KernelBase.dll

• File Path: C:\Windows\system32\KernelBase.dll
• Description: Windows NT BASE API Client DLL

Hashes

Type	Hash
MD5	4E41D052469D883175B39DF2A8133329
SHA1	EA999D050E8DBF98D58E66BB95C1CF8B7B779531
SHA256	D42C04DD7F8C78F7FD6E3508CADA50C077B5485871ADB76FCDA98BE46E0FC9AC
SHA384	0C95BC44BCF4C862AE5BE522F04F17CB51CD00870EF119101E80D67EE5ABDD9EA908130613BE5297788AB4E8481F8968
SHA512	049845197C62CFB83CA76DAE05B7D93C0224505A8C00AB52BDD81CBE30F66B006FB041A8D981B87BC230D877A1A12F9A9629C07377381E323066C007CFAA24FE
SSDEEP	49152:eG1WMmpXcVqAIjJkSkaamk6PZl/cbcSWQHn:Ipaq5/M
IMP	A28B494D0C0C82F1EEF0999B1549C6A6
PESHA1	E1C7E3BD8ED610AA647484EC51C3F8F6C64FCA44
PE256	803D37157BF025D22BD4D885CF0EC99C30CB22D378D088AAC2AF1326E2DF7F1C

DLL Exports:

Function Name	Ordinal	Type
PerfDeleteInstance	1230	Exported Function
PerfIncrementULongCounterValue	1231	Exported Function
PerfIncrementULongLongCounterValue	1232	Exported Function
PerfDecrementULongLongCounterValue	1229	Exported Function
PeekNamedPipe	1226	Exported Function
PerfCreateInstance	1227	Exported Function
PerfDecrementULongCounterValue	1228	Exported Function
PerfSetULongLongCounterValue	1237	Exported Function
PerfStartProvider	1238	Exported Function
PerfStartProviderEx	1239	Exported Function
PerfSetULongCounterValue	1236	Exported Function
PerfQueryInstance	1233	Exported Function
PerfSetCounterRefValue	1234	Exported Function
PerfSetCounterSetInfo	1235	Exported Function
PeekConsoleInputW	1225	Exported Function
PcwIsNotifierAlive	1215	Exported Function
PcwQueryCounterSetSecurity	1216	Exported Function
PcwReadNotificationData	1217	Exported Function
PcwEnumerateInstances	1214	Exported Function
PcwCreateNotifier	1211	Exported Function
PcwCreateQuery	1212	Exported Function
PcwDisconnectCounterSet	1213	Exported Function
PcwSetCounterSetSecurity	1222	Exported Function
PcwSetQueryItemUserData	1223	Exported Function
PeekConsoleInputA	1224	Exported Function
PcwSendStatelessNotification	1221	Exported Function
PcwRegisterCounterSet	1218	Exported Function
PcwRemoveQueryItem	1219	Exported Function
PcwSendNotification	1220	Exported Function
PerfStopProvider	1240	Exported Function
PsmIsValidKey	1260	Exported Function
PssCaptureSnapshot	1261	Exported Function
PssDuplicateSnapshot	1262	Exported Function
PsmIsDynamicKey	1259	Exported Function
PsmGetKeyFromToken	1256	Exported Function
PsmGetPackageFullNameFromKey	1257	Exported Function
PsmIsChildKey	1258	Exported Function
PssWalkMarkerGetPosition	1267	Exported Function
PssWalkMarkerSeekToBeginning	1268	Exported Function
PssWalkMarkerSetPosition	1269	Exported Function
PssWalkMarkerFree	1266	Exported Function
PssFreeSnapshot	1263	Exported Function
PssQuerySnapshot	1264	Exported Function
PssWalkMarkerCreate	1265	Exported Function
PsmGetKeyFromProcess	1255	Exported Function
PrivilegeCheck	1245	Exported Function
PrivilegedServiceAuditAlarmW	1246	Exported Function
ProcessIdToSessionId	1247	Exported Function
PrivCopyFileExW	1244	Exported Function
PoolPerAppKeyStateInternal	1241	Exported Function
PostQueuedCompletionStatus	1242	Exported Function
PrefetchVirtualMemory	1243	Exported Function
PsmEqualPackage	1252	Exported Function
PsmGetApplicationNameFromKey	1253	Exported Function
PsmGetDynamicIdFromKey	1254	Exported Function
PsmEqualApplication	1251	Exported Function
ProductIdFromPackageFamilyName	1248	Exported Function
PsmCreateKey	1249	Exported Function
PsmCreateKeyWithDynamicId	1250	Exported Function
PathIsURLA	1171	Exported Function
PathIsURLW	1172	Exported Function
PathIsValidCharA	1173	Exported Function
PathIsUNCW	1170	Exported Function
PathIsUNCServerShareA	1167	Exported Function
PathIsUNCServerShareW	1168	Exported Function
PathIsUNCServerW	1169	Exported Function
PathMatchSpecW	1178	Exported Function
PathParseIconLocationA	1179	Exported Function
PathParseIconLocationW	1180	Exported Function
PathMatchSpecExW	1177	Exported Function
PathIsValidCharW	1174	Exported Function
PathMatchSpecA	1175	Exported Function
PathMatchSpecExA	1176	Exported Function
PathIsUNCServerA	1166	Exported Function
PathIsPrefixA	1156	Exported Function
PathIsPrefixW	1157	Exported Function
PathIsRelativeA	1158	Exported Function
PathIsLFNFileSpecW	1155	Exported Function
PathIsFileSpecA	1152	Exported Function
PathIsFileSpecW	1153	Exported Function
PathIsLFNFileSpecA	1154	Exported Function
PathIsSameRootW	1163	Exported Function
PathIsUNCA	1164	Exported Function
PathIsUNCEx	1165	Exported Function
PathIsSameRootA	1162	Exported Function
PathIsRelativeW	1159	Exported Function
PathIsRootA	1160	Exported Function
PathIsRootW	1161	Exported Function
PathQuoteSpacesA	1181	Exported Function
PathStripToRootA	1201	Exported Function
PathStripToRootW	1202	Exported Function
PathUnExpandEnvStringsA	1203	Exported Function
PathStripPathW	1200	Exported Function
PathSkipRootA	1197	Exported Function
PathSkipRootW	1198	Exported Function
PathStripPathA	1199	Exported Function
PcwClearCounterSetSecurity	1208	Exported Function
PcwCollectData	1209	Exported Function
PcwCompleteNotification	1210	Exported Function
PcwAddQueryItem	1207	Exported Function
PathUnExpandEnvStringsW	1204	Exported Function
PathUnquoteSpacesA	1205	Exported Function
PathUnquoteSpacesW	1206	Exported Function
PathSearchAndQualifyW	1196	Exported Function
PathRemoveBackslashW	1186	Exported Function
PathRemoveBlanksA	1187	Exported Function
PathRemoveBlanksW	1188	Exported Function
PathRemoveBackslashA	1185	Exported Function
PathQuoteSpacesW	1182	Exported Function
PathRelativePathToA	1183	Exported Function
PathRelativePathToW	1184	Exported Function
PathRenameExtensionA	1193	Exported Function
PathRenameExtensionW	1194	Exported Function
PathSearchAndQualifyA	1195	Exported Function
PathRemoveFileSpecW	1192	Exported Function
PathRemoveExtensionA	1189	Exported Function
PathRemoveExtensionW	1190	Exported Function
PathRemoveFileSpecA	1191	Exported Function
PssWalkSnapshot	1270	Exported Function
RegCreateKeyExW	1350	Exported Function
RegDeleteKeyExA	1351	Exported Function
RegDeleteKeyExInternalA	1352	Exported Function
RegCreateKeyExInternalW	1349	Exported Function
RegCopyTreeW	1346	Exported Function
RegCreateKeyExA	1347	Exported Function
RegCreateKeyExInternalA	1348	Exported Function
RegDeleteTreeA	1357	Exported Function
RegDeleteTreeW	1358	Exported Function
RegDeleteValueA	1359	Exported Function
RegDeleteKeyValueW	1356	Exported Function
RegDeleteKeyExInternalW	1353	Exported Function
RegDeleteKeyExW	1354	Exported Function
RegDeleteKeyValueA	1355	Exported Function
RegCloseKey	1345	Exported Function
ReadFile	1335	Exported Function
ReadFileEx	1336	Exported Function
ReadFileScatter	1337	Exported Function
ReadDirectoryChangesW	1334	Exported Function
ReadConsoleOutputW	1331	Exported Function
ReadConsoleW	1332	Exported Function
ReadDirectoryChangesExW	1333	Exported Function
RefreshPackageInfo	1342	Exported Function
RefreshPolicyExInternal	1343	Exported Function
RefreshPolicyInternal	1344	Exported Function
ReclaimVirtualMemory	1341	Exported Function
ReadProcessMemory	1338	Exported Function
ReadStateAtomValue	1339	Exported Function
ReadStateContainerValue	1340	Exported Function
RegDeleteValueW	1360	Exported Function
RegKrnGetHKEY_ClassesRootAddress	1373	Exported Function
RegKrnGetTermsrvRegistryExtensionFlags	1374	Exported Function
RegKrnResetAppKeyLoaded	1375	Exported Function
RegKrnGetClassesEnumTableAddressInternal	1372	Exported Function
RegisterWaitForSingleObjectEx	1414	Exported Function
RegKrnGetAppKeyEventAddressInternal	1370	Exported Function
RegKrnGetAppKeyLoaded	1371	Exported Function
RegLoadKeyA	1380	Exported Function
RegLoadKeyW	1381	Exported Function
RegLoadMUIStringA	1382	Exported Function
RegLoadAppKeyW	1379	Exported Function
RegKrnSetDllHasThreadStateGlobal	1376	Exported Function
RegKrnSetTermsrvRegistryExtensionFlags	1377	Exported Function
RegLoadAppKeyA	1378	Exported Function
RegisterTraceGuidsW	1413	Exported Function
RegEnumValueW	1365	Exported Function
RegFlushKey	1366	Exported Function
RegGetKeySecurity	1367	Exported Function
RegEnumValueA	1364	Exported Function
RegDisablePredefinedCacheEx	1361	Exported Function
RegEnumKeyExA	1362	Exported Function
RegEnumKeyExW	1363	Exported Function
RegisterGPNotificationInternal	1410	Exported Function
RegisterStateChangeNotification	1411	Exported Function
RegisterStateLock	1412	Exported Function
RegisterBadMemoryNotification	1409	Exported Function
RegGetValueA	1368	Exported Function
RegGetValueW	1369	Exported Function
RegisterApplicationRestart	1408	Exported Function
QueryPerformanceCounter	1290	Exported Function
QueryPerformanceFrequency	1291	Exported Function
QueryProcessAffinityUpdateMode	1292	Exported Function
QueryOptionalDelayLoadedAPI	1289	Exported Function
QueryInterruptTime	1286	Exported Function
QueryInterruptTimePrecise	1287	Exported Function
QueryMemoryResourceNotification	1288	Exported Function
QueryStateContainerCreatedNew	1297	Exported Function
QueryStateContainerItemInfo	1298	Exported Function
QueryThreadCycleTime	1299	Exported Function
QueryStateAtomValueInfo	1296	Exported Function
QueryProcessCycleTime	1293	Exported Function
QueryProtectedPolicy	1294	Exported Function
QuerySecurityAccessMask	1295	Exported Function
QueryIdleProcessorCycleTimeEx	1285	Exported Function
QISearch	1275	Exported Function
QueryActCtxSettingsW	1276	Exported Function
QueryActCtxW	1277	Exported Function
PurgeComm	1274	Exported Function
PublisherFromPackageFullName	1272	Exported Function
PublishStateChangeNotification	1271	Exported Function
PulseEvent	1273	Exported Function
QueryFullProcessImageNameW	1282	Exported Function
QueryGlobalizationUserSettingsStatus	1283	Exported Function
QueryIdleProcessorCycleTime	1284	Exported Function
QueryFullProcessImageNameA	1281	Exported Function
QueryAuxiliaryCounterFrequency	1278	Exported Function
QueryDepthSList	1279	Exported Function
QueryDosDeviceW	1280	Exported Function
QueryThreadpoolStackInformation	1300	Exported Function
RaiseFailFastException	1320	Exported Function
ReadConsoleA	1322	Exported Function
ReadConsoleInputA	1323	Exported Function
RaiseException	1319	Exported Function
QuirkIsEnabledForPackage4	1316	Exported Function
QuirkIsEnabledForProcess	1317	Exported Function
RaiseCustomSystemEventTrigger	1318	Exported Function
ReadConsoleOutputAttribute	1328	Exported Function
ReadConsoleOutputCharacterA	1329	Exported Function
ReadConsoleOutputCharacterW	1330	Exported Function
ReadConsoleOutputA	1327	Exported Function
ReadConsoleInputExA	1324	Exported Function
ReadConsoleInputExW	1325	Exported Function
ReadConsoleInputW	1326	Exported Function
QuirkIsEnabledForPackage3	1315	Exported Function
