comsvcs.dll
Description: COM+ Services
Authors: © Microsoft Corporation. All rights reserved.
Version: 2001.12.10941.16384
Architecture: 32-bit
Operating System: Windows NT
SHA256: 5b57c93e8092fa4420360c7067e073a7
File Size: 1.3 MB
Uploaded At: Dec. 1, 2025, 7:54 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CosGetCallContext (Ordinal: 5, Address: 0x76670)
- (Ordinal: 6, Address: 0x44830)
- (Ordinal: 7, Address: 0x7dd50)
- CoCreateActivity (Ordinal: 8, Address: 0x7db40)
- CoEnterServiceDomain (Ordinal: 9, Address: 0x6e7f0)
- CoLeaveServiceDomain (Ordinal: 10, Address: 0x6e900)
- CoLoadServices (Ordinal: 11, Address: 0xae1d0)
- ComSvcsExceptionFilter (Ordinal: 12, Address: 0x68640)
- ComSvcsLogError (Ordinal: 13, Address: 0x720f0)
- DispManGetContext (Ordinal: 14, Address: 0x72e30)
- DllCanUnloadNow (Ordinal: 15, Address: 0x68720)
- DllGetClassObject (Ordinal: 16, Address: 0x3f0b0)
- DllRegisterServer (Ordinal: 17, Address: 0x44830)
- DllUnregisterServer (Ordinal: 18, Address: 0x44830)
- GetMTAThreadPoolMetrics (Ordinal: 19, Address: 0x687d0)
- GetManagedExtensions (Ordinal: 20, Address: 0x68850)
- GetObjectContext (Ordinal: 21, Address: 0x721e0)
- GetTrkSvrObject (Ordinal: 22, Address: 0x688e0)
- MTSCreateActivity (Ordinal: 23, Address: 0x7ddc0)
- MiniDumpW (Ordinal: 24, Address: 0x689d0)
- RecycleSurrogate (Ordinal: 25, Address: 0x72210)
- SafeRef (Ordinal: 26, Address: 0x72230)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CLSIDFromProgID (Address: 0x1011f19c)
- CLSIDFromString (Address: 0x1011f178)
- CoCreateFreeThreadedMarshaler (Address: 0x1011f180)
- CoCreateGuid (Address: 0x1011f1b0)
- CoCreateInstance (Address: 0x1011f184)
- CoCreateInstanceEx (Address: 0x1011f150)
- CoDisconnectObject (Address: 0x1011f168)
- CoFreeUnusedLibraries (Address: 0x1011f190)
- CoGetCallContext (Address: 0x1011f148)
- CoGetClassObject (Address: 0x1011f1ac)
- CoGetCurrentLogicalThreadId (Address: 0x1011f1c4)
- CoGetDefaultContext (Address: 0x1011f174)
- CoGetMarshalSizeMax (Address: 0x1011f1b8)
- CoGetObjectContext (Address: 0x1011f164)
- CoImpersonateClient (Address: 0x1011f15c)
- CoInitializeEx (Address: 0x1011f198)
- CoMarshalInterface (Address: 0x1011f1b4)
- CoReleaseMarshalData (Address: 0x1011f1a4)
- CoRevertToSelf (Address: 0x1011f14c)
- CoSetProxyBlanket (Address: 0x1011f16c)
- CoTaskMemAlloc (Address: 0x1011f1a8)
- CoTaskMemFree (Address: 0x1011f170)
- CoTaskMemRealloc (Address: 0x1011f158)
- CoUninitialize (Address: 0x1011f1a0)
- CoUnmarshalInterface (Address: 0x1011f188)
- CoWaitForMultipleHandles (Address: 0x1011f194)
- CreateStreamOnHGlobal (Address: 0x1011f1bc)
- GetHGlobalFromStream (Address: 0x1011f154)
- IIDFromString (Address: 0x1011f1c0)
- ProgIDFromCLSID (Address: 0x1011f17c)
- StringFromCLSID (Address: 0x1011f18c)
- StringFromGUID2 (Address: 0x1011f1c8)
- StringFromIID (Address: 0x1011f160)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- NdrProxyForwardingFunction10 (Address: 0x1011f208)
- NdrProxyForwardingFunction11 (Address: 0x1011f204)
