credprovs.dll

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1003c094)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1003c0b4)
CoCreateInstance (Address: 0x1003c0bc)
CoGetMalloc (Address: 0x1003c0ac)
CoInitializeEx (Address: 0x1003c0a8)
CoTaskMemAlloc (Address: 0x1003c0b0)
CoTaskMemFree (Address: 0x1003c0c0)
CoTaskMemRealloc (Address: 0x1003c0b8)
CoUninitialize (Address: 0x1003c09c)
PropVariantClear (Address: 0x1003c0a0)
StringFromCLSID (Address: 0x1003c0a4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1003c0d0)
IsDebuggerPresent (Address: 0x1003c0cc)
OutputDebugStringW (Address: 0x1003c0c8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1003c0d8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1003c0e0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1003c0f8)
RaiseException (Address: 0x1003c0f0)
SetLastError (Address: 0x1003c0e8)
SetUnhandledExceptionFilter (Address: 0x1003c0f4)
UnhandledExceptionFilter (Address: 0x1003c0ec)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1003c100)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1003c108)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1003c11c)
HeapAlloc (Address: 0x1003c118)
HeapFree (Address: 0x1003c114)
HeapReAlloc (Address: 0x1003c110)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1003c124)
LocalFree (Address: 0x1003c128)
LocalReAlloc (Address: 0x1003c12c)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1003c134)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x1003c13c)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x1003c144)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1003c154)
FindResourceExW (Address: 0x1003c160)
GetModuleFileNameA (Address: 0x1003c15c)
GetModuleHandleExW (Address: 0x1003c14c)
GetModuleHandleW (Address: 0x1003c158)
GetProcAddress (Address: 0x1003c150)
LoadResource (Address: 0x1003c164)
LockResource (Address: 0x1003c168)
SizeofResource (Address: 0x1003c16c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1003c174)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1003c17c)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1003c190)
GetCurrentProcess (Address: 0x1003c194)
GetCurrentProcessId (Address: 0x1003c184)
GetCurrentThreadId (Address: 0x1003c18c)
TerminateProcess (Address: 0x1003c198)
TerminateThread (Address: 0x1003c188)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1003c1a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1003c1a8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1003c1d4)
RegCreateKeyExW (Address: 0x1003c1c8)
RegEnumKeyExW (Address: 0x1003c1b8)
RegGetValueW (Address: 0x1003c1c4)
RegLoadKeyW (Address: 0x1003c1d8)
RegOpenCurrentUser (Address: 0x1003c1d0)
RegOpenKeyExW (Address: 0x1003c1c0)
RegQueryInfoKeyW (Address: 0x1003c1b0)
RegQueryValueExW (Address: 0x1003c1b4)
RegSetValueExW (Address: 0x1003c1bc)
RegUnLoadKeyW (Address: 0x1003c1cc)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x1003c1e0)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrChrW (Address: 0x1003c1e8)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x1003c1f8)
CompareStringOrdinal (Address: 0x1003c1f0)
CompareStringW (Address: 0x1003c1f4)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1003c200)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1003c208)
AcquireSRWLockShared (Address: 0x1003c220)
CreateEventW (Address: 0x1003c210)
CreateMutexExW (Address: 0x1003c23c)
CreateSemaphoreExW (Address: 0x1003c234)
DeleteCriticalSection (Address: 0x1003c244)
EnterCriticalSection (Address: 0x1003c230)
InitializeCriticalSectionAndSpinCount (Address: 0x1003c21c)
InitializeCriticalSectionEx (Address: 0x1003c240)
LeaveCriticalSection (Address: 0x1003c238)
OpenSemaphoreW (Address: 0x1003c250)
ReleaseMutex (Address: 0x1003c228)
ReleaseSemaphore (Address: 0x1003c224)
ReleaseSRWLockExclusive (Address: 0x1003c24c)
ReleaseSRWLockShared (Address: 0x1003c214)
ResetEvent (Address: 0x1003c20c)
SetEvent (Address: 0x1003c218)
WaitForSingleObject (Address: 0x1003c248)
WaitForSingleObjectEx (Address: 0x1003c22c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1003c260)
InitOnceComplete (Address: 0x1003c258)
InitOnceExecuteOnce (Address: 0x1003c264)
Sleep (Address: 0x1003c25c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1003c270)
GetSystemTimeAsFileTime (Address: 0x1003c274)
GetTickCount (Address: 0x1003c278)
GetVersionExW (Address: 0x1003c26c)

