========================================================================
    STATIC LIBRARY : Module32HLP Project Overview
========================================================================

AppWizard has created this Module32HLP library project for you. 

This file contains a summary of what you will find in each of the files that
make up your Module32HLP application.


Module32HLP.vcproj
    This is the main project file for VC++ projects generated using an Application Wizard. 
    It contains information about the version of Visual C++ that generated the file, and 
    information about the platforms, configurations, and project features selected with the
    Application Wizard.


/////////////////////////////////////////////////////////////////////////////

StdAfx.h, StdAfx.cpp
    These files are used to build a precompiled header (PCH) file
    named Module32HLP.pch and a precompiled types file named StdAfx.obj.

/////////////////////////////////////////////////////////////////////////////
Other notes:

AppWizard uses "TODO:" comments to indicate parts of the source code you
should add to or customize.

/////////////////////////////////////////////////////////////////////////////

GetCurrentDirectoryW:
00007FFEC4A44AA4 48 83 EC 28          sub         rsp,28h  
00007FFEC4A44AA8 03 C9                add         ecx,ecx  
00007FFEC4A44AAA FF 15 40 06 0F 00    call        qword ptr [__imp_RtlGetCurrentDirectory_U (7FFEC4B350F0h)]  
00007FFEC4A44AB0 D1 E8                shr         eax,1  
00007FFEC4A44AB2 48 83 C4 28          add         rsp,28h  
00007FFEC4A44AB6 C3                   ret  

