KernelBase.dll

  • File Path: C:\Windows\system32\KernelBase.dll
  • Description: Windows NT BASE API Client DLL

Hashes

Type Hash
MD5 4E41D052469D883175B39DF2A8133329
SHA1 EA999D050E8DBF98D58E66BB95C1CF8B7B779531
SHA256 D42C04DD7F8C78F7FD6E3508CADA50C077B5485871ADB76FCDA98BE46E0FC9AC
SHA384 0C95BC44BCF4C862AE5BE522F04F17CB51CD00870EF119101E80D67EE5ABDD9EA908130613BE5297788AB4E8481F8968
SHA512 049845197C62CFB83CA76DAE05B7D93C0224505A8C00AB52BDD81CBE30F66B006FB041A8D981B87BC230D877A1A12F9A9629C07377381E323066C007CFAA24FE
SSDEEP 49152:eG1WMmpXcVqAIjJkSkaamk6PZl/cbcSWQHn:Ipaq5/M
IMP A28B494D0C0C82F1EEF0999B1549C6A6
PESHA1 E1C7E3BD8ED610AA647484EC51C3F8F6C64FCA44
PE256 803D37157BF025D22BD4D885CF0EC99C30CB22D378D088AAC2AF1326E2DF7F1C

DLL Exports:

Function Name Ordinal Type
PerfDeleteInstance 1230 Exported Function
PerfIncrementULongCounterValue 1231 Exported Function
PerfIncrementULongLongCounterValue 1232 Exported Function
PerfDecrementULongLongCounterValue 1229 Exported Function
PeekNamedPipe 1226 Exported Function
PerfCreateInstance 1227 Exported Function
PerfDecrementULongCounterValue 1228 Exported Function
PerfSetULongLongCounterValue 1237 Exported Function
PerfStartProvider 1238 Exported Function
PerfStartProviderEx 1239 Exported Function
PerfSetULongCounterValue 1236 Exported Function
PerfQueryInstance 1233 Exported Function
PerfSetCounterRefValue 1234 Exported Function
PerfSetCounterSetInfo 1235 Exported Function
PeekConsoleInputW 1225 Exported Function
PcwIsNotifierAlive 1215 Exported Function
PcwQueryCounterSetSecurity 1216 Exported Function
PcwReadNotificationData 1217 Exported Function
PcwEnumerateInstances 1214 Exported Function
PcwCreateNotifier 1211 Exported Function
PcwCreateQuery 1212 Exported Function
PcwDisconnectCounterSet 1213 Exported Function
PcwSetCounterSetSecurity 1222 Exported Function
PcwSetQueryItemUserData 1223 Exported Function
PeekConsoleInputA 1224 Exported Function
PcwSendStatelessNotification 1221 Exported Function
PcwRegisterCounterSet 1218 Exported Function
PcwRemoveQueryItem 1219 Exported Function
PcwSendNotification 1220 Exported Function
PerfStopProvider 1240 Exported Function
PsmIsValidKey 1260 Exported Function
PssCaptureSnapshot 1261 Exported Function
PssDuplicateSnapshot 1262 Exported Function
PsmIsDynamicKey 1259 Exported Function
PsmGetKeyFromToken 1256 Exported Function
PsmGetPackageFullNameFromKey 1257 Exported Function
PsmIsChildKey 1258 Exported Function
PssWalkMarkerGetPosition 1267 Exported Function
PssWalkMarkerSeekToBeginning 1268 Exported Function
PssWalkMarkerSetPosition 1269 Exported Function
PssWalkMarkerFree 1266 Exported Function
PssFreeSnapshot 1263 Exported Function
PssQuerySnapshot 1264 Exported Function
PssWalkMarkerCreate 1265 Exported Function
PsmGetKeyFromProcess 1255 Exported Function
PrivilegeCheck 1245 Exported Function
PrivilegedServiceAuditAlarmW 1246 Exported Function
ProcessIdToSessionId 1247 Exported Function
PrivCopyFileExW 1244 Exported Function
PoolPerAppKeyStateInternal 1241 Exported Function
PostQueuedCompletionStatus 1242 Exported Function
PrefetchVirtualMemory 1243 Exported Function
PsmEqualPackage 1252 Exported Function
PsmGetApplicationNameFromKey 1253 Exported Function
PsmGetDynamicIdFromKey 1254 Exported Function
PsmEqualApplication 1251 Exported Function
ProductIdFromPackageFamilyName 1248 Exported Function
PsmCreateKey 1249 Exported Function
PsmCreateKeyWithDynamicId 1250 Exported Function
PathIsURLA 1171 Exported Function
PathIsURLW 1172 Exported Function
PathIsValidCharA 1173 Exported Function
PathIsUNCW 1170 Exported Function
PathIsUNCServerShareA 1167 Exported Function
PathIsUNCServerShareW 1168 Exported Function
PathIsUNCServerW 1169 Exported Function
PathMatchSpecW 1178 Exported Function
PathParseIconLocationA 1179 Exported Function
PathParseIconLocationW 1180 Exported Function
PathMatchSpecExW 1177 Exported Function
PathIsValidCharW 1174 Exported Function
PathMatchSpecA 1175 Exported Function
PathMatchSpecExA 1176 Exported Function
PathIsUNCServerA 1166 Exported Function
PathIsPrefixA 1156 Exported Function
PathIsPrefixW 1157 Exported Function
PathIsRelativeA 1158 Exported Function
PathIsLFNFileSpecW 1155 Exported Function
PathIsFileSpecA 1152 Exported Function
PathIsFileSpecW 1153 Exported Function
PathIsLFNFileSpecA 1154 Exported Function
PathIsSameRootW 1163 Exported Function
PathIsUNCA 1164 Exported Function
PathIsUNCEx 1165 Exported Function
PathIsSameRootA 1162 Exported Function
PathIsRelativeW 1159 Exported Function
PathIsRootA 1160 Exported Function
PathIsRootW 1161 Exported Function
PathQuoteSpacesA 1181 Exported Function
PathStripToRootA 1201 Exported Function
PathStripToRootW 1202 Exported Function
PathUnExpandEnvStringsA 1203 Exported Function
PathStripPathW 1200 Exported Function
PathSkipRootA 1197 Exported Function
PathSkipRootW 1198 Exported Function
PathStripPathA 1199 Exported Function
PcwClearCounterSetSecurity 1208 Exported Function
PcwCollectData 1209 Exported Function
PcwCompleteNotification 1210 Exported Function
PcwAddQueryItem 1207 Exported Function
PathUnExpandEnvStringsW 1204 Exported Function
PathUnquoteSpacesA 1205 Exported Function
PathUnquoteSpacesW 1206 Exported Function
PathSearchAndQualifyW 1196 Exported Function
PathRemoveBackslashW 1186 Exported Function
PathRemoveBlanksA 1187 Exported Function
PathRemoveBlanksW 1188 Exported Function
PathRemoveBackslashA 1185 Exported Function
PathQuoteSpacesW 1182 Exported Function
PathRelativePathToA 1183 Exported Function
PathRelativePathToW 1184 Exported Function
PathRenameExtensionA 1193 Exported Function
PathRenameExtensionW 1194 Exported Function
PathSearchAndQualifyA 1195 Exported Function
PathRemoveFileSpecW 1192 Exported Function
PathRemoveExtensionA 1189 Exported Function
PathRemoveExtensionW 1190 Exported Function
PathRemoveFileSpecA 1191 Exported Function
PssWalkSnapshot 1270 Exported Function
RegCreateKeyExW 1350 Exported Function
RegDeleteKeyExA 1351 Exported Function
RegDeleteKeyExInternalA 1352 Exported Function
RegCreateKeyExInternalW 1349 Exported Function
RegCopyTreeW 1346 Exported Function
RegCreateKeyExA 1347 Exported Function
RegCreateKeyExInternalA 1348 Exported Function
RegDeleteTreeA 1357 Exported Function
RegDeleteTreeW 1358 Exported Function
RegDeleteValueA 1359 Exported Function
RegDeleteKeyValueW 1356 Exported Function
RegDeleteKeyExInternalW 1353 Exported Function
RegDeleteKeyExW 1354 Exported Function
RegDeleteKeyValueA 1355 Exported Function
RegCloseKey 1345 Exported Function
ReadFile 1335 Exported Function
ReadFileEx 1336 Exported Function
ReadFileScatter 1337 Exported Function
ReadDirectoryChangesW 1334 Exported Function
ReadConsoleOutputW 1331 Exported Function
ReadConsoleW 1332 Exported Function
ReadDirectoryChangesExW 1333 Exported Function
RefreshPackageInfo 1342 Exported Function
RefreshPolicyExInternal 1343 Exported Function
RefreshPolicyInternal 1344 Exported Function
ReclaimVirtualMemory 1341 Exported Function
ReadProcessMemory 1338 Exported Function
ReadStateAtomValue 1339 Exported Function
ReadStateContainerValue 1340 Exported Function
RegDeleteValueW 1360 Exported Function
RegKrnGetHKEY_ClassesRootAddress 1373 Exported Function
RegKrnGetTermsrvRegistryExtensionFlags 1374 Exported Function
RegKrnResetAppKeyLoaded 1375 Exported Function
RegKrnGetClassesEnumTableAddressInternal 1372 Exported Function
RegisterWaitForSingleObjectEx 1414 Exported Function
RegKrnGetAppKeyEventAddressInternal 1370 Exported Function
RegKrnGetAppKeyLoaded 1371 Exported Function
RegLoadKeyA 1380 Exported Function
RegLoadKeyW 1381 Exported Function
RegLoadMUIStringA 1382 Exported Function
RegLoadAppKeyW 1379 Exported Function
RegKrnSetDllHasThreadStateGlobal 1376 Exported Function
RegKrnSetTermsrvRegistryExtensionFlags 1377 Exported Function
RegLoadAppKeyA 1378 Exported Function
RegisterTraceGuidsW 1413 Exported Function
RegEnumValueW 1365 Exported Function
RegFlushKey 1366 Exported Function
RegGetKeySecurity 1367 Exported Function
RegEnumValueA 1364 Exported Function
RegDisablePredefinedCacheEx 1361 Exported Function
RegEnumKeyExA 1362 Exported Function
RegEnumKeyExW 1363 Exported Function
RegisterGPNotificationInternal 1410 Exported Function
RegisterStateChangeNotification 1411 Exported Function
RegisterStateLock 1412 Exported Function
RegisterBadMemoryNotification 1409 Exported Function
RegGetValueA 1368 Exported Function
RegGetValueW 1369 Exported Function
RegisterApplicationRestart 1408 Exported Function
QueryPerformanceCounter 1290 Exported Function
QueryPerformanceFrequency 1291 Exported Function
QueryProcessAffinityUpdateMode 1292 Exported Function
QueryOptionalDelayLoadedAPI 1289 Exported Function
QueryInterruptTime 1286 Exported Function
QueryInterruptTimePrecise 1287 Exported Function
QueryMemoryResourceNotification 1288 Exported Function
QueryStateContainerCreatedNew 1297 Exported Function
QueryStateContainerItemInfo 1298 Exported Function
QueryThreadCycleTime 1299 Exported Function
QueryStateAtomValueInfo 1296 Exported Function
QueryProcessCycleTime 1293 Exported Function
QueryProtectedPolicy 1294 Exported Function
QuerySecurityAccessMask 1295 Exported Function
QueryIdleProcessorCycleTimeEx 1285 Exported Function
QISearch 1275 Exported Function
QueryActCtxSettingsW 1276 Exported Function
QueryActCtxW 1277 Exported Function
PurgeComm 1274 Exported Function
PublisherFromPackageFullName 1272 Exported Function
PublishStateChangeNotification 1271 Exported Function
PulseEvent 1273 Exported Function
QueryFullProcessImageNameW 1282 Exported Function
QueryGlobalizationUserSettingsStatus 1283 Exported Function
QueryIdleProcessorCycleTime 1284 Exported Function
QueryFullProcessImageNameA 1281 Exported Function
QueryAuxiliaryCounterFrequency 1278 Exported Function
QueryDepthSList 1279 Exported Function
QueryDosDeviceW 1280 Exported Function
QueryThreadpoolStackInformation 1300 Exported Function
RaiseFailFastException 1320 Exported Function
ReadConsoleA 1322 Exported Function
ReadConsoleInputA 1323 Exported Function
RaiseException 1319 Exported Function
QuirkIsEnabledForPackage4 1316 Exported Function
QuirkIsEnabledForProcess 1317 Exported Function
RaiseCustomSystemEventTrigger 1318 Exported Function
ReadConsoleOutputAttribute 1328 Exported Function
ReadConsoleOutputCharacterA 1329 Exported Function
ReadConsoleOutputCharacterW 1330 Exported Function
ReadConsoleOutputA 1327 Exported Function
ReadConsoleInputExA 1324 Exported Function
