aepic.dll

Description: Application Experience Program Cache

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19645.1046

Architecture: 64-bit

Operating System: Windows NT

SHA256: 3c2cb83c4c234ed0a8e8f1d1da9b4cc7

File Size: 585.4 KB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • GetAppInventoryCore (Ordinal: 1, Address: 0x1d480)
  • GetPrivacyLevel (Ordinal: 2, Address: 0x8c60)
  • UpdateSoftwareInventoryTC2 (Ordinal: 3, Address: 0x1f770)
  • DllCanUnloadNow (Ordinal: 4, Address: 0x11390)
  • DllGetActivationFactory (Ordinal: 5, Address: 0x113c0)
  • PicAmiClose (Ordinal: 6, Address: 0x5f60)
  • PicAmiInitialize (Ordinal: 7, Address: 0xff30)
  • PicFreeFileInfo (Ordinal: 8, Address: 0xff40)
  • PicRetrieveFileInfo (Ordinal: 9, Address: 0xff90)
  • PicRetrieveFileInfoAppx (Ordinal: 10, Address: 0x10550)
  • PicRetrieveFileLastRunTime (Ordinal: 11, Address: 0x10720)
  • PicUpdateFileLastRunTime (Ordinal: 12, Address: 0x10810)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180061478)
  • CoCreateInstance (Address: 0x180061490)
  • CoGetApartmentType (Address: 0x180061498)
  • CoGetCallContext (Address: 0x180061468)
  • CoGetInterfaceAndReleaseStream (Address: 0x180061460)
  • CoInitializeEx (Address: 0x180061458)
  • CoMarshalInterface (Address: 0x180061470)
  • CoReleaseMarshalData (Address: 0x180061488)
  • CoTaskMemAlloc (Address: 0x1800614a0)
  • CoTaskMemFree (Address: 0x1800614b8)
  • CoUninitialize (Address: 0x1800614b0)
  • CoWaitForMultipleHandles (Address: 0x1800614a8)
  • CreateStreamOnHGlobal (Address: 0x180061480)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1800614c8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800614d8)
  • IsDebuggerPresent (Address: 0x1800614e8)
  • OutputDebugStringA (Address: 0x1800614e0)
  • OutputDebugStringW (Address: 0x1800614f0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180061500)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180061510)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180061528)
  • RaiseException (Address: 0x180061540)
  • SetLastError (Address: 0x180061538)
  • SetUnhandledExceptionFilter (Address: 0x180061520)
  • UnhandledExceptionFilter (Address: 0x180061530)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x180061588)
  • DeleteFileW (Address: 0x180061568)
  • FindClose (Address: 0x180061570)
  • FindFirstFileW (Address: 0x1800615b0)
  • FindNextFileW (Address: 0x1800615a8)
  • GetDriveTypeW (Address: 0x180061560)
  • GetFileAttributesW (Address: 0x180061598)
  • GetFileTime (Address: 0x180061558)
  • GetLogicalDriveStringsW (Address: 0x180061590)
  • GetLongPathNameW (Address: 0x180061578)
  • GetTempFileNameW (Address: 0x180061550)
  • GetVolumeInformationByHandleW (Address: 0x180061580)
  • QueryDosDeviceW (Address: 0x1800615b8)
  • WriteFile (Address: 0x1800615a0)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x1800615c8)
api-ms-win-core-file-l2-1-0.dll
  • MoveFileExW (Address: 0x1800615d8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800615e8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180061608)
  • HeapAlloc (Address: 0x180061610)
  • HeapFree (Address: 0x180061600)
  • HeapReAlloc (Address: 0x1800615f8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180061620)
  • LocalFree (Address: 0x180061628)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x180061638)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • VerifyVersionInfoW (Address: 0x180061648)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x180061698)
  • FreeLibraryAndExitThread (Address: 0x180061688)
