dmenrollengine.dll

Description: Enroll Engine DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: b747329b1dff7e4ffd0d2c9364bb3f07

File Size: 743.5 KB

Uploaded At: Dec. 1, 2025, 7:55 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DiscoverEndpoint (Ordinal: 1, Address: 0x48f40)
  • FindDiscoveryService (Ordinal: 2, Address: 0x8b1f0)
  • CleanupExpiredOMADMSessions (Ordinal: 3, Address: 0x7ecf0)
  • EnableLogging (Ordinal: 4, Address: 0x81960)
  • DiscoverEndpointEx (Ordinal: 5, Address: 0x491d0)
  • FindDiscoveryServiceEx (Ordinal: 6, Address: 0x49230)
  • GetEnrollmentClientContext (Ordinal: 7, Address: 0x7de60)
  • SetEnrollmentAadResourceUrl (Ordinal: 8, Address: 0x7b010)
  • OpenEnrollmentsHKEY (Ordinal: 9, Address: 0x7afe0)
  • GetDatabaseManagerInstance (Ordinal: 10, Address: 0x7adf0)
  • GetProviderID (Ordinal: 11, Address: 0x7afb0)
  • SetProviderID (Ordinal: 12, Address: 0x7b100)
  • SetEnrollmentUPN (Ordinal: 13, Address: 0x7b0d0)
  • SwitchAADLinkedEnrollment (Ordinal: 14, Address: 0x7b130)
  • SetEnrollmentDormant (Ordinal: 15, Address: 0x7b070)
  • _IsManagementRegistrationAllowed (Ordinal: 16, Address: 0x7b490)
  • SetEnrollmentAadSendDeviceToken (Ordinal: 17, Address: 0x7b040)
  • GetEnrollmentsOfTypes (Ordinal: 18, Address: 0x322a0)
  • DiscoverEndpointEx2 (Ordinal: 19, Address: 0x48fa0)
  • VerifyServerIsMmpcEx (Ordinal: 20, Address: 0x30370)
  • DllCanUnloadNow (Ordinal: 21, Address: 0x76c00)
  • DllGetActivationFactory (Ordinal: 22, Address: 0x76c20)
  • DllGetClassObject (Ordinal: 23, Address: 0x76c40)
  • AutoEnrollMDM (Ordinal: 24, Address: 0x75590)
  • BeginEnrollmentScope (Ordinal: 25, Address: 0x300a0)
  • EnrollEngineInitialize (Ordinal: 26, Address: 0x75890)
  • FreeMmpcDiscoveryResultsData (Ordinal: 27, Address: 0x495c0)
  • GetCertificatePolicy (Ordinal: 28, Address: 0x3b190)
  • GetEnrollmentAadResourceUrl (Ordinal: 29, Address: 0x7ae00)
  • GetEnrollmentAadSendDeviceToken (Ordinal: 30, Address: 0x7ae30)
  • GetEnrollmentAuthPolicy (Ordinal: 31, Address: 0x320f0)
  • GetEnrollmentCertStore (Ordinal: 32, Address: 0x7ae60)
  • GetEnrollmentClientCertThumbprint (Ordinal: 33, Address: 0x7ae90)
  • GetEnrollmentCurCryptoProvider (Ordinal: 34, Address: 0x32120)
  • GetEnrollmentDiscoveryService (Ordinal: 35, Address: 0x7aec0)
  • GetEnrollmentEntDmId (Ordinal: 36, Address: 0x32150)
  • GetEnrollmentForceAadToken (Ordinal: 37, Address: 0x32180)
  • GetEnrollmentLinkedEnrollmentHasPriority (Ordinal: 38, Address: 0x321b0)
  • GetEnrollmentLinkedEnrollmentId (Ordinal: 39, Address: 0x321e0)
  • GetEnrollmentLinkedEnrollmentLockedToMMPC (Ordinal: 40, Address: 0x32210)
  • GetEnrollmentPartnerOpaqueID (Ordinal: 41, Address: 0x7aef0)
  • GetEnrollmentResourceCache (Ordinal: 42, Address: 0x32240)
  • GetEnrollmentSID (Ordinal: 43, Address: 0x7af20)
  • GetEnrollmentState (Ordinal: 44, Address: 0x7af50)
  • GetEnrollmentTenantID (Ordinal: 45, Address: 0x32270)
  • GetEnrollmentType (Ordinal: 46, Address: 0x2cbf0)
  • GetEnrollmentUPN (Ordinal: 47, Address: 0x7af80)
  • GetFirstEnrollmentGuidOfTypes (Ordinal: 48, Address: 0x322d0)
  • GetIsRecoveryAllowed (Ordinal: 49, Address: 0x32370)
  • GetMmpcEnrollmentFlag (Ordinal: 50, Address: 0x323a0)
  • GetRecoveryInitiatedByServer (Ordinal: 51, Address: 0x323c0)
  • GetRecoveryRetryCount (Ordinal: 52, Address: 0x323f0)
  • GetRecoveryStatusEnum (Ordinal: 53, Address: 0x32420)
  • IsLockedToMmpc (Ordinal: 54, Address: 0x30100)
  • MmpcDiscoverEndpoint (Ordinal: 55, Address: 0x49610)
  • SetEnrollState (Ordinal: 56, Address: 0x32450)
