webengine4.dll
Description: Microsoft ASP.NET Support DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 4.8.4084.0
Architecture: 64-bit
Operating System: Windows
SHA256: ba4cf0d2c759411093a804ce8ada074f
File Size: 667.0 KB
Uploaded At: Dec. 1, 2025, 8:30 a.m.
Views: 8
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread
Exported Functions
- ??0BUFFER@@QEAA@I@Z (Ordinal: 1, Address: 0x5dcd0)
- ??0BUFFER@@QEAA@PEAEI@Z (Ordinal: 2, Address: 0x5dd10)
- ??0BUFFER_CHAIN@@QEAA@XZ (Ordinal: 3, Address: 0x5dd30)
- ??0BUFFER_CHAIN_ITEM@@QEAA@I@Z (Ordinal: 4, Address: 0x5dd40)
- ??0CCritSec@@QEAA@XZ (Ordinal: 5, Address: 0x5e890)
- ??0CFakeLock@@QEAA@XZ (Ordinal: 6, Address: 0x5e6d0)
- ??0CReaderWriterLock2@@QEAA@AEBV0@@Z (Ordinal: 7, Address: 0x5e8f0)
- ??0CReaderWriterLock2@@QEAA@XZ (Ordinal: 8, Address: 0x5e900)
- ??0CReaderWriterLock3@@QEAA@AEBV0@@Z (Ordinal: 9, Address: 0x5e8c0)
- ??0CReaderWriterLock3@@QEAA@XZ (Ordinal: 10, Address: 0x5e8d0)
- ??0CReaderWriterLock@@QEAA@AEBV0@@Z (Ordinal: 11, Address: 0x5e8c0)
- ??0CReaderWriterLock@@QEAA@XZ (Ordinal: 12, Address: 0x5e8d0)
- ??0CSmallSpinLock@@QEAA@AEBV0@@Z (Ordinal: 13, Address: 0x5e8f0)
- ??0CSmallSpinLock@@QEAA@XZ (Ordinal: 14, Address: 0x5e900)
- ??0CSpinLock@@QEAA@AEBV0@@Z (Ordinal: 15, Address: 0x5e8f0)
- ??0CSpinLock@@QEAA@XZ (Ordinal: 16, Address: 0x5e900)
- ??0STRA@@AEAA@AEBV0@@Z (Ordinal: 17, Address: 0x5ddd0)
- ??0STRA@@AEAA@PEAD@Z (Ordinal: 18, Address: 0x5ddd0)
- ??0STRA@@AEAA@PEBD@Z (Ordinal: 19, Address: 0x5ddd0)
- ??0STRA@@QEAA@PEADK@Z (Ordinal: 20, Address: 0x5dd80)
- ??0STRA@@QEAA@XZ (Ordinal: 21, Address: 0x5dda0)
- ??0STRAU@@QEAA@AEAV0@@Z (Ordinal: 22, Address: 0x60220)
- ??0STRAU@@QEAA@PEBD@Z (Ordinal: 23, Address: 0x602b0)
- ??0STRAU@@QEAA@PEBDH@Z (Ordinal: 24, Address: 0x60310)
- ??0STRAU@@QEAA@PEBG@Z (Ordinal: 25, Address: 0x60380)
- ??0STRAU@@QEAA@XZ (Ordinal: 26, Address: 0x603e0)
- ??0STRU@@AEAA@AEBV0@@Z (Ordinal: 27, Address: 0x5ddd0)
- ??0STRU@@AEAA@PEAG@Z (Ordinal: 28, Address: 0x5ddd0)
- ??0STRU@@AEAA@PEBG@Z (Ordinal: 29, Address: 0x5ddd0)
- ??0STRU@@QEAA@PEAGK@Z (Ordinal: 30, Address: 0x5ddf0)
- ??0STRU@@QEAA@XZ (Ordinal: 31, Address: 0x5de10)
- ??1BUFFER@@QEAA@XZ (Ordinal: 32, Address: 0x5de80)
- ??1BUFFER_CHAIN@@QEAA@XZ (Ordinal: 33, Address: 0x5de40)
- ??1BUFFER_CHAIN_ITEM@@QEAA@XZ (Ordinal: 34, Address: 0x5de50)
- ??1CCritSec@@QEAA@XZ (Ordinal: 35, Address: 0x5e910)
- ??1CFakeLock@@QEAA@XZ (Ordinal: 36, Address: 0x1270)
- ??1CReaderWriterLock2@@QEAA@XZ (Ordinal: 37, Address: 0x1270)
- ??1CReaderWriterLock3@@QEAA@XZ (Ordinal: 38, Address: 0x1270)
- ??1CReaderWriterLock@@QEAA@XZ (Ordinal: 39, Address: 0x1270)
- ??1CSmallSpinLock@@QEAA@XZ (Ordinal: 40, Address: 0x1270)
- ??1CSpinLock@@QEAA@XZ (Ordinal: 41, Address: 0x1270)
- ??1STRA@@QEAA@XZ (Ordinal: 42, Address: 0x5de80)
- ??1STRAU@@QEAA@XZ (Ordinal: 43, Address: 0x60430)
- ??1STRU@@QEAA@XZ (Ordinal: 44, Address: 0x5de80)
- ??2BUFFER_CHAIN_ITEM@@SAPEAX_K@Z (Ordinal: 45, Address: 0x5dea0)
- ??3BUFFER_CHAIN_ITEM@@SAXPEAX@Z (Ordinal: 46, Address: 0x5deb0)
- ??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 47, Address: 0x5e6d0)
- ??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 48, Address: 0x5e6d0)
- ??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 49, Address: 0x5e6d0)
- ??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 50, Address: 0x5e6d0)
- ??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 51, Address: 0x5e6d0)
- ??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@AEBV0@@Z (Ordinal: 52, Address: 0x5e6d0)
- ??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 53, Address: 0x5e6d0)
- ??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@AEBV0@@Z (Ordinal: 54, Address: 0x5e6d0)
- ??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 55, Address: 0x5e6d0)
- ??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 56, Address: 0x5e6d0)
- ??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 57, Address: 0x5e6d0)
- ??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 58, Address: 0x5e6d0)
- ??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 59, Address: 0x5e6d0)
- ??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 60, Address: 0x5e6d0)
- ??4BUFFER@@QEAAAEAV0@AEBV0@@Z (Ordinal: 61, Address: 0x5dec0)
- ??4BUFFER_CHAIN@@QEAAAEAV0@AEBV0@@Z (Ordinal: 62, Address: 0x5dee0)
- ??4BUFFER_CHAIN_ITEM@@QEAAAEAV0@AEBV0@@Z (Ordinal: 63, Address: 0x5def0)
- ??4CCritSec@@QEAAAEAV0@AEBV0@@Z (Ordinal: 64, Address: 0x5e920)
- ??4CFakeLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 65, Address: 0x5e6d0)
- ??4CReaderWriterLock2@@QEAAAEAV0@AEBV0@@Z (Ordinal: 66, Address: 0x5e8f0)
- ??4CReaderWriterLock3@@QEAAAEAV0@AEBV0@@Z (Ordinal: 67, Address: 0x5e8c0)
- ??4CReaderWriterLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 68, Address: 0x5e8c0)
- ??4CSmallSpinLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 69, Address: 0x5e8f0)
- ??4CSpinLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 70, Address: 0x5e8f0)
- ??4STRA@@AEAAAEAV0@AEBV0@@Z (Ordinal: 71, Address: 0x5e6d0)
- ??4STRAU@@QEAAAEAV0@AEBV0@@Z (Ordinal: 72, Address: 0x60460)
- ??4STRU@@AEAAAEAV0@AEBV0@@Z (Ordinal: 73, Address: 0x5e6d0)
- ??_FBUFFER@@QEAAXXZ (Ordinal: 74, Address: 0x5df20)
- ??_FBUFFER_CHAIN_ITEM@@QEAAXXZ (Ordinal: 75, Address: 0x5df40)
- AppDomainRestart (Ordinal: 76, Address: 0x5cb30)
- ?Append@STRA@@QEAAJAEBV1@@Z (Ordinal: 77, Address: 0x5df60)
- ?Append@STRA@@QEAAJPEBD@Z (Ordinal: 78, Address: 0x5df90)
- ?Append@STRA@@QEAAJPEBDK@Z (Ordinal: 79, Address: 0x5dfd0)
- ?Append@STRAU@@QEAAHAEAV1@@Z (Ordinal: 80, Address: 0x604b0)
- ?Append@STRAU@@QEAAHPEBD@Z (Ordinal: 81, Address: 0x60550)
- ?Append@STRAU@@QEAAHPEBDK@Z (Ordinal: 82, Address: 0x60580)
- ?Append@STRAU@@QEAAHPEBG@Z (Ordinal: 83, Address: 0x605a0)
- ?Append@STRAU@@QEAAHPEBGK@Z (Ordinal: 84, Address: 0x605d0)
- ?Append@STRU@@QEAAJAEBV1@@Z (Ordinal: 85, Address: 0x5e000)
- ?Append@STRU@@QEAAJG@Z (Ordinal: 86, Address: 0x5e040)
- ?Append@STRU@@QEAAJPEBG@Z (Ordinal: 87, Address: 0x5e070)
- ?Append@STRU@@QEAAJPEBGK@Z (Ordinal: 88, Address: 0x5e0b0)
- ?AppendA@STRU@@QEAAJPEBD@Z (Ordinal: 89, Address: 0x5e0e0)
- ?AppendA@STRU@@QEAAJPEBDK@Z (Ordinal: 90, Address: 0x5e110)
- ?AppendBuffer@BUFFER_CHAIN@@QEAAHPEAVBUFFER_CHAIN_ITEM@@@Z (Ordinal: 91, Address: 0x61110)
- ?AppendW@STRA@@QEAAJPEBG@Z (Ordinal: 92, Address: 0x5e130)
- ?AppendW@STRA@@QEAAJPEBGK@Z (Ordinal: 93, Address: 0x5e160)
- ?AppendWTruncate@STRA@@QEAAJPEBG@Z (Ordinal: 94, Address: 0x5e180)
- ?AppendWTruncate@STRA@@QEAAJPEBGK@Z (Ordinal: 95, Address: 0x5e1b0)
- AspCompatIsApartmentComponent (Ordinal: 96, Address: 0x133a0)
- AspCompatOnPageEnd (Ordinal: 97, Address: 0x13490)
- AspCompatOnPageStart (Ordinal: 98, Address: 0x134e0)
- AspCompatProcessRequest (Ordinal: 99, Address: 0x13590)
- AspnetLoadResourceDLL (Ordinal: 100, Address: 0x27ed0)
- AttachDebugger (Ordinal: 101, Address: 0x1dae0)
- ?AuxAppend@STRA@@AEAAJPEBEKKH@Z (Ordinal: 102, Address: 0x612a0)
- ?AuxAppend@STRAU@@AEAAHPEBDIH@Z (Ordinal: 103, Address: 0x605f0)
- ?AuxAppend@STRAU@@AEAAHPEBGIH@Z (Ordinal: 104, Address: 0x60780)
- ?AuxAppend@STRU@@AEAAJPEBEKKH@Z (Ordinal: 105, Address: 0x5650)
- ?AuxAppendA@STRU@@AEAAJPEBEKKH@Z (Ordinal: 106, Address: 0x62220)
- ?AuxAppendW@STRA@@AEAAJPEBGKKH@Z (Ordinal: 107, Address: 0x15b0)
- ?AuxAppendWTruncate@STRA@@AEAAJPEBGKKH@Z (Ordinal: 108, Address: 0x61370)
- ?AuxInit@STRAU@@AEAAXPEBD@Z (Ordinal: 109, Address: 0x608b0)
- ?AuxInit@STRAU@@AEAAXPEBG@Z (Ordinal: 110, Address: 0x60950)
- BufferPoolGetBuffer (Ordinal: 111, Address: 0x1e010)
- BufferPoolGetPool (Ordinal: 112, Address: 0x1e020)
- BufferPoolReleaseBuffer (Ordinal: 113, Address: 0x1e030)
- ?CalcTotalSize@BUFFER_CHAIN@@QEBAKH@Z (Ordinal: 114, Address: 0x61130)
