rasmontr.dll

Description: RAS Monitor DLL

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: fb3519426cf241fea188c3ff38a0d12e

File Size: 357.0 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 4

Exported Functions

GetDiagnosticFunctions (Ordinal: 1, Address: 0x17970)
InitHelperDll (Ordinal: 2, Address: 0x17620)
RutlAlloc (Ordinal: 3, Address: 0x189f0)
RutlAssignmentFromTokenAndDword (Ordinal: 4, Address: 0x18e00)
RutlAssignmentFromTokens (Ordinal: 5, Address: 0x18cc0)
RutlCloseDumpFile (Ordinal: 6, Address: 0x189d0)
RutlCreateDumpFile (Ordinal: 7, Address: 0x18940)
RutlDwordDup (Ordinal: 8, Address: 0x18b10)
RutlFree (Ordinal: 9, Address: 0x18a40)
RutlGetOsVersion (Ordinal: 10, Address: 0x18b40)
RutlGetTagToken (Ordinal: 11, Address: 0x18620)
RutlIsHelpToken (Ordinal: 12, Address: 0x18c70)
RutlParse (Ordinal: 13, Address: 0x19200)
RutlStrDup (Ordinal: 14, Address: 0x18a80)

Imported DLLs & Functions

ADVAPI32.dll

ClearEventLogW (Address: 0x18003c968)
CloseEventLog (Address: 0x18003c960)
ControlTraceW (Address: 0x18003c918)
EnableTrace (Address: 0x18003c920)
EnableTraceEx2 (Address: 0x18003c910)
EnumServicesStatusExW (Address: 0x18003c980)
LsaClose (Address: 0x18003c938)
LsaFreeMemory (Address: 0x18003c940)
LsaOpenPolicy (Address: 0x18003c958)
LsaQueryInformationPolicy (Address: 0x18003c950)
LsaSetInformationPolicy (Address: 0x18003c948)
LsaStorePrivateData (Address: 0x18003c8f0)
OpenEventLogW (Address: 0x18003c970)
OpenProcessToken (Address: 0x18003c988)
OpenThreadToken (Address: 0x18003c990)
ReadEventLogW (Address: 0x18003c8d0)
RegCloseKey (Address: 0x18003c998)
RegConnectRegistryW (Address: 0x18003c8e8)
RegCreateKeyExW (Address: 0x18003c8c0)
RegDeleteKeyExW (Address: 0x18003c8f8)
RegEnumKeyExW (Address: 0x18003c8d8)
RegEnumKeyW (Address: 0x18003c900)
RegEnumValueW (Address: 0x18003c908)
RegOpenKeyExW (Address: 0x18003c9a0)
RegQueryInfoKeyW (Address: 0x18003c8e0)
RegQueryValueExW (Address: 0x18003c930)
RegSetValueExW (Address: 0x18003c978)
StartTraceW (Address: 0x18003c928)
TraceMessage (Address: 0x18003c8c8)

fwpuclnt.dll

IkeextGetConfigParameters0 (Address: 0x18003cf68)
IkeextSetConfigParameters0 (Address: 0x18003cf70)

