HoloSI.PCShell.dll

Description: Windows Holographic Shell Infrastructure for PC

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: db9ada8dc4f5367821bf3b3fc23f980a

File Size: 1.0 MB

Uploaded At: Dec. 1, 2025, 7:29 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xae20)
  • DllGetActivationFactory (Ordinal: 2, Address: 0xabd0)
  • DllGetClassObject (Ordinal: 3, Address: 0xadb0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800cbee8)
api-ms-win-core-atoms-l1-1-0.dll
  • GlobalGetAtomNameW (Address: 0x1800cbef8)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1800cbf28)
  • CoCreateGuid (Address: 0x1800cbf40)
  • CoCreateInstance (Address: 0x1800cbf18)
  • CoDecrementMTAUsage (Address: 0x1800cbf38)
  • CoGetApartmentType (Address: 0x1800cbf10)
  • CoGetMalloc (Address: 0x1800cbf50)
  • CoIncrementMTAUsage (Address: 0x1800cbf48)
  • CoMarshalInterface (Address: 0x1800cbf70)
  • CoReleaseMarshalData (Address: 0x1800cbf58)
  • CoTaskMemAlloc (Address: 0x1800cbf20)
  • CoTaskMemFree (Address: 0x1800cbf30)
  • CoTaskMemRealloc (Address: 0x1800cbf78)
  • CoWaitForMultipleHandles (Address: 0x1800cbf08)
  • CreateStreamOnHGlobal (Address: 0x1800cbf60)
  • StringFromGUID2 (Address: 0x1800cbf68)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1800cbf88)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800cbfa0)
  • IsDebuggerPresent (Address: 0x1800cbfa8)
  • OutputDebugStringW (Address: 0x1800cbf98)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800cbfb8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800cbfc8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800cbfe0)
  • RaiseException (Address: 0x1800cbff0)
  • SetLastError (Address: 0x1800cbfd8)
  • SetUnhandledExceptionFilter (Address: 0x1800cbfe8)
  • UnhandledExceptionFilter (Address: 0x1800cbff8)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x1800cc008)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800cc018)
  • FlushFileBuffers (Address: 0x1800cc028)
  • GetTempFileNameW (Address: 0x1800cc030)
  • ReadFile (Address: 0x1800cc020)
  • WriteFile (Address: 0x1800cc038)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x1800cc048)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800cc058)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800cc068)
  • HeapAlloc (Address: 0x1800cc070)
  • HeapFree (Address: 0x1800cc078)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800cc090)
  • LocalFree (Address: 0x1800cc088)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800cc0a0)
  • InterlockedFlushSList (Address: 0x1800cc0b8)
  • InterlockedPopEntrySList (Address: 0x1800cc0b0)
  • InterlockedPushEntrySList (Address: 0x1800cc0a8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • WTSGetActiveConsoleSessionId (Address: 0x1800cc0c8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800cc100)
  • FreeLibrary (Address: 0x1800cc0f0)
  • GetModuleFileNameA (Address: 0x1800cc0f8)
  • GetModuleHandleExW (Address: 0x1800cc0e0)
  • GetModuleHandleW (Address: 0x1800cc0e8)
  • GetProcAddress (Address: 0x1800cc0d8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800cc110)
api-ms-win-core-memory-l1-1-0.dll
  • UnmapViewOfFile (Address: 0x1800cc120)
api-ms-win-core-memory-l1-1-1.dll
  • CreateFileMappingFromApp (Address: 0x1800cc138)
  • MapViewOfFileFromApp (Address: 0x1800cc130)
api-ms-win-core-namedpipe-l1-1-0.dll
  • ConnectNamedPipe (Address: 0x1800cc148)
  • CreateNamedPipeW (Address: 0x1800cc150)
  • DisconnectNamedPipe (Address: 0x1800cc158)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800cc168)
  • GetCurrentProcess (Address: 0x1800cc170)
  • GetCurrentProcessId (Address: 0x1800cc188)
  • GetCurrentThread (Address: 0x1800cc198)
  • GetCurrentThreadId (Address: 0x1800cc178)
  • GetProcessId (Address: 0x1800cc180)
  • OpenProcessToken (Address: 0x1800cc1a8)
  • OpenThreadToken (Address: 0x1800cc1a0)
  • ProcessIdToSessionId (Address: 0x1800cc1b0)
  • TerminateProcess (Address: 0x1800cc190)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800cc1c8)
  • OpenProcess (Address: 0x1800cc1c0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800cc1e0)
