@PhfAcquireFastLockExclusive@4
@PhfAcquireFastLockShared@4
@PhfAcquireQueuedLockExclusive@4
@PhfAcquireQueuedLockShared@4
@PhfAcquireRundownProtection@4
@PhfBeginInitOnce@4
@PhfEndInitOnce@4
@PhfHashBytesHsieh@8
@PhfHashBytesMurmur@8
@PhfHashBytesSdbm@8
@PhfInitializeBarrier@8
@PhfInitializeEvent@4
@PhfInitializeInitOnce@4
@PhfInitializeRundownProtection@4
@PhfPulseAllCondition@4
@PhfPulseCondition@4
@PhfQueueWakeEvent@8
@PhfReleaseFastLockExclusive@4
@PhfReleaseFastLockShared@4
@PhfReleaseQueuedLockExclusive@4
@PhfReleaseQueuedLockShared@4
@PhfReleaseRundownProtection@4
@PhfResetEvent@4
@PhfSetEvent@4
@PhfSetWakeEvent@8
@PhfTryAcquireFastLockExclusive@4
@PhfTryAcquireFastLockShared@4
@PhfTryWakeQueuedLock@4
@PhfWaitForBarrier@8
@PhfWaitForCondition@12
@PhfWaitForConditionEx@16
@PhfWaitForEvent@8
@PhfWaitForRundownProtection@4
@PhfWaitForWakeEvent@16
@PhfWakeForReleaseQueuedLock@8
@PhxfAddInt32@12
@PhxfAddInt32U@12
@PhxfDivideSingle2U@12
@PhxfDivideSingleU@12
@PhxfFillMemoryUlong@12
PhAppendFormatStringBuilder
PhApplicationName
PhConcatStrings
PhCurrentSessionId
PhCurrentTokenQueryHandle
PhElevated
PhElevationType
PhFormatString
PhHeapHandle
PhKphFeatures
PhLibImageBase
PhOsVersion
PhShowMessage
PhSystemBasicInformation
PhWriteStringFormatFileStream
PhaConcatStrings
PhaFormatString
ProcessAllAccess
ProcessQueryAccess
ThreadAllAccess
ThreadQueryAccess
ThreadSetAccess
WindowsVersion
_KphCaptureStackBackTraceThread@24
_KphConnect2@8
_KphConnect2Ex@12
_KphConnect@4
_KphDisconnect@0
_KphDuplicateObject@28
_KphEnumerateProcessHandles@16
_KphGetContextThread@8
_KphGetFeatures@4
_KphInstall@8
_KphInstallEx@12
_KphIsConnected@0
_KphOpenDriver@8
_KphOpenProcess@12
_KphOpenProcessJob@12
_KphOpenProcessToken@12
_KphOpenThread@12
_KphOpenThreadProcess@12
_KphQueryInformationDriver@20
_KphQueryInformationObject@24
_KphQueryInformationProcess@20
_KphQueryInformationThread@20
_KphReadVirtualMemory@20
_KphReadVirtualMemoryUnsafe@20
_KphResumeProcess@4
_KphSetContextThread@8
_KphSetInformationObject@20
_KphSetInformationProcess@16
_KphSetInformationThread@16
_KphSetParameters@8
_KphSuspendProcess@4
_KphTerminateProcess@8
_KphTerminateThread@8
_KphTerminateThreadUnsafe@8
_KphUninstall@4
_KphWriteVirtualMemory@20
_PhAddComboBoxStrings@12
_PhAddElementAvlTree@8
_PhAddEntryHashtable@8
_PhAddEntryHashtableEx@12
_PhAddItemList@8
_PhAddItemPointerList@8
_PhAddItemSimpleHashtable@12
_PhAddItemsList@12
_PhAddLayoutItem@16
_PhAddLayoutItemEx@32
_PhAddListViewColumn@28
_PhAddListViewItem@16
_PhAddTabControlTab@12
_PhAdjustRectangleToBounds@8
_PhAdjustRectangleToWorkingArea@8
_PhAllocate@4
_PhAllocateExSafe@8
_PhAllocateFromFreeList@4
_PhAllocatePage@8
_PhAllocateSafe@4
_PhAppendCharStringBuilder2@12
_PhAppendCharStringBuilder@8
_PhAppendStringBuilder2@8
_PhAppendStringBuilder@8
_PhAppendStringBuilderEx@12
_PhBoostProvider@8
_PhBufferToHexString@8
_PhCenterRectangle@8
_PhCenterWindow@8
_PhCheckSumMappedImage@4
_PhClearCircularBuffer_FLOAT@4
_PhClearCircularBuffer_PVOID@4
_PhClearCircularBuffer_SIZE_T@4
_PhClearCircularBuffer_ULONG64@4
_PhClearCircularBuffer_ULONG@4
