mqsnap.dll

Description: Message Queuing Snapin

Authors: © Microsoft Corporation. All rights reserved.

Version: 5.0.1.1

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7488a676baa918fe0ecb94ba45c97f9f

File Size: 613.5 KB

Uploaded At: Dec. 1, 2025, 8:33 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x38210)
  • DllGetClassObject (Ordinal: 2, Address: 0x38250)
  • DllRegisterServer (Ordinal: 3, Address: 0x38270)
  • DllUnregisterServer (Ordinal: 4, Address: 0x382d0)

Imported DLLs & Functions

ACLUI.dll
  • (Address: 0x10076000)
ACTIVEDS.dll
  • (Address: 0x10076010)
  • (Address: 0x1007600c)
  • (Address: 0x10076008)
ADVAPI32.dll
  • AddAccessAllowedAce (Address: 0x10076034)
  • AdjustTokenPrivileges (Address: 0x10076068)
  • CloseServiceHandle (Address: 0x100760a0)
  • ControlService (Address: 0x100760ac)
  • ConvertSidToStringSidW (Address: 0x1007606c)
  • CopySid (Address: 0x10076048)
  • EnumDependentServicesW (Address: 0x100760b0)
  • EqualSid (Address: 0x10076060)
  • GetAce (Address: 0x10076058)
  • GetAclInformation (Address: 0x10076054)
  • GetFileSecurityW (Address: 0x10076090)
  • GetLengthSid (Address: 0x1007603c)
  • GetSecurityDescriptorDacl (Address: 0x10076050)
  • GetSecurityDescriptorLength (Address: 0x10076088)
  • GetTraceEnableFlags (Address: 0x1007607c)
  • GetTraceEnableLevel (Address: 0x10076078)
  • GetTraceLoggerHandle (Address: 0x10076074)
  • InitializeAcl (Address: 0x10076038)
  • InitializeSecurityDescriptor (Address: 0x10076040)
  • InitiateSystemShutdownExW (Address: 0x10076094)
  • IsValidSid (Address: 0x100760bc)
  • LookupAccountSidW (Address: 0x10076070)
  • LookupPrivilegeValueW (Address: 0x10076064)
  • MakeSelfRelativeSD (Address: 0x1007602c)
  • MapGenericMask (Address: 0x1007608c)
  • OpenProcessToken (Address: 0x1007604c)
  • OpenSCManagerW (Address: 0x10076098)
  • OpenServiceW (Address: 0x1007609c)
  • QueryServiceStatus (Address: 0x100760a8)
  • QueryServiceStatusEx (Address: 0x100760a4)
  • RegCloseKey (Address: 0x10076018)
  • RegCreateKeyExW (Address: 0x1007605c)
  • RegDeleteKeyW (Address: 0x1007601c)
  • RegDeleteValueW (Address: 0x10076020)
  • RegEnumKeyExW (Address: 0x100760c8)
  • RegisterTraceGuidsW (Address: 0x10076080)
  • RegOpenKeyExW (Address: 0x100760c0)
  • RegQueryInfoKeyW (Address: 0x10076024)
  • RegQueryValueExW (Address: 0x10076028)
  • RegSetValueExW (Address: 0x100760c4)
  • SetSecurityDescriptorDacl (Address: 0x10076030)
  • StartServiceW (Address: 0x100760b4)
  • TraceEvent (Address: 0x100760b8)
  • TraceMessage (Address: 0x10076044)
  • UnregisterTraceGuids (Address: 0x10076084)
CLUSAPI.dll
  • CloseCluster (Address: 0x100760d4)
  • CloseClusterNode (Address: 0x100760d0)
  • OpenCluster (Address: 0x100760d8)
  • OpenClusterNode (Address: 0x100760dc)
CRYPT32.dll
  • CertCloseStore (Address: 0x100760e4)
  • CertOpenStore (Address: 0x100760e8)
CRYPTUI.dll
  • CryptUIDlgSelectCertificateFromStore (Address: 0x100760f0)
GDI32.dll
  • CreateFontIndirectW (Address: 0x10076100)
  • DeleteObject (Address: 0x100760fc)