  • QueryPerformanceFrequency (Address: 0x1800cc1d8)
api-ms-win-core-psapi-l1-1-0.dll
  • K32GetPerformanceInfo (Address: 0x1800cc1f8)
  • QueryFullProcessImageNameW (Address: 0x1800cc1f0)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryUnbiasedInterruptTime (Address: 0x1800cc208)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800cc230)
  • RegEnumKeyExW (Address: 0x1800cc240)
  • RegGetValueW (Address: 0x1800cc218)
  • RegNotifyChangeKeyValue (Address: 0x1800cc238)
  • RegOpenKeyExW (Address: 0x1800cc228)
  • RegQueryValueExW (Address: 0x1800cc220)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1800cc258)
  • RegSetKeyValueW (Address: 0x1800cc250)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathStripPathW (Address: 0x1800cc268)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800cc278)
  • WideCharToMultiByte (Address: 0x1800cc280)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800cc2c8)
  • AcquireSRWLockShared (Address: 0x1800cc2b0)
  • CreateEventExW (Address: 0x1800cc338)
  • CreateEventW (Address: 0x1800cc290)
  • CreateMutexExW (Address: 0x1800cc2a8)
  • CreateSemaphoreExW (Address: 0x1800cc318)
  • DeleteCriticalSection (Address: 0x1800cc300)
  • EnterCriticalSection (Address: 0x1800cc310)
  • InitializeCriticalSection (Address: 0x1800cc2b8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800cc2d8)
  • InitializeCriticalSectionEx (Address: 0x1800cc348)
  • InitializeSRWLock (Address: 0x1800cc2e8)
  • LeaveCriticalSection (Address: 0x1800cc298)
  • OpenSemaphoreW (Address: 0x1800cc2f8)
  • ReleaseMutex (Address: 0x1800cc328)
  • ReleaseSemaphore (Address: 0x1800cc2f0)
  • ReleaseSRWLockExclusive (Address: 0x1800cc2e0)
  • ReleaseSRWLockShared (Address: 0x1800cc308)
  • ResetEvent (Address: 0x1800cc320)
  • SetEvent (Address: 0x1800cc340)
  • TryAcquireSRWLockShared (Address: 0x1800cc2a0)
  • WaitForMultipleObjectsEx (Address: 0x1800cc2d0)
  • WaitForSingleObject (Address: 0x1800cc330)
  • WaitForSingleObjectEx (Address: 0x1800cc2c0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800cc380)
  • InitOnceComplete (Address: 0x1800cc368)
  • InitOnceExecuteOnce (Address: 0x1800cc370)
  • Sleep (Address: 0x1800cc378)
  • WaitOnAddress (Address: 0x1800cc360)
  • WakeByAddressAll (Address: 0x1800cc358)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1800cc390)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x1800cc3a0)
  • GetSystemTimeAsFileTime (Address: 0x1800cc3b8)
  • GetTickCount (Address: 0x1800cc3b0)
  • GetTickCount64 (Address: 0x1800cc3a8)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolCleanupGroup (Address: 0x1800cc420)
  • CloseThreadpoolCleanupGroupMembers (Address: 0x1800cc438)
  • CloseThreadpoolTimer (Address: 0x1800cc3f8)
  • CloseThreadpoolWait (Address: 0x1800cc3e0)
  • CloseThreadpoolWork (Address: 0x1800cc400)
  • CreateThreadpoolCleanupGroup (Address: 0x1800cc410)
  • CreateThreadpoolTimer (Address: 0x1800cc428)
  • CreateThreadpoolWait (Address: 0x1800cc408)
  • CreateThreadpoolWork (Address: 0x1800cc3d0)
  • FreeLibraryWhenCallbackReturns (Address: 0x1800cc3d8)
  • SetThreadpoolTimer (Address: 0x1800cc418)
  • SetThreadpoolWait (Address: 0x1800cc3f0)
  • SubmitThreadpoolWork (Address: 0x1800cc3c8)
  • TrySubmitThreadpoolCallback (Address: 0x1800cc3e8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800cc448)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800cc440)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1800cc430)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800cc460)
  • EncodePointer (Address: 0x1800cc458)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1800cc480)
  • RoOriginateErrorW (Address: 0x1800cc470)
  • RoTransformError (Address: 0x1800cc478)
  • SetRestrictedErrorInfo (Address: 0x1800cc488)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x1800cc498)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1800cc4a0)
  • RoReportFailedDelegate (Address: 0x1800cc4a8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800cc4c0)
  • RoGetActivationFactory (Address: 0x1800cc4b8)
