FirewallAPI.dll

Description: Windows Defender Firewall API

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: a0de106ec8da6fda2fc05abd3c3c7fcc

File Size: 581.5 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 12

Exported Functions

  • FwBstrToInterfaceTypes (Ordinal: 1, Address: 0x193d0)
  • FwBstrToPorts (Ordinal: 2, Address: 0x19500)
  • FwGetCurrentProfile (Ordinal: 3, Address: 0x1c740)
  • FwGetVersionField (Ordinal: 4, Address: 0x19800)
  • FwInterfaceTypesToBstr (Ordinal: 5, Address: 0x19e60)
  • GetDisabledInterfaces (Ordinal: 6, Address: 0x1c810)
  • NetworkIsolationFreeAppContainers (Ordinal: 7, Address: 0x8820)
  • DllCanUnloadNow (Ordinal: 8, Address: 0x2350)
  • DllGetClassObject (Ordinal: 9, Address: 0x7d40)
  • DllRegisterServer (Ordinal: 10, Address: 0x17d70)
  • DllUnregisterServer (Ordinal: 11, Address: 0x17dd0)
  • FWAddAuthenticationSet (Ordinal: 12, Address: 0x3f200)
  • FWAddConnectionSecurityRule (Ordinal: 13, Address: 0x3f3e0)
  • FWAddCryptoSet (Ordinal: 14, Address: 0x3f5b0)
  • FWAddDynamicKeywordAddress0 (Ordinal: 15, Address: 0xbff0)
  • FWAddDynamicKeywordAddress_Int (Ordinal: 16, Address: 0xc0b0)
  • FWAddFirewallRule (Ordinal: 17, Address: 0x3f750)
  • FWAddFirewallRuleWithRemoteDynamicKeywordAddresses (Ordinal: 18, Address: 0xc230)
  • FWAddMainModeRule (Ordinal: 19, Address: 0x3f9d0)
  • FWAddSecurityRealm (Ordinal: 20, Address: 0x3fb50)
  • FWChangeNotificationCreate (Ordinal: 21, Address: 0x7e70)
  • FWChangeNotificationDestroy (Ordinal: 22, Address: 0x1e180)
  • FWChangeTransactionalState (Ordinal: 23, Address: 0x3fda0)
  • FWClosePolicyStore (Ordinal: 24, Address: 0x40b0)
  • FWCopyAuthenticationSet (Ordinal: 25, Address: 0x3ff80)
  • FWCopyConnectionSecurityRule (Ordinal: 26, Address: 0x3ffe0)
  • FWCopyCryptoSet (Ordinal: 27, Address: 0x40040)
  • FWCopyDynamicKeywordRuleLink (Ordinal: 28, Address: 0xc5a0)
  • FWCopyFirewallRule (Ordinal: 29, Address: 0x400a0)
  • FWDeleteAllAuthenticationSets (Ordinal: 30, Address: 0x40100)
  • FWDeleteAllConnectionSecurityRules (Ordinal: 31, Address: 0x40230)
  • FWDeleteAllCryptoSets (Ordinal: 32, Address: 0x40360)
  • FWDeleteAllFirewallRules (Ordinal: 33, Address: 0x40490)
  • FWDeleteAllMainModeRules (Ordinal: 34, Address: 0x405c0)
  • FWDeleteAuthenticationSet (Ordinal: 35, Address: 0x406f0)
  • FWDeleteConnectionSecurityRule (Ordinal: 36, Address: 0x40820)
  • FWDeleteCryptoSet (Ordinal: 37, Address: 0x40950)
  • FWDeleteDynamicKeywordAddress0 (Ordinal: 38, Address: 0xc5c0)
  • FWDeleteDynamicKeywordAddress_Int (Ordinal: 39, Address: 0xc690)
  • FWDeleteFirewallRule (Ordinal: 40, Address: 0x40a80)
  • FWDeleteMainModeRule (Ordinal: 41, Address: 0x40bb0)
  • FWDeletePhase1SAs (Ordinal: 42, Address: 0x40ce0)
  • FWDeletePhase2SAs (Ordinal: 43, Address: 0x40df0)
  • FWDeleteSecurityRealm (Ordinal: 44, Address: 0x40f00)
  • FWDiagGetAppList (Ordinal: 45, Address: 0x40f30)
  • FWEnumAdapters (Ordinal: 46, Address: 0x41030)
