CD480 RtlResetRtlTranslations
       1275  4F2 000714B0 RtlRestoreContext
       1276  4F3 0000F090 RtlRestoreLastWin32Error
       1277  4F4 000839F0 RtlRetrieveNtUserPfn
       1278  4F5 000C14B0 RtlRevertMemoryStream
       1279  4F6 00077FF0 RtlRunDecodeUnicodeString
       1280  4F7 00077A30 RtlRunEncodeUnicodeString
       1281  4F8 00034B00 RtlRunOnceBeginInitialize
       1282  4F9 0006C850 RtlRunOnceComplete
       1283  4FA 00034BE0 RtlRunOnceExecuteOnce
       1284  4FB 00064CE0 RtlRunOnceInitialize
       1285  4FC 000736A0 RtlSecondsSince1970ToTime
       1286  4FD 000CE1F0 RtlSecondsSince1980ToTime
       1287  4FE 000C14B0 RtlSeekMemoryStream
       1288  4FF 00063CF0 RtlSelfRelativeToAbsoluteSD
       1289  500 00063AE0 RtlSelfRelativeToAbsoluteSD2
       1290  501 00080680 RtlSendMsgToSm
       1291  502 00072340 RtlSetAllBits
       1292  503 000CEDC0 RtlSetAttributesSecurityDescriptor
       1293  504 00067FD0 RtlSetBit
       1294  505 00056120 RtlSetBits
       1295  506 00075AA0 RtlSetControlSecurityDescriptor
       1296  507 00069F40 RtlSetCriticalSectionSpinCount
       1297  508 0006F750 RtlSetCurrentDirectory_U
       1298  509 000787A0 RtlSetCurrentEnvironment
       1299  50A 000641F0 RtlSetCurrentTransaction
       1300  50B 0004AEF0 RtlSetDaclSecurityDescriptor
       1301  50C 000D40F0 RtlSetDynamicTimeZoneInformation
       1302  50D 00074E10 RtlSetEnvironmentStrings
       1303  50E 00046900 RtlSetEnvironmentVar
       1304  50F 000468B0 RtlSetEnvironmentVariable
       1305  510 00077900 RtlSetExtendedFeaturesMask
       1306  511 0004E500 RtlSetGroupSecurityDescriptor
       1307  512 0006F3B0 RtlSetHeapInformation
       1308  513 000D0C50 RtlSetInformationAcl
       1309  514 0007E110 RtlSetIoCompletionCallback
       1310  515 0000F090 RtlSetLastWin32Error
       1311  516 0000F070 RtlSetLastWin32ErrorAndNtStatusFromNtStatus
       1312  517 000C14B0 RtlSetMemoryStreamSize
       1313  518 0004E560 RtlSetOwnerSecurityDescriptor
       1314  519 000D4010 RtlSetPortableOperatingSystem
       1315  51A 000C3DA0 RtlSetProcessDebugInformation
       1316  51B 000815E0 RtlSetProcessIsCritical
       1317  51C 0006ABB0 RtlSetProcessPreferredUILanguages
       1318  51D 000E5310 RtlSetProtectedPolicy
       1319  51E 0006E850 RtlSetSaclSecurityDescriptor
       1320  51F 000598A0 RtlSetSearchPathMode
       1321  520 00078240 RtlSetSecurityDescriptorRMControl
       1322  521 00047BB0 RtlSetSecurityObject
       1323  522 00047500 RtlSetSecurityObjectEx
       1324  523 00045EC0 RtlSetThreadErrorMode
       1325  524 00080310 RtlSetThreadIsCritical
       1326  525 00076D90 RtlSetThreadPoolStartFunc
       1327  526 0001C020 RtlSetThreadPreferredUILanguages
       1328  527 0003C080 RtlSetThreadSubProcessTag
       1329  528 000D4100 RtlSetTimeZoneInformation
       1330  529 000F5FE0 RtlSetTimer
       1331  52A 000DE360 RtlSetUmsThreadInformation
       1332  52B 00066DC0 RtlSetUnhandledExceptionFilter
       1333  52C 000D8670 RtlSetUserFlagsHeap
       1334  52D 00057C60 RtlSetUserValueHeap
       1335  52E 0004A190 RtlSidDominates
       1336  52F 0004E470 RtlSidDominatesForTrust
       1337  530 000CEDF0 RtlSidEqualLevel
       1338  531 0006A570 RtlSidHashInitialize
       1339  532 0006A9A0 RtlSidHashLookup
       1340  533 000CEE80 RtlSidIsHigherLevel
       1341  534 0002A380 RtlSizeHeap
       1342  535 00065CB0 RtlSleepConditionVariableCS
       1343  536 00065B30 RtlSleepConditionVariableSRW
       1344  537 00061070 RtlSplay
       1345  538 00072B50 RtlStartRXact
       1346  539 000C14B0 RtlStatMemoryStream
       1347  53A 000649E0 RtlStringFromGUID
       1348  53B 000649F0 RtlStringFromGUIDEx
       1349  53C 000DBC00 RtlStronglyEnumerateEntryHashTable
       1350  53D 00065750 RtlSubAuthorityCountSid
       1351  53E 00064C50 RtlSubAuthoritySid
       1352  53F 0000A870 RtlSubscribeWnfStateChangeNotification
       1353  540 00061500 RtlSubtreePredecessor
       1354  541 000DE5A0 RtlSubtreeSuccessor
       1355  542 00042010 RtlSwitchedVVI
       1356  543 00071400 RtlSystemTimeToLocalTime
       1357  544 00077400 RtlTestAndPublishWnfStateData
       1358  545 000D3640 RtlTestBit
       1359  546 000816D0 RtlTestProtectedAccess
       1360  547 0005CCF0 RtlTimeFieldsToTime
       1361  548 0006E560 RtlTimeToElapsedTimeFields
       1362  549 0006E690 RtlTimeToSecondsSince1970
       1363  54A 0006E650 RtlTimeToSecondsSince1980
       1364  54B 0005CF00 RtlTimeToTimeFields
       1365  54C 000E5A40 RtlTraceDatabaseAdd
       1366  54D 000E5AC0 RtlTraceDatabaseCreate
       1367  54E 000E5BF0 RtlTraceDatabaseDestroy
       1368  54F 000E5C70 RtlTraceDatabaseEnumerate
       1369  550 000E5D50 RtlTraceDatabaseFind
       1370  551 000E5DD0 RtlTraceDatabaseLock
       1371  552 000E5E00 RtlTraceDatabaseUnlock
       1372  553 000E5E20 RtlTraceDatabaseValidate
       1373  554 00008860 RtlTryAcquirePebLock
       1374  555 0000BE80 RtlTryAcquireSRWLockExclusive
       1375  556 00070830 RtlTryAcquireSRWLockShared
       1376  557 000D0480 RtlTryConvertSRWLockSharedToExclusiveOrRelease
       1377  558 00008880 RtlTryEnterCriticalSection
       1378  559 0005C520 RtlUTF8ToUnicodeN
       1379  55A 000DE3A0 RtlUmsThreadYield
       1380  55B 000E3FF0 RtlUnhandledExceptionFilter
       1381  55C 000E4010 RtlUnhandledExceptionFilter2
       1382  55D 000D2530 RtlUnicodeStringToAnsiSize
       1383  55E 00023E30 RtlUnicodeStringToAnsiString
       1384  55F 000D2140 RtlUnicodeStringToCountedOemString
       1385  560 0006A3D0 RtlUnicodeStringToInteger
       1386  561 000D2530 RtlUnicodeStringToOemSize
       1387  562 000630A0 RtlUnicodeStringToOemString
       1388  563 000CD650 RtlUnicodeToCustomCPN
       1389  564 00023F10 RtlUnicodeToMultiByteN
       1390  565 0006FF30 RtlUnicodeToMultiByteSize
       1391  566 00063170 RtlUnicodeToOemN
       1392  567 00059980 RtlUnicodeToUTF8N
       1393  568 00071ED0 RtlUniform
       1394  569 00078EF0 RtlUnlockBootStatusData
       1395  56A 00077B90 RtlUnlockCurrentThread
       1396  56B 000330E0 RtlUnlockHeap
       1397  56C 00075090 RtlUnlockMemoryBlockLookaside
       1398  56D 000C14B0 RtlUnlockMemoryStreamRegion
       1399  56E 000750F0 RtlUnlockMemoryZone
       1400  56F 000753B0 RtlUnlockModuleSection
       1401  570 0000B080 RtlUnsubscribeWnfNotificationWaitForCompletion
       1402  571 0000AEE0 RtlUnsubscribeWnfNotificationWithCompletionCallback
       1403  572 0000B0E0 RtlUnsubscribeWnfStateChangeNotification
       1404  573 000E5180 RtlUnwind
       1405  574 00014200 RtlUnwindEx
       1406  575 000507F0 RtlUpcaseUnicodeChar
       1407  576 00050850 RtlUpcaseUnicodeString
       1408  577 000D2290 RtlUpcaseUnicodeStringToAnsiString
       1409  578 000D23B0 RtlUpcaseUnicodeStringToCountedOemString
       1410  579 0006CE30 RtlUpcaseUnicodeStringToOemString
       1411  57A 000CD880 RtlUpcaseUnicodeToCustomCPN
       1412  57B 0006F520 RtlUpcaseUnicodeToMultiByteN
       1413  57C 0006D3A0 RtlUpcaseUnicodeToOemN
       1414  57D 00044770 RtlUpdateClonedCriticalSection
       1415  57E 00059670 RtlUpdateClonedSRWLock
       1416  57F 0007A8D0 RtlUpdateTimer
       1417  580 00064F10 RtlUpperChar
       1418  581 000D2640 RtlUpperString
       1419  582 00009F30 RtlUserThreadStart
       1420  583 000200D0 RtlValidAcl
       1421  584 000CBF10 RtlValidProcessProtection
       1422  585 00069430 RtlValidRelativeSecurityDescriptor
       1423  586 0001FF90 RtlValidSecurityDescriptor
       1424  587 00020090 RtlValidSid
       1425  588 000384A0 RtlValidateHeap
       1426  589 000D87D0 RtlValidateProcessHeaps
       1427  58A 0006B950 RtlValidateUnicodeString
       1428  58B 00045350 RtlVerifyVersionInfo
       1429  58C 00011740 RtlVirtualUnwind
       1430  58D 00076B00 RtlWaitForWnfMetaNotification
       1431  58E 00077FD0 RtlWaitOnAddress
       1432  58F 00036540 RtlWakeAddressAll
       1433  590 000E6170 RtlWakeAddressAllNoFence
       1434  591 00003090 RtlWakeAddressSingle
       1435  592 000E6180 RtlWakeAddressSingleNoFence
       1436  593 00009A40 RtlWakeAllConditionVariable
       1437  594 000634A0 RtlWakeConditionVariable
       1438  595 000126A0 RtlWalkFrameChain
       1439  596 000D8900 RtlWalkHeap
       1440  597 000DBC60 RtlWeaklyEnumerateEntryHashTable
       1441  598 00001C20 RtlWerpReportException
       1442  599 000C8BD0 RtlWnfCompareChangeStamp
       1443  59A 0000C5F0 RtlWnfDllUnloadCallback
       1444  59B 000671B0 RtlWoW64GetCpuAreaInfo
       1445  59C 00067130 RtlWoW64GetCurrentCpuArea
       1446  59D 00078FC0 RtlWow64CallFunction64
       1447  59E 00078FC0 RtlWow64EnableFsRedirection
       1448  59F 00078FC0 RtlWow64EnableFsRedirectionEx
       1449  5A0 000C6EA0 RtlWow64GetThreadContext
       1450  5A1 000C6ED0 RtlWow64GetThreadSelectorEntry
       1451  5A2 000C2A40 RtlWow64LogMessageInEventLogger
       1452  5A3 000C7070 RtlWow64SetThreadContext
       1453  5A4 000C7090 RtlWow64SuspendThread
       1454  5A5 000C70A0 RtlWow64SuspendThreadEx
       1455  5A6 000C14B0 RtlWriteMemoryStream
       1456  5A7 0007EA40 RtlWriteRegistryValue
       1457  5A8 000DCA80 RtlZeroHeap
       1458  5A9 00095B50 RtlZeroMemory
       1459  5AA 000C9BC0 RtlZombifyActivationContext
       1460  5AB 00061DC0 RtlpApplyLengthFunction
       1461  5AC 0000D1B0 RtlpCheckDynamicTimeZoneInformation
       1462  5AD 000D5500 RtlpCleanupRegistryKeys
       1463  5AE 000D0C90 RtlpConvertAbsoluteToRelativeSecurityAttribute
       1464  5AF 000D5A20 RtlpConvertCultureNamesToLCIDs
       1465  5B0 000D5C40 RtlpConvertLCIDsToCultureNames
       1466  5B1 000D0FF0 RtlpConvertRelativeToAbsoluteSecurityAttribute
       1467  5B2 0001DAD0 RtlpCreateProcessRegistryInfo
       1468  5B3 00068550 RtlpEnsureBufferSize
       1469  5B4 00095B71 RtlpExecuteUmsThread
       1470  5B5 00147198 RtlpFreezeTimeBias
       1471  5B6 000456B0 RtlpGetDeviceFamilyInfoEnum
       1472  5B7 00074940 RtlpGetLCIDFromLangInfoNode
       1473  5B8 00072DD0 RtlpGetNameFromLangInfoNode
       1474  5B9 0001F6A0 RtlpGetSystemDefaultUILanguage
       1475  5BA 000E6190 RtlpGetUserOrMachineUILanguage4NLS
       1476  5BB 00048CA0 RtlpInitializeLangRegistryInfo
       1477  5BC 00054F50 RtlpIsQualifiedLanguage
       1478  5BD 00048A60 RtlpLoadMachineUIByPolicy
       1479  5BE 000499E0 RtlpLoadUserUIByPolicy
       1480  5BF 000025A0 RtlpMergeSecurityAttributeInformation
       1481  5C0 00047980 RtlpMuiFreeLangRegistryInfo
       1482  5C1 000E6FB0 RtlpMuiRegCreateRegistryInfo
       1483  5C2 00048F20 RtlpMuiRegFreeRegistryInfo
       1484  5C3 00048E30 RtlpMuiRegLoadRegistryInfo
       1485  5C4 000C21A0 RtlpNotOwnerCriticalSection
       1486  5C5 0007EB60 RtlpNtCreateKey
       1487  5C6 000733D0 RtlpNtEnumerateSubKey
       1488  5C7 000EA340 RtlpNtMakeTemporaryKey
       1489  5C8 000735A0 RtlpNtOpenKey
       1490  5C9 00071200 RtlpNtQueryValueKey
       1491  5CA 0007EAE0 RtlpNtSetValueKey
       1492  5CB 00048770 RtlpQueryDefaultUILanguage
       1493  5CC 000C4160 RtlpQueryProcessDebugInformationFromWow64
       1494  5CD 000E87D0 RtlpRefreshCachedUILanguage
       1495  5CE 000D6730 RtlpSetInstallLanguage
       1496  5CF 000D6E70 RtlpSetPreferredUILanguages
       1497  5D0 000D6E70 RtlpSetUserPreferredUILanguages
       1498  5D1 00095E96 RtlpUmsExecuteYieldThreadEnd
       1499  5D2 00095DA3 RtlpUmsThreadYield
       1500  5D3 000364F0 RtlpUnWaitCriticalSection
       1501  5D4 00080A30 RtlpVerifyAndCommitUILanguageSettings
       1502  5D5 000756F0 RtlpWaitForCriticalSection
       1503  5D6 000D2500 RtlxAnsiStringToUnicodeSize
       1504  5D7 000D2500 RtlxOemStringToUnicodeSize
       1505  5D8 000D2530 RtlxUnicodeStringToAnsiSize
       1506  5D9 000D2530 RtlxUnicodeStringToOemSize
       1507  5DA 000F6320 SbExecuteProcedure
       1508  5DB 00041A90 SbSelectProcedure
       1509  5DC 000C81A0 ShipAssert
       1510  5DD 000C82C0 ShipAssertGetBufferInfo
       1511  5DE 000C82F0 ShipAssertMsgA
       1512  5DF 000C82F0 ShipAssertMsgW
       1513  5E0 0007A400 TpAllocAlpcCompletion
       1514  5E1 0007AC20 TpAllocAlpcCompletionEx
       1515  5E2 000734D0 TpAllocCleanupGroup
       1516  5E3 0007AC50 TpAllocIoCompletion
       1517  5E4 0007A430 TpAllocJobNotification
       1518  5E5 0007B340 TpAllocPool
       1519  5E6 0003C430 TpAllocTimer
       1520  5E7 0007CBB0 TpAllocWait
       1521  5E8 0003D920 TpAllocWork
       1522  5E9 00079160 TpAlpcRegisterCompletionList
       1523  5EA 00079120 TpAlpcUnregisterCompletionList
       1524  5EB 000F59F0 TpCallbackDetectedUnrecoverableError
       1525  5EC 00079230 TpCallbackIndependent
       1526  5ED 00078F60 TpCallbackLeaveCriticalSectionOnCompletion
       1527  5EE 0003BB00 TpCallbackMayRunLong
       1528  5EF 000F5A20 TpCallbackReleaseMutexOnCompletion
       1529  5F0 000F5A60 TpCallbackReleaseSemaphoreOnCompletion
       1530  5F1 00061AF0 TpCallbackSendAlpcMessageOnCompletion
       1531  5F2 00072B10 TpCallbackSendPendingAlpcMessage
       1532  5F3 000782B0 TpCallbackSetEventOnCompletion
       1533  5F4 000749C0 TpCallbackUnloadDllOnCompletion
       1534  5F5 0006F300 TpCancelAsyncIoOperation
       1535  5F6 00066710 TpCaptureCaller
       1536  5F7 0000A000 TpCheckTerminateWorker
       1537  5F8 000F5AA0 TpDbgDumpHeapUsage
       1538  5F9 000756F0 TpDbgSetLogRoutine
       1539  5FA 000782F0 TpDisablePoolCallbackChecks
       1540  5FB 00074D90 TpDisassociateCallback
       1541  5FC 0003CB90 TpIsTimerSet
       1542  5FD 00027420 TpPostWork
       1543  5FE 000F5690 TpQueryPoolStackInformation
       1544  5FF 0007A7A0 TpReleaseAlpcCompletion
       1545  600 000759E0 TpReleaseCleanupGroup
       1546  601 0007D660 TpReleaseCleanupGroupMembers
       1547  602 000725C0 TpReleaseIoCompletion
       1548  603 0007A240 TpReleaseJobNotification
       1549  604 00073AE0 TpReleasePool
       1550  605 0003EAD0 TpReleaseTimer
       1551  606 0007CEB0 TpReleaseWait
       1552  607 0003C790 TpReleaseWork
       1553  608 000F5700 TpSetDefaultPoolMaxThreads
       1554  609 0007A040 TpSetDefaultPoolStackInformation
       1555  60A 0007B270 TpSetPoolMaxThreads
       1556  60B 000736D0 TpSetPoolMaxThreadsSoftLimit
       1557  60C 00077520 TpSetPoolMinThreads
       1558  60D 0007A160 TpSetPoolStackInformation
       1559  60E 00078E60 TpSetPoolThreadBasePriority
       1560  60F 0007B2E0 TpSetPoolWorkerThreadIdleTimeout
       1561  610 0003CBD0 TpSetTimer
       1562  611 0003CBE0 TpSetTimerEx
       1563  612 0003C530 TpSetWait
       1564  613 0003C5A0 TpSetWaitEx
       1565  614 0007D460 TpSimpleTryPost
       1566  615 0003C540 TpStartAsyncIoOperation
       1567  616 0007C7B0 TpTimerOutstandingCallbackCount
       1568  617 00065760 TpTrimPools
       1569  618 0007A190 TpWaitForAlpcCompletion
       1570  619 00076FD0 TpWaitForIoCompletion
       1571  61A 0007A200 TpWaitForJobNotification
       1572  61B 0007D140 TpWaitForTimer
       1573  61C 0007D010 TpWaitForWait
       1574  61D 0007D100 TpWaitForWork
       1575  61E 000696D0 VerSetConditionMask
       1576  61F 000C87D0 WerReportSQMEvent
       1577  620 000756F0 WinSqmAddToAverageDWORD
       1578  621 000756F0 WinSqmAddToStream
       1579  622 000756F0 WinSqmAddToStreamEx
       1580  623 000759D0 WinSqmCheckEscalationAddToStreamEx
       1581  624 000759D0 WinSqmCheckEscalationSetDWORD
       1582  625 000759D0 WinSqmCheckEscalationSetDWORD64
       1583  626 000759D0 WinSqmCheckEscalationSetString
       1584  627 00042FF0 WinSqmCommonDatapointDelete
       1585  628 00042FF0 WinSqmCommonDatapointSetDWORD
       1586  629 00042FF0 WinSqmCommonDatapointSetDWORD64
       1587  62A 00042FF0 WinSqmCommonDatapointSetStreamEx
       1588  62B 00042FF0 WinSqmCommonDatapointSetString
       1589  62C 000756F0 WinSqmEndSession
       1590  62D 000759D0 WinSqmEventEnabled
       1591  62E 000759D0 WinSqmEventWrite
       1592  62F 000759D0 WinSqmGetEscalationRuleStatus
       1593  630 000C8BB0 WinSqmGetInstrumentationProperty
       1594  631 000756F0 WinSqmIncrementDWORD
       1595  632 000759D0 WinSqmIsOptedIn
       1596  633 000759D0 WinSqmIsOptedInEx
       1597  634 00042FF0 WinSqmIsSessionDisabled
       1598  635 000756F0 WinSqmSetDWORD
       1599  636 000756F0 WinSqmSetDWORD64
       1600  637 00042FF0 WinSqmSetEscalationInfo
       1601  638 000756F0 WinSqmSetIfMaxDWORD
       1602  639 000756F0 WinSqmSetIfMinDWORD
       1603  63A 000756F0 WinSqmSetString
       1604  63B 00078FD0 WinSqmStartSession
       1605  63C 00078FD0 WinSqmStartSessionForPartner
       1606  63D 000759D0 WinSqmStartSqmOptinListener
       1607  63E 00093390 ZwAcceptConnectPort
       1608  63F 00093370 ZwAccessCheck
       1609  640 00093600 ZwAccessCheckAndAuditAlarm
       1610  641 000939A0 ZwAccessCheckByType
       1611  642 00093900 ZwAccessCheckByTypeAndAuditAlarm
       1612  643 000939B0 ZwAccessCheckByTypeResultList
       1613  644 000939C0 ZwAccessCheckByTypeResultListAndAuditAlarm
       1614  645 000939D0 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
       1615  646 000937E0 ZwAddAtom
       1616  647 000939E0 ZwAddAtomEx
       1617  648 000939F0 ZwAddBootEntry
       1618  649 00093A00 ZwAddDriverEntry
       1619  64A 00093A10 ZwAdjustGroupsToken
       1620  64B 00093780 ZwAdjustPrivilegesToken
       1621  64C 00093A20 ZwAdjustTokenClaimsAndDeviceGroups
       1622  64D 00093A30 ZwAlertResumeThread
       1623  64E 00093A40 ZwAlertThread
       1624  64F 00093A50 ZwAlertThreadByThreadId
       1625  650 00093A60 ZwAllocateLocallyUniqueId
       1626  651 00093A70 ZwAllocateReserveObject
       1627  652 00093A80 ZwAllocateUserPhysicalPages
       1628  653 00093A90 ZwAllocateUuids
       1629  654 000934F0 ZwAllocateVirtualMemory
       1630  655 00093AA0 ZwAlpcAcceptConnectPort
       1631  656 00093AB0 ZwAlpcCancelMessage
       1632  657 00093AC0 ZwAlpcConnectPort
       1633  658 00093AD0 ZwAlpcConnectPortEx
       1634  659 00093AE0 ZwAlpcCreatePort
       1635  65A 00093AF0 ZwAlpcCreatePortSection
       1636  65B 00093B00 ZwAlpcCreateResourceReserve
       1637  65C 00093B10 ZwAlpcCreateSectionView
       1638  65D 00093B20 ZwAlpcCreateSecurityContext
       1639  65E 00093B30 ZwAlpcDeletePortSection
       1640  65F 00093B40 ZwAlpcDeleteResourceReserve
       1641  660 00093B50 ZwAlpcDeleteSectionView
       1642  661 00093B60 ZwAlpcDeleteSecurityContext
       1643  662 00093B70 ZwAlpcDisconnectPort
       1644  663 00093B80 ZwAlpcImpersonateClientContainerOfPort
       1645  664 00093B90 ZwAlpcImpersonateClientOfPort
       1646  665 00093BA0 ZwAlpcOpenSenderProcess
       1647  666 00093BB0 ZwAlpcOpenSenderThread
       1648  667 00093BC0 ZwAlpcQueryInformation
       1649  668 00093BD0 ZwAlpcQueryInformationMessage
       1650  669 00093BE0 ZwAlpcRevokeSecurityContext
       1651  66A 00093BF0 ZwAlpcSendWaitReceivePort
       1652  66B 00093C00 ZwAlpcSetInformation
       1653  66C 00093830 ZwApphelpCacheControl
       1654  66D 00093C10 ZwAreMappedFilesTheSame
       1655  66E 00093C20 ZwAssignProcessToJobObject
       1656  66F 00093C30 ZwAssociateWaitCompletionPacket
       1657  670 000933C0 ZwCallbackReturn
       1658  671 00093940 ZwCancelIoFile
       1659  672 00093C40 ZwCancelIoFileEx
       1660  673 00093C50 ZwCancelSynchronousIoFile
       1661  674 00093980 ZwCancelTimer
       1662  675 00093C60 ZwCancelTimer2
       1663  676 00093C70 ZwCancelWaitCompletionPacket
       1664  677 00093750 ZwClearEvent
       1665  678 00093460 ZwClose
       1666  679 00093720 ZwCloseObjectAuditAlarm
       1667  67A 00093C80 ZwCommitComplete
       1668  67B 00093C90 ZwCommitEnlistment
       1669  67C 00093CA0 ZwCommitTransaction
       1670  67D 00093CB0 ZwCompactKeys
       1671  67E 00093CC0 ZwCompareObjects
       1672  67F 00093CD0 ZwCompareTokens
       1673  680 00093CE0 ZwCompleteConnectPort
       1674  681 00093CF0 ZwCompressKey
       1675  682 00093D00 ZwConnectPort
       1676  683 000937A0 ZwContinue
       1677  684 00093D10 ZwCreateDebugObject
       1678  685 00093D20 ZwCreateDirectoryObject
       1679  686 00093D30 ZwCreateDirectoryObjectEx
       1680  687 00093D40 ZwCreateEnlistment
       1681  688 000937F0 ZwCreateEvent
       1682  689 00093D50 ZwCreateEventPair
       1683  68A 000938C0 ZwCreateFile
       1684  68B 00093D60 ZwCreateIRTimer
       1685  68C 00093D70 ZwCreateIoCompletion
       1686  68D 00093D80 ZwCreateJobObject
       1687  68E 00093D90 ZwCreateJobSet
       1688  68F 00093540 ZwCreateKey
       1689  690 00093DA0 ZwCreateKeyTransacted
       1690  691 00093DB0 ZwCreateKeyedEvent
       1691  692 00093DC0 ZwCreateLowBoxToken
       1692  693 00093DD0 ZwCreateMailslotFile
       1693  694 00093DE0 ZwCreateMutant
       1694  695 00093DF0 ZwCreateNamedPipeFile
       1695  696 00093E00 ZwCreatePagingFile
       1696  697 00093E10 ZwCreatePartition
       1697  698 00093E20 ZwCreatePort
       1698  699 00093E30 ZwCreatePrivateNamespace
       1699  69A 00093E40 ZwCreateProcess
       1700  69B 00093840 ZwCreateProcessEx
       1701  69C 00093E50 ZwCreateProfile
       1702  69D 00093E60 ZwCreateProfileEx
       1703  69E 00093E70 ZwCreateResourceManager
       1704  69F 00093810 ZwCreateSection
       1705  6A0 00093E80 ZwCreateSemaphore
       1706  6A1 00093E90 ZwCreateSymbolicLinkObject
       1707  6A2 00093850 ZwCreateThread
       1708  6A3 00093EA0 ZwCreateThreadEx
       1709  6A4 00093EB0 ZwCreateTimer
       1710  6A5 00093EC0 ZwCreateTimer2
       1711  6A6 00093ED0 ZwCreateToken
       1712  6A7 00093EE0 ZwCreateTokenEx
       1713  6A8 00093EF0 ZwCreateTransaction
       1714  6A9 00093F00 ZwCreateTransactionManager
       1715  6AA 00093F10 ZwCreateUserProcess
       1716  6AB 00093F20 ZwCreateWaitCompletionPacket
       1717  6AC 00093F30 ZwCreateWaitablePort
       1718  6AD 00093F40 ZwCreateWnfStateName
       1719  6AE 00093F50 ZwCreateWorkerFactory
       1720  6AF 00093F60 ZwDebugActiveProcess
       1721  6B0 00093F70 ZwDebugContinue
       1722  6B1 000936B0 ZwDelayExecution
       1723  6B2 00093F80 ZwDeleteAtom
       1724  6B3 00093F90 ZwDeleteBootEntry
       1725  6B4 00093FA0 ZwDeleteDriverEntry
       1726  6B5 00093FB0 ZwDeleteFile
       1727  6B6 00093FC0 ZwDeleteKey
       1728  6B7 00093FD0 ZwDeleteObjectAuditAlarm
       1729  6B8 00093FE0 ZwDeletePrivateNamespace
       1730  6B9 00093FF0 ZwDeleteValueKey
       1731  6BA 00094000 ZwDeleteWnfStateData
       1732  6BB 00094010 ZwDeleteWnfStateName
       1733  6BC 000933E0 ZwDeviceIoControlFile
       1734  6BD 00094020 ZwDisableLastKnownGood
       1735  6BE 00094030 ZwDisplayString
       1736  6BF 00094040 ZwDrawText
       1737  6C0 00093730 ZwDuplicateObject
       1738  6C1 00093790 ZwDuplicateToken
       1739  6C2 00094050 ZwEnableLastKnownGood
       1740  6C3 00094060 ZwEnumerateBootEntries
       1741  6C4 00094070 ZwEnumerateDriverEntries
       1742  6C5 00093690 ZwEnumerateKey
       1743  6C6 00094080 ZwEnumerateSystemEnvironmentValuesEx
       1744  6C7 00094090 ZwEnumerateTransactionObject
       1745  6C8 000934A0 ZwEnumerateValueKey
       1746  6C9 000940A0 ZwExtendSection
       1747  6CA 000940B0 ZwFilterBootOption
       1748  6CB 000940C0 ZwFilterToken
       1749  6CC 000940D0 ZwFilterTokenEx
       1750  6CD 000934B0 ZwFindAtom
       1751  6CE 00093820 ZwFlushBuffersFile
       1752  6CF 000940E0 ZwFlushBuffersFileEx
       1753  6D0 000940F0 ZwFlushInstallUILanguage
       1754  6D1 00094100 ZwFlushInstructionCache
       1755  6D2 00094110 ZwFlushKey
       1756  6D3 00094120 ZwFlushProcessWriteBuffers
       1757  6D4 00094130 ZwFlushVirtualMemory
       1758  6D5 00094140 ZwFlushWriteBuffer
       1759  6D6 00094150 ZwFreeUserPhysicalPages
       1760  6D7 00093550 ZwFreeVirtualMemory
       1761  6D8 00094160 ZwFreezeRegistry
       1762  6D9 00094170 ZwFreezeTransactions
       1763  6DA 00093700 ZwFsControlFile
       1764  6DB 00094180 ZwGetCachedSigningLevel
       1765  6DC 00094190 ZwGetCompleteWnfStateSubscription
       1766  6DD 000941A0 ZwGetContextThread
       1767  6DE 000941B0 ZwGetCurrentProcessorNumber
       1768  6DF 000941C0 ZwGetCurrentProcessorNumberEx
       1769  6E0 000941D0 ZwGetDevicePowerState
       1770  6E1 000941E0 ZwGetMUIRegistryInfo
       1771  6E2 000941F0 ZwGetNextProcess
       1772  6E3 00094200 ZwGetNextThread
       1773  6E4 00094210 ZwGetNlsSectionPtr
       1774  6E5 00094220 ZwGetNotificationResourceManager
       1775  6E6 00094230 ZwGetWriteWatch
       1776  6E7 00094240 ZwImpersonateAnonymousToken
       1777  6E8 00093560 ZwImpersonateClientOfPort
       1778  6E9 00094250 ZwImpersonateThread
       1779  6EA 00094260 ZwInitializeNlsFiles
       1780  6EB 00094270 ZwInitializeRegistry
       1781  6EC 00094280 ZwInitiatePowerAction
       1782  6ED 00093860 ZwIsProcessInJob
       1783  6EE 00094290 ZwIsSystemResumeAutomatic
       1784  6EF 000942A0 ZwIsUILanguageComitted
       1785  6F0 000942B0 ZwListenPort
       1786  6F1 000942C0 ZwLoadDriver
       1787  6F2 000942D0 ZwLoadKey
       1788  6F3 000942E0 ZwLoadKey2
       1789  6F4 00094F00 ZwLoadKey3
       1790  6F5 000942F0 ZwLoadKeyEx
       1791  6F6 00094300 ZwLockFile
       1792  6F7 00094310 ZwLockProductActivationKeys
       1793  6F8 00094320 ZwLockRegistryKey
       1794  6F9 00094330 ZwLockVirtualMemory
       1795  6FA 00094340 ZwMakePermanentObject
       1796  6FB 00094350 ZwMakeTemporaryObject
       1797  6FC 00094360 ZwManagePartition
       1798  6FD 00094370 ZwMapCMFModule
       1799  6FE 00094380 ZwMapUserPhysicalPages
       1800  6FF 000933A0 ZwMapUserPhysicalPagesScatter
       1801  700 000935F0 ZwMapViewOfSection
       1802  701 00094390 ZwModifyBootEntry
       1803  702 000943A0 ZwModifyDriverEntry
       1804  703 000943B0 ZwNotifyChangeDirectoryFile
       1805  704 000943C0 ZwNotifyChangeKey
       1806  705 000943D0 ZwNotifyChangeMultipleKeys
       1807  706 000943E0 ZwNotifyChangeSession
       1808  707 000938F0 ZwOpenDirectoryObject
       1809  708 000943F0 ZwOpenEnlistment
       1810  709 00093770 ZwOpenEvent
       1811  70A 00094400 ZwOpenEventPair
       1812  70B 000936A0 ZwOpenFile
       1813  70C 00094410 ZwOpenIoCompletion
       1814  70D 00094420 ZwOpenJobObject
       1815  70E 00093490 ZwOpenKey
       1816  70F 00094430 ZwOpenKeyEx
       1817  710 00094440 ZwOpenKeyTransacted
       1818  711 00094450 ZwOpenKeyTransactedEx
       1819  712 00094460 ZwOpenKeyedEvent
       1820  713 00094470 ZwOpenMutant
       1821  714 00094480 ZwOpenObjectAuditAlarm
       1822  715 00094490 ZwOpenPartition
       1823  716 000944A0 ZwOpenPrivateNamespace
       1824  717 000935D0 ZwOpenProcess
       1825  718 000944B0 ZwOpenProcessToken
       1826  719 00093670 ZwOpenProcessTokenEx
       1827  71A 000944C0 ZwOpenResourceManager
       1828  71B 000936E0 ZwOpenSection
       1829  71C 000944D0 ZwOpenSemaphore
       1830  71D 000944E0 ZwOpenSession
       1831  71E 000944F0 ZwOpenSymbolicLinkObject
       1832  71F 00094500 ZwOpenThread
       1833  720 000935B0 ZwOpenThreadToken
       1834  721 00093660 ZwOpenThreadTokenEx
       1835  722 00094510 ZwOpenTimer
       1836  723 00094520 ZwOpenTransaction
       1837  724 00094530 ZwOpenTransactionManager
       1838  725 00094540 ZwPlugPlayControl
       1839  726 00093960 ZwPowerInformation
       1840  727 00094550 ZwPrePrepareComplete
       1841  728 00094560 ZwPrePrepareEnlistment
       1842  729 00094570 ZwPrepareComplete
       1843  72A 00094580 ZwPrepareEnlistment
       1844  72B 00094590 ZwPrivilegeCheck
       1845  72C 000945A0 ZwPrivilegeObjectAuditAlarm
       1846  72D 000945B0 ZwPrivilegedServiceAuditAlarm
       1847  72E 000945C0 ZwPropagationComplete
       1848  72F 000945D0 ZwPropagationFailed
       1849  730 00093870 ZwProtectVirtualMemory
       1850  731 000945E0 ZwPulseEvent
       1851  732 00093740 ZwQueryAttributesFile
       1852  733 000945F0 ZwQueryBootEntryOrder
       1853  734 00094600 ZwQueryBootOptions
       1854  735 00094610 ZwQueryDebugFilterState
       1855  736 000934C0 ZwQueryDefaultLocale
       1856  737 000937B0 ZwQueryDefaultUILanguage
       1857  738 000936C0 ZwQueryDirectoryFile
       1858  739 00094620 ZwQueryDirectoryObject
       1859  73A 00094630 ZwQueryDriverEntryOrder
       1860  73B 00094640 ZwQueryEaFile
       1861  73C 000938D0 ZwQueryEvent
       1862  73D 00094650 ZwQueryFullAttributesFile
       1863  73E 00094660 ZwQueryInformationAtom
       1864  73F 00094670 ZwQueryInformationEnlistment
       1865  740 00093480 ZwQueryInformationFile
       1866  741 00094680 ZwQueryInformationJobObject
       1867  742 00094690 ZwQueryInformationPort
       1868  743 00093500 ZwQueryInformationProcess
       1869  744 000946A0 ZwQueryInformationResourceManager
       1870  745 000935C0 ZwQueryInformationThread
       1871  746 00093580 ZwQueryInformationToken
       1872  747 000946B0 ZwQueryInformationTransaction
       1873  748 000946C0 ZwQueryInformationTransactionManager
       1874  749 000946D0 ZwQueryInformationWorkerFactory
       1875  74A 000946E0 ZwQueryInstallUILanguage
       1876  74B 000946F0 ZwQueryIntervalProfile
       1877  74C 00094700 ZwQueryIoCompletion
       1878  74D 000934D0 ZwQueryKey
       1879  74E 00094710 ZwQueryLicenseValue
       1880  74F 00094720 ZwQueryMultipleValueKey
       1881  750 00094730 ZwQueryMutant
       1882  751 00093470 ZwQueryObject
       1883  752 00094740 ZwQueryOpenSubKeys
       1884  753 00094750 ZwQueryOpenSubKeysEx
       1885  754 00093680 ZwQueryPerformanceCounter
       1886  755 00094760 ZwQueryPortInformationProcess
       1887  756 00094770 ZwQueryQuotaInformationFile
       1888  757 00093880 ZwQuerySection
       1889  758 00094780 ZwQuerySecurityAttributesToken
       1890  759 00094790 ZwQuerySecurityObject
       1891  75A 000947A0 ZwQuerySemaphore
       1892  75B 000947B0 ZwQuerySymbolicLinkObject
       1893  75C 000947C0 ZwQuerySystemEnvironmentValue
       1894  75D 000947D0 ZwQuerySystemEnvironmentValueEx
       1895  75E 000936D0 ZwQuerySystemInformation
       1896  75F 000947E0 ZwQuerySystemInformationEx
       1897  760 00093910 ZwQuerySystemTime
       1898  761 000936F0 ZwQueryTimer
       1899  762 000947F0 ZwQueryTimerResolution
       1900  763 000934E0 ZwQueryValueKey
       1901  764 000935A0 ZwQueryVirtualMemory
       1902  765 00093800 ZwQueryVolumeInformationFile
       1903  766 00094800 ZwQueryWnfStateData
       1904  767 00094810 ZwQueryWnfStateNameInformation
       1905  768 000937C0 ZwQueueApcThread
       1906  769 00094820 ZwQueueApcThreadEx
       1907  76A 00094830 ZwRaiseException
       1908  76B 00094840 ZwRaiseHardError
       1909  76C 000933D0 ZwReadFile
       1910  76D 00093650 ZwReadFileScatter
       1911  76E 00094850 ZwReadOnlyEnlistment
       1912  76F 000938B0 ZwReadRequestData
       1913  770 00093760 ZwReadVirtualMemory
       1914  771 00094860 ZwRecoverEnlistment
       1915  772 00094870 ZwRecoverResourceManager
       1916  773 00094880 ZwRecoverTransactionManager
       1917  774 00094890 ZwRegisterProtocolAddressInformation
       1918  775 000948A0 ZwRegisterThreadTerminatePort
       1919  776 000948B0 ZwReleaseKeyedEvent
       1920  777 00093570 ZwReleaseMutant
       1921  778 00093410 ZwReleaseSemaphore
       1922  779 000948C0 ZwReleaseWorkerFactoryWorker
       1923  77A 00093400 ZwRemoveIoCompletion
       1924  77B 000948D0 ZwRemoveIoCompletionEx
       1925  77C 000948E0 ZwRemoveProcessDebug
       1926  77D 000948F0 ZwRenameKey
       1927  77E 00094900 ZwRenameTransactionManager
       1928  77F 00094910 ZwReplaceKey
       1929  780 00094920 ZwReplacePartitionUnit
       1930  781 00093430 ZwReplyPort
       1931  782 00093420 ZwReplyWaitReceivePort
       1932  783 00093620 ZwReplyWaitReceivePortEx
       1933  784 00094930 ZwReplyWaitReplyPort
       1934  785 00094940 ZwRequestPort
       1935  786 00093590 ZwRequestWaitReplyPort
       1936  787 00094950 ZwResetEvent
       1937  788 00094960 ZwResetWriteWatch
       1938  789 00094970 ZwRestoreKey
       1939  78A 00094980 ZwResumeProcess
       1940  78B 00093890 ZwResumeThread
       1941  78C 00094990 ZwRevertContainerImpersonation
       1942  78D 000949A0 ZwRollbackComplete
       1943  78E 000949B0 ZwRollbackEnlistment
       1944  78F 000949C0 ZwRollbackTransaction
       1945  790 000949D0 ZwRollforwardTransactionManager
       1946  791 000949E0 ZwSaveKey
       1947  792 000949F0 ZwSaveKeyEx
       1948  793 00094A00 ZwSaveMergedKeys
       1949  794 00094A10 ZwSecureConnectPort
       1950  795 00094A20 ZwSerializeBoot
       1951  796 00094A30 ZwSetBootEntryOrder
       1952  797 00094A40 ZwSetBootOptions
       1953  798 00094A50 ZwSetCachedSigningLevel
       1954  799 00094A60 ZwSetContextThread
       1955  79A 00094A70 ZwSetDebugFilterState
       1956  79B 00094A80 ZwSetDefaultHardErrorPort
       1957  79C 00094A90 ZwSetDefaultLocale
       1958  79D 00094AA0 ZwSetDefaultUILanguage
       1959  79E 00094AB0 ZwSetDriverEntryOrder
       1960  79F 00094AC0 ZwSetEaFile
       1961  7A0 00093450 ZwSetEvent
       1962  7A1 00093640 ZwSetEventBoostPriority
       1963  7A2 00094AD0 ZwSetHighEventPair
       1964  7A3 00094AE0 ZwSetHighWaitLowEventPair
       1965  7A4 00094AF0 ZwSetIRTimer
       1966  7A5 00094B00 ZwSetInformationDebugObject
       1967  7A6 00094B10 ZwSetInformationEnlistment
       1968  7A7 000935E0 ZwSetInformationFile
       1969  7A8 00094B20 ZwSetInformationJobObject
       1970  7A9 00094B30 ZwSetInformationKey
       1971  7AA 00093930 ZwSetInformationObject
       1972  7AB 00093530 ZwSetInformationProcess
       1973  7AC 00094B40 ZwSetInformationResourceManager
       1974  7AD 00094B50 ZwSetInformationSymbolicLink
       1975  7AE 00093440 ZwSetInformationThread
       1976  7AF 00094B60 ZwSetInformationToken
       1977  7B0 00094B70 ZwSetInformationTransaction
       1978  7B1 00094B80 ZwSetInformationTransactionManager
       1979  7B2 00094B90 ZwSetInformationVirtualMemory
       1980  7B3 00094BA0 ZwSetInformationWorkerFactory
       1981  7B4 00094BB0 ZwSetIntervalProfile
       1982  7B5 00094BC0 ZwSetIoCompletion
       1983  7B6 00094BD0 ZwSetIoCompletionEx
       1984  7B7 00094BE0 ZwSetLdtEntries
       1985  7B8 00094BF0 ZwSetLowEventPair
       1986  7B9 00094C00 ZwSetLowWaitHighEventPair
       1987  7BA 00094C10 ZwSetQuotaInformationFile
       1988  7BB 00094C20 ZwSetSecurityObject
       1989  7BC 00094C30 ZwSetSystemEnvironmentValue
       1990  7BD 00094C40 ZwSetSystemEnvironmentValueEx
       1991  7BE 00094C50 ZwSetSystemInformation
       1992  7BF 00094C60 ZwSetSystemPowerState
       1993  7C0 00094C70 ZwSetSystemTime
       1994  7C1 00094C80 ZwSetThreadExecutionState
       1995  7C2 00093990 ZwSetTimer
       1996  7C3 00094C90 ZwSetTimer2
       1997  7C4 00094CA0 ZwSetTimerEx
       1998  7C5 00094CB0 ZwSetTimerResolution
       1999  7C6 00094CC0 ZwSetUuidSeed
       2000  7C7 00093970 ZwSetValueKey
       2001  7C8 00094CD0 ZwSetVolumeInformationFile
       2002  7C9 00094CE0 ZwSetWnfProcessNotificationEvent
       2003  7CA 00094CF0 ZwShutdownSystem
       2004  7CB 00094D00 ZwShutdownWorkerFactory
       2005  7CC 00094D10 ZwSignalAndWaitForSingleObject
       2006  7CD 00094D20 ZwSinglePhaseReject
       2007  7CE 00094D30 ZwStartProfile
       2008  7CF 00094D40 ZwStopProfile
       2009  7D0 00094D50 ZwSubscribeWnfStateChange
       2010  7D1 00094D60 ZwSuspendProcess
       2011  7D2 00094D70 ZwSuspendThread
       2012  7D3 00094D80 ZwSystemDebugControl
       2013  7D4 00094D90 ZwTerminateJobObject
       2014  7D5 00093630 ZwTerminateProcess
       2015  7D6 000938A0 ZwTerminateThread
       2016  7D7 00094DA0 ZwTestAlert
       2017  7D8 00094DB0 ZwThawRegistry
       2018  7D9 00094DC0 ZwThawTransactions
       2019  7DA 00094DD0 ZwTraceControl
       2020  7DB 00093950 ZwTraceEvent
       2021  7DC 00094DE0 ZwTranslateFilePath
       2022  7DD 00094DF0 ZwUmsThreadYield
       2023  7DE 00094E00 ZwUnloadDriver
       2024  7DF 00094E10 ZwUnloadKey
       2025  7E0 00094E20 ZwUnloadKey2
       2026  7E1 00094E30 ZwUnloadKeyEx
       2027  7E2 00094E40 ZwUnlockFile
       2028  7E3 00094E50 ZwUnlockVirtualMemory
       2029  7E4 00093610 ZwUnmapViewOfSection
       2030  7E5 00094E60 ZwUnmapViewOfSectionEx
       2031  7E6 00094E70 ZwUnsubscribeWnfStateChange
       2032  7E7 00094E80 ZwUpdateWnfStateData
       2033  7E8 00094E90 ZwVdmControl
       2034  7E9 00094EA0 ZwWaitForAlertByThreadId
       2035  7EA 00094EB0 ZwWaitForDebugEvent
       2036  7EB 00094EC0 ZwWaitForKeyedEvent
       2037  7EC 00093920 ZwWaitForMultipleObjects
       2038  7ED 00093510 ZwWaitForMultipleObjects32
       2039  7EE 000933B0 ZwWaitForSingleObject
       2040  7EF 00094ED0 ZwWaitForWorkViaWorkerFactory
       2041  7F0 00094EE0 ZwWaitHighEventPair
       2042  7F1 00094EF0 ZwWaitLowEventPair
       2043  7F2 00093380 ZwWorkerFactoryWorkerReady
       2044  7F3 000933F0 ZwWriteFile
       2045  7F4 00093520 ZwWriteFileGather
       2046  7F5 000938E0 ZwWriteRequestData
       2047  7F6 00093710 ZwWriteVirtualMemory
       2048  7F7 000937D0 ZwYieldExecution
       2049  7F8 00083D50 __C_specific_handler
       2050  7F9 00096080 __chkstk
       2051  7FA 00083F10 __isascii
       2052  7FB 00083F30 __iscsym
       2053  7FC 00083F80 __iscsymf
       2054  7FD 000756F0 __misaligned_access
       2055  7FE 00083FC0 __toascii
       2056  7FF 000841E0 _atoi64
       2057  800 000748E0 _errno
       2058  801 00140010 _fltused
       2059  802 00084250 _i64toa
       2060  803 0008DA60 _i64toa_s
       2061  804 00084430 _i64tow
       2062  805 0008DD50 _i64tow_s
       2063  806 00084290 _itoa
       2064  807 0008DA90 _itoa_s
       2065  808 00084470 _itow
       2066  809 0008DD80 _itow_s
       2067  80A 00084600 _lfind
       2068  80B 000846C0 _local_unwind
       2069  80C 000842C0 _ltoa
       2070  80D 0008DAC0 _ltoa_s
       2071  80E 000844A0 _ltow
       2072  80F 0008DDB0 _ltow_s
       2073  810 0008E070 _makepath_s
       2074  811 000846F0 _memccpy
       2075  812 00084780 _memicmp
       2076  813 00096DC0 _setjmp
       2077  814 00096E80 _setjmpex
       2078  815 000847A0 _snprintf
       2079  816 0008E1B0 _snprintf_s
       2080  817 0008E280 _snscanf_s
       2081  818 00084850 _snwprintf
       2082  819 0008E2C0 _snwprintf_s
       2083  81A 0008E3A0 _snwscanf_s
       2084  81B 00084930 _splitpath
       2085  81C 0008E3E0 _splitpath_s
       2086  81D 00084C80 _strcmpi
       2087  81E 00084C80 _stricmp
       2088  81F 00084C90 _strlwr
       2089  820 00084CC0 _strlwr_s
       2090  821 00084D80 _strnicmp
       2091  822 0008E680 _strnset_s
       2092  823 0008E710 _strset_s
       2093  824 00084D90 _strupr
       2094  825 00084DE0 _strupr_s
       2095  826 00084E50 _swprintf
       2096  827 000842F0 _ui64toa
       2097  828 0008DAF0 _ui64toa_s
       2098  829 000844D0 _ui64tow
       2099  82A 0008DDE0 _ui64tow_s
       2100  82B 00084350 _ultoa
       2101  82C 0008DB10 _ultoa_s
       2102  82D 000844F0 _ultow
       2103  82E 0008DE00 _ultow_s
       2104  82F 00084F10 _vscwprintf
       2105  830 00085080 _vsnprintf
       2106  831 0008E1E0 _vsnprintf_s
       2107  832 00085150 _vsnwprintf
       2108  833 0008E2F0 _vsnwprintf_s
       2109  834 00084FC0 _vswprintf
       2110  835 00085250 _wcsicmp
       2111  836 000852A0 _wcslwr
       2112  837 000852F0 _wcslwr_s
       2113  838 00085370 _wcsnicmp
       2114  839 000853D0 _wcsnset_s
       2115  83A 00085460 _wcsset_s
       2116  83B 000854C0 _wcstoi64
       2117  83C 000854F0 _wcstoui64
       2118  83D 00085790 _wcsupr
       2119  83E 000857D0 _wcsupr_s
       2120  83F 0008E770 _wmakepath_s
       2121  840 0008E8E0 _wsplitpath_s
       2122  841 00085850 _wtoi
       2123  842 00085880 _wtoi64
       2124  843 000858A0 _wtol
       2125  844 000858C0 abs
       2126  845 000858D0 atan
       2127  846 00085B40 atan2
       2128  847 00084200 atoi
       2129  848 00084230 atol
       2130  849 00086310 bsearch
       2131  84A 00086420 ceil
       2132  84B 00086540 cos
       2133  84C 00086E50 fabs
       2134  84D 00086F40 floor
       2135  84E 00083FD0 isalnum
       2136  84F 00084000 isalpha
       2137  850 00084030 iscntrl
       2138  851 00084060 isdigit
       2139  852 00084090 isgraph
       2140  853 000840C0 islower
       2141  854 000840F0 isprint
       2142  855 00084120 ispunct
       2143  856 00084150 isspace
       2144  857 00084180 isupper
       2145  858 00087070 iswalnum
       2146  859 00087080 iswalpha
       2147  85A 00087090 iswascii
       2148  85B 00087140 iswctype
       2149  85C 000870B0 iswdigit
       2150  85D 000870C0 iswgraph
       2151  85E 000870D0 iswlower
       2152  85F 000870E0 iswprint
       2153  860 000870F0 iswspace
       2154  861 00087100 iswxdigit
       2155  862 000841B0 isxdigit
       2156  863 000858C0 labs
       2157  864 00087170 log
       2158  865 00087460 longjmp
       2159  866 00087490 mbstowcs
       2160  867 00087560 memchr
       2161  868 00087590 memcmp
       2162  869 00097C40 memcpy
       2163  86A 0008EBA0 memcpy_s
       2164  86B 00097C40 memmove
       2165  86C 0008EC50 memmove_s
       2166  86D 00097F80 memset
       2167  86E 00096F20 pow
       2168  86F 00087670 qsort
       2169  870 00087A70 qsort_s
       2170  871 00086960 sin
       2171  872 00087EA0 sprintf
       2172  873 0008ECD0 sprintf_s
       2173  874 00087F40 sqrt
       2174  875 00088050 sscanf
       2175  876 0008ED50 sscanf_s
       2176  877 00088140 strcat
       2177  878 0008EDB0 strcat_s
       2178  879 000882A0 strchr
       2179  87A 000882D0 strcmp
       2180  87B 000881E0 strcpy
       2181  87C 0008EE50 strcpy_s
       2182  87D 00088390 strcspn
       2183  87E 00088440 strlen
       2184  87F 00088500 strncat
       2185  880 0008EEE0 strncat_s
       2186  881 000886B0 strncmp
       2187  882 00088780 strncpy
       2188  883 0008EFE0 strncpy_s
       2189  884 000888F0 strnlen
       2190  885 00088910 strpbrk
       2191  886 000889C0 strrchr
       2192  887 000889F0 strspn
       2193  888 00088AC0 strstr
       2194  889 0008F0D0 strtok_s
       2195  88A 00088D60 strtol
       2196  88B 00088DC0 strtoul
       2197  88C 00084E50 swprintf
       2198  88D 0008F1F0 swprintf_s
       2199  88E 0008F280 swscanf_s
       2200  88F 00088E00 tan
       2201  890 000892B0 tolower
       2202  891 000892F0 toupper
       2203  892 00089360 towlower
       2204  893 00089390 towupper
       2205  894 000CADA0 vDbgPrintEx
       2206  895 000CADD0 vDbgPrintExWithPrefix
       2207  896 00089420 vsprintf
       2208  897 0008ED00 vsprintf_s
       2209  898 0008F220 vswprintf_s
       2210  899 00089440 wcscat
       2211  89A 0008F2E0 wcscat_s
       2212  89B 000894B0 wcschr
       2213  89C 000894E0 wcscmp
       2214  89D 00089480 wcscpy
       2215  89E 0008F390 wcscpy_s
       2216  89F 00089520 wcscspn
       2217  8A0 00089570 wcslen
       2218  8A1 00089590 wcsncat
       2219  8A2 0008F420 wcsncat_s
       2220  8A3 000895E0 wcsncmp
       2221  8A4 00089620 wcsncpy
       2222  8A5 0008F530 wcsncpy_s
       2223  8A6 00089670 wcsnlen
       2224  8A7 000896A0 wcspbrk
       2225  8A8 000896F0 wcsrchr
       2226  8A9 00089730 wcsspn
       2227  8AA 00089780 wcsstr
       2228  8AB 0008F640 wcstok_s
       2229  8AC 00089A00 wcstol
       2230  8AD 00089AA0 wcstombs
       2231  8AE 00089A60 wcstoul
          8      00077370 [NONAME]

