spoolss.dll

Description: Spooler SubSystem DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: e9fab9535c18a7a5b0b77f286ce51be9

File Size: 121.0 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 8

Exported Functions

  • OpenPrinterExW (Ordinal: 1, Address: 0x8280)
  • RouterCorePrinterDriverInstalled (Ordinal: 2, Address: 0x82e0)
  • RouterCreatePrintAsyncNotificationChannel (Ordinal: 3, Address: 0x8370)
  • RouterDeletePrinterDriverPackage (Ordinal: 4, Address: 0x84c0)
  • RouterGetCorePrinterDrivers (Ordinal: 5, Address: 0x8520)
  • RouterGetPrintClassObject (Ordinal: 6, Address: 0x8590)
  • RouterGetPrinterDriverPackagePath (Ordinal: 7, Address: 0x8650)
  • RouterInstallPrinterDriverFromPackage (Ordinal: 8, Address: 0x86d0)
  • RouterRegisterForPrintAsyncNotifications (Ordinal: 9, Address: 0x8740)
  • RouterUnregisterForPrintAsyncNotifications (Ordinal: 10, Address: 0x87b0)
  • RouterUploadPrinterDriverPackage (Ordinal: 11, Address: 0x8810)
  • AbortPrinter (Ordinal: 12, Address: 0x8880)
  • AddFormW (Ordinal: 13, Address: 0x88e0)
  • AddJobW (Ordinal: 14, Address: 0x8940)
  • AddMonitorW (Ordinal: 15, Address: 0x89a0)
  • AddPerMachineConnectionW (Ordinal: 16, Address: 0x8a10)
  • AddPortExW (Ordinal: 17, Address: 0x8a70)
  • AddPortW (Ordinal: 18, Address: 0x8ad0)
  • AddPrintDeviceObject (Ordinal: 19, Address: 0x12270)
  • AddPrintProcessorW (Ordinal: 20, Address: 0x8b30)
  • AddPrintProvidorW (Ordinal: 21, Address: 0x8b90)
  • AddPrinterConnectionW (Ordinal: 22, Address: 0x8bf0)
  • AddPrinterDriverExW (Ordinal: 23, Address: 0x8c50)
  • AddPrinterDriverW (Ordinal: 24, Address: 0x8cb0)
  • AddPrinterExW (Ordinal: 25, Address: 0x8d10)
  • AddPrinterW (Ordinal: 26, Address: 0x8d70)
  • AdjustPointers (Ordinal: 27, Address: 0x8dd0)
  • AdjustPointersInStructuresArray (Ordinal: 28, Address: 0x8e30)
  • AlignKMPtr (Ordinal: 29, Address: 0x8e90)
  • AlignRpcPtr (Ordinal: 30, Address: 0x8ec0)
  • AllocSplStr (Ordinal: 31, Address: 0x18b0)
  • AllowRemoteCalls (Ordinal: 32, Address: 0x8f20)
  • AppendPrinterNotifyInfoData (Ordinal: 33, Address: 0x1770)
  • BuildOtherNamesFromMachineName (Ordinal: 34, Address: 0x8f80)
  • CacheAddName (Ordinal: 35, Address: 0x19f0)
  • CacheCreateAndAddNode (Ordinal: 36, Address: 0x8fe0)
  • CacheCreateAndAddNodeWithIPAddresses (Ordinal: 37, Address: 0x9040)
  • CacheDeleteNode (Ordinal: 38, Address: 0x90a0)
  • CacheIsNameCluster (Ordinal: 39, Address: 0x9100)
  • CacheIsNameInNodeList (Ordinal: 40, Address: 0x9160)
  • CallDrvDevModeConversion (Ordinal: 41, Address: 0x91c0)
  • CallRouterFindFirstPrinterChangeNotification (Ordinal: 42, Address: 0x9240)
  • CheckLocalCall (Ordinal: 43, Address: 0x2070)
  • ClosePrinter (Ordinal: 44, Address: 0x1240)
  • ConfigurePortW (Ordinal: 45, Address: 0x92b0)
  • CreatePrinterIC (Ordinal: 46, Address: 0x9310)
  • DeleteFormW (Ordinal: 47, Address: 0x9370)
  • DeleteJobNamedProperty (Ordinal: 48, Address: 0x93d0)
