wow64.dll

Description: Win32 Emulation on NT64

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 524beadedb98d8136471759eb2c3c027

File Size: 346.6 KB

Uploaded At: Dec. 1, 2025, 7:45 a.m.

Views: 5

Exported Functions

Wow64AllocThreadHeap (Ordinal: 1, Address: 0x10440)
Wow64AllocateHeap (Ordinal: 2, Address: 0x221a0)
Wow64AllocateTemp (Ordinal: 3, Address: 0x103e0)
Wow64ApcRoutine (Ordinal: 4, Address: 0x10a0)
Wow64CheckIfNXEnabled (Ordinal: 5, Address: 0x22b50)
Wow64DispatchExceptionCHPE (Ordinal: 6, Address: 0x20a70)
Wow64EmulateAtlThunk (Ordinal: 7, Address: 0x22bf0)
Wow64FreeHeap (Ordinal: 8, Address: 0x221d0)
Wow64FreeThreadHeap (Ordinal: 9, Address: 0x10370)
Wow64IsControlFlowGuardEnforced (Ordinal: 10, Address: 0x49f85)
Wow64IsStackExtentsCheckEnforced (Ordinal: 11, Address: 0x1ca0)
Wow64KiUserCallbackDispatcher (Ordinal: 12, Address: 0x34d0)
Wow64LdrpInitialize (Ordinal: 13, Address: 0x3250)
Wow64LogPrint (Ordinal: 14, Address: 0xa090)
Wow64NotifyUnsimulateComplete (Ordinal: 15, Address: 0x210d0)
Wow64PassExceptionToGuest (Ordinal: 16, Address: 0x222b0)
Wow64PrepareForDebuggerAttach (Ordinal: 17, Address: 0x224c0)
Wow64PrepareForException (Ordinal: 18, Address: 0x19e00)
Wow64ProcessPendingCrossProcessItems (Ordinal: 19, Address: 0x23810)
Wow64RaiseException (Ordinal: 20, Address: 0x20c10)
Wow64ShallowThunkAllocObjectAttributes32TO64_FNC (Ordinal: 21, Address: 0x9840)
Wow64ShallowThunkAllocSecurityQualityOfService32TO64_FNC (Ordinal: 22, Address: 0x9fd0)
Wow64ShallowThunkSIZE_T32TO64 (Ordinal: 23, Address: 0xc380)
Wow64ShallowThunkSIZE_T64TO32 (Ordinal: 24, Address: 0xe8e0)
Wow64SuspendLocalProcess (Ordinal: 25, Address: 0x21750)
Wow64SuspendLocalThread (Ordinal: 26, Address: 0x21900)
Wow64SystemServiceEx (Ordinal: 27, Address: 0x8f80)
Wow64ValidateUserCallTarget (Ordinal: 28, Address: 0x22e70)
Wow64ValidateUserCallTargetFilter (Ordinal: 29, Address: 0x22f90)

Imported DLLs & Functions

ntdll.dll

__C_specific_handler (Address: 0x18003ba18)
__chkstk (Address: 0x18003cbd8)
_local_unwind (Address: 0x18003bde0)
_setjmp (Address: 0x18003bdd8)
_vsnprintf (Address: 0x18003ba30)
_vsnwprintf (Address: 0x18003ba40)
CsrAllocateCaptureBuffer (Address: 0x18003ca78)
CsrAllocateMessagePointer (Address: 0x18003bf90)
CsrCaptureMessageBuffer (Address: 0x18003c208)
CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x18003cbd0)
CsrCaptureMessageString (Address: 0x18003c328)
CsrClientCallServer (Address: 0x18003c1e0)
CsrClientConnectToServer (Address: 0x18003c618)
CsrFreeCaptureBuffer (Address: 0x18003c678)
CsrGetProcessId (Address: 0x18003c2e8)
CsrIdentifyAlertableThread (Address: 0x18003c498)
CsrVerifyRegion (Address: 0x18003c790)
DbgPrint (Address: 0x18003bd48)
DbgPrintEx (Address: 0x18003ba38)
DbgPrompt (Address: 0x18003be40)
LdrAddRefDll (Address: 0x18003cbb8)
LdrControlFlowGuardEnforced (Address: 0x18003bd38)
LdrDisableThreadCalloutsForDll (Address: 0x18003bdb8)
LdrGetKnownDllSectionHandle (Address: 0x18003bb18)
LdrGetProcedureAddress (Address: 0x18003ba68)
LdrLoadDll (Address: 0x18003ba58)
LdrLockLoaderLock (Address: 0x18003ba20)
LdrProcessInitializationComplete (Address: 0x18003bcd8)
LdrSystemDllInitBlock (Address: 0x18003baf8)
LdrUnloadDll (Address: 0x18003ba70)
LdrUnlockLoaderLock (Address: 0x18003ba28)
longjmp (Address: 0x18003b9f8)
memcpy (Address: 0x18003b9b8)
memmove (Address: 0x18003bdd0)
memset (Address: 0x18003bdc8)
NtAcceptConnectPort (Address: 0x18003c408)
NtAccessCheck (Address: 0x18003c6d8)
