clr.dll 4.6.1586.0

Microsoft .NET Runtime Common Language Runtime - WorkStation

Microsoft Corporation

Size:
6.87 MB (7200400 bytes)
MD5:
7210d35665fb3a0353a2b7ad2acb293c
SHA1:
fe18b0de0a69607878926a85317ed68cb647351e
Path:
c:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
Legal Copyright:
© Microsoft Corporation. All rights reserved.
Internal Name:
clr.dll
File Version:
4.6.1586.0 built by: NETFXREL2
Company Name:
Microsoft Corporation
Private Build:
DDBLD400
Comments:
Flavor=Retail
Product Name:
Microsoft® .NET Framework
Product Version:
4.6.1586.0
File Description:
Microsoft .NET Runtime Common Language Runtime - WorkStation
Original Filename:
clr.dll
Digital Signature
Organization:
Microsoft Corporation
Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial Number:
330000010A2C79AED7797BA6AC000100
SHA-1 hash of the certificate:
3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
Valid from:
2015-06-04 20:42:45
Valid to:
2016-09-04 20:42:45

Import Directory

Module MSVCR120_CLR0400.dll (119 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 wcsncmp 0x1068A40C 0x687C60 (6847584) 0x78B (1931) 0x68C45E (6866014)
2 ceil 0x1068A410 0x687C6A (6847594) 0x617 (1559) 0x68C468 (6866024)
3 __CxxFrameHandler3 0x1068A414 0x687C72 (6847602) 0x174 (372) 0x68C470 (6866032)
4 _CxxThrowException 0x1068A418 0x687C88 (6847624) 0x158 (344) 0x68C486 (6866054)
5 _CItanh 0x1068A41C 0x687C9E (6847646) 0x153 (339) 0x68C49C (6866076)
6 _CIsinh 0x1068A420 0x687CA8 (6847656) 0x150 (336) 0x68C4A6 (6866086)
7 _CIpow 0x1068A424 0x687CB2 (6847666) 0x14E (334) 0x68C4B0 (6866096)
8 _CIlog10 0x1068A428 0x687CBC (6847676) 0x14D (333) 0x68C4BA (6866106)
9 _CIlog 0x1068A42C 0x687CC8 (6847688) 0x14C (332) 0x68C4C6 (6866118)
10 _CIfmod 0x1068A430 0x687CD2 (6847698) 0x14B (331) 0x68C4D0 (6866128)
11 _CIexp 0x1068A434 0x687CDC (6847708) 0x14A (330) 0x68C4DA (6866138)
12 _CIcosh 0x1068A438 0x687CE6 (6847718) 0x149 (329) 0x68C4E4 (6866148)
13 _CIasin 0x1068A43C 0x687CF0 (6847728) 0x145 (325) 0x68C4EE (6866158)
14 _CIacos 0x1068A440 0x687CFA (6847738) 0x144 (324) 0x68C4F8 (6866168)
15 wcscpy_s 0x1068A444 0x687D04 (6847748) 0x785 (1925) 0x68C502 (6866178)
16 fopen_s 0x1068A448 0x687D10 (6847760) 0x67A (1658) 0x68C50E (6866190)
17 _isnan 0x1068A44C 0x687D1A (6847770) 0x35F (863) 0x68C518 (6866200)
18 vswprintf_s 0x1068A450 0x687D24 (6847780) 0x776 (1910) 0x68C522 (6866210)
19 isupper 0x1068A454 0x687D32 (6847794) 0x6AA (1706) 0x68C530 (6866224)
20 iswdigit 0x1068A458 0x687D3C (6847804) 0x6B1 (1713) 0x68C53A (6866234)
21 iswxdigit 0x1068A45C 0x687D48 (6847816) 0x6B8 (1720) 0x68C546 (6866246)
22 wmemcpy_s 0x1068A460 0x687D54 (6847828) 0x7A8 (1960) 0x68C552 (6866258)
23 _wmakepath_s 0x1068A464 0x687D60 (6847840) 0x59D (1437) 0x68C55E (6866270)
24 _wsplitpath_s 0x1068A468 0x687D70 (6847856) 0x5BF (1471) 0x68C56E (6866286)
25 strtoul 0x1068A46C 0x687D80 (6847872) 0x74B (1867) 0x68C57E (6866302)
26 _snprintf 0x1068A470 0x687D8A (6847882) 0x481 (1153) 0x68C588 (6866312)
27 memset 0x1068A474 0x687D96 (6847894) 0x6EA (1770) 0x68C594 (6866324)
28 isxdigit 0x1068A478 0x687DA0 (6847904) 0x6B9 (1721) 0x68C59E (6866334)
29 malloc 0x1068A47C 0x687DAC (6847916) 0x6DB (1755) 0x68C5AA (6866346)
30 wcsrchr 0x1068A480 0x687DB6 (6847926) 0x790 (1936) 0x68C5B4 (6866356)
31 wcscat_s 0x1068A484 0x687DC0 (6847936) 0x780 (1920) 0x68C5BE (6866366)
32 wcsncpy_s 0x1068A488 0x687DCC (6847948) 0x78D (1933) 0x68C5CA (6866378)
33 _vsnwprintf 0x1068A48C 0x687DD8 (6847960) 0x52F (1327) 0x68C5D6 (6866390)
34 _stricmp 0x1068A490 0x687DE6 (6847974) 0x4B2 (1202) 0x68C5E4 (6866404)
35 _purecall 0x1068A494 0x687DF2 (6847986) 0x449 (1097) 0x68C5F0 (6866416)
36 memcpy 0x1068A498 0x687DFE (6847998) 0x6E6 (1766) 0x68C5FC (6866428)
37 swprintf_s 0x1068A49C 0x687E08 (6848008) 0x74F (1871) 0x68C606 (6866438)
38 _itow_s 0x1068A4A0 0x687E16 (6848022) 0x377 (887) 0x68C614 (6866452)
39 strlen 0x1068A4A4 0x687E20 (6848032) 0x738 (1848) 0x68C61E (6866462)
40 strcmp 0x1068A4A8 0x687E2A (6848042) 0x730 (1840) 0x68C628 (6866472)
41 _wcsicmp 0x1068A4AC 0x687E34 (6848052) 0x551 (1361) 0x68C632 (6866482)
42 memcmp 0x1068A4B0 0x687E40 (6848064) 0x6E5 (1765) 0x68C63E (6866494)
43 _except_handler4_common 0x1068A4B4 0x687E4A (6848074) 0x27A (634) 0x68C648 (6866504)
44 __clean_type_info_names_internal 0x1068A4B8 0x687E64 (6848100) 0x18C (396) 0x68C662 (6866530)
45 ?terminate@@YAXXZ 0x1068A4BC 0x687E88 (6848136) 0x135 (309) 0x68C686 (6866566)
46 _onexit 0x1068A4C0 0x687E9C (6848156) 0x43A (1082) 0x68C69A (6866586)
47 __dllonexit 0x1068A4C4 0x687EA6 (6848166) 0x1AE (430) 0x68C6A4 (6866596)
48 _calloc_crt 0x1068A4C8 0x687EB4 (6848180) 0x22E (558) 0x68C6B2 (6866610)
49 _unlock 0x1068A4CC 0x687EC2 (6848194) 0x504 (1284) 0x68C6C0 (6866624)
50 _lock 0x1068A4D0 0x687ECC (6848204) 0x394 (916) 0x68C6CA (6866634)
51 __crtTerminateProcess 0x1068A4D4 0x687ED4 (6848212) 0x1AB (427) 0x68C6D2 (6866642)
52 __crtUnhandledException 0x1068A4D8 0x687EEC (6848236) 0x1AC (428) 0x68C6EA (6866666)
53 _crt_debugger_hook 0x1068A4DC 0x687F06 (6848262) 0x250 (592) 0x68C704 (6866692)
54 ??1type_info@@UAE@XZ 0x1068A4E0 0x687F1C (6848284) 0x6F (111) 0x68C71A (6866714)
