| Windows 10 DLL File Information - KernelBase.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Windows NT BASE API Client DLL |
| File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Medium - 42 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 1,498 KB |
| Total Number of Exported Functions: | 1,720 |
| Total Number of Exported Functions With Names: | 1,720 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 1,374,208 Bytes | 89.5% | Read, Execute | Code |
| .data | 0x00151000 | 4,096 Bytes | 0.3% | Write, Read | Initialized Data |
| .idata | 0x00155000 | 20,992 Bytes | 1.4% | Read | Initialized Data |
| .didat | 0x0015b000 | 1,024 Bytes | 0.1% | Write, Read | Initialized Data |
| .rsrc | 0x0015c000 | 1,536 Bytes | 0.1% | Read | Initialized Data |
| .reloc | 0x0015d000 | 109,568 Bytes | 7.1% | Read, Discardable | Initialized Data |
Static Linking
KernelBase.dll is statically linked to the following files:ntdll.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
This means that when KernelBase.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, KernelBase.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 0 | 0 Bytes | 0.0% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 3 | 906,476 Bytes | 59.1% |
| Total | 3 | 906,476 Bytes | 59.1% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| AccessCheck | AccessCheckAndAuditAlarmW |
| AccessCheckByType | AccessCheckByTypeAndAuditAlarmW |
| AccessCheckByTypeResultList | AccessCheckByTypeResultListAndAuditAlarmByHandleW |
| AccessCheckByTypeResultListAndAuditAlarmW | AcquireSRWLockExclusive |
| AcquireSRWLockShared | AcquireStateLock |
| ActivateActCtx | AddAccessAllowedAce |
| AddAccessAllowedAceEx | AddAccessAllowedObjectAce |
| AddAccessDeniedAce | AddAccessDeniedAceEx |
| AddAccessDeniedObjectAce | AddAce |
| AddAuditAccessAce | AddAuditAccessAceEx |
| AddAuditAccessObjectAce | AddDllDirectory |
| AddMandatoryAce | AddRefActCtx |
| AddResourceAttributeAce | AddSIDToBoundaryDescriptor |
| AddScopedPolicyIDAce | AddVectoredContinueHandler |
| AddVectoredExceptionHandler | AdjustTokenGroups |
| AdjustTokenPrivileges | AllocConsole |
| AllocateAndInitializeSid | AllocateLocallyUniqueId |
| AllocateUserPhysicalPages | AllocateUserPhysicalPagesNuma |
| AppContainerDeriveSidFromMoniker | AppContainerFreeMemory |
| AppContainerLookupDisplayNameMrtReference | AppContainerLookupMoniker |
| AppContainerRegisterSid | AppContainerUnregisterSid |
| AppXFreeMemory | AppXGetApplicationData |
| AppXGetDevelopmentMode | AppXGetOSMaxVersionTested |
| AppXGetOSMinVersion | AppXGetPackageCapabilities |
| AppXGetPackageSid | AppXLookupDisplayName |
| AppXLookupMoniker | AppXPostSuccessExtension |
| AppXPreCreationExtension | AppXReleaseAppXContext |
| AppXUpdatePackageCapabilities | ApplicationUserModelIdFromProductId |
| AreAllAccessesGranted | AreAnyAccessesGranted |
| AreFileApisANSI | AreThereVisibleLogoffScriptsInternal |
| AreThereVisibleShutdownScriptsInternal | AttachConsole |
| BaseCheckAppcompatCache | BaseCheckAppcompatCacheEx |
| BaseCleanupAppcompatCacheSupport | BaseDllFreeResourceId |
| BaseDllMapResourceIdW | BaseDumpAppcompatCache |
| BaseFlushAppcompatCache | BaseFormatObjectAttributes |
| BaseFreeAppCompatDataForProcess | BaseGetNamedObjectDirectory |
| BaseInitAppcompatCacheSupport | BaseIsAppcompatInfrastructureDisabled |
| BaseMarkFileForDelete | BaseReadAppCompatDataForProcess |
| BaseUpdateAppcompatCache | BasepAdjustObjectAttributesForPrivateNamespace |
| BasepCopyFileCallback | BasepCopyFileExW |
| BasepNotifyTrackingService | Beep |
| CLOSE_LOCAL_HANDLE_INTERNAL | CallbackMayRunLong |
| CalloutOnFiberStack | CancelIo |
| CancelIoEx | CancelSynchronousIo |
| CancelThreadpoolIo | CancelWaitableTimer |
| CeipIsOptedIn | ChangeTimerQueueTimer |
| CharLowerA | CharLowerBuffA |
| CharLowerBuffW | CharLowerW |
| CharNextA | CharNextExA |
| CharNextW | CharPrevA |
| CharPrevExA | CharPrevW |
| CharUpperA | CharUpperBuffA |
| CharUpperBuffW | CharUpperW |
| CheckGroupPolicyEnabled | CheckIfStateChangeNotificationExists |
| CheckRemoteDebuggerPresent | CheckTokenCapability |
| CheckTokenMembership | CheckTokenMembershipEx |
| ChrCmpIA | ChrCmpIW |
| ClearCommBreak | ClearCommError |
| CloseGlobalizationUserSettingsKey | CloseHandle |
| ClosePackageInfo | ClosePrivateNamespace |
| CloseState | CloseStateAtom |
| CloseStateChangeNotification | CloseStateContainer |
| CloseStateLock | CloseThreadpool |
| CloseThreadpoolCleanupGroup | CloseThreadpoolCleanupGroupMembers |
| CloseThreadpoolIo | CloseThreadpoolTimer |
| CloseThreadpoolWait | CloseThreadpoolWork |
| CommitStateAtom | CompareFileTime |
| CompareObjectHandles | CompareStringA |
| CompareStringEx | CompareStringOrdinal |
| CompareStringW | ConnectNamedPipe |
| ContinueDebugEvent | ConvertDefaultLocale |
| ConvertFiberToThread | ConvertThreadToFiber |
| ConvertThreadToFiberEx | ConvertToAutoInheritPrivateObjectSecurity |
| CopyContext | CopyFile2 |
| CopyFileExW | CopyFileW |
| CopySid | CreateActCtxW |
| CreateAppContainerToken | CreateBoundaryDescriptorW |
| CreateConsoleScreenBuffer | CreateDirectoryA |
| CreateDirectoryExW | CreateDirectoryW |
| CreateEventA | CreateEventExA |
| CreateEventExW | CreateEventW |
| CreateFiber | CreateFiberEx |
| CreateFile2 | CreateFileA |
| CreateFileMappingFromApp | CreateFileMappingNumaW |
| CreateFileMappingW | CreateFileW |
| CreateHardLinkA | CreateHardLinkW |
| CreateIoCompletionPort | CreateMemoryResourceNotification |
| CreateMutexA | CreateMutexExA |
| CreateMutexExW | CreateMutexW |
| CreateNamedPipeW | CreatePipe |
| CreatePrivateNamespaceW | CreatePrivateObjectSecurity |
| CreatePrivateObjectSecurityEx | CreatePrivateObjectSecurityWithMultipleInheritance |
| CreateProcessA | CreateProcessAsUserA |
| CreateProcessAsUserW | CreateProcessInternalA |
| CreateProcessInternalW | CreateProcessW |
| CreateRemoteThread | CreateRemoteThreadEx |
| CreateRestrictedToken | CreateSemaphoreExW |
| CreateSemaphoreW | CreateStateAtom |
| CreateStateChangeNotification | CreateStateContainer |
| CreateStateLock | CreateStateSubcontainer |
| CreateSymbolicLinkW | CreateThread |
| CreateThreadpool | CreateThreadpoolCleanupGroup |
| CreateThreadpoolIo | CreateThreadpoolTimer |
| CreateThreadpoolWait | CreateThreadpoolWork |
| CreateTimerQueue | CreateTimerQueueTimer |
| CreateWaitableTimerExW | CreateWaitableTimerW |
| CreateWellKnownSid | CtrlRoutine |
| DeactivateActCtx | DebugActiveProcess |
| DebugActiveProcessStop | DebugBreak |
| DecodePointer | DecodeRemotePointer |
| DecodeSystemPointer | DefineDosDeviceW |
| DelayLoadFailureHook | DelayLoadFailureHookLookup |
| DeleteAce | DeleteBoundaryDescriptor |
| DeleteCriticalSection | DeleteFiber |
| DeleteFileA | DeleteFileW |
| DeleteProcThreadAttributeList | DeleteStateAtomValue |
