winsta.dll
Description: Winstation Library
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6456
Architecture: 64-bit
Operating System: Windows NT
SHA256: a4dcc89d9580aa16c05eee6225e6f95c
File Size: 373.8 KB
Uploaded At: Dec. 1, 2025, 7:44 a.m.
Views: 10
Exported Functions
- WinStationRegisterConsoleNotificationEx2 (Ordinal: 1, Address: 0x1d2e0)
- LogonIdFromWinStationNameA (Ordinal: 2, Address: 0x2d320)
- LogonIdFromWinStationNameW (Ordinal: 3, Address: 0x206f0)
- RemoteAssistancePrepareSystemRestore (Ordinal: 4, Address: 0x2d360)
- ServerGetInternetConnectorStatus (Ordinal: 5, Address: 0x2d3a0)
- ServerLicensingClose (Ordinal: 6, Address: 0x2c5d0)
- ServerLicensingDeactivateCurrentPolicy (Ordinal: 7, Address: 0x2c650)
- ServerLicensingFreePolicyInformation (Ordinal: 8, Address: 0x2c720)
- ServerLicensingGetAadInfo (Ordinal: 9, Address: 0x2c780)
- ServerLicensingGetAvailablePolicyIds (Ordinal: 10, Address: 0x2c8a0)
- ServerLicensingGetPolicy (Ordinal: 11, Address: 0x2c9b0)
- ServerLicensingGetPolicyInformationA (Ordinal: 12, Address: 0x2caa0)
- ServerLicensingGetPolicyInformationW (Ordinal: 13, Address: 0x2cb10)
- ServerLicensingLoadPolicy (Ordinal: 14, Address: 0x2cc90)
- ServerLicensingOpenA (Ordinal: 15, Address: 0x2ccc0)
- ServerLicensingOpenW (Ordinal: 16, Address: 0x2cd00)
- ServerLicensingSetAadInfo (Ordinal: 17, Address: 0x2ce60)
- ServerLicensingSetPolicy (Ordinal: 18, Address: 0x2cf70)
- ServerLicensingUnloadPolicy (Ordinal: 19, Address: 0x2cc90)
- ServerQueryInetConnectorInformationA (Ordinal: 20, Address: 0x2d3e0)
- ServerQueryInetConnectorInformationW (Ordinal: 21, Address: 0x2d420)
- ServerSetInternetConnectorStatus (Ordinal: 22, Address: 0x2d460)
- WTSRegisterSessionNotificationEx (Ordinal: 23, Address: 0x30530)
- WTSUnRegisterSessionNotificationEx (Ordinal: 24, Address: 0x305d0)
- WinStationActivateLicense (Ordinal: 25, Address: 0x2d4a0)
- WinStationAutoReconnect (Ordinal: 26, Address: 0x2d4e0)
- WinStationBroadcastSystemMessage (Ordinal: 27, Address: 0x1df00)
- WinStationCheckAccess (Ordinal: 28, Address: 0x2d520)
- WinStationCheckLoopBack (Ordinal: 29, Address: 0x2d560)
- WinStationCloseServer (Ordinal: 30, Address: 0x19010)
- WinStationConnectA (Ordinal: 31, Address: 0x2d5a0)
- WinStationConnectAndLockDesktop (Ordinal: 32, Address: 0x1a010)
- WinStationConnectCallback (Ordinal: 33, Address: 0x2d5e0)
- WinStationConnectEx (Ordinal: 34, Address: 0x2d620)
- WinStationConnectW (Ordinal: 35, Address: 0x1a160)
- WinStationConsumeCacheSession (Ordinal: 36, Address: 0x1ea00)
- WinStationCreateChildSessionTransport (Ordinal: 37, Address: 0x1e200)
- WinStationDisconnect (Ordinal: 38, Address: 0xa9d0)
- WinStationEnableChildSessions (Ordinal: 39, Address: 0x1a2d0)
- WinStationEnumerateA (Ordinal: 40, Address: 0x1a3e0)
- WinStationEnumerateContainerSessions (Ordinal: 41, Address: 0x1a4e0)
- WinStationEnumerateExW (Ordinal: 42, Address: 0x20a90)
- WinStationEnumerateLicenses (Ordinal: 43, Address: 0x2d660)