-- ----------------------------------------------------------------------------------------------------------------------
        Module Name = "WS2_32.dll"
        Ordinal  Entry Point       Name
        0018     000000CACBD3DF80  FreeAddrInfoEx
        0019     000000CACBD3DF80  FreeAddrInfoExW
        001A     000000CACBD30A34  FreeAddrInfoW
        001B     000000CACBD4F190  GetAddrInfoExA
        001C     000000CACBD4222C  GetAddrInfoExCancel
        001D     000000CACBD378E0  GetAddrInfoExOverlappedResult
        001E     000000CACBD364D4  GetAddrInfoExW
        001F     000000CACBD305F4  GetAddrInfoW
        0020     000000CACBD42F20  GetHostNameW
        0021     000000CACBD3D454  GetNameInfoW
        0022     000000CACBD3BFC4  InetNtopW
        0023     000000CACBD4E954  InetPtonW
        0024     000000CACBD4F384  SetAddrInfoExA
        0025     000000CACBD4F4D0  SetAddrInfoExW
        01F3     000000CACBD47AF4  WEP
        0026     000000CACBD5A7B0  WPUCompleteOverlappedRequest
        0027     000000CACBD431E4  WPUGetProviderPathEx
        0028     000000CACBD41238  WSAAccept
        0029     000000CACBD41374  WSAAddressToStringA
        002A     000000CACBD3D2E4  WSAAddressToStringW
        002B     000000CACBD5D204  WSAAdvertiseProvider
        0065     000000CACBD518C8  WSAAsyncGetHostByAddr
        0066     000000CACBD519E0  WSAAsyncGetHostByName
        0068     000000CACBD51B14  WSAAsyncGetProtoByName
        0067     000000CACBD51C48  WSAAsyncGetProtoByNumber
        006A     000000CACBD51D34  WSAAsyncGetServByName
        0069     000000CACBD51E70  WSAAsyncGetServByPort
        0064     000000CACBD3C2E8  WSAAsyncSelect
        006B     000000CACBD51F60  WSACancelAsyncRequest
        0070     000000CACBD507E0  WSACancelBlockingCall
        0073     000000CACBD30254  WSACleanup
        002C     000000CACBD2F2F0  WSACloseEvent
        002D     000000CACBD443F4  WSAConnect
        002E     000000CACBD5967C  WSAConnectByList
        002F     000000CACBD59C94  WSAConnectByNameA
        0030     000000CACBD59DF0  WSAConnectByNameW
        0031     000000CACBD2F324  WSACreateEvent
        0039     000000CACBD50CF8  WSADuplicateSocketA
        003A     000000CACBD50D7C  WSADuplicateSocketW
        003B     000000CACBD56B70  WSAEnumNameSpaceProvidersA
        003C     000000CACBD56BF0  WSAEnumNameSpaceProvidersExA
        003D     000000CACBD56C70  WSAEnumNameSpaceProvidersExW
        003E     000000CACBD39B94  WSAEnumNameSpaceProvidersW
        003F     000000CACBD41118  WSAEnumNetworkEvents
        0040     000000CACBD61160  WSAEnumProtocolsA
        0041     000000CACBD45138  WSAEnumProtocolsW
        0042     000000CACBD2F354  WSAEventSelect
        006E     000000CACBD2F084  WSAGetLastError
        0043     000000CACBD3CCD4  WSAGetOverlappedResult
        0044     000000CACBD558C8  WSAGetQOSByName
        0045     000000CACBD56CF0  WSAGetServiceClassInfoA
        0046     000000CACBD56DC0  WSAGetServiceClassInfoW
        0047     000000CACBD56F14  WSAGetServiceClassNameByClassIdA
        0048     000000CACBD571B8  WSAGetServiceClassNameByClassIdW
        0049     000000CACBD4E9DC  WSAHtonl
        004A     000000CACBD4EAE4  WSAHtons
        004B     000000CACBD57424  WSAInstallServiceClassA
        004C     000000CACBD574C0  WSAInstallServiceClassW
        004D     000000CACBD2ED14  WSAIoctl
        0071     000000CACBD50860  WSAIsBlocking
        004E     000000CACBD5A57C  WSAJoinLeaf
        004F     000000CACBD575EC  WSALookupServiceBeginA
        0050     000000CACBD30D74  WSALookupServiceBeginW
        0051     000000CACBD361F0  WSALookupServiceEnd
        0052     000000CACBD576C4  WSALookupServiceNextA
        0053     000000CACBD318E4  WSALookupServiceNextW
        0054     000000CACBD5784C  WSANSPIoctl
        0055     000000CACBD4E9DC  WSANtohl
        0056     000000CACBD4EAE4  WSANtohs
        0057     000000CACBD5848C  WSAPoll
        0058     000000CACBD5D380  WSAProviderCompleteAsyncCall
        0059     000000CACBD429F4  WSAProviderConfigChange
        005A     000000CACBD3DA14  WSARecv
        005B     000000CACBD56640  WSARecvDisconnect
        005C     000000CACBD419D4  WSARecvFrom
        005D     000000CACBD57964  WSARemoveServiceClass
        005E     000000CACBD41104  WSAResetEvent
        005F     000000CACBD3CDC4  WSASend
        0060     000000CACBD58704  WSASendDisconnect
        0061     000000CACBD587DC  WSASendMsg
        0062     000000CACBD43514  WSASendTo
        006C     000000CACBD508F4  WSASetBlockingHook
        0063     000000CACBD4176C  WSASetEvent
        006F     000000CACBD3CF84  WSASetLastError
        0074     000000CACBD57A90  WSASetServiceA
        0075     000000CACBD57B34  WSASetServiceW
        0076     000000CACBD3CA0C  WSASocketA
        0077     000000CACBD2FBD4  WSASocketW
        0072     000000CACBD30354  WSAStartup
        0078     000000CACBD44014  WSAStringToAddressA
        0079     000000CACBD41794  WSAStringToAddressW
        007A     000000CACBD5D524  WSAUnadvertiseProvider
        006D     000000CACBD509A4  WSAUnhookBlockingHook
        007B     000000CACBD2F340  WSAWaitForMultipleEvents
        0017     000000CACBD5AA04  WSApSetPostRoutine
        007C     000000CACBD615DC  WSCDeinstallProvider
        007D     000000CACBD63114  WSCDeinstallProvider32
        007E     000000CACBD61608  WSCDeinstallProviderEx
        007F     000000CACBD63308  WSCEnableNSProvider
        0080     000000CACBD63BE4  WSCEnableNSProvider32
        0081     000000CACBD57CC4  WSCEnumNameSpaceProviders32
        0082     000000CACBD57DEC  WSCEnumNameSpaceProvidersEx32
        0083     000000CACBD3B448  WSCEnumProtocols
        0084     000000CACBD612E4  WSCEnumProtocols32
        0085     000000CACBD3B290  WSCEnumProtocolsEx
        0086     000000CACBD61830  WSCGetApplicationCategory
        0087     000000CACBD6187C  WSCGetApplicationCategoryEx
        0088     000000CACBD61BD0  WSCGetProviderInfo
        0089     000000CACBD63140  WSCGetProviderInfo32
        008A     000000CACBD431AC  WSCGetProviderPath
        008B     000000CACBD61314  WSCGetProviderPath32
        008C     000000CACBD634A8  WSCInstallNameSpace
        008D     000000CACBD63D80  WSCInstallNameSpace32
        008E     000000CACBD634EC  WSCInstallNameSpaceEx
        008F     000000CACBD63538  WSCInstallNameSpaceEx2
        0090     000000CACBD63DC4  WSCInstallNameSpaceEx32
        0091     000000CACBD61E7C  WSCInstallProvider
        0092     000000CACBD63180  WSCInstallProvider64_32
        0093     000000CACBD53FD0  WSCInstallProviderAndChains64_32
        0094     000000CACBD61EC0  WSCInstallProviderEx
        0095     000000CACBD62584  WSCSetApplicationCategory
        0097     000000CACBD625D8  WSCSetApplicationCategoryEx
        0098     000000CACBD62A58  WSCSetProviderInfo
        0099     000000CACBD631C8  WSCSetProviderInfo32
        009A     000000CACBD637F4  WSCUnInstallNameSpace
        009B     000000CACBD63E10  WSCUnInstallNameSpace32
        009C     000000CACBD63820  WSCUnInstallNameSpaceEx2
        009D     000000CACBD62CD0  WSCUpdateProvider
        009E     000000CACBD63208  WSCUpdateProvider32
        009F     000000CACBD62D0C  WSCUpdateProviderEx
        00A0     000000CACBD639C4  WSCWriteNameSpaceOrder
        00A1     000000CACBD63E3C  WSCWriteNameSpaceOrder32
        00A2     000000CACBD62EE0  WSCWriteProviderOrder
        00A3     000000CACBD63244  WSCWriteProviderOrder32
        00A4     000000CACBD62F0C  WSCWriteProviderOrderEx
        00A5     000000CACBD3BB24  WahCloseApcHelper
        00A6     000000CACBD5F838  WahCloseHandleHelper
        00A7     000000CACBD606C0  WahCloseNotificationHandleHelper
        00A8     000000CACBD5F888  WahCloseSocketHandle
        00A9     000000CACBD2EF4C  WahCloseThread
        00AA     000000CACBD5F8EC  WahCompleteRequest
        00AB     000000CACBD339E4  WahCreateHandleContextTable
        00AC     000000CACBD42AA4  WahCreateNotificationHandle
        00AD     000000CACBD5F9D4  WahCreateSocketHandle
        00AE     000000CACBD44954  WahDestroyHandleContextTable
        00AF     000000CACBD5FBF4  WahDisableNonIFSHandleSupport
        00B0     000000CACBD5FCD8  WahEnableNonIFSHandleSupport
        00B1     000000CACBD3B7D0  WahEnumerateHandleContexts
        00B2     000000CACBD2F9D4  WahInsertHandleContext
        00B3     000000CACBD606F8  WahNotifyAllProcesses
        00B4     000000CACBD35594  WahOpenApcHelper
        00B5     000000CACBD301A4  WahOpenCurrentThread
        00B6     000000CACBD5FEF4  WahOpenHandleHelper
        00B7     000000CACBD42D74  WahOpenNotificationHandleHelper
        00B8     000000CACBD5EFD4  WahQueueUserApc
        00B9     000000CACBD2EFC4  WahReferenceContextByHandle
        00BA     000000CACBD2F414  WahRemoveHandleContext
        00BB     000000CACBD42470  WahWaitForNotification
        00BC     000000CACBD609D0  WahWriteLSPEvent
        0096     000000CACBD302C4  __WSAFDIsSet
        0000     000000CACBD41218  accept
        0001     000000CACBD2FF78  bind
        0002     000000CACBD2F504  closesocket
        0003     000000CACBD3E234  connect
        00BD     000000CACBD30A34  freeaddrinfo
        00BE     000000CACBD3E5B8  getaddrinfo
        0032     000000CACBD51FE4  gethostbyaddr
        0033     000000CACBD5218C  gethostbyname
        0038     000000CACBD52360  gethostname
        00BF     000000CACBD3D59C  getnameinfo
        0004     000000CACBD3C96C  getpeername
        0034     000000CACBD51298  getprotobyname
        0035     000000CACBD513CC  getprotobynumber
        0036     000000CACBD52534  getservbyname
        0037     000000CACBD52714  getservbyport
        0005     000000CACBD3DBF4  getsockname
        0006     000000CACBD3C838  getsockopt
        0007     000000CACBD2F1C4  htonl
        0008     000000CACBD2F074  htons
        000A     000000CACBD3E0C4  inet_addr
        000B     000000CACBD41D44  inet_ntoa
        00C0     000000CACBD4EBD8  inet_ntop
        00C1     000000CACBD4EC4C  inet_pton
        0009     000000CACBD3D144  ioctlsocket
        000C     000000CACBD41BA4  listen
        000D     000000CACBD2F1C4  ntohl
        000E     000000CACBD2F074  ntohs
        000F     000000CACBD3CFA4  recv
        0010     000000CACBD41EE4  recvfrom
        0011     000000CACBD3E7A4  select
        0012     000000CACBD3E9A4  send
        0013     000000CACBD2F1F0  sendto
        0014     000000CACBD2FA64  setsockopt
        0015     000000CACBD2F794  shutdown
        0016     000000CACBD2FEE4  socket


