daxexec.dll
Description: daxexec
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6157
Architecture: 64-bit
Operating System: Windows NT
SHA256: b64f4893895080dddd86025fe1632579
File Size: 679.0 KB
Uploaded At: Dec. 1, 2025, 7:25 a.m.
Views: 9
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- AddLookaside (Ordinal: 1, Address: 0x9cd0)
- AddProcessToHeliumContainer (Ordinal: 2, Address: 0x108f0)
- CheckAppXPackageBreakaway (Ordinal: 3, Address: 0x104b0)
- CheckApplicationInCurrentPackage (Ordinal: 4, Address: 0x107e0)
- CloseAppExecutionAlias (Ordinal: 5, Address: 0x6c40)
- CloseJitvSilo (Ordinal: 6, Address: 0x50280)
- CompleteAppExecutionAliasProcessCreation (Ordinal: 7, Address: 0x10500)
- CreateAppExecutionAlias (Ordinal: 8, Address: 0x12c10)
- CreateDesktopAppXActivationInfo (Ordinal: 9, Address: 0x134f0)
- CreateDesktopAppXLocalCacheStructure (Ordinal: 10, Address: 0x1b370)
- CreateDesktopAppXTombstoneFile (Ordinal: 11, Address: 0x1b390)
- CreateJitvSilo (Ordinal: 12, Address: 0x50180)
- CurrentThreadIsInVirtualizationContext (Ordinal: 13, Address: 0x50720)
- DetokenizeDesktopAppXOfflineRegistry (Ordinal: 14, Address: 0x23d80)
- DisableDesktopAppXDebuggingForPackage (Ordinal: 15, Address: 0x52c10)
- DllCanUnloadNow (Ordinal: 16, Address: 0x7590)
- DllGetActivationFactory (Ordinal: 17, Address: 0x73b0)
- DllGetClassObject (Ordinal: 18, Address: 0x7280)
- DoesPackageHaveElevationCapability (Ordinal: 19, Address: 0x290f0)
- DoesPackageHaveUIAccessCapability (Ordinal: 20, Address: 0x29110)
- DoesPluginSupportCentennial (Ordinal: 21, Address: 0x51be0)
- EnableDesktopAppXDebuggingForPackage (Ordinal: 22, Address: 0x52a70)
- EnsureDesktopAppXPackageShutdown (Ordinal: 23, Address: 0x10510)
- EnterPackageVirtualizationContext (Ordinal: 24, Address: 0x50540)
- FreeAppExecutionAliasInfo (Ordinal: 25, Address: 0x6c40)
- FreeAppExecutionAliasInfoWithLicenseRundown (Ordinal: 26, Address: 0x6c40)
- FreeDesktopAppXActivationInfo (Ordinal: 27, Address: 0x135e0)
- FreeDesktopAppXLaunchContext (Ordinal: 28, Address: 0x10440)
- GetAppExecutionAliasApplicationUserModelId (Ordinal: 29, Address: 0x12c10)
- GetAppExecutionAliasExecutable (Ordinal: 30, Address: 0x12c10)
- GetAppExecutionAliasPackageFamilyName (Ordinal: 31, Address: 0x12c10)
- GetAppExecutionAliasPackageFullName (Ordinal: 32, Address: 0x12c10)
- GetApplicationExecutableRelativePath (Ordinal: 33, Address: 0x28c40)
- GetDesktopAppXComRootHandle (Ordinal: 34, Address: 0x2a280)
- LeavePackageVirtualizationContext (Ordinal: 35, Address: 0x50640)
- LoadAppExecutionAliasInfo (Ordinal: 36, Address: 0x12c10)
- MigrateWritablePackageRootData (Ordinal: 37, Address: 0x1b880)
- OpenAppExecutionAlias (Ordinal: 38, Address: 0x12c10)
- OpenAppExecutionAliasForUser (Ordinal: 39, Address: 0x12c10)
- PerformAppxLicenseRundown (Ordinal: 40, Address: 0x107a0)
- PersistAppExecutionAliasToFile (Ordinal: 41, Address: 0x12c10)
- PostCreateProcessDesktopAppXActivation (Ordinal: 42, Address: 0xfee0)
- PrepareDesktopAppXActivation (Ordinal: 43, Address: 0xf550)
- RegisterDesktopAppXPackageFamily (Ordinal: 44, Address: 0x27d70)
- RegisterDesktopAppXPackageFamilyIfNecessary (Ordinal: 45, Address: 0x28040)
- RemoveDesktopAppXMetadataForFolder (Ordinal: 46, Address: 0x1b300)
- RemoveLookaside (Ordinal: 47, Address: 0x9d00)
- SetDesktopAppXMetadataForFolder (Ordinal: 48, Address: 0x1b140)
- SetDesktopAppXMetadataForPackage (Ordinal: 49, Address: 0x1b0b0)
- TryActivateDesktopAppXApplication (Ordinal: 50, Address: 0x510f0)
