Files
fear-ss/xml/functions.xml
dutixlf 49d7efbe77 alpha
2026-04-28 07:11:50 +05:00

7138 lines
431 KiB
XML

<!--
This file is part of the pestudio solution (www.winitor.com).
Any usage of this file outside of the context of pestudio (e.g. in third-party application, tools chain, etc...) must be explicitely authorized.
Please note that this file can be modified when running pestudio.
-->
<xml version="1.0" encoding="utf-8">
<libs>
<lib name="ncobjapi.dll" flag="0" desc="WMI object library"></lib>
<lib name="umpnpmgr.dll" flag="0" desc="User-mode Plug-and-Play Service"></lib>
<lib name="uireng.dll" flag="1" desc="UI Recording Engine Library"></lib>
<lib name="cscapi.dll" flag="1" desc="Offline Files API"></lib>
<lib name="ucrtbase.dll" flag="0" gp="--" desc="Microsoft C Runtime Library"></lib>
<lib name="ucrtbased.dll" flag="0" gp="--" desc="Microsoft C Runtime Library"></lib>
<lib name="hal.dll" gp="--" flag="0" desc="Hardware Abstraction Layer"></lib>
<lib name="libcrypto.dll" gp="04" flag="1" desc="LibreSSL library"></lib>
<lib name="storageusage.dll" gp="--" flag="1" desc="Storage Usage Library"></lib>
<lib name="xfs_conf.dll" gp="--" flag="1" desc="Extension for Financial Services (XFS)"></lib>
<lib name="metsrv.dll" gp="--" flag="1" desc="Meterpreter service"></lib>
<lib name="msvbvm50.dll" flag="0" desc="Microsoft Virtual Basic Virtual Machine"></lib>
<lib name="userenv.dll" gp="--" flag="0" desc="User Environment Library"></lib>
<lib name="esent.dll" gp="--" flag="0" desc="Extensible Storage Engine Library"></lib>
<lib name="dsparse.dll" gp="03" flag="1" desc="Active Directory Domain Services Library"></lib>
<lib name="mscat32.dll" gp="--" flag="1" desc="MSCAT32 Forwarder Library"></lib>
<lib name="netutils.dll" gp="03" flag="1" desc="Network Win32 API Helpers"></lib>
<lib name="logoncli.dll" gp="--" flag="1" desc="Logon Client Library"></lib>
<lib name="vcruntime140.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="vcruntime140d.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcp60.dll" gp="--" flag="0" desc="Windows C Runtime Library"></lib>
<lib name="msvcp90.dll" gp="--" flag="0" desc="Microsoft C++ Runtime Library"></lib>
<lib name="msvcp100.dll" gp="--" flag="0" desc="Microsoft C++ Runtime Library"></lib>
<lib name="msvcp110.dll" gp="--" flag="0" desc="Microsoft C++ Runtime Library"></lib>
<lib name="msvcp140d.dll" gp="--" flag="0" desc="Microsoft C++ Runtime Library"></lib>
<lib name="msvcp140.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcm90.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcr100.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcr71.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcr80.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcr90.dll" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcr110.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcr120.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="msvcrt20.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="Srclient.dll" gp="--" flag="0" desc="Microsoft Windows System Restore Client Library"></lib>
<lib name="winmm.dll" gp="17" flag="1" desc="Windows Management Library"></lib>
<lib name="mscorwks.dll" gp="--" flag="0" desc="Microsoft .NET Runtime Common Language Runtime"></lib>
<lib name="msimg32.dll" gp="--" flag="0" desc="GDIEXT Client Library"></lib>
<lib name="xolehlp.dll" gp="--" flag="0" desc="Microsoft Distributed Transaction Coordinator Library"></lib>
<lib name="uxtheme.dll" gp="--" flag="0" desc="Microsoft UxTheme Library"></lib>
<lib name="oledlg.dll" flag="0" desc="OLE User Interface Support Library"></lib>
<lib name="gdiplus.dll" gp="--" flag="0" desc="Microsoft GDI+ Library"></lib>
<lib name="comdlg32.dll" gp="--" flag="0" desc="Common Dialogs Library"></lib>
<lib name="scrobj.dll" gp="--" flag="1" desc="Windows Script Component Runtime"></lib>
<lib name="dmdskmgr.dll" gp="--" flag="1" desc="Disk Management Snap-in Support Library"></lib>
<lib name="wshrm.dll" gp="--" flag="0" desc="Windows Sockets Library"></lib>
<lib name="propsys.dll" gp="--" flag="0" desc="Microsoft Property System"></lib>
<lib name="resutils.dll" gp="--" flag="1" desc="Microsoft Cluster Resource Library"></lib>
<lib name="scesrv.dll" gp="30" flag="0" desc="Windows Security Configuration Editor Engine"></lib>
<lib name="dsprop.dll" gp="29" flag="1" desc="Windows Active Directory Property Pages Library"></lib>
<lib name="cryptui.dll" gp="04" flag="1" desc="Microsoft Trust UI Provider"></lib>
<lib name="eappcfg.dll" gp="29" flag="0" desc="Windows Active Directory Property Pages"></lib>
<lib name="ulib.dll" gp="--" flag="0" desc="File Utilities Support Library"></lib>
<lib name="authz.dll" gp="30" flag="1" desc="Authorization Framework"></lib>
<lib name="clb.dll" gp="--" flag="0" desc="Column List Box"></lib>
<lib name="fltlib.dll" gp="--" flag="0" desc="Filter Library"></lib>
<lib name="d3d9.dll" gp="--" flag="1" desc="Direct3D 9 Runtime Library"></lib>
<lib name="comsvcs.dll" gp="--" flag="0" desc="COM+ Services Library"></lib>
<lib name="ncrypt.dll" gp="04" flag="1" desc="Windows NCrypt Router"></lib>
<lib name="rasapi32.dll" gp="--" flag="0" desc="Remote Access API"></lib>
<lib name="cfgmgr32.dll" gp="--" flag="1" desc="Configuration Manager Library"></lib>
<lib name="python27.dll" gp="--" flag="0" desc="Python Core"></lib>
<lib name="mlang.dll" gp="--" flag="0" desc="Multi Language Support Library"></lib>
<lib name="msdart.dll" gp="--" flag="1" desc="OLE Database Runtime Library"></lib>
<lib name="tapi32.dll" gp="--" flag="0" desc="Telephony API Client Library"></lib>
<lib name="url.dll" gp="--" flag="0" desc="Internet Shortcut Shell Extension Library"></lib>
<lib name="rsaenh.dll" gp="04" flag="1" desc="Microsoft Enhanced Cryptographic Provider"></lib>
<lib name="msdmo.dll" gp="--" flag="0" desc="DMO Runtime"></lib>
<lib name="winbrand.dll" gp="--" flag="0" desc="Windows Branding Resources"></lib>
<lib name="glu32.dll" gp="--" flag="0" desc="OpenGL Utility Library"></lib>
<lib name="modemui.dll" gp="--" flag="0" desc="Windows Modem Properties"></lib>
<lib name="opengl32.dll" gp="--" flag="0" desc="OpenGL Client"></lib>
<lib name="msacm32.dll" gp="--" flag="0" desc="Microsoft ACM Audio Filter"></lib>
<lib name="quartz.dll" gp="--" flag="0" desc="DirectShow Runtime"></lib>
<lib name="mozsqlite3.dll" gp="--" flag="1" desc="SQLite Database Library"></lib>
<lib name="sspicli.dll" gp="30" flag="0" desc="Security Support Provider Interface"></lib>
<lib name="xmllite.dll" gp="--" flag="0" desc="Microsoft XmlLite Library"></lib>
<lib name="ifsutil.dll" gp="--" flag="1" desc="IFS Utility"></lib>
<lib name="devobj.dll" gp="--" flag="1" desc="Device Information Set"></lib>
<lib name="untfs.dll" gp="--" flag="1" desc="NTFS Utility Library"></lib>
<lib name="winrnr.dll" gp="--" flag="1" desc="LDAP RnR Provider Library"></lib>
<lib name="dhcpsapi.dll" gp="03" flag="1" desc="DHCP Server API Stub Library"></lib>
<lib name="mmcbase.dll" gp="--" flag="1" desc="MMC Base Library"></lib>
<lib name="hlink.dll" gp="--" flag="1" desc="Microsoft Office 2000 component"></lib>
<lib name="odbctrac.dll" flag="0" gp="--" desc="ODBC Driver Manager Trace"></lib>
<lib name="normaliz.dll" gp="--" flag="0" desc="Unicode Normalization Library"></lib>
<lib name="windowscodecs.dll" gp="--" flag="0" desc="Microsoft Windows Codecs Library"></lib>
<lib name="dwmapi.dll" gp="--" flag="1" desc="Microsoft Desktop Window Manager API"></lib>
<lib name="usbd.sys" flag="1" desc="Universal Serial Bus Driver"></lib>
<lib name="wsecedit.dll" gp="--" flag="1" desc="Security Configuration UI Module"></lib>
<lib name="msvcirt.dll" gp="--" flag="1" desc="Windows NT IOStreams Library"></lib>
<lib name="mapistub.dll" gp="--" flag="0" desc="Extended MAPI Library"></lib>
<lib name="ntlanman.dll" gp="03" flag="1" desc="Microsoft Lan Manager Library"></lib>
<lib name="dxgi.dll" gp="--" flag="0" desc="DirectX Graphics Infrastructure"></lib>
<lib name="mspatcha.dll" gp="--" flag="1" desc="Microsoft File Patch Application API"></lib>
<lib name="ntmarta.dll" gp="--" flag="0" desc="Windows NT MARTA provider"></lib>
<lib name="aepic.dll" gp="--" flag="0" desc="Application Experience Program Cache"></lib>
<lib name="twinapi.dll" gp="--" flag="0" desc="twinapi"></lib>
<lib name="shcore.dll" gp="--" flag="0" desc="Shell Core"></lib>
<lib name="cryptsp.dll" gp="--" flag="1" desc="Cryptographic Service Provider API"></lib>
<lib name="wkscli.dll" gp="--" flag="0" desc="Workstation Service Client Library"></lib>
<lib name="systemeventsbrokerclient.dll" gp="--" flag="0" desc="system Events Broker Client Library"></lib>
<lib name="mfplat.dll" gp="--" flag="0" desc="Media Foundation Platform Library"></lib>
<lib name="slc.dll" gp="--" flag="1" desc="Software Licensing Client Dll"></lib>
<lib name="nsi.dll" gp="--" flag="1" desc="NSI User-mode Library"></lib>
<lib name="dbnmpntw.dll" gp="--" flag="1" desc="Named Pipes Net for SQL Clients"></lib>
<lib name="hid.dll" gp="32" flag="1" desc="Hid User Library"></lib>
<lib name="wevtapi.dll" gp="--" flag="1" desc="Eventing Consumption and Configuration API"></lib>
<lib name="olecli32.dll" gp="--" flag="0" desc="Object Linking and Embedding Client Library"></lib>
<lib name="mfc42u.dll" gp="--" flag="0" desc="MFCDLL Shared Library"></lib>
<lib name="mi.dll" gp="--" flag="1" desc="Management Infrastructure Library"></lib>
<lib name="miutils.dll" gp="--" flag="1" desc="Management Infrastructure Library"></lib>
<lib name="framedynos.dll" gp="--" flag="0" desc="WMI SDK Provider Framework Library"></lib>
<lib name="api-ms-win-core" gp="--" flag="0" desc="Windows ApiSet Stub Library"></lib>
<lib name="ieframe.dll" gp="--" flag="0" desc="Internet Browser Library"></lib>
<lib name="msiso.dll" gp="--" flag="0" desc="Internet Explorer Isolation Library"></lib>
<lib name="iertutil.dll" gp="--" flag="0" desc="Internet Explorer Run time Library"></lib>
<lib name="api-ms-win-security-base-l1-1-0.dll" gp="30" flag="0"></lib>
<lib name="api-ms-win-security-sddl-l1-1-0.dll" gp="30" flag="0"></lib>
<lib name="api-ms-win-security-provider-l1-1-0.dll" gp="30" flag="0"></lib>
<lib name="api-ms-win-security-lsalookup-l2-1-0.dll" gp="30" flag="0"></lib>
<lib name="api-ms-win-core-registry-l1-1-0.dll" gp="01" flag="0"></lib>
<lib name="api-ms-win-core-memory-l1-1-0.dll" gp="05" flag="0"></lib>
<lib name="api-ms-win-core-sidebyside-l1-1-0.dll" gp="02" flag="0"></lib>
<lib name="tdi.sys" gp="03" flag="1" desc="Network Driver Wrapper Library"></lib>
<lib name="utildll.dll" gp="--" flag="1" desc="WinStation utility support Library"></lib>
<lib name="msvcp80.dll" gp="--" flag="0" desc="Microsoft C++ Runtime Library"></lib>
<lib name="msvcm80.dll" gp="--" flag="0" desc="Microsoft C++ Runtime Library"></lib>
<lib name="mshtml.dll" flag="1" desc="Microsoft HTML Viewer Library"></lib>
<lib name="icm32.dll" gp="--" flag="0" desc="Microsoft Color Management Library"></lib>
<lib name="mfcsubs.dll" gp="--" flag="0" desc="COM+ Library"></lib>
<lib name="perfctrs.dll" gp="--" flag="1" desc="Performance counters Library"></lib>
<lib name="dsuiext.dll" gp="--" flag="1" desc="Directory Service Common UI Library"></lib>
<lib name="shdocvw.dll" gp="--" flag="0" desc="Shell Doc Object and Control Library"></lib>
<lib name="gpedit.dll" gp="--" flag="1" desc="Group Policiy Edit Library"></lib>
<lib name="dpnet.dll" gp="--" flag="0" desc="DirectPlay Library"></lib>
<lib name="msvcp_win.dll" gp="--" flag="0" desc="C Runtime Library"></lib>
<lib name="netsetupapi.dll" gp="--" flag="0" desc="Network Configuration API Library"></lib>
<lib name="aeinv.dll" gp="--" flag="0" desc="Application Inventory Component Library"></lib>
<lib name="amsi.dll" gp="--" flag="1" desc="Microsoft Anti-Malware Scan Interface"></lib>
<lib name="dwrite.dll" gp="--" flag="0" desc="Microsoft DirectX Typography Services"></lib>
<lib name="mfreadwrite.dll" gp="--" flag="01" desc="Media Foundation ReadWrite Library"></lib>
<lib name="mfcore.dll" gp="--" flag="0" desc="Media Foundation Core Library"></lib>
<lib name="dbgeng.dll" gp="--" flag="1" desc="Windows Symbolic Debugger Engine"></lib>
<lib name="tdh.dll" gp="--" flag="1" desc="Event Trace Helper Library"></lib>
<lib name="tdh.dll" gp="--" flag="1" desc="Event Trace Helper Library"></lib>
<lib name="netsh.exe" gp="--" flag="0" desc="Network Command Shell"></lib>
<lib name="samcli.dll" gp="30" flag="1" desc="Security Accounts Manager Client"></lib>
<lib name="srvcli.dll" gp="--" flag="1" desc="Server Service Client"></lib>
<lib name="mfc90u.dll" gp="--" flag="0" desc="MFC shared Library"></lib>
<lib name="wldp.dll" gp="30" flag="0" desc="Windows Lockdown Policy"></lib>
<lib name="mf.dll" flag="0" gp="--" desc="Media Foundation Library"></lib>
<lib name="bthprops.cpl" flag="0" gp="--" desc="Bluetooth Control Panel Applet"></lib>
<lib name="bluetoothapis.dll" flag="0" gp="--" desc="Bluetooth Usermode Api"></lib>
<lib name="winusb.dll" flag="0" gp="--" desc="Windows USB Driver User Library"></lib>
<lib name="spp.dll" gp="--" flag="1" desc="Windows Shared Protection Point"></lib>
<lib name="vssapi.dll" gp="--" flag="1" desc="Volume Shadow Copy Requestor/Writer Services"></lib>
<lib name="bcd.dll" gp="--" flag="1" desc="Windows Boot Configuration Data"></lib>
<lib name="ucrtbase.dll" gp="--" flag="0" desc="Microsoft C Runtime Library"></lib>
<lib name="snmpapi.dll" gp="03" flag="1" desc="SNMP Utility Library"></lib>
<lib name="shimeng.dll" gp="--" flag="1" desc="Shim Engine Library"></lib>
<lib name="fusion.dll" gp="--" flag="0" desc="Assembly manager"></lib>
<lib name="rtm.dll" gp="03" flag="1" desc="Routing Table Manager"></lib>
<lib name="regapi.dll" gp="01" flag="1" desc="Registry Configuration API"></lib>
<lib name="acledit.dll" gp="30" flag="1" desc="Access Control List Editor"></lib>
<lib name="inseng.dll" gp="--" flag="1" desc="Install engine"></lib>
<lib name="w32topl.dll" gp="03" flag="1" desc="Windows NT Topology Maintenance"></lib>
<lib name="msls31.dll" gp="--" flag="1" desc="Microsoft Line Services library"></lib>
<lib name="query.dll" gp="--" flag="1" desc="Content Index Utility"></lib>
<lib name="magnification.dll" gp="--" flag="0" desc="Microsoft Magnification API"></lib>
<lib name="d3d11.dll" gp="--" flag="0" desc="Direct3D 11 Runtime"></lib>
<lib name="vmprotectsdk32.dll" gp="10" flag="1" desc="VMProtect library"></lib>
<lib name="Qt5Network.dll" gp="03" flag="1" desc="Qt Network Library"></lib>
<lib name="mgmtapi.dll" gp="03" flag="1" desc="Microsoft SNMP Manager API"></lib>
<lib name="libcurl.dll" gp="03" flag="1" desc="libcurl Shared Library"></lib>
<lib name="asmg.dll" gp="04" flag="1" desc="Asmguard Library"></lib>
<lib name="SbieDll.dll" gp="30" flag="1" desc="Sandboxie Library"></lib>
<lib name="offreg.dll" gp="01" flag="1" desc="Offline registry Library"></lib>
<lib name="inetcomm.dll" gp="--" flag="0" desc="Microsoft Internet Messaging API Resources"></lib>
<lib name="polstore.dll" gp="--" flag="0" desc="Policy Storage dll"></lib>
<lib name="smclib.sys" gp="--" flag="1" desc="Smart Card Driver Library"></lib>
<lib name="WmiLib.sys" gp="--" flag="1" desc="WMILIB WMI support Library"></lib>
<lib name="kerberos.dll" gp="30" flag="1" desc="Kerberos Security Package"></lib>
<lib name="credssp.dll" gp="30" flag="1" desc="Credential Delegation Security Package"></lib>
<lib name="pku2u.dll" gp="04" flag="1" desc="Public Key Cryptography User-to-User Library"></lib>
<lib name="dsauth.dll" gp="--" flag="1" desc="DS Authorization Library"></lib>
<lib name="newdev.dll" gp="32" flag="1" desc="Add Hardware Device Library"></lib>
<lib name="ci.dll" gp="30" flag="1" desc="Code Integrity Module"></lib>
<lib name="ksecdd.sys" gp="30" flag="1" desc="Kernel Security Support Provider Interface"></lib>
<lib name="drvstore.dll" gp="32" flag="0" desc="Driver Store API"></lib>
<lib name="dxva2.dll" gp="--" flag="1" desc="DirectX Video Acceleration 2.0"></lib>
<lib name="feclient.dll" gp="30" flag="1" desc="Windows NT File Encryption Client Interfaces"></lib>
<lib name="dsrole.dll" gp="29" flag="1" desc="DS Setup Client DLL"></lib>
<lib name="webservices.dll" gp="--" flag="1" desc="Windows Web Services Runtime"></lib>
<lib name="bcryptprimitives.dll" gp="04" flag="1" desc="Windows Cryptographic Primitives Library"></lib>
<lib name="beaengine.dll" gp="--" flag="1"></lib>
<lib name="mtxoci.dll" gp="--" flag="1"></lib>
<lib name="msoert2.dll" gp="--" flag="1"></lib>
<lib name="iassam.dll" gp="--" flag="1"></lib>
<lib name="wlanui.dll" gp="--" flag="1" ></lib>
<lib name="sqlunirl.dll" gp="--" flag="1"></lib>
<lib name="adsldpc.dll" gp="--" flag="1"></lib>
<lib name="mprddm.dll" gp="--" flag="1"></lib>
<lib name="mprddm.dll" gp="--" flag="1"></lib>
<lib name="wpcap.dll" gp="03" flag="1"></lib>
<lib name="dciman32.dll" gp="--" flag="1"></lib>
<lib name="msoeacct.dll" gp="--" flag="1"></lib>
<lib name="rdpclip.exe" gp="--" flag="1"></lib>
<lib name="msports.dll" gp="--" flag="1"></lib>
<lib name="eappprxy.dll" gp="--" flag="1"></lib>
<lib name="urlredir.dll" gp="--" flag="1"></lib>
<lib name="apphelp.dll" gp="--" flag="1"></lib>
<lib name="firewallapi.dll" gp="--" flag="1"></lib>
<lib name="avrt.dll" gp="--" flag="1"></lib>
<lib name="iisutil.dll" gp="--" flag="1"></lib>
<lib name="msdrm.dll" gp="--" flag="1"></lib>
<lib name="srcore.dll" gp="--" flag="1"></lib>
<lib name="ndfapi.dll" gp="--" flag="1"></lib>
<lib name="rastls.dll" gp="--" flag="1"></lib>
<lib name="nvcuda.dll" gp="--" flag="1"></lib>
<lib name="msident.dll" gp="--" flag="1"></lib>
<lib name="adsldp.dll" gp="--" flag="1"></lib>
<lib name="sfc_os.dll" gp="--" flag="1"></lib>
<lib name="rpchttp.dll" gp="--" flag="1"></lib>
<lib name="rasman.dll" gp="--" flag="0"></lib>
<lib name="msdtcprx.dll" gp="--" flag="1"></lib>
<lib name="console.dll" gp="20" flag="1"></lib>
<lib name="msrating.dll" gp="--" flag="1"></lib>
<lib name="winsys32.sys" gp="--" flag="1"></lib>
<lib name="osuninst.dll" gp="--" flag="1"></lib>
<lib name="ncpa.cpl" gp="--" flag="1"></lib>
<lib name="mso.dll" gp="--" flag="1"></lib>
<lib name="upnphost.dll" gp="--" flag="1"></lib>
<lib name="scrrun.dll" gp="--" flag="1"></lib>
<lib name="cryptdlg.dll" gp="04" flag="1"></lib>
<lib name="cygcrypto-1.0.0.dll" gp="04" flag="1"></lib>
<lib name="ktmw32.dll" gp="--" flag="1" desc="Windows KTM Win32 Client DLL"></lib>
<lib name="clfsw32.dll" gp="--" flag="1" desc="Common Log Marshalling Win32 DLL"></lib>
<lib name="efsutil.dll" gp="30" flag="1" desc="EFS Utility Library">
<fcts>
<fct gp="30" od="---" flag="1" cb="0" ti="----">EfsUtilGetSmartcardProviderName</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">EfsUtilCreateSelfSignedCertificate</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">EfsUtilGetCurrentUserInformation</fct>
</fcts>
</lib>
<lib name="newdev.dll" gp="32" flag="0" desc="Add Hardware Device Library">
<fcts>
<fct gp="32" od="---" flag="1" cb="0" ti="----">DiInstallDriver</fct>
<fct gp="32" od="---" flag="1" cb="0" ti="----">DiUnstallDriver</fct>
<fct gp="32" od="---" flag="1" cb="0" ti="----">DiInstallDevice</fct>
<fct gp="32" od="---" flag="1" cb="0" ti="----">DiUnstallDevice</fct>
</fcts>
</lib>
<lib name="wdigest.dll" gp="30" flag="1" desc="Microsoft Digest Access">
<fcts>
<fct gp="30" od="---" flag="1" cb="0" ti="----">CredentialUpdateFree</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">CredentialUpdateNotify</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">CredentialUpdateRegister</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">SpInstanceInit</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">SpLsaModeInitialize</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">SpUserModeInitialize</fct>
<fct gp="30" od="---" flag="1" cb="0" ti="----">SsiCredentialsUpdateFree</fct>
</fcts>
</lib>
<lib name="mciavi32.dll" gp="--" flag="0" desc="Video For Windows MCI driver">
<fcts>
<fct gp="--" od="---" flag="0" cb="0" un="0" ti="----">DriverProc</fct>
<fct gp="14" od="---" flag="1" cb="0" un="0" ti="1179">KeyboardHookProc</fct>
</fcts>
</lib>
<lib name="winutils.dll" flag="1" desc="Cortex XDR Windows Utilities Library">
<fcts>
<fct gp="06" od="---" flag="1" cb="0" un="0" ti="1070">WuDeleteFiles</fct>
<fct gp="02" od="---" flag="1" cb="0" un="0" ti="----">WuGetProcessCreationTime</fct>
</fcts>
</lib>
<lib name="netlogon.dll" gp="30" flag="1" desc="Net Logon Services">
<fcts>
<fct gp="30" od="---" flag="1" cb="0" un="0">NetILogonSamLogon</fct>
</fcts>
</lib>
<lib name="wer.dll" gp="--" flag="1" desc="Windows Error Reporting DLL">
<fcts>
<fct gp="--" od="---" flag="1" cb="0" un="0">WerReportAddDump</fct>
<fct gp="--" od="---" flag="1" cb="0" un="0">WerReportAddFile</fct>
<fct gp="--" od="---" flag="0" cb="0" un="0">WerReportSetParameter</fct>
</fcts>
</lib>
<lib name="clusapi.dll" gp="--" flag="0" desc="Cluster API Library">
<fcts>
<fct gp="01" od="---" flag="1" cb="0" un="0">ClusterRegDeleteValue</fct>
<fct gp="01" od="---" flag="1" cb="0" un="0">CloseClusterResource</fct>
<fct gp="01" od="---" flag="1" cb="0" un="0">ClusterRegEnumKey</fct>
</fcts>
</lib>
<lib name="detoured.dll" gp="02" flag="1" desc="Microsoft Research Detours Package">
<fcts>
<fct gp="02" od="---" flag="1" cb="0" un="0">Detoured></fct>
</fcts>
</lib>
<lib name="advpack.dll" gp="--" flag="0" desc="Advanced Pack Library">
<fcts>
<fct gp="--" od="---" flag="0" cb="0" un="1">AddDelBackupEntry></fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">AdvInstallFile</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">DelNode</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">DelNodeRunDLL32</fct>
<fct gp="--" od="---" flag="0" cb="0" un="0">DoInfInstall</fct>
<fct gp="02" od="---" flag="0" cb="0" un="1">ExecuteCab</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">ExtractFiles</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">FileSaveMarkNotExist</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">FileSaveRestore</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">FileSaveRestoreOnINF</fct>
<fct gp="--" od="---" flag="0" cb="0" un="0">FileSaveRestore</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">GetVersionFromFile</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">GetVersionFromFileEx</fct>
<fct gp="30" od="---" flag="1" cb="0" un="0">IsNTAdmin</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">LaunchINFSection</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">LaunchINFSectionEx</fct>
<fct gp="30" od="---" flag="0" cb="0" un="0">NeedReboot</fct>
<fct gp="30" od="---" flag="0" cb="0" un="0">NeedRebootInit</fct>
<fct gp="--" od="---" flag="0" cb="0" un="1">OpenINFEngine</fct>
<fct gp="30" od="---" flag="0" cb="0" un="1">RebootCheckOnInstall</fct>
<fct gp="01" od="---" flag="0" cb="0" un="1">RegInstall</fct>
<fct gp="01" od="---" flag="0" cb="0" un="1">RegRestoreAll</fct>
<fct gp="01" od="---" flag="0" cb="0" un="1">RegSaveRestore</fct>
<fct gp="01" od="---" flag="0" cb="0" un="1">RegSaveRestoreOnINF</fct>
<fct gp="01" od="---" flag="0" cb="0" un="0">RegSaveRestore</fct>
<fct gp="02" od="---" flag="0" cb="0" un="0">RegisterOCX</fct>
<fct gp="02" od="---" flag="0" cb="0" un="1">RunSetupCommand</fct>
</fcts>
</lib>
<lib name="imm32.dll" gp="--" flag="0" desc="Multi-User Windows IMM32 API Client Library">
<fcts>
<fct gp="--" od="---" flag="0" cb="1">ImmEnumInputContext</fct>
</fcts>
</lib>
<lib name="msxfs.dll" gp="--" flag="1" desc="Extension for Financial Services (XFS)">
<fcts>
<fct gp="--" od="---" flag="1">WFSRegister</fct>
<fct gp="02" od="---" flag="1">WFSAsyncExecute</fct>
<fct gp="02" od="---" flag="1">WFSExecute</fct>
</fcts>
</lib>
<lib name="schannel.dll" gp="04" flag="1" desc="TLS/SSL Security provider">
<fcts>
<fct gp="04" od="---" flag="1">SslFreeCertificate</fct>
<fct gp="04" od="---" flag="1">SslGenerateRandomBits</fct>
<fct gp="04" od="---" flag="1">SslGetServerIdentity</fct>
</fcts>
</lib>
<lib name="fltmgr.sys" gp="06" flag="1" desc="Windows Filesystem Filter Manager">
<fcts>
<fct gp="19" od="---" flag="1" ti="-">FltEnumerateInstances</fct>
<fct gp="19" od="---" flag="1" ti="-">FltEnumerateFilters</fct>
<fct gp="19" od="---" flag="1" ti="-">FltGetVolumeFromInstance</fct>
</fcts>
</lib>
<lib name="lz32.dll" gp="13" flag="1" ti="1486" desc="LZ Expand/Compress Library">
<fcts>
<fct gp="13" od="---" flag="1" ti="1486">LZRead</fct>
<fct gp="13" od="---" flag="1" ti="1486">LZCopy</fct>
<fct gp="13" od="---" flag="1" ti="1486">LZInit</fct>
<fct gp="13" od="---" flag="1" ti="1486">LZSeek</fct>
<fct gp="13" od="---" flag="1" ti="1486">LZStart</fct>
<fct gp="13" od="---" flag="1" ti="1486">LZClose</fct>
</fcts>
</lib>
<lib name="certcli.dll" gp="04" flag="1" desc="Microsoft Active Directory Certificate Services Client">
<fcts>
<fct gp="04" od="--" flag="0">CACloseCertType</fct>
<fct gp="04" od="--" flag="0">CAEnumNextC</fct>
<fct gp="04" od="--" flag="0">CAEnumFirstC</fct>
<fct gp="04" od="--" flag="0">CADeleteC</fct>
<fct gp="04" od="--" flag="0">CACloseC</fct>
</fcts>
</lib>
<lib name="oleacc.dll" gp="--" flag="0" desc="Active Accessibility Core Component">
<fcts>
<fct gp="12" od="--" flag="0">AccessibleObjectFromWindow</fct>
<fct gp="12" od="--" flag="0">CreateStdAccessibleObject</fct>
</fcts>
</lib>
<lib name="ndis.sys" gp="03" flag="1" desc="Network Driver Interface Library">
<fcts>
<fct gp="03" od="--" flag="0">NdisFreeMemory</fct>
<fct gp="03" od="--" flag="0">NdisAllocateBuffer</fct>
<fct gp="03" od="--" flag="0">NdisFreePacket</fct>
<fct gp="03" od="--" flag="0">NdisAllocateMemory</fct>
<fct gp="03" od="--" flag="0">NdisAllocatePacket</fct>
<fct gp="03" od="--" flag="0">NdisCopyFromPacketToPacket</fct>
<fct gp="03" od="--" flag="0">NdisDeregisterProtocol</fct>
<fct gp="03" od="--" flag="0">NdisRegisterProtocol</fct>
<fct gp="03" od="--" flag="0">NdisAllocateBufferPool</fct>
<fct gp="03" od="--" flag="0">NdisAllocatePacketPool</fct>
<fct gp="03" od="--" flag="0">NdisFreeBufferPool</fct>
<fct gp="03" od="--" flag="0">NdisFreePacketPool</fct>
<fct gp="03" od="--" flag="0">NdisCloseConfiguration</fct>
<fct gp="03" od="--" flag="0">NdisReadConfiguration</fct>
<fct gp="03" od="--" flag="0">NdisOpenConfiguration</fct>
<fct gp="03" od="--" flag="0">NdisMSetAttributesEx</fct>
<fct gp="03" od="--" flag="0">NdisAllocateMemoryWithTag</fct>
<fct gp="03" od="--" flag="0">NdisTerminateWrapper</fct>
<fct gp="03" od="--" flag="0">NdisMRegisterMiniport</fct>
<fct gp="03" od="--" flag="0">NdisInitializeWrapper</fct>
</fcts>
</lib>
<lib name="bcrypt.dll" gp="04" flag="1" desc="Windows Cryptographic Primitives Library">
<fcts>
<fct gp="04" od="--" flag="0" ti="1027">BCryptOpenAlgorithmProvider</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptSetProperty</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptGetProperty</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptGenerateSymmetricKey</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptCloseAlgorithmProvider</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptDecrypt</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptDestroyKey</fct>
<fct gp="04" od="--" flag="0" ti="1027">BCryptGenRandom</fct>
</fcts>
</lib>
<lib name="rdpcfgex.dll" flag="1" gp="08" desc="Remote Desktop Session Host Server Connection Configuration Extension for the RDP protocol">
</lib>
<lib name="rdpwsx.dll" flag="1" gp="08" desc="RDP Extension Library">
<fcts>
<fct gp="08" od="--" flag="0">WsxBrokenConnection</fct>
<fct gp="08" od="--" flag="0">WsxCanLogonProceed</fct>
<fct gp="08" od="--" flag="0">WsxClearContext</fct>
<fct gp="08" od="--" flag="0">WsxConnect</fct>
<fct gp="08" od="--" flag="0">WsxConvertPublishedApp</fct>
<fct gp="08" od="--" flag="0">WsxCopyContext</fct>
<fct gp="08" od="--" flag="0">WsxDisconnect</fct>
<fct gp="08" od="--" flag="0">WsxDuplicateContext</fct>
<fct gp="08" od="--" flag="0">WsxEscape</fct>
<fct gp="08" od="--" flag="0">WsxIcaStackIoControl</fct>
<fct gp="08" od="--" flag="0">WsxInitialize</fct>
<fct gp="08" od="--" flag="0">WsxInitializeClientData</fct>
<fct gp="08" od="--" flag="0">WsxLogonNotify</fct>
<fct gp="08" od="--" flag="0">WsxSendAutoReconnectStatus</fct>
<fct gp="08" od="--" flag="0">WsxSetErrorInfo</fct>
<fct gp="08" od="--" flag="0">WsxVirtualChannelSecurity</fct>
<fct gp="08" od="--" flag="0">WsxWinStationInitialize</fct>
<fct gp="08" od="--" flag="0">WsxWinStationReInitialize</fct>
<fct gp="08" od="--" flag="0">WsxWinStationRundown</fct>
</fcts>
</lib>
<lib name="activeds.dll" flag="1" gp="29" desc="Active Directory Router Layer">
<fcts>
<fct gp="29" od="13" flag="0">ADsGetLastError</fct>
<fct gp="29" od="03" flag="0">ADsGetObject</fct>
<fct gp="29" od="04" flag="0">ADsBuildEnumerator</fct>
<fct gp="29" od="05" flag="0">ADsFreeEnumerator</fct>
<fct gp="29" od="06" flag="0">ADsEnumerateNext</fct>
<fct gp="29" od="07" flag="0">ADsBuildVarArrayStr</fct>
<fct gp="29" od="08" flag="0">ADsBuildVarArrayInt</fct>
<fct gp="29" od="09" flag="0">ADsOpenObject</fct>
<fct gp="29" od="20" flag="1">ADsEncodeBinaryData</fct>
<fct gp="29" od="15" flag="0">FreeADsMem</fct>
</fcts>
</lib>
<lib name="samlib.dll" flag="1" gp="30" desc="Security Account Monitor Library">
<fcts>
<fct gp="30" od="--" flag="1">SamEnumerateDomainsInSamServer</fct>
<fct gp="30" od="--" flag="1">SamQueryInformationUser</fct>
<fct gp="30" od="--" flag="1">SamCloseHandle</fct>
<fct gp="30" od="--" flag="1">SamEnumerateUsersInDomain</fct>
<fct gp="30" od="--" flag="1">SamOpenUser</fct>
<fct gp="30" od="--" flag="1">SamLookupNamesInDomain</fct>
<fct gp="30" od="--" flag="1">SamLookupIdsInDomain</fct>
<fct gp="30" od="--" flag="1">SamOpenDomain</fct>
<fct gp="30" od="--" flag="1">SamConnect</fct>
<fct gp="30" od="--" flag="1">SamFreeMemory</fct>
<fct gp="30" od="--" flag="1">SamGetGroupsForUser</fct>
<fct gp="30" od="--" flag="1">SamRidToSid</fct>
<fct gp="30" od="--" flag="1">SamLookupDomainInSamServer</fct>
<fct gp="30" od="--" flag="1">SamGetAliasMembership</fct>
</fcts>
</lib>
<lib name="avifil32.dll" gp="--" flag="0" desc="Microsoft AVI File support library">
<fcts>
<fct gp="--" od="--" flag="1">AVIFileWriteData</fct>
</fcts>
</lib>
<lib name="wlanapi.dll" flag="1" gp="--" desc="WLAN AutoConfig Client Side Library">
<fcts>
<fct gp="--" od="--" flag="1">WinDbgExtensionDllInit</fct>
<fct gp="--" od="--" flag="1">ExtensionApiVersion</fct>
<fct gp="--" od="--" flag="1">CheckVersion</fct>
</fcts>
</lib>
<lib name="wab32.dll" flag="1" gp="--" desc="Microsoft Contacts Library">
<fcts>
<fct gp="--" od="--" flag="1">WABOpen</fct>
<fct gp="--" od="--" flag="1">WABCreateIProp</fct>
<fct gp="--" od="--" flag="1">WABOpenEx</fct>
</fcts>
</lib>
<lib name="atl80.dll" flag="0" gp="--">
<fcts>
<fct gp="23" od="15" flag="0">AtlComModuleGetClassObject</fct>
<fct gp="23" od="18" flag="1">AtlComModuleRegisterServer</fct>
<fct gp="23" od="22" flag="1">AtlComModuleUnregisterServer</fct>
<fct gp="23" od="--" flag="1">AtlUpdateRegistryFromResourceD</fct>
<fct gp="23" od="30" flag="0">AtlComPtrAssign</fct>
<fct gp="23" od="31" flag="0">AtlComQIPtrAssign</fct>
<fct gp="23" od="32" flag="0">AtlInternalQueryInterface</fct>
<fct gp="23" od="34" flag="0">AtlGetVersion</fct>
<fct gp="23" od="58" flag="0">AtlModuleAddTermFunc</fct>
<fct gp="23" od="61" flag="1">AtlCreateRegistrar</fct>
<fct gp="23" od="64" flag="0">AtlCallTermFunc</fct>
</fcts>
</lib>
<lib name="drprov.dll" flag="1" desc="Microsoft Remote Desktop Session Host Server Network Provider">
<fcts>
</fcts>
</lib>
<lib name="ssleay32.dll" flag="0" gp="04">
<fcts>
<fct gp="04" od="005" flag="0">SSL_CTX_check_private_key</fct>
<fct gp="04" od="006" flag="0">SSL_CTX_ctrl</fct>
<fct gp="04" od="007" flag="0">SSL_CTX_flush_sessions</fct>
<fct gp="04" od="008" flag="0">SSL_CTX_free</fct>
<fct gp="04" od="009" flag="0">SSL_CTX_get_client_CA_list</fct>
<fct gp="04" od="010" flag="0">SSL_CTX_get_verify_callback</fct>
<fct gp="04" od="012" flag="0">SSL_CTX_new</fct>
<fct gp="04" od="015" flag="0">SSL_CTX_set_cipher_list</fct>
<fct gp="04" od="016" flag="0">SSL_CTX_set_client_CA_list</fct>
<fct gp="04" od="017" flag="0">SSL_CTX_set_default_passwd_cb</fct>
<fct gp="04" od="018" flag="0">ssl3_ciphers</fct>
<fct gp="04" od="019" flag="0">SSL_CTX_set_ssl_version</fct>
<fct gp="04" od="021" flag="0">SSL_CTX_set_verify</fct>
<fct gp="04" od="030" flag="0">SSL_CTX_use_certificate_file</fct>
<fct gp="04" od="031" flag="0">SSL_SESSION_free</fct>
<fct gp="04" od="032" flag="0">SSL_SESSION_new</fct>
<fct gp="04" od="033" flag="0">SSL_SESSION_print</fct>
<fct gp="04" od="034" flag="0">SSL_SESSION_print_fp4</fct>
<fct gp="04" od="035" flag="0">SSL_accept</fct>
<fct gp="04" od="036" flag="0">SSL_add_client_CA</fct>
<fct gp="04" od="037" flag="0">SSL_alert_desc_string</fct>
<fct gp="04" od="038" flag="0">SSL_alert_desc_string_long</fct>
<fct gp="04" od="039" flag="0">SSL_alert_type_string</fct>
<fct gp="04" od="040" flag="0">SSL_alert_type_string_long</fct>
<fct gp="04" od="041" flag="0">SSL_check_private_key</fct>
<fct gp="04" od="042" flag="0">SSL_clear</fct>
<fct gp="04" od="043" flag="0">SSL_connect</fct>
<fct gp="04" od="044" flag="0">SSL_copy_session_id</fct>
<fct gp="04" od="045" flag="0">SSL_ctrl</fct>
<fct gp="04" od="046" flag="0">SSL_dup</fct>
<fct gp="04" od="047" flag="0">SSL_dup_CA_list</fct>
<fct gp="04" od="048" flag="0">SSL_free</fct>
<fct gp="04" od="049" flag="0">SSL_get_certificate</fct>
<fct gp="04" od="052" flag="0">SSL_get_cipher_list</fct>
<fct gp="04" od="055" flag="0">SSL_get_ciphers</fct>
<fct gp="04" od="056" flag="0">SSL_get_client_CA_list</fct>
<fct gp="04" od="057" flag="0">SSL_get_default_timeout</fct>
<fct gp="04" od="058" flag="0">SSL_get_error</fct>
<fct gp="04" od="059" flag="0">SSL_get_fd</fct>
<fct gp="04" od="060" flag="0">SSL_get_peer_cert_chain</fct>
<fct gp="04" od="061" flag="0">SSL_get_peer_certificate</fct>
<fct gp="04" od="063" flag="0">SSL_get_rbio</fct>
<fct gp="04" od="064" flag="0">SSL_get_read_ahead</fct>
<fct gp="04" od="065" flag="0">SSL_get_shared_ciphers</fct>
<fct gp="04" od="066" flag="0">SSL_get_ssl_method</fct>
<fct gp="04" od="070" flag="0">SSL_get_verify_mode</fct>
<fct gp="04" od="074" flag="0">SSL_load_error_strings</fct>
<fct gp="04" od="075" flag="0">SSL_new</fct>
<fct gp="04" od="076" flag="0">SSL_peek</fct>
<fct gp="04" od="077" flag="0">SSL_pending</fct>
<fct gp="04" od="078" flag="0">SSL_read</fct>
<fct gp="04" od="079" flag="0">SSL_renegotiate</fct>
<fct gp="04" od="080" flag="0">SSL_rstate_string</fct>
<fct gp="04" od="085" flag="0">SSL_set_client_CA_list</fct>
<fct gp="04" od="086" flag="0">SSL_set_connect_state</fct>
<fct gp="04" od="087" flag="0">SSL_set_fd</fct>
<fct gp="04" od="088" flag="0">SSL_set_read_ahead</fct>
<fct gp="04" od="089" flag="0">SSL_set_rfd</fct>
<fct gp="04" od="090" flag="0">SSL_set_session</fct>
<fct gp="04" od="096" flag="0">SSL_shutdown</fct>
<fct gp="04" od="108" flag="0">SSL_write</fct>
<fct gp="04" od="110" flag="0">SSLv23_client_method</fct>
<fct gp="04" od="150" flag="0">SSL_get_SSL_CTX</fct>
<fct gp="04" od="151" flag="0">SSL_get_ex_data</fct>
<fct gp="04" od="153" flag="0">SSL_get_quiet_shutdown</fct>
<fct gp="04" od="154" flag="0">SSL_get_session</fct>
<fct gp="04" od="155" flag="0">SSL_get_shutdown</fct>
<fct gp="04" od="157" flag="0">SSL_get_verify_result</fct>
<fct gp="04" od="158" flag="0">SSL_set_ex_data</fct>
<fct gp="04" od="160" flag="0">SSL_set_info_callback</fct>
<fct gp="04" od="178" flag="0">SSL_CTX_set_timeout</fct>
<fct gp="04" od="183" flag="0">SSL_library_init</fct>
<fct gp="04" od="242" flag="0">SSL_get1_session</fct>
</fcts>
</lib>
<lib name="libeay32.dll" flag="0" gp="04" desc="OpenSSL Shared Library">
<fcts>
<fct gp="04" od="0007" flag="0">ASN1_INTEGER_get</fct>
<fct gp="04" od="0066" flag="0">BIO_free</fct>
<fct gp="04" od="0100" flag="0">BIO_set</fct>
<fct gp="04" od="0101" flag="0">BIO_set_cipher</fct>
<fct gp="04" od="0102" flag="0">BIO_set_tcp_ndelay</fct>
<fct gp="04" od="0103" flag="0">BIO_sock_cleanup</fct>
<fct gp="04" od="0104" flag="0">BIO_sock_error</fct>
<fct gp="04" od="0105" flag="0">BIO_sock_init</fct>
<fct gp="04" od="0106" flag="0">BIO_sock_non_fatal_error</fct>
<fct gp="04" od="0107" flag="0">BIO_sock_should_retry</fct>
<fct gp="04" od="0108" flag="0">BIO_socket_ioctl</fct>
<fct gp="04" od="0109" flag="0">BIO_write</fct>
<fct gp="04" od="0110" flag="0">BN_CTX_free</fct>
<fct gp="04" od="0111" flag="0">BN_CTX_new</fct>
<fct gp="04" od="0112" flag="0">BN_MONT_CTX_free</fct>
<fct gp="04" od="0113" flag="0">BN_MONT_CTX_new</fct>
<fct gp="04" od="0114" flag="0">BN_MONT_CTX_set</fct>
<fct gp="04" od="0115" flag="0">BN_add</fct>
<fct gp="04" od="0116" flag="0">BN_add_word</fct>
<fct gp="04" od="0117" flag="0">BN_hex2bn</fct>
<fct gp="04" od="0118" flag="0">BN_bin2bn</fct>
<fct gp="04" od="0119" flag="0">BN_bn2hex</fct>
<fct gp="04" od="0120" flag="0">BN_bn2bin</fct>
<fct gp="04" od="0121" flag="0">BN_clear</fct>
<fct gp="04" od="0122" flag="0">BN_clear_bit</fct>
<fct gp="04" od="0123" flag="0">BN_clear_free</fct>
<fct gp="04" od="0124" flag="0">BN_cmp</fct>
<fct gp="04" od="0125" flag="0">BN_copy</fct>
<fct gp="04" od="0126" flag="0">BN_div</fct>
<fct gp="04" od="0127" flag="0">BN_div_word</fct>
<fct gp="04" od="0128" flag="0">BN_dup</fct>
<fct gp="04" od="0129" flag="0">BN_free</fct>
<fct gp="04" od="0130" flag="0">BN_from_montgomery</fct>
<fct gp="04" od="0131" flag="0">BN_gcd</fct>
<fct gp="04" od="0132" flag="0">BN_generate_prime</fct>
<fct gp="04" od="0133" flag="0">BN_get_word</fct>
<fct gp="04" od="0134" flag="0">BN_is_bit_set</fct>
<fct gp="04" od="0135" flag="0">BN_is_prime</fct>
<fct gp="04" od="0136" flag="0">BN_lshift</fct>
<fct gp="04" od="0137" flag="0">BN_lshift1</fct>
<fct gp="04" od="0138" flag="0">BN_mask_bits</fct>
<fct gp="04" od="0140" flag="0">BN_mod_exp</fct>
<fct gp="04" od="0146" flag="0">BN_mod_mul_montgomery</fct>
<fct gp="04" od="0220" flag="0">DSAparams_print</fct>
<fct gp="04" od="0221" flag="0">DSAparams_print_fp</fct>
<fct gp="04" od="0222" flag="0">ERR_clear_error</fct>
<fct gp="04" od="0223" flag="0">ERR_error_string</fct>
<fct gp="04" od="0224" flag="0">ERR_free_strings</fct>
<fct gp="04" od="0225" flag="0">ERR_func_error_string</fct>
<fct gp="04" od="0226" flag="0">ERR_get_err_state_table</fct>
<fct gp="04" od="0227" flag="0">ERR_get_error</fct>
<fct gp="04" od="0228" flag="0">ERR_get_error_line</fct>
<fct gp="04" od="0229" flag="0">ERR_get_state</fct>
<fct gp="04" od="0250" flag="0">ERR_print_errors</fct>
<fct gp="04" od="0251" flag="0">ERR_print_errors_fp</fct>
<fct gp="04" od="0252" flag="0">ERR_put_error</fct>
<fct gp="04" od="0253" flag="0">ERR_reason_error_string</fct>
<fct gp="04" od="0254" flag="0">ERR_remove_state</fct>
<fct gp="04" od="0255" flag="0">EVP_BytesToKey</fct>
<fct gp="04" od="0320" flag="0">EVP_idea_ecb</fct>
<fct gp="04" od="0321" flag="0">EVP_idea_ofb</fct>
<fct gp="04" od="0322" flag="0">EVP_md2</fct>
<fct gp="04" od="0323" flag="0">EVP_md5</fct>
<fct gp="04" od="0324" flag="0">EVP_md_null</fct>
<fct gp="04" od="0325" flag="0">EVP_rc2_cbc</fct>
<fct gp="04" od="0326" flag="0">EVP_rc2_cfb64</fct>
<fct gp="04" od="0327" flag="0">EVP_rc2_ecb</fct>
<fct gp="04" od="0328" flag="0">EVP_rc2_ofb</fct>
<fct gp="04" od="0329" flag="0">EVP_rc4</fct>
<fct gp="04" od="0330" flag="0">EVP_read_pw_string</fct>
<fct gp="04" od="0339" flag="0">MD5</fct>
<fct gp="04" od="0340" flag="0">MD5_Final</fct>
<fct gp="04" od="0341" flag="0">MD5_Init</fct>
<fct gp="04" od="0342" flag="0">MD5_Update</fct>
<fct gp="04" od="0356" flag="0">OBJ_obj2nid</fct>
<fct gp="04" od="0361" flag="0">OBJ_nid2ln</fct>
<fct gp="04" od="0464" flag="0">RAND_bytes</fct>
<fct gp="04" od="0465" flag="0">RAND_cleanup</fct>
<fct gp="04" od="0466" flag="0">RAND_file_name</fct>
<fct gp="04" od="0467" flag="0">RAND_load_file</fct>
<fct gp="04" od="0468" flag="0">RAND_screen</fct>
<fct gp="04" od="0469" flag="0">RAND_seed</fct>
<fct gp="04" od="0470" flag="0">RAND_write_file</fct>
<fct gp="04" od="0471" flag="0">RC2_cbc_encrypt</fct>
<fct gp="04" od="0472" flag="0">RC2_cfb64_encrypt</fct>
<fct gp="04" od="0473" flag="0">RC2_ecb_encrypt</fct>
<fct gp="04" od="0474" flag="0">RC2_encrypt</fct>
<fct gp="04" od="0475" flag="0">RC2_ofb64_encrypt</fct>
<fct gp="04" od="0476" flag="0">RC2_set_key</fct>
<fct gp="04" od="0477" flag="0">RC4</fct>
<fct gp="04" od="0478" flag="0">RC4_options</fct>
<fct gp="04" od="0479" flag="0">RC4_set_key</fct>
<fct gp="04" od="0480" flag="0">RSAPrivateKey_asn1_meth</fct>
<fct gp="04" od="0500" flag="0">SHA</fct>
<fct gp="04" od="0501" flag="0">SHA1</fct>
<fct gp="04" od="0502" flag="0">SHA1_Final</fct>
<fct gp="04" od="0503" flag="0">SHA1_Init</fct>
<fct gp="04" od="0504" flag="0">SHA1_Update</fct>
<fct gp="04" od="0505" flag="0">SHA_Final</fct>
<fct gp="04" od="0506" flag="0">SHA_Init</fct>
<fct gp="04" od="0507" flag="0">SHA_Update</fct>
<fct gp="04" od="0509" flag="0">OpenSSL_add_all_ciphers</fct>
<fct gp="04" od="0510" flag="0">OpenSSL_add_all_digests</fct>
<fct gp="04" od="0511" flag="0">TXT_DB_create_index</fct>
<fct gp="04" od="0512" flag="0">TXT_DB_free</fct>
<fct gp="04" od="0513" flag="0">TXT_DB_get_by_index</fct>
<fct gp="04" od="0514" flag="0">TXT_DB_insert</fct>
<fct gp="04" od="0515" flag="0">TXT_DB_read</fct>
<fct gp="04" od="0516" flag="0">TXT_DB_write</fct>
<fct gp="04" od="0585" flag="0">X509_NAME_oneline</fct>
<fct gp="04" od="0641" flag="0">X509_free</fct>
<fct gp="04" od="0653" flag="0">X509_get_issuer_name</fct>
<fct gp="04" od="0656" flag="0">X509_get_serialNumber0</fct>
<fct gp="04" od="0657" flag="0">X509_get_subject_name0</fct>
<fct gp="04" od="0746" flag="0">d2i_PKCS7_bio</fct>
<fct gp="04" od="0780" flag="0">DES_cfb64_encrypt</fct>
<fct gp="04" od="0781" flag="0">DES_cfb_encrypt</fct>
<fct gp="04" od="0782" flag="0">DES_decrypt3</fct>
<fct gp="04" od="0783" flag="0">DES_ecb3_encrypt</fct>
<fct gp="04" od="0784" flag="0">DES_ecb_encrypt</fct>
<fct gp="04" od="0785" flag="0">DES_ede3_cbc_encrypt</fct>
<fct gp="04" od="0786" flag="0">DES_ede3_cfb64_encrypt</fct>
<fct gp="04" od="0787" flag="0">DES_ede3_ofb64_encrypt</fct>
<fct gp="04" od="0788" flag="0">DES_enc_read</fct>
<fct gp="04" od="0789" flag="0">DES_enc_write</fct>
<fct gp="04" od="0790" flag="0">DES_encrypt1</fct>
<fct gp="04" od="0809" flag="0">DES_set_odd_parity</fct>
<fct gp="04" od="0904" flag="0">sk_find</fct>
<fct gp="04" od="0905" flag="0">sk_free</fct>
<fct gp="04" od="0962" flag="0">HMAC</fct>
<fct gp="04" od="1095" flag="0">BN_init</fct>
<fct gp="04" od="1653" flag="0">sk_value</fct>
<fct gp="04" od="1654" flag="0">sk_num</fct>
<fct gp="04" od="1882" flag="0">BIO_new_mem_buf</fct>
<fct gp="04" od="2145" flag="0">PKCS7_verify</fct>
<fct gp="04" od="2146" flag="0">PKCS7_encrypt</fct>
<fct gp="04" od="2147" flag="0">DES_set_key_unchecked</fct>
<fct gp="04" od="2148" flag="0">SMIME_crlf_copy</fct>
<fct gp="04" od="2149" flag="0">i2d_ASN1_PRINTABLESTRING</fct>
<fct gp="04" od="2150" flag="0">PKCS7_get0_signers</fct>
<fct gp="04" od="2200" flag="0">X509at_get_attr_by_OBJ</fct>
<fct gp="04" od="2201" flag="0">RAND_add</fct>
<fct gp="04" od="2202" flag="0">BIO_number_written</fct>
<fct gp="04" od="2203" flag="0">BIO_number_read</fct>
<fct gp="04" od="2204" flag="0">X509_STORE_CTX_get1_chain</fct>
<fct gp="04" od="2205" flag="0">ERR_load_RAND_strings</fct>
<fct gp="04" od="2206" flag="0">RAND_pseudo_bytes</fct>
<fct gp="04" od="2250" flag="0">PEM_write_bio_X509_REQ_NEW</fct>
<fct gp="04" od="2251" flag="0">PEM_write_X509_REQ_NEW</fct>
<fct gp="04" od="2252" flag="0">BIO_callback_ctrl</fct>
<fct gp="04" od="2253" flag="0">RAND_egd</fct>
<fct gp="04" od="2254" flag="0">RAND_status</fct>
<fct gp="04" od="2433" flag="0">MD4</fct>
<fct gp="04" od="2434" flag="0">MD4_Transform</fct>
<fct gp="04" od="2435" flag="0">MD4_Final</fct>
<fct gp="04" od="2436" flag="0">MD4_Update</fct>
<fct gp="04" od="2437" flag="0">MD4_Init</fct>
<fct gp="04" od="2630" flag="0">EVP_MD_CTX_init</fct>
<fct gp="04" od="3067" flag="0">EVP_DecryptInit_ex</fct>
<fct gp="04" od="3109" flag="0">EVP_DigestInit_ex</fct>
<fct gp="04" od="3155" flag="0">EVP_aes_192_cbc</fct>
<fct gp="04" od="3479" flag="0">SHA256_Init</fct>
<fct gp="04" od="3505" flag="0">X509_STORE_CTX_get0_param</fct>
<fct gp="04" od="3506" flag="0">STORE_delete_arbitrary</fct>
<fct gp="04" od="3507" flag="0">PEM_read_X509_CERT_PAIR</fct>
<fct gp="04" od="3508" flag="0">X509_STORE_set_depth</fct>
<fct gp="04" od="3509" flag="0">ECDSA_get_ex_data</fct>
<fct gp="04" od="3510" flag="0">SHA224</fct>
<fct gp="04" od="3663" flag="0">EC_KEY_new</fct>
<fct gp="04" od="3883" flag="0">EVP_MD_CTX_set_flags</fct>
<fct gp="04" od="3712" flag="0">SHA256_Final</fct>
<fct gp="04" od="3765" flag="0">SHA256_Update</fct>
<fct gp="04" od="3836" flag="0">EVP_CIPHER_iv_length</fct>
<fct gp="04" od="3873" flag="0">EVP_CIPHER_key_length</fct>
</fcts>
</lib>
<lib name="packet.dll" flag="1" gp="03">
<fcts>
<fct gp="03" od="--" flag="1">PacketAllocatePacket</fct>
<fct gp="03" od="--" flag="1">PacketCloseAdapter</fct>
<fct gp="03" od="--" flag="1">PacketFreePacket</fct>
<fct gp="03" od="--" flag="1">PacketGetAdapterNames</fct>
<fct gp="03" od="--" flag="1">PacketGetAirPcapHandle</fct>
<fct gp="03" od="--" flag="1">PacketGetDriverVersion</fct>
<fct gp="03" od="--" flag="1">PacketGetNetInfoEx</fct>
<fct gp="03" od="--" flag="1">PacketGetNetType</fct>
<fct gp="03" od="--" flag="1">PacketGetReadEvent</fct>
<fct gp="03" od="--" flag="1">PacketGetStats</fct>
<fct gp="03" od="--" flag="1">PacketGetStatsEx</fct>
<fct gp="03" od="--" flag="1">PacketGetVersion</fct>
<fct gp="03" od="--" flag="1">PacketInitPacket</fct>
<fct gp="03" od="--" flag="1">PacketIsDumpEnded</fct>
<fct gp="03" od="--" flag="1">PacketLibraryVersion</fct>
<fct gp="03" od="--" flag="1">PacketOpenAdapter</fct>
<fct gp="03" od="--" flag="1">PacketReceivePacket</fct>
<fct gp="03" od="--" flag="1">PacketRequest</fct>
<fct gp="03" od="--" flag="1">PacketSendPacket</fct>
<fct gp="03" od="--" flag="1">PacketSendPackets</fct>
<fct gp="03" od="--" flag="1">PacketSetBpf</fct>
<fct gp="03" od="--" flag="1">PacketSetBuff</fct>
<fct gp="03" od="--" flag="1">PacketSetDumpLimits</fct>
<fct gp="03" od="--" flag="1">PacketSetDumpName</fct>
<fct gp="03" od="--" flag="1">PacketSetHwFilter</fct>
<fct gp="03" od="--" flag="1">PacketSetLoopbackBehavior</fct>
<fct gp="03" od="--" flag="1">PacketSetMinToCopy</fct>
<fct gp="03" od="--" flag="1">PacketSetMode</fct>
<fct gp="03" od="--" flag="1">PacketSetNumWrites</fct>
<fct gp="03" od="--" flag="1">PacketSetReadTimeout</fct>
<fct gp="03" od="--" flag="1">PacketSetSnapLen</fct>
<fct gp="03" od="--" flag="1">PacketStopDriver</fct>
</fcts>
</lib>
<lib name="odbc32.dll" flag="0" gp="--" desc="ODBC Driver Manager Library">
<fcts>
<fct gp="--" od="001" flag="0">SQLAllocConnect</fct>
<fct gp="--" od="002" flag="0">SQLAllocEnv</fct>
<fct gp="--" od="003" flag="0">SQLAllocStmt</fct>
<fct gp="--" od="004" flag="0">SQLBindCol</fct>
<fct gp="--" od="005" flag="0">SQLCancel</fct>
<fct gp="--" od="007" flag="0">SQLConnect</fct>
<fct gp="--" od="009" flag="0">SQLDisconnect</fct>
<fct gp="--" od="011" flag="0">SQLExecDirect</fct>
<fct gp="--" od="012" flag="0">SQLExecute</fct>
<fct gp="--" od="013" flag="0">SQLFetch</fct>
<fct gp="--" od="016" flag="0">SQLFreeStmt</fct>
<fct gp="--" od="018" flag="0">SQLNumResultCols</fct>
<fct gp="--" od="019" flag="0">SQLPrepare</fct>
<fct gp="--" od="020" flag="0">SQLRowCount</fct>
<fct gp="--" od="023" flag="0">SQLTransact</fct>
<fct gp="--" od="024" flag="0">SQLAllocHandle</fct>
<fct gp="--" od="025" flag="0">SQLBindParam</fct>
<fct gp="--" od="026" flag="0">SQLCloseCursor</fct>
<fct gp="--" od="028" flag="0">SQLCopyDesc</fct>
<fct gp="--" od="029" flag="0">SQLEndTran</fct>
<fct gp="--" od="030" flag="0">SQLFetchScroll</fct>
<fct gp="--" od="031" flag="0">SQLFreeHandle</fct>
<fct gp="--" od="032" flag="0">SQLGetConnectAttr</fct>
<fct gp="--" od="036" flag="0">SQLGetDiagRec</fct>
<fct gp="--" od="039" flag="0">SQLSetConnectAttr</fct>
<fct gp="--" od="040" flag="0">SQLColumns</fct>
<fct gp="--" od="041" flag="0">SQLDriverConnect</fct>
<fct gp="--" od="042" flag="0">SQLGetConnectOption</fct>
<fct gp="--" od="043" flag="0">SQLGetData</fct>
<fct gp="--" od="044" flag="0">SQLGetFunctions</fct>
<fct gp="--" od="045" flag="0">SQLGetInfo</fct>
<fct gp="--" od="048" flag="0">SQLParamData</fct>
<fct gp="--" od="049" flag="0">SQLPutData</fct>
<fct gp="--" od="050" flag="0">SQLSetConnectOption</fct>
<fct gp="--" od="055" flag="0">SQLBrowseConnect</fct>
<fct gp="--" od="056" flag="0">SQLColumnPrivileges</fct>
<fct gp="--" od="061" flag="0">SQLMoreResults</fct>
