FirewallAPI.dll
Description: Windows Defender Firewall API
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6328
Architecture: 64-bit
Operating System: Windows NT
SHA256: a0de106ec8da6fda2fc05abd3c3c7fcc
File Size: 581.5 KB
Uploaded At: Dec. 1, 2025, 7:28 a.m.
Views: 12
Exported Functions
- FwBstrToInterfaceTypes (Ordinal: 1, Address: 0x193d0)
- FwBstrToPorts (Ordinal: 2, Address: 0x19500)
- FwGetCurrentProfile (Ordinal: 3, Address: 0x1c740)
- FwGetVersionField (Ordinal: 4, Address: 0x19800)
- FwInterfaceTypesToBstr (Ordinal: 5, Address: 0x19e60)
- GetDisabledInterfaces (Ordinal: 6, Address: 0x1c810)
- NetworkIsolationFreeAppContainers (Ordinal: 7, Address: 0x8820)
- DllCanUnloadNow (Ordinal: 8, Address: 0x2350)
- DllGetClassObject (Ordinal: 9, Address: 0x7d40)
- DllRegisterServer (Ordinal: 10, Address: 0x17d70)
- DllUnregisterServer (Ordinal: 11, Address: 0x17dd0)
- FWAddAuthenticationSet (Ordinal: 12, Address: 0x3f200)
- FWAddConnectionSecurityRule (Ordinal: 13, Address: 0x3f3e0)
- FWAddCryptoSet (Ordinal: 14, Address: 0x3f5b0)
- FWAddDynamicKeywordAddress0 (Ordinal: 15, Address: 0xbff0)
- FWAddDynamicKeywordAddress_Int (Ordinal: 16, Address: 0xc0b0)
- FWAddFirewallRule (Ordinal: 17, Address: 0x3f750)
- FWAddFirewallRuleWithRemoteDynamicKeywordAddresses (Ordinal: 18, Address: 0xc230)
- FWAddMainModeRule (Ordinal: 19, Address: 0x3f9d0)
- FWAddSecurityRealm (Ordinal: 20, Address: 0x3fb50)
- FWChangeNotificationCreate (Ordinal: 21, Address: 0x7e70)
- FWChangeNotificationDestroy (Ordinal: 22, Address: 0x1e180)
- FWChangeTransactionalState (Ordinal: 23, Address: 0x3fda0)
- FWClosePolicyStore (Ordinal: 24, Address: 0x40b0)
- FWCopyAuthenticationSet (Ordinal: 25, Address: 0x3ff80)
- FWCopyConnectionSecurityRule (Ordinal: 26, Address: 0x3ffe0)
- FWCopyCryptoSet (Ordinal: 27, Address: 0x40040)
- FWCopyDynamicKeywordRuleLink (Ordinal: 28, Address: 0xc5a0)
- FWCopyFirewallRule (Ordinal: 29, Address: 0x400a0)
- FWDeleteAllAuthenticationSets (Ordinal: 30, Address: 0x40100)
- FWDeleteAllConnectionSecurityRules (Ordinal: 31, Address: 0x40230)
- FWDeleteAllCryptoSets (Ordinal: 32, Address: 0x40360)
- FWDeleteAllFirewallRules (Ordinal: 33, Address: 0x40490)
- FWDeleteAllMainModeRules (Ordinal: 34, Address: 0x405c0)
- FWDeleteAuthenticationSet (Ordinal: 35, Address: 0x406f0)
- FWDeleteConnectionSecurityRule (Ordinal: 36, Address: 0x40820)
- FWDeleteCryptoSet (Ordinal: 37, Address: 0x40950)
- FWDeleteDynamicKeywordAddress0 (Ordinal: 38, Address: 0xc5c0)
- FWDeleteDynamicKeywordAddress_Int (Ordinal: 39, Address: 0xc690)
- FWDeleteFirewallRule (Ordinal: 40, Address: 0x40a80)
- FWDeleteMainModeRule (Ordinal: 41, Address: 0x40bb0)
- FWDeletePhase1SAs (Ordinal: 42, Address: 0x40ce0)
- FWDeletePhase2SAs (Ordinal: 43, Address: 0x40df0)
- FWDeleteSecurityRealm (Ordinal: 44, Address: 0x40f00)
- FWDiagGetAppList (Ordinal: 45, Address: 0x40f30)