| DeleteStateContainer | DeleteStateContainerValue |
| DeleteSynchronizationBarrier | DeleteTimerQueueEx |
| DeleteTimerQueueTimer | DeleteVolumeMountPointW |
| DestroyPrivateObjectSecurity | DeviceIoControl |
| DisablePredefinedHandleTableInternal | DisableThreadLibraryCalls |
| DisassociateCurrentThreadFromCallback | DiscardVirtualMemory |
| DisconnectNamedPipe | DnsHostnameToComputerNameExW |
| DsBindWithSpnExW | DsCrackNamesW |
| DsFreeDomainControllerInfoW | DsFreeNameResultW |
| DsFreeNgcKey | DsFreePasswordCredentials |
| DsGetDomainControllerInfoW | DsMakePasswordCredentialsW |
| DsReadNgcKeyW | DsUnBindW |
| DsWriteNgcKeyW | DuplicateHandle |
| DuplicateStateContainerHandle | DuplicateToken |
| DuplicateTokenEx | EmptyWorkingSet |
| EncodePointer | EncodeRemotePointer |
| EncodeSystemPointer | EnterCriticalPolicySectionInternal |
| EnterCriticalSection | EnterSynchronizationBarrier |
| EnumCalendarInfoExEx | EnumCalendarInfoExW |
| EnumCalendarInfoW | EnumDateFormatsExEx |
| EnumDateFormatsExW | EnumDateFormatsW |
| EnumDeviceDrivers | EnumDynamicTimeZoneInformation |
| EnumLanguageGroupLocalesW | EnumPageFilesA |
| EnumPageFilesW | EnumProcessModules |
| EnumProcessModulesEx | EnumProcesses |
| EnumResourceLanguagesExA | EnumResourceLanguagesExW |
| EnumResourceNamesExA | EnumResourceNamesExW |
| EnumResourceTypesExA | EnumResourceTypesExW |
| EnumSystemCodePagesW | EnumSystemFirmwareTables |
| EnumSystemGeoID | EnumSystemLanguageGroupsW |
| EnumSystemLocalesA | EnumSystemLocalesEx |
| EnumSystemLocalesW | EnumTimeFormatsEx |
| EnumTimeFormatsW | EnumUILanguagesW |
| EnumerateStateAtomValues | EnumerateStateContainerItems |
| EqualDomainSid | EqualPrefixSid |
| EqualSid | EscapeCommFunction |
| EventActivityIdControl | EventEnabled |
| EventProviderEnabled | EventRegister |
| EventSetInformation | EventUnregister |
| EventWrite | EventWriteEx |
| EventWriteString | EventWriteTransfer |
| ExitProcess | ExitThread |
| ExpandEnvironmentStringsA | ExpandEnvironmentStringsW |
| FatalAppExitA | FatalAppExitW |
| FileTimeToLocalFileTime | FileTimeToSystemTime |
| FillConsoleOutputAttribute | FillConsoleOutputCharacterA |
| FillConsoleOutputCharacterW | FindActCtxSectionGuid |
| FindActCtxSectionStringW | FindClose |
| FindCloseChangeNotification | FindFirstChangeNotificationA |
| FindFirstChangeNotificationW | FindFirstFileA |
| FindFirstFileExA | FindFirstFileExW |
| FindFirstFileNameW | FindFirstFileW |
| FindFirstFreeAce | FindFirstStreamW |
| FindFirstVolumeW | FindNLSString |
| FindNLSStringEx | FindNextChangeNotification |
| FindNextFileA | FindNextFileNameW |
| FindNextFileW | FindNextStreamW |
| FindNextVolumeW | FindPackagesByPackageFamily |
| FindResourceExW | FindResourceW |
| FindStringOrdinal | FindVolumeClose |
| FlsAlloc | FlsFree |
| FlsGetValue | FlsSetValue |
| FlushConsoleInputBuffer | FlushFileBuffers |
| FlushInstructionCache | FlushProcessWriteBuffers |
| FlushViewOfFile | FoldStringW |
| ForceSyncFgPolicyInternal | FormatApplicationUserModelId |
| FormatMessageA | FormatMessageW |
| FreeConsole | FreeEnvironmentStringsA |
| FreeEnvironmentStringsW | FreeGPOListInternalA |
| FreeGPOListInternalW | FreeLibrary |
| FreeLibraryAndExitThread | FreeLibraryWhenCallbackReturns |
| FreeResource | FreeSid |
| FreeUserPhysicalPages | GenerateConsoleCtrlEvent |
| GenerateGPNotificationInternal | GetACP |
| GetAcceptLanguagesA | GetAcceptLanguagesW |
| GetAce | GetAclInformation |
| GetAdjustObjectAttributesForPrivateNamespaceRoutine | GetAlternatePackageRoots |
| GetAppContainerAce | GetAppContainerNamedObjectPath |
| GetAppDataFolder | GetAppModelVersion |
| GetApplicationRecoveryCallback | GetApplicationRestartSettings |
| GetApplicationUserModelId | GetApplicationUserModelIdFromToken |
| GetAppliedGPOListInternalA | GetAppliedGPOListInternalW |
| GetCPFileNameFromRegistry | GetCPHashNode |
| GetCPInfo | GetCPInfoExW |
| GetCachedSigningLevel | GetCalendar |
| GetCalendarInfoEx | GetCalendarInfoW |
| GetCommConfig | GetCommMask |
| GetCommModemStatus | GetCommProperties |
| GetCommState | GetCommTimeouts |
| GetCommandLineA | GetCommandLineW |
| GetCompressedFileSizeA | GetCompressedFileSizeW |
| GetComputerNameExA | GetComputerNameExW |
| GetConsoleCP | GetConsoleCursorInfo |
| GetConsoleInputExeNameA | GetConsoleInputExeNameW |
| GetConsoleMode | GetConsoleOutputCP |
| GetConsoleScreenBufferInfo | GetConsoleScreenBufferInfoEx |
| GetConsoleTitleW | GetCurrencyFormatEx |
| GetCurrencyFormatW | GetCurrentActCtx |
| GetCurrentApplicationUserModelId | GetCurrentDirectoryA |
| GetCurrentDirectoryW | GetCurrentPackageApplicationContext |
| GetCurrentPackageApplicationResourcesContext | GetCurrentPackageContext |
| GetCurrentPackageFamilyName | GetCurrentPackageFullName |
| GetCurrentPackageId | GetCurrentPackageInfo |
| GetCurrentPackagePath | GetCurrentPackageResourcesContext |
| GetCurrentPackageSecurityContext | GetCurrentProcess |
| GetCurrentProcessId | GetCurrentProcessorNumber |
| GetCurrentProcessorNumberEx | GetCurrentTargetPlatformContext |
| GetCurrentThread | GetCurrentThreadId |
| GetCurrentThreadStackLimits | GetDateFormatA |
| GetDateFormatEx | GetDateFormatW |
| GetDeviceDriverBaseNameA | GetDeviceDriverBaseNameW |
| GetDeviceDriverFileNameA | GetDeviceDriverFileNameW |
| GetDiskFreeSpaceA | GetDiskFreeSpaceExA |
| GetDiskFreeSpaceExW | GetDiskFreeSpaceW |
| GetDriveTypeA | GetDriveTypeW |
| GetDurationFormatEx | GetDynamicTimeZoneInformation |
| GetDynamicTimeZoneInformationEffectiveYears | GetEffectivePackageStatusForUser |
| GetEightBitStringToUnicodeSizeRoutine | GetEightBitStringToUnicodeStringRoutine |
| GetEnabledXStateFeatures | GetEnvironmentStrings |
| GetEnvironmentStringsA | GetEnvironmentStringsW |
| GetEnvironmentVariableA | GetEnvironmentVariableW |
| GetEraNameCountedString | GetErrorMode |
| GetExitCodeProcess | GetExitCodeThread |
| GetFallbackDisplayName | GetFileAttributesA |
| GetFileAttributesExA | GetFileAttributesExW |
| GetFileAttributesW | GetFileInformationByHandle |
| GetFileInformationByHandleEx | GetFileMUIInfo |
| GetFileMUIPath | GetFileSecurityW |
| GetFileSize | GetFileSizeEx |
| GetFileTime | GetFileType |
| GetFileVersionInfoA | GetFileVersionInfoByHandle |
| GetFileVersionInfoExA | GetFileVersionInfoExW |
| GetFileVersionInfoSizeA | GetFileVersionInfoSizeExA |
| GetFileVersionInfoSizeExW | GetFileVersionInfoSizeW |
| GetFileVersionInfoW | GetFinalPathNameByHandleA |
| GetFinalPathNameByHandleW | GetFullPathNameA |
| GetFullPathNameW | GetGPOListInternalA |
| GetGPOListInternalW | GetGeoInfoW |
| GetHandleInformation | GetHivePath |
| GetIntegratedDisplaySize | GetKernelObjectSecurity |
| GetLargePageMinimum | GetLargestConsoleWindowSize |
| GetLastError | GetLengthSid |
| GetLocalTime | GetLocaleInfoA |
| GetLocaleInfoEx | GetLocaleInfoHelper |