NtAccessCheckAndAuditAlarm (Address: 0x18003be00)
NtAccessCheckByType (Address: 0x18003c688)
NtAccessCheckByTypeAndAuditAlarm (Address: 0x18003c258)
NtAccessCheckByTypeResultList (Address: 0x18003c388)
NtAccessCheckByTypeResultListAndAuditAlarm (Address: 0x18003c768)
NtAccessCheckByTypeResultListAndAuditAlarmByHandle (Address: 0x18003bed0)
NtAcquireCrossVmMutant (Address: 0x18003c550)
NtAcquireProcessActivityReference (Address: 0x18003c5a0)
NtAddAtomEx (Address: 0x18003c5b0)
NtAddBootEntry (Address: 0x18003c198)
NtAddDriverEntry (Address: 0x18003c0b0)
NtAdjustGroupsToken (Address: 0x18003c670)
NtAdjustPrivilegesToken (Address: 0x18003be08)
NtAdjustTokenClaimsAndDeviceGroups (Address: 0x18003c7a0)
NtAlertResumeThread (Address: 0x18003cae8)
NtAlertThread (Address: 0x18003c0c0)
NtAlertThreadByThreadId (Address: 0x18003bc60)
NtAllocateLocallyUniqueId (Address: 0x18003beb8)
NtAllocateReserveObject (Address: 0x18003ca28)
NtAllocateUserPhysicalPages (Address: 0x18003c330)
NtAllocateUserPhysicalPagesEx (Address: 0x18003c7c0)
NtAllocateUuids (Address: 0x18003c8b8)
NtAllocateVirtualMemory (Address: 0x18003bc88)
NtAllocateVirtualMemoryEx (Address: 0x18003c750)
NtAlpcAcceptConnectPort (Address: 0x18003c828)
NtAlpcCancelMessage (Address: 0x18003c1a8)
NtAlpcConnectPort (Address: 0x18003c130)
NtAlpcConnectPortEx (Address: 0x18003bf80)
NtAlpcCreatePort (Address: 0x18003c908)
NtAlpcCreatePortSection (Address: 0x18003caf8)
NtAlpcCreateResourceReserve (Address: 0x18003c338)
NtAlpcCreateSectionView (Address: 0x18003c340)
NtAlpcCreateSecurityContext (Address: 0x18003c410)
NtAlpcDeletePortSection (Address: 0x18003be88)
NtAlpcDeleteResourceReserve (Address: 0x18003c108)
NtAlpcDeleteSectionView (Address: 0x18003c608)
NtAlpcDeleteSecurityContext (Address: 0x18003c950)
NtAlpcDisconnectPort (Address: 0x18003cac8)
NtAlpcImpersonateClientContainerOfPort (Address: 0x18003c090)
NtAlpcImpersonateClientOfPort (Address: 0x18003c3e0)
NtAlpcOpenSenderProcess (Address: 0x18003c448)
NtAlpcOpenSenderThread (Address: 0x18003ca80)
NtAlpcQueryInformation (Address: 0x18003c4f8)
NtAlpcQueryInformationMessage (Address: 0x18003c638)
NtAlpcRevokeSecurityContext (Address: 0x18003c2a8)
NtAlpcSendWaitReceivePort (Address: 0x18003cae0)
NtAlpcSetInformation (Address: 0x18003ca08)
NtApphelpCacheControl (Address: 0x18003c500)
NtAreMappedFilesTheSame (Address: 0x18003c3d8)
NtAssignProcessToJobObject (Address: 0x18003c460)
NtAssociateWaitCompletionPacket (Address: 0x18003c2b0)
NtCallEnclave (Address: 0x18003c868)
NtCancelIoFile (Address: 0x18003c578)
NtCancelIoFileEx (Address: 0x18003c030)
NtCancelSynchronousIoFile (Address: 0x18003bee0)
NtCancelTimer (Address: 0x18003c518)
NtCancelTimer2 (Address: 0x18003ca70)
NtCancelWaitCompletionPacket (Address: 0x18003c420)
NtClearEvent (Address: 0x18003c880)
NtClose (Address: 0x18003bac0)
NtCloseObjectAuditAlarm (Address: 0x18003c540)
NtCommitComplete (Address: 0x18003c970)
NtCommitEnlistment (Address: 0x18003c190)
NtCommitRegistryTransaction (Address: 0x18003c980)
NtCommitTransaction (Address: 0x18003c708)
NtCompactKeys (Address: 0x18003c468)
NtCompareObjects (Address: 0x18003c318)
NtCompareSigningLevels (Address: 0x18003c278)
NtCompareTokens (Address: 0x18003c960)
NtCompleteConnectPort (Address: 0x18003c138)
NtCompressKey (Address: 0x18003c228)
NtConnectPort (Address: 0x18003c818)
NtContinueEx (Address: 0x18003ba08)
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (Address: 0x18003ca58)
NtCopyFileChunk (Address: 0x18003bfd0)
