uwfcfgmgmt.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: ec0217e00c59c8034c59d502e7a7deb5

File Size: 184.5 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 6

Exported Functions

  • ??0CDevice@@QEAA@XZ (Ordinal: 1, Address: 0x14f80)
  • ??0CUwfConfiguration@@QEAA@XZ (Ordinal: 2, Address: 0xc9e0)
  • ??0CUwfManagement@@QEAA@XZ (Ordinal: 3, Address: 0x16ca0)
  • ??0CUwfOverlayDevice@@QEAA@XZ (Ordinal: 4, Address: 0x33b0)
  • ??0CUwfRegDevice@@QEAA@XZ (Ordinal: 5, Address: 0x15360)
  • ??0CUwfRegKey@@QEAA@XZ (Ordinal: 6, Address: 0xef70)
  • ??0CUwfStaticConfiguration@@QEAA@XZ (Ordinal: 7, Address: 0x8610)
  • ??0CUwfStaticVolumeConfiguration@@QEAA@XZ (Ordinal: 8, Address: 0x65b0)
  • ??0CUwfVolumeDevice@@QEAA@XZ (Ordinal: 9, Address: 0x14f80)
  • ??1CDevice@@UEAA@XZ (Ordinal: 10, Address: 0x14fa0)
  • ??1CUwfConfiguration@@UEAA@XZ (Ordinal: 11, Address: 0xca50)
  • ??1CUwfManagement@@UEAA@XZ (Ordinal: 12, Address: 0x16d80)
  • ??1CUwfRegDevice@@UEAA@XZ (Ordinal: 13, Address: 0x14fa0)
  • ??1CUwfRegKey@@QEAA@XZ (Ordinal: 14, Address: 0xef80)
  • ??1CUwfStaticConfiguration@@UEAA@XZ (Ordinal: 15, Address: 0x8640)
  • ??1CUwfStaticVolumeConfiguration@@UEAA@XZ (Ordinal: 16, Address: 0x65e0)
  • ??1CUwfVolumeDevice@@UEAA@XZ (Ordinal: 17, Address: 0x14fa0)
  • ?AddDWORDValue@CUwfRegKey@@QEAAJPEBGK@Z (Ordinal: 18, Address: 0xf3c0)
  • ?AddFileExclusion@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z (Ordinal: 19, Address: 0x7210)
  • ?AddMultiSzValue@CUwfRegKey@@QEAAJPEBG0@Z (Ordinal: 20, Address: 0xf880)
  • ?AddRegKeyExclusion@CUwfStaticConfiguration@@QEAAJPEBG@Z (Ordinal: 21, Address: 0xc240)
  • ?Attach@CUwfRegKey@@QEAAJPEAUHKEY__@@@Z (Ordinal: 22, Address: 0xf250)
  • ?Begin@CUwfProvider@@QEAAJXZ (Ordinal: 23, Address: 0x19f30)
  • ?Begin@CUwfProvider@@QEAAJ_N@Z (Ordinal: 24, Address: 0x19f40)
  • ?CanFileBeCommitted@@YA_NPEBG0@Z (Ordinal: 25, Address: 0x13f50)
  • ?CanVolumeBeProtected@@YAJPEBG_NPEA_N@Z (Ordinal: 26, Address: 0x11660)
  • ?CaptureUwfSettings@@YAJW4E_UNATTEND_REASON@@@Z (Ordinal: 27, Address: 0x123d0)
  • ?Close@CDevice@@QEAAXXZ (Ordinal: 28, Address: 0x15120)
  • ?Close@CUwfConfiguration@@QEAAXXZ (Ordinal: 29, Address: 0xcc40)
  • ?Close@CUwfManagement@@QEAAXXZ (Ordinal: 30, Address: 0x16f80)
  • ?Close@CUwfRegKey@@QEAAJXZ (Ordinal: 31, Address: 0xf2b0)
  • ?Close@CUwfStaticConfiguration@@QEAAXXZ (Ordinal: 32, Address: 0x8920)
  • ?Close@CUwfStaticVolumeConfiguration@@QEAAXXZ (Ordinal: 33, Address: 0x67f0)
  • ?CommitFile@CUwfManagement@@QEAAJPEBG0@Z (Ordinal: 34, Address: 0x172e0)
  • ?CommitFileDeletion@CUwfManagement@@QEAAJPEBG00@Z (Ordinal: 35, Address: 0x17710)
  • ?CommitRegistry@CUwfManagement@@QEAAJ_NPEBG1@Z (Ordinal: 36, Address: 0x18a90)
  • ?CommitRegistryDeletion@CUwfManagement@@QEAAJ_NPEBG1@Z (Ordinal: 37, Address: 0x18d20)
  • ?CommitRegistryKey@CUwfRegDevice@@QEAAJPEBG@Z (Ordinal: 38, Address: 0x15470)
  • ?CommitRegistryKeyDeletion@CUwfRegDevice@@QEAAJPEBG@Z (Ordinal: 39, Address: 0x155a0)
  • ?CommitRegistryValue@CUwfRegDevice@@QEAAJPEBG0@Z (Ordinal: 40, Address: 0x153c0)
  • ?CommitRegistryValueDeletion@CUwfRegDevice@@QEAAJPEBG0@Z (Ordinal: 41, Address: 0x154f0)
  • ?Compare@CUwfStaticVolumeConfiguration@@QEAAJAEAV1@PEA_N@Z (Ordinal: 42, Address: 0x7c70)
  • ?CopyTo@CUwfStaticConfiguration@@QEAAJPEAUHKEY__@@PEBG_N@Z (Ordinal: 43, Address: 0x8890)
  • ?CopyTree@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBGPEAUHKEY__@@_N@Z (Ordinal: 44, Address: 0xcd30)
  • ?CopyTree@CUwfRegKey@@QEAAJAEAV1@PEBG_N@Z (Ordinal: 45, Address: 0xfdb0)
  • ?CopyTree@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBG_N@Z (Ordinal: 46, Address: 0xfdc0)
  • ?CopyTreeTransacted@CUwfRegKey@@QEAAJPEBGPEAUHKEY__@@PEAX_N@Z (Ordinal: 47, Address: 0xfe40)
  • ?Create@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBGPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAK@Z (Ordinal: 48, Address: 0xef90)
  • ?CreateKey@CUwfConfiguration@@QEAAJPEAUHKEY__@@PEBGKKPEAKAEAVCUwfRegKey@@@Z (Ordinal: 49, Address: 0xccb0)
  • ?CreateOverlayFile@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 50, Address: 0xa930)
  • ?CreateSubKey@CUwfRegKey@@QEAAJPEBGKKPEAKPEAV1@@Z (Ordinal: 51, Address: 0xfcc0)
