wkssvc.dll

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800324c8)

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x1800324d8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800324e8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800324f8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180032518)
SetLastError (Address: 0x180032510)
SetUnhandledExceptionFilter (Address: 0x180032520)
UnhandledExceptionFilter (Address: 0x180032508)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180032530)
DefineDosDeviceW (Address: 0x180032540)
QueryDosDeviceW (Address: 0x180032538)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180032550)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180032570)
HeapAlloc (Address: 0x180032568)
HeapFree (Address: 0x180032560)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180032590)
LocalFree (Address: 0x1800325a0)
LocalLock (Address: 0x180032598)
LocalReAlloc (Address: 0x180032588)
LocalUnlock (Address: 0x180032580)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800325b0)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x1800325c0)
GetQueuedCompletionStatus (Address: 0x1800325d0)
PostQueuedCompletionStatus (Address: 0x1800325c8)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

AddLocalAlternateComputerNameW (Address: 0x1800325f0)
DnsHostnameToComputerNameW (Address: 0x1800325e8)
RegisterWaitForSingleObject (Address: 0x1800325e0)

api-ms-win-core-kernel32-private-l1-1-0.dll

DosPathToSessionPathW (Address: 0x180032608)
EnumerateLocalComputerNamesW (Address: 0x180032600)
RemoveLocalAlternateComputerNameW (Address: 0x180032610)
SetLocalPrimaryComputerNameW (Address: 0x180032618)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180032638)
FreeLibrary (Address: 0x180032648)
GetModuleFileNameW (Address: 0x180032628)
GetModuleHandleExW (Address: 0x180032630)
GetProcAddress (Address: 0x180032640)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180032660)
GetCurrentProcess (Address: 0x180032690)
GetCurrentProcessId (Address: 0x180032680)
GetCurrentThread (Address: 0x180032658)
GetCurrentThreadId (Address: 0x180032668)
OpenThreadToken (Address: 0x180032678)
SetThreadToken (Address: 0x180032670)
TerminateProcess (Address: 0x180032688)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x1800326a8)
IsProcessorFeaturePresent (Address: 0x1800326a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800326b8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800326f8)
RegCreateKeyExW (Address: 0x1800326e0)
RegDeleteKeyExW (Address: 0x1800326c8)
RegEnumKeyExW (Address: 0x180032708)
RegFlushKey (Address: 0x1800326d8)
RegGetValueW (Address: 0x1800326d0)
RegNotifyChangeKeyValue (Address: 0x180032718)
RegOpenKeyExW (Address: 0x1800326e8)
RegQueryInfoKeyW (Address: 0x180032710)
RegQueryValueExW (Address: 0x1800326f0)
RegSetValueExW (Address: 0x180032700)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180032730)
RtlCompareMemory (Address: 0x180032738)
RtlLookupFunctionEntry (Address: 0x180032728)
RtlVirtualUnwind (Address: 0x180032740)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x180032750)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180032770)
DeleteCriticalSection (Address: 0x180032760)
EnterCriticalSection (Address: 0x1800327a8)
InitializeCriticalSection (Address: 0x180032788)
LeaveCriticalSection (Address: 0x180032780)
OpenEventW (Address: 0x180032790)
ResetEvent (Address: 0x180032778)
SetEvent (Address: 0x180032768)
WaitForMultipleObjectsEx (Address: 0x180032798)
WaitForSingleObject (Address: 0x1800327a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1800327d0)
