NCR_CDMSP.DLL

Description: XFS CDM Service Provider

Authors: NCR (FSG) Ltd

Version: 98.1.0.7

Architecture: 32-bit

Operating System: Windows

SHA256: a62d2e7b6e23552f17c5eb90903f80f8

File Size: 1.3 MB

Uploaded At: June 12, 2026, 12:35 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • WFPCancelAsyncRequest (Ordinal: 1, Address: 0xd38c0)
  • WFPClose (Ordinal: 2, Address: 0xd3980)
  • WFPDeregister (Ordinal: 3, Address: 0xd3a40)
  • WFPExecute (Ordinal: 4, Address: 0xd3b10)
  • WFPGetInfo (Ordinal: 5, Address: 0xd3be0)
  • WFPLock (Ordinal: 6, Address: 0xd3cb0)
  • WFPOpen (Ordinal: 7, Address: 0xd3d70)
  • WFPRegister (Ordinal: 8, Address: 0xd3e50)
  • WFPSetTraceLevel (Ordinal: 9, Address: 0xd3f20)
  • WFPUnloadService (Ordinal: 10, Address: 0xd3fd0)
  • WFPUnlock (Ordinal: 11, Address: 0xd4080)

Imported DLLs & Functions

ADVAPI32.dll
  • AllocateAndInitializeSid (Address: 0x100ed044)
  • DeregisterEventSource (Address: 0x100ed028)
  • InitializeSecurityDescriptor (Address: 0x100ed020)
  • RegCloseKey (Address: 0x100ed050)
  • RegCreateKeyExA (Address: 0x100ed004)
  • RegDeleteValueA (Address: 0x100ed014)
  • RegEnumKeyExW (Address: 0x100ed03c)
  • RegEnumValueA (Address: 0x100ed018)
  • RegFlushKey (Address: 0x100ed000)
  • RegisterEventSourceA (Address: 0x100ed04c)
  • RegOpenKeyExA (Address: 0x100ed008)
  • RegOpenKeyExW (Address: 0x100ed038)
  • RegQueryInfoKeyA (Address: 0x100ed00c)
  • RegQueryInfoKeyW (Address: 0x100ed034)
  • RegQueryValueExA (Address: 0x100ed010)
  • RegQueryValueExW (Address: 0x100ed030)
  • RegSetValueExA (Address: 0x100ed01c)
  • ReportEventA (Address: 0x100ed048)
  • SetEntriesInAclW (Address: 0x100ed02c)
  • SetSecurityDescriptorDacl (Address: 0x100ed024)
  • SetSecurityDescriptorOwner (Address: 0x100ed040)
api-ms-win-crt-convert-l1-1-0.dll
  • atoi (Address: 0x100ed508)
  • mbstowcs_s (Address: 0x100ed4f8)
  • strtoul (Address: 0x100ed504)
  • wcstombs (Address: 0x100ed500)
  • wcstombs_s (Address: 0x100ed4fc)
api-ms-win-crt-filesystem-l1-1-0.dll
  • _lock_file (Address: 0x100ed514)
  • _makepath (Address: 0x100ed520)
  • _splitpath (Address: 0x100ed518)
  • _unlock_file (Address: 0x100ed510)
  • _wmakepath_s (Address: 0x100ed51c)
api-ms-win-crt-heap-l1-1-0.dll
  • free (Address: 0x100ed528)
  • malloc (Address: 0x100ed52c)
api-ms-win-crt-math-l1-1-0.dll
  • _except1 (Address: 0x100ed538)
  • _libm_sse2_pow_precise (Address: 0x100ed534)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthreadex (Address: 0x100ed578)
  • _cexit (Address: 0x100ed550)
  • _configure_narrow_argv (Address: 0x100ed56c)
  • _crt_atexit (Address: 0x100ed55c)
  • _endthreadex (Address: 0x100ed574)
  • _errno (Address: 0x100ed558)
  • _execute_onexit_table (Address: 0x100ed560)
  • _initialize_narrow_environment (Address: 0x100ed580)
  • _initialize_onexit_table (Address: 0x100ed568)
  • _initterm (Address: 0x100ed540)
  • _initterm_e (Address: 0x100ed54c)
  • _invalid_parameter_noinfo (Address: 0x100ed554)
  • _invalid_parameter_noinfo_noreturn (Address: 0x100ed548)
  • _register_onexit_function (Address: 0x100ed564)
  • _seh_filter_dll (Address: 0x100ed570)
  • _set_invalid_parameter_handler (Address: 0x100ed57c)
  • terminate (Address: 0x100ed544)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vfprintf (Address: 0x100ed5c8)
  • __stdio_common_vsprintf (Address: 0x100ed58c)
  • __stdio_common_vsprintf_s (Address: 0x100ed598)
  • __stdio_common_vsscanf (Address: 0x100ed5c4)
  • _fseeki64 (Address: 0x100ed5a4)
  • _get_stream_buffer_pointers (Address: 0x100ed5c0)
  • fclose (Address: 0x100ed5b8)
  • fflush (Address: 0x100ed5bc)
  • fgetc (Address: 0x100ed588)
  • fgetpos (Address: 0x100ed5b4)
  • fgets (Address: 0x100ed5ac)