  • GetTextExtentPoint32W (Address: 0x100760f8)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x10076178)
  • AcquireSRWLockShared (Address: 0x10076150)
  • CloseHandle (Address: 0x1007616c)
  • CloseThreadpoolTimer (Address: 0x1007617c)
  • CompareStringW (Address: 0x10076268)
  • CreateDirectoryW (Address: 0x100761d8)
  • CreateMutexExW (Address: 0x10076154)
  • CreateSemaphoreExW (Address: 0x100761b8)
  • CreateThreadpoolTimer (Address: 0x10076160)
  • DebugBreak (Address: 0x1007613c)
  • DecodePointer (Address: 0x10076204)
  • DeleteCriticalSection (Address: 0x1007614c)
  • EncodePointer (Address: 0x10076200)
  • EnterCriticalSection (Address: 0x100761ac)
  • ExpandEnvironmentStringsW (Address: 0x100761c8)
  • FindClose (Address: 0x100761cc)
  • FindFirstFileW (Address: 0x100761e0)
  • FindNextFileW (Address: 0x100761e8)
  • FindResourceW (Address: 0x1007611c)
  • FlushInstructionCache (Address: 0x1007620c)
  • FormatMessageW (Address: 0x1007618c)
  • FreeLibrary (Address: 0x1007610c)
  • GetComputerNameW (Address: 0x100761f4)
  • GetCurrentProcess (Address: 0x10076244)
  • GetCurrentProcessId (Address: 0x10076148)
  • GetCurrentThreadId (Address: 0x10076194)
  • GetDateFormatW (Address: 0x10076260)
  • GetDriveTypeW (Address: 0x100761d4)
  • GetFileAttributesW (Address: 0x100761d0)
  • GetLastError (Address: 0x10076188)
  • GetModuleFileNameA (Address: 0x100761bc)
  • GetModuleFileNameW (Address: 0x10076124)
  • GetModuleHandleA (Address: 0x10076130)
  • GetModuleHandleExW (Address: 0x100761a4)
  • GetModuleHandleW (Address: 0x10076140)
  • GetProcAddress (Address: 0x10076158)
  • GetProcessHeap (Address: 0x10076144)
  • GetSystemTimeAsFileTime (Address: 0x10076234)
  • GetTickCount (Address: 0x10076238)
  • GetTimeFormatW (Address: 0x10076264)
  • GetVersionExW (Address: 0x1007623c)
  • GlobalAlloc (Address: 0x10076270)
  • GlobalFree (Address: 0x10076254)
  • HeapAlloc (Address: 0x1007615c)
  • HeapDestroy (Address: 0x1007624c)
  • HeapFree (Address: 0x100761b4)
  • InitializeCriticalSection (Address: 0x10076248)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10076198)
  • InitializeCriticalSectionEx (Address: 0x1007619c)
  • InterlockedPopEntrySList (Address: 0x10076214)
  • InterlockedPushEntrySList (Address: 0x10076210)
  • IsDebuggerPresent (Address: 0x10076138)
  • IsProcessorFeaturePresent (Address: 0x10076208)
  • LeaveCriticalSection (Address: 0x100761a0)
  • LoadLibraryA (Address: 0x100761c0)
  • LoadLibraryExA (Address: 0x100761fc)
  • LoadLibraryExW (Address: 0x1007612c)
  • LoadLibraryW (Address: 0x10076128)
  • LoadResource (Address: 0x10076118)
  • LocalAlloc (Address: 0x100761c4)
  • LocalFree (Address: 0x10076274)
  • LockResource (Address: 0x1007625c)
  • lstrcpynW (Address: 0x10076134)
  • lstrcpyW (Address: 0x10076250)
  • lstrlenA (Address: 0x10076218)
  • MoveFileW (Address: 0x100761e4)
  • MultiByteToWideChar (Address: 0x10076110)
  • OpenProcess (Address: 0x100761ec)
  • OpenSemaphoreW (Address: 0x10076170)
  • OutputDebugStringA (Address: 0x10076120)
