comsvcs.dll

Description: COM+ Services

Authors: © Microsoft Corporation. All rights reserved.

Version: 2001.12.10941.16384

Architecture: 32-bit

Operating System: Windows NT

SHA256: 5b57c93e8092fa4420360c7067e073a7

File Size: 1.3 MB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CosGetCallContext (Ordinal: 5, Address: 0x76670)
  • (Ordinal: 6, Address: 0x44830)
  • (Ordinal: 7, Address: 0x7dd50)
  • CoCreateActivity (Ordinal: 8, Address: 0x7db40)
  • CoEnterServiceDomain (Ordinal: 9, Address: 0x6e7f0)
  • CoLeaveServiceDomain (Ordinal: 10, Address: 0x6e900)
  • CoLoadServices (Ordinal: 11, Address: 0xae1d0)
  • ComSvcsExceptionFilter (Ordinal: 12, Address: 0x68640)
  • ComSvcsLogError (Ordinal: 13, Address: 0x720f0)
  • DispManGetContext (Ordinal: 14, Address: 0x72e30)
  • DllCanUnloadNow (Ordinal: 15, Address: 0x68720)
  • DllGetClassObject (Ordinal: 16, Address: 0x3f0b0)
  • DllRegisterServer (Ordinal: 17, Address: 0x44830)
  • DllUnregisterServer (Ordinal: 18, Address: 0x44830)
  • GetMTAThreadPoolMetrics (Ordinal: 19, Address: 0x687d0)
  • GetManagedExtensions (Ordinal: 20, Address: 0x68850)
  • GetObjectContext (Ordinal: 21, Address: 0x721e0)
  • GetTrkSvrObject (Ordinal: 22, Address: 0x688e0)
  • MTSCreateActivity (Ordinal: 23, Address: 0x7ddc0)
  • MiniDumpW (Ordinal: 24, Address: 0x689d0)
  • RecycleSurrogate (Ordinal: 25, Address: 0x72210)
  • SafeRef (Ordinal: 26, Address: 0x72230)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromProgID (Address: 0x1011f19c)
  • CLSIDFromString (Address: 0x1011f178)
  • CoCreateFreeThreadedMarshaler (Address: 0x1011f180)
  • CoCreateGuid (Address: 0x1011f1b0)
  • CoCreateInstance (Address: 0x1011f184)
  • CoCreateInstanceEx (Address: 0x1011f150)
  • CoDisconnectObject (Address: 0x1011f168)
  • CoFreeUnusedLibraries (Address: 0x1011f190)
  • CoGetCallContext (Address: 0x1011f148)
  • CoGetClassObject (Address: 0x1011f1ac)
  • CoGetCurrentLogicalThreadId (Address: 0x1011f1c4)
  • CoGetDefaultContext (Address: 0x1011f174)
  • CoGetMarshalSizeMax (Address: 0x1011f1b8)
  • CoGetObjectContext (Address: 0x1011f164)
  • CoImpersonateClient (Address: 0x1011f15c)
  • CoInitializeEx (Address: 0x1011f198)
  • CoMarshalInterface (Address: 0x1011f1b4)
  • CoReleaseMarshalData (Address: 0x1011f1a4)
  • CoRevertToSelf (Address: 0x1011f14c)
  • CoSetProxyBlanket (Address: 0x1011f16c)
  • CoTaskMemAlloc (Address: 0x1011f1a8)
  • CoTaskMemFree (Address: 0x1011f170)
  • CoTaskMemRealloc (Address: 0x1011f158)
  • CoUninitialize (Address: 0x1011f1a0)
  • CoUnmarshalInterface (Address: 0x1011f188)
  • CoWaitForMultipleHandles (Address: 0x1011f194)
  • CreateStreamOnHGlobal (Address: 0x1011f1bc)
  • GetHGlobalFromStream (Address: 0x1011f154)
  • IIDFromString (Address: 0x1011f1c0)
  • ProgIDFromCLSID (Address: 0x1011f17c)
  • StringFromCLSID (Address: 0x1011f18c)
  • StringFromGUID2 (Address: 0x1011f1c8)
  • StringFromIID (Address: 0x1011f160)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • NdrProxyForwardingFunction10 (Address: 0x1011f208)
  • NdrProxyForwardingFunction11 (Address: 0x1011f204)
  • NdrProxyForwardingFunction12 (Address: 0x1011f210)
