StorSvc.dll

Description: Storage Services

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: db82478484e4aea5f0309b5a6663dfb4

File Size: 1.0 MB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x3a4f0)
  • SvchostPushServiceGlobals (Ordinal: 2, Address: 0x3a250)
  • DllCanUnloadNow (Ordinal: 3, Address: 0x1c020)
  • DllGetActivationFactory (Ordinal: 4, Address: 0x1c160)
  • DllGetClassObject (Ordinal: 5, Address: 0x1c070)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800ad820)
api-ms-win-core-apiquery-l2-1-0.dll
  • IsApiSetImplemented (Address: 0x1800ad830)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1800ad898)
  • CoCreateFreeThreadedMarshaler (Address: 0x1800ad850)
  • CoCreateGuid (Address: 0x1800ad858)
  • CoCreateInstance (Address: 0x1800ad868)
  • CoGetMalloc (Address: 0x1800ad848)
  • CoInitializeEx (Address: 0x1800ad880)
  • CoTaskMemAlloc (Address: 0x1800ad878)
  • CoTaskMemFree (Address: 0x1800ad860)
  • CoTaskMemRealloc (Address: 0x1800ad8a0)
  • CoUninitialize (Address: 0x1800ad870)
  • CoWaitForMultipleHandles (Address: 0x1800ad888)
  • IIDFromString (Address: 0x1800ad840)
  • StringFromGUID2 (Address: 0x1800ad890)
api-ms-win-core-datetime-l1-1-1.dll
  • GetDateFormatEx (Address: 0x1800ad8b8)
  • GetTimeFormatEx (Address: 0x1800ad8b0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800ad8d0)
  • IsDebuggerPresent (Address: 0x1800ad8c8)
  • OutputDebugStringW (Address: 0x1800ad8d8)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800ad8e8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800ad8f8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetErrorMode (Address: 0x1800ad918)
  • GetLastError (Address: 0x1800ad910)
  • RaiseException (Address: 0x1800ad908)
  • SetErrorMode (Address: 0x1800ad938)
  • SetLastError (Address: 0x1800ad920)
  • SetUnhandledExceptionFilter (Address: 0x1800ad928)
  • UnhandledExceptionFilter (Address: 0x1800ad930)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x1800ad948)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x1800ada38)
  • CreateDirectoryW (Address: 0x1800ad9c8)
  • CreateFileW (Address: 0x1800ad9d0)
  • DeleteFileW (Address: 0x1800ad9e0)
  • DeleteVolumeMountPointW (Address: 0x1800ada30)
  • FindClose (Address: 0x1800ada50)
  • FindCloseChangeNotification (Address: 0x1800ad9c0)
  • FindFirstChangeNotificationW (Address: 0x1800ada18)
  • FindFirstFileExW (Address: 0x1800ada08)
  • FindFirstFileW (Address: 0x1800ada28)
  • FindFirstVolumeW (Address: 0x1800ad988)
  • FindNextChangeNotification (Address: 0x1800ada48)
  • FindNextFileW (Address: 0x1800ada10)
  • FindNextVolumeW (Address: 0x1800ad9f0)
  • FindVolumeClose (Address: 0x1800ad9a8)
  • GetDiskFreeSpaceExW (Address: 0x1800ada00)
  • GetDiskFreeSpaceW (Address: 0x1800ad970)
  • GetDriveTypeW (Address: 0x1800ada58)
  • GetFileAttributesW (Address: 0x1800ad9d8)
  • GetFileSize (Address: 0x1800ad9a0)
  • GetFileSizeEx (Address: 0x1800ad9e8)
  • GetFinalPathNameByHandleW (Address: 0x1800ad978)
  • GetLogicalDrives (Address: 0x1800ad9b0)
  • GetVolumeInformationByHandleW (Address: 0x1800ad990)
  • GetVolumeInformationW (Address: 0x1800ad998)
  • GetVolumePathNameW (Address: 0x1800ad960)
  • QueryDosDeviceW (Address: 0x1800ad958)
  • ReadFile (Address: 0x1800ad9b8)
  • RemoveDirectoryW (Address: 0x1800ada20)
  • SetFileAttributesW (Address: 0x1800ad9f8)
  • SetFileInformationByHandle (Address: 0x1800ada40)
  • SetFilePointerEx (Address: 0x1800ad968)
