AppVEntSubsystemController.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Description
Microsoft Application Virtualization Client Subsystem Controller
Authors
© Microsoft Corporation. All rights reserved.
File size
1.2 MB
Uploaded
2025-12-01 07:22
Views
101
SHA-256
eb797e1146ad635a2345a5c1a024af04

Exported functions 4

Initialize #1 · 0x5f00
Deinitialize #2 · 0x5fa0
GetComponent #3 · 0x6150
GetVirtualEnvironmentUtils #4 · 0x6270

Imported DLLs & functions 391

ADVAPI32.dll 78
AccessCheck 0x1800d7780
AddAce 0x1800d7888
AdjustTokenPrivileges 0x1800d7680
CheckTokenMembership 0x1800d76f8
CloseServiceHandle 0x1800d77b8
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x1800d7790
ConvertSidToStringSidW 0x1800d76a8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800d78a0
ConvertStringSidToSidW 0x1800d7818
CopySid 0x1800d76d8
CreateProcessAsUserW 0x1800d76b8
CryptAcquireContextW 0x1800d7728
CryptCreateHash 0x1800d7730
CryptDestroyHash 0x1800d7740
CryptGetHashParam 0x1800d7748
CryptHashData 0x1800d7738
CryptReleaseContext 0x1800d7750
DuplicateToken 0x1800d76b0
DuplicateTokenEx 0x1800d7698
EnumServicesStatusExW 0x1800d77a8
EnumServicesStatusW 0x1800d77b0
EqualSid 0x1800d7718
EventActivityIdControl 0x1800d7830
EventRegister 0x1800d7660
EventSetInformation 0x1800d7658
EventUnregister 0x1800d7650
EventWriteTransfer 0x1800d76e8
GetAce 0x1800d7788
GetAclInformation 0x1800d7860
GetLengthSid 0x1800d76a0
GetSecurityDescriptorControl 0x1800d7878
GetSecurityDescriptorDacl 0x1800d7858
GetSecurityDescriptorGroup 0x1800d7870
GetSecurityDescriptorLength 0x1800d78a8
GetSecurityDescriptorOwner 0x1800d7880
GetSecurityDescriptorSacl 0x1800d7848
GetSidIdentifierAuthority 0x1800d7840
GetSidLengthRequired 0x1800d7708
GetSidSubAuthority 0x1800d7710
GetSidSubAuthorityCount 0x1800d7838
GetTokenInformation 0x1800d7688
ImpersonateLoggedOnUser 0x1800d7720
InitializeAcl 0x1800d7898
InitializeSecurityDescriptor 0x1800d7890
InitializeSid 0x1800d7700
IsValidSid 0x1800d76d0
LookupPrivilegeValueW 0x1800d76f0
MakeAbsoluteSD 0x1800d7770
MakeSelfRelativeSD 0x1800d78b0
MapGenericMask 0x1800d77a0
OpenProcessToken 0x1800d76c8
OpenSCManagerW 0x1800d77c0
OpenServiceW 0x1800d77d0
OpenThreadToken 0x1800d7690
RegCloseKey 0x1800d7678
RegCreateKeyExW 0x1800d7810
RegDeleteKeyExW 0x1800d7768
RegDeleteTreeW 0x1800d7828
RegDeleteValueW 0x1800d77f0
RegEnumKeyExW 0x1800d7820
RegEnumValueW 0x1800d77f8
RegLoadKeyW 0x1800d77e0
RegOpenCurrentUser 0x1800d7808
RegOpenKeyExW 0x1800d7670
RegQueryInfoKeyW 0x1800d77e8
RegQueryValueExW 0x1800d7668
RegSetKeySecurity 0x1800d7778
RegSetKeyValueW 0x1800d7800
RegSetValueExW 0x1800d7758
RegUnLoadKeyW 0x1800d77d8
RevertToSelf 0x1800d7760
SetSecurityDescriptorDacl 0x1800d7850
SetSecurityDescriptorGroup 0x1800d78b8
SetSecurityDescriptorOwner 0x1800d7868
SetSecurityDescriptorSacl 0x1800d7798
SetThreadToken 0x1800d76c0
SetTokenInformation 0x1800d76e0
StartServiceW 0x1800d77c8
api-ms-win-crt-private-l1-1-0.dll 52
__C_specific_handler 0x1800d7f18
__CxxFrameHandler3 0x1800d7e60
__CxxFrameHandler4 0x1800d7f20
__RTDynamicCast 0x1800d7f28
__std_terminate 0x1800d7f10
__std_type_info_compare 0x1800d7ef8
_CxxThrowException 0x1800d7e68
_o___std_exception_copy 0x1800d7ee8
_o___std_exception_destroy 0x1800d7ee0
_o___std_type_info_destroy_list 0x1800d7ed8
_o___stdio_common_vsnprintf_s 0x1800d7ed0
_o___stdio_common_vswprintf 0x1800d7ec8
_o___stdio_common_vswprintf_s 0x1800d7ec0
_o__callnewh 0x1800d7eb8
_o__cexit 0x1800d7eb0
_o__configure_narrow_argv 0x1800d7e88
_o__crt_atexit 0x1800d7e80
_o__errno 0x1800d7e78
_o__execute_onexit_table 0x1800d7e70
_o__initialize_narrow_environment 0x1800d7ea8
_o__initialize_onexit_table 0x1800d7ea0
_o__invalid_parameter_noinfo 0x1800d7e98
_o__invalid_parameter_noinfo_noreturn 0x1800d7e90
_o__purecall 0x1800d7da0
_o__register_onexit_function 0x1800d7da8
_o__resetstkoflw 0x1800d7db0
