Xbox.Shell.Api.dll
Description: Xbox Shell Api
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.22000.2836
Architecture: 64-bit
Operating System: Windows NT
SHA256: bb63bab1352acc752865e5419bcb0410
File Size: 2.4 MB
Uploaded At: Aug. 30, 2026, 3:06 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CreateArgbScreenshot (Ordinal: 1, Address: 0x4c8b0)
- FreeArgbScreenshot (Ordinal: 2, Address: 0x4c940)
- GetProtocolHandlerForScheme (Ordinal: 3, Address: 0x4cd60)
- NavigateBack (Ordinal: 4, Address: 0x4cfa0)
- SetBackgroundImageFromArgbBuffer (Ordinal: 5, Address: 0x8ef00)
- ChallengeUser (Ordinal: 6, Address: 0x497f0)
- CheckGamingPrivilegeSilently (Ordinal: 7, Address: 0x43a50)
- CheckGamingPrivilegeSilentlyForUser (Ordinal: 8, Address: 0x43b70)
- CheckGamingPrivilegeWithUI (Ordinal: 9, Address: 0x43c00)
- CheckGamingPrivilegeWithUIForUser (Ordinal: 10, Address: 0x43d40)
- DllCanUnloadNow (Ordinal: 11, Address: 0x10f80)
- DllGetActivationFactory (Ordinal: 12, Address: 0x1ca20)
- DllGetClassObject (Ordinal: 13, Address: 0x16efb0)
- PlaySystemSound (Ordinal: 14, Address: 0x368e0)
- PlaySystemSoundAtPosition (Ordinal: 15, Address: 0x369a0)
- ProcessPendingGameUI (Ordinal: 16, Address: 0x43df0)
- ShowChangeFriendRelationshipUI (Ordinal: 17, Address: 0x44150)
- ShowChangeFriendRelationshipUIForUser (Ordinal: 18, Address: 0x44280)
- ShowCustomizeUserProfileUI (Ordinal: 19, Address: 0x44320)
- ShowCustomizeUserProfileUIForUser (Ordinal: 20, Address: 0x44440)
- ShowFindFriendsUI (Ordinal: 21, Address: 0x44500)
- ShowFindFriendsUIForUser (Ordinal: 22, Address: 0x44620)
- ShowGameInfoUI (Ordinal: 23, Address: 0x446e0)
- ShowGameInfoUIForUser (Ordinal: 24, Address: 0x44800)
- ShowGameInviteUI (Ordinal: 25, Address: 0x448d0)
- ShowGameInviteUIForUser (Ordinal: 26, Address: 0x44a20)
- ShowGameInviteUIWithContext (Ordinal: 27, Address: 0x44af0)
- ShowGameInviteUIWithContextForUser (Ordinal: 28, Address: 0x44c50)
- ShowPlayerPickerUI (Ordinal: 29, Address: 0x44d20)
- ShowPlayerPickerUIForUser (Ordinal: 30, Address: 0x44ea0)
- ShowProfileCardUI (Ordinal: 31, Address: 0x44f90)
- ShowProfileCardUIForUser (Ordinal: 32, Address: 0x450c0)
- ShowTitleAchievementsUI (Ordinal: 33, Address: 0x45160)
- ShowTitleAchievementsUIForUser (Ordinal: 34, Address: 0x45290)
- ShowUserSettingsUI (Ordinal: 35, Address: 0x45330)
- ShowUserSettingsUIForUser (Ordinal: 36, Address: 0x45450)
- TryCancelPendingGameUI (Ordinal: 37, Address: 0x45510)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- GetCurrentPackageFullName (Address: 0x1801c9f40)
- GetCurrentPackageInfo (Address: 0x1801c9f50)
- GetPackageFullName (Address: 0x1801c9f58)
- PackageIdFromFullName (Address: 0x1801c9f48)
api-ms-win-base-util-l1-1-0.dll
- IsTextUnicode (Address: 0x1801c9f68)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1801c9f78)
api-ms-win-core-com-l1-1-0.dll
- CLSIDFromString (Address: 0x1801c9fe0)
- CoCopyProxy (Address: 0x1801ca038)
- CoCreateFreeThreadedMarshaler (Address: 0x1801c9fe8)
- CoCreateGuid (Address: 0x1801c9fd8)
- CoCreateInstance (Address: 0x1801c9fa0)
- CoDisableCallCancellation (Address: 0x1801c9fc8)
- CoEnableCallCancellation (Address: 0x1801c9fc0)
- CoGetApartmentType (Address: 0x1801ca000)
- CoGetCallContext (Address: 0x1801c9fb8)
- CoGetInterfaceAndReleaseStream (Address: 0x1801ca028)
- CoGetMalloc (Address: 0x1801c9fb0)
- CoGetObjectContext (Address: 0x1801ca030)
- CoMarshalInterface (Address: 0x1801c9ff0)
- CoReleaseMarshalData (Address: 0x1801ca020)
- CoSetProxyBlanket (Address: 0x1801c9fa8)
- CoTaskMemAlloc (Address: 0x1801ca010)
- CoTaskMemFree (Address: 0x1801c9f90)
- CoWaitForMultipleHandles (Address: 0x1801c9ff8)
- CoWaitForMultipleObjects (Address: 0x1801ca018)
