PeerDistSvc.dll

ADVAPI32.dll

CloseServiceHandle (Address: 0x180179ed8)
ControlService (Address: 0x180179ee8)
EventWriteTransfer (Address: 0x180179ea0)
GetSidIdentifierAuthority (Address: 0x180179ec0)
GetSidSubAuthority (Address: 0x180179ec8)
GetSidSubAuthorityCount (Address: 0x180179eb8)
IsValidSid (Address: 0x180179eb0)
OpenProcessToken (Address: 0x180179e98)
OpenSCManagerW (Address: 0x180179ea8)
OpenServiceW (Address: 0x180179ed0)
OpenThreadToken (Address: 0x180179ef0)
QueryServiceStatusEx (Address: 0x180179e90)
StartServiceW (Address: 0x180179ee0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18017a228)
IsDebuggerPresent (Address: 0x18017a230)

api-ms-win-core-debug-l1-1-1.dll

CheckRemoteDebuggerPresent (Address: 0x18017a240)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18017a250)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18017a260)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18017a280)
SetUnhandledExceptionFilter (Address: 0x18017a278)
UnhandledExceptionFilter (Address: 0x18017a270)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18017a2b8)
DeleteFileW (Address: 0x18017a2e0)
FileTimeToLocalFileTime (Address: 0x18017a2d8)
FindFirstFileW (Address: 0x18017a2a0)
FlushFileBuffers (Address: 0x18017a2b0)
GetDiskFreeSpaceExW (Address: 0x18017a2d0)
GetFileAttributesW (Address: 0x18017a2c0)
GetFileInformationByHandle (Address: 0x18017a2a8)
GetFileSizeEx (Address: 0x18017a2e8)
RemoveDirectoryW (Address: 0x18017a2c8)
SetFileInformationByHandle (Address: 0x18017a290)
SetFilePointer (Address: 0x18017a298)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x18017a2f8)
ReOpenFile (Address: 0x18017a300)

api-ms-win-core-handle-l1-1-0.dll

DuplicateHandle (Address: 0x18017a310)
GetHandleInformation (Address: 0x18017a318)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18017a338)
HeapAlloc (Address: 0x18017a330)
HeapFree (Address: 0x18017a328)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x18017a348)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x18017a358)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetSystemPowerStatus (Address: 0x18017a368)

api-ms-win-core-kernel32-legacy-l1-1-3.dll

CreateDirectoryTransactedW (Address: 0x18017a388)
DeleteFileTransactedW (Address: 0x18017a398)
FindFirstFileTransactedW (Address: 0x18017a378)
MoveFileTransactedW (Address: 0x18017a380)
RemoveDirectoryTransactedW (Address: 0x18017a390)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18017a3c0)
FreeLibrary (Address: 0x18017a3b8)
GetModuleHandleExW (Address: 0x18017a3a8)
GetProcAddress (Address: 0x18017a3b0)
LoadLibraryExW (Address: 0x18017a3c8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18017a3d8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18017a3e8)

api-ms-win-core-localization-private-l1-1-0.dll

LoadStringByReference (Address: 0x18017a3f8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x18017a408)
VirtualFree (Address: 0x18017a410)

api-ms-win-core-perfcounters-l1-1-0.dll

PerfCreateInstance (Address: 0x18017a458)
PerfDecrementULongCounterValue (Address: 0x18017a428)
PerfDeleteInstance (Address: 0x18017a460)
PerfIncrementULongCounterValue (Address: 0x18017a440)
PerfIncrementULongLongCounterValue (Address: 0x18017a450)
PerfSetCounterSetInfo (Address: 0x18017a468)
PerfSetULongCounterValue (Address: 0x18017a420)
PerfSetULongLongCounterValue (Address: 0x18017a438)
PerfStartProviderEx (Address: 0x18017a448)
PerfStopProvider (Address: 0x18017a430)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18017a478)
GetCurrentProcess (Address: 0x18017a4a0)
GetCurrentProcessId (Address: 0x18017a498)
GetCurrentThreadId (Address: 0x18017a4a8)
GetExitCodeThread (Address: 0x18017a480)
SetThreadPriority (Address: 0x18017a488)
TerminateProcess (Address: 0x18017a490)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18017a4b8)
QueryPerformanceFrequency (Address: 0x18017a4c0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18017a4e0)
RegCreateKeyExW (Address: 0x18017a508)
RegDeleteValueW (Address: 0x18017a4f8)
RegEnumValueW (Address: 0x18017a4d0)
RegGetKeySecurity (Address: 0x18017a520)
RegGetValueW (Address: 0x18017a4d8)
RegNotifyChangeKeyValue (Address: 0x18017a500)
RegOpenKeyExW (Address: 0x18017a4e8)
RegQueryInfoKeyW (Address: 0x18017a518)
RegSetKeySecurity (Address: 0x18017a4f0)
RegSetValueExW (Address: 0x18017a510)