<fct gp="--" od="062" flag="0">SQLNativeSql</fct>
<fct gp="--" od="063" flag="0">SQLNumParams</fct>
<fct gp="--" od="064" flag="0">SQLParamOptions</fct>
<fct gp="--" od="065" flag="0">SQLPrimaryKeys</fct>
<fct gp="--" od="066" flag="0">SQLProcedureColumns</fct>
<fct gp="--" od="067" flag="0">SQLProcedures</fct>
<fct gp="--" od="068" flag="0">SQLSetPos</fct>
<fct gp="--" od="069" flag="0">SQLSetScrollOptions</fct>
<fct gp="--" od="070" flag="0">SQLTablePrivileges</fct>
<fct gp="--" od="071" flag="0">SQLDrivers</fct>
<fct gp="--" od="072" flag="0">SQLBindParameter</fct>
<fct gp="--" od="073" flag="0">SQLSetDescField</fct>
<fct gp="--" od="074" flag="0">SQLSetDescRec</fct>
<fct gp="--" od="075" flag="0">SQLSetEnvAttr</fct>
<fct gp="--" od="076" flag="0">SQLSetStmtAttr</fct>
<fct gp="--" od="077" flag="0">SQLAllocHandleStd</fct>
<fct gp="--" od="078" flag="0">SQLBulkOperations</fct>
<fct gp="--" od="079" flag="0">CloseODBCPerfData</fct>
<fct gp="--" od="080" flag="0">CollectODBCPerfData</fct>
<fct gp="--" od="087" flag="0">DllBidEntryPoint</fct>
<fct gp="--" od="088" flag="0">GetODBCSharedData</fct>
<fct gp="--" od="089" flag="0">LockHandle</fct>
<fct gp="--" od="090" flag="0">ODBCInternalConnect</fct>
<fct gp="--" od="091" flag="0">OpenODBCPerfData</fct>
<fct gp="--" od="092" flag="0">PostComponentError</fct>
<fct gp="--" od="093" flag="0">PostODBCComponentError</fct>
<fct gp="--" od="094" flag="0">PostODBCError</fct>
<fct gp="--" od="095" flag="0">SQLCancelHandle</fct>
<fct gp="--" od="096" flag="0">SearchStatusCode</fct>
<fct gp="--" od="107" flag="0">SQLConnect</fct>
<fct gp="--" od="108" flag="0">SQLDescribeColW</fct>
<fct gp="--" od="111" flag="0">SQLExecDirect</fct>
<fct gp="--" od="117" flag="0">SQLGetCursorName</fct>
<fct gp="--" od="119" flag="0">SQLPrepare</fct>
<fct gp="--" od="127" flag="0">SQLColAttribute</fct>
<fct gp="--" od="132" flag="0">SQLGetConnectAttr</fct>
<fct gp="--" od="133" flag="0">SQLGetDescField</fct>
<fct gp="--" od="134" flag="0">SQLGetDescRec</fct>
<fct gp="--" od="136" flag="0">SQLGetDiagRecW</fct>
<fct gp="--" od="138" flag="0">SQLGetStmtAttr</fct>
<fct gp="--" od="139" flag="0">SQLSetConnectAttr</fct>
<fct gp="--" od="140" flag="0">SQLColumns</fct>
<fct gp="--" od="141" flag="0">SQLDriverConnect</fct>
<fct gp="--" od="142" flag="0">SQLGetConnectOption</fct>
<fct gp="--" od="145" flag="0">SQLGetInfo</fct>
<fct gp="--" od="147" flag="0">SQLGetTypeInfo</fct>
<fct gp="--" od="150" flag="0">SQLSetConnectOption</fct>
<fct gp="--" od="152" flag="0">SQLSpecialColumns</fct>
<fct gp="--" od="153" flag="0">SQLStatistics</fct>
<fct gp="--" od="154" flag="0">SQLTables</fct>
<fct gp="--" od="155" flag="0">SQLBrowseConnect</fct>
<fct gp="--" od="156" flag="0">SQLColumnPrivileges</fct>
<fct gp="--" od="157" flag="0">SQLDataSources</fct>
<fct gp="--" od="160" flag="0">SQLForeignKeys</fct>
<fct gp="--" od="162" flag="0">SQLNativeSql</fct>
<fct gp="--" od="170" flag="0">SQLTablePrivileges</fct>
<fct gp="--" od="171" flag="0">SQLDrivers</fct>
<fct gp="--" od="173" flag="0">SQLSetDescField</fct>
<fct gp="--" od="176" flag="0">SQLSetStmtAttr</fct>
<fct gp="--" od="207" flag="0">SQLConnect</fct>
<fct gp="--" od="208" flag="0">SQLDescribeCol</fct>
<fct gp="--" od="210" flag="0">SQLError</fct>
<fct gp="--" od="211" flag="0">SQLExecDirect</fct>
<fct gp="--" od="239" flag="0">SQLSetConnectAttr</fct>
<fct gp="--" od="241" flag="0">SQLDriverConnect</fct>
<fct gp="--" od="242" flag="0">SQLGetConnectOption</fct>
<fct gp="--" od="253" flag="0">SQLStatistics</fct>
<fct gp="--" od="255" flag="0">SQLBrowseConnect</fct>
<fct gp="--" od="256" flag="0">SQLColumnPrivileges</fct>
<fct gp="--" od="257" flag="0">SQLDataSources</fct>
<fct gp="--" od="262" flag="0">SQLNativeSql</fct>
<fct gp="--" od="270" flag="0">SQLTablePrivileges</fct>
<fct gp="--" od="271" flag="0">SQLDrivers</fct>
</fcts>
</lib>
<lib name="winshfhc.dll" flag="1" >
<fcts>
<fct gp="--" od="101" flag="0">EstimateFileRiskLevel</fct>
</fcts>
</lib>
<lib name="netplwiz.dll" flag="1" desc="Map Network Drives/Network Places Wizard">
<fcts>
<fct gp="30" od="---" flag="0">PassportWizardRunDll</fct>
</fcts>
</lib>
<lib name="shimgvw.dll" flag="1" desc="Photo Gallery Viewer">
<fcts>
<fct gp="--" od="--" flag="0">ImageRecompress</fct>
</fcts>
</lib>
<lib name="wldap32.dll" flag="1" gp="29" desc="Win32 LDAP Library">
<fcts>
<fct gp="29" od="--" flag="0">ldap_rename_ext_s</fct>
<fct gp="29" od="--" flag="0">ldap_compare_ext_s</fct>
<fct gp="29" od="--" flag="0">ldap_start_tls_s</fct>
<fct gp="29" od="--" flag="0">ldap_create_vlv_control</fct>
<fct gp="29" od="--" flag="0">ldap_sasl_bind</fct>
<fct gp="29" od="012" flag="0">ldap_get_option</fct>
<fct gp="29" od="013" flag="0">ldap_unbind</fct>
<fct gp="29" od="014" flag="0">ber_alloc_t</fct>
<fct gp="29" od="022" flag="0">ldap_err2string</fct>
<fct gp="29" od="026" flag="0">ldap_first_entry</fct>
<fct gp="29" od="027" flag="0">ldap_next_entry</fct>
<fct gp="29" od="030" flag="0">ldap_get_dn</fct>
<fct gp="29" od="031" flag="0">ldap_dn2ufn</fct>
<fct gp="29" od="032" flag="0">ldap_first_attribute</fct>
<fct gp="29" od="033" flag="0">ldap_next_attribute</fct>
<fct gp="29" od="034" flag="0">ldap_get_values</fct>
<fct gp="29" od="035" flag="0">ldap_get_values_len</fct>
<fct gp="29" od="036" flag="0">ldap_count_entries</fct>
<fct gp="29" od="037" flag="0">ldap_count_values</fct>
<fct gp="29" od="038" flag="0">ldap_value_free</fct>
<fct gp="29" od="039" flag="0">ldap_explode_dn</fct>
<fct gp="29" od="040" flag="0">ldap_result</fct>
<fct gp="29" od="041" flag="0">ldap_msgfree</fct>
<fct gp="29" od="045" flag="0">ldap_bindW</fct>
<fct gp="29" od="046" flag="0">ldap_bind_s</fct>
<fct gp="29" od="050" flag="0">ldap_search_s</fct>
<fct gp="29" od="051" flag="0">ldap_search_st</fct>
<fct gp="29" od="052" flag="0">ldap_compare_s</fct>
<fct gp="29" od="053" flag="0">LdapUnicodeToUTF8</fct>
<fct gp="29" od="054" flag="0">ber_bvfree</fct>
<fct gp="29" od="055" flag="0">cldap_open</fct>
<fct gp="29" od="056" flag="0">ldap_add</fct>
<fct gp="29" od="057" flag="0">ldap_add_ext</fct>
<fct gp="29" od="058" flag="0">ldap_add_ext</fct>-
<fct gp="29" od="059" flag="0">ldap_simple_bind</fct>
<fct gp="29" od="060" flag="0">ldap_simple_bind_s</fct>
<fct gp="29" od="061" flag="0">ldap_bind</fct>
<fct gp="29" od="062" flag="0">ldap_add_extW</fct>
<fct gp="29" od="063" flag="0">ldap_add_ext_s</fct>
<fct gp="29" od="064" flag="0">ldap_add_ext_s</fct>-
<fct gp="29" od="065" flag="0">ldap_add_ext_s</fct>
<fct gp="29" od="066" flag="0">ldap_add_s</fct>
<fct gp="29" od="067" flag="0">ldap_modrdn2</fct>
<fct gp="29" od="068" flag="0">ldap_modrdn2_s</fct>
<fct gp="29" od="069" flag="0">ldap_add_s</fct>
<fct gp="29" od="070" flag="0">ldap_bind</fct>
<fct gp="29" od="071" flag="0">ldap_bind</fct>
<fct gp="29" od="072" flag="0">ldap_bind_s</fct>
<fct gp="29" od="073" flag="0">ldap_bind_s</fct>
<fct gp="29" od="074" flag="0">ldap_close_extended_op</fct>
<fct gp="29" od="075" flag="0">ldap_compare</fct>
<fct gp="29" od="076" flag="0">ldap_compare</fct>
<fct gp="29" od="077" flag="0">ldap_count_values_len</fct>
<fct gp="29" od="078" flag="0">ldap_compare_ext</fct>
<fct gp="29" od="079" flag="0">ldap_value_free_len</fct>
<fct gp="29" od="080" flag="0">ldap_compare_ext</fct>
<fct gp="29" od="088" flag="0">ldap_connect</fct>
<fct gp="29" od="096" flag="0">ldap_count_values</fct>
<fct gp="29" od="113" flag="0">ldap_delete_s</fct>
<fct gp="29" od="120" flag="0">ldap_escape_filter_element</fct>
<fct gp="29" od="122" flag="0">ldap_explode_dn</fct>
<fct gp="29" od="127" flag="0">ldap_first_attribute</fct>
<fct gp="29" od="133" flag="0">ldap_get_dn</fct>
<fct gp="29" od="134" flag="0">ldap_get_next_page</fct>
<fct gp="29" od="135" flag="0">ldap_get_next_page_s</fct>
<fct gp="29" od="136" flag="0">ldap_get_option</fct>
<fct gp="29" od="137" flag="0">ldap_get_option</fct>
<fct gp="29" od="138" flag="0">ldap_get_paged_count</fct>
<fct gp="29" od="139" flag="0">ldap_get_values</fct>
<fct gp="29" od="140" flag="0">ldap_get_values</fct>
<fct gp="29" od="141" flag="0">ldap_get_values_len</fct>
<fct gp="29" od="142" flag="0">ldap_get_values_len</fct>
<fct gp="29" od="143" flag="0">ldap_init</fct>
<fct gp="29" od="144" flag="0">ldap_init</fct>
<fct gp="29" od="145" flag="0">ldap_init</fct>
<fct gp="29" od="146" flag="0">ldap_memfree</fct>
<fct gp="29" od="147" flag="0">ldap_memfree</fct>
<fct gp="29" od="148" flag="0">ldap_modify</fct>
<fct gp="29" od="149" flag="0">ldap_modify</fct>
<fct gp="29" od="150" flag="0">ldap_modify_ext</fct>
<fct gp="29" od="157" flag="0">ldap_modify_s</fct>
<fct gp="29" od="160" flag="0">ldap_modrdn2_s</fct>
<fct gp="29" od="161" flag="0">ldap_modrdn2_s</fct>
<fct gp="29" od="162" flag="0">ldap_modrdn</fct>
<fct gp="29" od="163" flag="0">ldap_modrdnW</fct>
<fct gp="29" od="164" flag="0">ldap_modrdn_s</fct>
<fct gp="29" od="165" flag="0">ldap_modrdn_s</fct>
<fct gp="29" od="166" flag="0">ldap_next_attribute</fct>
<fct gp="29" od="167" flag="0">ldap_next_attribute</fct>
<fct gp="29" od="168" flag="0">ldap_next_reference</fct>
<fct gp="29" od="169" flag="0">ldap_open</fct>
<fct gp="29" od="170" flag="0">ldap_open</fct>
<fct gp="29" od="200" flag="0">ldap_memfree</fct>
<fct gp="29" od="201" flag="0">ldap_startup</fct>
<fct gp="29" od="202" flag="0">ldap_cleanup</fct>
<fct gp="29" od="203" flag="0">ldap_search_ext_s</fct>
<fct gp="29" od="204" flag="0">ldap_search_init_page</fct>
<fct gp="29" od="205" flag="0">ldap_search_init_page</fct>
<fct gp="29" od="206" flag="0">ldap_search_init_page</fct>
<fct gp="29" od="207" flag="0">ldap_search_s</fct>
<fct gp="29" od="208" flag="0">ldap_search_s</fct>
<fct gp="29" od="209" flag="0">ldap_search_st</fct>
<fct gp="29" od="210" flag="0">ldap_search_st</fct>
<fct gp="29" od="211" flag="0">ldap_set_option</fct>
<fct gp="29" od="217" flag="0">ldap_search_ext_s1</fct>
<fct gp="29" od="223" flag="0">ldap_value_free</fct>
<fct gp="29" od="224" flag="0">ldap_value_free</fct>
<fct gp="29" od="301" flag="0">ber_free</fct>
</fcts>
</lib>
<lib name="scarddlg.dll" flag="1" gp="22" desc="SCardDlg - Smart Card Common Dialog">
<fcts>
<fct gp="22" od="1" flag="1">GetOpenCardName</fct>
<fct gp="22" od="2" flag="1">GetOpenCardName</fct>
<fct gp="22" od="3" flag="1">SCardDlgExtendedError</fct>
<fct gp="22" od="4" flag="1">SCardUIDlgSelectCard</fct>
<fct gp="22" od="5" flag="1">SCardUIDlgSelectCard</fct>
<fct gp="22" od="5" flag="1">SCardListInterfaces</fct>
<fct gp="22" od="5" flag="1">SCardSetCardTypeProviderName</fct>
</fcts>
</lib>
<lib name="mswsock.dll" flag="1" gp="03" desc="Microsoft Windows Sockets 2.0 Service Provider">
<fcts>
<fct gp="03" od="--" flag="1">NPLoadNameSpaces</fct>
<fct gp="03" od="--" flag="1">NPGetResourceParent</fct>
<fct gp="03" od="--" flag="1">NPAddConnection</fct>
<fct gp="03" od="--" flag="1">NPEnumResource</fct>
<fct gp="03" od="--" flag="1">NPGetResourceInformation</fct>
<fct gp="03" od="--" flag="1">EnumProtocols</fct>
<fct gp="03" od="--" flag="0">GetAddressByame</fct>
<fct gp="--" od="--" flag="0">GetNameByType</fct>
<fct gp="--" od="--" flag="0">GetTypeByName</fct>
<fct gp="03" od="--" flag="0">GetService</fct>
<fct gp="03" od="--" flag="0">SetService</fct>
</fcts>
</lib>
<lib name="wintrust.dll" flag="1" gp="04" desc="Microsoft Trust Verification APIs">
<fcts>
<fct gp="04" od="--" flag="1">WintrustGetDefaultForUsage</fct>
<fct gp="04" od="--" flag="1">WinVerifyTrust</fct>
<fct gp="04" od="--" flag="1">CryptCATGetAttrInfo</fct>
<fct gp="04" od="--" flag="1">CryptCATCDFClose</fct>
<fct gp="04" od="--" flag="1">CryptCATCatalogInfoFromContext</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminEnumCatalogFromHash</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminCalcHashFromFileHandle</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminReleaseCatalogContext</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminReleaseContext</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminAcquireContext</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminAcquireContext2</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminAddCatalog</fct>
<fct gp="04" od="--" flag="1">CryptCATAdminRemoveCatalog</fct>
</fcts>
</lib>
<lib name="lsasrv.dll" flag="1" gp="30" desc="LSA Server Library">
<fcts>
<fct gp="30" od="--" flag="1">LsaGetLogonSessionData</fct>
<fct gp="30" od="--" flag="1">LsaIRegisterNotification</fct>
<fct gp="30" od="--" flag="1">LsaICancelNotification</fct>
<fct gp="30" od="--" flag="1">LsaLookupSids</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaLookupNames</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaLookupNames2</fct>
<fct gp="30" od="--" flag="0">LsaNtStatusToWinError</fct>
<fct gp="30" od="--" flag="1">LsaLookupPrivilegeName</fct>
<fct gp="30" od="--" flag="1">PasswordChangeNotify</fct>
<fct gp="30" od="--" flag="1">InitializeChangeNotify</fct>
<fct gp="30" od="--" flag="1">LsaICryptUnprotectData</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaQuerySecret</fct>
</fcts>
</lib>
<lib name="gdi32.dll" flag="0" gp="--" desc="GDI Client Library">
<fcts>
<fct gp="--" od="--" flag="0" cb="1">EnumFontFamilies</fct>
<fct gp="--" od="--" flag="0" cb="1">EnumFontFamiliesEx</fct>
<fct gp="--" od="--" flag="0" cb="1">EnumFonts</fct>
<fct gp="--" od="--" flag="0" cb="1">EnumICMProfiles</fct>
<fct gp="--" od="--" flag="0" cb="1">EnumObjects</fct>
<fct gp="--" od="--" flag="1">EngLoadModule</fct>
<fct gp="--" od="--" flag="0">CreateBitmap</fct>
</fcts>
</lib>
<lib name="security.dll" flag="1" gp="--" desc="Security Support Provider Interface">
<fcts>
</fcts>
</lib>
<lib name="pdh.dll" flag="1" gp="16" desc="Windows Performance Data Helper Library">
<fcts>
<fct gp="16" od="--" flag="0">PdhOpenQuery</fct>
<fct gp="16" od="--" flag="1">PdhAddCounter</fct>
<fct gp="16" od="--" flag="0">PdhCollectQueryData</fct>
<fct gp="16" od="--" flag="0">PdhGetFormattedCounterValue</fct>
<fct gp="16" od="--" flag="0">PdhCloseQuery</fct>
<fct gp="16" od="--" flag="1">PdhAdd009Counter</fct>
<fct gp="16" od="--" flag="1">PdhAdd009Counter</fct>
<fct gp="16" od="--" flag="1">PdhCreateSQLTables</fct>
<fct gp="16" od="--" flag="1">PdhCreateSQLTables</fct>
<fct gp="16" od="--" flag="1">PdhBindInputDataSource</fct>
<fct gp="16" od="--" flag="0">PdhBrowseCounters</fct>
<fct gp="16" od="--" flag="0">SetSoftwareUpdateAdvertisementState</fct>
<fct gp="16" od="--" flag="0">GetSoftwareUpdateInfo</fct>
</fcts>
</lib>
<lib name="msvbvm60.dll" flag="0" desc="Microsoft Virtual Basic Virtual Machine">
<fcts>
<fct gp="--" od="100" flag="0">ThunRTMain</fct>
<fct gp="--" od="183" flag="0">__vbaCopyBytes</fct>
<fct gp="02" od="186" flag="1">ProcCallEngine</fct>
<fct gp="02" od="187" flag="0">DllFunctionCall</fct>
<fct gp="--" od="199" flag="0">MethCallEngine</fct>
<fct gp="--" od="300" flag="0">GetMem2</fct>
<fct gp="--" od="301" flag="0">GetMem4</fct>
<fct gp="--" od="302" flag="0">GetMem8</fct>
<fct gp="--" od="303" flag="0">GetMemStr</fct>
<fct gp="--" od="304" flag="0">GetMemVar</fct>
<fct gp="--" od="305" flag="0">GetMemObj</fct>
<fct gp="--" od="306" flag="0">PutMem2</fct>
<fct gp="--" od="307" flag="0">PutMem4</fct>
<fct gp="--" od="308" flag="0">PutMem8</fct>
<fct gp="--" od="309" flag="0">PutMemStr</fct>
<fct gp="--" od="310" flag="0">PutMemVar</fct>
<fct gp="--" od="311" flag="0">PutMemObj</fct>
<fct gp="--" od="312" flag="0">SetMemVar</fct>
<fct gp="--" od="313" flag="0">SetMemObj</fct>
<fct gp="--" od="512" flag="0">rtcLeftBstr</fct>
<fct gp="--" od="513" flag="0">rtcLeftVar</fct>
<fct gp="--" od="514" flag="0">rtcRightBstr</fct>
<fct gp="--" od="515" flag="0">rtcRightVar</fct>
<fct gp="--" od="516" flag="0">rtcAnsiValueBstr</fct>
<fct gp="--" od="517" flag="0">rtcLowerCaseBstr</fct>
<fct gp="--" od="518" flag="0">rtcLowerCaseVar</fct>
<fct gp="--" od="519" flag="0">rtcTrimBstr</fct>
<fct gp="--" od="520" flag="0">rtcTrimVar</fct>
<fct gp="--" od="521" flag="0">rtcLeftTrimBstr</fct>
<fct gp="--" od="522" flag="0">rtcLeftTrimVar</fct>
<fct gp="--" od="523" flag="0">rtcRightTrimBstr</fct>
<fct gp="--" od="524" flag="0">rtcRightTrimVar</fct>
<fct gp="--" od="525" flag="0">rtcSpaceBstr</fct>
<fct gp="--" od="526" flag="0">rtcSpaceVar</fct>
<fct gp="--" od="527" flag="0">rtcUpperCaseBstr</fct>
<fct gp="--" od="528" flag="0">rtcUpperCaseVar</fct>
<fct gp="06" od="529" flag="1">rtcKillFiles</fct>
<fct gp="--" od="530" flag="1">rtcChangeDir</fct>
<fct gp="06" od="531" flag="1">rtcMakeDir</fct>
<fct gp="06" od="532" flag="1">rtcRemoveDir</fct>
<fct gp="--" od="533" flag="1">rtcChangeDrive</fct>
<fct gp="--" od="537" flag="0">rtcBstrFromAnsi</fct>
<fct gp="--" od="538" flag="0">rtcPackDate</fct>
<fct gp="--" od="539" flag="0">rtcPackTime</fct>
<fct gp="--" od="540" flag="0">rtcGetDateValue</fct>
<fct gp="--" od="541" flag="0">rtcGetTimeValue</fct>
<fct gp="--" od="542" flag="0">rtcGetDayOfMonth</fct>
<fct gp="--" od="543" flag="0">rtcGetHourOfDay</fct>
<fct gp="--" od="544" flag="0">rtcGetMinuteOfHour</fct>
<fct gp="--" od="545" flag="0">rtcGetMonthOfYear</fct>
<fct gp="--" od="546" flag="0">rtcGetPresentDate</fct>
<fct gp="--" od="547" flag="0">rtcGetSecondOfMinute</fct>
<fct gp="--" od="548" flag="0">rtcSetDateVar</fct>
<fct gp="--" od="549" flag="0">rtcSetDateBstr</fct>
<fct gp="--" od="550" flag="0">rtcSetTimeVar</fct>
<fct gp="--" od="551" flag="0">rtcSetTimeBstr</fct>
<fct gp="--" od="552" flag="0">rtcGetDayOfWeek</fct>
<fct gp="--" od="553" flag="0">rtcGetYear</fct>
<fct gp="--" od="544" flag="0">rtcGetMinuteOfHour</fct>
<fct gp="--" od="545" flag="0">rtcGetMonthOfYear</fct>
<fct gp="--" od="546" flag="0">rtcGetPresentDate</fct>
<fct gp="--" od="556" flag="0">rtcIsArray</fct>
<fct gp="--" od="557" flag="0">rtcIsDate</fct>
<fct gp="--" od="559" flag="0">rtcIsError</fct>
<fct gp="--" od="561" flag="0">rtcIsNumeric</fct>
<fct gp="--" od="574" flag="0">rtcOctBstrFromVar</fct>
<fct gp="06" od="568" flag="0">rtcFileSeek</fct>
<fct gp="06" od="570" flag="0">rtcFileLength</fct>
<fct gp="06" od="571" flag="0">rtcEndOfFile</fct>
<fct gp="--" od="573" flag="0">rtcHexVarFromVar</fct>
<fct gp="06" od="576" flag="0">rtcFileCopy</fct>
<fct gp="06" od="578" flag="0">rtcFileLen</fct>
<fct gp="06" od="579" flag="0">rtcGetFileAttr</fct>
<fct gp="06" od="580" flag="0">rtcSetFileAttr</fct>
<fct gp="--" od="581" flag="0">rtcR8ValFromBstr</fct>
<fct gp="--" od="582" flag="0">rtcSin</fct>
<fct gp="--" od="583" flag="0">rtcCos</fct>
<fct gp="--" od="584" flag="0">rtcTan</fct>
<fct gp="--" od="585" flag="0">rtcAtn</fct>
<fct gp="--" od="586" flag="0">rtcExp</fct>
<fct gp="--" od="587" flag="0">rtcLog</fct>
<fct gp="--" od="588" flag="0">rtcRgb</fct>
<fct gp="--" od="589" flag="0">rtcQBColor</fct>
<fct gp="04" od="593" flag="1">rtcRandomNext</fct>
<fct gp="04" od="594" flag="1">rtcRandomize</fct>
<fct gp="--" od="595" flag="0">rtcMsgBox</fct>
<fct gp="--" od="596" flag="0">rtcInputBox</fct>
<fct gp="--" od="597" flag="0">rtcAppActivate</fct>
<fct gp="--" od="598" flag="0">rtcDoEvents</fct>
<fct gp="22" od="599" flag="1">rtcSendKeys</fct>
<fct gp="02" od="600" flag="1">rtcShell</fct>
<fct gp="--" od="601" flag="0">rtcArray</fct>
<fct gp="--" od="602" flag="0">__vbaVargUnk</fct>
<fct gp="--" od="603" flag="0">__vbaVargUnkAddref</fct>
<fct gp="--" od="604" flag="0">__vbaVerifyVarObj</fct>
<fct gp="--" od="605" flag="0">rtcGetErl</fct>
<fct gp="--" od="606" flag="0">rtcStringBstr</fct>
<fct gp="--" od="607" flag="0">rtcStringVar</fct>
<fct gp="--" od="608" flag="0">rtcVarBstrFromAnsi</fct>
<fct gp="--" od="609" flag="0">rtcGetDateBstr</fct>
<fct gp="--" od="610" flag="0">rtcGetDateVar</fct>
<fct gp="--" od="611" flag="0">rtcGetTimeBstr</fct>
<fct gp="--" od="612" flag="0">rtcGetTimeVar</fct>
<fct gp="--" od="613" flag="0">rtcVarStrFromVar</fct>
<fct gp="--" od="614" flag="1">rtcSqr</fct>
<fct gp="--" od="615" flag="0">rtcIMEStatus</fct>
<fct gp="--" od="616" flag="0">rtcLeftCharBstr</fct>
<fct gp="--" od="617" flag="0">rtcLeftCharVar</fct>
<fct gp="--" od="618" flag="0">rtcRightCharBstr</fct>
<fct gp="--" od="619" flag="0">rtcRightCharVar</fct>
<fct gp="--" od="620" flag="0">rtcInputCharCount</fct>
<fct gp="--" od="623" flag="1">__vbaWriteFile</fct>
<fct gp="--" od="624" flag="0">rtcGetHostLCID</fct>
<fct gp="--" od="625" flag="1">rtcCreateObject</fct>
<fct gp="--" od="626" flag="0">rtcGetObject</fct>
<fct gp="--" od="627" flag="1">rtcAppleScript</fct>
<fct gp="--" od="628" flag="0">rtcMidBstr</fct>
<fct gp="--" od="629" flag="0">rtcMidVar</fct>
<fct gp="--" od="630" flag="0">rtcInStr</fct>
<fct gp="--" od="630" flag="0">rtcInStr</fct>
<fct gp="--" od="631" flag="0">rtcMidCharBstr</fct>
<fct gp="--" od="632" flag="0">rtcMidCharVar</fct>
<fct gp="--" od="633" flag="0">rtcInStrChar</fct>
<fct gp="--" od="634" flag="0">rtBstrFromErrVar</fct>
<fct gp="--" od="635" flag="0">rtBoolFromErrVar</fct>
<fct gp="--" od="636" flag="0">rtCyFromErrVar</fct>
<fct gp="--" od="637" flag="0">rtI2FromErrVar</fct>
<fct gp="--" od="638" flag="0">rtI4FromErrVar</fct>
<fct gp="--" od="639" flag="0">rtR4FromErrVar</fct>
<fct gp="--" od="640" flag="0">rtR8FromErrVar</fct>
<fct gp="--" od="641" flag="0">rtcDateFromVar</fct>
<fct gp="--" od="641" flag="0">rtcVarFromVar</fct>
<fct gp="--" od="643" flag="0">rtcCVErrFromVar</fct>
<fct gp="--" od="644" flag="0">VarPtr</fct>
<fct gp="--" od="645" flag="0">rtcDir</fct>
<fct gp="--" od="646" flag="0">rtcCurrentDirBstr</fct>
<fct gp="--" od="647" flag="0">rtcCurrentDir</fct>
<fct gp="--" od="648" flag="0">rtcFreeFile</fct>
<fct gp="--" od="649" flag="0">rtcCompareBstr</fct>
<fct gp="--" od="650" flag="0">rtcBstrFromFormatVar</fct>
<fct gp="--" od="652" flag="0">rtcVarFromError</fct>
<fct gp="--" od="655" flag="0">rtcFixVar</fct>
<fct gp="--" od="656" flag="0">rtcCurrentDirBstr</fct>
<fct gp="--" od="661" flag="0">rtcDateAdd</fct>
<fct gp="--" od="666" flag="0">rtcEnvironVar</fct>
<fct gp="--" od="667" flag="0">rtcEnvironBstr</fct>
<fct gp="--" od="669" flag="0">rtcCommandBstr</fct>
<fct gp="--" od="670" flag="0">rtcCommandVar</fct>
<fct gp="--" od="672" flag="0">rtcSYD</fct>
<fct gp="--" od="675" flag="0">rtcPPMT</fct>
<fct gp="--" od="671" flag="0">rtcSLN</fct>
<fct gp="--" od="677" flag="0">rtcPV</fct>
<fct gp="--" od="680" flag="0">rtcRate</fct>
<fct gp="--" od="681" flag="0">rtcImmediateIf</fct>
<fct gp="--" od="683" flag="0">rtcMIRR</fct>
<fct gp="--" od="685" flag="0">rtcErrObj</fct>
<fct gp="--" od="686" flag="0">rtUI1FromErrVar</fct>
<fct gp="--" od="687" flag="0">rtcVarDateFromVar</fct>
<fct gp="--" od="688" flag="0">_adj_fdiv_m32</fct>
<fct gp="--" od="689" flag="0">rtcGetSetting</fct>
<fct gp="--" od="690" flag="0">rtcSaveSetting</fct>
<fct gp="--" od="691" flag="1">rtcDeleteSetting</fct>
<fct gp="--" od="692" flag="0">rtcGetAllSettings</fct>
<fct gp="--" od="693" flag="0">rtcByteValueBstr</fct>
<fct gp="--" od="694" flag="0">rtcBstrFromByte</fct>
<fct gp="--" od="695" flag="0">rtcVarBstrFromByte</fct>
<fct gp="--" od="696" flag="0">rtcCharValueBstr</fct>
<fct gp="--" od="697" flag="0">rtcBstrFromChar</fct>
<fct gp="--" od="698" flag="0">rtcVarBstrFromChar</fct>
<fct gp="--" od="699" flag="0">rtcSetCurrentCalendar</fct>
<fct gp="--" od="700" flag="0">rtcGetCurrentCalendar</fct>
<fct gp="--" od="701" flag="0">_adj_fdiv_m32i</fct>
<fct gp="--" od="702" flag="0">rtcFormatNumber2</fct>
<fct gp="--" od="703" flag="0">rtcFormatCurrency</fct>
<fct gp="--" od="704" flag="0">rtcFormatPercent</fct>
<fct gp="--" od="705" flag="0">rtcFormatDateTime</fct>
<fct gp="--" od="706" flag="0">rtcWeekdayName</fct>
<fct gp="--" od="707" flag="0">rtcMonthName</fct>
<fct gp="--" od="708" flag="0">rtcFilter</fct>
<fct gp="--" od="709" flag="0">rtcInStrRev</fct>
<fct gp="--" od="710" flag="0">rtcJoin</fct>
<fct gp="--" od="711" flag="0">rtcSplit</fct>
<fct gp="--" od="712" flag="0">rtcReplace</fct>
<fct gp="--" od="713" flag="0">rtcStrReverse</fct>
<fct gp="--" od="714" flag="0">rtcRound</fct>
<fct gp="02" od="715" flag="0">rtcCallByNameE1B6</fct>
<fct gp="--" od="716" flag="0">rtcCreateObject2</fct>
<fct gp="--" od="717" flag="0">rtcStrConvVar2</fct>
</fcts>
</lib>
<lib name="odbccp32.dll" flag="1" desc="ODBC Installer">
<fcts>
<fct gp="--" od="---" flag="1">SQLConfigDriver</fct>
<fct gp="--" od="---" flag="1">SQLConfigDriver</fct>
<fct gp="--" od="---" flag="1">SQLCreateDataSource</fct>
<fct gp="--" od="---" flag="1">SQLCreateDataSourceEx</fct>
<fct gp="--" od="---" flag="1">SQLCreateDataSource</fct>
<fct gp="--" od="---" flag="1">SQLGetAvailableDrivers</fct>
<fct gp="--" od="---" flag="1">SQLGetConfigMode</fct>
<fct gp="--" od="---" flag="1">SQLGetInstalledDrivers</fct>
<fct gp="--" od="---" flag="1">SQLGetPrivateProfileString</fct>
<fct gp="--" od="---" flag="1">SQLGetTranslator</fct>
<fct gp="--" od="---" flag="1">SQLInstallDriver</fct>
<fct gp="--" od="---" flag="1">SQLInstallDriverEx</fct>
<fct gp="--" od="---" flag="1">SQLInstallDriverManager</fct>
<fct gp="--" od="---" flag="1">SQLInstallODBC</fct>
<fct gp="--" od="---" flag="1">SQLInstallTranslator</fct>
<fct gp="--" od="---" flag="1">SQLInstallTranslatorEx</fct>
<fct gp="--" od="---" flag="1">SQLInstallerError</fct>
<fct gp="--" od="---" flag="1">SQLLoadDataSourcesListBox</fct>
<fct gp="--" od="---" flag="1">SQLLoadDriverListBox</fct>
<fct gp="--" od="---" flag="1">SQLManageDataSources</fct>
<fct gp="--" od="---" flag="1">SQLPostInstallerError</fct>
<fct gp="--" od="---" flag="1">SQLReadFileDSN</fct>
<fct gp="--" od="---" flag="1">SQLRemoveDSNFromIni</fct>
<fct gp="--" od="---" flag="1">SQLRemoveDefaultDataSource</fct>
<fct gp="--" od="---" flag="1">SQLRemoveDriver</fct>
<fct gp="--" od="---" flag="1">SQLRemoveDriverManager</fct>
<fct gp="--" od="---" flag="1">SQLRemoveTranslator</fct>
<fct gp="--" od="---" flag="1">SQLSetConfigMode</fct>
<fct gp="--" od="---" flag="1">SQLValidDSN</fct>
<fct gp="--" od="---" flag="1">SQLWriteDSNToIni</fct>
<fct gp="--" od="---" flag="1">SQLWriteFileDSN</fct>
<fct gp="--" od="---" flag="1">SQLWritePrivateProfileString</fct>
<fct gp="--" od="---" flag="1">SelectTransDlg</fct>
<fct gp="--" od="---" flag="1">CloseODBCPerfData</fct>
<fct gp="--" od="---" flag="1">CollectODBCPerfData</fct>
<fct gp="--" od="---" flag="1">GetODBCSharedData</fct>
<fct gp="--" od="---" flag="1">ODBCInternalConnectW</fct>
<fct gp="--" od="---" flag="1">ODBCQualifyFileDSNW</fct>
<fct gp="--" od="---" flag="1">OpenODBCPerfData</fct>
<fct gp="--" od="---" flag="1">SQLConnect</fct>
<fct gp="--" od="---" flag="1">SQLCopyDesc</fct>
<fct gp="--" od="---" flag="1">SQLDrivers</fct>
<fct gp="--" od="---" flag="1">SQLEndTran</fct>
<fct gp="--" od="---" flag="1">SQLExecDirect</fct>
<fct gp="--" od="---" flag="1">SQLExecute</fct>
<fct gp="--" od="---" flag="1">SQLGetConnectAttr</fct>
<fct gp="--" od="---" flag="1">SQLGetConnectOption</fct>
<fct gp="--" od="---" flag="1">SQLGetData</fct>
<fct gp="--" od="---" flag="1">SQLGetFunctions</fct>
<fct gp="--" od="---" flag="1">SQLNativeSql</fct>
<fct gp="--" od="---" flag="1">SQLProcedures</fct>
<fct gp="--" od="---" flag="1">SQLSetConnectAttr</fct>
<fct gp="--" od="---" flag="1">SQLTables</fct>
<fct gp="--" od="---" flag="1">SQLTransact</fct>
</fcts>
</lib>
<lib name="kernel32.dll" flag="0" gp="--" desc="Windows NT BASE API Client">
<fcts>
<fct gp="17" od="---" flag="1" cb="0">GetDynamicTimeZoneInformation</fct>
<fct gp="02" od="---" flag="1" cb="1">GetThreadDescription</fct>
<fct gp="02" od="---" flag="1" cb="1">SetThreadDescription</fct>
<fct gp="19" od="---" flag="1" cb="1">K32EnumDeviceDrivers</fct>
<fct gp="19" od="---" flag="1" cb="0">K32GetDeviceDriverBaseName</fct>
<fct gp="--" od="---" flag="0" cb="1">EnumCalenderInfo</fct>
<fct gp="--" od="---" flag="0" cb="1">EnumCalenderInfoEx</fct>
<fct gp="--" od="---" flag="0" cb="1">EnumLanguageGroupLocales</fct>
<fct gp="--" od="---" flag="0" ti="1533" cb="1">EnumTimeFormats</fct>
<fct gp="--" od="---" flag="0" ti="1533" cb="1">EnumTimeFormatsEx</fct>
<fct gp="--" od="---" flag="0" cb="1">EnumUILanguages</fct>
<fct gp="--" od="---" flag="0" cb="1">FlsAlloc</fct>
<fct gp="--" od="---" flag="1" cb="0">WerSetFlags</fct>
<fct gp="03" od="---" flag="1">CreateSocketHandle</fct>
<fct gp="02" od="---" flag="0">GetThreadGroupAffinity</fct>
<fct gp="02" od="---" flag="0">NeedCurrentDirectoryForExePath</fct>
<fct gp="02" od="---" flag="0">RegisterWowExec</fct>
<fct gp="17" od="---" flag="0">RequestDeviceWakeup</fct>
<fct gp="17" od="---" flag="0">EnumerateLocalComputerNames</fct>
<fct gp="--" od="---" flag="0">GetVDMCurrentDirectories</fct>
<fct gp="02" od="---" flag="1">GetProcessIdOfThread</fct>
<fct gp="02" od="---" flag="1">SetThreadPriorityBoost</fct>
<fct gp="15" od="---" flag="1">GetNamedPipeClientProcessId</fct>
<fct gp="05" od="---" flag="0">LocalShrink</fct>
<fct gp="05" od="---" flag="1">MapUserPhysicalPages</fct>
<fct gp="--" od="---" flag="0">SetComPlusPackageInstallStatus</fct>
<fct gp="05" od="---" flag="0">HeapWalk</fct>
<fct gp="05" od="---" flag="0">QueryMemoryResourceNotification</fct>
<fct gp="01" od="---" flag="0">GetSystemRegistryQuota</fct>
<fct gp="02" od="---" flag="0">SetProcessPriorityBoost</fct>
<fct gp="02" od="---" flag="0" cb="1">InitOnceExecuteOnce</fct>
<fct gp="16" od="---" flag="0">RegisterApplicationRestart</fct>
<fct gp="16" od="---" flag="0">RegisterApplicationRecoveryCallback</fct>
<fct gp="--" od="---" flag="0" ti="1082">ExpandEnvironmentStrings</fct>
<fct gp="19" od="---" flag="0">GetSystemWindowsDirectory</fct>
<fct gp="06" od="---" flag="1">CreateSymbolicLink</fct>
<fct gp="20" od="---" flag="0">GetStdHandle</fct>
<fct gp="20" od="---" flag="0">ReadConsoleOutputAttribute</fct>
<fct gp="20" od="---" flag="0">CreateConsoleScreenBuffer</fct>
<fct gp="20" od="---" flag="0">SetConsoleActiveScreenBuffer</fct>
<fct gp="20" od="---" flag="0">SetConsoleScreenBufferSize</fct>
<fct gp="20" od="---" flag="0">SetConsoleWindowInfo</fct>
<fct gp="20" od="---" flag="0">ScrollConsoleScreenBuffer</fct>
<fct gp="20" od="---" flag="1">GetConsoleProcessList</fct>
<fct gp="20" od="---" flag="0">GetConsoleCursorInfo</fct>
<fct gp="20" od="---" flag="1">SetConsoleCursorPosition</fct>
<fct gp="20" od="---" flag="1">SetConsoleTitle</fct>
<fct gp="20" od="---" flag="0">GetConsoleMode</fct>
<fct gp="20" od="---" flag="0">GetConsoleCP</fct>
<fct gp="--" od="---" flag="1">BaseFlushAppcompatCache</fct>
<fct gp="--" od="---" flag="1">BaseCheckAppcompatCache</fct>
<fct gp="--" od="---" flag="1">ReOpenFile</fct>
<fct gp="20" od="---" flag="1">ExpungeConsoleCommandHistory</fct>
<fct gp="--" od="---" flag="0">RequestWakeupLatency</fct>
<fct gp="--" od="---" flag="0">SetMessageWaitingIndicator</fct>
<fct gp="02" od="---" flag="1">GetThreadSelectorEntry</fct>
<fct gp="02" od="---" flag="1">GetThreadPriorityBoost</fct>
<fct gp="02" od="---" flag="0">QueueUserWorkItem</fct>
<fct gp="02" od="---" flag="0">IsWow64Process</fct>
<fct gp="05" od="---" flag="0">LocalUnlock</fct>
<fct gp="05" od="---" flag="0">LocalLock</fct>
<fct gp="05" od="---" flag="0">LocalSize</fct>
<fct gp="--" od="---" flag="0">GlobalWire</fct>
<fct gp="07" od="---" flag="0">InterlockedPopEntrySList</fct>
<fct gp="07" od="---" flag="0">InterlockedFlushSList</fct>
<fct gp="07" od="---" flag="0">QueryDepthSList</fct>
<fct gp="07" od="---" flag="0" cb="1">CreateTimerQueueTimer</fct>
<fct gp="07" od="---" flag="0">InterlockedExchangeAdd</fct>
<fct gp="07" od="---" flag="0">InitializeConditionVariable</fct>
<fct gp="07" od="---" flag="0">WakeConditionVariable</fct>
<fct gp="07" od="---" flag="0">WakeAllConditionVariable</fct>
<fct gp="07" od="---" flag="0">SleepConditionVariableCS</fct>
<fct gp="07" od="---" flag="0">TryAcquireSRWLockExclusive</fct>
<fct gp="07" od="---" flag="0">SleepConditionVariableSR</fct>
<fct gp="07" od="---" flag="0">CancelWaitableTimer</fct>
<fct gp="07" od="---" flag="0">OpenWaitableTimer</fct>
<fct gp="07" od="---" flag="1">DeleteTimerQueue</fct>
<fct gp="07" od="---" flag="1">DeleteTimerQueueTimer</fct>
<fct gp="07" od="---" flag="0">InterlockedIncrement</fct>
<fct gp="07" od="---" flag="0">InterlockedDecrement</fct>
<fct gp="19" od="---" flag="0">VerifyVersionInfo</fct>
<fct gp="20" od="---" flag="1">GetNumberOfConsoleInputEvents</fct>
<fct gp="20" od="---" flag="0">WriteConsoleOutputAttribute</fct>
<fct gp="--" od="---" flag="1">GlobalCompact</fct>
<fct gp="19" od="---" flag="1">SearchPath</fct>
<fct gp="--" od="---" flag="1">SetTimeZoneInformation</fct>
<fct gp="20" od="---" flag="1">FlushConsoleInputBuffer</fct>
<fct gp="20" od="---" flag="1">ReadConsoleOutputCharacter</fct>
<fct gp="20" od="---" flag="1">ReadConsoleOutput</fct>
<fct gp="--" od="---" flag="1">SetFileApisToOEM</fct>
<fct gp="--" od="---" flag="0">_hread</fct>
<fct gp="--" od="---" flag="0">_hwrite</fct>
<fct gp="--" od="---" flag="0">_lclose</fct>
<fct gp="--" od="---" flag="0">_lcreat</fct>
<fct gp="--" od="---" flag="0">_llseek</fct>
<fct gp="--" od="---" flag="0">_lopen</fct>
<fct gp="--" od="---" flag="0">_lread</fct>
<fct gp="--" od="---" flag="0">_lwrite</fct>
<fct gp="--" od="---" flag="0">EnumCalendarInfoEx</fct>
<fct gp="--" od="---" flag="0">SetHandleCount</fct>
<fct gp="--" od="---" flag="0">GetLocaleInfo</fct>
<fct gp="01" od="---" flag="0">GetPrivateProfileSection</fct>
<fct gp="01" od="---" flag="1">GetPrivateProfileSectionNames</fct>
<fct gp="01" od="---" flag="0">GetPrivateProfileStruct</fct>
<fct gp="01" od="---" flag="1">GetProfileInt</fct>
<fct gp="01" od="---" flag="0">GetProfileSection</fct>
<fct gp="01" od="---" flag="0">GetProfileString</fct>
<fct gp="--" od="---" flag="0">GetVersion</fct>
<fct gp="05" od="---" flag="0">GlobalFix</fct>
<fct gp="05" od="---" flag="0">GlobalAlloc</fct>
<fct gp="05" od="---" flag="0">GlobalFlags</fct>
<fct gp="05" od="---" flag="0">GlobalUnlock</fct>
<fct gp="05" od="---" flag="0">GlobalLock</fct>
<fct gp="05" od="---" flag="0">GetStringType</fct>
<fct gp="--" od="---" flag="0">GlobalHandle</fct>
<fct gp="--" od="---" flag="0">IsBadReadPtr</fct>
<fct gp="21" od="---" flag="0" ti="1106">LoadModule</fct>
<fct gp="21" od="---" flag="0" ti="1106">LoadPackageLibrary</fct>
<fct gp="--" od="---" flag="0">LCMapString</fct>
<fct gp="01" od="---" flag="0">WritePrivateProfileStruct</fct>
<fct gp="01" od="---" flag="1">WriteProfileSection</fct>
<fct gp="01" od="---" flag="1">WriteProfileString</fct>
<fct gp="--" od="---" flag="1">SetSystemTimeAdjustment</fct>
<fct gp="19" od="---" flag="1">IsSystemResumeAutomatic</fct>
<fct gp="19" od="---" flag="0" ti="1083">GetSystemDirectory</fct>
<fct gp="02" od="---" flag="0">GetProcessShutdownParameters</fct>
<fct gp="02" od="---" flag="0">GetProcessPriorityBoost</fct>
<fct gp="02" od="---" flag="0">OpenJobObject</fct>
<fct gp="02" od="---" flag="0">SetInformationJobObject</fct>
<fct gp="02" od="---" flag="0">SetProcessWorkingSetSize</fct>
<fct gp="02" od="---" flag="0">SetProcessWorkingSetSizeEx</fct>
<fct gp="02" od="---" flag="0">GetProcessIoCounters</fct>
<fct gp="27" od="---" flag="1">SetSystemPowerState</fct>
<fct gp="02" od="---" flag="0">GetProcessTimes</fct>
<fct gp="02" od="---" flag="1">SetProcessShutdownParameters</fct>
<fct gp="02" od="---" flag="0">GetProcessShutdownParameters</fct>
<fct gp="05" od="---" flag="0">MapUserPhysicalPagesScatter</fct>
<fct gp="05" od="---" flag="1">AllocateUserPhysicalPages</fct>
<fct gp="--" od="---" flag="1">FatalExit</fct>
<fct gp="05" od="---" flag="0">GlobalUnWire</fct>
<fct gp="--" od="---" flag="0">CeipIsOptedIn</fct>
<fct gp="--" od="---" flag="1">IsNativeVhdBoot</fct>
<fct gp="03" od="---" flag="1">DnsHostnameToComputerName</fct>
<fct gp="03" od="---" flag="0">AddLocalAlternateComputerName</fct>
<fct gp="--" od="---" flag="0">SetCommMask</fct>
<fct gp="--" od="---" flag="0">SetCommState</fct>
<fct gp="--" od="---" flag="0">SetCommTimeouts</fct>
<fct gp="--" od="---" flag="0">GetCommModemStatus</fct>
<fct gp="--" od="---" flag="0">GetCommTimeouts</fct>
<fct gp="29" od="---" flag="1">CreateSymbolicLink</fct>
<fct gp="29" od="---" flag="1">CreateSymbolicLinkTransacted</fct>
<fct gp="06" od="---" flag="1">CreateHardLink</fct>
<fct gp="06" od="---" flag="1">CreateHardLinkTransacted</fct>
<fct gp="02" od="---" flag="0">ConvertThreadToFiber</fct>
<fct gp="02" od="---" flag="0" cb="1">CreateFiber</fct>
<fct gp="02" od="---" flag="0" cb="1">CreateFiberEx</fct>
<fct gp="21" od="---" flag="1">DelayLoadFailureHook</fct>
<fct gp="02" od="---" flag="1">DeleteFiber</fct>
<fct gp="--" od="---" flag="1">EnumSystemFirmwareTables</fct>
<fct gp="05" od="---" flag="1">GetPhysicallyInstalledSystemMemory</fct>
<fct gp="--" od="---" flag="1">GetSystemFirmwareTable</fct>
<fct gp="20" od="---" flag="1">GetConsoleScreenBufferInfo</fct>
<fct gp="20" od="---" flag="1">FillConsoleOutputAttribute</fct>
<fct gp="02" od="---" flag="1" ti="1057">GetCurrentProcessorNumber</fct>
<fct gp="02" od="---" flag="1" ti="1057">GetCurrentProcessorNumberEx</fct>
<fct gp="--" od="---" flag="0">GetOEMCP</fct>
<fct gp="19" od="---" flag="0">GetDevicePowerState</fct>
<fct gp="--" od="---" flag="0">FindActCtxSectionString</fct>
<fct gp="19" od="---" flag="1" ti="1006">FindFirstVolumeMountPoint</fct>
<fct gp="19" od="---" flag="1" ti="1006">FindNextVolumeMountPoint</fct>
<fct gp="02" od="---" flag="0">FreeLibraryWhenCallbackReturns</fct>
<fct gp="05" od="---" flag="1">FreeUserPhysicalPages</fct>
<fct gp="05" od="---" flag="0">GetWriteWatch</fct>
<fct gp="19" od="---" flag="0" ti="1006">GetVolumeInformation</fct>
<fct gp="20" od="---" flag="1">GetLargestConsoleWindowSize</fct>
<fct gp="19" od="---" flag="1">GetLogicalDriveStrings</fct>
<fct gp="19" od="---" flag="0">GetGeoInfo</fct>
<fct gp="19" od="---" flag="0">GetUserGeoID</fct>
<fct gp="02" od="---" flag="0">GetProcessVersion</fct>
<fct gp="19" od="---" flag="0">GetLogicalDrives</fct>
<fct gp="19" od="---" flag="0">GetProductInfo</fct>
<fct gp="19" od="---" flag="0">GetCurrentPackageId</fct>
<fct gp="20" od="---" flag="0">GetConsoleWindow</fct>
<fct gp="02" od="---" flag="0">GetProcessId</fct>
<fct gp="21" od="---" flag="1">GetModuleHandleEx</fct>
<fct gp="21" od="---" flag="0">GetModuleFilepame</fct>
<fct gp="02" od="---" flag="1">GetThreadTimes</fct>
<fct gp="19" od="---" flag="0">GetSystemInfo</fct>
<fct gp="19" od="---" flag="0" ti="1124">GetLocalTime</fct>
<fct gp="19" od="---" flag="0">GetSystemTime</fct>
<fct gp="19" od="---" flag="0">GetSystemTimePreciseAsFileTime</fct>
<fct gp="19" od="---" flag="0">SetSystemTime</fct>
<fct gp="19" od="---" flag="1">GetNativeSystemInfo</fct>
<fct gp="02" od="---" flag="0">CreateJobObject</fct>
<fct gp="02" od="---" flag="0">GetExitCodeThread</fct>
<fct gp="02" od="---" flag="0">GetProcessAffinityMask</fct>
<fct gp="19" od="---" flag="0">GetTimeZoneInformation</fct>
<fct gp="19" od="---" flag="0">GetDateFormat</fct>
<fct gp="19" od="---" flag="0">GetTimeFormat</fct>
<fct gp="19" od="---" flag="0">GetUserDefaultLCID</fct>
<fct gp="02" od="---" flag="0">GetThreadLocale</fct>
<fct gp="24" od="---" flag="1">GetProcessWindowStation</fct>
<fct gp="24" od="---" flag="1">GetUserObjectInformation</fct>
<fct gp="30" od="---" flag="1">GetUserObjectSecurity</fct>
<fct gp="12" od="---" flag="1">GetDesktopWindow</fct>
<fct gp="24" od="---" flag="1" ti="1021">CreateDesktop</fct>
<fct gp="24" od="---" flag="1" ti="1021">GetThreadDesktop</fct>
<fct gp="20" od="---" flag="1">GetConsoleAlias</fct>
<fct gp="20" od="---" flag="1">GetConsoleAliasExes</fct>
<fct gp="20" od="---" flag="1">GetConsoleAliasExesLength</fct>
<fct gp="20" od="---" flag="1">GetConsoleAliases</fct>
<fct gp="20" od="---" flag="0">GetConsoleAliasesLength</fct>
<fct gp="20" od="---" flag="1">GetConsoleCommandHistory</fct>
<fct gp="20" od="---" flag="1">GetConsoleCommandHistoryLength</fct>
<fct gp="20" od="---" flag="1">GetConsoleDisplayMode</fct>
<fct gp="20" od="---" flag="1">GetConsoleFontInfo</fct>
<fct gp="20" od="---" flag="1">GetConsoleFontSize</fct>
<fct gp="20" od="---" flag="1">GetConsoleHardwareState</fct>
<fct gp="20" od="---" flag="1">GetConsoleInputWaitHandle</fct>
<fct gp="20" od="---" flag="1">GetCurrentConsoleFont</fct>
<fct gp="20" od="---" flag="1">GetNumberOfConsoleFonts</fct>
<fct gp="02" od="---" flag="1">CreateThreadpool</fct>
<fct gp="02" od="---" flag="1">CreateThreadpoolCleanupGroup</fct>
<fct gp="02" od="---" flag="1">CreateThreadpoolIo</fct>
<fct gp="02" od="---" flag="1">CreateThreadpoolTimer</fct>
<fct gp="02" od="---" flag="1" cb="1">CreateThreadpoolWait</fct>
<fct gp="02" od="---" flag="1">CreateThreadpoolWork</fct>
<fct gp="02" od="---" flag="1">CloseThreadpoolTimer</fct>
<fct gp="02" od="---" flag="0">SetThreadpoolTimer</fct>
<fct gp="02" od="---" flag="0">CloseThreadpoolWait</fct>
<fct gp="02" od="---" flag="0">SetThreadpoolWait</fct>
<fct gp="02" od="---" flag="0">WaitForThreadpoolWaitCallbacks</fct>
<fct gp="02" od="---" flag="0">SubmitThreadpoolWork</fct>
<fct gp="08" od="---" flag="1">WTSGetActiveConsoleSessionId</fct>
<fct gp="08" od="---" flag="1">WTHelperGetProvCertFromChain</fct>
<fct gp="19" od="---" flag="1">VerSetConditionMask</fct>
<fct gp="02" od="---" flag="0">FreeEnvironmentStrings</fct>
<fct gp="05" od="---" flag="0">VirtualLock</fct>
<fct gp="05" od="---" flag="0">VirtualUnlock</fct>
<fct gp="20" od="---" flag="0">WriteConsoleInput</fct>
<fct gp="02" od="---" flag="1">OpenThread</fct>
<fct gp="16" od="035" flag="0">ApplicationRecoveryInProgress</fct>
<fct gp="16" od="034" flag="0">ApplicationRecoveryFinished</fct>
<fct gp="--" od="036" flag="0">AreFileApisANSI</fct>
<fct gp="02" od="037" flag="0">AssignProcessToJobObject</fct>
<fct gp="--" od="---" flag="1">HeapSummary</fct>
<fct gp="20" od="---" flag="1">ConsoleMenuControl</fct>
<fct gp="--" od="---" flag="1">NlsGetCacheUpdateCount</fct>
<fct gp="--" od="---" flag="1">QueryWorkingSet</fct>
<fct gp="02" od="---" flag="1">QueryFullProcessImageName</fct>
<fct gp="18" od="---" flag="1">AddVectoredExceptionHandler</fct>
<fct gp="18" od="---" flag="1">AddVectoredContinueHandler</fct>
<fct gp="--" od="---" flag="1">EnumCalendarInfo</fct>
<fct gp="11" od="---" flag="1">EnumResourceLanguages</fct>
<fct gp="11" od="---" flag="0" cb="1">EnumResourceTypes</fct>
<fct gp="11" od="---" flag="0" cb="1">EnumResourceTypesEx</fct>
<fct gp="--" od="---" flag="1">SetThreadLocale</fct>
<fct gp="03" od="---" flag="1">NetScheduleJobAdd</fct>
<fct gp="--" od="---" flag="1">EnumDeviceDrivers</fct>
<fct gp="--" od="---" flag="1">HeapWalk</fct>
<fct gp="24" od="---" flag="1">CloseWindowStation</fct>
<fct gp="07" od="---" flag="0">GetOverlappedResult</fct>
<fct gp="07" od="---" flag="0">CreateSemaphore</fct>
<fct gp="07" od="---" flag="0">ReleaseSemaphore</fct>
<fct gp="19" od="---" flag="1">ReadDirectoryChanges</fct>
<fct gp="20" od="---" flag="1">RegisterConsoleVDM</fct>
<fct gp="--" od="---" flag="1">VDMOperationStarted</fct>
<fct gp="24" od="---" flag="1">CreateWindowStation</fct>
<fct gp="24" od="---" flag="1">OpenWindowStation</fct>
<fct gp="24" od="---" flag="0">CloseDesktop</fct>
<fct gp="24" od="---" flag="1">CreateDesktopEx</fct>
<fct gp="24" od="---" flag="1" cb="1">EnumWindowStations</fct>
<fct gp="24" od="---" flag="1" cb="1">EnumDesktops</fct>
<fct gp="24" od="---" flag="1" cb="1">EnumDesktopWindows</fct>
<fct gp="24" od="---" flag="1">OpenDesktop</fct>
<fct gp="24" od="---" flag="1">SwitchDesktop</fct>
<fct gp="24" od="---" flag="1">OpenInputDesktop</fct>
<fct gp="20" od="---" flag="1">AttachConsole</fct>
<fct gp="20" od="---" flag="1">AddConsoleAlias</fct>
<fct gp="20" od="---" flag="0">WriteConsole</fct>
<fct gp="20" od="---" flag="0">SetConsoleCP</fct>
<fct gp="20" od="---" flag="0">SetConsoleOutputCP</fct>
<fct gp="20" od="---" flag="1">WriteConsoleOutput</fct>
<fct gp="20" od="---" flag="0">ReadConsole</fct>
<fct gp="20" od="---" flag="0">ReadConsoleInput</fct>
<fct gp="20" od="---" flag="0">AllocConsole</fct>
<fct gp="20" od="---" flag="0">FreeConsole</fct>
<fct gp="20" od="---" flag="1">GenerateConsoleCtrlEvent</fct>
<fct gp="20" od="---" flag="1">GetConsoleTitle</fct>
<fct gp="20" od="---" flag="1">FillConsoleOutputCharacter</fct>
<fct gp="20" od="---" flag="0">CloseConsoleHandle</fct>
<fct gp="20" od="---" flag="0">SetConsoleCursorMode</fct>
<fct gp="20" od="---" flag="1">ConsoleSubst</fct>
<fct gp="20" od="---" flag="1">ExpungeConsoleCommandHistory</fct>
<fct gp="20" od="---" flag="1">InvalidateConsoleDIBits</fct>
<fct gp="20" od="---" flag="1">OpenConsole</fct>
<fct gp="20" od="---" flag="0">ShowConsoleCursor</fct>
<fct gp="20" od="---" flag="1">VerifyConsoleIoHandle</fct>
<fct gp="20" od="---" flag="1">DuplicateConsoleHandle</fct>
<fct gp="20" od="---" flag="1">GetConsoleInputExeName</fct>
<fct gp="20" od="---" flag="1">GetConsoleKeyboardLayoutName</fct>
<fct gp="15" od="---" flag="1" ti="1115">AddClipboardFormatListener</fct>
<fct gp="15" od="---" flag="1" ti="1115">ChangeClipboardChain</fct>
<fct gp="15" od="---" flag="1" ti="1115">CloseClipboard</fct>
<fct gp="15" od="---" flag="1" ti="1115">CountClipboardFormats</fct>
<fct gp="15" od="---" flag="1" ti="1115">EmptyClipboard</fct>
<fct gp="15" od="---" flag="1" ti="1115">EnumClipboardFormats</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetClipboardData</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetClipboardFormatName</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetClipboardOwner</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetClipboardSequenceNumber</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetClipboardViewer</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetOpenClipboardWindow</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetPriorityClipboardFormat</fct>
<fct gp="15" od="---" flag="1" ti="1115">GetUpdatedClipboardFormats</fct>
<fct gp="15" od="---" flag="1" ti="1115">IsClipboardFormatAvailable</fct>
<fct gp="15" od="---" flag="1" ti="1115">OpenClipboard</fct>
<fct gp="15" od="---" flag="1" ti="1115">RegisterClipboardFormat</fct>
<fct gp="15" od="---" flag="1" ti="1115">RemoveClipboardFormatListener</fct>
<fct gp="15" od="---" flag="1" ti="1115">RegisterClipboardFormat</fct>
<fct gp="21" od="---" flag="1" ti="1115">ResolveDelayLoadedAPI</fct>
<fct gp="21" od="---" flag="1" ti="1115">ResolveDelayLoadsFromDll</fct>
<fct gp="15" od="---" flag="0">PackDDElParam</fct>
<fct gp="15" od="---" flag="0">DdeAccessData</fct>
<fct gp="15" od="---" flag="0">DdeUnaccessData</fct>
<fct gp="15" od="---" flag="0">DdeEnableCallback</fct>
<fct gp="15" od="---" flag="0">ImpersonateDdeClientWindow</fct>
<fct gp="15" od="---" flag="0">DdeCmpStringHandles</fct>
<fct gp="15" od="---" flag="0">UnpackDDElParam</fct>
<fct gp="15" od="---" flag="0">FreeDDElParam</fct>
<fct gp="15" od="---" flag="0">ReuseDDElParam</fct>
<fct gp="24" od="---" flag="1">LockWorkStation</fct>
<fct gp="12" od="---" flag="1">LockSetForegroundWindow</fct>
<fct gp="25" od="---" flag="1">WinHelp</fct>
<fct gp="12" od="---" flag="0">RedrawWindow</fct>
<fct gp="12" od="---" flag="0">ShowOwnedPopups</fct>
<fct gp="12" od="---" flag="0">CallWindowProc</fct>
<fct gp="12" od="---" flag="0">RegisterClass</fct>
<fct gp="12" od="---" flag="0">CreateWindow</fct>
<fct gp="12" od="---" flag="0">CreateWindowEx</fct>
<fct gp="12" od="---" flag="0">UpdateWindow</fct>
<fct gp="12" od="---" flag="0">RegisterClassEx</fct>
<fct gp="12" od="---" flag="0">UnregisterClass</fct>
<fct gp="12" od="---" flag="0" ti="1010">GetWindowTextLength</fct>
<fct gp="12" od="---" flag="0">GetWindow</fct>
<fct gp="12" od="---" flag="0">ShowWindow</fct>
<fct gp="12" od="---" flag="0">MoveWindow</fct>
<fct gp="12" od="---" flag="0">DestroyWindow</fct>
<fct gp="12" od="---" flag="0">BringWindowToTop</fct>
<fct gp="22" od="---" flag="0">keybd_event</fct>
<fct gp="22" od="---" flag="0">mouse_event</fct>
<fct gp="22" od="---" flag="0">CreateAcceleratorTable</fct>
<fct gp="22" od="---" flag="0">DestroyAcceleratorTable</fct>
<fct gp="22" od="---" flag="0">LoadKeyboardLayout</fct>
<fct gp="22" od="---" flag="1">UnregisterHotKey</fct>
<fct gp="22" od="---" flag="1">SendInput</fct>
<fct gp="12" od="---" flag="0">SetActiveWindow</fct>
<fct gp="12" od="---" flag="0">SetFocus</fct>
<fct gp="14" od="---" flag="0">CopyAcceleratorTable</fct>
<fct gp="--" od="---" flag="0">GetDoubleClickTime</fct>
<fct gp="12" od="---" flag="1">EnumThreadWindows</fct>
<fct gp="12" od="---" flag="0">BroadcastSystemMessage</fct>
<fct gp="12" od="---" flag="0">BroadcastSystemMessageEx</fct>
<fct gp="12" od="---" flag="1">GetInputState</fct>
<fct gp="12" od="---" flag="0">GetMessageExtraInfo</fct>
<fct gp="12" od="---" flag="0">GetMessage</fct>
<fct gp="12" od="---" flag="0">GetMessagePos</fct>
<fct gp="12" od="---" flag="0">GetMessageTime</fct>
