resutils.dll
Description: Microsoft Cluster Resource Utility DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.3636
Architecture: 32-bit
Operating System: Windows NT
SHA256: ecce24cd3cef65e48ef5c299074a9bba
File Size: 471.0 KB
Uploaded At: Dec. 1, 2025, 8:03 a.m.
Views: 8
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ClusWorkerStart (Ordinal: 1, Address: 0x1ba10)
- CloseClusterCryptProvider (Ordinal: 2, Address: 0x219c0)
- ClusAddClusterHealthFault (Ordinal: 3, Address: 0x1a9c0)
- ClusGetClusterHealthFaults (Ordinal: 4, Address: 0x1b970)
- ClusRemoveClusterHealthFault (Ordinal: 5, Address: 0x1b130)
- ClusWorkerCheckTerminate (Ordinal: 6, Address: 0x1bbb0)
- ClusWorkerCreate (Ordinal: 7, Address: 0x1bab0)
- ClusWorkerTerminate (Ordinal: 8, Address: 0x1bce0)
- ClusWorkerTerminateEx (Ordinal: 9, Address: 0x1bdc0)
- ClusWorkersTerminate (Ordinal: 10, Address: 0x1bde0)
- ClusterClearBackupStateForSharedVolume (Ordinal: 11, Address: 0x187e0)
- ClusterDecrypt (Ordinal: 12, Address: 0x21b90)
- ClusterEncrypt (Ordinal: 13, Address: 0x219f0)
- ClusterEnumTasks (Ordinal: 14, Address: 0x39030)
- ClusterFileShareCreate (Ordinal: 15, Address: 0x35640)
- ClusterFileShareDelete (Ordinal: 16, Address: 0x36f10)
- ClusterFileShareUpdate (Ordinal: 17, Address: 0x36aa0)
- ClusterFreeTaskInfo (Ordinal: 18, Address: 0x39580)
- ClusterFreeTaskList (Ordinal: 19, Address: 0x39540)
- ClusterGetTaskNode (Ordinal: 20, Address: 0x38f30)
- ClusterGetVolumeNameForVolumeMountPoint (Ordinal: 21, Address: 0x18790)
- ClusterGetVolumePathName (Ordinal: 22, Address: 0x18770)
- ClusterIsClusterDisk (Ordinal: 23, Address: 0x37250)
- ClusterIsPathOnSharedVolume (Ordinal: 24, Address: 0x18750)
- ClusterPrepareSharedVolumeForBackup (Ordinal: 25, Address: 0x187b0)
- ClusterSharedVolumeCheckSnapshotPresence (Ordinal: 26, Address: 0x203d0)
- ClusterSharedVolumeCreateSnapshot (Ordinal: 27, Address: 0x20140)
- ClusterSharedVolumeReleaseSnapshot (Ordinal: 28, Address: 0x20380)
- ClusterTaskChangeFromXML (Ordinal: 29, Address: 0x382d0)
- ClusterTaskChangeFromXMLFile (Ordinal: 30, Address: 0x381b0)
- ClusterTaskChange_TS_V1 (Ordinal: 31, Address: 0x39e10)
- ClusterTaskCreateFromXML (Ordinal: 32, Address: 0x37d00)
- ClusterTaskCreateFromXMLFile (Ordinal: 33, Address: 0x37bc0)
- ClusterTaskCreate_TS_V1 (Ordinal: 34, Address: 0x398f0)
- ClusterTaskDelete (Ordinal: 35, Address: 0x38590)
- ClusterTaskDelete_TS_V1 (Ordinal: 36, Address: 0x3a0e0)
- ClusterTaskExists_TS_V1 (Ordinal: 37, Address: 0x3a300)
- ClusterTaskQuery (Ordinal: 38, Address: 0x39600)
- CreateClusterStorageSpacesClustering (Ordinal: 39, Address: 0x3c1b0)
- CreateClusterStorageSpacesResourceLocator (Ordinal: 40, Address: 0x3c130)
- CreateClusterStorageSpacesSubProvider (Ordinal: 41, Address: 0x3c160)
- FreeClusterCrypt (Ordinal: 42, Address: 0x21db0)