  • GetModuleFileNameA (Address: 0x180061658)
  • GetModuleFileNameW (Address: 0x180061690)
  • GetModuleHandleExA (Address: 0x180061680)
  • GetModuleHandleExW (Address: 0x180061670)
  • GetModuleHandleW (Address: 0x180061668)
  • GetProcAddress (Address: 0x180061678)
  • LoadLibraryExW (Address: 0x180061660)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1800616a8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800616b8)
  • LocaleNameToLCID (Address: 0x1800616c0)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x1800616e0)
  • PathCchCanonicalizeEx (Address: 0x1800616d0)
  • PathCchRemoveFileSpec (Address: 0x1800616d8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800616f0)
  • GetCommandLineW (Address: 0x1800616f8)
  • GetCurrentDirectoryW (Address: 0x180061700)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x180061760)
  • GetCurrentProcess (Address: 0x180061740)
  • GetCurrentProcessId (Address: 0x180061750)
  • GetCurrentThread (Address: 0x180061770)
  • GetCurrentThreadId (Address: 0x180061720)
  • GetThreadPriority (Address: 0x180061730)
  • OpenProcessToken (Address: 0x180061728)
  • ResumeThread (Address: 0x180061738)
  • SetThreadPriority (Address: 0x180061718)
  • TerminateProcess (Address: 0x180061748)
  • TlsAlloc (Address: 0x180061768)
  • TlsGetValue (Address: 0x180061710)
  • TlsSetValue (Address: 0x180061758)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x180061780)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180061790)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryThreadCycleTime (Address: 0x1800617a0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180061820)
  • RegCreateKeyExW (Address: 0x1800617e8)
  • RegDeleteKeyExW (Address: 0x180061828)
  • RegDeleteTreeW (Address: 0x1800617f8)
  • RegDeleteValueW (Address: 0x180061800)
  • RegEnumKeyExW (Address: 0x1800617b8)
  • RegFlushKey (Address: 0x1800617d0)
  • RegGetValueW (Address: 0x180061810)
  • RegLoadAppKeyW (Address: 0x180061808)
  • RegLoadKeyW (Address: 0x1800617c8)
  • RegOpenKeyExW (Address: 0x1800617f0)
  • RegQueryInfoKeyW (Address: 0x1800617b0)
  • RegSaveKeyExW (Address: 0x1800617d8)
  • RegSetKeySecurity (Address: 0x1800617c0)
  • RegSetValueExW (Address: 0x180061818)
  • RegUnLoadKeyW (Address: 0x1800617e0)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x180061838)
  • RegSetKeyValueW (Address: 0x180061840)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x180061858)
  • RegOpenKeyW (Address: 0x180061850)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x180061870)
  • PathUnExpandEnvStringsW (Address: 0x180061868)
api-ms-win-core-sidebyside-l1-1-0.dll
  • CreateActCtxW (Address: 0x180061890)
  • QueryActCtxW (Address: 0x180061888)
  • ReleaseActCtx (Address: 0x180061880)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeW (Address: 0x1800618a8)
  • MultiByteToWideChar (Address: 0x1800618b0)
  • WideCharToMultiByte (Address: 0x1800618a0)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x1800618c0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800618d8)
  • AcquireSRWLockShared (Address: 0x180061908)
  • CreateEventExW (Address: 0x180061960)
  • CreateEventW (Address: 0x180061930)
  • CreateMutexExW (Address: 0x180061910)
  • CreateMutexW (Address: 0x180061958)
  • CreateSemaphoreExW (Address: 0x180061920)
  • DeleteCriticalSection (Address: 0x180061970)
  • EnterCriticalSection (Address: 0x180061948)
  • InitializeCriticalSectionEx (Address: 0x180061968)
  • InitializeSRWLock (Address: 0x180061918)