55 _initterm_e 0x1068A4E4 0x687F34 (6848308) 0x30D (781) 0x68C732 (6866738)
56 _initterm 0x1068A4E8 0x687F42 (6848322) 0x30C (780) 0x68C740 (6866752)
57 _malloc_crt 0x1068A4EC 0x687F4E (6848334) 0x3A5 (933) 0x68C74C (6866764)
58 free 0x1068A4F0 0x687F5C (6848348) 0x683 (1667) 0x68C75A (6866778)
59 _amsg_exit 0x1068A4F4 0x687F64 (6848356) 0x217 (535) 0x68C762 (6866786)
60 __CppXcptFilter 0x1068A4F8 0x687F72 (6848370) 0x16F (367) 0x68C770 (6866800)
61 bsearch 0x1068A4FC 0x687F84 (6848388) 0x5F2 (1522) 0x68C782 (6866818)
62 wcstok_s 0x1068A500 0x687F8E (6848398) 0x799 (1945) 0x68C78C (6866828)
63 strncat_s 0x1068A504 0x687F9A (6848410) 0x73A (1850) 0x68C798 (6866840)
64 _putws 0x1068A508 0x687FA6 (6848422) 0x451 (1105) 0x68C7A4 (6866852)
65 _flushall 0x1068A50C 0x687FB0 (6848432) 0x2A1 (673) 0x68C7AE (6866862)
66 wprintf 0x1068A510 0x687FBC (6848444) 0x7AA (1962) 0x68C7BA (6866874)
67 fwprintf 0x1068A514 0x687FC6 (6848454) 0x68C (1676) 0x68C7C4 (6866884)
68 iswspace 0x1068A518 0x687FD2 (6848466) 0x6B6 (1718) 0x68C7D0 (6866896)
69 _vswprintf_p 0x1068A51C 0x687FDE (6848478) 0x53B (1339) 0x68C7DC (6866908)
70 _vsnwprintf_s 0x1068A520 0x687FEE (6848494) 0x531 (1329) 0x68C7EC (6866924)
71 _vsnprintf_s 0x1068A524 0x687FFE (6848510) 0x52D (1325) 0x68C7FC (6866940)
72 _wcsnicmp 0x1068A528 0x68800E (6848526) 0x55B (1371) 0x68C80C (6866956)
73 _wfopen 0x1068A52C 0x68801A (6848538) 0x592 (1426) 0x68C818 (6866968)
74 _ltow_s 0x1068A530 0x688024 (6848548) 0x3A2 (930) 0x68C822 (6866978)
75 _time64 0x1068A534 0x68802E (6848558) 0x4E8 (1256) 0x68C82C (6866988)
76 fclose 0x1068A538 0x688038 (6848568) 0x657 (1623) 0x68C836 (6866998)
77 fwrite 0x1068A53C 0x688042 (6848578) 0x68E (1678) 0x68C840 (6867008)
78 wcsnlen 0x1068A540 0x68804C (6848588) 0x78E (1934) 0x68C84A (6867018)
79 memchr 0x1068A544 0x688056 (6848598) 0x6E4 (1764) 0x68C854 (6867028)
80 atoi 0x1068A548 0x688060 (6848608) 0x5EF (1519) 0x68C85E (6867038)
81 toupper 0x1068A54C 0x688068 (6848616) 0x75D (1885) 0x68C866 (6867046)
82 floor 0x1068A550 0x688072 (6848626) 0x66E (1646) 0x68C870 (6867056)
83 isalpha 0x1068A554 0x68807A (6848634) 0x6A0 (1696) 0x68C878 (6867064)
84 __iob_func 0x1068A558 0x688084 (6848644) 0x1B8 (440) 0x68C882 (6867074)
85 fflush 0x1068A55C 0x688092 (6848658) 0x668 (1640) 0x68C890 (6867088)
86 _copysign 0x1068A560 0x68809C (6848668) 0x244 (580) 0x68C89A (6867098)
87 modf 0x1068A564 0x6880A8 (6848680) 0x6EB (1771) 0x68C8A6 (6867110)
88 towupper 0x1068A568 0x6880B0 (6848688) 0x760 (1888) 0x68C8AE (6867118)
89 swscanf_s 0x1068A56C 0x6880BC (6848700) 0x751 (1873) 0x68C8BA (6867130)
90 towlower 0x1068A570 0x6880C8 (6848712) 0x75F (1887) 0x68C8C6 (6867142)
91 iswupper 0x1068A574 0x6880D4 (6848724) 0x6B7 (1719) 0x68C8D2 (6867154)
92 _wtoi 0x1068A578 0x6880E0 (6848736) 0x5CE (1486) 0x68C8DE (6867166)
93 wcschr 0x1068A57C 0x6880E8 (6848744) 0x781 (1921) 0x68C8E6 (6867174)
94 iswascii 0x1068A580 0x6880F2 (6848754) 0x6AD (1709) 0x68C8F0 (6867184)
95 wcsncat_s 0x1068A584 0x6880FE (6848766) 0x78A (1930) 0x68C8FC (6867196)
96 _snwprintf_s 0x1068A588 0x68810A (6848778) 0x48D (1165) 0x68C908 (6867208)
97 printf 0x1068A58C 0x68811A (6848794) 0x6FD (1789) 0x68C918 (6867224)
98 strrchr 0x1068A590 0x688124 (6848804) 0x740 (1856) 0x68C922 (6867234)
99 _errno 0x1068A594 0x68812E (6848814) 0x276 (630) 0x68C92C (6867244)
100 sscanf_s 0x1068A598 0x688138 (6848824) 0x72C (1836) 0x68C936 (6867254)
101 isdigit 0x1068A59C 0x688144 (6848836) 0x6A3 (1699) 0x68C942 (6867266)
102 _strnicmp 0x1068A5A0 0x68814E (6848846) 0x4BC (1212) 0x68C94C (6867276)
103 atol 0x1068A5A4 0x68815A (6848858) 0x5F0 (1520) 0x68C958 (6867288)
104 strncpy_s 0x1068A5A8 0x688162 (6848866) 0x73D (1853) 0x68C960 (6867296)
105 strnlen 0x1068A5AC 0x68816E (6848878) 0x73E (1854) 0x68C96C (6867308)
106 wcstoul 0x1068A5B0 0x688178 (6848888) 0x79F (1951) 0x68C976 (6867318)
107 strcat_s 0x1068A5B4 0x688182 (6848898) 0x72E (1838) 0x68C980 (6867328)
108 wcsstr 0x1068A5B8 0x68818E (6848910) 0x794 (1940) 0x68C98C (6867340)
109 _wcslwr_s 0x1068A5BC 0x688198 (6848920) 0x557 (1367) 0x68C996 (6867350)
110 sprintf_s 0x1068A5C0 0x6881A4 (6848932) 0x728 (1832) 0x68C9A2 (6867362)
111 fprintf 0x1068A5C4 0x6881B0 (6848944) 0x67B (1659) 0x68C9AE (6867374)
112 memcpy_s 0x1068A5C8 0x6881BA (6848954) 0x6E7 (1767) 0x68C9B8 (6867384)
113 strcpy_s 0x1068A5CC 0x6881C6 (6848966) 0x733 (1843) 0x68C9C4 (6867396)
114 strncmp 0x1068A5D0 0x6881D2 (6848978) 0x73B (1851) 0x68C9D0 (6867408)
115 memmove 0x1068A5D4 0x6881DC (6848988) 0x6E8 (1768) 0x68C9DA (6867418)
116 qsort 0x1068A5D8 0x6881E6 (6848998) 0x704 (1796) 0x68C9E4 (6867428)
117 _controlfp_s 0x1068A5DC 0x6881EE (6849006) 0x243 (579) 0x68C9EC (6867436)
118 _vsnprintf 0x1068A5E0 0x6881FE (6849022) 0x529 (1321) 0x68C9FC (6867452)
119 strchr 0x1068A5E4 0x68820C (6849036) 0x72F (1839) 0x68CA0A (6867466)
Module KERNEL32.dll (258 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 GetCalendarInfoW 0x1068A000 0x6868BE (6842558) 0x1D7 (471) 0x68B0BC (6860988)
2 GetLocaleInfoW 0x1068A004 0x6868D2 (6842578) 0x26E (622) 0x68B0D0 (6861008)
3 EnumTimeFormatsW 0x1068A008 0x6868E4 (6842596) 0x164 (356) 0x68B0E2 (6861026)
4 EnumCalendarInfoExW 0x1068A00C 0x6868F8 (6842616) 0x144 (324) 0x68B0F6 (6861046)
