WindowsTasks.dll - Online Dependency Analysis & Download

Description

Windows Collection Tasks

Authors

File size

499.8 KB

Uploaded

2025-12-03 02:36

Views

SHA-256

154c7ddf8186ec2ee0e8358ddbf781d4

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 2

CreateCollection #1 · 0x48f10

DllMain #2 · 0x48f70

Imported DLLs & functions 348

ADVAPI32.dll 45

AdjustTokenPrivileges 0x180055018

CloseEventLog 0x180055038

CloseServiceHandle 0x1800550b8

ConvertSecurityDescriptorToStringSecurityDescriptorW 0x1800550f0

ConvertSidToStringSidW 0x180055120

ConvertStringSidToSidW 0x180055060

CreateWellKnownSid 0x1800550f8

DuplicateToken 0x180055020

EnumServicesStatusW 0x1800550c0

EqualSid 0x180055090

GetExplicitEntriesFromAclW 0x1800550a0

GetNamedSecurityInfoW 0x180055110

GetSecurityDescriptorDacl 0x180055098

GetSecurityDescriptorGroup 0x180055100

GetSecurityDescriptorOwner 0x180055108

GetSecurityInfo 0x180055118

GetTokenInformation 0x180055158

LookupAccountNameW 0x180055058

LookupAccountSidW 0x180055050

LookupPrivilegeNameW 0x180055160

LookupPrivilegeValueW 0x180055030

LsaClose 0x180055130

LsaEnumerateAccountRights 0x180055150

LsaEnumerateAccountsWithUserRight 0x180055148

LsaFreeMemory 0x180055128

LsaOpenPolicy 0x180055138

LsaQueryInformationPolicy 0x180055140

OpenEventLogW 0x180055040

OpenProcessToken 0x180055008

OpenSCManagerW 0x1800550c8

OpenServiceW 0x1800550d0

OpenThreadToken 0x180055010

QueryServiceConfig2W 0x1800550e0

QueryServiceConfigW 0x1800550d8

QueryServiceStatusEx 0x1800550e8

ReadEventLogW 0x180055048

RegCloseKey 0x180055068

RegEnumKeyExW 0x180055070

RegEnumKeyW 0x1800550b0

RegEnumValueW 0x180055078

RegOpenKeyExW 0x180055080

RegQueryInfoKeyW 0x1800550a8

RegQueryValueExW 0x180055088

RevertToSelf 0x180055028

SetThreadToken 0x180055000

CoreLibrary.dll 60

??0AutoHandle@@QEAA@AEBQEAX@Z 0x180055208

??0AutoVariant@@QEAA@XZ 0x180055220

??0LogContext@@QEAA@AEBV0@@Z 0x180055258

??0LogContext@@QEAA@PEB_W00@Z 0x180055318

??0LogContext@@QEAA@XZ 0x1800551c8

??0Task@@QEAA@PEB_WQEAXH0@Z 0x180055340

??0TaskCollection@@IEAA@PEB_WQEAXH_N@Z 0x180055328

??0TreeString@@QEAA@QEA_W@Z 0x1800552f8

??0WASAFailureException@@QEAA@AEBV0@@Z 0x180055268