Called module is "api-ms-win-core-crt-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD7A0BCA28     FunctionName = "__C_specific_handler"
        Hint = 0032     pFunctionAddress = 00007FFD7A0BF7A0     FunctionName = "memcmp"
        Hint = 0033     pFunctionAddress = 00007FFD7A0CE880     FunctionName = "memcpy"
        Hint = 0037     pFunctionAddress = 00007FFD7A0CEBC0     FunctionName = "memset"
        Hint = 0017     pFunctionAddress = 00007FFD7A0BDCF0     FunctionName = "_wcsicmp"
        Hint = 0059     pFunctionAddress = 00007FFD7A0C1798     FunctionName = "wcsncmp"
        Hint = 004F     pFunctionAddress = 00007FFD7A0C158C     FunctionName = "towupper"
        Hint = 0055     pFunctionAddress = 00007FFD7A0C71F4     FunctionName = "wcscpy_s"
        Hint = 003E     pFunctionAddress = 00007FFD7A0C6CF4     FunctionName = "strcpy_s"
        Hint = 0039     pFunctionAddress = 00007FFD7A0C6B94     FunctionName = "sprintf_s"
        Hint = 0021     pFunctionAddress = 00007FFD7A0BCE44     FunctionName = "atoi"
        Hint = 003C     pFunctionAddress = 00007FFD7A0C0430     FunctionName = "strchr"
        Hint = 000E     pFunctionAddress = 00007FFD7A0BD858     FunctionName = "_stricmp"
        Hint = 005E     pFunctionAddress = 00007FFD7A0C1908     FunctionName = "wcsstr"
        Hint = 0015     pFunctionAddress = 00007FFD7A0C610C     FunctionName = "_vsnprintf_s"
        Hint = 004A     pFunctionAddress = 00007FFD7A0C0F38     FunctionName = "strtoul"
        Hint = 0034     pFunctionAddress = 00007FFD7A0C6A7C     FunctionName = "memcpy_s"
        Hint = 0019     pFunctionAddress = 00007FFD7A0BDE08     FunctionName = "_wcsnicmp"
        Hint = 0053     pFunctionAddress = 00007FFD7A0C1680     FunctionName = "wcschr"
        Hint = 0016     pFunctionAddress = 00007FFD7A0C620C     FunctionName = "_vsnwprintf_s"
        Hint = 0028     pFunctionAddress = 00007FFD7A0BCDB8     FunctionName = "isspace"
        Hint = 0001     pFunctionAddress = 00007FFD7A0BCBD4     FunctionName = "__isascii"
        Hint = 003D     pFunctionAddress = 00007FFD7A0C0460     FunctionName = "strcmp"

