{
  "path": "NVIDIA App\\NvCpl\\nvxdapix.dll",
  "sha256": "f051472a239f3392bc59c23f3962e4dabb0ee64affdf7fa4856ace209adace6d",
  "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof",
  "sections": [
    {
      "name": ".text",
      "raw_bytes": 5039616,
      "processed_bytes": 5039616,
      "instructions": 1318334,
      "skipdata_bytes": 33
    },
    {
      "name": ".orpc",
      "raw_bytes": 512,
      "processed_bytes": 512,
      "instructions": 149,
      "skipdata_bytes": 1
    }
  ],
  "utc": "2026-11-11T21:40:53.036859+00:00",
  "instructions": 1318483,
  "skipdata_bytes": 34,
  "calls": 127962,
  "api_reference_counts": {
    "USER32.dll!RegisterWindowMessageW": 6,
    "ADVAPI32.dll!InitializeSecurityDescriptor": 3,
    "ADVAPI32.dll!SetSecurityDescriptorDacl": 3,
    "KERNEL32.dll!GetSystemInfo": 4,
    "KERNEL32.dll!GetProcAddress": 122,
    "USER32.dll!BroadcastSystemMessageW": 1,
    "KERNEL32.dll!ResetEvent": 14,
    "KERNEL32.dll!SetEvent": 31,
    "KERNEL32.dll!TerminateProcess": 7,
    "KERNEL32.dll!CloseHandle": 130,
    "ADVAPI32.dll!RegEnumValueW": 1,
    "USER32.dll!GetAsyncKeyState": 1,
    "KERNEL32.dll!HeapAlloc": 15,
    "KERNEL32.dll!HeapFree": 44,
    "KERNEL32.dll!HeapReAlloc": 2,
    "KERNEL32.dll!HeapSize": 2,
    "KERNEL32.dll!HeapDestroy": 2,
    "KERNEL32.dll!GetProcessHeap": 56,
    "ADVAPI32.dll!RegQueryValueExW": 197,
    "ADVAPI32.dll!RegCloseKey": 325,
    "SETUPAPI.dll!SetupDiGetDeviceInfoListDetailW": 1,
    "SETUPAPI.dll!CM_Get_Device_ID_ExW": 1,
    "SETUPAPI.dll!CM_Get_DevNode_Status_Ex": 1,
    "SETUPAPI.dll!SetupDiSetClassInstallParamsW": 3,
    "SETUPAPI.dll!SetupDiCallClassInstaller": 3,
    "KERNEL32.dll!GetLastError": 195,
    "SETUPAPI.dll!SetupDiChangeState": 1,
    "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 2,
    "SETUPAPI.dll!SetupDiGetClassDevsW": 8,
    "SETUPAPI.dll!SetupDiEnumDeviceInfo": 12,
    "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 11,
    "KERNEL32.dll!LocalFree": 55,
    "KERNEL32.dll!LocalAlloc": 25,
    "KERNEL32.dll!Sleep": 33,
    "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 8,
    "SETUPAPI.dll!SetupDiOpenDevRegKey": 2,
    "SETUPAPI.dll!CM_Reenumerate_DevNode": 1,
    "SHELL32.dll!SHGetKnownFolderPath": 2,
    "ole32.dll!CoTaskMemFree": 9,
    "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 5,
    "SHLWAPI.dll!StrStrIW": 4,
    "KERNEL32.dll!lstrcmpiW": 14,
    "KERNEL32.dll!OpenEventW": 25,
    "KERNEL32.dll!WaitForMultipleObjects": 8,
    "SHELL32.dll!SHGetSpecialFolderPathW": 2,
    "KERNEL32.dll!GetSystemDirectoryW": 9,
    "SHLWAPI.dll!PathCombineW": 4,
    "ole32.dll!CoCreateGuid": 107,
