kernel32.dll

  • File Path: C:\Windows\SysWOW64\kernel32.dll
  • Description: Windows NT BASE API Client DLL

Hashes

Type Hash
MD5 95F72B7C457507309706C15376B50A20
SHA1 763B3BFDC9187BD59969FFBD0FEC02A698CD26AD
SHA256 7DFB22969D7A5410F8F63459D0C912A39519064C8931D0A24BE1E86816A9E9D7
SHA384 343A654A804FAFF10E21846E98A1512954A73721AE4319D2FEC1F36CF894AEF8A8F557BBC6A557F53379B4051C0AFDC9
SHA512 E68F3B4625ACBF122CB1CF3A21E07143A3DA738FBC43FBFA6FE87310078EFFAB1FCF67E95EFAEBE3EAA295DF6615A4098D2798E3F8BC42B92C52A7E3808BBF96
SSDEEP 12288:AvVOXamsxOJyn3GifwW8yMosEx2vY3ZZCxuebW5+NbihMqzG+vUtSs/in0zoAEpS:ANO3sxWvYJZCxjbWwqzGHtSs/Q0zPk4x
IMP 1617108ECE43B9FE35EC2D2063CE9E03
PESHA1 2577251D00961BA9A76E244E60169A3DD6E5602E
PE256 EA63F4774676AD04A48A39B8E0878228493CF20730289C03398680A293A7FC08

DLL Exports:

Function Name Ordinal Type
OpenStateExplicit 1046 Exported Function
OpenThread 1047 Exported Function
OpenThreadToken 1048 Exported Function
OpenSemaphoreA 1043 Exported Function
OpenSemaphoreW 1044 Exported Function
OpenState 1045 Exported Function
OutputDebugStringW 1052 Exported Function
PackageFamilyNameFromFullName 1053 Exported Function
PackageFamilyNameFromId 1054 Exported Function
OpenWaitableTimerA 1049 Exported Function
OpenWaitableTimerW 1050 Exported Function
OutputDebugStringA 1051 Exported Function
OpenProfileUserMapping 1042 Exported Function
OpenJobObjectA 1033 Exported Function
OpenJobObjectW 1034 Exported Function
OpenMutexA 1035 Exported Function
OpenFileById 1030 Exported Function
OpenFileMappingA 1031 Exported Function
OpenFileMappingW 1032 Exported Function
OpenPrivateNamespaceW 1039 Exported Function
OpenProcess 1040 Exported Function
OpenProcessToken 1041 Exported Function
OpenMutexW 1036 Exported Function
OpenPackageInfoByFullName 1037 Exported Function
OpenPrivateNamespaceA 1038 Exported Function
Process32FirstW 1071 Exported Function
Process32Next 1072 Exported Function
Process32NextW 1073 Exported Function
PrivCopyFileExW 1068 Exported Function
PrivMoveFileIdentityW 1069 Exported Function
Process32First 1070 Exported Function
PssFreeSnapshot 1077 Exported Function
PssQuerySnapshot 1078 Exported Function
PssWalkMarkerCreate 1079 Exported Function
ProcessIdToSessionId 1074 Exported Function
PssCaptureSnapshot 1075 Exported Function
PssDuplicateSnapshot 1076 Exported Function
PrepareTape 1067 Exported Function
ParseApplicationUserModelId 1058 Exported Function
PeekConsoleInputA 1059 Exported Function
PeekConsoleInputW 1060 Exported Function
PackageFullNameFromId 1055 Exported Function
PackageIdFromFullName 1056 Exported Function
PackageNameAndPublisherIdFromFamilyName 1057 Exported Function
PowerCreateRequest 1064 Exported Function
PowerSetRequest 1065 Exported Function
PrefetchVirtualMemory 1066 Exported Function
PeekNamedPipe 1061 Exported Function
PostQueuedCompletionStatus 1062 Exported Function
PowerClearRequest 1063 Exported Function
MapViewOfFileEx 996 Exported Function
MapViewOfFileExNuma 997 Exported Function
MapViewOfFileFromApp 998 Exported Function
MapUserPhysicalPages 993 Exported Function
MapUserPhysicalPagesScatter 994 Exported Function
MapViewOfFile 995 Exported Function
Module32NextW 1002 Exported Function
MoveFileA 1003 Exported Function
MoveFileExA 1004 Exported Function
Module32First 999 Exported Function
Module32FirstW 1000 Exported Function
Module32Next 1001 Exported Function
LZStart 961 Exported Function
LZCloseFile 952 Exported Function
LZCopy 953 Exported Function
LZCreateFileW 954 Exported Function
lstrlenA 1599 Exported Function
lstrlenW 1600 Exported Function
LZClose 951 Exported Function
LZOpenFileW 958 Exported Function
LZRead 959 Exported Function
LZSeek 960 Exported Function
LZDone 955 Exported Function
LZInit 956 Exported Function
LZOpenFileA 957 Exported Function
NotifyUILanguageChange 1021 Exported Function
NtVdm64CreateProcessInternalW 1022 Exported Function
OfferVirtualMemory 1024 Exported Function
NlsUpdateSystemLocale 1018 Exported Function
NormalizeString 1019 Exported Function
NotifyMountMgr 1020 Exported Function
OpenEventA 1027 Exported Function
OpenEventW 1028 Exported Function
OpenFile 1029 Exported Function
OOBEComplete 1023 Exported Function
OpenConsoleW 1025 Exported Function
OpenConsoleWStub 1026 Exported Function
NlsUpdateLocale 1017 Exported Function
MoveFileW 1008 Exported Function
MoveFileWithProgressA 1009 Exported Function
MoveFileWithProgressW 1010 Exported Function
MoveFileExW 1005 Exported Function
MoveFileTransactedA 1006 Exported Function
MoveFileTransactedW 1007 Exported Function
NeedCurrentDirectoryForExePathW 1014 Exported Function
NlsCheckPolicy 1015 Exported Function
NlsGetCacheUpdateCount 1016 Exported Function
MulDiv 1011 Exported Function
MultiByteToWideChar 1012 Exported Function
NeedCurrentDirectoryForExePathA 1013 Exported Function
ReclaimVirtualMemory 1147 Exported Function
RegCloseKey 1148 Exported Function
RegCopyTreeW 1149 Exported Function
ReadFileScatter 1144 Exported Function
ReadProcessMemory 1145 Exported Function
ReadThreadProfilingData 1146 Exported Function
RegDeleteKeyExW 1153 Exported Function
RegDeleteTreeA 1154 Exported Function
RegDeleteTreeW 1155 Exported Function
RegCreateKeyExA 1150 Exported Function
RegCreateKeyExW 1151 Exported Function
RegDeleteKeyExA 1152 Exported Function
ReadFileEx 1143 Exported Function
ReadConsoleOutputA 1134 Exported Function
ReadConsoleOutputAttribute 1135 Exported Function
ReadConsoleOutputCharacterA 1136 Exported Function
ReadConsoleInputExA 1131 Exported Function
ReadConsoleInputExW 1132 Exported Function
ReadConsoleInputW 1133 Exported Function
ReadDirectoryChangesExW 1140 Exported Function
ReadDirectoryChangesW 1141 Exported Function
ReadFile 1142 Exported Function
ReadConsoleOutputCharacterW 1137 Exported Function
ReadConsoleOutputW 1138 Exported Function
ReadConsoleW 1139 Exported Function
RegisterConsoleVDM 1194 Exported Function
RegisterWaitForInputIdle 1195 Exported Function
RegisterWaitForSingleObject 1196 Exported Function
RegisterBadMemoryNotification 1191 Exported Function
RegisterConsoleIME 1192 Exported Function
RegisterConsoleOS2 1193 Exported Function
RegisterWowExec 1200 Exported Function
RegLoadKeyA 1167 Exported Function
RegLoadKeyW 1168 Exported Function
RegisterWaitForSingleObjectEx 1197 Exported Function
RegisterWaitUntilOOBECompleted 1198 Exported Function
RegisterWowBaseHandlers 1199 Exported Function
RegisterApplicationRestart 1190 Exported Function
RegEnumKeyExA 1159 Exported Function
RegEnumKeyExW 1160 Exported Function
RegEnumValueA 1161 Exported Function
RegDeleteValueA 1156 Exported Function
RegDeleteValueW 1157 Exported Function
RegDisablePredefinedCacheEx 1158 Exported Function
RegGetValueA 1165 Exported Function
RegGetValueW 1166 Exported Function
RegisterApplicationRecoveryCallback 1189 Exported Function
RegEnumValueW 1162 Exported Function
RegFlushKey 1163 Exported Function
RegGetKeySecurity 1164 Exported Function
QueryDosDeviceW 1096 Exported Function
QueryFullProcessImageNameA 1097 Exported Function
QueryFullProcessImageNameW 1098 Exported Function
QueryActCtxWWorker 1093 Exported Function
QueryDepthSList 1094 Exported Function
QueryDosDeviceA 1095 Exported Function
QueryIoRateControlInformationJobObject 1102 Exported Function
QueryMemoryResourceNotification 1103 Exported Function
QueryPerformanceCounter 1104 Exported Function
QueryIdleProcessorCycleTime 1099 Exported Function
QueryIdleProcessorCycleTimeEx 1100 Exported Function
QueryInformationJobObject 1101 Exported Function
QueryActCtxW 1092 Exported Function
PssWalkMarkerSeek 1083 Exported Function
PssWalkMarkerSeekToBeginning 1084 Exported Function
PssWalkMarkerSetPosition 1085 Exported Function
PssWalkMarkerFree 1080 Exported Function
PssWalkMarkerGetPosition 1081 Exported Function
PssWalkMarkerRewind 1082 Exported Function
PurgeComm 1089 Exported Function
QueryActCtxSettingsW 1090 Exported Function
QueryActCtxSettingsWWorker 1091 Exported Function
PssWalkMarkerTell 1086 Exported Function
PssWalkSnapshot 1087 Exported Function
PulseEvent 1088 Exported Function
QuirkIsEnabledForPackage4Worker 1121 Exported Function
QuirkIsEnabledForPackageWorker 1122 Exported Function
QuirkIsEnabledForProcessWorker 1123 Exported Function
QuirkIsEnabled3Worker 1118 Exported Function
QuirkIsEnabledForPackage2Worker 1119 Exported Function
QuirkIsEnabledForPackage3Worker 1120 Exported Function
RaiseInvalid16BitExeError 1127 Exported Function
ReadConsoleA 1129 Exported Function
ReadConsoleInputA 1130 Exported Function
QuirkIsEnabledWorker 1124 Exported Function
RaiseException 1125 Exported Function
RaiseFailFastException 1126 Exported Function
QuirkIsEnabled2Worker 1117 Exported Function
QueryProtectedPolicy 1108 Exported Function
QueryThreadCycleTime 1109 Exported Function
QueryThreadpoolStackInformation 1111 Exported Function
QueryPerformanceFrequency 1105 Exported Function
QueryProcessAffinityUpdateMode 1106 Exported Function
QueryProcessCycleTime 1107 Exported Function
QueueUserWorkItem 1114 Exported Function
QuirkGetData2Worker 1115 Exported Function
QuirkGetDataWorker 1116 Exported Function
QueryThreadProfiling 1110 Exported Function
QueryUnbiasedInterruptTime 1112 Exported Function
QueueUserAPC 1113 Exported Function
lstrlen 1598 Exported Function
InitializeCriticalSectionAndSpinCount 868 Exported Function
InitializeCriticalSectionEx 869 Exported Function
InitializeEnclave 870 Exported Function
InitializeContext 866 Exported Function
InitializeContext2 865 Exported Function