QueryWorkingSetEx	1305	Exported Function
QueueUserAPC	1306	Exported Function
QueueUserWorkItem	1307	Exported Function
QueryWorkingSet	1304	Exported Function
QueryUnbiasedInterruptTime	1301	Exported Function
QueryUnbiasedInterruptTimePrecise	1302	Exported Function
QueryVirtualMemoryInformation	1303	Exported Function
QuirkIsEnabled3	1312	Exported Function
QuirkIsEnabledForPackage	1313	Exported Function
QuirkIsEnabledForPackage2	1314	Exported Function
QuirkIsEnabled2	1311	Exported Function
QuirkGetData	1308	Exported Function
QuirkGetData2	1309	Exported Function
QuirkIsEnabled	1310	Exported Function
LocaleNameToLCID	1013	Exported Function
LocalFileTimeToFileTime	1006	Exported Function
LocalFileTimeToLocalSystemTime	1007	Exported Function
LocalAlloc	1005	Exported Function
LoadStringBaseExW	1002	Exported Function
LoadStringByReference	1003	Exported Function
LoadStringW	1004	Exported Function
LocalUnlock	1012	Exported Function
LocateXStateFeature	1014	Exported Function
LockFile	1015	Exported Function
LocalSystemTimeToLocalFileTime	1011	Exported Function
LocalFree	1008	Exported Function
LocalLock	1009	Exported Function
LocalReAlloc	1010	Exported Function
LoadStringA	1001	Exported Function
LoadAppInitDlls	991	Exported Function
LoadEnclaveData	992	Exported Function
LoadEnclaveImageA	993	Exported Function
LeaveCriticalSectionWhenCallbackReturns	990	Exported Function
LCMapStringW	987	Exported Function
LeaveCriticalPolicySectionInternal	988	Exported Function
LeaveCriticalSection	989	Exported Function
LoadLibraryW	998	Exported Function
LoadPackagedLibrary	999	Exported Function
LoadResource	1000	Exported Function
LoadLibraryExW	997	Exported Function
LoadEnclaveImageW	994	Exported Function
LoadLibraryA	995	Exported Function
LoadLibraryExA	996	Exported Function
LockFileEx	1016	Exported Function
MapViewOfFile	1024	Exported Function
MapViewOfFile3	1025	Exported Function
MapViewOfFile3FromApp	1026	Exported Function
MapUserPhysicalPages	1023	Exported Function
MakeSelfRelativeSD	1020	Exported Function
MapGenericMask	1021	Exported Function
MapPredefinedHandleInternal	1022	Exported Function
MoveFileExW	1031	Exported Function
MoveFileWithProgressTransactedW	1032	Exported Function
MoveFileWithProgressW	1033	Exported Function
MapViewOfFileNuma2	1030	Exported Function
MapViewOfFileEx	1027	Exported Function
MapViewOfFileExNuma	1028	Exported Function
MapViewOfFileFromApp	1029	Exported Function
MakeAbsoluteSD2	1019	Exported Function
lstrcmpiA	1888	Exported Function
lstrcmpiW	1889	Exported Function
lstrcmpW	1886	Exported Function
lstrcmpi	1887	Exported Function
LockResource	1017	Exported Function
lstrcmp	1884	Exported Function
lstrcmpA	1885	Exported Function
lstrlenA	1894	Exported Function
lstrlenW	1895	Exported Function
MakeAbsoluteSD	1018	Exported Function
lstrlen	1893	Exported Function
lstrcpyn	1890	Exported Function
lstrcpynA	1891	Exported Function
lstrcpynW	1892	Exported Function
IsValidNLSVersion	947	Exported Function
IsValidRelativeSecurityDescriptor	948	Exported Function
IsValidSecurityDescriptor	949	Exported Function
IsValidLocaleName	946	Exported Function
IsValidCodePage	943	Exported Function
IsValidLanguageGroup	944	Exported Function
IsValidLocale	945	Exported Function
IsWow64Process2	954	Exported Function
K32EmptyWorkingSet	955	Exported Function
K32EnumDeviceDrivers	956	Exported Function
IsWow64Process	953	Exported Function
IsValidSid	950	Exported Function
IsWellKnownSid	951	Exported Function
IsWow64GuestMachineSupported	952	Exported Function
IsValidAcl	942	Exported Function
IsProcessInJob	932	Exported Function
IsProcessorFeaturePresent	933	Exported Function
IsSideloadingEnabled	934	Exported Function
IsProcessCritical	931	Exported Function
IsNLSDefinedString	928	Exported Function
IsNormalizedString	929	Exported Function
IsOnDemandRegistrationSupportedForExtensionCategory	930	Exported Function
IsTimeZoneRedirectionEnabled	939	Exported Function
IsTokenRestricted	940	Exported Function
IsUserCetAvailableInEnvironment	941	Exported Function
IsThreadpoolTimerSet	938	Exported Function
IsSideloadingPolicyApplied	935	Exported Function
IsSyncForegroundPolicyRefresh	936	Exported Function
IsThreadAFiber	937	Exported Function
K32EnumPageFilesA	957	Exported Function
K32GetWsChanges	977	Exported Function
K32GetWsChangesEx	978	Exported Function
K32InitializeProcessForWsWatch	979	Exported Function
K32GetProcessMemoryInfo	976	Exported Function
K32GetPerformanceInfo	973	Exported Function
K32GetProcessImageFileNameA	974	Exported Function
K32GetProcessImageFileNameW	975	Exported Function
LCIDToLocaleName	984	Exported Function
LCMapStringA	985	Exported Function
LCMapStringEx	986	Exported Function
KernelbasePostInit	983	Exported Function
K32QueryWorkingSet	980	Exported Function
K32QueryWorkingSetEx	981	Exported Function
KernelBaseGetGlobalData	982	Exported Function
K32GetModuleInformation	972	Exported Function
K32GetDeviceDriverBaseNameA	962	Exported Function
K32GetDeviceDriverBaseNameW	963	Exported Function
K32GetDeviceDriverFileNameA	964	Exported Function
K32EnumProcessModulesEx	960	Exported Function
K32EnumPageFilesW	958	Exported Function
K32EnumProcesses	961	Exported Function
K32EnumProcessModules	959	Exported Function
K32GetModuleBaseNameW	969	Exported Function
K32GetModuleFileNameExA	970	Exported Function
K32GetModuleFileNameExW	971	Exported Function
K32GetModuleBaseNameA	968	Exported Function
K32GetDeviceDriverFileNameW	965	Exported Function
K32GetMappedFileNameA	966	Exported Function
K32GetMappedFileNameW	967	Exported Function
MulDiv	1034	Exported Function
PathCchAddBackslash	1112	Exported Function
PathCchAddBackslashEx	1113	Exported Function
PathCchAddExtension	1114	Exported Function
PathCanonicalizeW	1111	Exported Function
PathAppendA	1108	Exported Function
PathAppendW	1109	Exported Function
PathCanonicalizeA	1110	Exported Function
PathCchCombine	1119	Exported Function
PathCchCombineEx	1120	Exported Function
PathCchFindExtension	1121	Exported Function
PathCchCanonicalizeEx	1118	Exported Function
PathCchAppend	1115	Exported Function
PathCchAppendEx	1116	Exported Function
PathCchCanonicalize	1117	Exported Function
PathAllocCombine	1107	Exported Function
PackageSidFromProductId	1	Exported Function
ParseApplicationUserModelId	1098	Exported Function
ParseApplicationUserModelIdA	1099	Exported Function
PackageSidFromFamilyName	1097	Exported Function
PackageNameAndPublisherIdFromFamilyName	1094	Exported Function
PackageNameAndPublisherIdFromFamilyNameA	1095	Exported Function
PackageRelativeApplicationIdFromProductId	1096	Exported Function
PathAddExtensionA	1104	Exported Function
PathAddExtensionW	1105	Exported Function
PathAllocCanonicalize	1106	Exported Function
PathAddBackslashW	1103	Exported Function
ParseURLA	1100	Exported Function
ParseURLW	1101	Exported Function
PathAddBackslashA	1102	Exported Function
PathCchIsRoot	1122	Exported Function
PathFindFileNameA	1142	Exported Function
PathFindFileNameW	1143	Exported Function
PathFindNextComponentA	1144	Exported Function
PathFindExtensionW	1141	Exported Function
PathFileExistsA	1138	Exported Function
PathFileExistsW	1139	Exported Function
PathFindExtensionA	1140	Exported Function
PathGetCharTypeW	1149	Exported Function
PathGetDriveNumberA	1150	Exported Function
PathGetDriveNumberW	1151	Exported Function
PathGetCharTypeA	1148	Exported Function
PathFindNextComponentW	1145	Exported Function
PathGetArgsA	1146	Exported Function
PathGetArgsW	1147	Exported Function
PathCreateFromUrlW	1137	Exported Function
PathCchRenameExtension	1127	Exported Function
PathCchSkipRoot	1128	Exported Function
PathCchStripPrefix	1129	Exported Function
PathCchRemoveFileSpec	1126	Exported Function
PathCchRemoveBackslash	1123	Exported Function
PathCchRemoveBackslashEx	1124	Exported Function
PathCchRemoveExtension	1125	Exported Function
PathCommonPrefixW	1134	Exported Function
PathCreateFromUrlA	1135	Exported Function
PathCreateFromUrlAlloc	1136	Exported Function
PathCommonPrefixA	1133	Exported Function
PathCchStripToRoot	1130	Exported Function
PathCombineA	1131	Exported Function
PathCombineW	1132	Exported Function
ObjectPrivilegeAuditAlarmW	1054	Exported Function
OfferVirtualMemory	1055	Exported Function
OpenCommPort	1056	Exported Function
ObjectOpenAuditAlarmW	1053	Exported Function
NotifyRedirectedStringChange	1050	Exported Function
ObjectCloseAuditAlarmW	1051	Exported Function
ObjectDeleteAuditAlarmW	1052	Exported Function
OpenFileMappingW	1061	Exported Function
OpenGlobalizationUserSettingsKey	1062	Exported Function
OpenMutexW	1063	Exported Function
OpenFileMappingFromApp	1060	Exported Function
OpenEventA	1057	Exported Function
OpenEventW	1058	Exported Function
OpenFileById	1059	Exported Function
NotifyMountMgr	1049	Exported Function
NeedCurrentDirectoryForExePathW	1039	Exported Function
NlsCheckPolicy	1040	Exported Function
NlsDispatchAnsiEnumProc	1041	Exported Function
NeedCurrentDirectoryForExePathA	1038	Exported Function
MultiByteToWideChar	1035	Exported Function
NamedPipeEventEnum	1036	Exported Function
NamedPipeEventSelect	1037	Exported Function
NlsUpdateSystemLocale	1046	Exported Function
NlsValidateLocale	1047	Exported Function
NormalizeString	1048	Exported Function
NlsUpdateLocale	1045	Exported Function
NlsGetACPFromLocale	1042	Exported Function
NlsGetCacheUpdateCount	1043	Exported Function
NlsIsUserDefaultLocale	1044	Exported Function
OpenPackageInfoByFullName	1064	Exported Function
PackageFamilyNameFromFullNameA	1084	Exported Function
PackageFamilyNameFromId	1085	Exported Function
PackageFamilyNameFromIdA	1086	Exported Function
PackageFamilyNameFromFullName	1083	Exported Function
OutputDebugStringA	1080	Exported Function
OutputDebugStringW	1081	Exported Function
OverrideRoamingDataModificationTimesInRange	1082	Exported Function
PackageIdFromFullName	1091	Exported Function
PackageIdFromFullNameA	1092	Exported Function
PackageIdFromProductId	1093	Exported Function
PackageFullNameFromProductId	1090	Exported Function
PackageFamilyNameFromProductId	1087	Exported Function
PackageFullNameFromId	1088	Exported Function
PackageFullNameFromIdA	1089	Exported Function
OpenWaitableTimerW	1079	Exported Function
OpenProcessToken	1069	Exported Function
OpenRegKey	1070	Exported Function
OpenSemaphoreW	1071	Exported Function
OpenProcess	1068	Exported Function
OpenPackageInfoByFullNameForMachine	1065	Exported Function
OpenPackageInfoByFullNameForUser	1066	Exported Function
OpenPrivateNamespaceW	1067	Exported Function
OpenStateExplicitForUserSidString	1076	Exported Function
OpenThread	1077	Exported Function
OpenThreadToken	1078	Exported Function
