| Windows 8 DLL File Information - expsrv.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Visual Basic for Applications Runtime - Expression Service |
| File Version: | 6.0.9589 |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft Visual Basic for Applications |
| DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
| File Size: | 372 KB |
| Total Number of Exported Functions: | 1,825 |
| Total Number of Exported Functions With Names: | 623 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 211,456 Bytes | 55.5% | Read, Execute | Code |
| ENGINE | 0x00035000 | 53,248 Bytes | 14.0% | Read, Execute | Code |
| .rdata | 0x00042000 | 37,888 Bytes | 9.9% | Read | Initialized Data |
| .data | 0x0004c000 | 16,384 Bytes | 4.3% | Write, Read | Initialized Data |
| .rsrc | 0x00052000 | 44,032 Bytes | 11.6% | Read | Initialized Data |
| .reloc | 0x0005d000 | 16,896 Bytes | 4.4% | Read, Discardable | Initialized Data |
Static Linking
expsrv.dll is statically linked to the following files:ole32.dll
OLEAUT32.dll
USER32.dll
KERNEL32.dll
ADVAPI32.dll
This means that when expsrv.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, expsrv.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 7 | 96 Bytes | 0.0% |
| Type Libraries | 1 | 42,164 Bytes | 11.1% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 2 | 1,044 Bytes | 0.3% |
| Total | 10 | 43,304 Bytes | 11.4% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
| String ID | String Text |
|---|---|
| 5000 | dd'-'mmm'-'yy |
| 5001 | True |
| 5004 | False |
COM Classes/Interfaces
| Name | Type | Description |
|---|---|---|
| Collection | CoClass | |
| Constants | Module | |
| Conversion | Module | |
| DateTime | Module | |
| ErrObject | CoClass | |
| FileSystem | Module | |
| Financial | Module | |
| Information | Module | |
| Interaction | Module | |
| Math | Module | |
| Strings | Module | |
| _Collection | Dispatch | |
| _ErrObject | Dispatch | |
| _HiddenInterface | Interface | |
| _HiddenModule | Module |
Exported Functions List
The following functions are exported by this dll:| BASIC_CLASS_AddRef | BASIC_CLASS_GetIDsOfNames | BASIC_CLASS_Invoke |
| BASIC_CLASS_QueryInterface | BASIC_CLASS_Release | BASIC_DISPINTERFACE_GetTICount |
| BASIC_DISPINTERFACE_GetTypeInfo | CopyRecord | CreateIExprSrvObj |
| DllFunctionCall | EVENT_SINK2_AddRef | EVENT_SINK2_Release |
| EVENT_SINK_AddRef | EVENT_SINK_GetIDsOfNames | EVENT_SINK_Invoke |
| EVENT_SINK_QueryInterface | EVENT_SINK_Release | EbCreateContext |
| EbDestroyContext | EbGetErrorInfo | EbGetHandleOfExecutingProject |
| EbGetObjConnectionCounts | EbGetVBAObject | EbIsProjectOnStack |
| EbLibraryLoad | EbLibraryUnload | EbLoadRunTime |
| EbResetProject | EbResetProjectNormal | EbSetContextWorkerThread |
| GetMem1 | GetMem2 | GetMem4 |
| GetMem8 | GetMemEvent | GetMemNewObj |
| GetMemObj | GetMemStr | GetMemVar |
| IID_IVbaHost | MethCallEngine | ProcCallEngine |
| PutMem1 | PutMem2 | PutMem4 |
| PutMem8 | PutMemEvent | PutMemNewObj |
| PutMemObj | PutMemStr | PutMemVar |
| SetMemEvent | SetMemNewObj | SetMemObj |
| SetMemVar | TipCreateInstanceEx | TipCreateInstanceProject2 |
| TipGetAddressOfPredeclaredInstance | TipInvokeMethod | TipInvokeMethod2 |