??0XmlWriter@@QEAA@PEB_W@Z 0x180055198

??1AutoComUninitializer@@QEAA@XZ 0x180055188

??1AutoCriticalSection@@QEAA@XZ 0x180055248

??1AutoHandle@@QEAA@XZ 0x180055180

??1AutoLibrary@@QEAA@XZ 0x180055270

??1AutoLock@@QEAA@XZ 0x1800551f0

??1AutoVariant@@QEAA@XZ 0x180055190

??1LogContext@@QEAA@XZ 0x1800551d0

??1Task@@MEAA@XZ 0x180055338

??1TaskCollection@@UEAA@XZ 0x180055330

??1TreeString@@QEAA@XZ 0x180055300

??1XmlWriter@@QEAA@XZ 0x1800551a0

??4AutoHandle@@QEAAAEAV0@AEBQEAX@Z 0x1800552e8

??4LogContext@@QEAAAEAV0@AEBV0@@Z 0x1800551d8

??BAutoCriticalSection@@QEAAPEAU_RTL_CRITICAL_SECTION@@XZ 0x180055250

??BAutoHandle@@QEBAPEAXXZ 0x180055218

??CAutoVariant@@QEAAPEAUtagVARIANT@@XZ 0x180055228

?Add@TaskMaster@@QEAAPEAVTask@@PEAV2@PEAPEAV2@1@Z 0x180055348

?Close@AutoHandle@@QEAAXXZ 0x180055178

?GetOptionValue@TaskMaster@@QEAAPEB_WPEB_W0@Z 0x180055260

?IsOpen@AutoHandle@@QEBA_NXZ 0x180055210

?LogImpl@LogContext@@QEBAXPEBD_KW4LogEventType@@PEB_WI@Z 0x180055170

?MyFormatMessage@@YAPEA_WPEAXIZZ 0x180055320

?NtClose@@3P6AJPEAX@ZEA 0x1800552d0

?NtCreateFile@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@PEAUIO_STATUS_BLOCK@@PEAT_LARGE_INTEGER@@KKKKPEAXK@ZEA 0x1800552d8

?ntdll@@3PEAUHINSTANCE__@@EA 0x180055310

?NtOpenDirectoryObject@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@@ZEA 0x180055280

?NtOpenSection@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@@ZEA 0x180055288

?NtOpenSymbolicLinkObject@@3P6AJPEAPEAXKPEAUOBJECT_ATTRIBUTES@@@ZEA 0x180055290

?NtQueryDirectoryFile@@3P6AJPEAX000PEAUIO_STATUS_BLOCK@@0KW4FILE_INFORMATION_CLASS@@EPEAU_LSA_UNICODE_STRING@@E@ZEA 0x1800552e0

?NtQueryDirectoryObject@@3P6AJPEAX0KEEPEAK1@ZEA 0x180055298

?NtQueryInformationProcess@@3P6AJPEAXW4PROCESSINFOCLASS@@0KPEAK@ZEA 0x1800552f0

?NtQueryObject@@3P6AJPEAXW4OBJECT_INFORMATION_CLASS@@0KPEAK@ZEA 0x1800552a0

?NtQuerySecurityObject@@3P6AJPEAXK0KPEAK@ZEA 0x1800552c8

?NtQuerySymbolicLinkObject@@3P6AJPEAXPEAU_LSA_UNICODE_STRING@@PEAK@ZEA 0x1800552a8

?NtQuerySystemInformation@@3P6AJW4SYSTEM_INFORMATION_CLASS@@PEAXKPEAK@ZEA 0x1800552b0

?NtQueryVolumeInformationFile@@3P6AJPEAXPEAUIO_STATUS_BLOCK@@0KW4FS_INFORMATION_CLASS@@@ZEA 0x1800552b8

