webengine4.dll

Description: Microsoft ASP.NET Support DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 4.8.4662.0

Architecture: 64-bit

Operating System: Windows

SHA256: 83283bbc654120d6b4cec9a36595eac5

File Size: 660.4 KB

Uploaded At: Dec. 1, 2025, 8:30 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread

Exported Functions

  • ??0BUFFER@@QEAA@I@Z (Ordinal: 1, Address: 0x5dcc0)
  • ??0BUFFER@@QEAA@PEAEI@Z (Ordinal: 2, Address: 0x5dd00)
  • ??0BUFFER_CHAIN@@QEAA@XZ (Ordinal: 3, Address: 0x5dd20)
  • ??0BUFFER_CHAIN_ITEM@@QEAA@I@Z (Ordinal: 4, Address: 0x5dd30)
  • ??0CCritSec@@QEAA@XZ (Ordinal: 5, Address: 0x5e880)
  • ??0CFakeLock@@QEAA@XZ (Ordinal: 6, Address: 0x5e6c0)
  • ??0CReaderWriterLock2@@QEAA@AEBV0@@Z (Ordinal: 7, Address: 0x5e8e0)
  • ??0CReaderWriterLock2@@QEAA@XZ (Ordinal: 8, Address: 0x5e8f0)
  • ??0CReaderWriterLock3@@QEAA@AEBV0@@Z (Ordinal: 9, Address: 0x5e8b0)
  • ??0CReaderWriterLock3@@QEAA@XZ (Ordinal: 10, Address: 0x5e8c0)
  • ??0CReaderWriterLock@@QEAA@AEBV0@@Z (Ordinal: 11, Address: 0x5e8b0)
  • ??0CReaderWriterLock@@QEAA@XZ (Ordinal: 12, Address: 0x5e8c0)
  • ??0CSmallSpinLock@@QEAA@AEBV0@@Z (Ordinal: 13, Address: 0x5e8e0)
  • ??0CSmallSpinLock@@QEAA@XZ (Ordinal: 14, Address: 0x5e8f0)
  • ??0CSpinLock@@QEAA@AEBV0@@Z (Ordinal: 15, Address: 0x5e8e0)
  • ??0CSpinLock@@QEAA@XZ (Ordinal: 16, Address: 0x5e8f0)
  • ??0STRA@@AEAA@AEBV0@@Z (Ordinal: 17, Address: 0x5ddc0)
  • ??0STRA@@AEAA@PEAD@Z (Ordinal: 18, Address: 0x5ddc0)
  • ??0STRA@@AEAA@PEBD@Z (Ordinal: 19, Address: 0x5ddc0)
  • ??0STRA@@QEAA@PEADK@Z (Ordinal: 20, Address: 0x5dd70)
  • ??0STRA@@QEAA@XZ (Ordinal: 21, Address: 0x5dd90)
  • ??0STRAU@@QEAA@AEAV0@@Z (Ordinal: 22, Address: 0x60210)
  • ??0STRAU@@QEAA@PEBD@Z (Ordinal: 23, Address: 0x602a0)
  • ??0STRAU@@QEAA@PEBDH@Z (Ordinal: 24, Address: 0x60300)
  • ??0STRAU@@QEAA@PEBG@Z (Ordinal: 25, Address: 0x60370)
  • ??0STRAU@@QEAA@XZ (Ordinal: 26, Address: 0x603d0)
  • ??0STRU@@AEAA@AEBV0@@Z (Ordinal: 27, Address: 0x5ddc0)
  • ??0STRU@@AEAA@PEAG@Z (Ordinal: 28, Address: 0x5ddc0)
  • ??0STRU@@AEAA@PEBG@Z (Ordinal: 29, Address: 0x5ddc0)
  • ??0STRU@@QEAA@PEAGK@Z (Ordinal: 30, Address: 0x5dde0)
  • ??0STRU@@QEAA@XZ (Ordinal: 31, Address: 0x5de00)
  • ??1BUFFER@@QEAA@XZ (Ordinal: 32, Address: 0x5de70)
  • ??1BUFFER_CHAIN@@QEAA@XZ (Ordinal: 33, Address: 0x5de30)
  • ??1BUFFER_CHAIN_ITEM@@QEAA@XZ (Ordinal: 34, Address: 0x5de40)
  • ??1CCritSec@@QEAA@XZ (Ordinal: 35, Address: 0x5e900)
  • ??1CFakeLock@@QEAA@XZ (Ordinal: 36, Address: 0x1270)
  • ??1CReaderWriterLock2@@QEAA@XZ (Ordinal: 37, Address: 0x1270)
  • ??1CReaderWriterLock3@@QEAA@XZ (Ordinal: 38, Address: 0x1270)
  • ??1CReaderWriterLock@@QEAA@XZ (Ordinal: 39, Address: 0x1270)
  • ??1CSmallSpinLock@@QEAA@XZ (Ordinal: 40, Address: 0x1270)
  • ??1CSpinLock@@QEAA@XZ (Ordinal: 41, Address: 0x1270)
  • ??1STRA@@QEAA@XZ (Ordinal: 42, Address: 0x5de70)
  • ??1STRAU@@QEAA@XZ (Ordinal: 43, Address: 0x60420)
  • ??1STRU@@QEAA@XZ (Ordinal: 44, Address: 0x5de70)
  • ??2BUFFER_CHAIN_ITEM@@SAPEAX_K@Z (Ordinal: 45, Address: 0x5de90)
  • ??3BUFFER_CHAIN_ITEM@@SAXPEAX@Z (Ordinal: 46, Address: 0x5dea0)
  • ??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 47, Address: 0x5e6c0)
  • ??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 48, Address: 0x5e6c0)
  • ??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 49, Address: 0x5e6c0)
  • ??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 50, Address: 0x5e6c0)
  • ??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 51, Address: 0x5e6c0)
  • ??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@AEBV0@@Z (Ordinal: 52, Address: 0x5e6c0)
  • ??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 53, Address: 0x5e6c0)
  • ??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@AEBV0@@Z (Ordinal: 54, Address: 0x5e6c0)
  • ??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 55, Address: 0x5e6c0)
  • ??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 56, Address: 0x5e6c0)
  • ??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 57, Address: 0x5e6c0)
  • ??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 58, Address: 0x5e6c0)
  • ??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@$$QEAV0@@Z (Ordinal: 59, Address: 0x5e6c0)
  • ??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@AEBV0@@Z (Ordinal: 60, Address: 0x5e6c0)
  • ??4BUFFER@@QEAAAEAV0@AEBV0@@Z (Ordinal: 61, Address: 0x5deb0)
  • ??4BUFFER_CHAIN@@QEAAAEAV0@AEBV0@@Z (Ordinal: 62, Address: 0x5ded0)
  • ??4BUFFER_CHAIN_ITEM@@QEAAAEAV0@AEBV0@@Z (Ordinal: 63, Address: 0x5dee0)
  • ??4CCritSec@@QEAAAEAV0@AEBV0@@Z (Ordinal: 64, Address: 0x5e910)
  • ??4CFakeLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 65, Address: 0x5e6c0)
  • ??4CReaderWriterLock2@@QEAAAEAV0@AEBV0@@Z (Ordinal: 66, Address: 0x5e8e0)
  • ??4CReaderWriterLock3@@QEAAAEAV0@AEBV0@@Z (Ordinal: 67, Address: 0x5e8b0)
  • ??4CReaderWriterLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 68, Address: 0x5e8b0)
  • ??4CSmallSpinLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 69, Address: 0x5e8e0)
  • ??4CSpinLock@@QEAAAEAV0@AEBV0@@Z (Ordinal: 70, Address: 0x5e8e0)
  • ??4STRA@@AEAAAEAV0@AEBV0@@Z (Ordinal: 71, Address: 0x5e6c0)
  • ??4STRAU@@QEAAAEAV0@AEBV0@@Z (Ordinal: 72, Address: 0x60450)
  • ??4STRU@@AEAAAEAV0@AEBV0@@Z (Ordinal: 73, Address: 0x5e6c0)
  • ??_FBUFFER@@QEAAXXZ (Ordinal: 74, Address: 0x5df10)
  • ??_FBUFFER_CHAIN_ITEM@@QEAAXXZ (Ordinal: 75, Address: 0x5df30)
  • AppDomainRestart (Ordinal: 76, Address: 0x5cb20)
  • ?Append@STRA@@QEAAJAEBV1@@Z (Ordinal: 77, Address: 0x5df50)
  • ?Append@STRA@@QEAAJPEBD@Z (Ordinal: 78, Address: 0x5df80)
  • ?Append@STRA@@QEAAJPEBDK@Z (Ordinal: 79, Address: 0x5dfc0)
  • ?Append@STRAU@@QEAAHAEAV1@@Z (Ordinal: 80, Address: 0x604a0)
  • ?Append@STRAU@@QEAAHPEBD@Z (Ordinal: 81, Address: 0x60540)
  • ?Append@STRAU@@QEAAHPEBDK@Z (Ordinal: 82, Address: 0x60570)
  • ?Append@STRAU@@QEAAHPEBG@Z (Ordinal: 83, Address: 0x60590)
  • ?Append@STRAU@@QEAAHPEBGK@Z (Ordinal: 84, Address: 0x605c0)
  • ?Append@STRU@@QEAAJAEBV1@@Z (Ordinal: 85, Address: 0x5dff0)
  • ?Append@STRU@@QEAAJG@Z (Ordinal: 86, Address: 0x5e030)
  • ?Append@STRU@@QEAAJPEBG@Z (Ordinal: 87, Address: 0x5e060)
  • ?Append@STRU@@QEAAJPEBGK@Z (Ordinal: 88, Address: 0x5e0a0)
  • ?AppendA@STRU@@QEAAJPEBD@Z (Ordinal: 89, Address: 0x5e0d0)
  • ?AppendA@STRU@@QEAAJPEBDK@Z (Ordinal: 90, Address: 0x5e100)
  • ?AppendBuffer@BUFFER_CHAIN@@QEAAHPEAVBUFFER_CHAIN_ITEM@@@Z (Ordinal: 91, Address: 0x61100)
  • ?AppendW@STRA@@QEAAJPEBG@Z (Ordinal: 92, Address: 0x5e120)
  • ?AppendW@STRA@@QEAAJPEBGK@Z (Ordinal: 93, Address: 0x5e150)
  • ?AppendWTruncate@STRA@@QEAAJPEBG@Z (Ordinal: 94, Address: 0x5e170)
  • ?AppendWTruncate@STRA@@QEAAJPEBGK@Z (Ordinal: 95, Address: 0x5e1a0)
  • AspCompatIsApartmentComponent (Ordinal: 96, Address: 0x13390)
  • AspCompatOnPageEnd (Ordinal: 97, Address: 0x13480)
  • AspCompatOnPageStart (Ordinal: 98, Address: 0x134d0)
  • AspCompatProcessRequest (Ordinal: 99, Address: 0x13580)
  • AspnetLoadResourceDLL (Ordinal: 100, Address: 0x27ec0)
  • AttachDebugger (Ordinal: 101, Address: 0x1dad0)
  • ?AuxAppend@STRA@@AEAAJPEBEKKH@Z (Ordinal: 102, Address: 0x61290)
  • ?AuxAppend@STRAU@@AEAAHPEBDIH@Z (Ordinal: 103, Address: 0x605e0)
  • ?AuxAppend@STRAU@@AEAAHPEBGIH@Z (Ordinal: 104, Address: 0x60770)
  • ?AuxAppend@STRU@@AEAAJPEBEKKH@Z (Ordinal: 105, Address: 0x5340)
  • ?AuxAppendA@STRU@@AEAAJPEBEKKH@Z (Ordinal: 106, Address: 0x62210)
  • ?AuxAppendW@STRA@@AEAAJPEBGKKH@Z (Ordinal: 107, Address: 0x15b0)
  • ?AuxAppendWTruncate@STRA@@AEAAJPEBGKKH@Z (Ordinal: 108, Address: 0x61360)
  • ?AuxInit@STRAU@@AEAAXPEBD@Z (Ordinal: 109, Address: 0x608a0)
  • ?AuxInit@STRAU@@AEAAXPEBG@Z (Ordinal: 110, Address: 0x60940)
  • BufferPoolGetBuffer (Ordinal: 111, Address: 0x1e000)
  • BufferPoolGetPool (Ordinal: 112, Address: 0x1e010)
  • BufferPoolReleaseBuffer (Ordinal: 113, Address: 0x1e020)
  • ?CalcTotalSize@BUFFER_CHAIN@@QEBAKH@Z (Ordinal: 114, Address: 0x61120)
