twinapi.appcore.dll

Description: twinapi.appcore

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: e75c35bdc27ca0b930bab6799f6e7715

File Size: 1.6 MB

Uploaded At: Dec. 1, 2025, 8:05 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 1, Address: 0x7e380)
(Ordinal: 2, Address: 0x3fd70)
(Ordinal: 3, Address: 0x49f20)
(Ordinal: 4, Address: 0x157e40)
(Ordinal: 5, Address: 0x157df0)
(Ordinal: 6, Address: 0x4daf0)
(Ordinal: 7, Address: 0x4cb50)
(Ordinal: 8, Address: 0x52ab0)
(Ordinal: 9, Address: 0x4b040)
(Ordinal: 10, Address: 0x494d0)
(Ordinal: 11, Address: 0x158e10)
(Ordinal: 12, Address: 0x70b40)
(Ordinal: 13, Address: 0x158e70)
ValidateSystemShutdown (Ordinal: 14, Address: 0x148fd0)
BiActivateWorkItemForUser (Ordinal: 15, Address: 0x159090)
BiChangeApplicationStateForPackageName (Ordinal: 16, Address: 0x159130)
BiChangeApplicationStateForPackageNameForUser (Ordinal: 17, Address: 0x42be0)
BiChangeApplicationStateForPsmKey (Ordinal: 18, Address: 0x159150)
BiChangeApplicationStateForPsmKeyForUser (Ordinal: 19, Address: 0x159170)
BiChangeSessionState (Ordinal: 20, Address: 0x797d0)
BiChangeUserState (Ordinal: 21, Address: 0x797f0)
BiEnumerateWorkItemsForPackageNameAndUser (Ordinal: 22, Address: 0x159250)
BiGetActiveBackgroundTasksEvent (Ordinal: 23, Address: 0x159310)
BiGetActiveBackgroundTasksEventForUser (Ordinal: 24, Address: 0x159330)
BiGetCancellationTimeoutInMs (Ordinal: 25, Address: 0x79870)
BiIsApplicationTerminateSensitive (Ordinal: 26, Address: 0x159450)
BiIsApplicationTerminateSensitiveForUser (Ordinal: 27, Address: 0x159470)
BiNotifyNewSession (Ordinal: 28, Address: 0x830e0)
BiNotifyNewSessionComplete (Ordinal: 29, Address: 0x7a8f0)
BiNotifyNewUser (Ordinal: 30, Address: 0x82f30)
BiPlmFreeMemory (Ordinal: 31, Address: 0x74890)
BiPtActivateDeferredWorkItem (Ordinal: 32, Address: 0x1599a0)
BiPtActivateInBackground (Ordinal: 33, Address: 0x159a30)
BiPtActivateInBackgroundEx (Ordinal: 34, Address: 0x159a70)
BiPtActivateWorkItem (Ordinal: 35, Address: 0x159bc0)
BiPtAssociateActivationProxy (Ordinal: 36, Address: 0x699a0)
BiPtAssociateApplicationEntryPoint (Ordinal: 37, Address: 0x159c50)
BiPtAssociateApplicationExtensionClass (Ordinal: 38, Address: 0x159d30)
BiPtCancelWorkItem (Ordinal: 39, Address: 0x159d60)
BiPtCancelWorkItemEx (Ordinal: 40, Address: 0x159df0)
BiPtCreateEvent (Ordinal: 41, Address: 0x159e80)
BiPtCreateEventForApp (Ordinal: 42, Address: 0x69a40)
BiPtCreateEventForPackageName (Ordinal: 43, Address: 0x159f40)
BiPtDeleteEvent (Ordinal: 44, Address: 0x3d5c0)
BiPtDisableWorkItem (Ordinal: 45, Address: 0x15a000)
BiPtDisassociateWorkItem (Ordinal: 46, Address: 0x15a090)
BiPtDisassociateWorkItemEx (Ordinal: 47, Address: 0x15a0b0)
BiPtEnableWorkItem (Ordinal: 48, Address: 0x15a140)
BiPtEnumerateBrokeredEvents (Ordinal: 49, Address: 0x69bc0)
BiPtEnumerateBrokeredEventsEx (Ordinal: 50, Address: 0x15a1d0)
