AppVEntSubsystemController.dll
Description: Microsoft Application Virtualization Client Subsystem Controller
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 64-bit
Operating System: Windows NT
SHA256: eb797e1146ad635a2345a5c1a024af04
File Size: 1.2 MB
Uploaded At: Dec. 1, 2025, 7:22 a.m.
Views: 14
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread, VirtualAllocEx
Exported Functions
- Initialize (Ordinal: 1, Address: 0x5f00)
- Deinitialize (Ordinal: 2, Address: 0x5fa0)
- GetComponent (Ordinal: 3, Address: 0x6150)
- GetVirtualEnvironmentUtils (Ordinal: 4, Address: 0x6270)
Imported DLLs & Functions
ADVAPI32.dll
- AccessCheck (Address: 0x1800d7780)
- AddAce (Address: 0x1800d7888)
- AdjustTokenPrivileges (Address: 0x1800d7680)
- CheckTokenMembership (Address: 0x1800d76f8)
- CloseServiceHandle (Address: 0x1800d77b8)
- ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x1800d7790)
- ConvertSidToStringSidW (Address: 0x1800d76a8)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800d78a0)
- ConvertStringSidToSidW (Address: 0x1800d7818)
- CopySid (Address: 0x1800d76d8)
- CreateProcessAsUserW (Address: 0x1800d76b8)
- CryptAcquireContextW (Address: 0x1800d7728)
- CryptCreateHash (Address: 0x1800d7730)
- CryptDestroyHash (Address: 0x1800d7740)
- CryptGetHashParam (Address: 0x1800d7748)
- CryptHashData (Address: 0x1800d7738)
- CryptReleaseContext (Address: 0x1800d7750)
- DuplicateToken (Address: 0x1800d76b0)
- DuplicateTokenEx (Address: 0x1800d7698)
- EnumServicesStatusExW (Address: 0x1800d77a8)
- EnumServicesStatusW (Address: 0x1800d77b0)
- EqualSid (Address: 0x1800d7718)
- EventActivityIdControl (Address: 0x1800d7830)
- EventRegister (Address: 0x1800d7660)
- EventSetInformation (Address: 0x1800d7658)
- EventUnregister (Address: 0x1800d7650)
- EventWriteTransfer (Address: 0x1800d76e8)
- GetAce (Address: 0x1800d7788)
- GetAclInformation (Address: 0x1800d7860)
- GetLengthSid (Address: 0x1800d76a0)
- GetSecurityDescriptorControl (Address: 0x1800d7878)
- GetSecurityDescriptorDacl (Address: 0x1800d7858)
- GetSecurityDescriptorGroup (Address: 0x1800d7870)
- GetSecurityDescriptorLength (Address: 0x1800d78a8)
- GetSecurityDescriptorOwner (Address: 0x1800d7880)
- GetSecurityDescriptorSacl (Address: 0x1800d7848)
- GetSidIdentifierAuthority (Address: 0x1800d7840)
- GetSidLengthRequired (Address: 0x1800d7708)
- GetSidSubAuthority (Address: 0x1800d7710)
- GetSidSubAuthorityCount (Address: 0x1800d7838)
- GetTokenInformation (Address: 0x1800d7688)
- ImpersonateLoggedOnUser (Address: 0x1800d7720)
- InitializeAcl (Address: 0x1800d7898)
- InitializeSecurityDescriptor (Address: 0x1800d7890)
- InitializeSid (Address: 0x1800d7700)
- IsValidSid (Address: 0x1800d76d0)
- LookupPrivilegeValueW (Address: 0x1800d76f0)
- MakeAbsoluteSD (Address: 0x1800d7770)
- MakeSelfRelativeSD (Address: 0x1800d78b0)
- MapGenericMask (Address: 0x1800d77a0)
- OpenProcessToken (Address: 0x1800d76c8)
- OpenSCManagerW (Address: 0x1800d77c0)
- OpenServiceW (Address: 0x1800d77d0)
- OpenThreadToken (Address: 0x1800d7690)
- RegCloseKey (Address: 0x1800d7678)
- RegCreateKeyExW (Address: 0x1800d7810)
- RegDeleteKeyExW (Address: 0x1800d7768)
- RegDeleteTreeW (Address: 0x1800d7828)
- RegDeleteValueW (Address: 0x1800d77f0)
- RegEnumKeyExW (Address: 0x1800d7820)
- RegEnumValueW (Address: 0x1800d77f8)
- RegLoadKeyW (Address: 0x1800d77e0)
- RegOpenCurrentUser (Address: 0x1800d7808)
- RegOpenKeyExW (Address: 0x1800d7670)
- RegQueryInfoKeyW (Address: 0x1800d77e8)
- RegQueryValueExW (Address: 0x1800d7668)
- RegSetKeySecurity (Address: 0x1800d7778)
- RegSetKeyValueW (Address: 0x1800d7800)
- RegSetValueExW (Address: 0x1800d7758)
- RegUnLoadKeyW (Address: 0x1800d77d8)
- RevertToSelf (Address: 0x1800d7760)
- SetSecurityDescriptorDacl (Address: 0x1800d7850)
- SetSecurityDescriptorGroup (Address: 0x1800d78b8)
- SetSecurityDescriptorOwner (Address: 0x1800d7868)
- SetSecurityDescriptorSacl (Address: 0x1800d7798)
