Characteristics: 0x00000000 TimeDateStamp: 0x48025BE1 (GMT: Sun Apr 13 19:15:45 2008) MajorVersion: 0x0000 MinorVersion: 0x0000 -> 0.00 Name: 0x00004B8E ("KERNEL32.dll") Base: 0x00000001 NumberOfFunctions: 0x000003B9 NumberOfNames: 0x000003B9 AddressOfFunctions: 0x00002654 AddressOfNames: 0x00003538 AddressOfNameOrdinals: 0x0000441C Ordinal RVA Symbol Name ------- ---------- ---------------------------------- 0x0001 0x0000A6D4 "ActivateActCtx" 0x0002 0x00035505 "AddAtomA" 0x0003 0x000326D9 "AddAtomW" 0x0004 0x00071CDF "AddConsoleAliasA" 0x0005 0x00071CA1 "AddConsoleAliasW" 0x0006 0x00059382 "AddLocalAlternateComputerNameA" 0x0007 0x00059266 "AddLocalAlternateComputerNameW" 0x0008 0x0002BEF9 "AddRefActCtx" 0x0009 0x00008FF5 "AddVectoredExceptionHandler" 0x000A 0x00072331 "AllocConsole" 0x000B 0x0005F61A "AllocateUserPhysicalPages" 0x000C 0x00035967 "AreFileApisANSI" 0x000D 0x0002E442 "AssignProcessToJobObject" 0x000E 0x00072519 "AttachConsole" 0x000F 0x000571CA "BackupRead" 0x0010 0x000562B0 "BackupSeek" 0x0011 0x00057825 "BackupWrite" 0x0012 0x00016867 "BaseCheckAppcompatCache" 0x0013 0x0006CDE6 "BaseCleanupAppcompatCache" 0x0014 0x0006CE6A "BaseCleanupAppcompatCacheSupport" 0x0015 0x0006CCA1 "BaseDumpAppcompatCache" 0x0016 0x0006CC1F "BaseFlushAppcompatCache" 0x0017 0x0001655D "BaseInitAppcompatCache" 0x0018 0x0002B375 "BaseInitAppcompatCacheSupport" 0x0019 0x000174D3 "BaseProcessInitPostImport" 0x001A 0x00038372 "BaseQueryModuleData" 0x001B 0x000151B0 "BaseUpdateAppcompatCache" 0x001C 0x000195A3 "BasepCheckWinSaferRestrictions" 0x001D 0x00037A8F "Beep" 0x001E 0x00070C9B "BeginUpdateResourceA" 0x001F 0x00070AF8 "BeginUpdateResourceW" 0x0020 0x0002C024 "BindIoCompletionCallback" 0x0021 0x0006BECD "BuildCommDCBA" 0x0022 0x0006BE9F "BuildCommDCBAndTimeoutsA" 0x0023 0x0006BEFF "BuildCommDCBAndTimeoutsW" 0x0024 0x0006BF59 "BuildCommDCBW" 0x0025 0x00060CD6 "CallNamedPipeA" 0x0026 0x00060A87 "CallNamedPipeW" 0x0027 0x00061A9F "CancelDeviceWakeupRequest" 0x0028 0x000300CA "CancelIo" 0x0029 0x00063DF8 "CancelTimerQueueTimer" 0x002A 0x0002CC01 "CancelWaitableTimer" 0x002B 0x000127B3 "ChangeTimerQueueTimer" 0x002C 0x00061959 "CheckNameLegalDOS8Dot3A" 0x002D 0x00061719 "CheckNameLegalDOS8Dot3W" 0x002E 0x0005AA22 "CheckRemoteDebuggerPresent" 0x002F 0x00067CD1 "ClearCommBreak" 0x0030 0x0006655F "ClearCommError" 0x0031 0x0001D3DE "CloseConsoleHandle" 0x0032 0x00009BD7 "CloseHandle" 0x0033 0x0002C865 "CloseProfileUserMapping" 0x0034 0x0002F5F9 "CmdBatNotification" 0x0035 0x00067851 "CommConfigDialogA" 0x0036 0x0006775D "CommConfigDialogW" 0x0037 0x00010B69 "CompareFileTime" 0x0038 0x0000D107 "CompareStringA" 0x0039 0x0000A3EE "CompareStringW" 0x003A 0x0003144B "ConnectNamedPipe" 0x003B 0x00072FDF "ConsoleMenuControl" 0x003C 0x0005B46D "ContinueDebugEvent" 0x003D 0x000383E7 "ConvertDefaultLocale" 0x003E 0x0002FEC7 "ConvertFiberToThread" 0x003F 0x0002FF06 "ConvertThreadToFiber" 0x0040 0x000286D6 "CopyFileA" 0x0041 0x0005F2CC "CopyFileExA" 0x0042 0x00027B1A "CopyFileExW" 0x0043 0x0002F863 "CopyFileW" 0x0044 0x0005980A "CopyLZFile" 0x0045 0x0006C785 "CreateActCtxA" 0x0046 0x000154EC "CreateActCtxW" 0x0047 0x00074088 "CreateConsoleScreenBuffer" 0x0048 0x00021794 "CreateDirectoryA" 0x0049 0x0005C143 "CreateDirectoryExA" 0x004A 0x0005B4FA "CreateDirectoryExW" 0x004B 0x000323EA "CreateDirectoryW" 0x004C 0x0003089D "CreateEventA" 0x004D 0x0000A739 "CreateEventW" 0x004E 0x0002FF9F "CreateFiber" 0x004F 0x0002FFBF "CreateFiberEx" 0x0050 0x00001A28 "CreateFileA" 0x0051 0x000094EE "CreateFileMappingA" 0x0052 0x00009420 "CreateFileMappingW" 0x0053 0x000107F0 "CreateFileW" 0x0054 0x0006C609 "CreateHardLinkA" 0x0055 0x0006C44C "CreateHardLinkW" 0x0056 0x00031375 "CreateIoCompletionPort" 0x0057 0x0006C36C "CreateJobObjectA" 0x0058 0x0002CAFB "CreateJobObjectW" 0x0059 0x0006C33E "CreateJobSet" 0x005A 0x0002CC83 "CreateMailslotA" 0x005B 0x0002CCD4 "CreateMailslotW" 0x005C 0x00039672 "CreateMemoryResourceNotification" 0x005D 0x0000E9CF "CreateMutexA" 0x005E 0x0000E947 "CreateMutexW" 0x005F 0x00060B7C "CreateNamedPipeA" 0x0060 0x0002F0C5 "CreateNamedPipeW" 0x0061 0x0002AC54 "CreateNlsSecurityDescriptor" 0x0062 0x0001D827 "CreatePipe" 0x0063 0x0000236B "CreateProcessA" 0x0064 0x0001D536 "CreateProcessInternalA" 0x0065 0x0001979C "CreateProcessInternalW" 0x0066 0x000806F8 "CreateProcessInternalWSecure" 0x0067 0x00002336 "CreateProcessW" 0x0068 0x000104BC "CreateRemoteThread" 0x0069 0x00012EAD "CreateSemaphoreA" 0x006A 0x00010116 "CreateSemaphoreW" 0x006B 0x0006C674 "CreateSocketHandle" 0x006C 0x0006C12E "CreateTapePartition" 0x006D 0x000106C7 "CreateThread" 0x006E 0x0002BFCE "CreateTimerQueue" 