    "ADVAPI32.dll!RegOpenCurrentUser": 3,
    "ADVAPI32.dll!RegSetValueExW": 104,
    "ADVAPI32.dll!RegOpenKeyExW": 29,
    "KERNEL32.dll!OutputDebugStringW": 3,
    "KERNEL32.dll!ExpandEnvironmentStringsW": 3,
    "KERNEL32.dll!GetFileSizeEx": 3,
    "KERNEL32.dll!CreateFileW": 16,
    "KERNEL32.dll!WideCharToMultiByte": 10,
    "KERNEL32.dll!WriteFile": 9,
    "KERNEL32.dll!WaitForSingleObject": 19,
    "KERNEL32.dll!ReleaseMutex": 4,
    "KERNEL32.dll!GetModuleFileNameW": 6,
    "SHLWAPI.dll!PathFindFileNameW": 1,
    "KERNEL32.dll!CreateMutexW": 3,
    "KERNEL32.dll!CreateEventA": 6,
    "KERNEL32.dll!WaitForSingleObjectEx": 4,
    "KERNEL32.dll!GetCurrentThreadId": 7,
    "KERNEL32.dll!FormatMessageA": 1,
    "KERNEL32.dll!FormatMessageW": 4,
    "ADVAPI32.dll!TraceMessage": 1,
    "KERNEL32.dll!GetCurrentProcess": 7,
    "KERNEL32.dll!GetProcessTimes": 2,
    "KERNEL32.dll!GetSystemTimeAsFileTime": 4,
    "KERNEL32.dll!QueryPerformanceFrequency": 6,
    "KERNEL32.dll!QueryPerformanceCounter": 10,
    "ADVAPI32.dll!RegCreateKeyExW": 13,
    "USER32.dll!GetThreadDesktop": 2,
    "USER32.dll!OpenInputDesktop": 2,
    "USER32.dll!SetThreadDesktop": 3,
    "USER32.dll!CloseDesktop": 3,
    "USER32.dll!GetUserObjectInformationW": 2,
    "KERNEL32.dll!VerSetConditionMask": 8,
    "KERNEL32.dll!VerifyVersionInfoW": 4,
    "OLEAUT32.dll!SysAllocString": 2,
    "OLEAUT32.dll!SysFreeString": 2,
    "KERNEL32.dll!GetVersionExW": 2,
    "ole32.dll!CoCreateInstance": 5,
    "ole32.dll!CoSetProxyBlanket": 1,
    "OLEAUT32.dll!VariantClear": 1,
    "KERNEL32.dll!FindResourceExW": 4,
    "KERNEL32.dll!FindResourceW": 2,
    "KERNEL32.dll!LoadResource": 4,
    "KERNEL32.dll!LockResource": 3,
    "KERNEL32.dll!SizeofResource": 2,
    "KERNEL32.dll!GetCurrentProcessId": 8,
    "KERNEL32.dll!ProcessIdToSessionId": 6,
    "WTSAPI32.dll!WTSEnumerateSessionsW": 3,
    "WTSAPI32.dll!WTSFreeMemory": 3,
    "WTSAPI32.dll!WTSQueryUserToken": 4,
    "ADVAPI32.dll!DuplicateTokenEx": 2,
    "ADVAPI32.dll!ImpersonateLoggedOnUser": 3,
    "ADVAPI32.dll!RevertToSelf": 4,
    "ADVAPI32.dll!QueryServiceConfigW": 2,
    "KERNEL32.dll!WTSGetActiveConsoleSessionId": 4,
    "USER32.dll!GetSystemMetrics": 4,
    "USERENV.dll!CreateEnvironmentBlock": 1,
    "USERENV.dll!DestroyEnvironmentBlock": 1,
    "KERNEL32.dll!GetSystemDefaultLCID": 2,
    "KERNEL32.dll!GetUserDefaultUILanguage": 2,
    "KERNEL32.dll!FreeResource": 2,
    "KERNEL32.dll!FreeLibrary": 31,
    "KERNEL32.dll!InitializeCriticalSectionEx": 4,
    "KERNEL32.dll!DeleteCriticalSection": 11,
    "KERNEL32.dll!DecodePointer": 3,
    "RstrtMgr.DLL!RmStartSession": 1,
