ws2_32.dll

Description: Windows Socket 2.0 32-Bit DLL

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 5d920a7a5486e7c1693334d59271f2a5

File Size: 390.5 KB

Uploaded At: Dec. 1, 2025, 8:08 a.m.

Views: 19

Exported Functions

accept (Ordinal: 1, Address: 0x169c0)
bind (Ordinal: 2, Address: 0xd890)
closesocket (Ordinal: 3, Address: 0xea60)
connect (Ordinal: 4, Address: 0x15710)
getpeername (Ordinal: 5, Address: 0x13200)
getsockname (Ordinal: 6, Address: 0x12270)
getsockopt (Ordinal: 7, Address: 0x15960)
htonl (Ordinal: 8, Address: 0x5350)
htons (Ordinal: 9, Address: 0x56e0)
ioctlsocket (Ordinal: 10, Address: 0x12520)
inet_addr (Ordinal: 11, Address: 0x57e0)
inet_ntoa (Ordinal: 12, Address: 0x5940)
listen (Ordinal: 13, Address: 0x15d90)
ntohl (Ordinal: 14, Address: 0x5350)
ntohs (Ordinal: 15, Address: 0x56e0)
recv (Ordinal: 16, Address: 0x123a0)
recvfrom (Ordinal: 17, Address: 0x15ab0)
select (Ordinal: 18, Address: 0x15e50)
send (Ordinal: 19, Address: 0x158a0)
sendto (Ordinal: 20, Address: 0x16160)
setsockopt (Ordinal: 21, Address: 0xf070)
shutdown (Ordinal: 22, Address: 0x132b0)
socket (Ordinal: 23, Address: 0xc990)
WSApSetPostRoutine (Ordinal: 24, Address: 0x382f0)
FreeAddrInfoEx (Ordinal: 25, Address: 0x5b30)
FreeAddrInfoExW (Ordinal: 26, Address: 0x5b30)
FreeAddrInfoW (Ordinal: 27, Address: 0x7580)
GetAddrInfoExA (Ordinal: 28, Address: 0x2c910)
GetAddrInfoExCancel (Ordinal: 29, Address: 0x2caa0)
GetAddrInfoExOverlappedResult (Ordinal: 30, Address: 0x154f0)
GetAddrInfoExW (Ordinal: 31, Address: 0x13400)
GetAddrInfoW (Ordinal: 32, Address: 0x126b0)
GetHostNameW (Ordinal: 33, Address: 0x2f580)
GetNameInfoW (Ordinal: 34, Address: 0x5e60)
InetNtopW (Ordinal: 35, Address: 0x5fb0)
InetPtonW (Ordinal: 36, Address: 0x2b920)
SetAddrInfoExA (Ordinal: 37, Address: 0x2cbd0)
SetAddrInfoExW (Ordinal: 38, Address: 0x2cca0)
WPUCompleteOverlappedRequest (Ordinal: 39, Address: 0x38080)
WPUGetProviderPathEx (Ordinal: 40, Address: 0x16b40)
WSAAccept (Ordinal: 41, Address: 0x168a0)
WSAAddressToStringA (Ordinal: 42, Address: 0x12d90)
WSAAddressToStringW (Ordinal: 43, Address: 0xb4e0)
WSAAdvertiseProvider (Ordinal: 44, Address: 0x3a2a0)
WSACloseEvent (Ordinal: 45, Address: 0x5ac0)
WSAConnect (Ordinal: 46, Address: 0x36c80)
WSAConnectByList (Ordinal: 47, Address: 0x36d50)
