InstallService.dll
Description: InstallService
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6280
Architecture: 32-bit
Operating System: Windows NT
SHA256: e475077b9f5987fdac4d6f67dee1a3f7
File Size: 1.9 MB
Uploaded At: Dec. 1, 2025, 7:57 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ServiceMain (Ordinal: 1, Address: 0x50570)
- DllCanUnloadNow (Ordinal: 2, Address: 0x4c620)
- DllGetActivationFactory (Ordinal: 3, Address: 0x4c6c0)
- DllGetClassObject (Ordinal: 4, Address: 0x4c650)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-internal-l1-1-1.dll
- GetPackageFullNameFromToken (Address: 0x101da0c4)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x101da0cc)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x101da0d4)
- IsDebuggerPresent (Address: 0x101da0dc)
- OutputDebugStringW (Address: 0x101da0d8)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x101da0e4)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x101da0ec)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x101da0f4)
- RaiseException (Address: 0x101da0fc)
- SetLastError (Address: 0x101da104)
- SetUnhandledExceptionFilter (Address: 0x101da100)
- UnhandledExceptionFilter (Address: 0x101da0f8)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x101da124)
- CreateDirectoryW (Address: 0x101da118)
- CreateFileW (Address: 0x101da12c)
- DeleteFileW (Address: 0x101da120)
- FindClose (Address: 0x101da144)
- FindFirstFileExW (Address: 0x101da128)
- FindFirstFileW (Address: 0x101da14c)
- FindNextFileW (Address: 0x101da148)
- GetFileAttributesExW (Address: 0x101da11c)
- GetFileAttributesW (Address: 0x101da10c)
- GetFileSizeEx (Address: 0x101da13c)
- GetFinalPathNameByHandleW (Address: 0x101da130)
- GetTempFileNameW (Address: 0x101da110)
- ReadFile (Address: 0x101da138)
- SetFileAttributesW (Address: 0x101da114)
- SetFileInformationByHandle (Address: 0x101da134)
- WriteFile (Address: 0x101da140)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x101da158)
- GetVolumeNameForVolumeMountPointW (Address: 0x101da154)
api-ms-win-core-file-l2-1-0.dll
- GetFileInformationByHandleEx (Address: 0x101da160)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x101da168)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x101da174)
- HeapAlloc (Address: 0x101da170)
- HeapFree (Address: 0x101da178)
api-ms-win-core-heap-l2-1-0.dll
- GlobalFree (Address: 0x101da188)
- LocalAlloc (Address: 0x101da180)
- LocalFree (Address: 0x101da184)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x101da190)
- InterlockedFlushSList (Address: 0x101da198)
- InterlockedPushEntrySList (Address: 0x101da194)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
- PowerClearRequest (Address: 0x101da1a0)
- PowerSetRequest (Address: 0x101da1a4)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x101da1cc)
- FindStringOrdinal (Address: 0x101da1b0)
- FreeLibrary (Address: 0x101da1b8)
- GetModuleFileNameA (Address: 0x101da1c8)
- GetModuleFileNameW (Address: 0x101da1bc)
- GetModuleHandleExW (Address: 0x101da1c0)
- GetModuleHandleW (Address: 0x101da1c4)
- GetProcAddress (Address: 0x101da1b4)
- LoadStringW (Address: 0x101da1ac)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x101da1d4)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x101da1dc)
- LCMapStringEx (Address: 0x101da1e0)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x101da1e8)
- FlushViewOfFile (Address: 0x101da1f4)
- MapViewOfFile (Address: 0x101da1f0)
- UnmapViewOfFile (Address: 0x101da1ec)
api-ms-win-core-path-l1-1-0.dll
- PathCchAddExtension (Address: 0x101da200)
- PathCchAppend (Address: 0x101da210)
- PathCchCombine (Address: 0x101da20c)
- PathCchRemoveExtension (Address: 0x101da1fc)
- PathCchRemoveFileSpec (Address: 0x101da204)
- PathCchStripToRoot (Address: 0x101da208)
api-ms-win-core-processenvironment-l1-1-0.dll
- GetCurrentDirectoryW (Address: 0x101da218)
- GetEnvironmentVariableW (Address: 0x101da21c)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x101da23c)
- GetCurrentProcessId (Address: 0x101da244)
- GetCurrentThread (Address: 0x101da228)
- GetCurrentThreadId (Address: 0x101da234)
- OpenProcessToken (Address: 0x101da238)
- OpenThreadToken (Address: 0x101da224)
- ProcessIdToSessionId (Address: 0x101da240)
- SetThreadToken (Address: 0x101da22c)
- TerminateProcess (Address: 0x101da230)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x101da250)
