rascustom.dll

Description: Custom Protocol Engine

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: 095ec248786ba0aa9f9f57763d06f36d

File Size: 496.0 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • InitializeProtocolEngine (Ordinal: 1, Address: 0x1a40)
  • SendMessageToProtocolEngine (Ordinal: 2, Address: 0x1cc0)
  • UninitializeProtocolEngine (Ordinal: 3, Address: 0x1bf0)
  • VpnBrokerPluginIsInstalled (Ordinal: 4, Address: 0x27bd0)
  • VpnBrokerRegisterForPluginInstallations (Ordinal: 5, Address: 0x281e0)
  • VpnSmCommsPluginsNotifyLogOff (Ordinal: 6, Address: 0x38ae0)
  • VpnSmCommsPluginsRoamToBestCostInterface (Ordinal: 7, Address: 0x39b80)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll
  • GetPackageFamilyName (Address: 0x180064558)
  • PackageFamilyNameFromFullName (Address: 0x180064550)
api-ms-win-appmodel-runtime-l1-1-1.dll
  • FormatApplicationUserModelId (Address: 0x180064568)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x180064578)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x180064590)
  • CoCreateGuid (Address: 0x1800645c8)
  • CoCreateInstance (Address: 0x1800645b8)
  • CoCreateInstanceEx (Address: 0x180064588)
  • CoInitializeEx (Address: 0x1800645a8)
  • CoTaskMemFree (Address: 0x180064598)
  • CoUninitialize (Address: 0x1800645a0)
  • StringFromCLSID (Address: 0x1800645b0)
  • StringFromGUID2 (Address: 0x1800645c0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800645d8)
  • IsDebuggerPresent (Address: 0x1800645e8)
  • OutputDebugStringA (Address: 0x1800645f0)
  • OutputDebugStringW (Address: 0x1800645e0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180064600)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180064610)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180064628)
  • RaiseException (Address: 0x180064630)
  • SetLastError (Address: 0x180064640)
  • SetUnhandledExceptionFilter (Address: 0x180064638)
  • UnhandledExceptionFilter (Address: 0x180064620)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x180064668)
  • GetLongPathNameW (Address: 0x180064658)
  • GetTempFileNameW (Address: 0x180064678)
  • ReadFile (Address: 0x180064660)
  • SetFilePointer (Address: 0x180064650)
  • WriteFile (Address: 0x180064670)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x180064688)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180064698)
  • DuplicateHandle (Address: 0x1800646a0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800646c0)
  • HeapAlloc (Address: 0x1800646b0)
  • HeapFree (Address: 0x1800646b8)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalFree (Address: 0x1800646d8)
  • LocalAlloc (Address: 0x1800646e0)
  • LocalFree (Address: 0x1800646d0)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800646f0)
api-ms-win-core-job-l2-1-0.dll
  • AssignProcessToJobObject (Address: 0x180064700)
  • CreateJobObjectW (Address: 0x180064710)
  • TerminateJobObject (Address: 0x180064708)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • RegisterWaitForSingleObject (Address: 0x180064720)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180064730)
  • FreeLibrary (Address: 0x180064758)
  • GetModuleFileNameA (Address: 0x180064768)
  • GetModuleFileNameW (Address: 0x180064760)
  • GetModuleHandleExW (Address: 0x180064740)
  • GetModuleHandleW (Address: 0x180064748)
  • GetProcAddress (Address: 0x180064738)
  • LoadStringW (Address: 0x180064750)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180064778)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x180064788)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessAsUserW (Address: 0x1800647c0)
  • CreateProcessW (Address: 0x1800647a8)
  • CreateThread (Address: 0x1800647e8)
  • GetCurrentProcess (Address: 0x1800647b8)
  • GetCurrentProcessId (Address: 0x1800647e0)
  • GetCurrentThread (Address: 0x180064798)
