윈도우 2k: kernel32, ntdll 함수 덤프

@codemaru · September 04, 2014 · 32 min read

MSDN 도움말에서 윈도우 2000이 사라진지 참 오래됐지요. 그럼에도 불구하고 여전히 윈도우 2000에서 돌아가는 프로그램을 만들어야 하는 개발자라면 과연 이 API가 윈도우 2000에 있는건지 없는건지 참 헷갈리는 경우가 많습니다. 그래서 써야 할까 말아야 할까? 동적 바인딩을 해야할까? 그냥 써도 될까? 궁금한거죠. 그러다 까딱 잘못하면 뭐 함수를 찾을 수 없다는 엄청난 오류에 봉착하곤 합니다. 그래서 매번 테스트 해보거나 윈도우 2000에서 dependency walker에 넣어서 보곤 했는데요. 귀찮아서 한번 덤프를 떠봤습니다. 저같은 고민을 하는 개발자라면 도움이 될지도 모르겠습니다. 윈도우 2000에 포함된 kernel32.dll과 ntdll.dll에 포함된 함수 덤프 정보입니다. 다소 스압이 있을지도 모르니 주의하시길 ㅋ~

덧) 특정 DLL의 익스포트 함수 목록을 추출하는 방법이 궁금하신 분들은 dump_eat 프로젝트 소스 코드를 다운로드 받아보세요.

kernel32.dll 정보

// kernel32.dll
   1 0001B65B AddAtomA
   2 0000DF58 AddAtomW
   3 0004639D AddConsoleAliasA
   4 00046366 AddConsoleAliasW
   5 00047187 AllocConsole
   6 000355B2 AllocateUserPhysicalPages
   7 00016C75 AreFileApisANSI
   8 00045AF4 AssignProcessToJobObject
   9 0002B9F6 BackupRead
  10 0002BC52 BackupSeek
  11 0002C5B9 BackupWrite
  12 0002ABAC BaseAttachCompleteThunk
  13 0002C7D7 Beep
  14 000423C9 BeginUpdateResourceA
  15 000421D2 BeginUpdateResourceW
  16 0003C271 BindIoCompletionCallback
  17 00044B59 BuildCommDCBA
  18 00044AE3 BuildCommDCBAndTimeoutsA
  19 00044A90 BuildCommDCBAndTimeoutsW
  20 00044B09 BuildCommDCBW
  21 000374F3 CallNamedPipeA
  22 000028B5 CallNamedPipeW
  23 000382B3 CancelDeviceWakeupRequest
  24 00030DFA CancelIo
  25 0003C4D4 CancelTimerQueueTimer
  26 0000301C CancelWaitableTimer
  27 0003C38F ChangeTimerQueueTimer
  28 0003DF83 ClearCommBreak
  29 0003DF91 ClearCommError
  30 00005C50 CloseConsoleHandle
  31 00009168 CloseHandle
  32 0001F8CB CloseProfileUserMapping
  33 00021580 CmdBatNotification
  34 0003DB27 CommConfigDialogA
  35 0003DA4B CommConfigDialogW
  36 0001076D CompareFileTime
  37 0000D3D4 CompareStringA
  38 0000E2FB CompareStringW
  39 00009A1D ConnectNamedPipe
  40 000040CC ConsoleMenuControl
  41 0002DDC9 ContinueDebugEvent
  42 00004856 ConvertDefaultLocale
  43 00020E6C ConvertThreadToFiber
  44 000146C0 CopyFileA
  45 000324D4 CopyFileExA
  46 00014736 CopyFileExW
  47 00020069 CopyFileW
  48 0004876A CreateConsoleScreenBuffer
  49 000239D8 CreateDirectoryA
  50 0002E0A8 CreateDirectoryExA
  51 0001F9FD CreateDirectoryExW
  52 0001DFF5 CreateDirectoryW
  53 00014CEA CreateEventA
  54 0001B259 CreateEventW
  55 00020D7E CreateFiber
  56 00020D96 CreateFiberEx
  57 000157E2 CreateFileA
  58 0000C8DA CreateFileMappingA
  59 000143E4 CreateFileMappingW
  60 0000C351 CreateFileW
  61 00045CFA CreateHardLinkA
  62 00045D4D CreateHardLinkW
  63 000099CD CreateIoCompletionPort
  64 0004594B CreateJobObjectA
  65 000459B0 CreateJobObjectW
  66 00016DA5 CreateMailslotA
  67 00016CAF CreateMailslotW
  68 0000A4F6 CreateMutexA
  69 0001D584 CreateMutexW
  70 00036D7A CreateNamedPipeA
  71 00022806 CreateNamedPipeW
  72 000206B1 CreatePipe
  73 0001C0A0 CreateProcessA
  74 0001BF86 CreateProcessInternalA
  75 00011BA0 CreateProcessInternalW
  76 00038628 CreateProcessInternalWSecure
  77 0000B252 CreateProcessW
  78 000133C3 CreateRemoteThread
  79 00006890 CreateSemaphoreA
  80 0001EAD5 CreateSemaphoreW
  81 0004583F CreateTapePartition
  82 000095C2 CreateThread
  83 0003C31A CreateTimerQueue
  84 0003C33B CreateTimerQueueTimer
  85 0003C50F CreateToolhelp32Snapshot
  86 00006DC4 CreateVirtualBuffer
  87 00002FE4 CreateWaitableTimerA
  88 00020B94 CreateWaitableTimerW
  89 0002DDFB DebugActiveProcess
  90 0002D9F6 DebugBreak
  91 000303DF DefineDosDeviceA
  92 000148BE DefineDosDeviceW
  93 00057090 DelayLoadFailureHook
  94 0000DFA9 DeleteAtom
  95          DeleteCriticalSection => NTDLL.RtlDeleteCriticalSection
  96 00020E22 DeleteFiber
  97 0001BEEA DeleteFileA
  98 0000D9F9 DeleteFileW
  99 0003C4B0 DeleteTimerQueue
 100 0003C41B DeleteTimerQueueEx
 101 0003C3D0 DeleteTimerQueueTimer
 102 00041972 DeleteVolumeMountPointA
 103 00041B33 DeleteVolumeMountPointW
 104 0001D626 DeviceIoControl
 105 0001C912 DisableThreadLibraryCalls
 106 00009A9D DisconnectNamedPipe
 107 0002D1D3 DnsHostnameToComputerNameA
 108 0002D13B DnsHostnameToComputerNameW
 109 00007B91 DosDateTimeToFileTime
 110 00039A1B DosPathToSessionPathA
 111 00017417 DosPathToSessionPathW
 112 00005C98 DuplicateConsoleHandle
 113 0000E960 DuplicateHandle
 114 00042746 EndUpdateResourceA
 115 000425DA EndUpdateResourceW
 116          EnterCriticalSection => NTDLL.RtlEnterCriticalSection
 117 0004ACB8 EnumCalendarInfoA
 118 0004ACD4 EnumCalendarInfoExA
 119 0004D407 EnumCalendarInfoExW
 120 0004D3EB EnumCalendarInfoW
 121 0004AD06 EnumDateFormatsA
 122 0004AD1E EnumDateFormatsExA
 123 0004D423 EnumDateFormatsExW
 124 0001814F EnumDateFormatsW
 125 0004AEB0 EnumLanguageGroupLocalesA
 126 0004D3A9 EnumLanguageGroupLocalesW
 127 0003695F EnumResourceLanguagesA
 128 00023BC7 EnumResourceLanguagesW
 129 0003673A EnumResourceNamesA
 130 00001530 EnumResourceNamesW
 131 00036545 EnumResourceTypesA
 132 00036ADD EnumResourceTypesW
 133 0004AEE0 EnumSystemCodePagesA
 134 0004D3D9 EnumSystemCodePagesW
 135 0004AE9A EnumSystemLanguageGroupsA
 136 0004D393 EnumSystemLanguageGroupsW
 137 00017BA1 EnumSystemLocalesA
 138 00018127 EnumSystemLocalesW
 139 0004ACF0 EnumTimeFormatsA
 140 00018139 EnumTimeFormatsW
 141 0004AECA EnumUILanguagesA
 142 0004D3C3 EnumUILanguagesW
 143 00045813 EraseTape
 144 0003E1AD EscapeCommFunction
 145 0000E01A ExitProcess
 146 00005F3B ExitThread
 147 000031EF ExitVDM
 148 00017208 ExpandEnvironmentStringsA
 149 0001A0EC ExpandEnvironmentStringsW
 150 0004699E ExpungeConsoleCommandHistoryA
 151 00046990 ExpungeConsoleCommandHistoryW
 152 00035E47 ExtendVirtualBuffer
 153 00039397 FatalAppExitA
 154 00039350 FatalAppExitW
 155 000393DE FatalExit
 156 0000D1B2 FileTimeToDosDateTime
 157 0000EA21 FileTimeToLocalFileTime
 158 000095E2 FileTimeToSystemTime
 159 000045A6 FillConsoleOutputAttribute
 160 0004872D FillConsoleOutputCharacterA
 161 0004874D FillConsoleOutputCharacterW
 162 00016410 FindAtomA
 163 0002EAD1 FindAtomW
 164 0000EE4B FindClose
 165 0001B2CF FindCloseChangeNotification
 166 000249A2 FindFirstChangeNotificationA
 167 0001B6AB FindFirstChangeNotificationW
 168 0001D88F FindFirstFileA
 169 00030748 FindFirstFileExA
 170 0000C96C FindFirstFileExW
 171 00007770 FindFirstFileW
 172 0004048D FindFirstVolumeA
 173 00040738 FindFirstVolumeMountPointA
 174 00040B52 FindFirstVolumeMountPointW
 175 00003F28 FindFirstVolumeW
 176 00023D67 FindNextChangeNotification
 177 00010275 FindNextFileA
 178 0000CCB3 FindNextFileW
 179 000405CC FindNextVolumeA
 180 00040C5F FindNextVolumeMountPointA
 181 00040EB5 FindNextVolumeMountPointW
 182 00021E34 FindNextVolumeW
 183 0001D38D FindResourceA
 184 00014B2C FindResourceExA
 185 0000B82D FindResourceExW
 186 0000B622 FindResourceW
 187 00004052 FindVolumeClose
 188 0001B2CF FindVolumeMountPointClose
 189 000045C3 FlushConsoleInputBuffer
 190 0001C9CC FlushFileBuffers
 191 0001132B FlushInstructionCache
 192 0000E2C6 FlushViewOfFile
 193 0004AD44 FoldStringA
 194 0001AD12 FoldStringW
 195 00016DEF FormatMessageA
 196 00006DA1 FormatMessageW
 197 0004739A FreeConsole
 198 0000A8A4 FreeEnvironmentStringsA
 199 0000A8A4 FreeEnvironmentStringsW
 200 0000DFDA FreeLibrary
 201 0000FFE9 FreeLibraryAndExitThread
 202 0000754C FreeResource
 203 000355D9 FreeUserPhysicalPages
 204 00006E63 FreeVirtualBuffer
 205 00048E8F GenerateConsoleCtrlEvent
 206 0000FE74 GetACP
 207 00023F24 GetAtomNameA
 208 0000DF68 GetAtomNameW
 209 0003EFCA GetBinaryType
 210 0003EFCA GetBinaryTypeA
 211 00020F84 GetBinaryTypeW
 212 0000B732 GetCPInfo
 213 0004AEF2 GetCPInfoExA
 214 00050CF3 GetCPInfoExW
 215 0004A4C6 GetCalendarInfoA
 216 00004EDC GetCalendarInfoW
 217 0003E2AE GetCommConfig
 218 0003E43C GetCommMask
 219 0003E4BA GetCommModemStatus
 220 0003E538 GetCommProperties
 221 0003E5E9 GetCommState
 222 0003E87C GetCommTimeouts
 223 00014B16 GetCommandLineA
 224 0001386F GetCommandLineW
 225 00031D43 GetCompressedFileSizeA
 226 00031D64 GetCompressedFileSizeW
 227 0001631F GetComputerNameA
 228 00001779 GetComputerNameExA
 229 0001C5F7 GetComputerNameExW
 230 0000F7C8 GetComputerNameW
 231 00046505 GetConsoleAliasA
 232 000468F9 GetConsoleAliasExesA
 233 0004663F GetConsoleAliasExesLengthA
 234 00046637 GetConsoleAliasExesLengthW
 235 000468E7 GetConsoleAliasExesW
