apphelp.dll
v10.0.19041.6157
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 242
#19 · 0x4be60
#20 · 0x36140
#21 · 0x4b9a0
#22 · 0x4bde0
#23 · 0x23810
#24 · 0x4d7a0
#25 · 0x4d970
#26 · 0x51d50
#27 · 0x38d50
#28 · 0x38f30
#29 · 0x54ac0
#30 · 0x54d80
#31 · 0x544a0
#32 · 0x520e0
#33 · 0x52110
#34 · 0x38a70
DWM8And16Bit_ChangeDisplaySettingsExW_CallOut
#35 · 0x5c5f0
DWM8And16Bit_DirectDrawCreateEx_CallOut
#36 · 0x68d10
DWM8And16Bit_DirectDrawCreate_CallOut
#37 · 0x68d50
DWM8And16Bit_EnumDisplaySettingsExW_CallOut
#38 · 0x5cda0
DWM8And16Bit_IsShimApplied_CallOut
#39 · 0x5d930
DWM8And16Bit_RestoreDisplayMode_CallOut
#40 · 0x68f20
AllowPermLayer
#41 · 0x4a9d0
ApphelpCheckExe
#42 · 0x595b0
ApphelpCheckIME
#43 · 0x49570
ApphelpCheckInstallShieldPackage
#44 · 0x495b0
ApphelpCheckModule
#45 · 0x595e0
ApphelpCheckMsiPackage
#46 · 0x49780
ApphelpCheckRunApp
#47 · 0x59740
ApphelpCheckRunAppEx
#48 · 0x59780
ApphelpCheckShellObject
#49 · 0x2fa50
ApphelpChpeModSettingsFromQueryResult
#50 · 0x5a150
ApphelpCreateAppcompatData
#51 · 0x25800
ApphelpFixMsiPackage
#52 · 0x49a10
ApphelpFixMsiPackageExe
#53 · 0x49cc0
ApphelpFreeFileAttributes
#54 · 0x4ab80
ApphelpGetFileAttributes
#55 · 0x4ab90
ApphelpGetMsiProperties
#56 · 0x49f20
ApphelpGetNTVDMInfo
#57 · 0x49fc0
ApphelpGetShimDebugLevel
#58 · 0x384f0
ApphelpIsPortMonAllowed
#59 · 0x4a070
ApphelpParseModuleData
#60 · 0x59a40
ApphelpQueryModuleData
#61 · 0x59b20
ApphelpQueryModuleDataEx
#62 · 0x234b0
ApphelpShowDialog
#63 · 0x4aba0
ApphelpUpdateCacheEntry
#64 · 0x4aa70
GetPermLayers
#65 · 0x4aaa0
SE_AddHookset
#66 · 0x5af50
SE_CALLBACK_AddHook
#67 · 0x5b010
SE_CALLBACK_Lookup
#68 · 0x5b090
SE_COM_AddHook
#69 · 0x30d30
SE_COM_AddServer
#70 · 0x37ec0
SE_COM_HookInterface
#71 · 0x5b100
SE_COM_HookObject
#72 · 0x5b180
SE_COM_Lookup
#73 · 0x5b200
SE_DllLoaded
#74 · 0x29400
SE_DllUnloaded
#75 · 0x5b260
SE_DynamicShim
#76 · 0x5b2b0
SE_GetHookAPIs
#77 · 0x5b570
SE_GetMaxShimCount
#78 · 0x5b6b0
SE_GetProcAddressForCaller
#79 · 0x2a9d0
SE_GetProcAddressIgnoreIncExc
#80 · 0x5b6c0
SE_GetProcAddressLoad
#81 · 0x5b730
SE_GetShimCount
#82 · 0x5b780
SE_GetShimId
#83 · 0x23c20
SE_InitializeEngine
#84 · 0x255f0
SE_InstallAfterInit
#85 · 0x37a90
SE_InstallBeforeInit
#86 · 0x33500
SE_IsShimDll
#87 · 0x5b7a0
SE_LdrEntryRemoved
#88 · 0x2ebd0
SE_LdrResolveDllName
#89 · 0x35d70
SE_LookupAddress
#90 · 0x5b7f0
SE_LookupCaller
#91 · 0x5b8c0
SE_ProcessDying
#92 · 0x375a0
SE_ShimDPF
#93 · 0x36f80
SE_ShimDllLoaded
#94 · 0x23bd0
SE_WINRT_AddHook
#95 · 0x5ba20
SE_WINRT_HookObject
#96 · 0x5bb00
SdbAddLayerTagRefToQuery
#97 · 0x34fe0
SdbApphelpNotify
#98 · 0x4edb0
SdbApphelpNotifyEx2
#99 · 0x4edf0
SdbApphelpNotifyEx
