IKEEXT.DLL

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800d1e98)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800d1ea8)
OutputDebugStringA (Address: 0x1800d1eb0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800d1ec0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800d1ed0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800d1ee0)
SetLastError (Address: 0x1800d1ef0)
SetUnhandledExceptionFilter (Address: 0x1800d1ee8)
UnhandledExceptionFilter (Address: 0x1800d1ef8)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800d1f08)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800d1f20)
DuplicateHandle (Address: 0x1800d1f18)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800d1f30)
HeapAlloc (Address: 0x1800d1f40)
HeapCreate (Address: 0x1800d1f60)
HeapDestroy (Address: 0x1800d1f58)
HeapFree (Address: 0x1800d1f50)
HeapReAlloc (Address: 0x1800d1f38)
HeapSize (Address: 0x1800d1f48)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800d1f70)
LocalFree (Address: 0x1800d1f78)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800d1fb0)
FreeLibrary (Address: 0x1800d1f88)
GetModuleFileNameW (Address: 0x1800d1f90)
GetModuleHandleExW (Address: 0x1800d1fa8)
GetProcAddress (Address: 0x1800d1fa0)
LoadLibraryExW (Address: 0x1800d1f98)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800d1fc0)

api-ms-win-core-perfcounters-l1-1-0.dll

PerfCreateInstance (Address: 0x1800d1ff8)
PerfSetCounterRefValue (Address: 0x1800d1fe0)
PerfSetCounterSetInfo (Address: 0x1800d1fd8)
PerfSetULongCounterValue (Address: 0x1800d1fe8)
PerfStartProvider (Address: 0x1800d1ff0)
PerfStopProvider (Address: 0x1800d1fd0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800d2058)
GetCurrentProcessId (Address: 0x1800d2040)
GetCurrentThread (Address: 0x1800d2020)
GetCurrentThreadId (Address: 0x1800d2018)
GetThreadPriority (Address: 0x1800d2028)
OpenProcessToken (Address: 0x1800d2030)
OpenThreadToken (Address: 0x1800d2010)
SetThreadPriority (Address: 0x1800d2068)
TerminateProcess (Address: 0x1800d2048)
TlsAlloc (Address: 0x1800d2050)
TlsFree (Address: 0x1800d2060)
TlsGetValue (Address: 0x1800d2038)
TlsSetValue (Address: 0x1800d2008)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x1800d2078)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800d2088)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800d20c0)
RegCreateKeyExW (Address: 0x1800d20c8)
RegEnumValueW (Address: 0x1800d20b0)
RegNotifyChangeKeyValue (Address: 0x1800d20d0)
RegOpenKeyExW (Address: 0x1800d2098)
RegQueryInfoKeyW (Address: 0x1800d20a0)
RegQueryValueExW (Address: 0x1800d20a8)
RegSetValueExW (Address: 0x1800d20b8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800d20e0)
RtlCompareMemory (Address: 0x1800d20e8)
RtlLookupFunctionEntry (Address: 0x1800d20f8)
RtlVirtualUnwind (Address: 0x1800d20f0)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x1800d2110)
CompareStringW (Address: 0x1800d2118)
WideCharToMultiByte (Address: 0x1800d2108)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800d2158)
AcquireSRWLockShared (Address: 0x1800d2138)
CreateEventA (Address: 0x1800d2150)
CreateEventW (Address: 0x1800d2140)
CreateSemaphoreExW (Address: 0x1800d2178)
DeleteCriticalSection (Address: 0x1800d2190)
EnterCriticalSection (Address: 0x1800d2198)
InitializeCriticalSection (Address: 0x1800d2188)
InitializeCriticalSectionAndSpinCount (Address: 0x1800d2160)
InitializeSRWLock (Address: 0x1800d2170)
LeaveCriticalSection (Address: 0x1800d21a0)
ReleaseSemaphore (Address: 0x1800d21a8)
ReleaseSRWLockExclusive (Address: 0x1800d21b0)
ReleaseSRWLockShared (Address: 0x1800d2148)
SetEvent (Address: 0x1800d2128)
TryAcquireSRWLockExclusive (Address: 0x1800d2130)
TryEnterCriticalSection (Address: 0x1800d2168)
WaitForSingleObject (Address: 0x1800d2180)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800d21c0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1800d21e8)
GetSystemInfo (Address: 0x1800d21e0)
GetSystemTime (Address: 0x1800d21f0)
GetSystemTimeAsFileTime (Address: 0x1800d21d8)
GetTickCount (Address: 0x1800d21d0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpool (Address: 0x1800d2210)
CloseThreadpoolTimer (Address: 0x1800d2260)
CloseThreadpoolWait (Address: 0x1800d2218)
CreateThreadpool (Address: 0x1800d2240)
CreateThreadpoolTimer (Address: 0x1800d2250)
CreateThreadpoolWait (Address: 0x1800d2208)
SetThreadpoolThreadMaximum (Address: 0x1800d2220)
SetThreadpoolThreadMinimum (Address: 0x1800d2200)
SetThreadpoolTimer (Address: 0x1800d2258)
SetThreadpoolWait (Address: 0x1800d2230)
TrySubmitThreadpoolCallback (Address: 0x1800d2228)
WaitForThreadpoolTimerCallbacks (Address: 0x1800d2248)
WaitForThreadpoolWaitCallbacks (Address: 0x1800d2238)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx (Address: 0x1800d2270)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x1800d2280)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1800d2290)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800d22a8)
EncodePointer (Address: 0x1800d22a0)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x1800d22b8)
StartTraceW (Address: 0x1800d22c0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800d22d0)
EventSetInformation (Address: 0x1800d22e8)
EventUnregister (Address: 0x1800d22d8)
EventWriteTransfer (Address: 0x1800d22e0)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x1800d22f8)
PowerSettingUnregisterNotification (Address: 0x1800d2300)

