Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
This file has been truncated, but you can view the full file.
[*] - C:\Windows\System32\1028\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1028\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1029\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1029\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1031\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1031\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1033\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1033\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1036\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1036\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1040\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1040\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1041\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1041\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1042\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1042\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1045\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1045\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1046\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1046\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1049\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1049\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1055\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\1055\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\2052\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\2052\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\3082\VsGraphicsResources.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\3082\vsjitdebuggerui.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\AdvancedInstallers\cmiv2.dll
[?] 64-bit Image!
[>] Time Stamp: 07/13/1994 13:04:31
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x280228
[>] Name Array RVA: 0x280238
[>] Ordinal Array RVA: 0x280248
Ordinal ImageRVA FunctionName
------- -------- ------------
1 0x000800D0 DllCanUnloadNow
2 0x000800F0 DllGetClassObject
3 0x00080110 DllRegisterServer
4 0x000801E0 DllUnregisterServer
[*] - C:\Windows\System32\com\comadmin.dll
[?] 64-bit Image!
[>] Time Stamp: 01/22/2095 17:31:32
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x2F318
[>] Name Array RVA: 0x2F328
[>] Ordinal Array RVA: 0x2F338
1 0x00001530 DllCanUnloadNow
2 0x00001560 DllGetClassObject
3 0x000015C0 DllRegisterServer
4 0x000016A0 DllUnregisterServer
[*] - C:\Windows\System32\DiagSvcs\DiagnosticsHub.Packaging.dll
[?] 64-bit Image!
[>] Time Stamp: 02/17/1971 06:28:43
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x217C8
[>] Name Array RVA: 0x217CC
[>] Ordinal Array RVA: 0x217D0
1 0x0000FA90 CreatePackageFac...
[*] - C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Proxy.dll
[?] 64-bit Image!
[>] Time Stamp: 09/20/2031 02:22:05
[>] Function Count: 6
[>] Named Functions: 6
[>] Ordinal Base: 1
[>] Function Array RVA: 0x7C68
[>] Name Array RVA: 0x7C80
[>] Ordinal Array RVA: 0x7C98
1 0x00001160 DllCanUnloadNow
2 0x00001110 DllGetClassObject
3 0x000011B0 DllRegisterServer
4 0x000011F0 DllUnregisterServer
5 0x00001230 ManualRegisterIn...
6 0x00001320 ManualUnregister...
[*] - C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Runtime.dll
[?] 64-bit Image!
[>] Time Stamp: 07/01/2036 00:00:34
[>] Function Count: 2
[>] Named Functions: 2
[>] Ordinal Base: 1
[>] Function Array RVA: 0x61FF8
[>] Name Array RVA: 0x62000
[>] Ordinal Array RVA: 0x62008
1 0x00007A30 DllCanUnloadNow
2 0x00007A60 DllGetClassObject
[*] - C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/1969 19:00:00
[>] Function Count:
[>] Named Functions:
[>] Ordinal Base:
[>] Function Array RVA: 0x
[>] Name Array RVA: 0x
[>] Ordinal Array RVA: 0x
[*] - C:\Windows\System32\DiagSvcs\KernelTraceControl.dll
[?] 64-bit Image!
[>] Time Stamp: 12/11/2061 11:57:26
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x36A38
[>] Name Array RVA: 0x36A4C
[>] Ordinal Array RVA: 0x36A60
1 0x00001E30 CreateMergedTrac...
2 0x00001430 DllCanUnloadNow
3 0x00001EE0 StartHeapTrace
4 0x00001B10 StartKernelTrace
5 0x00001F30 UpdateHeapTrace
[*] - C:\Windows\System32\Dism\AppxProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 12/09/2093 22:01:57
[>] Function Count: 8
[>] Named Functions: 8
[>] Ordinal Base: 1
[>] Function Array RVA: 0x7C5A8
[>] Name Array RVA: 0x7C5C8
[>] Ordinal Array RVA: 0x7C5E8
1 0x000078D0 AddProvisionedAp...
2 0x00002000 DLLGetDISMProvid...
3 0x00002020 DllCanUnloadNow
4 0x00002050 DllGetClassObject
5 0x00002180 DllRegisterServer
6 0x00002260 DllUnregisterServer
7 0x00007AD0 RemoveProvisione...
8 0x00007A00 RemoveProvisione...
[*] - C:\Windows\System32\Dism\AssocProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 01/07/2075 11:28:26
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x13DD8
[>] Name Array RVA: 0x13DEC
[>] Ordinal Array RVA: 0x13E00
1 0x00001400 DLLGetDISMProvid...
2 0x00001420 DllCanUnloadNow
3 0x00001450 DllGetClassObject
4 0x00001580 DllRegisterServer
5 0x00001660 DllUnregisterServer
[*] - C:\Windows\System32\Dism\CbsProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 01/30/2041 02:52:12
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0xBD668
[>] Name Array RVA: 0xBD67C
[>] Ordinal Array RVA: 0xBD690
1 0x000013B0 DLLGetDISMProvid...
2 0x000013D0 DllCanUnloadNow
3 0x00001400 DllGetClassObject
4 0x00001530 DllRegisterServer
5 0x00001610 DllUnregisterServer
[*] - C:\Windows\System32\Dism\CompatProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 06/30/2041 10:28:11
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1F9A8
[>] Name Array RVA: 0x1F9BC
[>] Ordinal Array RVA: 0x1F9D0
1 0x00001370 DLLGetDISMProvid...
2 0x00001390 DllCanUnloadNow
3 0x000013C0 DllGetClassObject
4 0x000014F0 DllRegisterServer
5 0x000015D0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\DismCore.dll
[?] 64-bit Image!
[>] Time Stamp: 10/14/2061 22:35:23
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x42A68
[>] Name Array RVA: 0x42A78
[>] Ordinal Array RVA: 0x42A88
1 0x00014240 DllCanUnloadNow
2 0x00014270 DllGetClassObject
3 0x000143A0 DllRegisterServer
4 0x00014480 DllUnregisterServer
[*] - C:\Windows\System32\Dism\DismCorePS.dll
[?] 64-bit Image!
[>] Time Stamp: 10/01/2014 11:44:53
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1F558
[>] Name Array RVA: 0x1F56C
[>] Ordinal Array RVA: 0x1F580
1 0x00002020 DllCanUnloadNow
2 0x00001FE0 DllGetClassObject
3 0x000020E0 DllGetDismInterf...
4 0x00002080 DllRegisterServer
5 0x000020B0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\DismProv.dll
[?] 64-bit Image!
[>] Time Stamp: 10/19/2038 11:20:03
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x34088
[>] Name Array RVA: 0x34098
[>] Ordinal Array RVA: 0x340A8
1 0x00010420 DllCanUnloadNow
2 0x00010450 DllGetClassObject
3 0x00010580 DllRegisterServer
4 0x000106A0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\DmiProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 12/05/2053 02:53:33
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x57CC8
[>] Name Array RVA: 0x57CDC
[>] Ordinal Array RVA: 0x57CF0
1 0x00001380 DLLGetDISMProvid...
2 0x000013A0 DllCanUnloadNow
3 0x000013D0 DllGetClassObject
4 0x00001500 DllRegisterServer
5 0x000015E0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\FfuProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 09/28/1992 21:00:03
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x82418
[>] Name Array RVA: 0x8242C
[>] Ordinal Array RVA: 0x82440
1 0x00001740 DLLGetDISMProvid...
2 0x00001760 DllCanUnloadNow
3 0x00001790 DllGetClassObject
4 0x000018C0 DllRegisterServer
5 0x000019A0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\FolderProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 03/31/1987 14:58:06
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0xBD48
[>] Name Array RVA: 0xBD5C
[>] Ordinal Array RVA: 0xBD70
1 0x00001370 DLLGetDISMProvid...
2 0x00001390 DllCanUnloadNow
3 0x000013C0 DllGetClassObject
4 0x000014F0 DllRegisterServer
5 0x000015D0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\GenericProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 04/19/2036 16:38:17
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x14218
[>] Name Array RVA: 0x1422C
[>] Ordinal Array RVA: 0x14240
1 0x00001540 DLLGetDISMProvid...
2 0x00001560 DllCanUnloadNow
3 0x00001590 DllGetClassObject
4 0x000016C0 DllRegisterServer
5 0x000017A0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\IBSProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 05/14/2016 17:27:54
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0xA9F8
[>] Name Array RVA: 0xAA0C
[>] Ordinal Array RVA: 0xAA20
1 0x00001380 DLLGetDISMProvid...
2 0x000013A0 DllCanUnloadNow
3 0x000013D0 DllGetClassObject
4 0x00001500 DllRegisterServer
5 0x000015E0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\ImagingProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 03/09/1999 06:36:14
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x2AFA8
[>] Name Array RVA: 0x2AFBC
[>] Ordinal Array RVA: 0x2AFD0
1 0x00001370 DLLGetDISMProvid...
2 0x00001390 DllCanUnloadNow
3 0x000013C0 DllGetClassObject
4 0x000014F0 DllRegisterServer
5 0x000015D0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\IntlProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 10/15/1974 03:47:54
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x33658
[>] Name Array RVA: 0x3366C
[>] Ordinal Array RVA: 0x33680
1 0x0000A070 DLLGetDISMProvid...
2 0x0000A090 DllCanUnloadNow
3 0x0000A0C0 DllGetClassObject
4 0x0000A1F0 DllRegisterServer
5 0x0000A310 DllUnregisterServer
[*] - C:\Windows\System32\Dism\LogProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 07/04/1989 21:58:14
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0xE428
[>] Name Array RVA: 0xE43C
[>] Ordinal Array RVA: 0xE450
1 0x00001370 DLLGetDISMProvid...
2 0x00001390 DllCanUnloadNow
3 0x000013C0 DllGetClassObject
4 0x000014F0 DllRegisterServer
5 0x000015D0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\MsiProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 02/23/2003 09:22:48
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x29838
[>] Name Array RVA: 0x2984C
[>] Ordinal Array RVA: 0x29860
1 0x00001380 DLLGetDISMProvid...
2 0x000013A0 DllCanUnloadNow
3 0x000013D0 DllGetClassObject
4 0x00001500 DllRegisterServer
5 0x000015E0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\OfflineSetupProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 01/29/1993 03:45:40
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x28388
[>] Name Array RVA: 0x2839C
[>] Ordinal Array RVA: 0x283B0
1 0x00001600 DLLGetDISMProvid...
2 0x00001620 DllCanUnloadNow
3 0x00001650 DllGetClassObject
4 0x00001780 DllRegisterServer
5 0x00001860 DllUnregisterServer
[*] - C:\Windows\System32\Dism\OSProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 07/09/1994 00:03:39
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1F558
[>] Name Array RVA: 0x1F56C
[>] Ordinal Array RVA: 0x1F580
1 0x00001370 DLLGetDISMProvid...
2 0x00001390 DllCanUnloadNow
3 0x000013C0 DllGetClassObject
4 0x000014F0 DllRegisterServer
5 0x000015D0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\ProvProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 05/13/2074 07:20:18
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0xA80B8
[>] Name Array RVA: 0xA80CC
[>] Ordinal Array RVA: 0xA80E0
1 0x000042A0 DLLGetDISMProvid...
2 0x000042C0 DllCanUnloadNow
3 0x000042F0 DllGetClassObject
4 0x00004420 DllRegisterServer
5 0x00004500 DllUnregisterServer
[*] - C:\Windows\System32\Dism\SetupPlatformProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 06/07/2036 21:37:47
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1D198
[>] Name Array RVA: 0x1D1AC
[>] Ordinal Array RVA: 0x1D1C0
1 0x00001400 DLLGetDISMProvid...
2 0x00001420 DllCanUnloadNow
3 0x00001450 DllGetClassObject
4 0x00001580 DllRegisterServer
5 0x00001660 DllUnregisterServer
[*] - C:\Windows\System32\Dism\SmiProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 08/05/2033 02:49:53
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x3B9A8
[>] Name Array RVA: 0x3B9BC
[>] Ordinal Array RVA: 0x3B9D0
1 0x000013B0 DLLGetDISMProvid...
2 0x000013D0 DllCanUnloadNow
3 0x00001400 DllGetClassObject
4 0x00001530 DllRegisterServer
5 0x00001650 DllUnregisterServer
[*] - C:\Windows\System32\Dism\SysprepProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 05/30/2044 14:35:49
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0xAB488
[>] Name Array RVA: 0xAB49C
[>] Ordinal Array RVA: 0xAB4B0
1 0x00001A90 DLLGetDISMProvid...