OpenStateExplicitForUserSid	1075	Exported Function
OpenState	1072	Exported Function
OpenStateAtom	1073	Exported Function
OpenStateExplicit	1074	Exported Function
TlsSetValue	1703	Exported Function
TraceEvent	1704	Exported Function
TraceMessage	1705	Exported Function
TlsGetValue	1702	Exported Function
time	1896	Exported Function
TlsAlloc	1700	Exported Function
TlsFree	1701	Exported Function
TryAcquireSRWLockShared	1710	Exported Function
TryEnterCriticalSection	1711	Exported Function
TrySubmitThreadpoolCallback	1712	Exported Function
TryAcquireSRWLockExclusive	1709	Exported Function
TraceMessageVa	1706	Exported Function
TransactNamedPipe	1707	Exported Function
TransmitCommChar	1708	Exported Function
TerminateThread	1699	Exported Function
SubscribeWdagEnabledStateChange	1689	Exported Function
SuspendThread	1690	Exported Function
SwitchToFiber	1691	Exported Function
SubscribeStateChangeNotification	1688	Exported Function
StrTrimW	1685	Exported Function
SubmitThreadpoolWork	1686	Exported Function
SubscribeEdpEnabledStateChange	1687	Exported Function
TerminateEnclave	1696	Exported Function
TerminateProcess	1697	Exported Function
TerminateProcessOnMemoryExhaustion	1698	Exported Function
SystemTimeToTzSpecificLocalTimeEx	1695	Exported Function
SwitchToThread	1692	Exported Function
SystemTimeToFileTime	1693	Exported Function
SystemTimeToTzSpecificLocalTime	1694	Exported Function
TzSpecificLocalTimeToSystemTime	1713	Exported Function
UpdatePackageStatusForUserSid	1733	Exported Function
UpdateProcThreadAttribute	1734	Exported Function
UrlApplySchemeA	1735	Exported Function
UpdatePackageStatusForUser	1732	Exported Function
UnsubscribeStateChangeNotification	1729	Exported Function
UnsubscribeWdagEnabledStateChange	1730	Exported Function
UpdatePackageStatus	1731	Exported Function
UrlCombineW	1740	Exported Function
UrlCompareA	1741	Exported Function
UrlCompareW	1742	Exported Function
UrlCombineA	1739	Exported Function
UrlApplySchemeW	1736	Exported Function
UrlCanonicalizeA	1737	Exported Function
UrlCanonicalizeW	1738	Exported Function
UnsubscribeEdpEnabledStateChange	1728	Exported Function
UnmapViewOfFile	1718	Exported Function
UnmapViewOfFile2	1719	Exported Function
UnmapViewOfFileEx	1720	Exported Function
UnlockFileEx	1717	Exported Function
TzSpecificLocalTimeToSystemTimeEx	1714	Exported Function
UnhandledExceptionFilter	1715	Exported Function
UnlockFile	1716	Exported Function
UnregisterStateLock	1725	Exported Function
UnregisterTraceGuids	1726	Exported Function
UnregisterWaitEx	1727	Exported Function
UnregisterStateChangeNotification	1724	Exported Function
UnregisterApplicationRestart	1721	Exported Function
UnregisterBadMemoryNotification	1722	Exported Function
UnregisterGPNotificationInternal	1723	Exported Function
StrCmpNIA	1649	Exported Function
StrCmpNICA	1650	Exported Function
StrCmpNICW	1651	Exported Function
StrCmpNCW	1648	Exported Function
StrCmpLogicalW	1645	Exported Function
StrCmpNA	1646	Exported Function
StrCmpNCA	1647	Exported Function
StrCpyNXA	1656	Exported Function
StrCpyNXW	1657	Exported Function
StrCSpnA	1626	Exported Function
StrCpyNW	1655	Exported Function
StrCmpNIW	1652	Exported Function
StrCmpNW	1653	Exported Function
StrCmpW	1654	Exported Function
StrCmpIW	1644	Exported Function
StrChrA_MB	1634	Exported Function
StrChrIA	1635	Exported Function
StrChrIW	1636	Exported Function
StrChrA	1633	Exported Function
StrCatBuffA	1630	Exported Function
StrCatBuffW	1631	Exported Function
StrCatChainW	1632	Exported Function
StrCmpCW	1641	Exported Function
StrCmpICA	1642	Exported Function
StrCmpICW	1643	Exported Function
StrCmpCA	1640	Exported Function
StrChrNIW	1637	Exported Function
StrChrNW	1638	Exported Function
StrChrW	1639	Exported Function
StrCSpnIA	1627	Exported Function
StrStrNIW	1675	Exported Function
StrStrNW	1676	Exported Function
StrStrW	1677	Exported Function
StrStrIW	1674	Exported Function
StrSpnW	1671	Exported Function
StrStrA	1672	Exported Function
StrStrIA	1673	Exported Function
StrToIntExW	1682	Exported Function
StrToIntW	1683	Exported Function
StrTrimA	1684	Exported Function
StrToIntExA	1681	Exported Function
StrToInt64ExA	1678	Exported Function
StrToInt64ExW	1679	Exported Function
StrToIntA	1680	Exported Function
StrSpnA	1670	Exported Function
StrIsIntlEqualA	1660	Exported Function
StrIsIntlEqualW	1661	Exported Function
StrPBrkA	1662	Exported Function
StrDupW	1659	Exported Function
StrCSpnIW	1628	Exported Function
StrCSpnW	1629	Exported Function
StrDupA	1658	Exported Function
StrRChrW	1667	Exported Function
StrRStrIA	1668	Exported Function
StrRStrIW	1669	Exported Function
StrRChrIW	1666	Exported Function
StrPBrkW	1663	Exported Function
StrRChrA	1664	Exported Function
StrRChrIA	1665	Exported Function
UrlCreateFromPathA	1743	Exported Function
WerRegisterCustomMetadata	1822	Exported Function
WerRegisterExcludedMemoryBlock	1823	Exported Function
WerRegisterFile	1824	Exported Function
WerRegisterAppLocalDump	1821	Exported Function
WerpNotifyLoadStringResource	1836	Exported Function
WerpNotifyUseStringResource	1837	Exported Function
WerRegisterAdditionalProcess	1820	Exported Function
WerUnregisterAdditionalProcess	1829	Exported Function
WerUnregisterAppLocalDump	1830	Exported Function
WerUnregisterCustomMetadata	1831	Exported Function
WerSetMaxProcessHoldMilliseconds	1828	Exported Function
WerRegisterMemoryBlock	1825	Exported Function
WerRegisterRuntimeExceptionModule	1826	Exported Function
WerSetFlags	1827	Exported Function
WerGetFlags	1819	Exported Function
WaitForThreadpoolTimerCallbacks	1809	Exported Function
WaitForThreadpoolWaitCallbacks	1810	Exported Function
WaitForThreadpoolWorkCallbacks	1811	Exported Function
WaitForThreadpoolIoCallbacks	1808	Exported Function
WaitForMultipleObjectsEx	1805	Exported Function
WaitForSingleObject	1806	Exported Function
WaitForSingleObjectEx	1807	Exported Function
WakeByAddressAll	1816	Exported Function
WakeByAddressSingle	1817	Exported Function
WakeConditionVariable	1818	Exported Function
WakeAllConditionVariable	1815	Exported Function
WaitForUserPolicyForegroundProcessingInternal	1812	Exported Function
WaitNamedPipeW	1813	Exported Function
WaitOnAddress	1814	Exported Function
WerUnregisterExcludedMemoryBlock	1832	Exported Function
WriteConsoleW	1853	Exported Function
WriteFile	1854	Exported Function
WriteFileEx	1855	Exported Function
WriteConsoleOutputW	1852	Exported Function
WriteConsoleOutputAttribute	1849	Exported Function
WriteConsoleOutputCharacterA	1850	Exported Function
WriteConsoleOutputCharacterW	1851	Exported Function
WTSGetServiceSessionId	1798	Exported Function
WTSIsServerContainer	1799	Exported Function
ZombifyActCtx	1860	Exported Function
WriteStateContainerValue	1859	Exported Function
WriteFileGather	1856	Exported Function
WriteProcessMemory	1857	Exported Function
WriteStateAtomValue	1858	Exported Function
WriteConsoleOutputA	1848	Exported Function
Wow64DisableWow64FsRedirection	1839	Exported Function
Wow64GetThreadContext	1840	Exported Function
Wow64RevertWow64FsRedirection	1841	Exported Function
WideCharToMultiByte	1838	Exported Function
WerUnregisterFile	1833	Exported Function
WerUnregisterMemoryBlock	1834	Exported Function
WerUnregisterRuntimeExceptionModule	1835	Exported Function
WriteConsoleA	1845	Exported Function
WriteConsoleInputA	1846	Exported Function
WriteConsoleInputW	1847	Exported Function
wprintf	1897	Exported Function
Wow64SetThreadContext	1842	Exported Function
Wow64SetThreadDefaultGuestMachine	1843	Exported Function
Wow64SuspendThread	1844	Exported Function
VerFindFileW	1763	Exported Function
VerifyApplicationUserModelId	1769	Exported Function
VerifyApplicationUserModelIdA	1770	Exported Function
VerFindFileA	1762	Exported Function
UrlIsW	1759	Exported Function
UrlUnescapeA	1760	Exported Function
UrlUnescapeW	1761	Exported Function
VerifyPackageId	1775	Exported Function
VerifyPackageIdA	1776	Exported Function
VerifyPackagePublisher	1777	Exported Function
VerifyPackageFullNameA	1774	Exported Function
VerifyPackageFamilyName	1771	Exported Function
VerifyPackageFamilyNameA	1772	Exported Function
VerifyPackageFullName	1773	Exported Function
UrlIsOpaqueW	1758	Exported Function
UrlGetLocationA	1748	Exported Function
UrlGetLocationW	1749	Exported Function
UrlGetPartA	1750	Exported Function
UrlFixupW	1747	Exported Function
UrlCreateFromPathW	1744	Exported Function
UrlEscapeA	1745	Exported Function
UrlEscapeW	1746	Exported Function
UrlIsNoHistoryA	1755	Exported Function
UrlIsNoHistoryW	1756	Exported Function
UrlIsOpaqueA	1757	Exported Function
UrlIsA	1754	Exported Function
UrlGetPartW	1751	Exported Function
UrlHashA	1752	Exported Function
UrlHashW	1753	Exported Function
VerifyPackagePublisherA	1778	Exported Function
VirtualProtectFromApp	1793	Exported Function
VirtualQuery	1794	Exported Function
VirtualQueryEx	1795	Exported Function
VirtualProtectEx	1792	Exported Function
VirtualFreeEx	1789	Exported Function
VirtualLock	1790	Exported Function
VirtualProtect	1791	Exported Function
WaitForDebugEventEx	1802	Exported Function
WaitForMachinePolicyForegroundProcessingInternal	1803	Exported Function
WaitForMultipleObjects	1804	Exported Function
WaitForDebugEvent	1801	Exported Function
VirtualUnlock	1796	Exported Function
VirtualUnlockEx	1797	Exported Function
WaitCommEvent	1800	Exported Function
VirtualFree	1788	Exported Function
VerLanguageNameW	1765	Exported Function
VerQueryValueA	1766	Exported Function
VerQueryValueW	1767	Exported Function
VerLanguageNameA	1764	Exported Function
VerifyPackageRelativeApplicationId	1779	Exported Function
VerifyPackageRelativeApplicationIdA	1780	Exported Function
VerifyScripts	1781	Exported Function
VirtualAllocEx	1785	Exported Function
VirtualAllocExNuma	1786	Exported Function
VirtualAllocFromApp	1787	Exported Function
VirtualAlloc2FromApp	1784	Exported Function
VerSetConditionMask	1768	Exported Function
VirtualAlloc	1782	Exported Function
VirtualAlloc2	1783	Exported Function
SetComputerNameW	1498	Exported Function
SetConsoleActiveScreenBuffer	1499	Exported Function
SetConsoleCP	1500	Exported Function
SetComputerNameExW	1497	Exported Function
SetComputerNameA	1494	Exported Function
SetComputerNameEx2W	1495	Exported Function
SetComputerNameExA	1496	Exported Function
SetConsoleHistoryInfo	1505	Exported Function
SetConsoleInputExeNameA	1506	Exported Function
SetConsoleInputExeNameW	1507	Exported Function
SetConsoleDisplayMode	1504	Exported Function
SetConsoleCtrlHandler	1501	Exported Function
SetConsoleCursorInfo	1502	Exported Function
SetConsoleCursorPosition	1503	Exported Function
SetCommTimeouts	1493	Exported Function
SearchPathW	1483	Exported Function