  • CallCryptUnProtectData (Ordinal: 115, Address: 0x54530)
  • CallManagedProtectedConfigAction (Ordinal: 116, Address: 0x473d0)
  • ChangeAccessToKeyContainer (Ordinal: 117, Address: 0x54760)
  • CheckIISState (Ordinal: 118, Address: 0x35af0)
  • ?ClassName@CCritSec@@SAPEBGXZ (Ordinal: 119, Address: 0x5e930)
  • ?ClassName@CFakeLock@@SAPEBGXZ (Ordinal: 120, Address: 0x5e940)
  • ?ClassName@CReaderWriterLock2@@SAPEBGXZ (Ordinal: 121, Address: 0x5e950)
  • ?ClassName@CReaderWriterLock3@@SAPEBGXZ (Ordinal: 122, Address: 0x5e960)
  • ?ClassName@CReaderWriterLock@@SAPEBGXZ (Ordinal: 123, Address: 0x5e970)
  • ?ClassName@CSmallSpinLock@@SAPEBGXZ (Ordinal: 124, Address: 0x5e980)
  • ?ClassName@CSpinLock@@SAPEBGXZ (Ordinal: 125, Address: 0x5e990)
  • ?Clone@STRA@@QEBAJPEAV1@@Z (Ordinal: 126, Address: 0x5e1c0)
  • ?ConvertExclusiveToShared@CCritSec@@QEAAXXZ (Ordinal: 127, Address: 0x1270)
  • ?ConvertExclusiveToShared@CFakeLock@@QEAAXXZ (Ordinal: 128, Address: 0x1270)
  • ?ConvertExclusiveToShared@CReaderWriterLock2@@QEAAXXZ (Ordinal: 129, Address: 0x5e9a0)
  • ?ConvertExclusiveToShared@CReaderWriterLock3@@QEAAXXZ (Ordinal: 130, Address: 0x5e9f0)
  • ?ConvertExclusiveToShared@CReaderWriterLock@@QEAAXXZ (Ordinal: 131, Address: 0x5ea40)
  • ?ConvertExclusiveToShared@CSmallSpinLock@@QEAAXXZ (Ordinal: 132, Address: 0x1270)
  • ?ConvertExclusiveToShared@CSpinLock@@QEAAXXZ (Ordinal: 133, Address: 0x1270)
  • ?ConvertSharedToExclusive@CCritSec@@QEAAXXZ (Ordinal: 134, Address: 0x1270)
  • ?ConvertSharedToExclusive@CFakeLock@@QEAAXXZ (Ordinal: 135, Address: 0x1270)
  • ?ConvertSharedToExclusive@CReaderWriterLock2@@QEAAXXZ (Ordinal: 136, Address: 0x5ea50)
  • ?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ (Ordinal: 137, Address: 0x5eab0)
  • ?ConvertSharedToExclusive@CReaderWriterLock@@QEAAXXZ (Ordinal: 138, Address: 0x5eb20)
  • ?ConvertSharedToExclusive@CSmallSpinLock@@QEAAXXZ (Ordinal: 139, Address: 0x1270)
  • ?ConvertSharedToExclusive@CSpinLock@@QEAAXXZ (Ordinal: 140, Address: 0x1270)
  • CookieAuthConstructTicket (Ordinal: 141, Address: 0x54bf0)
  • CookieAuthParseTicket (Ordinal: 142, Address: 0x54d20)
  • ?Copy@STRA@@QEAAJAEBV1@@Z (Ordinal: 143, Address: 0x5e200)
  • ?Copy@STRA@@QEAAJPEBD@Z (Ordinal: 144, Address: 0x5e230)
  • ?Copy@STRA@@QEAAJPEBDK@Z (Ordinal: 145, Address: 0x5e270)
  • ?Copy@STRAU@@QEAAHAEAV1@@Z (Ordinal: 146, Address: 0x60a80)
  • ?Copy@STRAU@@QEAAHPEBD@Z (Ordinal: 147, Address: 0x60b40)
  • ?Copy@STRAU@@QEAAHPEBDK@Z (Ordinal: 148, Address: 0x60b80)
  • ?Copy@STRAU@@QEAAHPEBG@Z (Ordinal: 149, Address: 0x60bc0)
  • ?Copy@STRAU@@QEAAHPEBGK@Z (Ordinal: 150, Address: 0x60c10)
  • ?Copy@STRU@@QEAAJAEBV1@@Z (Ordinal: 151, Address: 0x5e310)
  • ?Copy@STRU@@QEAAJPEBG@Z (Ordinal: 152, Address: 0x5e2a0)
  • ?Copy@STRU@@QEAAJPEBGK@Z (Ordinal: 153, Address: 0x5e2e0)
  • ?Copy@STRU@@QEAAJPEBV1@@Z (Ordinal: 154, Address: 0x5e310)
  • ?CopyA@STRU@@QEAAJPEBD@Z (Ordinal: 155, Address: 0x5e340)
  • ?CopyA@STRU@@QEAAJPEBDK@Z (Ordinal: 156, Address: 0x5e370)
  • ?CopyBinary@STRA@@QEAAJPEAXK@Z (Ordinal: 157, Address: 0x61440)
  • ?CopyToBuffer@STRA@@QEBAJPEADPEAK@Z (Ordinal: 158, Address: 0x61680)
  • ?CopyToBuffer@STRU@@QEBAJPEAGPEAK@Z (Ordinal: 159, Address: 0x62390)
  • ?CopyW@STRA@@QEAAJPEBG@Z (Ordinal: 160, Address: 0x5e390)
  • ?CopyW@STRA@@QEAAJPEBGK@Z (Ordinal: 161, Address: 0x5e3d0)
  • ?CopyWToUTF8Escaped@STRA@@QEAAJAEBVSTRU@@@Z (Ordinal: 162, Address: 0x616e0)
  • ?CopyWToUTF8Escaped@STRA@@QEAAJPEBG@Z (Ordinal: 163, Address: 0x5e400)
  • ?CopyWToUTF8Escaped@STRA@@QEAAJPEBGK@Z (Ordinal: 164, Address: 0x616f0)
  • ?CopyWToUTF8Unescaped@STRA@@QEAAJAEBVSTRU@@@Z (Ordinal: 165, Address: 0x61730)
  • ?CopyWToUTF8Unescaped@STRA@@QEAAJPEBG@Z (Ordinal: 166, Address: 0x5e420)
  • ?CopyWToUTF8Unescaped@STRA@@QEAAJPEBGK@Z (Ordinal: 167, Address: 0x61740)
  • ?CopyWTruncate@STRA@@QEAAJPEBG@Z (Ordinal: 168, Address: 0x5e440)
  • ?CopyWTruncate@STRA@@QEAAJPEBGK@Z (Ordinal: 169, Address: 0x5e470)
  • CreateUserToken (Ordinal: 170, Address: 0x54f70)
  • ?DeleteChain@BUFFER_CHAIN@@QEAAKXZ (Ordinal: 171, Address: 0x61150)
  • DirMonClose (Ordinal: 172, Address: 0x20cf0)
  • DirMonOpen (Ordinal: 173, Address: 0x47c0)
  • DisplayManagementSettings (Ordinal: 174, Address: 0x485a0)
  • DisposeAppDomainsIndirect (Ordinal: 175, Address: 0x25490)
  • DoesKeyContainerExist (Ordinal: 176, Address: 0x553a0)
  • EcbAppendLogParameter (Ordinal: 177, Address: 0x20fe0)
  • EcbCallISAPI (Ordinal: 178, Address: 0x75b0)
  • EcbCloseConnection (Ordinal: 179, Address: 0x21040)
  • EcbDoneWithSession (Ordinal: 180, Address: 0x210a0)
  • EcbEmitSimpleTrace (Ordinal: 181, Address: 0x21130)
  • EcbEmitWebEventTrace (Ordinal: 182, Address: 0x21380)
  • EcbExecuteUrlUnicode (Ordinal: 183, Address: 0x21660)
  • EcbFlushCore (Ordinal: 184, Address: 0x21860)
  • EcbFreeExecUrlEntityInfo (Ordinal: 185, Address: 0x21b30)
  • EcbGetAdditionalPostedContent (Ordinal: 186, Address: 0x21b50)
  • EcbGetBasics (Ordinal: 187, Address: 0x21bd0)
  • EcbGetBasicsContentInfo (Ordinal: 188, Address: 0x21f20)
  • EcbGetChannelBindingToken (Ordinal: 189, Address: 0x21fc0)
  • EcbGetClientCertificate (Ordinal: 190, Address: 0x22060)
  • EcbGetExecUrlEntityInfo (Ordinal: 191, Address: 0x222d0)
  • EcbGetImpersonationToken (Ordinal: 192, Address: 0x22410)
  • EcbGetPreloadedPostedContent (Ordinal: 193, Address: 0x224c0)
  • EcbGetQueryString (Ordinal: 194, Address: 0x22510)
  • EcbGetQueryStringRawBytes (Ordinal: 195, Address: 0x225d0)
  • EcbGetServerVariable (Ordinal: 196, Address: 0x22620)
  • EcbGetServerVariableByIndex (Ordinal: 197, Address: 0x226d0)
  • EcbGetTraceContextId (Ordinal: 198, Address: 0x226f0)
  • EcbGetTraceFlags (Ordinal: 199, Address: 0x22740)
  • EcbGetUnicodeServerVariable (Ordinal: 200, Address: 0x227a0)
  • EcbGetUnicodeServerVariableByIndex (Ordinal: 201, Address: 0x22840)
  • EcbGetUnicodeServerVariables (Ordinal: 202, Address: 0x22860)
  • EcbGetVersion (Ordinal: 203, Address: 0x22ad0)
  • EcbGetVirtualPathToken (Ordinal: 204, Address: 0x22ae0)
  • EcbIsClientConnected (Ordinal: 205, Address: 0x22af0)
  • EcbMapUrlToPath (Ordinal: 206, Address: 0x22b70)
  • EcbMapUrlToPathUnicode (Ordinal: 207, Address: 0x22c90)
  • EcbReadClientAsync (Ordinal: 208, Address: 0x22dd0)
  • EcbWriteBytes (Ordinal: 209, Address: 0x23070)
  • EcbWriteBytesAsync (Ordinal: 210, Address: 0x230e0)
  • EcbWriteHeaders (Ordinal: 211, Address: 0x232b0)
  • EndPrefetchActivity (Ordinal: 212, Address: 0x2bb50)
  • ?Equals@STRA@@QEBAHAEBV1@@Z (Ordinal: 213, Address: 0x5e4a0)
  • ?Equals@STRA@@QEBAHPEBD@Z (Ordinal: 214, Address: 0x5e4e0)
  • ?Equals@STRU@@QEBAHAEBV1@@Z (Ordinal: 215, Address: 0x5e520)
  • ?Equals@STRU@@QEBAHPEBG@Z (Ordinal: 216, Address: 0x5e560)
  • ?EqualsNoCase@STRA@@QEBAHAEBV1@@Z (Ordinal: 217, Address: 0x5e5a0)
  • ?EqualsNoCase@STRA@@QEBAHPEBD@Z (Ordinal: 218, Address: 0x5e5d0)
  • ?EqualsNoCase@STRU@@QEBAHAEBV1@@Z (Ordinal: 219, Address: 0x5e610)
  • ?EqualsNoCase@STRU@@QEBAHPEBG@Z (Ordinal: 220, Address: 0x5e650)
  • ?Escape@STRA@@QEAAJHH@Z (Ordinal: 221, Address: 0x617a0)
  • ?Escape@STRU@@QEAAJXZ (Ordinal: 222, Address: 0x62400)
  • EtwTraceAspNetRegister (Ordinal: 223, Address: 0x1c130)
  • EtwTraceAspNetUnregister (Ordinal: 224, Address: 0x1c170)
  • ?FormatString@STRA@@QEAAJKQEAPEBDPEBDK@Z (Ordinal: 225, Address: 0x61ab0)
  • FreeFileSecurityDescriptor (Ordinal: 226, Address: 0x55500)
  • ?FreeMemory@BUFFER@@QEAAXXZ (Ordinal: 227, Address: 0x611c0)
  • GetAppDomainIndirect (Ordinal: 228, Address: 0x25640)
  • GetConfigurationFromNativeCode (Ordinal: 229, Address: 0x24140)
  • GetCredentialFromRegistry (Ordinal: 230, Address: 0x55520)
  • GetCurrentToken (Ordinal: 231, Address: 0x55970)
  • ?GetDefaultSpinAdjustmentFactor@CCritSec@@SANXZ (Ordinal: 232, Address: 0x5eb50)
  • ?GetDefaultSpinAdjustmentFactor@CFakeLock@@SANXZ (Ordinal: 233, Address: 0x5eb60)
  • ?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SANXZ (Ordinal: 234, Address: 0x5eb70)