?PushLevel@TreeString@@QEAA_KQEA_W@Z 0x180055308

?Reassign@AutoHandle@@QEAAPEAPEAXXZ 0x1800551e0

?Reassign@AutoVariant@@QEAAPEAUtagVARIANT@@XZ 0x180055230

?RtlInitUnicodeString@@3P6AXPEAU_LSA_UNICODE_STRING@@PEB_W@ZEA 0x1800552c0

?WriteAttribute@XmlWriter@@QEAAXPEBD_K@Z 0x180055238

?WriteAttribute@XmlWriter@@QEAAXPEBD0@Z 0x180055240

?WriteAttribute@XmlWriter@@QEAAXPEBDPEB_W@Z 0x1800551e8

?WriteAttributeAsHex@XmlWriter@@QEAAXPEBD_K@Z 0x180055278

?WriteEndElement@XmlWriter@@QEAAXXZ 0x1800551b0

?WriteSimpleTag@XmlWriter@@QEAAXPEBD_K@Z 0x1800551f8

?WriteSimpleTag@XmlWriter@@QEAAXPEBD0@Z 0x1800551b8

?WriteSimpleTag@XmlWriter@@QEAAXPEBDPEB_W@Z 0x1800551c0

?WriteSimpleTagAsHex@XmlWriter@@QEAAXPEBD_K@Z 0x180055200

?WriteStartElement@XmlWriter@@QEAAXPEBD@Z 0x1800551a8

imagehlp.dll 4

ImageLoad 0x180055b08

ImageNtHeader 0x180055b18

ImageRvaToVa 0x180055b20

ImageUnload 0x180055b10

IPHLPAPI.DLL 2

GetExtendedTcpTable 0x180055360

GetExtendedUdpTable 0x180055358

KERNEL32.dll 61

CloseHandle 0x180055520

CreateFileW 0x180055548

CreatePipe 0x180055508

CreateProcessW 0x1800554e8

CreateThread 0x1800554f0

DecodePointer 0x1800553a0

DeleteCriticalSection 0x180055440

DeleteFileW 0x180055540

DeviceIoControl 0x180055450

DuplicateHandle 0x180055518

EncodePointer 0x1800553a8

EnterCriticalSection 0x1800554b8

FindClose 0x1800554c8

FindFirstFileW 0x1800554c0

FindNextFileW 0x180055470

FreeLibrary 0x180055418

GetCurrentProcess 0x1800554f8

GetCurrentProcessId 0x180055380

GetCurrentThread 0x1800554d0

GetCurrentThreadId 0x180055388

GetDriveTypeW 0x180055438

GetEnvironmentVariableW 0x180055420

GetFileAttributesW 0x180055468

GetFullPathNameW 0x180055460

GetLastError 0x180055510

GetLogicalDriveStringsW 0x180055430

GetLongPathNameW 0x1800554a0

GetNativeSystemInfo 0x180055480

GetProcAddress 0x180055410

GetProcessHeap 0x1800553d8

GetShortPathNameW 0x180055458

GetStdHandle 0x180055550

GetSystemTime 0x1800554e0

GetSystemTimeAsFileTime 0x180055390

GetVersionExW 0x1800554b0

GetVolumeInformationW 0x180055428

GetVolumeNameForVolumeMountPointW 0x180055490

HeapAlloc 0x1800553e8

HeapFree 0x1800553e0

HeapReAlloc 0x1800553c8

InitializeCriticalSection 0x180055448

IsDebuggerPresent 0x180055398

IsProcessorFeaturePresent 0x180055370

LoadLibraryW 0x180055408

LocalFree 0x1800554a8

lstrlenA 0x1800553b8

MapViewOfFile 0x1800553f8

MultiByteToWideChar 0x1800553b0

OpenProcess 0x180055488

OpenThread 0x1800553c0

QueryDosDeviceW 0x180055498

QueryPerformanceCounter 0x180055378

ReadFile 0x180055538

SetFileTime 0x180055530

SystemTimeToFileTime 0x1800554d8

TerminateThread 0x180055400

UnmapViewOfFile 0x1800553f0

VirtualQueryEx 0x180055478

WaitForMultipleObjects 0x1800553d0

WaitForSingleObject 0x180055500

WriteFile 0x180055528

MSVCP110.dll 88

?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800557e8

?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x180055630

?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800557d0

?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x180055610

?_BADOFF@std@@3_JB 0x180055578

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x180055760

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x180055750

?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z 0x180055780

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800557f0

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x180055638

?_Orphan_all@_Container_base0@std@@QEAAXXZ 0x1800555c0

?_Orphan_all@_Container_base12@std@@QEAAXXZ 0x180055690

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ 0x1800557d8

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ 0x180055618

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ 0x1800557a0

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x1800555e8

?_Syserror_map@std@@YAPEBDH@Z 0x180055768

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800557f8

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x180055640

?_Winerror_map@std@@YAPEBDH@Z 0x180055770

?_Xbad_alloc@std@@YAXXZ 0x180055730

?_Xlength_error@std@@YAXPEBD@Z 0x180055738

?_Xout_of_range@std@@YAXPEBD@Z 0x180055740

??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@ 0x180055590

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ 0x180055680

??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ 0x1800555a0

??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ 0x180055688

??_7ios_base@std@@6B@ 0x180055588

??0_Lockit@std@@QEAA@H@Z 0x180055718

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x1800557b8

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x1800556a8

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x1800557c0

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x180055600

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x180055788

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x1800555d0

??1_Lockit@std@@QEAA@XZ 0x180055720

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800557a8

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800555f0

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800557c8

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180055608

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x180055790

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800555d8

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z 0x180055710

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z 0x1800556a0

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z 0x180055598