InitializeCriticalSection 867 Exported Function
InitializeSynchronizationBarrier 874 Exported Function
InitOnceBeginInitialize 860 Exported Function
InitOnceComplete 861 Exported Function
InitializeProcThreadAttributeList 871 Exported Function
InitializeSListHead 872 Exported Function
InitializeSRWLock 873 Exported Function
InitializeConditionVariable 864 Exported Function
HeapSize 851 Exported Function
HeapSummary 852 Exported Function
HeapUnlock 853 Exported Function
HeapQueryInformation 848 Exported Function
HeapReAlloc 849 Exported Function
HeapSetInformation 850 Exported Function
IdnToNameprepUnicode 857 Exported Function
IdnToUnicode 858 Exported Function
InitAtomTable 859 Exported Function
HeapValidate 854 Exported Function
HeapWalk 855 Exported Function
IdnToAscii 856 Exported Function
IsBadHugeReadPtr 888 Exported Function
IsBadHugeWritePtr 889 Exported Function
IsBadReadPtr 890 Exported Function
InterlockedPushListSListEx 885 Exported Function
InvalidateConsoleDIBits 886 Exported Function
IsBadCodePtr 887 Exported Function
IsCalendarLeapDay 894 Exported Function
IsCalendarLeapMonth 895 Exported Function
IsCalendarLeapYear 896 Exported Function
IsBadStringPtrA 891 Exported Function
IsBadStringPtrW 892 Exported Function
IsBadWritePtr 893 Exported Function
InterlockedPushListSList 2 Exported Function
InterlockedCompareExchange 877 Exported Function
InterlockedCompareExchange64 876 Exported Function
InterlockedDecrement 878 Exported Function
InitOnceExecuteOnce 862 Exported Function
InitOnceInitialize 863 Exported Function
InstallELAMCertificateInfo 875 Exported Function
InterlockedIncrement 882 Exported Function
InterlockedPopEntrySList 883 Exported Function
InterlockedPushEntrySList 884 Exported Function
InterlockedExchange 879 Exported Function
InterlockedExchangeAdd 880 Exported Function
InterlockedFlushSList 881 Exported Function
GlobalAddAtomA 814 Exported Function
GlobalAddAtomExA 815 Exported Function
GlobalAddAtomExW 816 Exported Function
GetWindowsDirectoryW 811 Exported Function
GetWriteWatch 812 Exported Function
GetXStateFeaturesMask 813 Exported Function
GlobalDeleteAtom 820 Exported Function
GlobalFindAtomA 821 Exported Function
GlobalFindAtomW 822 Exported Function
GlobalAddAtomW 817 Exported Function
GlobalAlloc 818 Exported Function
GlobalCompact 819 Exported Function
GetWindowsDirectoryA 810 Exported Function
GetVolumeInformationA 801 Exported Function
GetVolumeInformationByHandleW 802 Exported Function
GetVolumeInformationW 803 Exported Function
GetVersion 798 Exported Function
GetVersionExA 799 Exported Function
GetVersionExW 800 Exported Function
GetVolumePathNamesForVolumeNameA 808 Exported Function
GetVolumePathNamesForVolumeNameW 809 Exported Function
GetVolumePathNameW 807 Exported Function
GetVolumeNameForVolumeMountPointA 804 Exported Function
GetVolumeNameForVolumeMountPointW 805 Exported Function
GetVolumePathNameA 806 Exported Function
Heap32ListFirst 839 Exported Function
Heap32ListNext 840 Exported Function
Heap32Next 841 Exported Function
GlobalUnWire 834 Exported Function
GlobalWire 837 Exported Function
Heap32First 838 Exported Function
HeapDestroy 845 Exported Function
HeapFree 846 Exported Function
HeapLock 847 Exported Function
HeapAlloc 842 Exported Function
HeapCompact 843 Exported Function
HeapCreate 844 Exported Function
GlobalUnlock 836 Exported Function
GlobalGetAtomNameA 826 Exported Function
GlobalGetAtomNameW 827 Exported Function
GlobalHandle 828 Exported Function
GlobalFix 823 Exported Function
GlobalFlags 824 Exported Function
GlobalFree 825 Exported Function
GlobalReAlloc 832 Exported Function
GlobalSize 833 Exported Function
GlobalUnfix 835 Exported Function
GlobalLock 829 Exported Function
GlobalMemoryStatus 830 Exported Function
GlobalMemoryStatusEx 831 Exported Function
LoadStringBaseW 974 Exported Function
LocalAlloc 975 Exported Function
LocalCompact 976 Exported Function
LoadPackagedLibrary 971 Exported Function
LoadResource 972 Exported Function
LoadStringBaseExW 973 Exported Function
LocalFlags 979 Exported Function
LocalFree 980 Exported Function
LocalHandle 981 Exported Function
LocaleNameToLCID 988 Exported Function
LocalFileTimeToFileTime 977 Exported Function
LocalFileTimeToLocalSystemTime 978 Exported Function
LoadModule 970 Exported Function
LCMapStringW 950 Exported Function
LeaveCriticalSection 962 Exported Function
LeaveCriticalSectionWhenCallbackReturns 963 Exported Function
LCIDToLocaleName 947 Exported Function
LCMapStringA 948 Exported Function
LCMapStringEx 949 Exported Function
LoadLibraryExA 967 Exported Function
LoadLibraryExW 968 Exported Function
LoadLibraryW 969 Exported Function
LoadAppInitDlls 964 Exported Function
LoadEnclaveData 965 Exported Function
LoadLibraryA 966 Exported Function
lstrcmpiA 1590 Exported Function
lstrcmpiW 1591 Exported Function
lstrcmpW 1588 Exported Function
lstrcmp 1586 Exported Function
lstrcmpA 1587 Exported Function
lstrcmpi 1589 Exported Function
lstrcpynA 1596 Exported Function
lstrcpynW 1597 Exported Function
lstrcpyW 1594 Exported Function
lstrcpy 1592 Exported Function
lstrcpyA 1593 Exported Function
lstrcpyn 1595 Exported Function
lstrcatW 1585 Exported Function
LocalSize 985 Exported Function
LocalSystemTimeToLocalFileTime 986 Exported Function
LocalUnlock 987 Exported Function
LocalLock 982 Exported Function
LocalReAlloc 983 Exported Function
LocalShrink 984 Exported Function
LockResource 992 Exported Function
lstrcat 1583 Exported Function
lstrcatA 1584 Exported Function
LocateXStateFeature 989 Exported Function
LockFile 990 Exported Function
LockFileEx 991 Exported Function
IsValidLanguageGroup 913 Exported Function
IsValidLocale 914 Exported Function
IsValidLocaleName 915 Exported Function
IsUserCetAvailableInEnvironment 910 Exported Function
IsValidCalDateTime 911 Exported Function
IsValidCodePage 912 Exported Function
IsWow64Process2 918 Exported Function
K32EmptyWorkingSet 920 Exported Function
K32EnumDeviceDrivers 921 Exported Function
IsValidNLSVersion 916 Exported Function
IsWow64GuestMachineSupported 917 Exported Function
IsWow64Process 919 Exported Function
IsThreadpoolTimerSet 909 Exported Function
IsEnclaveTypeSupported 900 Exported Function
IsNativeVhdBoot 902 Exported Function
IsNLSDefinedString 901 Exported Function
IsDBCSLeadByte 897 Exported Function
IsDBCSLeadByteEx 898 Exported Function
IsDebuggerPresent 899 Exported Function
IsProcessorFeaturePresent 906 Exported Function
IsSystemResumeAutomatic 907 Exported Function
IsThreadAFiber 908 Exported Function
IsNormalizedString 903 Exported Function
IsProcessCritical 904 Exported Function
IsProcessInJob 905 Exported Function
K32GetPerformanceInfo 938 Exported Function
K32GetProcessImageFileNameA 939 Exported Function
K32GetProcessImageFileNameW 940 Exported Function
K32GetModuleFileNameExA 935 Exported Function
K32GetModuleFileNameExW 936 Exported Function
K32GetModuleInformation 937 Exported Function
K32InitializeProcessForWsWatch 944 Exported Function
K32QueryWorkingSet 945 Exported Function
K32QueryWorkingSetEx 946 Exported Function
K32GetProcessMemoryInfo 941 Exported Function
K32GetWsChanges 942 Exported Function
K32GetWsChangesEx 943 Exported Function
K32GetModuleBaseNameW 934 Exported Function
K32EnumProcessModules 924 Exported Function
K32EnumProcessModulesEx 925 Exported Function
K32GetDeviceDriverBaseNameA 927 Exported Function
K32EnumPageFilesA 922 Exported Function
K32EnumPageFilesW 923 Exported Function
K32EnumProcesses 926 Exported Function
K32GetMappedFileNameA 931 Exported Function
K32GetMappedFileNameW 932 Exported Function
K32GetModuleBaseNameA 933 Exported Function
K32GetDeviceDriverBaseNameW 928 Exported Function
K32GetDeviceDriverFileNameA 929 Exported Function
K32GetDeviceDriverFileNameW 930 Exported Function
TlsAlloc 1442 Exported Function
TlsFree 1443 Exported Function
TlsGetValue 1444 Exported Function
timeGetDevCaps 1603 Exported Function
timeGetSystemTime 1604 Exported Function
timeGetTime 1605 Exported Function
TransmitCommChar 1448 Exported Function
TryAcquireSRWLockExclusive 1449 Exported Function
TryAcquireSRWLockShared 1450 Exported Function
TlsSetValue 1445 Exported Function
Toolhelp32ReadProcessMemory 1446 Exported Function
TransactNamedPipe 1447 Exported Function
timeEndPeriod 1602 Exported Function
TermsrvOpenRegEntry 1434 Exported Function
TermsrvOpenUserClasses 1435 Exported Function
TermsrvRestoreKey 1436 Exported Function
TermsrvGetPreSetValue 1431 Exported Function
TermsrvGetWindowsDirectoryA 1432 Exported Function
TermsrvGetWindowsDirectoryW 1433 Exported Function
Thread32First 1440 Exported Function
Thread32Next 1441 Exported Function
timeBeginPeriod 1601 Exported Function
TermsrvSetKeySecurity 1437 Exported Function
TermsrvSetValueKey 1438 Exported Function
TermsrvSyncUserIniFileExt 1439 Exported Function
UpdateCalendarDayOfWeek 1469 Exported Function
UpdateProcThreadAttribute 1470 Exported Function
UpdateResourceA 1471 Exported Function
UnregisterWait 1466 Exported Function
UnregisterWaitEx 1467 Exported Function
UnregisterWaitUntilOOBECompleted 1468 Exported Function
VDMConsoleOperation 1473 Exported Function
VDMOperationStarted 1474 Exported Function
VerifyConsoleIoHandle 1478 Exported Function
UpdateResourceW 1472 Exported Function
UTRegister 1455 Exported Function
UTUnRegister 1456 Exported Function
UnregisterConsoleIME 1465 Exported Function
TzSpecificLocalTimeToSystemTimeEx 1454 Exported Function
UnhandledExceptionFilter 1457 Exported Function
UnlockFile 1458 Exported Function