- SetThreadToken (Address: 0x1800d76c0)
- SetTokenInformation (Address: 0x1800d76e0)
- StartServiceW (Address: 0x1800d77c8)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1800d7f18)
- __CxxFrameHandler3 (Address: 0x1800d7e60)
- __CxxFrameHandler4 (Address: 0x1800d7f20)
- __RTDynamicCast (Address: 0x1800d7f28)
- __std_terminate (Address: 0x1800d7f10)
- __std_type_info_compare (Address: 0x1800d7ef8)
- _CxxThrowException (Address: 0x1800d7e68)
- _o___std_exception_copy (Address: 0x1800d7ee8)
- _o___std_exception_destroy (Address: 0x1800d7ee0)
- _o___std_type_info_destroy_list (Address: 0x1800d7ed8)
- _o___stdio_common_vsnprintf_s (Address: 0x1800d7ed0)
- _o___stdio_common_vswprintf (Address: 0x1800d7ec8)
- _o___stdio_common_vswprintf_s (Address: 0x1800d7ec0)
- _o__callnewh (Address: 0x1800d7eb8)
- _o__cexit (Address: 0x1800d7eb0)
- _o__configure_narrow_argv (Address: 0x1800d7e88)
- _o__crt_atexit (Address: 0x1800d7e80)
- _o__errno (Address: 0x1800d7e78)
- _o__execute_onexit_table (Address: 0x1800d7e70)
- _o__initialize_narrow_environment (Address: 0x1800d7ea8)
- _o__initialize_onexit_table (Address: 0x1800d7ea0)
- _o__invalid_parameter_noinfo (Address: 0x1800d7e98)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1800d7e90)
- _o__purecall (Address: 0x1800d7da0)
- _o__register_onexit_function (Address: 0x1800d7da8)
- _o__resetstkoflw (Address: 0x1800d7db0)
- _o__seh_filter_dll (Address: 0x1800d7db8)
- _o__stricmp (Address: 0x1800d7dc0)
- _o__wcsicmp (Address: 0x1800d7dc8)
- _o__wcslwr_s (Address: 0x1800d7dd0)
- _o__wcsnicmp (Address: 0x1800d7dd8)
- _o__wcsupr_s (Address: 0x1800d7de0)
- _o__wsplitpath_s (Address: 0x1800d7df0)
- _o__wtoi (Address: 0x1800d7df8)
- _o_calloc (Address: 0x1800d7e00)
- _o_free (Address: 0x1800d7e08)
- _o_iswalpha (Address: 0x1800d7e10)
- _o_iswdigit (Address: 0x1800d7e18)
- _o_iswspace (Address: 0x1800d7e20)
- _o_malloc (Address: 0x1800d7e28)
- _o_realloc (Address: 0x1800d7e30)
- _o_terminate (Address: 0x1800d7e38)
- _o_towupper (Address: 0x1800d7e40)
- _o_wcscpy_s (Address: 0x1800d7e48)
- _o_wcsncpy_s (Address: 0x1800d7e50)
- _o_wmemcpy_s (Address: 0x1800d7e58)
- memcmp (Address: 0x1800d7f30)
- memcpy (Address: 0x1800d7f38)
- memmove (Address: 0x1800d7de8)
- strchr (Address: 0x1800d7f00)
- strrchr (Address: 0x1800d7f08)
- wcschr (Address: 0x1800d7ef0)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800d7f50)
- _initterm_e (Address: 0x1800d7f48)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1800d7f60)
- wcsncmp (Address: 0x1800d7f68)
APPVFILESYSTEMMETADATA.dll
- (Address: 0x1800d78c8)
FLTLIB.DLL
- FilterConnectCommunicationPort (Address: 0x1800d78e0)
- FilterSendMessage (Address: 0x1800d78d8)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x1800d7b58)
- AcquireSRWLockShared (Address: 0x1800d7b40)
- CheckNameLegalDOS8Dot3W (Address: 0x1800d7930)
- CloseHandle (Address: 0x1800d7bf0)
- CloseThreadpoolTimer (Address: 0x1800d79f8)
- CopyFileW (Address: 0x1800d79a8)
- CreateEventW (Address: 0x1800d7b70)
- CreateFileW (Address: 0x1800d7c78)
- CreateMutexExW (Address: 0x1800d7a20)
- CreateMutexW (Address: 0x1800d78f0)
- CreateProcessW (Address: 0x1800d7b98)
- CreateRemoteThread (Address: 0x1800d79b0)
- CreateSemaphoreExW (Address: 0x1800d79c8)
- CreateSemaphoreW (Address: 0x1800d7980)
- CreateThread (Address: 0x1800d7908)
- CreateThreadpoolTimer (Address: 0x1800d7a18)
- DebugBreak (Address: 0x1800d7918)
- DeleteCriticalSection (Address: 0x1800d7be0)
- DeleteFileW (Address: 0x1800d79a0)
- DisableThreadLibraryCalls (Address: 0x1800d7c28)
- DisconnectNamedPipe (Address: 0x1800d7958)
- DuplicateHandle (Address: 0x1800d7c30)
- EnterCriticalSection (Address: 0x1800d7c18)
- ExpandEnvironmentStringsW (Address: 0x1800d7c60)
- FindClose (Address: 0x1800d7c70)
- FindFirstFileW (Address: 0x1800d7c48)
- FindNextFileW (Address: 0x1800d7988)
- FormatMessageW (Address: 0x1800d79e8)
- FreeLibrary (Address: 0x1800d7a88)
- GetCurrentProcess (Address: 0x1800d7bd0)