0x006F 0x00021165 "CreateTimerQueueTimer" 0x0070 0x00065B1F "CreateToolhelp32Snapshot" 0x0071 0x0003494A "CreateVirtualBuffer" 0x0072 0x00062AC1 "CreateWaitableTimerA" 0x0073 0x0002FB42 "CreateWaitableTimerW" 0x0074 0x0000A705 "DeactivateActCtx" 0x0075 0x0005B02B "DebugActiveProcess" 0x0076 0x0005B4B1 "DebugActiveProcessStop" 0x0077 0x0005AA76 "DebugBreak" 0x0078 0x0005B07E "DebugBreakProcess" 0x0079 0x0005B0A5 "DebugSetProcessKillOnExit" 0x007A 0x0000901A "DecodePointer" 0x007B 0x00009031 "DecodeSystemPointer" 0x007C 0x0005D1CD "DefineDosDeviceA" 0x007D 0x00021F06 "DefineDosDeviceW" 0x007E 0x0007EECD "DelayLoadFailureHook" 0x007F 0x000326AD "DeleteAtom" 0x0080 0x0000904E "DeleteCriticalSection" 0x0081 0x0002FE74 "DeleteFiber" 0x0082 0x00031EC5 "DeleteFileA" 0x0083 0x00031F4B "DeleteFileW" 0x0084 0x00063DCB "DeleteTimerQueue" 0x0085 0x00063D84 "DeleteTimerQueueEx" 0x0086 0x00021118 "DeleteTimerQueueTimer" 0x0087 0x0006B0BE "DeleteVolumeMountPointA" 0x0088 0x0006A910 "DeleteVolumeMountPointW" 0x0089 0x00001629 "DeviceIoControl" 0x008A 0x00011326 "DisableThreadLibraryCalls" 0x008B 0x0001272F "DisconnectNamedPipe" 0x008C 0x00058A2B "DnsHostnameToComputerNameA" 0x008D 0x0002CEAA "DnsHostnameToComputerNameW" 0x008E 0x00032168 "DosDateTimeToFileTime" 0x008F 0x000627D9 "DosPathToSessionPathA" 0x0090 0x0002C1DF "DosPathToSessionPathW" 0x0091 0x0001D4AD "DuplicateConsoleHandle" 0x0092 0x0000DE8E "DuplicateHandle" 0x0093 0x0000906D "EncodePointer" 0x0094 0x00009084 "EncodeSystemPointer" 0x0095 0x00070969 "EndUpdateResourceA" 0x0096 0x00070792 "EndUpdateResourceW" 0x0097 0x000090A1 "EnterCriticalSection" 0x0098 0x00038229 "EnumCalendarInfoA" 0x0099 0x00076769 "EnumCalendarInfoExA" 0x009A 0x0007979D "EnumCalendarInfoExW" 0x009B 0x0007977A "EnumCalendarInfoW" 0x009C 0x000767AA "EnumDateFormatsA" 0x009D 0x000767CA "EnumDateFormatsExA" 0x009E 0x000797C0 "EnumDateFormatsExW" 0x009F 0x000387F9 "EnumDateFormatsW" 0x00A0 0x00076808 "EnumLanguageGroupLocalesA" 0x00A1 0x00079723 "EnumLanguageGroupLocalesW" 0x00A2 0x0002DFF8 "EnumResourceLanguagesA" 0x00A3 0x00060539 "EnumResourceLanguagesW" 0x00A4 0x00060131 "EnumResourceNamesA" 0x00A5 0x00055A51 "EnumResourceNamesW" 0x00A6 0x0005FF44 "EnumResourceTypesA" 0x00A7 0x00060351 "EnumResourceTypesW" 0x00A8 0x00076847 "EnumSystemCodePagesA" 0x00A9 0x0007975F "EnumSystemCodePagesW" 0x00AA 0x00079BF9 "EnumSystemGeoID" 0x00AB 0x000767EA "EnumSystemLanguageGroupsA" 0x00AC 0x00079705 "EnumSystemLanguageGroupsW" 0x00AD 0x00037CF9 "EnumSystemLocalesA" 0x00AE 0x00079744 "EnumSystemLocalesW" 0x00AF 0x0007678C "EnumTimeFormatsA" 0x00B0 0x000388D6 "EnumTimeFormatsW" 0x00B1 0x00076829 "EnumUILanguagesA" 0x00B2 0x0002A8C4 "EnumUILanguagesW" 0x00B3 0x0005897F "EnumerateLocalComputerNamesA" 0x00B4 0x000587FF "EnumerateLocalComputerNamesW" 0x00B5 0x0006C0FB "EraseTape" 0x00B6 0x00066771 "EscapeCommFunction" 0x00B7 0x0001CAFA "ExitProcess" 0x00B8 0x0000C0E8 "ExitThread" 0x00B9 0x00068675 "ExitVDM" 0x00BA 0x000329F1 "ExpandEnvironmentStringsA" 0x00BB 0x000305E6 "ExpandEnvironmentStringsW" 0x00BC 0x00071647 "ExpungeConsoleCommandHistoryA" 0x00BD 0x0007162F "ExpungeConsoleCommandHistoryW" 0x00BE 0x0005FAFC "ExtendVirtualBuffer" 0x00BF 0x00061C00 "FatalAppExitA" 0x00C0 0x00061BB2 "FatalAppExitW" 0x00C1 0x00061C4E "FatalExit" 0x00C2 0x0003064D "FileTimeToDosDateTime" 0x00C3 0x0000E8F6 "FileTimeToLocalFileTime" 0x00C4 0x0000E87C "FileTimeToSystemTime" 0x00C5 0x00074064 "FillConsoleOutputAttribute" 0x00C6 0x00074019 "FillConsoleOutputCharacterA" 0x00C7 0x00074040 "FillConsoleOutputCharacterW" 0x00C8 0x00030F11 "FindActCtxSectionGuid" 0x00C9 0x0006CAEF "FindActCtxSectionStringA" 0x00CA 0x0002FD3C "FindActCtxSectionStringW" 0x00CB 0x00030CEE "FindAtomA" 0x00CC 0x0002F817 "FindAtomW" 0x00CD 0x0000EE67 "FindClose" 0x00CE 0x000357ED "FindCloseChangeNotification" 0x00CF 0x0005D3B3 "FindFirstChangeNotificationA" 0x00D0 0x00034C07 "FindFirstChangeNotificationW" 0x00D1 0x00013869 "FindFirstFileA" 0x00D2 0x0005D41A "FindFirstFileExA" 0x00D3 0x0000EB0D "FindFirstFileExW" 0x00D4 0x0000EF71 "FindFirstFileW" 0x00D5 0x0006B239 "FindFirstVolumeA" 0x00D6 0x0006ACF9 "FindFirstVolumeMountPointA" 0x00D7 0x00069D91 "FindFirstVolumeMountPointW" 0x00D8 0x0002D2A7 "FindFirstVolumeW" 0x00D9 0x0003212D "FindNextChangeNotification" 0x00DA 0x00034EC9 "FindNextFileA" 0x00DB 0x0000EFCA "FindNextFileW" 0x00DC 0x0006ABDF "FindNextVolumeA" 0x00DD 0x0006AE29 "FindNextVolumeMountPointA" 0x00DE 0x0006A03D "FindNextVolumeMountPointW" 0x00DF 0x0002CF93 "FindNextVolumeW" 0x00E0 0x0000BF19 "FindResourceA" 0x00E1 0x00035F90 "FindResourceExA" 0x00E2 0x0000AD18 "FindResourceExW" 0x00E3 0x0000BC5E "FindResourceW" 0x00E4 0x0002CF58 "FindVolumeClose" 0x00E5 0x000357ED "FindVolumeMountPointClose" 0x00E6 0x00074B3C "FlushConsoleInputBuffer" 0x00E7 0x000126D1 "FlushFileBuffers" 0x00E8 0x000355D4 "FlushInstructionCache" 0x00E9 0x00035989 "FlushViewOfFile" 0x00EA 0x00076ED1 "FoldStringA" 0x00EB 0x0007A656 "FoldStringW" 0x00EC 0x0002F790 "FormatMessageA" 0x00ED 0x00034BA7 "FormatMessageW" 0x00EE 0x000720AD "FreeConsole" 0x00EF 0x0001D6D7 "FreeEnvironmentStringsA" 0x00F0 0x00014B77 "FreeEnvironmentStringsW" 0x00F1 0x0000AC6E "FreeLibrary" 0x00F2 0x0000C200 "FreeLibraryAndExitThread" 0x00F3 0x000260AA "FreeResource" 0x00F4 0x0005F648 "FreeUserPhysicalPages" 0x00F5 0x00034B81 "FreeVirtualBuffer" 0x00F6 0x00074A41 "GenerateConsoleCtrlEvent" 0x00F7 0x000099A5 "GetACP" 0x00F8 0x0005C1B3 "GetAtomNameA" 0x00F9 0x000330FF "GetAtomNameW" 0x00FA 0x0006900B "GetBinaryType" 0x00FB 0x0006900B "GetBinaryTypeA" 0x00FC 0x00068BAC "GetBinaryTypeW" 0x00FD 0x000384F3 "GetCPFileNameFromRegistry" 0x00FE 0x00012F06 "GetCPInfo" 0x00FF 0x00077067 "GetCPInfoExA" 0x0100 0x0007B1ED "GetCPInfoExW" 0x0101 0x0007698B "GetCalendarInfoA" 0x0102 0x00039038 "GetCalendarInfoW" 0x0103 0x0006CB82 "GetComPlusPackageInstallStatus" 0x0104 0x00067CE9 "GetCommConfig" 0x0105 0x0006686D "GetCommMask" 0x0106 0x000668F6 "GetCommModemStatus" 0x0107 0x0006697F "GetCommProperties" 0x0108 0x00066A37 "GetCommState" 0x0109 0x00022110 "GetCommTimeouts" 0x010A 0x00012FAD "GetCommandLineA" 0x010B 0x00017013 "GetCommandLineW" 0x010C 0x0005E3A1 "GetCompressedFileSizeA" 0x010D 0x0005E279 "GetCompressedFileSizeW" 0x010E 0x0002168C "GetComputerNameA" 0x010F 0x00058703 "GetComputerNameExA" 0x0110 0x000201D9 "GetComputerNameExW" 0x0111 0x000316B7 "GetComputerNameW" 0x0112 0x000710D2 "GetConsoleAliasA" 0x0113 0x0007156C "GetConsoleAliasExesA" 0x0114 0x00071272 "GetConsoleAliasExesLengthA" 0x0115 0x00071265 "GetConsoleAliasExesLengthW" 0x0116 0x00071551 "GetConsoleAliasExesW" 0x0117 0x000710A6 "GetConsoleAliasW" 0x0118 0x00071407 "GetConsoleAliasesA" 0x0119 0x000711D9 "GetConsoleAliasesLengthA" 0x011A 0x000711C1 "GetConsoleAliasesLengthW" 0x011B 0x000713E9 "GetConsoleAliasesW" 0x011C 0x000750F3 "GetConsoleCP" 0x011D 0x000761C3 "GetConsoleCharType" 0x011E 0x000719C7 "GetConsoleCommandHistoryA" 0x011F 0x00071825 "GetConsoleCommandHistoryLengthA" 0x0120 0x0007180D "GetConsoleCommandHistoryLengthW" 0x0121 0x000719A9 "GetConsoleCommandHistoryW" 0x0122 0x00074581 "GetConsoleCursorInfo" 0x0123 0x0007581F "GetConsoleCursorMode" 0x0124 0x00037C6B "GetConsoleDisplayMode" 0x0125 0x000747B9 "GetConsoleFontInfo" 0x0126 0x000748E1 "GetConsoleFontSize" 0x0127 0x00072C39 "GetConsoleHardwareState" 0x0128 0x00071D1C "GetConsoleInputExeNameA" 0x0129 0x00071AF1 "GetConsoleInputExeNameW" 0x012A 0x00072619 "GetConsoleInputWaitHandle" 0x012B 0x00075349 "GetConsoleKeyboardLayoutNameA" 0x012C 0x00075361 "GetConsoleKeyboardLayoutNameW" 0x012D 0x0001AC38 "GetConsoleMode" 0x012E 0x00075FA7 "GetConsoleNlsMode" 0x012F 0x0001AEAF "GetConsoleOutputCP" 0x0130 0x000753E5 "GetConsoleProcessList" 0x0131 0x0001B94B "GetConsoleScreenBufferInfo" 0x0132 0x00074649 "GetConsoleSelectionInfo" 0x0133 0x00071A59 "GetConsoleTitleA" 0x0134 0x0001B75C "GetConsoleTitleW" 0x0135 0x00075379 "GetConsoleWindow" 0x0136 0x00076B99 "GetCurrencyFormatA" 0x0137 0x0007C6EA "GetCurrencyFormatW" 0x0138 0x00030099 "GetCurrentActCtx" 0x0139 0x0007496F "GetCurrentConsoleFont" 0x013A 0x00035016 "GetCurrentDirectoryA" 0x013B 0x0000B907 "GetCurrentDirectoryW" 0x013C 0x0000DE85 "GetCurrentProcess" 0x013D 0x000099B0 "GetCurrentProcessId" 0x013E 0x0000997B "GetCurrentThread" 0x013F 0x000097B8 "GetCurrentThreadId" 0x0140 0x00036206 "GetDateFormatA" 0x0141 0x0003378D "GetDateFormatW" 0x0142 0x00067A21 "GetDefaultCommConfigA" 0x0143 0x00067929 "GetDefaultCommConfigW" 0x0144 0x0007BA61 "GetDefaultSortkeySize" 0x0145 0x00061A24 "GetDevicePowerState" 0x0146 0x000302DD "GetDiskFreeSpaceA" 0x0147 0x0003038B "GetDiskFreeSpaceExA" 0x0148 0x00012893 "GetDiskFreeSpaceExW" 0x0149 0x0003019F "GetDiskFreeSpaceW" 0x014A 0x0005FE4F "GetDllDirectoryA" 0x014B 0x0005FCDF "GetDllDirectoryW" 0x014C 0x000214CB "GetDriveTypeA" 0x014D 0x0000B360 "GetDriveTypeW" 0x014E 0x0001CC7B "GetEnvironmentStrings" 0x014F 0x0001CC7B "GetEnvironmentStringsA" 0x0150 0x00012F98 "GetEnvironmentStringsW" 0x0151 0x00014B82 "GetEnvironmentVariableA" 0x0152 0x0000F184 "GetEnvironmentVariableW" 0x0153 0x0001AB3B "GetExitCodeProcess" 0x0154 0x0002141D "GetExitCodeThread" 0x0155 0x00065BA7 "GetExpandedNameA" 0x0156 0x00065C54 "GetExpandedNameW" 0x0157 0x000115CC "GetFileAttributesA" 0x0158 0x00013841 "GetFileAttributesExA" 0x0159 