2 0x00001AB0 DllCanUnloadNow
3 0x00001AE0 DllGetClassObject
4 0x00001C10 DllRegisterServer
5 0x00001CF0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\TransmogProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 01/23/1999 19:36:52
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x12FC38
[>] Name Array RVA: 0x12FC4C
[>] Ordinal Array RVA: 0x12FC60
1 0x0001A6B0 DLLGetDISMProvid...
2 0x0001A6D0 DllCanUnloadNow
3 0x0001A700 DllGetClassObject
4 0x0001A830 DllRegisterServer
5 0x0001A950 DllUnregisterServer
[*] - C:\Windows\System32\Dism\UnattendProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 01/07/2015 19:08:59
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x38018
[>] Name Array RVA: 0x3802C
[>] Ordinal Array RVA: 0x38040
1 0x000013B0 DLLGetDISMProvid...
2 0x000013D0 DllCanUnloadNow
3 0x00001400 DllGetClassObject
4 0x00001530 DllRegisterServer
5 0x00001610 DllUnregisterServer
[*] - C:\Windows\System32\Dism\VhdProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 06/27/1989 19:00:17
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x7CFA8
[>] Name Array RVA: 0x7CFBC
[>] Ordinal Array RVA: 0x7CFD0
1 0x00008070 DLLGetDISMProvid...
2 0x00008090 DllCanUnloadNow
3 0x000080C0 DllGetClassObject
4 0x000081F0 DllRegisterServer
5 0x000082D0 DllUnregisterServer
[*] - C:\Windows\System32\Dism\WimProvider.dll
[?] 64-bit Image!
[>] Time Stamp: 09/10/2077 17:20:08
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x850A8
[>] Name Array RVA: 0x850BC
[>] Ordinal Array RVA: 0x850D0
1 0x000057C0 DLLGetDISMProvid...
2 0x000057E0 DllCanUnloadNow
3 0x00005810 DllGetClassObject
4 0x00005940 DllRegisterServer
5 0x00005A20 DllUnregisterServer
[*] - C:\Windows\System32\downlevel\api-ms-win-base-util-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 12/14/2021 23:01:51
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010C0 IsTextUnicode
[*] - C:\Windows\System32\downlevel\api-ms-win-core-com-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/12/2029 03:44:04
[>] Function Count: 80
[>] Named Functions: 80
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x11C8
[>] Ordinal Array RVA: 0x1308
1 0x000013D7 CLSIDFromProgID
2 0x000013FD CLSIDFromString
3 0x00001429 CoAddRefServerPr...
4 0x0000145D CoAllowUnmarshal...
5 0x00001488 CoCancelCall
6 0x000014A7 CoCopyProxy
7 0x000014D7 CoCreateFreeThre...
8 0x00001508 CoCreateGuid
9 0x0000152C CoCreateInstance
10 0x00001556 CoCreateInstanceEx
11 0x00001587 CoCreateInstance...
12 0x000015B3 CoDecodeProxy
13 0x000015DB CoDecrementMTAUsage
14 0x0000160F CoDisableCallCan...
15 0x00001643 CoDisconnectContext
16 0x00001670 CoDisconnectObject
17 0x000016A2 CoEnableCallCanc...
18 0x000016D7 CoFreeUnusedLibr...
19 0x0000170B CoFreeUnusedLibr...
20 0x0000173C CoGetApartmentType
21 0x00001766 CoGetCallContext
22 0x0000178C CoGetCallerTID
23 0x000017B3 CoGetCancelObject
24 0x000017DC CoGetClassObject
25 0x00001805 CoGetContextToken
26 0x00001839 CoGetCurrentLogi...
27 0x0000186F CoGetCurrentProcess
28 0x0000189D CoGetDefaultContext
29 0x000018D6 CoGetInterfaceAn...
30 0x00001907 CoGetMalloc
31 0x0000192D CoGetMarshalSizeMax
32 0x0000195A CoGetObjectContext
33 0x00001980 CoGetPSClsid
34 0x000019A8 CoGetStandardMar...
35 0x000019D5 CoGetStdMarshalEx
36 0x000019FF CoGetTreatAsClass
37 0x00001A2B CoImpersonateClient
38 0x00001A59 CoIncrementMTAUsage
39 0x00001A82 CoInitializeEx
40 0x00001AAC CoInitializeSecu...
41 0x00001AE9 CoInvalidateRemo...
42 0x00001B26 CoIsHandlerConne...
43 0x00001B56 CoLockObjectExte...
44 0x00001B82 CoMarshalHresult
45 0x00001BBF CoMarshalInterTh...
46 0x00001BFE CoMarshalInterface
47 0x00001C35 CoQueryAuthentic...
48 0x00001C6E CoQueryClientBla...
49 0x00001C9D CoQueryProxyBlanket
50 0x00001CCD CoRegisterClassO...
51 0x00001CFB CoRegisterPSClsid
52 0x00001D27 CoRegisterSurrogate
53 0x00001D56 CoReleaseMarshal...
54 0x00001D88 CoReleaseServerP...
55 0x00001DBA CoResumeClassObj...
56 0x00001DE4 CoRevertToSelf
57 0x00001E0D CoRevokeClassObject
58 0x00001E39 CoSetCancelObject
59 0x00001E63 CoSetProxyBlanket
60 0x00001E91 CoSuspendClassOb...
61 0x00001EC1 CoSwitchCallContext
62 0x00001EEA CoTaskMemAlloc
63 0x00001F0D CoTaskMemFree
64 0x00001F32 CoTaskMemRealloc
65 0x00001F56 CoTestCancel
66 0x00001F78 CoUninitialize
67 0x00001FA0 CoUnmarshalHresult
68 0x00001FCE CoUnmarshalInter...
69 0x00002002 CoWaitForMultipl...
70 0x0000203A CoWaitForMultipl...
71 0x0000206F CreateStreamOnHG...
72 0x000020A0 FreePropVariantA...
73 0x000020D0 GetHGlobalFromSt...
74 0x000020F9 IIDFromString
75 0x0000211D ProgIDFromCLSID
76 0x00002144 PropVariantClear
77 0x0000216B PropVariantCopy
78 0x00002191 StringFromCLSID
79 0x000021B7 StringFromGUID2
80 0x000021DB StringFromIID
[*] - C:\Windows\System32\downlevel\api-ms-win-core-comm-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 11/15/2092 10:26:49
[>] Function Count: 18
[>] Named Functions: 18
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10D0
[>] Ordinal Array RVA: 0x1118
1 0x0000116B ClearCommBreak
2 0x00001192 ClearCommError
3 0x000011BD EscapeCommFunction
4 0x000011E7 GetCommConfig
5 0x0000120A GetCommMask
6 0x00001232 GetCommModemStatus
7 0x00001260 GetCommProperties
8 0x00001288 GetCommState
9 0x000012AE GetCommTimeouts
10 0x000012D1 PurgeComm
11 0x000012F1 SetCommBreak
12 0x00001315 SetCommConfig
13 0x00001338 SetCommMask
14 0x0000135A SetCommState
15 0x00001380 SetCommTimeouts
16 0x000013A3 SetupComm
17 0x000013C7 TransmitCommChar
18 0x000013EF WaitCommEvent
[*] - C:\Windows\System32\downlevel\api-ms-win-core-console-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 12/01/2051 23:24:31
[>] Function Count: 14
[>] Named Functions: 14
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C0
[>] Ordinal Array RVA: 0x10F8
1 0x00001144 AllocConsole
2 0x00001167 GetConsoleCP
3 0x0000118C GetConsoleMode
4 0x000011B7 GetConsoleOutputCP
5 0x000011F1 GetNumberOfConso...
6 0x0000122A PeekConsoleInputA
7 0x00001252 ReadConsoleA
8 0x0000127A ReadConsoleInputA
9 0x000012A7 ReadConsoleInputW
10 0x000012CF ReadConsoleW
11 0x000012FB SetConsoleCtrlHa...
12 0x00001329 SetConsoleMode
13 0x0000134F WriteConsoleA
14 0x00001374 WriteConsoleW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-datetime-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/03/2010 20:20:47
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1098
[>] Ordinal Array RVA: 0x10A8
1 0x000010E3 GetDateFormatA
2 0x0000110A GetDateFormatW
3 0x00001131 GetTimeFormatA
4 0x00001158 GetTimeFormatW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-datetime-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 11/22/1988 09:57:54
[>] Function Count: 2
[>] Named Functions: 2
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1090
[>] Ordinal Array RVA: 0x1098
1 0x000010D0 GetDateFormatEx
2 0x000010F9 GetTimeFormatEx
[*] - C:\Windows\System32\downlevel\api-ms-win-core-debug-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 07/20/2066 07:35:54
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1098
[>] Ordinal Array RVA: 0x10A8
1 0x000010DC DebugBreak
2 0x00001102 IsDebuggerPresent
3 0x00001130 OutputDebugStringA
4 0x0000115F OutputDebugStringW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-debug-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 01/18/2050 10:13:21
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010F6 CheckRemoteDebug...
2 0x0000112D ContinueDebugEvent
3 0x0000115C DebugActiveProcess
4 0x0000118F DebugActiveProce...
5 0x000011C1 WaitForDebugEvent
[*] - C:\Windows\System32\downlevel\api-ms-win-core-delayload-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 11/21/2055 02:41:59
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010CC DelayLoadFailure...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-errorhandling-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/19/2070 11:24:04
[>] Function Count: 7
[>] Named Functions: 7
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A4
[>] Ordinal Array RVA: 0x10C0
1 0x00001104 GetErrorMode
2 0x00001127 GetLastError
3 0x0000114C RaiseException
4 0x00001171 SetErrorMode
5 0x00001194 SetLastError
6 0x000011C6 SetUnhandledExce...
7 0x00001204 UnhandledExcepti...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-errorhandling-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 06/27/2006 20:04:32
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010FE AddVectoredConti...
2 0x0000113E AddVectoredExcep...
3 0x00001181 RemoveVectoredCo...
4 0x000011C7 RemoveVectoredEx...
5 0x00001200 RestoreLastError
[*] - C:\Windows\System32\downlevel\api-ms-win-core-fibers-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 07/16/2088 15:51:01
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1098
[>] Ordinal Array RVA: 0x10A8
1 0x000010DB FlsAlloc
2 0x000010F5 FlsFree
3 0x00001112 FlsGetValue
4 0x00001133 FlsSetValue
[*] - C:\Windows\System32\downlevel\api-ms-win-core-fibers-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 10/26/2020 23:07:37
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010C3 IsThreadAFiber
[*] - C:\Windows\System32\downlevel\api-ms-win-core-file-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 09/16/2074 13:54:01
[>] Function Count: 75
[>] Named Functions: 75
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x11B4
[>] Ordinal Array RVA: 0x12E0
1 0x000013A6 CompareFileTime
2 0x000013D0 CreateDirectoryA
3 0x000013FB CreateDirectoryW
4 0x00001421 CreateFileA
5 0x00001442 CreateFileW
6 0x00001468 DefineDosDeviceW
7 0x0000148E DeleteFileA
8 0x000014AF DeleteFileW
9 0x000014DC DeleteVolumeMoun...
10 0x00001515 FileTimeToLocalF...
11 0x00001540 FindClose
12 0x0000156F FindCloseChangeN...
13 0x000015B1 FindFirstChangeN...
14 0x000015F4 FindFirstChangeN...
15 0x00001629 FindFirstFileA
16 0x00001652 FindFirstFileExA
17 0x0000167D FindFirstFileExW
18 0x000016A6 FindFirstFileW
19 0x000016CF FindFirstVolumeW
20 0x00001704 FindNextChangeNo...
21 0x00001736 FindNextFileA
22 0x0000175B FindNextFileW
23 0x00001782 FindNextVolumeW
24 0x000017AB FindVolumeClose
25 0x000017D5 FlushFileBuffers
26 0x00001801 GetDiskFreeSpaceA
27 0x00001830 GetDiskFreeSpaceExA
28 0x00001861 GetDiskFreeSpaceExW
29 0x00001890 GetDiskFreeSpaceW
30 0x000018B9 GetDriveTypeA
31 0x000018DE GetDriveTypeW
32 0x00001908 GetFileAttributesA
33 0x00001939 GetFileAttribute...
34 0x0000196C GetFileAttribute...
35 0x0000199D GetFileAttributesW
36 0x000019D4 GetFileInformati...
37 0x00001A04 GetFileSize
38 0x00001A27 GetFileSizeEx
39 0x00001A4A GetFileTime
40 0x00001A6B GetFileType
41 0x00001A9A GetFinalPathName...
42 0x00001AD7 GetFinalPathName...