  • ?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SANXZ (Ordinal: 235, Address: 0x5eb80)
  • ?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SANXZ (Ordinal: 236, Address: 0x5eb90)
  • ?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SANXZ (Ordinal: 237, Address: 0x5eba0)
  • ?GetDefaultSpinAdjustmentFactor@CSpinLock@@SANXZ (Ordinal: 238, Address: 0x5ebb0)
  • ?GetDefaultSpinCount@CCritSec@@SAGXZ (Ordinal: 239, Address: 0x5ebc0)
  • ?GetDefaultSpinCount@CFakeLock@@SAGXZ (Ordinal: 240, Address: 0x5ebd0)
  • ?GetDefaultSpinCount@CReaderWriterLock2@@SAGXZ (Ordinal: 241, Address: 0x5ebe0)
  • ?GetDefaultSpinCount@CReaderWriterLock3@@SAGXZ (Ordinal: 242, Address: 0x5ebf0)
  • ?GetDefaultSpinCount@CReaderWriterLock@@SAGXZ (Ordinal: 243, Address: 0x5ec00)
  • ?GetDefaultSpinCount@CSmallSpinLock@@SAGXZ (Ordinal: 244, Address: 0x5ec10)
  • ?GetDefaultSpinCount@CSpinLock@@SAGXZ (Ordinal: 245, Address: 0x5ec20)
  • GetFileHandleForTransmitFile (Ordinal: 246, Address: 0x237c0)
  • GetFileSecurityDescriptor (Ordinal: 247, Address: 0x559d0)
  • GetFileVersionString (Ordinal: 248, Address: 0x5d950)
  • GetGlobalConfigFullPathW (Ordinal: 249, Address: 0x27ff0)
  • GetGroupsForUser (Ordinal: 250, Address: 0x55ad0)
  • GetHMACSHA1Hash (Ordinal: 251, Address: 0x5d3d0)
  • GetIsapiProcessHost (Ordinal: 252, Address: 0xcef0)
  • ?GetNewStorage@BUFFER@@AEAAHI@Z (Ordinal: 253, Address: 0x61200)
  • GetRCInstance (Ordinal: 254, Address: 0x27eb0)
  • GetSHA1Hash (Ordinal: 255, Address: 0x5d680)
  • ?GetSpinCount@CCritSec@@QEBAGXZ (Ordinal: 256, Address: 0x5ebc0)
  • ?GetSpinCount@CFakeLock@@QEBAGXZ (Ordinal: 257, Address: 0x46f0)
  • ?GetSpinCount@CReaderWriterLock2@@QEBAGXZ (Ordinal: 258, Address: 0x5ebe0)
  • ?GetSpinCount@CReaderWriterLock3@@QEBAGXZ (Ordinal: 259, Address: 0x5ebf0)
  • ?GetSpinCount@CReaderWriterLock@@QEBAGXZ (Ordinal: 260, Address: 0x5ec00)
  • ?GetSpinCount@CSmallSpinLock@@QEBAGXZ (Ordinal: 261, Address: 0x5ec10)
  • ?GetSpinCount@CSpinLock@@QEBAGXZ (Ordinal: 262, Address: 0x5ec20)
  • GetUserNameFromToken (Ordinal: 263, Address: 0x56540)
  • GetXSPHeap (Ordinal: 264, Address: 0xd440)
  • GetXSPInstance (Ordinal: 265, Address: 0x8f70)
  • GrowFileNotificationBuffer (Ordinal: 266, Address: 0x20d50)
  • ?HTMLEncode@STRA@@QEAAJXZ (Ordinal: 267, Address: 0x61b70)
  • ?HTMLEncode@STRU@@QEAAJXZ (Ordinal: 268, Address: 0x626d0)
  • IIS7IsAspNetV4Installed (Ordinal: 269, Address: 0x419d0)
  • InitializeHealthMonitor (Ordinal: 270, Address: 0x5840)
  • InitializeLibrary (Ordinal: 271, Address: 0x7bf0)
  • InitializeManagedCode (Ordinal: 272, Address: 0x25650)
  • InstrumentedMutexCreate (Ordinal: 273, Address: 0x6d50)
  • InstrumentedMutexDelete (Ordinal: 274, Address: 0x6810)
  • InstrumentedMutexGetLock (Ordinal: 275, Address: 0x5060)
  • InstrumentedMutexReleaseLock (Ordinal: 276, Address: 0x5000)
  • InstrumentedMutexSetState (Ordinal: 277, Address: 0x26300)
  • InvalidateKernelCache (Ordinal: 278, Address: 0x23900)
  • IsAccessToFileAllowed (Ordinal: 279, Address: 0x56700)
  • IsConfigFileName (Ordinal: 280, Address: 0x24b00)
  • ?IsCurrentUnicode@STRAU@@QEAAHXZ (Ordinal: 281, Address: 0x60c50)
  • ?IsDynAlloced@BUFFER@@AEBAHXZ (Ordinal: 282, Address: 0x5e690)
  • ?IsEmpty@STRA@@QEBAHXZ (Ordinal: 283, Address: 0x5e6a0)
  • ?IsEmpty@STRAU@@QEAAHXZ (Ordinal: 284, Address: 0x60c60)
  • ?IsEmpty@STRU@@QEBAHXZ (Ordinal: 285, Address: 0x5e6a0)
  • IsManagedDebuggerConnectedIndirect (Ordinal: 286, Address: 0x25660)
  • ?IsReadLocked@CCritSec@@QEBA_NXZ (Ordinal: 287, Address: 0x1000)
  • ?IsReadLocked@CFakeLock@@QEBA_NXZ (Ordinal: 288, Address: 0x1000)
  • ?IsReadLocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 289, Address: 0x5ec30)
  • ?IsReadLocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 290, Address: 0x5ec30)
  • ?IsReadLocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 291, Address: 0x5ec40)
  • ?IsReadLocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 292, Address: 0x5ec50)
  • ?IsReadLocked@CSpinLock@@QEBA_NXZ (Ordinal: 293, Address: 0x5ed10)
  • ?IsReadUnlocked@CCritSec@@QEBA_NXZ (Ordinal: 294, Address: 0x1000)
  • ?IsReadUnlocked@CFakeLock@@QEBA_NXZ (Ordinal: 295, Address: 0x1000)
  • ?IsReadUnlocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 296, Address: 0x5ec70)
  • ?IsReadUnlocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 297, Address: 0x5ec70)
  • ?IsReadUnlocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 298, Address: 0x5ec80)
  • ?IsReadUnlocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 299, Address: 0x5ed90)
  • ?IsReadUnlocked@CSpinLock@@QEBA_NXZ (Ordinal: 300, Address: 0x5ec90)
  • IsUserInRole (Ordinal: 301, Address: 0x567b0)
  • ?IsValid@BUFFER@@QEBAHXZ (Ordinal: 302, Address: 0x5e6b0)
  • ?IsValid@STRA@@QEBAHXZ (Ordinal: 303, Address: 0x5e6b0)
  • ?IsValid@STRAU@@QEAAHXZ (Ordinal: 304, Address: 0x60c90)
  • IsValidResource (Ordinal: 305, Address: 0x239b0)
  • IsVista (Ordinal: 306, Address: 0xcd80)
  • IsWin8 (Ordinal: 307, Address: 0x2b900)
  • ?IsWriteLocked@CCritSec@@QEBA_NXZ (Ordinal: 308, Address: 0x1000)
  • ?IsWriteLocked@CFakeLock@@QEBA_NXZ (Ordinal: 309, Address: 0x1000)
  • ?IsWriteLocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 310, Address: 0x5ecc0)
  • ?IsWriteLocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 311, Address: 0x5ecd0)
  • ?IsWriteLocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 312, Address: 0x5ed00)
  • ?IsWriteLocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 313, Address: 0x5ec50)
  • ?IsWriteLocked@CSpinLock@@QEBA_NXZ (Ordinal: 314, Address: 0x5ed10)
  • ?IsWriteUnlocked@CCritSec@@QEBA_NXZ (Ordinal: 315, Address: 0x1000)
  • ?IsWriteUnlocked@CFakeLock@@QEBA_NXZ (Ordinal: 316, Address: 0x1000)
  • ?IsWriteUnlocked@CReaderWriterLock2@@QEBA_NXZ (Ordinal: 317, Address: 0x5ed40)
  • ?IsWriteUnlocked@CReaderWriterLock3@@QEBA_NXZ (Ordinal: 318, Address: 0x5ed50)
  • ?IsWriteUnlocked@CReaderWriterLock@@QEBA_NXZ (Ordinal: 319, Address: 0x5ed80)
  • ?IsWriteUnlocked@CSmallSpinLock@@QEBA_NXZ (Ordinal: 320, Address: 0x5ed90)
  • ?IsWriteUnlocked@CSpinLock@@QEBA_NXZ (Ordinal: 321, Address: 0x5ec90)
  • IsapiAppHostGetAppPath (Ordinal: 322, Address: 0x27280)
  • IsapiAppHostGetNextVirtualSubdir (Ordinal: 323, Address: 0x27370)
  • IsapiAppHostGetSiteId (Ordinal: 324, Address: 0x274a0)
  • IsapiAppHostGetSiteName (Ordinal: 325, Address: 0x275a0)
  • IsapiAppHostGetUncUser (Ordinal: 326, Address: 0x27690)
  • IsapiAppHostIsAppRoot (Ordinal: 327, Address: 0x277f0)
  • IsapiAppHostMapPath (Ordinal: 328, Address: 0x278a0)
  • LoadLibraryUsingFullPath (Ordinal: 329, Address: 0x59a00)
  • LoadManagedRuntime (Ordinal: 330, Address: 0xaea0)
  • LoadManagedRuntimeEx (Ordinal: 331, Address: 0x25cb0)
  • LoadResourceString (Ordinal: 332, Address: 0x5d9d0)
  • ?LoadStringW@STRA@@QEAAJKPEAUHINSTANCE__@@@Z (Ordinal: 333, Address: 0x61d80)
  • ?LoadStringW@STRA@@QEAAJKPEBDK@Z (Ordinal: 334, Address: 0x61e10)
  • ?LockType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 335, Address: 0x5f6b0)
  • ?LockType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 336, Address: 0x5edf0)
  • ?LockType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 337, Address: 0x5eda0)
  • ?LockType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 338, Address: 0x5edb0)
  • ?LockType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 339, Address: 0x5edc0)
  • ?LockType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 340, Address: 0x5edd0)
  • ?LockType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ (Ordinal: 341, Address: 0x5ede0)
  • MgdAbortConnection (Ordinal: 342, Address: 0x633c0)
  • MgdAcceptWebSocket (Ordinal: 343, Address: 0x633e0)
  • MgdAllocateRequestMemory (Ordinal: 344, Address: 0x63410)
  • MgdAppDomainShutdown (Ordinal: 345, Address: 0x63470)
  • MgdCanDisposeManagedContext (Ordinal: 346, Address: 0x28e0)
  • MgdClearResponse (Ordinal: 347, Address: 0x21c0)