<fct gp="12" od="---" flag="0">GetQueueStatus</fct>
<fct gp="12" od="---" flag="0">PeekMessage</fct>
<fct gp="20" od="---" flag="1">PeekConsoleInput</fct>
<fct gp="02" od="---" flag="0">PostMessage</fct>
<fct gp="02" od="---" flag="0">PostQuitMessage</fct>
<fct gp="02" od="---" flag="1">PostThreadMessage</fct>
<fct gp="12" od="---" flag="0">InSendMessage</fct>
<fct gp="12" od="---" flag="0">InSendMessageEx</fct>
<fct gp="12" od="---" flag="0">RegisterWindowMessage</fct>
<fct gp="12" od="---" flag="0">ReplyMessage</fct>
<fct gp="12" od="---" flag="1">SendAsyncProc</fct>
<fct gp="12" od="---" flag="0" ti="1055">SendMessageTimeout</fct>
<fct gp="12" od="---" flag="0" ti="1055">SendMessage</fct>
<fct gp="12" od="---" flag="0" ti="1055">SendMessageCallback</fct>
<fct gp="12" od="---" flag="0" ti="1055">SendNotifyMessage</fct>
<fct gp="12" od="---" flag="0">WaitMessage</fct>
<fct gp="14" od="---" flag="1" ti="1179">GetKeyboardState</fct>
<fct gp="14" od="---" flag="1" ti="1179">GetKeyboardType</fct>
<fct gp="14" od="---" flag="1">GetKeyNameText</fct>
<fct gp="14" od="---" flag="0">GetCapture</fct>
<fct gp="12" od="---" flag="1">GetGUIThreadInfo</fct>
<fct gp="14" od="---" flag="1">BlockInput</fct>
<fct gp="14" od="---" flag="1">ChangeWindowMessageFilter</fct>
<fct gp="14" od="---" flag="1">ChangeWindowMessageFilterEx</fct>
<fct gp="24" od="---" flag="1">LockWorkStation</fct>
<fct gp="06" od="---" flag="0">BackupRead</fct>
<fct gp="06" od="---" flag="0">BackupSeek</fct>
<fct gp="06" od="---" flag="1">BackupWrite</fct>
<fct gp="--" od="---" flag="1">CreateTapePartition</fct>
<fct gp="--" od="---" flag="0">GetTapeParameters</fct>
<fct gp="--" od="---" flag="0">GetTapePosition</fct>
<fct gp="--" od="---" flag="0">GetTapeStatus</fct>
<fct gp="--" od="---" flag="0">PrepareTape</fct>
<fct gp="--" od="---" flag="1">WriteTapemark</fct>
<fct gp="02" od="---" flag="0">GetLogicalProcessorInformation</fct>
<fct gp="07" od="---" flag="0">OpenEvent</fct>
<fct gp="07" od="---" flag="0">ResetEvent</fct>
<fct gp="16" od="---" flag="0">GetSystemPowerStatus</fct>
<fct gp="--" od="---" flag="0">IsValidLanguageGroup</fct>
<fct gp="--" od="---" flag="0">EncodePointer</fct>
<fct gp="--" od="---" flag="0">DecodePointer</fct>
<fct gp="--" od="---" flag="0">EraseTape</fct>
<fct gp="--" od="---" flag="0">GetTapeStatus</fct>
<fct gp="02" od="---" flag="0">RtlExitUserProcess</fct>
<fct gp="16" od="---" flag="1">RtlCaptureStackBackTrace</fct>
<fct gp="30" od="---" flag="0">RtlLengthSid</fct>
<fct gp="16" od="---" flag="1">RegisterEventSource</fct>
<fct gp="16" od="---" flag="1">RegisterHotKey</fct>
<fct gp="04" od="---" flag="1">GetProcessMitigationPolicy</fct>
<fct gp="05" od="---" flag="1">GetProcessDEPPolicy</fct>
<fct gp="19" od="---" flag="1">QueryPerformanceFrequency</fct>
<fct gp="19" od="---" flag="0">HeapQueryInformation</fct>
<fct gp="07" od="---" flag="0">InterlockedExchange</fct>
<fct gp="07" od="---" flag="0">InterlockedExchange16</fct>
<fct gp="07" od="---" flag="0">InterlockedExchange64</fct>
<fct gp="07" od="---" flag="0">InterlockedExchangePointer</fct>
<fct gp="07" od="---" flag="0">InterlockedPushEntrySList</fct>
<fct gp="--" od="---" flag="1">GetLogicalProcessorInformationEx</fct>
<fct gp="02" od="---" flag="1">SetThreadStackGuarantee</fct>
<fct gp="02" od="---" flag="1">SetEnvironmentVariable</fct>
<fct gp="02" od="---" flag="0">GetExitCodeThread</fct>
<fct gp="02" od="---" flag="1">SetProcessAffinityMask</fct>
<fct gp="02" od="---" flag="1">SetThreadAffinityMask</fct>
<fct gp="07" od="---" flag="0">SetEvent</fct>
<fct gp="--" od="---" flag="1">SetMessageExtraInfo</fct>
<fct gp="14" od="---" flag="1">SetKeyboardState</fct>
<fct gp="14" od="---" flag="1">UnloadKeyboardLayout</fct>
<fct gp="15" od="---" flag="1" ti="1115">SetClipboardData</fct>
<fct gp="15" od="---" flag="1" ti="1115">SetClipboardViewer</fct>
<fct gp="20" od="---" flag="0">SetConsoleIcon</fct>
<fct gp="20" od="---" flag="0">GetConsoleOutputCP</fct>
<fct gp="20" od="---" flag="1">SetConsoleInputExeName</fct>
<fct gp="20" od="---" flag="1">SetConsoleCursor</fct>
<fct gp="20" od="---" flag="1">SetConsoleCtrlHandler</fct>
<fct gp="20" od="---" flag="1">SetConsoleMode</fct>
<fct gp="24" od="---" flag="1">SetThreadDesktop</fct>
<fct gp="24" od="---" flag="1">SetUserObjectInformation</fct>
<fct gp="30" od="---" flag="1">SetUserObjectSecurity</fct>
<fct gp="24" od="---" flag="1">SetProcessWindowStation</fct>
<fct gp="--" od="---" flag="0">SetCurrentDirectory</fct>
<fct gp="19" od="---" flag="1">SetComputerName</fct>
<fct gp="19" od="---" flag="1">SetComputerNameEx</fct>
<fct gp="21" od="---" flag="1">SetDefaultDllDirectories</fct>
<fct gp="21" od="---" flag="1">RemoveDllDirectory</fct>
<fct gp="--" od="---" flag="1">SetFirmwareEnvironmentVariable</fct>
<fct gp="--" od="---" flag="1">SetFirmwareEnvironmentVariableEx</fct>
<fct gp="20" od="---" flag="1">SetConsoleDisplayMode</fct>
<fct gp="20" od="---" flag="1">SetConsoleFont</fct>
<fct gp="20" od="---" flag="1">SetConsoleHardwareState</fct>
<fct gp="20" od="---" flag="1">SetConsoleKeyShortcuts</fct>
<fct gp="20" od="---" flag="1">SetConsoleMaximumWindowSize</fct>
<fct gp="20" od="---" flag="1">SetConsoleMenuClose</fct>
<fct gp="20" od="---" flag="0">SetConsoleNumberOfCommands</fct>
<fct gp="20" od="---" flag="0">SetConsolePalette</fct>
<fct gp="20" od="---" flag="0">SetLastConsoleEventActive</fct>
<fct gp="21" od="---" flag="1" ti="1055">SetDllDirectory</fct>
<fct gp="05" od="---" flag="1">SetProcessDEPPolicy</fct>
<fct gp="16" od="---" flag="0">SetLastError</fct>
<fct gp="02" od="---" flag="0">SetThreadPriority</fct>
<fct gp="--" od="---" flag="0">SetErrorMode</fct>
<fct gp="--" od="---" flag="1">SetVDMCurrentDirectories</fct>
<fct gp="--" od="---" flag="0">RegisterWowBaseHandlers</fct>
<fct gp="01" od="---" flag="1">ZwLoadKey</fct>
<fct gp="30" od="---" flag="1">ZwQuerySecurityObject</fct>
<fct gp="06" od="---" flag="0">ZwQueryAttributesFile</fct>
<fct gp="02" od="---" flag="1">ZwCreateThreadEx</fct>
<fct gp="--" od="---" flag="0">ZwQuerySection</fct>
<fct gp="02" od="---" flag="1">ZwCreateThread</fct>
<fct gp="05" od="---" flag="1">ZwUnmapViewOfSec</fct>
<fct gp="05" od="---" flag="1">ZwProtectVirtualMemory</fct>
<fct gp="02" od="---" flag="1">ZwQueueApcThread</fct>
<fct gp="02" od="---" flag="1">ZwDelayExecution</fct>
<fct gp="--" od="---" flag="1">SetCPGlobal</fct>
<fct gp="--" od="---" flag="1">BaseInitAppcompatCacheSupport</fct>
<fct gp="20" od="---" flag="1">SetStdHandleEx</fct>
<fct gp="--" od="---" flag="1">CheckElevationEnabled</fct>
<fct gp="--" od="122" flag="1">CheckAllowDecryptedRemoteDestinationPolicy</fct>
<fct gp="--" od="123" flag="1">CheckElevation</fct>
<fct gp="--" od="126" flag="1">CheckForReadOnlyResource</fct>
<fct gp="--" od="---" flag="1">CheckForReadOnlyResourceFilter</fct>
<fct gp="--" od="---" flag="1">Basep8BitStringToDynamicUnicodeString</fct>
<fct gp="--" od="---" flag="1">BaseGetNamedObjectDirectory</fct>
<fct gp="--" od="---" flag="1">BaseFormatTimeOut</fct>
<fct gp="30" od="---" flag="1">RtlAcquirePrivilege</fct>
<fct gp="--" od="---" flag="0">RtlLookupfunctionEntry</fct>
<fct gp="--" od="---" flag="1">RtlAcquireResourceExclusive</fct>
<fct gp="02" od="---" flag="1">RtlQueueApcWow64Thread</fct>
<fct gp="--" od="---" flag="1">RtlAcquireResourceShared</fct>
<fct gp="11" od="---" flag="1">RtlDeleteResource</fct>
<fct gp="--" od="---" flag="1">RtlDumpResource</fct>
<fct gp="--" od="---" flag="1">RtlInitializeResource</fct>
<fct gp="--" od="---" flag="1">RtlLockCurrentThread</fct>
<fct gp="--" od="---" flag="1">RtlReleaseResource</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseAdd</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseCreate</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseDestroy</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseEnumerate</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseFind</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseLock</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseUnlock</fct>
<fct gp="--" od="---" flag="1">RtlTraceDatabaseValidate</fct>
<fct gp="--" od="---" flag="1">RtlUnlockCurrentThread</fct>
<fct gp="--" od="---" flag="1">AddCommasExport</fct>
<fct gp="--" od="---" flag="1">AppCompat_RunDLL</fct>
<fct gp="--" od="---" flag="1">CheckStagingArea</fct>
<fct gp="--" od="---" flag="1">CreateAutoListParser</fct>
<fct gp="--" od="---" flag="1">CreateInfoTipFromItem</fct>
<fct gp="--" od="---" flag="1">CreateInfoTipFromItem2</fct>
<fct gp="--" od="---" flag="1">DisconnectWindowsDialog</fct>
<fct gp="--" od="---" flag="1">GetAppPathFromLink</fct>
<fct gp="--" od="---" flag="1">GetSqmableFileName</fct>
<fct gp="--" od="---" flag="1">Int64ToString</fct>
<fct gp="--" od="---" flag="1">IsElevationRequired</fct>
<fct gp="--" od="---" flag="1">IsSearchEnabled</fct>
<fct gp="--" od="---" flag="1">LargeIntegerToString</fct>
<fct gp="--" od="---" flag="1">LinkWindow_RegisterClass</fct>
<fct gp="--" od="---" flag="1">PathGetPathDisplayName</fct>
<fct gp="--" od="---" flag="1">PathIsTemporary</fct>
<fct gp="--" od="---" flag="1">RefreshBrowserLayout</fct>
<fct gp="--" od="311" flag="1">RunAsNewUser_RunDLL</fct>
<fct gp="--" od="---" flag="1">DesktopHasWatermarkText</fct>
<fct gp="--" od="---" flag="1">FrostCrashedWindow</fct>
<fct gp="--" od="---" flag="1" ti="1055">GetSendMessageReceiver</fct>
<fct gp="--" od="---" flag="1">GetWindowCompositionAttribute</fct>
<fct gp="--" od="---" flag="1">GhostWindowFromHungWindow</fct>
<fct gp="--" od="---" flag="1">HungWindowFromGhostWindow</fct>
<fct gp="--" od="---" flag="1">IsServerSideWindow</fct>
<fct gp="--" od="---" flag="1">IsSETEnabled</fct>
<fct gp="--" od="---" flag="1">IsThreadDesktopComposited</fct>
<fct gp="--" od="---" flag="1">IsWindowInDestroy</fct>
<fct gp="--" od="---" flag="1">NtUserSetChildWindowNoActivate</fct>
<fct gp="--" od="---" flag="1">SetWindowCompositionAttribute</fct>
<fct gp="--" od="---" flag="1">DupWideToAnsi</fct>
<fct gp="--" od="---" flag="1">IStream_WriteStrLong</fct>
<fct gp="--" od="---" flag="1">MapWin32ErrorToSTG</fct>
<fct gp="--" od="---" flag="1">ModeToCreateFileFlags</fct>
<fct gp="--" od="---" flag="1">PathUnExpandEnvStringsForUserW</fct>
<fct gp="--" od="---" flag="1">PathUnExpandSystemEnvStringsW</fct>
<fct gp="--" od="---" flag="1">QuerySourceCreateFromKey</fct>
<fct gp="--" od="---" flag="1">QuerySourceCreateFromKeyEx</fct>
<fct gp="--" od="---" flag="1">SetLocalPrimaryComputerName</fct>
<fct gp="--" od="---" flag="1">BaseQueryModuleData</fct>
<fct gp="--" od="---" flag="1">ExitVDM</fct>
<fct gp="18" od="---" flag="1">RemoveVectoredExceptionHandler</fct>
<fct gp="18" od="---" flag="1">RemoveVectoredContinueHandler</fct>
<fct gp="02" od="---" flag="1" ti="1106">RealShellExecute</fct>
<fct gp="02" od="---" flag="1" ti="1106">RealShellExecuteEx</fct>
<fct gp="02" od="---" flag="1">K32EnumProcessModules</fct>
<fct gp="02" od="---" flag="1">K32EnumProcesses</fct>
<fct gp="02" od="---" flag="1">K32GetModuleBaseName</fct>
<fct gp="02" od="---" flag="1">K32GetModuleFileNameEx</fct>
<fct gp="02" od="---" flag="1">K32GetProcessImageFileName</fct>
<fct gp="05" od="---" flag="1">K32GetProcessMemoryInfo</fct>
<fct gp="02" od="---" flag="1">SetThreadExecutionState</fct>
<fct gp="20" od="---" flag="0">SetStdHandle</fct>
<fct gp="02" od="---" flag="1">SwitchToFiber</fct>
<fct gp="05" od="---" flag="1">GetSystemDEPPolicy</fct>
<fct gp="21" od="---" flag="0">DisableThreadLibraryCalls</fct>
<fct gp="18" od="---" flag="1">RaiseException</fct>
<fct gp="18" od="---" flag="0">GetExceptionCode</fct>
<fct gp="18" od="---" flag="0">GetExceptionInformation</fct>
<fct gp="--" od="---" flag="1">RestoreLastError</fct>
<fct gp="19" od="---" flag="1">GetEnvironmentVariable</fct>
<fct gp="--" od="---" flag="1">GetOverlappedResult</fct>
<fct gp="19" od="---" flag="1">GetSystemWow64Directory</fct>
<fct gp="19" od="---" flag="0">GetDriveType</fct>
<fct gp="19" od="---" flag="0">GetDiskFreeSpace</fct>
<fct gp="19" od="---" flag="0">GetDiskFreeSpaceEx</fct>
<fct gp="05" od="---" flag="0">VirtualFreeEx</fct>
<fct gp="08" od="---" flag="0" ti="1057">ProcessIdToSessionId</fct>
<fct gp="02" od="---" flag="0">GetProcessWorkingSetSize</fct>
<fct gp="--" od="---" flag="0">BuildCommDCBAndTimeouts</fct>
<fct gp="19" od="---" flag="0" ti="1006">FindVolumeMountPointClose</fct>
<fct gp="16" od="---" flag="0">FatalAppExit</fct>
<fct gp="16" od="---" flag="0">ContinueDebugEvent</fct>
<fct gp="16" od="---" flag="0">DebugBreakProcess</fct>
<fct gp="16" od="---" flag="1">DebugActiveProcessStop</fct>
<fct gp="16" od="---" flag="0">SetDebugErrorLevel</fct>
<fct gp="07" od="---" flag="1">WaitForDebugEvent</fct>
<fct gp="07" od="---" flag="1">WaitForDebugEventEx</fct>
<fct gp="07" od="---" flag="1">ZwWaitForDebugEvent</fct>
<fct gp="07" od="---" flag="1">ZwWaitForDebugEventEx</fct>
<fct gp="07" od="---" flag="0">RegisterWaitForSingleObject</fct>
<fct gp="07" od="---" flag="0">RegisterWaitForSingleObjectEx</fct>
<fct gp="07" od="---" flag="0">ChangeTimerQueueTimer</fct>
<fct gp="07" od="---" flag="0">UnregisterWait</fct>
<fct gp="07" od="---" flag="0">UnregisterWaitEx</fct>
<fct gp="16" od="---" flag="1">DebugActiveProcess</fct>
<fct gp="16" od="---" flag="1">DebugBreak</fct>
<fct gp="--" od="---" flag="0">DuplicateHandle</fct>
<fct gp="07" od="---" flag="0">OpenSemaphore</fct>
<fct gp="07" od="---" flag="0">InitializeSListHead</fct>
<fct gp="--" od="---" flag="1">DefineDosDevice</fct>
<fct gp="02" od="---" flag="0">GetPrivateProfileInt</fct>
<fct gp="21" od="---" flag="0">FreeLibrary</fct>
<fct gp="21" od="---" flag="1">FreeLibraryAndExitThread</fct>
<fct gp="15" od="---" flag="1">AddAtom</fct>
<fct gp="15" od="---" flag="1">DeleteAtom</fct>
<fct gp="16" od="---" flag="0">FormatMessage</fct>
<fct gp="15" od="---" flag="1">FindAtom</fct>
<fct gp="15" od="---" flag="1">GetAtomName</fct>
<fct gp="15" od="---" flag="1">GlobalAddAtom</fct>
<fct gp="15" od="---" flag="1">GlobalDeleteAtom</fct>
<fct gp="15" od="---" flag="1">GlobalFindAtom</fct>
<fct gp="15" od="---" flag="1">GlobalGetAtomName</fct>
<fct gp="15" od="---" flag="1">InitAtomTable</fct>
<fct gp="19" od="---" flag="0" ti="1082">GetComputerName</fct>
<fct gp="19" od="---" flag="0" ti="1082">GetComputerNameEx</fct>
<fct gp="19" od="---" flag="0">IsProcessorFeaturePresent</fct>
<fct gp="01" od="---" flag="1">WritePrivateProfileSection</fct>
<fct gp="07" od="---" flag="0">InitializeCriticalSectionAndSpinCount</fct>
<fct gp="07" od="---" flag="0">TryEnterCriticalSection</fct>
<fct gp="07" od="---" flag="0">InitializeCriticalSection</fct>
<fct gp="07" od="---" flag="0">InitializeCriticalSectionEx</fct>
<fct gp="07" od="---" flag="0">CreateEventEx</fct>
<fct gp="07" od="---" flag="0">CreateSemaphoreEx</fct>
<fct gp="07" od="---" flag="0">CreateEvent</fct>
<fct gp="07" od="---" flag="0">ZwCreateEvent</fct>
<fct gp="06" od="---" flag="0">NtNotifyChangeDirectoryFile</fct>
<fct gp="06" od="---" flag="0">ZwNotifyChangeDirectoryFile</fct>
<fct gp="07" od="---" flag="0">PulseEvent</fct>
<fct gp="07" od="---" flag="0">MsgWaitForMultipleObjects</fct>
<fct gp="07" od="---" flag="0">MsgWaitForMultipleObjectsEx</fct>
<fct gp="07" od="---" flag="0">WaitForMultipleObjects</fct>
<fct gp="07" od="---" flag="0">WaitForMultipleObjectsEx</fct>
<fct gp="07" od="---" flag="0">WaitForSingleObject</fct>
<fct gp="07" od="---" flag="0">WaitForSingleObjectEx</fct>
<fct gp="07" od="---" flag="0">SignalObjectAndWait</fct>
<fct gp="07" od="---" flag="0">CreateWaitableTimer</fct>
<fct gp="07" od="---" flag="0">CreateWaitableTimerEx</fct>
<fct gp="32" od="---" flag="0">IoGetDeviceObjectPointer</fct>
<fct gp="32" od="---" flag="0">IoGetAttachedDeviceReference</fct>
<fct gp="32" od="---" flag="0">IoDetachDevice</fct>
<fct gp="32" od="---" flag="0">IoDeleteSymbolicLink</fct>
<fct gp="32" od="---" flag="0">IoCreateSymbolicLink</fct>
<fct gp="32" od="---" flag="0">IoAttachDeviceToDeviceStack</fct>
<fct gp="32" od="---" flag="0">IoCreateFile</fct>
<fct gp="32" od="---" flag="1">IoCreateDevice</fct>
<fct gp="32" od="---" flag="1">IoDeleteDevice</fct>
<fct gp="32" od="---" flag="0">IoBuildDeviceIoControlRequest</fct>
<fct gp="32" od="---" flag="1">IoCreateDriver</fct>
<fct gp="32" od="---" flag="0">IoCallDriver</fct>
<fct gp="32" od="---" flag="0">IofCompleteRequest</fct>
<fct gp="32" od="---" flag="0">CreateIoCompletionPort</fct>
<fct gp="02" od="---" flag="0" ti="1497">Sleep</fct>
<fct gp="02" od="---" flag="1" ti="1497">SleepEx</fct>
<fct gp="02" od="---" flag="0">InitializeProcThreadAttributeList</fct>
<fct gp="02" od="---" flag="0">UpdateProcThreadAttribute</fct>
<fct gp="02" od="---" flag="0">DeleteProcThreadAttributeList</fct>
<fct gp="19" od="---" flag="1">GetFirmwareEnvironmentVariable</fct>
<fct gp="15" od="---" flag="0">CreateMailslot</fct>
<fct gp="15" od="---" flag="0">GetMailslotInfo</fct>
<fct gp="15" od="---" flag="1">SetMailslotInfo</fct>
<fct gp="29" od="---" flag="1">SetVolumeLabel</fct>
<fct gp="16" od="---" flag="0">FlushInstructionCache</fct>
<fct gp="02" od="---" flag="0">FlushProcessWriteBuffers</fct>
<fct gp="19" od="---" flag="0" ti="1082">IsDebuggerPresent</fct>
<fct gp="16" od="---" flag="1">CheckRemoteDebuggerPresent</fct>
<fct gp="19" od="---" flag="1" ti="1055">GetThreadContext</fct>
<fct gp="19" od="---" flag="0">GetThreadId</fct>
<fct gp="19" od="---" flag="1" ti="1055">Wow64GetThreadContext</fct>
<fct gp="02" od="---" flag="1" ti="1055">Wow64SetThreadContext</fct>
<fct gp="02" od="---" flag="1" ti="1055">SuspendThread</fct>
<fct gp="19" od="---" flag="1">GetThreadPriority</fct>
<fct gp="02" od="---" flag="1">SetPriorityClass</fct>
<fct gp="19" od="---" flag="1">GetPriorityClass</fct>
<fct gp="19" od="---" flag="0">QueryPerformanceCounter</fct>
<fct gp="19" od="---" flag="0">DeleteTimerQueueEx</fct>
<fct gp="--" od="---" flag="1">QuerySecurityAccessMask</fct>
<fct gp="30" od="---" flag="1">QueryServiceObjectSecurity</fct>
<fct gp="19" od="---" flag="0" ti="1124">GetTickCount</fct>
<fct gp="19" od="---" flag="0">GetTickCount64</fct>
<fct gp="02" od="---" flag="1" ti="1055">SetThreadContext</fct>
<fct gp="07" od="---" flag="1">QueueUserAPC</fct>
<fct gp="30" od="---" flag="0">RtlFreeSid</fct>
<fct gp="30" od="---" flag="0">RtlCreateAndSetSD</fct>
<fct gp="30" od="---" flag="0">RtlInitializeSid</fct>
<fct gp="30" od="---" flag="0">RtlIdentifierAuthoritySid</fct>
<fct gp="30" od="---" flag="0">RtlLengthRequiredSid</fct>
<fct gp="30" od="---" flag="0">RtlSubAuthoritySid</fct>
<fct gp="19" od="---" flag="0">RtlQueryModuleInformation</fct>
<fct gp="30" od="---" flag="0">RtlQueryInformationAcl</fct>
<fct gp="30" od="---" flag="0">RtlGetAce</fct>
<fct gp="30" od="---" flag="0">RtlCopySid</fct>
<fct gp="19" od="---" flag="0">RtlGetNtVersionNumbers</fct>
<fct gp="02" od="---" flag="1">RtlAddGrowableFunctionTable</fct>
<fct gp="02" od="---" flag="1">RtlDeleteGrowableFunctionTable</fct>
<fct gp="02" od="---" flag="1">RtlGrowFunctionTable</fct>
<fct gp="02" od="---" flag="1">RtlAddFunctionTable</fct>
<fct gp="02" od="---" flag="0">RtlCaptureContext</fct>
<fct gp="02" od="---" flag="1">RtlDeleteFunctionTable</fct>
<fct gp="02" od="---" flag="1">RtlInstallFunctionTableCallback</fct>
<fct gp="30" od="---" flag="1">RtlValidSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlDeriveCapabilitySidsFromName</fct>
<fct gp="02" od="---" flag="1">RtlRestoreContext</fct>
<fct gp="02" od="---" flag="1">RtlRunOnceExecuteOnce</fct>
<fct gp="02" od="---" flag="0">RtlLookupFunctionEntry</fct>
<fct gp="05" od="---" flag="0">RtlVirtualUnwind</fct>
<fct gp="05" od="---" flag="0">HeapCompact</fct>
<fct gp="19" od="---" flag="1">QueryDosDevice</fct>
<fct gp="06" od="---" flag="1">GetBinaryType</fct>
<fct gp="06" od="---" flag="0">PostQueuedCompletionStatus</fct>
<fct gp="06" od="---" flag="0">GetQueuedCompletionStatus</fct>
<fct gp="06" od="---" flag="0">GetQueuedCompletionStatusEx</fct>
<fct gp="02" od="---" flag="1">FindExecutable</fct>
<fct gp="19" od="---" flag="1">FindFirstChangeNotification</fct>
<fct gp="19" od="---" flag="1">FindNextChangeNotification</fct>
<fct gp="19" od="---" flag="1">FindCloseChangeNotification</fct>
<fct gp="30" od="---" flag="1">SetProcessMitigationPolicy</fct>
<fct gp="30" od="---" flag="1">SetProtectedPolicy</fct>
<fct gp="05" od="---" flag="1">LocalFlags</fct>
<fct gp="05" od="---" flag="0">CopyMemory</fct>
<fct gp="05" od="---" flag="0">GetProcessHeaps</fct>
<fct gp="05" od="---" flag="0">RtlGetProcessHeaps</fct>
<fct gp="05" od="---" flag="1">GlobalMemoryStatus</fct>
<fct gp="05" od="---" flag="0">GetLargePageMinimum</fct>
<fct gp="05" od="---" flag="1">GlobalMemoryStatusEx</fct>
<fct gp="29" od="---" flag="1" ti="1006">DeleteVolumeMountPoint</fct>
<fct gp="29" od="---" flag="1" ti="1006">SetVolumeMountPoint</fct>
<fct gp="19" od="---" flag="1" ti="1006">FindFirstVolume</fct>
<fct gp="19" od="---" flag="1" ti="1006">FindNextVolume</fct>
<fct gp="19" od="---" flag="1" ti="1006">FindVolumeClose</fct>
<fct gp="19" od="---" flag="1" ti="1006">GetVolumeNameForVolumeMountPoint</fct>
<fct gp="19" od="---" flag="1" ti="1006">GetVolumePathName</fct>
<fct gp="19" od="---" flag="1" ti="1006">GetVolumePathNamesForVolumeName</fct>
<fct gp="06" od="---" flag="0">GetShortPathName</fct>
<fct gp="05" od="---" flag="0">GlobalUnfix</fct>
<fct gp="--" od="---" flag="1">CancelDeviceWakeupRequest</fct>
<fct gp="12" od="---" flag="1">GetShellWindow</fct>
<fct gp="07" od="---" flag="0">RtlLeaveCriticalSection</fct>
<fct gp="07" od="---" flag="0">RtlEnterCriticalSection</fct>
<fct gp="07" od="---" flag="0">DeleteCriticalSection</fct>
<fct gp="07" od="---" flag="0">EnterCriticalSection</fct>
<fct gp="07" od="---" flag="0">LeaveCriticalSection</fct>
<fct gp="07" od="---" flag="0">InterlockedCompareExchange</fct>
<fct gp="07" od="---" flag="0">ReleaseSRWLockShared</fct>
<fct gp="07" od="---" flag="0">AcquireSRWLockShared</fct>
<fct gp="07" od="---" flag="0">ReleaseSRWLockExclusive</fct>
<fct gp="07" od="---" flag="0">AcquireSRWLockExclusive</fct>
<fct gp="07" od="---" flag="0">InitializeSRWLock</fct>
<fct gp="03" od="---" flag="1">DnsQueryEx</fct>
<fct gp="03" od="---" flag="1">DnsQuery_</fct>
<fct gp="03" od="---" flag="1" ti="1083">InternetFindNextFile</fct>
<fct gp="03" od="---" flag="1">InternetGetCookieEx</fct>
<fct gp="03" od="---" flag="1">InternetGetLastResponseInfo</fct>
<fct gp="03" od="---" flag="1">commands</fct>
<fct gp="03" od="---" flag="1">httpshots</fct>
<fct gp="03" od="---" flag="1">formgrabber</fct>
<fct gp="03" od="---" flag="1">redirects</fct>
<fct gp="03" od="---" flag="1">httpinjects</fct>
<fct gp="03" od="---" flag="1">GetQueueStatus</fct>
<fct gp="12" od="---" flag="0">GetLastActivePopup</fct>
<fct gp="--" od="---" flag="1">DownloadRunModId</fct>
<fct gp="--" od="---" flag="1">DownloadUpdateMain</fct>
<fct gp="--" od="---" flag="1">Inject32End</fct>
<fct gp="--" od="---" flag="1">Inject32Normal</fct>
<fct gp="--" od="---" flag="1">Inject32Start</fct>
<fct gp="--" od="---" flag="1">InjectApcRoutine</fct>
<fct gp="--" od="---" flag="1">InjectNormRoutine</fct>
<fct gp="--" od="---" flag="1">SelfDelete</fct>
<fct gp="--" od="---" flag="1">SendLogs</fct>
<fct gp="--" od="---" flag="1">WriteConfigString</fct>
<fct gp="--" od="---" flag="1">DownloadRunExeId</fct>
<fct gp="--" od="---" flag="1">DownloadRunExeUrl</fct>
<fct gp="--" od="---" flag="1">TestingServ</fct>
<fct gp="02" od="---" flag="1">AttachThreadInput</fct>
<fct gp="30" od="---" flag="1">ObjectDeleteAuditAlarm</fct>
<fct gp="30" od="---" flag="0">ObjectPrivilegeAuditAlarm</fct>
<fct gp="30" od="---" flag="1">AuditComputeEffectivePolicyBySid</fct>
<fct gp="30" od="---" flag="1">AuditComputeEffectivePolicyByToken</fct>
<fct gp="30" od="---" flag="1">AuditEnumerateCategories</fct>
<fct gp="30" od="---" flag="1">AuditEnumeratePerUserPolicy</fct>
<fct gp="30" od="---" flag="1">AuditEnumerateSubCategories</fct>
<fct gp="30" od="---" flag="1">AuditFree</fct>
<fct gp="30" od="---" flag="1">AuditLookupCategoryGuidFromCategoryId</fct>
<fct gp="30" od="---" flag="1">AuditLookupCategoryIdFromCategoryGuid</fct>
<fct gp="30" od="---" flag="1">AuditLookupCategoryName</fct>
<fct gp="30" od="---" flag="1">AuditLookupSubCategoryName</fct>
<fct gp="30" od="---" flag="1">AuditQueryGlobalSacl</fct>
<fct gp="30" od="---" flag="1">AuditQueryPerUserPolicy</fct>
<fct gp="30" od="---" flag="1">AuditQuerySecurity</fct>
<fct gp="30" od="---" flag="1">AuditQuerySystemPolicy</fct>
<fct gp="30" od="---" flag="1">AuditSetGlobalSacl</fct>
<fct gp="30" od="---" flag="1">AuditSetPerUserPolicy</fct>
<fct gp="30" od="---" flag="1">AuditSetSecurity</fct>
<fct gp="30" od="---" flag="1">AuditSetSystemPolicy</fct>
<fct gp="30" od="---" flag="1">AuthzAccessCheck</fct>
<fct gp="30" od="---" flag="1">AuthzAccessCheckCallback</fct>
<fct gp="30" od="---" flag="1">AuthzAddSidsToContext</fct>
<fct gp="30" od="---" flag="1">AuthzCachedAccessCheck</fct>
<fct gp="30" od="---" flag="1">AuthzComputeGroupsCallback</fct>
<fct gp="30" od="---" flag="1">AuthzEnumerateSecurityEventSources</fct>
<fct gp="30" od="---" flag="1">AuthzFreeAuditEvent</fct>
<fct gp="30" od="---" flag="1">AuthzFreeCentralAccessPolicyCache</fct>
<fct gp="30" od="---" flag="1">AuthzFreeCentralAccessPolicyCallback</fct>
<fct gp="30" od="---" flag="1">AuthzFreeContext</fct>
<fct gp="30" od="---" flag="1">AuthzFreeGroupsCallback</fct>
<fct gp="30" od="---" flag="1">AuthzFreeHandle</fct>
<fct gp="30" od="---" flag="1">AuthzFreeResourceManager</fct>
<fct gp="30" od="---" flag="1">AuthzGetCentralAccessPolicyCallback</fct>
<fct gp="30" od="---" flag="1">AuthzGetInformationFromContext</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeCompoundContext</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeContextFromAuthzContext</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeContextFromSid</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeContextFromToken</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeObjectAccessAuditEvent</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeObjectAccessAuditEvent2</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeRemoteResourceManager</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeResourceManager</fct>
<fct gp="30" od="---" flag="1">AuthzInitializeResourceManagerEx</fct>
<fct gp="30" od="---" flag="1">AuthzInstallSecurityEventSource</fct>
<fct gp="30" od="---" flag="1">AuthzModifyClaims</fct>
<fct gp="30" od="---" flag="1">AuthzModifySecurityAttributes</fct>
<fct gp="30" od="---" flag="1">AuthzModifySids</fct>
<fct gp="30" od="---" flag="1">AuthzOpenObjectAudit</fct>
<fct gp="30" od="---" flag="1">AuthzRegisterCapChangeNotification</fct>
<fct gp="30" od="---" flag="1">AuthzRegisterSecurityEventSource</fct>
<fct gp="30" od="---" flag="1">AuthzReportSecurityEvent</fct>
<fct gp="30" od="---" flag="1">AuthzReportSecurityEventFromParams</fct>
<fct gp="30" od="---" flag="1">AuthzSetAppContainerInformation</fct>
<fct gp="30" od="---" flag="1">AuthzUninstallSecurityEventSource</fct>
<fct gp="30" od="---" flag="1">AuthzUnregisterCapChangeNotification</fct>
<fct gp="30" od="---" flag="1">AuthzUnregisterSecurityEventSource</fct>
<fct gp="03" od="---" flag="1">bind</fct>
<fct gp="30" od="---" flag="1">BuildExplicitAccessWithName</fct>
<fct gp="30" od="---" flag="1">BuildImpersonateExplicitAccessWithName</fct>
<fct gp="30" od="---" flag="1">BuildImpersonateTrustee</fct>
<fct gp="30" od="---" flag="1">BuildSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">BuildTrusteeWithName</fct>
<fct gp="30" od="---" flag="1">BuildTrusteeWithObjectsAndName</fct>
<fct gp="30" od="---" flag="1">BuildTrusteeWithObjectsAndSid</fct>
<fct gp="30" od="---" flag="1">BuildTrusteeWithSid</fct>
<fct gp="30" od="---" flag="1" ti="1134">CheckTokenCapability</fct>
<fct gp="30" od="---" flag="1" ti="1134">CheckTokenMembership</fct>
<fct gp="30" od="---" flag="1" ti="1134">CheckTokenMembershipEx</fct>
<fct gp="03" od="---" flag="1">connect</fct>
<fct gp="30" od="---" flag="1" ti="1134">ConvertSecurityDescriptorToStringSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1" ti="1134">ConvertStringSecurityDescriptorToSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1" ti="1134">ConvertStringSidToSid</fct>
<fct gp="30" od="---" flag="1" ti="1134">ConvertToAutoInheritPrivateObjectSecurity</fct>
<fct gp="30" od="---" flag="1" ti="1134">CopySid</fct>
<fct gp="02" od="---" flag="1">CreateEnvironmentBlock</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegDeleteTree</fct>
<fct gp="01" od="---" flag="0">RegGetValue</fct>
<fct gp="01" od="---" flag="0">RegCloseKey</fct>
<fct gp="01" od="---" flag="1">RegUnLoadKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegReplaceKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegFlushKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegCopyTree</fct>
<fct gp="01" od="---" flag="1">RegLoadKey</fct>
<fct gp="01" od="---" flag="1" ti="1012">RegEnumKey</fct>
<fct gp="01" od="---" flag="1">RegConnectRegistry</fct>
<fct gp="01" od="---" flag="1" ti="1485">RegDeleteKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegDeleteKeyValue</fct>
<fct gp="01" od="---" flag="1" ti="1485">RegDeleteValue</fct>
<fct gp="01" od="---" flag="0" ti="1012">RegEnumKeyEx</fct>
<fct gp="01" od="---" flag="1">RegGetKeySecurity</fct>
<fct gp="01" od="---" flag="0">RegOpenKey</fct>
<fct gp="01" od="---" flag="0">RegOpenKeyTransacted</fct>
<fct gp="01" od="---" flag="0" ti="1485">RegCreateKeyTransacted</fct>
<fct gp="01" od="---" flag="0" ti="1485">RegDeleteKeyTransacted</fct>
<fct gp="01" od="---" flag="0" ti="1485">RegDeleteKeyEx</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSetKeySecurity</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSetKeyValue</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSetValue</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSetValueEx</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSetValueExW</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegCreateHKCUKeyExU</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegCreateKeyExU</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegDeleteValueU</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegEnumValueU</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegOpenHKCUKeyExU</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegOpenKeyExU</fct>
<fct gp="01" od="---" flag="0" ti="1112">RegQueryInfoKeyU</fct>
<fct gp="01" od="---" flag="0" ti="1112">RegQueryValueExU</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSetValueExU</fct>
<fct gp="01" od="---" flag="0">GetKeyValue</fct>
<fct gp="01" od="---" flag="1">RegNotifyChangeKeyValue</fct>
<fct gp="01" od="---" flag="1">RegRestoreKey</fct>
<fct gp="01" od="---" flag="1">RegOverridePredefKey</fct>
<fct gp="01" od="---" flag="1">RegSetValue</fct>
<fct gp="01" od="---" flag="0" ti="1012">RegQueryValue</fct>
<fct gp="01" od="---" flag="0">RegOpenKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegCreateKeyEx</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegCreateKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSaveKey</fct>
<fct gp="01" od="---" flag="1">RegDisablePredefinedCache</fct>
<fct gp="01" od="---" flag="1">RegDisablePredefinedCacheEx</fct>
<fct gp="01" od="---" flag="1">RegDisableReflectionKey</fct>
<fct gp="01" od="---" flag="1">RegEnableReflectionKey</fct>
<fct gp="01" od="---" flag="1" ti="1012">RegQueryMultipleValues</fct>
<fct gp="01" od="---" flag="1">RegDisablePredefinedCacheE</fct>
<fct gp="01" od="---" flag="0" ti="1012">RegEnumValue</fct>
<fct gp="01" od="---" flag="1">RegOpenCurrentUser</fct>
<fct gp="01" od="---" flag="0">RegOpenKeyEx</fct>
<fct gp="01" od="---" flag="1">RegOpenUserClassesRoot</fct>
<fct gp="01" od="---" flag="0" ti="1012">RegQueryInfoKey</fct>
<fct gp="01" od="---" flag="0" ti="1012">RegQueryValueEx</fct>
<fct gp="01" od="---" flag="1" ti="1112">RegSaveKeyEx</fct>
<fct gp="01" od="---" flag="1" ti="1485">SHDeleteKey</fct>
<fct gp="01" od="---" flag="1" ti="1485">SHDeleteValue</fct>
<fct gp="01" od="---" flag="1" ti="1485">SHDeleteEmptyKey</fct>
<fct gp="01" od="---" flag="1">SHOpenRegStream2</fct>
<fct gp="01" od="---" flag="0">SHOpenRegStream</fct>
<fct gp="01" od="---" flag="0">SHRegGetBoolValueFromHKCUHKLM</fct>
<fct gp="01" od="---" flag="0">SHRegGetValue</fct>
<fct gp="01" od="---" flag="0">SHRegGetValueFromHKCUHKLM</fct>
<fct gp="01" od="---" flag="1">SHReplaceFromPropSheetExtArray</fct>
<fct gp="01" od="---" flag="0">SHQueryInfoKey</fct>
<fct gp="01" od="---" flag="0">SHQueryValueEx</fct>
<fct gp="01" od="---" flag="0">SHRegCloseUSKey</fct>
<fct gp="01" od="---" flag="0" ti="1112">SHRegCreateUSKey</fct>
<fct gp="01" od="---" flag="0" ti="1112">SHRegDeleteEmptyUSKey</fct>
<fct gp="01" od="---" flag="0">SHRegGetUSValue</fct>
<fct gp="01" od="---" flag="0">SHRegOpenUSKey</fct>
<fct gp="01" od="---" flag="0">SHRegOpenUSKey</fct>
<fct gp="01" od="---" flag="0">SHRegQueryUSValue</fct>
<fct gp="01" od="---" flag="1" ti="1112">SHRegSetUSValue</fct>
<fct gp="01" od="---" flag="1" ti="1112">SHRegWriteUSValue</fct>
<fct gp="01" od="---" flag="1" ti="1112">SHSetValue</fct>
<fct gp="02" od="---" flag="1" ti="1106">CreateProcessWithToken</fct>
<fct gp="02" od="---" flag="1" ti="1106">CreateProcess</fct>
<fct gp="02" od="---" flag="1" ti="1106">CreateProcessInternal</fct>
<fct gp="02" od="---" flag="1" ti="1106">CreateProcessAsUser</fct>
<fct gp="02" od="---" flag="1" ti="1106">CreateProcessAsUserW</fct>
<fct gp="02" od="---" flag="1" ti="1106">CreateProcessWithLogon</fct>
<fct gp="02" od="---" flag="1" ti="1055">CreateRemoteThread</fct>
<fct gp="30" od="---" flag="1" ti="1134">CreateRestrictedToken</fct>
<fct gp="05" od="---" flag="0">GetNumaHighestNodeNumber</fct>
<fct gp="05" od="---" flag="0">GetNumaAvailableMemoryNode</fct>
<fct gp="02" od="---" flag="0">CreateThread</fct>
<fct gp="02" od="---" flag="0">_beginthread</fct>
<fct gp="02" od="---" flag="0">_beginthreadex</fct>
<fct gp="02" od="---" flag="0">_endthread</fct>
<fct gp="02" od="---" flag="0">_endthreadex</fct>
<fct gp="02" od="---" flag="0" ti="1055">ResumeThread</fct>
<fct gp="02" od="---" flag="0" ti="1055">NtAlertResumeThread</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtCreateToken</fct>
<fct gp="02" od="---" flag="0">IsProcessInJob</fct>
<fct gp="02" od="---" flag="0">TerminateProcess</fct>
<fct gp="02" od="---" flag="0">ExitProcess</fct>
<fct gp="02" od="---" flag="0">ExitThread</fct>
<fct gp="02" od="---" flag="1" ti="1106">ShellExecute</fct>
<fct gp="02" od="---" flag="1" ti="1106">ShellExecuteEx</fct>
<fct gp="02" od="---" flag="1" ti="1106">WinExec</fct>
<fct gp="02" od="---" flag="1" ti="1057">GetCurrentProcess</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetCurrentProcess</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetProcessInheritedFromUniqueProcessId</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetProcessPeb</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetThreadProcess</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetThreadProcessId</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetThreadTeb</fct>
<fct gp="02" od="---" flag="1" ti="1057">PsGetThreadWin32Thread</fct>
<fct gp="30" od="---" flag="1" ti="1134">OpenProcessToken</fct>
<fct gp="30" od="---" flag="1" ti="1134">OpenThreadToken</fct>
<fct gp="02" od="---" flag="1" ti="1055">OpenProcess</fct>
<fct gp="05" od="---" flag="1" ti="1055">WriteProcessMemory</fct>
<fct gp="19" od="---" flag="1" ti="1057">GetCurrentProcessId</fct>
<fct gp="02" od="---" flag="1" ti="1057">GetProcessMemoryInfo</fct>
<fct gp="02" od="---" flag="1" ti="1057">GetWindowThreadProcessId</fct>
<fct gp="02" od="---" flag="1" >Toolhelp32ReadProcessMemory</fct>
<fct gp="02" od="---" flag="1" ti="1057">CreateToolhelp32Snapshot</fct>
<fct gp="02" od="---" flag="1" ti="1057">CloseToolhelp32Snapshot</fct>
<fct gp="02" od="---" flag="1">SwitchToThread</fct>
<fct gp="02" od="---" flag="1" ti="1055">Wow64SuspendThread</fct>
<fct gp="02" od="---" flag="0">GetExitCodeProcess</fct>
<fct gp="02" od="---" flag="0">TerminateThread</fct>
<fct gp="02" od="---" flag="1" ti="1057">Process32First</fct>
<fct gp="02" od="---" flag="1" ti="1057">Process32Next</fct>
<fct gp="02" od="---" flag="1" ti="1057">Thread32First</fct>
<fct gp="02" od="---" flag="1" ti="1057">Thread32Next</fct>
<fct gp="02" od="---" flag="1" ti="1057">Module32First</fct>
<fct gp="02" od="---" flag="1" ti="1057">Module32Next</fct>
<fct gp="04" od="---" flag="1" ti="1027">CertConfigureTrust</fct>
<fct gp="04" od="---" flag="1" ti="1027">CertOpenSystemStore</fct>
<fct gp="04" od="---" flag="1" ti="1027">CertTrustCertPolicy</fct>
<fct gp="04" od="---" flag="1" ti="1027">CertTrustInit</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptSignAndEncodeCertificate</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptEncodeObject</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptEncodeObjectEx</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptExportPublicKeyInfoEx</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptCreateHash</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptHashData</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptImportPublicKeyInfo</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptProtectData</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptDestroyHash</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptHashData</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptDeriveKeyPBKDF2</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptEncrypt</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptFinishHash</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptVerifySignature</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptImportKeyPair</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptImportKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">BCryptCreateHash</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptGetHashParam</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptDestroyHash</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptReleaseContext</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptDecrypt</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptEncrypt</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptAcquireContext</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptGenRandom</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptDestroyKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptGetKeyParam</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptVerifySignature</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptImportKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptEnumProviders</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptEnumProviderTypes</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptDeriveKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptSetProvider</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptSetProviderEx</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptGetDefaultProvider</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptDuplicateHash</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptExportKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptGenKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptGetUserKey</fct>
<fct gp="04" od="---" flag="0" ti="1027">CryptContextAddRef</fct>
<fct gp="04" od="---" flag="0" ti="1027">CryptGetProvParam</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptDuplicateKey</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptSetKeyParam</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptSetProvParam</fct>
<fct gp="04" od="---" flag="1" ti="1027">CryptSetHashParam</fct>
<fct gp="04" od="---" flag="1" ti="1027">EncryptFile</fct>
<fct gp="04" od="---" flag="1" ti="1027">DecryptFile</fct>
<fct gp="04" od="---" flag="1" ti="1027">EncryptDirectory</fct>
<fct gp="04" od="---" flag="1" ti="1027">AES_Encrypt</fct>
<fct gp="04" od="---" flag="1" ti="1027">AES_Decrypt</fct>
<fct gp="04" od="---" flag="1" ti="1027">Encrypt_AES</fct>
<fct gp="04" od="---" flag="1" ti="1027">Decrypt_AES</fct>
<fct gp="04" od="---" flag="1" ti="1027">EncryptedFileKeyInfo</fct>
<fct gp="04" od="---" flag="1" ti="1027">EncryptionDisable</fct>
<fct gp="04" od="---" flag="1" ti="1027">CloseEncryptedFileRaw</fct>
<fct gp="04" od="---" flag="1" ti="1027">OpenEncryptedFileRaw</fct>
<fct gp="04" od="---" flag="1" ti="1027">ReadEncryptedFileRaw</fct>
<fct gp="04" od="---" flag="1" ti="1027">WriteEncryptedFileRaw</fct>
<fct gp="04" od="---" flag="1" ti="1027">DuplicateEncryptionInfoFile</fct>
<fct gp="04" od="---" flag="1" ti="1027">SetUserFileEncryptionKey</fct>
<fct gp="05" od="---" flag="0">HeapSize</fct>
<fct gp="05" od="---" flag="0">HeapAlloc</fct>
<fct gp="05" od="---" flag="0">HeapReAlloc</fct>
<fct gp="05" od="---" flag="0">HeapDestroy</fct>
<fct gp="05" od="---" flag="0">HeapFree</fct>
<fct gp="05" od="---" flag="0">HeapCreate</fct>
<fct gp="05" od="---" flag="0">HeapSetInformation</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualAlloc</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualAllocEx</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualAllocExNuma</fct>
<fct gp="05" od="---" flag="0" ti="1055">VirtualFree</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualProtect</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualProtectEx</fct>
<fct gp="05" od="---" flag="0">GetProcessMemoryInfo</fct>
<fct gp="05" od="---" flag="1" ti="1055">ReadProcessMemory</fct>
<fct gp="05" od="---" flag="0">GetProcessHeap</fct>
<fct gp="05" od="---" flag="0">LocalAlloc</fct>
<fct gp="05" od="---" flag="0">LocalFree</fct>
<fct gp="05" od="---" flag="0">LocalReAlloc</fct>
<fct gp="05" od="---" flag="0">GlobalFree</fct>
<fct gp="05" od="---" flag="0">GlobalReAlloc</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualQuery</fct>
<fct gp="05" od="---" flag="1" ti="1055">VirtualQueryEx</fct>
<fct gp="05" od="---" flag="0">Heap32ListFirst</fct>
<fct gp="19" od="---" flag="0" ti="1533" cb="1">EnumSystemLocales</fct>
<fct gp="19" od="---" flag="0" ti="1533" cb="1">EnumSystemLocalesEx</fct>
<fct gp="05" od="---" flag="0">Heap32ListNext</fct>
<fct gp="05" od="---" flag="0">Heap32Next</fct>
<fct gp="05" od="---" flag="0">Heap32First</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindNextFile</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindFirstFile</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindFirstFileEx</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindFirstFileTransacted</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindFirstFileNameTransacted</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindFirstFileName</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindNextFileName</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindNextStream</fct>
<fct gp="06" od="---" flag="1" ti="1083">FindFirstStream</fct>
<fct gp="06" od="---" flag="0">FindClose</fct>
<fct gp="06" od="---" flag="1">RemoveDirectory</fct>
<fct gp="06" od="---" flag="1">CreateDirectory</fct>
<fct gp="06" od="---" flag="1">CreateDirectoryEx</fct>
<fct gp="06" od="---" flag="0">CreateFileTransacted</fct>
<fct gp="06" od="---" flag="0">CreateFile</fct>
<fct gp="06" od="---" flag="0">CreateFile2</fct>
<fct gp="06" od="---" flag="1" ti="1105">CopyFile</fct>
<fct gp="06" od="---" flag="1" cb="1" ti="1105">CopyFile2</fct>
<fct gp="06" od="---" flag="1" cb="1" ti="1105">CopyFileEx</fct>
<fct gp="06" od="---" flag="1" ti="1485">DeleteFile</fct>
<fct gp="06" od="---" flag="1">WriteFile</fct>
<fct gp="06" od="---" flag="1">WriteAllBytes</fct>
<fct gp="06" od="---" flag="1">WriteAllText</fct>
<fct gp="06" od="---" flag="0">OpenFileById</fct>
<fct gp="06" od="---" flag="1">WriteFileEx</fct>
<fct gp="06" od="---" flag="0">FlushFileBuffers</fct>
<fct gp="06" od="---" flag="1">WriteFileGather</fct>
<fct gp="06" od="---" flag="0">CreateFileMapping</fct>
<fct gp="06" od="---" flag="0">DosDateTimeToFileTime</fct>
<fct gp="06" od="---" flag="0">FileTimeToDosDateTime</fct>
<fct gp="06" od="---" flag="0">FileTimeToLocalFileTime</fct>
<fct gp="06" od="---" flag="0">FileTimeToSystemTime</fct>
<fct gp="06" od="---" flag="0">FlushViewOfFile</fct>
<fct gp="06" od="---" flag="1">GetCPFileNameFromRegistry</fct>
<fct gp="06" od="---" flag="1" ti="1486">CopyLZFile</fct>
<fct gp="06" od="---" flag="0">GetCompressedFileSize</fct>
<fct gp="06" od="---" flag="0">GetFileAttributes</fct>
<fct gp="06" od="---" flag="0">GetFileAttributesEx</fct>
<fct gp="06" od="---" flag="0">CompareFileTime</fct>
<fct gp="06" od="---" flag="0">SetFileInformationByHandle</fct>
<fct gp="06" od="---" flag="0">GetFileSize</fct>
<fct gp="06" od="---" flag="0">GetFileSizeEx</fct>
<fct gp="06" od="---" flag="0">GetFileTime</fct>
<fct gp="06" od="---" flag="0">GetFileType</fct>
<fct gp="06" od="---" flag="0" ti="1124">GetSystemTimeAsFileTime</fct>
<fct gp="06" od="---" flag="0">GetTempFileName</fct>
<fct gp="06" od="---" flag="1" ti="1486">LZCloseFile</fct>
<fct gp="06" od="---" flag="1" ti="1486">LZCreateFile</fct>
<fct gp="06" od="---" flag="1" ti="1486">LZOpenFile</fct>
<fct gp="06" od="---" flag="0">LocalFileTimeToFileTime</fct>
<fct gp="06" od="---" flag="1">LockFile</fct>
<fct gp="06" od="---" flag="1">LockFileEx</fct>
<fct gp="06" od="---" flag="1">UnlockFile</fct>
<fct gp="06" od="---" flag="1">MapViewOfFile</fct>
<fct gp="06" od="---" flag="1">MapViewOfFileEx</fct>
<fct gp="06" od="---" flag="1">ReadFileScatter</fct>
<fct gp="06" od="---" flag="1" ti="1105">MoveFile</fct>
<fct gp="06" od="---" flag="1" ti="1105">MoveFileEx</fct>
<fct gp="06" od="---" flag="1" ti="1105">MoveFileWithProgress</fct>
<fct gp="06" od="---" flag="1" ti="1105">MoveFileTransacted</fct>
<fct gp="06" od="---" flag="1" ti="1485">DeleteFileTransacted</fct>
<fct gp="06" od="---" flag="1" ti="1105">CopyFileTransacted</fct>
<fct gp="06" od="---" flag="1">SetFileAttributesTransacted</fct>
<fct gp="06" od="---" flag="1">OpenDataFile</fct>
<fct gp="06" od="---" flag="0">OpenFile</fct>
<fct gp="06" od="---" flag="1">OpenFileMapping</fct>
<fct gp="06" od="---" flag="1">OpenProfileUserMapping</fct>
<fct gp="06" od="---" flag="1" ti="1105">PrivCopyFileEx</fct>
<fct gp="06" od="---" flag="1" ti="1105">PrivMoveFileIdentity</fct>
<fct gp="06" od="---" flag="0">ReadFile</fct>
<fct gp="06" od="---" flag="0" ti="1036">ReadFileEx</fct>
<fct gp="06" od="---" flag="1" ti="1036">ReplaceFile</fct>
<fct gp="06" od="---" flag="0">SetFilePointerEx</fct>
<fct gp="06" od="---" flag="0">SetFilePointer</fct>
<fct gp="06" od="---" flag="0">SetEndOfFile</fct>
<fct gp="06" od="---" flag="1">SetFileAttributes</fct>
<fct gp="06" od="---" flag="1">SetFileShortName</fct>
<fct gp="06" od="---" flag="1">SetFileSecurity</fct>
<fct gp="06" od="---" flag="0">SetFileTime</fct>
<fct gp="06" od="---" flag="0">SetFileValidData</fct>
<fct gp="06" od="---" flag="0">SystemTimeToFileTime</fct>
<fct gp="02" od="---" flag="0">TerminateJobObject</fct>
<fct gp="06" od="---" flag="0">GetFullPathName</fct>
<fct gp="06" od="---" flag="1">UnlockFileEx</fct>
<fct gp="06" od="---" flag="1">UnmapViewOfFile</fct>
<fct gp="02" od="---" flag="0">GetCurrentDirectory</fct>
<fct gp="16" od="---" flag="0">GetLastError</fct>
<fct gp="06" od="---" flag="1">GetFileSecurity</fct>
<fct gp="06" od="---" flag="0">GetFileInformationByHandle</fct>
<fct gp="06" od="---" flag="1">GetFileInformationByHandleEx</fct>
<fct gp="06" od="---" flag="0">GetTempPath</fct>
<fct gp="07" od="---" flag="0">CreateMutex</fct>
<fct gp="07" od="---" flag="0">CreateMutexEx</fct>
<fct gp="07" od="---" flag="0">OpenMutex</fct>
<fct gp="07" od="---" flag="0">ReleaseMutex</fct>
<fct gp="15" od="---" flag="1">CallNamedPipe</fct>
<fct gp="15" od="---" flag="0">ConnectNamedPipe</fct>
<fct gp="15" od="---" flag="1">CreateNamedPipe</fct>
<fct gp="15" od="---" flag="1">CreatePipe</fct>
<fct gp="15" od="---" flag="0">DisconnectNamedPipe</fct>
<fct gp="15" od="---" flag="0">GetNamedPipeHandleState</fct>
<fct gp="15" od="---" flag="0">GetNamedPipeInfo</fct>
<fct gp="15" od="---" flag="0">PeekNamedPipe</fct>
<fct gp="15" od="---" flag="0">SetNamedPipeHandleState</fct>
<fct gp="15" od="---" flag="0">TransactNamedPipe</fct>
<fct gp="15" od="---" flag="0">WaitNamedPipe</fct>
<fct gp="09" od="---" flag="1">StartServiceCtrlDispatcher</fct>
<fct gp="09" od="---" flag="0">SvchostPushServiceGlobals</fct>
<fct gp="09" od="---" flag="0">SvchostPushServiceGlobalsEx</fct>
<fct gp="09" od="---" flag="1">GetServiceDisplayName</fct>