  • NdrProxyForwardingFunction3 (Address: 0x1011f1fc)
  • NdrProxyForwardingFunction4 (Address: 0x1011f238)
  • NdrProxyForwardingFunction5 (Address: 0x1011f234)
  • NdrProxyForwardingFunction6 (Address: 0x1011f248)
  • NdrProxyForwardingFunction7 (Address: 0x1011f214)
  • NdrProxyForwardingFunction8 (Address: 0x1011f200)
  • NdrProxyForwardingFunction9 (Address: 0x1011f20c)
  • ObjectStublessClient10 (Address: 0x1011f220)
  • ObjectStublessClient11 (Address: 0x1011f258)
  • ObjectStublessClient12 (Address: 0x1011f254)
  • ObjectStublessClient13 (Address: 0x1011f244)
  • ObjectStublessClient14 (Address: 0x1011f25c)
  • ObjectStublessClient15 (Address: 0x1011f24c)
  • ObjectStublessClient16 (Address: 0x1011f218)
  • ObjectStublessClient17 (Address: 0x1011f228)
  • ObjectStublessClient18 (Address: 0x1011f250)
  • ObjectStublessClient19 (Address: 0x1011f23c)
  • ObjectStublessClient20 (Address: 0x1011f1d0)
  • ObjectStublessClient21 (Address: 0x1011f1e0)
  • ObjectStublessClient22 (Address: 0x1011f1f0)
  • ObjectStublessClient23 (Address: 0x1011f21c)
  • ObjectStublessClient24 (Address: 0x1011f1f4)
  • ObjectStublessClient25 (Address: 0x1011f1f8)
  • ObjectStublessClient26 (Address: 0x1011f1d8)
  • ObjectStublessClient27 (Address: 0x1011f1ec)
  • ObjectStublessClient28 (Address: 0x1011f1e8)
  • ObjectStublessClient3 (Address: 0x1011f1e4)
  • ObjectStublessClient4 (Address: 0x1011f240)
  • ObjectStublessClient5 (Address: 0x1011f1d4)
  • ObjectStublessClient6 (Address: 0x1011f224)
  • ObjectStublessClient7 (Address: 0x1011f1dc)
  • ObjectStublessClient8 (Address: 0x1011f230)
  • ObjectStublessClient9 (Address: 0x1011f22c)
api-ms-win-core-com-private-l1-1-0.dll
  • CoDeactivateObject (Address: 0x1011f268)
  • CoGetApartmentID (Address: 0x1011f274)
  • CoGetProcessIdentifier (Address: 0x1011f27c)
  • CoPopServiceDomain (Address: 0x1011f26c)
  • CoPushServiceDomain (Address: 0x1011f270)
  • CoReactivateObject (Address: 0x1011f278)
  • CoRetireServer (Address: 0x1011f264)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1011f284)
  • IsDebuggerPresent (Address: 0x1011f28c)
  • OutputDebugStringA (Address: 0x1011f290)
  • OutputDebugStringW (Address: 0x1011f288)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1011f298)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1011f2a0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1011f2b8)
  • RaiseException (Address: 0x1011f2b0)
  • SetLastError (Address: 0x1011f2b4)
  • SetUnhandledExceptionFilter (Address: 0x1011f2ac)
  • UnhandledExceptionFilter (Address: 0x1011f2a8)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x1011f2f4)
  • CreateDirectoryW (Address: 0x1011f2d0)
  • CreateFileW (Address: 0x1011f2c8)
  • DeleteFileW (Address: 0x1011f2f0)
  • FindClose (Address: 0x1011f2e4)
  • FindFirstFileW (Address: 0x1011f2d8)
  • FindNextFileW (Address: 0x1011f2e0)
  • GetDiskFreeSpaceExW (Address: 0x1011f2ec)
  • GetDriveTypeW (Address: 0x1011f2c4)
  • GetFileAttributesExW (Address: 0x1011f2d4)
  • GetFileAttributesW (Address: 0x1011f2e8)
  • GetLongPathNameW (Address: 0x1011f2dc)