  • FWEnumAuthenticationSets (Ordinal: 47, Address: 0x41140)
  • FWEnumConnectionSecurityRules (Ordinal: 48, Address: 0x41330)
  • FWEnumCryptoSets (Ordinal: 49, Address: 0x41520)
  • FWEnumDynamicKeywordAddressById0 (Ordinal: 50, Address: 0xc7d0)
  • FWEnumDynamicKeywordAddressesByType0 (Ordinal: 51, Address: 0xc8b0)
  • FWEnumDynamicKeywordAddresses_Int (Ordinal: 52, Address: 0xc990)
  • FWEnumDynamicKeywordRuleLinkById (Ordinal: 53, Address: 0xcb80)
  • FWEnumDynamicKeywordRuleLinksByStore (Ordinal: 54, Address: 0xcb90)
  • FWEnumFirewallRules (Ordinal: 55, Address: 0x416e0)
  • FWEnumMainModeRules (Ordinal: 56, Address: 0x41970)
  • FWEnumNetworks (Ordinal: 57, Address: 0x41b10)
  • FWEnumPhase1SAs (Ordinal: 58, Address: 0x41c20)
  • FWEnumPhase2SAs (Ordinal: 59, Address: 0x41d50)
  • FWEnumProducts (Ordinal: 60, Address: 0x41e80)
  • FWExportPolicy (Ordinal: 61, Address: 0x41f90)
  • FWFreeAdapters (Ordinal: 62, Address: 0x8820)
  • FWFreeAuthenticationSet (Ordinal: 63, Address: 0x42130)
  • FWFreeAuthenticationSets (Ordinal: 64, Address: 0x42150)
  • FWFreeAuthenticationSetsByHandle (Ordinal: 65, Address: 0x42210)
  • FWFreeConnectionSecurityRule (Ordinal: 66, Address: 0x42300)
  • FWFreeConnectionSecurityRules (Ordinal: 67, Address: 0x42320)
  • FWFreeConnectionSecurityRulesByHandle (Ordinal: 68, Address: 0x423f0)
  • FWFreeCryptoSet (Ordinal: 69, Address: 0x424e0)
  • FWFreeCryptoSets (Ordinal: 70, Address: 0x42500)
  • FWFreeCryptoSetsByHandle (Ordinal: 71, Address: 0x425d0)
  • FWFreeDiagAppList (Ordinal: 72, Address: 0x8820)
  • FWFreeDynamicKeywordAddressData0 (Ordinal: 73, Address: 0xcba0)
  • FWFreeDynamicKeywordRuleLinks (Ordinal: 74, Address: 0xcc00)
  • FWFreeFirewallRule (Ordinal: 75, Address: 0x426f0)
  • FWFreeFirewallRules (Ordinal: 76, Address: 0x42710)
  • FWFreeFirewallRulesByHandle (Ordinal: 77, Address: 0x427d0)
  • FWFreeFirewallRulesOld (Ordinal: 78, Address: 0x428c0)
  • FWFreeMainModeRule (Ordinal: 79, Address: 0x42990)
  • FWFreeMainModeRules (Ordinal: 80, Address: 0x429b0)
  • FWFreeMainModeRulesByHandle (Ordinal: 81, Address: 0x42a80)
  • FWFreeNetworks (Ordinal: 82, Address: 0x8820)
  • FWFreePhase1SAs (Ordinal: 83, Address: 0x42b70)
  • FWFreePhase2SAs (Ordinal: 84, Address: 0x42c70)
  • FWFreeProducts (Ordinal: 85, Address: 0x8820)
  • FWGetConfig (Ordinal: 86, Address: 0x38a0)
  • FWGetConfig2 (Ordinal: 87, Address: 0x42d40)
  • FWGetGlobalConfig (Ordinal: 88, Address: 0x2570)
  • FWGetGlobalConfig2 (Ordinal: 89, Address: 0xcc20)
  • FWGetGlobalConfig3 (Ordinal: 90, Address: 0x42e90)
  • FWGetIndicatedPortInUse (Ordinal: 91, Address: 0x8e10)
  • FWImportPolicy (Ordinal: 92, Address: 0x42ff0)
  • FWIndicatePortInUse (Ordinal: 93, Address: 0x8840)
  • FWIndicateProxyForUrl (Ordinal: 94, Address: 0x43190)
  • FWIndicateProxyResolverRefresh (Ordinal: 95, Address: 0x43310)
  • FWIndicateTupleInUse (Ordinal: 96, Address: 0x43320)
  • FWIndicateTupleInUse2 (Ordinal: 97, Address: 0x43510)