- FWEnumAdapters (Ordinal: 46, Address: 0x41030)
- FWEnumAuthenticationSets (Ordinal: 47, Address: 0x41140)
- FWEnumConnectionSecurityRules (Ordinal: 48, Address: 0x41330)
- FWEnumCryptoSets (Ordinal: 49, Address: 0x41520)
- FWEnumDynamicKeywordAddressById0 (Ordinal: 50, Address: 0xc7d0)
- FWEnumDynamicKeywordAddressesByType0 (Ordinal: 51, Address: 0xc8b0)
- FWEnumDynamicKeywordAddresses_Int (Ordinal: 52, Address: 0xc990)
- FWEnumDynamicKeywordRuleLinkById (Ordinal: 53, Address: 0xcb80)
- FWEnumDynamicKeywordRuleLinksByStore (Ordinal: 54, Address: 0xcb90)
- FWEnumFirewallRules (Ordinal: 55, Address: 0x416e0)
- FWEnumMainModeRules (Ordinal: 56, Address: 0x41970)
- FWEnumNetworks (Ordinal: 57, Address: 0x41b10)
- FWEnumPhase1SAs (Ordinal: 58, Address: 0x41c20)
- FWEnumPhase2SAs (Ordinal: 59, Address: 0x41d50)
- FWEnumProducts (Ordinal: 60, Address: 0x41e80)
- FWExportPolicy (Ordinal: 61, Address: 0x41f90)
- FWFreeAdapters (Ordinal: 62, Address: 0x8820)
- FWFreeAuthenticationSet (Ordinal: 63, Address: 0x42130)
- FWFreeAuthenticationSets (Ordinal: 64, Address: 0x42150)
- FWFreeAuthenticationSetsByHandle (Ordinal: 65, Address: 0x42210)
- FWFreeConnectionSecurityRule (Ordinal: 66, Address: 0x42300)
- FWFreeConnectionSecurityRules (Ordinal: 67, Address: 0x42320)
- FWFreeConnectionSecurityRulesByHandle (Ordinal: 68, Address: 0x423f0)
- FWFreeCryptoSet (Ordinal: 69, Address: 0x424e0)
- FWFreeCryptoSets (Ordinal: 70, Address: 0x42500)
- FWFreeCryptoSetsByHandle (Ordinal: 71, Address: 0x425d0)
- FWFreeDiagAppList (Ordinal: 72, Address: 0x8820)
- FWFreeDynamicKeywordAddressData0 (Ordinal: 73, Address: 0xcba0)
- FWFreeDynamicKeywordRuleLinks (Ordinal: 74, Address: 0xcc00)
- FWFreeFirewallRule (Ordinal: 75, Address: 0x426f0)
- FWFreeFirewallRules (Ordinal: 76, Address: 0x42710)
- FWFreeFirewallRulesByHandle (Ordinal: 77, Address: 0x427d0)
- FWFreeFirewallRulesOld (Ordinal: 78, Address: 0x428c0)
- FWFreeMainModeRule (Ordinal: 79, Address: 0x42990)
- FWFreeMainModeRules (Ordinal: 80, Address: 0x429b0)
- FWFreeMainModeRulesByHandle (Ordinal: 81, Address: 0x42a80)
- FWFreeNetworks (Ordinal: 82, Address: 0x8820)
- FWFreePhase1SAs (Ordinal: 83, Address: 0x42b70)
- FWFreePhase2SAs (Ordinal: 84, Address: 0x42c70)
- FWFreeProducts (Ordinal: 85, Address: 0x8820)
- FWGetConfig (Ordinal: 86, Address: 0x38a0)
- FWGetConfig2 (Ordinal: 87, Address: 0x42d40)
- FWGetGlobalConfig (Ordinal: 88, Address: 0x2570)
- FWGetGlobalConfig2 (Ordinal: 89, Address: 0xcc20)
- FWGetGlobalConfig3 (Ordinal: 90, Address: 0x42e90)
- FWGetIndicatedPortInUse (Ordinal: 91, Address: 0x8e10)
- FWImportPolicy (Ordinal: 92, Address: 0x42ff0)
- FWIndicatePortInUse (Ordinal: 93, Address: 0x8840)
- FWIndicateProxyForUrl (Ordinal: 94, Address: 0x43190)
- FWIndicateProxyResolverRefresh (Ordinal: 95, Address: 0x43310)
- FWIndicateTupleInUse (Ordinal: 96, Address: 0x43320)
