devinv.dll

Description: Device Inventory Library

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8832f351a88f551168671cb4640a999d

File Size: 899.9 KB

Uploaded At: Dec. 1, 2025, 7:26 a.m.

Views: 13

Exported Functions

  • SetDevInvDebugCorrelationVector (Ordinal: 1, Address: 0x23690)
  • CreateDeviceInventoryTC2 (Ordinal: 2, Address: 0x20280)
  • CreateDeviceInventoryTC (Ordinal: 3, Address: 0x20980)
  • GetDevInventory (Ordinal: 4, Address: 0x22b50)
  • RunDeviceInventoryW (Ordinal: 5, Address: 0x21c20)
  • CreateDeviceInventory (Ordinal: 6, Address: 0x20f10)
  • ReportDeviceAdd (Ordinal: 7, Address: 0x1f460)
  • ReportDeviceRemove (Ordinal: 8, Address: 0x1fd10)

Imported DLLs & Functions

api-ms-win-base-util-l1-1-0.dll
  • IsTextUnicode (Address: 0x1800a7778)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x1800a77d0)
  • CoInitializeEx (Address: 0x1800a7790)
  • CoInitializeSecurity (Address: 0x1800a77a0)
  • CoSetProxyBlanket (Address: 0x1800a77b8)
  • CoTaskMemAlloc (Address: 0x1800a77a8)
  • CoTaskMemFree (Address: 0x1800a77c8)
  • CoUninitialize (Address: 0x1800a77c0)
  • IIDFromString (Address: 0x1800a77b0)
  • PropVariantClear (Address: 0x1800a7798)
  • StringFromGUID2 (Address: 0x1800a7788)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800a77e8)
  • IsDebuggerPresent (Address: 0x1800a77f0)
  • OutputDebugStringA (Address: 0x1800a77f8)
  • OutputDebugStringW (Address: 0x1800a77e0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800a7808)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800a7818)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800a7828)
  • SetLastError (Address: 0x1800a7830)
  • SetUnhandledExceptionFilter (Address: 0x1800a7838)
  • UnhandledExceptionFilter (Address: 0x1800a7840)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x1800a78c0)
  • CreateFileW (Address: 0x1800a78c8)
  • DeleteFileW (Address: 0x1800a78b0)
  • FileTimeToLocalFileTime (Address: 0x1800a7858)
  • FindClose (Address: 0x1800a7850)
  • FindFirstFileW (Address: 0x1800a7898)
  • FindNextFileW (Address: 0x1800a7870)
  • GetDiskFreeSpaceExW (Address: 0x1800a7890)
  • GetDriveTypeW (Address: 0x1800a7888)
  • GetFileAttributesW (Address: 0x1800a7868)
  • GetFileSize (Address: 0x1800a7860)
  • GetFileTime (Address: 0x1800a78d0)
  • GetLogicalDriveStringsW (Address: 0x1800a78b8)
  • GetTempFileNameW (Address: 0x1800a78a8)
  • GetVolumeInformationByHandleW (Address: 0x1800a78a0)
  • GetVolumeInformationW (Address: 0x1800a7878)
  • ReadFile (Address: 0x1800a7880)
  • WriteFile (Address: 0x1800a78d8)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x1800a78e8)
api-ms-win-core-file-l2-1-0.dll
  • MoveFileExW (Address: 0x1800a78f8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800a7908)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800a7928)
  • HeapAlloc (Address: 0x1800a7920)
  • HeapFree (Address: 0x1800a7918)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800a7938)
  • LocalFree (Address: 0x1800a7940)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800a7950)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetComputerNameW (Address: 0x1800a7960)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • SetDllDirectoryW (Address: 0x1800a7978)