0x00011185 "GetFileAttributesExW" 0x015A 0x0000B7DC "GetFileAttributesW" 0x015B 0x00010CFD "GetFileInformationByHandle" 0x015C 0x00010B07 "GetFileSize" 0x015D 0x00010A99 "GetFileSizeEx" 0x015E 0x00031C35 "GetFileTime" 0x015F 0x00010EE1 "GetFileType" 0x0160 0x0005F43C "GetFirmwareEnvironmentVariableA" 0x0161 0x0005F325 "GetFirmwareEnvironmentVariableW" 0x0162 0x0001398C "GetFullPathNameA" 0x0163 0x0000B8E2 "GetFullPathNameW" 0x0164 0x00076862 "GetGeoInfoA" 0x0165 0x00079867 "GetGeoInfoW" 0x0166 0x0006C663 "GetHandleContext" 0x0167 0x0002BDAD "GetHandleInformation" 0x0168 0x00075651 "GetLargestConsoleWindowSize" 0x0169 0x000090BF "GetLastError" 0x016A 0x0007BA8B "GetLinguistLangSize" 0x016B 0x0000A864 "GetLocalTime" 0x016C 0x0000D2F2 "GetLocaleInfoA" 0x016D 0x000115F2 "GetLocaleInfoW" 0x016E 0x0002C2CB "GetLogicalDriveStringsA" 0x016F 0x000612D7 "GetLogicalDriveStringsW" 0x0170 0x00030B04 "GetLogicalDrives" 0x0171 0x00061C97 "GetLogicalProcessorInformation" 0x0172 0x00069566 "GetLongPathNameA" 0x0173 0x000133E3 "GetLongPathNameW" 0x0174 0x0005FA60 "GetMailslotInfo" 0x0175 0x0000B55F "GetModuleFileNameA" 0x0176 0x0000B465 "GetModuleFileNameW" 0x0177 0x0000B731 "GetModuleHandleA" 0x0178 0x0005FEEE "GetModuleHandleExA" 0x0179 0x0001FCA9 "GetModuleHandleExW" 0x017A 0x0000E4CD "GetModuleHandleW" 0x017B 0x00060BF3 "GetNamedPipeHandleStateA" 0x017C 0x0006098D "GetNamedPipeHandleStateW" 0x017D 0x00060792 "GetNamedPipeInfo" 0x017E 0x0003795D "GetNativeSystemInfo" 0x017F 0x00067F23 "GetNextVDMCommand" 0x0180 0x0001800D "GetNlsSectionName" 0x0181 0x00060ECC "GetNumaAvailableMemory" 0x0182 0x00060F12 "GetNumaAvailableMemoryNode" 0x0183 0x00060D49 "GetNumaHighestNodeNumber" 0x0184 0x00060E21 "GetNumaNodeProcessorMask" 0x0185 0x00060E86 "GetNumaProcessorMap" 0x0186 0x00060D94 "GetNumaProcessorNode" 0x0187 0x0002EC3C "GetNumberFormatA" 0x0188 0x000344D4 "GetNumberFormatW" 0x0189 0x00075521 "GetNumberOfConsoleFonts" 0x018A 0x0007558D "GetNumberOfConsoleInputEvents" 0x018B 0x00074701 "GetNumberOfConsoleMouseButtons" 0x018C 0x00012837 "GetOEMCP" 0x018D 0x000315B4 "GetOverlappedResult" 0x018E 0x00061D97 "GetPriorityClass" 0x018F 0x0003644C "GetPrivateProfileIntA" 0x0190 0x00032748 "GetPrivateProfileIntW" 0x0191 0x00035F39 "GetPrivateProfileSectionA" 0x0192 0x00032DBF "GetPrivateProfileSectionNamesA" 0x0193 0x0005CA12 "GetPrivateProfileSectionNamesW" 0x0194 0x0001EDA5 "GetPrivateProfileSectionW" 0x0195 0x00032B6E "GetPrivateProfileStringA" 0x0196 0x0000F9ED "GetPrivateProfileStringW" 0x0197 0x0005CA33 "GetPrivateProfileStructA" 0x0198 0x0005CB9D "GetPrivateProfileStructW" 0x0199 0x0000AE30 "GetProcAddress" 0x019A 0x0002174D "GetProcessAffinityMask" 0x019B 0x000621AD "GetProcessDEPPolicy" 0x019C 0x0006210A "GetProcessHandleCount" 0x019D 0x0000AC51 "GetProcessHeap" 0x019E 0x0005F8E3 "GetProcessHeaps" 0x019F 0x00061B7D "GetProcessId" 0x01A0 0x000620D9 "GetProcessIoCounters" 0x01A1 0x0006209F "GetProcessPriorityBoost" 0x01A2 0x00061DFD "GetProcessShutdownParameters" 0x01A3 0x000352F1 "GetProcessTimes" 0x01A4 0x00012CB3 "GetProcessVersion" 0x01A5 0x00061FEC "GetProcessWorkingSetSize" 0x01A6 0x000364C1 "GetProfileIntA" 0x01A7 0x0002F88A "GetProfileIntW" 0x01A8 0x0005CFDF "GetProfileSectionA" 0x01A9 0x0005D018 "GetProfileSectionW" 0x01AA 0x0002147D "GetProfileStringA" 0x01AB 0x000213E0 "GetProfileStringW" 0x01AC 0x0000A7AD "GetQueuedCompletionStatus" 0x01AD 0x00035BC8 "GetShortPathNameA" 0x01AE 0x0001F256 "GetShortPathNameW" 0x01AF 0x00001EF2 "GetStartupInfoA" 0x01B0 0x00001E54 "GetStartupInfoW" 0x01B1 0x00012FC9 "GetStdHandle" 0x01B2 0x00038A24 "GetStringTypeA" 0x01B3 0x000770EF "GetStringTypeExA" 0x01B4 0x0000C07F "GetStringTypeExW" 0x01B5 0x0000A520 "GetStringTypeW" 0x01B6 0x00061C60 "GetSystemDEPPolicy" 0x01B7 0x0000BFCD "GetSystemDefaultLCID" 0x01B8 0x00012842 "GetSystemDefaultLangID" 0x01B9 0x000130C8 "GetSystemDefaultUILanguage" 0x01BA 0x00014F7A "GetSystemDirectoryA" 0x01BB 0x00031DD3 "GetSystemDirectoryW" 0x01BC 0x00012DE6 "GetSystemInfo" 0x01BD 0x00035358 "GetSystemPowerStatus" 0x01BE 0x00062200 "GetSystemRegistryQuota" 0x01BF 0x0000176F "GetSystemTime" 0x01C0 0x0002D367 "GetSystemTimeAdjustment" 0x01C1 0x000017E9 "GetSystemTimeAsFileTime" 0x01C2 0x00061EA6 "GetSystemTimes" 0x01C3 0x000212D9 "GetSystemWindowsDirectoryA" 0x01C4 0x0000ADB9 "GetSystemWindowsDirectoryW" 0x01C5 0x00021454 "GetSystemWow64DirectoryA" 0x01C6 0x00021454 "GetSystemWow64DirectoryW" 0x01C7 0x0006C1A2 "GetTapeParameters" 0x01C8 0x0006C06C "GetTapePosition" 0x01C9 0x0006C23F "GetTapeStatus" 0x01CA 0x00061807 "GetTempFileNameA" 0x01CB 0x000359CF "GetTempFileNameW" 0x01CC 0x00035DE2 "GetTempPathA" 0x01CD 