- FWIndicateTupleInUse2 (Ordinal: 97, Address: 0x43510)
- FWIsTargetAProxy (Ordinal: 98, Address: 0x43700)
- FWOpenPolicyStore (Ordinal: 99, Address: 0x4f30)
- FWQueryAuthenticationSets (Ordinal: 100, Address: 0x43960)
- FWQueryConnectionSecurityRules (Ordinal: 101, Address: 0x43ae0)
- FWQueryCryptoSets (Ordinal: 102, Address: 0x43c50)
- FWQueryFirewallRules (Ordinal: 103, Address: 0x6870)
- FWQueryIsolationType (Ordinal: 104, Address: 0x43dd0)
- FWQueryMainModeRules (Ordinal: 105, Address: 0x43f70)
- FWRegisterProduct (Ordinal: 106, Address: 0x440d0)
- FWResetIndicatedPortInUse (Ordinal: 107, Address: 0x8d30)
- FWResetIndicatedTupleInUse (Ordinal: 108, Address: 0x8c00)
- FWRestoreDefaults (Ordinal: 109, Address: 0x44270)
- FWRestoreGPODefaults (Ordinal: 110, Address: 0x44590)
- FWRevertTransaction (Ordinal: 111, Address: 0x44740)
- FWSelectConSecRule (Ordinal: 112, Address: 0x448b0)
- FWSetAuthenticationSet (Ordinal: 113, Address: 0x44af0)
- FWSetConfig (Ordinal: 114, Address: 0x44cc0)
- FWSetConnectionSecurityRule (Ordinal: 115, Address: 0x44e00)
- FWSetCryptoSet (Ordinal: 116, Address: 0x44fd0)
- FWSetFirewallRule (Ordinal: 117, Address: 0x45170)
- FWSetFirewallRuleWithRemoteDynamicKeywordAddresses (Ordinal: 118, Address: 0xcde0)
- FWSetGlobalConfig (Ordinal: 119, Address: 0x453f0)
- FWSetGlobalConfig2 (Ordinal: 120, Address: 0x45590)
- FWSetMainModeRule (Ordinal: 121, Address: 0x45720)
- FWStatusMessageFromStatusCode (Ordinal: 122, Address: 0x45890)
- FWUnregisterProduct (Ordinal: 123, Address: 0x45a70)
- FWUpdateDynamicKeywordAddress0 (Ordinal: 124, Address: 0xd150)
- FWUpdateDynamicKeywordAddress_Int (Ordinal: 125, Address: 0xd240)
- FWVerifyAuthenticationSet (Ordinal: 126, Address: 0x45b40)
- FWVerifyAuthenticationSetQuery (Ordinal: 127, Address: 0x45ba0)
- FWVerifyConnectionSecurityRule (Ordinal: 128, Address: 0x45c00)
- FWVerifyConnectionSecurityRuleQuery (Ordinal: 129, Address: 0x45c60)
- FWVerifyCryptoSet (Ordinal: 130, Address: 0x45cc0)
- FWVerifyCryptoSetQuery (Ordinal: 131, Address: 0x45d20)
- FWVerifyFirewallRule (Ordinal: 132, Address: 0x45d80)
- FWVerifyFirewallRuleQuery (Ordinal: 133, Address: 0x7e10)
- FWVerifyMainModeRule (Ordinal: 134, Address: 0x45de0)
- FWVerifyMainModeRuleQuery (Ordinal: 135, Address: 0x45e40)
- FwActivate (Ordinal: 136, Address: 0x1f870)
- FwAlloc (Ordinal: 137, Address: 0x6eb0)
- FwAllocCheckSize (Ordinal: 138, Address: 0x45ea0)
- FwAllowedProgramsAdd (Ordinal: 139, Address: 0x21c90)
- FwAllowedProgramsDelete (Ordinal: 140, Address: 0x21e70)
- FwAnalyzeFirewallPolicy (Ordinal: 141, Address: 0x23c0)
- FwAnalyzeFirewallPolicyOnProfile (Ordinal: 142, Address: 0x3090)
- FwApiHelperFree (Ordinal: 143, Address: 0x21fe0)
- FwApiHelperInit (Ordinal: 144, Address: 0x22060)
- FwConvertIPv6SubNetToRange (Ordinal: 145, Address: 0x45f00)
- FwCopyAuthSet (Ordinal: 146, Address: 0x45f20)