  • WriteFile (Address: 0x1800ad980)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x1800ada68)
  • GetVolumeNameForVolumeMountPointW (Address: 0x1800ada78)
  • GetVolumePathNamesForVolumeNameW (Address: 0x1800ada70)
api-ms-win-core-file-l2-1-0.dll
  • GetFileInformationByHandleEx (Address: 0x1800ada88)
api-ms-win-core-file-l2-1-1.dll
  • OpenFileById (Address: 0x1800ada98)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x1800adaa8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800adab8)
  • DuplicateHandle (Address: 0x1800adac0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800adae0)
  • HeapAlloc (Address: 0x1800adad8)
  • HeapFree (Address: 0x1800adad0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800adaf8)
  • LocalFree (Address: 0x1800adaf0)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800adb10)
  • GetOverlappedResult (Address: 0x1800adb08)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • SetVolumeMountPointW (Address: 0x1800adb20)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x1800adb60)
  • FreeLibrary (Address: 0x1800adb70)
  • GetModuleFileNameA (Address: 0x1800adb48)
  • GetModuleHandleExW (Address: 0x1800adb40)
  • GetModuleHandleW (Address: 0x1800adb78)
  • GetProcAddress (Address: 0x1800adb30)
  • LoadLibraryExW (Address: 0x1800adb38)
  • LoadResource (Address: 0x1800adb68)
  • LoadStringW (Address: 0x1800adb50)
  • LockResource (Address: 0x1800adb58)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1800adb88)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800adb98)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x1800adba8)
  • VirtualFree (Address: 0x1800adbb0)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCanonicalize (Address: 0x1800adbd8)
  • PathAllocCombine (Address: 0x1800adbd0)
  • PathCchAppend (Address: 0x1800adbc0)
  • PathCchCombine (Address: 0x1800adbe0)
  • PathCchRemoveBackslash (Address: 0x1800adbf0)
  • PathCchRemoveFileSpec (Address: 0x1800adbc8)
  • PathCchStripPrefix (Address: 0x1800adbe8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800adc00)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800adc78)
  • GetCurrentProcess (Address: 0x1800adc10)
  • GetCurrentProcessId (Address: 0x1800adc50)
  • GetCurrentThread (Address: 0x1800adc60)
  • GetCurrentThreadId (Address: 0x1800adc48)
  • GetExitCodeThread (Address: 0x1800adc38)
  • OpenProcessToken (Address: 0x1800adc40)
  • OpenThreadToken (Address: 0x1800adc58)
  • SetThreadToken (Address: 0x1800adc68)
  • TerminateProcess (Address: 0x1800adc30)
  • TlsAlloc (Address: 0x1800adc20)
  • TlsFree (Address: 0x1800adc70)
  • TlsGetValue (Address: 0x1800adc28)
  • TlsSetValue (Address: 0x1800adc18)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1800adc88)
  • SetProcessMitigationPolicy (Address: 0x1800adc90)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800adca0)
api-ms-win-core-realtime-l1-1-1.dll
  • QueryInterruptTime (Address: 0x1800adcb0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800add20)
  • RegCreateKeyExW (Address: 0x1800add00)
  • RegDeleteTreeW (Address: 0x1800adcc0)
  • RegDeleteValueW (Address: 0x1800adcd8)
  • RegEnumKeyExW (Address: 0x1800add28)
  • RegEnumValueW (Address: 0x1800adcc8)
  • RegFlushKey (Address: 0x1800add18)
  • RegGetValueW (Address: 0x1800adcd0)
  • RegNotifyChangeKeyValue (Address: 0x1800adcf0)
  • RegOpenCurrentUser (Address: 0x1800adcf8)
  • RegOpenKeyExW (Address: 0x1800add08)
  • RegQueryInfoKeyW (Address: 0x1800adce8)
  • RegQueryValueExW (Address: 0x1800add10)
