rpcrt4.dll

Description: Remote Procedure Call Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: b9decb81fcf8ef9a6b674072da567632

File Size: 1.1 MB

Uploaded At: Dec. 1, 2025, 7:38 a.m.

Views: 14

Exported Functions

  • (Ordinal: 1000, Address: 0x66650)
  • I_RpcBindingInqCurrentModifiedId (Ordinal: 1001, Address: 0x5af40)
  • I_RpcFixTransferSyntax (Ordinal: 1002, Address: 0x9ffa0)
  • I_RpcFwThisIsTheManager (Ordinal: 1003, Address: 0xa01b0)
  • I_RpcInitFwImports (Ordinal: 1004, Address: 0x6a100)
  • I_RpcInitHttpImports (Ordinal: 1005, Address: 0xce370)
  • I_RpcInitImports (Ordinal: 1006, Address: 0x6a3b0)
  • I_RpcInitNdrImports (Ordinal: 1007, Address: 0x67260)
  • I_RpcMgmtQueryDedicatedThreadPool (Ordinal: 1008, Address: 0x679f0)
  • I_RpcOpenClientThread (Ordinal: 1009, Address: 0x4010)
  • I_RpcServerTurnOnOffKeepalives (Ordinal: 1010, Address: 0xa03d0)
  • I_RpcVerifierCorruptionExpected (Ordinal: 1011, Address: 0xa1420)
  • NdrFullPointerFree (Ordinal: 1012, Address: 0x5a70)
  • NdrFullPointerInsertRefId (Ordinal: 1013, Address: 0x76fe0)
  • NdrFullPointerQueryPointer (Ordinal: 1014, Address: 0x77090)
  • NdrFullPointerQueryRefId (Ordinal: 1015, Address: 0x77260)
  • NdrpClientCall2 (Ordinal: 1016, Address: 0x1040)
  • RpcCertMatchPrincipalName (Ordinal: 1017, Address: 0xa1740)
  • pfnFreeRoutines (Ordinal: 1018, Address: 0xe83c8)
  • pfnMarshallRoutines (Ordinal: 1019, Address: 0xe83d0)
  • pfnSizeRoutines (Ordinal: 1020, Address: 0xe83d8)
  • pfnUnmarshallRoutines (Ordinal: 1021, Address: 0xe83e0)
  • CStdStubBuffer_AddRef (Ordinal: 1022, Address: 0x5d100)
  • CStdStubBuffer_Connect (Ordinal: 1023, Address: 0xc3460)
  • CStdStubBuffer_CountRefs (Ordinal: 1024, Address: 0xc34c0)
  • CStdStubBuffer_DebugServerQueryInterface (Ordinal: 1025, Address: 0xc3510)
  • CStdStubBuffer_DebugServerRelease (Ordinal: 1026, Address: 0xc3570)
  • CStdStubBuffer_Disconnect (Ordinal: 1027, Address: 0x60240)
  • CStdStubBuffer_Invoke (Ordinal: 1028, Address: 0x5c890)
  • CStdStubBuffer_IsIIDSupported (Ordinal: 1029, Address: 0xc35c0)
  • CStdStubBuffer_QueryInterface (Ordinal: 1030, Address: 0x62fc0)
  • CreateProxyFromTypeInfo (Ordinal: 1031, Address: 0x64090)
  • CreateStubFromTypeInfo (Ordinal: 1032, Address: 0x66520)
  • DceErrorInqTextA (Ordinal: 1033, Address: 0xa19c0)
  • DceErrorInqTextW (Ordinal: 1034, Address: 0xa1a50)
  • DllGetClassObject (Ordinal: 1035, Address: 0xc3620)
  • DllRegisterServer (Ordinal: 1036, Address: 0xc3690)
  • IUnknown_AddRef_Proxy (Ordinal: 1037, Address: 0x5c160)
  • IUnknown_QueryInterface_Proxy (Ordinal: 1038, Address: 0x5d1b0)
  • IUnknown_Release_Proxy (Ordinal: 1039, Address: 0x5c120)
  • I_RpcAllocate (Ordinal: 1040, Address: 0x275f0)
  • I_RpcAsyncAbortCall (Ordinal: 1041, Address: 0x68ff0)
  • I_RpcAsyncSetHandle (Ordinal: 1042, Address: 0x27350)
  • I_RpcBCacheAllocate (Ordinal: 1043, Address: 0x44210)
  • I_RpcBCacheFree (Ordinal: 1044, Address: 0x64d20)
  • I_RpcBindingCopy (Ordinal: 1045, Address: 0xa1d10)
  • I_RpcBindingCreateNP (Ordinal: 1046, Address: 0xa1d80)
  • I_RpcBindingHandleToAsyncHandle (Ordinal: 1047, Address: 0xa9530)
  • I_RpcBindingInqClientTokenAttributes (Ordinal: 1048, Address: 0x443a0)
  • I_RpcBindingInqDynamicEndpoint (Ordinal: 1049, Address: 0x101729)
  • I_RpcBindingInqDynamicEndpointA (Ordinal: 1050, Address: 0x6a950)
  • I_RpcBindingInqDynamicEndpointW (Ordinal: 1051, Address: 0x4fc20)
  • I_RpcBindingInqLocalClientPID (Ordinal: 1052, Address: 0x58c20)
  • I_RpcBindingInqMarshalledTargetInfo (Ordinal: 1053, Address: 0xa95a0)
  • I_RpcBindingInqSecurityContext (Ordinal: 1054, Address: 0xa1ff0)
  • I_RpcBindingInqSecurityContextKeyInfo (Ordinal: 1055, Address: 0xa2050)
  • I_RpcBindingInqTransportType (Ordinal: 1056, Address: 0x5a9d0)
  • I_RpcBindingInqWireIdForSnego (Ordinal: 1057, Address: 0xa9620)
  • I_RpcBindingIsClientLocal (Ordinal: 1058, Address: 0x461d0)
  • I_RpcBindingIsServerLocal (Ordinal: 1059, Address: 0xa0490)
  • I_RpcBindingSetPrivateOption (Ordinal: 1060, Address: 0x67d90)
  • I_RpcBindingToStaticStringBindingW (Ordinal: 1061, Address: 0xa9790)
  • I_RpcCertProcessAndProvision (Ordinal: 1062, Address: 0xa1820)
  • I_RpcClearMutex (Ordinal: 1063, Address: 0x4b110)
  • I_RpcCompleteAndFree (Ordinal: 1064, Address: 0xa0040)
  • I_RpcDeleteMutex (Ordinal: 1065, Address: 0xa9920)
  • I_RpcEnableWmiTrace (Ordinal: 1066, Address: 0xa1720)
  • I_RpcExceptionFilter (Ordinal: 1067, Address: 0x5a840)
  • I_RpcFilterDCOMActivation (Ordinal: 1068, Address: 0xac280)
  • I_RpcFree (Ordinal: 1069, Address: 0x64200)
  • I_RpcFreeBuffer (Ordinal: 1070, Address: 0x5c580)
  • I_RpcFreePipeBuffer (Ordinal: 1071, Address: 0xac420)
  • I_RpcFreeSystemHandle (Ordinal: 1072, Address: 0x61f60)
  • I_RpcFreeSystemHandleCollection (Ordinal: 1073, Address: 0x5c0c0)
  • I_RpcGetBuffer (Ordinal: 1074, Address: 0x49810)
  • I_RpcGetBufferWithObject (Ordinal: 1075, Address: 0x49820)
  • I_RpcGetCurrentCallHandle (Ordinal: 1076, Address: 0xac5c0)
  • I_RpcGetDefaultSD (Ordinal: 1077, Address: 0xa0500)
  • I_RpcGetExtendedError (Ordinal: 1078, Address: 0xac940)
  • I_RpcGetPortAllocationData (Ordinal: 1079, Address: 0x71320)
  • I_RpcGetSystemHandle (Ordinal: 1080, Address: 0x61270)
  • I_RpcIfInqTransferSyntaxes (Ordinal: 1081, Address: 0x4fc80)
  • I_RpcLogEvent (Ordinal: 1082, Address: 0x4b5d0)
  • I_RpcMapWin32Status (Ordinal: 1083, Address: 0x5a800)
  • I_RpcMarshalBindingHandleAndInterfaceForNDF (Ordinal: 1084, Address: 0xa2100)
  • I_RpcMgmtEnableDedicatedThreadPool (Ordinal: 1085, Address: 0xa0540)
  • I_RpcNDRCGetWireRepresentation (Ordinal: 1086, Address: 0xbef10)
  • I_RpcNDRSContextEmergencyCleanup (Ordinal: 1087, Address: 0xbf3f0)
  • I_RpcNegotiateTransferSyntax (Ordinal: 1088, Address: 0x24310)
  • I_RpcNsBindingSetEntryName (Ordinal: 1089, Address: 0x101b5e)
  • I_RpcNsBindingSetEntryNameA (Ordinal: 1090, Address: 0x6a950)
  • I_RpcNsBindingSetEntryNameW (Ordinal: 1091, Address: 0xa2160)
  • I_RpcNsInterfaceExported (Ordinal: 1092, Address: 0xa2160)
  • I_RpcNsInterfaceUnexported (Ordinal: 1093, Address: 0xa2160)
  • I_RpcOpenClientProcess (Ordinal: 1094, Address: 0x49ed0)
  • I_RpcParseSecurity (Ordinal: 1095, Address: 0x39610)
  • I_RpcPauseExecution (Ordinal: 1096, Address: 0xa0150)
  • I_RpcReallocPipeBuffer (Ordinal: 1097, Address: 0xac450)
