clr.dll 4.0.30319.34014

Microsoft .NET Runtime Common Language Runtime - WorkStation

Microsoft Corporation

Size:
6.59 MB (6914192 bytes)
MD5:
06a0ebe7954cfa61716515859f62b973
SHA1:
f2bbf4dcc7f082363496efa9d4b238d40d6315c3
Path:
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
Legal Copyright:
© Microsoft Corporation. All rights reserved.
Internal Name:
clr.dll
File Version:
4.0.30319.34014 built by: FX45W81RTMGDR
Company Name:
Microsoft Corporation
Private Build:
DDBLD354
Comments:
Flavor=Retail
Product Name:
Microsoft® .NET Framework
Product Version:
4.0.30319.34014
File Description:
Microsoft .NET Runtime Common Language Runtime - WorkStation
Original Filename:
clr.dll
Digital Signature
Organization:
Microsoft Corporation
Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial Number:
33000000B011AF0A8BD03B9FDD000100
SHA-1 hash of the certificate:
108E2BA23632620C427C570B6D9DB51AC31387FE
Valid from:
2013-01-25 02:33:39
Valid to:
2014-04-25 02:33:39

Import Directory

Module MSVCR120_CLR0400.dll (119 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 __iob_func 0x1064A3FC 0x6479A2 (6584738) 0x1B5 (437) 0x64C3A0 (6603680)
2 __CxxFrameHandler3 0x1064A400 0x6479B0 (6584752) 0x176 (374) 0x64C3AE (6603694)
3 _CxxThrowException 0x1064A404 0x6479C6 (6584774) 0x15D (349) 0x64C3C4 (6603716)
4 _CItanh 0x1064A408 0x6479DC (6584796) 0x159 (345) 0x64C3DA (6603738)
5 _CIsinh 0x1064A40C 0x6479E6 (6584806) 0x156 (342) 0x64C3E4 (6603748)
6 _CIpow 0x1064A410 0x6479F0 (6584816) 0x154 (340) 0x64C3EE (6603758)
7 _CIlog10 0x1064A414 0x6479FA (6584826) 0x153 (339) 0x64C3F8 (6603768)
8 _CIlog 0x1064A418 0x647A06 (6584838) 0x152 (338) 0x64C404 (6603780)
9 _CIfmod 0x1064A41C 0x647A10 (6584848) 0x151 (337) 0x64C40E (6603790)
10 _CIexp 0x1064A420 0x647A1A (6584858) 0x150 (336) 0x64C418 (6603800)
11 _CIcosh 0x1064A424 0x647A24 (6584868) 0x14F (335) 0x64C422 (6603810)
12 _CIasin 0x1064A428 0x647A2E (6584878) 0x14B (331) 0x64C42C (6603820)
13 _CIacos 0x1064A42C 0x647A38 (6584888) 0x14A (330) 0x64C436 (6603830)
14 wcscpy_s 0x1064A430 0x647A42 (6584898) 0x68C (1676) 0x64C440 (6603840)
15 fclose 0x1064A434 0x647A4E (6584910) 0x5CE (1486) 0x64C44C (6603852)
16 fwrite 0x1064A438 0x647A58 (6584920) 0x5EE (1518) 0x64C456 (6603862)
17 fopen_s 0x1064A43C 0x647A62 (6584930) 0x5DA (1498) 0x64C460 (6603872)
18 _isnan 0x1064A440 0x647A6C (6584940) 0x34B (843) 0x64C46A (6603882)
19 vswprintf_s 0x1064A444 0x647A76 (6584950) 0x681 (1665) 0x64C474 (6603892)
20 strtoul 0x1064A448 0x647A84 (6584964) 0x667 (1639) 0x64C482 (6603906)
21 _snprintf 0x1064A44C 0x647A8E (6584974) 0x468 (1128) 0x64C48C (6603916)
22 memset 0x1064A450 0x647A9A (6584986) 0x62B (1579) 0x64C498 (6603928)
23 malloc 0x1064A454 0x647AA4 (6584996) 0x61C (1564) 0x64C4A2 (6603938)
24 isupper 0x1064A458 0x647AAE (6585006) 0x604 (1540) 0x64C4AC (6603948)
25 isxdigit 0x1064A45C 0x647AB8 (6585016) 0x612 (1554) 0x64C4B6 (6603958)
26 iswdigit 0x1064A460 0x647AC4 (6585028) 0x60A (1546) 0x64C4C2 (6603970)
27 iswxdigit 0x1064A464 0x647AD0 (6585040) 0x611 (1553) 0x64C4CE (6603982)
28 wmemcpy_s 0x1064A468 0x647ADC (6585052) 0x6A7 (1703) 0x64C4DA (6603994)
29 _wmakepath_s 0x1064A46C 0x647AE8 (6585064) 0x577 (1399) 0x64C4E6 (6604006)
30 _wsplitpath_s 0x1064A470 0x647AF8 (6585080) 0x599 (1433) 0x64C4F6 (6604022)
31 wcsrchr 0x1064A474 0x647B08 (6585096) 0x697 (1687) 0x64C506 (6604038)
32 wcscat_s 0x1064A478 0x647B12 (6585106) 0x687 (1671) 0x64C510 (6604048)
33 wcsncpy_s 0x1064A47C 0x647B1E (6585118) 0x694 (1684) 0x64C51C (6604060)
34 _vsnwprintf 0x1064A480 0x647B2A (6585130) 0x50F (1295) 0x64C528 (6604072)
35 _stricmp 0x1064A484 0x647B38 (6585144) 0x499 (1177) 0x64C536 (6604086)
36 memcpy 0x1064A488 0x647B44 (6585156) 0x627 (1575) 0x64C542 (6604098)
37 swprintf_s 0x1064A48C 0x647B4E (6585166) 0x669 (1641) 0x64C54C (6604108)
38 _purecall 0x1064A490 0x647B5C (6585180) 0x430 (1072) 0x64C55A (6604122)
39 _itow_s 0x1064A494 0x647B68 (6585192) 0x362 (866) 0x64C566 (6604134)
40 strlen 0x1064A498 0x647B72 (6585202) 0x658 (1624) 0x64C570 (6604144)
41 strcmp 0x1064A49C 0x647B7C (6585212) 0x650 (1616) 0x64C57A (6604154)
42 _wcsicmp 0x1064A4A0 0x647B86 (6585222) 0x531 (1329) 0x64C584 (6604164)
43 _except_handler4_common 0x1064A4A4 0x647B92 (6585234) 0x26F (623) 0x64C590 (6604176)
44 __clean_type_info_names_internal 0x1064A4A8 0x647BAC (6585260) 0x18E (398) 0x64C5AA (6604202)
45 ?terminate@@YAXXZ 0x1064A4AC 0x647BD0 (6585296) 0x13B (315) 0x64C5CE (6604238)
46 _onexit 0x1064A4B0 0x647BE4 (6585316) 0x421 (1057) 0x64C5E2 (6604258)
47 __dllonexit 0x1064A4B4 0x647BEE (6585326) 0x1AB (427) 0x64C5EC (6604268)
48 _calloc_crt 0x1064A4B8 0x647BFC (6585340) 0x22A (554) 0x64C5FA (6604282)
49 _unlock 0x1064A4BC 0x647C0A (6585354) 0x4E5 (1253) 0x64C608 (6604296)
50 _lock 0x1064A4C0 0x647C14 (6585364) 0x37B (891) 0x64C612 (6604306)
51 __crtTerminateProcess 0x1064A4C4 0x647C1C (6585372) 0x1A8 (424) 0x64C61A (6604314)
52 __crtUnhandledException 0x1064A4C8 0x647C34 (6585396) 0x1A9 (425) 0x64C632 (6604338)
53 _crt_debugger_hook 0x1064A4CC 0x647C4E (6585422) 0x24A (586) 0x64C64C (6604364)