  • LeaveCriticalSection (Address: 0x180061940)
  • OpenSemaphoreW (Address: 0x180061978)
  • OpenWaitableTimerW (Address: 0x1800618e0)
  • ReleaseMutex (Address: 0x1800618f0)
  • ReleaseSemaphore (Address: 0x180061928)
  • ReleaseSRWLockExclusive (Address: 0x180061900)
  • ReleaseSRWLockShared (Address: 0x1800618f8)
  • SetEvent (Address: 0x1800618d0)
  • SetWaitableTimer (Address: 0x180061950)
  • WaitForSingleObject (Address: 0x1800618e8)
  • WaitForSingleObjectEx (Address: 0x180061938)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800619a0)
  • InitOnceComplete (Address: 0x1800619b0)
  • InitOnceExecuteOnce (Address: 0x180061998)
  • Sleep (Address: 0x1800619a8)
  • SleepConditionVariableSRW (Address: 0x180061990)
  • WakeAllConditionVariable (Address: 0x180061988)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x1800619c8)
  • CreateWaitableTimerW (Address: 0x1800619d0)
  • WaitForMultipleObjects (Address: 0x1800619c0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x180061a00)
  • GetSystemInfo (Address: 0x1800619f8)
  • GetSystemTimeAsFileTime (Address: 0x180061a08)
  • GetSystemWindowsDirectoryW (Address: 0x1800619e8)
  • GetTickCount (Address: 0x1800619f0)
  • GetTickCount64 (Address: 0x1800619e0)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetSystemFirmwareTable (Address: 0x180061a18)
api-ms-win-core-threadpool-l1-2-0.dll
  • CallbackMayRunLong (Address: 0x180061a48)
  • CloseThreadpoolTimer (Address: 0x180061a28)
  • CreateThreadpoolTimer (Address: 0x180061a58)
  • FreeLibraryWhenCallbackReturns (Address: 0x180061a40)
  • SetThreadpoolTimer (Address: 0x180061a38)
  • TrySubmitThreadpoolCallback (Address: 0x180061a50)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180061a30)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x180061a68)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180061a78)
  • EncodePointer (Address: 0x180061a80)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180061a90)
  • RoOriginateError (Address: 0x180061ab0)
  • RoOriginateErrorW (Address: 0x180061a98)
  • RoTransformError (Address: 0x180061aa8)
  • SetRestrictedErrorInfo (Address: 0x180061aa0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x180061ac0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x180061ac8)
  • RoReportFailedDelegate (Address: 0x180061ad0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x180061ae0)
  • RoGetActivationFactory (Address: 0x180061af0)
  • RoInitialize (Address: 0x180061af8)
  • RoUninitialize (Address: 0x180061ae8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x180061b30)
  • WindowsCreateStringReference (Address: 0x180061b08)
  • WindowsDeleteString (Address: 0x180061b18)
  • WindowsDuplicateString (Address: 0x180061b10)
  • WindowsGetStringRawBuffer (Address: 0x180061b38)
  • WindowsIsStringEmpty (Address: 0x180061b20)
  • WindowsStringHasEmbeddedNull (Address: 0x180061b28)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceEvent (Address: 0x180061b48)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180061b68)
  • EventSetInformation (Address: 0x180061b58)
  • EventUnregister (Address: 0x180061b60)
  • EventWriteTransfer (Address: 0x180061b70)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x180061b90)
  • GetTokenInformation (Address: 0x180061b98)
  • InitializeSecurityDescriptor (Address: 0x180061b88)
  • SetSecurityDescriptorDacl (Address: 0x180061b80)
  • SetSecurityDescriptorOwner (Address: 0x180061ba0)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x180061bb0)
api-ms-win-security-cryptoapi-l1-1-0.dll