  • ?CreateTransacted@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBGPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAKPEAX@Z (Ordinal: 52, Address: 0xf050)
  • ?CreateVolume@CUwfStaticConfiguration@@QEAAJPEBG0PEAPEAVCUwfStaticVolumeConfiguration@@@Z (Ordinal: 53, Address: 0xae20)
  • ?DeleteBindingConfiguration@CUwfStaticVolumeConfiguration@@QEAAJXZ (Ordinal: 54, Address: 0x7c10)
  • ?DeleteFileW@CUwfConfiguration@@QEAAJPEBG@Z (Ordinal: 55, Address: 0xce50)
  • ?DeleteOverlayFile@CUwfStaticConfiguration@@QEAAJXZ (Ordinal: 56, Address: 0xab90)
  • ?DeleteTree@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBG@Z (Ordinal: 57, Address: 0xcd70)
  • ?DeleteTree@CUwfRegKey@@QEAAJPEBG@Z (Ordinal: 58, Address: 0x10050)
  • ?DeleteTreeFromRoot@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBG@Z (Ordinal: 59, Address: 0xcda0)
  • ?DeleteTreeTransacted@CUwfRegKey@@QEAAJPEBGPEAX@Z (Ordinal: 60, Address: 0x100a0)
  • ?DeleteValue@CUwfRegKey@@QEAAJPEBG@Z (Ordinal: 61, Address: 0x10010)
  • ?DeleteVolume@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 62, Address: 0xb2e0)
  • ?Detach@CUwfRegKey@@QEAAPEAUHKEY__@@XZ (Ordinal: 63, Address: 0xf2a0)
  • ?DisableAutoDefragService@@YAJH@Z (Ordinal: 64, Address: 0x12a60)
  • ?DisableService@@YAJPEBG_N@Z (Ordinal: 65, Address: 0x12920)
  • ?ExecuteBackgroundProcess@@YAJPEBG0_NPEAK@Z (Ordinal: 66, Address: 0x14420)
  • ?Finalize@CUwfManagement@@QEAAJXZ (Ordinal: 67, Address: 0x16eb0)
  • ?Finalize@CUwfProvider@@QEAAJXZ (Ordinal: 68, Address: 0x19f90)
  • ?FindFileExclusion@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z (Ordinal: 69, Address: 0x76d0)
  • ?FindRegKeyExclusion@CUwfStaticConfiguration@@QEAAJPEBG@Z (Ordinal: 70, Address: 0xc670)
  • ?FixupLowerFiltersSetting@@YAJXZ (Ordinal: 71, Address: 0x125a0)
  • ?FixupUpdatedSettings@CUwfConfiguration@@QEAAJXZ (Ordinal: 72, Address: 0xd7a0)
  • ?GetConfiguration@CUwfProvider@@QEAAPEAVCUwfConfiguration@@XZ (Ordinal: 73, Address: 0x19f20)
  • ?GetDriveLetterFromVolumeName@@YAJPEBGPEAG@Z (Ordinal: 74, Address: 0x14190)
  • ?GetManagement@CUwfProvider@@QEAAPEAVCUwfManagement@@XZ (Ordinal: 75, Address: 0x19f10)
  • ?GetOverlayFileName@CUwfStaticConfiguration@@QEAAJPEAPEAG@Z (Ordinal: 76, Address: 0x9e10)
  • ?GetOverlayFiles@CUwfOverlayDevice@@QEAAJAEA_KAEAV?$CRBMap@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_KV?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@V?$CElementTraits@_K@2@@ATL@@@Z (Ordinal: 77, Address: 0x15740)
  • ?GetServiceStartType@@YAJPEBGPEAK@Z (Ordinal: 78, Address: 0x11980)
  • ?GetStaticConfiguration@CUwfProvider@@QEAAJ_NPEAPEAVCUwfStaticConfiguration@@@Z (Ordinal: 79, Address: 0x19fb0)
  • ?GetSubKeyAt@CUwfRegKey@@QEAAJKPEAGK@Z (Ordinal: 80, Address: 0xfb90)
  • ?GetSystemDriveLetter@@YAJPEAPEAG@Z (Ordinal: 81, Address: 0x14a30)
  • ?GetSystemShutdownState@CUwfManagement@@QEAAJPEA_N@Z (Ordinal: 82, Address: 0x19a80)
  • ?GetUwfProtectableVolumeList@@YAJ_NPEAKPEAUUWF_PROTECTABLEVOLUME_INFO@@@Z (Ordinal: 83, Address: 0x11d70)
  • ?GetUwfProvider@CUwfProvider@@SAPEAV1@XZ (Ordinal: 84, Address: 0x19f00)
  • ?GetVolumeGuidFromDriveName@@YAJPEBGPEAGK@Z (Ordinal: 85, Address: 0x14090)
  • ?GetWinResumeObjectId@@YAJPEAPEAG@Z (Ordinal: 86, Address: 0x11850)
  • ?HaveCapturedUwfSettings@@YAJPEA_N@Z (Ordinal: 87, Address: 0x124d0)
  • ?HaveUwfFactorySettings@CUwfConfiguration@@QEAAJPEA_N@Z (Ordinal: 88, Address: 0xe010)
  • ?HiberFileExists@@YA_NXZ (Ordinal: 89, Address: 0x14980)
  • ?Initialize@CDevice@@QEAAJPEBG@Z (Ordinal: 90, Address: 0x14fc0)
  • ?Initialize@CUwfConfiguration@@QEAAJPEAX@Z (Ordinal: 91, Address: 0xcaa0)
  • ?Initialize@CUwfManagement@@QEAAJXZ (Ordinal: 92, Address: 0x16de0)
  • ?Initialize@CUwfManagement@@QEAAJ_N@Z (Ordinal: 93, Address: 0x16df0)
  • ?Initialize@CUwfOverlayDevice@@QEAAJPEBG@Z (Ordinal: 94, Address: 0x15620)
  • ?Initialize@CUwfRegDevice@@QEAAJXZ (Ordinal: 95, Address: 0x15390)
  • ?Initialize@CUwfStaticVolumeConfiguration@@QEAAJPEAUHKEY__@@K_NPEAVCUwfConfiguration@@PEAVCUwfStaticConfiguration@@@Z (Ordinal: 96, Address: 0x6610)
  • ?Initialize@CUwfVolumeDevice@@QEAAJXZ (Ordinal: 97, Address: 0x151f0)
  • ?InitializeWithNoPermissions@CDevice@@QEAAJPEBG@Z (Ordinal: 98, Address: 0x15070)
  • ?IsCurrentSession@CUwfStaticConfiguration@@QEAA_NXZ (Ordinal: 99, Address: 0x33a0)