- CreateStreamOnHGlobal (Address: 0x1801c9f98)
- IIDFromString (Address: 0x1801c9f88)
- PropVariantClear (Address: 0x1801c9fd0)
- StringFromGUID2 (Address: 0x1801ca008)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x1801ca048)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1801ca068)
- IsDebuggerPresent (Address: 0x1801ca058)
- OutputDebugStringW (Address: 0x1801ca060)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1801ca078)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1801ca088)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1801ca0a8)
- RaiseException (Address: 0x1801ca098)
- SetLastError (Address: 0x1801ca0b8)
- SetUnhandledExceptionFilter (Address: 0x1801ca0b0)
- UnhandledExceptionFilter (Address: 0x1801ca0a0)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x1801ca0f8)
- DeleteFileW (Address: 0x1801ca0e0)
- FindClose (Address: 0x1801ca0d8)
- FindFirstFileW (Address: 0x1801ca0d0)
- FindNextFileW (Address: 0x1801ca0c8)
- GetFileAttributesExW (Address: 0x1801ca120)
- GetFileAttributesW (Address: 0x1801ca108)
- GetFileSize (Address: 0x1801ca0f0)
- GetFileSizeEx (Address: 0x1801ca110)
- ReadFile (Address: 0x1801ca0e8)
- SetFileAttributesW (Address: 0x1801ca100)
- WriteFile (Address: 0x1801ca118)
api-ms-win-core-file-l1-2-0.dll
- CreateFile2 (Address: 0x1801ca130)
- GetTempPathW (Address: 0x1801ca138)
api-ms-win-core-file-l2-1-0.dll
- MoveFileExW (Address: 0x1801ca148)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x1801ca158)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1801ca168)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1801ca178)
- HeapAlloc (Address: 0x1801ca180)
- HeapFree (Address: 0x1801ca188)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1801ca1a0)
- LocalFree (Address: 0x1801ca198)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1801ca1b0)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x1801ca1c0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- GetComputerNameW (Address: 0x1801ca1d0)
- MoveFileW (Address: 0x1801ca1e0)
- RegisterWaitForSingleObject (Address: 0x1801ca1d8)
api-ms-win-core-libraryloader-l1-2-0.dll
- FindResourceExW (Address: 0x1801ca210)
- FreeLibrary (Address: 0x1801ca208)
- GetModuleFileNameA (Address: 0x1801ca218)
- GetModuleHandleExW (Address: 0x1801ca228)
- GetModuleHandleW (Address: 0x1801ca1f0)
- GetProcAddress (Address: 0x1801ca220)
- LoadLibraryExW (Address: 0x1801ca1f8)
- LoadResource (Address: 0x1801ca200)
- LoadStringW (Address: 0x1801ca230)
- LockResource (Address: 0x1801ca238)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1801ca258)
- GetLocaleInfoEx (Address: 0x1801ca248)
- GetUserDefaultLocaleName (Address: 0x1801ca250)
api-ms-win-core-localization-l1-2-2.dll
- LCIDToLocaleName (Address: 0x1801ca268)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1801ca280)
- MapViewOfFile (Address: 0x1801ca278)
- UnmapViewOfFile (Address: 0x1801ca288)
api-ms-win-core-path-l1-1-0.dll
- PathCchCombine (Address: 0x1801ca298)
- PathCchStripToRoot (Address: 0x1801ca2a0)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1801ca2b8)
- SearchPathW (Address: 0x1801ca2b0)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x1801ca2c8)
- GetCurrentProcess (Address: 0x1801ca2d0)
- GetCurrentProcessId (Address: 0x1801ca2e0)
- GetCurrentThread (Address: 0x1801ca2f0)
- GetCurrentThreadId (Address: 0x1801ca2e8)
- GetProcessId (Address: 0x1801ca310)
- OpenProcessToken (Address: 0x1801ca300)
- OpenThreadToken (Address: 0x1801ca2f8)
- SetThreadToken (Address: 0x1801ca308)
- TerminateProcess (Address: 0x1801ca2d8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1801ca328)