SetAclInformation	1484	Exported Function
SetCachedSigningLevel	1485	Exported Function
SearchPathA	1482	Exported Function
SaveStateRootFolderPath	1479	Exported Function
ScrollConsoleScreenBufferA	1480	Exported Function
ScrollConsoleScreenBufferW	1481	Exported Function
SetCommConfig	1490	Exported Function
SetCommMask	1491	Exported Function
SetCommState	1492	Exported Function
SetCommBreak	1489	Exported Function
SetCalendarInfoW	1486	Exported Function
SetClientDynamicTimeZoneInformation	1487	Exported Function
SetClientTimeZoneInformation	1488	Exported Function
SetConsoleMode	1508	Exported Function
SetErrorMode	1528	Exported Function
SetEvent	1529	Exported Function
SetEventWhenCallbackReturns	1530	Exported Function
SetEnvironmentVariableW	1527	Exported Function
SetEndOfFile	1524	Exported Function
SetEnvironmentStringsW	1525	Exported Function
SetEnvironmentVariableA	1526	Exported Function
SetFileAttributesW	1535	Exported Function
SetFileInformationByHandle	1536	Exported Function
SetFileIoOverlappedRange	1537	Exported Function
SetFileAttributesA	1534	Exported Function
SetExtensionProperty	1531	Exported Function
SetFileApisToANSI	1532	Exported Function
SetFileApisToOEM	1533	Exported Function
SetDynamicTimeZoneInformation	1523	Exported Function
SetConsoleScreenBufferSize	1513	Exported Function
SetConsoleTextAttribute	1514	Exported Function
SetConsoleTitleA	1515	Exported Function
SetConsoleScreenBufferInfoEx	1512	Exported Function
SetConsoleNumberOfCommandsA	1509	Exported Function
SetConsoleNumberOfCommandsW	1510	Exported Function
SetConsoleOutputCP	1511	Exported Function
SetCurrentDirectoryA	1520	Exported Function
SetCurrentDirectoryW	1521	Exported Function
SetDefaultDllDirectories	1522	Exported Function
SetCurrentConsoleFontEx	1519	Exported Function
SetConsoleTitleW	1516	Exported Function
SetConsoleWindowInfo	1517	Exported Function
SetCriticalSectionSpinCount	1518	Exported Function
RegSetKeyValueA	1402	Exported Function
RegSetKeyValueW	1403	Exported Function
RegSetValueExA	1404	Exported Function
RegSetKeySecurity	1401	Exported Function
RegRestoreKeyW	1398	Exported Function
RegSaveKeyExA	1399	Exported Function
RegSaveKeyExW	1400	Exported Function
ReleaseMutex	1416	Exported Function
ReleaseMutexWhenCallbackReturns	1417	Exported Function
ReleaseSemaphore	1420	Exported Function
ReleaseActCtx	1415	Exported Function
RegSetValueExW	1405	Exported Function
RegUnLoadKeyA	1406	Exported Function
RegUnLoadKeyW	1407	Exported Function
RegRestoreKeyA	1397	Exported Function
RegOpenKeyExInternalA	1387	Exported Function
RegOpenKeyExInternalW	1388	Exported Function
RegOpenKeyExW	1389	Exported Function
RegOpenKeyExA	1386	Exported Function
RegLoadMUIStringW	1383	Exported Function
RegNotifyChangeKeyValue	1384	Exported Function
RegOpenCurrentUser	1385	Exported Function
RegQueryMultipleValuesW	1394	Exported Function
RegQueryValueExA	1395	Exported Function
RegQueryValueExW	1396	Exported Function
RegQueryMultipleValuesA	1393	Exported Function
RegOpenUserClassesRoot	1390	Exported Function
RegQueryInfoKeyA	1391	Exported Function
RegQueryInfoKeyW	1392	Exported Function
ReleaseSemaphoreWhenCallbackReturns	1421	Exported Function
ResizePseudoConsole	1438	Exported Function
ResolveDelayLoadedAPI	1439	Exported Function
ResolveDelayLoadsFromDll	1440	Exported Function
ResetWriteWatch	1437	Exported Function
ReplaceFileW	1434	Exported Function
ResetEvent	1435	Exported Function
ResetState	1436	Exported Function
RevertToSelf	1445	Exported Function
RsopLoggingEnabledInternal	1446	Exported Function
SaveAlternatePackageRootPath	1478	Exported Function
ResumeThread	1444	Exported Function
ResolveLocaleName	1441	Exported Function
RestoreLastError	1442	Exported Function
RestoreThreadPreferredUILanguages	1443	Exported Function
ReplaceFileExInternal	1433	Exported Function
RemoveDirectoryA	1424	Exported Function
RemoveDirectoryW	1425	Exported Function
RemoveDllDirectory	1426	Exported Function
RemapPredefinedHandleInternal	1423	Exported Function
ReleaseSRWLockExclusive	1418	Exported Function
ReleaseSRWLockShared	1419	Exported Function
ReleaseStateLock	1422	Exported Function
RemoveVectoredContinueHandler	1431	Exported Function
RemoveVectoredExceptionHandler	1432	Exported Function
ReOpenFile	1321	Exported Function
RemovePackageStatusForUser	1430	Exported Function
RemoveExtensionProgIds	1427	Exported Function
RemovePackageFromFamilyXref	1428	Exported Function
RemovePackageStatus	1429	Exported Function
SetFilePointer	1538	Exported Function
SharedLocalIsEnabled	1617	Exported Function
SHCoCreateInstance	1447	Exported Function
SHExpandEnvironmentStringsA	1448	Exported Function
SetXStateFeaturesMask	1615	Exported Function
SetUserGeoName	1612	Exported Function
SetWaitableTimer	1613	Exported Function
SetWaitableTimerEx	1614	Exported Function
SHRegCreateUSKeyA	1453	Exported Function
SHRegCreateUSKeyW	1454	Exported Function
SHRegDeleteEmptyUSKeyA	1455	Exported Function
SHRegCloseUSKey	1452	Exported Function
SHExpandEnvironmentStringsW	1449	Exported Function
SHLoadIndirectString	1450	Exported Function
SHLoadIndirectStringInternal	1451	Exported Function
SetUserGeoID	1611	Exported Function
SetThreadPriority	1595	Exported Function
SetThreadPriorityBoost	1596	Exported Function
SetThreadSelectedCpuSets	1597	Exported Function
SetThreadPreferredUILanguages2	1594	Exported Function
SetThreadpoolWait	1606	Exported Function
SetThreadpoolWaitEx	1607	Exported Function
SetThreadPreferredUILanguages	1593	Exported Function
SetTokenInformation	1609	Exported Function
SetUnhandledExceptionFilter	1610	Exported Function
SetupComm	1616	Exported Function
SetTimeZoneInformation	1608	Exported Function
SetThreadStackGuarantee	1598	Exported Function
SetThreadToken	1599	Exported Function
SetThreadUILanguage	1600	Exported Function
SHRegDeleteEmptyUSKeyW	1456	Exported Function
SHRegWriteUSValueW	1476	Exported Function
SHTruncateString	1477	Exported Function
SignalObjectAndWait	1618	Exported Function
SHRegWriteUSValueA	1475	Exported Function
SHRegQueryUSValueW	1472	Exported Function
SHRegSetUSValueA	1473	Exported Function
SHRegSetUSValueW	1474	Exported Function
SleepEx	1623	Exported Function
SpecialMBToWC	1624	Exported Function
StartThreadpoolIo	1625	Exported Function
SleepConditionVariableSRW	1622	Exported Function
SizeofResource	1619	Exported Function
Sleep	1620	Exported Function
SleepConditionVariableCS	1621	Exported Function
SHRegQueryUSValueA	1471	Exported Function
SHRegEnumUSValueA	1461	Exported Function
SHRegEnumUSValueW	1462	Exported Function
SHRegGetBoolUSValueA	1463	Exported Function
SHRegEnumUSKeyW	1460	Exported Function
SHRegDeleteUSValueA	1457	Exported Function
SHRegDeleteUSValueW	1458	Exported Function
SHRegEnumUSKeyA	1459	Exported Function
SHRegOpenUSKeyW	1468	Exported Function
SHRegQueryInfoUSKeyA	1469	Exported Function
SHRegQueryInfoUSKeyW	1470	Exported Function
SHRegOpenUSKeyA	1467	Exported Function
SHRegGetBoolUSValueW	1464	Exported Function
SHRegGetUSValueA	1465	Exported Function
SHRegGetUSValueW	1466	Exported Function
SetProcessDynamicEHContinuationTargets	1558	Exported Function
SetProcessGroupAffinity	1559	Exported Function
SetProcessInformation	1560	Exported Function
SetProcessDefaultCpuSets	1557	Exported Function
SetPrivateObjectSecurity	1554	Exported Function
SetPrivateObjectSecurityEx	1555	Exported Function
SetProcessAffinityUpdateMode	1556	Exported Function
SetProcessValidCallTargets	1565	Exported Function
SetProcessValidCallTargetsForMappedView	1566	Exported Function
SetProcessWorkingSetSizeEx	1567	Exported Function
SetProcessShutdownParameters	1564	Exported Function
SetProcessMitigationPolicy	1561	Exported Function
SetProcessPreferredUILanguages	1562	Exported Function
SetProcessPriorityBoost	1563	Exported Function
SetPriorityClass	1553	Exported Function
SetHandleCount	1543	Exported Function
SetHandleInformation	1544	Exported Function
SetIsDeveloperModeEnabled	1545	Exported Function
SetFileValidData	1542	Exported Function
SetFilePointerEx	1539	Exported Function
SetFileSecurityW	1540	Exported Function
SetFileTime	1541	Exported Function
SetLocaleInfoW	1551	Exported Function
SetLocalTime	1550	Exported Function
SetNamedPipeHandleState	1552	Exported Function
SetLastError	1549	Exported Function
SetIsSideloadingEnabled	1546	Exported Function
SetKernelObjectSecurity	1547	Exported Function
SetLastConsoleEventActive	1548	Exported Function
SetProtectedPolicy	1568	Exported Function
SetThreadGroupAffinity	1588	Exported Function
SetThreadIdealProcessor	1589	Exported Function
SetThreadIdealProcessorEx	1590	Exported Function
SetThreadErrorMode	1587	Exported Function
SetSystemTimeAdjustmentPrecise	1584	Exported Function
SetThreadContext	1585	Exported Function
SetThreadDescription	1586	Exported Function
SetThreadpoolThreadMinimum	1603	Exported Function
SetThreadpoolTimer	1604	Exported Function
SetThreadpoolTimerEx	1605	Exported Function
SetThreadpoolThreadMaximum	1602	Exported Function
SetThreadInformation	1591	Exported Function
SetThreadLocale	1592	Exported Function
SetThreadpoolStackInformation	1601	Exported Function
SetSystemTimeAdjustment	1583	Exported Function
SetSecurityDescriptorDacl	1573	Exported Function
SetSecurityDescriptorGroup	1574	Exported Function
SetSecurityDescriptorOwner	1575	Exported Function
SetSecurityDescriptorControl	1572	Exported Function
SetProtocolProperty	1569	Exported Function
SetRoamingLastObservedChangeTime	1570	Exported Function
SetSecurityAccessMask	1571	Exported Function
SetStdHandleEx	1580	Exported Function
SetSystemFileCacheSize	1581	Exported Function
SetSystemTime	1582	Exported Function
SetStdHandle	1579	Exported Function
SetSecurityDescriptorRMControl	1576	Exported Function
SetSecurityDescriptorSacl	1577	Exported Function
SetStateVersion	1578	Exported Function
IsMrtResourceRedirectionEnabled	927	Exported Function
EnumCalendarInfoExEx	297	Exported Function
EnumCalendarInfoExW	298	Exported Function
EnumCalendarInfoW	299	Exported Function
EnterSynchronizationBarrier	296	Exported Function
EncodeSystemPointer	293	Exported Function
EnterCriticalPolicySectionInternal	294	Exported Function
EnterCriticalSection	295	Exported Function
EnumDynamicTimeZoneInformation	304	Exported Function
EnumerateExtensionNames	329	Exported Function
EnumerateStateAtomValues	330	Exported Function
EnumDeviceDrivers	303	Exported Function
EnumDateFormatsExEx	300	Exported Function
EnumDateFormatsExW	301	Exported Function
EnumDateFormatsW	302	Exported Function
EncodeRemotePointer	292	Exported Function
DsMakePasswordCredentialsW	282	Exported Function
DsReadNgcKeyW	283	Exported Function
DsUnBindW	284	Exported Function
