WindowsTasks.dll
Description: Windows Collection Tasks
Authors: © Microsoft Corporation. All rights reserved.
Version: 5.2.3.5
Architecture: 64-bit
Operating System: Windows NT
SHA256: 154c7ddf8186ec2ee0e8358ddbf781d4
File Size: 499.8 KB
Uploaded At: Dec. 3, 2025, 2:36 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CreateCollection (Ordinal: 1, Address: 0x48f10)
- DllMain (Ordinal: 2, Address: 0x48f70)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x180055018)
- CloseEventLog (Address: 0x180055038)
- CloseServiceHandle (Address: 0x1800550b8)
- ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x1800550f0)
- ConvertSidToStringSidW (Address: 0x180055120)
- ConvertStringSidToSidW (Address: 0x180055060)
- CreateWellKnownSid (Address: 0x1800550f8)
- DuplicateToken (Address: 0x180055020)
- EnumServicesStatusW (Address: 0x1800550c0)
- EqualSid (Address: 0x180055090)
- GetExplicitEntriesFromAclW (Address: 0x1800550a0)
- GetNamedSecurityInfoW (Address: 0x180055110)
- GetSecurityDescriptorDacl (Address: 0x180055098)
- GetSecurityDescriptorGroup (Address: 0x180055100)
- GetSecurityDescriptorOwner (Address: 0x180055108)
- GetSecurityInfo (Address: 0x180055118)
- GetTokenInformation (Address: 0x180055158)
- LookupAccountNameW (Address: 0x180055058)
- LookupAccountSidW (Address: 0x180055050)
- LookupPrivilegeNameW (Address: 0x180055160)
- LookupPrivilegeValueW (Address: 0x180055030)
- LsaClose (Address: 0x180055130)
- LsaEnumerateAccountRights (Address: 0x180055150)
- LsaEnumerateAccountsWithUserRight (Address: 0x180055148)
- LsaFreeMemory (Address: 0x180055128)
- LsaOpenPolicy (Address: 0x180055138)
- LsaQueryInformationPolicy (Address: 0x180055140)
- OpenEventLogW (Address: 0x180055040)
- OpenProcessToken (Address: 0x180055008)
- OpenSCManagerW (Address: 0x1800550c8)
- OpenServiceW (Address: 0x1800550d0)
- OpenThreadToken (Address: 0x180055010)
- QueryServiceConfig2W (Address: 0x1800550e0)
- QueryServiceConfigW (Address: 0x1800550d8)
- QueryServiceStatusEx (Address: 0x1800550e8)
- ReadEventLogW (Address: 0x180055048)
- RegCloseKey (Address: 0x180055068)
- RegEnumKeyExW (Address: 0x180055070)
- RegEnumKeyW (Address: 0x1800550b0)
- RegEnumValueW (Address: 0x180055078)
- RegOpenKeyExW (Address: 0x180055080)
- RegQueryInfoKeyW (Address: 0x1800550a8)
- RegQueryValueExW (Address: 0x180055088)
- RevertToSelf (Address: 0x180055028)
- SetThreadToken (Address: 0x180055000)
CoreLibrary.dll
- ??0AutoHandle@@QEAA@AEBQEAX@Z (Address: 0x180055208)
- ??0AutoVariant@@QEAA@XZ (Address: 0x180055220)
- ??0LogContext@@QEAA@AEBV0@@Z (Address: 0x180055258)
- ??0LogContext@@QEAA@PEB_W00@Z (Address: 0x180055318)
- ??0LogContext@@QEAA@XZ (Address: 0x1800551c8)
- ??0Task@@QEAA@PEB_WQEAXH0@Z (Address: 0x180055340)
- ??0TaskCollection@@IEAA@PEB_WQEAXH_N@Z (Address: 0x180055328)
- ??0TreeString@@QEAA@QEA_W@Z (Address: 0x1800552f8)
- ??0WASAFailureException@@QEAA@AEBV0@@Z (Address: 0x180055268)
- ??0XmlWriter@@QEAA@PEB_W@Z (Address: 0x180055198)
- ??1AutoComUninitializer@@QEAA@XZ (Address: 0x180055188)
- ??1AutoCriticalSection@@QEAA@XZ (Address: 0x180055248)
- ??1AutoHandle@@QEAA@XZ (Address: 0x180055180)
- ??1AutoLibrary@@QEAA@XZ (Address: 0x180055270)
- ??1AutoLock@@QEAA@XZ (Address: 0x1800551f0)
- ??1AutoVariant@@QEAA@XZ (Address: 0x180055190)
- ??1LogContext@@QEAA@XZ (Address: 0x1800551d0)
- ??1Task@@MEAA@XZ (Address: 0x180055338)
- ??1TaskCollection@@UEAA@XZ (Address: 0x180055330)
- ??1TreeString@@QEAA@XZ (Address: 0x180055300)
- ??1XmlWriter@@QEAA@XZ (Address: 0x1800551a0)
- ??4AutoHandle@@QEAAAEAV0@AEBQEAX@Z (Address: 0x1800552e8)
- ??4LogContext@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800551d8)
- ??BAutoCriticalSection@@QEAAPEAU_RTL_CRITICAL_SECTION@@XZ (Address: 0x180055250)
- ??BAutoHandle@@QEBAPEAXXZ (Address: 0x180055218)
- ??CAutoVariant@@QEAAPEAUtagVARIANT@@XZ (Address: 0x180055228)
- ?Add@TaskMaster@@QEAAPEAVTask@@PEAV2@PEAPEAV2@1@Z (Address: 0x180055348)
- ?Close@AutoHandle@@QEAAXXZ (Address: 0x180055178)
- ?GetOptionValue@TaskMaster@@QEAAPEB_WPEB_W0@Z (Address: 0x180055260)
- ?IsOpen@AutoHandle@@QEBA_NXZ (Address: 0x180055210)
- ?LogImpl@LogContext@@QEBAXPEBD_KW4LogEventType@@PEB_WI@Z (Address: 0x180055170)
- ?MyFormatMessage@@YAPEA_WPEAXIZZ (Address: 0x180055320)
- ?NtClose@@3P6AJPEAX@ZEA (Address: 0x1800552d0)
- ?NtCreateFile@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@PEAUIO_STATUS_BLOCK@@PEAT_LARGE_INTEGER@@KKKKPEAXK@ZEA (Address: 0x1800552d8)
- ?ntdll@@3PEAUHINSTANCE__@@EA (Address: 0x180055310)
- ?NtOpenDirectoryObject@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@@ZEA (Address: 0x180055280)
- ?NtOpenSection@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@@ZEA (Address: 0x180055288)
- ?NtOpenSymbolicLinkObject@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@@ZEA (Address: 0x180055290)
- ?NtQueryDirectoryFile@@3P6AJPEAX000PEAUIO_STATUS_BLOCK@@0KW4FILE_INFORMATION_CLASS@@EPEAU_LSA_UNICODE_STRING@@E@ZEA (Address: 0x1800552e0)
- ?NtQueryDirectoryObject@@3P6AJPEAX0KEEPEAK1@ZEA (Address: 0x180055298)
- ?NtQueryInformationProcess@@3P6AJPEAXW4PROCESSINFOCLASS@@0KPEAK@ZEA (Address: 0x1800552f0)
- ?NtQueryObject@@3P6AJPEAXW4OBJECT_INFORMATION_CLASS@@0KPEAK@ZEA (Address: 0x1800552a0)
- ?NtQuerySecurityObject@@3P6AJPEAXK0KPEAK@ZEA (Address: 0x1800552c8)
- ?NtQuerySymbolicLinkObject@@3P6AJPEAXPEAU_LSA_UNICODE_STRING@@PEAK@ZEA (Address: 0x1800552a8)
- ?NtQuerySystemInformation@@3P6AJW4SYSTEM_INFORMATION_CLASS@@PEAXKPEAK@ZEA (Address: 0x1800552b0)
- ?NtQueryVolumeInformationFile@@3P6AJPEAXPEAUIO_STATUS_BLOCK@@0KW4FS_INFORMATION_CLASS@@@ZEA (Address: 0x1800552b8)
- ?PushLevel@TreeString@@QEAA_KQEA_W@Z (Address: 0x180055308)
- ?Reassign@AutoHandle@@QEAAPEAPEAXXZ (Address: 0x1800551e0)
- ?Reassign@AutoVariant@@QEAAPEAUtagVARIANT@@XZ (Address: 0x180055230)
- ?RtlInitUnicodeString@@3P6AXPEAU_LSA_UNICODE_STRING@@PEB_W@ZEA (Address: 0x1800552c0)
- ?WriteAttribute@XmlWriter@@QEAAXPEBD_K@Z (Address: 0x180055238)
- ?WriteAttribute@XmlWriter@@QEAAXPEBD0@Z (Address: 0x180055240)
- ?WriteAttribute@XmlWriter@@QEAAXPEBDPEB_W@Z (Address: 0x1800551e8)
- ?WriteAttributeAsHex@XmlWriter@@QEAAXPEBD_K@Z (Address: 0x180055278)
- ?WriteEndElement@XmlWriter@@QEAAXXZ (Address: 0x1800551b0)
- ?WriteSimpleTag@XmlWriter@@QEAAXPEBD_K@Z (Address: 0x1800551f8)
- ?WriteSimpleTag@XmlWriter@@QEAAXPEBD0@Z (Address: 0x1800551b8)
- ?WriteSimpleTag@XmlWriter@@QEAAXPEBDPEB_W@Z (Address: 0x1800551c0)
- ?WriteSimpleTagAsHex@XmlWriter@@QEAAXPEBD_K@Z (Address: 0x180055200)
- ?WriteStartElement@XmlWriter@@QEAAXPEBD@Z (Address: 0x1800551a8)
imagehlp.dll
- ImageLoad (Address: 0x180055b08)
- ImageNtHeader (Address: 0x180055b18)
- ImageRvaToVa (Address: 0x180055b20)
- ImageUnload (Address: 0x180055b10)
IPHLPAPI.DLL
- GetExtendedTcpTable (Address: 0x180055360)
- GetExtendedUdpTable (Address: 0x180055358)
KERNEL32.dll
- CloseHandle (Address: 0x180055520)
- CreateFileW (Address: 0x180055548)
- CreatePipe (Address: 0x180055508)
- CreateProcessW (Address: 0x1800554e8)
- CreateThread (Address: 0x1800554f0)
- DecodePointer (Address: 0x1800553a0)
- DeleteCriticalSection (Address: 0x180055440)
- DeleteFileW (Address: 0x180055540)
- DeviceIoControl (Address: 0x180055450)
- DuplicateHandle (Address: 0x180055518)
- EncodePointer (Address: 0x1800553a8)
- EnterCriticalSection (Address: 0x1800554b8)
- FindClose (Address: 0x1800554c8)
- FindFirstFileW (Address: 0x1800554c0)
- FindNextFileW (Address: 0x180055470)
- FreeLibrary (Address: 0x180055418)
- GetCurrentProcess (Address: 0x1800554f8)
- GetCurrentProcessId (Address: 0x180055380)