  • SetEnrollmentForceAadToken (Ordinal: 57, Address: 0x32480)
  • SetEnrollmentPartnerOpaqueID (Ordinal: 58, Address: 0x7b0a0)
  • SetEnrollmentResourceCache (Ordinal: 59, Address: 0x324b0)
  • SetIsRecoveryAllowed (Ordinal: 60, Address: 0x324e0)
  • SetMmpcEnrollmentFlag (Ordinal: 61, Address: 0x32510)
  • SetRecoveryInitiatedByServer (Ordinal: 62, Address: 0x32530)
  • SetRecoveryRetryCount (Ordinal: 63, Address: 0x32560)
  • SetRecoveryStateAndErrorCode (Ordinal: 64, Address: 0x32590)
  • SysprepGeneralize (Ordinal: 65, Address: 0x302b0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x100ab0fc)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x100ab11c)
  • CoCreateFreeThreadedMarshaler (Address: 0x100ab134)
  • CoCreateGuid (Address: 0x100ab114)
  • CoCreateInstance (Address: 0x100ab104)
  • CoInitializeEx (Address: 0x100ab120)
  • CoRevertToSelf (Address: 0x100ab108)
  • CoTaskMemAlloc (Address: 0x100ab110)
  • CoTaskMemFree (Address: 0x100ab10c)
  • CoUninitialize (Address: 0x100ab124)
  • CoWaitForMultipleHandles (Address: 0x100ab118)
  • IIDFromString (Address: 0x100ab130)
  • StringFromCLSID (Address: 0x100ab128)
  • StringFromGUID2 (Address: 0x100ab12c)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100ab140)
  • IsDebuggerPresent (Address: 0x100ab13c)
  • OutputDebugStringW (Address: 0x100ab144)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x100ab14c)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x100ab154)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100ab15c)
  • RaiseException (Address: 0x100ab160)
  • SetLastError (Address: 0x100ab16c)
  • SetUnhandledExceptionFilter (Address: 0x100ab164)
  • UnhandledExceptionFilter (Address: 0x100ab168)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x100ab174)
  • CreateFileW (Address: 0x100ab19c)
  • DeleteFileW (Address: 0x100ab184)
  • FindClose (Address: 0x100ab18c)
  • FindFirstFileW (Address: 0x100ab198)
  • FindNextFileW (Address: 0x100ab17c)
  • GetFileSize (Address: 0x100ab178)
  • GetFullPathNameW (Address: 0x100ab194)
  • ReadFile (Address: 0x100ab180)
  • RemoveDirectoryW (Address: 0x100ab190)
  • WriteFile (Address: 0x100ab188)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x100ab1a4)
api-ms-win-core-file-l2-1-0.dll
  • GetFileInformationByHandleEx (Address: 0x100ab1ac)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100ab1b8)
  • DuplicateHandle (Address: 0x100ab1b4)
  • GetHandleInformation (Address: 0x100ab1bc)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100ab1c4)
  • HeapAlloc (Address: 0x100ab1d0)
  • HeapFree (Address: 0x100ab1c8)
  • HeapReAlloc (Address: 0x100ab1cc)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalFree (Address: 0x100ab1d8)
  • LocalAlloc (Address: 0x100ab1dc)
  • LocalFree (Address: 0x100ab1e0)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x100ab1e8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x100ab1f0)
  • FreeLibrary (Address: 0x100ab1fc)
  • GetModuleFileNameA (Address: 0x100ab208)
  • GetModuleHandleExW (Address: 0x100ab204)
  • GetModuleHandleW (Address: 0x100ab1f8)
  • GetProcAddress (Address: 0x100ab200)
  • LoadLibraryExW (Address: 0x100ab1f4)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x100ab210)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100ab218)
  • GetUserDefaultLocaleName (Address: 0x100ab21c)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x100ab224)
  • PathCchAppend (Address: 0x100ab22c)
  • PathCchCombine (Address: 0x100ab228)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100ab234)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessAsUserW (Address: 0x100ab250)
