KernelBase.dll

• File Path: C:\Windows\SysWOW64\KernelBase.dll
• Description: Windows NT BASE API Client DLL

Hashes

Type	Hash
MD5	8D91EA4E7B60075F35BDC3E548F3812B
SHA1	E163A566F70CBE019DCA309F8CC2B0A2C3A7052F
SHA256	92EC87598325686FC3B9EDFA8714A2996B6E147D830FA4FCAC313FCD16B6873E
SHA384	05A08AF918B43B0947C998024BF65CAE13A1809110A651886C7C0CFC2BB0C1F42D0D4463349D98A127CD152C6E005588
SHA512	22C917642F3150E9FFE6EB984B1A0A12E5BA715FEC78DA7A66618CC3CD9C5EB8C04D2A14AFDC57037F7872BD908E0BE22F3D167E3C18E3B686775446DE146F5F
SSDEEP	49152:iUWDm0SFRLkR9rqY6d/NgpTt4ZeKnwnMOCrQpkNR/gOvP:xY61uhLIvP
IMP	08BFE6FD8533F72EF1C730B262EBD7BD
PESHA1	A2938C55A7B3FC6B48F0097D1E65D5F7696FF690
PE256	2B8AC5C6FE16A41EEE8ABBBEC50EC13FD47B4537F0F9EBEF0B94AEB62127E06A

DLL Exports:

Function Name	Ordinal	Type
PerfDeleteInstance	1236	Exported Function
PerfIncrementULongCounterValue	1237	Exported Function
PerfIncrementULongLongCounterValue	1238	Exported Function
PerfDecrementULongLongCounterValue	1235	Exported Function
PeekNamedPipe	1232	Exported Function
PerfCreateInstance	1233	Exported Function
PerfDecrementULongCounterValue	1234	Exported Function
PerfSetULongLongCounterValue	1243	Exported Function
PerfStartProvider	1244	Exported Function
PerfStartProviderEx	1245	Exported Function
PerfSetULongCounterValue	1242	Exported Function
PerfQueryInstance	1239	Exported Function
PerfSetCounterRefValue	1240	Exported Function
PerfSetCounterSetInfo	1241	Exported Function
PeekConsoleInputW	1231	Exported Function
PcwIsNotifierAlive	1221	Exported Function
PcwQueryCounterSetSecurity	1222	Exported Function
PcwReadNotificationData	1223	Exported Function
PcwEnumerateInstances	1220	Exported Function
PcwCreateNotifier	1217	Exported Function
PcwCreateQuery	1218	Exported Function
PcwDisconnectCounterSet	1219	Exported Function
PcwSetCounterSetSecurity	1228	Exported Function
PcwSetQueryItemUserData	1229	Exported Function
PeekConsoleInputA	1230	Exported Function
PcwSendStatelessNotification	1227	Exported Function
PcwRegisterCounterSet	1224	Exported Function
PcwRemoveQueryItem	1225	Exported Function
PcwSendNotification	1226	Exported Function
PerfStopProvider	1246	Exported Function
PsmIsValidKey	1266	Exported Function
PssCaptureSnapshot	1267	Exported Function
PssDuplicateSnapshot	1268	Exported Function
PsmIsDynamicKey	1265	Exported Function
PsmGetKeyFromToken	1262	Exported Function
PsmGetPackageFullNameFromKey	1263	Exported Function
PsmIsChildKey	1264	Exported Function
PssWalkMarkerGetPosition	1273	Exported Function
PssWalkMarkerSeekToBeginning	1274	Exported Function
PssWalkMarkerSetPosition	1275	Exported Function
PssWalkMarkerFree	1272	Exported Function
PssFreeSnapshot	1269	Exported Function
PssQuerySnapshot	1270	Exported Function
PssWalkMarkerCreate	1271	Exported Function
PsmGetKeyFromProcess	1261	Exported Function
PrivilegeCheck	1251	Exported Function
PrivilegedServiceAuditAlarmW	1252	Exported Function
ProcessIdToSessionId	1253	Exported Function
PrivCopyFileExW	1250	Exported Function
PoolPerAppKeyStateInternal	1247	Exported Function
PostQueuedCompletionStatus	1248	Exported Function
PrefetchVirtualMemory	1249	Exported Function
PsmEqualPackage	1258	Exported Function
PsmGetApplicationNameFromKey	1259	Exported Function
PsmGetDynamicIdFromKey	1260	Exported Function
PsmEqualApplication	1257	Exported Function
ProductIdFromPackageFamilyName	1254	Exported Function
PsmCreateKey	1255	Exported Function
PsmCreateKeyWithDynamicId	1256	Exported Function
PathIsURLA	1177	Exported Function
PathIsURLW	1178	Exported Function
PathIsValidCharA	1179	Exported Function
PathIsUNCW	1176	Exported Function
PathIsUNCServerShareA	1173	Exported Function
PathIsUNCServerShareW	1174	Exported Function
PathIsUNCServerW	1175	Exported Function
PathMatchSpecW	1184	Exported Function
PathParseIconLocationA	1185	Exported Function
PathParseIconLocationW	1186	Exported Function
PathMatchSpecExW	1183	Exported Function
PathIsValidCharW	1180	Exported Function
PathMatchSpecA	1181	Exported Function
PathMatchSpecExA	1182	Exported Function
PathIsUNCServerA	1172	Exported Function
PathIsPrefixA	1162	Exported Function
PathIsPrefixW	1163	Exported Function
PathIsRelativeA	1164	Exported Function
PathIsLFNFileSpecW	1161	Exported Function
PathIsFileSpecA	1158	Exported Function
PathIsFileSpecW	1159	Exported Function
PathIsLFNFileSpecA	1160	Exported Function
PathIsSameRootW	1169	Exported Function
PathIsUNCA	1170	Exported Function
PathIsUNCEx	1171	Exported Function
PathIsSameRootA	1168	Exported Function
PathIsRelativeW	1165	Exported Function
PathIsRootA	1166	Exported Function
PathIsRootW	1167	Exported Function
PathQuoteSpacesA	1187	Exported Function
PathStripToRootA	1207	Exported Function
PathStripToRootW	1208	Exported Function
PathUnExpandEnvStringsA	1209	Exported Function
PathStripPathW	1206	Exported Function
PathSkipRootA	1203	Exported Function
PathSkipRootW	1204	Exported Function
PathStripPathA	1205	Exported Function
PcwClearCounterSetSecurity	1214	Exported Function
PcwCollectData	1215	Exported Function
PcwCompleteNotification	1216	Exported Function
PcwAddQueryItem	1213	Exported Function
PathUnExpandEnvStringsW	1210	Exported Function
PathUnquoteSpacesA	1211	Exported Function
PathUnquoteSpacesW	1212	Exported Function
PathSearchAndQualifyW	1202	Exported Function
PathRemoveBackslashW	1192	Exported Function
PathRemoveBlanksA	1193	Exported Function
PathRemoveBlanksW	1194	Exported Function
PathRemoveBackslashA	1191	Exported Function
PathQuoteSpacesW	1188	Exported Function
PathRelativePathToA	1189	Exported Function
PathRelativePathToW	1190	Exported Function
PathRenameExtensionA	1199	Exported Function
PathRenameExtensionW	1200	Exported Function
PathSearchAndQualifyA	1201	Exported Function
PathRemoveFileSpecW	1198	Exported Function
PathRemoveExtensionA	1195	Exported Function
PathRemoveExtensionW	1196	Exported Function
PathRemoveFileSpecA	1197	Exported Function
PssWalkSnapshot	1276	Exported Function
RegCreateKeyExW	1356	Exported Function
RegDeleteKeyExA	1357	Exported Function
RegDeleteKeyExInternalA	1358	Exported Function
RegCreateKeyExInternalW	1355	Exported Function
RegCopyTreeW	1352	Exported Function
RegCreateKeyExA	1353	Exported Function
RegCreateKeyExInternalA	1354	Exported Function
RegDeleteTreeA	1363	Exported Function
RegDeleteTreeW	1364	Exported Function
RegDeleteValueA	1365	Exported Function
RegDeleteKeyValueW	1362	Exported Function
RegDeleteKeyExInternalW	1359	Exported Function
RegDeleteKeyExW	1360	Exported Function
RegDeleteKeyValueA	1361	Exported Function
RegCloseKey	1351	Exported Function
ReadFile	1341	Exported Function
ReadFileEx	1342	Exported Function
ReadFileScatter	1343	Exported Function
ReadDirectoryChangesW	1340	Exported Function
ReadConsoleOutputW	1337	Exported Function
ReadConsoleW	1338	Exported Function
ReadDirectoryChangesExW	1339	Exported Function
RefreshPackageInfo	1348	Exported Function
RefreshPolicyExInternal	1349	Exported Function
RefreshPolicyInternal	1350	Exported Function
ReclaimVirtualMemory	1347	Exported Function
ReadProcessMemory	1344	Exported Function
ReadStateAtomValue	1345	Exported Function
ReadStateContainerValue	1346	Exported Function
RegDeleteValueW	1366	Exported Function
RegKrnGetHKEY_ClassesRootAddress	1379	Exported Function
RegKrnGetTermsrvRegistryExtensionFlags	1380	Exported Function
RegKrnResetAppKeyLoaded	1381	Exported Function
RegKrnGetClassesEnumTableAddressInternal	1378	Exported Function
RegisterWaitForSingleObjectEx	1420	Exported Function
RegKrnGetAppKeyEventAddressInternal	1376	Exported Function
RegKrnGetAppKeyLoaded	1377	Exported Function
RegLoadKeyA	1386	Exported Function
RegLoadKeyW	1387	Exported Function
RegLoadMUIStringA	1388	Exported Function
RegLoadAppKeyW	1385	Exported Function
RegKrnSetDllHasThreadStateGlobal	1382	Exported Function
RegKrnSetTermsrvRegistryExtensionFlags	1383	Exported Function
RegLoadAppKeyA	1384	Exported Function
RegisterTraceGuidsW	1419	Exported Function
RegEnumValueW	1371	Exported Function
RegFlushKey	1372	Exported Function
RegGetKeySecurity	1373	Exported Function
RegEnumValueA	1370	Exported Function
RegDisablePredefinedCacheEx	1367	Exported Function
RegEnumKeyExA	1368	Exported Function
RegEnumKeyExW	1369	Exported Function
RegisterGPNotificationInternal	1416	Exported Function
RegisterStateChangeNotification	1417	Exported Function
RegisterStateLock	1418	Exported Function
RegisterBadMemoryNotification	1415	Exported Function
RegGetValueA	1374	Exported Function
RegGetValueW	1375	Exported Function
RegisterApplicationRestart	1414	Exported Function
QueryPerformanceCounter	1296	Exported Function
QueryPerformanceFrequency	1297	Exported Function
QueryProcessAffinityUpdateMode	1298	Exported Function
QueryOptionalDelayLoadedAPI	1295	Exported Function
QueryInterruptTime	1292	Exported Function
QueryInterruptTimePrecise	1293	Exported Function
QueryMemoryResourceNotification	1294	Exported Function
QueryStateContainerCreatedNew	1303	Exported Function
QueryStateContainerItemInfo	1304	Exported Function
QueryThreadCycleTime	1305	Exported Function
QueryStateAtomValueInfo	1302	Exported Function
QueryProcessCycleTime	1299	Exported Function
QueryProtectedPolicy	1300	Exported Function
QuerySecurityAccessMask	1301	Exported Function
QueryIdleProcessorCycleTimeEx	1291	Exported Function
QISearch	1281	Exported Function
QueryActCtxSettingsW	1282	Exported Function
QueryActCtxW	1283	Exported Function
PurgeComm	1280	Exported Function
PublisherFromPackageFullName	1278	Exported Function
PublishStateChangeNotification	1277	Exported Function
PulseEvent	1279	Exported Function
QueryFullProcessImageNameW	1288	Exported Function
QueryGlobalizationUserSettingsStatus	1289	Exported Function
QueryIdleProcessorCycleTime	1290	Exported Function
QueryFullProcessImageNameA	1287	Exported Function
QueryAuxiliaryCounterFrequency	1284	Exported Function
QueryDepthSList	1285	Exported Function
QueryDosDeviceW	1286	Exported Function
QueryThreadpoolStackInformation	1306	Exported Function
RaiseFailFastException	1326	Exported Function
ReadConsoleA	1328	Exported Function
ReadConsoleInputA	1329	Exported Function
RaiseException	1325	Exported Function
QuirkIsEnabledForPackage4	1321	Exported Function
QuirkIsEnabledForProcess	1323	Exported Function
RaiseCustomSystemEventTrigger	1324	Exported Function
ReadConsoleOutputAttribute	1334	Exported Function
ReadConsoleOutputCharacterA	1335	Exported Function
ReadConsoleOutputCharacterW	1336	Exported Function
ReadConsoleOutputA	1333	Exported Function
ReadConsoleInputExA	1330	Exported Function
ReadConsoleInputExW	1331	Exported Function
ReadConsoleInputW	1332	Exported Function
QuirkIsEnabledForPackage3	1320	Exported Function