DsGetDomainControllerInfoW	281	Exported Function
DsFreeNameResultW	278	Exported Function
DsFreeNgcKey	279	Exported Function
DsFreePasswordCredentials	280	Exported Function
DuplicateTokenEx	289	Exported Function
EmptyWorkingSet	290	Exported Function
EncodePointer	291	Exported Function
DuplicateToken	288	Exported Function
DsWriteNgcKeyW	285	Exported Function
DuplicateHandle	286	Exported Function
DuplicateStateContainerHandle	287	Exported Function
EnumerateStateContainerItems	331	Exported Function
EnumSystemLocalesEx	324	Exported Function
EnumSystemLocalesW	325	Exported Function
EnumTimeFormatsEx	326	Exported Function
EnumSystemLocalesA	323	Exported Function
EnumSystemGeoID	320	Exported Function
EnumSystemGeoNames	321	Exported Function
EnumSystemLanguageGroupsW	322	Exported Function
EqualSid	334	Exported Function
EscapeCommFunction	335	Exported Function
EventActivityIdControl	336	Exported Function
EqualPrefixSid	333	Exported Function
EnumTimeFormatsW	327	Exported Function
EnumUILanguagesW	328	Exported Function
EqualDomainSid	332	Exported Function
EnumSystemFirmwareTables	319	Exported Function
EnumProcessModules	308	Exported Function
EnumProcessModulesEx	309	Exported Function
EnumResourceLanguagesExA	311	Exported Function
EnumProcesses	310	Exported Function
EnumLanguageGroupLocalesW	305	Exported Function
EnumPageFilesA	306	Exported Function
EnumPageFilesW	307	Exported Function
EnumResourceTypesExA	316	Exported Function
EnumResourceTypesExW	317	Exported Function
EnumSystemCodePagesW	318	Exported Function
EnumResourceNamesW	315	Exported Function
EnumResourceLanguagesExW	312	Exported Function
EnumResourceNamesExA	313	Exported Function
EnumResourceNamesExW	314	Exported Function
CreateWellKnownSid	238	Exported Function
CtrlRoutine	239	Exported Function
CveEventWrite	240	Exported Function
CreateWaitableTimerW	237	Exported Function
CreateTimerQueue	234	Exported Function
CreateTimerQueueTimer	235	Exported Function
CreateWaitableTimerExW	236	Exported Function
DecodePointer	245	Exported Function
DecodeRemotePointer	246	Exported Function
DecodeSystemPointer	247	Exported Function
DebugBreak	244	Exported Function
DeactivateActCtx	241	Exported Function
DebugActiveProcess	242	Exported Function
DebugActiveProcessStop	243	Exported Function
CreateThreadpoolWork	233	Exported Function
CreateStateContainer	223	Exported Function
CreateStateLock	224	Exported Function
CreateStateSubcontainer	225	Exported Function
CreateStateChangeNotification	222	Exported Function
CreateSemaphoreExW	219	Exported Function
CreateSemaphoreW	220	Exported Function
CreateStateAtom	221	Exported Function
CreateThreadpoolIo	230	Exported Function
CreateThreadpoolTimer	231	Exported Function
CreateThreadpoolWait	232	Exported Function
CreateThreadpoolCleanupGroup	229	Exported Function
CreateSymbolicLinkW	226	Exported Function
CreateThread	227	Exported Function
CreateThreadpool	228	Exported Function
DefineDosDeviceW	248	Exported Function
DeviceIoControl	268	Exported Function
DisablePredefinedHandleTableInternal	269	Exported Function
DisableThreadLibraryCalls	270	Exported Function
DestroyPrivateObjectSecurity	267	Exported Function
DeleteTimerQueueTimer	264	Exported Function
DeleteVolumeMountPointW	265	Exported Function
DeriveCapabilitySidsFromName	266	Exported Function
DsBindWithSpnExW	275	Exported Function
DsCrackNamesW	276	Exported Function
DsFreeDomainControllerInfoW	277	Exported Function
DnsHostnameToComputerNameExW	274	Exported Function
DisassociateCurrentThreadFromCallback	271	Exported Function
DiscardVirtualMemory	272	Exported Function
DisconnectNamedPipe	273	Exported Function
DeleteTimerQueueEx	263	Exported Function
DeleteCriticalSection	253	Exported Function
DeleteEnclave	254	Exported Function
DeleteFiber	255	Exported Function
DeleteBoundaryDescriptor	252	Exported Function
DelayLoadFailureHook	249	Exported Function
DelayLoadFailureHookLookup	250	Exported Function
DeleteAce	251	Exported Function
DeleteStateContainer	260	Exported Function
DeleteStateContainerValue	261	Exported Function
DeleteSynchronizationBarrier	262	Exported Function
DeleteStateAtomValue	259	Exported Function
DeleteFileA	256	Exported Function
DeleteFileW	257	Exported Function
DeleteProcThreadAttributeList	258	Exported Function
EventEnabled	337	Exported Function
GetAcceptLanguagesA	416	Exported Function
GetAcceptLanguagesW	417	Exported Function
GetAce	418	Exported Function
GenerateGPNotificationInternal	414	Exported Function
FreeSid	411	Exported Function
FreeUserPhysicalPages	412	Exported Function
GenerateConsoleCtrlEvent	413	Exported Function
GetAppContainerAce	422	Exported Function
GetAppContainerNamedObjectPath	423	Exported Function
GetAppDataFolder	424	Exported Function
GetAlternatePackageRoots	421	Exported Function
GetAclInformation	419	Exported Function
GetACP	415	Exported Function
GetAdjustObjectAttributesForPrivateNamespaceRoutine	420	Exported Function
FreeResource	410	Exported Function
FormatMessageA	400	Exported Function
FormatMessageW	401	Exported Function
FreeConsole	402	Exported Function
FormatApplicationUserModelIdA	399	Exported Function
FoldStringW	396	Exported Function
ForceSyncFgPolicyInternal	397	Exported Function
FormatApplicationUserModelId	398	Exported Function
FreeLibrary	407	Exported Function
FreeLibraryAndExitThread	408	Exported Function
FreeLibraryWhenCallbackReturns	409	Exported Function
FreeGPOListInternalW	406	Exported Function
FreeEnvironmentStringsA	403	Exported Function
FreeEnvironmentStringsW	404	Exported Function
FreeGPOListInternalA	405	Exported Function
GetApplicationRecoveryCallback	426	Exported Function
GetCompressedFileSizeA	449	Exported Function
GetCompressedFileSizeW	450	Exported Function
GetComputerNameExA	451	Exported Function
GetCommTimeouts	446	Exported Function
GetCommPorts	443	Exported Function
GetCommProperties	444	Exported Function
GetCommState	445	Exported Function
GetConsoleAliasesLengthW	461	Exported Function
GetConsoleAliasesW	462	Exported Function
GetConsoleAliasExesA	454	Exported Function
GetConsoleAliasesLengthA	460	Exported Function
GetComputerNameExW	452	Exported Function
GetConsoleAliasA	453	Exported Function
GetConsoleAliasesA	459	Exported Function
GetCommModemStatus	442	Exported Function
GetAppliedGPOListInternalW	431	Exported Function
GetAppModelVersion	425	Exported Function
GetCachedSigningLevel	436	Exported Function
GetAppliedGPOListInternalA	430	Exported Function
GetApplicationRestartSettings	427	Exported Function
GetApplicationUserModelId	428	Exported Function
GetApplicationUserModelIdFromToken	429	Exported Function
GetCommandLineW	448	Exported Function
GetCommConfig	440	Exported Function
GetCommMask	441	Exported Function
GetCommandLineA	447	Exported Function
GetCalendar	437	Exported Function
GetCalendarInfoEx	438	Exported Function
GetCalendarInfoW	439	Exported Function
FileTimeToSystemTime	356	Exported Function
FillConsoleOutputAttribute	357	Exported Function
FillConsoleOutputCharacterA	358	Exported Function
FileTimeToLocalFileTime	355	Exported Function
ExtensionProgIdExists	352	Exported Function
FatalAppExitA	353	Exported Function
FatalAppExitW	354	Exported Function
FindCloseChangeNotification	363	Exported Function
FindFirstChangeNotificationA	364	Exported Function
FindFirstChangeNotificationW	365	Exported Function
FindClose	362	Exported Function
FillConsoleOutputCharacterW	359	Exported Function
FindActCtxSectionGuid	360	Exported Function
FindActCtxSectionStringW	361	Exported Function
ExpungeConsoleCommandHistoryW	351	Exported Function
EventWrite	342	Exported Function
EventWriteEx	343	Exported Function
EventWriteString	344	Exported Function
EventUnregister	341	Exported Function
EventProviderEnabled	338	Exported Function
EventRegister	339	Exported Function
EventSetInformation	340	Exported Function
ExpandEnvironmentStringsA	348	Exported Function
ExpandEnvironmentStringsW	349	Exported Function
ExpungeConsoleCommandHistoryA	350	Exported Function
ExitThread	347	Exported Function
EventWriteTransfer	345	Exported Function
exit	1881	Exported Function
ExitProcess	346	Exported Function
FindFirstFileA	366	Exported Function
FindVolumeClose	386	Exported Function
FlsAlloc	387	Exported Function
FlsFree	388	Exported Function
FindStringOrdinal	385	Exported Function
FindPackagesByPackageFamily	382	Exported Function
FindResourceExW	383	Exported Function
FindResourceW	384	Exported Function
FlushInstructionCache	393	Exported Function
FlushProcessWriteBuffers	394	Exported Function
FlushViewOfFile	395	Exported Function
FlushFileBuffers	392	Exported Function
FlsGetValue	389	Exported Function
FlsSetValue	390	Exported Function
FlushConsoleInputBuffer	391	Exported Function
FindNLSStringEx	375	Exported Function
FindFirstFreeAce	371	Exported Function
FindFirstStreamW	372	Exported Function
FindFirstVolumeW	373	Exported Function
FindFirstFileW	370	Exported Function
FindFirstFileExA	367	Exported Function
FindFirstFileExW	368	Exported Function
FindFirstFileNameW	369	Exported Function
FindNextStreamW	380	Exported Function
FindNextVolumeW	381	Exported Function
FindNLSString	374	Exported Function
FindNextFileW	379	Exported Function
FindNextChangeNotification	376	Exported Function
FindNextFileA	377	Exported Function
FindNextFileNameW	378	Exported Function
AppXGetOSMaxVersionTested	60	Exported Function
AppXGetOSMinVersion	61	Exported Function
AppXGetPackageCapabilities	62	Exported Function
AppXGetDevelopmentMode	59	Exported Function
AppPolicyGetWindowingModel	56	Exported Function
AppXFreeMemory	57	Exported Function
AppXGetApplicationData	58	Exported Function
AppXPreCreationExtension	67	Exported Function
AppXReleaseAppXContext	68	Exported Function
AppXUpdatePackageCapabilities	69	Exported Function
AppXPostSuccessExtension	66	Exported Function
AppXGetPackageSid	63	Exported Function
AppXLookupDisplayName	64	Exported Function
AppXLookupMoniker	65	Exported Function
AppPolicyGetThreadInitializationType	55	Exported Function
AppContainerLookupMoniker	46	Exported Function
AppContainerRegisterSid	47	Exported Function
AppContainerUnregisterSid	48	Exported Function
AppContainerLookupDisplayNameMrtReference	45	Exported Function
AllocConsole	38	Exported Function
AppContainerDeriveSidFromMoniker	43	Exported Function
AppContainerFreeMemory	44	Exported Function
AppPolicyGetMediaFoundationCodecLoading	52	Exported Function
AppPolicyGetProcessTerminationMethod	53	Exported Function
AppPolicyGetShowDeveloperDiagnostic	54	Exported Function
AppPolicyGetLifecycleManagement	51	Exported Function
ApplicationUserModelIdFromProductId	70	Exported Function
AppPolicyGetClrCompat	49	Exported Function
AppPolicyGetCreateFileAccess	50	Exported Function