  • GetCurrentThreadId (Address: 0x1800647d0)
  • OpenThreadToken (Address: 0x1800647b0)
  • ResumeThread (Address: 0x1800647a0)
  • SetThreadToken (Address: 0x1800647d8)
  • TerminateProcess (Address: 0x1800647c8)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x180064800)
  • OpenProcess (Address: 0x1800647f8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180064810)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180064868)
  • RegCopyTreeW (Address: 0x180064860)
  • RegCreateKeyExW (Address: 0x180064870)
  • RegDeleteTreeW (Address: 0x180064830)
  • RegDeleteValueW (Address: 0x180064820)
  • RegEnumValueW (Address: 0x180064850)
  • RegNotifyChangeKeyValue (Address: 0x180064848)
  • RegOpenKeyExW (Address: 0x180064838)
  • RegQueryInfoKeyW (Address: 0x180064858)
  • RegQueryValueExW (Address: 0x180064828)
  • RegSetValueExW (Address: 0x180064840)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyW (Address: 0x180064880)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathCanonicalizeW (Address: 0x180064890)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x1800648a0)
  • MultiByteToWideChar (Address: 0x1800648b0)
  • WideCharToMultiByte (Address: 0x1800648a8)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x1800648c0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180064948)
  • AcquireSRWLockShared (Address: 0x180064930)
  • CreateEventA (Address: 0x180064918)
  • CreateEventW (Address: 0x180064910)
  • CreateMutexExW (Address: 0x1800648d8)
  • CreateSemaphoreExW (Address: 0x180064958)
  • DeleteCriticalSection (Address: 0x1800648e0)
  • EnterCriticalSection (Address: 0x180064968)
  • InitializeCriticalSection (Address: 0x180064950)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800648f0)
  • InitializeCriticalSectionEx (Address: 0x180064900)
  • LeaveCriticalSection (Address: 0x1800648e8)
  • OpenSemaphoreW (Address: 0x180064938)
  • ReleaseMutex (Address: 0x180064970)
  • ReleaseSemaphore (Address: 0x1800648f8)
  • ReleaseSRWLockExclusive (Address: 0x180064928)
  • ReleaseSRWLockShared (Address: 0x180064920)
  • ResetEvent (Address: 0x1800648d0)
  • SetEvent (Address: 0x180064960)
  • WaitForSingleObject (Address: 0x180064940)
  • WaitForSingleObjectEx (Address: 0x180064908)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180064980)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x180064990)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x1800649b0)
  • GetSystemTimeAsFileTime (Address: 0x1800649a8)
  • GetTickCount (Address: 0x1800649b8)
  • GetTickCount64 (Address: 0x1800649c0)
  • GetVersionExW (Address: 0x1800649a0)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x1800649d0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpool (Address: 0x180064a00)
  • CloseThreadpoolCleanupGroup (Address: 0x180064a08)
  • CloseThreadpoolCleanupGroupMembers (Address: 0x1800649e0)
  • CloseThreadpoolTimer (Address: 0x180064a30)
  • CloseThreadpoolWait (Address: 0x180064a58)
  • CloseThreadpoolWork (Address: 0x180064a38)
  • CreateThreadpool (Address: 0x180064a40)
  • CreateThreadpoolCleanupGroup (Address: 0x1800649f0)
  • CreateThreadpoolTimer (Address: 0x180064a50)
  • CreateThreadpoolWait (Address: 0x180064a48)
  • CreateThreadpoolWork (Address: 0x180064a10)
  • SetThreadpoolThreadMaximum (Address: 0x1800649e8)
  • SetThreadpoolThreadMinimum (Address: 0x180064a60)
  • SetThreadpoolTimer (Address: 0x180064a18)
  • SetThreadpoolWait (Address: 0x1800649f8)
  • SubmitThreadpoolWork (Address: 0x180064a20)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180064a28)
  • WaitForThreadpoolWaitCallbacks (Address: 0x180064a68)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x180064a78)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x180064a98)
  • RoGetActivationFactory (Address: 0x180064a90)