  • CreateProcessW (Address: 0x100ab240)
  • CreateThread (Address: 0x100ab258)
  • GetCurrentProcess (Address: 0x100ab244)
  • GetCurrentProcessId (Address: 0x100ab23c)
  • GetCurrentThreadId (Address: 0x100ab248)
  • GetExitCodeProcess (Address: 0x100ab24c)
  • TerminateProcess (Address: 0x100ab25c)
  • TerminateThread (Address: 0x100ab254)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x100ab264)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100ab26c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100ab288)
  • RegCreateKeyExW (Address: 0x100ab28c)
  • RegDeleteKeyExW (Address: 0x100ab2a0)
  • RegDeleteTreeW (Address: 0x100ab294)
  • RegDeleteValueW (Address: 0x100ab298)
  • RegEnumKeyExW (Address: 0x100ab278)
  • RegEnumValueW (Address: 0x100ab29c)
  • RegGetValueW (Address: 0x100ab27c)
  • RegNotifyChangeKeyValue (Address: 0x100ab290)
  • RegOpenCurrentUser (Address: 0x100ab2a8)
  • RegOpenKeyExW (Address: 0x100ab284)
  • RegQueryInfoKeyW (Address: 0x100ab274)
  • RegQueryValueExW (Address: 0x100ab2a4)
  • RegSetValueExW (Address: 0x100ab280)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x100ab2b0)
  • RegSetKeyValueW (Address: 0x100ab2b4)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x100ab2c0)
  • RegEnumKeyW (Address: 0x100ab2bc)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x100ab2cc)
  • WideCharToMultiByte (Address: 0x100ab2c8)
api-ms-win-core-string-l2-1-0.dll
  • CharLowerBuffW (Address: 0x100ab2d4)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpW (Address: 0x100ab2dc)
  • lstrlenA (Address: 0x100ab2e0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100ab2ec)
  • AcquireSRWLockShared (Address: 0x100ab2f4)
  • CreateEventExW (Address: 0x100ab308)
  • CreateEventW (Address: 0x100ab32c)
  • CreateMutexExW (Address: 0x100ab33c)
  • CreateSemaphoreExW (Address: 0x100ab2e8)
  • DeleteCriticalSection (Address: 0x100ab330)
  • EnterCriticalSection (Address: 0x100ab328)
  • InitializeCriticalSection (Address: 0x100ab30c)
  • InitializeCriticalSectionEx (Address: 0x100ab334)
  • InitializeSRWLock (Address: 0x100ab318)
  • LeaveCriticalSection (Address: 0x100ab320)
  • OpenEventW (Address: 0x100ab324)
  • OpenSemaphoreW (Address: 0x100ab31c)
  • ReleaseMutex (Address: 0x100ab2f0)
  • ReleaseSemaphore (Address: 0x100ab2f8)
  • ReleaseSRWLockExclusive (Address: 0x100ab310)
  • ReleaseSRWLockShared (Address: 0x100ab2fc)
  • ResetEvent (Address: 0x100ab314)
  • SetEvent (Address: 0x100ab338)
  • WaitForSingleObject (Address: 0x100ab304)
  • WaitForSingleObjectEx (Address: 0x100ab300)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100ab354)
  • InitOnceComplete (Address: 0x100ab344)
  • InitOnceExecuteOnce (Address: 0x100ab34c)
  • Sleep (Address: 0x100ab350)
  • SleepConditionVariableSRW (Address: 0x100ab348)
  • WakeAllConditionVariable (Address: 0x100ab358)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x100ab360)
  • GetSystemTime (Address: 0x100ab368)
  • GetSystemTimeAsFileTime (Address: 0x100ab374)
  • GetSystemWindowsDirectoryW (Address: 0x100ab370)
  • GetTickCount (Address: 0x100ab36c)
  • GetVersionExW (Address: 0x100ab364)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetProductInfo (Address: 0x100ab37c)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100ab390)
  • CreateThreadpoolTimer (Address: 0x100ab384)
  • SetThreadpoolTimer (Address: 0x100ab38c)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100ab388)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x100ab398)
