perfctrl.dll

Description: Performance Analyzer Tracing Control Library

Version: 10.0.26100.4654

Architecture: 64-bit

Operating System: Windows NT

SHA256: 9b65657f86bcab64292070ae084365e5

File Size: 386.3 KB

Uploaded At: Dec. 3, 2025, 2:41 a.m.

Views: 7

Exported Functions

??0CPerfTrackProviderInfoCache@@QEAA@PEBVCProviderInfoCache@@@Z (Ordinal: 1, Address: 0x51d0)
??0CProviderInfoCache@@QEAA@_N@Z (Ordinal: 2, Address: 0x5280)
??0CUTCProviderInfoCache@@QEAA@PEBVCProviderInfoCache@@@Z (Ordinal: 3, Address: 0x5760)
??0KernelLoggingSession@@QEAA@AEBV0@@Z (Ordinal: 4, Address: 0x2640)
??0KernelLoggingSession@@QEAA@PEBG0PEBUSESSION_PROPERTIES@@_N_K@Z (Ordinal: 5, Address: 0xc020)
??0LoggingSession@@QEAA@AEBV0@@Z (Ordinal: 6, Address: 0x26a0)
??0LoggingSession@@QEAA@PEBG0PEBUSESSION_PROPERTIES@@_N_K@Z (Ordinal: 7, Address: 0x5810)
??1CPerfTrackProviderInfoCache@@QEAA@XZ (Ordinal: 8, Address: 0x5ca0)
??1CProviderInfoCache@@QEAA@XZ (Ordinal: 9, Address: 0x5cb0)
??1CUTCProviderInfoCache@@QEAA@XZ (Ordinal: 10, Address: 0x5ca0)
??1KernelLoggingSession@@UEAA@XZ (Ordinal: 11, Address: 0xc0b0)
??1LoggingSession@@UEAA@XZ (Ordinal: 12, Address: 0x5d20)
??4CKernelStackWalkingFlagTranslator@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 13, Address: 0x2850)
??4CKernelStackWalkingFlagTranslator@@QEAAAEAV0@AEBV0@@Z (Ordinal: 14, Address: 0x2850)
??4CPerfTrackProviderInfoCache@@QEAAAEAV0@AEBV0@@Z (Ordinal: 15, Address: 0x2860)
??4CProviderInfoCache@@QEAAAEAV0@AEBV0@@Z (Ordinal: 16, Address: 0x2880)
??4CUTCProviderInfoCache@@QEAAAEAV0@AEBV0@@Z (Ordinal: 17, Address: 0x2860)
??4KernelLoggingSession@@QEAAAEAV0@AEBV0@@Z (Ordinal: 18, Address: 0x28a0)
??4LoggingSession@@QEAAAEAV0@AEBV0@@Z (Ordinal: 19, Address: 0x2900)
??_7KernelLoggingSession@@6B@ (Ordinal: 20, Address: 0x3cbc8)
??_7LoggingSession@@6B@ (Ordinal: 21, Address: 0x3cb18)
??_FKernelLoggingSession@@QEAAXXZ (Ordinal: 22, Address: 0x2b10)
??_FLoggingSession@@QEAAXXZ (Ordinal: 23, Address: 0x2b50)
?AddExtFlagEntry@LoggingSession@@IEBAXGPEAXGPEAU_EVENT_TRACE_PROPERTIES_V2@@@Z (Ordinal: 24, Address: 0x5f60)
?AddFlagToTracingFlags@KernelLoggingSession@@MEAAHPEBG@Z (Ordinal: 25, Address: 0xc100)
?AddFlagToTracingFlags@LoggingSession@@AEAAHPEBG_N@Z (Ordinal: 26, Address: 0x6020)
?AddFlagToTracingFlags@LoggingSession@@MEAAHPEBG@Z (Ordinal: 27, Address: 0x6040)
?AllocTraceProperties@LoggingSession@@KAPEAU_EVENT_TRACE_PROPERTIES_V2@@XZ (Ordinal: 28, Address: 0x6060)
?CaptureState@KernelLoggingSession@@UEAAKPEBGE@Z (Ordinal: 29, Address: 0xc410)
?CaptureState@LoggingSession@@UEAAKPEBGK@Z (Ordinal: 30, Address: 0x6620)
?CleanupMarkResources@KernelLoggingSession@@SAXXZ (Ordinal: 31, Address: 0xc5b0)