- WinStationEnumerateProcesses (Ordinal: 44, Address: 0x1a600)
- WinStationEnumerateW (Ordinal: 45, Address: 0x51b0)
- WinStationEnumerate_IndexedA (Ordinal: 46, Address: 0x2d6a0)
- WinStationEnumerate_IndexedW (Ordinal: 47, Address: 0x2d6e0)
- WinStationFreeConsoleNotification (Ordinal: 48, Address: 0x1d2f0)
- WinStationFreeEXECENVDATAEX (Ordinal: 49, Address: 0x9f30)
- WinStationFreeGAPMemory (Ordinal: 50, Address: 0x1a6c0)
- WinStationFreeMemory (Ordinal: 51, Address: 0xa050)
- WinStationFreePropertyValue (Ordinal: 52, Address: 0x1a700)
- WinStationFreeUserCertificates (Ordinal: 53, Address: 0x1a780)
- WinStationFreeUserCredentials (Ordinal: 54, Address: 0x1eb30)
- WinStationFreeUserSessionInfo (Ordinal: 55, Address: 0x11d0)
- WinStationGenerateLicense (Ordinal: 56, Address: 0x2d720)
- WinStationGetAllProcesses (Ordinal: 57, Address: 0x1a7d0)
- WinStationGetAllSessionsEx (Ordinal: 58, Address: 0x42d0)
- WinStationGetAllSessionsW (Ordinal: 59, Address: 0x20d70)
- WinStationGetAllUserSessions (Ordinal: 60, Address: 0x3390)
- WinStationGetChildSessionId (Ordinal: 61, Address: 0x1a940)
- WinStationGetConnectionProperty (Ordinal: 62, Address: 0x32c0)
- WinStationGetCurrentSessionCapabilities (Ordinal: 63, Address: 0x1f60)
- WinStationGetCurrentSessionConnectionProperty (Ordinal: 64, Address: 0x1aa60)
- WinStationGetCurrentSessionTerminalName (Ordinal: 65, Address: 0x1210)
- WinStationGetDeviceId (Ordinal: 66, Address: 0x1ab80)
- WinStationGetInitialApplication (Ordinal: 67, Address: 0x1acf0)
- WinStationGetLanAdapterNameA (Ordinal: 68, Address: 0x2d760)
- WinStationGetLanAdapterNameW (Ordinal: 69, Address: 0x2d7a0)
- WinStationGetLastWinlogonNotification (Ordinal: 70, Address: 0x1eb90)
- WinStationGetLoggedOnCount (Ordinal: 71, Address: 0x1ae70)
- WinStationGetMachinePolicy (Ordinal: 72, Address: 0x2d7e0)
- WinStationGetParentSessionId (Ordinal: 73, Address: 0x1afa0)
- WinStationGetProcessSid (Ordinal: 74, Address: 0x1b0f0)
- WinStationGetRedirectAuthInfo (Ordinal: 75, Address: 0x1ed20)
- WinStationGetRestrictedLogonInfo (Ordinal: 76, Address: 0x1ee70)
- WinStationGetSessionIds (Ordinal: 77, Address: 0x1b1a0)
- WinStationGetTermSrvCountersValue (Ordinal: 78, Address: 0x1b340)
- WinStationGetUserCertificates (Ordinal: 79, Address: 0x1b4c0)
- WinStationGetUserCredentials (Ordinal: 80, Address: 0x1efc0)
- WinStationGetUserProfile (Ordinal: 81, Address: 0x1f240)
- WinStationInstallLicense (Ordinal: 82, Address: 0x2d820)
- WinStationIsBoundToCacheTerminal (Ordinal: 83, Address: 0x1f380)
- WinStationIsChildSessionsEnabled (Ordinal: 84, Address: 0x1b710)
- WinStationIsCurrentSessionRemoteable (Ordinal: 85, Address: 0x43f0)
- WinStationIsHelpAssistantSession (Ordinal: 86, Address: 0x1f4b0)
- WinStationIsSessionPermitted (Ordinal: 87, Address: 0xb330)
- WinStationIsSessionRemoteable (Ordinal: 88, Address: 0x3f90)
- WinStationNameFromLogonIdA (Ordinal: 89, Address: 0x2d860)
- WinStationNameFromLogonIdW (Ordinal: 90, Address: 0x5a00)
