BcastDVRCommon.dll

Description: Windows Runtime BcastDVRCommon DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 6cd67daf675acb6419f2fadbf948327d

File Size: 181.5 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ??0BcastDVR_OutputDebug@@QAE@PBD@Z (Ordinal: 1, Address: 0x1cd70)
  • ??0ImpersonateHelper@Internal@Capture@Media@Windows@@QAE@XZ (Ordinal: 2, Address: 0x1dee0)
  • ??1ImpersonateHelper@Internal@Capture@Media@Windows@@QAE@XZ (Ordinal: 3, Address: 0x1def0)
  • ActiveMetadataManagerInstances (Ordinal: 4, Address: 0x15450)
  • ?AppendPath@EnvironmentManager@Internal@Capture@Media@Windows@@YGJABVString@25@0PAV625@@Z (Ordinal: 5, Address: 0x1e3a0)
  • ?CalcPreviewVideoBufferDataSize@GameDVRUtility@Internal@Capture@Media@Windows@@YGJKKPAK@Z (Ordinal: 6, Address: 0x20060)
  • ?CalcPreviewVideoFrameDataSize@GameDVRUtility@Internal@Capture@Media@Windows@@YGJKKPAK@Z (Ordinal: 7, Address: 0x1fff0)
  • ?CleanupObsoletePlugIns@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@@Z (Ordinal: 8, Address: 0x18840)
  • ?CloseDuplicatedHandle@GameDVRUtility@Internal@Capture@Media@Windows@@YGJKPAX@Z (Ordinal: 9, Address: 0x1f7d0)
  • ?CloseDuplicatedHandles@GameDVRUtility@Internal@Capture@Media@Windows@@YGJKKQAPAX@Z (Ordinal: 10, Address: 0x1f700)
  • CreateCallerManagerInstance (Ordinal: 11, Address: 0xfcd0)
  • CreateCallerManagerInstanceForAppId (Ordinal: 12, Address: 0xfdf0)
  • CreateMetadataManagerInstance (Ordinal: 13, Address: 0x153e0)
  • CreateMetadataManagerInstanceForAppId (Ordinal: 14, Address: 0x15480)
  • CreateMetadataManagerInstanceFromJson (Ordinal: 15, Address: 0x15510)
  • FireCallerManagerEvent (Ordinal: 16, Address: 0xfd70)
  • FireCallerManagerEventForAppId (Ordinal: 17, Address: 0xfe90)
  • ?FreeBroadcastSebEventIds@PlugInUtility@Internal@Capture@Media@Windows@@YGXPAPAU_GUID@@@Z (Ordinal: 18, Address: 0x17db0)
  • ?GetBroadcastPlugInRegistryPathFromSebEventId@EnvironmentManager@Internal@Capture@Media@Windows@@YGJABU_GUID@@PAVString@25@@Z (Ordinal: 19, Address: 0x1e6d0)
  • ?GetBroadcastPlugInRegistryPathFromSebEventIdString@EnvironmentManager@Internal@Capture@Media@Windows@@YGJPBGPAVString@25@@Z (Ordinal: 20, Address: 0x1e7d0)
  • ?GetBroadcastSebEventIds@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAKPAPAU_GUID@@@Z (Ordinal: 21, Address: 0x17cf0)
  • ?GetCallersPlugInInfo@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@ABU_GUID@@PAVString@25@2@Z (Ordinal: 22, Address: 0x19000)
  • ?GetCallersSebEventId@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAU_GUID@@@Z (Ordinal: 23, Address: 0x18070)
  • ?GetDefaultPlugIn@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PAU_GUID@@@Z (Ordinal: 24, Address: 0x17f80)
  • ?GetErrorHistoryCount@BcastDVRLogProviderBase@@SGKXZ (Ordinal: 25, Address: 0x1c850)
  • ?GetFormattedErrorHistory@BcastDVRLogProviderBase@@SGKPAVString@Internal@Windows@@@Z (Ordinal: 26, Address: 0x1c860)
  • ?GetGuidFromGuidString@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPBGPAU_GUID@@@Z (Ordinal: 27, Address: 0x1fa70)
  • ?GetGuidStringFromGuid@GameDVRUtility@Internal@Capture@Media@Windows@@YGJABU_GUID@@_NPAVString@25@@Z (Ordinal: 28, Address: 0x1f960)
  • ?GetHKeyCurrentUserForDefaultUser@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAPAUHKEY__@@@Z (Ordinal: 29, Address: 0x201e0)
  • ?GetHKeyCurrentUserForIUser@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIUser@System@5@PAPAUHKEY__@@@Z (Ordinal: 30, Address: 0x200f0)
  • ?GetIUserSID@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIUser@System@5@PAVString@25@@Z (Ordinal: 31, Address: 0x1f4f0)