- NdrProxyForwardingFunction12 (Address: 0x1011f210)
- NdrProxyForwardingFunction3 (Address: 0x1011f1fc)
- NdrProxyForwardingFunction4 (Address: 0x1011f238)
- NdrProxyForwardingFunction5 (Address: 0x1011f234)
- NdrProxyForwardingFunction6 (Address: 0x1011f248)
- NdrProxyForwardingFunction7 (Address: 0x1011f214)
- NdrProxyForwardingFunction8 (Address: 0x1011f200)
- NdrProxyForwardingFunction9 (Address: 0x1011f20c)
- ObjectStublessClient10 (Address: 0x1011f220)
- ObjectStublessClient11 (Address: 0x1011f258)
- ObjectStublessClient12 (Address: 0x1011f254)
- ObjectStublessClient13 (Address: 0x1011f244)
- ObjectStublessClient14 (Address: 0x1011f25c)
- ObjectStublessClient15 (Address: 0x1011f24c)
- ObjectStublessClient16 (Address: 0x1011f218)
- ObjectStublessClient17 (Address: 0x1011f228)
- ObjectStublessClient18 (Address: 0x1011f250)
- ObjectStublessClient19 (Address: 0x1011f23c)
- ObjectStublessClient20 (Address: 0x1011f1d0)
- ObjectStublessClient21 (Address: 0x1011f1e0)
- ObjectStublessClient22 (Address: 0x1011f1f0)
- ObjectStublessClient23 (Address: 0x1011f21c)
- ObjectStublessClient24 (Address: 0x1011f1f4)
- ObjectStublessClient25 (Address: 0x1011f1f8)
- ObjectStublessClient26 (Address: 0x1011f1d8)
- ObjectStublessClient27 (Address: 0x1011f1ec)
- ObjectStublessClient28 (Address: 0x1011f1e8)
- ObjectStublessClient3 (Address: 0x1011f1e4)
- ObjectStublessClient4 (Address: 0x1011f240)
- ObjectStublessClient5 (Address: 0x1011f1d4)
- ObjectStublessClient6 (Address: 0x1011f224)
- ObjectStublessClient7 (Address: 0x1011f1dc)
- ObjectStublessClient8 (Address: 0x1011f230)
- ObjectStublessClient9 (Address: 0x1011f22c)
api-ms-win-core-com-private-l1-1-0.dll
- CoDeactivateObject (Address: 0x1011f268)
- CoGetApartmentID (Address: 0x1011f274)
- CoGetProcessIdentifier (Address: 0x1011f27c)
- CoPopServiceDomain (Address: 0x1011f26c)
- CoPushServiceDomain (Address: 0x1011f270)
- CoReactivateObject (Address: 0x1011f278)
- CoRetireServer (Address: 0x1011f264)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1011f284)
- IsDebuggerPresent (Address: 0x1011f28c)
- OutputDebugStringA (Address: 0x1011f290)
- OutputDebugStringW (Address: 0x1011f288)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1011f298)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1011f2a0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1011f2b8)
- RaiseException (Address: 0x1011f2b0)
- SetLastError (Address: 0x1011f2b4)
- SetUnhandledExceptionFilter (Address: 0x1011f2ac)
- UnhandledExceptionFilter (Address: 0x1011f2a8)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1011f2f4)
- CreateDirectoryW (Address: 0x1011f2d0)
- CreateFileW (Address: 0x1011f2c8)
- DeleteFileW (Address: 0x1011f2f0)
- FindClose (Address: 0x1011f2e4)
- FindFirstFileW (Address: 0x1011f2d8)
- FindNextFileW (Address: 0x1011f2e0)
- GetDiskFreeSpaceExW (Address: 0x1011f2ec)
- GetDriveTypeW (Address: 0x1011f2c4)
- GetFileAttributesExW (Address: 0x1011f2d4)
- GetFileAttributesW (Address: 0x1011f2e8)