- CallCryptUnProtectData (Ordinal: 115, Address: 0x54540)
- CallManagedProtectedConfigAction (Ordinal: 116, Address: 0x473e0)
- ChangeAccessToKeyContainer (Ordinal: 117, Address: 0x54770)
- CheckIISState (Ordinal: 118, Address: 0x35b00)
- ?ClassName@CCritSec@@SAPEBGXZ (Ordinal: 119, Address: 0x5e940)
- ?ClassName@CFakeLock@@SAPEBGXZ (Ordinal: 120, Address: 0x5e950)
- ?ClassName@CReaderWriterLock2@@SAPEBGXZ (Ordinal: 121, Address: 0x5e960)
- ?ClassName@CReaderWriterLock3@@SAPEBGXZ (Ordinal: 122, Address: 0x5e970)
- ?ClassName@CReaderWriterLock@@SAPEBGXZ (Ordinal: 123, Address: 0x5e980)
- ?ClassName@CSmallSpinLock@@SAPEBGXZ (Ordinal: 124, Address: 0x5e990)
- ?ClassName@CSpinLock@@SAPEBGXZ (Ordinal: 125, Address: 0x5e9a0)
- ?Clone@STRA@@QEBAJPEAV1@@Z (Ordinal: 126, Address: 0x5e1d0)
- ?ConvertExclusiveToShared@CCritSec@@QEAAXXZ (Ordinal: 127, Address: 0x1270)
- ?ConvertExclusiveToShared@CFakeLock@@QEAAXXZ (Ordinal: 128, Address: 0x1270)
- ?ConvertExclusiveToShared@CReaderWriterLock2@@QEAAXXZ (Ordinal: 129, Address: 0x5e9b0)
- ?ConvertExclusiveToShared@CReaderWriterLock3@@QEAAXXZ (Ordinal: 130, Address: 0x5ea00)
- ?ConvertExclusiveToShared@CReaderWriterLock@@QEAAXXZ (Ordinal: 131, Address: 0x5ea50)
- ?ConvertExclusiveToShared@CSmallSpinLock@@QEAAXXZ (Ordinal: 132, Address: 0x1270)
- ?ConvertExclusiveToShared@CSpinLock@@QEAAXXZ (Ordinal: 133, Address: 0x1270)
- ?ConvertSharedToExclusive@CCritSec@@QEAAXXZ (Ordinal: 134, Address: 0x1270)
- ?ConvertSharedToExclusive@CFakeLock@@QEAAXXZ (Ordinal: 135, Address: 0x1270)
- ?ConvertSharedToExclusive@CReaderWriterLock2@@QEAAXXZ (Ordinal: 136, Address: 0x5ea60)
- ?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ (Ordinal: 137, Address: 0x5eac0)
- ?ConvertSharedToExclusive@CReaderWriterLock@@QEAAXXZ (Ordinal: 138, Address: 0x5eb30)
- ?ConvertSharedToExclusive@CSmallSpinLock@@QEAAXXZ (Ordinal: 139, Address: 0x1270)
- ?ConvertSharedToExclusive@CSpinLock@@QEAAXXZ (Ordinal: 140, Address: 0x1270)
- CookieAuthConstructTicket (Ordinal: 141, Address: 0x54c00)
- CookieAuthParseTicket (Ordinal: 142, Address: 0x54d30)
- ?Copy@STRA@@QEAAJAEBV1@@Z (Ordinal: 143, Address: 0x5e210)
- ?Copy@STRA@@QEAAJPEBD@Z (Ordinal: 144, Address: 0x5e240)
- ?Copy@STRA@@QEAAJPEBDK@Z (Ordinal: 145, Address: 0x5e280)
- ?Copy@STRAU@@QEAAHAEAV1@@Z (Ordinal: 146, Address: 0x60a90)
- ?Copy@STRAU@@QEAAHPEBD@Z (Ordinal: 147, Address: 0x60b50)
- ?Copy@STRAU@@QEAAHPEBDK@Z (Ordinal: 148, Address: 0x60b90)
- ?Copy@STRAU@@QEAAHPEBG@Z (Ordinal: 149, Address: 0x60bd0)
- ?Copy@STRAU@@QEAAHPEBGK@Z (Ordinal: 150, Address: 0x60c20)
- ?Copy@STRU@@QEAAJAEBV1@@Z (Ordinal: 151, Address: 0x5e320)
- ?Copy@STRU@@QEAAJPEBG@Z (Ordinal: 152, Address: 0x5e2b0)
- ?Copy@STRU@@QEAAJPEBGK@Z (Ordinal: 153, Address: 0x5e2f0)
- ?Copy@STRU@@QEAAJPEBV1@@Z (Ordinal: 154, Address: 0x5e320)
- ?CopyA@STRU@@QEAAJPEBD@Z (Ordinal: 155, Address: 0x5e350)
- ?CopyA@STRU@@QEAAJPEBDK@Z (Ordinal: 156, Address: 0x5e380)
- ?CopyBinary@STRA@@QEAAJPEAXK@Z (Ordinal: 157, Address: 0x61450)
- ?CopyToBuffer@STRA@@QEBAJPEADPEAK@Z (Ordinal: 158, Address: 0x61690)
- ?CopyToBuffer@STRU@@QEBAJPEAGPEAK@Z (Ordinal: 159, Address: 0x623a0)
- ?CopyW@STRA@@QEAAJPEBG@Z (Ordinal: 160, Address: 0x5e3a0)
- ?CopyW@STRA@@QEAAJPEBGK@Z (Ordinal: 161, Address: 0x5e3e0)
- ?CopyWToUTF8Escaped@STRA@@QEAAJAEBVSTRU@@@Z (Ordinal: 162, Address: 0x616f0)
- ?CopyWToUTF8Escaped@STRA@@QEAAJPEBG@Z (Ordinal: 163, Address: 0x5e410)
- ?CopyWToUTF8Escaped@STRA@@QEAAJPEBGK@Z (Ordinal: 164, Address: 0x61700)
- ?CopyWToUTF8Unescaped@STRA@@QEAAJAEBVSTRU@@@Z (Ordinal: 165, Address: 0x61740)
- ?CopyWToUTF8Unescaped@STRA@@QEAAJPEBG@Z (Ordinal: 166, Address: 0x5e430)
- ?CopyWToUTF8Unescaped@STRA@@QEAAJPEBGK@Z (Ordinal: 167, Address: 0x61750)
- ?CopyWTruncate@STRA@@QEAAJPEBG@Z (Ordinal: 168, Address: 0x5e450)
- ?CopyWTruncate@STRA@@QEAAJPEBGK@Z (Ordinal: 169, Address: 0x5e480)
- CreateUserToken (Ordinal: 170, Address: 0x54f80)
- ?DeleteChain@BUFFER_CHAIN@@QEAAKXZ (Ordinal: 171, Address: 0x61160)
- DirMonClose (Ordinal: 172, Address: 0x20d00)
- DirMonOpen (Ordinal: 173, Address: 0x47d0)
- DisplayManagementSettings (Ordinal: 174, Address: 0x485b0)
- DisposeAppDomainsIndirect (Ordinal: 175, Address: 0x254a0)
- DoesKeyContainerExist (Ordinal: 176, Address: 0x553b0)
- EcbAppendLogParameter (Ordinal: 177, Address: 0x20ff0)
- EcbCallISAPI (Ordinal: 178, Address: 0x78b0)
- EcbCloseConnection (Ordinal: 179, Address: 0x21050)
- EcbDoneWithSession (Ordinal: 180, Address: 0x210b0)
- EcbEmitSimpleTrace (Ordinal: 181, Address: 0x21140)
- EcbEmitWebEventTrace (Ordinal: 182, Address: 0x21390)
- EcbExecuteUrlUnicode (Ordinal: 183, Address: 0x21670)
- EcbFlushCore (Ordinal: 184, Address: 0x21870)
- EcbFreeExecUrlEntityInfo (Ordinal: 185, Address: 0x21b40)
- EcbGetAdditionalPostedContent (Ordinal: 186, Address: 0x21b60)
- EcbGetBasics (Ordinal: 187, Address: 0x21be0)
- EcbGetBasicsContentInfo (Ordinal: 188, Address: 0x21f30)
- EcbGetChannelBindingToken (Ordinal: 189, Address: 0x21fd0)
- EcbGetClientCertificate (Ordinal: 190, Address: 0x22070)
- EcbGetExecUrlEntityInfo (Ordinal: 191, Address: 0x222e0)
- EcbGetImpersonationToken (Ordinal: 192, Address: 0x22420)
- EcbGetPreloadedPostedContent (Ordinal: 193, Address: 0x224d0)
- EcbGetQueryString (Ordinal: 194, Address: 0x22520)
- EcbGetQueryStringRawBytes (Ordinal: 195, Address: 0x225e0)
- EcbGetServerVariable (Ordinal: 196, Address: 0x22630)
- EcbGetServerVariableByIndex (Ordinal: 197, Address: 0x226e0)
- EcbGetTraceContextId (Ordinal: 198, Address: 0x22700)
- EcbGetTraceFlags (Ordinal: 199, Address: 0x22750)
- EcbGetUnicodeServerVariable (Ordinal: 200, Address: 0x227b0)
- EcbGetUnicodeServerVariableByIndex (Ordinal: 201, Address: 0x22850)
- EcbGetUnicodeServerVariables (Ordinal: 202, Address: 0x22870)
- EcbGetVersion (Ordinal: 203, Address: 0x22ae0)
- EcbGetVirtualPathToken (Ordinal: 204, Address: 0x22af0)
- EcbIsClientConnected (Ordinal: 205, Address: 0x22b00)
- EcbMapUrlToPath (Ordinal: 206, Address: 0x22b80)
- EcbMapUrlToPathUnicode (Ordinal: 207, Address: 0x22ca0)
- EcbReadClientAsync (Ordinal: 208, Address: 0x22de0)
- EcbWriteBytes (Ordinal: 209, Address: 0x23080)
- EcbWriteBytesAsync (Ordinal: 210, Address: 0x230f0)
- EcbWriteHeaders (Ordinal: 211, Address: 0x232c0)
- EndPrefetchActivity (Ordinal: 212, Address: 0x2bb60)
- ?Equals@STRA@@QEBAHAEBV1@@Z (Ordinal: 213, Address: 0x5e4b0)
- ?Equals@STRA@@QEBAHPEBD@Z (Ordinal: 214, Address: 0x5e4f0)
- ?Equals@STRU@@QEBAHAEBV1@@Z (Ordinal: 215, Address: 0x5e530)
- ?Equals@STRU@@QEBAHPEBG@Z (Ordinal: 216, Address: 0x5e570)
- ?EqualsNoCase@STRA@@QEBAHAEBV1@@Z (Ordinal: 217, Address: 0x5e5b0)
- ?EqualsNoCase@STRA@@QEBAHPEBD@Z (Ordinal: 218, Address: 0x5e5e0)
- ?EqualsNoCase@STRU@@QEBAHAEBV1@@Z (Ordinal: 219, Address: 0x5e620)
- ?EqualsNoCase@STRU@@QEBAHPEBG@Z (Ordinal: 220, Address: 0x5e660)
- ?Escape@STRA@@QEAAJHH@Z (Ordinal: 221, Address: 0x617b0)
- ?Escape@STRU@@QEAAJXZ (Ordinal: 222, Address: 0x62410)
- EtwTraceAspNetRegister (Ordinal: 223, Address: 0x1c140)
- EtwTraceAspNetUnregister (Ordinal: 224, Address: 0x1c180)
- ?FormatString@STRA@@QEAAJKQEAPEBDPEBDK@Z (Ordinal: 225, Address: 0x61ac0)
- FreeFileSecurityDescriptor (Ordinal: 226, Address: 0x55510)
- ?FreeMemory@BUFFER@@QEAAXXZ (Ordinal: 227, Address: 0x611d0)
- GetAppDomainIndirect (Ordinal: 228, Address: 0x25650)
- GetConfigurationFromNativeCode (Ordinal: 229, Address: 0x24150)
- GetCredentialFromRegistry (Ordinal: 230, Address: 0x55530)
- GetCurrentToken (Ordinal: 231, Address: 0x55980)
- ?GetDefaultSpinAdjustmentFactor@CCritSec@@SANXZ (Ordinal: 232, Address: 0x5eb60)
- ?GetDefaultSpinAdjustmentFactor@CFakeLock@@SANXZ (Ordinal: 233, Address: 0x5eb70)
- ?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SANXZ (Ordinal: 234, Address: 0x5eb80)
