wwansvc.dll

Description: WWAN Auto Config Service

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 52dd41815acdcb43a1efb17eec606578

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • SvchostPushServiceGlobals (Ordinal: 1, Address: 0xd310)
  • WwanSvcMain (Ordinal: 2, Address: 0xd320)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800e46f0)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1800e4710)
  • CoCreateFreeThreadedMarshaler (Address: 0x1800e4750)
  • CoCreateGuid (Address: 0x1800e4760)
  • CoCreateInstance (Address: 0x1800e4768)
  • CoDecrementMTAUsage (Address: 0x1800e4718)
  • CoIncrementMTAUsage (Address: 0x1800e4730)
  • CoInitializeEx (Address: 0x1800e4708)
  • CoTaskMemAlloc (Address: 0x1800e4740)
  • CoTaskMemFree (Address: 0x1800e4738)
  • CoUninitialize (Address: 0x1800e4720)
  • CoWaitForMultipleHandles (Address: 0x1800e4758)
  • IIDFromString (Address: 0x1800e4700)
  • StringFromCLSID (Address: 0x1800e4748)
  • StringFromGUID2 (Address: 0x1800e4728)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800e4788)
  • IsDebuggerPresent (Address: 0x1800e4778)
  • OutputDebugStringW (Address: 0x1800e4780)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800e4798)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800e47a8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800e47d0)
  • RaiseException (Address: 0x1800e47d8)
  • SetLastError (Address: 0x1800e47c8)
  • SetUnhandledExceptionFilter (Address: 0x1800e47c0)
  • UnhandledExceptionFilter (Address: 0x1800e47b8)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x1800e47e8)
  • CreateFileW (Address: 0x1800e47f8)
  • DeleteFileW (Address: 0x1800e47f0)
  • GetFileAttributesW (Address: 0x1800e4810)
  • GetFullPathNameW (Address: 0x1800e4800)
  • ReadFile (Address: 0x1800e4820)
  • SetFileAttributesW (Address: 0x1800e4808)
  • WriteFile (Address: 0x1800e4818)
api-ms-win-core-file-l2-1-0.dll
  • ReplaceFileW (Address: 0x1800e4830)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800e4840)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800e4858)
  • HeapAlloc (Address: 0x1800e4860)
  • HeapFree (Address: 0x1800e4850)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800e4870)
  • LocalFree (Address: 0x1800e4878)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800e4888)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800e4898)
  • GetOverlappedResult (Address: 0x1800e48a0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • MoveFileW (Address: 0x1800e48b0)
  • RegisterWaitForSingleObject (Address: 0x1800e48b8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800e48f0)
  • FreeLibrary (Address: 0x1800e48f8)
  • GetModuleFileNameA (Address: 0x1800e4900)
  • GetModuleHandleExW (Address: 0x1800e48d8)
  • GetModuleHandleW (Address: 0x1800e48c8)
  • GetProcAddress (Address: 0x1800e48e0)
  • LoadLibraryExW (Address: 0x1800e48e8)
  • LoadStringW (Address: 0x1800e48d0)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800e4910)
api-ms-win-core-namedpipe-l1-1-0.dll
  • ConnectNamedPipe (Address: 0x1800e4920)
  • CreateNamedPipeW (Address: 0x1800e4928)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800e4938)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800e4970)
  • GetCurrentProcess (Address: 0x1800e4958)
  • GetCurrentProcessId (Address: 0x1800e4980)
  • GetCurrentThread (Address: 0x1800e4950)
  • GetCurrentThreadId (Address: 0x1800e4968)
  • OpenProcessToken (Address: 0x1800e4978)
  • OpenThreadToken (Address: 0x1800e4960)
  • TerminateProcess (Address: 0x1800e4948)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800e4998)