  • OutputDebugStringW (Address: 0x10076180)
  • QueryPerformanceCounter (Address: 0x10076230)
  • RaiseException (Address: 0x10076240)
  • ReleaseMutex (Address: 0x10076190)
  • ReleaseSemaphore (Address: 0x100761a8)
  • ReleaseSRWLockExclusive (Address: 0x10076184)
  • ReleaseSRWLockShared (Address: 0x10076164)
  • RemoveDirectoryW (Address: 0x100761dc)
  • SetLastError (Address: 0x100761b0)
  • SetThreadpoolTimer (Address: 0x10076168)
  • SetUnhandledExceptionFilter (Address: 0x10076220)
  • SizeofResource (Address: 0x10076114)
  • Sleep (Address: 0x100761f0)
  • SleepConditionVariableSRW (Address: 0x1007622c)
  • TerminateProcess (Address: 0x10076224)
  • UnhandledExceptionFilter (Address: 0x1007621c)
  • VirtualAlloc (Address: 0x10076108)
  • VirtualFree (Address: 0x100761f8)
  • WaitForSingleObject (Address: 0x1007626c)
  • WaitForSingleObjectEx (Address: 0x10076174)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10076258)
  • WakeAllConditionVariable (Address: 0x10076228)
MFC42u.dll
  • (Address: 0x1007627c)
  • (Address: 0x10076280)
  • (Address: 0x10076284)
  • (Address: 0x10076288)
  • (Address: 0x1007628c)
  • (Address: 0x10076290)
  • (Address: 0x10076294)
  • (Address: 0x10076298)
  • (Address: 0x1007629c)
  • (Address: 0x100762a0)
  • (Address: 0x100762a4)
  • (Address: 0x100762a8)
  • (Address: 0x100762ac)
  • (Address: 0x100762b0)
  • (Address: 0x100762b4)
  • (Address: 0x100762b8)
  • (Address: 0x100762bc)
  • (Address: 0x100762c0)
  • (Address: 0x100762c4)
  • (Address: 0x100762c8)
  • (Address: 0x100762cc)
  • (Address: 0x100762d0)
  • (Address: 0x100762d4)
  • (Address: 0x100762d8)
  • (Address: 0x100762dc)
  • (Address: 0x100762e0)
  • (Address: 0x100762e4)
  • (Address: 0x100762e8)
  • (Address: 0x100762ec)
  • (Address: 0x100762f0)
  • (Address: 0x100762f4)
  • (Address: 0x100762f8)
  • (Address: 0x100762fc)
  • (Address: 0x10076300)
  • (Address: 0x10076304)
  • (Address: 0x10076308)
  • (Address: 0x1007630c)
  • (Address: 0x10076310)
  • (Address: 0x10076314)
  • (Address: 0x10076318)
  • (Address: 0x1007631c)
  • (Address: 0x10076320)
  • (Address: 0x10076324)
  • (Address: 0x10076328)
  • (Address: 0x1007632c)
  • (Address: 0x10076330)
  • (Address: 0x10076334)
  • (Address: 0x10076338)
  • (Address: 0x1007633c)
  • (Address: 0x10076340)
  • (Address: 0x10076344)
  • (Address: 0x10076348)
  • (Address: 0x1007634c)
  • (Address: 0x10076350)
  • (Address: 0x10076354)
  • (Address: 0x10076358)
  • (Address: 0x1007635c)
  • (Address: 0x10076360)
  • (Address: 0x10076364)
  • (Address: 0x10076368)
  • (Address: 0x1007636c)
  • (Address: 0x10076370)
  • (Address: 0x10076374)
  • (Address: 0x10076378)
  • (Address: 0x1007637c)
  • (Address: 0x10076380)
  • (Address: 0x10076384)
  • (Address: 0x10076388)
  • (Address: 0x1007638c)
  • (Address: 0x10076390)
  • (Address: 0x10076394)
  • (Address: 0x10076398)
  • (Address: 0x1007639c)
  • (Address: 0x100763a0)
  • (Address: 0x100763a4)
  • (Address: 0x100763a8)
  • (Address: 0x100763ac)
  • (Address: 0x100763b0)