NtCreateCrossVmEvent (Address: 0x18003c580)
NtCreateCrossVmMutant (Address: 0x18003bf68)
NtCreateDebugObject (Address: 0x18003c7e8)
NtCreateDirectoryObject (Address: 0x18003bf10)
NtCreateDirectoryObjectEx (Address: 0x18003bfa8)
NtCreateEnclave (Address: 0x18003c5a8)
NtCreateEnlistment (Address: 0x18003be38)
NtCreateEvent (Address: 0x18003bad0)
NtCreateEventPair (Address: 0x18003c1f0)
NtCreateFile (Address: 0x18003c988)
NtCreateIoCompletion (Address: 0x18003c400)
NtCreateIRTimer (Address: 0x18003cab8)
NtCreateJobObject (Address: 0x18003c378)
NtCreateJobSet (Address: 0x18003bfc8)
NtCreateKey (Address: 0x18003cb90)
NtCreateKeyedEvent (Address: 0x18003c770)
NtCreateKeyTransacted (Address: 0x18003cb88)
NtCreateLowBoxToken (Address: 0x18003c538)
NtCreateMailslotFile (Address: 0x18003be70)
NtCreateMutant (Address: 0x18003c738)
NtCreateNamedPipeFile (Address: 0x18003c290)
NtCreatePagingFile (Address: 0x18003c8e0)
NtCreatePartition (Address: 0x18003c9d8)
NtCreatePort (Address: 0x18003bfe8)
NtCreatePrivateNamespace (Address: 0x18003c5e8)
NtCreateProcess (Address: 0x18003c8e8)
NtCreateProcessEx (Address: 0x18003bf18)
NtCreateProfile (Address: 0x18003c508)
NtCreateProfileEx (Address: 0x18003bdf0)
NtCreateRegistryTransaction (Address: 0x18003c660)
NtCreateResourceManager (Address: 0x18003c0e0)
NtCreateSection (Address: 0x18003bd80)
NtCreateSectionEx (Address: 0x18003c968)
NtCreateSemaphore (Address: 0x18003c848)
NtCreateSymbolicLinkObject (Address: 0x18003c798)
NtCreateThread (Address: 0x18003bc10)
NtCreateThreadEx (Address: 0x18003bc20)
NtCreateTimer (Address: 0x18003c998)
NtCreateTimer2 (Address: 0x18003bf58)
NtCreateToken (Address: 0x18003ca90)
NtCreateTokenEx (Address: 0x18003bf50)
NtCreateTransaction (Address: 0x18003c018)
NtCreateTransactionManager (Address: 0x18003c9f8)
NtCreateUserProcess (Address: 0x18003bbd8)
NtCreateWaitablePort (Address: 0x18003bf20)
NtCreateWaitCompletionPacket (Address: 0x18003c4c0)
NtCreateWnfStateName (Address: 0x18003c078)
NtCreateWorkerFactory (Address: 0x18003c788)
NtDebugActiveProcess (Address: 0x18003c168)
NtDebugContinue (Address: 0x18003ca40)
NtDelayExecution (Address: 0x18003c428)
NtDeleteAtom (Address: 0x18003c5c8)
NtDeleteBootEntry (Address: 0x18003c418)
NtDeleteDriverEntry (Address: 0x18003c000)
NtDeleteFile (Address: 0x18003c310)
NtDeleteKey (Address: 0x18003cb48)
NtDeleteObjectAuditAlarm (Address: 0x18003caa8)
NtDeletePrivateNamespace (Address: 0x18003c710)
NtDeleteValueKey (Address: 0x18003cb60)
NtDeleteWnfStateData (Address: 0x18003c830)
NtDeleteWnfStateName (Address: 0x18003c040)
NtDeviceIoControlFile (Address: 0x18003c4b0)
NtDirectGraphicsCall (Address: 0x18003c9e8)
NtDisableLastKnownGood (Address: 0x18003be80)
NtDisplayString (Address: 0x18003bf30)
NtDrawText (Address: 0x18003c2c0)
NtDuplicateObject (Address: 0x18003bc50)
NtDuplicateToken (Address: 0x18003bfb8)
NtEnableLastKnownGood (Address: 0x18003cad0)
NtEnumerateBootEntries (Address: 0x18003c878)
NtEnumerateDriverEntries (Address: 0x18003c110)
NtEnumerateKey (Address: 0x18003cb50)
NtEnumerateSystemEnvironmentValuesEx (Address: 0x18003c8b0)
NtEnumerateTransactionObject (Address: 0x18003c390)
NtEnumerateValueKey (Address: 0x18003c060)
NtExtendSection (Address: 0x18003c6b0)
NtFilterBootOption (Address: 0x18003bfd8)
NtFilterToken (Address: 0x18003c6c0)
NtFilterTokenEx (Address: 0x18003c740)
NtFindAtom (Address: 0x18003c0e8)
NtFlushBuffersFile (Address: 0x18003c510)
NtFlushBuffersFileEx (Address: 0x18003c158)
