winhttp.dll

Description: Ultimate ASI Loader

Authors: MIT License

Version: 8.0.0.0

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8e204ad45e3f0a1bb0ff2ff84cb2926d

File Size: 1.2 MB

Uploaded At: July 22, 2026, 8:30 p.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • AddVirtualFileForOverloadA (Ordinal: 1, Address: 0x1f520)
  • AddVirtualFileForOverloadW (Ordinal: 2, Address: 0x1f530)
  • AddVirtualPathForOverloadA (Ordinal: 3, Address: 0x1f540)
  • AddVirtualPathForOverloadW (Ordinal: 4, Address: 0x1f550)
  • AppCacheCheckManifest (Ordinal: 5, Address: 0x3acd0)
  • AppCacheCloseHandle (Ordinal: 6, Address: 0x3ace0)
  • AppCacheCreateAndCommitFile (Ordinal: 7, Address: 0x3acf0)
  • AppCacheDeleteGroup (Ordinal: 8, Address: 0x3ad00)
  • AppCacheDeleteIEGroup (Ordinal: 9, Address: 0x3ad10)
  • AppCacheDuplicateHandle (Ordinal: 10, Address: 0x3ad20)
  • AppCacheFinalize (Ordinal: 11, Address: 0x3ad30)
  • AppCacheFreeDownloadList (Ordinal: 12, Address: 0x3ad40)
  • AppCacheFreeGroupList (Ordinal: 13, Address: 0x3ad50)
  • AppCacheFreeIESpace (Ordinal: 14, Address: 0x3ad60)
  • AppCacheFreeSpace (Ordinal: 15, Address: 0x3ad70)
  • AppCacheGetDownloadList (Ordinal: 16, Address: 0x3ad80)
  • AppCacheGetFallbackUrl (Ordinal: 17, Address: 0x3ad90)
  • AppCacheGetGroupList (Ordinal: 18, Address: 0x3ada0)
  • AppCacheGetIEGroupList (Ordinal: 19, Address: 0x3adb0)
  • AppCacheGetInfo (Ordinal: 20, Address: 0x3adc0)
  • AppCacheGetManifestUrl (Ordinal: 21, Address: 0x3add0)
  • AppCacheLookup (Ordinal: 22, Address: 0x3ade0)
  • BinkAllocateFrameBuffers (Ordinal: 23, Address: 0x3af30)
  • BinkBufferBlit (Ordinal: 24, Address: 0x3af40)
  • BinkBufferCheckWinPos (Ordinal: 25, Address: 0x3af50)
  • BinkBufferClear (Ordinal: 26, Address: 0x3af60)
  • BinkBufferClose (Ordinal: 27, Address: 0x3af70)
  • BinkBufferGetDescription (Ordinal: 28, Address: 0x3af80)
  • BinkBufferGetError (Ordinal: 29, Address: 0x3af90)
  • BinkBufferLock (Ordinal: 30, Address: 0x3afa0)
  • BinkBufferOpen (Ordinal: 31, Address: 0x3afb0)
  • BinkBufferSetDirectDraw (Ordinal: 32, Address: 0x3afc0)
  • BinkBufferSetHWND (Ordinal: 33, Address: 0x3afd0)
  • BinkBufferSetOffset (Ordinal: 34, Address: 0x3afe0)
  • BinkBufferSetResolution (Ordinal: 35, Address: 0x3aff0)
  • BinkBufferSetScale (Ordinal: 36, Address: 0x3b000)
  • BinkBufferUnlock (Ordinal: 37, Address: 0x3b010)
  • BinkCheckCursor (Ordinal: 38, Address: 0x3b020)
  • BinkClose (Ordinal: 39, Address: 0x3b030)
  • BinkCloseTrack (Ordinal: 40, Address: 0x3b040)
  • BinkControlBackgroundIO (Ordinal: 41, Address: 0x3b050)
  • BinkControlPlatformFeatures (Ordinal: 42, Address: 0x3b060)
  • BinkCopyToBuffer (Ordinal: 43, Address: 0x3b070)
  • BinkCopyToBufferRect (Ordinal: 44, Address: 0x3b080)
  • BinkCurrentSubtitle (Ordinal: 45, Address: 0x3b090)
  • BinkDDSurfaceType (Ordinal: 46, Address: 0x3b0a0)
  • BinkDX8SurfaceType (Ordinal: 47, Address: 0x3b0b0)
  • BinkDX9SurfaceType (Ordinal: 48, Address: 0x3b0c0)
  • BinkDoFrame (Ordinal: 49, Address: 0x3b0d0)
  • BinkDoFrameAsync (Ordinal: 50, Address: 0x3b0e0)
  • BinkDoFrameAsyncMulti (Ordinal: 51, Address: 0x3b0f0)
  • BinkDoFrameAsyncWait (Ordinal: 52, Address: 0x3b100)
  • BinkDoFramePlane (Ordinal: 53, Address: 0x3b110)
  • BinkFindXAudio2WinDevice (Ordinal: 54, Address: 0x3b120)
  • BinkFreeGlobals (Ordinal: 55, Address: 0x3b130)
  • BinkGetError (Ordinal: 56, Address: 0x3b140)
  • BinkGetFrameBuffersInfo (Ordinal: 57, Address: 0x3b150)
  • BinkGetGPUDataBuffersInfo (Ordinal: 58, Address: 0x3b160)
  • BinkGetKeyFrame (Ordinal: 59, Address: 0x3b170)
  • BinkGetPalette (Ordinal: 60, Address: 0x3b180)
  • BinkGetPlatformInfo (Ordinal: 61, Address: 0x3b190)
  • BinkGetRealtime (Ordinal: 62, Address: 0x3b1a0)
  • BinkGetRects (Ordinal: 63, Address: 0x3b1b0)
  • BinkGetSubtitleByIndex (Ordinal: 64, Address: 0x3b1c0)
  • BinkGetSummary (Ordinal: 65, Address: 0x3b1d0)
  • BinkGetTrackData (Ordinal: 66, Address: 0x3b1e0)
  • BinkGetTrackID (Ordinal: 67, Address: 0x3b1f0)
  • BinkGetTrackMaxSize (Ordinal: 68, Address: 0x3b200)
  • BinkGetTrackType (Ordinal: 69, Address: 0x3b210)
  • BinkGoto (Ordinal: 70, Address: 0x3b220)
  • BinkIsSoftwareCursor (Ordinal: 71, Address: 0x3b230)
  • BinkLoadSubtitles (Ordinal: 72, Address: 0x3b240)
  • BinkLogoAddress (Ordinal: 73, Address: 0x3b250)
  • BinkNextFrame (Ordinal: 74, Address: 0x3b260)
  • BinkOpen (Ordinal: 75, Address: 0x3b270)
  • BinkOpenDirectSound (Ordinal: 76, Address: 0x3b280)
  • BinkOpenMiles (Ordinal: 77, Address: 0x3b290)
  • BinkOpenTrack (Ordinal: 78, Address: 0x3b2a0)
  • BinkOpenWaveOut (Ordinal: 79, Address: 0x3b2b0)
  • BinkOpenWithOptions (Ordinal: 80, Address: 0x3b2c0)
  • BinkOpenXAudio27 (Ordinal: 81, Address: 0x3b2d0)
  • BinkOpenXAudio28 (Ordinal: 82, Address: 0x3b2e0)
  • BinkOpenXAudio29 (Ordinal: 83, Address: 0x3b2f0)
  • BinkOpenXAudio2 (Ordinal: 84, Address: 0x3b300)
  • BinkPause (Ordinal: 85, Address: 0x3b310)
  • BinkRegisterFrameBuffers (Ordinal: 86, Address: 0x3b320)
  • BinkRegisterGPUDataBuffers (Ordinal: 87, Address: 0x3b330)
  • BinkRequestStopAsyncThread (Ordinal: 88, Address: 0x3b340)
  • BinkRequestStopAsyncThreadsMulti (Ordinal: 89, Address: 0x3b350)
  • BinkRestoreCursor (Ordinal: 90, Address: 0x3b360)
  • BinkService (Ordinal: 91, Address: 0x3b370)
  • BinkServiceSound (Ordinal: 92, Address: 0x3b380)
  • BinkSetError (Ordinal: 93, Address: 0x3b390)
  • BinkSetFileOffset (Ordinal: 94, Address: 0x3b3a0)
  • BinkSetFrameRate (Ordinal: 95, Address: 0x3b3b0)
  • BinkSetIO (Ordinal: 96, Address: 0x3b3c0)
  • BinkSetIOSize (Ordinal: 97, Address: 0x3b3d0)
  • BinkSetMemory (Ordinal: 98, Address: 0x3b3e0)
  • BinkSetOSFileCallbacks (Ordinal: 99, Address: 0x3b3f0)
  • BinkSetPan (Ordinal: 100, Address: 0x3b400)
  • BinkSetSimulate (Ordinal: 101, Address: 0x3b410)
  • BinkSetSoundOnOff (Ordinal: 102, Address: 0x3b420)
  • BinkSetSoundSystem2 (Ordinal: 103, Address: 0x3b430)
  • BinkSetSoundSystem (Ordinal: 104, Address: 0x3b440)
  • BinkSetSoundTrack (Ordinal: 105, Address: 0x3b450)
  • BinkSetSpeakerVolumes (Ordinal: 106, Address: 0x3b460)
  • BinkSetVideoOnOff (Ordinal: 107, Address: 0x3b470)
  • BinkSetVolume (Ordinal: 108, Address: 0x3b480)
  • BinkSetWillLoop (Ordinal: 109, Address: 0x3b490)
  • BinkShouldSkip (Ordinal: 110, Address: 0x3b4a0)
  • BinkStartAsyncThread (Ordinal: 111, Address: 0x3b4b0)
  • BinkUtilCPUs (Ordinal: 112, Address: 0x3b4c0)
  • BinkUtilFree (Ordinal: 113, Address: 0x3b4d0)
  • BinkUtilMalloc (Ordinal: 114, Address: 0x3b4e0)
  • BinkUtilMutexCreate (Ordinal: 115, Address: 0x3b4f0)
  • BinkUtilMutexDestroy (Ordinal: 116, Address: 0x3b500)
  • BinkUtilMutexLock (Ordinal: 117, Address: 0x3b510)
  • BinkUtilMutexLockTimeOut (Ordinal: 118, Address: 0x3b520)
  • BinkUtilMutexUnlock (Ordinal: 119, Address: 0x3b530)
  • BinkUtilSoundGlobalLock (Ordinal: 120, Address: 0x3b540)
  • BinkUtilSoundGlobalUnlock (Ordinal: 121, Address: 0x3b550)
  • BinkWait (Ordinal: 122, Address: 0x3b560)
  • BinkWaitStopAsyncThread (Ordinal: 123, Address: 0x3b570)
  • BinkWaitStopAsyncThreadsMulti (Ordinal: 124, Address: 0x3b580)
  • CloseDriver (Ordinal: 125, Address: 0x3b960)
  • CommitUrlCacheEntryA (Ordinal: 126, Address: 0x3b970)
