FirewallAPI.dll

Description: Windows Defender Firewall API

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6328

Architecture: 32-bit

Operating System: Windows NT

SHA256: cf22221f261f872e7d3f20213b4f4347

File Size: 392.5 KB

Uploaded At: Dec. 1, 2025, 7:56 a.m.

Views: 7

Exported Functions

  • FwBstrToInterfaceTypes (Ordinal: 1, Address: 0x253e0)
  • FwBstrToPorts (Ordinal: 2, Address: 0x254d0)
  • FwGetCurrentProfile (Ordinal: 3, Address: 0x27ac0)
  • FwGetVersionField (Ordinal: 4, Address: 0x25700)
  • FwInterfaceTypesToBstr (Ordinal: 5, Address: 0x25bf0)
  • GetDisabledInterfaces (Ordinal: 6, Address: 0x27b60)
  • NetworkIsolationFreeAppContainers (Ordinal: 7, Address: 0x13e60)
  • DllCanUnloadNow (Ordinal: 8, Address: 0x13cc0)
  • DllGetClassObject (Ordinal: 9, Address: 0x13dc0)
  • DllRegisterServer (Ordinal: 10, Address: 0x24160)
  • DllUnregisterServer (Ordinal: 11, Address: 0x24180)
  • FWAddAuthenticationSet (Ordinal: 12, Address: 0x40ed0)
  • FWAddConnectionSecurityRule (Ordinal: 13, Address: 0x41060)
  • FWAddCryptoSet (Ordinal: 14, Address: 0x411e0)
  • FWAddDynamicKeywordAddress0 (Ordinal: 15, Address: 0x194a0)
  • FWAddDynamicKeywordAddress_Int (Ordinal: 16, Address: 0x19540)
  • FWAddFirewallRule (Ordinal: 17, Address: 0x41330)
  • FWAddFirewallRuleWithRemoteDynamicKeywordAddresses (Ordinal: 18, Address: 0x196d0)
  • FWAddMainModeRule (Ordinal: 19, Address: 0x41560)
  • FWAddSecurityRealm (Ordinal: 20, Address: 0x41690)
  • FWChangeNotificationCreate (Ordinal: 21, Address: 0x13df0)
  • FWChangeNotificationDestroy (Ordinal: 22, Address: 0x28e50)
  • FWChangeTransactionalState (Ordinal: 23, Address: 0x41890)
  • FWClosePolicyStore (Ordinal: 24, Address: 0x14e80)
  • FWCopyAuthenticationSet (Ordinal: 25, Address: 0x41a30)
  • FWCopyConnectionSecurityRule (Ordinal: 26, Address: 0x41a80)
  • FWCopyCryptoSet (Ordinal: 27, Address: 0x41ad0)
  • FWCopyDynamicKeywordRuleLink (Ordinal: 28, Address: 0x199a0)
  • FWCopyFirewallRule (Ordinal: 29, Address: 0x41b20)
  • FWDeleteAllAuthenticationSets (Ordinal: 30, Address: 0x41b70)
  • FWDeleteAllConnectionSecurityRules (Ordinal: 31, Address: 0x41c60)
  • FWDeleteAllCryptoSets (Ordinal: 32, Address: 0x41d50)
  • FWDeleteAllFirewallRules (Ordinal: 33, Address: 0x41e40)
  • FWDeleteAllMainModeRules (Ordinal: 34, Address: 0x41f30)
  • FWDeleteAuthenticationSet (Ordinal: 35, Address: 0x42020)
  • FWDeleteConnectionSecurityRule (Ordinal: 36, Address: 0x42110)
  • FWDeleteCryptoSet (Ordinal: 37, Address: 0x42200)
  • FWDeleteDynamicKeywordAddress0 (Ordinal: 38, Address: 0x199c0)
  • FWDeleteDynamicKeywordAddress_Int (Ordinal: 39, Address: 0x19a80)
  • FWDeleteFirewallRule (Ordinal: 40, Address: 0x422f0)
  • FWDeleteMainModeRule (Ordinal: 41, Address: 0x423e0)
  • FWDeletePhase1SAs (Ordinal: 42, Address: 0x424d0)
  • FWDeletePhase2SAs (Ordinal: 43, Address: 0x425b0)
  • FWDeleteSecurityRealm (Ordinal: 44, Address: 0x42690)