- FwCopyMainModeRule (Ordinal: 147, Address: 0x45f80)
- FwCopyWFAddressesContents (Ordinal: 148, Address: 0x45fe0)
- FwEmptyWFAddresses (Ordinal: 149, Address: 0x8800)
- FwFree (Ordinal: 150, Address: 0x8820)
- FwFreeAddresses (Ordinal: 151, Address: 0x8800)
- FwFreePorts (Ordinal: 152, Address: 0x46040)
- FwGetAddressesAsString (Ordinal: 153, Address: 0x46080)
- FwIcmpSettingsEnum (Ordinal: 154, Address: 0x22130)
- FwIcmpSettingsSet (Ordinal: 155, Address: 0x222c0)
- FwIsGroupPolicyEnforced (Ordinal: 156, Address: 0x2090)
- FwIsRemoteManagementEnabled (Ordinal: 157, Address: 0x1df80)
- FwLogSettingsSet (Ordinal: 158, Address: 0x22440)
- FwMergeAddresses (Ordinal: 159, Address: 0x460e0)
- FwMulticastBroadcastResponsesEnum (Ordinal: 160, Address: 0x22680)
- FwMulticastBroadcastResponsesSet (Ordinal: 161, Address: 0x22800)
- FwNotificationsEnum (Ordinal: 162, Address: 0x22970)
- FwNotificationsSet (Ordinal: 163, Address: 0x22af0)
- FwOpModesEnum (Ordinal: 164, Address: 0x22c60)
- FwOpModesSet (Ordinal: 165, Address: 0x22de0)
- FwPortOpeningsAdd (Ordinal: 166, Address: 0x22f40)
- FwPortOpeningsDelete (Ordinal: 167, Address: 0x23150)
- FwProfileTypeCurrentGet (Ordinal: 168, Address: 0x232d0)
- FwProfileTypeGet (Ordinal: 169, Address: 0x23380)
- FwRestoreDefaults (Ordinal: 170, Address: 0x23430)
- FwServicesEnum (Ordinal: 171, Address: 0x234c0)
- FwServicesSet (Ordinal: 172, Address: 0x236a0)
- FwStringToAddresses (Ordinal: 173, Address: 0x46100)
- FwStringToPorts (Ordinal: 174, Address: 0x461c0)
- IcfAddrChangeNotificationCreate (Ordinal: 175, Address: 0x7f50)
- IcfChangeNotificationCreate (Ordinal: 176, Address: 0x7e70)
- IcfChangeNotificationDestroy (Ordinal: 177, Address: 0x1e180)
- IcfConnect (Ordinal: 178, Address: 0x1e210)
- IcfDisconnect (Ordinal: 179, Address: 0x7fe0)
- IcfFreeDynamicFwPorts (Ordinal: 180, Address: 0x1e230)
- IcfFreeProfile (Ordinal: 181, Address: 0x1e300)
- IcfFreeTickets (Ordinal: 182, Address: 0x1e620)
- IcfGetCurrentProfileType (Ordinal: 183, Address: 0x1e6c0)
- IcfGetDynamicFwPorts (Ordinal: 184, Address: 0x1e770)
- IcfGetOperationalMode (Ordinal: 185, Address: 0x1eab0)
- IcfGetProfile (Ordinal: 186, Address: 0x1ec50)
- IcfGetTickets (Ordinal: 187, Address: 0x1efb0)
- IcfIsPortAllowed (Ordinal: 188, Address: 0x24490)
- IcfOpenDynamicFwPortWithoutSocket (Ordinal: 189, Address: 0x7fe0)
- IcfSubNetsGetScope (Ordinal: 190, Address: 0x1f2b0)
- IsFirewallInCoExistanceMode (Ordinal: 191, Address: 0x2700)
- IsPortOrICMPAllowed (Ordinal: 192, Address: 0x245b0)
- NetworkIsolationAddAllowEnterpriseIdRule (Ordinal: 193, Address: 0x462a0)
- NetworkIsolationCreateAllInterfacesContainer (Ordinal: 194, Address: 0x46440)
- NetworkIsolationCreateAppContainer (Ordinal: 195, Address: 0x8030)
- NetworkIsolationCreateAppContainerLoopbackRules (Ordinal: 196, Address: 0x46770)
