| Windows 7 DLL File Information - rpcrt4.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 7, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Remote Procedure Call Runtime |
| File Version: | 6.1.7100.0 (winmain_win7rc.090421-1700) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft Windows Operating System |
| DLL popularity | Very High - 421 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 638 KB |
| Total Number of Exported Functions: | 540 |
| Total Number of Exported Functions With Names: | 540 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 602,624 Bytes | 92.2% | Read, Execute | Code |
| .orpc | 0x00095000 | 10,752 Bytes | 1.6% | Read, Execute | Code |
| .data | 0x00098000 | 3,584 Bytes | 0.5% | Write, Read | Initialized Data |
| .rsrc | 0x00099000 | 15,872 Bytes | 2.4% | Read | Initialized Data |
| .reloc | 0x0009d000 | 18,944 Bytes | 2.9% | Read, Discardable | Initialized Data |
Static Linking
rpcrt4.dll is statically linked to the following files:ntdll.dll
API-MS-Win-Core-ErrorHandling-L1-1-0.dll
API-MS-Win-Core-File-L1-1-0.dll
API-MS-Win-Core-Handle-L1-1-0.dll
API-MS-Win-Core-Heap-L1-1-0.dll
API-MS-Win-Core-Interlocked-L1-1-0.dll
API-MS-Win-Core-IO-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-LibraryLoader-L1-1-0.dll
API-MS-Win-Core-Memory-L1-1-0.dll
API-MS-Win-Core-Misc-L1-1-0.dll
API-MS-Win-Core-NamedPipe-L1-1-0.dll
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-String-L1-1-0.dll
API-MS-Win-Core-Synch-L1-1-0.dll
API-MS-Win-Core-SysInfo-L1-1-0.dll
API-MS-Win-Core-ThreadPool-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Core-DelayLoad-L1-1-0.dll
API-MS-Win-Core-Profile-L1-1-0.dll
KERNELBASE.dll
This means that when rpcrt4.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, rpcrt4.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 0 | 0 Bytes | 0.0% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 4 | 34,014 Bytes | 5.2% |
| Total | 4 | 34,014 Bytes | 5.2% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| CStdStubBuffer_AddRef | CStdStubBuffer_Connect |
| CStdStubBuffer_CountRefs | CStdStubBuffer_DebugServerQueryInterface |
| CStdStubBuffer_DebugServerRelease | CStdStubBuffer_Disconnect |
| CStdStubBuffer_Invoke | CStdStubBuffer_IsIIDSupported |
| CStdStubBuffer_QueryInterface | CreateProxyFromTypeInfo |
| CreateStubFromTypeInfo | DceErrorInqTextA |
| DceErrorInqTextW | DllGetClassObject |
| DllRegisterServer | IUnknown_AddRef_Proxy |
| IUnknown_QueryInterface_Proxy | IUnknown_Release_Proxy |
| I_RpcAllocate | I_RpcAsyncAbortCall |
| I_RpcAsyncSetHandle | I_RpcBCacheAllocate |
| I_RpcBCacheFree | I_RpcBindingCopy |
| I_RpcBindingCreateNP | I_RpcBindingHandleToAsyncHandle |
| I_RpcBindingInqCurrentModifiedId | I_RpcBindingInqDynamicEndpoint |
| I_RpcBindingInqDynamicEndpointA | I_RpcBindingInqDynamicEndpointW |
| I_RpcBindingInqLocalClientPID | I_RpcBindingInqMarshalledTargetInfo |
