hvsicontainerservice.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Description
Microsoft Defender Application Guard Container Service
Authors
© Microsoft Corporation. All rights reserved.
File size
1.2 MB
Uploaded
2025-12-01 08:12
Views
61
SHA-256
9c54cc79b018ee4e912e7fb3d221ff7c

Exported functions 5

DllCanUnloadNow #1 · 0xa260
DllGetClassObject #2 · 0xa220
GetProxyDllInfo #3 · 0xa200
ServiceMain #4 · 0xa340
SvchostPushServiceGlobals #5 · 0xa330

Imported DLLs & functions 559

AppContainerDeriveSidFromMoniker 0x1800f1fb0
AppContainerRegisterSid 0x1800f1fb8
CoCreateGuid 0x1800f2020
CoCreateInstance 0x1800f2000
CoDecrementMTAUsage 0x1800f2008
CoDisconnectContext 0x1800f2010
CoFreeUnusedLibrariesEx 0x1800f1fe0
CoGetMalloc 0x1800f1fd0
CoImpersonateClient 0x1800f2048
CoIncrementMTAUsage 0x1800f1ff8
CoInitializeEx 0x1800f2018
CoQueryClientBlanket 0x1800f2040
CoRegisterClassObject 0x1800f2038
CoResumeClassObjects 0x1800f1ff0
CoRevertToSelf 0x1800f2050
CoRevokeClassObject 0x1800f1fe8
CoTaskMemAlloc 0x1800f1fc8
CoTaskMemFree 0x1800f1fd8
CoUninitialize 0x1800f2030
StringFromGUID2 0x1800f2028
ObjectStublessClient10 0x1800f2098
ObjectStublessClient11 0x1800f20f0
ObjectStublessClient12 0x1800f2100
ObjectStublessClient13 0x1800f20a8
ObjectStublessClient14 0x1800f20f8
ObjectStublessClient15 0x1800f20c0
ObjectStublessClient16 0x1800f2060
ObjectStublessClient17 0x1800f2108
ObjectStublessClient18 0x1800f20d0
ObjectStublessClient19 0x1800f2090
ObjectStublessClient20 0x1800f20c8
ObjectStublessClient21 0x1800f2068
ObjectStublessClient22 0x1800f20e8
ObjectStublessClient23 0x1800f20b8
ObjectStublessClient24 0x1800f2088
ObjectStublessClient3 0x1800f20e0
ObjectStublessClient4 0x1800f20d8
ObjectStublessClient5 0x1800f20a0
ObjectStublessClient6 0x1800f2080
ObjectStublessClient7 0x1800f20b0
ObjectStublessClient8 0x1800f2078
ObjectStublessClient9 0x1800f2070
DebugBreak 0x1800f2128
IsDebuggerPresent 0x1800f2120
OutputDebugStringW 0x1800f2118
GetLastError 0x1800f2140
RaiseException 0x1800f2148
SetLastError 0x1800f2138
SetUnhandledExceptionFilter 0x1800f2150
UnhandledExceptionFilter 0x1800f2158
CreateDirectoryW 0x1800f21a8
CreateFileW 0x1800f2168
DeleteFileW 0x1800f21e0
FindClose 0x1800f21c8
FindFirstFileW 0x1800f2170
FindNextFileW 0x1800f21d8
FlushFileBuffers 0x1800f21c0
GetDiskFreeSpaceExW 0x1800f2190
GetDriveTypeW 0x1800f2180
GetFileAttributesW 0x1800f2188
GetFileSizeEx 0x1800f21d0
GetFinalPathNameByHandleW 0x1800f2178
GetVolumeInformationW 0x1800f2198
ReadFile 0x1800f21b0
SetFileAttributesW 0x1800f21a0
WriteFile 0x1800f21b8
GetTempPathW 0x1800f21f0
CopyFileW 0x1800f2200
CloseHandle 0x1800f2210
GetProcessHeap 0x1800f2228
HeapAlloc 0x1800f2248