  • ?GetJsonArray@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAEPAPAU?$IVector@PAUIJsonValue@Json@Data@Windows@@@785@@Z (Ordinal: 32, Address: 0x21500)
  • ?GetJsonBoolean@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAE2@Z (Ordinal: 33, Address: 0x21bc0)
  • ?GetJsonDateTime@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAEPAUDateTime@85@@Z (Ordinal: 34, Address: 0x21f90)
  • ?GetJsonDouble@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAEPAN@Z (Ordinal: 35, Address: 0x218b0)
  • ?GetJsonGuid@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAEPAU_GUID@@@Z (Ordinal: 36, Address: 0x21d40)
  • ?GetJsonNumber@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAEPA_J@Z (Ordinal: 37, Address: 0x21710)
  • ?GetJsonString@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAEPAVString@25@@Z (Ordinal: 38, Address: 0x21a30)
  • ?GetKnownFolderSubFolder@EnvironmentManager@Internal@Capture@Media@Windows@@YGJABU_GUID@@PBGPAVString@25@@Z (Ordinal: 39, Address: 0x1e4b0)
  • ?GetOSVersionString@GameDVRUtility@Internal@Capture@Media@Windows@@YGXPAVString@25@@Z (Ordinal: 40, Address: 0x1f580)
  • ?GetPlugInInfo@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@ABU_GUID@@PAVString@25@22@Z (Ordinal: 41, Address: 0x18da0)
  • ?GetPlugInPackageFullName@PlugInUtility@Internal@Capture@Media@Windows@@YGJABU_GUID@@PAVString@25@@Z (Ordinal: 42, Address: 0x190c0)
  • ?GetUserGameDVRConfigFolderPath@EnvironmentManager@Internal@Capture@Media@Windows@@YGJPAVString@25@PBG@Z (Ordinal: 43, Address: 0x1e5c0)
  • ?ImpersonateDefaultUser@ImpersonateHelper@Internal@Capture@Media@Windows@@QAEJXZ (Ordinal: 44, Address: 0x1e0a0)
  • ?ImpersonateUser@ImpersonateHelper@Internal@Capture@Media@Windows@@QAEJPAUIUser@System@5@@Z (Ordinal: 45, Address: 0x1df10)
  • ?Initialize@BcastDVR_OutputDebug@@SGXPBGW4BcastDVR_OutputDebug_TraceToFileType@@0@Z (Ordinal: 46, Address: 0x1ce20)
  • ?InsertJsonArray@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAPAU?$IVector@PAUIJsonValue@Json@Data@Windows@@@785@@Z (Ordinal: 47, Address: 0x20a30)
  • ?InsertJsonBoolean@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@E@Z (Ordinal: 48, Address: 0x20e70)
  • ?InsertJsonDateTime@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@UDateTime@Foundation@5@@Z (Ordinal: 49, Address: 0x21030)
  • ?InsertJsonDouble@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@N@Z (Ordinal: 50, Address: 0x20c90)
  • ?InsertJsonGuid@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@U_GUID@@@Z (Ordinal: 51, Address: 0x20f60)
  • ?InsertJsonNumber@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@_J@Z (Ordinal: 52, Address: 0x20b90)
  • ?InsertJsonObject@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@PAPAUIJsonObject@Json@Data@5@@Z (Ordinal: 53, Address: 0x20950)
  • ?InsertJsonString@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@2@Z (Ordinal: 54, Address: 0x20d80)
  • ?InsertNamedJsonEnumBitfields@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIJsonValueStatics@Json@Data@5@PAU?$IMap@PAUHSTRING__@@PAUIJsonValue@Json@Data@Windows@@@Collections@Foundation@5@PAUHSTRING__@@_KPBQBGH@Z (Ordinal: 55, Address: 0x213c0)
  • ?LogError@BcastDVRLogProviderBase@@SGXJPBD0H_N@Z (Ordinal: 56, Address: 0x1c110)
  • ?LogErrorEx@BcastDVRLogProviderBase@@SGXJPBD0H00_N@Z (Ordinal: 57, Address: 0x1c270)
  • ?MapConstantToString@GameDVRUtility@Internal@Capture@Media@Windows@@YGPBGQAPBGKKKK@Z (Ordinal: 58, Address: 0x20520)