  • RoInitialize (Address: 0x1800cc4c8)
  • RoUninitialize (Address: 0x1800cc4d0)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
  • RoCreatePropertySetSerializer (Address: 0x1800cc4e0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x1800cc518)
  • WindowsCreateString (Address: 0x1800cc4f8)
  • WindowsCreateStringReference (Address: 0x1800cc4f0)
  • WindowsDeleteString (Address: 0x1800cc500)
  • WindowsDuplicateString (Address: 0x1800cc530)
  • WindowsGetStringRawBuffer (Address: 0x1800cc508)
  • WindowsIsStringEmpty (Address: 0x1800cc520)
  • WindowsStringHasEmbeddedNull (Address: 0x1800cc510)
  • WindowsSubstringWithSpecifiedLength (Address: 0x1800cc528)
api-ms-win-crt-math-l1-1-0.dll
  • _isnan (Address: 0x1800cc540)
  • ceilf (Address: 0x1800cc548)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800cc600)
  • __CxxFrameHandler3 (Address: 0x1800cc608)
  • __CxxFrameHandler4 (Address: 0x1800cc6c8)
  • __std_terminate (Address: 0x1800cc6c0)
  • _CxxThrowException (Address: 0x1800cc610)
  • _o___acrt_iob_func (Address: 0x1800cc6b8)
  • _o___std_exception_copy (Address: 0x1800cc6b0)
  • _o___std_exception_destroy (Address: 0x1800cc6a8)
  • _o___std_type_info_destroy_list (Address: 0x1800cc6a0)
  • _o___std_type_info_name (Address: 0x1800cc698)
  • _o___stdio_common_vfwprintf (Address: 0x1800cc690)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800cc688)
  • _o___stdio_common_vsnwprintf_s (Address: 0x1800cc680)
  • _o___stdio_common_vswprintf (Address: 0x1800cc678)
  • _o___stdio_common_vswprintf_s (Address: 0x1800cc670)
  • _o__aligned_free (Address: 0x1800cc668)
  • _o__aligned_malloc (Address: 0x1800cc660)
  • _o__callnewh (Address: 0x1800cc658)
  • _o__cexit (Address: 0x1800cc650)
  • _o__configure_narrow_argv (Address: 0x1800cc648)
  • _o__crt_atexit (Address: 0x1800cc640)
  • _o__errno (Address: 0x1800cc620)
  • _o__execute_onexit_table (Address: 0x1800cc618)
  • _o__initialize_narrow_environment (Address: 0x1800cc558)
  • _o__initialize_onexit_table (Address: 0x1800cc560)
  • _o__invalid_parameter_noinfo (Address: 0x1800cc568)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800cc570)
  • _o__purecall (Address: 0x1800cc578)
  • _o__register_onexit_function (Address: 0x1800cc580)
  • _o__seh_filter_dll (Address: 0x1800cc588)
  • _o__wcsicmp (Address: 0x1800cc590)
  • _o__wcstoi64 (Address: 0x1800cc598)
  • _o_free (Address: 0x1800cc5a8)
  • _o_malloc (Address: 0x1800cc5b0)
  • _o_memcpy_s (Address: 0x1800cc5b8)
  • _o_realloc (Address: 0x1800cc5c0)
  • _o_terminate (Address: 0x1800cc5c8)
  • _o_tolower (Address: 0x1800cc5d0)
  • _o_toupper (Address: 0x1800cc5d8)
  • _o_towlower (Address: 0x1800cc5e0)
  • _o_wcscpy_s (Address: 0x1800cc5e8)
  • _o_wcstod (Address: 0x1800cc5f0)
  • _o_wcstol (Address: 0x1800cc5f8)
  • memcmp (Address: 0x1800cc6d0)
  • memcpy (Address: 0x1800cc6d8)
  • memmove (Address: 0x1800cc5a0)
  • strchr (Address: 0x1800cc638)
  • wcschr (Address: 0x1800cc628)
  • wcsrchr (Address: 0x1800cc630)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800cc6f0)
  • _initterm_e (Address: 0x1800cc6e8)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800cc700)
  • wcscmp (Address: 0x1800cc710)
  • wcscspn (Address: 0x1800cc708)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x1800cc720)
  • EventRegister (Address: 0x1800cc740)
  • EventSetInformation (Address: 0x1800cc738)
  • EventUnregister (Address: 0x1800cc730)
  • EventWriteTransfer (Address: 0x1800cc728)
api-ms-win-security-accesshlpr-l1-1-0.dll
  • FreeTransientObjectSecurityDescriptor (Address: 0x1800cc758)
  • QueryTransientObjectSecurityDescriptor (Address: 0x1800cc750)
api-ms-win-security-base-l1-1-0.dll
  • CopySid (Address: 0x1800cc778)
  • CreateWellKnownSid (Address: 0x1800cc790)
  • EqualSid (Address: 0x1800cc788)
  • GetLengthSid (Address: 0x1800cc780)
  • GetTokenInformation (Address: 0x1800cc770)
  • IsValidSid (Address: 0x1800cc768)
api-ms-win-security-base-l1-2-0.dll
  • CheckTokenMembershipEx (Address: 0x1800cc7a0)
api-ms-win-security-provider-l1-1-0.dll
  • GetSecurityInfo (Address: 0x1800cc7b0)
