dcntel.dll

Description: dcntel

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: c98574e3289af70b8b8660d6bc4676e6

File Size: 854.5 KB

Uploaded At: Dec. 1, 2025, 7:25 a.m.

Views: 9

Exported Functions

  • GetCensusPropertyAlloc (Ordinal: 1, Address: 0xd090)
  • GetCensusRegistryLocation (Ordinal: 2, Address: 0xda60)
  • RunSystemContextCensus (Ordinal: 3, Address: 0xca70)
  • RunUserContextCensus (Ordinal: 4, Address: 0xcbc0)
  • SetCustomTrigger (Ordinal: 5, Address: 0xd010)
  • SetCustomTriggerEx (Ordinal: 6, Address: 0xcbd0)
  • SysprepCleanupEnableCustomTrigger (Ordinal: 7, Address: 0xd030)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1800a0110)
  • CoCreateInstance (Address: 0x1800a0100)
  • CoInitializeEx (Address: 0x1800a00f8)
  • CoSetProxyBlanket (Address: 0x1800a0108)
  • CoTaskMemAlloc (Address: 0x1800a0118)
  • CoTaskMemFree (Address: 0x1800a0120)
  • CoUninitialize (Address: 0x1800a0130)
  • CoWaitForMultipleHandles (Address: 0x1800a0128)
  • PropVariantClear (Address: 0x1800a0138)
  • StringFromCLSID (Address: 0x1800a00f0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800a0160)
  • IsDebuggerPresent (Address: 0x1800a0150)
  • OutputDebugStringA (Address: 0x1800a0158)
  • OutputDebugStringW (Address: 0x1800a0148)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800a0170)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800a0180)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800a0190)
  • RaiseException (Address: 0x1800a01a8)
  • SetLastError (Address: 0x1800a01b0)
  • SetUnhandledExceptionFilter (Address: 0x1800a0198)
  • UnhandledExceptionFilter (Address: 0x1800a01a0)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800a0200)
  • DeleteFileW (Address: 0x1800a01e8)
  • FindClose (Address: 0x1800a0210)
  • FindFirstFileW (Address: 0x1800a01e0)
  • GetDriveTypeW (Address: 0x1800a01f8)
  • GetFileAttributesW (Address: 0x1800a01c8)
  • GetLogicalDrives (Address: 0x1800a01f0)
  • GetTempFileNameW (Address: 0x1800a0208)
  • GetVolumePathNameW (Address: 0x1800a01d0)
  • ReadFile (Address: 0x1800a01c0)
  • WriteFile (Address: 0x1800a01d8)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x1800a0220)
api-ms-win-core-file-l2-1-0.dll
  • MoveFileExW (Address: 0x1800a0230)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800a0240)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800a0258)
  • HeapAlloc (Address: 0x1800a0268)
  • HeapFree (Address: 0x1800a0260)
  • HeapReAlloc (Address: 0x1800a0250)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalFree (Address: 0x1800a0288)
  • LocalAlloc (Address: 0x1800a0280)
  • LocalFree (Address: 0x1800a0278)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800a0298)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • WTSGetActiveConsoleSessionId (Address: 0x1800a02a8)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • VerifyVersionInfoW (Address: 0x1800a02b8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x1800a02e8)
  • GetModuleFileNameA (Address: 0x1800a02e0)
  • GetModuleFileNameW (Address: 0x1800a02f8)
  • GetModuleHandleExA (Address: 0x1800a02c8)
  • GetModuleHandleExW (Address: 0x1800a0300)
  • GetModuleHandleW (Address: 0x1800a02f0)
  • GetProcAddress (Address: 0x1800a02d8)
  • LoadLibraryExW (Address: 0x1800a02d0)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryA (Address: 0x1800a0310)
  • LoadLibraryW (Address: 0x1800a0318)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800a0328)
  • GetLocaleInfoEx (Address: 0x1800a0348)
  • GetLocaleInfoW (Address: 0x1800a0338)
  • GetSystemPreferredUILanguages (Address: 0x1800a0340)