5 GetSystemDefaultUILanguage 0x1068A010 0x68690E (6842638) 0x2E9 (745) 0x68B10C (6861068)
6 GetDateFormatW 0x1068A014 0x68692C (6842668) 0x22D (557) 0x68B12A (6861098)
7 LoadLibraryW 0x1068A018 0x68693E (6842686) 0x3C3 (963) 0x68B13C (6861116)
8 GetNativeSystemInfo 0x1068A01C 0x68694E (6842702) 0x28E (654) 0x68B14C (6861132)
9 QueryActCtxW 0x1068A020 0x686964 (6842724) 0x431 (1073) 0x68B162 (6861154)
10 CreateProcessW 0x1068A024 0x686974 (6842740) 0xEF (239) 0x68B172 (6861170)
11 FindNextFileW 0x1068A028 0x686986 (6842758) 0x19B (411) 0x68B184 (6861188)
12 GetEnvironmentVariableA 0x1068A02C 0x686996 (6842774) 0x241 (577) 0x68B194 (6861204)
13 LockResource 0x1068A030 0x6869B0 (6842800) 0x3D8 (984) 0x68B1AE (6861230)
14 SizeofResource 0x1068A034 0x6869C0 (6842816) 0x55E (1374) 0x68B1BE (6861246)
15 LoadResource 0x1068A038 0x6869D2 (6842834) 0x3C6 (966) 0x68B1D0 (6861264)
16 FindResourceExW 0x1068A03C 0x6869E2 (6842850) 0x1A3 (419) 0x68B1E0 (6861280)
17 IsWow64Process 0x1068A040 0x6869F4 (6842868) 0x392 (914) 0x68B1F2 (6861298)
18 GetWindowsDirectoryW 0x1068A044 0x686A06 (6842886) 0x32E (814) 0x68B204 (6861316)
19 ReleaseActCtx 0x1068A048 0x686A1E (6842910) 0x495 (1173) 0x68B21C (6861340)
20 DeactivateActCtx 0x1068A04C 0x686A2E (6842926) 0x110 (272) 0x68B22C (6861356)
21 ActivateActCtx 0x1068A050 0x686A42 (6842946) 0x3 (3) 0x68B240 (6861376)
22 CreateActCtxW 0x1068A054 0x686A54 (6842964) 0xBC (188) 0x68B252 (6861394)
23 CompareStringW 0x1068A058 0x686A64 (6842980) 0xA7 (167) 0x68B262 (6861410)
24 GetSystemDirectoryW 0x1068A05C 0x686A76 (6842998) 0x2EB (747) 0x68B274 (6861428)
25 FindFirstFileW 0x1068A060 0x686A8C (6843020) 0x18F (399) 0x68B28A (6861450)
26 GetSystemTimeAsFileTime 0x1068A064 0x686A9E (6843038) 0x2F4 (756) 0x68B29C (6861468)
27 LCMapStringW 0x1068A068 0x686AB8 (6843064) 0x3B1 (945) 0x68B2B6 (6861494)
28 GetACP 0x1068A06C 0x686AC8 (6843080) 0x1BE (446) 0x68B2C6 (6861510)
29 IsDBCSLeadByte 0x1068A070 0x686AD2 (6843090) 0x381 (897) 0x68B2D0 (6861520)
30 GetCPInfo 0x1068A074 0x686AE4 (6843108) 0x1CD (461) 0x68B2E2 (6861538)
31 SetThreadAffinityMask 0x1068A078 0x686AF0 (6843120) 0x538 (1336) 0x68B2EE (6861550)
32 QueryInformationJobObject 0x1068A07C 0x686B08 (6843144) 0x43A (1082) 0x68B306 (6861574)
33 IsProcessInJob 0x1068A080 0x686B24 (6843172) 0x387 (903) 0x68B322 (6861602)
34 GetWriteWatch 0x1068A084 0x686B36 (6843190) 0x32F (815) 0x68B334 (6861620)
35 ResetWriteWatch 0x1068A088 0x686B46 (6843206) 0x4B0 (1200) 0x68B344 (6861636)
36 VirtualUnlock 0x1068A08C 0x686B58 (6843224) 0x5B5 (1461) 0x68B356 (6861654)
37 SetThreadIdealProcessor 0x1068A090 0x686B68 (6843240) 0x53D (1341) 0x68B366 (6861670)
38 SetConsoleTitleW 0x1068A094 0x686B82 (6843266) 0x4EA (1258) 0x68B380 (6861696)
39 AllocConsole 0x1068A098 0x686B96 (6843286) 0x16 (22) 0x68B394 (6861716)
40 FreeConsole 0x1068A09C 0x686BA6 (6843302) 0x1B5 (437) 0x68B3A4 (6861732)
41 GetTempFileNameW 0x1068A0A0 0x686BB4 (6843316) 0x2FF (767) 0x68B3B2 (6861746)
42 GetTempPathW 0x1068A0A4 0x686BC8 (6843336) 0x301 (769) 0x68B3C6 (6861766)
43 MoveFileExW 0x1068A0A8 0x686BD8 (6843352) 0x3E5 (997) 0x68B3D6 (6861782)
44 MoveFileW 0x1068A0AC 0x686BE6 (6843366) 0x3E8 (1000) 0x68B3E4 (6861796)
45 FlushFileBuffers 0x1068A0B0 0x686BF2 (6843378) 0x1AD (429) 0x68B3F0 (6861808)
46 CompareFileTime 0x1068A0B4 0x686C06 (6843398) 0xA3 (163) 0x68B404 (6861828)
47 GetFileTime 0x1068A0B8 0x686C18 (6843416) 0x256 (598) 0x68B416 (6861846)
48 OutputDebugStringA 0x1068A0BC 0x686C26 (6843430) 0x414 (1044) 0x68B424 (6861860)
49 DeleteFileW 0x1068A0C0 0x686C3C (6843452) 0x123 (291) 0x68B43A (6861882)
50 GetUserDefaultUILanguage 0x1068A0C4 0x686C4A (6843466) 0x31D (797) 0x68B448 (6861896)
51 EncodePointer 0x1068A0C8 0x686C66 (6843494) 0x13C (316) 0x68B464 (6861924)
52 DecodePointer 0x1068A0CC 0x686C76 (6843510) 0x117 (279) 0x68B474 (6861940)
53 GetVersionExA 0x1068A0D0 0x686C86 (6843526) 0x322 (802) 0x68B484 (6861956)
54 LoadLibraryA 0x1068A0D4 0x686C96 (6843542) 0x3C0 (960) 0x68B494 (6861972)
55 LocalAlloc 0x1068A0D8 0x686CA6 (6843558) 0x3C9 (969) 0x68B4A4 (6861988)
56 HeapReAlloc 0x1068A0DC 0x686CB4 (6843572) 0x354 (852) 0x68B4B2 (6862002)
57 MapViewOfFile 0x1068A0E0 0x686CC2 (6843586) 0x3DB (987) 0x68B4C0 (6862016)
58 CreateFileA 0x1068A0E4 0x686CD2 (6843602) 0xCE (206) 0x68B4D0 (6862032)
59 DeleteFileA 0x1068A0E8 0x686CE0 (6843616) 0x120 (288) 0x68B4DE (6862046)
60 CopyFileA 0x1068A0EC 0x686CEE (6843630) 0xB4 (180) 0x68B4EC (6862060)
61 CopyFileW 0x1068A0F0 0x686CFA (6843642) 0xB9 (185) 0x68B4F8 (6862072)
62 GetFileAttributesA 0x1068A0F4 0x686D06 (6843654) 0x249 (585) 0x68B504 (6862084)
63 SetFileAttributesA 0x1068A0F8 0x686D1C (6843676) 0x500 (1280) 0x68B51A (6862106)
64 SetFileAttributesW 0x1068A0FC 0x686D32 (6843698) 0x503 (1283) 0x68B530 (6862128)
65 CreateDirectoryA 0x1068A100 0x686D48 (6843720) 0xC1 (193) 0x68B546 (6862150)
66 RemoveDirectoryA 0x1068A104 0x686D5C (6843740) 0x49E (1182) 0x68B55A (6862170)
67 RemoveDirectoryW 0x1068A108 0x686D70 (6843760) 0x4A1 (1185) 0x68B56E (6862190)
68 GetWindowsDirectoryA 0x1068A10C 0x686D84 (6843780) 0x32D (813) 0x68B582 (6862210)