TryEnterCriticalSection 1451 Exported Function
TrySubmitThreadpoolCallback 1452 Exported Function
TzSpecificLocalTimeToSystemTime 1453 Exported Function
UnregisterApplicationRecoveryCallback 1462 Exported Function
UnregisterApplicationRestart 1463 Exported Function
UnregisterBadMemoryNotification 1464 Exported Function
UnlockFileEx 1459 Exported Function
UnmapViewOfFile 1460 Exported Function
UnmapViewOfFileEx 1461 Exported Function
SetVDMCurrentDirectories 1396 Exported Function
SetVolumeLabelA 1397 Exported Function
SetVolumeLabelW 1398 Exported Function
SetupComm 1405 Exported Function
SetUserGeoID 1394 Exported Function
SetUserGeoName 1395 Exported Function
SetWaitableTimer 1402 Exported Function
SetWaitableTimerEx 1403 Exported Function
SetXStateFeaturesMask 1404 Exported Function
SetVolumeMountPointA 1399 Exported Function
SetVolumeMountPointW 1400 Exported Function
SetVolumeMountPointWStub 1401 Exported Function
SetUnhandledExceptionFilter 1393 Exported Function
SetThreadPreferredUILanguages 1377 Exported Function
SetThreadPriority 1378 Exported Function
SetThreadPriorityBoost 1379 Exported Function
SetThreadpoolTimerEx 1388 Exported Function
SetThreadpoolWait 1389 Exported Function
SetThreadpoolWaitEx 1390 Exported Function
SetThreadUILanguage 1383 Exported Function
SetTimerQueueTimer 1392 Exported Function
SetTimeZoneInformation 1391 Exported Function
SetThreadSelectedCpuSets 1380 Exported Function
SetThreadStackGuarantee 1381 Exported Function
SetThreadToken 1382 Exported Function
SystemTimeToTzSpecificLocalTimeEx 1422 Exported Function
TerminateJobObject 1423 Exported Function
TerminateProcess 1424 Exported Function
SwitchToThread 1419 Exported Function
SystemTimeToFileTime 1420 Exported Function
SystemTimeToTzSpecificLocalTime 1421 Exported Function
TermsrvCreateRegEntry 1428 Exported Function
TermsrvDeleteKey 1429 Exported Function
TermsrvDeleteValue 1430 Exported Function
TerminateThread 1425 Exported Function
TermsrvAppInstallMode 1426 Exported Function
TermsrvConvertSysRootToUserDir 1427 Exported Function
SwitchToFiber 1418 Exported Function
Sleep 1409 Exported Function
SleepConditionVariableCS 1410 Exported Function
SleepConditionVariableSRW 1411 Exported Function
ShowConsoleCursor 1406 Exported Function
SignalObjectAndWait 1407 Exported Function
SizeofResource 1408 Exported Function
StartThreadpoolIo 1415 Exported Function
SubmitThreadpoolWork 1416 Exported Function
SuspendThread 1417 Exported Function
SleepEx 1412 Exported Function
SortCloseHandle 1413 Exported Function
SortGetHandle 1414 Exported Function
Wow64GetThreadSelectorEntry 1543 Exported Function
Wow64RevertWow64FsRedirection 1544 Exported Function
Wow64SetThreadContext 1545 Exported Function
Wow64DisableWow64FsRedirection 1540 Exported Function
Wow64EnableWow64FsRedirection 1541 Exported Function
Wow64GetThreadContext 1542 Exported Function
WriteConsoleInputA 1548 Exported Function
WriteConsoleInputVDMA 1549 Exported Function
WriteConsoleInputVDMW 1550 Exported Function
Wow64SuspendThread 1546 Exported Function
Wow64Transition 3 Exported Function
WriteConsoleA 1547 Exported Function
WinExec 1539 Exported Function
WerUnregisterCustomMetadata 1525 Exported Function
WerUnregisterExcludedMemoryBlock 1526 Exported Function
WerUnregisterFile 1527 Exported Function
WerSetFlagsWorker 1522 Exported Function
WerUnregisterAdditionalProcess 1523 Exported Function
WerUnregisterAppLocalDump 1524 Exported Function
WerUnregisterRuntimeExceptionModule 1531 Exported Function
WerUnregisterRuntimeExceptionModuleWorker 1532 Exported Function
WideCharToMultiByte 1538 Exported Function
WerUnregisterFileWorker 1528 Exported Function
WerUnregisterMemoryBlock 1529 Exported Function
WerUnregisterMemoryBlockWorker 1530 Exported Function
WriteProcessMemory 1567 Exported Function
WriteProfileSectionA 1568 Exported Function
WriteProfileSectionW 1569 Exported Function
WritePrivateProfileStringW 1564 Exported Function
WritePrivateProfileStructA 1565 Exported Function
WritePrivateProfileStructW 1566 Exported Function
WTSGetActiveConsoleSessionId 1493 Exported Function
ZombifyActCtx 1573 Exported Function
ZombifyActCtxWorker 1574 Exported Function
WriteProfileStringA 1570 Exported Function
WriteProfileStringW 1571 Exported Function
WriteTapemark 1572 Exported Function
WritePrivateProfileStringA 1563 Exported Function
WriteConsoleOutputCharacterA 1554 Exported Function
WriteConsoleOutputCharacterW 1555 Exported Function
WriteConsoleOutputW 1556 Exported Function
WriteConsoleInputW 1551 Exported Function
WriteConsoleOutputA 1552 Exported Function
WriteConsoleOutputAttribute 1553 Exported Function
WriteFileGather 1560 Exported Function
WritePrivateProfileSectionA 1561 Exported Function
WritePrivateProfileSectionW 1562 Exported Function
WriteConsoleW 1557 Exported Function
WriteFile 1558 Exported Function
WriteFileEx 1559 Exported Function
VirtualUnlock 1492 Exported Function
WaitCommEvent 1494 Exported Function
WaitForDebugEvent 1495 Exported Function
VirtualProtectEx 1489 Exported Function
VirtualQuery 1490 Exported Function
VirtualQueryEx 1491 Exported Function
WaitForSingleObject 1499 Exported Function
WaitForSingleObjectEx 1500 Exported Function
WaitForThreadpoolIoCallbacks 1501 Exported Function
WaitForDebugEventEx 1496 Exported Function
WaitForMultipleObjects 1497 Exported Function
WaitForMultipleObjectsEx 1498 Exported Function
VirtualProtect 1488 Exported Function
VerLanguageNameA 1475 Exported Function
VerLanguageNameW 1476 Exported Function
VerSetConditionMask 1477 Exported Function
VerifyScripts 1479 Exported Function
VerifyVersionInfoA 1480 Exported Function
VerifyVersionInfoW 1481 Exported Function
VirtualFree 1485 Exported Function
VirtualFreeEx 1486 Exported Function
VirtualLock 1487 Exported Function
VirtualAlloc 1482 Exported Function
VirtualAllocEx 1483 Exported Function
VirtualAllocExNuma 1484 Exported Function
WerRegisterCustomMetadata 1513 Exported Function
WerRegisterExcludedMemoryBlock 1514 Exported Function
WerRegisterFile 1515 Exported Function
WerpNotifyUseStringResourceWorker 1537 Exported Function
WerRegisterAdditionalProcess 1511 Exported Function
WerRegisterAppLocalDump 1512 Exported Function
WerRegisterRuntimeExceptionModule 1519 Exported Function
WerRegisterRuntimeExceptionModuleWorker 1520 Exported Function
WerSetFlags 1521 Exported Function
WerRegisterFileWorker 1516 Exported Function
WerRegisterMemoryBlock 1517 Exported Function
WerRegisterMemoryBlockWorker 1518 Exported Function
WerpNotifyLoadStringResourceWorker 1536 Exported Function
WaitNamedPipeA 1505 Exported Function
WaitNamedPipeW 1506 Exported Function
WakeAllConditionVariable 1507 Exported Function
WaitForThreadpoolTimerCallbacks 1502 Exported Function
WaitForThreadpoolWaitCallbacks 1503 Exported Function
WaitForThreadpoolWorkCallbacks 1504 Exported Function
WerpGetDebugger 1533 Exported Function
WerpInitiateRemoteRecovery 1534 Exported Function
WerpLaunchAeDebug 1535 Exported Function
WakeConditionVariable 1508 Exported Function
WerGetFlags 1509 Exported Function
WerGetFlagsWorker 1510 Exported Function
SetThreadpoolTimer 1387 Exported Function
SetCalendarInfoW 1246 Exported Function
SetCommBreak 1248 Exported Function
SetCommConfig 1249 Exported Function
SearchPathW 1243 Exported Function
SetCachedSigningLevel 1244 Exported Function
SetCalendarInfoA 1245 Exported Function
SetComPlusPackageInstallStatus 1247 Exported Function
SetComputerNameA 1253 Exported Function
SetComputerNameEx2W 1254 Exported Function
SetCommMask 1250 Exported Function
SetCommState 1251 Exported Function
SetCommTimeouts 1252 Exported Function
SearchPathA 1242 Exported Function
RtlCaptureContext 1233 Exported Function
RtlCaptureStackBackTrace 1234 Exported Function
RtlFillMemory 1235 Exported Function
ResolveLocaleName 1230 Exported Function
RestoreLastError 1231 Exported Function
ResumeThread 1232 Exported Function
RtlZeroMemory 1239 Exported Function
ScrollConsoleScreenBufferA 1240 Exported Function
ScrollConsoleScreenBufferW 1241 Exported Function
RtlMoveMemory 1236 Exported Function
RtlPcToFileHeader 1237 Exported Function
RtlUnwind 1238 Exported Function
SetConsoleInputExeNameW 1271 Exported Function
SetConsoleKeyShortcuts 1272 Exported Function
SetConsoleLocalEUDC 1273 Exported Function
SetConsoleHistoryInfo 1268 Exported Function
SetConsoleIcon 1269 Exported Function
SetConsoleInputExeNameA 1270 Exported Function
SetConsoleNlsMode 1277 Exported Function
SetConsoleNumberOfCommandsA 1278 Exported Function
SetConsoleNumberOfCommandsW 1279 Exported Function
SetConsoleMaximumWindowSize 1274 Exported Function
SetConsoleMenuClose 1275 Exported Function
SetConsoleMode 1276 Exported Function
SetConsoleHardwareState 1267 Exported Function
SetConsoleActiveScreenBuffer 1258 Exported Function
SetConsoleCP 1259 Exported Function
SetConsoleCtrlHandler 1260 Exported Function
SetComputerNameExA 1255 Exported Function
SetComputerNameExW 1256 Exported Function
SetComputerNameW 1257 Exported Function
SetConsoleCursorPosition 1264 Exported Function
SetConsoleDisplayMode 1265 Exported Function
SetConsoleFont 1266 Exported Function
SetConsoleCursor 1261 Exported Function
SetConsoleCursorInfo 1262 Exported Function
SetConsoleCursorMode 1263 Exported Function
RegSetValueExA 1185 Exported Function
RegSetValueExW 1186 Exported Function
RegUnLoadKeyA 1187 Exported Function
RegSaveKeyExA 1182 Exported Function
RegSaveKeyExW 1183 Exported Function
RegSetKeySecurity 1184 Exported Function