  • GetVolumeInformationW (Address: 0x1011f2f8)
  • SetFileAttributesW (Address: 0x1011f2c0)
  • SetFilePointer (Address: 0x1011f2fc)
  • WriteFile (Address: 0x1011f2cc)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1011f304)
  • DuplicateHandle (Address: 0x1011f308)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1011f31c)
  • HeapAlloc (Address: 0x1011f318)
  • HeapDestroy (Address: 0x1011f310)
  • HeapFree (Address: 0x1011f314)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalAlloc (Address: 0x1011f32c)
  • GlobalFree (Address: 0x1011f324)
  • LocalAlloc (Address: 0x1011f330)
  • LocalFree (Address: 0x1011f328)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • GlobalLock (Address: 0x1011f33c)
  • GlobalUnlock (Address: 0x1011f338)
api-ms-win-core-io-l1-1-0.dll
  • CreateIoCompletionPort (Address: 0x1011f344)
  • DeviceIoControl (Address: 0x1011f350)
  • GetQueuedCompletionStatus (Address: 0x1011f34c)
  • PostQueuedCompletionStatus (Address: 0x1011f348)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x1011f368)
  • FreeLibrary (Address: 0x1011f380)
  • FreeLibraryAndExitThread (Address: 0x1011f35c)
  • GetModuleFileNameA (Address: 0x1011f374)
  • GetModuleFileNameW (Address: 0x1011f360)
  • GetModuleHandleExW (Address: 0x1011f358)
  • GetModuleHandleW (Address: 0x1011f37c)
  • GetProcAddress (Address: 0x1011f388)
  • LoadLibraryExW (Address: 0x1011f378)
  • LoadResource (Address: 0x1011f36c)
  • LoadStringW (Address: 0x1011f370)
  • LockResource (Address: 0x1011f384)
  • SizeofResource (Address: 0x1011f364)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1011f394)
  • GetThreadLocale (Address: 0x1011f390)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x1011f39c)
  • VirtualProtect (Address: 0x1011f3a0)
  • VirtualQuery (Address: 0x1011f3a4)
api-ms-win-core-path-l1-1-0.dll
  • PathCchRemoveExtension (Address: 0x1011f3b0)
  • PathCchStripToRoot (Address: 0x1011f3ac)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1011f3b8)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessAsUserW (Address: 0x1011f3f4)
  • CreateProcessW (Address: 0x1011f3ec)
  • CreateThread (Address: 0x1011f3cc)
  • ExitProcess (Address: 0x1011f410)
  • GetCurrentProcess (Address: 0x1011f3d8)
  • GetCurrentProcessId (Address: 0x1011f3c4)
  • GetCurrentThread (Address: 0x1011f3d4)
  • GetCurrentThreadId (Address: 0x1011f3e8)
  • GetExitCodeProcess (Address: 0x1011f3f0)
  • GetExitCodeThread (Address: 0x1011f408)
  • GetThreadPriority (Address: 0x1011f40c)
  • OpenProcessToken (Address: 0x1011f3c0)
  • OpenThreadToken (Address: 0x1011f404)
  • SetThreadPriority (Address: 0x1011f3c8)
  • SetThreadStackGuarantee (Address: 0x1011f3d0)
  • SetThreadToken (Address: 0x1011f3dc)
  • TerminateProcess (Address: 0x1011f3f8)
  • TlsAlloc (Address: 0x1011f400)
  • TlsFree (Address: 0x1011f3fc)
  • TlsGetValue (Address: 0x1011f3e4)
  • TlsSetValue (Address: 0x1011f3e0)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1011f418)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1011f424)
  • QueryPerformanceFrequency (Address: 0x1011f420)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1011f434)