?ClearTracingFlags@KernelLoggingSession@@MEAAXXZ (Ordinal: 32, Address: 0xc5f0)
?ClearTracingFlags@LoggingSession@@MEAAXXZ (Ordinal: 33, Address: 0x6890)
?ControlTracing@KernelLoggingSession@@AEAAK_N@Z (Ordinal: 34, Address: 0xc6a0)
?ControlTracing@LoggingSession@@AEAAK_N@Z (Ordinal: 35, Address: 0x6950)
?CreateMergedETLFile@@YAKQEAPEAVLoggingSession@@KPEBG@Z (Ordinal: 36, Address: 0xffa0)
?CreateMergedETLFile@@YAKQEAPEBGKPEBG@Z (Ordinal: 37, Address: 0x100a0)
?CreateMergedETLFileEx@@YAKQEAPEBGKPEBGK@Z (Ordinal: 38, Address: 0x100c0)
?CreateProviderList@LoggingSession@@AEAAXXZ (Ordinal: 39, Address: 0x6c60)
?DisableBootTracing@KernelLoggingSession@@SAKXZ (Ordinal: 40, Address: 0xc910)
?EnableBigFootTracing@KernelLoggingSession@@QEBAKHK@Z (Ordinal: 41, Address: 0xca90)
?EnableBootTracing@KernelLoggingSession@@QEBAKXZ (Ordinal: 42, Address: 0xcb30)
?EnableLastBranchRecordingIfConfigured@LoggingSession@@IEAAJXZ (Ordinal: 43, Address: 0x7540)
?EnablePmcCollectionIfConfigured@LoggingSession@@IEAAJXZ (Ordinal: 44, Address: 0x7680)
?EnableProcessorTraceIfConfigured@LoggingSession@@IEAAJXZ (Ordinal: 45, Address: 0x7830)
?EnableStackCaching@LoggingSession@@CAJ_KKK@Z (Ordinal: 46, Address: 0x7970)
?EnableStackCachingIfConfigured@LoggingSession@@IEAAJXZ (Ordinal: 47, Address: 0x7a60)
?EnumEnabledFlags@LoggingSession@@QEAAJPEAKPEAPEAUFlagName@1@@Z (Ordinal: 48, Address: 0x7a90)
?EnumFlags@KernelLoggingSession@@UEBAPEBUFlagName@LoggingSession@@AEAK@Z (Ordinal: 49, Address: 0xcf30)
?EnumFlags@LoggingSession@@UEBAPEBUFlagName@1@AEAK@Z (Ordinal: 50, Address: 0x7dd0)
?EnumGroups@KernelLoggingSession@@UEBAPEBUGroupName@LoggingSession@@AEAK@Z (Ordinal: 51, Address: 0xcf50)
?EnumGroups@LoggingSession@@UEBAPEBUGroupName@1@AEAK@Z (Ordinal: 52, Address: 0x7df0)
?EnumLoggers@LoggingSession@@SAKPEAPEAV1@AEAK@Z (Ordinal: 53, Address: 0x7e10)
?FlushLogger@KernelLoggingSession@@UEAAKXZ (Ordinal: 54, Address: 0xcf70)
?FlushLogger@LoggingSession@@UEAAKXZ (Ordinal: 55, Address: 0x83e0)
?FlushLoggerWithSuppressedEvents@KernelLoggingSession@@UEAAK_N@Z (Ordinal: 56, Address: 0xcf90)
?FlushLoggerWithSuppressedEvents@LoggingSession@@UEAAK_N@Z (Ordinal: 57, Address: 0x2b90)
?GetBootTracingStatus@KernelLoggingSession@@SAHPEAV1@@Z (Ordinal: 58, Address: 0xd8a0)
?GetDecodedTraceFlags@LoggingSession@@QEBAKPEAGK@Z (Ordinal: 59, Address: 0x8560)
?GetLastBranchRecordConfiguration@KernelLoggingSession@@QEAAHPEAU_LBR_SETTINGS@@@Z (Ordinal: 60, Address: 0xdc50)
?GetLastBranchRecordConfiguration@LoggingSession@@IEAAHPEAU_LBR_SETTINGS@@@Z (Ordinal: 61, Address: 0x8590)
?GetOSVersionInfo@LoggingSession@@SAAEBU_OSVERSIONINFOEXW@@XZ (Ordinal: 62, Address: 0x85d0)
