HoloSI.PCShell.dll

v10.0.19041.5848 64-bit Windows NT Analyzed
Description
Windows Holographic Shell Infrastructure for PC
Authors
© Microsoft Corporation. All rights reserved.
File size
1.0 MB
Uploaded
2025-12-01 07:29
Views
100
SHA-256
db9ada8dc4f5367821bf3b3fc23f980a

Exported functions 3

DllCanUnloadNow #1 · 0xae20
DllGetActivationFactory #2 · 0xabd0
DllGetClassObject #3 · 0xadb0

Imported DLLs & functions 375

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800cbee8
api-ms-win-core-atoms-l1-1-0.dll 1
GlobalGetAtomNameW 0x1800cbef8
api-ms-win-core-com-l1-1-0.dll 15
CoCreateFreeThreadedMarshaler 0x1800cbf28
CoCreateGuid 0x1800cbf40
CoCreateInstance 0x1800cbf18
CoDecrementMTAUsage 0x1800cbf38
CoGetApartmentType 0x1800cbf10
CoGetMalloc 0x1800cbf50
CoIncrementMTAUsage 0x1800cbf48
CoMarshalInterface 0x1800cbf70
CoReleaseMarshalData 0x1800cbf58
CoTaskMemAlloc 0x1800cbf20
CoTaskMemFree 0x1800cbf30
CoTaskMemRealloc 0x1800cbf78
CoWaitForMultipleHandles 0x1800cbf08
CreateStreamOnHGlobal 0x1800cbf60
StringFromGUID2 0x1800cbf68
api-ms-win-core-com-l1-1-1.dll 1
RoGetAgileReference 0x1800cbf88
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800cbfa0
IsDebuggerPresent 0x1800cbfa8
OutputDebugStringW 0x1800cbf98
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800cbfb8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800cbfc8
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800cbfe0
RaiseException 0x1800cbff0
SetLastError 0x1800cbfd8
SetUnhandledExceptionFilter 0x1800cbfe8
UnhandledExceptionFilter 0x1800cbff8
api-ms-win-core-errorhandling-l1-1-2.dll 1
RaiseFailFastException 0x1800cc008
api-ms-win-core-file-l1-1-0.dll 5
CreateFileW 0x1800cc018
FlushFileBuffers 0x1800cc028
GetTempFileNameW 0x1800cc030
ReadFile 0x1800cc020
WriteFile 0x1800cc038
api-ms-win-core-file-l1-2-0.dll 1
GetTempPathW 0x1800cc048
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800cc058
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800cc068
HeapAlloc 0x1800cc070
HeapFree 0x1800cc078
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800cc090
LocalFree 0x1800cc088
api-ms-win-core-interlocked-l1-1-0.dll 4
InitializeSListHead 0x1800cc0a0
InterlockedFlushSList 0x1800cc0b8
InterlockedPopEntrySList 0x1800cc0b0
InterlockedPushEntrySList 0x1800cc0a8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x1800cc0c8
api-ms-win-core-libraryloader-l1-2-0.dll 6
DisableThreadLibraryCalls 0x1800cc100
FreeLibrary 0x1800cc0f0
GetModuleFileNameA 0x1800cc0f8
GetModuleHandleExW 0x1800cc0e0
GetModuleHandleW 0x1800cc0e8
GetProcAddress 0x1800cc0d8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800cc110
api-ms-win-core-memory-l1-1-0.dll 1
UnmapViewOfFile 0x1800cc120
api-ms-win-core-memory-l1-1-1.dll 2
CreateFileMappingFromApp 0x1800cc138
MapViewOfFileFromApp 0x1800cc130
api-ms-win-core-namedpipe-l1-1-0.dll 3
ConnectNamedPipe 0x1800cc148
CreateNamedPipeW 0x1800cc150
DisconnectNamedPipe 0x1800cc158
api-ms-win-core-processthreads-l1-1-0.dll 10
CreateThread 0x1800cc168
GetCurrentProcess 0x1800cc170
GetCurrentProcessId 0x1800cc188
GetCurrentThread 0x1800cc198
GetCurrentThreadId 0x1800cc178
GetProcessId 0x1800cc180
OpenProcessToken 0x1800cc1a8
OpenThreadToken 0x1800cc1a0
ProcessIdToSessionId 0x1800cc1b0