| GetLocaleInfoW | GetLogicalDriveStringsW |
| GetLogicalDrives | GetLogicalProcessorInformation |
| GetLogicalProcessorInformationEx | GetLongPathNameA |
| GetLongPathNameW | GetMappedFileNameA |
| GetMappedFileNameW | GetMemoryErrorHandlingCapabilities |
| GetModuleBaseNameA | GetModuleBaseNameW |
| GetModuleFileNameA | GetModuleFileNameExA |
| GetModuleFileNameExW | GetModuleFileNameW |
| GetModuleHandleA | GetModuleHandleExA |
| GetModuleHandleExW | GetModuleHandleW |
| GetModuleInformation | GetNLSVersion |
| GetNLSVersionEx | GetNamedLocaleHashNode |
| GetNamedPipeAttribute | GetNamedPipeClientComputerNameW |
| GetNamedPipeHandleStateW | GetNamedPipeInfo |
| GetNativeSystemInfo | GetNextFgPolicyRefreshInfoInternal |
| GetNumaHighestNodeNumber | GetNumaNodeProcessorMaskEx |
| GetNumberFormatEx | GetNumberFormatW |
| GetNumberOfConsoleInputEvents | GetOEMCP |
| GetOsManufacturingMode | GetOsSafeBootMode |
| GetOverlappedResult | GetOverlappedResultEx |
| GetPackageApplicationContext | GetPackageApplicationIds |
| GetPackageApplicationProperty | GetPackageApplicationPropertyString |
| GetPackageApplicationResourcesContext | GetPackageContext |
| GetPackageFamilyName | GetPackageFamilyNameFromToken |
| GetPackageFullName | GetPackageFullNameFromToken |
| GetPackageId | GetPackageInfo |
| GetPackageInstallTime | GetPackageOSMaxVersionTested |
| GetPackagePath | GetPackagePathByFullName |
| GetPackagePathOnVolume | GetPackageProperty |
| GetPackagePropertyString | GetPackageResourcesContext |
| GetPackageResourcesProperty | GetPackageSecurityContext |
| GetPackageSecurityProperty | GetPackageStatus |
| GetPackageStatusForUser | GetPackageTargetPlatformProperty |
| GetPackageVolumeSisPath | GetPackagesByPackageFamily |
| GetPerformanceInfo | GetPhysicallyInstalledSystemMemory |
| GetPreviousFgPolicyRefreshInfoInternal | GetPriorityClass |
| GetPrivateObjectSecurity | GetProcAddress |
| GetProcAddressForCaller | GetProcessDefaultCpuSets |
| GetProcessGroupAffinity | GetProcessHandleCount |
| GetProcessHeap | GetProcessHeaps |
| GetProcessId | GetProcessIdOfThread |
| GetProcessImageFileNameA | GetProcessImageFileNameW |
| GetProcessInformation | GetProcessMemoryInfo |
| GetProcessMitigationPolicy | GetProcessPreferredUILanguages |
| GetProcessPriorityBoost | GetProcessShutdownParameters |
| GetProcessTimes | GetProcessVersion |
| GetProcessWorkingSetSizeEx | GetProcessorSystemCycleTime |
| GetProductInfo | GetPtrCalData |
| GetPtrCalDataArray | GetPublisherCacheFolder |
| GetPublisherRootFolder | GetQueuedCompletionStatus |
| GetQueuedCompletionStatusEx | GetRegistryExtensionFlags |
| GetRoamingLastObservedChangeTime | GetSecurityDescriptorControl |
| GetSecurityDescriptorDacl | GetSecurityDescriptorGroup |
| GetSecurityDescriptorLength | GetSecurityDescriptorOwner |
| GetSecurityDescriptorRMControl | GetSecurityDescriptorSacl |
| GetSerializedAtomBytes | GetSharedLocalFolder |
| GetShortPathNameW | GetSidIdentifierAuthority |
| GetSidLengthRequired | GetSidSubAuthority |
| GetSidSubAuthorityCount | GetStagedPackageOrigin |
| GetStagedPackagePathByFullName | GetStartupInfoW |
| GetStateContainerDepth | GetStateFolder |
| GetStateRootFolder | GetStateRootFolderBase |
| GetStateSettingsFolder | GetStateVersion |
| GetStdHandle | GetStringScripts |
| GetStringTableEntry | GetStringTypeA |
| GetStringTypeExW | GetStringTypeW |
| GetSystemAppDataFolder | GetSystemAppDataKey |
| GetSystemCpuSetInformation | GetSystemDefaultLCID |
| GetSystemDefaultLangID | GetSystemDefaultLocaleName |
| GetSystemDefaultUILanguage | GetSystemDirectoryA |
| GetSystemDirectoryW | GetSystemFileCacheSize |
| GetSystemFirmwareTable | GetSystemInfo |
| GetSystemMetadataPath | GetSystemMetadataPathForPackage |
| GetSystemMetadataPathForPackageFamily | GetSystemPreferredUILanguages |
| GetSystemStateRootFolder | GetSystemTime |
| GetSystemTimeAdjustment | GetSystemTimeAsFileTime |
| GetSystemTimePreciseAsFileTime | GetSystemTimes |
| GetSystemWindowsDirectoryA | GetSystemWindowsDirectoryW |
| GetSystemWow64DirectoryA | GetSystemWow64DirectoryW |
| GetTargetPlatformContext | GetTempFileNameA |
| GetTempFileNameW | GetTempPathA |
| GetTempPathW | GetThreadContext |
| GetThreadErrorMode | GetThreadGroupAffinity |
| GetThreadIOPendingFlag | GetThreadId |
| GetThreadIdealProcessorEx | GetThreadInformation |
| GetThreadLocale | GetThreadPreferredUILanguages |
| GetThreadPriority | GetThreadPriorityBoost |
| GetThreadSelectedCpuSets | GetThreadTimes |
| GetThreadUILanguage | GetTickCount |
| GetTickCount64 | GetTimeFormatA |
| GetTimeFormatEx | GetTimeFormatW |
| GetTimeZoneInformation | GetTimeZoneInformationForYear |
| GetTokenInformation | GetTraceEnableFlags |
| GetTraceEnableLevel | GetTraceLoggerHandle |
| GetUILanguageInfo | GetUnicodeStringToEightBitSizeRoutine |
| GetUnicodeStringToEightBitStringRoutine | GetUserDefaultLCID |
| GetUserDefaultLangID | GetUserDefaultLocaleName |
| GetUserDefaultUILanguage | GetUserGeoID |
| GetUserInfo | GetUserInfoWord |
| GetUserOverrideString | GetUserOverrideWord |
| GetUserPreferredUILanguages | GetVersion |
| GetVersionExA | GetVersionExW |
| GetVolumeInformationA | GetVolumeInformationByHandleW |
| GetVolumeInformationW | GetVolumeNameForVolumeMountPointW |
| GetVolumePathNameW | GetVolumePathNamesForVolumeNameW |
| GetWindowsAccountDomainSid | GetWindowsDirectoryA |
| GetWindowsDirectoryW | GetWriteWatch |
| GetWsChanges | GetWsChangesEx |
| GetXStateFeaturesMask | GlobalAlloc |
| GlobalFree | GlobalMemoryStatusEx |
| HasPolicyForegroundProcessingCompletedInternal | HashData |
| HeapAlloc | HeapCompact |
| HeapCreate | HeapDestroy |
| HeapFree | HeapLock |
| HeapQueryInformation | HeapReAlloc |
| HeapSetInformation | HeapSize |
| HeapSummary | HeapUnlock |
| HeapValidate | HeapWalk |
| IdnToAscii | IdnToNameprepUnicode |
| IdnToUnicode | ImpersonateAnonymousToken |
| ImpersonateLoggedOnUser | ImpersonateNamedPipeClient |
| ImpersonateSelf | IncrementPackageStatusVersion |
| InitOnceBeginInitialize | InitOnceComplete |
| InitOnceExecuteOnce | InitOnceInitialize |
| InitializeAcl | InitializeConditionVariable |
| InitializeContext | InitializeCriticalSection |
| InitializeCriticalSectionAndSpinCount | InitializeCriticalSectionEx |
| InitializeProcThreadAttributeList | InitializeProcessForWsWatch |
| InitializeSListHead | InitializeSRWLock |
| InitializeSecurityDescriptor | InitializeSid |
| InitializeSynchronizationBarrier | InstallELAMCertificateInfo |
| InterlockedCompareExchange | InterlockedCompareExchange64 |
| InterlockedDecrement | InterlockedExchange |
| InterlockedExchangeAdd | InterlockedFlushSList |
| InterlockedIncrement | InterlockedPopEntrySList |
| InterlockedPushEntrySList | InterlockedPushListSList |
| InterlockedPushListSListEx | InternalLcidToName |
