Windows 10 DLL File Information - rpcrt4.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | Remote Procedure Call Runtime |
File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
Company: | Microsoft Corporation |
Product Name: | Microsoft® Windows® Operating System |
DLL popularity | Very High - 828 other DLL files in system32 directory are statically linked to this file. |
File Size: | 786 KB |
Total Number of Exported Functions: | 562 |
Total Number of Exported Functions With Names: | 561 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 730,624 Bytes | 90.7% | Read, Execute | Code |
.data | 0x000b4000 | 1,536 Bytes | 0.2% | Write, Read | Initialized Data |
.idata | 0x000b5000 | 11,264 Bytes | 1.4% | Read | Initialized Data |
.didat | 0x000b8000 | 512 Bytes | 0.1% | Write, Read | Initialized Data |
.rsrc | 0x000b9000 | 17,920 Bytes | 2.2% | Read | Initialized Data |
.reloc | 0x000be000 | 26,624 Bytes | 3.3% | Read, Discardable | Initialized Data |
Static Linking
rpcrt4.dll is statically linked to the following files:ntdll.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-namedpipe-l1-2-0.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
KERNELBASE.dll
api-ms-win-core-delayload-l1-1-1.dll
This means that when rpcrt4.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, rpcrt4.dll won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 0 | 0 Bytes | 0.0% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 4 | 36,658 Bytes | 4.6% |
Total | 4 | 36,658 Bytes | 4.6% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:CStdStubBuffer_AddRef | CStdStubBuffer_Connect |
CStdStubBuffer_CountRefs | CStdStubBuffer_DebugServerQueryInterface |
CStdStubBuffer_DebugServerRelease | CStdStubBuffer_Disconnect |
CStdStubBuffer_Invoke | CStdStubBuffer_IsIIDSupported |
CStdStubBuffer_QueryInterface | CreateProxyFromTypeInfo |
CreateStubFromTypeInfo | DceErrorInqTextA |
DceErrorInqTextW | DllGetClassObject |
DllRegisterServer | IUnknown_AddRef_Proxy |
IUnknown_QueryInterface_Proxy | IUnknown_Release_Proxy |
I_RpcAllocate | I_RpcAsyncAbortCall |
I_RpcAsyncSetHandle | I_RpcBCacheAllocate |
I_RpcBCacheFree | I_RpcBindingCopy |
I_RpcBindingCreateNP | I_RpcBindingHandleToAsyncHandle |
I_RpcBindingInqClientTokenAttributes | I_RpcBindingInqCurrentModifiedId |
I_RpcBindingInqDynamicEndpoint | I_RpcBindingInqDynamicEndpointA |
I_RpcBindingInqDynamicEndpointW | I_RpcBindingInqLocalClientPID |
I_RpcBindingInqMarshalledTargetInfo | I_RpcBindingInqSecurityContext |
I_RpcBindingInqSecurityContextKeyInfo | I_RpcBindingInqTransportType |
I_RpcBindingInqWireIdForSnego | I_RpcBindingIsClientLocal |
I_RpcBindingIsServerLocal | I_RpcBindingSetPrivateOption |
I_RpcBindingToStaticStringBindingW | I_RpcCertProcessAndProvision |
I_RpcClearMutex | I_RpcCompleteAndFree |
I_RpcConnectionInqSockBuffSize | I_RpcConnectionSetSockBuffSize |
I_RpcDeleteMutex | I_RpcEnableWmiTrace |
I_RpcExceptionFilter | I_RpcFilterDCOMActivation |
I_RpcFree | I_RpcFreeBuffer |
