rasmans.dll

Description: Remote Access Connection Manager

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: b0b9131810363c358a851c223e578505

File Size: 993.0 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

NlmGetBestCostNetworkConnection (Ordinal: 1, Address: 0xaae70)
NlmGetCostedNetworkSettings (Ordinal: 2, Address: 0xa5170)
NlmSetCostedNetworkSettings (Ordinal: 3, Address: 0xa55e0)
ServiceInitialized (Ordinal: 4, Address: 0x13a30)
ServiceMain (Ordinal: 5, Address: 0x36470)
ServiceRequestInProcess (Ordinal: 6, Address: 0x13970)
VpnProfileMatchingNrpt (Ordinal: 7, Address: 0xc2d90)
VpnProfileNrptHasExemptions (Ordinal: 8, Address: 0xc2ec0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800d8900)

api-ms-win-core-console-l1-1-0.dll

SetConsoleCtrlHandler (Address: 0x1800d8910)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800d8920)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800d8930)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800d8950)
SetLastError (Address: 0x1800d8958)
SetUnhandledExceptionFilter (Address: 0x1800d8940)
UnhandledExceptionFilter (Address: 0x1800d8948)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800d89b8)
CreateDirectoryW (Address: 0x1800d89a0)
CreateFileA (Address: 0x1800d8990)
CreateFileW (Address: 0x1800d8988)
DeleteFileW (Address: 0x1800d8998)
FindClose (Address: 0x1800d8980)
FindFirstFileW (Address: 0x1800d89c8)
FindNextFileW (Address: 0x1800d89e0)
GetFileAttributesW (Address: 0x1800d89e8)
GetFileInformationByHandle (Address: 0x1800d89c0)
GetFileType (Address: 0x1800d89d8)
GetFinalPathNameByHandleW (Address: 0x1800d89b0)
GetFullPathNameW (Address: 0x1800d8978)
QueryDosDeviceW (Address: 0x1800d8970)
ReadFile (Address: 0x1800d89d0)
SetFileInformationByHandle (Address: 0x1800d8968)
WriteFile (Address: 0x1800d89a8)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1800d89f8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800d8a08)
DuplicateHandle (Address: 0x1800d8a10)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800d8a20)
HeapAlloc (Address: 0x1800d8a28)
HeapFree (Address: 0x1800d8a30)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1800d8a48)
GlobalFree (Address: 0x1800d8a40)
LocalAlloc (Address: 0x1800d8a58)
LocalFree (Address: 0x1800d8a50)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalReAlloc (Address: 0x1800d8a68)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x1800d8a78)
DeviceIoControl (Address: 0x1800d8a90)
GetOverlappedResult (Address: 0x1800d8a80)
GetQueuedCompletionStatus (Address: 0x1800d8a98)
PostQueuedCompletionStatus (Address: 0x1800d8a88)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

WTSGetActiveConsoleSessionId (Address: 0x1800d8aa8)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

PowerCreateRequest (Address: 0x1800d8ab8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800d8ad8)
FreeLibrary (Address: 0x1800d8ae8)
FreeLibraryAndExitThread (Address: 0x1800d8af0)
GetModuleHandleExA (Address: 0x1800d8ac8)
GetModuleHandleExW (Address: 0x1800d8af8)
GetModuleHandleW (Address: 0x1800d8ad0)
GetProcAddress (Address: 0x1800d8ae0)
LoadLibraryExA (Address: 0x1800d8b08)
LoadLibraryExW (Address: 0x1800d8b00)