  • FWDiagGetAppList (Ordinal: 45, Address: 0x426b0)
  • FWEnumAdapters (Ordinal: 46, Address: 0x42770)
  • FWEnumAuthenticationSets (Ordinal: 47, Address: 0x42830)
  • FWEnumConnectionSecurityRules (Ordinal: 48, Address: 0x429c0)
  • FWEnumCryptoSets (Ordinal: 49, Address: 0x42b50)
  • FWEnumDynamicKeywordAddressById0 (Ordinal: 50, Address: 0x19be0)
  • FWEnumDynamicKeywordAddressesByType0 (Ordinal: 51, Address: 0x19ca0)
  • FWEnumDynamicKeywordAddresses_Int (Ordinal: 52, Address: 0x19d60)
  • FWEnumDynamicKeywordRuleLinkById (Ordinal: 53, Address: 0x19f50)
  • FWEnumDynamicKeywordRuleLinksByStore (Ordinal: 54, Address: 0x19f70)
  • FWEnumFirewallRules (Ordinal: 55, Address: 0x12a80)
  • FWEnumMainModeRules (Ordinal: 56, Address: 0x42cb0)
  • FWEnumNetworks (Ordinal: 57, Address: 0x42df0)
  • FWEnumPhase1SAs (Ordinal: 58, Address: 0x42eb0)
  • FWEnumPhase2SAs (Ordinal: 59, Address: 0x42fa0)
  • FWEnumProducts (Ordinal: 60, Address: 0x43090)
  • FWExportPolicy (Ordinal: 61, Address: 0x43150)
  • FWFreeAdapters (Ordinal: 62, Address: 0x13e60)
  • FWFreeAuthenticationSet (Ordinal: 63, Address: 0x432b0)
  • FWFreeAuthenticationSets (Ordinal: 64, Address: 0x432c0)
  • FWFreeAuthenticationSetsByHandle (Ordinal: 65, Address: 0x43360)
  • FWFreeConnectionSecurityRule (Ordinal: 66, Address: 0x43420)
  • FWFreeConnectionSecurityRules (Ordinal: 67, Address: 0x43430)
  • FWFreeConnectionSecurityRulesByHandle (Ordinal: 68, Address: 0x434d0)
  • FWFreeCryptoSet (Ordinal: 69, Address: 0x43590)
  • FWFreeCryptoSets (Ordinal: 70, Address: 0x435a0)
  • FWFreeCryptoSetsByHandle (Ordinal: 71, Address: 0x43640)
  • FWFreeDiagAppList (Ordinal: 72, Address: 0x13e60)
  • FWFreeDynamicKeywordAddressData0 (Ordinal: 73, Address: 0x19f90)
  • FWFreeDynamicKeywordRuleLinks (Ordinal: 74, Address: 0x19fe0)
  • FWFreeFirewallRule (Ordinal: 75, Address: 0x43720)
  • FWFreeFirewallRules (Ordinal: 76, Address: 0x12890)
  • FWFreeFirewallRulesByHandle (Ordinal: 77, Address: 0x43730)
  • FWFreeFirewallRulesOld (Ordinal: 78, Address: 0x437f0)
  • FWFreeMainModeRule (Ordinal: 79, Address: 0x43890)
  • FWFreeMainModeRules (Ordinal: 80, Address: 0x438a0)
  • FWFreeMainModeRulesByHandle (Ordinal: 81, Address: 0x43940)
  • FWFreeNetworks (Ordinal: 82, Address: 0x13e60)
  • FWFreePhase1SAs (Ordinal: 83, Address: 0x43a00)
  • FWFreePhase2SAs (Ordinal: 84, Address: 0x43ac0)
  • FWFreeProducts (Ordinal: 85, Address: 0x13e60)
  • FWGetConfig2 (Ordinal: 86, Address: 0x12660)
  • FWGetConfig (Ordinal: 87, Address: 0x149a0)
  • FWGetGlobalConfig2 (Ordinal: 88, Address: 0x19ff0)
  • FWGetGlobalConfig3 (Ordinal: 89, Address: 0x43b60)
  • FWGetGlobalConfig (Ordinal: 90, Address: 0x1a130)
  • FWGetIndicatedPortInUse (Ordinal: 91, Address: 0x17070)
  • FWImportPolicy (Ordinal: 92, Address: 0x43c70)
  • FWIndicatePortInUse (Ordinal: 93, Address: 0x149d0)
  • FWIndicateProxyForUrl (Ordinal: 94, Address: 0x43dd0)