    "RstrtMgr.DLL!RmRegisterResources": 1,
    "RstrtMgr.DLL!RmGetList": 1,
    "RstrtMgr.DLL!RmEndSession": 2,
    "KERNEL32.dll!OpenProcess": 7,
    "KERNEL32.dll!CompareFileTime": 1,
    "KERNEL32.dll!QueryFullProcessImageNameA": 3,
    "PSAPI.DLL!EnumProcessModulesEx": 2,
    "PSAPI.DLL!GetModuleFileNameExW": 3,
    "PSAPI.DLL!EnumProcesses": 2,
    "KERNEL32.dll!GetModuleHandleW": 15,
    "USER32.dll!wsprintfW": 3,
    "ADVAPI32.dll!CloseServiceHandle": 1,
    "ADVAPI32.dll!OpenServiceW": 1,
    "ADVAPI32.dll!StartServiceW": 1,
    "ADVAPI32.dll!ControlService": 1,
    "KERNEL32.dll!GetTickCount": 2,
    "ADVAPI32.dll!QueryServiceStatusEx": 1,
    "ADVAPI32.dll!OpenSCManagerW": 1,
    "ADVAPI32.dll!RegDeleteValueW": 18,
    "KERNEL32.dll!DeleteTimerQueueTimer": 2,
    "KERNEL32.dll!CreateTimerQueueTimer": 1,
    "KERNEL32.dll!GetSystemPowerStatus": 3,
    "USER32.dll!FindWindowA": 1,
    "USER32.dll!PostMessageW": 1,
    "KERNEL32.dll!WaitForMultipleObjectsEx": 2,
    "KERNEL32.dll!ReleaseSemaphore": 11,
    "KERNEL32.dll!OpenEventA": 2,
    "NvUI.dll!ShowACETrayIcon": 1,
    "NvUI.dll!HideACETrayIcon": 1,
    "NvUI.dll!StartNotificationIcon": 1,
    "NvUI.dll!StartACETrayIcon": 3,
    "NvUI.dll!StopXGpuTrayIcon": 2,
    "NvUI.dll!StartOptimusXGpuTrayIcon": 1,
    "NvUI.dll!StartOptimusXGpuTrayIconUI": 1,
    "dwmapi.dll!DwmIsCompositionEnabled": 3,
    "ole32.dll!CoInitializeEx": 2,
    "ole32.dll!CoUninitialize": 6,
    "NvUI.dll!NvUiNvapiInit": 1,
    "ADVAPI32.dll!RegEnumKeyExW": 3,
    "KERNEL32.dll!CreateEventW": 14,
    "KERNEL32.dll!QueryActCtxW": 1,
    "KERNEL32.dll!GetModuleHandleExW": 3,
    "KERNEL32.dll!SetLastError": 44,
    "KERNEL32.dll!CreateActCtxW": 1,
    "KERNEL32.dll!ActivateActCtx": 2,
    "KERNEL32.dll!FindActCtxSectionStringW": 1,
    "KERNEL32.dll!LoadLibraryW": 2,
    "KERNEL32.dll!DeactivateActCtx": 4,
    "KERNEL32.dll!OutputDebugStringA": 1,
    "KERNEL32.dll!InitOnceBeginInitialize": 1,
    "KERNEL32.dll!InitOnceComplete": 2,
    "NvUI.dll!StopDx11SampleApp": 1,
    "NvUI.dll!UpdateTrayIconEx": 1,
    "NvUI.dll!StopNotificationIcon": 1,
    "USER32.dll!DisplayConfigSetDeviceInfo": 8,
    "USER32.dll!DisplayConfigGetDeviceInfo": 13,
    "USER32.dll!SetDisplayConfig": 16,
    "NvUI.dll!ACEShowBalloonVariadic": 3,
    "USER32.dll!EnumDisplaySettingsW": 3,
    "USER32.dll!ChangeDisplaySettingsExW": 3,
    "NvUI.dll!StartDx11SampleApp": 1,
    "SHLWAPI.dll!SHDeleteKeyW": 5,
    "KERNEL32.dll!MulDiv": 3,
    "USER32.dll!EnumDisplayDevicesW": 7,
    "dwmapi.dll!#102": 3,
    "KERNEL32.dll!CreateToolhelp32Snapshot": 1,
    "KERNEL32.dll!Process32FirstW": 1,
    "KERNEL32.dll!Process32NextW": 1,