ReadConsoleInputExW 1325 Exported Function
ReadConsoleInputW 1326 Exported Function
QuirkIsEnabledForPackage3 1315 Exported Function
QueryWorkingSetEx 1305 Exported Function
QueueUserAPC 1306 Exported Function
QueueUserWorkItem 1307 Exported Function
QueryWorkingSet 1304 Exported Function
QueryUnbiasedInterruptTime 1301 Exported Function
QueryUnbiasedInterruptTimePrecise 1302 Exported Function
QueryVirtualMemoryInformation 1303 Exported Function
QuirkIsEnabled3 1312 Exported Function
QuirkIsEnabledForPackage 1313 Exported Function
QuirkIsEnabledForPackage2 1314 Exported Function
QuirkIsEnabled2 1311 Exported Function
QuirkGetData 1308 Exported Function
QuirkGetData2 1309 Exported Function
QuirkIsEnabled 1310 Exported Function
LocaleNameToLCID 1013 Exported Function
LocalFileTimeToFileTime 1006 Exported Function
LocalFileTimeToLocalSystemTime 1007 Exported Function
LocalAlloc 1005 Exported Function
LoadStringBaseExW 1002 Exported Function
LoadStringByReference 1003 Exported Function
LoadStringW 1004 Exported Function
LocalUnlock 1012 Exported Function
LocateXStateFeature 1014 Exported Function
LockFile 1015 Exported Function
LocalSystemTimeToLocalFileTime 1011 Exported Function
LocalFree 1008 Exported Function
LocalLock 1009 Exported Function
LocalReAlloc 1010 Exported Function
LoadStringA 1001 Exported Function
LoadAppInitDlls 991 Exported Function
LoadEnclaveData 992 Exported Function
LoadEnclaveImageA 993 Exported Function
LeaveCriticalSectionWhenCallbackReturns 990 Exported Function
LCMapStringW 987 Exported Function
LeaveCriticalPolicySectionInternal 988 Exported Function
LeaveCriticalSection 989 Exported Function
LoadLibraryW 998 Exported Function
LoadPackagedLibrary 999 Exported Function
LoadResource 1000 Exported Function
LoadLibraryExW 997 Exported Function
LoadEnclaveImageW 994 Exported Function
LoadLibraryA 995 Exported Function
LoadLibraryExA 996 Exported Function
LockFileEx 1016 Exported Function
MapViewOfFile 1024 Exported Function
MapViewOfFile3 1025 Exported Function
MapViewOfFile3FromApp 1026 Exported Function
MapUserPhysicalPages 1023 Exported Function
MakeSelfRelativeSD 1020 Exported Function
MapGenericMask 1021 Exported Function
MapPredefinedHandleInternal 1022 Exported Function
MoveFileExW 1031 Exported Function
MoveFileWithProgressTransactedW 1032 Exported Function
MoveFileWithProgressW 1033 Exported Function
MapViewOfFileNuma2 1030 Exported Function
MapViewOfFileEx 1027 Exported Function
MapViewOfFileExNuma 1028 Exported Function
MapViewOfFileFromApp 1029 Exported Function
MakeAbsoluteSD2 1019 Exported Function
lstrcmpiA 1888 Exported Function
lstrcmpiW 1889 Exported Function
lstrcmpW 1886 Exported Function
lstrcmpi 1887 Exported Function
LockResource 1017 Exported Function
lstrcmp 1884 Exported Function
lstrcmpA 1885 Exported Function
lstrlenA 1894 Exported Function
lstrlenW 1895 Exported Function
MakeAbsoluteSD 1018 Exported Function
lstrlen 1893 Exported Function
lstrcpyn 1890 Exported Function
lstrcpynA 1891 Exported Function
lstrcpynW 1892 Exported Function
IsValidNLSVersion 947 Exported Function
IsValidRelativeSecurityDescriptor 948 Exported Function
IsValidSecurityDescriptor 949 Exported Function
IsValidLocaleName 946 Exported Function
IsValidCodePage 943 Exported Function
IsValidLanguageGroup 944 Exported Function
IsValidLocale 945 Exported Function
IsWow64Process2 954 Exported Function
K32EmptyWorkingSet 955 Exported Function
K32EnumDeviceDrivers 956 Exported Function
IsWow64Process 953 Exported Function
IsValidSid 950 Exported Function
IsWellKnownSid 951 Exported Function
IsWow64GuestMachineSupported 952 Exported Function
IsValidAcl 942 Exported Function
IsProcessInJob 932 Exported Function
IsProcessorFeaturePresent 933 Exported Function
IsSideloadingEnabled 934 Exported Function
IsProcessCritical 931 Exported Function
IsNLSDefinedString 928 Exported Function
IsNormalizedString 929 Exported Function
IsOnDemandRegistrationSupportedForExtensionCategory 930 Exported Function
IsTimeZoneRedirectionEnabled 939 Exported Function
IsTokenRestricted 940 Exported Function
IsUserCetAvailableInEnvironment 941 Exported Function
IsThreadpoolTimerSet 938 Exported Function
IsSideloadingPolicyApplied 935 Exported Function
IsSyncForegroundPolicyRefresh 936 Exported Function
IsThreadAFiber 937 Exported Function
K32EnumPageFilesA 957 Exported Function
K32GetWsChanges 977 Exported Function
K32GetWsChangesEx 978 Exported Function
K32InitializeProcessForWsWatch 979 Exported Function
K32GetProcessMemoryInfo 976 Exported Function
K32GetPerformanceInfo 973 Exported Function
K32GetProcessImageFileNameA 974 Exported Function
K32GetProcessImageFileNameW 975 Exported Function
LCIDToLocaleName 984 Exported Function
LCMapStringA 985 Exported Function
LCMapStringEx 986 Exported Function
KernelbasePostInit 983 Exported Function
K32QueryWorkingSet 980 Exported Function
K32QueryWorkingSetEx 981 Exported Function
KernelBaseGetGlobalData 982 Exported Function
K32GetModuleInformation 972 Exported Function
K32GetDeviceDriverBaseNameA 962 Exported Function
K32GetDeviceDriverBaseNameW 963 Exported Function
K32GetDeviceDriverFileNameA 964 Exported Function
K32EnumProcessModulesEx 960 Exported Function
K32EnumPageFilesW 958 Exported Function
K32EnumProcesses 961 Exported Function
K32EnumProcessModules 959 Exported Function
K32GetModuleBaseNameW 969 Exported Function
K32GetModuleFileNameExA 970 Exported Function
K32GetModuleFileNameExW 971 Exported Function
K32GetModuleBaseNameA 968 Exported Function
K32GetDeviceDriverFileNameW 965 Exported Function
K32GetMappedFileNameA 966 Exported Function
K32GetMappedFileNameW 967 Exported Function
MulDiv 1034 Exported Function
PathCchAddBackslash 1112 Exported Function
PathCchAddBackslashEx 1113 Exported Function
PathCchAddExtension 1114 Exported Function
PathCanonicalizeW 1111 Exported Function
PathAppendA 1108 Exported Function
PathAppendW 1109 Exported Function
PathCanonicalizeA 1110 Exported Function
PathCchCombine 1119 Exported Function
PathCchCombineEx 1120 Exported Function
PathCchFindExtension 1121 Exported Function
PathCchCanonicalizeEx 1118 Exported Function
PathCchAppend 1115 Exported Function
PathCchAppendEx 1116 Exported Function
PathCchCanonicalize 1117 Exported Function
PathAllocCombine 1107 Exported Function
PackageSidFromProductId 1 Exported Function
ParseApplicationUserModelId 1098 Exported Function
ParseApplicationUserModelIdA 1099 Exported Function
PackageSidFromFamilyName 1097 Exported Function
PackageNameAndPublisherIdFromFamilyName 1094 Exported Function
PackageNameAndPublisherIdFromFamilyNameA 1095 Exported Function
PackageRelativeApplicationIdFromProductId 1096 Exported Function
PathAddExtensionA 1104 Exported Function
PathAddExtensionW 1105 Exported Function
PathAllocCanonicalize 1106 Exported Function
PathAddBackslashW 1103 Exported Function
ParseURLA 1100 Exported Function
ParseURLW 1101 Exported Function
PathAddBackslashA 1102 Exported Function
PathCchIsRoot 1122 Exported Function
PathFindFileNameA 1142 Exported Function
PathFindFileNameW 1143 Exported Function
PathFindNextComponentA 1144 Exported Function
PathFindExtensionW 1141 Exported Function
PathFileExistsA 1138 Exported Function
PathFileExistsW 1139 Exported Function
PathFindExtensionA 1140 Exported Function
PathGetCharTypeW 1149 Exported Function
PathGetDriveNumberA 1150 Exported Function
PathGetDriveNumberW 1151 Exported Function
PathGetCharTypeA 1148 Exported Function
PathFindNextComponentW 1145 Exported Function
PathGetArgsA 1146 Exported Function
PathGetArgsW 1147 Exported Function
PathCreateFromUrlW 1137 Exported Function
PathCchRenameExtension 1127 Exported Function
PathCchSkipRoot 1128 Exported Function
PathCchStripPrefix 1129 Exported Function
PathCchRemoveFileSpec 1126 Exported Function
PathCchRemoveBackslash 1123 Exported Function
PathCchRemoveBackslashEx 1124 Exported Function
PathCchRemoveExtension 1125 Exported Function
PathCommonPrefixW 1134 Exported Function
PathCreateFromUrlA 1135 Exported Function
PathCreateFromUrlAlloc 1136 Exported Function
PathCommonPrefixA 1133 Exported Function
PathCchStripToRoot 1130 Exported Function
PathCombineA 1131 Exported Function
PathCombineW 1132 Exported Function
ObjectPrivilegeAuditAlarmW 1054 Exported Function
OfferVirtualMemory 1055 Exported Function
OpenCommPort 1056 Exported Function
ObjectOpenAuditAlarmW 1053 Exported Function
NotifyRedirectedStringChange 1050 Exported Function
ObjectCloseAuditAlarmW 1051 Exported Function
ObjectDeleteAuditAlarmW 1052 Exported Function
OpenFileMappingW 1061 Exported Function
OpenGlobalizationUserSettingsKey 1062 Exported Function
OpenMutexW 1063 Exported Function
OpenFileMappingFromApp 1060 Exported Function
OpenEventA 1057 Exported Function
OpenEventW 1058 Exported Function
OpenFileById 1059 Exported Function
NotifyMountMgr 1049 Exported Function
NeedCurrentDirectoryForExePathW 1039 Exported Function
NlsCheckPolicy 1040 Exported Function
NlsDispatchAnsiEnumProc 1041 Exported Function
NeedCurrentDirectoryForExePathA 1038 Exported Function
MultiByteToWideChar 1035 Exported Function
NamedPipeEventEnum 1036 Exported Function
NamedPipeEventSelect 1037 Exported Function
NlsUpdateSystemLocale 1046 Exported Function
NlsValidateLocale 1047 Exported Function
NormalizeString 1048 Exported Function
NlsUpdateLocale 1045 Exported Function
NlsGetACPFromLocale 1042 Exported Function
NlsGetCacheUpdateCount 1043 Exported Function
NlsIsUserDefaultLocale 1044 Exported Function
OpenPackageInfoByFullName 1064 Exported Function
PackageFamilyNameFromFullNameA 1084 Exported Function
PackageFamilyNameFromId 1085 Exported Function
PackageFamilyNameFromIdA 1086 Exported Function
PackageFamilyNameFromFullName 1083 Exported Function
OutputDebugStringA 1080 Exported Function
OutputDebugStringW 1081 Exported Function
OverrideRoamingDataModificationTimesInRange 1082 Exported Function
PackageIdFromFullName 1091 Exported Function
PackageIdFromFullNameA 1092 Exported Function
PackageIdFromProductId 1093 Exported Function
PackageFullNameFromProductId 1090 Exported Function
PackageFamilyNameFromProductId 1087 Exported Function
PackageFullNameFromId 1088 Exported Function
PackageFullNameFromIdA 1089 Exported Function
OpenWaitableTimerW 1079 Exported Function
OpenProcessToken 1069 Exported Function
OpenRegKey 1070 Exported Function
OpenSemaphoreW 1071 Exported Function
OpenProcess 1068 Exported Function
OpenPackageInfoByFullNameForMachine 1065 Exported Function