TerminateProcess 0x1800cc190
api-ms-win-core-processthreads-l1-1-1.dll 2
IsProcessorFeaturePresent 0x1800cc1c8
OpenProcess 0x1800cc1c0
api-ms-win-core-profile-l1-1-0.dll 2
QueryPerformanceCounter 0x1800cc1e0
QueryPerformanceFrequency 0x1800cc1d8
api-ms-win-core-psapi-l1-1-0.dll 2
K32GetPerformanceInfo 0x1800cc1f8
QueryFullProcessImageNameW 0x1800cc1f0
api-ms-win-core-realtime-l1-1-0.dll 1
QueryUnbiasedInterruptTime 0x1800cc208
api-ms-win-core-registry-l1-1-0.dll 6
RegCloseKey 0x1800cc230
RegEnumKeyExW 0x1800cc240
RegGetValueW 0x1800cc218
RegNotifyChangeKeyValue 0x1800cc238
RegOpenKeyExW 0x1800cc228
RegQueryValueExW 0x1800cc220
api-ms-win-core-registry-l1-1-1.dll 2
RegDeleteKeyValueW 0x1800cc258
RegSetKeyValueW 0x1800cc250
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathStripPathW 0x1800cc268
api-ms-win-core-string-l1-1-0.dll 2
CompareStringOrdinal 0x1800cc278
WideCharToMultiByte 0x1800cc280
api-ms-win-core-synch-l1-1-0.dll 24
AcquireSRWLockExclusive 0x1800cc2c8
AcquireSRWLockShared 0x1800cc2b0
CreateEventExW 0x1800cc338
CreateEventW 0x1800cc290
CreateMutexExW 0x1800cc2a8
CreateSemaphoreExW 0x1800cc318
DeleteCriticalSection 0x1800cc300
EnterCriticalSection 0x1800cc310
InitializeCriticalSection 0x1800cc2b8
InitializeCriticalSectionAndSpinCount 0x1800cc2d8
InitializeCriticalSectionEx 0x1800cc348
InitializeSRWLock 0x1800cc2e8
LeaveCriticalSection 0x1800cc298
OpenSemaphoreW 0x1800cc2f8
ReleaseMutex 0x1800cc328
ReleaseSemaphore 0x1800cc2f0
ReleaseSRWLockExclusive 0x1800cc2e0
ReleaseSRWLockShared 0x1800cc308
ResetEvent 0x1800cc320
SetEvent 0x1800cc340
TryAcquireSRWLockShared 0x1800cc2a0
WaitForMultipleObjectsEx 0x1800cc2d0
WaitForSingleObject 0x1800cc330
WaitForSingleObjectEx 0x1800cc2c0
api-ms-win-core-synch-l1-2-0.dll 6
InitOnceBeginInitialize 0x1800cc380
InitOnceComplete 0x1800cc368
InitOnceExecuteOnce 0x1800cc370
Sleep 0x1800cc378
WaitOnAddress 0x1800cc360
WakeByAddressAll 0x1800cc358
api-ms-win-core-synch-l1-2-1.dll 1
WaitForMultipleObjects 0x1800cc390
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemInfo 0x1800cc3a0
GetSystemTimeAsFileTime 0x1800cc3b8
GetTickCount 0x1800cc3b0
GetTickCount64 0x1800cc3a8
api-ms-win-core-threadpool-l1-2-0.dll 17
CloseThreadpoolCleanupGroup 0x1800cc420
CloseThreadpoolCleanupGroupMembers 0x1800cc438
CloseThreadpoolTimer 0x1800cc3f8
CloseThreadpoolWait 0x1800cc3e0
CloseThreadpoolWork 0x1800cc400
CreateThreadpoolCleanupGroup 0x1800cc410
CreateThreadpoolTimer 0x1800cc428
CreateThreadpoolWait 0x1800cc408
CreateThreadpoolWork 0x1800cc3d0
FreeLibraryWhenCallbackReturns 0x1800cc3d8
SetThreadpoolTimer 0x1800cc418
SetThreadpoolWait 0x1800cc3f0
SubmitThreadpoolWork 0x1800cc3c8
TrySubmitThreadpoolCallback 0x1800cc3e8
WaitForThreadpoolTimerCallbacks 0x1800cc448
WaitForThreadpoolWaitCallbacks 0x1800cc440
WaitForThreadpoolWorkCallbacks 0x1800cc430
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x1800cc460
EncodePointer 0x1800cc458
api-ms-win-core-winrt-error-l1-1-0.dll 4
RoOriginateError 0x1800cc480
RoOriginateErrorW 0x1800cc470
RoTransformError 0x1800cc478
SetRestrictedErrorInfo 0x1800cc488
api-ms-win-core-winrt-error-l1-1-1.dll 3
IsErrorPropagationEnabled 0x1800cc498
RoGetMatchingRestrictedErrorInfo 0x1800cc4a0
RoReportFailedDelegate 0x1800cc4a8
