dmcmnutils.dll

Description: dmcmnutils

Version: 10.0.19041.6280

Architecture: 32-bit

Operating System: Windows NT

SHA256: 72d9d7b501efdb0ac7c329145cca7d12

File Size: 398.5 KB

Uploaded At: Dec. 1, 2025, 7:55 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

BigStrcat (Ordinal: 1, Address: 0x2d3b0)
ComputeHmac (Ordinal: 2, Address: 0x257e0)
CopyString (Ordinal: 3, Address: 0x2d490)
CreateBstrArray (Ordinal: 4, Address: 0x2dcd0)
DMGetClientHardwareUID (Ordinal: 5, Address: 0x25ea0)
DMGetDeviceClientID (Ordinal: 6, Address: 0x25ac0)
DMSetDeviceClientID (Ordinal: 7, Address: 0x25b50)
DecodeBase64W (Ordinal: 8, Address: 0x22020)
DmCancelGetUserPermissionAsync (Ordinal: 9, Address: 0x37380)
DmCheckIfAadAccountLoggedOn (Ordinal: 10, Address: 0x33750)
DmCopyDirectoryRecursive (Ordinal: 11, Address: 0x24db0)
DmCreateFileSafe (Ordinal: 12, Address: 0x252b0)
DmCreateTask (Ordinal: 13, Address: 0x2a580)
DmDeleteTask (Ordinal: 14, Address: 0x2b1c0)
DmDisableTask (Ordinal: 15, Address: 0x2bf50)
DmEnableTask (Ordinal: 16, Address: 0x2bc10)
DmEnumUsers (Ordinal: 17, Address: 0x2cfd0)
DmGenerateAttestationClaims (Ordinal: 18, Address: 0x378f0)
DmGetAadDeviceMdmEnrollmentResourceUrlForRecovery (Ordinal: 19, Address: 0x34610)
DmGetAadDeviceMdmEnrollmentResourceUrlWithDiscovery (Ordinal: 20, Address: 0x33bb0)
DmGetAadDeviceToken (Ordinal: 21, Address: 0x336f0)
DmGetAadDeviceTokenWithDiscovery (Ordinal: 22, Address: 0x33cd0)
DmGetAadEnrollmentResource (Ordinal: 23, Address: 0x33e30)
DmGetAadUserToken (Ordinal: 24, Address: 0x33660)
DmGetActiveUserSid (Ordinal: 25, Address: 0x2cd20)
DmGetCurrentUserSid (Ordinal: 26, Address: 0x2cae0)
DmGetCurrentUserToken (Ordinal: 27, Address: 0x2cb00)
DmGetEnrollmentTypeName (Ordinal: 28, Address: 0x26fa0)
DmGetEnrollmentTypeValue (Ordinal: 29, Address: 0x26fd0)
DmGetFileSize (Ordinal: 30, Address: 0x24d30)
DmGetIMEI (Ordinal: 31, Address: 0x28580)
DmGetSmbiosSerialNumber (Ordinal: 32, Address: 0x27c90)
DmGetTpmInfo (Ordinal: 33, Address: 0x27cf0)
DmGetTpmIsAlgorithmSupported (Ordinal: 34, Address: 0x28020)
DmGetTpmState (Ordinal: 35, Address: 0x27e10)
DmGetUserEditFieldInput (Ordinal: 36, Address: 0x37210)
DmGetUserPermission (Ordinal: 37, Address: 0x371f0)
DmGetUserPermissionAsync (Ordinal: 38, Address: 0x372b0)
DmGetUserSidFromToken (Ordinal: 39, Address: 0x2cf50)
DmGetUserTokenFromSid (Ordinal: 40, Address: 0x2cb20)
DmImpersonate (Ordinal: 41, Address: 0x2cbf0)
DmInformUser (Ordinal: 42, Address: 0x371d0)
DmInitializeContainer (Ordinal: 43, Address: 0x223a0)
DmInvalidateAadDeviceToken (Ordinal: 44, Address: 0x33720)
DmInvalidateAadUserToken (Ordinal: 45, Address: 0x33690)
DmIsDeviceConnected (Ordinal: 46, Address: 0x28370)
DmIsDeviceRoaming (Ordinal: 47, Address: 0x28400)
DmIsRunningInSystemContext (Ordinal: 48, Address: 0x2cac0)
DmIsSystemOrAdmin (Ordinal: 49, Address: 0x2ca60)
DmIsSystemOrUserIsAdmin (Ordinal: 50, Address: 0x2ca90)
DmIsTaskScheduled (Ordinal: 51, Address: 0x2b4c0)