  • CommitUrlCacheEntryBinaryBlob (Ordinal: 127, Address: 0x3b980)
  • CommitUrlCacheEntryW (Ordinal: 128, Address: 0x3b990)
  • CreateDirect3D11DeviceFromDXGIDevice (Ordinal: 129, Address: 0x3b9c0)
  • CreateDirect3D11SurfaceFromDXGISurface (Ordinal: 130, Address: 0x3b9d0)
  • CreateMD5SSOHash (Ordinal: 131, Address: 0x3b9e0)
  • CreateUrlCacheContainerA (Ordinal: 132, Address: 0x3b9f0)
  • CreateUrlCacheContainerW (Ordinal: 133, Address: 0x3ba00)
  • CreateUrlCacheEntryA (Ordinal: 134, Address: 0x3ba10)
  • CreateUrlCacheEntryExW (Ordinal: 135, Address: 0x3ba20)
  • CreateUrlCacheEntryW (Ordinal: 136, Address: 0x3ba30)
  • CreateUrlCacheGroup (Ordinal: 137, Address: 0x3ba40)
  • D3D10CompileEffectFromMemory (Ordinal: 138, Address: 0x3ba50)
  • D3D10CompileShader (Ordinal: 139, Address: 0x3ba60)
  • D3D10CreateBlob (Ordinal: 140, Address: 0x3ba70)
  • D3D10CreateDevice (Ordinal: 141, Address: 0x3ba80)
  • D3D10CreateDeviceAndSwapChain (Ordinal: 142, Address: 0x3ba90)
  • D3D10CreateEffectFromMemory (Ordinal: 143, Address: 0x3baa0)
  • D3D10CreateEffectPoolFromMemory (Ordinal: 144, Address: 0x3bab0)
  • D3D10CreateStateBlock (Ordinal: 145, Address: 0x3bac0)
  • D3D10DisassembleEffect (Ordinal: 146, Address: 0x3bad0)
  • D3D10DisassembleShader (Ordinal: 147, Address: 0x3bae0)
  • D3D10GetGeometryShaderProfile (Ordinal: 148, Address: 0x3baf0)
  • D3D10GetInputAndOutputSignatureBlob (Ordinal: 149, Address: 0x3bb00)
  • D3D10GetInputSignatureBlob (Ordinal: 150, Address: 0x3bb10)
  • D3D10GetOutputSignatureBlob (Ordinal: 151, Address: 0x3bb20)
  • D3D10GetPixelShaderProfile (Ordinal: 152, Address: 0x3bb30)
  • D3D10GetShaderDebugInfo (Ordinal: 153, Address: 0x3bb40)
  • D3D10GetVersion (Ordinal: 154, Address: 0x3bb50)
  • D3D10GetVertexShaderProfile (Ordinal: 155, Address: 0x3bb60)
  • D3D10PreprocessShader (Ordinal: 156, Address: 0x3bb70)
  • D3D10ReflectShader (Ordinal: 157, Address: 0x3bb80)
  • D3D10RegisterLayers (Ordinal: 158, Address: 0x3bb90)
  • D3D10StateBlockMaskDifference (Ordinal: 159, Address: 0x3bba0)
  • D3D10StateBlockMaskDisableAll (Ordinal: 160, Address: 0x3bbb0)
  • D3D10StateBlockMaskDisableCapture (Ordinal: 161, Address: 0x3bbc0)
  • D3D10StateBlockMaskEnableAll (Ordinal: 162, Address: 0x3bbd0)
  • D3D10StateBlockMaskEnableCapture (Ordinal: 163, Address: 0x3bbe0)
  • D3D10StateBlockMaskGetSetting (Ordinal: 164, Address: 0x3bbf0)
  • D3D10StateBlockMaskIntersect (Ordinal: 165, Address: 0x3bc00)
  • D3D10StateBlockMaskUnion (Ordinal: 166, Address: 0x3bc10)
  • D3D11CoreCreateDevice (Ordinal: 167, Address: 0x3bc20)
  • D3D11CoreCreateLayeredDevice (Ordinal: 168, Address: 0x3bc30)
  • D3D11CoreGetLayeredDeviceSize (Ordinal: 169, Address: 0x3bc40)
  • D3D11CoreRegisterLayers (Ordinal: 170, Address: 0x3bc50)
  • D3D11CreateDevice (Ordinal: 171, Address: 0x3bc60)
  • D3D11CreateDeviceAndSwapChain (Ordinal: 172, Address: 0x3bc70)
  • D3D11CreateDeviceForD3D12 (Ordinal: 173, Address: 0x3bc80)
  • D3D11On12CreateDevice (Ordinal: 174, Address: 0x3bc90)
  • D3D12CoreCreateLayeredDevice (Ordinal: 175, Address: 0x3bca0)
  • D3D12CoreGetLayeredDeviceSize (Ordinal: 176, Address: 0x3bcb0)
  • D3D12CoreRegisterLayers (Ordinal: 177, Address: 0x3bcc0)
  • D3D12CreateDevice (Ordinal: 178, Address: 0x3bcd0)
  • D3D12CreateRootSignatureDeserializer (Ordinal: 179, Address: 0x3bce0)
  • D3D12CreateVersionedRootSignatureDeserializer (Ordinal: 180, Address: 0x3bcf0)
  • D3D12DeviceRemovedExtendedData (Ordinal: 181, Address: 0x3bd00)
  • D3D12EnableExperimentalFeatures (Ordinal: 182, Address: 0x3bd10)
  • D3D12GetDebugInterface (Ordinal: 183, Address: 0x3bd20)
  • D3D12GetInterface (Ordinal: 184, Address: 0x3bd30)
  • D3D12PIXEventsReplaceBlock (Ordinal: 185, Address: 0x3bd40)
  • D3D12PIXGetThreadInfo (Ordinal: 186, Address: 0x3bd50)
  • D3D12PIXNotifyWakeFromFenceSignal (Ordinal: 187, Address: 0x3bd60)
  • D3D12PIXReportCounter (Ordinal: 188, Address: 0x3bd70)
  • D3D12SerializeRootSignature (Ordinal: 189, Address: 0x3bd80)
  • D3D12SerializeVersionedRootSignature (Ordinal: 190, Address: 0x3bd90)
  • D3DKMTCloseAdapter (Ordinal: 191, Address: 0x3bda0)
  • D3DKMTCreateAllocation (Ordinal: 192, Address: 0x3bdb0)
  • D3DKMTCreateContext (Ordinal: 193, Address: 0x3bdc0)
  • D3DKMTCreateDevice (Ordinal: 194, Address: 0x3bdd0)
  • D3DKMTCreateSynchronizationObject (Ordinal: 195, Address: 0x3bde0)
  • D3DKMTDestroyAllocation (Ordinal: 196, Address: 0x3bdf0)
  • D3DKMTDestroyContext (Ordinal: 197, Address: 0x3be00)
  • D3DKMTDestroyDevice (Ordinal: 198, Address: 0x3be10)
  • D3DKMTDestroySynchronizationObject (Ordinal: 199, Address: 0x3be20)
  • D3DKMTEscape (Ordinal: 200, Address: 0x3be30)
  • D3DKMTGetContextSchedulingPriority (Ordinal: 201, Address: 0x3be40)
  • D3DKMTGetDeviceState (Ordinal: 202, Address: 0x3be50)
  • D3DKMTGetDisplayModeList (Ordinal: 203, Address: 0x3be60)
  • D3DKMTGetMultisampleMethodList (Ordinal: 204, Address: 0x3be70)
  • D3DKMTGetRuntimeData (Ordinal: 205, Address: 0x3be80)
  • D3DKMTGetSharedPrimaryHandle (Ordinal: 206, Address: 0x3be90)
  • D3DKMTLock (Ordinal: 207, Address: 0x3bea0)
  • D3DKMTOpenAdapterFromHdc (Ordinal: 208, Address: 0x3beb0)
  • D3DKMTOpenResource (Ordinal: 209, Address: 0x3bec0)
  • D3DKMTPresent (Ordinal: 210, Address: 0x3bed0)
  • D3DKMTQueryAdapterInfo (Ordinal: 211, Address: 0x3bee0)
  • D3DKMTQueryAllocationResidency (Ordinal: 212, Address: 0x3bef0)
  • D3DKMTQueryResourceInfo (Ordinal: 213, Address: 0x3bf00)
  • D3DKMTRender (Ordinal: 214, Address: 0x3bf10)
  • D3DKMTSetAllocationPriority (Ordinal: 215, Address: 0x3bf20)
  • D3DKMTSetContextSchedulingPriority (Ordinal: 216, Address: 0x3bf30)
  • D3DKMTSetDisplayMode (Ordinal: 217, Address: 0x3bf40)
  • D3DKMTSetDisplayPrivateDriverFormat (Ordinal: 218, Address: 0x3bf50)
  • D3DKMTSetGammaRamp (Ordinal: 219, Address: 0x3bf60)
  • D3DKMTSetVidPnSourceOwner (Ordinal: 220, Address: 0x3bf70)
  • D3DKMTSignalSynchronizationObject (Ordinal: 221, Address: 0x3bf80)
  • D3DKMTUnlock (Ordinal: 222, Address: 0x3bf90)
  • D3DKMTWaitForSynchronizationObject (Ordinal: 223, Address: 0x3bfa0)
  • D3DKMTWaitForVerticalBlankEvent (Ordinal: 224, Address: 0x3bfb0)
  • D3DPERF_BeginEvent (Ordinal: 225, Address: 0x3bfc0)
  • D3DPERF_EndEvent (Ordinal: 226, Address: 0x3bfd0)
  • D3DPERF_GetStatus (Ordinal: 227, Address: 0x3bfe0)
  • D3DPERF_QueryRepeatFrame (Ordinal: 228, Address: 0x3bff0)
  • D3DPERF_SetMarker (Ordinal: 229, Address: 0x3c000)
  • D3DPERF_SetOptions (Ordinal: 230, Address: 0x3c010)
  • D3DPERF_SetRegion (Ordinal: 231, Address: 0x3c020)
  • D3DPerformance_BeginEvent (Ordinal: 232, Address: 0x3c030)
  • D3DPerformance_EndEvent (Ordinal: 233, Address: 0x3c040)
  • D3DPerformance_GetStatus (Ordinal: 234, Address: 0x3c050)
  • D3DPerformance_SetMarker (Ordinal: 235, Address: 0x3c060)
  • DebugSetLevel (Ordinal: 236, Address: 0x3c100)
  • DebugSetMute (Ordinal: 237, Address: 0x3c110)
  • DefDriverProc (Ordinal: 238, Address: 0x3c180)
  • DeleteIE3Cache (Ordinal: 239, Address: 0x3c190)
  • DeleteUrlCacheContainerA (Ordinal: 240, Address: 0x3c1a0)
  • DeleteUrlCacheContainerW (Ordinal: 241, Address: 0x3c1b0)
  • DeleteUrlCacheEntry (Ordinal: 242, Address: 0x3c1c0)
  • DeleteUrlCacheEntryA (Ordinal: 243, Address: 0x3c1d0)