api-ms-win-security-activedirectoryclient-l1-1-0.dll

DsBindWithSpnExW (Address: 0x1800d2320)
DsCrackNamesW (Address: 0x1800d2318)
DsFreeNameResultW (Address: 0x1800d2310)
DsUnBindW (Address: 0x1800d2328)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1800d2390)
CreatePrivateObjectSecurityEx (Address: 0x1800d2380)
DestroyPrivateObjectSecurity (Address: 0x1800d2378)
DuplicateToken (Address: 0x1800d2348)
EqualSid (Address: 0x1800d2368)
GetLengthSid (Address: 0x1800d2338)
GetPrivateObjectSecurity (Address: 0x1800d2358)
GetTokenInformation (Address: 0x1800d2370)
ImpersonateAnonymousToken (Address: 0x1800d2398)
ImpersonateLoggedOnUser (Address: 0x1800d2340)
MapGenericMask (Address: 0x1800d2388)
RevertToSelf (Address: 0x1800d2360)
SetPrivateObjectSecurityEx (Address: 0x1800d2350)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x1800d23a8)

AUTHZ.dll

AuthzAccessCheck (Address: 0x1800d1be8)
AuthzFreeAuditEvent (Address: 0x1800d1c10)
AuthzFreeResourceManager (Address: 0x1800d1bf0)
AuthziFreeAuditEventType (Address: 0x1800d1c18)
AuthziInitializeAuditEvent (Address: 0x1800d1c08)
AuthziInitializeAuditEventType (Address: 0x1800d1c00)
AuthziInitializeAuditParamsFromArray (Address: 0x1800d1bf8)
AuthziLogAuditEvent (Address: 0x1800d1bd8)
AuthzInitializeResourceManager (Address: 0x1800d1be0)

