webengine.dll

Description: Microsoft ASP.NET Support DLL

Version: 2.0.50727.9175

Architecture: 64-bit

Operating System: Windows

SHA256: afa361df7f1d51c91cf58fac017e93cf

File Size: 732.4 KB

Uploaded At: Dec. 1, 2025, 8:29 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread

Exported Functions

??0BUFFER@@QEAA@I@Z (Ordinal: 1, Address: 0x72c50)
??0BUFFER@@QEAA@PEAEI@Z (Ordinal: 2, Address: 0x72dc0)
??0BUFFER_CHAIN@@QEAA@XZ (Ordinal: 3, Address: 0x73530)
??0BUFFER_CHAIN_ITEM@@QEAA@I@Z (Ordinal: 4, Address: 0x73410)
??0CCritSec@@QEAA@XZ (Ordinal: 5, Address: 0x760f0)
??0CFakeLock@@QEAA@XZ (Ordinal: 6, Address: 0x74ad0)
??0CReaderWriterLock2@@QEAA@XZ (Ordinal: 7, Address: 0x73f80)
??0CReaderWriterLock3@@QEAA@XZ (Ordinal: 8, Address: 0x74b80)
??0CReaderWriterLock@@QEAA@XZ (Ordinal: 9, Address: 0x74b80)
??0CRtlResource@@QEAA@XZ (Ordinal: 10, Address: 0x75800)
??0CShareLock@@QEAA@XZ (Ordinal: 11, Address: 0x74550)
??0CSharelock@@QEAA@HH@Z (Ordinal: 12, Address: 0x768a0)
??0CSmallSpinLock@@QEAA@XZ (Ordinal: 13, Address: 0x73f80)
??0CSpinLock@@QEAA@XZ (Ordinal: 14, Address: 0x73f80)
??0STRA@@AEAA@AEBV0@@Z (Ordinal: 15, Address: 0x73b90)
??0STRA@@AEAA@PEAD@Z (Ordinal: 16, Address: 0x73b90)
??0STRA@@AEAA@PEBD@Z (Ordinal: 17, Address: 0x73b90)
??0STRA@@QEAA@PEADK@Z (Ordinal: 18, Address: 0x72ee0)
??0STRA@@QEAA@XZ (Ordinal: 19, Address: 0x73cf0)
??0STRAU@@QEAA@AEAV0@@Z (Ordinal: 20, Address: 0x78350)
??0STRAU@@QEAA@PEBD@Z (Ordinal: 21, Address: 0x77440)
??0STRAU@@QEAA@PEBDH@Z (Ordinal: 22, Address: 0x77560)
??0STRAU@@QEAA@PEBG@Z (Ordinal: 23, Address: 0x776a0)
??0STRAU@@QEAA@XZ (Ordinal: 24, Address: 0x76e90)
??0STRU@@AEAA@AEBV0@@Z (Ordinal: 25, Address: 0x73b90)
??0STRU@@AEAA@PEAG@Z (Ordinal: 26, Address: 0x73b90)
??0STRU@@AEAA@PEBG@Z (Ordinal: 27, Address: 0x73b90)
??0STRU@@QEAA@PEAGK@Z (Ordinal: 28, Address: 0x72de0)
??0STRU@@QEAA@XZ (Ordinal: 29, Address: 0x73bb0)
??0TS_RESOURCE@@QEAA@XZ (Ordinal: 30, Address: 0x742b0)
??1BUFFER@@QEAA@XZ (Ordinal: 31, Address: 0x72ec0)
??1BUFFER_CHAIN@@QEAA@XZ (Ordinal: 32, Address: 0x73540)
??1BUFFER_CHAIN_ITEM@@QEAA@XZ (Ordinal: 33, Address: 0x73450)
??1CCritSec@@QEAA@XZ (Ordinal: 34, Address: 0x74190)
??1CFakeLock@@QEAA@XZ (Ordinal: 35, Address: 0x789a0)
??1CReaderWriterLock2@@QEAA@XZ (Ordinal: 36, Address: 0x789a0)
??1CReaderWriterLock3@@QEAA@XZ (Ordinal: 37, Address: 0x789a0)
??1CReaderWriterLock@@QEAA@XZ (Ordinal: 38, Address: 0x789a0)
??1CRtlResource@@QEAA@XZ (Ordinal: 39, Address: 0x74330)
??1CShareLock@@QEAA@XZ (Ordinal: 40, Address: 0x74750)
??1CSharelock@@QEAA@XZ (Ordinal: 41, Address: 0x769f0)
??1CSmallSpinLock@@QEAA@XZ (Ordinal: 42, Address: 0x789a0)
??1CSpinLock@@QEAA@XZ (Ordinal: 43, Address: 0x789a0)
??1STRA@@QEAA@XZ (Ordinal: 44, Address: 0x72ec0)
??1STRAU@@QEAA@XZ (Ordinal: 45, Address: 0x76f40)
??1STRU@@QEAA@XZ (Ordinal: 46, Address: 0x72ec0)
??1TS_RESOURCE@@QEAA@XZ (Ordinal: 47, Address: 0x74330)
??2BUFFER_CHAIN_ITEM@@SAPEAX_K@Z (Ordinal: 48, Address: 0x73480)
??3BUFFER_CHAIN_ITEM@@SAXPEAX@Z (Ordinal: 49, Address: 0x73490)
??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 50, Address: 0x74ad0)
??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 51, Address: 0x74ad0)
??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@AEBV0@@Z (Ordinal: 52, Address: 0x74ad0)
??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@AEBV0@@Z (Ordinal: 53, Address: 0x74ad0)
??4?$CLockBase@$04$01$00$01$02$02@@QEAAAEAV0@AEBV0@@Z (Ordinal: 54, Address: 0x74ad0)
??4?$CLockBase@$05$01$00$01$02$02@@QEAAAEAV0@AEBV0@@Z (Ordinal: 55, Address: 0x74ad0)
??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 56, Address: 0x74ad0)
??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 57, Address: 0x74ad0)
??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 58, Address: 0x74ad0)
??4BUFFER@@QEAAAEAV0@AEBV0@@Z (Ordinal: 59, Address: 0x733b0)
??4BUFFER_CHAIN@@QEAAAEAV0@AEBV0@@Z (Ordinal: 60, Address: 0x73550)
??4BUFFER_CHAIN_ITEM@@QEAAAEAV0@AEBV0@@Z (Ordinal: 61, Address: 0x734c0)
??4CCritSec@@QEAAAEAV0@AEBV0@@Z (Ordinal: 62, Address: 0x74280)
??4CFakeLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 63, Address: 0x74ad0)
??4CReaderWriterLock2@@QEAAAEAV0@AEBV0@@Z (Ordinal: 64, Address: 0x740d0)
??4CReaderWriterLock3@@QEAAAEAV0@AEBV0@@Z (Ordinal: 65, Address: 0x74900)
??4CReaderWriterLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 66, Address: 0x74900)
??4CRtlResource@@QEAAAEAV0@AEBV0@@Z (Ordinal: 67, Address: 0x74310)
??4CSmallSpinLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 68, Address: 0x740d0)
??4CSpinLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 69, Address: 0x740d0)
??4STRA@@AEAAAEAV0@AEBV0@@Z (Ordinal: 70, Address: 0x74ad0)
??4STRAU@@QEAAAEAV0@AEBV0@@Z (Ordinal: 71, Address: 0x76e70)
??4STRU@@AEAAAEAV0@AEBV0@@Z (Ordinal: 72, Address: 0x74ad0)
??4TS_RESOURCE@@QEAAAEAV0@AEBV0@@Z (Ordinal: 73, Address: 0x74310)
??_FBUFFER@@QEAAXXZ (Ordinal: 74, Address: 0x733f0)
??_FBUFFER_CHAIN_ITEM@@QEAAXXZ (Ordinal: 75, Address: 0x73510)
??_FCSharelock@@QEAAXXZ (Ordinal: 76, Address: 0x74470)
?ActiveUsers@CSharelock@@QEAAHXZ (Ordinal: 77, Address: 0x74460)
AppDomainRestart (Ordinal: 78, Address: 0x6e5f0)
?Append@STRA@@QEAAJAEBV1@@Z (Ordinal: 79, Address: 0x73870)
?Append@STRA@@QEAAJPEBD@Z (Ordinal: 80, Address: 0x72f30)
?Append@STRA@@QEAAJPEBDK@Z (Ordinal: 81, Address: 0x73840)
?Append@STRAU@@QEAAHAEAV1@@Z (Ordinal: 82, Address: 0x78540)
?Append@STRAU@@QEAAHPEBD@Z (Ordinal: 83, Address: 0x77d20)
?Append@STRAU@@QEAAHPEBDK@Z (Ordinal: 84, Address: 0x77da0)
?Append@STRAU@@QEAAHPEBG@Z (Ordinal: 85, Address: 0x77d60)
?Append@STRAU@@QEAAHPEBGK@Z (Ordinal: 86, Address: 0x77dc0)
?Append@STRU@@QEAAJAEBV1@@Z (Ordinal: 87, Address: 0x73620)
?Append@STRU@@QEAAJG@Z (Ordinal: 88, Address: 0x73660)
?Append@STRU@@QEAAJPEBG@Z (Ordinal: 89, Address: 0x73590)
?Append@STRU@@QEAAJPEBGK@Z (Ordinal: 90, Address: 0x735e0)
?AppendA@STRU@@QEAAJPEBD@Z (Ordinal: 91, Address: 0x736b0)
?AppendA@STRU@@QEAAJPEBDK@Z (Ordinal: 92, Address: 0x73690)
?AppendBuffer@BUFFER_CHAIN@@QEAAHPEAVBUFFER_CHAIN_ITEM@@@Z (Ordinal: 93, Address: 0x78ad0)
?AppendW@STRA@@QEAAJPEBG@Z (Ordinal: 94, Address: 0x738a0)
?AppendW@STRA@@QEAAJPEBGK@Z (Ordinal: 95, Address: 0x738e0)
?AppendWTruncate@STRA@@QEAAJPEBG@Z (Ordinal: 96, Address: 0x73920)
?AppendWTruncate@STRA@@QEAAJPEBGK@Z (Ordinal: 97, Address: 0x73900)
AspCompatIsApartmentComponent (Ordinal: 98, Address: 0x11d10)
AspCompatOnPageEnd (Ordinal: 99, Address: 0x12d40)
AspCompatOnPageStart (Ordinal: 100, Address: 0x12ca0)
AspCompatProcessRequest (Ordinal: 101, Address: 0x12ec0)
AspnetLoadResourceDLL (Ordinal: 102, Address: 0x2bbd0)
AttachDebugger (Ordinal: 103, Address: 0x1da50)
?AuxAppend@STRA@@AEAAJPEBEKKH@Z (Ordinal: 104, Address: 0x78cf0)
?AuxAppend@STRAU@@AEAAHPEBDIH@Z (Ordinal: 105, Address: 0x777d0)
?AuxAppend@STRAU@@AEAAHPEBGIH@Z (Ordinal: 106, Address: 0x77960)
?AuxAppend@STRU@@AEAAJPEBEKKH@Z (Ordinal: 107, Address: 0x7a800)
?AuxAppendA@STRU@@AEAAJPEBEKKH@Z (Ordinal: 108, Address: 0x7a8f0)
?AuxAppendW@STRA@@AEAAJPEBGKKH@Z (Ordinal: 109, Address: 0x78de0)
?AuxAppendWTruncate@STRA@@AEAAJPEBGKKH@Z (Ordinal: 110, Address: 0x78f40)
?AuxInit@STRAU@@AEAAXPEBD@Z (Ordinal: 111, Address: 0x76f70)
?AuxInit@STRAU@@AEAAXPEBG@Z (Ordinal: 112, Address: 0x77040)
BufferPoolGetBuffer (Ordinal: 113, Address: 0x1e010)
BufferPoolGetPool (Ordinal: 114, Address: 0x1dec0)
BufferPoolReleaseBuffer (Ordinal: 115, Address: 0x1ded0)
?CalcTotalSize@BUFFER_CHAIN@@QEBAKH@Z (Ordinal: 116, Address: 0x78af0)
CallCryptUnProtectData (Ordinal: 117, Address: 0x66000)
CallManagedProtectedConfigAction (Ordinal: 118, Address: 0x5c5c0)
ChangeAccessToKeyContainer (Ordinal: 119, Address: 0x66160)
?ChangeExclusiveLockToSharedLock@CSharelock@@QEAAXXZ (Ordinal: 120, Address: 0x74800)