WSAConnectByNameA (Ordinal: 48, Address: 0x374c0)
WSAConnectByNameW (Ordinal: 49, Address: 0x37620)
WSACreateEvent (Ordinal: 50, Address: 0x5cd0)
gethostbyaddr (Ordinal: 51, Address: 0x2fd80)
gethostbyname (Ordinal: 52, Address: 0x2ff10)
getprotobyname (Ordinal: 53, Address: 0x2ef50)
getprotobynumber (Ordinal: 54, Address: 0x2f0b0)
getservbyname (Ordinal: 55, Address: 0x30250)
getservbyport (Ordinal: 56, Address: 0x30430)
gethostname (Ordinal: 57, Address: 0x300a0)
WSADuplicateSocketA (Ordinal: 58, Address: 0x2ead0)
WSADuplicateSocketW (Ordinal: 59, Address: 0x2eb40)
WSAEnumNameSpaceProvidersA (Ordinal: 60, Address: 0x33ec0)
WSAEnumNameSpaceProvidersExA (Ordinal: 61, Address: 0x33f30)
WSAEnumNameSpaceProvidersExW (Ordinal: 62, Address: 0x33fa0)
WSAEnumNameSpaceProvidersW (Ordinal: 63, Address: 0x6f50)
WSAEnumNetworkEvents (Ordinal: 64, Address: 0x130d0)
WSAEnumProtocolsA (Ordinal: 65, Address: 0x3d9d0)
WSAEnumProtocolsW (Ordinal: 66, Address: 0x17a80)
WSAEventSelect (Ordinal: 67, Address: 0xc860)
WSAGetOverlappedResult (Ordinal: 68, Address: 0x6010)
WSAGetQOSByName (Ordinal: 69, Address: 0x32f30)
WSAGetServiceClassInfoA (Ordinal: 70, Address: 0x34010)
WSAGetServiceClassInfoW (Ordinal: 71, Address: 0x340c0)
WSAGetServiceClassNameByClassIdA (Ordinal: 72, Address: 0x34230)
WSAGetServiceClassNameByClassIdW (Ordinal: 73, Address: 0x34490)
WSAHtonl (Ordinal: 74, Address: 0x2b9a0)
WSAHtons (Ordinal: 75, Address: 0x2baa0)
WSAInstallServiceClassA (Ordinal: 76, Address: 0x346e0)
WSAInstallServiceClassW (Ordinal: 77, Address: 0x34770)
WSAIoctl (Ordinal: 78, Address: 0xf3b0)
WSAJoinLeaf (Ordinal: 79, Address: 0x37ed0)
WSALookupServiceBeginA (Ordinal: 80, Address: 0x34890)
WSALookupServiceBeginW (Ordinal: 81, Address: 0xfba0)
WSALookupServiceEnd (Ordinal: 82, Address: 0x105e0)
WSALookupServiceNextA (Ordinal: 83, Address: 0x34990)
WSALookupServiceNextW (Ordinal: 84, Address: 0xc5b0)
WSANSPIoctl (Ordinal: 85, Address: 0x34b50)
WSANtohl (Ordinal: 86, Address: 0x2bbb0)
WSANtohs (Ordinal: 87, Address: 0x2bcb0)
WSAPoll (Ordinal: 88, Address: 0x35540)
WSAProviderCompleteAsyncCall (Ordinal: 89, Address: 0x3a3f0)
WSAProviderConfigChange (Ordinal: 90, Address: 0x171a0)
WSARecv (Ordinal: 91, Address: 0xed70)
WSARecvDisconnect (Ordinal: 92, Address: 0x339b0)
WSARecvFrom (Ordinal: 93, Address: 0x17050)