DmIsTaskScheduledAndEnabled (Ordinal: 52, Address: 0x2b840)
DmMdmSign (Ordinal: 53, Address: 0x23490)
DmPlayNotificationSound (Ordinal: 54, Address: 0x373d0)
DmRaiseToastNotification (Ordinal: 55, Address: 0x2fed0)
DmRaiseToastNotificationAndWait (Ordinal: 56, Address: 0x2f0a0)
DmRegisterRoamingNotification (Ordinal: 57, Address: 0x28750)
DmReleaseContainer (Ordinal: 58, Address: 0x229f0)
DmRemoveToastNotification (Ordinal: 59, Address: 0x30070)
DmRemoveToastNotificationByExecutablePath (Ordinal: 60, Address: 0x30150)
DmRequestAadUserToken (Ordinal: 61, Address: 0x336c0)
DmRevertToSelf (Ordinal: 62, Address: 0x2ccd0)
DmRunTask (Ordinal: 63, Address: 0x2a0b0)
DmSetWindowsAIKStorageLocation (Ordinal: 64, Address: 0x37650)
DmStartContainerActivity (Ordinal: 65, Address: 0x226d0)
DmStopContainerActivity (Ordinal: 66, Address: 0x228c0)
DmUnregisterRoamingNotification (Ordinal: 67, Address: 0x287f0)
DmWnfGetNotification (Ordinal: 68, Address: 0x374f0)
DmWnfPublish (Ordinal: 69, Address: 0x37600)
DmWnfQuery (Ordinal: 70, Address: 0x37470)
EncodeBase64 (Ordinal: 71, Address: 0x21de0)
EncodeBase64W (Ordinal: 72, Address: 0x21ed0)
EscapeStringW (Ordinal: 73, Address: 0x2d580)
GetHeader (Ordinal: 74, Address: 0x265d0)
GetICCID (Ordinal: 75, Address: 0x29130)
GetIMEI (Ordinal: 76, Address: 0x292d0)
GetIMSI (Ordinal: 77, Address: 0x28f90)
GetIMSIByIccID (Ordinal: 78, Address: 0x28a70)
GetPGListRegKeyName (Ordinal: 79, Address: 0x28830)
GetPhoneNumber (Ordinal: 80, Address: 0x293c0)
GetPhoneUID (Ordinal: 81, Address: 0x25fc0)
Hash_Create (Ordinal: 82, Address: 0x27580)
Hash_Delete (Ordinal: 83, Address: 0x278a0)
Hash_Destroy (Ordinal: 84, Address: 0x27630)
Hash_DestroyCallback (Ordinal: 85, Address: 0x276f0)
Hash_EnumCallback (Ordinal: 86, Address: 0x27a70)
Hash_Get (Ordinal: 87, Address: 0x27990)
Hash_Insert (Ordinal: 88, Address: 0x27730)
Hash_SetBucketThreshold (Ordinal: 89, Address: 0x27b60)
InvStrCmpIW (Ordinal: 90, Address: 0x2d730)
InvStrCmpNIW (Ordinal: 91, Address: 0x2d800)
InvStrCmpNW (Ordinal: 92, Address: 0x2d790)
InvStrCmpW (Ordinal: 93, Address: 0x2d6d0)
IsDesktopSku (Ordinal: 94, Address: 0x26dd0)
IsPhoneOS (Ordinal: 95, Address: 0x26840)
IsServerVersionOrAbove (Ordinal: 96, Address: 0x26e20)
IsWvdFeatureAllowed (Ordinal: 97, Address: 0x26f40)
IsWvdSku (Ordinal: 98, Address: 0x26d30)
MBToUnicode (Ordinal: 99, Address: 0x2d960)
OmDmRegistryAllocAndGetString (Ordinal: 100, Address: 0x26400)
OmaDmRegistryDeleteValue (Ordinal: 101, Address: 0x262d0)
OmaDmRegistryGetAllSubKeys (Ordinal: 102, Address: 0x268b0)
OmaDmRegistryGetAllValues (Ordinal: 103, Address: 0x26a80)
OmaDmRegistryGetBinary (Ordinal: 104, Address: 0x26530)
OmaDmRegistryGetDWORD (Ordinal: 105, Address: 0x26160)
OmaDmRegistryGetString (Ordinal: 106, Address: 0x26360)
OmaDmRegistryRetrieveCurrentUsersHKCU (Ordinal: 107, Address: 0x26c50)
OmaDmRegistrySetBinary (Ordinal: 108, Address: 0x264a0)
OmaDmRegistrySetDWORD (Ordinal: 109, Address: 0x260d0)