GetLocalTime (Address: 0x1800327e8)
GetSystemTimeAsFileTime (Address: 0x1800327b8)
GetTickCount64 (Address: 0x1800327c0)
GetVersion (Address: 0x1800327d8)
GetVersionExW (Address: 0x1800327c8)
GlobalMemoryStatusEx (Address: 0x1800327e0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolCleanupGroup (Address: 0x180032820)
CloseThreadpoolCleanupGroupMembers (Address: 0x180032818)
CloseThreadpoolTimer (Address: 0x180032838)
CloseThreadpoolWait (Address: 0x180032810)
CreateThreadpoolCleanupGroup (Address: 0x180032840)
CreateThreadpoolWait (Address: 0x180032800)
SetThreadpoolTimer (Address: 0x180032828)
SetThreadpoolWait (Address: 0x1800327f8)
TrySubmitThreadpoolCallback (Address: 0x180032848)
WaitForThreadpoolTimerCallbacks (Address: 0x180032830)
WaitForThreadpoolWaitCallbacks (Address: 0x180032808)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx (Address: 0x180032858)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180032960)
__CxxFrameHandler4 (Address: 0x180032918)
__std_terminate (Address: 0x180032910)
_CxxThrowException (Address: 0x180032900)
_o___std_exception_copy (Address: 0x180032958)
_o___std_exception_destroy (Address: 0x180032950)
_o___std_type_info_destroy_list (Address: 0x180032948)
_o___stdio_common_vswprintf (Address: 0x180032938)
_o__callnewh (Address: 0x180032930)
_o__cexit (Address: 0x180032928)
_o__configure_narrow_argv (Address: 0x180032920)
_o__errno (Address: 0x1800328f8)
_o__execute_onexit_table (Address: 0x1800328f0)
_o__initialize_narrow_environment (Address: 0x180032868)
_o__initialize_onexit_table (Address: 0x180032870)
_o__invalid_parameter_noinfo (Address: 0x180032878)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180032880)
_o__itow_s (Address: 0x180032888)
_o__seh_filter_dll (Address: 0x180032890)
_o__wcsicmp (Address: 0x180032940)
_o__wcsnicmp (Address: 0x180032898)
_o_free (Address: 0x1800328a8)
_o_iswalpha (Address: 0x1800328b0)
_o_malloc (Address: 0x1800328b8)
_o_tolower (Address: 0x1800328c0)
_o_towupper (Address: 0x1800328c8)
_o_wcscat_s (Address: 0x1800328d0)
_o_wcscpy_s (Address: 0x1800328d8)
_o_wcsncpy_s (Address: 0x1800328e0)
_o_wcstoul (Address: 0x1800328e8)
memcmp (Address: 0x180032970)
memcpy (Address: 0x180032978)
memmove (Address: 0x1800328a0)
wcschr (Address: 0x180032968)
wcsstr (Address: 0x180032908)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180032990)
_initterm_e (Address: 0x180032988)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800329a0)
wcscmp (Address: 0x1800329a8)
wcsspn (Address: 0x1800329b0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1800329c0)
GetTraceEnableLevel (Address: 0x1800329c8)
GetTraceLoggerHandle (Address: 0x1800329d0)
RegisterTraceGuidsW (Address: 0x1800329e0)
TraceMessage (Address: 0x1800329d8)
UnregisterTraceGuids (Address: 0x1800329e8)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800329f8)
EventUnregister (Address: 0x180032a08)
EventWriteTransfer (Address: 0x180032a00)

api-ms-win-security-activedirectoryclient-l1-1-0.dll

DsBindWithSpnExW (Address: 0x180032a18)
DsCrackNamesW (Address: 0x180032a38)
DsFreeDomainControllerInfoW (Address: 0x180032a40)
DsFreeNameResultW (Address: 0x180032a28)
DsFreePasswordCredentials (Address: 0x180032a30)
DsGetDomainControllerInfoW (Address: 0x180032a50)
DsMakePasswordCredentialsW (Address: 0x180032a20)
DsUnBindW (Address: 0x180032a48)

api-ms-win-security-base-l1-1-0.dll

CheckTokenMembership (Address: 0x180032a68)
CreateWellKnownSid (Address: 0x180032a70)
PrivilegeCheck (Address: 0x180032a78)
RevertToSelf (Address: 0x180032a60)

