vssapi.dll
Description: Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4355
Architecture: 32-bit
Operating System: Windows NT
SHA256: 5f76cf53d899ece65916ef6a24bef6b0
File Size: 1.1 MB
Uploaded At: Dec. 1, 2025, 8:06 a.m.
Views: 7
Exported Functions
- IsVolumeSnapshotted (Ordinal: 5, Address: 0x56be0)
- VssFreeSnapshotProperties (Ordinal: 6, Address: 0x57ef0)
- ShouldBlockRevert (Ordinal: 7, Address: 0x573b0)
- ??0CVssJetWriter@@QAE@XZ (Ordinal: 8, Address: 0x5bfd0)
- ??0CVssWriter@@QAE@XZ (Ordinal: 9, Address: 0x58280)
- ??1CVssJetWriter@@UAE@XZ (Ordinal: 10, Address: 0x5bff0)
- ??1CVssWriter@@UAE@XZ (Ordinal: 11, Address: 0x585c0)
- ?AreComponentsSelected@CVssJetWriter@@IBG_NXZ (Ordinal: 12, Address: 0x5c080)
- ?AreComponentsSelected@CVssWriter@@IBG_NXZ (Ordinal: 13, Address: 0x58a00)
- ?CreateVssBackupComponents@@YGJPAPAVIVssBackupComponents@@@Z (Ordinal: 14, Address: 0x5b430)
- ?CreateVssExamineWriterMetadata@@YGJPAGPAPAVIVssExamineWriterMetadata@@@Z (Ordinal: 15, Address: 0x5b5c0)
- ?GetBackupType@CVssJetWriter@@IBG?AW4_VSS_BACKUP_TYPE@@XZ (Ordinal: 16, Address: 0x5c0f0)
- ?GetBackupType@CVssWriter@@IBG?AW4_VSS_BACKUP_TYPE@@XZ (Ordinal: 17, Address: 0x58e90)
- ?GetContext@CVssJetWriter@@IBGJXZ (Ordinal: 18, Address: 0x5c160)
- ?GetContext@CVssWriter@@IBGJXZ (Ordinal: 19, Address: 0x58ed0)
- ?GetCurrentLevel@CVssJetWriter@@IBG?AW4_VSS_APPLICATION_LEVEL@@XZ (Ordinal: 20, Address: 0x5c1d0)
- ?GetCurrentLevel@CVssWriter@@IBG?AW4_VSS_APPLICATION_LEVEL@@XZ (Ordinal: 21, Address: 0x58fe0)
- ?GetCurrentSnapshotSetId@CVssJetWriter@@IBG?AU_GUID@@XZ (Ordinal: 22, Address: 0x5c240)
- ?GetCurrentSnapshotSetId@CVssWriter@@IBG?AU_GUID@@XZ (Ordinal: 23, Address: 0x59070)
- ?GetCurrentVolumeArray@CVssJetWriter@@IBGPAPBGXZ (Ordinal: 24, Address: 0x5c2c0)
- ?GetCurrentVolumeArray@CVssWriter@@IBGPAPBGXZ (Ordinal: 25, Address: 0x590b0)
- ?GetCurrentVolumeCount@CVssJetWriter@@IBGIXZ (Ordinal: 26, Address: 0x5c330)
- ?GetCurrentVolumeCount@CVssWriter@@IBGIXZ (Ordinal: 27, Address: 0x590f0)
- ?GetRestoreType@CVssJetWriter@@IBG?AW4_VSS_RESTORE_TYPE@@XZ (Ordinal: 28, Address: 0x5c3a0)
- ?GetRestoreType@CVssWriter@@IBG?AW4_VSS_RESTORE_TYPE@@XZ (Ordinal: 29, Address: 0x595f0)
- ?GetSnapshotDeviceName@CVssJetWriter@@IBGJPBGPAPBG@Z (Ordinal: 30, Address: 0x5c410)
- ?GetSnapshotDeviceName@CVssWriter@@IBGJPBGPAPBG@Z (Ordinal: 31, Address: 0x59680)
- ?Initialize@CVssJetWriter@@QAGJU_GUID@@PBG_N211K@Z (Ordinal: 32, Address: 0x5c480)
- ?Initialize@CVssWriter@@QAGJU_GUID@@PBGW4VSS_USAGE_TYPE@@W4VSS_SOURCE_TYPE@@W4_VSS_APPLICATION_LEVEL@@KW4VSS_ALTERNATE_WRITER_STATE@@_N1@Z (Ordinal: 33, Address: 0x59b50)
- ?InstallAlternateWriter@CVssWriter@@QAGJU_GUID@@0@Z (Ordinal: 34, Address: 0x59be0)
- ?IsBootableSystemStateBackedUp@CVssJetWriter@@IBG_NXZ (Ordinal: 35, Address: 0x5c870)
- ?IsBootableSystemStateBackedUp@CVssWriter@@IBG_NXZ (Ordinal: 36, Address: 0x59ca0)
- ?IsPartialFileSupportEnabled@CVssJetWriter@@IBG_NXZ (Ordinal: 37, Address: 0x5c8e0)