    "GDI32.dll!CreateDCW": 3,
    "GDI32.dll!GetDeviceGammaRamp": 1,
    "GDI32.dll!DeleteDC": 3,
    "GDI32.dll!SetDeviceGammaRamp": 1,
    "GDI32.dll!GetICMProfileW": 1,
    "KERNEL32.dll!GetFileTime": 1,
    "KERNEL32.dll!FileTimeToSystemTime": 1,
    "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsDeleteString": 3,
    "api-ms-win-core-winrt-l1-1-0.dll!RoUninitialize": 2,
    "NvUI.dll!ShowBalloonVariadic": 4,
    "USER32.dll!SystemParametersInfoW": 1,
    "KERNEL32.dll!GetLocaleInfoW": 12,
    "KERNEL32.dll!lstrlenW": 1,
    "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsGetStringRawBuffer": 5,
    "NTDSAPI.dll!DsGetRdnW": 1,
    "SHLWAPI.dll!#487": 1,
    "api-ms-win-core-winrt-l1-1-0.dll!RoInitialize": 1,
    "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsCreateString": 1,
    "api-ms-win-core-winrt-l1-1-0.dll!RoGetActivationFactory": 1,
    "ADVAPI32.dll!OpenProcessToken": 2,
    "ADVAPI32.dll!LookupPrivilegeValueW": 2,
    "ADVAPI32.dll!AdjustTokenPrivileges": 2,
    "USER32.dll!ExitWindowsEx": 2,
    "SETUPAPI.dll!CM_Get_DevNode_Status": 2,
    "KERNEL32.dll!GetFirmwareEnvironmentVariableExW": 2,
    "KERNEL32.dll!GlobalMemoryStatusEx": 1,
    "KERNEL32.dll!GetPhysicallyInstalledSystemMemory": 1,
    "KERNEL32.dll!SetFirmwareEnvironmentVariableExW": 1,
    "ADVAPI32.dll!RegNotifyChangeKeyValue": 4,
    "NvSmartMax64.dll!NvSmartMaxEntryPoint": 3,
    "NvSmartMax64.dll!NVSetHooks": 3,
    "NvSmartMax64.dll!NvSmartMaxSetMaximized": 1,
    "NvSmartMax64.dll!NvSmartMaxSetTaskbarRect": 1,
    "USER32.dll!InflateRect": 1,
    "NvSmartMax64.dll!NvSmartMaxSetDeviceGrids": 1,
    "NvSmartMax64.dll!NvSmartMaxGetTaskbarRect": 1,
    "USER32.dll!FindWindowW": 1,
    "SHELL32.dll!SHAppBarMessage": 1,
    "KERNEL32.dll!SetThreadExecutionState": 1,
    "KERNEL32.dll!GetLocalTime": 1,
    "KERNEL32.dll!GetFileAttributesW": 9,
    "VERSION.dll!GetFileVersionInfoSizeW": 1,
    "VERSION.dll!GetFileVersionInfoW": 1,
    "VERSION.dll!VerQueryValueW": 1,
    "NvUI.dll!ShowPowerNotification": 2,
    "NvUI.dll!ShowVideoBridgeNotification": 1,
    "NvUI.dll!DisplayTooltipWithoutExecuteW": 1,
    "NvUI.dll!DisplayTooltipWithExecuteW": 1,
    "KERNEL32.dll!SetWaitableTimer": 3,
    "KERNEL32.dll!CreateWaitableTimerW": 1,
    "NvUI.dll!ShowBalloon": 1,
    "NvSmartMax64.dll!NvIsNvSmartMaxEnabled": 1,
    "NvSmartMax64.dll!NVUnHook": 1,
    "NvSmartMax64.dll!NvSmartMaxShutdown": 1,
    "NvUI.dll!ShowBalloonVer5": 3,
    "USER32.dll!OpenDesktopW": 1,
    "USER32.dll!GetCursorPos": 1,
    "USER32.dll!PtInRect": 1,
    "NvUI.dll!ShowSLIBlockingAppsDlg": 2,
    "KERNEL32.dll!FindFirstFileW": 1,