  • MgdCloseConnection (Ordinal: 348, Address: 0x63490)
  • MgdConfigureAsyncDisconnectNotification (Ordinal: 349, Address: 0x634b0)
  • MgdCreateNativeConfigSystem (Ordinal: 350, Address: 0x636a0)
  • MgdDisableKernelCache (Ordinal: 351, Address: 0x636d0)
  • MgdDisableNotifications (Ordinal: 352, Address: 0x63730)
  • MgdDisableUserCache (Ordinal: 353, Address: 0x63790)
  • MgdEmitSimpleTrace (Ordinal: 354, Address: 0x63810)
  • MgdEmitWebEventTrace (Ordinal: 355, Address: 0x63840)
  • MgdEtwGetTraceConfig (Ordinal: 356, Address: 0x63880)
  • MgdExecuteUrl (Ordinal: 357, Address: 0x638b0)
  • MgdExplicitFlush (Ordinal: 358, Address: 0x63950)
  • MgdFlushCore (Ordinal: 359, Address: 0x2730)
  • MgdFlushKernelCache (Ordinal: 360, Address: 0x63970)
  • MgdGetAnonymousUserToken (Ordinal: 361, Address: 0x639d0)
  • MgdGetAppCollection (Ordinal: 362, Address: 0x63a90)
  • MgdGetAppPathForPath (Ordinal: 363, Address: 0x8100)
  • MgdGetApplicationInfo (Ordinal: 364, Address: 0x2f30)
  • MgdGetBuffer (Ordinal: 365, Address: 0x2890)
  • MgdGetBufferPool (Ordinal: 366, Address: 0x4d00)
  • MgdGetChannelBindingToken (Ordinal: 367, Address: 0x63d00)
  • MgdGetClientCertificate (Ordinal: 368, Address: 0x63dd0)
  • MgdGetConfigProperty (Ordinal: 369, Address: 0x640c0)
  • MgdGetCookieHeader (Ordinal: 370, Address: 0x3d50)
  • MgdGetCorrelationIdHeader (Ordinal: 371, Address: 0x64230)
  • MgdGetCurrentModuleName (Ordinal: 372, Address: 0x64350)
  • MgdGetCurrentNotification (Ordinal: 373, Address: 0x643c0)
  • MgdGetCurrentNotificationInfo (Ordinal: 374, Address: 0x1750)
  • MgdGetFileChunkInfo (Ordinal: 375, Address: 0x643e0)
  • MgdGetHandlerTypeString (Ordinal: 376, Address: 0x64500)
  • MgdGetHeaderChanges (Ordinal: 377, Address: 0x2df0)
  • MgdGetIISVersionInformation (Ordinal: 378, Address: 0x4fe0)
  • MgdGetIsChildContext (Ordinal: 379, Address: 0x645b0)
  • MgdGetLocalPort (Ordinal: 380, Address: 0x64690)
  • MgdGetMaxConcurrentRequestsPerCPU (Ordinal: 381, Address: 0x64720)
  • MgdGetMaxConcurrentThreadsPerCPU (Ordinal: 382, Address: 0x64730)
  • MgdGetMemoryLimitKB (Ordinal: 383, Address: 0x7a40)
  • MgdGetMimeMapCollection (Ordinal: 384, Address: 0x64740)
  • MgdGetModuleCollection (Ordinal: 385, Address: 0x5f40)
  • MgdGetNextMimeMap (Ordinal: 386, Address: 0x64870)
  • MgdGetNextModule (Ordinal: 387, Address: 0x6080)
  • MgdGetNextNotification (Ordinal: 388, Address: 0x2950)
  • MgdGetNextVPath (Ordinal: 389, Address: 0x64bb0)
  • MgdGetPreloadedContent (Ordinal: 390, Address: 0x651a0)
  • MgdGetPreloadedSize (Ordinal: 391, Address: 0x2db0)
  • MgdGetPrincipal (Ordinal: 392, Address: 0x65230)
  • MgdGetRemotePort (Ordinal: 393, Address: 0x653c0)
  • MgdGetRequestBasics (Ordinal: 394, Address: 0x3060)
  • MgdGetRequestTraceGuid (Ordinal: 395, Address: 0x65450)
  • MgdGetResponseChunks (Ordinal: 396, Address: 0x2290)
  • MgdGetServerVarChanges (Ordinal: 397, Address: 0x654d0)
  • MgdGetServerVariableA (Ordinal: 398, Address: 0x65560)
  • MgdGetServerVariableW (Ordinal: 399, Address: 0x1460)
  • MgdGetSiteNameFromId (Ordinal: 400, Address: 0x7a60)
  • MgdGetStatusChanges (Ordinal: 401, Address: 0x656c0)
  • MgdGetStopListeningEventHandle (Ordinal: 402, Address: 0x5f30)
  • MgdGetTlsTokenBindingIdentifiers (Ordinal: 403, Address: 0x657a0)
  • MgdGetUriPath (Ordinal: 404, Address: 0x36c0)
  • MgdGetUserAgent (Ordinal: 405, Address: 0x3c30)
  • MgdGetUserToken (Ordinal: 406, Address: 0x65910)
  • MgdGetVirtualToken (Ordinal: 407, Address: 0x65a20)
  • MgdGetVrPathCreds (Ordinal: 408, Address: 0x65ad0)
  • MgdGetWebSocketContext (Ordinal: 409, Address: 0x65b80)
  • MgdIndicateCompletion (Ordinal: 410, Address: 0x65c50)
  • MgdInitNativeConfig (Ordinal: 411, Address: 0x65cc0)
  • MgdInsertEntityBody (Ordinal: 412, Address: 0x65ee0)
  • MgdIsAppPoolShuttingDown (Ordinal: 413, Address: 0x65f00)
  • MgdIsClientConnected (Ordinal: 414, Address: 0x65f10)
  • MgdIsHandlerExecutionDenied (Ordinal: 415, Address: 0x65f70)
  • MgdIsInRole (Ordinal: 416, Address: 0x65fa0)
  • MgdIsLastNotification (Ordinal: 417, Address: 0x2a40)
  • MgdIsWithinApp (Ordinal: 418, Address: 0x66060)
  • MgdMapHandler (Ordinal: 419, Address: 0x66360)
  • MgdMapPathDirect (Ordinal: 420, Address: 0x4410)
  • MgdPostCompletion (Ordinal: 421, Address: 0x66660)
  • MgdPushPromise (Ordinal: 422, Address: 0x666d0)
  • MgdRaiseTraceEvent (Ordinal: 423, Address: 0x666f0)
  • MgdReMapHandler (Ordinal: 424, Address: 0x667a0)
  • MgdReadChunkHandle (Ordinal: 425, Address: 0x66940)
  • MgdReadEntityBody (Ordinal: 426, Address: 0x3e60)
  • MgdRegisterEventPriority (Ordinal: 427, Address: 0x66b50)
  • MgdRegisterEventSubscription (Ordinal: 428, Address: 0x5630)
  • MgdReleaseNativeConfigSystem (Ordinal: 429, Address: 0x66b80)
  • MgdResolveSiteName (Ordinal: 430, Address: 0x66b90)
  • MgdResumeRuntime (Ordinal: 431, Address: 0x66c00)
  • MgdReturnBuffer (Ordinal: 432, Address: 0x2c90)
  • MgdRewriteUrl (Ordinal: 433, Address: 0x66c30)
  • MgdSetBadRequestStatus (Ordinal: 434, Address: 0x66cf0)
  • MgdSetKernelCachePolicy (Ordinal: 435, Address: 0x66d20)
  • MgdSetKnownHeader (Ordinal: 436, Address: 0x2020)
  • MgdSetManagedHttpContext (Ordinal: 437, Address: 0x3270)
  • MgdSetMaxConcurrentRequestsPerCPU (Ordinal: 438, Address: 0x66e20)
  • MgdSetMaxConcurrentThreadsPerCPU (Ordinal: 439, Address: 0x66e30)
  • MgdSetNativeConfiguration (Ordinal: 440, Address: 0x79c0)
  • MgdSetRemapHandler (Ordinal: 441, Address: 0x66e40)
  • MgdSetRequestPrincipal (Ordinal: 442, Address: 0x66e60)
  • MgdSetResponseFilter (Ordinal: 443, Address: 0x66e90)
  • MgdSetScriptMapForRemapHandler (Ordinal: 444, Address: 0x66eb0)
  • MgdSetServerVariableW (Ordinal: 445, Address: 0x66ed0)
  • MgdSetStatusW (Ordinal: 446, Address: 0x2340)
  • MgdSetUnknownHeader (Ordinal: 447, Address: 0x2100)
  • MgdSuppressSendResponseNotifications (Ordinal: 448, Address: 0x67010)
  • MgdSuspendRuntime (Ordinal: 449, Address: 0x67030)
  • MgdTerminateNativeConfig (Ordinal: 450, Address: 0x67040)
  • MgdWebSocketCloseTcpConnection (Ordinal: 451, Address: 0x67050)
  • MgdWebSocketGetCloseStatus (Ordinal: 452, Address: 0x67090)
  • MgdWebSocketReadFragment (Ordinal: 453, Address: 0x67100)
  • MgdWebSocketSendConnectionClose (Ordinal: 454, Address: 0x671c0)
  • MgdWebSocketWriteFragment (Ordinal: 455, Address: 0x67250)
  • MonitorGlobalConfigFile (Ordinal: 456, Address: 0x24b50)
  • ?MutexType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 457, Address: 0x5f6b0)
  • ?MutexType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 458, Address: 0x5f6b0)
  • ?MutexType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 459, Address: 0x5f6b0)
  • ?MutexType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 460, Address: 0x5f6b0)
  • ?MutexType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 461, Address: 0x5edf0)
  • ?MutexType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 462, Address: 0x5edf0)
  • ?MutexType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ (Ordinal: 463, Address: 0x5edf0)
  • ?NextBuffer@BUFFER_CHAIN@@QEAAPEAVBUFFER_CHAIN_ITEM@@PEAV2@@Z (Ordinal: 464, Address: 0x61270)
  • PassportCrypt (Ordinal: 465, Address: 0x28220)
  • PassportCryptIsValid (Ordinal: 466, Address: 0x283b0)
  • PassportCryptPut (Ordinal: 467, Address: 0x28410)
  • ?PerLockSpin@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 468, Address: 0x5edf0)
  • ?PerLockSpin@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 469, Address: 0x5edf0)
  • ?PerLockSpin@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 470, Address: 0x5f6b0)
  • ?PerLockSpin@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 471, Address: 0x5eda0)
  • ?PerLockSpin@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 472, Address: 0x5edf0)
  • ?PerLockSpin@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 473, Address: 0x5edf0)
  • ?PerLockSpin@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ (Ordinal: 474, Address: 0x5edf0)