- OpenProcess (Address: 0x101da24c)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x101da258)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x101da260)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x101da284)
- RegCreateKeyExW (Address: 0x101da274)
- RegDeleteValueW (Address: 0x101da270)
- RegEnumValueW (Address: 0x101da27c)
- RegGetValueW (Address: 0x101da280)
- RegOpenCurrentUser (Address: 0x101da268)
- RegOpenKeyExW (Address: 0x101da278)
- RegSetValueExW (Address: 0x101da26c)
api-ms-win-core-registry-l1-1-1.dll
- RegDeleteKeyValueW (Address: 0x101da290)
- RegSetKeyValueW (Address: 0x101da28c)
api-ms-win-core-registry-l2-1-0.dll
- RegCreateKeyW (Address: 0x101da29c)
- RegDeleteKeyW (Address: 0x101da298)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFileExistsW (Address: 0x101da2a4)
- PathFindFileNameW (Address: 0x101da2a8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x101da2b8)
- MultiByteToWideChar (Address: 0x101da2b4)
- WideCharToMultiByte (Address: 0x101da2b0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x101da314)
- AcquireSRWLockShared (Address: 0x101da2cc)
- CreateEventExW (Address: 0x101da2f8)
- CreateEventW (Address: 0x101da2d4)
- CreateMutexExW (Address: 0x101da2dc)
- CreateMutexW (Address: 0x101da308)
- CreateSemaphoreExW (Address: 0x101da2f4)
- DeleteCriticalSection (Address: 0x101da2c0)
- EnterCriticalSection (Address: 0x101da2c4)
- InitializeCriticalSection (Address: 0x101da318)
- InitializeCriticalSectionAndSpinCount (Address: 0x101da300)
- InitializeCriticalSectionEx (Address: 0x101da310)
- InitializeSRWLock (Address: 0x101da30c)
- LeaveCriticalSection (Address: 0x101da2c8)
- OpenSemaphoreW (Address: 0x101da2e0)
- ReleaseMutex (Address: 0x101da2e8)
- ReleaseSemaphore (Address: 0x101da2f0)
- ReleaseSRWLockExclusive (Address: 0x101da2d8)
- ReleaseSRWLockShared (Address: 0x101da2d0)
- ResetEvent (Address: 0x101da304)
- SetEvent (Address: 0x101da2fc)
- WaitForSingleObject (Address: 0x101da2ec)
- WaitForSingleObjectEx (Address: 0x101da2e4)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x101da324)
- Sleep (Address: 0x101da320)
- WaitOnAddress (Address: 0x101da32c)
- WakeByAddressAll (Address: 0x101da328)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTime (Address: 0x101da334)
- GetSystemTimeAsFileTime (Address: 0x101da33c)
- GetTickCount (Address: 0x101da338)
- GetTickCount64 (Address: 0x101da344)
- GetVersionExA (Address: 0x101da340)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x101da34c)
- CloseThreadpoolWork (Address: 0x101da368)
- CreateThreadpoolTimer (Address: 0x101da354)
- CreateThreadpoolWork (Address: 0x101da35c)
- FreeLibraryWhenCallbackReturns (Address: 0x101da364)
- SetThreadpoolTimer (Address: 0x101da350)
- SubmitThreadpoolWork (Address: 0x101da360)
- WaitForThreadpoolTimerCallbacks (Address: 0x101da358)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- QueueUserWorkItem (Address: 0x101da370)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x101da378)
api-ms-win-core-url-l1-1-0.dll
- UrlEscapeW (Address: 0x101da380)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x101da38c)
- EncodePointer (Address: 0x101da388)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x101da394)
api-ms-win-core-wow64-l1-1-1.dll
- IsWow64Process2 (Address: 0x101da39c)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x101da4c0)
- __std_terminate (Address: 0x101da4bc)
- __std_type_info_compare (Address: 0x101da4d0)
- _CxxThrowException (Address: 0x101da478)
- _except_handler4_common (Address: 0x101da474)
- _o____lc_codepage_func (Address: 0x101da4b8)
- _o___std_exception_copy (Address: 0x101da4b0)
- _o___std_exception_destroy (Address: 0x101da4ac)
- _o___std_type_info_destroy_list (Address: 0x101da4a8)
- _o___stdio_common_vsnprintf_s (Address: 0x101da4a4)
- _o___stdio_common_vsnwprintf_s (Address: 0x101da4a0)
- _o___stdio_common_vsprintf_s (Address: 0x101da49c)
- _o___stdio_common_vswprintf (Address: 0x101da498)
- _o___stdio_common_vswprintf_s (Address: 0x101da494)
- _o__beginthreadex (Address: 0x101da490)
- _o__callnewh (Address: 0x101da48c)
- _o__cexit (Address: 0x101da488)
- _o__configure_narrow_argv (Address: 0x101da484)
- _o__crt_atexit (Address: 0x101da480)
- _o__errno (Address: 0x101da4cc)
- _o__execute_onexit_table (Address: 0x101da4b4)
- _o__fseeki64 (Address: 0x101da47c)
- _o__initialize_narrow_environment (Address: 0x101da3a4)
- _o__initialize_onexit_table (Address: 0x101da3a8)
- _o__invalid_parameter_noinfo (Address: 0x101da3ac)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x101da3b0)
- _o__localtime64_s (Address: 0x101da3b4)