BiPtEnumerateWorkItemsForPackageName (Ordinal: 51, Address: 0x79e30)
BiPtEnumerateWorkItemsForPackageNameEx (Ordinal: 52, Address: 0x15a290)
BiPtFreeMemory (Ordinal: 53, Address: 0x74890)
BiPtGetStatusStateNameFromBrokerEventId (Ordinal: 54, Address: 0x15a350)
BiPtQueryBrokerEventId (Ordinal: 55, Address: 0x15a3e0)
BiPtQueryBrokeredEvent (Ordinal: 56, Address: 0x69b50)
BiPtQuerySystemStateBroadcastChannels (Ordinal: 57, Address: 0x69ae0)
BiPtQueryWorkItem (Ordinal: 58, Address: 0x79ed0)
BiPtQueryWorkItemEx (Ordinal: 59, Address: 0x15a470)
BiPtQueryWorkItemStatusStateName (Ordinal: 60, Address: 0x3d630)
BiPtSignalEvent (Ordinal: 61, Address: 0x15a510)
BiPtSignalEventEx (Ordinal: 62, Address: 0x15a540)
BiPtSignalMultipleEvents (Ordinal: 63, Address: 0x15a5e0)
BiPtSignalTriggerEvent (Ordinal: 64, Address: 0x15a680)
BiPtSignalTriggerEventEx (Ordinal: 65, Address: 0x15a6b0)
BiQueryWorkItemForUser (Ordinal: 66, Address: 0x159560)
BiResetActiveSessionForPackage (Ordinal: 67, Address: 0x159610)
BiResetActiveUserForPackage (Ordinal: 68, Address: 0x159620)
BiSetActiveSessionForPackage (Ordinal: 69, Address: 0x1596b0)
BiSetActiveUserForPackage (Ordinal: 70, Address: 0x1596c0)
BiTerminateApplicationHost2 (Ordinal: 71, Address: 0x159750)
BiTerminateApplicationHost (Ordinal: 72, Address: 0x159780)
BiTerminateApplicationHostForUser (Ordinal: 73, Address: 0x1597b0)
BiUpdateBackgroundAccessApplicationsForUser (Ordinal: 74, Address: 0x1598a0)
BiUpdateLockScreenApplications (Ordinal: 75, Address: 0x159950)
DllCanUnloadNow (Ordinal: 76, Address: 0x6aa20)
DllGetActivationFactory (Ordinal: 77, Address: 0x6b750)
DllGetClassObject (Ordinal: 78, Address: 0x6aa80)
PsmApplyTaskCompletion (Ordinal: 79, Address: 0x15adb0)
PsmBlockAppStateChangeCompletion (Ordinal: 80, Address: 0x5dce0)
PsmDisconnect (Ordinal: 81, Address: 0x15af60)
PsmGetSessionInfo (Ordinal: 82, Address: 0x15ae60)
PsmInitializeExtension (Ordinal: 83, Address: 0x5ff90)
PsmIsProcessInApplication2 (Ordinal: 84, Address: 0x15af90)
PsmIsProcessInApplication (Ordinal: 85, Address: 0x15b010)
PsmQueryApplicationInformation2 (Ordinal: 86, Address: 0x15b020)
PsmQueryApplicationInformation (Ordinal: 87, Address: 0x15b120)
PsmQueryApplicationInterferenceCount2 (Ordinal: 88, Address: 0x15b180)
PsmQueryApplicationInterferenceCount (Ordinal: 89, Address: 0x15b190)
PsmQueryApplicationList2 (Ordinal: 90, Address: 0x81070)
PsmQueryApplicationList (Ordinal: 91, Address: 0x15b1a0)
PsmQueryApplicationProperties2 (Ordinal: 92, Address: 0x15b1f0)
PsmQueryApplicationProperties3 (Ordinal: 93, Address: 0x15b200)
PsmQueryApplicationProperties (Ordinal: 94, Address: 0x15b210)
PsmQueryApplicationPropertiesByUser (Ordinal: 95, Address: 0x15b200)
PsmQueryApplicationResourceUsage2 (Ordinal: 96, Address: 0x15b180)
PsmQueryApplicationResourceUsage (Ordinal: 97, Address: 0x15b190)
PsmQueryApplicationResourceUsageForTimer (Ordinal: 98, Address: 0x15b6a0)