I_RpcFreePipeBuffer | I_RpcFwThisIsTheManager |
I_RpcGetBuffer | I_RpcGetBufferWithObject |
I_RpcGetCurrentCallHandle | I_RpcGetDefaultSD |
I_RpcGetExtendedError | I_RpcGetPortAllocationData |
I_RpcIfInqTransferSyntaxes | I_RpcInitFwImports |
I_RpcInitHttpImports | I_RpcInitImports |
I_RpcInitNdrImports | I_RpcLogEvent |
I_RpcMapWin32Status | I_RpcMarshalBindingHandleAndInterfaceForNDF |
I_RpcMgmtEnableDedicatedThreadPool | I_RpcMgmtQueryDedicatedThreadPool |
I_RpcNDRCGetWireRepresentation | I_RpcNDRSContextEmergencyCleanup |
I_RpcNegotiateTransferSyntax | I_RpcNsBindingSetEntryName |
I_RpcNsBindingSetEntryNameA | I_RpcNsBindingSetEntryNameW |
I_RpcNsInterfaceExported | I_RpcNsInterfaceUnexported |
I_RpcOpenClientProcess | I_RpcOpenClientThread |
I_RpcParseSecurity | I_RpcPauseExecution |
I_RpcReallocPipeBuffer | I_RpcReceive |
I_RpcRecordCalloutFailure | I_RpcRequestMutex |
I_RpcSNCHOption | I_RpcSend |
I_RpcSendReceive | I_RpcServerAllocateIpPort |
I_RpcServerCheckClientRestriction | I_RpcServerDisableExceptionFilter |
I_RpcServerGetAssociationID | I_RpcServerInqAddressChangeFn |
I_RpcServerInqLocalConnAddress | I_RpcServerInqRemoteConnAddress |
I_RpcServerInqTransportType | I_RpcServerIsClientDisconnected |
I_RpcServerRegisterForwardFunction | I_RpcServerSetAddressChangeFn |
I_RpcServerStartService | I_RpcServerSubscribeForDisconnectNotification |
I_RpcServerTurnOnOffKeepalives | I_RpcServerUseProtseq2A |
I_RpcServerUseProtseq2W | I_RpcServerUseProtseqEp2A |
I_RpcServerUseProtseqEp2W | I_RpcSessionStrictContextHandle |
I_RpcSetDCOMAppId | I_RpcSsDontSerializeContext |
I_RpcSystemFunction001 | I_RpcTransConnectionAllocatePacket |
I_RpcTransConnectionFreePacket | I_RpcTransConnectionReallocPacket |
I_RpcTransDatagramAllocate | I_RpcTransDatagramAllocate2 |
I_RpcTransDatagramFree | I_RpcTransGetThreadEvent |
I_RpcTransGetThreadEventThreadOptional | I_RpcTransIoCancelled |
I_RpcTransServerNewConnection | I_RpcTurnOnEEInfoPropagation |
I_RpcVerifierCorruptionExpected | I_UuidCreate |
MIDL_wchar_strcpy | MIDL_wchar_strlen |
MesBufferHandleReset | MesDecodeBufferHandleCreate |
MesDecodeIncrementalHandleCreate | MesEncodeDynBufferHandleCreate |
MesEncodeFixedBufferHandleCreate | MesEncodeIncrementalHandleCreate |
MesHandleFree | MesIncrementalHandleReset |
MesInqProcEncodingId | NDRCContextBinding |
NDRCContextMarshall | NDRCContextUnmarshall |
NDRSContextMarshall | NDRSContextMarshall2 |
NDRSContextMarshallEx | NDRSContextUnmarshall |
NDRSContextUnmarshall2 | NDRSContextUnmarshallEx |
NDRcopy | NdrAllocate |
NdrAsyncClientCall | NdrAsyncClientCall2 |
NdrAsyncServerCall | NdrByteCountPointerBufferSize |
NdrByteCountPointerFree | NdrByteCountPointerMarshall |
NdrByteCountPointerUnmarshall | NdrCStdStubBuffer2_Release |
NdrCStdStubBuffer_Release | NdrClearOutParameters |
NdrClientCall | NdrClientCall2 |
NdrClientCall4 | NdrClientContextMarshall |
NdrClientContextUnmarshall | NdrClientInitialize |
NdrClientInitializeNew | NdrComplexArrayBufferSize |