43 0x00001B0B GetFullPathNameA
44 0x00001B36 GetFullPathNameW
45 0x00001B68 GetLogicalDriveS...
46 0x00001B9A GetLogicalDrives
47 0x00001BC5 GetLongPathNameA
48 0x00001BF0 GetLongPathNameW
49 0x00001C1C GetShortPathNameW
50 0x00001C48 GetTempFileNameW
51 0x00001C80 GetVolumeInforma...
52 0x00001CBD GetVolumeInforma...
53 0x00001CEF GetVolumePathNameW
54 0x00001D23 LocalFileTimeToF...
55 0x00001D4D LockFile
56 0x00001D6A LockFileEx
57 0x00001D8E QueryDosDeviceW
58 0x00001DB0 ReadFile
59 0x00001DCD ReadFileEx
60 0x00001DF1 ReadFileScatter
61 0x00001E1B RemoveDirectoryA
62 0x00001E46 RemoveDirectoryW
63 0x00001E6D SetEndOfFile
64 0x00001E96 SetFileAttributesA
65 0x00001EC5 SetFileAttributesW
66 0x00001EFC SetFileInformati...
67 0x00001F2F SetFilePointer
68 0x00001F58 SetFilePointerEx
69 0x00001F7E SetFileTime
70 0x00001FA4 SetFileValidData
71 0x00001FC9 UnlockFile
72 0x00001FEA UnlockFileEx
73 0x0000200A WriteFile
74 0x00002029 WriteFileEx
75 0x0000204E WriteFileGather
[*] - C:\Windows\System32\downlevel\api-ms-win-core-file-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/21/2016 18:33:16
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1098
[>] Ordinal Array RVA: 0x10A8
1 0x000010DC CreateFile2
2 0x000010FE GetTempPathW
3 0x00001136 GetVolumeNameFor...
4 0x00001182 GetVolumePathNam...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-file-l1-2-1.dll
[?] 64-bit Image!
[>] Time Stamp: 03/17/2052 14:19:55
[>] Function Count: 3
[>] Named Functions: 3
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1094
[>] Ordinal Array RVA: 0x10A0
1 0x000010DD GetCompressedFil...
2 0x00001114 GetCompressedFil...
3 0x0000114D SetFileIoOverlap...
[*] - C:\Windows\System32\downlevel\API-MS-Win-core-file-l2-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/09/2003 19:11:32
[>] Function Count: 11
[>] Named Functions: 11
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B4
[>] Ordinal Array RVA: 0x10E0
1 0x00001120 CopyFile2
2 0x0000113F CopyFileExW
3 0x00001167 CreateDirectoryExW
4 0x00001193 CreateHardLinkW
5 0x000011C0 CreateSymbolicLinkW
6 0x000011FA GetFileInformati...
7 0x0000122C MoveFileExW
8 0x00001257 MoveFileWithProg...
9 0x00001281 ReOpenFile
10 0x000012AB ReadDirectoryCha...
11 0x000012D7 ReplaceFileW
[*] - C:\Windows\System32\downlevel\API-MS-Win-core-file-l2-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 12/05/2067 10:52:35
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010BF OpenFileById
[*] - C:\Windows\System32\downlevel\api-ms-win-core-handle-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/21/2011 18:02:50
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010E8 CloseHandle
2 0x00001112 CompareObjectHan...
3 0x00001140 DuplicateHandle
4 0x0000116E GetHandleInforma...
5 0x000011A1 SetHandleInforma...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-heap-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 12/12/2076 16:51:16
[>] Function Count: 16
[>] Named Functions: 16
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C8
[>] Ordinal Array RVA: 0x1108
1 0x00001157 GetProcessHeap
2 0x0000117F GetProcessHeaps
3 0x000011A2 HeapAlloc
4 0x000011C1 HeapCompact
5 0x000011E1 HeapCreate
6 0x00001201 HeapDestroy
7 0x0000121F HeapFree
8 0x0000123A HeapLock
9 0x00001261 HeapQueryInforma...
10 0x0000128B HeapReAlloc
11 0x000012B3 HeapSetInformation
12 0x000012D8 HeapSize
13 0x000012F6 HeapSummary
14 0x00001316 HeapUnlock
15 0x00001337 HeapValidate
16 0x00001356 HeapWalk
[*] - C:\Windows\System32\downlevel\API-MS-Win-Core-Heap-Obsolete-L1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 03/26/2029 07:11:43
[>] Function Count: 15
[>] Named Functions: 15
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C4
[>] Ordinal Array RVA: 0x1100
1 0x00001153 GlobalAlloc
2 0x00001174 GlobalFlags
3 0x00001194 GlobalFree
4 0x000011B5 GlobalHandle
5 0x000011D6 GlobalLock
6 0x000011F8 GlobalReAlloc
7 0x0000121A GlobalSize
8 0x0000123B GlobalUnlock
9 0x0000125C LocalAlloc
10 0x0000127B LocalFlags
11 0x00001299 LocalFree
12 0x000012B6 LocalLock
13 0x000012D6 LocalReAlloc
14 0x000012F6 LocalSize
15 0x00001315 LocalUnlock
[*] - C:\Windows\System32\downlevel\api-ms-win-core-interlocked-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/02/2091 14:49:23
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010F5 InitializeSListHead
2 0x00001128 InterlockedFlush...
3 0x00001160 InterlockedPopEn...
4 0x0000119C InterlockedPushE...
5 0x000011CF QueryDepthSList
[*] - C:\Windows\System32\downlevel\api-ms-win-core-io-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/28/2080 23:26:16
[>] Function Count: 7
[>] Named Functions: 7
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A4
[>] Ordinal Array RVA: 0x10C0
1 0x000010F7 CancelIoEx
2 0x00001122 CreateIoCompleti...
3 0x00001152 DeviceIoControl
4 0x0000117F GetOverlappedResult
5 0x000011B6 GetQueuedComplet...
6 0x000011F5 GetQueuedComplet...
7 0x00001235 PostQueuedComple...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-io-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 11/23/1983 20:02:20
[>] Function Count: 3
[>] Named Functions: 3
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1094
[>] Ordinal Array RVA: 0x10A0
1 0x000010CD CancelIo
2 0x000010F3 CancelSynchronousIo
3 0x00001126 GetOverlappedRes...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-kernel32-legacy-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/19/1990 14:57:58
[>] Function Count: 54
[>] Named Functions: 54
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1160
[>] Ordinal Array RVA: 0x1238
1 0x000012EE AddLocalAlternat...
2 0x00001321 BackupRead
3 0x00001341 BackupWrite
4 0x0000136F BindIoCompletion...
5 0x0000139B CopyFileA
6 0x000013B8 CopyFileW
7 0x000013DE CreateFileMappingA
8 0x00001410 CreateFileTransa...
9 0x0000143F CreateMailslotA
10 0x00001469 CreateNamedPipeA
11 0x00001494 CreateSemaphoreW
12 0x000014C9 DnsHostnameToCom...
13 0x00001503 DosDateTimeToFil...
14 0x00001530 FatalAppExitA
15 0x00001555 FatalAppExitW
16 0x00001582 FileTimeToDosDat...
17 0x000015AF FindResourceA
18 0x000015D6 FindResourceExA
19 0x000015FD FindResourceW
20 0x00001625 GetComputerNameA
21 0x00001650 GetComputerNameW
22 0x0000167B GetConsoleWindow
23 0x000016A9 GetDurationFormatEx
24 0x000016E4 GetMaximumProces...
25 0x00001727 GetNamedPipeClie...
26 0x00001768 GetNamedPipeServ...
27 0x0000179F GetShortPathNameA
28 0x000017CA GetStartupInfoA
29 0x000017F4 GetStringTypeExA
30 0x00001823 GetSystemPowerSt...
31 0x0000185A GetSystemWow64Di...
32 0x00001895 GetSystemWow64Di...
33 0x000018C9 GetTapeParameters
34 0x000018F1 GetTempPathA
35 0x0000191E GetThreadSelecto...
36 0x00001951 GlobalMemoryStatus
37 0x0000197A LoadLibraryA
38 0x0000199D LoadLibraryW
39 0x000019BD MoveFileA
40 0x000019DC MoveFileExA
41 0x000019FB MoveFileW
42 0x00001A15 MulDiv
43 0x00001A2E OpenFile
44 0x00001A4B PulseEvent
45 0x00001A76 RaiseFailFastExc...
46 0x00001AB2 RegisterWaitForS...
47 0x00001AE8 SetConsoleTitleA
48 0x00001B25 SetFileCompletio...
49 0x00001B60 SetHandleCount
50 0x00001B88 SetMailslotInfo
51 0x00001BB1 SetVolumeLabelW
52 0x00001BD9 UnregisterWait
53 0x00001C0E WTSGetActiveCons...
54 0x00001C4B WaitForMultipleO...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-kernel32-legacy-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 08/20/2000 13:35:06
[>] Function Count: 15
[>] Named Functions: 15
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C4
[>] Ordinal Array RVA: 0x1100
1 0x00001164 FindFirstVolumeM...
2 0x000011A2 FindNextVolumeMo...
3 0x000011DF FindVolumeMountP...
4 0x0000121F GetFileAttribute...
5 0x00001255 GetFirmwareType
6 0x0000128B GetNumaAvailable...
7 0x000012CA GetNumaNodeProce...
8 0x00001303 GetNumaProcessor...
9 0x00001335 PowerClearRequest
10 0x00001363 PowerCreateRequest
11 0x0000138F PowerSetRequest
12 0x000013B9 SetDllDirectoryW
13 0x000013EB SetThreadIdealPr...
14 0x00001421 SetVolumeMountPo...
15 0x00001452 VerifyVersionInfoW
[*] - C:\Windows\System32\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 12/29/2018 23:27:01
[>] Function Count: 17
[>] Named Functions: 17
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10CC
[>] Ordinal Array RVA: 0x1110
1 0x00001171 BaseSetLastNTError
2 0x0000119C CheckElevation
3 0x000011CA CheckElevationEn...
4 0x000011FE CompareCalendarD...
5 0x00001232 DosPathToSession...
6 0x0000126E EnumerateLocalCo...
7 0x000012AC GetCalendarMonth...
8 0x000012E6 RegisterWaitForI...
9 0x0000132A RemoveLocalAlter...
10 0x00001372 SetLocalPrimaryC...
11 0x000013B6 Wow64EnableWow64...
12 0x000013E5 _lclose
13 0x000013FE _lcreat
14 0x00001417 _llseek
15 0x0000142F _lopen
16 0x00001446 _lread
17 0x0000145E _lwrite
[*] - C:\Windows\System32\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 03/18/2085 09:57:20
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010CE PrivCopyFileExW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-libraryloader-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/07/2051 06:49:14
[>] Function Count: 23
[>] Named Functions: 23
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10E4
[>] Ordinal Array RVA: 0x1140
1 0x000011A7 AddDllDirectory
2 0x000011DA DisableThreadLib...
3 0x0000120D FindResourceExW
4 0x00001238 FindStringOrdinal
5 0x0000125F FreeLibrary
6 0x0000128D FreeLibraryAndEx...
7 0x000012BC FreeResource
8 0x000012E5 GetModuleFileNameA
9 0x00001314 GetModuleFileNameW
10 0x00001341 GetModuleHandleA
11 0x0000136E GetModuleHandleExA
12 0x0000139D GetModuleHandleExW
13 0x000013CA GetModuleHandleW
14 0x000013F3 GetProcAddress
15 0x0000141A LoadLibraryExA
16 0x00001441 LoadLibraryExW
17 0x00001466 LoadResource
18 0x00001488 LoadStringA
19 0x000014A9 LoadStringW
20 0x000014CB LockResource
21 0x000014F4 RemoveDllDirectory
22 0x00001529 SetDefaultDllDir...
23 0x0000155A SizeofResource
[*] - C:\Windows\System32\downlevel\api-ms-win-core-libraryloader-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 12/20/1993 12:15:17
[>] Function Count: 6
[>] Named Functions: 6
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A0
[>] Ordinal Array RVA: 0x10B8
1 0x00001106 EnumResourceLang...
2 0x00001141 EnumResourceLang...
3 0x00001178 EnumResourceName...
4 0x000011AB EnumResourceName...
5 0x000011DE EnumResourceType...
6 0x00001211 EnumResourceType...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-localization-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 11/29/2016 09:17:34
[>] Function Count: 59
[>] Named Functions: 59
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1174
[>] Ordinal Array RVA: 0x1260
1 0x00001313 ConvertDefaultLo...