- OpenProcess (Address: 0x1801ca320)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1801ca338)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1801ca348)
api-ms-win-core-quirks-l1-1-0.dll
- QuirkIsEnabled (Address: 0x1801ca358)
- QuirkIsEnabledForPackage (Address: 0x1801ca360)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1801ca388)
- RegCreateKeyExW (Address: 0x1801ca3b8)
- RegDeleteValueW (Address: 0x1801ca380)
- RegEnumKeyExW (Address: 0x1801ca3c0)
- RegEnumValueW (Address: 0x1801ca390)
- RegFlushKey (Address: 0x1801ca370)
- RegGetValueW (Address: 0x1801ca3a0)
- RegNotifyChangeKeyValue (Address: 0x1801ca378)
- RegOpenKeyExW (Address: 0x1801ca3a8)
- RegQueryInfoKeyW (Address: 0x1801ca398)
- RegQueryValueExW (Address: 0x1801ca3b0)
- RegSetKeySecurity (Address: 0x1801ca3c8)
- RegSetValueExW (Address: 0x1801ca3d0)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x1801ca3e0)
api-ms-win-core-registry-l2-1-0.dll
- RegCreateKeyW (Address: 0x1801ca3f8)
- RegDeleteKeyW (Address: 0x1801ca400)
- RegEnumKeyW (Address: 0x1801ca408)
- RegOpenKeyW (Address: 0x1801ca3f0)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x1801ca430)
- CompareStringW (Address: 0x1801ca428)
- MultiByteToWideChar (Address: 0x1801ca418)
- WideCharToMultiByte (Address: 0x1801ca420)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1801ca450)
- AcquireSRWLockShared (Address: 0x1801ca4a0)
- CreateEventExW (Address: 0x1801ca448)
- CreateEventW (Address: 0x1801ca468)
- CreateMutexExW (Address: 0x1801ca4c0)
- CreateSemaphoreExW (Address: 0x1801ca4d0)
- DeleteCriticalSection (Address: 0x1801ca4e8)
- EnterCriticalSection (Address: 0x1801ca4d8)
- InitializeCriticalSectionAndSpinCount (Address: 0x1801ca490)
- InitializeCriticalSectionEx (Address: 0x1801ca4a8)
- InitializeSRWLock (Address: 0x1801ca4b0)
- LeaveCriticalSection (Address: 0x1801ca4e0)
- OpenSemaphoreW (Address: 0x1801ca458)
- ReleaseMutex (Address: 0x1801ca480)
- ReleaseSemaphore (Address: 0x1801ca4c8)
- ReleaseSRWLockExclusive (Address: 0x1801ca440)
- ReleaseSRWLockShared (Address: 0x1801ca478)
- ResetEvent (Address: 0x1801ca488)
- SetEvent (Address: 0x1801ca4b8)
- WaitForMultipleObjectsEx (Address: 0x1801ca460)
- WaitForSingleObject (Address: 0x1801ca498)
- WaitForSingleObjectEx (Address: 0x1801ca470)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1801ca500)
- InitOnceComplete (Address: 0x1801ca508)
- InitOnceExecuteOnce (Address: 0x1801ca510)
- Sleep (Address: 0x1801ca4f8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetLocalTime (Address: 0x1801ca530)
- GetSystemDirectoryW (Address: 0x1801ca540)
- GetSystemTime (Address: 0x1801ca538)
- GetSystemTimeAsFileTime (Address: 0x1801ca520)
- GetSystemWindowsDirectoryW (Address: 0x1801ca558)
- GetTickCount (Address: 0x1801ca528)
- GetTickCount64 (Address: 0x1801ca550)
- GetVersionExW (Address: 0x1801ca548)
api-ms-win-core-sysinfo-l1-2-0.dll
- SetComputerNameExW (Address: 0x1801ca568)
api-ms-win-core-threadpool-l1-2-0.dll
- CancelThreadpoolIo (Address: 0x1801ca5d8)
- CloseThreadpoolIo (Address: 0x1801ca580)
- CloseThreadpoolTimer (Address: 0x1801ca5c0)
- CloseThreadpoolWait (Address: 0x1801ca5a0)
- CreateThreadpoolIo (Address: 0x1801ca5c8)
- CreateThreadpoolTimer (Address: 0x1801ca5a8)
- CreateThreadpoolWait (Address: 0x1801ca578)
- SetThreadpoolTimer (Address: 0x1801ca588)
- SetThreadpoolWait (Address: 0x1801ca590)
- StartThreadpoolIo (Address: 0x1801ca5d0)
- WaitForThreadpoolIoCallbacks (Address: 0x1801ca5b8)
- WaitForThreadpoolTimerCallbacks (Address: 0x1801ca5b0)
- WaitForThreadpoolWaitCallbacks (Address: 0x1801ca598)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- QueueUserWorkItem (Address: 0x1801ca5e8)
- UnregisterWaitEx (Address: 0x1801ca5f0)
api-ms-win-core-timezone-l1-1-0.dll
