Windows.Internal.Management.dll

Description: Windows Managent Service DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: 54955ce2624470339e9f5760b16cafb6

File Size: 804.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 18

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x307c0)
  • DllCanUnloadNow (Ordinal: 2, Address: 0x2cc90)
  • DllGetActivationFactory (Ordinal: 3, Address: 0x2cb60)
  • DllGetClassObject (Ordinal: 4, Address: 0x2cb80)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x100ba154)
  • CoAddRefServerProcess (Address: 0x100ba174)
  • CoCreateFreeThreadedMarshaler (Address: 0x100ba16c)
  • CoCreateGuid (Address: 0x100ba120)
  • CoCreateInstance (Address: 0x100ba15c)
  • CoGetApartmentType (Address: 0x100ba140)
  • CoGetInterfaceAndReleaseStream (Address: 0x100ba138)
  • CoImpersonateClient (Address: 0x100ba118)
  • CoInitializeEx (Address: 0x100ba144)
  • CoInitializeSecurity (Address: 0x100ba150)
  • CoMarshalInterface (Address: 0x100ba134)
  • CoRegisterClassObject (Address: 0x100ba168)
  • CoReleaseMarshalData (Address: 0x100ba12c)
  • CoReleaseServerProcess (Address: 0x100ba178)
  • CoResumeClassObjects (Address: 0x100ba164)
  • CoRevertToSelf (Address: 0x100ba11c)
  • CoRevokeClassObject (Address: 0x100ba170)
  • CoTaskMemAlloc (Address: 0x100ba160)
  • CoTaskMemFree (Address: 0x100ba13c)
  • CoUninitialize (Address: 0x100ba148)
  • CoWaitForMultipleHandles (Address: 0x100ba128)
  • CreateStreamOnHGlobal (Address: 0x100ba130)
  • IIDFromString (Address: 0x100ba14c)
  • StringFromCLSID (Address: 0x100ba158)
  • StringFromGUID2 (Address: 0x100ba124)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x100ba180)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100ba18c)
  • IsDebuggerPresent (Address: 0x100ba190)
  • OutputDebugStringW (Address: 0x100ba188)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100ba1a4)
  • RaiseException (Address: 0x100ba198)
  • SetLastError (Address: 0x100ba1a8)
  • SetUnhandledExceptionFilter (Address: 0x100ba19c)
  • UnhandledExceptionFilter (Address: 0x100ba1a0)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x100ba1b0)
  • DeleteFileW (Address: 0x100ba1bc)
  • FindClose (Address: 0x100ba1c8)
  • FindFirstFileW (Address: 0x100ba1c0)
  • FindNextFileW (Address: 0x100ba1cc)
  • GetFileAttributesW (Address: 0x100ba1c4)
  • GetFileSizeEx (Address: 0x100ba1b8)
  • ReadFile (Address: 0x100ba1b4)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100ba1d4)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100ba1e0)
  • HeapAlloc (Address: 0x100ba1e4)
  • HeapFree (Address: 0x100ba1dc)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x100ba1ec)
  • LocalFree (Address: 0x100ba1f0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x100ba204)
  • FreeLibrary (Address: 0x100ba214)
  • GetModuleFileNameA (Address: 0x100ba200)
  • GetModuleFileNameW (Address: 0x100ba21c)
  • GetModuleHandleExW (Address: 0x100ba208)
  • GetModuleHandleW (Address: 0x100ba1fc)
  • GetProcAddress (Address: 0x100ba1f8)
  • LoadLibraryExA (Address: 0x100ba210)
  • LoadLibraryExW (Address: 0x100ba20c)
  • LoadStringW (Address: 0x100ba218)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100ba224)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualProtect (Address: 0x100ba230)
  • VirtualQuery (Address: 0x100ba22c)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x100ba240)
  • PathCchAppend (Address: 0x100ba24c)
  • PathCchAppendEx (Address: 0x100ba250)
  • PathCchCanonicalizeEx (Address: 0x100ba238)
  • PathCchCombine (Address: 0x100ba248)
  • PathCchCombineEx (Address: 0x100ba244)