- _o__lock_file (Address: 0x101da3b8)
- _o__mktime64 (Address: 0x101da3bc)
- _o__purecall (Address: 0x101da3c0)
- _o__register_onexit_function (Address: 0x101da3c4)
- _o__seh_filter_dll (Address: 0x101da3c8)
- _o__set_errno (Address: 0x101da3cc)
- _o__ui64tow_s (Address: 0x101da3d0)
- _o__unlock_file (Address: 0x101da3d4)
- _o__wcsicmp (Address: 0x101da3d8)
- _o__wcstoui64 (Address: 0x101da3dc)
- _o__wtoi (Address: 0x101da3e4)
- _o__wtoi64 (Address: 0x101da3e8)
- _o_ceil (Address: 0x101da3ec)
- _o_fclose (Address: 0x101da3f0)
- _o_fflush (Address: 0x101da3f4)
- _o_fgetc (Address: 0x101da3f8)
- _o_fgetpos (Address: 0x101da3fc)
- _o_fgetwc (Address: 0x101da400)
- _o_fputwc (Address: 0x101da404)
- _o_free (Address: 0x101da408)
- _o_fsetpos (Address: 0x101da40c)
- _o_fwrite (Address: 0x101da410)
- _o_isalnum (Address: 0x101da414)
- _o_iswspace (Address: 0x101da418)
- _o_malloc (Address: 0x101da41c)
- _o_mbstowcs (Address: 0x101da420)
- _o_mbstowcs_s (Address: 0x101da424)
- _o_rand (Address: 0x101da428)
- _o_realloc (Address: 0x101da42c)
- _o_setvbuf (Address: 0x101da430)
- _o_srand (Address: 0x101da434)
- _o_strncpy_s (Address: 0x101da438)
- _o_strtol (Address: 0x101da43c)
- _o_terminate (Address: 0x101da440)
- _o_toupper (Address: 0x101da444)
- _o_ungetc (Address: 0x101da448)
- _o_ungetwc (Address: 0x101da44c)
- _o_wcscat_s (Address: 0x101da450)
- _o_wcscpy_s (Address: 0x101da454)
- _o_wcsftime (Address: 0x101da458)
- _o_wcsncpy_s (Address: 0x101da45c)
- _o_wcstok_s (Address: 0x101da460)
- _o_wcstol (Address: 0x101da464)
- _o_wcstombs (Address: 0x101da468)
- _o_wcstombs_s (Address: 0x101da46c)
- _o_wcstoul (Address: 0x101da470)
- memcmp (Address: 0x101da4c4)
- memcpy (Address: 0x101da4c8)
- memmove (Address: 0x101da3e0)
- strchr (Address: 0x101da4e0)
- strrchr (Address: 0x101da4d4)
- wcschr (Address: 0x101da4dc)
- wcsstr (Address: 0x101da4d8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x101da4e8)
- _initterm_e (Address: 0x101da4ec)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x101da4f8)
- wcsncpy (Address: 0x101da4f4)
- wcsnlen (Address: 0x101da4fc)
api-ms-win-crt-time-l1-1-0.dll
- _time32 (Address: 0x101da504)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x101da510)
- EventProviderEnabled (Address: 0x101da518)
- EventRegister (Address: 0x101da50c)
- EventSetInformation (Address: 0x101da520)
- EventUnregister (Address: 0x101da514)
- EventWriteTransfer (Address: 0x101da51c)
api-ms-win-ntuser-sysparams-l1-1-0.dll
- GetMonitorInfoW (Address: 0x101da528)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x101da530)
api-ms-win-security-cryptoapi-l1-1-0.dll
- CryptAcquireContextW (Address: 0x101da53c)
- CryptCreateHash (Address: 0x101da538)
- CryptDestroyHash (Address: 0x101da54c)
- CryptGetHashParam (Address: 0x101da544)
- CryptHashData (Address: 0x101da540)
- CryptReleaseContext (Address: 0x101da548)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x101da554)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x101da558)
api-ms-win-service-core-l1-1-0.dll
- RegisterServiceCtrlHandlerExW (Address: 0x101da564)
- SetServiceStatus (Address: 0x101da560)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x101da578)
- OpenSCManagerW (Address: 0x101da56c)
- OpenServiceW (Address: 0x101da574)
- StartServiceW (Address: 0x101da570)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x101da580)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x101da58c)
- SHTaskPoolQueueTask (Address: 0x101da588)
api-ms-win-shell-namespace-l1-1-0.dll
- SHGetIDListFromObject (Address: 0x101da594)
api-ms-win-shell-shdirectory-l1-1-0.dll
- (Address: 0x101da59c)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x101da5a4)
combase.dll
- (Address: 0x101da5ac)
- (Address: 0x101da5b0)
- (Address: 0x101da5b4)
- (Address: 0x101da5b8)
MPR.dll
- WNetGetConnectionW (Address: 0x101da000)
msvcp_win.dll
- _Cnd_broadcast (Address: 0x101da6e0)
- _Cnd_destroy_in_situ (Address: 0x101da6f0)
- _Cnd_do_broadcast_at_thread_exit (Address: 0x101da638)
- _Cnd_init_in_situ (Address: 0x101da738)
- _Cnd_register_at_thread_exit (Address: 0x101da6d8)
- _Cnd_unregister_at_thread_exit (Address: 0x101da6f4)
- _Cnd_wait (Address: 0x101da6b4)
- _Mtx_destroy_in_situ (Address: 0x101da6ec)
- _Mtx_init_in_situ (Address: 0x101da734)
- _Mtx_lock (Address: 0x101da76c)
- _Mtx_unlock (Address: 0x101da774)
- _Thrd_detach (Address: 0x101da630)
- _Xtime_get_ticks (Address: 0x101da600)
- ?__ExceptionPtrAssign@@YAXPAXPBX@Z (Address: 0x101da74c)