| I_RpcBindingInqSecurityContext | I_RpcBindingInqSecurityContextKeyInfo |
| I_RpcBindingInqTransportType | I_RpcBindingInqWireIdForSnego |
| I_RpcBindingIsClientLocal | I_RpcBindingToStaticStringBindingW |
| I_RpcCertProcessAndProvision | I_RpcClearMutex |
| I_RpcCompleteAndFree | I_RpcConnectionInqSockBuffSize |
| I_RpcConnectionSetSockBuffSize | I_RpcDeleteMutex |
| I_RpcEnableWmiTrace | I_RpcExceptionFilter |
| I_RpcFilterDCOMActivation | I_RpcFree |
| I_RpcFreeBuffer | I_RpcFreePipeBuffer |
| I_RpcFwThisIsTheManager | I_RpcGetBuffer |
| I_RpcGetBufferWithObject | I_RpcGetCurrentCallHandle |
| I_RpcGetExtendedError | I_RpcGetPortAllocationData |
| I_RpcIfInqTransferSyntaxes | I_RpcInitFwImports |
| I_RpcInitHttpImports | I_RpcInitImports |
| I_RpcInitNdrImports | I_RpcLogEvent |
| I_RpcMapWin32Status | I_RpcMarshalBindingHandleAndInterfaceForNDF |
| I_RpcMgmtEnableDedicatedThreadPool | I_RpcMgmtQueryDedicatedThreadPool |
| I_RpcNDRCGetWireRepresentation | I_RpcNDRSContextEmergencyCleanup |
| I_RpcNegotiateTransferSyntax | I_RpcNsBindingSetEntryName |
| I_RpcNsBindingSetEntryNameA | I_RpcNsBindingSetEntryNameW |
| I_RpcNsInterfaceExported | I_RpcNsInterfaceUnexported |
| I_RpcOpenClientProcess | I_RpcOpenClientThread |
| I_RpcParseSecurity | I_RpcPauseExecution |
| I_RpcReallocPipeBuffer | I_RpcReceive |
| I_RpcRecordCalloutFailure | I_RpcRequestMutex |
| I_RpcSNCHOption | I_RpcSend |
| I_RpcSendReceive | I_RpcServerAllocateIpPort |
| I_RpcServerCheckClientRestriction | I_RpcServerInqAddressChangeFn |
| I_RpcServerInqLocalConnAddress | I_RpcServerInqRemoteConnAddress |
| I_RpcServerInqTransportType | I_RpcServerIsClientDisconnected |
| I_RpcServerRegisterForwardFunction | I_RpcServerSetAddressChangeFn |
| I_RpcServerStartService | I_RpcServerTurnOnOffKeepalives |
| I_RpcServerUseProtseq2A | I_RpcServerUseProtseq2W |
| I_RpcServerUseProtseqEp2A | I_RpcServerUseProtseqEp2W |
| I_RpcSessionStrictContextHandle | I_RpcSetDCOMAppId |
| I_RpcSsDontSerializeContext | I_RpcSystemFunction001 |
| I_RpcTransConnectionAllocatePacket | I_RpcTransConnectionFreePacket |
| I_RpcTransConnectionReallocPacket | I_RpcTransDatagramAllocate |
| I_RpcTransDatagramAllocate2 | I_RpcTransDatagramFree |
| I_RpcTransGetThreadEvent | I_RpcTransGetThreadEventThreadOptional |
| I_RpcTransIoCancelled | I_RpcTransServerNewConnection |
| I_RpcTurnOnEEInfoPropagation | I_RpcVerifierCorruptionExpected |
| I_UuidCreate | MIDL_wchar_strcpy |
| MIDL_wchar_strlen | MesBufferHandleReset |
| MesDecodeBufferHandleCreate | MesDecodeIncrementalHandleCreate |
| MesEncodeDynBufferHandleCreate | MesEncodeFixedBufferHandleCreate |
| MesEncodeIncrementalHandleCreate | MesHandleFree |
| MesIncrementalHandleReset | MesInqProcEncodingId |
| NDRCContextBinding | NDRCContextMarshall |
| NDRCContextUnmarshall | NDRSContextMarshall |