  • FWIsTargetAProxy (Ordinal: 98, Address: 0x43700)
  • FWOpenPolicyStore (Ordinal: 99, Address: 0x4f30)
  • FWQueryAuthenticationSets (Ordinal: 100, Address: 0x43960)
  • FWQueryConnectionSecurityRules (Ordinal: 101, Address: 0x43ae0)
  • FWQueryCryptoSets (Ordinal: 102, Address: 0x43c50)
  • FWQueryFirewallRules (Ordinal: 103, Address: 0x6870)
  • FWQueryIsolationType (Ordinal: 104, Address: 0x43dd0)
  • FWQueryMainModeRules (Ordinal: 105, Address: 0x43f70)
  • FWRegisterProduct (Ordinal: 106, Address: 0x440d0)
  • FWResetIndicatedPortInUse (Ordinal: 107, Address: 0x8d30)
  • FWResetIndicatedTupleInUse (Ordinal: 108, Address: 0x8c00)
  • FWRestoreDefaults (Ordinal: 109, Address: 0x44270)
  • FWRestoreGPODefaults (Ordinal: 110, Address: 0x44590)
  • FWRevertTransaction (Ordinal: 111, Address: 0x44740)
  • FWSelectConSecRule (Ordinal: 112, Address: 0x448b0)
  • FWSetAuthenticationSet (Ordinal: 113, Address: 0x44af0)
  • FWSetConfig (Ordinal: 114, Address: 0x44cc0)
  • FWSetConnectionSecurityRule (Ordinal: 115, Address: 0x44e00)
  • FWSetCryptoSet (Ordinal: 116, Address: 0x44fd0)
  • FWSetFirewallRule (Ordinal: 117, Address: 0x45170)
  • FWSetFirewallRuleWithRemoteDynamicKeywordAddresses (Ordinal: 118, Address: 0xcde0)
  • FWSetGlobalConfig (Ordinal: 119, Address: 0x453f0)
  • FWSetGlobalConfig2 (Ordinal: 120, Address: 0x45590)
  • FWSetMainModeRule (Ordinal: 121, Address: 0x45720)
  • FWStatusMessageFromStatusCode (Ordinal: 122, Address: 0x45890)
  • FWUnregisterProduct (Ordinal: 123, Address: 0x45a70)
  • FWUpdateDynamicKeywordAddress0 (Ordinal: 124, Address: 0xd150)
  • FWUpdateDynamicKeywordAddress_Int (Ordinal: 125, Address: 0xd240)
  • FWVerifyAuthenticationSet (Ordinal: 126, Address: 0x45b40)
  • FWVerifyAuthenticationSetQuery (Ordinal: 127, Address: 0x45ba0)
  • FWVerifyConnectionSecurityRule (Ordinal: 128, Address: 0x45c00)
  • FWVerifyConnectionSecurityRuleQuery (Ordinal: 129, Address: 0x45c60)
  • FWVerifyCryptoSet (Ordinal: 130, Address: 0x45cc0)
  • FWVerifyCryptoSetQuery (Ordinal: 131, Address: 0x45d20)
  • FWVerifyFirewallRule (Ordinal: 132, Address: 0x45d80)
  • FWVerifyFirewallRuleQuery (Ordinal: 133, Address: 0x7e10)
  • FWVerifyMainModeRule (Ordinal: 134, Address: 0x45de0)
  • FWVerifyMainModeRuleQuery (Ordinal: 135, Address: 0x45e40)
  • FwActivate (Ordinal: 136, Address: 0x1f870)
  • FwAlloc (Ordinal: 137, Address: 0x6eb0)
  • FwAllocCheckSize (Ordinal: 138, Address: 0x45ea0)
  • FwAllowedProgramsAdd (Ordinal: 139, Address: 0x21c90)
  • FwAllowedProgramsDelete (Ordinal: 140, Address: 0x21e70)
  • FwAnalyzeFirewallPolicy (Ordinal: 141, Address: 0x23c0)
  • FwAnalyzeFirewallPolicyOnProfile (Ordinal: 142, Address: 0x3090)
  • FwApiHelperFree (Ordinal: 143, Address: 0x21fe0)
  • FwApiHelperInit (Ordinal: 144, Address: 0x22060)
  • FwConvertIPv6SubNetToRange (Ordinal: 145, Address: 0x45f00)
  • FwCopyAuthSet (Ordinal: 146, Address: 0x45f20)
