localspl.dll

Description: Local Spooler DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 1020550af874e8f18d5f02ada8af9357

File Size: 1.2 MB

Uploaded At: Dec. 1, 2025, 7:32 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 400, Address: 0x92ae0)
LclIsSessionZero (Ordinal: 401, Address: 0x806d0)
LclPromptUIPerSessionUser (Ordinal: 402, Address: 0x806f0)
SplAddCSRPrinter (Ordinal: 403, Address: 0x74120)
SplDoesCSRPrinterDevnodeExist (Ordinal: 404, Address: 0x74270)
SplEnableCSRPrinterDeviceInterface (Ordinal: 405, Address: 0x74330)
SplEnumJobNamedProperties (Ordinal: 406, Address: 0xcd740)
SplGetDriverUpdateStatus (Ordinal: 407, Address: 0x894a0)
SplGetJobExtra (Ordinal: 408, Address: 0x7f0d0)
SplGetLocalDevMode (Ordinal: 409, Address: 0x79c20)
SplIsDriverInstalled (Ordinal: 410, Address: 0x89560)
SplIsLocalDriverAvailable (Ordinal: 411, Address: 0x89620)
SplIsValidUserPropertyBag (Ordinal: 412, Address: 0x74430)
SplNotifyServerStatus (Ordinal: 413, Address: 0x7b120)
SplReenumeratePorts (Ordinal: 414, Address: 0x9c330)
SplSetCSRPrinterDevnode (Ordinal: 415, Address: 0x7b270)
SplSetDriverUpdateStatus (Ordinal: 416, Address: 0x898f0)
SplSetJobError (Ordinal: 417, Address: 0x7f1b0)
SplSetJobExtra (Ordinal: 418, Address: 0x7f360)
ClosePrintProcessor (Ordinal: 419, Address: 0x9f200)
ControlPrintProcessor (Ordinal: 420, Address: 0x9f280)
DllMain (Ordinal: 421, Address: 0x4a790)
EnumPrintProcessorDatatypesW (Ordinal: 422, Address: 0x9f300)
GetPrintProcessorCapabilities (Ordinal: 423, Address: 0x9f3c0)
InitializePrintMonitor2 (Ordinal: 424, Address: 0x3f360)
InitializePrintProvidor (Ordinal: 425, Address: 0x370b0)
LocalAddForm (Ordinal: 426, Address: 0xa40d0)
LocalDeleteForm (Ordinal: 427, Address: 0xa4110)
LocalEnumForms (Ordinal: 428, Address: 0xa4150)
LocalReadPrinter (Ordinal: 429, Address: 0x5790)
LocalSetForm (Ordinal: 430, Address: 0xa41a0)
OpenPrintProcessor (Ordinal: 431, Address: 0x9f470)
PrintDocumentOnPrintProcessor (Ordinal: 432, Address: 0x9f4f0)
SplAbortPrinter (Ordinal: 433, Address: 0x81930)
SplAddForm (Ordinal: 434, Address: 0xa41e0)
SplAddJob (Ordinal: 435, Address: 0x81d30)
SplAddMonitor (Ordinal: 436, Address: 0x9cc90)
SplAddPort (Ordinal: 437, Address: 0x9d070)
SplAddPortEx (Ordinal: 438, Address: 0x9d200)
SplAddPrintProcessor (Ordinal: 439, Address: 0x9f570)
SplAddPrinter (Ordinal: 440, Address: 0x76540)
SplAddPrinterDriverEx (Ordinal: 441, Address: 0x8dd70)
SplClosePrinter (Ordinal: 442, Address: 0x20ff0)
SplCloseSpooler (Ordinal: 443, Address: 0x98440)
SplConfigChange (Ordinal: 444, Address: 0x3a020)
SplCopyFileEvent (Ordinal: 445, Address: 0xa99d0)
SplCopyNumberOfFiles (Ordinal: 446, Address: 0xa9c80)
SplCreatePrinterIC (Ordinal: 447, Address: 0x1a950)
SplCreateSpooler (Ordinal: 448, Address: 0x393c0)
SplDeleteForm (Ordinal: 449, Address: 0xa4230)
SplDeleteJobNamedProperty (Ordinal: 450, Address: 0x7fd60)
SplDeleteMonitor (Ordinal: 451, Address: 0x9d720)
SplDeletePort (Ordinal: 452, Address: 0x9dbb0)
SplDeletePrintProcCacheData (Ordinal: 453, Address: 0x9fb00)
SplDeletePrintProcessor (Ordinal: 454, Address: 0x9fcd0)
SplDeletePrinter (Ordinal: 455, Address: 0x78060)
SplDeletePrinterData (Ordinal: 456, Address: 0x9af50)
SplDeletePrinterDataEx (Ordinal: 457, Address: 0x9b090)
SplDeletePrinterDriverEx (Ordinal: 458, Address: 0x8de90)
SplDeletePrinterIC (Ordinal: 459, Address: 0x1b160)
SplDeletePrinterKey (Ordinal: 460, Address: 0x9b200)
SplDeletePrinterWithJobs (Ordinal: 461, Address: 0x78070)
SplDeleteSpooler (Ordinal: 462, Address: 0x98810)
SplDriverEvent (Ordinal: 463, Address: 0x92970)
SplEndDocPrinter (Ordinal: 464, Address: 0x90b0)
SplEndPagePrinter (Ordinal: 465, Address: 0x14200)
SplEnumForms (Ordinal: 466, Address: 0x3b10)
SplEnumJobs (Ordinal: 467, Address: 0x183e0)
SplEnumMonitors (Ordinal: 468, Address: 0x9ddb0)
SplEnumPorts (Ordinal: 469, Address: 0x9df90)
SplEnumPrintProcCacheData (Ordinal: 470, Address: 0x9ff70)
SplEnumPrintProcessorDatatypes (Ordinal: 471, Address: 0xa0270)
SplEnumPrintProcessors (Ordinal: 472, Address: 0xa0450)
SplEnumPrinterData (Ordinal: 473, Address: 0x9b380)
SplEnumPrinterDataEx (Ordinal: 474, Address: 0x3820)
SplEnumPrinterDrivers (Ordinal: 475, Address: 0x241c0)
SplEnumPrinterKey (Ordinal: 476, Address: 0x9b5b0)
SplEnumPrinters (Ordinal: 477, Address: 0x21d40)
SplGetDriverDir (Ordinal: 478, Address: 0x92a70)
SplGetForm (Ordinal: 479, Address: 0x5fa0)
SplGetJob (Ordinal: 480, Address: 0x7feb0)
SplGetJobNamedPropertyValue (Ordinal: 481, Address: 0x80070)
SplGetPrintClassObject (Ordinal: 482, Address: 0x28e30)
