ntvdm64.dll

Description: 16-bit Emulation on NT64

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: b7329749cc0f0978d9dba441b7a25575

File Size: 16.0 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 14

Exported Functions

  • DllInstall (Ordinal: 1, Address: 0x1cd0)
  • NtVdm64CreateProcessInternalW (Ordinal: 2, Address: 0x2900)
  • NtVdm64RaiseInvalid16BitError (Ordinal: 3, Address: 0x2a80)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10005010)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10005018)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10005028)
  • SetLastError (Address: 0x1000502c)
  • SetUnhandledExceptionFilter (Address: 0x10005020)
  • UnhandledExceptionFilter (Address: 0x10005024)
api-ms-win-core-file-l1-1-0.dll
  • GetFullPathNameW (Address: 0x10005034)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10005040)
  • HeapAlloc (Address: 0x1000503c)
  • HeapFree (Address: 0x10005044)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x1000504c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1000505c)
  • GetModuleHandleW (Address: 0x10005058)
  • LoadStringW (Address: 0x10005054)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x10005064)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x10005074)
  • GetEnvironmentVariableW (Address: 0x1000506c)
  • SearchPathW (Address: 0x10005078)
  • SetEnvironmentVariableW (Address: 0x10005070)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x10005080)
  • GetCurrentProcessId (Address: 0x1000508c)
  • GetCurrentThreadId (Address: 0x10005088)
  • TerminateProcess (Address: 0x10005084)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10005094)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1000509c)
  • RegQueryValueExW (Address: 0x100050a0)
  • RegSetValueExW (Address: 0x100050a4)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyW (Address: 0x100050b4)
  • RegEnumKeyW (Address: 0x100050ac)
  • RegOpenKeyW (Address: 0x100050b0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x100050bc)
  • GetSystemWindowsDirectoryW (Address: 0x100050c0)
  • GetTickCount (Address: 0x100050c4)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x100050cc)
  • GetFileVersionInfoSizeExW (Address: 0x100050d0)
  • VerQueryValueW (Address: 0x100050d4)
KERNELBASE.dll
  • CreateProcessInternalW (Address: 0x10005000)
ntdll.dll
  • _vsnwprintf (Address: 0x100050f8)
  • NtQueryInformationProcess (Address: 0x100050f4)
  • RtlAllocateHeap (Address: 0x100050dc)
  • RtlFreeHeap (Address: 0x100050e8)
  • RtlGetThreadErrorMode (Address: 0x100050f0)
  • RtlUnwind (Address: 0x100050e0)
  • wcschr (Address: 0x100050ec)
  • wcsncmp (Address: 0x100050e4)
VERSION.dll
  • VerQueryValueA (Address: 0x10005008)