usbmon.dll

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800c6538)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromProgID (Address: 0x1800c6550)
CoCreateInstance (Address: 0x1800c6568)
CoGetClassObject (Address: 0x1800c6570)
CoTaskMemAlloc (Address: 0x1800c6588)
CoTaskMemFree (Address: 0x1800c6560)
CoTaskMemRealloc (Address: 0x1800c6558)
CoWaitForMultipleHandles (Address: 0x1800c6578)
CreateStreamOnHGlobal (Address: 0x1800c6548)
IIDFromString (Address: 0x1800c6580)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800c6598)
IsDebuggerPresent (Address: 0x1800c65a0)
OutputDebugStringA (Address: 0x1800c65a8)
OutputDebugStringW (Address: 0x1800c65b0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800c65c0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800c65d0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800c6608)
RaiseException (Address: 0x1800c65f0)
SetErrorMode (Address: 0x1800c65e0)
SetLastError (Address: 0x1800c65e8)
SetUnhandledExceptionFilter (Address: 0x1800c65f8)
UnhandledExceptionFilter (Address: 0x1800c6600)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800c6658)
GetFileAttributesW (Address: 0x1800c6618)
GetFileSize (Address: 0x1800c6648)
GetFileSizeEx (Address: 0x1800c6630)
GetFinalPathNameByHandleW (Address: 0x1800c6650)
GetTempFileNameW (Address: 0x1800c6640)
ReadFile (Address: 0x1800c6620)
SetFilePointerEx (Address: 0x1800c6628)
WriteFile (Address: 0x1800c6638)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1800c6668)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800c6678)
DuplicateHandle (Address: 0x1800c6680)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800c6698)
HeapAlloc (Address: 0x1800c66a0)
HeapFree (Address: 0x1800c6690)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800c66b0)
LocalFree (Address: 0x1800c66b8)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x1800c66d8)
DeviceIoControl (Address: 0x1800c66c8)
GetOverlappedResult (Address: 0x1800c66d0)

api-ms-win-core-io-l1-1-1.dll

CancelIo (Address: 0x1800c66e8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800c6720)
FindResourceExW (Address: 0x1800c6718)
FreeLibrary (Address: 0x1800c6708)
GetModuleFileNameA (Address: 0x1800c6738)
GetModuleFileNameW (Address: 0x1800c6740)
GetModuleHandleExW (Address: 0x1800c6748)
GetModuleHandleW (Address: 0x1800c6730)
GetProcAddress (Address: 0x1800c6700)
LoadLibraryExW (Address: 0x1800c66f8)
LoadResource (Address: 0x1800c6710)
LockResource (Address: 0x1800c6750)
SizeofResource (Address: 0x1800c6728)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1800c6760)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800c6770)
GetUserDefaultLocaleName (Address: 0x1800c6778)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800c6798)
MapViewOfFile (Address: 0x1800c6788)
UnmapViewOfFile (Address: 0x1800c6790)