- ?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x101da6d4)
- ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z (Address: 0x101da690)
- ?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x101da760)
- ?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x101da764)
- ?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x101da6e8)
- ?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x101da768)
- ?__ExceptionPtrToBool@@YA_NPBX@Z (Address: 0x101da6cc)
- ?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z (Address: 0x101da678)
- ?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z (Address: 0x101da724)
- ?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ (Address: 0x101da720)
- ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x101da644)
- ?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z (Address: 0x101da6a8)
- ?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z (Address: 0x101da664)
- ?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x101da740)
- ?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x101da754)
- ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x101da694)
- ?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x101da688)
- ?_Incref@facet@locale@std@@UAEXXZ (Address: 0x101da654)
- ?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ (Address: 0x101da680)
- ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x101da640)
- ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z (Address: 0x101da710)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x101da5cc)
- ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x101da718)
- ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z (Address: 0x101da71c)
- ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x101da70c)
- ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x101da714)
- ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x101da700)
- ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x101da704)
- ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z (Address: 0x101da750)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ (Address: 0x101da5c4)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x101da5ec)
- ?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z (Address: 0x101da72c)
- ?_ReportUnobservedException@details@Concurrency@@YAXXZ (Address: 0x101da75c)
- ?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ (Address: 0x101da748)
- ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z (Address: 0x101da6d0)
- ?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z (Address: 0x101da728)
- ?_Syserror_map@std@@YAPBDH@Z (Address: 0x101da6b0)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x101da6dc)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x101da770)
- ?_Throw_future_error@std@@YAXABVerror_code@1@@Z (Address: 0x101da6a4)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x101da670)
- ?_Winerror_map@std@@YAHH@Z (Address: 0x101da620)
- ?_Winerror_message@std@@YAKKPADK@Z (Address: 0x101da624)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x101da674)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x101da758)
- ?_XGetLastError@std@@YAXXZ (Address: 0x101da73c)
- ?_Xinvalid_argument@std@@YAXPBD@Z (Address: 0x101da628)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x101da6ac)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x101da608)
- ??0_Lockit@std@@QAE@H@Z (Address: 0x101da698)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x101da5fc)
- ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x101da61c)
- ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x101da5f8)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x101da684)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x101da5f4)
- ??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z (Address: 0x101da650)
- ??0task_continuation_context@Concurrency@@AAE@XZ (Address: 0x101da744)
- ??1_Lockit@std@@QAE@XZ (Address: 0x101da69c)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x101da6e4)
- ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x101da604)
- ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x101da5f0)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x101da658)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x101da5d0)
- ??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ (Address: 0x101da64c)
- ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z (Address: 0x101da668)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z (Address: 0x101da618)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x101da614)