- NetworkIsolationCreateContainer (Ordinal: 197, Address: 0x46b20)
- NetworkIsolationCreateInterfaceContainer (Ordinal: 198, Address: 0x46f30)
- NetworkIsolationDeleteAllInterfacesContainer (Ordinal: 199, Address: 0x47270)
- NetworkIsolationDeleteAllowEnterpriseIdRule (Ordinal: 200, Address: 0x47400)
- NetworkIsolationDeleteAppContainer (Ordinal: 201, Address: 0x84a0)
- NetworkIsolationDeleteAppContainerLoopbackRules (Ordinal: 202, Address: 0x47510)
- NetworkIsolationDeleteContainer (Ordinal: 203, Address: 0x47890)
- NetworkIsolationDeleteInterfaceContainer (Ordinal: 204, Address: 0x47c20)
- NetworkIsolationDeleteUserAppContainers (Ordinal: 205, Address: 0x47d60)
- NetworkIsolationDiagnoseConnectFailure (Ordinal: 206, Address: 0x39f0)
- NetworkIsolationDiagnoseConnectFailureAndGetInfo (Ordinal: 207, Address: 0x1130)
- NetworkIsolationDiagnoseListen (Ordinal: 208, Address: 0x47ff0)
- NetworkIsolationDiagnoseSocketCreation (Ordinal: 209, Address: 0x48170)
- NetworkIsolationEnumAppContainers (Ordinal: 210, Address: 0x482e0)
- NetworkIsolationEnumerateAppContainerRules (Ordinal: 211, Address: 0x484d0)
- NetworkIsolationGetAppContainer (Ordinal: 212, Address: 0x485a0)
- NetworkIsolationGetAppContainerConfig (Ordinal: 213, Address: 0x2460)
- NetworkIsolationGetEnterpriseId (Ordinal: 214, Address: 0x48760)
- NetworkIsolationGetEnterpriseIdAsync (Ordinal: 215, Address: 0x1260)
- NetworkIsolationGetEnterpriseIdClose (Ordinal: 216, Address: 0x1c20)
- NetworkIsolationRegisterForAppContainerChanges (Ordinal: 217, Address: 0x487e0)
- NetworkIsolationSetAppContainerConfig (Ordinal: 218, Address: 0x48ca0)
- NetworkIsolationSetupAppContainerBinaries (Ordinal: 219, Address: 0x48df0)
- NetworkIsolationUnregisterForAppContainerChanges (Ordinal: 220, Address: 0x49180)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180067988)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x180067a70)
- CStdStubBuffer2_CountRefs (Address: 0x180067a58)
- CStdStubBuffer2_Disconnect (Address: 0x1800679b8)
- CStdStubBuffer2_QueryInterface (Address: 0x1800679d8)
- NdrProxyForwardingFunction3 (Address: 0x180067a50)
- NdrProxyForwardingFunction4 (Address: 0x1800679f8)
- NdrProxyForwardingFunction5 (Address: 0x180067a00)
- NdrProxyForwardingFunction6 (Address: 0x1800679b0)
- ObjectStublessClient10 (Address: 0x180067a28)
- ObjectStublessClient11 (Address: 0x1800679d0)
- ObjectStublessClient12 (Address: 0x1800679f0)
- ObjectStublessClient13 (Address: 0x1800679c8)
- ObjectStublessClient14 (Address: 0x1800679e8)
- ObjectStublessClient15 (Address: 0x1800679a0)
- ObjectStublessClient16 (Address: 0x180067a40)
- ObjectStublessClient17 (Address: 0x180067a20)
- ObjectStublessClient18 (Address: 0x1800679e0)
- ObjectStublessClient19 (Address: 0x180067a38)
- ObjectStublessClient20 (Address: 0x180067998)
- ObjectStublessClient21 (Address: 0x180067a48)
- ObjectStublessClient22 (Address: 0x180067a30)