| NDRSContextMarshall2 | NDRSContextMarshallEx |
| NDRSContextUnmarshall | NDRSContextUnmarshall2 |
| NDRSContextUnmarshallEx | NDRcopy |
| NdrAllocate | NdrAsyncClientCall |
| NdrAsyncServerCall | NdrByteCountPointerBufferSize |
| NdrByteCountPointerFree | NdrByteCountPointerMarshall |
| NdrByteCountPointerUnmarshall | NdrCStdStubBuffer2_Release |
| NdrCStdStubBuffer_Release | NdrClearOutParameters |
| NdrClientCall | NdrClientCall2 |
| NdrClientContextMarshall | NdrClientContextUnmarshall |
| NdrClientInitialize | NdrClientInitializeNew |
| NdrComplexArrayBufferSize | NdrComplexArrayFree |
| NdrComplexArrayMarshall | NdrComplexArrayMemorySize |
| NdrComplexArrayUnmarshall | NdrComplexStructBufferSize |
| NdrComplexStructFree | NdrComplexStructMarshall |
| NdrComplexStructMemorySize | NdrComplexStructUnmarshall |
| NdrConformantArrayBufferSize | NdrConformantArrayFree |
| NdrConformantArrayMarshall | NdrConformantArrayMemorySize |
| NdrConformantArrayUnmarshall | NdrConformantStringBufferSize |
| NdrConformantStringMarshall | NdrConformantStringMemorySize |
| NdrConformantStringUnmarshall | NdrConformantStructBufferSize |
| NdrConformantStructFree | NdrConformantStructMarshall |
| NdrConformantStructMemorySize | NdrConformantStructUnmarshall |
| NdrConformantVaryingArrayBufferSize | NdrConformantVaryingArrayFree |
| NdrConformantVaryingArrayMarshall | NdrConformantVaryingArrayMemorySize |
| NdrConformantVaryingArrayUnmarshall | NdrConformantVaryingStructBufferSize |
| NdrConformantVaryingStructFree | NdrConformantVaryingStructMarshall |
| NdrConformantVaryingStructMemorySize | NdrConformantVaryingStructUnmarshall |
| NdrContextHandleInitialize | NdrContextHandleSize |
| NdrConvert | NdrConvert2 |
| NdrCorrelationFree | NdrCorrelationInitialize |
| NdrCorrelationPass | NdrCreateServerInterfaceFromStub |
| NdrDcomAsyncClientCall | NdrDcomAsyncStubCall |
| NdrDllCanUnloadNow | NdrDllGetClassObject |
| NdrDllRegisterProxy | NdrDllUnregisterProxy |
| NdrEncapsulatedUnionBufferSize | NdrEncapsulatedUnionFree |
| NdrEncapsulatedUnionMarshall | NdrEncapsulatedUnionMemorySize |
| NdrEncapsulatedUnionUnmarshall | NdrFixedArrayBufferSize |
| NdrFixedArrayFree | NdrFixedArrayMarshall |
| NdrFixedArrayMemorySize | NdrFixedArrayUnmarshall |
| NdrFreeBuffer | NdrFullPointerFree |
| NdrFullPointerInsertRefId | NdrFullPointerQueryPointer |
| NdrFullPointerQueryRefId | NdrFullPointerXlatFree |
| NdrFullPointerXlatInit | NdrGetBaseInterfaceFromStub |
| NdrGetBuffer | NdrGetDcomProtocolVersion |
| NdrGetSimpleTypeBufferAlignment | NdrGetSimpleTypeBufferSize |
| NdrGetSimpleTypeMemorySize | NdrGetTypeFlags |
| NdrGetUserMarshalInfo | NdrInterfacePointerBufferSize |
| NdrInterfacePointerFree | NdrInterfacePointerMarshall |
| NdrInterfacePointerMemorySize | NdrInterfacePointerUnmarshall |
| NdrMapCommAndFaultStatus | NdrMesProcEncodeDecode |