  • (Address: 0x100763b4)
  • (Address: 0x100763b8)
  • (Address: 0x100763bc)
  • (Address: 0x100763c0)
  • (Address: 0x100763c4)
  • (Address: 0x100763c8)
  • (Address: 0x100763cc)
  • (Address: 0x100763d0)
  • (Address: 0x100763d4)
  • (Address: 0x100763d8)
  • (Address: 0x100763dc)
  • (Address: 0x100763e0)
  • (Address: 0x100763e4)
  • (Address: 0x100763e8)
  • (Address: 0x100763ec)
  • (Address: 0x100763f0)
  • (Address: 0x100763f4)
  • (Address: 0x100763f8)
  • (Address: 0x100763fc)
  • (Address: 0x10076400)
  • (Address: 0x10076404)
  • (Address: 0x10076408)
  • (Address: 0x1007640c)
  • (Address: 0x10076410)
  • (Address: 0x10076414)
  • (Address: 0x10076418)
  • (Address: 0x1007641c)
  • (Address: 0x10076420)
  • (Address: 0x10076424)
  • (Address: 0x10076428)
  • (Address: 0x1007642c)
  • (Address: 0x10076430)
  • (Address: 0x10076434)
  • (Address: 0x10076438)
  • (Address: 0x1007643c)
  • (Address: 0x10076440)
  • (Address: 0x10076444)
  • (Address: 0x10076448)
  • (Address: 0x1007644c)
  • (Address: 0x10076450)
  • (Address: 0x10076454)
  • (Address: 0x10076458)
  • (Address: 0x1007645c)
  • (Address: 0x10076460)
  • (Address: 0x10076464)
  • (Address: 0x10076658)
  • (Address: 0x1007665c)
  • (Address: 0x10076660)
  • (Address: 0x10076664)
  • (Address: 0x10076668)
  • (Address: 0x1007666c)
  • (Address: 0x10076670)
  • (Address: 0x10076674)
  • (Address: 0x10076678)
  • (Address: 0x1007667c)
  • (Address: 0x10076680)
  • (Address: 0x10076684)
  • (Address: 0x10076688)
  • (Address: 0x1007668c)
  • (Address: 0x10076690)
  • (Address: 0x10076694)
  • (Address: 0x10076698)
  • (Address: 0x1007669c)
  • (Address: 0x100766a0)
  • (Address: 0x100766a4)
  • (Address: 0x100766a8)
  • (Address: 0x100766ac)
  • (Address: 0x100766b0)
  • (Address: 0x100766b4)
  • (Address: 0x100766b8)
  • (Address: 0x100766bc)
  • (Address: 0x10076468)
  • (Address: 0x1007646c)
  • (Address: 0x10076470)
  • (Address: 0x10076474)
  • (Address: 0x10076478)
  • (Address: 0x1007647c)
  • (Address: 0x10076480)
  • (Address: 0x10076484)
  • (Address: 0x10076488)
  • (Address: 0x1007648c)
  • (Address: 0x10076490)
  • (Address: 0x10076494)
  • (Address: 0x10076498)
  • (Address: 0x1007649c)
  • (Address: 0x100764a0)
  • (Address: 0x100764a4)
  • (Address: 0x100764a8)
  • (Address: 0x100764ac)
  • (Address: 0x100764b0)
  • (Address: 0x100764b4)
  • (Address: 0x100764b8)
  • (Address: 0x100764bc)
  • (Address: 0x100764c0)
  • (Address: 0x100764c4)
  • (Address: 0x100764c8)
  • (Address: 0x100764cc)
  • (Address: 0x100764d0)
  • (Address: 0x100764d4)
  • (Address: 0x100764d8)
  • (Address: 0x100764dc)
  • (Address: 0x100764e0)
  • (Address: 0x100764e4)
  • (Address: 0x100764e8)
  • (Address: 0x100764ec)
  • (Address: 0x100764f0)
  • (Address: 0x100764f4)
  • (Address: 0x100764f8)
  • (Address: 0x100764fc)
  • (Address: 0x10076500)
  • (Address: 0x10076504)
  • (Address: 0x10076508)
  • (Address: 0x1007650c)
  • (Address: 0x10076510)
  • (Address: 0x10076514)
  • (Address: 0x10076518)
  • (Address: 0x1007651c)