AreAllAccessesGranted	71	Exported Function
BaseMarkFileForDelete	90	Exported Function
BasepAdjustObjectAttributesForPrivateNamespace	93	Exported Function
BasepCopyFileCallback	94	Exported Function
BaseIsAppcompatInfrastructureDisabled	89	Exported Function
BaseGetConsoleReference	86	Exported Function
BaseGetNamedObjectDirectory	87	Exported Function
BaseInitAppcompatCacheSupport	88	Exported Function
Beep	97	Exported Function
CallbackMayRunLong	101	Exported Function
CallEnclave	99	Exported Function
BaseUpdateAppcompatCache	92	Exported Function
BasepCopyFileExW	95	Exported Function
BasepNotifyTrackingService	96	Exported Function
BaseReadAppCompatDataForProcess	91	Exported Function
BaseFreeAppCompatDataForProcess	85	Exported Function
atexit	1880	Exported Function
AttachConsole	76	Exported Function
BaseCheckAppcompatCache	77	Exported Function
AreThereVisibleShutdownScriptsInternal	75	Exported Function
AreAnyAccessesGranted	72	Exported Function
AreFileApisANSI	73	Exported Function
AreThereVisibleLogoffScriptsInternal	74	Exported Function
BaseDumpAppcompatCache	82	Exported Function
BaseFlushAppcompatCache	83	Exported Function
BaseFormatObjectAttributes	84	Exported Function
BaseDllMapResourceIdW	81	Exported Function
BaseCheckAppcompatCacheEx	78	Exported Function
BaseCleanupAppcompatCacheSupport	79	Exported Function
BaseDllFreeResourceId	80	Exported Function
AccessCheck	2	Exported Function
AccessCheckAndAuditAlarmW	3	Exported Function
AccessCheckByType	4	Exported Function
_time64	1879	Exported Function
_onexit	1877	Exported Function
_OpenMuiStringCache	1863	Exported Function
_purecall	1878	Exported Function
AcquireSRWLockExclusive	9	Exported Function
AcquireSRWLockShared	10	Exported Function
AcquireStateLock	11	Exported Function
AccessCheckByTypeResultListAndAuditAlarmW	8	Exported Function
AccessCheckByTypeAndAuditAlarmW	5	Exported Function
AccessCheckByTypeResultList	6	Exported Function
AccessCheckByTypeResultListAndAuditAlarmByHandleW	7	Exported Function
_local_unwind	1876	Exported Function
__wgetmainargs	1868	Exported Function
_AddMUIStringToCache	1861	Exported Function
_amsg_exit	1869	Exported Function
__misaligned_access	1867	Exported Function
__C_specific_handler	1864	Exported Function
__chkstk	1865	Exported Function
__dllonexit3	1866	Exported Function
_initterm	1873	Exported Function
_initterm_e	1874	Exported Function
_invalid_parameter	1875	Exported Function
_GetMUIStringFromCache	1862	Exported Function
_c_exit	1870	Exported Function
_cexit	1871	Exported Function
_exit	1872	Exported Function
ActivateActCtx	12	Exported Function
AddScopedPolicyIDAce	33	Exported Function
AddSIDToBoundaryDescriptor	32	Exported Function
AddVectoredContinueHandler	34	Exported Function
AddResourceAttributeAce	31	Exported Function
AddMandatoryAce	28	Exported Function
AddPackageToFamilyXref	29	Exported Function
AddRefActCtx	30	Exported Function
AllocateLocallyUniqueId	40	Exported Function
AllocateUserPhysicalPages	41	Exported Function
AllocateUserPhysicalPagesNuma	42	Exported Function
AllocateAndInitializeSid	39	Exported Function
AddVectoredExceptionHandler	35	Exported Function
AdjustTokenGroups	36	Exported Function
AdjustTokenPrivileges	37	Exported Function
AddExtensionProgId	27	Exported Function
AddAccessDeniedAceEx	17	Exported Function
AddAccessDeniedObjectAce	18	Exported Function
AddAce	19	Exported Function
AddAccessDeniedAce	16	Exported Function
AddAccessAllowedAce	13	Exported Function
AddAccessAllowedAceEx	14	Exported Function
AddAccessAllowedObjectAce	15	Exported Function
AddConsoleAliasW	24	Exported Function
AddDependencyToProcessPackageGraph	25	Exported Function
AddDllDirectory	26	Exported Function
AddConsoleAliasA	23	Exported Function
AddAuditAccessAce	20	Exported Function
AddAuditAccessAceEx	21	Exported Function
AddAuditAccessObjectAce	22	Exported Function
CallNamedPipeW	100	Exported Function
CreateDirectoryW	179	Exported Function
CreateEnclave	180	Exported Function
CreateEventA	181	Exported Function
CreateDirectoryExW	178	Exported Function
CreateBoundaryDescriptorW	175	Exported Function
CreateConsoleScreenBuffer	176	Exported Function
CreateDirectoryA	177	Exported Function
CreateFiberEx	186	Exported Function
CreateFile2	187	Exported Function
CreateFileA	188	Exported Function
CreateFiber	185	Exported Function
CreateEventExA	182	Exported Function
CreateEventExW	183	Exported Function
CreateEventW	184	Exported Function
CreateAppContainerToken	174	Exported Function
ConvertThreadToFiberEx	164	Exported Function
ConvertToAutoInheritPrivateObjectSecurity	165	Exported Function
CopyContext	166	Exported Function
ConvertThreadToFiber	163	Exported Function
ConvertDefaultLocale	160	Exported Function
ConvertFiberToThread	161	Exported Function
ConvertPerformanceCounterToAuxiliaryCounter	162	Exported Function
CopySid	171	Exported Function
CouldMultiUserAppsBehaviorBePossibleForPackage	172	Exported Function
CreateActCtxW	173	Exported Function
CopyMemoryNonTemporal	170	Exported Function
CopyFile2	167	Exported Function
CopyFileExW	168	Exported Function
CopyFileW	169	Exported Function
CreateFileMapping2	189	Exported Function
CreateProcessAsUserA	209	Exported Function
CreateProcessAsUserW	210	Exported Function
CreateProcessInternalA	211	Exported Function
CreateProcessA	208	Exported Function
CreatePrivateObjectSecurity	205	Exported Function
CreatePrivateObjectSecurityEx	206	Exported Function
CreatePrivateObjectSecurityWithMultipleInheritance	207	Exported Function
CreateRemoteThread	216	Exported Function
CreateRemoteThreadEx	217	Exported Function
CreateRestrictedToken	218	Exported Function
CreatePseudoConsoleAsUser	215	Exported Function
CreateProcessInternalW	212	Exported Function
CreateProcessW	213	Exported Function
CreatePseudoConsole	214	Exported Function
CreatePrivateNamespaceW	204	Exported Function
CreateHardLinkA	194	Exported Function
CreateHardLinkW	195	Exported Function
CreateIoCompletionPort	196	Exported Function
CreateFileW	193	Exported Function
CreateFileMappingFromApp	190	Exported Function
CreateFileMappingNumaW	191	Exported Function
CreateFileMappingW	192	Exported Function
CreateMutexW	201	Exported Function
CreateNamedPipeW	202	Exported Function
CreatePipe	203	Exported Function
CreateMutexExW	200	Exported Function
CreateMemoryResourceNotification	197	Exported Function
CreateMutexA	198	Exported Function
CreateMutexExA	199	Exported Function
CharUpperBuffW	121	Exported Function
CharUpperW	122	Exported Function
CheckAllowDecryptedRemoteDestinationPolicy	123	Exported Function
CharUpperBuffA	120	Exported Function
CharPrevExA	117	Exported Function
CharPrevW	118	Exported Function
CharUpperA	119	Exported Function
CheckTokenMembership	128	Exported Function
CheckTokenMembershipEx	129	Exported Function
ChrCmpIA	130	Exported Function
CheckTokenCapability	127	Exported Function
CheckGroupPolicyEnabled	124	Exported Function
CheckIfStateChangeNotificationExists	125	Exported Function
CheckRemoteDebuggerPresent	126	Exported Function
CharPrevA	116	Exported Function
CancelWaitableTimer	106	Exported Function
CeipIsOptedIn	107	Exported Function
ChangeTimerQueueTimer	108	Exported Function
CancelThreadpoolIo	105	Exported Function
CancelIo	102	Exported Function
CancelIoEx	103	Exported Function
CancelSynchronousIo	104	Exported Function
CharNextA	113	Exported Function
CharNextExA	114	Exported Function
CharNextW	115	Exported Function
CharLowerW	112	Exported Function
CharLowerA	109	Exported Function
CharLowerBuffA	110	Exported Function
CharLowerBuffW	111	Exported Function
ChrCmpIW	131	Exported Function
CommitStateAtom	150	Exported Function
CompareFileTime	151	Exported Function
CompareObjectHandles	152	Exported Function
CloseThreadpoolWork	149	Exported Function
CloseThreadpoolIo	146	Exported Function
CloseThreadpoolTimer	147	Exported Function
CloseThreadpoolWait	148	Exported Function
ConnectNamedPipe	157	Exported Function
ContinueDebugEvent	158	Exported Function
ConvertAuxiliaryCounterToPerformanceCounter	159	Exported Function
CompareStringW	156	Exported Function
CompareStringA	153	Exported Function
CompareStringEx	154	Exported Function
CompareStringOrdinal	155	Exported Function
CloseThreadpoolCleanupGroupMembers	145	Exported Function
ClosePackageInfo	135	Exported Function
ClosePrivateNamespace	136	Exported Function
ClosePseudoConsole	137	Exported Function
CloseHandle	134	Exported Function
ClearCommBreak	132	Exported Function
ClearCommError	133	Exported Function
CLOSE_LOCAL_HANDLE_INTERNAL	98	Exported Function
CloseStateLock	142	Exported Function
CloseThreadpool	143	Exported Function
CloseThreadpoolCleanupGroup	144	Exported Function
CloseStateContainer	141	Exported Function
CloseState	138	Exported Function
CloseStateAtom	139	Exported Function
CloseStateChangeNotification	140	Exported Function
GetSystemWindowsDirectoryA	770	Exported Function
GetSystemWindowsDirectoryW	771	Exported Function
GetSystemWow64Directory2A	772	Exported Function
GetSystemTimes	769	Exported Function
GetSystemTimeAdjustmentPrecise	766	Exported Function
GetSystemTimeAsFileTime	767	Exported Function
GetSystemTimePreciseAsFileTime	768	Exported Function
GetTempFileNameA	777	Exported Function
GetTempFileNameW	778	Exported Function
GetTempPathA	779	Exported Function
GetTargetPlatformContext	776	Exported Function
GetSystemWow64Directory2W	773	Exported Function
GetSystemWow64DirectoryA	774	Exported Function
GetSystemWow64DirectoryW	775	Exported Function
GetSystemTimeAdjustment	765	Exported Function
GetSystemFileCacheSize	755	Exported Function
GetSystemFirmwareTable	756	Exported Function
GetSystemInfo	757	Exported Function
GetSystemDirectoryW	754	Exported Function
GetSystemDefaultLocaleName	751	Exported Function
GetSystemDefaultUILanguage	752	Exported Function
GetSystemDirectoryA	753	Exported Function
GetSystemPreferredUILanguages	762	Exported Function
GetSystemStateRootFolder	763	Exported Function
GetSystemTime	764	Exported Function
GetSystemMetadataPathForPackageFamily	761	Exported Function
GetSystemLeapSecondInformation	758	Exported Function
GetSystemMetadataPath	759	Exported Function
GetSystemMetadataPathForPackage	760	Exported Function
GetTempPathW	780	Exported Function
GetTimeFormatW	800	Exported Function
GetTimeZoneInformation	801	Exported Function
GetTimeZoneInformationForYear	802	Exported Function
GetTimeFormatEx	799	Exported Function
GetTickCount	796	Exported Function
GetTickCount64	797	Exported Function
GetTimeFormatA	798	Exported Function
GetUILanguageInfo	807	Exported Function
GetUnicodeStringToEightBitSizeRoutine	808	Exported Function
GetUnicodeStringToEightBitStringRoutine	809	Exported Function