54 ??1type_info@@UAE@XZ 0x1064A4D0 0x647C64 (6585444) 0x70 (112) 0x64C662 (6604386)
55 _initterm_e 0x1064A4D4 0x647C7C (6585468) 0x2FE (766) 0x64C67A (6604410)
56 _initterm 0x1064A4D8 0x647C8A (6585482) 0x2FD (765) 0x64C688 (6604424)
57 _malloc_crt 0x1064A4DC 0x647C96 (6585494) 0x38C (908) 0x64C694 (6604436)
58 free 0x1064A4E0 0x647CA4 (6585508) 0x5E3 (1507) 0x64C6A2 (6604450)
59 _amsg_exit 0x1064A4E4 0x647CAC (6585516) 0x214 (532) 0x64C6AA (6604458)
60 __CppXcptFilter 0x1064A4E8 0x647CBA (6585530) 0x171 (369) 0x64C6B8 (6604472)
61 bsearch 0x1064A4EC 0x647CCC (6585548) 0x5C0 (1472) 0x64C6CA (6604490)
62 wcstok_s 0x1064A4F0 0x647CD6 (6585558) 0x69E (1694) 0x64C6D4 (6604500)
63 strncat_s 0x1064A4F4 0x647CE2 (6585570) 0x65A (1626) 0x64C6E0 (6604512)
64 _putws 0x1064A4F8 0x647CEE (6585582) 0x438 (1080) 0x64C6EC (6604524)
65 _flushall 0x1064A4FC 0x647CF8 (6585592) 0x292 (658) 0x64C6F6 (6604534)
66 wprintf 0x1064A500 0x647D04 (6585604) 0x6A9 (1705) 0x64C702 (6604546)
67 fwprintf 0x1064A504 0x647D0E (6585614) 0x5EC (1516) 0x64C70C (6604556)
68 iswspace 0x1064A508 0x647D1A (6585626) 0x60F (1551) 0x64C718 (6604568)
69 _vswprintf_p 0x1064A50C 0x647D26 (6585638) 0x51B (1307) 0x64C724 (6604580)
70 _vsnwprintf_s 0x1064A510 0x647D36 (6585654) 0x511 (1297) 0x64C734 (6604596)
71 _vsnprintf_s 0x1064A514 0x647D46 (6585670) 0x50D (1293) 0x64C744 (6604612)
72 _wcsnicmp 0x1064A518 0x647D56 (6585686) 0x53B (1339) 0x64C754 (6604628)
73 _ltow_s 0x1064A51C 0x647D62 (6585698) 0x389 (905) 0x64C760 (6604640)
74 _time64 0x1064A520 0x647D6C (6585708) 0x4C9 (1225) 0x64C76A (6604650)
75 _wfopen 0x1064A524 0x647D76 (6585718) 0x56C (1388) 0x64C774 (6604660)
76 wcsnlen 0x1064A528 0x647D80 (6585728) 0x695 (1685) 0x64C77E (6604670)
77 memchr 0x1064A52C 0x647D8A (6585738) 0x625 (1573) 0x64C788 (6604680)
78 atoi 0x1064A530 0x647D94 (6585748) 0x5BE (1470) 0x64C792 (6604690)
79 wcsncmp 0x1064A534 0x647D9C (6585756) 0x692 (1682) 0x64C79A (6604698)
80 isalpha 0x1064A538 0x647DA6 (6585766) 0x5FB (1531) 0x64C7A4 (6604708)
81 floor 0x1064A53C 0x647DB0 (6585776) 0x5D7 (1495) 0x64C7AE (6604718)
82 fflush 0x1064A540 0x647DB8 (6585784) 0x5D1 (1489) 0x64C7B6 (6604726)
83 ceil 0x1064A544 0x647DC2 (6585794) 0x5C4 (1476) 0x64C7C0 (6604736)
84 _copysign 0x1064A548 0x647DCA (6585802) 0x23F (575) 0x64C7C8 (6604744)
85 modf 0x1064A54C 0x647DD6 (6585814) 0x62C (1580) 0x64C7D4 (6604756)
86 towupper 0x1064A550 0x647DDE (6585822) 0x676 (1654) 0x64C7DC (6604764)
87 swscanf_s 0x1064A554 0x647DEA (6585834) 0x66B (1643) 0x64C7E8 (6604776)
88 towlower 0x1064A558 0x647DF6 (6585846) 0x675 (1653) 0x64C7F4 (6604788)
89 iswupper 0x1064A55C 0x647E02 (6585858) 0x610 (1552) 0x64C800 (6604800)
90 _wtoi 0x1064A560 0x647E0E (6585870) 0x5A8 (1448) 0x64C80C (6604812)
91 wcschr 0x1064A564 0x647E16 (6585878) 0x688 (1672) 0x64C814 (6604820)
92 toupper 0x1064A568 0x647E20 (6585888) 0x674 (1652) 0x64C81E (6604830)
93 iswascii 0x1064A56C 0x647E2A (6585898) 0x607 (1543) 0x64C828 (6604840)
94 wcsncat_s 0x1064A570 0x647E36 (6585910) 0x691 (1681) 0x64C834 (6604852)
95 _snwprintf_s 0x1064A574 0x647E42 (6585922) 0x474 (1140) 0x64C840 (6604864)
96 printf 0x1064A578 0x647E52 (6585938) 0x62F (1583) 0x64C850 (6604880)
97 strrchr 0x1064A57C 0x647E5C (6585948) 0x660 (1632) 0x64C85A (6604890)
98 _errno 0x1064A580 0x647E66 (6585958) 0x26C (620) 0x64C864 (6604900)
99 sscanf_s 0x1064A584 0x647E70 (6585968) 0x64C (1612) 0x64C86E (6604910)
100 isdigit 0x1064A588 0x647E7C (6585980) 0x5FD (1533) 0x64C87A (6604922)
101 _strnicmp 0x1064A58C 0x647E86 (6585990) 0x4A3 (1187) 0x64C884 (6604932)
102 strnlen 0x1064A590 0x647E92 (6586002) 0x65E (1630) 0x64C890 (6604944)
103 wcstoul 0x1064A594 0x647E9C (6586012) 0x6A2 (1698) 0x64C89A (6604954)
104 atol 0x1064A598 0x647EA6 (6586022) 0x5BF (1471) 0x64C8A4 (6604964)
105 strncpy_s 0x1064A59C 0x647EAE (6586030) 0x65D (1629) 0x64C8AC (6604972)
106 strcat_s 0x1064A5A0 0x647EBA (6586042) 0x64E (1614) 0x64C8B8 (6604984)
107 wcsstr 0x1064A5A4 0x647EC6 (6586054) 0x69B (1691) 0x64C8C4 (6604996)
108 _wcslwr_s 0x1064A5A8 0x647ED0 (6586064) 0x537 (1335) 0x64C8CE (6605006)
109 sprintf_s 0x1064A5AC 0x647EDC (6586076) 0x648 (1608) 0x64C8DA (6605018)
110 memcpy_s 0x1064A5B0 0x647EE8 (6586088) 0x628 (1576) 0x64C8E6 (6605030)
111 strcpy_s 0x1064A5B4 0x647EF4 (6586100) 0x653 (1619) 0x64C8F2 (6605042)
112 strncmp 0x1064A5B8 0x647F00 (6586112) 0x65B (1627) 0x64C8FE (6605054)
113 fprintf 0x1064A5BC 0x647F0A (6586122) 0x5DB (1499) 0x64C908 (6605064)
114 memmove 0x1064A5C0 0x647F14 (6586132) 0x629 (1577) 0x64C912 (6605074)
115 qsort 0x1064A5C4 0x647F1E (6586142) 0x636 (1590) 0x64C91C (6605084)
116 _controlfp_s 0x1064A5C8 0x647F26 (6586150) 0x23E (574) 0x64C924 (6605092)
117 _vsnprintf 0x1064A5CC 0x647F36 (6586166) 0x509 (1289) 0x64C934 (6605108)
118 strchr 0x1064A5D0 0x647F44 (6586180) 0x64F (1615) 0x64C942 (6605122)
119 memcmp 0x1064A5D4 0x647F4E (6586190) 0x626 (1574) 0x64C94C (6605132)
Module KERNEL32.dll (254 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 GetLocaleInfoW 0x1064A000 0x64665A (6579802) 0x26E (622) 0x64B058 (6598744)