- GetLongPathNameW (Address: 0x1011f2dc)
- GetVolumeInformationW (Address: 0x1011f2f8)
- SetFileAttributesW (Address: 0x1011f2c0)
- SetFilePointer (Address: 0x1011f2fc)
- WriteFile (Address: 0x1011f2cc)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1011f304)
- DuplicateHandle (Address: 0x1011f308)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1011f31c)
- HeapAlloc (Address: 0x1011f318)
- HeapDestroy (Address: 0x1011f310)
- HeapFree (Address: 0x1011f314)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x1011f32c)
- GlobalFree (Address: 0x1011f324)
- LocalAlloc (Address: 0x1011f330)
- LocalFree (Address: 0x1011f328)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x1011f33c)
- GlobalUnlock (Address: 0x1011f338)
api-ms-win-core-io-l1-1-0.dll
- CreateIoCompletionPort (Address: 0x1011f344)
- DeviceIoControl (Address: 0x1011f350)
- GetQueuedCompletionStatus (Address: 0x1011f34c)
- PostQueuedCompletionStatus (Address: 0x1011f348)
api-ms-win-core-libraryloader-l1-2-0.dll
- FindResourceExW (Address: 0x1011f368)
- FreeLibrary (Address: 0x1011f380)
- FreeLibraryAndExitThread (Address: 0x1011f35c)
- GetModuleFileNameA (Address: 0x1011f374)
- GetModuleFileNameW (Address: 0x1011f360)
- GetModuleHandleExW (Address: 0x1011f358)
- GetModuleHandleW (Address: 0x1011f37c)
- GetProcAddress (Address: 0x1011f388)
- LoadLibraryExW (Address: 0x1011f378)
- LoadResource (Address: 0x1011f36c)
- LoadStringW (Address: 0x1011f370)
- LockResource (Address: 0x1011f384)
- SizeofResource (Address: 0x1011f364)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1011f394)
- GetThreadLocale (Address: 0x1011f390)
api-ms-win-core-memory-l1-1-0.dll
- VirtualAlloc (Address: 0x1011f39c)
- VirtualProtect (Address: 0x1011f3a0)
- VirtualQuery (Address: 0x1011f3a4)
api-ms-win-core-path-l1-1-0.dll
- PathCchRemoveExtension (Address: 0x1011f3b0)
- PathCchStripToRoot (Address: 0x1011f3ac)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1011f3b8)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1011f3f4)
- CreateProcessW (Address: 0x1011f3ec)
- CreateThread (Address: 0x1011f3cc)
- ExitProcess (Address: 0x1011f410)
- GetCurrentProcess (Address: 0x1011f3d8)
- GetCurrentProcessId (Address: 0x1011f3c4)
- GetCurrentThread (Address: 0x1011f3d4)
- GetCurrentThreadId (Address: 0x1011f3e8)
- GetExitCodeProcess (Address: 0x1011f3f0)
- GetExitCodeThread (Address: 0x1011f408)
- GetThreadPriority (Address: 0x1011f40c)
- OpenProcessToken (Address: 0x1011f3c0)
- OpenThreadToken (Address: 0x1011f404)
- SetThreadPriority (Address: 0x1011f3c8)
- SetThreadStackGuarantee (Address: 0x1011f3d0)
- SetThreadToken (Address: 0x1011f3dc)
- TerminateProcess (Address: 0x1011f3f8)
- TlsAlloc (Address: 0x1011f400)
- TlsFree (Address: 0x1011f3fc)
- TlsGetValue (Address: 0x1011f3e4)
- TlsSetValue (Address: 0x1011f3e0)
api-ms-win-core-processthreads-l1-1-1.dll
- OpenProcess (Address: 0x1011f418)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1011f424)
