webengine.dll

Description: Microsoft ASP.NET Support DLL

Version: 2.0.50727.9174

Architecture: 32-bit

Operating System: Windows

SHA256: 9d7f5e8466d14add7d334408aa718b46

File Size: 430.4 KB

Uploaded At: Dec. 1, 2025, 8:48 a.m.

Views: 24

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread

Exported Functions

??0BUFFER@@QAE@I@Z (Ordinal: 1, Address: 0x4a9f9)
??0BUFFER@@QAE@PAEI@Z (Ordinal: 2, Address: 0x131c7)
??0BUFFER_CHAIN@@QAE@XZ (Ordinal: 3, Address: 0x4aef8)
??0BUFFER_CHAIN_ITEM@@QAE@I@Z (Ordinal: 4, Address: 0x4ae8a)
??0CCritSec@@QAE@XZ (Ordinal: 5, Address: 0x4ced9)
??0CFakeLock@@QAE@XZ (Ordinal: 6, Address: 0x4b82c)
??0CReaderWriterLock2@@QAE@XZ (Ordinal: 7, Address: 0x4bf8f)
??0CReaderWriterLock3@@QAE@XZ (Ordinal: 8, Address: 0x4c1e5)
??0CReaderWriterLock@@QAE@XZ (Ordinal: 9, Address: 0x4c1e5)
??0CRtlResource@@QAE@XZ (Ordinal: 10, Address: 0x4caf8)
??0CShareLock@@QAE@XZ (Ordinal: 11, Address: 0x4bbcb)
??0CSharelock@@QAE@HH@Z (Ordinal: 12, Address: 0x4d18b)
??0CSmallSpinLock@@QAE@XZ (Ordinal: 13, Address: 0x4bf8f)
??0CSpinLock@@QAE@XZ (Ordinal: 14, Address: 0x4bf8f)
??0STRA@@AAE@ABV0@@Z (Ordinal: 15, Address: 0x4b350)
??0STRA@@AAE@PAD@Z (Ordinal: 16, Address: 0x4b350)
??0STRA@@AAE@PBD@Z (Ordinal: 17, Address: 0x4b350)
??0STRA@@QAE@PADK@Z (Ordinal: 18, Address: 0x4ab57)
??0STRA@@QAE@XZ (Ordinal: 19, Address: 0x4b47a)
??0STRAU@@QAE@AAV0@@Z (Ordinal: 20, Address: 0x4e06d)
??0STRAU@@QAE@PBD@Z (Ordinal: 21, Address: 0x4d920)
??0STRAU@@QAE@PBDH@Z (Ordinal: 22, Address: 0x4d95e)
??0STRAU@@QAE@PBG@Z (Ordinal: 23, Address: 0x4d9a8)
??0STRAU@@QAE@XZ (Ordinal: 24, Address: 0x4d664)
??0STRU@@AAE@ABV0@@Z (Ordinal: 25, Address: 0x4b350)
??0STRU@@AAE@PAG@Z (Ordinal: 26, Address: 0x4b350)
??0STRU@@AAE@PBG@Z (Ordinal: 27, Address: 0x4b350)
??0STRU@@QAE@PAGK@Z (Ordinal: 28, Address: 0x131eb)
??0STRU@@QAE@XZ (Ordinal: 29, Address: 0x4b360)
??0TS_RESOURCE@@QAE@XZ (Ordinal: 30, Address: 0x4b9b5)
??1BUFFER@@QAE@XZ (Ordinal: 31, Address: 0x4aa2d)
??1BUFFER_CHAIN@@QAE@XZ (Ordinal: 32, Address: 0x4af00)
??1BUFFER_CHAIN_ITEM@@QAE@XZ (Ordinal: 33, Address: 0x4aea7)
??1CCritSec@@QAE@XZ (Ordinal: 34, Address: 0x4b8c4)
??1CFakeLock@@QAE@XZ (Ordinal: 35, Address: 0x112d1)
??1CReaderWriterLock2@@QAE@XZ (Ordinal: 36, Address: 0x112d1)
??1CReaderWriterLock3@@QAE@XZ (Ordinal: 37, Address: 0x112d1)
??1CReaderWriterLock@@QAE@XZ (Ordinal: 38, Address: 0x112d1)
??1CRtlResource@@QAE@XZ (Ordinal: 39, Address: 0x4b9c2)
??1CShareLock@@QAE@XZ (Ordinal: 40, Address: 0x4bcb7)
??1CSharelock@@QAE@XZ (Ordinal: 41, Address: 0x4d41a)
??1CSmallSpinLock@@QAE@XZ (Ordinal: 42, Address: 0x112d1)
??1CSpinLock@@QAE@XZ (Ordinal: 43, Address: 0x112d1)
??1STRA@@QAE@XZ (Ordinal: 44, Address: 0x4aa2d)
??1STRAU@@QAE@XZ (Ordinal: 45, Address: 0x4d6ba)
??1STRU@@QAE@XZ (Ordinal: 46, Address: 0x4aa2d)
??1TS_RESOURCE@@QAE@XZ (Ordinal: 47, Address: 0x4b9c2)
??2BUFFER_CHAIN_ITEM@@SGPAXI@Z (Ordinal: 48, Address: 0x4aec3)
??3BUFFER_CHAIN_ITEM@@SGXPAX@Z (Ordinal: 49, Address: 0x4aed5)
??4?$CLockBase@$00$00$02$00$02$01@@QAEAAV0@ABV0@@Z (Ordinal: 50, Address: 0x4bf14)
??4?$CLockBase@$01$00$00$00$02$01@@QAEAAV0@ABV0@@Z (Ordinal: 51, Address: 0x4bf14)
??4?$CLockBase@$02$00$00$00$00$00@@QAEAAV0@ABV0@@Z (Ordinal: 52, Address: 0x4bf14)
??4?$CLockBase@$03$00$00$01$02$02@@QAEAAV0@ABV0@@Z (Ordinal: 53, Address: 0x4bf14)
??4?$CLockBase@$04$01$00$01$02$02@@QAEAAV0@ABV0@@Z (Ordinal: 54, Address: 0x4bf14)
??4?$CLockBase@$05$01$00$01$02$02@@QAEAAV0@ABV0@@Z (Ordinal: 55, Address: 0x4bf14)
??4?$CLockBase@$06$01$01$00$02$01@@QAEAAV0@ABV0@@Z (Ordinal: 56, Address: 0x4bf14)
??4?$CLockBase@$07$01$01$00$02$01@@QAEAAV0@ABV0@@Z (Ordinal: 57, Address: 0x4bf14)
??4?$CLockBase@$08$01$00$00$02$01@@QAEAAV0@ABV0@@Z (Ordinal: 58, Address: 0x4bf14)
??4BUFFER@@QAEAAV0@ABV0@@Z (Ordinal: 59, Address: 0x4ae6b)
??4BUFFER_CHAIN@@QAEAAV0@ABV0@@Z (Ordinal: 60, Address: 0x4af05)
??4BUFFER_CHAIN_ITEM@@QAEAAV0@ABV0@@Z (Ordinal: 61, Address: 0x4ba06)
??4CCritSec@@QAEAAV0@ABV0@@Z (Ordinal: 62, Address: 0x4b99e)
??4CFakeLock@@QAEAAV0@ABV0@@Z (Ordinal: 63, Address: 0x4bf14)
??4CReaderWriterLock2@@QAEAAV0@ABV0@@Z (Ordinal: 64, Address: 0x4b81c)
??4CReaderWriterLock3@@QAEAAV0@ABV0@@Z (Ordinal: 65, Address: 0x4af05)
??4CReaderWriterLock@@QAEAAV0@ABV0@@Z (Ordinal: 66, Address: 0x4af05)
??4CRtlResource@@QAEAAV0@ABV0@@Z (Ordinal: 67, Address: 0x4ba06)
??4CSmallSpinLock@@QAEAAV0@ABV0@@Z (Ordinal: 68, Address: 0x4b81c)
??4CSpinLock@@QAEAAV0@ABV0@@Z (Ordinal: 69, Address: 0x4b81c)
??4STRA@@AAEAAV0@ABV0@@Z (Ordinal: 70, Address: 0x4bf14)
??4STRAU@@QAEAAV0@ABV0@@Z (Ordinal: 71, Address: 0x4d64d)
??4STRU@@AAEAAV0@ABV0@@Z (Ordinal: 72, Address: 0x4bf14)
??4TS_RESOURCE@@QAEAAV0@ABV0@@Z (Ordinal: 73, Address: 0x4ba06)
??_FBUFFER@@QAEXXZ (Ordinal: 74, Address: 0x4ae82)
??_FBUFFER_CHAIN_ITEM@@QAEXXZ (Ordinal: 75, Address: 0x4aef0)
??_FCSharelock@@QAEXXZ (Ordinal: 76, Address: 0x4bae5)
?ActiveUsers@CSharelock@@QAEHXZ (Ordinal: 77, Address: 0x4bae1)
AppDomainRestart (Ordinal: 78, Address: 0x49531)
?Append@STRA@@QAEJABV1@@Z (Ordinal: 79, Address: 0x4b126)
?Append@STRA@@QAEJPBD@Z (Ordinal: 80, Address: 0x4ab8c)
?Append@STRA@@QAEJPBDK@Z (Ordinal: 81, Address: 0x4b0fe)
?Append@STRAU@@QAEHAAV1@@Z (Ordinal: 82, Address: 0x4e0ec)
?Append@STRAU@@QAEHPBD@Z (Ordinal: 83, Address: 0x4de0d)
?Append@STRAU@@QAEHPBDK@Z (Ordinal: 84, Address: 0x4de6e)
?Append@STRAU@@QAEHPBG@Z (Ordinal: 85, Address: 0x4de3b)
?Append@STRAU@@QAEHPBGK@Z (Ordinal: 86, Address: 0x4de8d)
?Append@STRU@@QAEJABV1@@Z (Ordinal: 87, Address: 0x4af90)
?Append@STRU@@QAEJG@Z (Ordinal: 88, Address: 0x4afbc)
?Append@STRU@@QAEJPBG@Z (Ordinal: 89, Address: 0x4af2a)
?Append@STRU@@QAEJPBGK@Z (Ordinal: 90, Address: 0x4af64)
?AppendA@STRU@@QAEJPBD@Z (Ordinal: 91, Address: 0x4aff0)
?AppendA@STRU@@QAEJPBDK@Z (Ordinal: 92, Address: 0x4afd6)
?AppendBuffer@BUFFER_CHAIN@@QAEHPAVBUFFER_CHAIN_ITEM@@@Z (Ordinal: 93, Address: 0x4e2a4)
?AppendW@STRA@@QAEJPBG@Z (Ordinal: 94, Address: 0x4b14d)
?AppendW@STRA@@QAEJPBGK@Z (Ordinal: 95, Address: 0x4b179)
?AppendWTruncate@STRA@@QAEJPBG@Z (Ordinal: 96, Address: 0x4b1a9)
?AppendWTruncate@STRA@@QAEJPBGK@Z (Ordinal: 97, Address: 0x4b191)
AspCompatIsApartmentComponent (Ordinal: 98, Address: 0x195eb)
AspCompatOnPageEnd (Ordinal: 99, Address: 0x1a1bc)
AspCompatOnPageStart (Ordinal: 100, Address: 0x1a14b)
AspCompatProcessRequest (Ordinal: 101, Address: 0x1a2df)
AspnetLoadResourceDLL (Ordinal: 102, Address: 0x277db)
AttachDebugger (Ordinal: 103, Address: 0x209d7)
?AuxAppend@STRA@@AAEJPBEKKH@Z (Ordinal: 104, Address: 0x4e44d)
?AuxAppend@STRAU@@AAEHPBDIH@Z (Ordinal: 105, Address: 0x4d9e6)
?AuxAppend@STRAU@@AAEHPBGIH@Z (Ordinal: 106, Address: 0x4db62)
?AuxAppend@STRU@@AAEJPBEKKH@Z (Ordinal: 107, Address: 0x4f11b)
?AuxAppendA@STRU@@AAEJPBEKKH@Z (Ordinal: 108, Address: 0x4f1c4)
?AuxAppendW@STRA@@AAEJPBGKKH@Z (Ordinal: 109, Address: 0x4e4f9)
?AuxAppendWTruncate@STRA@@AAEJPBGKKH@Z (Ordinal: 110, Address: 0x4e5df)
?AuxInit@STRAU@@AAEXPBD@Z (Ordinal: 111, Address: 0x4d6da)
?AuxInit@STRAU@@AAEXPBG@Z (Ordinal: 112, Address: 0x4d74b)
BufferPoolGetBuffer (Ordinal: 113, Address: 0xa360)
BufferPoolGetPool (Ordinal: 114, Address: 0xc426)
BufferPoolReleaseBuffer (Ordinal: 115, Address: 0xa0a0)
?CalcTotalSize@BUFFER_CHAIN@@QBEKH@Z (Ordinal: 116, Address: 0x4e2c1)
CallCryptUnProtectData (Ordinal: 117, Address: 0x440d3)
CallManagedProtectedConfigAction (Ordinal: 118, Address: 0x3f569)
ChangeAccessToKeyContainer (Ordinal: 119, Address: 0x441b4)
?ChangeExclusiveLockToSharedLock@CSharelock@@QAEXXZ (Ordinal: 120, Address: 0x9a26)
?ChangeSharedLockToExclusiveLock@CSharelock@@QAEEH@Z (Ordinal: 121, Address: 0x4baf5)
CheckIISState (Ordinal: 122, Address: 0x32ea1)
?ClaimExclusiveLock@CSharelock@@QAEEH@Z (Ordinal: 123, Address: 0x4bb1f)
?ClaimShareLock@CSharelock@@QAEEH@Z (Ordinal: 124, Address: 0x4bb54)