    "USER32.dll!GetWindowLongW": 1,
    "USER32.dll!GetWindowRect": 1,
    "USER32.dll!FindWindowExW": 1,
    "USER32.dll!GetClassNameW": 2,
    "USER32.dll!GetWindowTextW": 2,
    "USER32.dll!GetWindowThreadProcessId": 1,
    "USER32.dll!GetDesktopWindow": 1,
    "USER32.dll!GetShellWindow": 1,
    "USER32.dll!IsWindow": 1,
    "NvUI.dll!ShowSurroundNotification": 1,
    "NvUI.dll!?ShowBalloon@NotificationIcon@UI@UXDriver@Nvidia@@SA_NIIIPEB_W000@Z": 3,
    "KERNEL32.dll!GetShortPathNameW": 2,
    "KERNEL32.dll!GetSystemWow64DirectoryW": 1,
    "NvSmartMax64.dll!NvSmartMaxGetTaskbarDisplayIndex": 1,
    "KERNEL32.dll!lstrcmpW": 1,
    "NvUI.dll!?ShowThemedMessageWindow@NotificationIcon@UI@UXDriver@Nvidia@@SA_NIIKPEAUHICON__@@PEB_W@Z": 3,
    "SHLWAPI.dll!PathRemoveFileSpecW": 1,
    "SHLWAPI.dll!PathFileExistsW": 1,
    "KERNEL32.dll!DeleteFileW": 4,
    "ADVAPI32.dll!GetUserNameW": 3,
    "SETUPAPI.dll!CM_Get_Parent": 3,
    "CFGMGR32.dll!CM_Get_DevNode_PropertyW": 2,
    "SHLWAPI.dll!StrStrW": 1,
    "SETUPAPI.dll!SetupDiGetDevicePropertyW": 3,
    "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 2,
    "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 1,
    "USER32.dll!GetDisplayConfigBufferSizes": 1,
    "USER32.dll!QueryDisplayConfig": 1,
    "KERNEL32.dll!FlushFileBuffers": 4,
    "KERNEL32.dll!DisconnectNamedPipe": 3,
    "KERNEL32.dll!WaitNamedPipeW": 1,
    "KERNEL32.dll!SetNamedPipeHandleState": 1,
    "ADVAPI32.dll!AllocateAndInitializeSid": 4,
    "ADVAPI32.dll!SetEntriesInAclW": 1,
    "ADVAPI32.dll!FreeSid": 4,
    "KERNEL32.dll!ReadFile": 5,
    "KERNEL32.dll!CreateNamedPipeW": 1,
    "KERNEL32.dll!ConnectNamedPipe": 1,
    "KERNEL32.dll!CreateThread": 3,
    "ole32.dll!CoTaskMemAlloc": 6,
    "ole32.dll!CoTaskMemRealloc": 4,
    "ole32.dll!StringFromGUID2": 3,
    "KERNEL32.dll!LoadLibraryExW": 15,
    "KERNEL32.dll!DeviceIoControl": 6,
    "SETUPAPI.dll!CM_Get_Device_ID_Size": 3,
    "SETUPAPI.dll!CM_Get_Device_IDW": 2,
    "KERNEL32.dll!CreateSemaphoreA": 1,
    "RPCRT4.dll!NdrDllGetClassObject": 1,
    "RPCRT4.dll!NdrDllCanUnloadNow": 1,
    "RPCRT4.dll!NdrDllRegisterProxy": 1,
    "RPCRT4.dll!NdrDllUnregisterProxy": 1,
    "ADVAPI32.dll!UnregisterTraceGuids": 1,
    "ADVAPI32.dll!RegisterTraceGuidsW": 1,
    "ADVAPI32.dll!GetTraceLoggerHandle": 1,
    "ADVAPI32.dll!GetTraceEnableLevel": 1,
    "ADVAPI32.dll!GetTraceEnableFlags": 1,
    "KERNEL32.dll!RaiseException": 8,
    "KERNEL32.dll!TerminateThread": 1,
    "KERNEL32.dll!GetThreadId": 1,
    "USER32.dll!PostThreadMessageW": 3,
    "USER32.dll!SendMessageW": 1,
    "USER32.dll!GetMessageW": 1,
    "USER32.dll!TranslateMessage": 1,