  • GetUserGeoID (Address: 0x1800a0330)
  • GetUserPreferredUILanguages (Address: 0x1800a0350)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • EnumUILanguagesW (Address: 0x1800a0360)
  • GetSystemDefaultUILanguage (Address: 0x1800a0368)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x1800a0378)
  • VirtualFree (Address: 0x1800a0380)
api-ms-win-core-namedpipe-l1-1-0.dll
  • SetNamedPipeHandleState (Address: 0x1800a0390)
  • WaitNamedPipeW (Address: 0x1800a0398)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800a03a8)
  • GetCommandLineW (Address: 0x1800a03b0)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800a03d8)
  • ExitProcess (Address: 0x1800a03f8)
  • GetCurrentProcess (Address: 0x1800a03e0)
  • GetCurrentProcessId (Address: 0x1800a0410)
  • GetCurrentThread (Address: 0x1800a0408)
  • GetCurrentThreadId (Address: 0x1800a0400)
  • OpenProcessToken (Address: 0x1800a03d0)
  • OpenThreadToken (Address: 0x1800a03c0)
  • SetThreadToken (Address: 0x1800a03e8)
  • TerminateProcess (Address: 0x1800a03f0)
  • TerminateThread (Address: 0x1800a03c8)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x1800a0428)
  • IsProcessorFeaturePresent (Address: 0x1800a0420)
api-ms-win-core-processtopology-obsolete-l1-1-0.dll
  • GetActiveProcessorCount (Address: 0x1800a0438)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800a0448)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryThreadCycleTime (Address: 0x1800a0458)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800a04b0)
  • RegCreateKeyExW (Address: 0x1800a04e0)
  • RegDeleteKeyExW (Address: 0x1800a04b8)
  • RegDeleteTreeW (Address: 0x1800a04c0)
  • RegDeleteValueW (Address: 0x1800a0498)
  • RegEnumKeyExW (Address: 0x1800a04c8)
  • RegEnumValueW (Address: 0x1800a04a0)
  • RegFlushKey (Address: 0x1800a0488)
  • RegGetValueW (Address: 0x1800a0468)
  • RegLoadAppKeyW (Address: 0x1800a04a8)
  • RegLoadKeyW (Address: 0x1800a0490)
  • RegOpenKeyExW (Address: 0x1800a04e8)
  • RegQueryInfoKeyW (Address: 0x1800a0480)
  • RegQueryValueExW (Address: 0x1800a04d0)
  • RegSaveKeyExW (Address: 0x1800a0470)
  • RegSetKeySecurity (Address: 0x1800a04d8)
  • RegSetValueExW (Address: 0x1800a0478)
  • RegUnLoadKeyW (Address: 0x1800a04f0)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1800a0508)
  • RegSetKeyValueW (Address: 0x1800a0500)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x1800a0520)
  • RegOpenKeyW (Address: 0x1800a0518)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800a0530)
  • RtlCompareMemory (Address: 0x1800a0540)
  • RtlLookupFunctionEntry (Address: 0x1800a0538)
  • RtlVirtualUnwind (Address: 0x1800a0548)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x1800a0558)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrChrW (Address: 0x1800a0568)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeW (Address: 0x1800a0588)
  • MultiByteToWideChar (Address: 0x1800a0580)
  • WideCharToMultiByte (Address: 0x1800a0578)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800a0640)
  • AcquireSRWLockShared (Address: 0x1800a05e0)
  • CreateEventExW (Address: 0x1800a05a0)
  • CreateEventW (Address: 0x1800a0608)
  • CreateMutexExW (Address: 0x1800a05a8)
  • CreateMutexW (Address: 0x1800a05c0)
  • CreateSemaphoreExW (Address: 0x1800a05b0)
  • DeleteCriticalSection (Address: 0x1800a05f8)
  • EnterCriticalSection (Address: 0x1800a0598)
  • InitializeCriticalSection (Address: 0x1800a05f0)
  • InitializeCriticalSectionEx (Address: 0x1800a0600)
  • LeaveCriticalSection (Address: 0x1800a05e8)
  • OpenSemaphoreW (Address: 0x1800a0610)
  • OpenWaitableTimerW (Address: 0x1800a05d0)