  • RegCreateKeyExW (Address: 0x1011f43c)
  • RegDeleteValueW (Address: 0x1011f444)
  • RegEnumKeyExW (Address: 0x1011f44c)
  • RegEnumValueW (Address: 0x1011f430)
  • RegGetValueW (Address: 0x1011f454)
  • RegNotifyChangeKeyValue (Address: 0x1011f448)
  • RegOpenKeyExW (Address: 0x1011f438)
  • RegQueryInfoKeyW (Address: 0x1011f42c)
  • RegQueryValueExW (Address: 0x1011f440)
  • RegSetValueExW (Address: 0x1011f450)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathRemoveFileSpecW (Address: 0x1011f460)
  • PathStripPathW (Address: 0x1011f464)
  • PathStripToRootW (Address: 0x1011f45c)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x1011f46c)
  • CreateActCtxW (Address: 0x1011f478)
  • DeactivateActCtx (Address: 0x1011f470)
  • ReleaseActCtx (Address: 0x1011f474)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x1011f480)
  • WideCharToMultiByte (Address: 0x1011f484)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x1011f490)
  • CharPrevW (Address: 0x1011f48c)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x1011f498)
  • lstrcpynW (Address: 0x1011f49c)
  • lstrcpyW (Address: 0x1011f4a0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1011f4bc)
  • AcquireSRWLockShared (Address: 0x1011f4d0)
  • CreateEventW (Address: 0x1011f4f8)
  • CreateMutexExW (Address: 0x1011f4cc)
  • CreateSemaphoreExW (Address: 0x1011f4ac)
  • DeleteCriticalSection (Address: 0x1011f500)
  • EnterCriticalSection (Address: 0x1011f4e4)
  • InitializeCriticalSection (Address: 0x1011f4b0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1011f4b8)
  • InitializeCriticalSectionEx (Address: 0x1011f4fc)
  • LeaveCriticalSection (Address: 0x1011f4b4)
  • OpenEventW (Address: 0x1011f4dc)
  • OpenSemaphoreW (Address: 0x1011f4c4)
  • ReleaseMutex (Address: 0x1011f4d8)
  • ReleaseSemaphore (Address: 0x1011f4f4)
  • ReleaseSRWLockExclusive (Address: 0x1011f4e8)
  • ReleaseSRWLockShared (Address: 0x1011f4c8)
  • ResetEvent (Address: 0x1011f4a8)
  • SetEvent (Address: 0x1011f4f0)
  • SetWaitableTimerEx (Address: 0x1011f4ec)
  • WaitForMultipleObjectsEx (Address: 0x1011f4d4)
  • WaitForSingleObject (Address: 0x1011f4e0)
  • WaitForSingleObjectEx (Address: 0x1011f4c0)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1011f508)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x1011f518)
  • CreateWaitableTimerW (Address: 0x1011f514)
  • WaitForMultipleObjects (Address: 0x1011f510)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x1011f52c)
  • GetLocalTime (Address: 0x1011f530)
  • GetSystemInfo (Address: 0x1011f524)
  • GetSystemTimeAsFileTime (Address: 0x1011f534)
  • GetSystemWindowsDirectoryW (Address: 0x1011f528)
  • GetTickCount (Address: 0x1011f520)
  • GetTickCount64 (Address: 0x1011f538)
  • GlobalMemoryStatusEx (Address: 0x1011f53c)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1011f55c)
  • CloseThreadpoolWork (Address: 0x1011f558)
  • CreateThreadpoolTimer (Address: 0x1011f560)
  • CreateThreadpoolWork (Address: 0x1011f548)
  • SetThreadpoolTimer (Address: 0x1011f550)