  • FWIndicateProxyResolverRefresh (Ordinal: 95, Address: 0x43ef0)
  • FWIndicateTupleInUse2 (Ordinal: 96, Address: 0x43f00)
  • FWIndicateTupleInUse (Ordinal: 97, Address: 0x44040)
  • FWIsTargetAProxy (Ordinal: 98, Address: 0x44180)
  • FWOpenPolicyStore (Ordinal: 99, Address: 0x15d50)
  • FWQueryAuthenticationSets (Ordinal: 100, Address: 0x44360)
  • FWQueryConnectionSecurityRules (Ordinal: 101, Address: 0x44470)
  • FWQueryCryptoSets (Ordinal: 102, Address: 0x44580)
  • FWQueryFirewallRules (Ordinal: 103, Address: 0x16750)
  • FWQueryIsolationType (Ordinal: 104, Address: 0x44690)
  • FWQueryMainModeRules (Ordinal: 105, Address: 0x447d0)
  • FWRegisterProduct (Ordinal: 106, Address: 0x448d0)
  • FWResetIndicatedPortInUse (Ordinal: 107, Address: 0x16fc0)
  • FWResetIndicatedTupleInUse (Ordinal: 108, Address: 0x172f0)
  • FWRestoreDefaults (Ordinal: 109, Address: 0x44a30)
  • FWRestoreGPODefaults (Ordinal: 110, Address: 0x44cd0)
  • FWRevertTransaction (Ordinal: 111, Address: 0x44e40)
  • FWSelectConSecRule (Ordinal: 112, Address: 0x44f70)
  • FWSetAuthenticationSet (Ordinal: 113, Address: 0x450e0)
  • FWSetConfig (Ordinal: 114, Address: 0x45270)
  • FWSetConnectionSecurityRule (Ordinal: 115, Address: 0x45360)
  • FWSetCryptoSet (Ordinal: 116, Address: 0x454e0)
  • FWSetFirewallRule (Ordinal: 117, Address: 0x45630)
  • FWSetFirewallRuleWithRemoteDynamicKeywordAddresses (Ordinal: 118, Address: 0x1a160)
  • FWSetGlobalConfig2 (Ordinal: 119, Address: 0x45860)
  • FWSetGlobalConfig (Ordinal: 120, Address: 0x459b0)
  • FWSetMainModeRule (Ordinal: 121, Address: 0x45af0)
  • FWStatusMessageFromStatusCode (Ordinal: 122, Address: 0x45c20)
  • FWUnregisterProduct (Ordinal: 123, Address: 0x45dc0)
  • FWUpdateDynamicKeywordAddress0 (Ordinal: 124, Address: 0x1a430)
  • FWUpdateDynamicKeywordAddress_Int (Ordinal: 125, Address: 0x1a4f0)
  • FWVerifyAuthenticationSet (Ordinal: 126, Address: 0x45e70)
  • FWVerifyAuthenticationSetQuery (Ordinal: 127, Address: 0x45ec0)
  • FWVerifyConnectionSecurityRule (Ordinal: 128, Address: 0x45f10)
  • FWVerifyConnectionSecurityRuleQuery (Ordinal: 129, Address: 0x45f60)
  • FWVerifyCryptoSet (Ordinal: 130, Address: 0x45fb0)
  • FWVerifyCryptoSetQuery (Ordinal: 131, Address: 0x46000)
  • FWVerifyFirewallRule (Ordinal: 132, Address: 0x46050)
  • FWVerifyFirewallRuleQuery (Ordinal: 133, Address: 0x14870)
  • FWVerifyMainModeRule (Ordinal: 134, Address: 0x460a0)
  • FWVerifyMainModeRuleQuery (Ordinal: 135, Address: 0x460f0)
  • FwActivate (Ordinal: 136, Address: 0x29fc0)
  • FwAlloc (Ordinal: 137, Address: 0x12cc0)
  • FwAllocCheckSize (Ordinal: 138, Address: 0x172c0)
  • FwAllowedProgramsAdd (Ordinal: 139, Address: 0x2bc40)
  • FwAllowedProgramsDelete (Ordinal: 140, Address: 0x2bd90)
  • FwAnalyzeFirewallPolicy (Ordinal: 141, Address: 0x14000)
  • FwAnalyzeFirewallPolicyOnProfile (Ordinal: 142, Address: 0x14d00)
  • FwApiHelperFree (Ordinal: 143, Address: 0x2bec0)