<fct gp="09" od="---" flag="1" ti="1489">ControlService</fct>
<fct gp="30" od="---" flag="1">LsaRemoveAccountRights</fct>
<fct gp="30" od="---" flag="1" ti="1087">LsaEnumerateLogonSessions</fct>
<fct gp="30" od="---" flag="1">LsaCallAuthenticationPackage</fct>
<fct gp="30" od="---" flag="1">LsaUnregisterPolicyChangeNotification</fct>
<fct gp="11" od="---" flag="0">FindResource</fct>
<fct gp="11" od="---" flag="0">LockResource</fct>
<fct gp="11" od="---" flag="0">FindResourceEx</fct>
<fct gp="11" od="---" flag="1">BeginUpdateResource</fct>
<fct gp="11" od="---" flag="1">EndUpdateResource</fct>
<fct gp="11" od="---" flag="0">LoadResource</fct>
<fct gp="11" od="---" flag="0">SizeofResource</fct>
<fct gp="11" od="---" flag="0">FreeResource</fct>
<fct gp="11" od="---" flag="1">EnumResourceNames</fct>
<fct gp="11" od="---" flag="1">UpdateResource</fct>
<fct gp="12" od="---" flag="0">DefWindowProc</fct>
<fct gp="12" od="---" flag="0" cb="1" ti="1055">EnumWindows</fct>
<fct gp="12" od="---" flag="0" cb="1">EnumChildWindows</fct>
<fct gp="12" od="---" flag="1" cb="1">EnumThreadWindows</fct>
<fct gp="30" od="---" flag="1">AccessCheck</fct>
<fct gp="30" od="---" flag="1">AccessCheckAndAuditAlarm</fct>
<fct gp="30" od="---" flag="1">AccessCheckByType</fct>
<fct gp="30" od="---" flag="1">AccessCheckByTypeAndAuditAlarm</fct>
<fct gp="30" od="---" flag="1">AccessCheckByTypeResultList</fct>
<fct gp="30" od="---" flag="1">AccessCheckByTypeResultListAndAuditAlarm</fct>
<fct gp="30" od="---" flag="1">AccessCheckByTypeResultListAndAuditAlarmByHandle</fct>
<fct gp="30" od="---" flag="1">AddAccessAllowedAce</fct>
<fct gp="30" od="---" flag="1">AddAccessAllowedAceEx</fct>
<fct gp="30" od="---" flag="1">AddAccessAllowedObjectAce</fct>
<fct gp="30" od="---" flag="1">AddAccessDeniedAce</fct>
<fct gp="30" od="---" flag="1">AddAccessDeniedAceEx</fct>
<fct gp="30" od="---" flag="1">AddUsersToEncryptedFile</fct>
<fct gp="30" od="---" flag="1">AddAccessDeniedObjectAce</fct>
<fct gp="30" od="---" flag="1">AddAce</fct>
<fct gp="30" od="---" flag="1">AddAuditAccessAce</fct>
<fct gp="30" od="---" flag="1">AddAuditAccessAceEx</fct>
<fct gp="30" od="---" flag="1">AddAuditAccessObjectAce</fct>
<fct gp="30" od="---" flag="1">AddConditionalAce</fct>
<fct gp="30" od="---" flag="1">AddMandatoryAce</fct>
<fct gp="30" od="---" flag="1">AddResourceAttributeAce</fct>
<fct gp="30" od="---" flag="1">AddScopedPolicyIDAce</fct>
<fct gp="30" od="---" flag="1" ti="1134">AdjustTokenGroups</fct>
<fct gp="30" od="---" flag="1" ti="1134">AdjustTokenPrivileges</fct>
<fct gp="30" od="---" flag="1">AllocateAndInitializeSid</fct>
<fct gp="30" od="---" flag="1">AllocateLocallyUniqueId</fct>
<fct gp="30" od="---" flag="1">AreAllAccessesGranted</fct>
<fct gp="30" od="---" flag="1">AreAnyAccessesGranted</fct>
<fct gp="30" od="---" flag="1" ti="1134">LookupAccountName</fct>
<fct gp="30" od="---" flag="1" ti="1134">LookupAccountSid</fct>
<fct gp="30" od="---" flag="1" ti="1134">LookupPrivilegeDisplayName</fct>
<fct gp="30" od="---" flag="1" ti="1134">LookupPrivilegeName</fct>
<fct gp="30" od="---" flag="1" ti="1134">LookupPrivilegeValue</fct>
<fct gp="30" od="---" flag="1" ti="1134">LookupSecurityDescriptorParts</fct>
<fct gp="30" od="---" flag="1" ti="1134">CreatePrivateObjectSecurity</fct>
<fct gp="30" od="---" flag="1" ti="1134">CreatePrivateObjectSecurityEx</fct>
<fct gp="30" od="---" flag="1" ti="1134">CreatePrivateObjectSecurityWithMultipleInheritance</fct>
<fct gp="30" od="---" flag="1">CreateSecurityPage</fct>
<fct gp="30" od="---" flag="1" ti="1134">CreateWellKnownSid</fct>
<fct gp="30" od="---" flag="1" ti="1134">DeleteAce</fct>
<fct gp="02" od="---" flag="1">DestroyEnvironmentBlock</fct>
<fct gp="30" od="---" flag="1">DestroyPrivateObjectSecurity</fct>
<fct gp="32" od="---" flag="0">DeviceIoControl</fct>
<fct gp="32" od="---" flag="0">CancelIo</fct>
<fct gp="21" od="---" flag="0">DllCanUnloadNow</fct>
<fct gp="21" od="---" flag="0">DllGetClassObject</fct>
<fct gp="01" od="---" flag="1">DllInstall</fct>
<fct gp="01" od="---" flag="1" ti="1218">DllRegisterServer</fct>
<fct gp="01" od="---" flag="1" ti="1218">DllRegisterServerEx</fct>
<fct gp="01" od="---" flag="1" ti="1218">DllUnregisterServer</fct>
<fct gp="01" od="---" flag="1" ti="1218">DllUnregisterServerEx</fct>
<fct gp="--" od="---" flag="1">DSCreateISecurityInfoObject</fct>
<fct gp="--" od="---" flag="1">DSCreateISecurityInfoObjectEx</fct>
<fct gp="--" od="---" flag="1">DSCreateSecurityPage</fct>
<fct gp="--" od="---" flag="1">DSEditSecurity</fct>
<fct gp="30" od="---" flag="1" ti="1134">DuplicateToken</fct>
<fct gp="30" od="---" flag="1" ti="1134">DuplicateTokenEx</fct>
<fct gp="--" od="---" flag="1">EditSecurity</fct>
<fct gp="--" od="---" flag="1">EditSecurityAdvanced</fct>
<fct gp="--" od="---" flag="1">EnableExecuteProtectionSupport</fct>
<fct gp="12" od="---" flag="0" ti="1055">FindWindow</fct>
<fct gp="12" od="---" flag="0" ti="1055">FindWindowEx</fct>
<fct gp="30" od="---" flag="1">EqualDomainSid</fct>
<fct gp="30" od="---" flag="1">EqualPrefixSid</fct>
<fct gp="30" od="---" flag="1">EqualSid</fct>
<fct gp="30" od="---" flag="1">FindFirstFreeAce</fct>
<fct gp="--" od="---" flag="1">FreeInheritedFromArray</fct>
<fct gp="30" od="---" flag="1">FreeSid</fct>
<fct gp="30" od="---" flag="1">GetAccessSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">GetAce</fct>
<fct gp="30" od="---" flag="1">GetAclInformation</fct>
<fct gp="03" od="---" flag="1">GetAdaptersInfo</fct>
<fct gp="03" od="---" flag="1">getaddrinfo</fct>
<fct gp="--" od="---" flag="1">GetAppContainerNamedObjectPath</fct>
<fct gp="14" od="---" flag="0">TranslateAccelerator</fct>
<fct gp="14" od="---" flag="0">LoadAccelerators</fct>
<fct gp="14" od="---" flag="1" ti="1056">GetAsyncKeyState</fct>
<fct gp="14" od="---" flag="0" ti="1056">GetKBCodePage</fct>
<fct gp="14" od="---" flag="0" ti="1056">GetKeyboardLayout</fct>
<fct gp="14" od="---" flag="0" ti="1056">GetKeyboardLayoutList</fct>
<fct gp="14" od="---" flag="0" ti="1056">GetKeyboardLayoutName</fct>
<fct gp="12" od="---" flag="0">GetFocus</fct>
<fct gp="30" od="---" flag="1">GetAuditedPermissionsFromAcl</fct>
<fct gp="--" od="---" flag="0">GetCalendarInfo</fct>
<fct gp="02" od="---" flag="0">GetCommandLine</fct>
<fct gp="30" od="---" flag="1">GetConfigurationSecurityDescriptor</fct>
<fct gp="02" od="---" flag="1">GetCurrentThread</fct>
<fct gp="02" od="---" flag="1" ti="1057">GetCurrentThreadId</fct>
<fct gp="30" od="---" flag="1">GetEffectiveRightsFromAcl</fct>
<fct gp="02" od="---" flag="1">GetEnvironmentStrings</fct>
<fct gp="30" od="---" flag="1">GetExplicitEntriesFromAcl</fct>
<fct gp="12" od="---" flag="1" ti="1010">GetForegroundWindow</fct>
<fct gp="12" od="---" flag="0">GetWindowPlacement</fct>
<fct gp="12" od="---" flag="0">SetWindowPos</fct>
<fct gp="30" od="---" flag="1">GetInheritanceSource</fct>
<fct gp="30" od="---" flag="1">GetKernelObjectSecurity</fct>
<fct gp="14" od="---" flag="1" ti="1056">GetKeyState</fct>
<fct gp="14" od="---" flag="1">GetMouseMovePointsEx</fct>
<fct gp="30" od="---" flag="1" ti="1134">GetLengthSid</fct>
<fct gp="02" od="---" flag="1">GetModuleBaseName</fct>
<fct gp="02" od="---" flag="1">GetModuleInformation</fct>
<fct gp="21" od="---" flag="0">GetModuleFileName</fct>
<fct gp="21" od="---" flag="0">GetModuleFilenameEx</fct>
<fct gp="21" od="---" flag="0">GetModuleHandle</fct>
<fct gp="12" od="---" flag="1">GetMonitorInfo</fct>
<fct gp="30" od="---" flag="1">GetMultipleTrustee</fct>
<fct gp="30" od="---" flag="1">GetMultipleTrusteeOperation</fct>
<fct gp="30" od="---" flag="1">GetNamedSecurityInfo</fct>
<fct gp="01" od="---" flag="0">GetPrivateProfileString</fct>
<fct gp="30" od="---" flag="1">GetPrivateObjectSecurity</fct>
<fct gp="21" od="---" flag="0" ti="1106">GetProcAddress</fct>
<fct gp="21" od="---" flag="0">wglGetProcAddress</fct>
<fct gp="30" od="---" flag="1">GetSecurityUserInfo</fct>
<fct gp="30" od="---" flag="1">GetSecurityDescriptorControl</fct>
<fct gp="30" od="---" flag="1">GetSecurityDescriptorDacl</fct>
<fct gp="30" od="---" flag="1">GetSecurityDescriptorGroup</fct>
<fct gp="30" od="---" flag="1">GetSecurityDescriptorLength</fct>
<fct gp="30" od="---" flag="1">GetSecurityDescriptorOwner</fct>
<fct gp="30" od="---" flag="1">GetSecurityDescriptorRMControl</fct>
<fct gp="30" od="---" flag="1" ti="1134">GetSecurityDescriptorSacl</fct>
<fct gp="02" od="---" flag="1">ZwSuspendThread</fct>
<fct gp="19" od="---" flag="0">ZwQueryObject</fct>
<fct gp="30" od="---" flag="1" ti="1134">ZwSetSecurityObject</fct>
<fct gp="01" od="---" flag="1" ti="1485">ZwCreateKey</fct>
<fct gp="01" od="---" flag="1" ti="1485">ZwNotifyChangeKey</fct>
<fct gp="01" od="---" flag="1" ti="1485">ZwUnloadKey</fct>
<fct gp="01" od="---" flag="1">ZwEnumerateValueKey</fct>
<fct gp="30" od="---" flag="1">SeCaptureSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">GetSecurityInfo</fct>
<fct gp="30" od="---" flag="1">GetSidIdentifierAuthority</fct>
<fct gp="30" od="---" flag="1">GetSidLengthRequired</fct>
<fct gp="30" od="---" flag="1">GetSidSubAuthority</fct>
<fct gp="30" od="---" flag="1">GetSidSubAuthorityCount</fct>
<fct gp="19" od="---" flag="0">GetStartupInfo</fct>
<fct gp="--" od="---" flag="0">GetSystemDefaultLangId</fct>
<fct gp="30" od="---" flag="1" ti="1134">GetTokenInformation</fct>
<fct gp="30" od="---" flag="0">GetTrusteeForm</fct>
<fct gp="30" od="---" flag="0">GetTrusteeName</fct>
<fct gp="30" od="---" flag="0">GetTrusteeType</fct>
<fct gp="19" od="---" flag="0" ti="1033">GetUserName</fct>
<fct gp="19" od="---" flag="0">GetVersionEx</fct>
<fct gp="30" od="---" flag="1">GetWindowsAccountDomainSid</fct>
<fct gp="19" od="---" flag="0" ti="1083">GetWindowsDirectory</fct>
<fct gp="19" od="---" flag="0">SystemTimeToTzSpecificLocalTime</fct>
<fct gp="--" od="---" flag="0">ImmGetContext</fct>
<fct gp="30" od="---" flag="1" ti="1134">ImpersonateAnonymousToken</fct>
<fct gp="30" od="---" flag="1" ti="1134">ImpersonateLoggedOnUser</fct>
<fct gp="30" od="---" flag="0">ImpersonateNamedPipeClient</fct>
<fct gp="30" od="---" flag="0" ti="1134">ImpersonateSelf</fct>
<fct gp="03" od="---" flag="0">inet_addr</fct>
<fct gp="03" od="---" flag="0">inet_pton</fct>
<fct gp="30" od="---" flag="0" ti="1134">InitializeAcl</fct>
<fct gp="30" od="---" flag="0" ti="1134">InitializeSecurityDescriptor</fct>
<fct gp="30" od="---" flag="0" ti="1134">InitializeSid</fct>
<fct gp="03" od="---" flag="1">InternetConnect</fct>
<fct gp="03" od="---" flag="1">InternetOpen</fct>
<fct gp="03" od="---" flag="1">InternetOpen</fct>
<fct gp="03" od="---" flag="1">InternetOpenUrl</fct>
<fct gp="03" od="---" flag="1">InternetQueryDataAvailable</fct>
<fct gp="03" od="---" flag="1">InternetQueryOption</fct>
<fct gp="03" od="---" flag="1">InternetReadFile</fct>
<fct gp="03" od="---" flag="1">UnlockUrlCacheEntryFileW</fct>
<fct gp="03" od="---" flag="1">InternetReadFileEx</fct>
<fct gp="03" od="---" flag="1">InternetSetCookie</fct>
<fct gp="03" od="---" flag="1">InternetSetOption</fct>
<fct gp="03" od="---" flag="1">InternetWriteFile</fct>
<fct gp="30" od="---" flag="1">IsTokenRestricted</fct>
<fct gp="30" od="---" flag="1">IsValidAcl</fct>
<fct gp="30" od="---" flag="1">IsValidSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">IsValidSid</fct>
<fct gp="30" od="---" flag="1">IsWellKnownSid</fct>
<fct gp="12" od="---" flag="0">IsWindowVisible</fct>
<fct gp="12" od="---" flag="0">IsWindow</fct>
<fct gp="12" od="---" flag="0">EnableWindow</fct>
<fct gp="12" od="---" flag="0">GetActiveWindow</fct>
<fct gp="02" od="---" flag="0">IsWoW64Process</fct>
<fct gp="02" od="---" flag="0">WaitForInputIdle</fct>
<fct gp="--" od="---" flag="1">JournalPlaybackProc</fct>
<fct gp="21" od="---" flag="0" ti="1106">LoadLibrary</fct>
<fct gp="21" od="---" flag="0" ti="1106">LoadLibraryEx</fct>
<fct gp="21" od="---" flag="1">AddDllDirectory</fct>
<fct gp="30" od="---" flag="1">LoadUserProfile</fct>
<fct gp="--" od="---" flag="0">longjmp</fct>
<fct gp="19" od="---" flag="0">PsGetVersion</fct>
<fct gp="19" od="---" flag="0">RtlGetVersion</fct>
<fct gp="19" od="---" flag="0">NtBuildNumber</fct>
<fct gp="30" od="---" flag="1">MakeSelfRelativeSD</fct>
<fct gp="30" od="---" flag="1">MapGenericMask</fct>
<fct gp="14" od="---" flag="1" ti="1056">MapVirtualKey</fct>
<fct gp="05" od="---" flag="0">MmGetSystemRoutineAddress</fct>
<fct gp="05" od="---" flag="0">MmUnmapViewOfSection</fct>
<fct gp="--" od="---" flag="0">MmCreateMdl</fct>
<fct gp="--" od="---" flag="0">MmGetSystemAddressForMdl</fct>
<fct gp="--" od="---" flag="1">MmIsThisAnNtAsSystem</fct>
<fct gp="--" od="---" flag="0">MmMapLockedPages</fct>
<fct gp="12" od="---" flag="1">MonitorEnumProc</fct>
<fct gp="12" od="---" flag="0">MonitorFromPoint</fct>
<fct gp="12" od="---" flag="0">MonitorFromRect</fct>
<fct gp="12" od="---" flag="0">MonitorFromWindow</fct>
<fct gp="--" od="---" flag="1">ObjectCloseAuditAlarm</fct>
<fct gp="--" od="---" flag="1">ObjectDeleteAuditAlarm</fct>
<fct gp="--" od="---" flag="1">ObjectOpenAuditAlarm</fct>
<fct gp="--" od="---" flag="1">ObjectPrivilegeAuditAlarm</fct>
<fct gp="--" od="---" flag="0">OleInitialize</fct>
<fct gp="16" od="---" flag="1">OutputDebugString</fct>
<fct gp="30" od="---" flag="1">PrivilegeCheck</fct>
<fct gp="30" od="---" flag="1">NtPrivilegeCheck</fct>
<fct gp="01" od="---" flag="1">NtQueryValueKey</fct>
<fct gp="30" od="---" flag="1">PrivilegedServiceAuditAlarm</fct>
<fct gp="--" od="---" flag="0">RasEnumEntries</fct>
<fct gp="30" od="---" flag="0">RevertToSelf</fct>
<fct gp="30" od="---" flag="1">RtlConvertSidToUnicodeString</fct>
<fct gp="01" od="---" flag="1" ti="1112">RtlCreateRegistryKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">RtlWriteRegistryValue</fct>
<fct gp="01" od="---" flag="1" ti="1485">RtlDeleteRegistryValue</fct>
<fct gp="16" od="---" flag="1">RtlPcToFileHeader</fct>
<fct gp="03" od="---" flag="1">recv</fct>
<fct gp="03" od="---" flag="1">send</fct>
<fct gp="--" od="---" flag="1">setjmp</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetAccessSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetAclInformation</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetConfigurationSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetEntriesInAcl</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetKernelObjectSecurity</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetProcessSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetLaunchSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetNamedSecurityInfo</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetPrivateObjectSecurity</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetPrivateObjectSecurityEx</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityAccessMask</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityDescriptorControl</fct>
<fct gp="30" od="---" flag="1" ti="1134">SeSetSecurityDescriptorInfo</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityDescriptorDacl</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityDescriptorGroup</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityDescriptorOwner</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityDescriptorRMControl</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityDescriptorSacl</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetSecurityInfo</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetServiceObjectSecurity</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetThreadToken</fct>
<fct gp="30" od="---" flag="1" ti="1134">SetTokenInformation</fct>
<fct gp="18" od="---" flag="0">SetUnhandledExceptionFilter</fct>
<fct gp="--" od="---" flag="1">SfcTerminateWatcherThread</fct>
<fct gp="--" od="---" flag="1">StgCreateDocfile</fct>
<fct gp="--" od="---" flag="1">StgCreateStorageEx</fct>
<fct gp="--" od="---" flag="1">StgOpenStorage</fct>
<fct gp="--" od="---" flag="0">system</fct>
<fct gp="02" od="---" flag="0">TlsAlloc</fct>
<fct gp="02" od="---" flag="0">TlsFree</fct>
<fct gp="02" od="---" flag="0">TlsGetValue</fct>
<fct gp="02" od="---" flag="0">TlsSetValue</fct>
<fct gp="30" od="---" flag="1">TreeResetNamedSecurityInfo</fct>
<fct gp="30" od="---" flag="1">TreeSetNamedSecurityInfo</fct>
<fct gp="18" od="---" flag="0">UnhandledExceptionFilter</fct>
<fct gp="30" od="---" flag="1">UnloadUserProfile</fct>
<fct gp="05" od="---" flag="1">LocalCompact</fct>
<fct gp="03" od="---" flag="1">URLDownloadToFile</fct>
<fct gp="29" od="---" flag="0">Wow64RevertWow64FsRedirection</fct>
<fct gp="29" od="---" flag="1">Wow64DisableWow64FsRedirection</fct>
<fct gp="20" od="---" flag="0">WriteConsoleOutputCharacter</fct>
<fct gp="20" od="---" flag="0">SetConsoleTextAttribute</fct>
<fct gp="20" od="---" flag="0">SetConsoleCursorInfo</fct>
<fct gp="01" od="---" flag="1">WritePrivateProfileString</fct>
<fct gp="03" od="---" flag="0">WSAStartup</fct>
<fct gp="16" od="---" flag="1">PssCaptureSnapshot</fct>
<fct gp="16" od="---" flag="0">PssDuplicateSnapshot</fct>
<fct gp="16" od="---" flag="0">PssFreeSnapshot</fct>
<fct gp="16" od="---" flag="0">PssQuerySnapshot</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerCreate</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerFree</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerGetPosition</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerRewind</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerSeek</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerSeekToBeginning</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerSetPosition</fct>
<fct gp="16" od="---" flag="0">PssWalkMarkerTell</fct>
<fct gp="16" od="---" flag="0">PssWalkSnapshot</fct>
</fcts>
</lib>
<lib name="devmgr.dll" flag="1" desc="Device Manager MMC Snapin">
<fcts>
<fct gp="--" od="---" flag="0">DeviceProblemText</fct>
<fct gp="--" od="---" flag="0">DeviceProblemWizard</fct>
<fct gp="--" od="---" flag="0">DeviceCreateHardwarePage</fct>
<fct gp="--" od="---" flag="0">DeviceProperties</fct>
</fcts>
</lib>
<lib name="shlwapi.dll" flag="0" gp="--" desc="Shell Light-weight Utility Library">
<fcts>
<fct gp="--" od="009" flag="1">SHUnlockShared</fct>
<fct gp="01" od="---" flag="0">SHEnumKeyEx</fct>
<fct gp="01" od="---" flag="0">SHEnumValue</fct>
<fct gp="01" od="---" flag="0">SHGetValue</fct>
<fct gp="28" od="---" flag="0">SHGetUnreadMailCount</fct>
<fct gp="06" od="---" flag="0">PathAddBackslash</fct>
<fct gp="06" od="---" flag="0">PathQuoteSpaces</fct>
<fct gp="06" od="---" flag="0">PathAppend</fct>
<fct gp="01" od="---" flag="1">AssocCreate</fct>
<fct gp="--" od="---" flag="1">UrlHash</fct>
<fct gp="--" od="---" flag="1">UrlIsNoHistory</fct>
<fct gp="--" od="---" flag="0">UrlFixup</fct>
<fct gp="--" od="---" flag="1">StopWatchFlush</fct>
<fct gp="--" od="---" flag="1">StopWatchMode</fct>
<fct gp="--" od="---" flag="0">ConnectToConnectionPoint</fct>
<fct gp="21" od="---" flag="0">MLFreeLibrary</fct>
<fct gp="--" od="---" flag="0">MLHtmlHelp</fct>
<fct gp="21" od="---" flag="0" ti="1106">MLLoadLibrary</fct>
<fct gp="--" od="---" flag="0">MLWinHelp</fct>
<fct gp="16" od="---" flag="1">OutputDebugStringWrap</fct>
<fct gp="--" od="012" flag="0">SHCreateMemStream</fct>
<fct gp="--" od="014" flag="0">GetAcceptLanguages</fct>
<fct gp="--" od="015" flag="0">GetAcceptLanguages</fct>
<fct gp="--" od="029" flag="0">IsCharSpace</fct>
<fct gp="06" od="---" flag="0">PathRemoveExtension</fct>
<fct gp="06" od="---" flag="0">PathAddExtension</fct>
<fct gp="06" od="---" flag="1" ti="1105">PathRemoveFileSpec</fct>
<fct gp="06" od="---" flag="0">PathCombine</fct>
<fct gp="06" od="---" flag="0">GetFile</fct>
<fct gp="06" od="---" flag="0">ShowPath</fct>
<fct gp="06" od="---" flag="0">FileExists</fct>
<fct gp="06" od="---" flag="0">PathFileExists</fct>
<fct gp="06" od="---" flag="1">PathFindExtension</fct>
<fct gp="06" od="---" flag="1">PathGetDriveNumber</fct>
<fct gp="06" od="---" flag="1">PathFindFileName</fct>
<fct gp="06" od="---" flag="1">PathRenameExtension</fct>
<fct gp="06" od="---" flag="1">PathIsDirectory</fct>
<fct gp="06" od="---" flag="1">PathIsDirectoryEmpty</fct>
<fct gp="06" od="065" flag="1">kernel32.FindFirstFileW</fct>
<fct gp="11" od="066" flag="1">kernel32.FindResourceW</fct>
<fct gp="11" od="064" flag="1">kernel32.EnumResourceNames</fct>
<fct gp="--" od="067" flag="1" ti="1055">user32.FindWindow</fct>
<fct gp="--" od="157" flag="0">StrCmpIC</fct>
<fct gp="--" od="176" flag="0">IUnknown_QueryService</fct>
<fct gp="--" od="184" flag="0">IStream_Read</fct>
<fct gp="--" od="212" flag="1">IStream_Write</fct>
<fct gp="--" od="213" flag="1">IStream_Reset</fct>
<fct gp="--" od="214" flag="0">IStream_Size</fct>
<fct gp="--" od="219" flag="0">QISearch</fct>
<fct gp="--" od="---" flag="1">AssocQueryString</fct>
<fct gp="03" od="---" flag="1">PathIsURL</fct>
<fct gp="03" od="---" flag="1">UrlEscape</fct>
<fct gp="01" od="---" flag="1">SHCopyKey</fct>
<fct gp="01" od="---" flag="1">SHRegQueryInfoUSKey</fct>
<fct gp="--" od="---" flag="1">UrlCreateFromPath</fct>
<fct gp="--" od="216" flag="0">ShellMessageBox</fct>
<fct gp="--" od="217" flag="0">SHQueryInfoKeyA</fct>
<fct gp="--" od="218" flag="0">SHQueryInfoKeyW</fct>
<fct gp="--" od="219" flag="0">SHQueryValueExA</fct>
<fct gp="--" od="220" flag="0">SHQueryValueExW</fct>
<fct gp="--" od="221" flag="0">SHRegCloseUSKey</fct>
<fct gp="--" od="222" flag="0">SHRegCreateUSKeyA</fct>
<fct gp="--" od="223" flag="0">SHRegCreateUSKeyW</fct>
<fct gp="--" od="224" flag="0">SHRegDeleteEmptyUSKeyA</fct>
<fct gp="--" od="225" flag="0">SHRegDeleteEmptyUSKeyW</fct>
<fct gp="--" od="226" flag="0">SHRegDeleteUSValueA</fct>
<fct gp="--" od="227" flag="0">SHRegDeleteUSValueW</fct>
<fct gp="--" od="228" flag="0">SHRegDuplicateHKey</fct>
<fct gp="01" od="229" flag="0">SHRegEnumUSKeyA</fct>
<fct gp="01" od="230" flag="0">SHRegEnumUSKeyW</fct>
<fct gp="01" od="231" flag="0">SHRegEnumUSValueA</fct>
<fct gp="01" od="232" flag="0">SHRegEnumUSValueW</fct>
<fct gp="01" od="233" flag="0">SHRegGetBoolUSValueA</fct>
<fct gp="01" od="234" flag="0">SHRegGetBoolUSValueW</fct>
<fct gp="01" od="235" flag="0">SHRegGetBoolValueFromHKCUHKLM</fct>
<fct gp="01" od="236" flag="0">SHRegGetIntW</fct>
<fct gp="01" od="237" flag="0">SHRegGetPathA</fct>
<fct gp="01" od="238" flag="0">SHRegGetPathW</fct>
<fct gp="01" od="239" flag="0">SHRegGetUSValueA</fct>
<fct gp="01" od="240" flag="0">SHRegGetUSValueW</fct>
<fct gp="01" od="241" flag="0">SHRegGetValueA</fct>
<fct gp="01" od="242" flag="0">SHRegGetValueFromHKCUHKLM</fct>
<fct gp="01" od="243" flag="0">SHRegGetValueW</fct>
<fct gp="01" od="244" flag="0">SHRegOpenUSKeyA</fct>
<fct gp="01" od="245" flag="0">SHRegOpenUSKeyW</fct>
<fct gp="01" od="246" flag="0">SHRegQueryInfoUSKeyA</fct>
<fct gp="01" od="247" flag="0">SHRegQueryInfoUSKeyW</fct>
<fct gp="01" od="248" flag="0">SHRegQueryUSValueA</fct>
<fct gp="01" od="249" flag="0">SHRegQueryUSValueW</fct>
<fct gp="01" od="250" flag="0">SHRegSetPathA</fct>
<fct gp="01" od="251" flag="0">SHRegSetPathW</fct>
<fct gp="01" od="252" flag="0">SHRegSetUSValueA</fct>
<fct gp="01" od="253" flag="0">SHRegSetUSValueW</fct>
<fct gp="01" od="254" flag="0">SHRegWriteUSValueA</fct>-
<fct gp="01" od="255" flag="0">SHRegisterValidateTemplate</fct>
<fct gp="--" od="256" flag="0">SHReleaseThreadRef</fct>
<fct gp="--" od="257" flag="0">SHRunIndirectRegClientCommand</fct>
<fct gp="--" od="258" flag="0">SHSendMessageBroadcastA</fct>
<fct gp="--" od="259" flag="0">SHSendMessageBroadcastW</fct>
<fct gp="--" od="512" flag="0">IStream_ReadPidl</fct>
<fct gp="--" od="513" flag="1">IStream_WritePidl</fct>
<fct gp="--" od="568" flag="1">IStream_Copy</fct>
<fct gp="--" od="596" flag="0">IStream_ReadStr</fct>
<fct gp="--" od="597" flag="1">IStream_WriteStr</fct>
</fcts>
</lib>
<lib name="mssign32.dll" flag="1" gp="04">
<fcts>
<fct gp="04" od="--" flag="1">FreeCryptProvFromCert</fct>
<fct gp="04" od="--" flag="1">FreeCryptProvFromCertEx</fct>
<fct gp="04" od="--" flag="1">GetCryptProvFromCert</fct>
<fct gp="04" od="--" flag="1">GetCryptProvFromCertEx</fct>
<fct gp="04" od="--" flag="1">PvkFreeCryptProv</fct>
<fct gp="04" od="--" flag="1">PvkGetCryptProv</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeyAcquireContext</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeyAcquireContextFromMemory</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeyLoad</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeyLoadFromMemory</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeyReleaseContext</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeySave</fct>
<fct gp="04" od="--" flag="1">PvkPrivateKeySaveToMemory</fct>
<fct gp="04" od="--" flag="1">SignError</fct>
<fct gp="04" od="--" flag="1">SignerAddTimeStampResponse</fct>
<fct gp="04" od="--" flag="1">SignerAddTimeStampResponseEx</fct>
<fct gp="04" od="--" flag="1">SignerCreateTimeStampRequest</fct>
<fct gp="04" od="--" flag="1">SignerFreeSignerContext</fct>
<fct gp="04" od="--" flag="1">SignerSign</fct>
<fct gp="04" od="--" flag="1">SignerSignEx</fct>
<fct gp="04" od="--" flag="1">SignerTimeStamp</fct>
<fct gp="04" od="--" flag="1">SignerTimeStampEx</fct>
<fct gp="04" od="--" flag="1">SignerTimeStampEx2</fct>
<fct gp="04" od="--" flag="1">SpcGetCertFromKey</fct>
<fct gp="30" od="--" flag="1">SpLsaModeInitialize</fct>
<fct gp="30" od="--" flag="1">SpUserModeInitialize</fct>
</fcts>
</lib>
<lib name="urlmon.dll" flag="1" gp="03" desc="OLE32 Extensions for Win32">
<fcts>
<fct gp="03" od="---" flag="1">URLOpenBlockingStream</fct>
<fct gp="03" od="---" flag="1">URLOpenPullStream</fct>
<fct gp="03" od="---" flag="1">URLOpenStream</fct>
<fct gp="03" od="227" flag="1">URLDownload</fct>
<fct gp="03" od="228" flag="1">URLDownloadToCacheFileA</fct>
<fct gp="03" od="229" flag="1">URLDownloadToCacheFileW</fct>
<fct gp="03" od="230" flag="1">URLDownloadToFileA</fct>
<fct gp="03" od="231" flag="1">URLDownloadToFileW</fct>
<fct gp="03" od="232" flag="1">URLDownloadW</fct>
<fct gp="03" od="233" flag="1">URLOpenBlockingStreamA</fct>
<fct gp="03" od="234" flag="1">URLOpenBlockingStreamW</fct>
<fct gp="03" od="235" flag="1">URLOpenPullStreamA</fct>
<fct gp="03" od="236" flag="1">URLOpenPullStreamW</fct>
<fct gp="03" od="237" flag="1">URLOpenStreamA</fct>
<fct gp="03" od="238" flag="1">URLOpenStreamW</fct>
<fct gp="03" od="---" flag="1">ZonesReInit</fct>
<fct gp="03" od="---" flag="1">URLDownloadToCacheFile</fct>
<fct gp="03" od="---" flag="1">URLOpenBlockingStream</fct>
<fct gp="03" od="---" flag="1">WriteHitLogging</fct>
<fct gp="03" od="---" flag="1">IsLoggingEnabled</fct>
<fct gp="03" od="---" flag="1">UrlMkSetSessionOption</fct>
<fct gp="03" od="---" flag="1">ObtainUserAgentString</fct>
<fct gp="03" od="---" flag="1">IsValidURL</fct>
<fct gp="03" od="---" flag="1">CoInternetCreateZoneManager</fct>
<fct gp="03" od="---" flag="1">WriteHitLogging</fct>
<fct gp="03" od="---" flag="1">CreateURLMoniker</fct>
<fct gp="03" od="---" flag="1">CreateURLMonikerEx</fct>
<fct gp="03" od="---" flag="1">CoInternetCreateSecurityManager</fct>
<fct gp="03" od="---" flag="1">RegisterBindStatusCallback</fct>
<fct gp="03" od="---" flag="0">HlinkClone</fct>
<fct gp="03" od="---" flag="0">HlinkCreateBrowseContext</fct>
<fct gp="03" od="---" flag="0">HlinkCreateExtensionServices</fct>
<fct gp="03" od="---" flag="0">HlinkCreateFromData</fct>
<fct gp="03" od="---" flag="0">HlinkCreateFromMoniker</fct>
<fct gp="03" od="---" flag="0">HlinkCreateFromString</fct>
<fct gp="03" od="---" flag="0">HlinkCreateShortcut</fct>
<fct gp="03" od="---" flag="0">HlinkCreateShortcutFromMoniker</fct>
<fct gp="03" od="---" flag="0">HlinkCreateShortcutFromString</fct>
<fct gp="03" od="---" flag="0">HlinkGetSpecialReference</fct>
<fct gp="03" od="---" flag="0">HlinkGetValueFromParams</fct>
<fct gp="03" od="---" flag="0">HlinkGoBack</fct>
<fct gp="03" od="---" flag="0">HlinkGoForward</fct>
<fct gp="03" od="---" flag="0">HlinkIsShortcut</fct>
<fct gp="03" od="---" flag="0">HlinkNavigate</fct>
<fct gp="03" od="---" flag="0">HlinkNavigateMoniker</fct>
<fct gp="03" od="---" flag="0">HlinkNavigateString</fct>
<fct gp="03" od="---" flag="0">HlinkNavigateToStringReference</fct>
<fct gp="03" od="---" flag="0">HlinkOnNavigate</fct>
<fct gp="03" od="---" flag="0">HlinkOnRenameDocument</fct>
<fct gp="03" od="---" flag="0">HlinkParseDisplayName</fct>
<fct gp="03" od="---" flag="0">HlinkPreprocessMoniker</fct>
<fct gp="03" od="---" flag="0">HlinkQueryCreateFromData</fct>
<fct gp="03" od="---" flag="0">HlinkResolveMonikerForData</fct>
<fct gp="03" od="---" flag="0">HlinkResolveShortcut</fct>
<fct gp="03" od="---" flag="0">HlinkResolveShortcutToMoniker</fct>
<fct gp="03" od="---" flag="0">HlinkResolveShortcutToString</fct>
<fct gp="03" od="---" flag="0">HlinkResolveStringForData</fct>
<fct gp="03" od="---" flag="0">HlinkSetSpecialReference</fct>
<fct gp="03" od="---" flag="0">HlinkSimpleNavigateToMoniker</fct>
<fct gp="03" od="---" flag="0">HlinkSimpleNavigateToString</fct>
<fct gp="03" od="---" flag="0">HlinkTranslateURL</fct>
<fct gp="03" od="---" flag="0">HlinkUpdateStackItem</fct>
</fcts>
</lib>
<lib name="Userenv.dll" flag="0">
<fcts>
<fct gp="30" od="--" flag="1">CreateUserProfileEx</fct>
<fct gp="30" od="--" flag="1">GetUserProfileDirectory</fct>
<fct gp="30" od="--" flag="1">GetAppliedGPOList</fct>
<fct gp="30" od="--" flag="1">GetAllUsersProfileDirectory</fct>
<fct gp="30" od="--" flag="1">GetProfilesDirectory</fct>
<fct gp="30" od="--" flag="1">CreateProfile</fct>
<fct gp="30" od="--" flag="1">DeleteProfile</fct>
<fct gp="19" od="--" flag="1" ti="1082">ExpandEnvironmentStringsForUser</fct>
<fct gp="30" od="--" flag="1">ForceSyncFgPolicy</fct>
<fct gp="30" od="--" flag="1">FreeGPOList</fct>
<fct gp="30" od="--" flag="1">RsopResetPolicySettingStatus</fct>
<fct gp="30" od="--" flag="1">RsopSetPolicySettingStatus</fct>
<fct gp="30" od="--" flag="1">RefreshPolicy</fct>
<fct gp="30" od="--" flag="1">UnregisterGPNotification</fct>
</fcts>
</lib>
<lib name="sensapi.dll" flag="1" gp="03" desc="SENS Connectivity Library">
<fcts>
<fct gp="--" flag="1">IsNetworkAlive</fct>
</fcts>
</lib>
<lib name="scecli.dll" flag="1">
<fcts>
<fct gp="--" od="--" flag="1">DeltaNotify</fct>
<fct gp="--" od="--" flag="1">InitializeChangeNotify</fct>
<fct gp="--" od="--" flag="1">SceConfigureConvertedFileSecurity</fct>
<fct gp="--" od="--" flag="1">SceGenerateGroupPolicy</fct>
<fct gp="--" od="--" flag="1">SceNotifyPolicyDelta</fct>
<fct gp="--" od="--" flag="1">SceOpenPolicy</fct>
<fct gp="--" od="--" flag="1">SceProcessSecurityPolicyGPO</fct>
<fct gp="--" od="--" flag="1">SceProcessSecurityPolicyGPOEx</fct>
<fct gp="--" od="--" flag="1">SceSysPrep</fct>
<fct gp="--" od="--" flag="1">SceAddToNameList</fct>
<fct gp="--" od="--" flag="1">SceAddToNameStatusList</fct>
<fct gp="--" od="--" flag="1">SceAddToObjectList</fct>
<fct gp="--" od="--" flag="1">SceAnalyzeSystem</fct>
<fct gp="--" od="--" flag="1">SceAppendSecurityProfileInfo</fct>
<fct gp="--" od="--" flag="1">SceBrowseDatabaseTable</fct>
<fct gp="--" od="--" flag="1">SceCloseProfile</fct>
<fct gp="--" od="--" flag="1">SceCommitTransaction</fct>
<fct gp="--" od="--" flag="1">SceCompareNameList</fct>
<fct gp="--" od="--" flag="1">SceCompareSecurityDescriptors</fct>
<fct gp="--" od="--" flag="1">SceConfigureSystem</fct>
<fct gp="--" od="--" flag="1">SceCopyBaseProfile</fct>
<fct gp="--" od="--" flag="1">SceCreateDirectory</fct>
<fct gp="--" od="--" flag="1">SceDcPromoCreateGPOsInSysvol</fct>
<fct gp="--" od="--" flag="1">SceDcPromoCreateGPOsInSysvolEx</fct>
<fct gp="--" od="--" flag="1">SceDcPromoteSecurity</fct>
<fct gp="--" od="--" flag="1">SceDcPromoteSecurityEx</fct>
<fct gp="--" od="--" flag="1">SceEnforceSecurityPolicyPropagation</fct>
<fct gp="--" od="--" flag="1">SceEnumerateServices</fct>
<fct gp="--" od="--" flag="1">SceFreeMemory</fct>
<fct gp="--" od="--" flag="1">SceFreeProfileMemory</fct>
<fct gp="--" od="--" flag="1">SceGenerateRollback</fct>
<fct gp="--" od="--" flag="1">SceGetAnalysisAreaSummary</fct>
<fct gp="--" od="--" flag="1">SceGetAreas</fct>
<fct gp="--" od="--" flag="1">SceGetDatabaseSetting</fct>
<fct gp="--" od="--" flag="1">SceGetDbTime</fct>
<fct gp="--" od="--" flag="1">SceGetObjectChildren</fct>
<fct gp="--" od="--" flag="1">SceGetObjectSecurity</fct>
<fct gp="--" od="--" flag="1">SceGetScpProfileDescription</fct>
<fct gp="--" od="--" flag="1">SceGetSecurityProfileInfo</fct>
<fct gp="--" od="--" flag="1">SceGetServerProductType</fct>
<fct gp="--" od="--" flag="1">SceGetTimeStamp</fct>
<fct gp="--" od="--" flag="1">SceIsSystemDatabase</fct>
<fct gp="--" od="--" flag="1">SceLookupPrivRightName</fct>
<fct gp="--" od="--" flag="1">SceOpenProfile</fct>
<fct gp="--" od="--" flag="1">SceRegisterRegValues</fct>
<fct gp="--" od="--" flag="1">SceRollbackTransaction</fct>
<fct gp="--" od="--" flag="1">SceSetDatabaseSetting</fct>
<fct gp="--" od="--" flag="1">SceSetupBackupSecurity</fct>
<fct gp="--" od="--" flag="1">SceSetupConfigureServices</fct>
<fct gp="--" od="--" flag="1">SceSetupGenerateTemplate</fct>
<fct gp="--" od="--" flag="1">SceSetupMoveSecurityFile</fct>
<fct gp="--" od="--" flag="1">SceSetupRootSecurity</fct>
<fct gp="--" od="--" flag="1">SceSetupSystemByInfName</fct>
<fct gp="--" od="--" flag="1">SceSetupUnwindSecurityFile</fct>
<fct gp="--" od="--" flag="1">SceSetupUpdateSecurityFile</fct>
<fct gp="--" od="--" flag="1">SceSetupUpdateSecurityKey</fct>
<fct gp="--" od="--" flag="1">SceSetupUpdateSecurityService</fct>
<fct gp="--" od="--" flag="1">SceStartTransaction</fct>
<fct gp="--" od="--" flag="1">SceSvcConvertSDToText</fct>
<fct gp="--" od="--" flag="1">SceSvcConvertTextToSD</fct>
<fct gp="--" od="--" flag="1">SceSvcFree</fct>
<fct gp="--" od="--" flag="1">SceSvcGetInformationTemplate</fct>
<fct gp="--" od="--" flag="1">SceSvcQueryInfo</fct>
<fct gp="--" od="--" flag="1">SceSvcSetInfo</fct>
<fct gp="--" od="--" flag="1">SceSvcSetInformationTemplate</fct>
<fct gp="--" od="--" flag="1">SceSvcUpdateInfo</fct>
<fct gp="--" od="--" flag="1">SceUpdateObjectInfo</fct>
<fct gp="--" od="--" flag="1">SceUpdateSecurityProfile</fct>
<fct gp="--" od="--" flag="1">SceWriteSecurityProfileInfo</fct>
</fcts>
</lib>
<lib name="ole32.dll" flag="0" desc="Microsoft OLE for Windows">
<fcts>
<fct gp="15" od="--" flag="0">OleDuplicateData</fct>
<fct gp="05" od="--" flag="0">CoTaskMemFree</fct>
<fct gp="05" od="--" flag="0">CoTaskMemAlloc</fct>
<fct gp="--" od="--" flag="0">CLIPFORMAT_UserMarshal</fct>
<fct gp="--" od="--" flag="0">OleQueryLinkFromData</fct>
<fct gp="--" od="--" flag="0">CoRegisterPSClsid</fct>
<fct gp="31" od="--" flag="0">CoDosDateTimeToFileTime</fct>
<fct gp="02" od="--" flag="0">CoGetCurrentProcess</fct>
<fct gp="--" od="--" flag="0">StgOpenAsyncDocfileOnIFillLockBytes</fct>
<fct gp="--" od="--" flag="0">OleRegEnumVerbs</fct>
<fct gp="15" od="--" flag="0">OleIsCurrentClipboard</fct>
<fct gp="--" od="--" flag="0">StgCreateDocfileOnILockBytes</fct>
<fct gp="--" od="--" flag="0">StgOpenStorageOnILockBytes</fct>
<fct gp="--" od="--" flag="0">UrlUnescape</fct>
<fct gp="--" od="--" flag="0">CommandLineToArgv</fct>
<fct gp="21" od="--" flag="0">CoFreeUnusedLibraries</fct>
<fct gp="21" od="--" flag="0">CoFreeUnusedLibrariesEx</fct>
<fct gp="--" od="--" flag="1">OleLoad</fct>
<fct gp="--" od="--" flag="1">GetRunningObjectTable</fct>
<fct gp="--" od="--" flag="0">CoFileTimeNow</fct>
<fct gp="--" od="--" flag="0">SNB_UserFree</fct>
<fct gp="--" od="--" flag="0">CoRegisterChannelHook</fct>
<fct gp="--" od="--" flag="0">CoGetInstanceFromFile</fct>
<fct gp="30" od="--" flag="1">CoInitializeSecurity</fct>
<fct gp="30" od="--" flag="0">CoSetProxyBlanket</fct>
<fct gp="--" od="--" flag="0">CLSIDFromString</fct>
<fct gp="--" od="--" flag="0">StringFromGUID2</fct>
<fct gp="--" od="--" flag="0">CoInitialize</fct>
<fct gp="--" od="--" flag="0">CoInitializeEx</fct>
<fct gp="--" od="--" flag="0">CoUninitialize</fct>
<fct gp="--" od="--" flag="0">CoUninitializeEx</fct>
<fct gp="--" od="--" flag="0">CoCreateInstance</fct>
<fct gp="--" od="--" flag="0">CoGetClassObject</fct>
<fct gp="21" od="--" flag="1" ti="1106">CoLoadLibrary</fct>
<fct gp="--" od="--" flag="0">CoCreateGuid</fct>
<fct gp="--" od="--" flag="0">CoQueryClientBlanket</fct>
<fct gp="--" od="--" flag="0">CoIsOle1Class</fct>
<fct gp="--" od="--" flag="0">CoAddRefServerProcess</fct>
<fct gp="--" od="--" flag="0">CoCreateInstanceEx</fct>
<fct gp="--" od="--" flag="0">CoReleaseServerProcess</fct>
<fct gp="--" od="--" flag="1">OleRun</fct>
<fct gp="--" od="--" flag="0">OleInitialize</fct>
<fct gp="--" od="--" flag="0">OleUninitialize</fct>
<fct gp="--" od="--" flag="0">OleRegEnumFormatEtc</fct>
<fct gp="15" od="--" flag="1" ti="1115">OleFlushClipboard</fct>
<fct gp="15" od="--" flag="1" ti="1115">OleSetClipboard</fct>
<fct gp="15" od="--" flag="1" ti="1115">OleGetClipboard</fct>
</fcts>
</lib>
<lib name="cygwin1.dll" flag="0" gp="--" desc="Cygwin POSIX Emulation DLL">
<fcts>
<fct gp="03" od="--" flag="1">connect</fct>
<fct gp="03" od="--" flag="1">recv</fct>
<fct gp="03" od="--" flag="1">send</fct>
<fct gp="03" od="--" flag="1">socket</fct>
</fcts>
</lib>
<lib name="ws2_32.dll" flag="1" gp="03" desc="Windows Socket Library">
<fcts>
<fct gp="03" od="---" flag="1">inet_ntop</fct>
<fct gp="03" od="001" flag="1">accept</fct>
<fct gp="03" od="002" flag="1">bind</fct>
<fct gp="03" od="003" flag="1">closesocket</fct>
<fct gp="03" od="004" flag="1">connect</fct>
<fct gp="03" od="005" flag="1">getpeervalue</fct>
<fct gp="03" od="006" flag="1">getsockvalue</fct>
<fct gp="03" od="007" flag="1">getsockopt</fct>
<fct gp="03" od="008" flag="1">htonl</fct>
<fct gp="03" od="009" flag="1">htons</fct>
<fct gp="03" od="010" flag="1">ioctlsocket</fct>
<fct gp="03" od="011" flag="1">inet_addr</fct>
<fct gp="03" od="012" flag="1">inet_ntoa</fct>
<fct gp="03" od="013" flag="1">listen</fct>
<fct gp="03" od="014" flag="1">ntohl</fct>
<fct gp="03" od="015" flag="1">ntohs</fct>
<fct gp="03" od="016" flag="1">recv</fct>
<fct gp="03" od="017" flag="1">recvfrom</fct>
<fct gp="03" od="018" flag="0">select</fct>
<fct gp="03" od="019" flag="1">send</fct>
<fct gp="03" od="020" flag="1">sendto</fct>
<fct gp="03" od="021" flag="1">setsockopt</fct>
<fct gp="03" od="022" flag="1">shutdown</fct>
<fct gp="03" od="023" flag="1">socket</fct>
<fct gp="03" od="024" flag="1">WSApSetPostRoutine</fct>
<fct gp="03" od="025" flag="1">FreeAddrInfoEx</fct>
<fct gp="03" od="026" flag="1">FreeAddrInfoExW</fct>
<fct gp="03" od="027" flag="0">FreeAddrInfo</fct>
<fct gp="03" od="028" flag="1">GetAddrInfoExA</fct>
<fct gp="03" od="029" flag="1">GetAddrInfoExCancel</fct>
<fct gp="03" od="030" flag="1">GetAddrInfoExOverlappedResult</fct>
<fct gp="03" od="031" flag="1">GetAddrInfoExW</fct>
<fct gp="03" od="032" flag="1">GetAddrInfoW</fct>
<fct gp="03" od="033" flag="1">GetHostNameW</fct>
<fct gp="03" od="034" flag="1">GetNameInfoW</fct>
<fct gp="03" od="035" flag="1">InetNtopW</fct>
<fct gp="03" od="036" flag="1">InetPtonW</fct>
<fct gp="03" od="037" flag="1">SetAddrInfoExA</fct>
<fct gp="03" od="038" flag="1">SetAddrInfoExW</fct>
<fct gp="03" od="039" flag="1">WPUCompleteOverlappedRequest</fct>
<fct gp="03" od="040" flag="1">WPUGetProviderPathEx</fct>
<fct gp="03" od="041" flag="1">WSAAccept</fct>
<fct gp="03" od="042" flag="1">WSAAddressToStringA</fct>
<fct gp="03" od="043" flag="1">WSAAddressToStringW</fct>
<fct gp="03" od="044" flag="1">WSAAdvertiseProvider</fct>
<fct gp="03" od="045" flag="1">WSACloseEvent</fct>
<fct gp="03" od="---" flag="1">WSAGetOverlappedResult</fct>
<fct gp="03" od="046" flag="1">WSAConnect</fct>
<fct gp="03" od="047" flag="1">WSAConnectByList</fct>
<fct gp="03" od="048" flag="1">WSAConnectByNameA</fct>
<fct gp="03" od="049" flag="1">WSAConnectByNameW</fct>
<fct gp="03" od="050" flag="1">WSACreateEvent</fct>
<fct gp="03" od="---" flag="0">WSAEventSelect</fct>
<fct gp="03" od="---" flag="0">WSAGetServiceClassInfo</fct>
<fct gp="03" od="---" flag="0">WSAEnumProtocols</fct>
<fct gp="03" od="---" flag="0">WSAGetServiceClassNameByClassId</fct>
<fct gp="03" od="---" flag="0">WSAAddressToString</fct>
<fct gp="03" od="---" flag="0">WSADuplicateSocket</fct>
<fct gp="03" od="051" flag="1">gethostbyaddr</fct>
<fct gp="03" od="052" flag="1">gethostbyvalue</fct>
<fct gp="03" od="053" flag="1">getprotobyvalue</fct>
<fct gp="03" od="054" flag="1">getprotobynumber</fct>
<fct gp="03" od="055" flag="1">getservbyvalue</fct>
<fct gp="03" od="056" flag="1">getservbyport</fct>
<fct gp="03" od="057" flag="1">gethostvalue</fct>
<fct gp="03" od="058" flag="1">WSAInstallServiceClass</fct>
<fct gp="03" od="060" flag="0">WSAIoctl</fct>
<fct gp="03" od="061" flag="0">WSAJoinLeaf</fct>
<fct gp="03" od="062" flag="1">WSALookupServiceBegin</fct>
<fct gp="03" od="064" flag="1">WSALookupServiceEnd</fct>
<fct gp="03" od="065" flag="1">WSALookupServiceNext</fct>
<fct gp="03" od="067" flag="1">WSANSPIoctl</fct>
<fct gp="03" od="068" flag="1">WSANtohl</fct>
<fct gp="03" od="069" flag="1">WSANtohs</fct>
<fct gp="03" od="070" flag="1">WSAProviderConfigChange</fct>
<fct gp="03" od="071" flag="1">WSARecv</fct>
<fct gp="03" od="072" flag="1">WSARecvDisconnect</fct>
<fct gp="03" od="073" flag="1">WSARecvFrom</fct>
<fct gp="03" od="074" flag="1">WSARemoveServiceClass</fct>
<fct gp="03" od="075" flag="1">WSAResetEvent</fct>
<fct gp="03" od="076" flag="1">WSASend</fct>
<fct gp="03" od="077" flag="1">WSASendDisconnect</fct>
<fct gp="03" od="078" flag="1">WSASendTo</fct>
<fct gp="03" od="079" flag="1">WSASetEvent</fct>
<fct gp="03" od="080" flag="1">WSASetService</fct>
<fct gp="03" od="082" flag="0">WSASocket</fct>
<fct gp="03" od="083" flag="0">WSASocket</fct>
<fct gp="03" od="084" flag="1">WSAStringToAddress</fct>
<fct gp="03" od="086" flag="1">WSAWaitForMultipleEvents</fct>
<fct gp="03" od="---" flag="1">WSAEnumNetworkEvents</fct>
<fct gp="03" od="087" flag="1">WSCDeinstallProvider</fct>
<fct gp="03" od="088" flag="1">WSCEnableNSProvider</fct>
<fct gp="03" od="089" flag="1">WSCEnumProtocols</fct>
<fct gp="03" od="090" flag="1">WSCGetProviderPath</fct>
<fct gp="03" od="091" flag="1">WSCInstallvalueSpace</fct>
<fct gp="03" od="092" flag="1">WSCInstallProvider</fct>
<fct gp="03" od="093" flag="1">WSCUnInstallvalueSpace</fct>
<fct gp="03" od="094" flag="1">WSCUpdateProvider</fct>
<fct gp="03" od="095" flag="1">WSCWritevalueSpaceOrder</fct>
<fct gp="03" od="096" flag="1">WSCWriteProviderOrder</fct>
<fct gp="03" od="097" flag="0">freeaddrinfo</fct>
<fct gp="03" od="098" flag="0">getaddrinfo</fct>
<fct gp="03" od="099" flag="0">getvalueinfo</fct>
<fct gp="03" od="101" flag="1">WSAAsyncSelect</fct>
<fct gp="03" od="102" flag="1">WSAAsyncGetHostByAddr</fct>
<fct gp="03" od="103" flag="1">WSAAsyncGetHostByvalue</fct>
<fct gp="03" od="104" flag="1">WSAAsyncGetProtoByNumber</fct>
<fct gp="03" od="105" flag="1">WSAAsyncGetProtoByvalue</fct>
<fct gp="03" od="106" flag="1">WSAAsyncGetServByPort</fct>
<fct gp="03" od="107" flag="1">WSAAsyncGetServByvalue</fct>
<fct gp="03" od="108" flag="1">WSACancelAsyncRequest</fct>
<fct gp="03" od="109" flag="1">WSASetBlockingHook</fct>
<fct gp="03" od="110" flag="1">WSAUnhookBlockingHook</fct>
<fct gp="03" od="111" flag="1">WSAGetLastError</fct>
<fct gp="03" od="112" flag="1">WSASetLastError</fct>
<fct gp="03" od="113" flag="1">WSACancelBlockingCall</fct>
<fct gp="03" od="114" flag="1">WSAIsBlocking</fct>
<fct gp="03" od="115" flag="0">WSAStartup</fct>
<fct gp="03" od="116" flag="0">WSACleanup</fct>
<fct gp="03" od="151" flag="0">__WSAFDIsSet</fct>
<fct gp="03" od="500" flag="0">WEP</fct>
</fcts>
</lib>
<lib name="wsock32.dll" flag="1" gp="03" desc="Windows Socket 32-Bit Library">
<fcts>
<fct gp="03" od="001" flag="1">accept</fct>
<fct gp="03" od="002" flag="1">bind</fct>
<fct gp="03" od="003" flag="1">closesocket</fct>
<fct gp="03" od="004" flag="1">connect</fct>
<fct gp="03" od="005" flag="1">getpeername</fct>
<fct gp="03" od="006" flag="1">getsockname</fct>
<fct gp="03" od="007" flag="1">getsockopt</fct>
<fct gp="03" od="008" flag="1">htonl</fct>
<fct gp="03" od="009" flag="1">htons</fct>
<fct gp="03" od="010" flag="1">inet_addr</fct>
<fct gp="03" od="011" flag="1">inet_ntoa</fct>
<fct gp="03" od="012" flag="1">ioctlsocket</fct>
<fct gp="03" od="013" flag="1">listen</fct>
<fct gp="03" od="014" flag="1">ntohl</fct>
<fct gp="03" od="015" flag="1">ntohs</fct>
<fct gp="03" od="016" flag="1">recv</fct>
<fct gp="03" od="017" flag="1">recvfrom</fct>
<fct gp="03" od="018" flag="1">select</fct>
<fct gp="03" od="019" flag="1">send</fct>
<fct gp="03" od="020" flag="1">sendto</fct>
<fct gp="03" od="021" flag="1">setsockopt</fct>
<fct gp="03" od="022" flag="1">shutdown</fct>
<fct gp="03" od="023" flag="1">socket</fct>
<fct gp="03" od="051" flag="1">gethostbyaddr</fct>
<fct gp="03" od="052" flag="1">gethostbyname</fct>
<fct gp="03" od="053" flag="1">getprotobyname</fct>
<fct gp="03" od="054" flag="1">getprotobynumber</fct>
<fct gp="03" od="055" flag="1">getservbyname</fct>
<fct gp="03" od="056" flag="1">getservbyport</fct>
<fct gp="03" od="057" flag="1">gethostname</fct>
<fct gp="03" od="101" flag="1">WSAAsyncSelect</fct>
<fct gp="03" od="102" flag="1">WSAAsyncGetHostByAddr</fct>
<fct gp="03" od="103" flag="1">WSAAsyncGetHostByName</fct>
<fct gp="03" od="104" flag="1">WSAAsyncGetProtoByNumber</fct>
<fct gp="03" od="105" flag="1">WSAAsyncGetProtoByName</fct>
<fct gp="03" od="106" flag="1">WSAAsyncGetServByPort</fct>
<fct gp="03" od="107" flag="1">WSAAsyncGetServByName</fct>
<fct gp="03" od="108" flag="1">WSACancelAsyncRequest</fct>
<fct gp="03" od="109" flag="1">WSASetBlockingHook</fct>
<fct gp="03" od="110" flag="1">WSAUnhookBlockingHook</fct>
<fct gp="03" od="111" flag="1">WSAGetLastError</fct>
<fct gp="03" od="112" flag="1">WSASetLastError</fct>
<fct gp="03" od="113" flag="1">WSACancelBlockingCall</fct>
<fct gp="03" od="114" flag="1">WSAIsBlocking</fct>
<fct gp="03" od="115" flag="0">WSAStartup</fct>
<fct gp="03" od="116" flag="1">WSACleanup</fct>
<fct gp="03" od="151" flag="1">__WSAFDIsSet</fct>
</fcts>
</lib>
<lib name="wship6.dll" flag="1" gp="03">
<fcts>
<fct gp="03" od="--" flag="1">WSHAddressToString</fct>
<fct gp="03" od="--" flag="1">WSHEnumProtocols</fct>
<fct gp="03" od="--" flag="1">WSHGetProviderGuid</fct>
<fct gp="03" od="--" flag="1">WSHGetSockaddrType</fct>
<fct gp="03" od="--" flag="1">WSHGetSocketInformation</fct>
<fct gp="03" od="--" flag="1">WSHGetWSAProtocolInfo</fct>
<fct gp="03" od="--" flag="1">WSHGetWildcardSockaddr</fct>
<fct gp="03" od="--" flag="1">WSHGetWinsockMapping</fct>
<fct gp="03" od="--" flag="1">WSHIoctl</fct>
<fct gp="03" od="--" flag="1">WSHJoinLeaf</fct>
<fct gp="03" od="--" flag="1">WSHNotify</fct>
<fct gp="03" od="--" flag="1">WSHOpenSocket2</fct>
<fct gp="03" od="--" flag="1">WSHOpenSocket</fct>
<fct gp="03" od="--" flag="1">WSHSetSocketInformation</fct>
<fct gp="03" od="--" flag="1">WSHStringToAddress</fct>
</fcts>
</lib>
<lib name="Loadperf.dll.dll" flag="1" gp="16">
<fcts>
<fct gp="16" od="--" flag="0">LoadPerfCounterTextStrings</fct>
<fct gp="16" od="--" flag="0">LoadPerfCounterTextStrings</fct>
<fct gp="16" od="--" flag="0">UnloadPerfCounterTextStrings</fct>
<fct gp="16" od="--" flag="0">UnloadPerfCounterTextStrings</fct>
</fcts>
</lib>
<lib name="clbcatq.dll" flag="1">
<fcts>
<fct gp="--" od="--" flag="1">CheckMemoryGates</fct>
</fcts>
</lib>
<lib name="icmp.dll" flag="1" gp="03" desc="ICMP Library">
<fcts>
<fct gp="03" od="--" flag="1">IcmpCreateFile</fct>
<fct gp="03" od="--" flag="1">IcmpParseReplies</fct>
<fct gp="03" od="--" flag="1">IcmpCloseHandle</fct>
<fct gp="03" od="--" flag="1">IcmpSendEcho</fct>
<fct gp="03" od="--" flag="1">IcmpSendEcho2</fct>
<fct gp="03" od="--" flag="1">do_echo_req</fct>
<fct gp="03" od="--" flag="1">register_icmp</fct>
</fcts>
</lib>
<lib name="wtsapi32.dll" flag="1" gp="08" desc="Windows Remote Desktop Session Host Server SDK APIs">
<fcts>
<fct gp="08" od="--" flag="1">WTSDisconnectSession</fct>
<fct gp="08" od="--" flag="1">WTSQuerySessionInformation</fct>
<fct gp="08" od="--" flag="1">WTSEnumerateServers</fct>
<fct gp="08" od="--" flag="1">WTSUnRegisterSessionNotification</fct>
<fct gp="08" od="--" flag="1">WTHelperGetProvSignerFromChain</fct>
<fct gp="08" od="--" flag="1">WTHelperProvDataFromStateData</fct>
<fct gp="02" od="--" flag="1">WaitForThreadpoolTimerCallbacks</fct>
<fct gp="08" od="--" flag="1">WTSFreeMemory</fct>
<fct gp="08" od="--" flag="1" ti="1134">WTSQueryUserToken</fct>
<fct gp="08" od="--" flag="1" ti="1055">WTSSendMessage</fct>
<fct gp="08" od="--" flag="1">WTSOpenServer</fct>
<fct gp="08" od="--" flag="1">WTSLogoffSession</fct>
<fct gp="08" od="--" flag="1">WTSSetSessionInformation</fct>