  • ?MostRecentErrorInHistory@BcastDVRLogProviderBase@@SGJXZ (Ordinal: 59, Address: 0x1ca70)
  • ?OutputString@BcastDVR_OutputDebug@@QAEXXZ (Ordinal: 60, Address: 0x1d520)
  • ?PrintGuid@GameDVRUtility@Internal@Capture@Media@Windows@@YGJU_GUID@@PAVString@25@@Z (Ordinal: 61, Address: 0x20560)
  • ?PrintHRESULT@BcastDVR_OutputDebug@@QAEXJ@Z (Ordinal: 62, Address: 0x1d4e0)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBD0@Z (Ordinal: 63, Address: 0x1d320)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDE@Z (Ordinal: 64, Address: 0x1d420)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDH@Z (Ordinal: 65, Address: 0x1d460)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDI@Z (Ordinal: 66, Address: 0x1d3a0)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDK@Z (Ordinal: 67, Address: 0x1d3a0)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDN@Z (Ordinal: 68, Address: 0x1d4a0)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDPAX@Z (Ordinal: 69, Address: 0x1d360)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBDPBG@Z (Ordinal: 70, Address: 0x1d2e0)
  • ?PrintType@BcastDVR_OutputDebug@@QAEXPBD_K@Z (Ordinal: 71, Address: 0x1d3e0)
  • ?Printf@BcastDVRLogProviderBase@@SAX_N0PBD1HPBGZZ (Ordinal: 72, Address: 0x1c430)
  • ?RecreateStorageFile@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUIStorageFile@Storage@5@PAPAU675@@Z (Ordinal: 73, Address: 0x202b0)
  • ?RegGetDwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGXPAUHKEY__@@PBG1KPAK@Z (Ordinal: 74, Address: 0x1fab0)
  • ?RegGetQwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGXPAUHKEY__@@PBG1_KPA_K@Z (Ordinal: 75, Address: 0x1fbc0)
  • ?RegGetStringValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGXPAUHKEY__@@PBG1PAVString@25@@Z (Ordinal: 76, Address: 0x1fce0)
  • ?RegSetBinaryValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PBG1PBEK@Z (Ordinal: 77, Address: 0x1ff30)
  • ?RegSetDwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PBG1K@Z (Ordinal: 78, Address: 0x1fb00)
  • ?RegSetQwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PBG1_K@Z (Ordinal: 79, Address: 0x1fc20)
  • ?RegSetStringValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PBG1PAVString@25@@Z (Ordinal: 80, Address: 0x1fd60)
  • ?RegSetStringValue@GameDVRUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PBGPBD2@Z (Ordinal: 81, Address: 0x1fe40)
  • ?RegisterCallingPlugIn@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@PAUHSTRING__@@1ABU_GUID@@@Z (Ordinal: 82, Address: 0x184c0)
  • ?SetDefaultPlugIn@PlugInUtility@Internal@Capture@Media@Windows@@YGJPAUHKEY__@@ABU_GUID@@@Z (Ordinal: 83, Address: 0x18430)
  • ?Uninitialize@BcastDVR_OutputDebug@@SGXXZ (Ordinal: 84, Address: 0x1d020)
  • GetBroadcastSharedMemoryReader (Ordinal: 85, Address: 0xd630)
  • GetBroadcastSharedMemoryWriter (Ordinal: 86, Address: 0xd790)
  • GetPreviewSharedMemoryReader (Ordinal: 87, Address: 0xd900)
  • GetPreviewSharedMemoryWriter (Ordinal: 88, Address: 0xda30)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1002c028)
  • CoCreateFreeThreadedMarshaler (Address: 0x1002c010)
  • CoCreateInstance (Address: 0x1002c020)
  • CoDecrementMTAUsage (Address: 0x1002c01c)
  • CoGetCallContext (Address: 0x1002c00c)
  • CoGetMalloc (Address: 0x1002c008)
  • CoIncrementMTAUsage (Address: 0x1002c018)
  • CoTaskMemAlloc (Address: 0x1002c014)
  • CoTaskMemFree (Address: 0x1002c024)
  • StringFromGUID2 (Address: 0x1002c02c)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1002c034)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1002c040)
