rascustom.dll
Description: Custom Protocol Engine
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6093
Architecture: 64-bit
Operating System: Windows NT
SHA256: 095ec248786ba0aa9f9f57763d06f36d
File Size: 496.0 KB
Uploaded At: Dec. 1, 2025, 7:37 a.m.
Views: 4
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- InitializeProtocolEngine (Ordinal: 1, Address: 0x1a40)
- SendMessageToProtocolEngine (Ordinal: 2, Address: 0x1cc0)
- UninitializeProtocolEngine (Ordinal: 3, Address: 0x1bf0)
- VpnBrokerPluginIsInstalled (Ordinal: 4, Address: 0x27bd0)
- VpnBrokerRegisterForPluginInstallations (Ordinal: 5, Address: 0x281e0)
- VpnSmCommsPluginsNotifyLogOff (Ordinal: 6, Address: 0x38ae0)
- VpnSmCommsPluginsRoamToBestCostInterface (Ordinal: 7, Address: 0x39b80)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- GetPackageFamilyName (Address: 0x180064558)
- PackageFamilyNameFromFullName (Address: 0x180064550)
api-ms-win-appmodel-runtime-l1-1-1.dll
- FormatApplicationUserModelId (Address: 0x180064568)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180064578)
api-ms-win-core-com-l1-1-0.dll
- CLSIDFromString (Address: 0x180064590)
- CoCreateGuid (Address: 0x1800645c8)
- CoCreateInstance (Address: 0x1800645b8)
- CoCreateInstanceEx (Address: 0x180064588)
- CoInitializeEx (Address: 0x1800645a8)
- CoTaskMemFree (Address: 0x180064598)
- CoUninitialize (Address: 0x1800645a0)
- StringFromCLSID (Address: 0x1800645b0)
- StringFromGUID2 (Address: 0x1800645c0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800645d8)
- IsDebuggerPresent (Address: 0x1800645e8)
- OutputDebugStringA (Address: 0x1800645f0)
- OutputDebugStringW (Address: 0x1800645e0)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180064600)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180064610)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180064628)
- RaiseException (Address: 0x180064630)
- SetLastError (Address: 0x180064640)
- SetUnhandledExceptionFilter (Address: 0x180064638)
- UnhandledExceptionFilter (Address: 0x180064620)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x180064668)
- GetLongPathNameW (Address: 0x180064658)
- GetTempFileNameW (Address: 0x180064678)
- ReadFile (Address: 0x180064660)
- SetFilePointer (Address: 0x180064650)
- WriteFile (Address: 0x180064670)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x180064688)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180064698)
- DuplicateHandle (Address: 0x1800646a0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800646c0)
- HeapAlloc (Address: 0x1800646b0)
- HeapFree (Address: 0x1800646b8)
api-ms-win-core-heap-l2-1-0.dll
- GlobalFree (Address: 0x1800646d8)
- LocalAlloc (Address: 0x1800646e0)
- LocalFree (Address: 0x1800646d0)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x1800646f0)
api-ms-win-core-job-l2-1-0.dll
- AssignProcessToJobObject (Address: 0x180064700)
- CreateJobObjectW (Address: 0x180064710)
- TerminateJobObject (Address: 0x180064708)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- RegisterWaitForSingleObject (Address: 0x180064720)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180064730)
- FreeLibrary (Address: 0x180064758)
- GetModuleFileNameA (Address: 0x180064768)
- GetModuleFileNameW (Address: 0x180064760)
- GetModuleHandleExW (Address: 0x180064740)
- GetModuleHandleW (Address: 0x180064748)
- GetProcAddress (Address: 0x180064738)
- LoadStringW (Address: 0x180064750)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180064778)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x180064788)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1800647c0)
- CreateProcessW (Address: 0x1800647a8)
- CreateThread (Address: 0x1800647e8)
- GetCurrentProcess (Address: 0x1800647b8)