#100 · 0x4ee80
SdbBeginWriteListTag
#101 · 0x4b9f0
SdbBuildCompatEnvVariables
#102 · 0x51a30
SdbCloseApphelpInformation
#103 · 0x4efa0
SdbCloseDatabase
#104 · 0x26320
SdbCloseDatabaseWrite
#105 · 0x4bc50
SdbCloseLocalDatabase
#106 · 0x52b20
SdbCommitIndexes
#107 · 0x4bc70
SdbCreateDatabase
#108 · 0x4bd10
SdbCreateHelpCenterURL
#109 · 0x4f040
SdbCreateMsiTransformFile
#110 · 0x532b0
SdbDeclareIndex
#111 · 0x4be30
SdbDeletePermLayerKeys
#112 · 0x51c30
SdbDumpSearchPathPartCaches
#113 · 0x4b250
SdbEndWriteListTag
#114 · 0x4c150
SdbEnumMsiTransforms
#115 · 0x533c0
SdbEscapeApphelpURL
#116 · 0x4f5c0
SdbFindCustomActionForPackage
#117 · 0x53540
SdbFindFirstDWORDIndexedTag
#118 · 0x53f80
SdbFindFirstGUIDIndexedTag
#119 · 0x54010
SdbFindFirstMsiPackage
#120 · 0x535f0
SdbFindFirstMsiPackage_Str
#121 · 0x53630
SdbFindFirstNamedTag
#122 · 0x2c250
SdbFindFirstStringIndexedTag
#123 · 0x35f80
SdbFindFirstTag
#124 · 0x2d180
SdbFindFirstTagRef
#125 · 0x2cf60
SdbFindMsiPackageByID
#126 · 0x536b0
SdbFindNextDWORDIndexedTag
#127 · 0x540b0
SdbFindNextGUIDIndexedTag
#128 · 0x540e0
SdbFindNextMsiPackage
#129 · 0x53730
SdbFindNextStringIndexedTag
#130 · 0x37fc0
SdbFindNextTag
#131 · 0x2d2b0
SdbFindNextTagRef
#132 · 0x2da40
SdbFormatAttribute
#133 · 0x39020
SdbFreeDatabaseInformation
#134 · 0x52680
SdbFreeFileAttributes
#135 · 0x39820
SdbFreeFileInfo
#136 · 0x4b250
SdbFreeFlagInfo
#137 · 0x4d8b0
SdbGUIDFromString
#138 · 0x4b260
SdbGUIDToString
#139 · 0x4b290
SdbGetAppCompatDataSize
#140 · 0x5adb0
SdbGetAppPatchDir
#141 · 0x54ed0
SdbGetBinaryTagData
#142 · 0x2e760
SdbGetDatabaseGUID
#143 · 0x4d8e0
SdbGetDatabaseID
#144 · 0x2e480
SdbGetDatabaseInformation
#145 · 0x526b0
SdbGetDatabaseInformationByName
#146 · 0x526d0
SdbGetDatabaseMatch
#147 · 0x56240
SdbGetDatabaseVersion
#148 · 0x528e0
SdbGetDllPath
#149 · 0x52b40
SdbGetEntryFlags
#150 · 0x57e60
SdbGetFileAttributes
#151 · 0x39630
SdbGetFileImageType
#152 · 0x54e50
SdbGetFileImageTypeEx
#153 · 0x23440
SdbGetFileInfo
#154 · 0x4b2c0
SdbGetFirstChild
#155 · 0x2c530
SdbGetImageType
#156 · 0x52b70
SdbGetIndex
#157 · 0x36290
SdbGetItemFromItemRef
#158 · 0x2e7a0
SdbGetLayerName
#159 · 0x54f40
SdbGetLayerTagRef
#160 · 0x4d9e0
SdbGetLocalPDB
#161 · 0x4da90
SdbGetMatchingExe
#162 · 0x38b30
SdbGetMsiPackageInformation
#163 · 0x537c0
SdbGetNamedLayer
#164 · 0x4dab0
SdbGetNextChild
#165 · 0x2c4d0
SdbGetNthUserSdb
#166 · 0x352b0
SdbGetPDBFromGUID
#167 · 0x4db10
SdbGetPathCustomSdb
#168 · 0x54ff0
SdbGetPathSystemSdb
#169 · 0x2f1b0
SdbGetPermLayerKeys
#170 · 0x51ea0
SdbGetShowDebugInfoOption
#171 · 0x384f0
SdbGetShowDebugInfoOptionValue
#172 · 0x384f0
SdbGetStandardDatabaseGUID
#173 · 0x550c0