api-ms-win-core-registry-l2-1-0.dll

RegOpenKeyTransactedW (Address: 0x18017a530)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18017a540)
RtlCompareMemory (Address: 0x18017a548)
RtlLookupFunctionEntry (Address: 0x18017a550)
RtlVirtualUnwind (Address: 0x18017a558)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18017a5d0)
AcquireSRWLockShared (Address: 0x18017a5f0)
CreateEventW (Address: 0x18017a598)
CreateSemaphoreExW (Address: 0x18017a5d8)
DeleteCriticalSection (Address: 0x18017a5c0)
EnterCriticalSection (Address: 0x18017a5e0)
InitializeCriticalSectionAndSpinCount (Address: 0x18017a5e8)
InitializeSRWLock (Address: 0x18017a5b0)
LeaveCriticalSection (Address: 0x18017a590)
ReleaseSemaphore (Address: 0x18017a5a0)
ReleaseSRWLockExclusive (Address: 0x18017a568)
ReleaseSRWLockShared (Address: 0x18017a5c8)
ResetEvent (Address: 0x18017a570)
TryAcquireSRWLockShared (Address: 0x18017a580)
TryEnterCriticalSection (Address: 0x18017a5b8)
WaitForMultipleObjectsEx (Address: 0x18017a578)
WaitForSingleObject (Address: 0x18017a588)
WaitForSingleObjectEx (Address: 0x18017a5a8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18017a600)
SleepConditionVariableSRW (Address: 0x18017a610)
WakeAllConditionVariable (Address: 0x18017a608)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x18017a640)
GetLogicalProcessorInformationEx (Address: 0x18017a628)
GetSystemTimeAsFileTime (Address: 0x18017a620)
GetTickCount (Address: 0x18017a630)
GetTickCount64 (Address: 0x18017a638)