IPHLPAPI.DLL

NhGetInterfaceNameFromGuid (Address: 0x18003c9b0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18003ca58)
CloseHandle (Address: 0x18003cb50)
CompareFileTime (Address: 0x18003cbe0)
CopyFileW (Address: 0x18003cae0)
CreateEventW (Address: 0x18003cb98)
CreateFileW (Address: 0x18003cb68)
CreateProcessW (Address: 0x18003cab0)
DeleteFileW (Address: 0x18003cbb0)
DisableThreadLibraryCalls (Address: 0x18003cc58)
DuplicateHandle (Address: 0x18003cc08)
ExpandEnvironmentStringsW (Address: 0x18003cb48)
FileTimeToLocalFileTime (Address: 0x18003cbf8)
FileTimeToSystemTime (Address: 0x18003cc00)
FindClose (Address: 0x18003cbc0)
FindFirstFileW (Address: 0x18003cbd0)
FindNextFileW (Address: 0x18003cbc8)
FormatMessageW (Address: 0x18003cb78)
FreeLibrary (Address: 0x18003cac0)
GetComputerNameExW (Address: 0x18003ca90)
GetComputerNameW (Address: 0x18003caf0)
GetCurrentProcess (Address: 0x18003c9c0)
GetCurrentProcessId (Address: 0x18003ca00)
GetCurrentThread (Address: 0x18003c9c8)
GetCurrentThreadId (Address: 0x18003cbe8)
GetDateFormatW (Address: 0x18003cb00)
GetExitCodeProcess (Address: 0x18003caa0)
GetFileAttributesExW (Address: 0x18003cbf0)
GetFileAttributesW (Address: 0x18003cad8)
GetFileSize (Address: 0x18003cb60)
GetFileType (Address: 0x18003cb20)
GetFullPathNameW (Address: 0x18003cab8)
GetLastError (Address: 0x18003cba0)
GetLocalTime (Address: 0x18003cb08)
GetModuleFileNameW (Address: 0x18003c9d8)
GetModuleHandleExW (Address: 0x18003c9d0)
GetModuleHandleW (Address: 0x18003ca28)
GetPrivateProfileStringW (Address: 0x18003cb40)
GetProcAddress (Address: 0x18003cac8)
GetProcessHeap (Address: 0x18003ca80)
GetProcessMitigationPolicy (Address: 0x18003c9e0)
GetSystemInfo (Address: 0x18003cb18)
GetSystemTimeAsFileTime (Address: 0x18003ca08)
GetSystemWindowsDirectoryW (Address: 0x18003cae8)
GetTempFileNameW (Address: 0x18003cb30)
GetTempPathW (Address: 0x18003cb38)
GetTickCount (Address: 0x18003ca10)
GetTimeFormatW (Address: 0x18003caf8)
GetVersionExW (Address: 0x18003cb10)
HeapAlloc (Address: 0x18003ca78)
HeapFree (Address: 0x18003ca88)
LoadLibraryExA (Address: 0x18003ca48)
LoadLibraryExW (Address: 0x18003cad0)
LocalAlloc (Address: 0x18003cc48)
LocalFree (Address: 0x18003cb70)
lstrcmpiW (Address: 0x18003cb28)
lstrlenA (Address: 0x18003cb80)
lstrlenW (Address: 0x18003cb90)
MultiByteToWideChar (Address: 0x18003cb88)
QueryPerformanceCounter (Address: 0x18003c9f8)
RaiseException (Address: 0x18003ca60)
ReadFile (Address: 0x18003cb58)
RegDeleteValueW (Address: 0x18003ca38)
RegGetValueW (Address: 0x18003ca30)
RegOpenKeyExA (Address: 0x18003ca18)
RegQueryValueExA (Address: 0x18003ca20)
ReleaseSRWLockExclusive (Address: 0x18003ca50)
SetConsoleCtrlHandler (Address: 0x18003ca70)
SetEndOfFile (Address: 0x18003cc20)
SetEvent (Address: 0x18003cc50)
SetFilePointer (Address: 0x18003cc18)
SetLastError (Address: 0x18003cbd8)
SetUnhandledExceptionFilter (Address: 0x18003c9f0)
Sleep (Address: 0x18003cc40)
SystemTimeToFileTime (Address: 0x18003ca98)
TerminateProcess (Address: 0x18003cc10)
UnhandledExceptionFilter (Address: 0x18003c9e8)
VerifyVersionInfoW (Address: 0x18003cc38)
VirtualAlloc (Address: 0x18003cc28)
VirtualFree (Address: 0x18003cc30)
VirtualProtect (Address: 0x18003ca40)
VirtualQuery (Address: 0x18003ca68)
WaitForSingleObject (Address: 0x18003caa8)
WideCharToMultiByte (Address: 0x18003cbb8)
WriteFile (Address: 0x18003cba8)

MFC42u.dll

(Address: 0x18003cc68)
(Address: 0x18003cc70)
(Address: 0x18003cc78)
(Address: 0x18003cc80)
(Address: 0x18003cc88)
(Address: 0x18003cc90)
(Address: 0x18003cc98)
(Address: 0x18003cca0)