  • RegSetValueExW (Address: 0x1800adce0)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1800add40)
  • RegSetKeyValueW (Address: 0x1800add38)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyW (Address: 0x1800add50)
  • RegOpenKeyW (Address: 0x1800add58)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800add78)
  • RtlLookupFunctionEntry (Address: 0x1800add70)
  • RtlVirtualUnwind (Address: 0x1800add68)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x1800add88)
  • PathFindExtensionW (Address: 0x1800adda8)
  • PathFindFileNameW (Address: 0x1800add90)
  • PathGetDriveNumberW (Address: 0x1800add98)
  • PathStripPathW (Address: 0x1800adda0)
api-ms-win-core-shutdown-l1-1-0.dll
  • InitiateSystemShutdownExW (Address: 0x1800addb8)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800addc8)
  • GetStringTypeW (Address: 0x1800addd0)
  • MultiByteToWideChar (Address: 0x1800addd8)
  • WideCharToMultiByte (Address: 0x1800adde0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800ade20)
  • AcquireSRWLockShared (Address: 0x1800addf0)
  • CreateEventExW (Address: 0x1800ade48)
  • CreateEventW (Address: 0x1800ade78)
  • CreateMutexExW (Address: 0x1800addf8)
  • CreateMutexW (Address: 0x1800ade30)
  • CreateSemaphoreExW (Address: 0x1800ade90)
  • DeleteCriticalSection (Address: 0x1800ade28)
  • EnterCriticalSection (Address: 0x1800ade88)
  • InitializeCriticalSection (Address: 0x1800ade58)
  • InitializeCriticalSectionEx (Address: 0x1800ade60)
  • InitializeSRWLock (Address: 0x1800ade98)
  • LeaveCriticalSection (Address: 0x1800ade68)
  • OpenSemaphoreW (Address: 0x1800ade10)
  • ReleaseMutex (Address: 0x1800ade40)
  • ReleaseSemaphore (Address: 0x1800ade70)
  • ReleaseSRWLockExclusive (Address: 0x1800ade38)
  • ReleaseSRWLockShared (Address: 0x1800ade00)
  • ResetEvent (Address: 0x1800ade80)
  • SetEvent (Address: 0x1800ade08)
  • WaitForSingleObject (Address: 0x1800ade50)
  • WaitForSingleObjectEx (Address: 0x1800ade18)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800adeb8)
  • InitOnceComplete (Address: 0x1800adea8)
  • InitOnceExecuteOnce (Address: 0x1800adec0)
  • Sleep (Address: 0x1800adeb0)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x1800aded0)
  • WaitForMultipleObjects (Address: 0x1800aded8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800adf08)
  • GetSystemTime (Address: 0x1800adef8)
  • GetSystemTimeAsFileTime (Address: 0x1800adee8)
  • GetSystemWindowsDirectoryW (Address: 0x1800adf10)
  • GetTickCount (Address: 0x1800adef0)
  • GetTickCount64 (Address: 0x1800adf00)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800adf30)
  • CloseThreadpoolWait (Address: 0x1800adf50)
  • CloseThreadpoolWork (Address: 0x1800adf20)
  • CreateThreadpoolTimer (Address: 0x1800adf48)
  • CreateThreadpoolWait (Address: 0x1800adf68)
  • CreateThreadpoolWork (Address: 0x1800adf58)
  • SetThreadpoolTimer (Address: 0x1800adf78)
  • SetThreadpoolWait (Address: 0x1800adf70)
  • SubmitThreadpoolWork (Address: 0x1800adf28)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800adf38)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800adf60)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1800adf40)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x1800adf88)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800adfa8)
  • SystemTimeToFileTime (Address: 0x1800adf98)
  • SystemTimeToTzSpecificLocalTime (Address: 0x1800adfa0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800adfb8)