- FreeClusterHealthFault (Ordinal: 43, Address: 0x198b0)
- FreeClusterHealthFaultArray (Ordinal: 44, Address: 0x19900)
- InitializeClusterHealthFault (Ordinal: 45, Address: 0x19850)
- InitializeClusterHealthFaultArray (Ordinal: 46, Address: 0x19880)
- OpenClusterCryptProvider (Ordinal: 47, Address: 0x215c0)
- OpenClusterCryptProviderEx (Ordinal: 48, Address: 0x217b0)
- ResUtilAddUnknownProperties (Ordinal: 49, Address: 0x17230)
- ResUtilCreateDirectoryTree (Ordinal: 50, Address: 0x1bff0)
- ResUtilDupGroup (Ordinal: 51, Address: 0x1d450)
- ResUtilDupParameterBlock (Ordinal: 52, Address: 0x173c0)
- ResUtilDupResource (Ordinal: 53, Address: 0x1d4e0)
- ResUtilDupString (Ordinal: 54, Address: 0x18d30)
- ResUtilEnumGroups (Ordinal: 55, Address: 0x1d340)
- ResUtilEnumGroupsEx (Ordinal: 56, Address: 0x1d420)
- ResUtilEnumPrivateProperties (Ordinal: 57, Address: 0x16dc0)
- ResUtilEnumProperties (Ordinal: 58, Address: 0x16d90)
- ResUtilEnumResources (Ordinal: 59, Address: 0x17960)
- ResUtilEnumResourcesEx2 (Ordinal: 60, Address: 0x17b90)
- ResUtilEnumResourcesEx (Ordinal: 61, Address: 0x17dc0)
- ResUtilExpandEnvironmentStrings (Ordinal: 62, Address: 0x1c050)
- ResUtilFindBinaryProperty (Ordinal: 63, Address: 0x17360)
- ResUtilFindDependentDiskResourceDriveLetter (Ordinal: 64, Address: 0x1c8e0)
- ResUtilFindDwordProperty (Ordinal: 65, Address: 0x172c0)
- ResUtilFindExpandSzProperty (Ordinal: 66, Address: 0x17260)
- ResUtilFindExpandedSzProperty (Ordinal: 67, Address: 0x17290)
- ResUtilFindFileTimeProperty (Ordinal: 68, Address: 0x17340)
- ResUtilFindLongProperty (Ordinal: 69, Address: 0x17300)
- ResUtilFindMultiSzProperty (Ordinal: 70, Address: 0x17390)
- ResUtilFindSzProperty (Ordinal: 71, Address: 0x17260)
- ResUtilFindULargeIntegerProperty (Ordinal: 72, Address: 0x17320)
- ResUtilFreeEnvironment (Ordinal: 73, Address: 0x1c030)
- ResUtilFreeParameterBlock (Ordinal: 74, Address: 0x173e0)
- ResUtilGetAllProperties (Ordinal: 75, Address: 0x16e40)
- ResUtilGetBinaryProperty (Ordinal: 76, Address: 0x192b0)
- ResUtilGetBinaryValue (Ordinal: 77, Address: 0x18d50)
- ResUtilGetClusterGroupType (Ordinal: 78, Address: 0x1d380)
- ResUtilGetClusterId (Ordinal: 79, Address: 0x1d600)
- ResUtilGetClusterRoleState (Ordinal: 80, Address: 0x18480)
- ResUtilGetCoreClusterResources (Ordinal: 81, Address: 0x1d0a0)
- ResUtilGetCoreClusterResourcesEx (Ordinal: 82, Address: 0x1d070)
- ResUtilGetCoreGroup (Ordinal: 83, Address: 0x1d570)
- ResUtilGetDwordProperty (Ordinal: 84, Address: 0x193d0)
- ResUtilGetDwordValue (Ordinal: 85, Address: 0x18e90)
- ResUtilGetEnvironmentWithNetName (Ordinal: 86, Address: 0x19770)
- ResUtilGetFileTimeProperty (Ordinal: 87, Address: 0x19490)
- ResUtilGetLongProperty (Ordinal: 88, Address: 0x19430)
- ResUtilGetMultiSzProperty (Ordinal: 89, Address: 0x19340)