MPRAPI.dll

MprAdminBufferFree (Address: 0x18003ccd0)
MprAdminConnectionClearStats (Address: 0x18003ccf8)
MprAdminConnectionEnum (Address: 0x18003cce0)
MprAdminConnectionGetInfo (Address: 0x18003ccc8)
MprAdminInterfaceDisconnect (Address: 0x18003ccf0)
MprAdminPortClearStats (Address: 0x18003cd30)
MprAdminPortEnum (Address: 0x18003cd38)
MprAdminPortGetInfo (Address: 0x18003cd28)
MprAdminServerConnect (Address: 0x18003ccd8)
MprAdminServerDisconnect (Address: 0x18003cce8)
MprAdminServerGetCredentials (Address: 0x18003cd18)
MprAdminServerGetInfo (Address: 0x18003cd20)
MprAdminServerGetInfoEx (Address: 0x18003ccc0)
MprAdminServerSetCredentials (Address: 0x18003cd10)
MprAdminServerSetInfoEx (Address: 0x18003cd50)
MprAdminUserClose (Address: 0x18003cda8)
MprAdminUserGetInfo (Address: 0x18003cd90)
MprAdminUserOpen (Address: 0x18003cd98)
MprAdminUserRead (Address: 0x18003cda0)
MprAdminUserServerConnect (Address: 0x18003cd80)
MprAdminUserServerDisconnect (Address: 0x18003cd88)
MprAdminUserSetInfo (Address: 0x18003cdb0)
MprAdminUserWrite (Address: 0x18003ccb0)
MprConfigBufferFree (Address: 0x18003cd78)
MprConfigInterfaceGetHandle (Address: 0x18003cd48)
MprConfigInterfaceGetInfo (Address: 0x18003cd60)
MprConfigInterfaceTransportGetHandle (Address: 0x18003cd68)
MprConfigServerConnect (Address: 0x18003cd40)
MprConfigServerDisconnect (Address: 0x18003cd70)
MprConfigServerGetInfoEx (Address: 0x18003cd58)
MprConfigServerSetInfoEx (Address: 0x18003ccb8)
MprDomainQueryRasServer (Address: 0x18003cd00)
MprDomainRegisterRasServer (Address: 0x18003cd08)

msvcrt.dll

__C_specific_handler (Address: 0x18003d058)
__CxxFrameHandler3 (Address: 0x18003d068)
__dllonexit (Address: 0x18003cfa8)
_amsg_exit (Address: 0x18003cfc8)
_callnewh (Address: 0x18003d088)
_CxxThrowException (Address: 0x18003cf80)
_initterm (Address: 0x18003cfc0)
_itow (Address: 0x18003cff8)
_lock (Address: 0x18003cfb8)
_onexit (Address: 0x18003cfa0)
_strcmpi (Address: 0x18003d080)
_unlock (Address: 0x18003cfb0)
_vsnwprintf (Address: 0x18003d048)
_wcsicmp (Address: 0x18003cf90)
_wctime (Address: 0x18003d018)
_wtoi (Address: 0x18003d008)
_XcptFilter (Address: 0x18003cfd0)
??1type_info@@UEAA@XZ (Address: 0x18003d090)
atoi (Address: 0x18003d038)
free (Address: 0x18003d028)
malloc (Address: 0x18003d030)
memcmp (Address: 0x18003cf88)
memcpy (Address: 0x18003d060)
memset (Address: 0x18003cf98)
strchr (Address: 0x18003d010)
strncmp (Address: 0x18003d050)
time (Address: 0x18003d020)
wcscmp (Address: 0x18003d098)
wcscpy_s (Address: 0x18003d078)
wcsncat_s (Address: 0x18003d070)
wcspbrk (Address: 0x18003cff0)
wcsrchr (Address: 0x18003d040)
wcstok (Address: 0x18003cfe8)
wcstol (Address: 0x18003cfe0)
wcstombs (Address: 0x18003d000)
wcstoul (Address: 0x18003cfd8)