2 0x00001341 EnumSystemGeoID
3 0x0000136D EnumSystemLocalesA
4 0x0000139C EnumSystemLocalesW
5 0x000013C6 FindNLSString
6 0x000013ED FindNLSStringEx
7 0x00001415 FormatMessageA
8 0x0000143C FormatMessageW
9 0x0000145B GetACP
10 0x00001475 GetCPInfo
11 0x00001495 GetCPInfoExW
12 0x000014BD GetCalendarInfoEx
13 0x000014E9 GetCalendarInfoW
14 0x00001512 GetFileMUIInfo
15 0x00001539 GetFileMUIPath
16 0x0000155D GetGeoInfoW
17 0x00001581 GetLocaleInfoA
18 0x000015A9 GetLocaleInfoEx
19 0x000015D1 GetLocaleInfoW
20 0x000015F7 GetNLSVersion
21 0x0000161E GetNLSVersionEx
22 0x00001640 GetOEMCP
23 0x00001671 GetProcessPrefer...
24 0x000016AE GetSystemDefault...
25 0x000016E3 GetSystemDefault...
26 0x00001721 GetSystemPreferr...
27 0x00001758 GetThreadLocale
28 0x0000178F GetThreadPreferr...
29 0x000017CA GetThreadUILanguage
30 0x000017F9 GetUILanguageInfo
31 0x00001827 GetUserDefaultLCID
32 0x00001858 GetUserDefaultLa...
33 0x0000188F GetUserDefaultLo...
34 0x000018BE GetUserGeoID
35 0x000018F0 GetUserPreferred...
36 0x00001920 IdnToAscii
37 0x00001941 IdnToUnicode
38 0x00001966 IsDBCSLeadByte
39 0x0000198F IsDBCSLeadByteEx
40 0x000019BC IsNLSDefinedString
41 0x000019E8 IsValidCodePage
42 0x00001A16 IsValidLanguageG...
43 0x00001A42 IsValidLocale
44 0x00001A6B IsValidLocaleName
45 0x00001A98 IsValidNLSVersion
46 0x00001AC0 LCMapStringA
47 0x00001AE4 LCMapStringEx
48 0x00001B08 LCMapStringW
49 0x00001B2F LocaleNameToLCID
50 0x00001B5B ResolveLocaleName
51 0x00001B87 SetCalendarInfoW
52 0x00001BB0 SetLocaleInfoW
53 0x00001BE7 SetProcessPrefer...
54 0x00001C1F SetThreadLocale
55 0x00001C56 SetThreadPreferr...
56 0x00001C91 SetThreadUILanguage
57 0x00001CBB SetUserGeoID
58 0x00001CE2 VerLanguageNameA
59 0x00001D0D VerLanguageNameW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-localization-l1-2-1.dll
[?] 64-bit Image!
[>] Time Stamp: 01/13/2061 21:57:46
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010CE EnumSystemLocalesEx
[*] - C:\Windows\System32\downlevel\API-MS-Win-core-localization-obsolete-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 11/11/2048 20:09:26
[>] Function Count: 10
[>] Named Functions: 10
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B0
[>] Ordinal Array RVA: 0x10D8
1 0x0000112C CompareStringA
2 0x0000115E EnumLanguageGrou...
3 0x0000119B EnumSystemLangua...
4 0x000011CF EnumUILanguagesW
5 0x000011FA GetNumberFormatW
6 0x00001223 GetStringTypeA
7 0x00001256 GetSystemDefault...
8 0x00001295 GetSystemDefault...
9 0x000012D2 GetUserDefaultUI...
10 0x00001305 LCIDToLocaleName
[*] - C:\Windows\System32\downlevel\api-ms-win-core-memory-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 01/18/2018 06:11:38
[>] Function Count: 16
[>] Named Functions: 16
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C8
[>] Ordinal Array RVA: 0x1108
1 0x0000115D CreateFileMappingW
2 0x00001189 FlushViewOfFile
3 0x000011B0 MapViewOfFile
4 0x000011D7 MapViewOfFileEx
5 0x00001201 OpenFileMappingW
6 0x0000122D ReadProcessMemory
7 0x00001258 UnmapViewOfFile
8 0x0000127E VirtualAlloc
9 0x000012A3 VirtualAllocEx
10 0x000012C7 VirtualFree
11 0x000012EA VirtualFreeEx
12 0x00001310 VirtualProtect
13 0x00001339 VirtualProtectEx
14 0x00001360 VirtualQuery
15 0x00001385 VirtualQueryEx
16 0x000013B0 WriteProcessMemory
[*] - C:\Windows\System32\downlevel\api-ms-win-core-memory-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 12/14/1972 03:26:18
[>] Function Count: 16
[>] Named Functions: 16
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C8
[>] Ordinal Array RVA: 0x1108
1 0x00001163 CreateFileMappin...
2 0x0000119C CreateFileMappin...
3 0x000011DD CreateMemoryReso...
4 0x0000121B GetLargePageMinimum
5 0x00001253 GetProcessWorkin...
6 0x0000128E GetSystemFileCac...
7 0x000012BC GetWriteWatch
8 0x000012E8 MapViewOfFileFro...
9 0x0000131C PrefetchVirtualM...
10 0x0000135B QueryMemoryResou...
11 0x00001394 ResetWriteWatch
12 0x000013C8 SetProcessWorkin...
13 0x00001403 SetSystemFileCac...
14 0x00001435 UnmapViewOfFileEx
15 0x0000145C VirtualLock
16 0x0000147F VirtualUnlock
[*] - C:\Windows\System32\downlevel\api-ms-win-core-memory-l1-1-2.dll
[?] 64-bit Image!
[>] Time Stamp: 12/04/2062 14:18:37
[>] Function Count: 11
[>] Named Functions: 11
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B4
[>] Ordinal Array RVA: 0x10E0
1 0x00001132 AllocateUserPhys...
2 0x00001173 AllocateUserPhys...
3 0x000011AF DiscardVirtualMe...
4 0x000011E3 FreeUserPhysical...
5 0x00001225 GetMemoryErrorHa...
6 0x00001266 MapUserPhysicalP...
7 0x00001297 OfferVirtualMemory
8 0x000012C8 ReclaimVirtualMe...
9 0x00001304 RegisterBadMemor...
10 0x0000134B UnregisterBadMem...
11 0x00001387 VirtualAllocExNuma
[*] - C:\Windows\System32\downlevel\api-ms-win-core-namedpipe-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/09/1990 18:57:44
[>] Function Count: 10
[>] Named Functions: 10
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B0
[>] Ordinal Array RVA: 0x10D8
1 0x00001122 ConnectNamedPipe
2 0x0000114D CreateNamedPipeW
3 0x00001172 CreatePipe
4 0x0000119A DisconnectNamedPipe
5 0x000011D7 GetNamedPipeClie...
6 0x0000121B ImpersonateNamed...
7 0x0000124D PeekNamedPipe
8 0x0000127C SetNamedPipeHand...
9 0x000012AF TransactNamedPipe
10 0x000012D9 WaitNamedPipeW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-privateprofile-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 10/20/1976 07:59:17
[>] Function Count: 14
[>] Named Functions: 14
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C0
[>] Ordinal Array RVA: 0x10F8
1 0x00001154 GetPrivateProfil...
2 0x00001189 GetPrivateProfil...
3 0x000011C2 GetPrivateProfil...
4 0x000011FE GetPrivateProfil...
5 0x00001239 GetPrivateProfil...
6 0x0000126A GetProfileIntA
7 0x00001291 GetProfileIntW
8 0x000012BC GetProfileSectionA
9 0x000012EB GetProfileSectionW
10 0x00001319 GetProfileStringA
11 0x00001346 GetProfileStringW
12 0x0000137D WritePrivateProf...
13 0x000013BD WritePrivateProf...
14 0x000013FC WritePrivateProf...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-privateprofile-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 06/11/1996 01:29:46
[>] Function Count: 2
[>] Named Functions: 2
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1090
[>] Ordinal Array RVA: 0x1098
1 0x000010E0 GetPrivateProfil...
2 0x0000111F WritePrivateProf...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-processenvironment-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 01/19/1985 17:01:15
[>] Function Count: 21
[>] Named Functions: 21
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10DC
[>] Ordinal Array RVA: 0x1130
1 0x000011A2 ExpandEnvironmen...
2 0x000011DF ExpandEnvironmen...
3 0x0000121A FreeEnvironmentS...
4 0x00001253 FreeEnvironmentS...
5 0x00001284 GetCommandLineA
6 0x000012AD GetCommandLineW
7 0x000012DB GetCurrentDirect...
8 0x0000130E GetCurrentDirect...
9 0x00001342 GetEnvironmentSt...
10 0x00001378 GetEnvironmentSt...
11 0x000013B0 GetEnvironmentVa...
12 0x000013E9 GetEnvironmentVa...
13 0x00001417 GetStdHandle
14 0x00001439 SearchPathW
15 0x00001463 SetCurrentDirect...
16 0x00001496 SetCurrentDirect...
17 0x000014CB SetEnvironmentSt...
18 0x00001503 SetEnvironmentVa...
19 0x0000153C SetEnvironmentVa...
20 0x0000156A SetStdHandle
21 0x0000158F SetStdHandleEx
[*] - C:\Windows\System32\downlevel\api-ms-win-core-processenvironment-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/09/2101 14:31:31
[>] Function Count: 3
[>] Named Functions: 3
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1094
[>] Ordinal Array RVA: 0x10A0
1 0x000010F4 NeedCurrentDirec...
2 0x0000113D NeedCurrentDirec...
3 0x00001172 SearchPathA
[*] - C:\Windows\System32\downlevel\api-ms-win-core-processthreads-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/27/2022 00:11:25
[>] Function Count: 49
[>] Named Functions: 49
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x114C
[>] Ordinal Array RVA: 0x1210
1 0x000012AB CreateProcessA
2 0x000012D8 CreateProcessAsU...
3 0x00001305 CreateProcessW
4 0x00001330 CreateRemoteThread
5 0x00001361 CreateRemoteThre...
6 0x0000138C CreateThread
7 0x000013C0 DeleteProcThread...
8 0x000013F3 ExitProcess
9 0x00001413 ExitThread
10 0x00001440 FlushProcessWrit...
11 0x00001474 GetCurrentProcess
12 0x000014A3 GetCurrentProcessId
13 0x000014D1 GetCurrentThread
14 0x000014FE GetCurrentThreadId
15 0x0000152D GetExitCodeProcess
16 0x0000155B GetExitCodeThread
17 0x00001587 GetPriorityClass
18 0x000015AE GetProcessId
19 0x000015D9 GetProcessIdOfTh...
20 0x00001607 GetProcessTimes
21 0x00001632 GetProcessVersion
22 0x0000165D GetStartupInfoW
23 0x00001682 GetThreadId
24 0x000016A9 GetThreadPriority
25 0x000016DB GetThreadPriorit...
26 0x0000171D InitializeProcTh...
27 0x00001759 OpenProcessToken
28 0x0000177E OpenThread
29 0x000017A2 OpenThreadToken
30 0x000017D0 ProcessIdToSessi...
31 0x0000180D QueryProcessAffi...
32 0x00001842 QueueUserAPC
33 0x00001865 ResumeThread
34 0x0000188C SetPriorityClass
35 0x000018C3 SetProcessAffini...
36 0x00001906 SetProcessShutdo...
37 0x0000193E SetThreadPriority
38 0x00001970 SetThreadPriorit...
39 0x000019A8 SetThreadStackGu...
40 0x000019D8 SetThreadToken
41 0x000019FE SuspendThread
42 0x00001A24 SwitchToThread
43 0x00001A4D TerminateProcess
44 0x00001A77 TerminateThread
45 0x00001A99 TlsAlloc
46 0x00001AB3 TlsFree
47 0x00001AD0 TlsGetValue
48 0x00001AF1 TlsSetValue
49 0x00001B20 UpdateProcThread...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-processthreads-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 04/21/1974 10:27:11
[>] Function Count: 14
[>] Named Functions: 14
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10C0
[>] Ordinal Array RVA: 0x10F8
1 0x00001154 FlushInstruction...
2 0x0000118D GetCurrentProces...
3 0x000011CC GetCurrentProces...
4 0x0000120D GetCurrentThread...
5 0x00001248 GetProcessHandle...
6 0x00001282 GetProcessMitiga...
7 0x000012B7 GetThreadContext
8 0x000012EB GetThreadIdealPr...
9 0x0000131D GetThreadTimes
10 0x0000134F IsProcessorFeatu...
11 0x0000137E OpenProcess
12 0x000013AE SetProcessMitiga...
13 0x000013E3 SetThreadContext
14 0x00001417 SetThreadIdealPr...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-processthreads-l1-1-2.dll
[?] 64-bit Image!
