mqsnap.dll

Description: Message Queuing Snapin

Authors: © Microsoft Corporation. All rights reserved.

Version: 5.0.1.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 0ba7ab749a120ef0706284b327a72416

File Size: 829.0 KB

Uploaded At: Dec. 1, 2025, 8:13 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x29d90)
  • DllGetClassObject (Ordinal: 2, Address: 0x29df0)
  • DllRegisterServer (Ordinal: 3, Address: 0x29e10)
  • DllUnregisterServer (Ordinal: 4, Address: 0x29e80)

Imported DLLs & Functions

ACLUI.dll
  • (Address: 0x1800790f0)
ACTIVEDS.dll
  • (Address: 0x180079100)
  • (Address: 0x180079108)
  • (Address: 0x180079110)
ADVAPI32.dll
  • AddAccessAllowedAce (Address: 0x1800791a0)
  • AdjustTokenPrivileges (Address: 0x1800791b8)
  • CloseServiceHandle (Address: 0x180079228)
  • ControlService (Address: 0x180079240)
  • ConvertSidToStringSidW (Address: 0x1800791c0)
  • CopySid (Address: 0x180079178)
  • EnumDependentServicesW (Address: 0x180079248)
  • EqualSid (Address: 0x1800791a8)
  • GetAce (Address: 0x180079198)
  • GetAclInformation (Address: 0x180079190)
  • GetFileSecurityW (Address: 0x180079208)
  • GetLengthSid (Address: 0x180079120)
  • GetSecurityDescriptorDacl (Address: 0x180079188)
  • GetSecurityDescriptorLength (Address: 0x1800791f8)
  • GetTraceEnableFlags (Address: 0x1800791e0)
  • GetTraceEnableLevel (Address: 0x1800791d8)
  • GetTraceLoggerHandle (Address: 0x1800791d0)
  • InitializeAcl (Address: 0x180079260)
  • InitializeSecurityDescriptor (Address: 0x180079128)
  • InitiateSystemShutdownExW (Address: 0x180079210)
  • IsValidSid (Address: 0x180079170)
  • LookupAccountSidW (Address: 0x1800791c8)
  • LookupPrivilegeValueW (Address: 0x1800791b0)
  • MakeSelfRelativeSD (Address: 0x180079278)
  • MapGenericMask (Address: 0x180079200)
  • OpenProcessToken (Address: 0x180079180)
  • OpenSCManagerW (Address: 0x180079218)
  • OpenServiceW (Address: 0x180079220)
  • QueryServiceStatus (Address: 0x180079238)
  • QueryServiceStatusEx (Address: 0x180079230)
  • RegCloseKey (Address: 0x180079148)
  • RegCreateKeyExW (Address: 0x180079150)
  • RegDeleteKeyW (Address: 0x180079140)
  • RegDeleteValueW (Address: 0x180079138)
  • RegEnumKeyExW (Address: 0x180079168)
  • RegisterTraceGuidsW (Address: 0x1800791e8)
  • RegOpenKeyExW (Address: 0x180079158)
  • RegQueryInfoKeyW (Address: 0x180079280)
  • RegQueryValueExW (Address: 0x180079270)
  • RegSetValueExW (Address: 0x180079160)
  • SetSecurityDescriptorDacl (Address: 0x180079268)
  • StartServiceW (Address: 0x180079250)
  • TraceEvent (Address: 0x180079258)
  • TraceMessage (Address: 0x180079130)
  • UnregisterTraceGuids (Address: 0x1800791f0)
CLUSAPI.dll
  • CloseCluster (Address: 0x180079298)
  • CloseClusterNode (Address: 0x1800792a8)
  • OpenCluster (Address: 0x1800792a0)
  • OpenClusterNode (Address: 0x180079290)
CRYPT32.dll
  • CertCloseStore (Address: 0x1800792c0)
  • CertOpenStore (Address: 0x1800792b8)
CRYPTUI.dll
  • CryptUIDlgSelectCertificateFromStore (Address: 0x1800792d0)
GDI32.dll
  • CreateFontIndirectW (Address: 0x1800792e8)
  • DeleteObject (Address: 0x1800792f0)
  • GetTextExtentPoint32W (Address: 0x1800792e0)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x180079410)