 236 000464E0 GetConsoleAliasW
 237 000467B3 GetConsoleAliasesA
 238 000465D2 GetConsoleAliasesLengthA
 239 000465C4 GetConsoleAliasesLengthW
 240 0004679D GetConsoleAliasesW
 241 0000465B GetConsoleCP
 242 00049746 GetConsoleCharType
 243 00046C80 GetConsoleCommandHistoryA
 244 00046B0A GetConsoleCommandHistoryLengthA
 245 00046AFC GetConsoleCommandHistoryLengthW
 246 00046C6A GetConsoleCommandHistoryW
 247 00022291 GetConsoleCursorInfo
 248 00049911 GetConsoleCursorMode
 249 000220DB GetConsoleDisplayMode
 250 00048C35 GetConsoleFontInfo
 251 00048D5C GetConsoleFontSize
 252 000479C5 GetConsoleHardwareState
 253 00046D91 GetConsoleInputExeNameA
 254 00046E12 GetConsoleInputExeNameW
 255 00047478 GetConsoleInputWaitHandle
 256 00004710 GetConsoleKeyboardLayoutNameA
 257 000494F7 GetConsoleKeyboardLayoutNameW
 258 0000C0DA GetConsoleMode
 259 00049554 GetConsoleNlsMode
 260 0000C16D GetConsoleOutputCP
 261 0001CEAA GetConsoleScreenBufferInfo
 262 00046D2A GetConsoleTitleA
 263 0000EDB2 GetConsoleTitleW
 264 00049505 GetConsoleWindow
 265 0004AA47 GetCurrencyFormatA
 266 00053056 GetCurrencyFormatW
 267 00048DC4 GetCurrentConsoleFont
 268 00015813 GetCurrentDirectoryA
 269 0001BAC7 GetCurrentDirectoryW
 270 0001E0C8 GetCurrentProcess
 271 0000B8F4 GetCurrentProcessId
 272 00015633 GetCurrentThread
 273 000110D1 GetCurrentThreadId
 274 00017A38 GetDateFormatA
 275 00018893 GetDateFormatW
 276 0003DCE2 GetDefaultCommConfigA
 277 0003DC06 GetDefaultCommConfigW
 278 00055438 GetDefaultSortkeySize
 279 0003824E GetDevicePowerState
 280 0000ACF8 GetDiskFreeSpaceA
 281 0001AE60 GetDiskFreeSpaceExA
 282 0001AE8E GetDiskFreeSpaceExW
 283 0000AD29 GetDiskFreeSpaceW
 284 0000A6B4 GetDriveTypeA
 285 000067A7 GetDriveTypeW
 286 0001092C GetEnvironmentStrings
 287 0001092C GetEnvironmentStringsA
 288 0000733F GetEnvironmentStringsW
 289 0000614F GetEnvironmentVariableA
 290 0000BB88 GetEnvironmentVariableW
 291 0001BC2B GetExitCodeProcess
 292 0001F362 GetExitCodeThread
 293 00015134 GetFileAttributesA
 294 0003112C GetFileAttributesExA
 295 0001DCC7 GetFileAttributesExW
 296 0001B5CE GetFileAttributesW
 297 0000B0C4 GetFileInformationByHandle
 298 0001D0D4 GetFileSize
 299 0001D109 GetFileSizeEx
 300 00005E40 GetFileTime
 301 0001544F GetFileType
 302 00007A45 GetFullPathNameA
 303 00005D07 GetFullPathNameW
 304 000356C0 GetHandleInformation
 305 00048ADF GetLargestConsoleWindowSize
 306 0001278D GetLastError
 307 00055456 GetLinguistLangSize
 308 000106E0 GetLocalTime
 309 0000A132 GetLocaleInfoA
 310 00007786 GetLocaleInfoW
 311 00037D4E GetLogicalDriveStringsA
 312 000029BF GetLogicalDriveStringsW
 313 0000E4DB GetLogicalDrives
 314 00040164 GetLongPathNameA
 315 00021A72 GetLongPathNameW
 316 00035CB6 GetMailslotInfo
 317 00014C44 GetModuleFileNameA
 318 00010FB7 GetModuleFileNameW
 319 0000AB06 GetModuleHandleA
 320 00010182 GetModuleHandleW
 321 00036F92 GetNamedPipeHandleStateA
 322 00037071 GetNamedPipeHandleStateW
 323 00037290 GetNamedPipeInfo
 324 00021179 GetNextVDMCommand
 325 00011191 GetNlsSectionName
 326 0004A825 GetNumberFormatA
 327 00022C57 GetNumberFormatW
 328 000489D7 GetNumberOfConsoleFonts
 329 00048A26 GetNumberOfConsoleInputEvents
 330 00048B85 GetNumberOfConsoleMouseButtons
 331 00011562 GetOEMCP
 332 0001449E GetOverlappedResult
 333 00039573 GetPriorityClass
 334 0000ACAE GetPrivateProfileIntA
 335 00015F45 GetPrivateProfileIntW
 336 0002F005 GetPrivateProfileSectionA
 337 0002EAE1 GetPrivateProfileSectionNamesA
 338 0002EAFA GetPrivateProfileSectionNamesW
 339 00023726 GetPrivateProfileSectionW
 340 0000EC3E GetPrivateProfileStringA
 341 0000D957 GetPrivateProfileStringW
 342 0002EB13 GetPrivateProfileStructA
 343 0002EC24 GetPrivateProfileStructW
 344 0000E6A9 GetProcAddress
 345 000173D7 GetProcessAffinityMask
 346 0000AC86 GetProcessHeap
 347 00016C9C GetProcessHeaps
 348 000398B6 GetProcessIoCounters
 349 00039883 GetProcessPriorityBoost
 350 00039617 GetProcessShutdownParameters
 351 00039692 GetProcessTimes
 352 0001C933 GetProcessVersion
 353 00039705 GetProcessWorkingSetSize
 354 00011538 GetProfileIntA
 355 00016420 GetProfileIntW
 356 0002EF51 GetProfileSectionA
 357 00023710 GetProfileSectionW
 358 0000C905 GetProfileStringA
 359 0000AB2B GetProfileStringW
 360 0000FE7A GetQueuedCompletionStatus
 361 0001A1E1 GetShortPathNameA
 362 0001E1CC GetShortPathNameW
 363 000149DF GetStartupInfoA
 364 00017109 GetStartupInfoW
 365 0000AF0D GetStdHandle
 366 00017B2B GetStringTypeA
 367 000223CA GetStringTypeExA
 368 00017CB0 GetStringTypeExW
 369 00006658 GetStringTypeW
 370 00019A86 GetSystemDefaultLCID
 371 00015150 GetSystemDefaultLangID
 372 0001F14B GetSystemDefaultUILanguage
 373 0000EDED GetSystemDirectoryA
 374 0000FF1C GetSystemDirectoryW
 375 0001AAA4 GetSystemInfo
 376 000207D1 GetSystemPowerStatus
 377 000069F9 GetSystemTime
 378 0002D737 GetSystemTimeAdjustment
 379 000072E5 GetSystemTimeAsFileTime
 380 00019796 GetSystemWindowsDirectoryA
 381 000078B2 GetSystemWindowsDirectoryW
 382 000458A5 GetTapeParameters
 383 0004578F GetTapePosition
 384 00045934 GetTapeStatus
 385 000070D4 GetTempFileNameA
 386 0001D962 GetTempFileNameW
 387 00013B81 GetTempPathA
 388 00006476 GetTempPathW
 389 00003050 GetThreadContext
 390 0000C1C4 GetThreadLocale
 391 0000A545 GetThreadPriority
 392 0003BB69 GetThreadPriorityBoost
 393 0002DFF6 GetThreadSelectorEntry
 394 00020D1E GetThreadTimes
 395 00015594 GetTickCount
 396 0001796C GetTimeFormatA
 397 0001B481 GetTimeFormatW
 398 00015177 GetTimeZoneInformation
 399 000115AD GetUserDefaultLCID
 400 000115AD GetUserDefaultLangID
 401 0001E96D GetUserDefaultUILanguage
 402 0003F3F3 GetVDMCurrentDirectories
 403 0001EB3A GetVersion
 404 00013C2D GetVersionExA
 405 0000E8A7 GetVersionExW
 406 0001199F GetVolumeInformationA
 407 000109E7 GetVolumeInformationW
 408 00040ECB GetVolumeNameForVolumeMountPointA
 409 000076EC GetVolumeNameForVolumeMountPointW
 410 00041E15 GetVolumePathNameA
 411 00041F32 GetVolumePathNameW
 412 00009C00 GetWindowsDirectoryA
 413 0000B810 GetWindowsDirectoryW
 414 00035668 GetWriteWatch
 415 0000E2B6 GlobalAddAtomA
 416 0000727B GlobalAddAtomW
 417 000116B4 GlobalAlloc
 418 0003599B GlobalCompact
 419 0001596E GlobalDeleteAtom
 420 00009F88 GlobalFindAtomA
 421 0000CC0B GlobalFindAtomW
 422 000354A9 GlobalFix
 423 00015B74 GlobalFlags
 424 000132AF GlobalFree
 425 000248EE GlobalGetAtomNameA
 426 0000DF91 GlobalGetAtomNameW
 427 00014344 GlobalHandle
 428 0001E6AF GlobalLock
 429 00009D2A GlobalMemoryStatus
 430 000025DB GlobalMemoryStatusEx
 431 00007416 GlobalReAlloc
 432 00014286 GlobalSize
 433 000354E2 GlobalUnWire
 434 000354BE GlobalUnfix
 435 0000B426 GlobalUnlock
 436 000354D3 GlobalWire
 437 0003C6D1 Heap32First
 438 0003C590 Heap32ListFirst
 439 0003C63F Heap32ListNext
 440 0003C7DD Heap32Next
 441          HeapAlloc => NTDLL.RtlAllocateHeap
 442 000073F4 HeapCompact
 443 0001AE05 HeapCreate
 444 00035A18 HeapCreateTagsW
 445 00014567 HeapDestroy
 446 000359EE HeapExtend
 447          HeapFree => NTDLL.RtlFreeHeap
 448 00035B0E HeapLock
 449 00035A31 HeapQueryTagW
 450          HeapReAlloc => NTDLL.RtlReAllocateHeap
 451          HeapSize => NTDLL.RtlSizeHeap
 452 00035A4D HeapSummary
 453 00035B21 HeapUnlock
 454 00035AA1 HeapUsage
 455 0001B240 HeapValidate
 456 00035B34 HeapWalk
 457 0002EAAA InitAtomTable
 458 0001BE13 InitializeCriticalSection
 459 00015157 InitializeCriticalSectionAndSpinCount
 460 0000A96D InterlockedCompareExchange
 461 0001C23D InterlockedDecrement
 462 00008FBC InterlockedExchange
 463 00013E7C InterlockedExchangeAdd
 464 0001C22C InterlockedIncrement
 465 000488FC InvalidateConsoleDIBits
 466 000150C4 IsBadCodePtr
 467 00006AE2 IsBadHugeReadPtr
 468 0000A4E6 IsBadHugeWritePtr
 469 0000F0F7 IsBadReadPtr
 470 0001BE4B IsBadStringPtrA
 471 000159F3 IsBadStringPtrW
 472 0001A055 IsBadWritePtr
 473 0000CC8D IsDBCSLeadByte
 474 0001871B IsDBCSLeadByteEx
 475 0000191E IsDebuggerPresent
 476 000062D7 IsProcessorFeaturePresent
 477 0003828B IsSystemResumeAutomatic
 478 000060C4 IsValidCodePage
 479 0004BF19 IsValidLanguageGroup
 480 00017D7E IsValidLocale
 481 00017859 LCMapStringA
 482 00019CA1 LCMapStringW
 483          LeaveCriticalSection => NTDLL.RtlLeaveCriticalSection