  • SetEntriesInAclW (Address: 0x1800cc7c0)
  • SetSecurityInfo (Address: 0x1800cc7b8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800cc7d8)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800cc7d0)
api-ms-win-security-trustee-l1-1-0.dll
  • BuildTrusteeWithSidW (Address: 0x1800cc7e8)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolGetUniqueContext (Address: 0x1800cc7f8)
  • SHTaskPoolQueueTask (Address: 0x1800cc800)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHGetThreadRef (Address: 0x1800cc810)
api-ms-win-shlwapi-ie-l1-1-0.dll
  • SHRegGetBoolValueFromHKCUHKLM (Address: 0x1800cc820)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryValueW (Address: 0x1800cc830)
CoreMessaging.dll
  • CoreUICallCreateEndpointHost (Address: 0x1800cbe60)
  • CoreUICallReceive (Address: 0x1800cbe50)
  • CoreUICallSend (Address: 0x1800cbe48)
  • CoreUICreate (Address: 0x1800cbe40)
  • MsgBlobCreateShared (Address: 0x1800cbe58)
  • MsgRelease (Address: 0x1800cbe68)
CoreUIComponents.dll
  • CoreUIClientCreate (Address: 0x1800cbe78)
  • CoreUIFactoryCreate (Address: 0x1800cbe80)
dcomp.dll
  • DCompositionCreateDevice3 (Address: 0x1800cc840)
dxgi.dll
  • CreateDXGIFactory1 (Address: 0x1800cc850)
msvcp_win.dll
  • _Cnd_broadcast (Address: 0x1800cc970)
  • _Cnd_destroy_in_situ (Address: 0x1800ccad0)
  • _Cnd_init_in_situ (Address: 0x1800ccaf8)
  • _Cnd_register_at_thread_exit (Address: 0x1800cc8c0)
  • _Cnd_timedwait (Address: 0x1800cc8c8)
  • _Cnd_unregister_at_thread_exit (Address: 0x1800cc8b8)
  • _Cnd_wait (Address: 0x1800cc8d8)
  • _Mtx_current_owns (Address: 0x1800cc8d0)
  • _Mtx_destroy_in_situ (Address: 0x1800cc868)
  • _Mtx_init_in_situ (Address: 0x1800cc870)
  • _Mtx_lock (Address: 0x1800cc860)
  • _Mtx_unlock (Address: 0x1800ccad8)
  • _Query_perf_counter (Address: 0x1800cc8f0)
  • _Query_perf_frequency (Address: 0x1800ccab8)
  • _Wcscoll (Address: 0x1800cc910)
  • _Wcsxfrm (Address: 0x1800cc908)
  • _Xtime_get_ticks (Address: 0x1800ccb00)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x1800ccae8)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x1800cc8b0)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x1800cc9b8)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x1800cc890)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x1800cc8a0)
  • ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x1800ccac0)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1800cc930)
  • ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x1800ccae0)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800cc920)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x1800cc980)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800cc958)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1800cc918)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800ccaf0)
  • ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x1800cca70)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800cca20)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x1800cc9c8)
  • ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1800cc9f0)
  • ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z (Address: 0x1800ccac8)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x1800cc8a8)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x1800cc880)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x1800cc878)
  • ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z (Address: 0x1800cc888)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800cca28)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800cc8e8)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800cc8e0)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800cc898)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800cc9a8)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1800cc988)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x1800cc948)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800cc950)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800cc9e0)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x1800cca90)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