  • AcquireSRWLockShared (Address: 0x1800793c0)
  • ActivateActCtx (Address: 0x180079370)
  • CloseHandle (Address: 0x1800793f8)
  • CloseThreadpoolTimer (Address: 0x180079418)
  • CompareStringW (Address: 0x1800794e8)
  • CreateActCtxW (Address: 0x180079358)
  • CreateDirectoryW (Address: 0x180079528)
  • CreateMutexExW (Address: 0x1800793c8)
  • CreateSemaphoreExW (Address: 0x180079498)
  • CreateThreadpoolTimer (Address: 0x1800793e0)
  • DeactivateActCtx (Address: 0x180079380)
  • DebugBreak (Address: 0x180079398)
  • DecodePointer (Address: 0x180079580)
  • DeleteCriticalSection (Address: 0x1800793b8)
  • EncodePointer (Address: 0x180079578)
  • EnterCriticalSection (Address: 0x180079480)
  • ExpandEnvironmentStringsW (Address: 0x180079508)
  • FindActCtxSectionStringW (Address: 0x180079360)
  • FindClose (Address: 0x180079510)
  • FindFirstFileW (Address: 0x180079538)
  • FindNextFileW (Address: 0x180079548)
  • FindResourceW (Address: 0x180079338)
  • FlushInstructionCache (Address: 0x180079588)
  • FormatMessageW (Address: 0x180079438)
  • FreeLibrary (Address: 0x180079318)
  • GetComputerNameW (Address: 0x180079560)
  • GetCurrentProcess (Address: 0x180079300)
  • GetCurrentProcessId (Address: 0x1800793b0)
  • GetCurrentThreadId (Address: 0x180079448)
  • GetDateFormatW (Address: 0x1800794d8)
  • GetDriveTypeW (Address: 0x180079520)
  • GetFileAttributesW (Address: 0x180079518)
  • GetLastError (Address: 0x180079430)
  • GetModuleFileNameA (Address: 0x1800794a0)
  • GetModuleFileNameW (Address: 0x180079350)
  • GetModuleHandleExW (Address: 0x180079470)
  • GetModuleHandleW (Address: 0x1800793a0)
  • GetProcAddress (Address: 0x1800793d0)
  • GetProcessHeap (Address: 0x1800793a8)
  • GetSystemTimeAsFileTime (Address: 0x1800795d8)
  • GetTickCount (Address: 0x1800795e0)
  • GetTimeFormatW (Address: 0x1800794e0)
  • GetVersionExW (Address: 0x1800794d0)
  • GlobalAlloc (Address: 0x1800794f8)
  • GlobalFree (Address: 0x1800794b8)
  • HeapAlloc (Address: 0x1800793d8)
  • HeapDestroy (Address: 0x1800794a8)
  • HeapFree (Address: 0x180079490)
  • InitializeCriticalSection (Address: 0x1800795e8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800794c8)
  • InitializeCriticalSectionEx (Address: 0x180079460)
  • InterlockedPopEntrySList (Address: 0x180079598)
  • InterlockedPushEntrySList (Address: 0x180079590)
  • IsDebuggerPresent (Address: 0x180079390)
  • LeaveCriticalSection (Address: 0x180079468)
  • LoadLibraryExA (Address: 0x180079570)
  • LoadLibraryExW (Address: 0x180079378)
  • LoadLibraryW (Address: 0x180079368)
  • LoadResource (Address: 0x180079330)
  • LocalAlloc (Address: 0x180079500)
  • LocalFree (Address: 0x1800794f0)
  • LockResource (Address: 0x1800794c0)
  • lstrcpynW (Address: 0x180079388)
  • lstrcpyW (Address: 0x1800794b0)
  • lstrlenA (Address: 0x1800795a0)
  • MoveFileW (Address: 0x180079540)
  • MultiByteToWideChar (Address: 0x180079320)
  • OpenProcess (Address: 0x180079550)
  • OpenSemaphoreW (Address: 0x180079400)
  • OutputDebugStringA (Address: 0x180079340)
  • OutputDebugStringW (Address: 0x180079420)
  • QueryActCtxW (Address: 0x180079348)
