generaltel.dll

Description: General Telemetry

Version: 10.0.19645.1046

Architecture: 64-bit

Operating System: Windows NT

SHA256: be8164b69e7bf76455a46fc692491a8a

File Size: 589.4 KB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 5

Exported Functions

CalculateCensusId (Ordinal: 1, Address: 0x38280)
DoCensusRun (Ordinal: 2, Address: 0x1eba0)
EnumerateOfficeAddins (Ordinal: 3, Address: 0x22ec0)
EnumerateOfficeDocuments (Ordinal: 4, Address: 0x23180)
GetCITDataApr (Ordinal: 5, Address: 0x31530)
GetCITTelemetryPoints (Ordinal: 6, Address: 0x315c0)
RunGeneralTelemetry (Ordinal: 7, Address: 0x3d490)
RunInUserCxtW (Ordinal: 8, Address: 0x1e8e0)
SysprepCleanupEnableCustomTrigger (Ordinal: 9, Address: 0x382b0)

Imported DLLs & Functions

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x180060658)
BCryptCreateHash (Address: 0x180060628)
BCryptDestroyHash (Address: 0x180060638)
BCryptFinishHash (Address: 0x180060640)
BCryptGetProperty (Address: 0x180060650)
BCryptHashData (Address: 0x180060630)
BCryptOpenAlgorithmProvider (Address: 0x180060648)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x180060388)
CloseHandle (Address: 0x1800604b0)
CompareStringOrdinal (Address: 0x1800604a8)
CreateEventExW (Address: 0x1800605d8)
CreateEventW (Address: 0x180060310)
CreateFileW (Address: 0x1800604b8)
CreateMutexExW (Address: 0x1800605c8)
CreateMutexW (Address: 0x180060350)
CreateSemaphoreExW (Address: 0x1800605d0)
CreateSemaphoreW (Address: 0x180060300)
CreateWaitableTimerW (Address: 0x180060328)
DebugBreak (Address: 0x180060498)
DelayLoadFailureHook (Address: 0x1800602a0)
DeleteCriticalSection (Address: 0x180060410)
DeleteFileW (Address: 0x180060368)
DeviceIoControl (Address: 0x1800604c8)
EnterCriticalSection (Address: 0x180060330)
ExpandEnvironmentStringsW (Address: 0x1800605b0)
FindClose (Address: 0x180060440)
FindFirstFileW (Address: 0x180060438)
FindNextFileW (Address: 0x180060448)
FormatMessageW (Address: 0x180060470)
FreeLibrary (Address: 0x180060528)
GetCommandLineW (Address: 0x180060348)
GetComputerNameExW (Address: 0x1800604f8)
GetComputerNameW (Address: 0x1800603f8)
GetCurrentProcess (Address: 0x180060598)
GetCurrentProcessId (Address: 0x1800605c0)
GetCurrentThread (Address: 0x1800603e8)
GetCurrentThreadId (Address: 0x180060468)
GetFileAttributesExW (Address: 0x1800605a0)
GetFileAttributesW (Address: 0x180060370)
GetLastError (Address: 0x180060500)
GetLocalTime (Address: 0x180060430)
GetLogicalDriveStringsW (Address: 0x1800602b0)
GetLongPathNameW (Address: 0x1800605a8)
GetModuleFileNameA (Address: 0x180060450)
GetModuleFileNameW (Address: 0x180060588)
GetModuleHandleExA (Address: 0x1800602c8)
GetModuleHandleExW (Address: 0x180060460)
GetModuleHandleW (Address: 0x180060490)
GetPriorityClass (Address: 0x1800603d0)
GetProcAddress (Address: 0x180060480)
GetProcessHeap (Address: 0x180060488)
GetProductInfo (Address: 0x180060510)
GetSystemDirectoryW (Address: 0x1800602f0)
GetSystemFirmwareTable (Address: 0x180060400)
GetSystemTime (Address: 0x1800604f0)
GetSystemTimeAsFileTime (Address: 0x1800604d8)
GetSystemWindowsDirectoryW (Address: 0x180060420)
GetTempFileNameW (Address: 0x180060358)
GetTempPathW (Address: 0x180060360)
GetTickCount (Address: 0x180060578)
GetVersionExW (Address: 0x180060508)
HeapAlloc (Address: 0x180060478)
HeapFree (Address: 0x180060458)
HeapReAlloc (Address: 0x180060530)
InitializeCriticalSection (Address: 0x1800602f8)
InitializeCriticalSectionEx (Address: 0x180060408)
IsDebuggerPresent (Address: 0x180060540)
LeaveCriticalSection (Address: 0x180060318)
LoadLibraryExA (Address: 0x1800605e8)
LoadLibraryExW (Address: 0x180060520)
LoadLibraryW (Address: 0x180060418)
LocalAlloc (Address: 0x1800602b8)
LocalFree (Address: 0x180060590)
lstrcmpiA (Address: 0x180060518)
lstrcmpiW (Address: 0x1800603f0)
lstrcmpW (Address: 0x1800604a0)
MoveFileExW (Address: 0x180060340)
MultiByteToWideChar (Address: 0x1800605b8)
OpenSemaphoreW (Address: 0x180060558)
OpenWaitableTimerW (Address: 0x180060308)
OutputDebugStringA (Address: 0x1800602d0)
OutputDebugStringW (Address: 0x180060538)
QueryDosDeviceW (Address: 0x1800602a8)
QueryPerformanceCounter (Address: 0x180060378)
QueryProcessCycleTime (Address: 0x1800603e0)
RaiseException (Address: 0x180060560)
ReadFile (Address: 0x1800604c0)
ReleaseMutex (Address: 0x180060568)
ReleaseSemaphore (Address: 0x180060550)
ReleaseSRWLockExclusive (Address: 0x180060390)
RtlCaptureContext (Address: 0x1800603c0)
RtlCompareMemory (Address: 0x1800602c0)
RtlLookupFunctionEntry (Address: 0x1800603b8)
RtlVirtualUnwind (Address: 0x1800603b0)
SetEvent (Address: 0x1800605e0)
SetLastError (Address: 0x1800604d0)
SetPriorityClass (Address: 0x1800603d8)
SetUnhandledExceptionFilter (Address: 0x1800603a0)
SetWaitableTimer (Address: 0x180060338)
Sleep (Address: 0x1800603c8)
SleepConditionVariableSRW (Address: 0x180060298)
SystemTimeToFileTime (Address: 0x180060428)
TerminateProcess (Address: 0x180060398)
UnhandledExceptionFilter (Address: 0x1800603a8)
VerifyVersionInfoW (Address: 0x1800604e0)
VerSetConditionMask (Address: 0x1800604e8)
VirtualAlloc (Address: 0x1800602e8)
VirtualFree (Address: 0x1800602e0)
WaitForMultipleObjects (Address: 0x180060320)
WaitForSingleObject (Address: 0x180060548)
WaitForSingleObjectEx (Address: 0x180060570)
WakeAllConditionVariable (Address: 0x180060380)
WriteFile (Address: 0x1800602d8)
WTSGetActiveConsoleSessionId (Address: 0x180060580)