HeapDestroy 0x1800f2240
HeapFree 0x1800f2220
HeapReAlloc 0x1800f2238
HeapSize 0x1800f2230
LocalAlloc 0x1800f2258
LocalFree 0x1800f2260
InitializeSListHead 0x1800f2280
QueryInformationJobObject 0x1800f2290
GetComputerNameW 0x1800f22b0
MoveFileW 0x1800f22a0
RegisterWaitForSingleObject 0x1800f22b8
UnregisterWait 0x1800f22a8
DisableThreadLibraryCalls 0x1800f22e8
FreeLibrary 0x1800f2300
GetModuleFileNameA 0x1800f22d8
GetModuleFileNameW 0x1800f22f0
GetModuleHandleExW 0x1800f22f8
GetModuleHandleW 0x1800f22d0
GetProcAddress 0x1800f22e0
LoadLibraryExA 0x1800f22c8
FormatMessageW 0x1800f2320
IdnToAscii 0x1800f2328
VirtualProtect 0x1800f2340
VirtualQuery 0x1800f2338
PathCchAddBackslash 0x1800f2370
PathCchAppend 0x1800f2358
PathCchCombine 0x1800f2360
PathCchCombineEx 0x1800f2350
PathCchRemoveFileSpec 0x1800f2368
ExpandEnvironmentStringsW 0x1800f2388
GetEnvironmentVariableW 0x1800f2380
GetCurrentProcess 0x1800f23c8
GetCurrentProcessId 0x1800f23d8
GetCurrentThread 0x1800f23f8
GetCurrentThreadId 0x1800f23e8
OpenProcessToken 0x1800f23c0
OpenThreadToken 0x1800f23f0
ProcessIdToSessionId 0x1800f23e0
SetPriorityClass 0x1800f23a0
TerminateProcess 0x1800f2398
TlsAlloc 0x1800f23d0
TlsFree 0x1800f23b0
TlsGetValue 0x1800f23b8
TlsSetValue 0x1800f23a8
GetProcessMitigationPolicy 0x1800f2418
IsProcessorFeaturePresent 0x1800f2410
OpenProcess 0x1800f2408
SetProtectedPolicy 0x1800f2428
GetActiveProcessorCount 0x1800f2438
QueryPerformanceCounter 0x1800f2448
QueryUnbiasedInterruptTime 0x1800f2458
RegCloseKey 0x1800f2470
RegCreateKeyExW 0x1800f24a0
RegEnumKeyExW 0x1800f24b8
RegEnumValueW 0x1800f2468
RegGetValueW 0x1800f2490
RegLoadKeyW 0x1800f24c0
RegNotifyChangeKeyValue 0x1800f2488
RegOpenKeyExW 0x1800f24b0
RegQueryInfoKeyW 0x1800f24a8
RegQueryValueExW 0x1800f2498
RegSetValueExW 0x1800f2478
RegUnLoadKeyW 0x1800f2480
PathCanonicalizeW 0x1800f24d0
PathFileExistsW 0x1800f24f8
PathFindFileNameW 0x1800f24e8
PathGetDriveNumberW 0x1800f2508
PathIsRelativeW 0x1800f2520
PathIsUNCServerShareW 0x1800f2518
PathIsUNCServerW 0x1800f2510
PathSkipRootW 0x1800f2500
PathStripPathW 0x1800f24e0
PathStripToRootW 0x1800f24f0
PathUnquoteSpacesW 0x1800f24d8
MultiByteToWideChar 0x1800f2530
WideCharToMultiByte 0x1800f2538
AcquireSRWLockExclusive 0x1800f25b0
AcquireSRWLockShared 0x1800f2568
CreateEventExW 0x1800f2578
CreateEventW 0x1800f2548
CreateMutexExW 0x1800f2570
CreateSemaphoreExW 0x1800f25d0
DeleteCriticalSection 0x1800f2560
EnterCriticalSection 0x1800f2550
InitializeCriticalSection 0x1800f2558
InitializeCriticalSectionAndSpinCount 0x1800f2580
InitializeCriticalSectionEx 0x1800f25e8
InitializeSRWLock 0x1800f25b8
LeaveCriticalSection 0x1800f25f0
OpenSemaphoreW 0x1800f25a0
ReleaseMutex 0x1800f25d8