_o__seh_filter_dll 0x1800d7db8
_o__stricmp 0x1800d7dc0
_o__wcsicmp 0x1800d7dc8
_o__wcslwr_s 0x1800d7dd0
_o__wcsnicmp 0x1800d7dd8
_o__wcsupr_s 0x1800d7de0
_o__wsplitpath_s 0x1800d7df0
_o__wtoi 0x1800d7df8
_o_calloc 0x1800d7e00
_o_free 0x1800d7e08
_o_iswalpha 0x1800d7e10
_o_iswdigit 0x1800d7e18
_o_iswspace 0x1800d7e20
_o_malloc 0x1800d7e28
_o_realloc 0x1800d7e30
_o_terminate 0x1800d7e38
_o_towupper 0x1800d7e40
_o_wcscpy_s 0x1800d7e48
_o_wcsncpy_s 0x1800d7e50
_o_wmemcpy_s 0x1800d7e58
memcmp 0x1800d7f30
memcpy 0x1800d7f38
memmove 0x1800d7de8
strchr 0x1800d7f00
strrchr 0x1800d7f08
wcschr 0x1800d7ef0
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800d7f50
_initterm_e 0x1800d7f48
api-ms-win-crt-string-l1-1-0.dll 2
memset 0x1800d7f60
wcsncmp 0x1800d7f68
APPVFILESYSTEMMETADATA.dll 1
0x1800d78c8
FLTLIB.DLL 2
FilterConnectCommunicationPort 0x1800d78e0
FilterSendMessage 0x1800d78d8
KERNEL32.dll 117
AcquireSRWLockExclusive 0x1800d7b58
AcquireSRWLockShared 0x1800d7b40
CheckNameLegalDOS8Dot3W 0x1800d7930
CloseHandle 0x1800d7bf0
CloseThreadpoolTimer 0x1800d79f8
CopyFileW 0x1800d79a8
CreateEventW 0x1800d7b70
CreateFileW 0x1800d7c78
CreateMutexExW 0x1800d7a20
CreateMutexW 0x1800d78f0
CreateProcessW 0x1800d7b98
CreateRemoteThread 0x1800d79b0
CreateSemaphoreExW 0x1800d79c8
CreateSemaphoreW 0x1800d7980
CreateThread 0x1800d7908
CreateThreadpoolTimer 0x1800d7a18
DebugBreak 0x1800d7918
DeleteCriticalSection 0x1800d7be0
DeleteFileW 0x1800d79a0
DisableThreadLibraryCalls 0x1800d7c28
DisconnectNamedPipe 0x1800d7958
DuplicateHandle 0x1800d7c30
EnterCriticalSection 0x1800d7c18
ExpandEnvironmentStringsW 0x1800d7c60
FindClose 0x1800d7c70
FindFirstFileW 0x1800d7c48
FindNextFileW 0x1800d7988
FormatMessageW 0x1800d79e8
FreeLibrary 0x1800d7a88
GetCurrentProcess 0x1800d7bd0
GetCurrentProcessId 0x1800d7ba0
GetCurrentThread 0x1800d7bb0
GetCurrentThreadId 0x1800d7c00
GetEnvironmentVariableW 0x1800d7b08
GetExitCodeProcess 0x1800d7b80
GetFileAttributesW 0x1800d7928
GetFinalPathNameByHandleW 0x1800d7998
GetLastError 0x1800d7bf8
GetLongPathNameW 0x1800d7c58
GetModuleFileNameA 0x1800d79c0
GetModuleHandleExW 0x1800d79d0
GetModuleHandleW 0x1800d7aa0
GetNativeSystemInfo 0x1800d79b8
GetOverlappedResult 0x1800d7968
GetProcAddress 0x1800d7a90
GetProcessHeap 0x1800d7b18
GetShortPathNameW 0x1800d7c68
GetSystemDirectoryW 0x1800d7c80
GetSystemTimeAsFileTime 0x1800d7ab0
GetTickCount 0x1800d7910
GetVersionExW 0x1800d7c38
GetVolumePathNameW 0x1800d7920
HeapAlloc 0x1800d7b20
HeapDestroy 0x1800d7b10
HeapFree 0x1800d7b28
HeapReAlloc 0x1800d7b30
HeapSize 0x1800d7b38
InitializeCriticalSection 0x1800d7c08
InitializeCriticalSectionAndSpinCount 0x1800d7a38
InitializeCriticalSectionEx 0x1800d79d8
InitializeSListHead 0x1800d7aa8
InitializeSRWLock 0x1800d7c20
IsDebuggerPresent 0x1800d7ae0
IsProcessorFeaturePresent 0x1800d7ac0
IsWow64Process 0x1800d7b88
LeaveCriticalSection 0x1800d7c10
LoadLibraryA 0x1800d7990
LoadLibraryW 0x1800d7a98
LocalFree 0x1800d7ba8
lstrcmpiW 0x1800d7b00
OpenProcess 0x1800d7bc0
OpenSemaphoreW 0x1800d7a08
OutputDebugStringW 0x1800d79f0
PeekNamedPipe 0x1800d7950
ProcessIdToSessionId 0x1800d7bb8
QueryDosDeviceW 0x1800d7bd8
QueryFullProcessImageNameW 0x1800d7c90
QueryPerformanceCounter 0x1800d7ab8
QueueUserWorkItem 0x1800d7960
RaiseException 0x1800d7be8
ReadFile 0x1800d7940
ReadProcessMemory 0x1800d7a58
ReleaseMutex 0x1800d78f8
ReleaseSemaphore 0x1800d7938
ReleaseSRWLockExclusive 0x1800d7b68
ReleaseSRWLockShared 0x1800d7b50
ResetEvent 0x1800d7b48
ResumeThread 0x1800d7a70
RtlCaptureContext 0x1800d7af8
RtlLookupFunctionEntry 0x1800d7af0
RtlVirtualUnwind 0x1800d7ae8
SearchPathW 0x1800d7c50
SetEvent 0x1800d7b60
SetLastError 0x1800d7a78
SetNamedPipeHandleState 0x1800d7948
SetThreadpoolTimer 0x1800d7a10
SetThreadPriority 0x1800d7900
SetUnhandledExceptionFilter 0x1800d7ad0
Sleep 0x1800d7c40
TerminateProcess 0x1800d7ac8
