TokenBroker.dll
Description: Token Broker
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5848
Architecture: 32-bit
Operating System: Windows NT
SHA256: 867720dc22a6e73d811d3f42faf43843
File Size: 1.2 MB
Uploaded At: Dec. 1, 2025, 8:05 a.m.
Views: 13
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ServiceMain (Ordinal: 1, Address: 0x54580)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-1.dll
- GetPackageFamilyNameFromToken (Address: 0x1011c008)
- GetPackageFullNameFromToken (Address: 0x1011c00c)
api-ms-win-appmodel-state-l1-2-0.dll
- CloseState (Address: 0x1011c01c)
- GetStateRootFolder (Address: 0x1011c018)
- OpenStateExplicit (Address: 0x1011c014)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1011c02c)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1011c03c)
- IsDebuggerPresent (Address: 0x1011c034)
- OutputDebugStringW (Address: 0x1011c038)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1011c044)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1011c04c)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1011c05c)
- RaiseException (Address: 0x1011c054)
- SetLastError (Address: 0x1011c058)
- SetUnhandledExceptionFilter (Address: 0x1011c060)
- UnhandledExceptionFilter (Address: 0x1011c064)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1011c09c)
- CreateDirectoryW (Address: 0x1011c08c)
- CreateFileW (Address: 0x1011c070)
- FindClose (Address: 0x1011c078)
- FindFirstFileW (Address: 0x1011c094)
- FindNextFileW (Address: 0x1011c098)
- GetFileSizeEx (Address: 0x1011c07c)
- GetFileTime (Address: 0x1011c088)
- ReadFile (Address: 0x1011c090)
- SetEndOfFile (Address: 0x1011c084)
- SetFileInformationByHandle (Address: 0x1011c074)
- SetFilePointer (Address: 0x1011c06c)
- WriteFile (Address: 0x1011c080)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1011c0a4)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1011c0b0)
- HeapAlloc (Address: 0x1011c0ac)
- HeapFree (Address: 0x1011c0b4)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1011c0c0)
- LocalFree (Address: 0x1011c0bc)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1011c0c8)
- InterlockedPushEntrySList (Address: 0x1011c0cc)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x1011c0d4)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x1011c0e0)
- GetModuleFileNameA (Address: 0x1011c0ec)
- GetModuleHandleExW (Address: 0x1011c0dc)
- GetModuleHandleW (Address: 0x1011c0e4)
- GetProcAddress (Address: 0x1011c0e8)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1011c0f4)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1011c0fc)
- GetEnvironmentVariableW (Address: 0x1011c100)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1011c124)
- DeleteProcThreadAttributeList (Address: 0x1011c130)
- GetCurrentProcess (Address: 0x1011c140)
- GetCurrentProcessId (Address: 0x1011c128)
- GetCurrentThread (Address: 0x1011c108)
- GetCurrentThreadId (Address: 0x1011c118)
- GetProcessId (Address: 0x1011c13c)
- InitializeProcThreadAttributeList (Address: 0x1011c120)
- OpenProcessToken (Address: 0x1011c10c)
- OpenThreadToken (Address: 0x1011c138)
- SetThreadToken (Address: 0x1011c110)
- TerminateProcess (Address: 0x1011c144)
- TlsAlloc (Address: 0x1011c114)
- TlsFree (Address: 0x1011c134)
- TlsGetValue (Address: 0x1011c148)
- TlsSetValue (Address: 0x1011c11c)
- UpdateProcThreadAttribute (Address: 0x1011c12c)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1011c150)
- OpenProcess (Address: 0x1011c154)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1011c15c)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1011c164)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1011c170)
- RegCreateKeyExW (Address: 0x1011c178)
- RegDeleteValueW (Address: 0x1011c174)
- RegEnumKeyExW (Address: 0x1011c18c)
- RegGetValueW (Address: 0x1011c188)
- RegOpenKeyExW (Address: 0x1011c180)
- RegQueryInfoKeyW (Address: 0x1011c17c)
- RegQueryValueExW (Address: 0x1011c184)
- RegSetValueExW (Address: 0x1011c16c)
api-ms-win-core-registry-l2-1-0.dll
- RegOpenKeyW (Address: 0x1011c194)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFileExistsW (Address: 0x1011c19c)
- PathFindFileNameW (Address: 0x1011c1a0)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x1011c1a8)
api-ms-win-core-string-l2-1-0.dll
- CharLowerW (Address: 0x1011c1b0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1011c1ec)
- AcquireSRWLockShared (Address: 0x1011c208)
- CreateEventExW (Address: 0x1011c1c8)
- CreateEventW (Address: 0x1011c1e0)
- CreateMutexExW (Address: 0x1011c1b8)
- CreateSemaphoreExW (Address: 0x1011c1d4)
- DeleteCriticalSection (Address: 0x1011c1bc)