  • DeleteMonitorW (Ordinal: 49, Address: 0x9430)
  • DeletePerMachineConnectionW (Ordinal: 50, Address: 0x9490)
  • DeletePortW (Ordinal: 51, Address: 0x94f0)
  • DeletePrintProcessorW (Ordinal: 52, Address: 0x9560)
  • DeletePrintProvidorW (Ordinal: 53, Address: 0x95d0)
  • DeletePrinter (Ordinal: 54, Address: 0x9630)
  • DeletePrinterConnectionW (Ordinal: 55, Address: 0x9690)
  • DeletePrinterDataExW (Ordinal: 56, Address: 0x96f0)
  • DeletePrinterDataW (Ordinal: 57, Address: 0x9750)
  • DeletePrinterDriverExW (Ordinal: 58, Address: 0x97b0)
  • DeletePrinterDriverW (Ordinal: 59, Address: 0x9810)
  • DeletePrinterIC (Ordinal: 60, Address: 0x9870)
  • DeletePrinterKeyW (Ordinal: 61, Address: 0x98d0)
  • DllAllocSplMem (Ordinal: 62, Address: 0x1970)
  • DllAllocSplStr (Ordinal: 63, Address: 0x9930)
  • DllFreeSplMem (Ordinal: 64, Address: 0x18f0)
  • DllFreeSplStr (Ordinal: 65, Address: 0x1930)
  • DllMain (Ordinal: 66, Address: 0x7240)
  • DllReallocSplMem (Ordinal: 67, Address: 0x9960)
  • DllReallocSplStr (Ordinal: 68, Address: 0x9990)
  • EndDocPrinter (Ordinal: 69, Address: 0x99c0)
  • EndPagePrinter (Ordinal: 70, Address: 0x9a30)
  • EnumFormsW (Ordinal: 71, Address: 0x9aa0)
  • EnumJobsW (Ordinal: 72, Address: 0x9b30)
  • EnumMonitorsW (Ordinal: 73, Address: 0x9bf0)
  • EnumPerMachineConnectionsW (Ordinal: 74, Address: 0x9c60)
  • EnumPortsW (Ordinal: 75, Address: 0x9cc0)
  • EnumPrintProcessorDatatypesW (Ordinal: 76, Address: 0x9d30)
  • EnumPrintProcessorsW (Ordinal: 77, Address: 0x9db0)
  • EnumPrinterDataExW (Ordinal: 78, Address: 0x9e30)
  • EnumPrinterDataW (Ordinal: 79, Address: 0x9ea0)
  • EnumPrinterDriversW (Ordinal: 80, Address: 0x9f60)
  • EnumPrinterKeyW (Ordinal: 81, Address: 0x9fe0)
  • EnumPrintersW (Ordinal: 82, Address: 0xa050)
  • FindClosePrinterChangeNotification (Ordinal: 83, Address: 0xa100)
  • FlushPrinter (Ordinal: 84, Address: 0xa160)
  • FormatPrinterForRegistryKey (Ordinal: 85, Address: 0xa1e0)
  • FormatRegistryKeyForPrinter (Ordinal: 86, Address: 0xa240)
  • FreeOtherNames (Ordinal: 87, Address: 0xa2a0)
  • FreePrintPropertyValue (Ordinal: 88, Address: 0xa2e0)
  • GetFormW (Ordinal: 89, Address: 0xa340)
  • GetJobAttributes (Ordinal: 90, Address: 0x12c0)
  • GetJobAttributesEx (Ordinal: 91, Address: 0x1300)
  • GetJobNamedPropertyValue (Ordinal: 92, Address: 0xa3b0)
  • GetJobW (Ordinal: 93, Address: 0xa410)
  • GetNetworkId (Ordinal: 94, Address: 0xa490)
  • GetPrintProcessorDirectoryW (Ordinal: 95, Address: 0xa4f0)
  • GetPrinterDataExW (Ordinal: 96, Address: 0xa580)
  • GetPrinterDataW (Ordinal: 97, Address: 0xa620)
  • GetPrinterDriverDirectoryW (Ordinal: 98, Address: 0xa6a0)
  • GetPrinterDriverExW (Ordinal: 99, Address: 0xa730)
  • GetPrinterDriverW (Ordinal: 100, Address: 0x11f0)
  • GetPrinterW (Ordinal: 101, Address: 0x1730)
  • GetServerPolicy (Ordinal: 102, Address: 0xa800)
  • GetShrinkedSize (Ordinal: 103, Address: 0xa860)