| NdrMesProcEncodeDecode2 | NdrMesSimpleTypeAlignSize |
| NdrMesSimpleTypeDecode | NdrMesSimpleTypeEncode |
| NdrMesTypeAlignSize | NdrMesTypeAlignSize2 |
| NdrMesTypeDecode | NdrMesTypeDecode2 |
| NdrMesTypeEncode | NdrMesTypeEncode2 |
| NdrMesTypeFree2 | NdrNonConformantStringBufferSize |
| NdrNonConformantStringMarshall | NdrNonConformantStringMemorySize |
| NdrNonConformantStringUnmarshall | NdrNonEncapsulatedUnionBufferSize |
| NdrNonEncapsulatedUnionFree | NdrNonEncapsulatedUnionMarshall |
| NdrNonEncapsulatedUnionMemorySize | NdrNonEncapsulatedUnionUnmarshall |
| NdrNsGetBuffer | NdrNsSendReceive |
| NdrOleAllocate | NdrOleFree |
| NdrOutInit | NdrPartialIgnoreClientBufferSize |
| NdrPartialIgnoreClientMarshall | NdrPartialIgnoreServerInitialize |
| NdrPartialIgnoreServerUnmarshall | NdrPointerBufferSize |
| NdrPointerFree | NdrPointerMarshall |
| NdrPointerMemorySize | NdrPointerUnmarshall |
| NdrProxyErrorHandler | NdrProxyFreeBuffer |
| NdrProxyGetBuffer | NdrProxyInitialize |
| NdrProxySendReceive | NdrRangeUnmarshall |
| NdrRpcSmClientAllocate | NdrRpcSmClientFree |
| NdrRpcSmSetClientToOsf | NdrRpcSsDefaultAllocate |
| NdrRpcSsDefaultFree | NdrRpcSsDisableAllocate |
| NdrRpcSsEnableAllocate | NdrSendReceive |
| NdrServerCall | NdrServerCall2 |
| NdrServerContextMarshall | NdrServerContextNewMarshall |
| NdrServerContextNewUnmarshall | NdrServerContextUnmarshall |
| NdrServerInitialize | NdrServerInitializeMarshall |
| NdrServerInitializeNew | NdrServerInitializePartial |
| NdrServerInitializeUnmarshall | NdrServerMarshall |
| NdrServerUnmarshall | NdrSimpleStructBufferSize |
| NdrSimpleStructFree | NdrSimpleStructMarshall |
| NdrSimpleStructMemorySize | NdrSimpleStructUnmarshall |
| NdrSimpleTypeMarshall | NdrSimpleTypeUnmarshall |
| NdrStubCall | NdrStubCall2 |
| NdrStubForwardingFunction | NdrStubGetBuffer |
| NdrStubInitialize | NdrStubInitializeMarshall |
| NdrTypeFlags | NdrTypeFree |
| NdrTypeMarshall | NdrTypeSize |
| NdrTypeUnmarshall | NdrUnmarshallBasetypeInline |
| NdrUserMarshalBufferSize | NdrUserMarshalFree |
| NdrUserMarshalMarshall | NdrUserMarshalMemorySize |
| NdrUserMarshalSimpleTypeConvert | NdrUserMarshalUnmarshall |
| NdrVaryingArrayBufferSize | NdrVaryingArrayFree |
| NdrVaryingArrayMarshall | NdrVaryingArrayMemorySize |
| NdrVaryingArrayUnmarshall | NdrXmitOrRepAsBufferSize |
| NdrXmitOrRepAsFree | NdrXmitOrRepAsMarshall |
| NdrXmitOrRepAsMemorySize | NdrXmitOrRepAsUnmarshall |
| NdrpCreateProxy | NdrpCreateStub |
| NdrpGetProcFormatString | NdrpGetTypeFormatString |
| NdrpGetTypeGenCookie | NdrpMemoryIncrement |
| NdrpReleaseTypeFormatString | NdrpReleaseTypeGenCookie |
| NdrpVarVtOfTypeDesc | RpcAsyncAbortCall |
| RpcAsyncCancelCall | RpcAsyncCompleteCall |
| RpcAsyncGetCallStatus | RpcAsyncInitializeHandle |
| RpcAsyncRegisterInfo | RpcBindingBind |
| RpcBindingCopy | RpcBindingCreateA |