- ?IsPartialFileSupportEnabled@CVssWriter@@IBG_NXZ (Ordinal: 38, Address: 0x59d20)
- ?IsPathAffected@CVssJetWriter@@IBG_NPBG@Z (Ordinal: 39, Address: 0x5c950)
- ?IsPathAffected@CVssWriter@@IBG_NPBG@Z (Ordinal: 40, Address: 0x59d60)
- ?OnAbortBegin@CVssJetWriter@@UAGXXZ (Ordinal: 41, Address: 0x5c9c0)
- ?OnAbortEnd@CVssJetWriter@@UAGXXZ (Ordinal: 42, Address: 0x5ca10)
- ?OnBackOffIOOnVolume@CVssWriter@@UAG_NPAGU_GUID@@1@Z (Ordinal: 43, Address: 0x43f80)
- ?OnBackupComplete@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 44, Address: 0x43f90)
- ?OnBackupCompleteBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 45, Address: 0x5ca60)
- ?OnBackupCompleteEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z (Ordinal: 46, Address: 0x5cab0)
- ?OnBackupShutdown@CVssWriter@@UAG_NU_GUID@@@Z (Ordinal: 47, Address: 0x43fa0)
- ?OnContinueIOOnVolume@CVssWriter@@UAG_NPAGU_GUID@@1@Z (Ordinal: 48, Address: 0x43f80)
- ?OnFreezeBegin@CVssJetWriter@@UAG_NXZ (Ordinal: 49, Address: 0x5cb00)
- ?OnFreezeEnd@CVssJetWriter@@UAG_N_N@Z (Ordinal: 50, Address: 0x5cb50)
- ?OnIdentify@CVssJetWriter@@UAG_NPAVIVssCreateWriterMetadata@@@Z (Ordinal: 51, Address: 0x5cba0)
- ?OnIdentify@CVssWriter@@UAG_NPAVIVssCreateWriterMetadata@@@Z (Ordinal: 52, Address: 0x43f90)
- ?OnPostRestore@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 53, Address: 0x43f90)
- ?OnPostRestoreBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 54, Address: 0x5cbf0)
- ?OnPostRestoreEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z (Ordinal: 55, Address: 0x5cc40)
- ?OnPostSnapshot@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 56, Address: 0x5cc90)
- ?OnPostSnapshot@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 57, Address: 0x43f90)
- ?OnPreRestore@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 58, Address: 0x43f90)
- ?OnPreRestoreBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 59, Address: 0x5cce0)
- ?OnPreRestoreEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z (Ordinal: 60, Address: 0x5cd30)
- ?OnPrepareBackup@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 61, Address: 0x43f90)
- ?OnPrepareBackupBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z (Ordinal: 62, Address: 0x5cd80)
- ?OnPrepareBackupEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z (Ordinal: 63, Address: 0x5cdd0)
- ?OnPrepareSnapshotBegin@CVssJetWriter@@UAG_NXZ (Ordinal: 64, Address: 0x5ce20)
- ?OnPrepareSnapshotEnd@CVssJetWriter@@UAG_N_N@Z (Ordinal: 65, Address: 0x5ce70)
- ?OnThawBegin@CVssJetWriter@@UAG_NXZ (Ordinal: 66, Address: 0x5cec0)
- ?OnThawEnd@CVssJetWriter@@UAG_N_N@Z (Ordinal: 67, Address: 0x5cf10)
- ?OnVSSApplicationStartup@CVssWriter@@UAG_NXZ (Ordinal: 68, Address: 0x43fb0)
- ?OnVSSShutdown@CVssWriter@@UAG_NXZ (Ordinal: 69, Address: 0x43fb0)
- ?SetWriterFailure@CVssJetWriter@@IAGJJ@Z (Ordinal: 70, Address: 0x5cf60)
- ?SetWriterFailure@CVssWriter@@IAGJJ@Z (Ordinal: 71, Address: 0x5aca0)
- ?Subscribe@CVssWriter@@QAGJK@Z (Ordinal: 72, Address: 0x5aec0)