?ChangeSharedLockToExclusiveLock@CSharelock@@QEAAEH@Z (Ordinal: 121, Address: 0x74480)
CheckIISState (Ordinal: 122, Address: 0x412d0)
?ClaimExclusiveLock@CSharelock@@QEAAEH@Z (Ordinal: 123, Address: 0x744b0)
?ClaimShareLock@CSharelock@@QEAAEH@Z (Ordinal: 124, Address: 0x744e0)
?ClassName@CCritSec@@SAPEBGXZ (Ordinal: 125, Address: 0x74270)
?ClassName@CFakeLock@@SAPEBGXZ (Ordinal: 126, Address: 0x74180)
?ClassName@CReaderWriterLock2@@SAPEBGXZ (Ordinal: 127, Address: 0x74ac0)
?ClassName@CReaderWriterLock3@@SAPEBGXZ (Ordinal: 128, Address: 0x74e70)
?ClassName@CReaderWriterLock@@SAPEBGXZ (Ordinal: 129, Address: 0x748f0)
?ClassName@CRtlResource@@SAPEBDXZ (Ordinal: 130, Address: 0x74450)
?ClassName@CShareLock@@SAPEBDXZ (Ordinal: 131, Address: 0x74740)
?ClassName@CSmallSpinLock@@SAPEBGXZ (Ordinal: 132, Address: 0x73f30)
?ClassName@CSpinLock@@SAPEBGXZ (Ordinal: 133, Address: 0x740c0)
?Clone@STRA@@QEBAJPEAV1@@Z (Ordinal: 134, Address: 0x73b50)
?Convert@TS_RESOURCE@@QEAAXW4TSRES_CONV_TYPE@@@Z (Ordinal: 135, Address: 0x742f0)
?ConvertExclusiveToShared@CCritSec@@QEAAXXZ (Ordinal: 136, Address: 0x789a0)
?ConvertExclusiveToShared@CFakeLock@@QEAAXXZ (Ordinal: 137, Address: 0x789a0)
?ConvertExclusiveToShared@CReaderWriterLock2@@QEAAXXZ (Ordinal: 138, Address: 0x749d0)
?ConvertExclusiveToShared@CReaderWriterLock3@@QEAAXXZ (Ordinal: 139, Address: 0x74d90)
?ConvertExclusiveToShared@CReaderWriterLock@@QEAAXXZ (Ordinal: 140, Address: 0x74850)
?ConvertExclusiveToShared@CRtlResource@@QEAAXXZ (Ordinal: 141, Address: 0x743b0)
?ConvertExclusiveToShared@CShareLock@@QEAAXXZ (Ordinal: 142, Address: 0x74800)
?ConvertExclusiveToShared@CSmallSpinLock@@QEAAXXZ (Ordinal: 143, Address: 0x789a0)
?ConvertExclusiveToShared@CSpinLock@@QEAAXXZ (Ordinal: 144, Address: 0x789a0)
?ConvertSharedToExclusive@CCritSec@@QEAAXXZ (Ordinal: 145, Address: 0x789a0)
?ConvertSharedToExclusive@CFakeLock@@QEAAXXZ (Ordinal: 146, Address: 0x789a0)
?ConvertSharedToExclusive@CReaderWriterLock2@@QEAAXXZ (Ordinal: 147, Address: 0x76150)
?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ (Ordinal: 148, Address: 0x76830)
?ConvertSharedToExclusive@CReaderWriterLock@@QEAAXXZ (Ordinal: 149, Address: 0x75b20)
?ConvertSharedToExclusive@CRtlResource@@QEAAXXZ (Ordinal: 150, Address: 0x743a0)
?ConvertSharedToExclusive@CShareLock@@QEAAXXZ (Ordinal: 151, Address: 0x74670)
?ConvertSharedToExclusive@CSmallSpinLock@@QEAAXXZ (Ordinal: 152, Address: 0x789a0)
?ConvertSharedToExclusive@CSpinLock@@QEAAXXZ (Ordinal: 153, Address: 0x789a0)
CookieAuthConstructTicket (Ordinal: 154, Address: 0x65070)
CookieAuthParseTicket (Ordinal: 155, Address: 0x64e90)
?Copy@STRA@@QEAAJAEBV1@@Z (Ordinal: 156, Address: 0x739e0)
?Copy@STRA@@QEAAJPEBD@Z (Ordinal: 157, Address: 0x73960)
?Copy@STRA@@QEAAJPEBDK@Z (Ordinal: 158, Address: 0x739b0)
?Copy@STRAU@@QEAAHAEAV1@@Z (Ordinal: 159, Address: 0x787f0)
?Copy@STRAU@@QEAAHPEBD@Z (Ordinal: 160, Address: 0x77f20)
?Copy@STRAU@@QEAAHPEBDK@Z (Ordinal: 161, Address: 0x77de0)
?Copy@STRAU@@QEAAHPEBG@Z (Ordinal: 162, Address: 0x77f90)
?Copy@STRAU@@QEAAHPEBGK@Z (Ordinal: 163, Address: 0x77e20)
?Copy@STRU@@QEAAJAEBV1@@Z (Ordinal: 164, Address: 0x73770)
?Copy@STRU@@QEAAJPEBG@Z (Ordinal: 165, Address: 0x736f0)
?Copy@STRU@@QEAAJPEBGK@Z (Ordinal: 166, Address: 0x73740)
?Copy@STRU@@QEAAJPEBV1@@Z (Ordinal: 167, Address: 0x73770)
?CopyA@STRU@@QEAAJPEBD@Z (Ordinal: 168, Address: 0x737a0)
?CopyA@STRU@@QEAAJPEBDK@Z (Ordinal: 169, Address: 0x737e0)
?CopyBinary@STRA@@QEAAJPEAXK@Z (Ordinal: 170, Address: 0x7a290)
?CopyToBuffer@STRA@@QEBAJPEADPEAK@Z (Ordinal: 171, Address: 0x793f0)
?CopyToBuffer@STRU@@QEBAJPEAGPEAK@Z (Ordinal: 172, Address: 0x7aa00)
?CopyW@STRA@@QEAAJPEBG@Z (Ordinal: 173, Address: 0x73a10)
?CopyW@STRA@@QEAAJPEBGK@Z (Ordinal: 174, Address: 0x73a60)
?CopyWToUTF8Escaped@STRA@@QEAAJAEBVSTRU@@@Z (Ordinal: 175, Address: 0x7a6a0)
?CopyWToUTF8Escaped@STRA@@QEAAJPEBG@Z (Ordinal: 176, Address: 0x73ad0)
?CopyWToUTF8Escaped@STRA@@QEAAJPEBGK@Z (Ordinal: 177, Address: 0x7a5f0)
?CopyWToUTF8Unescaped@STRA@@QEAAJAEBVSTRU@@@Z (Ordinal: 178, Address: 0x79470)
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBG@Z (Ordinal: 179, Address: 0x73b00)
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBGK@Z (Ordinal: 180, Address: 0x79040)
?CopyWTruncate@STRA@@QEAAJPEBG@Z (Ordinal: 181, Address: 0x73a90)
?CopyWTruncate@STRA@@QEAAJPEBGK@Z (Ordinal: 182, Address: 0x72f80)
CreateUserToken (Ordinal: 183, Address: 0x67d80)
?DeleteChain@BUFFER_CHAIN@@QEAAKXZ (Ordinal: 184, Address: 0x78b20)
DirMonClose (Ordinal: 185, Address: 0x21cc0)
DirMonOpen (Ordinal: 186, Address: 0x22760)
DisplayManagementSettings (Ordinal: 187, Address: 0x5b950)
DisposeAppDomainsIndirect (Ordinal: 188, Address: 0x27b10)
DoesKeyContainerExist (Ordinal: 189, Address: 0x66440)
EcbAppendLogParameter (Ordinal: 190, Address: 0x236a0)
EcbCallISAPI (Ordinal: 191, Address: 0x24180)
EcbCloseConnection (Ordinal: 192, Address: 0x23740)
EcbDoneWithSession (Ordinal: 193, Address: 0x229a0)
EcbEmitSimpleTrace (Ordinal: 194, Address: 0x25580)
EcbEmitWebEventTrace (Ordinal: 195, Address: 0x25900)
EcbExecuteUrlUnicode (Ordinal: 196, Address: 0x23f50)
EcbFlushCore (Ordinal: 197, Address: 0x24b20)
EcbFreeExecUrlEntityInfo (Ordinal: 198, Address: 0x23e90)
EcbGetAdditionalPostedContent (Ordinal: 199, Address: 0x22c90)
EcbGetBasics (Ordinal: 200, Address: 0x23290)
EcbGetBasicsContentInfo (Ordinal: 201, Address: 0x231e0)
EcbGetChannelBindingToken (Ordinal: 202, Address: 0x244c0)
EcbGetClientCertificate (Ordinal: 203, Address: 0x239c0)
EcbGetExecUrlEntityInfo (Ordinal: 204, Address: 0x23eb0)
EcbGetImpersonationToken (Ordinal: 205, Address: 0x23870)
EcbGetPreloadedPostedContent (Ordinal: 206, Address: 0x22c30)
EcbGetQueryString (Ordinal: 207, Address: 0x250a0)
EcbGetQueryStringRawBytes (Ordinal: 208, Address: 0x22bc0)
EcbGetServerVariable (Ordinal: 209, Address: 0x22d20)
EcbGetServerVariableByIndex (Ordinal: 210, Address: 0x25170)
EcbGetTraceContextId (Ordinal: 211, Address: 0x25220)
EcbGetTraceFlags (Ordinal: 212, Address: 0x254e0)
EcbGetUnicodeServerVariable (Ordinal: 213, Address: 0x22dc0)
EcbGetUnicodeServerVariableByIndex (Ordinal: 214, Address: 0x22e40)
EcbGetUnicodeServerVariables (Ordinal: 215, Address: 0x22ed0)
EcbGetVersion (Ordinal: 216, Address: 0x74460)
EcbGetVirtualPathToken (Ordinal: 217, Address: 0x23920)
EcbIsClientConnected (Ordinal: 218, Address: 0x236e0)
EcbMapUrlToPath (Ordinal: 219, Address: 0x252c0)
EcbMapUrlToPathUnicode (Ordinal: 220, Address: 0x253d0)
EcbWriteBytes (Ordinal: 221, Address: 0x228d0)
EcbWriteBytesAsync (Ordinal: 222, Address: 0x22910)
EcbWriteHeaders (Ordinal: 223, Address: 0x22840)
?Equals@STRA@@QEBAHAEBV1@@Z (Ordinal: 224, Address: 0x73d20)
?Equals@STRA@@QEBAHPEBD@Z (Ordinal: 225, Address: 0x73d60)
?Equals@STRU@@QEBAHAEBV1@@Z (Ordinal: 226, Address: 0x73be0)
?Equals@STRU@@QEBAHPEBG@Z (Ordinal: 227, Address: 0x73c20)
?EqualsNoCase@STRA@@QEBAHAEBV1@@Z (Ordinal: 228, Address: 0x73da0)
?EqualsNoCase@STRA@@QEBAHPEBD@Z (Ordinal: 229, Address: 0x73de0)
?EqualsNoCase@STRU@@QEBAHAEBV1@@Z (Ordinal: 230, Address: 0x73c60)
?EqualsNoCase@STRU@@QEBAHPEBG@Z (Ordinal: 231, Address: 0x73ca0)
?Escape@STRA@@QEAAJHH@Z (Ordinal: 232, Address: 0x79510)
?Escape@STRU@@QEAAJXZ (Ordinal: 233, Address: 0x7ae90)
EtwTraceAspNetRegister (Ordinal: 234, Address: 0x1b310)
EtwTraceAspNetUnregister (Ordinal: 235, Address: 0x1b360)
?FormatString@STRA@@QEAAJKQEAPEBDPEBDK@Z (Ordinal: 236, Address: 0x79d30)
FreeFileSecurityDescriptor (Ordinal: 237, Address: 0x64c90)
?FreeMemory@BUFFER@@QEAAXXZ (Ordinal: 238, Address: 0x78a90)
GetAppDomainIndirect (Ordinal: 239, Address: 0x28740)
GetConfigurationFromNativeCode (Ordinal: 240, Address: 0x26c90)
GetCredentialFromRegistry (Ordinal: 241, Address: 0x67200)