2 EnumTimeFormatsW 0x1064A004 0x64666C (6579820) 0x164 (356) 0x64B06A (6598762)
3 EnumCalendarInfoExW 0x1064A008 0x646680 (6579840) 0x144 (324) 0x64B07E (6598782)
4 GetSystemDefaultUILanguage 0x1064A00C 0x646696 (6579862) 0x2E9 (745) 0x64B094 (6598804)
5 GetDateFormatW 0x1064A010 0x6466B4 (6579892) 0x22D (557) 0x64B0B2 (6598834)
6 LoadLibraryW 0x1064A014 0x6466C6 (6579910) 0x3C3 (963) 0x64B0C4 (6598852)
7 GetNativeSystemInfo 0x1064A018 0x6466D6 (6579926) 0x28E (654) 0x64B0D4 (6598868)
8 QueryActCtxW 0x1064A01C 0x6466EC (6579948) 0x431 (1073) 0x64B0EA (6598890)
9 CreateProcessW 0x1064A020 0x6466FC (6579964) 0xEF (239) 0x64B0FA (6598906)
10 FindNextFileW 0x1064A024 0x64670E (6579982) 0x19B (411) 0x64B10C (6598924)
11 GetEnvironmentVariableA 0x1064A028 0x64671E (6579998) 0x241 (577) 0x64B11C (6598940)
12 LockResource 0x1064A02C 0x646738 (6580024) 0x3D8 (984) 0x64B136 (6598966)
13 SizeofResource 0x1064A030 0x646748 (6580040) 0x55E (1374) 0x64B146 (6598982)
14 LoadResource 0x1064A034 0x64675A (6580058) 0x3C6 (966) 0x64B158 (6599000)
15 FindResourceExW 0x1064A038 0x64676A (6580074) 0x1A3 (419) 0x64B168 (6599016)
16 GetTickCount64 0x1064A03C 0x64677C (6580092) 0x311 (785) 0x64B17A (6599034)
17 IsWow64Process 0x1064A040 0x64678E (6580110) 0x392 (914) 0x64B18C (6599052)
18 GetWindowsDirectoryW 0x1064A044 0x6467A0 (6580128) 0x32E (814) 0x64B19E (6599070)
19 ReleaseActCtx 0x1064A048 0x6467B8 (6580152) 0x495 (1173) 0x64B1B6 (6599094)
20 DeactivateActCtx 0x1064A04C 0x6467C8 (6580168) 0x110 (272) 0x64B1C6 (6599110)
21 ActivateActCtx 0x1064A050 0x6467DC (6580188) 0x3 (3) 0x64B1DA (6599130)
22 CreateActCtxW 0x1064A054 0x6467EE (6580206) 0xBC (188) 0x64B1EC (6599148)
23 GetCalendarInfoW 0x1064A058 0x6467FE (6580222) 0x1D7 (471) 0x64B1FC (6599164)
24 GetSystemDirectoryW 0x1064A05C 0x646812 (6580242) 0x2EB (747) 0x64B210 (6599184)
25 FindFirstFileW 0x1064A060 0x646828 (6580264) 0x18F (399) 0x64B226 (6599206)
26 LCMapStringW 0x1064A064 0x64683A (6580282) 0x3B1 (945) 0x64B238 (6599224)
27 GetACP 0x1064A068 0x64684A (6580298) 0x1BE (446) 0x64B248 (6599240)
28 IsDBCSLeadByte 0x1064A06C 0x646854 (6580308) 0x381 (897) 0x64B252 (6599250)
29 GetCPInfo 0x1064A070 0x646866 (6580326) 0x1CD (461) 0x64B264 (6599268)
30 SetConsoleTitleW 0x1064A074 0x646872 (6580338) 0x4EA (1258) 0x64B270 (6599280)
31 AllocConsole 0x1064A078 0x646886 (6580358) 0x16 (22) 0x64B284 (6599300)
32 FreeConsole 0x1064A07C 0x646896 (6580374) 0x1B5 (437) 0x64B294 (6599316)
33 GetTempFileNameW 0x1064A080 0x6468A4 (6580388) 0x2FF (767) 0x64B2A2 (6599330)
34 GetTempPathW 0x1064A084 0x6468B8 (6580408) 0x301 (769) 0x64B2B6 (6599350)
35 SetThreadIdealProcessor 0x1064A088 0x6468C8 (6580424) 0x53D (1341) 0x64B2C6 (6599366)
36 SetThreadAffinityMask 0x1064A08C 0x6468E2 (6580450) 0x538 (1336) 0x64B2E0 (6599392)
37 MoveFileExW 0x1064A090 0x6468FA (6580474) 0x3E5 (997) 0x64B2F8 (6599416)
38 MoveFileW 0x1064A094 0x646908 (6580488) 0x3E8 (1000) 0x64B306 (6599430)
39 FlushFileBuffers 0x1064A098 0x646914 (6580500) 0x1AD (429) 0x64B312 (6599442)
40 CompareFileTime 0x1064A09C 0x646928 (6580520) 0xA3 (163) 0x64B326 (6599462)
41 GetFileTime 0x1064A0A0 0x64693A (6580538) 0x256 (598) 0x64B338 (6599480)
42 ResetWriteWatch 0x1064A0A4 0x646948 (6580552) 0x4B0 (1200) 0x64B346 (6599494)
43 GetWriteWatch 0x1064A0A8 0x64695A (6580570) 0x32F (815) 0x64B358 (6599512)
44 CreateMemoryResourceNotification 0x1064A0AC 0x64696A (6580586) 0xE1 (225) 0x64B368 (6599528)
45 OutputDebugStringA 0x1064A0B0 0x64698E (6580622) 0x414 (1044) 0x64B38C (6599564)
46 ReadProcessMemory 0x1064A0B4 0x6469A4 (6580644) 0x45B (1115) 0x64B3A2 (6599586)
47 GetQueuedCompletionStatus 0x1064A0B8 0x6469B8 (6580664) 0x2D0 (720) 0x64B3B6 (6599606)
48 PostQueuedCompletionStatus 0x1064A0BC 0x6469D4 (6580692) 0x41F (1055) 0x64B3D2 (6599634)
49 CreateIoCompletionPort 0x1064A0C0 0x6469F2 (6580722) 0xDB (219) 0x64B3F0 (6599664)
50 CompareStringW 0x1064A0C4 0x646A0C (6580748) 0xA7 (167) 0x64B40A (6599690)
51 GetUserDefaultUILanguage 0x1064A0C8 0x646A1E (6580766) 0x31D (797) 0x64B41C (6599708)
52 EncodePointer 0x1064A0CC 0x646A3A (6580794) 0x13C (316) 0x64B438 (6599736)
53 DecodePointer 0x1064A0D0 0x646A4A (6580810) 0x117 (279) 0x64B448 (6599752)
54 MapViewOfFile 0x1064A0D4 0x646A5A (6580826) 0x3DB (987) 0x64B458 (6599768)
55 RemoveDirectoryW 0x1064A0D8 0x646A6A (6580842) 0x4A1 (1185) 0x64B468 (6599784)
56 SetFileTime 0x1064A0DC 0x646A7E (6580862) 0x50C (1292) 0x64B47C (6599804)
57 FindResourceW 0x1064A0E0 0x646A8C (6580876) 0x1A4 (420) 0x64B48A (6599818)
58 CopyFileW 0x1064A0E4 0x646A9C (6580892) 0xB9 (185) 0x64B49A (6599834)
59 WritePrivateProfileStringW 0x1064A0E8 0x646AA8 (6580904) 0x5F7 (1527) 0x64B4A6 (6599846)
60 DeviceIoControl 0x1064A0EC 0x646AC6 (6580934) 0x12D (301) 0x64B4C4 (6599876)
61 GetLocalTime 0x1064A0F0 0x646AD8 (6580952) 0x26B (619) 0x64B4D6 (6599894)
62 GetVolumeInformationW 0x1064A0F4 0x646AE8 (6580968) 0x326 (806) 0x64B4E6 (6599910)
63 SetFileAttributesW 0x1064A0F8 0x646B00 (6580992) 0x503 (1283) 0x64B4FE (6599934)
