wpnapps.dll
Description: Windows Push Notification Apps
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6216
Architecture: 64-bit
Operating System: Windows NT
SHA256: ff480c076df41e5d18b3b98a8ee869c1
File Size: 1.3 MB
Uploaded At: Dec. 1, 2025, 7:45 a.m.
Views: 4
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x1b3d0)
- DllGetActivationFactory (Ordinal: 2, Address: 0x17b30)
- DllGetClassObject (Ordinal: 3, Address: 0x17890)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800f7c48)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x1800f7cf0)
- CStdStubBuffer2_CountRefs (Address: 0x1800f7d18)
- CStdStubBuffer2_Disconnect (Address: 0x1800f7d10)
- CStdStubBuffer2_QueryInterface (Address: 0x1800f7cc8)
- NdrProxyForwardingFunction3 (Address: 0x1800f7d20)
- NdrProxyForwardingFunction4 (Address: 0x1800f7cc0)
- NdrProxyForwardingFunction5 (Address: 0x1800f7c88)
- ObjectStublessClient10 (Address: 0x1800f7d08)
- ObjectStublessClient11 (Address: 0x1800f7d00)
- ObjectStublessClient12 (Address: 0x1800f7ce8)
- ObjectStublessClient13 (Address: 0x1800f7cb8)
- ObjectStublessClient14 (Address: 0x1800f7c80)
- ObjectStublessClient15 (Address: 0x1800f7c98)
- ObjectStublessClient16 (Address: 0x1800f7d30)
- ObjectStublessClient17 (Address: 0x1800f7cd8)
- ObjectStublessClient18 (Address: 0x1800f7c68)
- ObjectStublessClient19 (Address: 0x1800f7cd0)
- ObjectStublessClient20 (Address: 0x1800f7c70)
- ObjectStublessClient21 (Address: 0x1800f7d28)
- ObjectStublessClient22 (Address: 0x1800f7c58)
- ObjectStublessClient23 (Address: 0x1800f7ca0)
- ObjectStublessClient24 (Address: 0x1800f7ce0)
- ObjectStublessClient25 (Address: 0x1800f7c78)
- ObjectStublessClient3 (Address: 0x1800f7c60)
- ObjectStublessClient6 (Address: 0x1800f7cf8)
- ObjectStublessClient7 (Address: 0x1800f7cb0)
- ObjectStublessClient8 (Address: 0x1800f7ca8)
- ObjectStublessClient9 (Address: 0x1800f7c90)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800f7d48)
- IsDebuggerPresent (Address: 0x1800f7d50)
- OutputDebugStringW (Address: 0x1800f7d40)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1800f7d60)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1800f7d70)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800f7d88)
- RaiseException (Address: 0x1800f7d98)
- SetLastError (Address: 0x1800f7d90)
- SetUnhandledExceptionFilter (Address: 0x1800f7d80)
- UnhandledExceptionFilter (Address: 0x1800f7da0)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1800f7db0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800f7dc0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800f7dd8)
- HeapAlloc (Address: 0x1800f7dd0)
- HeapFree (Address: 0x1800f7de0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800f7df8)
- LocalFree (Address: 0x1800f7df0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800f7e08)
- InterlockedFlushSList (Address: 0x1800f7e10)
- InterlockedPushEntrySList (Address: 0x1800f7e18)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1800f7e60)
- FindResourceExW (Address: 0x1800f7e38)
- GetModuleFileNameA (Address: 0x1800f7e30)
- GetModuleHandleExW (Address: 0x1800f7e68)
- GetModuleHandleW (Address: 0x1800f7e70)
- GetProcAddress (Address: 0x1800f7e28)
- LoadResource (Address: 0x1800f7e48)
- LoadStringW (Address: 0x1800f7e58)
- LockResource (Address: 0x1800f7e50)
- SizeofResource (Address: 0x1800f7e40)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800f7e80)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800f7e90)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1800f7ed8)
- GetCurrentProcessId (Address: 0x1800f7eb0)
- GetCurrentThread (Address: 0x1800f7ec8)
- GetCurrentThreadId (Address: 0x1800f7ea0)
- GetProcessId (Address: 0x1800f7ea8)
- OpenProcessToken (Address: 0x1800f7eb8)
- OpenThreadToken (Address: 0x1800f7ec0)
- TerminateProcess (Address: 0x1800f7ed0)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1800f7ef0)
- OpenProcess (Address: 0x1800f7ee8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800f7f00)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1800f7f10)
api-ms-win-core-quirks-l1-1-0.dll
- QuirkIsEnabledForPackage (Address: 0x1800f7f20)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800f7f30)