  • GetSpoolerTlsIndexes (Ordinal: 104, Address: 0xa8c0)
  • ImpersonatePrinterClient (Ordinal: 105, Address: 0x1170)
  • InitializeRouter (Ordinal: 106, Address: 0xa8f0)
  • IsNameTheLocalMachineOrAClusterSpooler (Ordinal: 107, Address: 0x2140)
  • IsNamedPipeRpcCall (Ordinal: 108, Address: 0xa940)
  • MIDL_user_allocate1 (Ordinal: 109, Address: 0xa9a0)
  • MIDL_user_free1 (Ordinal: 110, Address: 0xa9c0)
  • MakeOffset (Ordinal: 111, Address: 0x10a40)
  • MakePTR (Ordinal: 112, Address: 0x10a50)
  • MarshallDownStructure (Ordinal: 113, Address: 0xa9e0)
  • MarshallDownStructuresArray (Ordinal: 114, Address: 0xaa40)
  • MarshallUpStructure (Ordinal: 115, Address: 0xaaa0)
  • MarshallUpStructuresArray (Ordinal: 116, Address: 0xab00)
  • OldGetPrinterDriverW (Ordinal: 117, Address: 0xab70)
  • OpenPrinter2W (Ordinal: 118, Address: 0xabe0)
  • OpenPrinterPort2W (Ordinal: 119, Address: 0xac40)
  • OpenPrinterPortWithClientInfo (Ordinal: 120, Address: 0x3480)
  • OpenPrinterW (Ordinal: 121, Address: 0x1280)
  • PackStringToEOB (Ordinal: 122, Address: 0x10a60)
  • PackStrings (Ordinal: 123, Address: 0x19b0)
  • PartialReplyPrinterChangeNotification (Ordinal: 124, Address: 0x1680)
  • PlayGdiScriptOnPrinterIC (Ordinal: 125, Address: 0xaca0)
  • PrinterHandleRundown (Ordinal: 126, Address: 0xad10)
  • PrinterMessageBoxW (Ordinal: 127, Address: 0xad70)
  • ProvidorFindClosePrinterChangeNotification (Ordinal: 128, Address: 0xade0)
  • ProvidorFindFirstPrinterChangeNotification (Ordinal: 129, Address: 0xae40)
  • ReadPrinter (Ordinal: 130, Address: 0xafd0)
  • ReallocSplMem (Ordinal: 131, Address: 0xb030)
  • ReallocSplStr (Ordinal: 132, Address: 0xb060)
  • RemoteFindFirstPrinterChangeNotification (Ordinal: 133, Address: 0xb090)
  • RemovePrintDeviceObject (Ordinal: 134, Address: 0x12330)
  • ReplyClosePrinter (Ordinal: 135, Address: 0xb110)
  • ReplyOpenPrinter (Ordinal: 136, Address: 0xb170)
  • ReplyPrinterChangeNotification (Ordinal: 137, Address: 0x16b0)
  • ReplyPrinterChangeNotificationEx (Ordinal: 138, Address: 0xb1d0)
  • ReportJobProcessingProgress (Ordinal: 139, Address: 0xb230)
  • ResetPrinterW (Ordinal: 140, Address: 0xb290)
  • RevertToPrinterSelf (Ordinal: 141, Address: 0x1130)
  • RouterAddPrinterConnection2 (Ordinal: 142, Address: 0xb2f0)
  • RouterAllocBidiMem (Ordinal: 143, Address: 0xa9a0)
  • RouterAllocBidiResponseContainer (Ordinal: 144, Address: 0xb350)
  • RouterAllocPrinterNotifyInfo (Ordinal: 145, Address: 0x1880)
  • RouterBroadcastMessage (Ordinal: 146, Address: 0xb3b0)
  • RouterFindCompatibleDriver (Ordinal: 147, Address: 0xb420)
  • RouterFindFirstPrinterChangeNotification (Ordinal: 148, Address: 0xb4e0)
  • RouterFindNextPrinterChangeNotification (Ordinal: 149, Address: 0xb550)
  • RouterFreeBidiMem (Ordinal: 150, Address: 0xa9c0)
  • RouterFreeBidiResponseContainer (Ordinal: 151, Address: 0xb5b0)
  • RouterFreePrinterNotifyInfo (Ordinal: 152, Address: 0xb610)