  • SubmitThreadpoolWork (Address: 0x1011f54c)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1011f544)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1011f554)
api-ms-win-core-threadpool-private-l1-1-0.dll
  • RegisterWaitForSingleObjectEx (Address: 0x1011f568)
api-ms-win-core-version-l1-1-0.dll
  • VerQueryValueW (Address: 0x1011f570)
api-ms-win-eventing-consumer-l1-1-0.dll
  • CloseTrace (Address: 0x1011f57c)
  • OpenTraceW (Address: 0x1011f578)
  • ProcessTrace (Address: 0x1011f580)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x1011f588)
  • StartTraceW (Address: 0x1011f58c)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x1011f598)
  • AddAccessAllowedAce (Address: 0x1011f5c8)
  • AddAccessAllowedAceEx (Address: 0x1011f5dc)
  • AddAce (Address: 0x1011f5f8)
  • AllocateAndInitializeSid (Address: 0x1011f5a8)
  • CheckTokenMembership (Address: 0x1011f5cc)
  • CopySid (Address: 0x1011f604)
  • DeleteAce (Address: 0x1011f5ac)
  • DuplicateTokenEx (Address: 0x1011f5c4)
  • EqualSid (Address: 0x1011f5f4)
  • FreeSid (Address: 0x1011f600)
  • GetAce (Address: 0x1011f59c)
  • GetAclInformation (Address: 0x1011f5ec)
  • GetLengthSid (Address: 0x1011f60c)
  • GetSecurityDescriptorDacl (Address: 0x1011f5d8)
  • GetSecurityDescriptorLength (Address: 0x1011f5b8)
  • GetSidIdentifierAuthority (Address: 0x1011f5fc)
  • GetSidSubAuthority (Address: 0x1011f5e4)
  • GetSidSubAuthorityCount (Address: 0x1011f5b4)
  • GetTokenInformation (Address: 0x1011f608)
  • ImpersonateSelf (Address: 0x1011f5e8)
  • InitializeAcl (Address: 0x1011f594)
  • InitializeSecurityDescriptor (Address: 0x1011f5a0)
  • IsValidSecurityDescriptor (Address: 0x1011f5bc)
  • IsValidSid (Address: 0x1011f5d4)
  • RevertToSelf (Address: 0x1011f5f0)
  • SetKernelObjectSecurity (Address: 0x1011f5c0)
  • SetSecurityDescriptorControl (Address: 0x1011f5e0)
  • SetSecurityDescriptorDacl (Address: 0x1011f5d0)
  • SetSecurityDescriptorGroup (Address: 0x1011f5b0)
  • SetSecurityDescriptorOwner (Address: 0x1011f5a4)
combase.dll
  • (Address: 0x1011f614)
KERNEL32.dll
  • ChangeTimerQueueTimer (Address: 0x1011f000)
  • CreateTimerQueueTimer (Address: 0x1011f020)
  • DeleteTimerQueueTimer (Address: 0x1011f01c)
  • GetComputerNameW (Address: 0x1011f00c)
  • GetCurrentPackageId (Address: 0x1011f024)
  • MoveFileW (Address: 0x1011f010)
  • QueueUserWorkItem (Address: 0x1011f018)
  • RegisterWaitForSingleObject (Address: 0x1011f008)
  • UnregisterWait (Address: 0x1011f014)
  • UnregisterWaitEx (Address: 0x1011f004)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1011f6e8)
  • __dllonexit (Address: 0x1011f6a4)
  • __doserrno (Address: 0x1011f668)
  • _amsg_exit (Address: 0x1011f690)
  • _beginthreadex (Address: 0x1011f654)
  • _CIexp (Address: 0x1011f6d0)
  • _CIsqrt (Address: 0x1011f6cc)
  • _CxxThrowException (Address: 0x1011f688)
  • _except_handler4_common (Address: 0x1011f698)
  • _ftol2 (Address: 0x1011f6c8)
  • _ftol2_sse (Address: 0x1011f6c4)
  • _initterm (Address: 0x1011f694)
  • _local_unwind4 (Address: 0x1011f6bc)
  • _lock (Address: 0x1011f69c)
  • _onexit (Address: 0x1011f6a8)
  • _purecall (Address: 0x1011f6c0)
  • _ultow (Address: 0x1011f6d4)
  • _unlock (Address: 0x1011f6a0)