- GetCurrentProcessId (Address: 0x1800647e0)
- GetCurrentThread (Address: 0x180064798)
- GetCurrentThreadId (Address: 0x1800647d0)
- OpenThreadToken (Address: 0x1800647b0)
- ResumeThread (Address: 0x1800647a0)
- SetThreadToken (Address: 0x1800647d8)
- TerminateProcess (Address: 0x1800647c8)
api-ms-win-core-processthreads-l1-1-1.dll
- GetProcessMitigationPolicy (Address: 0x180064800)
- OpenProcess (Address: 0x1800647f8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180064810)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180064868)
- RegCopyTreeW (Address: 0x180064860)
- RegCreateKeyExW (Address: 0x180064870)
- RegDeleteTreeW (Address: 0x180064830)
- RegDeleteValueW (Address: 0x180064820)
- RegEnumValueW (Address: 0x180064850)
- RegNotifyChangeKeyValue (Address: 0x180064848)
- RegOpenKeyExW (Address: 0x180064838)
- RegQueryInfoKeyW (Address: 0x180064858)
- RegQueryValueExW (Address: 0x180064828)
- RegSetValueExW (Address: 0x180064840)
api-ms-win-core-registry-l2-1-0.dll
- RegCreateKeyW (Address: 0x180064880)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathCanonicalizeW (Address: 0x180064890)
api-ms-win-core-string-l1-1-0.dll
- CompareStringW (Address: 0x1800648a0)
- MultiByteToWideChar (Address: 0x1800648b0)
- WideCharToMultiByte (Address: 0x1800648a8)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1800648c0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180064948)
- AcquireSRWLockShared (Address: 0x180064930)
- CreateEventA (Address: 0x180064918)
- CreateEventW (Address: 0x180064910)
- CreateMutexExW (Address: 0x1800648d8)
- CreateSemaphoreExW (Address: 0x180064958)
- DeleteCriticalSection (Address: 0x1800648e0)
- EnterCriticalSection (Address: 0x180064968)
- InitializeCriticalSection (Address: 0x180064950)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800648f0)
- InitializeCriticalSectionEx (Address: 0x180064900)
- LeaveCriticalSection (Address: 0x1800648e8)
- OpenSemaphoreW (Address: 0x180064938)
- ReleaseMutex (Address: 0x180064970)
- ReleaseSemaphore (Address: 0x1800648f8)
- ReleaseSRWLockExclusive (Address: 0x180064928)
- ReleaseSRWLockShared (Address: 0x180064920)
- ResetEvent (Address: 0x1800648d0)
- SetEvent (Address: 0x180064960)
- WaitForSingleObject (Address: 0x180064940)
- WaitForSingleObjectEx (Address: 0x180064908)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x180064980)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x180064990)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x1800649b0)
- GetSystemTimeAsFileTime (Address: 0x1800649a8)
- GetTickCount (Address: 0x1800649b8)
- GetTickCount64 (Address: 0x1800649c0)
- GetVersionExW (Address: 0x1800649a0)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x1800649d0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpool (Address: 0x180064a00)
- CloseThreadpoolCleanupGroup (Address: 0x180064a08)
- CloseThreadpoolCleanupGroupMembers (Address: 0x1800649e0)
- CloseThreadpoolTimer (Address: 0x180064a30)
- CloseThreadpoolWait (Address: 0x180064a58)
- CloseThreadpoolWork (Address: 0x180064a38)
- CreateThreadpool (Address: 0x180064a40)
- CreateThreadpoolCleanupGroup (Address: 0x1800649f0)
- CreateThreadpoolTimer (Address: 0x180064a50)
- CreateThreadpoolWait (Address: 0x180064a48)
- CreateThreadpoolWork (Address: 0x180064a10)
- SetThreadpoolThreadMaximum (Address: 0x1800649e8)
- SetThreadpoolThreadMinimum (Address: 0x180064a60)
- SetThreadpoolTimer (Address: 0x180064a18)
- SetThreadpoolWait (Address: 0x1800649f8)
- SubmitThreadpoolWork (Address: 0x180064a20)
- WaitForThreadpoolTimerCallbacks (Address: 0x180064a28)
- WaitForThreadpoolWaitCallbacks (Address: 0x180064a68)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- UnregisterWaitEx (Address: 0x180064a78)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x180064a98)