  • RouterInstallPrinterDriverPackageFromConnection (Ordinal: 153, Address: 0x34f0)
  • RouterInternalGetPrinterDriver (Ordinal: 154, Address: 0xb670)
  • RouterRefreshPrinterChangeNotification (Ordinal: 155, Address: 0xb740)
  • RouterReplyPrinter (Ordinal: 156, Address: 0xb7a0)
  • RouterSpoolerSetPolicy (Ordinal: 157, Address: 0xb810)
  • ScheduleJob (Ordinal: 158, Address: 0xb870)
  • SeekPrinter (Ordinal: 159, Address: 0xb8d0)
  • SendRecvBidiData (Ordinal: 160, Address: 0xb930)
  • SetFormW (Ordinal: 161, Address: 0xb990)
  • SetJobNamedProperty (Ordinal: 162, Address: 0x3550)
  • SetJobW (Ordinal: 163, Address: 0x16f0)
  • SetPortW (Ordinal: 164, Address: 0xb9f0)
  • SetPrinterDataExW (Ordinal: 165, Address: 0xba50)
  • SetPrinterDataW (Ordinal: 166, Address: 0xbad0)
  • SetPrinterW (Ordinal: 167, Address: 0xbb40)
  • SplCloseSpoolFileHandle (Ordinal: 168, Address: 0xbba0)
  • SplCommitSpoolData (Ordinal: 169, Address: 0xbc00)
  • SplDriverUnloadComplete (Ordinal: 170, Address: 0xbc80)
  • SplGetClientUserHandle (Ordinal: 171, Address: 0xbce0)
  • SplGetSpoolFileInfo (Ordinal: 172, Address: 0xbd40)
  • SplGetUserSidStringFromToken (Ordinal: 173, Address: 0x1840)
  • SplInitializeWinSpoolDrv (Ordinal: 174, Address: 0xbdb0)
  • SplIsSessionZero (Ordinal: 175, Address: 0xbf40)
  • SplIsUpgrade (Ordinal: 176, Address: 0x11b0)
  • SplProcessPnPEvent (Ordinal: 177, Address: 0xbfa0)
  • SplProcessSessionEvent (Ordinal: 178, Address: 0xc000)
  • SplPromptUIInUsersSession (Ordinal: 179, Address: 0xc060)
  • SplQueryUserInfo (Ordinal: 180, Address: 0xc0c0)
  • SplReadPrinter (Ordinal: 181, Address: 0xc120)
  • SplRegisterForDeviceEvents (Ordinal: 182, Address: 0xc180)
  • SplRegisterForSessionEvents (Ordinal: 183, Address: 0xc1e0)
  • SplShutDownRouter (Ordinal: 184, Address: 0xc240)
  • SplUalCollectData (Ordinal: 185, Address: 0xc2a0)
  • SplUnregisterForDeviceEvents (Ordinal: 186, Address: 0xc300)
  • SplUnregisterForSessionEvents (Ordinal: 187, Address: 0xc360)
  • SpoolerFindClosePrinterChangeNotification (Ordinal: 188, Address: 0xc3c0)
  • SpoolerFindFirstPrinterChangeNotification (Ordinal: 189, Address: 0xc420)
  • SpoolerFindNextPrinterChangeNotification (Ordinal: 190, Address: 0xc4c0)
  • SpoolerFreePrinterNotifyInfo (Ordinal: 191, Address: 0xc520)
  • SpoolerHasInitialized (Ordinal: 192, Address: 0xc580)
  • SpoolerInit (Ordinal: 193, Address: 0xc5e0)
  • SpoolerRefreshPrinterChangeNotification (Ordinal: 194, Address: 0xc640)
  • StartDocPrinterW (Ordinal: 195, Address: 0xc6a0)
  • StartPagePrinter (Ordinal: 196, Address: 0xc710)
  • UndoAlignKMPtr (Ordinal: 197, Address: 0xc780)
  • UndoAlignRpcPtr (Ordinal: 198, Address: 0xc7c0)
  • UpdateBufferSize (Ordinal: 199, Address: 0xc830)
  • UpdatePrintDeviceObject (Ordinal: 200, Address: 0x12380)
  • UpdatePrinterRegAll (Ordinal: 201, Address: 0xc8a0)
  • UpdatePrinterRegAllEx (Ordinal: 202, Address: 0xc900)
  • UpdatePrinterRegUser (Ordinal: 203, Address: 0xc960)
