nativerd.dll

??0BUFFER@@QAE@XZ (Address: 0x100532cc)
??0CLKRHashTable_Iterator@@QAE@ABV0@@Z (Address: 0x1005333c)
??0CLKRHashTable@@QAE@PBDP6G?BKPBX@ZP6GKK@ZP6G_NKK@ZP6GX1H@ZNKK_N@Z (Address: 0x100532ec)
??0MULTISZ@@QAE@XZ (Address: 0x10053370)
??0STRA@@QAE@PADK@Z (Address: 0x10053294)
??0STRU@@QAE@PAGK@Z (Address: 0x100532c8)
??0STRU@@QAE@XZ (Address: 0x10053348)
??1BIG_REF_TRACE@@QAE@XZ (Address: 0x10053314)
??1BUFFER@@QAE@XZ (Address: 0x100532bc)
??1CLKRHashTable_Iterator@@QAE@XZ (Address: 0x10053334)
??1CLKRHashTable@@QAE@XZ (Address: 0x100532d8)
??1MULTISZ@@QAE@XZ (Address: 0x10053374)
??1STRA@@QAE@XZ (Address: 0x10053290)
??1STRU@@QAE@XZ (Address: 0x100532b8)
??9CLKRHashTable_Iterator@@QBE_NABV0@@Z (Address: 0x1005332c)
?Append@MULTISZ@@QAEHAAVSTRU@@@Z (Address: 0x10053278)
?Append@MULTISZ@@QAEHPBG@Z (Address: 0x10053350)
?Append@STRU@@QAEJABV1@@Z (Address: 0x1005336c)
?Append@STRU@@QAEJG@Z (Address: 0x10053280)
?Append@STRU@@QAEJPBG@Z (Address: 0x100532fc)
?Append@STRU@@QAEJPBGK@Z (Address: 0x10053298)
?Apply@CLKRHashTable@@QAEKP6G?AW4LK_ACTION@@PBXPAX@Z1W4LK_LOCKTYPE@@@Z (Address: 0x1005329c)
?Begin@CLKRHashTable@@QAE?AVCLKRHashTable_Iterator@@XZ (Address: 0x10053338)
?Clear@CLKRHashTable@@QAEXXZ (Address: 0x10053308)
?Copy@STRU@@QAEJABV1@@Z (Address: 0x10053368)
?Copy@STRU@@QAEJPBG@Z (Address: 0x100532dc)
?Copy@STRU@@QAEJPBGK@Z (Address: 0x100532f8)
?Copy@STRU@@QAEJPBV1@@Z (Address: 0x10053250)
?CopyA@STRU@@QAEJPBD@Z (Address: 0x10053260)
?CopyToBuffer@STRU@@QBEJPAGPAK@Z (Address: 0x100532b0)
?CopyW@STRA@@QAEJPBG@Z (Address: 0x1005325c)
?CopyWTruncate@STRA@@QAEJPBG@Z (Address: 0x10053274)
?DeleteIf@CLKRHashTable@@QAEKP6G?AW4LK_PREDICATE@@PBXPAX@Z1@Z (Address: 0x100532a0)
?DeleteKey@CLKRHashTable@@QAE?AW4LK_RETCODE@@K@Z (Address: 0x1005326c)
?DeleteRecord@CLKRHashTable@@QAE?AW4LK_RETCODE@@PBX@Z (Address: 0x10053284)
?End@CLKRHashTable@@QAE?AVCLKRHashTable_Iterator@@XZ (Address: 0x10053340)
?Equals@STRA@@QBE_NABV1@@Z (Address: 0x10053244)
?Equals@STRU@@QBE_NPBG@Z (Address: 0x100532ac)
?EqualsNoCase@STRU@@QBE_NABV1@@Z (Address: 0x100532d4)
?FindKey@CLKRHashTable@@QBE?AW4LK_RETCODE@@KPAPBX@Z (Address: 0x100532e0)
?FindString@MULTISZ@@QAEHPBG@Z (Address: 0x1005334c)
?FindStringNoCase@MULTISZ@@QAEHPBG@Z (Address: 0x100532a4)
?First@MULTISZ@@QBEPBGXZ (Address: 0x100532b4)
?Increment@CLKRHashTable_Iterator@@QAE_NXZ (Address: 0x10053330)
?InsertRecord@CLKRHashTable@@QAE?AW4LK_RETCODE@@PBX_N@Z (Address: 0x100532e8)
?ReadLock@CReaderWriterLock3@@QAEXXZ (Address: 0x10053354)
?ReadUnlock@CReaderWriterLock3@@QAEXXZ (Address: 0x10053358)
?Record@CLKRHashTable_Iterator@@QBEPBXXZ (Address: 0x10053328)
?Reset@MULTISZ@@QAEXXZ (Address: 0x100532a8)
?Resize@BUFFER@@QAE_NK@Z (Address: 0x100532d0)
?Resize@STRA@@QAEJK@Z (Address: 0x10053248)
?Resize@STRU@@QAEJK@Z (Address: 0x1005328c)
?SetLen@STRU@@QAE_NK@Z (Address: 0x10053364)
?Size@CLKRHashTable@@QBEKXZ (Address: 0x10053344)
?SyncWithBuffer@STRU@@QAEXXZ (Address: 0x10053288)
?Terminate@BIG_REF_TRACE@@QAEJXZ (Address: 0x1005330c)
?TraceCreate@BIG_REF_TRACE@@QAEJPAX@Z (Address: 0x10053324)
?TraceDelete@BIG_REF_TRACE@@QAEJPAX@Z (Address: 0x10053318)
?TraceDereference@BIG_REF_TRACE@@QAEJPAX@Z (Address: 0x1005331c)
?TraceReference@BIG_REF_TRACE@@QAEJPAX@Z (Address: 0x10053320)
?WriteLock@CReaderWriterLock3@@QAEXXZ (Address: 0x10053300)
?WriteLock@CSmallSpinLock@@QAEXXZ (Address: 0x10053264)
?WriteUnlock@CReaderWriterLock3@@QAEXXZ (Address: 0x10053304)
?WriteUnlock@CSmallSpinLock@@QAEXXZ (Address: 0x1005327c)
DestroyRefTraceLog (Address: 0x100532c4)
IsStringEqualOrdinalIgnoreCase (Address: 0x100532e4)
MakePathCanonicalizationProof (Address: 0x10053360)
MakePathCanonicalizationProofNt (Address: 0x10053254)
PuCreateDebugPrintsObject (Address: 0x100532f0)
PuDbgPrint (Address: 0x1005335c)
PuDbgPrintError (Address: 0x10053258)
PuDeleteDebugPrintsObject (Address: 0x10053310)
PuLoadDebugFlagsFromRegStr (Address: 0x100532f4)
SAFE_snwprintf (Address: 0x1005324c)
SplitCommaDelimitedString (Address: 0x10053378)
uudecode (Address: 0x10053270)
uuencode (Address: 0x10053268)
WriteRefTraceLog (Address: 0x100532c0)

