EtwProcessor.dll

Description: Library for processing ETW events [v10.98k]

Version: 10.98.2504.14002

Architecture: 64-bit

Operating System: Windows

SHA256: eba51e30ad11da4e69666b3ec7ca9513

File Size: 405.9 KB

Uploaded At: Dec. 3, 2025, 2:40 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

??0EtwEvent@Processor@Etw@@QEAA@AEBV012@@Z (Ordinal: 1, Address: 0x140c0)
??0WaiterCollection@Processor@Etw@@QEAA@AEBV012@@Z (Ordinal: 2, Address: 0x140c0)
??0WaiterCollection@Processor@Etw@@QEAA@XZ (Ordinal: 3, Address: 0x148e0)
??1EtwEvent@Processor@Etw@@QEAA@XZ (Ordinal: 4, Address: 0x14030)
??1EtwFileConsumer@Processor@Etw@@UEAA@XZ (Ordinal: 5, Address: 0x10db0)
??1EtwRealtimeConsumer@Processor@Etw@@UEAA@XZ (Ordinal: 6, Address: 0x12820)
??1EtwWaiter@Processor@Etw@@UEAA@XZ (Ordinal: 7, Address: 0x13cd0)
??1Waiter@Processor@Etw@@UEAA@XZ (Ordinal: 8, Address: 0x132e0)
??1WaiterCollection@Processor@Etw@@QEAA@XZ (Ordinal: 9, Address: 0x14030)
??4EtwEvent@Processor@Etw@@QEAAAEAV012@V012@@Z (Ordinal: 10, Address: 0x14160)
??4Waiter@Processor@Etw@@QEAAAEAV012@V012@@Z (Ordinal: 11, Address: 0x132a0)
??4WaiterCollection@Processor@Etw@@QEAAAEAV012@V012@@Z (Ordinal: 12, Address: 0x14160)
?Add@WaiterCollection@Processor@Etw@@QEAAXAEBVWaiter@23@@Z (Ordinal: 13, Address: 0x14960)
?CloseTrace@EtwConsumer@Processor@Etw@@QEAAJXZ (Ordinal: 14, Address: 0x3050)
?CopyFrom@Waiter@Processor@Etw@@AEAAXAEBV123@@Z (Ordinal: 15, Address: 0x13210)
?DisableProvider@EtwController@Processor@Etw@@SAJPEBGAEBU_GUID@@@Z (Ordinal: 16, Address: 0x3750)
?DisableProvider@EtwController@Processor@Etw@@SAJPEB_WAEBU_GUID@@@Z (Ordinal: 17, Address: 0x39b0)
?DisableProvider@EtwRealtimeConsumer@Processor@Etw@@QEAAJAEBU_GUID@@@Z (Ordinal: 18, Address: 0x12960)
?EnableProvider@EtwController@Processor@Etw@@SAJPEBGAEBU_GUID@@@Z (Ordinal: 19, Address: 0x3740)
?EnableProvider@EtwController@Processor@Etw@@SAJPEBGAEBU_GUID@@E_K2K@Z (Ordinal: 20, Address: 0x3730)
?EnableProvider@EtwController@Processor@Etw@@SAJPEB_WAEBU_GUID@@@Z (Ordinal: 21, Address: 0x3960)
?EnableProvider@EtwController@Processor@Etw@@SAJPEB_WAEBU_GUID@@E_K2K@Z (Ordinal: 22, Address: 0x38f0)
?EnableProvider@EtwRealtimeConsumer@Processor@Etw@@QEAAJAEBU_GUID@@@Z (Ordinal: 23, Address: 0x12880)
?EnableProvider@EtwRealtimeConsumer@Processor@Etw@@QEAAJAEBU_GUID@@E_K1K@Z (Ordinal: 24, Address: 0x128f0)
?Flush@EtwController@Processor@Etw@@SAJPEBG@Z (Ordinal: 25, Address: 0x3760)
?Flush@EtwController@Processor@Etw@@SAJPEB_W@Z (Ordinal: 26, Address: 0x3760)
?Flush@EtwRealtimeConsumer@Processor@Etw@@QEAAJXZ (Ordinal: 27, Address: 0x12a80)
?FromEventRecord@EtwEvent@Processor@Etw@@SA?AV123@PEAU_EVENT_RECORD@@@Z (Ordinal: 28, Address: 0x141a0)
?GetActivityId@EtwEvent@Processor@Etw@@QEBA?AU_GUID@@XZ (Ordinal: 29, Address: 0x14340)
?GetCachedEvent@CachingWaiter@Processor@Etw@@QEAA?AVEtwEvent@23@XZ (Ordinal: 30, Address: 0x14810)
?GetChannel@EtwEvent@Processor@Etw@@QEBAEXZ (Ordinal: 31, Address: 0x14270)