OpenPackageInfoByFullNameForUser 1066 Exported Function
OpenPrivateNamespaceW 1067 Exported Function
OpenStateExplicitForUserSidString 1076 Exported Function
OpenThread 1077 Exported Function
OpenThreadToken 1078 Exported Function
OpenStateExplicitForUserSid 1075 Exported Function
OpenState 1072 Exported Function
OpenStateAtom 1073 Exported Function
OpenStateExplicit 1074 Exported Function
TlsSetValue 1703 Exported Function
TraceEvent 1704 Exported Function
TraceMessage 1705 Exported Function
TlsGetValue 1702 Exported Function
time 1896 Exported Function
TlsAlloc 1700 Exported Function
TlsFree 1701 Exported Function
TryAcquireSRWLockShared 1710 Exported Function
TryEnterCriticalSection 1711 Exported Function
TrySubmitThreadpoolCallback 1712 Exported Function
TryAcquireSRWLockExclusive 1709 Exported Function
TraceMessageVa 1706 Exported Function
TransactNamedPipe 1707 Exported Function
TransmitCommChar 1708 Exported Function
TerminateThread 1699 Exported Function
SubscribeWdagEnabledStateChange 1689 Exported Function
SuspendThread 1690 Exported Function
SwitchToFiber 1691 Exported Function
SubscribeStateChangeNotification 1688 Exported Function
StrTrimW 1685 Exported Function
SubmitThreadpoolWork 1686 Exported Function
SubscribeEdpEnabledStateChange 1687 Exported Function
TerminateEnclave 1696 Exported Function
TerminateProcess 1697 Exported Function
TerminateProcessOnMemoryExhaustion 1698 Exported Function
SystemTimeToTzSpecificLocalTimeEx 1695 Exported Function
SwitchToThread 1692 Exported Function
SystemTimeToFileTime 1693 Exported Function
SystemTimeToTzSpecificLocalTime 1694 Exported Function
TzSpecificLocalTimeToSystemTime 1713 Exported Function
UpdatePackageStatusForUserSid 1733 Exported Function
UpdateProcThreadAttribute 1734 Exported Function
UrlApplySchemeA 1735 Exported Function
UpdatePackageStatusForUser 1732 Exported Function
UnsubscribeStateChangeNotification 1729 Exported Function
UnsubscribeWdagEnabledStateChange 1730 Exported Function
UpdatePackageStatus 1731 Exported Function
UrlCombineW 1740 Exported Function
UrlCompareA 1741 Exported Function
UrlCompareW 1742 Exported Function
UrlCombineA 1739 Exported Function
UrlApplySchemeW 1736 Exported Function
UrlCanonicalizeA 1737 Exported Function
UrlCanonicalizeW 1738 Exported Function
UnsubscribeEdpEnabledStateChange 1728 Exported Function
UnmapViewOfFile 1718 Exported Function
UnmapViewOfFile2 1719 Exported Function
UnmapViewOfFileEx 1720 Exported Function
UnlockFileEx 1717 Exported Function
TzSpecificLocalTimeToSystemTimeEx 1714 Exported Function
UnhandledExceptionFilter 1715 Exported Function
UnlockFile 1716 Exported Function
UnregisterStateLock 1725 Exported Function
UnregisterTraceGuids 1726 Exported Function
UnregisterWaitEx 1727 Exported Function
UnregisterStateChangeNotification 1724 Exported Function
UnregisterApplicationRestart 1721 Exported Function
UnregisterBadMemoryNotification 1722 Exported Function
UnregisterGPNotificationInternal 1723 Exported Function
StrCmpNIA 1649 Exported Function
StrCmpNICA 1650 Exported Function
StrCmpNICW 1651 Exported Function
StrCmpNCW 1648 Exported Function
StrCmpLogicalW 1645 Exported Function
StrCmpNA 1646 Exported Function
StrCmpNCA 1647 Exported Function
StrCpyNXA 1656 Exported Function
StrCpyNXW 1657 Exported Function
StrCSpnA 1626 Exported Function
StrCpyNW 1655 Exported Function
StrCmpNIW 1652 Exported Function
StrCmpNW 1653 Exported Function
StrCmpW 1654 Exported Function
StrCmpIW 1644 Exported Function
StrChrA_MB 1634 Exported Function
StrChrIA 1635 Exported Function
StrChrIW 1636 Exported Function
StrChrA 1633 Exported Function
StrCatBuffA 1630 Exported Function
StrCatBuffW 1631 Exported Function
StrCatChainW 1632 Exported Function
StrCmpCW 1641 Exported Function
StrCmpICA 1642 Exported Function
StrCmpICW 1643 Exported Function
StrCmpCA 1640 Exported Function
StrChrNIW 1637 Exported Function
StrChrNW 1638 Exported Function
StrChrW 1639 Exported Function
StrCSpnIA 1627 Exported Function
StrStrNIW 1675 Exported Function
StrStrNW 1676 Exported Function
StrStrW 1677 Exported Function
StrStrIW 1674 Exported Function
StrSpnW 1671 Exported Function
StrStrA 1672 Exported Function
StrStrIA 1673 Exported Function
StrToIntExW 1682 Exported Function
StrToIntW 1683 Exported Function
StrTrimA 1684 Exported Function
StrToIntExA 1681 Exported Function
StrToInt64ExA 1678 Exported Function
StrToInt64ExW 1679 Exported Function
StrToIntA 1680 Exported Function
StrSpnA 1670 Exported Function
StrIsIntlEqualA 1660 Exported Function
StrIsIntlEqualW 1661 Exported Function
StrPBrkA 1662 Exported Function
StrDupW 1659 Exported Function
StrCSpnIW 1628 Exported Function
StrCSpnW 1629 Exported Function
StrDupA 1658 Exported Function
StrRChrW 1667 Exported Function
StrRStrIA 1668 Exported Function
StrRStrIW 1669 Exported Function
StrRChrIW 1666 Exported Function
StrPBrkW 1663 Exported Function
StrRChrA 1664 Exported Function
StrRChrIA 1665 Exported Function
UrlCreateFromPathA 1743 Exported Function
WerRegisterCustomMetadata 1822 Exported Function
WerRegisterExcludedMemoryBlock 1823 Exported Function
WerRegisterFile 1824 Exported Function
WerRegisterAppLocalDump 1821 Exported Function
WerpNotifyLoadStringResource 1836 Exported Function
WerpNotifyUseStringResource 1837 Exported Function
WerRegisterAdditionalProcess 1820 Exported Function
WerUnregisterAdditionalProcess 1829 Exported Function
WerUnregisterAppLocalDump 1830 Exported Function
WerUnregisterCustomMetadata 1831 Exported Function
WerSetMaxProcessHoldMilliseconds 1828 Exported Function
WerRegisterMemoryBlock 1825 Exported Function
WerRegisterRuntimeExceptionModule 1826 Exported Function
WerSetFlags 1827 Exported Function
WerGetFlags 1819 Exported Function
WaitForThreadpoolTimerCallbacks 1809 Exported Function
WaitForThreadpoolWaitCallbacks 1810 Exported Function
WaitForThreadpoolWorkCallbacks 1811 Exported Function
WaitForThreadpoolIoCallbacks 1808 Exported Function
WaitForMultipleObjectsEx 1805 Exported Function
WaitForSingleObject 1806 Exported Function
WaitForSingleObjectEx 1807 Exported Function
WakeByAddressAll 1816 Exported Function
WakeByAddressSingle 1817 Exported Function
WakeConditionVariable 1818 Exported Function
WakeAllConditionVariable 1815 Exported Function
WaitForUserPolicyForegroundProcessingInternal 1812 Exported Function
WaitNamedPipeW 1813 Exported Function
WaitOnAddress 1814 Exported Function
WerUnregisterExcludedMemoryBlock 1832 Exported Function
WriteConsoleW 1853 Exported Function
WriteFile 1854 Exported Function
WriteFileEx 1855 Exported Function
WriteConsoleOutputW 1852 Exported Function
WriteConsoleOutputAttribute 1849 Exported Function
WriteConsoleOutputCharacterA 1850 Exported Function
WriteConsoleOutputCharacterW 1851 Exported Function
WTSGetServiceSessionId 1798 Exported Function
WTSIsServerContainer 1799 Exported Function
ZombifyActCtx 1860 Exported Function
WriteStateContainerValue 1859 Exported Function
WriteFileGather 1856 Exported Function
WriteProcessMemory 1857 Exported Function
WriteStateAtomValue 1858 Exported Function
WriteConsoleOutputA 1848 Exported Function
Wow64DisableWow64FsRedirection 1839 Exported Function
Wow64GetThreadContext 1840 Exported Function
Wow64RevertWow64FsRedirection 1841 Exported Function
WideCharToMultiByte 1838 Exported Function
WerUnregisterFile 1833 Exported Function
WerUnregisterMemoryBlock 1834 Exported Function
WerUnregisterRuntimeExceptionModule 1835 Exported Function
WriteConsoleA 1845 Exported Function
WriteConsoleInputA 1846 Exported Function
WriteConsoleInputW 1847 Exported Function
wprintf 1897 Exported Function
Wow64SetThreadContext 1842 Exported Function
Wow64SetThreadDefaultGuestMachine 1843 Exported Function
Wow64SuspendThread 1844 Exported Function
VerFindFileW 1763 Exported Function
VerifyApplicationUserModelId 1769 Exported Function
VerifyApplicationUserModelIdA 1770 Exported Function
VerFindFileA 1762 Exported Function
UrlIsW 1759 Exported Function
UrlUnescapeA 1760 Exported Function
UrlUnescapeW 1761 Exported Function
VerifyPackageId 1775 Exported Function
VerifyPackageIdA 1776 Exported Function
VerifyPackagePublisher 1777 Exported Function
VerifyPackageFullNameA 1774 Exported Function
VerifyPackageFamilyName 1771 Exported Function
VerifyPackageFamilyNameA 1772 Exported Function
VerifyPackageFullName 1773 Exported Function
UrlIsOpaqueW 1758 Exported Function
UrlGetLocationA 1748 Exported Function
UrlGetLocationW 1749 Exported Function
UrlGetPartA 1750 Exported Function
UrlFixupW 1747 Exported Function
UrlCreateFromPathW 1744 Exported Function
UrlEscapeA 1745 Exported Function
UrlEscapeW 1746 Exported Function
UrlIsNoHistoryA 1755 Exported Function
UrlIsNoHistoryW 1756 Exported Function
UrlIsOpaqueA 1757 Exported Function
UrlIsA 1754 Exported Function
UrlGetPartW 1751 Exported Function
UrlHashA 1752 Exported Function
UrlHashW 1753 Exported Function
VerifyPackagePublisherA 1778 Exported Function
VirtualProtectFromApp 1793 Exported Function
VirtualQuery 1794 Exported Function
VirtualQueryEx 1795 Exported Function
VirtualProtectEx 1792 Exported Function
VirtualFreeEx 1789 Exported Function
VirtualLock 1790 Exported Function
VirtualProtect 1791 Exported Function
WaitForDebugEventEx 1802 Exported Function
WaitForMachinePolicyForegroundProcessingInternal 1803 Exported Function
WaitForMultipleObjects 1804 Exported Function
WaitForDebugEvent 1801 Exported Function
VirtualUnlock 1796 Exported Function
VirtualUnlockEx 1797 Exported Function
WaitCommEvent 1800 Exported Function
VirtualFree 1788 Exported Function
VerLanguageNameW 1765 Exported Function
VerQueryValueA 1766 Exported Function
VerQueryValueW 1767 Exported Function
VerLanguageNameA 1764 Exported Function
VerifyPackageRelativeApplicationId 1779 Exported Function
VerifyPackageRelativeApplicationIdA 1780 Exported Function
VerifyScripts 1781 Exported Function
VirtualAllocEx 1785 Exported Function
VirtualAllocExNuma 1786 Exported Function
VirtualAllocFromApp 1787 Exported Function
VirtualAlloc2FromApp 1784 Exported Function
VerSetConditionMask 1768 Exported Function
VirtualAlloc 1782 Exported Function
VirtualAlloc2 1783 Exported Function
SetComputerNameW 1498 Exported Function
SetConsoleActiveScreenBuffer 1499 Exported Function
SetConsoleCP 1500 Exported Function
SetComputerNameExW 1497 Exported Function
SetComputerNameA 1494 Exported Function
SetComputerNameEx2W 1495 Exported Function
SetComputerNameExA 1496 Exported Function
SetConsoleHistoryInfo 1505 Exported Function
