|
0 |
0 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b3000-0x4b317b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
|
1 |
12 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b310a-0x4b3238 |
12 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
1 |
0x4bcae7-0x4bcc85 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
|
2 |
0 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b3238-0x4b3798 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc68d-0x4bcc0f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
|
3 |
186 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b3560-0x4b4a66 |
162 |
DLL |
Function/s |
ntdll.dll |
-
_stricmp
-
bsearch
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
LdrEnumerateLoadedModules
-
LdrGetProcedureAddress
-
LdrLoadDll
-
LdrLockLoaderLock
-
LdrUnlockLoaderLock
-
memmove
-
RtlAcquirePebLock
-
RtlAllocateHeap
-
RtlAnsiStringToUnicodeString
-
RtlDetermineDosPathNameType_U
-
RtlDosApplyFileIsolationRedirection_Ustr
-
RtlDosPathNameToNtPathName_U
-
RtlEnterCriticalSection
-
RtlEqualUnicodeString
-
RtlFindActivationContextSectionString
-
RtlFindCharInUnicodeString
-
RtlFreeHeap
-
RtlFreeUnicodeString
-
RtlGetNtGlobalFlags
-
RtlHashUnicodeString
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlInitAnsiString
-
RtlInitString
-
RtlInitUnicodeString
-
RtlInitUnicodeStringEx
-
RtlIsDosDeviceName_U
-
RtlLeaveCriticalSection
-
RtlMultiByteToUnicodeN
-
RtlNtStatusToDosError
-
RtlNtStatusToDosErrorNoTeb
-
RtlQueryEnvironmentVariable_U
-
RtlReleasePebLock
-
RtlTryEnterCriticalSection
-
RtlUpcaseUnicodeChar
-
RtlValidateUnicodeString
-
wcschr
-
wcslen
-
wcsncmp
-
wcsrchr
-
ZwClose
-
ZwContinue
-
ZwCreateFile
-
ZwOpenKey
-
ZwQueryInformationProcess
-
ZwQueryValueKey
|
KERNEL32.DLL |
-
CreateFileA
-
CreateFileW
-
GetProcAddress
-
InterlockedCompareExchange
-
LoadLibraryA
-
LoadLibraryExA
-
LoadLibraryExW
|
|
|
1 |
0x4bc550-0x4bc5e0 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
4 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b4a66-0x4b4b4e |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc4ae-0x4bc53c |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
5 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b4b4e-0x4b4c61 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc40c-0x4bc49a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
6 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b4c61-0x4b4d30 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc368-0x4bc3f8 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
7 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b4d30-0x4b4e39 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc2c6-0x4bc354 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
8 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b4e39-0x4b4f17 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc222-0x4bc2b2 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
9 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b4f17-0x4b501c |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc17e-0x4bc20e |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
10 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b501c-0x4b50c6 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc0dc-0x4bc16a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
11 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b50c6-0x4b519b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bc039-0x4bc0c8 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
12 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b519b-0x4b52a4 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbf96-0x4bc025 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
13 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b52a4-0x4b5382 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbef3-0x4bbf82 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
14 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5382-0x4b5460 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbe51-0x4bbedf |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
15 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5460-0x4b5565 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbdaf-0x4bbe3d |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
16 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5565-0x4b560f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbd0d-0x4bbd9b |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
17 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b560f-0x4b56e4 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbc6b-0x4bbcf9 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
18 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b56e4-0x4b57ed |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbbc9-0x4bbc57 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
19 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b57ed-0x4b58d1 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bbb27-0x4bbbb5 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
20 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b58d1-0x4b59b9 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bba83-0x4bbb13 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
21 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b59b9-0x4b5acc |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb9df-0x4bba6f |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
22 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5acc-0x4b5b9b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb93b-0x4bb9cb |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
23 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5b9b-0x4b5ca4 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb899-0x4bb927 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
24 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5ca4-0x4b5d82 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb7f5-0x4bb885 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
25 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5d82-0x4b5e87 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb752-0x4bb7e1 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
26 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5e87-0x4b5f31 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb6ae-0x4bb73e |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
27 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b5f31-0x4b6006 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb60a-0x4bb69a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
28 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6006-0x4b610f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb566-0x4bb5f6 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
29 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b610f-0x4b61ed |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb4c3-0x4bb552 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
30 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b61ed-0x4b62cb |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb421-0x4bb4af |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
31 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b62cb-0x4b63d0 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb37e-0x4bb40d |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
32 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b63d0-0x4b647a |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb2dc-0x4bb36a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
33 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b647a-0x4b654f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb238-0x4bb2c8 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
34 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b654f-0x4b6658 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb196-0x4bb224 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
35 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6658-0x4b673c |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb0f3-0x4bb182 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
36 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b673c-0x4b6824 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bb051-0x4bb0df |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
37 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6824-0x4b6937 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bafaf-0x4bb03d |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
38 |
36 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6937-0x4b6b0d |
12 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
1 |
0x4baf58-0x4bafaf |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
39 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6b0d-0x4b6b8e |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4baf02-0x4baf58 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
40 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6b8e-0x4b6c3a |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4baead-0x4baf02 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
41 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6c3a-0x4b6ca2 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bae56-0x4baead |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
42 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6ca2-0x4b6d44 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bae01-0x4bae56 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
43 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6d44-0x4b6dbb |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4badac-0x4bae01 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
44 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6dbb-0x4b6e59 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bad57-0x4badac |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
45 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6e59-0x4b6e9c |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bad01-0x4bad57 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
46 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6e9c-0x4b6f0a |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bacac-0x4bad01 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