PsmQueryCurrentAppState (Ordinal: 99, Address: 0x61d30)
PsmQueryMaxMemoryUsage2 (Ordinal: 100, Address: 0x15b220)
PsmQueryMaxMemoryUsage (Ordinal: 101, Address: 0x15b230)
PsmQueryMemoryUsage2 (Ordinal: 102, Address: 0x15b210)
PsmQueryMemoryUsage (Ordinal: 103, Address: 0x15b180)
PsmQueryMemoryUsageByUser (Ordinal: 104, Address: 0x15b240)
PsmQueryProcessList2 (Ordinal: 105, Address: 0x15b2f0)
PsmQueryProcessList (Ordinal: 106, Address: 0x15b420)
PsmQuerySharedCommitByUser (Ordinal: 107, Address: 0x15b220)
PsmQueryTaskCompletionInformation2 (Ordinal: 108, Address: 0x15b180)
PsmQueryTaskCompletionInformation (Ordinal: 109, Address: 0x15b190)
PsmRegisterAppPriorityNotification (Ordinal: 110, Address: 0x15b760)
PsmRegisterAppStateChangeNotification (Ordinal: 111, Address: 0x5eff0)
PsmRegisterApplicationNotification2 (Ordinal: 112, Address: 0x15b480)
PsmRegisterApplicationNotification (Ordinal: 113, Address: 0x15b4f0)
PsmRegisterDynamicProcess (Ordinal: 114, Address: 0x7f1e0)
PsmRegisterKeyNotification (Ordinal: 115, Address: 0x81140)
PsmRegisterManagerType (Ordinal: 116, Address: 0x95a50)
PsmResetMaxMemoryUsage2 (Ordinal: 117, Address: 0x15b180)
PsmResetMaxMemoryUsage (Ordinal: 118, Address: 0x15b190)
PsmResetMaxMemoryUsageByUser (Ordinal: 119, Address: 0x15b180)
PsmSetApplicationPriority2 (Ordinal: 120, Address: 0x15b180)
PsmSetApplicationPriority (Ordinal: 121, Address: 0x15b190)
PsmSetApplicationProperties2 (Ordinal: 122, Address: 0x15b1f0)
PsmSetApplicationProperties3 (Ordinal: 123, Address: 0x15b200)
PsmSetApplicationProperties (Ordinal: 124, Address: 0x15b210)
PsmSetApplicationPropertiesByUser (Ordinal: 125, Address: 0x15b200)
PsmSetApplicationState2 (Ordinal: 126, Address: 0x15b540)
PsmSetApplicationState (Ordinal: 127, Address: 0x15b650)
PsmShutdownApplication (Ordinal: 128, Address: 0x15af00)
PsmTimerCleanup (Ordinal: 129, Address: 0x15c520)
PsmTimerElapsedResourceTimeGet (Ordinal: 130, Address: 0x15c580)
PsmTimerInitialize (Ordinal: 131, Address: 0x15c690)
PsmTimerRemainingResourceTimeGet (Ordinal: 132, Address: 0x15c6b0)
PsmTimerStart (Ordinal: 133, Address: 0x15c6d0)
PsmUnblockAppStateChangeCompletion (Ordinal: 134, Address: 0x5d6f0)
PsmUnregisterAppStateChangeNotification (Ordinal: 135, Address: 0x798e0)
PsmWaitForAppResume (Ordinal: 136, Address: 0x5d670)
RegisterAppConstrainedChangeNotification (Ordinal: 137, Address: 0x78820)
RegisterAppStateChangeNotification (Ordinal: 138, Address: 0x15cea0)
UnregisterAppConstrainedChangeNotification (Ordinal: 139, Address: 0x95a50)
UnregisterAppStateChangeNotification (Ordinal: 140, Address: 0x15cf20)
(Ordinal: 500, Address: 0x1426b0)
(Ordinal: 501, Address: 0xcf5b0)
(Ordinal: 502, Address: 0xf8910)
(Ordinal: 503, Address: 0xf8950)
(Ordinal: 504, Address: 0x7fc00)
(Ordinal: 505, Address: 0x49410)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10170074)