CRYPTSP.dll

CryptAcquireContextA (Address: 0x1800d1c38)
CryptCreateHash (Address: 0x1800d1c30)
CryptDestroyHash (Address: 0x1800d1c28)
CryptGetHashParam (Address: 0x1800d1c50)
CryptHashData (Address: 0x1800d1c40)
CryptReleaseContext (Address: 0x1800d1c48)

fwpuclnt.dll

FwpmEngineClose0 (Address: 0x1800d23c0)
FwpmEngineOpen0 (Address: 0x1800d23f0)
FwpmEventProviderCreate0 (Address: 0x1800d2430)
FwpmEventProviderDestroy0 (Address: 0x1800d23d0)
FwpmEventProviderFireNetEvent0 (Address: 0x1800d24d8)
FwpmEventProviderIsNetEventTypeEnabled0 (Address: 0x1800d24b0)
FwpmFilterAdd0 (Address: 0x1800d2458)
FwpmFilterCreateEnumHandle0 (Address: 0x1800d24a8)
FwpmFilterDestroyEnumHandle0 (Address: 0x1800d24d0)
FwpmFilterEnum0 (Address: 0x1800d2470)
FwpmFilterGetById0 (Address: 0x1800d2490)
FwpmFilterSubscribeChanges0 (Address: 0x1800d2428)
FwpmFilterUnsubscribeChanges0 (Address: 0x1800d23e0)
FwpmFreeMemory0 (Address: 0x1800d2480)
FwpmProviderContextGetByKey3 (Address: 0x1800d2478)
FwpmProviderContextSubscribeChanges0 (Address: 0x1800d2420)
FwpmProviderContextUnsubscribeChanges0 (Address: 0x1800d23d8)
FwppConnectionGetByIPsecInfo (Address: 0x1800d2448)
FwppIPsecSaContextCreate (Address: 0x1800d24b8)
FwpsAleExplicitCredentialsQuery0 (Address: 0x1800d2440)
FwpsClassifyUser0 (Address: 0x1800d2438)
FwpsLayerCreateInProcReplica0 (Address: 0x1800d2408)
FwpsLayerReleaseInProcReplica0 (Address: 0x1800d2410)
FwpsOpenToken0 (Address: 0x1800d2450)
FwpsQueryIPsecDosFWUsed0 (Address: 0x1800d2418)
FwpsQueryIPsecOffloadDone0 (Address: 0x1800d24c0)
IkeextGetConfigParameters0 (Address: 0x1800d23b8)
IPsecGetKeyFromDictator0 (Address: 0x1800d24a0)
IPsecKeyDictationCheck0 (Address: 0x1800d24e0)
IPsecKeyModuleAdd0 (Address: 0x1800d2488)
IPsecKeyModuleDelete0 (Address: 0x1800d23e8)
IPsecKeyModuleUpdateAcquire0 (Address: 0x1800d23f8)
IPsecKeyNotification0 (Address: 0x1800d2498)
IPsecSaContextAddInboundAndTrackConnection (Address: 0x1800d24c8)
IPsecSaContextAddOutboundAndTrackConnection (Address: 0x1800d2460)
IPsecSaContextExpire0 (Address: 0x1800d2400)
IPsecSaContextGetSpi1 (Address: 0x1800d23c8)
IPsecSaContextUpdate0 (Address: 0x1800d2468)

MSASN1.dll

ASN1_CloseDecoder (Address: 0x1800d1c78)
ASN1_CloseModule (Address: 0x1800d1cc8)
ASN1_CreateDecoder (Address: 0x1800d1c98)
ASN1_CreateModule (Address: 0x1800d1c60)
ASN1_Decode (Address: 0x1800d1c68)
ASN1_FreeDecoded (Address: 0x1800d1c70)
ASN1BERDecEndOfContents (Address: 0x1800d1cb0)
ASN1BERDecExplicitTag (Address: 0x1800d1c88)
ASN1BERDecNotEndOfContents (Address: 0x1800d1cb8)
ASN1BERDecOpenType2 (Address: 0x1800d1ca8)
ASN1BERDecPeekTag (Address: 0x1800d1c80)
ASN1DecRealloc (Address: 0x1800d1cc0)
ASN1DecSetError (Address: 0x1800d1c90)
ASN1Free (Address: 0x1800d1ca0)