_PhClearHashtable@4
_PhClearList@4
_PhCompareStringRef@12
_PhCompareUnicodeStringZIgnoreMenuPrefix@16
_PhCompareUnicodeStringZNatural@12
_PhConcatStringRef2@8
_PhConcatStrings2@8
_PhConcatStrings_V@8
_PhCopyAnsiStringZ@20
_PhCopyCircularBuffer_FLOAT@12
_PhCopyCircularBuffer_PVOID@12
_PhCopyCircularBuffer_SIZE_T@12
_PhCopyCircularBuffer_ULONG64@12
_PhCopyCircularBuffer_ULONG@12
_PhCopyUnicodeStringZ@20
_PhCopyUnicodeStringZFromAnsi@20
_PhCreateAlloc@8
_PhCreateAnsiString@4
_PhCreateAnsiStringEx@8
_PhCreateAnsiStringFromUnicode@4
_PhCreateAnsiStringFromUnicodeEx@8
_PhCreateDsObjectPickerDialog@4
_PhCreateEMenu@0
_PhCreateEMenuItem@20
_PhCreateFileStream2@16
_PhCreateFileStream@24
_PhCreateFileWin32@28
_PhCreateFileWin32Ex@32
_PhCreateHandle@8
_PhCreateHandleTable@0
_PhCreateHashtable@16
_PhCreateKey@28
_PhCreateList@4
_PhCreateObject@16
_PhCreateObjectType@16
_PhCreateObjectTypeEx@20
_PhCreateOpenFileDialog@0
_PhCreatePointerList@4
_PhCreateProcess@40
_PhCreateProcessAsUser@20
_PhCreateProcessWin32@32
_PhCreateProcessWin32Ex@40
_PhCreateSaveFileDialog@0
_PhCreateSecurityPage@24
_PhCreateSimpleHashtable@4
_PhCreateString@4
_PhCreateStringEx@8
_PhCreateStringFromAnsi@4
_PhCreateStringFromAnsiEx@8
_PhCreateSymbolProvider@4
_PhCreateThread@12
_PhDeleteAutoPool@4
_PhDeleteCallback@4
_PhDeleteCircularBuffer_FLOAT@4
_PhDeleteCircularBuffer_PVOID@4
_PhDeleteCircularBuffer_SIZE_T@4
_PhDeleteCircularBuffer_ULONG64@4
_PhDeleteCircularBuffer_ULONG@4
_PhDeleteFastLock@4
_PhDeleteFileWin32@4
_PhDeleteFreeList@4
_PhDeleteGraphState@4
_PhDeleteImageListWrapper@4
_PhDeleteImageVersionInfo@4
_PhDeleteLayoutManager@4
_PhDeleteProviderThread@4
_PhDeleteStringBuilder@4
_PhDeleteWorkQueue@4
_PhDereferenceObject@4
_PhDereferenceObjectDeferDelete@4
_PhDereferenceObjectEx@12
_PhDereferenceObjects@8
_PhDestroyEMenu@4
_PhDestroyEMenuItem@4
_PhDestroyHandle@12
_PhDestroyHandleTable@4
_PhDisconnectNamedPipe@4
_PhDosErrorToNtStatus@4
_PhDrainAutoPool@4
_PhDrawGraph@8
_PhDrawGraphDirect@12
_PhDuplicateAnsiStringZ@4
_PhDuplicateAnsiStringZSafe@4
_PhDuplicateObject@28
_PhDuplicateUnicodeStringZ@4
_PhEditSecurity@28
_PhEllipsisString@8
_PhEllipsisStringPath@8
_PhEnableAllMenuItems@8
_PhEnableMenuItem@12
_PhEnumAvlTree@16
_PhEnumDirectoryFile@16
_PhEnumDirectoryObjects@12
_PhEnumFileStreams@8
_PhEnumGenericModules@20
_PhEnumHandleTable@12
_PhEnumHandles@4
_PhEnumHandlesEx@4
_PhEnumHashtable@12
_PhEnumKernelModules@4
_PhEnumPagefiles@4
_PhEnumPointerListEx@16
_PhEnumProcessEnvironmentVariables@16
_PhEnumProcessHandles@8
_PhEnumProcessModules32@12
_PhEnumProcessModules32Ex@8
_PhEnumProcessModules@12
_PhEnumProcessModulesEx@8
_PhEnumProcesses@4
_PhEnumProcessesEx@4
_PhEnumProcessesForSession@8
_PhEnumServices@16
_PhEqualStringRef@12
_PhEscapeCommandLinePart@4
_PhEscapeStringForMenuPrefix@4
_PhExpandEnvironmentStrings@4
_PhExponentiate64@12
_PhExponentiate@8
_PhFinalHash@16
_PhFinalStringBuilderString@4
_PhFindCharInStringRef@12
_PhFindEMenuItem@16
_PhFindElementAvlTree2@12
_PhFindElementAvlTree@8
_PhFindEntryHashtable@8
_PhFindIntegerSiKeyValuePairs@16
_PhFindItemList@8