SplGetPrintClassObject_4CSR (Ordinal: 483, Address: 0x28e60)
SplGetPrintProcCacheData (Ordinal: 484, Address: 0xa0610)
SplGetPrintProcessorDirectory (Ordinal: 485, Address: 0xa09f0)
SplGetPrinter (Ordinal: 486, Address: 0x12e80)
SplGetPrinterData (Ordinal: 487, Address: 0x24490)
SplGetPrinterDataEx (Ordinal: 488, Address: 0x57c0)
SplGetPrinterDriver (Ordinal: 489, Address: 0x8e7c0)
SplGetPrinterDriverDirectory (Ordinal: 490, Address: 0x29ad0)
SplGetPrinterDriverEx (Ordinal: 491, Address: 0x12980)
SplGetPrinterExtra (Ordinal: 492, Address: 0x7c180)
SplGetPrinterExtraEx (Ordinal: 493, Address: 0x7c1d0)
SplGetUserPropertyBag (Ordinal: 494, Address: 0x78320)
SplIppCreateJobOnPrinter (Ordinal: 495, Address: 0x4b310)
SplIppGetJobAttributes (Ordinal: 496, Address: 0x4b4b0)
SplIppGetPrinterAttributes (Ordinal: 497, Address: 0x4b630)
SplIppSetJobAttributes (Ordinal: 498, Address: 0x4b790)
SplIppSetPrinterAttributes (Ordinal: 499, Address: 0x4b910)
SplIsCompatibleDriver (Ordinal: 500, Address: 0x8e810)
SplLoadLibraryTheCopyFileModule (Ordinal: 501, Address: 0xa9cb0)
SplMonitorIsInstalled (Ordinal: 502, Address: 0x92bb0)
SplOpenPrinter (Ordinal: 503, Address: 0x1f770)
SplPlayGdiScriptOnPrinterIC (Ordinal: 504, Address: 0x1a8f0)
SplPrintSupportOperation (Ordinal: 505, Address: 0x4b0a0)
SplRegeneratePrintDeviceCapabilities (Ordinal: 506, Address: 0x78930)
SplReportJobProcessingProgress (Ordinal: 507, Address: 0xbcce0)
SplResetPrinter (Ordinal: 508, Address: 0x19b40)
SplScheduleJob (Ordinal: 509, Address: 0x82520)
SplSetForm (Ordinal: 510, Address: 0xa4270)
SplSetJob (Ordinal: 511, Address: 0x9e20)
SplSetJobNamedProperty (Ordinal: 512, Address: 0x6950)
SplSetPrintProcCacheData (Ordinal: 513, Address: 0xa0cd0)
SplSetPrinter (Ordinal: 514, Address: 0x7c240)
SplSetPrinterData (Ordinal: 515, Address: 0x9baa0)
SplSetPrinterDataEx (Ordinal: 516, Address: 0x9bc40)
SplSetPrinterExtra (Ordinal: 517, Address: 0x7d3c0)
SplSetPrinterExtraEx (Ordinal: 518, Address: 0x7d490)
SplStartDocPrinter (Ordinal: 519, Address: 0x13660)
SplStartPagePrinter (Ordinal: 520, Address: 0x13f70)
SplWritePrinter (Ordinal: 521, Address: 0x178f0)
SplXcvData (Ordinal: 522, Address: 0xaee50)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800f2ec0)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatA (Address: 0x1800f2ed8)
GetTimeFormatA (Address: 0x1800f2ed0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800f2ee8)
IsDebuggerPresent (Address: 0x1800f2ef8)
OutputDebugStringW (Address: 0x1800f2ef0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800f2f08)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800f2f18)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800f2f40)
SetErrorMode (Address: 0x1800f2f28)
SetLastError (Address: 0x1800f2f38)
SetUnhandledExceptionFilter (Address: 0x1800f2f30)
UnhandledExceptionFilter (Address: 0x1800f2f48)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800f2f70)
CreateDirectoryW (Address: 0x1800f2ff8)
CreateFileA (Address: 0x1800f2ff0)
CreateFileW (Address: 0x1800f2fc8)
DefineDosDeviceW (Address: 0x1800f2f78)
DeleteFileW (Address: 0x1800f2fd0)
FindClose (Address: 0x1800f2fc0)
FindFirstFileExW (Address: 0x1800f2f58)
FindFirstFileW (Address: 0x1800f2f60)
FindNextFileW (Address: 0x1800f2f80)
FlushFileBuffers (Address: 0x1800f3000)
GetFileAttributesExW (Address: 0x1800f2fa0)
GetFileAttributesW (Address: 0x1800f2fa8)
GetFileSize (Address: 0x1800f3010)
GetFileSizeEx (Address: 0x1800f3020)
GetFinalPathNameByHandleW (Address: 0x1800f2f90)
GetFullPathNameW (Address: 0x1800f3018)
GetTempFileNameW (Address: 0x1800f2f68)
QueryDosDeviceW (Address: 0x1800f2f98)
ReadFile (Address: 0x1800f3028)
RemoveDirectoryW (Address: 0x1800f2f88)
SetEndOfFile (Address: 0x1800f2fb8)
SetFileAttributesW (Address: 0x1800f2fe8)
SetFileInformationByHandle (Address: 0x1800f2fb0)
SetFilePointer (Address: 0x1800f3030)
SetFilePointerEx (Address: 0x1800f2fd8)
SetFileTime (Address: 0x1800f2fe0)
WriteFile (Address: 0x1800f3008)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x1800f3040)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1800f3050)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800f3068)
DuplicateHandle (Address: 0x1800f3060)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800f3080)
HeapAlloc (Address: 0x1800f3078)
HeapFree (Address: 0x1800f3088)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1800f30a0)
LocalAlloc (Address: 0x1800f30a8)
LocalFree (Address: 0x1800f3098)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