SetConsoleInputExeNameA 1506 Exported Function
SetConsoleInputExeNameW 1507 Exported Function
SetConsoleDisplayMode 1504 Exported Function
SetConsoleCtrlHandler 1501 Exported Function
SetConsoleCursorInfo 1502 Exported Function
SetConsoleCursorPosition 1503 Exported Function
SetCommTimeouts 1493 Exported Function
SearchPathW 1483 Exported Function
SetAclInformation 1484 Exported Function
SetCachedSigningLevel 1485 Exported Function
SearchPathA 1482 Exported Function
SaveStateRootFolderPath 1479 Exported Function
ScrollConsoleScreenBufferA 1480 Exported Function
ScrollConsoleScreenBufferW 1481 Exported Function
SetCommConfig 1490 Exported Function
SetCommMask 1491 Exported Function
SetCommState 1492 Exported Function
SetCommBreak 1489 Exported Function
SetCalendarInfoW 1486 Exported Function
SetClientDynamicTimeZoneInformation 1487 Exported Function
SetClientTimeZoneInformation 1488 Exported Function
SetConsoleMode 1508 Exported Function
SetErrorMode 1528 Exported Function
SetEvent 1529 Exported Function
SetEventWhenCallbackReturns 1530 Exported Function
SetEnvironmentVariableW 1527 Exported Function
SetEndOfFile 1524 Exported Function
SetEnvironmentStringsW 1525 Exported Function
SetEnvironmentVariableA 1526 Exported Function
SetFileAttributesW 1535 Exported Function
SetFileInformationByHandle 1536 Exported Function
SetFileIoOverlappedRange 1537 Exported Function
SetFileAttributesA 1534 Exported Function
SetExtensionProperty 1531 Exported Function
SetFileApisToANSI 1532 Exported Function
SetFileApisToOEM 1533 Exported Function
SetDynamicTimeZoneInformation 1523 Exported Function
SetConsoleScreenBufferSize 1513 Exported Function
SetConsoleTextAttribute 1514 Exported Function
SetConsoleTitleA 1515 Exported Function
SetConsoleScreenBufferInfoEx 1512 Exported Function
SetConsoleNumberOfCommandsA 1509 Exported Function
SetConsoleNumberOfCommandsW 1510 Exported Function
SetConsoleOutputCP 1511 Exported Function
SetCurrentDirectoryA 1520 Exported Function
SetCurrentDirectoryW 1521 Exported Function
SetDefaultDllDirectories 1522 Exported Function
SetCurrentConsoleFontEx 1519 Exported Function
SetConsoleTitleW 1516 Exported Function
SetConsoleWindowInfo 1517 Exported Function
SetCriticalSectionSpinCount 1518 Exported Function
RegSetKeyValueA 1402 Exported Function
RegSetKeyValueW 1403 Exported Function
RegSetValueExA 1404 Exported Function
RegSetKeySecurity 1401 Exported Function
RegRestoreKeyW 1398 Exported Function
RegSaveKeyExA 1399 Exported Function
RegSaveKeyExW 1400 Exported Function
ReleaseMutex 1416 Exported Function
ReleaseMutexWhenCallbackReturns 1417 Exported Function
ReleaseSemaphore 1420 Exported Function
ReleaseActCtx 1415 Exported Function
RegSetValueExW 1405 Exported Function
RegUnLoadKeyA 1406 Exported Function
RegUnLoadKeyW 1407 Exported Function
RegRestoreKeyA 1397 Exported Function
RegOpenKeyExInternalA 1387 Exported Function
RegOpenKeyExInternalW 1388 Exported Function
RegOpenKeyExW 1389 Exported Function
RegOpenKeyExA 1386 Exported Function
RegLoadMUIStringW 1383 Exported Function
RegNotifyChangeKeyValue 1384 Exported Function
RegOpenCurrentUser 1385 Exported Function
RegQueryMultipleValuesW 1394 Exported Function
RegQueryValueExA 1395 Exported Function
RegQueryValueExW 1396 Exported Function
RegQueryMultipleValuesA 1393 Exported Function
RegOpenUserClassesRoot 1390 Exported Function
RegQueryInfoKeyA 1391 Exported Function
RegQueryInfoKeyW 1392 Exported Function
ReleaseSemaphoreWhenCallbackReturns 1421 Exported Function
ResizePseudoConsole 1438 Exported Function
ResolveDelayLoadedAPI 1439 Exported Function
ResolveDelayLoadsFromDll 1440 Exported Function
ResetWriteWatch 1437 Exported Function
ReplaceFileW 1434 Exported Function
ResetEvent 1435 Exported Function
ResetState 1436 Exported Function
RevertToSelf 1445 Exported Function
RsopLoggingEnabledInternal 1446 Exported Function
SaveAlternatePackageRootPath 1478 Exported Function
ResumeThread 1444 Exported Function
ResolveLocaleName 1441 Exported Function
RestoreLastError 1442 Exported Function
RestoreThreadPreferredUILanguages 1443 Exported Function
ReplaceFileExInternal 1433 Exported Function
RemoveDirectoryA 1424 Exported Function
RemoveDirectoryW 1425 Exported Function
RemoveDllDirectory 1426 Exported Function
RemapPredefinedHandleInternal 1423 Exported Function
ReleaseSRWLockExclusive 1418 Exported Function
ReleaseSRWLockShared 1419 Exported Function
ReleaseStateLock 1422 Exported Function
RemoveVectoredContinueHandler 1431 Exported Function
RemoveVectoredExceptionHandler 1432 Exported Function
ReOpenFile 1321 Exported Function
RemovePackageStatusForUser 1430 Exported Function
RemoveExtensionProgIds 1427 Exported Function
RemovePackageFromFamilyXref 1428 Exported Function
RemovePackageStatus 1429 Exported Function
SetFilePointer 1538 Exported Function
SharedLocalIsEnabled 1617 Exported Function
SHCoCreateInstance 1447 Exported Function
SHExpandEnvironmentStringsA 1448 Exported Function
SetXStateFeaturesMask 1615 Exported Function
SetUserGeoName 1612 Exported Function
SetWaitableTimer 1613 Exported Function
SetWaitableTimerEx 1614 Exported Function
SHRegCreateUSKeyA 1453 Exported Function
SHRegCreateUSKeyW 1454 Exported Function
SHRegDeleteEmptyUSKeyA 1455 Exported Function
SHRegCloseUSKey 1452 Exported Function
SHExpandEnvironmentStringsW 1449 Exported Function
SHLoadIndirectString 1450 Exported Function
SHLoadIndirectStringInternal 1451 Exported Function
SetUserGeoID 1611 Exported Function
SetThreadPriority 1595 Exported Function
SetThreadPriorityBoost 1596 Exported Function
SetThreadSelectedCpuSets 1597 Exported Function
SetThreadPreferredUILanguages2 1594 Exported Function
SetThreadpoolWait 1606 Exported Function
SetThreadpoolWaitEx 1607 Exported Function
SetThreadPreferredUILanguages 1593 Exported Function
SetTokenInformation 1609 Exported Function
SetUnhandledExceptionFilter 1610 Exported Function
SetupComm 1616 Exported Function
SetTimeZoneInformation 1608 Exported Function
SetThreadStackGuarantee 1598 Exported Function
SetThreadToken 1599 Exported Function
SetThreadUILanguage 1600 Exported Function
SHRegDeleteEmptyUSKeyW 1456 Exported Function
SHRegWriteUSValueW 1476 Exported Function
SHTruncateString 1477 Exported Function
SignalObjectAndWait 1618 Exported Function
SHRegWriteUSValueA 1475 Exported Function
SHRegQueryUSValueW 1472 Exported Function
SHRegSetUSValueA 1473 Exported Function
SHRegSetUSValueW 1474 Exported Function
SleepEx 1623 Exported Function
SpecialMBToWC 1624 Exported Function
StartThreadpoolIo 1625 Exported Function
SleepConditionVariableSRW 1622 Exported Function
SizeofResource 1619 Exported Function
Sleep 1620 Exported Function
SleepConditionVariableCS 1621 Exported Function
SHRegQueryUSValueA 1471 Exported Function
SHRegEnumUSValueA 1461 Exported Function
SHRegEnumUSValueW 1462 Exported Function
SHRegGetBoolUSValueA 1463 Exported Function
SHRegEnumUSKeyW 1460 Exported Function
SHRegDeleteUSValueA 1457 Exported Function
SHRegDeleteUSValueW 1458 Exported Function
SHRegEnumUSKeyA 1459 Exported Function
SHRegOpenUSKeyW 1468 Exported Function
SHRegQueryInfoUSKeyA 1469 Exported Function
SHRegQueryInfoUSKeyW 1470 Exported Function
SHRegOpenUSKeyA 1467 Exported Function
SHRegGetBoolUSValueW 1464 Exported Function
SHRegGetUSValueA 1465 Exported Function
SHRegGetUSValueW 1466 Exported Function
SetProcessDynamicEHContinuationTargets 1558 Exported Function
SetProcessGroupAffinity 1559 Exported Function
SetProcessInformation 1560 Exported Function
SetProcessDefaultCpuSets 1557 Exported Function
SetPrivateObjectSecurity 1554 Exported Function
SetPrivateObjectSecurityEx 1555 Exported Function
SetProcessAffinityUpdateMode 1556 Exported Function
SetProcessValidCallTargets 1565 Exported Function
SetProcessValidCallTargetsForMappedView 1566 Exported Function
SetProcessWorkingSetSizeEx 1567 Exported Function
SetProcessShutdownParameters 1564 Exported Function
SetProcessMitigationPolicy 1561 Exported Function
SetProcessPreferredUILanguages 1562 Exported Function
SetProcessPriorityBoost 1563 Exported Function
SetPriorityClass 1553 Exported Function
SetHandleCount 1543 Exported Function
SetHandleInformation 1544 Exported Function
SetIsDeveloperModeEnabled 1545 Exported Function
SetFileValidData 1542 Exported Function
SetFilePointerEx 1539 Exported Function
SetFileSecurityW 1540 Exported Function
SetFileTime 1541 Exported Function
SetLocaleInfoW 1551 Exported Function
SetLocalTime 1550 Exported Function
SetNamedPipeHandleState 1552 Exported Function
SetLastError 1549 Exported Function
SetIsSideloadingEnabled 1546 Exported Function
SetKernelObjectSecurity 1547 Exported Function
SetLastConsoleEventActive 1548 Exported Function
SetProtectedPolicy 1568 Exported Function
SetThreadGroupAffinity 1588 Exported Function
SetThreadIdealProcessor 1589 Exported Function
SetThreadIdealProcessorEx 1590 Exported Function
SetThreadErrorMode 1587 Exported Function
SetSystemTimeAdjustmentPrecise 1584 Exported Function
SetThreadContext 1585 Exported Function
SetThreadDescription 1586 Exported Function
SetThreadpoolThreadMinimum 1603 Exported Function
SetThreadpoolTimer 1604 Exported Function
SetThreadpoolTimerEx 1605 Exported Function
SetThreadpoolThreadMaximum 1602 Exported Function
SetThreadInformation 1591 Exported Function
SetThreadLocale 1592 Exported Function
SetThreadpoolStackInformation 1601 Exported Function
SetSystemTimeAdjustment 1583 Exported Function
SetSecurityDescriptorDacl 1573 Exported Function
SetSecurityDescriptorGroup 1574 Exported Function
SetSecurityDescriptorOwner 1575 Exported Function
SetSecurityDescriptorControl 1572 Exported Function
SetProtocolProperty 1569 Exported Function
SetRoamingLastObservedChangeTime 1570 Exported Function
SetSecurityAccessMask 1571 Exported Function
SetStdHandleEx 1580 Exported Function
SetSystemFileCacheSize 1581 Exported Function
SetSystemTime 1582 Exported Function
SetStdHandle 1579 Exported Function
SetSecurityDescriptorRMControl 1576 Exported Function
SetSecurityDescriptorSacl 1577 Exported Function
SetStateVersion 1578 Exported Function
IsMrtResourceRedirectionEnabled 927 Exported Function
EnumCalendarInfoExEx 297 Exported Function
EnumCalendarInfoExW 298 Exported Function
EnumCalendarInfoW 299 Exported Function
EnterSynchronizationBarrier 296 Exported Function
EncodeSystemPointer 293 Exported Function
EnterCriticalPolicySectionInternal 294 Exported Function
EnterCriticalSection 295 Exported Function