GetCurrentToken (Ordinal: 242, Address: 0x64b50)
?GetDefaultSpinAdjustmentFactor@CCritSec@@SANXZ (Ordinal: 243, Address: 0x74260)
?GetDefaultSpinAdjustmentFactor@CFakeLock@@SANXZ (Ordinal: 244, Address: 0x74170)
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SANXZ (Ordinal: 245, Address: 0x74ab0)
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SANXZ (Ordinal: 246, Address: 0x74e60)
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SANXZ (Ordinal: 247, Address: 0x748e0)
?GetDefaultSpinAdjustmentFactor@CRtlResource@@SANXZ (Ordinal: 248, Address: 0x74440)
?GetDefaultSpinAdjustmentFactor@CShareLock@@SANXZ (Ordinal: 249, Address: 0x74730)
?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SANXZ (Ordinal: 250, Address: 0x73f20)
?GetDefaultSpinAdjustmentFactor@CSpinLock@@SANXZ (Ordinal: 251, Address: 0x740b0)
?GetDefaultSpinCount@CCritSec@@SAGXZ (Ordinal: 252, Address: 0x741e0)
?GetDefaultSpinCount@CFakeLock@@SAGXZ (Ordinal: 253, Address: 0x74130)
?GetDefaultSpinCount@CReaderWriterLock2@@SAGXZ (Ordinal: 254, Address: 0x74a70)
?GetDefaultSpinCount@CReaderWriterLock3@@SAGXZ (Ordinal: 255, Address: 0x74de0)
?GetDefaultSpinCount@CReaderWriterLock@@SAGXZ (Ordinal: 256, Address: 0x748a0)
?GetDefaultSpinCount@CRtlResource@@SAGXZ (Ordinal: 257, Address: 0x743c0)
?GetDefaultSpinCount@CShareLock@@SAGXZ (Ordinal: 258, Address: 0x746b0)
?GetDefaultSpinCount@CSmallSpinLock@@SAGXZ (Ordinal: 259, Address: 0x73ee0)
?GetDefaultSpinCount@CSpinLock@@SAGXZ (Ordinal: 260, Address: 0x74070)
GetFileHandleForTransmitFile (Ordinal: 261, Address: 0x22b30)
GetFileSecurityDescriptor (Ordinal: 262, Address: 0x66a80)
GetFileVersionString (Ordinal: 263, Address: 0x6ed80)
GetGlobalConfigFullPathW (Ordinal: 264, Address: 0x2b6f0)
GetGroupsForUser (Ordinal: 265, Address: 0x665a0)
GetHMACSHA1Hash (Ordinal: 266, Address: 0x6f160)
GetIsapiProcessHost (Ordinal: 267, Address: 0x6f460)
?GetNewStorage@BUFFER@@AEAAHI@Z (Ordinal: 268, Address: 0x78930)
GetRCInstance (Ordinal: 269, Address: 0x2b590)
GetSHA1Hash (Ordinal: 270, Address: 0x6f000)
?GetSpinCount@CCritSec@@QEBAGXZ (Ordinal: 271, Address: 0x741e0)
?GetSpinCount@CFakeLock@@QEBAGXZ (Ordinal: 272, Address: 0x740e0)
?GetSpinCount@CReaderWriterLock2@@QEBAGXZ (Ordinal: 273, Address: 0x74a70)
?GetSpinCount@CReaderWriterLock3@@QEBAGXZ (Ordinal: 274, Address: 0x74de0)
?GetSpinCount@CReaderWriterLock@@QEBAGXZ (Ordinal: 275, Address: 0x748a0)
?GetSpinCount@CRtlResource@@QEBAGXZ (Ordinal: 276, Address: 0x743c0)
?GetSpinCount@CShareLock@@QEBAGXZ (Ordinal: 277, Address: 0x746b0)
?GetSpinCount@CSmallSpinLock@@QEBAGXZ (Ordinal: 278, Address: 0x73ee0)
?GetSpinCount@CSpinLock@@QEBAGXZ (Ordinal: 279, Address: 0x74070)
GetUserNameFromToken (Ordinal: 280, Address: 0x677b0)
GetXSPHeap (Ordinal: 281, Address: 0x2b580)
GetXSPInstance (Ordinal: 282, Address: 0x2b570)
GrowFileNotificationBuffer (Ordinal: 283, Address: 0x22200)
?HTMLEncode@STRA@@QEAAJXZ (Ordinal: 284, Address: 0x79de0)
?HTMLEncode@STRU@@QEAAJXZ (Ordinal: 285, Address: 0x7b3a0)
InitializeHealthMonitor (Ordinal: 286, Address: 0x27510)
InitializeLibrary (Ordinal: 287, Address: 0x2b3a0)
InitializeManagedCode (Ordinal: 288, Address: 0x28720)
InstrumentedMutexCreate (Ordinal: 289, Address: 0x29330)
InstrumentedMutexDelete (Ordinal: 290, Address: 0x29140)
InstrumentedMutexGetLock (Ordinal: 291, Address: 0x29160)
InstrumentedMutexReleaseLock (Ordinal: 292, Address: 0x291f0)
InstrumentedMutexSetState (Ordinal: 293, Address: 0x29260)
InvalidateKernelCache (Ordinal: 294, Address: 0x22b10)
IsAccessToFileAllowed (Ordinal: 295, Address: 0x66c10)
IsConfigFileName (Ordinal: 296, Address: 0x26610)
?IsCurrentUnicode@STRAU@@QEAAHXZ (Ordinal: 297, Address: 0x76e60)
?IsDynAlloced@BUFFER@@AEBAHXZ (Ordinal: 298, Address: 0x72c40)
?IsEmpty@STRA@@QEBAHXZ (Ordinal: 299, Address: 0x73570)
?IsEmpty@STRAU@@QEAAHXZ (Ordinal: 300, Address: 0x784b0)
?IsEmpty@STRU@@QEBAHXZ (Ordinal: 301, Address: 0x73570)
IsManagedDebuggerConnectedIndirect (Ordinal: 302, Address: 0x28800)
?IsReadLocked@CCritSec@@QEBA_NXZ (Ordinal: 303, Address: 0x74660)
?IsReadLocked@CFakeLock@@QEBA_NXZ (Ordinal: 304, Address: 0x74660)
?IsReadLocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 305, Address: 0x74d00)
?IsReadLocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 306, Address: 0x74d00)
?IsReadLocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 307, Address: 0x74820)
?IsReadLocked@CRtlResource@@QEBA_NXZ (Ordinal: 308, Address: 0x74660)
?IsReadLocked@CShareLock@@QEBA_NXZ (Ordinal: 309, Address: 0x74660)
?IsReadLocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 310, Address: 0x73e70)
?IsReadLocked@CSpinLock@@QEBA_NXZ (Ordinal: 311, Address: 0x73fd0)
?IsReadUnlocked@CCritSec@@QEBA_NXZ (Ordinal: 312, Address: 0x74660)
?IsReadUnlocked@CFakeLock@@QEBA_NXZ (Ordinal: 313, Address: 0x74660)
?IsReadUnlocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 314, Address: 0x74d40)
?IsReadUnlocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 315, Address: 0x74d40)
?IsReadUnlocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 316, Address: 0x74840)
?IsReadUnlocked@CRtlResource@@QEBA_NXZ (Ordinal: 317, Address: 0x74660)
?IsReadUnlocked@CShareLock@@QEBA_NXZ (Ordinal: 318, Address: 0x74660)
?IsReadUnlocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 319, Address: 0x73e90)
?IsReadUnlocked@CSpinLock@@QEBA_NXZ (Ordinal: 320, Address: 0x74000)
IsUserInRole (Ordinal: 321, Address: 0x64bb0)
?IsValid@BUFFER@@QEBAHXZ (Ordinal: 322, Address: 0x733a0)
?IsValid@STRA@@QEBAHXZ (Ordinal: 323, Address: 0x733a0)
?IsValid@STRAU@@QEAAHXZ (Ordinal: 324, Address: 0x76e50)
IsValidResource (Ordinal: 325, Address: 0x24460)
IsVista (Ordinal: 326, Address: 0x32360)
IsWin8 (Ordinal: 327, Address: 0x32380)
?IsWriteLocked@CCritSec@@QEBA_NXZ (Ordinal: 328, Address: 0x74660)
?IsWriteLocked@CFakeLock@@QEBA_NXZ (Ordinal: 329, Address: 0x74660)
?IsWriteLocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 330, Address: 0x749b0)
?IsWriteLocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 331, Address: 0x74cd0)
?IsWriteLocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 332, Address: 0x74810)
?IsWriteLocked@CRtlResource@@QEBA_NXZ (Ordinal: 333, Address: 0x74660)
?IsWriteLocked@CShareLock@@QEBA_NXZ (Ordinal: 334, Address: 0x74660)
?IsWriteLocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 335, Address: 0x73e70)
?IsWriteLocked@CSpinLock@@QEBA_NXZ (Ordinal: 336, Address: 0x73fd0)
?IsWriteUnlocked@CCritSec@@QEBA_NXZ (Ordinal: 337, Address: 0x74660)
?IsWriteUnlocked@CFakeLock@@QEBA_NXZ (Ordinal: 338, Address: 0x74660)
?IsWriteUnlocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 339, Address: 0x749c0)
?IsWriteUnlocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 340, Address: 0x74d10)
?IsWriteUnlocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 341, Address: 0x74830)
?IsWriteUnlocked@CRtlResource@@QEBA_NXZ (Ordinal: 342, Address: 0x74660)
?IsWriteUnlocked@CShareLock@@QEBA_NXZ (Ordinal: 343, Address: 0x74660)
?IsWriteUnlocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 344, Address: 0x73e90)
?IsWriteUnlocked@CSpinLock@@QEBA_NXZ (Ordinal: 345, Address: 0x74000)
IsapiAppHostGetAppPath (Ordinal: 346, Address: 0x2ab90)
IsapiAppHostGetNextVirtualSubdir (Ordinal: 347, Address: 0x2aca0)
IsapiAppHostGetSiteId (Ordinal: 348, Address: 0x2aa90)
IsapiAppHostGetSiteName (Ordinal: 349, Address: 0x2a9a0)
IsapiAppHostGetUncUser (Ordinal: 350, Address: 0x2a850)
IsapiAppHostIsAppRoot (Ordinal: 351, Address: 0x298e0)
IsapiAppHostMapPath (Ordinal: 352, Address: 0x2b260)
LoadLibraryUsingFullPath (Ordinal: 353, Address: 0x6ccf0)
LoadResourceString (Ordinal: 354, Address: 0x6f540)
?LoadStringW@STRA@@QEAAJKPEAUHINSTANCE__@@@Z (Ordinal: 355, Address: 0x79bf0)