| Internal_EnumCalendarInfo | Internal_EnumDateFormats |
| Internal_EnumLanguageGroupLocales | Internal_EnumSystemCodePages |
| Internal_EnumSystemLanguageGroups | Internal_EnumSystemLocales |
| Internal_EnumTimeFormats | Internal_EnumUILanguages |
| InternetTimeFromSystemTimeA | InternetTimeFromSystemTimeW |
| InternetTimeToSystemTimeA | InternetTimeToSystemTimeW |
| InvalidateAppModelVersionCache | IsCharAlphaA |
| IsCharAlphaNumericA | IsCharAlphaNumericW |
| IsCharAlphaW | IsCharBlankW |
| IsCharCntrlW | IsCharDigitW |
| IsCharLowerA | IsCharLowerW |
| IsCharPunctW | IsCharSpaceA |
| IsCharSpaceW | IsCharUpperA |
| IsCharUpperW | IsCharXDigitW |
| IsDBCSLeadByte | IsDBCSLeadByteEx |
| IsDebuggerPresent | IsDeveloperModeEnabled |
| IsInternetESCEnabled | IsNLSDefinedString |
| IsNormalizedString | IsProcessCritical |
| IsProcessInJob | IsProcessorFeaturePresent |
| IsSideloadingEnabled | IsSyncForegroundPolicyRefresh |
| IsThreadAFiber | IsThreadpoolTimerSet |
| IsTimeZoneRedirectionEnabled | IsTokenRestricted |
| IsValidAcl | IsValidCodePage |
| IsValidLanguageGroup | IsValidLocale |
| IsValidLocaleName | IsValidNLSVersion |
| IsValidRelativeSecurityDescriptor | IsValidSecurityDescriptor |
| IsValidSid | IsWellKnownSid |
| IsWow64Process | K32EmptyWorkingSet |
| K32EnumDeviceDrivers | K32EnumPageFilesA |
| K32EnumPageFilesW | K32EnumProcessModules |
| K32EnumProcessModulesEx | K32EnumProcesses |
| K32GetDeviceDriverBaseNameA | K32GetDeviceDriverBaseNameW |
| K32GetDeviceDriverFileNameA | K32GetDeviceDriverFileNameW |
| K32GetMappedFileNameA | K32GetMappedFileNameW |
| K32GetModuleBaseNameA | K32GetModuleBaseNameW |
| K32GetModuleFileNameExA | K32GetModuleFileNameExW |
| K32GetModuleInformation | K32GetPerformanceInfo |
| K32GetProcessImageFileNameA | K32GetProcessImageFileNameW |
| K32GetProcessMemoryInfo | K32GetWsChanges |
| K32GetWsChangesEx | K32InitializeProcessForWsWatch |
| K32QueryWorkingSet | K32QueryWorkingSetEx |
| KernelBaseGetGlobalData | LCIDToLocaleName |
| LCMapStringA | LCMapStringEx |
| LCMapStringW | LeaveCriticalPolicySectionInternal |
| LeaveCriticalSection | LeaveCriticalSectionWhenCallbackReturns |
| LoadAppInitDlls | LoadLibraryA |
| LoadLibraryExA | LoadLibraryExW |
| LoadLibraryW | LoadPackagedLibrary |
| LoadResource | LoadStringA |
| LoadStringBaseExW | LoadStringByReference |
| LoadStringW | LocalAlloc |
| LocalFileTimeToFileTime | LocalFree |
| LocalLock | LocalReAlloc |
| LocalUnlock | LocaleNameToLCID |
| LocateXStateFeature | LockFile |
| LockFileEx | LockResource |
| MakeAbsoluteSD | MakeAbsoluteSD2 |
| MakeSelfRelativeSD | MapGenericMask |
| MapPredefinedHandleInternal | MapUserPhysicalPages |
| MapViewOfFile | MapViewOfFileEx |
| MapViewOfFileExNuma | MapViewOfFileFromApp |
| MoveFileExW | MoveFileWithProgressTransactedW |
| MoveFileWithProgressW | MulDiv |
| MultiByteToWideChar | NamedPipeEventEnum |
| NamedPipeEventSelect | NeedCurrentDirectoryForExePathA |
| NeedCurrentDirectoryForExePathW | NlsCheckPolicy |
| NlsDispatchAnsiEnumProc | NlsEventDataDescCreate |
| NlsGetACPFromLocale | NlsGetCacheUpdateCount |
| NlsIsUserDefaultLocale | NlsUpdateLocale |
| NlsUpdateSystemLocale | NlsValidateLocale |
| NlsWriteEtwEvent | NormalizeString |
| NotifyMountMgr | NotifyRedirectedStringChange |
| ObjectCloseAuditAlarmW | ObjectDeleteAuditAlarmW |
| ObjectOpenAuditAlarmW | ObjectPrivilegeAuditAlarmW |
| OfferVirtualMemory | OpenEventA |
| OpenEventW | OpenFileById |
| OpenFileMappingFromApp | OpenFileMappingW |
| OpenGlobalizationUserSettingsKey | OpenMutexW |
| OpenPackageInfoByFullName | OpenPackageInfoByFullNameForUser |
| OpenPrivateNamespaceW | OpenProcess |
| OpenProcessToken | OpenRegKey |
| OpenSemaphoreW | OpenState |
| OpenStateAtom | OpenStateExplicit |
| OpenStateExplicitForUserSid | OpenStateExplicitForUserSidString |
| OpenThread | OpenThreadToken |
| OpenWaitableTimerW | OutputDebugStringA |
| OutputDebugStringW | OverrideRoamingDataModificationTimesInRange |
| PackageFamilyNameFromFullName | PackageFamilyNameFromId |
| PackageFamilyNameFromProductId | PackageFullNameFromId |
| PackageFullNameFromProductId | PackageIdFromFullName |
| PackageIdFromProductId | PackageNameAndPublisherIdFromFamilyName |
| PackageRelativeApplicationIdFromProductId | PackageSidFromFamilyName |
| ParseApplicationUserModelId | ParseURLA |
| ParseURLW | PathAddBackslashA |
| PathAddBackslashW | PathAddExtensionA |
| PathAddExtensionW | PathAllocCanonicalize |
| PathAllocCombine | PathAppendA |
| PathAppendW | PathCanonicalizeA |
| PathCanonicalizeW | PathCchAddBackslash |
| PathCchAddBackslashEx | PathCchAddExtension |
| PathCchAppend | PathCchAppendEx |
| PathCchCanonicalize | PathCchCanonicalizeEx |
| PathCchCombine | PathCchCombineEx |
| PathCchFindExtension | PathCchIsRoot |
| PathCchRemoveBackslash | PathCchRemoveBackslashEx |
| PathCchRemoveExtension | PathCchRemoveFileSpec |
| PathCchRenameExtension | PathCchSkipRoot |
| PathCchStripPrefix | PathCchStripToRoot |
| PathCombineA | PathCombineW |
| PathCommonPrefixA | PathCommonPrefixW |
| PathCreateFromUrlA | PathCreateFromUrlAlloc |
| PathCreateFromUrlW | PathFileExistsA |
| PathFileExistsW | PathFindExtensionA |
| PathFindExtensionW | PathFindFileNameA |
| PathFindFileNameW | PathFindNextComponentA |
| PathFindNextComponentW | PathGetArgsA |
| PathGetArgsW | PathGetCharTypeA |
| PathGetCharTypeW | PathGetDriveNumberA |
| PathGetDriveNumberW | PathIsFileSpecA |
| PathIsFileSpecW | PathIsLFNFileSpecA |
| PathIsLFNFileSpecW | PathIsPrefixA |
| PathIsPrefixW | PathIsRelativeA |
| PathIsRelativeW | PathIsRootA |
| PathIsRootW | PathIsSameRootA |
| PathIsSameRootW | PathIsUNCA |
| PathIsUNCEx | PathIsUNCServerA |
| PathIsUNCServerShareA | PathIsUNCServerShareW |
| PathIsUNCServerW | PathIsUNCW |
| PathIsURLA | PathIsURLW |
| PathIsValidCharA | PathIsValidCharW |
| PathMatchSpecA | PathMatchSpecExA |
| PathMatchSpecExW | PathMatchSpecW |
| PathParseIconLocationA | PathParseIconLocationW |
| PathQuoteSpacesA | PathQuoteSpacesW |
| PathRelativePathToA | PathRelativePathToW |
| PathRemoveBackslashA | PathRemoveBackslashW |
| PathRemoveBlanksA | PathRemoveBlanksW |
| PathRemoveExtensionA | PathRemoveExtensionW |
| PathRemoveFileSpecA | PathRemoveFileSpecW |
| PathRenameExtensionA | PathRenameExtensionW |
| PathSearchAndQualifyA | PathSearchAndQualifyW |
| PathSkipRootA | PathSkipRootW |
| PathStripPathA | PathStripPathW |
| PathStripToRootA | PathStripToRootW |
| PathUnExpandEnvStringsA | PathUnExpandEnvStringsW |
| PathUnquoteSpacesA | PathUnquoteSpacesW |
| PcwAddQueryItem | PcwClearCounterSetSecurity |
| PcwCollectData | PcwCompleteNotification |
| PcwCreateNotifier | PcwCreateQuery |
| PcwDisconnectCounterSet | PcwEnumerateInstances |
| PcwIsNotifierAlive | PcwQueryCounterSetSecurity |
| PcwReadNotificationData | PcwRegisterCounterSet |