- QueryPerformanceFrequency (Address: 0x1011f420)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1011f434)
- RegCreateKeyExW (Address: 0x1011f43c)
- RegDeleteValueW (Address: 0x1011f444)
- RegEnumKeyExW (Address: 0x1011f44c)
- RegEnumValueW (Address: 0x1011f430)
- RegGetValueW (Address: 0x1011f454)
- RegNotifyChangeKeyValue (Address: 0x1011f448)
- RegOpenKeyExW (Address: 0x1011f438)
- RegQueryInfoKeyW (Address: 0x1011f42c)
- RegQueryValueExW (Address: 0x1011f440)
- RegSetValueExW (Address: 0x1011f450)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathRemoveFileSpecW (Address: 0x1011f460)
- PathStripPathW (Address: 0x1011f464)
- PathStripToRootW (Address: 0x1011f45c)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x1011f46c)
- CreateActCtxW (Address: 0x1011f478)
- DeactivateActCtx (Address: 0x1011f470)
- ReleaseActCtx (Address: 0x1011f474)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x1011f480)
- WideCharToMultiByte (Address: 0x1011f484)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x1011f490)
- CharPrevW (Address: 0x1011f48c)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1011f498)
- lstrcpynW (Address: 0x1011f49c)
- lstrcpyW (Address: 0x1011f4a0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1011f4bc)
- AcquireSRWLockShared (Address: 0x1011f4d0)
- CreateEventW (Address: 0x1011f4f8)
- CreateMutexExW (Address: 0x1011f4cc)
- CreateSemaphoreExW (Address: 0x1011f4ac)
- DeleteCriticalSection (Address: 0x1011f500)
- EnterCriticalSection (Address: 0x1011f4e4)
- InitializeCriticalSection (Address: 0x1011f4b0)
- InitializeCriticalSectionAndSpinCount (Address: 0x1011f4b8)
- InitializeCriticalSectionEx (Address: 0x1011f4fc)
- LeaveCriticalSection (Address: 0x1011f4b4)
- OpenEventW (Address: 0x1011f4dc)
- OpenSemaphoreW (Address: 0x1011f4c4)
- ReleaseMutex (Address: 0x1011f4d8)
- ReleaseSemaphore (Address: 0x1011f4f4)
- ReleaseSRWLockExclusive (Address: 0x1011f4e8)
- ReleaseSRWLockShared (Address: 0x1011f4c8)
- ResetEvent (Address: 0x1011f4a8)
- SetEvent (Address: 0x1011f4f0)
- SetWaitableTimerEx (Address: 0x1011f4ec)
- WaitForMultipleObjectsEx (Address: 0x1011f4d4)
- WaitForSingleObject (Address: 0x1011f4e0)
- WaitForSingleObjectEx (Address: 0x1011f4c0)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1011f508)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x1011f518)
- CreateWaitableTimerW (Address: 0x1011f514)
- WaitForMultipleObjects (Address: 0x1011f510)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x1011f52c)
- GetLocalTime (Address: 0x1011f530)
- GetSystemInfo (Address: 0x1011f524)
- GetSystemTimeAsFileTime (Address: 0x1011f534)
- GetSystemWindowsDirectoryW (Address: 0x1011f528)
- GetTickCount (Address: 0x1011f520)
- GetTickCount64 (Address: 0x1011f538)
- GlobalMemoryStatusEx (Address: 0x1011f53c)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1011f55c)
- CloseThreadpoolWork (Address: 0x1011f558)
- CreateThreadpoolTimer (Address: 0x1011f560)
- CreateThreadpoolWork (Address: 0x1011f548)
- SetThreadpoolTimer (Address: 0x1011f550)