  • IsDebuggerPresent (Address: 0x1002c03c)
  • OutputDebugStringW (Address: 0x1002c044)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1002c04c)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1002c054)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1002c064)
  • RaiseException (Address: 0x1002c068)
  • SetLastError (Address: 0x1002c06c)
  • SetUnhandledExceptionFilter (Address: 0x1002c05c)
  • UnhandledExceptionFilter (Address: 0x1002c060)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1002c074)
  • GetFileAttributesW (Address: 0x1002c07c)
  • WriteFile (Address: 0x1002c078)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1002c088)
  • DuplicateHandle (Address: 0x1002c084)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1002c094)
  • HeapAlloc (Address: 0x1002c090)
  • HeapFree (Address: 0x1002c098)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • RegisterWaitForSingleObject (Address: 0x1002c0a0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x1002c0ac)
  • GetModuleFileNameA (Address: 0x1002c0b8)
  • GetModuleHandleExW (Address: 0x1002c0b4)
  • GetModuleHandleW (Address: 0x1002c0b0)
  • GetProcAddress (Address: 0x1002c0a8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1002c0c0)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1002c0c8)
  • MapViewOfFile (Address: 0x1002c0d0)
  • UnmapViewOfFile (Address: 0x1002c0cc)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1002c0d8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1002c0e8)
  • GetCurrentProcessId (Address: 0x1002c0e0)
  • GetCurrentThreadId (Address: 0x1002c0f4)
  • GetProcessId (Address: 0x1002c0f0)
  • OpenProcessToken (Address: 0x1002c0ec)
  • TerminateProcess (Address: 0x1002c0e4)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1002c0fc)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1002c104)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1002c10c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1002c118)
  • RegCreateKeyExW (Address: 0x1002c114)
  • RegDeleteKeyExW (Address: 0x1002c124)
  • RegEnumKeyExW (Address: 0x1002c128)
  • RegGetValueW (Address: 0x1002c12c)
  • RegNotifyChangeKeyValue (Address: 0x1002c120)
  • RegOpenCurrentUser (Address: 0x1002c130)
  • RegOpenKeyExW (Address: 0x1002c11c)
  • RegSetValueExA (Address: 0x1002c138)
  • RegSetValueExW (Address: 0x1002c134)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1002c140)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1002c148)
  • WideCharToMultiByte (Address: 0x1002c14c)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1002c17c)
  • CreateEventExW (Address: 0x1002c158)
  • CreateEventW (Address: 0x1002c198)
  • CreateMutexExW (Address: 0x1002c178)
  • CreateMutexW (Address: 0x1002c154)
  • CreateSemaphoreExW (Address: 0x1002c160)
  • DeleteCriticalSection (Address: 0x1002c174)
  • EnterCriticalSection (Address: 0x1002c164)
  • InitializeCriticalSectionEx (Address: 0x1002c170)
  • InitializeSRWLock (Address: 0x1002c184)
  • LeaveCriticalSection (Address: 0x1002c168)
  • OpenSemaphoreW (Address: 0x1002c188)
  • ReleaseMutex (Address: 0x1002c190)
  • ReleaseSemaphore (Address: 0x1002c16c)
  • ReleaseSRWLockExclusive (Address: 0x1002c180)
  • SetEvent (Address: 0x1002c15c)
  • WaitForSingleObject (Address: 0x1002c194)
  • WaitForSingleObjectEx (Address: 0x1002c18c)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1002c1a4)
  • InitOnceComplete (Address: 0x1002c1a8)
  • InitOnceExecuteOnce (Address: 0x1002c1a0)
  • Sleep (Address: 0x1002c1ac)
  • WaitOnAddress (Address: 0x1002c1b0)