 484 000105CF LoadLibraryA
 485 00010606 LoadLibraryExA
 486 0001A952 LoadLibraryExW
 487 000152C5 LoadLibraryW
 488 00038FAD LoadModule
 489 0000A63A LoadResource
 490 0001C13B LocalAlloc
 491 0003599B LocalCompact
 492 000163DF LocalFileTimeToFileTime
 493 0002A48E LocalFlags
 494 0001C1C6 LocalFree
 495 0002A594 LocalHandle
 496 000128A2 LocalLock
 497 00014F2B LocalReAlloc
 498 000359B0 LocalShrink
 499 000154D4 LocalSize
 500 000127F8 LocalUnlock
 501 0001E4E4 LockFile
 502 00030C21 LockFileEx
 503 0001154E LockResource
 504 00035600 MapUserPhysicalPages
 505 00035627 MapUserPhysicalPagesScatter
 506 00006533 MapViewOfFile
 507 0001D74A MapViewOfFileEx
 508 0003CE25 Module32First
 509 0003CD6F Module32FirstW
 510 0003CF91 Module32Next
 511 0003CEF1 Module32NextW
 512 0001ED51 MoveFileA
 513 0001274C MoveFileExA
 514 00001CDA MoveFileExW
 515 000166A0 MoveFileW
 516 00010C86 MoveFileWithProgressA
 517 00010CF0 MoveFileWithProgressW
 518 00009BBA MulDiv
 519 000078FF MultiByteToWideChar
 520 00011138 NlsConvertIntegerToString
 521 00019071 NlsGetCacheUpdateCount
 522 0004BEF8 NlsResetProcessLocale
 523 00017658 OpenConsoleW
 524 00019184 OpenDataFile
 525 00014EDA OpenEventA
 526 0001162C OpenEventW
 527 0000BF59 OpenFile
 528 0000C1D1 OpenFileMappingA
 529 0000C222 OpenFileMappingW
 530 00045A17 OpenJobObjectA
 531 00045A84 OpenJobObjectW
 532 0001AFA6 OpenMutexA
 533 0001AFF7 OpenMutexW
 534 000091B9 OpenProcess
 535 0001DB3A OpenProfileUserMapping
 536 0001F491 OpenSemaphoreA
 537 00013D96 OpenSemaphoreW
 538 0003BAC1 OpenThread
 539 0003A5F7 OpenWaitableTimerA
 540 0003A664 OpenWaitableTimerW
 541 00024539 OutputDebugStringA
 542 0002D9FC OutputDebugStringW
 543 00047D60 PeekConsoleInputA
 544 00047D7C PeekConsoleInputW
 545 0003730E PeekNamedPipe
 546 00001B4D PostQueuedCompletionStatus
 547 000457E7 PrepareTape
 548 000166F6 PrivCopyFileExW
 549 000319F6 PrivMoveFileIdentityW
 550 0003CA16 Process32First
 551 0003C960 Process32FirstW
 552 0003CB70 Process32Next
 553 0003CAD0 Process32NextW
 554 0001A355 ProcessIdToSessionId
 555 00020B6D PulseEvent
 556 0003E916 PurgeComm
 557 0001651F QueryDosDeviceA
 558 0000A2A6 QueryDosDeviceW
 559 00045B3C QueryInformationJobObject
 560 0000AA7D QueryPerformanceCounter
 561 00016F20 QueryPerformanceFrequency
 562 000301F1 QueryWin31IniFilesMappedToRegistry
 563 000030AB QueueUserAPC
 564 00020F64 QueueUserWorkItem
 565 0000A48C RaiseException
 566 000220AB ReadConsoleA
 567 0002225C ReadConsoleInputA
 568 00047DB4 ReadConsoleInputExA
 569 00047DD1 ReadConsoleInputExW
 570 00047D98 ReadConsoleInputW
 571 000044D6 ReadConsoleOutputA
 572 0004854A ReadConsoleOutputAttribute
 573 0004850C ReadConsoleOutputCharacterA
 574 0004852B ReadConsoleOutputCharacterW
 575 00048098 ReadConsoleOutputW
 576 00023603 ReadConsoleW
 577 000144DA ReadDirectoryChangesW
 578 00006582 ReadFile
 579 00030D56 ReadFileEx
 580 00030E21 ReadFileScatter
 581 00022AA8 ReadProcessMemory
 582 00049B85 RegisterConsoleIME
 583 000499D5 RegisterConsoleOS2
 584 00004116 RegisterConsoleVDM
 585 0000C6DC RegisterWaitForInputIdle
 586 00020ECB RegisterWaitForSingleObject
 587 0003C1B8 RegisterWaitForSingleObjectEx
 588 000025A2 RegisterWowBaseHandlers
 589 00003243 RegisterWowExec
 590 000117F4 ReleaseMutex
 591 0001565A ReleaseSemaphore
 592 00023D98 RemoveDirectoryA
 593 00023DB0 RemoveDirectoryW
 594 00001EE4 ReplaceFile
 595 0003492C ReplaceFileA
 596 00001EE4 ReplaceFileW
 597 00038295 RequestDeviceWakeup
 598 00038230 RequestWakeupLatency
 599 0000BF41 ResetEvent
 600 0003569A ResetWriteWatch
 601 0000BEE4 ResumeThread
 602          RtlFillMemory => NTDLL.RtlFillMemory
 603          RtlMoveMemory => NTDLL.RtlMoveMemory
 604          RtlUnwind => NTDLL.RtlUnwind
 605          RtlZeroMemory => NTDLL.RtlZeroMemory
 606 000492A5 ScrollConsoleScreenBufferA
 607 000492C2 ScrollConsoleScreenBufferW
 608 0000E540 SearchPathA
 609 00019BA4 SearchPathW
 610 00050B1F SetCPGlobal
 611 0004A5F8 SetCalendarInfoA
 612 0004CB09 SetCalendarInfoW
 613 0003E995 SetCommBreak
 614 0003E9A3 SetCommConfig
 615 0003EA34 SetCommMask
 616 0003EACA SetCommState
 617 0003EDE7 SetCommTimeouts
 618 0002D025 SetComputerNameA
 619 0002D0EB SetComputerNameExA
 620 0002CF5E SetComputerNameExW
 621 0002CA9A SetComputerNameW
 622 00048EF9 SetConsoleActiveScreenBuffer
 623 000493B4 SetConsoleCP
 624 00046C96 SetConsoleCommandHistoryMode
 625 00017814 SetConsoleCtrlHandler
 626 0004776D SetConsoleCursor
 627 00049020 SetConsoleCursorInfo
 628 000498AE SetConsoleCursorMode
 629 00048FC3 SetConsoleCursorPosition
 630 00047871 SetConsoleDisplayMode
 631 000492F5 SetConsoleFont
 632 00047A89 SetConsoleHardwareState
 633 00049352 SetConsoleIcon
 634 00046EA7 SetConsoleInputExeNameA
 635 0001E9B1 SetConsoleInputExeNameW
 636 00047B19 SetConsoleKeyShortcuts
 637 00049808 SetConsoleLocalEUDC
 638 000493A9 SetConsoleMaximumWindowSize
 639 00047BBF SetConsoleMenuClose
 640 00006076 SetConsoleMode
 641 00049699 SetConsoleNlsMode
 642 00046A60 SetConsoleNumberOfCommandsA
 643 00046A4E SetConsoleNumberOfCommandsW
 644 00049A2C SetConsoleOS2OemFormat
 645 000494AE SetConsoleOutputCP
 646 00047C16 SetConsolePalette
 647 00048F66 SetConsoleScreenBufferSize
 648 0000460B SetConsoleTextAttribute
 649 00004073 SetConsoleTitleA
 650 000243A9 SetConsoleTitleW
 651 000490E2 SetConsoleWindowInfo
 652          SetCriticalSectionSpinCount => NTDLL.RtlSetCriticalSectionSpinCount
 653 00010C18 SetCurrentDirectoryA
 654 0000FB16 SetCurrentDirectoryW
 655 0003DE9D SetDefaultCommConfigA
 656 0003DDC1 SetDefaultCommConfigW
 657 0000F2A6 SetEndOfFile
 658 00023650 SetEnvironmentVariableA
 659 00006038 SetEnvironmentVariableW
 660 0001ABA9 SetErrorMode
 661 0000B608 SetEvent
 662 00035795 SetFileApisToANSI
 663 0002040E SetFileApisToOEM
 664 0001B36A SetFileAttributesA
 665 0001B386 SetFileAttributesW
 666 0001D7CC SetFilePointer
 667 00001C2A SetFilePointerEx
 668 0001E638 SetFileTime
 669 0001154E SetHandleCount
 670 00022FBB SetHandleInformation
 671 00045C06 SetInformationJobObject
 672 00049FFE SetLastConsoleEventActive
 673 000148AB SetLastError
 674 00029F44 SetLocalTime
 675 0001F16C SetLocaleInfoA
 676 0001F1D5 SetLocaleInfoW
 677 00013914 SetMailslotInfo
 678 000382D1 SetMessageWaitingIndicator
 679 00009AD9 SetNamedPipeHandleState
 680 00020AA2 SetPriorityClass
 681 0003984F SetProcessAffinityMask
 682 0001F05E SetProcessPriorityBoost
 683 00002F71 SetProcessShutdownParameters
 684 0001DD9F SetProcessWorkingSetSize
 685 0000D089 SetStdHandle
 686 000381E3 SetSystemPowerState
 687 0000183D SetSystemTime
 688 000018EC SetSystemTimeAdjustment
 689 000458FA SetTapeParameters
 690 00045750 SetTapePosition
 691 0003A97F SetTermsrvAppInstallMode
 692 000175AB SetThreadAffinityMask
 693 0003BBEE SetThreadContext
 694 00009655 SetThreadExecutionState
 695 0003C0E9 SetThreadIdealProcessor
 696 0001CDA0 SetThreadLocale
 697 0001B593 SetThreadPriority
 698 0003BB35 SetThreadPriorityBoost
 699 0002D625 SetTimeZoneInformation
 700 0003C45B SetTimerQueueTimer
 701 0000BC57 SetUnhandledExceptionFilter
 702 0003F2C9 SetVDMCurrentDirectories
 703 00037DF1 SetVolumeLabelA
 704 00037E4E SetVolumeLabelW
 705 00041311 SetVolumeMountPointA
 706 0004163C SetVolumeMountPointW
 707 00017546 SetWaitableTimer
 708 0003E0F1 SetupComm
 709 000477CA ShowConsoleCursor
 710 0003A468 SignalObjectAndWait
 711 0001504C SizeofResource
 712 0001AC6E Sleep
 713 0001AC7C SleepEx
 714 0003BC10 SuspendThread
 715 0001F93F SwitchToFiber
 716 0003C15D SwitchToThread
 717 00009B45 SystemTimeToFileTime
 718 0002D788 SystemTimeToTzSpecificLocalTime
 719 00045B18 TerminateJobObject
 720 00038DC3 TerminateProcess
 721 00017584 TerminateThread
 722 0003A96D TermsrvAppInstallMode
 723 0003CC2A Thread32First
 724 0003CCDB Thread32Next
 725 0000D279 TlsAlloc
 726 0000EA53 TlsFree
 727 00015D42 TlsGetValue
 728 0000A8C5 TlsSetValue
 729 0003C927 Toolhelp32ReadProcessMemory
 730 0000AB4F TransactNamedPipe
 731 0003EE87 TransmitCommChar
 732 00035E98 TrimVirtualBuffer
 733          TryEnterCriticalSection => NTDLL.RtlTryEnterCriticalSection
 734 00036D3F UTRegister
 735 00036D77 UTUnRegister
 736 0003BD2B UnhandledExceptionFilter
 737 00010538 UnlockFile
 738 00010570 UnlockFileEx
 739 00006135 UnmapViewOfFile