  • EncodePointer (Address: 0x1800adfc0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1800adfe0)
  • RoOriginateErrorW (Address: 0x1800adfd8)
  • SetRestrictedErrorInfo (Address: 0x1800adfd0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1800adff0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800ae008)
  • RoGetActivationFactory (Address: 0x1800ae000)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateStringReference (Address: 0x1800ae030)
  • WindowsDeleteString (Address: 0x1800ae028)
  • WindowsGetStringRawBuffer (Address: 0x1800ae020)
  • WindowsIsStringEmpty (Address: 0x1800ae038)
  • WindowsStringHasEmbeddedNull (Address: 0x1800ae018)
api-ms-win-devices-config-l1-1-1.dll
  • CM_Get_Device_IDW (Address: 0x1800ae070)
  • CM_Get_Device_Interface_List_SizeW (Address: 0x1800ae078)
  • CM_Get_Device_Interface_ListW (Address: 0x1800ae060)
  • CM_Get_Device_Interface_PropertyW (Address: 0x1800ae058)
  • CM_Get_Parent (Address: 0x1800ae048)
  • CM_Register_Notification (Address: 0x1800ae050)
  • CM_Unregister_Notification (Address: 0x1800ae068)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x1800ae090)
  • EnableTraceEx2 (Address: 0x1800ae088)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1800ae0c8)
  • EventRegister (Address: 0x1800ae0a0)
  • EventSetInformation (Address: 0x1800ae0a8)
  • EventUnregister (Address: 0x1800ae0c0)
  • EventWriteString (Address: 0x1800ae0b8)
  • EventWriteTransfer (Address: 0x1800ae0b0)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1800ae0e8)
  • CheckTokenMembership (Address: 0x1800ae108)
  • CreateWellKnownSid (Address: 0x1800ae100)
  • DuplicateToken (Address: 0x1800ae0e0)
  • DuplicateTokenEx (Address: 0x1800ae0f0)
  • GetTokenInformation (Address: 0x1800ae110)
  • ImpersonateLoggedOnUser (Address: 0x1800ae0d8)
  • RevertToSelf (Address: 0x1800ae0f8)
api-ms-win-security-capability-l1-1-0.dll
  • RpcClientCapabilityCheck (Address: 0x1800ae120)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x1800ae130)
api-ms-win-security-provider-l1-1-0.dll
  • GetNamedSecurityInfoW (Address: 0x1800ae148)
  • SetNamedSecurityInfoW (Address: 0x1800ae140)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800ae158)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x1800ae168)
  • SetServiceStatus (Address: 0x1800ae170)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1800ae180)
  • OpenSCManagerW (Address: 0x1800ae190)
  • OpenServiceW (Address: 0x1800ae188)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfig2W (Address: 0x1800ae1a8)
  • ChangeServiceConfigW (Address: 0x1800ae1a0)
api-ms-win-shcore-path-l1-1-0.dll
  • (Address: 0x1800ae1b8)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolQueueTask (Address: 0x1800ae1c8)
bcd.dll
  • BcdCloseObject (Address: 0x1800ae1d8)
  • BcdCloseStore (Address: 0x1800ae208)
  • BcdGetElementData (Address: 0x1800ae1f8)
  • BcdOpenObject (Address: 0x1800ae200)
  • BcdOpenStoreFromFile (Address: 0x1800ae1e0)
  • BcdOpenSystemStore (Address: 0x1800ae1f0)
  • BcdSetElementData (Address: 0x1800ae1e8)
bcrypt.dll
  • BCryptGenRandom (Address: 0x1800ae218)
Cabinet.dll
  • (Address: 0x1800ad6e8)
  • (Address: 0x1800ad6f0)
  • (Address: 0x1800ad6f8)
  • (Address: 0x1800ad700)
  • (Address: 0x1800ad708)
  • (Address: 0x1800ad710)
DEVOBJ.dll
  • DevObjCreateDeviceInfoList (Address: 0x1800ad738)
  • DevObjDestroyDeviceInfoList (Address: 0x1800ad720)
  • DevObjEnumDeviceInterfaces (Address: 0x1800ad748)
  • DevObjGetClassDevs (Address: 0x1800ad740)