  • FwApiHelperInit (Ordinal: 144, Address: 0x2bf30)
  • FwConvertIPv6SubNetToRange (Ordinal: 145, Address: 0x46140)
  • FwCopyAuthSet (Ordinal: 146, Address: 0x46150)
  • FwCopyMainModeRule (Ordinal: 147, Address: 0x461a0)
  • FwCopyWFAddressesContents (Ordinal: 148, Address: 0x461f0)
  • FwEmptyWFAddresses (Ordinal: 149, Address: 0x13e50)
  • FwFree (Ordinal: 150, Address: 0x13e60)
  • FwFreeAddresses (Ordinal: 151, Address: 0x13e50)
  • FwFreePorts (Ordinal: 152, Address: 0x46240)
  • FwGetAddressesAsString (Ordinal: 153, Address: 0x46270)
  • FwIcmpSettingsEnum (Ordinal: 154, Address: 0x2bfd0)
  • FwIcmpSettingsSet (Ordinal: 155, Address: 0x2c110)
  • FwIsGroupPolicyEnforced (Ordinal: 156, Address: 0x12760)
  • FwIsRemoteManagementEnabled (Ordinal: 157, Address: 0x12920)
  • FwLogSettingsSet (Ordinal: 158, Address: 0x2c240)
  • FwMergeAddresses (Ordinal: 159, Address: 0x462d0)
  • FwMulticastBroadcastResponsesEnum (Ordinal: 160, Address: 0x2c3f0)
  • FwMulticastBroadcastResponsesSet (Ordinal: 161, Address: 0x2c520)
  • FwNotificationsEnum (Ordinal: 162, Address: 0x2c650)
  • FwNotificationsSet (Ordinal: 163, Address: 0x2c780)
  • FwOpModesEnum (Ordinal: 164, Address: 0x2c8b0)
  • FwOpModesSet (Ordinal: 165, Address: 0x2c9e0)
  • FwPortOpeningsAdd (Ordinal: 166, Address: 0x2cb00)
  • FwPortOpeningsDelete (Ordinal: 167, Address: 0x2cc50)
  • FwProfileTypeCurrentGet (Ordinal: 168, Address: 0x2cd80)
  • FwProfileTypeGet (Ordinal: 169, Address: 0x2ce00)
  • FwRestoreDefaults (Ordinal: 170, Address: 0x2ce80)
  • FwServicesEnum (Ordinal: 171, Address: 0x2cef0)
  • FwServicesSet (Ordinal: 172, Address: 0x2d080)
  • FwStringToAddresses (Ordinal: 173, Address: 0x462e0)
  • FwStringToPorts (Ordinal: 174, Address: 0x46370)
  • IcfAddrChangeNotificationCreate (Ordinal: 175, Address: 0x28dd0)
  • IcfChangeNotificationCreate (Ordinal: 176, Address: 0x13df0)
  • IcfChangeNotificationDestroy (Ordinal: 177, Address: 0x28e50)
  • IcfConnect (Ordinal: 178, Address: 0x28ec0)
  • IcfDisconnect (Ordinal: 179, Address: 0x16620)
  • IcfFreeDynamicFwPorts (Ordinal: 180, Address: 0x28ee0)
  • IcfFreeProfile (Ordinal: 181, Address: 0x28f60)
  • IcfFreeTickets (Ordinal: 182, Address: 0x29170)
  • IcfGetCurrentProfileType (Ordinal: 183, Address: 0x291e0)
  • IcfGetDynamicFwPorts (Ordinal: 184, Address: 0x29270)
  • IcfGetOperationalMode (Ordinal: 185, Address: 0x294e0)
  • IcfGetProfile (Ordinal: 186, Address: 0x29610)
  • IcfGetTickets (Ordinal: 187, Address: 0x298c0)
  • IcfIsPortAllowed (Ordinal: 188, Address: 0x2db30)
  • IcfOpenDynamicFwPortWithoutSocket (Ordinal: 189, Address: 0x29b00)
  • IcfSubNetsGetScope (Ordinal: 190, Address: 0x29b10)
  • IsFirewallInCoExistanceMode (Ordinal: 191, Address: 0x2a0a0)
  • IsPortOrICMPAllowed (Ordinal: 192, Address: 0x2dbe0)
  • NetworkIsolationAddAllowEnterpriseIdRule (Ordinal: 193, Address: 0x46410)
  • NetworkIsolationCreateAllInterfacesContainer (Ordinal: 194, Address: 0x46570)
