winhttp.dll
Description: Windows HTTP Services
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.26100.7019
Architecture: 64-bit
Operating System: Windows NT
SHA256: d81287db66f89859e2d62373668b05a2
File Size: 1.2 MB
Uploaded At: June 30, 2026, 6:37 a.m.
Views: 24
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x9a110)
- DllGetClassObject (Ordinal: 2, Address: 0xa4890)
- Private1 (Ordinal: 3, Address: 0xb0ee0)
- SvchostPushServiceGlobals (Ordinal: 4, Address: 0xa8de0)
- WinHttpAddRequestHeaders (Ordinal: 5, Address: 0xfc60)
- WinHttpAddRequestHeadersEx (Ordinal: 6, Address: 0xb12a0)
- WinHttpAutoProxySvcMain (Ordinal: 7, Address: 0xa8df0)
- WinHttpCheckPlatform (Ordinal: 8, Address: 0x9a110)
- WinHttpCloseHandle (Ordinal: 9, Address: 0x19010)
- WinHttpConnect (Ordinal: 10, Address: 0x387f0)
- WinHttpConnectionDeletePolicyEntries (Ordinal: 11, Address: 0xa5950)
- WinHttpConnectionDeleteProxyInfo (Ordinal: 12, Address: 0xa7070)
- WinHttpConnectionFreeNameList (Ordinal: 13, Address: 0xa70c0)
- WinHttpConnectionFreeProxyInfo (Ordinal: 14, Address: 0xa7100)
- WinHttpConnectionFreeProxyList (Ordinal: 15, Address: 0xa7140)
- WinHttpConnectionGetNameList (Ordinal: 16, Address: 0xa7180)
- WinHttpConnectionGetProxyInfo (Ordinal: 17, Address: 0x95fc0)
- WinHttpConnectionGetProxyList (Ordinal: 18, Address: 0xa71e0)
- WinHttpConnectionOnlyConvert (Ordinal: 19, Address: 0xace10)
- WinHttpConnectionOnlyReceive (Ordinal: 20, Address: 0x92b30)
- WinHttpConnectionOnlySend (Ordinal: 21, Address: 0x95190)
- WinHttpConnectionSetPolicyEntries (Ordinal: 22, Address: 0x97e90)
- WinHttpConnectionSetProxyInfo (Ordinal: 23, Address: 0xa7240)
- WinHttpConnectionUpdateIfIndexTable (Ordinal: 24, Address: 0x8e950)
- WinHttpCrackUrl (Ordinal: 25, Address: 0x37810)
- WinHttpCreateProxyList (Ordinal: 26, Address: 0x8c470)
- WinHttpCreateProxyManager (Ordinal: 27, Address: 0x8e7b0)
- WinHttpCreateProxyResolver (Ordinal: 28, Address: 0x25b70)
- WinHttpCreateProxyResult (Ordinal: 29, Address: 0x78890)
- WinHttpCreateUiCompatibleProxyString (Ordinal: 30, Address: 0xa5c00)
- WinHttpCreateUrl (Ordinal: 31, Address: 0x4bd00)
- WinHttpDetectAutoProxyConfigUrl (Ordinal: 32, Address: 0x8c910)
- WinHttpFreeProxyResult (Ordinal: 33, Address: 0x46db0)
- WinHttpFreeProxyResultEx (Ordinal: 34, Address: 0x468f0)
- WinHttpFreeProxySettings (Ordinal: 35, Address: 0x1e4a0)
- WinHttpFreeProxySettingsEx (Ordinal: 36, Address: 0xa5d00)
- WinHttpFreeQueryConnectionGroupResult (Ordinal: 37, Address: 0xa5240)
- WinHttpGetDefaultProxyConfiguration (Ordinal: 38, Address: 0x6a730)
- WinHttpGetIEProxyConfigForCurrentUser (Ordinal: 39, Address: 0x1c070)
- WinHttpGetProxyForUrl (Ordinal: 40, Address: 0x73230)
- WinHttpGetProxyForUrlEx (Ordinal: 41, Address: 0x91b10)
- WinHttpGetProxyForUrlEx2 (Ordinal: 42, Address: 0x82170)
- WinHttpGetProxyForUrlHvsi (Ordinal: 43, Address: 0x47c50)
- WinHttpGetProxyResult (Ordinal: 44, Address: 0x982e0)
- WinHttpGetProxyResultEx (Ordinal: 45, Address: 0xa5db0)
- WinHttpGetProxySettingsEx (Ordinal: 46, Address: 0xa5dd0)
- WinHttpGetProxySettingsResultEx (Ordinal: 47, Address: 0xa6040)
- WinHttpGetProxySettingsVersion (Ordinal: 48, Address: 0x80c90)
- WinHttpGetTunnelSocket (Ordinal: 49, Address: 0xa73e0)
- WinHttpOpen (Ordinal: 50, Address: 0x15a70)