SdbGetStringTagPtr
#174 · 0x2c0a0
SdbGetTagDataSize
#175 · 0x2d4a0
SdbGetTagFromTagID
#176 · 0x2d5a0
SdbGrabMatchingInfo
#177 · 0x57fb0
SdbGrabMatchingInfoEx
#178 · 0x57fe0
SdbInitDatabase
#179 · 0x4a990
SdbInitDatabaseEx
#180 · 0x2f7e0
SdbIsDbRuntimePlatformSupportedOnHost
#181 · 0x563f0
SdbIsNullGUID
#182 · 0x78620
SdbIsStandardDatabase
#183 · 0x55140
SdbIsTagrefFromLocalDB
#184 · 0x4dba0
SdbIsTagrefFromMainDB
#185 · 0x4dbc0
SdbLoadString
#186 · 0x4f770
SdbMakeIndexKeyFromString
#187 · 0x54110
SdbOpenApphelpDetailsDatabase
#188 · 0x4f830
SdbOpenApphelpDetailsDatabaseSP
#189 · 0x4b2d0
SdbOpenApphelpInformation
#190 · 0x4f8b0
SdbOpenApphelpInformationByID
#191 · 0x4faa0
SdbOpenApphelpResourceFile
#192 · 0x4fbb0
SdbOpenDatabase
#193 · 0x52a30
SdbOpenDbFromGuid
#194 · 0x4fc70
SdbOpenLocalDatabase
#195 · 0x52c10
SdbPackAppCompatData
#196 · 0x31be0
SdbQueryApphelpInformation
#197 · 0x4fd40
SdbQueryBlockUpgrade
#198 · 0x4de50
SdbQueryContext
#199 · 0x4deb0
SdbQueryData
#200 · 0x38da0
SdbQueryDataEx
#201 · 0x38dd0
SdbQueryDataExTagID
#202 · 0x38e40
SdbQueryFlagInfo
#203 · 0x4e130
SdbQueryFlagMask
#204 · 0x4e190
SdbQueryName
#205 · 0x58cb0
SdbQueryReinstallUpgrade
#206 · 0x4e6e0
SdbReadApphelpData
#207 · 0x4ffd0
SdbReadApphelpDetailsData
#208 · 0x500f0
SdbReadBYTETag
#209 · 0x55df0
SdbReadBYTETagRef
#210 · 0x55e70
SdbReadBinaryTag
#211 · 0x2ed60
SdbReadDWORDTag
#212 · 0x2dc20
SdbReadDWORDTagRef
#213 · 0x236e0
SdbReadEntryInformation
#214 · 0x56460
SdbReadMsiTransformInfo
#215 · 0x53900
SdbReadPatchBits
#216 · 0x52c40
SdbReadQWORDTag
#217 · 0x374d0
SdbReadQWORDTagRef
#218 · 0x37480
SdbReadStringTag
#219 · 0x2e8e0
SdbReadStringTagRef
#220 · 0x2e940
SdbReadWORDTag
#221 · 0x2e420
SdbReadWORDTagRef
#222 · 0x55f80
SdbRegisterDatabase
#223 · 0x545a0
SdbRegisterDatabaseEx
#224 · 0x545c0
SdbReleaseDatabase
#225 · 0x26270
SdbReleaseMatchingExe
#226 · 0x4e7e0
SdbResolveDatabase
#227 · 0x551b0
SdbSetApphelpDebugParameters
#228 · 0x504c0
SdbSetEntryFlags
#229 · 0x55500
SdbSetImageType
#230 · 0x38d80
SdbSetPermLayerKeys
#231 · 0x51f30
SdbShowApphelpDialog
#232 · 0x50590
SdbShowApphelpFromQuery
#233 · 0x250e0
SdbStartIndexing
#234 · 0x4c950
SdbStopIndexing
#235 · 0x4c980
SdbStringDuplicate
#236 · 0x4b2e0
SdbStringReplace
#237 · 0x4b310
SdbStringReplaceArray
#238 · 0x4b340
SdbTagIDToTagRef
#239 · 0x2d920
SdbTagRefToTagID
#240 · 0x2d850
SdbTagToString
#241 · 0x39400
SdbUnpackAppCompatData
#242 · 0x24a60
SdbUnpackQueryResult
#243 · 0x24ac0
SdbUnregisterDatabase
#244 · 0x54be0
SdbWriteBYTETag
#245 · 0x4c9b0
SdbWriteBinaryTag
#246 · 0x4c9f0
SdbWriteBinaryTagFromFile
#247 · 0x4ca30
SdbWriteDWORDTag
#248 · 0x4cb80
SdbWriteNULLTag
#249 · 0x4cbc0