  • VerifyVersionInfoW (Address: 0x1800a7970)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x1800a79b0)
  • FreeLibraryAndExitThread (Address: 0x1800a79a8)
  • GetModuleFileNameA (Address: 0x1800a7990)
  • GetModuleFileNameW (Address: 0x1800a7998)
  • GetModuleHandleExA (Address: 0x1800a79c0)
  • GetModuleHandleExW (Address: 0x1800a79c8)
  • GetModuleHandleW (Address: 0x1800a79b8)
  • GetProcAddress (Address: 0x1800a7988)
  • LoadLibraryExW (Address: 0x1800a79a0)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryA (Address: 0x1800a79e0)
  • LoadLibraryW (Address: 0x1800a79d8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800a79f0)
  • GetSystemDefaultLangID (Address: 0x1800a79f8)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1800a7a08)
  • MapViewOfFile (Address: 0x1800a7a18)
  • UnmapViewOfFile (Address: 0x1800a7a10)
api-ms-win-core-namedpipe-l1-1-0.dll
  • SetNamedPipeHandleState (Address: 0x1800a7a28)
  • WaitNamedPipeW (Address: 0x1800a7a30)
api-ms-win-core-path-l1-1-0.dll
  • PathCchRemoveFileSpec (Address: 0x1800a7a40)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800a7a50)
  • GetCommandLineW (Address: 0x1800a7a58)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800a7a80)
  • GetCurrentProcessId (Address: 0x1800a7a70)
  • GetCurrentThread (Address: 0x1800a7a68)
  • GetCurrentThreadId (Address: 0x1800a7a88)
  • TerminateProcess (Address: 0x1800a7a78)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800a7a98)
api-ms-win-core-psapi-l1-1-0.dll
  • K32EnumDeviceDrivers (Address: 0x1800a7ac0)
  • K32GetDeviceDriverFileNameW (Address: 0x1800a7ab0)
  • K32GetModuleFileNameExW (Address: 0x1800a7ab8)
  • QueryFullProcessImageNameW (Address: 0x1800a7aa8)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryThreadCycleTime (Address: 0x1800a7ad0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800a7b40)
  • RegCreateKeyExW (Address: 0x1800a7ae0)
  • RegDeleteKeyExW (Address: 0x1800a7b18)
  • RegDeleteTreeW (Address: 0x1800a7b00)
  • RegDeleteValueW (Address: 0x1800a7b38)
  • RegEnumKeyExW (Address: 0x1800a7b10)
  • RegFlushKey (Address: 0x1800a7b28)
  • RegGetValueW (Address: 0x1800a7b30)
  • RegLoadAppKeyW (Address: 0x1800a7b20)
  • RegLoadKeyW (Address: 0x1800a7b58)
  • RegOpenKeyExW (Address: 0x1800a7ae8)
  • RegQueryInfoKeyW (Address: 0x1800a7af8)
  • RegQueryValueExW (Address: 0x1800a7b48)
  • RegSaveKeyExW (Address: 0x1800a7b08)
  • RegSetKeySecurity (Address: 0x1800a7b50)
  • RegSetValueExW (Address: 0x1800a7af0)
  • RegUnLoadKeyW (Address: 0x1800a7b60)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1800a7b70)
  • RegSetKeyValueW (Address: 0x1800a7b78)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x1800a7b90)
  • RegOpenKeyW (Address: 0x1800a7b88)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800a7ba0)
  • RtlLookupFunctionEntry (Address: 0x1800a7bb0)
  • RtlVirtualUnwind (Address: 0x1800a7ba8)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathCommonPrefixW (Address: 0x1800a7bc0)
  • PathFindFileNameW (Address: 0x1800a7bc8)
api-ms-win-core-sidebyside-l1-1-0.dll
  • CreateActCtxW (Address: 0x1800a7be8)