  • I_RpcReceive (Ordinal: 1098, Address: 0x44f90)
  • I_RpcRecordCalloutFailure (Ordinal: 1099, Address: 0xafb60)
  • I_RpcRequestMutex (Ordinal: 1100, Address: 0x5e760)
  • I_RpcSNCHOption (Ordinal: 1101, Address: 0x699d0)
  • I_RpcSend (Ordinal: 1102, Address: 0x44250)
  • I_RpcSendReceive (Ordinal: 1103, Address: 0x5a380)
  • I_RpcServerAllocateIpPort (Ordinal: 1104, Address: 0x6fc20)
  • I_RpcServerCheckClientRestriction (Ordinal: 1105, Address: 0x714e0)
  • I_RpcServerDisableExceptionFilter (Ordinal: 1106, Address: 0x6a370)
  • I_RpcServerGetAssociationID (Ordinal: 1107, Address: 0x49c90)
  • I_RpcServerInqAddressChangeFn (Ordinal: 1108, Address: 0xa0570)
  • I_RpcServerInqLocalConnAddress (Ordinal: 1109, Address: 0x47280)
  • I_RpcServerInqRemoteConnAddress (Ordinal: 1110, Address: 0x471e0)
  • I_RpcServerInqTransportType (Ordinal: 1111, Address: 0xac5f0)
  • I_RpcServerIsClientDisconnected (Ordinal: 1112, Address: 0xa0580)
  • I_RpcServerRegisterForwardFunction (Ordinal: 1113, Address: 0x71510)
  • I_RpcServerSetAddressChangeFn (Ordinal: 1114, Address: 0x71570)
  • I_RpcServerStartService (Ordinal: 1115, Address: 0xa0610)
  • I_RpcServerSubscribeForDisconnectNotification (Ordinal: 1116, Address: 0x6a950)
  • I_RpcServerSubscribeForDisconnectNotification2 (Ordinal: 1117, Address: 0x66170)
  • I_RpcServerUnsubscribeForDisconnectNotification (Ordinal: 1118, Address: 0x66a50)
  • I_RpcServerUseProtseq2A (Ordinal: 1119, Address: 0x6bce0)
  • I_RpcServerUseProtseq2W (Ordinal: 1120, Address: 0x50750)
  • I_RpcServerUseProtseqEp2A (Ordinal: 1121, Address: 0x70940)
  • I_RpcServerUseProtseqEp2W (Ordinal: 1122, Address: 0x50870)
  • I_RpcSessionStrictContextHandle (Ordinal: 1123, Address: 0xa06c0)
  • I_RpcSetDCOMAppId (Ordinal: 1124, Address: 0x69910)
  • I_RpcSetSystemHandle (Ordinal: 1125, Address: 0x58b00)
  • I_RpcSsDontSerializeContext (Ordinal: 1126, Address: 0xbf410)
  • I_RpcSystemFunction001 (Ordinal: 1127, Address: 0x71260)
  • I_RpcSystemHandleTypeSpecificWork (Ordinal: 1128, Address: 0x5ef50)
  • I_RpcTransConnectionAllocatePacket (Ordinal: 1129, Address: 0xa96a0)
  • I_RpcTransConnectionFreePacket (Ordinal: 1130, Address: 0xa96b0)
  • I_RpcTransConnectionReallocPacket (Ordinal: 1131, Address: 0x69370)
  • I_RpcTransDatagramAllocate (Ordinal: 1132, Address: 0x6a950)
  • I_RpcTransDatagramAllocate2 (Ordinal: 1133, Address: 0x6a950)
  • I_RpcTransDatagramFree (Ordinal: 1134, Address: 0x6a950)
  • I_RpcTransGetThreadEvent (Ordinal: 1135, Address: 0xac980)
  • I_RpcTransGetThreadEventThreadOptional (Ordinal: 1136, Address: 0xac9a0)
  • I_RpcTransIoCancelled (Ordinal: 1137, Address: 0xa9730)
  • I_RpcTransServerNewConnection (Ordinal: 1138, Address: 0xac350)
  • I_RpcTurnOnEEInfoPropagation (Ordinal: 1139, Address: 0xa21c0)
  • I_UuidCreate (Ordinal: 1140, Address: 0xb0d10)
  • MesBufferHandleReset (Ordinal: 1141, Address: 0x57690)
  • MesDecodeBufferHandleCreate (Ordinal: 1142, Address: 0x57870)
  • MesDecodeIncrementalHandleCreate (Ordinal: 1143, Address: 0x57440)
  • MesEncodeDynBufferHandleCreate (Ordinal: 1144, Address: 0x57600)
  • MesEncodeFixedBufferHandleCreate (Ordinal: 1145, Address: 0x57a40)
  • MesEncodeIncrementalHandleCreate (Ordinal: 1146, Address: 0x573a0)
  • MesHandleFree (Ordinal: 1147, Address: 0x5a110)
  • MesIncrementalHandleReset (Ordinal: 1148, Address: 0x574e0)
  • MesInqProcEncodingId (Ordinal: 1149, Address: 0xc43b0)
  • NDRCContextBinding (Ordinal: 1150, Address: 0x205d0)
  • NDRCContextMarshall (Ordinal: 1151, Address: 0x201a0)
  • NDRCContextUnmarshall (Ordinal: 1152, Address: 0xbef30)
  • NDRSContextMarshall (Ordinal: 1153, Address: 0xbf430)
  • NDRSContextMarshall2 (Ordinal: 1154, Address: 0x20240)
  • NDRSContextMarshallEx (Ordinal: 1155, Address: 0xbf4a0)
  • NDRSContextUnmarshall (Ordinal: 1156, Address: 0xbf4c0)
  • NDRSContextUnmarshall2 (Ordinal: 1157, Address: 0x21e50)
  • NDRSContextUnmarshallEx (Ordinal: 1158, Address: 0xbf510)
  • Ndr64AsyncClientCall (Ordinal: 1159, Address: 0xda0f0)
  • Ndr64AsyncServerCall64 (Ordinal: 1160, Address: 0xdc7b0)
  • Ndr64AsyncServerCallAll (Ordinal: 1161, Address: 0xda620)
  • Ndr64DcomAsyncClientCall (Ordinal: 1162, Address: 0xc36e0)
  • Ndr64DcomAsyncStubCall (Ordinal: 1163, Address: 0xc3760)
  • NdrAllocate (Ordinal: 1164, Address: 0xc5850)
  • NdrAsyncClientCall (Ordinal: 1165, Address: 0x18c0)
  • NdrAsyncServerCall (Ordinal: 1166, Address: 0x1e10)
  • NdrByteCountPointerBufferSize (Ordinal: 1167, Address: 0x624d0)
  • NdrByteCountPointerFree (Ordinal: 1168, Address: 0x634f0)
  • NdrByteCountPointerMarshall (Ordinal: 1169, Address: 0x623c0)
  • NdrByteCountPointerUnmarshall (Ordinal: 1170, Address: 0x60fd0)
  • NdrCStdStubBuffer2_Release (Ordinal: 1171, Address: 0x5e250)
  • NdrCStdStubBuffer_Release (Ordinal: 1172, Address: 0x5c8f0)
  • NdrClearOutParameters (Ordinal: 1173, Address: 0x2a30)
  • NdrClientCall2 (Ordinal: 1174, Address: 0x1010)
  • NdrClientCall3 (Ordinal: 1175, Address: 0xd9b80)
  • NdrClientContextMarshall (Ordinal: 1176, Address: 0xc0590)
  • NdrClientContextUnmarshall (Ordinal: 1177, Address: 0xc2860)
  • NdrClientInitialize (Ordinal: 1178, Address: 0x5d9a0)
  • NdrClientInitializeNew (Ordinal: 1179, Address: 0x5d960)
  • NdrComplexArrayBufferSize (Ordinal: 1180, Address: 0x174a0)
  • NdrComplexArrayFree (Ordinal: 1181, Address: 0x14d80)
  • NdrComplexArrayMarshall (Ordinal: 1182, Address: 0x16290)
  • NdrComplexArrayMemorySize (Ordinal: 1183, Address: 0x2b020)
  • NdrComplexArrayUnmarshall (Ordinal: 1184, Address: 0x1bfe0)
  • NdrComplexStructBufferSize (Ordinal: 1185, Address: 0x19e40)
  • NdrComplexStructFree (Ordinal: 1186, Address: 0x1e690)
  • NdrComplexStructMarshall (Ordinal: 1187, Address: 0x18df0)
  • NdrComplexStructMemorySize (Ordinal: 1188, Address: 0x1abd0)
  • NdrComplexStructUnmarshall (Ordinal: 1189, Address: 0x17e70)
  • NdrConformantArrayBufferSize (Ordinal: 1190, Address: 0x15b30)
  • NdrConformantArrayFree (Ordinal: 1191, Address: 0x5fc50)
  • NdrConformantArrayMarshall (Ordinal: 1192, Address: 0x15a30)
  • NdrConformantArrayMemorySize (Ordinal: 1193, Address: 0x2a5b0)
  • NdrConformantArrayUnmarshall (Ordinal: 1194, Address: 0x1bae0)
  • NdrConformantStringBufferSize (Ordinal: 1195, Address: 0x58860)
  • NdrConformantStringMarshall (Ordinal: 1196, Address: 0x22a20)