- VerifyFileIsTrustedAndInPackage (Ordinal: 51, Address: 0x10910)
Imported DLLs & Functions
api-ms-win-appmodel-identity-l1-2-0.dll
- AppContainerDeriveSidFromMoniker (Address: 0x180082380)
api-ms-win-appmodel-state-l1-2-0.dll
- CloseState (Address: 0x180082390)
- GetPublisherRootFolder (Address: 0x1800823a0)
- GetSecureSystemAppDataFolder (Address: 0x1800823b0)
- GetStateFolder (Address: 0x1800823a8)
- GetSystemAppDataFolder (Address: 0x1800823b8)
- OpenStateExplicit (Address: 0x180082398)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800823c8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x1800823e0)
- CStdStubBuffer2_CountRefs (Address: 0x1800823d8)
- CStdStubBuffer2_Disconnect (Address: 0x1800823f0)
- CStdStubBuffer2_QueryInterface (Address: 0x1800823e8)
- NdrProxyForwardingFunction3 (Address: 0x180082400)
- NdrProxyForwardingFunction4 (Address: 0x1800823f8)
- NdrProxyForwardingFunction5 (Address: 0x180082410)
- ObjectStublessClient3 (Address: 0x180082418)
- ObjectStublessClient6 (Address: 0x180082408)
api-ms-win-core-console-l1-1-0.dll
- SetConsoleCtrlHandler (Address: 0x180082428)
api-ms-win-core-console-l1-2-0.dll
- AttachConsole (Address: 0x180082440)
- FreeConsole (Address: 0x180082438)
api-ms-win-core-console-l2-1-0.dll
- GenerateConsoleCtrlEvent (Address: 0x180082450)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180082470)
- IsDebuggerPresent (Address: 0x180082468)
- OutputDebugStringW (Address: 0x180082460)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180082480)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180082490)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800824a0)
- RaiseException (Address: 0x1800824b8)
- SetLastError (Address: 0x1800824c0)
- SetUnhandledExceptionFilter (Address: 0x1800824b0)
- UnhandledExceptionFilter (Address: 0x1800824a8)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x180082550)
- CreateFileW (Address: 0x180082518)
- DeleteFileW (Address: 0x180082528)
- FindClose (Address: 0x1800824d0)
- FindFirstFileExW (Address: 0x180082560)
- FindFirstFileW (Address: 0x180082520)
- FindNextFileW (Address: 0x180082568)
- FlushFileBuffers (Address: 0x180082558)
- GetFileAttributesW (Address: 0x180082538)
- GetFileInformationByHandle (Address: 0x1800824f0)
- GetFileSizeEx (Address: 0x1800824d8)
- GetFinalPathNameByHandleW (Address: 0x1800824e0)
- GetLongPathNameW (Address: 0x180082540)
- GetVolumeInformationW (Address: 0x180082510)
- GetVolumePathNameW (Address: 0x1800824f8)
- ReadFile (Address: 0x1800824e8)
- RemoveDirectoryW (Address: 0x180082508)
- SetFileAttributesW (Address: 0x180082500)
- SetFileInformationByHandle (Address: 0x180082548)
- WriteFile (Address: 0x180082530)
api-ms-win-core-file-l2-1-0.dll
- GetFileInformationByHandleEx (Address: 0x180082578)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180082588)
- DuplicateHandle (Address: 0x180082590)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800825a8)
- HeapAlloc (Address: 0x1800825b8)
- HeapDestroy (Address: 0x1800825c0)
- HeapFree (Address: 0x1800825b0)
- HeapReAlloc (Address: 0x1800825a0)
- HeapSize (Address: 0x1800825c8)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800825d8)
- LocalFree (Address: 0x1800825e0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800825f0)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x180082600)
api-ms-win-core-job-l2-1-0.dll
- AssignProcessToJobObject (Address: 0x180082610)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180082620)
