TokenBroker.dll
Description: Token Broker
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5848
Architecture: 64-bit
Operating System: Windows NT
SHA256: 18ef6240ee6034f02c744202390afad5
File Size: 1.5 MB
Uploaded At: Dec. 1, 2025, 7:40 a.m.
Views: 3
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ServiceMain (Ordinal: 1, Address: 0x3abf0)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-1.dll
- GetPackageFamilyNameFromToken (Address: 0x180122c38)
- GetPackageFullNameFromToken (Address: 0x180122c40)
api-ms-win-appmodel-state-l1-2-0.dll
- CloseState (Address: 0x180122c60)
- GetStateRootFolder (Address: 0x180122c58)
- OpenStateExplicit (Address: 0x180122c50)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180122c80)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180122ca0)
- IsDebuggerPresent (Address: 0x180122c98)
- OutputDebugStringW (Address: 0x180122c90)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180122cb0)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180122cc0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180122ce0)
- RaiseException (Address: 0x180122cd0)
- SetLastError (Address: 0x180122cd8)
- SetUnhandledExceptionFilter (Address: 0x180122ce8)
- UnhandledExceptionFilter (Address: 0x180122cf0)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x180122d28)
- CreateDirectoryW (Address: 0x180122d18)
- CreateFileW (Address: 0x180122d40)
- FindClose (Address: 0x180122d20)
- FindFirstFileW (Address: 0x180122d48)
- FindNextFileW (Address: 0x180122d58)
- GetFileSizeEx (Address: 0x180122d30)
- GetFileTime (Address: 0x180122d50)
- ReadFile (Address: 0x180122d08)
- SetEndOfFile (Address: 0x180122d60)
- SetFileInformationByHandle (Address: 0x180122d38)
- SetFilePointer (Address: 0x180122d00)
- WriteFile (Address: 0x180122d10)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180122d70)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180122d90)
- HeapAlloc (Address: 0x180122d80)
- HeapFree (Address: 0x180122d88)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x180122da0)
- LocalFree (Address: 0x180122da8)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x180122dc0)
- InterlockedPushEntrySList (Address: 0x180122db8)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x180122dd0)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x180122df0)
- GetModuleFileNameA (Address: 0x180122de8)
- GetModuleHandleExW (Address: 0x180122df8)
- GetModuleHandleW (Address: 0x180122e00)
- GetProcAddress (Address: 0x180122de0)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180122e10)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x180122e20)
- GetEnvironmentVariableW (Address: 0x180122e28)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x180122e50)
- DeleteProcThreadAttributeList (Address: 0x180122e88)
- GetCurrentProcess (Address: 0x180122e90)
- GetCurrentProcessId (Address: 0x180122e58)
- GetCurrentThread (Address: 0x180122e98)
- GetCurrentThreadId (Address: 0x180122e40)
- GetProcessId (Address: 0x180122e60)
- InitializeProcThreadAttributeList (Address: 0x180122e38)
- OpenProcessToken (Address: 0x180122eb0)
- OpenThreadToken (Address: 0x180122e70)
- SetThreadToken (Address: 0x180122e68)
- TerminateProcess (Address: 0x180122ea0)
- TlsAlloc (Address: 0x180122ea8)
- TlsFree (Address: 0x180122e78)
- TlsGetValue (Address: 0x180122eb8)
- TlsSetValue (Address: 0x180122e48)
- UpdateProcThreadAttribute (Address: 0x180122e80)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x180122ed0)
- OpenProcess (Address: 0x180122ec8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180122ee0)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x180122ef0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180122f18)
- RegCreateKeyExW (Address: 0x180122f40)
- RegDeleteValueW (Address: 0x180122f28)
- RegEnumKeyExW (Address: 0x180122f38)
- RegGetValueW (Address: 0x180122f20)
- RegOpenKeyExW (Address: 0x180122f08)
- RegQueryInfoKeyW (Address: 0x180122f00)
- RegQueryValueExW (Address: 0x180122f30)
- RegSetValueExW (Address: 0x180122f10)
api-ms-win-core-registry-l2-1-0.dll
- RegOpenKeyW (Address: 0x180122f50)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180122f68)
- RtlLookupFunctionEntry (Address: 0x180122f70)
- RtlVirtualUnwind (Address: 0x180122f60)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFileExistsW (Address: 0x180122f88)
- PathFindFileNameW (Address: 0x180122f80)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x180122f98)
api-ms-win-core-string-l2-1-0.dll
- CharLowerW (Address: 0x180122fa8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180123000)
- AcquireSRWLockShared (Address: 0x180122ff8)
- CreateEventExW (Address: 0x180123010)
- CreateEventW (Address: 0x180123020)
- CreateMutexExW (Address: 0x180122fc0)