ReleaseMutex 1203 Exported Function
ReleaseMutexWhenCallbackReturns 1204 Exported Function
ReleaseSemaphore 1207 Exported Function
RegUnLoadKeyW 1188 Exported Function
ReleaseActCtx 1201 Exported Function
ReleaseActCtxWorker 1202 Exported Function
RegRestoreKeyW 1181 Exported Function
RegOpenCurrentUser 1172 Exported Function
RegOpenKeyExA 1173 Exported Function
RegOpenKeyExW 1174 Exported Function
RegLoadMUIStringA 1169 Exported Function
RegLoadMUIStringW 1170 Exported Function
RegNotifyChangeKeyValue 1171 Exported Function
RegQueryValueExA 1178 Exported Function
RegQueryValueExW 1179 Exported Function
RegRestoreKeyA 1180 Exported Function
RegOpenUserClassesRoot 1175 Exported Function
RegQueryInfoKeyA 1176 Exported Function
RegQueryInfoKeyW 1177 Exported Function
ReplaceFileW 1221 Exported Function
ReplacePartitionUnit 1222 Exported Function
RequestDeviceWakeup 1223 Exported Function
ReOpenFile 1128 Exported Function
ReplaceFile 1219 Exported Function
ReplaceFileA 1220 Exported Function
ResizePseudoConsole 1227 Exported Function
ResolveDelayLoadedAPI 1228 Exported Function
ResolveDelayLoadsFromDll 1229 Exported Function
RequestWakeupLatency 1224 Exported Function
ResetEvent 1225 Exported Function
ResetWriteWatch 1226 Exported Function
RemoveVectoredExceptionHandler 1218 Exported Function
RemoveDirectoryA 1209 Exported Function
RemoveDirectoryTransactedA 1210 Exported Function
RemoveDirectoryTransactedW 1211 Exported Function
ReleaseSemaphoreWhenCallbackReturns 1208 Exported Function
ReleaseSRWLockExclusive 1205 Exported Function
ReleaseSRWLockShared 1206 Exported Function
RemoveLocalAlternateComputerNameW 1215 Exported Function
RemoveSecureMemoryCacheCallback 1216 Exported Function
RemoveVectoredContinueHandler 1217 Exported Function
RemoveDirectoryW 1212 Exported Function
RemoveDllDirectory 1213 Exported Function
RemoveLocalAlternateComputerNameA 1214 Exported Function
SetProcessDefaultCpuSets 1347 Exported Function
SetProcessDEPPolicy 1346 Exported Function
SetProcessDynamicEHContinuationTargets 1348 Exported Function
SetPriorityClass 1343 Exported Function
SetProcessAffinityMask 1344 Exported Function
SetProcessAffinityUpdateMode 1345 Exported Function
SetProcessPriorityBoost 1352 Exported Function
SetProcessShutdownParameters 1353 Exported Function
SetProcessWorkingSetSize 1354 Exported Function
SetProcessInformation 1349 Exported Function
SetProcessMitigationPolicy 1350 Exported Function
SetProcessPreferredUILanguages 1351 Exported Function
SetNamedPipeHandleState 1342 Exported Function
SetLastError 1333 Exported Function
SetLocaleInfoA 1337 Exported Function
SetLocaleInfoW 1338 Exported Function
SetInformationJobObject 1330 Exported Function
SetIoRateControlInformationJobObject 1331 Exported Function
SetLastConsoleEventActive 1332 Exported Function
SetMailslotInfo 1339 Exported Function
SetMessageWaitingIndicator 1340 Exported Function
SetNamedPipeAttribute 1341 Exported Function
SetLocalPrimaryComputerNameA 1334 Exported Function
SetLocalPrimaryComputerNameW 1335 Exported Function
SetLocalTime 1336 Exported Function
SetThreadExecutionState 1371 Exported Function
SetThreadGroupAffinity 1372 Exported Function
SetThreadIdealProcessor 1373 Exported Function
SetThreadContext 1368 Exported Function
SetThreadDescription 1369 Exported Function
SetThreadErrorMode 1370 Exported Function
SetThreadpoolStackInformation 1384 Exported Function
SetThreadpoolThreadMaximum 1385 Exported Function
SetThreadpoolThreadMinimum 1386 Exported Function
SetThreadIdealProcessorEx 1374 Exported Function
SetThreadInformation 1375 Exported Function
SetThreadLocale 1376 Exported Function
SetThreadAffinityMask 1367 Exported Function
SetStdHandle 1358 Exported Function
SetStdHandleEx 1359 Exported Function
SetSystemFileCacheSize 1360 Exported Function
SetProcessWorkingSetSizeEx 1355 Exported Function
SetProtectedPolicy 1356 Exported Function
SetSearchPathMode 1357 Exported Function
SetTapeParameters 1364 Exported Function
SetTapePosition 1365 Exported Function
SetTermsrvAppInstallMode 1366 Exported Function
SetSystemPowerState 1361 Exported Function
SetSystemTime 1362 Exported Function
SetSystemTimeAdjustment 1363 Exported Function
SetDllDirectoryA 1296 Exported Function
SetDllDirectoryW 1297 Exported Function
SetDynamicTimeZoneInformation 1298 Exported Function
SetDefaultCommConfigA 1293 Exported Function
SetDefaultCommConfigW 1294 Exported Function
SetDefaultDllDirectories 1295 Exported Function
SetEnvironmentVariableA 1302 Exported Function
SetEnvironmentVariableW 1303 Exported Function
SetErrorMode 1304 Exported Function
SetEndOfFile 1299 Exported Function
SetEnvironmentStringsA 1300 Exported Function
SetEnvironmentStringsW 1301 Exported Function
SetCurrentDirectoryW 1292 Exported Function
SetConsoleScreenBufferInfoEx 1283 Exported Function
SetConsoleScreenBufferSize 1284 Exported Function
SetConsoleTextAttribute 1285 Exported Function
SetConsoleOS2OemFormat 1280 Exported Function
SetConsoleOutputCP 1281 Exported Function
SetConsolePalette 1282 Exported Function
SetCriticalSectionSpinCount 1289 Exported Function
SetCurrentConsoleFontEx 1290 Exported Function
SetCurrentDirectoryA 1291 Exported Function
SetConsoleTitleA 1286 Exported Function
SetConsoleTitleW 1287 Exported Function
SetConsoleWindowInfo 1288 Exported Function
SetFileTime 1321 Exported Function
SetFileValidData 1322 Exported Function
SetFirmwareEnvironmentVariableA 1323 Exported Function
SetFilePointerEx 1318 Exported Function
SetFileShortNameA 1319 Exported Function
SetFileShortNameW 1320 Exported Function
SetHandleContext 1327 Exported Function
SetHandleCount 1328 Exported Function
SetHandleInformation 1329 Exported Function
SetFirmwareEnvironmentVariableExA 1324 Exported Function
SetFirmwareEnvironmentVariableExW 1325 Exported Function
SetFirmwareEnvironmentVariableW 1326 Exported Function
SetFilePointer 1317 Exported Function
SetFileApisToOEM 1308 Exported Function
SetFileAttributesA 1309 Exported Function
SetFileAttributesTransactedA 1310 Exported Function
SetEvent 1305 Exported Function
SetEventWhenCallbackReturns 1306 Exported Function
SetFileApisToANSI 1307 Exported Function
SetFileCompletionNotificationModes 1314 Exported Function
SetFileInformationByHandle 1315 Exported Function
SetFileIoOverlappedRange 1316 Exported Function
SetFileAttributesTransactedW 1311 Exported Function
SetFileAttributesW 1312 Exported Function
SetFileBandwidthReservation 1313 Exported Function
GetVDMCurrentDirectories 797 Exported Function
CtrlRoutine 262 Exported Function
DeactivateActCtx 263 Exported Function
DeactivateActCtxWorker 264 Exported Function
CreateWaitableTimerExA 259 Exported Function
CreateWaitableTimerExW 260 Exported Function
CreateWaitableTimerW 261 Exported Function
DebugBreakProcess 268 Exported Function
DebugSetProcessKillOnExit 269 Exported Function
DecodePointer 270 Exported Function
DebugActiveProcess 265 Exported Function
DebugActiveProcessStop 266 Exported Function
DebugBreak 267 Exported Function
CreateWaitableTimerA 258 Exported Function
CreateThreadpool 249 Exported Function
CreateThreadpoolCleanupGroup 250 Exported Function
CreateThreadpoolIo 251 Exported Function
CreateSymbolicLinkW 246 Exported Function
CreateTapePartition 247 Exported Function
CreateThread 248 Exported Function
CreateTimerQueue 255 Exported Function
CreateTimerQueueTimer 256 Exported Function
CreateToolhelp32Snapshot 257 Exported Function
CreateThreadpoolTimer 252 Exported Function
CreateThreadpoolWait 253 Exported Function
CreateThreadpoolWork 254 Exported Function
DeleteTimerQueueTimer 287 Exported Function
DeleteVolumeMountPointA 288 Exported Function
DeleteVolumeMountPointW 289 Exported Function
DeleteSynchronizationBarrier 284 Exported Function
DeleteTimerQueue 285 Exported Function
DeleteTimerQueueEx 286 Exported Function
DisassociateCurrentThreadFromCallback 293 Exported Function
DiscardVirtualMemory 294 Exported Function
DisconnectNamedPipe 295 Exported Function
DeviceIoControl 290 Exported Function
DisableThreadLibraryCalls 291 Exported Function
DisableThreadProfiling 292 Exported Function
DeleteProcThreadAttributeList 283 Exported Function
DelayLoadFailureHook 274 Exported Function
DeleteAtom 275 Exported Function
DeleteBoundaryDescriptor 276 Exported Function
DecodeSystemPointer 271 Exported Function
DefineDosDeviceA 272 Exported Function
DefineDosDeviceW 273 Exported Function
DeleteFileTransactedA 280 Exported Function
DeleteFileTransactedW 281 Exported Function
DeleteFileW 282 Exported Function
DeleteCriticalSection 277 Exported Function
DeleteFiber 278 Exported Function
DeleteFileA 279 Exported Function
CreateHardLinkW 212 Exported Function
CreateIoCompletionPort 213 Exported Function
CreateJobObjectA 214 Exported Function
CreateHardLinkA 209 Exported Function
CreateHardLinkTransactedA 210 Exported Function
CreateHardLinkTransactedW 211 Exported Function
CreateMailslotW 218 Exported Function
CreateMemoryResourceNotification 219 Exported Function
CreateMutexA 220 Exported Function
CreateJobObjectW 215 Exported Function
CreateJobSet 216 Exported Function
CreateMailslotA 217 Exported Function
CreateFileW 208 Exported Function
CreateFile2 199 Exported Function
CreateFileA 200 Exported Function
CreateFileMappingA 201 Exported Function
CreateEventW 196 Exported Function
CreateFiber 197 Exported Function
CreateFiberEx 198 Exported Function
CreateFileMappingW 205 Exported Function
CreateFileTransactedA 206 Exported Function
CreateFileTransactedW 207 Exported Function