  • QueryPerformanceCounter (Address: 0x1800795d0)
  • RaiseException (Address: 0x180079308)
  • ReleaseMutex (Address: 0x180079440)
  • ReleaseSemaphore (Address: 0x180079478)
  • ReleaseSRWLockExclusive (Address: 0x180079428)
  • ReleaseSRWLockShared (Address: 0x1800793e8)
  • RemoveDirectoryW (Address: 0x180079530)
  • SetLastError (Address: 0x180079488)
  • SetThreadpoolTimer (Address: 0x1800793f0)
  • SetUnhandledExceptionFilter (Address: 0x1800795b0)
  • SizeofResource (Address: 0x180079328)
  • Sleep (Address: 0x180079558)
  • SleepConditionVariableSRW (Address: 0x1800795c8)
  • TerminateProcess (Address: 0x1800795b8)
  • UnhandledExceptionFilter (Address: 0x1800795a8)
  • VirtualAlloc (Address: 0x180079310)
  • VirtualFree (Address: 0x180079568)
  • WaitForSingleObject (Address: 0x180079450)
  • WaitForSingleObjectEx (Address: 0x180079408)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180079458)
  • WakeAllConditionVariable (Address: 0x1800795c0)
MFC42u.dll
  • (Address: 0x1800795f8)
  • (Address: 0x180079600)
  • (Address: 0x180079608)
  • (Address: 0x180079610)
  • (Address: 0x180079618)
  • (Address: 0x180079620)
  • (Address: 0x180079628)
  • (Address: 0x180079630)
  • (Address: 0x180079638)
  • (Address: 0x180079640)
  • (Address: 0x180079648)
  • (Address: 0x180079650)
  • (Address: 0x180079658)
  • (Address: 0x180079660)
  • (Address: 0x180079668)
  • (Address: 0x180079670)
  • (Address: 0x180079678)
  • (Address: 0x180079680)
  • (Address: 0x180079688)
  • (Address: 0x180079690)
  • (Address: 0x180079698)
  • (Address: 0x1800796a0)
  • (Address: 0x1800796a8)
  • (Address: 0x1800796b0)
  • (Address: 0x1800796b8)
  • (Address: 0x1800796c0)
  • (Address: 0x1800796c8)
  • (Address: 0x1800796d0)
  • (Address: 0x1800796d8)
  • (Address: 0x1800796e0)
  • (Address: 0x1800796e8)
  • (Address: 0x1800796f0)
  • (Address: 0x1800796f8)
  • (Address: 0x180079700)
  • (Address: 0x180079708)
  • (Address: 0x180079710)
  • (Address: 0x180079718)
  • (Address: 0x180079720)
  • (Address: 0x180079728)
  • (Address: 0x180079730)
  • (Address: 0x180079738)
  • (Address: 0x180079740)
  • (Address: 0x180079748)
  • (Address: 0x180079750)
  • (Address: 0x180079758)
  • (Address: 0x180079760)
  • (Address: 0x180079768)
  • (Address: 0x180079770)
  • (Address: 0x180079778)
  • (Address: 0x180079780)
  • (Address: 0x180079788)
  • (Address: 0x180079790)
  • (Address: 0x180079798)
  • (Address: 0x1800797a0)
  • (Address: 0x1800797a8)
  • (Address: 0x1800797b0)
  • (Address: 0x1800797b8)
  • (Address: 0x1800797c0)
  • (Address: 0x1800797c8)
  • (Address: 0x1800797d0)
  • (Address: 0x1800797d8)
  • (Address: 0x1800797e0)
  • (Address: 0x1800797e8)
  • (Address: 0x1800797f0)
  • (Address: 0x1800797f8)
  • (Address: 0x180079800)
  • (Address: 0x180079808)
  • (Address: 0x180079810)
  • (Address: 0x180079818)
  • (Address: 0x180079820)
  • (Address: 0x180079828)
  • (Address: 0x180079830)
  • (Address: 0x180079838)
  • (Address: 0x180079840)
  • (Address: 0x180079848)
  • (Address: 0x180079850)
  • (Address: 0x180079858)
  • (Address: 0x180079860)
  • (Address: 0x180079868)
  • (Address: 0x180079870)
  • (Address: 0x180079878)