  • QueryActCtxW (Address: 0x1800a7be0)
  • ReleaseActCtx (Address: 0x1800a7bd8)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeW (Address: 0x1800a7c08)
  • MultiByteToWideChar (Address: 0x1800a7bf8)
  • WideCharToMultiByte (Address: 0x1800a7c00)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpA (Address: 0x1800a7c18)
  • lstrcmpiW (Address: 0x1800a7c20)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800a7c30)
  • AcquireSRWLockShared (Address: 0x1800a7cc0)
  • CreateEventW (Address: 0x1800a7cb8)
  • CreateMutexExW (Address: 0x1800a7c60)
  • CreateMutexW (Address: 0x1800a7c98)
  • CreateSemaphoreExW (Address: 0x1800a7c90)
  • DeleteCriticalSection (Address: 0x1800a7cc8)
  • EnterCriticalSection (Address: 0x1800a7c38)
  • InitializeCriticalSection (Address: 0x1800a7c78)
  • InitializeCriticalSectionEx (Address: 0x1800a7ca8)
  • LeaveCriticalSection (Address: 0x1800a7cb0)
  • OpenSemaphoreW (Address: 0x1800a7c68)
  • OpenWaitableTimerW (Address: 0x1800a7c88)
  • ReleaseMutex (Address: 0x1800a7cd0)
  • ReleaseSemaphore (Address: 0x1800a7ca0)
  • ReleaseSRWLockExclusive (Address: 0x1800a7c40)
  • ReleaseSRWLockShared (Address: 0x1800a7c48)
  • SetEvent (Address: 0x1800a7c70)
  • SetWaitableTimer (Address: 0x1800a7c58)
  • WaitForSingleObject (Address: 0x1800a7c80)
  • WaitForSingleObjectEx (Address: 0x1800a7c50)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800a7ce8)
  • SleepConditionVariableSRW (Address: 0x1800a7cf0)
  • WakeAllConditionVariable (Address: 0x1800a7ce0)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x1800a7d00)
  • CreateWaitableTimerW (Address: 0x1800a7d10)
  • WaitForMultipleObjects (Address: 0x1800a7d08)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryA (Address: 0x1800a7d68)
  • GetSystemDirectoryW (Address: 0x1800a7d50)
  • GetSystemInfo (Address: 0x1800a7d28)
  • GetSystemTimeAsFileTime (Address: 0x1800a7d48)
  • GetSystemWindowsDirectoryW (Address: 0x1800a7d58)
  • GetTickCount (Address: 0x1800a7d38)
  • GetTickCount64 (Address: 0x1800a7d30)
  • GetVersionExW (Address: 0x1800a7d60)
  • GetWindowsDirectoryW (Address: 0x1800a7d20)
  • GlobalMemoryStatusEx (Address: 0x1800a7d40)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x1800a7d78)
  • GetSystemFirmwareTable (Address: 0x1800a7d88)
  • VerSetConditionMask (Address: 0x1800a7d80)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800a7db0)
  • CreateThreadpoolTimer (Address: 0x1800a7da8)
  • SetThreadpoolTimer (Address: 0x1800a7d98)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800a7da0)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800a7dc0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800a7dd8)
  • EncodePointer (Address: 0x1800a7dd0)
api-ms-win-core-version-l1-1-0.dll
  • VerQueryValueW (Address: 0x1800a7de8)
api-ms-win-core-version-l1-1-1.dll
  • GetFileVersionInfoSizeW (Address: 0x1800a7df8)
  • GetFileVersionInfoW (Address: 0x1800a7e00)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1800a7e10)
  • EventUnregister (Address: 0x1800a7e18)
  • EventWriteTransfer (Address: 0x1800a7e20)
api-ms-win-security-base-l1-1-0.dll
  • InitializeSecurityDescriptor (Address: 0x1800a7e30)
  • SetSecurityDescriptorDacl (Address: 0x1800a7e38)