?ClassName@CCritSec@@SGPBGXZ (Ordinal: 125, Address: 0x4b984)
?ClassName@CFakeLock@@SGPBGXZ (Ordinal: 126, Address: 0x4b8a7)
?ClassName@CReaderWriterLock2@@SGPBGXZ (Ordinal: 127, Address: 0x4c110)
?ClassName@CReaderWriterLock3@@SGPBGXZ (Ordinal: 128, Address: 0x4c3d9)
?ClassName@CReaderWriterLock@@SGPBGXZ (Ordinal: 129, Address: 0x4bee8)
?ClassName@CRtlResource@@SGPBDXZ (Ordinal: 130, Address: 0x4bacc)
?ClassName@CShareLock@@SGPBDXZ (Ordinal: 131, Address: 0x4bca3)
?ClassName@CSmallSpinLock@@SGPBGXZ (Ordinal: 132, Address: 0x4b685)
?ClassName@CSpinLock@@SGPBGXZ (Ordinal: 133, Address: 0x4b7ff)
?Clone@STRA@@QBEJPAV1@@Z (Ordinal: 134, Address: 0x4b333)
?Convert@TS_RESOURCE@@QAEXW4TSRES_CONV_TYPE@@@Z (Ordinal: 135, Address: 0x4b9e5)
?ConvertExclusiveToShared@CCritSec@@QAEXXZ (Ordinal: 136, Address: 0x112d1)
?ConvertExclusiveToShared@CFakeLock@@QAEXXZ (Ordinal: 137, Address: 0x112d1)
?ConvertExclusiveToShared@CReaderWriterLock2@@QAEXXZ (Ordinal: 138, Address: 0x4c063)
?ConvertExclusiveToShared@CReaderWriterLock3@@QAEXXZ (Ordinal: 139, Address: 0x4c316)
?ConvertExclusiveToShared@CReaderWriterLock@@QAEXXZ (Ordinal: 140, Address: 0x4be47)
?ConvertExclusiveToShared@CRtlResource@@QAEXXZ (Ordinal: 141, Address: 0x4ba54)
?ConvertExclusiveToShared@CShareLock@@QAEXXZ (Ordinal: 142, Address: 0x9a26)
?ConvertExclusiveToShared@CSmallSpinLock@@QAEXXZ (Ordinal: 143, Address: 0x112d1)
?ConvertExclusiveToShared@CSpinLock@@QAEXXZ (Ordinal: 144, Address: 0x112d1)
?ConvertSharedToExclusive@CCritSec@@QAEXXZ (Ordinal: 145, Address: 0x112d1)
?ConvertSharedToExclusive@CFakeLock@@QAEXXZ (Ordinal: 146, Address: 0x112d1)
?ConvertSharedToExclusive@CReaderWriterLock2@@QAEXXZ (Ordinal: 147, Address: 0x4cf38)
?ConvertSharedToExclusive@CReaderWriterLock3@@QAEXXZ (Ordinal: 148, Address: 0x4d129)
?ConvertSharedToExclusive@CReaderWriterLock@@QAEXXZ (Ordinal: 149, Address: 0x4cbaa)
?ConvertSharedToExclusive@CRtlResource@@QAEXXZ (Ordinal: 150, Address: 0x4ba4d)
?ConvertSharedToExclusive@CShareLock@@QAEXXZ (Ordinal: 151, Address: 0x4bc17)
?ConvertSharedToExclusive@CSmallSpinLock@@QAEXXZ (Ordinal: 152, Address: 0x112d1)
?ConvertSharedToExclusive@CSpinLock@@QAEXXZ (Ordinal: 153, Address: 0x112d1)
CookieAuthConstructTicket (Ordinal: 154, Address: 0xb90a)
CookieAuthParseTicket (Ordinal: 155, Address: 0xb73a)
?Copy@STRA@@QAEJABV1@@Z (Ordinal: 156, Address: 0x4b22f)
?Copy@STRA@@QAEJPBD@Z (Ordinal: 157, Address: 0x4b1d5)
?Copy@STRA@@QAEJPBDK@Z (Ordinal: 158, Address: 0x4b207)
?Copy@STRAU@@QAEHAAV1@@Z (Ordinal: 159, Address: 0x4e15e)
?Copy@STRAU@@QAEHPBD@Z (Ordinal: 160, Address: 0x4df22)
?Copy@STRAU@@QAEHPBDK@Z (Ordinal: 161, Address: 0x4deac)
?Copy@STRAU@@QAEHPBG@Z (Ordinal: 162, Address: 0x4df43)
?Copy@STRAU@@QAEHPBGK@Z (Ordinal: 163, Address: 0x4dedf)
?Copy@STRU@@QAEJABV1@@Z (Ordinal: 164, Address: 0x4b078)
?Copy@STRU@@QAEJPBG@Z (Ordinal: 165, Address: 0x4b019)
?Copy@STRU@@QAEJPBGK@Z (Ordinal: 166, Address: 0x4b052)
?Copy@STRU@@QAEJPBV1@@Z (Ordinal: 167, Address: 0x4b078)
?CopyA@STRU@@QAEJPBD@Z (Ordinal: 168, Address: 0x4b095)
?CopyA@STRU@@QAEJPBDK@Z (Ordinal: 169, Address: 0x4b0ba)
?CopyBinary@STRA@@QAEJPAXK@Z (Ordinal: 170, Address: 0x4ee57)
?CopyToBuffer@STRA@@QBEJPADPAK@Z (Ordinal: 171, Address: 0x4e94e)
?CopyToBuffer@STRU@@QBEJPAGPAK@Z (Ordinal: 172, Address: 0x4f285)
?CopyW@STRA@@QAEJPBG@Z (Ordinal: 173, Address: 0x4b24a)
?CopyW@STRA@@QAEJPBGK@Z (Ordinal: 174, Address: 0x4b27e)
?CopyWToUTF8Escaped@STRA@@QAEJABVSTRU@@@Z (Ordinal: 175, Address: 0x4f081)
?CopyWToUTF8Escaped@STRA@@QAEJPBG@Z (Ordinal: 176, Address: 0x4b2c7)
?CopyWToUTF8Escaped@STRA@@QAEJPBGK@Z (Ordinal: 177, Address: 0x4f056)
?CopyWToUTF8Unescaped@STRA@@QAEJABVSTRU@@@Z (Ordinal: 178, Address: 0x4e992)
?CopyWToUTF8Unescaped@STRA@@QAEJPBG@Z (Ordinal: 179, Address: 0x4b2ed)
?CopyWToUTF8Unescaped@STRA@@QAEJPBGK@Z (Ordinal: 180, Address: 0x4e692)
?CopyWTruncate@STRA@@QAEJPBG@Z (Ordinal: 181, Address: 0x4b29d)
?CopyWTruncate@STRA@@QAEJPBGK@Z (Ordinal: 182, Address: 0x4abbd)
CreateUserToken (Ordinal: 183, Address: 0x45058)
?DeleteChain@BUFFER_CHAIN@@QAEKXZ (Ordinal: 184, Address: 0x4e301)
DirMonClose (Ordinal: 185, Address: 0x235dc)
DirMonOpen (Ordinal: 186, Address: 0xbeb1)
DisplayManagementSettings (Ordinal: 187, Address: 0x3f065)
DisposeAppDomainsIndirect (Ordinal: 188, Address: 0x25ee2)
DoesKeyContainerExist (Ordinal: 189, Address: 0x4438a)
EcbAppendLogParameter (Ordinal: 190, Address: 0x23c6a)
EcbCallISAPI (Ordinal: 191, Address: 0xdc64)
EcbCloseConnection (Ordinal: 192, Address: 0x23cda)
EcbDoneWithSession (Ordinal: 193, Address: 0x9fee)
EcbEmitSimpleTrace (Ordinal: 194, Address: 0x243e9)
EcbEmitWebEventTrace (Ordinal: 195, Address: 0x2462c)
EcbExecuteUrlUnicode (Ordinal: 196, Address: 0x24123)
EcbFlushCore (Ordinal: 197, Address: 0xa5f5)
EcbFreeExecUrlEntityInfo (Ordinal: 198, Address: 0x240c8)
EcbGetAdditionalPostedContent (Ordinal: 199, Address: 0x23862)
EcbGetBasics (Ordinal: 200, Address: 0x23952)
EcbGetBasicsContentInfo (Ordinal: 201, Address: 0xad15)
EcbGetChannelBindingToken (Ordinal: 202, Address: 0x2426e)
EcbGetClientCertificate (Ordinal: 203, Address: 0x23da5)
EcbGetExecUrlEntityInfo (Ordinal: 204, Address: 0x240db)
EcbGetImpersonationToken (Ordinal: 205, Address: 0x23d40)
EcbGetPreloadedPostedContent (Ordinal: 206, Address: 0xb637)
EcbGetQueryString (Ordinal: 207, Address: 0xb5b6)
EcbGetQueryStringRawBytes (Ordinal: 208, Address: 0xb53d)
EcbGetServerVariable (Ordinal: 209, Address: 0x238bb)
EcbGetServerVariableByIndex (Ordinal: 210, Address: 0x242c9)
EcbGetTraceContextId (Ordinal: 211, Address: 0xb0f4)
EcbGetTraceFlags (Ordinal: 212, Address: 0xb079)
EcbGetUnicodeServerVariable (Ordinal: 213, Address: 0xa9f1)
EcbGetUnicodeServerVariableByIndex (Ordinal: 214, Address: 0x2392a)
EcbGetUnicodeServerVariables (Ordinal: 215, Address: 0xac5c)
EcbGetVersion (Ordinal: 216, Address: 0xb06c)
EcbGetVirtualPathToken (Ordinal: 217, Address: 0x23d9f)
EcbIsClientConnected (Ordinal: 218, Address: 0x23c8f)
EcbMapUrlToPath (Ordinal: 219, Address: 0x242f1)
EcbMapUrlToPathUnicode (Ordinal: 220, Address: 0x2436b)
EcbWriteBytes (Ordinal: 221, Address: 0x23712)
EcbWriteBytesAsync (Ordinal: 222, Address: 0x23743)
EcbWriteHeaders (Ordinal: 223, Address: 0x236c6)
?Equals@STRA@@QBEHABV1@@Z (Ordinal: 224, Address: 0x4b492)
?Equals@STRA@@QBEHPBD@Z (Ordinal: 225, Address: 0x4b4d6)
?Equals@STRU@@QBEHABV1@@Z (Ordinal: 226, Address: 0x4b379)
?Equals@STRU@@QBEHPBG@Z (Ordinal: 227, Address: 0x4b3c5)
?EqualsNoCase@STRA@@QBEHABV1@@Z (Ordinal: 228, Address: 0x4b521)
?EqualsNoCase@STRA@@QBEHPBD@Z (Ordinal: 229, Address: 0x4b54c)
?EqualsNoCase@STRU@@QBEHABV1@@Z (Ordinal: 230, Address: 0x4b419)
?EqualsNoCase@STRU@@QBEHPBG@Z (Ordinal: 231, Address: 0x4b447)
?Escape@STRA@@QAEJHH@Z (Ordinal: 232, Address: 0x4e9a9)
?Escape@STRU@@QAEJXZ (Ordinal: 233, Address: 0x4f5da)
EtwTraceAspNetRegister (Ordinal: 234, Address: 0x13efa)
EtwTraceAspNetUnregister (Ordinal: 235, Address: 0x1e6c1)
?FormatString@STRA@@QAEJKQAPBDPBDK@Z (Ordinal: 236, Address: 0x4ec9f)
FreeFileSecurityDescriptor (Ordinal: 237, Address: 0x43630)
?FreeMemory@BUFFER@@QAEXXZ (Ordinal: 238, Address: 0x4e27f)
GetAppDomainIndirect (Ordinal: 239, Address: 0x25ecb)
GetConfigurationFromNativeCode (Ordinal: 240, Address: 0x2506d)
GetCredentialFromRegistry (Ordinal: 241, Address: 0x44955)
GetCurrentToken (Ordinal: 242, Address: 0x4355f)
?GetDefaultSpinAdjustmentFactor@CCritSec@@SGNXZ (Ordinal: 243, Address: 0x4b97d)
?GetDefaultSpinAdjustmentFactor@CFakeLock@@SGNXZ (Ordinal: 244, Address: 0x4b8a0)
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SGNXZ (Ordinal: 245, Address: 0x4c109)
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SGNXZ (Ordinal: 246, Address: 0x4c3d2)
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SGNXZ (Ordinal: 247, Address: 0x4bee1)
?GetDefaultSpinAdjustmentFactor@CRtlResource@@SGNXZ (Ordinal: 248, Address: 0x4bac5)