  • SystemTimeToFileTime (Address: 0x100ab39c)
api-ms-win-core-url-l1-1-0.dll
  • UrlEscapeW (Address: 0x100ab3a4)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100ab3b0)
  • EncodePointer (Address: 0x100ab3ac)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x100ab3b8)
  • RoOriginateErrorW (Address: 0x100ab3c0)
  • RoTransformError (Address: 0x100ab3bc)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x100ab3c8)
  • RoGetActivationFactory (Address: 0x100ab3d4)
  • RoInitialize (Address: 0x100ab3cc)
  • RoUninitialize (Address: 0x100ab3d0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x100ab3e4)
  • WindowsCreateStringReference (Address: 0x100ab3dc)
  • WindowsDeleteString (Address: 0x100ab3ec)
  • WindowsDuplicateString (Address: 0x100ab3e8)
  • WindowsGetStringRawBuffer (Address: 0x100ab3f0)
  • WindowsIsStringEmpty (Address: 0x100ab3e0)
  • WindowsStringHasEmbeddedNull (Address: 0x100ab3f4)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x100ab404)
  • EventProviderEnabled (Address: 0x100ab3fc)
  • EventRegister (Address: 0x100ab400)
  • EventSetInformation (Address: 0x100ab40c)
  • EventUnregister (Address: 0x100ab410)
  • EventWriteTransfer (Address: 0x100ab408)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x100ab424)
  • OpenSCManagerW (Address: 0x100ab420)
  • OpenServiceW (Address: 0x100ab41c)
  • StartServiceW (Address: 0x100ab418)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfigW (Address: 0x100ab430)
  • QueryServiceStatusEx (Address: 0x100ab42c)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x100ab438)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x100ab45c)
  • BCryptCreateHash (Address: 0x100ab44c)
  • BCryptDestroyHash (Address: 0x100ab448)
  • BCryptFinishHash (Address: 0x100ab458)
  • BCryptGenRandom (Address: 0x100ab444)
  • BCryptGetProperty (Address: 0x100ab454)
  • BCryptHashData (Address: 0x100ab450)
  • BCryptOpenAlgorithmProvider (Address: 0x100ab440)
CRYPT32.dll
  • CertAddCertificateContextToStore (Address: 0x100ab038)
  • CertCloseStore (Address: 0x100ab068)
  • CertComparePublicKeyInfo (Address: 0x100ab024)
  • CertDeleteCertificateFromStore (Address: 0x100ab004)
  • CertEnumCertificatesInStore (Address: 0x100ab030)
  • CertFindCertificateInStore (Address: 0x100ab000)
  • CertFreeCertificateChain (Address: 0x100ab01c)
  • CertFreeCertificateContext (Address: 0x100ab008)
  • CertGetCertificateChain (Address: 0x100ab018)
  • CertGetCertificateContextProperty (Address: 0x100ab03c)
  • CertGetNameStringW (Address: 0x100ab040)
  • CertOpenStore (Address: 0x100ab00c)
  • CertSetCertificateContextProperty (Address: 0x100ab028)
  • CryptAcquireCertificatePrivateKey (Address: 0x100ab014)
  • CryptEncodeObject (Address: 0x100ab048)
  • CryptEncodeObjectEx (Address: 0x100ab044)
  • CryptExportPublicKeyInfo (Address: 0x100ab064)
  • CryptExportPublicKeyInfoEx (Address: 0x100ab010)
  • CryptFindOIDInfo (Address: 0x100ab020)
  • CryptMsgCalculateEncodedLength (Address: 0x100ab05c)
  • CryptMsgClose (Address: 0x100ab04c)
  • CryptMsgGetParam (Address: 0x100ab050)
  • CryptMsgOpenToEncode (Address: 0x100ab058)
  • CryptMsgUpdate (Address: 0x100ab054)
  • CryptSignAndEncodeCertificate (Address: 0x100ab060)
  • PFXExportCertStoreEx (Address: 0x100ab034)
  • PFXImportCertStore (Address: 0x100ab02c)
DEVOBJ.dll
  • DevObjCreateDeviceInfoList (Address: 0x100ab070)
  • DevObjDestroyDeviceInfoList (Address: 0x100ab074)
  • DevObjEnumDeviceInterfaces (Address: 0x100ab07c)
  • DevObjGetClassDevs (Address: 0x100ab078)
  • DevObjGetDeviceInterfaceDetail (Address: 0x100ab080)