QueryWorkingSetEx	1311	Exported Function
QueueUserAPC	1312	Exported Function
QueueUserWorkItem	1313	Exported Function
QueryWorkingSet	1310	Exported Function
QueryUnbiasedInterruptTime	1307	Exported Function
QueryUnbiasedInterruptTimePrecise	1308	Exported Function
QueryVirtualMemoryInformation	1309	Exported Function
QuirkIsEnabled3	1317	Exported Function
QuirkIsEnabledForPackage	1322	Exported Function
QuirkIsEnabledForPackage2	1319	Exported Function
QuirkIsEnabled2	1316	Exported Function
QuirkGetData	1315	Exported Function
QuirkGetData2	1314	Exported Function
QuirkIsEnabled	1318	Exported Function
LocaleNameToLCID	1019	Exported Function
LocalFileTimeToFileTime	1012	Exported Function
LocalFileTimeToLocalSystemTime	1013	Exported Function
LocalAlloc	1011	Exported Function
LoadStringBaseExW	1008	Exported Function
LoadStringByReference	1009	Exported Function
LoadStringW	1010	Exported Function
LocalUnlock	1018	Exported Function
LocateXStateFeature	1020	Exported Function
LockFile	1021	Exported Function
LocalSystemTimeToLocalFileTime	1017	Exported Function
LocalFree	1014	Exported Function
LocalLock	1015	Exported Function
LocalReAlloc	1016	Exported Function
LoadStringA	1007	Exported Function
LoadAppInitDlls	997	Exported Function
LoadEnclaveData	998	Exported Function
LoadEnclaveImageA	999	Exported Function
LeaveCriticalSectionWhenCallbackReturns	996	Exported Function
LCMapStringW	993	Exported Function
LeaveCriticalPolicySectionInternal	994	Exported Function
LeaveCriticalSection	995	Exported Function
LoadLibraryW	1004	Exported Function
LoadPackagedLibrary	1005	Exported Function
LoadResource	1006	Exported Function
LoadLibraryExW	1003	Exported Function
LoadEnclaveImageW	1000	Exported Function
LoadLibraryA	1001	Exported Function
LoadLibraryExA	1002	Exported Function
LockFileEx	1022	Exported Function
MapViewOfFile	1032	Exported Function
MapViewOfFile3	1030	Exported Function
MapViewOfFile3FromApp	1031	Exported Function
MapUserPhysicalPages	1029	Exported Function
MakeSelfRelativeSD	1026	Exported Function
MapGenericMask	1027	Exported Function
MapPredefinedHandleInternal	1028	Exported Function
MoveFileExW	1037	Exported Function
MoveFileWithProgressTransactedW	1038	Exported Function
MoveFileWithProgressW	1039	Exported Function
MapViewOfFileNuma2	1036	Exported Function
MapViewOfFileEx	1033	Exported Function
MapViewOfFileExNuma	1034	Exported Function
MapViewOfFileFromApp	1035	Exported Function
MakeAbsoluteSD2	1024	Exported Function
lstrcmpiA	1890	Exported Function
lstrcmpiW	1891	Exported Function
lstrcmpW	1888	Exported Function
lstrcmpi	1889	Exported Function
LockResource	1023	Exported Function
lstrcmp	1886	Exported Function
lstrcmpA	1887	Exported Function
lstrlenA	1896	Exported Function
lstrlenW	1897	Exported Function
MakeAbsoluteSD	1025	Exported Function
lstrlen	1895	Exported Function
lstrcpyn	1892	Exported Function
lstrcpynA	1893	Exported Function
lstrcpynW	1894	Exported Function
IsValidNLSVersion	954	Exported Function
IsValidRelativeSecurityDescriptor	955	Exported Function
IsValidSecurityDescriptor	956	Exported Function
IsValidLocaleName	953	Exported Function
IsValidCodePage	950	Exported Function
IsValidLanguageGroup	951	Exported Function
IsValidLocale	952	Exported Function
IsWow64Process2	960	Exported Function
K32EmptyWorkingSet	962	Exported Function
K32EnumDeviceDrivers	963	Exported Function
IsWow64Process	961	Exported Function
IsValidSid	957	Exported Function
IsWellKnownSid	958	Exported Function
IsWow64GuestMachineSupported	959	Exported Function
IsValidAcl	949	Exported Function
IsProcessInJob	939	Exported Function
IsProcessorFeaturePresent	940	Exported Function
IsSideloadingEnabled	941	Exported Function
IsProcessCritical	938	Exported Function
IsNLSDefinedString	935	Exported Function
IsNormalizedString	936	Exported Function
IsOnDemandRegistrationSupportedForExtensionCategory	937	Exported Function
IsTimeZoneRedirectionEnabled	946	Exported Function
IsTokenRestricted	947	Exported Function
IsUserCetAvailableInEnvironment	948	Exported Function
IsThreadpoolTimerSet	945	Exported Function
IsSideloadingPolicyApplied	942	Exported Function
IsSyncForegroundPolicyRefresh	943	Exported Function
IsThreadAFiber	944	Exported Function
K32EnumPageFilesA	964	Exported Function
K32GetWsChanges	984	Exported Function
K32GetWsChangesEx	985	Exported Function
K32InitializeProcessForWsWatch	986	Exported Function
K32GetProcessMemoryInfo	983	Exported Function
K32GetPerformanceInfo	980	Exported Function
K32GetProcessImageFileNameA	981	Exported Function
K32GetProcessImageFileNameW	982	Exported Function
LCIDToLocaleName	990	Exported Function
LCMapStringA	991	Exported Function
LCMapStringEx	992	Exported Function
KernelbasePostInit	6	Exported Function
K32QueryWorkingSet	987	Exported Function
K32QueryWorkingSetEx	988	Exported Function
KernelBaseGetGlobalData	989	Exported Function
K32GetModuleInformation	979	Exported Function
K32GetDeviceDriverBaseNameA	969	Exported Function
K32GetDeviceDriverBaseNameW	970	Exported Function
K32GetDeviceDriverFileNameA	971	Exported Function
K32EnumProcessModulesEx	967	Exported Function
K32EnumPageFilesW	965	Exported Function
K32EnumProcesses	968	Exported Function
K32EnumProcessModules	966	Exported Function
K32GetModuleBaseNameW	976	Exported Function
K32GetModuleFileNameExA	977	Exported Function
K32GetModuleFileNameExW	978	Exported Function
K32GetModuleBaseNameA	975	Exported Function
K32GetDeviceDriverFileNameW	972	Exported Function
K32GetMappedFileNameA	973	Exported Function
K32GetMappedFileNameW	974	Exported Function
MulDiv	1040	Exported Function
PathCchAddBackslash	1118	Exported Function
PathCchAddBackslashEx	1119	Exported Function
PathCchAddExtension	1120	Exported Function
PathCanonicalizeW	1117	Exported Function
PathAppendA	1114	Exported Function
PathAppendW	1115	Exported Function
PathCanonicalizeA	1116	Exported Function
PathCchCombine	1125	Exported Function
PathCchCombineEx	1126	Exported Function
PathCchFindExtension	1127	Exported Function
PathCchCanonicalizeEx	1124	Exported Function
PathCchAppend	1121	Exported Function
PathCchAppendEx	1122	Exported Function
PathCchCanonicalize	1123	Exported Function
PathAllocCombine	1113	Exported Function
PackageSidFromProductId	1	Exported Function
ParseApplicationUserModelId	1104	Exported Function
ParseApplicationUserModelIdA	1105	Exported Function
PackageSidFromFamilyName	1103	Exported Function
PackageNameAndPublisherIdFromFamilyName	1100	Exported Function
PackageNameAndPublisherIdFromFamilyNameA	1101	Exported Function
PackageRelativeApplicationIdFromProductId	1102	Exported Function
PathAddExtensionA	1110	Exported Function
PathAddExtensionW	1111	Exported Function
PathAllocCanonicalize	1112	Exported Function
PathAddBackslashW	1109	Exported Function
ParseURLA	1106	Exported Function
ParseURLW	1107	Exported Function
PathAddBackslashA	1108	Exported Function
PathCchIsRoot	1128	Exported Function
PathFindFileNameA	1148	Exported Function
PathFindFileNameW	1149	Exported Function
PathFindNextComponentA	1150	Exported Function
PathFindExtensionW	1147	Exported Function
PathFileExistsA	1144	Exported Function
PathFileExistsW	1145	Exported Function
PathFindExtensionA	1146	Exported Function
PathGetCharTypeW	1155	Exported Function
PathGetDriveNumberA	1156	Exported Function
PathGetDriveNumberW	1157	Exported Function
PathGetCharTypeA	1154	Exported Function
PathFindNextComponentW	1151	Exported Function
PathGetArgsA	1152	Exported Function
PathGetArgsW	1153	Exported Function
PathCreateFromUrlW	1143	Exported Function
PathCchRenameExtension	1133	Exported Function
PathCchSkipRoot	1134	Exported Function
PathCchStripPrefix	1135	Exported Function
PathCchRemoveFileSpec	1132	Exported Function
PathCchRemoveBackslash	1129	Exported Function
PathCchRemoveBackslashEx	1130	Exported Function
PathCchRemoveExtension	1131	Exported Function
PathCommonPrefixW	1140	Exported Function
PathCreateFromUrlA	1141	Exported Function
PathCreateFromUrlAlloc	1142	Exported Function
PathCommonPrefixA	1139	Exported Function
PathCchStripToRoot	1136	Exported Function
PathCombineA	1137	Exported Function
PathCombineW	1138	Exported Function
ObjectPrivilegeAuditAlarmW	1060	Exported Function
OfferVirtualMemory	1061	Exported Function
OpenCommPort	1062	Exported Function
ObjectOpenAuditAlarmW	1059	Exported Function
NotifyRedirectedStringChange	1056	Exported Function
ObjectCloseAuditAlarmW	1057	Exported Function
ObjectDeleteAuditAlarmW	1058	Exported Function
OpenFileMappingW	1067	Exported Function
OpenGlobalizationUserSettingsKey	1068	Exported Function
OpenMutexW	1069	Exported Function
OpenFileMappingFromApp	1066	Exported Function
OpenEventA	1063	Exported Function
OpenEventW	1064	Exported Function
OpenFileById	1065	Exported Function
NotifyMountMgr	1055	Exported Function
NeedCurrentDirectoryForExePathW	1045	Exported Function
NlsCheckPolicy	1046	Exported Function
NlsDispatchAnsiEnumProc	1047	Exported Function
NeedCurrentDirectoryForExePathA	1044	Exported Function
MultiByteToWideChar	1041	Exported Function
NamedPipeEventEnum	1042	Exported Function
NamedPipeEventSelect	1043	Exported Function
NlsUpdateSystemLocale	1052	Exported Function
NlsValidateLocale	1053	Exported Function
NormalizeString	1054	Exported Function
NlsUpdateLocale	1051	Exported Function
NlsGetACPFromLocale	1048	Exported Function
NlsGetCacheUpdateCount	1049	Exported Function
NlsIsUserDefaultLocale	1050	Exported Function
OpenPackageInfoByFullName	1070	Exported Function
PackageFamilyNameFromFullNameA	1090	Exported Function
PackageFamilyNameFromId	1091	Exported Function
PackageFamilyNameFromIdA	1092	Exported Function
PackageFamilyNameFromFullName	1089	Exported Function
OutputDebugStringA	1086	Exported Function
OutputDebugStringW	1087	Exported Function
OverrideRoamingDataModificationTimesInRange	1088	Exported Function
PackageIdFromFullName	1097	Exported Function
PackageIdFromFullNameA	1098	Exported Function
PackageIdFromProductId	1099	Exported Function
PackageFullNameFromProductId	1096	Exported Function
PackageFamilyNameFromProductId	1093	Exported Function
PackageFullNameFromId	1094	Exported Function
PackageFullNameFromIdA	1095	Exported Function
OpenWaitableTimerW	1085	Exported Function
OpenProcessToken	1075	Exported Function
OpenRegKey	1076	Exported Function
OpenSemaphoreW	1077	Exported Function
OpenProcess	1074	Exported Function
OpenPackageInfoByFullNameForMachine	1071	Exported Function
OpenPackageInfoByFullNameForUser	1072	Exported Function
OpenPrivateNamespaceW	1073	Exported Function
OpenStateExplicitForUserSidString	1082	Exported Function
OpenThread	1083	Exported Function
OpenThreadToken	1084	Exported Function
OpenStateExplicitForUserSid	1081	Exported Function
