netapi32.dll

Description: Team EFA/WillyTerra

Version: 1.0.0.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 53f6b4deb5d4a46516838eba9f17698f

File Size: 748.4 KB

Uploaded At: April 5, 2026, 3:05 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory

Exported Functions

DavAddConnection (Ordinal: 1, Address: 0x296e0)
DavDeleteConnection (Ordinal: 2, Address: 0x29723)
DavFlushFile (Ordinal: 3, Address: 0x29762)
DavGetExtendedError (Ordinal: 4, Address: 0x297a1)
DavGetHTTPFromUNCPath (Ordinal: 5, Address: 0x297e9)
DavGetUNCFromHTTPPath (Ordinal: 6, Address: 0x29833)
DsAddressToSiteNamesA (Ordinal: 7, Address: 0x2987d)
DsAddressToSiteNamesExA (Ordinal: 8, Address: 0x298b4)
DsAddressToSiteNamesExW (Ordinal: 9, Address: 0x298ed)
DsAddressToSiteNamesW (Ordinal: 10, Address: 0x29924)
DsDeregisterDnsHostRecordsA (Ordinal: 11, Address: 0x2995f)
DsDeregisterDnsHostRecordsW (Ordinal: 12, Address: 0x299a0)
DsEnumerateDomainTrustsA (Ordinal: 13, Address: 0x299de)
DsEnumerateDomainTrustsW (Ordinal: 14, Address: 0x29a19)
DsGetDcCloseW (Ordinal: 15, Address: 0x29a49)
DsGetDcNameA (Ordinal: 16, Address: 0x29a6d)
DsGetDcNameW (Ordinal: 17, Address: 0x29a90)
DsGetDcNameWithAccountA (Ordinal: 18, Address: 0x29abe)
DsGetDcNameWithAccountW (Ordinal: 19, Address: 0x29af7)
DsGetDcNextA (Ordinal: 20, Address: 0x29b25)
DsGetDcNextW (Ordinal: 21, Address: 0x29b48)
DsGetDcOpenA (Ordinal: 22, Address: 0x29b6b)
DsGetDcOpenW (Ordinal: 23, Address: 0x29b8e)
DsGetDcSiteCoverageA (Ordinal: 24, Address: 0x29bb9)
DsGetDcSiteCoverageW (Ordinal: 25, Address: 0x29bec)
DsGetForestTrustInformationW (Ordinal: 26, Address: 0x29c27)
DsGetSiteNameA (Ordinal: 27, Address: 0x29c5c)
DsGetSiteNameW (Ordinal: 28, Address: 0x29c83)
DsMergeForestTrustInformationW (Ordinal: 29, Address: 0x29cba)
DsRoleFreeMemory (Ordinal: 30, Address: 0x29cf3)
DsRoleGetPrimaryDomainInformation (Ordinal: 31, Address: 0x29d2d)
DsValidateSubnetNameA (Ordinal: 32, Address: 0x29d6c)
DsValidateSubnetNameW (Ordinal: 33, Address: 0x29da1)
I_BrowserSetNetlogonState (Ordinal: 34, Address: 0x6060)
I_DsUpdateReadOnlyServerDnsRecords (Ordinal: 35, Address: 0x29dfd)
I_NetAccountDeltas (Ordinal: 36, Address: 0x29e3c)
I_NetAccountSync (Ordinal: 37, Address: 0x29e69)
I_NetChainSetClientAttributes (Ordinal: 38, Address: 0x29ea1)
I_NetChainSetClientAttributes2 (Ordinal: 39, Address: 0x29ee7)
I_NetDatabaseDeltas (Ordinal: 40, Address: 0x29f23)
I_NetDatabaseRedo (Ordinal: 41, Address: 0x29f52)
I_NetDatabaseSync (Ordinal: 42, Address: 0x29f7f)
I_NetDatabaseSync2 (Ordinal: 43, Address: 0x29fad)
I_NetDfsGetVersion (Ordinal: 44, Address: 0x29fdc)
I_NetDfsIsThisADomainName (Ordinal: 45, Address: 0x2a010)
I_NetGetDCList (Ordinal: 46, Address: 0x2a040)
I_NetGetForestTrustInformation (Ordinal: 47, Address: 0x2a077)
I_NetLogonControl (Ordinal: 48, Address: 0x2a0b1)