SdbWriteQWORDTag
#250 · 0x4cc00
SdbWriteStringRefTag
#251 · 0x4cc40
SdbWriteStringTag
#252 · 0x4cc80
SdbWriteStringTagDirect
#253 · 0x4ccd0
SdbWriteWORDTag
#254 · 0x4cd30
SetPermLayerState
#255 · 0x4aab0
SetPermLayerStateEx
#256 · 0x4aae0
SetPermLayers
#257 · 0x4ab20
ShimDbgPrint
#258 · 0x384f0
ShimDumpCache
#259 · 0x4abe0
ShimFlushCache
#260 · 0x5a140
No function matches your filter.
Imported DLLs & functions 262
BaseFlushAppcompatCache
0x78d0403c
BaseIsAppcompatInfrastructureDisabled
0x78d04040
BaseFreeAppCompatDataForProcess
0x78d0404c
BaseReadAppCompatDataForProcess
0x78d04048
GetLastError
0x78d0406c
SetLastError
0x78d04064
SetUnhandledExceptionFilter
0x78d04068
UnhandledExceptionFilter
0x78d04060
CreateFileW
0x78d04080
DeleteFileW
0x78d04078
FindClose
0x78d04098
FindFirstFileW
0x78d04088
FindNextFileW
0x78d0409c
GetDriveTypeW
0x78d0407c
GetFileAttributesW
0x78d04094
GetFinalPathNameByHandleW
0x78d0408c
GetLongPathNameW
0x78d04084
SetFilePointer
0x78d04090
WriteFile
0x78d04074
GetTempPathW
0x78d040a4
CloseHandle
0x78d040ac
GetProcessHeap
0x78d040bc
HeapAlloc
0x78d040b8
HeapFree
0x78d040b4
DisableThreadLibraryCalls
0x78d040d8
FreeLibrary
0x78d040e8
GetModuleFileNameW
0x78d040c4
GetModuleHandleExW
0x78d040d0
GetModuleHandleW
0x78d040e0
GetProcAddress
0x78d040dc
LoadLibraryExW
0x78d040c8
LoadResource
0x78d040d4
LockResource
0x78d040cc
SizeofResource
0x78d040e4
FindResourceW
0x78d040f0
GetUserDefaultUILanguage
0x78d04104
ExpandEnvironmentStringsW
0x78d04120
FreeEnvironmentStringsW
0x78d0410c
GetCurrentDirectoryW
0x78d0411c
GetEnvironmentStringsW
0x78d04110
GetEnvironmentVariableW
0x78d04118
SetEnvironmentVariableW
0x78d04114
CreateProcessW
0x78d04134
CreateThread
0x78d04130
GetCurrentProcess
0x78d04144
GetCurrentProcessId
0x78d04138
GetCurrentThreadId
0x78d0413c
GetProcessTimes
0x78d04128
ProcessIdToSessionId
0x78d0412c
TerminateProcess
0x78d04140
OpenProcess
0x78d0414c
QueryPerformanceCounter
0x78d04154
WideCharToMultiByte
0x78d04168
CreateWaitableTimerExW
0x78d04184
DeleteCriticalSection
0x78d0418c
EnterCriticalSection
0x78d04174
InitializeCriticalSection
0x78d04188
InitializeCriticalSectionAndSpinCount
0x78d04178
LeaveCriticalSection
0x78d04190
OpenMutexW
0x78d04170
SetWaitableTimer
0x78d0417c
WaitForSingleObject
0x78d04180
Sleep
0x78d04198
GetSystemDirectoryW
0x78d041b0
GetSystemTimeAsFileTime
0x78d041ac
GetSystemWindowsDirectoryW
0x78d041a4
GetTickCount
0x78d041a8
GetTickCount64
0x78d041a0
EventRegister
0x78d041c4
EventSetInformation
0x78d041b8
EventUnregister
0x78d041bc
EventWriteTransfer
0x78d041c0
AllocateAndInitializeSid
0x78d041cc
EqualSid
0x78d041d0
GetAce
0x78d041d4
GetAclInformation
0x78d041d8