WSARemoveServiceClass (Ordinal: 94, Address: 0x34c20)
WSAResetEvent (Ordinal: 95, Address: 0x58e0)
WSASend (Ordinal: 96, Address: 0xdff0)
WSASendDisconnect (Ordinal: 97, Address: 0x35760)
WSASendMsg (Ordinal: 98, Address: 0xe2f0)
WSASendTo (Ordinal: 99, Address: 0x35820)
WSASetEvent (Ordinal: 100, Address: 0x62b0)
WSAAsyncSelect (Ordinal: 101, Address: 0x160c0)
WSAAsyncGetHostByAddr (Ordinal: 102, Address: 0x2f740)
WSAAsyncGetHostByName (Ordinal: 103, Address: 0x2f830)
WSAAsyncGetProtoByNumber (Ordinal: 104, Address: 0x2fa50)
WSAAsyncGetProtoByName (Ordinal: 105, Address: 0x2f940)
WSAAsyncGetServByPort (Ordinal: 106, Address: 0x2fc30)
WSAAsyncGetServByName (Ordinal: 107, Address: 0x2fb10)
WSACancelAsyncRequest (Ordinal: 108, Address: 0x2fd00)
WSASetBlockingHook (Ordinal: 109, Address: 0x2e1c0)
WSAUnhookBlockingHook (Ordinal: 110, Address: 0x2e260)
WSAGetLastError (Ordinal: 111, Address: 0x5d50)
WSASetLastError (Ordinal: 112, Address: 0x6250)
WSACancelBlockingCall (Ordinal: 113, Address: 0x2e0b0)
WSAIsBlocking (Ordinal: 114, Address: 0x2e130)
WSAStartup (Ordinal: 115, Address: 0x9cc0)
WSACleanup (Ordinal: 116, Address: 0x6400)
WSASetServiceA (Ordinal: 117, Address: 0x34d40)
WSASetServiceW (Ordinal: 118, Address: 0x34dd0)
WSASocketA (Ordinal: 119, Address: 0x17140)
WSASocketW (Ordinal: 120, Address: 0xcbc0)
WSAStringToAddressA (Ordinal: 121, Address: 0x34f40)
WSAStringToAddressW (Ordinal: 122, Address: 0x62d0)
WSAUnadvertiseProvider (Ordinal: 123, Address: 0x3a540)
WSAWaitForMultipleEvents (Ordinal: 124, Address: 0x5e10)
WSCDeinstallProvider (Ordinal: 125, Address: 0x3de20)
WSCDeinstallProviderEx (Ordinal: 126, Address: 0x3de50)
WSCEnableNSProvider (Ordinal: 127, Address: 0x3fea0)
WSCEnumProtocols (Ordinal: 128, Address: 0x7a90)
WSCEnumProtocolsEx (Ordinal: 129, Address: 0x7ad0)
WSCGetApplicationCategory (Ordinal: 130, Address: 0x3e0c0)
WSCGetApplicationCategoryEx (Ordinal: 131, Address: 0x3e130)
WSCGetProviderInfo (Ordinal: 132, Address: 0x3e4e0)
WSCGetProviderPath (Ordinal: 133, Address: 0x16f20)
WSCInstallNameSpace (Ordinal: 134, Address: 0x3ffe0)
WSCInstallNameSpaceEx2 (Ordinal: 135, Address: 0x400a0)
WSCInstallNameSpaceEx (Ordinal: 136, Address: 0x402d0)
WSCInstallProvider (Ordinal: 137, Address: 0x3e7e0)
WSCInstallProviderAndChains (Ordinal: 138, Address: 0x31ae0)