- ObjectStublessClient23 (Address: 0x1800679a8)
- ObjectStublessClient24 (Address: 0x180067a68)
- ObjectStublessClient25 (Address: 0x180067a60)
- ObjectStublessClient26 (Address: 0x180067a18)
- ObjectStublessClient7 (Address: 0x1800679c0)
- ObjectStublessClient8 (Address: 0x180067a08)
- ObjectStublessClient9 (Address: 0x180067a10)
api-ms-win-core-debug-l1-1-0.dll
- IsDebuggerPresent (Address: 0x180067a80)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180067a90)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180067aa0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180067ab8)
- SetUnhandledExceptionFilter (Address: 0x180067ac0)
- UnhandledExceptionFilter (Address: 0x180067ab0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180067ad8)
- HeapAlloc (Address: 0x180067ad0)
- HeapDestroy (Address: 0x180067ae0)
- HeapFree (Address: 0x180067ae8)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x180067af8)
- LocalFree (Address: 0x180067b00)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180067b30)
- FindResourceExW (Address: 0x180067b28)
- FreeLibrary (Address: 0x180067b50)
- GetModuleFileNameW (Address: 0x180067b18)
- GetModuleHandleW (Address: 0x180067b38)
- GetProcAddress (Address: 0x180067b10)
- LoadLibraryExW (Address: 0x180067b20)
- LoadResource (Address: 0x180067b48)
- SizeofResource (Address: 0x180067b40)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180067b68)
- GetSystemDefaultLangID (Address: 0x180067b60)
- GetThreadUILanguage (Address: 0x180067b70)
api-ms-win-core-memory-l1-1-0.dll
- VirtualAlloc (Address: 0x180067b90)
- VirtualProtect (Address: 0x180067b88)
- VirtualQuery (Address: 0x180067b80)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180067ba8)
- GetCurrentProcessId (Address: 0x180067bb0)
- GetCurrentThread (Address: 0x180067bd8)
- GetCurrentThreadId (Address: 0x180067bc8)
- OpenProcessToken (Address: 0x180067bd0)
- OpenThreadToken (Address: 0x180067bb8)
- SetThreadToken (Address: 0x180067bc0)
- TerminateProcess (Address: 0x180067ba0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180067be8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180067c28)
- RegCreateKeyExW (Address: 0x180067c30)
- RegDeleteTreeW (Address: 0x180067c18)
- RegDeleteValueW (Address: 0x180067c38)
- RegEnumKeyExW (Address: 0x180067c20)
- RegEnumValueW (Address: 0x180067c58)
- RegOpenCurrentUser (Address: 0x180067c48)
- RegOpenKeyExW (Address: 0x180067c10)
- RegQueryInfoKeyW (Address: 0x180067c00)
- RegQueryValueExW (Address: 0x180067c08)
- RegRestoreKeyW (Address: 0x180067c50)
- RegSaveKeyExW (Address: 0x180067c40)
- RegSetValueExW (Address: 0x180067bf8)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180067c78)
- RtlLookupFunctionEntry (Address: 0x180067c70)
- RtlVirtualUnwind (Address: 0x180067c68)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x180067c88)