- ResUtilGetPrivateProperties (Ordinal: 90, Address: 0x16ed0)
- ResUtilGetProperties (Ordinal: 91, Address: 0x16df0)
- ResUtilGetPropertiesToParameterBlock (Ordinal: 92, Address: 0x16e70)
- ResUtilGetProperty (Ordinal: 93, Address: 0x16f20)
- ResUtilGetPropertyFormats (Ordinal: 94, Address: 0x18390)
- ResUtilGetPropertySize (Ordinal: 95, Address: 0x16f00)
- ResUtilGetQwordValue (Ordinal: 96, Address: 0x18ef0)
- ResUtilGetResourceDependency (Ordinal: 97, Address: 0x18270)
- ResUtilGetResourceDependencyByClass (Ordinal: 98, Address: 0x182c0)
- ResUtilGetResourceDependencyByClassEx (Ordinal: 99, Address: 0x18290)
- ResUtilGetResourceDependencyByName (Ordinal: 100, Address: 0x181f0)
- ResUtilGetResourceDependencyByNameAndClass (Ordinal: 101, Address: 0x17df0)
- ResUtilGetResourceDependencyByNameEx (Ordinal: 102, Address: 0x181c0)
- ResUtilGetResourceDependencyEx (Ordinal: 103, Address: 0x18220)
- ResUtilGetResourceDependentIPAddressProps (Ordinal: 104, Address: 0x1c4c0)
- ResUtilGetResourceName (Ordinal: 105, Address: 0x1d0d0)
- ResUtilGetResourceNameDependency (Ordinal: 106, Address: 0x18370)
- ResUtilGetResourceNameDependencyEx (Ordinal: 107, Address: 0x182f0)
- ResUtilGetSzProperty (Ordinal: 108, Address: 0x19330)
- ResUtilGetSzValue (Ordinal: 109, Address: 0x18de0)
- ResUtilGroupsEqual (Ordinal: 110, Address: 0x183c0)
- ResUtilIsPathValid (Ordinal: 111, Address: 0x1c010)
- ResUtilIsResourceClassEqual (Ordinal: 112, Address: 0x175d0)
- ResUtilLeftPaxosIsLessThanRight (Ordinal: 113, Address: 0x1d1d0)
- ResUtilNodeEnum (Ordinal: 114, Address: 0x1d6e0)
- ResUtilPaxosComparer (Ordinal: 115, Address: 0x1d170)
- ResUtilPropertyListFromParameterBlock (Ordinal: 116, Address: 0x16ea0)
- ResUtilRemoveResourceServiceEnvironment (Ordinal: 117, Address: 0x1c1f0)
- ResUtilResourceDepEnum (Ordinal: 118, Address: 0x1d360)
- ResUtilResourceTypesEqual (Ordinal: 119, Address: 0x17400)
- ResUtilResourcesEqual (Ordinal: 120, Address: 0x174d0)
- ResUtilSetBinaryValue (Ordinal: 121, Address: 0x18f60)
- ResUtilSetDwordValue (Ordinal: 122, Address: 0x19230)
- ResUtilSetExpandSzValue (Ordinal: 123, Address: 0x19100)
- ResUtilSetMultiSzValue (Ordinal: 124, Address: 0x191b0)
- ResUtilSetPrivatePropertyList (Ordinal: 125, Address: 0x171c0)
- ResUtilSetPropertyParameterBlock (Ordinal: 126, Address: 0x17050)
- ResUtilSetPropertyParameterBlockEx (Ordinal: 127, Address: 0x170c0)
- ResUtilSetPropertyTable (Ordinal: 128, Address: 0x16f70)
- ResUtilSetPropertyTableEx (Ordinal: 129, Address: 0x16fe0)
- ResUtilSetQwordValue (Ordinal: 130, Address: 0x19270)
- ResUtilSetResourceServiceEnvironment (Ordinal: 131, Address: 0x1c070)
- ResUtilSetResourceServiceStartParameters (Ordinal: 132, Address: 0x1c490)
- ResUtilSetResourceServiceStartParametersEx (Ordinal: 133, Address: 0x1c2c0)