- WinHttpOpenRequest (Ordinal: 51, Address: 0x4dd20)
- WinHttpPacJsWorkerMain (Ordinal: 52, Address: 0x565e0)
- WinHttpProbeConnectivity (Ordinal: 53, Address: 0xb29b0)
- WinHttpProtocolCompleteUpgrade (Ordinal: 54, Address: 0xc8c90)
- WinHttpProtocolReceive (Ordinal: 55, Address: 0xc8dd0)
- WinHttpProtocolSend (Ordinal: 56, Address: 0xc8f90)
- WinHttpQueryAuthSchemes (Ordinal: 57, Address: 0x912d0)
- WinHttpQueryConnectionGroup (Ordinal: 58, Address: 0xa5280)
- WinHttpQueryDataAvailable (Ordinal: 59, Address: 0x38e20)
- WinHttpQueryHeaders (Ordinal: 60, Address: 0x10750)
- WinHttpQueryHeadersEx (Ordinal: 61, Address: 0xb36e0)
- WinHttpQueryOption (Ordinal: 62, Address: 0x43620)
- WinHttpReadData (Ordinal: 63, Address: 0x1900)
- WinHttpReadDataEx (Ordinal: 64, Address: 0x1a00)
- WinHttpReadProxySettings (Ordinal: 65, Address: 0x253a0)
- WinHttpReadProxySettingsHvsi (Ordinal: 66, Address: 0x7d020)
- WinHttpReceiveResponse (Ordinal: 67, Address: 0x6c20)
- WinHttpRefreshProxySettings (Ordinal: 68, Address: 0xa61d0)
- WinHttpRegisterProxyChangeNotification (Ordinal: 69, Address: 0xa62e0)
- WinHttpResetAutoProxy (Ordinal: 70, Address: 0x8bf30)
- WinHttpResolverGetProxyForUrl (Ordinal: 71, Address: 0x68590)
- WinHttpSaveProxyCredentials (Ordinal: 72, Address: 0xb2a20)
- WinHttpSendRequest (Ordinal: 73, Address: 0x12c30)
- WinHttpSetCredentials (Ordinal: 74, Address: 0x67550)
- WinHttpSetDefaultProxyConfiguration (Ordinal: 75, Address: 0xa5420)
- WinHttpSetOption (Ordinal: 76, Address: 0x41e40)
- WinHttpSetProxySettingsPerUser (Ordinal: 77, Address: 0xa63f0)
- WinHttpSetSecureLegacyServersAppCompat (Ordinal: 78, Address: 0xa55d0)
- WinHttpSetStatusCallback (Ordinal: 79, Address: 0x42160)
- WinHttpSetTimeouts (Ordinal: 80, Address: 0x8820)
- WinHttpTimeFromSystemTime (Ordinal: 81, Address: 0x2a840)
- WinHttpTimeToSystemTime (Ordinal: 82, Address: 0xb3780)
- WinHttpUnregisterProxyChangeNotification (Ordinal: 83, Address: 0xa6620)
- WinHttpWebSocketClose (Ordinal: 84, Address: 0xc8000)
- WinHttpWebSocketCompleteUpgrade (Ordinal: 85, Address: 0xc83c0)
- WinHttpWebSocketQueryCloseStatus (Ordinal: 86, Address: 0xc80d0)
- WinHttpWebSocketReceive (Ordinal: 87, Address: 0x6fc10)
- WinHttpWebSocketSend (Ordinal: 88, Address: 0x2b280)
- WinHttpWebSocketShutdown (Ordinal: 89, Address: 0xc8890)
- WinHttpWriteData (Ordinal: 90, Address: 0x39b80)
- WinHttpWriteProxySettings (Ordinal: 91, Address: 0xa66d0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800ed690)
api-ms-win-core-datetime-l1-1-0.dll
- GetDateFormatW (Address: 0x1800ed6a0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800ed6c0)
- IsDebuggerPresent (Address: 0x1800ed6b8)
- OutputDebugStringW (Address: 0x1800ed6b0)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1800ed6d0)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1800ed6e0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800ed710)
- SetErrorMode (Address: 0x1800ed700)
- SetLastError (Address: 0x1800ed6f0)
- SetUnhandledExceptionFilter (Address: 0x1800ed708)
- UnhandledExceptionFilter (Address: 0x1800ed6f8)
api-ms-win-core-errorhandling-l1-1-2.dll
- RaiseFailFastException (Address: 0x1800ed720)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1800ed768)
- CreateDirectoryW (Address: 0x1800ed788)
- CreateFileW (Address: 0x1800ed750)