OpenState	1078	Exported Function
OpenStateAtom	1079	Exported Function
OpenStateExplicit	1080	Exported Function
RegLoadMUIStringW	1389	Exported Function
TraceEvent	1710	Exported Function
TraceMessage	1711	Exported Function
TraceMessageVa	1712	Exported Function
TlsSetValue	1709	Exported Function
TlsAlloc	1706	Exported Function
TlsFree	1707	Exported Function
TlsGetValue	1708	Exported Function
TryEnterCriticalSection	1717	Exported Function
TrySubmitThreadpoolCallback	1718	Exported Function
TzSpecificLocalTimeToSystemTime	1719	Exported Function
TryAcquireSRWLockShared	1716	Exported Function
TransactNamedPipe	1713	Exported Function
TransmitCommChar	1714	Exported Function
TryAcquireSRWLockExclusive	1715	Exported Function
time	1898	Exported Function
SuspendThread	1696	Exported Function
SwitchToFiber	1697	Exported Function
SwitchToThread	1698	Exported Function
SubscribeWdagEnabledStateChange	1695	Exported Function
SubmitThreadpoolWork	1692	Exported Function
SubscribeEdpEnabledStateChange	1693	Exported Function
SubscribeStateChangeNotification	1694	Exported Function
TerminateProcess	1703	Exported Function
TerminateProcessOnMemoryExhaustion	1704	Exported Function
TerminateThread	1705	Exported Function
TerminateEnclave	1702	Exported Function
SystemTimeToFileTime	1699	Exported Function
SystemTimeToTzSpecificLocalTime	1700	Exported Function
SystemTimeToTzSpecificLocalTimeEx	1701	Exported Function
TzSpecificLocalTimeToSystemTimeEx	1720	Exported Function
UpdateProcThreadAttribute	1740	Exported Function
UrlApplySchemeA	1741	Exported Function
UrlApplySchemeW	1742	Exported Function
UpdatePackageStatusForUserSid	1739	Exported Function
UnsubscribeWdagEnabledStateChange	1736	Exported Function
UpdatePackageStatus	1737	Exported Function
UpdatePackageStatusForUser	1738	Exported Function
UrlCompareA	1747	Exported Function
UrlCompareW	1748	Exported Function
UrlCreateFromPathA	1749	Exported Function
UrlCombineW	1746	Exported Function
UrlCanonicalizeA	1743	Exported Function
UrlCanonicalizeW	1744	Exported Function
UrlCombineA	1745	Exported Function
UnsubscribeStateChangeNotification	1735	Exported Function
UnmapViewOfFile2	1724	Exported Function
UnmapViewOfFileEx	1726	Exported Function
UnregisterApplicationRestart	1727	Exported Function
UnmapViewOfFile	1725	Exported Function
UnhandledExceptionFilter	1721	Exported Function
UnlockFile	1722	Exported Function
UnlockFileEx	1723	Exported Function
UnregisterTraceGuids	1732	Exported Function
UnregisterWaitEx	1733	Exported Function
UnsubscribeEdpEnabledStateChange	1734	Exported Function
UnregisterStateLock	1731	Exported Function
UnregisterBadMemoryNotification	1728	Exported Function
UnregisterGPNotificationInternal	1729	Exported Function
UnregisterStateChangeNotification	1730	Exported Function
StrCmpNICA	1656	Exported Function
StrCmpNICW	1657	Exported Function
StrCmpNIW	1658	Exported Function
StrCmpNIA	1655	Exported Function
StrCmpNA	1652	Exported Function
StrCmpNCA	1653	Exported Function
StrCmpNCW	1654	Exported Function
StrCpyNXW	1663	Exported Function
StrCSpnA	1632	Exported Function
StrCSpnIA	1633	Exported Function
StrCpyNXA	1662	Exported Function
StrCmpNW	1659	Exported Function
StrCmpW	1660	Exported Function
StrCpyNW	1661	Exported Function
StrCmpLogicalW	1651	Exported Function
StrChrIA	1641	Exported Function
StrChrIW	1642	Exported Function
StrChrNIW	1643	Exported Function
StrChrA_MB	1640	Exported Function
StrCatBuffW	1637	Exported Function
StrCatChainW	1638	Exported Function
StrChrA	1639	Exported Function
StrCmpICA	1648	Exported Function
StrCmpICW	1649	Exported Function
StrCmpIW	1650	Exported Function
StrCmpCW	1647	Exported Function
StrChrNW	1644	Exported Function
StrChrW	1645	Exported Function
StrCmpCA	1646	Exported Function
StrCSpnIW	1634	Exported Function
StrStrNW	1682	Exported Function
StrStrW	1683	Exported Function
StrToInt64ExA	1684	Exported Function
StrStrNIW	1681	Exported Function
StrStrA	1678	Exported Function
StrStrIA	1679	Exported Function
StrStrIW	1680	Exported Function
StrToIntW	1689	Exported Function
StrTrimA	1690	Exported Function
StrTrimW	1691	Exported Function
StrToIntExW	1688	Exported Function
StrToInt64ExW	1685	Exported Function
StrToIntA	1686	Exported Function
StrToIntExA	1687	Exported Function
StrSpnW	1677	Exported Function
StrIsIntlEqualW	1667	Exported Function
StrPBrkA	1668	Exported Function
StrPBrkW	1669	Exported Function
StrIsIntlEqualA	1666	Exported Function
StrCSpnW	1635	Exported Function
StrDupA	1664	Exported Function
StrDupW	1665	Exported Function
StrRStrIA	1674	Exported Function
StrRStrIW	1675	Exported Function
StrSpnA	1676	Exported Function
StrRChrW	1673	Exported Function
StrRChrA	1670	Exported Function
StrRChrIA	1671	Exported Function
StrRChrIW	1672	Exported Function
UrlCreateFromPathW	1750	Exported Function
WerRegisterExcludedMemoryBlock	1829	Exported Function
WerRegisterFile	1830	Exported Function
WerRegisterMemoryBlock	1831	Exported Function
WerRegisterCustomMetadata	1828	Exported Function
WerpNotifyUseStringResource	1843	Exported Function
WerRegisterAdditionalProcess	1826	Exported Function
WerRegisterAppLocalDump	1827	Exported Function
WerUnregisterAppLocalDump	1836	Exported Function
WerUnregisterCustomMetadata	1837	Exported Function
WerUnregisterExcludedMemoryBlock	1838	Exported Function
WerUnregisterAdditionalProcess	1835	Exported Function
WerRegisterRuntimeExceptionModule	1832	Exported Function
WerSetFlags	1833	Exported Function
WerSetMaxProcessHoldMilliseconds	1834	Exported Function
WerpNotifyLoadStringResource	1842	Exported Function
WaitForThreadpoolWaitCallbacks	1816	Exported Function
WaitForThreadpoolWorkCallbacks	1817	Exported Function
WaitForUserPolicyForegroundProcessingInternal	1818	Exported Function
WaitForThreadpoolTimerCallbacks	1815	Exported Function
WaitForSingleObject	1812	Exported Function
WaitForSingleObjectEx	1813	Exported Function
WaitForThreadpoolIoCallbacks	1814	Exported Function
WakeByAddressSingle	1823	Exported Function
WakeConditionVariable	1824	Exported Function
WerGetFlags	1825	Exported Function
WakeByAddressAll	1822	Exported Function
WaitNamedPipeW	1819	Exported Function
WaitOnAddress	1820	Exported Function
WakeAllConditionVariable	1821	Exported Function
WerUnregisterFile	1839	Exported Function
WriteConsoleW	1859	Exported Function
WriteFile	1860	Exported Function
WriteFileEx	1861	Exported Function
WriteConsoleOutputW	1858	Exported Function
WriteConsoleOutputAttribute	1855	Exported Function
WriteConsoleOutputCharacterA	1856	Exported Function
WriteConsoleOutputCharacterW	1857	Exported Function
WTSGetServiceSessionId	1804	Exported Function
WTSIsServerContainer	1805	Exported Function
ZombifyActCtx	1866	Exported Function
WriteStateContainerValue	1865	Exported Function
WriteFileGather	1862	Exported Function
WriteProcessMemory	1863	Exported Function
WriteStateAtomValue	1864	Exported Function
WriteConsoleOutputA	1854	Exported Function
Wow64GetThreadContext	1846	Exported Function
Wow64RevertWow64FsRedirection	1847	Exported Function
Wow64SetThreadContext	1848	Exported Function
Wow64DisableWow64FsRedirection	1845	Exported Function
WerUnregisterMemoryBlock	1840	Exported Function
WerUnregisterRuntimeExceptionModule	1841	Exported Function
WideCharToMultiByte	1844	Exported Function
WriteConsoleA	1851	Exported Function
WriteConsoleInputA	1852	Exported Function
WriteConsoleInputW	1853	Exported Function
wprintf	1899	Exported Function
Wow64SetThreadDefaultGuestMachine	1849	Exported Function
Wow64SuspendThread	1850	Exported Function
Wow64Transition	7	Exported Function
VerifyApplicationUserModelId	1775	Exported Function
VerifyApplicationUserModelIdA	1776	Exported Function
VerifyPackageFamilyName	1777	Exported Function
VerFindFileW	1769	Exported Function
UrlUnescapeA	1766	Exported Function
UrlUnescapeW	1767	Exported Function
VerFindFileA	1768	Exported Function
VerifyPackageIdA	1782	Exported Function
VerifyPackagePublisher	1783	Exported Function
VerifyPackagePublisherA	1784	Exported Function
VerifyPackageId	1781	Exported Function
VerifyPackageFamilyNameA	1778	Exported Function
VerifyPackageFullName	1779	Exported Function
VerifyPackageFullNameA	1780	Exported Function
UrlIsW	1765	Exported Function
UrlGetLocationW	1755	Exported Function
UrlGetPartA	1756	Exported Function
UrlGetPartW	1757	Exported Function
UrlGetLocationA	1754	Exported Function
UrlEscapeA	1751	Exported Function
UrlEscapeW	1752	Exported Function
UrlFixupW	1753	Exported Function
UrlIsNoHistoryW	1762	Exported Function
UrlIsOpaqueA	1763	Exported Function
UrlIsOpaqueW	1764	Exported Function
UrlIsNoHistoryA	1761	Exported Function
UrlHashA	1758	Exported Function
UrlHashW	1759	Exported Function
UrlIsA	1760	Exported Function
VerifyPackageRelativeApplicationId	1785	Exported Function
VirtualQuery	1800	Exported Function
VirtualQueryEx	1801	Exported Function
VirtualUnlock	1802	Exported Function
VirtualProtectFromApp	1799	Exported Function
VirtualLock	1796	Exported Function
VirtualProtect	1797	Exported Function
VirtualProtectEx	1798	Exported Function
WaitForMachinePolicyForegroundProcessingInternal	1809	Exported Function
WaitForMultipleObjects	1810	Exported Function
WaitForMultipleObjectsEx	1811	Exported Function
WaitForDebugEventEx	1808	Exported Function
VirtualUnlockEx	1803	Exported Function
WaitCommEvent	1806	Exported Function
WaitForDebugEvent	1807	Exported Function
VirtualFreeEx	1795	Exported Function
VerQueryValueA	1772	Exported Function
VerQueryValueW	1773	Exported Function
VerSetConditionMask	1774	Exported Function
VerLanguageNameW	1771	Exported Function
VerifyPackageRelativeApplicationIdA	1786	Exported Function
VerifyScripts	1787	Exported Function
VerLanguageNameA	1770	Exported Function
VirtualAllocExNuma	1792	Exported Function
VirtualAllocFromApp	1793	Exported Function
VirtualFree	1794	Exported Function
VirtualAllocEx	1791	Exported Function
VirtualAlloc	1790	Exported Function
VirtualAlloc2	1788	Exported Function
VirtualAlloc2FromApp	1789	Exported Function
SetConsoleActiveScreenBuffer	1505	Exported Function
SetConsoleCP	1506	Exported Function
SetConsoleCtrlHandler	1507	Exported Function
SetComputerNameW	1504	Exported Function
SetComputerNameEx2W	1501	Exported Function
SetComputerNameExA	1502	Exported Function
SetComputerNameExW	1503	Exported Function
SetConsoleInputExeNameA	1512	Exported Function
SetConsoleInputExeNameW	1513	Exported Function
SetConsoleMode	1514	Exported Function
SetConsoleHistoryInfo	1511	Exported Function
SetConsoleCursorInfo	1508	Exported Function
SetConsoleCursorPosition	1509	Exported Function
SetConsoleDisplayMode	1510	Exported Function
SetComputerNameA	1500	Exported Function
SetAclInformation	1490	Exported Function