?GetDefaultSpinAdjustmentFactor@CShareLock@@SGNXZ (Ordinal: 249, Address: 0x4bc9c)
?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SGNXZ (Ordinal: 250, Address: 0x4b67e)
?GetDefaultSpinAdjustmentFactor@CSpinLock@@SGNXZ (Ordinal: 251, Address: 0x4b7f8)
?GetDefaultSpinCount@CCritSec@@SGGXZ (Ordinal: 252, Address: 0x4b946)
?GetDefaultSpinCount@CFakeLock@@SGGXZ (Ordinal: 253, Address: 0x4b869)
?GetDefaultSpinCount@CReaderWriterLock2@@SGGXZ (Ordinal: 254, Address: 0x4c0d2)
?GetDefaultSpinCount@CReaderWriterLock3@@SGGXZ (Ordinal: 255, Address: 0x4c39b)
?GetDefaultSpinCount@CReaderWriterLock@@SGGXZ (Ordinal: 256, Address: 0x4be77)
?GetDefaultSpinCount@CRtlResource@@SGGXZ (Ordinal: 257, Address: 0x4ba8e)
?GetDefaultSpinCount@CShareLock@@SGGXZ (Ordinal: 258, Address: 0x4bc32)
?GetDefaultSpinCount@CSmallSpinLock@@SGGXZ (Ordinal: 259, Address: 0x4b614)
?GetDefaultSpinCount@CSpinLock@@SGGXZ (Ordinal: 260, Address: 0x4b7c1)
GetFileHandleForTransmitFile (Ordinal: 261, Address: 0x23812)
GetFileSecurityDescriptor (Ordinal: 262, Address: 0x447af)
GetFileVersionString (Ordinal: 263, Address: 0x496b6)
GetGlobalConfigFullPathW (Ordinal: 264, Address: 0x277ba)
GetGroupsForUser (Ordinal: 265, Address: 0x4446d)
GetHMACSHA1Hash (Ordinal: 266, Address: 0xa41c)
GetIsapiProcessHost (Ordinal: 267, Address: 0x12035)
?GetNewStorage@BUFFER@@AAEHI@Z (Ordinal: 268, Address: 0x4e1ac)
GetRCInstance (Ordinal: 269, Address: 0x276e3)
GetSHA1Hash (Ordinal: 270, Address: 0x49794)
?GetSpinCount@CCritSec@@QBEGXZ (Ordinal: 271, Address: 0x4b946)
?GetSpinCount@CFakeLock@@QBEGXZ (Ordinal: 272, Address: 0x4b832)
?GetSpinCount@CReaderWriterLock2@@QBEGXZ (Ordinal: 273, Address: 0x4c0d2)
?GetSpinCount@CReaderWriterLock3@@QBEGXZ (Ordinal: 274, Address: 0x4c39b)
?GetSpinCount@CReaderWriterLock@@QBEGXZ (Ordinal: 275, Address: 0x4be77)
?GetSpinCount@CRtlResource@@QBEGXZ (Ordinal: 276, Address: 0x4ba8e)
?GetSpinCount@CShareLock@@QBEGXZ (Ordinal: 277, Address: 0x4bc32)
?GetSpinCount@CSmallSpinLock@@QBEGXZ (Ordinal: 278, Address: 0x4b614)
?GetSpinCount@CSpinLock@@QBEGXZ (Ordinal: 279, Address: 0x4b7c1)
GetUserNameFromToken (Ordinal: 280, Address: 0x44db8)
GetXSPHeap (Ordinal: 281, Address: 0x130bc)
GetXSPInstance (Ordinal: 282, Address: 0x1241a)
GrowFileNotificationBuffer (Ordinal: 283, Address: 0x23461)
?HTMLEncode@STRA@@QAEJXZ (Ordinal: 284, Address: 0x4ecf4)
?HTMLEncode@STRU@@QAEJXZ (Ordinal: 285, Address: 0x4f7ee)
InitializeHealthMonitor (Ordinal: 286, Address: 0xdaa6)
InitializeLibrary (Ordinal: 287, Address: 0x114b7)
InitializeManagedCode (Ordinal: 288, Address: 0x25a78)
InstrumentedMutexCreate (Ordinal: 289, Address: 0xea55)
InstrumentedMutexDelete (Ordinal: 290, Address: 0xdb5d)
InstrumentedMutexGetLock (Ordinal: 291, Address: 0xc0b4)
InstrumentedMutexReleaseLock (Ordinal: 292, Address: 0xc064)
InstrumentedMutexSetState (Ordinal: 293, Address: 0x25fce)
InvalidateKernelCache (Ordinal: 294, Address: 0x237ff)
IsAccessToFileAllowed (Ordinal: 295, Address: 0x44861)
IsConfigFileName (Ordinal: 296, Address: 0x24ce9)
?IsCurrentUnicode@STRAU@@QAEHXZ (Ordinal: 297, Address: 0x4d649)
?IsDynAlloced@BUFFER@@ABEHXZ (Ordinal: 298, Address: 0x4a9f2)
?IsEmpty@STRA@@QBEHXZ (Ordinal: 299, Address: 0x4af1b)
?IsEmpty@STRAU@@QAEHXZ (Ordinal: 300, Address: 0x4e0c7)
?IsEmpty@STRU@@QBEHXZ (Ordinal: 301, Address: 0x4af1b)
IsManagedDebuggerConnectedIndirect (Ordinal: 302, Address: 0x25f10)
?IsReadLocked@CCritSec@@QBE_NXZ (Ordinal: 303, Address: 0x4bc14)
?IsReadLocked@CFakeLock@@QBE_NXZ (Ordinal: 304, Address: 0x4bc14)
?IsReadLocked@CReaderWriterLock2@@QBE_NXZ (Ordinal: 305, Address: 0x4c29c)
?IsReadLocked@CReaderWriterLock3@@QBE_NXZ (Ordinal: 306, Address: 0x4c29c)
?IsReadLocked@CReaderWriterLock@@QBE_NXZ (Ordinal: 307, Address: 0x4be22)
?IsReadLocked@CRtlResource@@QBE_NXZ (Ordinal: 308, Address: 0x4bc14)
?IsReadLocked@CShareLock@@QBE_NXZ (Ordinal: 309, Address: 0x4bc14)
?IsReadLocked@CSmallSpinLock@@QBE_NXZ (Ordinal: 310, Address: 0x4b601)
?IsReadLocked@CSpinLock@@QBE_NXZ (Ordinal: 311, Address: 0x4b781)
?IsReadUnlocked@CCritSec@@QBE_NXZ (Ordinal: 312, Address: 0x4bc14)
?IsReadUnlocked@CFakeLock@@QBE_NXZ (Ordinal: 313, Address: 0x4bc14)
?IsReadUnlocked@CReaderWriterLock2@@QBE_NXZ (Ordinal: 314, Address: 0x4c2b9)
?IsReadUnlocked@CReaderWriterLock3@@QBE_NXZ (Ordinal: 315, Address: 0x4c2b9)
?IsReadUnlocked@CReaderWriterLock@@QBE_NXZ (Ordinal: 316, Address: 0x4be3b)
?IsReadUnlocked@CRtlResource@@QBE_NXZ (Ordinal: 317, Address: 0x4bc14)
?IsReadUnlocked@CShareLock@@QBE_NXZ (Ordinal: 318, Address: 0x4bc14)
?IsReadUnlocked@CSmallSpinLock@@QBE_NXZ (Ordinal: 319, Address: 0x4b603)
?IsReadUnlocked@CSpinLock@@QBE_NXZ (Ordinal: 320, Address: 0x4b783)
IsUserInRole (Ordinal: 321, Address: 0x435a7)
?IsValid@BUFFER@@QBEHXZ (Ordinal: 322, Address: 0x4b0f5)
?IsValid@STRA@@QBEHXZ (Ordinal: 323, Address: 0x4b0f5)
?IsValid@STRAU@@QAEHXZ (Ordinal: 324, Address: 0x4d645)
IsValidResource (Ordinal: 325, Address: 0xbc84)
IsVista (Ordinal: 326, Address: 0xc57f)
IsWin8 (Ordinal: 327, Address: 0x2952f)
?IsWriteLocked@CCritSec@@QBE_NXZ (Ordinal: 328, Address: 0x4bc14)
?IsWriteLocked@CFakeLock@@QBE_NXZ (Ordinal: 329, Address: 0x4bc14)
?IsWriteLocked@CReaderWriterLock2@@QBE_NXZ (Ordinal: 330, Address: 0x4c03f)
?IsWriteLocked@CReaderWriterLock3@@QBE_NXZ (Ordinal: 331, Address: 0x4c281)
?IsWriteLocked@CReaderWriterLock@@QBE_NXZ (Ordinal: 332, Address: 0x4be15)
?IsWriteLocked@CRtlResource@@QBE_NXZ (Ordinal: 333, Address: 0x4bc14)
?IsWriteLocked@CShareLock@@QBE_NXZ (Ordinal: 334, Address: 0x4bc14)
?IsWriteLocked@CSmallSpinLock@@QBE_NXZ (Ordinal: 335, Address: 0x4b5eb)
?IsWriteLocked@CSpinLock@@QBE_NXZ (Ordinal: 336, Address: 0x4b781)
?IsWriteUnlocked@CCritSec@@QBE_NXZ (Ordinal: 337, Address: 0x4bc14)
?IsWriteUnlocked@CFakeLock@@QBE_NXZ (Ordinal: 338, Address: 0x4bc14)
?IsWriteUnlocked@CReaderWriterLock2@@QBE_NXZ (Ordinal: 339, Address: 0x4c050)
?IsWriteUnlocked@CReaderWriterLock3@@QBE_NXZ (Ordinal: 340, Address: 0x4c2ae)
?IsWriteUnlocked@CReaderWriterLock@@QBE_NXZ (Ordinal: 341, Address: 0x4be2e)
?IsWriteUnlocked@CRtlResource@@QBE_NXZ (Ordinal: 342, Address: 0x4bc14)
?IsWriteUnlocked@CShareLock@@QBE_NXZ (Ordinal: 343, Address: 0x4bc14)
?IsWriteUnlocked@CSmallSpinLock@@QBE_NXZ (Ordinal: 344, Address: 0x4b603)
?IsWriteUnlocked@CSpinLock@@QBE_NXZ (Ordinal: 345, Address: 0x4b783)
IsapiAppHostGetAppPath (Ordinal: 346, Address: 0x27104)
IsapiAppHostGetNextVirtualSubdir (Ordinal: 347, Address: 0x27197)
IsapiAppHostGetSiteId (Ordinal: 348, Address: 0x27069)
IsapiAppHostGetSiteName (Ordinal: 349, Address: 0x26fd6)
IsapiAppHostGetUncUser (Ordinal: 350, Address: 0x26f2f)
IsapiAppHostIsAppRoot (Ordinal: 351, Address: 0x26354)
IsapiAppHostMapPath (Ordinal: 352, Address: 0x27629)
LoadLibraryUsingFullPath (Ordinal: 353, Address: 0x12998)
LoadResourceString (Ordinal: 354, Address: 0x4986d)
?LoadStringW@STRA@@QAEJKPAUHINSTANCE__@@@Z (Ordinal: 355, Address: 0x4ec30)
?LoadStringW@STRA@@QAEJKPBDK@Z (Ordinal: 356, Address: 0x4eb85)
?Lock@TS_RESOURCE@@QAEXW4TSRES_LOCK_TYPE@@@Z (Ordinal: 357, Address: 0x4b9c9)
?LockType@?$CLockBase@$00$00$02$00$02$01@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 358, Address: 0x4c9f8)
?LockType@?$CLockBase@$01$00$00$00$02$01@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 359, Address: 0x4ca00)
?LockType@?$CLockBase@$02$00$00$00$00$00@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 360, Address: 0x4c9f4)
?LockType@?$CLockBase@$03$00$00$01$02$02@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 361, Address: 0x4c9fc)
?LockType@?$CLockBase@$04$01$00$01$02$02@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 362, Address: 0x4ca04)
?LockType@?$CLockBase@$05$01$00$01$02$02@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 363, Address: 0x4ca08)
?LockType@?$CLockBase@$06$01$01$00$02$01@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 364, Address: 0x4ca0c)