NtFlushInstallUILanguage (Address: 0x18003c0c8)
NtFlushKey (Address: 0x18003c308)
NtFlushProcessWriteBuffers (Address: 0x18003c850)
NtFlushVirtualMemory (Address: 0x18003c9a8)
NtFlushWriteBuffer (Address: 0x18003bee8)
NtFreeUserPhysicalPages (Address: 0x18003c690)
NtFreeVirtualMemory (Address: 0x18003bc80)
NtFreezeRegistry (Address: 0x18003c978)
NtFreezeTransactions (Address: 0x18003c150)
NtFsControlFile (Address: 0x18003c5c0)
NtGetCachedSigningLevel (Address: 0x18003c520)
NtGetCompleteWnfStateSubscription (Address: 0x18003bf60)
NtGetContextThread (Address: 0x18003bc48)
NtGetCurrentProcessorNumber (Address: 0x18003c808)
NtGetCurrentProcessorNumberEx (Address: 0x18003c858)
NtGetDevicePowerState (Address: 0x18003c610)
NtGetMUIRegistryInfo (Address: 0x18003bf98)
NtGetNextProcess (Address: 0x18003c008)
NtGetNextThread (Address: 0x18003bc90)
NtGetNlsSectionPtr (Address: 0x18003c700)
NtGetNotificationResourceManager (Address: 0x18003be90)
NtGetWriteWatch (Address: 0x18003c348)
NtImpersonateAnonymousToken (Address: 0x18003c1f8)
NtImpersonateClientOfPort (Address: 0x18003c7f0)
NtImpersonateThread (Address: 0x18003c218)
NtInitializeEnclave (Address: 0x18003c2d8)
NtInitializeNlsFiles (Address: 0x18003c8f0)
NtInitializeRegistry (Address: 0x18003c480)
NtInitiatePowerAction (Address: 0x18003c548)
NtIsProcessInJob (Address: 0x18003c4d8)
NtIsSystemResumeAutomatic (Address: 0x18003bed8)
NtIsUILanguageComitted (Address: 0x18003c2f0)
NtListenPort (Address: 0x18003c238)
NtLoadDriver (Address: 0x18003ca98)
NtLoadEnclaveData (Address: 0x18003c730)
NtLoadKey (Address: 0x18003c1a0)
NtLoadKey2 (Address: 0x18003bfe0)
NtLoadKey3 (Address: 0x18003c9f0)
NtLoadKeyEx (Address: 0x18003c890)
NtLockFile (Address: 0x18003c2f8)
NtLockProductActivationKeys (Address: 0x18003c948)
NtLockRegistryKey (Address: 0x18003bf40)
NtLockVirtualMemory (Address: 0x18003c4a8)
NtMakePermanentObject (Address: 0x18003be98)
NtMakeTemporaryObject (Address: 0x18003c918)
NtManagePartition (Address: 0x18003cac0)
NtMapCMFModule (Address: 0x18003c928)
NtMapUserPhysicalPages (Address: 0x18003c6f0)
NtMapUserPhysicalPagesScatter (Address: 0x18003c568)
NtMapViewOfSection (Address: 0x18003bb20)
NtMapViewOfSectionEx (Address: 0x18003bf08)
NtModifyBootEntry (Address: 0x18003c2a0)
NtModifyDriverEntry (Address: 0x18003c630)
NtNotifyChangeDirectoryFile (Address: 0x18003cad8)
NtNotifyChangeDirectoryFileEx (Address: 0x18003cb10)
NtNotifyChangeKey (Address: 0x18003c350)
NtNotifyChangeMultipleKeys (Address: 0x18003c170)
NtNotifyChangeSession (Address: 0x18003bf48)
NtOpenDirectoryObject (Address: 0x18003bb00)
NtOpenEnlistment (Address: 0x18003c930)
NtOpenEvent (Address: 0x18003c0f8)
NtOpenEventPair (Address: 0x18003c2d0)
NtOpenFile (Address: 0x18003bb68)
NtOpenIoCompletion (Address: 0x18003c718)
NtOpenJobObject (Address: 0x18003c560)
NtOpenKey (Address: 0x18003bd58)
NtOpenKeyedEvent (Address: 0x18003c1c8)
NtOpenKeyEx (Address: 0x18003cb80)
NtOpenKeyTransactedEx (Address: 0x18003cb98)
NtOpenMutant (Address: 0x18003bdf8)
NtOpenObjectAuditAlarm (Address: 0x18003c640)
NtOpenPartition (Address: 0x18003c888)
NtOpenPrivateNamespace (Address: 0x18003c8f8)
NtOpenProcess (Address: 0x18003bbb8)
NtOpenProcessToken (Address: 0x18003bea0)
NtOpenProcessTokenEx (Address: 0x18003be20)
NtOpenRegistryTransaction (Address: 0x18003c990)
NtOpenResourceManager (Address: 0x18003c120)
NtOpenSection (Address: 0x18003bb10)
NtOpenSemaphore (Address: 0x18003c100)
NtOpenSession (Address: 0x18003c528)