WSCInstallProviderEx (Ordinal: 139, Address: 0x3efa0)
WSCSetApplicationCategory (Ordinal: 140, Address: 0x3f000)
WSCSetApplicationCategoryEx (Ordinal: 141, Address: 0x3f070)
WSCSetProviderInfo (Ordinal: 142, Address: 0x3f600)
WSCUnInstallNameSpace (Ordinal: 143, Address: 0x403a0)
WSCUnInstallNameSpaceEx2 (Ordinal: 144, Address: 0x403d0)
WSCUpdateProvider (Ordinal: 145, Address: 0x3f890)
WSCUpdateProviderEx (Ordinal: 146, Address: 0x3f900)
WSCWriteNameSpaceOrder (Ordinal: 147, Address: 0x40580)
WSCWriteProviderOrder (Ordinal: 148, Address: 0x3fae0)
WSCWriteProviderOrderEx (Ordinal: 149, Address: 0x3fb40)
WahCloseApcHelper (Ordinal: 150, Address: 0x6740)
__WSAFDIsSet (Ordinal: 151, Address: 0x57a0)
WahCloseHandleHelper (Ordinal: 152, Address: 0x3c2d0)
WahCloseNotificationHandleHelper (Ordinal: 153, Address: 0x3cbc0)
WahCloseSocketHandle (Ordinal: 154, Address: 0x3c320)
WahCloseThread (Ordinal: 155, Address: 0x3bbb0)
WahCompleteRequest (Ordinal: 156, Address: 0x3c370)
WahCreateHandleContextTable (Ordinal: 157, Address: 0x9fc0)
WahCreateNotificationHandle (Ordinal: 158, Address: 0x173d0)
WahCreateSocketHandle (Ordinal: 159, Address: 0x3c400)
WahDestroyHandleContextTable (Ordinal: 160, Address: 0x6130)
WahDisableNonIFSHandleSupport (Ordinal: 161, Address: 0x3c5b0)
WahEnableNonIFSHandleSupport (Ordinal: 162, Address: 0x3c640)
WahEnumerateHandleContexts (Ordinal: 163, Address: 0x6680)
WahInsertHandleContext (Ordinal: 164, Address: 0x16500)
WahNotifyAllProcesses (Ordinal: 165, Address: 0x3cbf0)
WahOpenApcHelper (Ordinal: 166, Address: 0xa260)
WahOpenCurrentThread (Ordinal: 167, Address: 0x3bc10)
WahOpenHandleHelper (Ordinal: 168, Address: 0x3c780)
WahOpenNotificationHandleHelper (Ordinal: 169, Address: 0x172c0)
WahQueueUserApc (Ordinal: 170, Address: 0x3bc80)
WahReferenceContextByHandle (Ordinal: 171, Address: 0x13370)
WahRemoveHandleContext (Ordinal: 172, Address: 0x16270)
WahWaitForNotification (Ordinal: 173, Address: 0x172f0)
WahWriteLSPEvent (Ordinal: 174, Address: 0x3cea0)
freeaddrinfo (Ordinal: 175, Address: 0x7580)
getaddrinfo (Ordinal: 176, Address: 0xa810)
getnameinfo (Ordinal: 177, Address: 0x2ce90)
inet_ntop (Ordinal: 178, Address: 0x2bdc0)
inet_pton (Ordinal: 179, Address: 0x2be30)
WEP (Ordinal: 500, Address: 0x18a50)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x4f7c9050)