  • FwCopyMainModeRule (Ordinal: 147, Address: 0x45f80)
  • FwCopyWFAddressesContents (Ordinal: 148, Address: 0x45fe0)
  • FwEmptyWFAddresses (Ordinal: 149, Address: 0x8800)
  • FwFree (Ordinal: 150, Address: 0x8820)
  • FwFreeAddresses (Ordinal: 151, Address: 0x8800)
  • FwFreePorts (Ordinal: 152, Address: 0x46040)
  • FwGetAddressesAsString (Ordinal: 153, Address: 0x46080)
  • FwIcmpSettingsEnum (Ordinal: 154, Address: 0x22130)
  • FwIcmpSettingsSet (Ordinal: 155, Address: 0x222c0)
  • FwIsGroupPolicyEnforced (Ordinal: 156, Address: 0x2090)
  • FwIsRemoteManagementEnabled (Ordinal: 157, Address: 0x1df80)
  • FwLogSettingsSet (Ordinal: 158, Address: 0x22440)
  • FwMergeAddresses (Ordinal: 159, Address: 0x460e0)
  • FwMulticastBroadcastResponsesEnum (Ordinal: 160, Address: 0x22680)
  • FwMulticastBroadcastResponsesSet (Ordinal: 161, Address: 0x22800)
  • FwNotificationsEnum (Ordinal: 162, Address: 0x22970)
  • FwNotificationsSet (Ordinal: 163, Address: 0x22af0)
  • FwOpModesEnum (Ordinal: 164, Address: 0x22c60)
  • FwOpModesSet (Ordinal: 165, Address: 0x22de0)
  • FwPortOpeningsAdd (Ordinal: 166, Address: 0x22f40)
  • FwPortOpeningsDelete (Ordinal: 167, Address: 0x23150)
  • FwProfileTypeCurrentGet (Ordinal: 168, Address: 0x232d0)
  • FwProfileTypeGet (Ordinal: 169, Address: 0x23380)
  • FwRestoreDefaults (Ordinal: 170, Address: 0x23430)
  • FwServicesEnum (Ordinal: 171, Address: 0x234c0)
  • FwServicesSet (Ordinal: 172, Address: 0x236a0)
  • FwStringToAddresses (Ordinal: 173, Address: 0x46100)
  • FwStringToPorts (Ordinal: 174, Address: 0x461c0)
  • IcfAddrChangeNotificationCreate (Ordinal: 175, Address: 0x7f50)
  • IcfChangeNotificationCreate (Ordinal: 176, Address: 0x7e70)
  • IcfChangeNotificationDestroy (Ordinal: 177, Address: 0x1e180)
  • IcfConnect (Ordinal: 178, Address: 0x1e210)
  • IcfDisconnect (Ordinal: 179, Address: 0x7fe0)
  • IcfFreeDynamicFwPorts (Ordinal: 180, Address: 0x1e230)
  • IcfFreeProfile (Ordinal: 181, Address: 0x1e300)
  • IcfFreeTickets (Ordinal: 182, Address: 0x1e620)
  • IcfGetCurrentProfileType (Ordinal: 183, Address: 0x1e6c0)
  • IcfGetDynamicFwPorts (Ordinal: 184, Address: 0x1e770)
  • IcfGetOperationalMode (Ordinal: 185, Address: 0x1eab0)
  • IcfGetProfile (Ordinal: 186, Address: 0x1ec50)
  • IcfGetTickets (Ordinal: 187, Address: 0x1efb0)
  • IcfIsPortAllowed (Ordinal: 188, Address: 0x24490)
  • IcfOpenDynamicFwPortWithoutSocket (Ordinal: 189, Address: 0x7fe0)
  • IcfSubNetsGetScope (Ordinal: 190, Address: 0x1f2b0)
  • IsFirewallInCoExistanceMode (Ordinal: 191, Address: 0x2700)
  • IsPortOrICMPAllowed (Ordinal: 192, Address: 0x245b0)
  • NetworkIsolationAddAllowEnterpriseIdRule (Ordinal: 193, Address: 0x462a0)
  • NetworkIsolationCreateAllInterfacesContainer (Ordinal: 194, Address: 0x46440)
  • NetworkIsolationCreateAppContainer (Ordinal: 195, Address: 0x8030)
  • NetworkIsolationCreateAppContainerLoopbackRules (Ordinal: 196, Address: 0x46770)
  • NetworkIsolationCreateContainer (Ordinal: 197, Address: 0x46b20)