- ?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SANXZ (Ordinal: 235, Address: 0x5eb90)
- ?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SANXZ (Ordinal: 236, Address: 0x5eba0)
- ?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SANXZ (Ordinal: 237, Address: 0x5ebb0)
- ?GetDefaultSpinAdjustmentFactor@CSpinLock@@SANXZ (Ordinal: 238, Address: 0x5ebc0)
- ?GetDefaultSpinCount@CCritSec@@SAGXZ (Ordinal: 239, Address: 0x5ebd0)
- ?GetDefaultSpinCount@CFakeLock@@SAGXZ (Ordinal: 240, Address: 0x5ebe0)
- ?GetDefaultSpinCount@CReaderWriterLock2@@SAGXZ (Ordinal: 241, Address: 0x5ebf0)
- ?GetDefaultSpinCount@CReaderWriterLock3@@SAGXZ (Ordinal: 242, Address: 0x5ec00)
- ?GetDefaultSpinCount@CReaderWriterLock@@SAGXZ (Ordinal: 243, Address: 0x5ec10)
- ?GetDefaultSpinCount@CSmallSpinLock@@SAGXZ (Ordinal: 244, Address: 0x5ec20)
- ?GetDefaultSpinCount@CSpinLock@@SAGXZ (Ordinal: 245, Address: 0x5ec30)
- GetFileHandleForTransmitFile (Ordinal: 246, Address: 0x237d0)
- GetFileSecurityDescriptor (Ordinal: 247, Address: 0x559e0)
- GetFileVersionString (Ordinal: 248, Address: 0x5d960)
- GetGlobalConfigFullPathW (Ordinal: 249, Address: 0x28000)
- GetGroupsForUser (Ordinal: 250, Address: 0x55ae0)
- GetHMACSHA1Hash (Ordinal: 251, Address: 0x5d3e0)
- GetIsapiProcessHost (Ordinal: 252, Address: 0x84e0)
- ?GetNewStorage@BUFFER@@AEAAHI@Z (Ordinal: 253, Address: 0x61210)
- GetRCInstance (Ordinal: 254, Address: 0x27ec0)
- GetSHA1Hash (Ordinal: 255, Address: 0x5d690)
- ?GetSpinCount@CCritSec@@QEBAGXZ (Ordinal: 256, Address: 0x5ebd0)
- ?GetSpinCount@CFakeLock@@QEBAGXZ (Ordinal: 257, Address: 0x4690)
- ?GetSpinCount@CReaderWriterLock2@@QEBAGXZ (Ordinal: 258, Address: 0x5ebf0)
- ?GetSpinCount@CReaderWriterLock3@@QEBAGXZ (Ordinal: 259, Address: 0x5ec00)
- ?GetSpinCount@CReaderWriterLock@@QEBAGXZ (Ordinal: 260, Address: 0x5ec10)
- ?GetSpinCount@CSmallSpinLock@@QEBAGXZ (Ordinal: 261, Address: 0x5ec20)
- ?GetSpinCount@CSpinLock@@QEBAGXZ (Ordinal: 262, Address: 0x5ec30)
- GetUserNameFromToken (Ordinal: 263, Address: 0x56550)
- GetXSPHeap (Ordinal: 264, Address: 0xd450)
- GetXSPInstance (Ordinal: 265, Address: 0x9060)
- GrowFileNotificationBuffer (Ordinal: 266, Address: 0x20d60)
- ?HTMLEncode@STRA@@QEAAJXZ (Ordinal: 267, Address: 0x61b80)
- ?HTMLEncode@STRU@@QEAAJXZ (Ordinal: 268, Address: 0x626e0)
- IIS7IsAspNetV4Installed (Ordinal: 269, Address: 0x419e0)
- InitializeHealthMonitor (Ordinal: 270, Address: 0x5b50)
- InitializeLibrary (Ordinal: 271, Address: 0x77a0)
- InitializeManagedCode (Ordinal: 272, Address: 0x25660)
- InstrumentedMutexCreate (Ordinal: 273, Address: 0x6d60)
- InstrumentedMutexDelete (Ordinal: 274, Address: 0x51b0)
- InstrumentedMutexGetLock (Ordinal: 275, Address: 0x5140)
- InstrumentedMutexReleaseLock (Ordinal: 276, Address: 0x50e0)
- InstrumentedMutexSetState (Ordinal: 277, Address: 0x26310)
- InvalidateKernelCache (Ordinal: 278, Address: 0x23910)
- IsAccessToFileAllowed (Ordinal: 279, Address: 0x56710)
- IsConfigFileName (Ordinal: 280, Address: 0x24b10)
- ?IsCurrentUnicode@STRAU@@QEAAHXZ (Ordinal: 281, Address: 0x60c60)
- ?IsDynAlloced@BUFFER@@AEBAHXZ (Ordinal: 282, Address: 0x5e6a0)
- ?IsEmpty@STRA@@QEBAHXZ (Ordinal: 283, Address: 0x5e6b0)
- ?IsEmpty@STRAU@@QEAAHXZ (Ordinal: 284, Address: 0x60c70)
- ?IsEmpty@STRU@@QEBAHXZ (Ordinal: 285, Address: 0x5e6b0)
- IsManagedDebuggerConnectedIndirect (Ordinal: 286, Address: 0x25670)
- ?IsReadLocked@CCritSec@@QEBA_NXZ (Ordinal: 287, Address: 0x1000)
- ?IsReadLocked@CFakeLock@@QEBA_NXZ (Ordinal: 288, Address: 0x1000)
- ?IsReadLocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 289, Address: 0x5ec40)
- ?IsReadLocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 290, Address: 0x5ec40)
- ?IsReadLocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 291, Address: 0x5ec50)
- ?IsReadLocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 292, Address: 0x5ec60)
- ?IsReadLocked@CSpinLock@@QEBA_NXZ (Ordinal: 293, Address: 0x5ed20)
- ?IsReadUnlocked@CCritSec@@QEBA_NXZ (Ordinal: 294, Address: 0x1000)
- ?IsReadUnlocked@CFakeLock@@QEBA_NXZ (Ordinal: 295, Address: 0x1000)
- ?IsReadUnlocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 296, Address: 0x5ec80)
- ?IsReadUnlocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 297, Address: 0x5ec80)
- ?IsReadUnlocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 298, Address: 0x5ec90)
- ?IsReadUnlocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 299, Address: 0x5eda0)
- ?IsReadUnlocked@CSpinLock@@QEBA_NXZ (Ordinal: 300, Address: 0x5eca0)
- IsUserInRole (Ordinal: 301, Address: 0x567c0)
- ?IsValid@BUFFER@@QEBAHXZ (Ordinal: 302, Address: 0x5e6c0)
- ?IsValid@STRA@@QEBAHXZ (Ordinal: 303, Address: 0x5e6c0)
- ?IsValid@STRAU@@QEAAHXZ (Ordinal: 304, Address: 0x60ca0)
- IsValidResource (Ordinal: 305, Address: 0x239c0)
- IsVista (Ordinal: 306, Address: 0xce70)
- IsWin8 (Ordinal: 307, Address: 0x2b910)
- ?IsWriteLocked@CCritSec@@QEBA_NXZ (Ordinal: 308, Address: 0x1000)
- ?IsWriteLocked@CFakeLock@@QEBA_NXZ (Ordinal: 309, Address: 0x1000)
- ?IsWriteLocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 310, Address: 0x5ecd0)
- ?IsWriteLocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 311, Address: 0x5ece0)
- ?IsWriteLocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 312, Address: 0x5ed10)
- ?IsWriteLocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 313, Address: 0x5ec60)
- ?IsWriteLocked@CSpinLock@@QEBA_NXZ (Ordinal: 314, Address: 0x5ed20)
- ?IsWriteUnlocked@CCritSec@@QEBA_NXZ (Ordinal: 315, Address: 0x1000)
- ?IsWriteUnlocked@CFakeLock@@QEBA_NXZ (Ordinal: 316, Address: 0x1000)
- ?IsWriteUnlocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 317, Address: 0x5ed50)
- ?IsWriteUnlocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 318, Address: 0x5ed60)
- ?IsWriteUnlocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 319, Address: 0x5ed90)
- ?IsWriteUnlocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 320, Address: 0x5eda0)
- ?IsWriteUnlocked@CSpinLock@@QEBA_NXZ (Ordinal: 321, Address: 0x5eca0)
- IsapiAppHostGetAppPath (Ordinal: 322, Address: 0x27290)
- IsapiAppHostGetNextVirtualSubdir (Ordinal: 323, Address: 0x27380)
- IsapiAppHostGetSiteId (Ordinal: 324, Address: 0x274b0)
- IsapiAppHostGetSiteName (Ordinal: 325, Address: 0x275b0)
- IsapiAppHostGetUncUser (Ordinal: 326, Address: 0x276a0)
- IsapiAppHostIsAppRoot (Ordinal: 327, Address: 0x27800)
- IsapiAppHostMapPath (Ordinal: 328, Address: 0x278b0)
- LoadLibraryUsingFullPath (Ordinal: 329, Address: 0x59a10)
- LoadManagedRuntime (Ordinal: 330, Address: 0xaf90)
- LoadManagedRuntimeEx (Ordinal: 331, Address: 0x25cc0)
- LoadResourceString (Ordinal: 332, Address: 0x5d9e0)
- ?LoadStringW@STRA@@QEAAJKPEAUHINSTANCE__@@@Z (Ordinal: 333, Address: 0x61d90)
- ?LoadStringW@STRA@@QEAAJKPEBDK@Z (Ordinal: 334, Address: 0x61e20)
- ?LockType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 335, Address: 0x5f6c0)
- ?LockType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 336, Address: 0x5ee00)
- ?LockType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 337, Address: 0x5edb0)
- ?LockType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 338, Address: 0x5edc0)
- ?LockType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 339, Address: 0x5edd0)
- ?LockType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 340, Address: 0x5ede0)
- ?LockType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 341, Address: 0x5edf0)
- MgdAbortConnection (Ordinal: 342, Address: 0x633d0)
- MgdAcceptWebSocket (Ordinal: 343, Address: 0x633f0)
- MgdAllocateRequestMemory (Ordinal: 344, Address: 0x63420)
- MgdAppDomainShutdown (Ordinal: 345, Address: 0x63480)