- FreeLibrary (Address: 0x180082638)
- GetModuleFileNameA (Address: 0x180082628)
- GetModuleFileNameW (Address: 0x180082630)
- GetModuleHandleExW (Address: 0x180082650)
- GetModuleHandleW (Address: 0x180082648)
- GetProcAddress (Address: 0x180082640)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x180082660)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180082670)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x180082688)
- MapViewOfFile (Address: 0x180082690)
- UnmapViewOfFile (Address: 0x180082680)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCanonicalize (Address: 0x1800826c0)
- PathAllocCombine (Address: 0x1800826b8)
- PathCchRemoveBackslash (Address: 0x1800826b0)
- PathCchSkipRoot (Address: 0x1800826a8)
- PathIsUNCEx (Address: 0x1800826a0)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800826e0)
- GetCurrentDirectoryA (Address: 0x1800826d8)
- GetCurrentDirectoryW (Address: 0x1800826d0)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1800826f8)
- GetCurrentProcess (Address: 0x180082720)
- GetCurrentProcessId (Address: 0x180082770)
- GetCurrentThread (Address: 0x180082760)
- GetCurrentThreadId (Address: 0x180082708)
- GetProcessId (Address: 0x180082768)
- OpenProcessToken (Address: 0x180082710)
- OpenThread (Address: 0x180082738)
- OpenThreadToken (Address: 0x180082750)
- ProcessIdToSessionId (Address: 0x180082730)
- SetThreadToken (Address: 0x180082758)
- SuspendThread (Address: 0x180082740)
- TerminateProcess (Address: 0x180082718)
- TlsAlloc (Address: 0x180082748)
- TlsFree (Address: 0x180082728)
- TlsGetValue (Address: 0x1800826f0)
- TlsSetValue (Address: 0x180082700)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x180082788)
- OpenProcess (Address: 0x180082780)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180082798)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1800827a8)
api-ms-win-core-psm-key-l1-1-0.dll
- PsmGetApplicationNameFromKey (Address: 0x1800827c0)
- PsmGetPackageFullNameFromKey (Address: 0x1800827b8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800827e0)
- RegCreateKeyExW (Address: 0x1800827d8)
- RegDeleteTreeW (Address: 0x1800827f0)
- RegGetValueW (Address: 0x1800827d0)
- RegOpenCurrentUser (Address: 0x1800827f8)
- RegOpenKeyExW (Address: 0x180082800)
- RegQueryInfoKeyW (Address: 0x1800827e8)
- RegSetValueExW (Address: 0x180082808)
api-ms-win-core-registry-l2-1-0.dll
- RegOpenKeyW (Address: 0x180082818)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180082828)
- RtlLookupFunctionEntry (Address: 0x180082838)
- RtlVirtualUnwind (Address: 0x180082830)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathIsRelativeW (Address: 0x180082850)
- PathUnExpandEnvStringsW (Address: 0x180082848)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrIsIntlEqualW (Address: 0x180082860)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x180082870)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800828e0)
- AcquireSRWLockShared (Address: 0x1800828c0)
- CreateEventExW (Address: 0x180082900)
- CreateEventW (Address: 0x180082880)
- CreateMutexExW (Address: 0x180082920)
- CreateSemaphoreExW (Address: 0x1800828f0)
- DeleteCriticalSection (Address: 0x1800828f8)
- EnterCriticalSection (Address: 0x1800828d8)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800828e8)
- InitializeCriticalSectionEx (Address: 0x180082918)
- InitializeSRWLock (Address: 0x1800828b0)
- LeaveCriticalSection (Address: 0x1800828b8)
- OpenSemaphoreW (Address: 0x1800828a8)