?LoadStringW@STRA@@QEAAJKPEBDK@Z (Ordinal: 356, Address: 0x79a70)
?Lock@TS_RESOURCE@@QEAAXW4TSRES_LOCK_TYPE@@@Z (Ordinal: 357, Address: 0x742d0)
?LockType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 358, Address: 0x74fd0)
?LockType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 359, Address: 0x75680)
?LockType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 360, Address: 0x75640)
?LockType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 361, Address: 0x75620)
?LockType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 362, Address: 0x75630)
?LockType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 363, Address: 0x75650)
?LockType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 364, Address: 0x75660)
?LockType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 365, Address: 0x75670)
?LockType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 366, Address: 0x75690)
MgdAbortConnection (Ordinal: 367, Address: 0x7c2c0)
MgdAllocateRequestMemory (Ordinal: 368, Address: 0x7f7a0)
MgdAppDomainShutdown (Ordinal: 369, Address: 0x7d150)
MgdCanDisposeManagedContext (Ordinal: 370, Address: 0x7dac0)
MgdClearResponse (Ordinal: 371, Address: 0x7d710)
MgdCloseConnection (Ordinal: 372, Address: 0x7c2f0)
MgdDisableKernelCache (Ordinal: 373, Address: 0x7c880)
MgdDisableNotifications (Ordinal: 374, Address: 0x7d6a0)
MgdDisableUserCache (Ordinal: 375, Address: 0x7fd90)
MgdEmitSimpleTrace (Ordinal: 376, Address: 0x7da10)
MgdEmitWebEventTrace (Ordinal: 377, Address: 0x7da30)
MgdEtwGetTraceConfig (Ordinal: 378, Address: 0x7d9e0)
MgdExecuteUrl (Ordinal: 379, Address: 0x7d530)
MgdExplicitFlush (Ordinal: 380, Address: 0x7f620)
MgdFlushCore (Ordinal: 381, Address: 0x7c780)
MgdFlushKernelCache (Ordinal: 382, Address: 0x7c850)
MgdGetAnonymousUserToken (Ordinal: 383, Address: 0x7cb20)
MgdGetAppCollection (Ordinal: 384, Address: 0x7e3f0)
MgdGetAppPathForPath (Ordinal: 385, Address: 0x7dbb0)
MgdGetApplicationInfo (Ordinal: 386, Address: 0x7cef0)
MgdGetBuffer (Ordinal: 387, Address: 0x7d100)
MgdGetBufferPool (Ordinal: 388, Address: 0x7d0f0)
MgdGetChannelBindingToken (Ordinal: 389, Address: 0x806c0)
MgdGetClientCertificate (Ordinal: 390, Address: 0x7faa0)
MgdGetCookieHeader (Ordinal: 391, Address: 0x7d400)
MgdGetCurrentModuleIndex (Ordinal: 392, Address: 0x7f770)
MgdGetCurrentModuleName (Ordinal: 393, Address: 0x801b0)
MgdGetCurrentNotification (Ordinal: 394, Address: 0x7d660)
MgdGetFileChunkInfo (Ordinal: 395, Address: 0x7f2b0)
MgdGetHandlerTypeString (Ordinal: 396, Address: 0x7ce60)
MgdGetHeaderChanges (Ordinal: 397, Address: 0x7f6a0)
MgdGetLocalPort (Ordinal: 398, Address: 0x7d170)
MgdGetMemoryLimitKB (Ordinal: 399, Address: 0x7dd70)
MgdGetMethod (Ordinal: 400, Address: 0x7d5c0)
MgdGetModuleCollection (Ordinal: 401, Address: 0x80220)
MgdGetNextModule (Ordinal: 402, Address: 0x7e8c0)
MgdGetNextNotification (Ordinal: 403, Address: 0x7d6d0)
MgdGetNextVPath (Ordinal: 404, Address: 0x7e610)
MgdGetPreloadedContent (Ordinal: 405, Address: 0x7d020)
MgdGetPreloadedSize (Ordinal: 406, Address: 0x7d0b0)
MgdGetPrincipal (Ordinal: 407, Address: 0x7cc60)
MgdGetQueryString (Ordinal: 408, Address: 0x7ca20)
MgdGetRemotePort (Ordinal: 409, Address: 0x7d1d0)
MgdGetRequestBasics (Ordinal: 410, Address: 0x7c380)
MgdGetRequestTraceGuid (Ordinal: 411, Address: 0x7d7a0)
MgdGetResponseChunks (Ordinal: 412, Address: 0x7d8b0)
MgdGetServerVarChanges (Ordinal: 413, Address: 0x7f640)
MgdGetServerVariableA (Ordinal: 414, Address: 0x807d0)
MgdGetServerVariableW (Ordinal: 415, Address: 0x7fe60)
MgdGetSiteNameFromId (Ordinal: 416, Address: 0x7dae0)
MgdGetStatusChanges (Ordinal: 417, Address: 0x7d7f0)
MgdGetUriPath (Ordinal: 418, Address: 0x7d230)
MgdGetUserAgent (Ordinal: 419, Address: 0x7d380)
MgdGetUserToken (Ordinal: 420, Address: 0x7cbb0)
MgdGetVirtualToken (Ordinal: 421, Address: 0x7cab0)
MgdGetVrPathCreds (Ordinal: 422, Address: 0x7e0b0)
MgdHasConfigChanged (Ordinal: 423, Address: 0x7f760)
MgdIndicateCompletion (Ordinal: 424, Address: 0x7fdd0)
MgdInitNativeConfig (Ordinal: 425, Address: 0x7e7d0)
MgdIsClientConnected (Ordinal: 426, Address: 0x7c310)
MgdIsCurrentNotificationPost (Ordinal: 427, Address: 0x7d680)
MgdIsHandlerExecutionDenied (Ordinal: 428, Address: 0x7c350)
MgdIsInRole (Ordinal: 429, Address: 0x7cdb0)
MgdIsLastNotification (Ordinal: 430, Address: 0x7daa0)
MgdIsWithinApp (Ordinal: 431, Address: 0x7e190)
MgdMapHandler (Ordinal: 432, Address: 0x80310)
MgdMapPathDirect (Ordinal: 433, Address: 0x7e800)
MgdPostCompletion (Ordinal: 434, Address: 0x7c230)
MgdRaiseTraceEvent (Ordinal: 435, Address: 0x7c8b0)
MgdReMapHandler (Ordinal: 436, Address: 0x7f080)
MgdReadChunkHandle (Ordinal: 437, Address: 0x7f3c0)
MgdRegisterEventPriority (Ordinal: 438, Address: 0x7c9f0)
MgdRegisterEventSubscription (Ordinal: 439, Address: 0x7c940)
MgdResolveSiteName (Ordinal: 440, Address: 0x7f230)
MgdReturnBuffer (Ordinal: 441, Address: 0x7d110)
MgdRewriteUrl (Ordinal: 442, Address: 0x7d480)
MgdSetBadRequestStatus (Ordinal: 443, Address: 0x7c540)
MgdSetKernelCachePolicy (Ordinal: 444, Address: 0x7c7c0)
MgdSetKnownHeader (Ordinal: 445, Address: 0x7c570)
MgdSetManagedHttpContext (Ordinal: 446, Address: 0x7c2a0)
MgdSetNativeConfiguration (Ordinal: 447, Address: 0x7f220)
MgdSetRemapHandler (Ordinal: 448, Address: 0x7f200)
MgdSetRequestPrincipal (Ordinal: 449, Address: 0x7da70)
MgdSetResponseFilter (Ordinal: 450, Address: 0x7f290)
MgdSetServerVariableW (Ordinal: 451, Address: 0x805a0)
MgdSetStatusW (Ordinal: 452, Address: 0x7ffb0)
MgdSetUnknownHeader (Ordinal: 453, Address: 0x7c680)
MgdSyncReadRequest (Ordinal: 454, Address: 0x7c9a0)
MgdTerminateNativeConfig (Ordinal: 455, Address: 0x7e7f0)
MonitorGlobalConfigFile (Ordinal: 456, Address: 0x26660)
?MutexType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 457, Address: 0x74fd0)
?MutexType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 458, Address: 0x74fd0)
?MutexType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 459, Address: 0x74fd0)
?MutexType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 460, Address: 0x74fd0)
?MutexType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 461, Address: 0x75680)
?MutexType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 462, Address: 0x75680)
?MutexType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 463, Address: 0x75680)
?MutexType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 464, Address: 0x75680)
?MutexType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 465, Address: 0x75680)
?NextBuffer@BUFFER_CHAIN@@QEAAPEAVBUFFER_CHAIN_ITEM@@PEAV2@@Z (Ordinal: 466, Address: 0x789b0)
PassportCrypt (Ordinal: 467, Address: 0x30340)
PassportCryptIsValid (Ordinal: 468, Address: 0x2dea0)
PassportCryptPut (Ordinal: 469, Address: 0x2ddb0)
?PerLockSpin@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 470, Address: 0x75680)
?PerLockSpin@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 471, Address: 0x75680)
?PerLockSpin@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 472, Address: 0x74fd0)
?PerLockSpin@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 473, Address: 0x75640)
?PerLockSpin@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 474, Address: 0x75640)
?PerLockSpin@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 475, Address: 0x75640)
?PerLockSpin@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 476, Address: 0x75680)
?PerLockSpin@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 477, Address: 0x75680)
?PerLockSpin@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 478, Address: 0x75680)
PerfCloseAppCounters (Ordinal: 479, Address: 0x30c40)
PerfCounterInitialize (Ordinal: 480, Address: 0x32200)
PerfDecrementCounter (Ordinal: 481, Address: 0x30590)