  • ReleaseMutex (Address: 0x1800a0628)
  • ReleaseSemaphore (Address: 0x1800a05d8)
  • ReleaseSRWLockExclusive (Address: 0x1800a0630)
  • ReleaseSRWLockShared (Address: 0x1800a05b8)
  • ResetEvent (Address: 0x1800a05c8)
  • SetEvent (Address: 0x1800a0648)
  • SetWaitableTimer (Address: 0x1800a0620)
  • WaitForSingleObject (Address: 0x1800a0618)
  • WaitForSingleObjectEx (Address: 0x1800a0638)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800a0660)
  • SleepConditionVariableSRW (Address: 0x1800a0668)
  • WakeAllConditionVariable (Address: 0x1800a0658)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x1800a0678)
  • CreateWaitableTimerW (Address: 0x1800a0680)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x1800a06e8)
  • GetLogicalProcessorInformationEx (Address: 0x1800a0690)
  • GetSystemDirectoryA (Address: 0x1800a06b8)
  • GetSystemDirectoryW (Address: 0x1800a06c8)
  • GetSystemInfo (Address: 0x1800a06d8)
  • GetSystemTime (Address: 0x1800a06a8)
  • GetSystemTimeAsFileTime (Address: 0x1800a06b0)
  • GetSystemWindowsDirectoryW (Address: 0x1800a06e0)
  • GetTickCount (Address: 0x1800a06d0)
  • GetVersionExA (Address: 0x1800a06c0)
  • GetVersionExW (Address: 0x1800a06a0)
  • GlobalMemoryStatusEx (Address: 0x1800a0698)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetProductInfo (Address: 0x1800a0708)
  • GetSystemFirmwareTable (Address: 0x1800a06f8)
  • VerSetConditionMask (Address: 0x1800a0700)
api-ms-win-core-sysinfo-l1-2-1.dll
  • GetPhysicallyInstalledSystemMemory (Address: 0x1800a0718)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800a0738)
  • CreateThreadpoolTimer (Address: 0x1800a0740)
  • SetThreadpoolTimer (Address: 0x1800a0728)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800a0730)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800a0750)
  • SystemTimeToFileTime (Address: 0x1800a0758)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800a0768)
  • EncodePointer (Address: 0x1800a0770)
api-ms-win-core-version-l1-1-0.dll
  • VerQueryValueW (Address: 0x1800a0780)
api-ms-win-core-version-l1-1-1.dll
  • GetFileVersionInfoSizeW (Address: 0x1800a0798)
  • GetFileVersionInfoW (Address: 0x1800a0790)
api-ms-win-core-winrt-error-l1-1-0.dll
  • SetRestrictedErrorInfo (Address: 0x1800a07a8)
api-ms-win-core-winrt-error-l1-1-1.dll
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1800a07b8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800a07e0)
  • RoGetActivationFactory (Address: 0x1800a07d0)
  • RoInitialize (Address: 0x1800a07d8)
  • RoUninitialize (Address: 0x1800a07c8)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x1800a07f0)
api-ms-win-eventing-consumer-l1-1-0.dll
  • CloseTrace (Address: 0x1800a0800)
  • OpenTraceW (Address: 0x1800a0808)
  • ProcessTrace (Address: 0x1800a0810)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x1800a0828)
  • StartTraceW (Address: 0x1800a0820)
api-ms-win-eventing-legacy-l1-1-0.dll
  • EnableTrace (Address: 0x1800a0838)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1800a0848)
  • EventUnregister (Address: 0x1800a0850)
  • EventWriteTransfer (Address: 0x1800a0858)
api-ms-win-power-base-l1-1-0.dll
  • CallNtPowerInformation (Address: 0x1800a0868)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1800a08a8)
  • AllocateAndInitializeSid (Address: 0x1800a0878)
  • CheckTokenMembership (Address: 0x1800a0890)
  • DuplicateTokenEx (Address: 0x1800a08b0)
  • FreeSid (Address: 0x1800a08c0)
  • GetTokenInformation (Address: 0x1800a0898)
  • ImpersonateLoggedOnUser (Address: 0x1800a08b8)
  • InitializeSecurityDescriptor (Address: 0x1800a08c8)
  • RevertToSelf (Address: 0x1800a0880)