msvcp110_win.dll
  • ?_Add_vtordisp1@?$basic_istream@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ab48c)
  • ?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ab488)
  • ?_BADOFF@std@@3_JB (Address: 0x100ab4c0)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ab524)
  • ?_Orphan_all@_Container_base0@std@@QAEXXZ (Address: 0x100ab49c)
  • ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ (Address: 0x100ab504)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x100ab500)
  • ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z (Address: 0x100ab468)
  • ?_Syserror_map@std@@YAPBDH@Z (Address: 0x100ab4a8)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100ab528)
  • ?_Winerror_map@std@@YAPBDH@Z (Address: 0x100ab4b0)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x100ab484)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100ab4ac)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100ab4b4)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100ab4d0)
  • ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x100ab508)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100ab4c8)
  • ??0id@locale@std@@QAE@I@Z (Address: 0x100ab4a4)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ab50c)
  • ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ab478)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100ab51c)
  • ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z (Address: 0x100ab480)
  • ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100ab4d4)
  • ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100ab4e4)
  • ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100ab4f0)
  • ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ (Address: 0x100ab518)
  • ?flags@ios_base@std@@QBEHXZ (Address: 0x100ab46c)
  • ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ (Address: 0x100ab47c)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x100ab4e8)
  • ?good@ios_base@std@@QBE_NXZ (Address: 0x100ab464)
  • ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100ab4d8)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100ab490)
  • ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100ab4dc)
  • ?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x100ab4f4)
  • ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100ab4e0)
  • ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x100ab514)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x100ab498)
  • ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x100ab4ec)
  • ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z (Address: 0x100ab4f8)
  • ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x100ab4fc)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x100ab510)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x100ab52c)
  • ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z (Address: 0x100ab520)
  • ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z (Address: 0x100ab4c4)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x100ab4a0)
  • ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x100ab4cc)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x100ab530)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x100ab4bc)
  • ?width@ios_base@std@@QAE_J_J@Z (Address: 0x100ab474)
  • ?width@ios_base@std@@QBE_JXZ (Address: 0x100ab470)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x100ab4b8)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x100ab494)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x100ab554)
  • __dllonexit (Address: 0x100ab570)
  • __RTDynamicCast (Address: 0x100ab540)