CreateFileMappingFromApp 202 Exported Function
CreateFileMappingNumaA 203 Exported Function
CreateFileMappingNumaW 204 Exported Function
CreateRemoteThreadEx 237 Exported Function
CreateSemaphoreA 238 Exported Function
CreateSemaphoreExA 239 Exported Function
CreateProcessW 234 Exported Function
CreatePseudoConsole 235 Exported Function
CreateRemoteThread 236 Exported Function
CreateSymbolicLinkA 243 Exported Function
CreateSymbolicLinkTransactedA 244 Exported Function
CreateSymbolicLinkTransactedW 245 Exported Function
CreateSemaphoreExW 240 Exported Function
CreateSemaphoreW 241 Exported Function
CreateSocketHandle 242 Exported Function
CreateProcessInternalW 233 Exported Function
CreateNamedPipeA 224 Exported Function
CreateNamedPipeW 225 Exported Function
CreatePipe 226 Exported Function
CreateMutexExA 221 Exported Function
CreateMutexExW 222 Exported Function
CreateMutexW 223 Exported Function
CreateProcessAsUserA 230 Exported Function
CreateProcessAsUserW 231 Exported Function
CreateProcessInternalA 232 Exported Function
CreatePrivateNamespaceA 227 Exported Function
CreatePrivateNamespaceW 228 Exported Function
CreateProcessA 229 Exported Function
FatalAppExitA 362 Exported Function
FatalAppExitW 363 Exported Function
FatalExit 364 Exported Function
ExpandEnvironmentStringsW 359 Exported Function
ExpungeConsoleCommandHistoryA 360 Exported Function
ExpungeConsoleCommandHistoryW 361 Exported Function
FillConsoleOutputAttribute 368 Exported Function
FillConsoleOutputCharacterA 369 Exported Function
FillConsoleOutputCharacterW 370 Exported Function
FileTimeToDosDateTime 365 Exported Function
FileTimeToLocalFileTime 366 Exported Function
FileTimeToSystemTime 367 Exported Function
ExpandEnvironmentStringsA 358 Exported Function
EnumTimeFormatsEx 347 Exported Function
EnumTimeFormatsW 348 Exported Function
EnumUILanguagesA 349 Exported Function
EnumSystemLocalesEx 344 Exported Function
EnumSystemLocalesW 345 Exported Function
EnumTimeFormatsA 346 Exported Function
ExitProcess 355 Exported Function
ExitThread 356 Exported Function
ExitVDM 357 Exported Function
EnumUILanguagesW 350 Exported Function
EraseTape 353 Exported Function
EscapeCommFunction 354 Exported Function
FindFirstFileTransactedA 387 Exported Function
FindFirstFileTransactedW 388 Exported Function
FindFirstFileW 389 Exported Function
FindFirstFileExW 384 Exported Function
FindFirstFileNameTransactedW 385 Exported Function
FindFirstFileNameW 386 Exported Function
FindFirstVolumeMountPointA 393 Exported Function
FindFirstVolumeMountPointW 394 Exported Function
FindFirstVolumeW 395 Exported Function
FindFirstStreamTransactedW 390 Exported Function
FindFirstStreamW 391 Exported Function
FindFirstVolumeA 392 Exported Function
FindFirstFileExA 383 Exported Function
FindActCtxSectionStringW 374 Exported Function
FindActCtxSectionStringWWorker 375 Exported Function
FindAtomA 376 Exported Function
FindActCtxSectionGuid 371 Exported Function
FindActCtxSectionGuidWorker 372 Exported Function
FindActCtxSectionStringA 373 Exported Function
FindFirstChangeNotificationA 380 Exported Function
FindFirstChangeNotificationW 381 Exported Function
FindFirstFileA 382 Exported Function
FindAtomW 377 Exported Function
FindClose 378 Exported Function
FindCloseChangeNotification 379 Exported Function
EnumCalendarInfoA 312 Exported Function
EnumCalendarInfoExA 313 Exported Function
EnumCalendarInfoExEx 314 Exported Function
EndUpdateResourceW 309 Exported Function
EnterCriticalSection 310 Exported Function
EnterSynchronizationBarrier 311 Exported Function
EnumDateFormatsExA 318 Exported Function
EnumDateFormatsExEx 319 Exported Function
EnumDateFormatsExW 320 Exported Function
EnumCalendarInfoExW 315 Exported Function
EnumCalendarInfoW 316 Exported Function
EnumDateFormatsA 317 Exported Function
EndUpdateResourceA 308 Exported Function
DosDateTimeToFileTime 299 Exported Function
DosPathToSessionPathA 300 Exported Function
DosPathToSessionPathW 301 Exported Function
DnsHostnameToComputerNameA 296 Exported Function
DnsHostnameToComputerNameExW 297 Exported Function
DnsHostnameToComputerNameW 298 Exported Function
EnableThreadProfiling 305 Exported Function
EncodePointer 306 Exported Function
EncodeSystemPointer 307 Exported Function
DuplicateConsoleHandle 302 Exported Function
DuplicateEncryptionInfoFileExt 303 Exported Function
DuplicateHandle 304 Exported Function
EnumResourceTypesW 335 Exported Function
EnumSystemCodePagesA 336 Exported Function
EnumSystemCodePagesW 337 Exported Function
EnumResourceTypesA 332 Exported Function
EnumResourceTypesExA 333 Exported Function
EnumResourceTypesExW 334 Exported Function
EnumSystemLanguageGroupsA 341 Exported Function
EnumSystemLanguageGroupsW 342 Exported Function
EnumSystemLocalesA 343 Exported Function
EnumSystemFirmwareTables 338 Exported Function
EnumSystemGeoID 339 Exported Function
EnumSystemGeoNames 340 Exported Function
EnumResourceNamesW 331 Exported Function
EnumLanguageGroupLocalesA 322 Exported Function
EnumLanguageGroupLocalesW 323 Exported Function
EnumResourceLanguagesA 324 Exported Function
EnumDateFormatsW 321 Exported Function
EnumerateLocalComputerNamesA 351 Exported Function
EnumerateLocalComputerNamesW 352 Exported Function
EnumResourceNamesA 328 Exported Function
EnumResourceNamesExA 329 Exported Function
EnumResourceNamesExW 330 Exported Function
EnumResourceLanguagesExA 325 Exported Function
EnumResourceLanguagesExW 326 Exported Function
EnumResourceLanguagesW 327 Exported Function
CreateEventExW 195 Exported Function
BaseGenerateAppCompatData 62 Exported Function
BaseGetNamedObjectDirectory 63 Exported Function
BaseInitAppcompatCacheSupport 64 Exported Function
BaseFormatObjectAttributes 59 Exported Function
BaseFormatTimeOut 60 Exported Function
BaseFreeAppCompatDataForProcessWorker 61 Exported Function
BaseIsDosApplication 68 Exported Function
Basep8BitStringToDynamicUnicodeString 77 Exported Function
BasepAllocateActivationContextActivationBlock 78 Exported Function
BaseInitAppcompatCacheSupportWorker 65 Exported Function
BaseIsAppcompatInfrastructureDisabled 66 Exported Function
BaseIsAppcompatInfrastructureDisabledWorker 67 Exported Function
BaseFlushAppcompatCacheWorker 58 Exported Function
BaseCheckElevation 49 Exported Function
BaseCleanupAppcompatCacheSupport 50 Exported Function
BaseCleanupAppcompatCacheSupportWorker 51 Exported Function
BaseCheckAppcompatCacheEx 46 Exported Function
BaseCheckAppcompatCacheExWorker 47 Exported Function
BaseCheckAppcompatCacheWorker 48 Exported Function
BaseDumpAppcompatCacheWorker 55 Exported Function
BaseElevationPostProcessing 56 Exported Function
BaseFlushAppcompatCache 57 Exported Function
BaseDestroyVDMEnvironment 52 Exported Function
BaseDllReadWriteIniFile 53 Exported Function
BaseDumpAppcompatCache 54 Exported Function
BasepIsProcessAllowed 95 Exported Function
BasepMapModuleHandle 96 Exported Function
BasepNotifyLoadStringResource 97 Exported Function
BasepGetExeArchType 92 Exported Function
BasepGetPackageActivationTokenForSxS 93 Exported Function
BasepInitAppCompatData 94 Exported Function
BasepQueryModuleChpeSettings 101 Exported Function
BasepReleaseAppXContext 102 Exported Function
BasepReleaseSxsCreateProcessUtilityStruct 103 Exported Function
BasepPostSuccessAppXExtension 98 Exported Function
BasepProcessInvalidImage 99 Exported Function
BasepQueryAppCompat 100 Exported Function
BasepGetComputerNameFromNtPath 91 Exported Function
BasepCheckAppCompat 82 Exported Function
BasepCheckWebBladeHashes 83 Exported Function
BasepCheckWinSaferRestrictions 84 Exported Function
BasepAnsiStringToDynamicUnicodeString 79 Exported Function
BasepAppContainerEnvironmentExtension 80 Exported Function
BasepAppXExtension 81 Exported Function
BasepFreeActivationContextActivationBlock 88 Exported Function
BasepFreeAppCompatData 89 Exported Function
BasepGetAppCompatData 90 Exported Function
BasepConstructSxsCreateProcessMessage 85 Exported Function
BasepCopyEncryption 86 Exported Function
BasepFinishPackageActivationForSxS 87 Exported Function
AddDllDirectory 12 Exported Function
AddIntegrityLabelToBoundaryDescriptor 13 Exported Function
AddLocalAlternateComputerNameA 14 Exported Function
AddAtomW 9 Exported Function
AddConsoleAliasA 10 Exported Function
AddConsoleAliasW 11 Exported Function
AddResourceAttributeAce 18 Exported Function
AddScopedPolicyIDAce 20 Exported Function
AddSecureMemoryCacheCallback 21 Exported Function
AddLocalAlternateComputerNameW 15 Exported Function
AddRefActCtx 16 Exported Function
AddRefActCtxWorker 17 Exported Function
AddAtomA 8 Exported Function
_lcreat 1578 Exported Function
_llseek 1579 Exported Function
_lopen 1580 Exported Function
_hread 1575 Exported Function
_hwrite 1576 Exported Function
_lclose 1577 Exported Function
AcquireSRWLockShared 5 Exported Function
ActivateActCtx 6 Exported Function
ActivateActCtxWorker 7 Exported Function
_lread 1581 Exported Function
_lwrite 1582 Exported Function
AcquireSRWLockExclusive 4 Exported Function
AppPolicyGetWindowingModel 35 Exported Function
AppXGetOSMaxVersionTested 36 Exported Function
AreFileApisANSI 39 Exported Function
AppPolicyGetProcessTerminationMethod 32 Exported Function
AppPolicyGetShowDeveloperDiagnostic 33 Exported Function
AppPolicyGetThreadInitializationType 34 Exported Function
BackupSeek 43 Exported Function
BackupWrite 44 Exported Function
BaseCheckAppcompatCache 45 Exported Function
AssignProcessToJobObject 40 Exported Function
AttachConsole 41 Exported Function