?GetPersistedGlobalLoggerKey@KernelLoggingSession@@CAKPEAGK@Z (Ordinal: 63, Address: 0xdc60)
?GetPmcConfiguration@KernelLoggingSession@@QEAAHPEAU_PMC_SETTINGS@@@Z (Ordinal: 64, Address: 0xdd50)
?GetPmcConfiguration@LoggingSession@@IEAAHPEAU_PMC_SETTINGS@@@Z (Ordinal: 65, Address: 0x8630)
?GetProcessorTraceConfiguration@KernelLoggingSession@@QEAAHPEAU_IPT_SETTINGS@@@Z (Ordinal: 66, Address: 0xdd60)
?GetProcessorTraceConfiguration@LoggingSession@@IEAAHPEAU_IPT_SETTINGS@@@Z (Ordinal: 67, Address: 0x8690)
?GetProviderInfo@CProviderInfoCache@@QEBAPEBUCProviderInfo@@AEBU_GUID@@@Z (Ordinal: 68, Address: 0x8bb0)
?GetProviderInfo@CProviderInfoCache@@QEBAPEBUCProviderInfo@@PEBG@Z (Ordinal: 69, Address: 0x8c90)
?GetRunningEtwInternalVersion@KernelLoggingSession@@SAKXZ (Ordinal: 70, Address: 0xdd70)
?GetRunningOSMaximumStackWalkedKernelEventTypes@KernelLoggingSession@@SAKXZ (Ordinal: 71, Address: 0xdde0)
?GetSessionHandle@LoggingSession@@QEBA_KXZ (Ordinal: 72, Address: 0x2ba0)
?GetStackCaching@KernelLoggingSession@@QEBAHPEAK0@Z (Ordinal: 73, Address: 0x8db0)
?GetStackCaching@LoggingSession@@IEBAHPEAK0@Z (Ordinal: 74, Address: 0x8db0)
?GetStackWalkingFlag@CKernelStackWalkingFlagTranslator@@SAPEBUCStackWalkingFlag@1@G@Z (Ordinal: 75, Address: 0xf5a0)
?GetStackWalkingFlag@CKernelStackWalkingFlagTranslator@@SAPEBUCStackWalkingFlag@1@PEBG@Z (Ordinal: 76, Address: 0xf5e0)
?GetTraceFlags@KernelLoggingSession@@UEBAKPEAGK@Z (Ordinal: 77, Address: 0xde30)
?GetTraceFlags@LoggingSession@@UEBAKPEAGK@Z (Ordinal: 78, Address: 0x8de0)
?GetTraceFlagsEx@LoggingSession@@AEBAKPEAGK_N@Z (Ordinal: 79, Address: 0x8df0)
?InitTraceProperties@KernelLoggingSession@@MEBAPEAU_EVENT_TRACE_PROPERTIES_V2@@XZ (Ordinal: 80, Address: 0xdf30)
?InitTraceProperties@LoggingSession@@MEBAPEAU_EVENT_TRACE_PROPERTIES_V2@@XZ (Ordinal: 81, Address: 0x91b0)
?Initialize@CPerfTrackProviderInfoCache@@AEAAJPEBVCProviderInfoCache@@@Z (Ordinal: 82, Address: 0x9340)
?Initialize@CUTCProviderInfoCache@@AEAAJPEBVCProviderInfoCache@@@Z (Ordinal: 83, Address: 0x96b0)
?IsKernelLogger@LoggingSession@@QEBAHXZ (Ordinal: 84, Address: 0x2bb0)
?IsLogging@LoggingSession@@QEBA_NXZ (Ordinal: 85, Address: 0x2bc0)
?IsProviderAvailable@LoggingSession@@UEBAHAEBU_GUID@@@Z (Ordinal: 86, Address: 0x9930)
?IsProviderAvailable@LoggingSession@@UEBAHPEBG@Z (Ordinal: 87, Address: 0x99a0)
?IsSpinlockSupported@LoggingSession@@SA_NXZ (Ordinal: 88, Address: 0x9a20)
?IsWin8@LoggingSession@@SA_NXZ (Ordinal: 89, Address: 0x2bd0)
?IsWin8AndUp@LoggingSession@@SA_NXZ (Ordinal: 90, Address: 0x2c00)
?LogFileName@LoggingSession@@QEBAPEBGXZ (Ordinal: 91, Address: 0x2c50)
?LogMark@LoggingSession@@UEAAKEKEEGPEBG_N@Z (Ordinal: 92, Address: 0x9d40)