  Summary

        9000 .data
        4000 .mrdata
        E000 .pdata
       42000 .rdata
        1000 .reloc
       66000 .rsrc
       FC000 .text
        1000 RT
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file ole32.dll

File Type: DLL

  Section contains the following exports for ole32.dll

    00000000 characteristics
    559F30B9 time date stamp Thu Jul  9 19:40:57 2015
        0.00 version
         800 ordinal base
         553 number of functions
         545 number of names

    ordinal hint RVA      name

        840    0 00008F60 BindMoniker
        841    1          CLIPFORMAT_UserFree (forwarded to COMBASE.CLIPFORMAT_UserFree)
        842    2          CLIPFORMAT_UserFree64 (forwarded to COMBASE.CLIPFORMAT_UserFree64)
        805    3 000BC340 CLIPFORMAT_UserFreeExt
        843    4          CLIPFORMAT_UserMarshal (forwarded to COMBASE.CLIPFORMAT_UserMarshal)
        844    5          CLIPFORMAT_UserMarshal64 (forwarded to COMBASE.CLIPFORMAT_UserMarshal64)
        806    6 000BC350 CLIPFORMAT_UserMarshalExt
        845    7          CLIPFORMAT_UserSize (forwarded to COMBASE.CLIPFORMAT_UserSize)
        846    8          CLIPFORMAT_UserSize64 (forwarded to COMBASE.CLIPFORMAT_UserSize64)
        807    9 000BC360 CLIPFORMAT_UserSizeExt
        847    A          CLIPFORMAT_UserUnmarshal (forwarded to COMBASE.CLIPFORMAT_UserUnmarshal)
        848    B          CLIPFORMAT_UserUnmarshal64 (forwarded to COMBASE.CLIPFORMAT_UserUnmarshal64)
        808    C 000BC370 CLIPFORMAT_UserUnmarshalExt
        849    D          CLSIDFromOle1Class (forwarded to api-ms-win-core-com-private-l1-1-1.CLSIDFromOle1Class)
        850    E          CLSIDFromProgID (forwarded to api-ms-win-core-com-l1-1-0.CLSIDFromProgID)
        851    F 00014260 CLSIDFromProgIDEx
        852   10          CLSIDFromString (forwarded to api-ms-win-core-com-l1-1-0.CLSIDFromString)
        853   11          CStdAsyncStubBuffer2_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Connect)
        854   12          CStdAsyncStubBuffer2_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Disconnect)
        855   13          CStdAsyncStubBuffer2_Release (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer2_Release)
        856   14          CStdAsyncStubBuffer_AddRef (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_AddRef)
        857   15          CStdAsyncStubBuffer_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Connect)
        858   16          CStdAsyncStubBuffer_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Disconnect)
        859   17          CStdAsyncStubBuffer_Invoke (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Invoke)
        860   18          CStdAsyncStubBuffer_QueryInterface (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_QueryInterface)
        861   19          CStdAsyncStubBuffer_Release (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdAsyncStubBuffer_Release)
        862   1A          CStdStubBuffer2_Connect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_Connect)
        863   1B          CStdStubBuffer2_CountRefs (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_CountRefs)
        864   1C          CStdStubBuffer2_Disconnect (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_Disconnect)
        865   1D          CStdStubBuffer2_QueryInterface (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.CStdStubBuffer2_QueryInterface)
        866   1E 0000F4F0 CheckInitDde
        867   1F 00009870 CleanROTForApartment
        809   20 0000EFC0 ClipboardProcessUninitialize
        868   21          CoAddRefServerProcess (forwarded to api-ms-win-core-com-l1-1-0.CoAddRefServerProcess)
        869   22 0003CD10 CoAicGetTokenForCOM
        870   23 0000B7A0 CoAllowSetForegroundWindow
        871   24          CoAllowUnmarshalerCLSID (forwarded to api-ms-win-core-com-l1-1-0.CoAllowUnmarshalerCLSID)
        872   25 0004AB10 CoBuildVersion
        873   26          CoCancelCall (forwarded to api-ms-win-core-com-l1-1-0.CoCancelCall)
        874   27 0003CD90 CoCheckElevationEnabled
        875   28          CoCopyProxy (forwarded to api-ms-win-core-com-l1-1-0.CoCopyProxy)
        876   29          CoCreateFreeThreadedMarshaler (forwarded to api-ms-win-core-com-l1-1-0.CoCreateFreeThreadedMarshaler)
        877   2A          CoCreateGuid (forwarded to api-ms-win-core-com-l1-1-0.CoCreateGuid)
        878   2B          CoCreateInstance (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstance)
        879   2C          CoCreateInstanceEx (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstanceEx)
        880   2D          CoCreateInstanceFromApp (forwarded to api-ms-win-core-com-l1-1-0.CoCreateInstanceFromApp)
        881   2E          CoCreateObjectInContext (forwarded to api-ms-win-core-com-private-l1-1-1.CoCreateObjectInContext)
        882   2F          CoDeactivateObject (forwarded to api-ms-win-core-com-private-l1-1-1.CoDeactivateObject)
        883   30          CoDecodeProxy (forwarded to COMBASE.CoDecodeProxy)
        884   31          CoDecrementMTAUsage (forwarded to api-ms-win-core-com-l1-1-0.CoDecrementMTAUsage)
        885   32          CoDisableCallCancellation (forwarded to api-ms-win-core-com-l1-1-0.CoDisableCallCancellation)
        886   33          CoDisconnectContext (forwarded to api-ms-win-core-com-l1-1-0.CoDisconnectContext)
        887   34          CoDisconnectObject (forwarded to api-ms-win-core-com-l1-1-0.CoDisconnectObject)
        888   35 0004CB80 CoDosDateTimeToFileTime
        889   36          CoEnableCallCancellation (forwarded to api-ms-win-core-com-l1-1-0.CoEnableCallCancellation)
        890   37 000130F0 CoFileTimeNow
        891   38 0004CBC0 CoFileTimeToDosDateTime
        892   39 000254D0 CoFreeAllLibraries
        893   3A 0004AB20 CoFreeLibrary
        894   3B          CoFreeUnusedLibraries (forwarded to api-ms-win-core-com-l1-1-0.CoFreeUnusedLibraries)
        895   3C          CoFreeUnusedLibrariesEx (forwarded to api-ms-win-core-com-l1-1-0.CoFreeUnusedLibrariesEx)
        896   3D          CoGetActivationState (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetActivationState)
        897   3E          CoGetApartmentID (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetApartmentID)
        898   3F          CoGetApartmentType (forwarded to api-ms-win-core-com-l1-1-0.CoGetApartmentType)
        899   40          CoGetCallContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetCallContext)
        900   41          CoGetCallState (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetCallState)
        901   42          CoGetCallerTID (forwarded to api-ms-win-core-com-l1-1-0.CoGetCallerTID)
        902   43          CoGetCancelObject (forwarded to api-ms-win-core-com-l1-1-0.CoGetCancelObject)
        903   44          CoGetClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoGetClassObject)
        904   45          CoGetClassVersion (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetClassVersion)
        905   46          CoGetComCatalog (forwarded to api-ms-win-core-com-private-l1-1-1.GetCatalogHelper)
        906   47          CoGetContextToken (forwarded to api-ms-win-core-com-l1-1-0.CoGetContextToken)
        907   48          CoGetCurrentLogicalThreadId (forwarded to api-ms-win-core-com-l1-1-0.CoGetCurrentLogicalThreadId)
        908   49          CoGetCurrentProcess (forwarded to api-ms-win-core-com-l1-1-0.CoGetCurrentProcess)
        909   4A          CoGetDefaultContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetDefaultContext)
        910   4B          CoGetInstanceFromFile (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetInstanceFromFile)
        911   4C          CoGetInstanceFromIStorage (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetInstanceFromIStorage)
        912   4D 000566F0 CoGetInterceptor
        913   4E 0000B3B0 CoGetInterceptorForOle32
        914   4F 00023F50 CoGetInterceptorFromTypeInfo
        915   50          CoGetInterfaceAndReleaseStream (forwarded to api-ms-win-core-com-l1-1-0.CoGetInterfaceAndReleaseStream)
        916   51          CoGetMalloc (forwarded to api-ms-win-core-com-l1-1-0.CoGetMalloc)
        917   52          CoGetMarshalSizeMax (forwarded to api-ms-win-core-com-l1-1-0.CoGetMarshalSizeMax)
        918   53          CoGetModuleType (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetModuleType)
        919   54 00009D70 CoGetObject
        920   55          CoGetObjectContext (forwarded to api-ms-win-core-com-l1-1-0.CoGetObjectContext)
        921   56          CoGetPSClsid (forwarded to api-ms-win-core-com-l1-1-0.CoGetPSClsid)
        922   57          CoGetProcessIdentifier (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetProcessIdentifier)
        923   58          CoGetStandardMarshal (forwarded to api-ms-win-core-com-l1-1-0.CoGetStandardMarshal)
        924   59          CoGetStdMarshalEx (forwarded to api-ms-win-core-com-l1-1-0.CoGetStdMarshalEx)
        925   5A          CoGetSystemSecurityPermissions (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetSystemSecurityPermissions)
        926   5B 0003CDA0 CoGetSystemWow64DirectoryW
        927   5C          CoGetTreatAsClass (forwarded to api-ms-win-core-com-l1-1-0.CoGetTreatAsClass)
        928   5D          CoHandlePriorityEventsFromMessagePump (forwarded to COMBASE.#111)
        929   5E          CoImpersonateClient (forwarded to api-ms-win-core-com-l1-1-0.CoImpersonateClient)
        930   5F          CoIncrementMTAUsage (forwarded to api-ms-win-core-com-l1-1-0.CoIncrementMTAUsage)
        931   60 00013870 CoInitialize
        932   61          CoInitializeEx (forwarded to api-ms-win-core-com-l1-1-0.CoInitializeEx)
        933   62          CoInitializeSecurity (forwarded to api-ms-win-core-com-l1-1-0.CoInitializeSecurity)
        934   63 00025FA0 CoInitializeWOW
        935   64 0004AB30 CoInstall
        936   65          CoInvalidateRemoteMachineBindings (forwarded to api-ms-win-core-com-private-l1-1-1.CoInvalidateRemoteMachineBindings)
        937   66          CoIsHandlerConnected (forwarded to api-ms-win-core-com-l1-1-0.CoIsHandlerConnected)
        938   67 0001EAA0 CoIsOle1Class
        939   68 000201C0 CoLoadLibrary
        940   69          CoLockObjectExternal (forwarded to api-ms-win-core-com-l1-1-0.CoLockObjectExternal)
        941   6A          CoMarshalHresult (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalHresult)
        942   6B          CoMarshalInterThreadInterfaceInStream (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalInterThreadInterfaceInStream)
        943   6C          CoMarshalInterface (forwarded to api-ms-win-core-com-l1-1-0.CoMarshalInterface)
        944   6D          CoPopServiceDomain (forwarded to api-ms-win-core-com-private-l1-1-1.CoPopServiceDomain)
        945   6E          CoPushServiceDomain (forwarded to api-ms-win-core-com-private-l1-1-1.CoPushServiceDomain)
        946   6F          CoQueryAuthenticationServices (forwarded to api-ms-win-core-com-l1-1-0.CoQueryAuthenticationServices)
        947   70          CoQueryClientBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoQueryClientBlanket)
        948   71          CoQueryProxyBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoQueryProxyBlanket)
        949   72 0002F9F0 CoQueryReleaseObject
        950   73          CoReactivateObject (forwarded to api-ms-win-core-com-private-l1-1-1.CoReactivateObject)
        951   74          CoRegisterActivationFilter (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterActivationFilter)
        952   75          CoRegisterChannelHook (forwarded to COMBASE.#112)
        953   76          CoRegisterClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterClassObject)
        954   77          CoRegisterInitializeSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRegisterInitializeSpy)
        955   78          CoRegisterMallocSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRegisterMallocSpy)
        956   79 00025FB0 CoRegisterMessageFilter
        957   7A          CoRegisterPSClsid (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterPSClsid)
        958   7B          CoRegisterSurrogate (forwarded to api-ms-win-core-com-l1-1-0.CoRegisterSurrogate)
        959   7C 00025FC0 CoRegisterSurrogateEx
        960   7D          CoReleaseMarshalData (forwarded to api-ms-win-core-com-l1-1-0.CoReleaseMarshalData)
        961   7E          CoReleaseServerProcess (forwarded to api-ms-win-core-com-l1-1-0.CoReleaseServerProcess)
        962   7F          CoResumeClassObjects (forwarded to api-ms-win-core-com-l1-1-0.CoResumeClassObjects)
        963   80          CoRetireServer (forwarded to api-ms-win-core-com-private-l1-1-1.CoRetireServer)
        964   81          CoRevertToSelf (forwarded to api-ms-win-core-com-l1-1-0.CoRevertToSelf)
        965   82          CoRevokeClassObject (forwarded to api-ms-win-core-com-l1-1-0.CoRevokeClassObject)
        966   83          CoRevokeInitializeSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRevokeInitializeSpy)
        967   84          CoRevokeMallocSpy (forwarded to api-ms-win-core-com-private-l1-1-1.CoRevokeMallocSpy)
        968   85          CoSetCancelObject (forwarded to api-ms-win-core-com-l1-1-0.CoSetCancelObject)
        969   86          CoSetMessageDispatcher (forwarded to COMBASE.#110)
        970   87          CoSetProxyBlanket (forwarded to api-ms-win-core-com-l1-1-0.CoSetProxyBlanket)
        971   88 00030090 CoSetState
        972   89          CoSuspendClassObjects (forwarded to api-ms-win-core-com-l1-1-0.CoSuspendClassObjects)
        973   8A          CoSwitchCallContext (forwarded to api-ms-win-core-com-l1-1-0.CoSwitchCallContext)
        974   8B          CoTaskMemAlloc (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemAlloc)
        975   8C          CoTaskMemFree (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemFree)
        976   8D          CoTaskMemRealloc (forwarded to api-ms-win-core-com-l1-1-0.CoTaskMemRealloc)
        977   8E          CoTestCancel (forwarded to api-ms-win-core-com-l1-1-0.CoTestCancel)
        978   8F 0004C360 CoTreatAsClass
        979   90          CoUninitialize (forwarded to api-ms-win-core-com-l1-1-0.CoUninitialize)
        980   91 00025FD0 CoUnloadingWOW
        981   92          CoUnmarshalHresult (forwarded to api-ms-win-core-com-l1-1-0.CoUnmarshalHresult)
        982   93          CoUnmarshalInterface (forwarded to api-ms-win-core-com-l1-1-0.CoUnmarshalInterface)
        983   94          CoVrfCheckThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfCheckThreadState)
        984   95          CoVrfGetThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfGetThreadState)
        985   96          CoVrfReleaseThreadState (forwarded to api-ms-win-core-com-private-l1-1-1.CoVrfReleaseThreadState)
        986   97          CoWaitForMultipleHandles (forwarded to api-ms-win-core-com-l1-1-0.CoWaitForMultipleHandles)
        987   98          CoWaitForMultipleObjects (forwarded to api-ms-win-core-com-l1-1-0.CoWaitForMultipleObjects)
        988   99 0002F9F0 ComPs_NdrDllCanUnloadNow
        989   9A 00056A50 ComPs_NdrDllGetClassObject
        990   9B 00057090 ComPs_NdrDllRegisterProxy
        991   9C 000570D0 ComPs_NdrDllUnregisterProxy
        992   9D 0003D740 CreateAntiMoniker
        993   9E 0000D450 CreateBindCtx
        994   9F 0003F260 CreateClassMoniker
        995   A0 000134C0 CreateDataAdviseHolder
        996   A1 00078E20 CreateDataCache
        997   A2          CreateErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoCreateErrorInfo)
        998   A3 0001F490 CreateFileMoniker
        999   A4 0000AB60 CreateGenericComposite
       1000   A5 000201A0 CreateILockBytesOnHGlobal
       1001   A6 00003EA0 CreateItemMoniker
       1002   A7 0003D790 CreateObjrefMoniker
       1003   A8 00013420 CreateOleAdviseHolder
       1004   A9 000093B0 CreatePointerMoniker
       1005   AA 000429A0 CreateStdProgressIndicator
       1006   AB          CreateStreamOnHGlobal (forwarded to api-ms-win-core-com-l1-1-0.CreateStreamOnHGlobal)
       1007   AC          DcomChannelSetHResult (forwarded to COMBASE.DcomChannelSetHResult)
       1008   AD 00064910 DdeBindToObject
       1009   AE 0003CDB0 DeletePatternAndExtensionTables
       1010   AF 00003D20 DestroyRunningObjectTable
       1011   B0          DllDebugObjectRPCHook (forwarded to api-ms-win-core-com-private-l1-1-1.DllDebugObjectRPCHook)
       1012   B1 0000A5E0 DllGetClassObject
       1013   B2 0000A5E0 DllGetClassObjectWOW
       1014   B3 00030090 DllRegisterServer
       1015   B4 00092A70 DoDragDrop
       1016   B5 00092C20 DragDropSetFDT
       1017   B6          EnableHookObject (forwarded to api-ms-win-core-com-private-l1-1-1.EnableHookObject)
       1018   B7 00045CD0 FindExt
       1019   B8 0003D0A0 FmtIdToPropStgName
       1020   B9 00024B80 FreePropVariantArray
       1021   BA 00003BD0 GetActiveObjectExt
       1022   BB 00008940 GetClassFile
       1023   BC 0003D0B0 GetConvertStg
       1024   BD 0003D0C0 GetDocumentBitStg
       1025   BE          GetErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoGetErrorInfo)
       1026   BF 0003D0D0 GetHGlobalFromILockBytes
       1027   C0          GetHGlobalFromStream (forwarded to api-ms-win-core-com-l1-1-0.GetHGlobalFromStream)
       1028   C1          GetHookInterface (forwarded to api-ms-win-core-com-private-l1-1-1.GetHookInterface)
       1029   C2 000631F0 GetObjectFromRotByPath
       1030   C3 000090F0 GetRunningObjectTable
       1031   C4          HACCEL_UserFree (forwarded to COMBASE.HACCEL_UserFree)
       1032   C5          HACCEL_UserFree64 (forwarded to COMBASE.HACCEL_UserFree64)
       1033   C6          HACCEL_UserMarshal (forwarded to COMBASE.HACCEL_UserMarshal)
       1034   C7          HACCEL_UserMarshal64 (forwarded to COMBASE.HACCEL_UserMarshal64)
       1035   C8          HACCEL_UserSize (forwarded to COMBASE.HACCEL_UserSize)
       1036   C9          HACCEL_UserSize64 (forwarded to COMBASE.HACCEL_UserSize64)
       1037   CA          HACCEL_UserUnmarshal (forwarded to COMBASE.HACCEL_UserUnmarshal)
       1038   CB          HACCEL_UserUnmarshal64 (forwarded to COMBASE.HACCEL_UserUnmarshal64)
       1039   CC          HBITMAP_UserFree (forwarded to COMBASE.HBITMAP_UserFree)
       1040   CD          HBITMAP_UserFree64 (forwarded to COMBASE.HBITMAP_UserFree64)
       1041   CE          HBITMAP_UserMarshal (forwarded to COMBASE.HBITMAP_UserMarshal)
       1042   CF          HBITMAP_UserMarshal64 (forwarded to COMBASE.HBITMAP_UserMarshal64)
       1043   D0          HBITMAP_UserSize (forwarded to COMBASE.HBITMAP_UserSize)
       1044   D1          HBITMAP_UserSize64 (forwarded to COMBASE.HBITMAP_UserSize64)
       1045   D2          HBITMAP_UserUnmarshal (forwarded to COMBASE.HBITMAP_UserUnmarshal)
       1046   D3          HBITMAP_UserUnmarshal64 (forwarded to COMBASE.HBITMAP_UserUnmarshal64)
       1047   D4          HBRUSH_UserFree (forwarded to COMBASE.HBRUSH_UserFree)
       1048   D5          HBRUSH_UserFree64 (forwarded to COMBASE.HBRUSH_UserFree64)
       1049   D6          HBRUSH_UserMarshal (forwarded to COMBASE.HBRUSH_UserMarshal)
       1050   D7          HBRUSH_UserMarshal64 (forwarded to COMBASE.HBRUSH_UserMarshal64)
       1051   D8          HBRUSH_UserSize (forwarded to COMBASE.HBRUSH_UserSize)
       1052   D9          HBRUSH_UserSize64 (forwarded to COMBASE.HBRUSH_UserSize64)
       1053   DA          HBRUSH_UserUnmarshal (forwarded to COMBASE.HBRUSH_UserUnmarshal)
       1054   DB          HBRUSH_UserUnmarshal64 (forwarded to COMBASE.HBRUSH_UserUnmarshal64)
       1055   DC          HDC_UserFree (forwarded to COMBASE.HDC_UserFree)
       1056   DD          HDC_UserFree64 (forwarded to COMBASE.HDC_UserFree64)
       1057   DE          HDC_UserMarshal (forwarded to COMBASE.HDC_UserMarshal)
       1058   DF          HDC_UserMarshal64 (forwarded to COMBASE.HDC_UserMarshal64)
       1059   E0          HDC_UserSize (forwarded to COMBASE.HDC_UserSize)
       1060   E1          HDC_UserSize64 (forwarded to COMBASE.HDC_UserSize64)
       1061   E2          HDC_UserUnmarshal (forwarded to COMBASE.HDC_UserUnmarshal)
       1062   E3          HDC_UserUnmarshal64 (forwarded to COMBASE.HDC_UserUnmarshal64)
       1063   E4 0004D810 HENHMETAFILE_UserFree
       1064   E5 0004D810 HENHMETAFILE_UserFree64
       1065   E6 0004D860 HENHMETAFILE_UserMarshal
       1066   E7 0004D930 HENHMETAFILE_UserMarshal64
       1067   E8 0004DA10 HENHMETAFILE_UserSize
       1068   E9 0004DA80 HENHMETAFILE_UserSize64
       1069   EA 0004DB10 HENHMETAFILE_UserUnmarshal
       1070   EB 0004DB90 HENHMETAFILE_UserUnmarshal64
       1071   EC          HGLOBAL_UserFree (forwarded to COMBASE.HGLOBAL_UserFree)
       1072   ED          HGLOBAL_UserFree64 (forwarded to COMBASE.HGLOBAL_UserFree64)
       1073   EE          HGLOBAL_UserMarshal (forwarded to COMBASE.HGLOBAL_UserMarshal)
       1074   EF          HGLOBAL_UserMarshal64 (forwarded to COMBASE.HGLOBAL_UserMarshal64)
       1075   F0          HGLOBAL_UserSize (forwarded to COMBASE.HGLOBAL_UserSize)
       1076   F1          HGLOBAL_UserSize64 (forwarded to COMBASE.HGLOBAL_UserSize64)
       1077   F2          HGLOBAL_UserUnmarshal (forwarded to COMBASE.HGLOBAL_UserUnmarshal)
       1078   F3          HGLOBAL_UserUnmarshal64 (forwarded to COMBASE.HGLOBAL_UserUnmarshal64)
       1079   F4          HICON_UserFree (forwarded to COMBASE.HICON_UserFree)
       1080   F5          HICON_UserFree64 (forwarded to COMBASE.HICON_UserFree64)
       1081   F6          HICON_UserMarshal (forwarded to COMBASE.HICON_UserMarshal)
       1082   F7          HICON_UserMarshal64 (forwarded to COMBASE.HICON_UserMarshal64)
       1083   F8          HICON_UserSize (forwarded to COMBASE.HICON_UserSize)
       1084   F9          HICON_UserSize64 (forwarded to COMBASE.HICON_UserSize64)
       1085   FA          HICON_UserUnmarshal (forwarded to COMBASE.HICON_UserUnmarshal)
       1086   FB          HICON_UserUnmarshal64 (forwarded to COMBASE.HICON_UserUnmarshal64)
       1087   FC          HMENU_UserFree (forwarded to COMBASE.HMENU_UserFree)
       1088   FD          HMENU_UserFree64 (forwarded to COMBASE.HMENU_UserFree64)
       1089   FE          HMENU_UserMarshal (forwarded to COMBASE.HMENU_UserMarshal)
       1090   FF          HMENU_UserMarshal64 (forwarded to COMBASE.HMENU_UserMarshal64)
       1091  100          HMENU_UserSize (forwarded to COMBASE.HMENU_UserSize)
       1092  101          HMENU_UserSize64 (forwarded to COMBASE.HMENU_UserSize64)
       1093  102          HMENU_UserUnmarshal (forwarded to COMBASE.HMENU_UserUnmarshal)
       1094  103          HMENU_UserUnmarshal64 (forwarded to COMBASE.HMENU_UserUnmarshal64)
       1095  104 0004DC10 HMETAFILEPICT_UserFree
       1096  105 0004DC10 HMETAFILEPICT_UserFree64
       1097  106 0004DCA0 HMETAFILEPICT_UserMarshal
       1098  107 0004DDE0 HMETAFILEPICT_UserMarshal64
       1099  108 0004DF80 HMETAFILEPICT_UserSize
       1100  109 0004E030 HMETAFILEPICT_UserSize64
       1101  10A 0004E100 HMETAFILEPICT_UserUnmarshal
       1102  10B 0004E180 HMETAFILEPICT_UserUnmarshal64
       1103  10C 0004E200 HMETAFILE_UserFree
       1104  10D 0004E200 HMETAFILE_UserFree64
       1105  10E 0004E250 HMETAFILE_UserMarshal
       1106  10F 0004E320 HMETAFILE_UserMarshal64
       1107  110 0004E400 HMETAFILE_UserSize
       1108  111 0004E470 HMETAFILE_UserSize64
       1109  112 0004E500 HMETAFILE_UserUnmarshal
       1110  113 0004E680 HMETAFILE_UserUnmarshal64
       1111  114          HMONITOR_UserFree (forwarded to COMBASE.HMONITOR_UserFree)
       1112  115          HMONITOR_UserFree64 (forwarded to COMBASE.HMONITOR_UserFree64)
       1113  116          HMONITOR_UserMarshal (forwarded to COMBASE.HMONITOR_UserMarshal)
       1114  117          HMONITOR_UserMarshal64 (forwarded to COMBASE.HMONITOR_UserMarshal64)
       1115  118          HMONITOR_UserSize (forwarded to COMBASE.HMONITOR_UserSize)
       1116  119          HMONITOR_UserSize64 (forwarded to COMBASE.HMONITOR_UserSize64)
       1117  11A          HMONITOR_UserUnmarshal (forwarded to COMBASE.HMONITOR_UserUnmarshal)
       1118  11B          HMONITOR_UserUnmarshal64 (forwarded to COMBASE.HMONITOR_UserUnmarshal64)
       1119  11C          HPALETTE_UserFree (forwarded to COMBASE.HPALETTE_UserFree)
       1120  11D          HPALETTE_UserFree64 (forwarded to COMBASE.HPALETTE_UserFree64)
        810  11E 000BC380 HPALETTE_UserFreeExt
       1121  11F          HPALETTE_UserMarshal (forwarded to COMBASE.HPALETTE_UserMarshal)
       1122  120          HPALETTE_UserMarshal64 (forwarded to COMBASE.HPALETTE_UserMarshal64)
        811  121 000BC3D0 HPALETTE_UserMarshalExt
       1123  122          HPALETTE_UserSize (forwarded to COMBASE.HPALETTE_UserSize)
       1124  123          HPALETTE_UserSize64 (forwarded to COMBASE.HPALETTE_UserSize64)
        812  124 000BC3E0 HPALETTE_UserSizeExt
       1125  125          HPALETTE_UserUnmarshal (forwarded to COMBASE.HPALETTE_UserUnmarshal)
       1126  126          HPALETTE_UserUnmarshal64 (forwarded to COMBASE.HPALETTE_UserUnmarshal64)
        813  127 000BC3F0 HPALETTE_UserUnmarshalExt
        814  128          HRGN_UserFree (forwarded to COMBASE.HRGN_UserFree)
        815  129          HRGN_UserMarshal (forwarded to COMBASE.HRGN_UserMarshal)
        816  12A          HRGN_UserSize (forwarded to COMBASE.HRGN_UserSize)
        817  12B          HRGN_UserUnmarshal (forwarded to COMBASE.HRGN_UserUnmarshal)
       1127  12C          HWND_UserFree (forwarded to COMBASE.HWND_UserFree)
       1128  12D          HWND_UserFree64 (forwarded to COMBASE.HWND_UserFree64)
        818  12E 000254D0 HWND_UserFree64Ext
        819  12F 000254D0 HWND_UserFreeExt
       1129  130          HWND_UserMarshal (forwarded to COMBASE.HWND_UserMarshal)
       1130  131          HWND_UserMarshal64 (forwarded to COMBASE.HWND_UserMarshal64)
        824  132 000BC470 HWND_UserMarshal64Ext
        825  133 000BC470 HWND_UserMarshalExt
       1131  134          HWND_UserSize (forwarded to COMBASE.HWND_UserSize)
       1132  135          HWND_UserSize64 (forwarded to COMBASE.HWND_UserSize64)
        826  136 000BC480 HWND_UserSize64Ext
        827  137 000BC480 HWND_UserSizeExt
       1133  138          HWND_UserUnmarshal (forwarded to COMBASE.HWND_UserUnmarshal)
       1134  139          HWND_UserUnmarshal64 (forwarded to COMBASE.HWND_UserUnmarshal64)
        828  13A 000BC490 HWND_UserUnmarshal64Ext
        829  13B 000BC490 HWND_UserUnmarshalExt
       1135  13C          HkOleRegisterObject (forwarded to api-ms-win-core-com-private-l1-1-1.HkOleRegisterObject)
       1136  13D          IIDFromString (forwarded to api-ms-win-core-com-l1-1-0.IIDFromString)
       1137  13E 00094E50 IsAccelerator
       1138  13F 0000BF50 IsEqualGUID
       1139  140 000247F0 IsRoInitializeASTAAllowedInDesktop
       1140  141 0002F9F0 IsValidIid
       1141  142 0000D420 IsValidInterface
       1142  143 0002F9F0 IsValidPtrIn
       1143  144 0002F9F0 IsValidPtrOut
       1144  145 0000D7E0 MkParseDisplayName
       1145  146 00041CB0 MonikerCommonPrefixWith
        830  147 000BC4A0 MonikerLoadTypeLib
       1146  148 00041D70 MonikerRelativePathTo
       1147  149          NdrOleInitializeExtension (forwarded to api-ms-win-core-com-private-l1-1-1.NdrOleInitializeExtension)
       1148  14A          NdrProxyForwardingFunction10 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction10)
       1149  14B          NdrProxyForwardingFunction11 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction11)
       1150  14C          NdrProxyForwardingFunction12 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction12)
       1151  14D          NdrProxyForwardingFunction13 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction13)
       1152  14E          NdrProxyForwardingFunction14 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction14)
       1153  14F          NdrProxyForwardingFunction15 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction15)
       1154  150          NdrProxyForwardingFunction16 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction16)
       1155  151          NdrProxyForwardingFunction17 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction17)
       1156  152          NdrProxyForwardingFunction18 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction18)
       1157  153          NdrProxyForwardingFunction19 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction19)
       1158  154          NdrProxyForwardingFunction20 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction20)
       1159  155          NdrProxyForwardingFunction21 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction21)
       1160  156          NdrProxyForwardingFunction22 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction22)
       1161  157          NdrProxyForwardingFunction23 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction23)
       1162  158          NdrProxyForwardingFunction24 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction24)
       1163  159          NdrProxyForwardingFunction25 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction25)
       1164  15A          NdrProxyForwardingFunction26 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction26)
       1165  15B          NdrProxyForwardingFunction27 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction27)
       1166  15C          NdrProxyForwardingFunction28 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction28)
       1167  15D          NdrProxyForwardingFunction29 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction29)
       1168  15E          NdrProxyForwardingFunction3 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction3)
       1169  15F          NdrProxyForwardingFunction30 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction30)
       1170  160          NdrProxyForwardingFunction31 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction31)
       1171  161          NdrProxyForwardingFunction32 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction32)
       1172  162          NdrProxyForwardingFunction4 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction4)
       1173  163          NdrProxyForwardingFunction5 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction5)
       1174  164          NdrProxyForwardingFunction6 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction6)
       1175  165          NdrProxyForwardingFunction7 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction7)
       1176  166          NdrProxyForwardingFunction8 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction8)
       1177  167          NdrProxyForwardingFunction9 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.NdrProxyForwardingFunction9)
       1178  168          ObjectStublessClient10 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient10)
       1179  169          ObjectStublessClient11 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient11)
       1180  16A          ObjectStublessClient12 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient12)
       1181  16B          ObjectStublessClient13 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient13)
       1182  16C          ObjectStublessClient14 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient14)
       1183  16D          ObjectStublessClient15 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient15)
       1184  16E          ObjectStublessClient16 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient16)
       1185  16F          ObjectStublessClient17 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient17)
       1186  170          ObjectStublessClient18 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient18)
       1187  171          ObjectStublessClient19 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient19)
       1188  172          ObjectStublessClient20 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient20)
       1189  173          ObjectStublessClient21 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient21)
       1190  174          ObjectStublessClient22 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient22)
       1191  175          ObjectStublessClient23 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient23)
       1192  176          ObjectStublessClient24 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient24)
       1193  177          ObjectStublessClient25 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient25)
       1194  178          ObjectStublessClient26 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient26)
       1195  179          ObjectStublessClient27 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient27)
       1196  17A          ObjectStublessClient28 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient28)
       1197  17B          ObjectStublessClient29 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient29)
       1198  17C          ObjectStublessClient3 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient3)
       1199  17D          ObjectStublessClient30 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient30)
       1200  17E          ObjectStublessClient31 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient31)
       1201  17F          ObjectStublessClient32 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient32)
       1202  180          ObjectStublessClient4 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient4)
       1203  181          ObjectStublessClient5 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient5)
       1204  182          ObjectStublessClient6 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient6)
       1205  183          ObjectStublessClient7 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient7)
       1206  184          ObjectStublessClient8 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient8)
       1207  185          ObjectStublessClient9 (forwarded to api-ms-win-core-com-midlproxystub-l1-1-0.ObjectStublessClient9)
       1208  186 0000A5D0 Ole32DllGetClassObject
       1209  187 0004AB10 OleBuildVersion
       1210  188 000A4C60 OleConvertIStorageToOLESTREAM
       1211  189 000A4CF0 OleConvertIStorageToOLESTREAMEx
       1212  18A 000A4F00 OleConvertOLESTREAMToIStorage
       1213  18B 000A4FC0 OleConvertOLESTREAMToIStorageEx
       1214  18C 00075940 OleCreate
       1215  18D 00019160 OleCreateDefaultHandler
       1216  18E 00019190 OleCreateEmbeddingHelper
       1217  18F 000759D0 OleCreateEx
       1218  190 00008130 OleCreateFontIndirectExt
       1219  191 00075C20 OleCreateFromData
       1220  192 00075CB0 OleCreateFromDataEx
       1221  193 00075F20 OleCreateFromFile
       1222  194 00075FC0 OleCreateFromFileEx
       1223  195 00076250 OleCreateLink
       1224  196 000762E0 OleCreateLinkEx
       1225  197 00076490 OleCreateLinkFromData
       1226  198 00076520 OleCreateLinkFromDataEx
       1227  199 00076810 OleCreateLinkToFile
       1228  19A 000768A0 OleCreateLinkToFileEx
       1229  19B 00095070 OleCreateMenuDescriptor
       1230  19C 00006C00 OleCreatePictureIndirectExt
       1231  19D 000B6C10 OleCreatePropertyFrameIndirectExt
       1232  19E 0001AD40 OleCreateStaticFromData
       1233  19F 000951D0 OleDestroyMenuDescriptor
       1234  1A0 000192B0 OleDoAutoConvert
       1235  1A1 000770A0 OleDraw
       1236  1A2 0001B200 OleDuplicateData
       1237  1A3 00005FE0 OleFlushClipboard
       1238  1A4 00019A00 OleGetAutoConvert
       1239  1A5 00012460 OleGetClipboard
       1240  1A6 00018140 OleGetIconOfClass
       1241  1A7 000977B0 OleGetIconOfFile
        802  1A8 00087100 OleGetPackageClipboardOwner
       1242  1A9 000B48B0 OleIconToCursorExt
       1243  1AA 0000EE90 OleInitialize
       1244  1AB 000775A0 OleInitializeWOW
       1245  1AC 00006430 OleIsCurrentClipboard
       1246  1AD 00077190 OleIsRunning
       1247  1AE 00018EF0 OleLoad
       1248  1AF 0003DCC0 OleLoadFromStream
       1249  1B0 000B4D10 OleLoadPictureExt
       1250  1B1 000B7020 OleLoadPictureFileExt
       1251  1B2 000B4E50 OleLoadPicturePathExt
       1252  1B3 000143C0 OleLockRunning
       1253  1B4 00018640 OleMetafilePictFromIconAndLabel
       1254  1B5 00077230 OleNoteObjectVisible
       1255  1B6 00076B60 OleQueryCreateFromData
       1256  1B7 00076BB0 OleQueryLinkFromData
       1257  1B8 0001F260 OleRegEnumFormatEtc
       1258  1B9 00099460 OleRegEnumVerbs
       1259  1BA 0000F220 OleRegGetMiscStatus
       1260  1BB 00019890 OleRegGetUserType
       1261  1BC 000139B0 OleReleaseEnumVerbCache
       1262  1BD 00008CE0 OleRun
       1263  1BE 0001FC50 OleSave
       1264  1BF 000B7150 OleSavePictureFileExt
       1265  1C0 00024690 OleSaveToStream
       1266  1C1 00097410 OleSetAutoConvert
       1267  1C2 000802D0 OleSetClipboard
       1268  1C3 0001FDC0 OleSetContainedObject
       1269  1C4 00095220 OleSetMenuDescriptor
       1270  1C5 000953D0 OleTranslateAccelerator
       1271  1C6 000142C0 OleTranslateColorExt
       1272  1C7 0000A4A0 OleUninitialize
       1273  1C8 0001E840 OpenOrCreateStream
       1274  1C9          ProgIDFromCLSID (forwarded to api-ms-win-core-com-l1-1-0.ProgIDFromCLSID)
       1275  1CA 0003D0E0 PropStgNameToFmtId
       1276  1CB 0003D0F0 PropSysAllocString
       1277  1CC 0003D100 PropSysFreeString
       1278  1CD 0003D110 PropVariantChangeType
       1279  1CE 00024B90 PropVariantClear
       1280  1CF 00024BA0 PropVariantCopy
       1281  1D0 000201B0 ReadClassStg
       1282  1D1 00024780 ReadClassStm
       1283  1D2 0001A360 ReadFmtUserTypeStg
       1284  1D3 0001F020 ReadOleStg
        831  1D4 000201B0 ReadStorageProperties
       1285  1D5 0001A590 ReadStringStream
       1286  1D6 000BC610 RegisterActiveObjectExt
       1287  1D7 0000E820 RegisterDragDrop
       1288  1D8 0000D6A0 ReleaseStgMedium
       1289  1D9 000BC6F0 RevokeActiveObjectExt
       1290  1DA 00009710 RevokeDragDrop
       1291  1DB          RoGetAgileReference (forwarded to api-ms-win-core-com-l1-1-1.RoGetAgileReference)
       1292  1DC 0004E840 SNB_UserFree
       1293  1DD 0004E840 SNB_UserFree64
       1294  1DE 0004E8B0 SNB_UserMarshal
       1295  1DF 0004E990 SNB_UserMarshal64
       1296  1E0 0004EA70 SNB_UserSize
       1297  1E1 0004EB00 SNB_UserSize64
       1298  1E2 0004EB80 SNB_UserUnmarshal
       1299  1E3 0004EEF0 SNB_UserUnmarshal64
       1300  1E4 00050710 STGMEDIUM_UserFree
       1301  1E5 00050710 STGMEDIUM_UserFree64
        832  1E6 000BC580 STGMEDIUM_UserFreeExt
       1302  1E7 000507D0 STGMEDIUM_UserMarshal
       1303  1E8 000509B0 STGMEDIUM_UserMarshal64
        833  1E9 000BC590 STGMEDIUM_UserMarshalExt
       1304  1EA 00050BB0 STGMEDIUM_UserSize
       1305  1EB 00050D40 STGMEDIUM_UserSize64
        834  1EC 000BC5A0 STGMEDIUM_UserSizeExt
       1306  1ED 00050EE0 STGMEDIUM_UserUnmarshal
       1307  1EE 00050F60 STGMEDIUM_UserUnmarshal64
        835  1EF 000BC5B0 STGMEDIUM_UserUnmarshalExt
       1308  1F0 00077470 SetConvertStg
       1309  1F1 00077490 SetDocumentBitStg
       1310  1F2          SetErrorInfo (forwarded to api-ms-win-core-com-private-l1-1-1.CoSetErrorInfo)
        836  1F3 00013DC0 SetOleautModule
       1311  1F4 000254D0 SetWOWThunkGlobalPtr
        837  1F5 000ACA10 StdTypesGetClassObject
        838  1F6 000ACA90 StdTypesRegisterServer
       1312  1F7 0003D130 StgConvertPropertyToVariant
       1313  1F8 0003D140 StgConvertVariantToProperty
       1314  1F9 0003D150 StgCreateDocfile
       1315  1FA 00014450 StgCreateDocfileOnILockBytes
       1316  1FB 0003D160 StgCreatePropSetStg
       1317  1FC 0003D170 StgCreatePropStg
       1318  1FD 0003D180 StgCreateStorageEx
       1319  1FE 0003D1D0 StgGetIFillLockBytesOnFile
       1320  1FF 0003D1E0 StgGetIFillLockBytesOnILockBytes
       1321  200 0003D1F0 StgIsStorageFile
       1322  201 0003D200 StgIsStorageILockBytes
       1323  202 0003D210 StgOpenAsyncDocfileOnIFillLockBytes
       1324  203 0003D220 StgOpenPropStg
       1325  204 00013DD0 StgOpenStorage
       1326  205 00020150 StgOpenStorageEx
       1327  206 0003D230 StgOpenStorageOnHandle
       1328  207 00008E10 StgOpenStorageOnILockBytes
       1329  208 0003D240 StgPropertyLengthAsVariant
       1330  209 0003D250 StgSetTimes
       1331  20A          StringFromCLSID (forwarded to api-ms-win-core-com-l1-1-0.StringFromCLSID)
       1332  20B          StringFromGUID2 (forwarded to api-ms-win-core-com-l1-1-0.StringFromGUID2)
       1333  20C          StringFromIID (forwarded to api-ms-win-core-com-l1-1-0.StringFromIID)
       1334  20D          UpdateDCOMSettings (forwarded to api-ms-win-core-com-private-l1-1-1.UpdateDCOMSettings)
       1335  20E          UpdateProcessTracing (forwarded to api-ms-win-core-com-private-l1-1-1.UpdateProcessTracing)
       1336  20F 000A6AA0 UtConvertDvtd16toDvtd32
       1337  210 000A6CF0 UtConvertDvtd32toDvtd16
       1338  211 000A6FE0 UtGetDvtd16Info
       1339  212 000A7130 UtGetDvtd32Info
       1340  213          WdtpInterfacePointer_UserFree (forwarded to COMBASE.WdtpInterfacePointer_UserFree)
       1341  214          WdtpInterfacePointer_UserFree64 (forwarded to COMBASE.WdtpInterfacePointer_UserFree64)
       1342  215          WdtpInterfacePointer_UserMarshal (forwarded to COMBASE.WdtpInterfacePointer_UserMarshal)
       1343  216          WdtpInterfacePointer_UserMarshal64 (forwarded to COMBASE.WdtpInterfacePointer_UserMarshal64)
       1344  217          WdtpInterfacePointer_UserSize (forwarded to COMBASE.WdtpInterfacePointer_UserSize)
       1345  218          WdtpInterfacePointer_UserSize64 (forwarded to COMBASE.WdtpInterfacePointer_UserSize64)
       1346  219          WdtpInterfacePointer_UserUnmarshal (forwarded to COMBASE.WdtpInterfacePointer_UserUnmarshal)
       1347  21A          WdtpInterfacePointer_UserUnmarshal64 (forwarded to COMBASE.WdtpInterfacePointer_UserUnmarshal64)
       1348  21B 0003D260 WriteClassStg
       1349  21C 0003D270 WriteClassStm
       1350  21D 00019D40 WriteFmtUserTypeStg
       1351  21E 0001EDF0 WriteOleStg
        839  21F 000BC5C0 WriteStorageProperties
       1352  220 00019F30 WriteStringStream
        800      00008B70 [NONAME]
        801      00024790 [NONAME]
        803      00024750 [NONAME]
        804      000867A0 [NONAME]
        820      00092C70 [NONAME]
        821      00092D80 [NONAME]
        822      00092C50 [NONAME]
        823      00092E70 [NONAME]