  • (Address: 0x10076520)
  • (Address: 0x10076524)
  • (Address: 0x10076528)
  • (Address: 0x1007652c)
  • (Address: 0x10076530)
  • (Address: 0x10076534)
  • (Address: 0x10076538)
  • (Address: 0x1007653c)
  • (Address: 0x10076540)
  • (Address: 0x10076544)
  • (Address: 0x10076548)
  • (Address: 0x1007654c)
  • (Address: 0x10076550)
  • (Address: 0x10076554)
  • (Address: 0x10076558)
  • (Address: 0x1007655c)
  • (Address: 0x10076560)
  • (Address: 0x10076564)
  • (Address: 0x10076568)
  • (Address: 0x1007656c)
  • (Address: 0x10076570)
  • (Address: 0x10076574)
  • (Address: 0x10076578)
  • (Address: 0x1007657c)
  • (Address: 0x10076580)
  • (Address: 0x10076584)
  • (Address: 0x10076588)
  • (Address: 0x1007658c)
  • (Address: 0x10076590)
  • (Address: 0x10076594)
  • (Address: 0x10076598)
  • (Address: 0x1007659c)
  • (Address: 0x100765a0)
  • (Address: 0x100765a4)
  • (Address: 0x100765a8)
  • (Address: 0x100765ac)
  • (Address: 0x100765b0)
  • (Address: 0x100765b4)
  • (Address: 0x100765b8)
  • (Address: 0x100765bc)
  • (Address: 0x100765c0)
  • (Address: 0x100765c4)
  • (Address: 0x100765c8)
  • (Address: 0x100765cc)
  • (Address: 0x100765d0)
  • (Address: 0x100765d4)
  • (Address: 0x100765d8)
  • (Address: 0x100765dc)
  • (Address: 0x100765e0)
  • (Address: 0x100765e4)
  • (Address: 0x100765e8)
  • (Address: 0x100765ec)
  • (Address: 0x100765f0)
  • (Address: 0x100765f4)
  • (Address: 0x100765f8)
  • (Address: 0x100765fc)
  • (Address: 0x10076600)
  • (Address: 0x10076604)
  • (Address: 0x10076608)
  • (Address: 0x1007660c)
  • (Address: 0x10076610)
  • (Address: 0x10076614)
  • (Address: 0x10076618)
  • (Address: 0x1007661c)
  • (Address: 0x10076620)
  • (Address: 0x10076624)
  • (Address: 0x10076628)
  • (Address: 0x1007662c)
  • (Address: 0x10076630)
  • (Address: 0x10076634)
  • (Address: 0x10076638)
  • (Address: 0x1007663c)
  • (Address: 0x10076640)
  • (Address: 0x10076644)
  • (Address: 0x10076648)
  • (Address: 0x1007664c)
  • (Address: 0x10076650)
  • (Address: 0x10076654)
MQCERTUI.dll
  • SelectPersonalCertificateForRegister (Address: 0x100766c8)
  • SelectPersonalCertificateForRemoval (Address: 0x100766c4)
  • ShowCertificate (Address: 0x100766cc)
  • ShowPersonalCertificates (Address: 0x100766d0)
mqrt.dll
  • MQBeginTransaction (Address: 0x100767d8)
  • MQCloseCursor (Address: 0x10076828)
  • MQCloseQueue (Address: 0x10076818)
  • MQCreateCursor (Address: 0x100767ec)
  • MQCreateQueue (Address: 0x10076814)
  • MQDeleteQueue (Address: 0x100767e0)
  • MQFreeMemory (Address: 0x100767bc)
  • MQGetMachineProperties (Address: 0x100767d4)
  • MQGetQueueProperties (Address: 0x100767c8)
  • MQGetQueueSecurity (Address: 0x100767e4)
  • MQMgmtAction (Address: 0x100767d0)
  • MQMgmtGetInfo (Address: 0x100767cc)
  • MQMoveMessage (Address: 0x100767dc)
  • MQOpenQueue (Address: 0x100767f0)
  • MQPathNameToFormatName (Address: 0x1007680c)
  • MQPurgeQueue (Address: 0x10076810)
  • MQReceiveMessage (Address: 0x100767b8)
  • MQReceiveMessageByLookupId (Address: 0x10076820)
