Thursday, November 25, 2010

Kernel32 EAT

->Export Table
Characteristics:        0x00000000

   TimeDateStamp:          0x48025BE1  (GMT: Sun Apr 13 19:15:45 2008)

   MajorVersion:           0x0000

   MinorVersion:           0x0000  -> 0.00

   Name:                   0x00004B8E  ("KERNEL32.dll")

   Base:                   0x00000001

   NumberOfFunctions:      0x000003B9

   NumberOfNames:          0x000003B9

   AddressOfFunctions:     0x00002654

   AddressOfNames:         0x00003538

   AddressOfNameOrdinals:  0x0000441C


   Ordinal RVA        Symbol Name

   ------- ---------- ----------------------------------

   0x0001  0x0000A6D4 "ActivateActCtx"

   0x0002  0x00035505 "AddAtomA"

   0x0003  0x000326D9 "AddAtomW"

   0x0004  0x00071CDF "AddConsoleAliasA"

   0x0005  0x00071CA1 "AddConsoleAliasW"

   0x0006  0x00059382 "AddLocalAlternateComputerNameA"

   0x0007  0x00059266 "AddLocalAlternateComputerNameW"

   0x0008  0x0002BEF9 "AddRefActCtx"

   0x0009  0x00008FF5 "AddVectoredExceptionHandler"

   0x000A  0x00072331 "AllocConsole"

   0x000B  0x0005F61A "AllocateUserPhysicalPages"

   0x000C  0x00035967 "AreFileApisANSI"

   0x000D  0x0002E442 "AssignProcessToJobObject"

   0x000E  0x00072519 "AttachConsole"

   0x000F  0x000571CA "BackupRead"

   0x0010  0x000562B0 "BackupSeek"

   0x0011  0x00057825 "BackupWrite"

   0x0012  0x00016867 "BaseCheckAppcompatCache"

   0x0013  0x0006CDE6 "BaseCleanupAppcompatCache"

   0x0014  0x0006CE6A "BaseCleanupAppcompatCacheSupport"

   0x0015  0x0006CCA1 "BaseDumpAppcompatCache"

   0x0016  0x0006CC1F "BaseFlushAppcompatCache"

   0x0017  0x0001655D "BaseInitAppcompatCache"

   0x0018  0x0002B375 "BaseInitAppcompatCacheSupport"

   0x0019  0x000174D3 "BaseProcessInitPostImport"

   0x001A  0x00038372 "BaseQueryModuleData"

   0x001B  0x000151B0 "BaseUpdateAppcompatCache"

   0x001C  0x000195A3 "BasepCheckWinSaferRestrictions"

   0x001D  0x00037A8F "Beep"

   0x001E  0x00070C9B "BeginUpdateResourceA"

   0x001F  0x00070AF8 "BeginUpdateResourceW"

   0x0020  0x0002C024 "BindIoCompletionCallback"

   0x0021  0x0006BECD "BuildCommDCBA"

   0x0022  0x0006BE9F "BuildCommDCBAndTimeoutsA"

   0x0023  0x0006BEFF "BuildCommDCBAndTimeoutsW"

   0x0024  0x0006BF59 "BuildCommDCBW"

   0x0025  0x00060CD6 "CallNamedPipeA"

   0x0026  0x00060A87 "CallNamedPipeW"

   0x0027  0x00061A9F "CancelDeviceWakeupRequest"

   0x0028  0x000300CA "CancelIo"

   0x0029  0x00063DF8 "CancelTimerQueueTimer"

   0x002A  0x0002CC01 "CancelWaitableTimer"

   0x002B  0x000127B3 "ChangeTimerQueueTimer"

   0x002C  0x00061959 "CheckNameLegalDOS8Dot3A"

   0x002D  0x00061719 "CheckNameLegalDOS8Dot3W"

   0x002E  0x0005AA22 "CheckRemoteDebuggerPresent"

   0x002F  0x00067CD1 "ClearCommBreak"

   0x0030  0x0006655F "ClearCommError"

   0x0031  0x0001D3DE "CloseConsoleHandle"

   0x0032  0x00009BD7 "CloseHandle"

   0x0033  0x0002C865 "CloseProfileUserMapping"

   0x0034  0x0002F5F9 "CmdBatNotification"

   0x0035  0x00067851 "CommConfigDialogA"

   0x0036  0x0006775D "CommConfigDialogW"

   0x0037  0x00010B69 "CompareFileTime"

   0x0038  0x0000D107 "CompareStringA"

   0x0039  0x0000A3EE "CompareStringW"

   0x003A  0x0003144B "ConnectNamedPipe"

   0x003B  0x00072FDF "ConsoleMenuControl"

   0x003C  0x0005B46D "ContinueDebugEvent"

   0x003D  0x000383E7 "ConvertDefaultLocale"

   0x003E  0x0002FEC7 "ConvertFiberToThread"

   0x003F  0x0002FF06 "ConvertThreadToFiber"

   0x0040  0x000286D6 "CopyFileA"

   0x0041  0x0005F2CC "CopyFileExA"

   0x0042  0x00027B1A "CopyFileExW"

   0x0043  0x0002F863 "CopyFileW"

   0x0044  0x0005980A "CopyLZFile"

   0x0045  0x0006C785 "CreateActCtxA"

   0x0046  0x000154EC "CreateActCtxW"

   0x0047  0x00074088 "CreateConsoleScreenBuffer"

   0x0048  0x00021794 "CreateDirectoryA"

   0x0049  0x0005C143 "CreateDirectoryExA"

   0x004A  0x0005B4FA "CreateDirectoryExW"

   0x004B  0x000323EA "CreateDirectoryW"

   0x004C  0x0003089D "CreateEventA"

   0x004D  0x0000A739 "CreateEventW"

   0x004E  0x0002FF9F "CreateFiber"

   0x004F  0x0002FFBF "CreateFiberEx"

   0x0050  0x00001A28 "CreateFileA"

   0x0051  0x000094EE "CreateFileMappingA"

   0x0052  0x00009420 "CreateFileMappingW"

   0x0053  0x000107F0 "CreateFileW"

   0x0054  0x0006C609 "CreateHardLinkA"

   0x0055  0x0006C44C "CreateHardLinkW"

   0x0056  0x00031375 "CreateIoCompletionPort"

   0x0057  0x0006C36C "CreateJobObjectA"

   0x0058  0x0002CAFB "CreateJobObjectW"

   0x0059  0x0006C33E "CreateJobSet"

   0x005A  0x0002CC83 "CreateMailslotA"

   0x005B  0x0002CCD4 "CreateMailslotW"

   0x005C  0x00039672 "CreateMemoryResourceNotification"

   0x005D  0x0000E9CF "CreateMutexA"

   0x005E  0x0000E947 "CreateMutexW"

   0x005F  0x00060B7C "CreateNamedPipeA"

   0x0060  0x0002F0C5 "CreateNamedPipeW"

   0x0061  0x0002AC54 "CreateNlsSecurityDescriptor"

   0x0062  0x0001D827 "CreatePipe"

   0x0063  0x0000236B "CreateProcessA"

   0x0064  0x0001D536 "CreateProcessInternalA"

   0x0065  0x0001979C "CreateProcessInternalW"

   0x0066  0x000806F8 "CreateProcessInternalWSecure"

   0x0067  0x00002336 "CreateProcessW"

   0x0068  0x000104BC "CreateRemoteThread"

   0x0069  0x00012EAD "CreateSemaphoreA"

   0x006A  0x00010116 "CreateSemaphoreW"

   0x006B  0x0006C674 "CreateSocketHandle"

   0x006C  0x0006C12E "CreateTapePartition"

   0x006D  0x000106C7 "CreateThread"

   0x006E  0x0002BFCE "CreateTimerQueue"

   0x006F  0x00021165 "CreateTimerQueueTimer"