api-ms-win-core-atoms-l1-1-0.dll

GlobalAddAtomW (Address: 0x1017007c)
GlobalDeleteAtom (Address: 0x10170080)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1017008c)
IsDebuggerPresent (Address: 0x10170088)
OutputDebugStringW (Address: 0x10170090)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10170098)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x101700a0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x101700a8)
RaiseException (Address: 0x101700b0)
SetLastError (Address: 0x101700ac)
SetUnhandledExceptionFilter (Address: 0x101700b8)
UnhandledExceptionFilter (Address: 0x101700b4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x101700c8)
DuplicateHandle (Address: 0x101700c4)
GetHandleInformation (Address: 0x101700c0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x101700d4)
HeapAlloc (Address: 0x101700d0)
HeapFree (Address: 0x101700d8)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x101700e4)
GlobalFree (Address: 0x101700e8)
LocalAlloc (Address: 0x101700f0)
LocalFree (Address: 0x101700ec)
LocalReAlloc (Address: 0x101700e0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x101700fc)
InterlockedFlushSList (Address: 0x10170100)
InterlockedPushEntrySList (Address: 0x101700f8)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x10170108)
RegisterWaitForSingleObject (Address: 0x1017010c)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10170114)
FreeLibrary (Address: 0x10170124)
GetModuleFileNameA (Address: 0x10170120)
GetModuleFileNameW (Address: 0x1017012c)
GetModuleHandleExW (Address: 0x1017011c)
GetModuleHandleW (Address: 0x10170134)
GetProcAddress (Address: 0x10170118)
LoadLibraryExW (Address: 0x10170128)
LoadStringW (Address: 0x10170130)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1017013c)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x10170144)
MapViewOfFile (Address: 0x10170148)
MapViewOfFileEx (Address: 0x10170150)
OpenFileMappingW (Address: 0x1017014c)
UnmapViewOfFile (Address: 0x10170158)
VirtualQueryEx (Address: 0x10170154)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x10170160)
GetCommandLineW (Address: 0x10170164)

api-ms-win-core-processthreads-l1-1-0.dll

ExitProcess (Address: 0x10170180)
GetCurrentProcess (Address: 0x1017017c)
GetCurrentProcessId (Address: 0x10170188)
GetCurrentThread (Address: 0x10170184)
GetCurrentThreadId (Address: 0x10170174)
GetProcessId (Address: 0x10170190)
GetProcessTimes (Address: 0x10170194)
OpenProcessToken (Address: 0x1017018c)
OpenThread (Address: 0x10170178)
OpenThreadToken (Address: 0x10170170)
TerminateProcess (Address: 0x1017016c)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x101701a0)
OpenProcess (Address: 0x1017019c)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x101701a8)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x101701b0)

api-ms-win-core-psm-key-l1-1-0.dll

PsmGetKeyFromProcess (Address: 0x101701b8)
PsmGetKeyFromToken (Address: 0x101701bc)
PsmGetPackageFullNameFromKey (Address: 0x101701c0)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x101701c8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x101701d8)
RegCreateKeyExW (Address: 0x101701d0)
RegDeleteKeyExW (Address: 0x101701dc)
RegEnumKeyExW (Address: 0x101701ec)
RegGetValueW (Address: 0x101701e0)
RegOpenCurrentUser (Address: 0x101701f0)
RegOpenKeyExW (Address: 0x101701f8)
RegQueryInfoKeyW (Address: 0x101701f4)
RegQueryValueExW (Address: 0x101701e8)
RegSetKeySecurity (Address: 0x101701d4)
RegSetValueExW (Address: 0x101701e4)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureStackBackTrace (Address: 0x10170200)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpNIW (Address: 0x10170208)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10170210)
MultiByteToWideChar (Address: 0x10170218)
WideCharToMultiByte (Address: 0x10170214)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10170258)
AcquireSRWLockShared (Address: 0x1017026c)
CreateEventExW (Address: 0x10170240)
CreateEventW (Address: 0x10170244)
CreateMutexExW (Address: 0x10170270)
CreateSemaphoreExW (Address: 0x10170254)
CreateWaitableTimerExW (Address: 0x10170238)
DeleteCriticalSection (Address: 0x10170268)
EnterCriticalSection (Address: 0x1017023c)
InitializeCriticalSection (Address: 0x10170230)
InitializeCriticalSectionEx (Address: 0x10170220)
InitializeSRWLock (Address: 0x10170228)
LeaveCriticalSection (Address: 0x10170248)
OpenEventW (Address: 0x1017025c)
OpenSemaphoreW (Address: 0x10170274)
ReleaseMutex (Address: 0x1017022c)
ReleaseSemaphore (Address: 0x10170234)
ReleaseSRWLockExclusive (Address: 0x1017024c)
ReleaseSRWLockShared (Address: 0x10170280)
ResetEvent (Address: 0x1017027c)
SetEvent (Address: 0x10170278)
SetWaitableTimerEx (Address: 0x10170264)
TryAcquireSRWLockExclusive (Address: 0x10170284)
WaitForMultipleObjectsEx (Address: 0x10170250)
WaitForSingleObject (Address: 0x10170224)
WaitForSingleObjectEx (Address: 0x10170260)