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z 0x180055708

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z 0x180055818

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z 0x180055698

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z 0x180055620

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z 0x1800556b8

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z 0x180055700

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z 0x1800556c0

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z 0x1800556b0

??Bid@locale@std@@QEAA_KXZ 0x180055748

?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ 0x1800556d0

?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ 0x1800556e0

?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ 0x1800556e8

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ 0x1800557e0

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ 0x180055628

?getloc@ios_base@std@@QEBA?AVlocale@2@XZ 0x180055778

?id@?$ctype@_W@std@@2V0locale@2@A 0x180055580

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z 0x180055800

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z 0x180055648

?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ 0x1800556d8

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z 0x180055808

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z 0x180055650

?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z 0x1800555b0

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z 0x1800556f8

?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z 0x1800555b8

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z 0x1800557b0

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x1800555f8

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x1800556c8

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ 0x180055810

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x180055658

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z 0x180055798

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z 0x1800555e0

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z 0x1800555a8

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z 0x1800556f0

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ 0x1800555c8

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x180055660

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ 0x180055560

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x180055668

?uncaught_exception@std@@YA_NXZ 0x180055728

?widen@?$ctype@_W@std@@QEBA_WD@Z 0x180055758

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z 0x180055568

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x180055670

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z 0x180055570

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x180055678

MSVCR110.dll 50

__C_specific_handler 0x180055928

__clean_type_info_names_internal 0x180055990

__CppXcptFilter 0x180055938

__crt_debugger_hook 0x180055960

__crtCapturePreviousContext 0x180055978

__crtTerminateProcess 0x180055970

__crtUnhandledException 0x180055968

__CxxFrameHandler3 0x180055858

__dllonexit 0x180055920

_amsg_exit 0x180055940

_calloc_crt 0x180055918

_CxxThrowException 0x180055850

_initterm 0x180055950

_initterm_e 0x180055958

_lock 0x180055908

_malloc_crt 0x180055948

_onexit 0x180055930

_purecall 0x1800559a8

_unlock 0x180055910

_wcsicmp 0x1800558e8

_wdupenv_s 0x1800558a8

_wtof 0x1800558c8

_wtoi 0x180055870

?_type_info_dtor_internal_method@type_info@@QEAAXXZ 0x180055988

??_V@YAXPEAX@Z 0x180055888

??0bad_cast@std@@QEAA@AEBV01@@Z 0x180055838

??0bad_cast@std@@QEAA@PEBD@Z 0x180055830

??0exception@std@@QEAA@AEBQEBDH@Z 0x180055878

??0exception@std@@QEAA@AEBV01@@Z 0x180055840

??1bad_cast@std@@UEAA@XZ 0x180055848

??1exception@std@@UEAA@XZ 0x1800559b0

??2@YAPEAX_K@Z 0x1800559a0

??3@YAXPEAX@Z 0x180055998

?terminate@@YAXXZ 0x180055980

?what@exception@std@@UEBAPEBDXZ 0x180055890

exit 0x1800558b0

free 0x1800558a0

iswdigit 0x1800558e0

malloc 0x1800558b8

memcpy 0x180055860

memcpy_s 0x180055900

memmove 0x180055880

memset 0x180055868

realloc 0x1800558c0

toupper 0x180055898

wcscat_s 0x1800558d0

wcschr 0x1800558f0

wcscpy_s 0x180055828

wcsncmp 0x1800558d8

wcsstr 0x1800558f8

NETAPI32.dll 7

NetApiBufferFree 0x1800559f0

NetGetAnyDCName 0x1800559d0

NetGetJoinInformation 0x1800559c8

NetLocalGroupEnum 0x1800559e0

NetLocalGroupGetMembers 0x1800559d8

NetShareEnum 0x1800559c0

NetUserGetGroups 0x1800559e8

ole32.dll 4

CoCreateInstance 0x180055b30

CoInitializeEx 0x180055b40

CoSetProxyBlanket 0x180055b38

CoUninitialize 0x180055b48

OLEAUT32.dll 5

SysAllocString 0x180055a18

SysFreeString 0x180055a00

VariantChangeType 0x180055a10

VariantClear 0x180055a08

VariantInit 0x180055a20

PSAPI.DLL 4

EnumProcessModules 0x180055a30

GetMappedFileNameW 0x180055a40

GetModuleFileNameExA 0x180055a38

GetModuleFileNameExW 0x180055a48

RPCRT4.dll 6

RpcBindingFree 0x180055a60

RpcBindingToStringBindingW 0x180055a68

RpcMgmtEpEltInqBegin 0x180055a78

RpcMgmtEpEltInqDone 0x180055a80

RpcMgmtEpEltInqNextW 0x180055a70

RpcStringFreeW 0x180055a58

Secur32.dll 3

LsaEnumerateLogonSessions 0x180055aa0

LsaFreeReturnBuffer 0x180055aa8

LsaGetLogonSessionData 0x180055ab0

SHELL32.dll 1

SHGetFolderPathW 0x180055a90

USER32.dll 8

CloseDesktop 0x180055ad0

CloseWindowStation 0x180055ae8

EnumDesktopsW 0x180055ac8

EnumWindowStationsW 0x180055ae0

GetProcessWindowStation 0x180055af8

OpenDesktopW 0x180055ac0

OpenWindowStationW 0x180055ad8

SetProcessWindowStation 0x180055af0