- CreateSemaphoreExW (Address: 0x180122ff0)
- DeleteCriticalSection (Address: 0x180122fb8)
- EnterCriticalSection (Address: 0x180123038)
- InitializeCriticalSectionEx (Address: 0x180123048)
- InitializeSRWLock (Address: 0x180123008)
- LeaveCriticalSection (Address: 0x180123050)
- OpenSemaphoreW (Address: 0x180122fd0)
- ReleaseMutex (Address: 0x180123028)
- ReleaseSemaphore (Address: 0x180123058)
- ReleaseSRWLockExclusive (Address: 0x180123018)
- ReleaseSRWLockShared (Address: 0x180122fc8)
- SetEvent (Address: 0x180123030)
- TryAcquireSRWLockExclusive (Address: 0x180122fe8)
- WaitForMultipleObjectsEx (Address: 0x180122fe0)
- WaitForSingleObject (Address: 0x180123040)
- WaitForSingleObjectEx (Address: 0x180122fd8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180123088)
- InitOnceComplete (Address: 0x180123080)
- InitOnceExecuteOnce (Address: 0x180123070)
- Sleep (Address: 0x180123078)
- WakeByAddressAll (Address: 0x180123068)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x180123098)
- GetSystemTimeAsFileTime (Address: 0x1801230b0)
- GetTickCount (Address: 0x1801230a8)
- GetTickCount64 (Address: 0x1801230a0)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetProductInfo (Address: 0x1801230c0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpool (Address: 0x1801230f8)
- CloseThreadpoolTimer (Address: 0x180123108)
- CloseThreadpoolWork (Address: 0x1801230d8)
- CreateThreadpool (Address: 0x1801230e0)
- CreateThreadpoolTimer (Address: 0x180123110)
- CreateThreadpoolWork (Address: 0x1801230e8)
- FreeLibraryWhenCallbackReturns (Address: 0x1801230f0)
- SetThreadpoolTimer (Address: 0x180123118)
- SubmitThreadpoolWork (Address: 0x1801230d0)
- WaitForThreadpoolTimerCallbacks (Address: 0x180123100)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- QueueUserWorkItem (Address: 0x180123128)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x180123138)
- EncodePointer (Address: 0x180123140)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x180123160)
- RoOriginateError (Address: 0x180123150)
- RoOriginateErrorW (Address: 0x180123170)
- RoTransformError (Address: 0x180123158)
- SetRestrictedErrorInfo (Address: 0x180123168)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x180123180)
- RoGetMatchingRestrictedErrorInfo (Address: 0x180123190)
- RoOriginateLanguageException (Address: 0x180123198)
- RoReportFailedDelegate (Address: 0x180123188)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1801231b0)
- RoGetActivationFactory (Address: 0x1801231c0)
- RoInitialize (Address: 0x1801231b8)
- RoRegisterActivationFactories (Address: 0x1801231d0)
- RoRevokeActivationFactories (Address: 0x1801231a8)
- RoUninitialize (Address: 0x1801231c8)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
- RoCreatePropertySetSerializer (Address: 0x1801231e0)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x180123240)
- WindowsConcatString (Address: 0x180123210)
- WindowsCreateString (Address: 0x180123200)
- WindowsCreateStringReference (Address: 0x180123230)
- WindowsDeleteString (Address: 0x180123228)
- WindowsDuplicateString (Address: 0x180123220)
- WindowsGetStringLen (Address: 0x180123218)
- WindowsGetStringRawBuffer (Address: 0x1801231f0)
- WindowsIsStringEmpty (Address: 0x180123208)
- WindowsStringHasEmbeddedNull (Address: 0x1801231f8)
- WindowsSubstringWithSpecifiedLength (Address: 0x180123238)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x180123250)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x180123380)
- __CxxFrameHandler3 (Address: 0x180123388)
- __CxxFrameHandler4 (Address: 0x180123408)
- __std_terminate (Address: 0x180123400)
- _CxxThrowException (Address: 0x180123390)
- _o___std_exception_copy (Address: 0x1801233f0)
- _o___std_exception_destroy (Address: 0x1801233e8)
- _o___std_type_info_destroy_list (Address: 0x1801233e0)
- _o___stdio_common_vsnprintf_s (Address: 0x1801233d8)
- _o___stdio_common_vswprintf (Address: 0x1801233d0)
- _o__callnewh (Address: 0x1801233c8)
- _o__cexit (Address: 0x1801233c0)
- _o__configure_narrow_argv (Address: 0x1801233b8)
- _o__crt_atexit (Address: 0x1801233b0)
- _o__errno (Address: 0x1801233a8)
- _o__execute_onexit_table (Address: 0x1801233a0)
- _o__fseeki64 (Address: 0x180123398)
- _o__initialize_narrow_environment (Address: 0x180123260)
- _o__initialize_onexit_table (Address: 0x180123268)
- _o__invalid_parameter_noinfo (Address: 0x180123270)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x180123278)
- _o__itow_s (Address: 0x180123280)
- _o__lock_file (Address: 0x180123288)
- _o__purecall (Address: 0x180123290)
- _o__register_onexit_function (Address: 0x180123298)
- _o__seh_filter_dll (Address: 0x1801232a0)
- _o__unlock_file (Address: 0x1801232a8)
- _o__wcsicmp (Address: 0x1801232b0)
- _o__wcsnicmp (Address: 0x1801232b8)