  Summary

        2000 .data
        1000 .didat
        E000 .pdata
       55000 .rdata
        6000 .reloc
       13000 .rsrc
       C1000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\oleaut32.dll

File Type: DLL

  Section contains the following exports for OLEAUT32.dll

    00000000 characteristics
    64A473E2 time date stamp Tue Jul  4 12:32:50 2023
        0.00 version
           2 ordinal base
         499 number of functions
         425 number of names

    ordinal hint RVA      name

        286    0 0001AD60 BSTR_UserFree
        144    1 0001AD50 BSTR_UserFree64
        284    2 00018470 BSTR_UserMarshal
        145    3 00014450 BSTR_UserMarshal64
        283    4 00014110 BSTR_UserSize
        151    5 000144E0 BSTR_UserSize64
        285    6 000179C0 BSTR_UserUnmarshal
        300    7 00016FE0 BSTR_UserUnmarshal64
        414    8 00055710 BstrFromVector
        171    9 000477E0 ClearCustData
         31    A 000583F0 CreateDispTypeInfo
        202    B 00020080 CreateErrorInfo
         32    C 00058850 CreateStdDispatch
        160    D 0002E900 CreateTypeLib
        180    E 0001E980 CreateTypeLib2
        146    F 00006D90 DispCallFunc
         29   10 0001B960 DispGetIDsOfNames
         28   11 00058860 DispGetParam
         30   12 000040A0 DispInvoke
        301   13 0001BD80 DllCanUnloadNow
        302   14 00011C10 DllGetClassObject
        320   15 00058F20 DllRegisterServer
        321   16 00059220 DllUnregisterServer
         14   17 0001EB40 DosDateTimeToVariantTime
         35   18 0001BED0 GetActiveObject
        332   19 00059740 GetAltMonthNames
        200   1A 00020090 GetErrorInfo
        322   1B 0005E670 GetRecordInfoFromGuids
        323   1C 0005E7F0 GetRecordInfoFromTypeInfo
        326   1D 0002F870 GetVarConversionLocaleSetting
        445   1E          HWND_UserFree (forwarded to COMBASE.HWND_UserFree)
        449   1F          HWND_UserFree64 (forwarded to COMBASE.HWND_UserFree64)
        446   20          HWND_UserMarshal (forwarded to COMBASE.HWND_UserMarshal)
        450   21          HWND_UserMarshal64 (forwarded to COMBASE.HWND_UserMarshal64)
        447   22          HWND_UserSize (forwarded to COMBASE.HWND_UserSize)
        451   23          HWND_UserSize64 (forwarded to COMBASE.HWND_UserSize64)
        448   24          HWND_UserUnmarshal (forwarded to COMBASE.HWND_UserUnmarshal)
        452   25          HWND_UserUnmarshal64 (forwarded to COMBASE.HWND_UserUnmarshal64)
        165   26 0001BCC0 LHashValOfNameSys
        166   27 000110A0 LHashValOfNameSysA
        296   28 00015430 LPSAFEARRAY_Marshal
        295   29 00015110 LPSAFEARRAY_Size
        297   2A 00016620 LPSAFEARRAY_Unmarshal
        294   2B 0001AC60 LPSAFEARRAY_UserFree
        324   2C 000554C0 LPSAFEARRAY_UserFree64
        292   2D 00018510 LPSAFEARRAY_UserMarshal
        328   2E 000199A0 LPSAFEARRAY_UserMarshal64
        291   2F 00018520 LPSAFEARRAY_UserSize
        350   30 0001A100 LPSAFEARRAY_UserSize64
        293   31 00018500 LPSAFEARRAY_UserUnmarshal
        351   32 00018CA0 LPSAFEARRAY_UserUnmarshal64
        162   33 00004DC0 LoadRegTypeLib
        161   34 0001BD90 LoadTypeLib
        183   35 000111C0 LoadTypeLibEx
        500   36 00014220 OACleanup
        352   37 0001E980 OACreateTypeLib2
        170   38 00031850 OaBuildVersion
        444   39 0002F8A0 OaEnablePerUserTLibRegistration
        420   3A 0001BF20 OleCreateFontIndirect
        419   3B 00002860 OleCreatePictureIndirect
        417   3C 0005F4A0 OleCreatePropertyFrame
        416   3D 0005F500 OleCreatePropertyFrameIndirect
        415   3E 0005F540 OleIconToCursor
        418   3F 0005F590 OleLoadPicture
        401   40 0005F5C0 OleLoadPictureEx
        422   41 0005F650 OleLoadPictureFile
        402   42 0005F690 OleLoadPictureFileEx
        424   43 0005F710 OleLoadPicturePath
        423   44 0005F790 OleSavePictureFile
        421   45 0001BDA0 OleTranslateColor
        164   46 00030DA0 QueryPathOfRegTypeLib
         33   47 000592E0 RegisterActiveObject
        163   48 00030EA0 RegisterTypeLib
        442   49 00030F50 RegisterTypeLibForUser
         34   4A 00059340 RevokeActiveObject
         23   4B 000183D0 SafeArrayAccessData
        353   4C 0005FA20 SafeArrayAddRef
         37   4D 0000D050 SafeArrayAllocData
         36   4E 00014030 SafeArrayAllocDescriptor
         41   4F 0000D130 SafeArrayAllocDescriptorEx
         27   50 00010D70 SafeArrayCopy
        412   51 00010E70 SafeArrayCopyData
         15   52 0000CF90 SafeArrayCreate
         42   53 0005FAA0 SafeArrayCreateEx
        411   54 0000C850 SafeArrayCreateVector
         43   55 0005FBE0 SafeArrayCreateVectorEx
         16   56 0000CBD0 SafeArrayDestroy
         39   57 0005FEB0 SafeArrayDestroyData
         38   58 0001BBC0 SafeArrayDestroyDescriptor
         17   59 0001AB20 SafeArrayGetDim
         25   5A 0001A4E0 SafeArrayGetElement
         18   5B 0001B500 SafeArrayGetElemsize
         67   5C 0005FD70 SafeArrayGetIID
         20   5D 0001A710 SafeArrayGetLBound
         45   5E 0005FDA0 SafeArrayGetRecordInfo
         19   5F 0001A440 SafeArrayGetUBound
         77   60 0001A6C0 SafeArrayGetVartype
         21   61 00011070 SafeArrayLock
        148   62 0001A620 SafeArrayPtrOfIndex
         26   63 0000D360 SafeArrayPutElement
         40   64 0001B520 SafeArrayRedim
        354   65 0005FE00 SafeArrayReleaseData
        355   66 0005FE10 SafeArrayReleaseDescriptor
         57   67 0001B880 SafeArraySetIID
         44   68 0005FE20 SafeArraySetRecordInfo
         24   69 0001A4B0 SafeArrayUnaccessData
         22   6A 00011040 SafeArrayUnlock
        201   6B 000200A0 SetErrorInfo
        327   6C 0002F8C0 SetOaNoCache
        325   6D 0002F8E0 SetVarConversionLocaleSetting
        356   6E 00060020 SysAddRefString
          2   6F 00009F10 SysAllocString
        150   70 0000BEC0 SysAllocStringByteLen
          4   71 0000C280 SysAllocStringLen
          6   72 0000BF80 SysFreeString
          3   73 00001B00 SysReAllocString
          5   74 000181F0 SysReAllocStringLen
        357   75 00060030 SysReleaseString
        149   76 00014190 SysStringByteLen
          7   77 0001AB00 SysStringLen
        184   78 000050F0 SystemTimeToVariantTime
        186   79 0002F1B0 UnRegisterTypeLib
        443   7A 0002F240 UnRegisterTypeLibForUser
        290   7B 0001AB70 VARIANT_UserFree
        358   7C 0001AB60 VARIANT_UserFree64
        288   7D 00018530 VARIANT_UserMarshal
        359   7E 000195C0 VARIANT_UserMarshal64
        287   7F 00018950 VARIANT_UserSize
        380   80 00019E10 VARIANT_UserSize64
        289   81 00017130 VARIANT_UserUnmarshal
        381   82 00015930 VARIANT_UserUnmarshal64
        168   83 0004E820 VarAbs
        141   84 0004F620 VarAdd
        142   85 00051EA0 VarAnd
        124   86 000559E0 VarBoolFromCy
        123   87 00055A00 VarBoolFromDate
        236   88 00060060 VarBoolFromDec
        126   89 00055A10 VarBoolFromDisp
        233   8A 00055A60 VarBoolFromI1
        119   8B 00055A70 VarBoolFromI2
        120   8C 00055AF0 VarBoolFromI4
        370   8D 00055A90 VarBoolFromI8
        121   8E 00055AB0 VarBoolFromR4
        122   8F 00055AD0 VarBoolFromR8
        125   90 00004930 VarBoolFromStr
        118   91 00055A60 VarBoolFromUI1
        234   92 00055A70 VarBoolFromUI2
        235   93 00055AF0 VarBoolFromUI4
        371   94 00055A90 VarBoolFromUI8
        313   95 0001B280 VarBstrCat
        314   96 0001B330 VarBstrCmp
        116   97 000048C0 VarBstrFromBool
        113   98 00055B00 VarBstrFromCy
        114   99 0001BFC0 VarBstrFromDate
        232   9A 00001400 VarBstrFromDec
        115   9B 00055ED0 VarBstrFromDisp
        229   9C 00055F20 VarBstrFromI1
        109   9D 00055F30 VarBstrFromI2
        110   9E 00055FE0 VarBstrFromI4
        368   9F 00056090 VarBstrFromI8
        111   A0 00056150 VarBstrFromR4
        112   A1 000056B0 VarBstrFromR8
        108   A2 00056280 VarBstrFromUI1
        230   A3 00056290 VarBstrFromUI2
        231   A4 00004B40 VarBstrFromUI4
        369   A5 00004110 VarBstrFromUI8
        318   A6 00050010 VarCat
        176   A7 0001AD90 VarCmp
        306   A8 00052AF0 VarCyAbs
        299   A9 00052B30 VarCyAdd
        311   AA 00052B70 VarCyCmp
        312   AB 00052B90 VarCyCmpR8
        307   AC 00052BF0 VarCyFix
        106   AD 00064430 VarCyFromBool
        103   AE 00064480 VarCyFromDate
        228   AF 00060090 VarCyFromDec
        105   B0 000562A0 VarCyFromDisp
        225   B1 000562F0 VarCyFromI1
         99   B2 00064430 VarCyFromI2
        100   B3 00064450 VarCyFromI4
        366   B4 000646A0 VarCyFromI8
        101   B5 00064470 VarCyFromR4
        102   B6 00064480 VarCyFromR8
        104   B7 00056310 VarCyFromStr
         98   B8 000563A0 VarCyFromUI1
        226   B9 000563C0 VarCyFromUI2
        227   BA 000563E0 VarCyFromUI4
        367   BB 00056400 VarCyFromUI8
        308   BC 00052C30 VarCyInt
        303   BD 00052CA0 VarCyMul
        304   BE 00052E10 VarCyMulI4
        329   BF 000500E0 VarCyMulI8
        309   C0 00052E90 VarCyNeg
        310   C1 0004EA80 VarCyRound
        305   C2 00052EC0 VarCySub
         96   C3 00056FD0 VarDateFromBool
         93   C4 00056420 VarDateFromCy
        224   C5 000603C0 VarDateFromDec
         95   C6 00056460 VarDateFromDisp
        221   C7 000564C0 VarDateFromI1
         89   C8 00056FD0 VarDateFromI2
         90   C9 00056500 VarDateFromI4
        364   CA 00056540 VarDateFromI8
         91   CB 00056580 VarDateFromR4
         92   CC 000565B0 VarDateFromR8
         94   CD 00063B90 VarDateFromStr
         88   CE 00057050 VarDateFromUI1
        222   CF 000565E0 VarDateFromUI2
        223   D0 00056620 VarDateFromUI4
        365   D1 00056660 VarDateFromUI8
        330   D2 00006160 VarDateFromUdate
        319   D3 00006180 VarDateFromUdateEx
        182   D4 00053490 VarDecAbs
        177   D5 000534C0 VarDecAdd
        204   D6 000022C0 VarDecCmp
        298   D7 00052A30 VarDecCmpR8
        178   D8 000534D0 VarDecDiv
        187   D9 00053B10 VarDecFix
        199   DA 00060420 VarDecFromBool
        196   DB 00060450 VarDecFromCy
        195   DC 00060480 VarDecFromDate
        198   DD 00060490 VarDecFromDisp
        241   DE 000604F0 VarDecFromI1
        191   DF 00060520 VarDecFromI2
        192   E0 00002830 VarDecFromI4
        374   E1 00060560 VarDecFromI8
        193   E2 00001970 VarDecFromR4
        194   E3 00001620 VarDecFromR8
        197   E4 000605B0 VarDecFromStr
        190   E5 00060640 VarDecFromUI1
        242   E6 00060660 VarDecFromUI2
        243   E7 00060680 VarDecFromUI4
        375   E8 000606A0 VarDecFromUI8
        188   E9 00053B30 VarDecInt
        179   EA 00053B70 VarDecMul
        189   EB 00053DE0 VarDecNeg
        203   EC 000017A0 VarDecRound
        181   ED 00053E10 VarDecSub
        143   EE 00050150 VarDiv
        152   EF 00052030 VarEqv
        169   F0 0004EB00 VarFix
         87   F1 00065C50 VarFormat
        127   F2 00065D40 VarFormatCurrency
         97   F3 00065E60 VarFormatDateTime
        139   F4 00065EE0 VarFormatFromTokens
        107   F5 00067F50 VarFormatNumber
        117   F6 00068060 VarFormatPercent
        253   F7 000566A0 VarI1FromBool
        250   F8 000566B0 VarI1FromCy
        249   F9 000566E0 VarI1FromDate
        256   FA 000606C0 VarI1FromDec
        252   FB 000566F0 VarI1FromDisp
        245   FC 00056740 VarI1FromI2
        246   FD 00056770 VarI1FromI4
        376   FE 00056790 VarI1FromI8
        247   FF 000567B0 VarI1FromR4
        248  100 000567C0 VarI1FromR8
        251  101 00056800 VarI1FromStr
        244  102 00056830 VarI1FromUI1
        254  103 00056850 VarI1FromUI2
        255  104 00056870 VarI1FromUI4
        377  105 00056890 VarI1FromUI8
         56  106 00057250 VarI2FromBool
         52  107 00064580 VarI2FromCy
         53  108 000568B0 VarI2FromDate
        208  109 00060740 VarI2FromDec
         55  10A 000568C0 VarI2FromDisp
        205  10B 00056910 VarI2FromI1
         49  10C 00056920 VarI2FromI4
        346  10D 00056940 VarI2FromI8
         50  10E 00056970 VarI2FromR4
         51  10F 00056980 VarI2FromR8
         54  110 0001EA10 VarI2FromStr
         48  111 000573A0 VarI2FromUI1
        206  112 000569C0 VarI2FromUI2
        207  113 000569E0 VarI2FromUI4
        347  114 00056A00 VarI2FromUI8
         66  115 00056A20 VarI4FromBool
         62  116 000645D0 VarI4FromCy
         63  117 00056A30 VarI4FromDate
        212  118 000607C0 VarI4FromDec
         65  119 00056A40 VarI4FromDisp
        209  11A 00056A90 VarI4FromI1
         59  11B 00056A20 VarI4FromI2
        348  11C 00056AA0 VarI4FromI8
         60  11D 00056AD0 VarI4FromR4
         61  11E 000018F0 VarI4FromR8
         64  11F 000055D0 VarI4FromStr
         58  120 000574F0 VarI4FromUI1
        210  121 00056AE0 VarI4FromUI2
        211  122 00056B00 VarI4FromUI4
        349  123 00056B20 VarI4FromUI8
        341  124 00056B40 VarI8FromBool
        337  125 000646E0 VarI8FromCy
        338  126 00056B50 VarI8FromDate
        345  127 00060840 VarI8FromDec
        340  128 00056B60 VarI8FromDisp
        342  129 00056BB0 VarI8FromI1
        334  12A 00056B40 VarI8FromI2
        335  12B 00056BC0 VarI8FromR4
        336  12C 00056BD0 VarI8FromR8
        339  12D 00056C10 VarI8FromStr
        333  12E 00057650 VarI8FromUI1
        343  12F 00056D70 VarI8FromUI2
        344  130 00056D80 VarI8FromUI4
        427  131 00056D90 VarI8FromUI8
        153  132 00052060 VarIdiv
        154  133 00052220 VarImp
        172  134 0004ECF0 VarInt
        155  135 00052310 VarMod
        129  136 00068150 VarMonthName
        156  137 000507E0 VarMul
        173  138 0004EEC0 VarNeg
        174  139 00052490 VarNot
         47  13A 000067C0 VarNumFromParseNum
        157  13B 00052530 VarOr
         46  13C 00005990 VarParseNumFromStr
        158  13D 000510C0 VarPow
        316  13E 00052AA0 VarR4CmpR8
         76  13F 00056E50 VarR4FromBool
         72  140 00064650 VarR4FromCy
         73  141 00056DC0 VarR4FromDate
        216  142 000608E0 VarR4FromDec
         75  143 00056DD0 VarR4FromDisp
        213  144 00056E30 VarR4FromI1
         69  145 00056E50 VarR4FromI2
         70  146 00056E70 VarR4FromI4
        360  147 00056E90 VarR4FromI8
         71  148 000028C0 VarR4FromR8
         74  149 00002100 VarR4FromStr
         68  14A 00056EB0 VarR4FromUI1
        214  14B 00056ED0 VarR4FromUI2
        215  14C 00056EF0 VarR4FromUI4
        361  14D 00056F10 VarR4FromUI8
         86  14E 00056FD0 VarR8FromBool
         82  14F 00064680 VarR8FromCy
         83  150 00056F40 VarR8FromDate
        220  151 00060930 VarR8FromDec
         85  152 00056F50 VarR8FromDisp
        217  153 00056FB0 VarR8FromI1
         79  154 00056FD0 VarR8FromI2
         80  155 00056FF0 VarR8FromI4
        362  156 00057010 VarR8FromI8
         81  157 00057030 VarR8FromR4
         84  158 00005540 VarR8FromStr
         78  159 00057050 VarR8FromUI1
        218  15A 00057070 VarR8FromUI2
        219  15B 00057090 VarR8FromUI4
        363  15C 000570B0 VarR8FromUI8
        315  15D 00051230 VarR8Pow
        317  15E 0004F160 VarR8Round
        175  15F 0004F250 VarRound
        159  160 000512F0 VarSub
        140  161 00068220 VarTokenizeFormatString
        138  162 000566A0 VarUI1FromBool
        134  163 000570E0 VarUI1FromCy
        135  164 00057110 VarUI1FromDate
        240  165 000609C0 VarUI1FromDec
        137  166 00057120 VarUI1FromDisp
        237  167 00057170 VarUI1FromI1
        130  168 00057190 VarUI1FromI2
        131  169 00001E90 VarUI1FromI4
        372  16A 00057230 VarUI1FromI8
        132  16B 000571B0 VarUI1FromR4
        133  16C 000571C0 VarUI1FromR8
        136  16D 00057200 VarUI1FromStr
        238  16E 00057190 VarUI1FromUI2
        239  16F 00001E90 VarUI1FromUI4
        373  170 00057230 VarUI1FromUI8
        266  171 00057250 VarUI2FromBool
        263  172 00057260 VarUI2FromCy
        262  173 00057290 VarUI2FromDate
        269  174 00060A40 VarUI2FromDec
        265  175 000572A0 VarUI2FromDisp
        267  176 000572F0 VarUI2FromI1
        258  177 00057310 VarUI2FromI2
        259  178 00005520 VarUI2FromI4
        378  179 00057330 VarUI2FromI8
        260  17A 00057350 VarUI2FromR4
        261  17B 00057360 VarUI2FromR8
        264  17C 000054F0 VarUI2FromStr
        257  17D 000573A0 VarUI2FromUI1
        268  17E 00005520 VarUI2FromUI4
        379  17F 00057330 VarUI2FromUI8
        279  180 00056A20 VarUI4FromBool
        276  181 000573B0 VarUI4FromCy
        275  182 000573E0 VarUI4FromDate
        282  183 000027D0 VarUI4FromDec
        278  184 000573F0 VarUI4FromDisp
        280  185 00057440 VarUI4FromI1
        271  186 00057460 VarUI4FromI2
        272  187 00057480 VarUI4FromI4
        425  188 00001E70 VarUI4FromI8
        273  189 000574A0 VarUI4FromR4
        274  18A 000574B0 VarUI4FromR8
        277  18B 00004FA0 VarUI4FromStr
        270  18C 000574F0 VarUI4FromUI1
        281  18D 00057500 VarUI4FromUI2
        426  18E 00001E70 VarUI4FromUI8
        437  18F 00056B40 VarUI8FromBool
        433  190 00057510 VarUI8FromCy
        434  191 00057540 VarUI8FromDate
        441  192 00060AC0 VarUI8FromDec
        436  193 00057550 VarUI8FromDisp
        438  194 000575A0 VarUI8FromI1
        430  195 000575C0 VarUI8FromI2
        428  196 000575E0 VarUI8FromI8
        431  197 00057600 VarUI8FromR4
        432  198 00057610 VarUI8FromR8
        435  199 00004280 VarUI8FromStr
        429  19A 00057650 VarUI8FromUI1
        439  19B 00056D70 VarUI8FromUI2
        440  19C 00056D80 VarUI8FromUI4
        331  19D 00006470 VarUdateFromDate
        128  19E 000684A0 VarWeekdayName
        167  19F 000526D0 VarXor
         12  1A0 00006CA0 VariantChangeType
        147  1A1 00009FF0 VariantChangeTypeEx
          9  1A2 0008C680 VariantClear
         10  1A3 0008C810 VariantCopy
         11  1A4 0008C6D0 VariantCopyInd
          8  1A5 0008C660 VariantInit
         13  1A6 00059230 VariantTimeToDosDateTime
        185  1A7 00005030 VariantTimeToSystemTime
        413  1A8 00002240 VectorFromBstr