0x00030779 "GetTempPathW" 0x01CE 0x00039725 "GetThreadContext" 0x01CF 0x00063D11 "GetThreadIOPendingFlag" 0x01D0 0x0000A4A5 "GetThreadLocale" 0x01D1 0x0000A823 "GetThreadPriority" 0x01D2 0x00063A6F "GetThreadPriorityBoost" 0x01D3 0x0005B0F0 "GetThreadSelectorEntry" 0x01D4 0x00063CA4 "GetThreadTimes" 0x01D5 0x0000932E "GetTickCount" 0x01D6 0x00036345 "GetTimeFormatA" 0x01D7 0x00033FEB "GetTimeFormatW" 0x01D8 0x000350D7 "GetTimeZoneInformation" 0x01D9 0x00009FA0 "GetUserDefaultLCID" 0x01DA 0x0000BFF4 "GetUserDefaultLangID" 0x01DB 0x00013100 "GetUserDefaultUILanguage" 0x01DC 0x000379A6 "GetUserGeoID" 0x01DD 0x00068829 "GetVDMCurrentDirectories" 0x01DE 0x0001126A "GetVersion" 0x01DF 0x00012B6E "GetVersionExA" 0x01E0 0x0000AEF5 "GetVersionExW" 0x01E1 0x00021B8D "GetVolumeInformationA" 0x01E2 0x0000FA75 "GetVolumeInformationW" 0x01E3 0x0006AF41 "GetVolumeNameForVolumeMountPointA" 0x01E4 0x0001FB70 "GetVolumeNameForVolumeMountPointW" 0x01E5 0x0002E87B "GetVolumePathNameA" 0x01E6 0x0002E5E5 "GetVolumePathNameW" 0x01E7 0x0006B0E0 "GetVolumePathNamesForVolumeNameA" 0x01E8 0x00020CFC "GetVolumePathNamesForVolumeNameW" 0x01E9 0x0002134B "GetWindowsDirectoryA" 0x01EA 0x0000AE0B "GetWindowsDirectoryW" 0x01EB 0x0005F6D2 "GetWriteWatch" 0x01EC 0x000360C1 "GlobalAddAtomA" 0x01ED 0x000100FC "GlobalAddAtomW" 0x01EE 0x0000FDBD "GlobalAlloc" 0x01EF 0x0005F578 "GlobalCompact" 0x01F0 0x00030BAB "GlobalDeleteAtom" 0x01F1 0x000360DB "GlobalFindAtomA" 0x01F2 0x00034EAF "GlobalFindAtomW" 0x01F3 0x0005F58E "GlobalFix" 0x01F4 0x0003678A "GlobalFlags" 0x01F5 0x0000FCBF "GlobalFree" 0x01F6 0x0005C193 "GlobalGetAtomNameA" 0x01F7 0x0002C3B6 "GlobalGetAtomNameW" 0x01F8 0x00034CD1 "GlobalHandle" 0x01F9 0x0000FFA9 "GlobalLock" 0x01FA 0x000310E2 "GlobalMemoryStatus" 0x01FB 0x0001F97A "GlobalMemoryStatusEx" 0x01FC 0x00012449 "GlobalReAlloc" 0x01FD 0x00034DB9 "GlobalSize" 0x01FE 0x0005F5D2 "GlobalUnWire" 0x01FF 0x0005F5A8 "GlobalUnfix" 0x0200 0x0000FF12 "GlobalUnlock" 0x0201 0x0005F5C2 "GlobalWire" 0x0202 0x00064AB6 "Heap32First" 0x0203 0x00064971 "Heap32ListFirst" 0x0204 0x00064A1F "Heap32ListNext" 0x0205 0x00064BD0 "Heap32Next" 0x0206 0x000090DA "HeapAlloc" 0x0207 0x00036136 "HeapCompact" 0x0208 0x00012C46 "HeapCreate" 0x0209 0x0005F7D1 "HeapCreateTagsW" 0x020A 0x00010F88 "HeapDestroy" 0x020B 0x0005F7A0 "HeapExtend" 0x020C 0x000090F0 "HeapFree" 0x020D 0x0005F8F4 "HeapLock" 0x020E 0x0005FA2D "HeapQueryInformation" 0x020F 0x0005F7E2 "HeapQueryTagW" 0x0210 0x00009102 "HeapReAlloc" 0x0211 0x00039481 "HeapSetInformation" 0x0212 0x0000911A "HeapSize" 0x0213 0x0005F7F3 "HeapSummary" 0x0214 0x0005F90E "HeapUnlock" 0x0215 0x0005F84F "HeapUsage" 0x0216 0x0005F8C3 "HeapValidate" 0x0217 0x0005F928 "HeapWalk" 0x0218 0x0002AF77 "InitAtomTable" 0x0219 0x00009F81 "InitializeCriticalSection" 0x021A 0x0000B8B9 "InitializeCriticalSectionAndSpinCount" 0x021B 0x0000912C "InitializeSListHead" 0x021C 0x00009832 "InterlockedCompareExchange" 0x021D 0x0000980A "InterlockedDecrement" 0x021E 0x0000981E "InterlockedExchange" 0x021F 0x00009846 "InterlockedExchangeAdd" 0x0220 0x00009149 "InterlockedFlushSList" 0x0221 0x000097F6 "InterlockedIncrement" 0x0222 0x00009168 "InterlockedPopEntrySList" 0x0223 0x0000918A "InterlockedPushEntrySList" 0x0224 0x00074235 "InvalidateConsoleDIBits" 0x0225 0x0000BD5F "IsBadCodePtr" 0x0226 0x00035957 "IsBadHugeReadPtr" 0x0227 0x0000C02D "IsBadHugeWritePtr" 0x0228 0x00009E91 "IsBadReadPtr" 0x0229 0x00032273 "IsBadStringPtrA" 0x022A 0x0000A66C "IsBadStringPtrW" 0x022B 0x00009F09 "IsBadWritePtr" 0x022C 0x0000B86C "IsDBCSLeadByte" 0x022D 0x0007B4EE "IsDBCSLeadByteEx" 0x022E 0x00013123 "IsDebuggerPresent" 0x022F 0x0006C304 "IsProcessInJob" 0x0230 0x0000AEBA "IsProcessorFeaturePresent" 0x0231 0x00061A68 "IsSystemResumeAutomatic" 0x0232 0x0001115B "IsValidCodePage" 0x0233 0x0007740F "IsValidLanguageGroup" 0x0234 0x0001C1AB "IsValidLocale" 0x0235 0x0007751B "IsValidUILanguage" 0x0236 0x00015229 "IsWow64Process" 0x0237 0x00038E00 "LCMapStringA" 0x0238 0x0000CD38 "LCMapStringW" 0x0239 0x0006649E "LZClose" 0x023A 0x00066427 "LZCloseFile" 0x023B 0x00059754 "LZCopy" 0x023C 0x00065F5D "LZCreateFileW" 0x023D 0x000806F8 "LZDone" 0x023E 0x00065E02 "LZInit" 0x023F 0x00066030 "LZOpenFileA" 0x0240 0x000660F7 "LZOpenFileW" 0x0241 0x00066219 "LZRead" 0x0242 0x0006618E "LZSeek" 0x0243 0x0008012E "LZStart" 0x0244 0x000091AD "LeaveCriticalSection" 0x0245 0x00001D7B "LoadLibraryA" 0x0246 0x00001D53 "LoadLibraryExA" 0x0247 0x00001AF5 "LoadLibraryExW" 0x0248 0x0000AEDB "LoadLibraryW" 0x0249 0x000624BE "LoadModule" 0x024A 0x0000A045 "LoadResource" 0x024B 0x00009A1D "LocalAlloc" 0x024C 0x0005F578 "LocalCompact" 0x024D 