ActivationManager.dll
Description: Activation Manager
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 32-bit
Operating System: Windows NT
SHA256: 1c3330abb58c78295cdd3f6be74ac23d
File Size: 641.5 KB
Uploaded At: Dec. 1, 2025, 7:52 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DisableAppXDebuggingForPackage (Ordinal: 1, Address: 0x7ad70)
- DllCanUnloadNow (Ordinal: 2, Address: 0x2f8b0)
- DllGetActivationFactory (Ordinal: 3, Address: 0x55160)
- DllGetClassObject (Ordinal: 4, Address: 0x35f80)
- EnableAppXDebuggingForPackage (Ordinal: 5, Address: 0x7adf0)
- FreeAppXLaunchContext (Ordinal: 6, Address: 0x7aed0)
- GetPackageExecutionContextForAumid (Ordinal: 7, Address: 0x7bb00)
- GetPackageExecutionContextForAumidAndUser (Ordinal: 8, Address: 0x20410)
- GetPackageExecutionContextForDeviceFamilyName (Ordinal: 9, Address: 0x7bbf0)
- GetPackageExecutionContextForPackageByFullName (Ordinal: 10, Address: 0x7bc10)
- PostCreateProcessAppXActivation (Ordinal: 11, Address: 0x7af10)
- PrepareAppXActivation (Ordinal: 12, Address: 0x7b230)
- RegisterAppXPackageIfNecessary2 (Ordinal: 13, Address: 0x7b460)
- RegisterAppXPackageIfNecessary (Ordinal: 14, Address: 0x7b6b0)
Imported DLLs & Functions
api-ms-win-appmodel-identity-l1-2-0.dll
- AppXGetOSMaxVersionTested (Address: 0x1009606c)
api-ms-win-appmodel-runtime-internal-l1-1-0.dll
- GetPackageApplicationContext (Address: 0x10096078)
- GetPackageApplicationPropertyString (Address: 0x10096074)
api-ms-win-appmodel-runtime-internal-l1-1-1.dll
- GetPackageFullNameFromToken (Address: 0x10096084)
- GetPackageStatus (Address: 0x10096080)
- GetPackageStatusForUser (Address: 0x10096088)
api-ms-win-appmodel-runtime-internal-l1-1-2.dll
- GetEffectivePackageStatusForUser (Address: 0x10096090)
api-ms-win-appmodel-runtime-internal-l1-1-3.dll
- CouldMultiUserAppsBehaviorBePossibleForPackage (Address: 0x10096098)
api-ms-win-appmodel-runtime-internal-l1-1-4.dll
- GetExtensionApplicationUserModelId (Address: 0x100960a4)
- IsOnDemandRegistrationSupportedForExtensionCategory (Address: 0x100960a0)
api-ms-win-appmodel-runtime-internal-l1-1-6.dll
- OpenPackageInfoByFullNameForMachine (Address: 0x100960ac)
api-ms-win-appmodel-state-l1-2-0.dll
- CloseState (Address: 0x100960bc)
- GetSystemAppDataKey (Address: 0x100960b4)
- OpenStateExplicit (Address: 0x100960b8)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x100960c4)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalGetAtomNameW (Address: 0x100960cc)
api-ms-win-core-com-l1-1-0.dll
- CLSIDFromString (Address: 0x10096138)
- CoAddRefServerProcess (Address: 0x100960d8)
- CoCancelCall (Address: 0x10096118)
- CoCreateFreeThreadedMarshaler (Address: 0x100960f8)
- CoCreateGuid (Address: 0x10096134)
- CoCreateInstance (Address: 0x10096140)
- CoDisableCallCancellation (Address: 0x10096114)
- CoEnableCallCancellation (Address: 0x10096110)
- CoGetApartmentType (Address: 0x100960dc)
- CoGetCallContext (Address: 0x10096100)
- CoGetCallerTID (Address: 0x100960fc)
- CoGetInterfaceAndReleaseStream (Address: 0x100960e8)
- CoGetMalloc (Address: 0x10096120)
- CoGetStdMarshalEx (Address: 0x100960e0)
- CoImpersonateClient (Address: 0x10096108)
- CoIncrementMTAUsage (Address: 0x100960f4)
- CoInitializeEx (Address: 0x10096104)
- CoMarshalInterThreadInterfaceInStream (Address: 0x100960f0)
- CoRegisterClassObject (Address: 0x1009611c)
- CoReleaseMarshalData (Address: 0x100960e4)
- CoReleaseServerProcess (Address: 0x10096130)
- CoResumeClassObjects (Address: 0x1009613c)
- CoRevertToSelf (Address: 0x1009610c)
- CoRevokeClassObject (Address: 0x100960d4)
- CoTaskMemAlloc (Address: 0x10096128)
- CoTaskMemFree (Address: 0x10096144)
- CoTaskMemRealloc (Address: 0x1009612c)
- CoUninitialize (Address: 0x10096124)
- CoWaitForMultipleHandles (Address: 0x100960ec)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x1009614c)
api-ms-win-core-com-private-l1-1-0.dll
- CoGetErrorInfo (Address: 0x10096158)
- CoRegisterRacActivationToken (Address: 0x1009615c)
- CoRevokeRacActivationToken (Address: 0x10096154)
- CoSetErrorInfo (Address: 0x10096160)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x10096170)