- GetCurrentProcessId (Address: 0x1800d7ba0)
- GetCurrentThread (Address: 0x1800d7bb0)
- GetCurrentThreadId (Address: 0x1800d7c00)
- GetEnvironmentVariableW (Address: 0x1800d7b08)
- GetExitCodeProcess (Address: 0x1800d7b80)
- GetFileAttributesW (Address: 0x1800d7928)
- GetFinalPathNameByHandleW (Address: 0x1800d7998)
- GetLastError (Address: 0x1800d7bf8)
- GetLongPathNameW (Address: 0x1800d7c58)
- GetModuleFileNameA (Address: 0x1800d79c0)
- GetModuleHandleExW (Address: 0x1800d79d0)
- GetModuleHandleW (Address: 0x1800d7aa0)
- GetNativeSystemInfo (Address: 0x1800d79b8)
- GetOverlappedResult (Address: 0x1800d7968)
- GetProcAddress (Address: 0x1800d7a90)
- GetProcessHeap (Address: 0x1800d7b18)
- GetShortPathNameW (Address: 0x1800d7c68)
- GetSystemDirectoryW (Address: 0x1800d7c80)
- GetSystemTimeAsFileTime (Address: 0x1800d7ab0)
- GetTickCount (Address: 0x1800d7910)
- GetVersionExW (Address: 0x1800d7c38)
- GetVolumePathNameW (Address: 0x1800d7920)
- HeapAlloc (Address: 0x1800d7b20)
- HeapDestroy (Address: 0x1800d7b10)
- HeapFree (Address: 0x1800d7b28)
- HeapReAlloc (Address: 0x1800d7b30)
- HeapSize (Address: 0x1800d7b38)
- InitializeCriticalSection (Address: 0x1800d7c08)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800d7a38)
- InitializeCriticalSectionEx (Address: 0x1800d79d8)
- InitializeSListHead (Address: 0x1800d7aa8)
- InitializeSRWLock (Address: 0x1800d7c20)
- IsDebuggerPresent (Address: 0x1800d7ae0)
- IsProcessorFeaturePresent (Address: 0x1800d7ac0)
- IsWow64Process (Address: 0x1800d7b88)
- LeaveCriticalSection (Address: 0x1800d7c10)
- LoadLibraryA (Address: 0x1800d7990)
- LoadLibraryW (Address: 0x1800d7a98)
- LocalFree (Address: 0x1800d7ba8)
- lstrcmpiW (Address: 0x1800d7b00)
- OpenProcess (Address: 0x1800d7bc0)
- OpenSemaphoreW (Address: 0x1800d7a08)
- OutputDebugStringW (Address: 0x1800d79f0)
- PeekNamedPipe (Address: 0x1800d7950)
- ProcessIdToSessionId (Address: 0x1800d7bb8)
- QueryDosDeviceW (Address: 0x1800d7bd8)
- QueryFullProcessImageNameW (Address: 0x1800d7c90)
- QueryPerformanceCounter (Address: 0x1800d7ab8)
- QueueUserWorkItem (Address: 0x1800d7960)
- RaiseException (Address: 0x1800d7be8)
- ReadFile (Address: 0x1800d7940)
- ReadProcessMemory (Address: 0x1800d7a58)
- ReleaseMutex (Address: 0x1800d78f8)
- ReleaseSemaphore (Address: 0x1800d7938)
- ReleaseSRWLockExclusive (Address: 0x1800d7b68)
- ReleaseSRWLockShared (Address: 0x1800d7b50)
- ResetEvent (Address: 0x1800d7b48)
- ResumeThread (Address: 0x1800d7a70)
- RtlCaptureContext (Address: 0x1800d7af8)
- RtlLookupFunctionEntry (Address: 0x1800d7af0)
- RtlVirtualUnwind (Address: 0x1800d7ae8)
- SearchPathW (Address: 0x1800d7c50)
- SetEvent (Address: 0x1800d7b60)
- SetLastError (Address: 0x1800d7a78)
- SetNamedPipeHandleState (Address: 0x1800d7948)
- SetThreadpoolTimer (Address: 0x1800d7a10)
- SetThreadPriority (Address: 0x1800d7900)
- SetUnhandledExceptionFilter (Address: 0x1800d7ad0)
- Sleep (Address: 0x1800d7c40)
- TerminateProcess (Address: 0x1800d7ac8)
- TransactNamedPipe (Address: 0x1800d7970)
- UnhandledExceptionFilter (Address: 0x1800d7ad8)
- VirtualAllocEx (Address: 0x1800d7a60)
- VirtualFreeEx (Address: 0x1800d7c88)
- VirtualProtect (Address: 0x1800d7a48)
- VirtualProtectEx (Address: 0x1800d7a68)
- VirtualQuery (Address: 0x1800d7a40)
- VirtualQueryEx (Address: 0x1800d7a50)
- WaitForMultipleObjects (Address: 0x1800d7b78)
- WaitForSingleObject (Address: 0x1800d7bc8)
- WaitForSingleObjectEx (Address: 0x1800d7a00)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800d79e0)
- WaitNamedPipeW (Address: 0x1800d7978)
- WideCharToMultiByte (Address: 0x1800d7b90)
- Wow64DisableWow64FsRedirection (Address: 0x1800d7a28)
- Wow64RevertWow64FsRedirection (Address: 0x1800d7a30)
- WriteProcessMemory (Address: 0x1800d7a80)
msvcp_win.dll
- _Mbrtowc (Address: 0x1800d8158)
- _Wcscoll (Address: 0x1800d81a0)