OmaDmRegistrySetString (Ordinal: 110, Address: 0x26220)
QueryPolicy (Ordinal: 111, Address: 0x29c20)
SafeMultiByteToWideChar (Ordinal: 112, Address: 0x2db30)
SafeStringToDword (Ordinal: 113, Address: 0x2dbd0)
SafeWideCharToMultiByte (Ordinal: 114, Address: 0x2da90)
SetConnectionPriority (Ordinal: 115, Address: 0x26790)
SetPolicy (Ordinal: 116, Address: 0x29d00)
UnicodeToMB (Ordinal: 117, Address: 0x2d870)
BinaryToHexString (Ordinal: 118, Address: 0x2df10)
HexStringToBinary (Ordinal: 119, Address: 0x2dfb0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1005a030)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1005a038)
CoCreateGuid (Address: 0x1005a050)
CoCreateInstance (Address: 0x1005a04c)
CoInitializeEx (Address: 0x1005a048)
CoRevertToSelf (Address: 0x1005a05c)
CoTaskMemAlloc (Address: 0x1005a064)
CoTaskMemFree (Address: 0x1005a044)
CoUninitialize (Address: 0x1005a058)
CoWaitForMultipleHandles (Address: 0x1005a03c)
PropVariantClear (Address: 0x1005a040)
StringFromCLSID (Address: 0x1005a060)
StringFromGUID2 (Address: 0x1005a054)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1005a074)
IsDebuggerPresent (Address: 0x1005a070)
OutputDebugStringW (Address: 0x1005a06c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1005a07c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1005a084)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1005a094)
RaiseException (Address: 0x1005a09c)
SetLastError (Address: 0x1005a098)
SetUnhandledExceptionFilter (Address: 0x1005a08c)
UnhandledExceptionFilter (Address: 0x1005a090)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1005a0bc)
CreateDirectoryW (Address: 0x1005a0ac)
CreateFileW (Address: 0x1005a0b0)
DeleteFileW (Address: 0x1005a0c8)
FindClose (Address: 0x1005a0a8)
FindFirstFileW (Address: 0x1005a0c4)
FindNextFileW (Address: 0x1005a0a4)
GetFileAttributesExW (Address: 0x1005a0c0)
GetFileAttributesW (Address: 0x1005a0cc)
GetFileInformationByHandle (Address: 0x1005a0b8)
GetFinalPathNameByHandleW (Address: 0x1005a0b4)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1005a0d4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1005a0dc)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1005a0ec)
HeapAlloc (Address: 0x1005a0e8)
HeapFree (Address: 0x1005a0e4)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1005a0f8)
LocalFree (Address: 0x1005a0f4)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1005a100)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1005a11c)
FreeLibrary (Address: 0x1005a118)
GetModuleFileNameA (Address: 0x1005a120)
GetModuleHandleExW (Address: 0x1005a114)
GetModuleHandleW (Address: 0x1005a10c)
GetProcAddress (Address: 0x1005a124)
LoadLibraryExW (Address: 0x1005a110)
LoadStringW (Address: 0x1005a108)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1005a12c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1005a138)
IsDBCSLeadByte (Address: 0x1005a134)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x1005a144)