api-ms-win-core-localization-obsolete-l1-2-0.dll

CompareStringA (Address: 0x1800d8b18)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x1800d8b28)
ExpandEnvironmentStringsW (Address: 0x1800d8b30)
GetCommandLineA (Address: 0x1800d8b38)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x1800d8ba8)
CreateThread (Address: 0x1800d8b58)
GetCurrentProcess (Address: 0x1800d8b90)
GetCurrentProcessId (Address: 0x1800d8b48)
GetCurrentThread (Address: 0x1800d8b70)
GetCurrentThreadId (Address: 0x1800d8b60)
GetExitCodeProcess (Address: 0x1800d8b78)
OpenProcessToken (Address: 0x1800d8b98)
OpenThreadToken (Address: 0x1800d8b50)
ProcessIdToSessionId (Address: 0x1800d8ba0)
QueueUserAPC (Address: 0x1800d8b80)
SetThreadToken (Address: 0x1800d8b88)
TerminateProcess (Address: 0x1800d8b68)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800d8bc0)
SetProcessMitigationPolicy (Address: 0x1800d8bb8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800d8bd0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800d8bf0)
RegCreateKeyExW (Address: 0x1800d8be0)
RegDeleteKeyExW (Address: 0x1800d8bf8)
RegDeleteValueA (Address: 0x1800d8c30)
RegDeleteValueW (Address: 0x1800d8c40)
RegEnumKeyExW (Address: 0x1800d8c10)
RegGetValueA (Address: 0x1800d8c28)
RegGetValueW (Address: 0x1800d8c48)
RegNotifyChangeKeyValue (Address: 0x1800d8be8)
RegOpenKeyExA (Address: 0x1800d8c00)
RegOpenKeyExW (Address: 0x1800d8c18)
RegQueryInfoKeyW (Address: 0x1800d8c50)
RegQueryValueExA (Address: 0x1800d8c38)
RegQueryValueExW (Address: 0x1800d8c20)
RegSetValueExW (Address: 0x1800d8c08)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800d8c68)
RtlCompareMemory (Address: 0x1800d8c78)
RtlLookupFunctionEntry (Address: 0x1800d8c60)
RtlVirtualUnwind (Address: 0x1800d8c70)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x1800d8c90)
MultiByteToWideChar (Address: 0x1800d8c88)
WideCharToMultiByte (Address: 0x1800d8c98)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x1800d8ca8)
CharNextW (Address: 0x1800d8cb0)
CharPrevW (Address: 0x1800d8cb8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1800d8cd0)
lstrcmpW (Address: 0x1800d8ce0)
lstrlenA (Address: 0x1800d8cd8)
lstrlenW (Address: 0x1800d8cc8)

api-ms-win-core-synch-l1-1-0.dll

CreateEventA (Address: 0x1800d8d40)
CreateEventW (Address: 0x1800d8d08)
CreateMutexW (Address: 0x1800d8d68)
DeleteCriticalSection (Address: 0x1800d8d38)
EnterCriticalSection (Address: 0x1800d8d48)
InitializeCriticalSection (Address: 0x1800d8d00)
InitializeCriticalSectionAndSpinCount (Address: 0x1800d8d28)
LeaveCriticalSection (Address: 0x1800d8d10)
OpenMutexW (Address: 0x1800d8d58)
ReleaseMutex (Address: 0x1800d8d60)
ReleaseSemaphore (Address: 0x1800d8d30)
ResetEvent (Address: 0x1800d8d18)
SetEvent (Address: 0x1800d8cf8)
WaitForMultipleObjectsEx (Address: 0x1800d8d20)
WaitForSingleObject (Address: 0x1800d8cf0)
WaitForSingleObjectEx (Address: 0x1800d8d50)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800d8d78)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x1800d8da8)
GetSystemDirectoryA (Address: 0x1800d8da0)
GetSystemDirectoryW (Address: 0x1800d8d88)
GetSystemTime (Address: 0x1800d8db8)
GetSystemTimeAsFileTime (Address: 0x1800d8d98)
GetSystemWindowsDirectoryW (Address: 0x1800d8d90)
GetTickCount (Address: 0x1800d8dc0)
GetVersionExW (Address: 0x1800d8db0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x1800d8dd0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800d8e10)
CloseThreadpoolWait (Address: 0x1800d8e00)
CloseThreadpoolWork (Address: 0x1800d8e38)
CreateThreadpoolTimer (Address: 0x1800d8e28)
CreateThreadpoolWait (Address: 0x1800d8df8)
CreateThreadpoolWork (Address: 0x1800d8e20)
SetThreadpoolTimer (Address: 0x1800d8e08)
SetThreadpoolWait (Address: 0x1800d8df0)
SubmitThreadpoolWork (Address: 0x1800d8de0)
WaitForThreadpoolTimerCallbacks (Address: 0x1800d8de8)
WaitForThreadpoolWaitCallbacks (Address: 0x1800d8e18)
WaitForThreadpoolWorkCallbacks (Address: 0x1800d8e30)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x1800d8e48)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1800d8e58)