- IsDebuggerPresent (Address: 0x1009616c)
- OutputDebugStringW (Address: 0x10096168)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x10096178)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x10096180)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x10096190)
- RaiseException (Address: 0x10096194)
- SetLastError (Address: 0x10096198)
- SetUnhandledExceptionFilter (Address: 0x1009618c)
- UnhandledExceptionFilter (Address: 0x10096188)
api-ms-win-core-errorhandling-l1-1-2.dll
- RaiseFailFastException (Address: 0x100961a0)
api-ms-win-core-file-l1-1-0.dll
- GetFileAttributesW (Address: 0x100961a8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x100961b0)
- DuplicateHandle (Address: 0x100961b4)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x100961cc)
- HeapAlloc (Address: 0x100961c4)
- HeapDestroy (Address: 0x100961c0)
- HeapFree (Address: 0x100961c8)
- HeapReAlloc (Address: 0x100961bc)
- HeapSize (Address: 0x100961d0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x100961d8)
- LocalFree (Address: 0x100961e0)
- LocalReAlloc (Address: 0x100961dc)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x100961ec)
- InterlockedPushEntrySList (Address: 0x100961e8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- RegisterWaitForSingleObject (Address: 0x100961f4)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x10096210)
- FreeLibrary (Address: 0x1009620c)
- GetModuleFileNameA (Address: 0x10096200)
- GetModuleHandleExW (Address: 0x10096204)
- GetModuleHandleW (Address: 0x10096208)
- GetProcAddress (Address: 0x100961fc)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x10096218)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCombine (Address: 0x10096220)
- PathCchAppend (Address: 0x10096224)
- PathCchRemoveFileSpec (Address: 0x10096228)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x10096234)
- GetCurrentDirectoryW (Address: 0x10096230)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1009625c)
- CreateThread (Address: 0x10096240)
- GetCurrentProcess (Address: 0x10096268)
- GetCurrentProcessId (Address: 0x10096250)
- GetCurrentThread (Address: 0x1009624c)
- GetCurrentThreadId (Address: 0x10096270)
- GetProcessId (Address: 0x1009623c)
- GetThreadId (Address: 0x10096244)
- OpenProcessToken (Address: 0x10096248)
- OpenThread (Address: 0x10096258)
- OpenThreadToken (Address: 0x10096254)
- ProcessIdToSessionId (Address: 0x10096264)
- SetThreadPriority (Address: 0x10096260)
- SetThreadToken (Address: 0x10096274)
- TerminateProcess (Address: 0x1009626c)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1009627c)
- OpenProcess (Address: 0x10096280)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1009628c)
- QueryPerformanceFrequency (Address: 0x10096288)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x10096294)
api-ms-win-core-psm-key-l1-1-0.dll
- PsmCreateKey (Address: 0x100962a0)
- PsmGetKeyFromProcess (Address: 0x100962a4)
- PsmGetKeyFromToken (Address: 0x1009629c)
api-ms-win-core-psm-key-l1-1-1.dll
- PsmCreateKeyWithDynamicId (Address: 0x100962ac)
api-ms-win-core-quirks-l1-1-0.dll
- QuirkIsEnabledForPackage (Address: 0x100962b4)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x100962c0)
- RegCreateKeyExW (Address: 0x100962d4)
- RegDeleteTreeW (Address: 0x100962cc)
- RegEnumKeyExW (Address: 0x100962dc)
- RegGetValueW (Address: 0x100962c4)
- RegOpenCurrentUser (Address: 0x100962d0)
- RegOpenKeyExW (Address: 0x100962e0)
- RegQueryInfoKeyW (Address: 0x100962bc)
- RegQueryValueExW (Address: 0x100962c8)
- RegSetValueExW (Address: 0x100962d8)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFindFileNameW (Address: 0x100962e8)
- PathIsPrefixW (Address: 0x100962ec)
- PathIsRelativeW (Address: 0x100962f0)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrCmpIW (Address: 0x100962fc)
- StrCmpLogicalW (Address: 0x100962f8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x10096304)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x10096354)
- AcquireSRWLockShared (Address: 0x10096340)
- CreateEventExW (Address: 0x10096310)