api-ms-win-core-threadpool-l1-2-0.dll

CallbackMayRunLong (Address: 0x18017a6b8)
CloseThreadpool (Address: 0x18017a688)
CloseThreadpoolCleanupGroup (Address: 0x18017a6c0)
CloseThreadpoolCleanupGroupMembers (Address: 0x18017a670)
CloseThreadpoolTimer (Address: 0x18017a6e0)
CloseThreadpoolWait (Address: 0x18017a6c8)
CloseThreadpoolWork (Address: 0x18017a658)
CreateThreadpool (Address: 0x18017a698)
CreateThreadpoolCleanupGroup (Address: 0x18017a678)
CreateThreadpoolTimer (Address: 0x18017a650)
CreateThreadpoolWait (Address: 0x18017a668)
CreateThreadpoolWork (Address: 0x18017a660)
SetEventWhenCallbackReturns (Address: 0x18017a690)
SetThreadpoolThreadMaximum (Address: 0x18017a680)
SetThreadpoolTimer (Address: 0x18017a6d0)
SetThreadpoolWait (Address: 0x18017a6a8)
SubmitThreadpoolWork (Address: 0x18017a6a0)
WaitForThreadpoolTimerCallbacks (Address: 0x18017a6d8)
WaitForThreadpoolWaitCallbacks (Address: 0x18017a6b0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueue (Address: 0x18017a6f8)
CreateTimerQueueTimer (Address: 0x18017a700)
DeleteTimerQueueEx (Address: 0x18017a6f0)
DeleteTimerQueueTimer (Address: 0x18017a710)
UnregisterWaitEx (Address: 0x18017a708)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x18017a720)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18017a740)
EventSetInformation (Address: 0x18017a730)
EventUnregister (Address: 0x18017a738)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x18017a758)
PowerSettingUnregisterNotification (Address: 0x18017a750)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x18017a7c0)
CheckTokenMembership (Address: 0x18017a780)
CreateWellKnownSid (Address: 0x18017a770)
GetSecurityDescriptorControl (Address: 0x18017a7b8)
GetSecurityDescriptorDacl (Address: 0x18017a7a0)
GetSecurityDescriptorGroup (Address: 0x18017a7b0)
GetSecurityDescriptorOwner (Address: 0x18017a7a8)
GetTokenInformation (Address: 0x18017a768)
GetWindowsAccountDomainSid (Address: 0x18017a778)
InitializeSecurityDescriptor (Address: 0x18017a7e0)
IsValidAcl (Address: 0x18017a798)
IsValidSecurityDescriptor (Address: 0x18017a788)
SetSecurityDescriptorControl (Address: 0x18017a790)
SetSecurityDescriptorDacl (Address: 0x18017a7d8)
SetSecurityDescriptorGroup (Address: 0x18017a7d0)
SetSecurityDescriptorOwner (Address: 0x18017a7c8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18017a7f0)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18017a808)
SetServiceStatus (Address: 0x18017a800)

AUTHZ.dll

AuthzFreeAuditEvent (Address: 0x180179f00)
AuthziFreeAuditEventType (Address: 0x180179f18)
AuthziInitializeAuditEvent (Address: 0x180179f20)
AuthziInitializeAuditEventType (Address: 0x180179f08)
AuthziInitializeAuditParams (Address: 0x180179f10)
AuthziLogAuditEvent (Address: 0x180179f28)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x18017a858)
BCryptCreateHash (Address: 0x18017a828)
BCryptDecrypt (Address: 0x18017a878)
BCryptDestroyHash (Address: 0x18017a818)
BCryptDestroyKey (Address: 0x18017a860)
BCryptEncrypt (Address: 0x18017a870)
BCryptFinishHash (Address: 0x18017a830)
BCryptGenerateSymmetricKey (Address: 0x18017a868)
BCryptGenRandom (Address: 0x18017a838)
BCryptGetProperty (Address: 0x18017a850)
BCryptHashData (Address: 0x18017a820)
BCryptOpenAlgorithmProvider (Address: 0x18017a840)
BCryptSetProperty (Address: 0x18017a848)

ESENT.dll

JetAttachDatabase2W (Address: 0x180179f88)
JetBeginSessionW (Address: 0x180179f98)
JetBeginTransaction (Address: 0x18017a048)
JetCloseDatabase (Address: 0x18017a058)
JetCloseTable (Address: 0x18017a030)
JetCommitTransaction (Address: 0x18017a050)
JetCompactW (Address: 0x180179f90)
JetCreateDatabase2W (Address: 0x18017a020)
JetCreateInstanceW (Address: 0x180179fa8)
JetCreateTableColumnIndex3W (Address: 0x18017a028)
JetDelete (Address: 0x180179f38)
JetDeleteTableW (Address: 0x18017a000)
JetDetachDatabaseW (Address: 0x180179f78)
JetEndSession (Address: 0x18017a010)
JetEscrowUpdate (Address: 0x180179fd8)
JetGetDatabaseInfoW (Address: 0x180179fe0)
JetGetSystemParameterW (Address: 0x180179fb8)
JetGetTableColumnInfoW (Address: 0x18017a040)
JetGetTableInfoW (Address: 0x180179ff0)
JetInit3W (Address: 0x180179fa0)
JetMakeKey (Address: 0x18017a018)
JetMove (Address: 0x180179f48)
JetOpenDatabaseW (Address: 0x180179fc0)
JetOpenTableW (Address: 0x18017a038)
JetPrepareUpdate (Address: 0x180179f68)
JetResetSessionContext (Address: 0x180179fd0)
JetRetrieveColumns (Address: 0x180179f50)
JetRollback (Address: 0x180179ff8)
JetSeek (Address: 0x180179f70)
JetSetColumns (Address: 0x180179f60)
JetSetCurrentIndexW (Address: 0x180179f40)
JetSetIndexRange (Address: 0x18017a008)
JetSetSessionContext (Address: 0x180179fc8)
JetSetSystemParameterW (Address: 0x180179fe8)
JetStopServiceInstance (Address: 0x180179f80)
JetTerm2 (Address: 0x180179fb0)
JetUpdate (Address: 0x180179f58)