NdrComplexArrayFree | NdrComplexArrayMarshall |
NdrComplexArrayMemorySize | NdrComplexArrayUnmarshall |
NdrComplexStructBufferSize | NdrComplexStructFree |
NdrComplexStructMarshall | NdrComplexStructMemorySize |
NdrComplexStructUnmarshall | NdrConformantArrayBufferSize |
NdrConformantArrayFree | NdrConformantArrayMarshall |
NdrConformantArrayMemorySize | NdrConformantArrayUnmarshall |
NdrConformantStringBufferSize | NdrConformantStringMarshall |
NdrConformantStringMemorySize | NdrConformantStringUnmarshall |
NdrConformantStructBufferSize | NdrConformantStructFree |
NdrConformantStructMarshall | NdrConformantStructMemorySize |
NdrConformantStructUnmarshall | NdrConformantVaryingArrayBufferSize |
NdrConformantVaryingArrayFree | NdrConformantVaryingArrayMarshall |
NdrConformantVaryingArrayMemorySize | NdrConformantVaryingArrayUnmarshall |
NdrConformantVaryingStructBufferSize | NdrConformantVaryingStructFree |
NdrConformantVaryingStructMarshall | NdrConformantVaryingStructMemorySize |
NdrConformantVaryingStructUnmarshall | NdrContextHandleInitialize |
NdrContextHandleSize | NdrConvert |
NdrConvert2 | NdrCorrelationFree |
NdrCorrelationInitialize | NdrCorrelationPass |
NdrCreateServerInterfaceFromStub | NdrDcomAsyncClientCall |
NdrDcomAsyncClientCall2 | NdrDcomAsyncStubCall |
NdrDllCanUnloadNow | NdrDllGetClassObject |
NdrDllRegisterProxy | NdrDllUnregisterProxy |
NdrEncapsulatedUnionBufferSize | NdrEncapsulatedUnionFree |
NdrEncapsulatedUnionMarshall | NdrEncapsulatedUnionMemorySize |
NdrEncapsulatedUnionUnmarshall | NdrFixedArrayBufferSize |
NdrFixedArrayFree | NdrFixedArrayMarshall |
NdrFixedArrayMemorySize | NdrFixedArrayUnmarshall |
NdrFreeBuffer | NdrFullPointerFree |
NdrFullPointerInsertRefId | NdrFullPointerQueryPointer |
NdrFullPointerQueryRefId | NdrFullPointerXlatFree |
NdrFullPointerXlatInit | NdrGetBaseInterfaceFromStub |
NdrGetBuffer | NdrGetDcomProtocolVersion |
NdrGetSimpleTypeBufferAlignment | NdrGetSimpleTypeBufferSize |
NdrGetSimpleTypeMemorySize | NdrGetTypeFlags |
NdrGetUserMarshalInfo | NdrInterfacePointerBufferSize |
NdrInterfacePointerFree | NdrInterfacePointerMarshall |
NdrInterfacePointerMemorySize | NdrInterfacePointerUnmarshall |
NdrMapCommAndFaultStatus | NdrMesProcEncodeDecode |
NdrMesProcEncodeDecode2 | NdrMesProcEncodeDecode4 |
NdrMesSimpleTypeAlignSize | NdrMesSimpleTypeDecode |
NdrMesSimpleTypeEncode | NdrMesTypeAlignSize |
NdrMesTypeAlignSize2 | NdrMesTypeDecode |
NdrMesTypeDecode2 | NdrMesTypeEncode |
NdrMesTypeEncode2 | NdrMesTypeFree2 |
NdrNonConformantStringBufferSize | NdrNonConformantStringMarshall |
NdrNonConformantStringMemorySize | NdrNonConformantStringUnmarshall |
NdrNonEncapsulatedUnionBufferSize | NdrNonEncapsulatedUnionFree |
NdrNonEncapsulatedUnionMarshall | NdrNonEncapsulatedUnionMemorySize |
NdrNonEncapsulatedUnionUnmarshall | NdrNsGetBuffer |
NdrNsSendReceive | NdrOleAllocate |
NdrOleFree | NdrOutInit |
NdrPartialIgnoreClientBufferSize | NdrPartialIgnoreClientMarshall |