?GetChannelName@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 32, Address: 0x14440)
?GetEventId@EtwEvent@Processor@Etw@@QEBAKXZ (Ordinal: 33, Address: 0x14230)
?GetEventMessage@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 34, Address: 0x14500)
?GetKeywordsName@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 35, Address: 0x14470)
?GetLastErrorMessage@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 36, Address: 0x14200)
?GetLastErrorMessage@Waiter@Processor@Etw@@QEBAPEBGXZ (Ordinal: 37, Address: 0x13410)
?GetLastErrorMessage@WaiterCollection@Processor@Etw@@QEBAPEBGXZ (Ordinal: 38, Address: 0x14200)
?GetLevel@EtwEvent@Processor@Etw@@QEBAEXZ (Ordinal: 39, Address: 0x14290)
?GetLevelName@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 40, Address: 0x14410)
?GetOpCode@EtwEvent@Processor@Etw@@QEBAEXZ (Ordinal: 41, Address: 0x142b0)
?GetOpCodeName@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 42, Address: 0x144d0)
?GetPayloadProperty@EtwEvent@Processor@Etw@@QEBAJPEBGAEAUtagVARIANT@@@Z (Ordinal: 43, Address: 0x146d0)
?GetPayloadProperty@EtwEvent@Processor@Etw@@QEBAJPEB_WAEAUtagVARIANT@@@Z (Ordinal: 44, Address: 0x14590)
?GetPayloadPropertyNames@EtwEvent@Processor@Etw@@QEBAJPEAPEBGKPEAK@Z (Ordinal: 45, Address: 0x147f0)
?GetPayloadPropertyNames@EtwEvent@Processor@Etw@@QEBAJPEAPEB_WKPEAK@Z (Ordinal: 46, Address: 0x14750)
?GetProcessId@EtwEvent@Processor@Etw@@QEBAKXZ (Ordinal: 47, Address: 0x142f0)
?GetProviderGuid@EtwEvent@Processor@Etw@@QEBA?AU_GUID@@XZ (Ordinal: 48, Address: 0x14310)
?GetProviderMessage@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 49, Address: 0x14530)
?GetProviderName@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 50, Address: 0x143e0)
?GetRelatedActivityId@EtwEvent@Processor@Etw@@QEBA?AU_GUID@@XZ (Ordinal: 51, Address: 0x143b0)
?GetTaskName@EtwEvent@Processor@Etw@@QEBAPEBGXZ (Ordinal: 52, Address: 0x144a0)
?GetThreadId@EtwEvent@Processor@Etw@@QEBAKXZ (Ordinal: 53, Address: 0x142d0)
?GetTimeStamp@EtwEvent@Processor@Etw@@QEBA?AT_LARGE_INTEGER@@XZ (Ordinal: 54, Address: 0x14370)
?GetVersion@EtwEvent@Processor@Etw@@QEBAEXZ (Ordinal: 55, Address: 0x14250)
?HasRelatedActivity@EtwEvent@Processor@Etw@@QEBA_NXZ (Ordinal: 56, Address: 0x14390)
?Initialize@CachingWaiter@Processor@Etw@@AEAAXAEBVWaiter@23@@Z (Ordinal: 57, Address: 0x13ce0)
?Initialize@CachingWaiter@Processor@Etw@@AEAAXAEBVWaiter@23@PEBG@Z (Ordinal: 58, Address: 0x13fc0)
?Initialize@CachingWaiter@Processor@Etw@@AEAAXAEBVWaiter@23@PEB_W@Z (Ordinal: 59, Address: 0x13cf0)
?Initialize@CompositeWaiter@Processor@Etw@@AEAAXAEBVWaiterCollection@23@W4DefaultWaitBehavior@23@@Z (Ordinal: 60, Address: 0x149c0)
?Initialize@EtwFileConsumer@Processor@Etw@@AEAAXPEBG@Z (Ordinal: 61, Address: 0x10da0)
?Initialize@EtwFileConsumer@Processor@Etw@@AEAAXPEB_W@Z (Ordinal: 62, Address: 0x10d20)
?Initialize@EtwRealtimeConsumer@Processor@Etw@@AEAAXPEBGAEBUEtwRealtimeConsumerOptions@23@@Z (Ordinal: 63, Address: 0x12810)