api-ms-win-security-lsalookup-l1-1-0.dll

LsaLookupClose (Address: 0x180032a90)
LsaLookupFreeMemory (Address: 0x180032a98)
LsaLookupGetDomainInfo (Address: 0x180032a88)
LsaLookupOpenLocalPolicy (Address: 0x180032aa0)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180032ab8)
SetServiceStatus (Address: 0x180032ab0)

api-ms-win-service-private-l1-1-0.dll

I_ScSetServiceBitsW (Address: 0x180032ac8)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x180032ad8)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x180032b18)
BCryptCreateHash (Address: 0x180032b38)
BCryptDecrypt (Address: 0x180032b00)
BCryptDestroyHash (Address: 0x180032b10)
BCryptDestroyKey (Address: 0x180032b20)
BCryptEncrypt (Address: 0x180032b08)
BCryptFinishHash (Address: 0x180032b28)
BCryptGenerateSymmetricKey (Address: 0x180032b40)
BCryptGetProperty (Address: 0x180032af0)
BCryptHashData (Address: 0x180032b30)
BCryptOpenAlgorithmProvider (Address: 0x180032ae8)
BCryptSetProperty (Address: 0x180032af8)

DSPARSE.dll

DsMakeSpnW (Address: 0x180032360)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180032b50)

netutils.dll

NetApiBufferAllocate (Address: 0x180032b80)
NetApiBufferFree (Address: 0x180032b90)
NetpwListCanonicalize (Address: 0x180032b70)
NetpwListTraverse (Address: 0x180032b68)
NetpwNameCanonicalize (Address: 0x180032b88)
NetpwPathCanonicalize (Address: 0x180032b60)
NetpwPathType (Address: 0x180032b78)

ntdll.dll

DbgPrint (Address: 0x180032cf8)
NtAccessCheckAndAuditAlarm (Address: 0x180032c78)
NtClose (Address: 0x180032c68)
NtCreateEvent (Address: 0x180032d20)
NtCreateFile (Address: 0x180032bd8)
NtDeviceIoControlFile (Address: 0x180032c88)
NtFsControlFile (Address: 0x180032c60)
NtOpenFile (Address: 0x180032c58)
NtOpenProcessToken (Address: 0x180032ce0)
NtOpenThreadToken (Address: 0x180032ba0)
NtQueryInformationFile (Address: 0x180032c28)
NtQueryInformationToken (Address: 0x180032c50)
NtQueryVolumeInformationFile (Address: 0x180032be8)
RtlAcquireResourceExclusive (Address: 0x180032c38)
RtlAcquireResourceShared (Address: 0x180032bb0)
RtlAddAce (Address: 0x180032cb0)
RtlAdjustPrivilege (Address: 0x180032c70)
RtlAppendUnicodeStringToString (Address: 0x180032bc8)
RtlAppendUnicodeToString (Address: 0x180032bd0)
RtlCompareUnicodeString (Address: 0x180032bb8)
RtlCopyLuid (Address: 0x180032ba8)
RtlCopySid (Address: 0x180032c98)
RtlCreateAcl (Address: 0x180032ca8)
RtlCreateSecurityDescriptor (Address: 0x180032cb8)
RtlDeleteElementGenericTable (Address: 0x180032d18)
RtlDeleteResource (Address: 0x180032d60)
RtlDeleteSecurityObject (Address: 0x180032cf0)
RtlDeregisterWait (Address: 0x180032d28)
RtlDeregisterWaitEx (Address: 0x180032d10)
RtlEnumerateGenericTable (Address: 0x180032d40)
RtlGetNtProductType (Address: 0x180032c18)
RtlHashUnicodeString (Address: 0x180032d70)
RtlInitializeGenericTable (Address: 0x180032d00)
RtlInitializeResource (Address: 0x180032d68)
RtlInitString (Address: 0x180032d58)
RtlInitUnicodeString (Address: 0x180032c20)
RtlInsertElementGenericTable (Address: 0x180032d30)
RtlIpv4AddressToStringExW (Address: 0x180032c80)
RtlIpv4AddressToStringW (Address: 0x180032c30)
RtlIpv4StringToAddressW (Address: 0x180032bf8)
RtlIpv6AddressToStringExW (Address: 0x180032be0)
RtlIpv6AddressToStringW (Address: 0x180032c10)
RtlIpv6StringToAddressW (Address: 0x180032bf0)
RtlLengthSid (Address: 0x180032ca0)
RtlLookupElementGenericTable (Address: 0x180032d38)
RtlMapSecurityErrorToNtStatus (Address: 0x180032c90)
RtlNewSecurityObject (Address: 0x180032ce8)
RtlNtStatusToDosError (Address: 0x180032d08)
RtlRegisterWait (Address: 0x180032d50)
RtlReleaseResource (Address: 0x180032c40)
RtlRunDecodeUnicodeString (Address: 0x180032c00)
RtlRunEncodeUnicodeString (Address: 0x180032c08)
RtlSetDaclSecurityDescriptor (Address: 0x180032cd0)
RtlSetGroupSecurityDescriptor (Address: 0x180032cc8)
RtlSetOwnerSecurityDescriptor (Address: 0x180032cc0)
RtlSetSaclSecurityDescriptor (Address: 0x180032cd8)
RtlValidRelativeSecurityDescriptor (Address: 0x180032c48)
WinSqmIsOptedIn (Address: 0x180032d48)
WinSqmSetDWORD (Address: 0x180032bc0)