<fct gp="08" od="--" flag="1">WTSEnumerateSessions</fct>
<fct gp="08" od="--" flag="1" ti="1057">WTSEnumerateProcesses</fct>
<fct gp="08" od="--" flag="1" ti="1057">WTSEnumerateProcessesEx</fct>
<fct gp="08" od="--" flag="1">WTSVirtualChannelOpen</fct>
<fct gp="08" od="--" flag="1">WTSCloseServer</fct>
<fct gp="08" od="--" flag="1">WTSConnectSession</fct>
<fct gp="08" od="--" flag="1">WTSCreateListener</fct>
<fct gp="08" od="--" flag="1">WTSRegisterSessionNotification</fct>
<fct gp="08" od="--" flag="1">WTSRegisterSessionNotificationEx</fct>
<fct gp="08" od="--" flag="1">WTSStartRemoteControlSession</fct>
<fct gp="08" od="--" flag="1">WTSVirtualChannelPurgeInput</fct>
</fcts>
</lib>
<lib name="winscard.dll" flag="1" group="32" desc="Microsoft Smart Card API">
<fcts>
<fct gp="--" group="32" od="--" flag="1">SCardControl</fct>
<fct gp="--" group="32" od="--" flag="1">SCardDisconnect</fct>
<fct gp="--" group="32" od="--" flag="1">SCardBeginTransaction</fct>
<fct gp="--" group="32" od="--" flag="1">SCardEndTransaction</fct>
<fct gp="--" group="32" od="--" flag="1">SCardEstablishContext</fct>
<fct gp="--" group="32" od="--" flag="1">SCardReconnect</fct>
<fct gp="--" group="32" od="--" flag="1">SCardStatus</fct>
<fct gp="--" group="32" od="--" flag="1">SCardTransmit</fct>
<fct gp="--" group="32" od="--" flag="1">SCardReleaseStartedEvent</fct>
<fct gp="--" group="32" od="--" flag="1">SCardAccessStartedEvent</fct>
<fct gp="--" group="32" od="--" flag="1">SCardReleaseContext</fct>
<fct gp="--" group="32" od="--" flag="1">SCardListReaders</fct>
</fcts>
</lib>
<lib name="ntdll.dll" flag="0" desc="NT Layer">
<fcts>
<fct gp="02" od="---" flag="0">NtChangeProcessState</fct>
<fct gp="02" od="---" flag="0">NtChangeThreadState</fct>
<fct gp="02" od="---" flag="0">NtCreateIoRing</fct>
<fct gp="02" od="---" flag="0">NtCreateProcessStateChange</fct>
<fct gp="02" od="---" flag="0">NtCreateThreadStateChange</fct>
<fct gp="02" od="---" flag="0">NtQueryIoRingCapabilities</fct>
<fct gp="02" od="---" flag="0">NtQueueApcThreadEx2</fct>
<fct gp="05" od="---" flag="0">NtReadVirtualMemoryEx</fct>
<fct gp="02" od="---" flag="0">NtSubmitIoRing</fct>
<fct gp="06" od="---" flag="1">NtQueryEaFile</fct>
<fct gp="06" od="---" flag="1">NtSetEaFile</fct>
<fct gp="02" od="---" flag="0" cb="1">NtCallbackReturn</fct>
<fct gp="02" od="---" flag="1">CsrClientCallServer</fct>
<fct gp="01" od="---" flag="1" ti="1112">NtSaveKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">NtSaveKeyEx</fct>
<fct gp="02" od="---" flag="1" ti="1055">NtSuspendThread</fct>
<fct gp="02" od="---" flag="0">NtTerminateThread</fct>
<fct gp="31" od="---" flag="0">NtQuerySystemTime</fct>
<fct gp="01" od="---" flag="1">NtRenameKey</fct>
<fct gp="06" od="---" flag="0">NtQueryAttributesFile</fct>
<fct gp="06" od="---" flag="0">NtQueryFullAttributesFile</fct>
<fct gp="01" od="---" flag="1">NtQueryMultipleValueKey</fct>
<fct gp="01" od="---" flag="1">NtReplaceKey</fct>
<fct gp="01" od="---" flag="0">NtOpenKey</fct>
<fct gp="01" od="---" flag="0">NtLoadKey2</fct>
<fct gp="01" od="---" flag="0">NtLoadKeyEx</fct>
<fct gp="06" od="---" flag="0">NtCreateDirectoryObject</fct>
<fct gp="06" od="---" flag="0">NtQueryDirectoryObject</fct>
<fct gp="06" od="---" flag="0">NtOpenDirectoryObject</fct>
<fct gp="02" od="---" flag="1">CsrGetProcessId</fct>
<fct gp="06" od="---" flag="0">NtSetQuotaInformationFile</fct>
<fct gp="01" od="---" flag="1">NtSetInformationKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">NtSetValueKey</fct>
<fct gp="01" od="---" flag="1" ti="1485">NtCreateKey</fct>
<fct gp="05" od="---" flag="1">NtFreeVirtualMemory</fct>
<fct gp="07" od="---" flag="0">NtCreateEvent</fct>
<fct gp="07" od="---" flag="0">NtSignalAndWaitForSingleObject</fct>
<fct gp="07" od="---" flag="0">NtClearEvent</fct>
<fct gp="16" od="---" flag="1">DbgUiConnectToDbg</fct>
<fct gp="16" od="---" flag="1">DbgUiDebugActiveProcess</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtAdjustGroupsToken</fct>
<fct gp="01" od="---" flag="0">NtOpenKey</fct>
<fct gp="06" od="---" flag="0">NtReadFile</fct>
<fct gp="01" od="---" flag="0">NtEnumerateKey</fct>
<fct gp="02" od="---" flag="0">NtQueueApcThread</fct>
<fct gp="01" od="---" flag="0">NtEnumerateValueKey</fct>
<fct gp="30" od="---" flag="0">NtQueryLicenseValue</fct>
<fct gp="30" od="---" flag="0">NtQuerySecurityPolicy</fct>
<fct gp="17" od="---" flag="0">NtSetSystemInformation</fct>
<fct gp="01" od="---" flag="0">NtQueryKey</fct>
<fct gp="01" od="---" flag="0">NtUnloadKey</fct>
<fct gp="01" od="---" flag="0">NtLoadKey</fct>
<fct gp="01" od="---" flag="1" ti="1485">NtDeleteKey</fct>
<fct gp="01" od="---" flag="0">ZwEnumerateKey</fct>
<fct gp="06" od="---" flag="1">ZwSetEaFile</fct>
<fct gp="06" od="---" flag="1">ZwQueryEaFile</fct>
<fct gp="02" od="---" flag="1">ZwGetContextThread</fct>
<fct gp="02" od="---" flag="1">ZwSetContextThread</fct>
<fct gp="30" od="---" flag="1" ti="1134">ZwOpenProcessTokenEx</fct>
<fct gp="02" od="---" flag="1">ZwWow64QueryInformationProcess64</fct>
<fct gp="01" od="---" flag="1" ti="1485">ZwDeleteKey</fct>
<fct gp="01" od="---" flag="1" ti="1485">ZwDeleteValueKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">ZwSetValueKey</fct>
<fct gp="01" od="---" flag="0">ZwOpenKey</fct>
<fct gp="01" od="---" flag="0">ZwQueryKey</fct>
<fct gp="01" od="---" flag="1">ZwQueryValueKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">ZwSaveKey</fct>
<fct gp="01" od="---" flag="1" ti="1112">ZwSaveKeyEx</fct>
<fct gp="19" od="---" flag="0">KeQueryPerformanceCounter</fct>
<fct gp="19" od="---" flag="0">KeQuerySystemTime</fct>
<fct gp="02" od="---" flag="0" ti="1055">KeAttachProcess</fct>
<fct gp="03" od="---" flag="1">NtAcceptConnectPort</fct>
<fct gp="03" od="---" flag="1">NtCompleteConnectPort</fct>
<fct gp="03" od="---" flag="1">NtReplyPort</fct>
<fct gp="03" od="---" flag="1">NtCreateWaitablePort</fct>
<fct gp="01" od="---" flag="1" ti="1485">NtDeleteValueKey</fct>
<fct gp="03" od="---" flag="1">NtReplyWaitReceivePort</fct>
<fct gp="02" od="---" flag="1">NtSuspendProcess</fct>
<fct gp="02" od="---" flag="1">NtGetNextProcess</fct>
<fct gp="02" od="---" flag="1" ti="1055">NtResumeProcess</fct>
<fct gp="02" od="---" flag="1" ti="1055">NtResumeThread</fct>
<fct gp="02" od="---" flag="1">NtSetContextThread</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtSetInformationToken</fct>
<fct gp="02" od="---" flag="1">NtQueryInformationProcess</fct>
<fct gp="30" od="---" flag="0" ti="1134">NtQueryInformationToken</fct>
<fct gp="02" od="---" flag="1">NtSetInformationProcess</fct>
<fct gp="02" od="---" flag="1">NtSetInformationThread</fct>
<fct gp="02" od="---" flag="1" ti="1106">NtCreateUserProcess</fct>
<fct gp="02" od="---" flag="1">NtTerminateProcess</fct>
<fct gp="02" od="---" flag="1">NtWow64CsrGetProcessId</fct>
<fct gp="02" od="---" flag="1">NtWow64GetCurrentProcessorNumberEx</fct>
<fct gp="02" od="---" flag="1">NtWow64QueryInformationProcess64</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtOpenThreadTokenEx</fct>
<fct gp="02" od="---" flag="1" ti="1055">NtOpenProcess</fct>
<fct gp="02" od="---" flag="1" ti="1106">NtCreateProcess</fct>
<fct gp="02" od="---" flag="1" ti="1106">NtCreateProcessEx</fct>
<fct gp="02" od="---" flag="1">NtDelayExecution</fct>
<fct gp="01" od="---" flag="0" >NtCreateKeyTransacted</fct>
<fct gp="01" od="---" flag="0" >NtOpenKeyTransacted</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtOpenProcessToken</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtOpenProcessTokenEx</fct>
<fct gp="02" od="---" flag="1">NtQueryInformationThread</fct>
<fct gp="02" od="---" flag="1">RtlUserThreadStart</fct>
<fct gp="07" od="---" flag="0">RtlCreateAtomTable</fct>
<fct gp="27" od="---" flag="1">RtlDllShutdownInProgress</fct>
<fct gp="02" od="---" flag="1" ti="1106">RtlCreateUserProcess</fct>
<fct gp="02" od="---" flag="1" ti="1106">RtlCreateUserProcessEx</fct>
<fct gp="02" od="---" flag="1" ti="1106">RtlCreateProcessReflection</fct>
<fct gp="30" od="---" flag="0">RtlSetInformationAcl</fct>
<fct gp="30" od="---" flag="0">RtlCreateUserSecurityObject</fct>
<fct gp="02" od="---" flag="1">ZwQueryInformationProcess</fct>
<fct gp="05" od="---" flag="1">ZwFlushVirtualMemory</fct>
<fct gp="02" od="---" flag="1">ZwTerminateProcess</fct>
<fct gp="02" od="---" flag="1">ZwSetInformationThread</fct>
<fct gp="02" od="---" flag="1">KeSetPriorityThread</fct>
<fct gp="02" od="---" flag="1">ZwSetInformationProcess</fct>
<fct gp="02" od="---" flag="1">ZwTerminateThread</fct>
<fct gp="05" od="---" flag="1">NtProtectVirtualMemory</fct>
<fct gp="05" od="---" flag="1">NtFlushInstructionCache</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtQueryVirtualMemory</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtWow64QueryVirtualMemory64</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtWow64ReadVirtualMemory64</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtWow64WriteVirtualMemory64</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtWriteVirtualMemory</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtAllocateVirtualMemory</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtAllocateVirtualMemoryEx</fct>
<fct gp="05" od="---" flag="1" ti="1055">NtReadVirtualMemory</fct>
<fct gp="30" od="---" flag="0">RtlOpenCurrentUser</fct>
<fct gp="05" od="---" flag="0">RtlZeroMemory</fct>
<fct gp="05" od="---" flag="0">RtlFillMemory</fct>
<fct gp="05" od="---" flag="0">RtlMoveMemory</fct>
<fct gp="05" od="---" flag="1">ZwAllocateVirtualMemory</fct>
<fct gp="05" od="---" flag="1">ZwQueryVirtualMemory</fct>
<fct gp="05" od="---" flag="1">ZwReadVirtualMemory</fct>
<fct gp="05" od="---" flag="1" ti="1055">ZwWriteVirtualMemory</fct>
<fct gp="05" od="---" flag="1" ti="1055">ZwWow64ReadVirtualMemory64</fct>
<fct gp="05" od="---" flag="0" ti="1055">ZwFreeVirtualMemory</fct>
<fct gp="02" od="---" flag="1">ZwOpenThread</fct>
<fct gp="06" od="---" flag="1">NtCreateFile</fct>
<fct gp="19" od="---" flag="0" ti="1006">NtQueryVolumeInformationFile</fct>
<fct gp="06" od="---" flag="1">NtQueryDirectoryFile</fct>
<fct gp="06" od="---" flag="1" ti="1485">NtDeleteFile</fct>
<fct gp="06" od="---" flag="1">NtSetInformationFile</fct>
<fct gp="06" od="---" flag="1">NtWriteFile</fct>
<fct gp="06" od="---" flag="1">NtCancelIoFileEx</fct>
<fct gp="06" od="---" flag="1">NtCancelIoFileEx</fct>
<fct gp="06" od="---" flag="1">NtQueryInformationFile</fct>
<fct gp="06" od="---" flag="0">NtOpenFile</fct>
<fct gp="06" od="---" flag="1">ZwQueryInformationFile</fct>
<fct gp="16" od="---" flag="0">EtwLogTraceEvent</fct>
<fct gp="16" od="---" flag="1">EtwEventWrite</fct>
<fct gp="16" od="---" flag="0">EtwEventEnabled</fct>
<fct gp="16" od="---" flag="1">EtwRegister</fct>
<fct gp="16" od="---" flag="1">EtwEventRegister</fct>
<fct gp="16" od="---" flag="1">EtwEventUnregister</fct>
<fct gp="16" od="---" flag="1">EtwUnregisterTraceGuids</fct>
<fct gp="16" od="---" flag="1">EtwRegisterTraceGuids</fct>
<fct gp="16" od="---" flag="1">EtwGetTraceLoggerHandle</fct>
<fct gp="16" od="---" flag="1">EtwGetTraceEnableLevel</fct>
<fct gp="16" od="---" flag="1">EtwGetTraceEnableFlags</fct>
<fct gp="16" od="---" flag="1">EtwTraceMessage</fct>
<fct gp="21" od="---" flag="1">LdrGetKnownDllSectionHandle</fct>
<fct gp="11" od="---" flag="1">LdrAccessResource</fct>
<fct gp="21" od="---" flag="1">LdrAddLoadAsDataTable</fct>
<fct gp="21" od="---" flag="1">LdrAddRefDll</fct>
<fct gp="21" od="---" flag="1">LdrDisableThreadCalloutsForDll</fct>
<fct gp="11" od="---" flag="1">LdrEnumResources</fct>
<fct gp="21" od="---" flag="1" cb="1">LdrEnumerateLoadedModules</fct>
<fct gp="21" od="---" flag="1">LdrFindEntryForAddress</fct>
<fct gp="11" od="---" flag="1">LdrFindResourceDirectory_U</fct>
<fct gp="11" od="---" flag="1">LdrFindResourceEx_U</fct>
<fct gp="11" od="---" flag="1">LdrFindResource_U</fct>
<fct gp="--" od="---" flag="1">LdrFlushAlternateResourceModules</fct>
<fct gp="21" od="---" flag="1">LdrGetDllHandle</fct>
<fct gp="21" od="---" flag="1">LdrGetDllHandleByMapping</fct>
<fct gp="21" od="---" flag="1">LdrGetDllHandleByName</fct>
<fct gp="21" od="---" flag="1">LdrGetDllHandleEx</fct>
<fct gp="21" od="---" flag="1">LdrGetFailureData</fct>
<fct gp="21" od="---" flag="1">LdrGetFileNameFromLoadAsDataTable</fct>
<fct gp="21" od="---" flag="1">LdrGetProcedureAddress</fct>
<fct gp="21" od="---" flag="1">LdrGetProcedureAddressEx</fct>
<fct gp="21" od="---" flag="1">LdrHotPatchRoutine</fct>
<fct gp="21" od="---" flag="1">LdrInitShimEngineDynamic</fct>
<fct gp="21" od="---" flag="1">LdrInitializeThunk</fct>
<fct gp="21" od="---" flag="1">LdrLoadAlternateResourceModule</fct>
<fct gp="21" od="---" flag="1">LdrLoadAlternateResourceModuleEx</fct>
<fct gp="21" od="---" flag="1">LdrLoadDll</fct>
<fct gp="21" od="---" flag="1">LdrLockLoaderLock</fct>
<fct gp="21" od="---" flag="1">LdrOpenImageFileOptionsKey</fct>
<fct gp="21" od="---" flag="1">LdrProcessRelocationBlock</fct>
<fct gp="01" od="---" flag="1">LdrQueryImageFileExecutionOptions</fct>
<fct gp="01" od="---" flag="1">LdrQueryImageFileExecutionOptionsEx</fct>
<fct gp="01" od="---" flag="1">LdrQueryImageFileKeyOption</fct>
<fct gp="21" od="---" flag="1">LdrQueryModuleServiceTags</fct>
<fct gp="21" od="---" flag="1">LdrQueryProcessModuleInformation</fct>
<fct gp="21" od="---" flag="1">LdrRegisterDllNotification</fct>
<fct gp="21" od="---" flag="1">LdrRemoveLoadAsDataTable</fct>
<fct gp="21" od="---" flag="1">LdrResFindResource</fct>
<fct gp="21" od="---" flag="1">LdrResFindResourceDirectory</fct>
<fct gp="21" od="---" flag="1">LdrResGetRCConfig</fct>
<fct gp="21" od="---" flag="1">LdrResRelease</fct>
<fct gp="21" od="---" flag="1">LdrResSearchResource</fct>
<fct gp="21" od="---" flag="1">LdrRscIsTypeExist</fct>
<fct gp="21" od="---" flag="1">LdrSetAppCompatDllRedirectionCallback</fct>
<fct gp="21" od="---" flag="1">LdrSetDllManifestProber</fct>
<fct gp="21" od="---" flag="1">LdrSetMUICacheType</fct>
<fct gp="21" od="---" flag="1">LdrShutdownProcess</fct>
<fct gp="21" od="---" flag="1">LdrShutdownThread</fct>
<fct gp="21" od="---" flag="1">LdrSystemDllInitBlock</fct>
<fct gp="21" od="---" flag="1">LdrUnloadAlternateResourceModule</fct>
<fct gp="21" od="---" flag="1">LdrUnloadAlternateResourceModuleEx</fct>
<fct gp="21" od="---" flag="1">LdrUnloadDll</fct>
<fct gp="21" od="---" flag="1">LdrUnlockLoaderLock</fct>
<fct gp="21" od="---" flag="1">LdrUnregisterDllNotification</fct>
<fct gp="21" od="---" flag="1">LdrVerifyImageMatchesChecksum</fct>
<fct gp="21" od="---" flag="1">LdrVerifyImageMatchesChecksumEx</fct>
<fct gp="21" od="---" flag="1">LdrWx86FormatVirtualImage</fct>
<fct gp="21" od="---" flag="1">LdrpResGetMappingSize</fct>
<fct gp="21" od="---" flag="1">LdrpResGetResourceDirectory</fct>
<fct gp="15" od="---" flag="0">NtCreateNamedPipeFile</fct>
<fct gp="16" od="---" flag="0">NtDisplayString</fct>
<fct gp="16" od="---" flag="0">NtRaiseHardError</fct>
<fct gp="--" od="---" flag="0">NtClose</fct>
<fct gp="06" od="---" flag="0">NtDeviceIoControlFile</fct>
<fct gp="07" od="---" flag="0">NtWaitForSingleObject</fct>
<fct gp="07" od="---" flag="0">SetWaitableTimer</fct>
<fct gp="07" od="---" flag="0">SetWaitableTimerEx</fct>
<fct gp="02" od="---" flag="0">NtGetContextThread</fct>
<fct gp="21" od="---" flag="1">NtLoadDriver</fct>
<fct gp="21" od="---" flag="1">NtUnloadDriver</fct>
<fct gp="17" od="---" flag="1" ti="1529">NtShutdownSystem</fct>
<fct gp="05" od="---" flag="1">NtUnmapViewOfSection</fct>
<fct gp="07" od="---" flag="1">NtSetEvent</fct>
<fct gp="05" od="---" flag="1">NtOpenSection</fct>
<fct gp="07" od="---" flag="1">NtOpenEvent</fct>
<fct gp="05" od="---" flag="1">NtMapViewOfSection</fct>
<fct gp="15" od="---" flag="1">NtAddAtom</fct>
<fct gp="15" od="---" flag="1">NtFindAtom</fct>
<fct gp="15" od="---" flag="1">NtDeleteAtom</fct>
<fct gp="19" od="---" flag="1">NtQuerySystemInformation</fct>
<fct gp="15" od="---" flag="1">NtQueryInformationAtom</fct>
<fct gp="15" od="---" flag="1">ZwFindAtom</fct>
<fct gp="30" od="---" flag="1">NtAccessCheckByTypeResultListAndAuditAlarm</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtCompareTokens</fct>
<fct gp="--" od="---" flag="1">NtQueryObject</fct>
<fct gp="30" od="---" flag="1">NtQuerySecurityObject</fct>
<fct gp="02" od="---" flag="1">NtContinue</fct>
<fct gp="07" od="---" flag="0">NtOpenMutant</fct>
<fct gp="07" od="---" flag="0">NtCreateMutant</fct>
<fct gp="06" od="---" flag="0">NtFsControlFile</fct>
<fct gp="02" od="---" flag="1">NtCreateThread</fct>
<fct gp="02" od="---" flag="1">NtCreateThreadEx</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtImpersonateAnonymousToken</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtOpenThreadToken</fct>
<fct gp="02" od="---" flag="1">NtOpenThread</fct>
<fct gp="--" od="---" flag="1">NtOpenSymbolicLinkObject</fct>
<fct gp="30" od="---" flag="1">NtSetSecurityObject</fct>
<fct gp="--" od="---" flag="1">NtVdmControl</fct>
<fct gp="--" od="---" flag="1">NtWow64CallFunction64</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrAllocateCaptureBuffer</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrAllocateMessagePointer</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrCaptureMessageBuffer</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrCaptureMessageString</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrClientCallServer</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrClientConnectToServer</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrFreeCaptureBuffer</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrIdentifyAlertableThread</fct>
<fct gp="--" od="---" flag="1">NtWow64CsrVerifyRegion</fct>
<fct gp="--" od="---" flag="1">NtWow64DebuggerCall</fct>
<fct gp="--" od="---" flag="1">NtWow64GetNativeSystemInformation</fct>
<fct gp="--" od="---" flag="1">NtWow64InterlockedPopEntrySList</fct>
<fct gp="--" od="---" flag="1">NtQuerySymbolicLinkObject</fct>
<fct gp="30" od="---" flag="1" ti="1134">NtAdjustPrivilegesToken</fct>
<fct gp="05" od="---" flag="1">NtCreateSection</fct>
<fct gp="01" od="---" flag="0">RtlQueryRegistryValues</fct>
<fct gp="30" od="---" flag="1">RtlAdjustPrivilege</fct>
<fct gp="30" od="---" flag="1">RtlAbsoluteToSelfRelativeSD</fct>
<fct gp="30" od="---" flag="1">RtlAbsoluteToSelfRelativeSD</fct>
<fct gp="30" od="---" flag="1">RtlAddAccessAllowedAce</fct>
<fct gp="30" od="---" flag="1">RtlAddAccessAllowedAce</fct>
<fct gp="30" od="---" flag="1">RtlGetDaclSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlGetGroupSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlGetOwnerSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlGetSaclSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlSetSaclSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlLengthSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlSetDaclSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlSetOwnerSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlCreateSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlSetControlSecurityDescriptor</fct>
<fct gp="30" od="---" flag="1">RtlAllocateAndInitializeSid</fct>
<fct gp="03" od="---" flag="1" ti="1590">RtlIpv4StringToAddress</fct>
<fct gp="03" od="---" flag="0" ti="1590">RtlIpv4StringToAddressEx</fct>
<fct gp="03" od="---" flag="0" ti="1590">RtlIpv4AddressToString</fct>
<fct gp="03" od="---" flag="0" ti="1590">RtlIpv4AddressToStringEx</fct>
<fct gp="03" od="---" flag="0" ti="1590">RtlIpv6AddressToString</fct>
<fct gp="03" od="---" flag="0" ti="1590">RtlIpv6AddressToStringEx</fct>
<fct gp="03" od="---" flag="0" ti="1590">RtlIpv6StringToAddressEx</fct>
<fct gp="30" od="---" flag="1">RtlEqualSid</fct>
<fct gp="30" od="---" flag="1">RtlValidSid</fct>
<fct gp="30" od="---" flag="1">RtlCreateAcl</fct>
<fct gp="30" od="---" flag="1">RtlCopySidAndAttributesArray</fct>
<fct gp="30" od="---" flag="1">RtlSubAuthorityCountSid</fct>
<fct gp="30" od="---" flag="1">RtlMakeSelfRelativeSD</fct>
<fct gp="--" od="---" flag="1">RtlFormatCurrentUserKeyPath</fct>
<fct gp="02" od="---" flag="1">RtlSetProcessIsCritical</fct>
<fct gp="30" od="---" flag="1">RtlQueryElevationFlags</fct>
<fct gp="02" od="---" flag="0">RtlCreateUserThread</fct>
<fct gp="02" od="---" flag="1">RtlGetCurrentPeb</fct>
<fct gp="05" od="---" flag="1">RtlDelete</fct>
<fct gp="16" od="---" flag="0">RtlNtStatusToDosError</fct>
<fct gp="04" od="---" flag="1" ti="1140">RtlRandom</fct>
<fct gp="04" od="---" flag="1" ti="1140">RtlRandomEx</fct>
<fct gp="05" od="---" flag="1" ti="1140">RtlCompressBuffer</fct>
<fct gp="04" od="---" flag="1">RtlComputeCrc32</fct>
<fct gp="13" od="---" flag="1" ti="1140">RtlDecompressBuffer</fct>
<fct gp="13" od="---" flag="1" ti="1140">RtlDecompressBufferEx</fct>
<fct gp="13" od="---" flag="1" ti="1140">RtlDecompressFragment</fct>
<fct gp="13" od="---" flag="1" ti="1140">RtlGetCompressionWorkSpaceSize</fct>
<fct gp="--" od="---" flag="1">RtlTimeToSecondsSince1970</fct>
<fct gp="02" od="---" flag="1">RtlExitUserThread</fct>
<fct gp="30" od="---" flag="1" ti="1134">SeTokenIsAdmin</fct>
<fct gp="16" od="---" flag="0">WerReportSQMEvent</fct>
<fct gp="16" od="---" flag="0">WerRegisterMemoryBlock</fct>
<fct gp="16" od="---" flag="0">WerUnregisterMemoryBlock</fct>
<fct gp="--" od="---" flag="1">WinSqmAddToAverageDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmAddToStream</fct>
<fct gp="--" od="---" flag="1">WinSqmAddToStreamEx</fct>
<fct gp="--" od="---" flag="1">WinSqmCheckEscalationAddToStreamEx</fct>
<fct gp="--" od="---" flag="1">WinSqmCheckEscalationSetDWORD64</fct>
<fct gp="--" od="---" flag="1">WinSqmCheckEscalationSetDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmCheckEscalationSetString</fct>
<fct gp="--" od="---" flag="1">WinSqmCommonDatapointDelete</fct>
<fct gp="--" od="---" flag="1">WinSqmCommonDatapointSetDWORD64</fct>
<fct gp="--" od="---" flag="1">WinSqmCommonDatapointSetDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmCommonDatapointSetStreamEx</fct>
<fct gp="--" od="---" flag="1">WinSqmCommonDatapointSetString</fct>
<fct gp="--" od="---" flag="1">WinSqmEndSession</fct>
<fct gp="--" od="---" flag="1">WinSqmEventEnabled</fct>
<fct gp="--" od="---" flag="1">WinSqmEventWrite</fct>
<fct gp="--" od="---" flag="1">WinSqmGetEscalationRuleStatus</fct>
<fct gp="--" od="---" flag="1">WinSqmGetInstrumentationProperty</fct>
<fct gp="--" od="---" flag="1">WinSqmIncrementDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmIsOptedIn</fct>
<fct gp="--" od="---" flag="1">WinSqmIsOptedInEx</fct>
<fct gp="--" od="---" flag="1">WinSqmSetDWORD64</fct>
<fct gp="--" od="---" flag="1">WinSqmSetDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmSetEscalationInfo</fct>
<fct gp="--" od="---" flag="1">WinSqmSetIfMaxDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmSetIfMinDWORD</fct>
<fct gp="--" od="---" flag="1">WinSqmSetString</fct>
<fct gp="--" od="---" flag="1">WinSqmStartSession</fct>
<fct gp="06" od="---" flag="0">ZwClose</fct>
<fct gp="--" od="---" flag="1" ti="1529">ZwShutdownSystem</fct>
<fct gp="--" od="---" flag="0">ZwDisplayString</fct>
<fct gp="--" od="---" flag="1">ZwRequestPort</fct>
<fct gp="05" od="---" flag="1">ZwMapViewOfSection</fct>
<fct gp="05" od="---" flag="1">ZwUnmapViewOfSection</fct>
<fct gp="02" od="---" flag="1" ti="1055">ZwResumeThread</fct>
<fct gp="19" od="---" flag="1">ZwQuerySystemInformation</fct>
<fct gp="--" od="---" flag="1">ZwSetLdtEntries</fct>
<fct gp="30" od="---" flag="1" ti="1134">ZwDuplicateToken</fct>
<fct gp="--" od="---" flag="1">ZwCallbackReturn</fct>
<fct gp="02" od="---" flag="1">ZwQueryInformationThread</fct>
<fct gp="05" od="---" flag="0">ZwCreateSection</fct>
<fct gp="06" od="---" flag="0">ZwSetInformationFile</fct>
<fct gp="02" od="---" flag="1">KiUserExceptionDispatcher</fct>
<fct gp="02" od="---" flag="1">KiUserCallbackDispatcher</fct>
<fct gp="02" od="---" flag="1">KiUserApcDispatcher</fct>
<fct gp="02" od="---" flag="1">KiRaiseUserExceptionDispatcher</fct>
<fct gp="02" od="---" flag="1">KiIntSystemCall</fct>
<fct gp="02" od="---" flag="1">KiFastSystemCallRet</fct>
<fct gp="02" od="---" flag="1">KiFastSystemCall</fct>
</fcts>
</lib>
<lib name="netapi32.dll" flag="1" gp="03" desc="Network Win32 Library">
<fcts>
<fct gp="03" od="---" flag="1">NetJoinDomain</fct>
<fct gp="03" od="---" flag="1">NetUseAdd</fct>
<fct gp="03" od="---" flag="1">NetUseDel</fct>
<fct gp="03" od="---" flag="0">NetUseEnum</fct>
<fct gp="03" od="---" flag="0">NetUseGetInfo</fct>
<fct gp="03" od="---" flag="0">NetIsServiceAccount</fct>
<fct gp="03" od="---" flag="0">NetApiBufferFree</fct>
<fct gp="03" od="---" flag="1">Netbios</fct>
<fct gp="03" od="---" flag="1">NetFileClose</fct>
<fct gp="03" od="---" flag="1">NetShareCheck</fct>
<fct gp="03" od="---" flag="1">NetShareDelSticky</fct>
<fct gp="03" od="---" flag="1">NetShareEnumSticky</fct>
<fct gp="03" od="---" flag="1">NetShareSetInfo</fct>
<fct gp="03" od="---" flag="1">NetGetJoinableOUs</fct>
<fct gp="03" od="---" flag="1">NetAuditRead</fct>
<fct gp="03" od="---" flag="1">NetConfigSet</fct>
<fct gp="03" od="---" flag="1">NetErrorLogWrite</fct>
<fct gp="03" od="---" flag="1">NetErrorLogClear</fct>
<fct gp="03" od="---" flag="1">NetAuditClear</fct>
<fct gp="03" od="---" flag="1">NetErrorLogRead</fct>
<fct gp="03" od="---" flag="1">NetConfigGet</fct>
<fct gp="03" od="---" flag="1">NetAuditWrite</fct>
<fct gp="03" od="---" flag="1">NetFileEnum</fct>
<fct gp="03" od="---" flag="1" ti="1082">NetWkstaUserGetInfo</fct>
<fct gp="03" od="---" flag="1" ti="1082">NetWkstaGetInfo</fct>
<fct gp="03" od="---" flag="1">NetpwNameValidate</fct>
<fct gp="03" od="---" flag="1">NetFileGetInfo</fct>
<fct gp="03" od="---" flag="1">NetSessionEnum</fct>
<fct gp="03" od="---" flag="1">NetShareGetInfo</fct>
<fct gp="03" od="---" flag="1">NetShareEnum</fct>
<fct gp="03" od="---" flag="1">NetShareAdd</fct>
<fct gp="03" od="---" flag="1">NetShareDel</fct>
<fct gp="03" od="---" flag="1">NetWkstaUserEnum</fct>
<fct gp="03" od="---" flag="1">NetServerGetInfo</fct>
<fct gp="03" od="---" flag="1">NetAccessEnum</fct>
<fct gp="03" od="---" flag="1">NetBrowserStatisticsGet</fct>
<fct gp="03" od="---" flag="1">NetConnectionEnum</fct>
<fct gp="03" od="---" flag="1">NetWkstaTransportEnum</fct>
<fct gp="03" od="---" flag="1">NetGetJoinInformation</fct>
<fct gp="03" od="---" flag="1">NetUserAdd</fct>
<fct gp="03" od="---" flag="1">NetUserEnum</fct>
<fct gp="03" od="---" flag="1">NetUserGetInfo</fct>
<fct gp="03" od="---" flag="1">NetUserSetInfo</fct>
<fct gp="03" od="---" flag="1">NetUserDel</fct>
<fct gp="03" od="---" flag="1">NetUserGetGroups</fct>
<fct gp="03" od="---" flag="1">NetUserSetGroups</fct>
<fct gp="03" od="---" flag="1">NetUserGetLocalGroups</fct>
<fct gp="03" od="---" flag="1">NetUserModalsGet</fct>
<fct gp="03" od="---" flag="1">NetUserModalsSet</fct>
<fct gp="03" od="---" flag="1">NetUserChangePassword</fct>
<fct gp="03" od="---" flag="1">NetGroupAdd</fct>
<fct gp="03" od="---" flag="1">NetGroupAddUser</fct>
<fct gp="03" od="---" flag="1">NetGroupEnum</fct>
<fct gp="03" od="---" flag="1">NetGroupGetInfo</fct>
<fct gp="03" od="---" flag="1">NetGroupSetInfo</fct>
<fct gp="03" od="---" flag="1">NetGroupDel</fct>
<fct gp="03" od="---" flag="1">NetGroupDelUser</fct>
<fct gp="03" od="---" flag="1">NetGroupGetUsers</fct>
<fct gp="03" od="---" flag="1">NetGroupSetUsers</fct>
<fct gp="03" od="---" flag="1">NetStatisticsGet</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupAdd</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupAddMember</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupEnum</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupGetInfo</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupSetInfo</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupDel</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupDelMember</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupGetMembers</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupSetMembers</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupAddMembers</fct>
<fct gp="03" od="---" flag="1">NetLocalGroupDelMembers</fct>
<fct gp="03" od="---" flag="1">NetQueryDisplayInformation</fct>
<fct gp="03" od="---" flag="1">NetGetDisplayInformationIndex</fct>
<fct gp="03" od="---" flag="1">NetAccessAdd</fct>
<fct gp="03" od="---" flag="1">NetAccessGetInfo</fct>
<fct gp="03" od="---" flag="1">NetAccessSetInfo</fct>
<fct gp="03" od="---" flag="1">NetAccessDel</fct>
<fct gp="03" od="---" flag="1">NetAccessGetUserPerms</fct>
<fct gp="03" od="---" flag="1">NetValidatePasswordPolicy</fct>
<fct gp="03" od="---" flag="1">NetValidatePasswordPolicyFree</fct>
<fct gp="03" od="---" flag="1">NetGetDCName</fct>
<fct gp="03" od="---" flag="1">NetGetAnyDCName</fct>
<fct gp="03" od="---" flag="1">I_NetLogonControl</fct>
<fct gp="03" od="---" flag="1">I_NetLogonControl2</fct>
<fct gp="03" od="---" flag="1" ti="1046">NetEnumerateTrustedDomains</fct>
<fct gp="03" od="---" flag="1">NetRemoteTOD</fct>
<fct gp="03" od="---" flag="1" ti="1046">NetServerEnum</fct>
<fct gp="03" od="---" flag="1" ti="1046">NetServiceEnum</fct>
<fct gp="03" od="---" flag="1" ti="1082">DsEnumerateDomainTrusts</fct>
<fct gp="03" od="---" flag="1" ti="1082">DsRoleGetPrimaryDomainInformation</fct>
<fct gp="03" od="---" flag="1">DsGetDcName</fct>
</fcts>
</lib>
<lib name="aclui.dll" flag="0" gp="30" desc="Security Descriptor Editor">
<fcts>
<fct gp="30" od="002" flag="0">EditSecurity</fct>
<fct gp="30" od="003" flag="0">EditSecurityAdvanced</fct>
<fct gp="30" od="004" flag="0">EditResourceCondition</fct>
<fct gp="30" od="005" flag="0">EditConditionalAceClaims</fct>
</fcts>
</lib>
<lib name="comctl32.dll" flag="0" desc="Common Controls Library">
<fcts>
<fct gp="--" od="002" flag="0">MenuHelp</fct>
<fct gp="--" od="002" flag="0">GetEffectiveClientRect</fct>
<fct gp="--" od="003" flag="0">ShowHideMenuCtl</fct>
<fct gp="--" od="006" flag="0">CreateStatusWindow</fct>
<fct gp="--" od="007" flag="0">CreateToolbar</fct>
<fct gp="--" od="008" flag="0">CreateMappedBitmap</fct>
<fct gp="--" od="015" flag="0">DrawInsert</fct>
<fct gp="--" od="016" flag="0">CreateUpDownControl</fct>
<fct gp="--" od="017" flag="0">DPA_DeleteAllPtrs</fct>
<fct gp="--" od="020" flag="0">CreateStatusWindow</fct>
<fct gp="22" od="091" flag="1">TrackMouseEvent</fct>
<fct gp="--" od="236" flag="1">Str_SetPtrW</fct>
<fct gp="--" od="329" flag="1">DPA_Destroy</fct>
<fct gp="--" od="334" flag="1">DPA_InsertPtr</fct>
<fct gp="--" od="337" flag="1">DPA_DeleteAllPtrs</fct>
<fct gp="--" od="338" flag="1">DPA_Sort</fct>
<fct gp="--" od="340" flag="1">DPA_CreateEx</fct>
<fct gp="--" od="401" flag="0">AddMRUStringW</fct>
</fcts>
</lib>
<lib name="cryptbase.dll" flag="1" gp="04">
<fcts>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES1block1key">SystemFunction001</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES1block1key">SystemFunction002</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDESMagicBlock1key">SystemFunction003</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDESblocksECB">SystemFunction004</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDESblocksECB">SystemFunction005</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestLM">SystemFunction006</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestNTLM">SystemFunction007</fct>
<fct gp="04" od="--" flag="1" map="RtlLMResponseToChallenge">SystemFunction008</fct>
<fct gp="04" od="--" flag="1" map="RtlLMResponseToChallenge">SystemFunction009</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestMD4only16Bytes">SystemFunction010</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestMD4only16Bytes">SystemFunction011</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction012</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction013</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction014</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction015</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1key">SystemFunction016</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1key">SystemFunction017</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1key">SystemFunction018</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1key">SystemFunction019</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction020</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction021</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction022</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction023</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1DWORD">SystemFunction024</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1DWORD">SystemFunction025</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1DWORD">SystemFunction026</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1DWORD">SystemFunction027</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction028</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction029</fct>
<fct gp="04" od="--" flag="1" map="RtlEqualMemory16Bytes">SystemFunction030</fct>
<fct gp="04" od="--" flag="1" map="RtlEqualMemory16Bytes">SystemFunction031</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDecryptRC4">SystemFunction032</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDecryptRC4">SystemFunction033</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction034</fct>
<fct gp="04" od="--" flag="1" map="RtlCheckSignatureInFile">SystemFunction035</fct>
<fct gp="04" od="--" flag="1" ti="1027" map="RtlGenRandom">SystemFunction036</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction037</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction038</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction039</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptMemory">SystemFunction040</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptMemory">SystemFunction041</fct>
</fcts>
</lib>
<lib name="winsta.dll" flag="1" group="08" desc="Winstation Library">
<fcts>
<fct gp="08" od="---" flag="0">WinStationGetLoggedOnCount</fct>
<fct gp="08" od="---" flag="0" ti="1055">WinStationSendMessage</fct>
<fct gp="08" od="---" flag="0">WinStationQueryInformation</fct>
<fct gp="08" od="---" flag="0">LogonIdFromWinStationName</fct>
<fct gp="08" od="---" flag="0">RemoteAssistancePrepareSystemRestore</fct>
<fct gp="08" od="---" flag="0">ServerGetInternetConnectorStatus</fct>
<fct gp="08" od="---" flag="0">ServerLicensingClose</fct>
<fct gp="08" od="---" flag="0">ServerLicensingDeactivateCurrentPolicy</fct>
<fct gp="08" od="---" flag="0">ServerLicensingFreePolicyInformation</fct>
<fct gp="08" od="---" flag="0">ServerLicensingGetAvailablePolicyIds</fct>
<fct gp="08" od="---" flag="0">ServerLicensingGetPolicy</fct>
<fct gp="08" od="---" flag="0">ServerLicensingGetPolicyInformation</fct>
<fct gp="08" od="---" flag="0">ServerLicensingLoadPolicy</fct>
<fct gp="08" od="---" flag="0">ServerLicensingOpen</fct>
<fct gp="08" od="---" flag="0">ServerLicensingSetPolicy</fct>
<fct gp="08" od="---" flag="0">ServerLicensingUnloadPolicy</fct>
<fct gp="08" od="---" flag="0">ServerQueryInetConnectorInformation</fct>
<fct gp="08" od="---" flag="0">ServerSetInternetConnectorStatus</fct>
<fct gp="08" od="---" flag="0">WinStationActivateLicense</fct>
<fct gp="08" od="---" flag="0">WinStationAutoReconnect</fct>
<fct gp="08" od="---" flag="0">WinStationBroadcastSystemMessage</fct>
<fct gp="08" od="---" flag="0">WinStationCheckAccess</fct>
<fct gp="08" od="---" flag="0">WinStationCheckLoopBack</fct>
<fct gp="08" od="---" flag="0">WinStationCloseServer</fct>
<fct gp="08" od="---" flag="0">WinStationConnect</fct>
<fct gp="08" od="---" flag="0">WinStationConnectCallback</fct>
<fct gp="08" od="---" flag="0">WinStationConnectEx</fct>
<fct gp="08" od="---" flag="0">WinStationConnectW</fct>
<fct gp="08" od="---" flag="0">WinStationDisconnect</fct>
<fct gp="08" od="---" flag="0">WinStationEnumerate</fct>
<fct gp="08" od="---" flag="0">WinStationEnumerateExW</fct>
<fct gp="08" od="---" flag="0">WinStationEnumerateLicenses</fct>
<fct gp="08" od="---" flag="0">WinStationEnumerateProcesses</fct>
<fct gp="08" od="---" flag="0">WinStationEnumerateW</fct>
<fct gp="08" od="---" flag="0">WinStationEnumerate_Indexed</fct>
<fct gp="08" od="---" flag="0">WinStationFreeConsoleNotification</fct>
<fct gp="08" od="---" flag="0">WinStationFreeGAPMemory</fct>
<fct gp="08" od="---" flag="0">WinStationFreeMemory</fct>
<fct gp="08" od="---" flag="0">WinStationFreePropertyValue</fct>
<fct gp="08" od="---" flag="0">WinStationFreeUserCertificates</fct>
<fct gp="08" od="---" flag="0">WinStationFreeUserCredentials</fct>
<fct gp="08" od="---" flag="0">WinStationGenerateLicense</fct>
<fct gp="08" od="---" flag="0">WinStationGetAllProcesses</fct>
<fct gp="08" od="---" flag="0">WinStationGetAllSessionsW</fct>
<fct gp="08" od="---" flag="0">WinStationGetConnectionProperty</fct>
<fct gp="08" od="---" flag="0">WinStationGetDeviceId</fct>
<fct gp="08" od="---" flag="0">WinStationGetInitialApplication</fct>
<fct gp="08" od="---" flag="0">WinStationGetLanAdapterName</fct>
<fct gp="08" od="---" flag="0">WinStationGetLoggedOnCount</fct>
<fct gp="08" od="---" flag="0">WinStationGetMachinePolicy</fct>
<fct gp="08" od="---" flag="0">WinStationGetProcessSid</fct>
<fct gp="08" od="---" flag="0">WinStationGetRestrictedLogonInfo</fct>
<fct gp="08" od="---" flag="0">WinStationGetSessionIds</fct>
<fct gp="08" od="---" flag="0">WinStationGetTermSrvCountersValue</fct>
<fct gp="08" od="---" flag="0">WinStationGetUserCertificates</fct>
<fct gp="08" od="---" flag="0">WinStationGetUserCredentials</fct>
<fct gp="08" od="---" flag="0">WinStationGetUserProfile</fct>
<fct gp="08" od="---" flag="0">WinStationInstallLicense</fct>
<fct gp="08" od="---" flag="0">WinStationIsHelpAssistantSession</fct>
<fct gp="08" od="---" flag="0">WinStationIsSessionPermitted</fct>
<fct gp="08" od="---" flag="0">WinStationIsSessionRemoteable</fct>
<fct gp="08" od="---" flag="0">WinStationNameFromLogonId</fct>
<fct gp="08" od="---" flag="0">WinStationNegotiateSession</fct>
<fct gp="08" od="---" flag="0">WinStationNtsdDebug</fct>
<fct gp="08" od="---" flag="0">WinStationOpenServer</fct>
<fct gp="08" od="---" flag="0">WinStationOpenServerEx</fct>
<fct gp="08" od="---" flag="0">WinStationOpenServer</fct>
<fct gp="08" od="---" flag="0">WinStationQueryAllowConcurrentConnections</fct>
<fct gp="08" od="---" flag="0">WinStationQueryEnforcementCore</fct>
<fct gp="08" od="---" flag="0">WinStationQueryInformation</fct>
<fct gp="08" od="---" flag="0">WinStationQueryLicense</fct>
<fct gp="08" od="---" flag="0">WinStationQueryLogonCredentials</fct>
<fct gp="08" od="---" flag="0">WinStationQuerySessionVirtualIP</fct>
<fct gp="08" od="---" flag="0">WinStationQueryUpdateRequired</fct>
<fct gp="08" od="---" flag="0">WinStationRedirectErrorMessage</fct>
<fct gp="08" od="---" flag="0">WinStationRedirectLogonBeginPainting</fct>
<fct gp="08" od="---" flag="0">WinStationRedirectLogonError</fct>
<fct gp="08" od="---" flag="0">WinStationRedirectLogonMessage</fct>
<fct gp="08" od="---" flag="0">WinStationRedirectLogonStatus</fct>
<fct gp="08" od="---" flag="0">WinStationRegisterConsoleNotification</fct>
<fct gp="08" od="---" flag="0">WinStationRegisterConsoleNotificationEx</fct>
<fct gp="08" od="---" flag="0">WinStationRegisterNotificationEvent</fct>
<fct gp="08" od="---" flag="0">WinStationRemoveLicense</fct>
<fct gp="08" od="---" flag="0">WinStationRename</fct>
<fct gp="08" od="---" flag="0">WinStationReportUIResult</fct>
<fct gp="08" od="---" flag="0">WinStationReset</fct>
<fct gp="08" od="---" flag="0">WinStationRevertFromServicesSession</fct>
<fct gp="08" od="---" flag="0" ti="1055">WinStationSendMessage</fct>
<fct gp="08" od="---" flag="0">WinStationSendWindowMessage</fct>
<fct gp="08" od="---" flag="0">WinStationServerPing</fct>
<fct gp="08" od="---" flag="0">WinStationSetAutologonPassword</fct>
<fct gp="08" od="---" flag="0">WinStationSetInformation</fct>
<fct gp="08" od="---" flag="0">WinStationSetPoolCount</fct>
<fct gp="08" od="---" flag="0">WinStationShadow</fct>
<fct gp="08" od="---" flag="0">WinStationShadowStop</fct>
<fct gp="08" od="---" flag="0" ti="1529">WinStationShutdownSystem</fct>
<fct gp="08" od="---" flag="0">WinStationSwitchToServicesSession</fct>
<fct gp="08" od="---" flag="0">WinStationSystemShutdownStarted</fct>
<fct gp="08" od="---" flag="0">WinStationSystemShutdownWait</fct>
<fct gp="08" od="---" flag="0">WinStationTerminateProcess</fct>
<fct gp="08" od="---" flag="0">WinStationUnRegisterConsoleNotification</fct>
<fct gp="08" od="---" flag="0">WinStationUnRegisterNotificationEvent</fct>
<fct gp="08" od="---" flag="0">WinStationUserLoginAccessCheck</fct>
<fct gp="08" od="---" flag="0">WinStationVerify</fct>
<fct gp="08" od="---" flag="0">WinStationVirtualOpen</fct>
<fct gp="08" od="---" flag="0">WinStationVirtualOpenEx</fct>
<fct gp="08" od="---" flag="0">WinStationWaitSystemEvent</fct>
<fct gp="08" od="---" flag="0">_NWLogonQueryAdmin</fct>
<fct gp="08" od="---" flag="0">_NWLogonSetAdmin</fct>
<fct gp="08" od="---" flag="0">_WinStationAnnoyancePopup</fct>
<fct gp="08" od="---" flag="0">_WinStationBeepOpen</fct>
<fct gp="08" od="---" flag="0">_WinStationBreakPoint</fct>
<fct gp="08" od="---" flag="0">_WinStationCallback</fct>
<fct gp="08" od="---" flag="0">_WinStationCheckForApplicationName</fct>
<fct gp="08" od="---" flag="0">_WinStationFUSCanRemoteUserDisconnect</fct>
<fct gp="08" od="---" flag="0">_WinStationGetApplicationInfo</fct>
<fct gp="08" od="---" flag="0">_WinStationNotifyDisconnectPipe</fct>
<fct gp="08" od="---" flag="0">_WinStationNotifyLogoff</fct>
<fct gp="08" od="---" flag="0">_WinStationNotifyLogon</fct>
<fct gp="08" od="---" flag="0">_WinStationNotifyNewSession</fct>
<fct gp="08" od="---" flag="0">_WinStationOpenSessionDirectory</fct>
<fct gp="08" od="---" flag="0">_WinStationReInitializeSecurity</fct>
<fct gp="08" od="---" flag="0">_WinStationReadRegistry</fct>
<fct gp="08" od="---" flag="0">_WinStationSessionInitialized</fct>
<fct gp="08" od="---" flag="0">_WinStationShadowTarget</fct>
<fct gp="08" od="---" flag="0">_WinStationShadowTarget2</fct>
<fct gp="08" od="---" flag="0">_WinStationShadowTargetSetup</fct>
<fct gp="08" od="---" flag="0">_WinStationUpdateClientCachedCredentials</fct>
<fct gp="08" od="---" flag="0">_WinStationUpdateSettings</fct>
</fcts>
</lib>
<lib name="mprapi.dll" flag="1" gp="03" desc="Windows NT MP Router Administration Library">
<fcts>
<fct gp="03" od="-" flag="1">DeletePort</fct>
<fct gp="03" od="-" flag="1">MprAdminUserWrite</fct>
<fct gp="03" od="-" flag="1">MprAdminUserGetInfo</fct>
<fct gp="03" od="-" flag="1">MprAdminUserUserOpen</fct>
<fct gp="03" od="-" flag="1">MprAdminUserUserClose</fct>
<fct gp="03" od="-" flag="1">MprAdminUserRead</fct>
<fct gp="03" od="-" flag="1">MprAdminUserOpen</fct>
<fct gp="03" od="-" flag="1">MprAdminUserClose</fct>
</fcts>
</lib>
<lib name="sfc.dll" flag="1" gp="17">
<fcts>
<fct gp="17" od="-" flag="1">SfcIsFileProtected</fct>
<fct gp="17" od="-" flag="1">SfcIsKeyProtected</fct>
<fct gp="17" od="-" flag="1">SfcGetNextProtectedFile</fct>
<fct gp="17" od="-" flag="1">SfcGetFiles</fct>
<fct gp="17" od="-" flag="1">SFCDisable</fct>
<fct gp="17" od="-" flag="1">SFCScan</fct>
<fct gp="17" od="-" flag="1">SRSetRestorePoint</fct>
<fct gp="17" od="-" flag="1">SfpVerifyFile</fct>
</fcts>
</lib>
<lib name="atl90.dll" flag="0" gp="--">
<fcts>
<fct gp="--" od="17" flag="1">AtlComModuleRegisterClassObjects</fct>
<fct gp="--" od="20" flag="1">AtlComModuleRevokeClassObjects</fct>
<fct gp="--" od="--" flag="1">AtlUpdateRegistryFromResourceD</fct>
<fct gp="--" od="49" flag="1">AtlRegisterClassCategoriesHelper</fct>
<fct gp="--" od="56" flag="1">AtlLoadTypeLib</fct>
<fct gp="--" od="61" flag="1">AtlCreateRegistrar</fct>
<fct gp="--" od="64" flag="1">AtlCallTermFunc</fct>
<fct gp="--" od="67" flag="1">AtlSetPerUserRegistration</fct>
<fct gp="--" od="68" flag="1">AtlGetPerUserRegistration</fct>
</fcts>
</lib>
<lib name="winspool.drv" flag="0" gp="--" desc="Windows Spooler Driver">
<fcts>
<fct gp="12" od="199" flag="1">EnumMonitors</fct>
<fct gp="17" od="201" flag="0">GetDefaultPrinter</fct>
<fct gp="17" od="203" flag="0">GetDefaultPrinter</fct>
<fct gp="17" od="---" flag="1">AddPrintProcessor</fct>
<fct gp="17" od="---" flag="1">DeletePort</fct>
<fct gp="17" od="---" flag="1">DeletePrinter</fct>
<fct gp="17" od="---" flag="1">DeletePrinterConnection</fct>
<fct gp="17" od="---" flag="1">DeletePrintProcessor</fct>
<fct gp="17" od="---" flag="1">EnumPorts</fct>
<fct gp="19" od="---" flag="1">GetPrinterDriverDirectory</fct>
<fct gp="19" od="---" flag="1">GetPrintProcessorDirectory</fct>
</fcts>
</lib>
<lib name="mscorlib.dll" flag="0" gp="--">
<fcts>
<fct gp="04" od="---" flag="0">TripleDESCryptoServiceProvider</fct>
<fct gp="30" od="---" flag="0">AddFileSecurity</fct>
<fct gp="30" od="---" flag="0">FileSystemRights</fct>
<fct gp="30" od="---" flag="0">System.Security.AccessControl</fct>
<fct gp="30" od="---" flag="0">AccessControlType</fct>
<fct gp="30" od="---" flag="0">RemoveFileSecurity</fct>
<fct gp="04" od="---" flag="0" ti="1001">Encrypt</fct>
<fct gp="30" od="---" flag="0">FileSecurity</fct>
<fct gp="30" od="---" flag="0">GetAccessControl</fct>
<fct gp="30" od="---" flag="0">ObjectSecurity</fct>
<fct gp="30" od="---" flag="0">SetAccessControl</fct>
<fct gp="30" od="---" flag="0">FileSystemAccessRule</fct>
<fct gp="30" od="---" flag="0">FileSystemSecurity</fct>
<fct gp="30" od="---" flag="0">AddAccessRule</fct>
<fct gp="30" od="---" flag="0">RemoveAccessRule</fct>
</fcts>
</lib>
<lib name="system.dll" flag="0" gp="--">
<fcts>
<fct gp="03" od="---" flag="0">HttpWebResponse</fct>
<fct gp="03" od="---" flag="0">HttpWebRequest</fct>
</fcts>
</lib>
<lib name="advapi32.dll" flag="0" gp="--" desc="Advanced Windows 32 Base API">
<fcts>
<fct gp="--" od="--" flag="0">SaferCloseLevel</fct>
<fct gp="30" od="--" flag="1">SaferComputeTokenFromLevel</fct>
<fct gp="30" od="--" flag="1">SaferCreateLevel</fct>
<fct gp="30" od="--" flag="1">SaferGetLevelInformation</fct>
<fct gp="30" od="--" flag="1">SaferGetPolicyInformation</fct>
<fct gp="30" od="--" flag="1">SaferIdentifyLevel</fct>
<fct gp="06" od="--" flag="1">SaferIsExecutableFileType</fct>
<fct gp="16" od="--" flag="1">SaferRecordEventLogEntry</fct>
<fct gp="30" od="--" flag="1">SaferSetLevelInformation</fct>
<fct gp="30" od="--" flag="1">SaferSetPolicyInformation</fct>
<fct gp="02" od="--" flag="1">SaferiChangeRegistryScope</fct>
<fct gp="02" od="--" flag="1">SaferiCompareTokenLevels</fct>
<fct gp="02" od="--" flag="1">SaferiIsExecutableFileType</fct>
<fct gp="16" od="--" flag="1">ControlTrace</fct>
<fct gp="16" od="--" flag="1">EnableTrace</fct>
<fct gp="16" od="--" flag="1">EnableTraceEx</fct>
<fct gp="16" od="--" flag="1">EnableTraceEx2</fct>
<fct gp="16" od="--" flag="1">EnumerateTraceGuids</fct>
<fct gp="16" od="--" flag="1">EnumerateTraceGuidsEx</fct>
<fct gp="16" od="--" flag="1">FlushTrace</fct>
<fct gp="16" od="--" flag="1">StartTrace</fct>
<fct gp="16" od="--" flag="1">CloseTrace</fct>
<fct gp="16" od="--" flag="1">ProcessTrace</fct>
<fct gp="16" od="--" flag="1">OpenTrace</fct>
<fct gp="16" od="--" flag="1">QueryAllTraces</fct>
<fct gp="16" od="--" flag="1">QueryTrace</fct>
<fct gp="16" od="--" flag="1">StopTrace</fct>
<fct gp="16" od="--" flag="1">TraceQueryInformation</fct>
<fct gp="16" od="--" flag="1">TraceSetInformation</fct>
<fct gp="16" od="--" flag="1">UpdateTrace</fct>
<fct gp="16" od="--" flag="1">EnableCallback</fct>
<fct gp="16" od="--" flag="1">EventActivityIdControl</fct>
<fct gp="16" od="--" flag="1">EventEnabled</fct>
<fct gp="16" od="--" flag="1">EventProviderEnabled</fct>
<fct gp="16" od="--" flag="0">EventWrite</fct>
<fct gp="16" od="--" flag="1">EventWriteString</fct>
<fct gp="16" od="--" flag="0">EventWriteEx</fct>
<fct gp="16" od="--" flag="0">EventRegister</fct>
<fct gp="16" od="--" flag="0">EventSetInformation</fct>
<fct gp="16" od="--" flag="0">EventUnregister</fct>
<fct gp="16" od="--" flag="0">EventWriteTransfer</fct>
<fct gp="02" od="--" flag="0" cb="1">OpenThreadWaitChainSession</fct>
<fct gp="04" od="--" flag="1">QueryRecoveryAgentsOnEncryptedFile</fct>
<fct gp="04" od="--" flag="1">RemoveUsersFromEncryptedFile</fct>
<fct gp="04" od="--" flag="1">FreeEncryptionCertificateHashList</fct>
<fct gp="04" od="--" flag="1">QueryUsersOnEncryptedFile</fct>
<fct gp="09" od="--" flag="1" ti="1106">RegisterServiceCtrlHandler</fct>
<fct gp="09" od="--" flag="1" ti="1569">RegisterServiceCtrlHandlerEx</fct>
<fct gp="09" od="--" flag="0" ti="1569">QueryServiceConfig2</fct>