  • OpenProcess (Address: 0x1800e4990)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800e49a8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800e49f8)
  • RegCreateKeyExW (Address: 0x1800e49e0)
  • RegDeleteKeyExW (Address: 0x1800e49b8)
  • RegDeleteTreeW (Address: 0x1800e49e8)
  • RegEnumKeyExW (Address: 0x1800e49c0)
  • RegGetValueW (Address: 0x1800e49d8)
  • RegNotifyChangeKeyValue (Address: 0x1800e49d0)
  • RegOpenKeyExW (Address: 0x1800e49c8)
  • RegQueryInfoKeyW (Address: 0x1800e49f0)
  • RegQueryValueExW (Address: 0x1800e4a08)
  • RegSetValueExW (Address: 0x1800e4a00)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1800e4a20)
  • RegSetKeyValueW (Address: 0x1800e4a18)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x1800e4a30)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrStrIW (Address: 0x1800e4a40)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringEx (Address: 0x1800e4a60)
  • MultiByteToWideChar (Address: 0x1800e4a50)
  • WideCharToMultiByte (Address: 0x1800e4a58)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x1800e4a70)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpW (Address: 0x1800e4a80)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800e4ac0)
  • AcquireSRWLockShared (Address: 0x1800e4ae8)
  • CreateEventExW (Address: 0x1800e4b28)
  • CreateEventW (Address: 0x1800e4af8)
  • CreateMutexExW (Address: 0x1800e4ae0)
  • CreateSemaphoreExW (Address: 0x1800e4aa8)
  • DeleteCriticalSection (Address: 0x1800e4af0)
  • EnterCriticalSection (Address: 0x1800e4aa0)
  • InitializeCriticalSection (Address: 0x1800e4b10)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800e4b08)
  • InitializeCriticalSectionEx (Address: 0x1800e4a90)
  • LeaveCriticalSection (Address: 0x1800e4b30)
  • OpenSemaphoreW (Address: 0x1800e4ad0)
  • ReleaseMutex (Address: 0x1800e4ab0)
  • ReleaseSemaphore (Address: 0x1800e4b18)
  • ReleaseSRWLockExclusive (Address: 0x1800e4ab8)
  • ReleaseSRWLockShared (Address: 0x1800e4ad8)
  • ResetEvent (Address: 0x1800e4b20)
  • SetEvent (Address: 0x1800e4b00)
  • WaitForSingleObject (Address: 0x1800e4a98)
  • WaitForSingleObjectEx (Address: 0x1800e4ac8)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800e4b58)
  • InitOnceComplete (Address: 0x1800e4b50)
  • InitOnceExecuteOnce (Address: 0x1800e4b48)
  • Sleep (Address: 0x1800e4b40)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1800e4b68)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800e4b90)
  • GetSystemWindowsDirectoryW (Address: 0x1800e4b80)
  • GetTickCount (Address: 0x1800e4b78)
  • GetTickCount64 (Address: 0x1800e4b88)
api-ms-win-core-threadpool-l1-2-0.dll
  • CallbackMayRunLong (Address: 0x1800e4be0)
  • CloseThreadpoolCleanupGroup (Address: 0x1800e4bc8)
  • CloseThreadpoolCleanupGroupMembers (Address: 0x1800e4bd8)
  • CloseThreadpoolTimer (Address: 0x1800e4c08)
  • CloseThreadpoolWait (Address: 0x1800e4bc0)
  • CreateThreadpoolCleanupGroup (Address: 0x1800e4bb8)
  • CreateThreadpoolTimer (Address: 0x1800e4c00)
  • CreateThreadpoolWait (Address: 0x1800e4ba0)
  • IsThreadpoolTimerSet (Address: 0x1800e4be8)
  • SetThreadpoolTimer (Address: 0x1800e4bd0)
  • SetThreadpoolWait (Address: 0x1800e4bf8)
  • TrySubmitThreadpoolCallback (Address: 0x1800e4bf0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800e4bb0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800e4ba8)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • ChangeTimerQueueTimer (Address: 0x1800e4c40)
  • CreateTimerQueue (Address: 0x1800e4c30)