SetCachedSigningLevel	1491	Exported Function
SetCalendarInfoW	1492	Exported Function
SearchPathW	1489	Exported Function
ScrollConsoleScreenBufferA	1486	Exported Function
ScrollConsoleScreenBufferW	1487	Exported Function
SearchPathA	1488	Exported Function
SetCommMask	1497	Exported Function
SetCommState	1498	Exported Function
SetCommTimeouts	1499	Exported Function
SetCommConfig	1496	Exported Function
SetClientDynamicTimeZoneInformation	1493	Exported Function
SetClientTimeZoneInformation	1494	Exported Function
SetCommBreak	1495	Exported Function
SetConsoleNumberOfCommandsA	1515	Exported Function
SetEvent	1535	Exported Function
SetEventWhenCallbackReturns	1536	Exported Function
SetExtensionProperty	1537	Exported Function
SetErrorMode	1534	Exported Function
SetEnvironmentStringsW	1531	Exported Function
SetEnvironmentVariableA	1532	Exported Function
SetEnvironmentVariableW	1533	Exported Function
SetFileInformationByHandle	1542	Exported Function
SetFileIoOverlappedRange	1543	Exported Function
SetFilePointer	1544	Exported Function
SetFileAttributesW	1541	Exported Function
SetFileApisToANSI	1538	Exported Function
SetFileApisToOEM	1539	Exported Function
SetFileAttributesA	1540	Exported Function
SetEndOfFile	1530	Exported Function
SetConsoleTextAttribute	1520	Exported Function
SetConsoleTitleA	1521	Exported Function
SetConsoleTitleW	1522	Exported Function
SetConsoleScreenBufferSize	1519	Exported Function
SetConsoleNumberOfCommandsW	1516	Exported Function
SetConsoleOutputCP	1517	Exported Function
SetConsoleScreenBufferInfoEx	1518	Exported Function
SetCurrentDirectoryW	1527	Exported Function
SetDefaultDllDirectories	1528	Exported Function
SetDynamicTimeZoneInformation	1529	Exported Function
SetCurrentDirectoryA	1526	Exported Function
SetConsoleWindowInfo	1523	Exported Function
SetCriticalSectionSpinCount	1524	Exported Function
SetCurrentConsoleFontEx	1525	Exported Function
RegSetKeyValueW	1409	Exported Function
RegSetValueExA	1410	Exported Function
RegSetValueExW	1411	Exported Function
RegSetKeyValueA	1408	Exported Function
RegSaveKeyExA	1405	Exported Function
RegSaveKeyExW	1406	Exported Function
RegSetKeySecurity	1407	Exported Function
ReleaseMutexWhenCallbackReturns	1423	Exported Function
ReleaseSemaphore	1426	Exported Function
ReleaseSemaphoreWhenCallbackReturns	1427	Exported Function
ReleaseMutex	1422	Exported Function
RegUnLoadKeyA	1412	Exported Function
RegUnLoadKeyW	1413	Exported Function
ReleaseActCtx	1421	Exported Function
RegRestoreKeyW	1404	Exported Function
RegOpenKeyExInternalW	1394	Exported Function
RegOpenKeyExW	1395	Exported Function
RegOpenUserClassesRoot	1396	Exported Function
RegOpenKeyExInternalA	1393	Exported Function
RegNotifyChangeKeyValue	1390	Exported Function
RegOpenCurrentUser	1391	Exported Function
RegOpenKeyExA	1392	Exported Function
RegQueryValueExA	1401	Exported Function
RegQueryValueExW	1402	Exported Function
RegRestoreKeyA	1403	Exported Function
RegQueryMultipleValuesW	1400	Exported Function
RegQueryInfoKeyA	1397	Exported Function
RegQueryInfoKeyW	1398	Exported Function
RegQueryMultipleValuesA	1399	Exported Function
ReleaseSRWLockExclusive	1424	Exported Function
ResolveDelayLoadedAPI	1445	Exported Function
ResolveDelayLoadsFromDll	1446	Exported Function
ResolveLocaleName	1447	Exported Function
ResizePseudoConsole	1444	Exported Function
ResetEvent	1441	Exported Function
ResetState	1442	Exported Function
ResetWriteWatch	1443	Exported Function
RsopLoggingEnabledInternal	1452	Exported Function
SaveAlternatePackageRootPath	1484	Exported Function
SaveStateRootFolderPath	1485	Exported Function
RevertToSelf	1451	Exported Function
RestoreLastError	1448	Exported Function
RestoreThreadPreferredUILanguages	1449	Exported Function
ResumeThread	1450	Exported Function
ReplaceFileW	1440	Exported Function
RemoveDirectoryW	1431	Exported Function
RemoveDllDirectory	1432	Exported Function
RemoveExtensionProgIds	1433	Exported Function
RemoveDirectoryA	1430	Exported Function
ReleaseSRWLockShared	1425	Exported Function
ReleaseStateLock	1428	Exported Function
RemapPredefinedHandleInternal	1429	Exported Function
RemoveVectoredExceptionHandler	1438	Exported Function
ReOpenFile	1327	Exported Function
ReplaceFileExInternal	1439	Exported Function
RemoveVectoredContinueHandler	1437	Exported Function
RemovePackageFromFamilyXref	1434	Exported Function
RemovePackageStatus	1435	Exported Function
RemovePackageStatusForUser	1436	Exported Function
SetFilePointerEx	1545	Exported Function
SHCoCreateInstance	1453	Exported Function
SHExpandEnvironmentStringsA	1454	Exported Function
SHExpandEnvironmentStringsW	1455	Exported Function
SharedLocalIsEnabled	1623	Exported Function
SetWaitableTimer	1619	Exported Function
SetWaitableTimerEx	1620	Exported Function
SetXStateFeaturesMask	1621	Exported Function
SHRegCreateUSKeyW	1460	Exported Function
SHRegDeleteEmptyUSKeyA	1461	Exported Function
SHRegDeleteEmptyUSKeyW	1462	Exported Function
SHRegCreateUSKeyA	1459	Exported Function
SHLoadIndirectString	1456	Exported Function
SHLoadIndirectStringInternal	1457	Exported Function
SHRegCloseUSKey	1458	Exported Function
SetUserGeoName	1618	Exported Function
SetThreadPriorityBoost	1602	Exported Function
SetThreadSelectedCpuSets	1603	Exported Function
SetThreadStackGuarantee	1604	Exported Function
SetThreadPriority	1601	Exported Function
SetThreadpoolWaitEx	1613	Exported Function
SetThreadPreferredUILanguages	1600	Exported Function
SetThreadPreferredUILanguages2	1599	Exported Function
SetUnhandledExceptionFilter	1616	Exported Function
SetupComm	1622	Exported Function
SetUserGeoID	1617	Exported Function
SetTokenInformation	1615	Exported Function
SetThreadToken	1605	Exported Function
SetThreadUILanguage	1606	Exported Function
SetTimeZoneInformation	1614	Exported Function
SHRegDeleteUSValueA	1463	Exported Function
SHTruncateString	1483	Exported Function
SignalObjectAndWait	1624	Exported Function
SizeofResource	1625	Exported Function
SHRegWriteUSValueW	1482	Exported Function
SHRegSetUSValueA	1479	Exported Function
SHRegSetUSValueW	1480	Exported Function
SHRegWriteUSValueA	1481	Exported Function
SpecialMBToWC	1630	Exported Function
StartThreadpoolIo	1631	Exported Function
StrCatBuffA	1636	Exported Function
SleepEx	1629	Exported Function
Sleep	1626	Exported Function
SleepConditionVariableCS	1627	Exported Function
SleepConditionVariableSRW	1628	Exported Function
SHRegQueryUSValueW	1478	Exported Function
SHRegEnumUSValueW	1468	Exported Function
SHRegGetBoolUSValueA	1469	Exported Function
SHRegGetBoolUSValueW	1470	Exported Function
SHRegEnumUSValueA	1467	Exported Function
SHRegDeleteUSValueW	1464	Exported Function
SHRegEnumUSKeyA	1465	Exported Function
SHRegEnumUSKeyW	1466	Exported Function
SHRegQueryInfoUSKeyA	1475	Exported Function
SHRegQueryInfoUSKeyW	1476	Exported Function
SHRegQueryUSValueA	1477	Exported Function
SHRegOpenUSKeyW	1474	Exported Function
SHRegGetUSValueA	1471	Exported Function
SHRegGetUSValueW	1472	Exported Function
SHRegOpenUSKeyA	1473	Exported Function
SetProcessGroupAffinity	1565	Exported Function
SetProcessInformation	1566	Exported Function
SetProcessMitigationPolicy	1567	Exported Function
SetProcessDynamicEHContinuationTargets	1564	Exported Function
SetPrivateObjectSecurityEx	1561	Exported Function
SetProcessAffinityUpdateMode	1562	Exported Function
SetProcessDefaultCpuSets	1563	Exported Function
SetProcessValidCallTargetsForMappedView	1572	Exported Function
SetProcessWorkingSetSizeEx	1573	Exported Function
SetProtectedPolicy	1574	Exported Function
SetProcessValidCallTargets	1571	Exported Function
SetProcessPreferredUILanguages	1568	Exported Function
SetProcessPriorityBoost	1569	Exported Function
SetProcessShutdownParameters	1570	Exported Function
SetPrivateObjectSecurity	1560	Exported Function
SetHandleInformation	1550	Exported Function
SetIsDeveloperModeEnabled	1551	Exported Function
SetIsSideloadingEnabled	1552	Exported Function
SetHandleCount	1549	Exported Function
SetFileSecurityW	1546	Exported Function
SetFileTime	1547	Exported Function
SetFileValidData	1548	Exported Function
SetLocalTime	1556	Exported Function
SetNamedPipeHandleState	1558	Exported Function
SetPriorityClass	1559	Exported Function
SetLocaleInfoW	1557	Exported Function
SetKernelObjectSecurity	1553	Exported Function
SetLastConsoleEventActive	1554	Exported Function
SetLastError	1555	Exported Function
SetProtocolProperty	1575	Exported Function
SetThreadIdealProcessor	1595	Exported Function
SetThreadIdealProcessorEx	1596	Exported Function
SetThreadInformation	1597	Exported Function
SetThreadGroupAffinity	1594	Exported Function
SetThreadContext	1591	Exported Function
SetThreadDescription	1592	Exported Function
SetThreadErrorMode	1593	Exported Function
SetThreadpoolTimer	1610	Exported Function
SetThreadpoolTimerEx	1611	Exported Function
SetThreadpoolWait	1612	Exported Function
SetThreadpoolThreadMinimum	1609	Exported Function
SetThreadLocale	1598	Exported Function
SetThreadpoolStackInformation	1607	Exported Function
SetThreadpoolThreadMaximum	1608	Exported Function
SetSystemTimeAdjustmentPrecise	1590	Exported Function
SetSecurityDescriptorGroup	1580	Exported Function
SetSecurityDescriptorOwner	1581	Exported Function
SetSecurityDescriptorRMControl	1582	Exported Function
SetSecurityDescriptorDacl	1579	Exported Function
SetRoamingLastObservedChangeTime	1576	Exported Function
SetSecurityAccessMask	1577	Exported Function
SetSecurityDescriptorControl	1578	Exported Function
SetSystemFileCacheSize	1587	Exported Function
SetSystemTime	1588	Exported Function
SetSystemTimeAdjustment	1589	Exported Function
SetStdHandleEx	1586	Exported Function
SetSecurityDescriptorSacl	1583	Exported Function
SetStateVersion	1584	Exported Function
SetStdHandle	1585	Exported Function
IsMrtResourceRedirectionEnabled	934	Exported Function
EnumDateFormatsW	307	Exported Function
EnumDeviceDrivers	308	Exported Function
EnumDynamicTimeZoneInformation	309	Exported Function
EnumDateFormatsExW	306	Exported Function
EnumCalendarInfoExW	303	Exported Function
EnumCalendarInfoW	304	Exported Function
EnumDateFormatsExEx	305	Exported Function
EnumPageFilesA	311	Exported Function
EnumPageFilesW	312	Exported Function
EnumProcesses	315	Exported Function
EnumLanguageGroupLocalesW	310	Exported Function
EnumerateExtensionNames	334	Exported Function
EnumerateStateAtomValues	335	Exported Function
EnumerateStateContainerItems	336	Exported Function
EnumCalendarInfoExEx	302	Exported Function
DuplicateStateContainerHandle	292	Exported Function
DuplicateToken	293	Exported Function
DuplicateTokenEx	294	Exported Function
DuplicateHandle	291	Exported Function