- WinStationNegotiateSession (Ordinal: 91, Address: 0xb5a0)
- WinStationNtsdDebug (Ordinal: 92, Address: 0x2d8a0)
- WinStationOpenServerA (Ordinal: 93, Address: 0x19040)
- WinStationOpenServerExA (Ordinal: 94, Address: 0x19170)
- WinStationOpenServerExW (Ordinal: 95, Address: 0x192a0)
- WinStationOpenServerW (Ordinal: 96, Address: 0x19340)
- WinStationPreCreateGlassReplacementSession (Ordinal: 97, Address: 0xaa60)
- WinStationPreCreateGlassReplacementSessionEx (Ordinal: 98, Address: 0xaa80)
- WinStationQueryAllowConcurrentConnections (Ordinal: 99, Address: 0x2d8e0)
- WinStationQueryCurrentSessionInformation (Ordinal: 100, Address: 0x9810)
- WinStationQueryEnforcementCore (Ordinal: 101, Address: 0x2d050)
- WinStationQueryInformationA (Ordinal: 102, Address: 0x2d920)
- WinStationQueryInformationW (Ordinal: 103, Address: 0x7e90)
- WinStationQueryLicense (Ordinal: 104, Address: 0x2d960)
- WinStationQueryLogonCredentialsW (Ordinal: 105, Address: 0x2d9a0)
- WinStationQuerySessionVirtualIP (Ordinal: 106, Address: 0x30680)
- WinStationQueryUpdateRequired (Ordinal: 107, Address: 0x2d9e0)
- WinStationRcmShadow2 (Ordinal: 108, Address: 0x1b850)
- WinStationRedirectErrorMessage (Ordinal: 109, Address: 0x1f4f0)
- WinStationRedirectLogonBeginPainting (Ordinal: 110, Address: 0x1f5f0)
- WinStationRedirectLogonError (Ordinal: 111, Address: 0x1f6f0)
- WinStationRedirectLogonMessage (Ordinal: 112, Address: 0x1f850)
- WinStationRedirectLogonStatus (Ordinal: 113, Address: 0x1f9a0)
- WinStationRegisterConsoleNotification (Ordinal: 114, Address: 0x23a0)
- WinStationRegisterConsoleNotificationEx (Ordinal: 115, Address: 0x1d330)
- WinStationRegisterCurrentSessionNotificationEvent (Ordinal: 116, Address: 0x1760)
- WinStationRegisterNotificationEvent (Ordinal: 117, Address: 0x1d350)
- WinStationRemoveLicense (Ordinal: 118, Address: 0x2da20)
- WinStationRenameA (Ordinal: 119, Address: 0x2da60)
- WinStationRenameW (Ordinal: 120, Address: 0x2daa0)
- WinStationReportLoggedOnCompleted (Ordinal: 121, Address: 0x1fad0)
- WinStationReportUIResult (Ordinal: 122, Address: 0x1fc10)
- WinStationReset (Ordinal: 123, Address: 0x1b9d0)
- WinStationRevertFromServicesSession (Ordinal: 124, Address: 0x1bac0)
- WinStationSendMessageA (Ordinal: 125, Address: 0x1bbc0)
- WinStationSendMessageW (Ordinal: 126, Address: 0x1bd60)
- WinStationSendWindowMessage (Ordinal: 127, Address: 0xad90)
- WinStationServerPing (Ordinal: 128, Address: 0x2d250)
- WinStationSetAutologonPassword (Ordinal: 129, Address: 0x1e2f0)
- WinStationSetInformationA (Ordinal: 130, Address: 0x2dae0)
- WinStationSetInformationW (Ordinal: 131, Address: 0x1c090)
- WinStationSetLastWinlogonNotification (Ordinal: 132, Address: 0x3930)
- WinStationSetPoolCount (Ordinal: 133, Address: 0x2db20)
- WinStationSetRenderHint (Ordinal: 134, Address: 0x30830)
- WinStationShadow (Ordinal: 135, Address: 0x1c200)
- WinStationShadowAccessCheck (Ordinal: 136, Address: 0x1c3b0)
- WinStationShadowStop (Ordinal: 137, Address: 0x1c500)
- WinStationShadowStop2 (Ordinal: 138, Address: 0x1c680)