NdrPartialIgnoreServerInitialize | NdrPartialIgnoreServerUnmarshall |
NdrPointerBufferSize | NdrPointerFree |
NdrPointerMarshall | NdrPointerMemorySize |
NdrPointerUnmarshall | NdrProxyErrorHandler |
NdrProxyFreeBuffer | NdrProxyGetBuffer |
NdrProxyInitialize | NdrProxySendReceive |
NdrRangeUnmarshall | NdrRpcSmClientAllocate |
NdrRpcSmClientFree | NdrRpcSmSetClientToOsf |
NdrRpcSsDefaultAllocate | NdrRpcSsDefaultFree |
NdrRpcSsDisableAllocate | NdrRpcSsEnableAllocate |
NdrSendReceive | NdrServerCall |
NdrServerCall2 | NdrServerContextMarshall |
NdrServerContextNewMarshall | NdrServerContextNewUnmarshall |
NdrServerContextUnmarshall | NdrServerInitialize |
NdrServerInitializeMarshall | NdrServerInitializeNew |
NdrServerInitializePartial | NdrServerInitializeUnmarshall |
NdrServerMarshall | NdrServerUnmarshall |
NdrSimpleStructBufferSize | NdrSimpleStructFree |
NdrSimpleStructMarshall | NdrSimpleStructMemorySize |
NdrSimpleStructUnmarshall | NdrSimpleTypeMarshall |
NdrSimpleTypeUnmarshall | NdrStubCall |
NdrStubCall2 | NdrStubForwardingFunction |
NdrStubGetBuffer | NdrStubInitialize |
NdrStubInitializeMarshall | NdrTypeFlags |
NdrTypeFree | NdrTypeMarshall |
NdrTypeSize | NdrTypeUnmarshall |
NdrUnmarshallBasetypeInline | NdrUserMarshalBufferSize |
NdrUserMarshalFree | NdrUserMarshalMarshall |
NdrUserMarshalMemorySize | NdrUserMarshalSimpleTypeConvert |
NdrUserMarshalUnmarshall | NdrVaryingArrayBufferSize |
NdrVaryingArrayFree | NdrVaryingArrayMarshall |
NdrVaryingArrayMemorySize | NdrVaryingArrayUnmarshall |
NdrXmitOrRepAsBufferSize | NdrXmitOrRepAsFree |
NdrXmitOrRepAsMarshall | NdrXmitOrRepAsMemorySize |
NdrXmitOrRepAsUnmarshall | NdrpCreateProxy |
NdrpCreateStub | NdrpGetProcFormatString |
NdrpGetTypeFormatString | NdrpGetTypeGenCookie |
NdrpMemoryIncrement | NdrpReleaseTypeFormatString |
NdrpReleaseTypeGenCookie | NdrpVarVtOfTypeDesc |
RpcAsyncAbortCall | RpcAsyncCancelCall |
RpcAsyncCompleteCall | RpcAsyncGetCallStatus |
RpcAsyncInitializeHandle | RpcAsyncRegisterInfo |
RpcBindingBind | RpcBindingCopy |
RpcBindingCreateA | RpcBindingCreateW |
RpcBindingFree | RpcBindingFromStringBindingA |
RpcBindingFromStringBindingW | RpcBindingInqAuthClientA |
RpcBindingInqAuthClientExA | RpcBindingInqAuthClientExW |
RpcBindingInqAuthClientW | RpcBindingInqAuthInfoA |
RpcBindingInqAuthInfoExA | RpcBindingInqAuthInfoExW |
RpcBindingInqAuthInfoW | RpcBindingInqObject |
RpcBindingInqOption | RpcBindingReset |
RpcBindingServerFromClient | RpcBindingSetAuthInfoA |
RpcBindingSetAuthInfoExA | RpcBindingSetAuthInfoExW |
RpcBindingSetAuthInfoW | RpcBindingSetObject |
RpcBindingSetOption | RpcBindingToStringBindingA |
RpcBindingToStringBindingW | RpcBindingUnbind |
RpcBindingVectorFree | RpcCancelThread |
RpcCancelThreadEx | RpcCertGeneratePrincipalNameA |
RpcCertGeneratePrincipalNameW | RpcCertMatchPrincipalName |
RpcEpRegisterA | RpcEpRegisterNoReplaceA |
RpcEpRegisterNoReplaceW | RpcEpRegisterW |
RpcEpResolveBinding | RpcEpUnregister |
RpcErrorAddRecord | RpcErrorClearInformation |