- DeleteFileW (Address: 0x1800ed780)
- FindClose (Address: 0x1800ed738)
- FindFirstFileW (Address: 0x1800ed7a0)
- FindNextFileW (Address: 0x1800ed7a8)
- GetFileAttributesW (Address: 0x1800ed778)
- GetFileSizeEx (Address: 0x1800ed730)
- LocalFileTimeToFileTime (Address: 0x1800ed770)
- ReadFile (Address: 0x1800ed760)
- RemoveDirectoryW (Address: 0x1800ed758)
- SetEndOfFile (Address: 0x1800ed798)
- SetFileAttributesW (Address: 0x1800ed790)
- SetFilePointer (Address: 0x1800ed740)
- WriteFile (Address: 0x1800ed748)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800ed7c0)
- DuplicateHandle (Address: 0x1800ed7b8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800ed7d8)
- HeapAlloc (Address: 0x1800ed7e0)
- HeapFree (Address: 0x1800ed7e8)
- HeapReAlloc (Address: 0x1800ed7d0)
- HeapSize (Address: 0x1800ed7f0)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x1800ed808)
- GlobalFree (Address: 0x1800ed810)
- LocalAlloc (Address: 0x1800ed818)
- LocalFree (Address: 0x1800ed800)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalReAlloc (Address: 0x1800ed828)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800ed848)
- InterlockedPopEntrySList (Address: 0x1800ed840)
- InterlockedPushEntrySList (Address: 0x1800ed838)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x1800ed858)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x1800ed880)
- GetModuleFileNameA (Address: 0x1800ed878)
- GetModuleFileNameW (Address: 0x1800ed898)
- GetModuleHandleExA (Address: 0x1800ed868)
- GetModuleHandleExW (Address: 0x1800ed8a8)
- GetModuleHandleW (Address: 0x1800ed8a0)
- GetProcAddress (Address: 0x1800ed890)
- LoadLibraryExA (Address: 0x1800ed870)
- LoadLibraryExW (Address: 0x1800ed888)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x1800ed8b8)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800ed8c8)
- IdnToAscii (Address: 0x1800ed8d0)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- CompareStringA (Address: 0x1800ed8e0)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1800ed900)
- MapViewOfFile (Address: 0x1800ed8f0)
- OpenFileMappingW (Address: 0x1800ed8f8)
- UnmapViewOfFile (Address: 0x1800ed908)
- VirtualAlloc (Address: 0x1800ed918)
- VirtualFree (Address: 0x1800ed910)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800ed928)
- GetCommandLineW (Address: 0x1800ed930)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1800ed940)
- CreateThread (Address: 0x1800ed9a0)
- DeleteProcThreadAttributeList (Address: 0x1800ed958)
- GetCurrentProcess (Address: 0x1800ed9c0)
- GetCurrentProcessId (Address: 0x1800ed950)
- GetCurrentThread (Address: 0x1800ed990)
- GetCurrentThreadId (Address: 0x1800ed9c8)
- InitializeProcThreadAttributeList (Address: 0x1800ed9a8)
- OpenProcessToken (Address: 0x1800ed948)
- OpenThreadToken (Address: 0x1800ed998)
- ResumeThread (Address: 0x1800ed980)
- SetThreadToken (Address: 0x1800ed988)
- TerminateProcess (Address: 0x1800ed9b0)
- TlsAlloc (Address: 0x1800ed968)
- TlsFree (Address: 0x1800ed9b8)
- TlsGetValue (Address: 0x1800ed978)
- TlsSetValue (Address: 0x1800ed970)
- UpdateProcThreadAttribute (Address: 0x1800ed960)
api-ms-win-core-processthreads-l1-1-1.dll
- GetProcessMitigationPolicy (Address: 0x1800ed9e8)
- IsProcessorFeaturePresent (Address: 0x1800ed9d8)