  Summary

        3000 .data
        1000 .didat
        9000 .pdata
       24000 .rdata
        3000 .reloc
        1000 .rsrc
       8C000 .text
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file rpcrt4.dll

File Type: DLL

  Section contains the following exports for RPCRT4.dll

    00000000 characteristics
    559F3035 time date stamp Thu Jul  9 19:38:45 2015
        0.00 version
        1000 ordinal base
         548 number of functions
         547 number of names

    ordinal hint RVA      name

       1022    0 0006DCD0 CStdStubBuffer_AddRef
       1023    1 000CB200 CStdStubBuffer_Connect
       1024    2 000CB250 CStdStubBuffer_CountRefs
       1025    3 000CB290 CStdStubBuffer_DebugServerQueryInterface
       1026    4 000CB2E0 CStdStubBuffer_DebugServerRelease
       1027    5 0006F740 CStdStubBuffer_Disconnect
       1028    6 0006D120 CStdStubBuffer_Invoke
       1029    7 000CB330 CStdStubBuffer_IsIIDSupported
       1030    8 00072040 CStdStubBuffer_QueryInterface
       1031    9 00070650 CreateProxyFromTypeInfo
       1032    A 000701C0 CreateStubFromTypeInfo
       1033    B 000B1260 DceErrorInqTextA
       1034    C 000B12E0 DceErrorInqTextW
       1035    D 000CB380 DllGetClassObject
       1036    E 000CB400 DllRegisterServer
       1037    F 0006C6F0 IUnknown_AddRef_Proxy
       1038   10 0006B3A0 IUnknown_QueryInterface_Proxy
       1039   11 0006C730 IUnknown_Release_Proxy
       1040   12 000450D0 I_RpcAllocate
       1041   13 000691D0 I_RpcAsyncAbortCall
       1042   14 00053E00 I_RpcAsyncSetHandle
       1043   15 00053DB0 I_RpcBCacheAllocate
       1044   16 000AF7A0 I_RpcBCacheFree
       1045   17 0001D090 I_RpcBindingCopy
       1046   18 00004160 I_RpcBindingCreateNP
       1047   19 000B76B0 I_RpcBindingHandleToAsyncHandle
       1048   1A 0006C610 I_RpcBindingInqClientTokenAttributes
       1001   1B 0006B170 I_RpcBindingInqCurrentModifiedId
       1049   1C          I_RpcBindingInqDynamicEndpoint (forwarded to RPCRT4.I_RpcBindingInqDynamicEndpointW)
       1050   1D 0007A690 I_RpcBindingInqDynamicEndpointA
       1051   1E 00065BB0 I_RpcBindingInqDynamicEndpointW
       1052   1F 0001B6E0 I_RpcBindingInqLocalClientPID
       1053   20 000B7720 I_RpcBindingInqMarshalledTargetInfo
       1054   21 00074990 I_RpcBindingInqSecurityContext
       1055   22 000B15B0 I_RpcBindingInqSecurityContextKeyInfo
       1056   23 00066C60 I_RpcBindingInqTransportType
       1057   24 000B77A0 I_RpcBindingInqWireIdForSnego
       1058   25 0001BD70 I_RpcBindingIsClientLocal
       1059   26 000AFC80 I_RpcBindingIsServerLocal
       1060   27 00074750 I_RpcBindingSetPrivateOption
       1061   28 000B78E0 I_RpcBindingToStaticStringBindingW
       1062   29 000B10E0 I_RpcCertProcessAndProvision
       1063   2A 0006EDC0 I_RpcClearMutex
       1064   2B 000AF820 I_RpcCompleteAndFree
       1065   2C 000B7A90 I_RpcDeleteMutex
       1066   2D 000B0FE0 I_RpcEnableWmiTrace
       1067   2E 0006F6F0 I_RpcExceptionFilter
       1068   2F 000B9B00 I_RpcFilterDCOMActivation
       1002   30 000AF6B0 I_RpcFixTransferSyntax
       1069   31 00061C70 I_RpcFree
       1070   32 0002F080 I_RpcFreeBuffer
       1071   33 000B9C00 I_RpcFreePipeBuffer
       1003   34 000AFA50 I_RpcFwThisIsTheManager
       1072   35 0006DB20 I_RpcGetBuffer
       1073   36 0002EE30 I_RpcGetBufferWithObject
       1074   37 000759B0 I_RpcGetCurrentCallHandle
       1075   38 000AFD00 I_RpcGetDefaultSD
       1076   39 000BA040 I_RpcGetExtendedError
       1077   3A 00076780 I_RpcGetPortAllocationData
       1078   3B 00065C30 I_RpcIfInqTransferSyntaxes
       1004   3C 00076550 I_RpcInitFwImports
       1005   3D 00004AD0 I_RpcInitHttpImports
       1006   3E 00076A00 I_RpcInitImports
       1007   3F 00073930 I_RpcInitNdrImports
       1079   40 0000B320 I_RpcLogEvent
       1080   41 00069190 I_RpcMapWin32Status
       1081   42 000B1650 I_RpcMarshalBindingHandleAndInterfaceForNDF
       1082   43 000AFD40 I_RpcMgmtEnableDedicatedThreadPool
       1008   44 00074040 I_RpcMgmtQueryDedicatedThreadPool
       1083   45 000C7F30 I_RpcNDRCGetWireRepresentation
       1084   46 000C8290 I_RpcNDRSContextEmergencyCleanup
       1085   47 000442C0 I_RpcNegotiateTransferSyntax
       1086   48          I_RpcNsBindingSetEntryName (forwarded to RPCRT4.I_RpcNsBindingSetEntryNameW)
       1087   49 0007A690 I_RpcNsBindingSetEntryNameA
       1088   4A 000B16E0 I_RpcNsBindingSetEntryNameW
       1089   4B 000B16E0 I_RpcNsInterfaceExported
       1090   4C 000B16E0 I_RpcNsInterfaceUnexported
       1091   4D 0001B4B0 I_RpcOpenClientProcess
       1009   4E 000ADBA0 I_RpcOpenClientThread
       1092   4F 00061E10 I_RpcParseSecurity
       1093   50 000AF940 I_RpcPauseExecution
       1094   51 000B9C50 I_RpcReallocPipeBuffer
       1095   52 00019710 I_RpcReceive
       1096   53 000BD050 I_RpcRecordCalloutFailure
       1097   54 0006E7A0 I_RpcRequestMutex
       1098   55 00076380 I_RpcSNCHOption
       1099   56 00045570 I_RpcSend
       1100   57 0006B1D0 I_RpcSendReceive
       1101   58 00066D20 I_RpcServerAllocateIpPort
       1102   59 00077840 I_RpcServerCheckClientRestriction
       1103   5A 00076AA0 I_RpcServerDisableExceptionFilter
       1104   5B 0001C350 I_RpcServerGetAssociationID
       1105   5C 000AFD70 I_RpcServerInqAddressChangeFn
       1106   5D 0001BC90 I_RpcServerInqLocalConnAddress
       1107   5E 0001BE30 I_RpcServerInqRemoteConnAddress
       1108   5F 000B9CC0 I_RpcServerInqTransportType
       1109   60 000AFD80 I_RpcServerIsClientDisconnected
       1110   61 00076A60 I_RpcServerRegisterForwardFunction
       1111   62 00076AC0 I_RpcServerSetAddressChangeFn
       1112   63 000AFE10 I_RpcServerStartService
       1113   64 000728F0 I_RpcServerSubscribeForDisconnectNotification
       1010   65 000AFBC0 I_RpcServerTurnOnOffKeepalives
       1114   66 00067360 I_RpcServerUseProtseq2A
       1115   67 000675C0 I_RpcServerUseProtseq2W
       1116   68 00005200 I_RpcServerUseProtseqEp2A
       1117   69 000671D0 I_RpcServerUseProtseqEp2W
       1118   6A 000AFED0 I_RpcSessionStrictContextHandle
       1119   6B 00075820 I_RpcSetDCOMAppId
       1120   6C 000C82B0 I_RpcSsDontSerializeContext
       1121   6D 00076830 I_RpcSystemFunction001
       1122   6E 000B7810 I_RpcTransConnectionAllocatePacket
       1123   6F 000AA900 I_RpcTransConnectionFreePacket
       1124   70 00008B40 I_RpcTransConnectionReallocPacket
       1125   71 0007A690 I_RpcTransDatagramAllocate
       1126   72 0007A690 I_RpcTransDatagramAllocate2
       1127   73 0007A690 I_RpcTransDatagramFree
       1128   74 000BA080 I_RpcTransGetThreadEvent
       1129   75 0000CDA0 I_RpcTransGetThreadEventThreadOptional
       1130   76 000B7880 I_RpcTransIoCancelled
       1131   77 0000B130 I_RpcTransServerNewConnection
       1132   78 000B1730 I_RpcTurnOnEEInfoPropagation
       1011   79 000B0CD0 I_RpcVerifierCorruptionExpected
       1133   7A 000BE110 I_UuidCreate
       1134   7B 00069530 MesBufferHandleReset
       1135   7C 00069710 MesDecodeBufferHandleCreate
       1136   7D 000692E0 MesDecodeIncrementalHandleCreate
       1137   7E 000694A0 MesEncodeDynBufferHandleCreate
       1138   7F 000698D0 MesEncodeFixedBufferHandleCreate
       1139   80 00069240 MesEncodeIncrementalHandleCreate
       1140   81 0006B100 MesHandleFree
       1141   82 00069380 MesIncrementalHandleReset
       1142   83 000CC170 MesInqProcEncodingId
       1143   84 00068E70 NDRCContextBinding
       1144   85 00052610 NDRCContextMarshall
       1145   86 000C7F50 NDRCContextUnmarshall
       1146   87 000C82D0 NDRSContextMarshall
       1147   88 00052680 NDRSContextMarshall2
       1148   89 000C8320 NDRSContextMarshallEx
       1149   8A 000C8340 NDRSContextUnmarshall
       1150   8B 00067FD0 NDRSContextUnmarshall2
       1151   8C 000C8380 NDRSContextUnmarshallEx
       1152   8D 000DF420 Ndr64AsyncClientCall
       1153   8E 000E3480 Ndr64AsyncServerCall64
       1154   8F 000E0A00 Ndr64AsyncServerCallAll
       1155   90 000CB450 Ndr64DcomAsyncClientCall
       1156   91 000CB4D0 Ndr64DcomAsyncStubCall
       1157   92 000CD170 NdrAllocate
       1158   93 00002800 NdrAsyncClientCall
       1159   94 00002260 NdrAsyncServerCall
       1160   95 00072B70 NdrByteCountPointerBufferSize
       1161   96 00072D50 NdrByteCountPointerFree
       1162   97 00072990 NdrByteCountPointerMarshall
       1163   98 00070F50 NdrByteCountPointerUnmarshall
       1164   99 0006FCA0 NdrCStdStubBuffer2_Release
       1165   9A 0006D4F0 NdrCStdStubBuffer_Release
       1166   9B 00002CD0 NdrClearOutParameters
       1167   9C 00002B70 NdrClientCall2
       1168   9D 000E1240 NdrClientCall3
       1169   9E 000C8C20 NdrClientContextMarshall
       1170   9F 000CA5D0 NdrClientContextUnmarshall
       1171   A0 000CD180 NdrClientInitialize
       1172   A1 00068FB0 NdrClientInitializeNew
       1173   A2 0003A4C0 NdrComplexArrayBufferSize
       1174   A3 0003E230 NdrComplexArrayFree
       1175   A4 000381A0 NdrComplexArrayMarshall
       1176   A5 0006D980 NdrComplexArrayMemorySize
       1177   A6 0003B2D0 NdrComplexArrayUnmarshall
       1178   A7 00039D70 NdrComplexStructBufferSize
       1179   A8 0003E6B0 NdrComplexStructFree
       1180   A9 00032DA0 NdrComplexStructMarshall
       1181   AA 0003D420 NdrComplexStructMemorySize
       1182   AB 00038DE0 NdrComplexStructUnmarshall
       1183   AC 0003CE10 NdrConformantArrayBufferSize
       1184   AD 00043FB0 NdrConformantArrayFree
       1185   AE 0003CEA0 NdrConformantArrayMarshall
       1186   AF 0006FFE0 NdrConformantArrayMemorySize
       1187   B0 0003CF90 NdrConformantArrayUnmarshall
       1188   B1 0006D3C0 NdrConformantStringBufferSize
       1189   B2 00040390 NdrConformantStringMarshall
       1190   B3 000439E0 NdrConformantStringMemorySize
       1191   B4 0003FCE0 NdrConformantStringUnmarshall
       1192   B5 00041390 NdrConformantStructBufferSize
       1193   B6 000C87F0 NdrConformantStructFree
       1194   B7 000401D0 NdrConformantStructMarshall
       1195   B8 00070E20 NdrConformantStructMemorySize
       1196   B9 0003F290 NdrConformantStructUnmarshall
       1197   BA 0006C380 NdrConformantVaryingArrayBufferSize
       1198   BB 000726A0 NdrConformantVaryingArrayFree
       1199   BC 0006C230 NdrConformantVaryingArrayMarshall
       1200   BD 0006F780 NdrConformantVaryingArrayMemorySize
       1201   BE 00044000 NdrConformantVaryingArrayUnmarshall
       1202   BF 000C9620 NdrConformantVaryingStructBufferSize
       1203   C0 000C8860 NdrConformantVaryingStructFree
       1204   C1 000C8C70 NdrConformantVaryingStructMarshall
       1205   C2 000CDDB0 NdrConformantVaryingStructMemorySize
       1206   C3 000CA630 NdrConformantVaryingStructUnmarshall
       1207   C4 000679D0 NdrContextHandleInitialize
       1208   C5 000C9720 NdrContextHandleSize
       1209   C6 000D0570 NdrConvert
       1210   C7 000D0680 NdrConvert2
       1211   C8 000723E0 NdrCorrelationFree
       1212   C9 0006FC60 NdrCorrelationInitialize
       1213   CA 000D0920 NdrCorrelationPass
       1214   CB 000CB560 NdrCreateServerInterfaceFromStub
       1215   CC 000CB5C0 NdrDcomAsyncClientCall
       1216   CD 000CB650 NdrDcomAsyncStubCall
       1217   CE 0006B4F0 NdrDllCanUnloadNow
       1218   CF 0006B550 NdrDllGetClassObject
       1219   D0 000CB6E0 NdrDllRegisterProxy
       1220   D1 000CB760 NdrDllUnregisterProxy
       1221   D2 000C9760 NdrEncapsulatedUnionBufferSize
       1222   D3 000C8900 NdrEncapsulatedUnionFree
       1223   D4 000C8DC0 NdrEncapsulatedUnionMarshall
       1224   D5 000CDF70 NdrEncapsulatedUnionMemorySize
       1225   D6 000CAC30 NdrEncapsulatedUnionUnmarshall
       1226   D7 0006EF60 NdrFixedArrayBufferSize
       1227   D8 00073700 NdrFixedArrayFree
       1228   D9 0006E920 NdrFixedArrayMarshall
       1229   DA 0006EEC0 NdrFixedArrayMemorySize
       1230   DB 0006EDD0 NdrFixedArrayUnmarshall
       1231   DC 000443F0 NdrFreeBuffer
       1012   DD 00045F50 NdrFullPointerFree
       1013   DE 00044B00 NdrFullPointerInsertRefId
       1014   DF 000448C0 NdrFullPointerQueryPointer
       1015   E0 00044BB0 NdrFullPointerQueryRefId
       1232   E1 00071CC0 NdrFullPointerXlatFree
       1233   E2 00044CB0 NdrFullPointerXlatInit
       1234   E3 000CB7E0 NdrGetBaseInterfaceFromStub
       1235   E4 00068D40 NdrGetBuffer
       1236   E5 000CB860 NdrGetDcomProtocolVersion
       1237   E6 000D0990 NdrGetSimpleTypeBufferAlignment
       1238   E7 000D09B0 NdrGetSimpleTypeBufferSize
       1239   E8 00068B90 NdrGetSimpleTypeMemorySize
       1240   E9 000723C0 NdrGetTypeFlags
       1241   EA 0006B030 NdrGetUserMarshalInfo
       1242   EB 000C97F0 NdrInterfacePointerBufferSize
       1243   EC 000C8980 NdrInterfacePointerFree
       1244   ED 000C8E50 NdrInterfacePointerMarshall
       1245   EE 00079730 NdrInterfacePointerMemorySize
       1246   EF 000794A0 NdrInterfacePointerUnmarshall
       1247   F0 00072ED0 NdrMapCommAndFaultStatus
       1248   F1 000CC2D0 NdrMesProcEncodeDecode
       1249   F2 000CC670 NdrMesProcEncodeDecode2
       1250   F3 00004610 NdrMesProcEncodeDecode3
       1251   F4 000CC920 NdrMesSimpleTypeAlignSize
       1252   F5 000D6AA0 NdrMesSimpleTypeAlignSizeAll
       1253   F6 000CC970 NdrMesSimpleTypeDecode
       1254   F7 000D6B50 NdrMesSimpleTypeDecodeAll
       1255   F8 000CCA60 NdrMesSimpleTypeEncode
       1256   F9 000D6CC0 NdrMesSimpleTypeEncodeAll
       1257   FA 00042280 NdrMesTypeAlignSize
       1258   FB 00042F10 NdrMesTypeAlignSize2
       1259   FC 00071CD0 NdrMesTypeAlignSize3
       1260   FD 000CCB40 NdrMesTypeDecode
       1261   FE 00042890 NdrMesTypeDecode2
       1262   FF 00042530 NdrMesTypeDecode3
       1263  100 000CCC80 NdrMesTypeEncode
       1264  101 000431B0 NdrMesTypeEncode2
       1265  102 000423A0 NdrMesTypeEncode3
       1266  103 0006FA40 NdrMesTypeFree2
       1267  104 0006F930 NdrMesTypeFree3
       1268  105 00077050 NdrNonConformantStringBufferSize
       1269  106 00076F80 NdrNonConformantStringMarshall
       1270  107 000CDFB0 NdrNonConformantStringMemorySize
       1271  108 00076E30 NdrNonConformantStringUnmarshall
       1272  109 0003DCB0 NdrNonEncapsulatedUnionBufferSize
       1273  10A 00043C90 NdrNonEncapsulatedUnionFree
       1274  10B 00041720 NdrNonEncapsulatedUnionMarshall
       1275  10C 0003EDA0 NdrNonEncapsulatedUnionMemorySize
       1276  10D 0003F520 NdrNonEncapsulatedUnionUnmarshall
       1277  10E 000D0E10 NdrNsGetBuffer
       1278  10F 000D0E10 NdrNsSendReceive
       1279  110 0006AED0 NdrOleAllocate
       1280  111 0006D240 NdrOleFree
       1281  112 000D09D0 NdrOutInit
       1282  113 000C9870 NdrPartialIgnoreClientBufferSize
       1283  114 000C8EE0 NdrPartialIgnoreClientMarshall
       1284  115 000D0B50 NdrPartialIgnoreServerInitialize
       1285  116 000CAD20 NdrPartialIgnoreServerUnmarshall
       1286  117 0003E090 NdrPointerBufferSize
       1287  118 00043E10 NdrPointerFree
       1288  119 00041480 NdrPointerMarshall
       1289  11A 000CE0E0 NdrPointerMemorySize
       1290  11B 00037AE0 NdrPointerUnmarshall
       1291  11C 00070A50 NdrProxyErrorHandler
       1292  11D 000CB8C0 NdrProxyFreeBuffer
       1293  11E 000CB910 NdrProxyGetBuffer
       1294  11F 000CB960 NdrProxyInitialize
       1295  120 000CB9F0 NdrProxySendReceive
       1296  121 0006A8A0 NdrRangeUnmarshall
       1297  122 000D1460 NdrRpcSmClientAllocate
       1298  123 000D14D0 NdrRpcSmClientFree
       1299  124 000D1540 NdrRpcSmSetClientToOsf
       1300  125 000D1560 NdrRpcSsDefaultAllocate
       1301  126 000D1570 NdrRpcSsDefaultFree
       1302  127 000D1580 NdrRpcSsDisableAllocate
       1303  128 000D15C0 NdrRpcSsEnableAllocate
       1304  129 000CD260 NdrSendReceive
       1305  12A 0006D700 NdrServerCall2
       1306  12B 00016570 NdrServerCallAll
       1307  12C 000D6E30 NdrServerCallNdr64
       1308  12D 000C8F10 NdrServerContextMarshall
       1309  12E 0006EBA0 NdrServerContextNewMarshall
       1310  12F 000CAD50 NdrServerContextNewUnmarshall
       1311  130 000CAEA0 NdrServerContextUnmarshall
       1312  131 000634A0 NdrServerInitialize
       1313  132 00078850 NdrServerInitializeMarshall
       1314  133 000CD2E0 NdrServerInitializeNew
       1315  134 000CD390 NdrServerInitializePartial
       1316  135 000CD400 NdrServerInitializeUnmarshall
       1317  136 0006A820 NdrSimpleStructBufferSize
       1318  137 000C89C0 NdrSimpleStructFree
       1319  138 00043920 NdrSimpleStructMarshall
       1320  139 0003DC20 NdrSimpleStructMemorySize
       1321  13A 0003B1B0 NdrSimpleStructUnmarshall
       1322  13B 000C8F60 NdrSimpleTypeMarshall
       1323  13C 000405A0 NdrSimpleTypeUnmarshall
       1324  13D 000344C0 NdrStubCall2
       1325  13E 0006A200 NdrStubCall3
       1326  13F 000738C0 NdrStubForwardingFunction
       1327  140 000CBA40 NdrStubGetBuffer
       1328  141 000CBAA0 NdrStubInitialize
       1329  142 000CBB30 NdrStubInitializeMarshall
       1330  143 000EC910 NdrTypeFlags
       1331  144 000733C0 NdrTypeFree
       1332  145 00073390 NdrTypeMarshall
       1333  146 00073320 NdrTypeSize
       1334  147 000733F0 NdrTypeUnmarshall
       1335  148 000D1A50 NdrUnmarshallBasetypeInline
       1336  149 0003E500 NdrUserMarshalBufferSize
       1337  14A 0006D180 NdrUserMarshalFree
       1338  14B 000408F0 NdrUserMarshalMarshall
       1339  14C 0006E870 NdrUserMarshalMemorySize
       1340  14D 000D0750 NdrUserMarshalSimpleTypeConvert
       1341  14E 0006AA30 NdrUserMarshalUnmarshall
       1342  14F 0006C170 NdrVaryingArrayBufferSize
       1343  150 00074AA0 NdrVaryingArrayFree
       1344  151 0006C060 NdrVaryingArrayMarshall
       1345  152 00073730 NdrVaryingArrayMemorySize
       1346  153 00073100 NdrVaryingArrayUnmarshall
       1347  154 000C9890 NdrXmitOrRepAsBufferSize
       1348  155 000C89E0 NdrXmitOrRepAsFree
       1349  156 000C8FC0 NdrXmitOrRepAsMarshall
       1350  157 000CE130 NdrXmitOrRepAsMemorySize
       1351  158 000CAF10 NdrXmitOrRepAsUnmarshall
       1016  159 000011D0 NdrpClientCall2
       1352  15A 000CBBB0 NdrpCreateProxy
       1353  15B 000CBC40 NdrpCreateStub
       1354  15C 00074F50 NdrpGetProcFormatString
       1355  15D 00075AD0 NdrpGetTypeFormatString
       1356  15E 00076300 NdrpGetTypeGenCookie
       1357  15F 0003AE10 NdrpMemoryIncrement
       1358  160 00076950 NdrpReleaseTypeFormatString
       1359  161 000762B0 NdrpReleaseTypeGenCookie
       1360  162 00074BE0 NdrpVarVtOfTypeDesc
       1361  163 000020F0 RpcAsyncAbortCall
       1362  164 00075250 RpcAsyncCancelCall
       1363  165 00001C20 RpcAsyncCompleteCall
       1364  166 00019FE0 RpcAsyncGetCallStatus
       1365  167 00002080 RpcAsyncInitializeHandle
       1366  168 0007A8E0 RpcAsyncRegisterInfo
       1367  169 00065080 RpcBindingBind
       1368  16A 0001B5F0 RpcBindingCopy
       1369  16B 000BD7A0 RpcBindingCreateA
       1370  16C 00065110 RpcBindingCreateW
       1371  16D 0001F390 RpcBindingFree
       1372  16E 000745B0 RpcBindingFromStringBindingA
       1373  16F 0001DF30 RpcBindingFromStringBindingW
       1374  170 00075190 RpcBindingInqAuthClientA
       1375  171 000751C0 RpcBindingInqAuthClientExA
       1376  172 00019900 RpcBindingInqAuthClientExW
       1377  173 000198D0 RpcBindingInqAuthClientW
       1378  174 000BDAD0 RpcBindingInqAuthInfoA
       1379  175 000BDB10 RpcBindingInqAuthInfoExA
       1380  176 00070400 RpcBindingInqAuthInfoExW
       1381  177 000B1750 RpcBindingInqAuthInfoW
       1382  178 0006A780 RpcBindingInqObject
       1383  179 000B7970 RpcBindingInqOption
       1384  17A 000B17D0 RpcBindingReset
       1385  17B 0000CBB0 RpcBindingServerFromClient
       1386  17C 000BDBC0 RpcBindingSetAuthInfoA
       1387  17D 000BDBF0 RpcBindingSetAuthInfoExA
       1388  17E 000652D0 RpcBindingSetAuthInfoExW
       1389  17F 00064DC0 RpcBindingSetAuthInfoW
       1390  180 00072E70 RpcBindingSetObject
       1391  181 0001DE70 RpcBindingSetOption
       1392  182 00017A60 RpcBindingToStringBindingA
       1393  183 00019820 RpcBindingToStringBindingW
       1394  184 0001BC10 RpcBindingUnbind
       1395  185 00072F50 RpcBindingVectorFree
       1396  186 000BA0A0 RpcCancelThread
       1397  187 000BA0F0 RpcCancelThreadEx
       1398  188 000BDCE0 RpcCertGeneratePrincipalNameA
       1399  189 000B11F0 RpcCertGeneratePrincipalNameW
       1017  18A 000B1000 RpcCertMatchPrincipalName
       1400  18B 00067340 RpcEpRegisterA
       1401  18C 000BE200 RpcEpRegisterNoReplaceA
       1402  18D 000BE2E0 RpcEpRegisterNoReplaceW
       1403  18E 00063E50 RpcEpRegisterW
       1404  18F 00072B00 RpcEpResolveBinding
       1405  190 00066E80 RpcEpUnregister
       1406  191 000BD140 RpcErrorAddRecord
       1407  192 000BD290 RpcErrorClearInformation
       1408  193 00073F70 RpcErrorEndEnumeration
       1409  194 000706D0 RpcErrorGetNextRecord
       1410  195 000BD2A0 RpcErrorGetNumberOfRecords
       1411  196 000BD2D0 RpcErrorLoadErrorInfo
       1412  197 000BD310 RpcErrorResetEnumeration
       1413  198 000BD330 RpcErrorSaveErrorInfo
       1414  199 0006DD60 RpcErrorStartEnumeration
       1415  19A 0006F6F0 RpcExceptionFilter
       1416  19B 00075130 RpcFreeAuthorizationContext
       1417  19C 00073480 RpcGetAuthorizationContextForClient
       1418  19D 000AFF10 RpcIfIdVectorFree
       1419  19E 00065C70 RpcIfInqId
       1420  19F 0000CF70 RpcImpersonateClient
       1421  1A0 0001C390 RpcImpersonateClient2
       1422  1A1 000AFF80 RpcImpersonateClientContainer
       1423  1A2 00076A30 RpcMgmtEnableIdleCleanup
       1424  1A3 000BE380 RpcMgmtEpEltInqBegin
       1425  1A4 000BE630 RpcMgmtEpEltInqDone
       1426  1A5 000BE710 RpcMgmtEpEltInqNextA
       1427  1A6 000BEC30 RpcMgmtEpEltInqNextW
       1428  1A7 000BEC90 RpcMgmtEpUnregister
       1429  1A8 000B1360 RpcMgmtInqComTimeout
       1430  1A9 000B7A00 RpcMgmtInqDefaultProtectLevel
       1431  1AA 000B0020 RpcMgmtInqIfIds
       1432  1AB 00066F80 RpcMgmtInqServerPrincNameA
       1433  1AC 00066FE0 RpcMgmtInqServerPrincNameW
       1434  1AD 000B00E0 RpcMgmtInqStats
       1435  1AE 000676F0 RpcMgmtIsServerListening
       1436  1AF 000BECB0 RpcMgmtSetAuthorizationFn
       1437  1B0 00072A10 RpcMgmtSetCancelTimeout
       1438  1B1 00065B10 RpcMgmtSetComTimeout
       1439  1B2 00067280 RpcMgmtSetServerStackSize
       1440  1B3 000B0220 RpcMgmtStatsVectorFree
       1441  1B4 000769A0 RpcMgmtStopServerListening
       1442  1B5 000B0260 RpcMgmtWaitServerListen
       1443  1B6 000053F0 RpcNetworkInqProtseqsA
       1444  1B7 00005480 RpcNetworkInqProtseqsW
       1445  1B8 000BDD40 RpcNetworkIsProtseqValidA
       1446  1B9 000B13C0 RpcNetworkIsProtseqValidW
       1447  1BA 000BDEB0 RpcNsBindingInqEntryNameA
       1448  1BB 000B16E0 RpcNsBindingInqEntryNameW
       1449  1BC 000B0290 RpcObjectInqType
       1450  1BD 000B0300 RpcObjectSetInqFn
       1451  1BE 00066C20 RpcObjectSetType
       1452  1BF 00005760 RpcProtseqVectorFreeA
       1453  1C0 00005770 RpcProtseqVectorFreeW
       1454  1C1 000690B0 RpcRaiseException
       1455  1C2 000B0330 RpcRevertContainerImpersonation
       1456  1C3 0000CE80 RpcRevertToSelf
       1457  1C4 0001B870 RpcRevertToSelfEx
       1458  1C5 000B0390 RpcServerCompleteSecurityCallback
       1459  1C6 0001B6B0 RpcServerInqBindingHandle
       1460  1C7 00074820 RpcServerInqBindings
       1461  1C8 0006E590 RpcServerInqCallAttributesA
       1462  1C9 000238E0 RpcServerInqCallAttributesW
       1463  1CA 00005930 RpcServerInqDefaultPrincNameA
       1464  1CB 00074500 RpcServerInqDefaultPrincNameW
       1465  1CC 000B03F0 RpcServerInqIf
       1466  1CD 00075A20 RpcServerInterfaceGroupActivate
       1467  1CE 00076350 RpcServerInterfaceGroupClose
       1468  1CF 000B0440 RpcServerInterfaceGroupCreateA
       1469  1D0 000753C0 RpcServerInterfaceGroupCreateW
       1470  1D1 00076060 RpcServerInterfaceGroupDeactivate
       1471  1D2 000B0800 RpcServerInterfaceGroupInqBindings
       1472  1D3 00074670 RpcServerListen
       1473  1D4 000740E0 RpcServerRegisterAuthInfoA
       1474  1D5 00074190 RpcServerRegisterAuthInfoW
       1475  1D6 00076700 RpcServerRegisterIf
       1476  1D7 00075780 RpcServerRegisterIf2
       1477  1D8 00016630 RpcServerRegisterIf3
       1478  1D9 00074200 RpcServerRegisterIfEx
       1479  1DA 0006E490 RpcServerSubscribeForNotification
       1480  1DB 0006C770 RpcServerTestCancel
       1481  1DC 000169B0 RpcServerUnregisterIf
       1482  1DD 00074910 RpcServerUnregisterIfEx
       1483  1DE 0006E500 RpcServerUnsubscribeForNotification
       1484  1DF 000B0850 RpcServerUseAllProtseqs
       1485  1E0 000B0880 RpcServerUseAllProtseqsEx
       1486  1E1 000B0A20 RpcServerUseAllProtseqsIf
       1487  1E2 000B0A70 RpcServerUseAllProtseqsIfEx
       1488  1E3 00067770 RpcServerUseProtseqA
       1489  1E4 00005170 RpcServerUseProtseqEpA
       1490  1E5 000051D0 RpcServerUseProtseqEpExA
       1491  1E6 000671A0 RpcServerUseProtseqEpExW
       1492  1E7 00067150 RpcServerUseProtseqEpW
       1493  1E8 00005900 RpcServerUseProtseqExA
       1494  1E9 00067590 RpcServerUseProtseqExW
       1495  1EA 000BDF30 RpcServerUseProtseqIfA
       1496  1EB 000BDF80 RpcServerUseProtseqIfExA
       1497  1EC 000B0B40 RpcServerUseProtseqIfExW
       1498  1ED 000B0C80 RpcServerUseProtseqIfW
       1499  1EE 00067500 RpcServerUseProtseqW
       1500  1EF 000BA140 RpcServerYield
       1501  1F0 000D1620 RpcSmAllocate
       1502  1F1 000D1660 RpcSmClientFree
       1503  1F2 00005A20 RpcSmDestroyClientContext
       1504  1F3 000D1680 RpcSmDisableAllocate
       1505  1F4 000D16B0 RpcSmEnableAllocate
       1506  1F5 000D16E0 RpcSmFree
       1507  1F6 000D1700 RpcSmGetThreadHandle
       1508  1F7 000D1740 RpcSmSetClientAllocFree
       1509  1F8 000D1760 RpcSmSetThreadHandle
       1510  1F9 000D1780 RpcSmSwapClientAllocFree
       1511  1FA 000D17A0 RpcSsAllocate
       1512  1FB 000726F0 RpcSsContextLockExclusive
       1513  1FC 000C83A0 RpcSsContextLockShared
       1514  1FD 000688A0 RpcSsDestroyClientContext
       1515  1FE 000D1830 RpcSsDisableAllocate
       1516  1FF          RpcSsDontSerializeContext (forwarded to RPCRT4.I_RpcSsDontSerializeContext)
       1517  200 000D1840 RpcSsEnableAllocate
       1518  201 000D1850 RpcSsFree
       1519  202 00074630 RpcSsGetContextBinding
       1520  203 000D1860 RpcSsGetThreadHandle
       1521  204 000D18C0 RpcSsSetClientAllocFree
       1522  205 000D1920 RpcSsSetThreadHandle
       1523  206 000D19D0 RpcSsSwapClientAllocFree
       1524  207 000620D0 RpcStringBindingComposeA
       1525  208 0001C470 RpcStringBindingComposeW
       1526  209 00017AC0 RpcStringBindingParseA
       1527  20A 00017DF0 RpcStringBindingParseW
       1528  20B 00064060 RpcStringFreeA
       1529  20C 00065A80 RpcStringFreeW
       1530  20D 000BA190 RpcTestCancel
       1531  20E 000CD4A0 RpcUserFree
       1532  20F 000F2670 SimpleTypeAlignment
       1533  210 000F25B0 SimpleTypeBufferSize
       1534  211 000EB430 SimpleTypeMemorySize
       1535  212 0001BFE0 TowerConstruct
       1536  213 00051CB0 TowerExplode
       1537  214 000764E0 UuidCompare
       1538  215 0006D0D0 UuidCreate
       1539  216 000771A0 UuidCreateNil
       1540  217 000677D0 UuidCreateSequential
       1541  218 0006B350 UuidEqual
       1542  219 00074C70 UuidFromStringA
       1543  21A 0001C640 UuidFromStringW
       1544  21B 000BE130 UuidHash
       1545  21C 000195F0 UuidIsNil
       1546  21D 000050F0 UuidToStringA
       1547  21E 0001C580 UuidToStringW
       1018  21F 000F5B08 pfnFreeRoutines
       1019  220 000F5B10 pfnMarshallRoutines
       1020  221 000F5B18 pfnSizeRoutines
       1021  222 000F5B20 pfnUnmarshallRoutines
       1000      00072DA0 [NONAME]

  Summary

        2000 .data
        1000 .didat
        B000 .ndr64
        D000 .pdata
       2B000 .rdata
        2000 .reloc
        5000 .rsrc
       D8000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\secur32.dll