  • NdrConformantStringMemorySize (Ordinal: 1197, Address: 0x29360)
  • NdrConformantStringUnmarshall (Ordinal: 1198, Address: 0x27f10)
  • NdrConformantStructBufferSize (Ordinal: 1199, Address: 0x58690)
  • NdrConformantStructFree (Ordinal: 1200, Address: 0xc0020)
  • NdrConformantStructMarshall (Ordinal: 1201, Address: 0x20610)
  • NdrConformantStructMemorySize (Ordinal: 1202, Address: 0x2b1b0)
  • NdrConformantStructUnmarshall (Ordinal: 1203, Address: 0x1e120)
  • NdrConformantVaryingArrayBufferSize (Ordinal: 1204, Address: 0x29de0)
  • NdrConformantVaryingArrayFree (Ordinal: 1205, Address: 0x663b0)
  • NdrConformantVaryingArrayMarshall (Ordinal: 1206, Address: 0x29f30)
  • NdrConformantVaryingArrayMemorySize (Ordinal: 1207, Address: 0xc6910)
  • NdrConformantVaryingArrayUnmarshall (Ordinal: 1208, Address: 0x2a3d0)
  • NdrConformantVaryingStructBufferSize (Ordinal: 1209, Address: 0xc1610)
  • NdrConformantVaryingStructFree (Ordinal: 1210, Address: 0xc0090)
  • NdrConformantVaryingStructMarshall (Ordinal: 1211, Address: 0xc05e0)
  • NdrConformantVaryingStructMemorySize (Ordinal: 1212, Address: 0xc6960)
  • NdrConformantVaryingStructUnmarshall (Ordinal: 1213, Address: 0xc28c0)
  • NdrContextHandleInitialize (Ordinal: 1214, Address: 0x22900)
  • NdrContextHandleSize (Ordinal: 1215, Address: 0xc1730)
  • NdrConvert (Ordinal: 1216, Address: 0xc92d0)
  • NdrConvert2 (Ordinal: 1217, Address: 0xc93f0)
  • NdrCorrelationFree (Ordinal: 1218, Address: 0x65600)
  • NdrCorrelationInitialize (Ordinal: 1219, Address: 0x65c70)
  • NdrCorrelationPass (Ordinal: 1220, Address: 0xc9790)
  • NdrCreateServerInterfaceFromStub (Ordinal: 1221, Address: 0xc37e0)
  • NdrDcomAsyncClientCall (Ordinal: 1222, Address: 0xc3840)
  • NdrDcomAsyncStubCall (Ordinal: 1223, Address: 0xc38c0)
  • NdrDllCanUnloadNow (Ordinal: 1224, Address: 0x5c940)
  • NdrDllGetClassObject (Ordinal: 1225, Address: 0x5c990)
  • NdrDllRegisterProxy (Ordinal: 1226, Address: 0xc3940)
  • NdrDllUnregisterProxy (Ordinal: 1227, Address: 0xc39b0)
  • NdrEncapsulatedUnionBufferSize (Ordinal: 1228, Address: 0x68c60)
  • NdrEncapsulatedUnionFree (Ordinal: 1229, Address: 0x5de20)
  • NdrEncapsulatedUnionMarshall (Ordinal: 1230, Address: 0x5bcc0)
  • NdrEncapsulatedUnionMemorySize (Ordinal: 1231, Address: 0x2ba10)
  • NdrEncapsulatedUnionUnmarshall (Ordinal: 1232, Address: 0x69d70)
  • NdrFixedArrayBufferSize (Ordinal: 1233, Address: 0x5f0f0)
  • NdrFixedArrayFree (Ordinal: 1234, Address: 0x67340)
  • NdrFixedArrayMarshall (Ordinal: 1235, Address: 0x5e3b0)
  • NdrFixedArrayMemorySize (Ordinal: 1236, Address: 0x5fb90)
  • NdrFixedArrayUnmarshall (Ordinal: 1237, Address: 0x5f000)
  • NdrFreeBuffer (Ordinal: 1238, Address: 0x5c530)
  • NdrFullPointerXlatFree (Ordinal: 1239, Address: 0x46b00)
  • NdrFullPointerXlatInit (Ordinal: 1240, Address: 0x273f0)
  • NdrGetBaseInterfaceFromStub (Ordinal: 1241, Address: 0xc3a20)
  • NdrGetBuffer (Ordinal: 1242, Address: 0x23130)
  • NdrGetDcomProtocolVersion (Ordinal: 1243, Address: 0xc3a90)
  • NdrGetSimpleTypeBufferAlignment (Ordinal: 1244, Address: 0xc9800)
  • NdrGetSimpleTypeBufferSize (Ordinal: 1245, Address: 0xc9820)
  • NdrGetSimpleTypeMemorySize (Ordinal: 1246, Address: 0x662e0)
  • NdrGetTypeFlags (Ordinal: 1247, Address: 0x662c0)
  • NdrGetUserMarshalInfo (Ordinal: 1248, Address: 0x5ae10)
  • NdrInterfacePointerBufferSize (Ordinal: 1249, Address: 0xc1790)
  • NdrInterfacePointerFree (Ordinal: 1250, Address: 0xc0130)
  • NdrInterfacePointerMarshall (Ordinal: 1251, Address: 0xc0740)
  • NdrInterfacePointerMemorySize (Ordinal: 1252, Address: 0xc6b70)
  • NdrInterfacePointerUnmarshall (Ordinal: 1253, Address: 0xc2ec0)
  • NdrMapCommAndFaultStatus (Ordinal: 1254, Address: 0x5a900)
  • NdrMesProcEncodeDecode (Ordinal: 1255, Address: 0xc4510)
  • NdrMesProcEncodeDecode2 (Ordinal: 1256, Address: 0xc48f0)
  • NdrMesProcEncodeDecode3 (Ordinal: 1257, Address: 0x3760)
  • NdrMesSimpleTypeAlignSize (Ordinal: 1258, Address: 0xc4be0)
  • NdrMesSimpleTypeAlignSizeAll (Ordinal: 1259, Address: 0xd2f30)
  • NdrMesSimpleTypeDecode (Ordinal: 1260, Address: 0xc4c50)
  • NdrMesSimpleTypeDecodeAll (Ordinal: 1261, Address: 0xd2ff0)
  • NdrMesSimpleTypeEncode (Ordinal: 1262, Address: 0xc4d40)
  • NdrMesSimpleTypeEncodeAll (Ordinal: 1263, Address: 0xd3170)
  • NdrMesTypeAlignSize (Ordinal: 1264, Address: 0x58230)
  • NdrMesTypeAlignSize2 (Ordinal: 1265, Address: 0x16dd0)
  • NdrMesTypeAlignSize3 (Ordinal: 1266, Address: 0x5f2d0)
  • NdrMesTypeDecode (Ordinal: 1267, Address: 0xc4e20)
  • NdrMesTypeDecode2 (Ordinal: 1268, Address: 0x15c10)
  • NdrMesTypeDecode3 (Ordinal: 1269, Address: 0x5f5d0)
  • NdrMesTypeEncode (Ordinal: 1270, Address: 0xc4f70)
  • NdrMesTypeEncode2 (Ordinal: 1271, Address: 0x17090)
  • NdrMesTypeEncode3 (Ordinal: 1272, Address: 0x5f170)
  • NdrMesTypeFree2 (Ordinal: 1273, Address: 0x65a70)
  • NdrMesTypeFree3 (Ordinal: 1274, Address: 0x66950)
  • NdrNonConformantStringBufferSize (Ordinal: 1275, Address: 0xc1830)
  • NdrNonConformantStringMarshall (Ordinal: 1276, Address: 0xc07a0)
  • NdrNonConformantStringMemorySize (Ordinal: 1277, Address: 0x6a190)
  • NdrNonConformantStringUnmarshall (Ordinal: 1278, Address: 0x69e90)
  • NdrNonEncapsulatedUnionBufferSize (Ordinal: 1279, Address: 0x57eb0)
  • NdrNonEncapsulatedUnionFree (Ordinal: 1280, Address: 0x5e0a0)
  • NdrNonEncapsulatedUnionMarshall (Ordinal: 1281, Address: 0x5bd10)
  • NdrNonEncapsulatedUnionMemorySize (Ordinal: 1282, Address: 0x29560)
  • NdrNonEncapsulatedUnionUnmarshall (Ordinal: 1283, Address: 0x20a20)
  • NdrNsGetBuffer (Ordinal: 1284, Address: 0x77440)
  • NdrNsSendReceive (Ordinal: 1285, Address: 0x77440)
  • NdrOleAllocate (Ordinal: 1286, Address: 0x5c050)
  • NdrOleFree (Ordinal: 1287, Address: 0x5c010)
  • NdrOutInit (Ordinal: 1288, Address: 0xc9840)
  • NdrPartialIgnoreClientBufferSize (Ordinal: 1289, Address: 0xc1940)
  • NdrPartialIgnoreClientMarshall (Ordinal: 1290, Address: 0xc08a0)
  • NdrPartialIgnoreServerInitialize (Ordinal: 1291, Address: 0xc99c0)
  • NdrPartialIgnoreServerUnmarshall (Ordinal: 1292, Address: 0xc2f70)
  • NdrPointerBufferSize (Ordinal: 1293, Address: 0x584a0)
  • NdrPointerFree (Ordinal: 1294, Address: 0x14c50)
  • NdrPointerMarshall (Ordinal: 1295, Address: 0x1fb30)
  • NdrPointerMemorySize (Ordinal: 1296, Address: 0xc6c10)