   0x0070  0x00065B1F "CreateToolhelp32Snapshot"

   0x0071  0x0003494A "CreateVirtualBuffer"

   0x0072  0x00062AC1 "CreateWaitableTimerA"

   0x0073  0x0002FB42 "CreateWaitableTimerW"

   0x0074  0x0000A705 "DeactivateActCtx"

   0x0075  0x0005B02B "DebugActiveProcess"

   0x0076  0x0005B4B1 "DebugActiveProcessStop"

   0x0077  0x0005AA76 "DebugBreak"

   0x0078  0x0005B07E "DebugBreakProcess"

   0x0079  0x0005B0A5 "DebugSetProcessKillOnExit"

   0x007A  0x0000901A "DecodePointer"

   0x007B  0x00009031 "DecodeSystemPointer"

   0x007C  0x0005D1CD "DefineDosDeviceA"

   0x007D  0x00021F06 "DefineDosDeviceW"

   0x007E  0x0007EECD "DelayLoadFailureHook"

   0x007F  0x000326AD "DeleteAtom"

   0x0080  0x0000904E "DeleteCriticalSection"

   0x0081  0x0002FE74 "DeleteFiber"

   0x0082  0x00031EC5 "DeleteFileA"

   0x0083  0x00031F4B "DeleteFileW"

   0x0084  0x00063DCB "DeleteTimerQueue"

   0x0085  0x00063D84 "DeleteTimerQueueEx"

   0x0086  0x00021118 "DeleteTimerQueueTimer"

   0x0087  0x0006B0BE "DeleteVolumeMountPointA"

   0x0088  0x0006A910 "DeleteVolumeMountPointW"

   0x0089  0x00001629 "DeviceIoControl"

   0x008A  0x00011326 "DisableThreadLibraryCalls"

   0x008B  0x0001272F "DisconnectNamedPipe"

   0x008C  0x00058A2B "DnsHostnameToComputerNameA"

   0x008D  0x0002CEAA "DnsHostnameToComputerNameW"

   0x008E  0x00032168 "DosDateTimeToFileTime"

   0x008F  0x000627D9 "DosPathToSessionPathA"

   0x0090  0x0002C1DF "DosPathToSessionPathW"

   0x0091  0x0001D4AD "DuplicateConsoleHandle"

   0x0092  0x0000DE8E "DuplicateHandle"

   0x0093  0x0000906D "EncodePointer"

   0x0094  0x00009084 "EncodeSystemPointer"

   0x0095  0x00070969 "EndUpdateResourceA"

   0x0096  0x00070792 "EndUpdateResourceW"

   0x0097  0x000090A1 "EnterCriticalSection"

   0x0098  0x00038229 "EnumCalendarInfoA"

   0x0099  0x00076769 "EnumCalendarInfoExA"

   0x009A  0x0007979D "EnumCalendarInfoExW"

   0x009B  0x0007977A "EnumCalendarInfoW"

   0x009C  0x000767AA "EnumDateFormatsA"

   0x009D  0x000767CA "EnumDateFormatsExA"

   0x009E  0x000797C0 "EnumDateFormatsExW"

   0x009F  0x000387F9 "EnumDateFormatsW"

   0x00A0  0x00076808 "EnumLanguageGroupLocalesA"

   0x00A1  0x00079723 "EnumLanguageGroupLocalesW"

   0x00A2  0x0002DFF8 "EnumResourceLanguagesA"

   0x00A3  0x00060539 "EnumResourceLanguagesW"

   0x00A4  0x00060131 "EnumResourceNamesA"

   0x00A5  0x00055A51 "EnumResourceNamesW"

   0x00A6  0x0005FF44 "EnumResourceTypesA"

   0x00A7  0x00060351 "EnumResourceTypesW"

   0x00A8  0x00076847 "EnumSystemCodePagesA"

   0x00A9  0x0007975F "EnumSystemCodePagesW"

   0x00AA  0x00079BF9 "EnumSystemGeoID"

   0x00AB  0x000767EA "EnumSystemLanguageGroupsA"

   0x00AC  0x00079705 "EnumSystemLanguageGroupsW"

   0x00AD  0x00037CF9 "EnumSystemLocalesA"

   0x00AE  0x00079744 "EnumSystemLocalesW"

   0x00AF  0x0007678C "EnumTimeFormatsA"

   0x00B0  0x000388D6 "EnumTimeFormatsW"

   0x00B1  0x00076829 "EnumUILanguagesA"

   0x00B2  0x0002A8C4 "EnumUILanguagesW"

   0x00B3  0x0005897F "EnumerateLocalComputerNamesA"

   0x00B4  0x000587FF "EnumerateLocalComputerNamesW"

   0x00B5  0x0006C0FB "EraseTape"

   0x00B6  0x00066771 "EscapeCommFunction"

   0x00B7  0x0001CAFA "ExitProcess"

   0x00B8  0x0000C0E8 "ExitThread"

   0x00B9  0x00068675 "ExitVDM"

   0x00BA  0x000329F1 "ExpandEnvironmentStringsA"

   0x00BB  0x000305E6 "ExpandEnvironmentStringsW"

   0x00BC  0x00071647 "ExpungeConsoleCommandHistoryA"

   0x00BD  0x0007162F "ExpungeConsoleCommandHistoryW"

   0x00BE  0x0005FAFC "ExtendVirtualBuffer"

   0x00BF  0x00061C00 "FatalAppExitA"

   0x00C0  0x00061BB2 "FatalAppExitW"

   0x00C1  0x00061C4E "FatalExit"

   0x00C2  0x0003064D "FileTimeToDosDateTime"

   0x00C3  0x0000E8F6 "FileTimeToLocalFileTime"

   0x00C4  0x0000E87C "FileTimeToSystemTime"

   0x00C5  0x00074064 "FillConsoleOutputAttribute"

   0x00C6  0x00074019 "FillConsoleOutputCharacterA"

   0x00C7  0x00074040 "FillConsoleOutputCharacterW"

   0x00C8  0x00030F11 "FindActCtxSectionGuid"

   0x00C9  0x0006CAEF "FindActCtxSectionStringA"

   0x00CA  0x0002FD3C "FindActCtxSectionStringW"

   0x00CB  0x00030CEE "FindAtomA"

   0x00CC  0x0002F817 "FindAtomW"

   0x00CD  0x0000EE67 "FindClose"

   0x00CE  0x000357ED "FindCloseChangeNotification"

   0x00CF  0x0005D3B3 "FindFirstChangeNotificationA"

   0x00D0  0x00034C07 "FindFirstChangeNotificationW"

   0x00D1  0x00013869 "FindFirstFileA"

   0x00D2  0x0005D41A "FindFirstFileExA"

   0x00D3  0x0000EB0D "FindFirstFileExW"

   0x00D4  0x0000EF71 "FindFirstFileW"

   0x00D5  0x0006B239 "FindFirstVolumeA"

   0x00D6  0x0006ACF9 "FindFirstVolumeMountPointA"

   0x00D7  0x00069D91 "FindFirstVolumeMountPointW"

   0x00D8  0x0002D2A7 "FindFirstVolumeW"

   0x00D9  0x0003212D "FindNextChangeNotification"

   0x00DA  0x00034EC9 "FindNextFileA"

   0x00DB  0x0000EFCA "FindNextFileW"

   0x00DC  0x0006ABDF "FindNextVolumeA"

   0x00DD  0x0006AE29 "FindNextVolumeMountPointA"

   0x00DE  0x0006A03D "FindNextVolumeMountPointW"

   0x00DF  0x0002CF93 "FindNextVolumeW"

   0x00E0  0x0000BF19 "FindResourceA"

   0x00E1  0x00035F90 "FindResourceExA"

   0x00E2  0x0000AD18 "FindResourceExW"

   0x00E3  0x0000BC5E "FindResourceW"

   0x00E4  0x0002CF58 "FindVolumeClose"