KERNEL32.dll

CancelIoEx (Address: 0x18017a148)
CloseHandle (Address: 0x18017a140)
CompareStringW (Address: 0x18017a118)
CreateFileW (Address: 0x18017a130)
CreateHardLinkW (Address: 0x18017a0a8)
CreateIoCompletionPort (Address: 0x18017a138)
DeviceIoControl (Address: 0x18017a0c0)
ExpandEnvironmentStringsW (Address: 0x18017a0a0)
FindClose (Address: 0x18017a098)
FindFirstFileExW (Address: 0x18017a090)
FindNextFileW (Address: 0x18017a088)
GetCurrentThread (Address: 0x18017a0c8)
GetDiskFreeSpaceW (Address: 0x18017a108)
GetLogicalDriveStringsW (Address: 0x18017a0b8)
GetQueuedCompletionStatus (Address: 0x18017a158)
GetSystemDirectoryW (Address: 0x18017a0e0)
GetSystemInfo (Address: 0x18017a120)
GetSystemTime (Address: 0x18017a0e8)
GetVolumeInformationW (Address: 0x18017a110)
GetVolumePathNameW (Address: 0x18017a100)
GlobalMemoryStatusEx (Address: 0x18017a0f8)
LocalAlloc (Address: 0x18017a078)
lstrcmpA (Address: 0x18017a070)
lstrcmpW (Address: 0x18017a068)
PostQueuedCompletionStatus (Address: 0x18017a150)
QueryDosDeviceW (Address: 0x18017a0b0)
ReadFile (Address: 0x18017a0d8)
SetEvent (Address: 0x18017a128)
SystemTimeToFileTime (Address: 0x18017a0f0)
WideCharToMultiByte (Address: 0x18017a080)
WriteFile (Address: 0x18017a0d0)

ktmw32.dll

CommitTransaction (Address: 0x18017a890)
CreateTransaction (Address: 0x18017a888)

msvcrt.dll

__C_specific_handler (Address: 0x18017a9b0)
__CxxFrameHandler3 (Address: 0x18017a968)
__dllonexit (Address: 0x18017a988)
_aligned_free (Address: 0x18017a970)
_aligned_malloc (Address: 0x18017aa10)
_amsg_exit (Address: 0x18017a9c0)
_callnewh (Address: 0x18017aa08)
_copysign (Address: 0x18017a918)
_CxxThrowException (Address: 0x18017a9d0)
_initterm (Address: 0x18017a9b8)
_lock (Address: 0x18017a998)
_memicmp (Address: 0x18017a960)
_onexit (Address: 0x18017a980)
_purecall (Address: 0x18017a8f8)
_unlock (Address: 0x18017a990)
_vsnprintf (Address: 0x18017a8e8)
_vsnwprintf (Address: 0x18017a8e0)
_wcsicmp (Address: 0x18017a908)
_wcsnicmp (Address: 0x18017a910)
_XcptFilter (Address: 0x18017a9c8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18017a900)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18017a9f0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18017a9e8)
??1exception@@UEAA@XZ (Address: 0x18017a9e0)
??1type_info@@UEAA@XZ (Address: 0x18017a9a0)
?terminate@@YAXXZ (Address: 0x18017a9a8)
?what@exception@@UEBAPEBDXZ (Address: 0x18017a9d8)
bsearch_s (Address: 0x18017a938)
ceil (Address: 0x18017a8c8)
exp (Address: 0x18017a8a0)
floor (Address: 0x18017a8a8)
free (Address: 0x18017aa00)
ldiv (Address: 0x18017a928)
log (Address: 0x18017a8b0)
malloc (Address: 0x18017a9f8)
memcmp (Address: 0x18017a8b8)
memcpy (Address: 0x18017a8c0)
memcpy_s (Address: 0x18017a8d0)
memmove (Address: 0x18017a978)
memmove_s (Address: 0x18017a940)
memset (Address: 0x18017aa18)
printf (Address: 0x18017a948)
qsort_s (Address: 0x18017a8f0)
rand_s (Address: 0x18017a930)
swprintf_s (Address: 0x18017a8d8)
wcschr (Address: 0x18017a950)
wcsncmp (Address: 0x18017a958)
wcsrchr (Address: 0x18017a920)