  • DeleteUrlCacheEntryW (Ordinal: 244, Address: 0x3c1e0)
  • DeleteUrlCacheGroup (Ordinal: 245, Address: 0x3c1f0)
  • DeleteWpadCacheForNetworks (Ordinal: 246, Address: 0x3c200)
  • DetectAutoProxyUrl (Ordinal: 247, Address: 0x3c440)
  • Direct3D9EnableMaximizedWindowedModeShim (Ordinal: 248, Address: 0x3c450)
  • Direct3DCreate9 (Ordinal: 249, Address: 0x3c460)
  • Direct3DCreate9Ex (Ordinal: 250, Address: 0x3c470)
  • Direct3DCreate9On12 (Ordinal: 251, Address: 0x3c480)
  • Direct3DCreate9On12Ex (Ordinal: 252, Address: 0x3c490)
  • Direct3DShaderValidatorCreate9 (Ordinal: 253, Address: 0x3c4a0)
  • DirectInput8Create (Ordinal: 254, Address: 0x3c4b0)
  • DirectSoundCaptureCreate8 (Ordinal: 255, Address: 0x3c4c0)
  • DirectSoundCaptureCreate (Ordinal: 256, Address: 0x3c4d0)
  • DirectSoundCaptureEnumerateA (Ordinal: 257, Address: 0x3c4e0)
  • DirectSoundCaptureEnumerateW (Ordinal: 258, Address: 0x3c4f0)
  • DirectSoundCreate8 (Ordinal: 259, Address: 0x3c500)
  • DirectSoundCreate (Ordinal: 260, Address: 0x3c510)
  • DirectSoundEnumerateA (Ordinal: 261, Address: 0x3c520)
  • DirectSoundEnumerateW (Ordinal: 262, Address: 0x3c530)
  • DirectSoundFullDuplexCreate (Ordinal: 263, Address: 0x3c540)
  • DispatchAPICall (Ordinal: 264, Address: 0x3c550)
  • DllCanUnloadNow (Ordinal: 265, Address: 0x3c560)
  • DllGetClassObject (Ordinal: 266, Address: 0x3c570)
  • DllInstall (Ordinal: 267, Address: 0x3c580)
  • DllMain (Ordinal: 268, Address: 0x3c590)
  • DllRegisterServer (Ordinal: 269, Address: 0x3c5a0)
  • DllUnregisterServer (Ordinal: 270, Address: 0x3c5b0)
  • DriverCallback (Ordinal: 271, Address: 0x3c5d0)
  • DrvGetModuleHandle (Ordinal: 272, Address: 0x3c5e0)
  • EnableFeatureLevelUpgrade (Ordinal: 273, Address: 0x3c5f0)
  • FindCloseUrlCache (Ordinal: 274, Address: 0x3c7e0)
  • FindFirstUrlCacheContainerA (Ordinal: 275, Address: 0x3c7f0)
  • FindFirstUrlCacheContainerW (Ordinal: 276, Address: 0x3c800)
  • FindFirstUrlCacheEntryA (Ordinal: 277, Address: 0x3c810)
  • FindFirstUrlCacheEntryExA (Ordinal: 278, Address: 0x3c820)
  • FindFirstUrlCacheEntryExW (Ordinal: 279, Address: 0x3c830)
  • FindFirstUrlCacheEntryW (Ordinal: 280, Address: 0x3c840)
  • FindFirstUrlCacheGroup (Ordinal: 281, Address: 0x3c850)
  • FindNextUrlCacheContainerA (Ordinal: 282, Address: 0x3c860)
  • FindNextUrlCacheContainerW (Ordinal: 283, Address: 0x3c870)
  • FindNextUrlCacheEntryA (Ordinal: 284, Address: 0x3c880)
  • FindNextUrlCacheEntryExA (Ordinal: 285, Address: 0x3c890)
  • FindNextUrlCacheEntryExW (Ordinal: 286, Address: 0x3c8a0)
  • FindNextUrlCacheEntryW (Ordinal: 287, Address: 0x3c8b0)
  • FindNextUrlCacheGroup (Ordinal: 288, Address: 0x3c8c0)
  • ForceNexusLookup (Ordinal: 289, Address: 0x3ca30)
  • ForceNexusLookupExW (Ordinal: 290, Address: 0x3ca40)
  • FreeUrlCacheSpaceA (Ordinal: 291, Address: 0x3de80)
  • FreeUrlCacheSpaceW (Ordinal: 292, Address: 0x3de90)
  • FtpCommandA (Ordinal: 293, Address: 0x3dea0)
  • FtpCommandW (Ordinal: 294, Address: 0x3deb0)
  • FtpCreateDirectoryA (Ordinal: 295, Address: 0x3dec0)
  • FtpCreateDirectoryW (Ordinal: 296, Address: 0x3ded0)
  • FtpDeleteFileA (Ordinal: 297, Address: 0x3dee0)
  • FtpDeleteFileW (Ordinal: 298, Address: 0x3def0)
  • FtpFindFirstFileA (Ordinal: 299, Address: 0x3df00)
  • FtpFindFirstFileW (Ordinal: 300, Address: 0x3df10)
  • FtpGetCurrentDirectoryA (Ordinal: 301, Address: 0x3df20)
  • FtpGetCurrentDirectoryW (Ordinal: 302, Address: 0x3df30)
  • FtpGetFileA (Ordinal: 303, Address: 0x3df40)
  • FtpGetFileEx (Ordinal: 304, Address: 0x3df50)
  • FtpGetFileSize (Ordinal: 305, Address: 0x3df60)
  • FtpGetFileW (Ordinal: 306, Address: 0x3df70)
  • FtpOpenFileA (Ordinal: 307, Address: 0x3df80)
  • FtpOpenFileW (Ordinal: 308, Address: 0x3df90)
  • FtpPutFileA (Ordinal: 309, Address: 0x3dfa0)
  • FtpPutFileEx (Ordinal: 310, Address: 0x3dfb0)
  • FtpPutFileW (Ordinal: 311, Address: 0x3dfc0)
  • FtpRemoveDirectoryA (Ordinal: 312, Address: 0x3dfd0)
  • FtpRemoveDirectoryW (Ordinal: 313, Address: 0x3dfe0)
  • FtpRenameFileA (Ordinal: 314, Address: 0x3dff0)
  • FtpRenameFileW (Ordinal: 315, Address: 0x3e000)
  • FtpSetCurrentDirectoryA (Ordinal: 316, Address: 0x3e010)
  • FtpSetCurrentDirectoryW (Ordinal: 317, Address: 0x3e020)
  • GetBehaviorValue (Ordinal: 318, Address: 0x3e040)
  • GetDeviceID (Ordinal: 319, Address: 0x3e050)
  • GetDriverModuleHandle (Ordinal: 320, Address: 0x3e060)
  • GetFileVersionInfoA (Ordinal: 321, Address: 0x3e070)
  • GetFileVersionInfoByHandle (Ordinal: 322, Address: 0x3e080)
  • GetFileVersionInfoExA (Ordinal: 323, Address: 0x3e090)
  • GetFileVersionInfoExW (Ordinal: 324, Address: 0x3e0a0)
  • GetFileVersionInfoSizeA (Ordinal: 325, Address: 0x3e0b0)
  • GetFileVersionInfoSizeExA (Ordinal: 326, Address: 0x3e0c0)
  • GetFileVersionInfoSizeExW (Ordinal: 327, Address: 0x3e0d0)
  • GetFileVersionInfoSizeW (Ordinal: 328, Address: 0x3e0e0)
  • GetFileVersionInfoW (Ordinal: 329, Address: 0x3e0f0)
  • GetMemoryModule (Ordinal: 330, Address: 0x22a10)
  • GetOverloadPathA (Ordinal: 331, Address: 0x22e20)
  • GetOverloadPathW (Ordinal: 332, Address: 0x22ef0)
  • GetOverloadedFilePathA (Ordinal: 333, Address: 0x240a0)
  • GetOverloadedFilePathW (Ordinal: 334, Address: 0x242d0)
  • GetProxyDllInfo (Ordinal: 335, Address: 0x3e100)
  • GetUrlCacheConfigInfoA (Ordinal: 336, Address: 0x3e110)
  • GetUrlCacheConfigInfoW (Ordinal: 337, Address: 0x3e120)
  • GetUrlCacheEntryBinaryBlob (Ordinal: 338, Address: 0x3e130)
  • GetUrlCacheEntryInfoA (Ordinal: 339, Address: 0x3e140)
  • GetUrlCacheEntryInfoExA (Ordinal: 340, Address: 0x3e150)
  • GetUrlCacheEntryInfoExW (Ordinal: 341, Address: 0x3e160)
  • GetUrlCacheEntryInfoW (Ordinal: 342, Address: 0x3e170)
  • GetUrlCacheGroupAttributeA (Ordinal: 343, Address: 0x3e180)
  • GetUrlCacheGroupAttributeW (Ordinal: 344, Address: 0x3e190)
  • GetUrlCacheHeaderData (Ordinal: 345, Address: 0x3e1a0)
  • GopherCreateLocatorA (Ordinal: 346, Address: 0x3ebd0)
  • GopherCreateLocatorW (Ordinal: 347, Address: 0x3ebe0)
  • GopherFindFirstFileA (Ordinal: 348, Address: 0x3ebf0)
  • GopherFindFirstFileW (Ordinal: 349, Address: 0x3ec00)
  • GopherGetAttributeA (Ordinal: 350, Address: 0x3ec10)
  • GopherGetAttributeW (Ordinal: 351, Address: 0x3ec20)
  • GopherGetLocatorTypeA (Ordinal: 352, Address: 0x3ec30)
  • GopherGetLocatorTypeW (Ordinal: 353, Address: 0x3ec40)
  • GopherOpenFileA (Ordinal: 354, Address: 0x3ec50)
  • GopherOpenFileW (Ordinal: 355, Address: 0x3ec60)
  • HttpAddRequestHeadersA (Ordinal: 356, Address: 0x3ec70)
  • HttpAddRequestHeadersW (Ordinal: 357, Address: 0x3ec80)
  • HttpCheckDavCompliance (Ordinal: 358, Address: 0x3ec90)
  • HttpCloseDependencyHandle (Ordinal: 359, Address: 0x3eca0)
  • HttpDuplicateDependencyHandle (Ordinal: 360, Address: 0x3ecb0)
  • HttpEndRequestA (Ordinal: 361, Address: 0x3ecc0)
  • HttpEndRequestW (Ordinal: 362, Address: 0x3ecd0)
  • HttpGetServerCredentials (Ordinal: 363, Address: 0x3ece0)
  • HttpGetTunnelSocket (Ordinal: 364, Address: 0x3ecf0)
  • HttpIsHostHstsEnabled (Ordinal: 365, Address: 0x3ed00)
  • HttpOpenDependencyHandle (Ordinal: 366, Address: 0x3ed10)
  • HttpOpenRequestA (Ordinal: 367, Address: 0x3ed20)
  • HttpOpenRequestW (Ordinal: 368, Address: 0x3ed30)