    "USER32.dll!DispatchMessageW": 2,
    "USER32.dll!DefWindowProcW": 1,
    "USER32.dll!RegisterPowerSettingNotification": 5,
    "USER32.dll!RegisterSuspendResumeNotification": 1,
    "USER32.dll!RegisterDeviceNotificationW": 1,
    "USER32.dll!SetWinEventHook": 1,
    "USER32.dll!UnhookWinEvent": 1,
    "USER32.dll!UnregisterPowerSettingNotification": 1,
    "USER32.dll!UnregisterSuspendResumeNotification": 1,
    "USER32.dll!UnregisterDeviceNotification": 1,
    "USER32.dll!CreateWindowExW": 1,
    "USER32.dll!RegisterClassExW": 1,
    "USER32.dll!UnregisterHotKey": 1,
    "USER32.dll!RegisterHotKey": 1,
    "KERNEL32.dll!DuplicateHandle": 1,
    "USER32.dll!CharNextW": 20,
    "OLEAUT32.dll!VarUI4FromStr": 1,
    "ADVAPI32.dll!RegDeleteKeyW": 2,
    "ADVAPI32.dll!RegQueryInfoKeyW": 3,
    "KERNEL32.dll!EnterCriticalSection": 16,
    "KERNEL32.dll!MultiByteToWideChar": 11,
    "KERNEL32.dll!LeaveCriticalSection": 14,
    "KERNEL32.dll!EncodePointer": 4,
    "OLEAUT32.dll!LoadTypeLib": 2,
    "KERNEL32.dll!GetThreadLocale": 2,
    "KERNEL32.dll!SetThreadLocale": 4,
    "OLEAUT32.dll!SysStringLen": 1,
    "USER32.dll!MsgWaitForMultipleObjects": 3,
    "ole32.dll!CoInitialize": 3,
    "KERNEL32.dll!GetCurrentThread": 1,
    "KERNEL32.dll!OpenMutexW": 1,
    "USER32.dll!PeekMessageW": 1,
    "KERNEL32.dll!GetFullPathNameW": 2,
    "KERNEL32.dll!GetModuleFileNameA": 1,
    "KERNEL32.dll!CreateProcessW": 1,
    "KERNEL32.dll!InitializeCriticalSection": 1,
    "RPCRT4.dll!IUnknown_QueryInterface_Proxy": 1,
    "RPCRT4.dll!IUnknown_AddRef_Proxy": 1,
    "RPCRT4.dll!IUnknown_Release_Proxy": 1,
    "RPCRT4.dll!NdrOleAllocate": 1,
    "RPCRT4.dll!NdrOleFree": 1,
    "RPCRT4.dll!CStdStubBuffer_QueryInterface": 1,
    "RPCRT4.dll!CStdStubBuffer_AddRef": 1,
    "RPCRT4.dll!CStdStubBuffer_Connect": 1,
    "RPCRT4.dll!CStdStubBuffer_Disconnect": 1,
    "RPCRT4.dll!CStdStubBuffer_Invoke": 1,
    "RPCRT4.dll!CStdStubBuffer_IsIIDSupported": 1,
    "RPCRT4.dll!CStdStubBuffer_CountRefs": 1,
    "RPCRT4.dll!CStdStubBuffer_DebugServerQueryInterface": 1,
    "RPCRT4.dll!CStdStubBuffer_DebugServerRelease": 1,
    "RPCRT4.dll!NdrCStdStubBuffer_Release": 1,
    "WTSAPI32.dll!WTSRegisterSessionNotification": 1,
    "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1,
    "KERNEL32.dll!VirtualQuery": 2,
    "KERNEL32.dll!VirtualProtect": 2,
    "KERNEL32.dll!LoadLibraryExA": 1,
    "KERNEL32.dll!IsDebuggerPresent": 3,
    "KERNEL32.dll!TlsFree": 3,
    "KERNEL32.dll!TlsAlloc": 3,
    "KERNEL32.dll!TlsGetValue": 3,
    "KERNEL32.dll!CreateWaitableTimerA": 1,
    "KERNEL32.dll!GetModuleHandleA": 1,
    "KERNEL32.dll!TlsSetValue": 3,