?Initialize@EtwRealtimeConsumer@Processor@Etw@@AEAAXPEB_WAEBUEtwRealtimeConsumerOptions@23@@Z (Ordinal: 64, Address: 0x12710)
?Initialize@EtwWaiter@Processor@Etw@@AEAAXAEBU_GUID@@KPEBGAEBUEtwWaiterOptions@23@@Z (Ordinal: 65, Address: 0x13cb0)
?Initialize@EtwWaiter@Processor@Etw@@AEAAXAEBU_GUID@@KPEB_WAEBUEtwWaiterOptions@23@@Z (Ordinal: 66, Address: 0x13620)
?Initialize@EtwWaiter@Processor@Etw@@AEAAXAEBU_GUID@@PEBG1AEBUEtwWaiterOptions@23@@Z (Ordinal: 67, Address: 0x13cc0)
?Initialize@EtwWaiter@Processor@Etw@@AEAAXAEBU_GUID@@PEB_W1AEBUEtwWaiterOptions@23@@Z (Ordinal: 68, Address: 0x138d0)
?Initialize@MultiplicityWaiter@Processor@Etw@@AEAAXAEBVWaiter@23@I@Z (Ordinal: 69, Address: 0x14890)
?OpenTraceW@EtwFileConsumer@Processor@Etw@@UEAAJXZ (Ordinal: 70, Address: 0x10e10)
?OpenTraceW@EtwRealtimeConsumer@Processor@Etw@@UEAAJXZ (Ordinal: 71, Address: 0x129b0)
?PrintProperties@EtwEvent@Processor@Etw@@QEAAXXZ (Ordinal: 72, Address: 0x14560)
?ProcessTrace@EtwConsumer@Processor@Etw@@UEAAJXZ (Ordinal: 73, Address: 0x2f90)
?Reset@Waiter@Processor@Etw@@UEAAXXZ (Ordinal: 74, Address: 0x133e0)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEBG0AEBUEtwControllerOptions@23@@Z (Ordinal: 75, Address: 0x3700)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEBG0K@Z (Ordinal: 76, Address: 0x36f0)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEBGAEBUEtwControllerOptions@23@@Z (Ordinal: 77, Address: 0x36e0)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEBGK@Z (Ordinal: 78, Address: 0x36d0)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEB_W0AEBUEtwControllerOptions@23@@Z (Ordinal: 79, Address: 0x38b0)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEB_W0K@Z (Ordinal: 80, Address: 0x3830)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEB_WAEBUEtwControllerOptions@23@@Z (Ordinal: 81, Address: 0x37f0)
?StartEtwTrace@EtwController@Processor@Etw@@SAJPEB_WK@Z (Ordinal: 82, Address: 0x3780)
?StopEtwTrace@EtwController@Processor@Etw@@SAJPEBG@Z (Ordinal: 83, Address: 0x3710)
?StopEtwTrace@EtwController@Processor@Etw@@SAJPEB_W@Z (Ordinal: 84, Address: 0x3710)
?Wait@Waiter@Processor@Etw@@UEAAJI@Z (Ordinal: 85, Address: 0x13380)
?WaitAll@CompositeWaiter@Processor@Etw@@QEAAJI@Z (Ordinal: 86, Address: 0x14af0)
?WaitAny@CompositeWaiter@Processor@Etw@@QEAAJI@Z (Ordinal: 87, Address: 0x14a90)
CachingWaiter_Create (Ordinal: 88, Address: 0x15c60)
CachingWaiter_GetCachedEvent (Ordinal: 89, Address: 0x15d40)
CompositeWaiter_Create (Ordinal: 90, Address: 0x15ea0)
CompositeWaiter_CreateWithWaitAllAsDefault (Ordinal: 91, Address: 0x15f60)
CompositeWaiter_WaitAll (Ordinal: 92, Address: 0x16040)
CompositeWaiter_WaitAny (Ordinal: 93, Address: 0x16030)
EtwConsumer_CloseTrace (Ordinal: 94, Address: 0x3640)
EtwConsumer_Destroy (Ordinal: 95, Address: 0x35e0)
EtwConsumer_GetEndTimeStamp (Ordinal: 96, Address: 0x3690)
EtwConsumer_GetStartTimeStamp (Ordinal: 97, Address: 0x3670)
EtwConsumer_GetTickFrequency (Ordinal: 98, Address: 0x3650)
EtwConsumer_GetTimerResolution (Ordinal: 99, Address: 0x36b0)