- WinStationShutdownSystem (Ordinal: 139, Address: 0x1c7b0)
- WinStationSwitchToServicesSession (Ordinal: 140, Address: 0x1c7c0)
- WinStationSystemShutdownStarted (Ordinal: 141, Address: 0x1fd10)
- WinStationSystemShutdownWait (Ordinal: 142, Address: 0x1fe40)
- WinStationTerminateGlassReplacementSession (Ordinal: 143, Address: 0x1ff30)
- WinStationTerminateProcess (Ordinal: 144, Address: 0x1c8c0)
- WinStationUnRegisterConsoleNotification (Ordinal: 145, Address: 0x1e30)
- WinStationUnRegisterNotificationEvent (Ordinal: 146, Address: 0x16d0)
- WinStationUserLoginAccessCheck (Ordinal: 147, Address: 0x200b0)
- WinStationVerify (Ordinal: 148, Address: 0x1ca50)
- WinStationVirtualOpen (Ordinal: 149, Address: 0x1cbc0)
- WinStationVirtualOpenEx (Ordinal: 150, Address: 0xafe0)
- WinStationWaitSystemEvent (Ordinal: 151, Address: 0x1d380)
- _NWLogonQueryAdmin (Ordinal: 152, Address: 0x2db60)
- _NWLogonSetAdmin (Ordinal: 153, Address: 0x2dba0)
- _WinStationAnnoyancePopup (Ordinal: 154, Address: 0x2dbe0)
- _WinStationBeepOpen (Ordinal: 155, Address: 0x1cc70)
- _WinStationBreakPoint (Ordinal: 156, Address: 0x2dc20)
- _WinStationCallback (Ordinal: 157, Address: 0x2dc60)
- _WinStationCheckForApplicationName (Ordinal: 158, Address: 0x2dca0)
- _WinStationFUSCanRemoteUserDisconnect (Ordinal: 159, Address: 0x2dce0)
- _WinStationGetApplicationInfo (Ordinal: 160, Address: 0x2dd20)
- _WinStationNotifyDisconnectPipe (Ordinal: 161, Address: 0x2dd60)
- _WinStationNotifyLogoff (Ordinal: 162, Address: 0x2dda0)
- _WinStationNotifyLogon (Ordinal: 163, Address: 0x2dde0)
- _WinStationNotifyNewSession (Ordinal: 164, Address: 0x2de20)
- _WinStationOpenSessionDirectory (Ordinal: 165, Address: 0x2de60)
- _WinStationReInitializeSecurity (Ordinal: 166, Address: 0x2dea0)
- _WinStationReadRegistry (Ordinal: 167, Address: 0x1d040)
- _WinStationSessionInitialized (Ordinal: 168, Address: 0x1d040)
- _WinStationShadowTarget (Ordinal: 169, Address: 0x1ccc0)
- _WinStationShadowTarget2 (Ordinal: 170, Address: 0x1cd30)
- _WinStationShadowTargetSetup (Ordinal: 171, Address: 0x1d040)
- _WinStationUpdateClientCachedCredentials (Ordinal: 172, Address: 0x2dee0)
- _WinStationUpdateSettings (Ordinal: 173, Address: 0x2df20)
- _WinStationUpdateUserConfig (Ordinal: 174, Address: 0x2df60)
- _WinStationWaitForConnect (Ordinal: 175, Address: 0xb440)
Imported DLLs & Functions
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18003fd60)
- IsDebuggerPresent (Address: 0x18003fd70)
- OutputDebugStringA (Address: 0x18003fd68)
- OutputDebugStringW (Address: 0x18003fd58)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18003fd80)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18003fd90)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18003fda0)
- SetLastError (Address: 0x18003fdb8)
- SetUnhandledExceptionFilter (Address: 0x18003fdb0)
- UnhandledExceptionFilter (Address: 0x18003fda8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18003fdd0)