  • HttpPushClose (Ordinal: 369, Address: 0x3ed40)
  • HttpPushEnable (Ordinal: 370, Address: 0x3ed50)
  • HttpPushWait (Ordinal: 371, Address: 0x3ed60)
  • HttpQueryInfoA (Ordinal: 372, Address: 0x3ed70)
  • HttpQueryInfoW (Ordinal: 373, Address: 0x3ed80)
  • HttpSendRequestA (Ordinal: 374, Address: 0x3ed90)
  • HttpSendRequestExA (Ordinal: 375, Address: 0x3eda0)
  • HttpSendRequestExW (Ordinal: 376, Address: 0x3edb0)
  • HttpSendRequestW (Ordinal: 377, Address: 0x3edc0)
  • HttpWebSocketClose (Ordinal: 378, Address: 0x3edd0)
  • HttpWebSocketCompleteUpgrade (Ordinal: 379, Address: 0x3ede0)
  • HttpWebSocketQueryCloseStatus (Ordinal: 380, Address: 0x3edf0)
  • HttpWebSocketReceive (Ordinal: 381, Address: 0x3ee00)
  • HttpWebSocketSend (Ordinal: 382, Address: 0x3ee10)
  • HttpWebSocketShutdown (Ordinal: 383, Address: 0x3ee20)
  • IncrementUrlCacheHeaderData (Ordinal: 384, Address: 0x3ee40)
  • InternetAlgIdToStringA (Ordinal: 385, Address: 0x3f4a0)
  • InternetAlgIdToStringW (Ordinal: 386, Address: 0x3f4b0)
  • InternetAttemptConnect (Ordinal: 387, Address: 0x3f4c0)
  • InternetAutodial (Ordinal: 388, Address: 0x3f4d0)
  • InternetAutodialCallback (Ordinal: 389, Address: 0x3f4e0)
  • InternetAutodialHangup (Ordinal: 390, Address: 0x3f4f0)
  • InternetCanonicalizeUrlA (Ordinal: 391, Address: 0x3f500)
  • InternetCanonicalizeUrlW (Ordinal: 392, Address: 0x3f510)
  • InternetCheckConnectionA (Ordinal: 393, Address: 0x3f520)
  • InternetCheckConnectionW (Ordinal: 394, Address: 0x3f530)
  • InternetClearAllPerSiteCookieDecisions (Ordinal: 395, Address: 0x3f540)
  • InternetCloseHandle (Ordinal: 396, Address: 0x3f550)
  • InternetCombineUrlA (Ordinal: 397, Address: 0x3f560)
  • InternetCombineUrlW (Ordinal: 398, Address: 0x3f570)
  • InternetConfirmZoneCrossing (Ordinal: 399, Address: 0x3f580)
  • InternetConfirmZoneCrossingA (Ordinal: 400, Address: 0x3f590)
  • InternetConfirmZoneCrossingW (Ordinal: 401, Address: 0x3f5a0)
  • InternetConnectA (Ordinal: 402, Address: 0x3f5b0)
  • InternetConnectW (Ordinal: 403, Address: 0x3f5c0)
  • InternetConvertUrlFromWireToWideChar (Ordinal: 404, Address: 0x3f5d0)
  • InternetCrackUrlA (Ordinal: 405, Address: 0x3f5e0)
  • InternetCrackUrlW (Ordinal: 406, Address: 0x3f5f0)
  • InternetCreateUrlA (Ordinal: 407, Address: 0x3f600)
  • InternetCreateUrlW (Ordinal: 408, Address: 0x3f610)
  • InternetDial (Ordinal: 409, Address: 0x3f620)
  • InternetDialA (Ordinal: 410, Address: 0x3f630)
  • InternetDialW (Ordinal: 411, Address: 0x3f640)
  • InternetEnumPerSiteCookieDecisionA (Ordinal: 412, Address: 0x3f650)
  • InternetEnumPerSiteCookieDecisionW (Ordinal: 413, Address: 0x3f660)
  • InternetErrorDlg (Ordinal: 414, Address: 0x3f670)
  • InternetFindNextFileA (Ordinal: 415, Address: 0x3f680)
  • InternetFindNextFileW (Ordinal: 416, Address: 0x3f690)
  • InternetFortezzaCommand (Ordinal: 417, Address: 0x3f6a0)
  • InternetFreeCookies (Ordinal: 418, Address: 0x3f6b0)
  • InternetFreeProxyInfoList (Ordinal: 419, Address: 0x3f6c0)
  • InternetGetCertByURL (Ordinal: 420, Address: 0x3f6d0)
  • InternetGetCertByURLA (Ordinal: 421, Address: 0x3f6e0)
  • InternetGetConnectedState (Ordinal: 422, Address: 0x3f6f0)
  • InternetGetConnectedStateEx (Ordinal: 423, Address: 0x3f700)
  • InternetGetConnectedStateExA (Ordinal: 424, Address: 0x3f710)
  • InternetGetConnectedStateExW (Ordinal: 425, Address: 0x3f720)
  • InternetGetCookieA (Ordinal: 426, Address: 0x3f730)
  • InternetGetCookieEx2 (Ordinal: 427, Address: 0x3f740)
  • InternetGetCookieExA (Ordinal: 428, Address: 0x3f750)
  • InternetGetCookieExW (Ordinal: 429, Address: 0x3f760)
  • InternetGetCookieW (Ordinal: 430, Address: 0x3f770)
  • InternetGetLastResponseInfoA (Ordinal: 431, Address: 0x3f780)
  • InternetGetLastResponseInfoW (Ordinal: 432, Address: 0x3f790)
  • InternetGetPerSiteCookieDecisionA (Ordinal: 433, Address: 0x3f7a0)
  • InternetGetPerSiteCookieDecisionW (Ordinal: 434, Address: 0x3f7b0)
  • InternetGetProxyForUrl (Ordinal: 435, Address: 0x3f7c0)
  • InternetGetSecurityInfoByURL (Ordinal: 436, Address: 0x3f7d0)
  • InternetGetSecurityInfoByURLA (Ordinal: 437, Address: 0x3f7e0)
  • InternetGetSecurityInfoByURLW (Ordinal: 438, Address: 0x3f7f0)
  • InternetGoOnline (Ordinal: 439, Address: 0x3f800)
  • InternetGoOnlineA (Ordinal: 440, Address: 0x3f810)
  • InternetGoOnlineW (Ordinal: 441, Address: 0x3f820)
  • InternetHangUp (Ordinal: 442, Address: 0x3f830)
  • InternetInitializeAutoProxyDll (Ordinal: 443, Address: 0x3f840)
  • InternetLockRequestFile (Ordinal: 444, Address: 0x3f850)
  • InternetOpenA (Ordinal: 445, Address: 0x3f860)
  • InternetOpenUrlA (Ordinal: 446, Address: 0x3f870)
  • InternetOpenUrlW (Ordinal: 447, Address: 0x3f880)
  • InternetOpenW (Ordinal: 448, Address: 0x3f890)
  • InternetQueryDataAvailable (Ordinal: 449, Address: 0x3f8a0)
  • InternetQueryFortezzaStatus (Ordinal: 450, Address: 0x3f8b0)
  • InternetQueryOptionA (Ordinal: 451, Address: 0x3f8c0)
  • InternetQueryOptionW (Ordinal: 452, Address: 0x3f8d0)
  • InternetReadFile (Ordinal: 453, Address: 0x3f8e0)
  • InternetReadFileExA (Ordinal: 454, Address: 0x3f8f0)
  • InternetReadFileExW (Ordinal: 455, Address: 0x3f900)
  • InternetSecurityProtocolToStringA (Ordinal: 456, Address: 0x3f910)
  • InternetSecurityProtocolToStringW (Ordinal: 457, Address: 0x3f920)
  • InternetSetCookieA (Ordinal: 458, Address: 0x3f930)
  • InternetSetCookieEx2 (Ordinal: 459, Address: 0x3f940)
  • InternetSetCookieExA (Ordinal: 460, Address: 0x3f950)
  • InternetSetCookieExW (Ordinal: 461, Address: 0x3f960)
  • InternetSetCookieW (Ordinal: 462, Address: 0x3f970)
  • InternetSetDialState (Ordinal: 463, Address: 0x3f980)
  • InternetSetDialStateA (Ordinal: 464, Address: 0x3f990)
  • InternetSetDialStateW (Ordinal: 465, Address: 0x3f9a0)
  • InternetSetFilePointer (Ordinal: 466, Address: 0x3f9b0)
  • InternetSetOptionA (Ordinal: 467, Address: 0x3f9c0)
  • InternetSetOptionExA (Ordinal: 468, Address: 0x3f9d0)
  • InternetSetOptionExW (Ordinal: 469, Address: 0x3f9e0)
  • InternetSetOptionW (Ordinal: 470, Address: 0x3f9f0)
  • InternetSetPerSiteCookieDecisionA (Ordinal: 471, Address: 0x3fa00)
  • InternetSetPerSiteCookieDecisionW (Ordinal: 472, Address: 0x3fa10)
  • InternetSetStatusCallback (Ordinal: 473, Address: 0x3fa20)
  • InternetSetStatusCallbackA (Ordinal: 474, Address: 0x3fa30)
  • InternetSetStatusCallbackW (Ordinal: 475, Address: 0x3fa40)
  • InternetShowSecurityInfoByURL (Ordinal: 476, Address: 0x3fa50)
  • InternetShowSecurityInfoByURLA (Ordinal: 477, Address: 0x3fa60)
  • InternetShowSecurityInfoByURLW (Ordinal: 478, Address: 0x3fa70)
  • InternetTimeFromSystemTime (Ordinal: 479, Address: 0x3fa80)
  • InternetTimeFromSystemTimeA (Ordinal: 480, Address: 0x3fa90)
  • InternetTimeFromSystemTimeW (Ordinal: 481, Address: 0x3faa0)
  • InternetTimeToSystemTime (Ordinal: 482, Address: 0x3fab0)
  • InternetTimeToSystemTimeA (Ordinal: 483, Address: 0x3fac0)
  • InternetTimeToSystemTimeW (Ordinal: 484, Address: 0x3fad0)
  • InternetUnlockRequestFile (Ordinal: 485, Address: 0x3fae0)
  • InternetWriteFile (Ordinal: 486, Address: 0x3faf0)
  • InternetWriteFileExA (Ordinal: 487, Address: 0x3fb00)
  • InternetWriteFileExW (Ordinal: 488, Address: 0x3fb10)