- _o__wsplitpath_s (Address: 0x1801232c8)
- _o_fclose (Address: 0x1801232d0)
- _o_fflush (Address: 0x1801232d8)
- _o_fgetc (Address: 0x1801232e0)
- _o_fgetpos (Address: 0x1801232e8)
- _o_fgetwc (Address: 0x1801232f0)
- _o_fputwc (Address: 0x1801232f8)
- _o_free (Address: 0x180123300)
- _o_fsetpos (Address: 0x180123308)
- _o_fwrite (Address: 0x180123310)
- _o_iswspace (Address: 0x180123318)
- _o_malloc (Address: 0x180123320)
- _o_realloc (Address: 0x180123328)
- _o_setvbuf (Address: 0x180123330)
- _o_terminate (Address: 0x180123338)
- _o_tolower (Address: 0x180123340)
- _o_toupper (Address: 0x180123348)
- _o_towlower (Address: 0x180123350)
- _o_ungetc (Address: 0x180123358)
- _o_ungetwc (Address: 0x180123360)
- _o_wcscat_s (Address: 0x180123368)
- _o_wcscpy_s (Address: 0x180123370)
- _o_wcstoul (Address: 0x180123378)
- memcmp (Address: 0x180123410)
- memcpy (Address: 0x180123418)
- memmove (Address: 0x1801232c0)
- wcsstr (Address: 0x1801233f8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180123430)
- _initterm_e (Address: 0x180123428)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180123448)
- wcscmp (Address: 0x180123440)
- wcscspn (Address: 0x180123450)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x180123460)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180123488)
- EventProviderEnabled (Address: 0x180123490)
- EventRegister (Address: 0x180123480)
- EventSetInformation (Address: 0x180123478)
- EventUnregister (Address: 0x180123470)
- EventWriteTransfer (Address: 0x180123498)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1801234d0)
- AllocateAndInitializeSid (Address: 0x1801234e0)
- CreateWellKnownSid (Address: 0x1801234e8)
- DuplicateTokenEx (Address: 0x180123508)
- FreeSid (Address: 0x1801234c8)
- GetLengthSid (Address: 0x180123500)
- GetSidLengthRequired (Address: 0x180123518)
- GetSidSubAuthority (Address: 0x1801234b8)
- GetTokenInformation (Address: 0x1801234d8)
- ImpersonateLoggedOnUser (Address: 0x1801234f0)
- InitializeSid (Address: 0x180123510)
- IsWellKnownSid (Address: 0x1801234f8)
- MakeAbsoluteSD (Address: 0x1801234c0)
- RevertToSelf (Address: 0x1801234b0)
- SetTokenInformation (Address: 0x1801234a8)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenMembershipEx (Address: 0x180123528)
api-ms-win-security-base-private-l1-1-1.dll
- CreateAppContainerToken (Address: 0x180123538)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x180123548)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x180123568)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180123558)
- ConvertStringSidToSidW (Address: 0x180123560)
api-ms-win-service-core-l1-1-0.dll
- RegisterServiceCtrlHandlerExW (Address: 0x180123580)
- SetServiceStatus (Address: 0x180123578)
api-ms-win-service-private-l1-1-0.dll
- I_QueryTagInformation (Address: 0x180123590)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
- CreateRandomAccessStreamOverStream (Address: 0x1801235a8)
- CreateStreamOverRandomAccessStream (Address: 0x1801235a0)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x1801235b8)
- SHTaskPoolQueueTask (Address: 0x1801235c0)
combase.dll
- (Address: 0x1801235d0)
- (Address: 0x1801235d8)
- (Address: 0x1801235e0)
- (Address: 0x1801235e8)
- (Address: 0x1801235f0)
- (Address: 0x1801235f8)
msvcp_win.dll
- _Cnd_broadcast (Address: 0x1801236c0)
- _Cnd_destroy_in_situ (Address: 0x180123750)
- _Cnd_init_in_situ (Address: 0x180123748)
- _Cnd_timedwait (Address: 0x1801237d8)
- _Mtx_current_owns (Address: 0x1801236e8)
- _Mtx_destroy_in_situ (Address: 0x180123730)
- _Mtx_init_in_situ (Address: 0x180123738)
- _Mtx_lock (Address: 0x1801236a8)
- _Mtx_unlock (Address: 0x1801236b8)
- _Query_perf_counter (Address: 0x1801236c8)
- _Query_perf_frequency (Address: 0x1801236d0)
- _Xtime_get_ticks (Address: 0x1801236f0)
- ?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z (Address: 0x180123700)
- ?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180123608)
- ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180123740)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180123788)
- ?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180123680)
- ?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180123800)