- _Wcsxfrm (Address: 0x1800d81b0)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1800d7fd8)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800d81e8)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x1800d81b8)
- ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ (Address: 0x1800d8118)
- ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ (Address: 0x1800d7fc0)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800d8130)
- ?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ (Address: 0x1800d7fb8)
- ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ (Address: 0x1800d7fc8)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1800d7fd0)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800d8020)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800d8258)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800d8088)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x1800d8178)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x1800d80d8)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1800d8278)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x1800d80a8)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800d8250)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800d8080)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800d8108)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800d7f80)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800d8110)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800d8148)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1800d7f78)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x1800d7fa8)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800d8128)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800d8288)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800d80c0)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x1800d8270)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1800d80a0)
- ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1800d8008)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1800d8100)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800d8170)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800d80e0)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x1800d7fe0)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x1800d7fb0)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x1800d8120)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800d8268)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800d8098)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800d81f8)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800d8028)
- ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800d8000)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800d80f8)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800d8260)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800d8090)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x1800d7fe8)
- ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z (Address: 0x1800d7f90)
- ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z (Address: 0x1800d7ff0)
- ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800d7ff8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z (Address: 0x1800d8150)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x1800d8200)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x1800d7f98)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800d7fa0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x1800d81c8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x1800d81d0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x1800d8208)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800d8210)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800d8040)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x1800d8038)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z (Address: 0x1800d8030)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800d81d8)
- ?classic@locale@std@@SAAEBV12@XZ (Address: 0x1800d8018)