- RoGetActivationFactory (Address: 0x180064a90)
- RoInitialize (Address: 0x180064a88)
- RoUninitialize (Address: 0x180064aa0)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateStringReference (Address: 0x180064ab0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x180064ac0)
- GetTraceEnableLevel (Address: 0x180064ad8)
- GetTraceLoggerHandle (Address: 0x180064ae0)
- TraceMessage (Address: 0x180064ad0)
- UnregisterTraceGuids (Address: 0x180064ac8)
api-ms-win-eventing-obsolete-l1-1-0.dll
- RegisterTraceGuidsA (Address: 0x180064af0)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180064b18)
- EventRegister (Address: 0x180064b20)
- EventSetInformation (Address: 0x180064b00)
- EventUnregister (Address: 0x180064b10)
- EventWriteTransfer (Address: 0x180064b08)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x180064b60)
- CreateWellKnownSid (Address: 0x180064b30)
- DuplicateToken (Address: 0x180064b68)
- DuplicateTokenEx (Address: 0x180064b40)
- GetLengthSid (Address: 0x180064b50)
- GetTokenInformation (Address: 0x180064b58)
- ImpersonateLoggedOnUser (Address: 0x180064b38)
- RevertToSelf (Address: 0x180064b48)
api-ms-win-security-credentials-l1-1-0.dll
- CredFree (Address: 0x180064b78)
- CredMarshalCredentialW (Address: 0x180064b88)
- CredUnprotectW (Address: 0x180064b80)
api-ms-win-security-lsalookup-l1-1-0.dll
- LookupAccountSidLocalW (Address: 0x180064b98)
- LsaLookupClose (Address: 0x180064bb8)
- LsaLookupFreeMemory (Address: 0x180064bb0)
- LsaLookupGetDomainInfo (Address: 0x180064ba8)
- LsaLookupOpenLocalPolicy (Address: 0x180064ba0)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x180064bd8)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180064bd0)
- ConvertStringSidToSidW (Address: 0x180064bc8)
bcrypt.dll
- BCryptGetFipsAlgorithmMode (Address: 0x180064be8)
CRYPT32.dll
- CertCloseStore (Address: 0x180064238)
- CertFindCertificateInStore (Address: 0x180064258)
- CertFreeCertificateContext (Address: 0x180064268)
- CertGetCertificateContextProperty (Address: 0x180064248)
- CertOpenStore (Address: 0x180064260)
- CryptAcquireCertificatePrivateKey (Address: 0x180064240)
- CryptProtectData (Address: 0x180064250)
CRYPTSP.dll
- CryptReleaseContext (Address: 0x180064278)
dmEnrollEngine.DLL
- EnrollEngineInitialize (Address: 0x180064bf8)
DMProcessXMLFiltered.dll
- MdmProcessConfigXmlWithAttributes (Address: 0x180064288)
DNSAPI.dll
- DnsFreeNrptRuleNamesList (Address: 0x1800642a0)
- DnsGetNrptRuleNamesList (Address: 0x1800642b8)
- DnsNotifyResolver (Address: 0x180064298)
- DnsRemoveNrptRule (Address: 0x1800642c0)
- DnsSetConfigDword (Address: 0x1800642a8)
- DnsSetNrptRules (Address: 0x1800642b0)
eappcfg.dll
- EapHostPeerConfigBlob2Xml (Address: 0x180064c08)
- EapHostPeerConfigXml2Blob (Address: 0x180064c28)
- EapHostPeerFreeErrorMemory (Address: 0x180064c10)
- EapHostPeerFreeMemory (Address: 0x180064c20)
- EapHostPeerGetMethods (Address: 0x180064c18)
fwpuclnt.dll
- FwpmCalloutAdd0 (Address: 0x180064c58)
- FwpmCalloutDeleteByKey0 (Address: 0x180064c40)
- FwpmEngineClose0 (Address: 0x180064c38)
- FwpmEngineOpen0 (Address: 0x180064c60)
- FwpmFilterAdd0 (Address: 0x180064c50)
- FwpmFilterDeleteById0 (Address: 0x180064c48)
- WfpCloseDPConfigureHandle (Address: 0x180064c68)
- WfpConfigureDPSecurityDescriptor (Address: 0x180064c70)
- WfpCreateDPConfigureHandle (Address: 0x180064c78)
IPHLPAPI.DLL
- ConvertInterfaceIndexToLuid (Address: 0x1800642d8)
- ConvertInterfaceLuidToIndex (Address: 0x180064310)
- ConvertIpv4MaskToLength (Address: 0x1800642e0)
- ConvertLengthToIpv4Mask (Address: 0x180064340)
- GetAdaptersAddresses (Address: 0x180064320)