ReleaseSemaphore 0x1800f2598
ReleaseSRWLockExclusive 0x1800f25c0
ReleaseSRWLockShared 0x1800f2590
ResetEvent 0x1800f25c8
SetEvent 0x1800f2588
WaitForSingleObject 0x1800f25e0
WaitForSingleObjectEx 0x1800f25a8
InitOnceBeginInitialize 0x1800f2620
InitOnceComplete 0x1800f2610
InitOnceExecuteOnce 0x1800f2628
Sleep 0x1800f2600
WaitOnAddress 0x1800f2618
WakeByAddressAll 0x1800f2608
GetSystemDirectoryW 0x1800f2650
GetSystemInfo 0x1800f2658
GetSystemTimeAsFileTime 0x1800f2660
GetTickCount64 0x1800f2648
GetVersionExW 0x1800f2638
GetWindowsDirectoryW 0x1800f2640
DnsHostnameToComputerNameExW 0x1800f2678
GetPhysicallyInstalledSystemMemory 0x1800f2670
GetNumaHighestNodeNumber 0x1800f2690
GetNumaNodeProcessorMaskEx 0x1800f2688
CloseThreadpoolTimer 0x1800f26e0
CloseThreadpoolWait 0x1800f26f0
CloseThreadpoolWork 0x1800f26b0
CreateThreadpoolTimer 0x1800f26a0
CreateThreadpoolWait 0x1800f26e8
CreateThreadpoolWork 0x1800f26d0
SetThreadpoolTimer 0x1800f26a8
SetThreadpoolWait 0x1800f26b8
SubmitThreadpoolWork 0x1800f26c8
WaitForThreadpoolTimerCallbacks 0x1800f26f8
WaitForThreadpoolWaitCallbacks 0x1800f26d8
WaitForThreadpoolWorkCallbacks 0x1800f26c0
CreateTimerQueueTimer 0x1800f2718
DeleteTimerQueueTimer 0x1800f2710
QueueUserWorkItem 0x1800f2720
UnregisterWaitEx 0x1800f2708
RegisterWaitForSingleObjectEx 0x1800f2730
FileTimeToSystemTime 0x1800f2748
SystemTimeToFileTime 0x1800f2740
DecodePointer 0x1800f2760
EncodePointer 0x1800f2758
RoOriginateError 0x1800f2778
RoOriginateErrorW 0x1800f2770
RoActivateInstance 0x1800f2788
RoRegisterActivationFactories 0x1800f2790
RoRevokeActivationFactories 0x1800f2798
WindowsCreateString 0x1800f27d0
WindowsCreateStringReference 0x1800f27c8
WindowsDeleteString 0x1800f27a8
WindowsGetStringRawBuffer 0x1800f27c0
WindowsIsStringEmpty 0x1800f27b0
WindowsStringHasEmbeddedNull 0x1800f27b8
__C_specific_handler 0x1800f28a0
__CxxFrameHandler3 0x1800f28a8
__CxxFrameHandler4 0x1800f2968
__std_terminate 0x1800f2960
__std_type_info_compare 0x1800f2958
_CxxThrowException 0x1800f28b0
_o___std_exception_copy 0x1800f2950
_o___std_exception_destroy 0x1800f2948
_o___std_type_info_destroy_list 0x1800f2940
_o___stdio_common_vsnprintf_s 0x1800f2938
_o___stdio_common_vswprintf 0x1800f2930
_o___stdio_common_vswprintf_s 0x1800f2928
_o__aligned_free 0x1800f2920
_o__aligned_malloc 0x1800f2918
_o__beginthreadex 0x1800f2908
_o__callnewh 0x1800f2900
_o__cexit 0x1800f28f8
_o__configure_narrow_argv 0x1800f28f0
_o__crt_atexit 0x1800f28e8
_o__errno 0x1800f28e0
_o__execute_onexit_table 0x1800f28d8
_o__initialize_narrow_environment 0x1800f28d0
_o__initialize_onexit_table 0x1800f28c8
_o__invalid_parameter_noinfo 0x1800f28c0
_o__invalid_parameter_noinfo_noreturn 0x1800f28b8