- ReleaseMutex (Address: 0x1800828d0)
- ReleaseSemaphore (Address: 0x180082910)
- ReleaseSRWLockExclusive (Address: 0x1800828c8)
- ReleaseSRWLockShared (Address: 0x180082890)
- ResetEvent (Address: 0x180082898)
- SetEvent (Address: 0x180082908)
- WaitForSingleObject (Address: 0x180082888)
- WaitForSingleObjectEx (Address: 0x1800828a0)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180082948)
- InitOnceComplete (Address: 0x180082930)
- InitOnceExecuteOnce (Address: 0x180082938)
- Sleep (Address: 0x180082940)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x180082968)
- GetSystemInfo (Address: 0x180082960)
- GetSystemTimeAsFileTime (Address: 0x180082970)
- GetTickCount (Address: 0x180082958)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180082990)
- CreateThreadpoolTimer (Address: 0x180082998)
- SetThreadpoolTimer (Address: 0x180082980)
- WaitForThreadpoolTimerCallbacks (Address: 0x180082988)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1800829b0)
- EncodePointer (Address: 0x1800829a8)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
- GetApplicationRestartSettings (Address: 0x1800829c0)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1800829d8)
- RoGetActivationFactory (Address: 0x1800829d0)
api-ms-win-core-wow64-l1-1-0.dll
- Wow64DisableWow64FsRedirection (Address: 0x1800829e8)
- Wow64RevertWow64FsRedirection (Address: 0x1800829f0)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x180082a00)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x180082a90)
- __CxxFrameHandler3 (Address: 0x180082a98)
- __CxxFrameHandler4 (Address: 0x180082b48)
- __std_terminate (Address: 0x180082b40)
- __std_type_info_compare (Address: 0x180082b00)
- _CxxThrowException (Address: 0x180082aa0)
- _o___std_exception_copy (Address: 0x180082b28)
- _o___std_exception_destroy (Address: 0x180082b20)
- _o___std_type_info_destroy_list (Address: 0x180082b18)
- _o___stdio_common_vsnprintf_s (Address: 0x180082b10)
- _o___stdio_common_vswprintf (Address: 0x180082b08)
- _o__aligned_free (Address: 0x180082af0)
- _o__aligned_malloc (Address: 0x180082ae8)
- _o__callnewh (Address: 0x180082ad0)
- _o__cexit (Address: 0x180082ac8)
- _o__configure_narrow_argv (Address: 0x180082ac0)
- _o__crt_atexit (Address: 0x180082ab8)
- _o__errno (Address: 0x180082ab0)
- _o__execute_onexit_table (Address: 0x180082aa8)
- _o__initialize_narrow_environment (Address: 0x180082b38)
- _o__initialize_onexit_table (Address: 0x180082b30)
- _o__invalid_parameter_noinfo (Address: 0x180082ae0)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x180082ad8)
- _o__purecall (Address: 0x180082a10)
- _o__register_onexit_function (Address: 0x180082a18)
- _o__seh_filter_dll (Address: 0x180082a20)
- _o__ui64tow_s (Address: 0x180082a28)
- _o__wcsicmp (Address: 0x180082a30)
- _o__wcsnicmp (Address: 0x180082a38)
- _o__wtoi (Address: 0x180082a40)
- _o_calloc (Address: 0x180082a48)
- _o_free (Address: 0x180082a58)
- _o_malloc (Address: 0x180082a60)
- _o_terminate (Address: 0x180082a68)
- _o_toupper (Address: 0x180082a70)
- _o_wcscat_s (Address: 0x180082a78)
- _o_wcsncat_s (Address: 0x180082a80)
- _o_wcsncpy_s (Address: 0x180082a88)
- memcmp (Address: 0x180082b50)
- memcpy (Address: 0x180082b58)
- memmove (Address: 0x180082a50)
- wcschr (Address: 0x180082af8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180082b70)
- _initterm_e (Address: 0x180082b68)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180082b88)
- wcsncmp (Address: 0x180082b90)