  • NdrPointerUnmarshall (Ordinal: 1297, Address: 0x15310)
  • NdrProxyErrorHandler (Ordinal: 1298, Address: 0xc9b80)
  • NdrProxyFreeBuffer (Ordinal: 1299, Address: 0xc3af0)
  • NdrProxyGetBuffer (Ordinal: 1300, Address: 0xc3b40)
  • NdrProxyInitialize (Ordinal: 1301, Address: 0xc3b90)
  • NdrProxySendReceive (Ordinal: 1302, Address: 0xc3c10)
  • NdrRangeUnmarshall (Ordinal: 1303, Address: 0x13da0)
  • NdrRpcSmClientAllocate (Ordinal: 1304, Address: 0xca270)
  • NdrRpcSmClientFree (Ordinal: 1305, Address: 0xca2f0)
  • NdrRpcSmSetClientToOsf (Ordinal: 1306, Address: 0xca370)
  • NdrRpcSsDefaultAllocate (Ordinal: 1307, Address: 0xca3a0)
  • NdrRpcSsDefaultFree (Ordinal: 1308, Address: 0x714a0)
  • NdrRpcSsDisableAllocate (Ordinal: 1309, Address: 0xca3b0)
  • NdrRpcSsEnableAllocate (Ordinal: 1310, Address: 0xca3f0)
  • NdrSendReceive (Ordinal: 1311, Address: 0x77460)
  • NdrServerCall2 (Ordinal: 1312, Address: 0x60370)
  • NdrServerCallAll (Ordinal: 1313, Address: 0x5ddd0)
  • NdrServerCallNdr64 (Ordinal: 1314, Address: 0x3400)
  • NdrServerContextMarshall (Ordinal: 1315, Address: 0xc08d0)
  • NdrServerContextNewMarshall (Ordinal: 1316, Address: 0xc0920)
  • NdrServerContextNewUnmarshall (Ordinal: 1317, Address: 0xc2fc0)
  • NdrServerContextUnmarshall (Ordinal: 1318, Address: 0xc3110)
  • NdrServerInitialize (Ordinal: 1319, Address: 0x590f0)
  • NdrServerInitializeMarshall (Ordinal: 1320, Address: 0x6a8a0)
  • NdrServerInitializeNew (Ordinal: 1321, Address: 0xc5860)
  • NdrServerInitializePartial (Ordinal: 1322, Address: 0xc5910)
  • NdrServerInitializeUnmarshall (Ordinal: 1323, Address: 0xc5980)
  • NdrSimpleStructBufferSize (Ordinal: 1324, Address: 0x1aaa0)
  • NdrSimpleStructFree (Ordinal: 1325, Address: 0xc0160)
  • NdrSimpleStructMarshall (Ordinal: 1326, Address: 0x1ab10)
  • NdrSimpleStructMemorySize (Ordinal: 1327, Address: 0x1b6b0)
  • NdrSimpleStructUnmarshall (Ordinal: 1328, Address: 0x1b760)
  • NdrSimpleTypeMarshall (Ordinal: 1329, Address: 0x77380)
  • NdrSimpleTypeUnmarshall (Ordinal: 1330, Address: 0x22c50)
  • NdrStubCall2 (Ordinal: 1331, Address: 0x12170)
  • NdrStubCall3 (Ordinal: 1332, Address: 0x118e0)
  • NdrStubForwardingFunction (Ordinal: 1333, Address: 0x66b60)
  • NdrStubGetBuffer (Ordinal: 1334, Address: 0xc3c60)
  • NdrStubInitialize (Ordinal: 1335, Address: 0xc3cc0)
  • NdrStubInitializeMarshall (Ordinal: 1336, Address: 0xc3d40)
  • NdrTypeFlags (Ordinal: 1337, Address: 0xecb30)
  • NdrTypeFree (Ordinal: 1338, Address: 0x5dfe0)
  • NdrTypeMarshall (Ordinal: 1339, Address: 0x67280)
  • NdrTypeSize (Ordinal: 1340, Address: 0x57cd0)
  • NdrTypeUnmarshall (Ordinal: 1341, Address: 0x672f0)
  • NdrUnmarshallBasetypeInline (Ordinal: 1342, Address: 0x5e460)
  • NdrUserMarshalBufferSize (Ordinal: 1343, Address: 0x1b890)
  • NdrUserMarshalFree (Ordinal: 1344, Address: 0x5e1b0)
  • NdrUserMarshalMarshall (Ordinal: 1345, Address: 0x226a0)
  • NdrUserMarshalMemorySize (Ordinal: 1346, Address: 0x1e5e0)
  • NdrUserMarshalSimpleTypeConvert (Ordinal: 1347, Address: 0xc94c0)
  • NdrUserMarshalUnmarshall (Ordinal: 1348, Address: 0x43cd0)
  • NdrVaryingArrayBufferSize (Ordinal: 1349, Address: 0x2b500)
  • NdrVaryingArrayFree (Ordinal: 1350, Address: 0x68a90)
  • NdrVaryingArrayMarshall (Ordinal: 1351, Address: 0x2b790)
  • NdrVaryingArrayMemorySize (Ordinal: 1352, Address: 0x2b620)
  • NdrVaryingArrayUnmarshall (Ordinal: 1353, Address: 0x2b310)
  • NdrXmitOrRepAsBufferSize (Ordinal: 1354, Address: 0xc1970)
  • NdrXmitOrRepAsFree (Ordinal: 1355, Address: 0xc0180)
  • NdrXmitOrRepAsMarshall (Ordinal: 1356, Address: 0xc09e0)
  • NdrXmitOrRepAsMemorySize (Ordinal: 1357, Address: 0xc6e70)
  • NdrXmitOrRepAsUnmarshall (Ordinal: 1358, Address: 0xc3180)
  • NdrpCreateProxy (Ordinal: 1359, Address: 0xc3db0)
  • NdrpCreateStub (Ordinal: 1360, Address: 0xc3e30)
  • NdrpGetProcFormatString (Ordinal: 1361, Address: 0x6e6b0)
  • NdrpGetTypeFormatString (Ordinal: 1362, Address: 0x6e750)
  • NdrpGetTypeGenCookie (Ordinal: 1363, Address: 0x6e7f0)
  • NdrpMemoryIncrement (Ordinal: 1364, Address: 0x1a700)
  • NdrpReleaseTypeFormatString (Ordinal: 1365, Address: 0xc3ea0)
  • NdrpReleaseTypeGenCookie (Ordinal: 1366, Address: 0x6e7b0)
  • NdrpVarVtOfTypeDesc (Ordinal: 1367, Address: 0x6e650)
  • RpcAsyncAbortCall (Ordinal: 1368, Address: 0x28f0)
  • RpcAsyncCancelCall (Ordinal: 1369, Address: 0x69280)
  • RpcAsyncCompleteCall (Ordinal: 1370, Address: 0x22f0)
  • RpcAsyncGetCallStatus (Ordinal: 1371, Address: 0x57210)
  • RpcAsyncInitializeHandle (Ordinal: 1372, Address: 0x1d90)
  • RpcAsyncRegisterInfo (Ordinal: 1373, Address: 0x6a8d0)
  • RpcBindingBind (Ordinal: 1374, Address: 0x49e10)
  • RpcBindingCopy (Ordinal: 1375, Address: 0x49fd0)
  • RpcBindingCreateA (Ordinal: 1376, Address: 0xb0210)
  • RpcBindingCreateW (Ordinal: 1377, Address: 0x46c10)
  • RpcBindingFree (Ordinal: 1378, Address: 0x44830)
  • RpcBindingFromStringBindingA (Ordinal: 1379, Address: 0x68030)
  • RpcBindingFromStringBindingW (Ordinal: 1380, Address: 0x3a280)
  • RpcBindingInqAuthClientA (Ordinal: 1381, Address: 0x6bbc0)
  • RpcBindingInqAuthClientExA (Ordinal: 1382, Address: 0x6bbf0)
  • RpcBindingInqAuthClientExW (Ordinal: 1383, Address: 0x49d10)
  • RpcBindingInqAuthClientW (Ordinal: 1384, Address: 0x49ce0)
  • RpcBindingInqAuthInfoA (Ordinal: 1385, Address: 0xb0560)
  • RpcBindingInqAuthInfoExA (Ordinal: 1386, Address: 0xb05a0)
  • RpcBindingInqAuthInfoExW (Ordinal: 1387, Address: 0x49b00)
  • RpcBindingInqAuthInfoW (Ordinal: 1388, Address: 0xa2280)
  • RpcBindingInqMaxCalls (Ordinal: 1389, Address: 0x73cc0)
  • RpcBindingInqObject (Ordinal: 1390, Address: 0x5ab70)
  • RpcBindingInqOption (Ordinal: 1391, Address: 0xa9810)
  • RpcBindingReset (Ordinal: 1392, Address: 0xa2300)
  • RpcBindingServerFromClient (Ordinal: 1393, Address: 0x63440)
  • RpcBindingSetAuthInfoA (Ordinal: 1394, Address: 0xb0650)
  • RpcBindingSetAuthInfoExA (Ordinal: 1395, Address: 0xb0680)
  • RpcBindingSetAuthInfoExW (Ordinal: 1396, Address: 0x46d90)
  • RpcBindingSetAuthInfoW (Ordinal: 1397, Address: 0x65840)
  • RpcBindingSetObject (Ordinal: 1398, Address: 0x637a0)
  • RpcBindingSetOption (Ordinal: 1399, Address: 0x24210)
  • RpcBindingToStringBindingA (Ordinal: 1400, Address: 0x4f8d0)
  • RpcBindingToStringBindingW (Ordinal: 1401, Address: 0x49c20)