<fct gp="09" od="--" flag="0" ti="1569">QueryServiceStatus</fct>
<fct gp="09" od="--" flag="0" ti="1569">QueryServiceStatusEx</fct>
<fct gp="09" od="--" flag="0" ti="1569">GetServiceKeyName</fct>
<fct gp="09" od="--" flag="1" ti="1569">EnumServiceGroup</fct>
<fct gp="09" od="--" flag="0" ti="1569">QueryServiceConfig</fct>
<fct gp="09" od="--" flag="1" ti="1569">ChangeServiceConfig2</fct>
<fct gp="09" od="--" flag="1" ti="1569">UnlockServiceDatabase</fct>
<fct gp="09" od="--" flag="1" ti="1569">ChangeServiceConfig</fct>
<fct gp="09" od="--" flag="1" ti="1569">StartService</fct>
<fct gp="09" od="--" flag="1" ti="1569">OpenSCManager</fct>
<fct gp="09" od="--" flag="1" ti="1489">DeleteService</fct>
<fct gp="09" od="--" flag="0" ti="1569">EnumDependentServices</fct>
<fct gp="09" od="--" flag="1" ti="1543">CreateService</fct>
<fct gp="09" od="--" flag="0" ti="1543">SetServiceStatus</fct>
<fct gp="09" od="--" flag="0" ti="1569">CloseServiceHandle</fct>
<fct gp="09" od="--" flag="0" ti="1569">EnumServicesStatus</fct>
<fct gp="09" od="--" flag="0" ti="1569">EnumServicesStatusEx</fct>
<fct gp="09" od="--" flag="0" ti="1543">OpenService</fct>
<fct gp="30" od="--" flag="1">LsaIQueryInformationPolicyTrusted</fct>
<fct gp="30" od="--" flag="1">LsaStorePrivateData</fct>
<fct gp="30" od="--" flag="1">LsaSetDomainInformationPolicy</fct>
<fct gp="30" od="--" flag="1">LsaCreateTrustedDomainEx</fct>
<fct gp="30" od="--" flag="1">LsaCreateAccount</fct>
<fct gp="30" od="--" flag="1">LsaCreateSecret</fct>
<fct gp="30" od="--" flag="1">LsaCreateTrustedDomain</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaEnumerateAccounts</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaEnumerateAccountsWithUserRight</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaRetrievePrivateData</fct>
<fct gp="30" od="--" flag="1">LsaSetInformationPolicy</fct>
<fct gp="30" od="--" flag="1">LsaSetInformationTrustedDomain</fct>
<fct gp="30" od="--" flag="1">LsaSetQuotasForAccount</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaOpenSecret</fct>
<fct gp="30" od="--" flag="1">LsaSetSecurityObject</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaQueryTrustedDomainInfo</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaQueryTrustedDomainInfoByName</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaQueryInformationPolicy</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaEnumerateTrustedDomains</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaQueryDomainInformationPolicy</fct>
<fct gp="30" od="--" flag="1">LsaAddAccountRights</fct>
<fct gp="30" od="--" flag="1">LsaSetSecret</fct>
<fct gp="30" od="--" flag="1">LsaEnumeratePrivilegesOfAccount</fct>
<fct gp="30" od="--" flag="1">LsaOpenPolicy</fct>
<fct gp="30" od="--" flag="1">LsaOpenPolicySce</fct>
<fct gp="30" od="--" flag="1">LsaClearAuditLog</fct>
<fct gp="30" od="--" flag="1" ti="1087">LsaEnumerateAccountRights</fct>
<fct gp="30" od="--" flag="1">LsaFreeMemory</fct>
<fct gp="29" od="--" flag="1">LsaQueryForestTrustInformation</fct>
<fct gp="30" od="--" flag="0">LsaClose</fct>
<fct gp="30" od="--" flag="1">LsaDeleteTrustedDomain</fct>
<fct gp="30" od="--" flag="1">LsaGetRemoteUserName</fct>
<fct gp="30" od="--" flag="1">LsaICLookupNamesWithCreds</fct>
<fct gp="30" od="--" flag="1">LsaOpenTrustedDomain</fct>
<fct gp="30" od="--" flag="1">LsaSetSystemAccessAccount</fct>
<fct gp="30" od="--" flag="1">LsaSetTrustedDomainInformation</fct>
<fct gp="05" od="--" flag="0">CreateMemoryResourceNotification</fct>
<fct gp="04" od="--" flag="1">CryptSignHash</fct>
<fct gp="17" od="--" flag="1">InstallApplication</fct>
<fct gp="30" od="--" flag="1">ConvertSecurityDescriptorToAccessNamed</fct>
<fct gp="30" od="--" flag="1">ConvertStringSDToSDRootDomain</fct>
<fct gp="30" od="--" flag="1">SetEntriesInAccessList</fct>
<fct gp="30" od="--" flag="1">SetNamedSecurityInfoEx</fct>
<fct gp="30" od="--" flag="1">MakeAbsoluteSD</fct>
<fct gp="30" od="--" flag="1">MakeAbsoluteSD2</fct>
<fct gp="30" od="--" flag="1">GetOverlappedAccessResults</fct>
<fct gp="30" od="--" flag="1">TrusteeAccessToObject</fct>
<fct gp="30" od="--" flag="1">ConvertAccessToSecurityDescriptor</fct>
<fct gp="30" od="--" flag="1">SetEntriesInAuditList</fct>
<fct gp="30" od="--" flag="1">SetSecurityInfoEx</fct>
<fct gp="30" od="--" flag="1">SetEntriesInAuditList</fct>
<fct gp="30" od="--" flag="1">ConvertSecurityDescriptorToAccess</fct>
<fct gp="--" od="--" flag="1">ElfRegisterEventSource</fct>
<fct gp="--" od="--" flag="1">ElfBackupEventLogFile</fct>
<fct gp="--" od="--" flag="1">ElfChangeNotify</fct>
<fct gp="--" od="--" flag="1">ElfClearEventLogFile</fct>
<fct gp="--" od="--" flag="1">ElfCloseEventLog</fct>
<fct gp="--" od="--" flag="1">ElfDeregisterEventSource</fct>
<fct gp="--" od="--" flag="1">ElfFlushEventLog</fct>
<fct gp="--" od="--" flag="1">ElfNumberOfRecords</fct>
<fct gp="--" od="--" flag="1">ElfOldestRecord</fct>
<fct gp="--" od="--" flag="1">ElfOpenBackupEventLog</fct>
<fct gp="16" od="--" flag="1">ElfOpenEventLog</fct>
<fct gp="16" od="--" flag="1">ElfReadEventLog</fct>
<fct gp="16" od="--" flag="1">ElfReportEvent</fct>
<fct gp="16" od="--" flag="1">ElfReportEventAndSource</fct>
<fct gp="--" od="--" flag="1">WmiCloseBlock</fct>
<fct gp="--" od="--" flag="1">WmiFileHandleToInstanceName</fct>
<fct gp="--" od="--" flag="1">WmiCloseBlock</fct>
<fct gp="02" od="--" flag="1">WmiExecuteMethod</fct>
<fct gp="--" od="--" flag="1">WmiQueryAllData</fct>
<fct gp="--" od="--" flag="1">WmiQuerySingleInstance</fct>
<fct gp="16" od="--" flag="1">BackupEventLog</fct>
<fct gp="16" od="--" flag="1">ClearEventLog</fct>
<fct gp="16" od="--" flag="1">CloseEventLog</fct>
<fct gp="16" od="--" flag="1">DeregisterEventSource</fct>
<fct gp="16" od="--" flag="1">GetEventLogInformation</fct>
<fct gp="16" od="--" flag="1">GetNumberOfEventLogRecords</fct>
<fct gp="16" od="--" flag="1">GetOldestEventLogRecord</fct>
<fct gp="16" od="--" flag="1">NotifyChangeEventLog</fct>
<fct gp="16" od="--" flag="1">OpenBackupEventLog</fct>
<fct gp="16" od="--" flag="1">OpenEventLog</fct>
<fct gp="16" od="--" flag="1">ReadEventLog</fct>
<fct gp="16" od="--" flag="1">RegisterEventSource</fct>
<fct gp="16" od="--" flag="1">ReportEvent</fct>
<fct gp="16" od="--" flag="1">SaferRecordEventLogEntry</fct>
<fct gp="19" od="--" flag="1">GetCurrentHwProfile</fct>
<fct gp="04" od="--" flag="1">CredEnumerate</fct>
<fct gp="04" od="--" flag="1">CredFree</fct>
<fct gp="04" od="--" flag="1">CredDelete</fct>
<fct gp="04" od="--" flag="1">CredFindBestCredential</fct>
<fct gp="04" od="--" flag="1">CredGetSessionTypes</fct>
<fct gp="04" od="--" flag="1">CredGetTargetInfo</fct>
<fct gp="04" od="--" flag="1">CredIsMarshaledCredential</fct>
<fct gp="04" od="--" flag="1">CredIsProtected</fct>
<fct gp="04" od="--" flag="1">CredMarshalCredential</fct>
<fct gp="04" od="--" flag="1">CredPackAuthenticationBuffer</fct>
<fct gp="04" od="--" flag="1">CredProtect</fct>
<fct gp="04" od="--" flag="1">CredRead</fct>
<fct gp="04" od="--" flag="1">CredReadDomainCredentials</fct>
<fct gp="04" od="--" flag="1">CredRename</fct>
<fct gp="04" od="--" flag="1">CredUnmarshalCredential</fct>
<fct gp="04" od="--" flag="1">CredUnPackAuthenticationBuffer</fct>
<fct gp="04" od="--" flag="1">CredUnprotect</fct>
<fct gp="04" od="--" flag="1">CredWrite</fct>
<fct gp="04" od="--" flag="1">CredWriteDomainCredentials</fct>
<fct gp="30" od="--" flag="1" ti="1134">GetAuditedPermissionsFromAcl</fct>
<fct gp="30" od="--" flag="1" ti="1134">GetAuditedPermissionsFromAcl</fct>
<fct gp="30" od="--" flag="1" ti="1134">ConvertSecurityDescriptorToStringSecurityDescriptor</fct>
<fct gp="30" od="--" flag="1" ti="1134">SetEntriesInAcl</fct>
<fct gp="16" od="--" flag="1">LockServiceDatabase</fct>
<fct gp="16" od="--" flag="1">GetNumberOfEventLogRecords</fct>
<fct gp="16" od="--" flag="1">GetOldestEventLogRecord</fct>
<fct gp="16" od="--" flag="1">BackupEventLog</fct>
<fct gp="16" od="--" flag="1">NotifyChangeEventLog</fct>
<fct gp="16" od="--" flag="1">DeregisterEventSource</fct>
<fct gp="30" od="--" flag="0">ConvertSidToStringSid</fct>
<fct gp="16" od="--" flag="1">ReportEvent</fct>
<fct gp="16" od="--" flag="1">GetTraceEnableLevel</fct>
<fct gp="16" od="--" flag="0">GetTraceLoggerHandle</fct>
<fct gp="16" od="--" flag="0">GetTraceEnableFlags</fct>
<fct gp="16" od="--" flag="0">RegisterTraceGuids</fct>
<fct gp="16" od="--" flag="0">UnregisterTraceGuids</fct>
<fct gp="16" od="--" flag="0">TraceMessage</fct>
<fct gp="17" od="--" flag="1">AbortSystemShutdown</fct>
<fct gp="30" od="--" flag="1" ti="1134">LookupPrivilegeValue</fct>
<fct gp="--" od="--" flag="1">NotifyBootConfigStatus</fct>
<fct gp="30" od="--" flag="1" ti="1134">SetNamedSecurityInfo</fct>
<fct gp="30" od="--" flag="1">LogonUser</fct>
<fct gp="30" od="--" flag="1">LogonUserW</fct>
<fct gp="30" od="--" flag="1">LogonUserEx</fct>
<fct gp="30" od="--" flag="1">LogonUserExEx</fct>
<fct gp="17" od="--" flag="1">InitiateSystemShutdown</fct>
<fct gp="17" od="--" flag="1">InitiateSystemShutdownEx</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES1block1key">SystemFunction001</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES1block1key">SystemFunction002</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDESMagicBlock1key">SystemFunction003</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDESblocksECB">SystemFunction004</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDESblocksECB">SystemFunction005</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestLM">SystemFunction006</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestNTLM">SystemFunction007</fct>
<fct gp="04" od="--" flag="1" map="RtlLMResponseToChallenge">SystemFunction008</fct>
<fct gp="04" od="--" flag="1" map="RtlLMResponseToChallenge">SystemFunction009</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestMD4only16Bytes">SystemFunction010</fct>
<fct gp="04" od="--" flag="1" map="RtlDigestMD4only16Bytes">SystemFunction011</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction012</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction013</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction014</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction015</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1key">SystemFunction016</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1key">SystemFunction017</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1key">SystemFunction018</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1key">SystemFunction019</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction020</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction021</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks2keys">SystemFunction022</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks2keys">SystemFunction023</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1DWORD">SystemFunction024</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1DWORD">SystemFunction025</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDES2blocks1DWORD">SystemFunction026</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptDES2blocks1DWORD">SystemFunction027</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction028</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction029</fct>
<fct gp="04" od="--" flag="1" map="RtlEqualMemory16Bytes">SystemFunction030</fct>
<fct gp="04" od="--" flag="1" map="RtlEqualMemory16Bytes">SystemFunction031</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDecryptRC4">SystemFunction032</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptDecryptRC4">SystemFunction033</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction034</fct>
<fct gp="04" od="--" flag="1" map="RtlCheckSignatureInFile">SystemFunction035</fct>
<fct gp="04" od="--" flag="1" map="RtlGenRandom">SystemFunction036</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction037</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction038</fct>
<fct gp="04" od="--" flag="1" map="">SystemFunction039</fct>
<fct gp="04" od="--" flag="1" map="RtlEncryptMemory">SystemFunction040</fct>
<fct gp="04" od="--" flag="1" map="RtlDecryptMemory">SystemFunction041</fct>
</fcts>
</lib>
<lib name="secur32.dll" flag="1" gp="30" desc="Security Support Provider Interface">
<fcts>
<fct gp="04" od="--" flag="1" ti="1022">EncryptMessage</fct>
<fct gp="04" od="--" flag="1" ti="1022">DecryptMessage</fct>
<fct gp="30" od="--" flag="1" ti="1134">QuerySecurityPackageInfo</fct>
<fct gp="30" od="--" flag="1" ti="1134">LsaManageSidNameMapping</fct>
<fct gp="30" od="--" flag="1" ti="1003">AddSecurityPackage</fct>
<fct gp="30" od="--" flag="1">LsaLogonUser</fct>
<fct gp="30" od="--" flag="1">LsaLookupAuthenticationPackage</fct>
<fct gp="30" od="--" flag="1">LsaDeregisterLogonProcess</fct>
<fct gp="30" od="--" flag="1">LsaConnectUntrusted</fct>
<fct gp="30" od="--" flag="1">LsaFreeReturnBuffer</fct>
<fct gp="30" od="--" flag="1">LsaRegisterLogonProcess</fct>
<fct gp="30" od="--" flag="1">LsaRegisterPolicyChangeNotification</fct>
<fct gp="19" od="--" flag="1">GetUserNameEx</fct>
<fct gp="30" od="--" flag="1" ti="1134">DeleteSecurityContext</fct>
<fct gp="--" od="--" flag="1">DdeSetQualityOfService</fct>
<fct gp="04" od="--" flag="1" ti="1134">ApplyControlToken</fct>
<fct gp="04" od="--" flag="1" ti="1134">AcquireCredentialsHandle</fct>
<fct gp="04" od="--" flag="1" ti="1134">QueryCredentialsAttributes</fct>
<fct gp="04" od="--" flag="1" ti="1134">FreeCredentialsHandle</fct>
<fct gp="04" od="--" flag="1">SealMessage</fct>
<fct gp="04" od="--" flag="1">MakeSignature</fct>
<fct gp="04" od="--" flag="1">VerifySignature</fct>
<fct gp="30" od="--" flag="1" ti="1134">ImpersonateSecurityContext</fct>
<fct gp="30" od="--" flag="1" ti="1134">AcceptSecurityContext</fct>
<fct gp="30" od="--" flag="1" ti="1134">EnumerateSecurityPackages</fct>
<fct gp="30" od="--" flag="1" ti="1134">InitializeSecurityContext</fct>
<fct gp="30" od="--" flag="1" ti="1134">InitSecurityInterface</fct>
<fct gp="30" od="--" flag="1" ti="1134">ImportSecurityContext</fct>
<fct gp="30" od="--" flag="1" ti="1134">RevertSecurityContext</fct>
<fct gp="30" od="--" flag="1" ti="1134">QueryContextAttributes</fct>
</fcts>
</lib>
<lib name="mpr.dll" flag="1" gp="03" desc="Multiple Provider Router Library">
<fcts>
<fct gp="03" od="--" flag="1">MultinetGetConnectionPerformance</fct>
<fct gp="03" od="--" flag="1">WNetAddConnection</fct>
<fct gp="03" od="--" flag="1">WNetAddConnection2</fct>
<fct gp="03" od="--" flag="1">WNetAddConnection3</fct>
<fct gp="03" od="--" flag="1">WNetCloseEnum</fct>
<fct gp="03" od="--" flag="1">WNetEnumResource</fct>
<fct gp="03" od="--" flag="1">WNetGetConnection</fct>
<fct gp="03" od="--" flag="1">WNetGetNetworkInformation</fct>
<fct gp="03" od="--" flag="1">WNetGetProviderName</fct>
<fct gp="03" od="--" flag="1">WNetGetResourceParent</fct>
<fct gp="03" od="--" flag="1">WNetGetResourceInformation</fct>
<fct gp="03" od="--" flag="1">WNetGetUniversalName</fct>
<fct gp="03" od="--" flag="1">WNetGetUser</fct>
<fct gp="03" od="--" flag="1">WNetOpenEnum</fct>
<fct gp="03" od="--" flag="1">WNetRestoreConnection</fct>
<fct gp="03" od="--" flag="1">WNetUseConnection</fct>
<fct gp="03" od="--" flag="1">WNetCancelConnection</fct>
<fct gp="03" od="--" flag="1">WNetAddConnection2</fct>
<fct gp="03" od="--" flag="1">WNetCancelConnection2</fct>
<fct gp="03" od="--" flag="1">WNetGetConnection</fct>
<fct gp="03" od="--" flag="1">WNetUseConnection</fct>
<fct gp="03" od="--" flag="1">WNetDirectoryNotify</fct>
</fcts>
</lib>
<lib name="winhttp.dll" flag="1" gp="03" desc="Windows HTTP Services">
<fcts>
<fct gp="03" od="--" flag="1">WinHttpCrackUrl</fct>
<fct gp="03" od="--" flag="1">WinHttpSetTimeouts</fct>
<fct gp="03" od="--" flag="1">WinHttpSetCredentials</fct>
<fct gp="03" od="--" flag="1">WinHttpQueryAuthSchemes</fct>
<fct gp="03" od="--" flag="1">WinHttpQueryHeaders</fct>
<fct gp="03" od="--" flag="0">WinHttpQueryOption</fct>
<fct gp="03" od="--" flag="0">WinHttpCloseHandle</fct>
<fct gp="03" od="07" flag="1">WinHttpCheckPlatform</fct>
<fct gp="03" od="--" flag="1">WinHttpConnect</fct>
<fct gp="03" od="--" flag="1">WinHttpGetIEProxyConfigForCurrentUser</fct>
<fct gp="03" od="--" flag="1">WinHttpGetProxyForUrl</fct>
<fct gp="03" od="--" flag="0">WinHttpOpen</fct>
<fct gp="03" od="--" flag="0">WinHttpOpenRequest</fct>
<fct gp="03" od="--" flag="0">WinHttpQueryDataAvailable</fct>
<fct gp="03" od="--" flag="0">WinHttpReadData</fct>
<fct gp="03" od="--" flag="1">WinHttpReceiveResponse</fct>
<fct gp="03" od="--" flag="1">WinHttpSendRequest</fct>
<fct gp="03" od="--" flag="1">WinHttpSetOption</fct>
<fct gp="03" od="--" flag="1">WinHttpWriteData</fct>
<fct gp="03" od="--" flag="1">WinHttpAddRequestHeaders</fct>
<fct gp="03" od="--" flag="1">WinHttpSetStatusCallback</fct>
<fct gp="03" od="--" flag="0">WinHttpCreateUrl</fct>
</fcts>
</lib>
<lib name="apphelp.dll" flag="0" gp="--" desc="Application Compatibility Client Library">
<fcts>
<fct flag="0">ApphelpCheckShellObject</fct>
</fcts>
</lib>
<lib name="ntdsapi.dll" flag="1" gp="29" desc="Active Directory Domain Services Library">
<fcts>
<fct gp="29" od="--" flag="1">DsListSites</fct>
<fct gp="29" od="--" flag="1">DsFreePasswordCredentials</fct>
<fct gp="29" od="--" flag="1">DsFreeNameResult</fct>
<fct gp="29" od="--" flag="1">DsUnBind</fct>
<fct gp="29" od="--" flag="1">DsBind</fct>
<fct gp="29" od="--" flag="1">DsMapSchemaGuids</fct>
<fct gp="29" od="--" flag="1">DsCrackSpn</fct>
<fct gp="29" od="--" flag="1">DsFreeDomainControllerInfo</fct>
<fct gp="29" od="--" flag="1">DsMakeSpn</fct>
<fct gp="29" od="--" flag="1">DsGetDomainControllerInfo</fct>
<fct gp="29" od="--" flag="1">DsQuoteRdnValue</fct>
<fct gp="29" od="--" flag="1">DsFreeSchemaGuidMap</fct>
<fct gp="29" od="--" flag="1">DsReplicaSync</fct>
</fcts>
</lib>
<lib name="shfolder.dll" flag="1" gp="--" desc="Shell Folder Library">
<fcts>
<fct od="500" flag="1"></fct>
</fcts>
</lib>
<lib name="rtutils.dll" flag="0" gp="16" desc="Routing Utilities Libary">
<fcts>
<fct gp="16" od="--" flag="0">TraceDeregister</fct>
<fct gp="16" od="--" flag="0">TraceVprintfEx</fct>
<fct gp="16" od="--" flag="0">TraceRegisterEx</fct>
</fcts>
</lib>
<lib name="nddeapi.dll" flag="1" gp="03" desc="Network DDE Share Management APIs">
<fcts>
<fct gp="03" od="500" flag="1">NDdeShareAdd</fct>
<fct gp="03" od="501" flag="1">NDdeShareDel</fct>
<fct gp="03" od="502" flag="1">NDdeShareEnum</fct>
<fct gp="03" od="503" flag="1">NDdeShareGetInfo</fct>
<fct gp="03" od="504" flag="1">NDdeShareSetInfo</fct>
<fct gp="03" od="505" flag="1">NDdeGetErrorString</fct>
<fct gp="03" od="506" flag="1">NDdeIsValidShareName</fct>
<fct gp="03" od="507" flag="1">NDdeIsValidAppTopicList</fct>
<fct gp="03" od="508" flag="1">NDdeSpecialCommand</fct>
<fct gp="03" od="509" flag="1">NDdeGetShareSecurity</fct>
<fct gp="03" od="510" flag="1">NDdeSetShareSecurity</fct>
<fct gp="03" od="511" flag="1">NDdeGetTrustedShare</fct>
<fct gp="03" od="512" flag="1">NDdeSetTrustedShare</fct>
<fct gp="03" od="513" flag="1">NDdeTrustedShareEnum</fct>
<fct gp="03" od="600" flag="1">NDdeShareAdd</fct>
<fct gp="03" od="601" flag="1">NDdeShareDel</fct>
<fct gp="03" od="602" flag="1">NDdeShareEnum</fct>
<fct gp="03" od="603" flag="1">NDdeShareGetInfo</fct>
<fct gp="03" od="604" flag="1">NDdeShareSetInfo</fct>
<fct gp="03" od="605" flag="1">NDdeGetErrorString</fct>
<fct gp="03" od="606" flag="1">NDdeIsValidShareName</fct>
<fct gp="03" od="607" flag="1">NDdeIsValidAppTopicList</fct>
<fct gp="03" od="608" flag="1">NDdeSpecialCommand</fct>
<fct gp="03" od="609" flag="1">NDdeGetShareSecurity</fct>
<fct gp="03" od="610" flag="1">NDdeSetShareSecurity</fct>
<fct gp="03" od="611" flag="1">NDdeGetTrustedShare</fct>
<fct gp="03" od="612" flag="1">NDdeSetTrustedShare</fct>
<fct gp="03" od="613" flag="1">NDdeTrustedShareEnum</fct>
</fcts>
</lib>
<lib name="shell32.dll" flag="0" gp="--" desc="Windows Shell Library">
<fcts>
<fct gp="05" od="---" flag="0">SHGetMalloc</fct>
<fct gp="25" od="---" flag="1">SHGetKnownFolderPath</fct>
<fct gp="25" od="---" flag="1">SHAddToRecentDocs</fct>
<fct gp="11" od="---" flag="0">LoadIcon</fct>
<fct gp="11" od="---" flag="0">LoadString</fct>
<fct gp="11" od="---" flag="0">LookupIconIdFromDirectory</fct>
<fct gp="11" od="---" flag="0">LookupIconIdFromDirectoryEx</fct>
<fct gp="11" od="---" flag="0">CreateIconFromResourceEx</fct>
<fct gp="11" od="---" flag="0">ExtractIcon</fct>
<fct gp="11" od="---" flag="0">ExtractIconEx</fct>
<fct gp="11" od="---" flag="0">CopyIcon</fct>
<fct gp="11" od="---" flag="0">CreateIcon</fct>
<fct gp="11" od="---" flag="0">CreateIconFromResource</fct>
<fct gp="11" od="---" flag="0">CreateIconFromResource</fct>
<fct gp="11" od="---" flag="0">CreateIconIndirect</fct>
<fct gp="11" od="---" flag="0">DestroyIcon</fct>
<fct gp="11" od="---" flag="0">DuplicateIcon</fct>
<fct gp="25" od="---" flag="0">SHGetDesktopFolder</fct>
<fct gp="25" od="---" flag="0">SHGetDiskFreeSpace</fct>
<fct gp="25" od="---" flag="0">SHGetDiskFreeSpaceEx</fct>
<fct gp="02" od="---" flag="1" ti="1106">SHCreateProcessAsUserW</fct>
<fct gp="--" od="071" flag="0">Shell_GetImageLists</fct>
<fct gp="02" od="---" flag="1" ti="1106">ShellExecCmdLine</fct>
<fct gp="06" od="---" flag="1">SHGetSpecialFolderLocation</fct>
<fct gp="06" od="---" flag="1">SHGetFileInfo</fct>
<fct gp="06" od="---" flag="1">SHFileOperation</fct>
<fct gp="06" od="---" flag="1">SHCreateDirectory</fct>
<fct gp="06" od="---" flag="1">SHBrowseForFolder</fct>
<fct gp="06" od="---" flag="1">SHGetPathFromIDList</fct>
<fct gp="06" od="---" flag="0" ti="1485">Win32DeleteFile</fct>
<fct gp="06" od="---" flag="0">FileOpen</fct>
<fct gp="06" od="---" flag="0">SHFindFiles</fct>
<fct gp="04" od="---" flag="0">FileEncryptionStatus</fct>
<fct gp="19" od="---" flag="1">SHQueryRecycleBin</fct>
<fct gp="--" od="---" flag="0">UpdateAllDesktopSubscriptions</fct>
<fct gp="--" od="---" flag="0">SHAlloc</fct>
<fct gp="--" od="---" flag="0">SHAllocShared</fct>
<fct gp="--" od="---" flag="0">SHAnsiToAnsi</fct>
<fct gp="--" od="---" flag="0">SHAnsiToUnicode</fct>
<fct gp="--" od="---" flag="0">SHChangeDWORDAsIDList</fct>
<fct gp="--" od="---" flag="0">SHChangeProductKeyAsIDList</fct>
<fct gp="--" od="---" flag="0">SHChangeUpdateImageIDList</fct>
<fct gp="--" od="---" flag="0">SHCloneSpecialIDList</fct>
<fct gp="--" od="---" flag="0">SHCLSIDFromString</fct>
<fct gp="--" od="---" flag="0">SHCoCreateInstance</fct>
<fct gp="01" od="---" flag="0">SHCreateFileExtractIcon</fct>
<fct gp="--" od="---" flag="0">SHCreateStreamOnFile</fct>
<fct gp="--" od="---" flag="0">Shell_GetCachedImageIndex</fct>
<fct gp="--" od="---" flag="0">Shell_GetImageLists</fct>
<fct gp="--" od="---" flag="0">Shell_MergeMenus</fct>
<fct gp="--" od="---" flag="0">ShellMessageBox</fct>
<fct gp="01" od="---" flag="0">SHExtractIconsW</fct>
<fct gp="15" od="---" flag="1" ti="1115">SHFlushClipboard</fct>
<fct gp="--" od="---" flag="0">SHFreeShared</fct>
<fct gp="25" od="---" flag="0">SHGetFolderLocation</fct>
<fct gp="06" od="---" flag="0">SHGetFolderPath</fct>
<fct gp="06" od="---" flag="0">SHGetFolderPathAndSubDir</fct>
<fct gp="25" od="---" flag="0">SHGetRealIDL</fct>
<fct gp="25" od="---" flag="0">SHGetSetFolderCustomSettings</fct>
<fct gp="25" od="---" flag="0">SHGetSetSettings</fct>
<fct gp="19" od="---" flag="0">SHGetSpecialFolderPath</fct>
<fct gp="25" od="---" flag="0">SHHandleUpdateImage</fct>
<fct gp="25" od="---" flag="0">SHLoadOLE</fct>
<fct gp="25" od="---" flag="0">SHLockShared</fct>
<fct gp="25" od="---" flag="0">SHRestricted</fct>
<fct gp="25" od="---" flag="0">SHSetFolderPath</fct>
<fct gp="25" od="---" flag="0">SHSendMessageBroadcast</fct>
<fct gp="25" od="---" flag="0">SHStartNetConnectionDialog</fct>
<fct gp="25" od="---" flag="0">SHValidateUNC</fct>
<fct gp="--" od="123" flag="0">RestartDialog</fct>
<fct gp="--" od="124" flag="0">RestartDialogEx</fct>
<fct gp="--" od="---" flag="0">OpenRegStream</fct>
<fct gp="--" od="---" flag="0">ParseField</fct>
<fct gp="--" od="098" flag="0">PathCleanupSpec</fct>
<fct gp="06" od="099" flag="0">PathGetShortPath</fct>
<fct gp="06" od="100" flag="0">PathIsExe</fct>
<fct gp="06" od="---" flag="0">PathIsSlow</fct>
<fct gp="--" od="---" flag="0">PathProcessCommand</fct>
<fct gp="--" od="---" flag="0">PathResolve</fct>
<fct gp="--" od="---" flag="0">PickIconDlg</fct>
<fct gp="--" od="068" flag="0">ILCreateFromPath</fct>
<fct gp="--" od="075" flag="0">ILLoadFromStreamEx</fct>
<fct gp="--" od="---" flag="0">ILLoadFromStream</fct>
<fct gp="--" od="---" flag="0">GUIDFromString</fct>
<fct gp="--" od="---" flag="0">GetFileNameFromBrowse</fct>
<fct gp="--" od="---" flag="0">ExtractAssociatedIconEx</fct>
<fct gp="--" od="---" flag="0">DriveType</fct>
<fct gp="--" od="---" flag="0">CallCPLEntry16</fct>
<fct gp="25" od="---" flag="1">SHChangeNotifySuspendResume</fct>
<fct gp="25" od="---" flag="0">SHParseDisplayName</fct>
<fct gp="25" od="002" flag="1">SHChangeNotifyRegister</fct>
<fct gp="25" od="004" flag="1">SHChangeNotifyDeregister</fct>
<fct gp="--" od="027" flag="0">ILSaveToStream</fct>
<fct gp="--" od="028" flag="0">SHILCreateFromPath</fct>
<fct gp="--" od="064" flag="0">DriveType</fct>
<fct gp="--" od="066" flag="0">IsNetDrive</fct>
<fct gp="--" od="103" flag="0">SignalFileOpen</fct>
<fct gp="--" od="092" flag="1">OpenAs_RunDLL</fct>
<fct gp="--" od="150" flag="0">PrintersGetCommand_RunDLLW</fct>
<fct gp="--" od="155" flag="0">ILFree</fct>
<fct gp="25" od="---" flag="0">SHAutoComplete</fct>
<fct gp="25" od="165" flag="0">SHCreateDirectory</fct>
<fct gp="25" od="176" flag="0">SHSetInstanceExplorer</fct>
<fct gp="25" od="---" flag="1">SHGetInstanceExplorer</fct>
<fct gp="25" od="179" flag="1">SHGetNewLinkInfo</fct>
<fct gp="--" od="189" flag="1">ILCreateFromPath</fct>
<fct gp="--" od="199" flag="0">SHHelpShortcuts_RunDLL</fct>
<fct gp="--" od="430" flag="1">ShellExec_RunDLL</fct>
<fct gp="--" od="357" flag="0">SHFreeNameMappings</fct>
<fct gp="--" od="356" flag="1">SHFormatDrive</fct>
<fct gp="06" od="332" flag="1">SHCreateDirectoryEx</fct>
<fct gp="02" od="310" flag="1">RegenerateUserEnvironment</fct>
<fct gp="02" od="309" flag="1" ti="1106">RealShellExecuteW</fct>
<fct gp="02" od="308" flag="1" ti="1106">RealShellExecuteEx</fct>
<fct gp="02" od="306" flag="1" ti="1106">RealShellExecute</fct>
<fct gp="--" od="305" flag="1">Options_RunDLL</fct>
<fct gp="--" od="298" flag="1">GetCurrentProcessExplicitAppUserModelID</fct>
<fct gp="02" od="---" flag="0">GetProcessHandleCount</fct>
<fct gp="02" od="296" flag="1">FindExecutable</fct>
<fct gp="--" od="277" flag="1">DoEnvironmentSubst</fct>
<fct gp="01" od="275" flag="0">_DllUnregisterServer</fct>
<fct gp="01" od="274" flag="1" ti="1218">_DllRegisterServer</fct>
<fct gp="01" od="273" flag="1">DllInstall</fct>
<fct gp="--" od="272" flag="0">DllGetVersion</fct>
<fct gp="01" od="---" flag="0">RegLoadMUIString</fct>
<fct gp="--" od="469" flag="1" ti="1106">WOWShellExecute</fct>
<fct gp="--" od="470" flag="1">WaitForExplorerRestartW</fct>
<fct gp="--" od="524" flag="0">RealDriveType</fct>
<fct gp="--" od="526" flag="1">SHFlushSFCache</fct>
<fct gp="--" od="644" flag="1">SHChangeNotification_Lock</fct>
<fct gp="--" od="645" flag="1">SHChangeNotification_Unlock</fct>
<fct gp="10" od="652" flag="1">WriteCabinetState</fct>
<fct gp="10" od="654" flag="1">ReadCabinetState</fct>
<fct gp="30" od="680" flag="1">IsUserAnAdmin</fct>
<fct gp="--" od="271" flag="0">DllGetClassObject</fct>
<fct gp="--" od="269" flag="0">DllCanUnloadNow</fct>
<fct gp="--" od="110" flag="1">Control_RunDLL</fct>
<fct gp="--" od="112" flag="1">Control_RunDLLAsUser</fct>
<fct gp="30" od="245" flag="1">SHTestTokenMembership</fct>
<fct gp="--" od="208" flag="1">AppCompat_RunDLLW</fct>
<fct gp="25" od="207" flag="1">SHHelpShortcuts_RunDLL</fct>
<fct gp="25" od="---" flag="1">SHChangeNotify</fct>
<fct gp="25" od="---" flag="1">SHChangeNotifyDeregister</fct>
<fct gp="25" od="---" flag="1">SHEmptyRecycleBin</fct>
<fct gp="25" od="---" flag="1">SHLoadInProc</fct>
<fct gp="25" od="---" flag="1">SHGetNoAssocIconIndex</fct>
<fct gp="25" od="---" flag="1">SHGetUserDisplayName</fct>
<fct gp="25" od="---" flag="1">SHGetUserPicturePath</fct>
<fct gp="25" od="---" flag="1">SHGetUserPicturePathEx</fct>
<fct gp="25" od="---" flag="1">SHHelpShortcut_RunDLL</fct>
<fct gp="25" od="---" flag="1">SHHelpShortcuts_RunDLL</fct>
<fct gp="25" od="---" flag="1">ShortSizeFormatExport</fct>
<fct gp="25" od="---" flag="1">SHResolveUserNames</fct>
<fct gp="25" od="---" flag="1">SHSettingsChanged</fct>
<fct gp="25" od="---" flag="1">SHSetUserPicturePath</fct>
<fct gp="25" od="---" flag="1">SHShouldShowWizards</fct>
<fct gp="30" od="---" flag="1" ti="1134">SHTestTokenPrivilegeW</fct>
<fct gp="25" od="---" flag="1">SHAnsiToUnicodeCPAlloc</fct>
<fct gp="25" od="---" flag="1">SHAreIconsEqual</fct>
<fct gp="25" od="---" flag="1">SHBoolSystemParametersInfo</fct>
<fct gp="25" od="---" flag="1">SHCreatePropertyBagOnMemory</fct>
<fct gp="25" od="---" flag="1">SHCreatePropertyStoreOnXML</fct>
<fct gp="25" od="---" flag="1">SHCreateStreamOnDllResourceW</fct>
<fct gp="25" od="---" flag="1">SHCreateStreamOnModuleResourceW</fct>
<fct gp="25" od="---" flag="1" ti="1082">SHExpandEnvironmentStringsAlloc</fct>
<fct gp="25" od="---" flag="1">SHForwardContextMenuMsg</fct>
<fct gp="25" od="---" flag="1">SHGetSizeShared</fct>
<fct gp="25" od="---" flag="1">SHInvokeCommandOnContextMenu</fct>
<fct gp="25" od="---" flag="1">SHInvokeCommandOnContextMenuEx</fct>
<fct gp="25" od="---" flag="1">SHInvokeCommandsOnContextMenuEx</fct>
<fct gp="25" od="---" flag="1">SHInvokeCommandWithFlagsAndSite</fct>
<fct gp="01" od="---" flag="1">SHRegSetValue</fct>
<fct gp="--" od="---" flag="1">SHUnicodeToAnsiCPAlloc</fct>
</fcts>
</lib>
<lib name="psapi.dll" flag="1" gp="02" desc="Process Status Library">
<fcts>
<fct gp="19" od="--" flag="1">K32EnumPageFiles</fct>
<fct gp="02" od="--" flag="1">EmptyWorkingSet</fct>
<fct gp="02" od="--" flag="1">EnumDeviceDrivers</fct>
<fct gp="02" od="--" flag="1" cb="1">EnumPageFiles</fct>
<fct gp="02" od="--" flag="1" ti="1057">EnumProcesses</fct>
<fct gp="02" od="--" flag="1" ti="1057">EnumProcessModules</fct>
<fct gp="02" od="--" flag="1" ti="1057">EnumProcessModulesEx</fct>
<fct gp="02" od="--" flag="1">GetProcessImageFileName</fct>
<fct gp="02" od="--" flag="1">InitializeProcessForWsWatch</fct>
<fct gp="02" od="--" flag="1">GetModuleBaseName</fct>
<fct gp="21" od="--" flag="1">GetModuleFileNameEx</fct>
<fct gp="16" od="--" flag="1">GetMappedFileName</fct>
<fct gp="02" od="--" flag="0">GetDeviceDriverBaseName</fct>
<fct gp="16" od="--" flag="1">GetDeviceDriverFileName</fct>
<fct gp="16" od="--" flag="1">GetMappedFileName</fct>
<fct gp="16" od="--" flag="1">GetModuleInformation</fct>
<fct gp="19" od="--" flag="1">GetPerformanceInfo</fct>
<fct gp="02" od="--" flag="1">GetWsChanges</fct>
<fct gp="02" od="--" flag="1">GetWsChangesEx</fct>
<fct gp="02" od="--" flag="1">QueryWorkingSet</fct>
<fct gp="02" od="--" flag="1">QueryWorkingSetEx</fct>
</fcts>
</lib>
<lib name="kernelbase.dll" flag="0" gp="--" desc="Windows NT BASE API Library">
<fcts>
<fct gp="--" od="--" flag="0">LoadStringByReference</fct>
</fcts>
</lib>
<lib name="fwpuclnt.dll" flag="1" gp="03" desc="FWP/IPsec User-Mode Library">
<fcts>
<fct gp="03" od="--" flag="1">WSASetSocketPeerTargetName</fct>
<fct gp="03" od="--" flag="1">WSADeleteSocketPeerTargetName</fct>
<fct gp="03" od="--" flag="1">WSAImpersonateSocketPeer</fct>
<fct gp="03" od="--" flag="1">WSAQuerySocketSecurity</fct>
<fct gp="03" od="--" flag="1">WSARevertImpersonation</fct>
</fcts>
</lib>
<lib name="mapi32.dll" flag="1" gp="28" desc="Extended MAPI Library">
<fcts>
<fct gp="28" od="011" flag="1">MAPILogonEx</fct>
<fct gp="28" od="013" flag="1">MAPIAllocateBuffer</fct>
<fct gp="28" od="017" flag="1">MAPIFreeBuffer</fct>
<fct gp="28" od="021" flag="1">MAPIInitialize</fct>
<fct gp="28" od="023" flag="1">MAPIUninitialize</fct>
<fct gp="28" od="029" flag="1">MAPIOpenFormMgr</fct>
<fct gp="28" od="046" flag="1">BuildDisplayTable</fct>
<fct gp="28" od="075" flag="0">HrQueryAllRows</fct>
<fct gp="28" od="131" flag="0">SzFindLastCh@8</fct>
<fct gp="28" od="139" flag="0">FreePadrlist</fct>
<fct gp="28" od="140" flag="0">FreeProws</fct>
<fct gp="28" od="148" flag="1">OpenStreamOnFile</fct>
<fct gp="28" od="148" flag="0">RTFSync</fct>
<fct gp="28" od="220" flag="1">BMAPISendMail</fct>
<fct gp="28" od="221" flag="1">BMAPISaveMail</fct>
<fct gp="28" od="222" flag="1">BMAPIReadMail</fct>
<fct gp="28" od="223" flag="1">BMAPIGetReadMail</fct>
<fct gp="28" od="224" flag="1">BMAPIFindNext</fct>
<fct gp="28" od="225" flag="1">BMAPIAddress</fct>
<fct gp="28" od="226" flag="1">BMAPIGetAddress</fct>
<fct gp="28" od="227" flag="1">BMAPIDetails</fct>
<fct gp="28" od="228" flag="1">BMAPIResolveName</fct>
<fct gp="28" od="---" flag="0">MAPIX</fct>
<fct gp="28" od="---" flag="1">WrapCompressedRTFStream</fct>
<fct gp="28" od="---" flag="1">RTFSync</fct>
<fct gp="28" od="---" flag="1">MAPIAdminProfiles</fct>
</fcts>
</lib>
<lib name="wininet.dll" flag="1" gp="03" desc="Internet Extensions for Win32 Library">
<fcts>
<fct gp="03" od="--" flag="0">CommitUrlCacheEntry</fct>
<fct gp="03" od="--" flag="0">InternetSetFilePointer</fct>
<fct gp="03" od="--" flag="1">InternetSecurityProtocolToString</fct>
<fct gp="03" od="--" flag="1">InternetAttemptConnect</fct>
<fct gp="03" od="--" flag="1">UrlZonesDetach</fct>
<fct gp="03" od="--" flag="1">InternetAutodial</fct>
<fct gp="03" od="--" flag="1">InternetAutodialHangup</fct>
<fct gp="03" od="--" flag="1">DeleteUrlCacheEntry</fct>
<fct gp="03" od="--" flag="1">RetrieveUrlCacheEntryFile</fct>
<fct gp="03" od="--" flag="1">FindFirstUrlCacheEntry</fct>
<fct gp="03" od="--" flag="1">FindFirstUrlCacheContainer</fct>
<fct gp="03" od="--" flag="1">FindNextUrlCacheContainer</fct>
<fct gp="03" od="--" flag="1">FindNextUrlCacheEntry</fct>
<fct gp="03" od="--" flag="1">FindCloseUrlCache</fct>
<fct gp="03" od="--" flag="1">GetUrlCacheEntryInfo</fct>
<fct gp="03" od="--" flag="1">GetUrlCacheEntryInfoEx</fct>
<fct gp="03" od="--" flag="1">HttpSendRequest</fct>
<fct gp="03" od="--" flag="1">HttpSendRequestEx</fct>
<fct gp="03" od="--" flag="1">HttpQueryInfo</fct>
<fct gp="03" od="--" flag="1">HttpAddRequestHeaders</fct>
<fct gp="03" od="--" flag="1">HttpEndRequest</fct>
<fct gp="03" od="--" flag="1">HttpOpenRequest</fct>
<fct gp="03" od="--" flag="1">InternetGetConnectedState</fct>
<fct gp="03" od="--" flag="1">InternetGetConnectedStateEx</fct>
<fct gp="03" od="--" flag="1">InternetWriteFile</fct>
<fct gp="03" od="--" flag="1">InternetOpenUrl</fct>
<fct gp="03" od="--" flag="1">InternetQueryDataAvailable</fct>
<fct gp="03" od="--" flag="1">InternetGetCookie</fct>
<fct gp="03" od="--" flag="1">InternetCheckConnection</fct>
<fct gp="03" od="--" flag="1">InternetQueryOption</fct>
<fct gp="03" od="--" flag="1">InternetSetStatusCallback</fct>
<fct gp="03" od="--" flag="1">InternetSetOption</fct>
<fct gp="03" od="--" flag="1">InternetErrorDlg</fct>
<fct gp="03" od="--" flag="0">InternetCloseHandle</fct>
<fct gp="03" od="--" flag="1">InternetOpen</fct>
<fct gp="03" od="--" flag="1">InternetConnect</fct>
<fct gp="03" od="--" flag="1">InternetCrackUrl</fct>
<fct gp="03" od="--" flag="1">InternetCreateUrl</fct>
<fct gp="03" od="--" flag="1">InternetCanonicalizeUrl</fct>
<fct gp="03" od="--" flag="1">InternetCombineUrl</fct>
<fct gp="03" od="--" flag="1" ti="1485">FtpDeleteFile</fct>
<fct gp="03" od="--" flag="1">FtpCommand</fct>
<fct gp="03" od="--" flag="1">FtpCreateDirectory</fct>
<fct gp="06" od="--" flag="1">FtpFindFirstFile</fct>
<fct gp="03" od="--" flag="1">FtpGetCurrentDirectory</fct>
<fct gp="03" od="--" flag="1">FtpGetFile</fct>
<fct gp="03" od="--" flag="1">FtpGetFileSize</fct>
<fct gp="03" od="--" flag="1">FtpOpenFile</fct>
<fct gp="03" od="--" flag="1">FtpPutFile</fct>
<fct gp="03" od="--" flag="1">FtpRemoveDirectory</fct>
<fct gp="03" od="--" flag="1">FtpRenameFile</fct>
<fct gp="03" od="--" flag="1">FtpSetCurrentDirectory</fct>
<fct gp="03" od="--" flag="1">ResumeSuspendedDownload</fct>
<fct gp="03" od="--" flag="0">RetrieveUrlCacheEntryStream</fct>
<fct gp="03" od="--" flag="1">SetUrlCacheEntryInfo</fct>
<fct gp="03" od="--" flag="0">GopherOpenFile</fct>
<fct gp="03" od="--" flag="0">CreateUrlCacheEntry</fct>
<fct gp="03" od="--" flag="0">GopherFindFirstFile</fct>
<fct gp="03" od="--" flag="0">CreateUrlCacheEntry</fct>
<fct gp="03" od="--" flag="0">GopherGetAttribute</fct>
</fcts>
</lib>
<lib name="rpcrt4.dll" flag="1" gp="03" desc="Remote Procedure Call Runtime Library">
<fcts>
<fct gp="03" od="--" flag="1">I_RpcMapWin32Status</fct>
<fct gp="03" od="--" flag="1">UuidCreateSequential</fct>
<fct gp="03" od="--" flag="1">UuidToString</fct>
<fct gp="03" od="--" flag="1">RpcBindingSetAuthInfo</fct>
<fct gp="03" od="--" flag="1">RpcMgmtSetServerStackSize</fct>
<fct gp="03" od="--" flag="1">RpcServerUnregisterIf</fct>
<fct gp="03" od="--" flag="1">RpcMgmtWaitServerListen</fct>
<fct gp="03" od="--" flag="1">RpcMgmtStopServerListening</fct>
<fct gp="03" od="--" flag="1">RpcServerUnregisterIfEx</fct>
<fct gp="03" od="--" flag="1">RpcServerRegisterIf</fct>
<fct gp="03" od="--" flag="1">RpcServerUseProtseqEp</fct>
<fct gp="03" od="--" flag="1">RpcServerListen</fct>
<fct gp="03" od="--" flag="1">RpcStringFree</fct>
<fct gp="03" od="--" flag="1">RpcBindingFree</fct>
<fct gp="03" od="--" flag="1">RpcBindingFromStringBinding</fct>
<fct gp="03" od="--" flag="1">RpcStringBindingCompose</fct>
<fct gp="03" od="--" flag="1">RpcServerTestCancel</fct>
<fct gp="03" od="--" flag="1">RpcStringBindingParse</fct>
<fct gp="03" od="--" flag="1">RpcMgmtInqServerPrincName</fct>
<fct gp="03" od="--" flag="1">RpcNetworkIsProtseqValid</fct>
<fct gp="03" od="--" flag="1">UuidCreate</fct>
<fct gp="03" od="--" flag="1">NdrClientInitializeNew</fct>
<fct gp="03" od="--" flag="1">NdrAsyncClientCall</fct>
<fct gp="03" od="--" flag="1">NdrClearOutParameters</fct>
<fct gp="03" od="--" flag="1">NdrClientCall</fct>
<fct gp="03" od="--" flag="1">NdrClientCall2</fct>
<fct gp="03" od="--" flag="0">NdrConformantArrayUnmarshall</fct>
<fct gp="03" od="--" flag="1">NdrConformantStringBufferSize</fct>
<fct gp="03" od="--" flag="1">NdrConformantStringMarshall</fct>
<fct gp="03" od="--" flag="1">NdrConformantStringUnmarshall</fct>
<fct gp="03" od="--" flag="1">NdrContextHandleInitialize</fct>
<fct gp="03" od="--" flag="1">NdrContextHandleSize</fct>
<fct gp="03" od="--" flag="1">NdrContextHandleMemorySize</fct>
<fct gp="03" od="--" flag="1">NdrConvert</fct>
<fct gp="03" od="--" flag="1">NdrCStdStubBuffer_Release</fct>
<fct gp="03" od="--" flag="1">NdrCStdStubBuffer2_Release</fct>
<fct gp="03" od="--" flag="1">NdrDllCanUnloadNow</fct>
<fct gp="03" od="--" flag="1">NdrDllGetClassObject</fct>
<fct gp="03" od="--" flag="1">NdrDllRegisterProxy</fct>
<fct gp="03" od="--" flag="1">NdrDllUnregisterProxy</fct>
<fct gp="03" od="--" flag="1">NdrGetUserMarshalInfo</fct>
<fct gp="03" od="--" flag="1">NdrInterfacePointerBufferSize</fct>
<fct gp="03" od="--" flag="1">NdrInterfacePointerFree</fct>
<fct gp="03" od="--" flag="1">NdrInterfacePointerMarshall</fct>
<fct gp="03" od="--" flag="1">NdrInterfacePointerUnmarshall</fct>
<fct gp="03" od="--" flag="1">NdrOleAllocate</fct>
<fct gp="03" od="--" flag="1">NdrOleFree</fct>
<fct gp="03" od="--" flag="1">NdrPointerBufferSize</fct>
<fct gp="03" od="--" flag="1">NdrPointerFree</fct>
<fct gp="03" od="--" flag="1">NdrPointerMarshall</fct>
<fct gp="03" od="--" flag="1">NdrPointerUnmarshall</fct>
<fct gp="03" od="--" flag="1">NdrProxyErrorHandler</fct>
<fct gp="03" od="--" flag="1">NdrProxyFreeBuffer</fct>
<fct gp="03" od="--" flag="1">NdrProxyGetBuffer</fct>
<fct gp="03" od="--" flag="1">NdrProxyInitialize</fct>
<fct gp="03" od="--" flag="1">NdrProxySendReceive</fct>
<fct gp="03" od="--" flag="1">NdrSimpleTypeMarshall</fct>
<fct gp="03" od="--" flag="1">NdrSimpleTypeUnmarshall</fct>
<fct gp="03" od="--" flag="1">NdrStubCall2</fct>
<fct gp="03" od="--" flag="1">NdrStubForwardingFunction</fct>
<fct gp="03" od="--" flag="1">NdrStubGetBuffer</fct>
<fct gp="03" od="--" flag="1">NdrStubInitialize</fct>
<fct gp="03" od="--" flag="1">NdrUserMarshalBufferSize</fct>
<fct gp="03" od="--" flag="1">NdrUserMarshalFree</fct>
<fct gp="03" od="--" flag="1">NdrUserMarshalMarshall</fct>
<fct gp="03" od="--" flag="1">UuidFromString</fct>
</fcts>
</lib>
<lib name="setupapi.dll" flag="1" gp="26" desc="Windows Setup Library">
<fcts>
<fct gp="26" od="--" flag="0">SetupQuerySpaceRequiredOnDrive</fct>
<fct gp="26" od="--" flag="0">SetupDiGetSelectedDriver</fct>
<fct gp="26" od="--" flag="0">SetupDiCreateDeviceInfo</fct>
<fct gp="26" od="--" flag="0">SetupDiGetDriverInfoDetail</fct>
<fct gp="26" od="--" flag="0">SetupDiClassNameFromGuidEx</fct>
<fct gp="26" od="--" flag="0">SetupDiSetDeviceInstallParams</fct>
<fct gp="26" od="--" flag="0">SetupDiSetDeviceRegistryProperty</fct>
<fct gp="26" od="--" flag="0">SetupDiGetINFClass</fct>
<fct gp="26" od="--" flag="0">SetupDiGetDeviceRegistryProperty</fct>
<fct gp="26" od="--" flag="0">SetupDiGetClassDevs</fct>
<fct gp="26" od="--" flag="0">SetupDiEnumDeviceInfo</fct>
<fct gp="26" od="--" flag="0">SetupDiEnumDeviceInterfaces</fct>
<fct gp="26" od="--" flag="0">SetupDiGetDeviceInterfaceDetail</fct>
<fct gp="26" od="--" flag="0">SetupDiDestroyDeviceInfoList</fct>
<fct gp="26" od="--" flag="0">SetupDiCallClassInstaller</fct>
<fct gp="26" od="--" flag="0">SetupDiCreateDeviceInfoList</fct>
<fct gp="26" od="--" flag="0">SetupDiOpenDevRegKey</fct>
<fct gp="26" od="--" flag="0">SetupDiClassGuidsFromNameEx</fct>
<fct gp="26" od="--" flag="0">SetupDiMoveDuplicateDevice</fct>
<fct gp="26" od="--" flag="0">SetupIterateCabinet</fct>
<fct gp="26" od="--" flag="0">SetupDecompressOrCopyFile</fct>
<fct gp="26" od="--" flag="0">SetupQueryInfFileInformation</fct>
</fcts>
</lib>
<lib name="powrprof.dll" flag="1" gp="27" desc="Power Profile Helper Library">
<fcts>
<fct gp="27" od="--" flag="1">CallNtPowerInformation</fct>
<fct gp="27" od="--" flag="1">CanUserWritePwrScheme</fct>
<fct gp="27" od="--" flag="1">DeletePwrScheme</fct>
<fct gp="27" od="--" flag="1">DevicePowerClose</fct>
<fct gp="27" od="--" flag="1">DevicePowerEnumDevices</fct>
<fct gp="27" od="--" flag="1">DevicePowerOpen</fct>
<fct gp="27" od="--" flag="1">DevicePowerSetDeviceState</fct>
<fct gp="27" od="--" flag="1" cb="1">EnumPwrSchemes</fct>
<fct gp="27" od="--" flag="1">GUIDFormatToGlobalPowerPolicy</fct>
<fct gp="27" od="--" flag="1">GUIDFormatToPowerPolicy</fct>
<fct gp="27" od="--" flag="1">GetActivePwrScheme</fct>
<fct gp="27" od="--" flag="1">GetCurrentPowerPolicies</fct>
<fct gp="27" od="--" flag="1">GetPwrCapabilities</fct>
<fct gp="27" od="--" flag="1">GetPwrDiskSpindownRange</fct>
<fct gp="27" od="--" flag="1">IsAdminOverrideActive</fct>
<fct gp="27" od="--" flag="1">IsPwrHibernateAllowed</fct>
<fct gp="27" od="--" flag="1">IsPwrShutdownAllowed</fct>
<fct gp="27" od="--" flag="1">IsPwrSuspendAllowed</fct>
<fct gp="27" od="--" flag="1">LoadCurrentPwrScheme</fct>
<fct gp="27" od="--" flag="1">MergeLegacyPwrScheme</fct>
<fct gp="27" od="--" flag="1">PowerApplyPowerRequestOverride</fct>
<fct gp="27" od="--" flag="1">PowerCanRestoreIndividualDefaultPowerScheme</fct>
<fct gp="27" od="--" flag="1">PowerCreatePossibleSetting</fct>
<fct gp="27" od="--" flag="1">PowerCreateSetting</fct>
<fct gp="27" od="--" flag="1">PowerCustomizePlatformPowerSettings</fct>
<fct gp="27" od="--" flag="1">PowerDebugDifPowerPolicies</fct>
<fct gp="27" od="--" flag="1">PowerDebugDifSystemPowerPolicies</fct>
<fct gp="27" od="--" flag="1">PowerDebugDumpPowerPolicy</fct>
<fct gp="27" od="--" flag="1">PowerDebugDumpPowerScheme</fct>
<fct gp="27" od="--" flag="1">PowerDebugDumpSystemPowerCapabilities</fct>
<fct gp="27" od="--" flag="1">PowerDebugDumpSystemPowerPolicy</fct>
<fct gp="27" od="--" flag="1">PowerDeleteScheme</fct>
<fct gp="27" od="--" flag="1">PowerDeterminePlatformRole</fct>
<fct gp="27" od="--" flag="1">PowerDuplicateScheme</fct>
<fct gp="27" od="--" flag="1">PowerEnumerate</fct>
<fct gp="27" od="--" flag="1">PowerGetActiveScheme</fct>
<fct gp="27" od="--" flag="1">PowerImportPowerScheme</fct>
<fct gp="27" od="--" flag="1">PowerOpenSystemPowerKey</fct>
<fct gp="27" od="--" flag="1">PowerOpenUserPowerKey</fct>
<fct gp="27" od="--" flag="1">PowerPolicyToGUIDFormat</fct>
<fct gp="27" od="--" flag="1">PowerReadACDefaultIndex</fct>
<fct gp="27" od="--" flag="1">PowerReadACValue</fct>
<fct gp="27" od="--" flag="1">PowerReadACValueIndex</fct>
<fct gp="27" od="--" flag="1">PowerReadDCDefaultIndex</fct>
<fct gp="27" od="--" flag="1">PowerReadDCValue</fct>
<fct gp="27" od="--" flag="1">PowerReadDCValueIndex</fct>
<fct gp="27" od="--" flag="1">PowerReadDescription</fct>
<fct gp="27" od="--" flag="1">PowerReadFriendlyName</fct>
<fct gp="27" od="--" flag="1">PowerReadIconResourceSpecifier</fct>
<fct gp="27" od="--" flag="1">PowerReadPossibleDescription</fct>
<fct gp="27" od="--" flag="1">PowerReadPossibleFriendlyName</fct>
<fct gp="27" od="--" flag="1">PowerReadPossibleValue</fct>
<fct gp="27" od="--" flag="1">PowerReadSecurityDescriptor</fct>
<fct gp="27" od="--" flag="1">PowerReadSettingAttributes</fct>
<fct gp="27" od="--" flag="1">PowerReadValueIncrement</fct>
<fct gp="27" od="--" flag="1">PowerReadValueMax</fct>
<fct gp="27" od="--" flag="1">PowerReadValueMin</fct>
<fct gp="27" od="--" flag="1">PowerReadValueUnitsSpecifier</fct>
<fct gp="27" od="--" flag="1">PowerRemovePowerSetting</fct>
<fct gp="27" od="--" flag="1">PowerReplaceDefaultPowerSchemes</fct>
<fct gp="27" od="--" flag="1">PowerRestoreDefaultPowerSchemes</fct>
<fct gp="27" od="--" flag="1">PowerRestoreIndividualDefaultPowerScheme</fct>
<fct gp="27" od="--" flag="1">PowerSetActiveScheme</fct>
<fct gp="27" od="--" flag="1">PowerSetAlsBrightnessOffset</fct>
<fct gp="27" od="--" flag="1">PowerSettingAccessCheck</fct>
<fct gp="27" od="--" flag="1">PowerSettingRegisterNotification</fct>
<fct gp="27" od="--" flag="1">PowerSettingUnregisterNotification</fct>
<fct gp="27" od="--" flag="1">PowerWriteACDefaultIndex</fct>
<fct gp="27" od="--" flag="1">PowerWriteACValueIndex</fct>
<fct gp="27" od="--" flag="1">PowerWriteDCDefaultIndex</fct>
<fct gp="27" od="--" flag="1">PowerWriteDCValueIndex</fct>
<fct gp="27" od="--" flag="1">PowerWriteDescription</fct>
<fct gp="27" od="--" flag="1">PowerWriteFriendlyName</fct>
<fct gp="27" od="--" flag="1">PowerWriteIconResourceSpecifier</fct>
<fct gp="27" od="--" flag="1">PowerWritePossibleDescription</fct>
<fct gp="27" od="--" flag="1">PowerWritePossibleFriendlyName</fct>
<fct gp="27" od="--" flag="1">PowerWritePossibleValue</fct>
<fct gp="27" od="--" flag="1">PowerWriteSecurityDescriptor</fct>
<fct gp="27" od="--" flag="1">PowerWriteSettingAttributes</fct>
<fct gp="27" od="--" flag="1">PowerWriteValueIncrement</fct>
<fct gp="27" od="--" flag="1">PowerWriteValueMax</fct>
<fct gp="27" od="--" flag="1">PowerWriteValueMin</fct>
<fct gp="27" od="--" flag="1">PowerWriteValueUnitsSpecifier</fct>
<fct gp="27" od="--" flag="1">ReadGlobalPwrPolicy</fct>
<fct gp="27" od="--" flag="1">ReadProcessorPwrScheme</fct>
<fct gp="27" od="--" flag="1">ReadPwrScheme</fct>
<fct gp="27" od="--" flag="1">SetActivePwrScheme</fct>
<fct gp="27" od="--" flag="1">SetSuspendState</fct>
<fct gp="27" od="--" flag="1">ValidatePowerPolicies</fct>
<fct gp="27" od="--" flag="1">WriteGlobalPwrPolicy</fct>
<fct gp="27" od="--" flag="1">WriteProcessorPwrScheme</fct>
<fct gp="27" od="--" flag="1">WritePwrScheme</fct>
</fcts>
</lib>
<lib name="ntoskrnl.exe" flag="0" gp="--" desc="NT Kernel and System">
<fcts>
<fct gp="--" od="--" flag="0" cb="1">CmRegisterCallback</fct>
<fct gp="--" od="--" flag="0" cb="1">CmUnRegisterCallback</fct>
<fct gp="--" od="--" flag="0" cb="1">KeDeregisterBugCheckReasonCallback</fct>
<fct gp="--" od="--" flag="0" cb="1">KeRegisterBugCheckReasonCallback</fct>
<fct gp="00" od="--" flag="0" cb="1">KeSetTimer</fct>
<fct gp="07" od="--" flag="0">ExReleaseFastMutex</fct>
<fct gp="07" od="--" flag="0">ExAcquireFastMutex</fct>
<fct gp="30" od="--" flag="1">SePrivilegeCheck</fct>
<fct gp="00" od="--" flag="0">KeTickCount</fct>
<fct gp="07" od="--" flag="0">KeWaitForSingleObject</fct>
<fct gp="07" od="--" flag="0">KeWaitForMultipleObjects</fct>
<fct gp="07" od="--" flag="0">KeReleaseMutex</fct>
<fct gp="07" od="--" flag="0">KeWaitForMutexObject</fct>
<fct gp="07" od="--" flag="0">KeSetEvent</fct>
<fct gp="07" od="--" flag="0">KeReseetEvent</fct>
<fct gp="07" od="--" flag="0">KeInitializeMutex</fct>