api-ms-win-core-crt-l1-1-0.dll

__isascii (Address: 0x4f7c90b0)
_except_handler4_common (Address: 0x4f7c9060)
_stricmp (Address: 0x4f7c9088)
_vsnprintf_s (Address: 0x4f7c9090)
_vsnwprintf_s (Address: 0x4f7c90a8)
_wcsicmp (Address: 0x4f7c906c)
_wcsnicmp (Address: 0x4f7c90a0)
atoi (Address: 0x4f7c9080)
isspace (Address: 0x4f7c90ac)
memcmp (Address: 0x4f7c9058)
memcpy (Address: 0x4f7c9064)
memcpy_s (Address: 0x4f7c909c)
memset (Address: 0x4f7c9068)
sprintf_s (Address: 0x4f7c9098)
strchr (Address: 0x4f7c9084)
strcpy_s (Address: 0x4f7c907c)
strrchr (Address: 0x4f7c905c)
strtoul (Address: 0x4f7c9094)
towupper (Address: 0x4f7c9074)
wcschr (Address: 0x4f7c90a4)
wcscpy_s (Address: 0x4f7c9078)
wcsncmp (Address: 0x4f7c9070)
wcsstr (Address: 0x4f7c908c)

api-ms-win-core-crt-l2-1-0.dll

__dllonexit3 (Address: 0x4f7c90c8)
_initterm (Address: 0x4f7c90c4)
_initterm_e (Address: 0x4f7c90c0)
_onexit (Address: 0x4f7c90cc)
exit (Address: 0x4f7c90b8)
hgets (Address: 0x4f7c90bc)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x4f7c90d4)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x4f7c90dc)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x4f7c90e4)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x4f7c90f8)
SetLastError (Address: 0x4f7c90ec)
SetUnhandledExceptionFilter (Address: 0x4f7c90f4)
UnhandledExceptionFilter (Address: 0x4f7c90f0)

api-ms-win-core-file-l1-1-0.dll

CreateFileA (Address: 0x4f7c9100)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x4f7c9108)
DuplicateHandle (Address: 0x4f7c910c)
GetHandleInformation (Address: 0x4f7c9110)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x4f7c9124)
HeapAlloc (Address: 0x4f7c9128)
HeapDestroy (Address: 0x4f7c9120)
HeapFree (Address: 0x4f7c9118)
HeapReAlloc (Address: 0x4f7c911c)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x4f7c9134)
GlobalFree (Address: 0x4f7c9138)
LocalAlloc (Address: 0x4f7c9130)
LocalFree (Address: 0x4f7c913c)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x4f7c9144)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

PulseEvent (Address: 0x4f7c914c)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x4f7c9160)
FreeLibraryAndExitThread (Address: 0x4f7c9154)
GetModuleFileNameA (Address: 0x4f7c9158)
GetModuleFileNameW (Address: 0x4f7c9170)
GetModuleHandleA (Address: 0x4f7c915c)
GetModuleHandleExA (Address: 0x4f7c9174)
GetProcAddress (Address: 0x4f7c9178)
LoadLibraryExA (Address: 0x4f7c917c)
LoadLibraryExW (Address: 0x4f7c9164)
LoadStringA (Address: 0x4f7c9168)
LoadStringW (Address: 0x4f7c916c)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x4f7c9184)
ExpandEnvironmentStringsW (Address: 0x4f7c918c)
GetCommandLineW (Address: 0x4f7c9194)
GetEnvironmentVariableA (Address: 0x4f7c9188)
GetEnvironmentVariableW (Address: 0x4f7c9190)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x4f7c91dc)
GetCurrentProcess (Address: 0x4f7c91d0)
GetCurrentProcessId (Address: 0x4f7c91b8)
GetCurrentThread (Address: 0x4f7c91a0)
GetCurrentThreadId (Address: 0x4f7c91b0)
OpenProcessToken (Address: 0x4f7c91a4)
OpenThreadToken (Address: 0x4f7c91b4)
QueueUserAPC (Address: 0x4f7c91cc)
ResumeThread (Address: 0x4f7c91c8)
SetThreadToken (Address: 0x4f7c91c0)
SwitchToThread (Address: 0x4f7c91a8)
TerminateProcess (Address: 0x4f7c91d8)
TerminateThread (Address: 0x4f7c91c4)
TlsAlloc (Address: 0x4f7c91bc)
TlsFree (Address: 0x4f7c919c)
TlsGetValue (Address: 0x4f7c91d4)
TlsSetValue (Address: 0x4f7c91ac)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x4f7c91e4)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x4f7c91ec)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x4f7c9210)
RegCreateKeyExA (Address: 0x4f7c921c)
RegCreateKeyExW (Address: 0x4f7c9208)
RegDeleteKeyExA (Address: 0x4f7c91f4)
RegDeleteTreeA (Address: 0x4f7c9218)
RegEnumKeyExA (Address: 0x4f7c91f8)
RegGetKeySecurity (Address: 0x4f7c91fc)
RegNotifyChangeKeyValue (Address: 0x4f7c9224)
RegOpenKeyExA (Address: 0x4f7c920c)
RegOpenKeyExW (Address: 0x4f7c9204)
RegQueryValueExA (Address: 0x4f7c9200)
RegQueryValueExW (Address: 0x4f7c9220)
RegSetValueExA (Address: 0x4f7c9228)
RegSetValueExW (Address: 0x4f7c9214)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x4f7c9234)
WideCharToMultiByte (Address: 0x4f7c9230)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x4f7c9240)
lstrlenA (Address: 0x4f7c923c)