 740 00049C2E UnregisterConsoleIME
 741 000030D0 UnregisterWait
 742 00020F32 UnregisterWaitEx
 743 00042512 UpdateResourceA
 744 00042428 UpdateResourceW
 745 0004A0CC VDMConsoleOperation
 746 0003F0D8 VDMOperationStarted
 747 00023123 ValidateLCType
 748 00015E41 ValidateLocale
 749 0004C173 VerLanguageNameA
 750 0004C129 VerLanguageNameW
 751          VerSetConditionMask => NTDLL.VerSetConditionMask
 752 00019FF4 VerifyConsoleIoHandle
 753 000027B6 VerifyVersionInfoA
 754 00007304 VerifyVersionInfoW
 755 0001175C VirtualAlloc
 756 00011776 VirtualAllocEx
 757 00035EB1 VirtualBufferExceptionHandler
 758 0001E2DC VirtualFree
 759 0001E2F3 VirtualFreeEx
 760 000025AE VirtualLock
 761 0001C0F8 VirtualProtect
 762 0001C112 VirtualProtectEx
 763 0001A14C VirtualQuery
 764 0001A163 VirtualQueryEx
 765 00016C44 VirtualUnlock
 766 0003EF06 WaitCommEvent
 767 0002DB7E WaitForDebugEvent
 768 0001ABE4 WaitForMultipleObjects
 769 0000BD39 WaitForMultipleObjectsEx
 770 00011B0C WaitForSingleObject
 771 0001C468 WaitForSingleObjectEx
 772 0003757C WaitNamedPipeA
 773 00002962 WaitNamedPipeW
 774 0000A994 WideCharToMultiByte
 775 00009C1D WinExec
 776 0001C3FE WriteConsoleA
 777 00047F26 WriteConsoleInputA
 778 00047C8C WriteConsoleInputVDMA
 779 00047CA8 WriteConsoleInputVDMW
 780 00047F42 WriteConsoleInputW
 781 0004839D WriteConsoleOutputA
 782 000486E1 WriteConsoleOutputAttribute
 783 000486A3 WriteConsoleOutputCharacterA
 784 000486C2 WriteConsoleOutputCharacterW
 785 00048380 WriteConsoleOutputW
 786 0000C0C0 WriteConsoleW
 787 0001C24E WriteFile
 788 00030DA8 WriteFileEx
 789 00030EED WriteFileGather
 790 0000198E WritePrivateProfileSectionA
 791 0002F159 WritePrivateProfileSectionW
 792 0000A869 WritePrivateProfileStringA
 793 0001CCB6 WritePrivateProfileStringW
 794 0002ED41 WritePrivateProfileStructA
 795 0002EE40 WritePrivateProfileStructW
 796 00017303 WriteProcessMemory
 797 0000197C WriteProfileSectionA
 798 0002EF67 WriteProfileSectionW
 799 00023353 WriteProfileStringA
 800 0001CCA0 WriteProfileStringW
 801 00045872 WriteTapemark
 802 00010F74 _hread
 803 0001F332 _hwrite
 804 0000A8F1 _lclose
 805 00022ACF _lcreat
 806 0000997F _llseek
 807 0001CDD5 _lopen
 808 00010F74 _lread
 809 0001F332 _lwrite
 810 0001DF5C lstrcat
 811 0001DF5C lstrcatA
 812 0000A22C lstrcatW
 813 0001D453 lstrcmp
 814 0001D453 lstrcmpA
 815 0001D141 lstrcmpW
 816 00006A6C lstrcmpi
 817 00006A6C lstrcmpiA
 818 0001A18D lstrcmpiW
 819 0001E471 lstrcpy
 820 0001E471 lstrcpyA
 821 00008FFC lstrcpyW
 822 0000FA6D lstrcpyn
 823 0000FA6D lstrcpynA
 824 0000BE4E lstrcpynW
 825 00015D89 lstrlen
 826 00015D89 lstrlenA
 827 0000D20C lstrlenW

ntdll.dll 정보

// ntdll.dll
   1 000213CD PropertyLengthAsVariant
   2 00021336 RtlConvertPropertyToVariant
   3 00021296 RtlConvertVariantToProperty
   4 0003C7B6 RtlUlongByteSwap
   5 0003C7BB RtlUlonglongByteSwap
   6 0003C7B1 RtlUshortByteSwap
   7 00012D38 CsrAllocateCaptureBuffer
   8 0000E6DA CsrAllocateMessagePointer
   9 00009778 CsrCaptureMessageBuffer
  10 0001652A CsrCaptureMessageString
  11 0001BA35 CsrCaptureTimeout
  12 0000917D CsrClientCallServer
  13 000100CA CsrClientConnectToServer
  14 0000E6C6 CsrFreeCaptureBuffer
  15 0001B96A CsrIdentifyAlertableThread
  16 00004BCC CsrNewThread
  17 0001BAA7 CsrProbeForRead
  18 0001BA5F CsrProbeForWrite
  19 0001B999 CsrSetPriorityClass
  20 0002144B DbgBreakPoint
  21 00018C08 DbgPrint
  22 00021504 DbgPrintReturnControlC
  23 0002158D DbgPrompt
  24 0001BD9F DbgSsHandleKmApiMsg
  25 0001BD59 DbgSsInitialize
  26 0001BFDC DbgUiConnectToDbg
  27 0001C1B3 DbgUiContinue
  28 0001C0CC DbgUiWaitStateChange
  29 0002144D DbgUserBreakPoint
  30 00021644 KiRaiseUserExceptionDispatcher
  31 000215CC KiUserApcDispatcher
  32 000215DC KiUserCallbackDispatcher
  33 000215F8 KiUserExceptionDispatcher
  34 00012577 LdrAccessResource
  35 00006A42 LdrAlternateResourcesEnabled
  36 00008A24 LdrDisableThreadCalloutsForDll
  37 000218E7 LdrEnumResources
  38 000216DE LdrFindEntryForAddress
  39 0001640C LdrFindResourceDirectory_U
  40 00007134 LdrFindResource_U
  41 00001278 LdrFlushAlternateResourceModules
  42 00011C8C LdrGetDllHandle
  43 00012B73 LdrGetProcedureAddress
  44 00004AF2 LdrInitializeThunk
  45 00006A6F LdrLoadAlternateResourceModule
  46 00003261 LdrLoadDll
  47 0000679D LdrProcessRelocationBlock
  48 000112C9 LdrQueryImageFileExecutionOptions
  49 0001DF85 LdrQueryProcessModuleInformation
  50 0000DD8E LdrShutdownProcess
  51 0000E42E LdrShutdownThread
  52 0000CBAE LdrUnloadAlternateResourceModule
  53 0000B5DF LdrUnloadDll
  54 0001DDF5 LdrVerifyImageMatchesChecksum
  55 000465B4 NPXEMULATORTABLE
  56 0004FF22 NlsAnsiCodePage
  57 0004F314 NlsMbCodePageTag
  58 0004F318 NlsMbOemCodePageTag
  59 0000F610 NtAcceptConnectPort
  60 00016066 NtAccessCheck
  61 00005E52 NtAccessCheckAndAuditAlarm
  62 0001650E NtAccessCheckByType
  63 0000F9C8 NtAccessCheckByTypeAndAuditAlarm
  64 0001AFDD NtAccessCheckByTypeResultList
  65 0001AFEB NtAccessCheckByTypeResultListAndAuditAlarm
  66 0001AFF9 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
  67 0000E50B NtAddAtom
  68 0001B007 NtAdjustGroupsToken
  69 00008816 NtAdjustPrivilegesToken
  70 0001B015 NtAlertResumeThread
  71 0000CD6F NtAlertThread
  72 0001558D NtAllocateLocallyUniqueId
  73 0001B023 NtAllocateUserPhysicalPages
  74 0001B031 NtAllocateUuids
  75 00015459 NtAllocateVirtualMemory
  76 0001B03F NtAreMappedFilesTheSame
  77 0001B04D NtAssignProcessToJobObject
  78 0000CD99 NtCallbackReturn
  79 0001B06C NtCancelDeviceWakeupRequest
  80 0001B05E NtCancelIoFile
  81 00008C51 NtCancelTimer
  82 0000C6A4 NtClearEvent
  83 00004D93 NtClose
  84 00003679 NtCloseObjectAuditAlarm
  85 0000F61E NtCompleteConnectPort
  86 0000E57A NtConnectPort
  87 00008553 NtContinue
  88 0001B486 NtCreateChannel
  89 0001B07D NtCreateDirectoryObject
  90 00009FFD NtCreateEvent
  91 0001B08B NtCreateEventPair
  92 0000F9BA NtCreateFile
  93 00005EB6 NtCreateIoCompletion
  94 0001B099 NtCreateJobObject
  95 00007E08 NtCreateKey
  96 000024B1 NtCreateMailslotFile
  97 00007E16 NtCreateMutant
  98 0001651C NtCreateNamedPipeFile
  99 0001B0A7 NtCreatePagingFile
 100 00005EC4 NtCreatePort
 101 00003B9E NtCreateProcess
 102 0001B0B5 NtCreateProfile
 103 000135BF NtCreateSection
 104 0000B153 NtCreateSemaphore
 105 0000FA3D NtCreateSymbolicLinkObject
 106 000127AE NtCreateThread
 107 000169D5 NtCreateTimer
 108 00016BCD NtCreateToken
 109 0001B0C3 NtCreateWaitablePort
 110 00023AC7 NtCurrentTeb
 111 00009153 NtDelayExecution
 112 000037D5 NtDeleteAtom
 113 0001B0D1 NtDeleteFile
 114 000077CA NtDeleteKey
 115 000010A5 NtDeleteObjectAuditAlarm
 116 00009D81 NtDeleteValueKey
 117 000150D4 NtDeviceIoControlFile
 118 0001B0DF NtDisplayString
 119 00007724 NtDuplicateObject
 120 00015AE8 NtDuplicateToken
 121 0000C394 NtEnumerateKey
 122 00014A5A NtEnumerateValueKey
 123 0001B0ED NtExtendSection
 124 0001B0FB NtFilterToken
 125 0000EBA6 NtFindAtom
 126 0001570D NtFlushBuffersFile
 127 00014940 NtFlushInstructionCache
 128 000023B5 NtFlushKey
 129 0000A419 NtFlushVirtualMemory
 130 0001B109 NtFlushWriteBuffer
 131 0001B115 NtFreeUserPhysicalPages
 132 0000EC81 NtFreeVirtualMemory
 133 00007126 NtFsControlFile
 134 00016BDB NtGetContextThread
 135 0001B123 NtGetDevicePowerState
 136 000024BF NtGetPlugPlayEvent
 137 0001B131 NtGetTickCount
 138 0001B13D NtGetWriteWatch
 139 0001B14B NtImpersonateAnonymousToken
 140 00009D39 NtImpersonateClientOfPort
 141 00004DA1 NtImpersonateThread
 142 0001B159 NtInitializeRegistry
 143 0001B167 NtInitiatePowerAction
 144 0001B175 NtIsSystemResumeAutomatic
 145 0001B494 NtListenChannel
 146 0001B181 NtListenPort
 147 0001B18F NtLoadDriver
 148 0001B19D NtLoadKey2
 149 00016BE9 NtLoadKey
 150 0000BF81 NtLockFile
 151 000010B3 NtLockVirtualMemory
 152 000087DC NtMakeTemporaryObject
 153 0001B1AB NtMapUserPhysicalPages
 154 0001B1B9 NtMapUserPhysicalPagesScatter
 155 0000AE4F NtMapViewOfSection
 156 00006C1A NtNotifyChangeDirectoryFile
 157 00006CFA NtNotifyChangeKey
 158 00016BF7 NtNotifyChangeMultipleKeys
 159 0001B4A2 NtOpenChannel
 160 00009D8F NtOpenDirectoryObject
 161 0001149E NtOpenEvent
 162 0001B1C7 NtOpenEventPair
 163 00015337 NtOpenFile