EtwConsumer_ProcessTrace (Ordinal: 100, Address: 0x3620)
EtwConsumer_SetEventRecordCallback (Ordinal: 101, Address: 0x3600)
EtwController_DisableProvider (Ordinal: 102, Address: 0x53a0)
EtwController_EnableProvider (Ordinal: 103, Address: 0x5350)
EtwController_Flush (Ordinal: 104, Address: 0x3760)
EtwController_StartEtwTrace_1 (Ordinal: 105, Address: 0x36d0)
EtwController_StartEtwTrace_2 (Ordinal: 106, Address: 0x36f0)
EtwController_StopEtwTrace (Ordinal: 107, Address: 0x3710)
EtwEvent_Destroy (Ordinal: 108, Address: 0x160e0)
EtwEvent_FromEventRecord (Ordinal: 109, Address: 0x16170)
EtwEvent_GetActivityId (Ordinal: 110, Address: 0x16390)
EtwEvent_GetChannel (Ordinal: 111, Address: 0x16270)
EtwEvent_GetChannelName (Ordinal: 112, Address: 0x164c0)
EtwEvent_GetEventId (Ordinal: 113, Address: 0x16210)
EtwEvent_GetEventMessage (Ordinal: 114, Address: 0x16580)
EtwEvent_GetKeywordsName (Ordinal: 115, Address: 0x164f0)
EtwEvent_GetLevel (Ordinal: 116, Address: 0x162a0)
EtwEvent_GetLevelName (Ordinal: 117, Address: 0x16490)
EtwEvent_GetOpCode (Ordinal: 118, Address: 0x162d0)
EtwEvent_GetOpCodeName (Ordinal: 119, Address: 0x16550)
EtwEvent_GetPayloadProperty (Ordinal: 120, Address: 0x146e0)
EtwEvent_GetPayloadPropertyLegacy (Ordinal: 121, Address: 0x14740)
EtwEvent_GetPayloadPropertyNames (Ordinal: 122, Address: 0x14800)
EtwEvent_GetProcessId (Ordinal: 123, Address: 0x16330)
EtwEvent_GetProviderGuid (Ordinal: 124, Address: 0x16360)
EtwEvent_GetProviderMessage (Ordinal: 125, Address: 0x165b0)
EtwEvent_GetProviderName (Ordinal: 126, Address: 0x16460)
EtwEvent_GetRelatedActivityId (Ordinal: 127, Address: 0x16420)
EtwEvent_GetTaskName (Ordinal: 128, Address: 0x16520)
EtwEvent_GetThreadId (Ordinal: 129, Address: 0x16300)
EtwEvent_GetTimeStamp (Ordinal: 130, Address: 0x163c0)
EtwEvent_GetVersion (Ordinal: 131, Address: 0x16240)
EtwEvent_HasRelatedActivity (Ordinal: 132, Address: 0x163f0)
EtwEvent_PrintProperties (Ordinal: 133, Address: 0x165e0)
EtwFileConsumer_Create (Ordinal: 134, Address: 0x10f20)
EtwFileConsumer_OpenTrace (Ordinal: 135, Address: 0x10fe0)
EtwRealtimeConsumer_Create (Ordinal: 136, Address: 0x12b30)
EtwRealtimeConsumer_DisableProvider (Ordinal: 137, Address: 0x12c30)
EtwRealtimeConsumer_EnableProvider (Ordinal: 138, Address: 0x12bd0)
EtwRealtimeConsumer_Flush (Ordinal: 139, Address: 0x12c80)
EtwRealtimeConsumer_OpenTrace (Ordinal: 140, Address: 0x10fe0)
EtwWaiter_Create (Ordinal: 141, Address: 0x15a60)
EtwWaiter_CreateByName (Ordinal: 142, Address: 0x15b60)
MultiplicityWaiter_Create (Ordinal: 143, Address: 0x15de0)
PayloadProperty_GetMetadata (Ordinal: 144, Address: 0x16600)
PayloadProperty_GetValue (Ordinal: 145, Address: 0x16670)
WaiterCollection_Add (Ordinal: 146, Address: 0x16110)
WaiterCollection_Create (Ordinal: 147, Address: 0x16050)
WaiterCollection_Destroy (Ordinal: 148, Address: 0x160e0)
Waiter_Destroy (Ordinal: 149, Address: 0x35e0)
Waiter_Reset (Ordinal: 150, Address: 0x159f0)
Waiter_Wait (Ordinal: 151, Address: 0x3620)