- CompareStringW (Address: 0x180067c90)
- MultiByteToWideChar (Address: 0x180067c98)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x180067cb0)
- CharPrevW (Address: 0x180067ca8)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x180067cc0)
- lstrcpynW (Address: 0x180067cc8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180067d08)
- AcquireSRWLockShared (Address: 0x180067d38)
- CreateEventW (Address: 0x180067cf8)
- DeleteCriticalSection (Address: 0x180067cd8)
- EnterCriticalSection (Address: 0x180067d18)
- InitializeCriticalSection (Address: 0x180067d10)
- InitializeSRWLock (Address: 0x180067cf0)
- LeaveCriticalSection (Address: 0x180067d30)
- ReleaseSRWLockExclusive (Address: 0x180067d00)
- ReleaseSRWLockShared (Address: 0x180067d20)
- SetEvent (Address: 0x180067d28)
- TryAcquireSRWLockExclusive (Address: 0x180067ce8)
- WaitForSingleObject (Address: 0x180067ce0)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x180067d48)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemInfo (Address: 0x180067d60)
- GetSystemTimeAsFileTime (Address: 0x180067d70)
- GetTickCount (Address: 0x180067d58)
- GetTickCount64 (Address: 0x180067d68)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180067da0)
- CloseThreadpoolWait (Address: 0x180067dc0)
- CreateThreadpoolTimer (Address: 0x180067da8)
- CreateThreadpoolWait (Address: 0x180067d90)
- SetThreadpoolTimer (Address: 0x180067d80)
- SetThreadpoolWait (Address: 0x180067db8)
- SetThreadpoolWaitEx (Address: 0x180067d98)
- WaitForThreadpoolTimerCallbacks (Address: 0x180067db0)
- WaitForThreadpoolWaitCallbacks (Address: 0x180067d88)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x180067dd8)
- GetFileVersionInfoSizeExW (Address: 0x180067dd0)
- VerQueryValueW (Address: 0x180067de0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x180067df0)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180067e08)
- EventSetInformation (Address: 0x180067e10)
- EventUnregister (Address: 0x180067e00)
- EventWriteTransfer (Address: 0x180067e18)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x180067e28)
- CheckTokenMembership (Address: 0x180067e30)
- CreateWellKnownSid (Address: 0x180067e38)
- DuplicateTokenEx (Address: 0x180067e40)
- GetLengthSid (Address: 0x180067e48)
- IsValidSid (Address: 0x180067e58)
- RevertToSelf (Address: 0x180067e50)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenCapability (Address: 0x180067e68)
DNSAPI.dll
- DnsFreeNrptRuleNamesList (Address: 0x180067878)
- DnsGetNrptRuleNamesList (Address: 0x180067868)
- DnsRemoveNrptRule (Address: 0x180067860)
- DnsSetNrptRules (Address: 0x180067870)
msvcrt.dll
- __C_specific_handler (Address: 0x180067f20)
- __CxxFrameHandler3 (Address: 0x180067f00)
- _amsg_exit (Address: 0x180067e90)
- _callnewh (Address: 0x180067ea0)
- _CxxThrowException (Address: 0x180067eb0)
- _initterm (Address: 0x180067e88)