ntdll.dll

DbgPrint (Address: 0x18017aa60)
EtwEventActivityIdControl (Address: 0x18017aa68)
EtwEventRegister (Address: 0x18017aac0)
EtwEventUnregister (Address: 0x18017aa90)
EtwEventWrite (Address: 0x18017aa50)
EtwEventWriteTransfer (Address: 0x18017aa88)
EtwGetTraceEnableFlags (Address: 0x18017aa70)
EtwGetTraceEnableLevel (Address: 0x18017aa38)
EtwGetTraceLoggerHandle (Address: 0x18017aa30)
EtwRegisterTraceGuidsW (Address: 0x18017aa78)
EtwTraceMessage (Address: 0x18017aa28)
EtwUnregisterTraceGuids (Address: 0x18017aa80)
NtFsControlFile (Address: 0x18017aa40)
NtReadFile (Address: 0x18017aa48)
NtSetInformationProcess (Address: 0x18017aa58)
RtlIpv4AddressToStringExA (Address: 0x18017aaa0)
RtlIpv4AddressToStringExW (Address: 0x18017aab8)
RtlIpv6AddressToStringExA (Address: 0x18017aa98)
RtlIpv6AddressToStringExW (Address: 0x18017aaa8)
RtlNtStatusToDosError (Address: 0x18017aab0)

ole32.dll

CoCreateInstance (Address: 0x18017aad8)
CoInitializeEx (Address: 0x18017aae0)
CoUninitialize (Address: 0x18017aad0)

POWRPROF.dll

PowerDeterminePlatformRole (Address: 0x18017a168)

profapi.dll

(Address: 0x18017aaf0)

RPCRT4.dll

I_RpcBindingInqTransportType (Address: 0x18017a1b8)
Ndr64AsyncServerCallAll (Address: 0x18017a190)
NdrAsyncServerCall (Address: 0x18017a1e0)
NdrServerCall2 (Address: 0x18017a1a0)
NdrServerCallAll (Address: 0x18017a1a8)
RpcAsyncCompleteCall (Address: 0x18017a1e8)
RpcBindingVectorFree (Address: 0x18017a1d0)
RpcEpRegisterW (Address: 0x18017a178)
RpcImpersonateClient (Address: 0x18017a1f8)
RpcRevertToSelf (Address: 0x18017a1f0)
RpcServerInqBindings (Address: 0x18017a218)
RpcServerInqCallAttributesW (Address: 0x18017a1b0)
RpcServerRegisterAuthInfoW (Address: 0x18017a198)
RpcServerRegisterIf3 (Address: 0x18017a188)
RpcServerSubscribeForNotification (Address: 0x18017a208)
RpcServerUnregisterIfEx (Address: 0x18017a180)
RpcServerUnsubscribeForNotification (Address: 0x18017a200)
RpcServerUseProtseqW (Address: 0x18017a1c8)
UuidCreate (Address: 0x18017a1d8)
UuidCreateSequential (Address: 0x18017a210)
UuidEqual (Address: 0x18017a1c0)

wevtapi.dll

EvtClose (Address: 0x18017ab18)
EvtCreateRenderContext (Address: 0x18017ab00)
EvtRender (Address: 0x18017ab08)
EvtSubscribe (Address: 0x18017ab10)

Exported Functions

Imported DLLs & Functions