  • ?IsFileExcluded@CUwfStaticVolumeConfiguration@@QEAAJPEBGPEA_N@Z (Ordinal: 100, Address: 0x7820)
  • ?IsHORMEnabled@CUwfConfiguration@@QEAA_NXZ (Ordinal: 101, Address: 0xd200)
  • ?IsOverlayFileExist@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 102, Address: 0xabf0)
  • ?IsUserAdmin@@YAJPEA_N@Z (Ordinal: 103, Address: 0x11820)
  • ?IsValidDriveLetter@@YA_NPEBG@Z (Ordinal: 104, Address: 0x13ee0)
  • ?IsValidOverlayConfig@@YA_NW4_UWF_CONFIG_OVERLAY_TYPE@@K@Z (Ordinal: 105, Address: 0x14050)
  • ?IsValidVolumeName@@YA_NPEBG@Z (Ordinal: 106, Address: 0x13ed0)
  • ?LOCK@CUwfProvider@@QEAAXXZ (Ordinal: 107, Address: 0x19ec0)
  • ?LookupShutdownPrivilegeInCurThreadToken@CUwfManagement@@QEAAJAEA_N@Z (Ordinal: 108, Address: 0x19610)
  • ?Open@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBGK@Z (Ordinal: 109, Address: 0xf120)
  • ?Open@CUwfStaticConfiguration@@QEAAJ_NK0PEAVCUwfConfiguration@@@Z (Ordinal: 110, Address: 0x8680)
  • ?OpenKey@CUwfConfiguration@@QEAAJPEAUHKEY__@@PEBGKAEAVCUwfRegKey@@@Z (Ordinal: 111, Address: 0xcc80)
  • ?OpenSubKey@CUwfRegKey@@QEAAJPEBGKAEAV1@@Z (Ordinal: 112, Address: 0xfc60)
  • ?OpenSubKeyAt@CUwfRegKey@@QEAAJKKAEAV1@@Z (Ordinal: 113, Address: 0xfbf0)
  • ?OpenTransacted@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBGKPEAX@Z (Ordinal: 114, Address: 0xf1b0)
  • ?ParsePathSpec@@YAJPEBGPEAGK1K1K@Z (Ordinal: 115, Address: 0x145e0)
  • ?ParseVolumeGUID@@YAJPEBGPEAGK@Z (Ordinal: 116, Address: 0x14890)
  • ?QueryBinaryValue@CUwfRegKey@@QEAAJPEBGPEAPEAEPEAK@Z (Ordinal: 117, Address: 0xfa10)
  • ?QueryDWORDValue@CUwfRegKey@@QEAAJPEBGPEAK@Z (Ordinal: 118, Address: 0xf2e0)
  • ?QueryMultiSzValue@CUwfRegKey@@QEAAJPEBGPEAPEAU_MULTISZ@@@Z (Ordinal: 119, Address: 0xf6e0)
  • ?QueryQWORDValue@CUwfRegKey@@QEAAJPEBGPEA_K@Z (Ordinal: 120, Address: 0xf470)
  • ?QuerySzValue@CUwfRegKey@@QEAAJPEBGPEAPEAG@Z (Ordinal: 121, Address: 0xf550)
  • ?ReOpen@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 122, Address: 0x8860)
  • ?ReOpen@CUwfStaticVolumeConfiguration@@QEAAJPEAUHKEY__@@@Z (Ordinal: 123, Address: 0x6730)
  • ?RegReadValue@@YAJPEAUHKEY__@@PEBGKPEAPEAEPEAK@Z (Ordinal: 124, Address: 0x131a0)
  • ?ReleaseStaticVolumeConfiguration@CUwfStaticConfiguration@@QEAAXXZ (Ordinal: 125, Address: 0xba80)
  • ?RemoveAllFileExclusions@CUwfStaticVolumeConfiguration@@QEAAJXZ (Ordinal: 126, Address: 0x7660)
  • ?RemoveFileExclusion@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z (Ordinal: 127, Address: 0x74a0)
  • ?RemoveRegKeyExclusion@CUwfStaticConfiguration@@QEAAJPEBG@Z (Ordinal: 128, Address: 0xc4c0)
  • ?ResetBindingConfiguration@CUwfStaticVolumeConfiguration@@QEAAJXZ (Ordinal: 129, Address: 0x7ba0)
  • ?ResetFileExclusions@CUwfStaticVolumeConfiguration@@QEAAJXZ (Ordinal: 130, Address: 0x7170)
  • ?ResetUwfSettings@CUwfConfiguration@@QEAAJXZ (Ordinal: 131, Address: 0xe250)
  • ?ResetUwfSettings@CUwfManagement@@QEAAJXZ (Ordinal: 132, Address: 0x19100)
  • ?SendIOCTL@CDevice@@QEAAJKPEAXK0KPEAK@Z (Ordinal: 133, Address: 0x15160)
  • ?SetBinaryValue@CUwfRegKey@@QEAAJPEBGPEAEK@Z (Ordinal: 134, Address: 0xfb40)
  • ?SetBootStatusPolicy@@YAJPEBG@Z (Ordinal: 135, Address: 0x128a0)
  • ?SetDWORDValue@CUwfRegKey@@QEAAJPEBGK@Z (Ordinal: 136, Address: 0xf360)
  • ?SetMultiSzValue@CUwfRegKey@@QEAAJPEBGQEAU_MULTISZ@@@Z (Ordinal: 137, Address: 0xf810)
  • ?SetOverlayFileSize@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 138, Address: 0xaa20)
  • ?SetQWORDValue@CUwfRegKey@@QEAAJPEBG_K@Z (Ordinal: 139, Address: 0xf4f0)
  • ?SetServiceStartType@@YAJPEBGK@Z (Ordinal: 140, Address: 0x11ae0)
  • ?SetSzValue@CUwfRegKey@@QEAAJPEBG0@Z (Ordinal: 141, Address: 0xf670)
  • ?ShutdownSystem@CUwfManagement@@QEAAJ_N@Z (Ordinal: 142, Address: 0x198f0)
  • ?UNLOCK@CUwfProvider@@QEAAXXZ (Ordinal: 143, Address: 0x19ee0)
  • ?UpdateDWORDValue@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBGK_N@Z (Ordinal: 144, Address: 0xd290)
  • ?UpdateMultiSzValue@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBGQEAU_MULTISZ@@_N@Z (Ordinal: 145, Address: 0xd600)
  • ?UpdateQWORDValue@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBG_K_N@Z (Ordinal: 146, Address: 0xd380)
  • ?UpdateSzValue@CUwfConfiguration@@QEAAJAEAVCUwfRegKey@@PEBG1_N@Z (Ordinal: 147, Address: 0xd470)