  • NetworkIsolationCreateInterfaceContainer (Ordinal: 198, Address: 0x46f30)
  • NetworkIsolationDeleteAllInterfacesContainer (Ordinal: 199, Address: 0x47270)
  • NetworkIsolationDeleteAllowEnterpriseIdRule (Ordinal: 200, Address: 0x47400)
  • NetworkIsolationDeleteAppContainer (Ordinal: 201, Address: 0x84a0)
  • NetworkIsolationDeleteAppContainerLoopbackRules (Ordinal: 202, Address: 0x47510)
  • NetworkIsolationDeleteContainer (Ordinal: 203, Address: 0x47890)
  • NetworkIsolationDeleteInterfaceContainer (Ordinal: 204, Address: 0x47c20)
  • NetworkIsolationDeleteUserAppContainers (Ordinal: 205, Address: 0x47d60)
  • NetworkIsolationDiagnoseConnectFailure (Ordinal: 206, Address: 0x39f0)
  • NetworkIsolationDiagnoseConnectFailureAndGetInfo (Ordinal: 207, Address: 0x1130)
  • NetworkIsolationDiagnoseListen (Ordinal: 208, Address: 0x47ff0)
  • NetworkIsolationDiagnoseSocketCreation (Ordinal: 209, Address: 0x48170)
  • NetworkIsolationEnumAppContainers (Ordinal: 210, Address: 0x482e0)
  • NetworkIsolationEnumerateAppContainerRules (Ordinal: 211, Address: 0x484d0)
  • NetworkIsolationGetAppContainer (Ordinal: 212, Address: 0x485a0)
  • NetworkIsolationGetAppContainerConfig (Ordinal: 213, Address: 0x2460)
  • NetworkIsolationGetEnterpriseId (Ordinal: 214, Address: 0x48760)
  • NetworkIsolationGetEnterpriseIdAsync (Ordinal: 215, Address: 0x1260)
  • NetworkIsolationGetEnterpriseIdClose (Ordinal: 216, Address: 0x1c20)
  • NetworkIsolationRegisterForAppContainerChanges (Ordinal: 217, Address: 0x487e0)
  • NetworkIsolationSetAppContainerConfig (Ordinal: 218, Address: 0x48ca0)
  • NetworkIsolationSetupAppContainerBinaries (Ordinal: 219, Address: 0x48df0)
  • NetworkIsolationUnregisterForAppContainerChanges (Ordinal: 220, Address: 0x49180)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x180067988)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x180067a70)
  • CStdStubBuffer2_CountRefs (Address: 0x180067a58)
  • CStdStubBuffer2_Disconnect (Address: 0x1800679b8)
  • CStdStubBuffer2_QueryInterface (Address: 0x1800679d8)
  • NdrProxyForwardingFunction3 (Address: 0x180067a50)
  • NdrProxyForwardingFunction4 (Address: 0x1800679f8)
  • NdrProxyForwardingFunction5 (Address: 0x180067a00)
  • NdrProxyForwardingFunction6 (Address: 0x1800679b0)
  • ObjectStublessClient10 (Address: 0x180067a28)
  • ObjectStublessClient11 (Address: 0x1800679d0)
  • ObjectStublessClient12 (Address: 0x1800679f0)
  • ObjectStublessClient13 (Address: 0x1800679c8)
  • ObjectStublessClient14 (Address: 0x1800679e8)
  • ObjectStublessClient15 (Address: 0x1800679a0)
  • ObjectStublessClient16 (Address: 0x180067a40)
  • ObjectStublessClient17 (Address: 0x180067a20)
  • ObjectStublessClient18 (Address: 0x1800679e0)
  • ObjectStublessClient19 (Address: 0x180067a38)
  • ObjectStublessClient20 (Address: 0x180067998)
  • ObjectStublessClient21 (Address: 0x180067a48)
  • ObjectStublessClient22 (Address: 0x180067a30)