?LogMark@LoggingSession@@UEAAKEPEAU_PERFINFO_MARK_EVENT@@_K_N@Z (Ordinal: 93, Address: 0x9e80)
?LoggerName@KernelLoggingSession@@SAPEBGXZ (Ordinal: 94, Address: 0xe160)
?ProviderListAddFlag@LoggingSession@@AEAAHPEAPEAUProviderGUIDEntry@1@PEBG_N@Z (Ordinal: 95, Address: 0xa180)
?ProviderListAddGUID@LoggingSession@@AEAAHPEAPEAUProviderGUIDEntry@1@AEBU_GUID@@_KK_NK@Z (Ordinal: 96, Address: 0xa620)
?ProviderListClear@LoggingSession@@AEAAXPEAPEAUProviderGUIDEntry@1@@Z (Ordinal: 97, Address: 0xa780)
?ProviderListProcessFlags@LoggingSession@@AEAAHPEAPEAUProviderGUIDEntry@1@PEBG@Z (Ordinal: 98, Address: 0xa7b0)
?QueryGroupMask@KernelLoggingSession@@QEAAAEBU_PERFINFO_GROUPMASK@@_N@Z (Ordinal: 99, Address: 0xe410)
?QueryPerfTrackProviderInfos@LoggingSession@@SAJPEAKPEAPEBUCProviderInfo@@@Z (Ordinal: 100, Address: 0xaa80)
?QueryPoolTagFilter@LoggingSession@@IEAAJXZ (Ordinal: 101, Address: 0xab30)
?QueryProviderInfos@CPerfTrackProviderInfoCache@@QEBAJPEAKPEAPEBUCProviderInfo@@@Z (Ordinal: 102, Address: 0xac60)
?QueryProviderInfos@CProviderInfoCache@@QEBAJPEAKPEAPEBUCProviderInfo@@@Z (Ordinal: 103, Address: 0xac90)
?QueryProviderInfos@CUTCProviderInfoCache@@QEBAJPEAKPEAPEBUCProviderInfo@@@Z (Ordinal: 104, Address: 0xac60)
?QueryProviderInfos@LoggingSession@@SAJPEAKPEAPEBUCProviderInfo@@@Z (Ordinal: 105, Address: 0xacc0)
?QuerySessionHandleFromName@LoggingSession@@CAKPEA_KPEBG@Z (Ordinal: 106, Address: 0xad30)
?QueryStackWalkingFlags@CKernelStackWalkingFlagTranslator@@SAJPEAKPEAPEBUCStackWalkingFlag@1@@Z (Ordinal: 107, Address: 0xf650)
?QueryStackWalkingFlags@CKernelStackWalkingFlagTranslator@@SAJQEAUCStackWalkingFlag@1@AEAKH@Z (Ordinal: 108, Address: 0xf680)
?QueryUTCProviderInfos@LoggingSession@@SAJPEAKPEAPEBUCProviderInfo@@@Z (Ordinal: 109, Address: 0xadc0)
?QueryVirtualAllocCommitSizeStkMin@KernelLoggingSession@@SAKAEAK@Z (Ordinal: 110, Address: 0xe4c0)
?QueryVirtualAllocResSizeStkMin@KernelLoggingSession@@SAKAEAK@Z (Ordinal: 111, Address: 0xe530)
?RunningOSSupportsKernelEventStackwalking@KernelLoggingSession@@SAHXZ (Ordinal: 112, Address: 0xe5f0)
?RunningOSUsesVistaStyleKernelEventStackwalkingControlDescriptors@KernelLoggingSession@@SAHXZ (Ordinal: 113, Address: 0xe620)
?SessionName@LoggingSession@@QEBAPEBGXZ (Ordinal: 114, Address: 0x2c60)
?SessionProperties@LoggingSession@@QEAAAEBUSESSION_PROPERTIES@@_N@Z (Ordinal: 115, Address: 0xb0f0)
?SessionProperties@LoggingSession@@QEAAHAEBUSESSION_PROPERTIES@@@Z (Ordinal: 116, Address: 0xb2b0)
?SetLastBranchRecordConfiguration@KernelLoggingSession@@QEAAXQEAU_LBR_SETTINGS@@@Z (Ordinal: 117, Address: 0xb480)
?SetLastBranchRecordConfiguration@LoggingSession@@IEAAXQEAU_LBR_SETTINGS@@@Z (Ordinal: 118, Address: 0xb480)