  • (Address: 0x180079880)
  • (Address: 0x180079888)
  • (Address: 0x180079890)
  • (Address: 0x180079898)
  • (Address: 0x1800798a0)
  • (Address: 0x1800798a8)
  • (Address: 0x1800798b0)
  • (Address: 0x1800798b8)
  • (Address: 0x1800798c0)
  • (Address: 0x1800798c8)
  • (Address: 0x1800798d0)
  • (Address: 0x1800798d8)
  • (Address: 0x1800798e0)
  • (Address: 0x1800798e8)
  • (Address: 0x1800798f0)
  • (Address: 0x1800798f8)
  • (Address: 0x180079900)
  • (Address: 0x180079908)
  • (Address: 0x180079910)
  • (Address: 0x180079918)
  • (Address: 0x180079920)
  • (Address: 0x180079928)
  • (Address: 0x180079930)
  • (Address: 0x180079938)
  • (Address: 0x180079940)
  • (Address: 0x180079948)
  • (Address: 0x180079950)
  • (Address: 0x180079958)
  • (Address: 0x180079960)
  • (Address: 0x180079968)
  • (Address: 0x180079970)
  • (Address: 0x180079978)
  • (Address: 0x180079980)
  • (Address: 0x180079988)
  • (Address: 0x180079990)
  • (Address: 0x180079998)
  • (Address: 0x1800799a0)
  • (Address: 0x1800799a8)
  • (Address: 0x1800799b0)
  • (Address: 0x1800799b8)
  • (Address: 0x1800799c0)
  • (Address: 0x1800799c8)
  • (Address: 0x180079db0)
  • (Address: 0x180079db8)
  • (Address: 0x180079dc0)
  • (Address: 0x180079dc8)
  • (Address: 0x180079dd0)
  • (Address: 0x180079dd8)
  • (Address: 0x180079de0)
  • (Address: 0x180079de8)
  • (Address: 0x180079df0)
  • (Address: 0x180079df8)
  • (Address: 0x180079e00)
  • (Address: 0x180079e08)
  • (Address: 0x180079e10)
  • (Address: 0x180079e18)
  • (Address: 0x180079e20)
  • (Address: 0x180079e28)
  • (Address: 0x180079e30)
  • (Address: 0x180079e38)
  • (Address: 0x180079e40)
  • (Address: 0x180079e48)
  • (Address: 0x180079e50)
  • (Address: 0x180079e58)
  • (Address: 0x180079e60)
  • (Address: 0x180079e68)
  • (Address: 0x180079e70)
  • (Address: 0x180079e78)
  • (Address: 0x1800799d0)
  • (Address: 0x1800799d8)
  • (Address: 0x1800799e0)
  • (Address: 0x1800799e8)
  • (Address: 0x1800799f0)
  • (Address: 0x1800799f8)
  • (Address: 0x180079a00)
  • (Address: 0x180079a08)
  • (Address: 0x180079a10)
  • (Address: 0x180079a18)
  • (Address: 0x180079a20)
  • (Address: 0x180079a28)
  • (Address: 0x180079a30)
  • (Address: 0x180079a38)
  • (Address: 0x180079a40)
  • (Address: 0x180079a48)
  • (Address: 0x180079a50)
  • (Address: 0x180079a58)
  • (Address: 0x180079a60)
  • (Address: 0x180079a68)
  • (Address: 0x180079a70)
  • (Address: 0x180079a78)
  • (Address: 0x180079a80)
  • (Address: 0x180079a88)
  • (Address: 0x180079a90)
  • (Address: 0x180079a98)
  • (Address: 0x180079aa0)
  • (Address: 0x180079aa8)
  • (Address: 0x180079ab0)
  • (Address: 0x180079ab8)
  • (Address: 0x180079ac0)
  • (Address: 0x180079ac8)
  • (Address: 0x180079ad0)
  • (Address: 0x180079ad8)
  • (Address: 0x180079ae0)
  • (Address: 0x180079ae8)
  • (Address: 0x180079af0)
  • (Address: 0x180079af8)
  • (Address: 0x180079b00)
  • (Address: 0x180079b08)
  • (Address: 0x180079b10)
  • (Address: 0x180079b18)
  • (Address: 0x180079b20)
  • (Address: 0x180079b28)
  • (Address: 0x180079b30)
  • (Address: 0x180079b38)
  • (Address: 0x180079b40)
  • (Address: 0x180079b48)
  • (Address: 0x180079b50)
  • (Address: 0x180079b58)
  • (Address: 0x180079b60)
  • (Address: 0x180079b68)
  • (Address: 0x180079b70)
  • (Address: 0x180079b78)
  • (Address: 0x180079b80)
  • (Address: 0x180079b88)
  • (Address: 0x180079b90)
  • (Address: 0x180079b98)
  • (Address: 0x180079ba0)
  • (Address: 0x180079ba8)
  • (Address: 0x180079bb0)
  • (Address: 0x180079bb8)
  • (Address: 0x180079bc0)
  • (Address: 0x180079bc8)
  • (Address: 0x180079bd0)
  • (Address: 0x180079bd8)
  • (Address: 0x180079be0)
  • (Address: 0x180079be8)
  • (Address: 0x180079bf0)
  • (Address: 0x180079bf8)
  • (Address: 0x180079c00)
  • (Address: 0x180079c08)
  • (Address: 0x180079c10)
  • (Address: 0x180079c18)
  • (Address: 0x180079c20)
  • (Address: 0x180079c28)
  • (Address: 0x180079c30)
  • (Address: 0x180079c38)
  • (Address: 0x180079c40)
  • (Address: 0x180079c48)
  • (Address: 0x180079c50)
  • (Address: 0x180079c58)
  • (Address: 0x180079c60)
  • (Address: 0x180079c68)
  • (Address: 0x180079c70)
  • (Address: 0x180079c78)
  • (Address: 0x180079c80)
  • (Address: 0x180079c88)
  • (Address: 0x180079c90)
  • (Address: 0x180079c98)
  • (Address: 0x180079ca0)
  • (Address: 0x180079ca8)
  • (Address: 0x180079cb0)
  • (Address: 0x180079cb8)
  • (Address: 0x180079cc0)
  • (Address: 0x180079cc8)
  • (Address: 0x180079cd0)
  • (Address: 0x180079cd8)
  • (Address: 0x180079ce0)
  • (Address: 0x180079ce8)
  • (Address: 0x180079cf0)
  • (Address: 0x180079cf8)
  • (Address: 0x180079d00)
  • (Address: 0x180079d08)
  • (Address: 0x180079d10)
  • (Address: 0x180079d18)
  • (Address: 0x180079d20)
  • (Address: 0x180079d28)
  • (Address: 0x180079d30)
  • (Address: 0x180079d38)
  • (Address: 0x180079d40)
  • (Address: 0x180079d48)
  • (Address: 0x180079d50)
  • (Address: 0x180079d58)
  • (Address: 0x180079d60)
  • (Address: 0x180079d68)
  • (Address: 0x180079d70)
  • (Address: 0x180079d78)
  • (Address: 0x180079d80)
  • (Address: 0x180079d88)
  • (Address: 0x180079d90)
  • (Address: 0x180079d98)
  • (Address: 0x180079da0)
  • (Address: 0x180079da8)
MQCERTUI.dll
  • SelectPersonalCertificateForRegister (Address: 0x180079e90)
  • SelectPersonalCertificateForRemoval (Address: 0x180079e88)
  • ShowCertificate (Address: 0x180079e98)
  • ShowPersonalCertificates (Address: 0x180079ea0)
mqrt.dll
  • MQBeginTransaction (Address: 0x18007a0f0)
  • MQCloseCursor (Address: 0x18007a148)
  • MQCloseQueue (Address: 0x18007a088)
  • MQCreateCursor (Address: 0x18007a118)
  • MQCreateQueue (Address: 0x18007a090)
  • MQDeleteQueue (Address: 0x18007a0a0)
  • MQFreeMemory (Address: 0x18007a138)
  • MQGetMachineProperties (Address: 0x18007a0e8)
  • MQGetQueueProperties (Address: 0x18007a0d0)
  • MQGetQueueSecurity (Address: 0x18007a108)
  • MQMgmtAction (Address: 0x18007a0e0)
  • MQMgmtGetInfo (Address: 0x18007a0d8)
  • MQMoveMessage (Address: 0x18007a0f8)
  • MQOpenQueue (Address: 0x18007a078)
  • MQPathNameToFormatName (Address: 0x18007a098)
  • MQPurgeQueue (Address: 0x18007a120)
  • MQReceiveMessage (Address: 0x18007a0b0)
  • MQReceiveMessageByLookupId (Address: 0x18007a100)
  • MQSendMessage (Address: 0x18007a080)
  • MQSetQueueProperties (Address: 0x18007a110)
  • MQSetQueueSecurity (Address: 0x18007a0a8)