69 LoadLibraryExA 0x1068A110 0x686D9C (6843804) 0x3C1 (961) 0x68B59A (6862234)
70 lstrlenA 0x1068A114 0x686DAE (6843822) 0x61C (1564) 0x68B5AC (6862252)
71 FindFirstFileA 0x1068A118 0x686DBA (6843834) 0x188 (392) 0x68B5B8 (6862264)
72 FindNextFileA 0x1068A11C 0x686DCC (6843852) 0x199 (409) 0x68B5CA (6862282)
73 GetSystemTime 0x1068A120 0x686DDC (6843868) 0x2F2 (754) 0x68B5DA (6862298)
74 SystemTimeToFileTime 0x1068A124 0x686DEC (6843884) 0x56B (1387) 0x68B5EA (6862314)
75 GetVersion 0x1068A128 0x686E04 (6843908) 0x321 (801) 0x68B602 (6862338)
76 InterlockedCompareExchange 0x1068A12C 0x686E12 (6843922) 0x36B (875) 0x68B610 (6862352)
77 GetOEMCP 0x1068A130 0x686E30 (6843952) 0x2A0 (672) 0x68B62E (6862382)
78 AreFileApisANSI 0x1068A134 0x686E3C (6843964) 0x2C (44) 0x68B63A (6862394)
79 GetFullPathNameA 0x1068A138 0x686E4E (6843982) 0x25F (607) 0x68B64C (6862412)
80 SetEndOfFile 0x1068A13C 0x686E62 (6844002) 0x4F6 (1270) 0x68B660 (6862432)
81 GetSystemDirectoryA 0x1068A140 0x686E72 (6844018) 0x2EA (746) 0x68B670 (6862448)
82 InterlockedExchange 0x1068A144 0x686E88 (6844040) 0x36E (878) 0x68B686 (6862470)
83 SetFileTime 0x1068A148 0x686E9E (6844062) 0x50C (1292) 0x68B69C (6862492)
84 FindResourceW 0x1068A14C 0x686EAC (6844076) 0x1A4 (420) 0x68B6AA (6862506)
85 WritePrivateProfileStringW 0x1068A150 0x686EBC (6844092) 0x5F7 (1527) 0x68B6BA (6862522)
86 DeviceIoControl 0x1068A154 0x686EDA (6844122) 0x12D (301) 0x68B6D8 (6862552)
87 GetLocalTime 0x1068A158 0x686EEC (6844140) 0x26B (619) 0x68B6EA (6862570)
88 GetVolumeInformationW 0x1068A15C 0x686EFC (6844156) 0x326 (806) 0x68B6FA (6862586)
89 DosDateTimeToFileTime 0x1068A160 0x686F14 (6844180) 0x134 (308) 0x68B712 (6862610)
90 LocalFileTimeToFileTime 0x1068A164 0x686F2C (6844204) 0x3CB (971) 0x68B72A (6862634)
91 GetDiskFreeSpaceA 0x1068A168 0x686F46 (6844230) 0x232 (562) 0x68B744 (6862660)
92 GetTimeFormatW 0x1068A16C 0x686F5A (6844250) 0x315 (789) 0x68B758 (6862680)
93 FlushViewOfFile 0x1068A170 0x686F6C (6844268) 0x1B0 (432) 0x68B76A (6862698)
94 GetStringTypeW 0x1068A174 0x686F7E (6844286) 0x2E2 (738) 0x68B77C (6862716)
95 IsDBCSLeadByteEx 0x1068A178 0x686F90 (6844304) 0x382 (898) 0x68B78E (6862734)
96 CreateHardLinkW 0x1068A17C 0x686FA4 (6844324) 0xDA (218) 0x68B7A2 (6862754)
97 SetPriorityClass 0x1068A180 0x686FB6 (6844342) 0x521 (1313) 0x68B7B4 (6862772)
98 SetFilePointerEx 0x1068A184 0x686FCA (6844362) 0x509 (1289) 0x68B7C8 (6862792)
99 ExitThread 0x1068A188 0x686FDE (6844382) 0x16E (366) 0x68B7DC (6862812)
100 OpenFileMappingW 0x1068A18C 0x686FEC (6844396) 0x400 (1024) 0x68B7EA (6862826)
101 SearchPathW 0x1068A190 0x687000 (6844416) 0x4BF (1215) 0x68B7FE (6862846)
102 IsValidLocale 0x1068A194 0x68700E (6844430) 0x38F (911) 0x68B80C (6862860)
103 GetTimeZoneInformation 0x1068A198 0x68701E (6844446) 0x317 (791) 0x68B81C (6862876)
104 GetNLSVersionEx 0x1068A19C 0x687038 (6844472) 0x283 (643) 0x68B836 (6862902)
105 GetConsoleTitleW 0x1068A1A0 0x68704A (6844490) 0x212 (530) 0x68B848 (6862920)
106 GetVersionExW 0x1068A1A4 0x68705E (6844510) 0x323 (803) 0x68B85C (6862940)
107 GetFileSizeEx 0x1068A1A8 0x68706E (6844526) 0x255 (597) 0x68B86C (6862956)
108 MultiByteToWideChar 0x1068A1AC 0x68707E (6844542) 0x3EC (1004) 0x68B87C (6862972)
109 FormatMessageW 0x1068A1B0 0x687094 (6844564) 0x1B4 (436) 0x68B892 (6862994)
110 ExitProcess 0x1068A1B4 0x6870A6 (6844582) 0x16D (365) 0x68B8A4 (6863012)
111 LoadLibraryExW 0x1068A1B8 0x6870B4 (6844596) 0x3C2 (962) 0x68B8B2 (6863026)
112 GetModuleFileNameW 0x1068A1BC 0x6870C6 (6844614) 0x27D (637) 0x68B8C4 (6863044)
113 GetModuleHandleExW 0x1068A1C0 0x6870DC (6844636) 0x280 (640) 0x68B8DA (6863066)
114 FindClose 0x1068A1C4 0x6870F2 (6844658) 0x184 (388) 0x68B8F0 (6863088)
115 GetLastError 0x1068A1C8 0x6870FE (6844670) 0x26A (618) 0x68B8FC (6863100)
116 GetModuleHandleW 0x1068A1CC 0x68710E (6844686) 0x281 (641) 0x68B90C (6863116)
117 GetCurrentProcess 0x1068A1D0 0x687122 (6844706) 0x223 (547) 0x68B920 (6863136)
118 CloseHandle 0x1068A1D4 0x687136 (6844726) 0x8E (142) 0x68B934 (6863156)
119 WaitForSingleObject 0x1068A1D8 0x687144 (6844740) 0x5BB (1467) 0x68B942 (6863170)
120 ReleaseMutex 0x1068A1DC 0x68715A (6844762) 0x497 (1175) 0x68B958 (6863192)
121 SetEvent 0x1068A1E0 0x68716A (6844778) 0x4FC (1276) 0x68B968 (6863208)
122 ReleaseSemaphore 0x1068A1E4 0x687176 (6844790) 0x49B (1179) 0x68B974 (6863220)
123 WaitForMultipleObjectsEx 0x1068A1E8 0x68718A (6844810) 0x5BA (1466) 0x68B988 (6863240)
124 CreateMutexW 0x1068A1EC 0x6871A6 (6844838) 0xE5 (229) 0x68B9A4 (6863268)
125 CreateEventW 0x1068A1F0 0x6871B6 (6844854) 0xCA (202) 0x68B9B4 (6863284)
126 CreateSemaphoreW 0x1068A1F4 0x6871C6 (6844870) 0xF5 (245) 0x68B9C4 (6863300)
127 LocalFree 0x1068A1F8 0x6871DA (6844890) 0x3CD (973) 0x68B9D8 (6863320)
128 GetCurrentProcessId 0x1068A1FC 0x6871E6 (6844902) 0x224 (548) 0x68B9E4 (6863332)
129 OpenProcess 0x1068A200 0x6871FC (6844924) 0x408 (1032) 0x68B9FA (6863354)
130 GetProcAddress 0x1068A204 0x68720A (6844938) 0x2B5 (693) 0x68BA08 (6863368)
131 ProcessIdToSessionId 0x1068A208 0x68721C (6844956) 0x42B (1067) 0x68BA1A (6863386)
132 GetCurrentThreadId 0x1068A20C 0x687234 (6844980) 0x228 (552) 0x68BA32 (6863410)