- EnumDynamicTimeZoneInformation (Address: 0x1801ca618)
- FileTimeToSystemTime (Address: 0x1801ca610)
- GetDynamicTimeZoneInformation (Address: 0x1801ca608)
- GetTimeZoneInformation (Address: 0x1801ca600)
- SystemTimeToFileTime (Address: 0x1801ca620)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1801ca630)
- EncodePointer (Address: 0x1801ca638)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x1801ca648)
- RoFailFastWithErrorContext (Address: 0x1801ca650)
- RoOriginateError (Address: 0x1801ca670)
- RoOriginateErrorW (Address: 0x1801ca658)
- RoTransformError (Address: 0x1801ca660)
- SetRestrictedErrorInfo (Address: 0x1801ca668)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x1801ca688)
- RoGetMatchingRestrictedErrorInfo (Address: 0x1801ca690)
- RoReportFailedDelegate (Address: 0x1801ca680)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1801ca6b0)
- RoGetActivationFactory (Address: 0x1801ca6a8)
- RoInitialize (Address: 0x1801ca6b8)
- RoUninitialize (Address: 0x1801ca6a0)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x1801ca6d8)
- WindowsConcatString (Address: 0x1801ca6c8)
- WindowsCreateString (Address: 0x1801ca700)
- WindowsCreateStringReference (Address: 0x1801ca6d0)
- WindowsDeleteString (Address: 0x1801ca708)
- WindowsDuplicateString (Address: 0x1801ca6f0)
- WindowsGetStringLen (Address: 0x1801ca6e0)
- WindowsGetStringRawBuffer (Address: 0x1801ca710)
- WindowsIsStringEmpty (Address: 0x1801ca720)
- WindowsStringHasEmbeddedNull (Address: 0x1801ca718)
- WindowsSubstringWithSpecifiedLength (Address: 0x1801ca6e8)
- WindowsTrimStringStart (Address: 0x1801ca6f8)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1801ca888)
- __current_exception (Address: 0x1801ca890)
- __current_exception_context (Address: 0x1801ca898)
- __CxxFrameHandler3 (Address: 0x1801ca8a0)
- __CxxFrameHandler4 (Address: 0x1801ca988)
- __std_terminate (Address: 0x1801ca980)
- _CxxThrowException (Address: 0x1801ca8a8)
- _o___std_exception_copy (Address: 0x1801ca978)
- _o___std_exception_destroy (Address: 0x1801ca970)
- _o___std_type_info_destroy_list (Address: 0x1801ca968)
- _o___stdio_common_vsnprintf_s (Address: 0x1801ca940)
- _o___stdio_common_vsnwprintf_s (Address: 0x1801ca938)
- _o___stdio_common_vsprintf_s (Address: 0x1801ca930)
- _o___stdio_common_vswprintf (Address: 0x1801ca928)
- _o___stdio_common_vswprintf_s (Address: 0x1801ca920)
- _o___stdio_common_vswscanf (Address: 0x1801ca918)
- _o__callnewh (Address: 0x1801ca910)
- _o__cexit (Address: 0x1801ca908)
- _o__configure_narrow_argv (Address: 0x1801ca900)
- _o__crt_atexit (Address: 0x1801ca8f8)
- _o__errno (Address: 0x1801ca8f0)
- _o__execute_onexit_table (Address: 0x1801ca8e8)
- _o__fseeki64 (Address: 0x1801ca8e0)
- _o__initialize_narrow_environment (Address: 0x1801ca8c8)
- _o__initialize_onexit_table (Address: 0x1801ca8c0)
- _o__invalid_parameter_noinfo (Address: 0x1801ca8b8)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1801ca8b0)
- _o__itow_s (Address: 0x1801ca8d0)
- _o__lock_file (Address: 0x1801ca8d8)
- _o__mbslen (Address: 0x1801ca730)
- _o__purecall (Address: 0x1801ca738)
- _o__register_onexit_function (Address: 0x1801ca740)
- _o__seh_filter_dll (Address: 0x1801ca748)
- _o__set_errno (Address: 0x1801ca750)
- _o__ui64tow_s (Address: 0x1801ca758)
- _o__unlock_file (Address: 0x1801ca760)
- _o__wcsdup (Address: 0x1801ca768)
- _o__wcsicmp (Address: 0x1801ca770)
- _o__wcsnicmp (Address: 0x1801ca778)
- _o__wcstoi64 (Address: 0x1801ca780)
- _o__wcstoui64 (Address: 0x1801ca788)
- _o__wtoi (Address: 0x1801ca790)
- _o_ceilf (Address: 0x1801ca798)
- _o_fclose (Address: 0x1801ca7a0)
- _o_fflush (Address: 0x1801ca7b0)
- _o_fgetc (Address: 0x1801ca7b8)
- _o_fgetpos (Address: 0x1801ca7c0)