   0x00E5  0x000357ED "FindVolumeMountPointClose"

   0x00E6  0x00074B3C "FlushConsoleInputBuffer"

   0x00E7  0x000126D1 "FlushFileBuffers"

   0x00E8  0x000355D4 "FlushInstructionCache"

   0x00E9  0x00035989 "FlushViewOfFile"

   0x00EA  0x00076ED1 "FoldStringA"

   0x00EB  0x0007A656 "FoldStringW"

   0x00EC  0x0002F790 "FormatMessageA"

   0x00ED  0x00034BA7 "FormatMessageW"

   0x00EE  0x000720AD "FreeConsole"

   0x00EF  0x0001D6D7 "FreeEnvironmentStringsA"

   0x00F0  0x00014B77 "FreeEnvironmentStringsW"

   0x00F1  0x0000AC6E "FreeLibrary"

   0x00F2  0x0000C200 "FreeLibraryAndExitThread"

   0x00F3  0x000260AA "FreeResource"

   0x00F4  0x0005F648 "FreeUserPhysicalPages"

   0x00F5  0x00034B81 "FreeVirtualBuffer"

   0x00F6  0x00074A41 "GenerateConsoleCtrlEvent"

   0x00F7  0x000099A5 "GetACP"

   0x00F8  0x0005C1B3 "GetAtomNameA"

   0x00F9  0x000330FF "GetAtomNameW"

   0x00FA  0x0006900B "GetBinaryType"

   0x00FB  0x0006900B "GetBinaryTypeA"

   0x00FC  0x00068BAC "GetBinaryTypeW"

   0x00FD  0x000384F3 "GetCPFileNameFromRegistry"

   0x00FE  0x00012F06 "GetCPInfo"

   0x00FF  0x00077067 "GetCPInfoExA"

   0x0100  0x0007B1ED "GetCPInfoExW"

   0x0101  0x0007698B "GetCalendarInfoA"

   0x0102  0x00039038 "GetCalendarInfoW"

   0x0103  0x0006CB82 "GetComPlusPackageInstallStatus"

   0x0104  0x00067CE9 "GetCommConfig"

   0x0105  0x0006686D "GetCommMask"

   0x0106  0x000668F6 "GetCommModemStatus"

   0x0107  0x0006697F "GetCommProperties"

   0x0108  0x00066A37 "GetCommState"

   0x0109  0x00022110 "GetCommTimeouts"

   0x010A  0x00012FAD "GetCommandLineA"

   0x010B  0x00017013 "GetCommandLineW"

   0x010C  0x0005E3A1 "GetCompressedFileSizeA"

   0x010D  0x0005E279 "GetCompressedFileSizeW"

   0x010E  0x0002168C "GetComputerNameA"

   0x010F  0x00058703 "GetComputerNameExA"

   0x0110  0x000201D9 "GetComputerNameExW"

   0x0111  0x000316B7 "GetComputerNameW"

   0x0112  0x000710D2 "GetConsoleAliasA"

   0x0113  0x0007156C "GetConsoleAliasExesA"

   0x0114  0x00071272 "GetConsoleAliasExesLengthA"

   0x0115  0x00071265 "GetConsoleAliasExesLengthW"

   0x0116  0x00071551 "GetConsoleAliasExesW"

   0x0117  0x000710A6 "GetConsoleAliasW"

   0x0118  0x00071407 "GetConsoleAliasesA"

   0x0119  0x000711D9 "GetConsoleAliasesLengthA"

   0x011A  0x000711C1 "GetConsoleAliasesLengthW"

   0x011B  0x000713E9 "GetConsoleAliasesW"

   0x011C  0x000750F3 "GetConsoleCP"

   0x011D  0x000761C3 "GetConsoleCharType"

   0x011E  0x000719C7 "GetConsoleCommandHistoryA"

   0x011F  0x00071825 "GetConsoleCommandHistoryLengthA"

   0x0120  0x0007180D "GetConsoleCommandHistoryLengthW"

   0x0121  0x000719A9 "GetConsoleCommandHistoryW"

   0x0122  0x00074581 "GetConsoleCursorInfo"

   0x0123  0x0007581F "GetConsoleCursorMode"

   0x0124  0x00037C6B "GetConsoleDisplayMode"

   0x0125  0x000747B9 "GetConsoleFontInfo"

   0x0126  0x000748E1 "GetConsoleFontSize"

   0x0127  0x00072C39 "GetConsoleHardwareState"

   0x0128  0x00071D1C "GetConsoleInputExeNameA"

   0x0129  0x00071AF1 "GetConsoleInputExeNameW"

   0x012A  0x00072619 "GetConsoleInputWaitHandle"

   0x012B  0x00075349 "GetConsoleKeyboardLayoutNameA"

   0x012C  0x00075361 "GetConsoleKeyboardLayoutNameW"

   0x012D  0x0001AC38 "GetConsoleMode"

   0x012E  0x00075FA7 "GetConsoleNlsMode"

   0x012F  0x0001AEAF "GetConsoleOutputCP"

   0x0130  0x000753E5 "GetConsoleProcessList"

   0x0131  0x0001B94B "GetConsoleScreenBufferInfo"

   0x0132  0x00074649 "GetConsoleSelectionInfo"

   0x0133  0x00071A59 "GetConsoleTitleA"

   0x0134  0x0001B75C "GetConsoleTitleW"

   0x0135  0x00075379 "GetConsoleWindow"

   0x0136  0x00076B99 "GetCurrencyFormatA"

   0x0137  0x0007C6EA "GetCurrencyFormatW"

   0x0138  0x00030099 "GetCurrentActCtx"

   0x0139  0x0007496F "GetCurrentConsoleFont"

   0x013A  0x00035016 "GetCurrentDirectoryA"

   0x013B  0x0000B907 "GetCurrentDirectoryW"

   0x013C  0x0000DE85 "GetCurrentProcess"

   0x013D  0x000099B0 "GetCurrentProcessId"

   0x013E  0x0000997B "GetCurrentThread"

   0x013F  0x000097B8 "GetCurrentThreadId"

   0x0140  0x00036206 "GetDateFormatA"

   0x0141  0x0003378D "GetDateFormatW"

   0x0142  0x00067A21 "GetDefaultCommConfigA"

   0x0143  0x00067929 "GetDefaultCommConfigW"

   0x0144  0x0007BA61 "GetDefaultSortkeySize"

   0x0145  0x00061A24 "GetDevicePowerState"

   0x0146  0x000302DD "GetDiskFreeSpaceA"

   0x0147  0x0003038B "GetDiskFreeSpaceExA"

   0x0148  0x00012893 "GetDiskFreeSpaceExW"

   0x0149  0x0003019F "GetDiskFreeSpaceW"

   0x014A  0x0005FE4F "GetDllDirectoryA"

   0x014B  0x0005FCDF "GetDllDirectoryW"

   0x014C  0x000214CB "GetDriveTypeA"

   0x014D  0x0000B360 "GetDriveTypeW"

   0x014E  0x0001CC7B "GetEnvironmentStrings"

   0x014F  0x0001CC7B "GetEnvironmentStringsA"

   0x0150  0x00012F98 "GetEnvironmentStringsW"

   0x0151  0x00014B82 "GetEnvironmentVariableA"

   0x0152  0x0000F184 "GetEnvironmentVariableW"

   0x0153  0x0001AB3B "GetExitCodeProcess"

   0x0154  0x0002141D "GetExitCodeThread"

   0x0155  0x00065BA7 "GetExpandedNameA"

   0x0156  0x00065C54 "GetExpandedNameW"

   0x0157  0x000115CC "GetFileAttributesA"

   0x0158  0x00013841 "GetFileAttributesExA"

   0x0159  0x00011185 "GetFileAttributesExW"

   0x015A  0x0000B7DC "GetFileAttributesW"