- ResUtilSetSzValue (Ordinal: 134, Address: 0x19050)
- ResUtilSetUnknownProperties (Ordinal: 135, Address: 0x17130)
- ResUtilSetValueEx (Ordinal: 136, Address: 0x18fe0)
- ResUtilStartResourceService (Ordinal: 137, Address: 0x18800)
- ResUtilStopResourceService (Ordinal: 138, Address: 0x188e0)
- ResUtilStopService (Ordinal: 139, Address: 0x18a50)
- ResUtilTerminateServiceProcessFromResDll (Ordinal: 140, Address: 0x18b60)
- ResUtilVerifyPrivatePropertyList (Ordinal: 141, Address: 0x171a0)
- ResUtilVerifyPropertyTable (Ordinal: 142, Address: 0x16f40)
- ResUtilVerifyResourceService (Ordinal: 143, Address: 0x189c0)
- ResUtilVerifyService (Ordinal: 144, Address: 0x18b00)
- ResUtilsDeleteKeyTree (Ordinal: 145, Address: 0x1d250)
Imported DLLs & Functions
api-ms-win-core-console-l1-1-0.dll
- GetConsoleMode (Address: 0x7f2c0120)
- GetConsoleOutputCP (Address: 0x7f2c0128)
- ReadConsoleW (Address: 0x7f2c012c)
- WriteConsoleW (Address: 0x7f2c0124)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x7f2c0140)
- IsDebuggerPresent (Address: 0x7f2c0138)
- OutputDebugStringA (Address: 0x7f2c0134)
- OutputDebugStringW (Address: 0x7f2c013c)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x7f2c0148)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x7f2c0154)
- RaiseException (Address: 0x7f2c015c)
- SetLastError (Address: 0x7f2c0150)
- SetUnhandledExceptionFilter (Address: 0x7f2c0160)
- UnhandledExceptionFilter (Address: 0x7f2c0158)
api-ms-win-core-fibers-l1-1-0.dll
- FlsAlloc (Address: 0x7f2c0170)
- FlsFree (Address: 0x7f2c0174)
- FlsGetValue (Address: 0x7f2c016c)
- FlsSetValue (Address: 0x7f2c0168)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x7f2c01ac)
- CreateDirectoryW (Address: 0x7f2c01a4)
- CreateFileW (Address: 0x7f2c019c)
- FindClose (Address: 0x7f2c0184)
- FindFirstFileExW (Address: 0x7f2c0188)
- FindFirstVolumeW (Address: 0x7f2c01b4)
- FindNextFileW (Address: 0x7f2c018c)
- FindNextVolumeW (Address: 0x7f2c01bc)
- FindVolumeClose (Address: 0x7f2c01c0)
- FlushFileBuffers (Address: 0x7f2c0198)
- GetFileAttributesW (Address: 0x7f2c01a8)
- GetFileSizeEx (Address: 0x7f2c01b0)
- GetFileType (Address: 0x7f2c01a0)
- GetVolumePathNameW (Address: 0x7f2c01b8)
- ReadFile (Address: 0x7f2c017c)
- SetFilePointer (Address: 0x7f2c0190)
- SetFilePointerEx (Address: 0x7f2c0180)
- WriteFile (Address: 0x7f2c0194)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x7f2c01cc)
- GetVolumePathNamesForVolumeNameW (Address: 0x7f2c01c8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x7f2c01d8)
- DuplicateHandle (Address: 0x7f2c01d4)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x7f2c01f0)
- HeapAlloc (Address: 0x7f2c01e4)
- HeapFree (Address: 0x7f2c01e8)
- HeapReAlloc (Address: 0x7f2c01ec)
- HeapSize (Address: 0x7f2c01e0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x7f2c01fc)