api-ms-win-devices-config-l1-1-1.dll

CM_Get_Device_ID_List_SizeW (Address: 0x1800d8e78)
CM_Get_Device_ID_ListW (Address: 0x1800d8e80)
CM_Get_Device_IDW (Address: 0x1800d8e70)
CM_Locate_DevNodeW (Address: 0x1800d8e88)
CM_MapCrToWin32Err (Address: 0x1800d8e90)
CM_Open_DevNode_Key (Address: 0x1800d8e68)

api-ms-win-devices-query-l1-1-0.dll

DevCloseObjectQuery (Address: 0x1800d8ea8)
DevCreateObjectQuery (Address: 0x1800d8ea0)

api-ms-win-devices-swdevice-l1-1-0.dll

SwDeviceClose (Address: 0x1800d8eb8)
SwDeviceCreate (Address: 0x1800d8ec0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1800d8ed0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800d8ef8)
EventRegister (Address: 0x1800d8ee8)
EventSetInformation (Address: 0x1800d8f00)
EventUnregister (Address: 0x1800d8ef0)
EventWriteTransfer (Address: 0x1800d8ee0)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x1800d8f18)
AdjustTokenPrivileges (Address: 0x1800d8fb0)
AllocateAndInitializeSid (Address: 0x1800d8fc8)
CheckTokenMembership (Address: 0x1800d8f78)
CopySid (Address: 0x1800d8fa8)
DuplicateToken (Address: 0x1800d8f60)
DuplicateTokenEx (Address: 0x1800d8f68)
EqualSid (Address: 0x1800d8f88)
FreeSid (Address: 0x1800d8f70)
GetLengthSid (Address: 0x1800d8f20)
GetSecurityDescriptorDacl (Address: 0x1800d8fb8)
GetSecurityDescriptorGroup (Address: 0x1800d8fc0)
GetSecurityDescriptorOwner (Address: 0x1800d8fa0)
GetSidLengthRequired (Address: 0x1800d8f40)
GetSidSubAuthority (Address: 0x1800d8f48)
GetTokenInformation (Address: 0x1800d8f98)
ImpersonateLoggedOnUser (Address: 0x1800d8f80)
InitializeAcl (Address: 0x1800d8f28)
InitializeSecurityDescriptor (Address: 0x1800d8f30)
InitializeSid (Address: 0x1800d8f38)
RevertToSelf (Address: 0x1800d8f90)
SetSecurityDescriptorDacl (Address: 0x1800d8f58)
SetSecurityDescriptorGroup (Address: 0x1800d8f10)
SetSecurityDescriptorOwner (Address: 0x1800d8f50)

DNSAPI.dll

DnsFreeNrptRuleNamesList (Address: 0x1800d8750)
DnsGetNrptRuleNamesList (Address: 0x1800d8748)
DnsRemoveNrptRule (Address: 0x1800d8738)
DnsSetNrptRules (Address: 0x1800d8740)

eappprxy.dll

EapHostPeerInitialize (Address: 0x1800d8fd8)
EapHostPeerUninitialize (Address: 0x1800d8fe0)

FirewallAPI.dll

FwAlloc (Address: 0x1800d8788)
FWFreeFirewallRules (Address: 0x1800d8778)
NetworkIsolationCreateInterfaceContainer (Address: 0x1800d8770)
NetworkIsolationDeleteInterfaceContainer (Address: 0x1800d8780)