?LockType@?$CLockBase@$07$01$01$00$02$01@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 365, Address: 0x4ca10)
?LockType@?$CLockBase@$08$01$00$00$02$01@@SG?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 366, Address: 0x4ca14)
MgdAbortConnection (Ordinal: 367, Address: 0x503d6)
MgdAllocateRequestMemory (Ordinal: 368, Address: 0x527dc)
MgdAppDomainShutdown (Ordinal: 369, Address: 0x50dfd)
MgdCanDisposeManagedContext (Ordinal: 370, Address: 0x51479)
MgdClearResponse (Ordinal: 371, Address: 0x511da)
MgdCloseConnection (Ordinal: 372, Address: 0x503fc)
MgdDisableKernelCache (Ordinal: 373, Address: 0x507fa)
MgdDisableNotifications (Ordinal: 374, Address: 0x5117a)
MgdDisableUserCache (Ordinal: 375, Address: 0x52a4f)
MgdEmitSimpleTrace (Ordinal: 376, Address: 0x513d4)
MgdEmitWebEventTrace (Ordinal: 377, Address: 0x513fb)
MgdEtwGetTraceConfig (Ordinal: 378, Address: 0x51397)
MgdExecuteUrl (Ordinal: 379, Address: 0x51096)
MgdExplicitFlush (Ordinal: 380, Address: 0x526d8)
MgdFlushCore (Ordinal: 381, Address: 0x5073e)
MgdFlushKernelCache (Ordinal: 382, Address: 0x507d8)
MgdGetAnonymousUserToken (Ordinal: 383, Address: 0x509db)
MgdGetAppCollection (Ordinal: 384, Address: 0x51a6e)
MgdGetAppPathForPath (Ordinal: 385, Address: 0x5149a)
MgdGetApplicationInfo (Ordinal: 386, Address: 0x50c30)
MgdGetBuffer (Ordinal: 387, Address: 0x50db6)
MgdGetBufferPool (Ordinal: 388, Address: 0x50dad)
MgdGetChannelBindingToken (Ordinal: 389, Address: 0x53067)
MgdGetClientCertificate (Ordinal: 390, Address: 0x52826)
MgdGetCookieHeader (Ordinal: 391, Address: 0x50fe3)
MgdGetCurrentModuleIndex (Ordinal: 392, Address: 0x527b4)
MgdGetCurrentModuleName (Ordinal: 393, Address: 0x52d05)
MgdGetCurrentNotification (Ordinal: 394, Address: 0x5113e)
MgdGetFileChunkInfo (Ordinal: 395, Address: 0x52451)
MgdGetHandlerTypeString (Ordinal: 396, Address: 0x50be0)
MgdGetHeaderChanges (Ordinal: 397, Address: 0x52748)
MgdGetLocalPort (Ordinal: 398, Address: 0x50e19)
MgdGetMemoryLimitKB (Ordinal: 399, Address: 0xfa4b)
MgdGetMethod (Ordinal: 400, Address: 0x510db)
MgdGetModuleCollection (Ordinal: 401, Address: 0x52d5d)
MgdGetNextModule (Ordinal: 402, Address: 0x51d0f)
MgdGetNextNotification (Ordinal: 403, Address: 0x5119f)
MgdGetNextVPath (Ordinal: 404, Address: 0x51bc3)
MgdGetPreloadedContent (Ordinal: 405, Address: 0x50cf6)
MgdGetPreloadedSize (Ordinal: 406, Address: 0x50d6f)
MgdGetPrincipal (Ordinal: 407, Address: 0x50ab5)
MgdGetQueryString (Ordinal: 408, Address: 0x5092e)
MgdGetRemotePort (Ordinal: 409, Address: 0x50e66)
MgdGetRequestBasics (Ordinal: 410, Address: 0x50476)
MgdGetRequestTraceGuid (Ordinal: 411, Address: 0x51230)
MgdGetResponseChunks (Ordinal: 412, Address: 0x512c6)
MgdGetServerVarChanges (Ordinal: 413, Address: 0x526fb)
MgdGetServerVariableA (Ordinal: 414, Address: 0x530db)
MgdGetServerVariableW (Ordinal: 415, Address: 0x52b4b)
MgdGetSiteNameFromId (Ordinal: 416, Address: 0x122ae)
MgdGetStatusChanges (Ordinal: 417, Address: 0x5126e)
MgdGetUriPath (Ordinal: 418, Address: 0x50eb3)
MgdGetUserAgent (Ordinal: 419, Address: 0x50f8d)
MgdGetUserToken (Ordinal: 420, Address: 0x50a44)
MgdGetVirtualToken (Ordinal: 421, Address: 0x5098e)
MgdGetVrPathCreds (Ordinal: 422, Address: 0x51848)
MgdHasConfigChanged (Ordinal: 423, Address: 0x527a8)
MgdIndicateCompletion (Ordinal: 424, Address: 0x52b22)
MgdInitNativeConfig (Ordinal: 425, Address: 0x12ae8)
MgdIsClientConnected (Ordinal: 426, Address: 0x50418)
MgdIsCurrentNotificationPost (Ordinal: 427, Address: 0x5115c)
MgdIsHandlerExecutionDenied (Ordinal: 428, Address: 0x50445)
MgdIsInRole (Ordinal: 429, Address: 0x50b84)
MgdIsLastNotification (Ordinal: 430, Address: 0x51458)
MgdIsWithinApp (Ordinal: 431, Address: 0x518be)
MgdMapHandler (Ordinal: 432, Address: 0x52e2a)
MgdMapPathDirect (Ordinal: 433, Address: 0xbcc8)
MgdPostCompletion (Ordinal: 434, Address: 0x50391)
MgdRaiseTraceEvent (Ordinal: 435, Address: 0x50822)
MgdReMapHandler (Ordinal: 436, Address: 0x52302)
MgdReadChunkHandle (Ordinal: 437, Address: 0x5253b)
MgdRegisterEventPriority (Ordinal: 438, Address: 0x508f3)
MgdRegisterEventSubscription (Ordinal: 439, Address: 0x5087a)
MgdResolveSiteName (Ordinal: 440, Address: 0x523f4)
MgdReturnBuffer (Ordinal: 441, Address: 0x50dcd)
MgdRewriteUrl (Ordinal: 442, Address: 0x51039)
MgdSetBadRequestStatus (Ordinal: 443, Address: 0x505ea)
MgdSetKernelCachePolicy (Ordinal: 444, Address: 0x50770)
MgdSetKnownHeader (Ordinal: 445, Address: 0x5061c)
MgdSetManagedHttpContext (Ordinal: 446, Address: 0x503b9)
MgdSetNativeConfiguration (Ordinal: 447, Address: 0x1136d)
MgdSetRemapHandler (Ordinal: 448, Address: 0x523cb)
MgdSetRequestPrincipal (Ordinal: 449, Address: 0x5142b)
MgdSetResponseFilter (Ordinal: 450, Address: 0x52433)
MgdSetServerVariableW (Ordinal: 451, Address: 0x52fd6)
MgdSetStatusW (Ordinal: 452, Address: 0x52bfd)
MgdSetUnknownHeader (Ordinal: 453, Address: 0x506b9)
MgdSyncReadRequest (Ordinal: 454, Address: 0x508b0)
MgdTerminateNativeConfig (Ordinal: 455, Address: 0x51cec)
MonitorGlobalConfigFile (Ordinal: 456, Address: 0x24d25)
?MutexType@?$CLockBase@$00$00$02$00$02$01@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 457, Address: 0x4c9f8)
?MutexType@?$CLockBase@$01$00$00$00$02$01@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 458, Address: 0x4c9f8)
?MutexType@?$CLockBase@$02$00$00$00$00$00@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 459, Address: 0x4c9f8)
?MutexType@?$CLockBase@$03$00$00$01$02$02@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 460, Address: 0x4c9f8)
?MutexType@?$CLockBase@$04$01$00$01$02$02@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 461, Address: 0x4ca00)
?MutexType@?$CLockBase@$05$01$00$01$02$02@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 462, Address: 0x4ca00)
?MutexType@?$CLockBase@$06$01$01$00$02$01@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 463, Address: 0x4ca00)
?MutexType@?$CLockBase@$07$01$01$00$02$01@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 464, Address: 0x4ca00)
?MutexType@?$CLockBase@$08$01$00$00$02$01@@SG?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 465, Address: 0x4ca00)
?NextBuffer@BUFFER_CHAIN@@QAEPAVBUFFER_CHAIN_ITEM@@PAV2@@Z (Ordinal: 466, Address: 0x4e1f2)
PassportCrypt (Ordinal: 467, Address: 0x29263)
PassportCryptIsValid (Ordinal: 468, Address: 0x28330)
PassportCryptPut (Ordinal: 469, Address: 0x282b4)
?PerLockSpin@?$CLockBase@$00$00$02$00$02$01@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 470, Address: 0x4ca00)
?PerLockSpin@?$CLockBase@$01$00$00$00$02$01@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 471, Address: 0x4ca00)
?PerLockSpin@?$CLockBase@$02$00$00$00$00$00@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 472, Address: 0x4c9f8)
?PerLockSpin@?$CLockBase@$03$00$00$01$02$02@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 473, Address: 0x4c9f4)
?PerLockSpin@?$CLockBase@$04$01$00$01$02$02@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 474, Address: 0x4c9f4)
?PerLockSpin@?$CLockBase@$05$01$00$01$02$02@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 475, Address: 0x4c9f4)
?PerLockSpin@?$CLockBase@$06$01$01$00$02$01@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 476, Address: 0x4ca00)
?PerLockSpin@?$CLockBase@$07$01$01$00$02$01@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 477, Address: 0x4ca00)
?PerLockSpin@?$CLockBase@$08$01$00$00$02$01@@SG?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 478, Address: 0x4ca00)
PerfCloseAppCounters (Ordinal: 479, Address: 0x294c4)
PerfCounterInitialize (Ordinal: 480, Address: 0x2952a)
PerfDecrementCounter (Ordinal: 481, Address: 0x9a86)
PerfDecrementGlobalCounter (Ordinal: 482, Address: 0x9fd9)
PerfGetCounter (Ordinal: 483, Address: 0x293a4)
PerfIncrementCounter (Ordinal: 484, Address: 0x9df0)