DosDateTimeToFileTime (Address: 0x1800f30c8)
GetComputerNameW (Address: 0x1800f30b8)
GlobalMemoryStatus (Address: 0x1800f30d0)
WTSGetActiveConsoleSessionId (Address: 0x1800f30c0)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

PowerClearRequest (Address: 0x1800f30e0)
PowerCreateRequest (Address: 0x1800f30e8)
PowerSetRequest (Address: 0x1800f30f8)
VerifyVersionInfoW (Address: 0x1800f30f0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800f3140)
FreeLibrary (Address: 0x1800f3108)
GetModuleFileNameA (Address: 0x1800f3120)
GetModuleFileNameW (Address: 0x1800f3110)
GetModuleHandleExW (Address: 0x1800f3148)
GetModuleHandleW (Address: 0x1800f3130)
GetProcAddress (Address: 0x1800f3158)
LoadLibraryExW (Address: 0x1800f3160)
LoadResource (Address: 0x1800f3128)
LoadStringW (Address: 0x1800f3150)
LockResource (Address: 0x1800f3118)
SizeofResource (Address: 0x1800f3138)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1800f3178)
LoadLibraryW (Address: 0x1800f3170)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800f3188)
GetThreadUILanguage (Address: 0x1800f3198)
IsDBCSLeadByte (Address: 0x1800f3190)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetSystemDefaultUILanguage (Address: 0x1800f31a8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800f31b8)
MapViewOfFile (Address: 0x1800f31c0)
UnmapViewOfFile (Address: 0x1800f31c8)

api-ms-win-core-namedpipe-l1-1-0.dll

ConnectNamedPipe (Address: 0x1800f31f0)
CreateNamedPipeW (Address: 0x1800f31e0)
DisconnectNamedPipe (Address: 0x1800f31e8)
ImpersonateNamedPipeClient (Address: 0x1800f31d8)

api-ms-win-core-path-l1-1-0.dll

PathCchRemoveFileSpec (Address: 0x1800f3200)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileIntW (Address: 0x1800f3210)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1800f3230)
GetCurrentDirectoryW (Address: 0x1800f3228)
SetCurrentDirectoryW (Address: 0x1800f3220)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1800f32b0)
CreateThread (Address: 0x1800f3280)
ExitThread (Address: 0x1800f3240)
GetCurrentProcess (Address: 0x1800f3250)
GetCurrentProcessId (Address: 0x1800f32d0)
GetCurrentThread (Address: 0x1800f32a8)
GetCurrentThreadId (Address: 0x1800f3258)
GetExitCodeProcess (Address: 0x1800f3298)
GetThreadId (Address: 0x1800f32c0)
GetThreadPriority (Address: 0x1800f32b8)
OpenProcessToken (Address: 0x1800f3268)
OpenThreadToken (Address: 0x1800f32c8)
SetThreadPriority (Address: 0x1800f3260)
SetThreadToken (Address: 0x1800f3278)
TerminateProcess (Address: 0x1800f32a0)
TlsAlloc (Address: 0x1800f3288)
TlsFree (Address: 0x1800f3248)
TlsGetValue (Address: 0x1800f3290)
TlsSetValue (Address: 0x1800f3270)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800f32e0)