NtOpenSymbolicLinkObject (Address: 0x18003bf70)
NtOpenThread (Address: 0x18003bd18)
NtOpenThreadToken (Address: 0x18003c720)
NtOpenThreadTokenEx (Address: 0x18003c370)
NtOpenTimer (Address: 0x18003c2e0)
NtOpenTransaction (Address: 0x18003cab0)
NtOpenTransactionManager (Address: 0x18003c4d0)
NtPowerInformation (Address: 0x18003c3a0)
NtPrepareComplete (Address: 0x18003c230)
NtPrepareEnlistment (Address: 0x18003c4b8)
NtPrePrepareComplete (Address: 0x18003c2c8)
NtPrePrepareEnlistment (Address: 0x18003c210)
NtPrivilegeCheck (Address: 0x18003c800)
NtPrivilegedServiceAuditAlarm (Address: 0x18003c398)
NtPrivilegeObjectAuditAlarm (Address: 0x18003c148)
NtPropagationComplete (Address: 0x18003c0a8)
NtPropagationFailed (Address: 0x18003c840)
NtProtectVirtualMemory (Address: 0x18003ba90)
NtPssCaptureVaSpaceBulk (Address: 0x18003ca48)
NtPulseEvent (Address: 0x18003c440)
NtQueryAttributesFile (Address: 0x18003c488)
NtQueryAuxiliaryCounterFrequency (Address: 0x18003bef0)
NtQueryBootEntryOrder (Address: 0x18003bec0)
NtQueryBootOptions (Address: 0x18003bf28)
NtQueryDebugFilterState (Address: 0x18003c698)
NtQueryDefaultLocale (Address: 0x18003ca38)
NtQueryDefaultUILanguage (Address: 0x18003c7d8)
NtQueryDirectoryFile (Address: 0x18003c9b8)
NtQueryDirectoryFileEx (Address: 0x18003c3c8)
NtQueryDirectoryObject (Address: 0x18003c658)
NtQueryDriverEntryOrder (Address: 0x18003c358)
NtQueryEaFile (Address: 0x18003c3e8)
NtQueryEvent (Address: 0x18003c650)
NtQueryFullAttributesFile (Address: 0x18003cb08)
NtQueryInformationAtom (Address: 0x18003c200)
NtQueryInformationByName (Address: 0x18003c7b8)
NtQueryInformationEnlistment (Address: 0x18003c9b0)
NtQueryInformationFile (Address: 0x18003c668)
NtQueryInformationJobObject (Address: 0x18003c300)
NtQueryInformationPort (Address: 0x18003c6d0)
NtQueryInformationProcess (Address: 0x18003bb40)
NtQueryInformationResourceManager (Address: 0x18003c8a8)
NtQueryInformationThread (Address: 0x18003bbf8)
NtQueryInformationToken (Address: 0x18003c3b0)
NtQueryInformationTransaction (Address: 0x18003c5d8)
NtQueryInformationTransactionManager (Address: 0x18003c4e8)
NtQueryInformationWorkerFactory (Address: 0x18003c038)
NtQueryInstallUILanguage (Address: 0x18003c8d0)
NtQueryIntervalProfile (Address: 0x18003ca60)
NtQueryIoCompletion (Address: 0x18003c588)
NtQueryKey (Address: 0x18003cb40)
NtQueryLicenseValue (Address: 0x18003c6c8)
NtQueryMultipleValueKey (Address: 0x18003be58)
NtQueryMutant (Address: 0x18003c9c0)
NtQueryObject (Address: 0x18003bb70)
NtQueryOpenSubKeys (Address: 0x18003be60)
NtQueryOpenSubKeysEx (Address: 0x18003cb58)
NtQueryPerformanceCounter (Address: 0x18003c178)
NtQueryPortInformationProcess (Address: 0x18003c128)
NtQueryQuotaInformationFile (Address: 0x18003c140)
NtQuerySection (Address: 0x18003ba80)
NtQuerySecurityAttributesToken (Address: 0x18003c958)
NtQuerySecurityObject (Address: 0x18003c9e0)
NtQuerySecurityPolicy (Address: 0x18003c760)
NtQuerySemaphore (Address: 0x18003c5b8)
NtQuerySymbolicLinkObject (Address: 0x18003c160)
NtQuerySystemEnvironmentValue (Address: 0x18003c530)
NtQuerySystemEnvironmentValueEx (Address: 0x18003c7b0)
NtQuerySystemInformation (Address: 0x18003ba78)
NtQuerySystemInformationEx (Address: 0x18003c180)
NtQuerySystemTime (Address: 0x18003bec8)
NtQueryTimer (Address: 0x18003c260)
NtQueryTimerResolution (Address: 0x18003cb00)
NtQueryValueKey (Address: 0x18003bd60)
NtQueryVirtualMemory (Address: 0x18003bd40)
NtQueryVolumeInformationFile (Address: 0x18003c938)