64 DosDateTimeToFileTime 0x1064A0FC 0x646B16 (6581014) 0x134 (308) 0x64B514 (6599956)
65 LocalFileTimeToFileTime 0x1064A100 0x646B2E (6581038) 0x3CB (971) 0x64B52C (6599980)
66 CreateFileA 0x1064A104 0x646B48 (6581064) 0xCE (206) 0x64B546 (6600006)
67 lstrlenA 0x1064A108 0x646B56 (6581078) 0x61C (1564) 0x64B554 (6600020)
68 GetWindowsDirectoryA 0x1064A10C 0x646B62 (6581090) 0x32D (813) 0x64B560 (6600032)
69 GetDiskFreeSpaceA 0x1064A110 0x646B7A (6581114) 0x232 (562) 0x64B578 (6600056)
70 GetTimeFormatW 0x1064A114 0x646B8E (6581134) 0x315 (789) 0x64B58C (6600076)
71 FlushViewOfFile 0x1064A118 0x646BA0 (6581152) 0x1B0 (432) 0x64B59E (6600094)
72 GetVersionExA 0x1064A11C 0x646BB2 (6581170) 0x322 (802) 0x64B5B0 (6600112)
73 LoadLibraryA 0x1064A120 0x646BC2 (6581186) 0x3C0 (960) 0x64B5C0 (6600128)
74 LocalAlloc 0x1064A124 0x646BD2 (6581202) 0x3C9 (969) 0x64B5D0 (6600144)
75 HeapReAlloc 0x1064A128 0x646BE0 (6581216) 0x354 (852) 0x64B5DE (6600158)
76 DeleteFileA 0x1064A12C 0x646BEE (6581230) 0x120 (288) 0x64B5EC (6600172)
77 CopyFileA 0x1064A130 0x646BFC (6581244) 0xB4 (180) 0x64B5FA (6600186)
78 GetFileAttributesA 0x1064A134 0x646C08 (6581256) 0x249 (585) 0x64B606 (6600198)
79 SetFileAttributesA 0x1064A138 0x646C1E (6581278) 0x500 (1280) 0x64B61C (6600220)
80 CreateDirectoryA 0x1064A13C 0x646C34 (6581300) 0xC1 (193) 0x64B632 (6600242)
81 RemoveDirectoryA 0x1064A140 0x646C48 (6581320) 0x49E (1182) 0x64B646 (6600262)
82 LoadLibraryExA 0x1064A144 0x646C5C (6581340) 0x3C1 (961) 0x64B65A (6600282)
83 FindFirstFileA 0x1064A148 0x646C6E (6581358) 0x188 (392) 0x64B66C (6600300)
84 FindNextFileA 0x1064A14C 0x646C80 (6581376) 0x199 (409) 0x64B67E (6600318)
85 GetVersion 0x1064A150 0x646C90 (6581392) 0x321 (801) 0x64B68E (6600334)
86 InterlockedCompareExchange 0x1064A154 0x646C9E (6581406) 0x36B (875) 0x64B69C (6600348)
87 GetOEMCP 0x1064A158 0x646CBC (6581436) 0x2A0 (672) 0x64B6BA (6600378)
88 AreFileApisANSI 0x1064A15C 0x646CC8 (6581448) 0x2C (44) 0x64B6C6 (6600390)
89 GetFullPathNameA 0x1064A160 0x646CDA (6581466) 0x25F (607) 0x64B6D8 (6600408)
90 SetEndOfFile 0x1064A164 0x646CEE (6581486) 0x4F6 (1270) 0x64B6EC (6600428)
91 GetSystemDirectoryA 0x1064A168 0x646CFE (6581502) 0x2EA (746) 0x64B6FC (6600444)
92 InterlockedExchange 0x1064A16C 0x646D14 (6581524) 0x36E (878) 0x64B712 (6600466)
93 CreateHardLinkW 0x1064A170 0x646D2A (6581546) 0xDA (218) 0x64B728 (6600488)
94 SetPriorityClass 0x1064A174 0x646D3C (6581564) 0x521 (1313) 0x64B73A (6600506)
95 SetFilePointerEx 0x1064A178 0x646D50 (6581584) 0x509 (1289) 0x64B74E (6600526)
96 GetStringTypeW 0x1064A17C 0x646D64 (6581604) 0x2E2 (738) 0x64B762 (6600546)
97 IsDBCSLeadByteEx 0x1064A180 0x646D76 (6581622) 0x382 (898) 0x64B774 (6600564)
98 ExitThread 0x1064A184 0x646D8A (6581642) 0x16E (366) 0x64B788 (6600584)
99 OpenFileMappingW 0x1064A188 0x646D98 (6581656) 0x400 (1024) 0x64B796 (6600598)
100 SearchPathW 0x1064A18C 0x646DAC (6581676) 0x4BF (1215) 0x64B7AA (6600618)
101 IsValidLocale 0x1064A190 0x646DBA (6581690) 0x38F (911) 0x64B7B8 (6600632)
102 GetTimeZoneInformation 0x1064A194 0x646DCA (6581706) 0x317 (791) 0x64B7C8 (6600648)
103 GetNLSVersionEx 0x1064A198 0x646DE4 (6581732) 0x283 (643) 0x64B7E2 (6600674)
104 GetConsoleTitleW 0x1064A19C 0x646DF6 (6581750) 0x212 (530) 0x64B7F4 (6600692)
105 GetVersionExW 0x1064A1A0 0x646E0A (6581770) 0x323 (803) 0x64B808 (6600712)
106 GetFileSizeEx 0x1064A1A4 0x646E1A (6581786) 0x255 (597) 0x64B818 (6600728)
107 MultiByteToWideChar 0x1064A1A8 0x646E2A (6581802) 0x3EC (1004) 0x64B828 (6600744)
108 FormatMessageW 0x1064A1AC 0x646E40 (6581824) 0x1B4 (436) 0x64B83E (6600766)
109 ExitProcess 0x1064A1B0 0x646E52 (6581842) 0x16D (365) 0x64B850 (6600784)
110 LoadLibraryExW 0x1064A1B4 0x646E60 (6581856) 0x3C2 (962) 0x64B85E (6600798)
111 GetModuleFileNameW 0x1064A1B8 0x646E72 (6581874) 0x27D (637) 0x64B870 (6600816)
112 GetModuleHandleExW 0x1064A1BC 0x646E88 (6581896) 0x280 (640) 0x64B886 (6600838)
113 FindClose 0x1064A1C0 0x646E9E (6581918) 0x184 (388) 0x64B89C (6600860)
114 GetLastError 0x1064A1C4 0x646EAA (6581930) 0x26A (618) 0x64B8A8 (6600872)
115 GetModuleHandleW 0x1064A1C8 0x646EBA (6581946) 0x281 (641) 0x64B8B8 (6600888)
116 CloseHandle 0x1064A1CC 0x646ECE (6581966) 0x8E (142) 0x64B8CC (6600908)
117 GetCurrentProcess 0x1064A1D0 0x646EDC (6581980) 0x223 (547) 0x64B8DA (6600922)
118 WaitForSingleObject 0x1064A1D4 0x646EF0 (6582000) 0x5BB (1467) 0x64B8EE (6600942)
119 ReleaseMutex 0x1064A1D8 0x646F06 (6582022) 0x497 (1175) 0x64B904 (6600964)
120 SetEvent 0x1064A1DC 0x646F16 (6582038) 0x4FC (1276) 0x64B914 (6600980)
121 ReleaseSemaphore 0x1064A1E0 0x646F22 (6582050) 0x49B (1179) 0x64B920 (6600992)
122 WaitForMultipleObjectsEx 0x1064A1E4 0x646F36 (6582070) 0x5BA (1466) 0x64B934 (6601012)
123 CreateMutexW 0x1064A1E8 0x646F52 (6582098) 0xE5 (229) 0x64B950 (6601040)
124 CreateEventW 0x1064A1EC 0x646F62 (6582114) 0xCA (202) 0x64B960 (6601056)
125 CreateSemaphoreW 0x1064A1F0 0x646F72 (6582130) 0xF5 (245) 0x64B970 (6601072)
126 LocalFree 0x1064A1F4 0x646F86 (6582150) 0x3CD (973) 0x64B984 (6601092)