api-ms-win-core-processtopology-obsolete-l1-1-0.dll

GetActiveProcessorCount (Address: 0x1800f32f0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800f3308)
QueryPerformanceFrequency (Address: 0x1800f3300)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1800f3318)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800f3380)
RegCreateKeyExW (Address: 0x1800f3330)
RegDeleteKeyExW (Address: 0x1800f3350)
RegDeleteTreeW (Address: 0x1800f3348)
RegDeleteValueW (Address: 0x1800f3370)
RegEnumKeyExW (Address: 0x1800f3378)
RegEnumValueW (Address: 0x1800f3328)
RegGetValueW (Address: 0x1800f3340)
RegOpenKeyExW (Address: 0x1800f3368)
RegQueryInfoKeyW (Address: 0x1800f3358)
RegQueryValueExW (Address: 0x1800f3338)
RegSetValueExW (Address: 0x1800f3360)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x1800f3398)
RegSetKeyValueW (Address: 0x1800f3390)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x1800f33b0)
PathFindFileNameW (Address: 0x1800f33a8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrStrIW (Address: 0x1800f33c0)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x1800f33e8)
CompareStringW (Address: 0x1800f33d0)
MultiByteToWideChar (Address: 0x1800f33d8)
WideCharToMultiByte (Address: 0x1800f33e0)

api-ms-win-core-string-l2-1-0.dll

CharLowerW (Address: 0x1800f3400)
CharUpperW (Address: 0x1800f33f8)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x1800f3410)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1800f3428)
lstrcmpW (Address: 0x1800f3420)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800f3460)
AcquireSRWLockShared (Address: 0x1800f3498)
CreateEventW (Address: 0x1800f34c0)
CreateMutexExW (Address: 0x1800f3448)
CreateSemaphoreExW (Address: 0x1800f3458)
DeleteCriticalSection (Address: 0x1800f34b0)
EnterCriticalSection (Address: 0x1800f34b8)
InitializeCriticalSectionAndSpinCount (Address: 0x1800f3438)
InitializeCriticalSectionEx (Address: 0x1800f3468)
LeaveCriticalSection (Address: 0x1800f34a0)
OpenSemaphoreW (Address: 0x1800f3480)
ReleaseMutex (Address: 0x1800f3478)
ReleaseSemaphore (Address: 0x1800f3488)
ReleaseSRWLockExclusive (Address: 0x1800f3450)
ReleaseSRWLockShared (Address: 0x1800f3470)
ResetEvent (Address: 0x1800f34d0)
SetEvent (Address: 0x1800f34d8)
TryEnterCriticalSection (Address: 0x1800f3440)
WaitForMultipleObjectsEx (Address: 0x1800f3490)
WaitForSingleObject (Address: 0x1800f34a8)
WaitForSingleObjectEx (Address: 0x1800f34c8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800f3500)
InitOnceComplete (Address: 0x1800f3508)
Sleep (Address: 0x1800f34e8)
SleepConditionVariableSRW (Address: 0x1800f34f0)
WakeAllConditionVariable (Address: 0x1800f34f8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x1800f3530)
GetLogicalProcessorInformation (Address: 0x1800f3538)
GetSystemDirectoryW (Address: 0x1800f3540)
GetSystemInfo (Address: 0x1800f3520)
GetSystemTime (Address: 0x1800f3528)
GetSystemTimeAsFileTime (Address: 0x1800f3558)
GetSystemWindowsDirectoryW (Address: 0x1800f3568)
GetTickCount (Address: 0x1800f3560)
GetVersion (Address: 0x1800f3550)
GetVersionExW (Address: 0x1800f3548)
GetWindowsDirectoryW (Address: 0x1800f3518)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800f3588)
CreateThreadpoolTimer (Address: 0x1800f3590)
SetThreadpoolTimer (Address: 0x1800f3580)
WaitForThreadpoolTimerCallbacks (Address: 0x1800f3578)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1800f35b0)
GetTimeZoneInformation (Address: 0x1800f35a0)
SystemTimeToFileTime (Address: 0x1800f35a8)
SystemTimeToTzSpecificLocalTime (Address: 0x1800f35b8)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x1800f35c8)
GetFileVersionInfoSizeExW (Address: 0x1800f35d8)
VerQueryValueW (Address: 0x1800f35d0)

api-ms-win-devices-config-l1-1-1.dll

CM_Register_Notification (Address: 0x1800f35e8)
CM_Unregister_Notification (Address: 0x1800f35f0)

api-ms-win-devices-swdevice-l1-1-0.dll

SwMemFree (Address: 0x1800f3600)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1800f3610)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x1800f3620)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x1800f3630)