133 GetTickCount 0x1068A210 0x68724A (6845002) 0x310 (784) 0x68BA48 (6863432)
134 SetConsoleCtrlHandler 0x1068A214 0x68725A (6845018) 0x4CF (1231) 0x68BA58 (6863448)
135 DebugBreak 0x1068A218 0x687272 (6845042) 0x114 (276) 0x68BA70 (6863472)
136 CreateThread 0x1068A21C 0x687280 (6845056) 0x101 (257) 0x68BA7E (6863486)
137 GetTickCount64 0x1068A220 0x687290 (6845072) 0x311 (785) 0x68BA8E (6863502)
138 SetLastError 0x1068A224 0x6872A2 (6845090) 0x517 (1303) 0x68BAA0 (6863520)
139 GetCommandLineW 0x1068A228 0x6872B2 (6845106) 0x1E3 (483) 0x68BAB0 (6863536)
140 GetCurrentDirectoryW 0x1068A22C 0x6872C4 (6845124) 0x21D (541) 0x68BAC2 (6863554)
141 lstrlenW 0x1068A230 0x6872DC (6845148) 0x61D (1565) 0x68BADA (6863578)
142 GetFullPathNameW 0x1068A234 0x6872E8 (6845160) 0x262 (610) 0x68BAE6 (6863590)
143 GetShortPathNameW 0x1068A238 0x6872FC (6845180) 0x2D5 (725) 0x68BAFA (6863610)
144 GetLongPathNameW 0x1068A23C 0x687310 (6845200) 0x277 (631) 0x68BB0E (6863630)
145 GetSystemInfo 0x1068A240 0x687324 (6845220) 0x2EE (750) 0x68BB22 (6863650)
146 TlsGetValue 0x1068A244 0x687334 (6845236) 0x583 (1411) 0x68BB32 (6863666)
147 GetUserDefaultLangID 0x1068A248 0x687342 (6845250) 0x31B (795) 0x68BB40 (6863680)
148 GetEnvironmentVariableW 0x1068A24C 0x68735A (6845274) 0x242 (578) 0x68BB58 (6863704)
149 SetEnvironmentVariableW 0x1068A250 0x687374 (6845300) 0x4FA (1274) 0x68BB72 (6863730)
150 GetProcessId 0x1068A254 0x68738E (6845326) 0x2BC (700) 0x68BB8C (6863756)
151 GetOverlappedResult 0x1068A258 0x68739E (6845342) 0x2A1 (673) 0x68BB9C (6863772)
152 CancelIo 0x1068A25C 0x6873B4 (6845364) 0x79 (121) 0x68BBB2 (6863794)
153 GetProcessHeap 0x1068A260 0x6873C0 (6845376) 0x2BA (698) 0x68BBBE (6863806)
154 HeapFree 0x1068A264 0x6873D2 (6845394) 0x351 (849) 0x68BBD0 (6863824)
155 InterlockedPushEntrySList 0x1068A268 0x6873DE (6845406) 0x373 (883) 0x68BBDC (6863836)
156 WriteFile 0x1068A26C 0x6873FA (6845434) 0x5F1 (1521) 0x68BBF8 (6863864)
157 GetStdHandle 0x1068A270 0x687406 (6845446) 0x2DD (733) 0x68BC04 (6863876)
158 WideCharToMultiByte 0x1068A274 0x687416 (6845462) 0x5DD (1501) 0x68BC14 (6863892)
159 GetConsoleOutputCP 0x1068A278 0x68742C (6845484) 0x20C (524) 0x68BC2A (6863914)
160 GetFileInformationByHandle 0x1068A27C 0x687442 (6845506) 0x250 (592) 0x68BC40 (6863936)
161 GetFileAttributesW 0x1068A280 0x687460 (6845536) 0x24E (590) 0x68BC5E (6863966)
162 CreateDirectoryW 0x1068A284 0x687476 (6845558) 0xC6 (198) 0x68BC74 (6863988)
163 GetCurrentThread 0x1068A288 0x68748A (6845578) 0x227 (551) 0x68BC88 (6864008)
164 GetLogicalProcessorInformation 0x1068A28C 0x68749E (6845598) 0x272 (626) 0x68BC9C (6864028)
165 GetProcessAffinityMask 0x1068A290 0x6874C0 (6845632) 0x2B6 (694) 0x68BCBE (6864062)
166 SetProcessAffinityMask 0x1068A294 0x6874DA (6845658) 0x522 (1314) 0x68BCD8 (6864088)
167 SetThreadLocale 0x1068A298 0x6874F4 (6845684) 0x540 (1344) 0x68BCF2 (6864114)
168 MapViewOfFileEx 0x1068A29C 0x687506 (6845702) 0x3DC (988) 0x68BD04 (6864132)
169 VirtualQuery 0x1068A2A0 0x687518 (6845720) 0x5B3 (1459) 0x68BD16 (6864150)
170 UnmapViewOfFile 0x1068A2A4 0x687528 (6845736) 0x593 (1427) 0x68BD26 (6864166)
171 SetErrorMode 0x1068A2A8 0x68753A (6845754) 0x4FB (1275) 0x68BD38 (6864184)
172 FreeLibrary 0x1068A2AC 0x68754A (6845770) 0x1B8 (440) 0x68BD48 (6864200)
173 FreeLibraryAndExitThread 0x1068A2B0 0x687558 (6845784) 0x1B9 (441) 0x68BD56 (6864214)
174 IsDebuggerPresent 0x1068A2B4 0x687574 (6845812) 0x383 (899) 0x68BD72 (6864242)
175 RaiseException 0x1068A2B8 0x687588 (6845832) 0x448 (1096) 0x68BD86 (6864262)
176 QueryPerformanceCounter 0x1068A2BC 0x68759A (6845850) 0x43C (1084) 0x68BD98 (6864280)
177 GetStringTypeExW 0x1068A2C0 0x6875B4 (6845876) 0x2E1 (737) 0x68BDB2 (6864306)
178 CreateFileMappingW 0x1068A2C4 0x6875C8 (6845896) 0xD3 (211) 0x68BDC6 (6864326)
179 GetFileSize 0x1068A2C8 0x6875DE (6845918) 0x254 (596) 0x68BDDC (6864348)
180 GlobalMemoryStatusEx 0x1068A2CC 0x6875EC (6845932) 0x342 (834) 0x68BDEA (6864362)
181 TlsSetValue 0x1068A2D0 0x687604 (6845956) 0x584 (1412) 0x68BE02 (6864386)
182 GetModuleHandleA 0x1068A2D4 0x687612 (6845970) 0x27E (638) 0x68BE10 (6864400)
183 TlsAlloc 0x1068A2D8 0x687626 (6845990) 0x581 (1409) 0x68BE24 (6864420)
184 TlsFree 0x1068A2DC 0x687632 (6846002) 0x582 (1410) 0x68BE30 (6864432)
185 HeapAlloc 0x1068A2E0 0x68763C (6846012) 0x34D (845) 0x68BE3A (6864442)
186 FlushInstructionCache 0x1068A2E4 0x687648 (6846024) 0x1AE (430) 0x68BE46 (6864454)
187 CreateToolhelp32Snapshot 0x1068A2E8 0x687660 (6846048) 0x10A (266) 0x68BE5E (6864478)
188 Process32FirstW 0x1068A2EC 0x68767C (6846076) 0x428 (1064) 0x68BE7A (6864506)
189 Process32NextW 0x1068A2F0 0x68768E (6846094) 0x42A (1066) 0x68BE8C (6864524)
190 CreateFileW 0x1068A2F4 0x6876A0 (6846112) 0xD6 (214) 0x68BE9E (6864542)
191 WaitNamedPipeW 0x1068A2F8 0x6876AE (6846126) 0x5C2 (1474) 0x68BEAC (6864556)
192 SetNamedPipeHandleState 0x1068A2FC 0x6876C0 (6846144) 0x520 (1312) 0x68BEBE (6864574)
193 OpenEventW 0x1068A300 0x6876DA (6846170) 0x3FC (1020) 0x68BED8 (6864600)
194 TransactNamedPipe 0x1068A304 0x6876E8 (6846184) 0x586 (1414) 0x68BEE6 (6864614)
195 VirtualAlloc 0x1068A308 0x6876FC (6846204) 0x5AB (1451) 0x68BEFA (6864634)