  • RoInitialize (Address: 0x180064a88)
  • RoUninitialize (Address: 0x180064aa0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateStringReference (Address: 0x180064ab0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x180064ac0)
  • GetTraceEnableLevel (Address: 0x180064ad8)
  • GetTraceLoggerHandle (Address: 0x180064ae0)
  • TraceMessage (Address: 0x180064ad0)
  • UnregisterTraceGuids (Address: 0x180064ac8)
api-ms-win-eventing-obsolete-l1-1-0.dll
  • RegisterTraceGuidsA (Address: 0x180064af0)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x180064b18)
  • EventRegister (Address: 0x180064b20)
  • EventSetInformation (Address: 0x180064b00)
  • EventUnregister (Address: 0x180064b10)
  • EventWriteTransfer (Address: 0x180064b08)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x180064b60)
  • CreateWellKnownSid (Address: 0x180064b30)
  • DuplicateToken (Address: 0x180064b68)
  • DuplicateTokenEx (Address: 0x180064b40)
  • GetLengthSid (Address: 0x180064b50)
  • GetTokenInformation (Address: 0x180064b58)
  • ImpersonateLoggedOnUser (Address: 0x180064b38)
  • RevertToSelf (Address: 0x180064b48)
api-ms-win-security-credentials-l1-1-0.dll
  • CredFree (Address: 0x180064b78)
  • CredMarshalCredentialW (Address: 0x180064b88)
  • CredUnprotectW (Address: 0x180064b80)
api-ms-win-security-lsalookup-l1-1-0.dll
  • LookupAccountSidLocalW (Address: 0x180064b98)
  • LsaLookupClose (Address: 0x180064bb8)
  • LsaLookupFreeMemory (Address: 0x180064bb0)
  • LsaLookupGetDomainInfo (Address: 0x180064ba8)
  • LsaLookupOpenLocalPolicy (Address: 0x180064ba0)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x180064bd8)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180064bd0)
  • ConvertStringSidToSidW (Address: 0x180064bc8)
bcrypt.dll
  • BCryptGetFipsAlgorithmMode (Address: 0x180064be8)
CRYPT32.dll
  • CertCloseStore (Address: 0x180064238)
  • CertFindCertificateInStore (Address: 0x180064258)
  • CertFreeCertificateContext (Address: 0x180064268)
  • CertGetCertificateContextProperty (Address: 0x180064248)
  • CertOpenStore (Address: 0x180064260)
  • CryptAcquireCertificatePrivateKey (Address: 0x180064240)
  • CryptProtectData (Address: 0x180064250)
CRYPTSP.dll
  • CryptReleaseContext (Address: 0x180064278)
dmEnrollEngine.DLL
  • EnrollEngineInitialize (Address: 0x180064bf8)
DMProcessXMLFiltered.dll
  • MdmProcessConfigXmlWithAttributes (Address: 0x180064288)
DNSAPI.dll
  • DnsFreeNrptRuleNamesList (Address: 0x1800642a0)
  • DnsGetNrptRuleNamesList (Address: 0x1800642b8)
  • DnsNotifyResolver (Address: 0x180064298)
  • DnsRemoveNrptRule (Address: 0x1800642c0)
  • DnsSetConfigDword (Address: 0x1800642a8)
  • DnsSetNrptRules (Address: 0x1800642b0)
eappcfg.dll
  • EapHostPeerConfigBlob2Xml (Address: 0x180064c08)
  • EapHostPeerConfigXml2Blob (Address: 0x180064c28)
  • EapHostPeerFreeErrorMemory (Address: 0x180064c10)
  • EapHostPeerFreeMemory (Address: 0x180064c20)
  • EapHostPeerGetMethods (Address: 0x180064c18)
fwpuclnt.dll
  • FwpmCalloutAdd0 (Address: 0x180064c58)
  • FwpmCalloutDeleteByKey0 (Address: 0x180064c40)
  • FwpmEngineClose0 (Address: 0x180064c38)
  • FwpmEngineOpen0 (Address: 0x180064c60)
  • FwpmFilterAdd0 (Address: 0x180064c50)
  • FwpmFilterDeleteById0 (Address: 0x180064c48)
  • WfpCloseDPConfigureHandle (Address: 0x180064c68)
  • WfpConfigureDPSecurityDescriptor (Address: 0x180064c70)
  • WfpCreateDPConfigureHandle (Address: 0x180064c78)
IPHLPAPI.DLL
  • ConvertInterfaceIndexToLuid (Address: 0x1800642d8)
  • ConvertInterfaceLuidToIndex (Address: 0x180064310)
  • ConvertIpv4MaskToLength (Address: 0x1800642e0)
  • ConvertLengthToIpv4Mask (Address: 0x180064340)
  • GetAdaptersAddresses (Address: 0x180064320)
  • GetAdaptersInfo (Address: 0x180064300)
  • GetBestRoute2 (Address: 0x180064318)