Called module is "api-ms-win-core-crt-l2-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD777EE978     FunctionName = "__dllonexit3"
        Hint = 000D     pFunctionAddress = 00007FFD7786B7E0     FunctionName = "exit"
        Hint = 000E     pFunctionAddress = 00007FFD7786B7F0     FunctionName = "hgets"
        Hint = 0007     pFunctionAddress = 00007FFD777EE5F0     FunctionName = "_initterm_e"
        Hint = 0009     pFunctionAddress = 00007FFD777E23F4     FunctionName = "_onexit"
        Hint = 0006     pFunctionAddress = 00007FFD777EE634     FunctionName = "_initterm"

Called module is "ntdll.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0122     pFunctionAddress = 00007FFD7A0CB040     FunctionName = "NtDelayExecution"
        Hint = 012D     pFunctionAddress = 00007FFD7A0CAD70     FunctionName = "NtDeviceIoControlFile"
        Hint = 00EB     pFunctionAddress = 00007FFD7A0CADF0     FunctionName = "NtClose"
        Hint = 0470     pFunctionAddress = 00007FFD7A079880     FunctionName = "RtlNtStatusToDosError"
        Hint = 00FC     pFunctionAddress = 00007FFD7A0CB250     FunctionName = "NtCreateFile"
        Hint = 03F7     pFunctionAddress = 00007FFD7A0647C8     FunctionName = "RtlInitUnicodeString"
        Hint = 0051     pFunctionAddress = 00007FFD7A07A870     FunctionName = "EtwTraceMessage"
        Hint = 003A     pFunctionAddress = 00007FFD7A04FB00     FunctionName = "EtwEventUnregister"
        Hint = 0038     pFunctionAddress = 00007FFD7A04FFE8     FunctionName = "EtwEventRegister"
        Hint = 02D0     pFunctionAddress = 00007FFD7A0CD1F0     FunctionName = "RtlCompareMemory"
        Hint = 0036     pFunctionAddress = 00007FFD7A088E70     FunctionName = "EtwEventEnabled"
        Hint = 003B     pFunctionAddress = 00007FFD7A088F68     FunctionName = "EtwEventWrite"
        Hint = 042B     pFunctionAddress = 00007FFD7A0743A8     FunctionName = "RtlIpv6StringToAddressExW"
        Hint = 041F     pFunctionAddress = 00007FFD7A09D1D0     FunctionName = "RtlIpv4AddressToStringExW"
        Hint = 0427     pFunctionAddress = 00007FFD7A093DBC     FunctionName = "RtlIpv6AddressToStringExW"
        Hint = 041E     pFunctionAddress = 00007FFD7A11DF00     FunctionName = "RtlIpv4AddressToStringExA"
        Hint = 0426     pFunctionAddress = 00007FFD7A11DFBC     FunctionName = "RtlIpv6AddressToStringExA"
        Hint = 0424     pFunctionAddress = 00007FFD7A074174     FunctionName = "RtlIpv4StringToAddressW"
        Hint = 042C     pFunctionAddress = 00007FFD7A0745B0     FunctionName = "RtlIpv6StringToAddressW"
        Hint = 0429     pFunctionAddress = 00007FFD7A09D5C0     FunctionName = "RtlIpv6StringToAddressA"
        Hint = 0421     pFunctionAddress = 00007FFD7A09F964     FunctionName = "RtlIpv4StringToAddressA"
        Hint = 03EC     pFunctionAddress = 00007FFD7A0A1A5C     FunctionName = "RtlImpersonateSelf"
        Hint = 029B     pFunctionAddress = 00007FFD7A0A5ACC     FunctionName = "RtlAdjustPrivilege"
        Hint = 0162     pFunctionAddress = 00007FFD7A0CBC20     FunctionName = "NtLoadDriver"
        Hint = 0398     pFunctionAddress = 00007FFD7A066C00     FunctionName = "RtlFreeHeap"
        Hint = 0608     pFunctionAddress = 00007FFD7A08ADD8     FunctionName = "WinSqmIsOptedIn"
        Hint = 02A0     pFunctionAddress = 00007FFD7A06B2D0     FunctionName = "RtlAllocateHeap"
        Hint = 0107     pFunctionAddress = 00007FFD7A0CB770     FunctionName = "NtCreateNamedPipeFile"
        Hint = 0569     pFunctionAddress = 00007FFD7A07B34C     FunctionName = "RtlVirtualUnwind"
        Hint = 045D     pFunctionAddress = 00007FFD7A07D59C     FunctionName = "RtlLookupFunctionEntry"
        Hint = 02BB     pFunctionAddress = 00007FFD7A0CCC90     FunctionName = "RtlCaptureContext"
        Hint = 053D     pFunctionAddress = 00007FFD7A091D6C     FunctionName = "RtlUnicodeStringToInteger"
        Hint = 03F8     pFunctionAddress = 00007FFD7A057A38     FunctionName = "RtlInitUnicodeStringEx"
        Hint = 03C9     pFunctionAddress = 00007FFD7A08A394     FunctionName = "RtlGetNtProductType"
        Hint = 01A6     pFunctionAddress = 00007FFD7A0CB050     FunctionName = "NtQueryDirectoryFile"
        Hint = 017A     pFunctionAddress = 00007FFD7A0CB030     FunctionName = "NtOpenFile"
        Hint = 025A     pFunctionAddress = 00007FFD7A0CAD40     FunctionName = "NtWaitForSingleObject"
        Hint = 014B     pFunctionAddress = 00007FFD7A0CB090     FunctionName = "NtFsControlFile"