FWPolicyIOMgr.dll

FwAdvPolicyDecodeFirewallRule (Address: 0x1800d8760)

fwpuclnt.dll

FwpiVpnTriggerAddAppSids (Address: 0x1800d9028)
FwpiVpnTriggerAddFilePaths (Address: 0x1800d9040)
FwpiVpnTriggerAddSecurityDescriptor (Address: 0x1800d90a8)
FwpiVpnTriggerConfigureParameters (Address: 0x1800d9000)
FwpiVpnTriggerEventSubscribe0 (Address: 0x1800d9050)
FwpiVpnTriggerEventUnsubscribe0 (Address: 0x1800d8ff0)
FwpiVpnTriggerRemoveAppSids (Address: 0x1800d9018)
FwpiVpnTriggerRemoveFilePaths (Address: 0x1800d9010)
FwpiVpnTriggerRemoveSecurityDescriptor (Address: 0x1800d9008)
FwpiVpnTriggerResetNrptTriggering (Address: 0x1800d90c8)
FwpiVpnTriggerSetStateDisconnected (Address: 0x1800d9048)
FwpmCalloutAdd0 (Address: 0x1800d9030)
FwpmCalloutDeleteByKey0 (Address: 0x1800d9038)
FwpmEngineClose0 (Address: 0x1800d9058)
FwpmEngineOpen0 (Address: 0x1800d90c0)
FwpmFilterAdd0 (Address: 0x1800d9060)
FwpmFilterDeleteByKey0 (Address: 0x1800d9020)
FwpmFreeMemory0 (Address: 0x1800d90a0)
FwpmGetAppIdFromFileName0 (Address: 0x1800d8ff8)
FwpmProviderContextAdd0 (Address: 0x1800d90d0)
FwpmProviderContextAdd2 (Address: 0x1800d9068)
FwpmProviderContextDeleteByKey0 (Address: 0x1800d90b8)
FwpmTransactionAbort0 (Address: 0x1800d9098)
FwpmTransactionBegin0 (Address: 0x1800d9070)
FwpmTransactionCommit0 (Address: 0x1800d90b0)
IPsecSaCreateEnumHandle0 (Address: 0x1800d9090)
IPsecSaDestroyEnumHandle0 (Address: 0x1800d9080)
IPsecSaEnum0 (Address: 0x1800d9078)
IPsecSaInitiateAsync0 (Address: 0x1800d9088)

IPHLPAPI.DLL

ConvertInterfaceGuidToLuid (Address: 0x1800d87e0)
ConvertInterfaceIndexToLuid (Address: 0x1800d8798)
ConvertInterfaceLuidToAlias (Address: 0x1800d87c8)
ConvertInterfaceLuidToGuid (Address: 0x1800d87b8)
ConvertInterfaceLuidToIndex (Address: 0x1800d87c0)
CreateIpForwardEntry2 (Address: 0x1800d87f8)
DeleteIpForwardEntry2 (Address: 0x1800d87f0)
FreeDnsSettings (Address: 0x1800d87b0)
GetAdaptersAddresses (Address: 0x1800d87d8)
GetDnsSettings (Address: 0x1800d87a8)
InitializeIpForwardEntry (Address: 0x1800d87e8)
SetDnsSettings (Address: 0x1800d87a0)
SetInterfaceDnsSettings (Address: 0x1800d87d0)