BackupRead 42 Exported Function
AppPolicyGetMediaFoundationCodecLoading 31 Exported Function
AdjustCalendarDate 24 Exported Function
AllocateUserPhysicalPages 26 Exported Function
AllocateUserPhysicalPagesNuma 27 Exported Function
AddSIDToBoundaryDescriptor 19 Exported Function
AddVectoredContinueHandler 22 Exported Function
AddVectoredExceptionHandler 23 Exported Function
AppPolicyGetClrCompat 28 Exported Function
AppPolicyGetCreateFileAccess 29 Exported Function
AppPolicyGetLifecycleManagement 30 Exported Function
AllocConsole 25 Exported Function
ApplicationRecoveryFinished 37 Exported Function
ApplicationRecoveryInProgress 38 Exported Function
ConnectNamedPipe 161 Exported Function
ConsoleMenuControl 162 Exported Function
ContinueDebugEvent 163 Exported Function
CompareStringEx 158 Exported Function
CompareStringOrdinal 159 Exported Function
CompareStringW 160 Exported Function
ConvertNLSDayOfWeekToWin32DayOfWeek 167 Exported Function
ConvertSystemTimeToCalDateTime 168 Exported Function
ConvertThreadToFiber 169 Exported Function
ConvertCalDateTimeToSystemTime 164 Exported Function
ConvertDefaultLocale 165 Exported Function
ConvertFiberToThread 166 Exported Function
CompareStringA 157 Exported Function
CloseThreadpoolIo 148 Exported Function
CloseThreadpoolTimer 149 Exported Function
CloseThreadpoolWait 150 Exported Function
CloseThreadpool 145 Exported Function
CloseThreadpoolCleanupGroup 146 Exported Function
CloseThreadpoolCleanupGroupMembers 147 Exported Function
CommConfigDialogW 154 Exported Function
CompareCalendarDates 155 Exported Function
CompareFileTime 156 Exported Function
CloseThreadpoolWork 151 Exported Function
CmdBatNotification 152 Exported Function
CommConfigDialogA 153 Exported Function
CreateDirectoryA 186 Exported Function
CreateDirectoryExA 187 Exported Function
CreateDirectoryExW 188 Exported Function
CreateBoundaryDescriptorA 183 Exported Function
CreateBoundaryDescriptorW 184 Exported Function
CreateConsoleScreenBuffer 185 Exported Function
CreateEnclave 192 Exported Function
CreateEventA 193 Exported Function
CreateEventExA 194 Exported Function
CreateDirectoryTransactedA 189 Exported Function
CreateDirectoryTransactedW 190 Exported Function
CreateDirectoryW 191 Exported Function
CreateActCtxWWorker 182 Exported Function
CopyFileA 173 Exported Function
CopyFileExA 174 Exported Function
CopyFileExW 175 Exported Function
ConvertThreadToFiberEx 170 Exported Function
CopyContext 171 Exported Function
CopyFile2 172 Exported Function
CopyLZFile 179 Exported Function
CreateActCtxA 180 Exported Function
CreateActCtxW 181 Exported Function
CopyFileTransactedA 176 Exported Function
CopyFileTransactedW 177 Exported Function
CopyFileW 178 Exported Function
BuildCommDCBAndTimeoutsA 111 Exported Function
BuildCommDCBAndTimeoutsW 112 Exported Function
BuildCommDCBW 113 Exported Function
BeginUpdateResourceW 108 Exported Function
BindIoCompletionCallback 109 Exported Function
BuildCommDCBA 110 Exported Function
CancelDeviceWakeupRequest 117 Exported Function
CancelIo 118 Exported Function
CancelIoEx 119 Exported Function
CallbackMayRunLong 116 Exported Function
CallNamedPipeA 114 Exported Function
CallNamedPipeW 115 Exported Function
BeginUpdateResourceA 107 Exported Function
BaseReadAppCompatDataForProcessWorker 70 Exported Function
BaseSetLastNTError 71 Exported Function
BaseThreadInitThunk 1 Exported Function
BasepReportFault 104 Exported Function
BasepSetFileEncryptionCompression 105 Exported Function
BaseQueryModuleData 69 Exported Function
BaseVerifyUnicodeString 75 Exported Function
BaseWriteErrorElevationRequiredEvent 76 Exported Function
Beep 106 Exported Function
BaseUpdateAppcompatCache 72 Exported Function
BaseUpdateAppcompatCacheWorker 73 Exported Function
BaseUpdateVDMEntry 74 Exported Function
ClearCommBreak 136 Exported Function
ClearCommError 137 Exported Function
CloseConsoleHandle 138 Exported Function
CheckRemoteDebuggerPresent 133 Exported Function
CheckTokenCapability 134 Exported Function
CheckTokenMembershipEx 135 Exported Function
CloseProfileUserMapping 142 Exported Function
ClosePseudoConsole 143 Exported Function
CloseState 144 Exported Function
CloseHandle 139 Exported Function
ClosePackageInfo 140 Exported Function
ClosePrivateNamespace 141 Exported Function
CheckNameLegalDOS8Dot3W 132 Exported Function
CancelWaitableTimer 123 Exported Function
CeipIsOptedIn 124 Exported Function
ChangeTimerQueueTimer 125 Exported Function
CancelSynchronousIo 120 Exported Function
CancelThreadpoolIo 121 Exported Function
CancelTimerQueueTimer 122 Exported Function
CheckForReadOnlyResource 129 Exported Function
CheckForReadOnlyResourceFilter 130 Exported Function
CheckNameLegalDOS8Dot3A 131 Exported Function
CheckAllowDecryptedRemoteDestinationPolicy 126 Exported Function
CheckElevation 127 Exported Function
CheckElevationEnabled 128 Exported Function
GetNumberFormatEx 663 Exported Function
GetNumberFormatW 664 Exported Function
GetNumberOfConsoleFonts 665 Exported Function
GetNumaProximityNode 660 Exported Function
GetNumaProximityNodeEx 661 Exported Function
GetNumberFormatA 662 Exported Function
GetOverlappedResult 669 Exported Function
GetOverlappedResultEx 670 Exported Function
GetPackageApplicationIds 671 Exported Function
GetNumberOfConsoleInputEvents 666 Exported Function
GetNumberOfConsoleMouseButtons 667 Exported Function
GetOEMCP 668 Exported Function
GetNumaProcessorNodeEx 659 Exported Function
GetNLSVersion 638 Exported Function
GetNLSVersionEx 639 Exported Function
GetNumaAvailableMemoryNode 652 Exported Function
GetNamedPipeServerSessionId 649 Exported Function
GetNativeSystemInfo 650 Exported Function
GetNextVDMCommand 651 Exported Function
GetNumaNodeProcessorMask 656 Exported Function
GetNumaNodeProcessorMaskEx 657 Exported Function
GetNumaProcessorNode 658 Exported Function
GetNumaAvailableMemoryNodeEx 653 Exported Function
GetNumaHighestNodeNumber 654 Exported Function
GetNumaNodeNumberFromHandle 655 Exported Function
GetPrivateProfileStringW 688 Exported Function
GetPrivateProfileStructA 689 Exported Function
GetPrivateProfileStructW 690 Exported Function
GetPrivateProfileSectionNamesW 685 Exported Function
GetPrivateProfileSectionW 686 Exported Function
GetPrivateProfileStringA 687 Exported Function
GetProcessDEPPolicy 693 Exported Function
GetProcessGroupAffinity 695 Exported Function
GetProcessHandleCount 696 Exported Function
GetProcAddress 691 Exported Function
GetProcessAffinityMask 692 Exported Function
GetProcessDefaultCpuSets 694 Exported Function
GetPrivateProfileSectionNamesA 684 Exported Function
GetPackageInfo 675 Exported Function
GetPackagePath 676 Exported Function
GetPackagePathByFullName 677 Exported Function
GetPackageFamilyName 672 Exported Function
GetPackageFullName 673 Exported Function
GetPackageId 674 Exported Function
GetPrivateProfileIntA 681 Exported Function
GetPrivateProfileIntW 682 Exported Function
GetPrivateProfileSectionA 683 Exported Function
GetPackagesByPackageFamily 678 Exported Function
GetPhysicallyInstalledSystemMemory 679 Exported Function
GetPriorityClass 680 Exported Function
GetLargestConsoleWindowSize 613 Exported Function
GetLastError 614 Exported Function
GetLocaleInfoA 616 Exported Function
GetHandleContext 610 Exported Function
GetHandleInformation 611 Exported Function
GetLargePageMinimum 612 Exported Function
GetLogicalDrives 621 Exported Function
GetLogicalDriveStringsA 619 Exported Function
GetLogicalDriveStringsW 620 Exported Function
GetLocaleInfoEx 617 Exported Function
GetLocaleInfoW 618 Exported Function
GetLocalTime 615 Exported Function
GetGeoInfoW 609 Exported Function
GetFirmwareEnvironmentVariableExW 600 Exported Function
GetFirmwareEnvironmentVariableW 601 Exported Function
GetFirmwareType 602 Exported Function
GetFinalPathNameByHandleW 597 Exported Function
GetFirmwareEnvironmentVariableA 598 Exported Function
GetFirmwareEnvironmentVariableExA 599 Exported Function
GetFullPathNameW 606 Exported Function
GetGeoInfoA 607 Exported Function
GetGeoInfoEx 608 Exported Function
GetFullPathNameA 603 Exported Function
GetFullPathNameTransactedA 604 Exported Function
GetFullPathNameTransactedW 605 Exported Function
GetNamedPipeAttribute 640 Exported Function
GetNamedPipeClientComputerNameA 641 Exported Function
GetNamedPipeClientComputerNameW 642 Exported Function
GetModuleHandleExA 635 Exported Function
GetModuleHandleExW 636 Exported Function
GetModuleHandleW 637 Exported Function
GetNamedPipeHandleStateW 646 Exported Function
GetNamedPipeInfo 647 Exported Function
GetNamedPipeServerProcessId 648 Exported Function
GetNamedPipeClientProcessId 643 Exported Function
GetNamedPipeClientSessionId 644 Exported Function
GetNamedPipeHandleStateA 645 Exported Function
GetModuleHandleA 634 Exported Function
GetLongPathNameTransactedA 625 Exported Function
GetLongPathNameTransactedW 626 Exported Function
GetLongPathNameW 627 Exported Function
GetLogicalProcessorInformation 622 Exported Function
GetLogicalProcessorInformationEx 623 Exported Function
GetLongPathNameA 624 Exported Function
GetMemoryErrorHandlingCapabilities 631 Exported Function
GetModuleFileNameA 632 Exported Function
GetModuleFileNameW 633 Exported Function
GetMailslotInfo 628 Exported Function
GetMaximumProcessorCount 629 Exported Function
GetMaximumProcessorGroupCount 630 Exported Function
GetTempPathW 763 Exported Function
GetThreadContext 764 Exported Function
GetThreadDescription 765 Exported Function
GetTempFileNameA 760 Exported Function