- ?Uninitialize@CVssJetWriter@@QAGXXZ (Ordinal: 73, Address: 0x5cfd0)
- ?Unsubscribe@CVssWriter@@QAGJXZ (Ordinal: 74, Address: 0x5b0c0)
- CreateVssBackupComponentsInternal (Ordinal: 75, Address: 0x5b430)
- CreateVssExamineWriterMetadataInternal (Ordinal: 76, Address: 0x5b5c0)
- CreateVssExpressWriterInternal (Ordinal: 77, Address: 0x5b850)
- CreateVssSnapshotSetDescription (Ordinal: 78, Address: 0x5ba80)
- CreateWriter (Ordinal: 79, Address: 0x39a10)
- CreateWriterEx (Ordinal: 80, Address: 0x39840)
- DllCanUnloadNow (Ordinal: 81, Address: 0x56ba0)
- DllGetClassObject (Ordinal: 82, Address: 0x56bc0)
- GetProviderMgmtInterface (Ordinal: 83, Address: 0x39470)
- GetProviderMgmtInterfaceInternal (Ordinal: 84, Address: 0x39470)
- IsVolumeSnapshottedInternal (Ordinal: 85, Address: 0x56be0)
- LoadVssSnapshotSetDescription (Ordinal: 86, Address: 0x5be30)
- ShouldBlockRevertInternal (Ordinal: 87, Address: 0x573b0)
- VssFreeSnapshotPropertiesInternal (Ordinal: 88, Address: 0x57ef0)
Imported DLLs & Functions
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x100ea05c)
- IsDebuggerPresent (Address: 0x100ea060)
- OutputDebugStringA (Address: 0x100ea054)
- OutputDebugStringW (Address: 0x100ea058)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x100ea068)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x100ea070)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x100ea078)
- RaiseException (Address: 0x100ea08c)
- SetErrorMode (Address: 0x100ea088)
- SetLastError (Address: 0x100ea084)
- SetUnhandledExceptionFilter (Address: 0x100ea07c)
- UnhandledExceptionFilter (Address: 0x100ea080)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x100ea0c4)
- CreateFileW (Address: 0x100ea0a8)
- DeleteFileW (Address: 0x100ea0c0)
- FindClose (Address: 0x100ea0a0)
- FindFirstFileW (Address: 0x100ea0b4)
- FindNextFileW (Address: 0x100ea0d0)
- GetDriveTypeW (Address: 0x100ea0bc)
- GetFileAttributesW (Address: 0x100ea0cc)
- GetFullPathNameW (Address: 0x100ea0b8)
- GetLogicalDrives (Address: 0x100ea0ac)
- GetVolumeInformationW (Address: 0x100ea0b0)
- GetVolumePathNameW (Address: 0x100ea0a4)
- ReadFile (Address: 0x100ea094)
- SetFilePointer (Address: 0x100ea098)
- SetFilePointerEx (Address: 0x100ea09c)
- WriteFile (Address: 0x100ea0c8)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x100ea0d8)
- GetVolumePathNamesForVolumeNameW (Address: 0x100ea0dc)
api-ms-win-core-file-l2-1-0.dll
- CopyFileExW (Address: 0x100ea0e4)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x100ea0ec)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x100ea100)
- HeapAlloc (Address: 0x100ea0f4)
- HeapDestroy (Address: 0x100ea0f8)
- HeapFree (Address: 0x100ea0fc)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x100ea114)
- GlobalFree (Address: 0x100ea10c)
- LocalAlloc (Address: 0x100ea108)
- LocalFree (Address: 0x100ea110)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x100ea120)