PerfDecrementGlobalCounter (Ordinal: 482, Address: 0x30c80)
PerfGetCounter (Ordinal: 483, Address: 0x305a0)
PerfIncrementCounter (Ordinal: 484, Address: 0x30580)
PerfIncrementCounterEx (Ordinal: 485, Address: 0x305c0)
PerfIncrementGlobalCounter (Ordinal: 486, Address: 0x30c60)
PerfOpenAppCounters (Ordinal: 487, Address: 0x31590)
PerfOpenGlobalCounters (Ordinal: 488, Address: 0x30570)
PerfOpenStateCounters (Ordinal: 489, Address: 0x31550)
PerfSetCounter (Ordinal: 490, Address: 0x305e0)
PerfSetGlobalCounter (Ordinal: 491, Address: 0x30cc0)
PostThreadPoolWorkItem (Ordinal: 492, Address: 0x6b7d0)
PrintResourceString (Ordinal: 493, Address: 0x6f740)
PrintResourceStringNoNewLine (Ordinal: 494, Address: 0x6f800)
?PrivateQueryStr@STRAU@@AEAAPEAGH@Z (Ordinal: 495, Address: 0x77a80)
?QueryBuffer@STRU@@QEAAPEAVBUFFER@@XZ (Ordinal: 496, Address: 0x74ad0)
?QueryCB@STRA@@QEBAIXZ (Ordinal: 497, Address: 0x72f10)
?QueryCB@STRAU@@QEAAIH@Z (Ordinal: 498, Address: 0x78750)
?QueryCB@STRU@@QEBAIXZ (Ordinal: 499, Address: 0x73580)
?QueryCBA@STRAU@@QEAAIXZ (Ordinal: 500, Address: 0x78000)
?QueryCBW@STRAU@@QEAAIXZ (Ordinal: 501, Address: 0x78060)
?QueryCCH@STRA@@QEBAIXZ (Ordinal: 502, Address: 0x72f10)
?QueryCCH@STRAU@@QEAAIXZ (Ordinal: 503, Address: 0x780c0)
?QueryCCH@STRU@@QEBAIXZ (Ordinal: 504, Address: 0x72f10)
?QueryPtr@BUFFER@@QEBAPEAXXZ (Ordinal: 505, Address: 0x73830)
?QuerySize@BUFFER@@QEBAIXZ (Ordinal: 506, Address: 0x72c90)
?QuerySize@STRA@@QEBAIXZ (Ordinal: 507, Address: 0x72c90)
?QuerySizeCCH@STRA@@QEBAIXZ (Ordinal: 508, Address: 0x72c90)
?QuerySizeCCH@STRU@@QEBAIXZ (Ordinal: 509, Address: 0x72e10)
?QueryStr@STRA@@QEAAPEADXZ (Ordinal: 510, Address: 0x73830)
?QueryStr@STRA@@QEBAPEBDXZ (Ordinal: 511, Address: 0x73830)
?QueryStr@STRAU@@QEAAPEAGH@Z (Ordinal: 512, Address: 0x78120)
?QueryStr@STRU@@QEAAPEAGXZ (Ordinal: 513, Address: 0x73830)
?QueryStr@STRU@@QEBAPEBGXZ (Ordinal: 514, Address: 0x73830)
?QueryStrA@STRAU@@QEAAPEADXZ (Ordinal: 515, Address: 0x77e60)
?QueryStrW@STRAU@@QEAAPEAGXZ (Ordinal: 516, Address: 0x77ec0)
?QueryUsed@BUFFER_CHAIN_ITEM@@QEBAKXZ (Ordinal: 517, Address: 0x734a0)
?QueueType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 518, Address: 0x75640)
?QueueType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 519, Address: 0x75640)
?QueueType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 520, Address: 0x74fd0)
?QueueType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 521, Address: 0x75640)
?QueueType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 522, Address: 0x75640)
?QueueType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 523, Address: 0x75640)
?QueueType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 524, Address: 0x75640)
?QueueType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 525, Address: 0x75640)
?QueueType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 526, Address: 0x75640)
?ReadLock@CCritSec@@QEAAXXZ (Ordinal: 527, Address: 0x741a0)
?ReadLock@CFakeLock@@QEAAXXZ (Ordinal: 528, Address: 0x789a0)
?ReadLock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 529, Address: 0x75c80)
?ReadLock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 530, Address: 0x761b0)
?ReadLock@CReaderWriterLock@@QEAAXXZ (Ordinal: 531, Address: 0x75af0)
?ReadLock@CRtlResource@@QEAAXXZ (Ordinal: 532, Address: 0x74350)
?ReadLock@CShareLock@@QEAAXXZ (Ordinal: 533, Address: 0x745b0)
?ReadLock@CSmallSpinLock@@QEAAXXZ (Ordinal: 534, Address: 0x756a0)
?ReadLock@CSpinLock@@QEAAXXZ (Ordinal: 535, Address: 0x75720)
?ReadOrWriteLock@CCritSec@@QEAA_NXZ (Ordinal: 536, Address: 0x741b0)
?ReadOrWriteLock@CFakeLock@@QEAA_NXZ (Ordinal: 537, Address: 0x74660)
?ReadOrWriteLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 538, Address: 0x76530)
?ReadOrWriteLock@CSpinLock@@QEAA_NXZ (Ordinal: 539, Address: 0x75790)
?ReadOrWriteUnlock@CCritSec@@QEAAX_N@Z (Ordinal: 540, Address: 0x741d0)
?ReadOrWriteUnlock@CFakeLock@@QEAAX_N@Z (Ordinal: 541, Address: 0x789a0)
?ReadOrWriteUnlock@CReaderWriterLock3@@QEAAX_N@Z (Ordinal: 542, Address: 0x74c40)
?ReadOrWriteUnlock@CSpinLock@@QEAAX_N@Z (Ordinal: 543, Address: 0x73f60)
?ReadUnlock@CCritSec@@QEAAXXZ (Ordinal: 544, Address: 0x741d0)
?ReadUnlock@CFakeLock@@QEAAXXZ (Ordinal: 545, Address: 0x789a0)
?ReadUnlock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 546, Address: 0x74c00)
?ReadUnlock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 547, Address: 0x74c00)
?ReadUnlock@CReaderWriterLock@@QEAAXXZ (Ordinal: 548, Address: 0x74800)
?ReadUnlock@CRtlResource@@QEAAXXZ (Ordinal: 549, Address: 0x74300)
?ReadUnlock@CShareLock@@QEAAXXZ (Ordinal: 550, Address: 0x74530)
?ReadUnlock@CSmallSpinLock@@QEAAXXZ (Ordinal: 551, Address: 0x73e60)
?ReadUnlock@CSpinLock@@QEAAXXZ (Ordinal: 552, Address: 0x73f60)
?ReallocStorage@BUFFER@@AEAAHI@Z (Ordinal: 553, Address: 0x789d0)
?Recursion@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 554, Address: 0x75640)
?Recursion@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 555, Address: 0x74fd0)
?Recursion@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 556, Address: 0x74fd0)
?Recursion@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 557, Address: 0x74fd0)
?Recursion@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 558, Address: 0x74fd0)
?Recursion@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 559, Address: 0x74fd0)
?Recursion@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 560, Address: 0x75680)
?Recursion@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 561, Address: 0x75680)
?Recursion@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 562, Address: 0x74fd0)
RegisterAspNetMMC (Ordinal: 563, Address: 0x5be00)
RegisterModule (Ordinal: 564, Address: 0x83500)
RegisterScriptMapsEx (Ordinal: 565, Address: 0x430a0)
?ReleaseExclusiveLock@CSharelock@@QEAAXXZ (Ordinal: 566, Address: 0x74510)
?ReleaseShareLock@CSharelock@@QEAAXXZ (Ordinal: 567, Address: 0x74530)
?Reset@STRA@@QEAAXXZ (Ordinal: 568, Address: 0x72f20)
?Reset@STRAU@@QEAAXXZ (Ordinal: 569, Address: 0x76ef0)
?Reset@STRU@@QEAAXXZ (Ordinal: 570, Address: 0x72e20)
?Resize@BUFFER@@QEAAHI@Z (Ordinal: 571, Address: 0x72ca0)
?Resize@BUFFER@@QEAAHII@Z (Ordinal: 572, Address: 0x73340)
?Resize@STRA@@QEAAJK@Z (Ordinal: 573, Address: 0x72e40)
?Resize@STRU@@QEAAJK@Z (Ordinal: 574, Address: 0x72e40)
?ResizeW@STRAU@@QEAAHK@Z (Ordinal: 575, Address: 0x76f20)
RolesCreateTicket (Ordinal: 576, Address: 0x65c50)
RolesParseTicket (Ordinal: 577, Address: 0x65dc0)
?SAFE_snwprintf@@YAJPEAVSTRU@@PEBGZZ (Ordinal: 578, Address: 0x7ad60)
?SafeCopy@STRAU@@QEAAHPEBD@Z (Ordinal: 579, Address: 0x77b40)
?SafeCopy@STRAU@@QEAAHPEBG@Z (Ordinal: 580, Address: 0x77c30)
?SetDefaultSpinAdjustmentFactor@CCritSec@@SAXN@Z (Ordinal: 581, Address: 0x74230)
?SetDefaultSpinAdjustmentFactor@CFakeLock@@SAXN@Z (Ordinal: 582, Address: 0x74140)
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SAXN@Z (Ordinal: 583, Address: 0x74a80)
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SAXN@Z (Ordinal: 584, Address: 0x74e30)
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SAXN@Z (Ordinal: 585, Address: 0x748b0)
?SetDefaultSpinAdjustmentFactor@CRtlResource@@SAXN@Z (Ordinal: 586, Address: 0x74410)
?SetDefaultSpinAdjustmentFactor@CShareLock@@SAXN@Z (Ordinal: 587, Address: 0x74700)
?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SAXN@Z (Ordinal: 588, Address: 0x73ef0)
?SetDefaultSpinAdjustmentFactor@CSpinLock@@SAXN@Z (Ordinal: 589, Address: 0x74080)
?SetDefaultSpinCount@CCritSec@@SAXG@Z (Ordinal: 590, Address: 0x741f0)
?SetDefaultSpinCount@CFakeLock@@SAXG@Z (Ordinal: 591, Address: 0x740f0)
?SetDefaultSpinCount@CReaderWriterLock2@@SAXG@Z (Ordinal: 592, Address: 0x74a30)