  • RpcBindingUnbind (Ordinal: 1402, Address: 0x64990)
  • RpcBindingVectorFree (Ordinal: 1403, Address: 0x2c130)
  • RpcCancelThread (Ordinal: 1404, Address: 0xac9c0)
  • RpcCancelThreadEx (Ordinal: 1405, Address: 0xaca10)
  • RpcCertGeneratePrincipalNameA (Ordinal: 1406, Address: 0xb0770)
  • RpcCertGeneratePrincipalNameW (Ordinal: 1407, Address: 0xa1950)
  • RpcEpRegisterA (Ordinal: 1408, Address: 0x6bfc0)
  • RpcEpRegisterNoReplaceA (Ordinal: 1409, Address: 0xb0d30)
  • RpcEpRegisterNoReplaceW (Ordinal: 1410, Address: 0xb0e20)
  • RpcEpRegisterW (Ordinal: 1411, Address: 0x50210)
  • RpcEpResolveBinding (Ordinal: 1412, Address: 0x674e0)
  • RpcEpUnregister (Ordinal: 1413, Address: 0x6a010)
  • RpcErrorAddRecord (Ordinal: 1414, Address: 0xafc50)
  • RpcErrorClearInformation (Ordinal: 1415, Address: 0xafd90)
  • RpcErrorEndEnumeration (Ordinal: 1416, Address: 0x68bb0)
  • RpcErrorGetNextRecord (Ordinal: 1417, Address: 0x666a0)
  • RpcErrorGetNumberOfRecords (Ordinal: 1418, Address: 0xafda0)
  • RpcErrorLoadErrorInfo (Ordinal: 1419, Address: 0xafdd0)
  • RpcErrorResetEnumeration (Ordinal: 1420, Address: 0xafe10)
  • RpcErrorSaveErrorInfo (Ordinal: 1421, Address: 0xafe40)
  • RpcErrorStartEnumeration (Ordinal: 1422, Address: 0x5ffe0)
  • RpcExceptionFilter (Ordinal: 1423, Address: 0x5a840)
  • RpcFreeAuthorizationContext (Ordinal: 1424, Address: 0x68c20)
  • RpcGetAuthorizationContextForClient (Ordinal: 1425, Address: 0x675f0)
  • RpcIfIdVectorFree (Ordinal: 1426, Address: 0xa0710)
  • RpcIfInqId (Ordinal: 1427, Address: 0x4fcc0)
  • RpcImpersonateClient (Ordinal: 1428, Address: 0x5ac50)
  • RpcImpersonateClient2 (Ordinal: 1429, Address: 0x44310)
  • RpcImpersonateClientContainer (Ordinal: 1430, Address: 0xa0780)
  • RpcMgmtEnableIdleCleanup (Ordinal: 1431, Address: 0x714b0)
  • RpcMgmtEpEltInqBegin (Ordinal: 1432, Address: 0xb0ec0)
  • RpcMgmtEpEltInqDone (Ordinal: 1433, Address: 0xb1170)
  • RpcMgmtEpEltInqNextA (Ordinal: 1434, Address: 0xb1250)
  • RpcMgmtEpEltInqNextW (Ordinal: 1435, Address: 0xb1720)
  • RpcMgmtEpUnregister (Ordinal: 1436, Address: 0xb1790)
  • RpcMgmtInqComTimeout (Ordinal: 1437, Address: 0xa1ae0)
  • RpcMgmtInqDefaultProtectLevel (Ordinal: 1438, Address: 0xa9890)
  • RpcMgmtInqIfIds (Ordinal: 1439, Address: 0xa0840)
  • RpcMgmtInqServerPrincNameA (Ordinal: 1440, Address: 0x705b0)
  • RpcMgmtInqServerPrincNameW (Ordinal: 1441, Address: 0x70610)
  • RpcMgmtInqStats (Ordinal: 1442, Address: 0xa0900)
  • RpcMgmtIsServerListening (Ordinal: 1443, Address: 0x6a820)
  • RpcMgmtSetAuthorizationFn (Ordinal: 1444, Address: 0xb17b0)
  • RpcMgmtSetCancelTimeout (Ordinal: 1445, Address: 0x657c0)
  • RpcMgmtSetComTimeout (Ordinal: 1446, Address: 0x241a0)
  • RpcMgmtSetServerStackSize (Ordinal: 1447, Address: 0x67c50)
  • RpcMgmtStatsVectorFree (Ordinal: 1448, Address: 0xa0a40)
  • RpcMgmtStopServerListening (Ordinal: 1449, Address: 0x6a2c0)
  • RpcMgmtWaitServerListen (Ordinal: 1450, Address: 0xa0a80)
  • RpcNetworkInqProtseqsA (Ordinal: 1451, Address: 0xb07d0)
  • RpcNetworkInqProtseqsW (Ordinal: 1452, Address: 0x56f10)
  • RpcNetworkIsProtseqValidA (Ordinal: 1453, Address: 0xb0870)
  • RpcNetworkIsProtseqValidW (Ordinal: 1454, Address: 0x570b0)
  • RpcNsBindingInqEntryNameA (Ordinal: 1455, Address: 0xb09e0)
  • RpcNsBindingInqEntryNameW (Ordinal: 1456, Address: 0xa2160)
  • RpcObjectInqType (Ordinal: 1457, Address: 0xa0ab0)
  • RpcObjectSetInqFn (Ordinal: 1458, Address: 0xa0b20)
  • RpcObjectSetType (Ordinal: 1459, Address: 0x63590)
  • RpcProtseqVectorFreeA (Ordinal: 1460, Address: 0xb0a60)
  • RpcProtseqVectorFreeW (Ordinal: 1461, Address: 0x57030)
  • RpcRaiseException (Ordinal: 1462, Address: 0x5a730)
  • RpcRevertContainerImpersonation (Ordinal: 1463, Address: 0xa0b60)
  • RpcRevertToSelf (Ordinal: 1464, Address: 0x5b980)
  • RpcRevertToSelfEx (Ordinal: 1465, Address: 0x5c4b0)
  • RpcServerCompleteSecurityCallback (Ordinal: 1466, Address: 0xa0bc0)
  • RpcServerInqBindingHandle (Ordinal: 1467, Address: 0x46690)
  • RpcServerInqBindings (Ordinal: 1468, Address: 0x54720)
  • RpcServerInqBindingsEx (Ordinal: 1469, Address: 0x70e90)
  • RpcServerInqCallAttributesA (Ordinal: 1470, Address: 0x43b50)
  • RpcServerInqCallAttributesW (Ordinal: 1471, Address: 0x44060)
  • RpcServerInqDefaultPrincNameA (Ordinal: 1472, Address: 0xa0c20)
  • RpcServerInqDefaultPrincNameW (Ordinal: 1473, Address: 0x2cb20)
  • RpcServerInqIf (Ordinal: 1474, Address: 0xa0c80)
  • RpcServerInterfaceGroupActivate (Ordinal: 1475, Address: 0x54cc0)
  • RpcServerInterfaceGroupClose (Ordinal: 1476, Address: 0x2bd90)
  • RpcServerInterfaceGroupCreateA (Ordinal: 1477, Address: 0xa0cd0)
  • RpcServerInterfaceGroupCreateW (Ordinal: 1478, Address: 0x54690)
  • RpcServerInterfaceGroupDeactivate (Ordinal: 1479, Address: 0x2bd40)
  • RpcServerInterfaceGroupInqBindings (Ordinal: 1480, Address: 0xa10c0)
  • RpcServerListen (Ordinal: 1481, Address: 0x66c40)
  • RpcServerRegisterAuthInfoA (Ordinal: 1482, Address: 0x6be70)
  • RpcServerRegisterAuthInfoW (Ordinal: 1483, Address: 0x2ce10)
  • RpcServerRegisterIf (Ordinal: 1484, Address: 0x713d0)
  • RpcServerRegisterIf2 (Ordinal: 1485, Address: 0x6bf20)
  • RpcServerRegisterIf3 (Ordinal: 1486, Address: 0x24510)
  • RpcServerRegisterIfEx (Ordinal: 1487, Address: 0x67f90)
  • RpcServerSubscribeForNotification (Ordinal: 1488, Address: 0x4f070)
  • RpcServerTestCancel (Ordinal: 1489, Address: 0x49e80)
  • RpcServerUnregisterIf (Ordinal: 1490, Address: 0x23300)
  • RpcServerUnregisterIfEx (Ordinal: 1491, Address: 0x53720)
  • RpcServerUnsubscribeForNotification (Ordinal: 1492, Address: 0x4f1f0)
  • RpcServerUseAllProtseqs (Ordinal: 1493, Address: 0xa1110)
  • RpcServerUseAllProtseqsEx (Ordinal: 1494, Address: 0xa1140)
  • RpcServerUseAllProtseqsIf (Ordinal: 1495, Address: 0xa1300)
  • RpcServerUseAllProtseqsIfEx (Ordinal: 1496, Address: 0xa1350)
  • RpcServerUseProtseqA (Ordinal: 1497, Address: 0x6bc80)
  • RpcServerUseProtseqEpA (Ordinal: 1498, Address: 0xb0a70)
  • RpcServerUseProtseqEpExA (Ordinal: 1499, Address: 0xb0ad0)
  • RpcServerUseProtseqEpExW (Ordinal: 1500, Address: 0x71070)
  • RpcServerUseProtseqEpW (Ordinal: 1501, Address: 0x50810)
  • RpcServerUseProtseqExA (Ordinal: 1502, Address: 0xb0b00)
  • RpcServerUseProtseqExW (Ordinal: 1503, Address: 0x71230)
  • RpcServerUseProtseqIfA (Ordinal: 1504, Address: 0xb0b30)