| RpcBindingCreateW | RpcBindingFree |
| RpcBindingFromStringBindingA | RpcBindingFromStringBindingW |
| RpcBindingInqAuthClientA | RpcBindingInqAuthClientExA |
| RpcBindingInqAuthClientExW | RpcBindingInqAuthClientW |
| RpcBindingInqAuthInfoA | RpcBindingInqAuthInfoExA |
| RpcBindingInqAuthInfoExW | RpcBindingInqAuthInfoW |
| RpcBindingInqObject | RpcBindingInqOption |
| RpcBindingReset | RpcBindingServerFromClient |
| RpcBindingSetAuthInfoA | RpcBindingSetAuthInfoExA |
| RpcBindingSetAuthInfoExW | RpcBindingSetAuthInfoW |
| RpcBindingSetObject | RpcBindingSetOption |
| RpcBindingToStringBindingA | RpcBindingToStringBindingW |
| RpcBindingUnbind | RpcBindingVectorFree |
| RpcCancelThread | RpcCancelThreadEx |
| RpcCertGeneratePrincipalNameA | RpcCertGeneratePrincipalNameW |
| RpcCertMatchPrincipalName | RpcEpRegisterA |
| RpcEpRegisterNoReplaceA | RpcEpRegisterNoReplaceW |
| RpcEpRegisterW | RpcEpResolveBinding |
| RpcEpUnregister | RpcErrorAddRecord |
| RpcErrorClearInformation | RpcErrorEndEnumeration |
| RpcErrorGetNextRecord | RpcErrorGetNumberOfRecords |
| RpcErrorLoadErrorInfo | RpcErrorResetEnumeration |
| RpcErrorSaveErrorInfo | RpcErrorStartEnumeration |
| RpcExceptionFilter | RpcFreeAuthorizationContext |
| RpcGetAuthorizationContextForClient | RpcIfIdVectorFree |
| RpcIfInqId | RpcImpersonateClient |
| RpcMgmtEnableIdleCleanup | RpcMgmtEpEltInqBegin |
| RpcMgmtEpEltInqDone | RpcMgmtEpEltInqNextA |
| RpcMgmtEpEltInqNextW | RpcMgmtEpUnregister |
| RpcMgmtInqComTimeout | RpcMgmtInqDefaultProtectLevel |
| RpcMgmtInqIfIds | RpcMgmtInqServerPrincNameA |
| RpcMgmtInqServerPrincNameW | RpcMgmtInqStats |
| RpcMgmtIsServerListening | RpcMgmtSetAuthorizationFn |
| RpcMgmtSetCancelTimeout | RpcMgmtSetComTimeout |
| RpcMgmtSetServerStackSize | RpcMgmtStatsVectorFree |
| RpcMgmtStopServerListening | RpcMgmtWaitServerListen |
| RpcNetworkInqProtseqsA | RpcNetworkInqProtseqsW |
| RpcNetworkIsProtseqValidA | RpcNetworkIsProtseqValidW |
| RpcNsBindingInqEntryNameA | RpcNsBindingInqEntryNameW |
| RpcObjectInqType | RpcObjectSetInqFn |
| RpcObjectSetType | RpcProtseqVectorFreeA |
| RpcProtseqVectorFreeW | RpcRaiseException |
| RpcRevertToSelf | RpcRevertToSelfEx |
| RpcServerCompleteSecurityCallback | RpcServerInqBindingHandle |
| RpcServerInqBindings | RpcServerInqCallAttributesA |
| RpcServerInqCallAttributesW | RpcServerInqDefaultPrincNameA |
| RpcServerInqDefaultPrincNameW | RpcServerInqIf |
| RpcServerListen | RpcServerRegisterAuthInfoA |
| RpcServerRegisterAuthInfoW | RpcServerRegisterIf |
| RpcServerRegisterIf2 | RpcServerRegisterIfEx |
| RpcServerSubscribeForNotification | RpcServerTestCancel |
| RpcServerUnregisterIf | RpcServerUnregisterIfEx |
| RpcServerUnsubscribeForNotification | RpcServerUseAllProtseqs |
| RpcServerUseAllProtseqsEx | RpcServerUseAllProtseqsIf |
| RpcServerUseAllProtseqsIfEx | RpcServerUseProtseqA |