  • CreateTimerQueueTimer (Address: 0x1800e4c20)
  • DeleteTimerQueueEx (Address: 0x1800e4c18)
  • DeleteTimerQueueTimer (Address: 0x1800e4c38)
  • UnregisterWaitEx (Address: 0x1800e4c28)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800e4c50)
  • SystemTimeToFileTime (Address: 0x1800e4c58)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1800e4c68)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1800e4c78)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x1800e4c88)
  • WindowsCreateStringReference (Address: 0x1800e4c90)
  • WindowsGetStringRawBuffer (Address: 0x1800e4c98)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x1800e4ca8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800e4d98)
  • __CxxFrameHandler3 (Address: 0x1800e4d90)
  • __CxxFrameHandler4 (Address: 0x1800e4e38)
  • __std_terminate (Address: 0x1800e4e30)
  • __std_type_info_compare (Address: 0x1800e4e20)
  • _CxxThrowException (Address: 0x1800e4da0)
  • _o___std_exception_copy (Address: 0x1800e4e10)
  • _o___std_exception_destroy (Address: 0x1800e4e08)
  • _o___std_type_info_destroy_list (Address: 0x1800e4e00)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800e4df8)
  • _o___stdio_common_vsprintf (Address: 0x1800e4df0)
  • _o___stdio_common_vswprintf (Address: 0x1800e4de8)
  • _o___stdio_common_vswprintf_s (Address: 0x1800e4de0)
  • _o___stdio_common_vswscanf (Address: 0x1800e4dd8)
  • _o__callnewh (Address: 0x1800e4dd0)
  • _o__cexit (Address: 0x1800e4dc8)
  • _o__configure_narrow_argv (Address: 0x1800e4dc0)
  • _o__crt_atexit (Address: 0x1800e4db8)
  • _o__errno (Address: 0x1800e4db0)
  • _o__execute_onexit_table (Address: 0x1800e4da8)
  • _o__initialize_narrow_environment (Address: 0x1800e4cb8)
  • _o__initialize_onexit_table (Address: 0x1800e4cc0)
  • _o__invalid_parameter_noinfo (Address: 0x1800e4cc8)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800e4cd0)
  • _o__purecall (Address: 0x1800e4cd8)
  • _o__recalloc (Address: 0x1800e4ce0)
  • _o__register_onexit_function (Address: 0x1800e4ce8)
  • _o__seh_filter_dll (Address: 0x1800e4cf0)
  • _o__wcsdup (Address: 0x1800e4cf8)
  • _o__wcsicmp (Address: 0x1800e4d00)
  • _o__wcsnicmp (Address: 0x1800e4d08)
  • _o__wtoi (Address: 0x1800e4d18)
  • _o_calloc (Address: 0x1800e4d20)
  • _o_free (Address: 0x1800e4d28)
  • _o_isalpha (Address: 0x1800e4d30)
  • _o_iswalnum (Address: 0x1800e4d38)
  • _o_iswdigit (Address: 0x1800e4d40)
  • _o_iswspace (Address: 0x1800e4d48)
  • _o_malloc (Address: 0x1800e4d50)
  • _o_qsort (Address: 0x1800e4d58)
  • _o_terminate (Address: 0x1800e4d60)
  • _o_toupper (Address: 0x1800e4d68)
  • _o_wcscpy_s (Address: 0x1800e4d70)
  • _o_wcsncpy_s (Address: 0x1800e4d78)
  • _o_wcstol (Address: 0x1800e4d80)
  • _o_wmemcpy_s (Address: 0x1800e4d88)
  • memchr (Address: 0x1800e4e40)
  • memcmp (Address: 0x1800e4e48)
  • memcpy (Address: 0x1800e4e50)
  • memmove (Address: 0x1800e4d10)
  • wcschr (Address: 0x1800e4e18)
  • wcsstr (Address: 0x1800e4e28)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800e4e68)
  • _initterm_e (Address: 0x1800e4e60)
api-ms-win-crt-string-l1-1-0.dll
  • memmove_s (Address: 0x1800e4e88)
  • memset (Address: 0x1800e4e90)
  • strncmp (Address: 0x1800e4e98)
  • wcscmp (Address: 0x1800e4e80)
  • wcsncmp (Address: 0x1800e4ea0)
  • wcsnlen (Address: 0x1800e4e78)
api-ms-win-devices-config-l1-1-1.dll
  • CM_Query_And_Remove_SubTreeW (Address: 0x1800e4eb8)
  • CM_Setup_DevNode (Address: 0x1800e4eb0)
api-ms-win-devices-query-l1-1-0.dll
  • DevCloseObjectQuery (Address: 0x1800e4ed8)
  • DevFreeObjectProperties (Address: 0x1800e4ed0)