msvcrt.dll

___lc_codepage_func (Address: 0x1800d9120)
___lc_handle_func (Address: 0x1800d9128)
___mb_cur_max_func (Address: 0x1800d90f0)
__C_specific_handler (Address: 0x1800d9328)
__crtGetStringTypeW (Address: 0x1800d9100)
__crtLCMapStringW (Address: 0x1800d90f8)
__CxxFrameHandler3 (Address: 0x1800d91a8)
__dllonexit (Address: 0x1800d9278)
__mb_cur_max (Address: 0x1800d9118)
__pctype_func (Address: 0x1800d9130)
__uncaught_exception (Address: 0x1800d9108)
_amsg_exit (Address: 0x1800d9298)
_callnewh (Address: 0x1800d9148)
_CxxThrowException (Address: 0x1800d9140)
_errno (Address: 0x1800d9138)
_initterm (Address: 0x1800d9290)
_local_unwind (Address: 0x1800d9240)
_lock (Address: 0x1800d9288)
_ltoa (Address: 0x1800d9210)
_ltow (Address: 0x1800d9168)
_mbscspn (Address: 0x1800d91d0)
_onexit (Address: 0x1800d9270)
_stricmp (Address: 0x1800d9318)
_strnicmp (Address: 0x1800d91e0)
_ultoa_s (Address: 0x1800d91f8)
_unlock (Address: 0x1800d9280)
_vsnprintf (Address: 0x1800d9320)
_vsnwprintf (Address: 0x1800d9310)
_wcsicmp (Address: 0x1800d9308)
_wcsnicmp (Address: 0x1800d9220)
_wfopen_s (Address: 0x1800d91b8)
_wtol (Address: 0x1800d9228)
_XcptFilter (Address: 0x1800d92a0)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800d9180)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800d9150)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800d9178)
??0exception@@QEAA@XZ (Address: 0x1800d9188)
??1exception@@UEAA@XZ (Address: 0x1800d9190)
??1type_info@@UEAA@XZ (Address: 0x1800d9238)
?terminate@@YAXXZ (Address: 0x1800d90e0)
?what@exception@@UEBAPEBDXZ (Address: 0x1800d9198)
abort (Address: 0x1800d90e8)
atol (Address: 0x1800d91f0)
calloc (Address: 0x1800d91d8)
fclose (Address: 0x1800d91b0)
free (Address: 0x1800d92b0)
malloc (Address: 0x1800d92a8)
mbstowcs_s (Address: 0x1800d92d8)
memcmp (Address: 0x1800d9248)
memcpy (Address: 0x1800d9250)
memcpy_s (Address: 0x1800d92f0)
memmove (Address: 0x1800d9258)
memmove_s (Address: 0x1800d9170)
memset (Address: 0x1800d9260)
qsort (Address: 0x1800d91e8)
setlocale (Address: 0x1800d9110)
strchr (Address: 0x1800d9230)
strcmp (Address: 0x1800d9268)
strcpy_s (Address: 0x1800d92f8)
strpbrk (Address: 0x1800d92c8)
strrchr (Address: 0x1800d91c8)
strstr (Address: 0x1800d92d0)
strtoul (Address: 0x1800d9218)
tolower (Address: 0x1800d9160)
wcscat_s (Address: 0x1800d92e8)
wcschr (Address: 0x1800d9208)
wcscmp (Address: 0x1800d9330)
wcscpy_s (Address: 0x1800d9300)
wcsncat_s (Address: 0x1800d9158)
wcsncmp (Address: 0x1800d92b8)
wcsnlen (Address: 0x1800d91c0)
wcspbrk (Address: 0x1800d92c0)
wcsstr (Address: 0x1800d9200)
wcstok_s (Address: 0x1800d91a0)
wcstombs_s (Address: 0x1800d92e0)

ncrypt.dll

NCryptFreeObject (Address: 0x1800d9360)
NCryptGetProperty (Address: 0x1800d9358)
NCryptOpenKey (Address: 0x1800d9340)
NCryptOpenStorageProvider (Address: 0x1800d9350)
NCryptSetProperty (Address: 0x1800d9368)
NCryptSignHash (Address: 0x1800d9348)