KERNELBASE.dll

WTSGetServiceSessionId (Address: 0x10053000)

ktmw32.dll

CommitTransaction (Address: 0x10053380)
CreateTransaction (Address: 0x10053384)

msvcrt.dll

__dllonexit (Address: 0x100533c4)
_amsg_exit (Address: 0x100533b4)
_callnewh (Address: 0x100533ac)
_errno (Address: 0x100533f0)
_except_handler4_common (Address: 0x100533d0)
_i64tow_s (Address: 0x100533f8)
_initterm (Address: 0x100533b8)
_itow_s (Address: 0x10053414)
_lock (Address: 0x100533bc)
_onexit (Address: 0x100533cc)
_purecall (Address: 0x1005338c)
_ui64tow_s (Address: 0x100533f4)
_ultow (Address: 0x100533a4)
_ultow_s (Address: 0x100533ec)
_unlock (Address: 0x100533c0)
_vsnprintf (Address: 0x10053394)
_vsnwprintf (Address: 0x10053424)
_wcsdup (Address: 0x10053420)
_wcsicmp (Address: 0x100533dc)
_wcsnicmp (Address: 0x100533d4)
_wcstoi64 (Address: 0x10053408)
_wcstoui64 (Address: 0x1005340c)
_wcsupr (Address: 0x10053418)
_XcptFilter (Address: 0x100533b0)
free (Address: 0x1005341c)
iswdigit (Address: 0x100533e8)
iswspace (Address: 0x100533e4)
malloc (Address: 0x100533a8)
memcmp (Address: 0x10053410)
memcpy (Address: 0x10053404)
memcpy_s (Address: 0x100533a0)
memmove (Address: 0x100533e0)
memset (Address: 0x10053428)
wcschr (Address: 0x10053398)
wcsncmp (Address: 0x100533c8)
wcspbrk (Address: 0x1005339c)
wcsrchr (Address: 0x10053390)
wcsstr (Address: 0x100533d8)
wcstol (Address: 0x100533fc)
wcstoul (Address: 0x10053400)

ncrypt.dll

NCryptFreeObject (Address: 0x1005343c)
NCryptKeyDerivation (Address: 0x10053438)
NCryptOpenKey (Address: 0x10053434)
NCryptOpenStorageProvider (Address: 0x10053430)

ntdll.dll

EtwEventRegister (Address: 0x10053454)
EtwEventUnregister (Address: 0x10053444)
EtwEventWriteTransfer (Address: 0x10053448)
NtQueryFullAttributesFile (Address: 0x10053450)
RtlInitUnicodeString (Address: 0x1005344c)

XmlLite.dll

CreateXmlReader (Address: 0x10053008)
CreateXmlWriter (Address: 0x1005300c)
CreateXmlWriterOutputWithEncodingName (Address: 0x10053010)