DsReadNgcKeyW	288	Exported Function
DsUnBindW	289	Exported Function
DsWriteNgcKeyW	290	Exported Function
EnterCriticalPolicySectionInternal	299	Exported Function
EnterCriticalSection	300	Exported Function
EnterSynchronizationBarrier	301	Exported Function
EncodeSystemPointer	298	Exported Function
EmptyWorkingSet	295	Exported Function
EncodePointer	296	Exported Function
EncodeRemotePointer	297	Exported Function
EnumProcessModules	313	Exported Function
EqualDomainSid	337	Exported Function
EqualPrefixSid	338	Exported Function
EqualSid	339	Exported Function
EnumUILanguagesW	333	Exported Function
EnumSystemLocalesW	330	Exported Function
EnumTimeFormatsEx	331	Exported Function
EnumTimeFormatsW	332	Exported Function
EventRegister	344	Exported Function
EventSetInformation	345	Exported Function
EventUnregister	346	Exported Function
EventProviderEnabled	343	Exported Function
EscapeCommFunction	340	Exported Function
EventActivityIdControl	341	Exported Function
EventEnabled	342	Exported Function
EnumSystemLocalesEx	329	Exported Function
EnumResourceNamesExW	319	Exported Function
EnumResourceNamesW	320	Exported Function
EnumResourceTypesExA	321	Exported Function
EnumResourceNamesExA	318	Exported Function
EnumProcessModulesEx	314	Exported Function
EnumResourceLanguagesExA	316	Exported Function
EnumResourceLanguagesExW	317	Exported Function
EnumSystemGeoNames	326	Exported Function
EnumSystemLanguageGroupsW	327	Exported Function
EnumSystemLocalesA	328	Exported Function
EnumSystemGeoID	325	Exported Function
EnumResourceTypesExW	322	Exported Function
EnumSystemCodePagesW	323	Exported Function
EnumSystemFirmwareTables	324	Exported Function
DebugActiveProcessStop	248	Exported Function
DebugBreak	249	Exported Function
DecodePointer	250	Exported Function
DebugActiveProcess	247	Exported Function
CtrlRoutine	244	Exported Function
CveEventWrite	245	Exported Function
DeactivateActCtx	246	Exported Function
DelayLoadFailureHookLookup	255	Exported Function
DeleteAce	256	Exported Function
DeleteBoundaryDescriptor	257	Exported Function
DelayLoadFailureHook	254	Exported Function
DecodeRemotePointer	251	Exported Function
DecodeSystemPointer	252	Exported Function
DefineDosDeviceW	253	Exported Function
CreateWellKnownSid	243	Exported Function
CreateThreadpool	233	Exported Function
CreateThreadpoolCleanupGroup	234	Exported Function
CreateThreadpoolIo	235	Exported Function
CreateThread	232	Exported Function
CreateStateLock	229	Exported Function
CreateStateSubcontainer	230	Exported Function
CreateSymbolicLinkW	231	Exported Function
CreateTimerQueueTimer	240	Exported Function
CreateWaitableTimerExW	241	Exported Function
CreateWaitableTimerW	242	Exported Function
CreateTimerQueue	239	Exported Function
CreateThreadpoolTimer	236	Exported Function
CreateThreadpoolWait	237	Exported Function
CreateThreadpoolWork	238	Exported Function
DeleteCriticalSection	258	Exported Function
DisconnectNamedPipe	278	Exported Function
DnsHostnameToComputerNameExW	279	Exported Function
DsBindWithSpnExW	280	Exported Function
DiscardVirtualMemory	277	Exported Function
DisablePredefinedHandleTableInternal	274	Exported Function
DisableThreadLibraryCalls	275	Exported Function
DisassociateCurrentThreadFromCallback	276	Exported Function
DsFreePasswordCredentials	285	Exported Function
DsGetDomainControllerInfoW	286	Exported Function
DsMakePasswordCredentialsW	287	Exported Function
DsFreeNgcKey	284	Exported Function
DsCrackNamesW	281	Exported Function
DsFreeDomainControllerInfoW	282	Exported Function
DsFreeNameResultW	283	Exported Function
DeviceIoControl	273	Exported Function
DeleteProcThreadAttributeList	263	Exported Function
DeleteStateAtomValue	264	Exported Function
DeleteStateContainer	265	Exported Function
DeleteFileW	262	Exported Function
DeleteEnclave	259	Exported Function
DeleteFiber	260	Exported Function
DeleteFileA	261	Exported Function
DeleteVolumeMountPointW	270	Exported Function
DeriveCapabilitySidsFromName	271	Exported Function
DestroyPrivateObjectSecurity	272	Exported Function
DeleteTimerQueueTimer	269	Exported Function
DeleteStateContainerValue	266	Exported Function
DeleteSynchronizationBarrier	267	Exported Function
DeleteTimerQueueEx	268	Exported Function
EventWrite	347	Exported Function
GetAdjustObjectAttributesForPrivateNamespaceRoutine	425	Exported Function
GetAlternatePackageRoots	426	Exported Function
GetAppContainerAce	427	Exported Function
GetACP	420	Exported Function
GetAcceptLanguagesW	422	Exported Function
GetAce	423	Exported Function
GetAclInformation	424	Exported Function
GetApplicationUserModelId	433	Exported Function
GetApplicationUserModelIdFromToken	434	Exported Function
GetAppliedGPOListInternalA	435	Exported Function
GetApplicationRestartSettings	432	Exported Function
GetAppContainerNamedObjectPath	428	Exported Function
GetAppDataFolder	429	Exported Function
GetApplicationRecoveryCallback	431	Exported Function
GetAcceptLanguagesA	421	Exported Function
FreeGPOListInternalA	410	Exported Function
FreeGPOListInternalW	411	Exported Function
FreeLibrary	412	Exported Function
FreeEnvironmentStringsW	409	Exported Function
FormatMessageW	406	Exported Function
FreeConsole	407	Exported Function
FreeEnvironmentStringsA	408	Exported Function
FreeUserPhysicalPages	417	Exported Function
GenerateConsoleCtrlEvent	418	Exported Function
GenerateGPNotificationInternal	419	Exported Function
FreeSid	416	Exported Function
FreeLibraryAndExitThread	413	Exported Function
FreeLibraryWhenCallbackReturns	414	Exported Function
FreeResource	415	Exported Function
GetAppliedGPOListInternalW	436	Exported Function
GetConsoleAliasesA	463	Exported Function
GetConsoleAliasesLengthA	464	Exported Function
GetConsoleAliasesLengthW	465	Exported Function
GetConsoleAliasA	457	Exported Function
GetCompressedFileSizeW	454	Exported Function
GetComputerNameExA	455	Exported Function
GetComputerNameExW	456	Exported Function
GetConsoleAliasExesW	461	Exported Function
GetConsoleAliasW	462	Exported Function
GetConsoleCommandHistoryA	468	Exported Function
GetConsoleAliasExesLengthW	460	Exported Function
GetConsoleAliasesW	466	Exported Function
GetConsoleAliasExesA	458	Exported Function
GetConsoleAliasExesLengthA	459	Exported Function
GetCompressedFileSizeA	453	Exported Function
GetCalendarInfoW	443	Exported Function
GetCommandLineA	451	Exported Function
GetCommandLineW	452	Exported Function
GetCalendarInfoEx	442	Exported Function
GetAppModelVersion	430	Exported Function
GetCachedSigningLevel	440	Exported Function
GetCalendar	441	Exported Function
GetCommProperties	448	Exported Function
GetCommState	449	Exported Function
GetCommTimeouts	450	Exported Function
GetCommPorts	447	Exported Function
GetCommConfig	444	Exported Function
GetCommMask	445	Exported Function
GetCommModemStatus	446	Exported Function
FindActCtxSectionStringW	366	Exported Function
FindClose	367	Exported Function
FindCloseChangeNotification	368	Exported Function
FindActCtxSectionGuid	365	Exported Function
FillConsoleOutputAttribute	362	Exported Function
FillConsoleOutputCharacterA	363	Exported Function
FillConsoleOutputCharacterW	364	Exported Function
FindFirstFileExW	373	Exported Function
FindFirstFileNameW	374	Exported Function
FindFirstFileW	375	Exported Function
FindFirstFileExA	372	Exported Function
FindFirstChangeNotificationA	369	Exported Function
FindFirstChangeNotificationW	370	Exported Function
FindFirstFileA	371	Exported Function
FileTimeToSystemTime	361	Exported Function
ExitProcess	351	Exported Function
ExitThread	352	Exported Function
ExpandEnvironmentStringsA	353	Exported Function
exit	1883	Exported Function
EventWriteEx	348	Exported Function
EventWriteString	349	Exported Function
EventWriteTransfer	350	Exported Function
FatalAppExitA	358	Exported Function
FatalAppExitW	359	Exported Function
FileTimeToLocalFileTime	360	Exported Function
ExtensionProgIdExists	357	Exported Function
ExpandEnvironmentStringsW	354	Exported Function
ExpungeConsoleCommandHistoryA	355	Exported Function
ExpungeConsoleCommandHistoryW	356	Exported Function
FindFirstFreeAce	376	Exported Function
FlushConsoleInputBuffer	396	Exported Function
FlushFileBuffers	397	Exported Function
FlushInstructionCache	398	Exported Function
FlsSetValue	395	Exported Function
FlsAlloc	392	Exported Function
FlsFree	393	Exported Function
FlsGetValue	394	Exported Function
FormatApplicationUserModelId	403	Exported Function
FormatApplicationUserModelIdA	404	Exported Function
FormatMessageA	405	Exported Function
ForceSyncFgPolicyInternal	402	Exported Function
FlushProcessWriteBuffers	399	Exported Function
FlushViewOfFile	400	Exported Function
FoldStringW	401	Exported Function
FindVolumeClose	391	Exported Function
FindNextFileNameW	383	Exported Function
FindNextFileW	384	Exported Function
FindNextStreamW	385	Exported Function
FindNextFileA	382	Exported Function
FindFirstStreamW	377	Exported Function
FindFirstVolumeW	378	Exported Function
FindNextChangeNotification	381	Exported Function
FindResourceExW	388	Exported Function
FindResourceW	389	Exported Function
FindStringOrdinal	390	Exported Function
FindPackagesByPackageFamily	387	Exported Function
FindNextVolumeW	386	Exported Function
FindNLSString	379	Exported Function
FindNLSStringEx	380	Exported Function
AppXLookupDisplayName	70	Exported Function
AppXLookupMoniker	71	Exported Function
AppXPostSuccessExtension	72	Exported Function
AppXGetPackageSid	69	Exported Function
AppXGetOSMaxVersionTested	66	Exported Function
AppXGetOSMinVersion	67	Exported Function
AppXGetPackageCapabilities	68	Exported Function
AreAnyAccessesGranted	78	Exported Function
AreFileApisANSI	79	Exported Function
AreThereVisibleLogoffScriptsInternal	80	Exported Function
AreAllAccessesGranted	77	Exported Function
AppXPreCreationExtension	73	Exported Function
AppXReleaseAppXContext	74	Exported Function
AppXUpdatePackageCapabilities	75	Exported Function
AppXGetDevelopmentMode	65	Exported Function
AppPolicyGetClrCompat	55	Exported Function
AppPolicyGetCreateFileAccess	56	Exported Function
AppPolicyGetLifecycleManagement	57	Exported Function
ApplicationUserModelIdFromProductId	76	Exported Function
AppContainerLookupMoniker	52	Exported Function
AppContainerRegisterSid	53	Exported Function
AppContainerUnregisterSid	54	Exported Function
AppPolicyGetWindowingModel	62	Exported Function
AppXFreeMemory	63	Exported Function
AppXGetApplicationData	64	Exported Function
AppPolicyGetThreadInitializationType	61	Exported Function
AppPolicyGetMediaFoundationCodecLoading	58	Exported Function
AppPolicyGetProcessTerminationMethod	59	Exported Function
AppPolicyGetShowDeveloperDiagnostic	60	Exported Function