  • SetSecurityDescriptorDacl (Address: 0x1800a08a0)
  • SetSecurityDescriptorOwner (Address: 0x1800a0888)
api-ms-win-security-credentials-l1-1-0.dll
  • CredReadW (Address: 0x1800a08d8)
api-ms-win-security-provider-l1-1-0.dll
  • SetEntriesInAclW (Address: 0x1800a08e8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800a08f8)
api-ms-win-shcore-stream-l1-1-0.dll
  • SHCreateStreamOnFileEx (Address: 0x1800a0908)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x1800a0918)
  • BCryptCreateHash (Address: 0x1800a0938)
  • BCryptDestroyHash (Address: 0x1800a0920)
  • BCryptFinishHash (Address: 0x1800a0928)
  • BCryptGetProperty (Address: 0x1800a0940)
  • BCryptHashData (Address: 0x1800a0930)
  • BCryptOpenAlgorithmProvider (Address: 0x1800a0948)
CRYPT32.dll
  • CryptBinaryToStringW (Address: 0x1800a0000)
IPHLPAPI.DLL
  • GetAdaptersInfo (Address: 0x1800a0010)
logoncli.dll
  • DsGetDcNameW (Address: 0x1800a0958)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1800a0b00)
  • ___lc_handle_func (Address: 0x1800a0af8)
  • ___mb_cur_max_func (Address: 0x1800a0b18)
  • __C_specific_handler (Address: 0x1800a0978)
  • __crtLCMapStringW (Address: 0x1800a0b40)
  • __CxxFrameHandler3 (Address: 0x1800a0bd0)
  • __dllonexit (Address: 0x1800a0968)
  • __pctype_func (Address: 0x1800a0af0)
  • __uncaught_exception (Address: 0x1800a0b10)
  • _amsg_exit (Address: 0x1800a0990)
  • _callnewh (Address: 0x1800a09d0)
  • _CxxThrowException (Address: 0x1800a09b0)
  • _errno (Address: 0x1800a0a08)
  • _initterm (Address: 0x1800a0980)
  • _ismbblead (Address: 0x1800a0b20)
  • _lock (Address: 0x1800a0970)
  • _onexit (Address: 0x1800a0a10)
  • _purecall (Address: 0x1800a0ba8)
  • _strnicmp (Address: 0x1800a0b88)
  • _unlock (Address: 0x1800a0b68)
  • _vsnprintf (Address: 0x1800a0bb0)
  • _vsnprintf_s (Address: 0x1800a09f0)
  • _vsnwprintf (Address: 0x1800a0bc8)
  • _wcsdup (Address: 0x1800a0b38)
  • _wcsicmp (Address: 0x1800a0bb8)
  • _wcslwr (Address: 0x1800a0a90)
  • _wcslwr_s (Address: 0x1800a0a28)
  • _wcsnicmp (Address: 0x1800a0a58)
  • _wcstoui64 (Address: 0x1800a0a38)
  • _wcsupr (Address: 0x1800a0a30)
  • _wsetlocale (Address: 0x1800a0b48)
  • _wtof (Address: 0x1800a0aa8)
  • _wtoi (Address: 0x1800a0aa0)
  • _XcptFilter (Address: 0x1800a0998)
  • ??_V@YAXPEAX@Z (Address: 0x1800a0a18)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800a0ab8)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800a0ac8)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800a09c8)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800a09c0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800a0b90)
  • ??0exception@@QEAA@XZ (Address: 0x1800a0b98)
  • ??1bad_cast@@UEAA@XZ (Address: 0x1800a0ac0)
  • ??1exception@@UEAA@XZ (Address: 0x1800a0ba0)
  • ??1type_info@@UEAA@XZ (Address: 0x1800a0b58)
  • ??3@YAXPEAX@Z (Address: 0x1800a0bd8)
  • ?terminate@@YAXXZ (Address: 0x1800a0ab0)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800a09b8)
  • abort (Address: 0x1800a0b28)
  • calloc (Address: 0x1800a0b08)
  • free (Address: 0x1800a0988)
  • iswascii (Address: 0x1800a0b78)
  • localeconv (Address: 0x1800a0ad0)
  • malloc (Address: 0x1800a09d8)
  • memcmp (Address: 0x1800a0b50)
  • memcpy (Address: 0x1800a09a8)
  • memcpy_s (Address: 0x1800a0bc0)
  • memmove (Address: 0x1800a09a0)
  • memmove_s (Address: 0x1800a09e0)
  • memset (Address: 0x1800a0b30)
  • rand_s (Address: 0x1800a0ae0)
  • setlocale (Address: 0x1800a0ae8)
  • sprintf_s (Address: 0x1800a0a00)
  • strchr (Address: 0x1800a0b80)
  • strcmp (Address: 0x1800a0b60)
  • strcpy_s (Address: 0x1800a0a68)
  • strcspn (Address: 0x1800a0ad8)