- LocalFree (Address: 0x7f2c01f8)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x7f2c020c)
- InterlockedFlushSList (Address: 0x7f2c0208)
- InterlockedPopEntrySList (Address: 0x7f2c0204)
- InterlockedPushEntrySList (Address: 0x7f2c0210)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x7f2c0218)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x7f2c0224)
- FreeLibrary (Address: 0x7f2c0228)
- GetModuleFileNameW (Address: 0x7f2c022c)
- GetModuleHandleExW (Address: 0x7f2c0220)
- GetModuleHandleW (Address: 0x7f2c0234)
- GetProcAddress (Address: 0x7f2c023c)
- LoadLibraryExW (Address: 0x7f2c0238)
- LoadStringW (Address: 0x7f2c0230)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x7f2c0244)
api-ms-win-core-localization-l1-2-0.dll
- EnumSystemLocalesW (Address: 0x7f2c024c)
- FormatMessageW (Address: 0x7f2c0264)
- GetACP (Address: 0x7f2c026c)
- GetCPInfo (Address: 0x7f2c0268)
- GetLocaleInfoW (Address: 0x7f2c0258)
- GetOEMCP (Address: 0x7f2c025c)
- GetUserDefaultLCID (Address: 0x7f2c0250)
- IsValidCodePage (Address: 0x7f2c0260)
- IsValidLocale (Address: 0x7f2c0254)
- LCMapStringEx (Address: 0x7f2c0270)
- LCMapStringW (Address: 0x7f2c0274)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x7f2c0290)
- FreeEnvironmentStringsW (Address: 0x7f2c0280)
- GetCommandLineA (Address: 0x7f2c027c)
- GetCommandLineW (Address: 0x7f2c0284)
- GetEnvironmentStringsW (Address: 0x7f2c0288)
- GetStdHandle (Address: 0x7f2c0294)
- SetStdHandle (Address: 0x7f2c028c)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x7f2c02a4)
- ExitProcess (Address: 0x7f2c02d0)
- GetCurrentProcess (Address: 0x7f2c02a8)
- GetCurrentProcessId (Address: 0x7f2c02c8)
- GetCurrentThread (Address: 0x7f2c02b0)
- GetCurrentThreadId (Address: 0x7f2c029c)
- GetStartupInfoW (Address: 0x7f2c02cc)
- OpenProcessToken (Address: 0x7f2c02ac)
- OpenThreadToken (Address: 0x7f2c02b4)
- ResumeThread (Address: 0x7f2c02a0)
- TerminateProcess (Address: 0x7f2c02d4)
- TlsAlloc (Address: 0x7f2c02b8)
- TlsFree (Address: 0x7f2c02c4)
- TlsGetValue (Address: 0x7f2c02bc)
- TlsSetValue (Address: 0x7f2c02c0)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x7f2c02dc)
- OpenProcess (Address: 0x7f2c02e0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x7f2c02e8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x7f2c02f0)
- RegDeleteValueW (Address: 0x7f2c02fc)
- RegOpenKeyExW (Address: 0x7f2c02f8)
- RegSetValueExW (Address: 0x7f2c02f4)
api-ms-win-core-string-l1-1-0.dll
- CompareStringW (Address: 0x7f2c0308)
- GetStringTypeW (Address: 0x7f2c0310)
- MultiByteToWideChar (Address: 0x7f2c030c)
- WideCharToMultiByte (Address: 0x7f2c0304)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x7f2c0318)
api-ms-win-core-synch-l1-1-0.dll
- CreateEventW (Address: 0x7f2c0328)
- DeleteCriticalSection (Address: 0x7f2c0348)