- ?exceptions@ios_base@std@@QEAAXH@Z (Address: 0x1800d7f88)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800d8180)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800d80d0)
- ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x1800d8280)
- ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x1800d80b8)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1800d81f0)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x1800d81a8)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x1800d8140)
- ?id@?$numpunct@_W@std@@2V0locale@2@A (Address: 0x1800d8010)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800d8218)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800d8048)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x1800d8198)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x1800d8228)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800d8058)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x1800d8188)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800d80c8)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1800d81c0)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x1800d8248)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800d8078)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x1800d8168)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800d80e8)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x1800d8160)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x1800d80f0)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x1800d8220)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800d8050)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x1800d8190)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x1800d80b0)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x1800d8240)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800d8070)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1800d8138)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x1800d81e0)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x1800d8238)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800d8068)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x1800d8230)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1800d8060)
ntdll.dll
- NtOpenJobObject (Address: 0x1800d82a8)
- NtQueryInformationProcess (Address: 0x1800d82a0)
- RtlInitUnicodeString (Address: 0x1800d8298)
- RtlNtStatusToDosError (Address: 0x1800d82b0)
ole32.dll
- CLSIDFromString (Address: 0x1800d82e0)
- CoCreateGuid (Address: 0x1800d82d0)
- CoCreateInstance (Address: 0x1800d8300)
- CoInitializeEx (Address: 0x1800d82c0)
- CoSetProxyBlanket (Address: 0x1800d82f8)
- CoTaskMemFree (Address: 0x1800d82e8)
- CoUninitialize (Address: 0x1800d82f0)
- PropVariantClear (Address: 0x1800d82d8)
- StringFromCLSID (Address: 0x1800d82c8)
OLEAUT32.dll
- SysAllocString (Address: 0x1800d7cb8)
- SysFreeString (Address: 0x1800d7ca8)
- VariantClear (Address: 0x1800d7cb0)
- VariantInit (Address: 0x1800d7ca0)
PSAPI.DLL
- EnumProcessModulesEx (Address: 0x1800d7cd0)
- GetModuleFileNameExW (Address: 0x1800d7cd8)
- GetProcessImageFileNameW (Address: 0x1800d7cc8)
RPCRT4.dll
- NdrServerCall2 (Address: 0x1800d7ce8)
- RpcBindingInqAuthClientW (Address: 0x1800d7d30)
- RpcImpersonateClient (Address: 0x1800d7d10)
- RpcRevertToSelf (Address: 0x1800d7d08)
- RpcRevertToSelfEx (Address: 0x1800d7cf0)
- RpcServerListen (Address: 0x1800d7d00)
- RpcServerRegisterAuthInfoW (Address: 0x1800d7cf8)
- RpcServerRegisterIf2 (Address: 0x1800d7d18)
- RpcServerUnregisterIf (Address: 0x1800d7d20)
- RpcServerUseProtseqEpW (Address: 0x1800d7d28)
SHELL32.dll
- (Address: 0x1800d7d48)
- SHGetKnownFolderPath (Address: 0x1800d7d40)
SHLWAPI.dll
- PathMatchSpecW (Address: 0x1800d7d58)
USER32.dll
- EnumWindows (Address: 0x1800d7d68)
- GetWindowThreadProcessId (Address: 0x1800d7d70)
- PostMessageW (Address: 0x1800d7d78)
USERENV.dll
- ExpandEnvironmentStringsForUserW (Address: 0x1800d7d88)
- UnloadUserProfile (Address: 0x1800d7d90)