  • UwfCfgAddFileExclusion (Ordinal: 148, Address: 0x1d470)
  • UwfCfgAddRegExclusion (Ordinal: 149, Address: 0x1c190)
  • UwfCfgAddVolume (Ordinal: 150, Address: 0x1c6e0)
  • UwfCfgCommitFile (Ordinal: 151, Address: 0x1a940)
  • UwfCfgCommitFileDeletion (Ordinal: 152, Address: 0x1aa60)
  • UwfCfgCommitRegistry (Ordinal: 153, Address: 0x1abd0)
  • UwfCfgCommitRegistryDeletion (Ordinal: 154, Address: 0x1ac90)
  • UwfCfgDoesFileExclusionExist (Ordinal: 155, Address: 0x1d210)
  • UwfCfgDoesRegExclusionExist (Ordinal: 156, Address: 0x1bf40)
  • UwfCfgDoesVolumeExist (Ordinal: 157, Address: 0x1c350)
  • UwfCfgGetCriticalThreshold (Ordinal: 158, Address: 0x1a660)
  • UwfCfgGetDriveLetter (Ordinal: 159, Address: 0x1cd10)
  • UwfCfgGetFileExclusions (Ordinal: 160, Address: 0x1d300)
  • UwfCfgGetFilterEnabled (Ordinal: 161, Address: 0x1b630)
  • UwfCfgGetHormEnabled (Ordinal: 162, Address: 0x1bad0)
  • UwfCfgGetOverlayCommitState (Ordinal: 163, Address: 0x1b4e0)
  • UwfCfgGetOverlayFlags (Ordinal: 164, Address: 0x1ae60)
  • UwfCfgGetOverlayInformation (Ordinal: 165, Address: 0x1a370)
  • UwfCfgGetOverlayMaximumSize (Ordinal: 166, Address: 0x1b070)
  • UwfCfgGetOverlayType (Ordinal: 167, Address: 0x1ad50)
  • UwfCfgGetPersistDomainSecretKey (Ordinal: 168, Address: 0x1bbf0)
  • UwfCfgGetPersistTSCAL (Ordinal: 169, Address: 0x1bd90)
  • UwfCfgGetRegExclusions (Ordinal: 170, Address: 0x1c020)
  • UwfCfgGetResetPersistentOverlay (Ordinal: 171, Address: 0x1d630)
  • UwfCfgGetResetPersistentOverlaySavedMode (Ordinal: 172, Address: 0x1d780)
  • UwfCfgGetServicingModeEnabled (Ordinal: 173, Address: 0x1b180)
  • UwfCfgGetShutdownPending (Ordinal: 174, Address: 0x1a8a0)
  • UwfCfgGetVolumeBindByDriveLetter (Ordinal: 175, Address: 0x1cb40)
  • UwfCfgGetVolumeProtected (Ordinal: 176, Address: 0x1c970)
  • UwfCfgGetVolumeSwapfileSize (Ordinal: 177, Address: 0x1ce00)
  • UwfCfgGetVolumes (Ordinal: 178, Address: 0x1c420)
  • UwfCfgGetWarningThreshold (Ordinal: 179, Address: 0x1a780)
  • UwfCfgRemoveFileExclusion (Ordinal: 180, Address: 0x1d550)
  • UwfCfgRemoveRegExclusion (Ordinal: 181, Address: 0x1c270)
  • UwfCfgRemoveVolume (Ordinal: 182, Address: 0x1c830)
  • UwfCfgResetSettings (Ordinal: 183, Address: 0x1a1f0)
  • UwfCfgRestartSystem (Ordinal: 184, Address: 0x1a2f0)
  • UwfCfgSetCriticalThreshold (Ordinal: 185, Address: 0x1a700)
  • UwfCfgSetFilterEnabled (Ordinal: 186, Address: 0x1b700)
  • UwfCfgSetHormEnabled (Ordinal: 187, Address: 0x1bb60)
  • UwfCfgSetOverlayCommitState (Ordinal: 188, Address: 0x1b590)
  • UwfCfgSetOverlayFlags (Ordinal: 189, Address: 0x1af00)
  • UwfCfgSetOverlayMaximumSize (Ordinal: 190, Address: 0x1b110)
  • UwfCfgSetOverlayType (Ordinal: 191, Address: 0x1adf0)
  • UwfCfgSetPersistDomainSecretKey (Ordinal: 192, Address: 0x1bcd0)
  • UwfCfgSetPersistTSCAL (Ordinal: 193, Address: 0x1be80)
  • UwfCfgSetResetPersistentOverlay (Ordinal: 194, Address: 0x1d6d0)
  • UwfCfgSetResetPersistentOverlaySavedMode (Ordinal: 195, Address: 0x1d830)
  • UwfCfgSetServicingModeEnabled (Ordinal: 196, Address: 0x1b260)
  • UwfCfgSetVolumeBindByDriveLetter (Ordinal: 197, Address: 0x1cc30)
  • UwfCfgSetVolumeProtected (Ordinal: 198, Address: 0x1ca60)
  • UwfCfgSetVolumeSwapfileSize (Ordinal: 199, Address: 0x1cee0)
  • UwfCfgSetWarningThreshold (Ordinal: 200, Address: 0x1a820)
  • UwfCfgShutdownSystem (Ordinal: 201, Address: 0x1a270)
  • ?ValidateFileNameToBeCommitted@@YA?AW4FILE_COMMIT_VALIDATE_RESULT@@_NPEBG11@Z (Ordinal: 202, Address: 0x14e10)
  • ?ValidateRegistryKeyValueToBeCommitted@@YA?AW4REG_COMMIT_VALIDATE_RESULT@@_N0PEBG1KPEAPEAG@Z (Ordinal: 203, Address: 0x14c40)
  • ?VolumeGetConfig@@YAJPEAVCUwfStaticConfiguration@@PEBG1PEAPEAVCUwfStaticVolumeConfiguration@@@Z (Ordinal: 204, Address: 0x12050)
  • ?VolumeGetVolumeGuid@@YAJPEBGPEAGK@Z (Ordinal: 205, Address: 0x111b0)
  • ?get_BindingType@CUwfStaticVolumeConfiguration@@QEAAJPEAK@Z (Ordinal: 206, Address: 0x69a0)
  • ?get_DiskNumber@CUwfStaticVolumeConfiguration@@QEAAJPEAK@Z (Ordinal: 207, Address: 0x6cc0)
  • ?get_DiskSignature@CUwfStaticVolumeConfiguration@@QEAAJPEAK@Z (Ordinal: 208, Address: 0x6d50)
  • ?get_DriveLetter@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAG@Z (Ordinal: 209, Address: 0x6b50)
  • ?get_FileExclusions@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAU_MULTISZ@@@Z (Ordinal: 210, Address: 0x7130)