  • NetworkIsolationCreateAppContainer (Ordinal: 195, Address: 0x16850)
  • NetworkIsolationCreateAppContainerLoopbackRules (Ordinal: 196, Address: 0x46770)
  • NetworkIsolationCreateContainer (Ordinal: 197, Address: 0x469f0)
  • NetworkIsolationCreateInterfaceContainer (Ordinal: 198, Address: 0x46cd0)
  • NetworkIsolationDeleteAllInterfacesContainer (Ordinal: 199, Address: 0x46ed0)
  • NetworkIsolationDeleteAllowEnterpriseIdRule (Ordinal: 200, Address: 0x47060)
  • NetworkIsolationDeleteAppContainer (Ordinal: 201, Address: 0x16b70)
  • NetworkIsolationDeleteAppContainerLoopbackRules (Ordinal: 202, Address: 0x47150)
  • NetworkIsolationDeleteContainer (Ordinal: 203, Address: 0x473d0)
  • NetworkIsolationDeleteInterfaceContainer (Ordinal: 204, Address: 0x47690)
  • NetworkIsolationDeleteUserAppContainers (Ordinal: 205, Address: 0x477a0)
  • NetworkIsolationDiagnoseConnectFailure (Ordinal: 206, Address: 0x13e70)
  • NetworkIsolationDiagnoseConnectFailureAndGetInfo (Ordinal: 207, Address: 0x479b0)
  • NetworkIsolationDiagnoseListen (Ordinal: 208, Address: 0x47af0)
  • NetworkIsolationDiagnoseSocketCreation (Ordinal: 209, Address: 0x47bf0)
  • NetworkIsolationEnumAppContainers (Ordinal: 210, Address: 0x47ce0)
  • NetworkIsolationEnumerateAppContainerRules (Ordinal: 211, Address: 0x47e60)
  • NetworkIsolationGetAppContainer (Ordinal: 212, Address: 0x47f10)
  • NetworkIsolationGetAppContainerConfig (Ordinal: 213, Address: 0x16670)
  • NetworkIsolationGetEnterpriseId (Ordinal: 214, Address: 0x48060)
  • NetworkIsolationGetEnterpriseIdAsync (Ordinal: 215, Address: 0x480e0)
  • NetworkIsolationGetEnterpriseIdClose (Ordinal: 216, Address: 0x48480)
  • NetworkIsolationRegisterForAppContainerChanges (Ordinal: 217, Address: 0x48670)
  • NetworkIsolationSetAppContainerConfig (Ordinal: 218, Address: 0x48a30)
  • NetworkIsolationSetupAppContainerBinaries (Ordinal: 219, Address: 0x16e10)
  • NetworkIsolationUnregisterForAppContainerChanges (Ordinal: 220, Address: 0x48b50)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x10055094)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x10055104)
  • CStdStubBuffer2_CountRefs (Address: 0x100550c8)
  • CStdStubBuffer2_Disconnect (Address: 0x100550b0)
  • CStdStubBuffer2_QueryInterface (Address: 0x100550c0)
  • NdrProxyForwardingFunction3 (Address: 0x100550fc)
  • NdrProxyForwardingFunction4 (Address: 0x100550d0)
  • NdrProxyForwardingFunction5 (Address: 0x100550d4)
  • NdrProxyForwardingFunction6 (Address: 0x100550ac)
  • ObjectStublessClient10 (Address: 0x100550e8)
  • ObjectStublessClient11 (Address: 0x10055108)
  • ObjectStublessClient12 (Address: 0x100550ec)
  • ObjectStublessClient13 (Address: 0x100550b8)
  • ObjectStublessClient14 (Address: 0x100550cc)
  • ObjectStublessClient15 (Address: 0x100550a4)
  • ObjectStublessClient16 (Address: 0x100550f4)
  • ObjectStublessClient17 (Address: 0x100550e4)