  • CryptAcquireContextW (Address: 0x180061be0)
  • CryptCreateHash (Address: 0x180061be8)
  • CryptDestroyHash (Address: 0x180061bc8)
  • CryptGetHashParam (Address: 0x180061bd0)
  • CryptHashData (Address: 0x180061bd8)
  • CryptReleaseContext (Address: 0x180061bc0)
api-ms-win-security-provider-l1-1-0.dll
  • SetEntriesInAclW (Address: 0x180061bf8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x180061c08)
api-ms-win-shcore-obsolete-l1-1-0.dll
  • CommandLineToArgvW (Address: 0x180061c18)
api-ms-win-shcore-thread-l1-1-0.dll
  • GetProcessReference (Address: 0x180061c40)
  • SetProcessReference (Address: 0x180061c38)
  • SHGetThreadRef (Address: 0x180061c50)
  • SHSetThreadRef (Address: 0x180061c48)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x180061c78)
  • BCryptCreateHash (Address: 0x180061c68)
  • BCryptDestroyHash (Address: 0x180061c80)
  • BCryptFinishHash (Address: 0x180061c90)
  • BCryptGetProperty (Address: 0x180061c60)
  • BCryptHashData (Address: 0x180061c70)
  • BCryptOpenAlgorithmProvider (Address: 0x180061c88)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x180061d08)
  • ___lc_collate_cp_func (Address: 0x180061ce8)
  • ___lc_handle_func (Address: 0x180061d10)
  • ___mb_cur_max_func (Address: 0x180061d18)
  • __C_specific_handler (Address: 0x180061e08)
  • __crtCompareStringW (Address: 0x180061cb8)
  • __crtLCMapStringW (Address: 0x180061ca0)
  • __CxxFrameHandler3 (Address: 0x180061d40)
  • __dllonexit (Address: 0x180061d78)
  • __pctype_func (Address: 0x180061cf8)
  • _amsg_exit (Address: 0x180061db0)
  • _CxxThrowException (Address: 0x180061de0)
  • _errno (Address: 0x180061e38)
  • _initterm (Address: 0x180061d98)
  • _ismbblead (Address: 0x180061d00)
  • _lock (Address: 0x180061d88)
  • _onexit (Address: 0x180061d70)
  • _purecall (Address: 0x180061ea0)
  • _set_errno (Address: 0x180061e28)
  • _unlock (Address: 0x180061d80)
  • _vscwprintf (Address: 0x180061de8)
  • _vsnprintf (Address: 0x180061ec0)
  • _vsnprintf_s (Address: 0x180061e78)
  • _vsnwprintf (Address: 0x180061eb8)
  • _vsnwprintf_s (Address: 0x180061e10)
  • _wcsdup (Address: 0x180061cc8)
  • _wcsicmp (Address: 0x180061e70)
  • _wcslwr (Address: 0x180061cb0)
  • _wcsnicmp (Address: 0x180061ed0)
  • _wsetlocale (Address: 0x180061d30)
  • _wsplitpath_s (Address: 0x180061d48)
  • _wtoi (Address: 0x180061d28)
  • _wtoi64 (Address: 0x180061eb0)
  • _XcptFilter (Address: 0x180061db8)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x180061dd0)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x180061da8)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180061e00)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180061df0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180061e88)
  • ??0exception@@QEAA@XZ (Address: 0x180061e90)
  • ??1bad_cast@@UEAA@XZ (Address: 0x180061dc8)
  • ??1exception@@UEAA@XZ (Address: 0x180061e98)
  • ??1type_info@@UEAA@XZ (Address: 0x180061d68)
  • ?terminate@@YAXXZ (Address: 0x180061d90)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x180061e18)
  • abort (Address: 0x180061cd8)
  • calloc (Address: 0x180061cf0)
  • free (Address: 0x180061e58)
  • iscntrl (Address: 0x180061cc0)
  • isspace (Address: 0x180061d60)
  • malloc (Address: 0x180061e60)
  • memcmp (Address: 0x180061ce0)
  • memcpy (Address: 0x180061dd8)
  • memcpy_s (Address: 0x180061ea8)
  • memmove (Address: 0x180061dc0)
  • memmove_s (Address: 0x180061e68)
  • memset (Address: 0x180061cd0)
  • realloc (Address: 0x180061e50)
  • setlocale (Address: 0x180061d38)
  • sprintf_s (Address: 0x180061e48)