  • RTCreateInternalCertificate (Address: 0x18007a070)
  • RTDeleteInternalCert (Address: 0x18007a130)
  • RTGetInternalCert (Address: 0x18007a0b8)
  • RTGetUserCerts (Address: 0x18007a140)
  • RTIsDependentClient (Address: 0x18007a068)
  • RTRegisterUserCert (Address: 0x18007a128)
  • RTRemoveUserCert (Address: 0x18007a0c0)
  • RTRemoveUserCertSid (Address: 0x18007a0c8)
mqsec.dll
  • ??0CColumns@@QEAA@I@Z (Address: 0x18007a168)
  • ??0CRestriction@@QEAA@I@Z (Address: 0x18007a1a0)
  • ??1CColumns@@QEAA@XZ (Address: 0x18007a160)
  • ??1CRestriction@@QEAA@XZ (Address: 0x18007a1a8)
  • ?Add@CColumns@@QEAAXAEBK@Z (Address: 0x18007a158)
  • ?AddRestriction@CRestriction@@QEAAXPEAU_GUID@@KK@Z (Address: 0x18007a1b0)
  • GetComputerNameInternal (Address: 0x18007a190)
  • GetDomainFQDNName (Address: 0x18007a1c0)
  • GetFalconKeyValue (Address: 0x18007a178)
  • IsLocalSystemCluster (Address: 0x18007a1f8)
  • MQSec_GetAdminSid (Address: 0x18007a1f0)
  • MQSec_GetAnonymousSid (Address: 0x18007a180)
  • MQSec_GetProcessUserSid (Address: 0x18007a1d8)
  • MQSec_GetUserType (Address: 0x18007a198)
  • MQSec_GetWorldSid (Address: 0x18007a188)
  • MQSec_SetDirectorySecurityForService (Address: 0x18007a1e8)
  • MQSec_SetPrivilegeInThread (Address: 0x18007a1e0)
  • MQSec_StorePubKeysInDS (Address: 0x18007a1c8)
  • MQSigCreateCertificate (Address: 0x18007a1d0)
  • MSMQGetOperatingSystem (Address: 0x18007a1b8)
  • SetFalconKeyValue (Address: 0x18007a170)
mqutil.dll
  • MQGetResourceHandle (Address: 0x18007a208)
msvcrt.dll
  • __C_specific_handler (Address: 0x18007a280)
  • __CxxFrameHandler3 (Address: 0x18007a230)
  • __dllonexit (Address: 0x18007a300)
  • __RTDynamicCast (Address: 0x18007a228)
  • _amsg_exit (Address: 0x18007a320)
  • _CxxThrowException (Address: 0x18007a330)
  • _initterm (Address: 0x18007a318)
  • _itow_s (Address: 0x18007a2d0)
  • _lock (Address: 0x18007a310)
  • _onexit (Address: 0x18007a2f8)
  • _purecall (Address: 0x18007a248)
  • _snwscanf_s (Address: 0x18007a348)
  • _strnicmp (Address: 0x18007a3a8)
  • _ui64tow_s (Address: 0x18007a2d8)
  • _unlock (Address: 0x18007a308)
  • _vsnprintf_s (Address: 0x18007a268)
  • _vsnwprintf (Address: 0x18007a238)
  • _wcsdup (Address: 0x18007a2e0)
  • _wcsicmp (Address: 0x18007a290)
  • _wcsnicmp (Address: 0x18007a3a0)
  • _wtoi (Address: 0x18007a360)
  • _XcptFilter (Address: 0x18007a328)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x18007a378)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18007a2c8)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18007a260)
  • ??0exception@@QEAA@XZ (Address: 0x18007a2b0)
  • ??1exception@@UEAA@XZ (Address: 0x18007a250)
  • ??1type_info@@UEAA@XZ (Address: 0x18007a2e8)
  • ?terminate@@YAXXZ (Address: 0x18007a2f0)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x18007a2c0)
  • free (Address: 0x18007a298)
  • isalpha (Address: 0x18007a390)
  • iswdigit (Address: 0x18007a340)
  • iswspace (Address: 0x18007a388)
  • malloc (Address: 0x18007a288)
  • memcmp (Address: 0x18007a220)
  • memcpy (Address: 0x18007a218)
  • memcpy_s (Address: 0x18007a240)
  • memmove (Address: 0x18007a2a8)
  • memmove_s (Address: 0x18007a270)