- SetProcessMitigationPolicy (Address: 0x1800ed9e0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800eda00)
- QueryPerformanceFrequency (Address: 0x1800ed9f8)
api-ms-win-core-realtime-l1-1-0.dll
- QueryUnbiasedInterruptTime (Address: 0x1800eda10)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800eda70)
- RegCreateKeyExW (Address: 0x1800eda28)
- RegDeleteValueW (Address: 0x1800eda30)
- RegEnumKeyExW (Address: 0x1800eda58)
- RegGetValueA (Address: 0x1800eda48)
- RegGetValueW (Address: 0x1800eda60)
- RegNotifyChangeKeyValue (Address: 0x1800eda50)
- RegOpenKeyExA (Address: 0x1800eda78)
- RegOpenKeyExW (Address: 0x1800eda88)
- RegQueryInfoKeyA (Address: 0x1800eda20)
- RegQueryInfoKeyW (Address: 0x1800eda68)
- RegQueryValueExA (Address: 0x1800eda80)
- RegQueryValueExW (Address: 0x1800eda90)
- RegSetValueExA (Address: 0x1800eda38)
- RegSetValueExW (Address: 0x1800eda40)
api-ms-win-core-registry-l1-1-1.dll
- RegDeleteKeyValueW (Address: 0x1800edaa0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800edab0)
- RtlLookupFunctionEntry (Address: 0x1800edac0)
- RtlVirtualUnwind (Address: 0x1800edab8)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrChrW (Address: 0x1800edaf0)
- StrCmpNCA (Address: 0x1800edae0)
- StrCmpNICA (Address: 0x1800edad8)
- StrStrA (Address: 0x1800edad0)
- StrStrIA (Address: 0x1800edae8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringW (Address: 0x1800edb08)
- MultiByteToWideChar (Address: 0x1800edb10)
- WideCharToMultiByte (Address: 0x1800edb00)
api-ms-win-core-string-l2-1-0.dll
- CharLowerW (Address: 0x1800edb20)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpA (Address: 0x1800edb30)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800edbb0)
- AcquireSRWLockShared (Address: 0x1800edbc8)
- CreateEventA (Address: 0x1800edb50)
- CreateEventExA (Address: 0x1800edbe8)
- CreateEventW (Address: 0x1800edb40)
- CreateMutexExW (Address: 0x1800edbc0)
- CreateSemaphoreExW (Address: 0x1800edbb8)
- DeleteCriticalSection (Address: 0x1800edba0)
- EnterCriticalSection (Address: 0x1800edb60)
- InitializeCriticalSection (Address: 0x1800edba8)
- InitializeCriticalSectionEx (Address: 0x1800edbe0)
- InitializeSRWLock (Address: 0x1800edb48)
- LeaveCriticalSection (Address: 0x1800edb88)
- OpenSemaphoreW (Address: 0x1800edbd0)
- ReleaseMutex (Address: 0x1800edbf0)
- ReleaseSemaphore (Address: 0x1800edbf8)
- ReleaseSRWLockExclusive (Address: 0x1800edb58)
- ReleaseSRWLockShared (Address: 0x1800edbd8)
- ResetEvent (Address: 0x1800edb70)
- SetEvent (Address: 0x1800edb68)
- TryAcquireSRWLockExclusive (Address: 0x1800edb90)
- WaitForMultipleObjectsEx (Address: 0x1800edb98)
- WaitForSingleObject (Address: 0x1800edb80)
- WaitForSingleObjectEx (Address: 0x1800edb78)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x1800edc08)
- InitOnceInitialize (Address: 0x1800edc10)
- Sleep (Address: 0x1800edc18)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1800edc40)
- GetSystemTime (Address: 0x1800edc30)
- GetSystemTimeAsFileTime (Address: 0x1800edc38)
- GetTickCount (Address: 0x1800edc48)
- GetTickCount64 (Address: 0x1800edc28)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x1800edc58)
api-ms-win-core-sysinfo-l1-2-6.dll
- IsUserCetAvailableInEnvironment (Address: 0x1800edc68)
api-ms-win-core-threadpool-l1-2-0.dll
- CallbackMayRunLong (Address: 0x1800edc90)