- MgdCanDisposeManagedContext (Ordinal: 346, Address: 0x2660)
- MgdClearResponse (Ordinal: 347, Address: 0x21c0)
- MgdCloseConnection (Ordinal: 348, Address: 0x634a0)
- MgdConfigureAsyncDisconnectNotification (Ordinal: 349, Address: 0x634c0)
- MgdCreateNativeConfigSystem (Ordinal: 350, Address: 0x636b0)
- MgdDisableKernelCache (Ordinal: 351, Address: 0x636e0)
- MgdDisableNotifications (Ordinal: 352, Address: 0x63740)
- MgdDisableUserCache (Ordinal: 353, Address: 0x637a0)
- MgdEmitSimpleTrace (Ordinal: 354, Address: 0x63820)
- MgdEmitWebEventTrace (Ordinal: 355, Address: 0x63850)
- MgdEtwGetTraceConfig (Ordinal: 356, Address: 0x63890)
- MgdExecuteUrl (Ordinal: 357, Address: 0x638c0)
- MgdExplicitFlush (Ordinal: 358, Address: 0x63960)
- MgdFlushCore (Ordinal: 359, Address: 0x2450)
- MgdFlushKernelCache (Ordinal: 360, Address: 0x63980)
- MgdGetAnonymousUserToken (Ordinal: 361, Address: 0x639e0)
- MgdGetAppCollection (Ordinal: 362, Address: 0x63aa0)
- MgdGetAppPathForPath (Ordinal: 363, Address: 0x8110)
- MgdGetApplicationInfo (Ordinal: 364, Address: 0x2f40)
- MgdGetBuffer (Ordinal: 365, Address: 0x2a70)
- MgdGetBufferPool (Ordinal: 366, Address: 0x4d10)
- MgdGetChannelBindingToken (Ordinal: 367, Address: 0x63d10)
- MgdGetClientCertificate (Ordinal: 368, Address: 0x63de0)
- MgdGetConfigProperty (Ordinal: 369, Address: 0x640d0)
- MgdGetCookieHeader (Ordinal: 370, Address: 0x3cb0)
- MgdGetCorrelationIdHeader (Ordinal: 371, Address: 0x64240)
- MgdGetCurrentModuleName (Ordinal: 372, Address: 0x64360)
- MgdGetCurrentNotification (Ordinal: 373, Address: 0x643d0)
- MgdGetCurrentNotificationInfo (Ordinal: 374, Address: 0x1730)
- MgdGetFileChunkInfo (Ordinal: 375, Address: 0x643f0)
- MgdGetHandlerTypeString (Ordinal: 376, Address: 0x64510)
- MgdGetHeaderChanges (Ordinal: 377, Address: 0x2e00)
- MgdGetIISVersionInformation (Ordinal: 378, Address: 0x50c0)
- MgdGetIsChildContext (Ordinal: 379, Address: 0x645c0)
- MgdGetLocalPort (Ordinal: 380, Address: 0x646a0)
- MgdGetMaxConcurrentRequestsPerCPU (Ordinal: 381, Address: 0x64730)
- MgdGetMaxConcurrentThreadsPerCPU (Ordinal: 382, Address: 0x64740)
- MgdGetMemoryLimitKB (Ordinal: 383, Address: 0x7610)
- MgdGetMimeMapCollection (Ordinal: 384, Address: 0x64750)
- MgdGetModuleCollection (Ordinal: 385, Address: 0x5f90)
- MgdGetNextMimeMap (Ordinal: 386, Address: 0x64880)
- MgdGetNextModule (Ordinal: 387, Address: 0x60d0)
- MgdGetNextNotification (Ordinal: 388, Address: 0x26f0)
- MgdGetNextVPath (Ordinal: 389, Address: 0x64bc0)
- MgdGetPreloadedContent (Ordinal: 390, Address: 0x651b0)
- MgdGetPreloadedSize (Ordinal: 391, Address: 0x2dc0)
- MgdGetPrincipal (Ordinal: 392, Address: 0x65240)
- MgdGetRemotePort (Ordinal: 393, Address: 0x653d0)
- MgdGetRequestBasics (Ordinal: 394, Address: 0x3070)
- MgdGetRequestTraceGuid (Ordinal: 395, Address: 0x65460)
- MgdGetResponseChunks (Ordinal: 396, Address: 0x2ac0)
- MgdGetServerVarChanges (Ordinal: 397, Address: 0x654e0)
- MgdGetServerVariableA (Ordinal: 398, Address: 0x65570)
- MgdGetServerVariableW (Ordinal: 399, Address: 0x1460)
- MgdGetSiteNameFromId (Ordinal: 400, Address: 0x7630)
- MgdGetStatusChanges (Ordinal: 401, Address: 0x656d0)
- MgdGetStopListeningEventHandle (Ordinal: 402, Address: 0x54a0)
- MgdGetTlsTokenBindingIdentifiers (Ordinal: 403, Address: 0x657b0)
- MgdGetUriPath (Ordinal: 404, Address: 0x36d0)
- MgdGetUserAgent (Ordinal: 405, Address: 0x3dc0)
- MgdGetUserToken (Ordinal: 406, Address: 0x65920)
- MgdGetVirtualToken (Ordinal: 407, Address: 0x65a30)
- MgdGetVrPathCreds (Ordinal: 408, Address: 0x65ae0)
- MgdGetWebSocketContext (Ordinal: 409, Address: 0x65b90)
- MgdIndicateCompletion (Ordinal: 410, Address: 0x65c60)
- MgdInitNativeConfig (Ordinal: 411, Address: 0x65cd0)
- MgdInsertEntityBody (Ordinal: 412, Address: 0x65ef0)
- MgdIsAppPoolShuttingDown (Ordinal: 413, Address: 0x65f10)
- MgdIsClientConnected (Ordinal: 414, Address: 0x65f20)
- MgdIsHandlerExecutionDenied (Ordinal: 415, Address: 0x65f80)
- MgdIsInRole (Ordinal: 416, Address: 0x65fb0)
- MgdIsLastNotification (Ordinal: 417, Address: 0x2290)
- MgdIsWithinApp (Ordinal: 418, Address: 0x66070)
- MgdMapHandler (Ordinal: 419, Address: 0x66370)
- MgdMapPathDirect (Ordinal: 420, Address: 0x4420)
- MgdPostCompletion (Ordinal: 421, Address: 0x66670)
- MgdPushPromise (Ordinal: 422, Address: 0x666e0)
- MgdRaiseTraceEvent (Ordinal: 423, Address: 0x66700)
- MgdReMapHandler (Ordinal: 424, Address: 0x667b0)
- MgdReadChunkHandle (Ordinal: 425, Address: 0x66950)
- MgdReadEntityBody (Ordinal: 426, Address: 0x3e70)
- MgdRegisterEventPriority (Ordinal: 427, Address: 0x66b60)
- MgdRegisterEventSubscription (Ordinal: 428, Address: 0x5940)
- MgdReleaseNativeConfigSystem (Ordinal: 429, Address: 0x66b90)
- MgdResolveSiteName (Ordinal: 430, Address: 0x66ba0)
- MgdResumeRuntime (Ordinal: 431, Address: 0x66c10)
- MgdReturnBuffer (Ordinal: 432, Address: 0x27e0)
- MgdRewriteUrl (Ordinal: 433, Address: 0x66c40)
- MgdSetBadRequestStatus (Ordinal: 434, Address: 0x66d00)
- MgdSetKernelCachePolicy (Ordinal: 435, Address: 0x66d30)
- MgdSetKnownHeader (Ordinal: 436, Address: 0x2020)
- MgdSetManagedHttpContext (Ordinal: 437, Address: 0x3280)
- MgdSetMaxConcurrentRequestsPerCPU (Ordinal: 438, Address: 0x66e30)
- MgdSetMaxConcurrentThreadsPerCPU (Ordinal: 439, Address: 0x66e40)
- MgdSetNativeConfiguration (Ordinal: 440, Address: 0x7590)
- MgdSetRemapHandler (Ordinal: 441, Address: 0x66e50)
- MgdSetRequestPrincipal (Ordinal: 442, Address: 0x66e70)
- MgdSetResponseFilter (Ordinal: 443, Address: 0x66ea0)
- MgdSetScriptMapForRemapHandler (Ordinal: 444, Address: 0x66ec0)
- MgdSetServerVariableW (Ordinal: 445, Address: 0x66ee0)
- MgdSetStatusW (Ordinal: 446, Address: 0x2840)
- MgdSetUnknownHeader (Ordinal: 447, Address: 0x2100)
- MgdSuppressSendResponseNotifications (Ordinal: 448, Address: 0x67020)
- MgdSuspendRuntime (Ordinal: 449, Address: 0x67040)
- MgdTerminateNativeConfig (Ordinal: 450, Address: 0x67050)
- MgdWebSocketCloseTcpConnection (Ordinal: 451, Address: 0x67060)
- MgdWebSocketGetCloseStatus (Ordinal: 452, Address: 0x670a0)
- MgdWebSocketReadFragment (Ordinal: 453, Address: 0x67110)
- MgdWebSocketSendConnectionClose (Ordinal: 454, Address: 0x671d0)
- MgdWebSocketWriteFragment (Ordinal: 455, Address: 0x67260)
- MonitorGlobalConfigFile (Ordinal: 456, Address: 0x24b60)
- ?MutexType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 457, Address: 0x5f6c0)
- ?MutexType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 458, Address: 0x5f6c0)
- ?MutexType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 459, Address: 0x5f6c0)
- ?MutexType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 460, Address: 0x5f6c0)
- ?MutexType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 461, Address: 0x5ee00)
- ?MutexType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 462, Address: 0x5ee00)
- ?MutexType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 463, Address: 0x5ee00)
- ?NextBuffer@BUFFER_CHAIN@@QEAAPEAVBUFFER_CHAIN_ITEM@@PEAV2@@Z (Ordinal: 464, Address: 0x61280)
- PassportCrypt (Ordinal: 465, Address: 0x28230)
- PassportCryptIsValid (Ordinal: 466, Address: 0x283c0)
- PassportCryptPut (Ordinal: 467, Address: 0x28420)
- ?PerLockSpin@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 468, Address: 0x5ee00)
- ?PerLockSpin@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 469, Address: 0x5ee00)
- ?PerLockSpin@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 470, Address: 0x5f6c0)
- ?PerLockSpin@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 471, Address: 0x5edb0)
- ?PerLockSpin@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 472, Address: 0x5ee00)
- ?PerLockSpin@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 473, Address: 0x5ee00)