EnumDynamicTimeZoneInformation 304 Exported Function
EnumerateExtensionNames 329 Exported Function
EnumerateStateAtomValues 330 Exported Function
EnumDeviceDrivers 303 Exported Function
EnumDateFormatsExEx 300 Exported Function
EnumDateFormatsExW 301 Exported Function
EnumDateFormatsW 302 Exported Function
EncodeRemotePointer 292 Exported Function
DsMakePasswordCredentialsW 282 Exported Function
DsReadNgcKeyW 283 Exported Function
DsUnBindW 284 Exported Function
DsGetDomainControllerInfoW 281 Exported Function
DsFreeNameResultW 278 Exported Function
DsFreeNgcKey 279 Exported Function
DsFreePasswordCredentials 280 Exported Function
DuplicateTokenEx 289 Exported Function
EmptyWorkingSet 290 Exported Function
EncodePointer 291 Exported Function
DuplicateToken 288 Exported Function
DsWriteNgcKeyW 285 Exported Function
DuplicateHandle 286 Exported Function
DuplicateStateContainerHandle 287 Exported Function
EnumerateStateContainerItems 331 Exported Function
EnumSystemLocalesEx 324 Exported Function
EnumSystemLocalesW 325 Exported Function
EnumTimeFormatsEx 326 Exported Function
EnumSystemLocalesA 323 Exported Function
EnumSystemGeoID 320 Exported Function
EnumSystemGeoNames 321 Exported Function
EnumSystemLanguageGroupsW 322 Exported Function
EqualSid 334 Exported Function
EscapeCommFunction 335 Exported Function
EventActivityIdControl 336 Exported Function
EqualPrefixSid 333 Exported Function
EnumTimeFormatsW 327 Exported Function
EnumUILanguagesW 328 Exported Function
EqualDomainSid 332 Exported Function
EnumSystemFirmwareTables 319 Exported Function
EnumProcessModules 308 Exported Function
EnumProcessModulesEx 309 Exported Function
EnumResourceLanguagesExA 311 Exported Function
EnumProcesses 310 Exported Function
EnumLanguageGroupLocalesW 305 Exported Function
EnumPageFilesA 306 Exported Function
EnumPageFilesW 307 Exported Function
EnumResourceTypesExA 316 Exported Function
EnumResourceTypesExW 317 Exported Function
EnumSystemCodePagesW 318 Exported Function
EnumResourceNamesW 315 Exported Function
EnumResourceLanguagesExW 312 Exported Function
EnumResourceNamesExA 313 Exported Function
EnumResourceNamesExW 314 Exported Function
CreateWellKnownSid 238 Exported Function
CtrlRoutine 239 Exported Function
CveEventWrite 240 Exported Function
CreateWaitableTimerW 237 Exported Function
CreateTimerQueue 234 Exported Function
CreateTimerQueueTimer 235 Exported Function
CreateWaitableTimerExW 236 Exported Function
DecodePointer 245 Exported Function
DecodeRemotePointer 246 Exported Function
DecodeSystemPointer 247 Exported Function
DebugBreak 244 Exported Function
DeactivateActCtx 241 Exported Function
DebugActiveProcess 242 Exported Function
DebugActiveProcessStop 243 Exported Function
CreateThreadpoolWork 233 Exported Function
CreateStateContainer 223 Exported Function
CreateStateLock 224 Exported Function
CreateStateSubcontainer 225 Exported Function
CreateStateChangeNotification 222 Exported Function
CreateSemaphoreExW 219 Exported Function
CreateSemaphoreW 220 Exported Function
CreateStateAtom 221 Exported Function
CreateThreadpoolIo 230 Exported Function
CreateThreadpoolTimer 231 Exported Function
CreateThreadpoolWait 232 Exported Function
CreateThreadpoolCleanupGroup 229 Exported Function
CreateSymbolicLinkW 226 Exported Function
CreateThread 227 Exported Function
CreateThreadpool 228 Exported Function
DefineDosDeviceW 248 Exported Function
DeviceIoControl 268 Exported Function
DisablePredefinedHandleTableInternal 269 Exported Function
DisableThreadLibraryCalls 270 Exported Function
DestroyPrivateObjectSecurity 267 Exported Function
DeleteTimerQueueTimer 264 Exported Function
DeleteVolumeMountPointW 265 Exported Function
DeriveCapabilitySidsFromName 266 Exported Function
DsBindWithSpnExW 275 Exported Function
DsCrackNamesW 276 Exported Function
DsFreeDomainControllerInfoW 277 Exported Function
DnsHostnameToComputerNameExW 274 Exported Function
DisassociateCurrentThreadFromCallback 271 Exported Function
DiscardVirtualMemory 272 Exported Function
DisconnectNamedPipe 273 Exported Function
DeleteTimerQueueEx 263 Exported Function
DeleteCriticalSection 253 Exported Function
DeleteEnclave 254 Exported Function
DeleteFiber 255 Exported Function
DeleteBoundaryDescriptor 252 Exported Function
DelayLoadFailureHook 249 Exported Function
DelayLoadFailureHookLookup 250 Exported Function
DeleteAce 251 Exported Function
DeleteStateContainer 260 Exported Function
DeleteStateContainerValue 261 Exported Function
DeleteSynchronizationBarrier 262 Exported Function
DeleteStateAtomValue 259 Exported Function
DeleteFileA 256 Exported Function
DeleteFileW 257 Exported Function
DeleteProcThreadAttributeList 258 Exported Function
EventEnabled 337 Exported Function
GetAcceptLanguagesA 416 Exported Function
GetAcceptLanguagesW 417 Exported Function
GetAce 418 Exported Function
GenerateGPNotificationInternal 414 Exported Function
FreeSid 411 Exported Function
FreeUserPhysicalPages 412 Exported Function
GenerateConsoleCtrlEvent 413 Exported Function
GetAppContainerAce 422 Exported Function
GetAppContainerNamedObjectPath 423 Exported Function
GetAppDataFolder 424 Exported Function
GetAlternatePackageRoots 421 Exported Function
GetAclInformation 419 Exported Function
GetACP 415 Exported Function
GetAdjustObjectAttributesForPrivateNamespaceRoutine 420 Exported Function
FreeResource 410 Exported Function
FormatMessageA 400 Exported Function
FormatMessageW 401 Exported Function
FreeConsole 402 Exported Function
FormatApplicationUserModelIdA 399 Exported Function
FoldStringW 396 Exported Function
ForceSyncFgPolicyInternal 397 Exported Function
FormatApplicationUserModelId 398 Exported Function
FreeLibrary 407 Exported Function
FreeLibraryAndExitThread 408 Exported Function
FreeLibraryWhenCallbackReturns 409 Exported Function
FreeGPOListInternalW 406 Exported Function
FreeEnvironmentStringsA 403 Exported Function
FreeEnvironmentStringsW 404 Exported Function
FreeGPOListInternalA 405 Exported Function
GetApplicationRecoveryCallback 426 Exported Function
GetCompressedFileSizeA 449 Exported Function
GetCompressedFileSizeW 450 Exported Function
GetComputerNameExA 451 Exported Function
GetCommTimeouts 446 Exported Function
GetCommPorts 443 Exported Function
GetCommProperties 444 Exported Function
GetCommState 445 Exported Function
GetConsoleAliasesLengthW 461 Exported Function
GetConsoleAliasesW 462 Exported Function
GetConsoleAliasExesA 454 Exported Function
GetConsoleAliasesLengthA 460 Exported Function
GetComputerNameExW 452 Exported Function
GetConsoleAliasA 453 Exported Function
GetConsoleAliasesA 459 Exported Function
GetCommModemStatus 442 Exported Function
GetAppliedGPOListInternalW 431 Exported Function
GetAppModelVersion 425 Exported Function
GetCachedSigningLevel 436 Exported Function
GetAppliedGPOListInternalA 430 Exported Function
GetApplicationRestartSettings 427 Exported Function
GetApplicationUserModelId 428 Exported Function
GetApplicationUserModelIdFromToken 429 Exported Function
GetCommandLineW 448 Exported Function
GetCommConfig 440 Exported Function
GetCommMask 441 Exported Function
GetCommandLineA 447 Exported Function
GetCalendar 437 Exported Function
GetCalendarInfoEx 438 Exported Function
GetCalendarInfoW 439 Exported Function
FileTimeToSystemTime 356 Exported Function
FillConsoleOutputAttribute 357 Exported Function
FillConsoleOutputCharacterA 358 Exported Function
FileTimeToLocalFileTime 355 Exported Function
ExtensionProgIdExists 352 Exported Function
FatalAppExitA 353 Exported Function
FatalAppExitW 354 Exported Function
FindCloseChangeNotification 363 Exported Function
FindFirstChangeNotificationA 364 Exported Function
FindFirstChangeNotificationW 365 Exported Function
FindClose 362 Exported Function
FillConsoleOutputCharacterW 359 Exported Function
FindActCtxSectionGuid 360 Exported Function
FindActCtxSectionStringW 361 Exported Function
ExpungeConsoleCommandHistoryW 351 Exported Function
EventWrite 342 Exported Function
EventWriteEx 343 Exported Function
EventWriteString 344 Exported Function
EventUnregister 341 Exported Function
EventProviderEnabled 338 Exported Function
EventRegister 339 Exported Function
EventSetInformation 340 Exported Function
ExpandEnvironmentStringsA 348 Exported Function
ExpandEnvironmentStringsW 349 Exported Function
ExpungeConsoleCommandHistoryA 350 Exported Function
ExitThread 347 Exported Function
EventWriteTransfer 345 Exported Function
exit 1881 Exported Function
ExitProcess 346 Exported Function
FindFirstFileA 366 Exported Function
FindVolumeClose 386 Exported Function
FlsAlloc 387 Exported Function
FlsFree 388 Exported Function
FindStringOrdinal 385 Exported Function
FindPackagesByPackageFamily 382 Exported Function
FindResourceExW 383 Exported Function
FindResourceW 384 Exported Function
FlushInstructionCache 393 Exported Function
FlushProcessWriteBuffers 394 Exported Function
FlushViewOfFile 395 Exported Function
FlushFileBuffers 392 Exported Function
FlsGetValue 389 Exported Function
FlsSetValue 390 Exported Function
FlushConsoleInputBuffer 391 Exported Function
FindNLSStringEx 375 Exported Function
FindFirstFreeAce 371 Exported Function
FindFirstStreamW 372 Exported Function
FindFirstVolumeW 373 Exported Function
FindFirstFileW 370 Exported Function
FindFirstFileExA 367 Exported Function
FindFirstFileExW 368 Exported Function
FindFirstFileNameW 369 Exported Function
FindNextStreamW 380 Exported Function
FindNextVolumeW 381 Exported Function
FindNLSString 374 Exported Function
FindNextFileW 379 Exported Function
FindNextChangeNotification 376 Exported Function
FindNextFileA 377 Exported Function
FindNextFileNameW 378 Exported Function
AppXGetOSMaxVersionTested 60 Exported Function
AppXGetOSMinVersion 61 Exported Function
AppXGetPackageCapabilities 62 Exported Function
AppXGetDevelopmentMode 59 Exported Function
AppPolicyGetWindowingModel 56 Exported Function
AppXFreeMemory 57 Exported Function
AppXGetApplicationData 58 Exported Function
AppXPreCreationExtension 67 Exported Function
AppXReleaseAppXContext 68 Exported Function
AppXUpdatePackageCapabilities 69 Exported Function
AppXPostSuccessExtension 66 Exported Function
AppXGetPackageSid 63 Exported Function
AppXLookupDisplayName 64 Exported Function
AppXLookupMoniker 65 Exported Function
AppPolicyGetThreadInitializationType 55 Exported Function
AppContainerLookupMoniker 46 Exported Function
AppContainerRegisterSid 47 Exported Function