Called module is "api-ms-win-core-errorhandling-l1-1-1.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0009     pFunctionAddress = 00007FFD7A079850     FunctionName = "SetLastError"
        Hint = 0003     pFunctionAddress = 00007FFD777A1430     FunctionName = "GetLastError"
        Hint = 000B     pFunctionAddress = 00007FFD7787D820     FunctionName = "UnhandledExceptionFilter"
        Hint = 000A     pFunctionAddress = 00007FFD777B3308     FunctionName = "SetUnhandledExceptionFilter"

Called module is "api-ms-win-core-processthreads-l1-1-2.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 000F     pFunctionAddress = 00007FFD77F01450     FunctionName = "GetCurrentThread"
        Hint = 0044     pFunctionAddress = 00007FFD77F0143C     FunctionName = "TlsSetValue"
        Hint = 0010     pFunctionAddress = 00007FFD77F01340     FunctionName = "GetCurrentThreadId"
        Hint = 0040     pFunctionAddress = 00007FFD77F04D58     FunctionName = "TerminateThread"
        Hint = 002C     pFunctionAddress = 00007FFD777A2154     FunctionName = "OpenThreadToken"
        Hint = 0005     pFunctionAddress = 00007FFD77F0248C     FunctionName = "CreateThread"
        Hint = 0041     pFunctionAddress = 00007FFD77F024E0     FunctionName = "TlsAlloc"
        Hint = 0030     pFunctionAddress = 00007FFD77F025C0     FunctionName = "ResumeThread"
        Hint = 000C     pFunctionAddress = 00007FFD77F01500     FunctionName = "GetCurrentProcessId"
        Hint = 003F     pFunctionAddress = 00007FFD77F03320     FunctionName = "TerminateProcess"
        Hint = 0042     pFunctionAddress = 00007FFD77F01704     FunctionName = "TlsFree"
        Hint = 0018     pFunctionAddress = 00007FFD777A9EA8     FunctionName = "GetProcessMitigationPolicy"
        Hint = 002A     pFunctionAddress = 00007FFD777A2180     FunctionName = "OpenProcessToken"
        Hint = 003E     pFunctionAddress = 00007FFD77F02DD0     FunctionName = "SwitchToThread"
        Hint = 002F     pFunctionAddress = 00007FFD77F02D80     FunctionName = "QueueUserAPC"
        Hint = 000B     pFunctionAddress = 00007FFD77F019E0     FunctionName = "GetCurrentProcess"
        Hint = 0043     pFunctionAddress = 00007FFD77F01390     FunctionName = "TlsGetValue"
        Hint = 003C     pFunctionAddress = 00007FFD777A3A10     FunctionName = "SetThreadToken"

Called module is "api-ms-win-core-string-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0006     pFunctionAddress = 00007FFD777A40E0     FunctionName = "MultiByteToWideChar"
        Hint = 0002     pFunctionAddress = 00007FFD777A4730     FunctionName = "CompareStringW"
        Hint = 0007     pFunctionAddress = 00007FFD777A7740     FunctionName = "WideCharToMultiByte"