_o__localtime64 0x1800f2910
_o__purecall 0x1800f27f0
_o__register_onexit_function 0x1800f27f8
_o__seh_filter_dll 0x1800f2800
_o__wcsicmp 0x1800f2808
_o__wcsnicmp 0x1800f2810
_o__wtoi 0x1800f2818
_o__wtol 0x1800f2820
_o_abort 0x1800f2828
_o_free 0x1800f2830
_o_iswxdigit 0x1800f2840
_o_malloc 0x1800f2848
_o_terminate 0x1800f2850
_o_towlower 0x1800f2858
_o_wcscat_s 0x1800f2860
_o_wcscpy_s 0x1800f2868
_o_wcsftime 0x1800f2870
_o_wcsncpy_s 0x1800f2878
_o_wcstod 0x1800f2880
_o_wcstok_s 0x1800f2888
_o_wcstoul 0x1800f2890
_o_wcstoull 0x1800f2898
memcmp 0x1800f2970
memcpy 0x1800f2978
memmove 0x1800f2838
_initterm 0x1800f2988
_initterm_e 0x1800f2990
memset 0x1800f29a0
wcscmp 0x1800f29b8
wcsncmp 0x1800f29a8
wcsnlen 0x1800f29b0
_time64 0x1800f29c8
GetTraceEnableFlags 0x1800f29e0
GetTraceEnableLevel 0x1800f2a00
GetTraceLoggerHandle 0x1800f29d8
RegisterTraceGuidsW 0x1800f29f0
TraceMessage 0x1800f29f8
UnregisterTraceGuids 0x1800f29e8
EventActivityIdControl 0x1800f2a28
EventRegister 0x1800f2a30
EventSetInformation 0x1800f2a18
EventUnregister 0x1800f2a20
EventWriteTransfer 0x1800f2a10
AddAccessAllowedAce 0x1800f2a88
AdjustTokenPrivileges 0x1800f2a78
AllocateAndInitializeSid 0x1800f2b10
CopySid 0x1800f2a50
CreatePrivateObjectSecurityWithMultipleInheritance 0x1800f2a58
CreateWellKnownSid 0x1800f2a70
DestroyPrivateObjectSecurity 0x1800f2ab8
DuplicateTokenEx 0x1800f2af8
EqualSid 0x1800f2a68
FreeSid 0x1800f2b00
GetAce 0x1800f2a40
GetLengthSid 0x1800f2af0
GetSecurityDescriptorControl 0x1800f2a98
GetSecurityDescriptorLength 0x1800f2ab0
GetSidLengthRequired 0x1800f2a48
GetSidSubAuthority 0x1800f2b18
GetTokenInformation 0x1800f2ad8
ImpersonateLoggedOnUser 0x1800f2ae8
ImpersonateSelf 0x1800f2a80
InitializeAcl 0x1800f2b20
InitializeSecurityDescriptor 0x1800f2ac8
InitializeSid 0x1800f2a60
IsValidSecurityDescriptor 0x1800f2ac0
IsValidSid 0x1800f2b08
MakeSelfRelativeSD 0x1800f2aa0
RevertToSelf 0x1800f2ae0
SetSecurityDescriptorDacl 0x1800f2ad0
SetSecurityDescriptorGroup 0x1800f2aa8
SetSecurityDescriptorOwner 0x1800f2a90
CredDeleteW 0x1800f2b48
CredEnumerateW 0x1800f2b50
CredFree 0x1800f2b40
CredReadW 0x1800f2b30
CredWriteW 0x1800f2b38
CryptAcquireContextW 0x1800f2b70
CryptGenRandom 0x1800f2b68
CryptReleaseContext 0x1800f2b60
LookupPrivilegeValueW 0x1800f2b80
SetEntriesInAclW 0x1800f2b98
SetNamedSecurityInfoW 0x1800f2b90
ConvertSidToStringSidW 0x1800f2bb0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800f2ba8
RegisterServiceCtrlHandlerExW 0x1800f2bc0
SetServiceStatus 0x1800f2bc8
CloseServiceHandle 0x1800f2bd8
OpenSCManagerW 0x1800f2be0
OpenServiceW 0x1800f2be8
StartServiceW 0x1800f2bf0
QueryServiceStatusEx 0x1800f2c00
SHTaskPoolQueueTask 0x1800f2c20