  • ObjectStublessClient18 (Address: 0x1005509c)
  • ObjectStublessClient19 (Address: 0x100550c4)
  • ObjectStublessClient20 (Address: 0x100550a0)
  • ObjectStublessClient21 (Address: 0x100550f8)
  • ObjectStublessClient22 (Address: 0x100550bc)
  • ObjectStublessClient23 (Address: 0x100550a8)
  • ObjectStublessClient24 (Address: 0x10055100)
  • ObjectStublessClient25 (Address: 0x100550f0)
  • ObjectStublessClient26 (Address: 0x100550e0)
  • ObjectStublessClient7 (Address: 0x100550b4)
  • ObjectStublessClient8 (Address: 0x100550d8)
  • ObjectStublessClient9 (Address: 0x100550dc)
api-ms-win-core-debug-l1-1-0.dll
  • IsDebuggerPresent (Address: 0x10055110)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10055118)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10055120)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1005512c)
  • SetUnhandledExceptionFilter (Address: 0x10055130)
  • UnhandledExceptionFilter (Address: 0x10055128)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10055144)
  • HeapAlloc (Address: 0x1005513c)
  • HeapDestroy (Address: 0x10055140)
  • HeapFree (Address: 0x10055138)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1005514c)
  • LocalFree (Address: 0x10055150)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10055164)
  • FindResourceExW (Address: 0x1005516c)
  • FreeLibrary (Address: 0x1005515c)
  • GetModuleFileNameW (Address: 0x10055168)
  • GetModuleHandleW (Address: 0x10055178)
  • GetProcAddress (Address: 0x10055158)
  • LoadLibraryExW (Address: 0x10055160)
  • LoadResource (Address: 0x10055174)
  • SizeofResource (Address: 0x10055170)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x10055180)
  • GetSystemDefaultLangID (Address: 0x10055188)
  • GetThreadUILanguage (Address: 0x10055184)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x10055194)
  • VirtualProtect (Address: 0x10055198)
  • VirtualQuery (Address: 0x10055190)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100551b0)
  • GetCurrentProcessId (Address: 0x100551ac)
  • GetCurrentThread (Address: 0x100551a0)
  • GetCurrentThreadId (Address: 0x100551b8)
  • OpenProcessToken (Address: 0x100551bc)
  • OpenThreadToken (Address: 0x100551b4)
  • SetThreadToken (Address: 0x100551a8)
  • TerminateProcess (Address: 0x100551a4)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100551c4)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100551f4)
  • RegCreateKeyExW (Address: 0x100551f8)
  • RegDeleteTreeW (Address: 0x100551e0)
  • RegDeleteValueW (Address: 0x100551ec)
  • RegEnumKeyExW (Address: 0x100551cc)
  • RegEnumValueW (Address: 0x100551d0)
  • RegOpenCurrentUser (Address: 0x100551d8)
  • RegOpenKeyExW (Address: 0x100551dc)
  • RegQueryInfoKeyW (Address: 0x100551e8)
  • RegQueryValueExW (Address: 0x100551e4)
  • RegRestoreKeyW (Address: 0x100551d4)
  • RegSaveKeyExW (Address: 0x100551fc)
  • RegSetValueExW (Address: 0x100551f0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x10055208)