GetTempFileNameW 761 Exported Function
GetTempPathA 762 Exported Function
GetThreadIdealProcessorEx 770 Exported Function
GetThreadInformation 771 Exported Function
GetThreadIOPendingFlag 768 Exported Function
GetThreadErrorMode 766 Exported Function
GetThreadGroupAffinity 767 Exported Function
GetThreadId 769 Exported Function
GetTapeStatus 759 Exported Function
GetSystemTimeAsFileTime 750 Exported Function
GetSystemTimePreciseAsFileTime 751 Exported Function
GetSystemTimes 752 Exported Function
GetSystemRegistryQuota 747 Exported Function
GetSystemTime 748 Exported Function
GetSystemTimeAdjustment 749 Exported Function
GetSystemWow64DirectoryW 756 Exported Function
GetTapeParameters 757 Exported Function
GetTapePosition 758 Exported Function
GetSystemWindowsDirectoryA 753 Exported Function
GetSystemWindowsDirectoryW 754 Exported Function
GetSystemWow64DirectoryA 755 Exported Function
GetTimeZoneInformationForYear 788 Exported Function
GetUILanguageInfo 789 Exported Function
GetUserDefaultGeoName 790 Exported Function
GetTimeFormatW 785 Exported Function
GetTimeFormatWWorker 786 Exported Function
GetTimeZoneInformation 787 Exported Function
GetUserDefaultUILanguage 794 Exported Function
GetUserGeoID 795 Exported Function
GetUserPreferredUILanguages 796 Exported Function
GetUserDefaultLangID 792 Exported Function
GetUserDefaultLCID 791 Exported Function
GetUserDefaultLocaleName 793 Exported Function
GetTimeFormatEx 784 Exported Function
GetThreadPriorityBoost 775 Exported Function
GetThreadSelectedCpuSets 776 Exported Function
GetThreadSelectorEntry 777 Exported Function
GetThreadLocale 772 Exported Function
GetThreadPreferredUILanguages 773 Exported Function
GetThreadPriority 774 Exported Function
GetTickCount64 780 Exported Function
GetTimeFormatA 782 Exported Function
GetTimeFormatAWorker 783 Exported Function
GetThreadTimes 778 Exported Function
GetThreadUILanguage 779 Exported Function
GetTickCount 781 Exported Function
GetProfileIntA 713 Exported Function
GetProfileIntW 714 Exported Function
GetProfileSectionA 715 Exported Function
GetProcessWorkingSetSize 709 Exported Function
GetProcessWorkingSetSizeEx 710 Exported Function
GetProductInfo 712 Exported Function
GetQueuedCompletionStatus 719 Exported Function
GetQueuedCompletionStatusEx 720 Exported Function
GetShortPathNameA 721 Exported Function
GetProfileSectionW 716 Exported Function
GetProfileStringA 717 Exported Function
GetProfileStringW 718 Exported Function
GetProcessVersion 708 Exported Function
GetProcessIdOfThread 700 Exported Function
GetProcessInformation 701 Exported Function
GetProcessIoCounters 702 Exported Function
GetProcessHeap 697 Exported Function
GetProcessHeaps 698 Exported Function
GetProcessId 699 Exported Function
GetProcessPriorityBoost 705 Exported Function
GetProcessShutdownParameters 706 Exported Function
GetProcessTimes 707 Exported Function
GetProcessMitigationPolicy 703 Exported Function
GetProcessorSystemCycleTime 711 Exported Function
GetProcessPreferredUILanguages 704 Exported Function
GetSystemDefaultUILanguage 739 Exported Function
GetSystemDEPPolicy 735 Exported Function
GetSystemDirectoryA 740 Exported Function
GetSystemDefaultLangID 737 Exported Function
GetSystemDefaultLCID 736 Exported Function
GetSystemDefaultLocaleName 738 Exported Function
GetSystemInfo 744 Exported Function
GetSystemPowerStatus 745 Exported Function
GetSystemPreferredUILanguages 746 Exported Function
GetSystemDirectoryW 741 Exported Function
GetSystemFileCacheSize 742 Exported Function
GetSystemFirmwareTable 743 Exported Function
GetSystemCpuSetInformation 734 Exported Function
GetStartupInfoW 725 Exported Function
GetStateFolder 726 Exported Function
GetStdHandle 727 Exported Function
GetShortPathNameW 722 Exported Function
GetStagedPackagePathByFullName 723 Exported Function
GetStartupInfoA 724 Exported Function
GetStringTypeExW 731 Exported Function
GetStringTypeW 732 Exported Function
GetSystemAppDataKey 733 Exported Function
GetStringScripts 728 Exported Function
GetStringTypeA 729 Exported Function
GetStringTypeExA 730 Exported Function
GetFinalPathNameByHandleA 596 Exported Function
GetCalendarMonthsInYear 465 Exported Function
GetCalendarSupportedDateRange 466 Exported Function
GetCalendarWeekNumber 467 Exported Function
GetCalendarInfoA 462 Exported Function
GetCalendarInfoEx 463 Exported Function
GetCalendarInfoW 464 Exported Function
GetCommMask 470 Exported Function
GetCommModemStatus 471 Exported Function
GetCommProperties 472 Exported Function
GetCommandLineA 475 Exported Function
GetCommandLineW 476 Exported Function
GetCommConfig 469 Exported Function
GetCalendarDifferenceInDays 461 Exported Function
GetAtomNameA 449 Exported Function
GetAtomNameW 450 Exported Function
GetBinaryType 451 Exported Function
GetApplicationRestartSettings 446 Exported Function
GetApplicationRestartSettingsWorker 447 Exported Function
GetApplicationUserModelId 448 Exported Function
GetCalendarDateFormat 458 Exported Function
GetCalendarDateFormatEx 459 Exported Function
GetCalendarDaysInMonth 460 Exported Function
GetBinaryTypeA 452 Exported Function
GetBinaryTypeW 453 Exported Function
GetCachedSigningLevel 457 Exported Function
GetConsoleAliasExesA 486 Exported Function
GetConsoleAliasExesLengthA 487 Exported Function
GetConsoleAliasExesLengthW 488 Exported Function
GetConsoleAliasesLengthA 492 Exported Function
GetConsoleAliasesLengthW 493 Exported Function
GetConsoleAliasesW 494 Exported Function
GetConsoleCommandHistoryA 497 Exported Function
GetConsoleCommandHistoryLengthA 498 Exported Function
GetConsoleCommandHistoryLengthW 499 Exported Function
GetConsoleAliasExesW 489 Exported Function
GetConsoleAliasW 490 Exported Function
GetConsoleCharType 496 Exported Function
GetConsoleAliasesA 491 Exported Function
GetCompressedFileSizeA 477 Exported Function
GetCompressedFileSizeTransactedA 478 Exported Function
GetCompressedFileSizeTransactedW 479 Exported Function
GetCommState 473 Exported Function
GetCommTimeouts 474 Exported Function
GetComPlusPackageInstallStatus 468 Exported Function
GetComputerNameExW 483 Exported Function
GetComputerNameW 484 Exported Function
GetConsoleAliasA 485 Exported Function
GetCompressedFileSizeW 480 Exported Function
GetComputerNameA 481 Exported Function
GetComputerNameExA 482 Exported Function
FindStringOrdinal 412 Exported Function
FindVolumeClose 413 Exported Function
FindVolumeMountPointClose 414 Exported Function
FindResourceExA 409 Exported Function
FindResourceExW 410 Exported Function
FindResourceW 411 Exported Function
FlsSetValue 418 Exported Function
FlushConsoleInputBuffer 419 Exported Function
FlushFileBuffers 420 Exported Function
FlsAlloc 415 Exported Function
FlsFree 416 Exported Function
FlsGetValue 417 Exported Function
FindResourceA 408 Exported Function
FindNextFileW 401 Exported Function
FindNextStreamW 402 Exported Function
FindNextVolumeA 403 Exported Function
FindNextChangeNotification 398 Exported Function
FindNextFileA 399 Exported Function
FindNextFileNameW 400 Exported Function
FindNLSString 396 Exported Function
FindNLSStringEx 397 Exported Function
FindPackagesByPackageFamily 407 Exported Function
FindNextVolumeMountPointA 404 Exported Function
FindNextVolumeMountPointW 405 Exported Function
FindNextVolumeW 406 Exported Function
FreeUserPhysicalPages 437 Exported Function
GenerateConsoleCtrlEvent 438 Exported Function
GetACP 439 Exported Function
FreeLibraryWhenCallbackReturns 434 Exported Function
FreeMemoryJobObject 435 Exported Function
FreeResource 436 Exported Function
GetAppContainerNamedObjectPath 443 Exported Function
GetApplicationRecoveryCallback 444 Exported Function
GetApplicationRecoveryCallbackWorker 445 Exported Function
GetActiveProcessorCount 440 Exported Function
GetActiveProcessorGroupCount 441 Exported Function
GetAppContainerAce 442 Exported Function
FreeLibraryAndExitThread 433 Exported Function
FoldStringA 424 Exported Function
FoldStringW 425 Exported Function
FormatApplicationUserModelId 426 Exported Function
FlushInstructionCache 421 Exported Function
FlushProcessWriteBuffers 422 Exported Function
FlushViewOfFile 423 Exported Function
FreeEnvironmentStringsA 430 Exported Function
FreeEnvironmentStringsW 431 Exported Function
FreeLibrary 432 Exported Function
FormatMessageA 427 Exported Function
FormatMessageW 428 Exported Function
FreeConsole 429 Exported Function
GetDllDirectoryW 562 Exported Function
GetDriveTypeA 563 Exported Function
GetDriveTypeW 564 Exported Function
GetDiskSpaceInformationA 559 Exported Function
GetDiskSpaceInformationW 560 Exported Function
GetDllDirectoryA 561 Exported Function
GetEnabledXStateFeatures 568 Exported Function
GetEncryptedFileVersionExt 569 Exported Function
GetEnvironmentStrings 570 Exported Function
GetDurationFormat 565 Exported Function
GetDurationFormatEx 566 Exported Function
GetDynamicTimeZoneInformation 567 Exported Function
GetDiskFreeSpaceW 558 Exported Function
GetDateFormatEx 549 Exported Function
GetDateFormatW 550 Exported Function
GetDateFormatWWorker 551 Exported Function
GetCurrentThreadStackLimits 546 Exported Function
GetDateFormatA 547 Exported Function
GetDateFormatAWorker 548 Exported Function
GetDiskFreeSpaceA 555 Exported Function
GetDiskFreeSpaceExA 556 Exported Function
GetDiskFreeSpaceExW 557 Exported Function
GetDefaultCommConfigA 552 Exported Function
GetDefaultCommConfigW 553 Exported Function
GetDevicePowerState 554 Exported Function
GetFileBandwidthReservation 587 Exported Function