- CloseThreadpoolCleanupGroup (Address: 0x1800edc98)
- CloseThreadpoolCleanupGroupMembers (Address: 0x1800edce8)
- CloseThreadpoolTimer (Address: 0x1800edcb8)
- CloseThreadpoolWait (Address: 0x1800edcd8)
- CloseThreadpoolWork (Address: 0x1800edca0)
- CreateThreadpoolCleanupGroup (Address: 0x1800edca8)
- CreateThreadpoolTimer (Address: 0x1800edcc0)
- CreateThreadpoolWait (Address: 0x1800edcd0)
- CreateThreadpoolWork (Address: 0x1800edce0)
- FreeLibraryWhenCallbackReturns (Address: 0x1800edcc8)
- SetThreadpoolTimer (Address: 0x1800edcb0)
- SetThreadpoolWait (Address: 0x1800edcf0)
- SubmitThreadpoolWork (Address: 0x1800edc78)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800edc88)
- WaitForThreadpoolWaitCallbacks (Address: 0x1800edcf8)
- WaitForThreadpoolWorkCallbacks (Address: 0x1800edc80)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- QueueUserWorkItem (Address: 0x1800edd10)
- UnregisterWaitEx (Address: 0x1800edd08)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x1800edd20)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1800edd30)
- SystemTimeToFileTime (Address: 0x1800edd38)
api-ms-win-core-url-l1-1-0.dll
- UrlCanonicalizeW (Address: 0x1800edd58)
- UrlCombineW (Address: 0x1800edd48)
- UrlUnescapeA (Address: 0x1800edd50)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
- WerSetFlags (Address: 0x1800edd68)
api-ms-win-core-wow64-l1-1-1.dll
- Wow64SetThreadDefaultGuestMachine (Address: 0x1800edd78)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1800ede58)
- _o___std_type_info_destroy_list (Address: 0x1800ede98)
- _o___stdio_common_vsprintf (Address: 0x1800ede90)
- _o___stdio_common_vswprintf (Address: 0x1800ede88)
- _o___stdio_common_vswprintf_s (Address: 0x1800ede80)
- _o__cexit (Address: 0x1800ede78)
- _o__configure_narrow_argv (Address: 0x1800ede70)
- _o__crt_atexit (Address: 0x1800ede68)
- _o__execute_onexit_table (Address: 0x1800ede60)
- _o__initialize_narrow_environment (Address: 0x1800edd88)
- _o__initialize_onexit_table (Address: 0x1800edd90)
- _o__ltow_s (Address: 0x1800edd98)
- _o__purecall (Address: 0x1800edda0)
- _o__register_onexit_function (Address: 0x1800edda8)
- _o__resetstkoflw (Address: 0x1800eddb0)
- _o__seh_filter_dll (Address: 0x1800eddb8)
- _o__strtoui64 (Address: 0x1800eddc0)
- _o__wcsicmp (Address: 0x1800eddc8)
- _o__wcslwr_s (Address: 0x1800eddd0)
- _o__wcsnicmp (Address: 0x1800eddd8)
- _o__wtoi (Address: 0x1800edde8)
- _o_iscntrl (Address: 0x1800eddf0)
- _o_isdigit (Address: 0x1800eddf8)
- _o_isspace (Address: 0x1800ede00)
- _o_iswdigit (Address: 0x1800ede08)
- _o_iswspace (Address: 0x1800ede10)
- _o_memcpy_s (Address: 0x1800ede18)
- _o_qsort (Address: 0x1800ede20)
- _o_rand (Address: 0x1800ede28)
- _o_tolower (Address: 0x1800ede30)
- _o_wcscpy_s (Address: 0x1800ede38)
- _o_wcsncpy_s (Address: 0x1800ede40)
- _o_wcstok (Address: 0x1800ede48)
- _o_wcstok_s (Address: 0x1800ede50)
- memcmp (Address: 0x1800edeb8)
- memcpy (Address: 0x1800edec0)
- memmove (Address: 0x1800edde0)
- wcschr (Address: 0x1800edea0)
- wcsrchr (Address: 0x1800edeb0)
- wcsstr (Address: 0x1800edea8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800eded0)
- _initterm_e (Address: 0x1800eded8)
api-ms-win-crt-string-l1-1-0.dll
- memmove_s (Address: 0x1800edef8)
- memset (Address: 0x1800edef0)