- EnterCriticalSection (Address: 0x1011c1d0)
- InitializeCriticalSectionEx (Address: 0x1011c1cc)
- InitializeSRWLock (Address: 0x1011c1f4)
- LeaveCriticalSection (Address: 0x1011c1c4)
- OpenSemaphoreW (Address: 0x1011c204)
- ReleaseMutex (Address: 0x1011c1dc)
- ReleaseSemaphore (Address: 0x1011c1c0)
- ReleaseSRWLockExclusive (Address: 0x1011c1e4)
- ReleaseSRWLockShared (Address: 0x1011c1fc)
- SetEvent (Address: 0x1011c1e8)
- TryAcquireSRWLockExclusive (Address: 0x1011c1f8)
- WaitForMultipleObjectsEx (Address: 0x1011c200)
- WaitForSingleObject (Address: 0x1011c1d8)
- WaitForSingleObjectEx (Address: 0x1011c1f0)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1011c210)
- InitOnceComplete (Address: 0x1011c214)
- InitOnceExecuteOnce (Address: 0x1011c21c)
- Sleep (Address: 0x1011c220)
- WakeByAddressAll (Address: 0x1011c218)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1011c22c)
- GetSystemTimeAsFileTime (Address: 0x1011c230)
- GetTickCount (Address: 0x1011c234)
- GetTickCount64 (Address: 0x1011c228)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetProductInfo (Address: 0x1011c23c)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpool (Address: 0x1011c24c)
- CloseThreadpoolTimer (Address: 0x1011c260)
- CloseThreadpoolWork (Address: 0x1011c250)
- CreateThreadpool (Address: 0x1011c268)
- CreateThreadpoolTimer (Address: 0x1011c25c)
- CreateThreadpoolWork (Address: 0x1011c264)
- FreeLibraryWhenCallbackReturns (Address: 0x1011c248)
- SetThreadpoolTimer (Address: 0x1011c258)
- SubmitThreadpoolWork (Address: 0x1011c244)
- WaitForThreadpoolTimerCallbacks (Address: 0x1011c254)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- QueueUserWorkItem (Address: 0x1011c270)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1011c27c)
- EncodePointer (Address: 0x1011c278)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x1011c290)
- RoOriginateError (Address: 0x1011c288)
- RoOriginateErrorW (Address: 0x1011c284)
- RoTransformError (Address: 0x1011c294)
- SetRestrictedErrorInfo (Address: 0x1011c28c)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x1011c2a8)
- RoGetMatchingRestrictedErrorInfo (Address: 0x1011c2a4)
- RoOriginateLanguageException (Address: 0x1011c2a0)
- RoReportFailedDelegate (Address: 0x1011c29c)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1011c2b8)
- RoGetActivationFactory (Address: 0x1011c2bc)
- RoInitialize (Address: 0x1011c2c0)
- RoRegisterActivationFactories (Address: 0x1011c2b0)
- RoRevokeActivationFactories (Address: 0x1011c2c4)
- RoUninitialize (Address: 0x1011c2b4)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
- RoCreatePropertySetSerializer (Address: 0x1011c2cc)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x1011c2f8)
- WindowsConcatString (Address: 0x1011c2e4)
- WindowsCreateString (Address: 0x1011c2f4)
- WindowsCreateStringReference (Address: 0x1011c2e0)
- WindowsDeleteString (Address: 0x1011c2d4)
- WindowsDuplicateString (Address: 0x1011c2d8)
- WindowsGetStringLen (Address: 0x1011c2dc)
- WindowsGetStringRawBuffer (Address: 0x1011c2e8)
- WindowsIsStringEmpty (Address: 0x1011c2ec)
- WindowsStringHasEmbeddedNull (Address: 0x1011c2f0)
- WindowsSubstringWithSpecifiedLength (Address: 0x1011c2fc)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x1011c3d8)
- __std_terminate (Address: 0x1011c3d4)
- _CxxThrowException (Address: 0x1011c3a0)
- _except_handler4_common (Address: 0x1011c39c)
- _o___std_exception_copy (Address: 0x1011c3c8)
- _o___std_exception_destroy (Address: 0x1011c3c0)
- _o___std_type_info_destroy_list (Address: 0x1011c3bc)
- _o___stdio_common_vsnprintf_s (Address: 0x1011c3b4)
- _o___stdio_common_vswprintf (Address: 0x1011c3b0)
- _o__callnewh (Address: 0x1011c3a8)
- _o__cexit (Address: 0x1011c3a4)
- _o__configure_narrow_argv (Address: 0x1011c3b8)
- _o__crt_atexit (Address: 0x1011c3ac)
- _o__errno (Address: 0x1011c3cc)
- _o__execute_onexit_table (Address: 0x1011c3c4)
- _o__fseeki64 (Address: 0x1011c304)
- _o__initialize_narrow_environment (Address: 0x1011c308)
- _o__initialize_onexit_table (Address: 0x1011c30c)
- _o__invalid_parameter_noinfo (Address: 0x1011c310)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1011c314)
- _o__itow_s (Address: 0x1011c318)
- _o__lock_file (Address: 0x1011c31c)
- _o__purecall (Address: 0x1011c320)
- _o__register_onexit_function (Address: 0x1011c324)
- _o__seh_filter_dll (Address: 0x1011c328)
- _o__unlock_file (Address: 0x1011c32c)
- _o__wcsicmp (Address: 0x1011c330)
- _o__wcsnicmp (Address: 0x1011c334)
- _o__wsplitpath_s (Address: 0x1011c33c)
- _o_ceil (Address: 0x1011c340)
- _o_fclose (Address: 0x1011c344)
- _o_fflush (Address: 0x1011c348)