File Type: DLL

  Section contains the following exports for Secur32.dll

    00000000 characteristics
    559F300C time date stamp Thu Jul  9 19:38:04 2015
        0.00 version
           1 ordinal base
         101 number of functions
         101 number of names

    ordinal hint RVA      name

          4    0          AcceptSecurityContext (forwarded to SSPICLI.AcceptSecurityContext)
          5    1          AcquireCredentialsHandleA (forwarded to SSPICLI.AcquireCredentialsHandleA)
          6    2          AcquireCredentialsHandleW (forwarded to SSPICLI.AcquireCredentialsHandleW)
          7    3          AddCredentialsA (forwarded to SSPICLI.AddCredentialsA)
          8    4          AddCredentialsW (forwarded to SSPICLI.AddCredentialsW)
          9    5          AddSecurityPackageA (forwarded to SSPICLI.AddSecurityPackageA)
         10    6          AddSecurityPackageW (forwarded to SSPICLI.AddSecurityPackageW)
         11    7          ApplyControlToken (forwarded to SSPICLI.ApplyControlToken)
         12    8          ChangeAccountPasswordA (forwarded to SSPICLI.ChangeAccountPasswordA)
         13    9          ChangeAccountPasswordW (forwarded to SSPICLI.ChangeAccountPasswordW)
          1    A 00002000 CloseLsaPerformanceData
          2    B 00001B00 CollectLsaPerformanceData
         14    C          CompleteAuthToken (forwarded to SSPICLI.CompleteAuthToken)
         15    D          CredMarshalTargetInfo (forwarded to SSPICLI.CredMarshalTargetInfo)
         16    E          CredUnmarshalTargetInfo (forwarded to SSPICLI.CredUnmarshalTargetInfo)
         17    F          DecryptMessage (forwarded to SSPICLI.DecryptMessage)
         18   10          DeleteSecurityContext (forwarded to SSPICLI.DeleteSecurityContext)
         19   11          DeleteSecurityPackageA (forwarded to SSPICLI.DeleteSecurityPackageA)
         20   12          DeleteSecurityPackageW (forwarded to SSPICLI.DeleteSecurityPackageW)
         21   13          EncryptMessage (forwarded to SSPICLI.EncryptMessage)
         22   14          EnumerateSecurityPackagesA (forwarded to SSPICLI.EnumerateSecurityPackagesA)
         23   15          EnumerateSecurityPackagesW (forwarded to SSPICLI.EnumerateSecurityPackagesW)
         24   16          ExportSecurityContext (forwarded to SSPICLI.ExportSecurityContext)
         25   17          FreeContextBuffer (forwarded to SSPICLI.FreeContextBuffer)
         26   18          FreeCredentialsHandle (forwarded to SSPICLI.FreeCredentialsHandle)
         27   19 000036A0 GetComputerObjectNameA
         28   1A 00001080 GetComputerObjectNameW
         29   1B          GetSecurityUserInfo (forwarded to SSPICLI.GetSecurityUserInfo)
         30   1C          GetUserNameExA (forwarded to SSPICLI.GetUserNameExA)
         31   1D          GetUserNameExW (forwarded to SSPICLI.GetUserNameExW)
         32   1E          ImpersonateSecurityContext (forwarded to SSPICLI.ImpersonateSecurityContext)
         33   1F          ImportSecurityContextA (forwarded to SSPICLI.ImportSecurityContextA)
         34   20          ImportSecurityContextW (forwarded to SSPICLI.ImportSecurityContextW)
         35   21          InitSecurityInterfaceA (forwarded to SSPICLI.InitSecurityInterfaceA)
         36   22          InitSecurityInterfaceW (forwarded to SSPICLI.InitSecurityInterfaceW)
         37   23          InitializeSecurityContextA (forwarded to SSPICLI.InitializeSecurityContextA)
         38   24          InitializeSecurityContextW (forwarded to SSPICLI.InitializeSecurityContextW)
         39   25          LsaCallAuthenticationPackage (forwarded to SSPICLI.LsaCallAuthenticationPackage)
         40   26          LsaConnectUntrusted (forwarded to SSPICLI.LsaConnectUntrusted)
         41   27          LsaDeregisterLogonProcess (forwarded to SSPICLI.LsaDeregisterLogonProcess)
         42   28          LsaEnumerateLogonSessions (forwarded to SSPICLI.LsaEnumerateLogonSessions)
         43   29          LsaFreeReturnBuffer (forwarded to SSPICLI.LsaFreeReturnBuffer)
         44   2A          LsaGetLogonSessionData (forwarded to SSPICLI.LsaGetLogonSessionData)
         45   2B          LsaLogonUser (forwarded to SSPICLI.LsaLogonUser)
         46   2C          LsaLookupAuthenticationPackage (forwarded to SSPICLI.LsaLookupAuthenticationPackage)
         47   2D          LsaRegisterLogonProcess (forwarded to SSPICLI.LsaRegisterLogonProcess)
         48   2E          LsaRegisterPolicyChangeNotification (forwarded to SSPICLI.LsaRegisterPolicyChangeNotification)
         49   2F          LsaUnregisterPolicyChangeNotification (forwarded to SSPICLI.LsaUnregisterPolicyChangeNotification)
         50   30          MakeSignature (forwarded to SSPICLI.MakeSignature)
          3   31 00001EF0 OpenLsaPerformanceData
         51   32          QueryContextAttributesA (forwarded to SSPICLI.QueryContextAttributesA)
         52   33          QueryContextAttributesW (forwarded to SSPICLI.QueryContextAttributesW)
         53   34          QueryCredentialsAttributesA (forwarded to SSPICLI.QueryCredentialsAttributesA)
         54   35          QueryCredentialsAttributesW (forwarded to SSPICLI.QueryCredentialsAttributesW)
         55   36          QuerySecurityContextToken (forwarded to SSPICLI.QuerySecurityContextToken)
         56   37          QuerySecurityPackageInfoA (forwarded to SSPICLI.QuerySecurityPackageInfoA)
         57   38          QuerySecurityPackageInfoW (forwarded to SSPICLI.QuerySecurityPackageInfoW)
         58   39          RevertSecurityContext (forwarded to SSPICLI.RevertSecurityContext)
         59   3A          SaslAcceptSecurityContext (forwarded to SSPICLI.SaslAcceptSecurityContext)
         60   3B          SaslEnumerateProfilesA (forwarded to SSPICLI.SaslEnumerateProfilesA)
         61   3C          SaslEnumerateProfilesW (forwarded to SSPICLI.SaslEnumerateProfilesW)
         62   3D          SaslGetContextOption (forwarded to SSPICLI.SaslGetContextOption)
         63   3E          SaslGetProfilePackageA (forwarded to SSPICLI.SaslGetProfilePackageA)
         64   3F          SaslGetProfilePackageW (forwarded to SSPICLI.SaslGetProfilePackageW)
         65   40          SaslIdentifyPackageA (forwarded to SSPICLI.SaslIdentifyPackageA)
         66   41          SaslIdentifyPackageW (forwarded to SSPICLI.SaslIdentifyPackageW)
         67   42          SaslInitializeSecurityContextA (forwarded to SSPICLI.SaslInitializeSecurityContextA)
         68   43          SaslInitializeSecurityContextW (forwarded to SSPICLI.SaslInitializeSecurityContextW)
         69   44          SaslSetContextOption (forwarded to SSPICLI.SaslSetContextOption)
         70   45          SealMessage (forwarded to SSPICLI.SealMessage)
         71   46          SeciAllocateAndSetCallFlags (forwarded to SSPICLI.SeciAllocateAndSetCallFlags)
         72   47          SeciAllocateAndSetIPAddress (forwarded to SSPICLI.SeciAllocateAndSetIPAddress)
         73   48          SeciFreeCallContext (forwarded to SSPICLI.SeciFreeCallContext)
         74   49 000024C0 SecpFreeMemory
         75   4A 000013E0 SecpTranslateName
         76   4B 00002070 SecpTranslateNameEx
         77   4C          SetContextAttributesA (forwarded to SSPICLI.SetContextAttributesA)
         78   4D          SetContextAttributesW (forwarded to SSPICLI.SetContextAttributesW)
         79   4E          SetCredentialsAttributesA (forwarded to SSPICLI.SetCredentialsAttributesA)
         80   4F          SetCredentialsAttributesW (forwarded to SSPICLI.SetCredentialsAttributesW)
         81   50          SspiCompareAuthIdentities (forwarded to SSPICLI.SspiCompareAuthIdentities)
         82   51          SspiCopyAuthIdentity (forwarded to SSPICLI.SspiCopyAuthIdentity)
         83   52          SspiDecryptAuthIdentity (forwarded to SSPICLI.SspiDecryptAuthIdentity)
         84   53          SspiEncodeAuthIdentityAsStrings (forwarded to SSPICLI.SspiEncodeAuthIdentityAsStrings)
         85   54          SspiEncodeStringsAsAuthIdentity (forwarded to SSPICLI.SspiEncodeStringsAsAuthIdentity)
         86   55          SspiEncryptAuthIdentity (forwarded to SSPICLI.SspiEncryptAuthIdentity)
         87   56          SspiExcludePackage (forwarded to SSPICLI.SspiExcludePackage)
         88   57          SspiFreeAuthIdentity (forwarded to SSPICLI.SspiFreeAuthIdentity)
         89   58          SspiGetTargetHostName (forwarded to SSPICLI.SspiGetTargetHostName)
         90   59          SspiIsAuthIdentityEncrypted (forwarded to SSPICLI.SspiIsAuthIdentityEncrypted)
         91   5A          SspiLocalFree (forwarded to SSPICLI.SspiLocalFree)
         92   5B          SspiMarshalAuthIdentity (forwarded to SSPICLI.SspiMarshalAuthIdentity)
         93   5C          SspiPrepareForCredRead (forwarded to SSPICLI.SspiPrepareForCredRead)
         94   5D          SspiPrepareForCredWrite (forwarded to SSPICLI.SspiPrepareForCredWrite)
         95   5E          SspiUnmarshalAuthIdentity (forwarded to SSPICLI.SspiUnmarshalAuthIdentity)
         96   5F          SspiValidateAuthIdentity (forwarded to SSPICLI.SspiValidateAuthIdentity)
         97   60          SspiZeroAuthIdentity (forwarded to SSPICLI.SspiZeroAuthIdentity)
         98   61 000037D0 TranslateNameA
         99   62 00003950 TranslateNameW
        100   63          UnsealMessage (forwarded to SSPICLI.UnsealMessage)
        101   64          VerifySignature (forwarded to SSPICLI.VerifySignature)

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        3000 .rdata
        1000 .reloc
        1000 .rsrc
        3000 .text
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file shell32.dll

File Type: DLL

  Section contains the following exports for SHELL32.dll

    00000000 characteristics
    559F3137 time date stamp Thu Jul  9 19:43:03 2015
        0.00 version
           2 ordinal base
         942 number of functions
         482 number of names

    ordinal hint RVA      name

        255    0 00219BE0 AppCompat_RunDLLW
        263    1 000A6430 AssocCreateForClasses
        267    2 0021C7D0 AssocGetDetailsOfPropKey
        701    3 0021F7A0 CDefFolderMenu_Create2
         83    4 00220580 CIDLData_CreateFromIDArray
        937    5 001F3DA0 CStorageItem_GetValidatedStorageItemObject
        268    6 00221950 CheckEscapesW
        269    7 000E83B0 CommandLineToArgvW
        272    8 00223F30 Control_RunDLL
        273    9 00223F30 Control_RunDLLA
        274    A 00223FB0 Control_RunDLLAsUserW
        275    B 00223FF0 Control_RunDLLW
        935    C 001F3DC0 CreateStorageItemFromPath_FullTrustCaller
        936    D 001F3DD0 CreateStorageItemFromPath_FullTrustCaller_ForPackage
        920    E 001F3DE0 CreateStorageItemFromPath_PartialTrustCaller
        921    F 001F3DF0 CreateStorageItemFromShellItem_FullTrustCaller
        925   10 00020890 CreateStorageItemFromShellItem_FullTrustCaller_ForPackage
        929   11 001F3E00 CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle
        931   12 00020DF0 CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage
        129   13 00167E60 DAD_AutoScroll
        131   14 000EE110 DAD_DragEnterEx
         22   15 002377B0 DAD_DragEnterEx2
        132   16 002378A0 DAD_DragLeave
        134   17 002378E0 DAD_DragMove
        136   18 000EE110 DAD_SetDragImage
        137   19 000EE110 DAD_ShowDragImage
        276   1A 000D4870 DllCanUnloadNow
        277   1B 001F2790 DllGetActivationFactory
        278   1C 00084F90 DllGetClassObject
        279   1D 004E4240 DllGetVersion
        280   1E 0023A080 DllInstall
        281   1F 00167E60 DllRegisterServer
        282   20 00167E60 DllUnregisterServer
        283   21 001EE7F0 DoEnvironmentSubstA
        284   22 000D7510 DoEnvironmentSubstW
        285   23 000ED2B0 DragAcceptFiles
        286   24 001F1C80 DragFinish
        287   25 001F1C90 DragQueryFile
        288   26 001F1C90 DragQueryFileA
        289   27 000DFFF0 DragQueryFileAorW
        290   28 000DFFD0 DragQueryFileW
        291   29 001F1E50 DragQueryPoint
         64   2A 00128690 DriveType
        292   2B 000DCF90 DuplicateIcon
        293   2C 001EDD20 ExtractAssociatedIconA
        294   2D 001EDE10 ExtractAssociatedIconExA
        295   2E 001EDF00 ExtractAssociatedIconExW
        296   2F 001EE120 ExtractAssociatedIconW
        297   30 001EE1E0 ExtractIconA
        298   31 001EE260 ExtractIconEx
        299   32 001EE260 ExtractIconExA
        300   33 000D6050 ExtractIconExW
        301   34 001EE2E0 ExtractIconW
        302   35 00246BA0 FindExecutableA
        303   36 00246C70 FindExecutableW
        304   37 0010A0B0 FreeIconList
        305   38 00222240 GetCurrentProcessExplicitAppUserModelID
         63   39 00248630 GetFileNameFromBrowse
        919   3A 001F3E10 GetSystemPersistedStorageItemList
        154   3B 0024E4C0 ILAppendID
         18   3C 000738A0 ILClone
         19   3D 000DA910 ILCloneFirst
         25   3E 0006F2D0 ILCombine
        157   3F 001517C0 ILCreateFromPath
        189   40 0024E5A0 ILCreateFromPathA
        190   41 001517C0 ILCreateFromPathW
         24   42 000ED470 ILFindChild
         16   43 000739B0 ILFindLastID
        155   44 000DC6C0 ILFree
        153   45 000EDC10 ILGetNext
        152   46 000DC7A0 ILGetSize
         21   47 0007F340 ILIsEqual
         23   48 0006FC60 ILIsParent
        846   49 0001B560 ILLoadFromStreamEx
         17   4A 00073860 ILRemoveLastID
         27   4B 0001D120 ILSaveToStream
        306   4C 0024ECA0 InitNetworkAddressControl
        307   4D 00167E60 InternalExtractIconListA
        308   4E 00167E60 InternalExtractIconListW
        942   4F 000479A0 IsDesktopExplorerProcess
        119   50 000E1F80 IsLFNDrive
         41   51 00221A10 IsLFNDriveA
         42   52 000E1F80 IsLFNDriveW
         66   53 004E4300 IsNetDrive
        941   54 000A5340 IsProcessAnExplorer
        680   55 00251840 IsUserAnAdmin
        309   56 001F27D0 LaunchMSHelp_RunDLLW
         81   57 0010A0B0 OpenAs_RunDLL
        125   58 0010A0B0 OpenAs_RunDLLA
        133   59 001F4BF0 OpenAs_RunDLLW
         85   5A 000EDEC0 OpenRegStream
        310   5B 0049B860 Options_RunDLL
        311   5C 0049B860 Options_RunDLLA
        312   5D 0049B8B0 Options_RunDLLW
        171   5E 000E1E30 PathCleanupSpec
         92   5F 00221C90 PathGetShortPath
         43   60 00221D00 PathIsExe
        240   61 00221F20 PathIsSlowA
        239   62 00221F80 PathIsSlowW
         47   63 002220A0 PathMakeUniqueName
         49   64 002220D0 PathQualify
         51   65 00146180 PathResolve
         75   66 00120400 PathYetAnotherMakeUniqueName
         62   67 001F0C70 PickIconDlg
         13   68 001F13B0 PifMgr_CloseProperties
         10   69 00167E60 PifMgr_GetProperties
          9   6A 00167E60 PifMgr_OpenProperties
         11   6B 00167E60 PifMgr_SetProperties
        135   6C 001F8840 PrepareDiscForBurnRunDllW
        138   6D 00206210 PrintersGetCommand_RunDLL
        139   6E 00206210 PrintersGetCommand_RunDLLA
        150   6F 002062D0 PrintersGetCommand_RunDLLW
        654   70 000E4C90 ReadCabinetState
        524   71 002535D0 RealDriveType
        199   72 00207260 RealShellExecuteA
        207   73 00207260 RealShellExecuteExA
        208   74 00207260 RealShellExecuteExW
        226   75 00207260 RealShellExecuteW
        313   76 000D65B0 RegenerateUserEnvironment
         59   77 00238590 RestartDialog
        730   78 002385A0 RestartDialogEx
        314   79 001F3940 RunAsNewUser_RunDLLW
        315   7A 002571F0 SHAddDefaultPropertiesByExt
        167   7B 00257680 SHAddFromPropSheetExtArray
        316   7C 0012A130 SHAddToRecentDocs
        196   7D 000E9C50 SHAlloc
        317   7E 00150B20 SHAppBarMessage
        318   7F 000203C0 SHAssocEnumHandlers
        319   80 0025D1A0 SHAssocEnumHandlersForProtocolByApplication
        320   81 0009C230 SHBindToFolderIDListParent
        321   82 0009C260 SHBindToFolderIDListParentEx
        322   83 000739E0 SHBindToObject
        323   84 000737B0 SHBindToParent
        324   85 00261A30 SHBrowseForFolder
        325   86 00261A30 SHBrowseForFolderA
        326   87 00261C20 SHBrowseForFolderW
        147   88 00039BB0 SHCLSIDFromString
        644   89 000DD290 SHChangeNotification_Lock
        645   8A 000DD270 SHChangeNotification_Unlock
        327   8B 00073360 SHChangeNotify
          4   8C 0006E940 SHChangeNotifyDeregister
          2   8D 0006FD90 SHChangeNotifyRegister
        328   8E 000EAB70 SHChangeNotifyRegisterThread
        329   8F 000E7D80 SHChangeNotifySuspendResume
         89   90 0014AA20 SHCloneSpecialIDList
        102   91 000E2870 SHCoCreateInstance
        330   92 00262C60 SHCoCreateInstanceWorker
        331   93 000A3190 SHCreateAssociationRegistration
        332   94 00266E00 SHCreateCategoryEnum
        333   95 00017890 SHCreateDataObject
        334   96 000E71F0 SHCreateDefaultContextMenu
        335   97 00105B90 SHCreateDefaultExtractIcon
        336   98 002572A0 SHCreateDefaultPropertiesOp
        165   99 00020DD0 SHCreateDirectory
        337   9A 00212830 SHCreateDirectoryExA
        338   9B 000EC610 SHCreateDirectoryExW
        339   9C 002692A0 SHCreateDrvExtIcon
        743   9D 00250A20 SHCreateFileExtractIconW
        340   9E 0009A0A0 SHCreateItemFromIDList
        341   9F 00098810 SHCreateItemFromParsingName
        342   A0 0009C000 SHCreateItemFromRelativeName
        343   A1 0009C160 SHCreateItemInKnownFolder
        344   A2 0009A6A0 SHCreateItemWithParent
        345   A3 00020D20 SHCreateLocalServerRunDll
        346   A4 00207BE0 SHCreateProcessAsUserW
        168   A5 00257710 SHCreatePropSheetExtArray
        347   A6 0012A0A0 SHCreateQueryCancelAutoPlayMoniker
        256   A7 000EABC0 SHCreateShellFolderView
        174   A8 0028D690 SHCreateShellFolderViewEx
        348   A9 0009A170 SHCreateShellItem
        349   AA 001F3E50 SHCreateShellItemArray
        350   AB 001F3E60 SHCreateShellItemArrayFromDataObject
        351   AC 000ED940 SHCreateShellItemArrayFromIDLists
        352   AD 00020820 SHCreateShellItemArrayFromShellItem
         74   AE 001ED680 SHCreateStdEnumFmtEtc
          3   AF 00244CA0 SHDefExtractIconA
          6   B0 00065160 SHDefExtractIconW
        169   B1 002578C0 SHDestroyPropSheetExtArray
         88   B2 002379D0 SHDoDragDrop
        353   B3 000EE050 SHELL32_AddToBackIconTable
        354   B4 000EAD00 SHELL32_AddToFrontIconTable
        355   B5 0009D3A0 SHELL32_AreAllItemsAvailable
        356   B6 002911B0 SHELL32_BindToFilePlaceholderHandler
        357   B7 002911C0 SHELL32_CCommonPlacesFolder_CreateInstance
        358   B8 002911D0 SHELL32_CDBurn_CloseSession
        359   B9 00291250 SHELL32_CDBurn_DriveSupportedForDataBurn
        360   BA 00291260 SHELL32_CDBurn_Erase
        361   BB 0001FDB0 SHELL32_CDBurn_GetCDInfo
        362   BC 002912C0 SHELL32_CDBurn_GetLiveFSDiscInfo
        363   BD 0001B1D0 SHELL32_CDBurn_GetStagingPathOrNormalPath
        364   BE 002912D0 SHELL32_CDBurn_GetTaskInfo
        365   BF 002912E0 SHELL32_CDBurn_IsBlankDisc
        366   C0 002912F0 SHELL32_CDBurn_IsBlankDisc2
        367   C1 00291350 SHELL32_CDBurn_IsLiveFS
        368   C2 00291360 SHELL32_CDBurn_OnDeviceChange
        369   C3 00291370 SHELL32_CDBurn_OnEject
        370   C4 002913E0 SHELL32_CDBurn_OnMediaChange
        371   C5 002913F0 SHELL32_CDefFolderMenu_Create2
        372   C6 00291450 SHELL32_CDefFolderMenu_Create2Ex
        373   C7 002914B0 SHELL32_CDefFolderMenu_MergeMenu
        374   C8 002914C0 SHELL32_CDrivesContextMenu_Create
        375   C9 002914D0 SHELL32_CDrivesDropTarget_Create
        376   CA 000A4AE0 SHELL32_CFSDropTarget_CreateInstance
        377   CB 000EDD00 SHELL32_CFSFolderCallback_Create
        378   CC 002914E0 SHELL32_CFillPropertiesTask_CreateInstance
        379   CD 002914F0 SHELL32_CLibraryDropTarget_CreateInstance
        380   CE 00291500 SHELL32_CLocationContextMenu_Create
        381   CF 00291510 SHELL32_CMountPoint_DoAutorun
        382   D0 00291520 SHELL32_CMountPoint_DoAutorunPrompt
        383   D1 00291540 SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy
        384   D2 00291550 SHELL32_CMountPoint_ProcessAutoRunFile
        385   D3 00291560 SHELL32_CMountPoint_WantAutorunUI
        386   D4 00291570 SHELL32_CMountPoint_WantAutorunUIGetReady
        387   D5 000EFB80 SHELL32_CPL_CategoryIdArrayFromVariant
        388   D6 00291580 SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey
        389   D7 002915A0 SHELL32_CPL_ModifyWowDisplayName
        390   D8 002915B0 SHELL32_CRecentDocsContextMenu_CreateInstance
        391   D9 002915C0 SHELL32_CSyncRootManager_CreateInstance
        392   DA 002915D0 SHELL32_CTransferConfirmation_CreateInstance
        393   DB 000206F0 SHELL32_CallFileCopyHooks
        394   DC 00019240 SHELL32_CanDisplayWin8CopyDialog
        395   DD 002915E0 SHELL32_CloseAutoplayPrompt
        396   DE 002915F0 SHELL32_CommandLineFromMsiDescriptor
        397   DF 00291600 SHELL32_CopyExtrinsicPropertyStore
        398   E0 00291610 SHELL32_CopyFilePlaceholderToNewFile
        399   E1 00291620 SHELL32_CopySecondaryTiles
        400   E2 00291630 SHELL32_CreateAlternateStreamFileName
        401   E3 00291640 SHELL32_CreateConfirmationInterrupt
        402   E4 00291650 SHELL32_CreateConflictInterrupt
        403   E5 00291660 SHELL32_CreateDefaultOperationDataProvider
        404   E6 00080220 SHELL32_CreateExtrinsicPropertyStore
        405   E7 002916E0 SHELL32_CreateFileFolderContextMenu
        406   E8 000ECA50 SHELL32_CreateLinkInfoW
        407   E9 002916F0 SHELL32_CreatePlaceholderFile
        408   EA 00291700 SHELL32_CreateQosRecorder
        409   EB 00291710 SHELL32_CreateSharePointView
        410   EC 00291720 SHELL32_Create_IEnumUICommand
        411   ED 000ECA40 SHELL32_DestroyLinkInfo
        412   EE 00291730 SHELL32_EncryptDirectory
        413   EF 00291740 SHELL32_EncryptedFileKeyInfo
        414   F0 00291750 SHELL32_EnumCommonTasks
        415   F1 00291760 SHELL32_FilePlaceholder_BindToPrimaryStream
        416   F2 00070C00 SHELL32_FilePlaceholder_CreateInstance
        417   F3 00291770 SHELL32_FreeEncryptedFileKeyInfo
        418   F4 00128890 SHELL32_GenerateAppID
        419   F5 00291780 SHELL32_GetAppIDRoot
        420   F6 00291790 SHELL32_GetCommandProviderForFolderType
        421   F7 000E82C0 SHELL32_GetDPIAdjustedLogicalSize
        422   F8 002917A0 SHELL32_GetDiskCleanupPath
        423   F9 002917B0 SHELL32_GetFileNameFromBrowse
        424   FA 000E8B70 SHELL32_GetIconOverlayManager
        425   FB 002917C0 SHELL32_GetLinkInfoData
        426   FC 000D8720 SHELL32_GetPlaceholderStatesFromFileAttributesAndReparsePointTag
        427   FD 002917D0 SHELL32_GetRatingBucket
        428   FE 00291800 SHELL32_GetSkyDriveNetworkStates
        429   FF 00291810 SHELL32_GetSqmableFileName
        430  100 00291820 SHELL32_GetThumbnailAdornerFromFactory
        431  101 0009DE40 SHELL32_GetThumbnailAdornerFromFactory2
        432  102 00291830 SHELL32_HandleUnrecognizedFileSystem
        433  103 000AC410 SHELL32_IconCacheCreate
        434  104 000EE160 SHELL32_IconCacheDestroy
        435  105 00291840 SHELL32_IconCacheHandleAssociationChanged
        436  106 000ABFE0 SHELL32_IconCacheRestore
        437  107 000E52C0 SHELL32_IconCache_AboutToExtractIcons
        438  108 000EA360 SHELL32_IconCache_DoneExtractingIcons
        439  109 000E9A20 SHELL32_IconCache_ExpandEnvAndSearchPath
        440  10A 000E5B00 SHELL32_IconCache_RememberRecentlyExtractedIconsW
        441  10B 000E3DB0 SHELL32_IconOverlayManagerInit
        442  10C 000EE110 SHELL32_IsGetKeyboardLayoutPresent
        443  10D 00116CF0 SHELL32_IsSystemUpgradeInProgress
        444  10E 000EC420 SHELL32_IsValidLinkInfo
        445  10F 00291850 SHELL32_LegacyEnumSpecialTasksByType
        446  110 00291860 SHELL32_LegacyEnumTasks
        447  111 0006A270 SHELL32_LookupBackIconIndex
        448  112 0006D550 SHELL32_LookupFrontIconIndex
        449  113 00291870 SHELL32_NormalizeRating
        450  114 00291880 SHELL32_NotifyLinkTrackingServiceOfMove
        451  115 001F13B0 SHELL32_PifMgr_CloseProperties
        452  116 00167E60 SHELL32_PifMgr_GetProperties
        453  117 00167E60 SHELL32_PifMgr_OpenProperties
        454  118 00167E60 SHELL32_PifMgr_SetProperties
        455  119 00291890 SHELL32_Printers_CreateBindInfo
        456  11A 002918A0 SHELL32_Printjob_GetPidl
        457  11B 002918B0 SHELL32_PurgeSystemIcon
        458  11C 000AB550 SHELL32_RefreshOverlayImages
        459  11D 002918C0 SHELL32_ResolveLinkInfoW
        460  11E 002918D0 SHELL32_SHAddSparseIcon
        461  11F 002918E0 SHELL32_SHCreateByValueOperationInterrupt
        462  120 000E71E0 SHELL32_SHCreateDefaultContextMenu
        463  121 002918F0 SHELL32_SHCreateLocalServer
        464  122 000EABB0 SHELL32_SHCreateShellFolderView
        465  123 00291900 SHELL32_SHDuplicateEncryptionInfoFile
        466  124 00291910 SHELL32_SHEncryptFile
        467  125 00291920 SHELL32_SHFormatDriveAsync
        468  126 002919B0 SHELL32_SHGetThreadUndoManager
        469  127 002919C0 SHELL32_SHGetUserNameW
        470  128 002919D0 SHELL32_SHIsVirtualDevice
        471  129 002919E0 SHELL32_SHLaunchPropSheet
        472  12A 002919F0 SHELL32_SHLogILFromFSIL
        473  12B 00291A00 SHELL32_SHOpenWithDialog
        474  12C 00244080 SHELL32_SHUICommandFromGUID
        475  12D 0049D3C0 SHELL32_SendToMenu_InvokeTargetedCommand
        476  12E 0049D410 SHELL32_SendToMenu_VerifyTargetedCommand
        477  12F 00291A10 SHELL32_SetPlaceholderReparsePointAttribute
        478  130 00291A30 SHELL32_SetPlaceholderReparsePointAttribute2
        479  131 00291A40 SHELL32_ShowHideIconOnlyOnDesktop
        480  132 00291A50 SHELL32_SimpleRatingToFilterCondition
        481  133 00291A60 SHELL32_StampIconForElevation
        482  134 00019E70 SHELL32_SuspendUndo
        483  135 00291A70 SHELL32_TryVirtualDiscImageDriveEject
        484  136 00291AB0 SHELL32_UpdateFilePlaceholderStates
        485  137 000E7160 SHELL32_VerifySaferTrust
        486  138 00292D10 SHEmptyRecycleBinA
        487  139 00292DB0 SHEmptyRecycleBinW
        488  13A 000E7320 SHEnableServiceObject
        489  13B 00212BF0 SHEnumerateUnreadMailAccountsW
        490  13C 000D99E0 SHEvaluateSystemCommandTemplate
        491  13D 001EE6F0 SHExtractIconsW
        492  13E 001F3E70 SHFileOperation
        493  13F 001F3E70 SHFileOperationA
        494  140 0001E600 SHFileOperationW
         90  141 00212FB0 SHFindFiles
        149  142 00294B10 SHFind_InitMenuPopup
        526  143 00294CA0 SHFlushSFCache
        495  144 00219FC0 SHFormatDrive
        195  145 000DC6C0 SHFree
        496  146 001F3E80 SHFreeNameMappings
        750  147 002130A0 SHGetAttributesFromDataObject
        497  148 00250DB0 SHGetDataFromIDListA
        498  149 000E38D0 SHGetDataFromIDListW
        499  14A 000ED850 SHGetDesktopFolder
        500  14B 00250EB0 SHGetDiskFreeSpaceA
        501  14C 00250EB0 SHGetDiskFreeSpaceExA
        502  14D 00250F20 SHGetDiskFreeSpaceExW
        503  14E 0029B560 SHGetDriveMedia
        504  14F 0001E210 SHGetFileInfo
        505  150 0001E210 SHGetFileInfoA
        506  151 00129490 SHGetFileInfoW
        507  152 000ECD30 SHGetFolderLocation
        508  153 00257F20 SHGetFolderPathA
        509  154 00257F30 SHGetFolderPathAndSubDirA
        510  155 000EE060 SHGetFolderPathAndSubDirW
        511  156 00156DD0 SHGetFolderPathEx
        512  157 000E0080 SHGetFolderPathW
        513  158 00098620 SHGetIDListFromObject
        514  159 0029B9D0 SHGetIconOverlayIndexA
        515  15A 0029BA40 SHGetIconOverlayIndexW
        727  15B 00034980 SHGetImageList
        516  15C 000EE0C0 SHGetInstanceExplorer
        517  15D 000A3FC0 SHGetItemFromDataObject
        518  15E 000E83C0 SHGetItemFromObject
        519  15F 00156DE0 SHGetKnownFolderIDList
        527  160 00156DF0 SHGetKnownFolderItem
        528  161 000E4220 SHGetKnownFolderPath
        529  162 00250F30 SHGetLocalizedName
        530  163 00124FF0 SHGetMalloc
        531  164 0009CCF0 SHGetNameFromIDList
        532  165 00250FE0 SHGetNewLinkInfo
        179  166 00250FE0 SHGetNewLinkInfoA
        180  167 002510F0 SHGetNewLinkInfoW
        533  168 00213240 SHGetPathFromIDList
        534  169 00213240 SHGetPathFromIDListA
        535  16A 0007FBC0 SHGetPathFromIDListEx
        536  16B 00080200 SHGetPathFromIDListW
        537  16C 000DC5D0 SHGetPropertyStoreForWindow
        538  16D 00251120 SHGetPropertyStoreFromIDList
        539  16E 002511C0 SHGetPropertyStoreFromParsingName
         98  16F 00213350 SHGetRealIDL
        709  170 001EEB00 SHGetSetFolderCustomSettings
         68  171 000C1AE0 SHGetSetSettings
        540  172 0029C110 SHGetSettings
        541  173 001274E0 SHGetSpecialFolderLocation
        542  174 00257F40 SHGetSpecialFolderPathA
        543  175 000EC220 SHGetSpecialFolderPathW
        544  176 0010DAD0 SHGetStockIconInfo
        545  177 0009C850 SHGetTemporaryPropertyForItem
        546  178 00213370 SHGetUnreadMailCountW
        193  179 00151DA0 SHHandleUpdateImage
        228  17A 00208070 SHHelpShortcuts_RunDLL
        229  17B 00208070 SHHelpShortcuts_RunDLLA
        238  17C 00208100 SHHelpShortcuts_RunDLLW
         28  17D 00151810 SHILCreateFromPath
        547  17E 00206800 SHInvokePrinterCommandA
        548  17F 002068E0 SHInvokePrinterCommandW
        549  180 00213730 SHIsFileAvailableOffline
        747  181 0029D020 SHLimitInputEdit
        550  182 0016DEE0 SHLoadInProc
        551  183 002139F0 SHLoadNonloadedIconOverlayIdentifiers
         77  184 00046F40 SHMapPIDLToSystemImageListIndex
        716  185 0029ED30 SHMultiFileProperties
        178  186 00208240 SHObjectProperties
        552  187 00251290 SHOpenFolderAndSelectItems
         80  188 0029ED50 SHOpenPropSheetW
        553  189 001F5B00 SHOpenWithDialog
        554  18A 0009A420 SHParseDisplayName
        555  18B 001F3EA0 SHPathPrepareForWriteA
        556  18C 001F3EB0 SHPathPrepareForWriteW
        685  18D 004E4600 SHPropStgCreate
        688  18E 004E4780 SHPropStgReadMultiple
        689  18F 004E48E0 SHPropStgWriteMultiple
        557  190 00292E30 SHQueryRecycleBinA
        558  191 00292ED0 SHQueryRecycleBinW
        559  192 0014A0B0 SHQueryUserNotificationState
        560  193 002513E0 SHRemoveLocalizedName
        170  194 00257930 SHReplaceFromPropSheetExtArray
        561  195 00257F50 SHResolveLibrary
        100  196 0009A260 SHRestricted
        562  197 002573E0 SHSetDefaultProperties
        231  198 00257F60 SHSetFolderPathA
        232  199 00257F70 SHSetFolderPathW
        176  19A 00020880 SHSetInstanceExplorer
        563  19B 00257F80 SHSetKnownFolderPath
        564  19C 00251480 SHSetLocalizedName
        565  19D 0009C750 SHSetTemporaryPropertyForItem
        566  19E 00213B50 SHSetUnreadMailCountW
         73  19F 0028D740 SHShellFolderView_Message
        567  1A0 004C9150 SHShowManageLibraryUI
        162  1A1 00213D50 SHSimpleIDListFromPath
         14  1A2 002522F0 SHStartNetConnectionDialogW
        245  1A3 000EB730 SHTestTokenMembership
        191  1A4 00256C70 SHUpdateImageA
        192  1A5 00256CE0 SHUpdateImageW
        568  1A6 0013F520 SHUpdateRecycleBinIcon
        173  1A7 002470D0 SHValidateUNC
        569  1A8 0012A140 SetCurrentProcessExplicitAppUserModelID
        570  1A9 001F13C0 SheChangeDirA
        571  1AA 001F1440 SheChangeDirExW
        572  1AB 001F1970 SheGetDirA
        573  1AC 001F1BC0 SheSetCurDrive
        574  1AD 002A3BA0 ShellAboutA
        575  1AE 002A3CB0 ShellAboutW
        576  1AF 00207C00 ShellExec_RunDLL
        577  1B0 00207C00 ShellExec_RunDLLA
        578  1B1 00207CB0 ShellExec_RunDLLW
        579  1B2 00207DE0 ShellExecuteA
        580  1B3 00207E70 ShellExecuteEx
        581  1B4 00207E70 ShellExecuteExA
        582  1B5 000E2460 ShellExecuteExW
        583  1B6 0014ABC0 ShellExecuteW
        584  1B7 00167E60 ShellHookProc
        183  1B8          ShellMessageBoxA (forwarded to shlwapi.ShellMessageBoxA)
        182  1B9          ShellMessageBoxW (forwarded to shlwapi.ShellMessageBoxW)
         72  1BA 00244D30 Shell_GetCachedImageIndex
        585  1BB 00244D40 Shell_GetCachedImageIndexA
        586  1BC 0006A820 Shell_GetCachedImageIndexW
         71  1BD 000ABDB0 Shell_GetImageLists
         67  1BE 000DA400 Shell_MergeMenus
        587  1BF 00257F90 Shell_NotifyIcon
        588  1C0 00257F90 Shell_NotifyIconA
        589  1C1 00128060 Shell_NotifyIconGetRect
        590  1C2 0006C420 Shell_NotifyIconW
        103  1C3 000E3AB0 SignalFileOpen
        682  1C4 002A3FC0 StgMakeUniqueName
        591  1C5 00155260 StrChrA
        592  1C6 00155270 StrChrIA
        593  1C7 00155280 StrChrIW
        594  1C8 00155290 StrChrW
        595  1C9 001552A0 StrCmpNA
        596  1CA 001552B0 StrCmpNIA
        597  1CB 001552C0 StrCmpNIW
        598  1CC 001552D0 StrCmpNW
        599  1CD 001EFBB0 StrNCmpA
        600  1CE 001EFC60 StrNCmpIA
        601  1CF 001EFD10 StrNCmpIW
        602  1D0 001EFDD0 StrNCmpW
        603  1D1 001552E0 StrRChrA
        604  1D2 001552F0 StrRChrIA
        605  1D3 00155300 StrRChrIW
        606  1D4 00155310 StrRChrW
        607  1D5 001EFEB0 StrRStrA
        608  1D6 00155320 StrRStrIA
        609  1D7 00155330 StrRStrIW
        610  1D8 001EFF70 StrRStrW
        611  1D9 00155340 StrStrA
        612  1DA 00155350 StrStrIA
        613  1DB 00155360 StrStrIW
        614  1DC 00155370 StrStrW
        615  1DD 002A5560 UsersLibrariesFolderUI_CreateInstance
        616  1DE 00207F50 WOWShellExecute
        617  1DF 0023A330 WaitForExplorerRestartW
        164  1E0 001F0740 Win32DeleteFile
        652  1E1 001EDA20 WriteCabinetState
          5               [NONAME] (forwarded to SHUNIMPL.#35)
          7               [NONAME] (forwarded to SHUNIMPL.#192)
          8               [NONAME] (forwarded to SHUNIMPL.#193)
         12      00252270 [NONAME]
         15      0024E610 [NONAME]
         20      000738A0 [NONAME]
         26               [NONAME] (forwarded to SHUNIMPL.#36)
         29      00221D10 [NONAME]
         30               [NONAME] (forwarded to shlwapi.PathBuildRootW)
         31               [NONAME] (forwarded to shlwapi.PathFindExtensionW)
         32               [NONAME] (forwarded to shlwapi.PathAddBackslashW)
         33               [NONAME] (forwarded to shlwapi.PathRemoveBlanksW)
         34               [NONAME] (forwarded to shlwapi.PathFindFileNameW)
         35      002220F0 [NONAME]
         36      00221A70 [NONAME]
         37               [NONAME] (forwarded to shlwapi.PathCombineW)
         38               [NONAME] (forwarded to shlwapi.PathStripPathW)
         39               [NONAME] (forwarded to shlwapi.PathIsUNCW)
         40               [NONAME] (forwarded to shlwapi.PathIsRelativeW)
         44      00223FD0 [NONAME]
         45      00221B10 [NONAME]
         46               [NONAME] (forwarded to shlwapi.PathMatchSpecW)
         48               [NONAME] (forwarded to shlwapi.PathSetDlgItemPathW)
         50               [NONAME] (forwarded to shlwapi.PathStripToRootW)
         52               [NONAME] (forwarded to shlwapi.PathGetArgsW)
         53               [NONAME] (forwarded to SHUNIMPL.#388)
         54      00238570 [NONAME]
         55               [NONAME] (forwarded to shlwapi.PathQuoteSpacesW)
         56               [NONAME] (forwarded to shlwapi.PathUnquoteSpacesW)
         57               [NONAME] (forwarded to shlwapi.PathGetDriveNumberW)
         58      00211D80 [NONAME]
         60      00238520 [NONAME]
         61      001048E0 [NONAME]
         65      0010A0B0 [NONAME]
         69      00252010 [NONAME]
         70      001EDC70 [NONAME]
         76      001F1CC0 [NONAME]
         78               [NONAME] (forwarded to SHUNIMPL.#37)
         79               [NONAME] (forwarded to SHUNIMPL.#38)
         82               [NONAME] (forwarded to SHUNIMPL.#39)
         84               [NONAME] (forwarded to SHUNIMPL.#40)
         86               [NONAME] (forwarded to SHUNIMPL.#41)
         87               [NONAME] (forwarded to SHUNIMPL.#42)
         91      00212EC0 [NONAME]
         93               [NONAME] (forwarded to shcore.Win32CreateDirectory)
         94      001F0750 [NONAME]
         95      000DE340 [NONAME]
         96               [NONAME] (forwarded to SHUNIMPL.#43)
         97      00167E60 [NONAME]
         99      00050D00 [NONAME]
        101               [NONAME] (forwarded to SHUNIMPL.#1)
        104               [NONAME] (forwarded to SHUNIMPL.#2)
        105               [NONAME] (forwarded to SHUNIMPL.#3)
        106               [NONAME] (forwarded to SHUNIMPL.#4)
        107               [NONAME] (forwarded to SHUNIMPL.#5)
        108               [NONAME] (forwarded to SHUNIMPL.#6)
        109               [NONAME] (forwarded to SHUNIMPL.#7)
        110               [NONAME] (forwarded to SHUNIMPL.#8)
        111               [NONAME] (forwarded to SHUNIMPL.#9)
        112               [NONAME] (forwarded to SHUNIMPL.#10)
        113               [NONAME] (forwarded to SHUNIMPL.#11)
        114               [NONAME] (forwarded to SHUNIMPL.#12)
        115               [NONAME] (forwarded to SHUNIMPL.#13)
        116               [NONAME] (forwarded to SHUNIMPL.#14)
        117               [NONAME] (forwarded to SHUNIMPL.#15)
        118               [NONAME] (forwarded to SHUNIMPL.#16)
        120               [NONAME] (forwarded to SHUNIMPL.#17)
        121               [NONAME] (forwarded to SHUNIMPL.#44)
        122               [NONAME] (forwarded to SHUNIMPL.#45)
        123               [NONAME] (forwarded to SHUNIMPL.#46)
        124               [NONAME] (forwarded to SHUNIMPL.#18)
        126               [NONAME] (forwarded to SHUNIMPL.#47)
        127               [NONAME] (forwarded to SHUNIMPL.#371)
        128      00084F90 [NONAME]
        130               [NONAME] (forwarded to SHUNIMPL.#48)
        140               [NONAME] (forwarded to SHUNIMPL.#19)
        141               [NONAME] (forwarded to SHUNIMPL.#20)
        142               [NONAME] (forwarded to SHUNIMPL.#21)
        143               [NONAME] (forwarded to SHUNIMPL.#22)
        144               [NONAME] (forwarded to SHUNIMPL.#23)
        145               [NONAME] (forwarded to shlwapi.PathFindOnPathW)
        146               [NONAME] (forwarded to SHUNIMPL.#49)
        148               [NONAME] (forwarded to SHUNIMPL.#50)
        151               [NONAME] (forwarded to SHUNIMPL.#51)
        156      000DC6C0 [NONAME]
        158               [NONAME] (forwarded to SHUNIMPL.#389)
        159               [NONAME] (forwarded to shlwapi.PathIsDirectoryW)
        160      00252180 [NONAME]
        161               [NONAME] (forwarded to SHUNIMPL.#214)
        163               [NONAME] (forwarded to SHUNIMPL.#52)
        166               [NONAME] (forwarded to SHUNIMPL.#53)
        172      00250B50 [NONAME]
        175      000EC220 [NONAME]
        177               [NONAME] (forwarded to SHUNIMPL.#54)
        181      0014B030 [NONAME]
        184      00167E60 [NONAME]
        185               [NONAME] (forwarded to SHUNIMPL.#390)
        186      0024E630 [NONAME]
        187               [NONAME] (forwarded to SHUNIMPL.#235)
        188      00149C60 [NONAME]
        194      00257720 [NONAME]
        197               [NONAME] (forwarded to SHUNIMPL.#55)
        198               [NONAME] (forwarded to SHUNIMPL.#56)
        200      0013F560 [NONAME]
        201      0013A720 [NONAME]
        202               [NONAME] (forwarded to SHUNIMPL.#57)
        203      0020F670 [NONAME]
        204      002141B0 [NONAME]
        205      002065D0 [NONAME]
        206      0014D8C0 [NONAME]
        209      00211350 [NONAME]
        210      00211AC0 [NONAME]
        211      001715B0 [NONAME]
        212      00206490 [NONAME]
        213      002066F0 [NONAME]
        214      002067F0 [NONAME]
        215      002522F0 [NONAME]
        216               [NONAME] (forwarded to SHUNIMPL.#24)
        217               [NONAME] (forwarded to SHUNIMPL.#25)
        218               [NONAME] (forwarded to SHUNIMPL.#26)
        219               [NONAME] (forwarded to SHUNIMPL.#27)
        220               [NONAME] (forwarded to SHUNIMPL.#28)
        221               [NONAME] (forwarded to SHUNIMPL.#29)
        222               [NONAME] (forwarded to SHUNIMPL.#30)
        223               [NONAME] (forwarded to SHUNIMPL.#31)
        224               [NONAME] (forwarded to SHUNIMPL.#32)
        225               [NONAME] (forwarded to SHUNIMPL.#33)
        227               [NONAME] (forwarded to SHUNIMPL.#34)
        230               [NONAME] (forwarded to SHUNIMPL.#372)
        233               [NONAME] (forwarded to SHUNIMPL.#58)
        234               [NONAME] (forwarded to SHUNIMPL.#59)
        235               [NONAME] (forwarded to SHUNIMPL.#212)
        236      00251860 [NONAME]
        237      000EE110 [NONAME]
        241      002135B0 [NONAME]
        242               [NONAME] (forwarded to SHUNIMPL.#373)
        243               [NONAME] (forwarded to SHUNIMPL.#374)
        244      000E6B00 [NONAME]
        246               [NONAME] (forwarded to SHUNIMPL.#375)
        247               [NONAME] (forwarded to SHUNIMPL.#376)
        248               [NONAME] (forwarded to SHUNIMPL.#377)
        249               [NONAME] (forwarded to shlwapi.PathParseIconLocationW)
        250               [NONAME] (forwarded to shlwapi.PathRemoveExtensionW)
        251               [NONAME] (forwarded to shlwapi.PathRemoveArgsW)
        252               [NONAME] (forwarded to api-ms-win-core-url-l1.PathIsURLW)
        253               [NONAME] (forwarded to SHUNIMPL.#378)
        254      00238500 [NONAME]
        257      00167E60 [NONAME]
        258      00129220 [NONAME]
        259      000EE110 [NONAME]
        260      00229890 [NONAME]
        261      00296CD0 [NONAME]
        262      00296FF0 [NONAME]
        264      002298C0 [NONAME]
        265      00247240 [NONAME]
        266      00247270 [NONAME]
        270      00295FD0 [NONAME]
        271      00252310 [NONAME]
        520               [NONAME] (forwarded to SHUNIMPL.#60)
        521               [NONAME] (forwarded to SHUNIMPL.#61)
        522               [NONAME] (forwarded to SHUNIMPL.#62)
        523               [NONAME] (forwarded to SHUNIMPL.#63)
        525               [NONAME] (forwarded to SHUNIMPL.#234)
        640               [NONAME] (forwarded to SHUNIMPL.#64)
        641               [NONAME] (forwarded to SHUNIMPL.#65)
        643               [NONAME] (forwarded to SHUNIMPL.#66)
        646               [NONAME] (forwarded to SHUNIMPL.#67)
        648               [NONAME] (forwarded to SHUNIMPL.#379)
        650               [NONAME] (forwarded to shlwapi.PathIsSameRootW)
        651      001EDA10 [NONAME]
        653               [NONAME] (forwarded to SHUNIMPL.#68)
        660      000AB850 [NONAME]
        681               [NONAME] (forwarded to SHUNIMPL.#428)
        683      0016E1C0 [NONAME]
        684      0016E1C0 [NONAME]
        690      004E4520 [NONAME]
        691               [NONAME] (forwarded to SHUNIMPL.#216)
        700               [NONAME] (forwarded to SHUNIMPL.#380)
        702      000DA370 [NONAME]
        703               [NONAME] (forwarded to SHLWAPI.#269)
        704               [NONAME] (forwarded to SHLWAPI.#270)
        707               [NONAME] (forwarded to SHUNIMPL.#69)
        708               [NONAME] (forwarded to SHUNIMPL.#70)
        711      0020F9A0 [NONAME]
        712               [NONAME] (forwarded to SHUNIMPL.#71)
        713      00222010 [NONAME]
        714      00127DD0 [NONAME]
        715               [NONAME] (forwarded to SHUNIMPL.#191)
        719      0049E310 [NONAME]
        720               [NONAME] (forwarded to SHUNIMPL.#72)
        721               [NONAME] (forwarded to SHUNIMPL.#73)
        722               [NONAME] (forwarded to SHUNIMPL.#236)
        723      00148E70 [NONAME]
        724               [NONAME] (forwarded to SHUNIMPL.#381)
        725               [NONAME] (forwarded to SHUNIMPL.#74)
        726               [NONAME] (forwarded to SHUNIMPL.#75)
        731      0014D6F0 [NONAME]
        732      0014B310 [NONAME]
        733      000EBB90 [NONAME]
        740      0026A7A0 [NONAME]
        744      002331D0 [NONAME]
        745               [NONAME] (forwarded to SHUNIMPL.#382)
        748      0029CFD0 [NONAME]
        749               [NONAME] (forwarded to SHUNIMPL.#76)
        751      00213D90 [NONAME]
        752      00251DF0 [NONAME]
        753      0014B240 [NONAME]
        754      0029D270 [NONAME]
        755      000DD000 [NONAME]
        756               [NONAME] (forwarded to SHUNIMPL.#77)
        757      0009D3B0 [NONAME]
        758      00018A10 [NONAME]
        759      00018950 [NONAME]
        760      001F3E40 [NONAME]
        761      00256C30 [NONAME]
        762               [NONAME] (forwarded to SHUNIMPL.#383)
        763      00233200 [NONAME]
        764      0003C4E0 [NONAME]
        765      0025D300 [NONAME]
        766               [NONAME] (forwarded to SHUNIMPL.#385)
        767      001671C0 [NONAME]
        777      0001D520 [NONAME]
        778      0021C9F0 [NONAME]
        779      00211640 [NONAME]
        781      00259400 [NONAME]
        782      00248690 [NONAME]
        786               [NONAME] (forwarded to SHUNIMPL.#237)
        787      000DC7D0 [NONAME]
        788      00276050 [NONAME]
        789      00276100 [NONAME]
        790      00251270 [NONAME]
        791      00276000 [NONAME]
        792      000DC8E0 [NONAME]
        810      00296D00 [NONAME]
        811      00296B40 [NONAME]
        812      004E71C0 [NONAME]
        813      004E7270 [NONAME]
        814      00124F20 [NONAME]
        815      001265F0 [NONAME]
        816      00523E80 [NONAME]
        817      00523F10 [NONAME]
        818      0011F0F0 [NONAME]
        819      00524160 [NONAME]
        820               [NONAME] (forwarded to SHUNIMPL.#249)
        821               [NONAME] (forwarded to SHUNIMPL.#250)
        822               [NONAME] (forwarded to SHUNIMPL.#251)
        823      000381F0 [NONAME]
        824      00047700 [NONAME]
        825      00523A90 [NONAME]
        826               [NONAME] (forwarded to SHUNIMPL.#252)
        827               [NONAME] (forwarded to SHUNIMPL.#253)
        828      0021FC50 [NONAME]
        829      00220000 [NONAME]
        830      00524090 [NONAME]
        831      00212840 [NONAME]
        832               [NONAME] (forwarded to SHUNIMPL.#387)
        833      00156E00 [NONAME]
        834               [NONAME] (forwarded to SHUNIMPL.#254)
        835               [NONAME] (forwarded to SHUNIMPL.#255)
        836               [NONAME] (forwarded to SHUNIMPL.#256)
        837               [NONAME] (forwarded to SHUNIMPL.#257)
        838               [NONAME] (forwarded to SHUNIMPL.#258)
        839               [NONAME] (forwarded to SHUNIMPL.#259)
        840      00251C00 [NONAME]
        841               [NONAME] (forwarded to SHUNIMPL.#424)
        842               [NONAME] (forwarded to SHUNIMPL.#425)
        843               [NONAME] (forwarded to SHUNIMPL.#386)
        844      00524000 [NONAME]
        845      005236C0 [NONAME]
        847      00523B50 [NONAME]
        848      0025D350 [NONAME]
        849      001274F0 [NONAME]
        850      000DD020 [NONAME]
        851      0020BD40 [NONAME]
        852               [NONAME] (forwarded to SHUNIMPL.#391)
        854               [NONAME] (forwarded to SHUNIMPL.#260)
        856               [NONAME] (forwarded to SHUNIMPL.#423)
        857               [NONAME] (forwarded to SHUNIMPL.#426)
        858               [NONAME] (forwarded to SHUNIMPL.#392)
        859      002A76A0 [NONAME]
        860      00019340 [NONAME]
        861               [NONAME] (forwarded to SHUNIMPL.#261)
        862      0024E880 [NONAME]
        863               [NONAME] (forwarded to SHUNIMPL.#262)
        864      00249290 [NONAME]
        865      002116F0 [NONAME]
        866      0005E8D0 [NONAME]
        867               [NONAME] (forwarded to SHUNIMPL.#263)
        868               [NONAME] (forwarded to SHUNIMPL.#264)
        869               [NONAME] (forwarded to SHUNIMPL.#384)
        870      000EE000 [NONAME]
        871      000E9E90 [NONAME]
        872               [NONAME] (forwarded to SHUNIMPL.#265)
        873      000DC830 [NONAME]
        874      00110C00 [NONAME]
        875      00110B20 [NONAME]
        876      00243B90 [NONAME]
        877      00243FD0 [NONAME]
        878      00243E40 [NONAME]
        880      0020FDD0 [NONAME]
        881      00293F40 [NONAME]
        882      002940A0 [NONAME]
        883      004E3750 [NONAME]
        884      00237BA0 [NONAME]
        885      0012EC70 [NONAME]
        886      002138E0 [NONAME]
        887      00262CF0 [NONAME]
        888      0029D2F0 [NONAME]
        889      001029E0 [NONAME]
        890      00102990 [NONAME]
        891      00151CF0 [NONAME]
        892      00222250 [NONAME]
        893      000C63E0 [NONAME]
        894      001F3E20 [NONAME]
        895      00149AC0 [NONAME]
        896      001F3DB0 [NONAME]
        897      002A2D10 [NONAME]
        898      00250B80 [NONAME]
        899      0014B2D0 [NONAME]
        900      000E9B20 [NONAME]
        901      00489640 [NONAME]
        902               [NONAME] (forwarded to SHUNIMPL.#473)
        903      000EDFC0 [NONAME]
        904      0014A520 [NONAME]
        905      0006D770 [NONAME]
        906      0014B2F0 [NONAME]
        907      00249110 [NONAME]
        909      0002C5C0 [NONAME]
        910      002290C0 [NONAME]
        911      0020B010 [NONAME]
        912      00231640 [NONAME]
        913      00232160 [NONAME]
        914      001F3CA0 [NONAME]
        915      000DF910 [NONAME]
        916      000C79A0 [NONAME]
        922      0029FA10 [NONAME]
        923      00020DE0 [NONAME]
        924      001F3D90 [NONAME]
        926      0025D1C0 [NONAME]
        927      00268F90 [NONAME]
        928      00291110 [NONAME]
        930      00120630 [NONAME]
        932      001F3EC0 [NONAME]
        933      001F3E90 [NONAME]
        938      00256B90 [NONAME]
        939      00033F10 [NONAME]
        940      001F3E30 [NONAME]
        943      0049A700 [NONAME]