  • IsHostInProxyBypassList (Ordinal: 489, Address: 0x40000)
  • IsUltimateASILoader (Ordinal: 490, Address: 0x280f0)
  • IsUrlCacheEntryExpiredA (Ordinal: 491, Address: 0x40010)
  • IsUrlCacheEntryExpiredW (Ordinal: 492, Address: 0x40020)
  • LoadUrlCacheContent (Ordinal: 493, Address: 0x40060)
  • NotifyCallbackData (Ordinal: 494, Address: 0x40270)
  • OpenAdapter10 (Ordinal: 495, Address: 0x40280)
  • OpenAdapter10_2 (Ordinal: 496, Address: 0x40290)
  • OpenDriver (Ordinal: 497, Address: 0x402a0)
  • PSGPError (Ordinal: 498, Address: 0x40430)
  • PSGPSampleTexture (Ordinal: 499, Address: 0x40440)
  • ParseX509EncodedCertificateForListBoxEntry (Ordinal: 500, Address: 0x40450)
  • PlaySound (Ordinal: 501, Address: 0x40520)
  • PlaySoundA (Ordinal: 502, Address: 0x40530)
  • PlaySoundW (Ordinal: 503, Address: 0x40540)
  • PrivacyGetZonePreferenceW (Ordinal: 504, Address: 0x407f0)
  • PrivacySetZonePreferenceW (Ordinal: 505, Address: 0x40800)
  • Private1 (Ordinal: 506, Address: 0x40810)
  • RADTimerRead (Ordinal: 507, Address: 0x40820)
  • ReadUrlCacheEntryStream (Ordinal: 508, Address: 0x40890)
  • ReadUrlCacheEntryStreamEx (Ordinal: 509, Address: 0x408a0)
  • RegisterUrlCacheNotification (Ordinal: 510, Address: 0x40a00)
  • RemoveVirtualFileFromOverloadA (Ordinal: 511, Address: 0x3a2e0)
  • RemoveVirtualFileFromOverloadW (Ordinal: 512, Address: 0x3a2f0)
  • RemoveVirtualPathFromOverloadA (Ordinal: 513, Address: 0x3a300)
  • RemoveVirtualPathFromOverloadW (Ordinal: 514, Address: 0x3a490)
  • ResumeSuspendedDownload (Ordinal: 515, Address: 0x40b30)
  • RetrieveUrlCacheEntryFileA (Ordinal: 516, Address: 0x40b40)
  • RetrieveUrlCacheEntryFileW (Ordinal: 517, Address: 0x40b50)
  • RetrieveUrlCacheEntryStreamA (Ordinal: 518, Address: 0x40b60)
  • RetrieveUrlCacheEntryStreamW (Ordinal: 519, Address: 0x40b70)
  • RunOnceUrlCache (Ordinal: 520, Address: 0x40b80)
  • SendDriverMessage (Ordinal: 521, Address: 0x40b90)
  • SetAppCompatStringPointer (Ordinal: 522, Address: 0x40ba0)
  • SetUrlCacheConfigInfoA (Ordinal: 523, Address: 0x40bb0)
  • SetUrlCacheConfigInfoW (Ordinal: 524, Address: 0x40bc0)
  • SetUrlCacheEntryGroup (Ordinal: 525, Address: 0x40bd0)
  • SetUrlCacheEntryGroupA (Ordinal: 526, Address: 0x40be0)
  • SetUrlCacheEntryGroupW (Ordinal: 527, Address: 0x40bf0)
  • SetUrlCacheEntryInfoA (Ordinal: 528, Address: 0x40c00)
  • SetUrlCacheEntryInfoW (Ordinal: 529, Address: 0x40c10)
  • SetUrlCacheGroupAttributeA (Ordinal: 530, Address: 0x40c20)
  • SetUrlCacheGroupAttributeW (Ordinal: 531, Address: 0x40c30)
  • SetUrlCacheHeaderData (Ordinal: 532, Address: 0x40c40)
  • ShowCertificate (Ordinal: 533, Address: 0x40c50)
  • ShowClientAuthCerts (Ordinal: 534, Address: 0x40c60)
  • ShowSecurityInfo (Ordinal: 535, Address: 0x40c70)
  • ShowX509EncodedCertificate (Ordinal: 536, Address: 0x40c80)
  • SvchostPushServiceGlobals (Ordinal: 537, Address: 0x40ce0)
  • UnlockUrlCacheEntryFile (Ordinal: 538, Address: 0x428f0)
  • UnlockUrlCacheEntryFileA (Ordinal: 539, Address: 0x42900)
  • UnlockUrlCacheEntryFileW (Ordinal: 540, Address: 0x42910)
  • UnlockUrlCacheEntryStream (Ordinal: 541, Address: 0x42920)
  • UpdateUrlCacheContentPath (Ordinal: 542, Address: 0x42930)
  • UrlCacheCheckEntriesExist (Ordinal: 543, Address: 0x42940)
  • UrlCacheCloseEntryHandle (Ordinal: 544, Address: 0x42950)
  • UrlCacheContainerSetEntryMaximumAge (Ordinal: 545, Address: 0x42960)
  • UrlCacheCreateContainer (Ordinal: 546, Address: 0x42970)
  • UrlCacheFindFirstEntry (Ordinal: 547, Address: 0x42980)
  • UrlCacheFindNextEntry (Ordinal: 548, Address: 0x42990)
  • UrlCacheFreeEntryInfo (Ordinal: 549, Address: 0x429a0)
  • UrlCacheFreeGlobalSpace (Ordinal: 550, Address: 0x429b0)
  • UrlCacheGetContentPaths (Ordinal: 551, Address: 0x429c0)
  • UrlCacheGetEntryInfo (Ordinal: 552, Address: 0x429d0)
  • UrlCacheGetGlobalCacheSize (Ordinal: 553, Address: 0x429e0)
  • UrlCacheGetGlobalLimit (Ordinal: 554, Address: 0x429f0)
  • UrlCacheReadEntryStream (Ordinal: 555, Address: 0x42a00)
  • UrlCacheReloadSettings (Ordinal: 556, Address: 0x42a10)
  • UrlCacheRetrieveEntryFile (Ordinal: 557, Address: 0x42a20)
  • UrlCacheRetrieveEntryStream (Ordinal: 558, Address: 0x42a30)
  • UrlCacheServer (Ordinal: 559, Address: 0x42a40)
  • UrlCacheSetGlobalLimit (Ordinal: 560, Address: 0x42a50)
  • UrlCacheUpdateEntryExtraData (Ordinal: 561, Address: 0x42a60)
  • UrlZonesDetach (Ordinal: 562, Address: 0x42a70)
  • VerFindFileA (Ordinal: 563, Address: 0x42a80)
  • VerFindFileW (Ordinal: 564, Address: 0x42a90)
  • VerInstallFileA (Ordinal: 565, Address: 0x42aa0)
  • VerInstallFileW (Ordinal: 566, Address: 0x42ab0)
  • VerLanguageNameA (Ordinal: 567, Address: 0x42ac0)
  • VerLanguageNameW (Ordinal: 568, Address: 0x42ad0)
  • VerQueryValueA (Ordinal: 569, Address: 0x42ae0)
  • VerQueryValueW (Ordinal: 570, Address: 0x42af0)
  • WOW32DriverCallback (Ordinal: 571, Address: 0x42b00)
  • WOW32ResolveMultiMediaHandle (Ordinal: 572, Address: 0x42b10)
  • WOWAppExit (Ordinal: 573, Address: 0x42b20)
  • WinHttpAddRequestHeaders (Ordinal: 574, Address: 0x42b30)
  • WinHttpAddRequestHeadersEx (Ordinal: 575, Address: 0x42b40)
  • WinHttpAutoProxySvcMain (Ordinal: 576, Address: 0x42b50)
  • WinHttpCheckPlatform (Ordinal: 577, Address: 0x42b60)
  • WinHttpCloseHandle (Ordinal: 578, Address: 0x42b70)
  • WinHttpConnect (Ordinal: 579, Address: 0x42b80)
  • WinHttpConnectionDeletePolicyEntries (Ordinal: 580, Address: 0x42b90)
  • WinHttpConnectionDeleteProxyInfo (Ordinal: 581, Address: 0x42ba0)
  • WinHttpConnectionFreeNameList (Ordinal: 582, Address: 0x42bb0)
  • WinHttpConnectionFreeProxyInfo (Ordinal: 583, Address: 0x42bc0)
  • WinHttpConnectionFreeProxyList (Ordinal: 584, Address: 0x42bd0)
  • WinHttpConnectionGetNameList (Ordinal: 585, Address: 0x42be0)
  • WinHttpConnectionGetProxyInfo (Ordinal: 586, Address: 0x42bf0)
  • WinHttpConnectionGetProxyList (Ordinal: 587, Address: 0x42c00)
  • WinHttpConnectionOnlyConvert (Ordinal: 588, Address: 0x42c10)
  • WinHttpConnectionOnlyReceive (Ordinal: 589, Address: 0x42c20)
  • WinHttpConnectionOnlySend (Ordinal: 590, Address: 0x42c30)
  • WinHttpConnectionSetPolicyEntries (Ordinal: 591, Address: 0x42c40)
  • WinHttpConnectionSetProxyInfo (Ordinal: 592, Address: 0x42c50)
  • WinHttpConnectionUpdateIfIndexTable (Ordinal: 593, Address: 0x42c60)
  • WinHttpCrackUrl (Ordinal: 594, Address: 0x42c70)
  • WinHttpCreateProxyResolver (Ordinal: 595, Address: 0x42c80)
  • WinHttpCreateUrl (Ordinal: 596, Address: 0x42c90)
  • WinHttpDetectAutoProxyConfigUrl (Ordinal: 597, Address: 0x42ca0)
  • WinHttpFreeProxyResult (Ordinal: 598, Address: 0x42cb0)
  • WinHttpFreeProxyResultEx (Ordinal: 599, Address: 0x42cc0)
  • WinHttpFreeProxySettings (Ordinal: 600, Address: 0x42cd0)
  • WinHttpFreeProxySettingsEx (Ordinal: 601, Address: 0x42ce0)
  • WinHttpFreeQueryConnectionGroupResult (Ordinal: 602, Address: 0x42cf0)
  • WinHttpGetDefaultProxyConfiguration (Ordinal: 603, Address: 0x42d00)
  • WinHttpGetIEProxyConfigForCurrentUser (Ordinal: 604, Address: 0x42d10)
  • WinHttpGetProxyForUrl (Ordinal: 605, Address: 0x42d20)
  • WinHttpGetProxyForUrlEx2 (Ordinal: 606, Address: 0x42d30)
  • WinHttpGetProxyForUrlEx (Ordinal: 607, Address: 0x42d40)