  • WaitForPrinterChange (Ordinal: 204, Address: 0xc9d0)
  • WaitForSpoolerInitialization (Ordinal: 205, Address: 0xca30)
  • WritePrinter (Ordinal: 206, Address: 0xca90)
  • XcvDataW (Ordinal: 207, Address: 0xcaf0)
  • bGetDevModePerUser (Ordinal: 208, Address: 0xcb90)
  • bSetDevModePerUser (Ordinal: 209, Address: 0xcbc0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800151b8)
  • IsDebuggerPresent (Address: 0x1800151c8)
  • OutputDebugStringA (Address: 0x1800151d0)
  • OutputDebugStringW (Address: 0x1800151c0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800151e0)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800151f0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180015210)
  • SetLastError (Address: 0x180015200)
  • SetUnhandledExceptionFilter (Address: 0x180015218)
  • UnhandledExceptionFilter (Address: 0x180015208)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180015228)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180015240)
  • HeapAlloc (Address: 0x180015248)
  • HeapFree (Address: 0x180015238)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180015258)
  • LocalFree (Address: 0x180015260)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x180015298)
  • GetModuleFileNameA (Address: 0x180015288)
  • GetModuleFileNameW (Address: 0x180015290)
  • GetModuleHandleExW (Address: 0x1800152a0)
  • GetModuleHandleW (Address: 0x180015270)
  • GetProcAddress (Address: 0x180015280)
  • LoadLibraryExW (Address: 0x180015278)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800152b0)
api-ms-win-core-processthreads-l1-1-0.dll
  • ExitProcess (Address: 0x1800152e0)
  • GetCurrentProcess (Address: 0x180015300)
  • GetCurrentProcessId (Address: 0x1800152c0)
  • GetCurrentThread (Address: 0x1800152e8)
  • GetCurrentThreadId (Address: 0x1800152c8)
  • OpenProcessToken (Address: 0x1800152f0)
  • OpenThreadToken (Address: 0x180015308)
  • SetThreadToken (Address: 0x1800152f8)
  • TerminateProcess (Address: 0x1800152d8)
  • TlsGetValue (Address: 0x1800152d0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180015318)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180015338)
  • RtlLookupFunctionEntry (Address: 0x180015330)
  • RtlVirtualUnwind (Address: 0x180015328)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x180015348)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800153c8)
  • AcquireSRWLockShared (Address: 0x1800153e8)
  • CreateEventW (Address: 0x1800153d8)
  • CreateMutexExW (Address: 0x180015370)
  • CreateSemaphoreExW (Address: 0x180015360)
  • DeleteCriticalSection (Address: 0x1800153a8)
  • EnterCriticalSection (Address: 0x180015368)
  • InitializeCriticalSection (Address: 0x1800153c0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800153e0)
  • InitializeCriticalSectionEx (Address: 0x180015388)
  • LeaveCriticalSection (Address: 0x180015380)
  • OpenSemaphoreW (Address: 0x1800153b0)