  • DevGetObjectProperties (Address: 0x1800e4ec8)
api-ms-win-devices-swdevice-l1-1-0.dll
  • SwDeviceClose (Address: 0x1800e4ef0)
  • SwDeviceCreate (Address: 0x1800e4ef8)
  • SwDeviceInterfaceRegister (Address: 0x1800e4ee8)
  • SwMemFree (Address: 0x1800e4f00)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1800e4f20)
  • GetTraceEnableLevel (Address: 0x1800e4f28)
  • GetTraceLoggerHandle (Address: 0x1800e4f30)
  • RegisterTraceGuidsW (Address: 0x1800e4f38)
  • TraceMessage (Address: 0x1800e4f18)
  • UnregisterTraceGuids (Address: 0x1800e4f10)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1800e4f78)
  • EventProviderEnabled (Address: 0x1800e4f58)
  • EventRegister (Address: 0x1800e4f50)
  • EventSetInformation (Address: 0x1800e4f48)
  • EventUnregister (Address: 0x1800e4f68)
  • EventWrite (Address: 0x1800e4f70)
  • EventWriteTransfer (Address: 0x1800e4f60)
api-ms-win-oobe-notification-l1-1-0.dll
  • OOBEComplete (Address: 0x1800e4f88)
api-ms-win-security-accesshlpr-l1-1-0.dll
  • FreeTransientObjectSecurityDescriptor (Address: 0x1800e4fa0)
  • QueryTransientObjectSecurityDescriptor (Address: 0x1800e4f98)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x1800e4fc8)
  • CheckTokenMembership (Address: 0x1800e4fe0)
  • CopySid (Address: 0x1800e4fb0)
  • CreateWellKnownSid (Address: 0x1800e4fd0)
  • EqualSid (Address: 0x1800e4fc0)
  • FreeSid (Address: 0x1800e4fd8)
  • GetTokenInformation (Address: 0x1800e4fb8)
api-ms-win-security-base-l1-2-0.dll
  • CheckTokenCapability (Address: 0x1800e4ff0)
api-ms-win-security-capability-l1-1-0.dll
  • RpcClientCapabilityCheck (Address: 0x1800e5000)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800e5018)
  • ConvertStringSidToSidW (Address: 0x1800e5010)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x1800e5030)
  • SetServiceStatus (Address: 0x1800e5028)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1800e5048)
  • OpenSCManagerW (Address: 0x1800e5058)
  • OpenServiceW (Address: 0x1800e5050)
  • StartServiceW (Address: 0x1800e5040)
api-ms-win-service-private-l1-1-0.dll
  • SubscribeServiceChangeNotifications (Address: 0x1800e5078)
  • UnsubscribeServiceChangeNotifications (Address: 0x1800e5068)
  • WaitServiceState (Address: 0x1800e5070)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolQueueTask (Address: 0x1800e5088)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x1800e50c8)
  • BCryptCreateHash (Address: 0x1800e50c0)
  • BCryptDestroyHash (Address: 0x1800e50b8)
  • BCryptFinishHash (Address: 0x1800e50a0)
  • BCryptGetProperty (Address: 0x1800e50b0)
  • BCryptHashData (Address: 0x1800e5098)
  • BCryptOpenAlgorithmProvider (Address: 0x1800e50a8)
DEVOBJ.dll
  • DevObjCreateDeviceInfoList (Address: 0x1800e4428)
  • DevObjDestroyDeviceInfoList (Address: 0x1800e4408)
  • DevObjEnumDeviceInfo (Address: 0x1800e4430)
  • DevObjEnumDeviceInterfaces (Address: 0x1800e4450)
  • DevObjGetClassDevs (Address: 0x1800e4420)
  • DevObjGetDeviceInstanceId (Address: 0x1800e4400)
  • DevObjGetDeviceInterfaceDetail (Address: 0x1800e4410)
  • DevObjGetDeviceProperty (Address: 0x1800e4448)
  • DevObjGetDeviceRegistryProperty (Address: 0x1800e4418)
  • DevObjOpenDeviceInfo (Address: 0x1800e4440)
  • DevObjOpenDevRegKey (Address: 0x1800e4438)
IPHLPAPI.DLL
  • ConvertInterfaceGuidToLuid (Address: 0x1800e4478)
  • GetAdaptersAddresses (Address: 0x1800e4460)
  • GetIfEntry2 (Address: 0x1800e4468)
  • SetInterfaceDnsSettings (Address: 0x1800e4470)
MobileNetworking.dll
  • GetPersistentRegPath (Address: 0x1800e44b0)
  • PersistentRegPathCreateKey (Address: 0x1800e4488)