  • WinHttpGetProxyForUrlHvsi (Ordinal: 608, Address: 0x42d50)
  • WinHttpGetProxyResult (Ordinal: 609, Address: 0x42d60)
  • WinHttpGetProxyResultEx (Ordinal: 610, Address: 0x42d70)
  • WinHttpGetProxySettingsEx (Ordinal: 611, Address: 0x42d80)
  • WinHttpGetProxySettingsResultEx (Ordinal: 612, Address: 0x42d90)
  • WinHttpGetProxySettingsVersion (Ordinal: 613, Address: 0x42da0)
  • WinHttpGetTunnelSocket (Ordinal: 614, Address: 0x42db0)
  • WinHttpOpen (Ordinal: 615, Address: 0x42dc0)
  • WinHttpOpenRequest (Ordinal: 616, Address: 0x42dd0)
  • WinHttpPacJsWorkerMain (Ordinal: 617, Address: 0x42de0)
  • WinHttpProbeConnectivity (Ordinal: 618, Address: 0x42df0)
  • WinHttpQueryAuthSchemes (Ordinal: 619, Address: 0x42e00)
  • WinHttpQueryConnectionGroup (Ordinal: 620, Address: 0x42e10)
  • WinHttpQueryDataAvailable (Ordinal: 621, Address: 0x42e20)
  • WinHttpQueryHeaders (Ordinal: 622, Address: 0x42e30)
  • WinHttpQueryHeadersEx (Ordinal: 623, Address: 0x42e40)
  • WinHttpQueryOption (Ordinal: 624, Address: 0x42e50)
  • WinHttpReadData (Ordinal: 625, Address: 0x42e60)
  • WinHttpReadDataEx (Ordinal: 626, Address: 0x42e70)
  • WinHttpReadProxySettings (Ordinal: 627, Address: 0x42e80)
  • WinHttpReadProxySettingsHvsi (Ordinal: 628, Address: 0x42e90)
  • WinHttpReceiveResponse (Ordinal: 629, Address: 0x42ea0)
  • WinHttpRegisterProxyChangeNotification (Ordinal: 630, Address: 0x42eb0)
  • WinHttpResetAutoProxy (Ordinal: 631, Address: 0x42ec0)
  • WinHttpSaveProxyCredentials (Ordinal: 632, Address: 0x42ed0)
  • WinHttpSendRequest (Ordinal: 633, Address: 0x42ee0)
  • WinHttpSetCredentials (Ordinal: 634, Address: 0x42ef0)
  • WinHttpSetDefaultProxyConfiguration (Ordinal: 635, Address: 0x42f00)
  • WinHttpSetOption (Ordinal: 636, Address: 0x42f10)
  • WinHttpSetProxySettingsPerUser (Ordinal: 637, Address: 0x42f20)
  • WinHttpSetSecureLegacyServersAppCompat (Ordinal: 638, Address: 0x42f30)
  • WinHttpSetStatusCallback (Ordinal: 639, Address: 0x42f40)
  • WinHttpSetTimeouts (Ordinal: 640, Address: 0x42f50)
  • WinHttpTimeFromSystemTime (Ordinal: 641, Address: 0x42f60)
  • WinHttpTimeToSystemTime (Ordinal: 642, Address: 0x42f70)
  • WinHttpUnregisterProxyChangeNotification (Ordinal: 643, Address: 0x42f80)
  • WinHttpWebSocketClose (Ordinal: 644, Address: 0x42f90)
  • WinHttpWebSocketCompleteUpgrade (Ordinal: 645, Address: 0x42fa0)
  • WinHttpWebSocketQueryCloseStatus (Ordinal: 646, Address: 0x42fb0)
  • WinHttpWebSocketReceive (Ordinal: 647, Address: 0x42fc0)
  • WinHttpWebSocketSend (Ordinal: 648, Address: 0x42fd0)
  • WinHttpWebSocketShutdown (Ordinal: 649, Address: 0x42fe0)
  • WinHttpWriteData (Ordinal: 650, Address: 0x42ff0)
  • WinHttpWriteProxySettings (Ordinal: 651, Address: 0x43000)
  • XInputCancelGuideButtonWait (Ordinal: 652, Address: 0x43010)
  • XInputEnable (Ordinal: 653, Address: 0x43020)
  • XInputGetAudioDeviceIds (Ordinal: 654, Address: 0x43030)
  • XInputGetBaseBusInformation (Ordinal: 655, Address: 0x43040)
  • XInputGetBatteryInformation (Ordinal: 656, Address: 0x43050)
  • XInputGetCapabilities (Ordinal: 657, Address: 0x43060)
  • XInputGetCapabilitiesEx (Ordinal: 658, Address: 0x43070)
  • XInputGetDSoundAudioDeviceGuids (Ordinal: 659, Address: 0x43080)
  • XInputGetKeystroke (Ordinal: 660, Address: 0x43090)
  • XInputGetState (Ordinal: 661, Address: 0x430a0)
  • XInputGetStateEx (Ordinal: 662, Address: 0x430b0)
  • XInputPowerOffController (Ordinal: 663, Address: 0x430c0)
  • XInputSetState (Ordinal: 664, Address: 0x430d0)
  • XInputWaitForGuideButton (Ordinal: 665, Address: 0x430e0)
  • _GetFileExtensionFromUrl (Ordinal: 666, Address: 0x43170)
  • aux32Message (Ordinal: 667, Address: 0x43180)
  • auxGetDevCapsA (Ordinal: 668, Address: 0x43190)
  • auxGetDevCapsW (Ordinal: 669, Address: 0x431a0)
  • auxGetNumDevs (Ordinal: 670, Address: 0x431b0)
  • auxGetVolume (Ordinal: 671, Address: 0x431c0)
  • auxOutMessage (Ordinal: 672, Address: 0x431d0)
  • auxSetVolume (Ordinal: 673, Address: 0x431e0)
  • joy32Message (Ordinal: 674, Address: 0x431f0)
  • joyConfigChanged (Ordinal: 675, Address: 0x43200)
  • joyGetDevCapsA (Ordinal: 676, Address: 0x43210)
  • joyGetDevCapsW (Ordinal: 677, Address: 0x43220)
  • joyGetNumDevs (Ordinal: 678, Address: 0x43230)
  • joyGetPos (Ordinal: 679, Address: 0x43240)
  • joyGetPosEx (Ordinal: 680, Address: 0x43250)
  • joyGetThreshold (Ordinal: 681, Address: 0x43260)
  • joyReleaseCapture (Ordinal: 682, Address: 0x43270)
  • joySetCapture (Ordinal: 683, Address: 0x43280)
  • joySetThreshold (Ordinal: 684, Address: 0x43290)
  • mci32Message (Ordinal: 685, Address: 0x432a0)
  • mciDriverNotify (Ordinal: 686, Address: 0x432b0)
  • mciDriverYield (Ordinal: 687, Address: 0x432c0)
  • mciExecute (Ordinal: 688, Address: 0x432d0)
  • mciFreeCommandResource (Ordinal: 689, Address: 0x432e0)
  • mciGetCreatorTask (Ordinal: 690, Address: 0x432f0)
  • mciGetDeviceIDA (Ordinal: 691, Address: 0x43300)
  • mciGetDeviceIDFromElementIDA (Ordinal: 692, Address: 0x43310)
  • mciGetDeviceIDFromElementIDW (Ordinal: 693, Address: 0x43320)
  • mciGetDeviceIDW (Ordinal: 694, Address: 0x43330)
  • mciGetDriverData (Ordinal: 695, Address: 0x43340)
  • mciGetErrorStringA (Ordinal: 696, Address: 0x43350)
  • mciGetErrorStringW (Ordinal: 697, Address: 0x43360)
  • mciGetYieldProc (Ordinal: 698, Address: 0x43370)
  • mciLoadCommandResource (Ordinal: 699, Address: 0x43380)
  • mciSendCommandA (Ordinal: 700, Address: 0x43390)
  • mciSendCommandW (Ordinal: 701, Address: 0x433a0)
  • mciSendStringA (Ordinal: 702, Address: 0x433b0)
  • mciSendStringW (Ordinal: 703, Address: 0x433c0)
  • mciSetDriverData (Ordinal: 704, Address: 0x433d0)
  • mciSetYieldProc (Ordinal: 705, Address: 0x433e0)
  • mid32Message (Ordinal: 706, Address: 0x433f0)
  • midiConnect (Ordinal: 707, Address: 0x43400)
  • midiDisconnect (Ordinal: 708, Address: 0x43410)
  • midiInAddBuffer (Ordinal: 709, Address: 0x43420)
  • midiInClose (Ordinal: 710, Address: 0x43430)
  • midiInGetDevCapsA (Ordinal: 711, Address: 0x43440)
  • midiInGetDevCapsW (Ordinal: 712, Address: 0x43450)
  • midiInGetErrorTextA (Ordinal: 713, Address: 0x43460)
  • midiInGetErrorTextW (Ordinal: 714, Address: 0x43470)
  • midiInGetID (Ordinal: 715, Address: 0x43480)
  • midiInGetNumDevs (Ordinal: 716, Address: 0x43490)
  • midiInMessage (Ordinal: 717, Address: 0x434a0)
  • midiInOpen (Ordinal: 718, Address: 0x434b0)
  • midiInPrepareHeader (Ordinal: 719, Address: 0x434c0)
  • midiInReset (Ordinal: 720, Address: 0x434d0)
  • midiInStart (Ordinal: 721, Address: 0x434e0)
  • midiInStop (Ordinal: 722, Address: 0x434f0)
  • midiInUnprepareHeader (Ordinal: 723, Address: 0x43500)
  • midiOutCacheDrumPatches (Ordinal: 724, Address: 0x43510)
  • midiOutCachePatches (Ordinal: 725, Address: 0x43520)
  • midiOutClose (Ordinal: 726, Address: 0x43530)
  • midiOutGetDevCapsA (Ordinal: 727, Address: 0x43540)
  • midiOutGetDevCapsW (Ordinal: 728, Address: 0x43550)
  • midiOutGetErrorTextA (Ordinal: 729, Address: 0x43560)
  • midiOutGetErrorTextW (Ordinal: 730, Address: 0x43570)
  • midiOutGetID (Ordinal: 731, Address: 0x43580)
  • midiOutGetNumDevs (Ordinal: 732, Address: 0x43590)
  • midiOutGetVolume (Ordinal: 733, Address: 0x435a0)
  • midiOutLongMsg (Ordinal: 734, Address: 0x435b0)