127 GetCurrentProcessId 0x1064A1F8 0x646F92 (6582162) 0x224 (548) 0x64B990 (6601104)
128 OpenProcess 0x1064A1FC 0x646FA8 (6582184) 0x408 (1032) 0x64B9A6 (6601126)
129 GetProcAddress 0x1064A200 0x646FB6 (6582198) 0x2B5 (693) 0x64B9B4 (6601140)
130 ProcessIdToSessionId 0x1064A204 0x646FC8 (6582216) 0x42B (1067) 0x64B9C6 (6601158)
131 GetCurrentThreadId 0x1064A208 0x646FE0 (6582240) 0x228 (552) 0x64B9DE (6601182)
132 GetTickCount 0x1064A20C 0x646FF6 (6582262) 0x310 (784) 0x64B9F4 (6601204)
133 SetConsoleCtrlHandler 0x1064A210 0x647006 (6582278) 0x4CF (1231) 0x64BA04 (6601220)
134 DebugBreak 0x1064A214 0x64701E (6582302) 0x114 (276) 0x64BA1C (6601244)
135 CreateThread 0x1064A218 0x64702C (6582316) 0x101 (257) 0x64BA2A (6601258)
136 SetLastError 0x1064A21C 0x64703C (6582332) 0x517 (1303) 0x64BA3A (6601274)
137 GetCommandLineW 0x1064A220 0x64704C (6582348) 0x1E3 (483) 0x64BA4A (6601290)
138 GetCurrentDirectoryW 0x1064A224 0x64705E (6582366) 0x21D (541) 0x64BA5C (6601308)
139 lstrlenW 0x1064A228 0x647076 (6582390) 0x61D (1565) 0x64BA74 (6601332)
140 GetFullPathNameW 0x1064A22C 0x647082 (6582402) 0x262 (610) 0x64BA80 (6601344)
141 GetShortPathNameW 0x1064A230 0x647096 (6582422) 0x2D5 (725) 0x64BA94 (6601364)
142 GetLongPathNameW 0x1064A234 0x6470AA (6582442) 0x277 (631) 0x64BAA8 (6601384)
143 GetSystemInfo 0x1064A238 0x6470BE (6582462) 0x2EE (750) 0x64BABC (6601404)
144 TlsGetValue 0x1064A23C 0x6470CE (6582478) 0x583 (1411) 0x64BACC (6601420)
145 GetUserDefaultLangID 0x1064A240 0x6470DC (6582492) 0x31B (795) 0x64BADA (6601434)
146 GetEnvironmentVariableW 0x1064A244 0x6470F4 (6582516) 0x242 (578) 0x64BAF2 (6601458)
147 SetEnvironmentVariableW 0x1064A248 0x64710E (6582542) 0x4FA (1274) 0x64BB0C (6601484)
148 GetProcessId 0x1064A24C 0x647128 (6582568) 0x2BC (700) 0x64BB26 (6601510)
149 GetOverlappedResult 0x1064A250 0x647138 (6582584) 0x2A1 (673) 0x64BB36 (6601526)
150 CancelIo 0x1064A254 0x64714E (6582606) 0x79 (121) 0x64BB4C (6601548)
151 GetProcessHeap 0x1064A258 0x64715A (6582618) 0x2BA (698) 0x64BB58 (6601560)
152 HeapFree 0x1064A25C 0x64716C (6582636) 0x351 (849) 0x64BB6A (6601578)
153 InterlockedPushEntrySList 0x1064A260 0x647178 (6582648) 0x373 (883) 0x64BB76 (6601590)
154 WriteFile 0x1064A264 0x647194 (6582676) 0x5F1 (1521) 0x64BB92 (6601618)
155 GetStdHandle 0x1064A268 0x6471A0 (6582688) 0x2DD (733) 0x64BB9E (6601630)
156 WideCharToMultiByte 0x1064A26C 0x6471B0 (6582704) 0x5DD (1501) 0x64BBAE (6601646)
157 GetConsoleOutputCP 0x1064A270 0x6471C6 (6582726) 0x20C (524) 0x64BBC4 (6601668)
158 GetFileInformationByHandle 0x1064A274 0x6471DC (6582748) 0x250 (592) 0x64BBDA (6601690)
159 GetFileAttributesW 0x1064A278 0x6471FA (6582778) 0x24E (590) 0x64BBF8 (6601720)
160 CreateDirectoryW 0x1064A27C 0x647210 (6582800) 0xC6 (198) 0x64BC0E (6601742)
161 GetCurrentThread 0x1064A280 0x647224 (6582820) 0x227 (551) 0x64BC22 (6601762)
162 GetLogicalProcessorInformation 0x1064A284 0x647238 (6582840) 0x272 (626) 0x64BC36 (6601782)
163 GetProcessAffinityMask 0x1064A288 0x64725A (6582874) 0x2B6 (694) 0x64BC58 (6601816)
164 SetProcessAffinityMask 0x1064A28C 0x647274 (6582900) 0x522 (1314) 0x64BC72 (6601842)
165 SetThreadLocale 0x1064A290 0x64728E (6582926) 0x540 (1344) 0x64BC8C (6601868)
166 MapViewOfFileEx 0x1064A294 0x6472A0 (6582944) 0x3DC (988) 0x64BC9E (6601886)
167 VirtualQuery 0x1064A298 0x6472B2 (6582962) 0x5B3 (1459) 0x64BCB0 (6601904)
168 UnmapViewOfFile 0x1064A29C 0x6472C2 (6582978) 0x593 (1427) 0x64BCC0 (6601920)
169 SetErrorMode 0x1064A2A0 0x6472D4 (6582996) 0x4FB (1275) 0x64BCD2 (6601938)
170 FreeLibrary 0x1064A2A4 0x6472E4 (6583012) 0x1B8 (440) 0x64BCE2 (6601954)
171 FreeLibraryAndExitThread 0x1064A2A8 0x6472F2 (6583026) 0x1B9 (441) 0x64BCF0 (6601968)
172 IsDebuggerPresent 0x1064A2AC 0x64730E (6583054) 0x383 (899) 0x64BD0C (6601996)
173 RaiseException 0x1064A2B0 0x647322 (6583074) 0x448 (1096) 0x64BD20 (6602016)
174 FlushProcessWriteBuffers 0x1064A2B4 0x647334 (6583092) 0x1AF (431) 0x64BD32 (6602034)
175 QueryPerformanceCounter 0x1064A2B8 0x647350 (6583120) 0x43C (1084) 0x64BD4E (6602062)
176 GetStringTypeExW 0x1064A2BC 0x64736A (6583146) 0x2E1 (737) 0x64BD68 (6602088)
177 CreateFileMappingW 0x1064A2C0 0x64737E (6583166) 0xD3 (211) 0x64BD7C (6602108)
178 GetFileSize 0x1064A2C4 0x647394 (6583188) 0x254 (596) 0x64BD92 (6602130)
179 GlobalMemoryStatusEx 0x1064A2C8 0x6473A2 (6583202) 0x342 (834) 0x64BDA0 (6602144)
180 TlsSetValue 0x1064A2CC 0x6473BA (6583226) 0x584 (1412) 0x64BDB8 (6602168)
181 GetModuleHandleA 0x1064A2D0 0x6473C8 (6583240) 0x27E (638) 0x64BDC6 (6602182)
182 TlsAlloc 0x1064A2D4 0x6473DC (6583260) 0x581 (1409) 0x64BDDA (6602202)
183 TlsFree 0x1064A2D8 0x6473E8 (6583272) 0x582 (1410) 0x64BDE6 (6602214)
184 HeapAlloc 0x1064A2DC 0x6473F2 (6583282) 0x34D (845) 0x64BDF0 (6602224)
185 FlushInstructionCache 0x1064A2E0 0x6473FE (6583294) 0x1AE (430) 0x64BDFC (6602236)
186 CreateToolhelp32Snapshot 0x1064A2E4 0x647416 (6583318) 0x10A (266) 0x64BE14 (6602260)
187 Process32FirstW 0x1064A2E8 0x647432 (6583346) 0x428 (1064) 0x64BE30 (6602288)