NETSH.EXE

FreeString (Address: 0x18003cdf8)
MakeQuotedString (Address: 0x18003cdd8)
MakeString (Address: 0x18003cde8)
MatchEnumTag (Address: 0x18003ce08)
MatchToken (Address: 0x18003ce00)
PrintError (Address: 0x18003cdf0)
PrintMessage (Address: 0x18003cdd0)
PrintMessageFromModule (Address: 0x18003cdc8)
RegisterContext (Address: 0x18003cde0)
RegisterHelper (Address: 0x18003cdc0)

ntdll.dll

EtwTraceMessage (Address: 0x18003d0a8)
NtQuerySystemInformation (Address: 0x18003d0b0)
RtlCaptureContext (Address: 0x18003d0f8)
RtlGUIDFromString (Address: 0x18003d0d8)
RtlInitUnicodeString (Address: 0x18003d108)
RtlIpv4AddressToStringW (Address: 0x18003d0c0)
RtlIpv6AddressToStringW (Address: 0x18003d100)
RtlIpv6StringToAddressW (Address: 0x18003d0e0)
RtlLookupFunctionEntry (Address: 0x18003d0f0)
RtlNtStatusToDosError (Address: 0x18003d0c8)
RtlSecondsSince1970ToTime (Address: 0x18003d0d0)
RtlVirtualUnwind (Address: 0x18003d0e8)
VerSetConditionMask (Address: 0x18003d0b8)

RASAPI32.dll

RasEnumDevicesW (Address: 0x18003ce18)

rasman.dll

RasGetCalledIdInfo (Address: 0x18003d118)
RasGetDeviceConfigInfo (Address: 0x18003d140)
RasRpcConnectServer (Address: 0x18003d120)
RasRpcDisconnectServer (Address: 0x18003d138)
RasSetCalledIdInfo (Address: 0x18003d128)
RasSetDeviceConfigInfo (Address: 0x18003d130)

USER32.dll

CloseDesktop (Address: 0x18003ce78)
CloseWindowStation (Address: 0x18003cea0)
EnumDesktopsW (Address: 0x18003ce98)
EnumWindows (Address: 0x18003ce70)
EnumWindowStationsW (Address: 0x18003cea8)
FindWindowExW (Address: 0x18003ce50)
GetProcessWindowStation (Address: 0x18003ce88)
GetThreadDesktop (Address: 0x18003ce60)
GetWindow (Address: 0x18003ce38)
GetWindowLongW (Address: 0x18003ce40)
GetWindowTextW (Address: 0x18003ce48)
GetWindowThreadProcessId (Address: 0x18003ce30)
LoadStringW (Address: 0x18003ce28)
OpenDesktopW (Address: 0x18003ce58)
OpenWindowStationW (Address: 0x18003ce80)
SetProcessWindowStation (Address: 0x18003ce90)
SetThreadDesktop (Address: 0x18003ce68)

WS2_32.dll

bind (Address: 0x18003cf28)
closesocket (Address: 0x18003cee8)
FreeAddrInfoW (Address: 0x18003cec8)
GetAddrInfoW (Address: 0x18003ced8)
GetNameInfoW (Address: 0x18003cef8)
htonl (Address: 0x18003ceb8)
htons (Address: 0x18003cf30)
inet_addr (Address: 0x18003cf20)
ntohl (Address: 0x18003cec0)
setsockopt (Address: 0x18003cf50)
WSAAddressToStringW (Address: 0x18003ced0)
WSACleanup (Address: 0x18003cee0)
WSACloseEvent (Address: 0x18003cef0)
WSACreateEvent (Address: 0x18003cf18)
WSAEventSelect (Address: 0x18003cf10)
WSAGetLastError (Address: 0x18003cf38)
WSAIoctl (Address: 0x18003cf00)
WSAResetEvent (Address: 0x18003cf58)
WSASocketW (Address: 0x18003cf40)
WSAStartup (Address: 0x18003cf48)
WSAWaitForMultipleEvents (Address: 0x18003cf08)