- EnterCriticalSection (Address: 0x7f2c0324)
- InitializeCriticalSection (Address: 0x7f2c0340)
- InitializeCriticalSectionAndSpinCount (Address: 0x7f2c0338)
- InitializeCriticalSectionEx (Address: 0x7f2c0344)
- LeaveCriticalSection (Address: 0x7f2c0330)
- ResetEvent (Address: 0x7f2c0320)
- SetEvent (Address: 0x7f2c0334)
- WaitForSingleObject (Address: 0x7f2c032c)
- WaitForSingleObjectEx (Address: 0x7f2c033c)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x7f2c0354)
- Sleep (Address: 0x7f2c0350)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x7f2c035c)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x7f2c036c)
- GetSystemTimeAsFileTime (Address: 0x7f2c0364)
- GetTickCount (Address: 0x7f2c0368)
- GetTickCount64 (Address: 0x7f2c0374)
- GetWindowsDirectoryW (Address: 0x7f2c0370)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x7f2c037c)
- EncodePointer (Address: 0x7f2c0380)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x7f2c0388)
api-ms-win-security-base-l1-1-0.dll
- ImpersonateLoggedOnUser (Address: 0x7f2c0394)
- RevertToSelf (Address: 0x7f2c0390)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x7f2c03ac)
- BCryptDecrypt (Address: 0x7f2c039c)
- BCryptDestroyKey (Address: 0x7f2c03b8)
- BCryptEncrypt (Address: 0x7f2c03a0)
- BCryptGenerateSymmetricKey (Address: 0x7f2c03b4)
- BCryptGenRandom (Address: 0x7f2c03a4)
- BCryptGetProperty (Address: 0x7f2c03a8)
- BCryptOpenAlgorithmProvider (Address: 0x7f2c03b0)
CLUSAPI.dll
- AddClusterResourceDependency (Address: 0x7f2c0058)
- AddResourceToClusterSharedVolumes (Address: 0x7f2c0024)
- CloseCluster (Address: 0x7f2c000c)
- CloseClusterGroup (Address: 0x7f2c00c4)
- CloseClusterNode (Address: 0x7f2c00c0)
- CloseClusterResource (Address: 0x7f2c0070)
- ClusterCloseEnum (Address: 0x7f2c009c)
- ClusterControl (Address: 0x7f2c0110)
- ClusterEnum (Address: 0x7f2c0080)
- ClusterFreeMrrResponse (Address: 0x7f2c0034)
- ClusterGetEnumCount (Address: 0x7f2c00f0)
- ClusterGroupCloseEnum (Address: 0x7f2c0044)
- ClusterGroupControl (Address: 0x7f2c006c)
- ClusterGroupEnum (Address: 0x7f2c005c)
- ClusterGroupOpenEnum (Address: 0x7f2c0060)
- ClusterOpenEnum (Address: 0x7f2c007c)
- ClusterRegBatchAddCommand (Address: 0x7f2c00c8)
- ClusterRegCloseBatch (Address: 0x7f2c0098)
- ClusterRegCloseBatchEx (Address: 0x7f2c00f8)
- ClusterRegCloseKey (Address: 0x7f2c00b0)
- ClusterRegCloseReadBatch (Address: 0x7f2c00a0)
- ClusterRegCloseReadBatchReply (Address: 0x7f2c00cc)
- ClusterRegCreateBatch (Address: 0x7f2c0008)
- ClusterRegCreateKey (Address: 0x7f2c008c)
- ClusterRegCreateReadBatch (Address: 0x7f2c00d8)
- ClusterRegDeleteKey (Address: 0x7f2c010c)
- ClusterRegDeleteValue (Address: 0x7f2c0010)
- ClusterRegEnumKey (Address: 0x7f2c0104)
- ClusterRegEnumValue (Address: 0x7f2c0094)
- ClusterRegOpenKey (Address: 0x7f2c0090)