- DuplicateHandle (Address: 0x18003fdc8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18003fdf0)
- HeapAlloc (Address: 0x18003fde8)
- HeapFree (Address: 0x18003fde0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x18003fe00)
- LocalFree (Address: 0x18003fe08)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- GetComputerNameW (Address: 0x18003fe18)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x18003fe58)
- FreeLibrary (Address: 0x18003fe50)
- GetModuleFileNameA (Address: 0x18003fe28)
- GetModuleFileNameW (Address: 0x18003fe38)
- GetModuleHandleExA (Address: 0x18003fe30)
- GetModuleHandleExW (Address: 0x18003fe68)
- GetModuleHandleW (Address: 0x18003fe60)
- GetProcAddress (Address: 0x18003fe48)
- LoadLibraryExW (Address: 0x18003fe40)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18003fe78)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x18003fe88)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x18003fec8)
- GetCurrentProcess (Address: 0x18003fee0)
- GetCurrentProcessId (Address: 0x18003fea0)
- GetCurrentThread (Address: 0x18003feb8)
- GetCurrentThreadId (Address: 0x18003fed8)
- GetExitCodeThread (Address: 0x18003fec0)
- OpenProcessToken (Address: 0x18003feb0)
- OpenThreadToken (Address: 0x18003fe98)
- ProcessIdToSessionId (Address: 0x18003fea8)
- TerminateProcess (Address: 0x18003fed0)
api-ms-win-core-processthreads-l1-1-1.dll
- GetProcessMitigationPolicy (Address: 0x18003fef0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18003ff00)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18003ff20)
- RegOpenKeyExW (Address: 0x18003ff18)
- RegQueryValueExW (Address: 0x18003ff10)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18003ff38)
- AcquireSRWLockShared (Address: 0x18003ff70)
- CreateEventW (Address: 0x18003ff80)
- CreateMutexExW (Address: 0x18003ffa0)
- CreateSemaphoreExW (Address: 0x18003ff60)
- DeleteCriticalSection (Address: 0x18003ff90)
- EnterCriticalSection (Address: 0x18003ff88)
- InitializeCriticalSection (Address: 0x18003ff98)
- InitializeCriticalSectionEx (Address: 0x18003ff48)
- LeaveCriticalSection (Address: 0x18003ff50)
- OpenEventW (Address: 0x18003ffb8)
- OpenSemaphoreW (Address: 0x18003ffb0)
- ReleaseMutex (Address: 0x18003ffc0)
- ReleaseSemaphore (Address: 0x18003ff58)
- ReleaseSRWLockExclusive (Address: 0x18003ff30)
- ReleaseSRWLockShared (Address: 0x18003ff68)
- SetEvent (Address: 0x18003ffa8)
- WaitForSingleObject (Address: 0x18003ff78)
- WaitForSingleObjectEx (Address: 0x18003ff40)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x18003ffd0)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x18003ffe8)
- GetTickCount (Address: 0x18003ffe0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180040008)
- CreateThreadpoolTimer (Address: 0x18003fff8)
- SetThreadpoolTimer (Address: 0x180040000)
- WaitForThreadpoolTimerCallbacks (Address: 0x180040010)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- QueueUserWorkItem (Address: 0x180040020)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x180040030)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180040058)