- _o_fgetwc (Address: 0x1801ca7c8)
- _o_fputwc (Address: 0x1801ca7d0)
- _o_free (Address: 0x1801ca7d8)
- _o_fsetpos (Address: 0x1801ca7e0)
- _o_fwrite (Address: 0x1801ca7e8)
- _o_iswdigit (Address: 0x1801ca7f0)
- _o_iswspace (Address: 0x1801ca7f8)
- _o_log10 (Address: 0x1801ca800)
- _o_malloc (Address: 0x1801ca808)
- _o_mbstowcs_s (Address: 0x1801ca810)
- _o_realloc (Address: 0x1801ca818)
- _o_setvbuf (Address: 0x1801ca820)
- _o_strncpy_s (Address: 0x1801ca828)
- _o_strtol (Address: 0x1801ca830)
- _o_terminate (Address: 0x1801ca838)
- _o_towlower (Address: 0x1801ca840)
- _o_towupper (Address: 0x1801ca848)
- _o_ungetc (Address: 0x1801ca850)
- _o_ungetwc (Address: 0x1801ca858)
- _o_wcscpy_s (Address: 0x1801ca860)
- _o_wcsncpy_s (Address: 0x1801ca868)
- _o_wcstok_s (Address: 0x1801ca870)
- _o_wcstol (Address: 0x1801ca878)
- _o_wcstoul (Address: 0x1801ca880)
- memcmp (Address: 0x1801ca990)
- memcpy (Address: 0x1801ca998)
- memmove (Address: 0x1801ca7a8)
- strchr (Address: 0x1801ca958)
- strrchr (Address: 0x1801ca950)
- wcschr (Address: 0x1801ca948)
- wcsstr (Address: 0x1801ca960)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1801ca9b0)
- _initterm_e (Address: 0x1801ca9a8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1801ca9d0)
- wcscmp (Address: 0x1801ca9c0)
- wcsncmp (Address: 0x1801ca9c8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1801caa00)
- EventRegister (Address: 0x1801ca9e0)
- EventSetInformation (Address: 0x1801ca9f8)
- EventUnregister (Address: 0x1801ca9e8)
- EventWriteTransfer (Address: 0x1801ca9f0)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
- MsgWaitForMultipleObjectsEx (Address: 0x1801caa10)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x1801caa30)
- DuplicateToken (Address: 0x1801caa48)
- DuplicateTokenEx (Address: 0x1801caa38)
- EqualSid (Address: 0x1801caa20)
- FreeSid (Address: 0x1801caa40)
- GetTokenInformation (Address: 0x1801caa50)
- RevertToSelf (Address: 0x1801caa28)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1801caa60)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1801caa68)
- ConvertStringSidToSidW (Address: 0x1801caa70)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
- CreateRandomAccessStreamOnFile (Address: 0x1801caa88)
- CreateRandomAccessStreamOverStream (Address: 0x1801caa80)
- CreateStreamOverRandomAccessStream (Address: 0x1801caa90)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x1801caaa8)
- SHTaskPoolQueueTask (Address: 0x1801caaa0)
Bcp47Langs.dll
- Bcp47GetDirectionality (Address: 0x1801c9c50)
ConsoleGlobalization.dll
- GetConsoleGeographicRegion (Address: 0x1801c9c88)
- GetConsolePreferredLanguages (Address: 0x1801c9cc0)
- GetConsolePreferredSpokenLanguage (Address: 0x1801c9ca8)
- GetConsoleTimeZone (Address: 0x1801c9c98)
- SetConsoleGeographicRegion (Address: 0x1801c9c90)
- SetConsolePreferredLanguages (Address: 0x1801c9cb8)
- SetConsolePreferredSpokenLanguage (Address: 0x1801c9cb0)
- SetConsoleTimeZone (Address: 0x1801c9ca0)
CRYPT32.dll
- CertFreeCertificateChain (Address: 0x1801c9c78)
- CertFreeCertificateContext (Address: 0x1801c9c70)
- CertGetCertificateChain (Address: 0x1801c9c68)
- CertGetCertificateContextProperty (Address: 0x1801c9c60)
cryptdll.dll
- MD5Final (Address: 0x1801caab8)
- MD5Init (Address: 0x1801caac0)
- MD5Update (Address: 0x1801caac8)
DiagnosticDataSettings.dll
- TelEvaluateActiveSettingAuthority (Address: 0x1801c9ce0)
DNSAPI.dll
- DnsValidateName_W (Address: 0x1801c9cd0)
gamingtelemetry.dll
- GetDeviceInteractionVector (Address: 0x1801caaf8)
- OverrideTagsForEvent (Address: 0x1801cab40)
- RegisterGamingTelemetryProvider (Address: 0x1801cab48)
- SetExtendedDataString (Address: 0x1801caae8)
- SetGtlActiveUserId (Address: 0x1801caae0)