PerfIncrementCounterEx (Ordinal: 485, Address: 0x9e0c)
PerfIncrementGlobalCounter (Ordinal: 486, Address: 0xb35b)
PerfOpenAppCounters (Ordinal: 487, Address: 0x112d8)
PerfOpenGlobalCounters (Ordinal: 488, Address: 0xfa1c)
PerfOpenStateCounters (Ordinal: 489, Address: 0x294f3)
PerfSetCounter (Ordinal: 490, Address: 0xa2cd)
PerfSetGlobalCounter (Ordinal: 491, Address: 0x294db)
PostThreadPoolWorkItem (Ordinal: 492, Address: 0x47429)
PrintResourceString (Ordinal: 493, Address: 0x49a3b)
PrintResourceStringNoNewLine (Ordinal: 494, Address: 0x49a52)
?PrivateQueryStr@STRAU@@AAEPAGH@Z (Ordinal: 495, Address: 0x4dc65)
?QueryBuffer@STRU@@QAEPAVBUFFER@@XZ (Ordinal: 496, Address: 0x4b82c)
?QueryCB@STRA@@QBEIXZ (Ordinal: 497, Address: 0x4ab79)
?QueryCB@STRAU@@QAEIH@Z (Ordinal: 498, Address: 0x4e145)
?QueryCB@STRU@@QBEIXZ (Ordinal: 499, Address: 0x4af24)
?QueryCBA@STRAU@@QAEIXZ (Ordinal: 500, Address: 0x4df69)
?QueryCBW@STRAU@@QAEIXZ (Ordinal: 501, Address: 0x4df83)
?QueryCCH@STRA@@QBEIXZ (Ordinal: 502, Address: 0x4ab79)
?QueryCCH@STRAU@@QAEIXZ (Ordinal: 503, Address: 0x4df9f)
?QueryCCH@STRU@@QBEIXZ (Ordinal: 504, Address: 0x4ab79)
?QueryPtr@BUFFER@@QBEPAXXZ (Ordinal: 505, Address: 0x4aa38)
?QuerySize@BUFFER@@QBEIXZ (Ordinal: 506, Address: 0x4ab7d)
?QuerySize@STRA@@QBEIXZ (Ordinal: 507, Address: 0x4ab7d)
?QuerySizeCCH@STRA@@QBEIXZ (Ordinal: 508, Address: 0x4ab7d)
?QuerySizeCCH@STRU@@QBEIXZ (Ordinal: 509, Address: 0x4aaf6)
?QueryStr@STRA@@QAEPADXZ (Ordinal: 510, Address: 0x4aa38)
?QueryStr@STRA@@QBEPBDXZ (Ordinal: 511, Address: 0x4aa38)
?QueryStr@STRAU@@QAEPAGH@Z (Ordinal: 512, Address: 0x4dfb9)
?QueryStr@STRU@@QAEPAGXZ (Ordinal: 513, Address: 0x4aa38)
?QueryStr@STRU@@QBEPBGXZ (Ordinal: 514, Address: 0x4aa38)
?QueryStrA@STRAU@@QAEPADXZ (Ordinal: 515, Address: 0x4df12)
?QueryStrW@STRAU@@QAEPAGXZ (Ordinal: 516, Address: 0x4df1a)
?QueryUsed@BUFFER_CHAIN_ITEM@@QBEKXZ (Ordinal: 517, Address: 0x4aedf)
?QueueType@?$CLockBase@$00$00$02$00$02$01@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 518, Address: 0x4c9f4)
?QueueType@?$CLockBase@$01$00$00$00$02$01@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 519, Address: 0x4c9f4)
?QueueType@?$CLockBase@$02$00$00$00$00$00@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 520, Address: 0x4c9f8)
?QueueType@?$CLockBase@$03$00$00$01$02$02@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 521, Address: 0x4c9f4)
?QueueType@?$CLockBase@$04$01$00$01$02$02@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 522, Address: 0x4c9f4)
?QueueType@?$CLockBase@$05$01$00$01$02$02@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 523, Address: 0x4c9f4)
?QueueType@?$CLockBase@$06$01$01$00$02$01@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 524, Address: 0x4c9f4)
?QueueType@?$CLockBase@$07$01$01$00$02$01@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 525, Address: 0x4c9f4)
?QueueType@?$CLockBase@$08$01$00$00$02$01@@SG?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 526, Address: 0x4c9f4)
?ReadLock@CCritSec@@QAEXXZ (Ordinal: 527, Address: 0x4b8cc)
?ReadLock@CFakeLock@@QAEXXZ (Ordinal: 528, Address: 0x112d1)
?ReadLock@CReaderWriterLock2@@QAEXXZ (Ordinal: 529, Address: 0x4cc06)
?ReadLock@CReaderWriterLock3@@QAEXXZ (Ordinal: 530, Address: 0x4cf79)
?ReadLock@CReaderWriterLock@@QAEXXZ (Ordinal: 531, Address: 0x4cb68)
?ReadLock@CRtlResource@@QAEXXZ (Ordinal: 532, Address: 0x4ba26)
?ReadLock@CShareLock@@QAEXXZ (Ordinal: 533, Address: 0x4bbe9)
?ReadLock@CSmallSpinLock@@QAEXXZ (Ordinal: 534, Address: 0x4ca18)
?ReadLock@CSpinLock@@QAEXXZ (Ordinal: 535, Address: 0x4ca8c)
?ReadOrWriteLock@CCritSec@@QAE_NXZ (Ordinal: 536, Address: 0x4b8d4)
?ReadOrWriteLock@CFakeLock@@QAE_NXZ (Ordinal: 537, Address: 0x4bc14)
?ReadOrWriteLock@CReaderWriterLock3@@QAE_NXZ (Ordinal: 538, Address: 0x4d072)
?ReadOrWriteLock@CSpinLock@@QAE_NXZ (Ordinal: 539, Address: 0x4cad6)
?ReadOrWriteUnlock@CCritSec@@QAEX_N@Z (Ordinal: 540, Address: 0x4b909)
?ReadOrWriteUnlock@CFakeLock@@QAEX_N@Z (Ordinal: 541, Address: 0x4b82f)
?ReadOrWriteUnlock@CReaderWriterLock3@@QAEX_N@Z (Ordinal: 542, Address: 0x4c268)
?ReadOrWriteUnlock@CSpinLock@@QAEX_N@Z (Ordinal: 543, Address: 0x4b779)
?ReadUnlock@CCritSec@@QAEXXZ (Ordinal: 544, Address: 0x4b8de)
?ReadUnlock@CFakeLock@@QAEXXZ (Ordinal: 545, Address: 0x112d1)
?ReadUnlock@CReaderWriterLock2@@QAEXXZ (Ordinal: 546, Address: 0x4c00e)
?ReadUnlock@CReaderWriterLock3@@QAEXXZ (Ordinal: 547, Address: 0x4c00e)
?ReadUnlock@CReaderWriterLock@@QAEXXZ (Ordinal: 548, Address: 0x4bdff)
?ReadUnlock@CRtlResource@@QAEXXZ (Ordinal: 549, Address: 0x4b9ff)
?ReadUnlock@CShareLock@@QAEXXZ (Ordinal: 550, Address: 0x4bc12)
?ReadUnlock@CSmallSpinLock@@QAEXXZ (Ordinal: 551, Address: 0x4b5e6)
?ReadUnlock@CSpinLock@@QAEXXZ (Ordinal: 552, Address: 0x4b6f5)
?ReallocStorage@BUFFER@@AAEHI@Z (Ordinal: 553, Address: 0x4e212)
?Recursion@?$CLockBase@$00$00$02$00$02$01@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 554, Address: 0x4c9f4)
?Recursion@?$CLockBase@$01$00$00$00$02$01@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 555, Address: 0x4c9f8)
?Recursion@?$CLockBase@$02$00$00$00$00$00@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 556, Address: 0x4c9f8)
?Recursion@?$CLockBase@$03$00$00$01$02$02@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 557, Address: 0x4c9f8)
?Recursion@?$CLockBase@$04$01$00$01$02$02@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 558, Address: 0x4c9f8)
?Recursion@?$CLockBase@$05$01$00$01$02$02@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 559, Address: 0x4c9f8)
?Recursion@?$CLockBase@$06$01$01$00$02$01@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 560, Address: 0x4ca00)
?Recursion@?$CLockBase@$07$01$01$00$02$01@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 561, Address: 0x4ca00)
?Recursion@?$CLockBase@$08$01$00$00$02$01@@SG?AW4LOCK_RECURSION@@XZ (Ordinal: 562, Address: 0x4c9f8)
RegisterAspNetMMC (Ordinal: 563, Address: 0x3f265)
RegisterModule (Ordinal: 564, Address: 0x565e6)
RegisterScriptMapsEx (Ordinal: 565, Address: 0x33f15)
?ReleaseExclusiveLock@CSharelock@@QAEXXZ (Ordinal: 566, Address: 0x4bb88)
?ReleaseShareLock@CSharelock@@QAEXXZ (Ordinal: 567, Address: 0x4bbad)
?Reset@STRA@@QAEXXZ (Ordinal: 568, Address: 0x4ab81)
?Reset@STRAU@@QAEXXZ (Ordinal: 569, Address: 0x4d692)
?Reset@STRU@@QAEXXZ (Ordinal: 570, Address: 0x4aafc)
?Resize@BUFFER@@QAEHI@Z (Ordinal: 571, Address: 0x4aa3c)
?Resize@BUFFER@@QAEHII@Z (Ordinal: 572, Address: 0x4ae22)
?Resize@STRA@@QAEJK@Z (Ordinal: 573, Address: 0x4ab08)
?Resize@STRU@@QAEJK@Z (Ordinal: 574, Address: 0x4ab08)
?ResizeW@STRAU@@QAEHK@Z (Ordinal: 575, Address: 0x4d6ae)
RolesCreateTicket (Ordinal: 576, Address: 0x43e5d)
RolesParseTicket (Ordinal: 577, Address: 0x43f65)
?SAFE_snwprintf@@YAJPAVSTRU@@PBGZZ (Ordinal: 578, Address: 0x4f527)
?SafeCopy@STRAU@@QAEHPBD@Z (Ordinal: 579, Address: 0x4dcd8)
?SafeCopy@STRAU@@QAEHPBG@Z (Ordinal: 580, Address: 0x4dd70)
?SetDefaultSpinAdjustmentFactor@CCritSec@@SGXN@Z (Ordinal: 581, Address: 0x4b94d)
?SetDefaultSpinAdjustmentFactor@CFakeLock@@SGXN@Z (Ordinal: 582, Address: 0x4b870)
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SGXN@Z (Ordinal: 583, Address: 0x4c0d9)
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SGXN@Z (Ordinal: 584, Address: 0x4c3a2)
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SGXN@Z (Ordinal: 585, Address: 0x4beb1)
?SetDefaultSpinAdjustmentFactor@CRtlResource@@SGXN@Z (Ordinal: 586, Address: 0x4ba95)
?SetDefaultSpinAdjustmentFactor@CShareLock@@SGXN@Z (Ordinal: 587, Address: 0x4bc6c)
?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SGXN@Z (Ordinal: 588, Address: 0x4b64e)
?SetDefaultSpinAdjustmentFactor@CSpinLock@@SGXN@Z (Ordinal: 589, Address: 0x4b7c8)
?SetDefaultSpinCount@CCritSec@@SGXG@Z (Ordinal: 590, Address: 0x4b913)