    "KERNEL32.dll!ResumeThread": 1,
    "KERNEL32.dll!GetStringTypeW": 4,
    "KERNEL32.dll!ReleaseSRWLockExclusive": 4,
    "KERNEL32.dll!AcquireSRWLockExclusive": 5,
    "KERNEL32.dll!TryAcquireSRWLockExclusive": 2,
    "KERNEL32.dll!RtlPcToFileHeader": 4,
    "KERNEL32.dll!LCMapStringEx": 4,
    "KERNEL32.dll!WakeAllConditionVariable": 3,
    "KERNEL32.dll!CompareStringEx": 2,
    "KERNEL32.dll!GetCPInfo": 5,
    "KERNEL32.dll!GetLocaleInfoEx": 1,
    "KERNEL32.dll!CreateDirectoryExW": 1,
    "KERNEL32.dll!CreateDirectoryW": 1,
    "KERNEL32.dll!GetFileInformationByHandle": 2,
    "KERNEL32.dll!SetFileAttributesW": 2,
    "KERNEL32.dll!RemoveDirectoryW": 1,
    "KERNEL32.dll!MoveFileExW": 1,
    "KERNEL32.dll!AreFileApisANSI": 2,
    "KERNEL32.dll!SleepConditionVariableSRW": 1,
    "KERNEL32.dll!InitializeSListHead": 1,
    "KERNEL32.dll!SetUnhandledExceptionFilter": 3,
    "KERNEL32.dll!UnhandledExceptionFilter": 3,
    "KERNEL32.dll!IsProcessorFeaturePresent": 5,
    "KERNEL32.dll!RtlCaptureContext": 4,
    "KERNEL32.dll!RtlLookupFunctionEntry": 5,
    "KERNEL32.dll!RtlVirtualUnwind": 4,
    "KERNEL32.dll!RtlUnwindEx": 3,
    "KERNEL32.dll!InterlockedFlushSList": 1,
    "KERNEL32.dll!InterlockedPushEntrySList": 1,
    "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2,
    "KERNEL32.dll!VirtualAlloc": 1,
    "KERNEL32.dll!ExitThread": 2,
    "KERNEL32.dll!FreeLibraryAndExitThread": 1,
    "KERNEL32.dll!ExitProcess": 1,
    "KERNEL32.dll!GetStartupInfoW": 1,
    "KERNEL32.dll!GetFileType": 3,
    "KERNEL32.dll!GetStdHandle": 1,
    "KERNEL32.dll!GetTimeZoneInformation": 1,
    "KERNEL32.dll!EnumSystemLocalesW": 4,
    "KERNEL32.dll!CompareStringW": 1,
    "KERNEL32.dll!GetDateFormatW": 1,
    "KERNEL32.dll!GetTimeFormatW": 1,
    "KERNEL32.dll!GetUserDefaultLCID": 2,
    "KERNEL32.dll!IsValidLocale": 2,
    "KERNEL32.dll!LCMapStringW": 1,
    "KERNEL32.dll!GetConsoleCP": 1,
    "KERNEL32.dll!GetConsoleMode": 2,
    "KERNEL32.dll!SetFilePointerEx": 2,
    "KERNEL32.dll!ReadConsoleW": 1,
    "KERNEL32.dll!FindFirstFileExW": 1,
    "KERNEL32.dll!FindNextFileW": 1,
    "KERNEL32.dll!FindClose": 1,
    "KERNEL32.dll!GetOEMCP": 1,
    "KERNEL32.dll!GetACP": 3,
    "KERNEL32.dll!IsValidCodePage": 3,
    "KERNEL32.dll!GetCommandLineA": 1,
    "KERNEL32.dll!GetCommandLineW": 1,
    "KERNEL32.dll!GetEnvironmentStringsW": 1,
    "KERNEL32.dll!FreeEnvironmentStringsW": 1,
    "KERNEL32.dll!SetStdHandle": 2,
    "KERNEL32.dll!SetEnvironmentVariableW": 1,
    "KERNEL32.dll!WriteConsoleW": 2,
    "KERNEL32.dll!SetEndOfFile": 1,
    "KERNEL32.dll!RtlUnwind": 1
  },
  "complete_linear_sweep": true
}