188 Process32NextW 0x1064A2EC 0x647444 (6583364) 0x42A (1066) 0x64BE42 (6602306)
189 CreateFileW 0x1064A2F0 0x647456 (6583382) 0xD6 (214) 0x64BE54 (6602324)
190 WaitNamedPipeW 0x1064A2F4 0x647464 (6583396) 0x5C2 (1474) 0x64BE62 (6602338)
191 SetNamedPipeHandleState 0x1064A2F8 0x647476 (6583414) 0x520 (1312) 0x64BE74 (6602356)
192 OpenEventW 0x1064A2FC 0x647490 (6583440) 0x3FC (1020) 0x64BE8E (6602382)
193 TransactNamedPipe 0x1064A300 0x64749E (6583454) 0x586 (1414) 0x64BE9C (6602396)
194 VirtualAlloc 0x1064A304 0x6474B2 (6583474) 0x5AB (1451) 0x64BEB0 (6602416)
195 VirtualFree 0x1064A308 0x6474C2 (6583490) 0x5AE (1454) 0x64BEC0 (6602432)
196 VirtualProtect 0x1064A30C 0x6474D0 (6583504) 0x5B1 (1457) 0x64BECE (6602446)
197 HeapCreate 0x1064A310 0x6474E2 (6583522) 0x34F (847) 0x64BEE0 (6602464)
198 HeapDestroy 0x1064A314 0x6474F0 (6583536) 0x350 (848) 0x64BEEE (6602478)
199 HeapValidate 0x1064A318 0x6474FE (6583550) 0x359 (857) 0x64BEFC (6602492)
200 SleepEx 0x1064A31C 0x64750E (6583566) 0x562 (1378) 0x64BF0C (6602508)
201 SwitchToThread 0x1064A320 0x647518 (6583576) 0x56A (1386) 0x64BF16 (6602518)
202 GetEnvironmentStringsW 0x1064A324 0x64752A (6583594) 0x240 (576) 0x64BF28 (6602536)
203 FreeEnvironmentStringsW 0x1064A328 0x647544 (6583620) 0x1B7 (439) 0x64BF42 (6602562)
204 DuplicateHandle 0x1064A32C 0x64755E (6583646) 0x139 (313) 0x64BF5C (6602588)
205 QueueUserAPC 0x1064A330 0x647570 (6583664) 0x446 (1094) 0x64BF6E (6602606)
206 WaitForSingleObjectEx 0x1064A334 0x647580 (6583680) 0x5BC (1468) 0x64BF7E (6602622)
207 SetThreadPriority 0x1064A338 0x647598 (6583704) 0x542 (1346) 0x64BF96 (6602646)
208 GetThreadPriority 0x1064A33C 0x6475AC (6583724) 0x30B (779) 0x64BFAA (6602666)
209 GetThreadContext 0x1064A340 0x6475C0 (6583744) 0x302 (770) 0x64BFBE (6602686)
210 SuspendThread 0x1064A344 0x6475D4 (6583764) 0x568 (1384) 0x64BFD2 (6602706)
211 ResumeThread 0x1064A348 0x6475E4 (6583780) 0x4B5 (1205) 0x64BFE2 (6602722)
212 SetThreadContext 0x1064A34C 0x6475F4 (6583796) 0x539 (1337) 0x64BFF2 (6602738)
213 SignalObjectAndWait 0x1064A350 0x647608 (6583816) 0x55D (1373) 0x64C006 (6602758)
214 Sleep 0x1064A354 0x64761E (6583838) 0x55F (1375) 0x64C01C (6602780)
215 SetThreadStackGuarantee 0x1064A358 0x647626 (6583846) 0x544 (1348) 0x64C024 (6602788)
216 IsThreadAFiber 0x1064A35C 0x647640 (6583872) 0x38A (906) 0x64C03E (6602814)
217 QueryPerformanceFrequency 0x1064A360 0x647652 (6583890) 0x43D (1085) 0x64C050 (6602832)
218 GetThreadTimes 0x1064A364 0x64766E (6583918) 0x30E (782) 0x64C06C (6602860)
219 SetFilePointer 0x1064A368 0x647680 (6583936) 0x508 (1288) 0x64C07E (6602878)
220 ReadFile 0x1064A36C 0x647692 (6583954) 0x458 (1112) 0x64C090 (6602896)
221 GetFileAttributesExW 0x1064A370 0x64769E (6583966) 0x24B (587) 0x64C09C (6602908)
222 TerminateProcess 0x1064A374 0x6476B6 (6583990) 0x56F (1391) 0x64C0B4 (6602932)
223 UnhandledExceptionFilter 0x1064A378 0x6476CA (6584010) 0x590 (1424) 0x64C0C8 (6602952)
224 AddVectoredExceptionHandler 0x1064A37C 0x6476E6 (6584038) 0x14 (20) 0x64C0E4 (6602980)
225 RemoveVectoredExceptionHandler 0x1064A380 0x647704 (6584068) 0x4A7 (1191) 0x64C102 (6603010)
226 IsProcessorFeaturePresent 0x1064A384 0x647726 (6584102) 0x388 (904) 0x64C124 (6603044)
227 VerifyVersionInfoW 0x1064A388 0x647742 (6584130) 0x5AA (1450) 0x64C140 (6603072)
228 OutputDebugStringW 0x1064A38C 0x647758 (6584152) 0x415 (1045) 0x64C156 (6603094)
229 InitializeCriticalSection 0x1064A390 0x64776E (6584174) 0x365 (869) 0x64C16C (6603116)
230 DeleteCriticalSection 0x1064A394 0x64778A (6584202) 0x11E (286) 0x64C188 (6603144)
231 TryEnterCriticalSection 0x1064A398 0x6477A2 (6584226) 0x58A (1418) 0x64C1A0 (6603168)
232 EnterCriticalSection 0x1064A39C 0x6477BC (6584252) 0x140 (320) 0x64C1BA (6603194)
233 LeaveCriticalSection 0x1064A3A0 0x6477D4 (6584276) 0x3BD (957) 0x64C1D2 (6603218)
234 GetProcessTimes 0x1064A3A4 0x6477EC (6584300) 0x2C4 (708) 0x64C1EA (6603242)
235 GetSystemTime 0x1064A3A8 0x6477FE (6584318) 0x2F2 (754) 0x64C1FC (6603260)
236 SystemTimeToFileTime 0x1064A3AC 0x64780E (6584334) 0x56B (1387) 0x64C20C (6603276)
237 GetSystemTimeAsFileTime 0x1064A3B0 0x647826 (6584358) 0x2F4 (756) 0x64C224 (6603300)
238 CreateThreadpoolTimer 0x1064A3B4 0x647840 (6584384) 0x105 (261) 0x64C23E (6603326)
239 SetThreadpoolTimer 0x1064A3B8 0x647858 (6584408) 0x54A (1354) 0x64C256 (6603350)
240 ResetEvent 0x1064A3BC 0x64786E (6584430) 0x4AE (1198) 0x64C26C (6603372)
241 PeekNamedPipe 0x1064A3C0 0x64787C (6584444) 0x41E (1054) 0x64C27A (6603386)
242 InterlockedPopEntrySList 0x1064A3C4 0x64788C (6584460) 0x372 (882) 0x64C28A (6603402)
243 GetThreadLocale 0x1064A3C8 0x6478A8 (6584488) 0x309 (777) 0x64C2A6 (6603430)
244 DeleteFileW 0x1064A3CC 0x6478BA (6584506) 0x123 (291) 0x64C2B8 (6603448)
245 InitializeSListHead 0x1064A3D0 0x6478C8 (6584520) 0x369 (873) 0x64C2C6 (6603462)
246 InterlockedFlushSList 0x1064A3D4 0x6478DE (6584542) 0x370 (880) 0x64C2DC (6603484)
247 GetDriveTypeW 0x1064A3D8 0x6478F6 (6584566) 0x239 (569) 0x64C2F4 (6603508)