| PcwRemoveQueryItem | PcwSendNotification |
| PcwSendStatelessNotification | PcwSetCounterSetSecurity |
| PcwSetQueryItemUserData | PeekConsoleInputA |
| PeekConsoleInputW | PeekNamedPipe |
| PerfCreateInstance | PerfDecrementULongCounterValue |
| PerfDecrementULongLongCounterValue | PerfDeleteInstance |
| PerfIncrementULongCounterValue | PerfIncrementULongLongCounterValue |
| PerfQueryInstance | PerfSetCounterRefValue |
| PerfSetCounterSetInfo | PerfSetULongCounterValue |
| PerfSetULongLongCounterValue | PerfStartProvider |
| PerfStartProviderEx | PerfStopProvider |
| PoolPerAppKeyStateInternal | PostQueuedCompletionStatus |
| PrefetchVirtualMemory | PrivCopyFileExW |
| PrivilegeCheck | PrivilegedServiceAuditAlarmW |
| ProcessIdToSessionId | ProductIdFromPackageFamilyName |
| PsmCreateKey | PsmCreateKeyWithDynamicId |
| PsmEqualApplication | PsmEqualPackage |
| PsmGetApplicationNameFromKey | PsmGetKeyFromProcess |
| PsmGetKeyFromToken | PsmGetPackageFullNameFromKey |
| PsmIsChildKey | PsmIsDynamicKey |
| PsmIsValidKey | PssCaptureSnapshot |
| PssDuplicateSnapshot | PssFreeSnapshot |
| PssQuerySnapshot | PssWalkMarkerCreate |
| PssWalkMarkerFree | PssWalkMarkerGetPosition |
| PssWalkMarkerSeekToBeginning | PssWalkMarkerSetPosition |
| PssWalkSnapshot | PublishStateChangeNotification |
| PulseEvent | PurgeComm |
| QISearch | QueryActCtxSettingsW |
| QueryActCtxW | QueryDepthSList |
| QueryDosDeviceW | QueryFullProcessImageNameA |
| QueryFullProcessImageNameW | QueryIdleProcessorCycleTime |
| QueryIdleProcessorCycleTimeEx | QueryInterruptTime |
| QueryInterruptTimePrecise | QueryMemoryResourceNotification |
| QueryOptionalDelayLoadedAPI | QueryPerformanceCounter |
| QueryPerformanceFrequency | QueryProcessAffinityUpdateMode |
| QueryProcessCycleTime | QueryProtectedPolicy |
| QuerySecurityAccessMask | QueryStateAtomValueInfo |
| QueryStateContainerItemInfo | QueryThreadCycleTime |
| QueryThreadpoolStackInformation | QueryUnbiasedInterruptTime |
| QueryUnbiasedInterruptTimePrecise | QueryWorkingSet |
| QueryWorkingSetEx | QueueUserAPC |
| QueueUserWorkItem | QuirkGetData |
| QuirkGetData2 | QuirkIsEnabled |
| QuirkIsEnabled2 | QuirkIsEnabled3 |
| QuirkIsEnabledForPackage | QuirkIsEnabledForPackage2 |
| QuirkIsEnabledForPackage3 | QuirkIsEnabledForPackage4 |
| QuirkIsEnabledForProcess | RaiseException |
| RaiseFailFastException | ReOpenFile |
| ReadConsoleA | ReadConsoleInputA |
| ReadConsoleInputExA | ReadConsoleInputExW |
| ReadConsoleInputW | ReadConsoleOutputA |
| ReadConsoleOutputAttribute | ReadConsoleOutputCharacterA |
| ReadConsoleOutputCharacterW | ReadConsoleOutputW |
| ReadConsoleW | ReadDirectoryChangesW |
| ReadFile | ReadFileEx |
| ReadFileScatter | ReadProcessMemory |
| ReadStateAtomValue | ReadStateContainerValue |
| ReclaimVirtualMemory | RefreshPolicyExInternal |
| RefreshPolicyInternal | RegCloseKey |
| RegCopyTreeW | RegCreateKeyExA |
| RegCreateKeyExInternalA | RegCreateKeyExInternalW |
| RegCreateKeyExW | RegDeleteKeyExA |
| RegDeleteKeyExInternalA | RegDeleteKeyExInternalW |
| RegDeleteKeyExW | RegDeleteKeyValueA |
| RegDeleteKeyValueW | RegDeleteTreeA |
| RegDeleteTreeW | RegDeleteValueA |
| RegDeleteValueW | RegDisablePredefinedCacheEx |
| RegEnumKeyExA | RegEnumKeyExW |
| RegEnumValueA | RegEnumValueW |
| RegFlushKey | RegGetKeySecurity |
| RegGetValueA | RegGetValueW |
| RegKrnGetAppKeyEventAddressInternal | RegKrnGetAppKeyLoaded |
| RegKrnGetClassesEnumTableAddressInternal | RegKrnGetHKEY_ClassesRootAddress |
| RegKrnGetTermsrvRegistryExtensionFlags | RegKrnResetAppKeyLoaded |
| RegKrnSetDllHasThreadStateGlobal | RegKrnSetTermsrvRegistryExtensionFlags |
| RegLoadAppKeyA | RegLoadAppKeyW |
| RegLoadKeyA | RegLoadKeyW |
| RegLoadMUIStringA | RegLoadMUIStringW |
| RegNotifyChangeKeyValue | RegOpenCurrentUser |
| RegOpenKeyExA | RegOpenKeyExInternalA |
| RegOpenKeyExInternalW | RegOpenKeyExW |
| RegOpenUserClassesRoot | RegQueryInfoKeyA |
| RegQueryInfoKeyW | RegQueryValueExA |
| RegQueryValueExW | RegRestoreKeyA |
| RegRestoreKeyW | RegSaveKeyExA |
| RegSaveKeyExW | RegSetKeySecurity |
| RegSetKeyValueA | RegSetKeyValueW |
| RegSetValueExA | RegSetValueExW |
| RegUnLoadKeyA | RegUnLoadKeyW |
| RegisterBadMemoryNotification | RegisterGPNotificationInternal |
| RegisterStateChangeNotification | RegisterStateLock |
| RegisterTraceGuidsW | RegisterWaitForSingleObjectEx |
| ReleaseActCtx | ReleaseMutex |
| ReleaseMutexWhenCallbackReturns | ReleaseSRWLockExclusive |
| ReleaseSRWLockShared | ReleaseSemaphore |
| ReleaseSemaphoreWhenCallbackReturns | ReleaseStateLock |
| RemapPredefinedHandleInternal | RemoveDirectoryA |
| RemoveDirectoryW | RemoveDllDirectory |
| RemovePackageStatus | RemovePackageStatusForUser |
| RemoveVectoredContinueHandler | RemoveVectoredExceptionHandler |
| ReplaceFileExInternal | ReplaceFileW |
| ResetEvent | ResetState |
| ResetWriteWatch | ResolveDelayLoadedAPI |
| ResolveDelayLoadsFromDll | ResolveLocaleName |
| RestoreLastError | ResumeThread |
| RevertToSelf | RsopLoggingEnabledInternal |
| SHCoCreateInstance | SHExpandEnvironmentStringsA |
| SHExpandEnvironmentStringsW | SHLoadIndirectString |
| SHLoadIndirectStringInternal | SHRegCloseUSKey |
| SHRegCreateUSKeyA | SHRegCreateUSKeyW |
| SHRegDeleteEmptyUSKeyA | SHRegDeleteEmptyUSKeyW |
| SHRegDeleteUSValueA | SHRegDeleteUSValueW |
| SHRegEnumUSKeyA | SHRegEnumUSKeyW |
| SHRegEnumUSValueA | SHRegEnumUSValueW |
| SHRegGetBoolUSValueA | SHRegGetBoolUSValueW |
| SHRegGetUSValueA | SHRegGetUSValueW |
| SHRegOpenUSKeyA | SHRegOpenUSKeyW |
| SHRegQueryInfoUSKeyA | SHRegQueryInfoUSKeyW |
| SHRegQueryUSValueA | SHRegQueryUSValueW |
| SHRegSetUSValueA | SHRegSetUSValueW |
| SHRegWriteUSValueA | SHRegWriteUSValueW |
| SHTruncateString | SaveAlternatePackageRootPath |
| SaveStateRootFolderPath | ScrollConsoleScreenBufferA |
| ScrollConsoleScreenBufferW | SearchPathA |
| SearchPathW | SetAclInformation |
| SetCachedSigningLevel | SetCalendarInfoW |
| SetClientDynamicTimeZoneInformation | SetClientTimeZoneInformation |
| SetCommBreak | SetCommConfig |
| SetCommMask | SetCommState |
| SetCommTimeouts | SetComputerNameA |
| SetComputerNameEx2W | SetComputerNameExA |
| SetComputerNameExW | SetComputerNameW |
| SetConsoleActiveScreenBuffer | SetConsoleCP |
| SetConsoleCtrlHandler | SetConsoleCursorInfo |
| SetConsoleCursorPosition | SetConsoleInputExeNameA |
| SetConsoleInputExeNameW | SetConsoleMode |
| SetConsoleOutputCP | SetConsoleScreenBufferInfoEx |
| SetConsoleScreenBufferSize | SetConsoleTextAttribute |
| SetConsoleTitleW | SetConsoleWindowInfo |
| SetCriticalSectionSpinCount | SetCurrentDirectoryA |
| SetCurrentDirectoryW | SetDefaultDllDirectories |
| SetDynamicTimeZoneInformation | SetEndOfFile |
| SetEnvironmentStringsW | SetEnvironmentVariableA |
| SetEnvironmentVariableW | SetErrorMode |