- GetAdaptersInfo (Address: 0x180064300)
- GetBestRoute2 (Address: 0x180064318)
- GetCurrentThreadCompartmentId (Address: 0x1800642d0)
- GetIfEntry2 (Address: 0x180064328)
- GetIpAddrTable (Address: 0x1800642f8)
- GetIpForwardTable (Address: 0x180064330)
- GetPerAdapterInfo (Address: 0x180064308)
- InitializeIpForwardEntry (Address: 0x180064348)
- SetCurrentThreadCompartmentId (Address: 0x1800642f0)
- SetInterfaceDnsSettings (Address: 0x180064338)
- SetIpForwardEntry (Address: 0x1800642e8)
msvcrt.dll
- __C_specific_handler (Address: 0x180064d18)
- __CxxFrameHandler3 (Address: 0x180064c88)
- __dllonexit (Address: 0x180064cf0)
- _amsg_exit (Address: 0x180064d28)
- _callnewh (Address: 0x180064d40)
- _CxxThrowException (Address: 0x180064d38)
- _initterm (Address: 0x180064d20)
- _lock (Address: 0x180064d00)
- _onexit (Address: 0x180064ce8)
- _purecall (Address: 0x180064d88)
- _strnicmp (Address: 0x180064cc8)
- _time64 (Address: 0x180064c98)
- _unlock (Address: 0x180064cf8)
- _vsnprintf_s (Address: 0x180064cc0)
- _vsnwprintf (Address: 0x180064da8)
- _wcsicmp (Address: 0x180064ca8)
- _wcslwr (Address: 0x180064dc0)
- _wcsnicmp (Address: 0x180064ca0)
- _XcptFilter (Address: 0x180064d30)
- ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180064db8)
- ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180064d68)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x180064d60)
- ??0exception@@QEAA@XZ (Address: 0x180064dd0)
- ??1exception@@UEAA@XZ (Address: 0x180064d58)
- ??1type_info@@UEAA@XZ (Address: 0x180064d08)
- ?terminate@@YAXXZ (Address: 0x180064d10)
- ?what@exception@@UEBAPEBDXZ (Address: 0x180064d48)
- atol (Address: 0x180064d98)
- free (Address: 0x180064d78)
- malloc (Address: 0x180064d70)
- memcmp (Address: 0x180064cd0)
- memcpy (Address: 0x180064cd8)
- memcpy_s (Address: 0x180064d90)
- memmove_s (Address: 0x180064db0)
- memset (Address: 0x180064ce0)
- strchr (Address: 0x180064d50)
- wcscat_s (Address: 0x180064dd8)
- wcschr (Address: 0x180064d80)
- wcscmp (Address: 0x180064de0)
- wcscpy_s (Address: 0x180064da0)
- wcsncat_s (Address: 0x180064c90)
- wcsncmp (Address: 0x180064cb8)
- wcsstr (Address: 0x180064dc8)
- wcstok_s (Address: 0x180064cb0)
ncrypt.dll
- NCryptFreeObject (Address: 0x180064df8)
- NCryptGetProperty (Address: 0x180064e18)
- NCryptOpenKey (Address: 0x180064e00)
- NCryptOpenStorageProvider (Address: 0x180064df0)
- NCryptSetProperty (Address: 0x180064e08)
- NCryptSignHash (Address: 0x180064e10)
NSI.dll
- NsiGetAllParametersEx (Address: 0x180064368)
- NsiGetParameterEx (Address: 0x180064370)
- NsiSetAllParameters (Address: 0x180064358)
- NsiSetAllParametersEx (Address: 0x180064360)
ntdll.dll
- EtwTraceMessage (Address: 0x180064e40)
- NtClose (Address: 0x180064ee0)
- NtOpenSymbolicLinkObject (Address: 0x180064ec8)
- NtQueryInformationProcess (Address: 0x180064e38)
- NtQuerySymbolicLinkObject (Address: 0x180064ed0)
- NtQueryWnfStateData (Address: 0x180064e98)
- RtlCaptureContext (Address: 0x180064e30)
- RtlCopySid (Address: 0x180064eb8)
- RtlEqualSid (Address: 0x180064ed8)
- RtlFreeSid (Address: 0x180064ea0)
- RtlInitUnicodeString (Address: 0x180064e48)
- RtlIpv4AddressToStringW (Address: 0x180064e68)
- RtlIpv4StringToAddressW (Address: 0x180064e90)
- RtlIpv6AddressToStringW (Address: 0x180064e60)
- RtlIpv6StringToAddressA (Address: 0x180064e28)
- RtlIpv6StringToAddressW (Address: 0x180064e88)
- RtlIsStateSeparationEnabled (Address: 0x180064ea8)
- RtlLengthSid (Address: 0x180064ec0)
- RtlLookupFunctionEntry (Address: 0x180064e70)
- RtlNtStatusToDosError (Address: 0x180064eb0)
- RtlPublishWnfStateData (Address: 0x180064e50)
- RtlSubscribeWnfStateChangeNotification (Address: 0x180064e80)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180064e78)