?SetDefaultSpinCount@CFakeLock@@SGXG@Z (Ordinal: 591, Address: 0x4b836)
?SetDefaultSpinCount@CReaderWriterLock2@@SGXG@Z (Ordinal: 592, Address: 0x4c09f)
?SetDefaultSpinCount@CReaderWriterLock3@@SGXG@Z (Ordinal: 593, Address: 0x4c368)
?SetDefaultSpinCount@CReaderWriterLock@@SGXG@Z (Ordinal: 594, Address: 0x4be7e)
?SetDefaultSpinCount@CRtlResource@@SGXG@Z (Ordinal: 595, Address: 0x4ba5b)
?SetDefaultSpinCount@CShareLock@@SGXG@Z (Ordinal: 596, Address: 0x4bc39)
?SetDefaultSpinCount@CSmallSpinLock@@SGXG@Z (Ordinal: 597, Address: 0x4b61b)
?SetDefaultSpinCount@CSpinLock@@SGXG@Z (Ordinal: 598, Address: 0x4b78e)
?SetLen@STRA@@QAEHK@Z (Ordinal: 599, Address: 0x4b313)
?SetLen@STRAU@@QAEHK@Z (Ordinal: 600, Address: 0x4dfd1)
?SetLen@STRU@@QAEHK@Z (Ordinal: 601, Address: 0x4b0d0)
SetRemoteConfigDCOMRegKeys (Ordinal: 602, Address: 0x4017a)
?SetSpinCount@CCritSec@@QAE_NG@Z (Ordinal: 603, Address: 0x4cae3)
?SetSpinCount@CCritSec@@SGKPAU_RTL_CRITICAL_SECTION@@K@Z (Ordinal: 604, Address: 0x4c80b)
?SetSpinCount@CFakeLock@@QAE_NG@Z (Ordinal: 605, Address: 0x4b60f)
?SetSpinCount@CReaderWriterLock2@@QAE_NG@Z (Ordinal: 606, Address: 0x4b60f)
?SetSpinCount@CReaderWriterLock3@@QAE_NG@Z (Ordinal: 607, Address: 0x4b60f)
?SetSpinCount@CReaderWriterLock@@QAE_NG@Z (Ordinal: 608, Address: 0x4b60f)
?SetSpinCount@CRtlResource@@QAE_NG@Z (Ordinal: 609, Address: 0x4cae3)
?SetSpinCount@CShareLock@@QAE_NG@Z (Ordinal: 610, Address: 0x4bc1f)
?SetSpinCount@CSmallSpinLock@@QAE_NG@Z (Ordinal: 611, Address: 0x4b60f)
?SetSpinCount@CSpinLock@@QAE_NG@Z (Ordinal: 612, Address: 0x4b60f)
?SetUsed@BUFFER_CHAIN_ITEM@@QAEXK@Z (Ordinal: 613, Address: 0x4aee3)
?SetValid@BUFFER@@QAEXH@Z (Ordinal: 614, Address: 0x4ae51)
?SleepWaitingForLock@CSharelock@@AAEEH@Z (Ordinal: 615, Address: 0x4d33e)
?SyncWithBuffer@STRA@@QAEXXZ (Ordinal: 616, Address: 0x4abdc)
?SyncWithBuffer@STRU@@QAEXXZ (Ordinal: 617, Address: 0x4ab3d)
TransactManagedCallback (Ordinal: 618, Address: 0x47adc)
?TryConvertSharedToExclusive@CReaderWriterLock3@@QAE_NXZ (Ordinal: 619, Address: 0x4c2cb)
?TryReadLock@CCritSec@@QAE_NXZ (Ordinal: 620, Address: 0x4cade)
?TryReadLock@CFakeLock@@QAE_NXZ (Ordinal: 621, Address: 0x4bc14)
?TryReadLock@CReaderWriterLock2@@QAE_NXZ (Ordinal: 622, Address: 0x4c172)
?TryReadLock@CReaderWriterLock3@@QAE_NXZ (Ordinal: 623, Address: 0x4c172)
?TryReadLock@CReaderWriterLock@@QAE_NXZ (Ordinal: 624, Address: 0x4bd94)
?TryReadLock@CRtlResource@@QAE_NXZ (Ordinal: 625, Address: 0x4ba3e)
?TryReadLock@CShareLock@@QAE_NXZ (Ordinal: 626, Address: 0x4bbff)
?TryReadLock@CSmallSpinLock@@QAE_NXZ (Ordinal: 627, Address: 0x4b5b5)
?TryReadLock@CSpinLock@@QAE_NXZ (Ordinal: 628, Address: 0x4b73e)
?TryReadOrWriteLock@CReaderWriterLock3@@QAE_NAA_N@Z (Ordinal: 629, Address: 0x4d0cb)
?TryWriteLock@CCritSec@@QAE_NXZ (Ordinal: 630, Address: 0x4c7fe)
?TryWriteLock@CFakeLock@@QAE_NXZ (Ordinal: 631, Address: 0x4bc14)
?TryWriteLock@CReaderWriterLock2@@QAE_NXZ (Ordinal: 632, Address: 0x4bf98)
?TryWriteLock@CReaderWriterLock3@@QAE_NXZ (Ordinal: 633, Address: 0x4ccb9)
?TryWriteLock@CReaderWriterLock@@QAE_NXZ (Ordinal: 634, Address: 0x4bd43)
?TryWriteLock@CRtlResource@@QAE_NXZ (Ordinal: 635, Address: 0x4ba2f)
?TryWriteLock@CShareLock@@QAE_NXZ (Ordinal: 636, Address: 0x4bbf1)
?TryWriteLock@CSmallSpinLock@@QAE_NXZ (Ordinal: 637, Address: 0x4b5b5)
?TryWriteLock@CSpinLock@@QAE_NXZ (Ordinal: 638, Address: 0x4b73e)
UnInitializeManagedCode (Ordinal: 639, Address: 0x25ec6)
?Unescape@STRA@@QAEJXZ (Ordinal: 640, Address: 0x4e6ec)
?Unescape@STRU@@QAEJXZ (Ordinal: 641, Address: 0x4f2cc)
?Unlock@TS_RESOURCE@@QAEXXZ (Ordinal: 642, Address: 0x4b9ff)
UpdateLastActivityTimeForHealthMonitor (Ordinal: 643, Address: 0xa5db)
?UpdateMaxSpins@CSharelock@@QAEEH@Z (Ordinal: 644, Address: 0x4d379)
?UpdateMaxUsers@CSharelock@@QAEEH@Z (Ordinal: 645, Address: 0x4d614)
?VerifyState@BUFFER@@ABEXXZ (Ordinal: 646, Address: 0x112d1)
?WaitForExclusiveLock@CSharelock@@AAEEH@Z (Ordinal: 647, Address: 0x4d4a2)
?WaitForShareLock@CSharelock@@AAEEH@Z (Ordinal: 648, Address: 0x4d568)
?WaitType@?$CLockBase@$00$00$02$00$02$01@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 649, Address: 0x4c9f8)
?WaitType@?$CLockBase@$01$00$00$00$02$01@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 650, Address: 0x4c9f8)
?WaitType@?$CLockBase@$02$00$00$00$00$00@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 651, Address: 0x4c9f8)
?WaitType@?$CLockBase@$03$00$00$01$02$02@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 652, Address: 0x4ca00)
?WaitType@?$CLockBase@$04$01$00$01$02$02@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 653, Address: 0x4ca00)
?WaitType@?$CLockBase@$05$01$00$01$02$02@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 654, Address: 0x4ca00)
?WaitType@?$CLockBase@$06$01$01$00$02$01@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 655, Address: 0x4c9f8)
?WaitType@?$CLockBase@$07$01$01$00$02$01@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 656, Address: 0x4c9f8)
?WaitType@?$CLockBase@$08$01$00$00$02$01@@SG?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 657, Address: 0x4c9f8)
?WakeAllSleepers@CSharelock@@AAEXXZ (Ordinal: 658, Address: 0x4d390)
?WriteLock@CCritSec@@QAEXXZ (Ordinal: 659, Address: 0x4b8cc)
?WriteLock@CFakeLock@@QAEXXZ (Ordinal: 660, Address: 0x112d1)
?WriteLock@CReaderWriterLock2@@QAEXXZ (Ordinal: 661, Address: 0x4cef6)
?WriteLock@CReaderWriterLock3@@QAEXXZ (Ordinal: 662, Address: 0x4cff4)
?WriteLock@CReaderWriterLock@@QAEXXZ (Ordinal: 663, Address: 0x4cb24)
?WriteLock@CRtlResource@@QAEXXZ (Ordinal: 664, Address: 0x4ba1d)
?WriteLock@CShareLock@@QAEXXZ (Ordinal: 665, Address: 0x4bbe1)
?WriteLock@CSmallSpinLock@@QAEXXZ (Ordinal: 666, Address: 0x4ca18)
?WriteLock@CSpinLock@@QAEXXZ (Ordinal: 667, Address: 0x4ca8c)
?WriteUnlock@CCritSec@@QAEXXZ (Ordinal: 668, Address: 0x4b8de)
?WriteUnlock@CFakeLock@@QAEXXZ (Ordinal: 669, Address: 0x112d1)
?WriteUnlock@CReaderWriterLock2@@QAEXXZ (Ordinal: 670, Address: 0x4bfd5)
?WriteUnlock@CReaderWriterLock3@@QAEXXZ (Ordinal: 671, Address: 0x4c1f5)
?WriteUnlock@CReaderWriterLock@@QAEXXZ (Ordinal: 672, Address: 0x4bdcf)
?WriteUnlock@CRtlResource@@QAEXXZ (Ordinal: 673, Address: 0x4b9ff)
?WriteUnlock@CShareLock@@QAEXXZ (Ordinal: 674, Address: 0x4bc0d)
?WriteUnlock@CSmallSpinLock@@QAEXXZ (Ordinal: 675, Address: 0x4c442)
?WriteUnlock@CSpinLock@@QAEXXZ (Ordinal: 676, Address: 0x4b6f5)
?_CmpExch@CReaderWriterLock2@@AAE_NJJ@Z (Ordinal: 677, Address: 0x4bcbc)
?_CmpExch@CReaderWriterLock3@@AAE_NJJ@Z (Ordinal: 678, Address: 0x4bcbc)
?_CmpExch@CReaderWriterLock@@AAE_NJJ@Z (Ordinal: 679, Address: 0x4bcbc)
?_CurrentThreadId@CReaderWriterLock3@@CGJXZ (Ordinal: 680, Address: 0x4b6aa)
?_CurrentThreadId@CSmallSpinLock@@CGJXZ (Ordinal: 681, Address: 0x4b57a)
?_CurrentThreadId@CSpinLock@@CGJXZ (Ordinal: 682, Address: 0x4b6aa)
?_IsLocked@CSpinLock@@ABE_NXZ (Ordinal: 683, Address: 0x4b722)
?_Lock@CSpinLock@@AAEXXZ (Ordinal: 684, Address: 0x4ca58)
?_LockSpin@CReaderWriterLock2@@AAEX_N@Z (Ordinal: 685, Address: 0x4c903)
?_LockSpin@CReaderWriterLock3@@AAEXW4SPIN_TYPE@1@@Z (Ordinal: 686, Address: 0x4cd73)
?_LockSpin@CReaderWriterLock@@AAEX_N@Z (Ordinal: 687, Address: 0x4c815)
?_LockSpin@CSmallSpinLock@@AAEXXZ (Ordinal: 688, Address: 0x4c632)
?_LockSpin@CSpinLock@@AAEXXZ (Ordinal: 689, Address: 0x4c716)
?_ReadLockSpin@CReaderWriterLock2@@AAEXXZ (Ordinal: 690, Address: 0x4cbfe)
?_ReadLockSpin@CReaderWriterLock3@@AAEXW4SPIN_TYPE@1@@Z (Ordinal: 691, Address: 0x4cf70)
?_ReadLockSpin@CReaderWriterLock@@AAEXXZ (Ordinal: 692, Address: 0x4cb1c)
?_TryLock@CSmallSpinLock@@AAE_NXZ (Ordinal: 693, Address: 0x4b580)
?_TryLock@CSpinLock@@AAE_NXZ (Ordinal: 694, Address: 0x4b6b6)
?_TryReadLock@CReaderWriterLock2@@AAE_NXZ (Ordinal: 695, Address: 0x4bf57)
?_TryReadLock@CReaderWriterLock3@@AAE_NXZ (Ordinal: 696, Address: 0x4c172)
?_TryReadLock@CReaderWriterLock@@AAE_NXZ (Ordinal: 697, Address: 0x4bd07)