 164 0001B1D5 NtOpenIoCompletion
 165 0001B1E3 NtOpenJobObject
 166 000061CC NtOpenKey
 167 00014AA4 NtOpenMutant
 168 00005B01 NtOpenObjectAuditAlarm
 169 000023C3 NtOpenProcess
 170 0000E717 NtOpenProcessToken
 171 00008AEC NtOpenSection
 172 0001255F NtOpenSemaphore
 173 00006151 NtOpenSymbolicLinkObject
 174 000024CD NtOpenThread
 175 00001EB3 NtOpenThreadToken
 176 0001B1F1 NtOpenTimer
 177 00001F74 NtPlugPlayControl
 178 00016C05 NtPowerInformation
 179 000165D5 NtPrivilegeCheck
 180 0001B1FF NtPrivilegeObjectAuditAlarm
 181 000010C1 NtPrivilegedServiceAuditAlarm
 182 0000BFC4 NtProtectVirtualMemory
 183 00016C13 NtPulseEvent
 184 00009FEF NtQueryAttributesFile
 185 0000E964 NtQueryDefaultLocale
 186 000051D0 NtQueryDefaultUILanguage
 187 00005510 NtQueryDirectoryFile
 188 00016C21 NtQueryDirectoryObject
 189 0001B20D NtQueryEaFile
 190 0001285D NtQueryEvent
 191 0001346B NtQueryFullAttributesFile
 192 000148F0 NtQueryInformationAtom
 193 0000F6AF NtQueryInformationFile
 194 00003BAC NtQueryInformationJobObject
 195 0001B21B NtQueryInformationPort
 196 00013351 NtQueryInformationProcess
 197 00008571 NtQueryInformationThread
 198 00005B0F NtQueryInformationToken
 199 0000455F NtQueryInstallUILanguage
 200 0001B229 NtQueryIntervalProfile
 201 0000BD4F NtQueryIoCompletion
 202 00007EBB NtQueryKey
 203 0001B237 NtQueryMultipleValueKey
 204 0001B245 NtQueryMutant
 205 000107D8 NtQueryObject
 206 0001B253 NtQueryOpenSubKeys
 207 000152DD NtQueryPerformanceCounter
 208 0001B261 NtQueryQuotaInformationFile
 209 000112BB NtQuerySection
 210 000038C7 NtQuerySecurityObject
 211 0001B26F NtQuerySemaphore
 212 00005EA8 NtQuerySymbolicLinkObject
 213 0001B27D NtQuerySystemEnvironmentValue
 214 00007D11 NtQuerySystemInformation
 215 000148E2 NtQuerySystemTime
 216 00011775 NtQueryTimer
 217 0000CBA0 NtQueryTimerResolution
 218 000062D2 NtQueryValueKey
 219 00015AA3 NtQueryVirtualMemory
 220 0000E588 NtQueryVolumeInformationFile
 221 0000366B NtQueueApcThread
 222 00014B92 NtRaiseException
 223 0001B28E NtRaiseHardError
 224 0000C552 NtReadFile
 225 0001B29C NtReadFileScatter
 226 0000F6A1 NtReadRequestData
 227 0000DEE6 NtReadVirtualMemory
 228 00004BB2 NtRegisterThreadTerminatePort
 229 00015475 NtReleaseMutant
 230 00008E81 NtReleaseSemaphore
 231 0000BEA7 NtRemoveIoCompletion
 232 0001B2AA NtReplaceKey
 233 0000E596 NtReplyPort
 234 00009161 NtReplyWaitReceivePort
 235 000039BC NtReplyWaitReceivePortEx
 236 0001B2B8 NtReplyWaitReplyPort
 237 0001B4B0 NtReplyWaitSendChannel
 238 0001B2C6 NtRequestDeviceWakeup
 239 00005290 NtRequestPort
 240 0000916F NtRequestWaitReplyPort
 241 0001B2D4 NtRequestWakeupLatency
 242 00016C2F NtResetEvent
 243 0001B2E2 NtResetWriteWatch
 244 0001B2F0 NtRestoreKey
 245 00008FB7 NtResumeThread
 246 00016C3D NtSaveKey
 247 0001B2FE NtSaveMergedKeys
 248 0000808A NtSecureConnectPort
 249 0001B4BE NtSendWaitReplyChannel
 250 0001B4CC NtSetContextChannel
 251 00016C4B NtSetContextThread
 252 0001B30C NtSetDefaultHardErrorPort
 253 0001B31A NtSetDefaultLocale
 254 0001B328 NtSetDefaultUILanguage
 255 0001B336 NtSetEaFile
 256 00008563 NtSetEvent
 257 0001B344 NtSetHighEventPair
 258 0001B352 NtSetHighWaitLowEventPair
 259 0000EE28 NtSetInformationFile
 260 0001B360 NtSetInformationJobObject
 261 0001B36E NtSetInformationKey
 262 000107E6 NtSetInformationObject
 263 00013B6D NtSetInformationProcess
 264 0000A1E0 NtSetInformationThread
 265 00016C59 NtSetInformationToken
 266 0001B37C NtSetIntervalProfile
 267 000086C0 NtSetIoCompletion
 268 00016C67 NtSetLdtEntries
 269 0001B38A NtSetLowEventPair
 270 0001B398 NtSetLowWaitHighEventPair
 271 0001B3A6 NtSetQuotaInformationFile
 272 00011F97 NtSetSecurityObject
 273 0001B3B4 NtSetSystemEnvironmentValue
 274 000010CF NtSetSystemInformation
 275 0001B3C2 NtSetSystemPowerState
 276 000010DD NtSetSystemTime
 277 0000C1DA NtSetThreadExecutionState
 278 00008C5F NtSetTimer
 279 00018958 NtSetTimerResolution
 280 0001B3D0 NtSetUuidSeed
 281 0000AA1B NtSetValueKey
 282 0001B3DE NtSetVolumeInformationFile
 283 0001B3EC NtShutdownSystem
 284 0001B3FA NtSignalAndWaitForSingleObject
 285 0001B408 NtStartProfile
 286 0001B416 NtStopProfile
 287 0001B424 NtSuspendThread
 288 0001B432 NtSystemDebugControl
 289 0001B440 NtTerminateJobObject
 290 0000DD80 NtTerminateProcess
 291 0000DFC2 NtTerminateThread
 292 00004BC0 NtTestAlert
 293 0001B44E NtUnloadDriver
 294 00016C75 NtUnloadKey
 295 00010312 NtUnlockFile
 296 000024DB NtUnlockVirtualMemory
 297 0000A3D8 NtUnmapViewOfSection
 298 00016C83 NtVdmControl
 299 00013233 NtWaitForMultipleObjects
 300 00014086 NtWaitForSingleObject
 301 0001B45C NtWaitHighEventPair
 302 0001B46A NtWaitLowEventPair
 303 000023A7 NtWriteFile
 304 0001B478 NtWriteFileGather
 305 0000816A NtWriteRequestData
 306 0000815C NtWriteVirtualMemory
 307 00012445 NtYieldExecution
 308 00023C36 PfxFindPrefix
 309 00023ACE PfxInitialize
 310 00023AE2 PfxInsertPrefix
 311 00023BBA PfxRemovePrefix
 312 0004A215 RestoreEm87Context
 313 00016E81 RtlAbortRXact
 314 0000A2E0 RtlAbsoluteToSelfRelativeSD
 315 0000C258 RtlAcquirePebLock
 316 00008098 RtlAcquireResourceExclusive
 317 00008D24 RtlAcquireResourceShared
 318 00009C9C RtlAddAccessAllowedAce
 319 000170C1 RtlAddAccessAllowedAceEx
 320 000249B3 RtlAddAccessAllowedObjectAce
 321 000014A2 RtlAddAccessDeniedAce
 322 00024938 RtlAddAccessDeniedAceEx
 323 000249F9 RtlAddAccessDeniedObjectAce
 324 000025A9 RtlAddAce
 325 000241C4 RtlAddActionToRXact
 326 00014D6D RtlAddAtomToAtomTable
 327 00016EBA RtlAddAttributeActionToRXact
 328 00024955 RtlAddAuditAccessAce
 329 00024982 RtlAddAuditAccessAceEx
 330 00024A40 RtlAddAuditAccessObjectAce
 331 000246B6 RtlAddCompoundAce
 332 0004D817 RtlAddRange
 333 000027E1 RtlAdjustPrivilege
 334 000042B0 RtlAllocateAndInitializeSid
 335 000089B1 RtlAllocateHandle
 336 0004C2AD RtlAllocateHeap
 337 000148FE RtlAnsiCharToUnicodeChar
 338 000286AD RtlAnsiStringToUnicodeSize
 339 000114AC RtlAnsiStringToUnicodeString
 340 00001739 RtlAppendAsciizToString
 341 00028C4F RtlAppendStringToString
 342 0000BEB5 RtlAppendUnicodeStringToString
 343 00011E2C RtlAppendUnicodeToString
 344 000241FE RtlApplyRXact
 345 00016FDA RtlApplyRXactNoFlush
 346 0000551E RtlAreAllAccessesGranted
 347 00025434 RtlAreAnyAccessesGranted
 348 0002948B RtlAreBitsClear
 349 00006B32 RtlAreBitsSet
 350 000298DD RtlAssert
 351 0001E7BA RtlCallbackLpcClient
 352 0002B0B6 RtlCancelTimer
 353 0002B447 RtlCaptureStackBackTrace
 354 0000E5A4 RtlCharToInteger
 355 00021448 RtlCheckForOrphanedCriticalSections
 356 0002C841 RtlCheckRegistryKey
 357 0001742C RtlClearAllBits
 358 00006AE0 RtlClearBits
 359 00010701 RtlCompactHeap
 360 0000529E RtlCompareMemory
 361 00011961 RtlCompareMemoryUlong
 362 00028B57 RtlCompareString
 363 0000AF43 RtlCompareUnicodeString
 364 0002ECEC RtlCompressBuffer
 365 000091F2 RtlConsoleMultiByteToUnicodeN
 366 00016D07 RtlConvertExclusiveToShared
 367 000169FA RtlConvertLongToLargeInteger
 368 00016CC8 RtlConvertSharedToExclusive
 369 0000A6D5 RtlConvertSidToUnicodeString
 370 0001F770 RtlConvertToAutoInheritSecurityObject
 371 0001F9A8 RtlConvertUiListToApiList
 372 0003C97E RtlConvertUlongToLargeInteger
 373 0000B5BC RtlCopyLuid
 374 00025231 RtlCopyLuidAndAttributesArray
 375 0004E0BE RtlCopyRangeList
 376 0001F333 RtlCopySecurityDescriptor
 377 00009CB8 RtlCopySid
 378 00025114 RtlCopySidAndAttributesArray
 379 00002949 RtlCopyString
 380 0000EC8F RtlCopyUnicodeString
 381 0000F857 RtlCreateAcl
 382 0001F462 RtlCreateAndSetSD
 383 0000AABF RtlCreateAtomTable
 384 000179CA RtlCreateEnvironment
 385 0004B425 RtlCreateHeap
 386 0001E5A9 RtlCreateLpcServer
 387 00003CCB RtlCreateProcessParameters
 388 0001FFBA RtlCreateQueryDebugBuffer
 389 0002C867 RtlCreateRegistryKey
 390 0000F96F RtlCreateSecurityDescriptor
 391 00011388 RtlCreateTagHeap
 392 0000FE89 RtlCreateTimer
 393 000174C0 RtlCreateTimerQueue
 394 000125AB RtlCreateUnicodeString
 395 000110F0 RtlCreateUnicodeStringFromAsciiz
 396 0002F2BC RtlCreateUserProcess
 397 0001F6FE RtlCreateUserSecurityObject
 398 0002F671 RtlCreateUserThread
 399 00022EA5 RtlCustomCPToUnicodeN
 400 0002F788 RtlCutoverTimeToSystemTime
 401 00003F82 RtlDeNormalizeProcessParams
 402 0002AEF4 RtlDebugPrintTimes
 403 0002ED40 RtlDecompressBuffer