- _o_fgetc (Address: 0x1011c34c)
- _o_fgetpos (Address: 0x1011c350)
- _o_fgetwc (Address: 0x1011c354)
- _o_fputwc (Address: 0x1011c358)
- _o_free (Address: 0x1011c35c)
- _o_fsetpos (Address: 0x1011c360)
- _o_fwrite (Address: 0x1011c364)
- _o_iswspace (Address: 0x1011c368)
- _o_malloc (Address: 0x1011c36c)
- _o_realloc (Address: 0x1011c370)
- _o_setvbuf (Address: 0x1011c374)
- _o_terminate (Address: 0x1011c378)
- _o_tolower (Address: 0x1011c37c)
- _o_toupper (Address: 0x1011c380)
- _o_towlower (Address: 0x1011c384)
- _o_ungetc (Address: 0x1011c388)
- _o_ungetwc (Address: 0x1011c38c)
- _o_wcscat_s (Address: 0x1011c390)
- _o_wcscpy_s (Address: 0x1011c394)
- _o_wcstoul (Address: 0x1011c398)
- memcmp (Address: 0x1011c3dc)
- memcpy (Address: 0x1011c3e0)
- memmove (Address: 0x1011c338)
- wcsstr (Address: 0x1011c3d0)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1011c3ec)
- _initterm_e (Address: 0x1011c3e8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1011c3f4)
- wcscspn (Address: 0x1011c3f8)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x1011c400)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1011c40c)
- EventProviderEnabled (Address: 0x1011c408)
- EventRegister (Address: 0x1011c410)
- EventSetInformation (Address: 0x1011c418)
- EventUnregister (Address: 0x1011c414)
- EventWriteTransfer (Address: 0x1011c41c)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1011c43c)
- AllocateAndInitializeSid (Address: 0x1011c430)
- CreateWellKnownSid (Address: 0x1011c444)
- DuplicateTokenEx (Address: 0x1011c438)
- FreeSid (Address: 0x1011c44c)
- GetLengthSid (Address: 0x1011c458)
- GetSidLengthRequired (Address: 0x1011c424)
- GetSidSubAuthority (Address: 0x1011c428)
- GetTokenInformation (Address: 0x1011c440)
- ImpersonateLoggedOnUser (Address: 0x1011c454)
- InitializeSid (Address: 0x1011c434)
- IsWellKnownSid (Address: 0x1011c448)
- MakeAbsoluteSD (Address: 0x1011c42c)
- RevertToSelf (Address: 0x1011c450)
- SetTokenInformation (Address: 0x1011c45c)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenMembershipEx (Address: 0x1011c464)
api-ms-win-security-base-private-l1-1-1.dll
- CreateAppContainerToken (Address: 0x1011c46c)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x1011c474)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1011c47c)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1011c480)
- ConvertStringSidToSidW (Address: 0x1011c484)
api-ms-win-service-core-l1-1-0.dll
- RegisterServiceCtrlHandlerExW (Address: 0x1011c490)
- SetServiceStatus (Address: 0x1011c48c)
api-ms-win-service-private-l1-1-0.dll
- I_QueryTagInformation (Address: 0x1011c498)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
- CreateRandomAccessStreamOverStream (Address: 0x1011c4a0)
- CreateStreamOverRandomAccessStream (Address: 0x1011c4a4)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x1011c4b0)
- SHTaskPoolQueueTask (Address: 0x1011c4ac)
combase.dll
- (Address: 0x1011c4b8)
- (Address: 0x1011c4bc)
- (Address: 0x1011c4c0)
- (Address: 0x1011c4c4)
- (Address: 0x1011c4c8)
- (Address: 0x1011c4cc)
msvcp_win.dll
- _Cnd_broadcast (Address: 0x1011c5bc)
- _Cnd_destroy_in_situ (Address: 0x1011c584)
- _Cnd_init_in_situ (Address: 0x1011c580)
- _Cnd_timedwait (Address: 0x1011c548)
- _Mtx_current_owns (Address: 0x1011c550)
- _Mtx_destroy_in_situ (Address: 0x1011c574)
- _Mtx_init_in_situ (Address: 0x1011c578)
- _Mtx_lock (Address: 0x1011c530)
- _Mtx_unlock (Address: 0x1011c538)
- _Query_perf_counter (Address: 0x1011c540)
- _Query_perf_frequency (Address: 0x1011c544)
- _Xtime_get_ticks (Address: 0x1011c554)
- ?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z (Address: 0x1011c4d4)
- ?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1011c4e0)
- ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1011c560)
- ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x1011c56c)
- ?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x1011c51c)
- ?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x1011c604)
- ?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ (Address: 0x1011c504)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x1011c5ac)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ (Address: 0x1011c5cc)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x1011c5f8)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x1011c534)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x1011c54c)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x1011c5b8)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1011c588)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1011c564)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1011c570)