PathCchCombine (Address: 0x1005a14c)
PathCchRemoveExtension (Address: 0x1005a148)
PathCchRenameExtension (Address: 0x1005a140)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1005a158)
GetEnvironmentVariableW (Address: 0x1005a154)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1005a164)
GetCurrentProcess (Address: 0x1005a170)
GetCurrentProcessId (Address: 0x1005a160)
GetCurrentThread (Address: 0x1005a174)
GetCurrentThreadId (Address: 0x1005a16c)
OpenProcessToken (Address: 0x1005a17c)
OpenThreadToken (Address: 0x1005a180)
ProcessIdToSessionId (Address: 0x1005a178)
TerminateProcess (Address: 0x1005a168)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1005a188)
OpenProcess (Address: 0x1005a18c)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1005a194)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1005a1ac)
RegCreateKeyExW (Address: 0x1005a1b0)
RegDeleteValueW (Address: 0x1005a1a0)
RegEnumKeyExW (Address: 0x1005a1a4)
RegEnumValueW (Address: 0x1005a19c)
RegGetValueW (Address: 0x1005a1c0)
RegOpenCurrentUser (Address: 0x1005a1a8)
RegOpenKeyExW (Address: 0x1005a1b8)
RegQueryInfoKeyW (Address: 0x1005a1c4)
RegQueryValueExW (Address: 0x1005a1bc)
RegSetValueExW (Address: 0x1005a1b4)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x1005a1cc)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x1005a1d8)
PathFindFileNameW (Address: 0x1005a1d4)
PathFindNextComponentW (Address: 0x1005a1dc)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x1005a1ec)
MultiByteToWideChar (Address: 0x1005a1e8)
WideCharToMultiByte (Address: 0x1005a1e4)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1005a230)
AcquireSRWLockShared (Address: 0x1005a238)
CreateEventExW (Address: 0x1005a208)
CreateEventW (Address: 0x1005a1f4)
CreateMutexExW (Address: 0x1005a23c)
CreateSemaphoreExW (Address: 0x1005a200)
DeleteCriticalSection (Address: 0x1005a234)
EnterCriticalSection (Address: 0x1005a204)
InitializeCriticalSection (Address: 0x1005a1f8)
InitializeCriticalSectionAndSpinCount (Address: 0x1005a214)
InitializeCriticalSectionEx (Address: 0x1005a21c)
LeaveCriticalSection (Address: 0x1005a218)
OpenSemaphoreW (Address: 0x1005a22c)
ReleaseMutex (Address: 0x1005a224)
ReleaseSemaphore (Address: 0x1005a210)
ReleaseSRWLockExclusive (Address: 0x1005a228)
ReleaseSRWLockShared (Address: 0x1005a240)
ResetEvent (Address: 0x1005a1fc)
SetEvent (Address: 0x1005a20c)
WaitForSingleObject (Address: 0x1005a220)
WaitForSingleObjectEx (Address: 0x1005a244)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1005a254)
WaitOnAddress (Address: 0x1005a24c)
WakeByAddressAll (Address: 0x1005a250)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x1005a264)
GetSystemTimeAsFileTime (Address: 0x1005a25c)
GetVersionExW (Address: 0x1005a260)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x1005a26c)
GetSystemFirmwareTable (Address: 0x1005a270)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1005a278)
CreateThreadpoolTimer (Address: 0x1005a280)