api-ms-win-core-sysinfo-l1-2-0.dll

VerSetConditionMask (Address: 0x1003c280)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1003c290)
CreateThreadpoolTimer (Address: 0x1003c288)
SetThreadpoolTimer (Address: 0x1003c294)
WaitForThreadpoolTimerCallbacks (Address: 0x1003c28c)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1003c29c)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1003c2a8)
EncodePointer (Address: 0x1003c2a4)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x1003c2b0)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1003c2b8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateStringReference (Address: 0x1003c2c0)
WindowsDeleteString (Address: 0x1003c2c4)
WindowsGetStringRawBuffer (Address: 0x1003c2c8)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x1003c350)
__std_terminate (Address: 0x1003c34c)
_CxxThrowException (Address: 0x1003c35c)
_except_handler4_common (Address: 0x1003c31c)
_o___std_exception_copy (Address: 0x1003c340)
_o___std_exception_destroy (Address: 0x1003c33c)
_o___std_type_info_destroy_list (Address: 0x1003c338)
_o___stdio_common_vsnprintf_s (Address: 0x1003c334)
_o___stdio_common_vswprintf (Address: 0x1003c330)
_o__callnewh (Address: 0x1003c324)
_o__cexit (Address: 0x1003c320)
_o__configure_narrow_argv (Address: 0x1003c344)
_o__crt_atexit (Address: 0x1003c348)
_o__errno (Address: 0x1003c32c)
_o__execute_onexit_table (Address: 0x1003c328)
_o__get_errno (Address: 0x1003c2d0)
_o__initialize_narrow_environment (Address: 0x1003c2d4)
_o__initialize_onexit_table (Address: 0x1003c2d8)
_o__invalid_parameter_noinfo (Address: 0x1003c2dc)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1003c2e0)
_o__purecall (Address: 0x1003c2e4)
_o__register_onexit_function (Address: 0x1003c2e8)
_o__seh_filter_dll (Address: 0x1003c2ec)
_o__set_errno (Address: 0x1003c2f0)
_o__wcserror (Address: 0x1003c2f4)
_o_free (Address: 0x1003c2fc)
_o_iswspace (Address: 0x1003c300)
_o_malloc (Address: 0x1003c304)
_o_memcpy_s (Address: 0x1003c308)
_o_realloc (Address: 0x1003c30c)
_o_toupper (Address: 0x1003c310)
_o_wcsncpy_s (Address: 0x1003c314)
_o_wmemcpy_s (Address: 0x1003c318)
memcmp (Address: 0x1003c354)
memcpy (Address: 0x1003c358)
memmove (Address: 0x1003c2f8)
strchr (Address: 0x1003c364)
wcschr (Address: 0x1003c368)
wcsstr (Address: 0x1003c360)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1003c370)
_initterm_e (Address: 0x1003c374)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1003c380)
wcsnlen (Address: 0x1003c37c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1003c388)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1003c398)
EventProviderEnabled (Address: 0x1003c39c)
EventRegister (Address: 0x1003c394)
EventSetInformation (Address: 0x1003c3a0)
EventUnregister (Address: 0x1003c390)
EventWriteTransfer (Address: 0x1003c3a4)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1003c3c0)
GetLengthSid (Address: 0x1003c3b8)
GetSidSubAuthority (Address: 0x1003c3bc)
GetSidSubAuthorityCount (Address: 0x1003c3ac)
ImpersonateLoggedOnUser (Address: 0x1003c3b0)
RevertToSelf (Address: 0x1003c3b4)

api-ms-win-security-credentials-l2-1-1.dll

CredProtectEx (Address: 0x1003c3c8)

api-ms-win-security-lsapolicy-l1-1-0.dll

LsaClose (Address: 0x1003c3dc)
LsaFreeMemory (Address: 0x1003c3d8)
LsaLookupNames2 (Address: 0x1003c3e4)
LsaLookupSids2 (Address: 0x1003c3e8)
LsaOpenPolicy (Address: 0x1003c3d0)
LsaQueryInformationPolicy (Address: 0x1003c3d4)
LsaRetrievePrivateData (Address: 0x1003c3e0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1003c3f0)
ConvertStringSidToSidW (Address: 0x1003c3f4)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x1003c3fc)