_PhFindItemPointerList@8
_PhFindItemSimpleHashtable@8
_PhFindLastCharInStringRef@12
_PhFindListViewItemByFlags@12
_PhFindListViewItemByParam@12
_PhFindLoaderEntry@12
_PhFindProcessInformation@8
_PhFindStringInStringRef@12
_PhFindStringSiKeyValuePairs@16
_PhFlushFileStream@8
_PhFormat@12
_PhFormatDate@8
_PhFormatDateTime@4
_PhFormatDecimal@12
_PhFormatGuid@4
_PhFormatImageVersionInfo@16
_PhFormatNativeKeyName@4
_PhFormatSize@12
_PhFormatString_V@8
_PhFormatTime@8
_PhFormatTimeSpanRelative@8
_PhFormatToBuffer@20
_PhFormatUInt64@12
_PhFree@4
_PhFreeDsObjectPickerDialog@4
_PhFreeDsObjectPickerObjects@4
_PhFreeFileDialog@4
_PhFreePage@4
_PhFreeToFreeList@8
_PhGenerateGuid@4
_PhGenerateGuidFromName@20
_PhGenerateRandomAlphaString@8
_PhGetAccessEntries@12
_PhGetAccessString@12
_PhGetApplicationDirectory@0
_PhGetApplicationFileName@0
_PhGetBaseName@4
_PhGetComboBoxString@8
_PhGetDllFileName@8
_PhGetDrawInfoGraphBuffers@12
_PhGetDriverServiceKeyName@8
_PhGetEnabledProvider@4
_PhGetEnlistmentBasicInformation@8
_PhGetFileDialogFileName@4
_PhGetFileDialogFilterIndex@4
_PhGetFileDialogOptions@4
_PhGetFileName@4
_PhGetFileShellIcon@12
_PhGetFileSize@8
_PhGetFileVersionInfo@4
_PhGetFileVersionInfoLangCodePage@4
_PhGetFileVersionInfoString2@12
_PhGetFileVersionInfoString@8
_PhGetFullPath@8
_PhGetGenericTreeNewLines@8
_PhGetHandleInformation@28
_PhGetHandleInformationEx@40
_PhGetJobProcessIdList@8
_PhGetKernelFileName@0
_PhGetKnownLocation@8
_PhGetLineFromAddress@24
_PhGetListBoxString@8
_PhGetListViewItemImageIndex@12
_PhGetListViewItemParam@12
_PhGetMappedArchiveImportEntry@8
_PhGetMappedImageDataEntry@12
_PhGetMappedImageDelayImports@8
_PhGetMappedImageExportEntry@12
_PhGetMappedImageExportFunction@16
_PhGetMappedImageExportFunctionRemote@20
_PhGetMappedImageExports@8
_PhGetMappedImageImportDll@12
_PhGetMappedImageImportEntry@12
_PhGetMappedImageImports@8
_PhGetMappedImageLoadConfig32@8
_PhGetMappedImageLoadConfig64@8
_PhGetMappedImageSectionName@16
_PhGetMessage@16
_PhGetModuleFromAddress@16
_PhGetNextMappedArchiveMember@8
_PhGetNtMessage@4
_PhGetObjectSecurity@12
_PhGetObjectType@4
_PhGetObjectTypeInformation@8
_PhGetPositionFileStream@8
_PhGetPrimeNumber@4
_PhGetProcedureAddressRemote@24
_PhGetProcessDepStatus@8
_PhGetProcessEnvironment@16
_PhGetProcessExecuteFlags@8
_PhGetProcessImageFileName@8
_PhGetProcessImageFileNameByProcessId@8
_PhGetProcessImageFileNameWin32@8
_PhGetProcessIsDotNet@8
_PhGetProcessIsDotNetEx@20
_PhGetProcessIsPosix@8
_PhGetProcessMappedFileName@12
_PhGetProcessPebString@12
_PhGetProcessPosixCommandLine@8
_PhGetProcessWorkingSetInformation@8
_PhGetProcessWsCounters@8
_PhGetResourceManagerBasicInformation@12
_PhGetRunIdProvider@4
_PhGetSeObjectSecurity@16
_PhGetSelectedListViewItemParam@4
_PhGetSelectedListViewItemParams@12
_PhGetServiceConfig@4
_PhGetServiceDelayedAutoStart@8
_PhGetServiceDescription@4
_PhGetServiceErrorControlInteger@4
_PhGetServiceErrorControlString@4
_PhGetServiceNameFromTag@8
_PhGetServiceStartTypeInteger@4
_PhGetServiceStartTypeString@4
_PhGetServiceStateString@4
_PhGetServiceTypeInteger@4
_PhGetServiceTypeString@4