api-ms-win-core-synch-l1-1-0.dll

CreateEventA (Address: 0x4f7c9248)
CreateEventW (Address: 0x4f7c9260)
CreateMutexA (Address: 0x4f7c927c)
DeleteCriticalSection (Address: 0x4f7c9278)
EnterCriticalSection (Address: 0x4f7c9270)
InitializeCriticalSection (Address: 0x4f7c9250)
InitializeCriticalSectionAndSpinCount (Address: 0x4f7c925c)
LeaveCriticalSection (Address: 0x4f7c9274)
ReleaseMutex (Address: 0x4f7c9268)
ResetEvent (Address: 0x4f7c9254)
SetEvent (Address: 0x4f7c926c)
TryEnterCriticalSection (Address: 0x4f7c9258)
WaitForMultipleObjectsEx (Address: 0x4f7c924c)
WaitForSingleObject (Address: 0x4f7c9264)

api-ms-win-core-synch-l1-2-0.dll

InitializeConditionVariable (Address: 0x4f7c9294)
InitOnceExecuteOnce (Address: 0x4f7c9284)
Sleep (Address: 0x4f7c928c)
SleepConditionVariableCS (Address: 0x4f7c9290)
WakeAllConditionVariable (Address: 0x4f7c9288)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExA (Address: 0x4f7c92a0)
GetComputerNameExW (Address: 0x4f7c92a8)
GetSystemDirectoryA (Address: 0x4f7c92a4)
GetSystemInfo (Address: 0x4f7c92b0)
GetSystemTimeAsFileTime (Address: 0x4f7c929c)
GetTickCount (Address: 0x4f7c92ac)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x4f7c92c4)
CreateThreadpoolTimer (Address: 0x4f7c92c8)
SetThreadpoolTimer (Address: 0x4f7c92c0)
TrySubmitThreadpoolCallback (Address: 0x4f7c92bc)
WaitForThreadpoolTimerCallbacks (Address: 0x4f7c92b8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x4f7c92d4)
EncodePointer (Address: 0x4f7c92d0)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x4f7c92dc)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x4f7c92e4)
EventSetInformation (Address: 0x4f7c92f0)
EventUnregister (Address: 0x4f7c92ec)
EventWriteTransfer (Address: 0x4f7c92e8)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x4f7c9328)
AddAccessDeniedAce (Address: 0x4f7c9324)
AllocateAndInitializeSid (Address: 0x4f7c9304)
CheckTokenMembership (Address: 0x4f7c931c)
CopySid (Address: 0x4f7c9338)
EqualSid (Address: 0x4f7c933c)
FreeSid (Address: 0x4f7c9334)
GetAce (Address: 0x4f7c9300)
GetAclInformation (Address: 0x4f7c92f8)
GetLengthSid (Address: 0x4f7c92fc)
GetSecurityDescriptorDacl (Address: 0x4f7c9308)
GetTokenInformation (Address: 0x4f7c9330)
ImpersonateLoggedOnUser (Address: 0x4f7c9314)
InitializeAcl (Address: 0x4f7c9320)
InitializeSecurityDescriptor (Address: 0x4f7c9310)
IsValidSid (Address: 0x4f7c930c)
RevertToSelf (Address: 0x4f7c9318)
SetSecurityDescriptorDacl (Address: 0x4f7c932c)