Imported DLLs & Functions

ADVAPI32.dll

CheckTokenMembership (Address: 0x180047048)
CloseTrace (Address: 0x180047010)
ControlTraceW (Address: 0x180047030)
ConvertSidToStringSidW (Address: 0x180047088)
CreateWellKnownSid (Address: 0x180047038)
DuplicateTokenEx (Address: 0x180047050)
EnableTraceEx2 (Address: 0x180047020)
EventActivityIdControl (Address: 0x180047078)
EventRegister (Address: 0x180047090)
EventUnregister (Address: 0x180047098)
EventWriteTransfer (Address: 0x180047018)
GetSidLengthRequired (Address: 0x180047080)
GetSidSubAuthority (Address: 0x180047060)
GetSidSubAuthorityCount (Address: 0x180047058)
GetTokenInformation (Address: 0x180047070)
OpenProcessToken (Address: 0x180047068)
OpenTraceW (Address: 0x180047000)
ProcessTrace (Address: 0x180047008)
QueryAllTracesW (Address: 0x180047040)
StartTraceW (Address: 0x180047028)

api-ms-win-crt-convert-l1-1-0.dll

atol (Address: 0x180047388)
strtof (Address: 0x180047380)
wcstoul (Address: 0x180047378)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x1800473b0)
calloc (Address: 0x180047398)
free (Address: 0x1800473a0)
malloc (Address: 0x1800473a8)

api-ms-win-crt-locale-l1-1-0.dll

___lc_codepage_func (Address: 0x1800473c0)
___lc_locale_name_func (Address: 0x1800473f0)
___mb_cur_max_func (Address: 0x1800473d8)
__pctype_func (Address: 0x1800473c8)
_lock_locales (Address: 0x1800473e8)
_unlock_locales (Address: 0x1800473e0)
localeconv (Address: 0x1800473f8)
setlocale (Address: 0x1800473d0)

api-ms-win-crt-math-l1-1-0.dll

_dsign (Address: 0x180047408)
ceilf (Address: 0x180047418)
frexp (Address: 0x180047410)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x180047450)
_configure_narrow_argv (Address: 0x180047428)
_crt_atexit (Address: 0x180047458)
_errno (Address: 0x180047438)
_execute_onexit_table (Address: 0x180047468)
_initialize_narrow_environment (Address: 0x180047490)
_initialize_onexit_table (Address: 0x180047478)
_initterm (Address: 0x180047448)
_initterm_e (Address: 0x180047440)
_invalid_parameter_noinfo (Address: 0x180047460)
_invalid_parameter_noinfo_noreturn (Address: 0x180047480)
_register_onexit_function (Address: 0x180047470)
_seh_filter_dll (Address: 0x180047498)
abort (Address: 0x180047488)
terminate (Address: 0x180047430)

api-ms-win-crt-stdio-l1-1-0.dll

__acrt_iob_func (Address: 0x1800474c0)
__stdio_common_vfwprintf (Address: 0x1800474c8)
__stdio_common_vsprintf (Address: 0x1800474a8)
__stdio_common_vsprintf_s (Address: 0x1800474d0)
__stdio_common_vswprintf (Address: 0x1800474b8)
__stdio_common_vswprintf_s (Address: 0x1800474b0)