NtQueryWnfStateData (Address: 0x18003c298)
NtQueryWnfStateNameInformation (Address: 0x18003bef8)
NtQueueApcThread (Address: 0x18003c080)
NtQueueApcThreadEx (Address: 0x18003c8d8)
NtQueueApcThreadEx2 (Address: 0x18003c9a0)
NtRaiseException (Address: 0x18003b9d8)
NtRaiseHardError (Address: 0x18003c4a0)
NtReadFile (Address: 0x18003c2b8)
NtReadFileScatter (Address: 0x18003c6a0)
NtReadOnlyEnlistment (Address: 0x18003c1b0)
NtReadRequestData (Address: 0x18003ca88)
NtReadVirtualMemory (Address: 0x18003bbb0)
NtRecoverEnlistment (Address: 0x18003c4e0)
NtRecoverResourceManager (Address: 0x18003c9c8)
NtRecoverTransactionManager (Address: 0x18003be30)
NtRegisterProtocolAddressInformation (Address: 0x18003c598)
NtRegisterThreadTerminatePort (Address: 0x18003c748)
NtReleaseKeyedEvent (Address: 0x18003c360)
NtReleaseMutant (Address: 0x18003c058)
NtReleaseSemaphore (Address: 0x18003c920)
NtReleaseWorkerFactoryWorker (Address: 0x18003ca30)
NtRemoveIoCompletion (Address: 0x18003c628)
NtRemoveIoCompletionEx (Address: 0x18003be68)
NtRemoveProcessDebug (Address: 0x18003c188)
NtRenameKey (Address: 0x18003cb70)
NtRenameTransactionManager (Address: 0x18003c020)
NtReplaceKey (Address: 0x18003c820)
NtReplacePartitionUnit (Address: 0x18003be18)
NtReplyPort (Address: 0x18003bff8)
NtReplyWaitReceivePort (Address: 0x18003c3a8)
NtReplyWaitReceivePortEx (Address: 0x18003c1d0)
NtReplyWaitReplyPort (Address: 0x18003c490)
NtRequestPort (Address: 0x18003cb20)
NtRequestWaitReplyPort (Address: 0x18003c5d0)
NtResetEvent (Address: 0x18003bea8)
NtResetWriteWatch (Address: 0x18003c0d8)
NtRestoreKey (Address: 0x18003cb78)
NtResumeProcess (Address: 0x18003c288)
NtResumeThread (Address: 0x18003bbc8)
NtRevertContainerImpersonation (Address: 0x18003c240)
NtRollbackComplete (Address: 0x18003be78)
NtRollbackEnlistment (Address: 0x18003c7f8)
NtRollbackRegistryTransaction (Address: 0x18003bde8)
NtRollbackTransaction (Address: 0x18003c118)
NtRollforwardTransactionManager (Address: 0x18003bf38)
NtSaveKey (Address: 0x18003cb68)
NtSaveKeyEx (Address: 0x18003c8c8)
NtSaveMergedKeys (Address: 0x18003c8a0)
NtSecureConnectPort (Address: 0x18003c680)
NtSerializeBoot (Address: 0x18003c430)
NtSetBootEntryOrder (Address: 0x18003c320)
NtSetBootOptions (Address: 0x18003c9d0)
NtSetCachedSigningLevel (Address: 0x18003cb18)
NtSetCachedSigningLevel2 (Address: 0x18003c780)
NtSetDebugFilterState (Address: 0x18003c4c8)
NtSetDefaultHardErrorPort (Address: 0x18003c450)
NtSetDefaultLocale (Address: 0x18003c1d8)
NtSetDefaultUILanguage (Address: 0x18003c0a0)
NtSetDriverEntryOrder (Address: 0x18003c4f0)
NtSetEaFile (Address: 0x18003c268)
NtSetEvent (Address: 0x18003bc70)
NtSetEventBoostPriority (Address: 0x18003be28)
NtSetHighEventPair (Address: 0x18003c6e8)
NtSetHighWaitLowEventPair (Address: 0x18003beb0)
NtSetInformationDebugObject (Address: 0x18003c940)
NtSetInformationEnlistment (Address: 0x18003ca10)
NtSetInformationFile (Address: 0x18003c250)
NtSetInformationJobObject (Address: 0x18003c0d0)
NtSetInformationKey (Address: 0x18003c7d0)
NtSetInformationObject (Address: 0x18003c1b8)
NtSetInformationProcess (Address: 0x18003c810)
NtSetInformationResourceManager (Address: 0x18003c600)
NtSetInformationSymbolicLink (Address: 0x18003c380)
NtSetInformationThread (Address: 0x18003bca8)
NtSetInformationToken (Address: 0x18003c248)
NtSetInformationTransaction (Address: 0x18003c860)
NtSetInformationTransactionManager (Address: 0x18003c3b8)
NtSetInformationVirtualMemory (Address: 0x18003c910)