0x0003553C "LocalFileTimeToFileTime" 0x024E 0x00055D56 "LocalFlags" 0x024F 0x000099BF "LocalFree" 0x0250 0x00055E51 "LocalHandle" 0x0251 0x00032E35 "LocalLock" 0x0252 0x00030917 "LocalReAlloc" 0x0253 0x0005F78A "LocalShrink" 0x0254 0x000325D4 "LocalSize" 0x0255 0x00032EC9 "LocalUnlock" 0x0256 0x00032379 "LockFile" 0x0257 0x0002F559 "LockFileEx" 0x0258 0x0000CD27 "LockResource" 0x0259 0x0005F676 "MapUserPhysicalPages" 0x025A 0x0005F6A4 "MapUserPhysicalPagesScatter" 0x025B 0x0000B995 "MapViewOfFile" 0x025C 0x0000B926 "MapViewOfFileEx" 0x025D 0x00065240 "Module32First" 0x025E 0x00065187 "Module32FirstW" 0x025F 0x000653C5 "Module32Next" 0x0260 0x00065324 "Module32NextW" 0x0261 0x00035EA7 "MoveFileA" 0x0262 0x0005E3CB "MoveFileExA" 0x0263 0x00035673 "MoveFileExW" 0x0264 0x00021249 "MoveFileW" 0x0265 0x00035EC6 "MoveFileWithProgressA" 0x0266 0x0001F716 "MoveFileWithProgressW" 0x0267 0x00009856 "MulDiv" 0x0268 0x00009C88 "MultiByteToWideChar" 0x0269 0x00014FEC "NlsConvertIntegerToString" 0x026A 0x00035831 "NlsGetCacheUpdateCount" 0x026B 0x000773E9 "NlsResetProcessLocale" 0x026C 0x00060FDA "NumaVirtualQueryNode" 0x026D 0x00011071 "OpenConsoleW" 0x026E 0x0002AD80 "OpenDataFile" 0x026F 0x0001329C "OpenEventA" 0x0270 0x000131D0 "OpenEventW" 0x0271 0x0002196A "OpenFile" 0x0272 0x0000BC06 "OpenFileMappingA" 0x0273 0x0000BB6A "OpenFileMappingW" 0x0274 0x0006C3D8 "OpenJobObjectA" 0x0275 0x0006C260 "OpenJobObjectW" 0x0276 0x0000EAAB "OpenMutexA" 0x0277 0x0000EA25 "OpenMutexW" 0x0278 0x000309D1 "OpenProcess" 0x0279 0x00033337 "OpenProfileUserMapping" 0x027A 0x0002CA3F "OpenSemaphoreA" 0x027B 0x0002E307 "OpenSemaphoreW" 0x027C 0x0002FBF0 "OpenThread" 0x027D 0x00062B30 "OpenWaitableTimerA" 0x027E 0x000629C5 "OpenWaitableTimerW" 0x027F 0x0005AC7C "OutputDebugStringA" 0x0280 0x0005B335 "OutputDebugStringW" 0x0281 0x000744AD "PeekConsoleInputA" 0x0282 0x000744D0 "PeekConsoleInputW" 0x0283 0x00060817 "PeekNamedPipe" 0x0284 0x00012782 "PostQueuedCompletionStatus" 0x0285 0x0006C0C8 "PrepareTape" 0x0286 0x00020047 "PrivCopyFileExW" 0x0287 0x0005DFF1 "PrivMoveFileIdentityW" 0x0288 0x00064DF5 "Process32First" 0x0289 0x00064D3C "Process32FirstW" 0x028A 0x00064F68 "Process32Next" 0x028B 0x00064EC7 "Process32NextW" 0x028C 0x00013019 "ProcessIdToSessionId" 0x028D 0x0002C056 "PulseEvent" 0x028E 0x00066CE5 "PurgeComm" 0x028F 0x0001636B "QueryActCtxW" 0x0290 0x000091CB "QueryDepthSList" 0x0291 0x0005D274 "QueryDosDeviceA" 0x0292 0x00021D75 "QueryDosDeviceW" 0x0293 0x0002AFB1 "QueryInformationJobObject" 0x0294 0x000395F0 "QueryMemoryResourceNotification" 0x0295 0x0000A4B7 "QueryPerformanceCounter" 0x0296 0x0002FA36 "QueryPerformanceFrequency" 0x0297 0x0005C624 "QueryWin31IniFilesMappedToRegistry" 0x0298 0x0002C07A "QueueUserAPC" 0x0299 0x00030A52 "QueueUserWorkItem" 0x029A 0x00012A99 "RaiseException" 0x029B 0x00072A3D "ReadConsoleA" 0x029C 0x000744F3 "ReadConsoleInputA" 0x029D 0x00074539 "ReadConsoleInputExA" 0x029E 0x0007455D "ReadConsoleInputExW" 0x029F 0x00074516 "ReadConsoleInputW" 0x02A0 0x00073825 "ReadConsoleOutputA" 0x02A1 0x00073D45 "ReadConsoleOutputAttribute" 0x02A2 0x00073CF9 "ReadConsoleOutputCharacterA" 0x02A3 0x00073D1F "ReadConsoleOutputCharacterW" 0x02A4 0x00073801 "ReadConsoleOutputW" 0x02A5 0x00072A8C "ReadConsoleW" 0x02A6 0x0003161F "ReadDirectoryChangesW" 0x02A7 0x00001812 "ReadFile" 0x02A8 0x0002BCF3 "ReadFileEx" 0x02A9 0x0002DE49 "ReadFileScatter" 0x02AA 0x000021D0 "ReadProcessMemory" 0x02AB 0x00075AD9 "RegisterConsoleIME" 0x02AC 0x000758E9 "RegisterConsoleOS2" 0x02AD 0x00072AE2 "RegisterConsoleVDM" 0x02AE 0x0001701E "RegisterWaitForInputIdle" 0x02AF 0x000211B5 "RegisterWaitForSingleObject" 0x02B0 0x0002B06E "RegisterWaitForSingleObjectEx" 0x02B1 0x0005F562 "RegisterWowBaseHandlers" 0x02B2 0x00068989 "RegisterWowExec" 0x02B3 0x000130EF "ReleaseActCtx" 0x02B4 0x000024B7 "ReleaseMutex" 0x02B5 0x0000C03D "ReleaseSemaphore" 0x02B6 0x0005C121 "RemoveDirectoryA" 0x02B7 0x00036F73 "RemoveDirectoryW" 0x02B8 0x000594AC "RemoveLocalAlternateComputerNameA" 0x02B9 0x000593CB "RemoveLocalAlternateComputerNameW" 0x02BA 0x000091E4 "RemoveVectoredExceptionHandler" 0x02BB 0x00036C54 "ReplaceFile" 0x02BC 0x0005F20F "ReplaceFileA" 0x02BD 0x00036C54 "ReplaceFileW" 0x02BE 0x00061A77 "RequestDeviceWakeup" 0x02BF 0x000619FC "RequestWakeupLatency" 0x02C0 0x0000A0CB "ResetEvent" 0x02C1 0x0005F70B "ResetWriteWatch" 0x02C2 0x0000920C "RestoreLastError" 0x02C3 0x0003290F "ResumeThread" 0x02C4 0x0000922B "RtlCaptureContext" 0x02C5 0x00009243 "RtlCaptureStackBackTrace" 0x02C6 0x00009262 "RtlFillMemory" 0x02C7 0x00009276 "RtlMoveMemory" 0x02C8 0x0000928A "RtlUnwind" 0x02C9 0x0000929A "RtlZeroMemory" 