196 VirtualFree 0x1068A30C 0x68770C (6846220) 0x5AE (1454) 0x68BF0A (6864650)
197 VirtualProtect 0x1068A310 0x68771A (6846234) 0x5B1 (1457) 0x68BF18 (6864664)
198 HeapCreate 0x1068A314 0x68772C (6846252) 0x34F (847) 0x68BF2A (6864682)
199 HeapDestroy 0x1068A318 0x68773A (6846266) 0x350 (848) 0x68BF38 (6864696)
200 HeapValidate 0x1068A31C 0x687748 (6846280) 0x359 (857) 0x68BF46 (6864710)
201 SleepEx 0x1068A320 0x687758 (6846296) 0x562 (1378) 0x68BF56 (6864726)
202 SwitchToThread 0x1068A324 0x687762 (6846306) 0x56A (1386) 0x68BF60 (6864736)
203 GetEnvironmentStringsW 0x1068A328 0x687774 (6846324) 0x240 (576) 0x68BF72 (6864754)
204 FreeEnvironmentStringsW 0x1068A32C 0x68778E (6846350) 0x1B7 (439) 0x68BF8C (6864780)
205 DuplicateHandle 0x1068A330 0x6877A8 (6846376) 0x139 (313) 0x68BFA6 (6864806)
206 QueueUserAPC 0x1068A334 0x6877BA (6846394) 0x446 (1094) 0x68BFB8 (6864824)
207 WaitForSingleObjectEx 0x1068A338 0x6877CA (6846410) 0x5BC (1468) 0x68BFC8 (6864840)
208 SetThreadPriority 0x1068A33C 0x6877E2 (6846434) 0x542 (1346) 0x68BFE0 (6864864)
209 GetThreadPriority 0x1068A340 0x6877F6 (6846454) 0x30B (779) 0x68BFF4 (6864884)
210 ResumeThread 0x1068A344 0x68780A (6846474) 0x4B5 (1205) 0x68C008 (6864904)
211 SignalObjectAndWait 0x1068A348 0x68781A (6846490) 0x55D (1373) 0x68C018 (6864920)
212 SetThreadStackGuarantee 0x1068A34C 0x687830 (6846512) 0x544 (1348) 0x68C02E (6864942)
213 IsThreadAFiber 0x1068A350 0x68784A (6846538) 0x38A (906) 0x68C048 (6864968)
214 Sleep 0x1068A354 0x68785C (6846556) 0x55F (1375) 0x68C05A (6864986)
215 FlushProcessWriteBuffers 0x1068A358 0x687864 (6846564) 0x1AF (431) 0x68C062 (6864994)
216 SuspendThread 0x1068A35C 0x687880 (6846592) 0x568 (1384) 0x68C07E (6865022)
217 GetThreadTimes 0x1068A360 0x687890 (6846608) 0x30E (782) 0x68C08E (6865038)
218 SetFilePointer 0x1068A364 0x6878A2 (6846626) 0x508 (1288) 0x68C0A0 (6865056)
219 ReadFile 0x1068A368 0x6878B4 (6846644) 0x458 (1112) 0x68C0B2 (6865074)
220 GetFileAttributesExW 0x1068A36C 0x6878C0 (6846656) 0x24B (587) 0x68C0BE (6865086)
221 GetThreadContext 0x1068A370 0x6878D8 (6846680) 0x302 (770) 0x68C0D6 (6865110)
222 SetThreadContext 0x1068A374 0x6878EC (6846700) 0x539 (1337) 0x68C0EA (6865130)
223 QueryPerformanceFrequency 0x1068A378 0x687900 (6846720) 0x43D (1085) 0x68C0FE (6865150)
224 TerminateProcess 0x1068A37C 0x68791C (6846748) 0x56F (1391) 0x68C11A (6865178)
225 UnhandledExceptionFilter 0x1068A380 0x687930 (6846768) 0x590 (1424) 0x68C12E (6865198)
226 AddVectoredExceptionHandler 0x1068A384 0x68794C (6846796) 0x14 (20) 0x68C14A (6865226)
227 RemoveVectoredExceptionHandler 0x1068A388 0x68796A (6846826) 0x4A7 (1191) 0x68C168 (6865256)
228 IsProcessorFeaturePresent 0x1068A38C 0x68798C (6846860) 0x388 (904) 0x68C18A (6865290)
229 VerifyVersionInfoW 0x1068A390 0x6879A8 (6846888) 0x5AA (1450) 0x68C1A6 (6865318)
230 OutputDebugStringW 0x1068A394 0x6879BE (6846910) 0x415 (1045) 0x68C1BC (6865340)
231 InitializeCriticalSection 0x1068A398 0x6879D4 (6846932) 0x365 (869) 0x68C1D2 (6865362)
232 DeleteCriticalSection 0x1068A39C 0x6879F0 (6846960) 0x11E (286) 0x68C1EE (6865390)
233 TryEnterCriticalSection 0x1068A3A0 0x687A08 (6846984) 0x58A (1418) 0x68C206 (6865414)
234 EnterCriticalSection 0x1068A3A4 0x687A22 (6847010) 0x140 (320) 0x68C220 (6865440)
235 LeaveCriticalSection 0x1068A3A8 0x687A3A (6847034) 0x3BD (957) 0x68C238 (6865464)
236 GetProcessTimes 0x1068A3AC 0x687A52 (6847058) 0x2C4 (708) 0x68C250 (6865488)
237 ResetEvent 0x1068A3B0 0x687A64 (6847076) 0x4AE (1198) 0x68C262 (6865506)
238 PeekNamedPipe 0x1068A3B4 0x687A72 (6847090) 0x41E (1054) 0x68C270 (6865520)
239 InterlockedPopEntrySList 0x1068A3B8 0x687A82 (6847106) 0x372 (882) 0x68C280 (6865536)
240 GetThreadLocale 0x1068A3BC 0x687A9E (6847134) 0x309 (777) 0x68C29C (6865564)
241 InitializeSListHead 0x1068A3C0 0x687AB0 (6847152) 0x369 (873) 0x68C2AE (6865582)
242 InterlockedFlushSList 0x1068A3C4 0x687AC6 (6847174) 0x370 (880) 0x68C2C4 (6865604)
243 GetDriveTypeW 0x1068A3C8 0x687ADE (6847198) 0x239 (569) 0x68C2DC (6865628)
244 CreateMemoryResourceNotification 0x1068A3CC 0x687AEE (6847214) 0xE1 (225) 0x68C2EC (6865644)
245 CloseThreadpoolTimer 0x1068A3D0 0x687B12 (6847250) 0x9B (155) 0x68C310 (6865680)
246 CreateThreadpoolTimer 0x1068A3D4 0x687B2A (6847274) 0x105 (261) 0x68C328 (6865704)
247 SetThreadpoolTimer 0x1068A3D8 0x687B42 (6847298) 0x54A (1354) 0x68C340 (6865728)
248 GetPrivateProfileIntW 0x1068A3DC 0x687B58 (6847320) 0x2AC (684) 0x68C356 (6865750)
249 DisconnectNamedPipe 0x1068A3E0 0x687B70 (6847344) 0x131 (305) 0x68C36E (6865774)
250 CreateNamedPipeW 0x1068A3E4 0x687B86 (6847366) 0xE7 (231) 0x68C384 (6865796)
251 ConnectNamedPipe 0x1068A3E8 0x687B9A (6847386) 0xA8 (168) 0x68C398 (6865816)
252 GetSystemDefaultLCID 0x1068A3EC 0x687BAE (6847406) 0x2E6 (742) 0x68C3AC (6865836)
253 GetUserDefaultLCID 0x1068A3F0 0x687BC6 (6847430) 0x31A (794) 0x68C3C4 (6865860)
254 GetCurrentProcessorNumber 0x1068A3F4 0x687BDC (6847452) 0x225 (549) 0x68C3DA (6865882)
255 CreateIoCompletionPort 0x1068A3F8 0x687BF8 (6847480) 0xDB (219) 0x68C3F6 (6865910)
256 PostQueuedCompletionStatus 0x1068A3FC 0x687C12 (6847506) 0x41F (1055) 0x68C410 (6865936)