NtSetInformationWorkerFactory (Address: 0x18003caa0)
NtSetIntervalProfile (Address: 0x18003c458)
NtSetIoCompletion (Address: 0x18003bff0)
NtSetIoCompletionEx (Address: 0x18003bf78)
NtSetIRTimer (Address: 0x18003be50)
NtSetLdtEntries (Address: 0x18003caf0)
NtSetLowEventPair (Address: 0x18003c280)
NtSetLowWaitHighEventPair (Address: 0x18003c0f0)
NtSetQuotaInformationFile (Address: 0x18003be48)
NtSetSecurityObject (Address: 0x18003c3c0)
NtSetSystemEnvironmentValue (Address: 0x18003c898)
NtSetSystemEnvironmentValueEx (Address: 0x18003c6a8)
NtSetSystemInformation (Address: 0x18003c220)
NtSetSystemPowerState (Address: 0x18003c1e8)
NtSetSystemTime (Address: 0x18003c7a8)
NtSetThreadExecutionState (Address: 0x18003c838)
NtSetTimer (Address: 0x18003c010)
NtSetTimer2 (Address: 0x18003be10)
NtSetTimerEx (Address: 0x18003c270)
NtSetTimerResolution (Address: 0x18003c6b8)
NtSetUuidSeed (Address: 0x18003ca00)
NtSetValueKey (Address: 0x18003cba0)
NtSetVolumeInformationFile (Address: 0x18003ca68)
NtSetWnfProcessNotificationEvent (Address: 0x18003bf88)
NtShutdownSystem (Address: 0x18003c5f8)
NtShutdownWorkerFactory (Address: 0x18003c590)
NtSignalAndWaitForSingleObject (Address: 0x18003c8c0)
NtSinglePhaseReject (Address: 0x18003bfb0)
NtStartProfile (Address: 0x18003c558)
NtStopProfile (Address: 0x18003ca18)
NtSubscribeWnfStateChange (Address: 0x18003c088)
NtSuspendThread (Address: 0x18003bc40)
NtSystemDebugControl (Address: 0x18003c900)
NtTerminateEnclave (Address: 0x18003c7c8)
NtTerminateJobObject (Address: 0x18003c478)
NtTerminateProcess (Address: 0x18003bbe8)
NtTerminateThread (Address: 0x18003bb48)
NtTestAlert (Address: 0x18003ba10)
NtThawRegistry (Address: 0x18003bfa0)
NtThawTransactions (Address: 0x18003c728)
NtTraceControl (Address: 0x18003c778)
NtTraceEvent (Address: 0x18003bf00)
NtTranslateFilePath (Address: 0x18003c3f8)
NtUnloadDriver (Address: 0x18003c050)
NtUnloadKey (Address: 0x18003c620)
NtUnloadKey2 (Address: 0x18003c470)
NtUnloadKeyEx (Address: 0x18003c068)
NtUnlockFile (Address: 0x18003c1c0)
NtUnlockVirtualMemory (Address: 0x18003c648)
NtUnmapViewOfSection (Address: 0x18003bb30)
NtUnmapViewOfSectionEx (Address: 0x18003c048)
NtUnsubscribeWnfStateChange (Address: 0x18003c070)
NtUpdateWnfStateData (Address: 0x18003c7e0)
NtWaitForAlertByThreadId (Address: 0x18003bc78)
NtWaitForDebugEvent (Address: 0x18003bfc0)
NtWaitForKeyedEvent (Address: 0x18003c570)
NtWaitForMultipleObjects (Address: 0x18003bc58)
NtWaitForMultipleObjects32 (Address: 0x18003c3d0)
NtWaitForSingleObject (Address: 0x18003bcb0)
NtWaitForWorkViaWorkerFactory (Address: 0x18003c3f0)
NtWaitHighEventPair (Address: 0x18003c098)
NtWaitLowEventPair (Address: 0x18003c5f0)
NtWorkerFactoryWorkerReady (Address: 0x18003c0b8)
NtWriteFile (Address: 0x18003c028)
NtWriteFileGather (Address: 0x18003c758)
NtWriteRequestData (Address: 0x18003ca50)
NtWriteVirtualMemory (Address: 0x18003c870)
NtYieldExecution (Address: 0x18003c6f8)
RtlAcquireSRWLockExclusive (Address: 0x18003baa8)
RtlAcquireSRWLockShared (Address: 0x18003bcb8)
RtlAllocateHeap (Address: 0x18003bcf0)
RtlAppendUnicodeStringToString (Address: 0x18003bb88)
RtlAppendUnicodeToString (Address: 0x18003bb80)
RtlCaptureContext (Address: 0x18003b9c0)
RtlCompleteProcessCloning (Address: 0x18003bbe0)
RtlCopyContext (Address: 0x18003bc00)
RtlCopySid (Address: 0x18003c5e0)
RtlCopyUnicodeString (Address: 0x18003bb78)
RtlCreateHashTable (Address: 0x18003baa0)
RtlCreateProcessParametersEx (Address: 0x18003cbb0)