- ?PerLockSpin@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 474, Address: 0x5ee00)
- PerfCloseAppCounters (Ordinal: 475, Address: 0x2b1f0)
- PerfCounterInitialize (Ordinal: 476, Address: 0xb320)
- PerfDecrementCounter (Ordinal: 477, Address: 0x1210)
- PerfDecrementGlobalCounter (Ordinal: 478, Address: 0x1710)
- PerfGetCounter (Ordinal: 479, Address: 0x2b210)
- PerfIncrementCounter (Ordinal: 480, Address: 0x1230)
- PerfIncrementCounterEx (Ordinal: 481, Address: 0x1220)
- PerfIncrementGlobalCounter (Ordinal: 482, Address: 0x1b60)
- PerfOpenAppCounters (Ordinal: 483, Address: 0x8040)
- PerfOpenGlobalCounters (Ordinal: 484, Address: 0x8010)
- PerfOpenStateCounters (Ordinal: 485, Address: 0x2b240)
- PerfSetCounter (Ordinal: 486, Address: 0x1260)
- PerfSetGlobalCounter (Ordinal: 487, Address: 0x2b280)
- PostThreadPoolWorkItem (Ordinal: 488, Address: 0x58690)
- PrintResourceString (Ordinal: 489, Address: 0x5da80)
- PrintResourceStringNoNewLine (Ordinal: 490, Address: 0x5daf0)
- ?PrivateQueryStr@STRAU@@AEAAPEAGH@Z (Ordinal: 491, Address: 0x60cb0)
- ?QueryBuffer@STRU@@QEAAPEAVBUFFER@@XZ (Ordinal: 492, Address: 0x5e6d0)
- ?QueryCB@STRA@@QEBAIXZ (Ordinal: 493, Address: 0x5e6e0)
- ?QueryCB@STRAU@@QEAAIH@Z (Ordinal: 494, Address: 0x60d40)
- ?QueryCB@STRU@@QEBAIXZ (Ordinal: 495, Address: 0x5e6f0)
- ?QueryCBA@STRAU@@QEAAIXZ (Ordinal: 496, Address: 0x60d90)
- ?QueryCBW@STRAU@@QEAAIXZ (Ordinal: 497, Address: 0x60dc0)
- ?QueryCCH@STRA@@QEBAIXZ (Ordinal: 498, Address: 0x5e6e0)
- ?QueryCCH@STRAU@@QEAAIXZ (Ordinal: 499, Address: 0x60df0)
- ?QueryCCH@STRU@@QEBAIXZ (Ordinal: 500, Address: 0x5e6e0)
- ?QueryPtr@BUFFER@@QEBAPEAXXZ (Ordinal: 501, Address: 0x5e720)
- ?QuerySize@BUFFER@@QEBAIXZ (Ordinal: 502, Address: 0x5e700)
- ?QuerySize@STRA@@QEBAIXZ (Ordinal: 503, Address: 0x5e700)
- ?QuerySizeCCH@STRA@@QEBAIXZ (Ordinal: 504, Address: 0x5e700)
- ?QuerySizeCCH@STRU@@QEBAIXZ (Ordinal: 505, Address: 0x5e710)
- ?QueryStr@STRA@@QEAAPEADXZ (Ordinal: 506, Address: 0x5e720)
- ?QueryStr@STRA@@QEBAPEBDXZ (Ordinal: 507, Address: 0x5e720)
- ?QueryStr@STRAU@@QEAAPEAGH@Z (Ordinal: 508, Address: 0x60e20)
- ?QueryStr@STRU@@QEAAPEAGXZ (Ordinal: 509, Address: 0x5e720)
- ?QueryStr@STRU@@QEBAPEBGXZ (Ordinal: 510, Address: 0x5e720)
- ?QueryStrA@STRAU@@QEAAPEADXZ (Ordinal: 511, Address: 0x60e40)
- ?QueryStrW@STRAU@@QEAAPEAGXZ (Ordinal: 512, Address: 0x60e50)
- ?QueryUsed@BUFFER_CHAIN_ITEM@@QEBAKXZ (Ordinal: 513, Address: 0x5e730)
- ?QueueType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 514, Address: 0x5edb0)
- ?QueueType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 515, Address: 0x5edb0)
- ?QueueType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 516, Address: 0x5f6c0)
- ?QueueType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 517, Address: 0x5edb0)
- ?QueueType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 518, Address: 0x5edb0)
- ?QueueType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 519, Address: 0x5edb0)
- ?QueueType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 520, Address: 0x5edb0)
- ?ReadLock@CCritSec@@QEAAXXZ (Ordinal: 521, Address: 0x5f6d0)
- ?ReadLock@CFakeLock@@QEAAXXZ (Ordinal: 522, Address: 0x1270)
- ?ReadLock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 523, Address: 0x5ee40)
- ?ReadLock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 524, Address: 0x5ee70)
- ?ReadLock@CReaderWriterLock@@QEAAXXZ (Ordinal: 525, Address: 0x5eea0)
- ?ReadLock@CSmallSpinLock@@QEAAXXZ (Ordinal: 526, Address: 0x5eed0)
- ?ReadLock@CSpinLock@@QEAAXXZ (Ordinal: 527, Address: 0x4df0)
- ?ReadOrWriteLock@CCritSec@@QEAA_NXZ (Ordinal: 528, Address: 0x5ef10)
- ?ReadOrWriteLock@CFakeLock@@QEAA_NXZ (Ordinal: 529, Address: 0x1000)
- ?ReadOrWriteLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 530, Address: 0x5ef30)
- ?ReadOrWriteLock@CSpinLock@@QEAA_NXZ (Ordinal: 531, Address: 0x5ef90)
- ?ReadOrWriteUnlock@CCritSec@@QEAAX_N@Z (Ordinal: 532, Address: 0x5f030)
- ?ReadOrWriteUnlock@CFakeLock@@QEAAX_N@Z (Ordinal: 533, Address: 0x1270)
- ?ReadOrWriteUnlock@CReaderWriterLock3@@QEAAX_N@Z (Ordinal: 534, Address: 0x5efa0)
- ?ReadOrWriteUnlock@CSpinLock@@QEAAX_N@Z (Ordinal: 535, Address: 0x60170)
- ?ReadUnlock@CCritSec@@QEAAXXZ (Ordinal: 536, Address: 0x5f030)
- ?ReadUnlock@CFakeLock@@QEAAXXZ (Ordinal: 537, Address: 0x1270)
- ?ReadUnlock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 538, Address: 0x5f040)
- ?ReadUnlock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 539, Address: 0x5f040)
- ?ReadUnlock@CReaderWriterLock@@QEAAXXZ (Ordinal: 540, Address: 0x4580)
- ?ReadUnlock@CSmallSpinLock@@QEAAXXZ (Ordinal: 541, Address: 0x5f870)
- ?ReadUnlock@CSpinLock@@QEAAXXZ (Ordinal: 542, Address: 0x60170)
- ?ReallocStorage@BUFFER@@AEAAHI@Z (Ordinal: 543, Address: 0x58d0)
- ?Recursion@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 544, Address: 0x5edb0)
- ?Recursion@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 545, Address: 0x5f6c0)
- ?Recursion@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 546, Address: 0x5f6c0)
- ?Recursion@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 547, Address: 0x5f6c0)
- ?Recursion@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 548, Address: 0x5ee00)
- ?Recursion@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 549, Address: 0x5ee00)
- ?Recursion@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 550, Address: 0x5f6c0)
- RegisterAspNetMMC (Ordinal: 551, Address: 0x4be10)
- RegisterModule (Ordinal: 552, Address: 0xd460)
- RegisterScriptMapsEx (Ordinal: 553, Address: 0x38230)
- ?Reset@STRA@@QEAAXXZ (Ordinal: 554, Address: 0x5e740)
- ?Reset@STRAU@@QEAAXXZ (Ordinal: 555, Address: 0x60e60)
- ?Reset@STRU@@QEAAXXZ (Ordinal: 556, Address: 0x5e750)
- ?Resize@BUFFER@@QEAAHI@Z (Ordinal: 557, Address: 0x5e760)
- ?Resize@BUFFER@@QEAAHII@Z (Ordinal: 558, Address: 0x5e770)
- ?Resize@STRA@@QEAAJK@Z (Ordinal: 559, Address: 0x5e7b0)
- ?Resize@STRU@@QEAAJK@Z (Ordinal: 560, Address: 0x5e7b0)
- ?ResizeW@STRAU@@QEAAHK@Z (Ordinal: 561, Address: 0x60e80)
- RolesCreateTicket (Ordinal: 562, Address: 0x56a90)
- RolesParseTicket (Ordinal: 563, Address: 0x56c00)
- ?SAFE_snwprintf@@YAJPEAVSTRU@@PEBGZZ (Ordinal: 564, Address: 0x62940)
- ?SafeCopy@STRAU@@QEAAHPEBD@Z (Ordinal: 565, Address: 0x60ea0)
- ?SafeCopy@STRAU@@QEAAHPEBG@Z (Ordinal: 566, Address: 0x60f60)
- ?SetDefaultSpinAdjustmentFactor@CCritSec@@SAXN@Z (Ordinal: 567, Address: 0x5f080)
- ?SetDefaultSpinAdjustmentFactor@CFakeLock@@SAXN@Z (Ordinal: 568, Address: 0x5f0b0)
- ?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SAXN@Z (Ordinal: 569, Address: 0x5f0e0)
- ?SetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SAXN@Z (Ordinal: 570, Address: 0x5f110)
- ?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SAXN@Z (Ordinal: 571, Address: 0x5f140)
- ?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SAXN@Z (Ordinal: 572, Address: 0x5f170)
- ?SetDefaultSpinAdjustmentFactor@CSpinLock@@SAXN@Z (Ordinal: 573, Address: 0x5f1a0)
- ?SetDefaultSpinCount@CCritSec@@SAXG@Z (Ordinal: 574, Address: 0x5f1d0)
- ?SetDefaultSpinCount@CFakeLock@@SAXG@Z (Ordinal: 575, Address: 0x5f210)
- ?SetDefaultSpinCount@CReaderWriterLock2@@SAXG@Z (Ordinal: 576, Address: 0x5f250)
- ?SetDefaultSpinCount@CReaderWriterLock3@@SAXG@Z (Ordinal: 577, Address: 0x5f290)
- ?SetDefaultSpinCount@CReaderWriterLock@@SAXG@Z (Ordinal: 578, Address: 0x5f2d0)
- ?SetDefaultSpinCount@CSmallSpinLock@@SAXG@Z (Ordinal: 579, Address: 0x5f310)
- ?SetDefaultSpinCount@CSpinLock@@SAXG@Z (Ordinal: 580, Address: 0x5f350)
- ?SetLen@STRA@@QEAAHK@Z (Ordinal: 581, Address: 0x5e7e0)
- ?SetLen@STRAU@@QEAAHK@Z (Ordinal: 582, Address: 0x61020)
- ?SetLen@STRU@@QEAAHK@Z (Ordinal: 583, Address: 0x5e800)
- SetRemoteConfigDCOMRegKeys (Ordinal: 584, Address: 0x4d420)