[>] Time Stamp: 12/21/2085 04:26:25
[>] Function Count: 9
[>] Named Functions: 9
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10AC
[>] Ordinal Array RVA: 0x10D0
1 0x00001124 GetProcessPriori...
2 0x00001154 GetSystemTimes
3 0x00001183 GetThreadIOPendi...
4 0x000011B8 GetThreadInforma...
5 0x000011E8 IsProcessCritical
6 0x00001218 QueryProtectedPo...
7 0x0000124E SetProcessPriori...
8 0x00001282 SetProtectedPolicy
9 0x000012B3 SetThreadInforma...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-processtopology-obsolete-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 10/07/2094 19:42:48
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x00001106 GetActiveProcess...
2 0x0000113E GetProcessAffini...
3 0x00001173 GetProcessIoCoun...
4 0x000011A8 SetProcessAffini...
5 0x000011DE SetThreadAffinit...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-profile-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/17/2033 23:07:23
[>] Function Count: 2
[>] Named Functions: 2
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1090
[>] Ordinal Array RVA: 0x1098
1 0x000010D7 QueryPerformance...
2 0x00001112 QueryPerformance...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-realtime-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 09/29/2023 12:29:37
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010FA QueryIdleProcess...
2 0x0000113D QueryIdleProcess...
3 0x0000117A QueryProcessCycl...
4 0x000011AE QueryThreadCycle...
5 0x000011E7 QueryUnbiasedInt...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-registry-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 10/21/2025 00:37:49
[>] Function Count: 43
[>] Named Functions: 43
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1134
[>] Ordinal Array RVA: 0x11E0
1 0x00001266 RegCloseKey
2 0x00001288 RegCopyTreeW
3 0x000012AE RegCreateKeyExA
4 0x000012D7 RegCreateKeyExW
5 0x00001300 RegDeleteKeyExA
6 0x00001329 RegDeleteKeyExW
7 0x00001351 RegDeleteTreeA
8 0x00001378 RegDeleteTreeW
9 0x000013A0 RegDeleteValueA
10 0x000013C9 RegDeleteValueW
11 0x000013FE RegDisablePredef...
12 0x00001431 RegEnumKeyExA
13 0x00001456 RegEnumKeyExW
14 0x0000147B RegEnumValueA
15 0x000014A0 RegEnumValueW
16 0x000014C3 RegFlushKey
17 0x000014EA RegGetKeySecurity
18 0x00001512 RegGetValueA
19 0x00001535 RegGetValueW
20 0x0000155A RegLoadAppKeyA
21 0x00001581 RegLoadAppKeyW
22 0x000015A5 RegLoadKeyA
23 0x000015C6 RegLoadKeyW
24 0x000015ED RegLoadMUIStringA
25 0x0000161A RegLoadMUIStringW
26 0x0000164D RegNotifyChangeK...
27 0x00001681 RegOpenCurrentUser
28 0x000016AB RegOpenKeyExA
29 0x000016D0 RegOpenKeyExW
30 0x000016FE RegOpenUserClass...
31 0x0000172F RegQueryInfoKeyA
32 0x0000175A RegQueryInfoKeyW
33 0x00001785 RegQueryValueExA
34 0x000017B0 RegQueryValueExW
35 0x000017D9 RegRestoreKeyA
36 0x00001800 RegRestoreKeyW
37 0x00001826 RegSaveKeyExA
38 0x0000184B RegSaveKeyExW
39 0x00001874 RegSetKeySecurity
40 0x0000189E RegSetValueExA
41 0x000018C5 RegSetValueExW
42 0x000018EB RegUnLoadKeyA
43 0x00001910 RegUnLoadKeyW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-registry-l2-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 05/11/1982 03:08:46
[>] Function Count: 33
[>] Named Functions: 33
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x110C
[>] Ordinal Array RVA: 0x1190
1 0x0000120A RegConnectRegistryA
2 0x0000123B RegConnectRegistryW
3 0x00001265 RegCopyTreeA
4 0x00001289 RegCreateKeyA
5 0x000012B8 RegCreateKeyTran...
6 0x000012F1 RegCreateKeyTran...
7 0x00001320 RegCreateKeyW
8 0x00001345 RegDeleteKeyA
9 0x00001374 RegDeleteKeyTran...
10 0x000013AD RegDeleteKeyTran...
11 0x000013E1 RegDeleteKeyValueA
12 0x00001410 RegDeleteKeyValueW
13 0x0000143A RegDeleteKeyW
14 0x0000146B RegDisablePredef...
15 0x0000149A RegEnumKeyA
16 0x000014BB RegEnumKeyW
17 0x000014DC RegOpenKeyA
18 0x00001507 RegOpenKeyTransa...
19 0x0000153C RegOpenKeyTransa...
20 0x00001567 RegOpenKeyW
21 0x00001591 RegOverridePrede...
22 0x000015C7 RegQueryMultiple...
23 0x00001600 RegQueryMultiple...
24 0x00001630 RegQueryValueA
25 0x00001657 RegQueryValueW
26 0x0000167E RegReplaceKeyA
27 0x000016A5 RegReplaceKeyW
28 0x000016C9 RegSaveKeyA
29 0x000016EA RegSaveKeyW
30 0x0000170F RegSetKeyValueA
31 0x00001738 RegSetKeyValueW
32 0x0000175E RegSetValueA
33 0x00001781 RegSetValueW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-rtlsupport-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 05/20/2019 07:49:13
[>] Function Count: 13
[>] Named Functions: 13
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10BC
[>] Ordinal Array RVA: 0x10F0
1 0x00001144 RtlAddFunctionTable
2 0x00001170 RtlCaptureContext
3 0x000011A1 RtlCaptureStackB...
4 0x000011D1 RtlCompareMemory
5 0x000011FF RtlDeleteFunctio...
6 0x0000123C RtlInstallFuncti...
7 0x00001279 RtlLookupFunctio...
8 0x000012A8 RtlPcToFileHeader
9 0x000012D2 RtlRaiseException
10 0x000012FC RtlRestoreContext
11 0x0000131E RtlUnwind
12 0x0000133A RtlUnwindEx
13 0x0000135D RtlVirtualUnwind
[*] - C:\Windows\System32\downlevel\api-ms-win-core-shlwapi-legacy-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 10/01/1996 01:40:59
[>] Function Count: 88
[>] Named Functions: 88
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x11E8
[>] Ordinal Array RVA: 0x1348
1 0x0000142F IsCharBlankW
2 0x00001451 IsCharCntrlW
3 0x00001473 IsCharDigitW
4 0x00001495 IsCharPunctW
5 0x000014B7 IsCharSpaceA
6 0x000014D9 IsCharSpaceW
7 0x000014FC IsCharXDigitW
8 0x00001524 PathAddBackslashA
9 0x00001550 PathAddBackslashW
10 0x0000157C PathAddExtensionA
11 0x000015A8 PathAddExtensionW
12 0x000015CE PathAppendA
13 0x000015EE PathAppendW
14 0x00001614 PathCanonicalizeA
15 0x00001640 PathCanonicalizeW
16 0x00001667 PathCombineA
17 0x00001689 PathCombineW
18 0x000016B0 PathCommonPrefixA
19 0x000016DC PathCommonPrefixW
20 0x00001706 PathFileExistsA
21 0x0000172E PathFileExistsW
22 0x00001759 PathFindExtensionA
23 0x00001787 PathFindExtensionW
24 0x000017B4 PathFindFileNameA
25 0x000017E0 PathFindFileNameW
26 0x00001811 PathFindNextComp...
27 0x00001847 PathFindNextComp...
28 0x00001873 PathGetArgsA
29 0x00001895 PathGetArgsW
30 0x000018BB PathGetCharTypeA
31 0x000018E5 PathGetCharTypeW
32 0x00001912 PathGetDriveNumberA
33 0x00001942 PathGetDriveNumberW
34 0x0000196E PathIsFileSpecA
35 0x00001996 PathIsFileSpecW
36 0x000019C1 PathIsLFNFileSpecA
37 0x000019EF PathIsLFNFileSpecW
38 0x00001A18 PathIsPrefixA
39 0x00001A3C PathIsPrefixW
40 0x00001A62 PathIsRelativeA
41 0x00001A8A PathIsRelativeW
42 0x00001AAE PathIsRootA
43 0x00001ACE PathIsRootW
44 0x00001AF2 PathIsSameRootA
45 0x00001B1A PathIsSameRootW
46 0x00001B3D PathIsUNCA
47 0x00001B61 PathIsUNCServerA
48 0x00001B90 PathIsUNCServerS...
49 0x00001BC4 PathIsUNCServerS...
50 0x00001BF3 PathIsUNCServerW
51 0x00001C17 PathIsUNCW
52 0x00001C3B PathIsValidCharA
53 0x00001C65 PathIsValidCharW
54 0x00001C8D PathMatchSpecA
55 0x00001CB5 PathMatchSpecExA
56 0x00001CDF PathMatchSpecExW
57 0x00001D07 PathMatchSpecW
58 0x00001D35 PathParseIconLoc...
59 0x00001D6B PathParseIconLoc...
60 0x00001D9B PathQuoteSpacesA
61 0x00001DC5 PathQuoteSpacesW
62 0x00001DF2 PathRelativePathToA
63 0x00001E22 PathRelativePathToW
64 0x00001E53 PathRemoveBacksl...
65 0x00001E85 PathRemoveBacksl...
66 0x00001EB4 PathRemoveBlanksA
67 0x00001EE0 PathRemoveBlanksW
68 0x00001F0F PathRemoveExtens...
69 0x00001F41 PathRemoveExtens...
70 0x00001F72 PathRemoveFileSpecA
71 0x00001FA2 PathRemoveFileSpecW
72 0x00001FD3 PathRenameExtens...
73 0x00002005 PathRenameExtens...
74 0x00002038 PathSearchAndQua...
75 0x0000206C PathSearchAndQua...
76 0x00002098 PathSkipRootA
77 0x000020BC PathSkipRootW
78 0x000020E1 PathStripPathA
79 0x00002107 PathStripPathW
80 0x0000212F PathStripToRootA
81 0x00002159 PathStripToRootW
82 0x0000218A PathUnExpandEnvS...
83 0x000021C2 PathUnExpandEnvS...
84 0x000021F5 PathUnquoteSpacesA
85 0x00002223 PathUnquoteSpacesW
86 0x0000225A SHExpandEnvironm...
87 0x0000229A SHExpandEnvironm...
88 0x000022CF SHTruncateString
[*] - C:\Windows\System32\downlevel\api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/01/2015 21:27:33
[>] Function Count: 61
[>] Named Functions: 61
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x117C
[>] Ordinal Array RVA: 0x1270
1 0x0000131F QISearch
2 0x00001345 SHLoadIndirectSt...
3 0x0000136B StrCSpnA
4 0x00001386 StrCSpnIA
5 0x000013A2 StrCSpnIW
6 0x000013BD StrCSpnW
7 0x000013DA StrCatBuffA
8 0x000013FA StrCatBuffW
9 0x0000141B StrCatChainW
10 0x00001438 StrChrA
11 0x00001451 StrChrIA
12 0x0000146B StrChrIW
13 0x00001486 StrChrNIW
14 0x000014A1 StrChrNW
15 0x000014BA StrChrW
16 0x000014D3 StrCmpCA
17 0x000014ED StrCmpCW
18 0x00001508 StrCmpICA
19 0x00001524 StrCmpICW
20 0x0000153F StrCmpIW
21 0x0000155F StrCmpLogicalW
22 0x0000157F StrCmpNA
23 0x0000159A StrCmpNCA
24 0x000015B6 StrCmpNCW
25 0x000015D2 StrCmpNIA
26 0x000015EF StrCmpNICA
27 0x0000160D StrCmpNICW
28 0x0000162A StrCmpNIW
29 0x00001645 StrCmpNW
30 0x0000165E StrCmpW
31 0x00001677 StrCpyNW
32 0x00001692 StrCpyNXA
33 0x000016AE StrCpyNXW
34 0x000016C8 StrDupA
35 0x000016E0 StrDupW
36 0x00001700 StrIsIntlEqualA
37 0x00001728 StrIsIntlEqualW
38 0x00001749 StrPBrkA
39 0x00001763 StrPBrkW
40 0x0000177D StrRChrA
41 0x00001798 StrRChrIA
42 0x000017B4 StrRChrIW
43 0x000017CF StrRChrW
44 0x000017EA StrRStrIA
45 0x00001806 StrRStrIW
46 0x00001820 StrSpnA
47 0x00001838 StrSpnW
48 0x00001850 StrStrA
49 0x00001869 StrStrIA
50 0x00001883 StrStrIW
51 0x0000189E StrStrNIW
52 0x000018B9 StrStrNW
53 0x000018D2 StrStrW
54 0x000018F0 StrToInt64ExA
55 0x00001914 StrToInt64ExW
56 0x00001934 StrToIntA
57 0x00001952 StrToIntExA
58 0x00001972 StrToIntExW
59 0x00001990 StrToIntW
60 0x000019AB StrTrimA
61 0x000019C5 StrTrimW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-shutdown-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 07/05/2010 08:53:25
[>] Function Count: 2
[>] Named Functions: 2
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1090
[>] Ordinal Array RVA: 0x1098
1 0x000010D5 AbortSystemShutd...