| TipSetOption | TipUnloadInstance | TipUnloadProject |
| VarPtr | Zombie_AddRef | Zombie_GetIDsOfNames |
| Zombie_GetTypeInfo | Zombie_GetTypeInfoCount | Zombie_Invoke |
| Zombie_QueryInterface | Zombie_Release | _CIatan |
| _CIcos | _CIexp | _CIlog |
| _CIsin | _CIsqrt | _CItan |
| __vbaAryConstruct | __vbaAryConstruct2 | __vbaAryCopy |
| __vbaAryDestruct | __vbaAryLock | __vbaAryMove |
| __vbaAryRebase1Var | __vbaAryRecCopy | __vbaAryRecMove |
| __vbaAryUnlock | __vbaAryVar | __vbaAryVarVarg |
| __vbaBoolErrVar | __vbaBoolStr | __vbaBoolVar |
| __vbaBoolVarNull | __vbaCVarAryUdt | __vbaCastObj |
| __vbaCastObjVar | __vbaCheckType | __vbaCheckTypeVar |
| __vbaChkstk | __vbaCopyBytes | __vbaCopyBytesZero |
| __vbaCyAbs | __vbaCyAdd | __vbaCyErrVar |
| __vbaCyFix | __vbaCyForInit | __vbaCyForNext |
| __vbaCyI2 | __vbaCyI4 | __vbaCyInt |
| __vbaCyMul | __vbaCyMulI2 | __vbaCySgn |
| __vbaCyStr | __vbaCySub | __vbaCyUI1 |
| __vbaCyVar | __vbaDateR4 | __vbaDateR8 |
| __vbaDateStr | __vbaDateVar | __vbaDerefAry |
| __vbaDerefAry1 | __vbaEnd | __vbaErase |
| __vbaEraseKeepData | __vbaEraseNoPop | __vbaError |
| __vbaErrorOverflow | __vbaExceptHandler | __vbaExitEachAry |
| __vbaExitEachColl | __vbaExitEachVar | __vbaExitProc |
| __vbaFPException | __vbaFPFix | __vbaFPInt |
| __vbaFailedFriend | __vbaFileClose | __vbaFileCloseAll |
| __vbaFileLock | __vbaFileOpen | __vbaFileSeek |
| __vbaFixstrConstruct | __vbaForEachAry | __vbaForEachCollAd |
| __vbaForEachCollObj | __vbaForEachCollVar | __vbaForEachVar |
| __vbaFpCDblR4 | __vbaFpCDblR8 | __vbaFpCSngR4 |
| __vbaFpCSngR8 | __vbaFpCmpCy | __vbaFpCy |
| __vbaFpI2 | __vbaFpI4 | __vbaFpR4 |
| __vbaFpR8 | __vbaFpUI1 | __vbaFreeObj |
| __vbaFreeObjList | __vbaFreeStr | __vbaFreeStrList |
| __vbaFreeVar | __vbaFreeVarList | __vbaFreeVarg |
| __vbaGenerateBoundsError | __vbaGet3 | __vbaGet4 |
| __vbaGetFxStr3 | __vbaGetFxStr4 | __vbaGetOwner3 |
| __vbaGetOwner4 | __vbaGosub | __vbaGosubFree |
| __vbaGosubReturn | __vbaHresultCheck | __vbaHresultCheckNonvirt |
| __vbaHresultCheckObj | __vbaI2Abs | __vbaI2Cy |
| __vbaI2ErrVar | __vbaI2ForNextCheck | __vbaI2I4 |
| __vbaI2Sgn | __vbaI2Str | __vbaI2Var |
| __vbaI4Abs | __vbaI4Cy | __vbaI4ErrVar |
| __vbaI4ForNextCheck | __vbaI4Sgn | __vbaI4Str |
| __vbaI4Var | __vbaInStr | __vbaInStrB |
| __vbaInStrVar | __vbaInStrVarB | __vbaInputFile |
| __vbaLateIdCall | __vbaLateIdCallLd | __vbaLateIdCallSt |
| __vbaLateIdNamedCall | __vbaLateIdNamedCallLd | __vbaLateIdNamedCallSt |
| __vbaLateIdNamedStAd | __vbaLateIdSt | __vbaLateIdStAd |
| __vbaLateMemCall | __vbaLateMemCallLd | __vbaLateMemCallSt |
| __vbaLateMemNamedCall | __vbaLateMemNamedCallLd | __vbaLateMemNamedCallSt |
| __vbaLateMemNamedStAd | __vbaLateMemSt | __vbaLateMemStAd |
| __vbaLbound | __vbaLdZeroAry | __vbaLenBstr |
| __vbaLenBstrB | __vbaLenVar | __vbaLenVarB |
| __vbaLineInputStr | __vbaLineInputVar | __vbaLsetFixstr |
| __vbaLsetFixstrFree | __vbaMidStmtBstr | __vbaMidStmtBstrB |
| __vbaMidStmtVar | __vbaMidStmtVarB | __vbaNameFile |
| __vbaNew | __vbaNew2 | __vbaNextEachAry |
| __vbaNextEachCollAd | __vbaNextEachCollObj | __vbaNextEachCollVar |
| __vbaNextEachVar | __vbaObjAddref | __vbaObjIs |