RpcErrorEndEnumeration | RpcErrorGetNextRecord |
RpcErrorGetNumberOfRecords | RpcErrorLoadErrorInfo |
RpcErrorResetEnumeration | RpcErrorSaveErrorInfo |
RpcErrorStartEnumeration | RpcExceptionFilter |
RpcFreeAuthorizationContext | RpcGetAuthorizationContextForClient |
RpcIfIdVectorFree | RpcIfInqId |
RpcImpersonateClient | RpcImpersonateClient2 |
RpcImpersonateClientContainer | RpcMgmtEnableIdleCleanup |
RpcMgmtEpEltInqBegin | RpcMgmtEpEltInqDone |
RpcMgmtEpEltInqNextA | RpcMgmtEpEltInqNextW |
RpcMgmtEpUnregister | RpcMgmtInqComTimeout |
RpcMgmtInqDefaultProtectLevel | RpcMgmtInqIfIds |
RpcMgmtInqServerPrincNameA | RpcMgmtInqServerPrincNameW |
RpcMgmtInqStats | RpcMgmtIsServerListening |
RpcMgmtSetAuthorizationFn | RpcMgmtSetCancelTimeout |
RpcMgmtSetComTimeout | RpcMgmtSetServerStackSize |
RpcMgmtStatsVectorFree | RpcMgmtStopServerListening |
RpcMgmtWaitServerListen | RpcNetworkInqProtseqsA |
RpcNetworkInqProtseqsW | RpcNetworkIsProtseqValidA |
RpcNetworkIsProtseqValidW | RpcNsBindingInqEntryNameA |
RpcNsBindingInqEntryNameW | RpcObjectInqType |
RpcObjectSetInqFn | RpcObjectSetType |
RpcProtseqVectorFreeA | RpcProtseqVectorFreeW |
RpcRaiseException | RpcRevertContainerImpersonation |
RpcRevertToSelf | RpcRevertToSelfEx |
RpcServerCompleteSecurityCallback | RpcServerInqBindingHandle |
RpcServerInqBindings | RpcServerInqCallAttributesA |
RpcServerInqCallAttributesW | RpcServerInqDefaultPrincNameA |
RpcServerInqDefaultPrincNameW | RpcServerInqIf |
RpcServerInterfaceGroupActivate | RpcServerInterfaceGroupClose |
RpcServerInterfaceGroupCreateA | RpcServerInterfaceGroupCreateW |
RpcServerInterfaceGroupDeactivate | RpcServerInterfaceGroupInqBindings |
RpcServerListen | RpcServerRegisterAuthInfoA |
RpcServerRegisterAuthInfoW | RpcServerRegisterIf |
RpcServerRegisterIf2 | RpcServerRegisterIf3 |
RpcServerRegisterIfEx | RpcServerSubscribeForNotification |
RpcServerTestCancel | RpcServerUnregisterIf |
RpcServerUnregisterIfEx | RpcServerUnsubscribeForNotification |
RpcServerUseAllProtseqs | RpcServerUseAllProtseqsEx |
RpcServerUseAllProtseqsIf | RpcServerUseAllProtseqsIfEx |
RpcServerUseProtseqA | RpcServerUseProtseqEpA |
RpcServerUseProtseqEpExA | RpcServerUseProtseqEpExW |
RpcServerUseProtseqEpW | RpcServerUseProtseqExA |
RpcServerUseProtseqExW | RpcServerUseProtseqIfA |
RpcServerUseProtseqIfExA | RpcServerUseProtseqIfExW |
RpcServerUseProtseqIfW | RpcServerUseProtseqW |
RpcServerYield | RpcSmAllocate |
RpcSmClientFree | RpcSmDestroyClientContext |
RpcSmDisableAllocate | RpcSmEnableAllocate |
RpcSmFree | RpcSmGetThreadHandle |
RpcSmSetClientAllocFree | RpcSmSetThreadHandle |
RpcSmSwapClientAllocFree | RpcSsAllocate |
RpcSsContextLockExclusive | RpcSsContextLockShared |
RpcSsDestroyClientContext | RpcSsDisableAllocate |
RpcSsDontSerializeContext | RpcSsEnableAllocate |
RpcSsFree | RpcSsGetContextBinding |
RpcSsGetThreadHandle | RpcSsSetClientAllocFree |
RpcSsSetThreadHandle | RpcSsSwapClientAllocFree |