| RpcServerUseProtseqEpA | RpcServerUseProtseqEpExA |
| RpcServerUseProtseqEpExW | RpcServerUseProtseqEpW |
| RpcServerUseProtseqExA | RpcServerUseProtseqExW |
| RpcServerUseProtseqIfA | RpcServerUseProtseqIfExA |
| RpcServerUseProtseqIfExW | RpcServerUseProtseqIfW |
| RpcServerUseProtseqW | RpcServerYield |
| RpcSmAllocate | RpcSmClientFree |
| RpcSmDestroyClientContext | RpcSmDisableAllocate |
| RpcSmEnableAllocate | RpcSmFree |
| RpcSmGetThreadHandle | RpcSmSetClientAllocFree |
| RpcSmSetThreadHandle | RpcSmSwapClientAllocFree |
| RpcSsAllocate | RpcSsContextLockExclusive |
| RpcSsContextLockShared | RpcSsDestroyClientContext |
| RpcSsDisableAllocate | RpcSsDontSerializeContext |
| RpcSsEnableAllocate | RpcSsFree |
| RpcSsGetContextBinding | RpcSsGetThreadHandle |
| RpcSsSetClientAllocFree | RpcSsSetThreadHandle |
| RpcSsSwapClientAllocFree | RpcStringBindingComposeA |
| RpcStringBindingComposeW | RpcStringBindingParseA |
| RpcStringBindingParseW | RpcStringFreeA |
| RpcStringFreeW | RpcTestCancel |
| RpcUserFree | SimpleTypeAlignment |
| SimpleTypeBufferSize | SimpleTypeMemorySize |
| TowerConstruct | TowerExplode |
| UuidCompare | UuidCreate |
| UuidCreateNil | UuidCreateSequential |
| UuidEqual | UuidFromStringA |
| UuidFromStringW | UuidHash |
| UuidIsNil | UuidToStringA |
| UuidToStringW | char_array_from_ndr |
| char_from_ndr | data_from_ndr |
| data_into_ndr | data_size_ndr |
| double_array_from_ndr | double_from_ndr |
| enum_from_ndr | float_array_from_ndr |
| float_from_ndr | long_array_from_ndr |
| long_from_ndr | long_from_ndr_temp |
| pfnFreeRoutines | pfnMarshallRoutines |
| pfnSizeRoutines | pfnUnmarshallRoutines |
| short_array_from_ndr | short_from_ndr |
| short_from_ndr_temp | tree_into_ndr |
| tree_peek_ndr | tree_size_ndr |
Imported Functions List
The following functions are imported by this dll:- ntdll.dll:
AlpcFreeCompletionListMessage AlpcGetMessageFromCompletionList AlpcGetOutstandingCompletionListMessageCount AlpcRegisterCompletionList AlpcRegisterCompletionListWorkerThread AlpcRundownCompletionList AlpcUnregisterCompletionList AlpcUnregisterCompletionListWorkerThread DbgPrint EtwEventActivityIdControl EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite EtwEventWriteTransfer EtwTraceMessage LdrQueryImageFileExecutionOptions NtAllocateReserveObject NtAllocateUuids NtAlpcAcceptConnectPort NtAlpcCancelMessage NtAlpcConnectPort NtAlpcCreatePort NtAlpcCreatePortSection NtAlpcCreateResourceReserve NtAlpcCreateSectionView NtAlpcCreateSecurityContext NtAlpcDeletePortSection NtAlpcDeleteSectionView NtAlpcDeleteSecurityContext NtAlpcDisconnectPort NtAlpcImpersonateClientOfPort NtAlpcOpenSenderProcess NtAlpcOpenSenderThread NtAlpcQueryInformation NtAlpcQueryInformationMessage NtAlpcSendWaitReceivePort NtAlpcSetInformation NtCancelIoFile NtClose NtCreateSection NtDelayExecution NtDuplicateToken NtFsControlFile