   0x015B  0x00010CFD "GetFileInformationByHandle"

   0x015C  0x00010B07 "GetFileSize"

   0x015D  0x00010A99 "GetFileSizeEx"

   0x015E  0x00031C35 "GetFileTime"

   0x015F  0x00010EE1 "GetFileType"

   0x0160  0x0005F43C "GetFirmwareEnvironmentVariableA"

   0x0161  0x0005F325 "GetFirmwareEnvironmentVariableW"

   0x0162  0x0001398C "GetFullPathNameA"

   0x0163  0x0000B8E2 "GetFullPathNameW"

   0x0164  0x00076862 "GetGeoInfoA"

   0x0165  0x00079867 "GetGeoInfoW"

   0x0166  0x0006C663 "GetHandleContext"

   0x0167  0x0002BDAD "GetHandleInformation"

   0x0168  0x00075651 "GetLargestConsoleWindowSize"

   0x0169  0x000090BF "GetLastError"

   0x016A  0x0007BA8B "GetLinguistLangSize"

   0x016B  0x0000A864 "GetLocalTime"

   0x016C  0x0000D2F2 "GetLocaleInfoA"

   0x016D  0x000115F2 "GetLocaleInfoW"

   0x016E  0x0002C2CB "GetLogicalDriveStringsA"

   0x016F  0x000612D7 "GetLogicalDriveStringsW"

   0x0170  0x00030B04 "GetLogicalDrives"

   0x0171  0x00061C97 "GetLogicalProcessorInformation"

   0x0172  0x00069566 "GetLongPathNameA"

   0x0173  0x000133E3 "GetLongPathNameW"

   0x0174  0x0005FA60 "GetMailslotInfo"

   0x0175  0x0000B55F "GetModuleFileNameA"

   0x0176  0x0000B465 "GetModuleFileNameW"

   0x0177  0x0000B731 "GetModuleHandleA"

   0x0178  0x0005FEEE "GetModuleHandleExA"

   0x0179  0x0001FCA9 "GetModuleHandleExW"

   0x017A  0x0000E4CD "GetModuleHandleW"

   0x017B  0x00060BF3 "GetNamedPipeHandleStateA"

   0x017C  0x0006098D "GetNamedPipeHandleStateW"

   0x017D  0x00060792 "GetNamedPipeInfo"

   0x017E  0x0003795D "GetNativeSystemInfo"

   0x017F  0x00067F23 "GetNextVDMCommand"

   0x0180  0x0001800D "GetNlsSectionName"

   0x0181  0x00060ECC "GetNumaAvailableMemory"

   0x0182  0x00060F12 "GetNumaAvailableMemoryNode"

   0x0183  0x00060D49 "GetNumaHighestNodeNumber"

   0x0184  0x00060E21 "GetNumaNodeProcessorMask"

   0x0185  0x00060E86 "GetNumaProcessorMap"

   0x0186  0x00060D94 "GetNumaProcessorNode"

   0x0187  0x0002EC3C "GetNumberFormatA"

   0x0188  0x000344D4 "GetNumberFormatW"

   0x0189  0x00075521 "GetNumberOfConsoleFonts"

   0x018A  0x0007558D "GetNumberOfConsoleInputEvents"

   0x018B  0x00074701 "GetNumberOfConsoleMouseButtons"

   0x018C  0x00012837 "GetOEMCP"

   0x018D  0x000315B4 "GetOverlappedResult"

   0x018E  0x00061D97 "GetPriorityClass"

   0x018F  0x0003644C "GetPrivateProfileIntA"

   0x0190  0x00032748 "GetPrivateProfileIntW"

   0x0191  0x00035F39 "GetPrivateProfileSectionA"

   0x0192  0x00032DBF "GetPrivateProfileSectionNamesA"

   0x0193  0x0005CA12 "GetPrivateProfileSectionNamesW"

   0x0194  0x0001EDA5 "GetPrivateProfileSectionW"

   0x0195  0x00032B6E "GetPrivateProfileStringA"

   0x0196  0x0000F9ED "GetPrivateProfileStringW"

   0x0197  0x0005CA33 "GetPrivateProfileStructA"

   0x0198  0x0005CB9D "GetPrivateProfileStructW"

   0x0199  0x0000AE30 "GetProcAddress"

   0x019A  0x0002174D "GetProcessAffinityMask"

   0x019B  0x000621AD "GetProcessDEPPolicy"

   0x019C  0x0006210A "GetProcessHandleCount"

   0x019D  0x0000AC51 "GetProcessHeap"

   0x019E  0x0005F8E3 "GetProcessHeaps"

   0x019F  0x00061B7D "GetProcessId"

   0x01A0  0x000620D9 "GetProcessIoCounters"

   0x01A1  0x0006209F "GetProcessPriorityBoost"

   0x01A2  0x00061DFD "GetProcessShutdownParameters"

   0x01A3  0x000352F1 "GetProcessTimes"

   0x01A4  0x00012CB3 "GetProcessVersion"

   0x01A5  0x00061FEC "GetProcessWorkingSetSize"

   0x01A6  0x000364C1 "GetProfileIntA"

   0x01A7  0x0002F88A "GetProfileIntW"

   0x01A8  0x0005CFDF "GetProfileSectionA"

   0x01A9  0x0005D018 "GetProfileSectionW"

   0x01AA  0x0002147D "GetProfileStringA"

   0x01AB  0x000213E0 "GetProfileStringW"

   0x01AC  0x0000A7AD "GetQueuedCompletionStatus"

   0x01AD  0x00035BC8 "GetShortPathNameA"

   0x01AE  0x0001F256 "GetShortPathNameW"

   0x01AF  0x00001EF2 "GetStartupInfoA"

   0x01B0  0x00001E54 "GetStartupInfoW"

   0x01B1  0x00012FC9 "GetStdHandle"

   0x01B2  0x00038A24 "GetStringTypeA"

   0x01B3  0x000770EF "GetStringTypeExA"

   0x01B4  0x0000C07F "GetStringTypeExW"

   0x01B5  0x0000A520 "GetStringTypeW"

   0x01B6  0x00061C60 "GetSystemDEPPolicy"

   0x01B7  0x0000BFCD "GetSystemDefaultLCID"

   0x01B8  0x00012842 "GetSystemDefaultLangID"

   0x01B9  0x000130C8 "GetSystemDefaultUILanguage"

   0x01BA  0x00014F7A "GetSystemDirectoryA"

   0x01BB  0x00031DD3 "GetSystemDirectoryW"

   0x01BC  0x00012DE6 "GetSystemInfo"

   0x01BD  0x00035358 "GetSystemPowerStatus"

   0x01BE  0x00062200 "GetSystemRegistryQuota"

   0x01BF  0x0000176F "GetSystemTime"

   0x01C0  0x0002D367 "GetSystemTimeAdjustment"

   0x01C1  0x000017E9 "GetSystemTimeAsFileTime"

   0x01C2  0x00061EA6 "GetSystemTimes"

   0x01C3  0x000212D9 "GetSystemWindowsDirectoryA"

   0x01C4  0x0000ADB9 "GetSystemWindowsDirectoryW"

   0x01C5  0x00021454 "GetSystemWow64DirectoryA"

   0x01C6  0x00021454 "GetSystemWow64DirectoryW"

   0x01C7  0x0006C1A2 "GetTapeParameters"

   0x01C8  0x0006C06C "GetTapePosition"

   0x01C9  0x0006C23F "GetTapeStatus"

   0x01CA  0x00061807 "GetTempFileNameA"

   0x01CB  0x000359CF "GetTempFileNameW"

   0x01CC  0x00035DE2 "GetTempPathA"

   0x01CD  0x00030779 "GetTempPathW"

   0x01CE  0x00039725 "GetThreadContext"

   0x01CF  0x00063D11 "GetThreadIOPendingFlag"