api-ms-win-security-activedirectoryclient-l1-1-0.dll

DsCrackNamesW (Address: 0x1800f3648)
DsFreeNameResultW (Address: 0x1800f3640)
DsUnBindW (Address: 0x1800f3650)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x1800f37b8)
AddAccessAllowedAce (Address: 0x1800f3748)
AddAccessAllowedAceEx (Address: 0x1800f3730)
AddAccessDeniedAce (Address: 0x1800f3710)
AddAce (Address: 0x1800f3708)
AdjustTokenPrivileges (Address: 0x1800f36a0)
AllocateAndInitializeSid (Address: 0x1800f37a0)
AreAllAccessesGranted (Address: 0x1800f37c8)
AreAnyAccessesGranted (Address: 0x1800f37c0)
CheckTokenMembership (Address: 0x1800f3668)
CopySid (Address: 0x1800f3678)
CreatePrivateObjectSecurity (Address: 0x1800f36e0)
CreatePrivateObjectSecurityEx (Address: 0x1800f36b0)
CreateWellKnownSid (Address: 0x1800f37e8)
DeleteAce (Address: 0x1800f36e8)
DestroyPrivateObjectSecurity (Address: 0x1800f36d8)
DuplicateTokenEx (Address: 0x1800f3740)
EqualSid (Address: 0x1800f36c0)
FreeSid (Address: 0x1800f37a8)
GetAce (Address: 0x1800f3760)
GetAclInformation (Address: 0x1800f3768)
GetLengthSid (Address: 0x1800f3738)
GetSecurityDescriptorControl (Address: 0x1800f3670)
GetSecurityDescriptorDacl (Address: 0x1800f3770)
GetSecurityDescriptorGroup (Address: 0x1800f36d0)
GetSecurityDescriptorLength (Address: 0x1800f3660)
GetSecurityDescriptorOwner (Address: 0x1800f36f0)
GetSecurityDescriptorSacl (Address: 0x1800f3690)
GetSidSubAuthority (Address: 0x1800f3788)
GetSidSubAuthorityCount (Address: 0x1800f3790)
GetTokenInformation (Address: 0x1800f3780)
ImpersonateLoggedOnUser (Address: 0x1800f36f8)
ImpersonateSelf (Address: 0x1800f37b0)
InitializeAcl (Address: 0x1800f3720)
InitializeSecurityDescriptor (Address: 0x1800f3718)
IsValidSecurityDescriptor (Address: 0x1800f37d8)
IsWellKnownSid (Address: 0x1800f3798)
MakeAbsoluteSD (Address: 0x1800f3750)
MakeSelfRelativeSD (Address: 0x1800f37d0)
MapGenericMask (Address: 0x1800f3728)
ObjectCloseAuditAlarmW (Address: 0x1800f37e0)
ObjectDeleteAuditAlarmW (Address: 0x1800f3680)
ObjectOpenAuditAlarmW (Address: 0x1800f3688)
RevertToSelf (Address: 0x1800f3778)
SetPrivateObjectSecurity (Address: 0x1800f36a8)
SetSecurityDescriptorDacl (Address: 0x1800f3698)
SetSecurityDescriptorGroup (Address: 0x1800f3758)
SetSecurityDescriptorOwner (Address: 0x1800f36b8)
SetSecurityDescriptorSacl (Address: 0x1800f3700)
SetTokenInformation (Address: 0x1800f36c8)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupPrivilegeValueW (Address: 0x1800f37f8)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1800f3838)
BCryptCreateHash (Address: 0x1800f3828)
BCryptDestroyHash (Address: 0x1800f3808)
BCryptFinishHash (Address: 0x1800f3830)
BCryptGetProperty (Address: 0x1800f3820)
BCryptHashData (Address: 0x1800f3810)
BCryptOpenAlgorithmProvider (Address: 0x1800f3818)

CRYPT32.dll

CertFindCertificateInStore (Address: 0x1800f29a8)
CertGetNameStringW (Address: 0x1800f29a0)
CertVerifyCertificateChainPolicy (Address: 0x1800f2998)
CryptMsgGetParam (Address: 0x1800f2990)
CryptQueryObject (Address: 0x1800f2988)

GDI32.dll

CreateCompatibleBitmap (Address: 0x1800f29d8)
CreateCompatibleDC (Address: 0x1800f29d0)
CreateFontIndirectW (Address: 0x1800f2a08)
DeleteDC (Address: 0x1800f29f0)
DeleteObject (Address: 0x1800f2a00)
GdiArtificialDecrementDriver (Address: 0x1800f29e8)
GdiQueryFonts (Address: 0x1800f29c0)
GetBitmapBits (Address: 0x1800f29e0)
PatBlt (Address: 0x1800f29c8)
SelectObject (Address: 0x1800f29b8)
TextOutA (Address: 0x1800f29f8)

IPHLPAPI.DLL

GetAdaptersAddresses (Address: 0x1800f2a18)

KERNEL32.dll

BuildCommDCBW (Address: 0x1800f2ae0)
CloseThreadpoolWork (Address: 0x1800f2a68)
CreateThreadpoolWork (Address: 0x1800f2a80)
DeviceIoControl (Address: 0x1800f2ac8)
ExitProcess (Address: 0x1800f2a58)
FileTimeToDosDateTime (Address: 0x1800f2a40)
FileTimeToLocalFileTime (Address: 0x1800f2a48)
GetCommState (Address: 0x1800f2ab8)
GetCommTimeouts (Address: 0x1800f2ad8)
GetDefaultCommConfigW (Address: 0x1800f2aa8)
GetFileAttributesA (Address: 0x1800f2a38)
GetFileInformationByHandle (Address: 0x1800f2a50)
GetNamedPipeInfo (Address: 0x1800f2ae8)
GetProfileIntW (Address: 0x1800f2ad0)
GetTempPathW (Address: 0x1800f2a28)
GetTickCount64 (Address: 0x1800f2ac0)
InitializeCriticalSection (Address: 0x1800f2a60)
LocalFileTimeToFileTime (Address: 0x1800f2a30)
RegisterWaitUntilOOBECompleted (Address: 0x1800f2a98)
RegOpenCurrentUser (Address: 0x1800f2a88)
SetCommState (Address: 0x1800f2ab0)
SetCommTimeouts (Address: 0x1800f2af0)
SetDefaultCommConfigW (Address: 0x1800f2aa0)
SubmitThreadpoolWork (Address: 0x1800f2a78)
UnregisterWaitUntilOOBECompleted (Address: 0x1800f2a90)
WaitForThreadpoolWorkCallbacks (Address: 0x1800f2a70)