I_NetLogonControl2 (Ordinal: 49, Address: 0x2a0df)
I_NetLogonGetDomainInfo (Ordinal: 50, Address: 0x2a113)
I_NetLogonSamLogoff (Ordinal: 51, Address: 0x2a148)
I_NetLogonSamLogon (Ordinal: 52, Address: 0x2a178)
I_NetLogonSamLogonEx (Ordinal: 53, Address: 0x2a1a9)
I_NetLogonSamLogonWithFlags (Ordinal: 54, Address: 0x2a1e3)
I_NetLogonSendToSam (Ordinal: 55, Address: 0x2a21c)
I_NetLogonUasLogoff (Ordinal: 56, Address: 0x2a24d)
I_NetLogonUasLogon (Ordinal: 57, Address: 0x2a27d)
I_NetServerAuthenticate (Ordinal: 58, Address: 0x2a2b1)
I_NetServerAuthenticate2 (Ordinal: 59, Address: 0x2a2eb)
I_NetServerAuthenticate3 (Ordinal: 60, Address: 0x2a326)
I_NetServerAuthenticateKerberos (Ordinal: 61, Address: 0x2a368)
I_NetServerGetTrustInfo (Ordinal: 62, Address: 0x2a3a9)
I_NetServerPasswordGet (Ordinal: 63, Address: 0x2a3e1)
I_NetServerPasswordSet (Ordinal: 64, Address: 0x2a418)
I_NetServerPasswordSet2 (Ordinal: 65, Address: 0x2a450)
I_NetServerReqChallenge (Ordinal: 66, Address: 0x2a489)
I_NetServerSetServiceBits (Ordinal: 67, Address: 0x2a4c4)
I_NetServerSetServiceBitsEx (Ordinal: 68, Address: 0x2a501)
I_NetServerTrustPasswordsGet (Ordinal: 69, Address: 0x2a541)
I_NetlogonComputeClientDigest (Ordinal: 70, Address: 0x2a585)
I_NetlogonComputeServerDigest (Ordinal: 71, Address: 0x2a5ca)
NetAccessAdd (Ordinal: 72, Address: 0x6066)
NetAccessDel (Ordinal: 73, Address: 0x606c)
NetAccessEnum (Ordinal: 74, Address: 0x6072)
NetAccessGetInfo (Ordinal: 75, Address: 0x6078)
NetAccessGetUserPerms (Ordinal: 76, Address: 0x607e)
NetAccessSetInfo (Ordinal: 77, Address: 0x6084)
NetAddAlternateComputerName (Ordinal: 78, Address: 0x2a66d)
NetAddServiceAccount (Ordinal: 79, Address: 0x2a6a5)
NetAlertRaise (Ordinal: 80, Address: 0x608a)
NetAlertRaiseEx (Ordinal: 81, Address: 0x6090)
NetApiBufferAllocate (Ordinal: 82, Address: 0x2a6f6)
NetApiBufferFree (Ordinal: 83, Address: 0x2a725)
NetApiBufferReallocate (Ordinal: 84, Address: 0x2a756)
NetApiBufferSize (Ordinal: 85, Address: 0x2a787)
NetAuditClear (Ordinal: 86, Address: 0x6096)
NetAuditRead (Ordinal: 87, Address: 0x609c)
NetAuditWrite (Ordinal: 88, Address: 0x60a2)
NetConfigGet (Ordinal: 89, Address: 0x60a8)
NetConfigGetAll (Ordinal: 90, Address: 0x60ae)
NetConfigSet (Ordinal: 91, Address: 0x60b4)
NetConnectionEnum (Ordinal: 92, Address: 0x2a806)
NetCreateProvisioningPackage (Ordinal: 93, Address: 0x2a83c)
NetDfsAdd (Ordinal: 94, Address: 0x2a86b)
NetDfsAddFtRoot (Ordinal: 95, Address: 0x2a88c)
NetDfsAddRootTarget (Ordinal: 96, Address: 0x2a8b7)
NetDfsAddStdRoot (Ordinal: 97, Address: 0x2a8e3)
NetDfsAddStdRootForced (Ordinal: 98, Address: 0x2a912)
NetDfsEnum (Ordinal: 99, Address: 0x2a93b)
NetDfsGetClientInfo (Ordinal: 100, Address: 0x2a961)
NetDfsGetDcAddress (Ordinal: 101, Address: 0x2a98f)
NetDfsGetFtContainerSecurity (Ordinal: 102, Address: 0x2a9c6)
NetDfsGetInfo (Ordinal: 103, Address: 0x2a9f8)