api-ms-win-core-winrt-l1-1-0.dll 4
RoActivateInstance 0x1800cc4c0
RoGetActivationFactory 0x1800cc4b8
RoInitialize 0x1800cc4c8
RoUninitialize 0x1800cc4d0
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll 1
RoCreatePropertySetSerializer 0x1800cc4e0
api-ms-win-core-winrt-string-l1-1-0.dll 9
WindowsCompareStringOrdinal 0x1800cc518
WindowsCreateString 0x1800cc4f8
WindowsCreateStringReference 0x1800cc4f0
WindowsDeleteString 0x1800cc500
WindowsDuplicateString 0x1800cc530
WindowsGetStringRawBuffer 0x1800cc508
WindowsIsStringEmpty 0x1800cc520
WindowsStringHasEmbeddedNull 0x1800cc510
WindowsSubstringWithSpecifiedLength 0x1800cc528
api-ms-win-crt-math-l1-1-0.dll 2
_isnan 0x1800cc540
ceilf 0x1800cc548
api-ms-win-crt-private-l1-1-0.dll 49
__C_specific_handler 0x1800cc600
__CxxFrameHandler3 0x1800cc608
__CxxFrameHandler4 0x1800cc6c8
__std_terminate 0x1800cc6c0
_CxxThrowException 0x1800cc610
_o___acrt_iob_func 0x1800cc6b8
_o___std_exception_copy 0x1800cc6b0
_o___std_exception_destroy 0x1800cc6a8
_o___std_type_info_destroy_list 0x1800cc6a0
_o___std_type_info_name 0x1800cc698
_o___stdio_common_vfwprintf 0x1800cc690
_o___stdio_common_vsnprintf_s 0x1800cc688
_o___stdio_common_vsnwprintf_s 0x1800cc680
_o___stdio_common_vswprintf 0x1800cc678
_o___stdio_common_vswprintf_s 0x1800cc670
_o__aligned_free 0x1800cc668
_o__aligned_malloc 0x1800cc660
_o__callnewh 0x1800cc658
_o__cexit 0x1800cc650
_o__configure_narrow_argv 0x1800cc648
_o__crt_atexit 0x1800cc640
_o__errno 0x1800cc620
_o__execute_onexit_table 0x1800cc618
_o__initialize_narrow_environment 0x1800cc558
_o__initialize_onexit_table 0x1800cc560
_o__invalid_parameter_noinfo 0x1800cc568
_o__invalid_parameter_noinfo_noreturn 0x1800cc570
_o__purecall 0x1800cc578
_o__register_onexit_function 0x1800cc580
_o__seh_filter_dll 0x1800cc588
_o__wcsicmp 0x1800cc590
_o__wcstoi64 0x1800cc598
_o_free 0x1800cc5a8
_o_malloc 0x1800cc5b0
_o_memcpy_s 0x1800cc5b8
_o_realloc 0x1800cc5c0
_o_terminate 0x1800cc5c8
_o_tolower 0x1800cc5d0
_o_toupper 0x1800cc5d8
_o_towlower 0x1800cc5e0
_o_wcscpy_s 0x1800cc5e8
_o_wcstod 0x1800cc5f0
_o_wcstol 0x1800cc5f8
memcmp 0x1800cc6d0
memcpy 0x1800cc6d8
memmove 0x1800cc5a0
strchr 0x1800cc638
wcschr 0x1800cc628
wcsrchr 0x1800cc630
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800cc6f0
_initterm_e 0x1800cc6e8
api-ms-win-crt-string-l1-1-0.dll 3
memset 0x1800cc700
wcscmp 0x1800cc710
wcscspn 0x1800cc708
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x1800cc720
EventRegister 0x1800cc740
EventSetInformation 0x1800cc738
EventUnregister 0x1800cc730
EventWriteTransfer 0x1800cc728
api-ms-win-security-accesshlpr-l1-1-0.dll 2
FreeTransientObjectSecurityDescriptor 0x1800cc758
QueryTransientObjectSecurityDescriptor 0x1800cc750
api-ms-win-security-base-l1-1-0.dll 6
CopySid 0x1800cc778
CreateWellKnownSid 0x1800cc790
EqualSid 0x1800cc788
GetLengthSid 0x1800cc780
GetTokenInformation 0x1800cc770
IsValidSid 0x1800cc768
api-ms-win-security-base-l1-2-0.dll 1
CheckTokenMembershipEx 0x1800cc7a0
api-ms-win-security-provider-l1-1-0.dll 3
GetSecurityInfo 0x1800cc7b0
SetEntriesInAclW 0x1800cc7c0
SetSecurityInfo 0x1800cc7b8
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1800cc7d8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800cc7d0
