qmgr.dll

Description: Background Intelligent Transfer Service

Version: 7.8.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: e45803d9756411d39939d9c3edd08eb5

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

??4CPerfMon@@QEAAAEAV0@AEBV0@@Z (Ordinal: 1, Address: 0x9dcb0)
?CounterIdToPerfItem@CPerfMon@@AEBAPEAU_PERF_ITEM@1@PEAU__COUNTER_ID@1@@Z (Ordinal: 2, Address: 0x9e3d0)
?GetCounter32@CPerfMon@@QEAAPEAJPEAU__COUNTER_ID@1@PEAU__INSTANCE_ID@1@@Z (Ordinal: 3, Address: 0x9e840)
?GetCounter64@CPerfMon@@QEAAPEA_JPEAU__COUNTER_ID@1@PEAU__INSTANCE_ID@1@@Z (Ordinal: 4, Address: 0x9e840)
?IsValidInstId@CPerfMon@@AEBAHPEAU__OBJECT_ORD@1@PEAU__INSTANCE_ID@1@@Z (Ordinal: 5, Address: 0x9ecf0)
?IsValidObjOrd@CPerfMon@@AEBAHPEAU__OBJECT_ORD@1@@Z (Ordinal: 6, Address: 0x9ed80)
?ObjectIdToPerfItem@CPerfMon@@AEBAPEAU_PERF_ITEM@1@PEAU__OBJECT_ID@1@@Z (Ordinal: 7, Address: 0x9f1d0)
?ObjectIdToPerfItemIndex@CPerfMon@@AEBAHPEAU__OBJECT_ID@1@@Z (Ordinal: 8, Address: 0x9f210)
ServiceMain (Ordinal: 9, Address: 0x55130)
BITSServiceMain (Ordinal: 10, Address: 0x55150)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18011f858)

api-ms-win-core-com-l1-1-0.dll

CoCancelCall (Address: 0x18011f880)
CoCreateGuid (Address: 0x18011f918)
CoCreateInstance (Address: 0x18011f868)
CoDecrementMTAUsage (Address: 0x18011f910)
CoDisableCallCancellation (Address: 0x18011f878)
CoDisconnectContext (Address: 0x18011f8f0)
CoDisconnectObject (Address: 0x18011f8d0)
CoEnableCallCancellation (Address: 0x18011f870)
CoGetCallContext (Address: 0x18011f8b0)
CoGetClassObject (Address: 0x18011f8c8)
CoGetMalloc (Address: 0x18011f8c0)
CoImpersonateClient (Address: 0x18011f928)
CoIncrementMTAUsage (Address: 0x18011f8e8)
CoInitializeEx (Address: 0x18011f8e0)
CoRegisterClassObject (Address: 0x18011f908)
CoResumeClassObjects (Address: 0x18011f900)
CoRevertToSelf (Address: 0x18011f930)
CoRevokeClassObject (Address: 0x18011f8f8)
CoTaskMemAlloc (Address: 0x18011f8a0)
CoTaskMemFree (Address: 0x18011f8a8)
CoUninitialize (Address: 0x18011f938)
CreateStreamOnHGlobal (Address: 0x18011f920)
IIDFromString (Address: 0x18011f8b8)
PropVariantClear (Address: 0x18011f898)
StringFromCLSID (Address: 0x18011f890)
StringFromGUID2 (Address: 0x18011f888)
StringFromIID (Address: 0x18011f8d8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18011f948)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18011f960)
IsDebuggerPresent (Address: 0x18011f958)
OutputDebugStringW (Address: 0x18011f968)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18011f978)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18011f988)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18011f998)
RaiseException (Address: 0x18011f9a0)
SetLastError (Address: 0x18011f9b0)
SetUnhandledExceptionFilter (Address: 0x18011f9a8)
UnhandledExceptionFilter (Address: 0x18011f9b8)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x18011f9c8)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18011fa18)
CreateDirectoryW (Address: 0x18011fa38)
DeleteFileW (Address: 0x18011fa30)
FindClose (Address: 0x18011fa00)
FindFirstFileW (Address: 0x18011fa60)
FindNextFileW (Address: 0x18011f9d8)
FlushFileBuffers (Address: 0x18011fa88)
GetDiskFreeSpaceW (Address: 0x18011fa58)
GetDriveTypeW (Address: 0x18011fa48)
GetFileAttributesExW (Address: 0x18011fa78)
GetFileAttributesW (Address: 0x18011f9e8)
GetFileInformationByHandle (Address: 0x18011fa20)
GetFileSizeEx (Address: 0x18011fa28)
GetFileTime (Address: 0x18011fa98)
GetFileType (Address: 0x18011fab0)
GetFullPathNameW (Address: 0x18011fa68)
GetLongPathNameW (Address: 0x18011fa40)
GetTempFileNameW (Address: 0x18011f9e0)
GetVolumeInformationW (Address: 0x18011fa10)
GetVolumePathNameW (Address: 0x18011faa0)
LocalFileTimeToFileTime (Address: 0x18011fa80)
ReadFile (Address: 0x18011f9f8)
SetEndOfFile (Address: 0x18011fa50)
SetFileAttributesW (Address: 0x18011f9f0)
SetFileInformationByHandle (Address: 0x18011fa90)
SetFilePointerEx (Address: 0x18011fa08)
SetFileTime (Address: 0x18011faa8)
WriteFile (Address: 0x18011fa70)

api-ms-win-core-file-l1-2-0.dll

CreateFile2 (Address: 0x18011fac0)
GetVolumeNameForVolumeMountPointW (Address: 0x18011fac8)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x18011fae0)
MoveFileExW (Address: 0x18011fad8)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x18011faf0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18011fb00)
DuplicateHandle (Address: 0x18011fb08)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18011fb28)
HeapAlloc (Address: 0x18011fb18)
HeapCreate (Address: 0x18011fb30)
HeapDestroy (Address: 0x18011fb20)
HeapFree (Address: 0x18011fb38)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x18011fb60)
GlobalFree (Address: 0x18011fb58)
LocalAlloc (Address: 0x18011fb48)
LocalFree (Address: 0x18011fb50)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x18011fb78)
GlobalUnlock (Address: 0x18011fb70)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18011fb88)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x18011fb98)
DeviceIoControl (Address: 0x18011fba8)
GetQueuedCompletionStatus (Address: 0x18011fbb0)
PostQueuedCompletionStatus (Address: 0x18011fba0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x18011fbc0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18011fc18)
FindStringOrdinal (Address: 0x18011fc10)
FreeLibrary (Address: 0x18011fbe0)
FreeLibraryAndExitThread (Address: 0x18011fc20)
GetModuleFileNameA (Address: 0x18011fbe8)
GetModuleFileNameW (Address: 0x18011fbf0)
GetModuleHandleExW (Address: 0x18011fc08)
GetModuleHandleW (Address: 0x18011fc00)
GetProcAddress (Address: 0x18011fbf8)
LoadLibraryExW (Address: 0x18011fbd0)
LoadStringW (Address: 0x18011fbd8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18011fc30)

api-ms-win-core-path-l1-1-0.dll

PathCchSkipRoot (Address: 0x18011fc40)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x18011fca8)
CreateThread (Address: 0x18011fc50)
GetCurrentProcess (Address: 0x18011fcc8)
GetCurrentProcessId (Address: 0x18011fcb0)
GetCurrentThread (Address: 0x18011fc80)
GetCurrentThreadId (Address: 0x18011fc58)
GetExitCodeProcess (Address: 0x18011fce0)
GetExitCodeThread (Address: 0x18011fc60)
GetProcessId (Address: 0x18011fc68)
OpenProcessToken (Address: 0x18011fc98)
OpenThreadToken (Address: 0x18011fc78)
SetThreadPriority (Address: 0x18011fcd0)
SetThreadToken (Address: 0x18011fc90)
SwitchToThread (Address: 0x18011fcb8)
TerminateProcess (Address: 0x18011fcc0)
TlsAlloc (Address: 0x18011fcd8)
TlsFree (Address: 0x18011fca0)
TlsGetValue (Address: 0x18011fc88)
TlsSetValue (Address: 0x18011fc70)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18011fd00)
OpenProcess (Address: 0x18011fcf0)
SetProcessMitigationPolicy (Address: 0x18011fcf8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18011fd18)
QueryPerformanceFrequency (Address: 0x18011fd10)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x18011fd28)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18011fd58)
RegCreateKeyExW (Address: 0x18011fd38)
RegGetValueW (Address: 0x18011fd48)
RegNotifyChangeKeyValue (Address: 0x18011fd60)
RegOpenKeyExW (Address: 0x18011fd50)
RegQueryValueExW (Address: 0x18011fd40)
RegSetValueExW (Address: 0x18011fd68)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18011fd78)
RtlLookupFunctionEntry (Address: 0x18011fd80)
RtlVirtualUnwind (Address: 0x18011fd88)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x18011fd98)
PathFindFileNameW (Address: 0x18011fda0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18011fdb0)
WideCharToMultiByte (Address: 0x18011fdb8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18011fe30)
AcquireSRWLockShared (Address: 0x18011fe40)
CancelWaitableTimer (Address: 0x18011fe70)
CreateEventExW (Address: 0x18011fe20)
CreateEventW (Address: 0x18011fe10)
CreateMutexExW (Address: 0x18011fe00)
CreateMutexW (Address: 0x18011fe60)
CreateSemaphoreExW (Address: 0x18011fde0)
CreateWaitableTimerExW (Address: 0x18011fe68)
DeleteCriticalSection (Address: 0x18011fe98)
EnterCriticalSection (Address: 0x18011fdf0)
InitializeCriticalSection (Address: 0x18011fe58)
InitializeCriticalSectionAndSpinCount (Address: 0x18011fe18)
InitializeCriticalSectionEx (Address: 0x18011fea0)
InitializeSRWLock (Address: 0x18011fe48)
LeaveCriticalSection (Address: 0x18011fdf8)
OpenEventW (Address: 0x18011fdd8)
OpenSemaphoreW (Address: 0x18011fe90)
ReleaseMutex (Address: 0x18011fe08)
ReleaseSemaphore (Address: 0x18011fe50)
ReleaseSRWLockExclusive (Address: 0x18011fe28)
ReleaseSRWLockShared (Address: 0x18011fe38)
ResetEvent (Address: 0x18011fe80)
SetEvent (Address: 0x18011fe88)
SetWaitableTimer (Address: 0x18011fe78)
TryEnterCriticalSection (Address: 0x18011fea8)
WaitForMultipleObjectsEx (Address: 0x18011fde8)
WaitForSingleObject (Address: 0x18011fdd0)
WaitForSingleObjectEx (Address: 0x18011fdc8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18011fec0)
InitOnceComplete (Address: 0x18011fed0)
InitOnceExecuteOnce (Address: 0x18011fec8)
Sleep (Address: 0x18011feb8)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x18011fee8)
WaitForMultipleObjects (Address: 0x18011fee0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x18011ff00)
GetSystemDirectoryW (Address: 0x18011ff10)
GetSystemTimeAsFileTime (Address: 0x18011ff08)
GetTickCount64 (Address: 0x18011fef8)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x18011ff20)

api-ms-win-core-threadpool-l1-2-0.dll

CancelThreadpoolIo (Address: 0x18011ff38)
CloseThreadpool (Address: 0x18011ff78)
CloseThreadpoolCleanupGroup (Address: 0x18011ffb8)
CloseThreadpoolCleanupGroupMembers (Address: 0x18011ffb0)
CloseThreadpoolIo (Address: 0x18011ff68)
CloseThreadpoolWait (Address: 0x18011ff98)
CloseThreadpoolWork (Address: 0x18011ff58)
CreateThreadpool (Address: 0x18011ffd0)
CreateThreadpoolCleanupGroup (Address: 0x18011ff30)
CreateThreadpoolIo (Address: 0x18011ff60)
CreateThreadpoolWait (Address: 0x18011ff80)
CreateThreadpoolWork (Address: 0x18011ffa8)
SetThreadpoolThreadMaximum (Address: 0x18011ffc0)
SetThreadpoolThreadMinimum (Address: 0x18011ffc8)
SetThreadpoolWait (Address: 0x18011ff88)
StartThreadpoolIo (Address: 0x18011ff40)
SubmitThreadpoolWork (Address: 0x18011ff50)
TrySubmitThreadpoolCallback (Address: 0x18011ffa0)
WaitForThreadpoolIoCallbacks (Address: 0x18011ff70)
WaitForThreadpoolWaitCallbacks (Address: 0x18011ff90)
WaitForThreadpoolWorkCallbacks (Address: 0x18011ff48)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x18011fff0)
DeleteTimerQueueTimer (Address: 0x18011ffe0)
UnregisterWaitEx (Address: 0x18011ffe8)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180120008)
GetTimeZoneInformation (Address: 0x180120010)
SystemTimeToFileTime (Address: 0x180120000)

api-ms-win-core-url-l1-1-0.dll

UrlCombineW (Address: 0x180120020)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180120030)
EncodePointer (Address: 0x180120038)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180120050)
RoOriginateErrorW (Address: 0x180120048)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180120060)
RoRegisterActivationFactories (Address: 0x180120068)
RoRevokeActivationFactories (Address: 0x180120070)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1801200a0)
WindowsCreateStringReference (Address: 0x180120088)
WindowsDeleteString (Address: 0x180120098)
WindowsGetStringRawBuffer (Address: 0x180120090)
WindowsIsStringEmpty (Address: 0x180120080)
WindowsStringHasEmbeddedNull (Address: 0x1801200a8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1801201f0)
__CxxFrameHandler3 (Address: 0x180120140)
__CxxFrameHandler4 (Address: 0x180120200)
__std_terminate (Address: 0x1801201f8)
_CxxThrowException (Address: 0x180120208)
_o___std_exception_copy (Address: 0x1801201e8)
_o___std_exception_destroy (Address: 0x1801201e0)
_o___std_type_info_destroy_list (Address: 0x1801201d8)
_o___stdio_common_vsnprintf_s (Address: 0x1801201d0)
_o___stdio_common_vsprintf (Address: 0x1801201c8)
_o___stdio_common_vsprintf_s (Address: 0x1801201c0)
_o___stdio_common_vsscanf (Address: 0x1801201b8)
_o___stdio_common_vswprintf (Address: 0x1801201b0)
_o___stdio_common_vswprintf_s (Address: 0x1801201a8)
_o___stdio_common_vswscanf (Address: 0x1801201a0)
_o__cexit (Address: 0x180120178)
_o__configure_narrow_argv (Address: 0x180120170)
_o__crt_atexit (Address: 0x180120168)
_o__errno (Address: 0x180120160)
_o__execute_onexit_table (Address: 0x180120158)
_o__initialize_narrow_environment (Address: 0x180120198)
_o__initialize_onexit_table (Address: 0x180120190)
_o__invalid_parameter_noinfo (Address: 0x180120188)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180120180)
_o__memicmp (Address: 0x1801200b8)
_o__purecall (Address: 0x1801200c0)
_o__register_onexit_function (Address: 0x1801200c8)
_o__seh_filter_dll (Address: 0x1801200d0)
_o__strnicmp (Address: 0x1801200d8)
_o__wcsicmp (Address: 0x1801200e0)
_o__wcsnicmp (Address: 0x1801200e8)
_o_isalnum (Address: 0x1801200f8)
_o_isalpha (Address: 0x180120100)
_o_isdigit (Address: 0x180120108)
_o_isspace (Address: 0x180120110)
_o_qsort (Address: 0x180120118)
_o_terminate (Address: 0x180120120)
_o_wcstok (Address: 0x180120128)
_o_wcstok_s (Address: 0x180120130)
_o_wcstoul (Address: 0x180120138)
memcmp (Address: 0x180120210)
memcpy (Address: 0x180120218)
memmove (Address: 0x1801200f0)
wcschr (Address: 0x180120148)
wcsstr (Address: 0x180120150)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180120230)
_initterm_e (Address: 0x180120228)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180120250)
strcmp (Address: 0x180120248)
wcscmp (Address: 0x180120240)
wcsncmp (Address: 0x180120258)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180120280)
EventSetInformation (Address: 0x180120268)
EventUnregister (Address: 0x180120270)
EventWriteTransfer (Address: 0x180120278)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x180120290)
PowerSettingUnregisterNotification (Address: 0x180120298)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x180120380)
AddMandatoryAce (Address: 0x180120348)
AdjustTokenPrivileges (Address: 0x1801202c0)
AllocateAndInitializeSid (Address: 0x180120310)
CheckTokenMembership (Address: 0x180120368)
CopySid (Address: 0x1801202a8)
CreateRestrictedToken (Address: 0x1801202d0)
DuplicateTokenEx (Address: 0x180120300)
EqualSid (Address: 0x180120338)
FreeSid (Address: 0x180120308)
GetLengthSid (Address: 0x1801202d8)
GetSecurityDescriptorControl (Address: 0x180120320)
GetSecurityDescriptorDacl (Address: 0x180120328)
GetSecurityDescriptorGroup (Address: 0x1801202b0)
GetSecurityDescriptorOwner (Address: 0x1801202b8)
GetSecurityDescriptorSacl (Address: 0x1801202e0)
GetSidSubAuthority (Address: 0x180120330)
GetSidSubAuthorityCount (Address: 0x180120340)
GetTokenInformation (Address: 0x180120358)
ImpersonateLoggedOnUser (Address: 0x180120390)
ImpersonateSelf (Address: 0x1801203b0)
InitializeAcl (Address: 0x180120350)
InitializeSecurityDescriptor (Address: 0x1801202e8)
IsTokenRestricted (Address: 0x1801202f8)
IsValidSid (Address: 0x1801202c8)
MakeAbsoluteSD (Address: 0x180120370)
MakeSelfRelativeSD (Address: 0x180120378)
MapGenericMask (Address: 0x180120388)
RevertToSelf (Address: 0x1801202f0)
SetSecurityDescriptorDacl (Address: 0x1801203a0)
SetSecurityDescriptorGroup (Address: 0x1801203a8)
SetSecurityDescriptorOwner (Address: 0x180120360)
SetSecurityDescriptorSacl (Address: 0x180120398)
SetTokenInformation (Address: 0x180120318)

api-ms-win-security-lsalookup-l1-1-0.dll

LookupAccountSidLocalW (Address: 0x1801203c0)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountNameW (Address: 0x1801203d0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1801203e8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1801203f0)
ConvertStringSidToSidW (Address: 0x1801203e0)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180120408)
SetServiceStatus (Address: 0x180120400)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180120420)
OpenSCManagerW (Address: 0x180120428)
OpenServiceW (Address: 0x180120418)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W (Address: 0x180120440)
ChangeServiceConfigW (Address: 0x180120448)
QueryServiceConfig2W (Address: 0x180120438)
QueryServiceConfigW (Address: 0x180120450)

api-ms-win-service-private-l1-2-0.dll

GetServiceProcessToken (Address: 0x180120460)

bitsperf.dll

??0CPerfMon@@QEAA@PEAGPEAU_PERF_ITEM@0@@Z (Address: 0x180120470)
??1CPerfMon@@QEAA@XZ (Address: 0x180120478)
?CounterIdToPerfItemIndex@CPerfMon@@AEBAHPEAU__COUNTER_ID@1@PEAH@Z (Address: 0x180120488)
?GetCounter@CPerfMon@@AEAAPEAEPEAU__COUNTER_ID@1@PEAU__INSTANCE_ID@1@@Z (Address: 0x1801204a0)
?IdToPerfItemIndex@CPerfMon@@AEBAHH_K@Z (Address: 0x180120490)
?Initialize@CPerfMon@@QEAAKH@Z (Address: 0x180120480)
?ObjectOrdToPerfItem@CPerfMon@@AEBAPEAU_PERF_ITEM@1@PEAU__OBJECT_ORD@1@@Z (Address: 0x180120498)

combase.dll

(Address: 0x1801204b0)
(Address: 0x1801204b8)
(Address: 0x1801204c0)
(Address: 0x1801204c8)

ESENT.dll

JetAttachDatabaseW (Address: 0x18011f790)
JetBeginSessionW (Address: 0x18011f798)
JetBeginTransaction (Address: 0x18011f7c0)
JetCloseDatabase (Address: 0x18011f710)
JetCloseTable (Address: 0x18011f7f0)
JetCommitTransaction (Address: 0x18011f7b8)
JetCreateDatabaseW (Address: 0x18011f788)
JetCreateInstanceW (Address: 0x18011f7a8)
JetCreateTableColumnIndexW (Address: 0x18011f768)
JetDelete (Address: 0x18011f758)
JetEnableMultiInstanceA (Address: 0x18011f7e8)
JetEndSession (Address: 0x18011f7e0)
JetGetTableColumnInfoW (Address: 0x18011f770)
JetInit (Address: 0x18011f7a0)
JetMakeKey (Address: 0x18011f748)
JetMove (Address: 0x18011f718)
JetOpenDatabaseW (Address: 0x18011f780)
JetOpenTableW (Address: 0x18011f778)
JetPrepareUpdate (Address: 0x18011f738)
JetResetSessionContext (Address: 0x18011f7c8)
JetRetrieveColumn (Address: 0x18011f720)
JetRollback (Address: 0x18011f7b0)
JetSeek (Address: 0x18011f740)
JetSetColumn (Address: 0x18011f730)
JetSetCurrentIndexW (Address: 0x18011f750)
JetSetSessionContext (Address: 0x18011f7d0)
JetSetSystemParameterW (Address: 0x18011f760)
JetTerm2 (Address: 0x18011f7d8)
JetUpdate (Address: 0x18011f728)

FirewallAPI.dll

NetworkIsolationGetEnterpriseIdAsync (Address: 0x18011f808)
NetworkIsolationGetEnterpriseIdClose (Address: 0x18011f800)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x1801204e8)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1801204e0)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1801204d8)

ntdll.dll

DbgPrint (Address: 0x180120518)
EtwEventActivityIdControl (Address: 0x180120560)
EtwEventEnabled (Address: 0x180120530)
EtwEventRegister (Address: 0x180120520)
EtwEventUnregister (Address: 0x180120528)
EtwEventWrite (Address: 0x1801205b8)
EtwGetTraceEnableFlags (Address: 0x1801205f0)
EtwGetTraceEnableLevel (Address: 0x1801205e8)
EtwGetTraceLoggerHandle (Address: 0x1801205e0)
EtwRegisterTraceGuidsW (Address: 0x1801205f8)
EtwTraceMessage (Address: 0x180120580)
EtwUnregisterTraceGuids (Address: 0x180120600)
NtCreateLowBoxToken (Address: 0x180120548)
NtCreateWnfStateName (Address: 0x180120550)
NtDeleteWnfStateName (Address: 0x1801205a8)
NtQueryInformationProcess (Address: 0x1801205b0)
NtQueryInformationThread (Address: 0x180120590)
NtQueryWnfStateData (Address: 0x1801204f8)
NtSetInformationToken (Address: 0x1801205c8)
RtlAdjustPrivilege (Address: 0x180120568)
RtlAllocateHeap (Address: 0x1801205d0)
RtlAllocateWnfSerializationGroup (Address: 0x180120510)
RtlCopyLuid (Address: 0x180120538)
RtlFreeHeap (Address: 0x180120578)
RtlGetCurrentServiceSessionId (Address: 0x180120558)
RtlGetDeviceFamilyInfoEnum (Address: 0x180120608)
RtlGetPersistedStateLocation (Address: 0x180120610)
RtlGetVersion (Address: 0x180120588)
RtlInitUnicodeString (Address: 0x1801205c0)
RtlLengthSecurityDescriptor (Address: 0x180120500)
RtlNtStatusToDosErrorNoTeb (Address: 0x1801205d8)
RtlPublishWnfStateData (Address: 0x180120540)
RtlQueryPackageClaims (Address: 0x180120570)
RtlReportException (Address: 0x180120508)
RtlSubscribeWnfStateChangeNotification (Address: 0x1801205a0)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180120598)

UMPDC.dll

Pdcv2ActivationClientActivate (Address: 0x18011f820)
Pdcv2ActivationClientDeactivate (Address: 0x18011f838)
Pdcv2ActivationClientRegister (Address: 0x18011f828)
Pdcv2ActivationClientRenewActivation (Address: 0x18011f818)
Pdcv2ActivationClientUnregister (Address: 0x18011f830)

XmlLite.dll

CreateXmlReader (Address: 0x18011f848)