| SetEvent | SetEventWhenCallbackReturns |
| SetFileApisToANSI | SetFileApisToOEM |
| SetFileAttributesA | SetFileAttributesW |
| SetFileInformationByHandle | SetFileIoOverlappedRange |
| SetFilePointer | SetFilePointerEx |
| SetFileSecurityW | SetFileTime |
| SetFileValidData | SetHandleCount |
| SetHandleInformation | SetIsDeveloperModeEnabled |
| SetIsSideloadingEnabled | SetKernelObjectSecurity |
| SetLastConsoleEventActive | SetLastError |
| SetLocalTime | SetLocaleInfoW |
| SetNamedPipeHandleState | SetPriorityClass |
| SetPrivateObjectSecurity | SetPrivateObjectSecurityEx |
| SetProcessAffinityUpdateMode | SetProcessDefaultCpuSets |
| SetProcessGroupAffinity | SetProcessInformation |
| SetProcessMitigationPolicy | SetProcessPreferredUILanguages |
| SetProcessPriorityBoost | SetProcessShutdownParameters |
| SetProcessValidCallTargets | SetProcessWorkingSetSizeEx |
| SetProtectedPolicy | SetRoamingLastObservedChangeTime |
| SetSecurityAccessMask | SetSecurityDescriptorControl |
| SetSecurityDescriptorDacl | SetSecurityDescriptorGroup |
| SetSecurityDescriptorOwner | SetSecurityDescriptorRMControl |
| SetSecurityDescriptorSacl | SetStateVersion |
| SetStdHandle | SetStdHandleEx |
| SetSystemFileCacheSize | SetSystemTime |
| SetSystemTimeAdjustment | SetThreadContext |
| SetThreadErrorMode | SetThreadGroupAffinity |
| SetThreadIdealProcessor | SetThreadIdealProcessorEx |
| SetThreadInformation | SetThreadLocale |
| SetThreadPreferredUILanguages | SetThreadPriority |
| SetThreadPriorityBoost | SetThreadSelectedCpuSets |
| SetThreadStackGuarantee | SetThreadToken |
| SetThreadUILanguage | SetThreadpoolStackInformation |
| SetThreadpoolThreadMaximum | SetThreadpoolThreadMinimum |
| SetThreadpoolTimer | SetThreadpoolTimerEx |
| SetThreadpoolWait | SetThreadpoolWaitEx |
| SetTimeZoneInformation | SetTokenInformation |
| SetUnhandledExceptionFilter | SetUserGeoID |
| SetWaitableTimer | SetWaitableTimerEx |
| SetXStateFeaturesMask | SetupComm |
| SharedLocalIsEnabled | SignalObjectAndWait |
| SizeofResource | Sleep |
| SleepConditionVariableCS | SleepConditionVariableSRW |
| SleepEx | SpecialMBToWC |
| StartThreadpoolIo | StmAlignSize |
| StmAllocateFlat | StmCoalesceChunks |
| StmDeinitialize | StmInitialize |
| StmReduceSize | StmReserve |
| StmWrite | StrCSpnA |
| StrCSpnIA | StrCSpnIW |
| StrCSpnW | StrCatBuffA |
| StrCatBuffW | StrCatChainW |
| StrChrA | StrChrA_MB |
| StrChrIA | StrChrIW |
| StrChrNIW | StrChrNW |
| StrChrW | StrCmpCA |
| StrCmpCW | StrCmpICA |
| StrCmpICW | StrCmpIW |
| StrCmpLogicalW | StrCmpNA |
| StrCmpNCA | StrCmpNCW |
| StrCmpNIA | StrCmpNICA |
| StrCmpNICW | StrCmpNIW |
| StrCmpNW | StrCmpW |
| StrCpyNW | StrCpyNXA |
| StrCpyNXW | StrDupA |
| StrDupW | StrIsIntlEqualA |
| StrIsIntlEqualW | StrPBrkA |
| StrPBrkW | StrRChrA |
| StrRChrIA | StrRChrIW |
| StrRChrW | StrRStrIA |
| StrRStrIW | StrSpnA |
| StrSpnW | StrStrA |
| StrStrIA | StrStrIW |
| StrStrNIW | StrStrNW |
| StrStrW | StrToInt64ExA |
| StrToInt64ExW | StrToIntA |
| StrToIntExA | StrToIntExW |
| StrToIntW | StrTrimA |
| StrTrimW | SubmitThreadpoolWork |
| SubscribeStateChangeNotification | SuspendThread |
| SwitchToFiber | SwitchToThread |
| SystemTimeToFileTime | SystemTimeToTzSpecificLocalTime |
| SystemTimeToTzSpecificLocalTimeEx | TerminateProcess |
| TerminateProcessOnMemoryExhaustion | TerminateThread |
| TlsAlloc | TlsFree |
| TlsGetValue | TlsSetValue |
| TraceEvent | TraceMessage |
| TraceMessageVa | TransactNamedPipe |
| TransmitCommChar | TryAcquireSRWLockExclusive |
| TryAcquireSRWLockShared | TryEnterCriticalSection |
| TrySubmitThreadpoolCallback | TzSpecificLocalTimeToSystemTime |
| TzSpecificLocalTimeToSystemTimeEx | UnhandledExceptionFilter |
| UnlockFile | UnlockFileEx |
| UnmapViewOfFile | UnmapViewOfFileEx |
| UnregisterBadMemoryNotification | UnregisterGPNotificationInternal |
| UnregisterStateChangeNotification | UnregisterStateLock |
| UnregisterTraceGuids | UnregisterWaitEx |
| UnsubscribeStateChangeNotification | UpdatePackageStatus |
| UpdatePackageStatusForUser | UpdateProcThreadAttribute |
| UrlApplySchemeA | UrlApplySchemeW |
| UrlCanonicalizeA | UrlCanonicalizeW |
| UrlCombineA | UrlCombineW |
| UrlCompareA | UrlCompareW |
| UrlCreateFromPathA | UrlCreateFromPathW |
| UrlEscapeA | UrlEscapeW |
| UrlFixupW | UrlGetLocationA |
| UrlGetLocationW | UrlGetPartA |
| UrlGetPartW | UrlHashA |
| UrlHashW | UrlIsA |
| UrlIsNoHistoryA | UrlIsNoHistoryW |
| UrlIsOpaqueA | UrlIsOpaqueW |
| UrlIsW | UrlUnescapeA |
| UrlUnescapeW | VerFindFileA |
| VerFindFileW | VerLanguageNameA |
| VerLanguageNameW | VerQueryValueA |
| VerQueryValueW | VerSetConditionMask |
| VerifyApplicationUserModelId | VerifyPackageFamilyName |
| VerifyPackageFullName | VerifyPackageId |
| VerifyPackageRelativeApplicationId | VerifyScripts |
| VirtualAlloc | VirtualAllocEx |
| VirtualAllocExNuma | VirtualAllocFromApp |
| VirtualFree | VirtualFreeEx |
| VirtualLock | VirtualProtect |
| VirtualProtectEx | VirtualProtectFromApp |
| VirtualQuery | VirtualQueryEx |
| VirtualUnlock | WTSGetServiceSessionId |
| WTSIsServerContainer | WaitCommEvent |
| WaitForDebugEvent | WaitForDebugEventEx |
| WaitForMachinePolicyForegroundProcessingInternal | WaitForMultipleObjects |
| WaitForMultipleObjectsEx | WaitForSingleObject |
| WaitForSingleObjectEx | WaitForThreadpoolIoCallbacks |
| WaitForThreadpoolTimerCallbacks | WaitForThreadpoolWaitCallbacks |
| WaitForThreadpoolWorkCallbacks | WaitForUserPolicyForegroundProcessingInternal |
| WaitNamedPipeW | WaitOnAddress |
| WakeAllConditionVariable | WakeByAddressAll |
| WakeByAddressSingle | WakeConditionVariable |
| WerGetFlags | WerRegisterFile |
| WerRegisterMemoryBlock | WerRegisterRuntimeExceptionModule |
| WerSetFlags | WerUnregisterFile |
| WerUnregisterMemoryBlock | WerUnregisterRuntimeExceptionModule |
| WerpNotifyLoadStringResource | WerpNotifyUseStringResource |
| WideCharToMultiByte | Wow64DisableWow64FsRedirection |
| Wow64RevertWow64FsRedirection | WriteConsoleA |
| WriteConsoleInputA | WriteConsoleInputW |
| WriteConsoleOutputA | WriteConsoleOutputAttribute |
| WriteConsoleOutputCharacterA | WriteConsoleOutputCharacterW |
| WriteConsoleOutputW | WriteConsoleW |
| WriteFile | WriteFileEx |
| WriteFileGather | WriteProcessMemory |
| WriteStateAtomValue | WriteStateContainerValue |
| ZombifyActCtx | _AddMUIStringToCache |
| _GetMUIStringFromCache | _OpenMuiStringCache |
| __dllonexit3 | __wgetmainargs |
| _amsg_exit | _c_exit |
| _cexit | _exit |
| _initterm | _initterm_e |
| _invalid_parameter | _onexit |
| _purecall | _time64 |
| atexit | exit |
| hgets | hwprintf |
| lstrcmp | lstrcmpA |
| lstrcmpW | lstrcmpi |
| lstrcmpiA | lstrcmpiW |
| lstrcpyn | lstrcpynA |
| lstrcpynW | lstrlen |
| lstrlenA | lstrlenW |
| time | wprintf |
Imported Functions List