  • DevObjGetDeviceInterfaceDetail (Address: 0x1800ad730)
  • DevObjOpenDeviceInterface (Address: 0x1800ad728)
FLTLIB.DLL
  • FilterAttach (Address: 0x1800ad758)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1800ae310)
  • ___lc_handle_func (Address: 0x1800ae308)
  • ___mb_cur_max_func (Address: 0x1800ae318)
  • __C_specific_handler (Address: 0x1800ae408)
  • __crtLCMapStringA (Address: 0x1800ae368)
  • __crtLCMapStringW (Address: 0x1800ae360)
  • __CxxFrameHandler3 (Address: 0x1800ae520)
  • __dllonexit (Address: 0x1800ae3e8)
  • __mb_cur_max (Address: 0x1800ae258)
  • __pctype_func (Address: 0x1800ae2f8)
  • __uncaught_exception (Address: 0x1800ae330)
  • _amsg_exit (Address: 0x1800ae418)
  • _callnewh (Address: 0x1800ae468)
  • _CxxThrowException (Address: 0x1800ae440)
  • _errno (Address: 0x1800ae3b0)
  • _fseeki64 (Address: 0x1800ae540)
  • _i64toa_s (Address: 0x1800ae488)
  • _initterm (Address: 0x1800ae410)
  • _ismbblead (Address: 0x1800ae320)
  • _lock (Address: 0x1800ae3f8)
  • _onexit (Address: 0x1800ae3e0)
  • _purecall (Address: 0x1800ae4e0)
  • _unlock (Address: 0x1800ae3f0)
  • _vscwprintf (Address: 0x1800ae2e0)
  • _vsnprintf_s (Address: 0x1800ae4e8)
  • _vsnwprintf (Address: 0x1800ae538)
  • _wcsdup (Address: 0x1800ae478)
  • _wcsicmp (Address: 0x1800ae4c0)
  • _wcslwr (Address: 0x1800ae3c0)
  • _wcslwr_s (Address: 0x1800ae380)
  • _wcsnicmp (Address: 0x1800ae4d8)
  • _wcstoui64 (Address: 0x1800ae290)
  • _wcsupr_s (Address: 0x1800ae378)
  • _wfsopen (Address: 0x1800ae518)
  • _wsetlocale (Address: 0x1800ae370)
  • _wsplitpath_s (Address: 0x1800ae4b8)
  • _wtoi (Address: 0x1800ae480)
  • _XcptFilter (Address: 0x1800ae420)
  • ??_V@YAXPEAX@Z (Address: 0x1800ae4c8)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800ae430)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800ae450)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800ae460)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800ae458)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800ae4f0)
  • ??0exception@@QEAA@XZ (Address: 0x1800ae508)
  • ??1bad_cast@@UEAA@XZ (Address: 0x1800ae470)
  • ??1exception@@UEAA@XZ (Address: 0x1800ae510)
  • ??1type_info@@UEAA@XZ (Address: 0x1800ae400)
  • ??3@YAXPEAX@Z (Address: 0x1800ae528)
  • ?terminate@@YAXXZ (Address: 0x1800ae3d8)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800ae448)
  • abort (Address: 0x1800ae348)
  • calloc (Address: 0x1800ae2d0)
  • exp (Address: 0x1800ae4f8)
  • fclose (Address: 0x1800ae238)
  • fflush (Address: 0x1800ae230)
  • fgetc (Address: 0x1800ae250)
  • fgetpos (Address: 0x1800ae270)
  • fgetwc (Address: 0x1800ae260)
  • fputwc (Address: 0x1800ae240)
  • free (Address: 0x1800ae4a0)
  • fseek (Address: 0x1800ae338)
  • fsetpos (Address: 0x1800ae288)
  • fwrite (Address: 0x1800ae268)
  • islower (Address: 0x1800ae328)
  • isupper (Address: 0x1800ae300)
  • localeconv (Address: 0x1800ae3c8)
  • log10 (Address: 0x1800ae3d0)
  • malloc (Address: 0x1800ae490)
  • memchr (Address: 0x1800ae388)
  • memcmp (Address: 0x1800ae390)
  • memcpy (Address: 0x1800ae438)
  • memcpy_s (Address: 0x1800ae530)
  • memmove (Address: 0x1800ae428)
  • memmove_s (Address: 0x1800ae4d0)
  • memset (Address: 0x1800ae350)
  • realloc (Address: 0x1800ae2b8)
  • setlocale (Address: 0x1800ae2f0)
  • setvbuf (Address: 0x1800ae278)
  • sprintf_s (Address: 0x1800ae228)
  • sqrt (Address: 0x1800ae398)
  • strcspn (Address: 0x1800ae358)
  • strtod (Address: 0x1800ae2a0)
  • strtoul (Address: 0x1800ae2a8)
  • swprintf_s (Address: 0x1800ae3b8)