  • ?get_HORMEnabled@CUwfConfiguration@@QEAAJPEA_N@Z (Ordinal: 211, Address: 0xceb0)
  • ?get_HORMEnabled@CUwfManagement@@QEAAJPEA_N@Z (Ordinal: 212, Address: 0x16fd0)
  • ?get_IsNoFileExclusion@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 213, Address: 0x9730)
  • ?get_IsNoRegExclusion@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 214, Address: 0x96d0)
  • ?get_NumVolumes@CUwfStaticConfiguration@@QEAAJPEAK@Z (Ordinal: 215, Address: 0x9640)
  • ?get_OverlayCriticalThreshold@CUwfConfiguration@@QEAAJPEAK@Z (Ordinal: 216, Address: 0xd0d0)
  • ?get_OverlayCriticalThreshold@CUwfManagement@@QEAAJPEAK@Z (Ordinal: 217, Address: 0x180b0)
  • ?get_OverlayFlags@CUwfManagement@@QEAAJ_NPEAK@Z (Ordinal: 218, Address: 0x17cd0)
  • ?get_OverlayFlags@CUwfStaticConfiguration@@QEAAJPEAK@Z (Ordinal: 219, Address: 0x9bb0)
  • ?get_OverlayInformation@CUwfManagement@@QEAAJPEBGPEAU_UWFVOL_OVERLAY_DATA_OUTPUT@@PEAK2@Z (Ordinal: 220, Address: 0x18130)
  • ?get_OverlayMaximumSize@CUwfManagement@@QEAAJ_NPEAK@Z (Ordinal: 221, Address: 0x17ef0)
  • ?get_OverlayMaximumSize@CUwfStaticConfiguration@@QEAAJPEAK@Z (Ordinal: 222, Address: 0xacc0)
  • ?get_OverlayType@CUwfManagement@@QEAAJ_NPEAW4_UWF_CONFIG_OVERLAY_TYPE@@@Z (Ordinal: 223, Address: 0x17b10)
  • ?get_OverlayType@CUwfStaticConfiguration@@QEAAJPEAW4_UWF_CONFIG_OVERLAY_TYPE@@@Z (Ordinal: 224, Address: 0x98d0)
  • ?get_OverlayWarningThreshold@CUwfConfiguration@@QEAAJPEAK@Z (Ordinal: 225, Address: 0xd040)
  • ?get_OverlayWarningThreshold@CUwfManagement@@QEAAJPEAK@Z (Ordinal: 226, Address: 0x18030)
  • ?get_PartitionGUID@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAG@Z (Ordinal: 227, Address: 0x7000)
  • ?get_PartitionNumber@CUwfStaticVolumeConfiguration@@QEAAJPEAK@Z (Ordinal: 228, Address: 0x6de0)
  • ?get_PartitionOffset@CUwfStaticVolumeConfiguration@@QEAAJPEA_K@Z (Ordinal: 229, Address: 0x6f70)
  • ?get_PartitionStyle@CUwfStaticVolumeConfiguration@@QEAAJPEAW4_PARTITION_STYLE@@@Z (Ordinal: 230, Address: 0x6e70)
  • ?get_PersistDomainSecretKey@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 231, Address: 0xbac0)
  • ?get_PersistTSCAL@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 232, Address: 0xbe60)
  • ?get_Protected@CUwfStaticVolumeConfiguration@@QEAAJPEA_N@Z (Ordinal: 233, Address: 0x6800)
  • ?get_RegKeyExclusions@CUwfStaticConfiguration@@QEAAJPEAPEAU_MULTISZ@@@Z (Ordinal: 234, Address: 0xc200)
  • ?get_RegKeyExclusionsUWFSpecific@CUwfStaticConfiguration@@QEAAJPEAPEAU_MULTISZ@@@Z (Ordinal: 235, Address: 0xc7c0)
  • ?get_ResetPersistentOverlay@CUwfManagement@@QEAAJPEAK@Z (Ordinal: 236, Address: 0x19ca0)
  • ?get_ResetPersistentStateSavedMode@CUwfManagement@@QEAAJ_NPEAK@Z (Ordinal: 237, Address: 0x17de0)
  • ?get_ResetPersistentStateSavedMode@CUwfStaticConfiguration@@QEAAJPEAK@Z (Ordinal: 238, Address: 0x9ce0)
  • ?get_RomModeDisposition@CUwfManagement@@QEAAJPEAW4_UWFVOL_ROM_MODE_DISPOSITION@@@Z (Ordinal: 239, Address: 0x172c0)
  • ?get_RomModeDisposition@CUwfVolumeDevice@@QEAAJPEAW4_UWFVOL_ROM_MODE_DISPOSITION@@@Z (Ordinal: 240, Address: 0x15250)
  • ?get_ServicingModeEnabled@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 241, Address: 0xc820)
  • ?get_StaticConfiguration@CUwfConfiguration@@QEAAJ_NPEAPEAVCUwfStaticConfiguration@@@Z (Ordinal: 242, Address: 0xd160)
  • ?get_StaticVolumeConfiguration@CUwfStaticConfiguration@@QEAAJKPEAPEAVCUwfStaticVolumeConfiguration@@@Z (Ordinal: 243, Address: 0xb4b0)
  • ?get_StaticVolumeConfiguration@CUwfStaticConfiguration@@QEAAJPEBG0PEAPEAVCUwfStaticVolumeConfiguration@@@Z (Ordinal: 244, Address: 0xb7d0)
  • ?get_StaticVolumeConfiguration@CUwfStaticConfiguration@@QEAAJPEBGPEAPEAVCUwfStaticVolumeConfiguration@@@Z (Ordinal: 245, Address: 0xb5b0)
  • ?get_SwapfileSize@CUwfStaticVolumeConfiguration@@QEAAJPEAK@Z (Ordinal: 246, Address: 0x7090)
  • ?get_UwfConfiguration@CUwfManagement@@QEAAJPEAPEAVCUwfConfiguration@@@Z (Ordinal: 247, Address: 0x18160)
  • ?get_UwfEnabled@CUwfStaticConfiguration@@QEAAJPEA_N@Z (Ordinal: 248, Address: 0x8960)
  • ?get_UwfEnabledBeforeServicing@CUwfConfiguration@@QEAAJPEAK@Z (Ordinal: 249, Address: 0xd190)
  • ?get_VolumeGuid@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAG@Z (Ordinal: 250, Address: 0x6c20)