  • MQSendMessage (Address: 0x1007681c)
  • MQSetQueueProperties (Address: 0x100767e8)
  • MQSetQueueSecurity (Address: 0x10076808)
  • RTCreateInternalCertificate (Address: 0x10076800)
  • RTDeleteInternalCert (Address: 0x100767f4)
  • RTGetInternalCert (Address: 0x100767fc)
  • RTGetUserCerts (Address: 0x10076824)
  • RTIsDependentClient (Address: 0x10076804)
  • RTRegisterUserCert (Address: 0x100767f8)
  • RTRemoveUserCert (Address: 0x100767c0)
  • RTRemoveUserCertSid (Address: 0x100767c4)
mqsec.dll
  • ??0CColumns@@QAE@I@Z (Address: 0x10076838)
  • ??0CRestriction@@QAE@I@Z (Address: 0x10076854)
  • ??1CColumns@@QAE@XZ (Address: 0x10076834)
  • ??1CRestriction@@QAE@XZ (Address: 0x10076858)
  • ?Add@CColumns@@QAEXABK@Z (Address: 0x10076830)
  • ?AddRestriction@CRestriction@@QAEXPAU_GUID@@KK@Z (Address: 0x1007685c)
  • GetComputerNameInternal (Address: 0x1007684c)
  • GetDomainFQDNName (Address: 0x10076878)
  • GetFalconKeyValue (Address: 0x10076840)
  • IsLocalSystemCluster (Address: 0x10076850)
  • MQSec_GetAdminSid (Address: 0x10076860)
  • MQSec_GetAnonymousSid (Address: 0x10076844)
  • MQSec_GetProcessUserSid (Address: 0x1007686c)
  • MQSec_GetUserType (Address: 0x10076880)
  • MQSec_GetWorldSid (Address: 0x10076848)
  • MQSec_SetDirectorySecurityForService (Address: 0x10076864)
  • MQSec_SetPrivilegeInThread (Address: 0x10076868)
  • MQSec_StorePubKeysInDS (Address: 0x10076874)
  • MQSigCreateCertificate (Address: 0x10076870)
  • MSMQGetOperatingSystem (Address: 0x1007687c)
  • SetFalconKeyValue (Address: 0x1007683c)
mqutil.dll
  • MQGetResourceHandle (Address: 0x10076888)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10076898)
  • __dllonexit (Address: 0x100768f8)
  • __RTDynamicCast (Address: 0x10076894)
  • _amsg_exit (Address: 0x10076908)
  • _CxxThrowException (Address: 0x10076910)
  • _except_handler4_common (Address: 0x100768e8)
  • _initterm (Address: 0x10076904)
  • _itow_s (Address: 0x100768d4)
  • _lock (Address: 0x10076900)
  • _onexit (Address: 0x100768f4)
  • _purecall (Address: 0x100768a4)
  • _snwscanf_s (Address: 0x1007691c)
  • _strnicmp (Address: 0x1007694c)
  • _ui64tow_s (Address: 0x100768e4)
  • _unlock (Address: 0x100768fc)
  • _vsnprintf_s (Address: 0x100768b4)
  • _vsnwprintf (Address: 0x1007689c)
  • _wcsdup (Address: 0x10076950)
  • _wcsicmp (Address: 0x100768c4)
  • _wcsnicmp (Address: 0x10076948)
  • _wtoi (Address: 0x10076928)
  • _XcptFilter (Address: 0x1007690c)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x10076934)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x100768dc)
  • ??0exception@@QAE@XZ (Address: 0x100768ac)
  • ??1exception@@UAE@XZ (Address: 0x100768a8)
  • ??1type_info@@UAE@XZ (Address: 0x100768ec)
  • ?terminate@@YAXXZ (Address: 0x100768f0)
  • ?what@exception@@UBEPBDXZ (Address: 0x100768d0)
  • free (Address: 0x100768c8)
  • isalpha (Address: 0x10076940)
  • iswdigit (Address: 0x10076918)
  • iswspace (Address: 0x1007693c)
  • malloc (Address: 0x100768c0)
  • memcmp (Address: 0x10076890)
  • memcpy (Address: 0x100768d8)