- RtlVirtualUnwind (Address: 0x180064e58)
OLEAUT32.dll
- SysAllocString (Address: 0x180064388)
- SysFreeString (Address: 0x180064380)
RASAPI32.dll
- ComputeHashFromEntryName (Address: 0x1800643c0)
- RasEnumEntriesW (Address: 0x1800643e0)
- RasFreeEntryAdvancedProperties (Address: 0x1800643b8)
- RasGetConnectStatusW (Address: 0x1800643f8)
- RasGetCustomAuthDataW (Address: 0x1800643a8)
- RasGetEntryAdvancedProperties (Address: 0x1800643f0)
- RasGetEntryHrasconnW (Address: 0x180064398)
- RasGetEntryPropertiesW (Address: 0x1800643d8)
- RasGetPbkPath (Address: 0x180064400)
- RasHangUpW (Address: 0x1800643b0)
- RasRemoveToastNotification (Address: 0x1800643d0)
- RasSetPerConnectionProxy (Address: 0x1800643e8)
- RasShowToastNotificationEx (Address: 0x1800643c8)
- RasTriggerConnectionEx (Address: 0x1800643a0)
rasman.dll
- RasActivateRouteEx2 (Address: 0x180064f68)
- RasAllocateRoute (Address: 0x180064f30)
- RasAllocInterfaceLuidIndex (Address: 0x180064f70)
- RasDeAllocateRoute (Address: 0x180064f58)
- RasFreeInterfaceLuidIndex (Address: 0x180064f60)
- RasGetConnectionUserData (Address: 0x180064f10)
- RasGetPortDialParams (Address: 0x180064f08)
- RasInitializeNoWait (Address: 0x180064ef0)
- RasPortGetBundle (Address: 0x180064f28)
- RasPortGetFramingEx (Address: 0x180064f00)
- RasPortSetFramingEx (Address: 0x180064f38)
- RasProtocolStarted (Address: 0x180064f40)
- RasSendProtocolResultToRasman (Address: 0x180064ef8)
- RasSetConnectionUserData (Address: 0x180064f18)
- RasSetIPAddresses (Address: 0x180064f48)
- RasSetPortUserData (Address: 0x180064f20)
- RasUpdateDefaultRouteSettings (Address: 0x180064f50)
rasmans.dll
- NlmGetBestCostNetworkConnection (Address: 0x180064f98)
- NlmGetCostedNetworkSettings (Address: 0x180064f80)
- NlmSetCostedNetworkSettings (Address: 0x180064fa0)
- VpnProfileMatchingNrpt (Address: 0x180064f90)
- VpnProfileNrptHasExemptions (Address: 0x180064f88)
RPCRT4.dll
- I_RpcBindingInqLocalClientPID (Address: 0x180064480)
- I_RpcBindingIsClientLocal (Address: 0x180064458)
- Ndr64AsyncServerCallAll (Address: 0x1800644b0)
- NdrAsyncServerCall (Address: 0x180064490)
- NdrServerCall2 (Address: 0x1800644c8)
- NdrServerCallAll (Address: 0x180064498)
- RpcAsyncAbortCall (Address: 0x180064430)
- RpcAsyncCompleteCall (Address: 0x180064438)
- RpcBindingInqAuthClientW (Address: 0x180064440)
- RpcBindingToStringBindingW (Address: 0x180064450)
- RpcBindingVectorFree (Address: 0x1800644c0)
- RpcEpRegisterW (Address: 0x1800644d8)
- RpcEpUnregister (Address: 0x180064428)
- RpcImpersonateClient (Address: 0x180064410)
- RpcRevertToSelf (Address: 0x1800644a8)
- RpcServerInqBindings (Address: 0x180064420)
- RpcServerInqDefaultPrincNameW (Address: 0x180064478)
- RpcServerRegisterAuthInfoW (Address: 0x180064470)
- RpcServerRegisterIf3 (Address: 0x1800644a0)
- RpcServerSubscribeForNotification (Address: 0x180064468)
- RpcServerUnregisterIfEx (Address: 0x180064448)
- RpcServerUnsubscribeForNotification (Address: 0x180064418)
- RpcServerUseProtseqW (Address: 0x180064460)
- RpcStringBindingParseW (Address: 0x1800644d0)
- RpcStringFreeW (Address: 0x1800644b8)
- UuidCreate (Address: 0x180064488)
rtutils.dll
- TraceVprintfExA (Address: 0x180064fb0)
SspiCli.dll
- LsaCallAuthenticationPackage (Address: 0x1800644f0)
- LsaDeregisterLogonProcess (Address: 0x1800644f8)
- LsaLookupAuthenticationPackage (Address: 0x1800644e8)
- LsaRegisterLogonProcess (Address: 0x180064500)
WINHTTP.dll
- WinHttpCloseHandle (Address: 0x180064528)
- WinHttpGetIEProxyConfigForCurrentUser (Address: 0x180064510)
- WinHttpGetProxyForUrl (Address: 0x180064518)
- WinHttpOpen (Address: 0x180064520)
WS2_32.dll
- htonl (Address: 0x180064540)
- inet_addr (Address: 0x180064538)