api-ms-win-core-misc-l1-1-0.dll

lstrcmpiW (Address: 0x1800c67a8)
lstrcmpW (Address: 0x1800c67b0)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileSectionW (Address: 0x1800c67c8)
GetPrivateProfileStringW (Address: 0x1800c67c0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1800c67f8)
ExitProcess (Address: 0x1800c67f0)
GetCurrentProcess (Address: 0x1800c6830)
GetCurrentProcessId (Address: 0x1800c6828)
GetCurrentThread (Address: 0x1800c67e0)
GetCurrentThreadId (Address: 0x1800c6808)
OpenProcessToken (Address: 0x1800c6810)
OpenThreadToken (Address: 0x1800c6820)
ProcessIdToSessionId (Address: 0x1800c6818)
SetThreadToken (Address: 0x1800c67e8)
TerminateProcess (Address: 0x1800c67d8)
TerminateThread (Address: 0x1800c6800)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800c6840)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800c6878)
RegCreateKeyExW (Address: 0x1800c6880)
RegDeleteKeyExW (Address: 0x1800c6860)
RegDeleteValueW (Address: 0x1800c6890)
RegEnumKeyExW (Address: 0x1800c68a0)
RegEnumValueW (Address: 0x1800c6888)
RegGetValueW (Address: 0x1800c6850)
RegOpenKeyExW (Address: 0x1800c6868)
RegQueryInfoKeyW (Address: 0x1800c6870)
RegQueryValueExW (Address: 0x1800c6898)
RegSetValueExW (Address: 0x1800c6858)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x1800c68b0)
RegSetKeyValueW (Address: 0x1800c68b8)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeW (Address: 0x1800c68d0)
MultiByteToWideChar (Address: 0x1800c68c8)
WideCharToMultiByte (Address: 0x1800c68d8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800c6980)
AcquireSRWLockShared (Address: 0x1800c6940)
CreateEventExW (Address: 0x1800c6920)
CreateEventW (Address: 0x1800c6998)
CreateMutexExW (Address: 0x1800c6930)
CreateSemaphoreExW (Address: 0x1800c6970)
DeleteCriticalSection (Address: 0x1800c6910)
EnterCriticalSection (Address: 0x1800c6938)
InitializeCriticalSection (Address: 0x1800c68f8)
InitializeCriticalSectionAndSpinCount (Address: 0x1800c68e8)
InitializeCriticalSectionEx (Address: 0x1800c68f0)
LeaveCriticalSection (Address: 0x1800c6900)
OpenSemaphoreW (Address: 0x1800c6990)
ReleaseMutex (Address: 0x1800c6918)
ReleaseSemaphore (Address: 0x1800c6928)
ReleaseSRWLockExclusive (Address: 0x1800c6950)
ReleaseSRWLockShared (Address: 0x1800c6978)
ResetEvent (Address: 0x1800c6958)
SetEvent (Address: 0x1800c6960)
TryEnterCriticalSection (Address: 0x1800c6948)
WaitForMultipleObjectsEx (Address: 0x1800c6968)
WaitForSingleObject (Address: 0x1800c6908)
WaitForSingleObjectEx (Address: 0x1800c6988)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800c69c0)
InitOnceComplete (Address: 0x1800c69a8)
Sleep (Address: 0x1800c69b0)
SleepConditionVariableSRW (Address: 0x1800c69b8)
WakeAllConditionVariable (Address: 0x1800c69c8)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x1800c69e0)
WaitForMultipleObjects (Address: 0x1800c69d8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800c6a00)
GetTickCount (Address: 0x1800c69f0)
GetTickCount64 (Address: 0x1800c69f8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800c6a30)
CreateThreadpoolTimer (Address: 0x1800c6a18)
IsThreadpoolTimerSet (Address: 0x1800c6a10)
SetThreadpoolTimer (Address: 0x1800c6a20)
WaitForThreadpoolTimerCallbacks (Address: 0x1800c6a28)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800c6a40)
EncodePointer (Address: 0x1800c6a48)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x1800c6a58)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1800c6a68)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800c6a88)
WindowsCreateStringReference (Address: 0x1800c6a80)
WindowsDeleteString (Address: 0x1800c6a78)
WindowsGetStringRawBuffer (Address: 0x1800c6a90)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1800c6ab8)
GetTraceEnableLevel (Address: 0x1800c6ac0)
GetTraceLoggerHandle (Address: 0x1800c6ab0)
RegisterTraceGuidsW (Address: 0x1800c6aa0)
TraceMessage (Address: 0x1800c6aa8)
UnregisterTraceGuids (Address: 0x1800c6ac8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800c6ae8)
EventEnabled (Address: 0x1800c6b08)
EventRegister (Address: 0x1800c6af8)
EventSetInformation (Address: 0x1800c6ad8)
EventUnregister (Address: 0x1800c6b00)
EventWrite (Address: 0x1800c6ae0)
EventWriteTransfer (Address: 0x1800c6af0)

api-ms-win-eventlog-legacy-l1-1-0.dll

DeregisterEventSource (Address: 0x1800c6b18)
RegisterEventSourceW (Address: 0x1800c6b20)
ReportEventW (Address: 0x1800c6b28)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x1800c6b38)
DuplicateTokenEx (Address: 0x1800c6b70)
EqualSid (Address: 0x1800c6b48)
GetTokenInformation (Address: 0x1800c6b58)
ImpersonateLoggedOnUser (Address: 0x1800c6b50)
IsWellKnownSid (Address: 0x1800c6b40)
RevertToSelf (Address: 0x1800c6b68)
SetTokenInformation (Address: 0x1800c6b60)

api-ms-win-security-provider-l1-1-0.dll

SetSecurityInfo (Address: 0x1800c6b80)