GetTraceLoggerHandle	806	Exported Function
GetTokenInformation	803	Exported Function
GetTraceEnableFlags	804	Exported Function
GetTraceEnableLevel	805	Exported Function
GetThreadUILanguage	795	Exported Function
GetThreadId	786	Exported Function
GetThreadIdealProcessorEx	787	Exported Function
GetThreadInformation	788	Exported Function
GetThreadGroupAffinity	784	Exported Function
GetThreadContext	781	Exported Function
GetThreadDescription	782	Exported Function
GetThreadErrorMode	783	Exported Function
GetThreadPriorityBoost	792	Exported Function
GetThreadSelectedCpuSets	793	Exported Function
GetThreadTimes	794	Exported Function
GetThreadPriority	791	Exported Function
GetThreadIOPendingFlag	785	Exported Function
GetThreadLocale	789	Exported Function
GetThreadPreferredUILanguages	790	Exported Function
GetQueuedCompletionStatusEx	711	Exported Function
GetRegistryExtensionFlags	712	Exported Function
GetRegistryValueWithFallbackW	713	Exported Function
GetQueuedCompletionStatus	710	Exported Function
GetPtrCalDataArray	707	Exported Function
GetPublisherCacheFolder	708	Exported Function
GetPublisherRootFolder	709	Exported Function
GetSecurityDescriptorGroup	718	Exported Function
GetSecurityDescriptorLength	719	Exported Function
GetSecurityDescriptorOwner	720	Exported Function
GetSecurityDescriptorDacl	717	Exported Function
GetRoamingLastObservedChangeTime	714	Exported Function
GetSecureSystemAppDataFolder	715	Exported Function
GetSecurityDescriptorControl	716	Exported Function
GetPtrCalData	706	Exported Function
GetProcessorSystemCycleTime	702	Exported Function
GetProcessPreferredUILanguages	696	Exported Function
GetProcessPriorityBoost	697	Exported Function
GetProcessMitigationPolicy	695	Exported Function
GetProcessImageFileNameW	692	Exported Function
GetProcessInformation	693	Exported Function
GetProcessMemoryInfo	694	Exported Function
GetProductInfo	703	Exported Function
GetProtocolAumid	704	Exported Function
GetProtocolProperty	705	Exported Function
GetProcessWorkingSetSizeEx	701	Exported Function
GetProcessShutdownParameters	698	Exported Function
GetProcessTimes	699	Exported Function
GetProcessVersion	700	Exported Function
GetSecurityDescriptorRMControl	721	Exported Function
GetStringScripts	741	Exported Function
GetStringTableEntry	742	Exported Function
GetStringTypeA	743	Exported Function
GetStdHandle	740	Exported Function
GetStateRootFolderBase	737	Exported Function
GetStateSettingsFolder	738	Exported Function
GetStateVersion	739	Exported Function
GetSystemCpuSetInformation	748	Exported Function
GetSystemDefaultLangID	750	Exported Function
GetSystemDefaultLCID	749	Exported Function
GetSystemAppDataKey	747	Exported Function
GetStringTypeExW	744	Exported Function
GetStringTypeW	745	Exported Function
GetSystemAppDataFolder	746	Exported Function
GetStateRootFolder	736	Exported Function
GetSidIdentifierAuthority	726	Exported Function
GetSidLengthRequired	727	Exported Function
GetSidSubAuthority	728	Exported Function
GetShortPathNameW	725	Exported Function
GetSecurityDescriptorSacl	722	Exported Function
GetSerializedAtomBytes	723	Exported Function
GetSharedLocalFolder	724	Exported Function
GetStartupInfoW	733	Exported Function
GetStateContainerDepth	734	Exported Function
GetStateFolder	735	Exported Function
GetStagedPackagePathByFullName2	732	Exported Function
GetSidSubAuthorityCount	729	Exported Function
GetStagedPackageOrigin	730	Exported Function
GetStagedPackagePathByFullName	731	Exported Function
GetUserDefaultGeoName	810	Exported Function
InterlockedPushEntrySList	887	Exported Function
InterlockedPushListSList	888	Exported Function
InterlockedPushListSListEx	889	Exported Function
InterlockedPopEntrySList	886	Exported Function
InitOnceInitialize	868	Exported Function
InstallELAMCertificateInfo	884	Exported Function
InterlockedFlushSList	885	Exported Function
Internal_EnumSystemLanguageGroups	895	Exported Function
Internal_EnumSystemLocales	896	Exported Function
Internal_EnumTimeFormats	897	Exported Function
Internal_EnumSystemCodePages	894	Exported Function
Internal_EnumCalendarInfo	891	Exported Function
Internal_EnumDateFormats	892	Exported Function
Internal_EnumLanguageGroupLocales	893	Exported Function
InitOnceExecuteOnce	867	Exported Function
InitializeEnclave	876	Exported Function
InitializeProcessForWsWatch	878	Exported Function
InitializeProcThreadAttributeList	877	Exported Function
InitializeCriticalSectionEx	875	Exported Function
InitializeContext2	872	Exported Function
InitializeCriticalSection	873	Exported Function
InitializeCriticalSectionAndSpinCount	874	Exported Function
InitializeSynchronizationBarrier	883	Exported Function
InitOnceBeginInitialize	865	Exported Function
InitOnceComplete	866	Exported Function
InitializeSRWLock	880	Exported Function
InitializeSecurityDescriptor	881	Exported Function
InitializeSid	882	Exported Function
InitializeSListHead	879	Exported Function
Internal_EnumUILanguages	898	Exported Function
IsCharUpperA	917	Exported Function
IsCharUpperW	918	Exported Function
IsCharXDigitW	919	Exported Function
IsCharSpaceW	916	Exported Function
IsCharLowerW	913	Exported Function
IsCharPunctW	914	Exported Function
IsCharSpaceA	915	Exported Function
IsDeveloperModePolicyApplied	924	Exported Function
IsEnclaveTypeSupported	925	Exported Function
IsInternetESCEnabled	926	Exported Function
IsDeveloperModeEnabled	923	Exported Function
IsDBCSLeadByte	920	Exported Function
IsDBCSLeadByteEx	921	Exported Function
IsDebuggerPresent	922	Exported Function
IsCharLowerA	912	Exported Function
InternetTimeToSystemTimeW	902	Exported Function
InvalidateAppModelVersionCache	903	Exported Function
IsApiSetImplemented	904	Exported Function
InternetTimeToSystemTimeA	901	Exported Function
InternalLcidToName	890	Exported Function
InternetTimeFromSystemTimeA	899	Exported Function
InternetTimeFromSystemTimeW	900	Exported Function
IsCharBlankW	909	Exported Function
IsCharCntrlW	910	Exported Function
IsCharDigitW	911	Exported Function
IsCharAlphaW	908	Exported Function
IsCharAlphaA	905	Exported Function
IsCharAlphaNumericA	906	Exported Function
IsCharAlphaNumericW	907	Exported Function
GetWindowsAccountDomainSid	830	Exported Function
GetWindowsDirectoryA	831	Exported Function
GetWindowsDirectoryW	832	Exported Function
GetVolumePathNameW	828	Exported Function
GetVolumeInformationW	826	Exported Function
GetVolumeNameForVolumeMountPointW	827	Exported Function
GetVolumePathNamesForVolumeNameW	829	Exported Function
GlobalAlloc	837	Exported Function
GlobalFree	838	Exported Function
GlobalMemoryStatusEx	839	Exported Function
GetXStateFeaturesMask	836	Exported Function
GetWriteWatch	833	Exported Function
GetWsChanges	834	Exported Function
GetWsChangesEx	835	Exported Function
GetVolumeInformationByHandleW	825	Exported Function
GetUserGeoID	815	Exported Function
GetUserInfo	816	Exported Function
GetUserInfoWord	817	Exported Function
GetUserDefaultUILanguage	814	Exported Function
GetUserDefaultLangID	812	Exported Function
GetUserDefaultLCID	811	Exported Function
GetUserDefaultLocaleName	813	Exported Function
GetVersionExA	822	Exported Function
GetVersionExW	823	Exported Function
GetVolumeInformationA	824	Exported Function
GetVersion	821	Exported Function
GetUserOverrideString	818	Exported Function
GetUserOverrideWord	819	Exported Function
GetUserPreferredUILanguages	820	Exported Function
GuardCheckLongJumpTarget	840	Exported Function
IdnToNameprepUnicode	858	Exported Function
IdnToUnicode	859	Exported Function
ImpersonateAnonymousToken	860	Exported Function
IdnToAscii	857	Exported Function
HeapWalk	856	Exported Function
hgets	1882	Exported Function
hwprintf	1883	Exported Function
InitializeAcl	869	Exported Function
InitializeConditionVariable	870	Exported Function
InitializeContext	871	Exported Function
IncrementPackageStatusVersion	864	Exported Function
ImpersonateLoggedOnUser	861	Exported Function
ImpersonateNamedPipeClient	862	Exported Function
ImpersonateSelf	863	Exported Function
HeapValidate	855	Exported Function
HeapCreate	845	Exported Function
HeapDestroy	846	Exported Function
HeapFree	847	Exported Function
HeapCompact	844	Exported Function
HashData	842	Exported Function
HasPolicyForegroundProcessingCompletedInternal	841	Exported Function
HeapAlloc	843	Exported Function
HeapSize	852	Exported Function
HeapSummary	853	Exported Function
HeapUnlock	854	Exported Function
HeapSetInformation	851	Exported Function
HeapLock	848	Exported Function
HeapQueryInformation	849	Exported Function
HeapReAlloc	850	Exported Function
GetEffectivePackageStatusForUser	533	Exported Function
GetEffectivePackageStatusForUserSid	534	Exported Function
GetEightBitStringToUnicodeSizeRoutine	535	Exported Function
GetDynamicTimeZoneInformationEffectiveYears	532	Exported Function
GetDriveTypeW	529	Exported Function
GetDurationFormatEx	530	Exported Function
GetDynamicTimeZoneInformation	531	Exported Function
GetEnvironmentStringsW	540	Exported Function
GetEnvironmentVariableA	541	Exported Function
GetEnvironmentVariableW	542	Exported Function
GetEnvironmentStringsA	539	Exported Function
GetEightBitStringToUnicodeStringRoutine	536	Exported Function
GetEnabledXStateFeatures	537	Exported Function
GetEnvironmentStrings	538	Exported Function
GetDriveTypeA	528	Exported Function
GetDeviceDriverBaseNameA	518	Exported Function
GetDeviceDriverBaseNameW	519	Exported Function
GetDeviceDriverFileNameA	520	Exported Function
GetDateFormatW	517	Exported Function
GetCurrentThreadStackLimits	514	Exported Function
GetDateFormatA	515	Exported Function
GetDateFormatEx	516	Exported Function
GetDiskFreeSpaceW	525	Exported Function
GetDiskSpaceInformationA	526	Exported Function
GetDiskSpaceInformationW	527	Exported Function
GetDiskFreeSpaceExW	524	Exported Function
GetDeviceDriverFileNameW	521	Exported Function
GetDiskFreeSpaceA	522	Exported Function
GetDiskFreeSpaceExA	523	Exported Function
GetEraNameCountedString	543	Exported Function
GetFileTime	563	Exported Function
GetFileType	564	Exported Function
GetFileVersionInfoA	565	Exported Function
GetFileSizeEx	562	Exported Function
GetFileMUIPath	559	Exported Function
GetFileSecurityW	560	Exported Function
GetFileSize	561	Exported Function
GetFileVersionInfoSizeExA	570	Exported Function
GetFileVersionInfoSizeExW	571	Exported Function
GetFileVersionInfoSizeW	572	Exported Function
GetFileVersionInfoSizeA	569	Exported Function
GetFileVersionInfoByHandle	566	Exported Function
GetFileVersionInfoExA	567	Exported Function
GetFileVersionInfoExW	568	Exported Function
GetFileMUIInfo	558	Exported Function
GetExtensionProgIds	548	Exported Function
GetExtensionProperty	549	Exported Function