- SubmitThreadpoolWork (Address: 0x1011f54c)
- WaitForThreadpoolTimerCallbacks (Address: 0x1011f544)
- WaitForThreadpoolWorkCallbacks (Address: 0x1011f554)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x1011f568)
api-ms-win-core-version-l1-1-0.dll
- VerQueryValueW (Address: 0x1011f570)
api-ms-win-eventing-consumer-l1-1-0.dll
- CloseTrace (Address: 0x1011f57c)
- OpenTraceW (Address: 0x1011f578)
- ProcessTrace (Address: 0x1011f580)
api-ms-win-eventing-controller-l1-1-0.dll
- ControlTraceW (Address: 0x1011f588)
- StartTraceW (Address: 0x1011f58c)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1011f598)
- AddAccessAllowedAce (Address: 0x1011f5c8)
- AddAccessAllowedAceEx (Address: 0x1011f5dc)
- AddAce (Address: 0x1011f5f8)
- AllocateAndInitializeSid (Address: 0x1011f5a8)
- CheckTokenMembership (Address: 0x1011f5cc)
- CopySid (Address: 0x1011f604)
- DeleteAce (Address: 0x1011f5ac)
- DuplicateTokenEx (Address: 0x1011f5c4)
- EqualSid (Address: 0x1011f5f4)
- FreeSid (Address: 0x1011f600)
- GetAce (Address: 0x1011f59c)
- GetAclInformation (Address: 0x1011f5ec)
- GetLengthSid (Address: 0x1011f60c)
- GetSecurityDescriptorDacl (Address: 0x1011f5d8)
- GetSecurityDescriptorLength (Address: 0x1011f5b8)
- GetSidIdentifierAuthority (Address: 0x1011f5fc)
- GetSidSubAuthority (Address: 0x1011f5e4)
- GetSidSubAuthorityCount (Address: 0x1011f5b4)
- GetTokenInformation (Address: 0x1011f608)
- ImpersonateSelf (Address: 0x1011f5e8)
- InitializeAcl (Address: 0x1011f594)
- InitializeSecurityDescriptor (Address: 0x1011f5a0)
- IsValidSecurityDescriptor (Address: 0x1011f5bc)
- IsValidSid (Address: 0x1011f5d4)
- RevertToSelf (Address: 0x1011f5f0)
- SetKernelObjectSecurity (Address: 0x1011f5c0)
- SetSecurityDescriptorControl (Address: 0x1011f5e0)
- SetSecurityDescriptorDacl (Address: 0x1011f5d0)
- SetSecurityDescriptorGroup (Address: 0x1011f5b0)
- SetSecurityDescriptorOwner (Address: 0x1011f5a4)
combase.dll
- (Address: 0x1011f614)
KERNEL32.dll
- ChangeTimerQueueTimer (Address: 0x1011f000)
- CreateTimerQueueTimer (Address: 0x1011f020)
- DeleteTimerQueueTimer (Address: 0x1011f01c)
- GetComputerNameW (Address: 0x1011f00c)
- GetCurrentPackageId (Address: 0x1011f024)
- MoveFileW (Address: 0x1011f010)
- QueueUserWorkItem (Address: 0x1011f018)
- RegisterWaitForSingleObject (Address: 0x1011f008)
- UnregisterWait (Address: 0x1011f014)
- UnregisterWaitEx (Address: 0x1011f004)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x1011f6e8)
- __dllonexit (Address: 0x1011f6a4)
- __doserrno (Address: 0x1011f668)
- _amsg_exit (Address: 0x1011f690)
- _beginthreadex (Address: 0x1011f654)
- _CIexp (Address: 0x1011f6d0)
- _CIsqrt (Address: 0x1011f6cc)
- _CxxThrowException (Address: 0x1011f688)
- _except_handler4_common (Address: 0x1011f698)
- _ftol2 (Address: 0x1011f6c8)
- _ftol2_sse (Address: 0x1011f6c4)
- _initterm (Address: 0x1011f694)
- _local_unwind4 (Address: 0x1011f6bc)
- _lock (Address: 0x1011f69c)
- _onexit (Address: 0x1011f6a8)
- _purecall (Address: 0x1011f6c0)