- GlobalUnlock (Address: 0x100ea11c)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x100ea128)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
- SetVolumeMountPointW (Address: 0x100ea130)
api-ms-win-core-libraryloader-l1-2-0.dll
- FindResourceExW (Address: 0x100ea148)
- FreeLibrary (Address: 0x100ea154)
- FreeResource (Address: 0x100ea140)
- GetModuleFileNameA (Address: 0x100ea160)
- GetModuleFileNameW (Address: 0x100ea168)
- GetModuleHandleExW (Address: 0x100ea158)
- GetModuleHandleW (Address: 0x100ea150)
- GetProcAddress (Address: 0x100ea13c)
- LoadLibraryExW (Address: 0x100ea15c)
- LoadResource (Address: 0x100ea164)
- LoadStringW (Address: 0x100ea144)
- LockResource (Address: 0x100ea138)
- SizeofResource (Address: 0x100ea14c)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x100ea170)
api-ms-win-core-memory-l1-1-0.dll
- VirtualAlloc (Address: 0x100ea180)
- VirtualProtect (Address: 0x100ea178)
- VirtualQuery (Address: 0x100ea17c)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x100ea18c)
- GetCommandLineW (Address: 0x100ea188)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x100ea198)
- GetCurrentProcess (Address: 0x100ea1b0)
- GetCurrentProcessId (Address: 0x100ea1c4)
- GetCurrentThread (Address: 0x100ea19c)
- GetCurrentThreadId (Address: 0x100ea1b8)
- OpenProcessToken (Address: 0x100ea194)
- OpenThreadToken (Address: 0x100ea1bc)
- ResumeThread (Address: 0x100ea1b4)
- SetThreadToken (Address: 0x100ea1c0)
- TerminateProcess (Address: 0x100ea1a0)
- TlsAlloc (Address: 0x100ea1a8)
- TlsGetValue (Address: 0x100ea1ac)
- TlsSetValue (Address: 0x100ea1a4)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x100ea1cc)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x100ea1ec)
- RegCreateKeyExW (Address: 0x100ea1e0)
- RegDeleteValueW (Address: 0x100ea1fc)
- RegEnumKeyExW (Address: 0x100ea1d4)
- RegEnumValueW (Address: 0x100ea1f4)
- RegLoadKeyW (Address: 0x100ea1e8)
- RegOpenKeyExW (Address: 0x100ea1f8)
- RegQueryInfoKeyW (Address: 0x100ea1dc)
- RegQueryValueExW (Address: 0x100ea1e4)
- RegSetValueExW (Address: 0x100ea1f0)
- RegUnLoadKeyW (Address: 0x100ea1d8)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x100ea208)
- WideCharToMultiByte (Address: 0x100ea204)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x100ea210)
- CharPrevW (Address: 0x100ea214)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x100ea220)
- lstrcpynW (Address: 0x100ea21c)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x100ea22c)
- CreateEventW (Address: 0x100ea238)
- CreateMutexExW (Address: 0x100ea26c)
- CreateMutexW (Address: 0x100ea248)
- CreateSemaphoreExW (Address: 0x100ea24c)
- DeleteCriticalSection (Address: 0x100ea268)
- EnterCriticalSection (Address: 0x100ea234)
- InitializeCriticalSection (Address: 0x100ea240)
- InitializeCriticalSectionAndSpinCount (Address: 0x100ea254)
- LeaveCriticalSection (Address: 0x100ea228)
- OpenSemaphoreW (Address: 0x100ea23c)
- ReleaseMutex (Address: 0x100ea25c)
- ReleaseSemaphore (Address: 0x100ea250)