AppContainerUnregisterSid 48 Exported Function
AppContainerLookupDisplayNameMrtReference 45 Exported Function
AllocConsole 38 Exported Function
AppContainerDeriveSidFromMoniker 43 Exported Function
AppContainerFreeMemory 44 Exported Function
AppPolicyGetMediaFoundationCodecLoading 52 Exported Function
AppPolicyGetProcessTerminationMethod 53 Exported Function
AppPolicyGetShowDeveloperDiagnostic 54 Exported Function
AppPolicyGetLifecycleManagement 51 Exported Function
ApplicationUserModelIdFromProductId 70 Exported Function
AppPolicyGetClrCompat 49 Exported Function
AppPolicyGetCreateFileAccess 50 Exported Function
AreAllAccessesGranted 71 Exported Function
BaseMarkFileForDelete 90 Exported Function
BasepAdjustObjectAttributesForPrivateNamespace 93 Exported Function
BasepCopyFileCallback 94 Exported Function
BaseIsAppcompatInfrastructureDisabled 89 Exported Function
BaseGetConsoleReference 86 Exported Function
BaseGetNamedObjectDirectory 87 Exported Function
BaseInitAppcompatCacheSupport 88 Exported Function
Beep 97 Exported Function
CallbackMayRunLong 101 Exported Function
CallEnclave 99 Exported Function
BaseUpdateAppcompatCache 92 Exported Function
BasepCopyFileExW 95 Exported Function
BasepNotifyTrackingService 96 Exported Function
BaseReadAppCompatDataForProcess 91 Exported Function
BaseFreeAppCompatDataForProcess 85 Exported Function
atexit 1880 Exported Function
AttachConsole 76 Exported Function
BaseCheckAppcompatCache 77 Exported Function
AreThereVisibleShutdownScriptsInternal 75 Exported Function
AreAnyAccessesGranted 72 Exported Function
AreFileApisANSI 73 Exported Function
AreThereVisibleLogoffScriptsInternal 74 Exported Function
BaseDumpAppcompatCache 82 Exported Function
BaseFlushAppcompatCache 83 Exported Function
BaseFormatObjectAttributes 84 Exported Function
BaseDllMapResourceIdW 81 Exported Function
BaseCheckAppcompatCacheEx 78 Exported Function
BaseCleanupAppcompatCacheSupport 79 Exported Function
BaseDllFreeResourceId 80 Exported Function
AccessCheck 2 Exported Function
AccessCheckAndAuditAlarmW 3 Exported Function
AccessCheckByType 4 Exported Function
_time64 1879 Exported Function
_onexit 1877 Exported Function
_OpenMuiStringCache 1863 Exported Function
_purecall 1878 Exported Function
AcquireSRWLockExclusive 9 Exported Function
AcquireSRWLockShared 10 Exported Function
AcquireStateLock 11 Exported Function
AccessCheckByTypeResultListAndAuditAlarmW 8 Exported Function
AccessCheckByTypeAndAuditAlarmW 5 Exported Function
AccessCheckByTypeResultList 6 Exported Function
AccessCheckByTypeResultListAndAuditAlarmByHandleW 7 Exported Function
_local_unwind 1876 Exported Function
__wgetmainargs 1868 Exported Function
_AddMUIStringToCache 1861 Exported Function
_amsg_exit 1869 Exported Function
__misaligned_access 1867 Exported Function
__C_specific_handler 1864 Exported Function
__chkstk 1865 Exported Function
__dllonexit3 1866 Exported Function
_initterm 1873 Exported Function
_initterm_e 1874 Exported Function
_invalid_parameter 1875 Exported Function
_GetMUIStringFromCache 1862 Exported Function
_c_exit 1870 Exported Function
_cexit 1871 Exported Function
_exit 1872 Exported Function
ActivateActCtx 12 Exported Function
AddScopedPolicyIDAce 33 Exported Function
AddSIDToBoundaryDescriptor 32 Exported Function
AddVectoredContinueHandler 34 Exported Function
AddResourceAttributeAce 31 Exported Function
AddMandatoryAce 28 Exported Function
AddPackageToFamilyXref 29 Exported Function
AddRefActCtx 30 Exported Function
AllocateLocallyUniqueId 40 Exported Function
AllocateUserPhysicalPages 41 Exported Function
AllocateUserPhysicalPagesNuma 42 Exported Function
AllocateAndInitializeSid 39 Exported Function
AddVectoredExceptionHandler 35 Exported Function
AdjustTokenGroups 36 Exported Function
AdjustTokenPrivileges 37 Exported Function
AddExtensionProgId 27 Exported Function
AddAccessDeniedAceEx 17 Exported Function
AddAccessDeniedObjectAce 18 Exported Function
AddAce 19 Exported Function
AddAccessDeniedAce 16 Exported Function
AddAccessAllowedAce 13 Exported Function
AddAccessAllowedAceEx 14 Exported Function
AddAccessAllowedObjectAce 15 Exported Function
AddConsoleAliasW 24 Exported Function
AddDependencyToProcessPackageGraph 25 Exported Function
AddDllDirectory 26 Exported Function
AddConsoleAliasA 23 Exported Function
AddAuditAccessAce 20 Exported Function
AddAuditAccessAceEx 21 Exported Function
AddAuditAccessObjectAce 22 Exported Function
CallNamedPipeW 100 Exported Function
CreateDirectoryW 179 Exported Function
CreateEnclave 180 Exported Function
CreateEventA 181 Exported Function
CreateDirectoryExW 178 Exported Function
CreateBoundaryDescriptorW 175 Exported Function
CreateConsoleScreenBuffer 176 Exported Function
CreateDirectoryA 177 Exported Function
CreateFiberEx 186 Exported Function
CreateFile2 187 Exported Function
CreateFileA 188 Exported Function
CreateFiber 185 Exported Function
CreateEventExA 182 Exported Function
CreateEventExW 183 Exported Function
CreateEventW 184 Exported Function
CreateAppContainerToken 174 Exported Function
ConvertThreadToFiberEx 164 Exported Function
ConvertToAutoInheritPrivateObjectSecurity 165 Exported Function
CopyContext 166 Exported Function
ConvertThreadToFiber 163 Exported Function
ConvertDefaultLocale 160 Exported Function
ConvertFiberToThread 161 Exported Function
ConvertPerformanceCounterToAuxiliaryCounter 162 Exported Function
CopySid 171 Exported Function
CouldMultiUserAppsBehaviorBePossibleForPackage 172 Exported Function
CreateActCtxW 173 Exported Function
CopyMemoryNonTemporal 170 Exported Function
CopyFile2 167 Exported Function
CopyFileExW 168 Exported Function
CopyFileW 169 Exported Function
CreateFileMapping2 189 Exported Function
CreateProcessAsUserA 209 Exported Function
CreateProcessAsUserW 210 Exported Function
CreateProcessInternalA 211 Exported Function
CreateProcessA 208 Exported Function
CreatePrivateObjectSecurity 205 Exported Function
CreatePrivateObjectSecurityEx 206 Exported Function
CreatePrivateObjectSecurityWithMultipleInheritance 207 Exported Function
CreateRemoteThread 216 Exported Function
CreateRemoteThreadEx 217 Exported Function
CreateRestrictedToken 218 Exported Function
CreatePseudoConsoleAsUser 215 Exported Function
CreateProcessInternalW 212 Exported Function
CreateProcessW 213 Exported Function
CreatePseudoConsole 214 Exported Function
CreatePrivateNamespaceW 204 Exported Function
CreateHardLinkA 194 Exported Function
CreateHardLinkW 195 Exported Function
CreateIoCompletionPort 196 Exported Function
CreateFileW 193 Exported Function
CreateFileMappingFromApp 190 Exported Function
CreateFileMappingNumaW 191 Exported Function
CreateFileMappingW 192 Exported Function
CreateMutexW 201 Exported Function
CreateNamedPipeW 202 Exported Function
CreatePipe 203 Exported Function
CreateMutexExW 200 Exported Function
CreateMemoryResourceNotification 197 Exported Function
CreateMutexA 198 Exported Function
CreateMutexExA 199 Exported Function
CharUpperBuffW 121 Exported Function
CharUpperW 122 Exported Function
CheckAllowDecryptedRemoteDestinationPolicy 123 Exported Function
CharUpperBuffA 120 Exported Function
CharPrevExA 117 Exported Function
CharPrevW 118 Exported Function
CharUpperA 119 Exported Function
CheckTokenMembership 128 Exported Function
CheckTokenMembershipEx 129 Exported Function
ChrCmpIA 130 Exported Function
CheckTokenCapability 127 Exported Function
CheckGroupPolicyEnabled 124 Exported Function
CheckIfStateChangeNotificationExists 125 Exported Function
CheckRemoteDebuggerPresent 126 Exported Function
CharPrevA 116 Exported Function
CancelWaitableTimer 106 Exported Function
CeipIsOptedIn 107 Exported Function
ChangeTimerQueueTimer 108 Exported Function
CancelThreadpoolIo 105 Exported Function
CancelIo 102 Exported Function
CancelIoEx 103 Exported Function
CancelSynchronousIo 104 Exported Function
CharNextA 113 Exported Function
CharNextExA 114 Exported Function
CharNextW 115 Exported Function
CharLowerW 112 Exported Function
CharLowerA 109 Exported Function
CharLowerBuffA 110 Exported Function
CharLowerBuffW 111 Exported Function
ChrCmpIW 131 Exported Function
CommitStateAtom 150 Exported Function
CompareFileTime 151 Exported Function
CompareObjectHandles 152 Exported Function
CloseThreadpoolWork 149 Exported Function
CloseThreadpoolIo 146 Exported Function
CloseThreadpoolTimer 147 Exported Function
CloseThreadpoolWait 148 Exported Function
ConnectNamedPipe 157 Exported Function
ContinueDebugEvent 158 Exported Function
ConvertAuxiliaryCounterToPerformanceCounter 159 Exported Function
CompareStringW 156 Exported Function
CompareStringA 153 Exported Function
CompareStringEx 154 Exported Function
CompareStringOrdinal 155 Exported Function
CloseThreadpoolCleanupGroupMembers 145 Exported Function
ClosePackageInfo 135 Exported Function
ClosePrivateNamespace 136 Exported Function
ClosePseudoConsole 137 Exported Function
CloseHandle 134 Exported Function
ClearCommBreak 132 Exported Function
ClearCommError 133 Exported Function
CLOSE_LOCAL_HANDLE_INTERNAL 98 Exported Function
CloseStateLock 142 Exported Function
CloseThreadpool 143 Exported Function
CloseThreadpoolCleanupGroup 144 Exported Function
CloseStateContainer 141 Exported Function
CloseState 138 Exported Function
CloseStateAtom 139 Exported Function
CloseStateChangeNotification 140 Exported Function
GetSystemWindowsDirectoryA 770 Exported Function
GetSystemWindowsDirectoryW 771 Exported Function
GetSystemWow64Directory2A 772 Exported Function
GetSystemTimes 769 Exported Function
GetSystemTimeAdjustmentPrecise 766 Exported Function
GetSystemTimeAsFileTime 767 Exported Function
GetSystemTimePreciseAsFileTime 768 Exported Function
GetTempFileNameA 777 Exported Function
GetTempFileNameW 778 Exported Function
GetTempPathA 779 Exported Function
GetTargetPlatformContext 776 Exported Function
GetSystemWow64Directory2W 773 Exported Function
GetSystemWow64DirectoryA 774 Exported Function
GetSystemWow64DirectoryW 775 Exported Function
GetSystemTimeAdjustment 765 Exported Function
GetSystemFileCacheSize 755 Exported Function
GetSystemFirmwareTable 756 Exported Function
GetSystemInfo 757 Exported Function
GetSystemDirectoryW 754 Exported Function
GetSystemDefaultLocaleName 751 Exported Function
GetSystemDefaultUILanguage 752 Exported Function
GetSystemDirectoryA 753 Exported Function
GetSystemPreferredUILanguages 762 Exported Function
GetSystemStateRootFolder 763 Exported Function
GetSystemTime 764 Exported Function