2 0x0000110D InitiateSystemSh...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-string-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 01/10/2025 13:01:07
[>] Function Count: 8
[>] Named Functions: 8
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A8
[>] Ordinal Array RVA: 0x10C8
1 0x0000110A CompareStringEx
2 0x00001138 CompareStringOrd...
3 0x00001165 CompareStringW
4 0x00001189 FoldStringW
5 0x000011AF GetStringTypeExW
6 0x000011D8 GetStringTypeW
7 0x00001204 MultiByteToWideChar
8 0x00001235 WideCharToMultiByte
[*] - C:\Windows\System32\downlevel\API-MS-Win-core-string-l2-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 05/17/2066 08:10:26
[>] Function Count: 10
[>] Named Functions: 10
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B0
[>] Ordinal Array RVA: 0x10D8
1 0x0000111D CharLowerBuffW
2 0x0000113E CharLowerW
3 0x0000115A CharNextW
4 0x00001175 CharPrevW
5 0x00001195 CharUpperBuffW
6 0x000011B6 CharUpperW
7 0x000011DC IsCharAlphaNumericW
8 0x00001204 IsCharAlphaW
9 0x00001225 IsCharLowerW
10 0x00001246 IsCharUpperW
[*] - C:\Windows\System32\downlevel\API-MS-Win-core-string-obsolete-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/30/1980 20:47:52
[>] Function Count: 10
[>] Named Functions: 10
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B0
[>] Ordinal Array RVA: 0x10D8
1 0x00001120 lstrcatW
2 0x0000113B lstrcmpA
3 0x00001156 lstrcmpW
4 0x00001172 lstrcmpiA
5 0x0000118F lstrcmpiW
6 0x000011AB lstrcpyW
7 0x000011C7 lstrcpynA
8 0x000011E4 lstrcpynW
9 0x00001200 lstrlenA
10 0x0000121B lstrlenW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-stringansi-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 01/22/2106 21:54:24
[>] Function Count: 12
[>] Named Functions: 12
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10B8
[>] Ordinal Array RVA: 0x10E8
1 0x00001131 CharLowerA
2 0x00001152 CharLowerBuffA
3 0x00001172 CharNextA
4 0x0000118F CharNextExA
5 0x000011AC CharPrevA
6 0x000011C9 CharPrevExA
7 0x000011E7 CharUpperA
8 0x00001208 CharUpperBuffA
9 0x0000122B IsCharAlphaA
10 0x00001253 IsCharAlphaNumericA
11 0x0000127B IsCharLowerA
12 0x0000129C IsCharUpperA
[*] - C:\Windows\System32\downlevel\api-ms-win-core-stringloader-l1-1-1.dll
[?] 64-bit Image!
[>] Time Stamp: 03/02/2101 14:01:39
[>] Function Count: 2
[>] Named Functions: 2
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1090
[>] Ordinal Array RVA: 0x1098
1 0x000010D0 LoadStringA
2 0x000010EF LoadStringW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-synch-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 03/10/1973 16:49:12
[>] Function Count: 41
[>] Named Functions: 41
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x112C
[>] Ordinal Array RVA: 0x11D0
1 0x0000125B AcquireSRWLockEx...
2 0x00001291 AcquireSRWLockSh...
3 0x000012C3 CancelWaitableTimer
4 0x000012ED CreateEventA
5 0x00001312 CreateEventExA
6 0x00001339 CreateEventExW
7 0x0000135E CreateEventW
8 0x00001381 CreateMutexA
9 0x000013A6 CreateMutexExA
10 0x000013CD CreateMutexExW
11 0x000013F2 CreateMutexW
12 0x0000141B CreateSemaphoreExW
13 0x0000144E CreateWaitableTi...
14 0x00001484 DeleteCriticalSe...
15 0x000014B8 EnterCriticalSec...
16 0x000014F0 InitializeCritic...
17 0x00001539 InitializeCritic...
18 0x00001584 InitializeCritic...
19 0x000015BB InitializeSRWLock
20 0x000015EB LeaveCriticalSec...
21 0x00001614 OpenEventA
22 0x00001633 OpenEventW
23 0x00001652 OpenMutexW
24 0x00001675 OpenSemaphoreW
25 0x000016A0 OpenWaitableTimerW
26 0x000016C9 ReleaseMutex
27 0x000016F7 ReleaseSRWLockEx...
28 0x0000172D ReleaseSRWLockSh...
29 0x0000175C ReleaseSemaphore
30 0x00001781 ResetEvent
31 0x000017B1 SetCriticalSecti...
32 0x000017DF SetEvent
33 0x00001802 SetWaitableTimer
34 0x0000182F SetWaitableTimerEx
35 0x00001853 SleepEx
36 0x0000187F TryAcquireSRWLoc...
37 0x000018BB TryAcquireSRWLoc...
38 0x000018F4 TryEnterCritical...
39 0x0000192E WaitForMultipleO...
40 0x00001964 WaitForSingleObject
41 0x00001997 WaitForSingleObj...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-synch-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 04/07/1990 02:33:29
[>] Function Count: 17
[>] Named Functions: 17
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10CC
[>] Ordinal Array RVA: 0x1110
1 0x00001170 DeleteSynchroniz...
2 0x000011B2 EnterSynchroniza...
3 0x000011EF InitOnceBeginIni...
4 0x00001221 InitOnceComplete
5 0x0000124F InitOnceExecuteOnce
6 0x0000127F InitOnceInitialize
7 0x000012B7 InitializeCondit...
8 0x000012FD InitializeSynchr...
9 0x0000133B SignalObjectAndWait
10 0x0000135E Sleep
11 0x00001386 SleepConditionVa...
12 0x000013C2 SleepConditionVa...
13 0x000013F3 WaitOnAddress
14 0x00001423 WakeAllCondition...
15 0x00001456 WakeByAddressAll
16 0x00001484 WakeByAddressSingle
17 0x000014B7 WakeConditionVar...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-sysinfo-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/01/2100 08:57:38
[>] Function Count: 22
[>] Named Functions: 22
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10E0
[>] Ordinal Array RVA: 0x1138
1 0x0000119A GetComputerNameExA
2 0x000011C9 GetComputerNameExW
3 0x000011F2 GetLocalTime
4 0x00001227 GetLogicalProces...
5 0x00001270 GetLogicalProces...
6 0x000012AE GetSystemDirectoryA
7 0x000012DF GetSystemDirectoryW
8 0x0000130A GetSystemInfo
9 0x0000132F GetSystemTime
10 0x0000135E GetSystemTimeAdj...
11 0x00001397 GetSystemTimeAsF...
12 0x000013D3 GetSystemWindows...
13 0x00001412 GetSystemWindows...
14 0x00001443 GetTickCount
15 0x00001468 GetTickCount64
16 0x0000148B GetVersion
17 0x000014AD GetVersionExA
18 0x000014D2 GetVersionExW
19 0x000014FE GetWindowsDirect...
20 0x00001531 GetWindowsDirect...
21 0x00001564 GlobalMemoryStat...
22 0x0000158F SetLocalTime
[*] - C:\Windows\System32\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 10/01/2066 08:04:50
[>] Function Count: 9
[>] Named Functions: 9
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10AC
[>] Ordinal Array RVA: 0x10D0
1 0x0000111E EnumSystemFirmwa...
2 0x00001154 GetNativeSystemInfo
3 0x00001183 GetOsSafeBootMode
4 0x000011AD GetProductInfo
5 0x000011DC GetSystemFirmwar...
6 0x0000121B GetSystemTimePre...
7 0x00001256 SetComputerNameExW
8 0x00001280 SetSystemTime
9 0x000012AB VerSetConditionMask
[*] - C:\Windows\System32\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll
[?] 64-bit Image!
[>] Time Stamp: 05/06/2033 21:11:26
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010FA DnsHostnameToCom...
2 0x00001143 GetPhysicallyIns...
3 0x0000118A InstallELAMCerti...
4 0x000011C2 SetComputerNameEx2W
5 0x000011F7 SetSystemTimeAdj...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-threadpool-l1-2-0.dll
[?] 64-bit Image!
[>] Time Stamp: 04/14/2004 16:25:01
[>] Function Count: 37
[>] Named Functions: 37
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x111C
[>] Ordinal Array RVA: 0x11B0
1 0x00001233 CallbackMayRunLong
2 0x00001262 CancelThreadpoolIo
3 0x0000128E CloseThreadpool
4 0x000012C3 CloseThreadpoolC...
5 0x0000130B CloseThreadpoolC...
6 0x00001349 CloseThreadpoolIo
7 0x00001379 CloseThreadpoolT...
8 0x000013AB CloseThreadpoolWait
9 0x000013DC CloseThreadpoolWork
10 0x0000140A CreateThreadpool
11 0x00001441 CreateThreadpool...
12 0x0000147A CreateThreadpoolIo
13 0x000014AC CreateThreadpool...
14 0x000014E0 CreateThreadpool...
15 0x00001513 CreateThreadpool...
16 0x00001557 DisassociateCurr...
17 0x000015A5 FreeLibraryWhenC...
18 0x000015E2 IsThreadpoolTime...
19 0x00001628 LeaveCriticalSec...
20 0x00001679 QueryThreadpoolS...
21 0x000016C2 ReleaseMutexWhen...
22 0x0000170F ReleaseSemaphore...
23 0x00001758 SetEventWhenCall...
24 0x0000179B SetThreadpoolSta...
25 0x000017DD SetThreadpoolThr...
26 0x0000181C SetThreadpoolThr...
27 0x00001853 SetThreadpoolTimer
28 0x00001884 SetThreadpoolTim...
29 0x000018B4 SetThreadpoolWait
30 0x000018E3 SetThreadpoolWaitEx
31 0x00001912 StartThreadpoolIo
32 0x00001942 SubmitThreadpool...
33 0x0000197C TrySubmitThreadp...
34 0x000019BE WaitForThreadpoo...
35 0x00001A04 WaitForThreadpoo...
36 0x00001A4C WaitForThreadpoo...
37 0x00001A93 WaitForThreadpoo...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 09/30/1975 02:40:27
[>] Function Count: 7
[>] Named Functions: 7
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A4
[>] Ordinal Array RVA: 0x10C0
1 0x00001111 ChangeTimerQueue...
2 0x00001141 CreateTimerQueue
3 0x00001171 CreateTimerQueue...
4 0x000011A3 DeleteTimerQueueEx
5 0x000011D5 DeleteTimerQueue...
6 0x00001206 QueueUserWorkItem
7 0x00001232 UnregisterWaitEx
[*] - C:\Windows\System32\downlevel\api-ms-win-core-threadpool-private-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/16/2001 21:25:57
[>] Function Count: 1
[>] Named Functions: 1
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x108C
[>] Ordinal Array RVA: 0x1090
1 0x000010DE RegisterWaitForS...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-timezone-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 10/27/2071 09:20:41
[>] Function Count: 13
[>] Named Functions: 13
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10BC
[>] Ordinal Array RVA: 0x10F0
1 0x0000114D EnumDynamicTimeZ...
2 0x0000118A FileTimeToSystem...
3 0x000011C6 GetDynamicTimeZo...
4 0x00001219 GetDynamicTimeZo...
5 0x00001265 GetTimeZoneInfor...
6 0x000012A3 GetTimeZoneInfor...
7 0x000012E8 SetDynamicTimeZo...
8 0x00001326 SetTimeZoneInfor...
9 0x0000135B SystemTimeToFile...
10 0x00001399 SystemTimeToTzSp...
11 0x000013E4 SystemTimeToTzSp...
12 0x0000142F TzSpecificLocalT...
13 0x0000147A TzSpecificLocalT...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-url-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 04/03/2009 01:17:54
[>] Function Count: 38
[>] Named Functions: 38
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1120
[>] Ordinal Array RVA: 0x11B8
1 0x00001237 GetAcceptLanguagesA
2 0x00001267 GetAcceptLanguagesW
3 0x0000128C HashData
4 0x000012B2 IsInternetESCEna...
5 0x000012D9 ParseURLA
6 0x000012F5 ParseURLW
7 0x0000131A PathCreateFromUrlA
8 0x0000134C PathCreateFromUr...