GetSecurityDescriptorDacl
0x78d041dc
KERNEL32.dll
14
CancelIo
0x78d04008
CreateToolhelp32Snapshot
0x78d04014
GetOverlappedResult
0x78d04004
GetPackageFullName
0x78d04034
IsWow64Process
0x78d04028
LocalAlloc
0x78d04010
LocalFree
0x78d0400c
PackageIdFromFullName
0x78d0402c
SetNamedPipeHandleState
0x78d04030
Thread32First
0x78d04018
Thread32Next
0x78d0401c
WaitNamedPipeW
0x78d04000
Wow64DisableWow64FsRedirection
0x78d04024
Wow64RevertWow64FsRedirection
0x78d04020
ntdll.dll
165
_stricmp
0x78d0431c
_strlwr
0x78d04210
_strnicmp
0x78d042e8
_vscwprintf
0x78d043a8
_vsnprintf
0x78d04318
_vsnwprintf
0x78d04418
_wcsicmp
0x78d0442c
_wcslwr
0x78d04218
_wcsnicmp
0x78d0441c
_wcsupr_s
0x78d04204
_wtoi
0x78d04360
atol
0x78d04404
EtwEventEnabled
0x78d04424
EtwEventRegister
0x78d04428
EtwEventUnregister
0x78d04420
EtwEventWrite
0x78d04414
EtwEventWriteNoRegistration
0x78d041f8
LdrEnumerateLoadedModules
0x78d04264
LdrFindEntryForAddress
0x78d0432c
LdrGetDllHandle
0x78d04400
LdrGetProcedureAddress
0x78d04244
LdrGetProcedureAddressEx
0x78d04238
LdrInitShimEngineDynamic
0x78d042fc
LdrLoadDll
0x78d04430
LdrResSearchResource
0x78d042cc
memcmp
0x78d0446c
memcpy
0x78d04470
memmove
0x78d04408
memset
0x78d04474
NtApphelpCacheControl
0x78d043fc
NtClose
0x78d04228
NtCreateFile
0x78d043e8
NtCreateKey
0x78d04374
NtDeleteKey
0x78d0436c
NtDeleteValueKey
0x78d04390
NtOpenFile
0x78d0424c
NtOpenKey
0x78d04440
NtProtectVirtualMemory
0x78d0425c
NtQueryAttributesFile
0x78d041fc
NtQueryInformationFile
0x78d043a0
NtQueryInformationProcess
0x78d042f4
NtQueryObject
0x78d04200
NtQuerySecurityObject
0x78d04250
NtQueryValueKey
0x78d0443c
NtReadFile
0x78d043d0
NtSetInformationKey
0x78d04370
NtSetValueKey
0x78d04394
NtWriteFile
0x78d043c8
qsort
0x78d043c4
RtlAcquireSRWLockExclusive
0x78d04268
RtlAcquireSRWLockShared
0x78d04270
RtlAddVectoredExceptionHandler
0x78d04208
RtlAllocateAndInitializeSid
0x78d04220
RtlAllocateHeap
0x78d0445c
RtlAnsiStringToUnicodeString
0x78d04300
RtlAppendUnicodeStringToString
0x78d04378
RtlAppendUnicodeToString
0x78d04454
RtlCaptureContext
0x78d0440c
RtlCaptureStackBackTrace
0x78d04308
RtlCheckTokenMembership
0x78d04224
RtlCompareMemory
0x78d04258
RtlCopyUnicodeString
0x78d04458
RtlCreateEnvironmentEx
0x78d043e4
RtlCreateServiceSid
0x78d042dc
RtlCreateUnicodeString
0x78d0439c
RtlDeleteCriticalSection
0x78d04324
RtlDestroyEnvironment
0x78d043d4
RtlDoesFileExists_U
0x78d04398
RtlDosPathNameToNtPathName_U
0x78d04384
RtlDosPathNameToNtPathName_U_WithStatus
0x78d043ec
RtlDuplicateUnicodeString
0x78d0444c
RtlEnterCriticalSection
0x78d0430c
RtlEqualSid
0x78d041e4
RtlEqualString
0x78d042d0
RtlExpandEnvironmentStrings_U
0x78d04438
RtlFormatCurrentUserKeyPath