- ClusterRegQueryValue (Address: 0x7f2c0084)
- ClusterRegReadBatchAddCommand (Address: 0x7f2c00d4)
- ClusterRegReadBatchReplyNextCommand (Address: 0x7f2c00d0)
- ClusterRegSetValue (Address: 0x7f2c0088)
- ClusterResourceCloseEnum (Address: 0x7f2c0074)
- ClusterResourceControl (Address: 0x7f2c0068)
- ClusterResourceControlAsUser (Address: 0x7f2c002c)
- ClusterResourceEnum (Address: 0x7f2c0078)
- ClusterResourceGetEnumCount (Address: 0x7f2c00e4)
- ClusterResourceOpenEnum (Address: 0x7f2c0038)
- ClusterResourceTypeCloseEnum (Address: 0x7f2c00a8)
- ClusterResourceTypeControl (Address: 0x7f2c0028)
- ClusterResourceTypeEnum (Address: 0x7f2c00ac)
- ClusterResourceTypeOpenEnum (Address: 0x7f2c00a4)
- ClusterSendReceiveMrrAsUser (Address: 0x7f2c003c)
- ClusterSharedVolumeClearBackupState (Address: 0x7f2c00b8)
- CreateClusterGroupEx (Address: 0x7f2c0040)
- CreateClusterResource (Address: 0x7f2c0050)
- DeleteClusterResource (Address: 0x7f2c004c)
- GetClusterFromGroup (Address: 0x7f2c0000)
- GetClusterFromResource (Address: 0x7f2c0004)
- GetClusterGroupKey (Address: 0x7f2c0108)
- GetClusterKey (Address: 0x7f2c00f4)
- GetClusterNodeState (Address: 0x7f2c00e8)
- GetClusterQuorumResource (Address: 0x7f2c00dc)
- GetClusterResourceDependencyExpression (Address: 0x7f2c0018)
- GetClusterResourceKey (Address: 0x7f2c001c)
- GetClusterResourceNetworkName (Address: 0x7f2c00fc)
- GetClusterResourceState (Address: 0x7f2c0064)
- GetClusterSharedVolumeNameForFile (Address: 0x7f2c00bc)
- GetNodeClusterState (Address: 0x7f2c0020)
- OnlineClusterResource (Address: 0x7f2c0048)
- OpenCluster (Address: 0x7f2c00e0)
- OpenClusterEx (Address: 0x7f2c00b4)
- OpenClusterGroup (Address: 0x7f2c0100)
- OpenClusterNode (Address: 0x7f2c00ec)
- OpenClusterResource (Address: 0x7f2c0030)
- OpenClusterResourceEx (Address: 0x7f2c0014)
- SetClusterResourceDependencyExpression (Address: 0x7f2c0054)
KERNELBASE.dll
- ResolveDelayLoadedAPI (Address: 0x7f2c0118)
ntdll.dll
- EtwEventEnabled (Address: 0x7f2c03e4)
- EtwEventRegister (Address: 0x7f2c03ec)
- EtwEventWrite (Address: 0x7f2c03e8)
- NtClose (Address: 0x7f2c03dc)
- NtDuplicateToken (Address: 0x7f2c03d4)
- NtOpenProcessToken (Address: 0x7f2c03d0)
- NtQuerySystemInformation (Address: 0x7f2c03f4)
- NtSetInformationThread (Address: 0x7f2c03d8)
- RtlAdjustPrivilege (Address: 0x7f2c03e0)
- RtlAnsiStringToUnicodeString (Address: 0x7f2c03cc)
- RtlCreateEnvironment (Address: 0x7f2c0408)
- RtlDestroyEnvironment (Address: 0x7f2c03fc)
- RtlInitAnsiString (Address: 0x7f2c03c8)
- RtlInitUnicodeString (Address: 0x7f2c0404)
- RtlNtStatusToDosError (Address: 0x7f2c03c4)
- RtlRemoveVectoredExceptionHandler (Address: 0x7f2c03f0)
- RtlSetEnvironmentVariable (Address: 0x7f2c0400)
- RtlUnicodeStringToAnsiString (Address: 0x7f2c03c0)
- RtlUnwind (Address: 0x7f2c03f8)