9 0x0000137E PathCreateFromUrlW
10 0x000013A4 PathIsURLA
11 0x000013C2 PathIsURLW
12 0x000013E5 UrlApplySchemeA
13 0x0000140D UrlApplySchemeW
14 0x00001436 UrlCanonicalizeA
15 0x00001460 UrlCanonicalizeW
16 0x00001485 UrlCombineA
17 0x000014A5 UrlCombineW
18 0x000014C5 UrlCompareA
19 0x000014E5 UrlCompareW
20 0x0000150C UrlCreateFromPathA
21 0x0000153A UrlCreateFromPathW
22 0x00001560 UrlEscapeA
23 0x0000157E UrlEscapeW
24 0x0000159B UrlFixupW
25 0x000015BD UrlGetLocationA
26 0x000015E5 UrlGetLocationW
27 0x00001609 UrlGetPartA
28 0x00001629 UrlGetPartW
29 0x00001646 UrlHashA
30 0x00001660 UrlHashW
31 0x00001678 UrlIsA
32 0x00001697 UrlIsNoHistoryA
33 0x000016BF UrlIsNoHistoryW
34 0x000016E4 UrlIsOpaqueA
35 0x00001706 UrlIsOpaqueW
36 0x00001722 UrlIsW
37 0x0000173E UrlUnescapeA
38 0x00001760 UrlUnescapeW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-util-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 03/12/2079 21:42:27
[>] Function Count: 5
[>] Named Functions: 5
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x109C
[>] Ordinal Array RVA: 0x10B0
1 0x000010DF Beep
2 0x000010FB DecodePointer
3 0x00001126 DecodeSystemPointer
4 0x00001151 EncodePointer
5 0x0000117C EncodeSystemPointer
[*] - C:\Windows\System32\downlevel\api-ms-win-core-version-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/25/2050 06:18:43
[>] Function Count: 4
[>] Named Functions: 4
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1098
[>] Ordinal Array RVA: 0x10A8
1 0x000010E9 GetFileVersionIn...
2 0x00001121 GetFileVersionIn...
3 0x00001150 VerFindFileW
4 0x00001174 VerQueryValueW
[*] - C:\Windows\System32\downlevel\api-ms-win-core-wow64-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 03/06/1994 02:39:44
[>] Function Count: 3
[>] Named Functions: 3
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x1094
[>] Ordinal Array RVA: 0x10A0
1 0x000010D6 IsWow64Process
2 0x0000110D Wow64DisableWow6...
3 0x00001153 Wow64RevertWow64...
[*] - C:\Windows\System32\downlevel\api-ms-win-core-xstate-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/02/2021 06:09:41
[>] Function Count: 8
[>] Named Functions: 8
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A8
[>] Ordinal Array RVA: 0x10C8
1 0x00001111 RtlCopyExtendedC...
2 0x0000114C RtlGetEnabledExt...
3 0x0000118C RtlGetExtendedCo...
4 0x000011C9 RtlGetExtendedFe...
5 0x00001207 RtlInitializeExt...
6 0x00001243 RtlLocateExtende...
7 0x00001279 RtlLocateLegacyC...
8 0x000012B1 RtlSetExtendedFe...
[*] - C:\Windows\System32\downlevel\API-MS-Win-core-xstate-l2-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 02/15/2098 15:38:02
[>] Function Count: 6
[>] Named Functions: 6
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1088
[>] Name Array RVA: 0x10A0
[>] Ordinal Array RVA: 0x10B8
1 0x000010F2 CopyContext
2 0x00001120 GetEnabledXState...
3 0x00001158 GetXStateFeature...
4 0x00001189 InitializeContext
5 0x000011B8 LocateXStateFeature
6 0x000011EB SetXStateFeature...
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-conio-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 11/21/1988 11:44:33
[>] Function Count: 30
[>] Named Functions: 30
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1128
[>] Name Array RVA: 0x11A0
[>] Ordinal Array RVA: 0x1218
1 0x0000128C __conio_common_v...
2 0x000012C7 __conio_common_v...
3 0x00001304 __conio_common_v...
4 0x0000133E __conio_common_v...
5 0x00001377 __conio_common_v...
6 0x000013B4 __conio_common_v...
7 0x000013F3 __conio_common_v...
8 0x0000142F __conio_common_v...
9 0x00001457 _cgets
10 0x00001470 _cgets_s
11 0x0000148A _cgetws
12 0x000014A5 _cgetws_s
13 0x000014BF _cputs
14 0x000014D7 _cputws
15 0x000014EF _getch
16 0x0000150D _getch_nolock
17 0x0000152C _getche
18 0x0000154C _getche_nolock
19 0x0000156C _getwch
20 0x0000158C _getwch_nolock
21 0x000015AD _getwche
22 0x000015CF _getwche_nolock
23 0x000015EF _putch
24 0x0000160D _putch_nolock
25 0x0000162C _putwch
26 0x0000164C _putwch_nolock
27 0x0000166D _ungetch
28 0x0000168F _ungetch_nolock
29 0x000016B2 _ungetwch
30 0x000016D6 _ungetwch_nolock
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-convert-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 06/09/2026 19:15:20
[>] Function Count: 122
[>] Named Functions: 122
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1138
[>] Name Array RVA: 0x1320
[>] Ordinal Array RVA: 0x1508
1 0x00001628 __toascii
2 0x00001643 _atodbl
3 0x0000165E _atodbl_l
4 0x00001679 _atof_l
5 0x00001692 _atoflt
6 0x000016AD _atoflt_l
7 0x000016C8 _atoi64
8 0x000016E3 _atoi64_l
9 0x000016FE _atoi_l
10 0x00001717 _atol_l
11 0x00001731 _atoldbl
12 0x0000174E _atoldbl_l
13 0x0000176B _atoll_l
14 0x00001783 _ecvt
15 0x0000179A _ecvt_s
16 0x000017B1 _fcvt
17 0x000017C8 _fcvt_s
18 0x000017DF _gcvt
19 0x000017F6 _gcvt_s
20 0x0000180F _i64toa
21 0x0000182A _i64toa_s
22 0x00001845 _i64tow
23 0x00001860 _i64tow_s
24 0x00001879 _itoa
25 0x00001890 _itoa_s
26 0x000018A7 _itow
27 0x000018BE _itow_s
28 0x000018D5 _ltoa
29 0x000018EC _ltoa_s
30 0x00001903 _ltow
31 0x0000191A _ltow_s
32 0x00001935 _strtod_l
33 0x00001952 _strtof_l
34 0x0000196F _strtoi64
35 0x0000198E _strtoi64_l
36 0x000019B0 _strtoimax_l
37 0x000019D0 _strtol_l
38 0x000019EE _strtold_l
39 0x00001A0D _strtoll_l
40 0x00001A2C _strtoui64
41 0x00001A4D _strtoui64_l
42 0x00001A6E _strtoul_l
43 0x00001A8E _strtoull_l
44 0x00001AB0 _strtoumax_l
45 0x00001ACF _ui64toa
46 0x00001AEC _ui64toa_s
47 0x00001B09 _ui64tow
48 0x00001B26 _ui64tow_s
49 0x00001B41 _ultoa
50 0x00001B5A _ultoa_s
51 0x00001B73 _ultow
52 0x00001B8C _ultow_s
53 0x00001BA8 _wcstod_l
54 0x00001BC5 _wcstof_l
55 0x00001BE2 _wcstoi64
56 0x00001C01 _wcstoi64_l
57 0x00001C23 _wcstoimax_l
58 0x00001C43 _wcstol_l
59 0x00001C61 _wcstold_l
60 0x00001C80 _wcstoll_l
61 0x00001CA0 _wcstombs_l
62 0x00001CC3 _wcstombs_s_l
63 0x00001CE5 _wcstoui64
64 0x00001D06 _wcstoui64_l
65 0x00001D27 _wcstoul_l
66 0x00001D47 _wcstoull_l
67 0x00001D69 _wcstoumax_l
68 0x00001D89 _wctomb_l
69 0x00001DA8 _wctomb_s_l
70 0x00001DC3 _wtof
71 0x00001DDA _wtof_l
72 0x00001DF1 _wtoi
73 0x00001E08 _wtoi64
74 0x00001E23 _wtoi64_l
75 0x00001E3E _wtoi_l
76 0x00001E55 _wtol
77 0x00001E6C _wtol_l
78 0x00001E84 _wtoll
79 0x00001E9D _wtoll_l
80 0x00001EB4 atof
81 0x00001EC7 atoi
82 0x00001EDA atol
83 0x00001EEE atoll
84 0x00001F03 btowc
85 0x00001F1B c16rtomb
86 0x00001F36 c32rtomb
87 0x00001F51 mbrtoc16
88 0x00001F6C mbrtoc32
89 0x00001F86 mbrtowc
90 0x00001FA1 mbsrtowcs
91 0x00001FC0 mbsrtowcs_s
92 0x00001FDE mbstowcs
93 0x00001FFB mbstowcs_s
94 0x00002016 mbtowc
95 0x0000202D strtod
96 0x00002044 strtof
97 0x0000205E strtoimax
98 0x00002078 strtol
99 0x00002090 strtold
100 0x000020A9 strtoll
101 0x000020C2 strtoul
102 0x000020DC strtoull
103 0x000020F8 strtoumax
104 0x00002113 wcrtomb
105 0x0000212E wcrtomb_s
106 0x0000214B wcsrtombs
107 0x0000216A wcsrtombs_s
108 0x00002186 wcstod
109 0x0000219D wcstof
110 0x000021B7 wcstoimax
111 0x000021D1 wcstol
112 0x000021E9 wcstold
113 0x00002202 wcstoll
114 0x0000221C wcstombs
115 0x00002239 wcstombs_s
116 0x00002255 wcstoul
117 0x0000226F wcstoull
118 0x0000228B wcstoumax
119 0x000022A4 wctob
120 0x000022BA wctomb
121 0x000022D3 wctomb_s
122 0x000022ED wctrans
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-environment-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 12/31/2062 16:17:22
[>] Function Count: 18
[>] Named Functions: 18
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1138
[>] Name Array RVA: 0x1180
[>] Ordinal Array RVA: 0x11C8
1 0x0000121F __p__environ
2 0x00001243 __p__wenviron
3 0x00001264 _dupenv_s
4 0x0000127F _putenv
5 0x0000129A _putenv_s
6 0x000012B8 _searchenv
7 0x000012D9 _searchenv_s
8 0x000012FA _wdupenv_s
9 0x00001317 _wgetcwd
10 0x00001333 _wgetdcwd
11 0x0000134F _wgetenv
12 0x0000136C _wgetenv_s
13 0x00001389 _wputenv
14 0x000013A6 _wputenv_s
15 0x000013C6 _wsearchenv
16 0x000013E9 _wsearchenv_s
17 0x00001407 getenv
18 0x00001420 getenv_s
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 09/27/2026 17:52:35
[>] Function Count: 65
[>] Named Functions: 65
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1138
[>] Name Array RVA: 0x123C
[>] Ordinal Array RVA: 0x1340
1 0x000013EF _access
2 0x0000140A _access_s
3 0x00001424 _chdir
4 0x0000143D _chdrive
5 0x00001456 _chmod
6 0x00001471 _findclose
7 0x00001492 _findfirst32
8 0x000014B8 _findfirst32i64
9 0x000014DE _findfirst64
10 0x00001504 _findfirst64i32
11 0x00001529 _findnext32
12 0x0000154D _findnext32i64
13 0x00001571 _findnext64
14 0x00001595 _findnext64i32
15 0x000015B6 _fstat32
16 0x000015D4 _fstat32i64
17 0x000015F2 _fstat64
18 0x00001610 _fstat64i32
19 0x0000162F _fullpath
20 0x0000164F _getdiskfree
21 0x0000166F _getdrive
22 0x0000168D _getdrives
23 0x000016AC _lock_file
24 0x000016CA _makepath
25 0x000016E9 _makepath_s
26 0x00001705 _mkdir
27 0x0000171C _rmdir
28 0x00001737 _splitpath
29 0x00001758 _splitpath_s
30 0x00001776 _stat32
31 0x00001792 _stat32i64
32 0x000017AE _stat64
33 0x000017CA _stat64i32
34 0x000017E5 _umask
35 0x000017FE _umask_s
36 0x00001818 _unlink
37 0x00001836 _unlock_file
38 0x00001855 _waccess
39 0x00001872 _waccess_s
40 0x0000188E _wchdir
41 0x000018A7 _wchmod
42 0x000018C6 _wfindfirst32
43 0x000018EE _wfindfirst32i64
44 0x00001916 _wfindfirst64
45 0x0000193E _wfindfirst64i32
46 0x00001965 _wfindnext32
47 0x0000198B _wfindnext32i64
48 0x000019B1 _wfindnext64
49 0x000019D7 _wfindnext64i32
50 0x000019FB _wfullpath
51 0x00001A1A _wmakepath
52 0x00001A3B _wmakepath_s
53 0x00001A59 _wmkdir
54 0x00001A73 _wremove
55 0x00001A8E _wrename
56 0x00001AA8 _wrmdir
57 0x00001AC5 _wsplitpath
58 0x00001AE8 _wsplitpath_s
59 0x00001B08 _wstat32
60 0x00001B26 _wstat32i64
61 0x00001B44 _wstat64
62 0x00001B62 _wstat64i32
63 0x00001B80 _wunlink
64 0x00001B99 remove
65 0x00001BB0 rename
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-heap-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 08/18/2088 02:30:24
[>] Function Count: 27
[>] Named Functions: 27
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1128
[>] Name Array RVA: 0x1194
[>] Ordinal Array RVA: 0x1200
1 0x00001263 _aligned_free
2 0x0000128A _aligned_malloc
3 0x000012B2 _aligned_msize
4 0x000012E1 _aligned_offset_...