The following functions are imported by this dll:- ntdll.dll:
CsrAllocateCaptureBuffer CsrAllocateMessagePointer CsrCaptureMessageBuffer CsrCaptureMessageMultiUnicodeStringsInPlace CsrClientCallServer CsrClientConnectToServer CsrFreeCaptureBuffer CsrGetProcessId CsrIdentifyAlertableThread DbgPrint DbgPrintEx DbgUiConnectToDbg DbgUiContinue DbgUiConvertStateChangeStructure DbgUiConvertStateChangeStructureEx DbgUiDebugActiveProcess DbgUiGetThreadDebugObject DbgUiStopDebugging DbgUiWaitStateChange EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite EtwEventWriteNoRegistration LdrAccessResource LdrAddDllDirectory LdrAddLoadAsDataTable LdrAddRefDll LdrAppxHandleIntegrityFailure LdrDisableThreadCalloutsForDll LdrFindResourceEx_U LdrFindResource_U LdrGetDllDirectory LdrGetDllFullName LdrGetDllHandle LdrGetDllHandleByMapping LdrGetDllHandleByName LdrGetDllPath LdrGetFileNameFromLoadAsDataTable LdrGetProcedureAddressForCaller LdrLoadAlternateResourceModule LdrLoadAlternateResourceModuleEx LdrLoadDll LdrQueryImageFileKeyOption LdrQueryOptionalDelayLoadedAPI LdrRemoveDllDirectory LdrRemoveLoadAsDataTable LdrResFindResource LdrResFindResourceDirectory LdrResGetRCConfig LdrResRelease LdrResSearchResource LdrResolveDelayLoadedAPI LdrResolveDelayLoadsFromDll LdrRscIsTypeExist LdrSetDefaultDllDirectories LdrStandardizeSystemPath LdrUnloadAlternateResourceModule LdrUnloadDll LdrpResGetMappingSize LdrpResGetResourceDirectory NlsMbCodePageTag NlsMbOemCodePageTag NtAccessCheck NtAccessCheckAndAuditAlarm NtAccessCheckByType NtAccessCheckByTypeAndAuditAlarm NtAccessCheckByTypeResultList NtAccessCheckByTypeResultListAndAuditAlarm NtAccessCheckByTypeResultListAndAuditAlarmByHandle NtAdjustGroupsToken NtAdjustPrivilegesToken NtAllocateLocallyUniqueId NtAllocateUserPhysicalPages NtAllocateVirtualMemory NtCancelIoFile NtCancelIoFileEx NtCancelSynchronousIoFile NtCancelTimer NtClearEvent NtClose NtClose NtCloseObjectAuditAlarm NtCompareObjects NtCreateDirectoryObjectEx NtCreateEvent NtCreateFile NtCreateIoCompletion NtCreateKey NtCreateKey NtCreateKeyTransacted NtCreateLowBoxToken NtCreateMutant NtCreateNamedPipeFile NtCreatePrivateNamespace NtCreateSection NtCreateSemaphore NtCreateSymbolicLinkObject NtCreateThreadEx NtCreateTimer NtCreateUserProcess NtCreateWnfStateName NtDelayExecution NtDeleteKey NtDeleteObjectAuditAlarm NtDeletePrivateNamespace NtDeleteValueKey NtDeleteWnfStateName NtDeviceIoControlFile NtDuplicateObject NtDuplicateToken NtEnumerateKey NtEnumerateValueKey NtFilterToken NtFlushBuffersFile NtFlushInstructionCache NtFlushKey NtFlushVirtualMemory NtFreeUserPhysicalPages NtFreeVirtualMemory NtFsControlFile NtGetCachedSigningLevel NtGetContextThread NtGetNlsSectionPtr NtGetWriteWatch NtImpersonateAnonymousToken NtIsProcessInJob NtLoadKey NtLoadKeyEx NtLockFile NtLockVirtualMemory NtMapUserPhysicalPages NtMapViewOfSection NtNotifyChangeDirectoryFile NtNotifyChangeKey NtNotifyChangeMultipleKeys NtOpenDirectoryObject NtOpenEvent NtOpenFile NtOpenKey NtOpenKey NtOpenKeyEx NtOpenKeyTransacted NtOpenKeyTransactedEx NtOpenMutant NtOpenObjectAuditAlarm NtOpenPrivateNamespace NtOpenProcess NtOpenProcessToken NtOpenProcessTokenEx NtOpenSection NtOpenSemaphore NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadToken NtOpenTimer NtPrivilegeCheck NtPrivilegeObjectAuditAlarm NtPrivilegedServiceAuditAlarm NtProtectVirtualMemory NtPulseEvent NtQueryAttributesFile NtQueryDefaultLocale NtQueryDirectoryFile NtQueryDirectoryObject NtQueryEaFile NtQueryEvent NtQueryFullAttributesFile NtQueryInformationFile NtQueryInformationJobObject NtQueryInformationProcess NtQueryInformationSiloObject NtQueryInformationThread NtQueryInformationToken NtQueryInstallUILanguage NtQueryKey NtQueryLicenseValue NtQueryMultipleValueKey NtQueryObject NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemInformation NtQuerySystemInformationEx NtQueryValueKey NtQueryValueKey NtQueryVirtualMemory NtQueryVolumeInformationFile NtQueryWnfStateData NtQueryWnfStateNameInformation NtQueueApcThread NtRaiseException NtRaiseHardError NtReadFile NtReadFileScatter NtReadVirtualMemory NtReleaseMutant NtReleaseSemaphore NtRemoveIoCompletion NtRemoveIoCompletionEx NtRemoveProcessDebug NtResetEvent NtResetWriteWatch NtRestoreKey NtResumeThread NtSaveKeyEx NtSetCachedSigningLevel NtSetContextThread NtSetDefaultLocale NtSetEvent NtSetInformationFile NtSetInformationObject NtSetInformationProcess NtSetInformationThread NtSetInformationToken NtSetInformationVirtualMemory NtSetIoCompletion NtSetSecurityObject NtSetSystemInformation NtSetSystemTime NtSetTimerEx NtSetValueKey NtSignalAndWaitForSingleObject NtSuspendThread NtTerminateProcess NtTerminateThread NtUnloadKey NtUnlockFile NtUnlockVirtualMemory NtUnmapViewOfSection NtUnmapViewOfSectionEx NtUpdateWnfStateData NtWaitForMultipleObjects NtWaitForSingleObject NtWriteFile NtWriteFileGather NtWriteVirtualMemory NtYieldExecution PssNtCaptureSnapshot PssNtDuplicateSnapshot PssNtFreeRemoteSnapshot PssNtFreeSnapshot PssNtFreeWalkMarker PssNtQuerySnapshot PssNtValidateDescriptor PssNtWalkSnapshot RtlAbsoluteToSelfRelativeSD RtlAcquirePebLock RtlAcquirePrivilege RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared RtlActivateActivationContextEx RtlActivateActivationContextUnsafeFast RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAce RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce RtlAddAce RtlAddAuditAccessAce RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce RtlAddMandatoryAce RtlAddResourceAttributeAce RtlAddSIDToBoundaryDescriptor RtlAddScopedPolicyIDAce RtlAllocateActivationContextStack RtlAllocateAndInitializeSid RtlAllocateHandle RtlAllocateHeap RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreAllAccessesGranted RtlAreAnyAccessesGranted RtlAreBitsSet RtlBarrier RtlCaptureContext RtlCaptureStackBackTrace RtlCharToInteger RtlCheckTokenCapability RtlCheckTokenMembershipEx RtlCleanUpTEBLangLists RtlClearBits RtlCompactHeap RtlCompareMemory RtlCompareUnicodeString RtlCompareUnicodeStrings RtlConvertSidToUnicodeString RtlConvertToAutoInheritSecurityObject RtlCopyContext RtlCopySid RtlCopyUnicodeString RtlCreateAcl RtlCreateBoundaryDescriptor RtlCreateEnvironmentEx RtlCreateHeap RtlCreateProcessParametersEx RtlCreateSecurityDescriptor RtlCreateTagHeap RtlCreateTimer RtlCreateTimerQueue RtlCreateUnicodeString RtlCreateUnicodeStringFromAsciiz RtlCreateUserStack RtlCultureNameToLCID RtlCutoverTimeToSystemTime RtlDeactivateActivationContextUnsafeFast RtlDecodePointer RtlDefaultNpAcl RtlDeleteAce RtlDeleteBoundaryDescriptor RtlDeleteCriticalSection RtlDeleteElementGenericTableAvl RtlDeleteSecurityObject RtlDeleteTimer RtlDeleteTimerQueueEx RtlDeregisterWaitEx RtlDestroyEnvironment RtlDestroyEnvironment RtlDestroyHeap RtlDetermineDosPathNameType_U RtlDllShutdownInProgress