NetDfsGetSecurity (Ordinal: 104, Address: 0x2aa1f)
NetDfsGetStdContainerSecurity (Ordinal: 105, Address: 0x2aa56)
NetDfsGetSupportedNamespaceVersion (Ordinal: 106, Address: 0x2aa9e)
NetDfsManagerGetConfigInfo (Ordinal: 107, Address: 0x2aae3)
NetDfsManagerInitialize (Ordinal: 108, Address: 0x2ab1d)
NetDfsManagerSendSiteInfo (Ordinal: 109, Address: 0x2ab56)
NetDfsMove (Ordinal: 110, Address: 0x2ab82)
NetDfsRemove (Ordinal: 111, Address: 0x2aba1)
NetDfsRemoveFtRoot (Ordinal: 112, Address: 0x2abc8)
NetDfsRemoveFtRootForced (Ordinal: 113, Address: 0x2abfb)
NetDfsRemoveRootTarget (Ordinal: 114, Address: 0x2ac32)
NetDfsRemoveStdRoot (Ordinal: 115, Address: 0x2ac64)
NetDfsRename (Ordinal: 116, Address: 0x2ac8c)
NetDfsSetClientInfo (Ordinal: 117, Address: 0x2acb4)
NetDfsSetFtContainerSecurity (Ordinal: 118, Address: 0x2acec)
NetDfsSetInfo (Ordinal: 119, Address: 0x2ad1e)
NetDfsSetSecurity (Ordinal: 120, Address: 0x2ad45)
NetDfsSetStdContainerSecurity (Ordinal: 121, Address: 0x2ad7c)
NetEnumerateComputerNames (Ordinal: 122, Address: 0x2adbb)
NetEnumerateServiceAccounts (Ordinal: 123, Address: 0x2adf8)
NetEnumerateTrustedDomains (Ordinal: 124, Address: 0x2ae38)
NetErrorLogClear (Ordinal: 125, Address: 0x60ba)
NetErrorLogRead (Ordinal: 126, Address: 0x60c0)
NetErrorLogWrite (Ordinal: 127, Address: 0x60c6)
NetFileClose (Ordinal: 128, Address: 0x2ae9b)
NetFileEnum (Ordinal: 129, Address: 0x2aebb)
NetFileGetInfo (Ordinal: 130, Address: 0x2aedd)
NetFreeAadJoinInformation (Ordinal: 131, Address: 0x2af0d)
NetGetAadJoinInformation (Ordinal: 132, Address: 0x2af3c)
NetGetAnyDCName (Ordinal: 133, Address: 0x2af61)
NetGetDCName (Ordinal: 134, Address: 0x2af87)
NetGetDisplayInformationIndex (Ordinal: 135, Address: 0x2afbb)
NetGetJoinInformation (Ordinal: 136, Address: 0x2aff6)
NetGetJoinableOUs (Ordinal: 137, Address: 0x2b025)
NetGroupAdd (Ordinal: 138, Address: 0x2b04a)
NetGroupAddUser (Ordinal: 139, Address: 0x2b06d)
NetGroupDel (Ordinal: 140, Address: 0x2b090)
NetGroupDelUser (Ordinal: 141, Address: 0x2b0b3)
NetGroupEnum (Ordinal: 142, Address: 0x2b0d7)
NetGroupGetInfo (Ordinal: 143, Address: 0x2b0fb)
NetGroupGetUsers (Ordinal: 144, Address: 0x2b123)
NetGroupSetInfo (Ordinal: 145, Address: 0x2b14b)
NetGroupSetUsers (Ordinal: 146, Address: 0x2b173)
NetIsServiceAccount (Ordinal: 147, Address: 0x2b19f)
NetJoinDomain (Ordinal: 148, Address: 0x2b1ca)
NetLocalGroupAdd (Ordinal: 149, Address: 0x2b1f0)
NetLocalGroupAddMember (Ordinal: 150, Address: 0x2b21f)
NetLocalGroupAddMembers (Ordinal: 151, Address: 0x2b255)
NetLocalGroupDel (Ordinal: 152, Address: 0x2b285)
NetLocalGroupDelMember (Ordinal: 153, Address: 0x2b2b4)
NetLocalGroupDelMembers (Ordinal: 154, Address: 0x2b2ea)
NetLocalGroupEnum (Ordinal: 155, Address: 0x2b31b)
NetLocalGroupGetInfo (Ordinal: 156, Address: 0x2b349)
NetLocalGroupGetMembers (Ordinal: 157, Address: 0x2b37d)