  • RpcServerUseProtseqIfExA (Ordinal: 1505, Address: 0xb0b80)
  • RpcServerUseProtseqIfExW (Ordinal: 1506, Address: 0x70800)
  • RpcServerUseProtseqIfW (Ordinal: 1507, Address: 0x707b0)
  • RpcServerUseProtseqW (Ordinal: 1508, Address: 0x506b0)
  • RpcServerYield (Ordinal: 1509, Address: 0xaca70)
  • RpcSmAllocate (Ordinal: 1510, Address: 0xca450)
  • RpcSmClientFree (Ordinal: 1511, Address: 0xca4a0)
  • RpcSmDestroyClientContext (Ordinal: 1512, Address: 0x68700)
  • RpcSmDisableAllocate (Ordinal: 1513, Address: 0xca4c0)
  • RpcSmEnableAllocate (Ordinal: 1514, Address: 0xca4f0)
  • RpcSmFree (Ordinal: 1515, Address: 0xca520)
  • RpcSmGetThreadHandle (Ordinal: 1516, Address: 0xca540)
  • RpcSmSetClientAllocFree (Ordinal: 1517, Address: 0xca580)
  • RpcSmSetThreadHandle (Ordinal: 1518, Address: 0xca5a0)
  • RpcSmSwapClientAllocFree (Ordinal: 1519, Address: 0xca5c0)
  • RpcSsAllocate (Ordinal: 1520, Address: 0xca5e0)
  • RpcSsContextLockExclusive (Ordinal: 1521, Address: 0x64e10)
  • RpcSsContextLockShared (Ordinal: 1522, Address: 0xbf530)
  • RpcSsDestroyClientContext (Ordinal: 1523, Address: 0x68720)
  • RpcSsDisableAllocate (Ordinal: 1524, Address: 0xca670)
  • RpcSsDontSerializeContext (Ordinal: 1525, Address: 0x104459)
  • RpcSsEnableAllocate (Ordinal: 1526, Address: 0xca680)
  • RpcSsFree (Ordinal: 1527, Address: 0xca690)
  • RpcSsGetContextBinding (Ordinal: 1528, Address: 0x67730)
  • RpcSsGetThreadHandle (Ordinal: 1529, Address: 0xca6a0)
  • RpcSsSetClientAllocFree (Ordinal: 1530, Address: 0xca700)
  • RpcSsSetThreadHandle (Ordinal: 1531, Address: 0xca770)
  • RpcSsSwapClientAllocFree (Ordinal: 1532, Address: 0xca840)
  • RpcStringBindingComposeA (Ordinal: 1533, Address: 0x531a0)
  • RpcStringBindingComposeW (Ordinal: 1534, Address: 0x237a0)
  • RpcStringBindingParseA (Ordinal: 1535, Address: 0x4f930)
  • RpcStringBindingParseW (Ordinal: 1536, Address: 0x37bd0)
  • RpcStringFreeA (Ordinal: 1537, Address: 0x69900)
  • RpcStringFreeW (Ordinal: 1538, Address: 0x24120)
  • RpcTestCancel (Ordinal: 1539, Address: 0xacac0)
  • RpcUserFree (Ordinal: 1540, Address: 0xc5a10)
  • SimpleTypeAlignment (Ordinal: 1541, Address: 0xee050)
  • SimpleTypeBufferSize (Ordinal: 1542, Address: 0xedf90)
  • SimpleTypeMemorySize (Ordinal: 1543, Address: 0xece20)
  • TowerConstruct (Ordinal: 1544, Address: 0x26650)
  • TowerExplode (Ordinal: 1545, Address: 0x260d0)
  • UuidCompare (Ordinal: 1546, Address: 0x636b0)
  • UuidCreate (Ordinal: 1547, Address: 0x5aee0)
  • UuidCreateNil (Ordinal: 1548, Address: 0x6bf10)
  • UuidCreateSequential (Ordinal: 1549, Address: 0x63d40)
  • UuidEqual (Ordinal: 1550, Address: 0x5d7f0)
  • UuidFromStringA (Ordinal: 1551, Address: 0x6bab0)
  • UuidFromStringW (Ordinal: 1552, Address: 0x4a7d0)
  • UuidHash (Ordinal: 1553, Address: 0x3c30)
  • UuidIsNil (Ordinal: 1554, Address: 0x63840)
  • UuidToStringA (Ordinal: 1555, Address: 0x69cf0)
  • UuidToStringW (Ordinal: 1556, Address: 0x4adb0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800e8ac0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800e8ad0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800e8af8)
  • RaiseException (Address: 0x1800e8af0)
  • SetLastError (Address: 0x1800e8b00)
  • SetUnhandledExceptionFilter (Address: 0x1800e8ae8)
  • UnhandledExceptionFilter (Address: 0x1800e8ae0)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x1800e8b10)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800e8b20)
  • DuplicateHandle (Address: 0x1800e8b28)
  • SetHandleInformation (Address: 0x1800e8b30)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800e8b58)
  • HeapAlloc (Address: 0x1800e8b48)
  • HeapFree (Address: 0x1800e8b40)
  • HeapReAlloc (Address: 0x1800e8b50)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800e8b70)
  • LocalFree (Address: 0x1800e8b68)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800e8b80)
  • InterlockedFlushSList (Address: 0x1800e8b98)
  • InterlockedPopEntrySList (Address: 0x1800e8b90)
  • InterlockedPushEntrySList (Address: 0x1800e8ba0)
  • QueryDepthSList (Address: 0x1800e8b88)
api-ms-win-core-io-l1-1-0.dll
  • CancelIoEx (Address: 0x1800e8bb0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x1800e8bd0)
  • GetModuleHandleW (Address: 0x1800e8bd8)
  • GetProcAddress (Address: 0x1800e8bc8)
  • LoadLibraryExW (Address: 0x1800e8bc0)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageA (Address: 0x1800e8bf0)
  • FormatMessageW (Address: 0x1800e8be8)
api-ms-win-core-memory-l1-1-0.dll
  • MapViewOfFileEx (Address: 0x1800e8c10)
  • UnmapViewOfFile (Address: 0x1800e8c18)
  • VirtualAlloc (Address: 0x1800e8c08)
  • VirtualFree (Address: 0x1800e8c00)
  • VirtualProtect (Address: 0x1800e8c20)
  • VirtualQuery (Address: 0x1800e8c28)
api-ms-win-core-misc-l1-1-0.dll
  • lstrlenA (Address: 0x1800e8c40)
  • lstrlenW (Address: 0x1800e8c38)
  • Sleep (Address: 0x1800e8c48)
api-ms-win-core-namedpipe-l1-1-0.dll
  • ConnectNamedPipe (Address: 0x1800e8c68)
  • CreateNamedPipeW (Address: 0x1800e8c60)
  • DisconnectNamedPipe (Address: 0x1800e8c58)
  • GetNamedPipeClientComputerNameW (Address: 0x1800e8c88)
  • ImpersonateNamedPipeClient (Address: 0x1800e8c90)
  • SetNamedPipeHandleState (Address: 0x1800e8c80)
  • TransactNamedPipe (Address: 0x1800e8c70)
  • WaitNamedPipeW (Address: 0x1800e8c78)
api-ms-win-core-processenvironment-l1-1-0.dll
  • GetCommandLineW (Address: 0x1800e8ca0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800e8cb0)
  • GetCurrentProcessId (Address: 0x1800e8cc0)
  • GetCurrentThread (Address: 0x1800e8cd0)
  • GetCurrentThreadId (Address: 0x1800e8cd8)
  • GetThreadId (Address: 0x1800e8ce8)
  • OpenProcessToken (Address: 0x1800e8cf0)
  • OpenThreadToken (Address: 0x1800e8cc8)
  • QueueUserAPC (Address: 0x1800e8ce0)
  • SetThreadStackGuarantee (Address: 0x1800e8d18)
  • SetThreadToken (Address: 0x1800e8cf8)
  • SwitchToThread (Address: 0x1800e8d20)
  • TerminateProcess (Address: 0x1800e8cb8)
  • TlsAlloc (Address: 0x1800e8d08)
  • TlsGetValue (Address: 0x1800e8d10)
  • TlsSetValue (Address: 0x1800e8d00)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800e8d30)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800e8d58)
  • RegCreateKeyExA (Address: 0x1800e8d78)
  • RegDeleteKeyExA (Address: 0x1800e8d48)
  • RegGetValueA (Address: 0x1800e8d50)