KERNELBASE.dll

GetIsEdpEnabled (Address: 0x1800f2b10)
GetPackageFamilyName (Address: 0x1800f2b00)
GetPackageFullName (Address: 0x1800f2b08)

msvcrt.dll

__C_specific_handler (Address: 0x1800f39f8)
__CxxFrameHandler3 (Address: 0x1800f3870)
__dllonexit (Address: 0x1800f3880)
_amsg_exit (Address: 0x1800f38a0)
_callnewh (Address: 0x1800f38b0)
_close (Address: 0x1800f39b8)
_errno (Address: 0x1800f39a0)
_initterm (Address: 0x1800f3898)
_lock (Address: 0x1800f3890)
_lseek (Address: 0x1800f39c0)
_onexit (Address: 0x1800f3878)
_open (Address: 0x1800f3998)
_purecall (Address: 0x1800f3a00)
_read (Address: 0x1800f39a8)
_stricmp (Address: 0x1800f3988)
_unlock (Address: 0x1800f3888)
_vsnprintf (Address: 0x1800f38e0)
_vsnwprintf (Address: 0x1800f3908)
_wcsdup (Address: 0x1800f3928)
_wcsicmp (Address: 0x1800f39f0)
_wcslwr (Address: 0x1800f3918)
_wcsnicmp (Address: 0x1800f3970)
_wopen (Address: 0x1800f39d0)
_write (Address: 0x1800f39b0)
_wsplitpath_s (Address: 0x1800f3940)
_wtoi (Address: 0x1800f38f8)
_XcptFilter (Address: 0x1800f38a8)
free (Address: 0x1800f3910)
isdigit (Address: 0x1800f3900)
isprint (Address: 0x1800f38f0)
isspace (Address: 0x1800f3a10)
isupper (Address: 0x1800f38e8)
iswdigit (Address: 0x1800f39d8)
isxdigit (Address: 0x1800f38d8)
malloc (Address: 0x1800f38b8)
memcmp (Address: 0x1800f3848)
memcpy (Address: 0x1800f3850)
memcpy_s (Address: 0x1800f3a08)
memmove (Address: 0x1800f3858)
memmove_s (Address: 0x1800f3960)
memset (Address: 0x1800f3860)
rand (Address: 0x1800f38c0)
remove (Address: 0x1800f39c8)
sqrt (Address: 0x1800f3868)
srand (Address: 0x1800f38c8)
swprintf_s (Address: 0x1800f3990)
swscanf (Address: 0x1800f3930)
swscanf_s (Address: 0x1800f39e0)
wcschr (Address: 0x1800f3978)
wcscmp (Address: 0x1800f3a18)
wcscpy_s (Address: 0x1800f3920)
wcsncmp (Address: 0x1800f3950)
wcsncpy_s (Address: 0x1800f3948)
wcsnlen (Address: 0x1800f3938)
wcspbrk (Address: 0x1800f3980)
wcsrchr (Address: 0x1800f3968)
wcsstr (Address: 0x1800f3958)
wcstok_s (Address: 0x1800f39e8)
wcstol (Address: 0x1800f38d0)