msvcrt.dll

__C_specific_handler (Address: 0x1800d2550)
_amsg_exit (Address: 0x1800d2570)
_initterm (Address: 0x1800d2558)
_ultow_s (Address: 0x1800d2538)
_vsnprintf (Address: 0x1800d2508)
_vsnwprintf (Address: 0x1800d2510)
_XcptFilter (Address: 0x1800d2540)
bsearch (Address: 0x1800d2520)
free (Address: 0x1800d2568)
malloc (Address: 0x1800d2560)
memcmp (Address: 0x1800d24f0)
memcpy (Address: 0x1800d24f8)
memcpy_s (Address: 0x1800d2528)
memset (Address: 0x1800d2500)
sprintf_s (Address: 0x1800d2530)
strcmp (Address: 0x1800d2548)
time (Address: 0x1800d2518)
wcscmp (Address: 0x1800d2580)
wcstok_s (Address: 0x1800d2578)

NSI.dll

NsiGetParameter (Address: 0x1800d1ce0)
NsiSetParameter (Address: 0x1800d1cd8)

ntdll.dll

EtwEventActivityIdControl (Address: 0x1800d2608)
EtwEventEnabled (Address: 0x1800d25f0)
EtwEventRegister (Address: 0x1800d2618)
EtwEventUnregister (Address: 0x1800d2610)
EtwEventWrite (Address: 0x1800d2600)
EtwEventWriteTransfer (Address: 0x1800d25f8)
EtwGetTraceEnableFlags (Address: 0x1800d26e0)
EtwGetTraceEnableLevel (Address: 0x1800d26e8)
EtwGetTraceLoggerHandle (Address: 0x1800d26f0)
EtwRegisterTraceGuidsW (Address: 0x1800d2640)
EtwTraceMessage (Address: 0x1800d2628)
EtwUnregisterTraceGuids (Address: 0x1800d2638)
RtlAdjustPrivilege (Address: 0x1800d26c0)
RtlAllocateHeap (Address: 0x1800d2590)
RtlApplicationVerifierStop (Address: 0x1800d25e8)
RtlContractHashTable (Address: 0x1800d2698)
RtlConvertSidToUnicodeString (Address: 0x1800d26b0)
RtlCreateHashTable (Address: 0x1800d2648)
RtlDeleteHashTable (Address: 0x1800d2650)
RtlEndEnumerationHashTable (Address: 0x1800d2688)
RtlEnumerateEntryHashTable (Address: 0x1800d2680)
RtlExpandHashTable (Address: 0x1800d2690)
RtlFreeUnicodeString (Address: 0x1800d26b8)
RtlGetNextEntryHashTable (Address: 0x1800d2670)
RtlInitEnumerationHashTable (Address: 0x1800d2678)
RtlInitializeSListHead (Address: 0x1800d26c8)
RtlInitString (Address: 0x1800d25b0)
RtlInsertEntryHashTable (Address: 0x1800d2658)
RtlIntegerToUnicodeString (Address: 0x1800d26a8)
RtlInterlockedPopEntrySList (Address: 0x1800d26d8)
RtlInterlockedPushEntrySList (Address: 0x1800d26d0)
RtlIpv4AddressToStringA (Address: 0x1800d25d8)
RtlIpv4AddressToStringW (Address: 0x1800d25a8)
RtlIpv4StringToAddressW (Address: 0x1800d2630)
RtlIpv6AddressToStringA (Address: 0x1800d26f8)
RtlIpv6AddressToStringW (Address: 0x1800d25a0)
RtlIpv6StringToAddressW (Address: 0x1800d25e0)
RtlLengthSecurityDescriptor (Address: 0x1800d25d0)
RtlLookupEntryHashTable (Address: 0x1800d2668)