  • RegGetValueW (Address: 0x1800e8d68)
  • RegOpenKeyExA (Address: 0x1800e8d88)
  • RegOpenKeyExW (Address: 0x1800e8d60)
  • RegQueryInfoKeyA (Address: 0x1800e8d70)
  • RegQueryValueExW (Address: 0x1800e8d40)
  • RegSetValueExA (Address: 0x1800e8d80)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x1800e8d98)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800e8de8)
  • CreateEventW (Address: 0x1800e8dc0)
  • CreateSemaphoreExW (Address: 0x1800e8e18)
  • DeleteCriticalSection (Address: 0x1800e8db0)
  • EnterCriticalSection (Address: 0x1800e8df8)
  • InitializeCriticalSection (Address: 0x1800e8da8)
  • InitializeSRWLock (Address: 0x1800e8e10)
  • LeaveCriticalSection (Address: 0x1800e8e00)
  • ReleaseSemaphore (Address: 0x1800e8db8)
  • ReleaseSRWLockExclusive (Address: 0x1800e8df0)
  • ResetEvent (Address: 0x1800e8dd8)
  • SetCriticalSectionSpinCount (Address: 0x1800e8e08)
  • SetEvent (Address: 0x1800e8dc8)
  • WaitForSingleObject (Address: 0x1800e8dd0)
  • WaitForSingleObjectEx (Address: 0x1800e8de0)
api-ms-win-core-synch-l1-2-0.dll
  • WaitOnAddress (Address: 0x1800e8e30)
  • WakeByAddressAll (Address: 0x1800e8e28)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x1800e8e40)
  • GetSystemInfo (Address: 0x1800e8e60)
  • GetSystemTimeAsFileTime (Address: 0x1800e8e68)
  • GetTickCount (Address: 0x1800e8e48)
  • GetTickCount64 (Address: 0x1800e8e58)
  • GlobalMemoryStatusEx (Address: 0x1800e8e50)
api-ms-win-core-threadpool-l1-2-0.dll
  • CancelThreadpoolIo (Address: 0x1800e8ec0)
  • CloseThreadpool (Address: 0x1800e8ef8)
  • CloseThreadpoolIo (Address: 0x1800e8eb0)
  • CloseThreadpoolTimer (Address: 0x1800e8e90)
  • CloseThreadpoolWork (Address: 0x1800e8e78)
  • CreateThreadpool (Address: 0x1800e8ef0)
  • CreateThreadpoolIo (Address: 0x1800e8ee0)
  • CreateThreadpoolTimer (Address: 0x1800e8ed8)
  • CreateThreadpoolWork (Address: 0x1800e8ed0)
  • IsThreadpoolTimerSet (Address: 0x1800e8ea0)
  • SetThreadpoolTimer (Address: 0x1800e8e98)
  • StartThreadpoolIo (Address: 0x1800e8eb8)
  • SubmitThreadpoolWork (Address: 0x1800e8e80)
  • TrySubmitThreadpoolCallback (Address: 0x1800e8ee8)
  • WaitForThreadpoolIoCallbacks (Address: 0x1800e8ec8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800e8ea8)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1800e8e88)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x1800e8f08)
  • DeleteTimerQueueTimer (Address: 0x1800e8f10)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800e8f20)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x1800e8f58)
  • AddAccessAllowedAce (Address: 0x1800e8fb8)
  • AllocateAndInitializeSid (Address: 0x1800e8f90)
  • CheckTokenMembership (Address: 0x1800e8f88)
  • CopySid (Address: 0x1800e8f30)
  • DuplicateToken (Address: 0x1800e8f78)
  • EqualSid (Address: 0x1800e8fa0)
  • FreeSid (Address: 0x1800e8f80)
  • GetLengthSid (Address: 0x1800e8fc8)
  • GetSecurityDescriptorControl (Address: 0x1800e8f48)
  • GetSecurityDescriptorDacl (Address: 0x1800e8f38)
  • GetSecurityDescriptorLength (Address: 0x1800e8f70)
  • GetSidIdentifierAuthority (Address: 0x1800e8fd0)
  • GetSidLengthRequired (Address: 0x1800e8ff0)
  • GetSidSubAuthority (Address: 0x1800e8fe0)
  • GetSidSubAuthorityCount (Address: 0x1800e8fd8)
  • GetTokenInformation (Address: 0x1800e8f98)
  • ImpersonateAnonymousToken (Address: 0x1800e8f68)
  • InitializeAcl (Address: 0x1800e8fc0)
  • InitializeSecurityDescriptor (Address: 0x1800e8fb0)
  • IsValidSecurityDescriptor (Address: 0x1800e8f50)
  • IsValidSid (Address: 0x1800e8fe8)
  • MakeSelfRelativeSD (Address: 0x1800e8f40)
  • RevertToSelf (Address: 0x1800e8f60)
  • SetSecurityDescriptorDacl (Address: 0x1800e8fa8)
KERNELBASE.dll
  • ResolveDelayLoadedAPI (Address: 0x1800e8ab0)
ntdll.dll
  • __C_specific_handler (Address: 0x1800e9000)
  • __chkstk (Address: 0x1800e93a8)
  • _itoa_s (Address: 0x1800e9078)
  • _vsnwprintf (Address: 0x1800e93a0)
  • _wcsicmp (Address: 0x1800e90e8)
  • _wcslwr (Address: 0x1800e90e0)
  • _wcsnicmp (Address: 0x1800e9128)
  • AlpcFreeCompletionListMessage (Address: 0x1800e9050)
  • AlpcGetMessageFromCompletionList (Address: 0x1800e9230)
  • AlpcGetOutstandingCompletionListMessageCount (Address: 0x1800e9200)
  • AlpcRegisterCompletionList (Address: 0x1800e91b0)
  • AlpcRegisterCompletionListWorkerThread (Address: 0x1800e9238)
  • AlpcRundownCompletionList (Address: 0x1800e91a8)
  • AlpcUnregisterCompletionList (Address: 0x1800e91f8)
  • AlpcUnregisterCompletionListWorkerThread (Address: 0x1800e9228)
  • atoi (Address: 0x1800e9330)
  • atol (Address: 0x1800e9400)
  • DbgPrint (Address: 0x1800e9118)
  • EtwEventActivityIdControl (Address: 0x1800e9270)
  • EtwEventEnabled (Address: 0x1800e9260)
  • EtwEventRegister (Address: 0x1800e9580)
  • EtwEventUnregister (Address: 0x1800e9578)
  • EtwEventWrite (Address: 0x1800e9268)
  • EtwEventWriteTransfer (Address: 0x1800e9178)
  • LdrQueryImageFileExecutionOptions (Address: 0x1800e9020)
  • memcmp (Address: 0x1800e9598)
  • memcpy (Address: 0x1800e95a0)
  • memmove (Address: 0x1800e95a8)
  • memset (Address: 0x1800e9328)
  • NtAdjustPrivilegesToken (Address: 0x1800e9248)
  • NtAlertThreadByThreadId (Address: 0x1800e93d0)
  • NtAllocateReserveObject (Address: 0x1800e92e8)
  • NtAllocateUuids (Address: 0x1800e90c8)
  • NtAlpcAcceptConnectPort (Address: 0x1800e9590)
  • NtAlpcCancelMessage (Address: 0x1800e9280)
  • NtAlpcConnectPort (Address: 0x1800e92a0)
  • NtAlpcConnectPortEx (Address: 0x1800e9298)
  • NtAlpcCreatePort (Address: 0x1800e9310)
  • NtAlpcCreatePortSection (Address: 0x1800e92d8)
  • NtAlpcCreateResourceReserve (Address: 0x1800e9278)
  • NtAlpcCreateSectionView (Address: 0x1800e92d0)
  • NtAlpcCreateSecurityContext (Address: 0x1800e9290)
  • NtAlpcDeletePortSection (Address: 0x1800e9150)
  • NtAlpcDeleteSectionView (Address: 0x1800e9148)
  • NtAlpcDeleteSecurityContext (Address: 0x1800e9288)
  • NtAlpcDisconnectPort (Address: 0x1800e9140)
  • NtAlpcImpersonateClientContainerOfPort (Address: 0x1800e91d8)
  • NtAlpcImpersonateClientOfPort (Address: 0x1800e91e0)
  • NtAlpcOpenSenderProcess (Address: 0x1800e91a0)
  • NtAlpcOpenSenderThread (Address: 0x1800e9198)
  • NtAlpcQueryInformation (Address: 0x1800e9318)
  • NtAlpcQueryInformationMessage (Address: 0x1800e9070)
  • NtAlpcSendWaitReceivePort (Address: 0x1800e9320)
  • NtAlpcSetInformation (Address: 0x1800e92e0)