api-ms-win-security-trustee-l1-1-0.dll 1
BuildTrusteeWithSidW 0x1800cc7e8
api-ms-win-shcore-taskpool-l1-1-0.dll 2
SHTaskPoolGetUniqueContext 0x1800cc7f8
SHTaskPoolQueueTask 0x1800cc800
api-ms-win-shcore-thread-l1-1-0.dll 1
SHGetThreadRef 0x1800cc810
api-ms-win-shlwapi-ie-l1-1-0.dll 1
SHRegGetBoolValueFromHKCUHKLM 0x1800cc820
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryValueW 0x1800cc830
CoreMessaging.dll 6
CoreUICallCreateEndpointHost 0x1800cbe60
CoreUICallReceive 0x1800cbe50
CoreUICallSend 0x1800cbe48
CoreUICreate 0x1800cbe40
MsgBlobCreateShared 0x1800cbe58
MsgRelease 0x1800cbe68
CoreUIComponents.dll 2
CoreUIClientCreate 0x1800cbe78
CoreUIFactoryCreate 0x1800cbe80
dcomp.dll 1
DCompositionCreateDevice3 0x1800cc840
dxgi.dll 1
CreateDXGIFactory1 0x1800cc850
msvcp_win.dll 85
_Cnd_broadcast 0x1800cc970
_Cnd_destroy_in_situ 0x1800ccad0
_Cnd_init_in_situ 0x1800ccaf8
_Cnd_register_at_thread_exit 0x1800cc8c0
_Cnd_timedwait 0x1800cc8c8
_Cnd_unregister_at_thread_exit 0x1800cc8b8
_Cnd_wait 0x1800cc8d8
_Mtx_current_owns 0x1800cc8d0
_Mtx_destroy_in_situ 0x1800cc868
_Mtx_init_in_situ 0x1800cc870
_Mtx_lock 0x1800cc860
_Mtx_unlock 0x1800ccad8
_Query_perf_counter 0x1800cc8f0
_Query_perf_frequency 0x1800ccab8
_Wcscoll 0x1800cc910
_Wcsxfrm 0x1800cc908
_Xtime_get_ticks 0x1800ccb00
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z 0x1800ccae8
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z 0x1800cc8b0
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z 0x1800cc9b8
?__ExceptionPtrCreate@@YAXPEAX@Z 0x1800cc890
?__ExceptionPtrDestroy@@YAXPEAX@Z 0x1800cc8a0
?__ExceptionPtrToBool@@YA_NPEBX@Z 0x1800ccac0
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x1800cc930
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z 0x1800ccae0
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x1800cc920
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ 0x1800cc980
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x1800cc958
?_Incref@facet@locale@std@@UEAAXXZ 0x1800cc918
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x1800ccaf0
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z 0x1800cca70
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800cca20
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ 0x1800cc9c8
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ 0x1800cc9f0
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z 0x1800ccac8
?_Syserror_map@std@@YAPEBDH@Z 0x1800cc8a8
?_Throw_C_error@std@@YAXH@Z 0x1800cc880
?_Throw_Cpp_error@std@@YAXH@Z 0x1800cc878
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z 0x1800cc888
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800cca28
?_Xbad_alloc@std@@YAXXZ 0x1800cc8e8
?_Xbad_function_call@std@@YAXXZ 0x1800cc8e0
?_Xlength_error@std@@YAXPEBD@Z 0x1800cc898
?_Xout_of_range@std@@YAXPEBD@Z 0x1800cc9a8
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z 0x1800cc988
??0_Locinfo@std@@QEAA@PEBD@Z 0x1800cc948
??0_Lockit@std@@QEAA@H@Z 0x1800cc950
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x1800cc9e0
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x1800cca90
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x1800cc9f8
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x1800cc9c0
??0facet@locale@std@@IEAA@_K@Z 0x1800cc8f8