  • ObjectStublessClient23 (Address: 0x1800679a8)
  • ObjectStublessClient24 (Address: 0x180067a68)
  • ObjectStublessClient25 (Address: 0x180067a60)
  • ObjectStublessClient26 (Address: 0x180067a18)
  • ObjectStublessClient7 (Address: 0x1800679c0)
  • ObjectStublessClient8 (Address: 0x180067a08)
  • ObjectStublessClient9 (Address: 0x180067a10)
api-ms-win-core-debug-l1-1-0.dll
  • IsDebuggerPresent (Address: 0x180067a80)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180067a90)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180067aa0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180067ab8)
  • SetUnhandledExceptionFilter (Address: 0x180067ac0)
  • UnhandledExceptionFilter (Address: 0x180067ab0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180067ad8)
  • HeapAlloc (Address: 0x180067ad0)
  • HeapDestroy (Address: 0x180067ae0)
  • HeapFree (Address: 0x180067ae8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180067af8)
  • LocalFree (Address: 0x180067b00)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180067b30)
  • FindResourceExW (Address: 0x180067b28)
  • FreeLibrary (Address: 0x180067b50)
  • GetModuleFileNameW (Address: 0x180067b18)
  • GetModuleHandleW (Address: 0x180067b38)
  • GetProcAddress (Address: 0x180067b10)
  • LoadLibraryExW (Address: 0x180067b20)
  • LoadResource (Address: 0x180067b48)
  • SizeofResource (Address: 0x180067b40)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180067b68)
  • GetSystemDefaultLangID (Address: 0x180067b60)
  • GetThreadUILanguage (Address: 0x180067b70)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x180067b90)
  • VirtualProtect (Address: 0x180067b88)
  • VirtualQuery (Address: 0x180067b80)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180067ba8)
  • GetCurrentProcessId (Address: 0x180067bb0)
  • GetCurrentThread (Address: 0x180067bd8)
  • GetCurrentThreadId (Address: 0x180067bc8)
  • OpenProcessToken (Address: 0x180067bd0)
  • OpenThreadToken (Address: 0x180067bb8)
  • SetThreadToken (Address: 0x180067bc0)
  • TerminateProcess (Address: 0x180067ba0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180067be8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180067c28)
  • RegCreateKeyExW (Address: 0x180067c30)
  • RegDeleteTreeW (Address: 0x180067c18)
  • RegDeleteValueW (Address: 0x180067c38)
  • RegEnumKeyExW (Address: 0x180067c20)
  • RegEnumValueW (Address: 0x180067c58)
  • RegOpenCurrentUser (Address: 0x180067c48)
  • RegOpenKeyExW (Address: 0x180067c10)
  • RegQueryInfoKeyW (Address: 0x180067c00)
  • RegQueryValueExW (Address: 0x180067c08)
  • RegRestoreKeyW (Address: 0x180067c50)
  • RegSaveKeyExW (Address: 0x180067c40)
  • RegSetValueExW (Address: 0x180067bf8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180067c78)
  • RtlLookupFunctionEntry (Address: 0x180067c70)
  • RtlVirtualUnwind (Address: 0x180067c68)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x180067c88)
  • CompareStringW (Address: 0x180067c90)