RtlNtStatusToDosError (Address: 0x1800d2620)
RtlRemoveEntryHashTable (Address: 0x1800d2660)
RtlTimeToTimeFields (Address: 0x1800d26a0)
RtlValidRelativeSecurityDescriptor (Address: 0x1800d2598)
WinSqmEndSession (Address: 0x1800d25b8)
WinSqmSetDWORD (Address: 0x1800d25c8)
WinSqmStartSession (Address: 0x1800d25c0)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x1800d1d28)
MesDecodeBufferHandleCreate (Address: 0x1800d1d90)
MesEncodeDynBufferHandleCreate (Address: 0x1800d1d18)
MesHandleFree (Address: 0x1800d1d20)
Ndr64AsyncServerCallAll (Address: 0x1800d1da0)
NdrAsyncServerCall (Address: 0x1800d1d80)
NdrMesTypeDecode3 (Address: 0x1800d1d50)
NdrMesTypeEncode3 (Address: 0x1800d1d48)
NdrMesTypeFree3 (Address: 0x1800d1d58)
NdrServerCall2 (Address: 0x1800d1d40)
NdrServerCallAll (Address: 0x1800d1d98)
RpcAsyncCompleteCall (Address: 0x1800d1d38)
RpcBindingVectorFree (Address: 0x1800d1d08)
RpcEpRegisterW (Address: 0x1800d1cf8)
RpcEpUnregister (Address: 0x1800d1d00)
RpcFreeAuthorizationContext (Address: 0x1800d1d88)
RpcGetAuthorizationContextForClient (Address: 0x1800d1d78)
RpcImpersonateClient (Address: 0x1800d1d30)
RpcRaiseException (Address: 0x1800d1d70)
RpcRevertToSelf (Address: 0x1800d1db8)
RpcServerInqBindings (Address: 0x1800d1cf0)
RpcServerInqCallAttributesW (Address: 0x1800d1d68)
RpcServerRegisterIfEx (Address: 0x1800d1d10)
RpcServerUnregisterIfEx (Address: 0x1800d1d60)
RpcServerUseProtseqW (Address: 0x1800d1dc0)
RpcStringFreeW (Address: 0x1800d1da8)
UuidCreate (Address: 0x1800d1db0)
UuidToStringW (Address: 0x1800d1dc8)

UMPDC.dll

Pdcv2ActivationClientActivate (Address: 0x1800d1de0)
Pdcv2ActivationClientDeactivate (Address: 0x1800d1dd8)
Pdcv2ActivationClientRegister (Address: 0x1800d1df8)
Pdcv2ActivationClientRenewActivation (Address: 0x1800d1de8)
Pdcv2ActivationClientUnregister (Address: 0x1800d1df0)

WS2_32.dll

bind (Address: 0x1800d1e60)
closesocket (Address: 0x1800d1e70)
FreeAddrInfoW (Address: 0x1800d1e30)
GetAddrInfoW (Address: 0x1800d1e28)
htonl (Address: 0x1800d1e20)
htons (Address: 0x1800d1e18)
ntohl (Address: 0x1800d1e08)
ntohs (Address: 0x1800d1e10)
setsockopt (Address: 0x1800d1e68)
WSACleanup (Address: 0x1800d1e40)
WSAEventSelect (Address: 0x1800d1e78)
WSAGetLastError (Address: 0x1800d1e38)
WSAIoctl (Address: 0x1800d1e88)
WSASocketA (Address: 0x1800d1e80)
WSASocketW (Address: 0x1800d1e58)
WSAStartup (Address: 0x1800d1e48)
WSCEnumProtocols (Address: 0x1800d1e50)

Exported Functions

Imported DLLs & Functions