  • fopen (Address: 0x100ed590)
  • fputc (Address: 0x100ed5b0)
  • fsetpos (Address: 0x100ed5a8)
  • fwrite (Address: 0x100ed5a0)
  • setvbuf (Address: 0x100ed59c)
  • ungetc (Address: 0x100ed594)
api-ms-win-crt-string-l1-1-0.dll
  • _stricmp (Address: 0x100ed5e4)
  • _strnicmp (Address: 0x100ed5e0)
  • strcat_s (Address: 0x100ed5d4)
  • strncpy (Address: 0x100ed5dc)
  • strncpy_s (Address: 0x100ed5d8)
  • strtok (Address: 0x100ed5d0)
gdiplus.dll
  • GdipAlloc (Address: 0x100ed610)
  • GdipCloneImage (Address: 0x100ed604)
  • GdipDisposeImage (Address: 0x100ed600)
  • GdipFree (Address: 0x100ed60c)
  • GdipGetImageEncoders (Address: 0x100ed5f4)
  • GdipGetImageEncodersSize (Address: 0x100ed5f8)
  • GdipLoadImageFromFile (Address: 0x100ed608)
  • GdiplusShutdown (Address: 0x100ed5ec)
  • GdiplusStartup (Address: 0x100ed5f0)
  • GdipSaveImageToFile (Address: 0x100ed5fc)
KERNEL32.dll
  • CancelIo (Address: 0x100ed1c0)
  • CancelWaitableTimer (Address: 0x100ed090)
  • CloseHandle (Address: 0x100ed060)
  • CompareFileTime (Address: 0x100ed0d0)
  • ConnectNamedPipe (Address: 0x100ed1b4)
  • CopyFileA (Address: 0x100ed09c)
  • CreateDirectoryA (Address: 0x100ed150)
  • CreateDirectoryW (Address: 0x100ed0d4)
  • CreateEventA (Address: 0x100ed130)
  • CreateEventW (Address: 0x100ed124)
  • CreateFileA (Address: 0x100ed10c)
  • CreateFileMappingA (Address: 0x100ed07c)
  • CreateFileW (Address: 0x100ed0d8)
  • CreateMutexA (Address: 0x100ed070)
  • CreateMutexW (Address: 0x100ed120)
  • CreateNamedPipeA (Address: 0x100ed1c4)
  • CreateProcessA (Address: 0x100ed140)
  • CreateSemaphoreA (Address: 0x100ed19c)
  • CreateThread (Address: 0x100ed128)
  • CreateWaitableTimerA (Address: 0x100ed098)
  • DeleteCriticalSection (Address: 0x100ed1ac)
  • DeleteFileA (Address: 0x100ed110)
  • DeviceIoControl (Address: 0x100ed0f0)
  • DisconnectNamedPipe (Address: 0x100ed1b8)
  • EnterCriticalSection (Address: 0x100ed1c8)
  • ExpandEnvironmentStringsA (Address: 0x100ed14c)
  • ExpandEnvironmentStringsW (Address: 0x100ed0cc)
  • FindClose (Address: 0x100ed0dc)
  • FindFirstFileA (Address: 0x100ed154)
  • FindNextFileA (Address: 0x100ed158)
  • FlushFileBuffers (Address: 0x100ed0e0)
  • FormatMessageA (Address: 0x100ed0b0)
  • FreeLibrary (Address: 0x100ed0a4)
  • GetComputerNameA (Address: 0x100ed1a0)
  • GetCurrentProcess (Address: 0x100ed148)
  • GetCurrentProcessId (Address: 0x100ed134)
  • GetCurrentThreadId (Address: 0x100ed17c)
  • GetExitCodeProcess (Address: 0x100ed13c)
  • GetFileAttributesExA (Address: 0x100ed058)
  • GetFileAttributesW (Address: 0x100ed0e4)
  • GetHandleInformation (Address: 0x100ed15c)
  • GetLastError (Address: 0x100ed064)
  • GetLocalTime (Address: 0x100ed094)
  • GetModuleFileNameA (Address: 0x100ed080)
  • GetModuleHandleW (Address: 0x100ed0fc)
  • GetOverlappedResult (Address: 0x100ed1bc)
  • GetProcAddress (Address: 0x100ed0a8)
  • GetProcessVersion (Address: 0x100ed194)
  • GetSystemTimeAsFileTime (Address: 0x100ed1ec)
  • HeapAlloc (Address: 0x100ed16c)
  • HeapCreate (Address: 0x100ed164)
  • HeapDestroy (Address: 0x100ed168)
  • HeapFree (Address: 0x100ed170)
  • InitializeCriticalSection (Address: 0x100ed1a8)
  • InitializeSListHead (Address: 0x100ed1cc)
  • IsBadStringPtrA (Address: 0x100ed088)
  • IsDebuggerPresent (Address: 0x100ed1e4)
  • IsProcessorFeaturePresent (Address: 0x100ed1e0)
  • LeaveCriticalSection (Address: 0x100ed1f0)
  • LoadLibraryA (Address: 0x100ed0c0)
  • LoadLibraryW (Address: 0x100ed104)
  • LocalAlloc (Address: 0x100ed100)
  • LocalFree (Address: 0x100ed0ac)
  • lstrcatA (Address: 0x100ed198)
  • lstrcmpA (Address: 0x100ed114)
  • lstrcmpiA (Address: 0x100ed108)
  • lstrcpyA (Address: 0x100ed084)