  • MultiByteToWideChar (Address: 0x180067c98)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x180067cb0)
  • CharPrevW (Address: 0x180067ca8)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x180067cc0)
  • lstrcpynW (Address: 0x180067cc8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180067d08)
  • AcquireSRWLockShared (Address: 0x180067d38)
  • CreateEventW (Address: 0x180067cf8)
  • DeleteCriticalSection (Address: 0x180067cd8)
  • EnterCriticalSection (Address: 0x180067d18)
  • InitializeCriticalSection (Address: 0x180067d10)
  • InitializeSRWLock (Address: 0x180067cf0)
  • LeaveCriticalSection (Address: 0x180067d30)
  • ReleaseSRWLockExclusive (Address: 0x180067d00)
  • ReleaseSRWLockShared (Address: 0x180067d20)
  • SetEvent (Address: 0x180067d28)
  • TryAcquireSRWLockExclusive (Address: 0x180067ce8)
  • WaitForSingleObject (Address: 0x180067ce0)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180067d48)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x180067d60)
  • GetSystemTimeAsFileTime (Address: 0x180067d70)
  • GetTickCount (Address: 0x180067d58)
  • GetTickCount64 (Address: 0x180067d68)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180067da0)
  • CloseThreadpoolWait (Address: 0x180067dc0)
  • CreateThreadpoolTimer (Address: 0x180067da8)
  • CreateThreadpoolWait (Address: 0x180067d90)
  • SetThreadpoolTimer (Address: 0x180067d80)
  • SetThreadpoolWait (Address: 0x180067db8)
  • SetThreadpoolWaitEx (Address: 0x180067d98)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180067db0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x180067d88)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x180067dd8)
  • GetFileVersionInfoSizeExW (Address: 0x180067dd0)
  • VerQueryValueW (Address: 0x180067de0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x180067df0)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180067e08)
  • EventSetInformation (Address: 0x180067e10)
  • EventUnregister (Address: 0x180067e00)
  • EventWriteTransfer (Address: 0x180067e18)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x180067e28)
  • CheckTokenMembership (Address: 0x180067e30)
  • CreateWellKnownSid (Address: 0x180067e38)
  • DuplicateTokenEx (Address: 0x180067e40)
  • GetLengthSid (Address: 0x180067e48)
  • IsValidSid (Address: 0x180067e58)
  • RevertToSelf (Address: 0x180067e50)
api-ms-win-security-base-l1-2-0.dll
  • CheckTokenCapability (Address: 0x180067e68)
DNSAPI.dll
  • DnsFreeNrptRuleNamesList (Address: 0x180067878)
  • DnsGetNrptRuleNamesList (Address: 0x180067868)
  • DnsRemoveNrptRule (Address: 0x180067860)
  • DnsSetNrptRules (Address: 0x180067870)
msvcrt.dll
  • __C_specific_handler (Address: 0x180067f20)
  • __CxxFrameHandler3 (Address: 0x180067f00)
  • _amsg_exit (Address: 0x180067e90)
  • _callnewh (Address: 0x180067ea0)
  • _CxxThrowException (Address: 0x180067eb0)
  • _initterm (Address: 0x180067e88)
  • _purecall (Address: 0x180067ee0)
  • _vsnwprintf (Address: 0x180067ec8)