  • strchr (Address: 0x180061e20)
  • strcpy_s (Address: 0x180061ec8)
  • strncmp (Address: 0x180061e80)
  • strncpy_s (Address: 0x180061e40)
  • strnlen (Address: 0x180061d58)
  • strtol (Address: 0x180061e30)
  • tolower (Address: 0x180061df8)
  • towlower (Address: 0x180061d20)
  • wcscat_s (Address: 0x180061ef0)
  • wcschr (Address: 0x180061ed8)
  • wcscmp (Address: 0x180061ef8)
  • wcscpy_s (Address: 0x180061ee8)
  • wcsrchr (Address: 0x180061ee0)
  • wcsstr (Address: 0x180061ca8)
  • wcstombs (Address: 0x180061da0)
  • wcstoul (Address: 0x180061d50)
ntdll.dll
  • EtwEventRegister (Address: 0x180061fc0)
  • EtwEventUnregister (Address: 0x180061fd0)
  • EtwEventWrite (Address: 0x180061fc8)
  • EtwTraceMessage (Address: 0x1800620c8)
  • LdrResSearchResource (Address: 0x180061f70)
  • NtLoadKeyEx (Address: 0x180061f18)
  • NtQueryKey (Address: 0x180061f38)
  • NtQueryLicenseValue (Address: 0x180061fd8)
  • RtlAdjustPrivilege (Address: 0x180061f58)
  • RtlAllocateAndInitializeSid (Address: 0x180061f48)
  • RtlAllocateHeap (Address: 0x1800620b0)
  • RtlAnsiStringToUnicodeString (Address: 0x180061fa8)
  • RtlAppendUnicodeStringToString (Address: 0x180062000)
  • RtlAppendUnicodeToString (Address: 0x180061ff8)
  • RtlCaptureContext (Address: 0x180062098)
  • RtlDeleteCriticalSection (Address: 0x180062078)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180062038)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x180061f20)
  • RtlEnterCriticalSection (Address: 0x180062068)
  • RtlEqualString (Address: 0x180062070)
  • RtlFreeHeap (Address: 0x1800620a0)
  • RtlFreeSid (Address: 0x180061f40)
  • RtlFreeUnicodeString (Address: 0x180062028)
  • RtlGetNativeSystemInformation (Address: 0x180061f98)
  • RtlGetVersion (Address: 0x180061f08)
  • RtlImageDirectoryEntryToData (Address: 0x180061f60)
  • RtlInitAnsiString (Address: 0x180062060)
  • RtlInitializeCriticalSection (Address: 0x180062050)
  • RtlInitString (Address: 0x180061fb8)
  • RtlInitUnicodeString (Address: 0x180062030)
  • RtlInitUnicodeStringEx (Address: 0x180062010)
  • RtlLeaveCriticalSection (Address: 0x180062048)
  • RtlLookupFunctionEntry (Address: 0x180062090)
  • RtlMultiByteToUnicodeN (Address: 0x180062058)
  • RtlNtStatusToDosError (Address: 0x180061f50)
  • RtlRandomEx (Address: 0x180061f30)
  • RtlReAllocateHeap (Address: 0x1800620a8)
  • RtlReleaseRelativeName (Address: 0x180061f10)
  • RtlSecondsSince1970ToTime (Address: 0x180062080)
  • RtlStringFromGUID (Address: 0x180061f28)
  • RtlTimeToTimeFields (Address: 0x180061f78)
  • RtlUpcaseUnicodeChar (Address: 0x180061fa0)
  • RtlVerifyVersionInfo (Address: 0x180061f68)
  • RtlVirtualUnwind (Address: 0x180062088)
  • RtlxAnsiStringToUnicodeSize (Address: 0x180061fb0)
  • VerSetConditionMask (Address: 0x1800620c0)
  • WinSqmIsOptedInEx (Address: 0x1800620b8)
  • ZwClose (Address: 0x180062040)
  • ZwCreateFile (Address: 0x180061ff0)
  • ZwCreateSection (Address: 0x180061fe0)
  • ZwEnumerateKey (Address: 0x180062018)
  • ZwMapViewOfSection (Address: 0x180061f80)
  • ZwOpenKey (Address: 0x180062020)
  • ZwQueryInformationFile (Address: 0x180061fe8)
  • ZwQuerySystemInformation (Address: 0x180061f90)
  • ZwQueryValueKey (Address: 0x180062008)
  • ZwUnmapViewOfSection (Address: 0x180061f88)
OLEAUT32.dll
  • SysAllocString (Address: 0x180061438)
  • SysFreeString (Address: 0x180061418)
  • VariantChangeType (Address: 0x180061420)
  • VariantClear (Address: 0x180061428)
  • VariantCopy (Address: 0x180061430)
  • VariantInit (Address: 0x180061410)
RPCRT4.dll
  • UuidCreate (Address: 0x180061448)