  Summary

        A000 .data
        3000 .didat
       4C000 .pdata
      12C000 .rdata
       15000 .reloc
      DA5000 .rsrc
      5E4000 .text
        1000 .tls
Microsoft (R) COFF/PE Dumper Version 14.31.31106.2
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file user32.dll

File Type: DLL

  Section contains the following exports for USER32.dll

    00000000 characteristics
    559F30A6 time date stamp Thu Jul  9 19:40:38 2015
        0.00 version
        1502 ordinal base
        1201 number of functions
         938 number of names

    ordinal hint RVA      name

       1503    0 00030E20 ActivateKeyboardLayout
       1504    1 00033040 AddClipboardFormatListener
       1505    2 0004C560 AdjustWindowRect
       1506    3 000123C0 AdjustWindowRectEx
       1507    4 00084C50 AlignRects
       1508    5 0004C5C0 AllowForegroundActivation
       1509    6 00026580 AllowSetForegroundWindow
       1510    7 00080070 AnimateWindow
       1511    8 00080D50 AnyPopup
       1512    9 000827D0 AppendMenuA
       1513    A 0001D8B0 AppendMenuW
       1514    B 0004C5D0 ArrangeIconicWindows
       1515    C 00030B00 AttachThreadInput
       1516    D 00024D30 BeginDeferWindowPos
       1517    E 0002FDC0 BeginPaint
       1518    F 00033080 BlockInput
       1519   10 00029F70 BringWindowToTop
       1520   11 00082820 BroadcastSystemMessage
       1521   12 00082820 BroadcastSystemMessageA
       1522   13 00082850 BroadcastSystemMessageExA
       1523   14 0002E680 BroadcastSystemMessageExW
       1524   15 00015C40 BroadcastSystemMessageW
       1525   16 0002DD70 BuildReasonArray
       1526   17 000305B0 CalcMenuBar
       1527   18 000330B0 CalculatePopupWindowPosition
       1528   19 00083320 CallMsgFilter
       1529   1A 00083320 CallMsgFilterA
       1530   1B 000129D0 CallMsgFilterW
       1531   1C 000152D0 CallNextHookEx
       1532   1D 0004E0A0 CallWindowProcA
       1533   1E 0000F900 CallWindowProcW
       1534   1F 00057510 CancelShutdown
       1535   20 0004C5E0 CascadeChildWindows
       1536   21 00074E60 CascadeWindows
       1537   22 00030DD0 ChangeClipboardChain
       1538   23 00083430 ChangeDisplaySettingsA
       1539   24 00029FA0 ChangeDisplaySettingsExA
       1540   25 000238E0 ChangeDisplaySettingsExW
       1541   26 000573A0 ChangeDisplaySettingsW
       1542   27 00075E40 ChangeMenuA
       1543   28 00075EE0 ChangeMenuW
       1544   29 00025950 ChangeWindowMessageFilter
       1545   2A 000330F0 ChangeWindowMessageFilterEx
       1546   2B 00026FC0 CharLowerA
       1547   2C 00084940 CharLowerBuffA
       1548   2D 00026FD0 CharLowerBuffW
       1549   2E 00026C80 CharLowerW
       1555   2F 00024260 CharNextA
       1556   30 00084950 CharNextExA
       1557   31 00025980 CharNextW
       1558   32 00026C90 CharPrevA
       1559   33 00084960 CharPrevExA
       1560   34 0002EFC0 CharPrevW
       1561   35 000232A0 CharToOemA
       1562   36 0007B630 CharToOemBuffA
       1563   37 0007B680 CharToOemBuffW
       1564   38 0007B6E0 CharToOemW
       1565   39 00023E80 CharUpperA
       1566   3A 00084970 CharUpperBuffA
       1567   3B 00001210 CharUpperBuffW
       1568   3C 000232F0 CharUpperW
       1569   3D 0001FB40 CheckDBCSEnabledExt
       1570   3E 00002460 CheckDlgButton
       1571   3F 0001D430 CheckMenuItem
       1572   40 00002180 CheckMenuRadioItem
       1573   41 00033110 CheckProcessForClipboardAccess
       1574   42 00033120 CheckProcessSession
       1575   43 000019E0 CheckRadioButton
       1576   44 00033130 CheckWindowThreadDesktop
       1577   45 0004C610 ChildWindowFromPoint
       1578   46 00033140 ChildWindowFromPointEx
       1579   47 00047F20 CliImmSetHotKey
       1580   48 00019D50 ClientThreadSetup
       1581   49 0000BFE0 ClientToScreen
       1582   4A 00033160 ClipCursor
       1583   4B 00030920 CloseClipboard
       1584   4C 000306A0 CloseDesktop
       1585   4D 0004BDC0 CloseGestureInfoHandle
       1586   4E 0004F6E0 CloseTouchInputHandle
       1587   4F 0004C6A0 CloseWindow
       1588   50 00030790 CloseWindowStation
       1589   51 00023540 ConsoleControl
       1590   52 00033A80 ControlMagnification
       1591   53 0004ED70 CopyAcceleratorTableA
       1592   54 0002FF10 CopyAcceleratorTableW
       1593   55 00004AF0 CopyIcon
       1594   56 00005A40 CopyImage
       1595   57 0001FB00 CopyRect
       1596   58 00030D30 CountClipboardFormats
       1597   59 0004EDF0 CreateAcceleratorTableA
       1598   5A 00030B50 CreateAcceleratorTableW
       1599   5B 0002FF70 CreateCaret
       1600   5C 0002A6C0 CreateCursor
       1601   5D 00033180 CreateDCompositionHwndTarget
       1602   5E 0002F0A0 CreateDesktopA
       1603   5F 0002F0E0 CreateDesktopExA
       1604   60 00026690 CreateDesktopExW
       1605   61 00026650 CreateDesktopW
       1606   62 0004EE70 CreateDialogIndirectParamA
       1607   63 000180C0 CreateDialogIndirectParamAorW
       1608   64 00002710 CreateDialogIndirectParamW
       1609   65 0004EEA0 CreateDialogParamA
       1610   66 000182A0 CreateDialogParamW
       1611   67 0004EFB0 CreateIcon
       1612   68 0004F060 CreateIconFromResource
       1613   69 000052F0 CreateIconFromResourceEx
       1614   6A 00007260 CreateIconIndirect
       1615   6B 000751D0 CreateMDIWindowA
       1616   6C 00075250 CreateMDIWindowW
       1617   6D 00026FB0 CreateMenu
       1618   6E 00026E90 CreatePopupMenu
       1619   6F 0004DE20 CreateSystemThreads
       1620   70 00024DF0 CreateWindowExA
       1621   71 0000A9C0 CreateWindowExW
       1622   72 00025170 CreateWindowInBand
       1623   73 000259D0 CreateWindowInBandEx
       1624   74 00080DA0 CreateWindowIndirect
       1625   75 0002F1D0 CreateWindowStationA
       1626   76 00018420 CreateWindowStationW
       1627   77 0002E5B0 CsrBroadcastSystemMessageExW
       1628   78 000189D0 CtxInitUser32
       1629   79 000818D0 DdeAbandonTransaction
       1630   7A 0006ADA0 DdeAccessData
       1631   7B 0006AE50 DdeAddData
       1632   7C 000819A0 DdeClientTransaction
       1633   7D 0006B9B0 DdeCmpStringHandles
       1634   7E 00054E40 DdeConnect
       1635   7F 00054F40 DdeConnectList
       1636   80 0006AFC0 DdeCreateDataHandle
       1637   81 0006B9D0 DdeCreateStringHandleA
       1638   82 000175E0 DdeCreateStringHandleW
       1639   83 000551F0 DdeDisconnect
       1640   84 00055290 DdeDisconnectList
       1641   85 0004B140 DdeEnableCallback
       1642   86 0006B0F0 DdeFreeDataHandle
       1643   87 00019A00 DdeFreeStringHandle
       1644   88 0006B160 DdeGetData
       1645   89 00058540 DdeGetLastError
       1646   8A 00006AC0 DdeGetQualityOfService
       1647   8B 00058590 DdeImpersonateClient
       1648   8C 00058610 DdeInitializeA
       1649   8D 00025D60 DdeInitializeW
       1650   8E 0006B9F0 DdeKeepStringHandle
       1651   8F 00017390 DdeNameService
       1652   90 00081FD0 DdePostAdvise
       1653   91 00082280 DdeQueryConvInfo
       1654   92 000553A0 DdeQueryNextServer
       1655   93 0006BAB0 DdeQueryStringA
       1656   94 0006BAD0 DdeQueryStringW
       1657   95 000554F0 DdeReconnect
       1658   96 00006AC0 DdeSetQualityOfService
       1659   97 00082490 DdeSetUserHandle
       1660   98 0006B290 DdeUnaccessData
       1661   99 00019B20 DdeUninitialize
       1662   9A          DefDlgProcA (forwarded to NTDLL.NtdllDialogWndProc_A)
       1663   9B          DefDlgProcW (forwarded to NTDLL.NtdllDialogWndProc_W)
       1664   9C 000752D0 DefFrameProcA
       1665   9D 000291B0 DefFrameProcW
       1666   9E 00075300 DefMDIChildProcA
       1667   9F 00027430 DefMDIChildProcW
       1668   A0 0004E1D0 DefRawInputProc
       1669   A1          DefWindowProcA (forwarded to NTDLL.NtdllDefWindowProc_A)
       1670   A2          DefWindowProcW (forwarded to NTDLL.NtdllDefWindowProc_W)
       1671   A3 00023DB0 DeferWindowPos
       1672   A4 0004C6E0 DeferWindowPosAndBand
       1673   A5 00030800 DeleteMenu
       1674   A6 00027010 DeregisterShellHookWindow
       1675   A7 00003950 DestroyAcceleratorTable
       1676   A8 00026F20 DestroyCaret
       1677   A9 00024240 DestroyCursor
       1678   AA 00033200 DestroyDCompositionHwndTarget
       1679   AB 00024240 DestroyIcon
       1680   AC 00030A10 DestroyMenu
       1681   AD 0002E530 DestroyReasons
       1682   AE 00030610 DestroyWindow
       1683   AF 0004F090 DialogBoxIndirectParamA
       1684   B0 00028D30 DialogBoxIndirectParamAorW
       1685   B1 00028D00 DialogBoxIndirectParamW
       1686   B2 0004F0C0 DialogBoxParamA
       1687   B3 00028C50 DialogBoxParamW
       1688   B4 0002B760 DisableProcessWindowsGhosting
       1689   B5 000261E0 DispatchMessageA
       1690   B6 0000FA50 DispatchMessageW
       1691   B7 000252D0 DisplayConfigGetDeviceInfo
       1692   B8 000849F0 DisplayConfigSetDeviceInfo
       1693   B9 00057560 DisplayExitWindowsWarnings
       1694   BA 000719B0 DlgDirListA
       1695   BB 00053220 DlgDirListComboBoxA
       1696   BC 00053310 DlgDirListComboBoxW
       1697   BD 00071AA0 DlgDirListW
       1698   BE 00053370 DlgDirSelectComboBoxExA
       1699   BF 00053410 DlgDirSelectComboBoxExW
       1700   C0 00071B00 DlgDirSelectExA
       1701   C1 00071BB0 DlgDirSelectExW
       1702   C2 00033280 DoSoundConnect
       1703   C3 00033290 DoSoundDisconnect
       1704   C4 000332A0 DragDetect
       1705   C5 000332B0 DragObject
       1706   C6 000332C0 DrawAnimatedRects
       1707   C7 0007A820 DrawCaption
       1708   C8 00083460 DrawCaptionTempA
       1709   C9 000573D0 DrawCaptionTempW
       1710   CA 00002FD0 DrawEdge
       1711   CB 00001D10 DrawFocusRect
       1712   CC 00085BA0 DrawFrame
       1713   CD 00085E40 DrawFrameControl
       1714   CE 0002AE90 DrawIcon
       1715   CF 00022C50 DrawIconEx
       1716   D0 0002AE80 DrawMenuBar
       1717   D1 00075F80 DrawMenuBarTemp
       1718   D2 00076930 DrawStateA
       1719   D3 00025B50 DrawStateW
       1720   D4 00057A20 DrawTextA
       1721   D5 00057AA0 DrawTextExA
       1722   D6 0001B420 DrawTextExW
       1723   D7 0001B450 DrawTextW
       1724   D8 000270A0 DwmGetDxSharedSurface
       1725   D9 00033300 DwmGetRemoteSessionOcclusionEvent
       1726   DA 00033310 DwmGetRemoteSessionOcclusionState
       1727   DB 00033320 DwmKernelShutdown
       1728   DC 00033330 DwmKernelStartup
       1729   DD 0002ECB0 DwmLockScreenUpdates
       1730   DE 00033340 DwmValidateWindow
       1731   DF 00060AF0 EditWndProc
       1732   E0 00030BC0 EmptyClipboard
       1733   E1 00033350 EnableChildWindowDpiMessage
       1734   E2 0002A240 EnableMenuItem
       1735   E3 00033370 EnableMouseInPointer
       1736   E4 0002AD30 EnableScrollBar
       1737   E5 00026EA0 EnableSessionForMMCSS
       1738   E6 00026130 EnableWindow
       1739   E7 00025970 EndDeferWindowPos
       1740   E8 0002FEB0 EndDeferWindowPosEx
       1741   E9 0002A3D0 EndDialog
       1742   EA 000333A0 EndMenu
       1743   EB 0002FDE0 EndPaint
       1744   EC 00057960 EndTask
       1745   ED 0007BBE0 EnterReaderModeHelper
       1746   EE 00014A80 EnumChildWindows
       1747   EF 0002AE40 EnumClipboardFormats
       1748   F0 00016160 EnumDesktopWindows
       1749   F1 000203A0 EnumDesktopsA
       1750   F2 000203E0 EnumDesktopsW
       1751   F3 0001FB60 EnumDisplayDevicesA
       1752   F4 00023AC0 EnumDisplayDevicesW
       1753   F5 000300F0 EnumDisplayMonitors
       1754   F6 000206C0 EnumDisplaySettingsA
       1755   F7 000206E0 EnumDisplaySettingsExA
       1756   F8 000205A0 EnumDisplaySettingsExW
       1757   F9 00020580 EnumDisplaySettingsW
       1758   FA 0004BC30 EnumPropsA
       1759   FB 0004BC50 EnumPropsExA
       1760   FC 00023C50 EnumPropsExW
       1761   FD 0004BC70 EnumPropsW
       1762   FE 000152A0 EnumThreadWindows
       1763   FF 00020380 EnumWindowStationsA
       1764  100 000203C0 EnumWindowStationsW
       1765  101 00014A50 EnumWindows
       1766  102 0001F2F0 EqualRect
       1767  103 0007EE50 EvaluateProximityToPolygon
       1768  104 0007F3A0 EvaluateProximityToRect
       1769  105 00030150 ExcludeUpdateRgn
       1770  106 0002E6B0 ExitWindowsEx
       1771  107 000028C0 FillRect
       1772  108 0007AE50 FindWindowA
       1773  109 00021730 FindWindowExA
       1774  10A 0001D1D0 FindWindowExW
       1775  10B 00023300 FindWindowW
       1776  10C 0004C7F0 FlashWindow
       1777  10D 000333C0 FlashWindowEx
       1778  10E 00001D70 FrameRect
       1779  10F 000595F0 FreeDDElParam
       1780  110 000333D0 FrostCrashedWindow
       1781  111 00026970 GetActiveWindow
       1782  112 00083570 GetAltTabInfo
       1783  113 00083570 GetAltTabInfoA
       1784  114 000574B0 GetAltTabInfoW
       1785  115 00030760 GetAncestor
       1786  116 00025290 GetAppCompatFlags
       1787  117 00011F00 GetAppCompatFlags2
       1788  118 00021C60 GetAsyncKeyState
       1789  119 000333F0 GetAutoRotationState
       1790  11A 00033400 GetCIMSSM
       1791  11B 00023440 GetCapture
       1792  11C 00030B80 GetCaretBlinkTime
       1793  11D 00033410 GetCaretPos
       1794  11E 00020F40 GetClassInfoA
       1795  11F 000210E0 GetClassInfoExA
       1796  120 00015A30 GetClassInfoExW
       1797  121 000159E0 GetClassInfoW
       1798  122 00082BD0 GetClassLongA
       1799  123 00082C10 GetClassLongPtrA
       1800  124 00013990 GetClassLongPtrW
       1801  125 0000E530 GetClassLongW
       1802  126 000133E0 GetClassNameA
       1803  127 0001F910 GetClassNameW
       1804  128 00013B50 GetClassWord
       1805  129 0000BB00 GetClientRect
       1806  12A 00033420 GetClipCursor
       1807  12B 00033430 GetClipboardAccessToken
       1808  12C 0002ABA0 GetClipboardData
       1809  12D 000835A0 GetClipboardFormatNameA
       1810  12E 00002790 GetClipboardFormatNameW
       1811  12F 000308D0 GetClipboardOwner
       1812  130 000301A0 GetClipboardSequenceNumber
       1813  131 00033440 GetClipboardViewer
       1814  132 00033450 GetComboBoxInfo
       1815  133 00033460 GetCurrentInputMessageSource
       1816  134 00001CA0 GetCursor
       1817  135 00026D30 GetCursorFrameInfo
       1818  136 00033480 GetCursorInfo
       1819  137 00023420 GetCursorPos
       1820  138 0002FCF0 GetDC
       1821  139 00030560 GetDCEx
       1822  13A 000334A0 GetDesktopID
       1823  13B 00015E70 GetDesktopWindow
       1824  13C 0002AA60 GetDialogBaseUnits
       1825  13D 000334B0 GetDisplayAutoRotationPreferences
       1826  13E 00026630 GetDisplayConfigBufferSizes
       1827  13F 0001FD20 GetDlgCtrlID
       1828  140 00013AA0 GetDlgItem
       1829  141 00059F90 GetDlgItemInt
       1830  142 00082C50 GetDlgItemTextA
       1831  143 0002A500 GetDlgItemTextW
       1832  144 000307A0 GetDoubleClickTime
       1833  145 000237E0 GetDpiForMonitorInternal
       1834  146 000334F0 GetDpiMetrics
       1835  147 00022C40 GetFocus
       1836  148 00030010 GetForegroundWindow
       1837  149 00030C30 GetGUIThreadInfo
       1838  14A 00033500 GetGestureConfig
       1839  14B 0004C0D0 GetGestureExtraArgs
       1840  14C 0004C0F0 GetGestureInfo
       1841  14D 00033530 GetGuiResources
       1842  14E 00004AC0 GetIconInfo
       1843  14F 0004F1E0 GetIconInfoExA
       1844  150 00024560 GetIconInfoExW
       1845  151 0004C9F0 GetInputDesktop
       1846  152 00033570 GetInputLocaleInfo
       1847  153 00080EF0 GetInputState
       1848  154 00033580 GetInternalWindowPos
       1849  155 0004CA00 GetKBCodePage
       1850  156 00083640 GetKeyNameTextA
       1851  157 000574E0 GetKeyNameTextW
       1852  158 0001FA50 GetKeyState
       1853  159 00023110 GetKeyboardLayout
       1854  15A 000301D0 GetKeyboardLayoutList
       1855  15B 000836F0 GetKeyboardLayoutNameA
       1856  15C 00026EC0 GetKeyboardLayoutNameW
       1857  15D 000303C0 GetKeyboardState
       1858  15E 0002ADB0 GetKeyboardType
       1859  15F 00013630 GetLastActivePopup
       1860  160 00022FE0 GetLastInputInfo
       1861  161 000335B0 GetLayeredWindowAttributes
       1862  162 000335C0 GetListBoxInfo
       1863  163 00073AC0 GetMagnificationDesktopColorEffect
       1864  164 00073BA0 GetMagnificationDesktopMagnification
       1865  165 00033A90 GetMagnificationLensCtxInformation
       1866  166 000147F0 GetMenu
       1867  167 00030850 GetMenuBarInfo
       1868  168 00076000 GetMenuCheckMarkDimensions
       1869  169 00076180 GetMenuContextHelpId
       1870  16A 000243B0 GetMenuDefaultItem
       1871  16B 0004DEA0 GetMenuInfo
       1872  16C 0000CAA0 GetMenuItemCount
       1873  16D 00024E80 GetMenuItemID
       1874  16E 0001D5F0 GetMenuItemInfoA
       1875  16F 0001DAB0 GetMenuItemInfoW
       1876  170 000335E0 GetMenuItemRect
       1877  171 00027FB0 GetMenuState
       1878  172 00082CA0 GetMenuStringA
       1879  173 0001D4B0 GetMenuStringW
       1880  174 0001AA50 GetMessageA
       1881  175 00024740 GetMessageExtraInfo
       1882  176 00025A70 GetMessagePos
       1883  177 00025D50 GetMessageTime
       1884  178 0001F8C0 GetMessageW
       1885  179 0000B960 GetMonitorInfoA
       1886  17A 0000A7F0 GetMonitorInfoW
       1887  17B 000335F0 GetMouseMovePointsEx
       1888  17C 0005A9A0 GetNextDlgGroupItem
       1889  17D 00002600 GetNextDlgTabItem
       1890  17E 000309C0 GetOpenClipboardWindow
       1891  17F 0001CED0 GetParent
       1892  180 00023420 GetPhysicalCursorPos
       1893  181 00033610 GetPointerCursorId
       1894  182 00033620 GetPointerDevice
       1895  183 00033630 GetPointerDeviceCursors
       1896  184 00033640 GetPointerDeviceProperties
       1897  185 00033650 GetPointerDeviceRects
       1898  186 00033660 GetPointerDevices
       1899  187 00033670 GetPointerFrameArrivalTimes
       1900  188 0004EA40 GetPointerFrameInfo
       1901  189 00001FD0 GetPointerFrameInfoHistory
       1902  18A 0004EA90 GetPointerFramePenInfo
       1903  18B 0004EAD0 GetPointerFramePenInfoHistory
       1904  18C 0004EB10 GetPointerFrameTouchInfo
       1905  18D 0004EB50 GetPointerFrameTouchInfoHistory
       1906  18E 00001AE0 GetPointerInfo
       1907  18F 0004EB90 GetPointerInfoHistory
       1908  190 00033690 GetPointerInputTransform
       1909  191 0004EBE0 GetPointerPenInfo
       1910  192 0004EC30 GetPointerPenInfoHistory
       1911  193 0004EC80 GetPointerTouchInfo
       1912  194 0004ECD0 GetPointerTouchInfoHistory
       1913  195 000336A0 GetPointerType
       1914  196 000336C0 GetPriorityClipboardFormat
       1915  197 00027080 GetProcessDefaultLayout
       1916  198 000233F0 GetProcessDpiAwarenessInternal
       1917  199 0002FE70 GetProcessWindowStation
       1918  19A 0004CA20 GetProgmanWindow
       1919  19B 00020CC0 GetPropA
       1920  19C 0001B070 GetPropW
       1921  19D 0001AE40 GetQueueStatus
       1922  19E 0006A740 GetRawInputBuffer
       1923  19F 00033710 GetRawInputData
       1924  1A0 00082CF0 GetRawInputDeviceInfoA
       1925  1A1 0002B750 GetRawInputDeviceInfoW
       1926  1A2 00033730 GetRawInputDeviceList
       1927  1A3 00033740 GetRawPointerDeviceData
       1928  1A4 0002B7C0 GetReasonTitleFromReasonCode
       1929  1A5 00033750 GetRegisteredRawInputDevices
       1930  1A6 00030570 GetScrollBarInfo
       1931  1A7 00014160 GetScrollInfo
       1932  1A8 0002A2E0 GetScrollPos
       1933  1A9 00080F20 GetScrollRange
       1934  1AA 0004CA80 GetSendMessageReceiver
       1935  1AB 00024060 GetShellWindow
       1936  1AC 00024D60 GetSubMenu
       1937  1AD 0001A220 GetSysColor
       1938  1AE 000235E0 GetSysColorBrush
       1939  1AF 00030250 GetSystemMenu
       1940  1B0 000110A0 GetSystemMetrics
       1941  1B1 00057C40 GetTabbedTextExtentA
       1942  1B2 00057D40 GetTabbedTextExtentW
       1943  1B3 0002ED00 GetTaskmanWindow
       1944  1B4 00030470 GetThreadDesktop
       1945  1B5 00030530 GetTitleBarInfo
       1946  1B6 00033760 GetTopLevelWindow
       1947  1B7 0001D290 GetTopWindow
       1948  1B8 0004F8A0 GetTouchInputInfo
       1949  1B9 0004CD00 GetUnpredictedMessagePos
       1950  1BA 00015820 GetUpdateRect
       1951  1BB 000023F0 GetUpdateRgn
       1952  1BC 00033790 GetUpdatedClipboardFormats
       1953  1BD 00026980 GetUserObjectInformationA
       1954  1BE 00030300 GetUserObjectInformationW
       1955  1BF 0004CD10 GetUserObjectSecurity
       1956  1C0 0004CD50 GetWinStationInfo
       1957  1C1 00013DB0 GetWindow
       1958  1C2 000337B0 GetWindowBand
       1959  1C3 000337C0 GetWindowCompositionAttribute
       1960  1C4 000337D0 GetWindowCompositionInfo
       1961  1C5 0004CD60 GetWindowContextHelpId
       1962  1C6 00030280 GetWindowDC
       1963  1C7 00012780 GetWindowDPI
       1964  1C8 000337E0 GetWindowDisplayAffinity
       1965  1C9 000337F0 GetWindowFeedbackSetting
       1966  1CA 00011880 GetWindowInfo
       1967  1CB 0000EB70 GetWindowLongA
       1968  1CC 0000CAE0 GetWindowLongPtrA
       1969  1CD 0000EEF0 GetWindowLongPtrW
       1970  1CE 0000EC80 GetWindowLongW
       1971  1CF 00033800 GetWindowMinimizeRect
       1972  1D0 00082E10 GetWindowModuleFileName
       1973  1D1 00082E10 GetWindowModuleFileNameA
       1974  1D2 0004DD40 GetWindowModuleFileNameW
       1975  1D3 00030990 GetWindowPlacement
       1976  1D4 0000B310 GetWindowRect
       1977  1D5 0000E9C0 GetWindowRgn
       1978  1D6 000132D0 GetWindowRgnBox
       1979  1D7 00033810 GetWindowRgnEx
       1980  1D8 00013F30 GetWindowTextA
       1981  1D9 00082E50 GetWindowTextLengthA
       1982  1DA 000141E0 GetWindowTextLengthW
       1983  1DB 0000E2D0 GetWindowTextW
       1984  1DC 00014040 GetWindowThreadProcessId
       1985  1DD 00080FE0 GetWindowWord
       1986  1DE 00033820 GhostWindowFromHungWindow
       1987  1DF 0004CD70 GrayStringA
       1988  1E0 0004CDD0 GrayStringW
       1989  1E1 0002FE40 HideCaret
       1990  1E2 00033860 HiliteMenuItem
       1991  1E3 00033870 HungWindowFromGhostWindow
       1992  1E4 00083DA0 IMPGetIMEA
       1993  1E5 00083DF0 IMPGetIMEW
       1994  1E6 00083E40 IMPQueryIMEA
       1995  1E7 00083E80 IMPQueryIMEW
       1996  1E8 00083EC0 IMPSetIMEA
       1997  1E9 00083F10 IMPSetIMEW
       1998  1EA 000338A0 ImpersonateDdeClientWindow
       1999  1EB 0001F1B0 InSendMessage
       2000  1EC 0001E630 InSendMessageEx
       2003  1ED 00020F10 InflateRect
       2004  1EE 00002940 InitDManipHook
       2006  1EF 000338E0 InitializeInputDeviceInjection
       2007  1F0 00023220 InitializeLpkHooks
       2008  1F1 000338F0 InitializePointerDeviceInjection
       2009  1F2 00033900 InitializeTouchInjection
       2011  1F3 00033910 InjectDeviceInput
       2012  1F4 00033930 InjectKeyboardInput
       2013  1F5 00033940 InjectMouseInput
       2014  1F6 00033950 InjectPointerInput
       2015  1F7 00033960 InjectTouchInput
       2016  1F8 00082EA0 InsertMenuA
       2017  1F9 00082F20 InsertMenuItemA
       2018  1FA 0001D900 InsertMenuItemW
       2019  1FB 0001D500 InsertMenuW
       2020  1FC 0002B790 InternalGetWindowIcon
       2021  1FD 00023740 InternalGetWindowText
       2022  1FE 00009C50 IntersectRect
       2023  1FF 0002FC90 InvalidateRect
       2024  200 000308C0 InvalidateRgn
       2025  201 000865C0 InvertRect
       2026  202 00084980 IsCharAlphaA
       2027  203 00084990 IsCharAlphaNumericA
       2028  204 0002AEF0 IsCharAlphaNumericW
       2029  205 000849A0 IsCharAlphaW
       2030  206 000849B0 IsCharLowerA
       2031  207 000849C0 IsCharLowerW
       2032  208 000849D0 IsCharUpperA
       2033  209 000849E0 IsCharUpperW
       2034  20A 00013480 IsChild
       2035  20B 00033990 IsChildWindowDpiMessageEnabled
       2036  20C 0002FF40 IsClipboardFormatAvailable
       2037  20D 0005A7D0 IsDialogMessage
       2038  20E 0005A7D0 IsDialogMessageA
       2039  20F 00012020 IsDialogMessageW
       2040  210 0005A360 IsDlgButtonChecked
       2041  211 000265F0 IsGUIThread
       2042  212 00024750 IsHungAppWindow
       2043  213 0001F5D0 IsIconic
       2044  214 000247C0 IsImmersiveProcess
       2045  215 0002E320 IsInDesktopWindowBand
       2046  216 0000CA80 IsMenu
       2047  217 000339A0 IsMouseInPointerEnabled
       2048  218 0001F190 IsProcessDPIAware
       2049  219 0004D200 IsQueueAttached
       2050  21A 0001EB90 IsRectEmpty
       2051  21B 0007C400 IsSETEnabled
       2052  21C 00022BB0 IsServerSideWindow
       2053  21D 0000BF80 IsThreadDesktopComposited
       2528  21E 00022AE0 IsThreadMessageQueueAttached
       2054  21F 000339C0 IsTopLevelWindow
       2055  220 000339D0 IsTouchWindow
       2056  221 0001F200 IsWinEventHookInstalled
       2057  222 000150E0 IsWindow
       2058  223 000022E0 IsWindowArranged
       2059  224 000339E0 IsWindowBroadcastingDpiToChildren
       2060  225 0000E960 IsWindowEnabled
       2061  226 0000CBC0 IsWindowInDestroy
       2062  227 000231D0 IsWindowRedirectedForPrint
       2063  228 00020BC0 IsWindowUnicode
       2064  229 0001D070 IsWindowVisible
       2065  22A 0004E530 IsWow64Message
       2066  22B 0000C990 IsZoomed
       2067  22C 0002FE00 KillTimer
       2068  22D 0004F320 LoadAcceleratorsA
       2069  22E 00004840 LoadAcceleratorsW
       2070  22F 00002880 LoadBitmapA
       2071  230 00003600 LoadBitmapW
       2072  231 00004F00 LoadCursorA
       2073  232 000482E0 LoadCursorFromFileA
       2074  233 00048350 LoadCursorFromFileW
       2075  234 00006330 LoadCursorW
       2076  235 0002C9C0 LoadIconA
       2077  236 00005E70 LoadIconW
       2078  237 00004A60 LoadImageA
       2079  238 00005390 LoadImageW
       2080  239 0004D210 LoadKeyboardLayoutA
       2081  23A 0004D290 LoadKeyboardLayoutEx
       2082  23B 0002D730 LoadKeyboardLayoutW
       2083  23C 0002ED70 LoadLocalFonts
       2084  23D 0004DF40 LoadMenuA
       2085  23E 00004E00 LoadMenuIndirectA
       2086  23F 00004E00 LoadMenuIndirectW
       2087  240 00004D90 LoadMenuW
       2088  241 0002ECD0 LoadRemoteFonts
       2089  242 0004F3F0 LoadStringA
       2090  243 00023B90 LoadStringW
       2091  244 0004D2C0 LockSetForegroundWindow
       2092  245 00033A20 LockWindowStation
       2093  246 00030CA0 LockWindowUpdate
       2094  247 00033A30 LockWorkStation
       2095  248 00033A50 LogicalToPhysicalPoint
       2096  249 00033A40 LogicalToPhysicalPointForPerMonitorDPI
       2097  24A 0004F480 LookupIconIdFromDirectory
       2098  24B 00005150 LookupIconIdFromDirectoryEx
       2099  24C 000219E0 MBToWCSEx
       2100  24D 00020A20 MBToWCSExt
       2101  24E 00078200 MB_GetString
       2102  24F 0002A540 MapDialogRect
       2103  250 00083750 MapVirtualKeyA
       2104  251 000837B0 MapVirtualKeyExA
       2105  252 000574F0 MapVirtualKeyExW
       2106  253 00023E00 MapVirtualKeyW
       2107  254 0001E670 MapWindowPoints
       2108  255 00033AB0 MenuItemFromPoint
       2109  256 0004E550 MenuWindowProcA
       2110  257 0004E610 MenuWindowProcW
       2111  258 0004D2E0 MessageBeep
       2112  259 000788A0 MessageBoxA
       2113  25A 00078900 MessageBoxExA