257 GetQueuedCompletionStatus 0x1068A400 0x687C30 (6847536) 0x2D0 (720) 0x68C42E (6865966)
258 ReadProcessMemory 0x1068A404 0x687C4C (6847564) 0x45B (1115) 0x68C44A (6865994)
Module ADVAPI32.dll (84 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 CryptEncrypt 0x1068A694 0x6884C0 (6849728) 0xCA (202) 0x68CCBE (6868158)
2 CryptGetDefaultProviderW 0x1068A698 0x6884D0 (6849744) 0xD3 (211) 0x68CCCE (6868174)
3 CryptSetKeyParam 0x1068A69C 0x6884EC (6849772) 0xDD (221) 0x68CCEA (6868202)
4 CryptDeriveKey 0x1068A6A0 0x688500 (6849792) 0xC5 (197) 0x68CCFE (6868222)
5 CryptSetProvParam 0x1068A6A4 0x688512 (6849810) 0xDE (222) 0x68CD10 (6868240)
6 DeleteAce 0x1068A6A8 0x688526 (6849830) 0xE9 (233) 0x68CD24 (6868260)
7 CreateWellKnownSid 0x1068A6AC 0x688532 (6849842) 0x92 (146) 0x68CD30 (6868272)
8 AddAccessAllowedAceEx 0x1068A6B0 0x688548 (6849864) 0x11 (17) 0x68CD46 (6868294)
9 CryptVerifySignatureW 0x1068A6B4 0x688560 (6849888) 0xE6 (230) 0x68CD5E (6868318)
10 LookupAccountSidW 0x1068A6B8 0x688578 (6849912) 0x1A7 (423) 0x68CD76 (6868342)
11 CryptEnumProvidersW 0x1068A6BC 0x68858C (6849932) 0xCE (206) 0x68CD8A (6868362)
12 CryptSignHashW 0x1068A6C0 0x6885A2 (6849954) 0xE4 (228) 0x68CDA0 (6868384)
13 CryptGenKey 0x1068A6C4 0x6885B4 (6849972) 0xD0 (208) 0x68CDB2 (6868402)
14 GetNamedSecurityInfoW 0x1068A6C8 0x6885C2 (6849986) 0x156 (342) 0x68CDC0 (6868416)
15 CryptVerifySignatureA 0x1068A6CC 0x6885DA (6850010) 0xE5 (229) 0x68CDD8 (6868440)
16 CryptSetHashParam 0x1068A6D0 0x6885F2 (6850034) 0xDC (220) 0x68CDF0 (6868464)
17 IsValidSid 0x1068A6D4 0x688606 (6850054) 0x19C (412) 0x68CE04 (6868484)
18 GetSidIdentifierAuthority 0x1068A6D8 0x688614 (6850068) 0x169 (361) 0x68CE12 (6868498)
19 CryptImportKey 0x1068A6DC 0x688630 (6850096) 0xDA (218) 0x68CE2E (6868526)
20 CryptGetKeyParam 0x1068A6E0 0x688642 (6850114) 0xD5 (213) 0x68CE40 (6868544)
21 CryptGetProvParam 0x1068A6E4 0x688656 (6850134) 0xD6 (214) 0x68CE54 (6868564)
22 CryptEnumProvidersA 0x1068A6E8 0x68866A (6850154) 0xCD (205) 0x68CE68 (6868584)
23 RegOpenKeyExA 0x1068A6EC 0x688680 (6850176) 0x288 (648) 0x68CE7E (6868606)
24 RegQueryInfoKeyA 0x1068A6F0 0x688690 (6850192) 0x28F (655) 0x68CE8E (6868622)
25 RegSetValueExA 0x1068A6F4 0x6886A4 (6850212) 0x2A5 (677) 0x68CEA2 (6868642)
26 RegQueryValueExA 0x1068A6F8 0x6886B6 (6850230) 0x295 (661) 0x68CEB4 (6868660)
27 RegDeleteValueW 0x1068A6FC 0x6886CA (6850250) 0x270 (624) 0x68CEC8 (6868680)
28 RegDeleteValueA 0x1068A700 0x6886DC (6850268) 0x26F (623) 0x68CEDA (6868698)
29 RegEnumValueA 0x1068A704 0x6886EE (6850286) 0x279 (633) 0x68CEEC (6868716)
30 RegEnumKeyExA 0x1068A708 0x6886FE (6850302) 0x276 (630) 0x68CEFC (6868732)
31 RegDeleteKeyA 0x1068A70C 0x68870E (6850318) 0x265 (613) 0x68CF0C (6868748)
32 RegCreateKeyExA 0x1068A710 0x68871E (6850334) 0x260 (608) 0x68CF1C (6868764)
33 CryptGetUserKey 0x1068A714 0x688730 (6850352) 0xD7 (215) 0x68CF2E (6868782)
34 CryptAcquireContextA 0x1068A718 0x688742 (6850370) 0xC0 (192) 0x68CF40 (6868800)
35 CryptDestroyKey 0x1068A71C 0x68875A (6850394) 0xC7 (199) 0x68CF58 (6868824)
36 CryptExportKey 0x1068A720 0x68876C (6850412) 0xCF (207) 0x68CF6A (6868842)
37 CryptHashData 0x1068A724 0x68877E (6850430) 0xD8 (216) 0x68CF7C (6868860)
38 CryptDestroyHash 0x1068A728 0x68878E (6850446) 0xC6 (198) 0x68CF8C (6868876)
39 CryptCreateHash 0x1068A72C 0x6887A2 (6850466) 0xC3 (195) 0x68CFA0 (6868896)
40 CryptGetHashParam 0x1068A730 0x6887B4 (6850484) 0xD4 (212) 0x68CFB2 (6868914)
41 CopySid 0x1068A734 0x6887C8 (6850504) 0x85 (133) 0x68CFC6 (6868934)
42 DuplicateToken 0x1068A738 0x6887D2 (6850514) 0xEE (238) 0x68CFD0 (6868944)
43 ReportEventW 0x1068A73C 0x6887E4 (6850532) 0x2BB (699) 0x68CFE2 (6868962)
44 DeregisterEventSource 0x1068A740 0x6887F4 (6850548) 0xEB (235) 0x68CFF2 (6868978)
45 RegisterEventSourceW 0x1068A744 0x68880C (6850572) 0x2AB (683) 0x68D00A (6869002)
46 GetSidSubAuthorityCount 0x1068A748 0x688824 (6850596) 0x16C (364) 0x68D022 (6869026)
47 GetSidSubAuthority 0x1068A74C 0x68883E (6850622) 0x16B (363) 0x68D03C (6869052)
48 RegSetValueExW 0x1068A750 0x688854 (6850644) 0x2A6 (678) 0x68D052 (6869074)
49 RegEnumValueW 0x1068A754 0x688866 (6850662) 0x27A (634) 0x68D064 (6869092)
50 RegDeleteKeyW 0x1068A758 0x688876 (6850678) 0x26C (620) 0x68D074 (6869108)
51 RegCreateKeyExW 0x1068A75C 0x688886 (6850694) 0x261 (609) 0x68D084 (6869124)
52 AddAccessAllowedAce 0x1068A760 0x688898 (6850712) 0x10 (16) 0x68D096 (6869142)
53 GetLengthSid 0x1068A764 0x6888AE (6850734) 0x14A (330) 0x68D0AC (6869164)
54 EventWriteTransfer 0x1068A768 0x6888BE (6850750) 0x128 (296) 0x68D0BC (6869180)
55 RegQueryInfoKeyW 0x1068A76C 0x6888D4 (6850772) 0x290 (656) 0x68D0D2 (6869202)
56 RegQueryValueW 0x1068A770 0x6888E8 (6850792) 0x297 (663) 0x68D0E6 (6869222)
57 RegOpenKeyExW 0x1068A774 0x6888FA (6850810) 0x289 (649) 0x68D0F8 (6869240)
58 CryptReleaseContext 0x1068A778 0x68890A (6850826) 0xDB (219) 0x68D108 (6869256)
59 CryptGenRandom 0x1068A77C 0x688920 (6850848) 0xD1 (209) 0x68D11E (6869278)
60 CryptAcquireContextW 0x1068A780 0x688932 (6850866) 0xC1 (193) 0x68D130 (6869296)
61 ImpersonateLoggedOnUser 0x1068A784 0x68894A (6850890) 0x189 (393) 0x68D148 (6869320)