- SetGtlCorrelationVector (Address: 0x1801caaf0)
- StartGamingTelemetrySession (Address: 0x1801cab00)
- StopGamingTelemetrySession (Address: 0x1801cab08)
- TelemetryWriteContentUpdate (Address: 0x1801cab20)
- TelemetryWriteCustomJsonEvent (Address: 0x1801cab30)
- TelemetryWriteCustomJsonEventWithGroupIdType (Address: 0x1801cab38)
- TelemetryWriteError (Address: 0x1801cab28)
- TelemetryWritePageAction (Address: 0x1801cab10)
- TelemetryWritePageView (Address: 0x1801cab18)
- UnregisterGamingTelemetryProvider (Address: 0x1801caad8)
HTTPAPI.dll
- HttpAddUrlToUrlGroup (Address: 0x1801c9d70)
- HttpCloseRequestQueue (Address: 0x1801c9d30)
- HttpCloseServerSession (Address: 0x1801c9d38)
- HttpCloseUrlGroup (Address: 0x1801c9d68)
- HttpCreateRequestQueue (Address: 0x1801c9cf8)
- HttpCreateServerSession (Address: 0x1801c9d00)
- HttpCreateUrlGroup (Address: 0x1801c9cf0)
- HttpDeleteServiceConfiguration (Address: 0x1801c9d10)
- HttpInitialize (Address: 0x1801c9d60)
- HttpQueryServiceConfiguration (Address: 0x1801c9d08)
- HttpReceiveHttpRequest (Address: 0x1801c9d50)
- HttpReceiveRequestEntityBody (Address: 0x1801c9d48)
- HttpSendHttpResponse (Address: 0x1801c9d40)
- HttpSetServiceConfiguration (Address: 0x1801c9d18)
- HttpSetUrlGroupProperty (Address: 0x1801c9d58)
- HttpShutdownRequestQueue (Address: 0x1801c9d20)
- HttpTerminate (Address: 0x1801c9d28)
IPHLPAPI.DLL
- ConvertLengthToIpv4Mask (Address: 0x1801c9d98)
- FreeMibTable (Address: 0x1801c9d88)
- GetAdaptersAddresses (Address: 0x1801c9d90)
- GetIfTable2 (Address: 0x1801c9d80)
msvcp_win.dll
- _Mtx_destroy_in_situ (Address: 0x1801cabc8)
- _Mtx_init_in_situ (Address: 0x1801cac38)
- _Mtx_lock (Address: 0x1801cae10)
- _Mtx_unlock (Address: 0x1801cae38)
- _Wcscoll (Address: 0x1801cabe0)
- _Wcsxfrm (Address: 0x1801cabd8)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1801cab68)
- ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z (Address: 0x1801cadc0)
- ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1801cac80)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1801cab98)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x1801cada0)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1801cabc0)
- ?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1801cae08)
- ?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1801cac60)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1801cab60)
- ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ (Address: 0x1801cae00)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1801cabd0)
- ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x1801cadd0)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1801caca8)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x1801cad38)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1801cace0)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x1801cae28)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1801caca0)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x1801cad80)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1801cadb0)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x1801cadb8)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1801cad88)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1801cabf8)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1801caba8)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x1801cada8)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x1801cabf0)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1801cacc0)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x1801cac08)
- ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1801cac40)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1801cacb8)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1801cad58)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x1801cab70)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x1801cac58)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x1801cabe8)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1801cac48)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1801cac10)
- ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1801cac50)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1801cae58)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1801cacb0)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x1801cab78)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x1801cad08)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1801cacd8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x1801cac00)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x1801cae50)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1801cae40)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x1801cab58)
- ?always_noconv@codecvt_base@std@@QEBA_NXZ (Address: 0x1801cae30)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x1801caba0)
- ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1801cad28)
- ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1801cad10)
- ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1801cacf0)
- ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x1801cacc8)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x1801cac20)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x1801cad30)
- ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x1801cad00)
- ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ (Address: 0x1801cadf8)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1801cad68)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x1801cac18)
- ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1801cad20)
- ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1801cadc8)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x1801cabb0)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x1801cabb8)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1801cae48)
- ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z (Address: 0x1801cad98)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x1801cab80)
- ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z (Address: 0x1801cae18)
- ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1801cad50)
- ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1801cad18)
- ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x1801cacd0)
- ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1801cade0)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x1801cac70)
- ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x1801cad90)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1801cacf8)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x1801cad48)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1801cace8)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x1801cae60)
- ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1801cade8)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x1801cac98)
- ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1801cadd8)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x1801cad60)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x1801cad70)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x1801cac68)
- ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x1801cad40)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x1801cab88)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x1801cab90)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x1801cac90)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1801cad78)