AreThereVisibleShutdownScriptsInternal	81	Exported Function
BasepNotifyTrackingService	102	Exported Function
BaseReadAppCompatDataForProcess	97	Exported Function
BaseUpdateAppcompatCache	98	Exported Function
BasepCopyFileExW	101	Exported Function
BaseMarkFileForDelete	96	Exported Function
BasepAdjustObjectAttributesForPrivateNamespace	99	Exported Function
BasepCopyFileCallback	100	Exported Function
CancelIo	108	Exported Function
CancelIoEx	109	Exported Function
CancelSynchronousIo	110	Exported Function
CallNamedPipeW	106	Exported Function
Beep	103	Exported Function
CallbackMayRunLong	107	Exported Function
CallEnclave	105	Exported Function
BaseIsAppcompatInfrastructureDisabled	95	Exported Function
BaseCleanupAppcompatCacheSupport	85	Exported Function
BaseDllFreeResourceId	86	Exported Function
BaseDllMapResourceIdW	87	Exported Function
BaseCheckAppcompatCacheEx	84	Exported Function
atexit	1882	Exported Function
AttachConsole	82	Exported Function
BaseCheckAppcompatCache	83	Exported Function
BaseGetConsoleReference	92	Exported Function
BaseGetNamedObjectDirectory	93	Exported Function
BaseInitAppcompatCacheSupport	94	Exported Function
BaseFreeAppCompatDataForProcess	91	Exported Function
BaseDumpAppcompatCache	88	Exported Function
BaseFlushAppcompatCache	89	Exported Function
BaseFormatObjectAttributes	90	Exported Function
AccessCheckByTypeResultList	12	Exported Function
AccessCheckByTypeResultListAndAuditAlarmByHandleW	13	Exported Function
AccessCheckByTypeResultListAndAuditAlarmW	14	Exported Function
AccessCheckByTypeAndAuditAlarmW	11	Exported Function
AccessCheck	8	Exported Function
AccessCheckAndAuditAlarmW	9	Exported Function
AccessCheckByType	10	Exported Function
AddAccessAllowedAce	19	Exported Function
AddAccessAllowedAceEx	20	Exported Function
AddAccessAllowedObjectAce	21	Exported Function
ActivateActCtx	18	Exported Function
AcquireSRWLockExclusive	15	Exported Function
AcquireSRWLockShared	16	Exported Function
AcquireStateLock	17	Exported Function
_time64	1881	Exported Function
_c_exit	1873	Exported Function
_cexit	1874	Exported Function
_exit	1875	Exported Function
_amsg_exit	1872	Exported Function
__dllonexit3	1870	Exported Function
__wgetmainargs	1871	Exported Function
_AddMUIStringToCache	1867	Exported Function
_onexit	1879	Exported Function
_OpenMuiStringCache	1869	Exported Function
_purecall	1880	Exported Function
_invalid_parameter	1878	Exported Function
_GetMUIStringFromCache	1868	Exported Function
_initterm	1876	Exported Function
_initterm_e	1877	Exported Function
AddAccessDeniedAce	22	Exported Function
AdjustTokenGroups	42	Exported Function
AdjustTokenPrivileges	43	Exported Function
AllocateAndInitializeSid	45	Exported Function
AddVectoredExceptionHandler	41	Exported Function
AddScopedPolicyIDAce	39	Exported Function
AddSIDToBoundaryDescriptor	38	Exported Function
AddVectoredContinueHandler	40	Exported Function
AppContainerDeriveSidFromMoniker	49	Exported Function
AppContainerFreeMemory	50	Exported Function
AppContainerLookupDisplayNameMrtReference	51	Exported Function
AllocConsole	44	Exported Function
AllocateLocallyUniqueId	46	Exported Function
AllocateUserPhysicalPages	47	Exported Function
AllocateUserPhysicalPagesNuma	48	Exported Function
AddResourceAttributeAce	37	Exported Function
AddAuditAccessAceEx	27	Exported Function
AddAuditAccessObjectAce	28	Exported Function
AddConsoleAliasA	29	Exported Function
AddAuditAccessAce	26	Exported Function
AddAccessDeniedAceEx	23	Exported Function
AddAccessDeniedObjectAce	24	Exported Function
AddAce	25	Exported Function
AddMandatoryAce	34	Exported Function
AddPackageToFamilyXref	35	Exported Function
AddRefActCtx	36	Exported Function
AddExtensionProgId	33	Exported Function
AddConsoleAliasW	30	Exported Function
AddDependencyToProcessPackageGraph	31	Exported Function
AddDllDirectory	32	Exported Function
CancelThreadpoolIo	111	Exported Function
CreateEventW	189	Exported Function
CreateFiber	190	Exported Function
CreateFiberEx	191	Exported Function
CreateEventExW	188	Exported Function
CreateEnclave	185	Exported Function
CreateEventA	186	Exported Function
CreateEventExA	187	Exported Function
CreateFileMappingNumaW	196	Exported Function
CreateFileMappingW	197	Exported Function
CreateFileW	198	Exported Function
CreateFileMappingFromApp	195	Exported Function
CreateFile2	192	Exported Function
CreateFileA	193	Exported Function
CreateFileMapping2	194	Exported Function
CreateDirectoryW	184	Exported Function
CopyFileExW	174	Exported Function
CopyFileW	175	Exported Function
CopySid	176	Exported Function
CopyFile2	173	Exported Function
ConvertThreadToFiberEx	170	Exported Function
ConvertToAutoInheritPrivateObjectSecurity	171	Exported Function
CopyContext	172	Exported Function
CreateConsoleScreenBuffer	181	Exported Function
CreateDirectoryA	182	Exported Function
CreateDirectoryExW	183	Exported Function
CreateBoundaryDescriptorW	180	Exported Function
CouldMultiUserAppsBehaviorBePossibleForPackage	177	Exported Function
CreateActCtxW	178	Exported Function
CreateAppContainerToken	179	Exported Function
CreateHardLinkA	199	Exported Function
CreatePseudoConsole	219	Exported Function
CreatePseudoConsoleAsUser	220	Exported Function
CreateRemoteThread	221	Exported Function
CreateProcessW	218	Exported Function
CreateProcessAsUserW	215	Exported Function
CreateProcessInternalA	216	Exported Function
CreateProcessInternalW	217	Exported Function
CreateStateAtom	226	Exported Function
CreateStateChangeNotification	227	Exported Function
CreateStateContainer	228	Exported Function
CreateSemaphoreW	225	Exported Function
CreateRemoteThreadEx	222	Exported Function
CreateRestrictedToken	223	Exported Function
CreateSemaphoreExW	224	Exported Function
CreateProcessAsUserA	214	Exported Function
CreateMutexExA	204	Exported Function
CreateMutexExW	205	Exported Function
CreateMutexW	206	Exported Function
CreateMutexA	203	Exported Function
CreateHardLinkW	200	Exported Function
CreateIoCompletionPort	201	Exported Function
CreateMemoryResourceNotification	202	Exported Function
CreatePrivateObjectSecurityEx	211	Exported Function
CreatePrivateObjectSecurityWithMultipleInheritance	212	Exported Function
CreateProcessA	213	Exported Function
CreatePrivateObjectSecurity	210	Exported Function
CreateNamedPipeW	207	Exported Function
CreatePipe	208	Exported Function
CreatePrivateNamespaceW	209	Exported Function
CheckIfStateChangeNotificationExists	131	Exported Function
CheckRemoteDebuggerPresent	132	Exported Function
CheckTokenCapability	133	Exported Function
CheckGroupPolicyEnabled	130	Exported Function
CharUpperBuffW	127	Exported Function
CharUpperW	128	Exported Function
CheckAllowDecryptedRemoteDestinationPolicy	129	Exported Function
ClearCommBreak	138	Exported Function
ClearCommError	139	Exported Function
CLOSE_LOCAL_HANDLE_INTERNAL	104	Exported Function
ChrCmpIW	137	Exported Function
CheckTokenMembership	134	Exported Function
CheckTokenMembershipEx	135	Exported Function
ChrCmpIA	136	Exported Function
CharUpperBuffA	126	Exported Function
CharLowerBuffA	116	Exported Function
CharLowerBuffW	117	Exported Function
CharLowerW	118	Exported Function
CharLowerA	115	Exported Function
CancelWaitableTimer	112	Exported Function
CeipIsOptedIn	113	Exported Function
ChangeTimerQueueTimer	114	Exported Function
CharPrevExA	123	Exported Function
CharPrevW	124	Exported Function
CharUpperA	125	Exported Function
CharPrevA	122	Exported Function
CharNextA	119	Exported Function
CharNextExA	120	Exported Function
CharNextW	121	Exported Function
CloseHandle	140	Exported Function
CompareStringEx	160	Exported Function
CompareStringOrdinal	161	Exported Function
CompareStringW	162	Exported Function
CompareStringA	159	Exported Function
CommitStateAtom	156	Exported Function
CompareFileTime	157	Exported Function
CompareObjectHandles	158	Exported Function
ConvertFiberToThread	167	Exported Function
ConvertPerformanceCounterToAuxiliaryCounter	168	Exported Function
ConvertThreadToFiber	169	Exported Function
ConvertDefaultLocale	166	Exported Function
ConnectNamedPipe	163	Exported Function
ContinueDebugEvent	164	Exported Function
ConvertAuxiliaryCounterToPerformanceCounter	165	Exported Function
CloseThreadpoolWork	155	Exported Function
CloseStateAtom	145	Exported Function
CloseStateChangeNotification	146	Exported Function
CloseStateContainer	147	Exported Function
CloseState	144	Exported Function
ClosePackageInfo	141	Exported Function
ClosePrivateNamespace	142	Exported Function
ClosePseudoConsole	143	Exported Function
CloseThreadpoolIo	152	Exported Function
CloseThreadpoolTimer	153	Exported Function
CloseThreadpoolWait	154	Exported Function
CloseThreadpoolCleanupGroupMembers	151	Exported Function
CloseStateLock	148	Exported Function
CloseThreadpool	149	Exported Function
CloseThreadpoolCleanupGroup	150	Exported Function
GetConsoleCommandHistoryLengthA	469	Exported Function
GetTargetPlatformContext	779	Exported Function
GetTempFileNameA	780	Exported Function
GetTempFileNameW	781	Exported Function
GetSystemWow64DirectoryW	778	Exported Function
GetSystemWow64Directory2A	775	Exported Function
GetSystemWow64Directory2W	776	Exported Function
GetSystemWow64DirectoryA	777	Exported Function
GetThreadErrorMode	786	Exported Function
GetThreadGroupAffinity	787	Exported Function
GetThreadId	789	Exported Function
GetThreadDescription	785	Exported Function
GetTempPathA	782	Exported Function
GetTempPathW	783	Exported Function
GetThreadContext	784	Exported Function
GetSystemWindowsDirectoryW	774	Exported Function
GetSystemMetadataPathForPackageFamily	764	Exported Function
GetSystemPreferredUILanguages	765	Exported Function
GetSystemStateRootFolder	766	Exported Function
GetSystemMetadataPathForPackage	763	Exported Function
GetSystemInfo	760	Exported Function
GetSystemLeapSecondInformation	761	Exported Function
GetSystemMetadataPath	762	Exported Function
GetSystemTimePreciseAsFileTime	771	Exported Function
GetSystemTimes	772	Exported Function
GetSystemWindowsDirectoryA	773	Exported Function
GetSystemTimeAsFileTime	770	Exported Function
GetSystemTime	767	Exported Function
GetSystemTimeAdjustment	768	Exported Function
GetSystemTimeAdjustmentPrecise	769	Exported Function
GetThreadIdealProcessorEx	790	Exported Function
GetTraceLoggerHandle	809	Exported Function
GetUILanguageInfo	810	Exported Function
GetUnicodeStringToEightBitSizeRoutine	811	Exported Function
GetTraceEnableLevel	808	Exported Function
GetTimeZoneInformationForYear	805	Exported Function
GetTokenInformation	806	Exported Function
GetTraceEnableFlags	807	Exported Function
GetUserDefaultLocaleName	816	Exported Function
GetUserDefaultUILanguage	817	Exported Function