- _purecall (Address: 0x180067ee0)
- _vsnwprintf (Address: 0x180067ec8)
- _wcsicmp (Address: 0x180067ed8)
- _wcsnicmp (Address: 0x180067eb8)
- _XcptFilter (Address: 0x180067f28)
- ??1type_info@@UEAA@XZ (Address: 0x180067e78)
- ?terminate@@YAXXZ (Address: 0x180067e80)
- free (Address: 0x180067f18)
- malloc (Address: 0x180067f10)
- memcmp (Address: 0x180067e98)
- memcpy (Address: 0x180067ea8)
- memset (Address: 0x180067ef8)
- qsort (Address: 0x180067ec0)
- realloc (Address: 0x180067ef0)
- wcscat_s (Address: 0x180067f08)
- wcscmp (Address: 0x180067f30)
- wcscpy_s (Address: 0x180067ee8)
- wcstok (Address: 0x180067ed0)
ntdll.dll
- EtwEventRegister (Address: 0x180067f90)
- EtwEventUnregister (Address: 0x180067f88)
- EtwEventWrite (Address: 0x180067f48)
- EtwGetTraceEnableFlags (Address: 0x180067fa8)
- EtwGetTraceEnableLevel (Address: 0x180067fb0)
- EtwGetTraceLoggerHandle (Address: 0x180067fb8)
- EtwRegisterTraceGuidsW (Address: 0x180067fa0)
- EtwTraceMessage (Address: 0x180067f80)
- EtwUnregisterTraceGuids (Address: 0x180067f98)
- RtlCapabilityCheck (Address: 0x180067f58)
- RtlEqualSid (Address: 0x180067f50)
- RtlGetCurrentServiceSessionId (Address: 0x180067f68)
- RtlInitUnicodeString (Address: 0x180067f60)
- RtlIpv4AddressToStringW (Address: 0x180067f40)
- RtlIpv4StringToAddressW (Address: 0x180067f78)
- RtlIpv6AddressToStringW (Address: 0x180067fc0)
- RtlIpv6StringToAddressW (Address: 0x180067f70)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x180067960)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x180067970)
- CStdStubBuffer_DebugServerRelease (Address: 0x180067908)
- CStdStubBuffer_Invoke (Address: 0x180067948)
- CStdStubBuffer_IsIIDSupported (Address: 0x1800678f0)
- IUnknown_AddRef_Proxy (Address: 0x180067978)
- IUnknown_QueryInterface_Proxy (Address: 0x180067900)
- IUnknown_Release_Proxy (Address: 0x180067958)
- Ndr64AsyncClientCall (Address: 0x1800678c8)
- NdrClientCall3 (Address: 0x1800678e0)
- NdrCStdStubBuffer2_Release (Address: 0x180067920)
- NdrDllCanUnloadNow (Address: 0x180067940)
- NdrDllGetClassObject (Address: 0x180067938)
- NdrDllRegisterProxy (Address: 0x180067930)
- NdrDllUnregisterProxy (Address: 0x180067928)
- NdrOleAllocate (Address: 0x180067910)
- NdrOleFree (Address: 0x180067968)
- NdrStubCall3 (Address: 0x1800678a0)
- NdrStubForwardingFunction (Address: 0x180067950)
- RpcAsyncCancelCall (Address: 0x1800678d8)
- RpcAsyncCompleteCall (Address: 0x1800678c0)
- RpcAsyncInitializeHandle (Address: 0x1800678f8)
- RpcBindingFree (Address: 0x180067918)
- RpcBindingFromStringBindingW (Address: 0x1800678b0)
- RpcBindingSetAuthInfoExW (Address: 0x1800678d0)
- RpcBindingSetOption (Address: 0x1800678a8)
- RpcEpResolveBinding (Address: 0x1800678e8)
- RpcStringBindingComposeW (Address: 0x1800678b8)
- RpcStringFreeW (Address: 0x180067898)
- UuidCreate (Address: 0x180067888)
- UuidToStringW (Address: 0x180067890)