ntdll.dll

EtwEventEnabled (Address: 0x4f7c9354)
EtwEventRegister (Address: 0x4f7c9384)
EtwEventUnregister (Address: 0x4f7c938c)
EtwEventWrite (Address: 0x4f7c9358)
EtwGetTraceEnableFlags (Address: 0x4f7c9344)
EtwGetTraceEnableLevel (Address: 0x4f7c9348)
EtwGetTraceLoggerHandle (Address: 0x4f7c934c)
EtwRegisterTraceGuidsW (Address: 0x4f7c9388)
EtwTraceMessage (Address: 0x4f7c93a0)
EtwTraceMessageVa (Address: 0x4f7c93e8)
EtwUnregisterTraceGuids (Address: 0x4f7c9380)
NtClose (Address: 0x4f7c93d8)
NtCreateFile (Address: 0x4f7c93e0)
NtCreateNamedPipeFile (Address: 0x4f7c93c0)
NtDelayExecution (Address: 0x4f7c93d0)
NtDeviceIoControlFile (Address: 0x4f7c93d4)
NtFsControlFile (Address: 0x4f7c93bc)
NtLoadDriver (Address: 0x4f7c93c4)
NtOpenFile (Address: 0x4f7c93b4)
NtQueryDirectoryFile (Address: 0x4f7c93b0)
NtWaitForSingleObject (Address: 0x4f7c93b8)
RtlAdjustPrivilege (Address: 0x4f7c93c8)
RtlAllocateHeap (Address: 0x4f7c9394)
RtlCompareMemory (Address: 0x4f7c9350)
RtlFreeHeap (Address: 0x4f7c939c)
RtlGetNtProductType (Address: 0x4f7c93ac)
RtlImpersonateSelf (Address: 0x4f7c93cc)
RtlInitUnicodeString (Address: 0x4f7c93e4)
RtlInitUnicodeStringEx (Address: 0x4f7c93a8)
RtlIpv4AddressToStringExA (Address: 0x4f7c9368)
RtlIpv4AddressToStringExW (Address: 0x4f7c9360)
RtlIpv4StringToAddressA (Address: 0x4f7c937c)
RtlIpv4StringToAddressW (Address: 0x4f7c9370)
RtlIpv6AddressToStringExA (Address: 0x4f7c936c)
RtlIpv6AddressToStringExW (Address: 0x4f7c9364)
RtlIpv6StringToAddressA (Address: 0x4f7c9378)
RtlIpv6StringToAddressExW (Address: 0x4f7c935c)
RtlIpv6StringToAddressW (Address: 0x4f7c9374)
RtlNtStatusToDosError (Address: 0x4f7c93dc)
RtlUnhandledExceptionFilter (Address: 0x4f7c9390)
RtlUnicodeStringToInteger (Address: 0x4f7c93a4)
WinSqmIsOptedIn (Address: 0x4f7c9398)

RPCRT4.dll

I_RpcBindingInqTransportType (Address: 0x4f7c9038)
NdrAsyncServerCall (Address: 0x4f7c9030)
NdrServerCall2 (Address: 0x4f7c9034)
RpcAsyncCompleteCall (Address: 0x4f7c9018)
RpcBindingInqObject (Address: 0x4f7c9010)
RpcBindingVectorFree (Address: 0x4f7c9004)
RpcEpRegisterW (Address: 0x4f7c9028)
RpcEpUnregister (Address: 0x4f7c9024)
RpcImpersonateClient (Address: 0x4f7c9040)
RpcRevertToSelf (Address: 0x4f7c9044)
RpcRevertToSelfEx (Address: 0x4f7c903c)
RpcServerInqBindings (Address: 0x4f7c902c)
RpcServerInqCallAttributesW (Address: 0x4f7c9048)
RpcServerListen (Address: 0x4f7c9020)
RpcServerRegisterIfEx (Address: 0x4f7c901c)
RpcServerUnregisterIf (Address: 0x4f7c9014)
RpcServerUnregisterIfEx (Address: 0x4f7c9008)
RpcServerUseProtseqW (Address: 0x4f7c900c)
UuidCreate (Address: 0x4f7c9000)