  • PathCchFindExtension (Address: 0x100ba23c)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100ba258)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x100ba260)
  • GetCurrentProcess (Address: 0x100ba268)
  • GetCurrentProcessId (Address: 0x100ba27c)
  • GetCurrentThread (Address: 0x100ba278)
  • GetCurrentThreadId (Address: 0x100ba264)
  • GetExitCodeProcess (Address: 0x100ba280)
  • OpenProcessToken (Address: 0x100ba270)
  • OpenThreadToken (Address: 0x100ba274)
  • TerminateProcess (Address: 0x100ba26c)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x100ba288)
  • OpenProcess (Address: 0x100ba28c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100ba294)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x100ba29c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100ba2cc)
  • RegCreateKeyExW (Address: 0x100ba2b4)
  • RegDeleteKeyExW (Address: 0x100ba2a8)
  • RegDeleteTreeW (Address: 0x100ba2d4)
  • RegDeleteValueW (Address: 0x100ba2b0)
  • RegEnumKeyExW (Address: 0x100ba2a4)
  • RegEnumValueW (Address: 0x100ba2d0)
  • RegGetValueW (Address: 0x100ba2c4)
  • RegNotifyChangeKeyValue (Address: 0x100ba2b8)
  • RegOpenCurrentUser (Address: 0x100ba2c8)
  • RegOpenKeyExW (Address: 0x100ba2ac)
  • RegQueryInfoKeyW (Address: 0x100ba2d8)
  • RegQueryValueExW (Address: 0x100ba2bc)
  • RegSetValueExW (Address: 0x100ba2c0)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x100ba2e4)
  • RegSetKeyValueW (Address: 0x100ba2e0)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x100ba2f0)
  • RegOpenKeyW (Address: 0x100ba2ec)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x100ba2f8)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x100ba300)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrlenA (Address: 0x100ba308)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100ba328)
  • AcquireSRWLockShared (Address: 0x100ba314)
  • CreateEventA (Address: 0x100ba354)
  • CreateEventExW (Address: 0x100ba364)
  • CreateEventW (Address: 0x100ba358)
  • CreateMutexExW (Address: 0x100ba320)
  • CreateSemaphoreExW (Address: 0x100ba34c)
  • DeleteCriticalSection (Address: 0x100ba338)
  • EnterCriticalSection (Address: 0x100ba32c)
  • InitializeCriticalSectionEx (Address: 0x100ba35c)
  • InitializeSRWLock (Address: 0x100ba368)
  • LeaveCriticalSection (Address: 0x100ba324)
  • OpenEventW (Address: 0x100ba330)
  • OpenSemaphoreW (Address: 0x100ba340)
  • ReleaseMutex (Address: 0x100ba318)
  • ReleaseSemaphore (Address: 0x100ba350)
  • ReleaseSRWLockExclusive (Address: 0x100ba310)
  • ReleaseSRWLockShared (Address: 0x100ba31c)
  • ResetEvent (Address: 0x100ba360)
  • SetEvent (Address: 0x100ba348)
  • TryAcquireSRWLockShared (Address: 0x100ba334)
  • WaitForSingleObject (Address: 0x100ba33c)
  • WaitForSingleObjectEx (Address: 0x100ba344)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100ba37c)
  • InitOnceComplete (Address: 0x100ba384)
  • InitOnceExecuteOnce (Address: 0x100ba378)
  • Sleep (Address: 0x100ba374)
  • SleepConditionVariableSRW (Address: 0x100ba370)
  • WakeAllConditionVariable (Address: 0x100ba380)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x100ba38c)
  • GetSystemInfo (Address: 0x100ba398)
  • GetSystemTime (Address: 0x100ba39c)
  • GetSystemTimeAsFileTime (Address: 0x100ba390)
  • GetTickCount (Address: 0x100ba3a0)
  • GetTickCount64 (Address: 0x100ba394)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100ba3b4)
  • CloseThreadpoolWork (Address: 0x100ba3b0)
  • CreateThreadpoolTimer (Address: 0x100ba3c0)
  • CreateThreadpoolWork (Address: 0x100ba3bc)
  • FreeLibraryWhenCallbackReturns (Address: 0x100ba3a8)
  • SetThreadpoolTimer (Address: 0x100ba3ac)