  • ReleaseMutex (Address: 0x180015398)
  • ReleaseSemaphore (Address: 0x180015378)
  • ReleaseSRWLockExclusive (Address: 0x1800153b8)
  • ReleaseSRWLockShared (Address: 0x1800153a0)
  • SetEvent (Address: 0x180015358)
  • WaitForSingleObject (Address: 0x180015390)
  • WaitForSingleObjectEx (Address: 0x1800153d0)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800153f8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x180015408)
  • GetSystemTimeAsFileTime (Address: 0x180015410)
  • GetTickCount (Address: 0x180015418)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180015430)
  • CreateThreadpoolTimer (Address: 0x180015440)
  • SetThreadpoolTimer (Address: 0x180015428)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180015438)
api-ms-win-security-base-l1-1-0.dll
  • AddAccessAllowedAce (Address: 0x1800154a0)
  • AddAce (Address: 0x180015498)
  • AllocateAndInitializeSid (Address: 0x180015468)
  • FreeSid (Address: 0x1800154a8)
  • GetAce (Address: 0x180015488)
  • GetAclInformation (Address: 0x180015458)
  • GetLengthSid (Address: 0x180015490)
  • GetSecurityDescriptorDacl (Address: 0x1800154d0)
  • GetSecurityDescriptorGroup (Address: 0x1800154d8)
  • GetSecurityDescriptorLength (Address: 0x1800154b8)
  • GetSecurityDescriptorOwner (Address: 0x180015460)
  • GetTokenInformation (Address: 0x180015478)
  • InitializeAcl (Address: 0x180015470)
  • InitializeSecurityDescriptor (Address: 0x1800154c0)
  • MakeSelfRelativeSD (Address: 0x1800154b0)
  • SetSecurityDescriptorDacl (Address: 0x180015450)
  • SetSecurityDescriptorGroup (Address: 0x1800154c8)
  • SetSecurityDescriptorOwner (Address: 0x180015480)
msvcrt.dll
  • __C_specific_handler (Address: 0x180015588)
  • __CxxFrameHandler3 (Address: 0x1800154e8)
  • __dllonexit (Address: 0x180015528)
  • _amsg_exit (Address: 0x180015558)
  • _callnewh (Address: 0x180015578)
  • _CxxThrowException (Address: 0x1800155a0)
  • _initterm (Address: 0x180015550)
  • _lock (Address: 0x180015538)
  • _onexit (Address: 0x180015520)
  • _purecall (Address: 0x180015548)
  • _unlock (Address: 0x180015530)
  • _vsnprintf_s (Address: 0x1800154f8)
  • _vsnwprintf (Address: 0x1800155a8)
  • _XcptFilter (Address: 0x180015568)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800154f0)
  • ??0exception@@QEAA@XZ (Address: 0x180015540)
  • ??1exception@@UEAA@XZ (Address: 0x180015508)
  • ??1type_info@@UEAA@XZ (Address: 0x180015510)
  • ?terminate@@YAXXZ (Address: 0x180015518)
  • free (Address: 0x180015570)
  • malloc (Address: 0x180015580)
  • memcmp (Address: 0x180015598)
  • memcpy (Address: 0x180015590)
  • memcpy_s (Address: 0x180015560)
  • memmove_s (Address: 0x1800155b0)
  • memset (Address: 0x1800155b8)
  • wcsrchr (Address: 0x180015500)
ntdll.dll
  • EtwEventEnabled (Address: 0x1800155d0)
  • EtwEventRegister (Address: 0x1800155e0)
  • EtwEventUnregister (Address: 0x1800155d8)
  • EtwEventWrite (Address: 0x1800155c8)
  • EtwTraceMessage (Address: 0x1800155e8)