0x02CA 0x00074F41 "ScrollConsoleScreenBufferA" 0x02CB 0x00074F65 "ScrollConsoleScreenBufferW" 0x02CC 0x000217D2 "SearchPathA" 0x02CD 0x0000E76C "SearchPathW" 0x02CE 0x0007A7E3 "SetCPGlobal" 0x02CF 0x00076AF6 "SetCalendarInfoA" 0x02D0 0x00077D3B "SetCalendarInfoW" 0x02D1 0x00059D03 "SetClientTimeZoneInformation" 0x02D2 0x0006CB45 "SetComPlusPackageInstallStatus" 0x02D3 0x00066D6F "SetCommBreak" 0x02D4 0x00067E8B "SetCommConfig" 0x02D5 0x00066D87 "SetCommMask" 0x02D6 0x00066E26 "SetCommState" 0x02D7 0x0006712E "SetCommTimeouts" 0x02D8 0x00058690 "SetComputerNameA" 0x02D9 0x000587A8 "SetComputerNameExA" 0x02DA 0x0005860F "SetComputerNameExW" 0x02DB 0x000584E9 "SetComputerNameW" 0x02DC 0x00074AC8 "SetConsoleActiveScreenBuffer" 0x02DD 0x00075163 "SetConsoleCP" 0x02DE 0x000719E5 "SetConsoleCommandHistoryMode" 0x02DF 0x0001B2AB "SetConsoleCtrlHandler" 0x02E0 0x00072F0A "SetConsoleCursor" 0x02E1 0x00074CA4 "SetConsoleCursorInfo" 0x02E2 0x0007579F "SetConsoleCursorMode" 0x02E3 0x00074C2A "SetConsoleCursorPosition" 0x02E4 0x000730C0 "SetConsoleDisplayMode" 0x02E5 0x00075005 "SetConsoleFont" 0x02E6 0x00072D09 "SetConsoleHardwareState" 0x02E7 0x0007507F "SetConsoleIcon" 0x02E8 0x00071DC8 "SetConsoleInputExeNameA" 0x02E9 0x0001B075 "SetConsoleInputExeNameW" 0x02EA 0x00072D89 "SetConsoleKeyShortcuts" 0x02EB 0x000756D9 "SetConsoleLocalEUDC" 0x02EC 0x0008023B "SetConsoleMaximumWindowSize" 0x02ED 0x00072E50 "SetConsoleMenuClose" 0x02EE 0x0001AF10 "SetConsoleMode" 0x02EF 0x000760F9 "SetConsoleNlsMode" 0x02F0 0x00071745 "SetConsoleNumberOfCommandsA" 0x02F1 0x0007172A "SetConsoleNumberOfCommandsW" 0x02F2 0x0007595D "SetConsoleOS2OemFormat" 0x02F3 0x00075281 "SetConsoleOutputCP" 0x02F4 0x000731E9 "SetConsolePalette" 0x02F5 0x00074BB0 "SetConsoleScreenBufferSize" 0x02F6 0x00074F89 "SetConsoleTextAttribute" 0x02F7 0x00071A81 "SetConsoleTitleA" 0x02F8 0x0002D9B5 "SetConsoleTitleW" 0x02F9 0x00074D71 "SetConsoleWindowInfo" 0x02FA 0x000092AE "SetCriticalSectionSpinCount" 0x02FB 0x000360F5 "SetCurrentDirectoryA" 0x02FC 0x0000F37E "SetCurrentDirectoryW" 0x02FD 0x00067BF1 "SetDefaultCommConfigA" 0x02FE 0x00067AF9 "SetDefaultCommConfigW" 0x02FF 0x0005FC4E "SetDllDirectoryA" 0x0300 0x0005FBB8 "SetDllDirectoryW" 0x0301 0x0003205E "SetEndOfFile" 0x0302 0x00033490 "SetEnvironmentVariableA" 0x0303 0x0001024E "SetEnvironmentVariableW" 0x0304 0x0000AC9F "SetErrorMode" 0x0305 0x0000A0A7 "SetEvent" 0x0306 0x0003660E "SetFileApisToANSI" 0x0307 0x0001CD9E "SetFileApisToOEM" 0x0308 0x00012812 "SetFileAttributesA" 0x0309 0x000314C5 "SetFileAttributesW" 0x030A 0x00010C1E "SetFilePointer" 0x030B 0x0002103F "SetFilePointerEx" 0x030C 0x0005D7CC "SetFileShortNameA" 0x030D 0x0005D6FF "SetFileShortNameW" 0x030E 0x00031CA8 "SetFileTime" 0x030F 0x0005D6A9 "SetFileValidData" 0x0310 0x0005F4CF "SetFirmwareEnvironmentVariableA" 0x0311 0x0005F3B4 "SetFirmwareEnvironmentVariableW" 0x0312 0x00021454 "SetHandleContext" 0x0313 0x0000CD27 "SetHandleCount" 0x0314 0x0002E184 "SetHandleInformation" 0x0315 0x0002CA97 "SetInformationJobObject" 0x0316 0x000764F3 "SetLastConsoleEventActive" 0x0317 0x000092D3 "SetLastError" 0x0318 0x0005970B "SetLocalPrimaryComputerNameA" 0x0319 0x000594F5 "SetLocalPrimaryComputerNameW" 0x031A 0x00055C69 "SetLocalTime" 0x031B 0x000768EB "SetLocaleInfoA" 0x031C 0x00077E93 "SetLocaleInfoW" 0x031D 0x0002CDD0 "SetMailslotInfo" 0x031E 0x00061AC7 "SetMessageWaitingIndicator" 0x031F 0x000313DC "SetNamedPipeHandleState" 0x0320 0x0002C330 "SetPriorityClass" 0x0321 0x00062034 "SetProcessAffinityMask" 0x0322 0x00062144 "SetProcessDEPPolicy" 0x0323 0x00062064 "SetProcessPriorityBoost" 0x0324 0x0002C8E5 "SetProcessShutdownParameters" 0x0325 0x000303C0 "SetProcessWorkingSetSize" 0x0326 0x0001D363 "SetStdHandle" 0x0327 0x000619B3 "SetSystemPowerState" 0x0328 0x0005981A "SetSystemTime" 0x0329 0x000599E0 "SetSystemTimeAdjustment" 0x032A 0x0006C1FE "SetTapeParameters" 0x032B 0x0006C026 "SetTapePosition" 0x032C 0x00062BA4 "SetTermsrvAppInstallMode" 0x032D 0x0002FA6A "SetThreadAffinityMask" 0x032E 0x00063AA9 "SetThreadContext" 0x032F 0x000392CD "SetThreadExecutionState" 0x0330 0x00063D50 "SetThreadIdealProcessor" 0x0331 0x0001B8DA "SetThreadLocale" 0x0332 0x0000C198 "SetThreadPriority" 0x0333 0x00063A34 "SetThreadPriorityBoost" 0x0334 0x0001AF78 "SetThreadUILanguage" 0x0335 0x000598BA "SetTimeZoneInformation" 0x0336 0x0002B256 "SetTimerQueueTimer" 0x0337 0x000449FD "SetUnhandledExceptionFilter" 0x0338 0x00079C7C "SetUserGeoID" 0x0339 0x000686F4 "SetVDMCurrentDirectories" 0x033A 0x000618F5 "SetVolumeLabelA" 0x033B 0x000613A1 "SetVolumeLabelW" 0x033C 0x0006B071 "SetVolumeMountPointA" 0x033D 0x0006A375 "SetVolumeMountPointW" 0x033E 0x00009689 "SetWaitableTimer" 0x033F 0x000666AA "SetupComm" 0x0340 0x00072F84 "ShowConsoleCursor" 0x0341 0x000366AE "SignalObjectAndWait" 0x0342 0x0000BCF9 "SizeofResource" 0x0343 0x00002446 "Sleep" 0x0344 0x000023A0 "SleepEx" 0x0345 0x0003974A "SuspendThread" 0x0346 0x00010702 "SwitchToFiber" 0x0347 0x000329AA "SwitchToThread" 0x0348 0x00010BAC "SystemTimeToFileTime" 0x0349 0x0002E991 "SystemTimeToTzSpecificLocalTime" 0x034A 0x0006C2D7 "TerminateJobObject" 0x034B 0x00001E1A "TerminateProcess" 0x034C 0x0001CB23 "TerminateThread" 0x034D 0x0001EFB6 "TermsrvAppInstallMode" 0x034E 0x0006503A "Thread32First" 0x034F 0x000650EE "Thread32Next" 0x0350 0x00012E2F "TlsAlloc" 0x0351 0x00013767 "TlsFree" 0x0352 0x000097D0 "TlsGetValue" 0x0353 0x00009C55 "TlsSetValue" 0x0354 0x00064CFC "Toolhelp32ReadProcessMemory" 0x0355 0x000312D5 "TransactNamedPipe" 0x0356 0x000671D9 "TransmitCommChar" 0x0357 0x0005FB56 "TrimVirtualBuffer" 0x0358 0x000092EE "TryEnterCriticalSection" 0x0359 0x0005A77B "TzSpecificLocalTimeToSystemTime" 0x035A 0x0005FDF8 "UTRegister" 0x035B 0x0007F14F "UTUnRegister" 0x035C 0x00063E6A "UnhandledExceptionFilter" 0x035D 0x000322D4 "UnlockFile" 0x035E 0x00032313 "UnlockFileEx" 0x035F 0x0000BA04 "UnmapViewOfFile" 0x0360 0x00075BA6 "UnregisterConsoleIME" 0x0361 0x0002BFF0 "UnregisterWait" 0x0362 0x00030052 "UnregisterWaitEx" 0x0363 0x000706C8 "UpdateResourceA" 0x0364 0x000705C1 "UpdateResourceW" 0x0365 0x00076504 "VDMConsoleOperation" 0x0366 0x00068DF9 "VDMOperationStarted" 0x0367 0x0007BAB5 "ValidateLCType" 0x0368 0x00039810 "ValidateLocale" 0x0369 0x0002EFAA "VerLanguageNameA" 0x036A 0x0002F032 "VerLanguageNameW" 0x036B 0x0000930F "VerSetConditionMask" 0x036C 0x0001ABCE "VerifyConsoleIoHandle" 0x036D 0x0005FD4E "VerifyVersionInfoA" 0x036E 0x0001FB0E "VerifyVersionInfoW" 0x036F 0x00009AE1 "VirtualAlloc" 0x0370 0x00009B02 "VirtualAllocEx" 0x0371 0x0005FB79 "VirtualBufferExceptionHandler" 0x0372 0x00009B74 "VirtualFree" 0x0373 0x00009B92 "VirtualFreeEx" 0x0374 0x0002B127 "VirtualLock" 0x0375 0x00001AD4 "VirtualProtect" 0x0376 0x00001A61 "VirtualProtectEx" 0x0377 0x0000BA61 "VirtualQuery" 0x0378 0x0000BA30 "VirtualQueryEx" 0x0379 0x0005F5E2 "VirtualUnlock" 0x037A 0x0001337E "WTSGetActiveConsoleSessionId" 0x037B 0x00067263 "WaitCommEvent" 0x037C 0x0005B388 "WaitForDebugEvent" 0x037D 0x0000A0ED "WaitForMultipleObjects" 0x037E 0x000095BC "WaitForMultipleObjectsEx" 0x037F 0x00002530 "WaitForSingleObject" 0x0380 0x00002550 "WaitForSingleObjectEx" 0x0381 0x00060B41 "WaitNamedPipeA" 0x0382 0x0002C65C "WaitNamedPipeW" 0x0383 0x0000A164 "WideCharToMultiByte" 0x0384 0x000623AD "WinExec" 0x0385 0x0001CC45 "WriteConsoleA" 0x0386 0x000733E5 "WriteConsoleInputA" 0x0387 0x00072EC4 "WriteConsoleInputVDMA" 0x0388 0x00072EE7 "WriteConsoleInputVDMW" 0x0389 0x00073408 "WriteConsoleInputW" 0x038A 0x00073B65 "WriteConsoleOutputA" 0x038B 0x00073F11 "WriteConsoleOutputAttribute" 0x038C 0x00073EC5 "WriteConsoleOutputCharacterA" 0x038D 0x00073EEB "WriteConsoleOutputCharacterW" 0x038E 0x00073B41 "WriteConsoleOutputW" 0x038F 0x0003549C "WriteConsoleW" 0x0390 0x00010E17 "WriteFile" 0x0391 0x0005D609 "WriteFileEx" 0x0392 0x0002DD9D "WriteFileGather" 0x0393 0x0005C984 "WritePrivateProfileSectionA" 0x0394 0x0005C9CB "WritePrivateProfileSectionW" 0x0395 0x00035D6C "WritePrivateProfileStringA" 0x0396 0x0001EE34 "WritePrivateProfileStringW" 0x0397 0x0005CD2B "WritePrivateProfileStructA" 0x0398 0x0005CE6D "WritePrivateProfileStructW" 0x0399 0x00002213 "WriteProcessMemory" 0x039A 0x0005CFFD "WriteProfileSectionA" 0x039B 0x0005D036 "WriteProfileSectionW" 0x039C 0x0005CFC1 "WriteProfileStringA" 0x039D 0x000332C9 "WriteProfileStringW" 0x039E 0x0006C168 "WriteTapemark" 0x039F 0x0006C6DB "ZombifyActCtx" 0x03A0 0x000353E6 "_hread" 0x03A1 0x00038AFF "_hwrite" 0x03A2 0x00034E7C "_lclose" 0x03A3 0x000365BD "_lcreat" 0x03A4 0x0003541E "_llseek" 0x03A5 0x0005F738 "_lopen" 0x03A6 0x000353E6 "_lread" 0x03A7 0x00038AFF "_lwrite" 0x03A8 0x00034D59 "lstrcat" 0x03A9 0x00034D59 "lstrcatA" 0x03AA 0x00010FC2 "lstrcatW" 0x03AB 0x00030D64 "lstrcmp" 0x03AC 0x00030D64 "lstrcmpA" 0x03AD 0x0000AA5C "lstrcmpW" 0x03AE 0x0000BB31 "lstrcmpi" 0x03AF 0x0000BB31 "lstrcmpiA" 0x03B0 0x0000AA26 "lstrcmpiW" 0x03B1 0x0000BE91 "lstrcpy" 0x03B2 0x0000BE91 "lstrcpyA" 0x03B3 0x0000BAF4 "lstrcpyW" 0x03B4 0x000101A1 "lstrcpyn" 0x03B5 0x000101A1 "lstrcpynA" 0x03B6 0x0000BA7F "lstrcpynW" 0x03B7 0x0000BE46 "lstrlen" 0x03B8 0x0000BE46 "lstrlenA" 0x03B9 0x00009A99 "lstrlenW"
Thursday, November 25, 2010
Kernel32 EAT
->Export Table
Labels:
kernel,
reverse engineering
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment