1776999915260_318a73e8_termsrv.dll

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800d8e48)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800d8e60)
IsDebuggerPresent (Address: 0x1800d8e58)
OutputDebugStringA (Address: 0x1800d8e70)
OutputDebugStringW (Address: 0x1800d8e68)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800d8e80)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800d8e90)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800d8ec0)
RaiseException (Address: 0x1800d8eb0)
SetLastError (Address: 0x1800d8ea8)
SetUnhandledExceptionFilter (Address: 0x1800d8eb8)
UnhandledExceptionFilter (Address: 0x1800d8ea0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800d8ed8)
CreateDirectoryW (Address: 0x1800d8ef0)
CreateFileW (Address: 0x1800d8ee8)
GetFileAttributesExW (Address: 0x1800d8ed0)
QueryDosDeviceW (Address: 0x1800d8ee0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800d8f08)
DuplicateHandle (Address: 0x1800d8f00)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800d8f28)
HeapAlloc (Address: 0x1800d8f18)
HeapFree (Address: 0x1800d8f20)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800d8f40)
LocalFree (Address: 0x1800d8f38)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalSize (Address: 0x1800d8f50)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800d8f60)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x1800d8f70)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x1800d8f90)
RegisterWaitForSingleObject (Address: 0x1800d8f80)
UnregisterWait (Address: 0x1800d8f88)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x1800d8fa0)

api-ms-win-core-kernel32-private-l1-1-0.dll

CheckElevationEnabled (Address: 0x1800d8fb0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800d8fc8)
FindResourceExW (Address: 0x1800d8fd0)
FreeLibrary (Address: 0x1800d8ff8)
GetModuleFileNameA (Address: 0x1800d9008)
GetModuleFileNameW (Address: 0x1800d8fd8)
GetModuleHandleExA (Address: 0x1800d8ff0)
GetModuleHandleExW (Address: 0x1800d9018)
GetModuleHandleW (Address: 0x1800d9010)
GetProcAddress (Address: 0x1800d9020)
LoadLibraryExW (Address: 0x1800d9000)
LoadResource (Address: 0x1800d8fc0)
LoadStringW (Address: 0x1800d8fe8)
SizeofResource (Address: 0x1800d8fe0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1800d9030)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800d9040)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1800d9050)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x1800d9098)
CreateProcessW (Address: 0x1800d9088)
CreateThread (Address: 0x1800d9060)
ExitThread (Address: 0x1800d9070)
GetCurrentProcess (Address: 0x1800d90d8)
GetCurrentProcessId (Address: 0x1800d90a8)
GetCurrentThread (Address: 0x1800d9080)
GetCurrentThreadId (Address: 0x1800d90d0)
GetExitCodeThread (Address: 0x1800d9068)
OpenProcessToken (Address: 0x1800d9090)
OpenThreadToken (Address: 0x1800d90c8)
ProcessIdToSessionId (Address: 0x1800d9078)
TerminateProcess (Address: 0x1800d90a0)
TlsAlloc (Address: 0x1800d90e0)
TlsFree (Address: 0x1800d90b0)
TlsGetValue (Address: 0x1800d90c0)
TlsSetValue (Address: 0x1800d90b8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800d90f8)
OpenProcess (Address: 0x1800d90f0)
SetProcessMitigationPolicy (Address: 0x1800d9100)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800d9110)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcessModules (Address: 0x1800d9120)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800d9138)
RegCreateKeyExW (Address: 0x1800d9148)
RegDeleteValueW (Address: 0x1800d9170)
RegEnumKeyExW (Address: 0x1800d9168)
RegGetValueW (Address: 0x1800d9130)
RegOpenKeyExW (Address: 0x1800d9150)
RegQueryInfoKeyW (Address: 0x1800d9160)
RegQueryValueExW (Address: 0x1800d9158)
RegSetValueExW (Address: 0x1800d9140)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1800d9188)
WideCharToMultiByte (Address: 0x1800d9180)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1800d9198)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1800d91b0)
lstrcmpW (Address: 0x1800d91a8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800d91c0)
CreateEventW (Address: 0x1800d91d0)
CreateMutexExW (Address: 0x1800d9220)
CreateSemaphoreExW (Address: 0x1800d91e0)
DeleteCriticalSection (Address: 0x1800d91d8)
EnterCriticalSection (Address: 0x1800d91f8)
InitializeCriticalSection (Address: 0x1800d9228)
InitializeCriticalSectionAndSpinCount (Address: 0x1800d9230)
InitializeSRWLock (Address: 0x1800d9240)
LeaveCriticalSection (Address: 0x1800d9210)
OpenEventW (Address: 0x1800d9218)
OpenSemaphoreW (Address: 0x1800d9258)
ReleaseMutex (Address: 0x1800d9200)
ReleaseSemaphore (Address: 0x1800d91e8)
ReleaseSRWLockExclusive (Address: 0x1800d9208)
ResetEvent (Address: 0x1800d9250)
SetEvent (Address: 0x1800d91c8)
WaitForMultipleObjectsEx (Address: 0x1800d9248)
WaitForSingleObject (Address: 0x1800d91f0)
WaitForSingleObjectEx (Address: 0x1800d9238)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800d9268)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x1800d9278)
WaitForMultipleObjects (Address: 0x1800d9280)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1800d92b0)
GetSystemTime (Address: 0x1800d92a0)
GetSystemTimeAsFileTime (Address: 0x1800d9290)
GetTickCount (Address: 0x1800d92a8)
GetTickCount64 (Address: 0x1800d9298)
GetVersionExW (Address: 0x1800d92b8)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x1800d92c8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpool (Address: 0x1800d92e8)
CloseThreadpoolCleanupGroup (Address: 0x1800d92f8)
CloseThreadpoolCleanupGroupMembers (Address: 0x1800d9300)
CloseThreadpoolTimer (Address: 0x1800d92e0)
CreateThreadpool (Address: 0x1800d9330)
CreateThreadpoolCleanupGroup (Address: 0x1800d9308)
CreateThreadpoolTimer (Address: 0x1800d92d8)
SetThreadpoolThreadMaximum (Address: 0x1800d9318)
SetThreadpoolThreadMinimum (Address: 0x1800d9310)
SetThreadpoolTimer (Address: 0x1800d9320)
TrySubmitThreadpoolCallback (Address: 0x1800d9328)
WaitForThreadpoolTimerCallbacks (Address: 0x1800d92f0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueue (Address: 0x1800d9360)
CreateTimerQueueTimer (Address: 0x1800d9358)
DeleteTimerQueueEx (Address: 0x1800d9368)
DeleteTimerQueueTimer (Address: 0x1800d9340)
QueueUserWorkItem (Address: 0x1800d9348)
UnregisterWaitEx (Address: 0x1800d9350)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1800d9378)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1800d94c0)
__C_specific_handler_noexcept (Address: 0x1800d94e0)
__current_exception (Address: 0x1800d9438)
__current_exception_context (Address: 0x1800d9440)
__CxxFrameHandler3 (Address: 0x1800d9448)
__CxxFrameHandler4 (Address: 0x1800d94d0)
__std_terminate (Address: 0x1800d94c8)
_CxxThrowException (Address: 0x1800d9458)
_o___std_exception_copy (Address: 0x1800d94b0)
_o___std_exception_destroy (Address: 0x1800d94a8)
_o___std_type_info_destroy_list (Address: 0x1800d94a0)
_o___stdio_common_vsprintf (Address: 0x1800d9498)
_o___stdio_common_vswprintf (Address: 0x1800d9490)
_o___stdio_common_vswprintf_s (Address: 0x1800d9488)
_o__callnewh (Address: 0x1800d9480)
_o__cexit (Address: 0x1800d9478)
_o__configure_narrow_argv (Address: 0x1800d9470)
_o__crt_atexit (Address: 0x1800d9468)
_o__errno (Address: 0x1800d9460)
_o__execute_onexit_table (Address: 0x1800d9450)
_o__initialize_narrow_environment (Address: 0x1800d9388)
_o__initialize_onexit_table (Address: 0x1800d9390)
_o__invalid_parameter_noinfo (Address: 0x1800d9398)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1800d93a0)
_o__purecall (Address: 0x1800d93a8)
_o__recalloc (Address: 0x1800d93b0)
_o__register_onexit_function (Address: 0x1800d93b8)
_o__resetstkoflw (Address: 0x1800d93c0)
_o__seh_filter_dll (Address: 0x1800d93c8)
_o__stricmp (Address: 0x1800d93d0)
_o__wcsicmp (Address: 0x1800d93d8)
_o__wcsnicmp (Address: 0x1800d93e0)
_o_ceilf (Address: 0x1800d93f0)
_o_free (Address: 0x1800d93f8)
_o_iswspace (Address: 0x1800d9400)
_o_malloc (Address: 0x1800d9408)
_o_qsort (Address: 0x1800d9410)
_o_terminate (Address: 0x1800d9418)
_o_wcscpy_s (Address: 0x1800d9420)
_o_wcsncpy_s (Address: 0x1800d9428)
_o_wcstok_s (Address: 0x1800d9430)
memcmp (Address: 0x1800d94e8)
memcpy (Address: 0x1800d93e8)
wcschr (Address: 0x1800d94b8)
wcsrchr (Address: 0x1800d94d8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800d94f8)
_initterm_e (Address: 0x1800d9500)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800d9510)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1800d9520)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800d9550)
EventRegister (Address: 0x1800d9538)
EventSetInformation (Address: 0x1800d9540)
EventUnregister (Address: 0x1800d9548)
EventWriteTransfer (Address: 0x1800d9530)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x1800d95d0)
AccessCheckAndAuditAlarmW (Address: 0x1800d9578)
AddAce (Address: 0x1800d95d8)
AllocateAndInitializeSid (Address: 0x1800d9660)
AllocateLocallyUniqueId (Address: 0x1800d9610)
CheckTokenMembership (Address: 0x1800d9658)
CopySid (Address: 0x1800d9600)
CreateWellKnownSid (Address: 0x1800d9608)
DuplicateToken (Address: 0x1800d9580)
DuplicateTokenEx (Address: 0x1800d9590)
EqualSid (Address: 0x1800d95f0)
FreeSid (Address: 0x1800d9570)
GetAce (Address: 0x1800d9628)
GetAclInformation (Address: 0x1800d9630)
GetFileSecurityW (Address: 0x1800d9620)
GetLengthSid (Address: 0x1800d95e8)
GetSecurityDescriptorControl (Address: 0x1800d9560)
GetSecurityDescriptorDacl (Address: 0x1800d9638)
GetSecurityDescriptorLength (Address: 0x1800d9618)
GetSidSubAuthority (Address: 0x1800d95c0)
GetSidSubAuthorityCount (Address: 0x1800d95b8)
GetTokenInformation (Address: 0x1800d9598)
ImpersonateLoggedOnUser (Address: 0x1800d95c8)
InitializeAcl (Address: 0x1800d95a8)
InitializeSecurityDescriptor (Address: 0x1800d9648)
IsTokenRestricted (Address: 0x1800d95e0)
IsValidSecurityDescriptor (Address: 0x1800d9568)
IsValidSid (Address: 0x1800d95f8)
MakeAbsoluteSD (Address: 0x1800d95b0)
MakeSelfRelativeSD (Address: 0x1800d9588)
MapGenericMask (Address: 0x1800d95a0)
RevertToSelf (Address: 0x1800d9650)
SetSecurityDescriptorDacl (Address: 0x1800d9640)