KERNELBASE.dll

GetIsEdpEnabled (Address: 0x1800c6450)

msvcrt.dll

___lc_codepage_func (Address: 0x1800c6ba8)
___lc_collate_cp_func (Address: 0x1800c6d00)
___lc_handle_func (Address: 0x1800c6bb0)
___mb_cur_max_func (Address: 0x1800c6b98)
__C_specific_handler (Address: 0x1800c6df0)
__crtCompareStringA (Address: 0x1800c6c18)
__crtLCMapStringA (Address: 0x1800c6c38)
__crtLCMapStringW (Address: 0x1800c6c30)
__CxxFrameHandler3 (Address: 0x1800c6e28)
__dllonexit (Address: 0x1800c6d40)
__pctype_func (Address: 0x1800c6c60)
__uncaught_exception (Address: 0x1800c6cd8)
_amsg_exit (Address: 0x1800c6dd8)
_callnewh (Address: 0x1800c6d70)
_CxxThrowException (Address: 0x1800c6d18)
_errno (Address: 0x1800c6cb0)
_get_errno (Address: 0x1800c6e10)
_initterm (Address: 0x1800c6dc0)
_ismbblead (Address: 0x1800c6b90)
_lock (Address: 0x1800c6cf0)
_onexit (Address: 0x1800c6d38)
_purecall (Address: 0x1800c6da0)
_set_errno (Address: 0x1800c6e48)
_stricmp (Address: 0x1800c6cc0)
_unlock (Address: 0x1800c6ce8)
_vsnprintf (Address: 0x1800c6bf0)
_vsnprintf_s (Address: 0x1800c6d80)
_vsnwprintf (Address: 0x1800c6db8)
_wcsdup (Address: 0x1800c6bd0)
_wcsicmp (Address: 0x1800c6da8)
_wcsnicmp (Address: 0x1800c6d50)
_wsetlocale (Address: 0x1800c6c40)
_wtof (Address: 0x1800c6be8)
_wtoi (Address: 0x1800c6e20)
_wtol (Address: 0x1800c6d20)
_XcptFilter (Address: 0x1800c6de8)
??_V@YAXPEAX@Z (Address: 0x1800c6de0)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800c6c10)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800c6c20)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800c6c80)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800c6d68)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800c6d88)
??0exception@@QEAA@XZ (Address: 0x1800c6d90)
??1bad_cast@@UEAA@XZ (Address: 0x1800c6c28)
??1exception@@UEAA@XZ (Address: 0x1800c6d98)
??1type_info@@UEAA@XZ (Address: 0x1800c6d30)
??3@YAXPEAX@Z (Address: 0x1800c6dc8)
??8type_info@@QEBAHAEBV0@@Z (Address: 0x1800c6bd8)
?terminate@@YAXXZ (Address: 0x1800c6d48)
?what@exception@@UEBAPEBDXZ (Address: 0x1800c6c78)
abort (Address: 0x1800c6c48)
calloc (Address: 0x1800c6dd0)
free (Address: 0x1800c6d58)
isdigit (Address: 0x1800c6cf8)
islower (Address: 0x1800c6bc8)
isupper (Address: 0x1800c6c00)
iswspace (Address: 0x1800c6c70)
localeconv (Address: 0x1800c6c98)
malloc (Address: 0x1800c6c90)
memchr (Address: 0x1800c6e40)
memcmp (Address: 0x1800c6ba0)
memcpy (Address: 0x1800c6d10)
memcpy_s (Address: 0x1800c6db0)
memmove (Address: 0x1800c6d08)
memmove_s (Address: 0x1800c6cc8)
memset (Address: 0x1800c6c50)
realloc (Address: 0x1800c6bf8)
setlocale (Address: 0x1800c6ce0)
sprintf_s (Address: 0x1800c6d60)
strchr (Address: 0x1800c6cd0)
strcmp (Address: 0x1800c6d28)
strcspn (Address: 0x1800c6bb8)
strstr (Address: 0x1800c6e38)
strtol (Address: 0x1800c6cb8)
strtoul (Address: 0x1800c6bc0)
swprintf_s (Address: 0x1800c6ca0)
tolower (Address: 0x1800c6be0)
toupper (Address: 0x1800c6df8)
towlower (Address: 0x1800c6c08)
wcschr (Address: 0x1800c6d78)
wcscmp (Address: 0x1800c6e50)
wcsncmp (Address: 0x1800c6ca8)
wcsncpy_s (Address: 0x1800c6c88)
wcsnlen (Address: 0x1800c6e00)
wcsrchr (Address: 0x1800c6e18)
wcsstr (Address: 0x1800c6c58)
wcstod (Address: 0x1800c6e08)
wcstok_s (Address: 0x1800c6c68)
wcstol (Address: 0x1800c6e30)