  • SubmitThreadpoolWork (Address: 0x100ba3c4)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100ba3b8)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x100ba3d0)
  • DeleteTimerQueueTimer (Address: 0x100ba3cc)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x100ba3dc)
  • SystemTimeToFileTime (Address: 0x100ba3d8)
api-ms-win-core-url-l1-1-0.dll
  • UrlEscapeW (Address: 0x100ba3e4)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100ba3ec)
  • EncodePointer (Address: 0x100ba3f0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x100ba408)
  • RoOriginateError (Address: 0x100ba3f8)
  • RoOriginateErrorW (Address: 0x100ba404)
  • RoTransformError (Address: 0x100ba400)
  • SetRestrictedErrorInfo (Address: 0x100ba3fc)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x100ba410)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x100ba414)
  • RoReportFailedDelegate (Address: 0x100ba418)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x100ba424)
  • RoGetActivationFactory (Address: 0x100ba428)
  • RoInitialize (Address: 0x100ba42c)
  • RoRegisterActivationFactories (Address: 0x100ba434)
  • RoRevokeActivationFactories (Address: 0x100ba430)
  • RoUninitialize (Address: 0x100ba420)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x100ba454)
  • HSTRING_UserMarshal (Address: 0x100ba45c)
  • HSTRING_UserSize (Address: 0x100ba464)
  • HSTRING_UserUnmarshal (Address: 0x100ba450)
  • WindowsConcatString (Address: 0x100ba46c)
  • WindowsCreateString (Address: 0x100ba468)
  • WindowsCreateStringReference (Address: 0x100ba44c)
  • WindowsDeleteString (Address: 0x100ba43c)
  • WindowsDuplicateString (Address: 0x100ba440)
  • WindowsGetStringLen (Address: 0x100ba458)
  • WindowsGetStringRawBuffer (Address: 0x100ba460)
  • WindowsIsStringEmpty (Address: 0x100ba444)
  • WindowsStringHasEmbeddedNull (Address: 0x100ba448)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x100ba480)
  • EventRegister (Address: 0x100ba47c)
  • EventSetInformation (Address: 0x100ba474)
  • EventUnregister (Address: 0x100ba484)
  • EventWriteTransfer (Address: 0x100ba478)
api-ms-win-oobe-notification-l1-1-0.dll
  • OOBEComplete (Address: 0x100ba48c)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x100ba49c)
  • DuplicateTokenEx (Address: 0x100ba498)
  • FreeSid (Address: 0x100ba4a0)
  • GetTokenInformation (Address: 0x100ba4a4)
  • IsWellKnownSid (Address: 0x100ba494)
api-ms-win-security-base-l1-2-0.dll
  • CheckTokenMembershipEx (Address: 0x100ba4ac)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x100ba4b4)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x100ba4c4)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x100ba4c0)
  • ConvertStringSidToSidW (Address: 0x100ba4bc)
api-ms-win-service-core-l1-1-0.dll
  • SetServiceStatus (Address: 0x100ba4cc)
api-ms-win-service-winsvc-l1-1-0.dll
  • RegisterServiceCtrlHandlerA (Address: 0x100ba4d4)
api-ms-win-shcore-stream-l1-1-0.dll
  • SHCreateMemStream (Address: 0x100ba4e4)
  • SHCreateStreamOnFileEx (Address: 0x100ba4e0)
  • SHCreateStreamOnFileW (Address: 0x100ba4dc)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x100ba4f0)
  • SHTaskPoolQueueTask (Address: 0x100ba4ec)
combase.dll
  • (Address: 0x100ba4f8)
  • (Address: 0x100ba508)
  • (Address: 0x100ba510)
  • (Address: 0x100ba51c)
  • (Address: 0x100ba520)
  • (Address: 0x100ba524)
  • (Address: 0x100ba52c)
  • (Address: 0x100ba530)
  • (Address: 0x100ba534)
  • (Address: 0x100ba538)
  • (Address: 0x100ba540)
  • (Address: 0x100ba548)
  • (Address: 0x100ba54c)
  • (Address: 0x100ba550)
  • (Address: 0x100ba554)
  • (Address: 0x100ba558)
  • (Address: 0x100ba568)
  • (Address: 0x100ba56c)
  • (Address: 0x100ba574)
  • (Address: 0x100ba57c)
  • (Address: 0x100ba580)