- CreateEventW (Address: 0x10096334)
- CreateMutexExW (Address: 0x10096344)
- CreateSemaphoreExW (Address: 0x10096364)
- DeleteCriticalSection (Address: 0x1009633c)
- EnterCriticalSection (Address: 0x1009632c)
- InitializeCriticalSection (Address: 0x10096314)
- InitializeCriticalSectionAndSpinCount (Address: 0x1009631c)
- InitializeCriticalSectionEx (Address: 0x10096338)
- InitializeSRWLock (Address: 0x10096324)
- LeaveCriticalSection (Address: 0x10096330)
- OpenEventW (Address: 0x10096328)
- OpenSemaphoreW (Address: 0x1009634c)
- ReleaseMutex (Address: 0x1009635c)
- ReleaseSemaphore (Address: 0x1009630c)
- ReleaseSRWLockExclusive (Address: 0x10096358)
- ReleaseSRWLockShared (Address: 0x10096348)
- ResetEvent (Address: 0x10096320)
- SetEvent (Address: 0x10096318)
- WaitForSingleObject (Address: 0x10096360)
- WaitForSingleObjectEx (Address: 0x10096350)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x10096370)
- InitOnceComplete (Address: 0x1009636c)
- InitOnceExecuteOnce (Address: 0x10096374)
- Sleep (Address: 0x10096378)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x10096380)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x10096388)
- GetSystemTimeAsFileTime (Address: 0x10096398)
- GetTickCount (Address: 0x10096390)
- GetTickCount64 (Address: 0x1009638c)
- GetWindowsDirectoryW (Address: 0x10096394)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x100963a0)
- GetProductInfo (Address: 0x100963a4)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x100963b8)
- CloseThreadpoolWait (Address: 0x100963b0)
- CreateThreadpoolTimer (Address: 0x100963c0)
- CreateThreadpoolWait (Address: 0x100963b4)
- SetThreadpoolTimer (Address: 0x100963bc)
- SetThreadpoolWait (Address: 0x100963c4)
- WaitForThreadpoolTimerCallbacks (Address: 0x100963c8)
- WaitForThreadpoolWaitCallbacks (Address: 0x100963ac)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueueTimer (Address: 0x100963d8)
- DeleteTimerQueueTimer (Address: 0x100963d0)
- UnregisterWaitEx (Address: 0x100963d4)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x100963e4)
- EncodePointer (Address: 0x100963e0)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x100963f4)
- RoOriginateError (Address: 0x100963ec)
- RoOriginateErrorW (Address: 0x100963f8)
- RoTransformError (Address: 0x100963fc)
- SetRestrictedErrorInfo (Address: 0x100963f0)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x10096410)
- RoGetMatchingRestrictedErrorInfo (Address: 0x10096408)
- RoOriginateLanguageException (Address: 0x10096404)
- RoReportFailedDelegate (Address: 0x1009640c)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1009641c)
- RoGetActivationFactory (Address: 0x10096418)
- RoRegisterActivationFactories (Address: 0x10096420)
- RoRevokeActivationFactories (Address: 0x10096424)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
- RoCreatePropertySetSerializer (Address: 0x1009642c)
api-ms-win-core-winrt-registration-l1-1-0.dll
- RoGetActivatableClassRegistration (Address: 0x10096434)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsConcatString (Address: 0x10096454)
- WindowsCreateString (Address: 0x1009645c)
- WindowsCreateStringReference (Address: 0x1009643c)
- WindowsDeleteString (Address: 0x10096440)
- WindowsDuplicateString (Address: 0x10096450)
- WindowsGetStringRawBuffer (Address: 0x10096458)
- WindowsIsStringEmpty (Address: 0x10096444)
- WindowsStringHasEmbeddedNull (Address: 0x10096448)
- WindowsSubstringWithSpecifiedLength (Address: 0x1009644c)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x10096464)
api-ms-win-core-wow64-l1-1-1.dll
- GetSystemWow64Directory2W (Address: 0x1009646c)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x10096508)
- __std_terminate (Address: 0x10096504)
- _CxxThrowException (Address: 0x100964b8)
- _except_handler4_common (Address: 0x100964b4)
- _o___std_exception_copy (Address: 0x10096500)
- _o___std_exception_destroy (Address: 0x100964fc)
- _o___std_type_info_destroy_list (Address: 0x100964f8)
- _o___stdio_common_vsnprintf_s (Address: 0x100964f4)
- _o___stdio_common_vswprintf (Address: 0x100964f0)