  • GetCurrentThreadCompartmentId (Address: 0x1800642d0)
  • GetIfEntry2 (Address: 0x180064328)
  • GetIpAddrTable (Address: 0x1800642f8)
  • GetIpForwardTable (Address: 0x180064330)
  • GetPerAdapterInfo (Address: 0x180064308)
  • InitializeIpForwardEntry (Address: 0x180064348)
  • SetCurrentThreadCompartmentId (Address: 0x1800642f0)
  • SetInterfaceDnsSettings (Address: 0x180064338)
  • SetIpForwardEntry (Address: 0x1800642e8)
msvcrt.dll
  • __C_specific_handler (Address: 0x180064d18)
  • __CxxFrameHandler3 (Address: 0x180064c88)
  • __dllonexit (Address: 0x180064cf0)
  • _amsg_exit (Address: 0x180064d28)
  • _callnewh (Address: 0x180064d40)
  • _CxxThrowException (Address: 0x180064d38)
  • _initterm (Address: 0x180064d20)
  • _lock (Address: 0x180064d00)
  • _onexit (Address: 0x180064ce8)
  • _purecall (Address: 0x180064d88)
  • _strnicmp (Address: 0x180064cc8)
  • _time64 (Address: 0x180064c98)
  • _unlock (Address: 0x180064cf8)
  • _vsnprintf_s (Address: 0x180064cc0)
  • _vsnwprintf (Address: 0x180064da8)
  • _wcsicmp (Address: 0x180064ca8)
  • _wcslwr (Address: 0x180064dc0)
  • _wcsnicmp (Address: 0x180064ca0)
  • _XcptFilter (Address: 0x180064d30)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180064db8)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180064d68)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180064d60)
  • ??0exception@@QEAA@XZ (Address: 0x180064dd0)
  • ??1exception@@UEAA@XZ (Address: 0x180064d58)
  • ??1type_info@@UEAA@XZ (Address: 0x180064d08)
  • ?terminate@@YAXXZ (Address: 0x180064d10)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x180064d48)
  • atol (Address: 0x180064d98)
  • free (Address: 0x180064d78)
  • malloc (Address: 0x180064d70)
  • memcmp (Address: 0x180064cd0)
  • memcpy (Address: 0x180064cd8)
  • memcpy_s (Address: 0x180064d90)
  • memmove_s (Address: 0x180064db0)
  • memset (Address: 0x180064ce0)
  • strchr (Address: 0x180064d50)
  • wcscat_s (Address: 0x180064dd8)
  • wcschr (Address: 0x180064d80)
  • wcscmp (Address: 0x180064de0)
  • wcscpy_s (Address: 0x180064da0)
  • wcsncat_s (Address: 0x180064c90)
  • wcsncmp (Address: 0x180064cb8)
  • wcsstr (Address: 0x180064dc8)
  • wcstok_s (Address: 0x180064cb0)
ncrypt.dll
  • NCryptFreeObject (Address: 0x180064df8)
  • NCryptGetProperty (Address: 0x180064e18)
  • NCryptOpenKey (Address: 0x180064e00)
  • NCryptOpenStorageProvider (Address: 0x180064df0)
  • NCryptSetProperty (Address: 0x180064e08)
  • NCryptSignHash (Address: 0x180064e10)
NSI.dll
  • NsiGetAllParametersEx (Address: 0x180064368)
  • NsiGetParameterEx (Address: 0x180064370)
  • NsiSetAllParameters (Address: 0x180064358)
  • NsiSetAllParametersEx (Address: 0x180064360)
ntdll.dll
  • EtwTraceMessage (Address: 0x180064e40)
  • NtClose (Address: 0x180064ee0)
  • NtOpenSymbolicLinkObject (Address: 0x180064ec8)
  • NtQueryInformationProcess (Address: 0x180064e38)
  • NtQuerySymbolicLinkObject (Address: 0x180064ed0)
  • NtQueryWnfStateData (Address: 0x180064e98)
  • RtlCaptureContext (Address: 0x180064e30)
  • RtlCopySid (Address: 0x180064eb8)
  • RtlEqualSid (Address: 0x180064ed8)
  • RtlFreeSid (Address: 0x180064ea0)
  • RtlInitUnicodeString (Address: 0x180064e48)
  • RtlIpv4AddressToStringW (Address: 0x180064e68)
  • RtlIpv4StringToAddressW (Address: 0x180064e90)
  • RtlIpv6AddressToStringW (Address: 0x180064e60)
  • RtlIpv6StringToAddressA (Address: 0x180064e28)
  • RtlIpv6StringToAddressW (Address: 0x180064e88)
  • RtlIsStateSeparationEnabled (Address: 0x180064ea8)
  • RtlLengthSid (Address: 0x180064ec0)
  • RtlLookupFunctionEntry (Address: 0x180064e70)
  • RtlNtStatusToDosError (Address: 0x180064eb0)
  • RtlPublishWnfStateData (Address: 0x180064e50)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x180064e80)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180064e78)
  • RtlVirtualUnwind (Address: 0x180064e58)