  • strnlen (Address: 0x1800a0a48)
  • strrchr (Address: 0x1800a09e8)
  • strstr (Address: 0x1800a0a50)
  • swprintf_s (Address: 0x1800a09f8)
  • wcscat_s (Address: 0x1800a0a80)
  • wcschr (Address: 0x1800a0a60)
  • wcscmp (Address: 0x1800a0b70)
  • wcscpy_s (Address: 0x1800a0a78)
  • wcsrchr (Address: 0x1800a0a70)
  • wcsstr (Address: 0x1800a0a88)
  • wcstok_s (Address: 0x1800a0a20)
  • wcstol (Address: 0x1800a0a40)
  • wcstoul (Address: 0x1800a0a98)
netutils.dll
  • NetApiBufferFree (Address: 0x1800a0be8)
ntdll.dll
  • EtwEventRegister (Address: 0x1800a0c58)
  • EtwEventUnregister (Address: 0x1800a0c68)
  • EtwEventWrite (Address: 0x1800a0c60)
  • NtLoadKeyEx (Address: 0x1800a0c20)
  • NtPowerInformation (Address: 0x1800a0d08)
  • NtQueryKey (Address: 0x1800a0bf8)
  • NtQueryLicenseValue (Address: 0x1800a0c80)
  • NtQuerySecurityPolicy (Address: 0x1800a0d00)
  • NtQuerySystemInformation (Address: 0x1800a0d10)
  • RtlAdjustPrivilege (Address: 0x1800a0c00)
  • RtlAllocateAndInitializeSid (Address: 0x1800a0c10)
  • RtlAllocateHeap (Address: 0x1800a0cf8)
  • RtlAppendUnicodeStringToString (Address: 0x1800a0cb8)
  • RtlAppendUnicodeToString (Address: 0x1800a0cb0)
  • RtlDeleteCriticalSection (Address: 0x1800a0ca8)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x1800a0c28)
  • RtlEnterCriticalSection (Address: 0x1800a0c90)
  • RtlEqualString (Address: 0x1800a0ca0)
  • RtlFreeHeap (Address: 0x1800a0cf0)
  • RtlFreeSid (Address: 0x1800a0c08)
  • RtlFreeUnicodeString (Address: 0x1800a0c98)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800a0d20)
  • RtlGetNativeSystemInformation (Address: 0x1800a0c48)
  • RtlGetVersion (Address: 0x1800a0d30)
  • RtlInitAnsiString (Address: 0x1800a0c88)
  • RtlInitializeCriticalSection (Address: 0x1800a0c78)
  • RtlInitUnicodeString (Address: 0x1800a0ce0)
  • RtlInitUnicodeStringEx (Address: 0x1800a0cc8)
  • RtlLeaveCriticalSection (Address: 0x1800a0c70)
  • RtlMultiByteToUnicodeN (Address: 0x1800a0d38)
  • RtlNtStatusToDosError (Address: 0x1800a0d18)
  • RtlRandomEx (Address: 0x1800a0c38)
  • RtlReAllocateHeap (Address: 0x1800a0d40)
  • RtlReleaseRelativeName (Address: 0x1800a0c18)
  • RtlStringFromGUID (Address: 0x1800a0c30)
  • RtlUpcaseUnicodeChar (Address: 0x1800a0c50)
  • WinSqmIsOptedInEx (Address: 0x1800a0d28)
  • ZwClose (Address: 0x1800a0ce8)
  • ZwEnumerateKey (Address: 0x1800a0cd0)
  • ZwOpenKey (Address: 0x1800a0cd8)
  • ZwQuerySystemInformation (Address: 0x1800a0c40)
  • ZwQueryValueKey (Address: 0x1800a0cc0)
OLEAUT32.dll
  • SafeArrayGetElement (Address: 0x1800a0030)
  • SysAllocString (Address: 0x1800a0050)
  • SysFreeString (Address: 0x1800a0020)
  • SysStringLen (Address: 0x1800a0038)
  • VariantClear (Address: 0x1800a0028)
  • VariantInit (Address: 0x1800a0048)
  • VariantTimeToSystemTime (Address: 0x1800a0040)
RPCRT4.dll
  • UuidCreate (Address: 0x1800a0060)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x1800a0078)
  • WinHttpConnect (Address: 0x1800a00a8)
  • WinHttpGetDefaultProxyConfiguration (Address: 0x1800a00c8)
  • WinHttpGetIEProxyConfigForCurrentUser (Address: 0x1800a0080)
  • WinHttpGetProxyForUrl (Address: 0x1800a0090)
  • WinHttpOpen (Address: 0x1800a00d8)
  • WinHttpOpenRequest (Address: 0x1800a0098)
  • WinHttpQueryAuthSchemes (Address: 0x1800a0088)
  • WinHttpQueryDataAvailable (Address: 0x1800a00b0)
  • WinHttpQueryHeaders (Address: 0x1800a00d0)
  • WinHttpReadData (Address: 0x1800a00b8)
  • WinHttpReceiveResponse (Address: 0x1800a00c0)
  • WinHttpSendRequest (Address: 0x1800a00e0)
  • WinHttpSetCredentials (Address: 0x1800a00a0)
  • WinHttpSetOption (Address: 0x1800a0070)