?SetDefaultSpinCount@CReaderWriterLock3@@SAXG@Z (Ordinal: 593, Address: 0x74df0)
?SetDefaultSpinCount@CReaderWriterLock@@SAXG@Z (Ordinal: 594, Address: 0x74860)
?SetDefaultSpinCount@CRtlResource@@SAXG@Z (Ordinal: 595, Address: 0x743d0)
?SetDefaultSpinCount@CShareLock@@SAXG@Z (Ordinal: 596, Address: 0x746c0)
?SetDefaultSpinCount@CSmallSpinLock@@SAXG@Z (Ordinal: 597, Address: 0x73ea0)
?SetDefaultSpinCount@CSpinLock@@SAXG@Z (Ordinal: 598, Address: 0x74030)
?SetLen@STRA@@QEAAHK@Z (Ordinal: 599, Address: 0x73b30)
?SetLen@STRAU@@QEAAHK@Z (Ordinal: 600, Address: 0x781e0)
?SetLen@STRU@@QEAAHK@Z (Ordinal: 601, Address: 0x73800)
SetRemoteConfigDCOMRegKeys (Ordinal: 602, Address: 0x5ede0)
?SetSpinCount@CCritSec@@QEAA_NG@Z (Ordinal: 603, Address: 0x75830)
?SetSpinCount@CCritSec@@SAKPEAU_RTL_CRITICAL_SECTION@@K@Z (Ordinal: 604, Address: 0x75340)
?SetSpinCount@CFakeLock@@QEAA_NG@Z (Ordinal: 605, Address: 0x74a20)
?SetSpinCount@CReaderWriterLock2@@QEAA_NG@Z (Ordinal: 606, Address: 0x74a20)
?SetSpinCount@CReaderWriterLock3@@QEAA_NG@Z (Ordinal: 607, Address: 0x74a20)
?SetSpinCount@CReaderWriterLock@@QEAA_NG@Z (Ordinal: 608, Address: 0x74a20)
?SetSpinCount@CRtlResource@@QEAA_NG@Z (Ordinal: 609, Address: 0x75830)
?SetSpinCount@CShareLock@@QEAA_NG@Z (Ordinal: 610, Address: 0x74690)
?SetSpinCount@CSmallSpinLock@@QEAA_NG@Z (Ordinal: 611, Address: 0x74a20)
?SetSpinCount@CSpinLock@@QEAA_NG@Z (Ordinal: 612, Address: 0x74a20)
?SetUsed@BUFFER_CHAIN_ITEM@@QEAAXK@Z (Ordinal: 613, Address: 0x734b0)
?SetValid@BUFFER@@QEAAXH@Z (Ordinal: 614, Address: 0x73380)
?SleepWaitingForLock@CSharelock@@AEAAEH@Z (Ordinal: 615, Address: 0x76950)
?SyncWithBuffer@STRA@@QEAAXXZ (Ordinal: 616, Address: 0x72fb0)
?SyncWithBuffer@STRU@@QEAAXXZ (Ordinal: 617, Address: 0x72e90)
TransactManagedCallback (Ordinal: 618, Address: 0x6c150)
?TryConvertSharedToExclusive@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 619, Address: 0x74d50)
?TryReadLock@CCritSec@@QEAA_NXZ (Ordinal: 620, Address: 0x75320)
?TryReadLock@CFakeLock@@QEAA_NXZ (Ordinal: 621, Address: 0x74660)
?TryReadLock@CReaderWriterLock2@@QEAA_NXZ (Ordinal: 622, Address: 0x74b20)
?TryReadLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 623, Address: 0x74b20)
?TryReadLock@CReaderWriterLock@@QEAA_NXZ (Ordinal: 624, Address: 0x74790)
?TryReadLock@CRtlResource@@QEAA_NXZ (Ordinal: 625, Address: 0x74380)
?TryReadLock@CShareLock@@QEAA_NXZ (Ordinal: 626, Address: 0x74620)
?TryReadLock@CSmallSpinLock@@QEAA_NXZ (Ordinal: 627, Address: 0x73e30)
?TryReadLock@CSpinLock@@QEAA_NXZ (Ordinal: 628, Address: 0x73f90)
?TryReadOrWriteLock@CReaderWriterLock3@@QEAA_NAEA_N@Z (Ordinal: 629, Address: 0x76720)
?TryWriteLock@CCritSec@@QEAA_NXZ (Ordinal: 630, Address: 0x75320)
?TryWriteLock@CFakeLock@@QEAA_NXZ (Ordinal: 631, Address: 0x74660)
?TryWriteLock@CReaderWriterLock2@@QEAA_NXZ (Ordinal: 632, Address: 0x74940)
?TryWriteLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 633, Address: 0x75d20)
?TryWriteLock@CReaderWriterLock@@QEAA_NXZ (Ordinal: 634, Address: 0x747c0)
?TryWriteLock@CRtlResource@@QEAA_NXZ (Ordinal: 635, Address: 0x74360)
?TryWriteLock@CShareLock@@QEAA_NXZ (Ordinal: 636, Address: 0x745e0)
?TryWriteLock@CSmallSpinLock@@QEAA_NXZ (Ordinal: 637, Address: 0x73e30)
?TryWriteLock@CSpinLock@@QEAA_NXZ (Ordinal: 638, Address: 0x73f90)
UnInitializeManagedCode (Ordinal: 639, Address: 0x28730)
?Unescape@STRA@@QEAAJXZ (Ordinal: 640, Address: 0x790e0)
?Unescape@STRU@@QEAAJXZ (Ordinal: 641, Address: 0x7aa80)
?Unlock@TS_RESOURCE@@QEAAXXZ (Ordinal: 642, Address: 0x74300)
UpdateLastActivityTimeForHealthMonitor (Ordinal: 643, Address: 0x27560)
?UpdateMaxSpins@CSharelock@@QEAAEH@Z (Ordinal: 644, Address: 0x76990)
?UpdateMaxUsers@CSharelock@@QEAAEH@Z (Ordinal: 645, Address: 0x76c90)
?VerifyState@BUFFER@@AEBAXXZ (Ordinal: 646, Address: 0x789a0)
?WaitForExclusiveLock@CSharelock@@AEAAEH@Z (Ordinal: 647, Address: 0x76a30)
?WaitForShareLock@CSharelock@@AEAAEH@Z (Ordinal: 648, Address: 0x76b60)
?WaitType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 649, Address: 0x74fd0)
?WaitType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 650, Address: 0x74fd0)
?WaitType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 651, Address: 0x74fd0)
?WaitType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 652, Address: 0x75680)
?WaitType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 653, Address: 0x75680)
?WaitType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 654, Address: 0x75680)
?WaitType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 655, Address: 0x74fd0)
?WaitType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 656, Address: 0x74fd0)
?WaitType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 657, Address: 0x74fd0)
?WakeAllSleepers@CSharelock@@AEAAXXZ (Ordinal: 658, Address: 0x769a0)
?WriteLock@CCritSec@@QEAAXXZ (Ordinal: 659, Address: 0x741a0)
?WriteLock@CFakeLock@@QEAAXXZ (Ordinal: 660, Address: 0x789a0)
?WriteLock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 661, Address: 0x76120)
?WriteLock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 662, Address: 0x764b0)
?WriteLock@CReaderWriterLock@@QEAAXXZ (Ordinal: 663, Address: 0x75ac0)
?WriteLock@CRtlResource@@QEAAXXZ (Ordinal: 664, Address: 0x74340)
?WriteLock@CShareLock@@QEAAXXZ (Ordinal: 665, Address: 0x74580)
?WriteLock@CSmallSpinLock@@QEAAXXZ (Ordinal: 666, Address: 0x756a0)
?WriteLock@CSpinLock@@QEAAXXZ (Ordinal: 667, Address: 0x75720)
?WriteUnlock@CCritSec@@QEAAXXZ (Ordinal: 668, Address: 0x741d0)
?WriteUnlock@CFakeLock@@QEAAXXZ (Ordinal: 669, Address: 0x789a0)
?WriteUnlock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 670, Address: 0x74970)
?WriteUnlock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 671, Address: 0x74b90)
?WriteUnlock@CReaderWriterLock@@QEAAXXZ (Ordinal: 672, Address: 0x747f0)
?WriteUnlock@CRtlResource@@QEAAXXZ (Ordinal: 673, Address: 0x74300)
?WriteUnlock@CShareLock@@QEAAXXZ (Ordinal: 674, Address: 0x74510)
?WriteUnlock@CSmallSpinLock@@QEAAXXZ (Ordinal: 675, Address: 0x73e60)
?WriteUnlock@CSpinLock@@QEAAXXZ (Ordinal: 676, Address: 0x73f60)
?_CmpExch@CReaderWriterLock2@@AEAA_NJJ@Z (Ordinal: 677, Address: 0x74760)
?_CmpExch@CReaderWriterLock3@@AEAA_NJJ@Z (Ordinal: 678, Address: 0x74760)
?_CmpExch@CReaderWriterLock@@AEAA_NJJ@Z (Ordinal: 679, Address: 0x74760)
?_CurrentThreadId@CReaderWriterLock3@@CAJXZ (Ordinal: 680, Address: 0x73f40)
?_CurrentThreadId@CSmallSpinLock@@CAJXZ (Ordinal: 681, Address: 0x73e20)
?_CurrentThreadId@CSpinLock@@CAJXZ (Ordinal: 682, Address: 0x73f40)
?_IsLocked@CSpinLock@@AEBA_NXZ (Ordinal: 683, Address: 0x73fd0)
?_Lock@CSpinLock@@AEAAXXZ (Ordinal: 684, Address: 0x756e0)
?_LockSpin@CReaderWriterLock2@@AEAAX_N@Z (Ordinal: 685, Address: 0x754c0)
?_LockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z (Ordinal: 686, Address: 0x75f10)
?_LockSpin@CReaderWriterLock@@AEAAX_N@Z (Ordinal: 687, Address: 0x75350)
?_LockSpin@CSmallSpinLock@@AEAAXXZ (Ordinal: 688, Address: 0x75000)
?_LockSpin@CSpinLock@@AEAAXXZ (Ordinal: 689, Address: 0x75190)
?_ReadLockSpin@CReaderWriterLock2@@AEAAXXZ (Ordinal: 690, Address: 0x75b50)
?_ReadLockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z (Ordinal: 691, Address: 0x761a0)
?_ReadLockSpin@CReaderWriterLock@@AEAAXXZ (Ordinal: 692, Address: 0x75980)
?_TryLock@CSmallSpinLock@@AEAA_NXZ (Ordinal: 693, Address: 0x73e30)
?_TryLock@CSpinLock@@AEAA_NXZ (Ordinal: 694, Address: 0x73f90)
?_TryReadLock@CReaderWriterLock2@@AEAA_NXZ (Ordinal: 695, Address: 0x74b20)
?_TryReadLock@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 696, Address: 0x74b20)
?_TryReadLock@CReaderWriterLock@@AEAA_NXZ (Ordinal: 697, Address: 0x74790)
?_TryReadLockRecursive@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 698, Address: 0x74b50)