       2114  25B 00078930 MessageBoxExW
       2115  25C 00078960 MessageBoxIndirectA
       2116  25D 00078B00 MessageBoxIndirectW
       2117  25E 00078BC0 MessageBoxTimeoutA
       2118  25F 00078D20 MessageBoxTimeoutW
       2119  260 00078E00 MessageBoxW
       2120  261 00082F90 ModifyMenuA
       2121  262 0002AAD0 ModifyMenuW
       2122  263 00008BA0 MonitorFromPoint
       2123  264 00009990 MonitorFromRect
       2124  265 0000E810 MonitorFromWindow
       2125  266 00030220 MoveWindow
       2126  267 0001EE80 MsgWaitForMultipleObjects
       2127  268 0001A260 MsgWaitForMultipleObjectsEx
       2128  269 0004D300 NotifyOverlayWindow
       2129  26A 0001ED60 NotifyWinEvent
       2130  26B 0007B750 OemKeyScan
       2131  26C 0007B7D0 OemToCharA
       2132  26D 0007B820 OemToCharBuffA
       2133  26E 0007B870 OemToCharBuffW
       2134  26F 0007B8C0 OemToCharW
       2135  270 00013960 OffsetRect
       2136  271 0002B6C0 OpenClipboard
       2137  272 00024270 OpenDesktopA
       2138  273 000242E0 OpenDesktopW
       2139  274 0004D320 OpenIcon
       2140  275 00033B00 OpenInputDesktop
       2141  276 00033B10 OpenThreadDesktop
       2142  277 000187A0 OpenWindowStationA
       2143  278 00018800 OpenWindowStationW
       2144  279 000596B0 PackDDElParam
       2145  27A 0007F4D0 PackTouchHitTestingProximityEvaluation
       2146  27B 0007A9A0 PaintDesktop
       2147  27C 00030B20 PaintMenuBar
       2148  27D 00033B20 PaintMonitor
       2149  27E 0001A4C0 PeekMessageA
       2150  27F 0001A5F0 PeekMessageW
       2151  280 00033B40 PhysicalToLogicalPoint
       2152  281 00033B30 PhysicalToLogicalPointForPerMonitorDPI
       2153  282 00024900 PostMessageA
       2154  283 000170A0 PostMessageW
       2155  284 000265A0 PostQuitMessage
       2156  285 00024880 PostThreadMessageA
       2157  286 00022B00 PostThreadMessageW
       2158  287 00033B50 PrintWindow
       2159  288 0006A600 PrivateExtractIconExA
       2160  289 00018A40 PrivateExtractIconExW
       2161  28A 0006A690 PrivateExtractIconsA
       2162  28B 00019440 PrivateExtractIconsW
       2163  28C 0002B770 PrivateRegisterICSProc
       2164  28D 00008DF0 PtInRect
       2165  28E 00033B80 QueryBSDRWindow
       2166  28F 00025D20 QueryDisplayConfig
       2167  290 00033BC0 QuerySendMessage
       2168  291 0007C990 RIMAddInputObserver
       2169  292 0007C9A0 RIMAreSiblingDevices
       2170  293 0007C9A0 RIMDeviceIoControl
       2171  294 0002FA90 RIMFreeInputBuffer
       2172  295 0007C9A0 RIMGetDevicePreparsedData
       2173  296 0007C9B0 RIMGetDevicePreparsedDataLockfree
       2174  297 0007C9A0 RIMGetDeviceProperties
       2175  298 0007C9C0 RIMObserveNextInput
       2176  299 0007C9A0 RIMOnPnpNotification
       2177  29A 0007C9A0 RIMOnTimerNotification
       2178  29B 0007C9A0 RIMReadInput
       2179  29C 0007C9A0 RIMRegisterForInput
       2180  29D 0007C9D0 RIMRemoveInputObserver
       2181  29E 0007C9A0 RIMSetTestModeStatus
       2182  29F 0007C9A0 RIMUnregisterForInput
       2183  2A0 0007C9E0 RIMUpdateInputObserverRegistration
       2184  2A1 00033BD0 RealChildWindowFromPoint
       2185  2A2 00083890 RealGetWindowClass
       2186  2A3 00083890 RealGetWindowClassA
       2187  2A4 0001FE10 RealGetWindowClassW
       2188  2A5 0007C7A0 ReasonCodeNeedsBugID
       2189  2A6 0007C7B0 ReasonCodeNeedsComment
       2190  2A7 0002B8A0 RecordShutdownReason
       2191  2A8 0002FD80 RedrawWindow
       2192  2A9 00033BF0 RegisterBSDRWindow
       2193  2AA 00021310 RegisterClassA
       2194  2AB 00083010 RegisterClassExA
       2195  2AC 00008E20 RegisterClassExW
       2196  2AD 00008F30 RegisterClassW
       2197  2AE 000216D0 RegisterClipboardFormatA
       2198  2AF 00022C00 RegisterClipboardFormatW
       2199  2B0 0002E850 RegisterDManipHook
       2200  2B1 000256A0 RegisterDeviceNotificationA
       2201  2B2 000256A0 RegisterDeviceNotificationW
       2202  2B3 00033C20 RegisterErrorReportingDialog
       2203  2B4 0004D430 RegisterFrostWindow
       2204  2B5 0002B7A0 RegisterGhostWindow
       2205  2B6 00033C30 RegisterHotKey
       2206  2B7 00026F80 RegisterLogonProcess
       2207  2B8 00033C40 RegisterManipulationThread
       2208  2B9 00026470 RegisterMessagePumpHook
       2209  2BA 00033C50 RegisterPointerDeviceNotifications
       2210  2BB 0004ED20 RegisterPointerInputTarget
       2211  2BC 00026150 RegisterPowerSettingNotification
       2212  2BD 00033C70 RegisterRawInputDevices
       2213  2BE 00033C80 RegisterServicesProcess
       2214  2BF 00033C90 RegisterSessionPort
       2215  2C0 00026F50 RegisterShellHookWindow
       2216  2C1 0007ACC0 RegisterSuspendResumeNotification
       2217  2C2 0002AEC0 RegisterSystemThread
       2218  2C3 00033CB0 RegisterTasklist
       2219  2C4 00033CC0 RegisterTouchHitTestingWindow
       2220  2C5 00027040 RegisterTouchWindow
       2221  2C6 0002E910 RegisterUserApiHook
       2222  2C7 000216D0 RegisterWindowMessageA
       2223  2C8 00022C00 RegisterWindowMessageW
       2224  2C9 00026CC0 ReleaseCapture
       2225  2CA 000081F0 ReleaseDC
       2226  2CB 00033CF0 ReleaseDwmHitTestWaiters
       2227  2CC 00033D40 RemoveClipboardFormatListener
       2228  2CD 00030BE0 RemoveMenu
       2229  2CE 00083940 RemovePropA
       2230  2CF 00021E60 RemovePropW
       2231  2D0 00024780 ReplyMessage
       2232  2D1 00033D60 ResolveDesktopForWOW
       2233  2D2 00059730 ReuseDDElParam
       2234  2D3 0000E0A0 ScreenToClient
       2235  2D4 000753D0 ScrollChildren
       2236  2D5 00022100 ScrollDC
       2237  2D6 0004D490 ScrollWindow
       2238  2D7 00024790 ScrollWindowEx
       2239  2D8 00083050 SendDlgItemMessageA
       2240  2D9 00001A90 SendDlgItemMessageW
       2241  2DA 00083F60 SendIMEMessageExA
       2242  2DB 00083FB0 SendIMEMessageExW
       2243  2DC 00030460 SendInput
       2244  2DD 000149C0 SendMessageA
       2245  2DE 000839D0 SendMessageCallbackA
       2246  2DF 0001F970 SendMessageCallbackW
       2247  2E0 00024130 SendMessageTimeoutA
       2248  2E1 0001CBC0 SendMessageTimeoutW
       2249  2E2 0000F4B0 SendMessageW
       2250  2E3 00029A50 SendNotifyMessageA
       2251  2E4 00015F30 SendNotifyMessageW
       2252  2E5 00030A40 SetActiveWindow
       2253  2E6 000300E0 SetCapture
       2254  2E7 00026F30 SetCaretBlinkTime
       2255  2E8 00026C60 SetCaretPos
       2256  2E9 00083AA0 SetClassLongA
       2257  2EA 00083AC0 SetClassLongPtrA
       2258  2EB 0002B620 SetClassLongPtrW
       2259  2EC 0002AE70 SetClassLongW
       2260  2ED 00033DF0 SetClassWord
       2261  2EE 0002EDD0 SetClipboardData
       2262  2EF 00030DE0 SetClipboardViewer
       2263  2F0 0002FDD0 SetCoalescableTimer
       2264  2F1 0002FDF0 SetCursor
       2265  2F2 00033E20 SetCursorContents
       2266  2F3 00026E30 SetCursorPos
       2267  2F4 0002FA90 SetDebugErrorLevel
       2268  2F5 0004D4F0 SetDeskWallpaper
       2269  2F6 00033E30 SetDisplayAutoRotationPreferences
       2270  2F7 00084A10 SetDisplayConfig
       2271  2F8 00001B30 SetDlgItemInt
       2272  2F9 000830A0 SetDlgItemTextA
       2273  2FA 00017070 SetDlgItemTextW
       2274  2FB 0004D510 SetDoubleClickTime
       2275  2FC 00033E70 SetFeatureReportResponse
       2276  2FD 00030160 SetFocus
       2277  2FE 00026C50 SetForegroundWindow
       2278  2FF 00033E80 SetGestureConfig
       2279  300 00033EC0 SetImmersiveBackgroundWindow
       2280  301 00033ED0 SetInternalWindowPos
       2281  302 00030B30 SetKeyboardState
       2282  303 0007B920 SetLastErrorEx
       2283  304 00033EE0 SetLayeredWindowAttributes
       2284  305 00073CD0 SetMagnificationDesktopColorEffect
       2285  306 00073DA0 SetMagnificationDesktopMagnification
       2286  307 00033AA0 SetMagnificationLensCtxInformation
       2287  308 0004ED40 SetManipulationInputTarget
       2288  309 00026F60 SetMenu
       2289  30A 00033F10 SetMenuContextHelpId
       2290  30B 00030C60 SetMenuDefaultItem
       2291  30C 000761A0 SetMenuInfo
       2292  30D 000761E0 SetMenuItemBitmaps
       2293  30E 000830D0 SetMenuItemInfoA
       2294  30F 0001D580 SetMenuItemInfoW
       2295  310 0004EA30 SetMessageExtraInfo
       2296  311 00006AC0 SetMessageQueue
       2297  312 00033F30 SetMirrorRendering
       2298  313 000303B0 SetParent
       2299  314 0004D530 SetPhysicalCursorPos
       2300  315 00026410 SetProcessDPIAware
       2301  316 0004D540 SetProcessDefaultLayout
       2302  317 00008BE0 SetProcessDpiAwarenessInternal
       2303  318 00033F70 SetProcessRestrictionExemption
       2304  319 000306C0 SetProcessWindowStation
       2305  31A 0004D560 SetProgmanWindow
       2306  31B 00083BF0 SetPropA
       2307  31C 00021FF0 SetPropW
       2308  31D 0001F940 SetRect
       2309  31E 0001FB20 SetRectEmpty
       2310  31F 0001F790 SetScrollInfo
       2311  320 00002740 SetScrollPos
       2312  321 0001F700 SetScrollRange
       2313  322 0004D570 SetShellWindow
       2314  323 00033F90 SetShellWindowEx
       2315  324 00027060 SetSysColors
       2316  325 0007B930 SetSysColorsTemp
       2317  326 0007AD20 SetSystemCursor
       2318  327 00030CB0 SetSystemMenu
       2319  328 0002ECA0 SetTaskmanWindow
       2320  329 00030550 SetThreadDesktop
       2321  32A 00033FD0 SetThreadInputBlocked
       2322  32B 00022590 SetTimer
       2323  32C 00033F40 SetUserObjectInformationA
       2324  32D 00033F40 SetUserObjectInformationW
       2325  32E 0002EA80 SetUserObjectSecurity
       2326  32F 00023F80 SetWinEventHook
       2327  330 00034000 SetWindowBand
       2328  331 00034010 SetWindowCompositionAttribute
       2329  332 00034020 SetWindowCompositionTransition
       2330  333 0004D5D0 SetWindowContextHelpId
       2331  334 00034030 SetWindowDisplayAffinity
       2332  335 00034040 SetWindowFeedbackSetting
       2333  336 00026CD0 SetWindowLongA
       2334  337 000161F0 SetWindowLongPtrA
       2335  338 00014640 SetWindowLongPtrW
       2336  339 00010F30 SetWindowLongW
       2337  33A 00030A60 SetWindowPlacement
       2338  33B 0002FE90 SetWindowPos
       2339  33C 00014560 SetWindowRgn
       2340  33D 0007AD80 SetWindowRgnEx
       2341  33E 0002EA00 SetWindowStationUser
       2342  33F 00083140 SetWindowTextA
       2343  340 000148A0 SetWindowTextW
       2344  341 00030AC0 SetWindowWord
       2345  342 0004C530 SetWindowsHookA
       2346  343 000027A0 SetWindowsHookExA
       2347  344 00023610 SetWindowsHookExW
       2348  345 0004C550 SetWindowsHookW
       2349  346 0002FEA0 ShowCaret
       2350  347 00027020 ShowCursor
       2351  348 0002AE20 ShowOwnedPopups
       2352  349 00030020 ShowScrollBar
       2353  34A 0004D620 ShowStartGlass
       2354  34B 00034080 ShowSystemCursor
       2355  34C 000301C0 ShowWindow
       2356  34D 00030DF0 ShowWindowAsync
       2357  34E 0002E1F0 ShutdownBlockReasonCreate
       2358  34F 000340B0 ShutdownBlockReasonDestroy
       2359  350 000340A0 ShutdownBlockReasonQuery
       2360  351 000340C0 SignalRedirectionStartComplete
       2361  352 00033250 SkipPointerFrameMessages
       2362  353 00079440 SoftModalMessageBox
       2363  354 000340E0 SoundSentry
       2364  355 00024A80 SubtractRect
       2365  356 0004D6C0 SwapMouseButton
       2366  357 00027000 SwitchDesktop
       2367  358 00027090 SwitchDesktopWithFade
       2368  359 000026F0 SwitchToThisWindow
       2369  35A 000108A0 SystemParametersInfoA
       2370  35B 0001E1A0 SystemParametersInfoW
       2371  35C 00057F30 TabbedTextOutA
       2372  35D 00058040 TabbedTextOutW
       2373  35E 0004D6E0 TileChildWindows
       2374  35F 000756D0 TileWindows
       2375  360 0004D710 ToAscii
       2376  361 0004D790 ToAsciiEx
       2377  362 0007ADC0 ToUnicode
       2378  363 00025900 ToUnicodeEx
       2379  364 000309F0 TrackMouseEvent
       2380  365 00076270 TrackPopupMenu
       2381  366 00034110 TrackPopupMenuEx
       2382  367 0004D900 TranslateAccelerator
       2383  368 0004D900 TranslateAcceleratorA
       2384  369 00022200 TranslateAcceleratorW
       2385  36A 00075AA0 TranslateMDISysAccel
       2386  36B 000136A0 TranslateMessage
       2387  36C 000225B0 TranslateMessageEx
       2388  36D 00030C90 UnhookWinEvent
       2389  36E 0004D990 UnhookWindowsHook
       2390  36F 00030340 UnhookWindowsHookEx
       2391  370 00022130 UnionRect
       2392  371 0004D9B0 UnloadKeyboardLayout
       2393  372 00034160 UnlockWindowStation
       2394  373 000597F0 UnpackDDElParam
       2395  374 00020F70 UnregisterClassA
       2396  375 0000B1C0 UnregisterClassW
       2397  376 00026AB0 UnregisterDeviceNotification
       2398  377 00034170 UnregisterHotKey
       2399  378 000269E0 UnregisterMessagePumpHook
       2400  379 0004ED60 UnregisterPointerInputTarget
       2401  37A 00026940 UnregisterPowerSettingNotification
       2402  37B 00034180 UnregisterSessionPort
       2403  37C 0007AE10 UnregisterSuspendResumeNotification
       2404  37D 0007AE40 UnregisterTouchWindow
       2405  37E 00034190 UnregisterUserApiHook
       2406  37F 000341A0 UpdateDefaultDesktopThumbnail
       2407  380 000268D0 UpdateLayeredWindow
       2408  381 00027160 UpdateLayeredWindowIndirect
       2409  382 0002C9F0 UpdatePerUserSystemParameters
       2410  383 0000CA00 UpdateWindow
       2411  384 000341F0 UpdateWindowInputSinkHints
       2412  385 00034200 UpdateWindowTransform
       2413  386 00008E50 User32InitializeImmEntryTable
       2414  387 00009D90 UserClientDllInitialize
       2415  388 00034210 UserHandleGrantAccess
       2416  389 00058090 UserLpkPSMTextOut
       2417  38A 000582A0 UserLpkTabbedTextOut
       2418  38B 0002AE10 UserRealizePalette
       2419  38C 0004D9E0 UserRegisterWowHandlers
       2420  38D 00034310 VRipOutput
       2421  38E 00034310 VTagOutput
       2422  38F 00030910 ValidateRect
       2423  390 00002540 ValidateRgn
       2424  391 00083C90 VkKeyScanA
       2425  392 00083CF0 VkKeyScanExA
       2426  393 00026AF0 VkKeyScanExW
       2427  394 00026DC0 VkKeyScanW
       2428  395 000208E0 WCSToMBEx
       2429  396 00084000 WINNLSEnableIME
       2430  397 00084050 WINNLSGetEnableStatus
       2431  398 00034310 WINNLSGetIMEHotkey
       2432  399 00026DE0 WaitForInputIdle
       2433  39A 00034260 WaitForRedirectionStartComplete
       2434  39B 0002FD10 WaitMessage
       2435  39C 000297C0 WinHelpA
       2436  39D 00029710 WinHelpW
       2437  39E 00024250 WindowFromDC
       2438  39F 00034270 WindowFromPhysicalPoint
       2439  3A0 0002FD90 WindowFromPoint
       2440  3A1 0007FC50 _UserTestTokenForInteractive
       2441  3A2 000A2640 gSharedInfo
       2442  3A3 0008D330 gapfnScSendMessage
       2443  3A4 0007B5E0 keybd_event
       2444  3A5 00026B40 mouse_event
       2445  3A6 00022610 wsprintfA
       2446  3A7 0002B1D0 wsprintfW
       2447  3A8 00022640 wvsprintfA
       2448  3A9 0002B200 wvsprintfW
       1502      0004FAF0 [NONAME]
       1550      0007C870 [NONAME]
       1551      0007C960 [NONAME]
       1552      0007C820 [NONAME]
       1553      0007C7C0 [NONAME]
       1554      0007C900 [NONAME]
       2001      00073E10 [NONAME]
       2002      00073C30 [NONAME]
       2005      00033DE0 [NONAME]
       2010      000340D0 [NONAME]
       2503      000331F0 [NONAME]
       2504      00034140 [NONAME]
       2505      00033830 [NONAME]
       2506      0004C340 [NONAME]
       2507      00033DB0 [NONAME]
       2508      00033B70 [NONAME]
       2509      00033030 [NONAME]
       2510      00033360 [NONAME]
       2511      00033E60 [NONAME]
       2512      000334C0 [NONAME]
       2513      00033D90 [NONAME]
       2514      00026FE0 [NONAME]
       2515      0002BD80 [NONAME]
       2516      000331E0 [NONAME]
       2517      00033780 [NONAME]
       2518      00018EE0 [NONAME]
       2519      00033380 [NONAME]
       2520      000339B0 [NONAME]
       2521      000336E0 [NONAME]
       2522      00033DC0 [NONAME]
       2523      0001F320 [NONAME]
       2524      0004BCC0 [NONAME]
       2525      0002E4F0 [NONAME]
       2526      0004BC90 [NONAME]
       2527      0002E9D0 [NONAME]
       2529      00033220 [NONAME]
       2530      00034230 [NONAME]
       2531      00033DD0 [NONAME]
       2532      00033E50 [NONAME]
       2533      000330D0 [NONAME]
       2534      00033970 [NONAME]
       2535      00080E40 [NONAME]
       2536      00015610 [NONAME]
       2537      00033D70 [NONAME]
       2538      000339F0 [NONAME]
       2539      00033850 [NONAME]
       2540      000027C0 [NONAME]
       2541      000336F0 [NONAME]
       2542      00033CA0 [NONAME]
       2544      00033390 [NONAME]
       2545      00033600 [NONAME]
       2546      00033CD0 [NONAME]
       2547      00011060 [NONAME]
       2548      000336B0 [NONAME]
       2549      00033F50 [NONAME]
       2550      00033170 [NONAME]
       2551      00033D50 [NONAME]
       2552      0004D450 [NONAME]
       2553      0004D880 [NONAME]
       2554      0004D360 [NONAME]
       2555      00086B20 [NONAME]
       2556      00033D80 [NONAME]
       2557      00034120 [NONAME]
       2558      00034130 [NONAME]
       2559      0002FC20 [NONAME]
       2560      00001C10 [NONAME]
       2561      0002F240 [NONAME]
       2562      0004D1F0 [NONAME]
       2563      00033150 [NONAME]
       2564      0002ED50 [NONAME]
       2566      00033FF0 [NONAME]
       2567      0002ED90 [NONAME]
       2568      000024A0 [NONAME]
       2569      0004CA10 [NONAME]
       2570      0004D580 [NONAME]
       2571      00033E00 [NONAME]
       2572      0001EC40 [NONAME]
       2573      00013290 [NONAME]
       2574      00020DF0 [NONAME]
       2575      0004C830 [NONAME]
       2576      00033E10 [NONAME]
       2577      00026B10 [NONAME]
       2578      00033AE0 [NONAME]
       2579      00034060 [NONAME]
       2580      00010FF0 [NONAME]
       2581      00026B30 [NONAME]
       2582      00022600 [NONAME]
       2700      0004C9C0 [NONAME]
       2702      0002EDB0 [NONAME]

  Summary

        2000 .data
        1000 .didat
        A000 .pdata
       18000 .rdata
        1000 .reloc
       9F000 .rsrc
       88000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\userenv.dll

File Type: DLL

  Section contains the following exports for USERENV.dll

    00000000 characteristics
    5F73FC88 time date stamp Tue Sep 29 20:33:28 2020
        0.00 version
         104 ordinal base
         116 number of functions
          59 number of names

    ordinal hint RVA      name

        106    0 0000E2E0 AreThereVisibleLogoffScripts
        107    1 0000E2F0 AreThereVisibleShutdownScripts
        108    2 00001140 CreateAppContainerProfile
        109    3 00003270 CreateEnvironmentBlock
        110    4 0000ED60 CreateProfile
        111    5 000010F0 DeleteAppContainerProfile
        112    6 0000FD20 DeleteProfileA
        113    7 0000F220 DeleteProfileW
        114    8 000032C0 DeriveAppContainerSidFromAppContainerName
        115    9 000010A0 DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName
        116    A 00003240 DestroyEnvironmentBlock
        117    B 000031C0 DllCanUnloadNow
        118    C 00003090 DllGetClassObject
        119    D 000107E0 DllRegisterServer
        120    E 00010820 DllUnregisterServer
        121    F 000033E0 EnterCriticalPolicySection
        123   10 0000FE30 ExpandEnvironmentStringsForUserA
        124   11 00003190 ExpandEnvironmentStringsForUserW
        125   12 0000E300 ForceSyncFgPolicy
        126   13 0000E310 FreeGPOListA
        127   14 0000E320 FreeGPOListW
        128   15 0000E330 GenerateGPNotification
        129   16 0000FF50 GetAllUsersProfileDirectoryA
        130   17 000100B0 GetAllUsersProfileDirectoryW
        131   18 00002FE0 GetAppContainerFolderPath
        132   19 00003120 GetAppContainerRegistryLocation
        133   1A 0000E340 GetAppliedGPOListA
        134   1B 0000E350 GetAppliedGPOListW
        136   1C 000100D0 GetDefaultUserProfileDirectoryA
        138   1D 00010230 GetDefaultUserProfileDirectoryW
        140   1E 0000E360 GetGPOListA
        141   1F 0000E370 GetGPOListW
        142   20 0000E380 GetNextFgPolicyRefreshInfo
        143   21 0000E390 GetPreviousFgPolicyRefreshInfo
        144   22 00002810 GetProfileType
        145   23 00010250 GetProfilesDirectoryA
        146   24 000033A0 GetProfilesDirectoryW
        147   25 000103B0 GetUserProfileDirectoryA
        148   26 000013A0 GetUserProfileDirectoryW
        149   27 0000E3A0 HasPolicyForegroundProcessingCompleted
        150   28 000033D0 LeaveCriticalPolicySection
        151   29 0000F6B0 LoadProfileExtender
        152   2A 00010520 LoadUserProfileA
        153   2B 00001820 LoadUserProfileW
        154   2C 0000E800 ProcessGroupPolicyCompleted
        155   2D 0000E850 ProcessGroupPolicyCompletedEx
        156   2E 0000E3B0 RefreshPolicy
        157   2F 0000E3C0 RefreshPolicyEx
        158   30 00003380 RegisterGPNotification
        159   31 0000E8B0 RsopAccessCheckByType
        160   32 0000E970 RsopFileAccessCheck
        105   33 0000E2D0 RsopLoggingEnabled
        161   34 0000E9E0 RsopResetPolicySettingStatus
        162   35 0000EA30 RsopSetPolicySettingStatus
        163   36 00003390 UnloadProfileExtender
        164   37 000016D0 UnloadUserProfile
        165   38 000033C0 UnregisterGPNotification
        166   39 0000E3D0 WaitForMachinePolicyForegroundProcessing
        167   3A 0000E3E0 WaitForUserPolicyForegroundProcessing
        104      0000E6D0 [NONAME]
        122      0000E710 [NONAME]
        135      000113E0 [NONAME]
        137      0000E5B0 [NONAME]
        139      0000E610 [NONAME]
        175      000111C0 [NONAME]
        202      0000D5C0 [NONAME]
        203      0000D190 [NONAME]
        206      0000E580 [NONAME]
        207      000059C0 [NONAME]
        208      0000F7B0 [NONAME]
        209      00003690 [NONAME]
        210      0000EAA0 [NONAME]
        211      0000E7C0 [NONAME]
        212      00003300 [NONAME]
        213      00001100 [NONAME]
        214      000034D0 [NONAME]
        217      000015F0 [NONAME]
        218      0000E770 [NONAME]
        219      0000D840 [NONAME]

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        7000 .rdata
        1000 .reloc
        3000 .rsrc
       11000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\version.dll

File Type: DLL

  Section contains the following exports for VERSION.dll

    00000000 characteristics
    559F3095 time date stamp Thu Jul  9 19:40:21 2015
        0.00 version
           1 ordinal base
          17 number of functions
          17 number of names

    ordinal hint RVA      name

          1    0 00001DB0 GetFileVersionInfoA
          2    1 00002160 GetFileVersionInfoByHandle
          3    2 00001DC0 GetFileVersionInfoExA
          4    3 00001040 GetFileVersionInfoExW
          5    4 00001010 GetFileVersionInfoSizeA
          6    5 00001DD0 GetFileVersionInfoSizeExA
          7    6 00001050 GetFileVersionInfoSizeExW
          8    7 00001060 GetFileVersionInfoSizeW
          9    8 00001070 GetFileVersionInfoW
         10    9 00001DE0 VerFindFileA
         11    A 00002330 VerFindFileW
         12    B 00001DF0 VerInstallFileA
         13    C 00003020 VerInstallFileW
         14    D          VerLanguageNameA (forwarded to KERNEL32.VerLanguageNameA)
         15    E          VerLanguageNameW (forwarded to KERNEL32.VerLanguageNameW)
         16    F 00001020 VerQueryValueA
         17   10 00001030 VerQueryValueW

  Summary

        1000 .data
        1000 .pdata
        2000 .rdata
        1000 .reloc
        1000 .rsrc
        3000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\winhttp.dll

File Type: DLL

  Section contains the following exports for WINHTTP.dll

    00000000 characteristics
    5C5A3D83 time date stamp Tue Feb  5 17:50:59 2019
        0.00 version
           1 ordinal base
          54 number of functions
          54 number of names

    ordinal hint RVA      name

          1    0 00073EA0 DllCanUnloadNow
          2    1 00073EC0 DllGetClassObject
          3    2 00067080 Private1
          4    3 000371B0 SvchostPushServiceGlobals
          5    4 00017360 WinHttpAddRequestHeaders
          6    5 000371C0 WinHttpAutoProxySvcMain
          7    6 00041C80 WinHttpCheckPlatform
          8    7 00015860 WinHttpCloseHandle
          9    8 00019550 WinHttpConnect
         10    9 00069590 WinHttpConnectionDeleteProxyInfo
         11    A 00069610 WinHttpConnectionFreeNameList
         12    B 00069660 WinHttpConnectionFreeProxyInfo
         13    C 000696B0 WinHttpConnectionFreeProxyList
         14    D 00069700 WinHttpConnectionGetNameList
         15    E 00069760 WinHttpConnectionGetProxyInfo
         16    F 000697C0 WinHttpConnectionGetProxyList
         17   10 00069820 WinHttpConnectionSetProxyInfo
         18   11 00007530 WinHttpCrackUrl
         19   12 00024CA0 WinHttpCreateProxyResolver
         20   13 00006CA0 WinHttpCreateUrl
         21   14 0006A4D0 WinHttpDetectAutoProxyConfigUrl
         22   15 000305A0 WinHttpFreeProxyResult
         23   16 00025DE0 WinHttpGetDefaultProxyConfiguration
         24   17 000255D0 WinHttpGetIEProxyConfigForCurrentUser
         25   18 00024330 WinHttpGetProxyForUrl
         26   19 00024ED0 WinHttpGetProxyForUrlEx
         27   1A 0006A730 WinHttpGetProxyResult
         28   1B 0006A8A0 WinHttpGetTunnelSocket
         29   1C 0001BC40 WinHttpOpen
         30   1D 00019C10 WinHttpOpenRequest
         31   1E 00068410 WinHttpProbeConnectivity
         32   1F 0006AE90 WinHttpQueryAuthSchemes
         33   20 000268D0 WinHttpQueryDataAvailable
         34   21 00016D90 WinHttpQueryHeaders
         35   22 00001900 WinHttpQueryOption
         36   23 00014200 WinHttpReadData
         37   24 00018C80 WinHttpReceiveResponse
         38   25 000352A0 WinHttpResetAutoProxy
         39   26 00068480 WinHttpSaveProxyCredentials
         40   27 00018330 WinHttpSendRequest
         41   28 0006B070 WinHttpSetCredentials
         42   29 00069090 WinHttpSetDefaultProxyConfiguration
         43   2A 00017A20 WinHttpSetOption
         44   2B 00017D90 WinHttpSetStatusCallback
         45   2C 0001C2F0 WinHttpSetTimeouts
         46   2D 000252C0 WinHttpTimeFromSystemTime
         47   2E 00033080 WinHttpTimeToSystemTime
         48   2F 00076B10 WinHttpWebSocketClose
         49   30 00076F30 WinHttpWebSocketCompleteUpgrade
         50   31 00076C10 WinHttpWebSocketQueryCloseStatus
         51   32 00077950 WinHttpWebSocketReceive
         52   33 000780C0 WinHttpWebSocketSend
         53   34 000784F0 WinHttpWebSocketShutdown
         54   35 00016180 WinHttpWriteData

  Summary

        2000 .data
        1000 .didat
        9000 .pdata
       21000 .rdata
        1000 .reloc
        5000 .rsrc
       9C000 .text
        6000 .wpp_sf
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\winmm.dll