??1_Locinfo@std@@QEAA@XZ 0x1800cc938
??1_Lockit@std@@QEAA@XZ 0x1800cc940
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800cca10
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800ccaa8
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800cca68
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800cca18
??1facet@locale@std@@MEAA@XZ 0x1800cc900
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z 0x1800ccab0
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z 0x1800cca98
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z 0x1800ccaa0
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z 0x1800cca00
??Bid@locale@std@@QEAA_KXZ 0x1800cc968
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ 0x1800cc9d0
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z 0x1800cca08
?id@?$collate@_W@std@@2V0locale@2@A 0x1800cc978
?id@?$ctype@_W@std@@2V0locale@2@A 0x1800cc960
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z 0x1800cca60
?is@?$ctype@_W@std@@QEBA_NF_W@Z 0x1800cc928
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ 0x1800cca80
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z 0x1800cca50
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z 0x1800cc9d8
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ 0x1800cca88
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ 0x1800cca30
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ 0x1800cca78
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z 0x1800cc9e8
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z 0x1800cc9b0
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ 0x1800cca58
?tolower@?$ctype@_W@std@@QEBA_W_W@Z 0x1800cc998
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z 0x1800cc990
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ 0x1800cca38
?uncaught_exception@std@@YA_NXZ 0x1800cc9a0
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z 0x1800cca40
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z 0x1800cca48
ntdll.dll 27
AlpcGetMessageAttribute 0x1800ccb48
DbgPrintEx 0x1800ccbe0
NtAlpcAcceptConnectPort 0x1800ccb60
NtAlpcCancelMessage 0x1800ccb70
NtAlpcConnectPort 0x1800ccb78
NtAlpcCreatePort 0x1800ccb40
NtAlpcOpenSenderProcess 0x1800ccb58
NtAlpcSendWaitReceivePort 0x1800ccb50
NtCompleteConnectPort 0x1800ccb68
NtQueryInformationProcess 0x1800ccbd8
NtQueryInformationToken 0x1800ccb20
NtQuerySystemInformation 0x1800ccbb0
NtQueryWnfStateData 0x1800ccba0
RtlAllocateHeap 0x1800ccb10
RtlCaptureContext 0x1800ccb80
RtlCompareUnicodeString 0x1800ccb30
RtlFreeHeap 0x1800ccb28
RtlGetDeviceFamilyInfoEnum 0x1800ccbc8
RtlInitUnicodeString 0x1800ccbc0
RtlIsMultiSessionSku 0x1800ccbd0
RtlIsMultiUsersInSessionSku 0x1800ccbb8
RtlLookupFunctionEntry 0x1800ccb88
RtlNtStatusToDosErrorNoTeb 0x1800ccb18
RtlPublishWnfStateData 0x1800ccb38
RtlSubscribeWnfStateChangeNotification 0x1800ccba8
RtlUnsubscribeWnfNotificationWaitForCompletion 0x1800ccb98
RtlVirtualUnwind 0x1800ccb90
USER32.dll 10
EnumChildWindows 0x1800cbe90
GetAncestor 0x1800cbed8
GetDesktopWindow 0x1800cbea8
GetForegroundWindow 0x1800cbeb8
GetProcessUIContextInformation 0x1800cbec8
GetPropW 0x1800cbe98
GetWindowThreadProcessId 0x1800cbeb0
IsWindowVisible 0x1800cbec0
PostMessageW 0x1800cbea0
SetForegroundWindow 0x1800cbed0