api-ms-win-core-synch-l1-2-0.dll

InitializeConditionVariable (Address: 0x101702ac)
InitOnceBeginInitialize (Address: 0x10170298)
InitOnceComplete (Address: 0x101702a0)
InitOnceExecuteOnce (Address: 0x101702a4)
InitOnceInitialize (Address: 0x1017028c)
Sleep (Address: 0x1017029c)
WaitOnAddress (Address: 0x10170294)
WakeByAddressSingle (Address: 0x10170290)
WakeConditionVariable (Address: 0x101702a8)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x101702b4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x101702c0)
GetTickCount (Address: 0x101702bc)
GetVersionExW (Address: 0x101702c4)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x101702cc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x101702e4)
CloseThreadpoolWait (Address: 0x101702d8)
CloseThreadpoolWork (Address: 0x10170304)
CreateThreadpoolTimer (Address: 0x101702ec)
CreateThreadpoolWait (Address: 0x101702d4)
CreateThreadpoolWork (Address: 0x101702f4)
DisassociateCurrentThreadFromCallback (Address: 0x101702fc)
SetThreadpoolTimer (Address: 0x101702f8)
SetThreadpoolWait (Address: 0x101702e0)
SubmitThreadpoolWork (Address: 0x10170300)
WaitForThreadpoolTimerCallbacks (Address: 0x101702e8)
WaitForThreadpoolWaitCallbacks (Address: 0x101702dc)
WaitForThreadpoolWorkCallbacks (Address: 0x101702f0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x10170314)
DeleteTimerQueueTimer (Address: 0x1017030c)
QueueUserWorkItem (Address: 0x10170310)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10170320)
EncodePointer (Address: 0x1017031c)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10170328)
RoFailFastWithErrorContext (Address: 0x10170330)
RoOriginateError (Address: 0x1017032c)
RoOriginateErrorW (Address: 0x10170340)
RoTransformError (Address: 0x1017033c)
RoTransformErrorW (Address: 0x10170338)
SetRestrictedErrorInfo (Address: 0x10170334)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10170348)
RoGetMatchingRestrictedErrorInfo (Address: 0x10170354)
RoOriginateLanguageException (Address: 0x10170350)
RoReportFailedDelegate (Address: 0x1017034c)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x1017036c)
RoGetActivationFactory (Address: 0x10170370)
RoInitialize (Address: 0x1017035c)
RoRegisterActivationFactories (Address: 0x10170368)
RoRevokeActivationFactories (Address: 0x10170364)
RoUninitialize (Address: 0x10170360)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x101703a0)
HSTRING_UserMarshal (Address: 0x1017039c)
HSTRING_UserSize (Address: 0x1017038c)
HSTRING_UserUnmarshal (Address: 0x101703a8)
WindowsCompareStringOrdinal (Address: 0x10170388)
WindowsConcatString (Address: 0x10170398)
WindowsCreateString (Address: 0x101703c0)
WindowsCreateStringReference (Address: 0x101703bc)
WindowsDeleteString (Address: 0x101703b0)
WindowsDeleteStringBuffer (Address: 0x1017037c)
WindowsDuplicateString (Address: 0x101703b4)
WindowsGetStringLen (Address: 0x10170390)
WindowsGetStringRawBuffer (Address: 0x101703a4)
WindowsIsStringEmpty (Address: 0x10170394)