File Type: DLL

  Section contains the following exports for WINMM.dll

    00000000 characteristics
    5A978C09 time date stamp Wed Feb 28 21:13:45 2018
        0.00 version
           2 ordinal base
         181 number of functions
         180 number of names

    ordinal hint RVA      name

          4    0 00005B60 CloseDriver
          5    1 00005B70 DefDriverProc
          6    2 00005B80 DriverCallback
          7    3 00005B90 DrvGetModuleHandle
          8    4 00005BA0 GetDriverModuleHandle
          9    5 00005BC0 OpenDriver
         10    6 00005BB0 PlaySound
         11    7 0000E930 PlaySoundA
         12    8 00001900 PlaySoundW
         13    9 00005BD0 SendDriverMessage
         14    A 0000FCF0 WOWAppExit
         15    B 00005BE0 auxGetDevCapsA
         16    C 00005BF0 auxGetDevCapsW
         17    D 00005C00 auxGetNumDevs
         18    E 00005C10 auxGetVolume
         19    F 00005C20 auxOutMessage
         20   10 00005C30 auxSetVolume
         21   11 00005C40 joyConfigChanged
         22   12 00005C50 joyGetDevCapsA
         23   13 00005C60 joyGetDevCapsW
         24   14 00005C70 joyGetNumDevs
         25   15 00005C90 joyGetPos
         26   16 00005C80 joyGetPosEx
         27   17 00005CA0 joyGetThreshold
         28   18 00005CB0 joyReleaseCapture
         29   19 00005CC0 joySetCapture
         30   1A 00005CD0 joySetThreshold
         31   1B 0000C200 mciDriverNotify
         32   1C 0000C220 mciDriverYield
          3   1D 00006EA0 mciExecute
         33   1E 0000A130 mciFreeCommandResource
         34   1F 0000C690 mciGetCreatorTask
         35   20 0000C700 mciGetDeviceIDA
         36   21 0000C750 mciGetDeviceIDFromElementIDA
         37   22 0000C7A0 mciGetDeviceIDFromElementIDW
         38   23 0000C8A0 mciGetDeviceIDW
         39   24 0000C8D0 mciGetDriverData
         40   25 00008370 mciGetErrorStringA
         41   26 00008490 mciGetErrorStringW
         42   27 0000C970 mciGetYieldProc
         43   28 0000A320 mciLoadCommandResource
         44   29 00008790 mciSendCommandA
         45   2A 00009020 mciSendCommandW
         46   2B 00009150 mciSendStringA
         47   2C 00009360 mciSendStringW
         48   2D 0000CF60 mciSetDriverData
         49   2E 0000D010 mciSetYieldProc
         50   2F 00005CE0 midiConnect
         51   30 00005CF0 midiDisconnect
         52   31 00005D00 midiInAddBuffer
         53   32 00005D10 midiInClose
         54   33 00005D20 midiInGetDevCapsA
         55   34 00005D30 midiInGetDevCapsW
         56   35 00005D40 midiInGetErrorTextA
         57   36 00005D50 midiInGetErrorTextW
         58   37 00005D60 midiInGetID
         59   38 00005D70 midiInGetNumDevs
         60   39 00005D80 midiInMessage
         61   3A 00005D90 midiInOpen
         62   3B 00005DA0 midiInPrepareHeader
         63   3C 00005DB0 midiInReset
         64   3D 00005DC0 midiInStart
         65   3E 00005DD0 midiInStop
         66   3F 00005DE0 midiInUnprepareHeader
         67   40 00005DF0 midiOutCacheDrumPatches
         68   41 00005E00 midiOutCachePatches
         69   42 00005E10 midiOutClose
         70   43 00005E20 midiOutGetDevCapsA
         71   44 00005E30 midiOutGetDevCapsW
         72   45 00005E40 midiOutGetErrorTextA
         73   46 00005E50 midiOutGetErrorTextW
         74   47 00005E60 midiOutGetID
         75   48 00005E70 midiOutGetNumDevs
         76   49 00005E80 midiOutGetVolume
         77   4A 00005E90 midiOutLongMsg
         78   4B 00005EA0 midiOutMessage
         79   4C 00005EB0 midiOutOpen
         80   4D 00005EC0 midiOutPrepareHeader
         81   4E 00005ED0 midiOutReset
         82   4F 00005EE0 midiOutSetVolume
         83   50 00005EF0 midiOutShortMsg
         84   51 00005F00 midiOutUnprepareHeader
         85   52 00005F10 midiStreamClose
         86   53 00005F20 midiStreamOpen
         87   54 00005F30 midiStreamOut
         88   55 00005F40 midiStreamPause
         89   56 00005F50 midiStreamPosition
         90   57 00005F60 midiStreamProperty
         91   58 00005F70 midiStreamRestart
         92   59 00005F80 midiStreamStop
         93   5A 00005F90 mixerClose
         94   5B 00005FA0 mixerGetControlDetailsA
         95   5C 00005FB0 mixerGetControlDetailsW
         96   5D 00005FC0 mixerGetDevCapsA
         97   5E 00005FD0 mixerGetDevCapsW
         98   5F 00005FE0 mixerGetID
         99   60 00005FF0 mixerGetLineControlsA
        100   61 00006000 mixerGetLineControlsW
        101   62 00006010 mixerGetLineInfoA
        102   63 00006020 mixerGetLineInfoW
        103   64 00006030 mixerGetNumDevs
        104   65 00006040 mixerMessage
        105   66 00006050 mixerOpen
        106   67 00006060 mixerSetControlDetails
        107   68 00006070 mmDrvInstall
        108   69 00006080 mmGetCurrentTask
        109   6A 00006090 mmTaskBlock
        110   6B 000060A0 mmTaskCreate
        111   6C 000060B0 mmTaskSignal
        112   6D 000060C0 mmTaskYield
        113   6E 000060D0 mmioAdvance
        114   6F 000060E0 mmioAscend
        115   70 000060F0 mmioClose
        116   71 00006100 mmioCreateChunk
        117   72 00006110 mmioDescend
        118   73 00006120 mmioFlush
        119   74 00006130 mmioGetInfo
        120   75 00006140 mmioInstallIOProcA
        121   76 00006150 mmioInstallIOProcW
        122   77 00006160 mmioOpenA
        123   78 00006170 mmioOpenW
        124   79 00006180 mmioRead
        125   7A 00006190 mmioRenameA
        126   7B 000061A0 mmioRenameW
        127   7C 000061B0 mmioSeek
        128   7D 000061C0 mmioSendMessage
        129   7E 000061D0 mmioSetBuffer
        130   7F 000061E0 mmioSetInfo
        131   80 000061F0 mmioStringToFOURCCA
        132   81 00006200 mmioStringToFOURCCW
        133   82 00006210 mmioWrite
        134   83 0000FEC0 mmsystemGetVersion
        135   84 0000EE00 sndPlaySoundA
        136   85 0000EE10 sndPlaySoundW
        137   86 00003070 timeBeginPeriod
        138   87 00003080 timeEndPeriod
        139   88 00006220 timeGetDevCaps
        140   89 00006230 timeGetSystemTime
        141   8A 000030A0 timeGetTime
        142   8B 00002F70 timeKillEvent
        143   8C 00002B80 timeSetEvent
        144   8D 00006240 waveInAddBuffer
        145   8E 00006250 waveInClose
        146   8F 00006260 waveInGetDevCapsA
        147   90 00006270 waveInGetDevCapsW
        148   91 00006280 waveInGetErrorTextA
        149   92 00006290 waveInGetErrorTextW
        150   93 000062A0 waveInGetID
        151   94 000062B0 waveInGetNumDevs
        152   95 000062C0 waveInGetPosition
        153   96 000062D0 waveInMessage
        154   97 000062E0 waveInOpen
        155   98 000062F0 waveInPrepareHeader
        156   99 00006300 waveInReset
        157   9A 00006310 waveInStart
        158   9B 00006320 waveInStop
        159   9C 00006330 waveInUnprepareHeader
        160   9D 00006340 waveOutBreakLoop
        161   9E 00006350 waveOutClose
        162   9F 00006360 waveOutGetDevCapsA
        163   A0 00006370 waveOutGetDevCapsW
        164   A1 00006380 waveOutGetErrorTextA
        165   A2 00006390 waveOutGetErrorTextW
        166   A3 000063A0 waveOutGetID
        167   A4 000063B0 waveOutGetNumDevs
        168   A5 000063C0 waveOutGetPitch
        169   A6 000063D0 waveOutGetPlaybackRate
        170   A7 000063E0 waveOutGetPosition
        171   A8 000063F0 waveOutGetVolume
        172   A9 00006400 waveOutMessage
        173   AA 00006410 waveOutOpen
        174   AB 00006420 waveOutPause
        175   AC 00006430 waveOutPrepareHeader
        176   AD 00006440 waveOutReset
        177   AE 00006450 waveOutRestart
        178   AF 00006460 waveOutSetPitch
        179   B0 00006470 waveOutSetPlaybackRate
        180   B1 00006480 waveOutSetVolume
        181   B2 00006490 waveOutUnprepareHeader
        182   B3 000064A0 waveOutWrite
          2      00005BB0 [NONAME]

  Summary

        2000 .data
        1000 .didat
        1000 .guids
        1000 .pdata
        7000 .rdata
        1000 .reloc
        5000 .rsrc
       10000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\winspool.drv

File Type: DLL

  Section contains the following exports for WINSPOOL.DRV

    00000000 characteristics
    64098C2B time date stamp Wed Mar  8 23:35:07 2023
        0.00 version
         100 ordinal base
         269 number of functions
         197 number of names

    ordinal hint RVA      name

        101    0 00018F90 ADVANCEDSETUPDIALOG
        116    1 00024150 AbortPrinter
        117    2 0001A2C0 AddFormA
        118    3 000243A0 AddFormW
        119    4 0001A390 AddJobA
        120    5 00024570 AddJobW
        121    6 0001A430 AddMonitorA
        122    7 00024990 AddMonitorW
        123    8 0001A610 AddPortA
        124    9 0001A6C0 AddPortExA
        125    A 00024BC0 AddPortExW
        126    B 00024CC0 AddPortW
        127    C 0001A8A0 AddPrintProcessorA
        128    D 00024D20 AddPrintProcessorW
        129    E 0001A9D0 AddPrintProvidorA
        130    F 00024E80 AddPrintProvidorW
        131   10 0001AAF0 AddPrinterA
        132   11 0001AC00 AddPrinterConnection2A
        133   12 00037B40 AddPrinterConnection2W
        134   13 0001AC20 AddPrinterConnectionA
        135   14 00037DF0 AddPrinterConnectionW
        136   15 0001AC80 AddPrinterDriverA
        137   16 0001ACE0 AddPrinterDriverExA
        138   17 00025000 AddPrinterDriverExW
        139   18 00025750 AddPrinterDriverW
        140   19 0000EE60 AddPrinterW
        141   1A 0001AF00 AdvancedDocumentPropertiesA
        142   1B 000257B0 AdvancedDocumentPropertiesW
        102   1C 00018F90 AdvancedSetupDialog
        143   1D 00003080 ClosePrinter
        144   1E 00025850 CloseSpoolFileHandle
        145   1F 00025990 CommitSpoolData
        146   20 0001B0E0 ConfigurePortA
        147   21 00025B30 ConfigurePortW
        148   22 00026210 ConnectToPrinterDlg
        103   23 00019540 ConvertAnsiDevModeToUnicodeDevmode
        104   24 00019600 ConvertUnicodeDevModeToAnsiDevmode
        149   25 000388C0 CorePrinterDriverInstalledA
        150   26 000389B0 CorePrinterDriverInstalledW
        151   27 000384A0 CreatePrintAsyncNotifyChannel
        152   28 00026490 CreatePrinterIC
        153   29 0001B9F0 DEVICECAPABILITIES
        105   2A 000198B0 DEVICEMODE
        154   2B 0001B190 DeleteFormA
        155   2C 00026640 DeleteFormW
        156   2D 00039880 DeleteJobNamedProperty
        157   2E 0001B200 DeleteMonitorA
        158   2F 000267F0 DeleteMonitorW
        159   30 0001B390 DeletePortA
        160   31 000269D0 DeletePortW
        161   32 0001B440 DeletePrintProcessorA
        162   33 00026A30 DeletePrintProcessorW
        163   34 0001B530 DeletePrintProvidorA
        164   35 00026B70 DeletePrintProvidorW
        165   36 0000EB60 DeletePrinter
        166   37 0001B610 DeletePrinterConnectionA
        167   38 00037E40 DeletePrinterConnectionW
        168   39 0001B670 DeletePrinterDataA
        169   3A 0001B6F0 DeletePrinterDataExA
        170   3B 00026C90 DeletePrinterDataExW
        171   3C 00026E20 DeletePrinterDataW
        172   3D 0001B7A0 DeletePrinterDriverA
        173   3E 0001B880 DeletePrinterDriverExA
        174   3F 00026FA0 DeletePrinterDriverExW
        175   40 00038B50 DeletePrinterDriverPackageA
        176   41 00038C30 DeletePrinterDriverPackageW
        177   42 00027100 DeletePrinterDriverW
        178   43 00027240 DeletePrinterIC
        179   44 0001B970 DeletePrinterKeyA
        180   45 00027350 DeletePrinterKeyW
        181   46 000274D0 DevQueryPrint
        182   47 00027620 DevQueryPrintEx
        183   48 0001B9F0 DeviceCapabilities
        184   49 0001B9F0 DeviceCapabilitiesA
        185   4A 00027760 DeviceCapabilitiesW
        106   4B 000198B0 DeviceMode
        186   4C 0002B900 DevicePropertySheets
        107   4D 00005EE0 DocumentEvent
        187   4E 0001BD00 DocumentPropertiesA
        188   4F 0000B780 DocumentPropertiesW
        189   50 0000BC70 DocumentPropertySheets
        190   51 0001CCF0 EXTDEVICEMODE
        191   52 000053F0 EndDocPrinter
        192   53 000057F0 EndPagePrinter
        193   54 0001BE80 EnumFormsA
        194   55 00005940 EnumFormsW
        195   56 00039A10 EnumJobNamedProperties
        196   57 0001BF70 EnumJobsA
        197   58 000063C0 EnumJobsW
        198   59 0001C100 EnumMonitorsA
        199   5A 000277D0 EnumMonitorsW
        200   5B 0001C2E0 EnumPortsA
        225   5C 0000ED10 EnumPortsW
        232   5D 0001C3F0 EnumPrintProcessorDatatypesA
        235   5E 00027AA0 EnumPrintProcessorDatatypesW
        236   5F 0001C510 EnumPrintProcessorsA
        237   60 00027C30 EnumPrintProcessorsW
        238   61 0001C630 EnumPrinterDataA
        239   62 0001C730 EnumPrinterDataExA
        240   63 00027DE0 EnumPrinterDataExW
        241   64 00028010 EnumPrinterDataW
        242   65 0001C840 EnumPrinterDriversA
        243   66 0000DFA0 EnumPrinterDriversW
        244   67 0001CA50 EnumPrinterKeyA
        245   68 00028260 EnumPrinterKeyW
        246   69 0001CB90 EnumPrintersA
        247   6A 0000B5E0 EnumPrintersW
        248   6B 0001CCF0 ExtDeviceMode
        249   6C 0000DAC0 FindClosePrinterChangeNotification
        263   6D 0000AD70 FindFirstPrinterChangeNotification
        264   6E 0000BA60 FindNextPrinterChangeNotification
        265   6F 000284A0 FlushPrinter
        266   70 00039CD0 FreePrintNamedPropertyArray
        267   71 00039DB0 FreePrintPropertyValue
        268   72 0000DD10 FreePrinterNotifyInfo
        269   73 00038DA0 GetCorePrinterDriversA
        270   74 00039000 GetCorePrinterDriversW
        201   75 0001D030 GetDefaultPrinterA
        203   76 0000D130 GetDefaultPrinterW
        271   77 0001D0E0 GetFormA
        272   78 0000A320 GetFormW
        273   79 0001D1C0 GetJobA
        274   7A 00039E40 GetJobNamedPropertyValue
        275   7B 00028850 GetJobW
        276   7C 000294F0 GetPrintExecutionData
        277   7D 000295A0 GetPrintOutputInfo
        278   7E 0001D2E0 GetPrintProcessorDirectoryA
        279   7F 00029980 GetPrintProcessorDirectoryW
        280   80 0001D3D0 GetPrinterA
        281   81 0001D530 GetPrinterDataA
        282   82 0001D860 GetPrinterDataExA
        283   83 0000E9B0 GetPrinterDataExW
        284   84 00003A50 GetPrinterDataW
        285   85 0001AC00 GetPrinterDriver2A
        286   86 00029B20 GetPrinterDriver2W
        287   87 00009FE0 GetPrinterDriverA
        288   88 0001DC10 GetPrinterDriverDirectoryA
        289   89 000115A0 GetPrinterDriverDirectoryW
        290   8A 000391E0 GetPrinterDriverPackagePathA
        291   8B 000393D0 GetPrinterDriverPackagePathW
        292   8C 0000C990 GetPrinterDriverW
        293   8D 0000C390 GetPrinterW
        294   8E 00029B30 GetSpoolFileHandle
        295   8F 00039590 InstallPrinterDriverFromPackageA
        296   90 000110B0 InstallPrinterDriverFromPackageW
        297   91 0001DD00 IsValidDevmodeA
        298   92 00009F50 IsValidDevmodeW
        299   93 0001AC00 OpenPrinter2A
        300   94 000032A0 OpenPrinter2W
        301   95 0001DD50 OpenPrinterA
        302   96 00003240 OpenPrinterW
        108   97 0003BA20 PerfClose
        109   98 0003BA30 PerfCollect
        110   99 0003BB70 PerfOpen
        303   9A 0002A380 PlayGdiScriptOnPrinterIC
        304   9B 0001DE60 PrinterMessageBoxA
        305   9C 0002A4B0 PrinterMessageBoxW
        306   9D 0002A4C0 PrinterProperties
        111   9E 00022570 QueryColorProfile
        112   9F 00022740 QueryRemoteFonts
        113   A0 00022870 QuerySpoolMode
        307   A1 00005B90 ReadPrinter
        308   A2 00007DC0 RegisterForPrintAsyncNotifications
        309   A3 00038700 ReportJobProcessingProgress
        310   A4 0001E050 ResetPrinterA
        311   A5 00006610 ResetPrinterW
        312   A6 0002A500 ScheduleJob
        313   A7 00005D40 SeekPrinter
        202   A8 0001E130 SetDefaultPrinterA
        204   A9 0000F970 SetDefaultPrinterW
        314   AA 0001E190 SetFormA
        315   AB 0002A8B0 SetFormW
        316   AC 0001E290 SetJobA
        317   AD 000051D0 SetJobNamedProperty
        318   AE 0002AA90 SetJobW
        319   AF 0001E410 SetPortA
        320   B0 0002AD50 SetPortW
        321   B1 0001E520 SetPrinterA
        322   B2 0001E790 SetPrinterDataA
        323   B3 0001E890 SetPrinterDataExA
        324   B4 0002AEC0 SetPrinterDataExW
        325   B5 0000E880 SetPrinterDataW
        326   B6 0000E270 SetPrinterW
        327   B7 0002B0A0 SplDriverUnloadComplete
        114   B8 000234E0 SpoolerDevQueryPrintW
        328   B9 000113D0 SpoolerPrinterEvent
        329   BA 0001E9D0 StartDocDlgA
        115   BB 00023860 StartDocDlgW
        330   BC 0001EBA0 StartDocPrinterA
        331   BD 00006AB0 StartDocPrinterW
        332   BE 00005610 StartPagePrinter
        333   BF 00007EF0 UnRegisterForPrintAsyncNotifications
        334   C0 000396C0 UploadPrinterDriverPackageA
        335   C1 00010DC0 UploadPrinterDriverPackageW
        336   C2 0002E070 WaitForPrinterChange
        337   C3 00006B50 WritePrinter
        339   C4 0002B620 XcvDataW
        100      00028430 [NONAME]
        205      0000A960 [NONAME]
        206      0001A500 [NONAME]
        207      00024AF0 [NONAME]
        208      0001B2E0 [NONAME]
        209      00026930 [NONAME]
        210      0001C210 [NONAME]
        211      00027980 [NONAME]
        212      0000C180 [NONAME]
        213      0000C270 [NONAME]
        214      0000C090 [NONAME]
        215      00011750 [NONAME]
        216      0001DF30 [NONAME]
        217      00031FC0 [NONAME]
        218      0000A7C0 [NONAME]
        219      00021EB0 [NONAME]
        220      00021C30 [NONAME]
        221      00021710 [NONAME]
        222      0000E170 [NONAME]
        223      0002C6F0 [NONAME]
        224      00028450 [NONAME]
        226      00013750 [NONAME]
        227      00036600 [NONAME]
        228      000365F0 [NONAME]
        229      00021840 [NONAME]
        230      00021D60 [NONAME]
        231      00021FE0 [NONAME]
        233      00019B70 [NONAME]
        234      00020840 [NONAME]
        250      000371B0 [NONAME]
        251      00007F60 [NONAME]
        252      00020100 [NONAME]
        253      00002CC0 [NONAME]
        254      00002C60 [NONAME]
        255      000202C0 [NONAME]
        256      0000AA00 [NONAME]
        257      0002EED0 [NONAME]
        258      0003B5E0 [NONAME]
        259      0003B720 [NONAME]
        260      0003B500 [NONAME]
        261      00029C90 [NONAME]
        262      0002A220 [NONAME]
        338      0002EC90 [NONAME]
        368      00038210 [NONAME]

  Summary

        2000 .data
        1000 .didat
        5000 .pdata
       1E000 .rdata
        1000 .reloc
       16000 .rsrc
       48000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\wintrust.dll

File Type: DLL

  Section contains the following exports for WINTRUST.dll

    00000000 characteristics
    644C9A48 time date stamp Fri Apr 28 21:17:12 2023
        0.00 version
           1 ordinal base
         148 number of functions
         148 number of names

    ordinal hint RVA      name

         12    0 0002D2B0 AddPersonalTrustDBPages
         13    1 0001ABA0 CatalogCompactHashDatabase
          1    2 00027180 ComputeFirstPageHash
         14    3 0002DD00 ConfigCiFinalPolicy
         15    4 00018AC0 CryptCATAdminAcquireContext
         16    5 00007020 CryptCATAdminAcquireContext2
         17    6 00027E60 CryptCATAdminAddCatalog
         18    7 000070D0 CryptCATAdminCalcHashFromFileHandle
         19    8 00006FD0 CryptCATAdminCalcHashFromFileHandle2
         20    9 00016C70 CryptCATAdminEnumCatalogFromHash
         21    A 00028150 CryptCATAdminPauseServiceForBackup
         22    B 00018750 CryptCATAdminReleaseCatalogContext
         23    C 00014220 CryptCATAdminReleaseContext
         24    D 00028190 CryptCATAdminRemoveCatalog
         25    E 000281E0 CryptCATAdminResolveCatalogPath
         26    F 00017D70 CryptCATAllocSortedMemberInfo
         27   10 00004520 CryptCATCDFClose
         28   11 00028490 CryptCATCDFEnumAttributes
         29   12 00003B40 CryptCATCDFEnumAttributesWithCDFTag
         30   13 000021B0 CryptCATCDFEnumCatAttributes
         31   14 000284B0 CryptCATCDFEnumMembers
         32   15 00028510 CryptCATCDFEnumMembersByCDFTag
         33   16 000023D0 CryptCATCDFEnumMembersByCDFTagEx
         34   17 00002B20 CryptCATCDFOpen
         35   18 00018680 CryptCATCatalogInfoFromContext
         36   19 0000E280 CryptCATClose
         37   1A 00015770 CryptCATEnumerateAttr
         38   1B 00015670 CryptCATEnumerateCatAttr
         39   1C 000278F0 CryptCATEnumerateMember
         40   1D 00018A40 CryptCATFreeSortedMemberInfo
         41   1E 000156E0 CryptCATGetAttrInfo
         42   1F 000155F0 CryptCATGetCatAttrInfo
         43   20 000279F0 CryptCATGetMemberInfo
         44   21 00014A80 CryptCATHandleFromStore
         45   22 00013B70 CryptCATOpen
         46   23 00027AE0 CryptCATPersistStore
         47   24 00027B20 CryptCATPutAttrInfo
         48   25 000038C0 CryptCATPutCatAttrInfo
         49   26 00003580 CryptCATPutMemberInfo
         50   27 00014A80 CryptCATStoreFromHandle
          2   28 000278B0 CryptCATVerifyMember
         51   29 0000F150 CryptSIPCreateIndirectData
         52   2A 0000EFF0 CryptSIPGetCaps
          3   2B 00029050 CryptSIPGetInfo
          4   2C 00029040 CryptSIPGetRegWorkingFlags
         53   2D 00029090 CryptSIPGetSealedDigest
         54   2E 0000E650 CryptSIPGetSignedDataMsg
         55   2F 00001FF0 CryptSIPPutSignedDataMsg
         56   30 00001F40 CryptSIPRemoveSignedDataMsg
         57   31 0000EE60 CryptSIPVerifyIndirectData
         58   32 00023160 DllRegisterServer
         59   33 000231C0 DllUnregisterServer
         60   34 000151A0 DriverCleanupPolicy
         61   35 00014D60 DriverFinalPolicy
         62   36 000152A0 DriverInitializePolicy
         63   37 0002F900 FindCertsByIssuer
          5   38 0002C530 GenericChainCertificateTrust
          6   39 0002C860 GenericChainFinalProv
         64   3A 0002E310 GetAuthenticodeSha256Hash
          7   3B 00006A00 HTTPSCertificateTrust
         65   3C 000068E0 HTTPSFinalProv
         66   3D 00028740 IsCatalogFile
         67   3E 00013D90 MsCatConstructHashTag
         68   3F 00028950 MsCatFreeHashTag
         69   40 0002FCC0 OfficeCleanupPolicy
         70   41 0002FCC0 OfficeInitializePolicy
         71   42 0002D2D0 OpenPersonalTrustDBDialog
         72   43 0002D2E0 OpenPersonalTrustDBDialogEx
         73   44 0000CA60 SoftpubAuthenticode
         74   45 000149D0 SoftpubCheckCert
         75   46 0000B070 SoftpubCleanup
          8   47 0002D020 SoftpubDefCertInit
         76   48 0002FF70 SoftpubDllRegisterServer
         77   49 000301E0 SoftpubDllUnregisterServer
         78   4A 00030DE0 SoftpubDumpStructure
          9   4B 0002D120 SoftpubFreeDefUsageCallData
         79   4C 0000AEE0 SoftpubInitialize
         10   4D 0002D170 SoftpubLoadDefUsageCallData
         80   4E 0000A2B0 SoftpubLoadMessage
         81   4F 00009C80 SoftpubLoadSignature
         82   50 0000D7F0 TrustDecode
         83   51 000254E0 TrustFindIssuerCertificate
         84   52 000256D0 TrustFreeDecode
         85   53 00025700 TrustIsCertificateSelfSigned
         86   54 00025780 TrustOpenStores
         87   55 00005E00 WTGetSignatureInfo
         88   56 00026160 WTHelperCertCheckValidSignature
         11   57 00022E40 WTHelperCertFindIssuerCertificate
         89   58 00022E80 WTHelperCertIsSelfSigned
         90   59 00026180 WTHelperCheckCertUsage
         91   5A 000262C0 WTHelperGetAgencyInfo
         92   5B 000263A0 WTHelperGetFileHandle
         93   5C 00025F30 WTHelperGetFileHash
         94   5D 000263D0 WTHelperGetFileName
         95   5E 00026460 WTHelperGetKnownUsages
         96   5F 00006DF0 WTHelperGetProvCertFromChain
         97   60 000154A0 WTHelperGetProvPrivateDataFromChain
         98   61 0000DC00 WTHelperGetProvSignerFromChain
         99   62 00026500 WTHelperIsChainedToMicrosoft
        100   63 00026680 WTHelperIsChainedToMicrosoftFromStateData
        101   64 00026750 WTHelperIsInRootStore
        102   65 00026850 WTHelperOpenKnownStores
        103   66 00014A80 WTHelperProvDataFromStateData
        104   67 00017FC0 WVTAsn1CatMemberInfo2Decode
        105   68 000040B0 WVTAsn1CatMemberInfo2Encode
        106   69 000237E0 WVTAsn1CatMemberInfoDecode
        107   6A 000238B0 WVTAsn1CatMemberInfoEncode
        108   6B 00018070 WVTAsn1CatNameValueDecode
        109   6C 00003D50 WVTAsn1CatNameValueEncode
        110   6D 00023910 WVTAsn1IntentToSealAttributeDecode
        111   6E 000239B0 WVTAsn1IntentToSealAttributeEncode
        112   6F 000239F0 WVTAsn1SealingSignatureAttributeDecode
        113   70 00023AD0 WVTAsn1SealingSignatureAttributeEncode
        114   71 00023B90 WVTAsn1SealingTimestampAttributeDecode
        115   72 00023C70 WVTAsn1SealingTimestampAttributeEncode
        116   73 00023CD0 WVTAsn1SpcFinancialCriteriaInfoDecode
        117   74 00023D80 WVTAsn1SpcFinancialCriteriaInfoEncode
        118   75 00012670 WVTAsn1SpcIndirectDataContentDecode
        119   76 00003DC0 WVTAsn1SpcIndirectDataContentEncode
        120   77 00023DC0 WVTAsn1SpcLinkDecode
        121   78 00004150 WVTAsn1SpcLinkEncode
        122   79 00023EA0 WVTAsn1SpcMinimalCriteriaInfoDecode
        123   7A 00023F50 WVTAsn1SpcMinimalCriteriaInfoEncode
        124   7B 000134F0 WVTAsn1SpcPeImageDataDecode
        125   7C 00012B40 WVTAsn1SpcPeImageDataEncode
        126   7D 00005450 WVTAsn1SpcSigInfoDecode
        127   7E 00004020 WVTAsn1SpcSigInfoEncode
        128   7F 00023F80 WVTAsn1SpcSpAgencyInfoDecode
        129   80 00024210 WVTAsn1SpcSpAgencyInfoEncode
        130   81 00013220 WVTAsn1SpcSpOpusInfoDecode
        131   82 00003F60 WVTAsn1SpcSpOpusInfoEncode
        132   83 000243C0 WVTAsn1SpcStatementTypeDecode
        133   84 00003EA0 WVTAsn1SpcStatementTypeEncode
        134   85 000089C0 WinVerifyTrust
        135   86 00026020 WinVerifyTrustEx
        136   87 000244F0 WintrustAddActionID
        137   88 000258C0 WintrustAddDefaultForUsage
        138   89 0000C0B0 WintrustCertificateTrust
        139   8A 00025B40 WintrustGetDefaultForUsage
        140   8B 00024A60 WintrustGetRegPolicyFlags
        141   8C 00018240 WintrustLoadFunctionPointers
        142   8D 000246D0 WintrustRemoveActionID
        143   8E 00029ED0 WintrustSetDefaultIncludePEPageHashes
        144   8F 00024B00 WintrustSetRegPolicyFlags
        145   90 0000B070 mscat32DllRegisterServer
        146   91 0000B070 mscat32DllUnregisterServer
        147   92 00029180 mssip32DllRegisterServer
        148   93 000293A0 mssip32DllUnregisterServer

  Summary

        1000 .data
        1000 .didat
        4000 .pdata
       13000 .rdata
        1000 .reloc
        2000 .rsrc
       37000 .text
Microsoft (R) COFF/PE Dumper Version 14.36.32538.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file 10.0.10240\ws2_32.dll

File Type: DLL

  Section contains the following exports for WS2_32.dll

    00000000 characteristics
    57490AC3 time date stamp Fri May 27 20:04:35 2016
        0.00 version
           1 ordinal base
         500 number of functions
         195 number of names

    ordinal hint RVA      name

         25    0 00001A60 FreeAddrInfoEx
         26    1 00001A60 FreeAddrInfoExW
         27    2 00014AA0 FreeAddrInfoW
         28    3 00025250 GetAddrInfoExA
         29    4 000167C0 GetAddrInfoExCancel
         30    5 00014B20 GetAddrInfoExOverlappedResult
         31    6 00013590 GetAddrInfoExW
         32    7 00010350 GetAddrInfoW
         33    8 00017B00 GetHostNameW
         34    9 00012F20 GetNameInfoW
         35    A 000179F0 InetNtopW
         36    B 00024640 InetPtonW
         37    C 00025430 SetAddrInfoExA
         38    D 000255B0 SetAddrInfoExW
        500    E 00018450 WEP
         39    F 00037070 WPUCompleteOverlappedRequest
         40   10 000173D0 WPUGetProviderPathEx
         41   11 00014140 WSAAccept
         42   12 00014560 WSAAddressToStringA
         43   13 00012400 WSAAddressToStringW
         44   14 00039A60 WSAAdvertiseProvider
        102   15 00029E40 WSAAsyncGetHostByAddr
        103   16 00029F70 WSAAsyncGetHostByName
        105   17 0002A0C0 WSAAsyncGetProtoByName
        104   18 0002A210 WSAAsyncGetProtoByNumber
        107   19 0002A310 WSAAsyncGetServByName
        106   1A 0002A470 WSAAsyncGetServByPort
        101   1B 00015350 WSAAsyncSelect
        108   1C 0002A580 WSACancelAsyncRequest
        113   1D 000285E0 WSACancelBlockingCall
        116   1E 000142E0 WSACleanup
         45   1F 00001740 WSACloseEvent
         46   20 00015E70 WSAConnect
         47   21 00035880 WSAConnectByList
         48   22 00036170 WSAConnectByNameA
         49   23 000363B0 WSAConnectByNameW
         50   24 00001790 WSACreateEvent
         58   25 000292A0 WSADuplicateSocketA
         59   26 00029330 WSADuplicateSocketW
         60   27 000321E0 WSAEnumNameSpaceProvidersA
         61   28 00032280 WSAEnumNameSpaceProvidersExA
         62   29 00032320 WSAEnumNameSpaceProvidersExW
         63   2A 00003FB0 WSAEnumNameSpaceProvidersW
         64   2B 00011B60 WSAEnumNetworkEvents
         65   2C 0003D8C0 WSAEnumProtocolsA
         66   2D 00016950 WSAEnumProtocolsW
         67   2E 00011970 WSAEventSelect
        111   2F 00001730 WSAGetLastError
         68   30 00014440 WSAGetOverlappedResult
         69   31 00030E10 WSAGetQOSByName
         70   32 000323C0 WSAGetServiceClassInfoA
         71   33 000324B0 WSAGetServiceClassInfoW
         72   34 00032640 WSAGetServiceClassNameByClassIdA
         73   35 00032950 WSAGetServiceClassNameByClassIdW
         74   36 000246D0 WSAHtonl
         75   37 00024800 WSAHtons
         76   38 00032C30 WSAInstallServiceClassA
         77   39 00032CF0 WSAInstallServiceClassW
         78   3A 000113F0 WSAIoctl
        114   3B 00028670 WSAIsBlocking
         79   3C 00036E00 WSAJoinLeaf
         80   3D 00032E50 WSALookupServiceBeginA
         81   3E 0000BB50 WSALookupServiceBeginW
         82   3F 0000B720 WSALookupServiceEnd
         83   40 00032F60 WSALookupServiceNextA
         84   41 0000C9B0 WSALookupServiceNextW
         85   42 00033180 WSANSPIoctl
         86   43 00024920 WSANtohl
         87   44 00024A50 WSANtohs
         88   45 00033EE0 WSAPoll
         89   46 00039C00 WSAProviderCompleteAsyncCall
         90   47 00016AA0 WSAProviderConfigChange
         91   48 0000FDE0 WSARecv
         92   49 00031BC0 WSARecvDisconnect
         93   4A 00017760 WSARecvFrom
         94   4B 000332B0 WSARemoveServiceClass
         95   4C 00016380 WSAResetEvent
         96   4D 0000F6E0 WSASend
         97   4E 000341C0 WSASendDisconnect
         98   4F 00011CE0 WSASendMsg
         99   50 00034290 WSASendTo
        109   51 00028710 WSASetBlockingHook
        100   52 00016A50 WSASetEvent
        112   53 000025F0 WSASetLastError
        117   54 00033410 WSASetServiceA
        118   55 000334D0 WSASetServiceW
        119   56 000168D0 WSASocketA
        120   57 00010C50 WSASocketW
        115   58 000035B0 WSAStartup
        121   59 000150A0 WSAStringToAddressA
        122   5A 00014CD0 WSAStringToAddressW
        123   5B 00039DB0 WSAUnadvertiseProvider
        110   5C 000287D0 WSAUnhookBlockingHook
        124   5D 00001A50 WSAWaitForMultipleEvents
         24   5E 00037340 WSApSetPostRoutine
        125   5F 0003DD60 WSCDeinstallProvider
        126   60 0003FCC0 WSCDeinstallProvider32
        127   61 0003DD90 WSCDeinstallProviderEx
        128   62 0003FED0 WSCEnableNSProvider
        129   63 00040750 WSCEnableNSProvider32
        130   64 000336A0 WSCEnumNameSpaceProviders32
        131   65 000337F0 WSCEnumNameSpaceProvidersEx32
        132   66 00002B30 WSCEnumProtocols
        133   67 0003DA70 WSCEnumProtocols32
        134   68 00003050 WSCEnumProtocolsEx
        135   69 0003DFE0 WSCGetApplicationCategory
        136   6A 0003E030 WSCGetApplicationCategoryEx
        137   6B 0003E3A0 WSCGetProviderInfo
        138   6C 0003FCF0 WSCGetProviderInfo32
        139   6D 00017D40 WSCGetProviderPath
        140   6E 0003DAA0 WSCGetProviderPath32
        141   6F 00040040 WSCInstallNameSpace
        142   70 000408B0 WSCInstallNameSpace32
        143   71 00040090 WSCInstallNameSpaceEx
        144   72 000400E0 WSCInstallNameSpaceEx2
        145   73 00040900 WSCInstallNameSpaceEx32
        146   74 0003E660 WSCInstallProvider
        147   75 0003FD30 WSCInstallProvider64_32
        148   76 0002D470 WSCInstallProviderAndChains64_32
        149   77 0003E6B0 WSCInstallProviderEx
        150   78 0003F0C0 WSCSetApplicationCategory
        152   79 0003F120 WSCSetApplicationCategoryEx
        153   7A 0003F5C0 WSCSetProviderInfo
        154   7B 0003FD80 WSCSetProviderInfo32
        155   7C 00040390 WSCUnInstallNameSpace
        156   7D 00040950 WSCUnInstallNameSpace32
        157   7E 000403C0 WSCUnInstallNameSpaceEx2
        158   7F 0003F850 WSCUpdateProvider
        159   80 0003FDC0 WSCUpdateProvider32
        160   81 0003F890 WSCUpdateProviderEx
        161   82 00040570 WSCWriteNameSpaceOrder
        162   83 00040980 WSCWriteNameSpaceOrder32
        163   84 0003FA70 WSCWriteProviderOrder
        164   85 0003FE00 WSCWriteProviderOrder32
        165   86 0003FAA0 WSCWriteProviderOrderEx
        166   87 00002810 WahCloseApcHelper
        167   88 0003C150 WahCloseHandleHelper
        168   89 0003CD20 WahCloseNotificationHandleHelper
        169   8A 0003C1A0 WahCloseSocketHandle
        170   8B 00012B50 WahCloseThread
        171   8C 0003C210 WahCompleteRequest
        172   8D 000032D0 WahCreateHandleContextTable
        173   8E 00016D30 WahCreateNotificationHandle
        174   8F 0003C300 WahCreateSocketHandle
        175   90 00015E00 WahDestroyHandleContextTable
        176   91 0003C4F0 WahDisableNonIFSHandleSupport
        177   92 0003C5E0 WahEnableNonIFSHandleSupport
        178   93 00001960 WahEnumerateHandleContexts
        179   94 00015690 WahInsertHandleContext
        180   95 0003CD60 WahNotifyAllProcesses
        181   96 00003570 WahOpenApcHelper
        182   97 00012AC0 WahOpenCurrentThread
        183   98 0003C7D0 WahOpenHandleHelper
        184   99 00016A60 WahOpenNotificationHandleHelper
        185   9A 0003B8B0 WahQueueUserApc
        186   9B 00001300 WahReferenceContextByHandle
        187   9C 00001380 WahRemoveHandleContext
        188   9D 00016C00 WahWaitForNotification
        189   9E 0003CFA0 WahWriteLSPEvent
        151   9F 00001030 __WSAFDIsSet
          1   A0 000142C0 accept
          2   A1 00012130 bind
          3   A2 0000F2B0 closesocket
          4   A3 00011E50 connect
        190   A4 00014AA0 freeaddrinfo
        191   A5 00012BC0 getaddrinfo
         51   A6 0002A620 gethostbyaddr
         52   A7 0002A7E0 gethostbyname
         57   A8 0002A9B0 gethostname
        192   A9 000130D0 getnameinfo
          5   AA 000149C0 getpeername
         53   AB 000297C0 getprotobyname
         54   AC 00029930 getprotobynumber
         55   AD 0002AB80 getservbyname
         56   AE 0002ADA0 getservbyport
          6   AF 00012660 getsockname
          7   B0 00001170 getsockopt
          8   B1 00001700 htonl
          9   B2 00001770 htons
         11   B3 00002100 inet_addr
         12   B4 00001CF0 inet_ntoa
        193   B5 00024B70 inet_ntop
        194   B6 00024BF0 inet_pton
         10   B7 000116B0 ioctlsocket
         13   B8 00014FF0 listen
         14   B9 00001700 ntohl
         15   BA 00001770 ntohs
         16   BB 0000F940 recv
         17   BC 00015F80 recvfrom
         18   BD 00010040 select
         19   BE 0000F4B0 send
         20   BF 00012280 sendto
         21   C0 0000FBA0 setsockopt
         22   C1 00013280 shutdown
         23   C2 00010B00 socket

  Summary

        1000 .data
        1000 .didat
        4000 .pdata
        D000 .rdata
        1000 .reloc
       11000 .rsrc
       43000 .text