| __vbaObjSet | __vbaObjSetAddref | __vbaObjVar |
| __vbaOnError | __vbaOnGoCheck | __vbaPowerR8 |
| __vbaPrintFile | __vbaPrintObj | __vbaPut3 |
| __vbaPut4 | __vbaPutFxStr3 | __vbaPutFxStr4 |
| __vbaPutOwner3 | __vbaPutOwner4 | __vbaR4Cy |
| __vbaR4ErrVar | __vbaR4ForNextCheck | __vbaR4Sgn |
| __vbaR4Str | __vbaR4Var | __vbaR8Cy |
| __vbaR8ErrVar | __vbaR8FixI2 | __vbaR8FixI4 |
| __vbaR8ForNextCheck | __vbaR8IntI2 | __vbaR8IntI4 |
| __vbaR8Sgn | __vbaR8Str | __vbaR8Var |
| __vbaRaiseEvent | __vbaRecAnsiToUni | __vbaRecAssign |
| __vbaRecDestruct | __vbaRecDestructAnsi | __vbaRecUniToAnsi |
| __vbaRedim | __vbaRedimPreserve | __vbaRedimPreserveVar |
| __vbaRedimPreserveVar2 | __vbaRedimVar | __vbaRedimVar2 |
| __vbaRefVarAry | __vbaResume | __vbaRsetFixstr |
| __vbaRsetFixstrFree | __vbaSetSystemError | __vbaStopExe |
| __vbaStr2Vec | __vbaStrAryToAnsi | __vbaStrAryToUnicode |
| __vbaStrBool | __vbaStrCat | __vbaStrCmp |
| __vbaStrComp | __vbaStrCompVar | __vbaStrCopy |
| __vbaStrCy | __vbaStrDate | __vbaStrErrVarCopy |
| __vbaStrFixstr | __vbaStrI2 | __vbaStrI4 |
| __vbaStrLike | __vbaStrMove | __vbaStrR4 |
| __vbaStrR8 | __vbaStrTextCmp | __vbaStrTextLike |
| __vbaStrToAnsi | __vbaStrToUnicode | __vbaStrUI1 |
| __vbaStrVarCopy | __vbaStrVarMove | __vbaStrVarVal |
| __vbaUI1Cy | __vbaUI1ErrVar | __vbaUI1I2 |
| __vbaUI1I4 | __vbaUI1Sgn | __vbaUI1Str |
| __vbaUI1Var | __vbaUbound | __vbaUdtVar |
| __vbaUnkVar | __vbaVar2Vec | __vbaVarAbs |
| __vbaVarAdd | __vbaVarAnd | __vbaVarCat |
| __vbaVarCmpEq | __vbaVarCmpGe | __vbaVarCmpGt |
| __vbaVarCmpLe | __vbaVarCmpLt | __vbaVarCmpNe |
| __vbaVarCopy | __vbaVarDateVar | __vbaVarDiv |
| __vbaVarDup | __vbaVarEqv | __vbaVarErrI4 |
| __vbaVarFix | __vbaVarForInit | __vbaVarForNext |
| __vbaVarIdiv | __vbaVarImp | __vbaVarIndexLoad |
| __vbaVarIndexLoadRef | __vbaVarIndexLoadRefLock | __vbaVarIndexStore |
| __vbaVarIndexStoreObj | __vbaVarInt | __vbaVarLateMemCallLd |
| __vbaVarLateMemCallLdRf | __vbaVarLateMemCallSt | __vbaVarLateMemSt |
| __vbaVarLateMemStAd | __vbaVarLike | __vbaVarLikeVar |
| __vbaVarMod | __vbaVarMove | __vbaVarMul |
| __vbaVarNeg | __vbaVarNot | __vbaVarOr |
| __vbaVarPow | __vbaVarSetObj | __vbaVarSetObjAddref |
| __vbaVarSetUnk | __vbaVarSetUnkAddref | __vbaVarSetVar |
| __vbaVarSetVarAddref | __vbaVarSub | __vbaVarTextCmpEq |
| __vbaVarTextCmpGe | __vbaVarTextCmpGt | __vbaVarTextCmpLe |
| __vbaVarTextCmpLt | __vbaVarTextCmpNe | __vbaVarTextLike |
| __vbaVarTextLikeVar | __vbaVarTextTstEq | __vbaVarTextTstGe |
| __vbaVarTextTstGt | __vbaVarTextTstLe | __vbaVarTextTstLt |
| __vbaVarTextTstNe | __vbaVarTstEq | __vbaVarTstGe |
| __vbaVarTstGt | __vbaVarTstLe | __vbaVarTstLt |
| __vbaVarTstNe | __vbaVarVargNofree | __vbaVarXor |
| __vbaVarZero | __vbaVargObj | __vbaVargObjAddref |
| __vbaVargParmRef | __vbaVargUnk | __vbaVargUnkAddref |
| __vbaVargVar | __vbaVargVarCopy | __vbaVargVarMove |
| __vbaVargVarRef | __vbaVerifyVarObj | __vbaWriteFile |
| _adj_fdiv_m16i | _adj_fdiv_m32 | _adj_fdiv_m32i |
| _adj_fdiv_m64 | _adj_fdiv_r | _adj_fdivr_m16i |
| _adj_fdivr_m32 | _adj_fdivr_m32i | _adj_fdivr_m64 |
| _adj_fpatan | _adj_fprem | _adj_fprem1 |
| _adj_fptan | _allmul | rtBoolFromErrVar |