  • _amsg_exit (Address: 0x100ab580)
  • _callnewh (Address: 0x100ab588)
  • _CxxThrowException (Address: 0x100ab544)
  • _errno (Address: 0x100ab5e8)
  • _except_handler4_common (Address: 0x100ab560)
  • _initterm (Address: 0x100ab57c)
  • _itow_s (Address: 0x100ab5b0)
  • _lock (Address: 0x100ab578)
  • _onexit (Address: 0x100ab56c)
  • _purecall (Address: 0x100ab62c)
  • _set_errno (Address: 0x100ab5b8)
  • _unlock (Address: 0x100ab574)
  • _vsnprintf_s (Address: 0x100ab61c)
  • _vsnwprintf (Address: 0x100ab558)
  • _vsnwprintf_s (Address: 0x100ab5ec)
  • _wcsdup (Address: 0x100ab604)
  • _wcsicmp (Address: 0x100ab60c)
  • _wcslwr (Address: 0x100ab5d0)
  • _wcsnicmp (Address: 0x100ab614)
  • _wtof (Address: 0x100ab5d8)
  • _wtoi (Address: 0x100ab5f0)
  • _wtol (Address: 0x100ab5a8)
  • _XcptFilter (Address: 0x100ab584)
  • ??_V@YAXPAX@Z (Address: 0x100ab610)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x100ab620)
  • ??0exception@@QAE@XZ (Address: 0x100ab624)
  • ??1exception@@UAE@XZ (Address: 0x100ab628)
  • ??1type_info@@UAE@XZ (Address: 0x100ab564)
  • ??3@YAXPAX@Z (Address: 0x100ab550)
  • ?terminate@@YAXXZ (Address: 0x100ab568)
  • free (Address: 0x100ab600)
  • isspace (Address: 0x100ab5a4)
  • ldiv (Address: 0x100ab608)
  • malloc (Address: 0x100ab58c)
  • memcmp (Address: 0x100ab53c)
  • memcpy (Address: 0x100ab538)
  • memcpy_s (Address: 0x100ab55c)
  • memmove (Address: 0x100ab548)
  • memmove_s (Address: 0x100ab618)
  • memset (Address: 0x100ab5cc)
  • realloc (Address: 0x100ab5dc)
  • sprintf_s (Address: 0x100ab5e0)
  • strchr (Address: 0x100ab5c4)
  • strncpy_s (Address: 0x100ab5b4)
  • strrchr (Address: 0x100ab5c8)
  • strtol (Address: 0x100ab5bc)
  • swprintf (Address: 0x100ab5c0)
  • swscanf_s (Address: 0x100ab59c)
  • toupper (Address: 0x100ab54c)
  • towlower (Address: 0x100ab5d4)
  • wcschr (Address: 0x100ab5f4)
  • wcscpy_s (Address: 0x100ab5f8)
  • wcsncmp (Address: 0x100ab5ac)
  • wcsnlen (Address: 0x100ab5e4)
  • wcsrchr (Address: 0x100ab5a0)
  • wcsstr (Address: 0x100ab594)
  • wcstod (Address: 0x100ab590)
  • wcstok_s (Address: 0x100ab5fc)
  • wcstoul (Address: 0x100ab598)
ntdll.dll
  • RtlGetDeviceFamilyInfoEnum (Address: 0x100ab644)
  • RtlGetVersion (Address: 0x100ab640)
  • RtlIsStateSeparationEnabled (Address: 0x100ab634)
  • RtlNtStatusToDosError (Address: 0x100ab638)
  • RtlPublishWnfStateData (Address: 0x100ab63c)
OLEAUT32.dll
  • SafeArrayAccessData (Address: 0x100ab0ac)
  • SafeArrayCreate (Address: 0x100ab0b0)
  • SafeArrayDestroy (Address: 0x100ab0c0)
  • SafeArrayGetLBound (Address: 0x100ab0bc)
  • SafeArrayGetUBound (Address: 0x100ab0c4)
  • SafeArrayLock (Address: 0x100ab0b8)
  • SafeArrayUnaccessData (Address: 0x100ab0a8)
  • SafeArrayUnlock (Address: 0x100ab0b4)
  • SysAllocString (Address: 0x100ab0c8)
  • SysAllocStringByteLen (Address: 0x100ab090)
  • SysAllocStringLen (Address: 0x100ab088)
  • SysFreeString (Address: 0x100ab0a4)
  • SysStringByteLen (Address: 0x100ab09c)
  • SysStringLen (Address: 0x100ab0a0)
  • VariantChangeType (Address: 0x100ab08c)
  • VariantClear (Address: 0x100ab094)
  • VariantInit (Address: 0x100ab098)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x100ab0e0)
  • NdrClientCall4 (Address: 0x100ab0d4)
  • RpcBindingBind (Address: 0x100ab0e4)
  • RpcBindingCreateW (Address: 0x100ab0e8)
  • RpcBindingFree (Address: 0x100ab0d0)
  • UuidCreate (Address: 0x100ab0dc)
  • UuidFromStringW (Address: 0x100ab0d8)
USERENV.dll
  • EnterCriticalPolicySection (Address: 0x100ab0f4)
  • LeaveCriticalPolicySection (Address: 0x100ab0f0)