NetLocalGroupSetInfo (Ordinal: 158, Address: 0x2b3b1)
NetLocalGroupSetMembers (Ordinal: 159, Address: 0x2b3e5)
NetLogonGetTimeServiceParentDomain (Ordinal: 160, Address: 0x2b427)
NetLogonSetServiceBits (Ordinal: 161, Address: 0x2b46a)
NetMessageBufferSend (Ordinal: 162, Address: 0x60cc)
NetMessageNameAdd (Ordinal: 163, Address: 0x60d2)
NetMessageNameDel (Ordinal: 164, Address: 0x60d8)
NetMessageNameEnum (Ordinal: 165, Address: 0x60de)
NetMessageNameGetInfo (Ordinal: 166, Address: 0x60e4)
NetProvisionComputerAccount (Ordinal: 167, Address: 0x2b508)
NetQueryDisplayInformation (Ordinal: 168, Address: 0x2b547)
NetQueryServiceAccount (Ordinal: 169, Address: 0x2b580)
NetRegisterDomainNameChangeNotification (Ordinal: 170, Address: 0x60ea)
NetRemoteComputerSupports (Ordinal: 171, Address: 0x2b5e2)
NetRemoteTOD (Ordinal: 172, Address: 0x2b612)
NetRemoveAlternateComputerName (Ordinal: 173, Address: 0x2b645)
NetRemoveServiceAccount (Ordinal: 174, Address: 0x2b683)
NetRenameMachineInDomain (Ordinal: 175, Address: 0x2b6bd)
NetReplExportDirAdd (Ordinal: 176, Address: 0x60f0)
NetReplExportDirDel (Ordinal: 177, Address: 0x60f6)
NetReplExportDirEnum (Ordinal: 178, Address: 0x60fc)
NetReplExportDirGetInfo (Ordinal: 179, Address: 0x6102)
NetReplExportDirLock (Ordinal: 180, Address: 0x6108)
NetReplExportDirSetInfo (Ordinal: 181, Address: 0x610e)
NetReplExportDirUnlock (Ordinal: 182, Address: 0x6114)
NetReplGetInfo (Ordinal: 183, Address: 0x611a)
NetReplImportDirAdd (Ordinal: 184, Address: 0x6120)
NetReplImportDirDel (Ordinal: 185, Address: 0x6126)
NetReplImportDirEnum (Ordinal: 186, Address: 0x612c)
NetReplImportDirGetInfo (Ordinal: 187, Address: 0x6132)
NetReplImportDirLock (Ordinal: 188, Address: 0x6138)
NetReplImportDirUnlock (Ordinal: 189, Address: 0x613e)
NetReplSetInfo (Ordinal: 190, Address: 0x6144)
NetRequestOfflineDomainJoin (Ordinal: 191, Address: 0x2b831)
NetRequestProvisioningPackageInstall (Ordinal: 192, Address: 0x2b87a)
NetScheduleJobAdd (Ordinal: 193, Address: 0x2b8b9)
NetScheduleJobDel (Ordinal: 194, Address: 0x2b8e6)
NetScheduleJobEnum (Ordinal: 195, Address: 0x2b914)
NetScheduleJobGetInfo (Ordinal: 196, Address: 0x2b946)
NetServerAliasAdd (Ordinal: 197, Address: 0x2b977)
NetServerAliasDel (Ordinal: 198, Address: 0x2b9a2)
NetServerAliasEnum (Ordinal: 199, Address: 0x2b9ce)
NetServerComputerNameAdd (Ordinal: 200, Address: 0x2ba01)
NetServerComputerNameDel (Ordinal: 201, Address: 0x2ba3a)
NetServerDiskEnum (Ordinal: 202, Address: 0x2ba6c)
NetServerEnum (Ordinal: 203, Address: 0x614a)
NetServerEnumEx (Ordinal: 204, Address: 0x6150)
NetServerGetInfo (Ordinal: 205, Address: 0x2bab4)
NetServerSetInfo (Ordinal: 206, Address: 0x2badd)
NetServerTransportAdd (Ordinal: 207, Address: 0x2bb0b)
NetServerTransportAddEx (Ordinal: 208, Address: 0x2bb40)
NetServerTransportDel (Ordinal: 209, Address: 0x2bb75)