  • ?set_BindingType@CUwfStaticVolumeConfiguration@@QEAAJK@Z (Ordinal: 251, Address: 0x69e0)
  • ?set_DiskNumber@CUwfStaticVolumeConfiguration@@QEAAJK@Z (Ordinal: 252, Address: 0x6d00)
  • ?set_DiskSignature@CUwfStaticVolumeConfiguration@@QEAAJK@Z (Ordinal: 253, Address: 0x6d90)
  • ?set_DriveLetter@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z (Ordinal: 254, Address: 0x6b90)
  • ?set_HORMEnabled@CUwfConfiguration@@QEAAJ_N0@Z (Ordinal: 255, Address: 0xcf60)
  • ?set_HORMEnabled@CUwfManagement@@QEAAJ_N@Z (Ordinal: 256, Address: 0x16ff0)
  • ?set_HORMEnabled@CUwfVolumeDevice@@QEAAJ_N@Z (Ordinal: 257, Address: 0x15210)
  • ?set_NumVolumes@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 258, Address: 0x9680)
  • ?set_OverlayCriticalThreshold@CUwfConfiguration@@QEAAJK@Z (Ordinal: 259, Address: 0xd110)
  • ?set_OverlayCriticalThreshold@CUwfManagement@@QEAAJK@Z (Ordinal: 260, Address: 0x180e0)
  • ?set_OverlayCriticalThreshold@CUwfVolumeDevice@@QEAAJK@Z (Ordinal: 261, Address: 0x15320)
  • ?set_OverlayFlags@CUwfManagement@@QEAAJK@Z (Ordinal: 262, Address: 0x17d10)
  • ?set_OverlayFlags@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 263, Address: 0x9c60)
  • ?set_OverlayMaximumSize@CUwfManagement@@QEAAJK@Z (Ordinal: 264, Address: 0x17f30)
  • ?set_OverlayMaximumSize@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 265, Address: 0xad00)
  • ?set_OverlayType@CUwfManagement@@QEAAJW4_UWF_CONFIG_OVERLAY_TYPE@@@Z (Ordinal: 266, Address: 0x17b50)
  • ?set_OverlayType@CUwfStaticConfiguration@@QEAAJW4_UWF_CONFIG_OVERLAY_TYPE@@@Z (Ordinal: 267, Address: 0x99a0)
  • ?set_OverlayWarningThreshold@CUwfConfiguration@@QEAAJK@Z (Ordinal: 268, Address: 0xd080)
  • ?set_OverlayWarningThreshold@CUwfManagement@@QEAAJK@Z (Ordinal: 269, Address: 0x18060)
  • ?set_OverlayWarningThreshold@CUwfVolumeDevice@@QEAAJK@Z (Ordinal: 270, Address: 0x152e0)
  • ?set_PartitionGUID@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z (Ordinal: 271, Address: 0x7040)
  • ?set_PartitionNumber@CUwfStaticVolumeConfiguration@@QEAAJK@Z (Ordinal: 272, Address: 0x6e20)
  • ?set_PartitionOffset@CUwfStaticVolumeConfiguration@@QEAAJ_K@Z (Ordinal: 273, Address: 0x6fb0)
  • ?set_PartitionStyle@CUwfStaticVolumeConfiguration@@QEAAJW4_PARTITION_STYLE@@@Z (Ordinal: 274, Address: 0x6f20)
  • ?set_PersistDomainSecretKey@CUwfStaticConfiguration@@QEAAJ_N@Z (Ordinal: 275, Address: 0xbb70)
  • ?set_PersistTSCAL@CUwfStaticConfiguration@@QEAAJ_N@Z (Ordinal: 276, Address: 0xbf10)
  • ?set_Protected@CUwfStaticVolumeConfiguration@@QEAAJ_N@Z (Ordinal: 277, Address: 0x68b0)
  • ?set_RegKeyExclusionsUWFSpecific@CUwfStaticConfiguration@@QEAAJPEAU_MULTISZ@@@Z (Ordinal: 278, Address: 0xc7e0)
  • ?set_ResetPersistentOverlay@CUwfManagement@@QEAAJK@Z (Ordinal: 279, Address: 0x19b40)
  • ?set_ResetPersistentStateSavedMode@CUwfManagement@@QEAAJK@Z (Ordinal: 280, Address: 0x17e20)
  • ?set_ResetPersistentStateSavedMode@CUwfStaticConfiguration@@QEAAJK@Z (Ordinal: 281, Address: 0x9d90)
  • ?set_RomModeDisposition@CUwfManagement@@QEAAJW4_UWFVOL_ROM_MODE_DISPOSITION@@@Z (Ordinal: 282, Address: 0x172d0)
  • ?set_RomModeDisposition@CUwfVolumeDevice@@QEAAJW4_UWFVOL_ROM_MODE_DISPOSITION@@@Z (Ordinal: 283, Address: 0x152a0)
  • ?set_ServicingModeEnabled@CUwfManagement@@QEAAJ_N0@Z (Ordinal: 284, Address: 0x18140)
  • ?set_ServicingModeEnabled@CUwfStaticConfiguration@@QEAAJ_N@Z (Ordinal: 285, Address: 0xc8c0)
  • ?set_SwapfileSize@CUwfStaticVolumeConfiguration@@QEAAJK@Z (Ordinal: 286, Address: 0x70e0)
  • ?set_UwfBootPersistenceEnabled@CUwfConfiguration@@QEAAJ_N@Z (Ordinal: 287, Address: 0xdc70)
  • ?set_UwfEnabled@CUwfStaticConfiguration@@QEAAJ_N@Z (Ordinal: 288, Address: 0x9540)
  • ?set_UwfEnabledBeforeServicing@CUwfConfiguration@@QEAAJK@Z (Ordinal: 289, Address: 0xd1b0)
  • ?set_VolumeGuid@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z (Ordinal: 290, Address: 0x6c60)
  • MultiSzAdd (Ordinal: 291, Address: 0x10660)
  • MultiSzAlloc (Ordinal: 292, Address: 0x10360)
  • MultiSzCompare (Ordinal: 293, Address: 0x107f0)
  • MultiSzFind (Ordinal: 294, Address: 0x105a0)
  • MultiSzFree (Ordinal: 295, Address: 0x10580)
  • MultiSzReAlloc (Ordinal: 296, Address: 0x10480)