- RegEnumKeyExW (Address: 0x1800f7f38)
- RegGetValueW (Address: 0x1800f7f48)
- RegOpenKeyExW (Address: 0x1800f7f40)
- RegQueryInfoKeyW (Address: 0x1800f7f58)
- RegQueryValueExW (Address: 0x1800f7f50)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800f7f70)
- RtlLookupFunctionEntry (Address: 0x1800f7f78)
- RtlVirtualUnwind (Address: 0x1800f7f68)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFindFileNameW (Address: 0x1800f7f98)
- PathIsFileSpecW (Address: 0x1800f7f88)
- PathIsValidCharW (Address: 0x1800f7f90)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x1800f7fb8)
- MultiByteToWideChar (Address: 0x1800f7fa8)
- WideCharToMultiByte (Address: 0x1800f7fb0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800f8068)
- AcquireSRWLockShared (Address: 0x1800f7fe8)
- CreateEventExW (Address: 0x1800f8030)
- CreateEventW (Address: 0x1800f7ff8)
- CreateMutexExW (Address: 0x1800f7fc8)
- CreateSemaphoreExW (Address: 0x1800f8038)
- DeleteCriticalSection (Address: 0x1800f8040)
- EnterCriticalSection (Address: 0x1800f7fe0)
- InitializeCriticalSection (Address: 0x1800f8008)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800f7fd0)
- InitializeCriticalSectionEx (Address: 0x1800f7ff0)
- InitializeSRWLock (Address: 0x1800f7fd8)
- LeaveCriticalSection (Address: 0x1800f8048)
- OpenSemaphoreW (Address: 0x1800f8020)
- ReleaseMutex (Address: 0x1800f8018)
- ReleaseSemaphore (Address: 0x1800f8028)
- ReleaseSRWLockExclusive (Address: 0x1800f8050)
- ReleaseSRWLockShared (Address: 0x1800f8070)
- ResetEvent (Address: 0x1800f8000)
- SetEvent (Address: 0x1800f8058)
- WaitForSingleObject (Address: 0x1800f8010)
- WaitForSingleObjectEx (Address: 0x1800f8060)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1800f8090)
- InitOnceComplete (Address: 0x1800f8098)
- InitOnceExecuteOnce (Address: 0x1800f8080)
- Sleep (Address: 0x1800f8088)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1800f80b0)
- GetTickCount (Address: 0x1800f80b8)
- GetTickCount64 (Address: 0x1800f80a8)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1800f80d0)
- CreateThreadpoolTimer (Address: 0x1800f80d8)
- SetThreadpoolTimer (Address: 0x1800f80e0)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800f80c8)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1800f80f8)
- EncodePointer (Address: 0x1800f80f0)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
- RoCreatePropertySetSerializer (Address: 0x1800f8108)
api-ms-win-crt-math-l1-1-0.dll
- _fdtest (Address: 0x1800f8118)
- ceilf (Address: 0x1800f8120)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1800f81f0)
- __CxxFrameHandler3 (Address: 0x1800f81e8)
- __CxxFrameHandler4 (Address: 0x1800f8240)
- __std_terminate (Address: 0x1800f8238)
- _CxxThrowException (Address: 0x1800f8200)
- _o___std_exception_copy (Address: 0x1800f8210)
- _o___std_exception_destroy (Address: 0x1800f8208)
- _o___std_type_info_destroy_list (Address: 0x1800f81f8)
- _o___stdio_common_vsnprintf_s (Address: 0x1800f8270)
- _o___stdio_common_vsprintf_s (Address: 0x1800f8260)
- _o___stdio_common_vswprintf (Address: 0x1800f8258)
- _o___stdio_common_vswscanf (Address: 0x1800f8250)
- _o__callnewh (Address: 0x1800f8278)
- _o__cexit (Address: 0x1800f8268)
- _o__configure_narrow_argv (Address: 0x1800f8220)
- _o__crt_atexit (Address: 0x1800f8218)
- _o__errno (Address: 0x1800f8130)
- _o__execute_onexit_table (Address: 0x1800f8138)
- _o__get_errno (Address: 0x1800f8140)
- _o__initialize_narrow_environment (Address: 0x1800f8148)
- _o__initialize_onexit_table (Address: 0x1800f8150)
- _o__invalid_parameter_noinfo (Address: 0x1800f8158)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1800f8160)
- _o__itow_s (Address: 0x1800f8168)
- _o__purecall (Address: 0x1800f8170)
- _o__register_onexit_function (Address: 0x1800f8178)
- _o__seh_filter_dll (Address: 0x1800f8180)
- _o__set_errno (Address: 0x1800f8188)
- _o__wcsicmp (Address: 0x1800f8198)
- _o_free (Address: 0x1800f81a0)
- _o_iswspace (Address: 0x1800f81a8)
- _o_malloc (Address: 0x1800f81b0)
- _o_realloc (Address: 0x1800f81b8)
- _o_strncpy_s (Address: 0x1800f81c0)
- _o_strtol (Address: 0x1800f81c8)
- _o_terminate (Address: 0x1800f81d0)
- _o_toupper (Address: 0x1800f81d8)
- _o_wcstoul (Address: 0x1800f81e0)