- ?SetSpinCount@CCritSec@@QEAA_NG@Z (Ordinal: 585, Address: 0x5f390)
- ?SetSpinCount@CCritSec@@SAKPEAU_RTL_CRITICAL_SECTION@@K@Z (Ordinal: 586, Address: 0x5f3b0)
- ?SetSpinCount@CFakeLock@@QEAA_NG@Z (Ordinal: 587, Address: 0x5f3f0)
- ?SetSpinCount@CReaderWriterLock2@@QEAA_NG@Z (Ordinal: 588, Address: 0x5f3f0)
- ?SetSpinCount@CReaderWriterLock3@@QEAA_NG@Z (Ordinal: 589, Address: 0x5f3f0)
- ?SetSpinCount@CReaderWriterLock@@QEAA_NG@Z (Ordinal: 590, Address: 0x5f3f0)
- ?SetSpinCount@CSmallSpinLock@@QEAA_NG@Z (Ordinal: 591, Address: 0x5f3f0)
- ?SetSpinCount@CSpinLock@@QEAA_NG@Z (Ordinal: 592, Address: 0x5f3f0)
- ?SetUsed@BUFFER_CHAIN_ITEM@@QEAAXK@Z (Ordinal: 593, Address: 0x5e830)
- ?SetValid@BUFFER@@QEAAXH@Z (Ordinal: 594, Address: 0x5e840)
- StartPrefetchActivity (Ordinal: 595, Address: 0x2bc10)
- ?SyncWithBuffer@STRA@@QEAAXXZ (Ordinal: 596, Address: 0x5e850)
- ?SyncWithBuffer@STRU@@QEAAXXZ (Ordinal: 597, Address: 0x5e870)
- TransactManagedCallback (Ordinal: 598, Address: 0x591b0)
- ?TryConvertSharedToExclusive@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 599, Address: 0x5f430)
- ?TryReadLock@CCritSec@@QEAA_NXZ (Ordinal: 600, Address: 0x5f470)
- ?TryReadLock@CFakeLock@@QEAA_NXZ (Ordinal: 601, Address: 0x1000)
- ?TryReadLock@CReaderWriterLock2@@QEAA_NXZ (Ordinal: 602, Address: 0x5f480)
- ?TryReadLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 603, Address: 0x5f480)
- ?TryReadLock@CReaderWriterLock@@QEAA_NXZ (Ordinal: 604, Address: 0x5f4b0)
- ?TryReadLock@CSmallSpinLock@@QEAA_NXZ (Ordinal: 605, Address: 0x5f4e0)
- ?TryReadLock@CSpinLock@@QEAA_NXZ (Ordinal: 606, Address: 0x5f680)
- ?TryReadOrWriteLock@CReaderWriterLock3@@QEAA_NAEA_N@Z (Ordinal: 607, Address: 0x5f510)
- ?TryWriteLock@CCritSec@@QEAA_NXZ (Ordinal: 608, Address: 0x5f570)
- ?TryWriteLock@CFakeLock@@QEAA_NXZ (Ordinal: 609, Address: 0x1000)
- ?TryWriteLock@CReaderWriterLock2@@QEAA_NXZ (Ordinal: 610, Address: 0x5f5b0)
- ?TryWriteLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 611, Address: 0x5f5e0)
- ?TryWriteLock@CReaderWriterLock@@QEAA_NXZ (Ordinal: 612, Address: 0x5f650)
- ?TryWriteLock@CSmallSpinLock@@QEAA_NXZ (Ordinal: 613, Address: 0x5f4e0)
- ?TryWriteLock@CSpinLock@@QEAA_NXZ (Ordinal: 614, Address: 0x5f680)
- UnInitializeManagedCode (Ordinal: 615, Address: 0x25bb0)
- ?Unescape@STRA@@QEAAJXZ (Ordinal: 616, Address: 0x61f10)
- ?Unescape@STRU@@QEAAJXZ (Ordinal: 617, Address: 0x62a80)
- UpdateLastActivityTimeForHealthMonitor (Ordinal: 618, Address: 0x24d60)
- ?VerifyState@BUFFER@@AEBAXXZ (Ordinal: 619, Address: 0x1270)
- ?WaitType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 620, Address: 0x5f6c0)
- ?WaitType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 621, Address: 0x5f6c0)
- ?WaitType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 622, Address: 0x5f6c0)
- ?WaitType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 623, Address: 0x5ee00)
- ?WaitType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 624, Address: 0x5f6c0)
- ?WaitType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 625, Address: 0x5f6c0)
- ?WaitType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 626, Address: 0x5f6c0)
- ?WriteLock@CCritSec@@QEAAXXZ (Ordinal: 627, Address: 0x5f6d0)
- ?WriteLock@CFakeLock@@QEAAXXZ (Ordinal: 628, Address: 0x1270)
- ?WriteLock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 629, Address: 0x5f6e0)
- ?WriteLock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 630, Address: 0x5f710)
- ?WriteLock@CReaderWriterLock@@QEAAXXZ (Ordinal: 631, Address: 0x5f790)
- ?WriteLock@CSmallSpinLock@@QEAAXXZ (Ordinal: 632, Address: 0x5eed0)
- ?WriteLock@CSpinLock@@QEAAXXZ (Ordinal: 633, Address: 0x4df0)
- ?WriteUnlock@CCritSec@@QEAAXXZ (Ordinal: 634, Address: 0x5f030)
- ?WriteUnlock@CFakeLock@@QEAAXXZ (Ordinal: 635, Address: 0x1270)
- ?WriteUnlock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 636, Address: 0x5f7c0)
- ?WriteUnlock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 637, Address: 0x5f800)
- ?WriteUnlock@CReaderWriterLock@@QEAAXXZ (Ordinal: 638, Address: 0x5f860)
- ?WriteUnlock@CSmallSpinLock@@QEAAXXZ (Ordinal: 639, Address: 0x5f870)
- ?WriteUnlock@CSpinLock@@QEAAXXZ (Ordinal: 640, Address: 0x60170)
- ?_CmpExch@CReaderWriterLock2@@AEAA_NJJ@Z (Ordinal: 641, Address: 0x5f880)
- ?_CmpExch@CReaderWriterLock3@@AEAA_NJJ@Z (Ordinal: 642, Address: 0x5f880)
- ?_CmpExch@CReaderWriterLock@@AEAA_NJJ@Z (Ordinal: 643, Address: 0x5f880)
- ?_CurrentThreadId@CReaderWriterLock3@@CAJXZ (Ordinal: 644, Address: 0x5f890)
- ?_CurrentThreadId@CSmallSpinLock@@CAJXZ (Ordinal: 645, Address: 0x5f8b0)
- ?_CurrentThreadId@CSpinLock@@CAJXZ (Ordinal: 646, Address: 0x5f890)
- ?_IsLocked@CSpinLock@@AEBA_NXZ (Ordinal: 647, Address: 0x5ed20)
- ?_Lock@CSpinLock@@AEAAXXZ (Ordinal: 648, Address: 0x5f8c0)
- ?_LockSpin@CReaderWriterLock2@@AEAAX_N@Z (Ordinal: 649, Address: 0x5f900)
- ?_LockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z (Ordinal: 650, Address: 0x5fa20)
- ?_LockSpin@CReaderWriterLock@@AEAAX_N@Z (Ordinal: 651, Address: 0x5fba0)
- ?_LockSpin@CSmallSpinLock@@AEAAXXZ (Ordinal: 652, Address: 0x5fcc0)
- ?_LockSpin@CSpinLock@@AEAAXXZ (Ordinal: 653, Address: 0x5fde0)
- ?_ReadLockSpin@CReaderWriterLock2@@AEAAXXZ (Ordinal: 654, Address: 0x5ff20)
- ?_ReadLockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z (Ordinal: 655, Address: 0x5ff30)
- ?_ReadLockSpin@CReaderWriterLock@@AEAAXXZ (Ordinal: 656, Address: 0x5ff40)
- ?_TryLock@CSmallSpinLock@@AEAA_NXZ (Ordinal: 657, Address: 0x5ff50)
- ?_TryLock@CSpinLock@@AEAA_NXZ (Ordinal: 658, Address: 0x5ff90)
- ?_TryReadLock@CReaderWriterLock2@@AEAA_NXZ (Ordinal: 659, Address: 0x5ffd0)
- ?_TryReadLock@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 660, Address: 0x5f480)
- ?_TryReadLock@CReaderWriterLock@@AEAA_NXZ (Ordinal: 661, Address: 0x60000)
- ?_TryReadLockRecursive@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 662, Address: 0x60030)
- ?_TryWriteLock2@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 663, Address: 0x60060)
- ?_TryWriteLock@CReaderWriterLock2@@AEAA_NJ@Z (Ordinal: 664, Address: 0x600a0)
- ?_TryWriteLock@CReaderWriterLock3@@AEAA_NJ@Z (Ordinal: 665, Address: 0x600d0)
- ?_TryWriteLock@CReaderWriterLock@@AEAA_NXZ (Ordinal: 666, Address: 0x60150)
- ?_Unlock@CSpinLock@@AEAAXXZ (Ordinal: 667, Address: 0x60170)
- ?_WriteLockSpin@CReaderWriterLock2@@AEAAXXZ (Ordinal: 668, Address: 0x60190)
- ?_WriteLockSpin@CReaderWriterLock3@@AEAAXXZ (Ordinal: 669, Address: 0x601d0)
- ?_WriteLockSpin@CReaderWriterLock@@AEAAXXZ (Ordinal: 670, Address: 0x60210)
- ?sm_dblDfltSpinAdjFctr@CCritSec@@1NA (Ordinal: 671, Address: 0x92020)
- ?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA (Ordinal: 672, Address: 0x92018)
- ?sm_dblDfltSpinAdjFctr@CReaderWriterLock2@@1NA (Ordinal: 673, Address: 0x92038)
- ?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA (Ordinal: 674, Address: 0x92048)
- ?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA (Ordinal: 675, Address: 0x92030)
- ?sm_dblDfltSpinAdjFctr@CSmallSpinLock@@1NA (Ordinal: 676, Address: 0x92050)
- ?sm_dblDfltSpinAdjFctr@CSpinLock@@1NA (Ordinal: 677, Address: 0x92008)
- ?sm_wDefaultSpinCount@CCritSec@@1GA (Ordinal: 678, Address: 0x92014)
- ?sm_wDefaultSpinCount@CFakeLock@@1GA (Ordinal: 679, Address: 0x92010)
- ?sm_wDefaultSpinCount@CReaderWriterLock2@@1GA (Ordinal: 680, Address: 0x9202c)
- ?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA (Ordinal: 681, Address: 0x92040)
- ?sm_wDefaultSpinCount@CReaderWriterLock@@1GA (Ordinal: 682, Address: 0x92028)
- ?sm_wDefaultSpinCount@CSmallSpinLock@@1GA (Ordinal: 683, Address: 0x92044)
- ?sm_wDefaultSpinCount@CSpinLock@@1GA (Ordinal: 684, Address: 0x92000)
- AspNetGetExtensionVersion (Ordinal: 685, Address: 0x25d80)