NSI.dll

NsiEnumerateObjectsAllParametersEx (Address: 0x1800d8820)
NsiGetAllParametersEx (Address: 0x1800d8810)
NsiGetParameterEx (Address: 0x1800d8818)
NsiSetAllParameters (Address: 0x1800d8828)
NsiSetAllParametersEx (Address: 0x1800d8808)

ntdll.dll

DbgPrint (Address: 0x1800d93f8)
EtwGetTraceEnableFlags (Address: 0x1800d93d0)
EtwGetTraceEnableLevel (Address: 0x1800d93b8)
EtwGetTraceLoggerHandle (Address: 0x1800d93c0)
EtwRegisterTraceGuidsW (Address: 0x1800d93b0)
EtwTraceMessage (Address: 0x1800d9390)
EtwUnregisterTraceGuids (Address: 0x1800d93e0)
NtPowerInformation (Address: 0x1800d93d8)
NtQueryInformationProcess (Address: 0x1800d9450)
NtSetInformationThread (Address: 0x1800d9468)
RtlAnsiStringToUnicodeString (Address: 0x1800d9458)
RtlConvertSidToUnicodeString (Address: 0x1800d9428)
RtlCopySid (Address: 0x1800d9388)
RtlEqualSid (Address: 0x1800d9410)
RtlFreeSid (Address: 0x1800d9400)
RtlGUIDFromString (Address: 0x1800d93a0)
RtlInitAnsiString (Address: 0x1800d9448)
RtlInitString (Address: 0x1800d93e8)
RtlInitUnicodeString (Address: 0x1800d9470)
RtlIpv4AddressToStringA (Address: 0x1800d9460)
RtlIpv4AddressToStringW (Address: 0x1800d9398)
RtlIpv4StringToAddressW (Address: 0x1800d9420)
RtlIpv6AddressToStringA (Address: 0x1800d9440)
RtlIpv6AddressToStringW (Address: 0x1800d93a8)
RtlIpv6StringToAddressA (Address: 0x1800d9418)
RtlIpv6StringToAddressW (Address: 0x1800d9438)
RtlIsStateSeparationEnabled (Address: 0x1800d93c8)
RtlLengthSid (Address: 0x1800d9380)
RtlNtStatusToDosError (Address: 0x1800d93f0)
RtlPublishWnfStateData (Address: 0x1800d9430)
RtlQueueWorkItem (Address: 0x1800d9408)
RtlSubscribeWnfStateChangeNotification (Address: 0x1800d9378)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800d9478)

RASAPI32.dll

RasRestoreDefaultLegacyProxySettings (Address: 0x1800d8838)

RPCRT4.dll

I_RpcBindingIsClientLocal (Address: 0x1800d8878)
I_RpcMapWin32Status (Address: 0x1800d88b8)
NdrServerCall2 (Address: 0x1800d8888)
NdrServerCallAll (Address: 0x1800d88c8)
RpcImpersonateClient (Address: 0x1800d8898)
RpcRevertToSelf (Address: 0x1800d8868)
RpcServerInqCallAttributesW (Address: 0x1800d8858)
RpcServerInqDefaultPrincNameW (Address: 0x1800d88b0)
RpcServerRegisterAuthInfoW (Address: 0x1800d8870)
RpcServerRegisterIfEx (Address: 0x1800d88c0)
RpcServerUnregisterIf (Address: 0x1800d88a0)
RpcServerUseProtseqEpW (Address: 0x1800d8860)
RpcStringFreeA (Address: 0x1800d8850)
RpcStringFreeW (Address: 0x1800d8890)
UuidCreate (Address: 0x1800d8880)
UuidIsNil (Address: 0x1800d8848)
UuidToStringA (Address: 0x1800d88a8)

rtutils.dll

RouterLogDeregisterA (Address: 0x1800d94b0)
RouterLogEventA (Address: 0x1800d9490)
RouterLogEventStringA (Address: 0x1800d94a8)
RouterLogEventStringW (Address: 0x1800d94c0)
RouterLogEventW (Address: 0x1800d94c8)
RouterLogRegisterA (Address: 0x1800d94a0)
TraceDeregisterA (Address: 0x1800d9488)
TraceRegisterExA (Address: 0x1800d9498)
TraceVprintfExA (Address: 0x1800d94b8)

WINNSI.DLL

NsiConnectToServer (Address: 0x1800d88d8)
NsiDisconnectFromServer (Address: 0x1800d88e0)
NsiRpcDeregisterChangeNotification (Address: 0x1800d88e8)
NsiRpcRegisterChangeNotification (Address: 0x1800d88f0)