   0x01D0  0x0000A4A5 "GetThreadLocale"

   0x01D1  0x0000A823 "GetThreadPriority"

   0x01D2  0x00063A6F "GetThreadPriorityBoost"

   0x01D3  0x0005B0F0 "GetThreadSelectorEntry"

   0x01D4  0x00063CA4 "GetThreadTimes"

   0x01D5  0x0000932E "GetTickCount"

   0x01D6  0x00036345 "GetTimeFormatA"

   0x01D7  0x00033FEB "GetTimeFormatW"

   0x01D8  0x000350D7 "GetTimeZoneInformation"

   0x01D9  0x00009FA0 "GetUserDefaultLCID"

   0x01DA  0x0000BFF4 "GetUserDefaultLangID"

   0x01DB  0x00013100 "GetUserDefaultUILanguage"

   0x01DC  0x000379A6 "GetUserGeoID"

   0x01DD  0x00068829 "GetVDMCurrentDirectories"

   0x01DE  0x0001126A "GetVersion"

   0x01DF  0x00012B6E "GetVersionExA"

   0x01E0  0x0000AEF5 "GetVersionExW"

   0x01E1  0x00021B8D "GetVolumeInformationA"

   0x01E2  0x0000FA75 "GetVolumeInformationW"

   0x01E3  0x0006AF41 "GetVolumeNameForVolumeMountPointA"

   0x01E4  0x0001FB70 "GetVolumeNameForVolumeMountPointW"

   0x01E5  0x0002E87B "GetVolumePathNameA"

   0x01E6  0x0002E5E5 "GetVolumePathNameW"

   0x01E7  0x0006B0E0 "GetVolumePathNamesForVolumeNameA"

   0x01E8  0x00020CFC "GetVolumePathNamesForVolumeNameW"

   0x01E9  0x0002134B "GetWindowsDirectoryA"

   0x01EA  0x0000AE0B "GetWindowsDirectoryW"

   0x01EB  0x0005F6D2 "GetWriteWatch"

   0x01EC  0x000360C1 "GlobalAddAtomA"

   0x01ED  0x000100FC "GlobalAddAtomW"

   0x01EE  0x0000FDBD "GlobalAlloc"

   0x01EF  0x0005F578 "GlobalCompact"

   0x01F0  0x00030BAB "GlobalDeleteAtom"

   0x01F1  0x000360DB "GlobalFindAtomA"

   0x01F2  0x00034EAF "GlobalFindAtomW"

   0x01F3  0x0005F58E "GlobalFix"

   0x01F4  0x0003678A "GlobalFlags"

   0x01F5  0x0000FCBF "GlobalFree"

   0x01F6  0x0005C193 "GlobalGetAtomNameA"

   0x01F7  0x0002C3B6 "GlobalGetAtomNameW"

   0x01F8  0x00034CD1 "GlobalHandle"

   0x01F9  0x0000FFA9 "GlobalLock"

   0x01FA  0x000310E2 "GlobalMemoryStatus"

   0x01FB  0x0001F97A "GlobalMemoryStatusEx"

   0x01FC  0x00012449 "GlobalReAlloc"

   0x01FD  0x00034DB9 "GlobalSize"

   0x01FE  0x0005F5D2 "GlobalUnWire"

   0x01FF  0x0005F5A8 "GlobalUnfix"

   0x0200  0x0000FF12 "GlobalUnlock"

   0x0201  0x0005F5C2 "GlobalWire"

   0x0202  0x00064AB6 "Heap32First"

   0x0203  0x00064971 "Heap32ListFirst"

   0x0204  0x00064A1F "Heap32ListNext"

   0x0205  0x00064BD0 "Heap32Next"

   0x0206  0x000090DA "HeapAlloc"

   0x0207  0x00036136 "HeapCompact"

   0x0208  0x00012C46 "HeapCreate"

   0x0209  0x0005F7D1 "HeapCreateTagsW"

   0x020A  0x00010F88 "HeapDestroy"

   0x020B  0x0005F7A0 "HeapExtend"

   0x020C  0x000090F0 "HeapFree"

   0x020D  0x0005F8F4 "HeapLock"

   0x020E  0x0005FA2D "HeapQueryInformation"

   0x020F  0x0005F7E2 "HeapQueryTagW"

   0x0210  0x00009102 "HeapReAlloc"

   0x0211  0x00039481 "HeapSetInformation"

   0x0212  0x0000911A "HeapSize"

   0x0213  0x0005F7F3 "HeapSummary"

   0x0214  0x0005F90E "HeapUnlock"

   0x0215  0x0005F84F "HeapUsage"

   0x0216  0x0005F8C3 "HeapValidate"

   0x0217  0x0005F928 "HeapWalk"

   0x0218  0x0002AF77 "InitAtomTable"

   0x0219  0x00009F81 "InitializeCriticalSection"

   0x021A  0x0000B8B9 "InitializeCriticalSectionAndSpinCount"

   0x021B  0x0000912C "InitializeSListHead"

   0x021C  0x00009832 "InterlockedCompareExchange"

   0x021D  0x0000980A "InterlockedDecrement"

   0x021E  0x0000981E "InterlockedExchange"

   0x021F  0x00009846 "InterlockedExchangeAdd"

   0x0220  0x00009149 "InterlockedFlushSList"

   0x0221  0x000097F6 "InterlockedIncrement"

   0x0222  0x00009168 "InterlockedPopEntrySList"

   0x0223  0x0000918A "InterlockedPushEntrySList"

   0x0224  0x00074235 "InvalidateConsoleDIBits"

   0x0225  0x0000BD5F "IsBadCodePtr"

   0x0226  0x00035957 "IsBadHugeReadPtr"

   0x0227  0x0000C02D "IsBadHugeWritePtr"

   0x0228  0x00009E91 "IsBadReadPtr"

   0x0229  0x00032273 "IsBadStringPtrA"

   0x022A  0x0000A66C "IsBadStringPtrW"

   0x022B  0x00009F09 "IsBadWritePtr"

   0x022C  0x0000B86C "IsDBCSLeadByte"

   0x022D  0x0007B4EE "IsDBCSLeadByteEx"

   0x022E  0x00013123 "IsDebuggerPresent"

   0x022F  0x0006C304 "IsProcessInJob"

   0x0230  0x0000AEBA "IsProcessorFeaturePresent"

   0x0231  0x00061A68 "IsSystemResumeAutomatic"

   0x0232  0x0001115B "IsValidCodePage"

   0x0233  0x0007740F "IsValidLanguageGroup"

   0x0234  0x0001C1AB "IsValidLocale"

   0x0235  0x0007751B "IsValidUILanguage"

   0x0236  0x00015229 "IsWow64Process"

   0x0237  0x00038E00 "LCMapStringA"

   0x0238  0x0000CD38 "LCMapStringW"

   0x0239  0x0006649E "LZClose"

   0x023A  0x00066427 "LZCloseFile"

   0x023B  0x00059754 "LZCopy"

   0x023C  0x00065F5D "LZCreateFileW"

   0x023D  0x000806F8 "LZDone"

   0x023E  0x00065E02 "LZInit"

   0x023F  0x00066030 "LZOpenFileA"

   0x0240  0x000660F7 "LZOpenFileW"

   0x0241  0x00066219 "LZRead"

   0x0242  0x0006618E "LZSeek"

   0x0243  0x0008012E "LZStart"

   0x0244  0x000091AD "LeaveCriticalSection"

   0x0245  0x00001D7B "LoadLibraryA"

   0x0246  0x00001D53 "LoadLibraryExA"

   0x0247  0x00001AF5 "LoadLibraryExW"

   0x0248  0x0000AEDB "LoadLibraryW"

   0x0249  0x000624BE "LoadModule"

   0x024A  0x0000A045 "LoadResource"

   0x024B  0x00009A1D "LocalAlloc"