RpcStringBindingComposeA | RpcStringBindingComposeW |
RpcStringBindingParseA | RpcStringBindingParseW |
RpcStringFreeA | RpcStringFreeW |
RpcTestCancel | RpcUserFree |
SimpleTypeAlignment | SimpleTypeBufferSize |
SimpleTypeMemorySize | TowerConstruct |
TowerExplode | UuidCompare |
UuidCreate | UuidCreateNil |
UuidCreateSequential | UuidEqual |
UuidFromStringA | UuidFromStringW |
UuidHash | UuidIsNil |
UuidToStringA | UuidToStringW |
char_array_from_ndr | char_from_ndr |
data_from_ndr | data_into_ndr |
data_size_ndr | double_array_from_ndr |
double_from_ndr | enum_from_ndr |
float_array_from_ndr | float_from_ndr |
long_array_from_ndr | long_from_ndr |
long_from_ndr_temp | pfnFreeRoutines |
pfnMarshallRoutines | pfnSizeRoutines |
pfnUnmarshallRoutines | short_array_from_ndr |
short_from_ndr | short_from_ndr_temp |
tree_into_ndr | tree_peek_ndr |
tree_size_ndr |
Imported Functions List
The following functions are imported by this dll:- ntdll.dll:
AlpcFreeCompletionListMessage AlpcGetMessageFromCompletionList AlpcGetOutstandingCompletionListMessageCount AlpcRegisterCompletionList AlpcRegisterCompletionListWorkerThread AlpcRundownCompletionList AlpcUnregisterCompletionList AlpcUnregisterCompletionListWorkerThread CsrIdentifyAlertableThread DbgPrint EtwEventActivityIdControl EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite EtwEventWriteTransfer LdrQueryImageFileExecutionOptions NtAdjustPrivilegesToken NtAllocateReserveObject NtAllocateUuids NtAlpcAcceptConnectPort NtAlpcCancelMessage NtAlpcConnectPort NtAlpcConnectPortEx NtAlpcCreatePort NtAlpcCreatePortSection NtAlpcCreateResourceReserve NtAlpcCreateSectionView NtAlpcCreateSecurityContext NtAlpcDeletePortSection NtAlpcDeleteSectionView NtAlpcDeleteSecurityContext NtAlpcDisconnectPort NtAlpcImpersonateClientContainerOfPort NtAlpcImpersonateClientOfPort NtAlpcOpenSenderProcess NtAlpcOpenSenderThread NtAlpcQueryInformation NtAlpcQueryInformationMessage NtAlpcSendWaitReceivePort NtAlpcSetInformation NtClose NtCreateNamedPipeFile NtCreateSection NtCreateWnfStateName NtDelayExecution NtDeleteWnfStateName NtDuplicateToken NtFsControlFile NtImpersonateAnonymousToken NtOpenDirectoryObject NtOpenKey NtOpenThreadToken NtPrivilegeCheck NtQuerySecurityObject NtQuerySystemInformation NtQuerySystemTime NtQueryValueKey NtQueryVolumeInformationFile NtQueueApcThreadEx NtReadFile NtRevertContainerImpersonation NtSetInformationFile NtSetInformationThread NtSetIoCompletionEx NtWriteFile RtlAcquireResourceExclusive RtlAcquireResourceShared RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared RtlAddAccessAllowedAce RtlAllocateHeap RtlAnsiStringToUnicodeString RtlApplicationVerifierStop RtlCaptureStackBackTrace RtlCheckForOrphanedCriticalSections RtlClearAllBits RtlClearBits RtlCreateAcl RtlCreateSecurityDescriptor RtlDeleteCriticalSection RtlDeleteElementGenericTableAvl RtlDeleteResource RtlDeleteSecurityObject RtlDllShutdownInProgress RtlDosPathNameToNtPathName_U RtlEnterCriticalSection RtlEnumerateGenericTableAvl