  • WakeByAddressAll (Address: 0x1002c1b4)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x1002c1c8)
  • GetSystemTime (Address: 0x1002c1bc)
  • GetSystemTimeAsFileTime (Address: 0x1002c1c4)
  • GetTickCount (Address: 0x1002c1c0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWork (Address: 0x1002c1d8)
  • CreateThreadpoolWork (Address: 0x1002c1d0)
  • FreeLibraryWhenCallbackReturns (Address: 0x1002c1dc)
  • SubmitThreadpoolWork (Address: 0x1002c1d4)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x1002c1e4)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1002c1f0)
  • SystemTimeToFileTime (Address: 0x1002c1ec)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1002c1f8)
  • RoTransformError (Address: 0x1002c1fc)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1002c208)
  • RoGetActivationFactory (Address: 0x1002c204)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsConcatString (Address: 0x1002c224)
  • WindowsCreateString (Address: 0x1002c228)
  • WindowsCreateStringReference (Address: 0x1002c218)
  • WindowsDeleteString (Address: 0x1002c22c)
  • WindowsDuplicateString (Address: 0x1002c220)
  • WindowsGetStringLen (Address: 0x1002c214)
  • WindowsGetStringRawBuffer (Address: 0x1002c21c)
  • WindowsIsStringEmpty (Address: 0x1002c210)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1002c238)
  • EventSetInformation (Address: 0x1002c23c)
  • EventUnregister (Address: 0x1002c234)
  • EventWriteTransfer (Address: 0x1002c240)
api-ms-win-security-base-l1-1-0.dll
  • ImpersonateLoggedOnUser (Address: 0x1002c24c)
  • RevertToSelf (Address: 0x1002c248)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1002c274)
  • __dllonexit (Address: 0x1002c258)
  • _amsg_exit (Address: 0x1002c26c)
  • _callnewh (Address: 0x1002c29c)
  • _CxxThrowException (Address: 0x1002c28c)
  • _except_handler4_common (Address: 0x1002c278)
  • _ftol2 (Address: 0x1002c2e8)
  • _initterm (Address: 0x1002c264)
  • _lock (Address: 0x1002c254)
  • _onexit (Address: 0x1002c25c)
  • _purecall (Address: 0x1002c2d0)
  • _unlock (Address: 0x1002c2ac)
  • _vsnprintf (Address: 0x1002c280)
  • _vsnprintf_s (Address: 0x1002c2b4)
  • _vsnwprintf (Address: 0x1002c2dc)
  • _wcsicmp (Address: 0x1002c2c4)
  • _wtoi (Address: 0x1002c2a8)
  • _XcptFilter (Address: 0x1002c270)
  • ??_V@YAXPAX@Z (Address: 0x1002c2e0)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x1002c298)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x1002c294)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1002c2b8)
  • ??0exception@@QAE@XZ (Address: 0x1002c2c8)
  • ??1exception@@UAE@XZ (Address: 0x1002c2cc)
  • ??1type_info@@UAE@XZ (Address: 0x1002c2e4)
  • ??3@YAXPAX@Z (Address: 0x1002c2d4)
  • ?name@type_info@@QBEPBDXZ (Address: 0x1002c2a4)
  • ?terminate@@YAXXZ (Address: 0x1002c260)
  • ?what@exception@@UBEPBDXZ (Address: 0x1002c290)
  • free (Address: 0x1002c268)
  • malloc (Address: 0x1002c2a0)
  • memcmp (Address: 0x1002c2c0)
  • memcpy (Address: 0x1002c288)
  • memcpy_s (Address: 0x1002c2d8)
  • memmove (Address: 0x1002c27c)
  • memset (Address: 0x1002c2ec)
  • swscanf_s (Address: 0x1002c2b0)
  • wcschr (Address: 0x1002c2bc)
  • wcsrchr (Address: 0x1002c284)
ntdll.dll
  • NtQueryInformationToken (Address: 0x1002c2f8)
  • RtlAllocateHeap (Address: 0x1002c300)
  • RtlCompareUnicodeString (Address: 0x1002c304)
  • RtlFreeHeap (Address: 0x1002c2fc)
  • RtlInitUnicodeString (Address: 0x1002c2f4)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1002c308)
RPCRT4.dll
  • UuidCreate (Address: 0x1002c000)