  • PerfCloseAppCounters (Ordinal: 475, Address: 0x2b1e0)
  • PerfCounterInitialize (Ordinal: 476, Address: 0xb230)
  • PerfDecrementCounter (Ordinal: 477, Address: 0x1210)
  • PerfDecrementGlobalCounter (Ordinal: 478, Address: 0x1710)
  • PerfGetCounter (Ordinal: 479, Address: 0x2b200)
  • PerfIncrementCounter (Ordinal: 480, Address: 0x1230)
  • PerfIncrementCounterEx (Ordinal: 481, Address: 0x1220)
  • PerfIncrementGlobalCounter (Ordinal: 482, Address: 0x1730)
  • PerfOpenAppCounters (Ordinal: 483, Address: 0x8030)
  • PerfOpenGlobalCounters (Ordinal: 484, Address: 0x8000)
  • PerfOpenStateCounters (Ordinal: 485, Address: 0x2b230)
  • PerfSetCounter (Ordinal: 486, Address: 0x1240)
  • PerfSetGlobalCounter (Ordinal: 487, Address: 0x2b270)
  • PostThreadPoolWorkItem (Ordinal: 488, Address: 0x58680)
  • PrintResourceString (Ordinal: 489, Address: 0x5da70)
  • PrintResourceStringNoNewLine (Ordinal: 490, Address: 0x5dae0)
  • ?PrivateQueryStr@STRAU@@AEAAPEAGH@Z (Ordinal: 491, Address: 0x60ca0)
  • ?QueryBuffer@STRU@@QEAAPEAVBUFFER@@XZ (Ordinal: 492, Address: 0x5e6c0)
  • ?QueryCB@STRA@@QEBAIXZ (Ordinal: 493, Address: 0x5e6d0)
  • ?QueryCB@STRAU@@QEAAIH@Z (Ordinal: 494, Address: 0x60d30)
  • ?QueryCB@STRU@@QEBAIXZ (Ordinal: 495, Address: 0x5e6e0)
  • ?QueryCBA@STRAU@@QEAAIXZ (Ordinal: 496, Address: 0x60d80)
  • ?QueryCBW@STRAU@@QEAAIXZ (Ordinal: 497, Address: 0x60db0)
  • ?QueryCCH@STRA@@QEBAIXZ (Ordinal: 498, Address: 0x5e6d0)
  • ?QueryCCH@STRAU@@QEAAIXZ (Ordinal: 499, Address: 0x60de0)
  • ?QueryCCH@STRU@@QEBAIXZ (Ordinal: 500, Address: 0x5e6d0)
  • ?QueryPtr@BUFFER@@QEBAPEAXXZ (Ordinal: 501, Address: 0x5e710)
  • ?QuerySize@BUFFER@@QEBAIXZ (Ordinal: 502, Address: 0x5e6f0)
  • ?QuerySize@STRA@@QEBAIXZ (Ordinal: 503, Address: 0x5e6f0)
  • ?QuerySizeCCH@STRA@@QEBAIXZ (Ordinal: 504, Address: 0x5e6f0)
  • ?QuerySizeCCH@STRU@@QEBAIXZ (Ordinal: 505, Address: 0x5e700)
  • ?QueryStr@STRA@@QEAAPEADXZ (Ordinal: 506, Address: 0x5e710)
  • ?QueryStr@STRA@@QEBAPEBDXZ (Ordinal: 507, Address: 0x5e710)
  • ?QueryStr@STRAU@@QEAAPEAGH@Z (Ordinal: 508, Address: 0x60e10)
  • ?QueryStr@STRU@@QEAAPEAGXZ (Ordinal: 509, Address: 0x5e710)
  • ?QueryStr@STRU@@QEBAPEBGXZ (Ordinal: 510, Address: 0x5e710)
  • ?QueryStrA@STRAU@@QEAAPEADXZ (Ordinal: 511, Address: 0x60e30)
  • ?QueryStrW@STRAU@@QEAAPEAGXZ (Ordinal: 512, Address: 0x60e40)
  • ?QueryUsed@BUFFER_CHAIN_ITEM@@QEBAKXZ (Ordinal: 513, Address: 0x5e720)
  • ?QueueType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 514, Address: 0x5eda0)
  • ?QueueType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 515, Address: 0x5eda0)
  • ?QueueType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 516, Address: 0x5f6b0)
  • ?QueueType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 517, Address: 0x5eda0)
  • ?QueueType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 518, Address: 0x5eda0)
  • ?QueueType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 519, Address: 0x5eda0)
  • ?QueueType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ (Ordinal: 520, Address: 0x5eda0)
  • ?ReadLock@CCritSec@@QEAAXXZ (Ordinal: 521, Address: 0x5f6c0)
  • ?ReadLock@CFakeLock@@QEAAXXZ (Ordinal: 522, Address: 0x1270)
  • ?ReadLock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 523, Address: 0x5ee30)
  • ?ReadLock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 524, Address: 0x5ee60)
  • ?ReadLock@CReaderWriterLock@@QEAAXXZ (Ordinal: 525, Address: 0x5ee90)
  • ?ReadLock@CSmallSpinLock@@QEAAXXZ (Ordinal: 526, Address: 0x5eec0)
  • ?ReadLock@CSpinLock@@QEAAXXZ (Ordinal: 527, Address: 0x4de0)
  • ?ReadOrWriteLock@CCritSec@@QEAA_NXZ (Ordinal: 528, Address: 0x5ef00)
  • ?ReadOrWriteLock@CFakeLock@@QEAA_NXZ (Ordinal: 529, Address: 0x1000)
  • ?ReadOrWriteLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 530, Address: 0x5ef20)
  • ?ReadOrWriteLock@CSpinLock@@QEAA_NXZ (Ordinal: 531, Address: 0x5ef80)
  • ?ReadOrWriteUnlock@CCritSec@@QEAAX_N@Z (Ordinal: 532, Address: 0x5f020)
  • ?ReadOrWriteUnlock@CFakeLock@@QEAAX_N@Z (Ordinal: 533, Address: 0x1270)
  • ?ReadOrWriteUnlock@CReaderWriterLock3@@QEAAX_N@Z (Ordinal: 534, Address: 0x5ef90)
  • ?ReadOrWriteUnlock@CSpinLock@@QEAAX_N@Z (Ordinal: 535, Address: 0x60160)
  • ?ReadUnlock@CCritSec@@QEAAXXZ (Ordinal: 536, Address: 0x5f020)
  • ?ReadUnlock@CFakeLock@@QEAAXXZ (Ordinal: 537, Address: 0x1270)
  • ?ReadUnlock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 538, Address: 0x5f030)
  • ?ReadUnlock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 539, Address: 0x5f030)
  • ?ReadUnlock@CReaderWriterLock@@QEAAXXZ (Ordinal: 540, Address: 0x45a0)
  • ?ReadUnlock@CSmallSpinLock@@QEAAXXZ (Ordinal: 541, Address: 0x5f860)
  • ?ReadUnlock@CSpinLock@@QEAAXXZ (Ordinal: 542, Address: 0x60160)
  • ?ReallocStorage@BUFFER@@AEAAHI@Z (Ordinal: 543, Address: 0x55c0)
  • ?Recursion@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 544, Address: 0x5eda0)
  • ?Recursion@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 545, Address: 0x5f6b0)
  • ?Recursion@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 546, Address: 0x5f6b0)
  • ?Recursion@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 547, Address: 0x5f6b0)
  • ?Recursion@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 548, Address: 0x5edf0)
  • ?Recursion@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 549, Address: 0x5edf0)
  • ?Recursion@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ (Ordinal: 550, Address: 0x5f6b0)
  • RegisterAspNetMMC (Ordinal: 551, Address: 0x4be00)
  • RegisterModule (Ordinal: 552, Address: 0xd450)
  • RegisterScriptMapsEx (Ordinal: 553, Address: 0x38220)
  • ?Reset@STRA@@QEAAXXZ (Ordinal: 554, Address: 0x5e730)
  • ?Reset@STRAU@@QEAAXXZ (Ordinal: 555, Address: 0x60e50)
  • ?Reset@STRU@@QEAAXXZ (Ordinal: 556, Address: 0x5e740)
  • ?Resize@BUFFER@@QEAAHI@Z (Ordinal: 557, Address: 0x5e750)
  • ?Resize@BUFFER@@QEAAHII@Z (Ordinal: 558, Address: 0x5e760)
  • ?Resize@STRA@@QEAAJK@Z (Ordinal: 559, Address: 0x5e7a0)
  • ?Resize@STRU@@QEAAJK@Z (Ordinal: 560, Address: 0x5e7a0)
  • ?ResizeW@STRAU@@QEAAHK@Z (Ordinal: 561, Address: 0x60e70)
  • RolesCreateTicket (Ordinal: 562, Address: 0x56a80)
  • RolesParseTicket (Ordinal: 563, Address: 0x56bf0)
  • ?SAFE_snwprintf@@YAJPEAVSTRU@@PEBGZZ (Ordinal: 564, Address: 0x62930)
  • ?SafeCopy@STRAU@@QEAAHPEBD@Z (Ordinal: 565, Address: 0x60e90)
  • ?SafeCopy@STRAU@@QEAAHPEBG@Z (Ordinal: 566, Address: 0x60f50)
  • ?SetDefaultSpinAdjustmentFactor@CCritSec@@SAXN@Z (Ordinal: 567, Address: 0x5f070)
  • ?SetDefaultSpinAdjustmentFactor@CFakeLock@@SAXN@Z (Ordinal: 568, Address: 0x5f0a0)
  • ?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SAXN@Z (Ordinal: 569, Address: 0x5f0d0)
  • ?SetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SAXN@Z (Ordinal: 570, Address: 0x5f100)
  • ?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SAXN@Z (Ordinal: 571, Address: 0x5f130)
  • ?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SAXN@Z (Ordinal: 572, Address: 0x5f160)
  • ?SetDefaultSpinAdjustmentFactor@CSpinLock@@SAXN@Z (Ordinal: 573, Address: 0x5f190)
  • ?SetDefaultSpinCount@CCritSec@@SAXG@Z (Ordinal: 574, Address: 0x5f1c0)
  • ?SetDefaultSpinCount@CFakeLock@@SAXG@Z (Ordinal: 575, Address: 0x5f200)
  • ?SetDefaultSpinCount@CReaderWriterLock2@@SAXG@Z (Ordinal: 576, Address: 0x5f240)
  • ?SetDefaultSpinCount@CReaderWriterLock3@@SAXG@Z (Ordinal: 577, Address: 0x5f280)
  • ?SetDefaultSpinCount@CReaderWriterLock@@SAXG@Z (Ordinal: 578, Address: 0x5f2c0)
  • ?SetDefaultSpinCount@CSmallSpinLock@@SAXG@Z (Ordinal: 579, Address: 0x5f300)
  • ?SetDefaultSpinCount@CSpinLock@@SAXG@Z (Ordinal: 580, Address: 0x5f340)
  • ?SetLen@STRA@@QEAAHK@Z (Ordinal: 581, Address: 0x5e7d0)
  • ?SetLen@STRAU@@QEAAHK@Z (Ordinal: 582, Address: 0x61010)
  • ?SetLen@STRU@@QEAAHK@Z (Ordinal: 583, Address: 0x5e7f0)
  • SetRemoteConfigDCOMRegKeys (Ordinal: 584, Address: 0x4d410)
  • ?SetSpinCount@CCritSec@@QEAA_NG@Z (Ordinal: 585, Address: 0x5f380)