  • memset (Address: 0x18007a258)
  • qsort (Address: 0x18007a398)
  • realloc (Address: 0x18007a2a0)
  • swscanf_s (Address: 0x18007a2b8)
  • towupper (Address: 0x18007a350)
  • wcschr (Address: 0x18007a380)
  • wcscmp (Address: 0x18007a338)
  • wcscspn (Address: 0x18007a370)
  • wcsnlen (Address: 0x18007a278)
  • wcstol (Address: 0x18007a358)
  • wcstoul (Address: 0x18007a368)
NETAPI32.dll
  • DsGetDcNameW (Address: 0x180079eb8)
  • NetApiBufferFree (Address: 0x180079eb0)
ntdll.dll
  • RtlCaptureContext (Address: 0x18007a3b8)
  • RtlLookupFunctionEntry (Address: 0x18007a3c0)
  • RtlVirtualUnwind (Address: 0x18007a3c8)
NTDSAPI.dll
  • DsCrackNamesW (Address: 0x180079ed0)
  • DsFreeNameResultW (Address: 0x180079ec8)
ole32.dll
  • CLSIDFromProgID (Address: 0x18007a428)
  • CoCreateInstance (Address: 0x18007a3e8)
  • CoInitialize (Address: 0x18007a420)
  • CoTaskMemAlloc (Address: 0x18007a3d8)
  • CoTaskMemFree (Address: 0x18007a410)
  • CoTaskMemRealloc (Address: 0x18007a3e0)
  • CreateStreamOnHGlobal (Address: 0x18007a400)
  • IIDFromString (Address: 0x18007a3f0)
  • OleRun (Address: 0x18007a418)
  • StringFromCLSID (Address: 0x18007a3f8)
  • StringFromGUID2 (Address: 0x18007a408)
OLEAUT32.dll
  • GetErrorInfo (Address: 0x180079f00)
  • LoadTypeLib (Address: 0x180079f28)
  • RegisterTypeLib (Address: 0x180079f20)
  • SafeArrayGetElement (Address: 0x180079f08)
  • SafeArrayGetLBound (Address: 0x180079f10)
  • SafeArrayGetUBound (Address: 0x180079f18)
  • SysAllocString (Address: 0x180079ef8)
  • SysAllocStringLen (Address: 0x180079ef0)
  • SysFreeString (Address: 0x180079ee0)
  • SysStringLen (Address: 0x180079ee8)
  • VarI4FromStr (Address: 0x180079f40)
  • VariantClear (Address: 0x180079f38)
  • VariantInit (Address: 0x180079f30)
USER32.dll
  • BringWindowToTop (Address: 0x180079f78)
  • CallNextHookEx (Address: 0x180079f50)
  • CharNextW (Address: 0x180079f90)
  • DestroyMenu (Address: 0x18007a008)
  • EnableWindow (Address: 0x180079fe0)
  • FindWindowExW (Address: 0x180079f70)
  • GetClientRect (Address: 0x180079fc0)
  • GetDC (Address: 0x18007a030)
  • GetDlgItem (Address: 0x180079fa0)
  • GetDlgItemTextW (Address: 0x18007a058)
  • GetMenuItemInfoW (Address: 0x18007a000)
  • GetParent (Address: 0x180079fb0)
  • GetSubMenu (Address: 0x180079ff8)
  • GetWindowLongPtrW (Address: 0x18007a048)
  • GetWindowRect (Address: 0x180079fb8)
  • GetWindowTextLengthW (Address: 0x180079fc8)
  • GetWindowTextW (Address: 0x180079fd0)
  • GetWindowThreadProcessId (Address: 0x180079f68)
  • InsertMenuW (Address: 0x18007a020)
  • IsWindow (Address: 0x18007a018)
  • LoadIconW (Address: 0x18007a040)
  • LoadImageW (Address: 0x180079fe8)
  • LoadMenuW (Address: 0x180079ff0)
  • LoadStringW (Address: 0x180079f98)
  • PostMessageW (Address: 0x18007a010)
  • RegisterClipboardFormatW (Address: 0x180079f88)
  • ReleaseDC (Address: 0x18007a038)
  • SendMessageW (Address: 0x180079fa8)
  • SetActiveWindow (Address: 0x180079f80)
  • SetDlgItemTextW (Address: 0x18007a050)
  • SetWindowLongPtrW (Address: 0x180079fd8)
  • SetWindowsHookExW (Address: 0x180079f60)
  • SetWindowTextW (Address: 0x18007a028)
  • UnhookWindowsHookEx (Address: 0x180079f58)