  • (Address: 0x100ba584)
  • (Address: 0x100ba588)
  • (Address: 0x100ba58c)
  • (Address: 0x100ba590)
  • (Address: 0x100ba594)
  • (Address: 0x100ba59c)
  • (Address: 0x100ba5a0)
  • CStdStubBuffer_AddRef (Address: 0x100ba504)
  • CStdStubBuffer_Connect (Address: 0x100ba518)
  • CStdStubBuffer_CountRefs (Address: 0x100ba578)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x100ba560)
  • CStdStubBuffer_DebugServerRelease (Address: 0x100ba564)
  • CStdStubBuffer_Disconnect (Address: 0x100ba544)
  • CStdStubBuffer_Invoke (Address: 0x100ba598)
  • CStdStubBuffer_IsIIDSupported (Address: 0x100ba50c)
  • CStdStubBuffer_QueryInterface (Address: 0x100ba570)
  • CStdStubBuffer2_Connect (Address: 0x100ba514)
  • CStdStubBuffer2_CountRefs (Address: 0x100ba55c)
  • CStdStubBuffer2_Disconnect (Address: 0x100ba500)
  • CStdStubBuffer2_QueryInterface (Address: 0x100ba4fc)
  • NdrCStdStubBuffer_Release (Address: 0x100ba53c)
  • NdrCStdStubBuffer2_Release (Address: 0x100ba528)
DMCmnUtils.dll
  • CopyString (Address: 0x100ba048)
  • DmDeleteTask (Address: 0x100ba054)
  • DmDisableTask (Address: 0x100ba000)
  • DmGetAadUserToken (Address: 0x100ba028)
  • DmGetActiveUserSid (Address: 0x100ba060)
  • DmGetCurrentUserSid (Address: 0x100ba020)
  • DmGetCurrentUserToken (Address: 0x100ba058)
  • DmGetUserSidFromToken (Address: 0x100ba050)
  • DmImpersonate (Address: 0x100ba068)
  • DmInvalidateAadUserToken (Address: 0x100ba024)
  • DmIsRunningInSystemContext (Address: 0x100ba018)
  • DmIsSystemOrAdmin (Address: 0x100ba004)
  • DmIsSystemOrUserIsAdmin (Address: 0x100ba044)
  • DmRaiseToastNotification (Address: 0x100ba03c)
  • DmRaiseToastNotificationAndWait (Address: 0x100ba014)
  • DmRequestAadUserToken (Address: 0x100ba02c)
  • DmRevertToSelf (Address: 0x100ba040)
  • DmRunTask (Address: 0x100ba05c)
  • HexStringToBinary (Address: 0x100ba00c)
  • InvStrCmpIW (Address: 0x100ba008)
  • IsPhoneOS (Address: 0x100ba064)
  • MBToUnicode (Address: 0x100ba06c)
  • OmaDmRegistryGetBinary (Address: 0x100ba038)
  • OmaDmRegistryGetDWORD (Address: 0x100ba04c)
  • OmaDmRegistryGetString (Address: 0x100ba01c)
  • OmaDmRegistrySetBinary (Address: 0x100ba030)
  • OmaDmRegistrySetDWORD (Address: 0x100ba034)
  • UnicodeToMB (Address: 0x100ba010)
IPHLPAPI.DLL
  • Icmp6CreateFile (Address: 0x100ba078)
  • Icmp6SendEcho2 (Address: 0x100ba074)
  • IcmpCloseHandle (Address: 0x100ba084)
  • IcmpCreateFile (Address: 0x100ba07c)
  • IcmpSendEcho (Address: 0x100ba080)
msvcp110_win.dll
  • ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ba60c)
  • ?_Add_vtordisp1@?$basic_istream@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ba67c)
  • ?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ba5d8)
  • ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ba610)
  • ?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ba680)
  • ?_BADOFF@std@@3_JB (Address: 0x100ba690)
  • ?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z (Address: 0x100ba688)
  • ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100ba5ac)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x100ba694)
  • ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100ba5bc)
  • ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x100ba5b0)
  • ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z (Address: 0x100ba640)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ba5e4)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ba658)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100ba5c0)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x100ba63c)
  • ?_Syserror_map@std@@YAPBDH@Z (Address: 0x100ba6a8)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ba5e8)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ba65c)