?_TryWriteLock2@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 699, Address: 0x74ae0)
?_TryWriteLock@CReaderWriterLock2@@AEAA_NJ@Z (Ordinal: 700, Address: 0x74910)
?_TryWriteLock@CReaderWriterLock3@@AEAA_NJ@Z (Ordinal: 701, Address: 0x75cb0)
?_TryWriteLock@CReaderWriterLock@@AEAA_NXZ (Ordinal: 702, Address: 0x74770)
?_Unlock@CSpinLock@@AEAAXXZ (Ordinal: 703, Address: 0x73f60)
?_WriteLockSpin@CReaderWriterLock2@@AEAAXXZ (Ordinal: 704, Address: 0x75da0)
?_WriteLockSpin@CReaderWriterLock3@@AEAAXXZ (Ordinal: 705, Address: 0x76300)
?_WriteLockSpin@CReaderWriterLock@@AEAAXXZ (Ordinal: 706, Address: 0x75850)
?sm_dblDfltSpinAdjFctr@CCritSec@@1NA (Ordinal: 707, Address: 0xa7860)
?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA (Ordinal: 708, Address: 0xa7870)
?sm_dblDfltSpinAdjFctr@CReaderWriterLock2@@1NA (Ordinal: 709, Address: 0xa78b0)
?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA (Ordinal: 710, Address: 0xa78c0)
?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA (Ordinal: 711, Address: 0xa78a0)
?sm_dblDfltSpinAdjFctr@CRtlResource@@1NA (Ordinal: 712, Address: 0xa7880)
?sm_dblDfltSpinAdjFctr@CShareLock@@1NA (Ordinal: 713, Address: 0xa7890)
?sm_dblDfltSpinAdjFctr@CSmallSpinLock@@1NA (Ordinal: 714, Address: 0xa7840)
?sm_dblDfltSpinAdjFctr@CSpinLock@@1NA (Ordinal: 715, Address: 0xa7850)
?sm_wDefaultSpinCount@CCritSec@@1GA (Ordinal: 716, Address: 0xa7858)
?sm_wDefaultSpinCount@CFakeLock@@1GA (Ordinal: 717, Address: 0xa7868)
?sm_wDefaultSpinCount@CReaderWriterLock2@@1GA (Ordinal: 718, Address: 0xa78a8)
?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA (Ordinal: 719, Address: 0xa78b8)
?sm_wDefaultSpinCount@CReaderWriterLock@@1GA (Ordinal: 720, Address: 0xa7898)
?sm_wDefaultSpinCount@CRtlResource@@1GA (Ordinal: 721, Address: 0xa7878)
?sm_wDefaultSpinCount@CShareLock@@1GA (Ordinal: 722, Address: 0xa7888)
?sm_wDefaultSpinCount@CSmallSpinLock@@1GA (Ordinal: 723, Address: 0xa7838)
?sm_wDefaultSpinCount@CSpinLock@@1GA (Ordinal: 724, Address: 0xa7848)
AspNetGetExtensionVersion (Ordinal: 725, Address: 0x28fa0)
AspNetHttpExtensionProc (Ordinal: 726, Address: 0x28c10)
AspNetTerminateExtension (Ordinal: 727, Address: 0x28b60)
AttachHandleToThreadPool (Ordinal: 728, Address: 0x6af60)
ClrQueueUserWorkItem (Ordinal: 729, Address: 0x6abc0)
CopyClientScriptFiles (Ordinal: 730, Address: 0x4a760)
DBGNDAssert (Ordinal: 731, Address: 0x6bdf0)
DBGNDIsTagEnabled (Ordinal: 732, Address: 0x6bdf0)
DBGNDIsTagPresent (Ordinal: 733, Address: 0x6bdf0)
DBGNDLaunchCordbg (Ordinal: 734, Address: 0x789a0)
DBGNDMessageBoxOnThread (Ordinal: 735, Address: 0x6bdf0)
DBGNDTrace (Ordinal: 736, Address: 0x6bdf0)
DbgpAssert (Ordinal: 737, Address: 0x6bdf0)
DbgpDisableAssertThread (Ordinal: 738, Address: 0x21970)
DbgpIsTagEnabled (Ordinal: 739, Address: 0x6bdf0)
DbgpIsTagPresent (Ordinal: 740, Address: 0x6bdf0)
DbgpTrace (Ordinal: 741, Address: 0x21800)
DbgpTraceError (Ordinal: 742, Address: 0x6bdf0)
DbgpTraceV (Ordinal: 743, Address: 0x6bdf0)
DetectErrorAndGetLogfileName (Ordinal: 744, Address: 0x4b7d0)
DllRegisterServer (Ordinal: 745, Address: 0x60480)
DllUnregisterServer (Ordinal: 746, Address: 0x60520)
DrainThreadPool (Ordinal: 747, Address: 0x6aa70)
GetDirMonConfiguration (Ordinal: 748, Address: 0x21b70)
GetEcb (Ordinal: 749, Address: 0x860c0)
GetEtwValues (Ordinal: 750, Address: 0x1b9e0)
GetExistingVersion (Ordinal: 751, Address: 0x4b780)
GetPrivateBytesIIS6 (Ordinal: 752, Address: 0x332b0)
GetProcessMemoryInformation (Ordinal: 753, Address: 0x33500)
GetW3WPMemoryLimitInKB (Ordinal: 754, Address: 0x35e00)
GrantAccessToUserAccount (Ordinal: 755, Address: 0x4ab50)
GrantAccessToUserAccountOnVista (Ordinal: 756, Address: 0x4a9e0)
HardBreak (Ordinal: 757, Address: 0x217e0)
InitializeWmiManager (Ordinal: 758, Address: 0x6e470)
InstallMOF (Ordinal: 759, Address: 0x571c0)
InstallServices (Ordinal: 760, Address: 0x59aa0)
Is64Installed (Ordinal: 761, Address: 0x49b20)
IsMatchingBitness (Ordinal: 762, Address: 0x42050)
IsRegisteredInProc (Ordinal: 763, Address: 0x42620)
IsWow64 (Ordinal: 764, Address: 0x49af0)
ListAspnetInstalledIISKeys (Ordinal: 765, Address: 0x4a6b0)
ListAspnetInstalledVersions (Ordinal: 766, Address: 0x4a600)
LogWebeventProviderFailure (Ordinal: 767, Address: 0x6d000)
MessageBoxOnThread (Ordinal: 768, Address: 0x21880)
PassportAuthURL (Ordinal: 769, Address: 0x2f1b0)
PassportAuthURL2 (Ordinal: 770, Address: 0x2f230)
PassportCommit (Ordinal: 771, Address: 0x2f2b0)
PassportCreate (Ordinal: 772, Address: 0x2df90)
PassportCreateHttpRaw (Ordinal: 773, Address: 0x2cee0)
PassportDestroy (Ordinal: 774, Address: 0x2d8e0)
PassportDomainFromMemberName (Ordinal: 775, Address: 0x2f380)
PassportGetCurrentConfig (Ordinal: 776, Address: 0x2db10)
PassportGetDomainAttribute (Ordinal: 777, Address: 0x2f4e0)
PassportGetError (Ordinal: 778, Address: 0x2d280)
PassportGetFromNetworkServer (Ordinal: 779, Address: 0x2d2c0)
PassportGetHasSavedPassword (Ordinal: 780, Address: 0x2d4a0)
PassportGetLoginChallenge (Ordinal: 781, Address: 0x2f850)
PassportGetOption (Ordinal: 782, Address: 0x2dc00)
PassportGetProfile (Ordinal: 783, Address: 0x2d750)
PassportGetProfileString (Ordinal: 784, Address: 0x2f6f0)
PassportGetTicketAge (Ordinal: 785, Address: 0x2d860)
PassportGetTimeSinceSignIn (Ordinal: 786, Address: 0x2d8a0)
PassportHasConsent (Ordinal: 787, Address: 0x2d520)
PassportHasFlag (Ordinal: 788, Address: 0x2d3f0)
PassportHasProfile (Ordinal: 789, Address: 0x2d300)
PassportHasTicket (Ordinal: 790, Address: 0x2d4e0)
PassportHexPUID (Ordinal: 791, Address: 0x2fe60)
PassportIsAuthenticated (Ordinal: 792, Address: 0x2d570)
PassportLogoTag (Ordinal: 793, Address: 0x2f0b0)
PassportLogoTag2 (Ordinal: 794, Address: 0x2f130)
PassportLogoutURL (Ordinal: 795, Address: 0x2ff60)
PassportPutProfile (Ordinal: 796, Address: 0x2d7d0)
PassportPutProfileString (Ordinal: 797, Address: 0x2d8f0)
PassportSetOption (Ordinal: 798, Address: 0x2dcd0)
PassportTicket (Ordinal: 799, Address: 0x2da20)
PassportVersion (Ordinal: 800, Address: 0x2cc30)
PostThreadPoolCompletion (Ordinal: 801, Address: 0x6b740)
PrintStringToStdOut (Ordinal: 802, Address: 0x6f5e0)
RaiseEventlogEvent (Ordinal: 803, Address: 0x6cfc0)
RaiseFileMonitoringEventlogEvent (Ordinal: 804, Address: 0x6d050)
RaiseWmiEvent (Ordinal: 805, Address: 0x6e450)
RegisterAspNet (Ordinal: 806, Address: 0x605c0)
RegisterAspNetEx (Ordinal: 807, Address: 0x60650)
RegisterScriptMapsOnVista (Ordinal: 808, Address: 0x4a990)
ReleaseWmiEventManager (Ordinal: 809, Address: 0x6e370)
RemoveAspnetFromIISKey (Ordinal: 810, Address: 0x4a430)
RemoveClientScriptFiles (Ordinal: 811, Address: 0x4a7f0)
ReportUnhandledException (Ordinal: 812, Address: 0x6d030)
RestrictIISFoldersWithPath (Ordinal: 813, Address: 0x416c0)
RunAspnetCA (Ordinal: 814, Address: 0x4d090)
RunPkgmgr (Ordinal: 815, Address: 0x4d3a0)
RunningOn64Bit (Ordinal: 816, Address: 0x40610)
SessionNDCloseConnection (Ordinal: 817, Address: 0x69fe0)
SessionNDConnectToService (Ordinal: 818, Address: 0x69290)
SessionNDFreeBody (Ordinal: 819, Address: 0x6aa60)
SessionNDMakeRequest (Ordinal: 820, Address: 0x6a810)
SetClrThreadPoolLimits (Ordinal: 821, Address: 0x6ac60)
SetDoneWithSessionCalled (Ordinal: 822, Address: 0x287f0)
SetGCLastCalledTime (Ordinal: 823, Address: 0x337e0)
SetMinRequestsExecutingToDetectDeadlock (Ordinal: 824, Address: 0x6acb0)
TraceEnabled (Ordinal: 825, Address: 0x1b900)
TraceRaiseEvent (Ordinal: 826, Address: 0x1c960)
TraceRaiseEventMgdHandler (Ordinal: 827, Address: 0x1cab0)
TraceRaiseEventWithEcb (Ordinal: 828, Address: 0x1ca80)
UnregisterAspNet (Ordinal: 829, Address: 0x60700)
ValidateIISPath (Ordinal: 830, Address: 0x4a4e0)
XspLogEvent (Ordinal: 831, Address: 0x26590)
XspLogEventCateg (Ordinal: 832, Address: 0x265f0)