?SetLogFileName@LoggingSession@@UEAAHPEBG@Z (Ordinal: 119, Address: 0xb4b0)
?SetMark@KernelLoggingSession@@SAHPEBGH@Z (Ordinal: 120, Address: 0xe660)
?SetPmcConfiguration@KernelLoggingSession@@QEAAXPEBU_PMC_SETTINGS@@_N@Z (Ordinal: 121, Address: 0xe9e0)
?SetPmcConfiguration@LoggingSession@@IEAAXPEBU_PMC_SETTINGS@@@Z (Ordinal: 122, Address: 0xb530)
?SetPoolTagFilter@KernelLoggingSession@@UEAAJPEBG@Z (Ordinal: 123, Address: 0xea40)
?SetPoolTagFilter@LoggingSession@@UEAAJPEBG@Z (Ordinal: 124, Address: 0x2c70)
?SetProcessorTraceConfiguration@KernelLoggingSession@@QEAAXQEAU_IPT_SETTINGS@@@Z (Ordinal: 125, Address: 0xb580)
?SetProcessorTraceConfiguration@LoggingSession@@IEAAXQEAU_IPT_SETTINGS@@@Z (Ordinal: 126, Address: 0xb580)
?SetSessionName@KernelLoggingSession@@UEAAHPEBG@Z (Ordinal: 127, Address: 0x2c80)
?SetSessionName@LoggingSession@@UEAAHPEBG@Z (Ordinal: 128, Address: 0xb5b0)
?SetStackCaching@KernelLoggingSession@@QEAAXKK@Z (Ordinal: 129, Address: 0xb620)
?SetStackCaching@LoggingSession@@IEAAXKK@Z (Ordinal: 130, Address: 0xb620)
?SetTraceFlags@LoggingSession@@UEAAHPEBG@Z (Ordinal: 131, Address: 0xb730)
?SetVirtualAllocCommitSizeStkMin@KernelLoggingSession@@SAKK@Z (Ordinal: 132, Address: 0xf000)
?SetVirtualAllocResSizeStkMin@KernelLoggingSession@@SAKK@Z (Ordinal: 133, Address: 0xf060)
?StartTracing@KernelLoggingSession@@UEAAKXZ (Ordinal: 134, Address: 0xf0c0)
?StartTracing@LoggingSession@@UEAAKXZ (Ordinal: 135, Address: 0xb7a0)
?StopTracing@KernelLoggingSession@@UEAAKXZ (Ordinal: 136, Address: 0xf0d0)
?StopTracing@LoggingSession@@UEAAKXZ (Ordinal: 137, Address: 0xb7b0)
?StringToGuid@LoggingSession@@SAHPEBGPEAU_GUID@@@Z (Ordinal: 138, Address: 0xb890)
?TranslateFlagString@CKernelStackWalkingFlagTranslator@@SAJQEAUCStackWalkingFlag@1@AEAKPEBGPEAUCParsingErrorInformation@1@@Z (Ordinal: 139, Address: 0xf750)
?UpdateTracing@KernelLoggingSession@@UEAAKXZ (Ordinal: 140, Address: 0xf570)
?UpdateTracing@LoggingSession@@UEAAKXZ (Ordinal: 141, Address: 0xbba0)
?get_m_FlagNames@LoggingSession@@AEBAPEAUFlagName@1@XZ (Ordinal: 142, Address: 0xbf40)
?pSetTraceFlags@LoggingSession@@MEAAHPEBG@Z (Ordinal: 143, Address: 0xbff0)
?put_m_FlagNames@LoggingSession@@AEAAXPEAUFlagName@1@@Z (Ordinal: 144, Address: 0xc000)
?s_MarkHandle@KernelLoggingSession@@0PEAXEA (Ordinal: 145, Address: 0x57bd8)
?s_bEtwSetMark@KernelLoggingSession@@0_NA (Ordinal: 146, Address: 0x57bd0)
?s_cKnownUserModeFlagLen@LoggingSession@@1KB (Ordinal: 147, Address: 0x413d8)
?s_cKnownUserModeFlags@LoggingSession@@2QBUFlagName@1@B (Ordinal: 148, Address: 0x3d990)
?s_cNumKnownUserModeFlags@LoggingSession@@2KB (Ordinal: 149, Address: 0x4193c)