TransactNamedPipe 0x1800d7970
UnhandledExceptionFilter 0x1800d7ad8
VirtualAllocEx 0x1800d7a60
VirtualFreeEx 0x1800d7c88
VirtualProtect 0x1800d7a48
VirtualProtectEx 0x1800d7a68
VirtualQuery 0x1800d7a40
VirtualQueryEx 0x1800d7a50
WaitForMultipleObjects 0x1800d7b78
WaitForSingleObject 0x1800d7bc8
WaitForSingleObjectEx 0x1800d7a00
WaitForThreadpoolTimerCallbacks 0x1800d79e0
WaitNamedPipeW 0x1800d7978
WideCharToMultiByte 0x1800d7b90
Wow64DisableWow64FsRedirection 0x1800d7a28
Wow64RevertWow64FsRedirection 0x1800d7a30
WriteProcessMemory 0x1800d7a80
msvcp_win.dll 99
_Mbrtowc 0x1800d8158
_Wcscoll 0x1800d81a0
_Wcsxfrm 0x1800d81b0
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x1800d7fd8
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x1800d81e8
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ 0x1800d81b8
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ 0x1800d8118
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ 0x1800d7fc0
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x1800d8130
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ 0x1800d7fb8
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ 0x1800d7fc8
?_Incref@facet@locale@std@@UEAAXXZ 0x1800d7fd0
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x1800d8020
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800d8258
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x1800d8088
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ 0x1800d8178
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ 0x1800d80d8
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ 0x1800d8278
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x1800d80a8
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x1800d8250
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x1800d8080
?_Xbad_alloc@std@@YAXXZ 0x1800d8108
?_Xbad_function_call@std@@YAXXZ 0x1800d7f80
?_Xlength_error@std@@YAXPEBD@Z 0x1800d8110
?_Xout_of_range@std@@YAXPEBD@Z 0x1800d8148
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z 0x1800d7f78
??0_Locinfo@std@@QEAA@PEBD@Z 0x1800d7fa8
??0_Lockit@std@@QEAA@H@Z 0x1800d8128
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x1800d8288
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x1800d80c0
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x1800d8270
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x1800d80a0
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x1800d8008
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x1800d8100
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x1800d8170
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x1800d80e0
??0facet@locale@std@@IEAA@_K@Z 0x1800d7fe0
??1_Locinfo@std@@QEAA@XZ 0x1800d7fb0
??1_Lockit@std@@QEAA@XZ 0x1800d8120
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800d8268
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800d8098
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800d81f8
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800d8028
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800d8000
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800d80f8
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800d8260
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800d8090
??1facet@locale@std@@MEAA@XZ 0x1800d7fe8
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z 0x1800d7f90
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z 0x1800d7ff0
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z 0x1800d7ff8
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z 0x1800d8150
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z 0x1800d8200
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z 0x1800d7f98
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z 0x1800d7fa0
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z 0x1800d81c8
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z 0x1800d81d0