<fct gp="07" od="--" flag="0">KeInitializeSemaphore</fct>
<fct gp="02" od="--" flag="1" ti="1055">KeStackAttachProcess</fct>
<fct gp="02" od="--" flag="0">KeUnstackDetachProcess</fct>
<fct gp="02" od="--" flag="0">KeDetachProcess</fct>
<fct gp="02" od="--" flag="0">KeInsertQueueApc</fct>
<fct gp="02" od="--" flag="0">KeGetCurrentThread</fct>
<fct gp="02" od="--" flag="0">KeDelayExecutionThread</fct>
<fct gp="--" od="--" flag="2">DbgPrint</fct>
<fct gp="16" od="--" flag="0">DbgPrintEx</fct>
<fct gp="02" od="--" flag="1">PsLookupProcessThreadByCid</fct>
<fct gp="21" od="--" flag="1">PsRemoveLoadImageNotifyRoutine</fct>
<fct gp="02" od="--" flag="1">PsRemoveCreateThreadNotifyRoutine</fct>
<fct gp="02" od="--" flag="1" ti="1057">PsGetCurrentProcessId</fct>
<fct gp="02" od="--" flag="1" ti="1057">PsGetProcessId</fct>
<fct gp="02" od="--" flag="1" ti="1057">PsGetProcessImageFileName</fct>
<fct gp="02" od="--" flag="1" ti="1057">PsCreateSystemThread</fct>
<fct gp="02" od="--" flag="1">PsSetLoadImageNotifyRoutine</fct>
<fct gp="02" od="--" flag="1">PsCreateSystemProcess</fct>
<fct gp="02" od="--" flag="1">PsGetThreadSessionId</fct>
<fct gp="02" od="--" flag="1">PsAssignImpersonationToken</fct>
<fct gp="02" od="--" flag="1">PsSetCreateProcessNotifyRoutine</fct>
<fct gp="02" od="--" flag="1" ti="1106">CreateProcessNotify</fct>
<fct gp="02" od="--" flag="1">PsTerminateSystemThread</fct>
<fct gp="02" od="--" flag="1">PsGetCurrentThreadId</fct>
<fct gp="02" od="--" flag="1">PsGetProcessSectionBaseAddress</fct>
<fct gp="02" od="--" flag="1">PsGetProcessSessionId</fct>
<fct gp="02" od="--" flag="1">PsProcessType</fct>
<fct gp="02" od="--" flag="1">PsLookupProcessByProcess</fct>
<fct gp="02" od="--" flag="1">PsLookupProcessByProcessId</fct>
<fct gp="--" od="--" flag="1">PsChargePoolQuota</fct>
<fct gp="30" od="--" flag="1" ti="1134">PsDereferenceImpersonationToken</fct>
<fct gp="30" od="--" flag="1" ti="1134">PsDereferencePrimaryToken</fct>
<fct gp="--" od="--" flag="1">PsIsDiskCountersEnabled</fct>
<fct gp="02" od="--" flag="1">PsGetProcessExitTime</fct>
<fct gp="30" od="--" flag="1">PsImpersonateClient</fct>
<fct gp="02" od="--" flag="1">PsIsThreadTerminating</fct>
<fct gp="02" od="--" flag="1">PsIsProtectedProcess</fct>
<fct gp="02" od="--" flag="1">PsAssignProcessToJobObject</fct>
<fct gp="02" od="--" flag="1">PsSuspendProcess</fct>
<fct gp="02" od="--" flag="1">PsResumeProcess</fct>
<fct gp="02" od="--" flag="1">PsSetCreateThreadNotifyRoutine</fct>
<fct gp="02" od="--" flag="1">PsSetCreateProcessNotifyRoutineEx</fct>
<fct gp="02" od="--" flag="1">PsLookupThreadByThreadId</fct>
<fct gp="30" od="--" flag="1" ti="1134">PsReferenceImpersonationToken</fct>
<fct gp="30" od="--" flag="1" ti="1134">PsReferencePrimaryToken</fct>
<fct gp="02" od="--" flag="1" ti="1134">PsGetCurrentThreadStackBase</fct>
<fct gp="02" od="--" flag="1" ti="1134">PsGetCurrentThreadStackLimit</fct>
<fct gp="02" od="--" flag="1" ti="1134">PsGetCurrentThread</fct>
<fct gp="--" od="--" flag="1">PsReturnPoolQuota</fct>
<fct gp="30" od="--" flag="1">PsRevertToSelf</fct>
<fct gp="--" od="--" flag="1">PsUpdateDiskCounters</fct>
<fct gp="19" od="--" flag="1">PsInitialSystemProcess</fct>
<fct gp="30" od="--" flag="1" ti="1543">KeServiceDescriptorTable</fct>
<fct gp="30" od="--" flag="1">KeAddSystemServiceTable</fct>
<fct gp="32" od="--" flag="1">KeBugCheck</fct>
<fct gp="32" od="--" flag="1">KeBugCheckEx</fct>
<fct gp="14" od="--" flag="0">KdDebuggerNotPresent</fct>
<fct gp="02" od="--" flag="1" ti="1057">IoGetCurrentProcess</fct>
<fct gp="--" od="--" flag="1">IoRegisterBootDriverReinitialization</fct>
<fct gp="--" od="--" flag="1">IoAllocateAdapterChannel</fct>
<fct gp="--" od="--" flag="1">IoAttachDeviceByPointer</fct>
<fct gp="--" od="--" flag="0">IoFlushAdapterBuffers</fct>
<fct gp="--" od="--" flag="0">IoFreeAdapterChannel</fct>
<fct gp="--" od="--" flag="0">IoFreeMapRegisters</fct>
<fct gp="--" od="--" flag="0">IoMapTransfer</fct>
<fct gp="--" od="--" flag="0">IoQueryDeviceDescription</fct>
<fct gp="--" od="--" flag="0">IoReportResourceUsage</fct>
<fct gp="--" od="--" flag="0">IoUnregisterPlugPlayNotification</fct>
<fct gp="15" od="--" flag="1">RtlGetIntegerAtom</fct>
<fct gp="05" od="--" flag="1">RtlCompareMemory</fct>
<fct gp="16" od="--" flag="1">RtlImageNtHeader</fct>
<fct gp="--" od="--" flag="1">RtlImageRvaToVa</fct>
<fct gp="16" od="--" flag="1">RtlImageDirectoryEntryToData</fct>
<fct gp="30" od="--" flag="1" ti="1134">ZwQueryInformationToken</fct>
<fct gp="01" od="--" flag="1">ZwEnumerateKey</fct>
<fct gp="01" od="--" flag="1" ti="1112">ZwFlushKey</fct>
<fct gp="02" od="--" flag="1" ti="1055">ZwOpenProcess</fct>
<fct gp="30" od="--" flag="1" ti="1134">ZwOpenProcessToken</fct>
<fct gp="06" od="--" flag="0">ZwCreateFile</fct>
<fct gp="06" od="--" flag="1">ZwWriteFile</fct>
<fct gp="06" od="--" flag="0">ZwReadFile</fct>
<fct gp="06" od="--" flag="0">ZwOpenFile</fct>
<fct gp="06" od="--" flag="1" ti="1485">ZwDeleteFile</fct>
<fct gp="07" od="--" flag="0">ZwWaitForSingleObject</fct>
<fct gp="21" od="--" flag="0">ZwUnloadDriver</fct>
</fcts>
</lib>
<lib name="setupapi.dll" flag="0" gp="26" desc="Windows Setup API">
<fcts>
<fct gp="26" od="--" flag="0">SetupCommitFileQueue</fct>
</fcts>
</lib>
<lib name="user32.dll" flag="0" gp="--" desc="Multi-User Windows USER API Client Library">
<fcts>
<fct gp="27" od="--" flag="0">ShutdownBlockReasonCreate</fct>
<fct gp="27" od="--" flag="0">ShutdownBlockReasonDestroy</fct>
<fct gp="27" od="--" flag="0">ShutdownBlockReasonQuery</fct>
<fct gp="30" od="--" flag="0">UserHandleGrantAccess</fct>
<fct gp="14" od="--" flag="1">RegisterMessagePumpHook</fct>
<fct gp="02" od="--" flag="0">EnumWindProc</fct>
<fct gp="--" od="--" flag="0" cb="1">EnumProps</fct>
<fct gp="--" od="--" flag="0" cb="1">EnumPropsEx</fct>
<fct gp="00" od="--" flag="0" cb="1">SetTimer</fct>
<fct gp="02" od="--" flag="0">EnumChildWindProc</fct>
<fct gp="14" od="--" flag="0">SetCapture</fct>
<fct gp="14" od="--" flag="0">ReleaseCapture</fct>
<fct gp="19" od="--" flag="0">GetSystemMetrics</fct>
<fct gp="11" od="--" flag="0">LoadCursorFromFile</fct>
<fct gp="11" od="--" flag="0">LoadCursor</fct>
<fct gp="02" od="--" flag="1">IsHungAppWindow</fct>
<fct gp="02" od="--" flag="1">IsGUIThread</fct>
<fct gp="11" od="--" flag="1">PrivateExtractIcons</fct>
<fct gp="02" od="--" flag="1">AllowForegroundActivation</fct>
<fct gp="24" od="--" flag="0">GetCursorPos</fct>
<fct gp="24" od="--" flag="0">SetCursorPos</fct>
<fct gp="24" od="--" flag="1">ChangeDisplaySettings</fct>
<fct gp="24" od="--" flag="1">ChangeDisplaySettingsEx</fct>
<fct gp="12" od="--" flag="0">RegisterTouchWindow</fct>
<fct gp="12" od="--" flag="0">UnregisterTouchWindow</fct>
<fct gp="12" od="--" flag="0">IsWindowEnabled</fct>
<fct gp="22" od="--" flag="0">ActivateKeyboardLayout</fct>
<fct gp="12" od="--" flag="0" ti="1055">GetWindowLong</fct>
<fct gp="12" od="--" flag="0" ti="1055">GetWindowLongPtr</fct>
<fct gp="12" od="--" flag="0" ti="1010">GetWindowText</fct>
<fct gp="--" od="--" flag="0">VRipOutput</fct>
<fct gp="--" od="--" flag="0">UserRegisterWowHandlers</fct>
<fct gp="22" od="--" flag="1" ti="1056">VkKeyScanEx</fct>
<fct gp="22" od="--" flag="1" ti="1056">MapVirtualKeyEx</fct>
<fct gp="22" od="--" flag="1">GetLastInputInfo</fct>
<fct gp="--" od="--" flag="1">SystemParametersInfo</fct>
<fct gp="30" od="--" flag="0">RegisterLogonProcess</fct>
<fct gp="--" od="--" flag="0">SetDeskWallpaper</fct>
<fct gp="--" od="--" flag="0">SetProgmanWindow</fct>
<fct gp="30" od="--" flag="0">SetLogonNotifyWindow</fct>
<fct gp="--" od="--" flag="0">SetTaskmanWindow</fct>
<fct gp="--" od="--" flag="0">SendIMEMessageEx</fct>
<fct gp="--" od="--" flag="0">SendIMEMessage</fct>
<fct gp="15" od="--" flag="1" ti="1115">SetClipboardViewer</fct>
<fct gp="--" od="--" flag="1">KillSystemTimer</fct>
<fct gp="--" od="--" flag="1">SetWindowStationUser</fct>
<fct gp="--" od="--" flag="1">GetReasonTitleFromReasonCode</fct>
<fct gp="--" od="--" flag="1">ReasonCodeNeedsBugID</fct>
<fct gp="--" od="--" flag="1">RecordShutdownReason</fct>
<fct gp="--" od="--" flag="1">GetTaskmanWindow</fct>
<fct gp="--" od="--" flag="1">RegisterTasklist</fct>
<fct gp="--" od="--" flag="1">RegisterSystemThread</fct>
<fct gp="--" od="--" flag="1">SetShellWindowEx</fct>
<fct gp="--" od="--" flag="1">GetProgmanWindow</fct>
<fct gp="24" od="--" flag="1">UnlockWindowStation</fct>
<fct gp="24" od="--" flag="1">GetWinStationInfo</fct>
<fct gp="--" od="--" flag="1">GetAppCompatFlags</fct>
<fct gp="--" od="--" flag="1">GetAppCompatFlags2</fct>
<fct gp="00" od="--" flag="0">KillTimer</fct>
<fct gp="02" od="--" flag="1">ClientThreadSetup</fct>
<fct gp="--" od="--" flag="1">AllowForegroundActivation</fct>
<fct gp="--" od="--" flag="1">GetInternalWindowPos</fct>
<fct gp="24" od="--" flag="1">LockWindowStation</fct>
<fct gp="--" od="--" flag="1" ti="1055">QuerySendMessage</fct>
<fct gp="14" od="--" flag="1">OemKeyScan</fct>
<fct gp="14" od="--" flag="1">mouse_event</fct>
<fct gp="12" od="--" flag="1">AllowSetForegroundWindow</fct>
<fct gp="12" od="--" flag="0">DispatchMessage</fct>
<fct gp="12" od="--" flag="0">TranslateMessage</fct>
<fct gp="12" od="--" flag="0">GetAncestor</fct>
<fct gp="02" od="--" flag="1">GetWindowModuleFileName</fct>
<fct gp="12" od="--" flag="0">GetClassLong</fct>
<fct gp="02" od="--" flag="1">GetGuiResources</fct>
<fct gp="14" od="--" flag="1">GetRegisteredRawInputDevices</fct>
<fct gp="14" od="--" flag="1">GetRawInputDeviceInfo</fct>
<fct gp="14" od="--" flag="1">GetRawInputDeviceList</fct>
<fct gp="24" od="--" flag="1">OpenWindowStation</fct>
<fct gp="14" od="--" flag="1" ti="1179">DeregisterShellHookWindow</fct>
<fct gp="14" od="--" flag="1" ti="1179">SetWinEventHook</fct>
<fct gp="14" od="--" flag="1" ti="1179">SetWindowsHook</fct>
<fct gp="14" od="--" flag="1" ti="1179">SetWindowsHookEx</fct>
<fct gp="14" od="--" flag="1" ti="1179">SetWindowsHookW</fct>
<fct gp="14" od="--" flag="1" cb="1" ti="1179" hint="20">LowLevelKeyboardProc</fct>
<fct gp="14" od="--" flag="1" cb="1" ti="1179" hint="20">_LowLevelKeyboardProc@12</fct>
<fct gp="22" od="--" flag="1" ti="1056">RegisterRawInputDevices</fct>
<fct gp="22" od="--" flag="1">GetNumberOfConsoleMouseButtons</fct>
<fct gp="22" od="--" flag="1" ti="1056">GetRawInputData</fct>
<fct gp="14" od="--" flag="1">NotifyWinEvent</fct>
<fct gp="14" od="--" flag="1" ti="1179">IsWinEventHookInstalled</fct>
<fct gp="12" od="--" flag="0">SwitchToThisWindow</fct>
<fct gp="12" od="--" flag="0">SetParent</fct>
<fct gp="11" od="--" flag="1">CopyImage</fct>
<fct gp="14" od="--" flag="0">CallMsgFilter</fct>
<fct gp="14" od="--" flag="1" ti="1179">CallNextHookEx</fct>
<fct gp="15" od="--" flag="1">DdeGetLastError</fct>
<fct gp="15" od="--" flag="1">DdeFreeStringHandle</fct>
<fct gp="15" od="--" flag="0">DdeQueryConvInfo</fct>
<fct gp="15" od="--" flag="1">DdeQueryString</fct>
<fct gp="15" od="--" flag="1">DdeCreateStringHandle</fct>
<fct gp="15" od="--" flag="1">DdeCreateDataHandle</fct>
<fct gp="15" od="--" flag="1">DdePostAdvise</fct>
<fct gp="15" od="--" flag="1">DdeGetData</fct>
<fct gp="15" od="--" flag="1">DdeFreeDataHandle</fct>
<fct gp="15" od="--" flag="1">DdeClientTransaction</fct>
<fct gp="15" od="--" flag="1">DdeDisconnect</fct>
<fct gp="15" od="--" flag="1">DdeConnect</fct>
<fct gp="15" od="--" flag="1">DdeNameService</fct>
<fct gp="15" od="--" flag="1">DdeUninitialize</fct>
<fct gp="15" od="--" flag="1">DdeInitialize</fct>
<fct gp="15" od="--" flag="1">DdeQueryNextServer</fct>
<fct gp="19" od="--" flag="1">EnumDisplayDevices</fct>
<fct gp="12" od="--" flag="1" cb="1">EnumDisplayMonitors</fct>
<fct gp="17" od="--" flag="0">ExitWindowsEx</fct>
<fct gp="14" od="--" flag="1">RegisterDeviceNotification</fct>
<fct gp="14" od="--" flag="1" ti="1179">RegisterUserApiHook</fct>
<fct gp="14" od="--" flag="1" ti="1179">RegisterShellHookWindow</fct>
<fct gp="12" od="--" flag="0" ti="1055">SetWindowLong</fct>
<fct gp="12" od="--" flag="0" ti="1055">SetWindowLongPtr</fct>
<fct gp="12" od="--" flag="0">CloseWindow</fct>
<fct gp="12" od="--" flag="0">SetForegroundWindow</fct>
<fct gp="16" od="--" flag="1">SetDebugErrorLevel</fct>
<fct gp="14" od="--" flag="1" ti="1179">UnhookWinEvent</fct>
<fct gp="14" od="--" flag="1" ti="1179">UnhookWindowsHook</fct>
<fct gp="14" od="--" flag="1" ti="1179">UnhookWindowsHookEx</fct>
<fct gp="14" od="--" flag="1" ti="1179">UnregisterUserApiHook</fct>
<fct gp="14" od="--" flag="1">UnregisterDeviceNotification</fct>
<fct gp="14" od="--" flag="1">UnregisterPowerSettingNotification</fct>
<fct gp="14" od="--" flag="1" ti="1179">UnregisterMessagePumpHook</fct>
<fct gp="22" od="--" flag="0">SwapMouseButton</fct>
<fct gp="22" od="--" flag="1">VkKeyScan</fct>
</fcts>
</lib>
<lib name="linkinfo.dll" flag="1" gp="29" desc="Windows Volume Tracking Library" ti="1006">
<fcts>
<fct gp="29" od="--" flag="1">CreateLinkInfo</fct>
<fct gp="29" od="--" flag="1">DestroyLinkInfo</fct>
<fct gp="29" od="--" flag="1">DisconnectLinkInfo</fct>
<fct gp="19" od="--" flag="1">GetCanonicalPathInfo</fct>
<fct gp="19" od="--" flag="1">GetLinkInfoData</fct>
<fct gp="29" od="--" flag="1">ResolveLinkInfo</fct>
<fct gp="29" od="--" flag="1">CompareLinkInfoVolumes</fct>
<fct gp="29" od="--" flag="1">CompareLinkInfoReferents</fct>
<fct gp="29" od="--" flag="1">IsValidLinkInfo</fct>
</fcts>
</lib>
<lib name="credui.dll" flag="1" gp="04" desc="Credential Manager User Interface Library">
<fcts>
<fct gp="04" od="--" flag="1">CredUnPackAuthenticationBuffer</fct>
<fct gp="04" od="--" flag="1">CredUIPromptForCredentials</fct>
<fct gp="04" od="--" flag="1">CredUICmdLinePromptForCredentials</fct>
</fcts>
</lib>
<lib name="gina.dll" flag="1" gp="30">
<fcts>
<fct gp="30" od="--" flag="1">WlxActivateUserShell</fct>
<fct gp="30" od="--" flag="1">WlxDisconnectNotify</fct>
<fct gp="30" od="--" flag="1">WlxDisplayLockedNotice</fct>
<fct gp="30" od="--" flag="1">WlxDisplaySASNotice</fct>
<fct gp="30" od="--" flag="1">WlxDisplayStatusMessage</fct>
<fct gp="30" od="--" flag="1">WlxGetConsoleSwitchCredentials</fct>
<fct gp="30" od="--" flag="1">WlxGetStatusMessage</fct>
<fct gp="30" od="--" flag="1">WlxInitialize</fct>
<fct gp="30" od="--" flag="1">WlxIsLockOk</fct>
<fct gp="30" od="--" flag="1">WlxIsLogoffOk</fct>
<fct gp="30" od="--" flag="1">WlxLoggedOnSAS</fct>
<fct gp="30" od="--" flag="1">WlxLoggedOutSAS</fct>
<fct gp="30" od="--" flag="1">WlxLogoff</fct>
<fct gp="30" od="--" flag="1">WlxNegotiate</fct>
<fct gp="30" od="--" flag="1">WlxNetworkProviderLoad</fct>
<fct gp="30" od="--" flag="1">WlxReconnectNotify</fct>
<fct gp="30" od="--" flag="1">WlxRemoveStatusMessage</fct>
<fct gp="30" od="--" flag="1">WlxScreenSaverNotify</fct>
<fct gp="30" od="--" flag="1">WlxShutdown</fct>
<fct gp="30" od="--" flag="1">WlxStartApplication</fct>
<fct gp="30" od="--" flag="1">WlxWkstaLockedSAS</fct>
</fcts>
</lib>
<lib name="version.dll" flag="0" gp="--" desc="Version Checking and File Installation Library">
<fcts>
<fct gp="19" od="--" flag="0">GetFileVersionInfoSize</fct>
<fct gp="19" od="--" flag="0">GetFileVersionInfo</fct>
<fct gp="26" od="--" flag="1">VerInstallFile</fct>
</fcts>
</lib>
<lib name="mspdb80.dll" flag="1" gp="16" desc="Microsoft Program Database Library">
<fcts>
<fct gp="16" od="--" flag="0">PDBOpenValidate4</fct>
<fct gp="16" od="--" flag="0">PDBOpenValidate5</fct>
</fcts>
</lib>
<lib name="msvcrt.dll" flag="0" gp="--" desc="Microsoft C Runtime Library">
<fcts>
<fct gp="--" od="--" flag="0">_invoke_watson</fct>
<fct gp="05" od="--" flag="0">malloc</fct>
<fct gp="05" od="--" flag="0">memset</fct>
<fct gp="--" od="--" flag="0">_crt_debugger_hook</fct>
<fct gp="--" od="--" flag="0">_loaddll</fct>
<fct gp="--" od="--" flag="0">_getdllprocaddr</fct>
<fct gp="--" od="--" flag="0">_unloaddll</fct>
<fct gp="--" od="--" flag="0">_acmdln</fct>
<fct gp="--" od="--" flag="0">_tcmdln</fct>
<fct gp="--" od="--" flag="0">_wcmdln</fct>
<fct gp="--" od="--" flag="0">_amblksiz</fct>
<fct gp="--" od="--" flag="0">_daylight</fct>
<fct gp="--" od="--" flag="0">_dstbias</fct>
<fct gp="--" od="--" flag="0">_timezone</fct>
<fct gp="--" od="--" flag="0">_tzname</fct>
<fct gp="--" od="--" flag="0">errno</fct>
<fct gp="--" od="--" flag="0">_doserrno</fct>
<fct gp="--" od="--" flag="0">_sys_errlist</fct>
<fct gp="--" od="--" flag="0">_sys_nerr</fct>
<fct gp="--" od="--" flag="0">_environ</fct>
<fct gp="--" od="--" flag="0">_wenviron</fct>
<fct gp="--" od="--" flag="0">_fileinfo</fct>
<fct gp="--" od="--" flag="0">_fmode</fct>
<fct gp="--" od="--" flag="0">_iob</fct>
<fct gp="--" od="--" flag="0">_wcsrev</fct>
<fct gp="--" od="--" flag="0">getenv</fct>
<fct gp="--" od="--" flag="0">_resetstkoflw</fct>
<fct gp="--" od="--" flag="1">_wgetenv</fct>
<fct gp="--" od="--" flag="1">_wexecve</fct>
<fct gp="--" od="--" flag="1">_execve</fct>
<fct gp="--" od="--" flag="1">_execlpe</fct>
<fct gp="--" od="--" flag="0">wvsprintf</fct>
<fct gp="--" od="--" flag="0">wvsprintf</fct>
<fct gp="--" od="--" flag="0">wvsprintf</fct>
<fct gp="--" od="--" flag="0">wvnsprintf</fct>
<fct gp="--" od="--" flag="0">wsprintf</fct>
<fct gp="--" od="--" flag="0">printf</fct>
<fct gp="--" od="--" flag="0">_printf_l</fct>
<fct gp="--" od="--" flag="0">wprintf</fct>
<fct gp="--" od="--" flag="0">_wprintf_l</fct>
<fct gp="--" od="--" flag="0">wscanf</fct>
<fct gp="--" od="--" flag="0">write</fct>
<fct gp="--" od="--" flag="0">wnsprintf</fct>
<fct gp="05" od="--" flag="0">wmemmove</fct>
<fct gp="05" od="--" flag="0">wmemcpy</fct>
<fct gp="--" od="--" flag="0">wctomb</fct>
<fct gp="--" od="--" flag="0">wcsupr</fct>
<fct gp="--" od="--" flag="0">wcstombs</fct>
<fct gp="--" od="--" flag="0">wcstok</fct>
<fct gp="--" od="--" flag="0">wcsset</fct>
<fct gp="--" od="--" flag="0">wcsrtombs</fct>
<fct gp="--" od="--" flag="0">wcsrev</fct>
<fct gp="--" od="--" flag="0">wcsnset</fct>
<fct gp="--" od="--" flag="0">wcsnicmp</fct>
<fct gp="--" od="--" flag="0">wcsncpy</fct>
<fct gp="--" od="--" flag="0">wcsncat_l</fct>
<fct gp="--" od="--" flag="0">wcsncat</fct>
<fct gp="--" od="--" flag="0">wcslwr</fct>
<fct gp="--" od="--" flag="0">wcslen</fct>
<fct gp="--" od="--" flag="0">wcsicoll</fct>
<fct gp="--" od="--" flag="0">wcsicmp</fct>
<fct gp="--" od="--" flag="0">wcsdup</fct>
<fct gp="--" od="--" flag="0">wcscpy</fct>
<fct gp="--" od="--" flag="0">wcscat</fct>
<fct gp="--" od="--" flag="0">wcrtomb</fct>
<fct gp="--" od="--" flag="0">wcrtomb</fct>
<fct gp="--" od="--" flag="0">vswprintf</fct>
<fct gp="--" od="--" flag="0">vsprintf</fct>
<fct gp="--" od="--" flag="0">vsnprintf</fct>
<fct gp="--" od="--" flag="0">unlink</fct>
<fct gp="--" od="--" flag="0">ungetch</fct>
<fct gp="--" od="--" flag="0">umask</fct>
<fct gp="--" od="--" flag="0">ultoa</fct>
<fct gp="--" od="--" flag="0">tzset</fct>
<fct gp="--" od="--" flag="0">toascii</fct>
<fct gp="--" od="--" flag="0">tmpfile</fct>
<fct gp="--" od="--" flag="0">tempnam</fct>
<fct gp="--" od="--" flag="0">tell</fct>
<fct gp="--" od="--" flag="0">swscanf</fct>
<fct gp="--" od="--" flag="0">swprintf</fct>
<fct gp="--" od="--" flag="0">swab</fct>
<fct gp="--" od="--" flag="0">strupr</fct>
<fct gp="--" od="--" flag="0">strtok</fct>
<fct gp="--" od="--" flag="0">strtok</fct>
<fct gp="--" od="--" flag="0">strset</fct>
<fct gp="--" od="--" flag="0">strrev</fct>
<fct gp="--" od="--" flag="0">strnset</fct>
<fct gp="--" od="--" flag="0">strnicmp</fct>
<fct gp="--" od="--" flag="0">StrNCpy</fct>
<fct gp="--" od="--" flag="0">StrNCpy</fct>
<fct gp="--" od="--" flag="0">strncpy</fct>
<fct gp="--" od="--" flag="0">StrNCpy</fct>
<fct gp="--" od="--" flag="0">strncpy</fct>
<fct gp="--" od="--" flag="0">strncpy</fct>
<fct gp="--" od="--" flag="0">StrNCat</fct>
<fct gp="--" od="--" flag="0">strncat</fct>
<fct gp="--" od="--" flag="0">StrNCat</fct>
<fct gp="--" od="--" flag="0">strncat</fct>
<fct gp="--" od="--" flag="0">strncat</fct>
<fct gp="--" od="--" flag="0">strcat</fct>
<fct gp="--" od="--" flag="0">strlwr</fct>
<fct gp="--" od="--" flag="0">strlen</fct>
<fct gp="--" od="--" flag="0">StrLen</fct>
<fct gp="--" od="--" flag="0">stricmp</fct>
<fct gp="--" od="--" flag="0">strerrorv</fct>
<fct gp="--" od="--" flag="0">strdup</fct>
<fct gp="--" od="--" flag="0">StrCpy</fct>
<fct gp="--" od="--" flag="0">StrCpyN</fct>
<fct gp="--" od="--" flag="0">strcpyn</fct>
<fct gp="--" od="--" flag="0">StrCpy</fct>
<fct gp="--" od="--" flag="0">strcmpi</fct>
<fct gp="--" od="--" flag="0">StrCat</fct>
<fct gp="--" od="--" flag="0">StrCatN</fct>
<fct gp="--" od="--" flag="0">StrCatChainW</fct>
<fct gp="--" od="--" flag="0">StrCatBuff</fct>
<fct gp="--" od="--" flag="0">StrCat</fct>
<fct gp="--" od="--" flag="0">sscanf</fct>
<fct gp="--" od="--" flag="0">sprintf</fct>
<fct gp="--" od="--" flag="0">spawnvpe</fct>
<fct gp="--" od="--" flag="0">spawnvp</fct>
<fct gp="--" od="--" flag="0">spawnve</fct>
<fct gp="--" od="--" flag="0">spawnv</fct>
<fct gp="--" od="--" flag="0">spawnlpe</fct>
<fct gp="--" od="--" flag="0">spawnlp</fct>
<fct gp="--" od="--" flag="0">spawnle</fct>
<fct gp="--" od="--" flag="0">spawnl</fct>
<fct gp="--" od="--" flag="0">sopen</fct>
<fct gp="--" od="--" flag="0">snscanf</fct>
<fct gp="--" od="--" flag="0">snwscanf</fct>
<fct gp="--" od="--" flag="0">setmode</fct>
<fct gp="--" od="--" flag="0">setbuf</fct>
<fct gp="--" od="--" flag="0">scanf</fct>
<fct gp="--" od="--" flag="0">rmtmp</fct>
<fct gp="--" od="--" flag="0">rmdir</fct>
<fct gp="--" od="--" flag="0">read</fct>
<fct gp="--" od="--" flag="0">putw</fct>
<fct gp="--" od="--" flag="0">putenv</fct>
<fct gp="--" od="--" flag="0">putch</fct>
<fct gp="--" od="--" flag="0">outpw</fct>
<fct gp="--" od="--" flag="0">outp</fct>
<fct gp="--" od="--" flag="0">open</fct>
<fct gp="--" od="--" flag="0">OemToChar</fct>
<fct gp="--" od="--" flag="0">nsprintf</fct>
<fct gp="--" od="--" flag="0">mktemp</fct>
<fct gp="--" od="--" flag="0">mkdir</fct>
<fct gp="05" od="--" flag="0">memmove</fct>
<fct gp="--" od="--" flag="0">memicmp</fct>
<fct gp="05" od="--" flag="0">memcpy</fct>
<fct gp="05" od="--" flag="0">memcmp</fct>
<fct gp="--" od="--" flag="0">memccpy</fct>
<fct gp="--" od="--" flag="0">mbstowcs</fct>
<fct gp="--" od="--" flag="0">mbsrtowcs</fct>
<fct gp="--" od="--" flag="0">Makepath</fct>
<fct gp="--" od="--" flag="0">ltoa</fct>
<fct gp="--" od="--" flag="0">lstrncat</fct>
<fct gp="--" od="--" flag="0">lstrlen</fct>
<fct gp="--" od="--" flag="0">lstrcpy</fct>
<fct gp="--" od="--" flag="0">lstrcpyn</fct>
<fct gp="--" od="--" flag="0">lstrcpyn</fct>
<fct gp="--" od="--" flag="0">lstrcat</fct>
<fct gp="--" od="--" flag="0">lstrcatn</fct>
<fct gp="--" od="--" flag="0">lstrcatn</fct>
<fct gp="--" od="--" flag="0">lseek</fct>
<fct gp="--" od="--" flag="0">lsearch</fct>
<fct gp="--" od="--" flag="0">locking</fct>
<fct gp="--" od="--" flag="0">localtime</fct>
<fct gp="--" od="--" flag="0">lfind</fct>
<fct gp="--" od="--" flag="0">kbhit</fct>
<fct gp="--" od="--" flag="0">itoa</fct>
<fct gp="--" od="--" flag="0">iscsymf</fct>
<fct gp="--" od="--" flag="0">iscsym</fct>
<fct gp="05" od="--" flag="0">IsBadWritePtr</fct>
<fct gp="05" od="--" flag="0">IsBadStringPtr</fct>
<fct gp="05" od="--" flag="0">IsBadHugeWritePtr</fct>
<fct gp="05" od="--" flag="0">IsBadHugeReadPtr</fct>
<fct gp="05" od="--" flag="0">IsBadCodePtr</fct>
<fct gp="--" od="--" flag="0">isatty</fct>
<fct gp="--" od="--" flag="0">isascii</fct>
<fct gp="--" od="--" flag="0">inpw</fct>
<fct gp="--" od="--" flag="0">inp</fct>
<fct gp="--" od="--" flag="0">hypot</fct>
<fct gp="--" od="--" flag="0">gmtime</fct>
<fct gp="--" od="--" flag="0">getw</fct>
<fct gp="--" od="--" flag="0">gets</fct>
<fct gp="--" od="--" flag="0">getpid</fct>
<fct gp="--" od="--" flag="0">getenv</fct>
<fct gp="--" od="--" flag="0">getcwd</fct>
<fct gp="--" od="--" flag="0">getche</fct>
<fct gp="--" od="--" flag="0">_getch</fct>
<fct gp="--" od="--" flag="0">gcvt</fct>
<fct gp="--" od="--" flag="0">fwscanf</fct>
<fct gp="--" od="--" flag="0">fscanf</fct>
<fct gp="--" od="--" flag="0">freopen</fct>
<fct gp="--" od="--" flag="0">fputchar</fct>
<fct gp="06" od="--" flag="0">fputc</fct>
<fct gp="06" od="--" flag="0">fopen</fct>
<fct gp="06" od="--" flag="0">fseek</fct>
<fct gp="06" od="--" flag="0">fflush</fct>
<fct gp="06" od="--" flag="0">fread</fct>
<fct gp="06" od="--" flag="0">fwrite</fct>
<fct gp="06" od="--" flag="0">fprintf</fct>
<fct gp="--" od="--" flag="0">flushall</fct>
<fct gp="--" od="--" flag="0">fileno</fct>
<fct gp="--" od="--" flag="0">filelength</fct>
<fct gp="--" od="--" flag="0">fgetchar</fct>
<fct gp="--" od="--" flag="0">fdopen</fct>
<fct gp="--" od="--" flag="0">fcvt</fct>
<fct gp="06" od="--" flag="0">_findfirst</fct>
<fct gp="06" od="--" flag="0">_findfirst32</fct>
<fct gp="06" od="--" flag="0">_findfirst64</fct>
<fct gp="06" od="--" flag="0">_findnext</fct>
<fct gp="06" od="--" flag="0">_findnext32</fct>
<fct gp="06" od="--" flag="0">_findnext64</fct>
<fct gp="06" od="--" flag="0">fclose</fct>
<fct gp="06" od="--" flag="0">ftell</fct>
<fct gp="--" od="--" flag="0">fcloseall</fct>
<fct gp="02" od="--" flag="0">_execl</fct>
<fct gp="02" od="--" flag="0">_execle</fct>
<fct gp="02" od="--" flag="0">_execlp</fct>
<fct gp="02" od="--" flag="0">_execlpe</fct>
<fct gp="02" od="--" flag="0">_execv</fct>
<fct gp="02" od="--" flag="0">_execve</fct>
<fct gp="02" od="--" flag="0">_execvp</fct>
<fct gp="02" od="--" flag="0">_execvpe</fct>
<fct gp="02" od="--" flag="0">_spawnl</fct>
<fct gp="02" od="--" flag="0">_spawnle</fct>
<fct gp="02" od="--" flag="0">_spawnlp</fct>
<fct gp="02" od="--" flag="0">_spawnlpe</fct>
<fct gp="02" od="--" flag="0">_spawnv</fct>
<fct gp="02" od="--" flag="0">_spawnve</fct>
<fct gp="02" od="--" flag="0">_spawnvp</fct>
<fct gp="02" od="--" flag="0">_spawnvpe</fct>
<fct gp="02" od="--" flag="0">_texecl</fct>
<fct gp="02" od="--" flag="0">_texecle</fct>
<fct gp="02" od="--" flag="0">_texeclp</fct>
<fct gp="02" od="--" flag="0">_texeclpe</fct>
<fct gp="02" od="--" flag="0">_texecv</fct>
<fct gp="02" od="--" flag="0">_texecve</fct>
<fct gp="02" od="--" flag="0">_texecvp</fct>
<fct gp="02" od="--" flag="0">_texecvpe</fct>
<fct gp="02" od="--" flag="0">_tspawnl</fct>
<fct gp="02" od="--" flag="0">_tspawnle</fct>
<fct gp="02" od="--" flag="0">_tspawnlp</fct>
<fct gp="02" od="--" flag="0">_tspawnlpe</fct>
<fct gp="02" od="--" flag="0">_tspawnv</fct>
<fct gp="02" od="--" flag="0">_tspawnve</fct>
<fct gp="02" od="--" flag="0">_tspawnvp</fct>
<fct gp="02" od="--" flag="0">_tspawnvpe</fct>
<fct gp="02" od="--" flag="0">_wexecl</fct>
<fct gp="02" od="--" flag="0">_wexecle</fct>
<fct gp="02" od="--" flag="0">_wexeclp</fct>
<fct gp="02" od="--" flag="0">_wexeclpe</fct>
<fct gp="02" od="--" flag="0">_wexecv</fct>
<fct gp="02" od="--" flag="0">_wexecvev</fct>
<fct gp="02" od="--" flag="0">_wexecvp</fct>
<fct gp="02" od="--" flag="0">_wexecvpe</fct>
<fct gp="02" od="--" flag="0">_wspawnl</fct>
<fct gp="02" od="--" flag="0">_wspawnle</fct>
<fct gp="02" od="--" flag="0">_wspawnlp</fct>
<fct gp="02" od="--" flag="0">_wspawnlpe</fct>
<fct gp="02" od="--" flag="0">_wspawnv</fct>
<fct gp="02" od="--" flag="0">_wspawnve</fct>
<fct gp="02" od="--" flag="0">_wspawnvp</fct>
<fct gp="02" od="--" flag="0">_wspawnvpe</fct>
<fct gp="--" od="--" flag="0">eof</fct>
<fct gp="--" od="--" flag="0">ecvt</fct>
<fct gp="--" od="--" flag="0">dup2</fct>
<fct gp="--" od="--" flag="0">dup</fct>
<fct gp="--" od="--" flag="0">cwait</fct>
<fct gp="--" od="--" flag="0">ctime</fct>
<fct gp="--" od="--" flag="0">cscanf</fct>
<fct gp="--" od="--" flag="0">creat</fct>
<fct gp="--" od="--" flag="0">cputs</fct>
<fct gp="--" od="--" flag="0">cprintf</fct>
<fct gp="--" od="--" flag="0">close</fct>
<fct gp="--" od="--" flag="0">chsize</fct>
<fct gp="--" od="--" flag="0">chmod</fct>
<fct gp="--" od="--" flag="0">chdir</fct>
<fct gp="--" od="--" flag="0">CharToOemW</fct>
<fct gp="--" od="--" flag="0">CharToOemBuff</fct>
<fct gp="--" od="--" flag="0">CharToOem</fct>
<fct gp="--" od="--" flag="0">vfprintf</fct>
<fct gp="--" od="--" flag="0">cgets</fct>
<fct gp="--" od="--" flag="0">cabs</fct>
<fct gp="--" od="--" flag="0">asctime</fct>
<fct gp="--" od="--" flag="0">alloca</fct>
<fct gp="--" od="--" flag="0">access</fct>
<fct gp="--" od="--" flag="0">_wstrtime</fct>
<fct gp="--" od="--" flag="0">_wstrdate</fct>
<fct gp="--" od="--" flag="0">_wsplitpath</fct>
<fct gp="--" od="--" flag="0">_wsopen</fct>
<fct gp="--" od="--" flag="0">_wsearchenv</fct>
<fct gp="--" od="--" flag="0">_wscanf_l</fct>
<fct gp="--" od="--" flag="0">_wscanf</fct>
<fct gp="--" od="--" flag="0">_wopen</fct>
<fct gp="--" od="--" flag="0">_wmktemp</fct>
<fct gp="--" od="--" flag="0">_wmakepath</fct>
<fct gp="--" od="--" flag="0">_wgetenv</fct>
<fct gp="--" od="--" flag="0">_wfreopen</fct>
<fct gp="06" od="--" flag="0">_wfopen</fct>
<fct gp="--" od="--" flag="0">_wctomb_l</fct>
<fct gp="--" od="--" flag="0">_wctime64</fct>
<fct gp="--" od="--" flag="0">_wctime32</fct>
<fct gp="--" od="--" flag="0">_wctime</fct>
<fct gp="--" od="--" flag="0">_wcsupr_l</fct>
<fct gp="--" od="--" flag="0">_wcsupr</fct>
<fct gp="--" od="--" flag="0">_wcstombs_l</fct>
<fct gp="--" od="--" flag="0">_wcstok_l</fct>
<fct gp="--" od="--" flag="0">_wcsset_l</fct>
<fct gp="--" od="--" flag="0">_wcsset</fct>
<fct gp="--" od="--" flag="0">_wcsnset_l</fct>
<fct gp="--" od="--" flag="0">_wcsnset</fct>
<fct gp="--" od="--" flag="0">_wcsncpy_l</fct>
<fct gp="--" od="--" flag="0">_wcsncpy</fct>
<fct gp="--" od="--" flag="0">_wcslwr_l</fct>
<fct gp="--" od="--" flag="0">_wcslwr</fct>
<fct gp="--" od="--" flag="0">_wcserror</fct>
<fct gp="--" od="--" flag="0">_wcreat</fct>
<fct gp="--" od="--" flag="0">_wasctime</fct>
<fct gp="--" od="--" flag="0">_vswprintf_l</fct>
<fct gp="--" od="--" flag="0">_vstprintf</fct>
<fct gp="--" od="--" flag="0">_vsprintf_l</fct>
<fct gp="--" od="--" flag="0">_vsnwprintf_l</fct>
<fct gp="--" od="--" flag="0">_vsntprintf</fct>
<fct gp="--" od="--" flag="0">_vsnprintf_l</fct>
<fct gp="--" od="--" flag="0">_vsnprintf</fct>
<fct gp="--" od="--" flag="0">_umask</fct>
<fct gp="--" od="--" flag="0">_ultow</fct>
<fct gp="--" od="--" flag="0">_ultot</fct>
<fct gp="--" od="--" flag="0">_ultoa</fct>
<fct gp="--" od="--" flag="0">_ui64tow</fct>
<fct gp="--" od="--" flag="0">_ui64tot</fct>
<fct gp="--" od="--" flag="0">_ui64toa</fct>
<fct gp="--" od="--" flag="0">_tsplitpath</fct>
<fct gp="--" od="--" flag="0">_tscanf</fct>
<fct gp="--" od="--" flag="0">_tmakepath</fct>
<fct gp="--" od="--" flag="0">_tcstok</fct>
<fct gp="--" od="--" flag="0">_tcsncpy</fct>
<fct gp="--" od="--" flag="0">_tcsncat</fct>
<fct gp="--" od="--" flag="0">_tcscpy</fct>
<fct gp="--" od="--" flag="0">_tcscat</fct>
<fct gp="--" od="--" flag="0">_tccpy</fct>
<fct gp="--" od="--" flag="0">_tccat</fct>
<fct gp="--" od="--" flag="0">_swscanf_l</fct>
<fct gp="--" od="--" flag="0">_swprintf_l</fct>
<fct gp="--" od="--" flag="0">_stscanf</fct>
<fct gp="--" od="--" flag="0">_strupr_l</fct>
<fct gp="--" od="--" flag="0">_strupr</fct>
<fct gp="--" od="--" flag="0">_strupr</fct>
<fct gp="--" od="--" flag="0">_strtok_l</fct>
<fct gp="--" od="--" flag="0">_strtime</fct>
<fct gp="--" od="--" flag="0">_strset_l</fct>
<fct gp="--" od="--" flag="0">_strset</fct>
<fct gp="--" od="--" flag="0">_strnset_l</fct>
<fct gp="--" od="--" flag="0">_strnset</fct>
<fct gp="--" od="--" flag="0">_strncpy_l</fct>
<fct gp="--" od="--" flag="0">_strncat_l</fct>
<fct gp="--" od="--" flag="0">_strlwr_l</fct>
<fct gp="--" od="--" flag="0">_strlwr</fct>
<fct gp="--" od="--" flag="0">_strerror</fct>
<fct gp="--" od="--" flag="0">_strdate</fct>
<fct gp="--" od="--" flag="0">_stprintf</fct>
<fct gp="--" od="--" flag="0">_sscanf_l</fct>
<fct gp="--" od="--" flag="0">_sprintf_l</fct>
<fct gp="--" od="--" flag="0">_splitpath</fct>
<fct gp="--" od="--" flag="0">_sopen</fct>
<fct gp="--" od="--" flag="0">_snwscanf_l</fct>
<fct gp="--" od="--" flag="0">_snwscanf</fct>
<fct gp="--" od="--" flag="0">_snwprintf_l</fct>
<fct gp="--" od="--" flag="0">_snwprintf</fct>
<fct gp="--" od="--" flag="0">_sntscanf</fct>
<fct gp="--" od="--" flag="0">_sntprintf</fct>
<fct gp="--" od="--" flag="0">_snscanf_l</fct>
<fct gp="--" od="--" flag="0">_snscanf</fct>
<fct gp="--" od="--" flag="0">_snprintf_l</fct>
<fct gp="--" od="--" flag="0">_snprintf</fct>
<fct gp="--" od="--" flag="0">_searchenv</fct>
<fct gp="--" od="--" flag="0">_scanf_l</fct>
<fct gp="--" od="--" flag="0">_open</fct>
<fct gp="--" od="--" flag="0">_mktemp</fct>
<fct gp="--" od="--" flag="0">_mbsupr_l</fct>
<fct gp="--" od="--" flag="0">_mbsupr</fct>
<fct gp="--" od="--" flag="0">_mbstrlen</fct>
<fct gp="--" od="--" flag="0">_mbstowcs_l</fct>
<fct gp="--" od="--" flag="0">_mbstowcs_l</fct>
<fct gp="--" od="--" flag="0">_mbstok_l</fct>
<fct gp="--" od="--" flag="0">_mbstok</fct>
<fct gp="--" od="--" flag="0">_mbsset_l</fct>
<fct gp="--" od="--" flag="0">_mbsset</fct>
<fct gp="--" od="--" flag="0">_mbsnset_l</fct>
<fct gp="--" od="--" flag="0">_mbsnset</fct>
<fct gp="--" od="--" flag="0">_mbsncpy_l</fct>
<fct gp="--" od="--" flag="0">_mbsncpy</fct>
<fct gp="--" od="--" flag="0">_mbsncat_l</fct>
<fct gp="--" od="--" flag="0">_mbsncat</fct>
<fct gp="--" od="--" flag="0">_mbsnbset_l</fct>
<fct gp="--" od="--" flag="0">_mbsnbset</fct>
<fct gp="--" od="--" flag="0">_mbsnbcpy_l</fct>
<fct gp="--" od="--" flag="0">_mbsnbcpy</fct>
<fct gp="--" od="--" flag="0">_mbsnbcat_l</fct>
<fct gp="--" od="--" flag="0">_mbsnbcat</fct>
<fct gp="--" od="--" flag="0">_mbslwr_l</fct>
<fct gp="--" od="--" flag="0">_mbslwr</fct>
<fct gp="--" od="--" flag="0">_mbslen</fct>
<fct gp="--" od="--" flag="0">_mbscpy</fct>
<fct gp="--" od="--" flag="0">_mbscat</fct>
<fct gp="--" od="--" flag="0">_mbccpy_l</fct>
<fct gp="--" od="--" flag="0">_mbccpy</fct>
<fct gp="--" od="--" flag="0">_mbccat</fct>
<fct gp="--" od="--" flag="0">_makepath</fct>
<fct gp="--" od="--" flag="0">_ltow</fct>
<fct gp="--" od="--" flag="0">_ltoa</fct>
<fct gp="--" od="--" flag="0">_localtime64</fct>
<fct gp="--" od="--" flag="0">_localtime32</fct>
<fct gp="--" od="--" flag="0">_itow</fct>
<fct gp="--" od="--" flag="0">_i64tow</fct>
<fct gp="--" od="--" flag="0">_i64toa</fct>
<fct gp="--" od="--" flag="0">_gmtime64</fct>
<fct gp="--" od="--" flag="0">_gmtime32</fct>
<fct gp="--" od="--" flag="0">_getws</fct>
<fct gp="--" od="--" flag="0">_gettws</fct>
<fct gp="--" od="--" flag="0">_getts</fct>
<fct gp="--" od="--" flag="0">_gcvt</fct>
<fct gp="--" od="--" flag="0">_fwscanf_l</fct>
<fct gp="--" od="--" flag="0">_fstrncpy</fct>
<fct gp="--" od="--" flag="0">_fstrncat</fct>
<fct gp="--" od="--" flag="0">_fscanf_l</fct>
<fct gp="--" od="--" flag="0">_fcvt</fct>
<fct gp="--" od="--" flag="0">_ecvt</fct>
<fct gp="--" od="--" flag="0">_cwscanf_l</fct>
<fct gp="--" od="--" flag="0">_cwscanf</fct>
<fct gp="--" od="--" flag="0">_ctime64</fct>
<fct gp="--" od="--" flag="0">_ctime32</fct>
<fct gp="--" od="--" flag="0">_cscanf_l</fct>
<fct gp="--" od="--" flag="0">_cscanf</fct>
<fct gp="--" od="--" flag="0">_creat</fct>
<fct gp="--" od="--" flag="0">_controlfp</fct>
<fct gp="--" od="--" flag="0">_controlfp</fct>
<fct gp="--" od="--" flag="0">__control87_2</fct>
<fct gp="--" od="--" flag="0">_chsize</fct>
<fct gp="--" od="--" flag="0">_cgetws</fct>
<fct gp="--" od="--" flag="0">_cgets</fct>
<fct gp="--" od="--" flag="0">_alloca</fct>
<fct gp="--" od="--" flag="0">__wcserror</fct>
<fct gp="--" od="--" flag="0">__vswprintf_l</fct>
<fct gp="--" od="--" flag="0">__swprintf_l</fct>
<fct gp="--" od="--" flag="0">_ftccat</fct>
<fct gp="--" od="--" flag="0">_ftccpy</fct>
<fct gp="--" od="--" flag="0">makepath</fct>
<fct gp="--" od="--" flag="0">ualstrcpyW</fct>
<fct gp="--" od="--" flag="0">_ftcscpy</fct>
<fct gp="--" od="--" flag="0">_ftcscat</fct>
<fct gp="--" od="--" flag="0">_fstrcpy</fct>
<fct gp="--" od="--" flag="0">_fstrcat</fct>
<fct gp="04" od="--" flag="1" ti="1027">srand</fct>
<fct gp="04" od="--" flag="1" ti="1027">rand</fct>
</fcts>
</lib>
<lib name="msasn1.dll" group="30" desc="ASN.1 Runtime APIs">
<fcts>
<fct gp="--" group="30" od="--" flag="1">ASN1BERDecNull</fct>
<fct gp="--" group="30" od="--" flag="1">ASN1BERDecEoid</fct>
<fct gp="--" group="30" od="--" flag="1">ASN1BERDecBool</fct>
<fct gp="--" group="30" od="--" flag="1">ASN1BERDecCheck</fct>
<fct gp="--" group="30" od="--" flag="1">ASN1BERDecCharString</fct>
</fcts>
</lib>
<lib name="ntshrui.dll" flag="1" gp="--" desc="Shell extensions for sharing">
<fcts>
<fct gp="--" od="--" flag="1">GetNetResourceFromLocalPath</fct>
<fct gp="--" od="--" flag="1">CanShareFolderW</fct>
</fcts>
</lib>
<lib name="dhcpcsvc.dll" flag="1" gp="03" desc="DHCP Client Service">
<fcts>
</fcts>
</lib>
<lib name="verifier.dll" flag="1" gp="03" desc="Standard application verifier provider">
<fcts>
<fct gp="--" od="--" flag="0" cb="1">VerifierEnumerateResource</fct>
</fcts>
</lib>
<lib name="imagehlp.dll" flag="1" gp="16" desc="Windows Image Helper">
<fcts>
<fct gp="16" od="--" flag="1">UpdateDebugInfoFileEx</fct>
<fct gp="16" od="--" flag="1">CheckSumMappedFile</fct>
<fct gp="16" od="--" flag="1">ImageNtHeader</fct>
<fct gp="16" od="--" flag="1">ImageRvaToVa</fct>
<fct gp="16" od="--" flag="1">StackWalk64</fct>
<fct gp="16" od="--" flag="1">SymCleanup</fct>
<fct gp="16" od="--" flag="1">SymFromAddr</fct>
<fct gp="16" od="--" flag="1">SymFunctionTableAccess64</fct>
<fct gp="16" od="--" flag="1">SymGetModuleInfo64</fct>
<fct gp="16" od="--" flag="1">SymGetModuleBase64</fct>
<fct gp="16" od="--" flag="1">SymGetModuleInfoW64</fct>
<fct gp="16" od="--" flag="1">SymGetOptions</fct>
<fct gp="16" od="--" flag="1">SymGetSymFromName</fct>
<fct gp="16" od="--" flag="1">SymInitialize</fct>
<fct gp="16" od="--" flag="1">SymLoadModule64</fct>
<fct gp="16" od="--" flag="1">SymRegisterCallback64</fct>
<fct gp="16" od="--" flag="1">SymSetOptions</fct>
<fct gp="16" od="--" flag="1">SymUnloadModule64</fct>
<fct gp="16" od="--" flag="1">SymAddSourceStream</fct>
<fct gp="30" od="--" flag="1" ti="1134">SymEnumSourceFileTokens</fct>
<fct gp="16" od="--" flag="1" cd="1">SymEnumSourceFiles</fct>
<fct gp="16" od="--" flag="1" ti="1134">SymGetSourceFileFromToken</fct>
<fct gp="16" od="--" flag="1" ti="1134">SymGetSourceFileToken</fct>
<fct gp="16" od="--" flag="1" ti="1134">SymGetSourceVarFromToken</fct>
<fct gp="16" od="--" flag="1">SymMatchString</fct>
<fct gp="16" od="--" flag="1">SymRegisterCallbackW64</fct>
<fct gp="16" od="--" flag="1">SymSetHomeDirectory</fct>
<fct gp="16" od="--" flag="1">SymSrvGetFileIndexes</fct>
<fct gp="16" od="--" flag="1">RemoveRelocations</fct>
<fct gp="16" od="--" flag="1">BindImage</fct>
<fct gp="16" od="--" flag="1">BindImageEx</fct>
<fct gp="16" od="--" flag="1">CheckSumMappedFile</fct>
<fct gp="16" od="--" flag="1" cb="1">EnumerateLoadedModules</fct>
<fct gp="16" od="--" flag="1" cb="1">EnumerateLoadedModules64</fct>
<fct gp="16" od="--" flag="1" cb="1">EnumerateLoadedModulesEx</fct>
<fct gp="16" od="--" flag="1">FindDebugInfoFile</fct>
<fct gp="16" od="--" flag="1">FindDebugInfoFileEx</fct>
<fct gp="16" od="--" flag="1">FindExecutableImage</fct>
<fct gp="16" od="--" flag="1">FindExecutableImageEx</fct>
<fct gp="16" od="--" flag="1">FindFileInPath</fct>
<fct gp="16" od="--" flag="1">FindFileInSearchPath</fct>
<fct gp="16" od="--" flag="1">GetImageConfigInformation</fct>
<fct gp="16" od="--" flag="1">GetImageUnusedHeaderBytes</fct>
<fct gp="16" od="--" flag="1">GetTimestampForLoadedLibrary</fct>
<fct gp="16" od="--" flag="1">ImageAddCertificate</fct>
<fct gp="16" od="--" flag="1">ImageDirectoryEntryToData</fct>
<fct gp="16" od="--" flag="1">ImageDirectoryEntryToDataEx</fct>
<fct gp="16" od="--" flag="1">ImageEnumerateCertificates</fct>
<fct gp="16" od="--" flag="1">ImageGetCertificateData</fct>
<fct gp="16" od="--" flag="1">ImageGetCertificateHeader</fct>
<fct gp="16" od="--" flag="0" cb="1">ImageGetDigestStream</fct>
<fct gp="16" od="--" flag="1">ImageLoad</fct>
<fct gp="16" od="--" flag="1">ImageRemoveCertificate</fct>
<fct gp="16" od="--" flag="1">ImageRvaToSection</fct>
<fct gp="16" od="--" flag="1">ImageUnload</fct>
<fct gp="16" od="--" flag="1">ImagehlpApiVersion</fct>
<fct gp="16" od="--" flag="1">ImagehlpApiVersionEx</fct>
<fct gp="16" od="--" flag="1">MakeSureDirectoryPathExists</fct>
<fct gp="16" od="--" flag="1">MapAndLoad</fct>
<fct gp="16" od="--" flag="1">MapDebugInformation</fct>
<fct gp="16" od="--" flag="1">MapFileAndCheckSum</fct>
<fct gp="16" od="--" flag="1">ReBaseImage64</fct>
<fct gp="16" od="--" flag="1">ReBaseImage</fct>
<fct gp="16" od="--" flag="1">RemovePrivateCvSymbolic</fct>
<fct gp="16" od="--" flag="1">RemovePrivateCvSymbolicEx</fct>
<fct gp="16" od="--" flag="1">SearchTreeForFile</fct>
<fct gp="16" od="--" flag="1">SetImageConfigInformation</fct>
<fct gp="16" od="--" flag="1">SplitSymbols</fct>
<fct gp="16" od="--" flag="1">StackWalk</fct>
<fct gp="16" od="--" flag="1">SymEnumSym</fct>
<fct gp="16" od="--" flag="1">TouchFileTimes</fct>
<fct gp="16" od="--" flag="1">UnDecorateSymbolName</fct>
<fct gp="16" od="--" flag="1">UnMapAndLoad</fct>
<fct gp="16" od="--" flag="1">UnmapDebugInformation</fct>
<fct gp="16" od="--" flag="1">UpdateDebugInfoFile</fct>
</fcts>
</lib>
<lib name="wsnmp32.dll" flag="1" gp="--">
<fcts>
<fct gp="--" od="100" flag="1">SnmpGetTranslateMode</fct>
<fct gp="--" od="101" flag="1">SnmpSetTranslateMode</fct>
<fct gp="--" od="102" flag="1">SnmpGetRetransmitMode</fct>
<fct gp="--" od="103" flag="1">SnmpSetRetransmitMode</fct>
<fct gp="--" od="104" flag="1">SnmpGetTimeout</fct>
<fct gp="--" od="105" flag="1">SnmpSetTimeout</fct>
<fct gp="--" od="106" flag="1">SnmpGetRetry</fct>
<fct gp="--" od="107" flag="1">SnmpSetRetry</fct>
<fct gp="--" od="108" flag="1">SnmpConveyAgentAddress</fct>
<fct gp="--" od="109" flag="1">SnmpSetAgentAddress</fct>
<fct gp="--" od="120" flag="1">SnmpGetVendorInfo</fct>
<fct gp="--" od="200" flag="1">SnmpStartup</fct>
<fct gp="--" od="201" flag="1">SnmpCleanup</fct>
<fct gp="--" od="202" flag="1">SnmpOpen</fct>
<fct gp="--" od="203" flag="1">SnmpClose</fct>
<fct gp="--" od="204" flag="1">SnmpSendMsg</fct>
<fct gp="--" od="205" flag="1">SnmpRecvMsg</fct>
<fct gp="--" od="206" flag="1">SnmpRegister</fct>
<fct gp="--" od="220" flag="0">SnmpCreateSession</fct>
<fct gp="--" od="221" flag="0">SnmpListen</fct>
<fct gp="--" od="222" flag="0">SnmpCancelMsg</fct>
<fct gp="--" od="291" flag="0">SnmpStartupEx</fct>
<fct gp="--" od="292" flag="0">SnmpCleanupEx</fct>
<fct gp="--" od="293" flag="0">SnmpListenEx</fct>
<fct gp="--" od="300" flag="0">SnmpStrToEntity</fct>
<fct gp="--" od="301" flag="0">SnmpEntityToStr</fct>
<fct gp="--" od="302" flag="0">SnmpFreeEntity</fct>
<fct gp="--" od="320" flag="0">SnmpSetPort</fct>
<fct gp="--" od="400" flag="0">SnmpStrToContext</fct>
<fct gp="--" od="401" flag="0">SnmpContextToStr</fct>
<fct gp="--" od="402" flag="0">SnmpFreeContext</fct>
<fct gp="--" od="500" flag="0">SnmpCreatePdu</fct>
<fct gp="--" od="501" flag="0">SnmpGetPduData</fct>
<fct gp="--" od="502" flag="0">SnmpSetPduData</fct>
<fct gp="--" od="503" flag="0">SnmpDuplicatePdu</fct>
<fct gp="--" od="504" flag="0">SnmpFreePdu</fct>
<fct gp="--" od="600" flag="0">SnmpCreateVbl</fct>
<fct gp="--" od="601" flag="0">SnmpDuplicateVbl</fct>
<fct gp="--" od="602" flag="0">SnmpFreeVbl</fct>
<fct gp="--" od="603" flag="0">SnmpCountVbl</fct>
<fct gp="--" od="604" flag="0">SnmpGetVb</fct>
<fct gp="--" od="605" flag="0">SnmpSetVb</fct>
<fct gp="--" od="606" flag="0">SnmpDeleteVb</fct>
<fct gp="--" od="900" flag="0">SnmpFreeDescriptor</fct>
<fct gp="--" od="901" flag="0">SnmpEncodeMsg</fct>
<fct gp="--" od="902" flag="0">SnmpDecodeMsg</fct>
<fct gp="--" od="903" flag="0">SnmpStrToOid</fct>
<fct gp="--" od="904" flag="0">SnmpOidToStr</fct>
<fct gp="--" od="905" flag="0">SnmpOidCopy</fct>
<fct gp="--" od="906" flag="0">SnmpOidCompare</fct>
<fct gp="--" od="999" flag="0">SnmpGetLastError</fct>
</fcts>
</lib>
<lib name="crypt32.dll" flag="1" gp="04" desc="Windows Crypto Library">
<fcts>
<fct gp="04" od="-" flag="1">PFXImportCertStore</fct>
<fct gp="04" od="-" flag="1">PFXExportCertStoreEx</fct>
<fct gp="04" od="-" flag="1">PFXIsPFXBlob</fct>
<fct gp="04" od="-" flag="1">CryptProtectMemory</fct>
<fct gp="04" od="-" flag="1">PFXVerifyPassword</fct>
<fct gp="04" od="-" flag="1">CryptDecodeObject</fct>
<fct gp="04" od="-" flag="1">CryptDecodeObjectEx</fct>
<fct gp="04" od="-" flag="1" ti="1132">CryptBinaryToString</fct>
<fct gp="04" od="-" flag="1" ti="1027">CryptStringToBinary</fct>
<fct gp="04" od="-" flag="1">CryptAcquireCertificatePrivateKey</fct>
<fct gp="04" od="-" flag="1">CryptImportPublicKeyInfoEx</fct>
<fct gp="04" od="-" flag="1">CryptUnprotectData</fct>
<fct gp="04" od="-" flag="1" cb="1">CryptEnumOIDInfo</fct>
<fct gp="04" od="-" flag="1">CryptMsgGetParam</fct>
<fct gp="04" od="-" flag="1">CryptUnprotectMemory</fct>
<fct gp="04" od="-" flag="1">CertVerifyTimeValidity</fct>
<fct gp="04" od="-" flag="1">CertVerifySubjectCertificateContext</fct>
<fct gp="04" od="-" flag="1">CertVerifyRevocation</fct>
<fct gp="04" od="-" flag="1">CertVerifyCertificateChainPolicy</fct>
<fct gp="04" od="-" flag="1">CertVerifyCTLUsage</fct>
<fct gp="04" od="-" flag="1">CertVerifyCRLTimeValidity</fct>
<fct gp="04" od="-" flag="1">CertVerifyCRLRevocation</fct>
<fct gp="04" od="-" flag="1">CertUnregisterSystemStore</fct>
<fct gp="04" od="-" flag="1">CertUnregisterPhysicalStore</fct>
<fct gp="04" od="-" flag="1">CertStrToName</fct>
<fct gp="04" od="-" flag="1">CertSetStoreProperty</fct>
<fct gp="04" od="-" flag="1">CertSetEnhancedKeyUsage</fct>
<fct gp="04" od="-" flag="1">CertSetCertificateContextProperty</fct>
<fct gp="04" od="-" flag="1">CertSetCertificateContextPropertiesFromCTLEntry</fct>
<fct gp="04" od="-" flag="1">CertSetCTLContextProperty</fct>
<fct gp="04" od="-" flag="1">CertSetCRLContextProperty</fct>
<fct gp="04" od="-" flag="1">CertSerializeCertificateStoreElement</fct>
<fct gp="04" od="-" flag="1">CertSerializeCTLStoreElement</fct>
<fct gp="04" od="-" flag="1">CertSerializeCRLStoreElement</fct>
<fct gp="04" od="-" flag="1">CertSelectCertificateChains</fct>
<fct gp="04" od="-" flag="1">CertSaveStore</fct>
<fct gp="04" od="-" flag="1">CertRetrieveLogoOrBiometricInfo</fct>
<fct gp="04" od="-" flag="1">CertResyncCertificateChainEngine</fct>
<fct gp="04" od="-" flag="1">CertRemoveStoreFromCollection</fct>
<fct gp="04" od="-" flag="1">CertRemoveEnhancedKeyUsageIdentifier</fct>
<fct gp="04" od="-" flag="1">CertRegisterSystemStore</fct>
<fct gp="04" od="-" flag="1">CertRegisterPhysicalStore</fct>
<fct gp="04" od="-" flag="1">CertRDNValueToStr</fct>
<fct gp="04" od="-" flag="1">CertOpenSystemStore</fct>
<fct gp="04" od="-" flag="1">CertOpenStore</fct>
<fct gp="04" od="-" flag="1">CertOpenServerOcspResponse</fct>
<fct gp="04" od="-" flag="1">CertOIDToAlgId</fct>
<fct gp="04" od="-" flag="1">CertNameToStr</fct>
<fct gp="04" od="-" flag="1">CertIsValidCRLForCertificate</fct>
<fct gp="04" od="-" flag="1">CertIsRDNAttrsInCertificateName</fct>
<fct gp="04" od="-" flag="1">CertGetValidUsages</fct>
<fct gp="04" od="-" flag="1">CertGetSubjectCertificateFromStore</fct>
<fct gp="04" od="-" flag="1">CertGetStoreProperty</fct>
<fct gp="04" od="-" flag="1">CertGetServerOcspResponseContext</fct>
<fct gp="04" od="-" flag="1">CertGetPublicKeyLength</fct>
<fct gp="04" od="-" flag="1">CertGetNameString</fct>
<fct gp="04" od="-" flag="1">CryptQueryObject</fct>
<fct gp="04" od="-" flag="1">CertGetIssuerCertificateFromStore</fct>
<fct gp="04" od="-" flag="1">CertGetIntendedKeyUsage</fct>
<fct gp="04" od="-" flag="1">CertGetEnhancedKeyUsage</fct>
<fct gp="04" od="-" flag="1">CertGetCertificateContextProperty</fct>
<fct gp="04" od="-" flag="1">CertGetCertificateChain</fct>
<fct gp="04" od="-" flag="1">CertGetCTLContextProperty</fct>
<fct gp="04" od="-" flag="1">CertGetCRLFromStore</fct>
<fct gp="04" od="-" flag="1">CertGetCRLContextProperty</fct>
<fct gp="04" od="-" flag="1">CertFreeServerOcspResponseContext</fct>
<fct gp="04" od="-" flag="1">CertFreeCertificateContext</fct>
<fct gp="04" od="-" flag="1">CertFreeCertificateChainList</fct>
<fct gp="04" od="-" flag="1">CertFreeCertificateChainEngine</fct>
<fct gp="04" od="-" flag="1">CertFreeCertificateChain</fct>
<fct gp="04" od="-" flag="1">CertFreeCTLContext</fct>
<fct gp="04" od="-" flag="1">CertFreeCRLContext</fct>
<fct gp="04" od="-" flag="1">CertFindSubjectInSortedCTL</fct>
<fct gp="04" od="-" flag="1">CertFindSubjectInCTL</fct>
<fct gp="04" od="-" flag="1">CertFindRDNAttr</fct>
<fct gp="04" od="-" flag="1">CertFindExtension</fct>
<fct gp="04" od="-" flag="1">CertFindChainInStore</fct>
<fct gp="04" od="-" flag="1">CertFindCertificateInStore</fct>