Called module is "api-ms-win-core-synch-l1-2-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0015     pFunctionAddress = 00007FFD7A08FB7C     FunctionName = "InitializeConditionVariable"
        Hint = 000D     pFunctionAddress = 00007FFD7A090E1C     FunctionName = "DeleteCriticalSection"
        Hint = 002C     pFunctionAddress = 00007FFD777FEDA4     FunctionName = "SleepConditionVariableCS"
        Hint = 0036     pFunctionAddress = 00007FFD7A0A51E4     FunctionName = "WakeAllConditionVariable"
        Hint = 000F     pFunctionAddress = 00007FFD7A060480     FunctionName = "EnterCriticalSection"
        Hint = 0016     pFunctionAddress = 00007FFD7A08E6C8     FunctionName = "InitializeCriticalSection"
        Hint = 0033     pFunctionAddress = 00007FFD777A10A0     FunctionName = "WaitForSingleObject"
        Hint = 0003     pFunctionAddress = 00007FFD777A1800     FunctionName = "CreateEventA"
        Hint = 002B     pFunctionAddress = 00007FFD777A1190     FunctionName = "Sleep"
        Hint = 0032     pFunctionAddress = 00007FFD777A12C0     FunctionName = "WaitForMultipleObjectsEx"
        Hint = 001B     pFunctionAddress = 00007FFD7A061950     FunctionName = "LeaveCriticalSection"
        Hint = 0017     pFunctionAddress = 00007FFD777A1768     FunctionName = "InitializeCriticalSectionAndSpinCount"
        Hint = 0031     pFunctionAddress = 00007FFD7A049950     FunctionName = "TryEnterCriticalSection"
        Hint = 0027     pFunctionAddress = 00007FFD777A1490     FunctionName = "SetEvent"
        Hint = 0006     pFunctionAddress = 00007FFD777A2E40     FunctionName = "CreateEventW"
        Hint = 0025     pFunctionAddress = 00007FFD777A14B4     FunctionName = "ResetEvent"

Called module is "api-ms-win-core-handle-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0001     pFunctionAddress = 00007FFD777A2F10     FunctionName = "DuplicateHandle"
        Hint = 0000     pFunctionAddress = 00007FFD777A14E0     FunctionName = "CloseHandle"
        Hint = 0002     pFunctionAddress = 00007FFD777FA140     FunctionName = "GetHandleInformation"

Called module is "api-ms-win-core-libraryloader-l1-2-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 000F     pFunctionAddress = 00007FFD777A23A4     FunctionName = "GetModuleHandleA"
        Hint = 0010     pFunctionAddress = 00007FFD777FE6A8     FunctionName = "GetModuleHandleExA"
        Hint = 000A     pFunctionAddress = 00007FFD777A5770     FunctionName = "FreeLibrary"
        Hint = 0018     pFunctionAddress = 00007FFD777B8B5C     FunctionName = "LoadStringW"
        Hint = 0015     pFunctionAddress = 00007FFD777A5860     FunctionName = "LoadLibraryExW"
        Hint = 0014     pFunctionAddress = 00007FFD777A603C     FunctionName = "LoadLibraryExA"
        Hint = 0013     pFunctionAddress = 00007FFD777A56A8     FunctionName = "GetProcAddress"
        Hint = 000B     pFunctionAddress = 00007FFD777A2998     FunctionName = "FreeLibraryAndExitThread"
        Hint = 0017     pFunctionAddress = 00007FFD777DEC20     FunctionName = "LoadStringA"
        Hint = 000D     pFunctionAddress = 00007FFD777A24B0     FunctionName = "GetModuleFileNameA"
        Hint = 000E     pFunctionAddress = 00007FFD777A23F0     FunctionName = "GetModuleFileNameW"

Called module is "api-ms-win-core-threadpool-l1-2-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0020     pFunctionAddress = 00007FFD777A450C     FunctionName = "TrySubmitThreadpoolCallback"
        Hint = 0022     pFunctionAddress = 00007FFD7A0A2BF4     FunctionName = "WaitForThreadpoolTimerCallbacks"
        Hint = 0006     pFunctionAddress = 00007FFD7A051DB0     FunctionName = "CloseThreadpoolTimer"
        Hint = 000C     pFunctionAddress = 00007FFD777A20C0     FunctionName = "CreateThreadpoolTimer"
        Hint = 001A     pFunctionAddress = 00007FFD7A04F5F8     FunctionName = "SetThreadpoolTimer"

Called module is "api-ms-win-security-base-l1-2-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 002C     pFunctionAddress = 00007FFD777A5E38     FunctionName = "FreeSid"
        Hint = 0036     pFunctionAddress = 00007FFD777A6240     FunctionName = "GetSecurityDescriptorDacl"
        Hint = 0033     pFunctionAddress = 00007FFD777A21A4     FunctionName = "GetLengthSid"
        Hint = 0043     pFunctionAddress = 00007FFD777AD880     FunctionName = "ImpersonateLoggedOnUser"
        Hint = 001B     pFunctionAddress = 00007FFD777A3C28     FunctionName = "CheckTokenMembership"
        Hint = 002E     pFunctionAddress = 00007FFD777A62B4     FunctionName = "GetAclInformation"
        Hint = 001E     pFunctionAddress = 00007FFD777A21D4     FunctionName = "CopySid"
        Hint = 002D     pFunctionAddress = 00007FFD777A6290     FunctionName = "GetAce"
        Hint = 002A     pFunctionAddress = 00007FFD777A3960     FunctionName = "EqualSid"
        Hint = 0046     pFunctionAddress = 00007FFD777A3B44     FunctionName = "InitializeSecurityDescriptor"
        Hint = 0045     pFunctionAddress = 00007FFD777A3B68     FunctionName = "InitializeAcl"
        Hint = 000A     pFunctionAddress = 00007FFD77819D30     FunctionName = "AddAccessDeniedAce"
        Hint = 0007     pFunctionAddress = 00007FFD777A3BB0     FunctionName = "AddAccessAllowedAce"
        Hint = 0057     pFunctionAddress = 00007FFD777A34DC     FunctionName = "RevertToSelf"
        Hint = 0060     pFunctionAddress = 00007FFD777A3B8C     FunctionName = "SetSecurityDescriptorDacl"
        Hint = 004B     pFunctionAddress = 00007FFD777A3998     FunctionName = "IsValidSid"
        Hint = 0016     pFunctionAddress = 00007FFD777A5E4C     FunctionName = "AllocateAndInitializeSid"
        Hint = 0040     pFunctionAddress = 00007FFD777A30AC     FunctionName = "GetTokenInformation"