RtlDnsHostNameToComputerName RtlDosApplyFileIsolationRedirection_Ustr RtlDosPathNameToNtPathName_U RtlDosPathNameToNtPathName_U_WithStatus RtlDosPathNameToRelativeNtPathName_U RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlDosSearchPath_Ustr RtlDowncaseUnicodeString RtlEncodePointer RtlEnterCriticalSection RtlEnumerateGenericTableAvl RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlExitUserProcess RtlExitUserThread RtlExpandEnvironmentStrings RtlExpandEnvironmentStrings_U RtlExtendedLargeIntegerDivide RtlFindAceByType RtlFindClearBitsAndSet RtlFindMessage RtlFirstFreeAce RtlFlsAlloc RtlFlsFree RtlFlushSecureMemoryCache RtlFormatCurrentUserKeyPath RtlFormatMessageEx RtlFreeActivationContextStack RtlFreeAnsiString RtlFreeAnsiString RtlFreeHandle RtlFreeHeap RtlFreeSid RtlFreeUserStack RtlGetAce RtlGetActiveActivationContext RtlGetAppContainerNamedObjectPath RtlGetAppContainerParent RtlGetAppContainerSidType RtlGetControlSecurityDescriptor RtlGetCurrentDirectory_U RtlGetCurrentProcessorNumberEx RtlGetCurrentTransaction RtlGetDaclSecurityDescriptor RtlGetDeviceFamilyInfoEnum RtlGetEnabledExtendedFeatures RtlGetExePath RtlGetExtendedContextLength RtlGetExtendedFeaturesMask RtlGetFileMUIPath RtlGetFullPathName_U RtlGetFullPathName_UEx RtlGetFullPathName_UstrEx RtlGetGroupSecurityDescriptor RtlGetInterruptTimePrecise RtlGetLastNtStatus RtlGetLastWin32Error RtlGetLocaleFileMappingAddress RtlGetOwnerSecurityDescriptor RtlGetProcessHeaps RtlGetProcessPreferredUILanguages RtlGetProductInfo RtlGetSaclSecurityDescriptor RtlGetSearchPath RtlGetSecurityDescriptorRMControl RtlGetSystemPreferredUILanguages RtlGetSystemTimePrecise RtlGetThreadErrorMode RtlGetThreadPreferredUILanguages RtlGetUILanguageInfo RtlGetUserPreferredUILanguages RtlGetVersion RtlIdentifierAuthoritySid RtlIdnToAscii RtlIdnToNameprepUnicode RtlIdnToUnicode RtlImageDirectoryEntryToData RtlImageNtHeader RtlImageNtHeaderEx RtlImpersonateSelf RtlInitAnsiString RtlInitAnsiStringEx RtlInitBarrier RtlInitString RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitializeConditionVariable RtlInitializeConditionVariable RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount RtlInitializeCriticalSectionEx RtlInitializeExceptionChain RtlInitializeExtendedContext RtlInitializeGenericTableAvl RtlInitializeHandleTable RtlInitializeSid RtlInsertElementGenericTableAvl RtlIntegerToChar RtlIntegerToUnicodeString RtlIsCapabilitySid RtlIsDosDeviceName_U RtlIsMultiSessionSku RtlIsNormalizedString RtlIsPackageSid RtlIsParentOfChildAppContainer RtlIsProcessorFeaturePresent RtlIsValidHandle RtlKnownExceptionFilter RtlLCIDToCultureName RtlLcidToLocaleName RtlLeaveCriticalSection RtlLengthRequiredSid RtlLengthSecurityDescriptor RtlLengthSid RtlLoadString RtlLocaleNameToLcid RtlLocateExtendedFeature RtlLocateLegacyContext RtlLockHeap RtlLookupElementGenericTableAvl RtlMakeSelfRelativeSD RtlMapGenericMask RtlMultiByteToUnicodeN RtlNewSecurityObject RtlNewSecurityObjectEx RtlNewSecurityObjectWithMultipleInheritance RtlNormalizeString RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlOemStringToUnicodeString RtlOpenCurrentUser RtlPcToFileHeader RtlPrefixString RtlPrefixUnicodeString RtlProcessFlsData RtlPublishWnfStateData RtlQueryEnvironmentVariable RtlQueryEnvironmentVariable_U RtlQueryHeapInformation RtlQueryInformationAcl RtlQueryInformationActivationContext RtlQueryPackageIdentityEx RtlQueryProtectedPolicy RtlQueryRegistryValuesEx RtlQuerySecurityObject RtlQueryWnfStateData RtlQueueWorkItem RtlRaiseException RtlRaiseStatus RtlRandom RtlReAllocateHeap RtlRegisterWait RtlReleaseActivationContext RtlReleasePath RtlReleasePebLock RtlReleasePrivilege RtlReleaseRelativeName RtlReleaseSRWLockExclusive RtlReleaseSRWLockShared RtlReportSilentProcessExit RtlRestoreLastWin32Error RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlSelfRelativeToAbsoluteSD RtlSelfRelativeToAbsoluteSD2 RtlSetControlSecurityDescriptor RtlSetCurrentDirectory_U RtlSetCurrentTransaction RtlSetDaclSecurityDescriptor RtlSetEnvironmentStrings RtlSetEnvironmentVar RtlSetEnvironmentVariable RtlSetExtendedFeaturesMask RtlSetGroupSecurityDescriptor RtlSetHeapInformation RtlSetInformationAcl RtlSetLastWin32ErrorAndNtStatusFromNtStatus RtlSetOwnerSecurityDescriptor RtlSetProcessPreferredUILanguages RtlSetProtectedPolicy RtlSetSaclSecurityDescriptor RtlSetSecurityDescriptorRMControl RtlSetSecurityObject RtlSetSecurityObjectEx RtlSetThreadErrorMode RtlSetThreadPreferredUILanguages RtlSetUnhandledExceptionFilter RtlSetUserValueHeap RtlSizeHeap RtlSleepConditionVariableCS RtlSleepConditionVariableSRW RtlStringFromGUID RtlStringFromGUIDEx RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeWnfStateChangeNotification RtlTimeFieldsToTime RtlTimeToTimeFields RtlUTF8ToUnicodeN RtlUnhandledExceptionFilter RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString RtlUnicodeStringToInteger RtlUnicodeStringToOemString RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUnlockHeap RtlUnsubscribeWnfNotificationWaitForCompletion RtlUnsubscribeWnfStateChangeNotification RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpdateTimer RtlValidAcl RtlValidRelativeSecurityDescriptor RtlValidSecurityDescriptor RtlValidSid RtlValidateHeap RtlWaitOnAddress RtlWalkHeap RtlWow64EnableFsRedirectionEx RtlpCheckDynamicTimeZoneInformation RtlpCreateProcessRegistryInfo RtlpGetLCIDFromLangInfoNode RtlpGetNameFromLangInfoNode RtlpGetSystemDefaultUILanguage RtlpInitializeLangRegistryInfo RtlpIsQualifiedLanguage RtlpLoadMachineUIByPolicy RtlpLoadUserUIByPolicy RtlpMergeSecurityAttributeInformation RtlpMuiFreeLangRegistryInfo RtlpQueryDefaultUILanguage SbSelectProcedure TpAllocCleanupGroup TpAllocIoCompletion TpAllocPool TpAllocTimer TpAllocWait TpAllocWork TpCallbackMayRunLong TpCancelAsyncIoOperation TpCaptureCaller TpCheckTerminateWorker TpPostWork TpQueryPoolStackInformation TpReleaseIoCompletion TpReleaseWait TpReleaseWork TpSetPoolMinThreads TpSetPoolStackInformation TpSetWait TpSimpleTryPost TpStartAsyncIoOperation TpWaitForIoCompletion TpWaitForWait WinSqmAddToAverageDWORD WinSqmAddToAverageDWORD WinSqmAddToAverageDWORD WinSqmAddToStream WinSqmAddToStreamEx WinSqmStartSession _CIsqrt _alldiv _allmul _alloca_probe _alloca_probe _allshl _aullrem _aullshr _strcmpi _strlwr _strnicmp _ui64tow_s _vsnprintf _vsnwprintf _wcsicmp _wcslwr _wcsnicmp _wtol bsearch isalpha iswalpha memcmp memcpy memcpy_s memmove memset qsort strchr strncat strncat_s swprintf_s toupper vswprintf_s wcscat_s wcschr wcscpy_s wcscspn wcsncmp wcsncpy_s wcspbrk wcsrchr wcsstr wcstok_s wcstoul - api-ms-win-eventing-provider-l1-1-0.dll:
ntdll!EtwEventActivityIdControl ntdll!EtwEventRegister ntdll!EtwEventSetInformation ntdll!EtwEventUnregister ntdll!EtwEventWriteTransfer - api-ms-win-core-apiquery-l1-1-0.dll:
ntdll!ApiSetQueryApiSetPresence