  • _vsnprintf (Address: 0x1011f67c)
  • _vsnprintf_s (Address: 0x1011f64c)
  • _vsnwprintf (Address: 0x1011f624)
  • _waccess (Address: 0x1011f630)
  • _wcsdup (Address: 0x1011f63c)
  • _wcsicmp (Address: 0x1011f6e4)
  • _wcsupr (Address: 0x1011f66c)
  • _wtoi (Address: 0x1011f6e0)
  • _XcptFilter (Address: 0x1011f68c)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x1011f65c)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1011f648)
  • ??0exception@@QAE@XZ (Address: 0x1011f644)
  • ??1exception@@UAE@XZ (Address: 0x1011f62c)
  • ??1type_info@@UAE@XZ (Address: 0x1011f6ac)
  • ?terminate@@YAXXZ (Address: 0x1011f6ec)
  • ?what@exception@@UBEPBDXZ (Address: 0x1011f658)
  • free (Address: 0x1011f674)
  • iswalpha (Address: 0x1011f634)
  • iswdigit (Address: 0x1011f680)
  • malloc (Address: 0x1011f640)
  • mbstowcs (Address: 0x1011f61c)
  • memcmp (Address: 0x1011f6b8)
  • memcpy (Address: 0x1011f6b4)
  • memcpy_s (Address: 0x1011f620)
  • memmove (Address: 0x1011f6b0)
  • memmove_s (Address: 0x1011f664)
  • memset (Address: 0x1011f6f0)
  • realloc (Address: 0x1011f6dc)
  • time (Address: 0x1011f650)
  • wcscat_s (Address: 0x1011f6d8)
  • wcschr (Address: 0x1011f678)
  • wcscpy_s (Address: 0x1011f638)
  • wcsrchr (Address: 0x1011f628)
  • wcsstr (Address: 0x1011f660)
  • wcstok_s (Address: 0x1011f670)
  • wcstombs (Address: 0x1011f684)
ntdll.dll
  • EtwGetTraceEnableFlags (Address: 0x1011f734)
  • EtwGetTraceEnableLevel (Address: 0x1011f720)
  • EtwGetTraceLoggerHandle (Address: 0x1011f72c)
  • EtwLogTraceEvent (Address: 0x1011f754)
  • EtwNotificationRegister (Address: 0x1011f748)
  • EtwNotificationUnregister (Address: 0x1011f724)
  • EtwRegisterTraceGuidsW (Address: 0x1011f71c)
  • EtwTraceMessage (Address: 0x1011f730)
  • EtwUnregisterTraceGuids (Address: 0x1011f738)
  • NtQuerySystemInformation (Address: 0x1011f73c)
  • RtlAllocateHeap (Address: 0x1011f70c)
  • RtlCreateServiceSid (Address: 0x1011f74c)
  • RtlDelete (Address: 0x1011f740)
  • RtlDeleteCriticalSection (Address: 0x1011f6f8)
  • RtlDllShutdownInProgress (Address: 0x1011f714)
  • RtlExtendedLargeIntegerDivide (Address: 0x1011f744)
  • RtlFreeHeap (Address: 0x1011f704)
  • RtlImageNtHeader (Address: 0x1011f708)
  • RtlInitializeCriticalSectionAndSpinCount (Address: 0x1011f6fc)
  • RtlInitUnicodeString (Address: 0x1011f750)
  • RtlLargeIntegerDivide (Address: 0x1011f758)
  • RtlNtStatusToDosError (Address: 0x1011f75c)
  • RtlReportException (Address: 0x1011f710)
  • RtlSplay (Address: 0x1011f700)
  • ShipAssertMsgA (Address: 0x1011f728)
  • WinSqmSetDWORD (Address: 0x1011f718)
ole32.dll
  • CoGetInterceptor (Address: 0x1011f778)
  • CoGetObject (Address: 0x1011f774)
  • CreateAntiMoniker (Address: 0x1011f764)
  • CreateBindCtx (Address: 0x1011f77c)
  • CreateGenericComposite (Address: 0x1011f76c)
  • MkParseDisplayName (Address: 0x1011f788)
  • MonikerCommonPrefixWith (Address: 0x1011f768)
  • MonikerRelativePathTo (Address: 0x1011f770)
  • OleLoadFromStream (Address: 0x1011f784)
  • OleSaveToStream (Address: 0x1011f780)
OLEAUT32.dll
  • BSTR_UserFree (Address: 0x1011f0ac)
