tssrvlic.dll

ACTIVEDS.dll

(Address: 0x180028c10)
(Address: 0x180028c08)

ADVAPI32.dll

GetUserNameW (Address: 0x180028c20)
SetEntriesInAclW (Address: 0x180028c28)

api-ms-win-core-com-l1-1-0.dll

CoInitializeEx (Address: 0x180028dc0)
CoTaskMemAlloc (Address: 0x180028da8)
CoTaskMemFree (Address: 0x180028db8)
CoUninitialize (Address: 0x180028db0)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW (Address: 0x180028dd0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180028de0)
IsDebuggerPresent (Address: 0x180028df8)
OutputDebugStringA (Address: 0x180028df0)
OutputDebugStringW (Address: 0x180028de8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180028e18)
RaiseException (Address: 0x180028e10)
SetLastError (Address: 0x180028e28)
SetUnhandledExceptionFilter (Address: 0x180028e08)
UnhandledExceptionFilter (Address: 0x180028e20)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180028e38)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180028e48)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180028e58)
HeapAlloc (Address: 0x180028e78)
HeapDestroy (Address: 0x180028e68)
HeapFree (Address: 0x180028e80)
HeapReAlloc (Address: 0x180028e70)
HeapSize (Address: 0x180028e60)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180028e90)
LocalFree (Address: 0x180028e98)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180028ed8)
FreeLibrary (Address: 0x180028ec8)
GetModuleFileNameA (Address: 0x180028ed0)
GetModuleFileNameW (Address: 0x180028eb8)
GetModuleHandleExW (Address: 0x180028eb0)
GetModuleHandleW (Address: 0x180028ec0)
GetProcAddress (Address: 0x180028ea8)
LoadLibraryExW (Address: 0x180028ee0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x180028ef0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180028f00)
GetACP (Address: 0x180028f08)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180028f38)
GetCurrentProcess (Address: 0x180028f18)
GetCurrentProcessId (Address: 0x180028f30)
GetCurrentThreadId (Address: 0x180028f20)
TerminateProcess (Address: 0x180028f28)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x180028f48)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180028f58)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180028f68)
RegCreateKeyExW (Address: 0x180028f90)
RegOpenKeyExW (Address: 0x180028f70)
RegQueryValueExW (Address: 0x180028f80)
RegSetKeySecurity (Address: 0x180028f78)
RegSetValueExW (Address: 0x180028f88)

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte (Address: 0x180028fa0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180028fc8)
AcquireSRWLockShared (Address: 0x180029008)
CreateEventW (Address: 0x180028fe0)
CreateMutexExW (Address: 0x180029028)
CreateSemaphoreExW (Address: 0x180028ff0)
DeleteCriticalSection (Address: 0x180029020)
EnterCriticalSection (Address: 0x180029000)
InitializeCriticalSection (Address: 0x180028fc0)
InitializeCriticalSectionEx (Address: 0x180028fd8)
LeaveCriticalSection (Address: 0x180029038)
OpenSemaphoreW (Address: 0x180028fd0)
ReleaseMutex (Address: 0x180029030)
ReleaseSemaphore (Address: 0x180029018)
ReleaseSRWLockExclusive (Address: 0x180028ff8)
ReleaseSRWLockShared (Address: 0x180028fb8)
SetEvent (Address: 0x180028fe8)
WaitForSingleObject (Address: 0x180029010)
WaitForSingleObjectEx (Address: 0x180028fb0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180029048)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x180029070)
GetSystemTime (Address: 0x180029060)
GetSystemTimeAsFileTime (Address: 0x180029058)
GetTickCount (Address: 0x180029078)
GetVersionExW (Address: 0x180029068)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180029088)
CreateThreadpoolTimer (Address: 0x180029098)
SetThreadpoolTimer (Address: 0x1800290a0)
WaitForThreadpoolTimerCallbacks (Address: 0x180029090)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1800290b0)
SystemTimeToFileTime (Address: 0x1800290b8)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x1800290d8)
EnableTraceEx2 (Address: 0x1800290c8)
StartTraceW (Address: 0x1800290d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800290f8)
EventSetInformation (Address: 0x1800290e8)
EventUnregister (Address: 0x180029100)
EventWriteTransfer (Address: 0x1800290f0)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x180029110)
CreateWellKnownSid (Address: 0x180029120)
ImpersonateLoggedOnUser (Address: 0x180029118)
InitializeSecurityDescriptor (Address: 0x180029130)
RevertToSelf (Address: 0x180029138)
SetSecurityDescriptorDacl (Address: 0x180029128)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x180029148)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x180029198)
BCryptCreateHash (Address: 0x180029160)
BCryptDestroyHash (Address: 0x180029158)
BCryptDestroyKey (Address: 0x180029180)
BCryptEncrypt (Address: 0x180029188)
BCryptFinishHash (Address: 0x180029170)
BCryptGenerateSymmetricKey (Address: 0x180029190)
BCryptHashData (Address: 0x180029178)
BCryptOpenAlgorithmProvider (Address: 0x180029168)

CRYPT32.dll

CertCloseStore (Address: 0x180028c40)
CertDuplicateCertificateContext (Address: 0x180028c38)
CertEnumCertificatesInStore (Address: 0x180028c58)
CertFreeCertificateContext (Address: 0x180028c60)
CertGetIssuerCertificateFromStore (Address: 0x180028c78)
CertOpenStore (Address: 0x180028c48)
CryptDecodeObject (Address: 0x180028c70)
CryptProtectData (Address: 0x180028c68)
CryptVerifyCertificateSignature (Address: 0x180028c50)