msvcrt.dll

__C_specific_handler (Address: 0x180060698)
__CxxFrameHandler3 (Address: 0x180060838)
__dllonexit (Address: 0x180060678)
_amsg_exit (Address: 0x1800606a8)
_callnewh (Address: 0x1800606e8)
_CxxThrowException (Address: 0x1800606c8)
_errno (Address: 0x1800607d0)
_initterm (Address: 0x1800606a0)
_lock (Address: 0x180060690)
_onexit (Address: 0x180060670)
_purecall (Address: 0x180060810)
_set_errno (Address: 0x180060760)
_strnicmp (Address: 0x180060788)
_unlock (Address: 0x180060688)
_vscwprintf (Address: 0x180060870)
_vsnprintf (Address: 0x180060778)
_vsnprintf_s (Address: 0x1800607f0)
_vsnwprintf (Address: 0x180060820)
_wcsicmp (Address: 0x1800607b0)
_wcslwr (Address: 0x180060860)
_wcslwr_s (Address: 0x1800607a8)
_wcsnicmp (Address: 0x180060730)
_wcstoui64 (Address: 0x180060738)
_wfopen_s (Address: 0x180060708)
_wtof (Address: 0x180060840)
_wtoi (Address: 0x180060790)
_wtol (Address: 0x180060728)
_XcptFilter (Address: 0x1800606b0)
??_V@YAXPEAX@Z (Address: 0x180060780)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800606e0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800606d8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800607f8)
??0exception@@QEAA@XZ (Address: 0x180060800)
??1exception@@UEAA@XZ (Address: 0x180060808)
??1type_info@@UEAA@XZ (Address: 0x180060718)
??3@YAXPEAX@Z (Address: 0x180060680)
?terminate@@YAXXZ (Address: 0x180060668)
?what@exception@@UEBAPEBDXZ (Address: 0x1800606d0)
fclose (Address: 0x1800606f0)
fread (Address: 0x180060700)
free (Address: 0x180060740)
isdigit (Address: 0x1800607e0)
isspace (Address: 0x180060848)
iswdigit (Address: 0x1800606f8)
malloc (Address: 0x180060710)
memcmp (Address: 0x180060830)
memcpy (Address: 0x1800606c0)
memcpy_s (Address: 0x180060818)
memmove (Address: 0x1800606b8)
memset (Address: 0x180060828)
sprintf_s (Address: 0x1800607d8)
strchr (Address: 0x180060758)
strcpy_s (Address: 0x180060850)
strncmp (Address: 0x180060858)
strncpy_s (Address: 0x180060770)
strnlen (Address: 0x180060868)
strstr (Address: 0x180060720)
strtol (Address: 0x180060768)
swprintf_s (Address: 0x180060750)
wcscat_s (Address: 0x1800607a0)
wcschr (Address: 0x1800607c0)
wcscmp (Address: 0x180060878)
wcscpy_s (Address: 0x180060748)
wcsncmp (Address: 0x1800607e8)
wcsrchr (Address: 0x180060798)
wcsstr (Address: 0x1800607b8)
wcstol (Address: 0x1800607c8)