  • lstrcpynA (Address: 0x100ed0b4)
  • lstrcpynW (Address: 0x100ed0b8)
  • lstrcpyW (Address: 0x100ed0bc)
  • lstrlenA (Address: 0x100ed0f4)
  • lstrlenW (Address: 0x100ed0a0)
  • MapViewOfFile (Address: 0x100ed074)
  • MultiByteToWideChar (Address: 0x100ed0c4)
  • OpenEventA (Address: 0x100ed138)
  • OpenProcess (Address: 0x100ed144)
  • QueryPerformanceCounter (Address: 0x100ed1e8)
  • RaiseException (Address: 0x100ed160)
  • ReadFile (Address: 0x100ed0e8)
  • ReleaseMutex (Address: 0x100ed068)
  • ReleaseSemaphore (Address: 0x100ed174)
  • ResetEvent (Address: 0x100ed11c)
  • ResumeThread (Address: 0x100ed180)
  • SetEvent (Address: 0x100ed118)
  • SetLastError (Address: 0x100ed0f8)
  • SetUnhandledExceptionFilter (Address: 0x100ed1d8)
  • SetWaitableTimer (Address: 0x100ed08c)
  • Sleep (Address: 0x100ed05c)
  • SleepEx (Address: 0x100ed1b0)
  • TerminateProcess (Address: 0x100ed1dc)
  • TlsAlloc (Address: 0x100ed184)
  • TlsFree (Address: 0x100ed190)
  • TlsGetValue (Address: 0x100ed188)
  • TlsSetValue (Address: 0x100ed18c)
  • UnhandledExceptionFilter (Address: 0x100ed1d4)
  • UnmapViewOfFile (Address: 0x100ed078)
  • WaitForMultipleObjects (Address: 0x100ed12c)
  • WaitForMultipleObjectsEx (Address: 0x100ed178)
  • WaitForSingleObject (Address: 0x100ed06c)
  • WaitForSingleObjectEx (Address: 0x100ed1d0)
  • WaitNamedPipeA (Address: 0x100ed1a4)
  • WideCharToMultiByte (Address: 0x100ed0c8)
  • WriteFile (Address: 0x100ed0ec)
MSVCP140.dll
  • ?_BADOFF@std@@3_JB (Address: 0x100ed308)
  • ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z (Address: 0x100ed218)
  • ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100ed24c)
  • ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100ed338)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x100ed330)
  • ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100ed260)
  • ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x100ed264)
  • ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z (Address: 0x100ed2a4)
  • ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z (Address: 0x100ed358)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ed2e4)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ed210)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x100ed2c4)
  • ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ (Address: 0x100ed2f0)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100ed2b8)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x100ed34c)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100ed2e8)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ed20c)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x100ed294)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100ed298)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100ed29c)
  • ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ (Address: 0x100ed310)
  • ??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@ (Address: 0x100ed224)
  • ??_7ios_base@std@@6B@ (Address: 0x100ed30c)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x100ed324)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100ed318)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100ed234)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x100ed2dc)
  • ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x100ed288)
  • ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x100ed274)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100ed2a8)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100ed340)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x100ed328)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ed2bc)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ed350)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ed2e0)
  • ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ed284)
  • ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ed278)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100ed2ac)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ed344)
  • ??1ios_base@std@@UAE@XZ (Address: 0x100ed2a0)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z (Address: 0x100ed31c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z (Address: 0x100ed314)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x100ed2cc)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z (Address: 0x100ed22c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z (Address: 0x100ed2d0)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z (Address: 0x100ed2d4)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z (Address: 0x100ed26c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x100ed2c8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z (Address: 0x100ed320)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x100ed32c)
  • ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x100ed238)
  • ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100ed228)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x100ed2d8)
  • ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ (Address: 0x100ed28c)
  • ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100ed250)
  • ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x100ed33c)
  • ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x100ed214)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x100ed220)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100ed2ec)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100ed208)
  • ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100ed23c)
  • ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100ed240)
  • ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z (Address: 0x100ed270)
  • ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x100ed254)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x100ed244)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x100ed204)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100ed2c0)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x100ed354)
  • ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x100ed280)
  • ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x100ed258)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x100ed2f4)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x100ed200)
  • ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x100ed25c)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x100ed2b0)
  • ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z (Address: 0x100ed348)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z (Address: 0x100ed2b4)
  • ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z (Address: 0x100ed230)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100ed2f8)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x100ed1fc)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100ed2fc)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x100ed1f8)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x100ed290)
  • ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100ed248)
  • ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z (Address: 0x100ed268)
  • ?widen@?$ctype@G@std@@QBEGD@Z (Address: 0x100ed334)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x100ed300)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x100ed27c)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x100ed304)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x100ed21c)
RPCRT4.dll