ntdll.dll

EtwCheckCoverage (Address: 0x1800f3b60)
EtwEventActivityIdControl (Address: 0x1800f3c40)
EtwEventEnabled (Address: 0x1800f3a28)
EtwEventRegister (Address: 0x1800f3b58)
EtwEventSetInformation (Address: 0x1800f3b38)
EtwEventUnregister (Address: 0x1800f3b50)
EtwEventWrite (Address: 0x1800f3a30)
EtwEventWriteTransfer (Address: 0x1800f3b48)
EtwGetTraceEnableFlags (Address: 0x1800f3c10)
EtwGetTraceEnableLevel (Address: 0x1800f3b90)
EtwGetTraceLoggerHandle (Address: 0x1800f3c38)
EtwRegisterTraceGuidsW (Address: 0x1800f3b88)
EtwTraceMessage (Address: 0x1800f3b70)
EtwUnregisterTraceGuids (Address: 0x1800f3c00)
NtClose (Address: 0x1800f3c08)
NtCreateFile (Address: 0x1800f3bf0)
NtOpenKey (Address: 0x1800f3c28)
NtQuerySystemInformation (Address: 0x1800f3c30)
NtQueryValueKey (Address: 0x1800f3be8)
NtSetInformationProcess (Address: 0x1800f3b68)
NtSetInformationThread (Address: 0x1800f3b80)
NtSetInformationToken (Address: 0x1800f3b08)
RtlAllocateHeap (Address: 0x1800f3b00)
RtlCaptureContext (Address: 0x1800f3ba8)
RtlCopySid (Address: 0x1800f3bb0)
RtlDosPathNameToRelativeNtPathName_U_WithStatus (Address: 0x1800f3c20)
RtlEqualSid (Address: 0x1800f3bc8)
RtlFreeAnsiString (Address: 0x1800f3be0)
RtlFreeHeap (Address: 0x1800f3b10)
RtlGetNtProductType (Address: 0x1800f3bd0)
RtlImageNtHeaderEx (Address: 0x1800f3bc0)
RtlInitUnicodeString (Address: 0x1800f3c18)
RtlIsThreadWithinLoaderCallout (Address: 0x1800f3b28)
RtlLengthSid (Address: 0x1800f3b78)
RtlLookupFunctionEntry (Address: 0x1800f3ba0)
RtlNtStatusToDosError (Address: 0x1800f3bb8)
RtlUnicodeStringToAnsiString (Address: 0x1800f3bd8)
RtlVirtualUnwind (Address: 0x1800f3b98)
TpAllocAlpcCompletion (Address: 0x1800f3a90)
TpAllocIoCompletion (Address: 0x1800f3a80)
TpAllocPool (Address: 0x1800f3af8)
TpAllocTimer (Address: 0x1800f3a70)
TpAllocWait (Address: 0x1800f3a68)
TpAllocWork (Address: 0x1800f3a58)
TpCallbackMayRunLong (Address: 0x1800f3a40)
TpPostWork (Address: 0x1800f3a60)
TpReleaseAlpcCompletion (Address: 0x1800f3ae0)
TpReleaseIoCompletion (Address: 0x1800f3ad0)
TpReleasePool (Address: 0x1800f3a38)
TpReleaseTimer (Address: 0x1800f3ac0)
TpReleaseWait (Address: 0x1800f3ab0)
TpReleaseWork (Address: 0x1800f3aa0)
TpSetPoolMaxThreads (Address: 0x1800f3ae8)
TpSetPoolMinThreads (Address: 0x1800f3af0)
TpSetTimer (Address: 0x1800f3a78)
TpSetWait (Address: 0x1800f3a48)
TpSimpleTryPost (Address: 0x1800f3a50)
TpStartAsyncIoOperation (Address: 0x1800f3a88)
TpWaitForAlpcCompletion (Address: 0x1800f3ad8)
TpWaitForIoCompletion (Address: 0x1800f3b30)
TpWaitForTimer (Address: 0x1800f3ab8)
TpWaitForWait (Address: 0x1800f3aa8)
TpWaitForWork (Address: 0x1800f3a98)
VerSetConditionMask (Address: 0x1800f3bf8)
WinSqmAddToStreamEx (Address: 0x1800f3b40)
WinSqmIncrementDWORD (Address: 0x1800f3ac8)
WinSqmIsOptedIn (Address: 0x1800f3b20)
WinSqmSetDWORD (Address: 0x1800f3b18)

RPCRT4.dll

I_RpcBindingInqTransportType (Address: 0x1800f2b80)
I_RpcExceptionFilter (Address: 0x1800f2b28)
MesDecodeIncrementalHandleCreate (Address: 0x1800f2b78)
MesEncodeIncrementalHandleCreate (Address: 0x1800f2b48)
MesHandleFree (Address: 0x1800f2b20)
NdrMesProcEncodeDecode3 (Address: 0x1800f2b30)
RpcBindingFree (Address: 0x1800f2b68)
RpcBindingServerFromClient (Address: 0x1800f2b60)
RpcBindingToStringBindingW (Address: 0x1800f2b58)
RpcServerInqCallAttributesW (Address: 0x1800f2b70)
RpcStringBindingParseW (Address: 0x1800f2b50)
RpcStringFreeW (Address: 0x1800f2b40)
UuidCreateNil (Address: 0x1800f2b38)

SETUPAPI.dll

CMP_WaitNoPendingInstallEvents (Address: 0x1800f2bd0)
pSetupInfIsInbox (Address: 0x1800f2ba0)
SetupCloseInfFile (Address: 0x1800f2ba8)
SetupDiBuildDriverInfoList (Address: 0x1800f2c38)
SetupDiCallClassInstaller (Address: 0x1800f2c40)
SetupDiCreateDeviceInfoList (Address: 0x1800f2c10)
SetupDiCreateDeviceInfoListExW (Address: 0x1800f2bd8)
SetupDiCreateDeviceInfoW (Address: 0x1800f2c20)
SetupDiCreateDevRegKeyW (Address: 0x1800f2c30)
SetupDiDeleteDeviceInfo (Address: 0x1800f2b90)
SetupDiDestroyDeviceInfoList (Address: 0x1800f2bc0)
SetupDiDestroyDriverInfoList (Address: 0x1800f2c58)
SetupDiGetDevicePropertyW (Address: 0x1800f2be0)
SetupDiGetDriverInstallParamsW (Address: 0x1800f2bb8)
SetupDiGetSelectedDriverW (Address: 0x1800f2c48)
SetupDiOpenDeviceInfoW (Address: 0x1800f2c08)
SetupDiSetClassInstallParamsW (Address: 0x1800f2c50)
SetupDiSetDevicePropertyW (Address: 0x1800f2bc8)
SetupDiSetDeviceRegistryPropertyW (Address: 0x1800f2c28)
SetupGetInfDriverStoreLocationW (Address: 0x1800f2bf0)
SetupGetInfPublishedNameW (Address: 0x1800f2bb0)
SetupGetLineByIndexW (Address: 0x1800f2c00)
SetupGetLineCountW (Address: 0x1800f2bf8)
SetupGetLineTextW (Address: 0x1800f2b98)
SetupGetStringFieldW (Address: 0x1800f2c18)
SetupOpenInfFileW (Address: 0x1800f2be8)

sfc_os.dll

SfcClose (Address: 0x1800f3c58)
SfcConnectToServer (Address: 0x1800f3c60)
SfcFileException (Address: 0x1800f3c50)