- EventSetInformation (Address: 0x180040040)
- EventUnregister (Address: 0x180040048)
- EventWriteTransfer (Address: 0x180040050)
KERNELBASE.dll
- WTSGetServiceSessionId (Address: 0x18003fd48)
msvcrt.dll
- __C_specific_handler (Address: 0x180040188)
- __CxxFrameHandler3 (Address: 0x180040160)
- __dllonexit (Address: 0x180040138)
- _amsg_exit (Address: 0x1800400e8)
- _callnewh (Address: 0x1800400b0)
- _CxxThrowException (Address: 0x180040080)
- _initterm (Address: 0x180040168)
- _lock (Address: 0x180040158)
- _onexit (Address: 0x180040130)
- _purecall (Address: 0x1800400d8)
- _resetstkoflw (Address: 0x180040178)
- _strnicmp (Address: 0x1800400f0)
- _unlock (Address: 0x180040150)
- _vsnprintf (Address: 0x180040100)
- _vsnwprintf (Address: 0x180040140)
- _wcsicmp (Address: 0x180040098)
- _XcptFilter (Address: 0x180040148)
- ??_V@YAXPEAX@Z (Address: 0x180040170)
- ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800400a0)
- ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180040090)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x180040088)
- ??1exception@@UEAA@XZ (Address: 0x180040070)
- ??1type_info@@UEAA@XZ (Address: 0x1800400a8)
- ??3@YAXPEAX@Z (Address: 0x180040118)
- ?what@exception@@UEBAPEBDXZ (Address: 0x180040068)
- free (Address: 0x180040108)
- malloc (Address: 0x180040110)
- memcmp (Address: 0x180040120)
- memcpy (Address: 0x1800400c0)
- memcpy_s (Address: 0x180040180)
- memmove (Address: 0x180040078)
- memmove_s (Address: 0x1800400e0)
- memset (Address: 0x180040128)
- rand (Address: 0x1800400b8)
- srand (Address: 0x1800400d0)
- time (Address: 0x1800400c8)
- wcscmp (Address: 0x1800400f8)
ntdll.dll
- EtwEventUnregister (Address: 0x1800401f8)
- NtClose (Address: 0x180040220)
- NtOpenProcess (Address: 0x180040238)
- NtOpenProcessToken (Address: 0x180040260)
- NtQueryInformationProcess (Address: 0x180040240)
- NtQueryInformationToken (Address: 0x180040230)
- NtQuerySystemInformation (Address: 0x180040250)
- NtQuerySystemTime (Address: 0x180040258)
- NtTerminateProcess (Address: 0x180040200)
- RtlAdjustPrivilege (Address: 0x180040218)
- RtlAllocateAndInitializeSid (Address: 0x1800401a8)
- RtlCaptureContext (Address: 0x1800401c0)
- RtlCaptureStackBackTrace (Address: 0x1800401a0)
- RtlCopySid (Address: 0x180040210)
- RtlDeleteCriticalSection (Address: 0x1800401f0)
- RtlEnterCriticalSection (Address: 0x1800401e8)
- RtlFreeSid (Address: 0x180040198)
- RtlGetSuiteMask (Address: 0x1800401d0)
- RtlInitializeCriticalSection (Address: 0x1800401d8)
- RtlLeaveCriticalSection (Address: 0x1800401c8)
- RtlLengthSid (Address: 0x180040228)
- RtlLookupFunctionEntry (Address: 0x1800401b8)
- RtlMultiByteToUnicodeN (Address: 0x180040270)
- RtlNtStatusToDosError (Address: 0x180040208)
- RtlUnicodeToMultiByteN (Address: 0x180040248)
- RtlUnicodeToMultiByteSize (Address: 0x1800401e0)
- RtlValidSid (Address: 0x180040268)
- RtlVirtualUnwind (Address: 0x1800401b0)