GetSystemMetadataPathForPackageFamily 761 Exported Function
GetSystemLeapSecondInformation 758 Exported Function
GetSystemMetadataPath 759 Exported Function
GetSystemMetadataPathForPackage 760 Exported Function
GetTempPathW 780 Exported Function
GetTimeFormatW 800 Exported Function
GetTimeZoneInformation 801 Exported Function
GetTimeZoneInformationForYear 802 Exported Function
GetTimeFormatEx 799 Exported Function
GetTickCount 796 Exported Function
GetTickCount64 797 Exported Function
GetTimeFormatA 798 Exported Function
GetUILanguageInfo 807 Exported Function
GetUnicodeStringToEightBitSizeRoutine 808 Exported Function
GetUnicodeStringToEightBitStringRoutine 809 Exported Function
GetTraceLoggerHandle 806 Exported Function
GetTokenInformation 803 Exported Function
GetTraceEnableFlags 804 Exported Function
GetTraceEnableLevel 805 Exported Function
GetThreadUILanguage 795 Exported Function
GetThreadId 786 Exported Function
GetThreadIdealProcessorEx 787 Exported Function
GetThreadInformation 788 Exported Function
GetThreadGroupAffinity 784 Exported Function
GetThreadContext 781 Exported Function
GetThreadDescription 782 Exported Function
GetThreadErrorMode 783 Exported Function
GetThreadPriorityBoost 792 Exported Function
GetThreadSelectedCpuSets 793 Exported Function
GetThreadTimes 794 Exported Function
GetThreadPriority 791 Exported Function
GetThreadIOPendingFlag 785 Exported Function
GetThreadLocale 789 Exported Function
GetThreadPreferredUILanguages 790 Exported Function
GetQueuedCompletionStatusEx 711 Exported Function
GetRegistryExtensionFlags 712 Exported Function
GetRegistryValueWithFallbackW 713 Exported Function
GetQueuedCompletionStatus 710 Exported Function
GetPtrCalDataArray 707 Exported Function
GetPublisherCacheFolder 708 Exported Function
GetPublisherRootFolder 709 Exported Function
GetSecurityDescriptorGroup 718 Exported Function
GetSecurityDescriptorLength 719 Exported Function
GetSecurityDescriptorOwner 720 Exported Function
GetSecurityDescriptorDacl 717 Exported Function
GetRoamingLastObservedChangeTime 714 Exported Function
GetSecureSystemAppDataFolder 715 Exported Function
GetSecurityDescriptorControl 716 Exported Function
GetPtrCalData 706 Exported Function
GetProcessorSystemCycleTime 702 Exported Function
GetProcessPreferredUILanguages 696 Exported Function
GetProcessPriorityBoost 697 Exported Function
GetProcessMitigationPolicy 695 Exported Function
GetProcessImageFileNameW 692 Exported Function
GetProcessInformation 693 Exported Function
GetProcessMemoryInfo 694 Exported Function
GetProductInfo 703 Exported Function
GetProtocolAumid 704 Exported Function
GetProtocolProperty 705 Exported Function
GetProcessWorkingSetSizeEx 701 Exported Function
GetProcessShutdownParameters 698 Exported Function
GetProcessTimes 699 Exported Function
GetProcessVersion 700 Exported Function
GetSecurityDescriptorRMControl 721 Exported Function
GetStringScripts 741 Exported Function
GetStringTableEntry 742 Exported Function
GetStringTypeA 743 Exported Function
GetStdHandle 740 Exported Function
GetStateRootFolderBase 737 Exported Function
GetStateSettingsFolder 738 Exported Function
GetStateVersion 739 Exported Function
GetSystemCpuSetInformation 748 Exported Function
GetSystemDefaultLangID 750 Exported Function
GetSystemDefaultLCID 749 Exported Function
GetSystemAppDataKey 747 Exported Function
GetStringTypeExW 744 Exported Function
GetStringTypeW 745 Exported Function
GetSystemAppDataFolder 746 Exported Function
GetStateRootFolder 736 Exported Function
GetSidIdentifierAuthority 726 Exported Function
GetSidLengthRequired 727 Exported Function
GetSidSubAuthority 728 Exported Function
GetShortPathNameW 725 Exported Function
GetSecurityDescriptorSacl 722 Exported Function
GetSerializedAtomBytes 723 Exported Function
GetSharedLocalFolder 724 Exported Function
GetStartupInfoW 733 Exported Function
GetStateContainerDepth 734 Exported Function
GetStateFolder 735 Exported Function
GetStagedPackagePathByFullName2 732 Exported Function
GetSidSubAuthorityCount 729 Exported Function
GetStagedPackageOrigin 730 Exported Function
GetStagedPackagePathByFullName 731 Exported Function
GetUserDefaultGeoName 810 Exported Function
InterlockedPushEntrySList 887 Exported Function
InterlockedPushListSList 888 Exported Function
InterlockedPushListSListEx 889 Exported Function
InterlockedPopEntrySList 886 Exported Function
InitOnceInitialize 868 Exported Function
InstallELAMCertificateInfo 884 Exported Function
InterlockedFlushSList 885 Exported Function
Internal_EnumSystemLanguageGroups 895 Exported Function
Internal_EnumSystemLocales 896 Exported Function
Internal_EnumTimeFormats 897 Exported Function
Internal_EnumSystemCodePages 894 Exported Function
Internal_EnumCalendarInfo 891 Exported Function
Internal_EnumDateFormats 892 Exported Function
Internal_EnumLanguageGroupLocales 893 Exported Function
InitOnceExecuteOnce 867 Exported Function
InitializeEnclave 876 Exported Function
InitializeProcessForWsWatch 878 Exported Function
InitializeProcThreadAttributeList 877 Exported Function
InitializeCriticalSectionEx 875 Exported Function
InitializeContext2 872 Exported Function
InitializeCriticalSection 873 Exported Function
InitializeCriticalSectionAndSpinCount 874 Exported Function
InitializeSynchronizationBarrier 883 Exported Function
InitOnceBeginInitialize 865 Exported Function
InitOnceComplete 866 Exported Function
InitializeSRWLock 880 Exported Function
InitializeSecurityDescriptor 881 Exported Function
InitializeSid 882 Exported Function
InitializeSListHead 879 Exported Function
Internal_EnumUILanguages 898 Exported Function
IsCharUpperA 917 Exported Function
IsCharUpperW 918 Exported Function
IsCharXDigitW 919 Exported Function
IsCharSpaceW 916 Exported Function
IsCharLowerW 913 Exported Function
IsCharPunctW 914 Exported Function
IsCharSpaceA 915 Exported Function
IsDeveloperModePolicyApplied 924 Exported Function
IsEnclaveTypeSupported 925 Exported Function
IsInternetESCEnabled 926 Exported Function
IsDeveloperModeEnabled 923 Exported Function
IsDBCSLeadByte 920 Exported Function
IsDBCSLeadByteEx 921 Exported Function
IsDebuggerPresent 922 Exported Function
IsCharLowerA 912 Exported Function
InternetTimeToSystemTimeW 902 Exported Function
InvalidateAppModelVersionCache 903 Exported Function
IsApiSetImplemented 904 Exported Function
InternetTimeToSystemTimeA 901 Exported Function
InternalLcidToName 890 Exported Function
InternetTimeFromSystemTimeA 899 Exported Function
InternetTimeFromSystemTimeW 900 Exported Function
IsCharBlankW 909 Exported Function
IsCharCntrlW 910 Exported Function
IsCharDigitW 911 Exported Function
IsCharAlphaW 908 Exported Function
IsCharAlphaA 905 Exported Function
IsCharAlphaNumericA 906 Exported Function
IsCharAlphaNumericW 907 Exported Function
GetWindowsAccountDomainSid 830 Exported Function
GetWindowsDirectoryA 831 Exported Function
GetWindowsDirectoryW 832 Exported Function
GetVolumePathNameW 828 Exported Function
GetVolumeInformationW 826 Exported Function
GetVolumeNameForVolumeMountPointW 827 Exported Function
GetVolumePathNamesForVolumeNameW 829 Exported Function
GlobalAlloc 837 Exported Function
GlobalFree 838 Exported Function
GlobalMemoryStatusEx 839 Exported Function
GetXStateFeaturesMask 836 Exported Function
GetWriteWatch 833 Exported Function
GetWsChanges 834 Exported Function
GetWsChangesEx 835 Exported Function
GetVolumeInformationByHandleW 825 Exported Function
GetUserGeoID 815 Exported Function
GetUserInfo 816 Exported Function
GetUserInfoWord 817 Exported Function
GetUserDefaultUILanguage 814 Exported Function
GetUserDefaultLangID 812 Exported Function
GetUserDefaultLCID 811 Exported Function
GetUserDefaultLocaleName 813 Exported Function
GetVersionExA 822 Exported Function
GetVersionExW 823 Exported Function
GetVolumeInformationA 824 Exported Function
GetVersion 821 Exported Function
GetUserOverrideString 818 Exported Function
GetUserOverrideWord 819 Exported Function
GetUserPreferredUILanguages 820 Exported Function
GuardCheckLongJumpTarget 840 Exported Function
IdnToNameprepUnicode 858 Exported Function
IdnToUnicode 859 Exported Function
ImpersonateAnonymousToken 860 Exported Function
IdnToAscii 857 Exported Function
HeapWalk 856 Exported Function
hgets 1882 Exported Function
hwprintf 1883 Exported Function
InitializeAcl 869 Exported Function
InitializeConditionVariable 870 Exported Function
InitializeContext 871 Exported Function
IncrementPackageStatusVersion 864 Exported Function
ImpersonateLoggedOnUser 861 Exported Function
ImpersonateNamedPipeClient 862 Exported Function
ImpersonateSelf 863 Exported Function
HeapValidate 855 Exported Function
HeapCreate 845 Exported Function
HeapDestroy 846 Exported Function
HeapFree 847 Exported Function
HeapCompact 844 Exported Function
HashData 842 Exported Function
HasPolicyForegroundProcessingCompletedInternal 841 Exported Function
HeapAlloc 843 Exported Function
HeapSize 852 Exported Function
HeapSummary 853 Exported Function
HeapUnlock 854 Exported Function
HeapSetInformation 851 Exported Function
HeapLock 848 Exported Function
HeapQueryInformation 849 Exported Function
HeapReAlloc 850 Exported Function
GetEffectivePackageStatusForUser 533 Exported Function
GetEffectivePackageStatusForUserSid 534 Exported Function
GetEightBitStringToUnicodeSizeRoutine 535 Exported Function
GetDynamicTimeZoneInformationEffectiveYears 532 Exported Function
GetDriveTypeW 529 Exported Function
GetDurationFormatEx 530 Exported Function
GetDynamicTimeZoneInformation 531 Exported Function
GetEnvironmentStringsW 540 Exported Function
GetEnvironmentVariableA 541 Exported Function
GetEnvironmentVariableW 542 Exported Function
GetEnvironmentStringsA 539 Exported Function
GetEightBitStringToUnicodeStringRoutine 536 Exported Function
GetEnabledXStateFeatures 537 Exported Function
GetEnvironmentStrings 538 Exported Function
GetDriveTypeA 528 Exported Function
GetDeviceDriverBaseNameA 518 Exported Function
GetDeviceDriverBaseNameW 519 Exported Function
GetDeviceDriverFileNameA 520 Exported Function
GetDateFormatW 517 Exported Function
GetCurrentThreadStackLimits 514 Exported Function
GetDateFormatA 515 Exported Function
GetDateFormatEx 516 Exported Function
GetDiskFreeSpaceW 525 Exported Function
GetDiskSpaceInformationA 526 Exported Function
GetDiskSpaceInformationW 527 Exported Function
GetDiskFreeSpaceExW 524 Exported Function
GetDeviceDriverFileNameW 521 Exported Function