 404 0002ED85 RtlDecompressFragment
 405 0001F78E RtlDefaultNpAcl
 406 0001886A RtlDelete
 407 00001445 RtlDeleteAce
 408 00014EB2 RtlDeleteAtomFromAtomTable
 409 00007BF9 RtlDeleteCriticalSection
 410 000188AF RtlDeleteElementGenericTable
 411 0002FC28 RtlDeleteNoSplay
 412 0004DE5D RtlDeleteOwnersRanges
 413 0004DD1C RtlDeleteRange
 414 0002C88D RtlDeleteRegistryValue
 415 000011DE RtlDeleteResource
 416 0000CD4E RtlDeleteSecurityObject
 417 0000437C RtlDeleteTimer
 418 00029CE6 RtlDeleteTimerQueue
 419 00029D7E RtlDeleteTimerQueueEx
 420 0000721E RtlDeregisterWait
 421 0000722C RtlDeregisterWaitEx
 422 00024AFA RtlDestroyAtomTable
 423 00003CAB RtlDestroyEnvironment
 424 00027AE7 RtlDestroyHandleTable
 425 0004B16C RtlDestroyHeap
 426 00003CAB RtlDestroyProcessParameters
 427 0002009B RtlDestroyQueryDebugBuffer
 428 00006BD6 RtlDetermineDosPathNameType_U
 429 000289BB RtlDnsHostNameToComputerName
 430 00003454 RtlDoesFileExists_U
 431 00011982 RtlDosPathNameToNtPathName_U
 432 0000ED36 RtlDosSearchPath_U
 433 00005480 RtlDowncaseUnicodeString
 434 0001ECF3 RtlDumpResource
 435 00024BD4 RtlEmptyAtomTable
 436 0001ED36 RtlEnableEarlyCriticalSectionEventCreation
 437 0003C84D RtlEnlargedIntegerMultiply
 438 0003C863 RtlEnlargedUnsignedDivide
 439 0003C858 RtlEnlargedUnsignedMultiply
 440 00009103 RtlEnterCriticalSection
 441 0002DA86 RtlEnumProcessHeaps
 442 0002FED7 RtlEnumerateGenericTable
 443 0002FF76 RtlEnumerateGenericTableWithoutSplaying
 444 00009AD9 RtlEqualComputerName
 445 000030E8 RtlEqualDomainName
 446 00025211 RtlEqualLuid
 447 000107F4 RtlEqualPrefixSid
 448 0000810F RtlEqualSid
 449 0000A18F RtlEqualString
 450 00015523 RtlEqualUnicodeString
 451 0002506A RtlEraseUnicodeString
 452 00009DA4 RtlExpandEnvironmentStrings_U
 453 0002D70D RtlExtendHeap
 454 0000361D RtlExtendedIntegerMultiply
 455 0001854E RtlExtendedLargeIntegerDivide
 456 0000BDA7 RtlExtendedMagicDivide
 457 0003C7C4 RtlFillMemory
 458 00018538 RtlFillMemoryUlong
 459 00008903 RtlFindClearBits
 460 0000897A RtlFindClearBitsAndSet
 461 0002962D RtlFindLastBackwardRunClear
 462 00029796 RtlFindLeastSignificantBit
 463 000293CA RtlFindLongestRunClear
 464 00006226 RtlFindMessage
 465 000296F8 RtlFindMostSignificantBit
 466 00029542 RtlFindNextForwardRunClear
 467 0004E30C RtlFindRange
 468 00028E18 RtlFindSetBits
 469 000290BF RtlFindSetBitsAndClear
 470 0000F93B RtlFirstFreeAce
 471 000161BC RtlFormatCurrentUserKeyPath
 472 00009F47 RtlFormatMessage
 473 0001329F RtlFreeAnsiString
 474 000037E3 RtlFreeHandle
 475 0004C7D3 RtlFreeHeap
 476 0000F7B4 RtlFreeOemString
 477 0004E181 RtlFreeRangeList
 478 00004332 RtlFreeSid
 479 0001329F RtlFreeUnicodeString
 480 0002F726 RtlFreeUserThreadStack
 481 00030329 RtlGUIDFromString
 482 000304D4 RtlGenerate8dot3Name
 483 000117E4 RtlGetAce
 484 0002B0F2 RtlGetCallersAddress
 485 0002ECA8 RtlGetCompressionWorkSpaceSize
 486 00005F92 RtlGetControlSecurityDescriptor
 487 0000B385 RtlGetCurrentDirectory_U
 488 00013241 RtlGetDaclSecurityDescriptor
 489 00018B4D RtlGetElementGenericTable
 490 0004E485 RtlGetFirstRange
 491 0000C127 RtlGetFullPathName_U
 492 00011712 RtlGetGroupSecurityDescriptor
 493 0001526E RtlGetLongestNtPathLength
 494 0004E4D9 RtlGetNextRange
 495 0000495C RtlGetNtGlobalFlags
 496 00008058 RtlGetNtProductType
 497 000116D9 RtlGetOwnerSecurityDescriptor
 498 00002ACA RtlGetProcessHeaps
 499 0002539B RtlGetSaclSecurityDescriptor
 500 00027AA0 RtlGetSecurityDescriptorRMControl
 501 00010F8A RtlGetUserInfoHeap
 502 00003034 RtlGetVersion
 503 00017193 RtlIdentifierAuthoritySid
 504 00012237 RtlImageDirectoryEntryToData
 505 000101F2 RtlImageNtHeader
 506 00013146 RtlImageRvaToSection
 507 00031150 RtlImageRvaToVa
 508 0001E7A7 RtlImpersonateLpcClient
 509 0000F7C9 RtlImpersonateSelf
 510 0000FFC3 RtlInitAnsiString
 511 000059D6 RtlInitCodePageTable
 512 00003B15 RtlInitNlsTables
 513 00010F30 RtlInitString
 514 0001566D RtlInitUnicodeString
 515 00003C9D RtlInitializeAtomPackage
 516 00005A97 RtlInitializeBitMap
 517 000311C0 RtlInitializeContext
 518 00015749 RtlInitializeCriticalSection
 519 000047F3 RtlInitializeCriticalSectionAndSpinCount
 520 0002FE18 RtlInitializeGenericTable
 521 0000421E RtlInitializeHandleTable
 522 00023E8C RtlInitializeRXact
 523 0004D800 RtlInitializeRangeList
 524 0000CA94 RtlInitializeResource
 525 0000E4E1 RtlInitializeSid
 526 00017AD2 RtlInsertElementGenericTable
 527 0002BC00 RtlInt64ToUnicodeString
 528 00013B7B RtlIntegerToChar
 529 00005CAB RtlIntegerToUnicodeString
 530 0004E653 RtlInvertRangeList
 531 000030C2 RtlIsDosDeviceName_U
 532 00018B3F RtlIsGenericTableEmpty
 533 00017C10 RtlIsNameLegalDOS8Dot3
 534 0004E1BC RtlIsRangeAvailable
 535 00013E34 RtlIsTextUnicode
 536 00010688 RtlIsValidHandle
 537 0001507C RtlIsValidIndexHandle
 538 0003C83A RtlLargeIntegerAdd
 539 0003C92E RtlLargeIntegerArithmeticShift
 540 000313B9 RtlLargeIntegerDivide
 541 0003C959 RtlLargeIntegerNegate
 542 0003C8E0 RtlLargeIntegerShiftLeft
 543 0003C907 RtlLargeIntegerShiftRight
 544 0003C96B RtlLargeIntegerSubtract
 545 0002B826 RtlLargeIntegerToChar
 546 00009134 RtlLeaveCriticalSection
 547 0000C68E RtlLengthRequiredSid
 548 00008FF6 RtlLengthSecurityDescriptor
 549 0000E2CB RtlLengthSid
 550 0002FA9A RtlLocalTimeToSystemTime
 551 0000C837 RtlLockHeap
 552 000026A7 RtlLookupAtomInAtomTable
 553 0002FE82 RtlLookupElementGenericTable
 554 0000A1EE RtlMakeSelfRelativeSD
 555 0000BE24 RtlMapGenericMask
 556 0004E572 RtlMergeRangeLists
 557 00001C66 RtlMoveMemory
 558 000078A1 RtlMultiByteToUnicodeN
 559 00004C66 RtlMultiByteToUnicodeSize
 560 0001F193 RtlNewInstanceSecurityObject
 561 0001F202 RtlNewSecurityGrantedAccess
 562 00001256 RtlNewSecurityObject
 563 0000FA4B RtlNewSecurityObjectEx
 564 00003A8A RtlNormalizeProcessParams
 565 0000D02E RtlNtStatusToDosError
 566 0002FF6C RtlNumberGenericTableElements
 567 000293FA RtlNumberOfClearBits
 568 00029440 RtlNumberOfSetBits
 569 000286AD RtlOemStringToUnicodeSize
 570 000052E6 RtlOemStringToUnicodeString
 571 00005361 RtlOemToUnicodeN
 572 0000313E RtlOpenCurrentUser
 573 00031526 RtlPcToFileHeader
 574 00024E99 RtlPinAtomInAtomTable
 575 00018980 RtlPrefixString
 576 0000ACE6 RtlPrefixUnicodeString
 577 0002CBC5 RtlProtectHeap
 578 00014F83 RtlQueryAtomInAtomTable
 579 0000B181 RtlQueryEnvironmentVariable_U
 580 0000253A RtlQueryInformationAcl
 581 00020363 RtlQueryProcessBackTraceInformation
 582 0002015F RtlQueryProcessDebugInformation
 583 0002055A RtlQueryProcessHeapInformation
 584 00020A3E RtlQueryProcessLockInformation
 585 0002C420 RtlQueryRegistryValues
 586 0001EF7F RtlQuerySecurityObject
 587 0002D5A2 RtlQueryTagHeap
 588 0002C939 RtlQueryTimeZoneInformation
 589 00013D6F RtlQueueWorkItem
 590 000316C8 RtlRaiseException
 591 00031780 RtlRaiseStatus
 592 00001B06 RtlRandom
 593 00012025 RtlReAllocateHeap
 594 0002FD08 RtlRealPredecessor
 595 0002FCD7 RtlRealSuccessor
 596 00007150 RtlRegisterWait
 597 0000C268 RtlReleasePebLock
 598 0000857F RtlReleaseResource
 599 00031275 RtlRemoteCall
 600 00003BBA RtlResetRtlTranslations
 601 000027A9 RtlRunDecodeUnicodeString
 602 00002741 RtlRunEncodeUnicodeString
 603 0002FA6A RtlSecondsSince1970ToTime
 604 0002FA33 RtlSecondsSince1980ToTime
 605 00024427 RtlSelfRelativeToAbsoluteSD2
 606 0000130F RtlSelfRelativeToAbsoluteSD
 607 00017453 RtlSetAllBits
 608 000252B2 RtlSetAttributesSecurityDescriptor
 609 00004EED RtlSetBits
 610 000252ED RtlSetControlSecurityDescriptor
 611 0000DD34 RtlSetCriticalSectionSpinCount
 612 00004F72 RtlSetCurrentDirectory_U
 613 0002EE40 RtlSetCurrentEnvironment
 614 00009CE4 RtlSetDaclSecurityDescriptor
 615 0000AFDB RtlSetEnvironmentVariable
 616 00002035 RtlSetGroupSecurityDescriptor
 617 0002461C RtlSetInformationAcl
 618 00029BD9 RtlSetIoCompletionCallback
 619 00001FF2 RtlSetOwnerSecurityDescriptor
 620 000028AE RtlSetSaclSecurityDescriptor
 621 00027AC3 RtlSetSecurityDescriptorRMControl
 622 0001EF3C RtlSetSecurityObject
 623 0001EF5D RtlSetSecurityObjectEx
 624 0000BC20 RtlSetThreadPoolStartFunc
 625 0002CA5A RtlSetTimeZoneInformation
 626 0002AFEB RtlSetTimer
 627 00021448 RtlSetUnicodeCallouts
 628 0002D260 RtlSetUserFlagsHeap
 629 00001EC1 RtlSetUserValueHeap
 630 0001E694 RtlShutdownLpcServer