Imported DLLs & Functions

KERNEL32.dll

AddAtomW (Address: 0x642fff313d8)
CloseHandle (Address: 0x642fff31298)
CompareFileTime (Address: 0x642fff31110)
CompareStringW (Address: 0x642fff31068)
ConnectNamedPipe (Address: 0x642fff31220)
CopyFileW (Address: 0x642fff31140)
CreateDirectoryW (Address: 0x642fff31198)
CreateEventW (Address: 0x642fff31210)
CreateFileW (Address: 0x642fff31350)
CreateIoCompletionPort (Address: 0x642fff310f0)
CreateMutexW (Address: 0x642fff31408)
CreateNamedPipeW (Address: 0x642fff312d0)
CreateProcessW (Address: 0x642fff311f8)
CreateRemoteThread (Address: 0x642fff310e0)
CreateSemaphoreA (Address: 0x642fff31060)
CreateSemaphoreW (Address: 0x642fff31088)
CreateThread (Address: 0x642fff31370)
CreateTimerQueueTimer (Address: 0x642fff31028)
DebugBreak (Address: 0x642fff311c0)
DeleteCriticalSection (Address: 0x642fff31290)
DeleteFileW (Address: 0x642fff31188)
DeleteTimerQueueTimer (Address: 0x642fff31030)
DisableThreadLibraryCalls (Address: 0x642fff31280)
DisconnectNamedPipe (Address: 0x642fff31228)
DuplicateHandle (Address: 0x642fff31398)
EnterCriticalSection (Address: 0x642fff312a8)
ExpandEnvironmentStringsW (Address: 0x642fff31048)
FindAtomW (Address: 0x642fff313e0)
FindClose (Address: 0x642fff31248)
FindFirstFileExW (Address: 0x642fff31230)
FindFirstFileW (Address: 0x642fff31240)
FindNextFileW (Address: 0x642fff31238)
FindResourceW (Address: 0x642fff31168)
FlushFileBuffers (Address: 0x642fff31128)
FormatMessageA (Address: 0x642fff313d0)
FormatMessageW (Address: 0x642fff31338)
FreeLibrary (Address: 0x642fff313e8)
GetComputerNameW (Address: 0x642fff311a8)
GetConsoleMode (Address: 0x642fff310b8)
GetConsoleOutputCP (Address: 0x642fff31270)
GetCurrentProcess (Address: 0x642fff312f0)
GetCurrentProcessId (Address: 0x642fff312f8)
GetCurrentThread (Address: 0x642fff31300)
GetCurrentThreadId (Address: 0x642fff31360)
GetDateFormatA (Address: 0x642fff31130)
GetEnvironmentVariableW (Address: 0x642fff311c8)
GetExitCodeProcess (Address: 0x642fff31208)
GetFileAttributesExW (Address: 0x642fff31340)
GetFileAttributesW (Address: 0x642fff311b0)
GetFileSize (Address: 0x642fff313c8)
GetFileSizeEx (Address: 0x642fff31058)
GetFileType (Address: 0x642fff310b0)
GetLastError (Address: 0x642fff312b8)
GetLocaleInfoW (Address: 0x642fff31278)
GetLongPathNameW (Address: 0x642fff31380)
GetModuleFileNameW (Address: 0x642fff313a0)
GetModuleHandleA (Address: 0x642fff310d8)
GetModuleHandleW (Address: 0x642fff31000)
GetOverlappedResult (Address: 0x642fff312e0)
GetProcAddress (Address: 0x642fff313f0)
GetProcessAffinityMask (Address: 0x642fff31098)
GetProcessHeap (Address: 0x642fff31440)
GetQueuedCompletionStatus (Address: 0x642fff310f8)
GetStdHandle (Address: 0x642fff31260)
GetSystemDefaultLangID (Address: 0x642fff31078)
GetSystemDefaultUILanguage (Address: 0x642fff31250)
GetSystemDirectoryA (Address: 0x642fff31100)
GetSystemDirectoryW (Address: 0x642fff310c8)
GetSystemInfo (Address: 0x642fff311e8)
GetSystemTimeAsFileTime (Address: 0x642fff31388)
GetSystemWindowsDirectoryW (Address: 0x642fff311a0)
GetTempFileNameW (Address: 0x642fff31160)
GetTempPathW (Address: 0x642fff31150)
GetTickCount (Address: 0x642fff31348)
GetTimeFormatA (Address: 0x642fff31138)
GetUserDefaultUILanguage (Address: 0x642fff31268)
GetVersionExW (Address: 0x642fff31218)
GetWindowsDirectoryW (Address: 0x642fff31158)
GlobalAlloc (Address: 0x642fff31428)
GlobalFree (Address: 0x642fff31420)
GlobalMemoryStatus (Address: 0x642fff311b8)
HeapAlloc (Address: 0x642fff31318)
HeapCreate (Address: 0x642fff31310)
HeapFree (Address: 0x642fff31308)
HeapReAlloc (Address: 0x642fff310a8)
HeapSize (Address: 0x642fff310a0)
InitializeCriticalSection (Address: 0x642fff31288)
InitializeCriticalSectionAndSpinCount (Address: 0x642fff31430)
IsDebuggerPresent (Address: 0x642fff31008)
LeaveCriticalSection (Address: 0x642fff312b0)
LoadLibraryA (Address: 0x642fff31108)
LoadLibraryExW (Address: 0x642fff31258)
LoadLibraryW (Address: 0x642fff313f8)
LoadResource (Address: 0x642fff31178)
LocalAlloc (Address: 0x642fff31190)
LocalFree (Address: 0x642fff31390)
LocalReAlloc (Address: 0x642fff31070)
LockResource (Address: 0x642fff31180)
lstrcmpW (Address: 0x642fff31118)
lstrlenA (Address: 0x642fff31328)
lstrlenW (Address: 0x642fff312d8)
MultiByteToWideChar (Address: 0x642fff313c0)
OpenProcess (Address: 0x642fff311e0)
OutputDebugStringA (Address: 0x642fff31090)
OutputDebugStringW (Address: 0x642fff31358)
PostQueuedCompletionStatus (Address: 0x642fff310e8)
QueryPerformanceCounter (Address: 0x642fff31020)
RaiseException (Address: 0x642fff313a8)
ReadDirectoryChangesW (Address: 0x642fff31378)
ReadFile (Address: 0x642fff312c0)
ReadProcessMemory (Address: 0x642fff310d0)
ReleaseMutex (Address: 0x642fff31418)
ReleaseSemaphore (Address: 0x642fff31080)
RemoveDirectoryW (Address: 0x642fff31120)
ResetEvent (Address: 0x642fff311d0)
SetEvent (Address: 0x642fff311d8)
SetLastError (Address: 0x642fff31400)
SetUnhandledExceptionFilter (Address: 0x642fff31010)
SizeofResource (Address: 0x642fff31170)
Sleep (Address: 0x642fff312e8)
SwitchToThread (Address: 0x642fff31320)
TerminateProcess (Address: 0x642fff311f0)
TlsAlloc (Address: 0x642fff31438)
TlsFree (Address: 0x642fff31050)
TlsGetValue (Address: 0x642fff313b8)
TlsSetValue (Address: 0x642fff313b0)
TryEnterCriticalSection (Address: 0x642fff312a0)
UnhandledExceptionFilter (Address: 0x642fff31018)
VirtualAlloc (Address: 0x642fff31040)
VirtualFree (Address: 0x642fff31038)
WaitForMultipleObjects (Address: 0x642fff31200)
WaitForSingleObject (Address: 0x642fff31368)
WaitForSingleObjectEx (Address: 0x642fff31410)
WideCharToMultiByte (Address: 0x642fff31330)
WriteConsoleW (Address: 0x642fff310c0)
WriteFile (Address: 0x642fff312c8)
WritePrivateProfileStringW (Address: 0x642fff31148)

MSVCR80.dll

__C_specific_handler (Address: 0x642fff31468)
__clean_type_info_names_internal (Address: 0x642fff314b0)
__CppXcptFilter (Address: 0x642fff314d8)
__crt_debugger_hook (Address: 0x642fff314a8)
__dllonexit (Address: 0x642fff314c8)
_amsg_exit (Address: 0x642fff314e0)
_atoi64 (Address: 0x642fff31578)
_beginthread (Address: 0x642fff31608)
_CxxThrowException (Address: 0x642fff31538)
_decode_pointer (Address: 0x642fff314e8)
_encode_pointer (Address: 0x642fff31510)
_encoded_null (Address: 0x642fff314f0)
_errno (Address: 0x642fff31520)
_initterm (Address: 0x642fff31500)
_initterm_e (Address: 0x642fff314f8)
_itoa_s (Address: 0x642fff31590)
_itow_s (Address: 0x642fff31460)
_lock (Address: 0x642fff314c0)
_malloc_crt (Address: 0x642fff31508)
_onexit (Address: 0x642fff314b8)
_purecall (Address: 0x642fff31480)
_set_error_mode (Address: 0x642fff31620)
_stricmp (Address: 0x642fff31640)
_strnicmp (Address: 0x642fff31648)
_ultoa_s (Address: 0x642fff315e0)
_unlock (Address: 0x642fff314d0)
_vsnprintf_s (Address: 0x642fff315e8)
_vsnwprintf_s (Address: 0x642fff31668)
_wcsicmp (Address: 0x642fff31478)
_wcslwr (Address: 0x642fff315d8)
_wcsnicmp (Address: 0x642fff315f8)
_wtoi (Address: 0x642fff31488)
_wtol (Address: 0x642fff31548)
?_type_info_dtor_internal_method@type_info@@QEAAXXZ (Address: 0x642fff31498)
?terminate@@YAXXZ (Address: 0x642fff314a0)
atoi (Address: 0x642fff31650)
bsearch (Address: 0x642fff31610)
calloc (Address: 0x642fff315c0)
free (Address: 0x642fff31450)
isdigit (Address: 0x642fff31580)
iswalnum (Address: 0x642fff31630)
iswspace (Address: 0x642fff31628)
iswxdigit (Address: 0x642fff31528)
isxdigit (Address: 0x642fff31530)
memchr (Address: 0x642fff31658)
memcmp (Address: 0x642fff31550)
memcpy (Address: 0x642fff31458)
memmove (Address: 0x642fff31558)
memset (Address: 0x642fff31470)
sprintf_s (Address: 0x642fff315a0)
sscanf (Address: 0x642fff31588)
strcat_s (Address: 0x642fff31598)
strchr (Address: 0x642fff31660)
strcpy_s (Address: 0x642fff315c8)
strncmp (Address: 0x642fff31560)
strncpy_s (Address: 0x642fff315b0)
strrchr (Address: 0x642fff31540)
strstr (Address: 0x642fff315d0)
strtol (Address: 0x642fff31570)
strtoul (Address: 0x642fff315a8)
swscanf (Address: 0x642fff315f0)
towlower (Address: 0x642fff31568)
wcschr (Address: 0x642fff315b8)
wcsncmp (Address: 0x642fff31670)
wcsrchr (Address: 0x642fff31618)
wcsstr (Address: 0x642fff31490)
wcstok (Address: 0x642fff31600)
wcstol (Address: 0x642fff31518)
wcstoul (Address: 0x642fff31638)

ntdll.dll

NtQueryInformationProcess (Address: 0x642fff31700)
NtQueryInformationThread (Address: 0x642fff31738)
NtQuerySystemInformation (Address: 0x642fff31720)
RtlCaptureContext (Address: 0x642fff31730)
RtlCaptureStackBackTrace (Address: 0x642fff31740)
RtlCopyMemory (Address: 0x642fff31728)
RtlLookupFunctionEntry (Address: 0x642fff31718)
RtlVirtualUnwind (Address: 0x642fff31708)
RtlZeroMemory (Address: 0x642fff31710)

PSAPI.DLL

GetModuleFileNameExW (Address: 0x642fff31680)
GetProcessMemoryInfo (Address: 0x642fff31688)

USER32.dll

CharNextA (Address: 0x642fff316c8)
CharNextExA (Address: 0x642fff316a0)
CharPrevW (Address: 0x642fff316d0)
GetUserObjectSecurity (Address: 0x642fff316a8)
LoadStringA (Address: 0x642fff31698)
MessageBoxW (Address: 0x642fff316b8)
PeekMessageW (Address: 0x642fff316c0)
SetUserObjectSecurity (Address: 0x642fff316b0)

USERENV.dll

CreateEnvironmentBlock (Address: 0x642fff316e8)
DestroyEnvironmentBlock (Address: 0x642fff316f0)
LoadUserProfileW (Address: 0x642fff316e0)