  • MultiSzRemove (Ordinal: 297, Address: 0x106e0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • StringFromGUID2 (Address: 0x180020cf0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180020d00)
  • IsDebuggerPresent (Address: 0x180020d18)
  • OutputDebugStringA (Address: 0x180020d08)
  • OutputDebugStringW (Address: 0x180020d10)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180020d28)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180020d38)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180020d60)
  • RaiseException (Address: 0x180020d58)
  • SetLastError (Address: 0x180020d48)
  • SetUnhandledExceptionFilter (Address: 0x180020d50)
  • UnhandledExceptionFilter (Address: 0x180020d68)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x180020dc8)
  • DeleteFileW (Address: 0x180020de0)
  • FindClose (Address: 0x180020da8)
  • FindFirstFileW (Address: 0x180020d98)
  • FindFirstVolumeW (Address: 0x180020da0)
  • FindNextVolumeW (Address: 0x180020db0)
  • FindVolumeClose (Address: 0x180020db8)
  • FlushFileBuffers (Address: 0x180020d90)
  • GetDiskFreeSpaceW (Address: 0x180020dd8)
  • GetFileAttributesW (Address: 0x180020d80)
  • GetFinalPathNameByHandleW (Address: 0x180020dd0)
  • GetVolumePathNameW (Address: 0x180020d78)
  • SetFilePointer (Address: 0x180020d88)
  • WriteFile (Address: 0x180020dc0)
api-ms-win-core-file-l1-2-0.dll
  • GetVolumeNameForVolumeMountPointW (Address: 0x180020df0)
  • GetVolumePathNamesForVolumeNameW (Address: 0x180020df8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180020e08)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180020e28)
  • HeapAlloc (Address: 0x180020e40)
  • HeapDestroy (Address: 0x180020e38)
  • HeapFree (Address: 0x180020e20)
  • HeapReAlloc (Address: 0x180020e30)
  • HeapSize (Address: 0x180020e18)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180020e58)
  • LocalFree (Address: 0x180020e50)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x180020e68)
api-ms-win-core-kernel32-legacy-l1-1-3.dll
  • DeleteFileTransactedW (Address: 0x180020e78)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180020eb0)
  • FindResourceExW (Address: 0x180020eb8)
  • FreeLibrary (Address: 0x180020e90)
  • GetModuleFileNameA (Address: 0x180020e88)
  • GetModuleHandleExW (Address: 0x180020ea0)
  • GetModuleHandleW (Address: 0x180020ec0)
  • GetProcAddress (Address: 0x180020ec8)
  • LoadLibraryExW (Address: 0x180020ed0)
  • LoadResource (Address: 0x180020ea8)
  • LockResource (Address: 0x180020e98)
  • SizeofResource (Address: 0x180020ed8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180020ee8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x180020ef8)
  • GetEnvironmentVariableW (Address: 0x180020f00)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x180020f48)
  • GetCurrentProcess (Address: 0x180020f40)
  • GetCurrentProcessId (Address: 0x180020f20)
  • GetCurrentThread (Address: 0x180020f58)
  • GetCurrentThreadId (Address: 0x180020f10)
  • GetExitCodeProcess (Address: 0x180020f50)
  • OpenProcessToken (Address: 0x180020f30)
  • OpenThreadToken (Address: 0x180020f18)
  • ResumeThread (Address: 0x180020f28)
  • TerminateProcess (Address: 0x180020f38)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180020f68)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180020f78)
  • RegCopyTreeW (Address: 0x180020fa8)
  • RegCreateKeyExW (Address: 0x180020fd0)
  • RegDeleteKeyExW (Address: 0x180020fc8)
  • RegDeleteTreeW (Address: 0x180020fa0)
  • RegDeleteValueW (Address: 0x180020fb0)
  • RegEnumKeyExW (Address: 0x180020f90)
  • RegEnumValueW (Address: 0x180020fb8)
  • RegGetValueW (Address: 0x180020f98)
  • RegOpenKeyExW (Address: 0x180020fc0)
  • RegQueryValueExW (Address: 0x180020f80)
  • RegSetValueExW (Address: 0x180020f88)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyTransactedW (Address: 0x180020fe8)
  • RegDeleteKeyTransactedW (Address: 0x180020ff0)
  • RegDeleteKeyW (Address: 0x180020ff8)
  • RegOpenKeyTransactedW (Address: 0x180020fe0)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x180021008)
api-ms-win-core-shutdown-l1-1-0.dll
  • InitiateSystemShutdownExW (Address: 0x180021018)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180021088)
  • AcquireSRWLockShared (Address: 0x180021098)
  • CreateMutexExW (Address: 0x180021060)
  • CreateSemaphoreExW (Address: 0x180021030)