  • PersistentRegPathGetDWORD (Address: 0x1800e44a0)
  • PersistentRegPathGetValue (Address: 0x1800e44a8)
  • PersistentRegPathOpenKey (Address: 0x1800e4490)
  • PersistentRegPathSetDWORD (Address: 0x1800e4498)
msvcp_win.dll
  • ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800e5140)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800e50f8)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800e51d8)
  • ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x1800e5110)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x1800e5120)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800e51c0)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x1800e51d0)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800e5148)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800e51e0)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800e51c8)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1800e5150)
  • ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x1800e5118)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1800e5128)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x1800e5108)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800e5158)
  • ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800e5180)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800e51f0)
  • ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800e5170)
  • ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800e5178)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800e5130)
  • ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800e50f0)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x1800e5160)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1800e5168)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1800e50d8)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800e5188)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x1800e5198)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x1800e5100)
  • ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1800e50e8)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x1800e51b8)
  • ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x1800e51e8)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x1800e5190)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x1800e51b0)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x1800e50e0)
  • ?widen@?$ctype@G@std@@QEBAGD@Z (Address: 0x1800e5138)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x1800e51a8)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x1800e51a0)
ntdll.dll
  • EtwTraceMessage (Address: 0x1800e52c0)
  • NtCreateWnfStateName (Address: 0x1800e5278)
  • NtDeviceIoControlFile (Address: 0x1800e5228)
  • NtPowerInformation (Address: 0x1800e5210)
  • NtQueryKey (Address: 0x1800e52c8)
  • NtQueryWnfStateData (Address: 0x1800e5280)
  • RtlCaptureContext (Address: 0x1800e5288)
  • RtlDeriveCapabilitySidsFromName (Address: 0x1800e52b8)
  • RtlInitUnicodeString (Address: 0x1800e5200)
  • RtlIpv4AddressToStringW (Address: 0x1800e5238)
  • RtlIpv4StringToAddressW (Address: 0x1800e52a0)
  • RtlIpv6AddressToStringW (Address: 0x1800e5240)
  • RtlIpv6StringToAddressW (Address: 0x1800e52a8)
  • RtlLookupFunctionEntry (Address: 0x1800e5290)
  • RtlNtStatusToDosError (Address: 0x1800e5218)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1800e5268)
  • RtlPublishWnfStateData (Address: 0x1800e5230)
  • RtlQueryPackageIdentity (Address: 0x1800e52b0)
  • RtlQueryWnfStateData (Address: 0x1800e5258)
  • RtlStringFromGUID (Address: 0x1800e5220)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800e5248)