- _ultow (Address: 0x1011f6d4)
- _unlock (Address: 0x1011f6a0)
- _vsnprintf (Address: 0x1011f67c)
- _vsnprintf_s (Address: 0x1011f64c)
- _vsnwprintf (Address: 0x1011f624)
- _waccess (Address: 0x1011f630)
- _wcsdup (Address: 0x1011f63c)
- _wcsicmp (Address: 0x1011f6e4)
- _wcsupr (Address: 0x1011f66c)
- _wtoi (Address: 0x1011f6e0)
- _XcptFilter (Address: 0x1011f68c)
- ??0exception@@QAE@ABQBD@Z (Address: 0x1011f65c)
- ??0exception@@QAE@ABV0@@Z (Address: 0x1011f648)
- ??0exception@@QAE@XZ (Address: 0x1011f644)
- ??1exception@@UAE@XZ (Address: 0x1011f62c)
- ??1type_info@@UAE@XZ (Address: 0x1011f6ac)
- ?terminate@@YAXXZ (Address: 0x1011f6ec)
- ?what@exception@@UBEPBDXZ (Address: 0x1011f658)
- free (Address: 0x1011f674)
- iswalpha (Address: 0x1011f634)
- iswdigit (Address: 0x1011f680)
- malloc (Address: 0x1011f640)
- mbstowcs (Address: 0x1011f61c)
- memcmp (Address: 0x1011f6b8)
- memcpy (Address: 0x1011f6b4)
- memcpy_s (Address: 0x1011f620)
- memmove (Address: 0x1011f6b0)
- memmove_s (Address: 0x1011f664)
- memset (Address: 0x1011f6f0)
- realloc (Address: 0x1011f6dc)
- time (Address: 0x1011f650)
- wcscat_s (Address: 0x1011f6d8)
- wcschr (Address: 0x1011f678)
- wcscpy_s (Address: 0x1011f638)
- wcsrchr (Address: 0x1011f628)
- wcsstr (Address: 0x1011f660)
- wcstok_s (Address: 0x1011f670)
- wcstombs (Address: 0x1011f684)
ntdll.dll
- EtwGetTraceEnableFlags (Address: 0x1011f734)
- EtwGetTraceEnableLevel (Address: 0x1011f720)
- EtwGetTraceLoggerHandle (Address: 0x1011f72c)
- EtwLogTraceEvent (Address: 0x1011f754)
- EtwNotificationRegister (Address: 0x1011f748)
- EtwNotificationUnregister (Address: 0x1011f724)
- EtwRegisterTraceGuidsW (Address: 0x1011f71c)
- EtwTraceMessage (Address: 0x1011f730)
- EtwUnregisterTraceGuids (Address: 0x1011f738)
- NtQuerySystemInformation (Address: 0x1011f73c)
- RtlAllocateHeap (Address: 0x1011f70c)
- RtlCreateServiceSid (Address: 0x1011f74c)
- RtlDelete (Address: 0x1011f740)
- RtlDeleteCriticalSection (Address: 0x1011f6f8)
- RtlDllShutdownInProgress (Address: 0x1011f714)
- RtlExtendedLargeIntegerDivide (Address: 0x1011f744)
- RtlFreeHeap (Address: 0x1011f704)
- RtlImageNtHeader (Address: 0x1011f708)
- RtlInitializeCriticalSectionAndSpinCount (Address: 0x1011f6fc)
- RtlInitUnicodeString (Address: 0x1011f750)
- RtlLargeIntegerDivide (Address: 0x1011f758)
- RtlNtStatusToDosError (Address: 0x1011f75c)
- RtlReportException (Address: 0x1011f710)
- RtlSplay (Address: 0x1011f700)
- ShipAssertMsgA (Address: 0x1011f728)
- WinSqmSetDWORD (Address: 0x1011f718)
ole32.dll
- CoGetInterceptor (Address: 0x1011f778)
- CoGetObject (Address: 0x1011f774)
- CreateAntiMoniker (Address: 0x1011f764)
- CreateBindCtx (Address: 0x1011f77c)
- CreateGenericComposite (Address: 0x1011f76c)
- MkParseDisplayName (Address: 0x1011f788)
- MonikerCommonPrefixWith (Address: 0x1011f768)
- MonikerRelativePathTo (Address: 0x1011f770)
- OleLoadFromStream (Address: 0x1011f784)
- OleSaveToStream (Address: 0x1011f780)
OLEAUT32.dll
- BSTR_UserFree (Address: 0x1011f0ac)