  • DeleteCriticalSection (Address: 0x180021078)
  • EnterCriticalSection (Address: 0x180021080)
  • InitializeCriticalSection (Address: 0x180021048)
  • InitializeCriticalSectionEx (Address: 0x180021050)
  • LeaveCriticalSection (Address: 0x180021068)
  • OpenSemaphoreW (Address: 0x180021058)
  • ReleaseMutex (Address: 0x180021038)
  • ReleaseSemaphore (Address: 0x180021028)
  • ReleaseSRWLockExclusive (Address: 0x180021090)
  • ReleaseSRWLockShared (Address: 0x180021070)
  • WaitForSingleObject (Address: 0x1800210a0)
  • WaitForSingleObjectEx (Address: 0x180021040)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800210b0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800210d8)
  • GetSystemTimeAsFileTime (Address: 0x1800210d0)
  • GetTickCount (Address: 0x1800210c8)
  • GlobalMemoryStatusEx (Address: 0x1800210c0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800210f8)
  • CreateThreadpoolTimer (Address: 0x180021100)
  • SetThreadpoolTimer (Address: 0x1800210f0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800210e8)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x180021120)
  • CheckTokenMembership (Address: 0x180021118)
  • CreateWellKnownSid (Address: 0x180021128)
  • GetTokenInformation (Address: 0x180021110)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x180021138)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180021148)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x180021168)
  • OpenSCManagerW (Address: 0x180021160)
  • OpenServiceW (Address: 0x180021158)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfigW (Address: 0x180021180)
  • QueryServiceConfigW (Address: 0x180021178)
bcd.dll
  • BcdCloseObject (Address: 0x1800211a8)
  • BcdCloseStore (Address: 0x1800211b0)
  • BcdGetElementData (Address: 0x1800211a0)
  • BcdOpenObject (Address: 0x180021190)
  • BcdOpenStore (Address: 0x180021198)
  • BcdSetElementData (Address: 0x1800211b8)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800211e0)
  • __CxxFrameHandler3 (Address: 0x180021300)
  • __dllonexit (Address: 0x180021230)
  • _amsg_exit (Address: 0x1800212a8)
  • _callnewh (Address: 0x1800211c8)
  • _CxxThrowException (Address: 0x1800212c8)
  • _errno (Address: 0x1800211f0)
  • _initterm (Address: 0x1800212a0)
  • _lock (Address: 0x180021298)
  • _onexit (Address: 0x180021208)
  • _purecall (Address: 0x180021278)
  • _unlock (Address: 0x180021288)
  • _vsnwprintf (Address: 0x1800212d8)
  • _wcsicmp (Address: 0x180021250)
  • _wcsnicmp (Address: 0x180021200)
  • _XcptFilter (Address: 0x1800212e0)
  • ??_V@YAXPEAX@Z (Address: 0x1800212f8)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180021258)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180021290)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800212b0)
  • ??1exception@@UEAA@XZ (Address: 0x1800212b8)
  • ??1type_info@@UEAA@XZ (Address: 0x1800211d8)
  • ??3@YAXPEAX@Z (Address: 0x1800212e8)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800212c0)
  • free (Address: 0x180021268)
  • iswxdigit (Address: 0x180021210)
  • malloc (Address: 0x180021260)
  • memcmp (Address: 0x1800211d0)
  • memcpy (Address: 0x180021308)
  • memcpy_s (Address: 0x1800212d0)
  • memmove (Address: 0x1800212f0)
  • memmove_s (Address: 0x180021280)
  • memset (Address: 0x180021318)
  • realloc (Address: 0x180021238)
  • swprintf_s (Address: 0x180021218)
  • swscanf_s (Address: 0x180021240)
  • towlower (Address: 0x180021248)
  • towupper (Address: 0x180021310)
  • wcscat_s (Address: 0x180021220)
  • wcschr (Address: 0x1800211f8)
  • wcsncmp (Address: 0x180021270)
  • wcsrchr (Address: 0x180021228)
  • wcsstr (Address: 0x1800211e8)
ntdll.dll
  • NtCommitTransaction (Address: 0x180021358)
  • NtQuerySystemInformation (Address: 0x180021340)
  • NtRollbackTransaction (Address: 0x180021330)
  • NtSetSecurityObject (Address: 0x180021348)
  • RtlCaptureContext (Address: 0x180021328)
  • RtlLookupFunctionEntry (Address: 0x180021360)
  • RtlNtStatusToDosError (Address: 0x180021350)
  • RtlVirtualUnwind (Address: 0x180021338)
OLEAUT32.dll
  • SysAllocString (Address: 0x180020cb8)
RPCRT4.dll
  • UuidCreate (Address: 0x180020cc8)
UpdatePolicy.dll
  • ReadPolicyWithFallback (Address: 0x180020ce0)
  • ReleaseEnterprisePolicyValue (Address: 0x180020cd8)