GetUserGeoID	818	Exported Function
GetUserDefaultLCID	814	Exported Function
GetUnicodeStringToEightBitStringRoutine	812	Exported Function
GetUserDefaultGeoName	813	Exported Function
GetUserDefaultLangID	815	Exported Function
GetTimeZoneInformation	804	Exported Function
GetThreadPriority	794	Exported Function
GetThreadPriorityBoost	795	Exported Function
GetThreadSelectedCpuSets	796	Exported Function
GetThreadPreferredUILanguages	793	Exported Function
GetThreadInformation	791	Exported Function
GetThreadIOPendingFlag	788	Exported Function
GetThreadLocale	792	Exported Function
GetTimeFormatA	801	Exported Function
GetTimeFormatEx	802	Exported Function
GetTimeFormatW	803	Exported Function
GetTickCount64	799	Exported Function
GetThreadTimes	797	Exported Function
GetThreadUILanguage	798	Exported Function
GetTickCount	800	Exported Function
GetSecurityDescriptorDacl	720	Exported Function
GetSecurityDescriptorGroup	721	Exported Function
GetSecurityDescriptorLength	722	Exported Function
GetSecurityDescriptorControl	719	Exported Function
GetRegistryValueWithFallbackW	716	Exported Function
GetRoamingLastObservedChangeTime	717	Exported Function
GetSecureSystemAppDataFolder	718	Exported Function
GetSharedLocalFolder	727	Exported Function
GetShortPathNameW	728	Exported Function
GetSidIdentifierAuthority	729	Exported Function
GetSerializedAtomBytes	726	Exported Function
GetSecurityDescriptorOwner	723	Exported Function
GetSecurityDescriptorRMControl	724	Exported Function
GetSecurityDescriptorSacl	725	Exported Function
GetRegistryExtensionFlags	715	Exported Function
GetProcessWorkingSetSizeEx	704	Exported Function
GetProductInfo	706	Exported Function
GetProtocolAumid	707	Exported Function
GetProcessVersion	703	Exported Function
GetProcessPriorityBoost	700	Exported Function
GetProcessShutdownParameters	701	Exported Function
GetProcessTimes	702	Exported Function
GetPublisherRootFolder	712	Exported Function
GetQueuedCompletionStatus	713	Exported Function
GetQueuedCompletionStatusEx	714	Exported Function
GetPublisherCacheFolder	711	Exported Function
GetProtocolProperty	708	Exported Function
GetPtrCalData	709	Exported Function
GetPtrCalDataArray	710	Exported Function
GetSidLengthRequired	730	Exported Function
GetSystemAppDataKey	750	Exported Function
GetSystemCpuSetInformation	751	Exported Function
GetSystemDefaultLangID	753	Exported Function
GetSystemAppDataFolder	749	Exported Function
GetStringTypeA	746	Exported Function
GetStringTypeExW	747	Exported Function
GetStringTypeW	748	Exported Function
GetSystemDirectoryW	757	Exported Function
GetSystemFileCacheSize	758	Exported Function
GetSystemFirmwareTable	759	Exported Function
GetSystemDirectoryA	756	Exported Function
GetSystemDefaultLCID	752	Exported Function
GetSystemDefaultLocaleName	754	Exported Function
GetSystemDefaultUILanguage	755	Exported Function
GetStringTableEntry	745	Exported Function
GetStagedPackagePathByFullName2	734	Exported Function
GetStartupInfoW	736	Exported Function
GetStateContainerDepth	737	Exported Function
GetStagedPackagePathByFullName	735	Exported Function
GetSidSubAuthority	731	Exported Function
GetSidSubAuthorityCount	732	Exported Function
GetStagedPackageOrigin	733	Exported Function
GetStateVersion	742	Exported Function
GetStdHandle	743	Exported Function
GetStringScripts	744	Exported Function
GetStateSettingsFolder	741	Exported Function
GetStateFolder	738	Exported Function
GetStateRootFolder	739	Exported Function
GetStateRootFolderBase	740	Exported Function
GetUserInfo	819	Exported Function
InterlockedPushEntrySList	896	Exported Function
InterlockedPushListSList	4	Exported Function
InterlockedPushListSListEx	897	Exported Function
InterlockedPopEntrySList	895	Exported Function
InterlockedExchangeAdd	892	Exported Function
InterlockedFlushSList	893	Exported Function
InterlockedIncrement	894	Exported Function
Internal_EnumSystemLanguageGroups	902	Exported Function
Internal_EnumSystemLocales	903	Exported Function
Internal_EnumTimeFormats	904	Exported Function
Internal_EnumSystemCodePages	901	Exported Function
Internal_EnumCalendarInfo	898	Exported Function
Internal_EnumDateFormats	899	Exported Function
Internal_EnumLanguageGroupLocales	900	Exported Function
InterlockedExchange	891	Exported Function
InitializeSRWLock	883	Exported Function
InitializeSynchronizationBarrier	886	Exported Function
InitOnceBeginInitialize	868	Exported Function
InitializeSListHead	882	Exported Function
InitializeProcThreadAttributeList	880	Exported Function
InitializeSecurityDescriptor	884	Exported Function
InitializeSid	885	Exported Function
InterlockedCompareExchange	889	Exported Function
InterlockedCompareExchange64	888	Exported Function
InterlockedDecrement	890	Exported Function
InstallELAMCertificateInfo	887	Exported Function
InitOnceComplete	869	Exported Function
InitOnceExecuteOnce	870	Exported Function
InitOnceInitialize	871	Exported Function
Internal_EnumUILanguages	905	Exported Function
IsCharUpperA	924	Exported Function
IsCharUpperW	925	Exported Function
IsCharXDigitW	926	Exported Function
IsCharSpaceW	923	Exported Function
IsCharLowerW	920	Exported Function
IsCharPunctW	921	Exported Function
IsCharSpaceA	922	Exported Function
IsDeveloperModePolicyApplied	931	Exported Function
IsEnclaveTypeSupported	932	Exported Function
IsInternetESCEnabled	933	Exported Function
IsDeveloperModeEnabled	930	Exported Function
IsDBCSLeadByte	927	Exported Function
IsDBCSLeadByteEx	928	Exported Function
IsDebuggerPresent	929	Exported Function
IsCharLowerA	919	Exported Function
InternetTimeToSystemTimeW	909	Exported Function
InvalidateAppModelVersionCache	910	Exported Function
IsApiSetImplemented	911	Exported Function
InternetTimeToSystemTimeA	908	Exported Function
InternalLcidToName	5	Exported Function
InternetTimeFromSystemTimeA	906	Exported Function
InternetTimeFromSystemTimeW	907	Exported Function
IsCharBlankW	916	Exported Function
IsCharCntrlW	917	Exported Function
IsCharDigitW	918	Exported Function
IsCharAlphaW	915	Exported Function
IsCharAlphaA	912	Exported Function
IsCharAlphaNumericA	913	Exported Function
IsCharAlphaNumericW	914	Exported Function
GetXStateFeaturesMask	839	Exported Function
GlobalAlloc	840	Exported Function
GlobalFree	841	Exported Function
GetWsChangesEx	838	Exported Function
GetWindowsDirectoryW	835	Exported Function
GetWriteWatch	836	Exported Function
GetWsChanges	837	Exported Function
HeapAlloc	846	Exported Function
HeapCompact	847	Exported Function
HeapCreate	848	Exported Function
HasPolicyForegroundProcessingCompletedInternal	844	Exported Function
GlobalMemoryStatusEx	842	Exported Function
GuardCheckLongJumpTarget	843	Exported Function
HashData	845	Exported Function
GetWindowsDirectoryA	834	Exported Function
GetVersion	824	Exported Function
GetVersionExA	825	Exported Function
GetVersionExW	826	Exported Function
GetUserPreferredUILanguages	823	Exported Function
GetUserInfoWord	820	Exported Function
GetUserOverrideString	821	Exported Function
GetUserOverrideWord	822	Exported Function
GetVolumePathNamesForVolumeNameW	832	Exported Function
GetVolumePathNameW	831	Exported Function
GetWindowsAccountDomainSid	833	Exported Function
GetVolumeNameForVolumeMountPointW	830	Exported Function
GetVolumeInformationA	827	Exported Function
GetVolumeInformationByHandleW	828	Exported Function
GetVolumeInformationW	829	Exported Function
HeapDestroy	849	Exported Function
IncrementPackageStatusVersion	867	Exported Function
InitializeAcl	872	Exported Function
InitializeConditionVariable	873	Exported Function
ImpersonateSelf	866	Exported Function
ImpersonateAnonymousToken	863	Exported Function
ImpersonateLoggedOnUser	864	Exported Function
ImpersonateNamedPipeClient	865	Exported Function
InitializeCriticalSectionEx	878	Exported Function
InitializeEnclave	879	Exported Function
InitializeProcessForWsWatch	881	Exported Function
InitializeCriticalSectionAndSpinCount	877	Exported Function
InitializeContext	875	Exported Function
InitializeContext2	874	Exported Function
InitializeCriticalSection	876	Exported Function
IdnToUnicode	862	Exported Function
HeapSetInformation	854	Exported Function
HeapSize	855	Exported Function
HeapSummary	856	Exported Function
HeapReAlloc	853	Exported Function
HeapFree	850	Exported Function
HeapLock	851	Exported Function
HeapQueryInformation	852	Exported Function
hwprintf	1885	Exported Function
IdnToAscii	860	Exported Function
IdnToNameprepUnicode	861	Exported Function
hgets	1884	Exported Function
HeapUnlock	857	Exported Function
HeapValidate	858	Exported Function
HeapWalk	859	Exported Function
GetEnvironmentStringsA	543	Exported Function
GetEnvironmentStringsW	544	Exported Function
GetEnvironmentVariableA	545	Exported Function
GetEnvironmentStrings	542	Exported Function
GetEightBitStringToUnicodeSizeRoutine	539	Exported Function
GetEightBitStringToUnicodeStringRoutine	540	Exported Function
GetEnabledXStateFeatures	541	Exported Function
GetExitCodeThread	550	Exported Function
GetExtensionApplicationUserModelId	551	Exported Function
GetExtensionProgIds	552	Exported Function
GetExitCodeProcess	549	Exported Function
GetEnvironmentVariableW	546	Exported Function
GetEraNameCountedString	547	Exported Function
GetErrorMode	548	Exported Function
GetEffectivePackageStatusForUserSid	538	Exported Function
GetDiskFreeSpaceExW	528	Exported Function
GetDiskFreeSpaceW	529	Exported Function
GetDiskSpaceInformationA	530	Exported Function
GetDiskFreeSpaceExA	527	Exported Function
GetDeviceDriverFileNameA	524	Exported Function
GetDeviceDriverFileNameW	525	Exported Function
GetDiskFreeSpaceA	526	Exported Function
GetDynamicTimeZoneInformation	535	Exported Function
GetDynamicTimeZoneInformationEffectiveYears	536	Exported Function
GetEffectivePackageStatusForUser	537	Exported Function
GetDurationFormatEx	534	Exported Function
GetDiskSpaceInformationW	531	Exported Function
GetDriveTypeA	532	Exported Function
GetDriveTypeW	533	Exported Function
GetExtensionProperty	554	Exported Function
GetFileVersionInfoSizeA	573	Exported Function
GetFileVersionInfoSizeExA	574	Exported Function
GetFileVersionInfoSizeExW	575	Exported Function
GetFileVersionInfoExW	572	Exported Function
GetFileVersionInfoA	569	Exported Function
GetFileVersionInfoByHandle	570	Exported Function
GetFileVersionInfoExA	571	Exported Function
GetFullPathNameA	580	Exported Function
GetFullPathNameW	581	Exported Function
GetGamingDeviceModelInformation	584	Exported Function
GetFinalPathNameByHandleW	579	Exported Function
GetFileVersionInfoSizeW	576	Exported Function
GetFileVersionInfoW	577	Exported Function
GetFinalPathNameByHandleA	578	Exported Function
GetFileType	568	Exported Function