CRYPT32.dll

CertCloseStore (Address: 0x1003c014)
CertDuplicateCertificateContext (Address: 0x1003c008)
CertFindCertificateInStore (Address: 0x1003c018)
CertFindExtension (Address: 0x1003c024)
CertFreeCertificateContext (Address: 0x1003c004)
CertGetCertificateContextProperty (Address: 0x1003c020)
CertOpenStore (Address: 0x1003c01c)
CryptBinaryToStringW (Address: 0x1003c00c)
CryptDecodeObjectEx (Address: 0x1003c010)
CryptUnprotectData (Address: 0x1003c000)

CRYPTSP.dll

CryptAcquireContextW (Address: 0x1003c030)
CryptGenRandom (Address: 0x1003c034)
CryptReleaseContext (Address: 0x1003c02c)

msvcp_win.dll

_Wcscoll (Address: 0x1003c414)
_Wcsxfrm (Address: 0x1003c410)
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x1003c43c)
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1003c454)
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x1003c430)
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x1003c408)
?_Incref@facet@locale@std@@UAEXXZ (Address: 0x1003c438)
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x1003c40c)
?_Xbad_alloc@std@@YAXXZ (Address: 0x1003c404)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1003c420)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1003c424)
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1003c458)
??0_Locinfo@std@@QAE@PBD@Z (Address: 0x1003c428)
??0_Lockit@std@@QAE@H@Z (Address: 0x1003c41c)
??0facet@locale@std@@IAE@I@Z (Address: 0x1003c440)
??1_Locinfo@std@@QAE@XZ (Address: 0x1003c42c)
??1_Lockit@std@@QAE@XZ (Address: 0x1003c418)
??1facet@locale@std@@MAE@XZ (Address: 0x1003c444)
??Bid@locale@std@@QAEIXZ (Address: 0x1003c434)
?id@?$collate@G@std@@2V0locale@2@A (Address: 0x1003c45c)
?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1003c460)
?is@?$ctype@G@std@@QBE_NFG@Z (Address: 0x1003c448)
?tolower@?$ctype@G@std@@QBEGG@Z (Address: 0x1003c44c)
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z (Address: 0x1003c450)

netutils.dll

NetApiBufferFree (Address: 0x1003c468)

ntdll.dll

NtQueryWnfStateData (Address: 0x1003c478)
RtlGetDeviceFamilyInfoEnum (Address: 0x1003c480)
RtlGetPersistedStateLocation (Address: 0x1003c490)
RtlInitString (Address: 0x1003c474)
RtlInitUnicodeString (Address: 0x1003c470)
RtlIsMultiSessionSku (Address: 0x1003c484)
RtlNtStatusToDosError (Address: 0x1003c47c)
RtlSubscribeWnfStateChangeNotification (Address: 0x1003c48c)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1003c488)

PROPSYS.dll

InitPropVariantFromCLSID (Address: 0x1003c044)
PropVariantToGUID (Address: 0x1003c040)
PropVariantToStringAlloc (Address: 0x1003c048)
PSCreateMemoryPropertyStore (Address: 0x1003c03c)

samcli.dll

NetUserGetInfo (Address: 0x1003c498)
NetUserSetInfo (Address: 0x1003c49c)

SHCORE.dll

IsOS (Address: 0x1003c054)
SHRegGetValueW (Address: 0x1003c050)

SspiCli.dll

LsaCallAuthenticationPackage (Address: 0x1003c078)
LsaConnectUntrusted (Address: 0x1003c06c)
LsaDeregisterLogonProcess (Address: 0x1003c070)
LsaFreeReturnBuffer (Address: 0x1003c08c)
LsaLookupAuthenticationPackage (Address: 0x1003c060)
SspiCopyAuthIdentity (Address: 0x1003c074)
SspiEncodeAuthIdentityAsStrings (Address: 0x1003c05c)
SspiEncryptAuthIdentityEx (Address: 0x1003c084)
SspiFreeAuthIdentity (Address: 0x1003c088)
SspiGetTargetHostName (Address: 0x1003c080)
SspiLocalFree (Address: 0x1003c07c)
SspiMarshalAuthIdentity (Address: 0x1003c064)
SspiUnmarshalAuthIdentity (Address: 0x1003c068)

Exported Functions

Imported DLLs & Functions