- GetCurrentThread (Address: 0x1800554d0)
- GetCurrentThreadId (Address: 0x180055388)
- GetDriveTypeW (Address: 0x180055438)
- GetEnvironmentVariableW (Address: 0x180055420)
- GetFileAttributesW (Address: 0x180055468)
- GetFullPathNameW (Address: 0x180055460)
- GetLastError (Address: 0x180055510)
- GetLogicalDriveStringsW (Address: 0x180055430)
- GetLongPathNameW (Address: 0x1800554a0)
- GetNativeSystemInfo (Address: 0x180055480)
- GetProcAddress (Address: 0x180055410)
- GetProcessHeap (Address: 0x1800553d8)
- GetShortPathNameW (Address: 0x180055458)
- GetStdHandle (Address: 0x180055550)
- GetSystemTime (Address: 0x1800554e0)
- GetSystemTimeAsFileTime (Address: 0x180055390)
- GetVersionExW (Address: 0x1800554b0)
- GetVolumeInformationW (Address: 0x180055428)
- GetVolumeNameForVolumeMountPointW (Address: 0x180055490)
- HeapAlloc (Address: 0x1800553e8)
- HeapFree (Address: 0x1800553e0)
- HeapReAlloc (Address: 0x1800553c8)
- InitializeCriticalSection (Address: 0x180055448)
- IsDebuggerPresent (Address: 0x180055398)
- IsProcessorFeaturePresent (Address: 0x180055370)
- LoadLibraryW (Address: 0x180055408)
- LocalFree (Address: 0x1800554a8)
- lstrlenA (Address: 0x1800553b8)
- MapViewOfFile (Address: 0x1800553f8)
- MultiByteToWideChar (Address: 0x1800553b0)
- OpenProcess (Address: 0x180055488)
- OpenThread (Address: 0x1800553c0)
- QueryDosDeviceW (Address: 0x180055498)
- QueryPerformanceCounter (Address: 0x180055378)
- ReadFile (Address: 0x180055538)
- SetFileTime (Address: 0x180055530)
- SystemTimeToFileTime (Address: 0x1800554d8)
- TerminateThread (Address: 0x180055400)
- UnmapViewOfFile (Address: 0x1800553f0)
- VirtualQueryEx (Address: 0x180055478)
- WaitForMultipleObjects (Address: 0x1800553d0)
- WaitForSingleObject (Address: 0x180055500)
- WriteFile (Address: 0x180055528)
MSVCP110.dll
- ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800557e8)
- ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180055630)
- ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800557d0)
- ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180055610)
- ?_BADOFF@std@@3_JB (Address: 0x180055578)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180055760)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180055750)
- ?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z (Address: 0x180055780)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800557f0)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180055638)
- ?_Orphan_all@_Container_base0@std@@QEAAXXZ (Address: 0x1800555c0)
- ?_Orphan_all@_Container_base12@std@@QEAAXXZ (Address: 0x180055690)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x1800557d8)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x180055618)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1800557a0)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x1800555e8)
- ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180055768)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800557f8)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180055640)
- ?_Winerror_map@std@@YAPEBDH@Z (Address: 0x180055770)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x180055730)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180055738)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180055740)
- ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@ (Address: 0x180055590)
- ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ (Address: 0x180055680)
- ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ (Address: 0x1800555a0)
- ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ (Address: 0x180055688)
- ??_7ios_base@std@@6B@ (Address: 0x180055588)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x180055718)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800557b8)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800556a8)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1800557c0)
- ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x180055600)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180055788)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800555d0)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x180055720)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800557a8)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800555f0)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800557c8)
- ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180055608)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180055790)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800555d8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z (Address: 0x180055710)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x1800556a0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x180055598)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x180055708)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180055818)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z (Address: 0x180055698)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z (Address: 0x180055620)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800556b8)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180055700)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x1800556c0)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800556b0)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x180055748)
- ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800556d0)
- ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800556e0)
- ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800556e8)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800557e0)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x180055628)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x180055778)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x180055580)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180055800)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180055648)
- ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800556d8)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x180055808)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x180055650)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800555b0)
- ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x1800556f8)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x1800555b8)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x1800557b0)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800555f8)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1800556c8)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x180055810)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x180055658)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x180055798)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800555e0)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x1800555a8)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x1800556f0)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x1800555c8)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180055660)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x180055560)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180055668)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x180055728)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x180055758)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x180055568)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x180055670)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x180055570)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x180055678)
MSVCR110.dll
- __C_specific_handler (Address: 0x180055928)
- __clean_type_info_names_internal (Address: 0x180055990)
- __CppXcptFilter (Address: 0x180055938)
- __crt_debugger_hook (Address: 0x180055960)
- __crtCapturePreviousContext (Address: 0x180055978)
- __crtTerminateProcess (Address: 0x180055970)
- __crtUnhandledException (Address: 0x180055968)
- __CxxFrameHandler3 (Address: 0x180055858)
- __dllonexit (Address: 0x180055920)
- _amsg_exit (Address: 0x180055940)
- _calloc_crt (Address: 0x180055918)
- _CxxThrowException (Address: 0x180055850)
- _initterm (Address: 0x180055950)
- _initterm_e (Address: 0x180055958)
- _lock (Address: 0x180055908)
- _malloc_crt (Address: 0x180055948)
- _onexit (Address: 0x180055930)
- _purecall (Address: 0x1800559a8)
- _unlock (Address: 0x180055910)
- _wcsicmp (Address: 0x1800558e8)
- _wdupenv_s (Address: 0x1800558a8)
- _wtof (Address: 0x1800558c8)
- _wtoi (Address: 0x180055870)
- ?_type_info_dtor_internal_method@type_info@@QEAAXXZ (Address: 0x180055988)
- ??_V@YAXPEAX@Z (Address: 0x180055888)
- ??0bad_cast@std@@QEAA@AEBV01@@Z (Address: 0x180055838)
- ??0bad_cast@std@@QEAA@PEBD@Z (Address: 0x180055830)
- ??0exception@std@@QEAA@AEBQEBDH@Z (Address: 0x180055878)
- ??0exception@std@@QEAA@AEBV01@@Z (Address: 0x180055840)
- ??1bad_cast@std@@UEAA@XZ (Address: 0x180055848)
- ??1exception@std@@UEAA@XZ (Address: 0x1800559b0)
- ??2@YAPEAX_K@Z (Address: 0x1800559a0)
- ??3@YAXPEAX@Z (Address: 0x180055998)
- ?terminate@@YAXXZ (Address: 0x180055980)
- ?what@exception@std@@UEBAPEBDXZ (Address: 0x180055890)
- exit (Address: 0x1800558b0)
- free (Address: 0x1800558a0)
- iswdigit (Address: 0x1800558e0)
- malloc (Address: 0x1800558b8)
- memcpy (Address: 0x180055860)
- memcpy_s (Address: 0x180055900)
- memmove (Address: 0x180055880)
- memset (Address: 0x180055868)
- realloc (Address: 0x1800558c0)
- toupper (Address: 0x180055898)
- wcscat_s (Address: 0x1800558d0)
- wcschr (Address: 0x1800558f0)
- wcscpy_s (Address: 0x180055828)
- wcsncmp (Address: 0x1800558d8)
- wcsstr (Address: 0x1800558f8)
NETAPI32.dll
- NetApiBufferFree (Address: 0x1800559f0)
- NetGetAnyDCName (Address: 0x1800559d0)
- NetGetJoinInformation (Address: 0x1800559c8)
- NetLocalGroupEnum (Address: 0x1800559e0)
- NetLocalGroupGetMembers (Address: 0x1800559d8)
- NetShareEnum (Address: 0x1800559c0)
- NetUserGetGroups (Address: 0x1800559e8)
ole32.dll
- CoCreateInstance (Address: 0x180055b30)
- CoInitializeEx (Address: 0x180055b40)
- CoSetProxyBlanket (Address: 0x180055b38)
- CoUninitialize (Address: 0x180055b48)
OLEAUT32.dll
- SysAllocString (Address: 0x180055a18)
- SysFreeString (Address: 0x180055a00)
- VariantChangeType (Address: 0x180055a10)
- VariantClear (Address: 0x180055a08)
- VariantInit (Address: 0x180055a20)
PSAPI.DLL
- EnumProcessModules (Address: 0x180055a30)
- GetMappedFileNameW (Address: 0x180055a40)
- GetModuleFileNameExA (Address: 0x180055a38)
- GetModuleFileNameExW (Address: 0x180055a48)
RPCRT4.dll
- RpcBindingFree (Address: 0x180055a60)
- RpcBindingToStringBindingW (Address: 0x180055a68)
- RpcMgmtEpEltInqBegin (Address: 0x180055a78)
- RpcMgmtEpEltInqDone (Address: 0x180055a80)
- RpcMgmtEpEltInqNextW (Address: 0x180055a70)
- RpcStringFreeW (Address: 0x180055a58)
Secur32.dll
- LsaEnumerateLogonSessions (Address: 0x180055aa0)
- LsaFreeReturnBuffer (Address: 0x180055aa8)
- LsaGetLogonSessionData (Address: 0x180055ab0)
SHELL32.dll
- SHGetFolderPathW (Address: 0x180055a90)
USER32.dll
- CloseDesktop (Address: 0x180055ad0)
- CloseWindowStation (Address: 0x180055ae8)
- EnumDesktopsW (Address: 0x180055ac8)
- EnumWindowStationsW (Address: 0x180055ae0)
- GetProcessWindowStation (Address: 0x180055af8)
- OpenDesktopW (Address: 0x180055ac0)
- OpenWindowStationW (Address: 0x180055ad8)
- SetProcessWindowStation (Address: 0x180055af0)