WindowsPreallocateStringBuffer (Address: 0x10170380)
WindowsPromoteStringBuffer (Address: 0x10170378)
WindowsStringHasEmbeddedNull (Address: 0x101703ac)
WindowsSubstring (Address: 0x10170384)
WindowsSubstringWithSpecifiedLength (Address: 0x101703b8)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x1017045c)
__std_terminate (Address: 0x10170458)
_CxxThrowException (Address: 0x10170420)
_except_handler4_common (Address: 0x1017041c)
_o___std_exception_copy (Address: 0x10170454)
_o___std_exception_destroy (Address: 0x10170450)
_o___std_type_info_destroy_list (Address: 0x1017044c)
_o___stdio_common_vsnprintf_s (Address: 0x10170448)
_o___stdio_common_vsnwprintf_s (Address: 0x10170444)
_o___stdio_common_vsprintf_s (Address: 0x10170440)
_o___stdio_common_vswprintf (Address: 0x1017043c)
_o__callnewh (Address: 0x10170438)
_o__cexit (Address: 0x10170434)
_o__configure_narrow_argv (Address: 0x10170430)
_o__crt_atexit (Address: 0x1017042c)
_o__errno (Address: 0x10170428)
_o__execute_onexit_table (Address: 0x10170424)
_o__free_base (Address: 0x10170418)
_o__initialize_narrow_environment (Address: 0x101703c8)
_o__initialize_onexit_table (Address: 0x101703cc)
_o__invalid_parameter_noinfo (Address: 0x101703d0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x101703d4)
_o__malloc_base (Address: 0x101703d8)
_o__purecall (Address: 0x101703dc)
_o__register_onexit_function (Address: 0x101703e0)
_o__seh_filter_dll (Address: 0x101703e4)
_o__set_errno (Address: 0x101703e8)
_o__ui64tow_s (Address: 0x101703ec)
_o__wcsicmp (Address: 0x101703f0)
_o_free (Address: 0x101703f8)
_o_iswspace (Address: 0x101703fc)
_o_malloc (Address: 0x10170400)
_o_realloc (Address: 0x10170404)
_o_strncpy_s (Address: 0x10170408)
_o_strtol (Address: 0x1017040c)
_o_terminate (Address: 0x10170410)
_o_toupper (Address: 0x10170414)
memcmp (Address: 0x10170460)
memcpy (Address: 0x10170464)
memmove (Address: 0x101703f4)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x10170470)
_initterm_e (Address: 0x1017046c)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x10170478)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1017048c)
GetTraceEnableLevel (Address: 0x10170488)
GetTraceLoggerHandle (Address: 0x10170490)
RegisterTraceGuidsW (Address: 0x10170484)
TraceMessage (Address: 0x10170494)
UnregisterTraceGuids (Address: 0x10170480)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x101704a0)
EventProviderEnabled (Address: 0x1017049c)
EventRegister (Address: 0x101704a8)
EventSetInformation (Address: 0x101704ac)
EventUnregister (Address: 0x101704b0)
EventWriteTransfer (Address: 0x101704a4)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x101704c4)
CreateWellKnownSid (Address: 0x101704bc)
FreeSid (Address: 0x101704c8)
GetLengthSid (Address: 0x101704c0)
GetTokenInformation (Address: 0x101704b8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x101704d4)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x101704d8)
ConvertStringSidToSidW (Address: 0x101704d0)