1800cc9f8)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800cc9c0)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x1800cc8f8)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x1800cc938)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x1800cc940)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800cca10)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800ccaa8)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800cca68)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800cca18)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x1800cc900)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z (Address: 0x1800ccab0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x1800cca98)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800ccaa0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z (Address: 0x1800cca00)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800cc968)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800cc9d0)
  • ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x1800cca08)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x1800cc978)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x1800cc960)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800cca60)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x1800cc928)
  • ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1800cca80)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x1800cca50)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x1800cc9d8)
  • ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1800cca88)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x1800cca30)
  • ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1800cca78)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x1800cc9e8)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x1800cc9b0)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x1800cca58)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x1800cc998)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x1800cc990)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x1800cca38)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x1800cc9a0)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x1800cca40)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x1800cca48)
ntdll.dll
  • AlpcGetMessageAttribute (Address: 0x1800ccb48)
  • DbgPrintEx (Address: 0x1800ccbe0)
  • NtAlpcAcceptConnectPort (Address: 0x1800ccb60)
  • NtAlpcCancelMessage (Address: 0x1800ccb70)
  • NtAlpcConnectPort (Address: 0x1800ccb78)
  • NtAlpcCreatePort (Address: 0x1800ccb40)
  • NtAlpcOpenSenderProcess (Address: 0x1800ccb58)
  • NtAlpcSendWaitReceivePort (Address: 0x1800ccb50)
  • NtCompleteConnectPort (Address: 0x1800ccb68)
  • NtQueryInformationProcess (Address: 0x1800ccbd8)
  • NtQueryInformationToken (Address: 0x1800ccb20)
  • NtQuerySystemInformation (Address: 0x1800ccbb0)
  • NtQueryWnfStateData (Address: 0x1800ccba0)
  • RtlAllocateHeap (Address: 0x1800ccb10)
  • RtlCaptureContext (Address: 0x1800ccb80)
  • RtlCompareUnicodeString (Address: 0x1800ccb30)
  • RtlFreeHeap (Address: 0x1800ccb28)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800ccbc8)
  • RtlInitUnicodeString (Address: 0x1800ccbc0)
  • RtlIsMultiSessionSku (Address: 0x1800ccbd0)
  • RtlIsMultiUsersInSessionSku (Address: 0x1800ccbb8)
  • RtlLookupFunctionEntry (Address: 0x1800ccb88)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1800ccb18)
  • RtlPublishWnfStateData (Address: 0x1800ccb38)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800ccba8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800ccb98)
  • RtlVirtualUnwind (Address: 0x1800ccb90)
USER32.dll
  • EnumChildWindows (Address: 0x1800cbe90)
  • GetAncestor (Address: 0x1800cbed8)
  • GetDesktopWindow (Address: 0x1800cbea8)
  • GetForegroundWindow (Address: 0x1800cbeb8)
  • GetProcessUIContextInformation (Address: 0x1800cbec8)
  • GetPropW (Address: 0x1800cbe98)
  • GetWindowThreadProcessId (Address: 0x1800cbeb0)
  • IsWindowVisible (Address: 0x1800cbec0)
  • PostMessageW (Address: 0x1800cbea0)
  • SetForegroundWindow (Address: 0x1800cbed0)