248 CloseThreadpoolTimer 0x1064A3DC 0x647906 (6584582) 0x9B (155) 0x64C304 (6603524)
249 GetPrivateProfileIntW 0x1064A3E0 0x64791E (6584606) 0x2AC (684) 0x64C31C (6603548)
250 DisconnectNamedPipe 0x1064A3E4 0x647936 (6584630) 0x131 (305) 0x64C334 (6603572)
251 CreateNamedPipeW 0x1064A3E8 0x64794C (6584652) 0xE7 (231) 0x64C34A (6603594)
252 ConnectNamedPipe 0x1064A3EC 0x647960 (6584672) 0xA8 (168) 0x64C35E (6603614)
253 GetSystemDefaultLCID 0x1064A3F0 0x647974 (6584692) 0x2E6 (742) 0x64C372 (6603634)
254 GetUserDefaultLCID 0x1064A3F4 0x64798C (6584716) 0x31A (794) 0x64C38A (6603658)
Module ADVAPI32.dll (76 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 CryptEncrypt 0x1064A684 0x648202 (6586882) 0xCA (202) 0x64CC00 (6605824)
2 CryptGetDefaultProviderW 0x1064A688 0x648212 (6586898) 0xD3 (211) 0x64CC10 (6605840)
3 CryptSetKeyParam 0x1064A68C 0x64822E (6586926) 0xDD (221) 0x64CC2C (6605868)
4 CryptDeriveKey 0x1064A690 0x648242 (6586946) 0xC5 (197) 0x64CC40 (6605888)
5 CryptSetProvParam 0x1064A694 0x648254 (6586964) 0xDE (222) 0x64CC52 (6605906)
6 DeleteAce 0x1064A698 0x648268 (6586984) 0xE9 (233) 0x64CC66 (6605926)
7 CryptVerifySignatureA 0x1064A69C 0x648274 (6586996) 0xE5 (229) 0x64CC72 (6605938)
8 CryptSetHashParam 0x1064A6A0 0x64828C (6587020) 0xDC (220) 0x64CC8A (6605962)
9 IsValidSid 0x1064A6A4 0x6482A0 (6587040) 0x19C (412) 0x64CC9E (6605982)
10 GetSidIdentifierAuthority 0x1064A6A8 0x6482AE (6587054) 0x169 (361) 0x64CCAC (6605996)
11 CryptEnumProvidersA 0x1064A6AC 0x6482CA (6587082) 0xCD (205) 0x64CCC8 (6606024)
12 RegQueryValueExA 0x1064A6B0 0x6482E0 (6587104) 0x295 (661) 0x64CCDE (6606046)
13 RegCreateKeyExA 0x1064A6B4 0x6482F4 (6587124) 0x260 (608) 0x64CCF2 (6606066)
14 CreateWellKnownSid 0x1064A6B8 0x648306 (6587142) 0x92 (146) 0x64CD04 (6606084)
15 AddAccessAllowedAceEx 0x1064A6BC 0x64831C (6587164) 0x11 (17) 0x64CD1A (6606106)
16 CryptVerifySignatureW 0x1064A6C0 0x648334 (6587188) 0xE6 (230) 0x64CD32 (6606130)
17 LookupAccountSidW 0x1064A6C4 0x64834C (6587212) 0x1A7 (423) 0x64CD4A (6606154)
18 RegQueryInfoKeyA 0x1064A6C8 0x648360 (6587232) 0x28F (655) 0x64CD5E (6606174)
19 CryptGetProvParam 0x1064A6CC 0x648374 (6587252) 0xD6 (214) 0x64CD72 (6606194)
20 CryptEnumProvidersW 0x1064A6D0 0x648388 (6587272) 0xCE (206) 0x64CD86 (6606214)
21 CryptSignHashW 0x1064A6D4 0x64839E (6587294) 0xE4 (228) 0x64CD9C (6606236)
22 CryptGetKeyParam 0x1064A6D8 0x6483B0 (6587312) 0xD5 (213) 0x64CDAE (6606254)
23 CryptGetUserKey 0x1064A6DC 0x6483C4 (6587332) 0xD7 (215) 0x64CDC2 (6606274)
24 CryptImportKey 0x1064A6E0 0x6483D6 (6587350) 0xDA (218) 0x64CDD4 (6606292)
25 CryptDestroyKey 0x1064A6E4 0x6483E8 (6587368) 0xC7 (199) 0x64CDE6 (6606310)
26 CryptExportKey 0x1064A6E8 0x6483FA (6587386) 0xCF (207) 0x64CDF8 (6606328)
27 CryptGenKey 0x1064A6EC 0x64840C (6587404) 0xD0 (208) 0x64CE0A (6606346)
28 GetNamedSecurityInfoW 0x1064A6F0 0x64841A (6587418) 0x156 (342) 0x64CE18 (6606360)
29 RegDeleteValueW 0x1064A6F4 0x648432 (6587442) 0x270 (624) 0x64CE30 (6606384)
30 CryptAcquireContextA 0x1064A6F8 0x648444 (6587460) 0xC0 (192) 0x64CE42 (6606402)
31 CryptHashData 0x1064A6FC 0x64845C (6587484) 0xD8 (216) 0x64CE5A (6606426)
32 CryptDestroyHash 0x1064A700 0x64846C (6587500) 0xC6 (198) 0x64CE6A (6606442)
33 CryptCreateHash 0x1064A704 0x648480 (6587520) 0xC3 (195) 0x64CE7E (6606462)
34 CryptGetHashParam 0x1064A708 0x648492 (6587538) 0xD4 (212) 0x64CE90 (6606480)
35 CopySid 0x1064A70C 0x6484A6 (6587558) 0x85 (133) 0x64CEA4 (6606500)
36 DuplicateToken 0x1064A710 0x6484B0 (6587568) 0xEE (238) 0x64CEAE (6606510)
37 ReportEventW 0x1064A714 0x6484C2 (6587586) 0x2BB (699) 0x64CEC0 (6606528)
38 DeregisterEventSource 0x1064A718 0x6484D2 (6587602) 0xEB (235) 0x64CED0 (6606544)
39 RegisterEventSourceW 0x1064A71C 0x6484EA (6587626) 0x2AB (683) 0x64CEE8 (6606568)
40 GetSidSubAuthorityCount 0x1064A720 0x648502 (6587650) 0x16C (364) 0x64CF00 (6606592)
41 GetSidSubAuthority 0x1064A724 0x64851C (6587676) 0x16B (363) 0x64CF1A (6606618)
42 RegSetValueExW 0x1064A728 0x648532 (6587698) 0x2A6 (678) 0x64CF30 (6606640)
43 RegEnumValueW 0x1064A72C 0x648544 (6587716) 0x27A (634) 0x64CF42 (6606658)
44 RegDeleteKeyW 0x1064A730 0x648554 (6587732) 0x26C (620) 0x64CF52 (6606674)
45 RegCreateKeyExW 0x1064A734 0x648564 (6587748) 0x261 (609) 0x64CF62 (6606690)
46 AddAccessAllowedAce 0x1064A738 0x648576 (6587766) 0x10 (16) 0x64CF74 (6606708)
47 GetLengthSid 0x1064A73C 0x64858C (6587788) 0x14A (330) 0x64CF8A (6606730)
48 RegQueryInfoKeyW 0x1064A740 0x64859C (6587804) 0x290 (656) 0x64CF9A (6606746)
49 RegQueryValueW 0x1064A744 0x6485B0 (6587824) 0x297 (663) 0x64CFAE (6606766)
50 RegOpenKeyExW 0x1064A748 0x6485C2 (6587842) 0x289 (649) 0x64CFC0 (6606784)
51 CryptReleaseContext 0x1064A74C 0x6485D2 (6587858) 0xDB (219) 0x64CFD0 (6606800)
52 CryptGenRandom 0x1064A750 0x6485E8 (6587880) 0xD1 (209) 0x64CFE6 (6606822)
53 CryptAcquireContextW 0x1064A754 0x6485FA (6587898) 0xC1 (193) 0x64CFF8 (6606840)
54 EventRegister 0x1064A758 0x648612 (6587922) 0x120 (288) 0x64D010 (6606864)
55 ImpersonateLoggedOnUser 0x1064A75C 0x648622 (6587938) 0x189 (393) 0x64D020 (6606880)