- ??Bid@locale@std@@QAEIXZ (Address: 0x101da634)
- ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x101da65c)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ (Address: 0x101da6f8)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x101da5e4)
- ?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBG4@Z (Address: 0x101da6c4)
- ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ (Address: 0x101da730)
- ?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x101da67c)
- ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x101da6a0)
- ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x101da66c)
- ?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A (Address: 0x101da708)
- ?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z (Address: 0x101da68c)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x101da5d4)
- ?in@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAG3AAPAG@Z (Address: 0x101da63c)
- ?out@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBG1AAPBGPAD3AAPAD@Z (Address: 0x101da648)
- ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x101da6bc)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x101da5d8)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x101da6c8)
- ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x101da6c0)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x101da5e8)
- ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x101da6fc)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z (Address: 0x101da60c)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z (Address: 0x101da610)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x101da5c0)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x101da6b8)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x101da5c8)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x101da62c)
- ?unshift@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x101da660)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x101da5e0)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x101da5dc)
ntdll.dll
- NtQueryWnfStateData (Address: 0x101da794)
- RtlClearAllBits (Address: 0x101da784)
- RtlConvertDeviceFamilyInfoToString (Address: 0x101da78c)
- RtlGetDeviceFamilyInfoEnum (Address: 0x101da798)
- RtlInitializeBitMap (Address: 0x101da788)
- RtlIsMultiSessionSku (Address: 0x101da790)
- RtlIsMultiUsersInSessionSku (Address: 0x101da79c)
- RtlSetBit (Address: 0x101da780)
- RtlWow64IsWowGuestMachineSupported (Address: 0x101da77c)
OLEAUT32.dll
- SysAllocString (Address: 0x101da008)
- SysAllocStringByteLen (Address: 0x101da024)
- SysFreeString (Address: 0x101da01c)
- SysStringByteLen (Address: 0x101da020)
- SysStringLen (Address: 0x101da00c)
- VarBstrCmp (Address: 0x101da010)
- VariantClear (Address: 0x101da014)
- VariantInit (Address: 0x101da028)
- VariantTimeToSystemTime (Address: 0x101da018)
RPCRT4.dll
- I_RpcBindingInqLocalClientPID (Address: 0x101da044)
- I_RpcExceptionFilter (Address: 0x101da040)
- NdrAsyncClientCall (Address: 0x101da03c)
- RpcAsyncCancelCall (Address: 0x101da034)
- RpcAsyncCompleteCall (Address: 0x101da030)
- RpcAsyncInitializeHandle (Address: 0x101da054)
- RpcBindingFree (Address: 0x101da05c)
- RpcBindingFromStringBindingW (Address: 0x101da04c)
- RpcBindingSetAuthInfoExW (Address: 0x101da050)
- RpcStringBindingComposeW (Address: 0x101da048)
- RpcStringFreeW (Address: 0x101da058)
- UuidCreate (Address: 0x101da038)
UMPDC.dll
- Pdcv2ActivationClientActivate (Address: 0x101da064)
- Pdcv2ActivationClientDeactivate (Address: 0x101da068)
USERENV.dll
- ExpandEnvironmentStringsForUserW (Address: 0x101da070)
WINHTTP.dll
- WinHttpCloseHandle (Address: 0x101da078)
- WinHttpConnect (Address: 0x101da098)
- WinHttpCrackUrl (Address: 0x101da07c)
- WinHttpCreateUrl (Address: 0x101da09c)
- WinHttpGetDefaultProxyConfiguration (Address: 0x101da080)
- WinHttpGetIEProxyConfigForCurrentUser (Address: 0x101da084)
- WinHttpGetProxyForUrl (Address: 0x101da0a0)
- WinHttpOpen (Address: 0x101da094)
- WinHttpOpenRequest (Address: 0x101da088)
- WinHttpQueryDataAvailable (Address: 0x101da0b0)
- WinHttpQueryHeaders (Address: 0x101da0ac)
- WinHttpReadData (Address: 0x101da0b4)
- WinHttpReceiveResponse (Address: 0x101da090)
- WinHttpSendRequest (Address: 0x101da08c)
- WinHttpSetOption (Address: 0x101da0a4)
- WinHttpSetTimeouts (Address: 0x101da0a8)
Wldp.dll
- WldpIsAppApprovedByPolicy (Address: 0x101da0bc)