62 EventUnregister 0x1068A788 0x688964 (6850916) 0x122 (290) 0x68D162 (6869346)
63 EventRegister 0x1068A78C 0x688976 (6850934) 0x120 (288) 0x68D174 (6869364)
64 SetThreadToken 0x1068A790 0x688986 (6850950) 0x2EE (750) 0x68D184 (6869380)
65 RevertToSelf 0x1068A794 0x688998 (6850968) 0x2BC (700) 0x68D196 (6869398)
66 GetAce 0x1068A798 0x6889A8 (6850984) 0x136 (310) 0x68D1A6 (6869414)
67 InitializeAcl 0x1068A79C 0x6889B2 (6850994) 0x18C (396) 0x68D1B0 (6869424)
68 GetSecurityDescriptorDacl 0x1068A7A0 0x6889C2 (6851010) 0x15C (348) 0x68D1C0 (6869440)
69 SetKernelObjectSecurity 0x1068A7A4 0x6889DE (6851038) 0x2DA (730) 0x68D1DC (6869468)
70 RegQueryValueExW 0x1068A7A8 0x6889F8 (6851064) 0x296 (662) 0x68D1F6 (6869494)
71 RegEnumKeyExW 0x1068A7AC 0x688A0C (6851084) 0x277 (631) 0x68D20A (6869514)
72 RegCloseKey 0x1068A7B0 0x688A1C (6851100) 0x258 (600) 0x68D21A (6869530)
73 OpenThreadToken 0x1068A7B4 0x688A2A (6851114) 0x217 (535) 0x68D228 (6869544)
74 ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1068A7B8 0x688A3C (6851132) 0x81 (129) 0x68D23A (6869562)
75 ConvertSidToStringSidW 0x1068A7BC 0x688A74 (6851188) 0x7B (123) 0x68D272 (6869618)
76 EventWrite 0x1068A7C0 0x688A8E (6851214) 0x123 (291) 0x68D28C (6869644)
77 FreeSid 0x1068A7C4 0x688A9C (6851228) 0x133 (307) 0x68D29A (6869658)
78 SetSecurityDescriptorDacl 0x1068A7C8 0x688AA6 (6851238) 0x2E3 (739) 0x68D2A4 (6869668)
79 InitializeSecurityDescriptor 0x1068A7CC 0x688AC2 (6851266) 0x18D (397) 0x68D2C0 (6869696)
80 SetEntriesInAclW 0x1068A7D0 0x688AE2 (6851298) 0x2D3 (723) 0x68D2E0 (6869728)
81 AllocateAndInitializeSid 0x1068A7D4 0x688AF6 (6851318) 0x20 (32) 0x68D2F4 (6869748)
82 GetTokenInformation 0x1068A7D8 0x688B12 (6851346) 0x16F (367) 0x68D310 (6869776)
83 OpenProcessToken 0x1068A7DC 0x688B28 (6851368) 0x212 (530) 0x68D326 (6869798)
84 CryptDecrypt 0x1068A7E0 0x688B3C (6851388) 0xC4 (196) 0x68D33A (6869818)
Module ntdll.dll (4 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 RtlNtStatusToDosError 0x1068A5EC 0x688216 (6849046) 0x45E (1118) 0x68CA14 (6867476)
2 VerSetConditionMask 0x1068A5F0 0x68822E (6849070) 0x5CE (1486) 0x68CA2C (6867500)
3 RtlUnwind 0x1068A5F4 0x688244 (6849092) 0x536 (1334) 0x68CA42 (6867522)
4 RtlCaptureContext 0x1068A5F8 0x688250 (6849104) 0x2AD (685) 0x68CA4E (6867534)
Module SHLWAPI.dll (24 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 UrlIsW 0x1068A630 0x68833A (6849338) 0x172 (370) 0x68CB38 (6867768)
2 UrlUnescapeW 0x1068A634 0x688344 (6849348) 0x174 (372) 0x68CB42 (6867778)
3 StrCmpW 0x1068A638 0x688354 (6849364) 0x12C (300) 0x68CB52 (6867794)
4 PathCreateFromUrlW 0x1068A63C 0x68835E (6849374) 0x47 (71) 0x68CB5C (6867804)
5 UrlCanonicalizeW 0x1068A640 0x688374 (6849396) 0x15D (349) 0x68CB72 (6867826)
6 PathAddBackslashW 0x1068A644 0x688388 (6849416) 0x34 (52) 0x68CB86 (6867846)
7 PathIsURLW 0x1068A648 0x68839C (6849436) 0x78 (120) 0x68CB9A (6867866)
8 UrlCombineW 0x1068A64C 0x6883AA (6849450) 0x15F (351) 0x68CBA8 (6867880)
9 StrStrW 0x1068A650 0x6883B8 (6849464) 0x151 (337) 0x68CBB6 (6867894)
10 UrlGetPartW 0x1068A654 0x6883C2 (6849474) 0x16A (362) 0x68CBC0 (6867904)
11 StrRChrW 0x1068A658 0x6883D0 (6849488) 0x142 (322) 0x68CBCE (6867918)
12 PathRemoveFileSpecW 0x1068A65C 0x6883DC (6849500) 0x90 (144) 0x68CBDA (6867930)
13 PathRemoveExtensionW 0x1068A660 0x6883F2 (6849522) 0x8E (142) 0x68CBF0 (6867952)
14 StrToIntW 0x1068A664 0x68840A (6849546) 0x157 (343) 0x68CC08 (6867976)
15 StrCmpNW 0x1068A668 0x688416 (6849558) 0x12B (299) 0x68CC14 (6867988)
16 StrChrW 0x1068A66C 0x688422 (6849570) 0x11D (285) 0x68CC20 (6868000)
17 PathIsRelativeW 0x1068A670 0x68842C (6849580) 0x6A (106) 0x68CC2A (6868010)
18 PathFindExtensionW 0x1068A674 0x68843E (6849598) 0x4C (76) 0x68CC3C (6868028)
19 PathRemoveBackslashW 0x1068A678 0x688454 (6849620) 0x8A (138) 0x68CC52 (6868050)
20 PathCombineW 0x1068A67C 0x68846C (6849644) 0x3E (62) 0x68CC6A (6868074)
21 PathFindFileNameW 0x1068A680 0x68847C (6849660) 0x4E (78) 0x68CC7A (6868090)
22 PathCanonicalizeW 0x1068A684 0x688490 (6849680) 0x3C (60) 0x68CC8E (6868110)
23 PathIsUNCW 0x1068A688 0x6884A4 (6849700) 0x76 (118) 0x68CCA2 (6868130)
24 UrlEscapeW 0x1068A68C 0x6884B2 (6849714) 0x165 (357) 0x68CCB0 (6868144)
Module USER32.dll (11 functions)
# Function Name Address Name Offset Hint Hint Name Table RVA
1 GetDesktopWindow 0x1068A600 0x688264 (6849124) 0x138 (312) 0x68CA62 (6867554)
2 TranslateMessage 0x1068A604 0x688278 (6849144) 0x33B (827) 0x68CA76 (6867574)
3 PeekMessageW 0x1068A608 0x68828C (6849164) 0x26A (618) 0x68CA8A (6867594)
4 MsgWaitForMultipleObjectsEx 0x1068A60C 0x68829C (6849180) 0x253 (595) 0x68CA9A (6867610)
5 DispatchMessageW 0x1068A610 0x6882BA (6849210) 0xB6 (182) 0x68CAB8 (6867640)
6 wsprintfW 0x1068A614 0x6882CE (6849230) 0x376 (886) 0x68CACC (6867660)
7 LoadStringW 0x1068A618 0x6882DA (6849242) 0x22F (559) 0x68CAD8 (6867672)
8 GetProcessWindowStation 0x1068A61C 0x6882E8 (6849256) 0x192 (402) 0x68CAE6 (6867686)
9 GetUserObjectInformationW 0x1068A620 0x688302 (6849282) 0x1B7 (439) 0x68CB00 (6867712)
10 InSendMessage 0x1068A624 0x68831E (6849310) 0x1E1 (481) 0x68CB1C (6867740)
11 GetFocus 0x1068A628 0x68832E (6849326) 0x142 (322) 0x68CB2C (6867756)