combase.dll

(Address: 0x101704e0)
(Address: 0x101704e4)
(Address: 0x101704e8)
(Address: 0x101704ec)
(Address: 0x101704f0)
(Address: 0x101704f4)
(Address: 0x101704f8)

msvcp_win.dll

?__ExceptionPtrAssign@@YAXPAXPBX@Z (Address: 0x10170518)
?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x10170510)
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z (Address: 0x10170500)
?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x10170508)
?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x1017050c)
?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x10170514)
?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x10170504)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1017051c)

ntdll.dll

NtClose (Address: 0x10170588)
NtDelayExecution (Address: 0x10170544)
NtIsProcessInJob (Address: 0x10170550)
NtOpenProcessTokenEx (Address: 0x101705d0)
NtQueryInformationJobObject (Address: 0x10170554)
NtQueryInformationProcess (Address: 0x10170568)
NtQueryInformationToken (Address: 0x1017059c)
NtQueryWnfStateData (Address: 0x10170620)
NtResetEvent (Address: 0x10170564)
NtWaitForSingleObject (Address: 0x10170540)
RtlAcquireSRWLockExclusive (Address: 0x10170578)
RtlAcquireSRWLockShared (Address: 0x10170574)
RtlAllocateHeap (Address: 0x101705a0)
RtlAllocateWnfSerializationGroup (Address: 0x10170548)
RtlCompareUnicodeString (Address: 0x101705a8)
RtlCompareUnicodeStrings (Address: 0x1017056c)
RtlConvertDeviceFamilyInfoToString (Address: 0x101705c0)
RtlConvertSidToUnicodeString (Address: 0x10170610)
RtlDeriveCapabilitySidsFromName (Address: 0x10170614)
RtlEqualSid (Address: 0x1017060c)
RtlExpandEnvironmentStrings (Address: 0x10170624)
RtlFindLeastSignificantBit (Address: 0x101705e8)
RtlFlushHeaps (Address: 0x10170530)
RtlFreeHeap (Address: 0x10170594)
RtlFreeUnicodeString (Address: 0x101705ac)
RtlGetDeviceFamilyInfoEnum (Address: 0x101705c4)
RtlGetTokenNamedObjectPath (Address: 0x101705b0)
RtlGUIDFromString (Address: 0x10170590)
RtlInitializeConditionVariable (Address: 0x1017055c)
RtlInitializeSRWLock (Address: 0x10170584)
RtlInitUnicodeString (Address: 0x10170618)
RtlIsMultiSessionSku (Address: 0x10170604)
RtlLengthSid (Address: 0x101705bc)
RtlLoadString (Address: 0x101705e4)
RtlNtStatusToDosError (Address: 0x101705dc)
RtlNtStatusToDosErrorNoTeb (Address: 0x101705a4)
RtlQueryPackageClaims (Address: 0x101705e0)
RtlQueryPackageIdentity (Address: 0x1017052c)
RtlQueryUnbiasedInterruptTime (Address: 0x1017058c)
RtlQueryWnfStateData (Address: 0x101705cc)
RtlRaiseStatus (Address: 0x10170558)
RtlReleaseSRWLockExclusive (Address: 0x1017057c)
RtlReleaseSRWLockShared (Address: 0x10170570)
RtlRunOnceBeginInitialize (Address: 0x101705fc)
RtlRunOnceExecuteOnce (Address: 0x10170600)
RtlSleepConditionVariableSRW (Address: 0x10170580)
RtlSubscribeWnfStateChangeNotification (Address: 0x1017061c)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x10170534)
RtlUnsubscribeWnfNotificationWithCompletionCallback (Address: 0x1017054c)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x1017053c)
RtlUpcaseUnicodeChar (Address: 0x10170524)
RtlWaitOnAddress (Address: 0x10170538)
RtlWakeAddressAll (Address: 0x101705d8)
RtlWakeAllConditionVariable (Address: 0x10170560)
strchr (Address: 0x101705c8)
TpAllocWait (Address: 0x101705f0)
TpReleaseWait (Address: 0x101705f4)
TpSetWait (Address: 0x101705ec)
TpTrimPools (Address: 0x10170528)
TpWaitForWait (Address: 0x101705f8)
wcschr (Address: 0x10170598)
wcscspn (Address: 0x101705b8)
wcsrchr (Address: 0x101705b4)
WinSqmAddToStreamEx (Address: 0x101705d4)
WinSqmIsOptedIn (Address: 0x10170608)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10170010)
CStdStubBuffer_Connect (Address: 0x10170000)
CStdStubBuffer_CountRefs (Address: 0x10170014)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1017001c)
CStdStubBuffer_DebugServerRelease (Address: 0x10170068)
CStdStubBuffer_Disconnect (Address: 0x10170004)
CStdStubBuffer_Invoke (Address: 0x1017002c)
CStdStubBuffer_IsIIDSupported (Address: 0x10170048)
CStdStubBuffer_QueryInterface (Address: 0x1017000c)
I_RpcBindingInqLocalClientPID (Address: 0x10170058)
I_RpcMapWin32Status (Address: 0x10170054)
IUnknown_AddRef_Proxy (Address: 0x10170020)
IUnknown_QueryInterface_Proxy (Address: 0x10170050)
IUnknown_Release_Proxy (Address: 0x10170008)
NdrClientCall4 (Address: 0x1017006c)
NdrCStdStubBuffer_Release (Address: 0x10170030)
NdrCStdStubBuffer2_Release (Address: 0x1017003c)
NdrDllCanUnloadNow (Address: 0x10170034)
NdrDllGetClassObject (Address: 0x10170038)
NdrOleAllocate (Address: 0x10170064)
NdrOleFree (Address: 0x10170018)
NdrStubCall2 (Address: 0x10170024)
NdrStubForwardingFunction (Address: 0x10170028)
RpcBindingBind (Address: 0x10170044)
RpcBindingCreateW (Address: 0x10170040)
RpcBindingFree (Address: 0x1017004c)
RpcExceptionFilter (Address: 0x10170060)
UuidCreate (Address: 0x1017005c)