56 SetThreadToken 0x1064A760 0x64863C (6587964) 0x2EE (750) 0x64D03A (6606906)
57 RevertToSelf 0x1064A764 0x64864E (6587982) 0x2BC (700) 0x64D04C (6606924)
58 GetAce 0x1064A768 0x64865E (6587998) 0x136 (310) 0x64D05C (6606940)
59 InitializeAcl 0x1064A76C 0x648668 (6588008) 0x18C (396) 0x64D066 (6606950)
60 GetSecurityDescriptorDacl 0x1064A770 0x648678 (6588024) 0x15C (348) 0x64D076 (6606966)
61 SetKernelObjectSecurity 0x1064A774 0x648694 (6588052) 0x2DA (730) 0x64D092 (6606994)
62 RegQueryValueExW 0x1064A778 0x6486AE (6588078) 0x296 (662) 0x64D0AC (6607020)
63 RegEnumKeyExW 0x1064A77C 0x6486C2 (6588098) 0x277 (631) 0x64D0C0 (6607040)
64 RegCloseKey 0x1064A780 0x6486D2 (6588114) 0x258 (600) 0x64D0D0 (6607056)
65 OpenThreadToken 0x1064A784 0x6486E0 (6588128) 0x217 (535) 0x64D0DE (6607070)
66 ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1064A788 0x6486F2 (6588146) 0x81 (129) 0x64D0F0 (6607088)
67 ConvertSidToStringSidW 0x1064A78C 0x64872A (6588202) 0x7B (123) 0x64D128 (6607144)
68 EventWrite 0x1064A790 0x648744 (6588228) 0x123 (291) 0x64D142 (6607170)
69 FreeSid 0x1064A794 0x648752 (6588242) 0x133 (307) 0x64D150 (6607184)
70 SetSecurityDescriptorDacl 0x1064A798 0x64875C (6588252) 0x2E3 (739) 0x64D15A (6607194)
71 InitializeSecurityDescriptor 0x1064A79C 0x648778 (6588280) 0x18D (397) 0x64D176 (6607222)
72 SetEntriesInAclW 0x1064A7A0 0x648798 (6588312) 0x2D3 (723) 0x64D196 (6607254)
73 AllocateAndInitializeSid 0x1064A7A4 0x6487AC (6588332) 0x20 (32) 0x64D1AA (6607274)
74 GetTokenInformation 0x1064A7A8 0x6487C8 (6588360) 0x16F (367) 0x64D1C6 (6607302)
75 OpenProcessToken 0x1064A7AC 0x6487DE (6588382) 0x212 (530) 0x64D1DC (6607324)
76 CryptDecrypt 0x1064A7B0 0x6487F2 (6588402) 0xC4 (196) 0x64D1F0 (6607344)
Module ntdll.dll (4 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 RtlNtStatusToDosError 0x1064A5DC 0x647F58 (6586200) 0x45E (1118) 0x64C956 (6605142)
2 VerSetConditionMask 0x1064A5E0 0x647F70 (6586224) 0x5CE (1486) 0x64C96E (6605166)
3 RtlUnwind 0x1064A5E4 0x647F86 (6586246) 0x536 (1334) 0x64C984 (6605188)
4 RtlCaptureContext 0x1064A5E8 0x647F92 (6586258) 0x2AD (685) 0x64C990 (6605200)
Module SHLWAPI.dll (24 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 UrlIsW 0x1064A620 0x64807C (6586492) 0x172 (370) 0x64CA7A (6605434)
2 UrlUnescapeW 0x1064A624 0x648086 (6586502) 0x174 (372) 0x64CA84 (6605444)
3 StrCmpW 0x1064A628 0x648096 (6586518) 0x12C (300) 0x64CA94 (6605460)
4 PathCreateFromUrlW 0x1064A62C 0x6480A0 (6586528) 0x47 (71) 0x64CA9E (6605470)
5 UrlCanonicalizeW 0x1064A630 0x6480B6 (6586550) 0x15D (349) 0x64CAB4 (6605492)
6 PathAddBackslashW 0x1064A634 0x6480CA (6586570) 0x34 (52) 0x64CAC8 (6605512)
7 PathIsURLW 0x1064A638 0x6480DE (6586590) 0x78 (120) 0x64CADC (6605532)
8 UrlCombineW 0x1064A63C 0x6480EC (6586604) 0x15F (351) 0x64CAEA (6605546)
9 StrStrW 0x1064A640 0x6480FA (6586618) 0x151 (337) 0x64CAF8 (6605560)
10 UrlGetPartW 0x1064A644 0x648104 (6586628) 0x16A (362) 0x64CB02 (6605570)
11 StrRChrW 0x1064A648 0x648112 (6586642) 0x142 (322) 0x64CB10 (6605584)
12 PathRemoveFileSpecW 0x1064A64C 0x64811E (6586654) 0x90 (144) 0x64CB1C (6605596)
13 PathRemoveExtensionW 0x1064A650 0x648134 (6586676) 0x8E (142) 0x64CB32 (6605618)
14 StrToIntW 0x1064A654 0x64814C (6586700) 0x157 (343) 0x64CB4A (6605642)
15 StrCmpNW 0x1064A658 0x648158 (6586712) 0x12B (299) 0x64CB56 (6605654)
16 StrChrW 0x1064A65C 0x648164 (6586724) 0x11D (285) 0x64CB62 (6605666)
17 PathIsRelativeW 0x1064A660 0x64816E (6586734) 0x6A (106) 0x64CB6C (6605676)
18 PathFindExtensionW 0x1064A664 0x648180 (6586752) 0x4C (76) 0x64CB7E (6605694)
19 PathRemoveBackslashW 0x1064A668 0x648196 (6586774) 0x8A (138) 0x64CB94 (6605716)
20 PathCombineW 0x1064A66C 0x6481AE (6586798) 0x3E (62) 0x64CBAC (6605740)
21 PathFindFileNameW 0x1064A670 0x6481BE (6586814) 0x4E (78) 0x64CBBC (6605756)
22 PathCanonicalizeW 0x1064A674 0x6481D2 (6586834) 0x3C (60) 0x64CBD0 (6605776)
23 PathIsUNCW 0x1064A678 0x6481E6 (6586854) 0x76 (118) 0x64CBE4 (6605796)
24 UrlEscapeW 0x1064A67C 0x6481F4 (6586868) 0x165 (357) 0x64CBF2 (6605810)
Module USER32.dll (11 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 wsprintfW 0x1064A5F0 0x647FA6 (6586278) 0x376 (886) 0x64C9A4 (6605220)
2 GetDesktopWindow 0x1064A5F4 0x647FB2 (6586290) 0x138 (312) 0x64C9B0 (6605232)
3 TranslateMessage 0x1064A5F8 0x647FC6 (6586310) 0x33B (827) 0x64C9C4 (6605252)
4 PeekMessageW 0x1064A5FC 0x647FDA (6586330) 0x26A (618) 0x64C9D8 (6605272)
5 MsgWaitForMultipleObjectsEx 0x1064A600 0x647FEA (6586346) 0x253 (595) 0x64C9E8 (6605288)
6 DispatchMessageW 0x1064A604 0x648008 (6586376) 0xB6 (182) 0x64CA06 (6605318)
7 LoadStringW 0x1064A608 0x64801C (6586396) 0x22F (559) 0x64CA1A (6605338)
8 GetProcessWindowStation 0x1064A60C 0x64802A (6586410) 0x192 (402) 0x64CA28 (6605352)
9 GetUserObjectInformationW 0x1064A610 0x648044 (6586436) 0x1B7 (439) 0x64CA42 (6605378)
10 InSendMessage 0x1064A614 0x648060 (6586464) 0x1E1 (481) 0x64CA5E (6605406)
11 GetFocus 0x1064A618 0x648070 (6586480) 0x142 (322) 0x64CA6E (6605422)