  • CompareStringW (Address: 0x10055204)
  • MultiByteToWideChar (Address: 0x1005520c)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x10055218)
  • CharPrevW (Address: 0x10055214)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x10055220)
  • lstrcpynW (Address: 0x10055224)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1005523c)
  • AcquireSRWLockShared (Address: 0x10055234)
  • CreateEventW (Address: 0x1005524c)
  • DeleteCriticalSection (Address: 0x10055248)
  • EnterCriticalSection (Address: 0x10055244)
  • InitializeCriticalSection (Address: 0x1005525c)
  • InitializeSRWLock (Address: 0x10055250)
  • LeaveCriticalSection (Address: 0x10055230)
  • ReleaseSRWLockExclusive (Address: 0x10055238)
  • ReleaseSRWLockShared (Address: 0x10055258)
  • SetEvent (Address: 0x10055254)
  • TryAcquireSRWLockExclusive (Address: 0x10055240)
  • WaitForSingleObject (Address: 0x1005522c)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x10055264)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x10055270)
  • GetSystemTimeAsFileTime (Address: 0x1005526c)
  • GetTickCount (Address: 0x10055274)
  • GetTickCount64 (Address: 0x10055278)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x10055294)
  • CloseThreadpoolWait (Address: 0x10055284)
  • CreateThreadpoolTimer (Address: 0x10055280)
  • CreateThreadpoolWait (Address: 0x1005528c)
  • SetThreadpoolTimer (Address: 0x1005529c)
  • SetThreadpoolWait (Address: 0x100552a0)
  • SetThreadpoolWaitEx (Address: 0x10055290)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10055298)
  • WaitForThreadpoolWaitCallbacks (Address: 0x10055288)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x100552ac)
  • GetFileVersionInfoSizeExW (Address: 0x100552a8)
  • VerQueryValueW (Address: 0x100552b0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x100552b8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x100552c4)
  • EventSetInformation (Address: 0x100552cc)
  • EventUnregister (Address: 0x100552c0)
  • EventWriteTransfer (Address: 0x100552c8)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x100552d4)
  • CheckTokenMembership (Address: 0x100552dc)
  • CreateWellKnownSid (Address: 0x100552ec)
  • DuplicateTokenEx (Address: 0x100552d8)
  • GetLengthSid (Address: 0x100552e4)
  • IsValidSid (Address: 0x100552e8)
  • RevertToSelf (Address: 0x100552e0)
api-ms-win-security-base-l1-2-0.dll
  • CheckTokenCapability (Address: 0x100552f4)
DNSAPI.dll
  • DnsFreeNrptRuleNamesList (Address: 0x1005500c)
  • DnsGetNrptRuleNamesList (Address: 0x10055004)
  • DnsRemoveNrptRule (Address: 0x10055000)
  • DnsSetNrptRules (Address: 0x10055008)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10055340)
  • _amsg_exit (Address: 0x100552fc)
  • _callnewh (Address: 0x10055308)
  • _CxxThrowException (Address: 0x1005533c)
  • _except_handler4_common (Address: 0x10055350)
  • _initterm (Address: 0x10055304)