  • SetSecurityDescriptorOwner (Address: 0x1800a7e40)
api-ms-win-security-cryptoapi-l1-1-0.dll
  • CryptAcquireContextW (Address: 0x1800a7e58)
  • CryptCreateHash (Address: 0x1800a7e70)
  • CryptDestroyHash (Address: 0x1800a7e68)
  • CryptGetHashParam (Address: 0x1800a7e78)
  • CryptHashData (Address: 0x1800a7e60)
  • CryptReleaseContext (Address: 0x1800a7e50)
api-ms-win-security-provider-l1-1-0.dll
  • SetEntriesInAclW (Address: 0x1800a7e88)
api-ms-win-service-core-l1-1-1.dll
  • EnumServicesStatusExW (Address: 0x1800a7e98)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1800a7ea8)
  • OpenSCManagerW (Address: 0x1800a7eb8)
  • OpenServiceW (Address: 0x1800a7eb0)
api-ms-win-service-management-l2-1-0.dll
  • QueryServiceConfigW (Address: 0x1800a7ec8)
CRYPT32.dll
  • CertCloseStore (Address: 0x1800a7608)
  • CertDuplicateCertificateContext (Address: 0x1800a75f0)
  • CertFreeCertificateContext (Address: 0x1800a75f8)
  • CertGetCertificateContextProperty (Address: 0x1800a7600)
  • CertGetNameStringW (Address: 0x1800a7610)
  • CryptDecodeObject (Address: 0x1800a7620)
  • CryptMsgClose (Address: 0x1800a7618)
  • CryptMsgGetParam (Address: 0x1800a75e0)
  • CryptQueryObject (Address: 0x1800a75e8)
DEVOBJ.dll
  • DevObjClassNameFromGuid (Address: 0x1800a7658)
  • DevObjCreateDeviceInfoList (Address: 0x1800a7640)
  • DevObjDestroyDeviceInfoList (Address: 0x1800a7630)
  • DevObjEnumDeviceInfo (Address: 0x1800a7660)
  • DevObjEnumDeviceInterfaces (Address: 0x1800a7678)
  • DevObjGetClassDevs (Address: 0x1800a7650)
  • DevObjGetClassProperty (Address: 0x1800a7670)
  • DevObjGetDeviceInterfaceDetail (Address: 0x1800a7648)
  • DevObjGetDeviceProperty (Address: 0x1800a7668)
  • DevObjOpenDeviceInfo (Address: 0x1800a7638)
drvstore.dll
  • DriverPackageClose (Address: 0x1800a7f10)
  • DriverPackageEnumDriversW (Address: 0x1800a7ef8)
  • DriverPackageOpenW (Address: 0x1800a7f08)
  • DriverStoreClose (Address: 0x1800a7f00)
  • DriverStoreEnumW (Address: 0x1800a7ee8)
  • DriverStoreFindW (Address: 0x1800a7ed8)
  • DriverStoreGetObjectPropertyW (Address: 0x1800a7ee0)
  • DriverStoreOpenW (Address: 0x1800a7ef0)
FLTLIB.DLL
  • FilterFindClose (Address: 0x1800a7698)
  • FilterFindFirst (Address: 0x1800a7688)
  • FilterFindNext (Address: 0x1800a7690)
imagehlp.dll
  • ImageDirectoryEntryToData (Address: 0x1800a7f20)
  • ImageNtHeader (Address: 0x1800a7f28)
IPHLPAPI.DLL
  • GetAdaptersInfo (Address: 0x1800a76a8)
  • GetNetworkParams (Address: 0x1800a76b0)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1800a7f98)
  • ___lc_handle_func (Address: 0x1800a7fa0)
  • ___mb_cur_max_func (Address: 0x1800a7fb0)
  • __C_specific_handler (Address: 0x1800a80d0)
  • __crtLCMapStringW (Address: 0x1800a7f60)
  • __CxxFrameHandler3 (Address: 0x1800a81d8)
  • __dllonexit (Address: 0x1800a80b8)
  • __iob_func (Address: 0x1800a81a0)
  • __pctype_func (Address: 0x1800a7fa8)
  • __uncaught_exception (Address: 0x1800a7f70)
  • _amsg_exit (Address: 0x1800a8108)
  • _beginthreadex (Address: 0x1800a8038)
  • _callnewh (Address: 0x1800a7fc0)
  • _CxxThrowException (Address: 0x1800a7fb8)
  • _errno (Address: 0x1800a80b0)
  • _getmbcp (Address: 0x1800a8060)