<fct gp="04" od="-" flag="1">CertFindCertificateInCRL</fct>
<fct gp="04" od="-" flag="1">CertFindCTLInStore</fct>
<fct gp="04" od="-" flag="1">CertFindCRLInStore</fct>
<fct gp="04" od="-" flag="1">CertFindAttribute</fct>
<fct gp="04" od="-" flag="1" cb="1">CertEnumSystemStore</fct>
<fct gp="04" od="-" flag="1" cb="1">CertEnumSystemStoreLocation</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumSubjectInSortedCTL</fct>
<fct gp="04" od="-" flag="1" cb="1">CertEnumPhysicalStore</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumCertificatesInStore</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumCertificateContextProperties</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumCTLsInStore</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumCTLContextProperties</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumCRLsInStore</fct>
<fct gp="04" od="-" flag="1" cb="0">CertEnumCRLContextProperties</fct>
<fct gp="04" od="-" flag="1">CertDuplicateStore</fct>
<fct gp="04" od="-" flag="1">CertDuplicateCertificateContext</fct>
<fct gp="04" od="-" flag="1">CertDuplicateCertificateChain</fct>
<fct gp="04" od="-" flag="1">CertDuplicateCTLContext</fct>
<fct gp="04" od="-" flag="1">CertDuplicateCRLContext</fct>
<fct gp="04" od="-" flag="1">CertDeleteCertificateFromStore</fct>
<fct gp="04" od="-" flag="1">CertDeleteCTLFromStore</fct>
<fct gp="04" od="-" flag="1">CertDeleteCRLFromStore</fct>
<fct gp="04" od="-" flag="1">CertCreateSelfSignCertificate</fct>
<fct gp="04" od="-" flag="1">CertCreateContext</fct>
<fct gp="04" od="-" flag="1">CertCreateCertificateContext</fct>
<fct gp="04" od="-" flag="1">CertCreateCertificateChainEngine</fct>
<fct gp="04" od="-" flag="1">CertCreateCTLEntryFromCertificateContextProperties</fct>
<fct gp="04" od="-" flag="1">CertCreateCTLContext</fct>
<fct gp="04" od="-" flag="1">CertCreateCRLContext</fct>
<fct gp="04" od="-" flag="1">CertControlStore</fct>
<fct gp="04" od="-" flag="1">CertComparePublicKeyInfo</fct>
<fct gp="04" od="-" flag="1">CertCompareIntegerBlob</fct>
<fct gp="04" od="-" flag="1">CertCompareCertificateName</fct>
<fct gp="04" od="-" flag="1">CertCompareCertificate</fct>
<fct gp="04" od="-" flag="1">CertCloseStore</fct>
<fct gp="04" od="-" flag="1">CertCloseServerOcspResponse</fct>
<fct gp="04" od="-" flag="1">CertAlgIdToOID</fct>
<fct gp="04" od="-" flag="1">CertAddStoreToCollection</fct>
<fct gp="04" od="-" flag="1">CertAddSerializedElementToStore</fct>
<fct gp="04" od="-" flag="1">CertAddRefServerOcspResponseContext</fct>
<fct gp="04" od="-" flag="1">CertAddRefServerOcspResponse</fct>
<fct gp="04" od="-" flag="1">CertAddEnhancedKeyUsageIdentifier</fct>
<fct gp="04" od="-" flag="1">CertAddEncodedCertificateToSystemStore</fct>
<fct gp="04" od="-" flag="1">CertAddEncodedCertificateToStore</fct>
<fct gp="04" od="-" flag="1">CertAddEncodedCTLToStore</fct>
<fct gp="04" od="-" flag="1">CertAddEncodedCRLToStore</fct>
<fct gp="04" od="-" flag="1">CertAddCertificateLinkToStore</fct>
<fct gp="04" od="-" flag="1">CertAddCertificateContextToStore</fct>
<fct gp="04" od="-" flag="1">CertAddCTLLinkToStore</fct>
<fct gp="04" od="-" flag="1">CertAddCTLContextToStore</fct>
<fct gp="04" od="-" flag="1">CertAddCRLLinkToStore</fct>
<fct gp="04" od="-" flag="1">CertAddCRLContextToStore</fct>
</fcts>
</lib>
<lib name="cryptdll.dll" flag="1" gp="04" desc="Cryptography Manager">
<fcts>
<fct gp="04" od="-" flag="1">MD5Init</fct>
<fct gp="04" od="-" flag="1">MD5Update</fct>
<fct gp="04" od="-" flag="1">MD5Final</fct>
</fcts>
</lib>
<lib name="msvfw32.dll" flag="1" gp="--" desc="Microsoft Video for Windows">
<fcts>
<fct gp="--" od="2" flag="0">VideoForWindowsVersion</fct>
</fcts>
</lib>
<lib name="msi.dll" flag="0" gp="26" desc="Windows Installer">
<fcts>
<fct gp="26" od="007" flag="0">MsiCloseAllHandles</fct>
<fct gp="26" od="008" flag="0">MsiCloseHandle</fct>
<fct gp="26" od="009" flag="0">MsiCollectUserInfo</fct>
<fct gp="26" od="011" flag="0">MsiConfigureFeature</fct>
<fct gp="26" od="015" flag="0">MsiConfigureProduct</fct>
<fct gp="26" od="017" flag="0">MsiCreateRecord</fct>
<fct gp="26" od="018" flag="0">MsiDatabaseApplyTransform</fct>
<fct gp="26" od="019" flag="0">MsiDatabaseApplyTransform</fct>
<fct gp="26" od="020" flag="0">MsiDatabaseCommit</fct>
<fct gp="26" od="021" flag="0">MsiDatabaseExport</fct>
<fct gp="26" od="022" flag="0">MsiDatabaseExport</fct>
<fct gp="26" od="023" flag="0">MsiDatabaseGenerateTransform</fct>
<fct gp="26" od="024" flag="0">MsiDatabaseGenerateTransform</fct>
<fct gp="26" od="025" flag="0">MsiDatabaseGetPrimaryKeys</fct>
<fct gp="26" od="026" flag="0">MsiDatabaseGetPrimaryKeys</fct>
<fct gp="26" od="027" flag="0">MsiDatabaseImport</fct>
<fct gp="26" od="028" flag="0">MsiDatabaseImport</fct>
<fct gp="26" od="029" flag="0">MsiDatabaseMerge</fct>
<fct gp="26" od="030" flag="0">MsiDatabaseMerge</fct>
<fct gp="26" od="031" flag="0">MsiDatabaseOpenView</fct>
<fct gp="26" od="032" flag="0">MsiDatabaseOpenView</fct>
<fct gp="26" od="033" flag="0">MsiDoAction</fct>
<fct gp="26" od="034" flag="0">MsiDoActionW</fct>
<fct gp="26" od="035" flag="0">MsiEnableUIPreview</fct>
<fct gp="26" od="036" flag="0">MsiEnumClients</fct>
<fct gp="26" od="038" flag="0">MsiEnumComponentQualifiers</fct>
<fct gp="26" od="040" flag="0">MsiEnumComponents</fct>
<fct gp="26" od="042" flag="0">MsiEnumFeatures</fct>
<fct gp="26" od="044" flag="0">MsiEnumProducts</fct>
<fct gp="26" od="046" flag="0">MsiEvaluateCondition</fct>
<fct gp="26" od="047" flag="0">MsiEvaluateConditionW</fct>
<fct gp="26" od="048" flag="0">MsiGetLastErrorRecord</fct>
<fct gp="26" od="049" flag="0">MsiGetActiveDatabase</fct>
<fct gp="26" od="050" flag="0">MsiGetComponentState</fct>
<fct gp="26" od="051" flag="0">MsiGetComponentStateW</fct>
<fct gp="26" od="052" flag="0">MsiGetDatabaseState</fct>
<fct gp="26" od="053" flag="0">MsiGetFeatureCost</fct>
<fct gp="26" od="055" flag="0">MsiGetFeatureInfo</fct>
<fct gp="26" od="057" flag="0">MsiGetFeatureState</fct>
<fct gp="26" od="058" flag="0">MsiGetFeatureStateW</fct>
<fct gp="26" od="059" flag="0">MsiGetFeatureUsage</fct>
<fct gp="26" od="061" flag="0">MsiGetFeatureValidStates</fct>
<fct gp="26" od="063" flag="0">MsiGetLanguage</fct>
<fct gp="26" od="064" flag="0">MsiGetMode</fct>
<fct gp="26" od="065" flag="0">MsiGetProductCode</fct>
<fct gp="26" od="067" flag="0">MsiGetProductInfo</fct>
<fct gp="26" od="068" flag="0">MsiGetProductInfoFromScript</fct>
<fct gp="26" od="070" flag="0">MsiGetProductInfo</fct>
<fct gp="26" od="071" flag="0">MsiGetProductProperty</fct>
<fct gp="26" od="073" flag="0">MsiGetProperty</fct>
<fct gp="26" od="074" flag="0">MsiGetPropertyW</fct>
<fct gp="26" od="075" flag="0">MsiGetSourcePath</fct>
<fct gp="26" od="076" flag="0">MsiGetSourcePath</fct>
<fct gp="26" od="077" flag="0">MsiGetSummaryInformation</fct>
<fct gp="26" od="078" flag="0">MsiGetSummaryInformationW</fct>
<fct gp="26" od="079" flag="0">MsiGetTargetPath</fct>
<fct gp="26" od="088" flag="0">MsiInstallProduct</fct>
<fct gp="26" od="090" flag="0">MsiLocateComponent</fct>
<fct gp="26" od="091" flag="0">MsiOpenDatabase</fct>
<fct gp="26" od="092" flag="0">MsiOpenDatabase</fct>
<fct gp="26" od="093" flag="0">MsiOpenPackage</fct>
<fct gp="26" od="095" flag="0">MsiOpenProduct</fct>
<fct gp="26" od="096" flag="0">MsiOpenProduct</fct>
<fct gp="26" od="097" flag="0">MsiPreviewBillboard</fct>
<fct gp="26" od="098" flag="0">MsiPreviewBillboard</fct>
<fct gp="26" od="099" flag="0">MsiPreviewDialog</fct>
<fct gp="26" od="100" flag="0">MsiPreviewDialog</fct>
<fct gp="26" od="103" flag="0">MsiProcessMessage</fct>
<fct gp="26" od="111" flag="0">MsiQueryFeatureState</fct>
<fct gp="26" od="112" flag="0">MsiQueryProductState</fct>
<fct gp="26" od="113" flag="0">MsiQueryProductState</fct>
<fct gp="26" od="114" flag="0">MsiRecordDataSize</fct>
<fct gp="26" od="115" flag="0">MsiRecordGetFieldCount</fct>
<fct gp="26" od="116" flag="0">MsiRecordGetInteger</fct>
<fct gp="26" od="117" flag="0">MsiRecordGetStringA</fct>
<fct gp="26" od="118" flag="0">MsiRecordGetString</fct>
<fct gp="26" od="120" flag="0">MsiRecordReadStream</fct>
<fct gp="26" od="121" flag="0">MsiRecordSetInteger</fct>
<fct gp="26" od="124" flag="0">MsiRecordSetString</fct>
<fct gp="26" od="125" flag="0">MsiRecordSetStrings</fct>
<fct gp="26" od="130" flag="0">MsiReinstallProduct</fct>
<fct gp="26" od="137" flag="0">MsiSetExternalUI</fct>
<fct gp="26" od="115" flag="0">MsiRecordGetFieldCount</fct>
<fct gp="26" od="129" flag="0">MsiReinstallFeatureW</fct>
<fct gp="26" od="139" flag="0">MsiSetFeatureStateW</fct>
<fct gp="26" od="141" flag="0">MsiSetInternalUI</fct>
<fct gp="26" od="145" flag="0">MsiSetPropertyW</fct>
<fct gp="26" od="147" flag="0">MsiSetTargetPathW</fct>
<fct gp="26" od="150" flag="0">MsiSummaryInfoGetPropertyW</fct>
<fct gp="26" od="151" flag="0">MsiSummaryInfoPersist</fct>
<fct gp="26" od="152" flag="0">MsiSummaryInfoSetProperty</fct>
<fct gp="26" od="153" flag="0">MsiSummaryInfoSetProperty</fct>
<fct gp="26" od="154" flag="0">MsiUseFeature</fct>
<fct gp="26" od="155" flag="0">MsiUseFeature</fct>
<fct gp="26" od="156" flag="0">MsiVerifyPackage</fct>
<fct gp="26" od="157" flag="0">MsiVerifyPackage</fct>
<fct gp="26" od="158" flag="0">MsiViewClose</fct>
<fct gp="26" od="159" flag="0">MsiViewExecute</fct>
<fct gp="26" od="160" flag="0">MsiViewFetch</fct>
<fct gp="26" od="161" flag="0">MsiViewGetError</fct>
<fct gp="26" od="162" flag="0">MsiViewGetError</fct>
<fct gp="26" od="163" flag="0">MsiViewModify</fct>
<fct gp="26" od="164" flag="0">MsiDatabaseIsTablePersistent</fct>
<fct gp="26" od="165" flag="0">MsiDatabaseIsTablePersistent</fct>
<fct gp="26" od="166" flag="0">MsiViewGetColumnInfo</fct>
<fct gp="26" od="167" flag="0">MsiRecordClearData</fct>
<fct gp="26" od="168" flag="0">MsiEnableLog</fct>
<fct gp="26" od="169" flag="0">MsiEnableLog</fct>
<fct gp="26" od="170" flag="0">MsiFormatRecord</fct>
<fct gp="26" od="171" flag="0">MsiFormatRecord</fct>
<fct gp="26" od="173" flag="0">MsiGetComponentPath</fct>
<fct gp="26" od="174" flag="0">MsiApplyPatch</fct>
<fct gp="26" od="175" flag="0">MsiApplyPatch</fct>
<fct gp="26" od="176" flag="0">MsiAdvertiseScript</fct>
<fct gp="26" od="177" flag="0">MsiAdvertiseScript</fct>
<fct gp="26" od="178" flag="0">MsiGetPatchInfo</fct>
<fct gp="26" od="179" flag="0">MsiGetPatchInfo</fct>
<fct gp="26" od="180" flag="0">MsiEnumPatches</fct>
<fct gp="26" od="181" flag="0">MsiEnumPatches</fct>
<fct gp="--" od="182" flag="0">DllGetVersion</fct>
<fct gp="26" od="183" flag="0">MsiGetProductCodeFromPackageCode</fct>
<fct gp="26" od="184" flag="0">MsiGetProductCodeFromPackageCodeW</fct>
<fct gp="26" od="185" flag="0">MsiCreateTransformSummaryInfo</fct>
<fct gp="26" od="186" flag="0">MsiCreateTransformSummaryInfo</fct>
<fct gp="26" od="187" flag="0">MsiQueryFeatureStateFromDescriptor</fct>
<fct gp="26" od="188" flag="0">MsiQueryFeatureStateFromDescriptor</fct>
<fct gp="26" od="189" flag="0">MsiConfigureProductEx</fct>
<fct gp="26" od="190" flag="0">MsiConfigureProductEx</fct>
<fct gp="26" od="191" flag="0">MsiInvalidateFeatureCache</fct>
<fct gp="26" od="192" flag="0">MsiUseFeatureEx</fct>
<fct gp="26" od="193" flag="0">MsiUseFeatureEx</fct>
<fct gp="26" od="194" flag="0">MsiGetFileVersion</fct>
<fct gp="26" od="195" flag="0">MsiGetFileVersionW</fct>
<fct gp="26" od="200" flag="0">MsiDecomposeDescriptor</fct>
<fct gp="26" od="201" flag="0">MsiDecomposeDescriptor</fct>
<fct gp="26" od="202" flag="0">MsiProvideQualifiedComponentEx</fct>
<fct gp="26" od="203" flag="0">MsiProvideQualifiedComponentEx</fct>
<fct gp="26" od="204" flag="0">MsiEnumRelatedProducts</fct>
<fct gp="26" od="205" flag="0">MsiEnumRelatedProducts</fct>
<fct gp="26" od="206" flag="0">MsiSetFeatureAttributes</fct>
<fct gp="26" od="207" flag="0">MsiSetFeatureAttributes</fct>
<fct gp="26" od="210" flag="0">MsiSourceListAddSource</fct>
<fct gp="26" od="211" flag="0">MsiSourceListAddSource</fct>
<fct gp="26" od="212" flag="0">MsiSourceListForceResolution</fct>
<fct gp="26" od="213" flag="0">MsiSourceListForceResolution</fct>
<fct gp="26" od="214" flag="0">MsiIsProductElevated</fct>
<fct gp="26" od="215" flag="0">MsiIsProductElevated</fct>
<fct gp="26" od="218" flag="0">MsiGetFileHash</fct>
<fct gp="26" od="219" flag="0">MsiGetFileHash</fct>
<fct gp="26" od="220" flag="0">MsiEnumComponentCosts</fct>
<fct gp="26" od="221" flag="0">MsiEnumComponentCosts</fct>
<fct gp="26" od="222" flag="0">MsiCreateAndVerifyInstallerDirectory</fct>
<fct gp="26" od="223" flag="0">MsiGetFileSignatureInformation</fct>
<fct gp="26" od="224" flag="0">MsiGetFileSignatureInformation</fct>
<fct gp="26" od="225" flag="0">MsiProvideAssembly</fct>
<fct gp="26" od="226" flag="0">MsiProvideAssembly</fct>
<fct gp="26" od="231" flag="0">MsiOpenPackageEx</fct>
<fct gp="26" od="232" flag="0">MsiOpenPackageEx</fct>
<fct gp="26" od="233" flag="0">MsiDeleteUserData</fct>
<fct gp="26" od="234" flag="0">MsiDeleteUserData</fct>
<fct gp="26" od="238" flag="0">MsiRemovePatches</fct>
<fct gp="26" od="239" flag="0">MsiApplyMultiplePatches</fct>
<fct gp="26" od="240" flag="0">MsiApplyMultiplePatches</fct>
<fct gp="26" od="241" flag="0">MsiExtractPatchXMLData</fct>
<fct gp="26" od="242" flag="0">MsiExtractPatchXMLData</fct>
<fct gp="26" od="243" flag="0">MsiGetPatchInfoEx</fct>
<fct gp="26" od="244" flag="0">MsiGetPatchInfoEx</fct>
<fct gp="26" od="245" flag="0">MsiEnumProductsEx</fct>
<fct gp="26" od="246" flag="0">MsiEnumProductsEx</fct>
<fct gp="26" od="247" flag="0">MsiGetProductInfoEx</fct>
<fct gp="26" od="248" flag="0">MsiGetProductInfoEx</fct>
<fct gp="26" od="249" flag="0">MsiQueryComponentState</fct>
<fct gp="26" od="250" flag="0">MsiQueryComponentState</fct>
<fct gp="26" od="251" flag="0">MsiQueryFeatureStateEx</fct>
<fct gp="26" od="252" flag="0">MsiQueryFeatureStateEx</fct>
<fct gp="26" od="253" flag="0">MsiDeterminePatchSequence</fct>
<fct gp="26" od="254" flag="0">MsiDeterminePatchSequence</fct>
<fct gp="26" od="255" flag="0">MsiSourceListAddSourceEx</fct>
<fct gp="26" od="256" flag="0">MsiSourceListAddSourceEx</fct>
<fct gp="26" od="257" flag="0">MsiSourceListClearSource</fct>
<fct gp="26" od="258" flag="0">MsiSourceListClearSource</fct>
<fct gp="26" od="259" flag="0">MsiSourceListClearAllEx</fct>
<fct gp="26" od="260" flag="0">MsiSourceListClearAllEx</fct>
<fct gp="26" od="274" flag="0">MsiSourceListAddMediaDisk</fct>
<fct gp="26" od="276" flag="0">MsiSourceListClearMediaDisk</fct>
</fcts>
</lib>
<lib name="usp10.dll" flag="1" gp="--" desc="Uniscribe Unicode script processor">
<fcts>
<fct gp="--" od="--" flag="1">ScriptBreak</fct>
<fct gp="--" od="--" flag="1">ScriptStringOut</fct>
<fct gp="--" od="--" flag="1">ScriptStringAnalyse</fct>
<fct gp="--" od="--" flag="1">ScriptLayout</fct>
<fct gp="--" od="--" flag="1">ScriptItemize</fct>
<fct gp="--" od="--" flag="1">ScriptShape</fct>
<fct gp="--" od="--" flag="1">ScriptFreeCache</fct>
<fct gp="--" od="--" flag="1">ScriptPlace</fct>
</fcts>
</lib>
<lib name="mscoree.dll" flag="0" gp="--" desc="Microsoft .NET Runtime Execution Engine">
<fcts>
<fct gp="--" od="--" flag="0" hide="1">.ctor</fct>
<fct gp="--" od="--" flag="0" hide="1">.cctor</fct>
<fct gp="--" od="--" flag="1">CLRCreateInstance</fct>
<fct gp="--" od="--" flag="1">CorBindToRuntime</fct>
<fct gp="--" od="--" flag="1">CorBindToRuntimeEx</fct>
<fct gp="02" od="--" flag="1" ti="1106">UseShellExecute</fct>
<fct gp="02" od="--" flag="1" ti="1106">set_UseShellExecute</fct>
<fct gp="10" od="--" flag="-" ti="1001">Get_Random</fct>
<fct gp="10" od="--" flag="-" ti="1001">Get_PSDrive</fct>
<fct gp="10" od="--" flag="1" ti="1001">CreateEncryptor</fct>
<fct gp="10" od="--" flag="1" ti="1001">RandomNumberGenerator</fct>
<fct gp="10" od="--" flag="1" ti="1001">GenerateRandomSalt</fct>
<fct gp="03" od="--" flag="1" ti="1086">DownloadFile</fct>
<fct gp="03" od="--" flag="1" ti="1086">DownloadData</fct>
<fct gp="02" od="--" flag="1" ti="1055">DelegateResumeThread</fct>
<fct gp="02" od="--" flag="1" ti="1055">DelegateWow64SetThreadContext</fct>
<fct gp="02" od="--" flag="1" ti="1055">DelegateSetThreadContext</fct>
<fct gp="02" od="--" flag="1" ti="1055">DelegateWow64GetThreadContext</fct>
<fct gp="02" od="--" flag="1" ti="1055">DelegateGetThreadContext</fct>
<fct gp="05" od="--" flag="1" ti="1055">DelegateVirtualAllocEx</fct>
<fct gp="05" od="--" flag="1" ti="1055">DelegateWriteProcessMemory</fct>
<fct gp="05" od="--" flag="1" ti="1055">DelegateReadProcessMemory</fct>
<fct gp="05" od="--" flag="1" ti="1055">DelegateZwUnmapViewOfSection</fct>
<fct gp="02" od="--" flag="1" ti="1106">DelegateCreateProcess</fct>
<fct gp="02" od="--" flag="1">CreateProc</fct>
<fct gp="--" od="--" flag="1">LoadApi</fct>
<fct gp="--" od="--" flag="1">CreateApi</fct>
<fct gp="--" od="--" flag="0">AsyncCallback</fct>
<fct gp="02" od="--" flag="0">BeginInvoke</fct>
<fct gp="--" od="--" flag="0">EndInvoke</fct>
<fct gp="--" od="--" flag="0">Invoke</fct>
<fct gp="02" od="--" flag="1">ProcessHandle</fct>
<fct gp="02" od="--" flag="0">ThreadHandle</fct>
<fct gp="02" od="--" flag="1">ProcessId</fct>
<fct gp="02" od="--" flag="0">ThreadId</fct>
<fct gp="--" od="--" flag="1">payload</fct>
<fct gp="--" od="--" flag="0">callback</fct>
<fct gp="02" od="--" flag="1">Run</fct>
<fct gp="--" od="--" flag="1">bytesWritten</fct>
<fct gp="02" od="--" flag="0" ad="1">GetProcessById</fct>
<fct gp="03" od="--" flag="0">GetResponse</fct>
</fcts>
</lib>
<lib name="iphlpapi.dll" flag="1" gp="03" desc="IP Helper API">
<fcts>
<fct gp="03" od="--" flag="0">ConvertLengthToIpv4Mask</fct>
<fct gp="03" od="--" flag="0">SetTcpEntry</fct>
<fct gp="03" od="--" flag="0">AllocateAndGetTcpExTableFromStack</fct>
<fct gp="03" od="--" flag="0">AllocateAndGetUdpExTableFromStack</fct>
<fct gp="03" od="--" flag="0">GetIpErrorString</fct>
<fct gp="03" od="--" flag="0">GetIpForwardTable</fct>
<fct gp="03" od="--" flag="0">GetBestInterface</fct>
<fct gp="03" od="--" flag="0">NTPTimeToNTFileTime</fct>
<fct gp="03" od="--" flag="0">GetExtendedUdpTable</fct>
<fct gp="03" od="--" flag="0">GetExtendedTcpTable</fct>
<fct gp="03" od="--" flag="0">AllocateAndGetUdpExTable2FromStack</fct>
<fct gp="03" od="--" flag="0">AllocateAndGetTcpExTable2FromStack</fct>
<fct gp="03" od="--" flag="0">AllocateAndGetIpAddrTableFromStack</fct>
<fct gp="03" od="--" flag="1">Icmp6CreateFile</fct>
<fct gp="03" od="--" flag="1">Icmp6ParseReplies</fct>
<fct gp="03" od="--" flag="1">Icmp6SendEcho2</fct>
<fct gp="03" od="--" flag="1">IcmpCloseHandle</fct>
<fct gp="03" od="--" flag="1">IcmpCreateFile</fct>
<fct gp="03" od="--" flag="1">IcmpSendEcho</fct>
<fct gp="03" od="--" flag="1">IcmpSendEcho2</fct>
<fct gp="03" od="--" flag="1">IcmpSendEcho2Ex</fct>
<fct gp="03" od="--" flag="1">IcmpParseReplies</fct>
<fct gp="03" od="--" flag="1">CreateIpNetEntry</fct>
<fct gp="03" od="--" flag="1">DeleteIpAddress</fct>
<fct gp="03" od="--" flag="1">DeleteIpNetEntry</fct>
<fct gp="03" od="--" flag="1">DeleteIpNetEntry2</fct>
<fct gp="03" od="--" flag="1">DeleteIpForwardEntry</fct>
<fct gp="03" od="--" flag="1">DeleteIpForwardEntry2</fct>
<fct gp="03" od="--" flag="1">GetNetworkParams</fct>
<fct gp="03" od="--" flag="1">GetAdaptersAddresses</fct>
<fct gp="03" od="--" flag="1">GetTcpTable</fct>
<fct gp="03" od="--" flag="1">GetBestRoute</fct>
<fct gp="03" od="--" flag="1">GetIfTable</fct>
<fct gp="03" od="--" flag="1">GetTcpStatistics</fct>
<fct gp="03" od="--" flag="1">GetTcpStatisticsEx</fct>
<fct gp="03" od="--" flag="1">GetIpAddrTable</fct>
<fct gp="03" od="--" flag="1">GetAdapterIndex</fct>
<fct gp="03" od="--" flag="1">GetIpStatistics</fct>
<fct gp="03" od="--" flag="1">GetIfEntry</fct>
<fct gp="03" od="--" flag="1">GetIcmpStatistics</fct>
<fct gp="03" od="--" flag="1">GetUdpTable</fct>
<fct gp="03" od="--" flag="1">SetIpNetEntry</fct>
<fct gp="03" od="--" flag="1">SetIpTTL</fct>
<fct gp="03" od="--" flag="1">SendARP</fct>
<fct gp="03" od="--" flag="1">InternalSetIpStats</fct>
<fct gp="03" od="--" flag="1">SetIpForwardEntry</fct>
<fct gp="03" od="--" flag="1">InternalSetIpForwardEntry</fct>
<fct gp="03" od="--" flag="1">AddIPAddress</fct>
<fct gp="03" od="--" flag="1">FlushIpNetTable</fct>
<fct gp="03" od="--" flag="1">GetIpNetTable</fct>
<fct gp="03" od="--" flag="1">SetAdapterIpAddress</fct>
<fct gp="03" od="--" flag="1">NhpAllocateAndGetInterfaceInfoFromStack</fct>
<fct gp="03" od="--" flag="1">NhGetGuidFromInterfaceName</fct>
<fct gp="03" od="--" flag="1">InternalGetUdpTable</fct>
<fct gp="03" od="--" flag="1">UnenableRouter</fct>
<fct gp="03" od="--" flag="1">register_icmp</fct>
<fct gp="03" od="--" flag="1">_PfUnBindInterface@4</fct>
<fct gp="03" od="--" flag="1">_PfDeleteInterface@4</fct>
<fct gp="03" od="--" flag="1">_PfCreateInterface@24</fct>
<fct gp="03" od="--" flag="1">_PfAddFiltersToInterface@24</fct>
</fcts>
</lib>
<lib name="dbghelp.dll" flag="1" gp="02" desc="Windows Image Helper">
<fcts>
<fct gp="02" od="--" flag="1" cb="1">EnumDirTree</fct>
<fct gp="02" od="--" flag="1">SymFromAddr</fct>
<fct gp="02" od="--" flag="1">SymGetModuleBase64</fct>
<fct gp="02" od="--" flag="1">SymFunctionTableAccess64</fct>
<fct gp="02" od="--" flag="1">SymCleanup</fct>
<fct gp="02" od="--" flag="1">StackWalk64</fct>
<fct gp="02" od="--" flag="1">SymInitialize</fct>
<fct gp="02" od="--" flag="1">SymFunctionTableAccess64</fct>
<fct gp="02" od="--" flag="1">SymGetModuleBase64</fct>
<fct gp="02" od="--" flag="1">StackWalk64</fct>
<fct gp="02" od="--" flag="1">ImageNtHeader</fct>
<fct gp="02" od="--" flag="1">SymUnloadModule64</fct>
<fct gp="02" od="--" flag="1">SymLoadModule64</fct>
<fct gp="02" od="--" flag="1">SymLoadModuleEx</fct>
<fct gp="02" od="--" flag="1">SymGetOptions</fct>
<fct gp="02" od="--" flag="1">SymSetOptions</fct>
<fct gp="02" od="--" flag="1">MiniDumpWriteDump</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithTokenInformation</fct>
<fct gp="02" od="--" flag="1">MiniDumpIgnoreInaccessibleMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithPrivateWriteCopyMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithFullAuxiliaryState</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithoutAuxiliaryState</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithCodeSegs</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithThreadInfo</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithFullMemoryInfo</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithoutOptionalData</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithPrivateReadWriteMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithProcessThreadData</fct>
<fct gp="02" od="--" flag="1">MiniDumpFilterModulePaths</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithIndirectlyReferencedMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithUnloadedModules</fct>
<fct gp="02" od="--" flag="1">MiniDumpScanMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpFilterMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithHandleData</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithFullMemory</fct>
<fct gp="02" od="--" flag="1">MiniDumpWithDataSegs</fct>
<fct gp="02" od="--" flag="1">MiniDumpNormal</fct>
<fct gp="02" od="--" flag="1">SymGetSymFromName</fct>
<fct gp="02" od="--" flag="1">SymFromAddr</fct>
<fct gp="02" od="--" flag="1">SymCleanup</fct>
<fct gp="02" od="--" flag="1">SymGetModuleInfoW64</fct>
<fct gp="02" od="--" flag="1">SymRegisterCallback64</fct>
<fct gp="02" od="--" flag="1">EnumerateLoadedModules</fct>
<fct gp="02" od="--" flag="1">EnumerateLoadedModulesW64</fct>
<fct gp="02" od="--" flag="1">SymInitialize</fct>
<fct gp="02" od="--" flag="1">ImageDirectoryEntryToData</fct>
<fct gp="02" od="--" flag="1">SymEnumSym</fct>
<fct gp="02" od="--" flag="1" cb="1">SymEnumProcesses</fct>
<fct gp="02" od="--" flag="0" cb="1">SymFindFileInPath</fct>
<fct gp="02" od="--" flag="1">SymEnumerateSymbolsW</fct>
<fct gp="02" od="--" flag="0">MapDebugInformation</fct>
<fct gp="02" od="--" flag="0">SymEnumerateSymbols64</fct>
<fct gp="02" od="--" flag="0">SymGetSymFromAddr64</fct>
<fct gp="02" od="--" flag="0">SymGetSymFromName64</fct>
<fct gp="02" od="--" flag="0">SymGetSymNext64</fct>
<fct gp="02" od="--" flag="0">SymGetSymPrev64</fct>
<fct gp="02" od="--" flag="0">UnMapDebugInformation</fct>
</fcts>
</lib>
<lib name="vaultsvc.dll" flag="1" gp="30" desc="Credential Manager Service"></lib>
<lib name="vaultcli.dll" flag="1" gp="30" desc="Credential Vault Client Library">
<fcts>
<fct gp="30" od="--" flag="0">VaultAddItem</fct>
<fct gp="30" od="--" flag="0">VaultCloseVault</fct>
<fct gp="30" od="--" flag="0">VaultConfirmVaultAccess</fct>
<fct gp="30" od="--" flag="0">VaultCopyItem</fct>
<fct gp="30" od="--" flag="0">VaultCopyVault</fct>
<fct gp="30" od="--" flag="0">VaultCreateItemType</fct>
<fct gp="30" od="--" flag="0">VaultCreateVault</fct>
<fct gp="30" od="--" flag="0">VaultDeleteItemType</fct>
<fct gp="30" od="--" flag="0">VaultDeleteVault</fct>
<fct gp="30" od="--" flag="0">VaultEnumerateItemTypes</fct>
<fct gp="30" od="--" flag="0">VaultEnumerateItems</fct>
<fct gp="30" od="--" flag="0">VaultEnumerateVaults</fct>
<fct gp="30" od="--" flag="0">VaultFindItems</fct>
<fct gp="30" od="--" flag="0">VaultFree</fct>
<fct gp="30" od="--" flag="0">VaultGetInformation</fct>
<fct gp="30" od="--" flag="0">VaultGetItem</fct>
<fct gp="30" od="--" flag="0">VaultGetItemType</fct>
<fct gp="30" od="--" flag="0">VaultLoadVaults</fct>
<fct gp="30" od="--" flag="0">VaultLockVault</fct>
<fct gp="30" od="--" flag="0">VaultMoveItem</fct>
<fct gp="30" od="--" flag="0">VaultOpenVault</fct>
<fct gp="30" od="--" flag="0">VaultRegisterNotification</fct>
<fct gp="30" od="--" flag="0">VaultRemoveItem</fct>
<fct gp="30" od="--" flag="0">VaultSetInformation</fct>
<fct gp="30" od="--" flag="0">VaultUnRegisterNotification</fct>
<fct gp="30" od="--" flag="0">VaultUnloadVaults</fct>
<fct gp="30" od="--" flag="0">VaultUnlockVault</fct>
</fcts>
</lib>
<lib name="pstorec.dll" flag="1" gp="04" desc="Protected Storage COM interfaces">
<fcts>
<fct gp="04" od="--" flag="1">PStoreCreateInstance</fct>
<fct gp="04" od="--" flag="1">PStoreEnumProviders</fct>
</fcts>
</lib>
<lib name="atl.dll" flag="0" gp="--" desc="Active Template Library">
<fcts>
<fct gp="--" od="10" flag="0">AtlAdvise</fct>
<fct gp="--" od="11" flag="0">AtlUnadvise</fct>
<fct gp="--" od="12" flag="0">AtlFreeMarshalStream</fct>
<fct gp="--" od="13" flag="1">AtlMarshalPtrInProc</fct>
<fct gp="--" od="14" flag="0">AtlUnmarshalPtr</fct>
<fct gp="--" od="15" flag="0">AtlModuleGetClassObject</fct>
<fct gp="--" od="16" flag="0">AtlModuleInit</fct>
<fct gp="--" od="17" flag="0">AtlModuleRegisterClassObjects</fct>
<fct gp="--" od="18" flag="0">AtlModuleRegisterServer</fct>
<fct gp="01" od="19" flag="0">AtlModuleRegisterTypeLib</fct>
<fct gp="--" od="20" flag="0">AtlModuleRevokeClassObjects</fct>
<fct gp="--" od="21" flag="0">AtlModuleTerm</fct>
<fct gp="--" od="22" flag="0">AtlModuleUnregisterServer</fct>
<fct gp="--" od="--" flag="0">AtlModuleUpdateRegistryFromResourceD</fct>
<fct gp="--" od="24" flag="0">AtlWaitWithMessageLoop</fct>
<fct gp="--" od="25" flag="0">AtlSetErrorInfo</fct>
<fct gp="--" od="26" flag="0">AtlCreateTargetDC</fct>
<fct gp="--" od="27" flag="0">AtlHiMetricToPixel</fct>
<fct gp="--" od="28" flag="0">AtlPixelToHiMetric</fct>
<fct gp="--" od="29" flag="0">AtlDevModeW2</fct>
<fct gp="--" od="30" flag="0">AtlComPtrAssign</fct>
<fct gp="--" od="31" flag="0">AtlComQIPtrAssign</fct>
<fct gp="--" od="32" flag="0">AtlInternalQueryInterface</fct>
<fct gp="--" od="33" flag="0">DllCanUnloadNow</fct>
<fct gp="--" od="34" flag="0">AtlGetVersion</fct>
<fct gp="--" od="35" flag="0">AtlAxDialogBox</fct>
<fct gp="--" od="36" flag="0">AtlAxDialogBox</fct>
<fct gp="--" od="37" flag="1">AtlAxCreateDialog</fct>
<fct gp="--" od="39" flag="1">AtlAxCreateControl</fct>
<fct gp="--" od="41" flag="1">AtlAxAttachControl</fct>
<fct gp="--" od="40" flag="1">AtlAxCreateControlEx</fct>
<fct gp="--" od="42" flag="1">AtlAxWinInit</fct>
<fct gp="--" od="43" flag="0">AtlModuleAddCreateWndData</fct>
<fct gp="--" od="44" flag="0">AtlModuleExtractCreateWndData</fct>
<fct gp="--" od="45" flag="0">AtlModuleRegisterWndClassInfo</fct>
<fct gp="--" od="46" flag="0">AtlModuleRegisterWndClassInfo</fct>
<fct gp="--" od="47" flag="0">AtlAxGetControl</fct>
<fct gp="--" od="48" flag="1">AtlAxGetHost</fct>
<fct gp="--" od="49" flag="0">AtlRegisterClassCategoriesHelper</fct>
<fct gp="--" od="50" flag="0">AtlIPersistStreamInit_Load</fct>
<fct gp="--" od="51" flag="0">AtlIPersistStreamInit_Save</fct>
<fct gp="--" od="52" flag="0">AtlIPersistPropertyBag_Load</fct>
<fct gp="--" od="53" flag="0">AtlIPersistPropertyBag_Save</fct>
<fct gp="--" od="54" flag="0">AtlGetObjectSourceInterface</fct>
<fct gp="01" od="56" flag="0">AtlModuleLoadTypeLib</fct>
<fct gp="--" od="57" flag="0">AtlModuleUnregisterServerEx</fct>
<fct gp="--" od="58" flag="0">AtlModuleAddTermFunc</fct>
<fct gp="--" od="59" flag="0">AtlSetErrorInfo2</fct>
<fct gp="--" od="60" flag="0">AtlIPersistStreamInit_GetSizeMax</fct>
<fct gp="--" od="61" flag="0">DllGetClassObject</fct>
<fct gp="01" od="62" flag="1" ti="1218">_DllRegisterServer</fct>
<fct gp="01" od="63" flag="1" ti="1218">_DllUnregisterServer</fct>
<fct gp="--" od="--" flag="1">AtlAxCreateControlLic</fct>
<fct gp="--" od="--" flag="1">AtlAxCreateControlLicEx</fct>
<fct gp="--" od="--" flag="1">AtlAxGetControl</fct>
<fct gp="--" od="--" flag="1">AtlAxWinTerm</fct>
</fcts>
</lib>
<lib name="oleaut32.dll" flag="0" gp="--" desc="oleaut32 library">
<fcts>
<fct gp="--" od="002" flag="0">SysAllocString</fct>
<fct gp="--" od="003" flag="0">SysReAllocString</fct>
<fct gp="--" od="004" flag="0">SysAllocStringLen</fct>
<fct gp="--" od="005" flag="0">SysReAllocStringLen</fct>
<fct gp="--" od="006" flag="0">SysFreeString</fct>
<fct gp="--" od="007" flag="0">SysStringLen</fct>
<fct gp="--" od="008" flag="0">BSTR_UserUnmarshal</fct>
<fct gp="--" od="009" flag="0">VariantClear</fct>
<fct gp="--" od="010" flag="0">VariantCopy</fct>
<fct gp="--" od="011" flag="0">VariantCopyInd</fct>
<fct gp="--" od="012" flag="0">VariantChangeType</fct>
<fct gp="--" od="015" flag="0">SafeArrayCreate</fct>
<fct gp="--" od="016" flag="0">SafeArrayDestroy</fct>
<fct gp="--" od="017" flag="0">SafeArrayGetDim</fct>
<fct gp="--" od="018" flag="0">SafeArrayGetElemsize</fct>
<fct gp="--" od="019" flag="0">SafeArrayGetUBound</fct>
<fct gp="--" od="020" flag="0">SafeArrayGetLBound</fct>
<fct gp="--" od="021" flag="0">SafeArrayLock</fct>
<fct gp="--" od="022" flag="0">SafeArrayUnlock</fct>
<fct gp="--" od="023" flag="0">SafeArrayAccessData</fct>
<fct gp="--" od="024" flag="0">SafeArrayUnaccessData</fct>
<fct gp="--" od="025" flag="0">SafeArrayGetElement</fct>
<fct gp="--" od="026" flag="0">SafeArrayPutElement</fct>
<fct gp="--" od="027" flag="0">SafeArrayCopy</fct>
<fct gp="--" od="029" flag="0">DispGetIDsOfNames</fct>
<fct gp="--" od="030" flag="0">DispInvoke</fct>
<fct gp="--" od="031" flag="0">CreateDispTypeInfo</fct>
<fct gp="--" od="032" flag="0">CreateStdDispatch</fct>
<fct gp="--" od="035" flag="1">GetActiveObject</fct>
<fct gp="--" od="037" flag="0">SafeArrayAllocData</fct>
<fct gp="--" od="038" flag="0">SafeArrayDestroyDescriptor</fct>
<fct gp="--" od="039" flag="0">SafeArrayDestroyData</fct>
<fct gp="--" od="040" flag="0">SafeArrayRedim</fct>
<fct gp="--" od="041" flag="0">SafeArrayAllocDescriptorEx</fct>
<fct gp="--" od="043" flag="0">SafeArrayCreateVectorEx</fct>
<fct gp="--" od="053" flag="0">VarI2FromDate</fct>
<fct gp="--" od="057" flag="0">SafeArraySetIID</fct>
<fct gp="--" od="063" flag="0">VarI4FromDate</fct>
<fct gp="--" od="066" flag="0">VarI4FromBool</fct>
<fct gp="--" od="069" flag="0">VarR4FromI2</fct>
<fct gp="--" od="070" flag="0">OleSavePictureFile</fct>
<fct gp="--" od="077" flag="0">SafeArrayGetVartype</fct>
<fct gp="--" od="078" flag="0">VarR8FromUI1</fct>
<fct gp="--" od="080" flag="0">VarR8FromI4</fct>
<fct gp="--" od="083" flag="0">VarR8FromDate</fct>
<fct gp="--" od="085" flag="0">VarR8FromDisp</fct>
<fct gp="--" od="089" flag="0">VarDateFromI2</fct>
<fct gp="--" od="094" flag="0">VarDateFromStr</fct>
<fct gp="--" od="107" flag="0">VarFormatNumber</fct>
<fct gp="--" od="108" flag="0">VarBstrFromUI1</fct>
<fct gp="--" od="109" flag="0">VarBstrFromI2</fct>
<fct gp="--" od="110" flag="0">VarBstrFromI4</fct>
<fct gp="--" od="112" flag="0">VarBstrFromR8</fct>
<fct gp="--" od="114" flag="0">VarBstrFromDate</fct>
<fct gp="--" od="117" flag="0">VarFormatPercent</fct>
<fct gp="--" od="118" flag="0">VarBoolFromUI1</fct>
<fct gp="--" od="123" flag="0">VarBoolFromDate</fct>
<fct gp="--" od="132" flag="0">VarUI1FromR4</fct>
<fct gp="--" od="134" flag="0">VarUI1FromCy</fct>
<fct gp="--" od="143" flag="0">VarDiv</fct>
<fct gp="--" od="144" flag="0">DllCanUnloadNow</fct>
<fct gp="--" od="145" flag="0">DllGetClassObject</fct>
<fct gp="02" od="146" flag="1">DispCallFunc</fct>
<fct gp="--" od="147" flag="0">VariantChangeTypeEx</fct>
<fct gp="--" od="148" flag="0">SafeArrayPtrOfIndex</fct>
<fct gp="--" od="149" flag="0">SysStringByteLen</fct>
<fct gp="--" od="150" flag="0">SysAllocStringByteLen</fct>
<fct gp="--" od="153" flag="0">VarIdiv</fct>
<fct gp="21" od="160" flag="1">CreateTypeLib</fct>
<fct gp="21" od="161" flag="1">LoadTypeLib</fct>
<fct gp="21" od="162" flag="1">LoadRegTypeLib</fct>
<fct gp="01" od="163" flag="1">RegisterTypeLib</fct>
<fct gp="01" od="---" flag="1">RegisterTypeLibForUser</fct>
<fct gp="--" od="164" flag="0">QueryPathOfRegTypeLib</fct>
<fct gp="--" od="167" flag="1">VarXor</fct>
<fct gp="--" od="171" flag="0">ClearCustData</fct>
<fct gp="--" od="180" flag="0">CreateTypeLib2</fct>
<fct gp="--" od="181" flag="0">VarDecSub</fct>
<fct gp="21" od="183" flag="1">LoadTypeLibEx</fct>
<fct gp="--" od="184" flag="0">SystemTimeToVariantTime</fct>
<fct gp="--" od="185" flag="0">VariantTimeToSystemTime</fct>
<fct gp="01" od="186" flag="1">UnRegisterTypeLib</fct>
<fct gp="--" od="190" flag="0">VarDecFromUI1</fct>
<fct gp="--" od="199" flag="0">VarDecFromBool</fct>
<fct gp="--" od="200" flag="0">GetErrorInfo</fct>
<fct gp="--" od="201" flag="0">SetErrorInfo</fct>
<fct gp="--" od="202" flag="0">CreateErrorInfo</fct>
<fct gp="--" od="207" flag="0">VarI2FromUI4</fct>
<fct gp="--" od="209" flag="0">VarI4FromI1</fct>
<fct gp="--" od="211" flag="0">VarI4FromUI4</fct>
<fct gp="--" od="220" flag="0">VarR8FromDec</fct>
<fct gp="--" od="221" flag="0">VarDateFromI1</fct>
<fct gp="--" od="225" flag="0">VarCyFromI1</fct>
<fct gp="--" od="227" flag="0">VarCyFromUI4</fct>
<fct gp="--" od="229" flag="0">VarBstrFromI1</fct>
<fct gp="--" od="231" flag="0">VarBstrFromUI4</fct>
<fct gp="--" od="236" flag="0">VarBoolFromDec</fct>
<fct gp="--" od="237" flag="0">VarUI1FromI1</fct>
<fct gp="--" od="248" flag="0">VarI1FromR8</fct>
<fct gp="--" od="264" flag="0">VarUI2FromStr</fct>
<fct gp="--" od="275" flag="0">VarUI4FromDate</fct>
<fct gp="--" od="276" flag="0">VarUI4FromCy</fct>
<fct gp="--" od="277" flag="0">VarUI4FromStr</fct>
<fct gp="--" od="280" flag="0">VarUI4FromI1</fct>
<fct gp="--" od="290" flag="0">VARIANT_UserFree</fct>
<fct gp="--" od="291" flag="0">LPSAFEARRAY_UserSize</fct>
<fct gp="--" od="298" flag="0">VarDecCmpR8</fct>
<fct gp="--" od="309" flag="0">VarCyNeg</fct>
<fct gp="--" od="314" flag="0">VarBstrCmp</fct>
<fct gp="--" od="318" flag="0">VarCat</fct>
<fct gp="--" od="322" flag="0">GetRecordInfoFromGuids</fct>
<fct gp="--" od="331" flag="0">VarUdateFromDate</fct>
<fct gp="--" od="335" flag="0">VarI8FromR4</fct>
<fct gp="--" od="369" flag="0">VarBstrFromUI8</fct>
<fct gp="--" od="411" flag="0">SafeArrayCreateVector</fct>
<fct gp="--" od="413" flag="0">VectorFromBstr</fct>
<fct gp="--" od="417" flag="0">OleCreatePropertyFrame</fct>
<fct gp="--" od="418" flag="0">OleLoadPicture</fct>
<fct gp="--" od="420" flag="0">OleCreateFontIndirect</fct>
<fct gp="--" od="421" flag="0">OleTranslateColor</fct>
<fct gp="--" od="422" flag="0">OleLoadPictureFile</fct>
<fct gp="--" od="423" flag="0">VariantInit</fct>
<fct gp="--" od="424" flag="0">OleLoadPicturePath</fct>
<fct gp="--" od="442" flag="0">RegisterTypeLibForUser</fct>
<fct gp="--" od="443" flag="0">UnRegisterTypeLibForUser</fct>
</fcts>
</lib>
<lib name="dnsapi.dll" flag="1" gp="03" desc="DNS Client API library">
<fcts>
<fct gp="03" od="0" flag="1">DnsAcquireContextHandle</fct>
<fct gp="03" od="0" flag="1">DnsCancelQuery</fct>
<fct gp="03" od="0" flag="1">DnsExtractRecordsFromMessage</fct>
<fct gp="03" od="0" flag="1">DnsFree</fct>
<fct gp="03" od="0" flag="1">DnsFreeProxyName</fct>
<fct gp="03" od="0" flag="1">DnsGetProxyInformation</fct>
<fct gp="03" od="0" flag="1">DnsModifyRecordsInSet</fct>
<fct gp="03" od="0" flag="1">DnsNameCompare</fct>
<fct gp="03" od="0" flag="1">DnsQuery_</fct>
<fct gp="03" od="0" flag="1">DnsQueryConfig</fct>
<fct gp="03" od="0" flag="1">DnsQueryEx</fct>
<fct gp="03" od="0" flag="1">DnsRecordCompare</fct>
<fct gp="03" od="0" flag="1">DnsRecordCopyEx</fct>
<fct gp="03" od="0" flag="1">DnsRecordListFree</fct>
<fct gp="03" od="0" flag="1">DnsRecordSetCompare</fct>
<fct gp="03" od="0" flag="1">DnsRecordSetCopyEx</fct>
<fct gp="03" od="0" flag="1">DnsRecordSetDetach</fct>
<fct gp="03" od="0" flag="1">DnsReleaseContextHandle</fct>
<fct gp="03" od="0" flag="1">DnsReplaceRecordSet</fct>
<fct gp="03" od="0" flag="1">DnsValidateName</fct>
<fct gp="03" od="0" flag="1">DnsValidateServerStatus</fct>
<fct gp="03" od="0" flag="1">DnsWriteQuestionToBuffer</fct>
</fcts>
</lib>
<lib name="avicap32.dll" flag="0" gp="--" desc="AVI Capture window class">
<fcts>
<fct gp="--" od="0" flag="1">capControlCallback</fct>
<fct gp="--" od="0" flag="1">capCreateCaptureWindow</fct>
<fct gp="--" od="0" flag="1">capErrorCallback</fct>
<fct gp="--" od="0" flag="1">capGetDriverDescription</fct>
<fct gp="--" od="0" flag="1">capStatusCallback</fct>
<fct gp="--" od="0" flag="1">capVideoStreamCallback</fct>
<fct gp="--" od="0" flag="1">capWaveStreamCallback</fct>
<fct gp="--" od="0" flag="1">capYieldCallback</fct>
</fcts>
</lib>
<lib name="samsrv.dll" flag="1" gp="30">
<fcts>
<fct gp="30" od="0" flag="1">SamQueryInformationUse</fct>
<fct gp="30" od="0" flag="1">SamIConnect</fct>
<fct gp="30" od="0" flag="1">SamIFree_SAMPR_ENUMERATION_BUFFER</fct>
<fct gp="30" od="0" flag="1">SamIFree_SAMPR_USER_INFO_BUFFER</fct>
<fct gp="30" od="0" flag="1">SamIGetPrivateData</fct>
<fct gp="30" od="0" flag="1">SamrCloseHandle</fct>
<fct gp="30" od="0" flag="1">SamrEnumerateUsersInDomain</fct>
<fct gp="30" od="0" flag="1">SamrOpenDomain</fct>
<fct gp="30" od="0" flag="1">SamrOpenUser</fct>
<fct gp="30" od="0" flag="1">SamrQueryInformationUser</fct>
</fcts>
</lib>
<lib name="cabinet.dll" flag="1" gp="10" ti="1002" desc="Microsoft Cabinet File API">
<fcts>
<fct gp="10" od="03" flag="0">Extract</fct>
<fct gp="10" od="04" flag="0">DeleteExtractedFiles</fct>
<fct gp="10" od="10" flag="0">FCICreate</fct>
<fct gp="10" od="11" flag="0">FCIAddFile</fct>
<fct gp="10" od="12" flag="0">FCIFlushFolder</fct>
<fct gp="10" od="13" flag="0">FCIFlushCabinet</fct>
<fct gp="10" od="14" flag="0">FCIDestroy</fct>
<fct gp="10" od="20" flag="0">FDICreate</fct>
<fct gp="10" od="21" flag="0">FDIIsCabinet</fct>
<fct gp="10" od="22" flag="0">FDICopy</fct>
<fct gp="10" od="10" flag="0">FDIDestroy</fct>
<fct gp="10" od="24" flag="0">FDITruncateCabinet</fct>
<fct gp="10" od="35" flag="0">CloseCompressor</fct>
<fct gp="10" od="45" flag="0">CloseDecompressor</fct>
<fct gp="10" od="33" flag="0">Compress</fct>
<fct gp="10" od="30" flag="0">CreateCompressor</fct>
<fct gp="10" od="40" flag="0">CreateDecompressor</fct>
<fct gp="10" od="43" flag="0">Decompress</fct>
<fct gp="10" od="32" flag="0">QueryCompressorInformation</fct>
<fct gp="10" od="42" flag="0">QueryDecompressorInformation</fct>
<fct gp="10" od="34" flag="0">ResetCompressor</fct>
<fct gp="10" od="44" flag="0">ResetDecompressor</fct>
<fct gp="10" od="31" flag="0">SetCompressorInformation</fct>
<fct gp="10" od="41" flag="0">SetDecompressorInformation</fct>
</fcts>
</lib>
<lib name="rpcns4.dll" flag="1" gp="--" desc="Remote Procedure Call Name Service Client"></lib>
<lib name="Au3Zip.dll" flag="1" gp="--">
<fcts>
<fct gp="--" od="0" flag="1">AU3_GetPluginDetails</fct>
<fct gp="--" od="0" flag="1">WinDetectHiddenText</fct>
<fct gp="--" od="0" flag="1">WinSearchChildren</fct>
<fct gp="--" od="0" flag="1">WinTextMatchMode</fct>
<fct gp="--" od="0" flag="1">WinTitleMatchMode</fct>
<fct gp="--" od="0" flag="1">WinWaitDelay</fct>
<fct gp="--" od="0" flag="1">FileRecycle</fct>
<fct gp="--" od="0" flag="1">GUICtrlSendMsg</fct>
<fct gp="--" od="0" flag="1">GUICtrlSendToDummy</fct>
<fct gp="--" od="0" flag="1">GUICtrlSetBkColor</fct>
<fct gp="--" od="0" flag="1">GUICtrlSetColor</fct>
<fct gp="--" od="0" flag="1">GUICtrlSetCursor</fct>
<fct gp="--" od="0" flag="1">GUICtrlSetData</fct>
<fct gp="--" od="0" flag="1">Send</fct>
<fct gp="--" od="0" flag="1">SendKeyDelay</fct>
<fct gp="--" od="0" flag="1">SendKeyDownDelay</fct>
<fct gp="--" od="0" flag="1">SendKeepActive</fct>
<fct gp="--" od="0" flag="1">SendCommandID</fct>
<fct gp="--" od="0" flag="1">SendAttachMode</fct>
<fct gp="--" od="0" flag="1">SendCapslockMode</fct>
<fct gp="--" od="0" flag="1">ControlSend</fct>
<fct gp="--" od="0" flag="1">UDPSend</fct>
<fct gp="--" od="0" flag="1">_FTP_Command</fct>
<fct gp="--" od="0" flag="1">_INetSmtpMail</fct>
<fct gp="--" od="0" flag="1">_viExecCommand</fct>
<fct gp="--" od="0" flag="1">_WinAPI_BroadcastSystemMessage</fct>
<fct gp="--" od="0" flag="1" ti="1055">_WinAPI_SendMessageTimeout</fct>
</fcts>
</lib>
<lib name="rstrtmgr.dll" flag="1" gp="09" desc="Restart Manager library">
<fcts>
<fct gp="09" od="0" flag="1">RmAddFilter</fct>
<fct gp="09" od="0" flag="1">RmCancelCurrentTask</fct>
<fct gp="09" od="0" flag="1">RmEndSession</fct>
<fct gp="09" od="0" flag="1">RmGetFilterList</fct>
<fct gp="09" od="0" flag="1">RmGetList</fct>
<fct gp="09" od="0" flag="1">RmJoinSession</fct>
<fct gp="09" od="0" flag="1">RmRegisterResources</fct>
<fct gp="09" od="0" flag="1">RmRemoveFilter</fct>
<fct gp="09" od="0" flag="1">RmReserveHeap</fct>
<fct gp="09" od="0" flag="1">RmRestart</fct>
<fct gp="09" od="0" flag="1">RmShutdown</fct>
<fct gp="09" od="0" flag="1">RmStartSession</fct>
</fcts>
</lib>
<lib name="mfc42.dll" flag="0" gp="--" desc="MFCDLL Shared Library">
<fcts>
<fct gp="--" od="0275" flag="0">CArchiveStream</fct>
<fct gp="--" od="0276" flag="0">CAsyncMonikerFile</fct>
<fct gp="--" od="0278" flag="0">CAsyncSocket</fct>
<fct gp="--" od="0296" flag="0">CCommandLineInfo</fct>
<fct gp="07" od="0302" flag="0">CCriticalSection</fct>
<fct gp="--" od="0317" flag="0">CDatabase</fct>
<fct gp="--" od="0348" flag="0">CEvent:SECURITY_ATTRIBUTES</fct>
<fct gp="--" od="0354" flag="0">CFile</fct>
<fct gp="--" od="0690" flag="0">CInternetSession</fct>
<fct gp="--" od="0689" flag="0">CInternetFile</fct>
<fct gp="--" od="0688" flag="0">CInternetException</fct>
<fct gp="--" od="0687" flag="0">CInternetConnection</fct>
<fct gp="--" od="5303" flag="1">CWinThread::ProcessWndProcException</fct>
</fcts>
</lib>
<lib name="spoolss.dll" flag="0" gp="32" desc="Spooler SubSystem library">
<fcts>
<fct gp="32" od="---" flag="1">FindFirstPrinterChangeNotification</fct>
<fct gp="32" od="---" flag="1">FindNextPrinterChangeNotification</fct>
<fct gp="32" od="---" flag="1">FindClosePrinterChangeNotification</fct>
<fct gp="32" od="---" flag="0">EnumForms</fct>
<fct gp="32" od="---" flag="0">EnumJobs</fct>
<fct gp="32" od="---" flag="0">EnumMonitors</fct>
<fct gp="32" od="---" flag="0">EnumPerMachineConnections</fct>
<fct gp="32" od="---" flag="0">EnumPorts</fct>
<fct gp="32" od="---" flag="0">EnumPrintProcessorDatatypes</fct>
<fct gp="32" od="---" flag="0">EnumPrintProcessors</fct>
<fct gp="32" od="---" flag="0">EnumPrinterDataEx</fct>
<fct gp="32" od="---" flag="0">EnumPrinterData</fct>
<fct gp="32" od="---" flag="0">EnumPrinterDrivers</fct>
<fct gp="32" od="---" flag="0">EnumPrinterKey</fct>
<fct gp="32" od="---" flag="0">EnumPrinters</fct>
</fcts>
</lib>
<lib name="olepro32.dll" flag="0" gp="--" desc="OLEPRO32 library">
<fcts>
<fct gp="--" od="248" flag="0">OleIconToCursor</fct>
<fct gp="--" od="249" flag="0">OleCreatePropertyFrameIndirect</fct>
<fct gp="--" od="250" flag="0">OleCreatePropertyFrame</fct>
<fct gp="--" od="251" flag="0">OleLoadPicture</fct>
<fct gp="--" od="252" flag="0">OleCreatePictureIndirect</fct>
<fct gp="--" od="253" flag="0">OleCreateFontIndirect</fct>
<fct gp="--" od="254" flag="0">OleTranslateColor</fct>
<fct gp="--" od="255" flag="0">DllCanUnloadNow</fct>
</fcts>
</lib>
<lib name="dsound.dll" flag="0" gp="22">
<fcts>
<fct gp="22" od="001" flag="0">DirectSoundCreate</fct>
<fct gp="19" od="002" flag="0">DirectSoundEnumerate</fct>
<fct gp="19" od="003" flag="0">DirectSoundEnumerate</fct>
<fct gp="22" od="006" flag="0">DirectSoundCaptureCreate</fct>
<fct gp="19" od="007" flag="0">DirectSoundCaptureEnumerate</fct>
<fct gp="19" od="008" flag="0">DirectSoundCaptureEnumerate</fct>
</fcts>
</lib>
<lib name="cimwin32.dll" flag="0" gp="--">
<fcts>
<fct gp="30" od="---" flag="0">ConvertSecurityDescriptor</fct>
<fct gp="30" od="---" flag="0">GetSecurityDescriptor</fct>
<fct gp="30" od="---" flag="0">SetSecurityDescriptor</fct>
<fct gp="30" od="---" flag="0">ConvertSecurityDescriptor</fct>
<fct gp="30" od="---" flag="0">PasswordExpirationDate</fct>
<fct gp="30" od="---" flag="0">PasswordHistoryLength</fct>
<fct gp="30" od="---" flag="0">PasswordLastChanged</fct>
<fct gp="30" od="---" flag="0">PasswordMinimumLength</fct>
<fct gp="30" od="---" flag="0">MaxBadPasswordsAllowed</fct>
<fct gp="30" od="---" flag="0">MaxLogins</fct>
<fct gp="30" od="---" flag="0">MaxPasswordAge</fct>
<fct gp="30" od="---" flag="0">MinPasswordAge</fct>
<fct gp="30" od="---" flag="0">MinPasswordLength</fct>
</fcts>
</lib>
<lib name="" flag="0" gp="--">
<fcts>
<fct gp="30" flag="1" ti="">NPLogonNotify</fct>
<fct gp="04" flag="1" ti="1001">Crypt</fct>
<fct gp="04" flag="1" ti="1001">Decode</fct>
<fct gp="04" flag="1" ti="1001">Encode</fct>
<fct gp="04" flag="1" ti="1001">DecodeBlock</fct>
<fct gp="04" flag="1" ti="1001">decrypter</fct>
<fct gp="04" flag="1" ti="1001">FileEncrypt</fct>
<fct gp="04" flag="1" ti="1001">FileDecrypt</fct>
<fct gp="13" od="---" flag="1" ti="1001">Decompress</fct>
<fct gp="13" od="---" flag="1" ti="1001">Compress</fct>
<fct gp="13" od="---" flag="1" ti="1001">CompressBlock</fct>
<fct gp="11" od="---" flag="0">ReadFromEmbeddedResources</fct>
<fct gp="22" od="---" flag="0">GetKeyboardData</fct>
<fct gp="22" od="---" flag="0">ScreenCapture</fct>
<fct gp="03" od="---" flag="0">HttpListenerPrefixCollection</fct>
<fct gp="03" od="---" flag="0">HttpListener</fct>
<fct gp="02" od="---" flag="0">ShellExecuteWorker</fct>
<fct gp="02" od="---" flag="0">CmdBatNotificationStub</fct>
<fct gp="02" od="---" flag="0">SaferWorker</fct>
<fct gp="--" od="---" flag="0">GetVDMCurrentDirectoriesStub</fct>
<fct gp="02" od="---" flag="0">DoSHChangeNotify</fct>
<fct gp="02" od="---" flag="0">QueryFullProcessImageNameWStub</fct>
<fct gp="03" od="---" flag="0">WNetGetConnectionWStub</fct>
<fct gp="03" od="---" flag="0">WNetCancelConnection2WStub</fct>
<fct gp="03" od="---" flag="0">WNetAddConnection2WStub</fct>
<fct gp="30" od="---" flag="0">LookupAccountSidWStub</fct>
<fct gp="29" od="---" flag="0">FindFirstStreamWStub</fct>
<fct gp="29" od="---" flag="0">FindNextStreamWStub</fct>
<fct gp="02" od="---" flag="0">ExecCMD</fct>
<fct gp="05" od="---" flag="1" ti="1055">MemoryStream</fct>
<fct gp="01">Registry</fct>
<fct gp="01">RegistryHive</fct>
<fct gp="01">RegistryKey</fct>
<fct gp="01">RegistryKeyPermissionCheck</fct>
<fct gp="02">Process</fct>
<fct gp="02">ProcessStartInfo</fct>
<fct gp="02">PsGetProcessWow64Process</fct>
<fct ti="1132">FromBase64CharArray</fct>
<fct ti="1090">RelayCommand</fct>
<fct gp="--" od="--" flag="1">HalDispatchTable</fct>
<fct gp="--" od="--" flag="1">Navigate</fct>
<fct gp="--" od="--" flag="1">Navigate2</fct>
<fct gp="02" od="--" flag="1">ExecWB</fct>
<fct gp="--" od="--" flag="1">PasswordChangeNotif</fct>
<fct gp="14" od="--" flag="1" ti="1179">InstallHook</fct>
<fct gp="14" od="--" flag="1" ti="1179">SetHookWnd</fct>
<fct gp="14" od="--" flag="1" ti="1179">UninstallHook</fct>
<fct gp="04" od="--" flag="1">GetRandomFileName</fct>
<fct gp="02" od="--" flag="1">GetProcessesByName</fct>
<fct gp="03" od="--" flag="1">DownloadFileAsync</fct>
<fct gp="06" od="--" flag="0">SaveToFile</fct>
<fct gp="06" od="--" flag="0">WriteText</fct>
<fct gp="02" od="--" flag="0">Scripting.FileSystemObject</fct>
<fct gp="09" od="--" flag="1" ti="1543">ServiceDllUnloadOnStop</fct>
</fcts>
</lib>
</libs>
</xml>