  • time (Address: 0x1800ae3a0)
  • towlower (Address: 0x1800ae2c8)
  • ungetc (Address: 0x1800ae280)
  • ungetwc (Address: 0x1800ae248)
  • vswprintf_s (Address: 0x1800ae2d8)
  • wcschr (Address: 0x1800ae4a8)
  • wcscmp (Address: 0x1800ae548)
  • wcscpy_s (Address: 0x1800ae4b0)
  • wcsncat_s (Address: 0x1800ae298)
  • wcsncmp (Address: 0x1800ae2e8)
  • wcsnlen (Address: 0x1800ae2c0)
  • wcsrchr (Address: 0x1800ae498)
  • wcsstr (Address: 0x1800ae3a8)
  • wcstod (Address: 0x1800ae2b0)
  • wcstol (Address: 0x1800ae340)
  • wcstoul (Address: 0x1800ae500)
ntdll.dll
  • NtAdjustPrivilegesToken (Address: 0x1800ae5a8)
  • NtClose (Address: 0x1800ae588)
  • NtCreateFile (Address: 0x1800ae558)
  • NtFsControlFile (Address: 0x1800ae570)
  • NtOpenProcessTokenEx (Address: 0x1800ae5a0)
  • NtOpenThreadTokenEx (Address: 0x1800ae590)
  • NtQueryInformationToken (Address: 0x1800ae5b8)
  • NtQuerySystemInformation (Address: 0x1800ae5c8)
  • NtQueryVolumeInformationFile (Address: 0x1800ae5e8)
  • NtQueryWnfStateData (Address: 0x1800ae660)
  • NtSetInformationThread (Address: 0x1800ae598)
  • RtlAddAccessAllowedAce (Address: 0x1800ae648)
  • RtlAllocateAndInitializeSid (Address: 0x1800ae658)
  • RtlAllocateHeap (Address: 0x1800ae678)
  • RtlCreateAcl (Address: 0x1800ae630)
  • RtlCreateSecurityDescriptor (Address: 0x1800ae628)
  • RtlCreateSystemVolumeInformationFolder (Address: 0x1800ae600)
  • RtlDosPathNameToNtPathName_U (Address: 0x1800ae5b0)
  • RtlDosPathNameToRelativeNtPathName_U_WithStatus (Address: 0x1800ae610)
  • RtlFreeHeap (Address: 0x1800ae638)
  • RtlFreeSid (Address: 0x1800ae640)
  • RtlFreeUnicodeString (Address: 0x1800ae560)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800ae618)
  • RtlGetPersistedStateLocation (Address: 0x1800ae608)
  • RtlImpersonateSelf (Address: 0x1800ae580)
  • RtlInitializeCorrelationVector (Address: 0x1800ae5e0)
  • RtlInitUnicodeString (Address: 0x1800ae5c0)
  • RtlIsMultiSessionSku (Address: 0x1800ae5f8)
  • RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x1800ae5d0)
  • RtlLengthSid (Address: 0x1800ae650)
  • RtlNtStatusToDosError (Address: 0x1800ae568)
  • RtlPublishWnfStateData (Address: 0x1800ae668)
  • RtlQueryWnfStateData (Address: 0x1800ae5d8)
  • RtlSetDaclSecurityDescriptor (Address: 0x1800ae670)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800ae620)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800ae5f0)
  • WinSqmIncrementDWORD (Address: 0x1800ae578)
OLEAUT32.dll
  • SysAllocString (Address: 0x1800ad770)
  • SysFreeString (Address: 0x1800ad768)
RPCRT4.dll
  • I_RpcBindingInqLocalClientPID (Address: 0x1800ad780)
  • Ndr64AsyncServerCallAll (Address: 0x1800ad7d8)
  • NdrAsyncServerCall (Address: 0x1800ad7e0)
  • NdrServerCall2 (Address: 0x1800ad7e8)
  • NdrServerCallAll (Address: 0x1800ad7f0)
  • RpcAsyncCompleteCall (Address: 0x1800ad7a0)
  • RpcBindingVectorFree (Address: 0x1800ad7c0)
  • RpcEpRegisterW (Address: 0x1800ad790)
  • RpcEpUnregister (Address: 0x1800ad798)
  • RpcImpersonateClient (Address: 0x1800ad7d0)
  • RpcRevertToSelf (Address: 0x1800ad7c8)
  • RpcServerInqBindings (Address: 0x1800ad788)
  • RpcServerRegisterIf3 (Address: 0x1800ad7a8)
  • RpcServerTestCancel (Address: 0x1800ad7f8)
  • RpcServerUnregisterIf (Address: 0x1800ad7b0)
  • RpcServerUnregisterIfEx (Address: 0x1800ad800)
  • RpcServerUseProtseqW (Address: 0x1800ad7b8)
wer.dll
  • WerStorePurge (Address: 0x1800ae688)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x1800ad810)