  • ?SetSpinCount@CCritSec@@SAKPEAU_RTL_CRITICAL_SECTION@@K@Z (Ordinal: 586, Address: 0x5f3a0)
  • ?SetSpinCount@CFakeLock@@QEAA_NG@Z (Ordinal: 587, Address: 0x5f3e0)
  • ?SetSpinCount@CReaderWriterLock2@@QEAA_NG@Z (Ordinal: 588, Address: 0x5f3e0)
  • ?SetSpinCount@CReaderWriterLock3@@QEAA_NG@Z (Ordinal: 589, Address: 0x5f3e0)
  • ?SetSpinCount@CReaderWriterLock@@QEAA_NG@Z (Ordinal: 590, Address: 0x5f3e0)
  • ?SetSpinCount@CSmallSpinLock@@QEAA_NG@Z (Ordinal: 591, Address: 0x5f3e0)
  • ?SetSpinCount@CSpinLock@@QEAA_NG@Z (Ordinal: 592, Address: 0x5f3e0)
  • ?SetUsed@BUFFER_CHAIN_ITEM@@QEAAXK@Z (Ordinal: 593, Address: 0x5e820)
  • ?SetValid@BUFFER@@QEAAXH@Z (Ordinal: 594, Address: 0x5e830)
  • StartPrefetchActivity (Ordinal: 595, Address: 0x2bc00)
  • ?SyncWithBuffer@STRA@@QEAAXXZ (Ordinal: 596, Address: 0x5e840)
  • ?SyncWithBuffer@STRU@@QEAAXXZ (Ordinal: 597, Address: 0x5e860)
  • TransactManagedCallback (Ordinal: 598, Address: 0x591a0)
  • ?TryConvertSharedToExclusive@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 599, Address: 0x5f420)
  • ?TryReadLock@CCritSec@@QEAA_NXZ (Ordinal: 600, Address: 0x5f460)
  • ?TryReadLock@CFakeLock@@QEAA_NXZ (Ordinal: 601, Address: 0x1000)
  • ?TryReadLock@CReaderWriterLock2@@QEAA_NXZ (Ordinal: 602, Address: 0x5f470)
  • ?TryReadLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 603, Address: 0x5f470)
  • ?TryReadLock@CReaderWriterLock@@QEAA_NXZ (Ordinal: 604, Address: 0x5f4a0)
  • ?TryReadLock@CSmallSpinLock@@QEAA_NXZ (Ordinal: 605, Address: 0x5f4d0)
  • ?TryReadLock@CSpinLock@@QEAA_NXZ (Ordinal: 606, Address: 0x5f670)
  • ?TryReadOrWriteLock@CReaderWriterLock3@@QEAA_NAEA_N@Z (Ordinal: 607, Address: 0x5f500)
  • ?TryWriteLock@CCritSec@@QEAA_NXZ (Ordinal: 608, Address: 0x5f560)
  • ?TryWriteLock@CFakeLock@@QEAA_NXZ (Ordinal: 609, Address: 0x1000)
  • ?TryWriteLock@CReaderWriterLock2@@QEAA_NXZ (Ordinal: 610, Address: 0x5f5a0)
  • ?TryWriteLock@CReaderWriterLock3@@QEAA_NXZ (Ordinal: 611, Address: 0x5f5d0)
  • ?TryWriteLock@CReaderWriterLock@@QEAA_NXZ (Ordinal: 612, Address: 0x5f640)
  • ?TryWriteLock@CSmallSpinLock@@QEAA_NXZ (Ordinal: 613, Address: 0x5f4d0)
  • ?TryWriteLock@CSpinLock@@QEAA_NXZ (Ordinal: 614, Address: 0x5f670)
  • UnInitializeManagedCode (Ordinal: 615, Address: 0x25ba0)
  • ?Unescape@STRA@@QEAAJXZ (Ordinal: 616, Address: 0x61f00)
  • ?Unescape@STRU@@QEAAJXZ (Ordinal: 617, Address: 0x62a70)
  • UpdateLastActivityTimeForHealthMonitor (Ordinal: 618, Address: 0x24d50)
  • ?VerifyState@BUFFER@@AEBAXXZ (Ordinal: 619, Address: 0x1270)
  • ?WaitType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 620, Address: 0x5f6b0)
  • ?WaitType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 621, Address: 0x5f6b0)
  • ?WaitType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 622, Address: 0x5f6b0)
  • ?WaitType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 623, Address: 0x5edf0)
  • ?WaitType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 624, Address: 0x5f6b0)
  • ?WaitType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 625, Address: 0x5f6b0)
  • ?WaitType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ (Ordinal: 626, Address: 0x5f6b0)
  • ?WriteLock@CCritSec@@QEAAXXZ (Ordinal: 627, Address: 0x5f6c0)
  • ?WriteLock@CFakeLock@@QEAAXXZ (Ordinal: 628, Address: 0x1270)
  • ?WriteLock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 629, Address: 0x5f6d0)
  • ?WriteLock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 630, Address: 0x5f700)
  • ?WriteLock@CReaderWriterLock@@QEAAXXZ (Ordinal: 631, Address: 0x5f780)
  • ?WriteLock@CSmallSpinLock@@QEAAXXZ (Ordinal: 632, Address: 0x5eec0)
  • ?WriteLock@CSpinLock@@QEAAXXZ (Ordinal: 633, Address: 0x4de0)
  • ?WriteUnlock@CCritSec@@QEAAXXZ (Ordinal: 634, Address: 0x5f020)
  • ?WriteUnlock@CFakeLock@@QEAAXXZ (Ordinal: 635, Address: 0x1270)
  • ?WriteUnlock@CReaderWriterLock2@@QEAAXXZ (Ordinal: 636, Address: 0x5f7b0)
  • ?WriteUnlock@CReaderWriterLock3@@QEAAXXZ (Ordinal: 637, Address: 0x5f7f0)
  • ?WriteUnlock@CReaderWriterLock@@QEAAXXZ (Ordinal: 638, Address: 0x5f850)
  • ?WriteUnlock@CSmallSpinLock@@QEAAXXZ (Ordinal: 639, Address: 0x5f860)
  • ?WriteUnlock@CSpinLock@@QEAAXXZ (Ordinal: 640, Address: 0x60160)
  • ?_CmpExch@CReaderWriterLock2@@AEAA_NJJ@Z (Ordinal: 641, Address: 0x5f870)
  • ?_CmpExch@CReaderWriterLock3@@AEAA_NJJ@Z (Ordinal: 642, Address: 0x5f870)
  • ?_CmpExch@CReaderWriterLock@@AEAA_NJJ@Z (Ordinal: 643, Address: 0x5f870)
  • ?_CurrentThreadId@CReaderWriterLock3@@CAJXZ (Ordinal: 644, Address: 0x5f880)
  • ?_CurrentThreadId@CSmallSpinLock@@CAJXZ (Ordinal: 645, Address: 0x5f8a0)
  • ?_CurrentThreadId@CSpinLock@@CAJXZ (Ordinal: 646, Address: 0x5f880)
  • ?_IsLocked@CSpinLock@@AEBA_NXZ (Ordinal: 647, Address: 0x5ed10)
  • ?_Lock@CSpinLock@@AEAAXXZ (Ordinal: 648, Address: 0x5f8b0)
  • ?_LockSpin@CReaderWriterLock2@@AEAAX_N@Z (Ordinal: 649, Address: 0x5f8f0)
  • ?_LockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z (Ordinal: 650, Address: 0x5fa10)
  • ?_LockSpin@CReaderWriterLock@@AEAAX_N@Z (Ordinal: 651, Address: 0x5fb90)
  • ?_LockSpin@CSmallSpinLock@@AEAAXXZ (Ordinal: 652, Address: 0x5fcb0)
  • ?_LockSpin@CSpinLock@@AEAAXXZ (Ordinal: 653, Address: 0x5fdd0)
  • ?_ReadLockSpin@CReaderWriterLock2@@AEAAXXZ (Ordinal: 654, Address: 0x5ff10)
  • ?_ReadLockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z (Ordinal: 655, Address: 0x5ff20)
  • ?_ReadLockSpin@CReaderWriterLock@@AEAAXXZ (Ordinal: 656, Address: 0x5ff30)
  • ?_TryLock@CSmallSpinLock@@AEAA_NXZ (Ordinal: 657, Address: 0x5ff40)
  • ?_TryLock@CSpinLock@@AEAA_NXZ (Ordinal: 658, Address: 0x5ff80)
  • ?_TryReadLock@CReaderWriterLock2@@AEAA_NXZ (Ordinal: 659, Address: 0x5ffc0)
  • ?_TryReadLock@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 660, Address: 0x5f470)
  • ?_TryReadLock@CReaderWriterLock@@AEAA_NXZ (Ordinal: 661, Address: 0x5fff0)
  • ?_TryReadLockRecursive@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 662, Address: 0x60020)
  • ?_TryWriteLock2@CReaderWriterLock3@@AEAA_NXZ (Ordinal: 663, Address: 0x60050)
  • ?_TryWriteLock@CReaderWriterLock2@@AEAA_NJ@Z (Ordinal: 664, Address: 0x60090)
  • ?_TryWriteLock@CReaderWriterLock3@@AEAA_NJ@Z (Ordinal: 665, Address: 0x600c0)
  • ?_TryWriteLock@CReaderWriterLock@@AEAA_NXZ (Ordinal: 666, Address: 0x60140)
  • ?_Unlock@CSpinLock@@AEAAXXZ (Ordinal: 667, Address: 0x60160)
  • ?_WriteLockSpin@CReaderWriterLock2@@AEAAXXZ (Ordinal: 668, Address: 0x60180)
  • ?_WriteLockSpin@CReaderWriterLock3@@AEAAXXZ (Ordinal: 669, Address: 0x601c0)
  • ?_WriteLockSpin@CReaderWriterLock@@AEAAXXZ (Ordinal: 670, Address: 0x60200)
  • ?sm_dblDfltSpinAdjFctr@CCritSec@@1NA (Ordinal: 671, Address: 0x92020)
  • ?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA (Ordinal: 672, Address: 0x92018)
  • ?sm_dblDfltSpinAdjFctr@CReaderWriterLock2@@1NA (Ordinal: 673, Address: 0x92038)
  • ?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA (Ordinal: 674, Address: 0x92048)
  • ?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA (Ordinal: 675, Address: 0x92030)
  • ?sm_dblDfltSpinAdjFctr@CSmallSpinLock@@1NA (Ordinal: 676, Address: 0x92050)
  • ?sm_dblDfltSpinAdjFctr@CSpinLock@@1NA (Ordinal: 677, Address: 0x92008)
  • ?sm_wDefaultSpinCount@CCritSec@@1GA (Ordinal: 678, Address: 0x92014)
  • ?sm_wDefaultSpinCount@CFakeLock@@1GA (Ordinal: 679, Address: 0x92010)
  • ?sm_wDefaultSpinCount@CReaderWriterLock2@@1GA (Ordinal: 680, Address: 0x9202c)
  • ?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA (Ordinal: 681, Address: 0x92040)
  • ?sm_wDefaultSpinCount@CReaderWriterLock@@1GA (Ordinal: 682, Address: 0x92028)
  • ?sm_wDefaultSpinCount@CSmallSpinLock@@1GA (Ordinal: 683, Address: 0x92044)
  • ?sm_wDefaultSpinCount@CSpinLock@@1GA (Ordinal: 684, Address: 0x92000)
  • AspNetGetExtensionVersion (Ordinal: 685, Address: 0x25d70)
  • AspNetHttpExtensionProc (Ordinal: 686, Address: 0x25ee0)
  • AspNetTerminateExtension (Ordinal: 687, Address: 0x26220)
  • AttachHandleToThreadPool (Ordinal: 688, Address: 0x4620)