  • _initterm (Address: 0x1800a80d8)
  • _lock (Address: 0x1800a80c8)
  • _mktime64 (Address: 0x1800a8028)
  • _onexit (Address: 0x1800a80a0)
  • _purecall (Address: 0x1800a8140)
  • _set_errno (Address: 0x1800a80f8)
  • _strnicmp (Address: 0x1800a81d0)
  • _swprintf_c_l (Address: 0x1800a7fe0)
  • _ui64tow_s (Address: 0x1800a8080)
  • _unlock (Address: 0x1800a80c0)
  • _vsnprintf (Address: 0x1800a8190)
  • _vsnprintf_s (Address: 0x1800a8120)
  • _vsnwprintf (Address: 0x1800a8158)
  • _vsnwprintf_s (Address: 0x1800a81b8)
  • _wcsicmp (Address: 0x1800a8148)
  • _wcslwr (Address: 0x1800a7fc8)
  • _wcsnicmp (Address: 0x1800a8160)
  • _wctime64 (Address: 0x1800a81c8)
  • _wsplitpath_s (Address: 0x1800a8068)
  • _XcptFilter (Address: 0x1800a8110)
  • ??_V@YAXPEAX@Z (Address: 0x1800a8070)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800a8030)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800a81e8)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800a8128)
  • ??0exception@@QEAA@XZ (Address: 0x1800a8130)
  • ??1exception@@UEAA@XZ (Address: 0x1800a8138)
  • ??1type_info@@UEAA@XZ (Address: 0x1800a8090)
  • ??3@YAXPEAX@Z (Address: 0x1800a8198)
  • ?terminate@@YAXXZ (Address: 0x1800a8098)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800a7f38)
  • abort (Address: 0x1800a7f40)
  • calloc (Address: 0x1800a7f58)
  • fprintf (Address: 0x1800a81e0)
  • free (Address: 0x1800a80f0)
  • iswalnum (Address: 0x1800a8008)
  • iswprint (Address: 0x1800a8018)
  • ldiv (Address: 0x1800a7ff8)
  • localeconv (Address: 0x1800a7ff0)
  • malloc (Address: 0x1800a80e8)
  • memchr (Address: 0x1800a7f50)
  • memcmp (Address: 0x1800a80e0)
  • memcpy (Address: 0x1800a7f88)
  • memcpy_s (Address: 0x1800a8150)
  • memmove (Address: 0x1800a7f80)
  • memmove_s (Address: 0x1800a8118)
  • memset (Address: 0x1800a8100)
  • realloc (Address: 0x1800a8020)
  • setlocale (Address: 0x1800a7f78)
  • sprintf_s (Address: 0x1800a8168)
  • strchr (Address: 0x1800a8170)
  • strcmp (Address: 0x1800a8088)
  • strcpy_s (Address: 0x1800a8178)
  • strcspn (Address: 0x1800a7fe8)
  • strerror (Address: 0x1800a7f90)
  • strncmp (Address: 0x1800a7fd8)
  • strncpy_s (Address: 0x1800a7f48)
  • strnlen (Address: 0x1800a8188)
  • strrchr (Address: 0x1800a8078)
  • strtol (Address: 0x1800a80a8)
  • swscanf_s (Address: 0x1800a8040)
  • tolower (Address: 0x1800a8010)
  • towlower (Address: 0x1800a81a8)
  • towupper (Address: 0x1800a81b0)
  • wcscat_s (Address: 0x1800a8048)
  • wcschr (Address: 0x1800a8058)
  • wcscmp (Address: 0x1800a81f0)
  • wcscpy_s (Address: 0x1800a8050)
  • wcsncmp (Address: 0x1800a7fd0)
  • wcsrchr (Address: 0x1800a8180)
  • wcsstr (Address: 0x1800a7f68)
  • wcstok_s (Address: 0x1800a8000)
  • wcstoul (Address: 0x1800a81c0)
ntdll.dll
  • EtwEventRegister (Address: 0x1800a82d8)
  • EtwEventUnregister (Address: 0x1800a82e8)
  • EtwEventWrite (Address: 0x1800a82e0)
  • EtwTraceMessage (Address: 0x1800a8368)
  • LdrResSearchResource (Address: 0x1800a8218)
  • NtLoadKeyEx (Address: 0x1800a8358)
  • NtQueryKey (Address: 0x1800a8338)
  • NtQueryLicenseValue (Address: 0x1800a8328)
  • NtQuerySystemInformation (Address: 0x1800a8310)
  • NtQuerySystemTime (Address: 0x1800a83b0)