- BSTR_UserMarshal (Address: 0x1011f048)
- BSTR_UserSize (Address: 0x1011f090)
- BSTR_UserUnmarshal (Address: 0x1011f088)
- CreateErrorInfo (Address: 0x1011f078)
- GetErrorInfo (Address: 0x1011f07c)
- LoadRegTypeLib (Address: 0x1011f04c)
- LoadTypeLib (Address: 0x1011f050)
- LPSAFEARRAY_UserFree (Address: 0x1011f0a0)
- LPSAFEARRAY_UserMarshal (Address: 0x1011f098)
- LPSAFEARRAY_UserSize (Address: 0x1011f0a4)
- LPSAFEARRAY_UserUnmarshal (Address: 0x1011f09c)
- SafeArrayAccessData (Address: 0x1011f030)
- SafeArrayCreate (Address: 0x1011f084)
- SafeArrayCreateVector (Address: 0x1011f02c)
- SafeArrayDestroy (Address: 0x1011f058)
- SafeArrayUnaccessData (Address: 0x1011f03c)
- SetErrorInfo (Address: 0x1011f074)
- SysAllocString (Address: 0x1011f038)
- SysAllocStringByteLen (Address: 0x1011f080)
- SysAllocStringLen (Address: 0x1011f068)
- SysFreeString (Address: 0x1011f08c)
- SysStringByteLen (Address: 0x1011f070)
- SysStringLen (Address: 0x1011f044)
- VARIANT_UserFree (Address: 0x1011f05c)
- VARIANT_UserMarshal (Address: 0x1011f094)
- VARIANT_UserSize (Address: 0x1011f064)
- VARIANT_UserUnmarshal (Address: 0x1011f060)
- VariantChangeType (Address: 0x1011f040)
- VariantClear (Address: 0x1011f034)
- VariantCopy (Address: 0x1011f0a8)
- VariantInit (Address: 0x1011f054)
- VarUI4FromStr (Address: 0x1011f06c)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1011f0f4)
- CStdStubBuffer_Connect (Address: 0x1011f128)
- CStdStubBuffer_CountRefs (Address: 0x1011f0fc)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1011f0b8)
- CStdStubBuffer_DebugServerRelease (Address: 0x1011f114)
- CStdStubBuffer_Disconnect (Address: 0x1011f118)
- CStdStubBuffer_Invoke (Address: 0x1011f0c4)
- CStdStubBuffer_IsIIDSupported (Address: 0x1011f124)
- CStdStubBuffer_QueryInterface (Address: 0x1011f100)
- I_RpcBindingInqLocalClientPID (Address: 0x1011f104)
- I_RpcBindingInqTransportType (Address: 0x1011f10c)
- I_RpcTurnOnEEInfoPropagation (Address: 0x1011f0ec)
- IUnknown_AddRef_Proxy (Address: 0x1011f0b4)
- IUnknown_QueryInterface_Proxy (Address: 0x1011f11c)
- IUnknown_Release_Proxy (Address: 0x1011f0f8)
- MesDecodeBufferHandleCreate (Address: 0x1011f0e8)
- MesEncodeDynBufferHandleCreate (Address: 0x1011f0e0)
- MesHandleFree (Address: 0x1011f0e4)
- NdrClientCall2 (Address: 0x1011f0bc)
- NdrCStdStubBuffer_Release (Address: 0x1011f140)
- NdrCStdStubBuffer2_Release (Address: 0x1011f0c8)
- NdrDllCanUnloadNow (Address: 0x1011f0c0)
- NdrDllGetClassObject (Address: 0x1011f0cc)
- NdrMesTypeDecode2 (Address: 0x1011f0d0)
- NdrMesTypeEncode2 (Address: 0x1011f0dc)
- NdrOleAllocate (Address: 0x1011f108)
- NdrOleFree (Address: 0x1011f0d4)
- NdrStubCall2 (Address: 0x1011f138)
- NdrStubForwardingFunction (Address: 0x1011f134)
- RpcStringFreeA (Address: 0x1011f120)
- RpcStringFreeW (Address: 0x1011f12c)
- UuidCreate (Address: 0x1011f110)
- UuidCreateSequential (Address: 0x1011f0d8)
- UuidFromStringW (Address: 0x1011f0f0)
- UuidToStringA (Address: 0x1011f13c)
- UuidToStringW (Address: 0x1011f130)