| rtBstrFromErrVar | rtCyFromErrVar | rtDecFromVar |
| rtI2FromErrVar | rtI4FromErrVar | rtR4FromErrVar |
| rtR8FromErrVar | rtUI1FromErrVar | rtcAbsVar |
| rtcAnsiValueBstr | rtcAppActivate | rtcAppleScript |
| rtcArray | rtcAtn | rtcBeep |
| rtcBstrFromAnsi | rtcBstrFromByte | rtcBstrFromChar |
| rtcBstrFromError | rtcBstrFromFormatVar | rtcByteValueBstr |
| rtcCVErrFromVar | rtcCallByName | rtcChangeDir |
| rtcChangeDrive | rtcCharValueBstr | rtcChoose |
| rtcCommandBstr | rtcCommandVar | rtcCompareBstr |
| rtcCos | rtcCreateObject | rtcCreateObject2 |
| rtcCurrentDir | rtcCurrentDirBstr | rtcDDB |
| rtcDateAdd | rtcDateDiff | rtcDateFromVar |
| rtcDatePart | rtcDeleteSetting | rtcDir |
| rtcDoEvents | rtcEndOfFile | rtcEnvironBstr |
| rtcEnvironVar | rtcErrObj | rtcExp |
| rtcFV | rtcFileAttributes | rtcFileCopy |
| rtcFileDateTime | rtcFileLen | rtcFileLength |
| rtcFileLocation | rtcFileReset | rtcFileSeek |
| rtcFileWidth | rtcFilter | rtcFixVar |
| rtcFormatCurrency | rtcFormatDateTime | rtcFormatNumber |
| rtcFormatPercent | rtcFreeFile | rtcGetAllSettings |
| rtcGetCurrentCalendar | rtcGetDateBstr | rtcGetDateValue |
| rtcGetDateVar | rtcGetDayOfMonth | rtcGetDayOfWeek |
| rtcGetErl | rtcGetFileAttr | rtcGetHostLCID |
| rtcGetHourOfDay | rtcGetMinuteOfHour | rtcGetMonthOfYear |
| rtcGetObject | rtcGetPresentDate | rtcGetSecondOfMinute |
| rtcGetSetting | rtcGetTimeBstr | rtcGetTimeValue |
| rtcGetTimeVar | rtcGetTimer | rtcGetYear |
| rtcHexBstrFromVar | rtcHexVarFromVar | rtcIMEStatus |
| rtcIPMT | rtcIRR | rtcImmediateIf |
| rtcInStr | rtcInStrChar | rtcInStrRev |
| rtcInputBox | rtcInputCharCount | rtcInputCharCountVar |
| rtcInputCount | rtcInputCountVar | rtcIntVar |
| rtcIsArray | rtcIsDate | rtcIsEmpty |
| rtcIsError | rtcIsMissing | rtcIsNull |
| rtcIsNumeric | rtcIsObject | rtcJoin |
| rtcKillFiles | rtcLeftBstr | rtcLeftCharBstr |
| rtcLeftCharVar | rtcLeftTrimBstr | rtcLeftTrimVar |
| rtcLeftVar | rtcLenCharVar | rtcLenVar |
| rtcLog | rtcLowerCaseBstr | rtcLowerCaseVar |
| rtcMIRR | rtcMacId | rtcMakeDir |
| rtcMidBstr | rtcMidCharBstr | rtcMidCharVar |
| rtcMidVar | rtcMonthName | rtcMsgBox |
| rtcNPV | rtcNPer | rtcOctBstrFromVar |
| rtcOctVarFromVar | rtcPMT | rtcPPMT |
| rtcPV | rtcPackDate | rtcPackTime |
| rtcPartition | rtcQBColor | rtcR8ValFromBstr |
| rtcRandomNext | rtcRandomize | rtcRate |
| rtcRemoveDir | rtcReplace | rtcRgb |
| rtcRightBstr | rtcRightCharBstr | rtcRightCharVar |
| rtcRightTrimBstr | rtcRightTrimVar | rtcRightVar |
| rtcRound | rtcSLN | rtcSYD |
| rtcSaveSetting | rtcSendKeys | rtcSetCurrentCalendar |
| rtcSetDateBstr | rtcSetDateVar | rtcSetFileAttr |
| rtcSetTimeBstr | rtcSetTimeVar | rtcSgnVar |
| rtcShell | rtcSin | rtcSpaceBstr |
| rtcSpaceVar | rtcSplit | rtcSqr |
| rtcStrConvVar | rtcStrConvVar2 | rtcStrFromVar |
| rtcStrReverse | rtcStringBstr | rtcStringVar |
| rtcSwitch | rtcTan | rtcTrimBstr |
| rtcTrimVar | rtcTypeName | rtcUpperCaseBstr |
| rtcUpperCaseVar | rtcVarBstrFromAnsi | rtcVarBstrFromByte |
| rtcVarBstrFromChar | rtcVarDateFromVar | rtcVarFromError |
| rtcVarFromFormatVar | rtcVarFromVar | rtcVarStrFromVar |
| rtcVarType | rtcWeekdayName |