  • ClrQueueUserWorkItem (Ordinal: 689, Address: 0x1f40)
  • CopyClientScriptFiles (Ordinal: 690, Address: 0x4fb20)
  • DBGNDAssert (Ordinal: 691, Address: 0x46f0)
  • DBGNDIsTagEnabled (Ordinal: 692, Address: 0x46f0)
  • DBGNDIsTagPresent (Ordinal: 693, Address: 0x46f0)
  • DBGNDLaunchCordbg (Ordinal: 694, Address: 0x1270)
  • DBGNDMessageBoxOnThread (Ordinal: 695, Address: 0x46f0)
  • DBGNDTrace (Ordinal: 696, Address: 0x46f0)
  • DbgpAssert (Ordinal: 697, Address: 0x46f0)
  • DbgpDisableAssertThread (Ordinal: 698, Address: 0x20a50)
  • DbgpIsTagEnabled (Ordinal: 699, Address: 0x46f0)
  • DbgpIsTagPresent (Ordinal: 700, Address: 0x46f0)
  • DbgpTrace (Ordinal: 701, Address: 0x20a70)
  • DbgpTraceError (Ordinal: 702, Address: 0x46f0)
  • DbgpTraceV (Ordinal: 703, Address: 0x46f0)
  • DetectErrorAndGetLogfileName (Ordinal: 704, Address: 0x4fb60)
  • DllRegisterServer (Ordinal: 705, Address: 0x4fb80)
  • DllUnregisterServer (Ordinal: 706, Address: 0x4fbd0)
  • DrainThreadPool (Ordinal: 707, Address: 0x58b50)
  • GetDirMonConfiguration (Ordinal: 708, Address: 0x7b10)
  • GetEcb (Ordinal: 709, Address: 0x25bb0)
  • GetEtwValues (Ordinal: 710, Address: 0x1cd40)
  • GetExistingVersion (Ordinal: 711, Address: 0x4fc10)
  • GetPrivateBytesIIS6 (Ordinal: 712, Address: 0x1380)
  • GetProcessMemoryInformation (Ordinal: 713, Address: 0x2eb00)
  • GetW3WPMemoryLimitInKB (Ordinal: 714, Address: 0x2ed30)
  • GrantAccessToUserAccount (Ordinal: 715, Address: 0x4fc20)
  • GrantAccessToUserAccountOnVista (Ordinal: 716, Address: 0x4fc90)
  • HardBreak (Ordinal: 717, Address: 0x209d0)
  • InitializeWmiManager (Ordinal: 718, Address: 0x5af50)
  • InstallAspNetMMCComComponents (Ordinal: 719, Address: 0x4fd20)
  • InstallAspNetMOF (Ordinal: 720, Address: 0x4fed0)
  • InstallServices (Ordinal: 721, Address: 0x4ff00)
  • Is64Installed (Ordinal: 722, Address: 0x505e0)
  • IsMatchingBitness (Ordinal: 723, Address: 0x39e40)
  • IsRegisteredInProc (Ordinal: 724, Address: 0x39ea0)
  • IsWow64 (Ordinal: 725, Address: 0x50610)
  • ListAspnetInstalledIISKeys (Ordinal: 726, Address: 0x50640)
  • ListAspnetInstalledVersions (Ordinal: 727, Address: 0x50680)
  • LogWebeventProviderFailure (Ordinal: 728, Address: 0x59ef0)
  • MessageBoxOnThread (Ordinal: 729, Address: 0x20a80)
  • PassportAuthURL (Ordinal: 730, Address: 0x28e30)
  • PassportAuthURL2 (Ordinal: 731, Address: 0x28ec0)
  • PassportCommit (Ordinal: 732, Address: 0x28f50)
  • PassportCreate (Ordinal: 733, Address: 0x29030)
  • PassportCreateHttpRaw (Ordinal: 734, Address: 0x29590)
  • PassportDestroy (Ordinal: 735, Address: 0x29810)
  • PassportDomainFromMemberName (Ordinal: 736, Address: 0x29820)
  • PassportGetCurrentConfig (Ordinal: 737, Address: 0x29950)
  • PassportGetDomainAttribute (Ordinal: 738, Address: 0x29a30)
  • PassportGetError (Ordinal: 739, Address: 0x29be0)
  • PassportGetFromNetworkServer (Ordinal: 740, Address: 0x29c30)
  • PassportGetHasSavedPassword (Ordinal: 741, Address: 0x29c90)
  • PassportGetLoginChallenge (Ordinal: 742, Address: 0x29d00)
  • PassportGetOption (Ordinal: 743, Address: 0x2a130)
  • PassportGetProfile (Ordinal: 744, Address: 0x2a200)
  • PassportGetProfileString (Ordinal: 745, Address: 0x2a280)
  • PassportGetTicketAge (Ordinal: 746, Address: 0x2a3e0)
  • PassportGetTimeSinceSignIn (Ordinal: 747, Address: 0x2a430)
  • PassportHasConsent (Ordinal: 748, Address: 0x2a480)
  • PassportHasFlag (Ordinal: 749, Address: 0x2a500)
  • PassportHasProfile (Ordinal: 750, Address: 0x2a590)
  • PassportHasTicket (Ordinal: 751, Address: 0x2a640)
  • PassportHexPUID (Ordinal: 752, Address: 0x2a6b0)
  • PassportIsAuthenticated (Ordinal: 753, Address: 0x2a7b0)
  • PassportLogoTag (Ordinal: 754, Address: 0x2a8f0)
  • PassportLogoTag2 (Ordinal: 755, Address: 0x2a980)
  • PassportLogoutURL (Ordinal: 756, Address: 0x2aa10)
  • PassportPutProfile (Ordinal: 757, Address: 0x2ace0)
  • PassportPutProfileString (Ordinal: 758, Address: 0x2ad60)
  • PassportSetOption (Ordinal: 759, Address: 0x2add0)
  • PassportTicket (Ordinal: 760, Address: 0x2aeb0)
  • PassportVersion (Ordinal: 761, Address: 0x2af90)
  • PostThreadPoolCompletion (Ordinal: 762, Address: 0x58c20)
  • PrintStringToStdOut (Ordinal: 763, Address: 0x5daf0)
  • RaiseEventlogEvent (Ordinal: 764, Address: 0x4e50)
  • RaiseFileMonitoringEventlogEvent (Ordinal: 765, Address: 0x59f30)
  • RaiseWmiEvent (Ordinal: 766, Address: 0x5af60)
  • RegisterAspNet (Ordinal: 767, Address: 0x506c0)
  • RegisterAspNetEx (Ordinal: 768, Address: 0x50700)
  • RegisterScriptMapsOnVista (Ordinal: 769, Address: 0x50740)
  • ReleaseWmiEventManager (Ordinal: 770, Address: 0x5af80)
  • RemoveAspnetFromIISKey (Ordinal: 771, Address: 0x50780)
  • RemoveClientScriptFiles (Ordinal: 772, Address: 0x507c0)
  • ReportUnhandledException (Ordinal: 773, Address: 0x5a160)
  • RestrictIISFoldersWithPath (Ordinal: 774, Address: 0x3a000)
  • RunAspnetCA (Ordinal: 775, Address: 0x50860)
  • RunPkgmgr (Ordinal: 776, Address: 0x50960)
  • RunningOn64Bit (Ordinal: 777, Address: 0x3a080)
  • SessionNDCloseConnection (Ordinal: 778, Address: 0x581c0)
  • SessionNDConnectToService (Ordinal: 779, Address: 0x581e0)
  • SessionNDFreeBody (Ordinal: 780, Address: 0x9e00)
  • SessionNDMakeRequest (Ordinal: 781, Address: 0x58280)
  • SetClrThreadPoolLimits (Ordinal: 782, Address: 0x7930)
  • SetDoneWithSessionCalled (Ordinal: 783, Address: 0x25bc0)
  • SetMinRequestsExecutingToDetectDeadlock (Ordinal: 784, Address: 0x5890)
  • TraceEnabled (Ordinal: 785, Address: 0x1cd60)
  • TraceRaiseEvent (Ordinal: 786, Address: 0x1ce00)
  • TraceRaiseEventMgdHandler (Ordinal: 787, Address: 0x1ce50)
  • TraceRaiseEventWithEcb (Ordinal: 788, Address: 0x1ce60)
  • UninstallAspNetLP (Ordinal: 789, Address: 0x50a20)
  • UnregisterAspNet (Ordinal: 790, Address: 0x50a60)
  • ValidateIISPath (Ordinal: 791, Address: 0x50ab0)
  • XspLogEvent (Ordinal: 792, Address: 0x23fc0)
  • XspLogEventCateg (Ordinal: 793, Address: 0x24000)

Imported DLLs & Functions

KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x18006e398)
  • AcquireSRWLockShared (Address: 0x18006e390)
  • AddAtomW (Address: 0x18006e150)
  • CloseHandle (Address: 0x18006e010)
  • CompareFileTime (Address: 0x18006e340)
  • CompareStringW (Address: 0x18006e3f8)
  • ConnectNamedPipe (Address: 0x18006e228)
  • CopyFileW (Address: 0x18006e2d0)
  • CreateDirectoryW (Address: 0x18006e2a0)
  • CreateEventW (Address: 0x18006e258)
  • CreateFileW (Address: 0x18006e0b8)
  • CreateIoCompletionPort (Address: 0x18006e348)
  • CreateMutexW (Address: 0x18006e190)
  • CreateNamedPipeW (Address: 0x18006e020)
  • CreateProcessW (Address: 0x18006e270)
  • CreateRemoteThread (Address: 0x18006e360)
  • CreateThread (Address: 0x18006e0e8)
  • CreateTimerQueueTimer (Address: 0x18006e3d8)
  • DebugBreak (Address: 0x18006e290)
  • DeleteCriticalSection (Address: 0x18006e050)
  • DeleteFileW (Address: 0x18006e2d8)
  • DeleteTimerQueueTimer (Address: 0x18006e3d0)
  • DisableThreadLibraryCalls (Address: 0x18006e1c0)
  • DisconnectNamedPipe (Address: 0x18006e230)
  • DuplicateHandle (Address: 0x18006e110)
  • EnterCriticalSection (Address: 0x18006e038)
  • ExpandEnvironmentStringsW (Address: 0x18006e1d0)
  • FindAtomW (Address: 0x18006e158)
  • FindClose (Address: 0x18006e1d8)
  • FindFirstFileExW (Address: 0x18006e218)
  • FindFirstFileW (Address: 0x18006e1e0)
  • FindNextFileW (Address: 0x18006e220)
  • FindResourceW (Address: 0x18006e310)
  • FlushFileBuffers (Address: 0x18006e320)
  • FormatMessageA (Address: 0x18006e148)
  • FormatMessageW (Address: 0x18006e0a0)
  • FreeLibrary (Address: 0x18006e168)
  • GetComputerNameW (Address: 0x18006e2b8)
  • GetConsoleMode (Address: 0x18006e418)
  • GetConsoleOutputCP (Address: 0x18006e210)
  • GetCurrentProcess (Address: 0x18006e068)
  • GetCurrentProcessId (Address: 0x18006e070)
  • GetCurrentThread (Address: 0x18006e078)
  • GetCurrentThreadId (Address: 0x18006e0d8)
  • GetDateFormatA (Address: 0x18006e328)