  • _wcsicmp (Address: 0x180067ed8)
  • _wcsnicmp (Address: 0x180067eb8)
  • _XcptFilter (Address: 0x180067f28)
  • ??1type_info@@UEAA@XZ (Address: 0x180067e78)
  • ?terminate@@YAXXZ (Address: 0x180067e80)
  • free (Address: 0x180067f18)
  • malloc (Address: 0x180067f10)
  • memcmp (Address: 0x180067e98)
  • memcpy (Address: 0x180067ea8)
  • memset (Address: 0x180067ef8)
  • qsort (Address: 0x180067ec0)
  • realloc (Address: 0x180067ef0)
  • wcscat_s (Address: 0x180067f08)
  • wcscmp (Address: 0x180067f30)
  • wcscpy_s (Address: 0x180067ee8)
  • wcstok (Address: 0x180067ed0)
ntdll.dll
  • EtwEventRegister (Address: 0x180067f90)
  • EtwEventUnregister (Address: 0x180067f88)
  • EtwEventWrite (Address: 0x180067f48)
  • EtwGetTraceEnableFlags (Address: 0x180067fa8)
  • EtwGetTraceEnableLevel (Address: 0x180067fb0)
  • EtwGetTraceLoggerHandle (Address: 0x180067fb8)
  • EtwRegisterTraceGuidsW (Address: 0x180067fa0)
  • EtwTraceMessage (Address: 0x180067f80)
  • EtwUnregisterTraceGuids (Address: 0x180067f98)
  • RtlCapabilityCheck (Address: 0x180067f58)
  • RtlEqualSid (Address: 0x180067f50)
  • RtlGetCurrentServiceSessionId (Address: 0x180067f68)
  • RtlInitUnicodeString (Address: 0x180067f60)
  • RtlIpv4AddressToStringW (Address: 0x180067f40)
  • RtlIpv4StringToAddressW (Address: 0x180067f78)
  • RtlIpv6AddressToStringW (Address: 0x180067fc0)
  • RtlIpv6StringToAddressW (Address: 0x180067f70)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x180067960)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x180067970)
  • CStdStubBuffer_DebugServerRelease (Address: 0x180067908)
  • CStdStubBuffer_Invoke (Address: 0x180067948)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1800678f0)
  • IUnknown_AddRef_Proxy (Address: 0x180067978)
  • IUnknown_QueryInterface_Proxy (Address: 0x180067900)
  • IUnknown_Release_Proxy (Address: 0x180067958)
  • Ndr64AsyncClientCall (Address: 0x1800678c8)
  • NdrClientCall3 (Address: 0x1800678e0)
  • NdrCStdStubBuffer2_Release (Address: 0x180067920)
  • NdrDllCanUnloadNow (Address: 0x180067940)
  • NdrDllGetClassObject (Address: 0x180067938)
  • NdrDllRegisterProxy (Address: 0x180067930)
  • NdrDllUnregisterProxy (Address: 0x180067928)
  • NdrOleAllocate (Address: 0x180067910)
  • NdrOleFree (Address: 0x180067968)
  • NdrStubCall3 (Address: 0x1800678a0)
  • NdrStubForwardingFunction (Address: 0x180067950)
  • RpcAsyncCancelCall (Address: 0x1800678d8)
  • RpcAsyncCompleteCall (Address: 0x1800678c0)
  • RpcAsyncInitializeHandle (Address: 0x1800678f8)
  • RpcBindingFree (Address: 0x180067918)
  • RpcBindingFromStringBindingW (Address: 0x1800678b0)
  • RpcBindingSetAuthInfoExW (Address: 0x1800678d0)
  • RpcBindingSetOption (Address: 0x1800678a8)
  • RpcEpResolveBinding (Address: 0x1800678e8)
  • RpcStringBindingComposeW (Address: 0x1800678b8)
  • RpcStringFreeW (Address: 0x180067898)
  • UuidCreate (Address: 0x180067888)
  • UuidToStringW (Address: 0x180067890)