RtlCreateProcessParametersWithTemplate (Address: 0x18003bbc0)
RtlDecodeSystemPointer (Address: 0x18003cbc8)
RtlDestroyProcessParameters (Address: 0x18003bbf0)
RtlEncodeSystemPointer (Address: 0x18003cbc0)
RtlEqualUnicodeString (Address: 0x18003bba0)
RtlExpandEnvironmentStrings_U (Address: 0x18003cba8)
RtlFindExportedRoutineByName (Address: 0x18003bb28)
RtlFreeHeap (Address: 0x18003bcf8)
RtlGetCurrentProcessorNumberEx (Address: 0x18003c368)
RtlGetEnabledExtendedFeatures (Address: 0x18003bce0)
RtlGetExtendedContextLength (Address: 0x18003b9e8)
RtlGetNextEntryHashTable (Address: 0x18003bcc8)
RtlGetNtSystemRoot (Address: 0x18003ba48)
RtlImageDirectoryEntryToData (Address: 0x18003bb58)
RtlImageNtHeader (Address: 0x18003bb50)
RtlImageNtHeaderEx (Address: 0x18003ba88)
RtlInitAnsiString (Address: 0x18003ba60)
RtlInitAnsiStringEx (Address: 0x18003bd70)
RtlInitializeBitMapEx (Address: 0x18003bd28)
RtlInitializeExtendedContext (Address: 0x18003b9f0)
RtlInitializeSRWLock (Address: 0x18003ba98)
RtlInitUnicodeString (Address: 0x18003ba50)
RtlInitUnicodeStringEx (Address: 0x18003bb08)
RtlInsertEntryHashTable (Address: 0x18003bae8)
RtlIsCurrentProcess (Address: 0x18003bc28)
RtlIsCurrentThread (Address: 0x18003bc98)
RtlIsProcessorFeaturePresent (Address: 0x18003bd78)
RtlLengthSid (Address: 0x18003c438)
RtlLocateLegacyContext (Address: 0x18003bce8)
RtlLookupEntryHashTable (Address: 0x18003bcc0)
RtlLookupFunctionEntry (Address: 0x18003b9c8)
RtlNtdllName (Address: 0x18003bb60)
RtlNtStatusToDosError (Address: 0x18003bd08)
RtlpQueryProcessDebugInformationFromWow64 (Address: 0x18003bd50)
RtlPrefixUnicodeString (Address: 0x18003bb90)
RtlPrepareForProcessCloning (Address: 0x18003bbd0)
RtlQueryEnvironmentVariable_U (Address: 0x18003bd20)
RtlRaiseException (Address: 0x18003bd00)
RtlRaiseStatus (Address: 0x18003bba8)
RtlReleaseSRWLockExclusive (Address: 0x18003bab8)
RtlReleaseSRWLockShared (Address: 0x18003bcd0)
RtlRemoveEntryHashTable (Address: 0x18003bab0)
RtlTestBitEx (Address: 0x18003bd30)
RtlUnhandledExceptionFilter (Address: 0x18003bdc0)
RtlUpcaseUnicodeChar (Address: 0x18003cb30)
RtlUpcaseUnicodeString (Address: 0x18003cb28)
RtlUpdateClonedSRWLock (Address: 0x18003bc30)
RtlUserThreadStart (Address: 0x18003bb38)
RtlVirtualUnwind (Address: 0x18003b9d0)
RtlWaitOnAddress (Address: 0x18003bc38)
RtlWakeAddressAll (Address: 0x18003bc68)
RtlWow64GetCpuAreaInfo (Address: 0x18003b9e0)
RtlWow64GetCurrentCpuArea (Address: 0x18003ba00)
RtlWow64GetCurrentMachine (Address: 0x18003bc18)
RtlWow64GetEquivalentMachineCHPE (Address: 0x18003bd10)
RtlWow64GetProcessMachines (Address: 0x18003bc08)
RtlWow64GetSharedInfoProcess (Address: 0x18003bd90)
RtlWow64GetThreadSelectorEntry (Address: 0x18003c6e0)
RtlWow64IsWowGuestMachineSupported (Address: 0x18003cb38)
RtlWow64PopAllCrossProcessWorkFromWorkList (Address: 0x18003bd98)
RtlWow64PopCrossProcessWorkFromFreeList (Address: 0x18003bda0)
RtlWow64PushCrossProcessWorkOntoFreeList (Address: 0x18003bd88)
RtlWow64PushCrossProcessWorkOntoWorkList (Address: 0x18003bdb0)
RtlWow64RequestCrossProcessHeavyFlush (Address: 0x18003bda8)
RtlWow64SuspendProcess (Address: 0x18003ca20)
RtlWow64SuspendThread (Address: 0x18003bca0)
TpAllocWait (Address: 0x18003bad8)
TpReleaseWait (Address: 0x18003bac8)
TpSetWait (Address: 0x18003bae0)
TpSetWaitEx (Address: 0x18003baf0)
wcscmp (Address: 0x18003cbe0)
wcsncmp (Address: 0x18003bb98)
wcsrchr (Address: 0x18003bd68)

wow64win.dll

sdwhcon (Address: 0x18003cbf0)
sdwhwin32 (Address: 0x18003cbf8)