- AspNetHttpExtensionProc (Ordinal: 686, Address: 0x25ef0)
- AspNetTerminateExtension (Ordinal: 687, Address: 0x26230)
- AttachHandleToThreadPool (Ordinal: 688, Address: 0x4630)
- ClrQueueUserWorkItem (Ordinal: 689, Address: 0x1b80)
- CopyClientScriptFiles (Ordinal: 690, Address: 0x4fb30)
- DBGNDAssert (Ordinal: 691, Address: 0x4690)
- DBGNDIsTagEnabled (Ordinal: 692, Address: 0x4690)
- DBGNDIsTagPresent (Ordinal: 693, Address: 0x4690)
- DBGNDLaunchCordbg (Ordinal: 694, Address: 0x1270)
- DBGNDMessageBoxOnThread (Ordinal: 695, Address: 0x4690)
- DBGNDTrace (Ordinal: 696, Address: 0x4690)
- DbgpAssert (Ordinal: 697, Address: 0x4690)
- DbgpDisableAssertThread (Ordinal: 698, Address: 0x20a60)
- DbgpIsTagEnabled (Ordinal: 699, Address: 0x4690)
- DbgpIsTagPresent (Ordinal: 700, Address: 0x4690)
- DbgpTrace (Ordinal: 701, Address: 0x20a80)
- DbgpTraceError (Ordinal: 702, Address: 0x4690)
- DbgpTraceV (Ordinal: 703, Address: 0x4690)
- DetectErrorAndGetLogfileName (Ordinal: 704, Address: 0x4fb70)
- DllRegisterServer (Ordinal: 705, Address: 0x4fb90)
- DllUnregisterServer (Ordinal: 706, Address: 0x4fbe0)
- DrainThreadPool (Ordinal: 707, Address: 0x58b60)
- GetDirMonConfiguration (Ordinal: 708, Address: 0x76c0)
- GetEcb (Ordinal: 709, Address: 0x25bc0)
- GetEtwValues (Ordinal: 710, Address: 0x1cd50)
- GetExistingVersion (Ordinal: 711, Address: 0x4fc20)
- GetPrivateBytesIIS6 (Ordinal: 712, Address: 0x1380)
- GetProcessMemoryInformation (Ordinal: 713, Address: 0x2eb10)
- GetW3WPMemoryLimitInKB (Ordinal: 714, Address: 0x2ed40)
- GrantAccessToUserAccount (Ordinal: 715, Address: 0x4fc30)
- GrantAccessToUserAccountOnVista (Ordinal: 716, Address: 0x4fca0)
- HardBreak (Ordinal: 717, Address: 0x209e0)
- InitializeWmiManager (Ordinal: 718, Address: 0x5af60)
- InstallAspNetMMCComComponents (Ordinal: 719, Address: 0x4fd30)
- InstallAspNetMOF (Ordinal: 720, Address: 0x4fee0)
- InstallServices (Ordinal: 721, Address: 0x4ff10)
- Is64Installed (Ordinal: 722, Address: 0x505f0)
- IsMatchingBitness (Ordinal: 723, Address: 0x39e50)
- IsRegisteredInProc (Ordinal: 724, Address: 0x39eb0)
- IsWow64 (Ordinal: 725, Address: 0x50620)
- ListAspnetInstalledIISKeys (Ordinal: 726, Address: 0x50650)
- ListAspnetInstalledVersions (Ordinal: 727, Address: 0x50690)
- LogWebeventProviderFailure (Ordinal: 728, Address: 0x59f00)
- MessageBoxOnThread (Ordinal: 729, Address: 0x20a90)
- PassportAuthURL (Ordinal: 730, Address: 0x28e40)
- PassportAuthURL2 (Ordinal: 731, Address: 0x28ed0)
- PassportCommit (Ordinal: 732, Address: 0x28f60)
- PassportCreate (Ordinal: 733, Address: 0x29040)
- PassportCreateHttpRaw (Ordinal: 734, Address: 0x295a0)
- PassportDestroy (Ordinal: 735, Address: 0x29820)
- PassportDomainFromMemberName (Ordinal: 736, Address: 0x29830)
- PassportGetCurrentConfig (Ordinal: 737, Address: 0x29960)
- PassportGetDomainAttribute (Ordinal: 738, Address: 0x29a40)
- PassportGetError (Ordinal: 739, Address: 0x29bf0)
- PassportGetFromNetworkServer (Ordinal: 740, Address: 0x29c40)
- PassportGetHasSavedPassword (Ordinal: 741, Address: 0x29ca0)
- PassportGetLoginChallenge (Ordinal: 742, Address: 0x29d10)
- PassportGetOption (Ordinal: 743, Address: 0x2a140)
- PassportGetProfile (Ordinal: 744, Address: 0x2a210)
- PassportGetProfileString (Ordinal: 745, Address: 0x2a290)
- PassportGetTicketAge (Ordinal: 746, Address: 0x2a3f0)
- PassportGetTimeSinceSignIn (Ordinal: 747, Address: 0x2a440)
- PassportHasConsent (Ordinal: 748, Address: 0x2a490)
- PassportHasFlag (Ordinal: 749, Address: 0x2a510)
- PassportHasProfile (Ordinal: 750, Address: 0x2a5a0)
- PassportHasTicket (Ordinal: 751, Address: 0x2a650)
- PassportHexPUID (Ordinal: 752, Address: 0x2a6c0)
- PassportIsAuthenticated (Ordinal: 753, Address: 0x2a7c0)
- PassportLogoTag (Ordinal: 754, Address: 0x2a900)
- PassportLogoTag2 (Ordinal: 755, Address: 0x2a990)
- PassportLogoutURL (Ordinal: 756, Address: 0x2aa20)
- PassportPutProfile (Ordinal: 757, Address: 0x2acf0)
- PassportPutProfileString (Ordinal: 758, Address: 0x2ad70)
- PassportSetOption (Ordinal: 759, Address: 0x2ade0)
- PassportTicket (Ordinal: 760, Address: 0x2aec0)
- PassportVersion (Ordinal: 761, Address: 0x2afa0)
- PostThreadPoolCompletion (Ordinal: 762, Address: 0x58c30)
- PrintStringToStdOut (Ordinal: 763, Address: 0x5db00)
- RaiseEventlogEvent (Ordinal: 764, Address: 0x4e60)
- RaiseFileMonitoringEventlogEvent (Ordinal: 765, Address: 0x59f40)
- RaiseWmiEvent (Ordinal: 766, Address: 0x5af70)
- RegisterAspNet (Ordinal: 767, Address: 0x506d0)
- RegisterAspNetEx (Ordinal: 768, Address: 0x50710)
- RegisterScriptMapsOnVista (Ordinal: 769, Address: 0x50750)
- ReleaseWmiEventManager (Ordinal: 770, Address: 0x5af90)
- RemoveAspnetFromIISKey (Ordinal: 771, Address: 0x50790)
- RemoveClientScriptFiles (Ordinal: 772, Address: 0x507d0)
- ReportUnhandledException (Ordinal: 773, Address: 0x5a170)
- RestrictIISFoldersWithPath (Ordinal: 774, Address: 0x3a010)
- RunAspnetCA (Ordinal: 775, Address: 0x50870)
- RunPkgmgr (Ordinal: 776, Address: 0x50970)
- RunningOn64Bit (Ordinal: 777, Address: 0x3a090)
- SessionNDCloseConnection (Ordinal: 778, Address: 0x581d0)
- SessionNDConnectToService (Ordinal: 779, Address: 0x581f0)
- SessionNDFreeBody (Ordinal: 780, Address: 0x9ef0)
- SessionNDMakeRequest (Ordinal: 781, Address: 0x58290)
- SetClrThreadPoolLimits (Ordinal: 782, Address: 0x77f0)
- SetDoneWithSessionCalled (Ordinal: 783, Address: 0x25bd0)
- SetMinRequestsExecutingToDetectDeadlock (Ordinal: 784, Address: 0x5ba0)
- TraceEnabled (Ordinal: 785, Address: 0x1cd70)
- TraceRaiseEvent (Ordinal: 786, Address: 0x1ce10)
- TraceRaiseEventMgdHandler (Ordinal: 787, Address: 0x1ce60)
- TraceRaiseEventWithEcb (Ordinal: 788, Address: 0x1ce70)
- UninstallAspNetLP (Ordinal: 789, Address: 0x50a30)
- UnregisterAspNet (Ordinal: 790, Address: 0x50a70)
- ValidateIISPath (Ordinal: 791, Address: 0x50ac0)
- XspLogEvent (Ordinal: 792, Address: 0x23fd0)
- XspLogEventCateg (Ordinal: 793, Address: 0x24010)
Imported DLLs & Functions
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x18006e398)
- AcquireSRWLockShared (Address: 0x18006e390)
- AddAtomW (Address: 0x18006e150)
- CloseHandle (Address: 0x18006e010)
- CompareFileTime (Address: 0x18006e340)
- CompareStringW (Address: 0x18006e3f8)
- ConnectNamedPipe (Address: 0x18006e228)
- CopyFileW (Address: 0x18006e2d0)
- CreateDirectoryW (Address: 0x18006e2a0)
- CreateEventW (Address: 0x18006e258)
- CreateFileW (Address: 0x18006e0b8)
- CreateIoCompletionPort (Address: 0x18006e348)
- CreateMutexW (Address: 0x18006e190)
- CreateNamedPipeW (Address: 0x18006e020)
- CreateProcessW (Address: 0x18006e270)
- CreateRemoteThread (Address: 0x18006e360)
- CreateThread (Address: 0x18006e0e8)
- CreateTimerQueueTimer (Address: 0x18006e3d8)
- DebugBreak (Address: 0x18006e290)
- DeleteCriticalSection (Address: 0x18006e050)
- DeleteFileW (Address: 0x18006e2d8)
- DeleteTimerQueueTimer (Address: 0x18006e3d0)
- DisableThreadLibraryCalls (Address: 0x18006e1c0)
- DisconnectNamedPipe (Address: 0x18006e230)
- DuplicateHandle (Address: 0x18006e110)
- EnterCriticalSection (Address: 0x18006e038)
- ExpandEnvironmentStringsW (Address: 0x18006e1d0)
- FindAtomW (Address: 0x18006e158)
- FindClose (Address: 0x18006e1d8)
- FindFirstFileExW (Address: 0x18006e218)
- FindFirstFileW (Address: 0x18006e1e0)
- FindNextFileW (Address: 0x18006e220)
- FindResourceW (Address: 0x18006e310)
- FlushFileBuffers (Address: 0x18006e320)
- FormatMessageA (Address: 0x18006e148)
- FormatMessageW (Address: 0x18006e0a0)
- FreeLibrary (Address: 0x18006e168)
- GetComputerNameW (Address: 0x18006e2b8)
- GetConsoleMode (Address: 0x18006e418)
- GetConsoleOutputCP (Address: 0x18006e210)
- GetCurrentProcess (Address: 0x18006e068)
- GetCurrentProcessId (Address: 0x18006e070)