- memcmp (Address: 0x1800f8280)
- memcpy (Address: 0x1800f8288)
- memmove (Address: 0x1800f8190)
- strchr (Address: 0x1800f8230)
- wcschr (Address: 0x1800f8228)
- wcsrchr (Address: 0x1800f8248)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800f8298)
- _initterm_e (Address: 0x1800f82a0)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1800f82b0)
- wcscmp (Address: 0x1800f82b8)
- wcsncmp (Address: 0x1800f82c0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x1800f82e8)
- GetTraceEnableLevel (Address: 0x1800f82e0)
- GetTraceLoggerHandle (Address: 0x1800f82d0)
- RegisterTraceGuidsW (Address: 0x1800f82f8)
- TraceMessage (Address: 0x1800f82d8)
- UnregisterTraceGuids (Address: 0x1800f82f0)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1800f8330)
- EventProviderEnabled (Address: 0x1800f8320)
- EventRegister (Address: 0x1800f8308)
- EventSetInformation (Address: 0x1800f8310)
- EventUnregister (Address: 0x1800f8318)
- EventWriteTransfer (Address: 0x1800f8328)
api-ms-win-rtcore-ntuser-shell-l1-1-0.dll
- GetShellWindow (Address: 0x1800f8340)
api-ms-win-security-base-l1-1-0.dll
- DuplicateTokenEx (Address: 0x1800f8368)
- GetSidSubAuthority (Address: 0x1800f8360)
- GetSidSubAuthorityCount (Address: 0x1800f8370)
- GetTokenInformation (Address: 0x1800f8350)
- IsWellKnownSid (Address: 0x1800f8358)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x1800f8380)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x1800f8398)
- SHTaskPoolQueueTask (Address: 0x1800f8390)
combase.dll
- (Address: 0x1800f83b8)
- (Address: 0x1800f83b0)
- (Address: 0x1800f83a8)
msvcp_win.dll
- _Query_perf_counter (Address: 0x1800f8600)
- _Query_perf_frequency (Address: 0x1800f85d0)
- _Wcscoll (Address: 0x1800f8428)
- _Wcsxfrm (Address: 0x1800f83f8)
- ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x1800f8588)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x1800f8520)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x1800f8478)
- ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x1800f85a8)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x1800f8490)
- ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x1800f8508)
- ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x1800f8500)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1800f8510)
- ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x1800f8498)
- ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800f84f0)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x1800f8458)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800f8608)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1800f84d8)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800f8550)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800f8488)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x1800f84b0)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x1800f8598)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800f84a0)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800f8528)
- ?_XGetLastError@std@@YAXXZ (Address: 0x1800f8580)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800f8620)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1800f8450)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x1800f8578)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800f8618)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1800f8610)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x1800f8468)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1800f83e0)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x1800f85c8)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x1800f8518)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x1800f8530)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800f83e8)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800f85b8)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800f8590)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x1800f8548)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800f85f0)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x1800f8538)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800f83d0)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800f83c8)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800f8420)
- ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x1800f8480)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x1800f8570)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800f84c8)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x1800f85a0)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1800f85e8)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x1800f84e8)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800f85e0)
- ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x1800f8470)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1800f85f8)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800f8408)
- ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x1800f84f8)
- ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800f84d0)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800f85b0)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x1800f84c0)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x1800f8410)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1800f83f0)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x1800f83d8)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1800f8430)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x1800f8540)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x1800f8438)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x1800f8560)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x1800f8400)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x1800f84b8)
- ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x1800f84e0)
- ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x1800f8448)
- ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x1800f8440)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x1800f85d8)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1800f84a8)
- ?widen@?$ctype@G@std@@QEBAGD@Z (Address: 0x1800f85c0)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1800f8558)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x1800f8568)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x1800f8418)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x1800f8460)
ntdll.dll
- NtQueryInformationToken (Address: 0x1800f8638)
- NtQuerySystemInformation (Address: 0x1800f8688)
- NtQueryWnfStateData (Address: 0x1800f8668)
- RtlAllocateHeap (Address: 0x1800f8640)
- RtlCompareUnicodeString (Address: 0x1800f8650)
- RtlFreeHeap (Address: 0x1800f8630)
- RtlGetDeviceFamilyInfoEnum (Address: 0x1800f8670)
- RtlInitUnicodeString (Address: 0x1800f8680)
- RtlIsMultiUsersInSessionSku (Address: 0x1800f8658)
- RtlNtStatusToDosErrorNoTeb (Address: 0x1800f8648)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800f8660)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800f8690)
- WinSqmAddToStreamEx (Address: 0x1800f8678)
RMCLIENT.dll
- RmAccessCheck (Address: 0x1800f7b50)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1800f7b88)
- CStdStubBuffer_Connect (Address: 0x1800f7bf8)
- CStdStubBuffer_CountRefs (Address: 0x1800f7b70)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800f7b90)
- CStdStubBuffer_DebugServerRelease (Address: 0x1800f7b78)
- CStdStubBuffer_Disconnect (Address: 0x1800f7ba8)
- CStdStubBuffer_Invoke (Address: 0x1800f7bd0)
- CStdStubBuffer_IsIIDSupported (Address: 0x1800f7bc8)
- CStdStubBuffer_QueryInterface (Address: 0x1800f7b80)
- I_RpcBindingInqLocalClientPID (Address: 0x1800f7b60)
- IUnknown_AddRef_Proxy (Address: 0x1800f7c10)
- IUnknown_QueryInterface_Proxy (Address: 0x1800f7bb8)
- IUnknown_Release_Proxy (Address: 0x1800f7b68)
- NdrCStdStubBuffer_Release (Address: 0x1800f7b98)
- NdrCStdStubBuffer2_Release (Address: 0x1800f7c08)
- NdrDllCanUnloadNow (Address: 0x1800f7bf0)
- NdrDllGetClassObject (Address: 0x1800f7be8)
- NdrOleAllocate (Address: 0x1800f7ba0)
- NdrOleFree (Address: 0x1800f7c00)
- NdrStubCall3 (Address: 0x1800f7bc0)
- NdrStubForwardingFunction (Address: 0x1800f7be0)
- RpcServerInqCallAttributesW (Address: 0x1800f7bb0)
- UuidCreate (Address: 0x1800f7bd8)
SHCORE.dll
- (Address: 0x1800f7c20)
twinapi.appcore.dll
- (Address: 0x1800f86a0)
- (Address: 0x1800f86a8)
XmlLite.dll
- CreateXmlReader (Address: 0x1800f7c30)
- CreateXmlReaderInputWithEncodingCodePage (Address: 0x1800f7c38)