- ?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z (Address: 0x1801cae20)
- ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z (Address: 0x1801cadf0)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1801cac30)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x1801cac28)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x1801cac88)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x1801cac78)
ncrypt.dll
- NCryptFreeObject (Address: 0x1801cae88)
- NCryptImportKey (Address: 0x1801cae78)
- NCryptOpenStorageProvider (Address: 0x1801cae70)
- NCryptVerifySignature (Address: 0x1801cae80)
ntdll.dll
- DbgPrintEx (Address: 0x1801caec0)
- NtQueryInformationToken (Address: 0x1801caea8)
- NtQuerySystemInformation (Address: 0x1801cae98)
- NtQueryWnfStateData (Address: 0x1801caef0)
- RtlAllocateHeap (Address: 0x1801caed0)
- RtlCapabilityCheck (Address: 0x1801caee8)
- RtlCaptureContext (Address: 0x1801caf20)
- RtlCompareUnicodeString (Address: 0x1801caf40)
- RtlDeriveCapabilitySidsFromName (Address: 0x1801caf28)
- RtlEqualSid (Address: 0x1801caf10)
- RtlFreeHeap (Address: 0x1801caeb0)
- RtlGetDeviceFamilyInfoEnum (Address: 0x1801caec8)
- RtlInitUnicodeString (Address: 0x1801caea0)
- RtlIpv4AddressToStringExW (Address: 0x1801caed8)
- RtlLookupFunctionEntry (Address: 0x1801caf18)
- RtlNtStatusToDosErrorNoTeb (Address: 0x1801caf30)
- RtlPublishWnfStateData (Address: 0x1801caf00)
- RtlQueryWnfStateData (Address: 0x1801caeb8)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1801caee0)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1801caef8)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x1801caf38)
- RtlVirtualUnwind (Address: 0x1801caf08)
OLEAUT32.dll
- SysAllocString (Address: 0x1801c9db0)
- SysFreeString (Address: 0x1801c9da8)
RPCRT4.dll
- I_RpcExceptionFilter (Address: 0x1801c9df8)
- NdrClientCall3 (Address: 0x1801c9dc0)
- RpcBindingFree (Address: 0x1801c9e00)
- RpcBindingFromStringBindingW (Address: 0x1801c9de8)
- RpcServerInqCallAttributesW (Address: 0x1801c9df0)
- RpcStringBindingComposeW (Address: 0x1801c9de0)
- RpcStringFreeW (Address: 0x1801c9dd0)
- UuidCreate (Address: 0x1801c9dd8)
- UuidCreateSequential (Address: 0x1801c9dc8)
SspiCli.dll
- LogonUserExExW (Address: 0x1801c9e10)
USERENV.dll
- (Address: 0x1801c9e20)
WINHTTP.dll
- WinHttpAddRequestHeaders (Address: 0x1801c9e30)
- WinHttpCloseHandle (Address: 0x1801c9e80)
- WinHttpConnect (Address: 0x1801c9e48)
- WinHttpCrackUrl (Address: 0x1801c9e88)
- WinHttpOpen (Address: 0x1801c9e90)
- WinHttpOpenRequest (Address: 0x1801c9e60)
- WinHttpQueryDataAvailable (Address: 0x1801c9e58)
- WinHttpQueryHeaders (Address: 0x1801c9e78)
- WinHttpQueryOption (Address: 0x1801c9e68)
- WinHttpReadData (Address: 0x1801c9e98)
- WinHttpReceiveResponse (Address: 0x1801c9ea0)
- WinHttpSendRequest (Address: 0x1801c9e50)
- WinHttpSetOption (Address: 0x1801c9e40)
- WinHttpSetStatusCallback (Address: 0x1801c9e70)
- WinHttpSetTimeouts (Address: 0x1801c9e38)
WS2_32.dll
- inet_addr (Address: 0x1801c9ed0)
- WSAAddressToStringW (Address: 0x1801c9eb0)
- WSACleanup (Address: 0x1801c9ec8)
- WSAGetLastError (Address: 0x1801c9eb8)
- WSAStartup (Address: 0x1801c9ec0)
xamapi.dll
- XamApiDisableLayoutScaling (Address: 0x1801caf50)
XboxFrontPanel.dll
- GetDefaultXboxFrontPanel (Address: 0x1801c9f20)
XboxLiveTitleId.dll
- GetSystemXboxLiveInfo (Address: 0x1801c9f30)
XCRDAPI.dll
- XCrdBuildPath (Address: 0x1801c9f10)
- XCrdCloseAdapter (Address: 0x1801c9f00)
- XCrdFreeDevicePathBuffer (Address: 0x1801c9ee0)
- XCrdOpenAdapter (Address: 0x1801c9f08)
- XCrdParsePath (Address: 0x1801c9ef8)
- XCrdQueryCrdInformation (Address: 0x1801c9ef0)
- XCrdQueryXvdInformation (Address: 0x1801c9ee8)