Imported Functions List
The following functions are imported by this dll:- ole32.dll:
BindMoniker CreateBindCtx MkParseDisplayName combase!CoDisconnectObject combase!CoGetClassObject combase!CoGetMalloc - OLEAUT32.dll:
CreateErrorInfo GetActiveObject GetErrorInfo LHashValOfNameSysA LoadRegTypeLib LoadTypeLib RevokeActiveObject SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayCreate SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor SafeArrayGetDim SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayLock SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData SafeArrayUnlock SetErrorInfo SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysReAllocString SysReAllocStringLen SysStringByteLen SysStringLen VarBstrFromCy VarBstrFromDate VarBstrFromI2 VarBstrFromI4 VarBstrFromR4 VarBstrFromR8 VarCyFromI4 VarCyFromStr VarDateFromStr VarI2FromStr VarI4FromR8 VarI4FromStr VarR4FromStr VarR8FromStr VariantChangeType VariantChangeTypeEx VariantClear VariantCopy VariantCopyInd VariantInit - USER32.dll:
AttachThreadInput CharLowerBuffA CharLowerBuffW CharToOemA CharUpperBuffA CharUpperBuffW FindWindowA FindWindowW GetAsyncKeyState GetDesktopWindow GetFocus GetForegroundWindow GetKeyboardLayout GetKeyboardState GetSystemMetrics GetWindow GetWindowTextA GetWindowThreadProcessId IsWindowEnabled IsWindowVisible LoadStringA MessageBeep OemToCharA SendMessageA SetFocus SetForegroundWindow SetKeyboardState SetWindowsHookExA UnhookWindowsHookEx VkKeyScanA VkKeyScanW WaitForInputIdle keybd_event - KERNEL32.dll:
CloseHandle CompareStringA CompareStringW CreateDirectoryA CreateFileA CreateProcessA CreateProcessW DeleteFileA DisableThreadLibraryCalls ExitProcess FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindNextFileA FlushFileBuffers FormatMessageW FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetComputerNameA GetCurrentDirectoryA GetCurrentProcess GetCurrentThreadId GetDriveTypeA GetEnvironmentStrings GetEnvironmentStringsW GetFileAttributesA GetFileTime GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetOEMCP GetProcAddress GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersion GetVolumeInformationA GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapCreate HeapDestroy HeapFree InterlockedDecrement InterlockedIncrement IsBadReadPtr IsDBCSLeadByte IsValidCodePage LCMapStringA LCMapStringW LoadLibraryA LockFile MoveFileA MultiByteToWideChar RaiseException ReadFile RemoveDirectoryA RtlUnwind SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetErrorMode SetFileAttributesA SetFilePointer SetFileTime SetHandleCount SetLastError SetLocalTime SetStdHandle Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnlockFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WideCharToMultiByte WriteFile lstrcmpiA ntdll!RtlAllocateHeap ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection ntdll!RtlReAllocateHeap ntdll!RtlSizeHeap - ADVAPI32.dll:
AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyA RegCreateKeyW RegDeleteKeyA RegDeleteKeyW RegDeleteValueA RegDeleteValueW RegEnumKeyA RegEnumKeyW RegEnumValueA RegEnumValueW RegOpenKeyA RegOpenKeyW RegQueryInfoKeyA RegQueryValueExA RegQueryValueExW RegSetValueExA RegSetValueExW