- GetCurrentThread (Address: 0x18006e078)
- GetCurrentThreadId (Address: 0x18006e0d8)
- GetDateFormatA (Address: 0x18006e328)
- GetEnvironmentVariableW (Address: 0x18006e240)
- GetExitCodeProcess (Address: 0x18006e268)
- GetFileAttributesExW (Address: 0x18006e0c0)
- GetFileAttributesW (Address: 0x18006e2a8)
- GetFileSize (Address: 0x18006e138)
- GetFileSizeEx (Address: 0x18006e3f0)
- GetFileType (Address: 0x18006e420)
- GetLastError (Address: 0x18006e018)
- GetLocaleInfoW (Address: 0x18006e1f8)
- GetLongPathNameW (Address: 0x18006e0f0)
- GetModuleFileNameW (Address: 0x18006e118)
- GetModuleHandleA (Address: 0x18006e370)
- GetModuleHandleW (Address: 0x18006e120)
- GetOverlappedResult (Address: 0x18006e028)
- GetProcAddress (Address: 0x18006e170)
- GetProcessAffinityMask (Address: 0x18006e428)
- GetProcessHeap (Address: 0x18006e1a8)
- GetQueuedCompletionStatus (Address: 0x18006e350)
- GetStdHandle (Address: 0x18006e1c8)
- GetSystemDefaultLangID (Address: 0x18006e408)
- GetSystemDefaultUILanguage (Address: 0x18006e200)
- GetSystemDirectoryW (Address: 0x18006e2c8)
- GetSystemInfo (Address: 0x18006e280)
- GetSystemTimeAsFileTime (Address: 0x18006e0f8)
- GetSystemWindowsDirectoryW (Address: 0x18006e2b0)
- GetTempFileNameW (Address: 0x18006e2e0)
- GetTempPathW (Address: 0x18006e2e8)
- GetTickCount (Address: 0x18006e0c8)
- GetTimeFormatA (Address: 0x18006e330)
- GetUserDefaultUILanguage (Address: 0x18006e208)
- GetVersionExW (Address: 0x18006e238)
- GetWindowsDirectoryW (Address: 0x18006e2f0)
- GlobalAlloc (Address: 0x18006e198)
- GlobalFree (Address: 0x18006e1a0)
- GlobalMemoryStatus (Address: 0x18006e298)
- HeapAlloc (Address: 0x18006e088)
- HeapCreate (Address: 0x18006e080)
- HeapFree (Address: 0x18006e090)
- HeapReAlloc (Address: 0x18006e438)
- HeapSize (Address: 0x18006e430)
- InitializeCriticalSection (Address: 0x18006e030)
- InitializeCriticalSectionAndSpinCount (Address: 0x18006e1b0)
- InitializeSListHead (Address: 0x18006e388)
- InitializeSRWLock (Address: 0x18006e3b0)
- IsDebuggerPresent (Address: 0x18006e380)
- IsProcessorFeaturePresent (Address: 0x18006e378)
- LeaveCriticalSection (Address: 0x18006e040)
- LoadLibraryExA (Address: 0x18006e470)
- LoadLibraryExW (Address: 0x18006e1e8)
- LoadLibraryW (Address: 0x18006e178)
- LoadResource (Address: 0x18006e2f8)
- LocalAlloc (Address: 0x18006e2c0)
- LocalFree (Address: 0x18006e108)
- LocalReAlloc (Address: 0x18006e400)
- LockResource (Address: 0x18006e300)
- lstrcmpW (Address: 0x18006e1f0)
- lstrlenA (Address: 0x18006e0a8)
- lstrlenW (Address: 0x18006e058)
- MultiByteToWideChar (Address: 0x18006e140)
- OpenProcess (Address: 0x18006e278)
- OutputDebugStringA (Address: 0x18006e3e8)
- OutputDebugStringW (Address: 0x18006e0d0)
- PostQueuedCompletionStatus (Address: 0x18006e358)
- QueryPerformanceCounter (Address: 0x18006e468)
- RaiseException (Address: 0x18006e488)
- ReadDirectoryChangesW (Address: 0x18006e100)
- ReadFile (Address: 0x18006e000)
- ReadProcessMemory (Address: 0x18006e368)
- ReleaseMutex (Address: 0x18006e180)
- ReleaseSRWLockExclusive (Address: 0x18006e3a8)
- ReleaseSRWLockShared (Address: 0x18006e3a0)
- RemoveDirectoryW (Address: 0x18006e338)
- ResetEvent (Address: 0x18006e250)
- RtlCaptureContext (Address: 0x18006e460)
- RtlCaptureStackBackTrace (Address: 0x18006e3c0)
- RtlLookupFunctionEntry (Address: 0x18006e458)
- RtlVirtualUnwind (Address: 0x18006e450)
- SetEvent (Address: 0x18006e248)
- SetLastError (Address: 0x18006e160)
- SetUnhandledExceptionFilter (Address: 0x18006e440)
- SizeofResource (Address: 0x18006e308)
- Sleep (Address: 0x18006e060)
- SwitchToThread (Address: 0x18006e098)
- TerminateProcess (Address: 0x18006e260)
- TlsAlloc (Address: 0x18006e1b8)
- TlsFree (Address: 0x18006e3e0)
- TlsGetValue (Address: 0x18006e128)
- TlsSetValue (Address: 0x18006e130)
- TryEnterCriticalSection (Address: 0x18006e048)
- UnhandledExceptionFilter (Address: 0x18006e448)
- VirtualAlloc (Address: 0x18006e3c8)
- VirtualFree (Address: 0x18006e3b8)
- VirtualProtect (Address: 0x18006e480)
- VirtualQuery (Address: 0x18006e478)
- WaitForMultipleObjects (Address: 0x18006e288)
- WaitForSingleObject (Address: 0x18006e0e0)
- WaitForSingleObjectEx (Address: 0x18006e188)
- WideCharToMultiByte (Address: 0x18006e0b0)
- WriteConsoleW (Address: 0x18006e410)
- WriteFile (Address: 0x18006e008)
- WritePrivateProfileStringW (Address: 0x18006e318)
ntdll.dll
- NtQueryInformationProcess (Address: 0x18006e520)
- NtQueryInformationThread (Address: 0x18006e528)
- NtQuerySystemInformation (Address: 0x18006e518)
PSAPI.DLL
- GetModuleFileNameExW (Address: 0x18006e508)
- GetProcessMemoryInfo (Address: 0x18006e500)
ucrtbase_clr0400.dll
- __stdio_common_vsnprintf_s (Address: 0x18006e740)
- __stdio_common_vsnwprintf_s (Address: 0x18006e6d0)
- __stdio_common_vsprintf (Address: 0x18006e698)
- __stdio_common_vsprintf_s (Address: 0x18006e640)
- __stdio_common_vsscanf (Address: 0x18006e670)
- __stdio_common_vswprintf (Address: 0x18006e748)
- __stdio_common_vswscanf (Address: 0x18006e6b8)
- _atoi64 (Address: 0x18006e688)
- _beginthread (Address: 0x18006e738)
- _cexit (Address: 0x18006e620)
- _configure_narrow_argv (Address: 0x18006e5f0)
- _crt_atexit (Address: 0x18006e750)
- _errno (Address: 0x18006e6c0)
- _execute_onexit_table (Address: 0x18006e6f8)
- _initialize_narrow_environment (Address: 0x18006e5f8)
- _initialize_onexit_table (Address: 0x18006e600)
- _initterm (Address: 0x18006e5d8)
- _initterm_e (Address: 0x18006e5e0)
- _itoa_s (Address: 0x18006e678)
- _itow_s (Address: 0x18006e6c8)
- _register_onexit_function (Address: 0x18006e608)
- _seh_filter_dll (Address: 0x18006e5e8)
- _set_error_mode (Address: 0x18006e6d8)
- _stricmp (Address: 0x18006e728)
- _strnicmp (Address: 0x18006e718)
- _ultoa_s (Address: 0x18006e6a0)
- _wcsicmp (Address: 0x18006e630)
- _wcslwr (Address: 0x18006e660)
- _wcsnicmp (Address: 0x18006e6e8)
- _wtoi (Address: 0x18006e628)
- _wtol (Address: 0x18006e658)
- atoi (Address: 0x18006e710)
- bsearch (Address: 0x18006e618)
- isdigit (Address: 0x18006e690)
- iswalnum (Address: 0x18006e708)
- iswspace (Address: 0x18006e700)
- iswxdigit (Address: 0x18006e610)
- isxdigit (Address: 0x18006e650)
- strcat_s (Address: 0x18006e648)
- strcmp (Address: 0x18006e5c8)
- strncmp (Address: 0x18006e720)
- strtol (Address: 0x18006e680)
- strtoul (Address: 0x18006e638)
- towlower (Address: 0x18006e668)
- wcscmp (Address: 0x18006e730)
- wcscpy_s (Address: 0x18006e6b0)
- wcsncmp (Address: 0x18006e758)
- wcsncpy_s (Address: 0x18006e6a8)
- wcstok_s (Address: 0x18006e6f0)
- wcstol (Address: 0x18006e5d0)
- wcstoul (Address: 0x18006e6e0)
USER32.dll
- CharNextA (Address: 0x18006e498)
- CharNextExA (Address: 0x18006e4c8)
- CharPrevW (Address: 0x18006e4b0)
- GetUserObjectSecurity (Address: 0x18006e4a8)
- LoadStringA (Address: 0x18006e4a0)
- MessageBoxW (Address: 0x18006e4b8)
- PeekMessageW (Address: 0x18006e4d0)
- SetUserObjectSecurity (Address: 0x18006e4c0)
USERENV.dll
- CreateEnvironmentBlock (Address: 0x18006e4f0)
- DestroyEnvironmentBlock (Address: 0x18006e4e0)
- LoadUserProfileW (Address: 0x18006e4e8)
VCRUNTIME140_CLR0400.dll
- __C_specific_handler (Address: 0x18006e550)
- __CxxFrameHandler3 (Address: 0x18006e5a0)
- __std_terminate (Address: 0x18006e598)
- __std_type_info_destroy_list (Address: 0x18006e5b0)
- __vcrt_InitializeCriticalSectionEx (Address: 0x18006e5a8)
- _purecall (Address: 0x18006e560)
- memchr (Address: 0x18006e570)
- memcmp (Address: 0x18006e558)
- memcpy (Address: 0x18006e540)
- memmove (Address: 0x18006e590)
- memset (Address: 0x18006e548)
- strchr (Address: 0x18006e578)
- strrchr (Address: 0x18006e5b8)
- strstr (Address: 0x18006e588)
- wcschr (Address: 0x18006e538)
- wcsrchr (Address: 0x18006e580)
- wcsstr (Address: 0x18006e568)