  • RpcStringFreeA (Address: 0x100ed370)
  • RpcStringFreeW (Address: 0x100ed368)
  • UuidCreate (Address: 0x100ed360)
  • UuidToStringA (Address: 0x100ed364)
  • UuidToStringW (Address: 0x100ed36c)
SHELL32.dll
  • SHGetFolderPathA (Address: 0x100ed378)
  • SHGetFolderPathW (Address: 0x100ed37c)
SHLWAPI.dll
  • PathFindFileNameA (Address: 0x100ed384)
ULCORCOM.dll
  • (Address: 0x100ed38c)
  • (Address: 0x100ed390)
  • (Address: 0x100ed394)
  • (Address: 0x100ed398)
  • (Address: 0x100ed39c)
  • (Address: 0x100ed3a0)
  • (Address: 0x100ed3a4)
  • (Address: 0x100ed3a8)
  • (Address: 0x100ed3ac)
  • (Address: 0x100ed3b0)
  • (Address: 0x100ed3b4)
  • (Address: 0x100ed3b8)
  • (Address: 0x100ed3bc)
  • (Address: 0x100ed3c0)
  • (Address: 0x100ed3c4)
  • (Address: 0x100ed3c8)
  • (Address: 0x100ed3cc)
  • (Address: 0x100ed3d0)
  • (Address: 0x100ed3d4)
  • (Address: 0x100ed3d8)
  • (Address: 0x100ed3dc)
  • (Address: 0x100ed3e0)
ULCOREXT.dll
  • UlyDevActionCompleted (Address: 0x100ed3e8)
  • UlyDevListModules (Address: 0x100ed3f8)
  • UlyDevListServices (Address: 0x100ed408)
  • UlyDevLookupDevice (Address: 0x100ed410)
  • UlyDevQueryActions (Address: 0x100ed400)
  • UlyDevQueryDevice (Address: 0x100ed40c)
  • UlyDevQueryDeviceEx (Address: 0x100ed3ec)
  • UlyDevQueryModule (Address: 0x100ed404)
  • UlyDevQueryModuleState (Address: 0x100ed3fc)
  • UlyDevQueryVariables (Address: 0x100ed3f4)
  • UlyDevSetVariableThreshold (Address: 0x100ed3f0)
  • UlyMsgFreeMessage (Address: 0x100ed420)
  • UlySrvListDevices (Address: 0x100ed41c)
  • UlySrvLookupService (Address: 0x100ed418)
  • UlySrvQueryService (Address: 0x100ed424)
  • UlySrvQueryServiceState (Address: 0x100ed414)
USER32.dll
  • CreateWindowExW (Address: 0x100ed450)
  • DefWindowProcW (Address: 0x100ed440)
  • DestroyWindow (Address: 0x100ed454)
  • DispatchMessageW (Address: 0x100ed438)
  • GetWindowLongW (Address: 0x100ed45c)
  • GetWindowThreadProcessId (Address: 0x100ed470)
  • IsWindow (Address: 0x100ed464)
  • MsgWaitForMultipleObjects (Address: 0x100ed458)
  • MsgWaitForMultipleObjectsEx (Address: 0x100ed46c)
  • PeekMessageW (Address: 0x100ed43c)
  • PostMessageW (Address: 0x100ed468)
  • PostQuitMessage (Address: 0x100ed444)
  • RegisterClassW (Address: 0x100ed448)
  • RegisterWindowMessageW (Address: 0x100ed430)
  • SetWindowLongW (Address: 0x100ed460)
  • TranslateMessage (Address: 0x100ed434)
  • UnregisterClassW (Address: 0x100ed44c)
  • wsprintfA (Address: 0x100ed474)
  • wsprintfW (Address: 0x100ed42c)
VCRUNTIME140.dll
  • __CxxFrameHandler3 (Address: 0x100ed4a8)
  • __RTDynamicCast (Address: 0x100ed494)
  • __RTtypeid (Address: 0x100ed490)
  • __std_exception_copy (Address: 0x100ed49c)
  • __std_exception_destroy (Address: 0x100ed498)
  • __std_type_info_destroy_list (Address: 0x100ed47c)
  • __std_type_info_name (Address: 0x100ed48c)
  • __vcrt_InitializeCriticalSectionEx (Address: 0x100ed484)
  • _CxxThrowException (Address: 0x100ed4ac)
  • _except_handler4_common (Address: 0x100ed480)
  • _purecall (Address: 0x100ed4b8)
  • _set_se_translator (Address: 0x100ed4b0)
  • memchr (Address: 0x100ed488)
  • memcpy (Address: 0x100ed4a4)
  • memmove (Address: 0x100ed4b4)
  • memset (Address: 0x100ed4a0)
VERSION.dll
  • GetFileVersionInfoA (Address: 0x100ed4c0)
  • GetFileVersionInfoSizeA (Address: 0x100ed4c4)
  • VerQueryValueA (Address: 0x100ed4c8)
XFS_CONF.dll
  • WFMCloseKey (Address: 0x100ed4d4)
  • WFMCreateKey (Address: 0x100ed4d0)
  • WFMOpenKey (Address: 0x100ed4e0)
  • WFMQueryValue (Address: 0x100ed4d8)
  • WFMSetValue (Address: 0x100ed4dc)
XFS_SUPP.dll
  • WFMAllocateBuffer (Address: 0x100ed4f0)
  • WFMFreeBuffer (Address: 0x100ed4e8)
  • WFMOutputTraceData (Address: 0x100ed4ec)