RtlFreeAnsiString RtlFreeAnsiString RtlFreeHeap RtlGetAppContainerNamedObjectPath RtlGetCurrentProcessorNumber RtlGetLastNtStatus RtlGetNtProductType RtlImageNtHeader RtlInitAnsiString RtlInitUnicodeString RtlInitializeBitMap RtlInitializeConditionVariable RtlInitializeCriticalSectionAndSpinCount RtlInitializeGenericTableAvl RtlInitializeResource RtlInsertElementGenericTableAvl RtlIntegerToUnicodeString RtlLeaveCriticalSection RtlLookupElementGenericTableAvl RtlMultiByteToUnicodeN RtlNewSecurityObjectEx RtlNtStatusToDosError RtlNumberGenericTableElementsAvl RtlPublishWnfStateData RtlQueryWnfStateData RtlRaiseException RtlReleaseResource RtlReleaseSRWLockExclusive RtlReleaseSRWLockShared RtlReportException RtlSetAllBits RtlSetBits RtlSetDaclSecurityDescriptor RtlSetThreadSubProcessTag RtlSubscribeWnfStateChangeNotification RtlTryEnterCriticalSection RtlUnicodeStringToAnsiString RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnwind RtlValidSecurityDescriptor RtlWaitOnAddress RtlWakeAddressAll SbSelectProcedure TpAllocAlpcCompletionEx TpAlpcRegisterCompletionList TpAlpcUnregisterCompletionList TpCallbackIndependent TpCallbackSendAlpcMessageOnCompletion TpCallbackSendPendingAlpcMessage TpDisablePoolCallbackChecks TpReleaseAlpcCompletion TpSetDefaultPoolStackInformation TpSetPoolStackInformation TpWaitForAlpcCompletion WinSqmAddToAverageDWORD _alloca_probe _ftol2_sse _itoa_s _vsnwprintf _wcsicmp _wcslwr _wcsnicmp atoi atol memcmp memcpy memmove memset strchr wcschr wcsncpy_s wcsrchr wcsstr wcstol wcstoul - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!RaiseException KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter ntdll!RtlRestoreLastWin32Error - api-ms-win-core-file-l1-2-1.dll:
KernelBase!CreateFileW - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle KernelBase!DuplicateHandle KernelBase!SetHandleInformation - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap ntdll!RtlAllocateHeap ntdll!RtlFreeHeap ntdll!RtlReAllocateHeap - api-ms-win-core-interlocked-l1-2-0.dll:
ntdll!RtlInitializeSListHead ntdll!RtlInterlockedFlushSList ntdll!RtlInterlockedPopEntrySList ntdll!RtlInterlockedPushEntrySList ntdll!RtlQueryDepthSList - api-ms-win-core-io-l1-1-1.dll:
kernel32!CancelIoEx - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegCloseKey KernelBase!RegCreateKeyExA KernelBase!RegDeleteKeyExA KernelBase!RegGetValueA KernelBase!RegGetValueW KernelBase!RegOpenKeyExA KernelBase!RegOpenKeyExW KernelBase!RegQueryInfoKeyA KernelBase!RegSetValueExA - api-ms-win-core-libraryloader-l1-2-0.dll:
KernelBase!FreeLibrary KernelBase!GetModuleHandleW KernelBase!GetProcAddress KernelBase!LoadLibraryExW - api-ms-win-core-localization-l1-2-1.dll:
KernelBase!FormatMessageA KernelBase!FormatMessageW - api-ms-win-core-memory-l1-1-2.dll:
KernelBase!MapViewOfFileEx KernelBase!UnmapViewOfFile KernelBase!VirtualAlloc KernelBase!VirtualFree KernelBase!VirtualProtect KernelBase!VirtualQuery - api-ms-win-core-string-obsolete-l1-1-0.dll:
kernel32!lstrlen kernel32!lstrlenW - api-ms-win-core-heap-obsolete-l1-1-0.dll:
kernel32!LocalFree - api-ms-win-core-namedpipe-l1-2-0.dll:
KernelBase!ConnectNamedPipe KernelBase!CreateNamedPipeW KernelBase!DisconnectNamedPipe KernelBase!GetNamedPipeClientComputerNameW KernelBase!ImpersonateNamedPipeClient KernelBase!SetNamedPipeHandleState KernelBase!TransactNamedPipe KernelBase!WaitNamedPipeW - api-ms-win-core-processenvironment-l1-2-0.dll:
KernelBase!GetCommandLineW - api-ms-win-core-processthreads-l1-1-2.dll:
KernelBase!OpenProcessToken KernelBase!OpenThreadToken KernelBase!SetThreadToken kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!GetThreadId kernel32!QueueUserAPC kernel32!SetThreadStackGuarantee kernel32!SwitchToThread kernel32!TerminateProcess kernel32!TlsAlloc kernel32!TlsGetValue kernel32!TlsSetValue - api-ms-win-core-string-l1-1-0.dll:
KernelBase!CompareStringW - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventW KernelBase!CreateSemaphoreExW KernelBase!ReleaseSemaphore KernelBase!ResetEvent KernelBase!SetEvent KernelBase!Sleep KernelBase!WaitForSingleObject KernelBase!WaitForSingleObjectEx ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection ntdll!RtlSetCriticalSectionSpinCount - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetComputerNameExW KernelBase!GetSystemInfo KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount KernelBase!GetTickCount64 KernelBase!GlobalMemoryStatusEx - api-ms-win-core-timezone-l1-1-0.dll:
KernelBase!FileTimeToSystemTime - api-ms-win-core-threadpool-legacy-l1-1-0.dll:
KernelBase!CreateTimerQueueTimer KernelBase!DeleteTimerQueueTimer - api-ms-win-security-base-l1-2-0.dll:
KernelBase!AccessCheck KernelBase!AddAccessAllowedAce KernelBase!AllocateAndInitializeSid KernelBase!CheckTokenMembership KernelBase!CopySid KernelBase!DuplicateToken KernelBase!EqualSid KernelBase!FreeSid KernelBase!GetLengthSid KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorLength KernelBase!GetSidIdentifierAuthority KernelBase!GetSidLengthRequired KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!ImpersonateAnonymousToken KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!IsValidSecurityDescriptor KernelBase!IsValidSid KernelBase!MakeSelfRelativeSD KernelBase!RevertToSelf KernelBase!SetSecurityDescriptorDacl - api-ms-win-core-apiquery-l1-1-0.dll:
ntdll!ApiSetQueryApiSetPresence - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-threadpool-l1-2-0.dll:
KernelBase!CreateThreadpool KernelBase!CreateThreadpoolIo KernelBase!CreateThreadpoolTimer KernelBase!CreateThreadpoolWork KernelBase!TrySubmitThreadpoolCallback ntdll!TpCancelAsyncIoOperation ntdll!TpIsTimerSet ntdll!TpPostWork ntdll!TpReleaseIoCompletion ntdll!TpReleasePool ntdll!TpReleaseTimer ntdll!TpReleaseWork ntdll!TpSetTimer ntdll!TpStartAsyncIoOperation ntdll!TpWaitForIoCompletion ntdll!TpWaitForTimer ntdll!TpWaitForWork - KERNELBASE.dll:
ResolveDelayLoadedAPI - api-ms-win-core-delayload-l1-1-1.dll:
KernelBase!DelayLoadFailureHook