?_TryReadLockRecursive@CReaderWriterLock3@@AAE_NXZ (Ordinal: 698, Address: 0x4c1a9)
?_TryWriteLock2@CReaderWriterLock3@@AAE_NXZ (Ordinal: 699, Address: 0x4c13e)
?_TryWriteLock@CReaderWriterLock2@@AAE_NJ@Z (Ordinal: 700, Address: 0x4bf19)
?_TryWriteLock@CReaderWriterLock3@@AAE_NJ@Z (Ordinal: 701, Address: 0x4cc44)
?_TryWriteLock@CReaderWriterLock@@AAE_NXZ (Ordinal: 702, Address: 0x4bcde)
?_Unlock@CSpinLock@@AAEXXZ (Ordinal: 703, Address: 0x4b6f5)
?_WriteLockSpin@CReaderWriterLock2@@AAEXXZ (Ordinal: 704, Address: 0x4cd36)
?_WriteLockSpin@CReaderWriterLock3@@AAEXXZ (Ordinal: 705, Address: 0x4cfb7)
?_WriteLockSpin@CReaderWriterLock@@AAEXXZ (Ordinal: 706, Address: 0x4cb14)
?sm_dblDfltSpinAdjFctr@CCritSec@@1NA (Ordinal: 707, Address: 0x5e368)
?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA (Ordinal: 708, Address: 0x5e378)
?sm_dblDfltSpinAdjFctr@CReaderWriterLock2@@1NA (Ordinal: 709, Address: 0x5e3b8)
?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA (Ordinal: 710, Address: 0x5e3c8)
?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA (Ordinal: 711, Address: 0x5e3a8)
?sm_dblDfltSpinAdjFctr@CRtlResource@@1NA (Ordinal: 712, Address: 0x5e388)
?sm_dblDfltSpinAdjFctr@CShareLock@@1NA (Ordinal: 713, Address: 0x5e398)
?sm_dblDfltSpinAdjFctr@CSmallSpinLock@@1NA (Ordinal: 714, Address: 0x5e348)
?sm_dblDfltSpinAdjFctr@CSpinLock@@1NA (Ordinal: 715, Address: 0x5e358)
?sm_wDefaultSpinCount@CCritSec@@1GA (Ordinal: 716, Address: 0x5e360)
?sm_wDefaultSpinCount@CFakeLock@@1GA (Ordinal: 717, Address: 0x5e370)
?sm_wDefaultSpinCount@CReaderWriterLock2@@1GA (Ordinal: 718, Address: 0x5e3b0)
?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA (Ordinal: 719, Address: 0x5e3c0)
?sm_wDefaultSpinCount@CReaderWriterLock@@1GA (Ordinal: 720, Address: 0x5e3a0)
?sm_wDefaultSpinCount@CRtlResource@@1GA (Ordinal: 721, Address: 0x5e380)
?sm_wDefaultSpinCount@CShareLock@@1GA (Ordinal: 722, Address: 0x5e390)
?sm_wDefaultSpinCount@CSmallSpinLock@@1GA (Ordinal: 723, Address: 0x5e340)
?sm_wDefaultSpinCount@CSpinLock@@1GA (Ordinal: 724, Address: 0x5e350)
AspNetGetExtensionVersion (Ordinal: 725, Address: 0x114d8)
AspNetHttpExtensionProc (Ordinal: 726, Address: 0xb370)
AspNetTerminateExtension (Ordinal: 727, Address: 0x25f15)
AttachHandleToThreadPool (Ordinal: 728, Address: 0xbdf0)
ClrQueueUserWorkItem (Ordinal: 729, Address: 0x46f3e)
CopyClientScriptFiles (Ordinal: 730, Address: 0x38bfe)
DBGNDAssert (Ordinal: 731, Address: 0x22e11)
DBGNDIsTagEnabled (Ordinal: 732, Address: 0x47894)
DBGNDIsTagPresent (Ordinal: 733, Address: 0x47894)
DBGNDLaunchCordbg (Ordinal: 734, Address: 0x112d1)
DBGNDMessageBoxOnThread (Ordinal: 735, Address: 0x22fae)
DBGNDTrace (Ordinal: 736, Address: 0x22e11)
DbgpAssert (Ordinal: 737, Address: 0x22fa9)
DbgpDisableAssertThread (Ordinal: 738, Address: 0x22f89)
DbgpIsTagEnabled (Ordinal: 739, Address: 0x47894)
DbgpIsTagPresent (Ordinal: 740, Address: 0x47894)
DbgpTrace (Ordinal: 741, Address: 0x9a83)
DbgpTraceError (Ordinal: 742, Address: 0x22fae)
DbgpTraceV (Ordinal: 743, Address: 0x22fae)
DetectErrorAndGetLogfileName (Ordinal: 744, Address: 0x396a4)
DllRegisterServer (Ordinal: 745, Address: 0x4070e)
DllUnregisterServer (Ordinal: 746, Address: 0x4073e)
DrainThreadPool (Ordinal: 747, Address: 0x46e9c)
GetDirMonConfiguration (Ordinal: 748, Address: 0x13ba8)
GetEcb (Ordinal: 749, Address: 0xb05f)
GetEtwValues (Ordinal: 750, Address: 0x1f54a)
GetExistingVersion (Ordinal: 751, Address: 0x39676)
GetPrivateBytesIIS6 (Ordinal: 752, Address: 0xc14f)
GetProcessMemoryInformation (Ordinal: 753, Address: 0x2a038)
GetW3WPMemoryLimitInKB (Ordinal: 754, Address: 0x2bd71)
GrantAccessToUserAccount (Ordinal: 755, Address: 0x38deb)
GrantAccessToUserAccountOnVista (Ordinal: 756, Address: 0x38d11)
HardBreak (Ordinal: 757, Address: 0x22ec0)
InitializeWmiManager (Ordinal: 758, Address: 0x49408)
InstallMOF (Ordinal: 759, Address: 0x3dc13)
InstallServices (Ordinal: 760, Address: 0x3e79d)
Is64Installed (Ordinal: 761, Address: 0x38363)
IsMatchingBitness (Ordinal: 762, Address: 0x33500)
IsRegisteredInProc (Ordinal: 763, Address: 0x3382e)
IsWow64 (Ordinal: 764, Address: 0x38348)
ListAspnetInstalledIISKeys (Ordinal: 765, Address: 0x38be3)
ListAspnetInstalledVersions (Ordinal: 766, Address: 0x38bc8)
LogWebeventProviderFailure (Ordinal: 767, Address: 0x48265)
MessageBoxOnThread (Ordinal: 768, Address: 0x22f11)
PassportAuthURL2 (Ordinal: 769, Address: 0x28ae9)
PassportAuthURL (Ordinal: 770, Address: 0x28ab8)
PassportCommit (Ordinal: 771, Address: 0x28b1a)
PassportCreate (Ordinal: 772, Address: 0x2835d)
PassportCreateHttpRaw (Ordinal: 773, Address: 0x27b44)
PassportDestroy (Ordinal: 774, Address: 0x28067)
PassportDomainFromMemberName (Ordinal: 775, Address: 0x28ba8)
PassportGetCurrentConfig (Ordinal: 776, Address: 0x2813c)
PassportGetDomainAttribute (Ordinal: 777, Address: 0x28c61)
PassportGetError (Ordinal: 778, Address: 0x27d3e)
PassportGetFromNetworkServer (Ordinal: 779, Address: 0x27d6b)
PassportGetHasSavedPassword (Ordinal: 780, Address: 0x27e51)
PassportGetLoginChallenge (Ordinal: 781, Address: 0x28e3b)
PassportGetOption (Ordinal: 782, Address: 0x281c3)
PassportGetProfile (Ordinal: 783, Address: 0x27f93)
PassportGetProfileString (Ordinal: 784, Address: 0x28d54)
PassportGetTicketAge (Ordinal: 785, Address: 0x28013)
PassportGetTimeSinceSignIn (Ordinal: 786, Address: 0x2803d)
PassportHasConsent (Ordinal: 787, Address: 0x27ead)
PassportHasFlag (Ordinal: 788, Address: 0x27e02)
PassportHasProfile (Ordinal: 789, Address: 0x27d9b)
PassportHasTicket (Ordinal: 790, Address: 0x27e7f)
PassportHexPUID (Ordinal: 791, Address: 0x2903f)
PassportIsAuthenticated (Ordinal: 792, Address: 0x27eee)
PassportLogoTag2 (Ordinal: 793, Address: 0x28a86)
PassportLogoTag (Ordinal: 794, Address: 0x28a54)
PassportLogoutURL (Ordinal: 795, Address: 0x290f0)
PassportPutProfile (Ordinal: 796, Address: 0x27fcc)
PassportPutProfileString (Ordinal: 797, Address: 0x28070)
PassportSetOption (Ordinal: 798, Address: 0x28236)
PassportTicket (Ordinal: 799, Address: 0x280b5)
PassportVersion (Ordinal: 800, Address: 0x279a8)
PostThreadPoolCompletion (Ordinal: 801, Address: 0xb4bf)
PrintStringToStdOut (Ordinal: 802, Address: 0x49922)
RaiseEventlogEvent (Ordinal: 803, Address: 0x4823c)
RaiseFileMonitoringEventlogEvent (Ordinal: 804, Address: 0x482b6)
RaiseWmiEvent (Ordinal: 805, Address: 0x493ae)
RegisterAspNet (Ordinal: 806, Address: 0x4076d)
RegisterAspNetEx (Ordinal: 807, Address: 0x40790)
RegisterScriptMapsOnVista (Ordinal: 808, Address: 0x38cee)
ReleaseWmiEventManager (Ordinal: 809, Address: 0x493a4)
RemoveAspnetFromIISKey (Ordinal: 810, Address: 0x38b5b)
RemoveClientScriptFiles (Ordinal: 811, Address: 0x38c22)
ReportUnhandledException (Ordinal: 812, Address: 0x4829e)
RestrictIISFoldersWithPath (Ordinal: 813, Address: 0x330d4)
RunAspnetCA (Ordinal: 814, Address: 0x3a595)
RunPkgmgr (Ordinal: 815, Address: 0x3a6a2)
RunningOn64Bit (Ordinal: 816, Address: 0x327b6)
SessionNDCloseConnection (Ordinal: 817, Address: 0x465f4)
SessionNDConnectToService (Ordinal: 818, Address: 0x45d09)
SessionNDFreeBody (Ordinal: 819, Address: 0x46e70)
SessionNDMakeRequest (Ordinal: 820, Address: 0x46d8d)
SetClrThreadPoolLimits (Ordinal: 821, Address: 0xf04c)
SetDoneWithSessionCalled (Ordinal: 822, Address: 0x25eff)
SetGCLastCalledTime (Ordinal: 823, Address: 0x2a2c4)
SetMinRequestsExecutingToDetectDeadlock (Ordinal: 824, Address: 0xdae4)
TraceEnabled (Ordinal: 825, Address: 0x1f53c)
TraceRaiseEvent (Ordinal: 826, Address: 0x1ffb6)
TraceRaiseEventMgdHandler (Ordinal: 827, Address: 0x20030)
TraceRaiseEventWithEcb (Ordinal: 828, Address: 0x2000c)
UnregisterAspNet (Ordinal: 829, Address: 0x407b2)
ValidateIISPath (Ordinal: 830, Address: 0x38b76)
XspLogEvent (Ordinal: 831, Address: 0x24cb1)
XspLogEventCateg (Ordinal: 832, Address: 0x24cd2)