- wcscmp (Address: 0x1800edee8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1800edf10)
- EventRegister (Address: 0x1800edf08)
- EventSetInformation (Address: 0x1800edf20)
- EventUnregister (Address: 0x1800edf28)
- EventWrite (Address: 0x1800edf18)
- EventWriteTransfer (Address: 0x1800edf30)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1800edfb0)
- AddAccessAllowedAce (Address: 0x1800edf88)
- AddMandatoryAce (Address: 0x1800edfb8)
- CopySid (Address: 0x1800edf68)
- CreateRestrictedToken (Address: 0x1800edf80)
- DuplicateTokenEx (Address: 0x1800edfa8)
- EqualSid (Address: 0x1800edf78)
- GetAce (Address: 0x1800edf90)
- GetLengthSid (Address: 0x1800edf98)
- GetSidSubAuthority (Address: 0x1800edf50)
- GetSidSubAuthorityCount (Address: 0x1800edf48)
- GetTokenInformation (Address: 0x1800edf58)
- ImpersonateLoggedOnUser (Address: 0x1800edfc0)
- InitializeAcl (Address: 0x1800edfa0)
- IsValidSid (Address: 0x1800edf40)
- RevertToSelf (Address: 0x1800edf60)
- SetTokenInformation (Address: 0x1800edf70)
api-ms-win-security-credentials-l1-1-0.dll
- CredDeleteW (Address: 0x1800edfe0)
- CredEnumerateW (Address: 0x1800edff8)
- CredFree (Address: 0x1800edff0)
- CredReadDomainCredentialsW (Address: 0x1800edfe8)
- CredReadW (Address: 0x1800edfd8)
- CredWriteW (Address: 0x1800edfd0)
api-ms-win-service-private-l1-1-0.dll
- WaitServiceState (Address: 0x1800ee008)
KERNELBASE.dll
- AppContainerRegisterSid (Address: 0x1800ed660)
- AppContainerUnregisterSid (Address: 0x1800ed658)
- GetIsEdpEnabled (Address: 0x1800ed668)
- GetIsWdagEnabled (Address: 0x1800ed680)
- SubscribeEdpEnabledStateChange (Address: 0x1800ed650)
- SubscribeWdagEnabledStateChange (Address: 0x1800ed670)
- UnsubscribeEdpEnabledStateChange (Address: 0x1800ed678)
- UnsubscribeWdagEnabledStateChange (Address: 0x1800ed648)
ntdll.dll
- EtwGetTraceEnableFlags (Address: 0x1800ee048)
- EtwGetTraceEnableLevel (Address: 0x1800ee030)
- EtwGetTraceLoggerHandle (Address: 0x1800ee038)
- EtwRegisterTraceGuidsW (Address: 0x1800ee060)
- EtwTraceMessageVa (Address: 0x1800ee018)
- EtwUnregisterTraceGuids (Address: 0x1800ee040)
- NtCompareSigningLevels (Address: 0x1800ee0e0)
- NtGetCachedSigningLevel (Address: 0x1800ee0d8)
- NtOpenFile (Address: 0x1800ee088)
- NtSetCachedSigningLevel (Address: 0x1800ee0e8)
- NtSetInformationObject (Address: 0x1800ee070)
- RtlConvertSidToUnicodeString (Address: 0x1800ee020)
- RtlDllShutdownInProgress (Address: 0x1800ee068)
- RtlGetDeviceFamilyInfoEnum (Address: 0x1800ee0b8)
- RtlGetPersistedStateLocation (Address: 0x1800ee058)
- RtlGetVersion (Address: 0x1800ee0b0)
- RtlGUIDFromString (Address: 0x1800ee0f0)
- RtlIpv4AddressToStringExW (Address: 0x1800ee078)
- RtlIpv4AddressToStringW (Address: 0x1800ee0d0)
- RtlIpv4StringToAddressExW (Address: 0x1800ee0c8)
- RtlIpv6AddressToStringExW (Address: 0x1800ee080)
- RtlIpv6StringToAddressExW (Address: 0x1800ee100)
- RtlLengthSid (Address: 0x1800ee090)
- RtlNtStatusToDosError (Address: 0x1800ee050)
- RtlPublishWnfStateData (Address: 0x1800ee0f8)
- RtlQueryPackageClaims (Address: 0x1800ee0a8)
- RtlReportExceptionEx (Address: 0x1800ee0a0)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800ee098)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800ee0c0)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x1800ee108)
- RtlValidSid (Address: 0x1800ee028)