- _o__callnewh (Address: 0x100964e4)
- _o__cexit (Address: 0x100964e0)
- _o__configure_narrow_argv (Address: 0x100964d4)
- _o__crt_atexit (Address: 0x100964d0)
- _o__errno (Address: 0x100964c0)
- _o__execute_onexit_table (Address: 0x100964bc)
- _o__get_errno (Address: 0x100964c4)
- _o__initialize_narrow_environment (Address: 0x100964dc)
- _o__initialize_onexit_table (Address: 0x100964d8)
- _o__invalid_parameter_noinfo (Address: 0x100964cc)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x100964c8)
- _o__purecall (Address: 0x10096474)
- _o__register_onexit_function (Address: 0x10096478)
- _o__seh_filter_dll (Address: 0x1009647c)
- _o__set_errno (Address: 0x10096480)
- _o__ui64tow_s (Address: 0x10096484)
- _o__wcsicmp (Address: 0x10096488)
- _o_ceil (Address: 0x10096490)
- _o_free (Address: 0x10096494)
- _o_malloc (Address: 0x10096498)
- _o_realloc (Address: 0x1009649c)
- _o_terminate (Address: 0x100964a0)
- _o_toupper (Address: 0x100964a4)
- _o_wcscat_s (Address: 0x100964a8)
- _o_wcscpy_s (Address: 0x100964ac)
- _o_wcstok_s (Address: 0x100964b0)
- memcmp (Address: 0x1009650c)
- memcpy (Address: 0x10096510)
- memmove (Address: 0x1009648c)
- wcschr (Address: 0x100964e8)
- wcsrchr (Address: 0x100964ec)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1009651c)
- _initterm_e (Address: 0x10096518)
api-ms-win-crt-string-l1-1-0.dll
- memmove_s (Address: 0x10096528)
- memset (Address: 0x10096524)
- wcscspn (Address: 0x1009652c)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x10096540)
- EventProviderEnabled (Address: 0x10096538)
- EventRegister (Address: 0x10096548)
- EventSetInformation (Address: 0x1009653c)
- EventUnregister (Address: 0x10096544)
- EventWriteTransfer (Address: 0x10096534)
api-ms-win-security-base-l1-1-0.dll
- CopySid (Address: 0x10096574)
- CreateWellKnownSid (Address: 0x10096550)
- DuplicateTokenEx (Address: 0x10096564)
- FreeSid (Address: 0x10096570)
- GetAce (Address: 0x10096560)
- GetLengthSid (Address: 0x10096568)
- GetTokenInformation (Address: 0x10096558)
- ImpersonateLoggedOnUser (Address: 0x10096554)
- IsValidSid (Address: 0x10096578)
- IsWellKnownSid (Address: 0x1009656c)
- RevertToSelf (Address: 0x1009655c)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenMembershipEx (Address: 0x10096580)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x10096588)
api-ms-win-security-provider-l1-1-0.dll
- GetNamedSecurityInfoW (Address: 0x10096590)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x10096598)
- ConvertStringSidToSidW (Address: 0x1009659c)
api-ms-win-security-sddlparsecond-l1-1-0.dll
- LocalGetStringForCondition (Address: 0x100965a4)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x100965b4)
- OpenSCManagerW (Address: 0x100965ac)
- OpenServiceW (Address: 0x100965b8)
- StartServiceW (Address: 0x100965b0)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x100965c0)
api-ms-win-shcore-comhelpers-l1-1-0.dll
- IUnknown_QueryService (Address: 0x100965c8)
- IUnknown_SetSite (Address: 0x100965cc)
api-ms-win-shcore-obsolete-l1-1-0.dll
- CommandLineToArgvW (Address: 0x100965d4)
api-ms-win-shcore-stream-l1-1-0.dll
- IStream_Write (Address: 0x100965dc)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolQueueTask (Address: 0x100965e4)
api-ms-win-shcore-thread-l1-1-0.dll
- GetProcessReference (Address: 0x100965f0)
- SHGetThreadRef (Address: 0x100965ec)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x100965f8)
AppXDeploymentClient.dll
- (Address: 0x10096000)
combase.dll
- (Address: 0x10096600)
- (Address: 0x10096604)
- (Address: 0x10096608)
- (Address: 0x1009660c)
CoreMessaging.dll
- CoreUICreate (Address: 0x1009600c)
- CoreUICreateEx (Address: 0x10096008)
- MsgBlobCreateShared (Address: 0x10096018)
- MsgRelease (Address: 0x10096014)
- MsgStringCreateShared (Address: 0x10096010)
MPR.dll
- WNetGetConnectionW (Address: 0x10096020)
msvcp_win.dll
- ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z (Address: 0x10096684)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x10096640)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x1009665c)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x1009663c)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x10096630)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10096680)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1009669c)
- ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x10096658)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1009662c)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x10096654)
- ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x10096634)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x10096648)
- ??Bios_base@std@@QBE_NXZ (Address: 0x1009666c)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x10096690)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1009667c)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x10096664)
- ?exceptions@ios_base@std@@QAEXH@Z (Address: 0x10096638)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x10096678)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x1009668c)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x10096614)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x10096688)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x1009664c)
- ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x10096644)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x1009661c)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x10096668)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z (Address: 0x10096698)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x10096660)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x10096650)
- ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x10096674)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x10096670)
- ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x10096694)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x10096618)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x10096628)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x10096624)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x10096620)
ntdll.dll
- NtClose (Address: 0x100966a8)
- NtOpenProcessToken (Address: 0x100966b0)
- NtOpenProcessTokenEx (Address: 0x100966d0)
- NtQueryInformationProcess (Address: 0x100966f4)
- NtQueryInformationToken (Address: 0x100966d4)
- NtQuerySecurityAttributesToken (Address: 0x100966ec)
- NtTerminateProcess (Address: 0x1009670c)
- RtlAcquireSRWLockExclusive (Address: 0x100966bc)
- RtlAcquireSRWLockShared (Address: 0x10096704)
- RtlAllocateHeap (Address: 0x10096700)
- RtlCapabilityCheck (Address: 0x100966f0)
- RtlCompareUnicodeString (Address: 0x100966c0)
- RtlCopySid (Address: 0x100966ac)
- RtlExpandEnvironmentStrings (Address: 0x100966e4)
- RtlFreeHeap (Address: 0x100966f8)
- RtlGetDeviceFamilyInfoEnum (Address: 0x100966c8)
- RtlInitUnicodeString (Address: 0x100966e8)
- RtlIsMultiSessionSku (Address: 0x100966cc)
- RtlIsParentOfChildAppContainer (Address: 0x100966dc)
- RtlLengthSid (Address: 0x100966a4)
- RtlNtStatusToDosError (Address: 0x100966d8)
- RtlNtStatusToDosErrorNoTeb (Address: 0x100966c4)
- RtlQueryTokenHostIdAsUlong64 (Address: 0x100966e0)
- RtlReleaseSRWLockExclusive (Address: 0x100966b8)
- RtlReleaseSRWLockShared (Address: 0x10096708)
- RtlSleepConditionVariableSRW (Address: 0x100966fc)
- RtlWakeAllConditionVariable (Address: 0x100966b4)
OLEAUT32.dll
- SysFreeString (Address: 0x10096028)
profapi.dll
- (Address: 0x10096714)
- (Address: 0x10096718)
RPCRT4.dll
- I_RpcBindingInqLocalClientPID (Address: 0x10096054)
- I_RpcExceptionFilter (Address: 0x1009605c)
- NdrAsyncClientCall (Address: 0x1009604c)
- RpcAsyncCancelCall (Address: 0x10096034)
- RpcAsyncCompleteCall (Address: 0x10096050)
- RpcAsyncInitializeHandle (Address: 0x10096058)
- RpcBindingFree (Address: 0x10096038)
- RpcBindingFromStringBindingW (Address: 0x10096060)
- RpcBindingSetAuthInfoExW (Address: 0x1009603c)
- RpcImpersonateClient (Address: 0x10096048)
- RpcRevertToSelf (Address: 0x10096044)
- RpcServerInqCallAttributesW (Address: 0x10096040)
- RpcStringBindingComposeW (Address: 0x10096064)
- RpcStringFreeW (Address: 0x10096030)
twinapi.appcore.dll
- (Address: 0x10096720)
- (Address: 0x10096724)