SPOOLSS.DLL

AbortPrinter (Address: 0x1800f2e20)
AddJobW (Address: 0x1800f2e40)
AddMonitorW (Address: 0x1800f2cb8)
AddPrinterW (Address: 0x1800f2d08)
AllocSplStr (Address: 0x1800f2d80)
AllowRemoteCalls (Address: 0x1800f2cf0)
AppendPrinterNotifyInfoData (Address: 0x1800f2d40)
bGetDevModePerUser (Address: 0x1800f2de8)
CacheAddName (Address: 0x1800f2db0)
CacheCreateAndAddNode (Address: 0x1800f2c98)
CacheIsNameInNodeList (Address: 0x1800f2c78)
CallDrvDevModeConversion (Address: 0x1800f2ea0)
CheckLocalCall (Address: 0x1800f2d18)
ClosePrinter (Address: 0x1800f2cd8)
DeletePortW (Address: 0x1800f2eb0)
DllAllocSplMem (Address: 0x1800f2ca8)
DllFreeSplMem (Address: 0x1800f2c68)
DllFreeSplStr (Address: 0x1800f2c70)
EndDocPrinter (Address: 0x1800f2e28)
EnumJobsW (Address: 0x1800f2de0)
EnumPortsW (Address: 0x1800f2e70)
EnumPrinterDriversW (Address: 0x1800f2e80)
EnumPrintersW (Address: 0x1800f2e50)
GetJobW (Address: 0x1800f2df8)
GetPrinterDataW (Address: 0x1800f2ce8)
GetPrinterDriverDirectoryW (Address: 0x1800f2ea8)
GetPrinterDriverW (Address: 0x1800f2e48)
GetPrinterW (Address: 0x1800f2dd0)
GetServerPolicy (Address: 0x1800f2cd0)
GetSpoolerTlsIndexes (Address: 0x1800f2c90)
ImpersonatePrinterClient (Address: 0x1800f2d98)
IsNamedPipeRpcCall (Address: 0x1800f2db8)
MakeOffset (Address: 0x1800f2e90)
MakePTR (Address: 0x1800f2e98)
MarshallDownStructure (Address: 0x1800f2cf8)
MarshallUpStructure (Address: 0x1800f2d00)
MIDL_user_allocate1 (Address: 0x1800f2e58)
MIDL_user_free1 (Address: 0x1800f2e60)
OpenPrinter2W (Address: 0x1800f2d58)
OpenPrinterPort2W (Address: 0x1800f2d90)
OpenPrinterPortWithClientInfo (Address: 0x1800f2dc0)
OpenPrinterW (Address: 0x1800f2da0)
PackStrings (Address: 0x1800f2dd8)
PackStringToEOB (Address: 0x1800f2e88)
PartialReplyPrinterChangeNotification (Address: 0x1800f2d30)
ProvidorFindClosePrinterChangeNotification (Address: 0x1800f2d50)
ProvidorFindFirstPrinterChangeNotification (Address: 0x1800f2d20)
ReadPrinter (Address: 0x1800f2e10)
ReallocSplMem (Address: 0x1800f2e08)
ReallocSplStr (Address: 0x1800f2e00)
ReplyPrinterChangeNotification (Address: 0x1800f2d38)
RevertToPrinterSelf (Address: 0x1800f2cb0)
RouterAllocPrinterNotifyInfo (Address: 0x1800f2d10)
RouterBroadcastMessage (Address: 0x1800f2c80)
RouterCreatePrintAsyncNotificationChannel (Address: 0x1800f2d88)
RouterFreePrinterNotifyInfo (Address: 0x1800f2d48)
RouterRegisterForPrintAsyncNotifications (Address: 0x1800f2d70)
RouterUnregisterForPrintAsyncNotifications (Address: 0x1800f2d78)
ScheduleJob (Address: 0x1800f2e38)
SetJobW (Address: 0x1800f2df0)
SetPrinterDataW (Address: 0x1800f2ce0)
SetPrinterW (Address: 0x1800f2dc8)
SplGetUserSidStringFromToken (Address: 0x1800f2c88)
SplInitializeWinSpoolDrv (Address: 0x1800f2ca0)
SplIsUpgrade (Address: 0x1800f2d68)
SplRegisterForDeviceEvents (Address: 0x1800f2e78)
SplUalCollectData (Address: 0x1800f2da8)
SplUnregisterForDeviceEvents (Address: 0x1800f2e68)
StartDocPrinterW (Address: 0x1800f2e30)
UpdatePrinterRegAllEx (Address: 0x1800f2cc0)
WaitForPrinterChange (Address: 0x1800f2d28)
WaitForSpoolerInitialization (Address: 0x1800f2cc8)
WritePrinter (Address: 0x1800f2e18)
XcvDataW (Address: 0x1800f2d60)

srvcli.dll

NetServerGetInfo (Address: 0x1800f3c78)
NetShareAdd (Address: 0x1800f3c80)
NetShareDel (Address: 0x1800f3c88)
NetShareDelSticky (Address: 0x1800f3c70)
NetShareEnum (Address: 0x1800f3c90)
NetShareGetInfo (Address: 0x1800f3ca0)
NetShareSetInfo (Address: 0x1800f3c98)