- ??0_Lockit@std@@QAE@H@Z (Address: 0x1011c57c)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1011c508)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x1011c524)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1011c4f4)
- ??1_Lockit@std@@QAE@XZ (Address: 0x1011c58c)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1011c590)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1011c5b0)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1011c5f0)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z (Address: 0x1011c52c)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z (Address: 0x1011c528)
- ??Bid@locale@std@@QAEIXZ (Address: 0x1011c568)
- ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x1011c53c)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1011c50c)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1011c510)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1011c518)
- ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ (Address: 0x1011c5a4)
- ?flags@ios_base@std@@QBEHXZ (Address: 0x1011c5c4)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ (Address: 0x1011c5e4)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x1011c600)
- ?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x1011c4f8)
- ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x1011c5a8)
- ?good@ios_base@std@@QBE_NXZ (Address: 0x1011c5ec)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1011c5b4)
- ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1011c4dc)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1011c55c)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x1011c4ec)
- ?in@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAG3AAPAG@Z (Address: 0x1011c5fc)
- ?out@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBG1AAPBGPAD3AAPAD@Z (Address: 0x1011c5f4)
- ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1011c4fc)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1011c5d0)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x1011c5e0)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x1011c4e8)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x1011c514)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z (Address: 0x1011c500)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x1011c520)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x1011c594)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x1011c4e4)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z (Address: 0x1011c5a0)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z (Address: 0x1011c4f0)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x1011c5d8)
- ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x1011c5e8)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x1011c5dc)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1011c5c0)
- ?unshift@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x1011c558)
- ?widen@?$ctype@G@std@@QBEGD@Z (Address: 0x1011c4d8)
- ?width@ios_base@std@@QAE_J_J@Z (Address: 0x1011c59c)
- ?width@ios_base@std@@QBE_JXZ (Address: 0x1011c598)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x1011c5d4)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x1011c5c8)
ntdll.dll
- DbgPrint (Address: 0x1011c664)
- NtClose (Address: 0x1011c634)
- NtCreateFile (Address: 0x1011c638)
- NtQueryInformationToken (Address: 0x1011c670)
- NtQueryWnfStateData (Address: 0x1011c628)
- RtlAcquireResourceExclusive (Address: 0x1011c610)
- RtlAllocateHeap (Address: 0x1011c674)
- RtlDeleteResource (Address: 0x1011c67c)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x1011c62c)
- RtlEqualSid (Address: 0x1011c640)
- RtlFreeHeap (Address: 0x1011c66c)
- RtlFreeSid (Address: 0x1011c61c)
- RtlGetDeviceFamilyInfoEnum (Address: 0x1011c65c)
- RtlInitializeResource (Address: 0x1011c60c)
- RtlIsMultiSessionSku (Address: 0x1011c618)
- RtlIsMultiUsersInSessionSku (Address: 0x1011c660)
- RtlLoadString (Address: 0x1011c668)
- RtlNtStatusToDosError (Address: 0x1011c624)
- RtlPublishWnfStateData (Address: 0x1011c63c)
- RtlQueryPackageClaims (Address: 0x1011c658)
- RtlQueryWnfStateData (Address: 0x1011c654)
- RtlReleaseRelativeName (Address: 0x1011c630)
- RtlReleaseResource (Address: 0x1011c614)
- RtlSetEnvironmentVar (Address: 0x1011c648)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1011c64c)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1011c644)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x1011c650)
- wcsnlen (Address: 0x1011c678)
- ZwQueryWnfStateData (Address: 0x1011c620)
RMCLIENT.dll
- RmAccessCheck (Address: 0x1011c000)
TOKENBINDING.dll
- TokenBindingGenerateIDForUri (Address: 0x1011c024)