api-ms-win-security-base-l1-2-2.dll

DeriveCapabilitySidsFromName (Address: 0x1800d9670)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x1800d9680)

KERNEL32.dll

OOBEComplete (Address: 0x1800d8d80)

KERNELBASE.dll

WTSIsServerContainer (Address: 0x1800d8d90)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800d9690)

ntdll.dll

DbgPrint (Address: 0x1800d9810)
EtwEventActivityIdControl (Address: 0x1800d9778)
EtwEventRegister (Address: 0x1800d97f0)
EtwEventUnregister (Address: 0x1800d97f8)
EtwEventWriteFull (Address: 0x1800d97e8)
EtwEventWriteTransfer (Address: 0x1800d9788)
NtCreateFile (Address: 0x1800d9730)
NtDuplicateToken (Address: 0x1800d9798)
NtOpenProcess (Address: 0x1800d96e0)
NtOpenProcessToken (Address: 0x1800d96e8)
NtQueryInformationProcess (Address: 0x1800d97a8)
NtQueryInformationToken (Address: 0x1800d96d8)
NtQuerySystemInformation (Address: 0x1800d96a8)
NtQuerySystemTime (Address: 0x1800d9780)
NtQueryVirtualMemory (Address: 0x1800d96a0)
RtlAcquireResourceExclusive (Address: 0x1800d97b0)
RtlAcquireResourceShared (Address: 0x1800d9800)
RtlAdjustPrivilege (Address: 0x1800d9740)
RtlAllocateAndInitializeSid (Address: 0x1800d9820)
RtlCaptureContext (Address: 0x1800d9710)
RtlCaptureStackBackTrace (Address: 0x1800d96b0)
RtlCompareMemory (Address: 0x1800d9720)
RtlCopySecurityDescriptor (Address: 0x1800d9748)
RtlCopySid (Address: 0x1800d96d0)
RtlCreateUserSecurityObject (Address: 0x1800d9768)
RtlDeleteElementGenericTable (Address: 0x1800d97b8)
RtlDeleteResource (Address: 0x1800d97e0)
RtlDeleteSecurityObject (Address: 0x1800d96f0)
RtlEnumerateGenericTable (Address: 0x1800d9790)
RtlEqualSid (Address: 0x1800d9818)
RtlFreeSid (Address: 0x1800d96f8)
RtlGetControlSecurityDescriptor (Address: 0x1800d9760)
RtlGetCurrentServiceSessionId (Address: 0x1800d9758)
RtlInitializeGenericTable (Address: 0x1800d97d0)
RtlInitializeResource (Address: 0x1800d97d8)
RtlInitString (Address: 0x1800d9728)
RtlInitUnicodeString (Address: 0x1800d9738)
RtlInsertElementGenericTable (Address: 0x1800d97c0)
RtlLengthSid (Address: 0x1800d9770)
RtlLookupElementGenericTable (Address: 0x1800d97a0)
RtlLookupFunctionEntry (Address: 0x1800d9708)
RtlNotifyFeatureUsage (Address: 0x1800d96b8)
RtlNtStatusToDosError (Address: 0x1800d9808)
RtlNumberGenericTableElements (Address: 0x1800d9750)
RtlQueryElevationFlags (Address: 0x1800d96c0)
RtlQueryFeatureConfiguration (Address: 0x1800d96c8)
RtlReleaseResource (Address: 0x1800d97c8)
RtlVerifyVersionInfo (Address: 0x1800d9828)
RtlVirtualUnwind (Address: 0x1800d9700)
VerSetConditionMask (Address: 0x1800d9718)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x1800d8de0)
I_RpcBindingIsClientLocal (Address: 0x1800d8e28)
I_RpcServerDisableExceptionFilter (Address: 0x1800d8dc8)
NdrServerCall2 (Address: 0x1800d8dc0)
NdrServerCallAll (Address: 0x1800d8db8)
RpcBindingToStringBindingW (Address: 0x1800d8e20)
RpcImpersonateClient (Address: 0x1800d8df0)
RpcRevertToSelf (Address: 0x1800d8de8)
RpcServerInqCallAttributesW (Address: 0x1800d8e00)
RpcServerInqDefaultPrincNameW (Address: 0x1800d8da0)
RpcServerListen (Address: 0x1800d8e10)
RpcServerRegisterAuthInfoW (Address: 0x1800d8da8)
RpcServerRegisterIf3 (Address: 0x1800d8db0)
RpcServerRegisterIfEx (Address: 0x1800d8e08)
RpcServerUnregisterIfEx (Address: 0x1800d8e18)
RpcServerUseProtseqEpW (Address: 0x1800d8df8)
RpcStringBindingParseW (Address: 0x1800d8e30)
RpcStringFreeW (Address: 0x1800d8e38)
UuidFromStringW (Address: 0x1800d8dd0)
UuidToStringW (Address: 0x1800d8dd8)

Security Warning

Exported Functions

Imported DLLs & Functions