NtImpersonateAnonymousToken NtOpenKey NtOpenThreadToken NtQuerySystemInformation NtQuerySystemTime NtQueryValueKey NtQueueApcThreadEx NtReadFile NtSetInformationFile NtSetInformationThread NtSetIoCompletionEx NtWriteFile RtlAcquireResourceExclusive RtlAcquireResourceShared RtlAllocateHeap RtlAnsiStringToUnicodeString RtlApplicationVerifierStop RtlCaptureStackBackTrace RtlCheckForOrphanedCriticalSections RtlClearAllBits RtlClearBits RtlDeleteCriticalSection RtlDeleteResource RtlDllShutdownInProgress RtlEnterCriticalSection RtlFreeAnsiString RtlFreeAnsiString RtlFreeHeap RtlGetNtProductType RtlImageNtHeader RtlInitAnsiString RtlInitUnicodeString RtlInitializeBitMap RtlInitializeCriticalSectionAndSpinCount RtlInitializeResource RtlIntegerToUnicodeString RtlLeaveCriticalSection RtlMultiByteToUnicodeN RtlNtStatusToDosError RtlRaiseException RtlReleaseResource RtlReportException RtlSetAllBits RtlSetBits RtlTimeToSecondsSince1980 RtlTryEnterCriticalSection RtlUnicodeStringToAnsiString RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnwind SbSelectProcedure TpAllocAlpcCompletionEx TpAlpcRegisterCompletionList TpAlpcUnregisterCompletionList TpCallbackIndependent TpDisablePoolCallbackChecks TpReleaseAlpcCompletion TpSetDefaultPoolStackInformation TpSetPoolStackInformation WinSqmIncrementDWORD WinSqmIsOptedIn _alloca_probe _itoa _ultoa _ultow _vsnwprintf _wcsicmp _wcslwr _wcsnicmp _wtol atoi atol memcpy memmove memset strchr wcschr wcsrchr wcsstr wcstol wcstoul - API-MS-Win-Core-ErrorHandling-L1-1-0.dll:
kernel32!GetLastError kernel32!RaiseException kernel32!SetLastError kernel32!SetUnhandledExceptionFilter kernel32!UnhandledExceptionFilter - API-MS-Win-Core-File-L1-1-0.dll:
kernel32!CreateFileW kernel32!FileTimeToSystemTime kernel32!WriteFile - API-MS-Win-Core-Handle-L1-1-0.dll:
kernel32!CloseHandle kernel32!DuplicateHandle kernel32!SetHandleInformation - API-MS-Win-Core-Heap-L1-1-0.dll:
KernelBase!GetProcessHeap ntdll!RtlAllocateHeap ntdll!RtlFreeHeap ntdll!RtlReAllocateHeap - API-MS-Win-Core-Interlocked-L1-1-0.dll:
KernelBase!InterlockedCompareExchange KernelBase!InterlockedDecrement KernelBase!InterlockedExchange KernelBase!InterlockedExchangeAdd KernelBase!InterlockedIncrement ntdll!RtlInitializeSListHead ntdll!RtlInterlockedCompareExchange64 ntdll!RtlInterlockedFlushSList ntdll!RtlInterlockedPopEntrySList ntdll!RtlInterlockedPushEntrySList ntdll!RtlQueryDepthSList - API-MS-Win-Core-IO-L1-1-0.dll:
kernel32!GetOverlappedResult - API-MS-Win-Core-LocalRegistry-L1-1-0.dll:
kernel32!RegCloseKey kernel32!RegCreateKeyExA kernel32!RegDeleteKeyExA kernel32!RegGetValueW kernel32!RegOpenKeyExA kernel32!RegOpenKeyExW kernel32!RegQueryInfoKeyA kernel32!RegQueryValueExA kernel32!RegQueryValueExW kernel32!RegSetValueExA - API-MS-Win-Core-LibraryLoader-L1-1-0.dll:
KernelBase!FreeLibrary KernelBase!GetModuleHandleW KernelBase!GetProcAddress KernelBase!LoadLibraryExA KernelBase!LoadLibraryExW - API-MS-Win-Core-Memory-L1-1-0.dll:
KernelBase!MapViewOfFileEx KernelBase!UnmapViewOfFile KernelBase!VirtualAlloc KernelBase!VirtualFree KernelBase!VirtualProtect KernelBase!VirtualQuery - API-MS-Win-Core-Misc-L1-1-0.dll:
KernelBase!FormatMessageA KernelBase!FormatMessageW KernelBase!Sleep KernelBase!lstrlen KernelBase!lstrlenW - API-MS-Win-Core-NamedPipe-L1-1-0.dll:
KernelBase!ConnectNamedPipe KernelBase!CreateNamedPipeW KernelBase!DisconnectNamedPipe KernelBase!GetNamedPipeClientComputerNameW KernelBase!ImpersonateNamedPipeClient KernelBase!SetNamedPipeHandleState KernelBase!TransactNamedPipe KernelBase!WaitNamedPipeW - API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll:
KernelBase!GetCommandLineW - API-MS-Win-Core-ProcessThreads-L1-1-0.dll:
KernelBase!OpenProcessToken KernelBase!OpenThreadToken kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!GetThreadId kernel32!QueueUserAPC kernel32!SetThreadPriorityBoost kernel32!SwitchToThread kernel32!TerminateProcess kernel32!TlsAlloc kernel32!TlsGetValue kernel32!TlsSetValue - API-MS-Win-Core-String-L1-1-0.dll:
KernelBase!CompareStringW - API-MS-Win-Core-Synch-L1-1-0.dll:
kernel32!CreateEventW kernel32!CreateSemaphoreExW kernel32!ReleaseSemaphore kernel32!ResetEvent kernel32!SetEvent kernel32!WaitForSingleObject kernel32!WaitForSingleObjectEx ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection ntdll!RtlSetCriticalSectionSpinCount - API-MS-Win-Core-SysInfo-L1-1-0.dll:
KernelBase!GetComputerNameExW KernelBase!GetSystemInfo KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount KernelBase!GetVersion KernelBase!GlobalMemoryStatusEx - API-MS-Win-Core-ThreadPool-L1-1-0.dll:
KernelBase!CreateThreadpool KernelBase!CreateThreadpoolIo KernelBase!CreateThreadpoolTimer KernelBase!CreateTimerQueueTimer KernelBase!DeleteTimerQueueTimer KernelBase!TrySubmitThreadpoolCallback ntdll!TpCancelAsyncIoOperation ntdll!TpIsTimerSet ntdll!TpReleaseIoCompletion ntdll!TpReleasePool ntdll!TpReleaseTimer ntdll!TpSetTimer ntdll!TpStartAsyncIoOperation ntdll!TpWaitForIoCompletion ntdll!TpWaitForTimer - API-MS-Win-Security-Base-L1-1-0.dll:
KernelBase!AddAccessAllowedAce KernelBase!AllocateAndInitializeSid KernelBase!CheckTokenMembership KernelBase!CopySid KernelBase!EqualSid KernelBase!FreeSid KernelBase!GetLengthSid KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorLength KernelBase!GetSidIdentifierAuthority KernelBase!GetSidLengthRequired KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!IsValidSecurityDescriptor KernelBase!IsValidSid KernelBase!MakeSelfRelativeSD KernelBase!RevertToSelf KernelBase!SetSecurityDescriptorDacl - API-MS-Win-Core-DelayLoad-L1-1-0.dll:
kernel32!DelayLoadFailureHook - API-MS-Win-Core-Profile-L1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - KERNELBASE.dll:
BemCreateContractFrom BemFreeContract