?s_cNumUserModeGroups@LoggingSession@@2KB (Ordinal: 150, Address: 0x41938)
?s_cUserModeGroups@LoggingSession@@2QBUGroupName@1@B (Ordinal: 151, Address: 0x3d970)
?s_pfnEtwSetMark@KernelLoggingSession@@0P6AK_KPEAU_ETW_SET_MARK_INFORMATION@@K@ZEA (Ordinal: 152, Address: 0x58640)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x18003f478)
CloseTrace (Address: 0x18003f510)
ControlTraceW (Address: 0x18003f4f0)
EnableTrace (Address: 0x18003f4d0)
EnableTraceEx (Address: 0x18003f4d8)
EnableTraceEx2 (Address: 0x18003f4e8)
EnumerateTraceGuids (Address: 0x18003f4c8)
EventRegister (Address: 0x18003f540)
EventUnregister (Address: 0x18003f470)
EventWriteTransfer (Address: 0x18003f538)
LookupPrivilegeValueW (Address: 0x18003f488)
OpenProcessToken (Address: 0x18003f480)
OpenTraceW (Address: 0x18003f518)
ProcessTrace (Address: 0x18003f530)
QueryAllTracesW (Address: 0x18003f4c0)
RegCloseKey (Address: 0x18003f508)
RegCreateKeyExW (Address: 0x18003f4a0)
RegDeleteValueW (Address: 0x18003f4a8)
RegEnumKeyExW (Address: 0x18003f500)
RegisterTraceGuidsW (Address: 0x18003f528)
RegOpenKeyExW (Address: 0x18003f4f8)
RegQueryValueExW (Address: 0x18003f498)
RegSetValueExW (Address: 0x18003f490)
StartTraceW (Address: 0x18003f4e0)
TraceEvent (Address: 0x18003f4b8)
TraceSetInformation (Address: 0x18003f4b0)
UnregisterTraceGuids (Address: 0x18003f520)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18003f638)
CloseHandle (Address: 0x18003f728)
CopyFileW (Address: 0x18003f5f8)
CreateDirectoryW (Address: 0x18003f560)
CreateFileMappingW (Address: 0x18003f590)
CreateFileW (Address: 0x18003f750)
CreateMutexExW (Address: 0x18003f718)
CreateProcessW (Address: 0x18003f600)
CreateSemaphoreExW (Address: 0x18003f730)
DebugBreak (Address: 0x18003f698)
DeleteCriticalSection (Address: 0x18003f7b0)
DeleteFileW (Address: 0x18003f760)
DeviceIoControl (Address: 0x18003f788)
EnterCriticalSection (Address: 0x18003f7e0)
FindClose (Address: 0x18003f770)
FindFirstFileW (Address: 0x18003f740)
FindFirstVolumeW (Address: 0x18003f5c0)
FindNextFileW (Address: 0x18003f768)
FindNextVolumeW (Address: 0x18003f5d8)
FindResourceExW (Address: 0x18003f668)
FindResourceW (Address: 0x18003f568)
FindVolumeClose (Address: 0x18003f5e0)
FormatMessageW (Address: 0x18003f618)
FreeLibrary (Address: 0x18003f6a0)
GetCurrentProcess (Address: 0x18003f778)
GetCurrentProcessId (Address: 0x18003f7d0)
GetCurrentThread (Address: 0x18003f5f0)
GetCurrentThreadId (Address: 0x18003f758)
GetEnvironmentVariableW (Address: 0x18003f7c8)
GetExitCodeProcess (Address: 0x18003f610)
GetFileAttributesW (Address: 0x18003f7c0)
GetFileSize (Address: 0x18003f748)
GetFinalPathNameByHandleW (Address: 0x18003f570)
GetFullPathNameW (Address: 0x18003f5a8)