BCryptCloseAlgorithmProvider 0x1800f2c58
BCryptCreateHash 0x1800f2c38
BCryptDestroyHash 0x1800f2c40
BCryptFinishHash 0x1800f2c60
BCryptGetProperty 0x1800f2c30
BCryptHashData 0x1800f2c50
BCryptOpenAlgorithmProvider 0x1800f2c48
0x1800f2c70
0x1800f2c78
0x1800f2c80
0x1800f2c88
CryptBinaryToStringW 0x1800f1d08
HcnCloseEndpoint 0x1800f2ca8
HcnCloseNetwork 0x1800f2ca0
HcnCreateEndpoint 0x1800f2cd8
HcnDeleteEndpoint 0x1800f2cc8
HcnEnumerateEndpoints 0x1800f2cb8
HcnEnumerateNetworks 0x1800f2cc0
HcnOpenEndpoint 0x1800f2cb0
HcnOpenNetwork 0x1800f2cf0
HcnQueryEndpointProperties 0x1800f2cd0
HcnQueryNetworkProperties 0x1800f2ce8
HcnRegisterServiceCallback 0x1800f2c98
HcnUnregisterServiceCallback 0x1800f2ce0
NetworkIsolationGetEnterpriseIdAsync 0x1800f1d20
NetworkIsolationGetEnterpriseIdClose 0x1800f1d18
GatherSubProviderSettings 0x1800f1d40
GetSubProviderAttribute 0x1800f1d30
RegisterChangeNotifications 0x1800f1d48
UnregisterChangeNotifications 0x1800f1d38
CancelMibChangeNotify2 0x1800f1d68
GetAdaptersAddresses 0x1800f1d60
NotifyRouteChange2 0x1800f1d58
WNetGetResourceInformationW 0x1800f1d78
_Close_dir 0x1800f2e58
_Cnd_broadcast 0x1800f2e90
_Cnd_destroy_in_situ 0x1800f2d00
_Cnd_do_broadcast_at_thread_exit 0x1800f2e70
_Cnd_init_in_situ 0x1800f2d18
_Cnd_register_at_thread_exit 0x1800f2e88
_Cnd_timedwait 0x1800f2d38
_Cnd_unregister_at_thread_exit 0x1800f2d08
_Cnd_wait 0x1800f2ec0
_File_size 0x1800f2e18
_Mtx_current_owns 0x1800f2d40
_Mtx_destroy_in_situ 0x1800f2ed0
_Mtx_init_in_situ 0x1800f2d10
_Mtx_lock 0x1800f2ea0
_Mtx_unlock 0x1800f2ea8
_Open_dir 0x1800f2e40
_Read_dir 0x1800f2e68
_Stat 0x1800f2e20
_Thrd_id 0x1800f2e08
_Thrd_join 0x1800f2e00
_To_wide 0x1800f2d28
_Xtime_get_ticks 0x1800f2e60
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z 0x1800f2d20
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z 0x1800f2e30
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z 0x1800f2e78
?__ExceptionPtrCreate@@YAXPEAX@Z 0x1800f2e50
?__ExceptionPtrCurrentException@@YAXPEAX@Z 0x1800f2e48
?__ExceptionPtrDestroy@@YAXPEAX@Z 0x1800f2e28
?__ExceptionPtrRethrow@@YAXPEBX@Z 0x1800f2d68
?__ExceptionPtrToBool@@YA_NPEBX@Z 0x1800f2eb0
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z 0x1800f2dc0
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z 0x1800f2ec8
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ 0x1800f2d90
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z 0x1800f2d88
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ 0x1800f2dd8
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1800f2da8
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z 0x1800f2da0
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1800f2dd0