  • RtlTestAndPublishWnfStateData (Address: 0x1800e52d0)
  • RtlUnsubscribeWnfNotificationWithCompletionCallback (Address: 0x1800e5250)
  • RtlVirtualUnwind (Address: 0x1800e5298)
  • RtlWaitForWnfMetaNotification (Address: 0x1800e52d8)
  • WinSqmAddToStreamEx (Address: 0x1800e5208)
  • WinSqmIncrementDWORD (Address: 0x1800e5260)
  • WinSqmIsOptedIn (Address: 0x1800e5270)
OLEAUT32.dll
  • SysAllocString (Address: 0x1800e44c0)
  • SysAllocStringByteLen (Address: 0x1800e44d8)
  • SysAllocStringLen (Address: 0x1800e4500)
  • SysFreeString (Address: 0x1800e44c8)
  • SysReAllocStringLen (Address: 0x1800e44d0)
  • SysStringByteLen (Address: 0x1800e44e0)
  • SysStringLen (Address: 0x1800e4508)
  • VarBstrCat (Address: 0x1800e44f0)
  • VariantChangeType (Address: 0x1800e44f8)
  • VariantClear (Address: 0x1800e4510)
  • VariantInit (Address: 0x1800e44e8)
policymanager.dll
  • PolicyManager_GetPolicyInt (Address: 0x1800e52e8)
profapi.dll
  • (Address: 0x1800e52f8)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x1800e4570)
  • I_RpcOpenClientProcess (Address: 0x1800e4618)
  • Ndr64AsyncServerCallAll (Address: 0x1800e45e0)
  • NdrAsyncServerCall (Address: 0x1800e45b0)
  • NdrClientCall3 (Address: 0x1800e4638)
  • NdrServerCall2 (Address: 0x1800e45f0)
  • NdrServerCallAll (Address: 0x1800e45c0)
  • RpcAsyncAbortCall (Address: 0x1800e4610)
  • RpcAsyncCompleteCall (Address: 0x1800e45d8)
  • RpcBindingFree (Address: 0x1800e4528)
  • RpcBindingFromStringBindingW (Address: 0x1800e4540)
  • RpcBindingSetAuthInfoExW (Address: 0x1800e4530)
  • RpcBindingSetAuthInfoW (Address: 0x1800e4590)
  • RpcBindingSetOption (Address: 0x1800e4578)
  • RpcBindingVectorFree (Address: 0x1800e45a8)
  • RpcEpRegisterW (Address: 0x1800e4630)
  • RpcEpUnregister (Address: 0x1800e4568)
  • RpcExceptionFilter (Address: 0x1800e4548)
  • RpcImpersonateClient (Address: 0x1800e4550)
  • RpcMgmtInqServerPrincNameW (Address: 0x1800e4598)
  • RpcRevertToSelfEx (Address: 0x1800e4558)
  • RpcServerInqBindingHandle (Address: 0x1800e45f8)
  • RpcServerInqBindings (Address: 0x1800e4628)
  • RpcServerInqCallAttributesW (Address: 0x1800e45a0)
  • RpcServerListen (Address: 0x1800e45e8)
  • RpcServerRegisterAuthInfoW (Address: 0x1800e4620)
  • RpcServerRegisterIf3 (Address: 0x1800e45d0)
  • RpcServerSubscribeForNotification (Address: 0x1800e4608)
  • RpcServerUnregisterIfEx (Address: 0x1800e45b8)
  • RpcServerUnsubscribeForNotification (Address: 0x1800e4600)
  • RpcServerUseProtseqW (Address: 0x1800e45c8)
  • RpcStringBindingComposeW (Address: 0x1800e4538)
  • RpcStringFreeW (Address: 0x1800e4580)
  • UuidCreate (Address: 0x1800e4560)
  • UuidFromStringW (Address: 0x1800e4520)
  • UuidToStringW (Address: 0x1800e4588)
UMPDC.dll
  • Pdcv2ActivationClientActivate (Address: 0x1800e4648)
  • Pdcv2ActivationClientDeactivate (Address: 0x1800e4650)
  • Pdcv2ActivationClientRegister (Address: 0x1800e4660)
  • Pdcv2ActivationClientUnregister (Address: 0x1800e4658)
WINHTTP.dll
  • WinHttpCrackUrl (Address: 0x1800e4678)
  • WinHttpCreateUrl (Address: 0x1800e4670)
WMI.dll
  • WmiNotificationRegistrationW (Address: 0x1800e4688)
WS2_32.dll
  • closesocket (Address: 0x1800e46a8)
  • ntohl (Address: 0x1800e46e0)
  • socket (Address: 0x1800e46c0)
  • WSAAddressToStringW (Address: 0x1800e4698)
  • WSACleanup (Address: 0x1800e46a0)
  • WSAEnumNetworkEvents (Address: 0x1800e46d8)
  • WSAEventSelect (Address: 0x1800e46b8)
  • WSAGetLastError (Address: 0x1800e46c8)
  • WSAIoctl (Address: 0x1800e46b0)
  • WSAStartup (Address: 0x1800e46d0)