  • RtlAdjustPrivilege (Address: 0x1800a8330)
  • RtlAllocateAndInitializeSid (Address: 0x1800a8318)
  • RtlAllocateHeap (Address: 0x1800a8380)
  • RtlAnsiStringToUnicodeString (Address: 0x1800a8398)
  • RtlAppendUnicodeStringToString (Address: 0x1800a8288)
  • RtlAppendUnicodeToString (Address: 0x1800a8280)
  • RtlDeleteCriticalSection (Address: 0x1800a8388)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x1800a82b8)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x1800a8350)
  • RtlEnterCriticalSection (Address: 0x1800a8370)
  • RtlEqualString (Address: 0x1800a82c8)
  • RtlFreeHeap (Address: 0x1800a82f8)
  • RtlFreeSid (Address: 0x1800a8320)
  • RtlFreeUnicodeString (Address: 0x1800a83a0)
  • RtlGetNativeSystemInformation (Address: 0x1800a8240)
  • RtlGetVersion (Address: 0x1800a8298)
  • RtlImageDirectoryEntryToData (Address: 0x1800a8208)
  • RtlInitAnsiString (Address: 0x1800a83a8)
  • RtlInitializeCriticalSection (Address: 0x1800a8300)
  • RtlInitString (Address: 0x1800a8258)
  • RtlInitUnicodeString (Address: 0x1800a82b0)
  • RtlInitUnicodeStringEx (Address: 0x1800a8390)
  • RtlLeaveCriticalSection (Address: 0x1800a82f0)
  • RtlMultiByteToUnicodeN (Address: 0x1800a82c0)
  • RtlNtStatusToDosError (Address: 0x1800a8308)
  • RtlRandomEx (Address: 0x1800a8340)
  • RtlReAllocateHeap (Address: 0x1800a8378)
  • RtlReleaseRelativeName (Address: 0x1800a8360)
  • RtlSecondsSince1970ToTime (Address: 0x1800a8260)
  • RtlStringFromGUID (Address: 0x1800a8348)
  • RtlTimeToTimeFields (Address: 0x1800a8220)
  • RtlUpcaseUnicodeChar (Address: 0x1800a8248)
  • RtlVerifyVersionInfo (Address: 0x1800a8210)
  • RtlxAnsiStringToUnicodeSize (Address: 0x1800a8250)
  • WinSqmIsOptedInEx (Address: 0x1800a8200)
  • ZwClose (Address: 0x1800a82d0)
  • ZwCreateFile (Address: 0x1800a8278)
  • ZwCreateSection (Address: 0x1800a8268)
  • ZwEnumerateKey (Address: 0x1800a82a0)
  • ZwMapViewOfSection (Address: 0x1800a8228)
  • ZwOpenKey (Address: 0x1800a82a8)
  • ZwQueryInformationFile (Address: 0x1800a8270)
  • ZwQuerySystemInformation (Address: 0x1800a8238)
  • ZwQueryValueKey (Address: 0x1800a8290)
  • ZwUnmapViewOfSection (Address: 0x1800a8230)
OLEAUT32.dll
  • SafeArrayGetElement (Address: 0x1800a76d0)
  • SysAllocString (Address: 0x1800a76f0)
  • SysAllocStringLen (Address: 0x1800a76d8)
  • SysFreeString (Address: 0x1800a76e8)
  • SysStringByteLen (Address: 0x1800a76c0)
  • VariantClear (Address: 0x1800a76e0)
  • VariantInit (Address: 0x1800a76c8)
RPCRT4.dll
  • UuidCreate (Address: 0x1800a7700)
WINTRUST.dll
  • CryptCATAdminAcquireContext (Address: 0x1800a7740)
  • CryptCATAdminCalcHashFromFileHandle (Address: 0x1800a7738)
  • CryptCATAdminEnumCatalogFromHash (Address: 0x1800a7730)
  • CryptCATAdminReleaseCatalogContext (Address: 0x1800a7720)
  • CryptCATAdminReleaseContext (Address: 0x1800a7748)
  • CryptCATCatalogInfoFromContext (Address: 0x1800a7710)
  • CryptCATClose (Address: 0x1800a7750)
  • CryptCATEnumerateCatAttr (Address: 0x1800a7758)
  • CryptCATOpen (Address: 0x1800a7760)
  • WinVerifyTrust (Address: 0x1800a7768)
  • WTHelperGetProvSignerFromChain (Address: 0x1800a7718)
  • WTHelperProvDataFromStateData (Address: 0x1800a7728)