OLEAUT32.dll
  • SysAllocString (Address: 0x180064388)
  • SysFreeString (Address: 0x180064380)
RASAPI32.dll
  • ComputeHashFromEntryName (Address: 0x1800643c0)
  • RasEnumEntriesW (Address: 0x1800643e0)
  • RasFreeEntryAdvancedProperties (Address: 0x1800643b8)
  • RasGetConnectStatusW (Address: 0x1800643f8)
  • RasGetCustomAuthDataW (Address: 0x1800643a8)
  • RasGetEntryAdvancedProperties (Address: 0x1800643f0)
  • RasGetEntryHrasconnW (Address: 0x180064398)
  • RasGetEntryPropertiesW (Address: 0x1800643d8)
  • RasGetPbkPath (Address: 0x180064400)
  • RasHangUpW (Address: 0x1800643b0)
  • RasRemoveToastNotification (Address: 0x1800643d0)
  • RasSetPerConnectionProxy (Address: 0x1800643e8)
  • RasShowToastNotificationEx (Address: 0x1800643c8)
  • RasTriggerConnectionEx (Address: 0x1800643a0)
rasman.dll
  • RasActivateRouteEx2 (Address: 0x180064f68)
  • RasAllocateRoute (Address: 0x180064f30)
  • RasAllocInterfaceLuidIndex (Address: 0x180064f70)
  • RasDeAllocateRoute (Address: 0x180064f58)
  • RasFreeInterfaceLuidIndex (Address: 0x180064f60)
  • RasGetConnectionUserData (Address: 0x180064f10)
  • RasGetPortDialParams (Address: 0x180064f08)
  • RasInitializeNoWait (Address: 0x180064ef0)
  • RasPortGetBundle (Address: 0x180064f28)
  • RasPortGetFramingEx (Address: 0x180064f00)
  • RasPortSetFramingEx (Address: 0x180064f38)
  • RasProtocolStarted (Address: 0x180064f40)
  • RasSendProtocolResultToRasman (Address: 0x180064ef8)
  • RasSetConnectionUserData (Address: 0x180064f18)
  • RasSetIPAddresses (Address: 0x180064f48)
  • RasSetPortUserData (Address: 0x180064f20)
  • RasUpdateDefaultRouteSettings (Address: 0x180064f50)
rasmans.dll
  • NlmGetBestCostNetworkConnection (Address: 0x180064f98)
  • NlmGetCostedNetworkSettings (Address: 0x180064f80)
  • NlmSetCostedNetworkSettings (Address: 0x180064fa0)
  • VpnProfileMatchingNrpt (Address: 0x180064f90)
  • VpnProfileNrptHasExemptions (Address: 0x180064f88)
RPCRT4.dll
  • I_RpcBindingInqLocalClientPID (Address: 0x180064480)
  • I_RpcBindingIsClientLocal (Address: 0x180064458)
  • Ndr64AsyncServerCallAll (Address: 0x1800644b0)
  • NdrAsyncServerCall (Address: 0x180064490)
  • NdrServerCall2 (Address: 0x1800644c8)
  • NdrServerCallAll (Address: 0x180064498)
  • RpcAsyncAbortCall (Address: 0x180064430)
  • RpcAsyncCompleteCall (Address: 0x180064438)
  • RpcBindingInqAuthClientW (Address: 0x180064440)
  • RpcBindingToStringBindingW (Address: 0x180064450)
  • RpcBindingVectorFree (Address: 0x1800644c0)
  • RpcEpRegisterW (Address: 0x1800644d8)
  • RpcEpUnregister (Address: 0x180064428)
  • RpcImpersonateClient (Address: 0x180064410)
  • RpcRevertToSelf (Address: 0x1800644a8)
  • RpcServerInqBindings (Address: 0x180064420)
  • RpcServerInqDefaultPrincNameW (Address: 0x180064478)
  • RpcServerRegisterAuthInfoW (Address: 0x180064470)
  • RpcServerRegisterIf3 (Address: 0x1800644a0)
  • RpcServerSubscribeForNotification (Address: 0x180064468)
  • RpcServerUnregisterIfEx (Address: 0x180064448)
  • RpcServerUnsubscribeForNotification (Address: 0x180064418)
  • RpcServerUseProtseqW (Address: 0x180064460)
  • RpcStringBindingParseW (Address: 0x1800644d0)
  • RpcStringFreeW (Address: 0x1800644b8)
  • UuidCreate (Address: 0x180064488)
rtutils.dll
  • TraceVprintfExA (Address: 0x180064fb0)
SspiCli.dll
  • LsaCallAuthenticationPackage (Address: 0x1800644f0)
  • LsaDeregisterLogonProcess (Address: 0x1800644f8)
  • LsaLookupAuthenticationPackage (Address: 0x1800644e8)
  • LsaRegisterLogonProcess (Address: 0x180064500)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x180064528)
  • WinHttpGetIEProxyConfigForCurrentUser (Address: 0x180064510)
  • WinHttpGetProxyForUrl (Address: 0x180064518)
  • WinHttpOpen (Address: 0x180064520)
WS2_32.dll
  • htonl (Address: 0x180064540)
  • inet_addr (Address: 0x180064538)