  • memcpy_s (Address: 0x100768a0)
  • memmove (Address: 0x100768b0)
  • memmove_s (Address: 0x100768b8)
  • memset (Address: 0x10076914)
  • qsort (Address: 0x10076944)
  • realloc (Address: 0x100768cc)
  • swscanf_s (Address: 0x100768e0)
  • towupper (Address: 0x10076920)
  • wcschr (Address: 0x10076938)
  • wcscspn (Address: 0x10076930)
  • wcsnlen (Address: 0x100768bc)
  • wcstol (Address: 0x10076924)
  • wcstoul (Address: 0x1007692c)
NETAPI32.dll
  • DsGetDcNameW (Address: 0x100766dc)
  • NetApiBufferFree (Address: 0x100766d8)
NTDSAPI.dll
  • DsCrackNamesW (Address: 0x100766e8)
  • DsFreeNameResultW (Address: 0x100766e4)
ole32.dll
  • CLSIDFromProgID (Address: 0x10076980)
  • CoCreateInstance (Address: 0x1007695c)
  • CoInitialize (Address: 0x1007697c)
  • CoTaskMemAlloc (Address: 0x10076960)
  • CoTaskMemFree (Address: 0x1007696c)
  • CoTaskMemRealloc (Address: 0x10076958)
  • CreateStreamOnHGlobal (Address: 0x10076968)
  • IIDFromString (Address: 0x10076970)
  • OleRun (Address: 0x10076978)
  • StringFromCLSID (Address: 0x10076964)
  • StringFromGUID2 (Address: 0x10076974)
OLEAUT32.dll
  • GetErrorInfo (Address: 0x10076700)
  • LoadTypeLib (Address: 0x10076714)
  • RegisterTypeLib (Address: 0x10076710)
  • SafeArrayGetElement (Address: 0x10076704)
  • SafeArrayGetLBound (Address: 0x10076708)
  • SafeArrayGetUBound (Address: 0x1007670c)
  • SysAllocString (Address: 0x10076720)
  • SysAllocStringLen (Address: 0x100766fc)
  • SysFreeString (Address: 0x100766f4)
  • SysStringLen (Address: 0x100766f8)
  • VarI4FromStr (Address: 0x100766f0)
  • VariantClear (Address: 0x1007671c)
  • VariantInit (Address: 0x10076718)
USER32.dll
  • BringWindowToTop (Address: 0x1007679c)
  • CallNextHookEx (Address: 0x100767b0)
  • CharNextW (Address: 0x10076728)
  • DestroyMenu (Address: 0x1007676c)
  • EnableWindow (Address: 0x10076758)
  • FindWindowExW (Address: 0x100767a0)
  • GetClientRect (Address: 0x10076748)
  • GetDC (Address: 0x10076780)
  • GetDlgItem (Address: 0x10076734)
  • GetDlgItemTextW (Address: 0x10076794)
  • GetMenuItemInfoW (Address: 0x10076768)
  • GetParent (Address: 0x10076740)
  • GetSubMenu (Address: 0x10076764)
  • GetWindowLongW (Address: 0x1007673c)
  • GetWindowRect (Address: 0x10076744)
  • GetWindowTextLengthW (Address: 0x10076750)
  • GetWindowTextW (Address: 0x10076754)
  • GetWindowThreadProcessId (Address: 0x100767a4)
  • InsertMenuW (Address: 0x10076778)
  • IsWindow (Address: 0x10076774)
  • LoadIconW (Address: 0x10076788)
  • LoadImageW (Address: 0x1007675c)
  • LoadMenuW (Address: 0x10076760)
  • LoadStringW (Address: 0x1007672c)
  • PostMessageW (Address: 0x10076770)
  • RegisterClipboardFormatW (Address: 0x10076730)
  • ReleaseDC (Address: 0x10076784)
  • ScreenToClient (Address: 0x1007678c)
  • SendMessageW (Address: 0x10076738)
  • SetActiveWindow (Address: 0x10076798)
  • SetDlgItemTextW (Address: 0x10076790)
  • SetWindowLongW (Address: 0x1007674c)
  • SetWindowsHookExW (Address: 0x100767a8)
  • SetWindowTextW (Address: 0x1007677c)
  • UnhookWindowsHookEx (Address: 0x100767ac)