GetLastError (Address: 0x18003f7a0)
GetModuleFileNameA (Address: 0x18003f690)
GetModuleHandleExW (Address: 0x18003f688)
GetModuleHandleW (Address: 0x18003f670)
GetNativeSystemInfo (Address: 0x18003f648)
GetProcAddress (Address: 0x18003f678)
GetProcessHeap (Address: 0x18003f6c0)
GetSystemDirectoryW (Address: 0x18003f5b0)
GetSystemInfo (Address: 0x18003f640)
GetSystemTimeAsFileTime (Address: 0x18003f818)
GetSystemWindowsDirectoryW (Address: 0x18003f5b8)
GetTempFileNameW (Address: 0x18003f738)
GetTempPathW (Address: 0x18003f700)
GetTickCount (Address: 0x18003f810)
GetVersionExW (Address: 0x18003f708)
GetVolumePathNamesForVolumeNameW (Address: 0x18003f5c8)
GetWindowsDirectoryW (Address: 0x18003f780)
HeapAlloc (Address: 0x18003f6a8)
HeapDestroy (Address: 0x18003f808)
HeapFree (Address: 0x18003f6b0)
HeapReAlloc (Address: 0x18003f800)
HeapSize (Address: 0x18003f7f8)
InitializeCriticalSection (Address: 0x18003f7a8)
IsDebuggerPresent (Address: 0x18003f6c8)
IsWow64Process (Address: 0x18003f578)
LCMapStringEx (Address: 0x18003f6b8)
LeaveCriticalSection (Address: 0x18003f7e8)
LoadLibraryExA (Address: 0x18003f628)
LoadLibraryExW (Address: 0x18003f7b8)
LoadLibraryW (Address: 0x18003f710)
LoadResource (Address: 0x18003f650)
LockResource (Address: 0x18003f658)
MapViewOfFileEx (Address: 0x18003f598)
MoveFileExW (Address: 0x18003f7d8)
MultiByteToWideChar (Address: 0x18003f828)
OpenSemaphoreW (Address: 0x18003f6f8)
OutputDebugStringA (Address: 0x18003f7f0)
OutputDebugStringW (Address: 0x18003f6d0)
QueryDosDeviceW (Address: 0x18003f5d0)
QueryPerformanceCounter (Address: 0x18003f820)
RaiseException (Address: 0x18003f798)
ReadFile (Address: 0x18003f868)
ReleaseMutex (Address: 0x18003f6e8)
ReleaseSemaphore (Address: 0x18003f6e0)
ReleaseSRWLockExclusive (Address: 0x18003f630)
RtlCaptureContext (Address: 0x18003f848)
RtlLookupFunctionEntry (Address: 0x18003f850)
RtlVirtualUnwind (Address: 0x18003f858)
SetFilePointer (Address: 0x18003f550)
SetFilePointerEx (Address: 0x18003f558)
SetLastError (Address: 0x18003f6d8)
SetUnhandledExceptionFilter (Address: 0x18003f838)
SizeofResource (Address: 0x18003f660)
Sleep (Address: 0x18003f840)
SystemTimeToFileTime (Address: 0x18003f5e8)
TerminateProcess (Address: 0x18003f830)
UnhandledExceptionFilter (Address: 0x18003f860)
UnmapViewOfFile (Address: 0x18003f5a0)
VirtualProtect (Address: 0x18003f620)
VirtualQuery (Address: 0x18003f790)
WaitForSingleObject (Address: 0x18003f608)
WaitForSingleObjectEx (Address: 0x18003f6f0)
WideCharToMultiByte (Address: 0x18003f720)
Wow64DisableWow64FsRedirection (Address: 0x18003f580)
Wow64RevertWow64FsRedirection (Address: 0x18003f588)
WriteFile (Address: 0x18003f680)