5 0x00001319 _aligned_offset_...
6 0x00001353 _aligned_offset_...
7 0x00001386 _aligned_realloc
8 0x000013B2 _aligned_recalloc
9 0x000013D7 _callnewh
10 0x000013F7 _calloc_base
11 0x00001415 _expand
12 0x00001431 _free_base
13 0x00001456 _get_heap_handle
14 0x00001479 _heapchk
15 0x00001494 _heapmin
16 0x000014B0 _heapwalk
17 0x000014D0 _malloc_base
18 0x000014ED _msize
19 0x00001510 _query_new_handler
20 0x0000153C _query_new_mode
21 0x00001563 _realloc_base
22 0x00001584 _recalloc
23 0x000015A5 _set_new_mode
24 0x000015C3 calloc
25 0x000015D8 free
26 0x000015ED malloc
27 0x00001605 realloc
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-locale-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 04/09/2044 21:28:44
[>] Function Count: 20
[>] Named Functions: 20
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1138
[>] Name Array RVA: 0x1188
[>] Ordinal Array RVA: 0x11D8
1 0x00001235 ___lc_codepage_func
2 0x00001268 ___lc_collate_cp...
3 0x0000129E ___lc_locale_nam...
4 0x000012D1 ___mb_cur_max_func
5 0x00001302 ___mb_cur_max_l_...
6 0x00001345 __initialize_lco...
7 0x00001381 __pctype_func
8 0x000013A7 __pwctype_func
9 0x000013D3 _configthreadlocale
10 0x000013FF _create_locale
11 0x00001424 _free_locale
12 0x0000144E _get_current_locale
13 0x00001474 _getmbcp
14 0x00001494 _lock_locales
15 0x000014B4 _setmbcp
16 0x000014D6 _unlock_locales
17 0x000014FF _wcreate_locale
18 0x00001524 _wsetlocale
19 0x00001544 localeconv
20 0x00001562 setlocale
[*] - C:\Windows\System32\downlevel\api-ms-win-crt-math-l1-1-0.dll
[?] 64-bit Image!
[>] Time Stamp: 04/26/2045 05:43:07
[>] Function Count: 290
[>] Named Functions: 290
[>] Ordinal Base: 1
[>] Function Array RVA: 0x1128
[>] Name Array RVA: 0x15B0
[>] Ordinal Array RVA: 0x1A38
1 0x00001CA3 _Cbuild
2 0x00001CBC _Cmulcc
3 0x00001CD5 _Cmulcr
4 0x00001CEF _FCbuild
5 0x00001D0A _FCmulcc
6 0x00001D25 _FCmulcr
7 0x00001D40 _LCbuild
8 0x00001D5B _LCmulcc
9 0x00001D76 _LCmulcr
10 0x00001D99 __setusermatherr
11 0x00001DB9 _cabs
12 0x00001DD1 _chgsign
13 0x00001DED _chgsignf
14 0x00001E0A _copysign
15 0x00001E28 _copysignf
16 0x00001E43 _d_int
17 0x00001E5B _dclass
18 0x00001E72 _dexp
19 0x00001E87 _dlog
20 0x00001E9D _dnorm
21 0x00001EB5 _dpcomp
22 0x00001ECD _dpoly
23 0x00001EE5 _dscale
24 0x00001EFD _dsign
25 0x00001F13 _dsin
26 0x00001F29 _dtest
27 0x00001F43 _dunscale
28 0x00001F5F _except1
29 0x00001F79 _fd_int
30 0x00001F93 _fdclass
31 0x00001FAC _fdexp
32 0x00001FC3 _fdlog
33 0x00001FDB _fdnorm
34 0x00001FF4 _fdopen
35 0x0000200E _fdpcomp
36 0x00002028 _fdpoly
37 0x00002042 _fdscale
38 0x0000205C _fdsign
39 0x00002074 _fdsin
40 0x0000208C _fdtest
41 0x000020A8 _fdunscale
42 0x000020C4 _finite
43 0x000020DE _finitef
44 0x000020F9 _fpclass
45 0x00002115 _fpclassf
46 0x00002139 _get_FMA3_enable
47 0x0000215A _hypot
48 0x00002172 _hypotf
49 0x0000218A _isnan
50 0x000021A2 _isnanf
51 0x000021B7 _j0
52 0x000021C8 _j1
53 0x000021D9 _jn
54 0x000021EE _ld_int
55 0x00002208 _ldclass
56 0x00002221 _ldexp
57 0x00002238 _ldlog
58 0x00002251 _ldpcomp
59 0x0000226B _ldpoly
60 0x00002285 _ldscale
61 0x0000229F _ldsign
62 0x000022B7 _ldsin
63 0x000022CF _ldtest
64 0x000022EB _ldunscale
65 0x00002305 _logb
66 0x0000231B _logbf
67 0x00002336 _nextafter
68 0x00002356 _nextafterf
69 0x00002372 _scalb
70 0x0000238A _scalbf
71 0x000023AC _set_FMA3_enable
72 0x000023CA _y0
73 0x000023DB _y1
74 0x000023EC _yn
75 0x000023FE acos
76 0x00002412 acosf
77 0x00002427 acosh
78 0x0000243D acoshf
79 0x00002454 acoshl
80 0x00002469 asin
81 0x0000247D asinf
82 0x00002492 asinh
83 0x000024A8 asinhf
84 0x000024BF asinhl
85 0x000024D4 atan
86 0x000024E8 atan2
87 0x000024FE atan2f
88 0x00002514 atanf
89 0x00002529 atanh
90 0x0000253F atanhf
91 0x00002556 atanhl
92 0x0000256B cabs
93 0x0000257F cabsf
94 0x00002594 cabsl
95 0x000025A9 cacos
96 0x000025BF cacosf
97 0x000025D6 cacosh
98 0x000025EE cacoshf
99 0x00002607 cacoshl
100 0x0000261F cacosl
101 0x00002634 carg
102 0x00002648 cargf
103 0x0000265D cargl
104 0x00002672 casin
105 0x00002688 casinf
106 0x0000269F casinh
107 0x000026B7 casinhf
108 0x000026D0 casinhl
109 0x000026E8 casinl
110 0x000026FE catan
111 0x00002714 catanf
112 0x0000272B catanh
113 0x00002743 catanhf
114 0x0000275C catanhl
115 0x00002774 catanl
116 0x00002789 cbrt
117 0x0000279D cbrtf
118 0x000027B2 cbrtl
119 0x000027C6 ccos
120 0x000027DA ccosf
121 0x000027EF ccosh
122 0x00002805 ccoshf
123 0x0000281C ccoshl
124 0x00002832 ccosl
125 0x00002846 ceil
126 0x0000285A ceilf
127 0x0000286E cexp
128 0x00002882 cexpf
129 0x00002897 cexpl
130 0x000028AC cimag
131 0x000028C2 cimagf
132 0x000028D9 cimagl
133 0x000028EE clog
134 0x00002903 clog10
135 0x0000291B clog10f
136 0x00002934 clog10l
137 0x0000294B clogf
138 0x00002960 clogl
139 0x00002974 conj
140 0x00002988 conjf
141 0x0000299D conjl
142 0x000029B5 copysign
143 0x000029D1 copysignf
144 0x000029EE copysignl
145 0x00002A05 cos
146 0x00002A17 cosf
147 0x00002A2A cosh
148 0x00002A3E coshf
149 0x00002A52 cpow
150 0x00002A66 cpowf
151 0x00002A7B cpowl
152 0x00002A90 cproj
153 0x00002AA6 cprojf
154 0x00002ABD cprojl
155 0x00002AD3 creal
156 0x00002AE9 crealf
157 0x00002B00 creall
158 0x00002B15 csin
159 0x00002B29 csinf
160 0x00002B3E csinh
161 0x00002B54 csinhf
162 0x00002B6B csinhl
163 0x00002B81 csinl
164 0x00002B96 csqrt
165 0x00002BAC csqrtf
166 0x00002BC3 csqrtl
167 0x00002BD8 ctan
168 0x00002BEC ctanf
169 0x00002C01 ctanh
170 0x00002C17 ctanhf
171 0x00002C2E ctanhl
172 0x00002C44 ctanl
173 0x00002C57 erf
174 0x00002C69 erfc
175 0x00002C7D erfcf
176 0x00002C92 erfcl
177 0x00002CA6 erff
178 0x00002CB9 erfl
179 0x00002CCB exp
180 0x00002CDD exp2
181 0x00002CF1 exp2f
182 0x00002D06 exp2l
183 0x00002D1A expf
184 0x00002D2E expm1
185 0x00002D44 expm1f
186 0x00002D5B expm1l
187 0x00002D70 fabs
188 0x00002D83 fdim
189 0x00002D97 fdimf
190 0x00002DAC fdiml
191 0x00002DC1 floor
192 0x00002DD7 floorf
193 0x00002DEB fma
194 0x00002DFD fmaf
195 0x00002E10 fmal
196 0x00002E23 fmax
197 0x00002E37 fmaxf
198 0x00002E4C fmaxl
199 0x00002E60 fmin
200 0x00002E74 fminf
201 0x00002E89 fminl
202 0x00002E9D fmod
203 0x00002EB1 fmodf
204 0x00002EC6 frexp
205 0x00002EDB hypot
206 0x00002EF0 ilogb
207 0x00002F06 ilogbf
208 0x00002F1D ilogbl
209 0x00002F33 ldexp
210 0x00002F49 lgamma
211 0x00002F61 lgammaf
212 0x00002F7A lgammal
213 0x00002F92 llrint
214 0x00002FAA llrintf
215 0x00002FC3 llrintl
216 0x00002FDC llround
217 0x00002FF6 llroundf
218 0x00003011 llroundl
219 0x00003027 log
220 0x0000303A log10
221 0x00003050 log10f
222 0x00003066 log1p
223 0x0000307C log1pf
224 0x00003093 log1pl
225 0x000030A8 log2
226 0x000030BC log2f
227 0x000030D1 log2l
228 0x000030E5 logb
229 0x000030F9 logbf
230 0x0000310E logbl
231 0x00003122 logf
232 0x00003136 lrint
233 0x0000314C lrintf
234 0x00003163 lrintl
235 0x0000317A lround
236 0x00003192 lroundf
237 0x000031AB lroundl
238 0x000031C1 modf
239 0x000031D5 modff
240 0x000031E8 nan
241 0x000031FA nanf
242 0x0000320D nanl
243 0x00003225 nearbyint
244 0x00003243 nearbyintf
245 0x00003262 nearbyintl
246 0x00003280 nextafter
247 0x0000329E nextafterf
248 0x000032BD nextafterl
249 0x000032DC nexttoward
250 0x000032FC nexttowardf
251 0x0000331D nexttowardl
252 0x00003337 norm
253 0x0000334B normf
254 0x00003360 norml
255 0x00003373 pow
256 0x00003385 powf
257 0x0000339D remainder
258 0x000033BB remainderf
259 0x000033DA remainderl
260 0x000033F5 remquo
261 0x0000340D remquof
262 0x00003426 remquol
263 0x0000343C rint
264 0x00003450 rintf
265 0x00003465 rintl
266 0x0000347A round
267 0x00003490 roundf
268 0x000034A7 roundl
269 0x000034BF scalbln
270 0x000034D9 scalblnf
271 0x000034F4 scalblnl
272 0x0000350D scalbn
273 0x00003525 scalbnf
274 0x0000353E scalbnl
275 0x00003553 sin