GetFileAttributesExW	558	Exported Function
GetFileAttributesW	559	Exported Function
GetFileInformationByHandle	560	Exported Function
GetFileAttributesExA	557	Exported Function
GetExtensionProperty2	553	Exported Function
GetFallbackDisplayName	555	Exported Function
GetFileAttributesA	556	Exported Function
GetFileSize	565	Exported Function
GetFileSizeEx	566	Exported Function
GetFileTime	567	Exported Function
GetFileSecurityW	564	Exported Function
GetFileInformationByHandleEx	561	Exported Function
GetFileMUIInfo	562	Exported Function
GetFileMUIPath	563	Exported Function
GetConsoleWindow	488	Exported Function
GetCPFileNameFromRegistry	437	Exported Function
GetCPHashNode	2	Exported Function
GetConsoleTitleW	487	Exported Function
GetConsoleScreenBufferInfoEx	484	Exported Function
GetConsoleSelectionInfo	485	Exported Function
GetConsoleTitleA	486	Exported Function
GetCurrentActCtx	491	Exported Function
GetCurrentApplicationUserModelId	492	Exported Function
GetCurrentConsoleFont	493	Exported Function
GetCurrencyFormatW	490	Exported Function
GetCPInfo	438	Exported Function
GetCPInfoExW	439	Exported Function
GetCurrencyFormatEx	489	Exported Function
GetConsoleScreenBufferInfo	483	Exported Function
GetConsoleDisplayMode	473	Exported Function
GetConsoleFontSize	474	Exported Function
GetConsoleHistoryInfo	475	Exported Function
GetConsoleCursorInfo	472	Exported Function
GetConsoleCommandHistoryLengthW	470	Exported Function
GetConsoleCommandHistoryW	471	Exported Function
GetConsoleCP	467	Exported Function
GetConsoleOriginalTitleW	480	Exported Function
GetConsoleOutputCP	481	Exported Function
GetConsoleProcessList	482	Exported Function
GetConsoleOriginalTitleA	479	Exported Function
GetConsoleInputExeNameA	476	Exported Function
GetConsoleInputExeNameW	477	Exported Function
GetConsoleMode	478	Exported Function
GetCurrentConsoleFontEx	494	Exported Function
GetCurrentProcessorNumberEx	514	Exported Function
GetCurrentTargetPlatformContext	515	Exported Function
GetCurrentThread	516	Exported Function
GetCurrentProcessorNumber	513	Exported Function
GetCurrentPackageSecurityContext	510	Exported Function
GetCurrentProcess	511	Exported Function
GetCurrentProcessId	512	Exported Function
GetDateFormatW	521	Exported Function
GetDeviceDriverBaseNameA	522	Exported Function
GetDeviceDriverBaseNameW	523	Exported Function
GetDateFormatEx	520	Exported Function
GetCurrentThreadId	517	Exported Function
GetCurrentThreadStackLimits	518	Exported Function
GetDateFormatA	519	Exported Function
GetCurrentPackageResourcesContext	509	Exported Function
GetCurrentPackageContext	499	Exported Function
GetCurrentPackageFamilyName	500	Exported Function
GetCurrentPackageFullName	501	Exported Function
GetCurrentPackageApplicationResourcesContext	498	Exported Function
GetCurrentDirectoryA	495	Exported Function
GetCurrentDirectoryW	496	Exported Function
GetCurrentPackageApplicationContext	497	Exported Function
GetCurrentPackageInfo3	505	Exported Function
GetCurrentPackagePath	508	Exported Function
GetCurrentPackagePath2	507	Exported Function
GetCurrentPackageInfo2	504	Exported Function
GetCurrentPackageGlobalizationContext	502	Exported Function
GetCurrentPackageId	503	Exported Function
GetCurrentPackageInfo	506	Exported Function
GetGeoInfoEx	585	Exported Function
GetPackagePath	661	Exported Function
GetPackagePathByFullName	663	Exported Function
GetPackagePathByFullName2	662	Exported Function
GetPackageOSMaxVersionTested	660	Exported Function
GetPackageInfo2	656	Exported Function
GetPackageInfo3	657	Exported Function
GetPackageInstallTime	659	Exported Function
GetPackageResourcesProperty	668	Exported Function
GetPackagesByPackageFamily	676	Exported Function
GetPackageSecurityContext	669	Exported Function
GetPackageResourcesContext	667	Exported Function
GetPackagePathOnVolume	664	Exported Function
GetPackageProperty	665	Exported Function
GetPackagePropertyString	666	Exported Function
GetPackageInfo	658	Exported Function
GetPackageApplicationResourcesContext	646	Exported Function
GetPackageContext	647	Exported Function
GetPackageFamilyName	648	Exported Function
GetPackageApplicationPropertyString	645	Exported Function
GetPackageApplicationContext	642	Exported Function
GetPackageApplicationIds	643	Exported Function
GetPackageApplicationProperty	644	Exported Function
GetPackageGlobalizationContext	653	Exported Function
GetPackageGlobalizationProperty	654	Exported Function
GetPackageId	655	Exported Function
GetPackageFullNameFromToken	652	Exported Function
GetPackageFamilyNameFromProgId	649	Exported Function
GetPackageFamilyNameFromToken	650	Exported Function
GetPackageFullName	651	Exported Function
GetPackageSecurityProperty	670	Exported Function
GetProcessHeaps	691	Exported Function
GetProcessId	692	Exported Function
GetProcessIdOfThread	693	Exported Function
GetProcessHeap	690	Exported Function
GetProcessDefaultCpuSets	687	Exported Function
GetProcessGroupAffinity	688	Exported Function
GetProcessHandleCount	689	Exported Function
GetProcessMitigationPolicy	698	Exported Function
GetProcessorSystemCycleTime	705	Exported Function
GetProcessPreferredUILanguages	699	Exported Function
GetProcessMemoryInfo	697	Exported Function
GetProcessImageFileNameA	694	Exported Function
GetProcessImageFileNameW	695	Exported Function
GetProcessInformation	696	Exported Function
GetProcAddressForCaller	686	Exported Function
GetPackageVolumeSisPath	675	Exported Function
GetPerformanceInfo	677	Exported Function
GetPersistedFileLocationW	678	Exported Function
GetPackageTargetPlatformProperty	674	Exported Function
GetPackageStatus	671	Exported Function
GetPackageStatusForUser	672	Exported Function
GetPackageStatusForUserSid	673	Exported Function
GetPriorityClass	683	Exported Function
GetPrivateObjectSecurity	684	Exported Function
GetProcAddress	685	Exported Function
GetPreviousFgPolicyRefreshInfoInternal	682	Exported Function
GetPersistedRegistryLocationW	679	Exported Function
GetPersistedRegistryValueW	680	Exported Function
GetPhysicallyInstalledSystemMemory	681	Exported Function
GetLogicalDriveStringsW	602	Exported Function
GetLogicalProcessorInformation	604	Exported Function
GetLogicalProcessorInformationEx	605	Exported Function
GetLogicalDrives	603	Exported Function
GetLocaleInfoHelper	600	Exported Function
GetLocaleInfoW	601	Exported Function
GetLocalTime	597	Exported Function
GetMemoryErrorHandlingCapabilities	610	Exported Function
GetModuleBaseNameA	611	Exported Function
GetModuleBaseNameW	612	Exported Function
GetMappedFileNameW	609	Exported Function
GetLongPathNameA	606	Exported Function
GetLongPathNameW	607	Exported Function
GetMappedFileNameA	608	Exported Function
GetLocaleInfoEx	599	Exported Function
GetHivePath	588	Exported Function
GetIntegratedDisplaySize	589	Exported Function
GetIsEdpEnabled	590	Exported Function
GetHandleInformation	587	Exported Function
GetGeoInfoW	586	Exported Function
GetGPOListInternalA	582	Exported Function
GetGPOListInternalW	583	Exported Function
GetLastError	595	Exported Function
GetLengthSid	596	Exported Function
GetLocaleInfoA	598	Exported Function
GetLargestConsoleWindowSize	594	Exported Function
GetIsWdagEnabled	591	Exported Function
GetKernelObjectSecurity	592	Exported Function
GetLargePageMinimum	593	Exported Function
GetModuleFileNameA	613	Exported Function
GetNumaProximityNodeEx	632	Exported Function
GetNumberFormatEx	633	Exported Function
GetNumberFormatW	634	Exported Function
GetNumaNodeProcessorMaskEx	631	Exported Function
GetNLSVersion	622	Exported Function
GetNLSVersionEx	623	Exported Function
GetNumaHighestNodeNumber	630	Exported Function
GetOsSafeBootMode	639	Exported Function
GetOverlappedResult	640	Exported Function
GetOverlappedResultEx	641	Exported Function
GetOsManufacturingMode	638	Exported Function
GetNumberOfConsoleInputEvents	635	Exported Function
GetNumberOfConsoleMouseButtons	636	Exported Function
GetOEMCP	637	Exported Function
GetNextFgPolicyRefreshInfoInternal	629	Exported Function
GetModuleHandleExA	618	Exported Function
GetModuleHandleExW	619	Exported Function
GetModuleHandleW	620	Exported Function
GetModuleHandleA	617	Exported Function
GetModuleFileNameExA	614	Exported Function
GetModuleFileNameExW	615	Exported Function
GetModuleFileNameW	616	Exported Function
GetNamedPipeHandleStateW	626	Exported Function
GetNamedPipeInfo	627	Exported Function
GetNativeSystemInfo	628	Exported Function
GetNamedPipeClientComputerNameW	625	Exported Function
GetModuleInformation	621	Exported Function
GetNamedLocaleHashNode	3	Exported Function
GetNamedPipeAttribute	624	Exported Function

Signature

• Status: Signature verified.
• Serial: 3300000266BD1580EFA75CD6D3000000000266
• Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: Kernelbase.dll
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.19041.488 (WinBuild.160101.0800)
• Product Version: 10.0.19041.488
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 32-bit

File Scan

• VirusTotal Detections: 0/69
• VirusTotal Link: https://www.virustotal.com/gui/file/92ec87598325686fc3b9edfa8714a2996b6e147d830fa4fcac313fcd16b6873e/detection/

Possible Misuse

The following table contains possible examples of KernelBase.dll being misused. While KernelBase.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source	Source File	Example	License
sigma	win_exploit_cve_2021_1675_printspooler_operational.yml	- 'UNIDRV.DLL, kernelbase.dll, '	DRL 1.0
sigma	proc_access_win_in_memory_assembly_execution.yml	description: Detects the access to processes by other suspicious processes which have reflectively loaded libraries in their memory space. An example is SilentTrinity C2 behaviour. Generally speaking, when Sysmon EventID 10 cannot reference a stack call to a dll loaded from disk (the standard way), it will display "UNKNOWN" as the module name. Usually this means the stack call points to a module that was reflectively loaded in memory. Adding to this, it is not common to see such few calls in the stack (ntdll.dll --> kernelbase.dll --> unknown) which essentially means that most of the functions required by the process to execute certain routines are already present in memory, not requiring any calls to external libraries. The latter should also be considered suspicious.	DRL 1.0
sigma	proc_access_win_in_memory_assembly_execution.yml	- '\|C:\WINDOWS\System32\KERNELBASE.dll+'	DRL 1.0
sigma	proc_access_win_lazagne_cred_dump_lsass_access.yml	- '\|C:\\Windows\\System32\\KERNELBASE.dll+'	DRL 1.0
sigma	proc_access_win_pypykatz_cred_dump_lsass_access.yml	- 'C:\Windows\System32\KERNELBASE.dll+'	DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.