NetServerTransportEnum (Ordinal: 210, Address: 0x2bba9)
NetServiceControl (Ordinal: 211, Address: 0x6156)
NetServiceEnum (Ordinal: 212, Address: 0x615c)
NetServiceGetInfo (Ordinal: 213, Address: 0x6162)
NetServiceInstall (Ordinal: 214, Address: 0x6168)
NetSessionDel (Ordinal: 215, Address: 0x2bc1a)
NetSessionEnum (Ordinal: 216, Address: 0x2bc3e)
NetSessionGetInfo (Ordinal: 217, Address: 0x2bc66)
NetSetPrimaryComputerName (Ordinal: 218, Address: 0x2bc99)
NetShareAdd (Ordinal: 219, Address: 0x2bcc6)
NetShareCheck (Ordinal: 220, Address: 0x2bce7)
NetShareDel (Ordinal: 221, Address: 0x2bd08)
NetShareDelEx (Ordinal: 222, Address: 0x2bd29)
NetShareDelSticky (Ordinal: 223, Address: 0x2bd50)
NetShareEnum (Ordinal: 224, Address: 0x2bd76)
NetShareEnumSticky (Ordinal: 225, Address: 0x2bd9d)
NetShareGetInfo (Ordinal: 226, Address: 0x2bdc7)
NetShareSetInfo (Ordinal: 227, Address: 0x2bdee)
NetStatisticsGet (Ordinal: 228, Address: 0x616e)
NetUnjoinDomain (Ordinal: 229, Address: 0x2be26)
NetUnregisterDomainNameChangeNotification (Ordinal: 230, Address: 0x6174)
NetUseAdd (Ordinal: 231, Address: 0x2be71)
NetUseDel (Ordinal: 232, Address: 0x2be8c)
NetUseEnum (Ordinal: 233, Address: 0x2bea8)
NetUseGetInfo (Ordinal: 234, Address: 0x2bec8)
NetUserAdd (Ordinal: 235, Address: 0x2bee8)
NetUserChangePassword (Ordinal: 236, Address: 0x2bf10)
NetUserDel (Ordinal: 237, Address: 0x2bf38)
NetUserEnum (Ordinal: 238, Address: 0x2bf56)
NetUserGetGroups (Ordinal: 239, Address: 0x2bf7a)
NetUserGetInfo (Ordinal: 240, Address: 0x2bfa1)
NetUserGetLocalGroups (Ordinal: 241, Address: 0x2bfcd)
NetUserModalsGet (Ordinal: 242, Address: 0x2bffb)
NetUserModalsSet (Ordinal: 243, Address: 0x2c024)
NetUserSetGroups (Ordinal: 244, Address: 0x2c04d)
NetUserSetInfo (Ordinal: 245, Address: 0x2c074)
NetValidateName (Ordinal: 246, Address: 0x2c09a)
NetValidatePasswordPolicy (Ordinal: 247, Address: 0x2c0cb)
NetValidatePasswordPolicyFree (Ordinal: 248, Address: 0x2c10a)
NetWkstaGetInfo (Ordinal: 249, Address: 0x617a)
NetWkstaSetInfo (Ordinal: 250, Address: 0x6180)
NetWkstaTransportAdd (Ordinal: 251, Address: 0x2c164)
NetWkstaTransportDel (Ordinal: 252, Address: 0x2c195)
NetWkstaTransportEnum (Ordinal: 253, Address: 0x2c1c7)
NetWkstaUserEnum (Ordinal: 254, Address: 0x2c1f5)
NetWkstaUserGetInfo (Ordinal: 255, Address: 0x2c221)
NetWkstaUserSetInfo (Ordinal: 256, Address: 0x2c250)
NetapipBufferAllocate (Ordinal: 257, Address: 0x2c281)
Netbios (Ordinal: 258, Address: 0x6186)
NetpAddTlnFtinfoEntry (Ordinal: 259, Address: 0x618c)
NetpAllocFtinfoEntry (Ordinal: 260, Address: 0x6192)
NetpAssertFailed (Ordinal: 261, Address: 0x6198)
NetpCleanFtinfoContext (Ordinal: 262, Address: 0x619e)
NetpCloseConfigData (Ordinal: 263, Address: 0x61a4)
NetpCopyFtinfoContext (Ordinal: 264, Address: 0x61aa)
NetpDbgPrint (Ordinal: 265, Address: 0x61b0)
NetpGetConfigBool (Ordinal: 266, Address: 0x61b6)