SetThreadpoolTimer (Address: 0x1005a27c)
WaitForThreadpoolTimerCallbacks (Address: 0x1005a284)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1005a28c)
SystemTimeToFileTime (Address: 0x1005a290)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1005a298)
RoInitialize (Address: 0x1005a2a0)
RoUninitialize (Address: 0x1005a29c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1005a2b4)
WindowsCreateStringReference (Address: 0x1005a2b0)
WindowsDeleteString (Address: 0x1005a2ac)
WindowsGetStringRawBuffer (Address: 0x1005a2a8)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x1005a358)
__std_terminate (Address: 0x1005a350)
_CxxThrowException (Address: 0x1005a340)
_except_handler4_common (Address: 0x1005a318)
_o___std_exception_copy (Address: 0x1005a33c)
_o___std_exception_destroy (Address: 0x1005a338)
_o___std_type_info_destroy_list (Address: 0x1005a334)
_o___stdio_common_vsnprintf_s (Address: 0x1005a330)
_o___stdio_common_vsprintf_s (Address: 0x1005a32c)
_o___stdio_common_vswprintf (Address: 0x1005a328)
_o__callnewh (Address: 0x1005a354)
_o__cexit (Address: 0x1005a34c)
_o__configure_narrow_argv (Address: 0x1005a324)
_o__crt_atexit (Address: 0x1005a2d8)
_o__errno (Address: 0x1005a320)
_o__execute_onexit_table (Address: 0x1005a31c)
_o__initialize_narrow_environment (Address: 0x1005a2bc)
_o__initialize_onexit_table (Address: 0x1005a2c0)
_o__invalid_parameter_noinfo (Address: 0x1005a2c4)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1005a2c8)
_o__purecall (Address: 0x1005a2cc)
_o__register_onexit_function (Address: 0x1005a2d0)
_o__seh_filter_dll (Address: 0x1005a2d4)
_o__wcsicmp (Address: 0x1005a2dc)
_o__wcsnicmp (Address: 0x1005a2e0)
_o__wsplitpath_s (Address: 0x1005a2e8)
_o__wtoi64 (Address: 0x1005a2ec)
_o_ceil (Address: 0x1005a2f0)
_o_free (Address: 0x1005a2f4)
_o_iswdigit (Address: 0x1005a2f8)
_o_iswspace (Address: 0x1005a2fc)
_o_malloc (Address: 0x1005a300)
_o_terminate (Address: 0x1005a304)
_o_toupper (Address: 0x1005a308)
_o_wcscat_s (Address: 0x1005a30c)
_o_wcstod (Address: 0x1005a310)
_o_wcstoul (Address: 0x1005a314)
memchr (Address: 0x1005a35c)
memcmp (Address: 0x1005a360)
memcpy (Address: 0x1005a364)
memmove (Address: 0x1005a2e4)
wcschr (Address: 0x1005a348)
wcsstr (Address: 0x1005a344)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1005a370)
_initterm_e (Address: 0x1005a36c)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1005a378)
wcsnlen (Address: 0x1005a37c)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1005a388)
EventSetInformation (Address: 0x1005a390)
EventUnregister (Address: 0x1005a384)
EventWriteTransfer (Address: 0x1005a38c)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x1005a3a0)
CheckTokenMembership (Address: 0x1005a3b4)
CopySid (Address: 0x1005a3a4)
EqualSid (Address: 0x1005a398)
FreeSid (Address: 0x1005a3b8)
GetLengthSid (Address: 0x1005a3b0)
GetTokenInformation (Address: 0x1005a3ac)
ImpersonateLoggedOnUser (Address: 0x1005a3a8)
RevertToSelf (Address: 0x1005a39c)