RPCRT4.dll

I_RpcBindingIsClientLocal (Address: 0x180032468)
I_RpcExceptionFilter (Address: 0x180032428)
I_RpcMapWin32Status (Address: 0x180032380)
Ndr64AsyncClientCall (Address: 0x180032440)
Ndr64AsyncServerCallAll (Address: 0x180032410)
NdrAsyncServerCall (Address: 0x180032378)
NdrClientCall3 (Address: 0x180032448)
NdrServerCall2 (Address: 0x1800323b8)
NdrServerCallAll (Address: 0x180032408)
RpcAsyncAbortCall (Address: 0x180032388)
RpcAsyncCancelCall (Address: 0x180032470)
RpcAsyncCompleteCall (Address: 0x1800323a8)
RpcAsyncInitializeHandle (Address: 0x180032460)
RpcBindingFree (Address: 0x1800323f0)
RpcBindingFromStringBindingW (Address: 0x180032438)
RpcBindingServerFromClient (Address: 0x1800323e0)
RpcBindingSetAuthInfoExW (Address: 0x180032478)
RpcBindingSetOption (Address: 0x180032450)
RpcBindingToStringBindingW (Address: 0x180032390)
RpcBindingVectorFree (Address: 0x180032370)
RpcEpRegisterW (Address: 0x180032400)
RpcEpResolveBinding (Address: 0x180032480)
RpcEpUnregister (Address: 0x1800323f8)
RpcImpersonateClient (Address: 0x1800323d0)
RpcMgmtSetComTimeout (Address: 0x180032488)
RpcRevertToSelf (Address: 0x180032458)
RpcServerInqBindings (Address: 0x180032420)
RpcServerInqCallAttributesW (Address: 0x180032418)
RpcServerRegisterIfEx (Address: 0x1800323c8)
RpcServerTestCancel (Address: 0x1800323e8)
RpcServerUnregisterIf (Address: 0x1800323a0)
RpcServerUnregisterIfEx (Address: 0x180032430)
RpcServerUseProtseqEpW (Address: 0x1800323d8)
RpcServerUseProtseqW (Address: 0x180032398)
RpcStringBindingComposeW (Address: 0x180032490)
RpcStringBindingParseW (Address: 0x1800323c0)
RpcStringFreeW (Address: 0x1800323b0)

USERENV.dll

EnterCriticalPolicySection (Address: 0x1800324a0)
LeaveCriticalPolicySection (Address: 0x1800324b0)
RegisterGPNotification (Address: 0x1800324a8)
UnregisterGPNotification (Address: 0x1800324b8)

Exported Functions

Imported DLLs & Functions