Called module is "api-ms-win-core-heap-l1-2-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0006     pFunctionAddress = 00007FFD7A066C00     FunctionName = "HeapFree"
        Hint = 0005     pFunctionAddress = 00007FFD777AD9FC     FunctionName = "HeapDestroy"
        Hint = 0009     pFunctionAddress = 00007FFD7A068BD0     FunctionName = "HeapReAlloc"
        Hint = 0002     pFunctionAddress = 00007FFD7A06B2D0     FunctionName = "HeapAlloc"
        Hint = 0000     pFunctionAddress = 00007FFD777A1520     FunctionName = "GetProcessHeap"

Called module is "api-ms-win-core-registry-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0019     pFunctionAddress = 00007FFD777B82D0     FunctionName = "RegNotifyChangeKeyValue"
        Hint = 0002     pFunctionAddress = 00007FFD777C60A0     FunctionName = "RegCreateKeyExA"
        Hint = 0027     pFunctionAddress = 00007FFD7781CB60     FunctionName = "RegSetValueExA"
        Hint = 0003     pFunctionAddress = 00007FFD777BBF90     FunctionName = "RegCreateKeyExW"
        Hint = 001C     pFunctionAddress = 00007FFD777A4F00     FunctionName = "RegOpenKeyExW"
        Hint = 0020     pFunctionAddress = 00007FFD777B7F68     FunctionName = "RegQueryValueExA"
        Hint = 001B     pFunctionAddress = 00007FFD777B7F44     FunctionName = "RegOpenKeyExA"
        Hint = 0006     pFunctionAddress = 00007FFD7786F54C     FunctionName = "RegDeleteTreeA"
        Hint = 0000     pFunctionAddress = 00007FFD777A2030     FunctionName = "RegCloseKey"
        Hint = 0010     pFunctionAddress = 00007FFD777FADE4     FunctionName = "RegGetKeySecurity"
        Hint = 0021     pFunctionAddress = 00007FFD777A5520     FunctionName = "RegQueryValueExW"
        Hint = 0004     pFunctionAddress = 00007FFD7781D228     FunctionName = "RegDeleteKeyExA"
        Hint = 000B     pFunctionAddress = 00007FFD777FBAEC     FunctionName = "RegEnumKeyExA"
        Hint = 0028     pFunctionAddress = 00007FFD777BC5A0     FunctionName = "RegSetValueExW"

Called module is "api-ms-win-core-processenvironment-l1-2-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD777BF120     FunctionName = "ExpandEnvironmentStringsA"
        Hint = 000B     pFunctionAddress = 00007FFD777A8D0C     FunctionName = "GetEnvironmentVariableW"
        Hint = 0005     pFunctionAddress = 00007FFD777AE37C     FunctionName = "GetCommandLineW"
        Hint = 0001     pFunctionAddress = 00007FFD777A3340     FunctionName = "ExpandEnvironmentStringsW"
        Hint = 000A     pFunctionAddress = 00007FFD777B3138     FunctionName = "GetEnvironmentVariableA"

Called module is "api-ms-win-core-sysinfo-l1-2-1.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 000E     pFunctionAddress = 00007FFD777A9D9C     FunctionName = "GetSystemInfo"
        Hint = 0015     pFunctionAddress = 00007FFD777A12A0     FunctionName = "GetTickCount"
        Hint = 0003     pFunctionAddress = 00007FFD777B83D0     FunctionName = "GetComputerNameExW"
        Hint = 000B     pFunctionAddress = 00007FFD777F4380     FunctionName = "GetSystemDirectoryA"
        Hint = 0011     pFunctionAddress = 00007FFD777A1600     FunctionName = "GetSystemTimeAsFileTime"
        Hint = 0002     pFunctionAddress = 00007FFD7782A7AC     FunctionName = "GetComputerNameExA"

Called module is "api-ms-win-core-file-l1-2-1.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0004     pFunctionAddress = 00007FFD777A9E20     FunctionName = "CreateFileA"

Called module is "api-ms-win-core-io-l1-1-1.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0004     pFunctionAddress = 00007FFD77F023F0     FunctionName = "DeviceIoControl"