NetpGetConfigDword (Ordinal: 267, Address: 0x61bc)
NetpGetConfigTStrArray (Ordinal: 268, Address: 0x61c2)
NetpGetConfigValue (Ordinal: 269, Address: 0x61c8)
NetpGetFileSecurity (Ordinal: 270, Address: 0x61ce)
NetpHexDump (Ordinal: 271, Address: 0x61d4)
NetpInitFtinfoContext (Ordinal: 272, Address: 0x61da)
NetpIsRemote (Ordinal: 273, Address: 0x2c3c4)
NetpIsUncComputerNameValid (Ordinal: 274, Address: 0x61e0)
NetpMergeFtinfo (Ordinal: 275, Address: 0x61e6)
NetpNetBiosReset (Ordinal: 276, Address: 0x61ec)
NetpNetBiosStatusToApiStatus (Ordinal: 277, Address: 0x61f2)
NetpOpenConfigData (Ordinal: 278, Address: 0x61f8)
NetpSetFileSecurity (Ordinal: 279, Address: 0x61fe)
NetpwNameCanonicalize (Ordinal: 280, Address: 0x2c470)
NetpwNameCompare (Ordinal: 281, Address: 0x2c4a0)
NetpwNameValidate (Ordinal: 282, Address: 0x2c4cc)
NetpwPathCanonicalize (Ordinal: 283, Address: 0x2c4fd)
NetpwPathCompare (Ordinal: 284, Address: 0x2c52d)
NetpwPathType (Ordinal: 285, Address: 0x2c555)
NlBindingAddServerToCache (Ordinal: 286, Address: 0x2c586)
NlBindingRemoveServerFromCache (Ordinal: 287, Address: 0x2c5c8)
NlBindingSetAuthInfo (Ordinal: 288, Address: 0x2c605)
RxNetAccessAdd (Ordinal: 289, Address: 0x6204)
RxNetAccessDel (Ordinal: 290, Address: 0x620a)
RxNetAccessEnum (Ordinal: 291, Address: 0x6210)
RxNetAccessGetInfo (Ordinal: 292, Address: 0x6216)
RxNetAccessGetUserPerms (Ordinal: 293, Address: 0x621c)
RxNetAccessSetInfo (Ordinal: 294, Address: 0x6222)
RxNetServerEnum (Ordinal: 295, Address: 0x6228)
RxNetUserPasswordSet (Ordinal: 296, Address: 0x622e)
RxRemoteApi (Ordinal: 297, Address: 0x6234)

Imported DLLs & Functions

ADVAPI32.dll

RegOpenKeyExW (Address: 0x18001d000)

KERNEL32.dll

CloseHandle (Address: 0x18001d048)
CreateFileW (Address: 0x18001d0c0)
CreateMutexW (Address: 0x18001d010)
CreateToolhelp32Snapshot (Address: 0x18001d110)
DeleteCriticalSection (Address: 0x18001d220)
DisableThreadLibraryCalls (Address: 0x18001d040)
EncodePointer (Address: 0x18001d208)
EnterCriticalSection (Address: 0x18001d210)
ExitProcess (Address: 0x18001d098)
FindClose (Address: 0x18001d270)
FindFirstFileExW (Address: 0x18001d278)
FindNextFileW (Address: 0x18001d280)
FlsAlloc (Address: 0x18001d2d8)
FlsFree (Address: 0x18001d2f0)
FlsGetValue (Address: 0x18001d2e0)
FlsSetValue (Address: 0x18001d2e8)
FlushFileBuffers (Address: 0x18001d328)
FlushInstructionCache (Address: 0x18001d148)
FreeEnvironmentStringsW (Address: 0x18001d2d0)
FreeLibrary (Address: 0x18001d0a0)
GetACP (Address: 0x18001d290)
GetCommandLineA (Address: 0x18001d2a8)
GetCommandLineW (Address: 0x18001d2b0)
GetConsoleMode (Address: 0x18001d340)
GetConsoleOutputCP (Address: 0x18001d338)
GetCPInfo (Address: 0x18001d2a0)
GetCurrentProcess (Address: 0x18001d0e0)
GetCurrentProcessId (Address: 0x18001d058)
GetCurrentThreadId (Address: 0x18001d0f8)
GetEnvironmentStringsW (Address: 0x18001d2c8)