_PhGetSidFullName@12
_PhGetStockApplicationIcon@8
_PhGetSymbolFromAddress@28
_PhGetSymbolFromName@12
_PhGetSystemDirectory@0
_PhGetSystemRoot@4
_PhGetThreadContext@8
_PhGetThreadServiceTag@12
_PhGetTokenGroups@8
_PhGetTokenIntegrityLevel@12
_PhGetTokenOwner@8
_PhGetTokenPrimaryGroup@8
_PhGetTokenPrivileges@8
_PhGetTokenUser@8
_PhGetTransactionBasicInformation@8
_PhGetTransactionManagerBasicInformation@8
_PhGetTransactionManagerLogFileName@8
_PhGetTransactionPropertiesInformation@16
_PhGetTreeNewText@8
_PhGetWin32Message@4
_PhGetWindowText@4
_PhGraphStateGetDrawInfo@12
_PhHexStringToBuffer@8
_PhIconToBitmap@12
_PhImageListWrapperAddIcon@8
_PhImageListWrapperRemove@8
_PhImpersonateClientOfNamedPipe@4
_PhIndexOfEMenuItem@8
_PhInitializeAutoPool@4
_PhInitializeAvlTree@8
_PhInitializeCallback@4
_PhInitializeCircularBuffer_FLOAT@8
_PhInitializeCircularBuffer_PVOID@8
_PhInitializeCircularBuffer_SIZE_T@8
_PhInitializeCircularBuffer_ULONG64@8
_PhInitializeCircularBuffer_ULONG@8
_PhInitializeFastLock@4
_PhInitializeFreeList@12
_PhInitializeGraphState@4
_PhInitializeHash@8
_PhInitializeImageListWrapper@16
_PhInitializeImageVersionInfo@8
_PhInitializeLayoutManager@8
_PhInitializeMappedArchive@12
_PhInitializeMappedImage@12
_PhInitializeProviderThread@8
_PhInitializeStringBuilder@8
_PhInitializeWorkQueue@16
_PhInjectDllProcess@12
_PhInsertEMenuItem@12
_PhInsertItemList@12
_PhInsertItemsList@16
_PhInsertStringBuilder2@12
_PhInsertStringBuilder@12
_PhInsertStringBuilderEx@16
_PhIntegerToString64@16
_PhInvokeCallback@8
_PhIsExecutablePacked@16
_PhIsMappedArchiveMemberShortFormat@4
_PhLayoutManagerLayout@4
_PhListenNamedPipe@20
_PhLoadListViewColumnSettings@8
_PhLoadMappedArchive@16
_PhLoadMappedImage@16
_PhLoadModuleSymbolProvider@20
_PhLoadResourceEMenuItem@16
_PhLocalTimeToSystemTime@8
_PhLockFileStream@20
_PhLockHandleTableEntry@8
_PhLog2@4
_PhLookupHandleTableEntry@8
_PhLookupName@16
_PhLookupPrivilegeDisplayName@8
_PhLookupPrivilegeName@8
_PhLookupPrivilegeValue@8
_PhLookupSid@16
_PhMapFlags1@16
_PhMapFlags2@16
_PhMapViewOfEntireFile@20
_PhMappedImageRvaToSection@8
_PhMappedImageRvaToVa@12
_PhMatchWildcards@12
_PhMaximumElementAvlTree@4
_PhMinimumElementAvlTree@4
_PhNtStatusFileNotFound@4
_PhNtStatusToDosError@4
_PhOpenDriverByBaseAddress@8
_PhOpenKey@20
_PhOpenLsaPolicy@12
_PhOpenProcess@12
_PhOpenProcessToken@12
_PhOpenService@8
_PhOpenThread@12
_PhOpenThreadProcess@12
_PhOpenThreadToken@16
_PhParseCommandLine@24
_PhParseCommandLineFuzzy@16
_PhParseCommandLinePart@8
_PhPeekNamedPipe@24
_PhPredecessorElementAvlTree@4
_PhPrintTimeSpan@16
_PhQueryInformationHandleTable@20
_PhQueryRegistryString@8
_PhQueryServiceVariableSize@8
_PhQuerySystemTime@4
_PhQueryTimeZoneBias@4
_PhQueueItemGlobalWorkQueue@8
_PhQueueItemWorkQueue@12
_PhReAllocate@8
_PhReAllocateSafe@8
_PhReadFileStream@16
_PhReadVirtualMemory@20
_PhReferenceEmptyString@0
_PhReferenceObject@4
_PhReferenceObjectEx@8
_PhReferenceObjectSafe@4
_PhReferenceObjects@8
_PhReferenceStringBuilderString@4
_PhRegisterCallback@16
_PhRegisterCallbackEx@20
_PhRegisterProvider@16
_PhRemoveAllEMenuItems@4