msvcrt.dll

__C_specific_handler (Address: 0x18003f9b8)
__CxxFrameHandler3 (Address: 0x18003fb18)
__dllonexit (Address: 0x18003fb10)
_amsg_exit (Address: 0x18003fa08)
_callnewh (Address: 0x18003fb20)
_CxxThrowException (Address: 0x18003f9a8)
_errno (Address: 0x18003fa78)
_gmtime64 (Address: 0x18003f970)
_initterm (Address: 0x18003f958)
_ismbcspace (Address: 0x18003fa10)
_lock (Address: 0x18003f940)
_mbscspn (Address: 0x18003fa20)
_mbsinc (Address: 0x18003f9f0)
_mbsspn (Address: 0x18003fa18)
_memicmp (Address: 0x18003f938)
_onexit (Address: 0x18003f960)
_purecall (Address: 0x18003f998)
_snwprintf_s (Address: 0x18003fa48)
_stricmp (Address: 0x18003f900)
_ultow_s (Address: 0x18003f9f8)
_unlock (Address: 0x18003fa00)
_vscwprintf (Address: 0x18003faa8)
_vsnwprintf (Address: 0x18003fa30)
_wcsdup (Address: 0x18003fa50)
_wcserror (Address: 0x18003f9d8)
_wcsicmp (Address: 0x18003fac0)
_wcslwr_s (Address: 0x18003f908)
_wcsnicmp (Address: 0x18003fa80)
_wcstoui64 (Address: 0x18003fa70)
_wfopen (Address: 0x18003f9e0)
_XcptFilter (Address: 0x18003f978)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18003fa98)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18003fa88)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18003fa60)
??0exception@@QEAA@XZ (Address: 0x18003f990)
??1exception@@UEAA@XZ (Address: 0x18003fa90)
??1type_info@@UEAA@XZ (Address: 0x18003f948)
?terminate@@YAXXZ (Address: 0x18003f950)
?what@exception@@UEBAPEBDXZ (Address: 0x18003fa38)
calloc (Address: 0x18003f9a0)
fclose (Address: 0x18003f9c0)
feof (Address: 0x18003f9c8)
fgetws (Address: 0x18003f9d0)
free (Address: 0x18003fb00)
iswdigit (Address: 0x18003f910)
iswxdigit (Address: 0x18003fa58)
malloc (Address: 0x18003fad8)
memchr (Address: 0x18003fb08)
memcpy (Address: 0x18003f988)
memcpy_s (Address: 0x18003faf8)
memmove (Address: 0x18003f980)
memmove_s (Address: 0x18003faf0)
memset (Address: 0x18003f9b0)
realloc (Address: 0x18003f968)
strncpy_s (Address: 0x18003fa28)
strrchr (Address: 0x18003f928)
swprintf_s (Address: 0x18003fa40)
towlower (Address: 0x18003f920)
vswprintf_s (Address: 0x18003faa0)
wcschr (Address: 0x18003fab8)
wcscmp (Address: 0x18003fb28)
wcscpy_s (Address: 0x18003fad0)
wcscspn (Address: 0x18003fab0)
wcsncmp (Address: 0x18003f8f0)
wcsncpy_s (Address: 0x18003fae0)
wcsnlen (Address: 0x18003fac8)
wcsrchr (Address: 0x18003f8f8)
wcsspn (Address: 0x18003fae8)
wcsstr (Address: 0x18003f930)
wcstok_s (Address: 0x18003f9e8)
wcstol (Address: 0x18003f918)
wcstoul (Address: 0x18003fa68)

ntdll.dll

NtQuerySystemInformation (Address: 0x18003fb78)
NtSetSystemInformation (Address: 0x18003fb60)
RtlAcquireSRWLockExclusive (Address: 0x18003fb58)
RtlAdjustPrivilege (Address: 0x18003fb50)
RtlGetVersion (Address: 0x18003fb80)
RtlGUIDFromString (Address: 0x18003fb68)
RtlImageDirectoryEntryToData (Address: 0x18003fb40)
RtlImageRvaToVa (Address: 0x18003fb48)
RtlInitUnicodeString (Address: 0x18003fb70)
RtlNtStatusToDosError (Address: 0x18003fb88)
RtlReleaseSRWLockExclusive (Address: 0x18003fb38)

OLE32.dll

CoCreateGuid (Address: 0x18003f880)
CoCreateInstance (Address: 0x18003f888)
CoInitializeEx (Address: 0x18003f878)
CoUninitialize (Address: 0x18003f890)
StringFromGUID2 (Address: 0x18003f898)

OLEAUT32.dll

SysAllocString (Address: 0x18003f8b0)
SysFreeString (Address: 0x18003f8a8)

USER32.dll

UnregisterClassA (Address: 0x18003f8c0)

VERSION.dll

GetFileVersionInfoExW (Address: 0x18003f8d0)
GetFileVersionInfoSizeExW (Address: 0x18003f8e0)
VerQueryValueW (Address: 0x18003f8d8)