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1800f2dc8
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1800f2de8
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1800f2de0
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z 0x1800f2d78
?_ReportUnobservedException@details@Concurrency@@YAXXZ 0x1800f2d70
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ 0x1800f2d50
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z 0x1800f2eb8
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z 0x1800f2d80
?_Syserror_map@std@@YAPEBDH@Z 0x1800f2d48
?_Throw_C_error@std@@YAXH@Z 0x1800f2e98
?_Throw_Cpp_error@std@@YAXH@Z 0x1800f2df8
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z 0x1800f2e80
?_Winerror_map@std@@YAHH@Z 0x1800f2db8
?_Winerror_message@std@@YAKKPEADK@Z 0x1800f2df0
?_Xbad_function_call@std@@YAXXZ 0x1800f2d98
?_XGetLastError@std@@YAXXZ 0x1800f2d60
?_Xinvalid_argument@std@@YAXPEBD@Z 0x1800f2d30
?_Xlength_error@std@@YAXPEBD@Z 0x1800f2e10
?_Xout_of_range@std@@YAXPEBD@Z 0x1800f2e38
??0task_continuation_context@Concurrency@@AEAA@XZ 0x1800f2d58
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ 0x1800f2db0
NlaGetCaptivePortalHosts 0x1800f2ee0
NtQueryInformationProcess 0x1800f2fb0
NtQuerySystemInformation 0x1800f2f38
NtSetInformationProcess 0x1800f2fd8
NtSetSystemInformation 0x1800f2fd0
RtlAcquirePrivilege 0x1800f2fc8
RtlAcquireResourceExclusive 0x1800f2ef8
RtlAcquireResourceShared 0x1800f2f50
RtlAcquireSRWLockExclusive 0x1800f2fa8
RtlCaptureContext 0x1800f2ef0
RtlDeleteResource 0x1800f2f60
RtlEqualUnicodeString 0x1800f2fc0
RtlFindNextForwardRunClear 0x1800f2f88
RtlInitializeResource 0x1800f2f58
RtlInitializeSRWLock 0x1800f2f98
RtlInitUnicodeString 0x1800f2f08
RtlIpv4AddressToStringExW 0x1800f2f30
RtlIpv6AddressToStringExW 0x1800f2f28
RtlLookupFunctionEntry 0x1800f2f18
RtlNtStatusToDosError 0x1800f2fb8
RtlNumberOfSetBits 0x1800f2f90
RtlNumberOfSetBitsUlongPtr 0x1800f2fe0
RtlPublishWnfStateData 0x1800f2f48
RtlReleasePrivilege 0x1800f2f68
RtlReleaseResource 0x1800f2f00
RtlReleaseSRWLockExclusive 0x1800f2fa0
RtlRunOnceBeginInitialize 0x1800f2f80
RtlRunOnceComplete 0x1800f2f78
RtlSubscribeWnfStateChangeNotification 0x1800f2f20
RtlUnsubscribeWnfStateChangeNotification 0x1800f2f40
RtlUpcaseUnicodeChar 0x1800f2f70
RtlVirtualUnwind 0x1800f2f10
BSTR_UserFree 0x1800f1db8
BSTR_UserFree64 0x1800f1dd0
BSTR_UserMarshal 0x1800f1da8
BSTR_UserMarshal64 0x1800f1de0
BSTR_UserSize 0x1800f1d90
BSTR_UserSize64 0x1800f1dd8
BSTR_UserUnmarshal 0x1800f1da0
BSTR_UserUnmarshal64 0x1800f1db0
SysAllocString 0x1800f1df0
SysAllocStringByteLen 0x1800f1d98
SysAllocStringLen 0x1800f1dc8
SysFreeString 0x1800f1dc0
SysStringByteLen 0x1800f1e00
SysStringLen 0x1800f1e08