api-ms-win-security-cryptoapi-l1-1-0.dll

CryptCreateHash (Address: 0x1005a3cc)
CryptDestroyHash (Address: 0x1005a3d0)
CryptDuplicateHash (Address: 0x1005a3d4)
CryptGetHashParam (Address: 0x1005a3c4)
CryptHashData (Address: 0x1005a3c0)
CryptReleaseContext (Address: 0x1005a3c8)

api-ms-win-security-lsalookup-l1-1-2.dll

LsaLookupUserAccountType (Address: 0x1005a3dc)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1005a3e4)
ConvertStringSidToSidW (Address: 0x1005a3e8)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1005a3f8)
BCryptCreateHash (Address: 0x1005a410)
BCryptDecrypt (Address: 0x1005a40c)
BCryptDestroyHash (Address: 0x1005a41c)
BCryptDestroyKey (Address: 0x1005a400)
BCryptEncrypt (Address: 0x1005a418)
BCryptFinishHash (Address: 0x1005a420)
BCryptGenerateSymmetricKey (Address: 0x1005a404)
BCryptGenRandom (Address: 0x1005a3f0)
BCryptGetProperty (Address: 0x1005a3fc)
BCryptHashData (Address: 0x1005a414)
BCryptOpenAlgorithmProvider (Address: 0x1005a3f4)
BCryptSetProperty (Address: 0x1005a408)

CRYPT32.dll

CryptAcquireCertificatePrivateKey (Address: 0x1005a004)
CryptEncodeObjectEx (Address: 0x1005a000)
CryptSignMessage (Address: 0x1005a008)

msvcp_win.dll

?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x1005a480)
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ (Address: 0x1005a450)
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x1005a458)
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x1005a488)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1005a478)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1005a470)
?_Xoverflow_error@std@@YAXPBD@Z (Address: 0x1005a474)
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1005a440)
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x1005a444)
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1005a43c)
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1005a464)
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1005a47c)
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1005a468)
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x1005a448)
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ (Address: 0x1005a484)
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x1005a46c)
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x1005a434)
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x1005a430)
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x1005a460)
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x1005a454)
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z (Address: 0x1005a45c)
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z (Address: 0x1005a438)
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x1005a490)
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x1005a428)
?uncaught_exception@std@@YA_NXZ (Address: 0x1005a48c)
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x1005a42c)
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x1005a44c)

ncrypt.dll

NCryptCreateClaim (Address: 0x1005a4ac)
NCryptExportKey (Address: 0x1005a4b4)
NCryptFreeObject (Address: 0x1005a4a4)
NCryptGetProperty (Address: 0x1005a498)
NCryptIsAlgSupported (Address: 0x1005a4a0)
NCryptOpenKey (Address: 0x1005a4b0)
NCryptOpenStorageProvider (Address: 0x1005a49c)
NCryptSetProperty (Address: 0x1005a4a8)

ntdll.dll

NtQuerySecurityAttributesToken (Address: 0x1005a4ec)
NtQueryWnfStateData (Address: 0x1005a4bc)
NtSetInformationToken (Address: 0x1005a4e0)
RtlAllocateHeap (Address: 0x1005a4dc)
RtlCompareMemory (Address: 0x1005a4f0)
RtlFreeHeap (Address: 0x1005a4e8)
RtlGetDeviceFamilyInfoEnum (Address: 0x1005a4fc)
RtlGetPersistedStateLocation (Address: 0x1005a4d8)
RtlGetVersion (Address: 0x1005a4f4)
RtlInitUnicodeString (Address: 0x1005a4e4)
RtlIsMultiSessionSku (Address: 0x1005a4d4)
RtlIsStateSeparationEnabled (Address: 0x1005a4c4)
RtlNtStatusToDosError (Address: 0x1005a4cc)
RtlPublishWnfStateData (Address: 0x1005a4c0)
RtlQueryWnfStateData (Address: 0x1005a4d0)
RtlSubscribeWnfStateChangeNotification (Address: 0x1005a4c8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1005a4f8)

OLEAUT32.dll

SysAllocString (Address: 0x1005a018)
SysFreeString (Address: 0x1005a010)
VariantClear (Address: 0x1005a014)
VariantInit (Address: 0x1005a01c)

RPCRT4.dll

UuidCreate (Address: 0x1005a028)
UuidFromStringW (Address: 0x1005a024)

tbs.dll

Tbsi_Context_Create (Address: 0x1005a514)
Tbsi_Get_TCG_Log_Ex (Address: 0x1005a50c)
Tbsi_GetDeviceInfo (Address: 0x1005a508)
Tbsip_Context_Close (Address: 0x1005a504)
Tbsip_Submit_Command (Address: 0x1005a510)