- wcsnlen (Address: 0x180082b80)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180082ba0)
- EventProviderEnabled (Address: 0x180082bb0)
- EventRegister (Address: 0x180082bc0)
- EventSetInformation (Address: 0x180082bc8)
- EventUnregister (Address: 0x180082ba8)
- EventWriteTransfer (Address: 0x180082bb8)
api-ms-win-security-base-private-l1-1-1.dll
- CreateAppContainerToken (Address: 0x180082bd8)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x180082be8)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x180082bf8)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x180082c18)
- ConvertSidToStringSidW (Address: 0x180082c10)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180082c08)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolGetUniqueContext (Address: 0x180082c30)
- SHTaskPoolQueueTask (Address: 0x180082c28)
api-ms-win-shell-shellfolders-l1-1-0.dll
- SHGetKnownFolderPath (Address: 0x180082c40)
AppXDeploymentClient.dll
- (Address: 0x180082240)
container.dll
- ?CreateContainer@container@@YAXPEAXAEBUContainer@DefinitionFile@1@_N0@Z (Address: 0x180082c50)
- ?GetContainerIdentifierString@container@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PEAX@Z (Address: 0x180082c80)
- WcCleanupContainer (Address: 0x180082c60)
- WcGetComRegistryRoot (Address: 0x180082c88)
- WcGetContainerIdentifier (Address: 0x180082c70)
- WcIsContainerQuiescent (Address: 0x180082c68)
- WcRegisterForContainerTerminationNotification (Address: 0x180082c58)
- WcReleaseContainerTerminationNotification (Address: 0x180082c78)
FLTLIB.DLL
- FilterAttach (Address: 0x180082278)
- FilterConnectCommunicationPort (Address: 0x180082268)
- FilterInstanceClose (Address: 0x180082260)
- FilterInstanceCreate (Address: 0x180082258)
- FilterLoad (Address: 0x180082270)
- FilterSendMessage (Address: 0x180082250)
msvcp_win.dll
- _Close_dir (Address: 0x180082db0)
- _File_size (Address: 0x180082d68)
- _Lstat (Address: 0x180082d88)
- _Make_dir (Address: 0x180082d60)
- _Mtx_destroy_in_situ (Address: 0x180082d98)
- _Mtx_init_in_situ (Address: 0x180082d90)
- _Open_dir (Address: 0x180082da0)
- _Query_perf_counter (Address: 0x180082e00)
- _Query_perf_frequency (Address: 0x180082df0)
- _Read_dir (Address: 0x180082da8)
- _Remove_dir (Address: 0x180082d70)
- _Stat (Address: 0x180082d80)
- _Thrd_sleep (Address: 0x180082e10)
- _Thrd_yield (Address: 0x180082e08)
- _Unlink (Address: 0x180082d78)
- _Xtime_get_ticks (Address: 0x180082de8)
- ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x180082d48)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180082cd8)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x180082cc0)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180082c98)
- ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180082d40)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180082cd0)
- ?_Winerror_map@std@@YAHH@Z (Address: 0x180082d50)
- ?_Winerror_message@std@@YAKKPEADK@Z (Address: 0x180082d58)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x180082db8)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180082e18)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180082dd0)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180082d28)
- ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x180082d30)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180082d20)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180082df8)
- ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180082de0)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180082ca0)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x180082dc8)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180082d38)
- ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x180082dc0)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x180082ca8)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x180082dd8)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180082d10)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x180082d08)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x180082cb0)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x180082cf0)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x180082ce0)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x180082d18)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x180082cb8)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x180082cf8)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x180082cc8)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x180082d00)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x180082ce8)
ntdll.dll
- EtwEventRegister (Address: 0x180082f90)
- EtwEventUnregister (Address: 0x180082f78)
- EtwEventWrite (Address: 0x180082f80)
- EtwEventWriteNoRegistration (Address: 0x180083040)
- NtAlpcConnectPort (Address: 0x180083010)
- NtAlpcSendWaitReceivePort (Address: 0x180083008)
- NtClose (Address: 0x180083028)
- NtCreateFile (Address: 0x180083078)
- NtCreateJobObject (Address: 0x180082f38)
- NtCreateKey (Address: 0x180082e48)
- NtCreateKeyTransacted (Address: 0x180082eb8)
- NtCreateMutant (Address: 0x180082f40)
- NtDeleteFile (Address: 0x180082ea8)
- NtDeleteKey (Address: 0x180082f00)
- NtDeleteValueKey (Address: 0x180082e88)
- NtDuplicateObject (Address: 0x180082e60)
- NtDuplicateToken (Address: 0x1800830e8)
- NtEnumerateKey (Address: 0x180082ef8)
- NtEnumerateValueKey (Address: 0x180082ee0)
- NtFlushKey (Address: 0x180082eb0)
- NtMakeTemporaryObject (Address: 0x180082f28)
- NtNotifyChangeKey (Address: 0x180082ea0)
- NtNotifyChangeMultipleKeys (Address: 0x180082ec8)
- NtOpenEvent (Address: 0x180083038)
- NtOpenFile (Address: 0x180082fa8)
- NtOpenJobObject (Address: 0x180082f98)
- NtOpenKey (Address: 0x180082ed8)
- NtOpenKeyEx (Address: 0x180082ed0)
- NtOpenKeyTransacted (Address: 0x180083058)
- NtOpenKeyTransactedEx (Address: 0x180082e38)
- NtOpenMutant (Address: 0x180082f48)
- NtOpenProcess (Address: 0x180083000)
- NtQueryAttributesFile (Address: 0x180082e68)
- NtQueryDirectoryFile (Address: 0x180082f30)
- NtQueryDirectoryFileEx (Address: 0x180082e90)
- NtQueryFullAttributesFile (Address: 0x180083088)
- NtQueryInformationFile (Address: 0x180082e58)
- NtQueryInformationProcess (Address: 0x180082fc8)
- NtQueryInformationToken (Address: 0x1800830f0)
- NtQueryKey (Address: 0x180082f10)
- NtQueryMultipleValueKey (Address: 0x180082f08)
- NtQueryObject (Address: 0x180083098)
- NtQuerySecurityAttributesToken (Address: 0x180082fa0)
- NtQuerySecurityObject (Address: 0x180083108)
- NtQuerySystemInformation (Address: 0x180083020)
- NtQueryValueKey (Address: 0x180083060)
- NtRenameKey (Address: 0x180082e40)
- NtSetInformationFile (Address: 0x180082ec0)
- NtSetInformationJobObject (Address: 0x180082f18)
- NtSetInformationKey (Address: 0x180082e50)
- NtSetSecurityObject (Address: 0x180082e98)
- NtSetValueKey (Address: 0x180082f88)
- NtTerminateJobObject (Address: 0x180082f20)
- NtTerminateProcess (Address: 0x1800830d8)
- NtWaitForMultipleObjects (Address: 0x180082fe8)
- NtWaitForSingleObject (Address: 0x180083030)