  • midiOutMessage (Ordinal: 735, Address: 0x435c0)
  • midiOutOpen (Ordinal: 736, Address: 0x435d0)
  • midiOutPrepareHeader (Ordinal: 737, Address: 0x435e0)
  • midiOutReset (Ordinal: 738, Address: 0x435f0)
  • midiOutSetVolume (Ordinal: 739, Address: 0x43600)
  • midiOutShortMsg (Ordinal: 740, Address: 0x43610)
  • midiOutUnprepareHeader (Ordinal: 741, Address: 0x43620)
  • midiStreamClose (Ordinal: 742, Address: 0x43630)
  • midiStreamOpen (Ordinal: 743, Address: 0x43640)
  • midiStreamOut (Ordinal: 744, Address: 0x43650)
  • midiStreamPause (Ordinal: 745, Address: 0x43660)
  • midiStreamPosition (Ordinal: 746, Address: 0x43670)
  • midiStreamProperty (Ordinal: 747, Address: 0x43680)
  • midiStreamRestart (Ordinal: 748, Address: 0x43690)
  • midiStreamStop (Ordinal: 749, Address: 0x436a0)
  • mixerClose (Ordinal: 750, Address: 0x436b0)
  • mixerGetControlDetailsA (Ordinal: 751, Address: 0x436c0)
  • mixerGetControlDetailsW (Ordinal: 752, Address: 0x436d0)
  • mixerGetDevCapsA (Ordinal: 753, Address: 0x436e0)
  • mixerGetDevCapsW (Ordinal: 754, Address: 0x436f0)
  • mixerGetID (Ordinal: 755, Address: 0x43700)
  • mixerGetLineControlsA (Ordinal: 756, Address: 0x43710)
  • mixerGetLineControlsW (Ordinal: 757, Address: 0x43720)
  • mixerGetLineInfoA (Ordinal: 758, Address: 0x43730)
  • mixerGetLineInfoW (Ordinal: 759, Address: 0x43740)
  • mixerGetNumDevs (Ordinal: 760, Address: 0x43750)
  • mixerMessage (Ordinal: 761, Address: 0x43760)
  • mixerOpen (Ordinal: 762, Address: 0x43770)
  • mixerSetControlDetails (Ordinal: 763, Address: 0x43780)
  • mmDrvInstall (Ordinal: 764, Address: 0x43790)
  • mmGetCurrentTask (Ordinal: 765, Address: 0x437a0)
  • mmTaskBlock (Ordinal: 766, Address: 0x437b0)
  • mmTaskCreate (Ordinal: 767, Address: 0x437c0)
  • mmTaskSignal (Ordinal: 768, Address: 0x437d0)
  • mmTaskYield (Ordinal: 769, Address: 0x437e0)
  • mmioAdvance (Ordinal: 770, Address: 0x437f0)
  • mmioAscend (Ordinal: 771, Address: 0x43800)
  • mmioClose (Ordinal: 772, Address: 0x43810)
  • mmioCreateChunk (Ordinal: 773, Address: 0x43820)
  • mmioDescend (Ordinal: 774, Address: 0x43830)
  • mmioFlush (Ordinal: 775, Address: 0x43840)
  • mmioGetInfo (Ordinal: 776, Address: 0x43850)
  • mmioInstallIOProcA (Ordinal: 777, Address: 0x43860)
  • mmioInstallIOProcW (Ordinal: 778, Address: 0x43870)
  • mmioOpenA (Ordinal: 779, Address: 0x43880)
  • mmioOpenW (Ordinal: 780, Address: 0x43890)
  • mmioRead (Ordinal: 781, Address: 0x438a0)
  • mmioRenameA (Ordinal: 782, Address: 0x438b0)
  • mmioRenameW (Ordinal: 783, Address: 0x438c0)
  • mmioSeek (Ordinal: 784, Address: 0x438d0)
  • mmioSendMessage (Ordinal: 785, Address: 0x438e0)
  • mmioSetBuffer (Ordinal: 786, Address: 0x438f0)
  • mmioSetInfo (Ordinal: 787, Address: 0x43900)
  • mmioStringToFOURCCA (Ordinal: 788, Address: 0x43910)
  • mmioStringToFOURCCW (Ordinal: 789, Address: 0x43920)
  • mmioWrite (Ordinal: 790, Address: 0x43930)
  • mmsystemGetVersion (Ordinal: 791, Address: 0x43940)
  • mod32Message (Ordinal: 792, Address: 0x43950)
  • mxd32Message (Ordinal: 793, Address: 0x43960)
  • sndPlaySoundA (Ordinal: 794, Address: 0x43970)
  • sndPlaySoundW (Ordinal: 795, Address: 0x43980)
  • tid32Message (Ordinal: 796, Address: 0x43990)
  • timeBeginPeriod (Ordinal: 797, Address: 0x439a0)
  • timeEndPeriod (Ordinal: 798, Address: 0x439b0)
  • timeGetDevCaps (Ordinal: 799, Address: 0x439c0)
  • timeGetSystemTime (Ordinal: 800, Address: 0x439d0)
  • timeGetTime (Ordinal: 801, Address: 0x439e0)
  • timeKillEvent (Ordinal: 802, Address: 0x439f0)
  • timeSetEvent (Ordinal: 803, Address: 0x43a00)
  • waveInAddBuffer (Ordinal: 804, Address: 0x43a10)
  • waveInClose (Ordinal: 805, Address: 0x43a20)
  • waveInGetDevCapsA (Ordinal: 806, Address: 0x43a30)
  • waveInGetDevCapsW (Ordinal: 807, Address: 0x43a40)
  • waveInGetErrorTextA (Ordinal: 808, Address: 0x43a50)
  • waveInGetErrorTextW (Ordinal: 809, Address: 0x43a60)
  • waveInGetID (Ordinal: 810, Address: 0x43a70)
  • waveInGetNumDevs (Ordinal: 811, Address: 0x43a80)
  • waveInGetPosition (Ordinal: 812, Address: 0x43a90)
  • waveInMessage (Ordinal: 813, Address: 0x43aa0)
  • waveInOpen (Ordinal: 814, Address: 0x43ab0)
  • waveInPrepareHeader (Ordinal: 815, Address: 0x43ac0)
  • waveInReset (Ordinal: 816, Address: 0x43ad0)
  • waveInStart (Ordinal: 817, Address: 0x43ae0)
  • waveInStop (Ordinal: 818, Address: 0x43af0)
  • waveInUnprepareHeader (Ordinal: 819, Address: 0x43b00)
  • waveOutBreakLoop (Ordinal: 820, Address: 0x43b10)
  • waveOutClose (Ordinal: 821, Address: 0x43b20)
  • waveOutGetDevCapsA (Ordinal: 822, Address: 0x43b30)
  • waveOutGetDevCapsW (Ordinal: 823, Address: 0x43b40)
  • waveOutGetErrorTextA (Ordinal: 824, Address: 0x43b50)
  • waveOutGetErrorTextW (Ordinal: 825, Address: 0x43b60)
  • waveOutGetID (Ordinal: 826, Address: 0x43b70)
  • waveOutGetNumDevs (Ordinal: 827, Address: 0x43b80)
  • waveOutGetPitch (Ordinal: 828, Address: 0x43b90)
  • waveOutGetPlaybackRate (Ordinal: 829, Address: 0x43ba0)
  • waveOutGetPosition (Ordinal: 830, Address: 0x43bb0)
  • waveOutGetVolume (Ordinal: 831, Address: 0x43bc0)
  • waveOutMessage (Ordinal: 832, Address: 0x43bd0)
  • waveOutOpen (Ordinal: 833, Address: 0x43be0)
  • waveOutPause (Ordinal: 834, Address: 0x43bf0)
  • waveOutPrepareHeader (Ordinal: 835, Address: 0x43c00)
  • waveOutReset (Ordinal: 836, Address: 0x43c10)
  • waveOutRestart (Ordinal: 837, Address: 0x43c20)
  • waveOutSetPitch (Ordinal: 838, Address: 0x43c30)
  • waveOutSetPlaybackRate (Ordinal: 839, Address: 0x43c40)
  • waveOutSetVolume (Ordinal: 840, Address: 0x43c50)
  • waveOutUnprepareHeader (Ordinal: 841, Address: 0x43c60)
  • waveOutWrite (Ordinal: 842, Address: 0x43c70)
  • wid32Message (Ordinal: 843, Address: 0x43c80)
  • wod32Message (Ordinal: 844, Address: 0x43c90)

Imported DLLs & Functions

bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x18009c5d8)
  • BCryptCreateHash (Address: 0x18009c5b0)
  • BCryptDecrypt (Address: 0x18009c5c0)
  • BCryptDestroyHash (Address: 0x18009c5f8)
  • BCryptDestroyKey (Address: 0x18009c5b8)
  • BCryptFinishHash (Address: 0x18009c5c8)
  • BCryptGenerateSymmetricKey (Address: 0x18009c5d0)
  • BCryptGenRandom (Address: 0x18009c600)
  • BCryptGetProperty (Address: 0x18009c5e8)
  • BCryptHashData (Address: 0x18009c5a8)
  • BCryptOpenAlgorithmProvider (Address: 0x18009c5f0)
  • BCryptSetProperty (Address: 0x18009c5e0)
dbghelp.dll
  • MiniDumpWriteDump (Address: 0x18009c610)
  • StackWalk64 (Address: 0x18009c628)
  • SymCleanup (Address: 0x18009c638)
  • SymFromAddr (Address: 0x18009c618)
  • SymInitialize (Address: 0x18009c620)
  • SymSetOptions (Address: 0x18009c630)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x18009c1d8)
  • AcquireSRWLockShared (Address: 0x18009c470)
  • ActivateActCtx (Address: 0x18009c2c8)
  • AreFileApisANSI (Address: 0x18009c480)
  • CloseHandle (Address: 0x18009c078)
  • CompareStringW (Address: 0x18009c3a8)
  • CreateActCtxW (Address: 0x18009c2c0)
  • CreateDirectoryW (Address: 0x18009c320)
  • CreateEventA (Address: 0x18009c208)
  • CreateEventW (Address: 0x18009c210)
  • CreateFileA (Address: 0x18009c150)
  • CreateFileW (Address: 0x18009c158)
  • CreateMutexW (Address: 0x18009c1f8)