 631 0004B906 RtlSizeHeap
 632 00018859 RtlSplay
 633 00016E35 RtlStartRXact
 634 00017BA1 RtlStringFromGUID
 635 00008154 RtlSubAuthorityCountSid
 636 000153A5 RtlSubAuthoritySid
 637 0002FCBC RtlSubtreePredecessor
 638 0002FCA1 RtlSubtreeSuccessor
 639 00004C87 RtlSystemTimeToLocalTime
 640 0000349A RtlTimeFieldsToTime
 641 0002F9AB RtlTimeToElapsedTimeFields
 642 00016629 RtlTimeToSecondsSince1970
 643 00005E60 RtlTimeToSecondsSince1980
 644 000081FE RtlTimeToTimeFields
 645 00031953 RtlTraceDatabaseAdd
 646 000317A8 RtlTraceDatabaseCreate
 647 000318BB RtlTraceDatabaseDestroy
 648 00031CE1 RtlTraceDatabaseEnumerate
 649 00031981 RtlTraceDatabaseFind
 650 00031C87 RtlTraceDatabaseLock
 651 00031C93 RtlTraceDatabaseUnlock
 652 00031913 RtlTraceDatabaseValidate
 653 0000A130 RtlTryEnterCriticalSection
 654 0002868F RtlUnicodeStringToAnsiSize
 655 0001335F RtlUnicodeStringToAnsiString
 656 000284D5 RtlUnicodeStringToCountedOemString
 657 0001246E RtlUnicodeStringToInteger
 658 0002868F RtlUnicodeStringToOemSize
 659 000031E2 RtlUnicodeStringToOemString
 660 0002308E RtlUnicodeToCustomCPN
 661 0000C6B2 RtlUnicodeToMultiByteN
 662 000102D8 RtlUnicodeToMultiByteSize
 663 00012EEA RtlUnicodeToOemN
 664 00006341 RtlUniform
 665 0000C872 RtlUnlockHeap
 666 0000EA4A RtlUnwind
 667 0000CC2C RtlUpcaseUnicodeChar
 668 0000B2AD RtlUpcaseUnicodeString
 669 000283DD RtlUpcaseUnicodeStringToAnsiString
 670 0001735D RtlUpcaseUnicodeStringToCountedOemString
 671 00003739 RtlUpcaseUnicodeStringToOemString
 672 00023235 RtlUpcaseUnicodeToCustomCPN
 673 00015788 RtlUpcaseUnicodeToMultiByteN
 674 00010320 RtlUpcaseUnicodeToOemN
 675 00002078 RtlUpdateTimer
 676 00012451 RtlUpperChar
 677 00028C07 RtlUpperString
 678 0002DB14 RtlUsageHeap
 679 0000F8A7 RtlValidAcl
 680 0002794F RtlValidRelativeSecurityDescriptor
 681 00005ED2 RtlValidSecurityDescriptor
 682 0000ED77 RtlValidSid
 683 00001C9F RtlValidateHeap
 684 0002D9C0 RtlValidateProcessHeaps
 685 00013C7F RtlVerifyVersionInfo
 686 0002B4E9 RtlWalkFrameChain
 687 0002E076 RtlWalkHeap
 688 0002C7EC RtlWriteRegistryValue
 689 0004E7E1 RtlZeroHeap
 690 0003C7F5 RtlZeroMemory
 691 00031E7F RtlpNtCreateKey
 692 00031EED RtlpNtEnumerateSubKey
 693 00031EE1 RtlpNtMakeTemporaryKey
 694 0000A05A RtlpNtOpenKey
 695 0000A077 RtlpNtQueryValueKey
 696 00031EBC RtlpNtSetValueKey
 697 000123AA RtlpUnWaitCriticalSection
 698 00012313 RtlpWaitForCriticalSection
 699 000286AD RtlxAnsiStringToUnicodeSize
 700 000286AD RtlxOemStringToUnicodeSize
 701 0002868F RtlxUnicodeStringToAnsiSize
 702 0002868F RtlxUnicodeStringToOemSize
 703 0004A1EC SaveEm87Context
 704 00013D37 VerSetConditionMask
 705 0000F610 ZwAcceptConnectPort
 706 00016066 ZwAccessCheck
 707 00005E52 ZwAccessCheckAndAuditAlarm
 708 0001650E ZwAccessCheckByType
 709 0000F9C8 ZwAccessCheckByTypeAndAuditAlarm
 710 0001AFDD ZwAccessCheckByTypeResultList
 711 0001AFEB ZwAccessCheckByTypeResultListAndAuditAlarm
 712 0001AFF9 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
 713 0000E50B ZwAddAtom
 714 0001B007 ZwAdjustGroupsToken
 715 00008816 ZwAdjustPrivilegesToken
 716 0001B015 ZwAlertResumeThread
 717 0000CD6F ZwAlertThread
 718 0001558D ZwAllocateLocallyUniqueId
 719 0001B023 ZwAllocateUserPhysicalPages
 720 0001B031 ZwAllocateUuids
 721 00015459 ZwAllocateVirtualMemory
 722 0001B03F ZwAreMappedFilesTheSame
 723 0001B04D ZwAssignProcessToJobObject
 724 0000CD99 ZwCallbackReturn
 725 0001B06C ZwCancelDeviceWakeupRequest
 726 0001B05E ZwCancelIoFile
 727 00008C51 ZwCancelTimer
 728 0000C6A4 ZwClearEvent
 729 00004D93 ZwClose
 730 00003679 ZwCloseObjectAuditAlarm
 731 0000F61E ZwCompleteConnectPort
 732 0000E57A ZwConnectPort
 733 00008553 ZwContinue
 734 0001B486 ZwCreateChannel
 735 0001B07D ZwCreateDirectoryObject
 736 00009FFD ZwCreateEvent
 737 0001B08B ZwCreateEventPair
 738 0000F9BA ZwCreateFile
 739 00005EB6 ZwCreateIoCompletion
 740 0001B099 ZwCreateJobObject
 741 00007E08 ZwCreateKey
 742 000024B1 ZwCreateMailslotFile
 743 00007E16 ZwCreateMutant
 744 0001651C ZwCreateNamedPipeFile
 745 0001B0A7 ZwCreatePagingFile
 746 00005EC4 ZwCreatePort
 747 00003B9E ZwCreateProcess
 748 0001B0B5 ZwCreateProfile
 749 000135BF ZwCreateSection
 750 0000B153 ZwCreateSemaphore
 751 0000FA3D ZwCreateSymbolicLinkObject
 752 000127AE ZwCreateThread
 753 000169D5 ZwCreateTimer
 754 00016BCD ZwCreateToken
 755 0001B0C3 ZwCreateWaitablePort
 756 00009153 ZwDelayExecution
 757 000037D5 ZwDeleteAtom
 758 0001B0D1 ZwDeleteFile
 759 000077CA ZwDeleteKey
 760 000010A5 ZwDeleteObjectAuditAlarm
 761 00009D81 ZwDeleteValueKey
 762 000150D4 ZwDeviceIoControlFile
 763 0001B0DF ZwDisplayString
 764 00007724 ZwDuplicateObject
 765 00015AE8 ZwDuplicateToken
 766 0000C394 ZwEnumerateKey
 767 00014A5A ZwEnumerateValueKey
 768 0001B0ED ZwExtendSection
 769 0001B0FB ZwFilterToken
 770 0000EBA6 ZwFindAtom
 771 0001570D ZwFlushBuffersFile
 772 00014940 ZwFlushInstructionCache
 773 000023B5 ZwFlushKey
 774 0000A419 ZwFlushVirtualMemory
 775 0001B109 ZwFlushWriteBuffer
 776 0001B115 ZwFreeUserPhysicalPages
 777 0000EC81 ZwFreeVirtualMemory
 778 00007126 ZwFsControlFile
 779 00016BDB ZwGetContextThread
 780 0001B123 ZwGetDevicePowerState
 781 000024BF ZwGetPlugPlayEvent
 782 0001B131 ZwGetTickCount
 783 0001B13D ZwGetWriteWatch
 784 0001B14B ZwImpersonateAnonymousToken
 785 00009D39 ZwImpersonateClientOfPort
 786 00004DA1 ZwImpersonateThread
 787 0001B159 ZwInitializeRegistry
 788 0001B167 ZwInitiatePowerAction
 789 0001B175 ZwIsSystemResumeAutomatic
 790 0001B494 ZwListenChannel
 791 0001B181 ZwListenPort
 792 0001B18F ZwLoadDriver
 793 0001B19D ZwLoadKey2
 794 00016BE9 ZwLoadKey
 795 0000BF81 ZwLockFile
 796 000010B3 ZwLockVirtualMemory
 797 000087DC ZwMakeTemporaryObject
 798 0001B1AB ZwMapUserPhysicalPages
 799 0001B1B9 ZwMapUserPhysicalPagesScatter
 800 0000AE4F ZwMapViewOfSection
 801 00006C1A ZwNotifyChangeDirectoryFile
 802 00006CFA ZwNotifyChangeKey
 803 00016BF7 ZwNotifyChangeMultipleKeys
 804 0001B4A2 ZwOpenChannel
 805 00009D8F ZwOpenDirectoryObject
 806 0001149E ZwOpenEvent
 807 0001B1C7 ZwOpenEventPair
 808 00015337 ZwOpenFile
 809 0001B1D5 ZwOpenIoCompletion
 810 0001B1E3 ZwOpenJobObject
 811 000061CC ZwOpenKey
 812 00014AA4 ZwOpenMutant
 813 00005B01 ZwOpenObjectAuditAlarm
 814 000023C3 ZwOpenProcess
 815 0000E717 ZwOpenProcessToken
 816 00008AEC ZwOpenSection
 817 0001255F ZwOpenSemaphore
 818 00006151 ZwOpenSymbolicLinkObject
 819 000024CD ZwOpenThread
 820 00001EB3 ZwOpenThreadToken
 821 0001B1F1 ZwOpenTimer
 822 00001F74 ZwPlugPlayControl
 823 00016C05 ZwPowerInformation
 824 000165D5 ZwPrivilegeCheck
 825 0001B1FF ZwPrivilegeObjectAuditAlarm
 826 000010C1 ZwPrivilegedServiceAuditAlarm
 827 0000BFC4 ZwProtectVirtualMemory
 828 00016C13 ZwPulseEvent
 829 00009FEF ZwQueryAttributesFile
 830 0000E964 ZwQueryDefaultLocale
 831 000051D0 ZwQueryDefaultUILanguage
 832 00005510 ZwQueryDirectoryFile
 833 00016C21 ZwQueryDirectoryObject
 834 0001B20D ZwQueryEaFile
 835 0001285D ZwQueryEvent
 836 0001346B ZwQueryFullAttributesFile
 837 000148F0 ZwQueryInformationAtom
 838 0000F6AF ZwQueryInformationFile
 839 00003BAC ZwQueryInformationJobObject
 840 0001B21B ZwQueryInformationPort
 841 00013351 ZwQueryInformationProcess
 842 00008571 ZwQueryInformationThread
 843 00005B0F ZwQueryInformationToken
 844 0000455F ZwQueryInstallUILanguage
 845 0001B229 ZwQueryIntervalProfile
 846 0000BD4F ZwQueryIoCompletion
 847 00007EBB ZwQueryKey
 848 0001B237 ZwQueryMultipleValueKey
 849 0001B245 ZwQueryMutant
 850 000107D8 ZwQueryObject
 851 0001B253 ZwQueryOpenSubKeys
 852 000152DD ZwQueryPerformanceCounter
 853 0001B261 ZwQueryQuotaInformationFile
 854 000112BB ZwQuerySection
 855 000038C7 ZwQuerySecurityObject
 856 0001B26F ZwQuerySemaphore
 857 00005EA8 ZwQuerySymbolicLinkObject
 858 0001B27D ZwQuerySystemEnvironmentValue
 859 00007D11 ZwQuerySystemInformation
 860 000148E2 ZwQuerySystemTime
 861 00011775 ZwQueryTimer
 862 0000CBA0 ZwQueryTimerResolution
 863 000062D2 ZwQueryValueKey
 864 00015AA3 ZwQueryVirtualMemory
 865 0000E588 ZwQueryVolumeInformationFile
 866 0000366B ZwQueueApcThread
 867 00014B92 ZwRaiseException
 868 0001B28E ZwRaiseHardError
 869 0000C552 ZwReadFile
 870 0001B29C ZwReadFileScatter
 871 0000F6A1 ZwReadRequestData