  • BSTR_UserMarshal (Address: 0x1011f048)
  • BSTR_UserSize (Address: 0x1011f090)
  • BSTR_UserUnmarshal (Address: 0x1011f088)
  • CreateErrorInfo (Address: 0x1011f078)
  • GetErrorInfo (Address: 0x1011f07c)
  • LoadRegTypeLib (Address: 0x1011f04c)
  • LoadTypeLib (Address: 0x1011f050)
  • LPSAFEARRAY_UserFree (Address: 0x1011f0a0)
  • LPSAFEARRAY_UserMarshal (Address: 0x1011f098)
  • LPSAFEARRAY_UserSize (Address: 0x1011f0a4)
  • LPSAFEARRAY_UserUnmarshal (Address: 0x1011f09c)
  • SafeArrayAccessData (Address: 0x1011f030)
  • SafeArrayCreate (Address: 0x1011f084)
  • SafeArrayCreateVector (Address: 0x1011f02c)
  • SafeArrayDestroy (Address: 0x1011f058)
  • SafeArrayUnaccessData (Address: 0x1011f03c)
  • SetErrorInfo (Address: 0x1011f074)
  • SysAllocString (Address: 0x1011f038)
  • SysAllocStringByteLen (Address: 0x1011f080)
  • SysAllocStringLen (Address: 0x1011f068)
  • SysFreeString (Address: 0x1011f08c)
  • SysStringByteLen (Address: 0x1011f070)
  • SysStringLen (Address: 0x1011f044)
  • VARIANT_UserFree (Address: 0x1011f05c)
  • VARIANT_UserMarshal (Address: 0x1011f094)
  • VARIANT_UserSize (Address: 0x1011f064)
  • VARIANT_UserUnmarshal (Address: 0x1011f060)
  • VariantChangeType (Address: 0x1011f040)
  • VariantClear (Address: 0x1011f034)
  • VariantCopy (Address: 0x1011f0a8)
  • VariantInit (Address: 0x1011f054)
  • VarUI4FromStr (Address: 0x1011f06c)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1011f0f4)
  • CStdStubBuffer_Connect (Address: 0x1011f128)
  • CStdStubBuffer_CountRefs (Address: 0x1011f0fc)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1011f0b8)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1011f114)
  • CStdStubBuffer_Disconnect (Address: 0x1011f118)
  • CStdStubBuffer_Invoke (Address: 0x1011f0c4)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1011f124)
  • CStdStubBuffer_QueryInterface (Address: 0x1011f100)
  • I_RpcBindingInqLocalClientPID (Address: 0x1011f104)
  • I_RpcBindingInqTransportType (Address: 0x1011f10c)
  • I_RpcTurnOnEEInfoPropagation (Address: 0x1011f0ec)
  • IUnknown_AddRef_Proxy (Address: 0x1011f0b4)
  • IUnknown_QueryInterface_Proxy (Address: 0x1011f11c)
  • IUnknown_Release_Proxy (Address: 0x1011f0f8)
  • MesDecodeBufferHandleCreate (Address: 0x1011f0e8)
  • MesEncodeDynBufferHandleCreate (Address: 0x1011f0e0)
  • MesHandleFree (Address: 0x1011f0e4)
  • NdrClientCall2 (Address: 0x1011f0bc)
  • NdrCStdStubBuffer_Release (Address: 0x1011f140)
  • NdrCStdStubBuffer2_Release (Address: 0x1011f0c8)
  • NdrDllCanUnloadNow (Address: 0x1011f0c0)
  • NdrDllGetClassObject (Address: 0x1011f0cc)
  • NdrMesTypeDecode2 (Address: 0x1011f0d0)
  • NdrMesTypeEncode2 (Address: 0x1011f0dc)
  • NdrOleAllocate (Address: 0x1011f108)
  • NdrOleFree (Address: 0x1011f0d4)
  • NdrStubCall2 (Address: 0x1011f138)
  • NdrStubForwardingFunction (Address: 0x1011f134)
  • RpcStringFreeA (Address: 0x1011f120)
  • RpcStringFreeW (Address: 0x1011f12c)
  • UuidCreate (Address: 0x1011f110)
  • UuidCreateSequential (Address: 0x1011f0d8)
  • UuidFromStringW (Address: 0x1011f0f0)
  • UuidToStringA (Address: 0x1011f13c)
  • UuidToStringW (Address: 0x1011f130)