Imported DLLs & Functions

KERNEL32.dll

AddAtomW (Address: 0x6a2a10b8)
CloseHandle (Address: 0x6a2a1008)
CompareFileTime (Address: 0x6a2a11ac)
CompareStringW (Address: 0x6a2a1200)
ConnectNamedPipe (Address: 0x6a2a1124)
CopyFileW (Address: 0x6a2a1194)
CreateDirectoryW (Address: 0x6a2a1168)
CreateEventW (Address: 0x6a2a112c)
CreateFileW (Address: 0x6a2a1070)
CreateIoCompletionPort (Address: 0x6a2a11bc)
CreateMutexW (Address: 0x6a2a10d0)
CreateNamedPipeW (Address: 0x6a2a102c)
CreateProcessW (Address: 0x6a2a1138)
CreateRemoteThread (Address: 0x6a2a11c4)
CreateSemaphoreA (Address: 0x6a2a11fc)
CreateSemaphoreW (Address: 0x6a2a1210)
CreateThread (Address: 0x6a2a1080)
CreateTimerQueueTimer (Address: 0x6a2a11e0)
DebugBreak (Address: 0x6a2a1154)
DeleteCriticalSection (Address: 0x6a2a1004)
DeleteFileW (Address: 0x6a2a1170)
DeleteTimerQueueTimer (Address: 0x6a2a11e4)
DisableThreadLibraryCalls (Address: 0x6a2a10f0)
DisconnectNamedPipe (Address: 0x6a2a1120)
DuplicateHandle (Address: 0x6a2a1098)
EnterCriticalSection (Address: 0x6a2a1010)
ExpandEnvironmentStringsW (Address: 0x6a2a11f0)
FindAtomW (Address: 0x6a2a10bc)
FindClose (Address: 0x6a2a110c)
FindFirstFileExW (Address: 0x6a2a111c)
FindFirstFileW (Address: 0x6a2a1110)
FindNextFileW (Address: 0x6a2a1118)
FindResourceW (Address: 0x6a2a1180)
FlushFileBuffers (Address: 0x6a2a11a0)
FormatMessageA (Address: 0x6a2a10b4)
FormatMessageW (Address: 0x6a2a1064)
FreeLibrary (Address: 0x6a2a10c0)
GetComputerNameW (Address: 0x6a2a1160)
GetConsoleMode (Address: 0x6a2a1228)
GetConsoleOutputCP (Address: 0x6a2a10f8)
GetCurrentProcess (Address: 0x6a2a1040)
GetCurrentProcessId (Address: 0x6a2a1044)
GetCurrentThread (Address: 0x6a2a1048)
GetCurrentThreadId (Address: 0x6a2a1078)
GetDateFormatA (Address: 0x6a2a119c)
GetEnvironmentVariableW (Address: 0x6a2a1150)
GetExitCodeProcess (Address: 0x6a2a1130)
GetFileAttributesExW (Address: 0x6a2a1068)
GetFileAttributesW (Address: 0x6a2a115c)
GetFileSize (Address: 0x6a2a10b0)
GetFileSizeEx (Address: 0x6a2a11f8)
GetFileType (Address: 0x6a2a1224)
GetLastError (Address: 0x6a2a1024)
GetLocaleInfoW (Address: 0x6a2a10f4)
GetLongPathNameW (Address: 0x6a2a108c)
GetModuleFileNameW (Address: 0x6a2a109c)
GetModuleHandleA (Address: 0x6a2a11c8)
GetModuleHandleW (Address: 0x6a2a10a0)
GetOverlappedResult (Address: 0x6a2a1038)
GetProcAddress (Address: 0x6a2a10c4)
GetProcessAffinityMask (Address: 0x6a2a1218)
GetProcessHeap (Address: 0x6a2a10ec)
GetQueuedCompletionStatus (Address: 0x6a2a11b8)
GetStdHandle (Address: 0x6a2a1100)
GetSystemDefaultLangID (Address: 0x6a2a1208)
GetSystemDefaultUILanguage (Address: 0x6a2a1108)
GetSystemDirectoryA (Address: 0x6a2a11b4)
GetSystemDirectoryW (Address: 0x6a2a11d0)
GetSystemInfo (Address: 0x6a2a1140)
GetSystemTimeAsFileTime (Address: 0x6a2a1090)
GetSystemWindowsDirectoryW (Address: 0x6a2a1164)
GetTempFileNameW (Address: 0x6a2a1184)
GetTempPathW (Address: 0x6a2a118c)
GetTickCount (Address: 0x6a2a106c)
GetTimeFormatA (Address: 0x6a2a1198)
GetUserDefaultUILanguage (Address: 0x6a2a10fc)
GetVersionExW (Address: 0x6a2a1128)
GetWindowsDirectoryW (Address: 0x6a2a1188)
GlobalAlloc (Address: 0x6a2a10e0)
GlobalFree (Address: 0x6a2a10dc)
GlobalMemoryStatus (Address: 0x6a2a1158)
HeapAlloc (Address: 0x6a2a1054)
HeapCreate (Address: 0x6a2a1050)
HeapFree (Address: 0x6a2a104c)
HeapReAlloc (Address: 0x6a2a1220)
HeapSize (Address: 0x6a2a121c)
InitializeCriticalSection (Address: 0x6a2a1000)
InitializeCriticalSectionAndSpinCount (Address: 0x6a2a10e4)
InterlockedCompareExchange (Address: 0x6a2a1018)
InterlockedDecrement (Address: 0x6a2a1020)
InterlockedExchange (Address: 0x6a2a1084)
InterlockedExchangeAdd (Address: 0x6a2a1114)
InterlockedIncrement (Address: 0x6a2a101c)
LeaveCriticalSection (Address: 0x6a2a1014)
LoadLibraryA (Address: 0x6a2a11b0)
LoadLibraryExW (Address: 0x6a2a1104)
LoadLibraryW (Address: 0x6a2a10c8)
LoadResource (Address: 0x6a2a1178)
LocalAlloc (Address: 0x6a2a116c)
LocalFree (Address: 0x6a2a1094)
LocalReAlloc (Address: 0x6a2a1204)
LockResource (Address: 0x6a2a1174)
lstrcmpW (Address: 0x6a2a11a8)
lstrlenA (Address: 0x6a2a105c)
lstrlenW (Address: 0x6a2a1030)
MultiByteToWideChar (Address: 0x6a2a10ac)
OpenProcess (Address: 0x6a2a1144)
OutputDebugStringA (Address: 0x6a2a1214)
OutputDebugStringW (Address: 0x6a2a1074)
PostQueuedCompletionStatus (Address: 0x6a2a11c0)
QueryPerformanceCounter (Address: 0x6a2a11d4)
RaiseException (Address: 0x6a2a1230)
ReadDirectoryChangesW (Address: 0x6a2a1088)
ReadFile (Address: 0x6a2a1034)
ReadProcessMemory (Address: 0x6a2a11cc)
ReleaseMutex (Address: 0x6a2a10d8)
ReleaseSemaphore (Address: 0x6a2a120c)
RemoveDirectoryW (Address: 0x6a2a11a4)
ResetEvent (Address: 0x6a2a114c)
SetEvent (Address: 0x6a2a1148)
SetLastError (Address: 0x6a2a10cc)
SetUnhandledExceptionFilter (Address: 0x6a2a11dc)
SizeofResource (Address: 0x6a2a117c)
Sleep (Address: 0x6a2a103c)
SwitchToThread (Address: 0x6a2a1058)
TerminateProcess (Address: 0x6a2a113c)
TlsAlloc (Address: 0x6a2a10e8)
TlsFree (Address: 0x6a2a11f4)
TlsGetValue (Address: 0x6a2a10a8)
TlsSetValue (Address: 0x6a2a10a4)
TryEnterCriticalSection (Address: 0x6a2a100c)
UnhandledExceptionFilter (Address: 0x6a2a11d8)
VirtualAlloc (Address: 0x6a2a11ec)
VirtualFree (Address: 0x6a2a11e8)
WaitForMultipleObjects (Address: 0x6a2a1134)
WaitForSingleObject (Address: 0x6a2a107c)
WaitForSingleObjectEx (Address: 0x6a2a10d4)
WideCharToMultiByte (Address: 0x6a2a1060)
WriteConsoleW (Address: 0x6a2a122c)
WriteFile (Address: 0x6a2a1028)
WritePrivateProfileStringW (Address: 0x6a2a1190)

MSVCR80.dll

__clean_type_info_names_internal (Address: 0x6a2a12e0)
__CppXcptFilter (Address: 0x6a2a12c8)
__dllonexit (Address: 0x6a2a12d4)
_adjust_fdiv (Address: 0x6a2a12c4)
_amsg_exit (Address: 0x6a2a12c0)
_atoi64 (Address: 0x6a2a1270)
_beginthread (Address: 0x6a2a133c)
_CxxThrowException (Address: 0x6a2a1294)
_decode_pointer (Address: 0x6a2a12b4)
_encode_pointer (Address: 0x6a2a12a8)
_encoded_null (Address: 0x6a2a12b0)
_errno (Address: 0x6a2a12a0)
_except_handler4_common (Address: 0x6a2a12cc)
_initterm (Address: 0x6a2a12b8)
_initterm_e (Address: 0x6a2a12bc)
_itoa_s (Address: 0x6a2a1268)
_itow_s (Address: 0x6a2a12f8)
_lock (Address: 0x6a2a12d8)
_malloc_crt (Address: 0x6a2a12ac)
_onexit (Address: 0x6a2a12dc)
_purecall (Address: 0x6a2a1300)
_set_error_mode (Address: 0x6a2a1334)
_stricmp (Address: 0x6a2a1324)
_strnicmp (Address: 0x6a2a1320)
_ultoa_s (Address: 0x6a2a1244)
_unlock (Address: 0x6a2a12d0)
_vsnprintf_s (Address: 0x6a2a1240)
_vsnwprintf_s (Address: 0x6a2a1310)
_wcsicmp (Address: 0x6a2a12fc)
_wcslwr (Address: 0x6a2a1288)
_wcsnicmp (Address: 0x6a2a1238)
_wtoi (Address: 0x6a2a1304)
_wtol (Address: 0x6a2a128c)
?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x6a2a12e8)
?terminate@@YAXXZ (Address: 0x6a2a12e4)
atoi (Address: 0x6a2a131c)
bsearch (Address: 0x6a2a1340)
calloc (Address: 0x6a2a1250)
free (Address: 0x6a2a1254)
isdigit (Address: 0x6a2a126c)
iswalnum (Address: 0x6a2a132c)
iswspace (Address: 0x6a2a1330)
iswxdigit (Address: 0x6a2a129c)
isxdigit (Address: 0x6a2a1298)
memchr (Address: 0x6a2a1318)
memcpy (Address: 0x6a2a12f0)
memmove (Address: 0x6a2a1284)
memset (Address: 0x6a2a12f4)
sprintf_s (Address: 0x6a2a1260)
sscanf (Address: 0x6a2a1274)
strcat_s (Address: 0x6a2a1264)
strchr (Address: 0x6a2a1314)
strcpy_s (Address: 0x6a2a124c)
strncmp (Address: 0x6a2a1280)
strncpy_s (Address: 0x6a2a1258)
strrchr (Address: 0x6a2a1290)
strstr (Address: 0x6a2a1248)
strtol (Address: 0x6a2a1278)
strtoul (Address: 0x6a2a125c)
swscanf (Address: 0x6a2a123c)
towlower (Address: 0x6a2a127c)
wcschr (Address: 0x6a2a12ec)
wcsncmp (Address: 0x6a2a130c)
wcsrchr (Address: 0x6a2a1338)
wcsstr (Address: 0x6a2a1308)
wcstok (Address: 0x6a2a1344)
wcstol (Address: 0x6a2a12a4)
wcstoul (Address: 0x6a2a1328)

ntdll.dll

NtQueryInformationProcess (Address: 0x6a2a1358)
NtQueryInformationThread (Address: 0x6a2a134c)
NtQuerySystemInformation (Address: 0x6a2a1350)
RtlCaptureStackBackTrace (Address: 0x6a2a1354)

PSAPI.DLL

GetModuleFileNameExW (Address: 0x6a2a1394)
GetProcessMemoryInfo (Address: 0x6a2a1398)

USER32.dll

CharNextA (Address: 0x6a2a1360)
CharNextExA (Address: 0x6a2a1370)
CharPrevW (Address: 0x6a2a1374)
GetUserObjectSecurity (Address: 0x6a2a1378)
LoadStringA (Address: 0x6a2a136c)
MessageBoxW (Address: 0x6a2a1364)
PeekMessageW (Address: 0x6a2a1368)
SetUserObjectSecurity (Address: 0x6a2a137c)

USERENV.dll

CreateEnvironmentBlock (Address: 0x6a2a1388)
DestroyEnvironmentBlock (Address: 0x6a2a1384)
LoadUserProfileW (Address: 0x6a2a138c)