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z 0x1800d8208
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z 0x1800d8210
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z 0x1800d8040
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z 0x1800d8038
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z 0x1800d8030
??Bid@locale@std@@QEAA_KXZ 0x1800d81d8
?classic@locale@std@@SAAEBV12@XZ 0x1800d8018
?exceptions@ios_base@std@@QEAAXH@Z 0x1800d7f88
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ 0x1800d8180
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ 0x1800d80d0
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z 0x1800d8280
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z 0x1800d80b8
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ 0x1800d81f0
?id@?$collate@_W@std@@2V0locale@2@A 0x1800d81a8
?id@?$ctype@_W@std@@2V0locale@2@A 0x1800d8140
?id@?$numpunct@_W@std@@2V0locale@2@A 0x1800d8010
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z 0x1800d8218
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z 0x1800d8048
?is@?$ctype@_W@std@@QEBA_NF_W@Z 0x1800d8198
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z 0x1800d8228
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z 0x1800d8058
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z 0x1800d8188
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x1800d80c8
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x1800d81c0
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ 0x1800d8248
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x1800d8078
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z 0x1800d8168
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z 0x1800d80e8
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z 0x1800d8160
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z 0x1800d80f0
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ 0x1800d8220
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x1800d8050
?tolower@?$ctype@_W@std@@QEBA_W_W@Z 0x1800d8190
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z 0x1800d80b0
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ 0x1800d8240
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x1800d8070
?uncaught_exception@std@@YA_NXZ 0x1800d8138
?widen@?$ctype@_W@std@@QEBA_WD@Z 0x1800d81e0
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z 0x1800d8238
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x1800d8068
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z 0x1800d8230
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x1800d8060
ntdll.dll 4
NtOpenJobObject 0x1800d82a8
NtQueryInformationProcess 0x1800d82a0
RtlInitUnicodeString 0x1800d8298
RtlNtStatusToDosError 0x1800d82b0
ole32.dll 9
CLSIDFromString 0x1800d82e0
CoCreateGuid 0x1800d82d0
CoCreateInstance 0x1800d8300
CoInitializeEx 0x1800d82c0
CoSetProxyBlanket 0x1800d82f8
CoTaskMemFree 0x1800d82e8
CoUninitialize 0x1800d82f0
PropVariantClear 0x1800d82d8
StringFromCLSID 0x1800d82c8
OLEAUT32.dll 4
SysAllocString 0x1800d7cb8
SysFreeString 0x1800d7ca8
VariantClear 0x1800d7cb0
VariantInit 0x1800d7ca0
PSAPI.DLL 3
EnumProcessModulesEx 0x1800d7cd0
GetModuleFileNameExW 0x1800d7cd8
GetProcessImageFileNameW 0x1800d7cc8
RPCRT4.dll 10
NdrServerCall2 0x1800d7ce8
RpcBindingInqAuthClientW 0x1800d7d30
RpcImpersonateClient 0x1800d7d10
RpcRevertToSelf 0x1800d7d08
RpcRevertToSelfEx 0x1800d7cf0
RpcServerListen 0x1800d7d00
RpcServerRegisterAuthInfoW 0x1800d7cf8
RpcServerRegisterIf2 0x1800d7d18
RpcServerUnregisterIf 0x1800d7d20
RpcServerUseProtseqEpW 0x1800d7d28
SHELL32.dll 2
0x1800d7d48
SHGetKnownFolderPath 0x1800d7d40
SHLWAPI.dll 1
PathMatchSpecW 0x1800d7d58
USER32.dll 3
EnumWindows 0x1800d7d68
GetWindowThreadProcessId 0x1800d7d70
PostMessageW 0x1800d7d78
USERENV.dll 2
ExpandEnvironmentStringsForUserW 0x1800d7d88
UnloadUserProfile 0x1800d7d90