GetFileInformationByHandle 588 Exported Function
GetFileInformationByHandleEx 589 Exported Function
GetFileAttributesTransactedA 584 Exported Function
GetFileAttributesTransactedW 585 Exported Function
GetFileAttributesW 586 Exported Function
GetFileSizeEx 593 Exported Function
GetFileTime 594 Exported Function
GetFileType 595 Exported Function
GetFileMUIInfo 590 Exported Function
GetFileMUIPath 591 Exported Function
GetFileSize 592 Exported Function
GetFileAttributesExW 583 Exported Function
GetEnvironmentVariableW 574 Exported Function
GetEraNameCountedString 575 Exported Function
GetErrorMode 576 Exported Function
GetEnvironmentStringsA 571 Exported Function
GetEnvironmentStringsW 572 Exported Function
GetEnvironmentVariableA 573 Exported Function
GetExpandedNameW 580 Exported Function
GetFileAttributesA 581 Exported Function
GetFileAttributesExA 582 Exported Function
GetExitCodeProcess 577 Exported Function
GetExitCodeThread 578 Exported Function
GetExpandedNameA 579 Exported Function
GetConsoleOriginalTitleA 515 Exported Function
GetConsoleOriginalTitleW 516 Exported Function
GetConsoleOutputCP 517 Exported Function
GetConsoleKeyboardLayoutNameW 512 Exported Function
GetConsoleMode 513 Exported Function
GetConsoleNlsMode 514 Exported Function
GetConsoleSelectionInfo 521 Exported Function
GetConsoleTitleA 522 Exported Function
GetConsoleTitleW 523 Exported Function
GetConsoleProcessList 518 Exported Function
GetConsoleScreenBufferInfo 519 Exported Function
GetConsoleScreenBufferInfoEx 520 Exported Function
GetConsoleKeyboardLayoutNameA 511 Exported Function
GetConsoleCursorMode 502 Exported Function
GetConsoleDisplayMode 503 Exported Function
GetConsoleFontInfo 504 Exported Function
GetConsoleCommandHistoryW 500 Exported Function
GetConsoleCP 495 Exported Function
GetConsoleCursorInfo 501 Exported Function
GetConsoleInputExeNameA 508 Exported Function
GetConsoleInputExeNameW 509 Exported Function
GetConsoleInputWaitHandle 510 Exported Function
GetConsoleFontSize 505 Exported Function
GetConsoleHardwareState 506 Exported Function
GetConsoleHistoryInfo 507 Exported Function
GetCurrentPackageId 537 Exported Function
GetCurrentPackageInfo 538 Exported Function
GetCurrentPackagePath 539 Exported Function
GetCurrentDirectoryW 534 Exported Function
GetCurrentPackageFamilyName 535 Exported Function
GetCurrentPackageFullName 536 Exported Function
GetCurrentProcessorNumberEx 543 Exported Function
GetCurrentThread 544 Exported Function
GetCurrentThreadId 545 Exported Function
GetCurrentProcess 540 Exported Function
GetCurrentProcessId 541 Exported Function
GetCurrentProcessorNumber 542 Exported Function
GetCurrentDirectoryA 533 Exported Function
GetCPInfoExW 456 Exported Function
GetCurrencyFormatA 525 Exported Function
GetCurrencyFormatEx 526 Exported Function
GetConsoleWindow 524 Exported Function
GetCPInfo 454 Exported Function
GetCPInfoExA 455 Exported Function
GetCurrentApplicationUserModelId 530 Exported Function
GetCurrentConsoleFont 531 Exported Function
GetCurrentConsoleFontEx 532 Exported Function
GetCurrencyFormatW 527 Exported Function
GetCurrentActCtx 528 Exported Function
GetCurrentActCtxWorker 529 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kernel32
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.292 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.292
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/7dfb22969d7a5410f8f63459d0c912a39519064c8931d0a24be1e86816a9e9d7/detection/

Possible Misuse

The following table contains possible examples of kernel32.dll being misused. While kernel32.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma sysmon_createremotethread_loadlibrary.yml StartModule\|endswith: '\kernel32.dll' DRL 1.0
sigma proc_creation_win_susp_shimcache_flush.yml - 'kernel32.dll' DRL 1.0
malware-ioc rtm kernel32.dll © ESET 2014-2018
signature-base apt_apt28.yar $s8 = “KERNEL32.dll” fullword ascii /* PEStudio Blacklist: strings / / score: ‘5’ / / Goodware String - occured 14405 times */ CC BY-NC 4.0
signature-base apt_babyshark.yar 2E 44 4C 4C 00 00 00 00 } /* WinExec kernel32.DLL */ CC BY-NC 4.0
signature-base apt_eqgrp.yar $x1 = “Injection Lib - GetProcAddress failed on Kernel32.DLL function” fullword wide CC BY-NC 4.0
signature-base apt_fakem_backdoor.yar $a1 = “\system32\kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base apt_fakem_backdoor.yar $c1 = “\system32\kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base apt_hkdoor.yar pe.imports(“KERNEL32.dll”, “FindResourceW”) and CC BY-NC 4.0
signature-base apt_hkdoor.yar pe.imports(“KERNEL32.dll”, “LoadResource”) CC BY-NC 4.0
signature-base apt_unc2447_sombrat.yar $s1 = “[DllImport("kernel32.dll")]public static extern IntPtr VirtualAlloc(IntPtr “ ascii wide CC BY-NC 4.0
signature-base apt_wildneutron.yar $s6 = “%SYSTEMROOT%\System32\kernel32.dll” fullword ascii /* PEStudio Blacklist: strings / / score: ‘36.00’ */ CC BY-NC 4.0
signature-base apt_woolengoldfish.yar $s0 = “kernel32.dll GetProcAddressLoadLibraryAws2_32.dll” fullword ascii CC BY-NC 4.0
signature-base apt_woolengoldfish.yar $s4 = “unable to load kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base crime_malware_generic.yar $s28 = “KERNEL32.dll” fullword ascii CC BY-NC 4.0
signature-base crime_ransom_darkside.yar $CommonDLLs1 = “KERNEL32.dll” fullword CC BY-NC 4.0
signature-base crime_rombertik_carbongrabber.yar $s7 = “@KERNEL32.DLL” fullword wide CC BY-NC 4.0
signature-base exploit_cve_2015_1674.yar $s4 = “KERNEL32.dll” fullword ascii CC BY-NC 4.0
signature-base exploit_uac_elevators.yar $s4 = “Couldn’t load kernel32.dll” wide CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s0 = “kernel32.dll^G” fullword ascii CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s0 = “kernel32.dll” ascii CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s2 = “kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s2 = “KERNEL32.DLL” fullword ascii CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s1 = “KERNEL32.dll” fullword ascii CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s4 = “kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base gen_cn_hacktools.yar $s11 = “kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar ((pe.imports(“KERNEL32.dll”, “LookupPrivilegeValueW”) or pe.imports(“KERNEL32.dll”, “LookupPrivilegeValueA”)) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “AdjustTokenPrivileges”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “OpenProcess”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar or ((pe.imports(“KERNEL32.dll”, “FindResourceA”) or pe.imports(“KERNEL32.dll”, “FindResourceW”)) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “LoadResource”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “LockResource”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and (pe.imports(“KERNEL32.dll”, “VirtualAlloc”) or pe.imports(“KERNEL32.dll”, “VirtualAllocEx”)) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “WriteProcessMemory”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “SetThreadContext”)) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar or (pe.imports(“KERNEL32.dll”, “GetThreadContext”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “VirtualAllocEx”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “ResumeThread”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar or (pe.imports(“KERNEL32.dll”, “WinExec”)) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar or (all of ($cs*) and pe.imports(“KERNEL32.dll”, “VirtualAllocEx”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “TerminateProcess”) CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar and pe.imports(“KERNEL32.dll”, “Sleep”)) CC BY-NC 4.0
signature-base gen_metasploit_payloads.yar $s1 = “[DllImport("kernel32.dll")] public static extern int WaitForSingleObject(“ ascii CC BY-NC 4.0
signature-base gen_metasploit_payloads.yar $s1 = “[DllImport("kernel32.dll")]” fullword ascii CC BY-NC 4.0
signature-base gen_metasploit_payloads.yar $s1 = “kernel32.dll WaitForSingleObject),” ascii CC BY-NC 4.0
signature-base gen_mimikittenz.yar $s4 = “[DllImport("kernel32.dll", SetLastError = true)]” fullword ascii CC BY-NC 4.0
signature-base gen_powershell_empire.yar $s1 = “$WriteProcessMemoryAddr = Get-ProcAddress kernel32.dll WriteProcessMemory” fullword ascii CC BY-NC 4.0
signature-base gen_powershell_susp.yar $x2 = “$Kernel32Handle = $Win32Functions.GetModuleHandle.Invoke("kernel32.dll")” fullword ascii CC BY-NC 4.0
signature-base gen_powershell_toolkit.yar $s1 = “Get-ProcAddress kernel32.dll WriteProcessMemory” fullword ascii CC BY-NC 4.0
signature-base gen_powershell_toolkit.yar $s2 = “Get-ProcAddress kernel32.dll OpenProcess” fullword ascii CC BY-NC 4.0
signature-base gen_redmimicry.yar $sym1 = “kernel32.dll” wide fullword CC BY-NC 4.0
signature-base gen_susp_hacktool.yar $s4 = “Kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base gen_susp_strings_in_ole.yar /* KERNEL32.dll */ CC BY-NC 4.0
signature-base spy_equation_fiveeyes.yar $x1 = “c:\windows\system32\kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base thor-hacktools.yar $s1 = “kernel32.dll” fullword ascii CC BY-NC 4.0
signature-base thor-hacktools.yar $s0 = “KERNEL32.DLL” fullword ascii CC BY-NC 4.0
signature-base thor-hacktools.yar $s2 = “KERNEL32.DLL” ascii fullword CC BY-NC 4.0
signature-base thor-webshells.yar $s5 = “[DllImport("kernel32.dll",EntryPoint="GetDriveTypeA")]” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.