- ReleaseSRWLockExclusive (Address: 0x100ea258)
- ResetEvent (Address: 0x100ea260)
- SetEvent (Address: 0x100ea230)
- WaitForSingleObject (Address: 0x100ea264)
- WaitForSingleObjectEx (Address: 0x100ea244)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x100ea278)
- InitOnceComplete (Address: 0x100ea27c)
- Sleep (Address: 0x100ea274)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x100ea2a0)
- GetSystemInfo (Address: 0x100ea290)
- GetSystemTime (Address: 0x100ea2a4)
- GetSystemTimeAsFileTime (Address: 0x100ea284)
- GetSystemWindowsDirectoryW (Address: 0x100ea288)
- GetTickCount (Address: 0x100ea28c)
- GetTickCount64 (Address: 0x100ea298)
- GetVersionExW (Address: 0x100ea294)
- GetWindowsDirectoryW (Address: 0x100ea29c)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x100ea2b0)
- EncodePointer (Address: 0x100ea2ac)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x100ea2b8)
- EventRegister (Address: 0x100ea2c8)
- EventSetInformation (Address: 0x100ea2c0)
- EventUnregister (Address: 0x100ea2c4)
- EventWriteTransfer (Address: 0x100ea2bc)
api-ms-win-eventlog-legacy-l1-1-0.dll
- DeregisterEventSource (Address: 0x100ea2d8)
- RegisterEventSourceW (Address: 0x100ea2d4)
- ReportEventW (Address: 0x100ea2d0)
api-ms-win-security-base-l1-1-0.dll
- AddAccessAllowedAceEx (Address: 0x100ea314)
- AddAccessDeniedAceEx (Address: 0x100ea318)
- AddAce (Address: 0x100ea320)
- AllocateAndInitializeSid (Address: 0x100ea338)
- CheckTokenMembership (Address: 0x100ea2f0)
- CopySid (Address: 0x100ea324)
- CreateWellKnownSid (Address: 0x100ea2e4)
- DuplicateToken (Address: 0x100ea2fc)
- EqualDomainSid (Address: 0x100ea30c)
- EqualSid (Address: 0x100ea308)
- FreeSid (Address: 0x100ea2ec)
- GetAce (Address: 0x100ea33c)
- GetAclInformation (Address: 0x100ea328)
- GetLengthSid (Address: 0x100ea2f8)
- GetSidSubAuthorityCount (Address: 0x100ea310)
- GetTokenInformation (Address: 0x100ea334)
- InitializeAcl (Address: 0x100ea31c)
- InitializeSecurityDescriptor (Address: 0x100ea2e0)
- IsValidSid (Address: 0x100ea304)
- PrivilegeCheck (Address: 0x100ea2e8)
- RevertToSelf (Address: 0x100ea300)
- SetSecurityDescriptorDacl (Address: 0x100ea32c)
- SetSecurityDescriptorGroup (Address: 0x100ea330)
- SetSecurityDescriptorOwner (Address: 0x100ea2f4)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x100ea40c)
- __dllonexit (Address: 0x100ea410)
- _amsg_exit (Address: 0x100ea358)
- _beginthreadex (Address: 0x100ea3b8)
- _callnewh (Address: 0x100ea37c)
- _CxxThrowException (Address: 0x100ea370)
- _errno (Address: 0x100ea3b4)
- _except_handler4_common (Address: 0x100ea344)
- _initterm (Address: 0x100ea348)
- _lock (Address: 0x100ea3a4)
- _onexit (Address: 0x100ea350)
- _purecall (Address: 0x100ea3d0)
- _resetstkoflw (Address: 0x100ea3f8)
- _unlock (Address: 0x100ea3e0)
- _vsnprintf (Address: 0x100ea3f4)
- _vsnprintf_s (Address: 0x100ea380)
- _vsnwprintf (Address: 0x100ea404)
- _wcsdup (Address: 0x100ea3a8)
- _wcsicmp (Address: 0x100ea400)