ntdll.dll

EtwEventRegister (Address: 0x180060980)
EtwEventUnregister (Address: 0x180060970)
EtwEventWrite (Address: 0x180060978)
LdrResSearchResource (Address: 0x180060910)
NtLoadKeyEx (Address: 0x180060888)
NtQueryKey (Address: 0x1800609f8)
NtQueryLicenseValue (Address: 0x1800608b8)
RtlAdjustPrivilege (Address: 0x180060a18)
RtlAllocateAndInitializeSid (Address: 0x180060a10)
RtlAllocateHeap (Address: 0x180060a00)
RtlAnsiStringToUnicodeString (Address: 0x180060998)
RtlAppendUnicodeStringToString (Address: 0x1800609d0)
RtlAppendUnicodeToString (Address: 0x1800609d8)
RtlComputeCrc32 (Address: 0x180060a28)
RtlDecompressBuffer (Address: 0x180060a30)
RtlDeleteCriticalSection (Address: 0x1800609c0)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x1800608b0)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x180060938)
RtlEnterCriticalSection (Address: 0x180060948)
RtlEqualString (Address: 0x180060940)
RtlFreeHeap (Address: 0x1800609f0)
RtlFreeSid (Address: 0x180060a08)
RtlFreeUnicodeString (Address: 0x1800609c8)
RtlGetNativeSystemInformation (Address: 0x1800609a8)
RtlGetThreadErrorMode (Address: 0x1800608a0)
RtlImageDirectoryEntryToData (Address: 0x180060920)
RtlInitAnsiString (Address: 0x180060950)
RtlInitializeCriticalSection (Address: 0x180060960)
RtlInitString (Address: 0x180060988)
RtlInitUnicodeString (Address: 0x180060898)
RtlInitUnicodeStringEx (Address: 0x180060a40)
RtlLeaveCriticalSection (Address: 0x180060968)
RtlMultiByteToUnicodeN (Address: 0x180060958)
RtlNtStatusToDosError (Address: 0x180060a38)
RtlRandomEx (Address: 0x1800609e8)
RtlReAllocateHeap (Address: 0x1800608c0)
RtlReleaseRelativeName (Address: 0x180060890)
RtlSecondsSince1970ToTime (Address: 0x180060900)
RtlSetThreadErrorMode (Address: 0x1800608a8)
RtlStringFromGUID (Address: 0x1800609e0)
RtlTimeToSecondsSince1970 (Address: 0x1800609b8)
RtlTimeToTimeFields (Address: 0x180060908)
RtlUpcaseUnicodeChar (Address: 0x1800609a0)
RtlVerifyVersionInfo (Address: 0x180060918)
RtlxAnsiStringToUnicodeSize (Address: 0x180060990)
WinSqmIsOptedInEx (Address: 0x180060a20)
ZwClose (Address: 0x1800608d0)
ZwCreateFile (Address: 0x1800608d8)
ZwCreateSection (Address: 0x1800608f8)
ZwEnumerateKey (Address: 0x1800608c8)
ZwMapViewOfSection (Address: 0x1800608f0)
ZwOpenKey (Address: 0x180060928)
ZwQueryInformationFile (Address: 0x1800608e0)
ZwQuerySystemInformation (Address: 0x1800609b0)
ZwQueryValueKey (Address: 0x180060930)
ZwUnmapViewOfSection (Address: 0x1800608e8)

RPCRT4.dll

UuidCreate (Address: 0x1800605f8)

WDSCORE.dll

ConstructPartialMsgVW (Address: 0x180060608)
CurrentIP (Address: 0x180060610)
WdsSetupLogMessageW (Address: 0x180060618)