GetDiskFreeSpaceA 522 Exported Function
GetDiskFreeSpaceExA 523 Exported Function
GetEraNameCountedString 543 Exported Function
GetFileTime 563 Exported Function
GetFileType 564 Exported Function
GetFileVersionInfoA 565 Exported Function
GetFileSizeEx 562 Exported Function
GetFileMUIPath 559 Exported Function
GetFileSecurityW 560 Exported Function
GetFileSize 561 Exported Function
GetFileVersionInfoSizeExA 570 Exported Function
GetFileVersionInfoSizeExW 571 Exported Function
GetFileVersionInfoSizeW 572 Exported Function
GetFileVersionInfoSizeA 569 Exported Function
GetFileVersionInfoByHandle 566 Exported Function
GetFileVersionInfoExA 567 Exported Function
GetFileVersionInfoExW 568 Exported Function
GetFileMUIInfo 558 Exported Function
GetExtensionProgIds 548 Exported Function
GetExtensionProperty 549 Exported Function
GetExtensionProperty2 550 Exported Function
GetExtensionApplicationUserModelId 547 Exported Function
GetErrorMode 544 Exported Function
GetExitCodeProcess 545 Exported Function
GetExitCodeThread 546 Exported Function
GetFileAttributesW 555 Exported Function
GetFileInformationByHandle 556 Exported Function
GetFileInformationByHandleEx 557 Exported Function
GetFileAttributesExW 554 Exported Function
GetFallbackDisplayName 551 Exported Function
GetFileAttributesA 552 Exported Function
GetFileAttributesExA 553 Exported Function
GetConsoleProcessList 478 Exported Function
GetConsoleScreenBufferInfo 479 Exported Function
GetConsoleScreenBufferInfoEx 480 Exported Function
GetConsoleOutputCP 477 Exported Function
GetConsoleMode 474 Exported Function
GetConsoleOriginalTitleA 475 Exported Function
GetConsoleOriginalTitleW 476 Exported Function
GetCPFileNameFromRegistry 432 Exported Function
GetCPHashNode 433 Exported Function
GetCPInfo 434 Exported Function
GetConsoleWindow 484 Exported Function
GetConsoleSelectionInfo 481 Exported Function
GetConsoleTitleA 482 Exported Function
GetConsoleTitleW 483 Exported Function
GetConsoleInputExeNameW 473 Exported Function
GetConsoleCommandHistoryA 464 Exported Function
GetConsoleCommandHistoryLengthA 465 Exported Function
GetConsoleCommandHistoryLengthW 466 Exported Function
GetConsoleAliasW 458 Exported Function
GetConsoleAliasExesLengthA 455 Exported Function
GetConsoleAliasExesLengthW 456 Exported Function
GetConsoleAliasExesW 457 Exported Function
GetConsoleFontSize 470 Exported Function
GetConsoleHistoryInfo 471 Exported Function
GetConsoleInputExeNameA 472 Exported Function
GetConsoleDisplayMode 469 Exported Function
GetConsoleCommandHistoryW 467 Exported Function
GetConsoleCP 463 Exported Function
GetConsoleCursorInfo 468 Exported Function
GetCPInfoExW 435 Exported Function
GetCurrentPackagePath2 504 Exported Function
GetCurrentPackageResourcesContext 505 Exported Function
GetCurrentPackageSecurityContext 506 Exported Function
GetCurrentPackagePath 503 Exported Function
GetCurrentPackageInfo 500 Exported Function
GetCurrentPackageInfo2 501 Exported Function
GetCurrentPackageInfo3 502 Exported Function
GetCurrentTargetPlatformContext 511 Exported Function
GetCurrentThread 512 Exported Function
GetCurrentThreadId 513 Exported Function
GetCurrentProcessorNumberEx 510 Exported Function
GetCurrentProcess 507 Exported Function
GetCurrentProcessId 508 Exported Function
GetCurrentProcessorNumber 509 Exported Function
GetCurrentPackageId 499 Exported Function
GetCurrentConsoleFont 489 Exported Function
GetCurrentConsoleFontEx 490 Exported Function
GetCurrentDirectoryA 491 Exported Function
GetCurrentApplicationUserModelId 488 Exported Function
GetCurrencyFormatEx 485 Exported Function
GetCurrencyFormatW 486 Exported Function
GetCurrentActCtx 487 Exported Function
GetCurrentPackageFamilyName 496 Exported Function
GetCurrentPackageFullName 497 Exported Function
GetCurrentPackageGlobalizationContext 498 Exported Function
GetCurrentPackageContext 495 Exported Function
GetCurrentDirectoryW 492 Exported Function
GetCurrentPackageApplicationContext 493 Exported Function
GetCurrentPackageApplicationResourcesContext 494 Exported Function
GetFileVersionInfoW 573 Exported Function
GetPackageId 652 Exported Function
GetPackageInfo 653 Exported Function
GetPackageInfo2 654 Exported Function
GetPackageGlobalizationProperty 651 Exported Function
GetPackageFullName 648 Exported Function
GetPackageFullNameFromToken 649 Exported Function
GetPackageGlobalizationContext 650 Exported Function
GetPackagePathByFullName 659 Exported Function
GetPackagePathByFullName2 660 Exported Function
GetPackagePathOnVolume 661 Exported Function
GetPackagePath 658 Exported Function
GetPackageInfo3 655 Exported Function
GetPackageInstallTime 656 Exported Function
GetPackageOSMaxVersionTested 657 Exported Function
GetPackageFamilyNameFromToken 647 Exported Function
GetOverlappedResult 637 Exported Function
GetOverlappedResultEx 638 Exported Function
GetPackageApplicationContext 639 Exported Function
GetOsSafeBootMode 636 Exported Function
GetNumberOfConsoleMouseButtons 633 Exported Function
GetOEMCP 634 Exported Function
GetOsManufacturingMode 635 Exported Function
GetPackageContext 644 Exported Function
GetPackageFamilyName 645 Exported Function
GetPackageFamilyNameFromProgId 646 Exported Function
GetPackageApplicationResourcesContext 643 Exported Function
GetPackageApplicationIds 640 Exported Function
GetPackageApplicationProperty 641 Exported Function
GetPackageApplicationPropertyString 642 Exported Function
GetPackageProperty 662 Exported Function
GetProcAddress 682 Exported Function
GetProcAddressForCaller 683 Exported Function
GetProcessDefaultCpuSets 684 Exported Function
GetPrivateObjectSecurity 681 Exported Function
GetPhysicallyInstalledSystemMemory 678 Exported Function
GetPreviousFgPolicyRefreshInfoInternal 679 Exported Function
GetPriorityClass 680 Exported Function
GetProcessId 689 Exported Function
GetProcessIdOfThread 690 Exported Function
GetProcessImageFileNameA 691 Exported Function
GetProcessHeaps 688 Exported Function
GetProcessGroupAffinity 685 Exported Function
GetProcessHandleCount 686 Exported Function
GetProcessHeap 687 Exported Function
GetPersistedRegistryValueW 677 Exported Function
GetPackageSecurityContext 666 Exported Function
GetPackageSecurityProperty 667 Exported Function
GetPackageStatus 668 Exported Function
GetPackagesByPackageFamily 673 Exported Function
GetPackagePropertyString 663 Exported Function
GetPackageResourcesContext 664 Exported Function
GetPackageResourcesProperty 665 Exported Function
GetPerformanceInfo 674 Exported Function
GetPersistedFileLocationW 675 Exported Function
GetPersistedRegistryLocationW 676 Exported Function
GetPackageVolumeSisPath 672 Exported Function
GetPackageStatusForUser 669 Exported Function
GetPackageStatusForUserSid 670 Exported Function
GetPackageTargetPlatformProperty 671 Exported Function
GetLocaleInfoA 594 Exported Function
GetLocaleInfoEx 595 Exported Function
GetLocaleInfoHelper 596 Exported Function
GetLengthSid 592 Exported Function
GetLargePageMinimum 589 Exported Function
GetLargestConsoleWindowSize 590 Exported Function
GetLastError 591 Exported Function
GetLogicalProcessorInformation 600 Exported Function
GetLogicalProcessorInformationEx 601 Exported Function
GetLongPathNameA 602 Exported Function
GetLogicalDriveStringsW 598 Exported Function
GetLocaleInfoW 597 Exported Function
GetLocalTime 593 Exported Function
GetLogicalDrives 599 Exported Function
GetKernelObjectSecurity 588 Exported Function
GetGamingDeviceModelInformation 580 Exported Function
GetGeoInfoEx 581 Exported Function
GetGeoInfoW 582 Exported Function
GetFullPathNameW 577 Exported Function
GetFinalPathNameByHandleA 574 Exported Function
GetFinalPathNameByHandleW 575 Exported Function
GetFullPathNameA 576 Exported Function
GetIntegratedDisplaySize 585 Exported Function
GetIsEdpEnabled 586 Exported Function
GetIsWdagEnabled 587 Exported Function
GetHivePath 584 Exported Function
GetGPOListInternalA 578 Exported Function
GetGPOListInternalW 579 Exported Function
GetHandleInformation 583 Exported Function
GetLongPathNameW 603 Exported Function
GetNativeSystemInfo 625 Exported Function
GetNextFgPolicyRefreshInfoInternal 626 Exported Function
GetNLSVersion 618 Exported Function
GetNamedPipeInfo 624 Exported Function
GetNamedPipeAttribute 621 Exported Function
GetNamedPipeClientComputerNameW 622 Exported Function
GetNamedPipeHandleStateW 623 Exported Function
GetNumberFormatEx 630 Exported Function
GetNumberFormatW 631 Exported Function
GetNumberOfConsoleInputEvents 632 Exported Function
GetNumaProximityNodeEx 629 Exported Function
GetNLSVersionEx 619 Exported Function
GetNumaHighestNodeNumber 627 Exported Function
GetNumaNodeProcessorMaskEx 628 Exported Function
GetNamedLocaleHashNode 620 Exported Function
GetModuleBaseNameW 608 Exported Function
GetModuleFileNameA 609 Exported Function
GetModuleFileNameExA 610 Exported Function
GetModuleBaseNameA 607 Exported Function
GetMappedFileNameA 604 Exported Function
GetMappedFileNameW 605 Exported Function
GetMemoryErrorHandlingCapabilities 606 Exported Function
GetModuleHandleExW 615 Exported Function
GetModuleHandleW 616 Exported Function
GetModuleInformation 617 Exported Function
GetModuleHandleExA 614 Exported Function
GetModuleFileNameExW 611 Exported Function
GetModuleFileNameW 612 Exported Function
GetModuleHandleA 613 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Kernelbase.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.388 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.388
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/65
  • VirusTotal Link: https://www.virustotal.com/gui/file/d42c04dd7f8c78f7fd6e3508cada50c077b5485871adb76fcda98be46e0fc9ac/detection/

Possible Misuse

The following table contains possible examples of KernelBase.dll being misused. While KernelBase.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma sysmon_in_memory_assembly_execution.yml few calls in the stack (ntdll.dll --> kernelbase.dll --> unknown) which essentially means that most of the functions required by the process to execute certain DRL 1.0
sigma sysmon_in_memory_assembly_execution.yml - "C:\\Windows\\SYSTEM32\\ntdll.dll+*\|C:\\Windows\\System32\\KERNELBASE.dll+*\|UNKNOWN(*)" DRL 1.0
sigma sysmon_lazagne_cred_dump_lsass_access.yml CallTrace: "C:\\Windows\\SYSTEM32\\ntdll.dll+*\|C:\\Windows\\System32\\KERNELBASE.dll+*_ctypes.pyd+*python27.dll+*" DRL 1.0

MIT License. Copyright (c) 2020 Strontic.