- _wcsnicmp (Address: 0x100ea3c8)
- _wtoi (Address: 0x100ea3d8)
- _wtoi64 (Address: 0x100ea3d4)
- _XcptFilter (Address: 0x100ea360)
- ??0exception@@QAE@ABQBD@Z (Address: 0x100ea3ec)
- ??0exception@@QAE@ABV0@@Z (Address: 0x100ea384)
- ??0exception@@QAE@XZ (Address: 0x100ea394)
- ??1exception@@UAE@XZ (Address: 0x100ea398)
- ??1type_info@@UAE@XZ (Address: 0x100ea354)
- ?terminate@@YAXXZ (Address: 0x100ea34c)
- ?what@exception@@UBEPBDXZ (Address: 0x100ea378)
- free (Address: 0x100ea3cc)
- iswdigit (Address: 0x100ea3f0)
- malloc (Address: 0x100ea3bc)
- memcmp (Address: 0x100ea3ac)
- memcpy (Address: 0x100ea408)
- memcpy_s (Address: 0x100ea39c)
- memmove (Address: 0x100ea35c)
- memmove_s (Address: 0x100ea3e4)
- memset (Address: 0x100ea414)
- qsort (Address: 0x100ea38c)
- realloc (Address: 0x100ea3fc)
- swscanf (Address: 0x100ea388)
- tolower (Address: 0x100ea364)
- towlower (Address: 0x100ea3c0)
- towupper (Address: 0x100ea3c4)
- wcscat_s (Address: 0x100ea3e8)
- wcschr (Address: 0x100ea3b0)
- wcsncmp (Address: 0x100ea374)
- wcspbrk (Address: 0x100ea368)
- wcsrchr (Address: 0x100ea36c)
- wcsstr (Address: 0x100ea390)
- wcstok (Address: 0x100ea3a0)
- wcstoul (Address: 0x100ea3dc)
ntdll.dll
- EtwGetTraceEnableFlags (Address: 0x100ea45c)
- EtwGetTraceEnableLevel (Address: 0x100ea454)
- EtwGetTraceLoggerHandle (Address: 0x100ea458)
- EtwRegisterTraceGuidsW (Address: 0x100ea448)
- EtwTraceMessage (Address: 0x100ea480)
- EtwUnregisterTraceGuids (Address: 0x100ea460)
- NtClose (Address: 0x100ea478)
- NtCreateFile (Address: 0x100ea468)
- NtFsControlFile (Address: 0x100ea474)
- NtOpenDirectoryObject (Address: 0x100ea420)
- NtOpenKey (Address: 0x100ea440)
- NtOpenSymbolicLinkObject (Address: 0x100ea428)
- NtQueryDirectoryObject (Address: 0x100ea41c)
- NtQueryInformationFile (Address: 0x100ea470)
- NtQuerySymbolicLinkObject (Address: 0x100ea424)
- NtQuerySystemInformation (Address: 0x100ea434)
- NtQueryValueKey (Address: 0x100ea444)
- NtQueryVolumeInformationFile (Address: 0x100ea464)
- RtlAdjustPrivilege (Address: 0x100ea42c)
- RtlFormatCurrentUserKeyPath (Address: 0x100ea438)
- RtlFreeUnicodeString (Address: 0x100ea43c)
- RtlGetSetBootStatusData (Address: 0x100ea484)
- RtlInitUnicodeString (Address: 0x100ea47c)
- RtlIpv4StringToAddressW (Address: 0x100ea44c)
- RtlIpv6StringToAddressW (Address: 0x100ea450)
- RtlNtStatusToDosError (Address: 0x100ea46c)
- RtlUnlockBootStatusData (Address: 0x100ea430)
RPCRT4.dll
- RpcStringFreeW (Address: 0x100ea008)
- UuidCreate (Address: 0x100ea000)
- UuidFromStringW (Address: 0x100ea004)
- UuidToStringW (Address: 0x100ea00c)
VssTrace.DLL
- (Address: 0x100ea014)
- (Address: 0x100ea018)
- (Address: 0x100ea01c)
- (Address: 0x100ea020)
- (Address: 0x100ea024)
- (Address: 0x100ea028)
- (Address: 0x100ea02c)
- (Address: 0x100ea030)
- (Address: 0x100ea034)
- (Address: 0x100ea038)
- (Address: 0x100ea03c)
WS2_32.dll
- GetNameInfoW (Address: 0x100ea04c)
- InetPtonW (Address: 0x100ea048)
- WSAStartup (Address: 0x100ea044)