  • CreateThread (Address: 0x18009c308)
  • CreateToolhelp32Snapshot (Address: 0x18009c110)
  • DeactivateActCtx (Address: 0x18009c2d0)
  • DecodePointer (Address: 0x18009c4c8)
  • DeleteCriticalSection (Address: 0x18009c4b8)
  • DeleteFileW (Address: 0x18009c328)
  • EncodePointer (Address: 0x18009c4c0)
  • EnterCriticalSection (Address: 0x18009c4a0)
  • EnumSystemLocalesW (Address: 0x18009c380)
  • ExitProcess (Address: 0x18009c218)
  • FindActCtxSectionStringW (Address: 0x18009c2d8)
  • FindClose (Address: 0x18009c160)
  • FindFirstFileA (Address: 0x18009c168)
  • FindFirstFileExA (Address: 0x18009c178)
  • FindFirstFileExW (Address: 0x18009c180)
  • FindFirstFileW (Address: 0x18009c170)
  • FindNextFileA (Address: 0x18009c188)
  • FindNextFileW (Address: 0x18009c190)
  • FlsAlloc (Address: 0x18009c3e8)
  • FlsFree (Address: 0x18009c3d0)
  • FlsGetValue (Address: 0x18009c3e0)
  • FlsSetValue (Address: 0x18009c3d8)
  • FlushFileBuffers (Address: 0x18009c2e8)
  • FlushInstructionCache (Address: 0x18009c0f0)
  • FormatMessageA (Address: 0x18009c448)
  • FreeEnvironmentStringsW (Address: 0x18009c030)
  • FreeLibrary (Address: 0x18009c248)
  • GetACP (Address: 0x18009c048)
  • GetCommandLineA (Address: 0x18009c130)
  • GetCommandLineW (Address: 0x18009c138)
  • GetConsoleMode (Address: 0x18009c370)
  • GetConsoleOutputCP (Address: 0x18009c378)
  • GetCPInfo (Address: 0x18009c4d8)
  • GetCurrentDirectoryW (Address: 0x18009c148)
  • GetCurrentProcess (Address: 0x18009c0b0)
  • GetCurrentProcessId (Address: 0x18009c0b8)
  • GetCurrentThread (Address: 0x18009c220)
  • GetCurrentThreadId (Address: 0x18009c0c0)
  • GetDateFormatW (Address: 0x18009c3b8)
  • GetEnvironmentStringsW (Address: 0x18009c038)
  • GetEnvironmentVariableW (Address: 0x18009c318)
  • GetFileAttributesA (Address: 0x18009c198)
  • GetFileAttributesExA (Address: 0x18009c1a8)
  • GetFileAttributesExW (Address: 0x18009c1b0)
  • GetFileAttributesW (Address: 0x18009c1a0)
  • GetFileInformationByHandleEx (Address: 0x18009c488)
  • GetFileSizeEx (Address: 0x18009c2f0)
  • GetFileType (Address: 0x18009c350)
  • GetFullPathNameW (Address: 0x18009c478)
  • GetLastError (Address: 0x18009c080)
  • GetLocaleInfoEx (Address: 0x18009c450)
  • GetLocaleInfoW (Address: 0x18009c398)
  • GetModuleFileNameA (Address: 0x18009c250)
  • GetModuleFileNameW (Address: 0x18009c258)
  • GetModuleHandleA (Address: 0x18009c260)
  • GetModuleHandleExA (Address: 0x18009c268)
  • GetModuleHandleExW (Address: 0x18009c270)
  • GetModuleHandleW (Address: 0x18009c100)
  • GetOEMCP (Address: 0x18009c040)
  • GetPrivateProfileIntW (Address: 0x18009c2a8)
  • GetPrivateProfileStringW (Address: 0x18009c2b0)
  • GetProcAddress (Address: 0x18009c108)
  • GetProcessHeap (Address: 0x18009c020)
  • GetShortPathNameA (Address: 0x18009c298)
  • GetStartupInfoA (Address: 0x18009c2a0)
  • GetStartupInfoW (Address: 0x18009c228)
  • GetStdHandle (Address: 0x18009c360)
  • GetStringTypeW (Address: 0x18009c498)
  • GetSystemInfo (Address: 0x18009c058)
  • GetSystemTime (Address: 0x18009c230)
  • GetSystemTimeAsFileTime (Address: 0x18009c238)
  • GetThreadContext (Address: 0x18009c0e0)
  • GetTimeFormatW (Address: 0x18009c3b0)
  • GetTimeZoneInformation (Address: 0x18009c3f0)
  • GetUserDefaultLCID (Address: 0x18009c388)
  • HeapAlloc (Address: 0x18009c090)
  • HeapCreate (Address: 0x18009c088)
  • HeapFree (Address: 0x18009c0a0)
  • HeapReAlloc (Address: 0x18009c098)
  • HeapSize (Address: 0x18009c010)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18009c500)
  • InitializeCriticalSectionEx (Address: 0x18009c4b0)
  • InitializeSListHead (Address: 0x18009c438)
  • InterlockedFlushSList (Address: 0x18009c4f8)
  • IsDebuggerPresent (Address: 0x18009c428)
  • IsProcessorFeaturePresent (Address: 0x18009c420)
  • IsValidCodePage (Address: 0x18009c050)
  • IsValidLocale (Address: 0x18009c390)
  • K32GetModuleInformation (Address: 0x18009c310)
  • LCMapStringEx (Address: 0x18009c4d0)
  • LCMapStringW (Address: 0x18009c3a0)
  • LeaveCriticalSection (Address: 0x18009c4a8)
  • LoadLibraryA (Address: 0x18009c288)
  • LoadLibraryExA (Address: 0x18009c278)
  • LoadLibraryExW (Address: 0x18009c280)
  • LoadLibraryW (Address: 0x18009c290)
  • LocalFree (Address: 0x18009c440)
  • MoveFileExW (Address: 0x18009c348)
  • MultiByteToWideChar (Address: 0x18009c128)
  • OpenMutexW (Address: 0x18009c200)
  • OpenProcess (Address: 0x18009c340)
  • OpenThread (Address: 0x18009c0c8)
  • OutputDebugStringA (Address: 0x18009c1c0)
  • QueryActCtxW (Address: 0x18009c2e0)
  • QueryPerformanceCounter (Address: 0x18009c430)
  • QueueUserWorkItem (Address: 0x18009c240)
  • RaiseException (Address: 0x18009c4f0)
  • ReadConsoleW (Address: 0x18009c368)
  • ReadFile (Address: 0x18009c2f8)
  • ReleaseMutex (Address: 0x18009c1f0)
  • ReleaseSRWLockExclusive (Address: 0x18009c330)
  • ReleaseSRWLockShared (Address: 0x18009c468)
  • ResetEvent (Address: 0x18009c1e8)
  • ResumeThread (Address: 0x18009c0d8)
  • RtlCaptureContext (Address: 0x18009c3f8)
  • RtlLookupFunctionEntry (Address: 0x18009c400)
  • RtlPcToFileHeader (Address: 0x18009c4e8)
  • RtlUnwind (Address: 0x18009c000)
  • RtlUnwindEx (Address: 0x18009c4e0)
  • RtlVirtualUnwind (Address: 0x18009c408)
  • SetCurrentDirectoryW (Address: 0x18009c140)
  • SetEndOfFile (Address: 0x18009c018)
  • SetEnvironmentVariableW (Address: 0x18009c028)
  • SetEvent (Address: 0x18009c1e0)
  • SetFilePointerEx (Address: 0x18009c300)
  • SetLastError (Address: 0x18009c1d0)
  • SetStdHandle (Address: 0x18009c358)
  • SetThreadContext (Address: 0x18009c0e8)
  • SetUnhandledExceptionFilter (Address: 0x18009c1c8)
  • Sleep (Address: 0x18009c0a8)
  • SuspendThread (Address: 0x18009c0d0)
  • SwitchToThread (Address: 0x18009c458)
  • SystemTimeToFileTime (Address: 0x18009c2b8)
  • TerminateProcess (Address: 0x18009c418)
  • Thread32First (Address: 0x18009c118)
  • Thread32Next (Address: 0x18009c120)
  • TlsAlloc (Address: 0x18009c508)
  • TlsFree (Address: 0x18009c3c0)
  • TlsGetValue (Address: 0x18009c510)
  • TlsSetValue (Address: 0x18009c3c8)
  • TryAcquireSRWLockExclusive (Address: 0x18009c460)
  • UnhandledExceptionFilter (Address: 0x18009c410)
  • VirtualAlloc (Address: 0x18009c060)
  • VirtualFree (Address: 0x18009c068)
  • VirtualProtect (Address: 0x18009c0f8)
  • VirtualQuery (Address: 0x18009c070)
  • WaitForSingleObject (Address: 0x18009c338)
  • WideCharToMultiByte (Address: 0x18009c490)
  • WriteConsoleW (Address: 0x18009c008)
  • WriteFile (Address: 0x18009c1b8)
ole32.dll
  • CoCreateInstance (Address: 0x18009c648)
  • CoTaskMemFree (Address: 0x18009c650)
SHELL32.dll
  • ExtractIconW (Address: 0x18009c528)
  • ShellExecuteW (Address: 0x18009c520)
  • SHGetKnownFolderPath (Address: 0x18009c530)
USER32.dll
  • CallNextHookEx (Address: 0x18009c578)
  • DestroyIcon (Address: 0x18009c580)
  • FindWindowW (Address: 0x18009c560)
  • KillTimer (Address: 0x18009c548)
  • LoadImageW (Address: 0x18009c590)
  • MessageBoxW (Address: 0x18009c558)
  • SendMessageW (Address: 0x18009c598)
  • SetForegroundWindow (Address: 0x18009c550)
  • SetTimer (Address: 0x18009c540)
  • SetWindowsHookExW (Address: 0x18009c568)
  • ShowCursor (Address: 0x18009c588)
  • UnhookWindowsHookEx (Address: 0x18009c570)