47 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6f0a-0x4b6fac |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bac55-0x4bacac |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
48 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b6fac-0x4b7023 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bac00-0x4bac55 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
49 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7023-0x4b709a |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4babaa-0x4bac00 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
50 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b709a-0x4b7138 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bab55-0x4babaa |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
51 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7138-0x4b717b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4bab00-0x4bab55 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
52 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b717b-0x4b71e9 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4baaab-0x4bab00 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
53 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b71e9-0x4b728b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4baa55-0x4baaab |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
54 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b728b-0x4b7308 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba9ff-0x4baa55 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
55 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7308-0x4b7389 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba9aa-0x4ba9ff |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
56 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7389-0x4b7435 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba955-0x4ba9aa |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
57 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7435-0x4b749d |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba900-0x4ba955 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
58 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b749d-0x4b753f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba8aa-0x4ba900 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
59 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b753f-0x4b75b6 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba853-0x4ba8aa |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
60 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b75b6-0x4b7654 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba7fe-0x4ba853 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
61 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7654-0x4b7697 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba7a8-0x4ba7fe |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
62 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7697-0x4b7705 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba753-0x4ba7a8 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
63 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7705-0x4b77a7 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba6fe-0x4ba753 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
64 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b77a7-0x4b781e |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba6a7-0x4ba6fe |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
65 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b781e-0x4b7895 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba651-0x4ba6a7 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
66 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7895-0x4b7933 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba5fa-0x4ba651 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
67 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7933-0x4b7976 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba5a5-0x4ba5fa |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
68 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7976-0x4b79e4 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba54e-0x4ba5a5 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
69 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b79e4-0x4b7a86 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba4f9-0x4ba54e |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
70 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7a86-0x4b7b03 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba4a4-0x4ba4f9 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
71 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7b03-0x4b7b84 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba44f-0x4ba4a4 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
72 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7b84-0x4b7c30 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba3f8-0x4ba44f |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
73 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7c30-0x4b7c98 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba3a3-0x4ba3f8 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
74 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7c98-0x4b7d3a |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba34e-0x4ba3a3 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
75 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7d3a-0x4b7db1 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba2f7-0x4ba34e |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
76 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7db1-0x4b7e4f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba2a0-0x4ba2f7 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
77 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7e4f-0x4b7e92 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba24a-0x4ba2a0 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
78 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7e92-0x4b7f00 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba1f3-0x4ba24a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
79 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7f00-0x4b7fa2 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba19e-0x4ba1f3 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
80 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b7fa2-0x4b8019 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba149-0x4ba19e |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
81 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8019-0x4b8090 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba0f4-0x4ba149 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
82 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8090-0x4b812e |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba09f-0x4ba0f4 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
83 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b812e-0x4b8171 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4ba04a-0x4ba09f |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
84 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8171-0x4b81df |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9ff3-0x4ba04a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
85 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b81df-0x4b8281 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9f9e-0x4b9ff3 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
86 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8281-0x4b82fe |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9f49-0x4b9f9e |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
87 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b82fe-0x4b837f |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9ef2-0x4b9f49 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
88 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b837f-0x4b842b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9e9b-0x4b9ef2 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
89 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b842b-0x4b8493 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9e44-0x4b9e9b |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
90 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8493-0x4b8535 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9def-0x4b9e44 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
91 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8535-0x4b85ac |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9d99-0x4b9def |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
92 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b85ac-0x4b864a |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9d44-0x4b9d99 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
93 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b864a-0x4b868d |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9cef-0x4b9d44 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
94 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b868d-0x4b86fb |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9c9a-0x4b9cef |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
95 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b86fb-0x4b879d |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9c43-0x4b9c9a |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
96 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b879d-0x4b8814 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9bed-0x4b9c43 |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
97 |
24 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b8814-0x4b888b |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0x4b9b98-0x4b9bed |
24 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
|
|
|
98 |
25 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b888b-0x4b9907 |
25 |
DLL |
Function/s |
ntdll.dll |
-
KiFastSystemCall
-
KiFastSystemCallRet
-
KiUserExceptionDispatcher
-
RtlImageDirectoryEntryToData
-
RtlImageNtHeader
-
RtlLeaveCriticalSection
-
RtlTryEnterCriticalSection
-
ZwContinue
-
ZwQueryInformationProcess
|
KERNEL32.DLL |
-
GetVersion
|
|
|
|
99 |
40894 |
|
|
100 |
427456 |
|
Region number |
Address space |
Number of API calls |
|
0 |
0x4b3000-0x4b3006 |
0 |
DLL |
Function/s |
|
We couldn't retrieve the functions. |
- |
|
|
1 |
0xb41000-0xb46a38 |
33199 |
| |