VarBstrCat 0x1800f1df8
VarBstrCmp 0x1800f1d88
VariantClear 0x1800f1de8
CStdStubBuffer_AddRef 0x1800f1ea8
CStdStubBuffer_Connect 0x1800f1e30
CStdStubBuffer_CountRefs 0x1800f1e98
CStdStubBuffer_DebugServerQueryInterface 0x1800f1eb8
CStdStubBuffer_DebugServerRelease 0x1800f1e68
CStdStubBuffer_Disconnect 0x1800f1e58
CStdStubBuffer_Invoke 0x1800f1ed0
CStdStubBuffer_IsIIDSupported 0x1800f1e48
CStdStubBuffer_QueryInterface 0x1800f1e90
IUnknown_AddRef_Proxy 0x1800f1ec0
IUnknown_QueryInterface_Proxy 0x1800f1e50
IUnknown_Release_Proxy 0x1800f1ea0
NdrCStdStubBuffer_Release 0x1800f1ed8
NdrDllCanUnloadNow 0x1800f1e80
NdrDllGetClassObject 0x1800f1e70
NdrOleAllocate 0x1800f1e88
NdrOleFree 0x1800f1eb0
NdrServerCall2 0x1800f1e40
NdrServerCallAll 0x1800f1e60
RpcServerInqCallAttributesW 0x1800f1e18
RpcServerRegisterIfEx 0x1800f1e28
RpcServerUnregisterIf 0x1800f1e38
RpcServerUseProtseqEpW 0x1800f1e20
RpcStringFreeW 0x1800f1ec8
UuidFromStringW 0x1800f1e78
UuidToStringW 0x1800f1ee0
SHGetFolderPathAndSubDirW 0x1800f1ef0
SHGetKnownFolderPath 0x1800f1ef8
SHSetLocalizedName 0x1800f1f00
CreateAppContainerProfile 0x1800f1f10
ExpandEnvironmentStringsForUserW 0x1800f1f18
GetAllUsersProfileDirectoryW 0x1800f1f20
ActivateLayer 0x1800f2ff8
ApplyRegistryChangesToLayer 0x1800f3000
CreateBaseImageVHDWithFolders 0x1800f30d0
CreateDifferencingVHD 0x1800f30c0
CreateSandboxLayer 0x1800f3060
DeactivateLayer 0x1800f3008
DestroyLayer 0x1800f2ff0
GetLayerMountPath 0x1800f30a0
GrantVmAccess 0x1800f3068
HcsCloseComputeSystem 0x1800f3028
HcsCloseProcess 0x1800f3020
HcsCreateComputeSystem 0x1800f3070
HcsCreateProcess 0x1800f3050
HcsGetComputeSystemProperties 0x1800f3030
HcsGetProcessProperties 0x1800f3040
HcsGetWorkerProcessJob 0x1800f3078
HcsModifyComputeSystem 0x1800f3018
HcsModifyComputeSystemWithUserToken 0x1800f30c8
HcsModifyProcess 0x1800f3048
HcsOpenComputeSystem 0x1800f3010
HcsPauseComputeSystem 0x1800f30e8
HcsRegisterComputeSystemCallback 0x1800f3080
HcsRegisterProcessCallback 0x1800f30d8
HcsResumeComputeSystem 0x1800f3098
HcsSaveComputeSystem 0x1800f30b0
HcsShutdownComputeSystem 0x1800f30a8
HcsStartComputeSystem 0x1800f3088
HcsSubmitWerReport 0x1800f3058
HcsTerminateComputeSystem 0x1800f3090
HcsUnregisterComputeSystemCallback 0x1800f30e0
HcsUnregisterProcessCallback 0x1800f3038
ProcessImage 0x1800f30b8
WcCreateContainerImageFromWim 0x1800f30f8
WIMCloseHandle 0x1800f1f38
WIMCreateFile 0x1800f1f40
WIMGetImageInformation 0x1800f1f30
closesocket 0x1800f1f78
connect 0x1800f1f60
WSAGetLastError 0x1800f1f58
WSARecv 0x1800f1f50
WSASend 0x1800f1f80
WSASocketW 0x1800f1f68
WSAStartup 0x1800f1f70
WTSEnumerateSessionsW 0x1800f1f98
WTSFreeMemory 0x1800f1f90
WTSQueryUserToken 0x1800f1fa0