  • GetEnvironmentVariableW (Address: 0x18006e240)
  • GetExitCodeProcess (Address: 0x18006e268)
  • GetFileAttributesExW (Address: 0x18006e0c0)
  • GetFileAttributesW (Address: 0x18006e2a8)
  • GetFileSize (Address: 0x18006e138)
  • GetFileSizeEx (Address: 0x18006e3f0)
  • GetFileType (Address: 0x18006e420)
  • GetLastError (Address: 0x18006e018)
  • GetLocaleInfoW (Address: 0x18006e1f8)
  • GetLongPathNameW (Address: 0x18006e0f0)
  • GetModuleFileNameW (Address: 0x18006e118)
  • GetModuleHandleA (Address: 0x18006e370)
  • GetModuleHandleW (Address: 0x18006e120)
  • GetOverlappedResult (Address: 0x18006e028)
  • GetProcAddress (Address: 0x18006e170)
  • GetProcessAffinityMask (Address: 0x18006e428)
  • GetProcessHeap (Address: 0x18006e1a8)
  • GetQueuedCompletionStatus (Address: 0x18006e350)
  • GetStdHandle (Address: 0x18006e1c8)
  • GetSystemDefaultLangID (Address: 0x18006e408)
  • GetSystemDefaultUILanguage (Address: 0x18006e200)
  • GetSystemDirectoryW (Address: 0x18006e2c8)
  • GetSystemInfo (Address: 0x18006e280)
  • GetSystemTimeAsFileTime (Address: 0x18006e0f8)
  • GetSystemWindowsDirectoryW (Address: 0x18006e2b0)
  • GetTempFileNameW (Address: 0x18006e2e0)
  • GetTempPathW (Address: 0x18006e2e8)
  • GetTickCount (Address: 0x18006e0c8)
  • GetTimeFormatA (Address: 0x18006e330)
  • GetUserDefaultUILanguage (Address: 0x18006e208)
  • GetVersionExW (Address: 0x18006e238)
  • GetWindowsDirectoryW (Address: 0x18006e2f0)
  • GlobalAlloc (Address: 0x18006e198)
  • GlobalFree (Address: 0x18006e1a0)
  • GlobalMemoryStatus (Address: 0x18006e298)
  • HeapAlloc (Address: 0x18006e088)
  • HeapCreate (Address: 0x18006e080)
  • HeapFree (Address: 0x18006e090)
  • HeapReAlloc (Address: 0x18006e438)
  • HeapSize (Address: 0x18006e430)
  • InitializeCriticalSection (Address: 0x18006e030)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18006e1b0)
  • InitializeSListHead (Address: 0x18006e388)
  • InitializeSRWLock (Address: 0x18006e3b0)
  • IsDebuggerPresent (Address: 0x18006e380)
  • IsProcessorFeaturePresent (Address: 0x18006e378)
  • LeaveCriticalSection (Address: 0x18006e040)
  • LoadLibraryExA (Address: 0x18006e470)
  • LoadLibraryExW (Address: 0x18006e1e8)
  • LoadLibraryW (Address: 0x18006e178)
  • LoadResource (Address: 0x18006e2f8)
  • LocalAlloc (Address: 0x18006e2c0)
  • LocalFree (Address: 0x18006e108)
  • LocalReAlloc (Address: 0x18006e400)
  • LockResource (Address: 0x18006e300)
  • lstrcmpW (Address: 0x18006e1f0)
  • lstrlenA (Address: 0x18006e0a8)
  • lstrlenW (Address: 0x18006e058)
  • MultiByteToWideChar (Address: 0x18006e140)
  • OpenProcess (Address: 0x18006e278)
  • OutputDebugStringA (Address: 0x18006e3e8)
  • OutputDebugStringW (Address: 0x18006e0d0)
  • PostQueuedCompletionStatus (Address: 0x18006e358)
  • QueryPerformanceCounter (Address: 0x18006e468)
  • RaiseException (Address: 0x18006e488)
  • ReadDirectoryChangesW (Address: 0x18006e100)
  • ReadFile (Address: 0x18006e000)
  • ReadProcessMemory (Address: 0x18006e368)
  • ReleaseMutex (Address: 0x18006e180)
  • ReleaseSRWLockExclusive (Address: 0x18006e3a8)
  • ReleaseSRWLockShared (Address: 0x18006e3a0)
  • RemoveDirectoryW (Address: 0x18006e338)
  • ResetEvent (Address: 0x18006e250)
  • RtlCaptureContext (Address: 0x18006e460)
  • RtlCaptureStackBackTrace (Address: 0x18006e3c0)
  • RtlLookupFunctionEntry (Address: 0x18006e458)
  • RtlVirtualUnwind (Address: 0x18006e450)
  • SetEvent (Address: 0x18006e248)
  • SetLastError (Address: 0x18006e160)
  • SetUnhandledExceptionFilter (Address: 0x18006e440)
  • SizeofResource (Address: 0x18006e308)
  • Sleep (Address: 0x18006e060)
  • SwitchToThread (Address: 0x18006e098)
  • TerminateProcess (Address: 0x18006e260)
  • TlsAlloc (Address: 0x18006e1b8)
  • TlsFree (Address: 0x18006e3e0)
  • TlsGetValue (Address: 0x18006e128)
  • TlsSetValue (Address: 0x18006e130)
  • TryEnterCriticalSection (Address: 0x18006e048)
  • UnhandledExceptionFilter (Address: 0x18006e448)
  • VirtualAlloc (Address: 0x18006e3c8)
  • VirtualFree (Address: 0x18006e3b8)
  • VirtualProtect (Address: 0x18006e480)
  • VirtualQuery (Address: 0x18006e478)
  • WaitForMultipleObjects (Address: 0x18006e288)
  • WaitForSingleObject (Address: 0x18006e0e0)
  • WaitForSingleObjectEx (Address: 0x18006e188)
  • WideCharToMultiByte (Address: 0x18006e0b0)
  • WriteConsoleW (Address: 0x18006e410)
  • WriteFile (Address: 0x18006e008)
  • WritePrivateProfileStringW (Address: 0x18006e318)
ntdll.dll
  • NtQueryInformationProcess (Address: 0x18006e520)
  • NtQueryInformationThread (Address: 0x18006e528)
  • NtQuerySystemInformation (Address: 0x18006e518)
PSAPI.DLL
  • GetModuleFileNameExW (Address: 0x18006e508)
  • GetProcessMemoryInfo (Address: 0x18006e500)
ucrtbase_clr0400.dll
  • __stdio_common_vsnprintf_s (Address: 0x18006e740)
  • __stdio_common_vsnwprintf_s (Address: 0x18006e6d0)
  • __stdio_common_vsprintf (Address: 0x18006e698)
  • __stdio_common_vsprintf_s (Address: 0x18006e640)
  • __stdio_common_vsscanf (Address: 0x18006e670)
  • __stdio_common_vswprintf (Address: 0x18006e748)
  • __stdio_common_vswscanf (Address: 0x18006e6b8)
  • _atoi64 (Address: 0x18006e688)
  • _beginthread (Address: 0x18006e738)
  • _cexit (Address: 0x18006e620)
  • _configure_narrow_argv (Address: 0x18006e5f0)
  • _crt_atexit (Address: 0x18006e750)
  • _errno (Address: 0x18006e6c0)
  • _execute_onexit_table (Address: 0x18006e6f8)
  • _initialize_narrow_environment (Address: 0x18006e5f8)
  • _initialize_onexit_table (Address: 0x18006e600)
  • _initterm (Address: 0x18006e5d8)
  • _initterm_e (Address: 0x18006e5e0)
  • _itoa_s (Address: 0x18006e678)
  • _itow_s (Address: 0x18006e6c8)
  • _register_onexit_function (Address: 0x18006e608)
  • _seh_filter_dll (Address: 0x18006e5e8)
  • _set_error_mode (Address: 0x18006e6d8)
  • _stricmp (Address: 0x18006e728)
  • _strnicmp (Address: 0x18006e718)
  • _ultoa_s (Address: 0x18006e6a0)
  • _wcsicmp (Address: 0x18006e630)
  • _wcslwr (Address: 0x18006e660)
  • _wcsnicmp (Address: 0x18006e6e8)
  • _wtoi (Address: 0x18006e628)
  • _wtol (Address: 0x18006e658)
  • atoi (Address: 0x18006e710)
  • bsearch (Address: 0x18006e618)
  • isdigit (Address: 0x18006e690)
  • iswalnum (Address: 0x18006e708)
  • iswspace (Address: 0x18006e700)
  • iswxdigit (Address: 0x18006e610)
  • isxdigit (Address: 0x18006e650)
  • strcat_s (Address: 0x18006e648)
  • strcmp (Address: 0x18006e5c8)
  • strncmp (Address: 0x18006e720)
  • strtol (Address: 0x18006e680)
  • strtoul (Address: 0x18006e638)
  • towlower (Address: 0x18006e668)
  • wcscmp (Address: 0x18006e730)
  • wcscpy_s (Address: 0x18006e6b0)
  • wcsncmp (Address: 0x18006e758)
  • wcsncpy_s (Address: 0x18006e6a8)
  • wcstok_s (Address: 0x18006e6f0)
  • wcstol (Address: 0x18006e5d0)
  • wcstoul (Address: 0x18006e6e0)
USER32.dll
  • CharNextA (Address: 0x18006e498)
  • CharNextExA (Address: 0x18006e4c8)
  • CharPrevW (Address: 0x18006e4b0)
  • GetUserObjectSecurity (Address: 0x18006e4a8)
  • LoadStringA (Address: 0x18006e4a0)
  • MessageBoxW (Address: 0x18006e4b8)
  • PeekMessageW (Address: 0x18006e4d0)
  • SetUserObjectSecurity (Address: 0x18006e4c0)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x18006e4f0)
  • DestroyEnvironmentBlock (Address: 0x18006e4e0)
  • LoadUserProfileW (Address: 0x18006e4e8)
VCRUNTIME140_CLR0400.dll
  • __C_specific_handler (Address: 0x18006e550)
  • __CxxFrameHandler3 (Address: 0x18006e5a0)
  • __std_terminate (Address: 0x18006e598)
  • __std_type_info_destroy_list (Address: 0x18006e5b0)
  • __vcrt_InitializeCriticalSectionEx (Address: 0x18006e5a8)
  • _purecall (Address: 0x18006e560)
  • memchr (Address: 0x18006e570)
  • memcmp (Address: 0x18006e558)
  • memcpy (Address: 0x18006e540)
  • memmove (Address: 0x18006e590)
  • memset (Address: 0x18006e548)
  • strchr (Address: 0x18006e578)
  • strrchr (Address: 0x18006e5b8)
  • strstr (Address: 0x18006e588)
  • wcschr (Address: 0x18006e538)
  • wcsrchr (Address: 0x18006e580)
  • wcsstr (Address: 0x18006e568)