  • _purecall (Address: 0x1005532c)
  • _vsnwprintf (Address: 0x10055320)
  • _wcsicmp (Address: 0x10055328)
  • _wcsnicmp (Address: 0x1005530c)
  • _XcptFilter (Address: 0x10055300)
  • ??1type_info@@UAE@XZ (Address: 0x10055318)
  • ?terminate@@YAXXZ (Address: 0x10055314)
  • free (Address: 0x1005534c)
  • malloc (Address: 0x10055348)
  • memcmp (Address: 0x1005531c)
  • memcpy (Address: 0x10055344)
  • memset (Address: 0x10055354)
  • qsort (Address: 0x10055310)
  • realloc (Address: 0x10055334)
  • wcscat_s (Address: 0x10055338)
  • wcscpy_s (Address: 0x10055330)
  • wcstok (Address: 0x10055324)
ntdll.dll
  • EtwEventRegister (Address: 0x10055384)
  • EtwEventUnregister (Address: 0x10055380)
  • EtwEventWrite (Address: 0x10055360)
  • EtwGetTraceEnableFlags (Address: 0x10055390)
  • EtwGetTraceEnableLevel (Address: 0x10055394)
  • EtwGetTraceLoggerHandle (Address: 0x10055398)
  • EtwRegisterTraceGuidsW (Address: 0x1005538c)
  • EtwTraceMessage (Address: 0x1005537c)
  • EtwUnregisterTraceGuids (Address: 0x10055388)
  • RtlCapabilityCheck (Address: 0x10055368)
  • RtlEqualSid (Address: 0x10055364)
  • RtlGetCurrentServiceSessionId (Address: 0x10055370)
  • RtlInitUnicodeString (Address: 0x1005536c)
  • RtlIpv4AddressToStringW (Address: 0x1005535c)
  • RtlIpv4StringToAddressW (Address: 0x10055378)
  • RtlIpv6AddressToStringW (Address: 0x1005539c)
  • RtlIpv6StringToAddressW (Address: 0x10055374)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x10055088)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x10055014)
  • CStdStubBuffer_DebugServerRelease (Address: 0x10055054)
  • CStdStubBuffer_Invoke (Address: 0x10055074)
  • CStdStubBuffer_IsIIDSupported (Address: 0x10055024)
  • IUnknown_AddRef_Proxy (Address: 0x10055058)
  • IUnknown_QueryInterface_Proxy (Address: 0x10055038)
  • IUnknown_Release_Proxy (Address: 0x10055084)
  • NdrAsyncClientCall2 (Address: 0x1005505c)
  • NdrClientCall4 (Address: 0x10055040)
  • NdrCStdStubBuffer2_Release (Address: 0x10055060)
  • NdrDllCanUnloadNow (Address: 0x10055070)
  • NdrDllGetClassObject (Address: 0x1005506c)
  • NdrDllRegisterProxy (Address: 0x10055068)
  • NdrDllUnregisterProxy (Address: 0x10055064)
  • NdrOleAllocate (Address: 0x10055080)
  • NdrOleFree (Address: 0x1005508c)
  • NdrStubCall2 (Address: 0x1005507c)
  • NdrStubForwardingFunction (Address: 0x10055078)
  • RpcAsyncCancelCall (Address: 0x1005501c)
  • RpcAsyncCompleteCall (Address: 0x10055028)
  • RpcAsyncInitializeHandle (Address: 0x10055044)
  • RpcBindingFree (Address: 0x1005502c)
  • RpcBindingFromStringBindingW (Address: 0x10055034)
  • RpcBindingSetAuthInfoExW (Address: 0x10055020)
  • RpcBindingSetOption (Address: 0x1005503c)
  • RpcEpResolveBinding (Address: 0x10055018)
  • RpcStringBindingComposeW (Address: 0x10055030)
  • RpcStringFreeW (Address: 0x10055048)
  • UuidCreate (Address: 0x10055050)
  • UuidToStringW (Address: 0x1005504c)