   0x024C  0x0005F578 "LocalCompact"

   0x024D  0x0003553C "LocalFileTimeToFileTime"

   0x024E  0x00055D56 "LocalFlags"

   0x024F  0x000099BF "LocalFree"

   0x0250  0x00055E51 "LocalHandle"

   0x0251  0x00032E35 "LocalLock"

   0x0252  0x00030917 "LocalReAlloc"

   0x0253  0x0005F78A "LocalShrink"

   0x0254  0x000325D4 "LocalSize"

   0x0255  0x00032EC9 "LocalUnlock"

   0x0256  0x00032379 "LockFile"

   0x0257  0x0002F559 "LockFileEx"

   0x0258  0x0000CD27 "LockResource"

   0x0259  0x0005F676 "MapUserPhysicalPages"

   0x025A  0x0005F6A4 "MapUserPhysicalPagesScatter"

   0x025B  0x0000B995 "MapViewOfFile"

   0x025C  0x0000B926 "MapViewOfFileEx"

   0x025D  0x00065240 "Module32First"

   0x025E  0x00065187 "Module32FirstW"

   0x025F  0x000653C5 "Module32Next"

   0x0260  0x00065324 "Module32NextW"

   0x0261  0x00035EA7 "MoveFileA"

   0x0262  0x0005E3CB "MoveFileExA"

   0x0263  0x00035673 "MoveFileExW"

   0x0264  0x00021249 "MoveFileW"

   0x0265  0x00035EC6 "MoveFileWithProgressA"

   0x0266  0x0001F716 "MoveFileWithProgressW"

   0x0267  0x00009856 "MulDiv"

   0x0268  0x00009C88 "MultiByteToWideChar"

   0x0269  0x00014FEC "NlsConvertIntegerToString"

   0x026A  0x00035831 "NlsGetCacheUpdateCount"

   0x026B  0x000773E9 "NlsResetProcessLocale"

   0x026C  0x00060FDA "NumaVirtualQueryNode"

   0x026D  0x00011071 "OpenConsoleW"

   0x026E  0x0002AD80 "OpenDataFile"

   0x026F  0x0001329C "OpenEventA"

   0x0270  0x000131D0 "OpenEventW"

   0x0271  0x0002196A "OpenFile"

   0x0272  0x0000BC06 "OpenFileMappingA"

   0x0273  0x0000BB6A "OpenFileMappingW"

   0x0274  0x0006C3D8 "OpenJobObjectA"

   0x0275  0x0006C260 "OpenJobObjectW"

   0x0276  0x0000EAAB "OpenMutexA"

   0x0277  0x0000EA25 "OpenMutexW"

   0x0278  0x000309D1 "OpenProcess"

   0x0279  0x00033337 "OpenProfileUserMapping"

   0x027A  0x0002CA3F "OpenSemaphoreA"

   0x027B  0x0002E307 "OpenSemaphoreW"

   0x027C  0x0002FBF0 "OpenThread"

   0x027D  0x00062B30 "OpenWaitableTimerA"

   0x027E  0x000629C5 "OpenWaitableTimerW"

   0x027F  0x0005AC7C "OutputDebugStringA"

   0x0280  0x0005B335 "OutputDebugStringW"

   0x0281  0x000744AD "PeekConsoleInputA"

   0x0282  0x000744D0 "PeekConsoleInputW"

   0x0283  0x00060817 "PeekNamedPipe"

   0x0284  0x00012782 "PostQueuedCompletionStatus"

   0x0285  0x0006C0C8 "PrepareTape"

   0x0286  0x00020047 "PrivCopyFileExW"

   0x0287  0x0005DFF1 "PrivMoveFileIdentityW"

   0x0288  0x00064DF5 "Process32First"

   0x0289  0x00064D3C "Process32FirstW"

   0x028A  0x00064F68 "Process32Next"

   0x028B  0x00064EC7 "Process32NextW"

   0x028C  0x00013019 "ProcessIdToSessionId"

   0x028D  0x0002C056 "PulseEvent"

   0x028E  0x00066CE5 "PurgeComm"

   0x028F  0x0001636B "QueryActCtxW"

   0x0290  0x000091CB "QueryDepthSList"

   0x0291  0x0005D274 "QueryDosDeviceA"

   0x0292  0x00021D75 "QueryDosDeviceW"

   0x0293  0x0002AFB1 "QueryInformationJobObject"

   0x0294  0x000395F0 "QueryMemoryResourceNotification"

   0x0295  0x0000A4B7 "QueryPerformanceCounter"

   0x0296  0x0002FA36 "QueryPerformanceFrequency"

   0x0297  0x0005C624 "QueryWin31IniFilesMappedToRegistry"

   0x0298  0x0002C07A "QueueUserAPC"

   0x0299  0x00030A52 "QueueUserWorkItem"

   0x029A  0x00012A99 "RaiseException"

   0x029B  0x00072A3D "ReadConsoleA"

   0x029C  0x000744F3 "ReadConsoleInputA"

   0x029D  0x00074539 "ReadConsoleInputExA"

   0x029E  0x0007455D "ReadConsoleInputExW"

   0x029F  0x00074516 "ReadConsoleInputW"

   0x02A0  0x00073825 "ReadConsoleOutputA"

   0x02A1  0x00073D45 "ReadConsoleOutputAttribute"

   0x02A2  0x00073CF9 "ReadConsoleOutputCharacterA"

   0x02A3  0x00073D1F "ReadConsoleOutputCharacterW"

   0x02A4  0x00073801 "ReadConsoleOutputW"

   0x02A5  0x00072A8C "ReadConsoleW"

   0x02A6  0x0003161F "ReadDirectoryChangesW"

   0x02A7  0x00001812 "ReadFile"

   0x02A8  0x0002BCF3 "ReadFileEx"

   0x02A9  0x0002DE49 "ReadFileScatter"

   0x02AA  0x000021D0 "ReadProcessMemory"

   0x02AB  0x00075AD9 "RegisterConsoleIME"

   0x02AC  0x000758E9 "RegisterConsoleOS2"

   0x02AD  0x00072AE2 "RegisterConsoleVDM"

   0x02AE  0x0001701E "RegisterWaitForInputIdle"

   0x02AF  0x000211B5 "RegisterWaitForSingleObject"

   0x02B0  0x0002B06E "RegisterWaitForSingleObjectEx"

   0x02B1  0x0005F562 "RegisterWowBaseHandlers"

   0x02B2  0x00068989 "RegisterWowExec"

   0x02B3  0x000130EF "ReleaseActCtx"

   0x02B4  0x000024B7 "ReleaseMutex"

   0x02B5  0x0000C03D "ReleaseSemaphore"

   0x02B6  0x0005C121 "RemoveDirectoryA"

   0x02B7  0x00036F73 "RemoveDirectoryW"

   0x02B8  0x000594AC "RemoveLocalAlternateComputerNameA"

   0x02B9  0x000593CB "RemoveLocalAlternateComputerNameW"

   0x02BA  0x000091E4 "RemoveVectoredExceptionHandler"

   0x02BB  0x00036C54 "ReplaceFile"

   0x02BC  0x0005F20F "ReplaceFileA"

   0x02BD  0x00036C54 "ReplaceFileW"

   0x02BE  0x00061A77 "RequestDeviceWakeup"

   0x02BF  0x000619FC "RequestWakeupLatency"

   0x02C0  0x0000A0CB "ResetEvent"

   0x02C1  0x0005F70B "ResetWriteWatch"

   0x02C2  0x0000920C "RestoreLastError"

   0x02C3  0x0003290F "ResumeThread"

   0x02C4  0x0000922B "RtlCaptureContext"

   0x02C5  0x00009243 "RtlCaptureStackBackTrace"

   0x02C6  0x00009262 "RtlFillMemory"

   0x02C7  0x00009276 "RtlMoveMemory"