 872 0000DEE6 ZwReadVirtualMemory
 873 00004BB2 ZwRegisterThreadTerminatePort
 874 00015475 ZwReleaseMutant
 875 00008E81 ZwReleaseSemaphore
 876 0000BEA7 ZwRemoveIoCompletion
 877 0001B2AA ZwReplaceKey
 878 0000E596 ZwReplyPort
 879 00009161 ZwReplyWaitReceivePort
 880 000039BC ZwReplyWaitReceivePortEx
 881 0001B2B8 ZwReplyWaitReplyPort
 882 0001B4B0 ZwReplyWaitSendChannel
 883 0001B2C6 ZwRequestDeviceWakeup
 884 00005290 ZwRequestPort
 885 0000916F ZwRequestWaitReplyPort
 886 0001B2D4 ZwRequestWakeupLatency
 887 00016C2F ZwResetEvent
 888 0001B2E2 ZwResetWriteWatch
 889 0001B2F0 ZwRestoreKey
 890 00008FB7 ZwResumeThread
 891 00016C3D ZwSaveKey
 892 0001B2FE ZwSaveMergedKeys
 893 0000808A ZwSecureConnectPort
 894 0001B4BE ZwSendWaitReplyChannel
 895 0001B4CC ZwSetContextChannel
 896 00016C4B ZwSetContextThread
 897 0001B30C ZwSetDefaultHardErrorPort
 898 0001B31A ZwSetDefaultLocale
 899 0001B328 ZwSetDefaultUILanguage
 900 0001B336 ZwSetEaFile
 901 00008563 ZwSetEvent
 902 0001B344 ZwSetHighEventPair
 903 0001B352 ZwSetHighWaitLowEventPair
 904 0000EE28 ZwSetInformationFile
 905 0001B360 ZwSetInformationJobObject
 906 0001B36E ZwSetInformationKey
 907 000107E6 ZwSetInformationObject
 908 00013B6D ZwSetInformationProcess
 909 0000A1E0 ZwSetInformationThread
 910 00016C59 ZwSetInformationToken
 911 0001B37C ZwSetIntervalProfile
 912 000086C0 ZwSetIoCompletion
 913 00016C67 ZwSetLdtEntries
 914 0001B38A ZwSetLowEventPair
 915 0001B398 ZwSetLowWaitHighEventPair
 916 0001B3A6 ZwSetQuotaInformationFile
 917 00011F97 ZwSetSecurityObject
 918 0001B3B4 ZwSetSystemEnvironmentValue
 919 000010CF ZwSetSystemInformation
 920 0001B3C2 ZwSetSystemPowerState
 921 000010DD ZwSetSystemTime
 922 0000C1DA ZwSetThreadExecutionState
 923 00008C5F ZwSetTimer
 924 00018958 ZwSetTimerResolution
 925 0001B3D0 ZwSetUuidSeed
 926 0000AA1B ZwSetValueKey
 927 0001B3DE ZwSetVolumeInformationFile
 928 0001B3EC ZwShutdownSystem
 929 0001B3FA ZwSignalAndWaitForSingleObject
 930 0001B408 ZwStartProfile
 931 0001B416 ZwStopProfile
 932 0001B424 ZwSuspendThread
 933 0001B432 ZwSystemDebugControl
 934 0001B440 ZwTerminateJobObject
 935 0000DD80 ZwTerminateProcess
 936 0000DFC2 ZwTerminateThread
 937 00004BC0 ZwTestAlert
 938 0001B44E ZwUnloadDriver
 939 00016C75 ZwUnloadKey
 940 00010312 ZwUnlockFile
 941 000024DB ZwUnlockVirtualMemory
 942 0000A3D8 ZwUnmapViewOfSection
 943 00016C83 ZwVdmControl
 944 00013233 ZwWaitForMultipleObjects
 945 00014086 ZwWaitForSingleObject
 946 0001B45C ZwWaitHighEventPair
 947 0001B46A ZwWaitLowEventPair
 948 000023A7 ZwWriteFile
 949 0001B478 ZwWriteFileGather
 950 0000816A ZwWriteRequestData
 951 0000815C ZwWriteVirtualMemory
 952 00012445 ZwYieldExecution
 953 000382C5 _CIpow
 954 000467F7 __eCommonExceptions
 955 00046000 __eEmulatorInit
 956 00049A66 __eF2XM1
 957 00048335 __eFABS
 958 00046DD7 __eFADD32
 959 00046DFF __eFADD64
 960 00046E4A __eFADDPreg
 961 00046E4F __eFADDreg
 962 00046E51 __eFADDtop
 963 00048346 __eFCHS
 964 00048526 __eFCOM
 965 00048449 __eFCOM32
 966 00048472 __eFCOM64
 967 00048517 __eFCOMP
 968 00048432 __eFCOMP32
 969 0004845B __eFCOMP64
 970 000484FB __eFCOMPP
 971 000490CE __eFCOS
 972 00049F37 __eFDECSTP
 973 00047216 __eFDIV32
 974 0004722A __eFDIV64
 975 000472E3 __eFDIVPreg
 976 00047220 __eFDIVR32
 977 00047234 __eFDIVR64
 978 0004723E __eFDIVRPreg
 979 00047243 __eFDIVRreg
 980 00047245 __eFDIVRtop
 981 000472E8 __eFDIVreg
 982 000472EA __eFDIVtop
 983 00048356 __eFFREE
 984 00046D87 __eFIADD16
 985 00046DAF __eFIADD32
 986 000483F7 __eFICOM16
 987 00048420 __eFICOM32
 988 000483E0 __eFICOMP16
 989 00048409 __eFICOMP32
 990 000471EE __eFIDIV16
 991 00047202 __eFIDIV32
 992 000471F8 __eFIDIVR16
 993 0004720C __eFIDIVR32
 994 00047AF8 __eFILD16
 995 00047B09 __eFILD32
 996 00047B13 __eFILD64
 997 00046F64 __eFIMUL16
 998 00046F98 __eFIMUL32
 999 00049F54 __eFINCSTP
1000 00046000 __eFINIT
1001 000481A0 __eFIST16
1002 000480AE __eFIST32
1003 0004819B __eFISTP16
1004 000480A9 __eFISTP32
1005 00048253 __eFISTP64
1006 00046CC6 __eFISUB16
1007 00046D93 __eFISUB32
1008 00046D79 __eFISUBR16
1009 00046DA1 __eFISUBR32
1010 00048708 __eFLD1
1011 00047A79 __eFLD32
1012 00047ACF __eFLD64
1013 00047BC9 __eFLD80
1014 00049ED0 __eFLDCW
1015 0004A071 __eFLDENV
1016 00048773 __eFLDL2E
1017 00048795 __eFLDLN2
1018 000487A6 __eFLDPI
1019 00048744 __eFLDZ
1020 00046FDA __eFMUL32
1021 0004701E __eFMUL64
1022 0004706B __eFMULPreg
1023 00047070 __eFMULreg
1024 00047072 __eFMULtop
1025 00046A66 __eFPATAN
1026 00046A2A __eFPREM
1027 00046A50 __eFPREM1
1028 000491DB __eFPTAN
1029 0004738D __eFRNDINT
1030 0004A0AB __eFRSTOR
1031 00049FFE __eFSAVE
1032 00046A5F __eFSCALE
1033 00049173 __eFSIN
1034 0004A2CA __eFSQRT
1035 00047C84 __eFST
1036 00047F22 __eFST32
1037 00047D4D __eFST64
1038 00049F16 __eFSTCW
1039 00049F82 __eFSTENV
1040 00047C2A __eFSTP
1041 00047F1D __eFSTP32
1042 00047D48 __eFSTP64
1043 000482DA __eFSTP80
1044 00049F22 __eFSTSW
1045 00046DBB __eFSUB32
1046 00046DE3 __eFSUB64
1047 00046E0B __eFSUBPreg
1048 00046DC9 __eFSUBR32
1049 00046DF1 __eFSUBR64
1050 00046E26 __eFSUBRPreg
1051 00046E2B __eFSUBRreg
1052 00046E2D __eFSUBRtop
1053 00046E10 __eFSUBreg
1054 00046E12 __eFSUBtop
1055 0004869A __eFTST
1056 000484F1 __eFUCOM
1057 000484E2 __eFUCOMP
1058 00048484 __eFUCOMPP
1059 00048674 __eFXAM
1060 0004835C __eFXCH
1061 00048A03 __eFXTRACT
1062 00046A87 __eFYL2X
1063 00046A8E __eFYL2XP1
1064 0004A18D __eGetStatusWord
1065 000386DE __isascii
1066 00038730 __iscsym
1067 000386F3 __iscsymf
1068 000386EB __toascii
1069 0000C5A8 _alldiv
1070 00007A9F _allmul
1071 000160D6 _alloca_probe
1072 000387F1 _allrem
1073 000388A3 _allshl
1074 000388C2 _allshr
1075 0003891A _atoi64
1076 0000DB68 _aulldiv
1077 0000DB91 _aullrem
1078 00007D61 _aullshr
1079 000160D6 _chkstk
1080 00051028 _fltused
1081 00002CDA _ftol
1082 00038AB4 _i64toa
1083 00038BD4 _i64tow
1084 000189D2 _itoa
1085 00001B59 _itow
1086 00038A8A _ltoa
1087 00038B78 _ltow
1088 00038C05 _memccpy
1089 00038C58 _memicmp
1090 00038CF0 _snprintf
1091 00008E0E _snwprintf
1092 00038D65 _splitpath
1093 00011634 _strcmpi
1094 00011634 _stricmp
1095 00017DD3 _strlwr
1096 00004DE6 _strnicmp
1097 00002D01 _strupr
1098 00038F4F _tolower
1099 00038F6A _toupper
1100 00038B5D _ui64toa
1101 0000FE10 _ultoa
1102 00038BA6 _ultow
1103 00018D01 _vsnprintf
1104 00001FA5 _wcsicmp
1105 00038F98 _wcslwr
1106 00012DD7 _wcsnicmp
1107 00038FC2 _wcsupr
1108 00038FEC _wtoi
1109 0003900F _wtoi64
1110 00038FEC _wtol
1111 000393F2 abs
1112 00039032 atan
1113 0001673E atoi
1114 000166E3 atol
1115 000390E9 ceil
1116 000391B5 cos
1117 0003924F fabs
1118 00039304 floor
1119 0003862C isalnum
1120 0003853D isalpha
1121 000386B6 iscntrl
1122 00002C85 isdigit
1123 00038688 isgraph
1124 00038593 islower
1125 0003865A isprint
1126 00038604 ispunct
1127 00002CA3 isspace
1128 0003856B isupper
1129 000393D0 iswalpha
1130 0000C629 iswctype
1131 00007FA3 iswdigit
1132 000393E1 iswlower
1133 00018AE8 iswspace
1134 00017DF6 iswxdigit
1135 000385C9 isxdigit
1136 000393F2 labs
1137 000393FD log
1138 00001B87 mbstowcs
1139 000394E2 memchr
1140 00039583 memcmp
1141 0003962F memcpy
1142 0001109B memmove
1143 00039950 memset
1144 000382DE pow
1145 000399A8 qsort
1146 00039B6A sin
1147 00017E20 sprintf
1148 00039C16 sqrt
1149 00039CBC sscanf
1150 00039D62 strcat
1151 00005B1D strchr
1152 00039E02 strcmp
1153 00039CF6 strcpy
1154 00039E83 strcspn
1155 00039EC0 strlen
1156 00039F37 strncat
1157 00002D4E strncmp
1158 00008824 strncpy
1159 0003A084 strpbrk
1160 00017EC0 strrchr
1161 0003A0BD strspn
1162 00017EE7 strstr
1163 0003A10C strtol
1164 000180CD strtoul
1165 0000423D swprintf
1166 0003A271 tan
1167 00002D26 tolower
1168 00015A1E toupper
1169 0003A30F towlower
1170 000180E4 towupper
1171 0003A32A vsprintf
1172 000121E4 wcscat
1173 00012544 wcschr
1174 0000972D wcscmp
1175 0000C23F wcscpy
1176 0000CA53 wcscspn
1177 000152EB wcslen
1178 00006459 wcsncat
1179 0000EBD1 wcsncmp
1180 0000BCE6 wcsncpy
1181 0000DF7B wcspbrk
1182 0000F661 wcsrchr
1183 00016A11 wcsspn
1184 0000456D wcsstr
1185 00008B39 wcstol
1186 0003A446 wcstombs
1187 0001815A wcstoul
@codemaru
돌아보니 좋은 날도 있었고, 나쁜 날도 있었다. 그런 나의 모든 소소한 일상과 배움을 기록한다. 여기에 기록된 모든 내용은 한 개인의 관점이고 의견이다. 내가 속한 조직과는 1도 상관이 없다.
(C) 2001 YoungJin Shin, 0일째 운영 중