0x78d04460
RtlFreeAnsiString
0x78d04334
RtlFreeHeap
0x78d04444
RtlFreeSid
0x78d04464
RtlFreeUnicodeString
0x78d04448
RtlGetDaclSecurityDescriptor
0x78d041e8
RtlGetFileMUIPath
0x78d043a4
RtlGetFullPathName_UEx
0x78d043f0
RtlGetNativeSystemInformation
0x78d0429c
RtlGetNtSystemRoot
0x78d041f4
RtlGetOwnerSecurityDescriptor
0x78d04254
RtlGetVersion
0x78d0438c
RtlGUIDFromString
0x78d0427c
RtlIdentifierAuthoritySid
0x78d041ec
RtlImageDirectoryEntryToData
0x78d04240
RtlInitAnsiString
0x78d0421c
RtlInitAnsiStringEx
0x78d04304
RtlInitializeCriticalSection
0x78d04328
RtlInitializeSRWLock
0x78d04260
RtlInitString
0x78d0423c
RtlInitUnicodeString
0x78d043f4
RtlInitUnicodeStringEx
0x78d04468
RtlLeaveCriticalSection
0x78d04310
RtlLengthRequiredSid
0x78d04248
RtlMultiByteToUnicodeN
0x78d042d4
RtlNtPathNameToDosPathName
0x78d04344
RtlNtStatusToDosError
0x78d042f0
RtlpEnsureBufferSize
0x78d04348
RtlQueryEnvironmentVariable_U
0x78d04340
RtlReAllocateHeap
0x78d043d8
RtlReleaseSRWLockExclusive
0x78d0426c
RtlReleaseSRWLockShared
0x78d04274
RtlRunOnceExecuteOnce
0x78d04380
RtlSecondsSince1970ToTime
0x78d04368
RtlSetEnvironmentVar
0x78d043e0
RtlSetEnvironmentVariable
0x78d0433c
RtlSizeHeap
0x78d043dc
RtlStringFromGUID
0x78d04450
RtlSubAuthorityCountSid
0x78d042e4
RtlSubAuthoritySid
0x78d042e0
RtlTimeToTimeFields
0x78d04364
RtlTryEnterCriticalSection
0x78d04314
RtlUnicodeStringToAnsiString
0x78d04338
RtlUnicodeStringToInteger
0x78d04354
RtlUnwind
0x78d042d8
RtlUpcaseUnicodeChar
0x78d04288
RtlUpcaseUnicodeString
0x78d0437c
RtlVerifyVersionInfo
0x78d042a0
RtlWow64GetProcessMachines
0x78d04330
RtlxAnsiStringToUnicodeSize
0x78d04290
SbSelectProcedure
0x78d042ec
sprintf_s
0x78d04230
sscanf_s
0x78d04234
strchr
0x78d0422c
strcpy_s
0x78d0420c
strncmp
0x78d042b4
strrchr
0x78d04320
strstr
0x78d04214
strtok_s
0x78d042f8
swprintf_s
0x78d043f8
toupper
0x78d04280
VerSetConditionMask
0x78d042c0
wcscat_s
0x78d043ac
wcschr
0x78d043bc
wcscpy_s
0x78d043b0
wcsncmp
0x78d041f0
wcsrchr
0x78d04410
wcsspn
0x78d043c0
wcsstr
0x78d04434
ZwClose
0x78d043b4
ZwCreateFile
0x78d04284
ZwCreateKey
0x78d04298
ZwCreateSection
0x78d0428c
ZwEnumerateKey
0x78d042b8
ZwEnumerateValueKey
0x78d04358
ZwMapViewOfSection
0x78d042b0
ZwOpenFile
0x78d042c4
ZwOpenKey
0x78d0434c
ZwOpenProcessToken
0x78d042bc
ZwQueryDirectoryFile
0x78d042a4
ZwQueryInformationFile
0x78d042c8
ZwQueryInformationProcess
0x78d04294
ZwQueryInformationToken
0x78d042ac
ZwQueryKey
0x78d0435c
ZwQuerySystemInformation
0x78d04388
ZwQuerySystemTime
0x78d043cc
ZwQueryValueKey
0x78d043b8
ZwSetInformationProcess
0x78d042a8
ZwSetValueKey
0x78d04350
ZwUnmapViewOfSection
0x78d04278
No function matches your filter.