   0x02C8  0x0000928A "RtlUnwind"

   0x02C9  0x0000929A "RtlZeroMemory"

   0x02CA  0x00074F41 "ScrollConsoleScreenBufferA"

   0x02CB  0x00074F65 "ScrollConsoleScreenBufferW"

   0x02CC  0x000217D2 "SearchPathA"

   0x02CD  0x0000E76C "SearchPathW"

   0x02CE  0x0007A7E3 "SetCPGlobal"

   0x02CF  0x00076AF6 "SetCalendarInfoA"

   0x02D0  0x00077D3B "SetCalendarInfoW"

   0x02D1  0x00059D03 "SetClientTimeZoneInformation"

   0x02D2  0x0006CB45 "SetComPlusPackageInstallStatus"

   0x02D3  0x00066D6F "SetCommBreak"

   0x02D4  0x00067E8B "SetCommConfig"

   0x02D5  0x00066D87 "SetCommMask"

   0x02D6  0x00066E26 "SetCommState"

   0x02D7  0x0006712E "SetCommTimeouts"

   0x02D8  0x00058690 "SetComputerNameA"

   0x02D9  0x000587A8 "SetComputerNameExA"

   0x02DA  0x0005860F "SetComputerNameExW"

   0x02DB  0x000584E9 "SetComputerNameW"

   0x02DC  0x00074AC8 "SetConsoleActiveScreenBuffer"

   0x02DD  0x00075163 "SetConsoleCP"

   0x02DE  0x000719E5 "SetConsoleCommandHistoryMode"

   0x02DF  0x0001B2AB "SetConsoleCtrlHandler"

   0x02E0  0x00072F0A "SetConsoleCursor"

   0x02E1  0x00074CA4 "SetConsoleCursorInfo"

   0x02E2  0x0007579F "SetConsoleCursorMode"

   0x02E3  0x00074C2A "SetConsoleCursorPosition"

   0x02E4  0x000730C0 "SetConsoleDisplayMode"

   0x02E5  0x00075005 "SetConsoleFont"

   0x02E6  0x00072D09 "SetConsoleHardwareState"

   0x02E7  0x0007507F "SetConsoleIcon"

   0x02E8  0x00071DC8 "SetConsoleInputExeNameA"

   0x02E9  0x0001B075 "SetConsoleInputExeNameW"

   0x02EA  0x00072D89 "SetConsoleKeyShortcuts"

   0x02EB  0x000756D9 "SetConsoleLocalEUDC"

   0x02EC  0x0008023B "SetConsoleMaximumWindowSize"

   0x02ED  0x00072E50 "SetConsoleMenuClose"

   0x02EE  0x0001AF10 "SetConsoleMode"

   0x02EF  0x000760F9 "SetConsoleNlsMode"

   0x02F0  0x00071745 "SetConsoleNumberOfCommandsA"

   0x02F1  0x0007172A "SetConsoleNumberOfCommandsW"

   0x02F2  0x0007595D "SetConsoleOS2OemFormat"

   0x02F3  0x00075281 "SetConsoleOutputCP"

   0x02F4  0x000731E9 "SetConsolePalette"

   0x02F5  0x00074BB0 "SetConsoleScreenBufferSize"

   0x02F6  0x00074F89 "SetConsoleTextAttribute"

   0x02F7  0x00071A81 "SetConsoleTitleA"

   0x02F8  0x0002D9B5 "SetConsoleTitleW"

   0x02F9  0x00074D71 "SetConsoleWindowInfo"

   0x02FA  0x000092AE "SetCriticalSectionSpinCount"

   0x02FB  0x000360F5 "SetCurrentDirectoryA"

   0x02FC  0x0000F37E "SetCurrentDirectoryW"

   0x02FD  0x00067BF1 "SetDefaultCommConfigA"

   0x02FE  0x00067AF9 "SetDefaultCommConfigW"

   0x02FF  0x0005FC4E "SetDllDirectoryA"

   0x0300  0x0005FBB8 "SetDllDirectoryW"

   0x0301  0x0003205E "SetEndOfFile"

   0x0302  0x00033490 "SetEnvironmentVariableA"

   0x0303  0x0001024E "SetEnvironmentVariableW"

   0x0304  0x0000AC9F "SetErrorMode"

   0x0305  0x0000A0A7 "SetEvent"

   0x0306  0x0003660E "SetFileApisToANSI"

   0x0307  0x0001CD9E "SetFileApisToOEM"

   0x0308  0x00012812 "SetFileAttributesA"

   0x0309  0x000314C5 "SetFileAttributesW"

   0x030A  0x00010C1E "SetFilePointer"

   0x030B  0x0002103F "SetFilePointerEx"

   0x030C  0x0005D7CC "SetFileShortNameA"

   0x030D  0x0005D6FF "SetFileShortNameW"

   0x030E  0x00031CA8 "SetFileTime"

   0x030F  0x0005D6A9 "SetFileValidData"

   0x0310  0x0005F4CF "SetFirmwareEnvironmentVariableA"

   0x0311  0x0005F3B4 "SetFirmwareEnvironmentVariableW"

   0x0312  0x00021454 "SetHandleContext"

   0x0313  0x0000CD27 "SetHandleCount"

   0x0314  0x0002E184 "SetHandleInformation"

   0x0315  0x0002CA97 "SetInformationJobObject"

   0x0316  0x000764F3 "SetLastConsoleEventActive"

   0x0317  0x000092D3 "SetLastError"

   0x0318  0x0005970B "SetLocalPrimaryComputerNameA"

   0x0319  0x000594F5 "SetLocalPrimaryComputerNameW"

   0x031A  0x00055C69 "SetLocalTime"

   0x031B  0x000768EB "SetLocaleInfoA"

   0x031C  0x00077E93 "SetLocaleInfoW"

   0x031D  0x0002CDD0 "SetMailslotInfo"

   0x031E  0x00061AC7 "SetMessageWaitingIndicator"

   0x031F  0x000313DC "SetNamedPipeHandleState"

   0x0320  0x0002C330 "SetPriorityClass"

   0x0321  0x00062034 "SetProcessAffinityMask"

   0x0322  0x00062144 "SetProcessDEPPolicy"

   0x0323  0x00062064 "SetProcessPriorityBoost"

   0x0324  0x0002C8E5 "SetProcessShutdownParameters"

   0x0325  0x000303C0 "SetProcessWorkingSetSize"

   0x0326  0x0001D363 "SetStdHandle"

   0x0327  0x000619B3 "SetSystemPowerState"

   0x0328  0x0005981A "SetSystemTime"

   0x0329  0x000599E0 "SetSystemTimeAdjustment"

   0x032A  0x0006C1FE "SetTapeParameters"

   0x032B  0x0006C026 "SetTapePosition"

   0x032C  0x00062BA4 "SetTermsrvAppInstallMode"

   0x032D  0x0002FA6A "SetThreadAffinityMask"

   0x032E  0x00063AA9 "SetThreadContext"

   0x032F  0x000392CD "SetThreadExecutionState"

   0x0330  0x00063D50 "SetThreadIdealProcessor"

   0x0331  0x0001B8DA "SetThreadLocale"

   0x0332  0x0000C198 "SetThreadPriority"

   0x0333  0x00063A34 "SetThreadPriorityBoost"

   0x0334  0x0001AF78 "SetThreadUILanguage"

   0x0335  0x000598BA "SetTimeZoneInformation"

   0x0336  0x0002B256 "SetTimerQueueTimer"

   0x0337  0x000449FD "SetUnhandledExceptionFilter"

   0x0338  0x00079C7C "SetUserGeoID"

   0x0339  0x000686F4 "SetVDMCurrentDirectories"

   0x033A  0x000618F5 "SetVolumeLabelA"

   0x033B  0x000613A1 "SetVolumeLabelW"

   0x033C  0x0006B071 "SetVolumeMountPointA"