GetEnvironmentVariableW (Address: 0x18001d060)
GetFileType (Address: 0x18001d268)
GetLastError (Address: 0x18001d038)
GetModuleFileNameW (Address: 0x18001d0b8)
GetModuleHandleExA (Address: 0x18001d030)
GetModuleHandleExW (Address: 0x18001d258)
GetModuleHandleW (Address: 0x18001d140)
GetOEMCP (Address: 0x18001d298)
GetProcAddress (Address: 0x18001d090)
GetProcessHeap (Address: 0x18001d300)
GetStartupInfoW (Address: 0x18001d1c0)
GetStdHandle (Address: 0x18001d260)
GetStringTypeW (Address: 0x18001d310)
GetSystemDirectoryW (Address: 0x18001d078)
GetSystemInfo (Address: 0x18001d170)
GetSystemTimeAsFileTime (Address: 0x18001d1d0)
GetThreadContext (Address: 0x18001d138)
HeapAlloc (Address: 0x18001d128)
HeapCreate (Address: 0x18001d0c8)
HeapDestroy (Address: 0x18001d130)
HeapFree (Address: 0x18001d0d8)
HeapReAlloc (Address: 0x18001d120)
HeapSize (Address: 0x18001d320)
InitializeCriticalSectionAndSpinCount (Address: 0x18001d228)
InitializeSListHead (Address: 0x18001d1d8)
InterlockedFlushSList (Address: 0x18001d1f8)
IsDebuggerPresent (Address: 0x18001d1b8)
IsProcessorFeaturePresent (Address: 0x18001d1b0)
IsValidCodePage (Address: 0x18001d288)
K32GetModuleInformation (Address: 0x18001d050)
LCMapStringW (Address: 0x18001d2f8)
LeaveCriticalSection (Address: 0x18001d218)
LoadLibraryExW (Address: 0x18001d250)
LoadLibraryW (Address: 0x18001d088)
lstrcatW (Address: 0x18001d080)
MultiByteToWideChar (Address: 0x18001d2b8)
OpenProcess (Address: 0x18001d028)
OpenThread (Address: 0x18001d158)
QueryPerformanceCounter (Address: 0x18001d1c8)
RaiseException (Address: 0x18001d1f0)
ReadProcessMemory (Address: 0x18001d070)
ReleaseMutex (Address: 0x18001d018)
ResumeThread (Address: 0x18001d108)
RtlCaptureContext (Address: 0x18001d180)
RtlCaptureStackBackTrace (Address: 0x18001d020)
RtlLookupFunctionEntry (Address: 0x18001d188)
RtlPcToFileHeader (Address: 0x18001d1e8)
RtlUnwindEx (Address: 0x18001d1e0)
RtlVirtualUnwind (Address: 0x18001d190)
SetFilePointerEx (Address: 0x18001d308)
SetLastError (Address: 0x18001d200)
SetStdHandle (Address: 0x18001d318)
SetThreadContext (Address: 0x18001d150)
SetUnhandledExceptionFilter (Address: 0x18001d1a0)
Sleep (Address: 0x18001d118)
SuspendThread (Address: 0x18001d100)
TerminateProcess (Address: 0x18001d1a8)
Thread32First (Address: 0x18001d0f0)
Thread32Next (Address: 0x18001d0e8)
TlsAlloc (Address: 0x18001d230)
TlsFree (Address: 0x18001d248)
TlsGetValue (Address: 0x18001d238)
TlsSetValue (Address: 0x18001d240)
UnhandledExceptionFilter (Address: 0x18001d198)
VirtualAlloc (Address: 0x18001d168)
VirtualFree (Address: 0x18001d160)
VirtualProtect (Address: 0x18001d0d0)
VirtualProtectEx (Address: 0x18001d068)
VirtualQuery (Address: 0x18001d178)
WideCharToMultiByte (Address: 0x18001d2c0)
WriteConsoleW (Address: 0x18001d0a8)
WriteFile (Address: 0x18001d330)
WriteProcessMemory (Address: 0x18001d0b0)