- PssNtCaptureSnapshot (Address: 0x180082ff8)
- PssNtFreeSnapshot (Address: 0x180082ff0)
- RtlAcquireSRWLockExclusive (Address: 0x180083120)
- RtlAdjustPrivilege (Address: 0x1800830d0)
- RtlAllocateAndInitializeSid (Address: 0x180083018)
- RtlAllocateHeap (Address: 0x180082fe0)
- RtlCompareUnicodeString (Address: 0x180082ee8)
- RtlCopySid (Address: 0x180082f70)
- RtlCreateSecurityDescriptor (Address: 0x180082f58)
- RtlCreateServiceSid (Address: 0x1800830e0)
- RtlDeriveCapabilitySidsFromName (Address: 0x180083068)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180082f68)
- RtlEqualSid (Address: 0x180082fb8)
- RtlExpandEnvironmentStrings (Address: 0x180083090)
- RtlFindAceByType (Address: 0x180082fb0)
- RtlFindNextForwardRunClear (Address: 0x180082e70)
- RtlFreeHeap (Address: 0x180082fd8)
- RtlFreeSid (Address: 0x1800830c8)
- RtlGetDaclSecurityDescriptor (Address: 0x180082f60)
- RtlGetLastNtStatus (Address: 0x180082fc0)
- RtlInitializeSRWLock (Address: 0x180082e80)
- RtlInitUnicodeString (Address: 0x180083080)
- RtlLengthSid (Address: 0x180082fd0)
- RtlNtStatusToDosError (Address: 0x1800830c0)
- RtlNtStatusToDosErrorNoTeb (Address: 0x180082ef0)
- RtlNumberOfSetBits (Address: 0x180082e78)
- RtlQueryEnvironmentVariable (Address: 0x1800830a0)
- RtlQueryResourcePolicy (Address: 0x1800830a8)
- RtlReleaseSRWLockExclusive (Address: 0x180083128)
- RtlRunOnceBeginInitialize (Address: 0x180083100)
- RtlRunOnceComplete (Address: 0x1800830b0)
- RtlRunOnceExecuteOnce (Address: 0x1800830f8)
- RtlSetDaclSecurityDescriptor (Address: 0x180082f50)
- RtlSleepConditionVariableSRW (Address: 0x180083110)
- RtlUpcaseUnicodeChar (Address: 0x180082e28)
- RtlValidSid (Address: 0x180082e30)
- RtlWakeAllConditionVariable (Address: 0x180083118)
- RtlWow64IsWowGuestMachineSupported (Address: 0x1800830b8)
- wcsstr (Address: 0x180083070)
- ZwQueryWnfStateNameInformation (Address: 0x180083050)
- ZwUpdateWnfStateData (Address: 0x180083048)
profapi.dll
- (Address: 0x180083138)
- (Address: 0x180083140)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1800822f8)
- CStdStubBuffer_Connect (Address: 0x180082358)
- CStdStubBuffer_CountRefs (Address: 0x180082310)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800822c8)
- CStdStubBuffer_DebugServerRelease (Address: 0x180082338)
- CStdStubBuffer_Disconnect (Address: 0x180082340)
- CStdStubBuffer_Invoke (Address: 0x1800822b8)
- CStdStubBuffer_IsIIDSupported (Address: 0x180082350)
- CStdStubBuffer_QueryInterface (Address: 0x180082320)
- I_RpcExceptionFilter (Address: 0x1800822d0)
- IUnknown_AddRef_Proxy (Address: 0x1800822c0)
- IUnknown_QueryInterface_Proxy (Address: 0x180082348)
- IUnknown_Release_Proxy (Address: 0x180082308)
- Ndr64AsyncClientCall (Address: 0x180082370)
- NdrCStdStubBuffer_Release (Address: 0x180082298)
- NdrCStdStubBuffer2_Release (Address: 0x180082290)
- NdrDllCanUnloadNow (Address: 0x180082330)
- NdrDllGetClassObject (Address: 0x1800822a0)
- NdrOleAllocate (Address: 0x180082328)
- NdrOleFree (Address: 0x1800822d8)
- NdrStubCall3 (Address: 0x180082368)
- NdrStubForwardingFunction (Address: 0x180082360)
- RpcAsyncCancelCall (Address: 0x180082300)
- RpcAsyncCompleteCall (Address: 0x1800822e0)
- RpcAsyncInitializeHandle (Address: 0x180082288)
- RpcBindingFree (Address: 0x180082318)
- RpcBindingFromStringBindingW (Address: 0x1800822a8)
- RpcBindingSetAuthInfoExW (Address: 0x1800822e8)
- RpcStringBindingComposeW (Address: 0x1800822b0)
- RpcStringFreeW (Address: 0x1800822f0)