  • ?_Winerror_map@std@@YAPBDH@Z (Address: 0x100ba6b0)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x100ba6a4)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100ba6ac)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100ba6b4)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x100ba698)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100ba5b8)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100ba628)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x100ba5c8)
  • ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x100ba62c)
  • ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x100ba5c4)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100ba5a8)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100ba624)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x100ba69c)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ba5d4)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ba644)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ba618)
  • ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ba684)
  • ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ba608)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ba5e0)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ba64c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x100ba614)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x100ba620)
  • ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x100ba61c)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x100ba634)
  • ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100ba6b8)
  • ?id@?$codecvt@DDH@std@@2V0locale@2@A (Address: 0x100ba68c)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100ba604)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100ba678)
  • ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z (Address: 0x100ba5cc)
  • ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z (Address: 0x100ba5d0)
  • ?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x100ba638)
  • ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x100ba630)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x100ba5fc)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x100ba670)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100ba5dc)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x100ba648)
  • ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x100ba650)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x100ba5ec)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x100ba660)
  • ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x100ba654)
  • ?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z (Address: 0x100ba6a0)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100ba600)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x100ba674)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100ba5f0)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x100ba664)
  • ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z (Address: 0x100ba5b4)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x100ba5f4)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x100ba668)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x100ba5f8)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x100ba66c)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x100ba79c)
  • __dllonexit (Address: 0x100ba750)
  • _amsg_exit (Address: 0x100ba768)
  • _callnewh (Address: 0x100ba770)
  • _CxxThrowException (Address: 0x100ba734)
  • _errno (Address: 0x100ba704)
  • _except_handler4_common (Address: 0x100ba744)
  • _fseeki64 (Address: 0x100ba6d0)
  • _initterm (Address: 0x100ba760)
  • _lock (Address: 0x100ba758)