api-ms-win-crt-string-l1-1-0.dll

_stricmp (Address: 0x1800474e8)
_strnicmp (Address: 0x180047520)
_wcsdup (Address: 0x180047548)
_wcsnicmp (Address: 0x180047528)
isalnum (Address: 0x1800474f8)
isspace (Address: 0x180047508)
iswspace (Address: 0x180047540)
strcpy_s (Address: 0x180047510)
strcspn (Address: 0x1800474e0)
strncmp (Address: 0x180047500)
tolower (Address: 0x180047530)
wcscpy_s (Address: 0x180047538)
wcsncmp (Address: 0x180047518)
wcsnlen (Address: 0x1800474f0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x180047298)
AcquireSRWLockShared (Address: 0x1800472a0)
CloseHandle (Address: 0x180047278)
CreateThread (Address: 0x180047108)
DecodePointer (Address: 0x180047120)
DeleteCriticalSection (Address: 0x180047128)
EncodePointer (Address: 0x180047198)
EnterCriticalSection (Address: 0x1800471a8)
FileTimeToSystemTime (Address: 0x1800470f0)
FormatMessageA (Address: 0x1800472c8)
FormatMessageW (Address: 0x1800471b0)
FreeLibrary (Address: 0x180047258)
FreeLibraryAndExitThread (Address: 0x180047110)
GetCurrentProcess (Address: 0x180047200)
GetCurrentProcessId (Address: 0x180047260)
GetCurrentThreadId (Address: 0x1800472b8)
GetLastError (Address: 0x180047268)
GetLocaleInfoEx (Address: 0x1800472d0)
GetModuleFileNameW (Address: 0x180047208)
GetModuleHandleA (Address: 0x180047218)
GetModuleHandleExW (Address: 0x1800470f8)
GetModuleHandleW (Address: 0x180047280)
GetProcAddress (Address: 0x180047238)
GetStringTypeW (Address: 0x1800471c0)
GetSystemTimeAsFileTime (Address: 0x1800471b8)
GetTickCount64 (Address: 0x1800472c0)
GetVersion (Address: 0x180047210)
InitializeCriticalSectionAndSpinCount (Address: 0x1800470c0)
InitializeCriticalSectionEx (Address: 0x180047118)
InitializeSListHead (Address: 0x180047190)
InitOnceBeginInitialize (Address: 0x1800472d8)
InitOnceComplete (Address: 0x1800472e0)
InterlockedFlushSList (Address: 0x1800470d8)
InterlockedPushEntrySList (Address: 0x1800470e0)
IsDebuggerPresent (Address: 0x180047148)
IsProcessorFeaturePresent (Address: 0x180047158)
LCMapStringEx (Address: 0x1800471e0)
LeaveCriticalSection (Address: 0x1800471a0)
LoadLibraryExW (Address: 0x180047240)
LocalFree (Address: 0x180047220)
MultiByteToWideChar (Address: 0x1800471d8)
OpenProcess (Address: 0x180047250)
OutputDebugStringA (Address: 0x180047228)
OutputDebugStringW (Address: 0x180047230)
QueryPerformanceCounter (Address: 0x180047140)
QueryPerformanceFrequency (Address: 0x180047150)
RaiseException (Address: 0x1800470c8)
ReleaseSRWLockExclusive (Address: 0x180047288)
ReleaseSRWLockShared (Address: 0x180047290)
ResetEvent (Address: 0x180047130)
RtlCaptureContext (Address: 0x180047188)
RtlLookupFunctionEntry (Address: 0x180047180)
RtlPcToFileHeader (Address: 0x1800470d0)
RtlUnwindEx (Address: 0x1800470e8)
RtlVirtualUnwind (Address: 0x180047178)
SetEvent (Address: 0x180047138)
SetLastError (Address: 0x180047248)
SetUnhandledExceptionFilter (Address: 0x180047168)
SleepConditionVariableSRW (Address: 0x1800472b0)
SystemTimeToFileTime (Address: 0x180047100)
TerminateProcess (Address: 0x180047160)
TlsAlloc (Address: 0x1800470b8)
TlsFree (Address: 0x1800471f8)
TlsGetValue (Address: 0x1800470b0)
TlsSetValue (Address: 0x1800470a8)
TryAcquireSRWLockExclusive (Address: 0x1800472a8)
UnhandledExceptionFilter (Address: 0x180047170)
VerifyVersionInfoW (Address: 0x1800471f0)
VerSetConditionMask (Address: 0x1800471e8)
WaitForMultipleObjectsEx (Address: 0x180047270)
WakeAllConditionVariable (Address: 0x1800471d0)
WideCharToMultiByte (Address: 0x1800471c8)

OLEAUT32.dll

SafeArrayCopy (Address: 0x180047328)
SafeArrayCreate (Address: 0x180047340)
SafeArrayDestroy (Address: 0x180047330)
SafeArrayGetLBound (Address: 0x180047310)
SafeArrayGetUBound (Address: 0x180047308)
SafeArrayGetVartype (Address: 0x180047320)
SafeArrayLock (Address: 0x180047350)
SafeArrayRedim (Address: 0x180047348)
SafeArrayUnlock (Address: 0x180047338)
SysAllocString (Address: 0x1800472f8)
SysFreeString (Address: 0x1800472f0)
VariantClear (Address: 0x180047300)
VariantInit (Address: 0x180047318)

Wex.Common.dll

?Create@Event@Common@TAEF@@YA?AV?$AutoHandle@UHandlePolicy@Common@TAEF@@@23@W4EventCharacteristics@23@@Z (Address: 0x180047360)
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUSlimSourceLocation@23@@Z (Address: 0x180047368)