- ?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ (Address: 0x180123650)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1801237d0)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x180123820)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180123860)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x1801236b0)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x1801236e0)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1801237e0)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x180123758)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180123710)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180123728)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x180123790)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180123658)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x180123690)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180123630)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x180123798)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180123768)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180123778)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180123850)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x1801236a0)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180123698)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x180123760)
- ?always_noconv@codecvt_base@std@@QEBA_NXZ (Address: 0x180123718)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180123660)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180123668)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180123678)
- ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x1801237b8)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x180123818)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x180123838)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x180123810)
- ?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ (Address: 0x180123638)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1801237c8)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x180123848)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180123780)
- ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1801236f8)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x180123720)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180123620)
- ?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z (Address: 0x180123868)
- ?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z (Address: 0x180123858)
- ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180123640)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1801237e8)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x180123830)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x180123618)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180123670)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x180123648)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180123688)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x180123770)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x180123610)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x1801237b0)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x180123628)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x180123828)
- ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x180123840)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x1801237f8)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x180123808)
- ?unshift@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z (Address: 0x180123708)
- ?widen@?$ctype@G@std@@QEBAGD@Z (Address: 0x1801236d8)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1801237a8)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x1801237a0)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x1801237f0)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x1801237c0)
ntdll.dll
- DbgPrint (Address: 0x180123930)
- NtClose (Address: 0x1801238b0)
- NtCreateFile (Address: 0x1801238b8)
- NtQueryInformationToken (Address: 0x180123940)
- NtQueryWnfStateData (Address: 0x1801238e0)
- RtlAcquireResourceExclusive (Address: 0x180123880)
- RtlAllocateHeap (Address: 0x180123948)
- RtlDeleteResource (Address: 0x180123890)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x1801238a0)
- RtlEqualSid (Address: 0x1801238c8)
- RtlFreeHeap (Address: 0x180123938)
- RtlFreeSid (Address: 0x180123898)
- RtlGetDeviceFamilyInfoEnum (Address: 0x180123918)
- RtlInitializeResource (Address: 0x180123878)
- RtlIsMultiSessionSku (Address: 0x180123958)
- RtlIsMultiUsersInSessionSku (Address: 0x180123920)
- RtlLoadString (Address: 0x180123928)
- RtlNtStatusToDosError (Address: 0x1801238d0)
- RtlPublishWnfStateData (Address: 0x1801238e8)
- RtlQueryPackageClaims (Address: 0x180123910)
- RtlQueryWnfStateData (Address: 0x180123908)
- RtlReleaseRelativeName (Address: 0x1801238a8)
- RtlReleaseResource (Address: 0x180123888)
- RtlSetEnvironmentVar (Address: 0x1801238d8)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1801238f8)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1801238f0)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x180123900)
- wcsnlen (Address: 0x180123950)
- ZwQueryWnfStateData (Address: 0x1801238c0)
RMCLIENT.dll
- RmAccessCheck (Address: 0x180122c28)
TOKENBINDING.dll
- TokenBindingGenerateIDForUri (Address: 0x180122c70)