CRYPTBASE.dll

SystemFunction036 (Address: 0x180028c88)

CRYPTSP.dll

CryptAcquireContextW (Address: 0x180028ca0)
CryptReleaseContext (Address: 0x180028c98)

KERNEL32.dll

CreateTimerQueue (Address: 0x180028cc0)
DeleteTimerQueueEx (Address: 0x180028cb8)
GetComputerNameW (Address: 0x180028cb0)
VerifyVersionInfoW (Address: 0x180028cc8)

logoncli.dll

DsGetDcNameW (Address: 0x1800291a8)

LSCSHostPolicy.dll

CreateInstanceOfHostPolicy (Address: 0x180028cd8)
ReleaseInstanceOfHostPolicy (Address: 0x180028ce0)

lstelemetry.dll

LogTSLSTelemetryRDSEvent (Address: 0x1800291b8)

msvcp110_win.dll

?_Syserror_map@std@@YAPEBDH@Z (Address: 0x1800291d8)
?_Winerror_map@std@@YAPEBDH@Z (Address: 0x1800291c8)
?_Xbad_alloc@std@@YAXXZ (Address: 0x1800291e0)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800291e8)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800291d0)

msvcrt.dll

__C_specific_handler (Address: 0x180029238)
__CxxFrameHandler3 (Address: 0x180029230)
__dllonexit (Address: 0x180029320)
_amsg_exit (Address: 0x180029278)
_callnewh (Address: 0x180029268)
_CxxThrowException (Address: 0x180029218)
_initterm (Address: 0x180029288)
_lock (Address: 0x180029310)
_mbslen (Address: 0x180029298)
_onexit (Address: 0x180029328)
_purecall (Address: 0x180029248)
_unlock (Address: 0x180029318)
_vsnprintf (Address: 0x180029300)
_vsnwprintf (Address: 0x180029250)
_wcsicmp (Address: 0x1800292e8)
_XcptFilter (Address: 0x180029270)
??_V@YAXPEAX@Z (Address: 0x180029258)
??1type_info@@UEAA@XZ (Address: 0x180029330)
??3@YAXPEAX@Z (Address: 0x180029240)
?terminate@@YAXXZ (Address: 0x180029308)
free (Address: 0x180029280)
gmtime (Address: 0x1800292b8)
malloc (Address: 0x180029260)
mbstowcs (Address: 0x1800292a8)
memcmp (Address: 0x180029210)
memcpy (Address: 0x180029208)
memcpy_s (Address: 0x180029228)
memmove (Address: 0x180029200)
memmove_s (Address: 0x1800292f0)
memset (Address: 0x1800291f8)
mktime (Address: 0x1800292d0)
qsort (Address: 0x180029290)
setlocale (Address: 0x1800292b0)
strcmp (Address: 0x180029220)
strcpy_s (Address: 0x1800292a0)
swscanf (Address: 0x1800292d8)
swscanf_s (Address: 0x1800292e0)
time (Address: 0x1800292c0)
wcscmp (Address: 0x1800292f8)
wcstok (Address: 0x1800292c8)

netutils.dll

NetApiBufferFree (Address: 0x180029340)

ntdll.dll

EtwEventRegister (Address: 0x1800293d8)
EtwEventUnregister (Address: 0x180029368)
EtwEventWriteFull (Address: 0x1800293b0)
NtQuerySystemInformation (Address: 0x180029390)
RtlAcquireResourceExclusive (Address: 0x1800293b8)
RtlAcquireResourceShared (Address: 0x1800293d0)
RtlAllocateAndInitializeSid (Address: 0x1800293c8)
RtlCaptureContext (Address: 0x180029370)
RtlCaptureStackBackTrace (Address: 0x180029398)
RtlDeleteResource (Address: 0x180029378)
RtlFreeSid (Address: 0x1800293a8)
RtlInitializeResource (Address: 0x180029350)
RtlLookupFunctionEntry (Address: 0x180029358)
RtlNtStatusToDosError (Address: 0x180029388)
RtlReleaseResource (Address: 0x1800293c0)
RtlVerifyVersionInfo (Address: 0x1800293a0)
RtlVirtualUnwind (Address: 0x180029360)
VerSetConditionMask (Address: 0x180029380)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x180028d48)
SafeArrayCreate (Address: 0x180028d28)
SafeArrayDestroy (Address: 0x180028d08)
SafeArrayGetElement (Address: 0x180028d10)
SafeArrayGetLBound (Address: 0x180028cf8)
SafeArrayGetUBound (Address: 0x180028d18)
SafeArrayUnaccessData (Address: 0x180028d20)
SysAllocString (Address: 0x180028d00)
SysFreeString (Address: 0x180028d38)
SystemTimeToVariantTime (Address: 0x180028d30)
VariantChangeType (Address: 0x180028d50)
VariantClear (Address: 0x180028d40)
VariantInit (Address: 0x180028cf0)

REGAPI.dll

RegGetLicensePolicyID (Address: 0x180028d60)

TlsBrand.dll

RDSGetProductAccessRights (Address: 0x180028d78)
RDSProductDetailsCreator (Address: 0x180028d80)
W2K3ADPUCALDetailsCreator (Address: 0x180028d70)

USER32.dll

LoadStringW (Address: 0x180028d98)
UnregisterClassA (Address: 0x180028d90)

Exported Functions

Imported DLLs & Functions