  • _onexit (Address: 0x100ba74c)
  • _purecall (Address: 0x100ba790)
  • _set_errno (Address: 0x100ba708)
  • _unlock (Address: 0x100ba754)
  • _vsnprintf_s (Address: 0x100ba780)
  • _vsnwprintf (Address: 0x100ba798)
  • _wcsicmp (Address: 0x100ba720)
  • _wcsnicmp (Address: 0x100ba73c)
  • _XcptFilter (Address: 0x100ba76c)
  • ??_V@YAXPAX@Z (Address: 0x100ba778)
  • ??0bad_cast@@QAE@ABV0@@Z (Address: 0x100ba6e8)
  • ??0bad_cast@@QAE@PBD@Z (Address: 0x100ba6ec)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x100ba784)
  • ??0exception@@QAE@XZ (Address: 0x100ba788)
  • ??1bad_cast@@UAE@XZ (Address: 0x100ba6f0)
  • ??1exception@@UAE@XZ (Address: 0x100ba78c)
  • ??1type_info@@UAE@XZ (Address: 0x100ba748)
  • ??3@YAXPAX@Z (Address: 0x100ba7a0)
  • ?terminate@@YAXXZ (Address: 0x100ba75c)
  • fclose (Address: 0x100ba6dc)
  • fflush (Address: 0x100ba6e0)
  • fgetc (Address: 0x100ba6d8)
  • fgetpos (Address: 0x100ba6c0)
  • fputc (Address: 0x100ba6e4)
  • free (Address: 0x100ba764)
  • fsetpos (Address: 0x100ba6cc)
  • fwrite (Address: 0x100ba7a4)
  • malloc (Address: 0x100ba774)
  • memcmp (Address: 0x100ba730)
  • memcpy (Address: 0x100ba72c)
  • memcpy_s (Address: 0x100ba794)
  • memmove (Address: 0x100ba728)
  • memmove_s (Address: 0x100ba77c)
  • memset (Address: 0x100ba740)
  • realloc (Address: 0x100ba718)
  • setvbuf (Address: 0x100ba6c4)
  • sprintf_s (Address: 0x100ba724)
  • strchr (Address: 0x100ba6fc)
  • strncpy_s (Address: 0x100ba70c)
  • strrchr (Address: 0x100ba6f8)
  • strtol (Address: 0x100ba700)
  • swprintf_s (Address: 0x100ba738)
  • towlower (Address: 0x100ba6d4)
  • ungetc (Address: 0x100ba6c8)
  • wcschr (Address: 0x100ba6f4)
  • wcsrchr (Address: 0x100ba71c)
  • wcsstr (Address: 0x100ba714)
  • wcstoul (Address: 0x100ba710)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x100ba7b8)
  • RtlIpv4StringToAddressW (Address: 0x100ba7b0)
  • RtlIpv6StringToAddressW (Address: 0x100ba7ac)
  • RtlIsMultiSessionSku (Address: 0x100ba7c0)
  • RtlIsMultiUsersInSessionSku (Address: 0x100ba7c4)
  • RtlIsStateSeparationEnabled (Address: 0x100ba7cc)
  • RtlPublishWnfStateData (Address: 0x100ba7c8)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x100ba7bc)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100ba7b4)
OLEAUT32.dll
  • SafeArrayCreate (Address: 0x100ba0a8)
  • SafeArrayDestroy (Address: 0x100ba094)
  • SafeArrayGetLBound (Address: 0x100ba0a0)
  • SafeArrayGetUBound (Address: 0x100ba08c)
  • SafeArrayLock (Address: 0x100ba0a4)
  • SafeArrayUnlock (Address: 0x100ba090)
  • SysAllocString (Address: 0x100ba0ac)
  • SysAllocStringLen (Address: 0x100ba0b4)
  • SysFreeString (Address: 0x100ba098)
  • VariantChangeType (Address: 0x100ba09c)
  • VariantClear (Address: 0x100ba0b0)
  • VariantInit (Address: 0x100ba0b8)
RPCRT4.dll
  • I_RpcBindingInqLocalClientPID (Address: 0x100ba0cc)
  • IUnknown_AddRef_Proxy (Address: 0x100ba0c4)
  • IUnknown_QueryInterface_Proxy (Address: 0x100ba0e4)
  • IUnknown_Release_Proxy (Address: 0x100ba0d0)
  • NdrDllCanUnloadNow (Address: 0x100ba0f0)
  • NdrDllGetClassObject (Address: 0x100ba0ec)
  • NdrOleAllocate (Address: 0x100ba0d4)
  • NdrOleFree (Address: 0x100ba0c8)
  • NdrStubCall2 (Address: 0x100ba0c0)
  • NdrStubForwardingFunction (Address: 0x100ba0e8)
  • RpcStringFreeW (Address: 0x100ba0e0)
  • UuidCreate (Address: 0x100ba0d8)
  • UuidFromStringW (Address: 0x100ba0f4)
  • UuidToStringW (Address: 0x100ba0dc)
WS2_32.dll
  • closesocket (Address: 0x100ba0fc)
  • socket (Address: 0x100ba10c)
  • WSACleanup (Address: 0x100ba100)
  • WSAGetLastError (Address: 0x100ba108)
  • WSAIoctl (Address: 0x100ba104)
  • WSAStartup (Address: 0x100ba110)