  • NtClose (Address: 0x1800e9068)
  • NtCreateEvent (Address: 0x1800e9098)
  • NtCreateFile (Address: 0x1800e9358)
  • NtCreateNamedPipeFile (Address: 0x1800e9368)
  • NtCreateSection (Address: 0x1800e92a8)
  • NtCreateWnfStateName (Address: 0x1800e94d0)
  • NtDelayExecution (Address: 0x1800e9080)
  • NtDeleteWnfStateName (Address: 0x1800e94c0)
  • NtDuplicateToken (Address: 0x1800e92c0)
  • NtFsControlFile (Address: 0x1800e9090)
  • NtImpersonateAnonymousToken (Address: 0x1800e92c8)
  • NtOpenDirectoryObject (Address: 0x1800e9548)
  • NtOpenKey (Address: 0x1800e93c0)
  • NtOpenThreadToken (Address: 0x1800e94b8)
  • NtPrivilegeCheck (Address: 0x1800e9258)
  • NtQuerySecurityObject (Address: 0x1800e9540)
  • NtQuerySystemInformation (Address: 0x1800e93f0)
  • NtQuerySystemTime (Address: 0x1800e9250)
  • NtQueryValueKey (Address: 0x1800e93b8)
  • NtQueryVolumeInformationFile (Address: 0x1800e90a0)
  • NtQueueApcThreadEx (Address: 0x1800e92f8)
  • NtReadFile (Address: 0x1800e9380)
  • NtSetInformationFile (Address: 0x1800e9448)
  • NtSetInformationThread (Address: 0x1800e9190)
  • NtSetIoCompletionEx (Address: 0x1800e92f0)
  • NtWaitForAlertByThreadId (Address: 0x1800e93c8)
  • NtWaitForSingleObject (Address: 0x1800e9088)
  • NtWriteFile (Address: 0x1800e9378)
  • RtlAcquireResourceExclusive (Address: 0x1800e9208)
  • RtlAcquireResourceShared (Address: 0x1800e9480)
  • RtlAcquireSRWLockExclusive (Address: 0x1800e9030)
  • RtlAcquireSRWLockShared (Address: 0x1800e90a8)
  • RtlAddAccessAllowedAce (Address: 0x1800e94e8)
  • RtlAllocateHeap (Address: 0x1800e9528)
  • RtlAnsiStringToUnicodeString (Address: 0x1800e9500)
  • RtlCaptureContext (Address: 0x1800e9410)
  • RtlCaptureStackBackTrace (Address: 0x1800e9120)
  • RtlCheckForOrphanedCriticalSections (Address: 0x1800e92b8)
  • RtlClearAllBits (Address: 0x1800e94a0)
  • RtlClearBits (Address: 0x1800e9490)
  • RtlClearThreadWorkOnBehalfTicket (Address: 0x1800e91c8)
  • RtlCopySid (Address: 0x1800e9180)
  • RtlCreateAcl (Address: 0x1800e94f0)
  • RtlCreateSecurityDescriptor (Address: 0x1800e94e0)
  • RtlDeleteCriticalSection (Address: 0x1800e9338)
  • RtlDeleteElementGenericTableAvl (Address: 0x1800e9560)
  • RtlDeleteResource (Address: 0x1800e91b8)
  • RtlDeleteSecurityObject (Address: 0x1800e9530)
  • RtlDllShutdownInProgress (Address: 0x1800e90f8)
  • RtlDosPathNameToNtPathName_U (Address: 0x1800e9370)
  • RtlDosPathNameToRelativeNtPathName_U_WithStatus (Address: 0x1800e9360)
  • RtlEnterCriticalSection (Address: 0x1800e9038)
  • RtlEnumerateGenericTableAvl (Address: 0x1800e9188)
  • RtlFreeAnsiString (Address: 0x1800e9518)
  • RtlFreeHeap (Address: 0x1800e9520)
  • RtlFreeUnicodeString (Address: 0x1800e9130)
  • RtlGetAppContainerNamedObjectPath (Address: 0x1800e9110)
  • RtlGetCurrentProcessorNumber (Address: 0x1800e92b0)
  • RtlGetLastNtStatus (Address: 0x1800e9348)
  • RtlGetNtProductType (Address: 0x1800e9028)
  • RtlGUIDFromString (Address: 0x1800e9390)
  • RtlImageNtHeader (Address: 0x1800e9570)
  • RtlInitAnsiString (Address: 0x1800e9508)
  • RtlInitializeBitMap (Address: 0x1800e9300)
  • RtlInitializeCriticalSectionAndSpinCount (Address: 0x1800e9340)
  • RtlInitializeGenericTableAvl (Address: 0x1800e9160)
  • RtlInitializeResource (Address: 0x1800e91c0)
  • RtlInitializeSRWLock (Address: 0x1800e9488)
  • RtlInitUnicodeString (Address: 0x1800e9210)
  • RtlInsertElementGenericTableAvl (Address: 0x1800e9170)
  • RtlIntegerToUnicodeString (Address: 0x1800e93b0)
  • RtlIpv4StringToAddressW (Address: 0x1800e90b8)
  • RtlIpv6StringToAddressW (Address: 0x1800e90b0)
  • RtlLeaveCriticalSection (Address: 0x1800e9588)
  • RtlLookupElementGenericTableAvl (Address: 0x1800e93e0)
  • RtlLookupFunctionEntry (Address: 0x1800e9418)
  • RtlMultiByteToUnicodeN (Address: 0x1800e9510)
  • RtlNewSecurityObjectEx (Address: 0x1800e9538)
  • RtlNotifyFeatureUsage (Address: 0x1800e9478)
  • RtlNtStatusToDosError (Address: 0x1800e91f0)
  • RtlNumberGenericTableElementsAvl (Address: 0x1800e9168)
  • RtlPublishWnfStateData (Address: 0x1800e94c8)
  • RtlQueryFeatureConfiguration (Address: 0x1800e93f8)
  • RtlQueryWnfStateData (Address: 0x1800e9158)
  • RtlRaiseException (Address: 0x1800e9058)
  • RtlReleaseRelativeName (Address: 0x1800e9350)
  • RtlReleaseResource (Address: 0x1800e9240)
  • RtlReleaseSRWLockExclusive (Address: 0x1800e94b0)
  • RtlReleaseSRWLockShared (Address: 0x1800e94a8)
  • RtlReportException (Address: 0x1800e9060)
  • RtlRunOnceBeginInitialize (Address: 0x1800e93e8)
  • RtlRunOnceExecuteOnce (Address: 0x1800e93d8)
  • RtlSetAllBits (Address: 0x1800e9308)
  • RtlSetBits (Address: 0x1800e9498)
  • RtlSetDaclSecurityDescriptor (Address: 0x1800e94d8)
  • RtlSetThreadSubProcessTag (Address: 0x1800e9550)
  • RtlSetThreadWorkOnBehalfTicket (Address: 0x1800e91d0)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800e9138)
  • RtlTryEnterCriticalSection (Address: 0x1800e90f0)
  • RtlUnicodeStringToAnsiString (Address: 0x1800e94f8)
  • RtlUnicodeToMultiByteN (Address: 0x1800e9048)
  • RtlUnicodeToMultiByteSize (Address: 0x1800e9408)
  • RtlValidSecurityDescriptor (Address: 0x1800e9100)
  • RtlVirtualUnwind (Address: 0x1800e9420)
  • SbSelectProcedure (Address: 0x1800e9010)
  • strchr (Address: 0x1800e9398)
  • TpAllocAlpcCompletionEx (Address: 0x1800e9450)
  • TpAlpcRegisterCompletionList (Address: 0x1800e9438)
  • TpAlpcUnregisterCompletionList (Address: 0x1800e9440)
  • TpCallbackIndependent (Address: 0x1800e91e8)
  • TpCallbackSendAlpcMessageOnCompletion (Address: 0x1800e9218)
  • TpCallbackSendPendingAlpcMessage (Address: 0x1800e9220)
  • TpDisablePoolCallbackChecks (Address: 0x1800e9460)
  • TpReleaseAlpcCompletion (Address: 0x1800e9428)
  • TpSetDefaultPoolStackInformation (Address: 0x1800e9458)
  • TpSetPoolStackInformation (Address: 0x1800e9468)
  • TpWaitForAlpcCompletion (Address: 0x1800e9430)
  • wcschr (Address: 0x1800e90d0)
  • wcscmp (Address: 0x1800e95b0)
  • wcsncmp (Address: 0x1800e90c0)
  • wcsncpy_s (Address: 0x1800e9018)
  • wcsrchr (Address: 0x1800e9558)
  • wcsstr (Address: 0x1800e9108)
  • wcstok_s (Address: 0x1800e9388)
  • wcstol (Address: 0x1800e90d8)
  • wcstoul (Address: 0x1800e9568)
  • WinSqmIncrementDWORD (Address: 0x1800e9040)
  • WinSqmIsOptedIn (Address: 0x1800e9008)
  • ZwQueryWnfStateData (Address: 0x1800e9470)