   0x033D  0x0006A375 "SetVolumeMountPointW"

   0x033E  0x00009689 "SetWaitableTimer"

   0x033F  0x000666AA "SetupComm"

   0x0340  0x00072F84 "ShowConsoleCursor"

   0x0341  0x000366AE "SignalObjectAndWait"

   0x0342  0x0000BCF9 "SizeofResource"

   0x0343  0x00002446 "Sleep"

   0x0344  0x000023A0 "SleepEx"

   0x0345  0x0003974A "SuspendThread"

   0x0346  0x00010702 "SwitchToFiber"

   0x0347  0x000329AA "SwitchToThread"

   0x0348  0x00010BAC "SystemTimeToFileTime"

   0x0349  0x0002E991 "SystemTimeToTzSpecificLocalTime"

   0x034A  0x0006C2D7 "TerminateJobObject"

   0x034B  0x00001E1A "TerminateProcess"

   0x034C  0x0001CB23 "TerminateThread"

   0x034D  0x0001EFB6 "TermsrvAppInstallMode"

   0x034E  0x0006503A "Thread32First"

   0x034F  0x000650EE "Thread32Next"

   0x0350  0x00012E2F "TlsAlloc"

   0x0351  0x00013767 "TlsFree"

   0x0352  0x000097D0 "TlsGetValue"

   0x0353  0x00009C55 "TlsSetValue"

   0x0354  0x00064CFC "Toolhelp32ReadProcessMemory"

   0x0355  0x000312D5 "TransactNamedPipe"

   0x0356  0x000671D9 "TransmitCommChar"

   0x0357  0x0005FB56 "TrimVirtualBuffer"

   0x0358  0x000092EE "TryEnterCriticalSection"

   0x0359  0x0005A77B "TzSpecificLocalTimeToSystemTime"

   0x035A  0x0005FDF8 "UTRegister"

   0x035B  0x0007F14F "UTUnRegister"

   0x035C  0x00063E6A "UnhandledExceptionFilter"

   0x035D  0x000322D4 "UnlockFile"

   0x035E  0x00032313 "UnlockFileEx"

   0x035F  0x0000BA04 "UnmapViewOfFile"

   0x0360  0x00075BA6 "UnregisterConsoleIME"

   0x0361  0x0002BFF0 "UnregisterWait"

   0x0362  0x00030052 "UnregisterWaitEx"

   0x0363  0x000706C8 "UpdateResourceA"

   0x0364  0x000705C1 "UpdateResourceW"

   0x0365  0x00076504 "VDMConsoleOperation"

   0x0366  0x00068DF9 "VDMOperationStarted"

   0x0367  0x0007BAB5 "ValidateLCType"

   0x0368  0x00039810 "ValidateLocale"

   0x0369  0x0002EFAA "VerLanguageNameA"

   0x036A  0x0002F032 "VerLanguageNameW"

   0x036B  0x0000930F "VerSetConditionMask"

   0x036C  0x0001ABCE "VerifyConsoleIoHandle"

   0x036D  0x0005FD4E "VerifyVersionInfoA"

   0x036E  0x0001FB0E "VerifyVersionInfoW"

   0x036F  0x00009AE1 "VirtualAlloc"

   0x0370  0x00009B02 "VirtualAllocEx"

   0x0371  0x0005FB79 "VirtualBufferExceptionHandler"

   0x0372  0x00009B74 "VirtualFree"

   0x0373  0x00009B92 "VirtualFreeEx"

   0x0374  0x0002B127 "VirtualLock"

   0x0375  0x00001AD4 "VirtualProtect"

   0x0376  0x00001A61 "VirtualProtectEx"

   0x0377  0x0000BA61 "VirtualQuery"

   0x0378  0x0000BA30 "VirtualQueryEx"

   0x0379  0x0005F5E2 "VirtualUnlock"

   0x037A  0x0001337E "WTSGetActiveConsoleSessionId"

   0x037B  0x00067263 "WaitCommEvent"

   0x037C  0x0005B388 "WaitForDebugEvent"

   0x037D  0x0000A0ED "WaitForMultipleObjects"

   0x037E  0x000095BC "WaitForMultipleObjectsEx"

   0x037F  0x00002530 "WaitForSingleObject"

   0x0380  0x00002550 "WaitForSingleObjectEx"

   0x0381  0x00060B41 "WaitNamedPipeA"

   0x0382  0x0002C65C "WaitNamedPipeW"

   0x0383  0x0000A164 "WideCharToMultiByte"

   0x0384  0x000623AD "WinExec"

   0x0385  0x0001CC45 "WriteConsoleA"

   0x0386  0x000733E5 "WriteConsoleInputA"

   0x0387  0x00072EC4 "WriteConsoleInputVDMA"

   0x0388  0x00072EE7 "WriteConsoleInputVDMW"

   0x0389  0x00073408 "WriteConsoleInputW"

   0x038A  0x00073B65 "WriteConsoleOutputA"

   0x038B  0x00073F11 "WriteConsoleOutputAttribute"

   0x038C  0x00073EC5 "WriteConsoleOutputCharacterA"

   0x038D  0x00073EEB "WriteConsoleOutputCharacterW"

   0x038E  0x00073B41 "WriteConsoleOutputW"

   0x038F  0x0003549C "WriteConsoleW"

   0x0390  0x00010E17 "WriteFile"

   0x0391  0x0005D609 "WriteFileEx"

   0x0392  0x0002DD9D "WriteFileGather"

   0x0393  0x0005C984 "WritePrivateProfileSectionA"

   0x0394  0x0005C9CB "WritePrivateProfileSectionW"

   0x0395  0x00035D6C "WritePrivateProfileStringA"

   0x0396  0x0001EE34 "WritePrivateProfileStringW"

   0x0397  0x0005CD2B "WritePrivateProfileStructA"

   0x0398  0x0005CE6D "WritePrivateProfileStructW"

   0x0399  0x00002213 "WriteProcessMemory"

   0x039A  0x0005CFFD "WriteProfileSectionA"

   0x039B  0x0005D036 "WriteProfileSectionW"

   0x039C  0x0005CFC1 "WriteProfileStringA"

   0x039D  0x000332C9 "WriteProfileStringW"

   0x039E  0x0006C168 "WriteTapemark"

   0x039F  0x0006C6DB "ZombifyActCtx"

   0x03A0  0x000353E6 "_hread"

   0x03A1  0x00038AFF "_hwrite"

   0x03A2  0x00034E7C "_lclose"

   0x03A3  0x000365BD "_lcreat"

   0x03A4  0x0003541E "_llseek"

   0x03A5  0x0005F738 "_lopen"

   0x03A6  0x000353E6 "_lread"

   0x03A7  0x00038AFF "_lwrite"

   0x03A8  0x00034D59 "lstrcat"

   0x03A9  0x00034D59 "lstrcatA"

   0x03AA  0x00010FC2 "lstrcatW"

   0x03AB  0x00030D64 "lstrcmp"

   0x03AC  0x00030D64 "lstrcmpA"

   0x03AD  0x0000AA5C "lstrcmpW"

   0x03AE  0x0000BB31 "lstrcmpi"

   0x03AF  0x0000BB31 "lstrcmpiA"

   0x03B0  0x0000AA26 "lstrcmpiW"

   0x03B1  0x0000BE91 "lstrcpy"

   0x03B2  0x0000BE91 "lstrcpyA"

   0x03B3  0x0000BAF4 "lstrcpyW"

   0x03B4  0x000101A1 "lstrcpyn"

   0x03B5  0x000101A1 "lstrcpynA"

   0x03B6  0x0000BA7F "lstrcpynW"

   0x03B7  0x0000BE46 "lstrlen"

   0x03B8  0x0000BE46 "lstrlenA"

   0x03B9  0x00009A99 "lstrlenW"

No comments:

Post a Comment