Called module is "api-ms-win-core-util-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0003     pFunctionAddress = 00007FFD7A095A3C     FunctionName = "EncodePointer"
        Hint = 0001     pFunctionAddress = 00007FFD7A07DC90     FunctionName = "DecodePointer"

Called module is "api-ms-win-core-profile-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD7A08D5B0     FunctionName = "QueryPerformanceCounter"

Called module is "api-ms-win-core-heap-obsolete-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD77F017C0     FunctionName = "GlobalAlloc"
        Hint = 000A     pFunctionAddress = 00007FFD77F019F0     FunctionName = "LocalFree"
        Hint = 0002     pFunctionAddress = 00007FFD77F02B70     FunctionName = "GlobalFree"
        Hint = 0008     pFunctionAddress = 00007FFD77F01460     FunctionName = "LocalAlloc"

Called module is "api-ms-win-core-string-obsolete-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0001     pFunctionAddress = 00007FFD77F20464     FunctionName = "lstrcmpA"
        Hint = 0008     pFunctionAddress = 00007FFD77F01630     FunctionName = "lstrlenA"

Called module is "api-ms-win-core-kernel32-legacy-l1-1-1.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0036     pFunctionAddress = 00007FFD77F01370     FunctionName = "PulseEvent"

Called module is "NSI.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 000A     pFunctionAddress = 00007FFD799A1280     FunctionName = "NsiGetAllParameters"
        Hint = 0014     pFunctionAddress = 00007FFD799A1B60     FunctionName = "NsiSetAllParameters"
        Hint = 000E     pFunctionAddress = 00007FFD799A19D0     FunctionName = "NsiGetParameter"

Called module is "api-ms-win-core-wow64-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD777A67BC     FunctionName = "IsWow64Process"

Called module is "RPCRT4.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0213     pFunctionAddress = 00007FFD77A31720     FunctionName = "UuidCreate"
        Hint = 01D7     pFunctionAddress = 00007FFD77A7EEE0     FunctionName = "RpcServerRegisterIfEx"
        Hint = 01DB     pFunctionAddress = 00007FFD77A83E3C     FunctionName = "RpcServerUnregisterIfEx"
        Hint = 0165     pFunctionAddress = 00007FFD77B377BC     FunctionName = "RpcAsyncCompleteCall"
        Hint = 01C5     pFunctionAddress = 00007FFD77A7E438     FunctionName = "RpcServerInqBindings"
        Hint = 01D1     pFunctionAddress = 00007FFD77A839A0     FunctionName = "RpcServerListen"
        Hint = 0178     pFunctionAddress = 00007FFD77A46F50     FunctionName = "RpcBindingInqObject"
        Hint = 018E     pFunctionAddress = 00007FFD77A7EBF0     FunctionName = "RpcEpRegisterW"
        Hint = 01EC     pFunctionAddress = 00007FFD77A7EE18     FunctionName = "RpcServerUseProtseqW"
        Hint = 0185     pFunctionAddress = 00007FFD77A7C580     FunctionName = "RpcBindingVectorFree"
        Hint = 01DA     pFunctionAddress = 00007FFD77A61C00     FunctionName = "RpcServerUnregisterIf"
        Hint = 0190     pFunctionAddress = 00007FFD77A7D084     FunctionName = "RpcEpUnregister"
        Hint = 0094     pFunctionAddress = 00007FFD77B384A8     FunctionName = "NdrAsyncServerCall"
        Hint = 012A     pFunctionAddress = 00007FFD77A334D0     FunctionName = "NdrServerCall2"
        Hint = 008F     pFunctionAddress = 00007FFD77B3E71C     FunctionName = "Ndr64AsyncServerCallAll"
        Hint = 012B     pFunctionAddress = 00007FFD77A34640     FunctionName = "NdrServerCallAll"
        Hint = 019F     pFunctionAddress = 00007FFD77A34840     FunctionName = "RpcImpersonateClient"
        Hint = 01C2     pFunctionAddress = 00007FFD77A366D8     FunctionName = "RpcRevertToSelfEx"
        Hint = 0023     pFunctionAddress = 00007FFD77A36520     FunctionName = "I_RpcBindingInqTransportType"
        Hint = 01C1     pFunctionAddress = 00007FFD77A348D4     FunctionName = "RpcRevertToSelf"
        Hint = 01C7     pFunctionAddress = 00007FFD77A33A40     FunctionName = "RpcServerInqCallAttributesW"

Called module is "api-ms-win-core-apiquery-l1-1-0.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0000     pFunctionAddress = 00007FFD7A09DBF4     FunctionName = "ApiSetQueryApiSetPresence"

Called module is "api-ms-win-core-delayload-l1-1-1.dll"; TimeDateStamp = 0x00000000; ForwarderChain = 0x00000000;
        Hint = 0001     pFunctionAddress = 00007FFD7A05F8F0     FunctionName = "ResolveDelayLoadedAPI"
        Hint = 0000     pFunctionAddress = 00007FFD77F16350     FunctionName = "DelayLoadFailureHook"
-- ----------------------------------------------------------------------------------------------------------------------