GetExtensionProperty2	550	Exported Function
GetExtensionApplicationUserModelId	547	Exported Function
GetErrorMode	544	Exported Function
GetExitCodeProcess	545	Exported Function
GetExitCodeThread	546	Exported Function
GetFileAttributesW	555	Exported Function
GetFileInformationByHandle	556	Exported Function
GetFileInformationByHandleEx	557	Exported Function
GetFileAttributesExW	554	Exported Function
GetFallbackDisplayName	551	Exported Function
GetFileAttributesA	552	Exported Function
GetFileAttributesExA	553	Exported Function
GetConsoleProcessList	478	Exported Function
GetConsoleScreenBufferInfo	479	Exported Function
GetConsoleScreenBufferInfoEx	480	Exported Function
GetConsoleOutputCP	477	Exported Function
GetConsoleMode	474	Exported Function
GetConsoleOriginalTitleA	475	Exported Function
GetConsoleOriginalTitleW	476	Exported Function
GetCPFileNameFromRegistry	432	Exported Function
GetCPHashNode	433	Exported Function
GetCPInfo	434	Exported Function
GetConsoleWindow	484	Exported Function
GetConsoleSelectionInfo	481	Exported Function
GetConsoleTitleA	482	Exported Function
GetConsoleTitleW	483	Exported Function
GetConsoleInputExeNameW	473	Exported Function
GetConsoleCommandHistoryA	464	Exported Function
GetConsoleCommandHistoryLengthA	465	Exported Function
GetConsoleCommandHistoryLengthW	466	Exported Function
GetConsoleAliasW	458	Exported Function
GetConsoleAliasExesLengthA	455	Exported Function
GetConsoleAliasExesLengthW	456	Exported Function
GetConsoleAliasExesW	457	Exported Function
GetConsoleFontSize	470	Exported Function
GetConsoleHistoryInfo	471	Exported Function
GetConsoleInputExeNameA	472	Exported Function
GetConsoleDisplayMode	469	Exported Function
GetConsoleCommandHistoryW	467	Exported Function
GetConsoleCP	463	Exported Function
GetConsoleCursorInfo	468	Exported Function
GetCPInfoExW	435	Exported Function
GetCurrentPackagePath2	504	Exported Function
GetCurrentPackageResourcesContext	505	Exported Function
GetCurrentPackageSecurityContext	506	Exported Function
GetCurrentPackagePath	503	Exported Function
GetCurrentPackageInfo	500	Exported Function
GetCurrentPackageInfo2	501	Exported Function
GetCurrentPackageInfo3	502	Exported Function
GetCurrentTargetPlatformContext	511	Exported Function
GetCurrentThread	512	Exported Function
GetCurrentThreadId	513	Exported Function
GetCurrentProcessorNumberEx	510	Exported Function
GetCurrentProcess	507	Exported Function
GetCurrentProcessId	508	Exported Function
GetCurrentProcessorNumber	509	Exported Function
GetCurrentPackageId	499	Exported Function
GetCurrentConsoleFont	489	Exported Function
GetCurrentConsoleFontEx	490	Exported Function
GetCurrentDirectoryA	491	Exported Function
GetCurrentApplicationUserModelId	488	Exported Function
GetCurrencyFormatEx	485	Exported Function
GetCurrencyFormatW	486	Exported Function
GetCurrentActCtx	487	Exported Function
GetCurrentPackageFamilyName	496	Exported Function
GetCurrentPackageFullName	497	Exported Function
GetCurrentPackageGlobalizationContext	498	Exported Function
GetCurrentPackageContext	495	Exported Function
GetCurrentDirectoryW	492	Exported Function
GetCurrentPackageApplicationContext	493	Exported Function
GetCurrentPackageApplicationResourcesContext	494	Exported Function
GetFileVersionInfoW	573	Exported Function
GetPackageId	652	Exported Function
GetPackageInfo	653	Exported Function
GetPackageInfo2	654	Exported Function
GetPackageGlobalizationProperty	651	Exported Function
GetPackageFullName	648	Exported Function
GetPackageFullNameFromToken	649	Exported Function
GetPackageGlobalizationContext	650	Exported Function
GetPackagePathByFullName	659	Exported Function
GetPackagePathByFullName2	660	Exported Function
GetPackagePathOnVolume	661	Exported Function
GetPackagePath	658	Exported Function
GetPackageInfo3	655	Exported Function
GetPackageInstallTime	656	Exported Function
GetPackageOSMaxVersionTested	657	Exported Function
GetPackageFamilyNameFromToken	647	Exported Function
GetOverlappedResult	637	Exported Function
GetOverlappedResultEx	638	Exported Function
GetPackageApplicationContext	639	Exported Function
GetOsSafeBootMode	636	Exported Function
GetNumberOfConsoleMouseButtons	633	Exported Function
GetOEMCP	634	Exported Function
GetOsManufacturingMode	635	Exported Function
GetPackageContext	644	Exported Function
GetPackageFamilyName	645	Exported Function
GetPackageFamilyNameFromProgId	646	Exported Function
GetPackageApplicationResourcesContext	643	Exported Function
GetPackageApplicationIds	640	Exported Function
GetPackageApplicationProperty	641	Exported Function
GetPackageApplicationPropertyString	642	Exported Function
GetPackageProperty	662	Exported Function
GetProcAddress	682	Exported Function
GetProcAddressForCaller	683	Exported Function
GetProcessDefaultCpuSets	684	Exported Function
GetPrivateObjectSecurity	681	Exported Function
GetPhysicallyInstalledSystemMemory	678	Exported Function
GetPreviousFgPolicyRefreshInfoInternal	679	Exported Function
GetPriorityClass	680	Exported Function
GetProcessId	689	Exported Function
GetProcessIdOfThread	690	Exported Function
GetProcessImageFileNameA	691	Exported Function
GetProcessHeaps	688	Exported Function
GetProcessGroupAffinity	685	Exported Function
GetProcessHandleCount	686	Exported Function
GetProcessHeap	687	Exported Function
GetPersistedRegistryValueW	677	Exported Function
GetPackageSecurityContext	666	Exported Function
GetPackageSecurityProperty	667	Exported Function
GetPackageStatus	668	Exported Function
GetPackagesByPackageFamily	673	Exported Function
GetPackagePropertyString	663	Exported Function
GetPackageResourcesContext	664	Exported Function
GetPackageResourcesProperty	665	Exported Function
GetPerformanceInfo	674	Exported Function
GetPersistedFileLocationW	675	Exported Function
GetPersistedRegistryLocationW	676	Exported Function
GetPackageVolumeSisPath	672	Exported Function
GetPackageStatusForUser	669	Exported Function
GetPackageStatusForUserSid	670	Exported Function
GetPackageTargetPlatformProperty	671	Exported Function
GetLocaleInfoA	594	Exported Function
GetLocaleInfoEx	595	Exported Function
GetLocaleInfoHelper	596	Exported Function
GetLengthSid	592	Exported Function
GetLargePageMinimum	589	Exported Function
GetLargestConsoleWindowSize	590	Exported Function
GetLastError	591	Exported Function
GetLogicalProcessorInformation	600	Exported Function
GetLogicalProcessorInformationEx	601	Exported Function
GetLongPathNameA	602	Exported Function
GetLogicalDriveStringsW	598	Exported Function
GetLocaleInfoW	597	Exported Function
GetLocalTime	593	Exported Function
GetLogicalDrives	599	Exported Function
GetKernelObjectSecurity	588	Exported Function
GetGamingDeviceModelInformation	580	Exported Function
GetGeoInfoEx	581	Exported Function
GetGeoInfoW	582	Exported Function
GetFullPathNameW	577	Exported Function
GetFinalPathNameByHandleA	574	Exported Function
GetFinalPathNameByHandleW	575	Exported Function
GetFullPathNameA	576	Exported Function
GetIntegratedDisplaySize	585	Exported Function
GetIsEdpEnabled	586	Exported Function
GetIsWdagEnabled	587	Exported Function
GetHivePath	584	Exported Function
GetGPOListInternalA	578	Exported Function
GetGPOListInternalW	579	Exported Function
GetHandleInformation	583	Exported Function
GetLongPathNameW	603	Exported Function
GetNativeSystemInfo	625	Exported Function
GetNextFgPolicyRefreshInfoInternal	626	Exported Function
GetNLSVersion	618	Exported Function
GetNamedPipeInfo	624	Exported Function
GetNamedPipeAttribute	621	Exported Function
GetNamedPipeClientComputerNameW	622	Exported Function
GetNamedPipeHandleStateW	623	Exported Function
GetNumberFormatEx	630	Exported Function
GetNumberFormatW	631	Exported Function
GetNumberOfConsoleInputEvents	632	Exported Function
GetNumaProximityNodeEx	629	Exported Function
GetNLSVersionEx	619	Exported Function
GetNumaHighestNodeNumber	627	Exported Function
GetNumaNodeProcessorMaskEx	628	Exported Function
GetNamedLocaleHashNode	620	Exported Function
GetModuleBaseNameW	608	Exported Function
GetModuleFileNameA	609	Exported Function
GetModuleFileNameExA	610	Exported Function
GetModuleBaseNameA	607	Exported Function
GetMappedFileNameA	604	Exported Function
GetMappedFileNameW	605	Exported Function
GetMemoryErrorHandlingCapabilities	606	Exported Function
GetModuleHandleExW	615	Exported Function
GetModuleHandleW	616	Exported Function
GetModuleInformation	617	Exported Function
GetModuleHandleExA	614	Exported Function
GetModuleFileNameExW	611	Exported Function
GetModuleFileNameW	612	Exported Function
GetModuleHandleA	613	Exported Function

Signature

• Status: Signature verified.
• Serial: 3300000266BD1580EFA75CD6D3000000000266
• Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: Kernelbase.dll.mui
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.19041.388 (WinBuild.160101.0800)
• Product Version: 10.0.19041.388
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 64-bit

File Scan

• VirusTotal Detections: 0/65
• VirusTotal Link: https://www.virustotal.com/gui/file/d42c04dd7f8c78f7fd6e3508cada50c077b5485871adb76fcda98be46e0fc9ac/detection/

Possible Misuse

The following table contains possible examples of KernelBase.dll being misused. While KernelBase.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source	Source File	Example	License
sigma	win_exploit_cve_2021_1675_printspooler_operational.yml	- 'UNIDRV.DLL, kernelbase.dll, '	DRL 1.0
sigma	proc_access_win_in_memory_assembly_execution.yml	description: Detects the access to processes by other suspicious processes which have reflectively loaded libraries in their memory space. An example is SilentTrinity C2 behaviour. Generally speaking, when Sysmon EventID 10 cannot reference a stack call to a dll loaded from disk (the standard way), it will display "UNKNOWN" as the module name. Usually this means the stack call points to a module that was reflectively loaded in memory. Adding to this, it is not common to see such few calls in the stack (ntdll.dll --> kernelbase.dll --> unknown) which essentially means that most of the functions required by the process to execute certain routines are already present in memory, not requiring any calls to external libraries. The latter should also be considered suspicious.	DRL 1.0
sigma	proc_access_win_in_memory_assembly_execution.yml	- '\|C:\WINDOWS\System32\KERNELBASE.dll+'	DRL 1.0
sigma	proc_access_win_lazagne_cred_dump_lsass_access.yml	- '\|C:\\Windows\\System32\\KERNELBASE.dll+'	DRL 1.0
sigma	proc_access_win_pypykatz_cred_dump_lsass_access.yml	- 'C:\Windows\System32\KERNELBASE.dll+'	DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.