ntdll.dll

EtwTraceMessage (Address: 0x1800c6ea0)
NtClose (Address: 0x1800c6fb8)
NtOpenProcessToken (Address: 0x1800c6e60)
NtOpenThreadToken (Address: 0x1800c6e70)
NtSetInformationThread (Address: 0x1800c6e68)
NtSetInformationToken (Address: 0x1800c6e90)
RtlAllocateHeap (Address: 0x1800c6e98)
RtlCaptureContext (Address: 0x1800c6ec0)
RtlClearBit (Address: 0x1800c6ee0)
RtlFindClearBits (Address: 0x1800c6ef0)
RtlFreeHeap (Address: 0x1800c6ea8)
RtlGetDeviceFamilyInfoEnum (Address: 0x1800c6e78)
RtlInitializeBitMap (Address: 0x1800c6ed8)
RtlInitUnicodeString (Address: 0x1800c6e88)
RtlLookupFunctionEntry (Address: 0x1800c6eb8)
RtlNtStatusToDosError (Address: 0x1800c6e80)
RtlSetBit (Address: 0x1800c6ee8)
RtlSetBits (Address: 0x1800c6ed0)
RtlTestBit (Address: 0x1800c6ec8)
RtlVirtualUnwind (Address: 0x1800c6eb0)
TpAllocAlpcCompletion (Address: 0x1800c6f50)
TpAllocIoCompletion (Address: 0x1800c6f40)
TpAllocPool (Address: 0x1800c6fb0)
TpAllocTimer (Address: 0x1800c6f30)
TpAllocWait (Address: 0x1800c6f28)
TpAllocWork (Address: 0x1800c6f18)
TpCallbackMayRunLong (Address: 0x1800c6f00)
TpPostWork (Address: 0x1800c6f20)
TpReleaseAlpcCompletion (Address: 0x1800c6fa0)
TpReleaseIoCompletion (Address: 0x1800c6f90)
TpReleasePool (Address: 0x1800c6ef8)
TpReleaseTimer (Address: 0x1800c6f80)
TpReleaseWait (Address: 0x1800c6f70)
TpReleaseWork (Address: 0x1800c6f60)
TpSetPoolMaxThreads (Address: 0x1800c6fa8)
TpSetTimer (Address: 0x1800c6f38)
TpSetWait (Address: 0x1800c6f08)
TpSimpleTryPost (Address: 0x1800c6f10)
TpStartAsyncIoOperation (Address: 0x1800c6f48)
TpWaitForAlpcCompletion (Address: 0x1800c6f98)
TpWaitForIoCompletion (Address: 0x1800c6f88)
TpWaitForTimer (Address: 0x1800c6f78)
TpWaitForWait (Address: 0x1800c6f68)
TpWaitForWork (Address: 0x1800c6f58)

SPOOLSS.DLL

AllocSplStr (Address: 0x1800c64a8)
ClosePrinter (Address: 0x1800c6510)
DllAllocSplMem (Address: 0x1800c6518)
DllFreeSplMem (Address: 0x1800c6468)
DllFreeSplStr (Address: 0x1800c64b0)
EnumPrintersW (Address: 0x1800c6500)
FreePrintPropertyValue (Address: 0x1800c64e0)
GetJobNamedPropertyValue (Address: 0x1800c64e8)
GetJobW (Address: 0x1800c64c0)
GetPrinterDataW (Address: 0x1800c6460)
GetPrinterDriverW (Address: 0x1800c64b8)
GetPrinterW (Address: 0x1800c6498)
ImpersonatePrinterClient (Address: 0x1800c64f0)
OpenPrinterW (Address: 0x1800c64d0)
RevertToPrinterSelf (Address: 0x1800c6508)
RouterAllocBidiMem (Address: 0x1800c6478)
RouterAllocBidiResponseContainer (Address: 0x1800c6480)
RouterCreatePrintAsyncNotificationChannel (Address: 0x1800c64f8)
RouterFreeBidiMem (Address: 0x1800c6488)
RouterFreeBidiResponseContainer (Address: 0x1800c6490)
SetJobNamedProperty (Address: 0x1800c64a0)
SetJobW (Address: 0x1800c64c8)
SetPortW (Address: 0x1800c6470)
SetPrinterW (Address: 0x1800c64d8)

SspiCli.dll

GetUserNameExW (Address: 0x1800c6528)

Exported Functions

Imported DLLs & Functions