| Windows 8 DLL File Information - combase.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Microsoft COM for Windows |
| File Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Medium - 16 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 1,218 KB |
| Total Number of Exported Functions: | 326 |
| Total Number of Exported Functions With Names: | 290 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 1,020,928 Bytes | 81.9% | Read, Execute | Code |
| .orpc | 0x000fb000 | 71,168 Bytes | 5.7% | Read, Execute | Code |
| .data | 0x0010d000 | 16,896 Bytes | 1.4% | Write, Read | Initialized Data |
| .idata | 0x00112000 | 13,824 Bytes | 1.1% | Read | Initialized Data |
| minATL | 0x00116000 | 512 Bytes | 0.0% | Read | Initialized Data |
| .rsrc | 0x00117000 | 48,640 Bytes | 3.9% | Read | Initialized Data |
| .reloc | 0x00123000 | 74,240 Bytes | 6.0% | Read, Discardable | Initialized Data |
Static Linking
combase.dll is statically linked to the following files:msvcrt.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
RPCRT4.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-fibers-l1-1-1.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-rtlsupport-l1-2-0.dll
api-ms-win-core-memory-l1-1-1.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-privateprofile-l1-1-0.dll
api-ms-win-core-sidebyside-l1-1-0.dll
ntdll.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-wow64-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
This means that when combase.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, combase.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 73 | 8,852 Bytes | 0.7% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 4 | 69,118 Bytes | 5.5% |
| Total | 77 | 77,970 Bytes | 6.3% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
| String ID | String Text |
|---|---|
| 5000 | Local |
| 5001 | Remote |
| 5002 | Launch |
| 5003 | Activation |
| 5004 | Access |
| 5005 | Launch and Activation |
| 5006 | machine-default |
| 5007 | application-specific |
| 5008 | Limits |
| 5009 | Default |
| 5010 | Remote Procedure Call (RPC) |
| 5011 | The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running. |
| 5012 | DCOM Server Process Launcher |
| 5013 | The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running. |
| 5014 | LocalHost (Using LRPC) |
| 5015 | Unavailable |
| 5016 | Object's implementation of IInspectable::GetTrustLevel returned a value that is different from the trust level configured for the class in the catalog |
| 5101 | Picture |
| 5201 | ActivatableClassId and CLSID entries do not reference each other consistently |
| 5202 | ActivatableClassId and CLSID entries in different registration scopes |
| 5203 | ActivatableClassId entry references a CLSID that is not a runtime class |
| 5204 | ActivatableClassId entry has missing or malformed ActivationType property |
| 5205 | ActivatableClassId entry has missing or malformed Threading property |
| 5206 | ActivatableClassId entry has malformed TrustLevel property |
| 5207 | ActivatableClassId entry is marked outofproc, but has DllPath property |
| 5208 | ActivatableClassId entry is marked inproc, but is missing DllPath property |
| 5209 | ActivatableClassId entry has malformed DllPath property |
| 5210 | ActivatableClassId entry is marked inproc, but has Server property |
| 5211 | ActivatableClassId entry references missing Server entry |
| 5212 | ActivatableClassId and Server entries in different registration scopes |
| 5213 | ActivatableClassId entry is marked outofproc, but is missing Server property |
| 5214 | ActivatableClassId entry present, but a value was missing/invalid |
| 5215 | ActivatableClassId entry present, but CLSID and/or Server entry is missing |
| 5216 | Activation of per-user ActivatableClassId denied from non-AppContainers |
| 5217 | Server entry has missing or malformed ServerType property |
| 5218 | Server entry has malformed AppID property |
| 5219 | Server entry is not a normal exe but has CommandLine property |
| 5220 | Server entry has malformed CommandLine property |
| 5221 | Server entry has non-exe ServerType but has ExePath property |
| 5222 | Server entry is a normal exe but is missing ExePath property |
| 5223 | Server entry has malformed ExePath property |
| 5224 | Server entry has missing or malformed IdentityType property |
| 5225 | Per-user Server registration must not have a RunAs IdentityType |
| 5226 | Per-user Server registrations must not have ServiceName property |
| 5227 | Server entry has malformed Instancing property |
| 5228 | Server entry is not RunAs but has Identity property |
| 5229 | Server entry is RunAs but is missing Identity property |
| 5230 | Server entry has malformed Identity property |
| 5231 | Server entry is not a service but has ServiceName property |
| 5232 | Server entry is a service but missing ServiceName property |
| 5233 | Server entry has malformed ServiceName property |
| 5234 | Server entry references missing AppID registration |
| 5235 | Server entry has malformed Permissions property |
| 5236 | Server entry has malformed PackageMoniker property |
| 5237 | Server entry has malformed appUserModelID property |
| 5238 | Server entry is a service but IdentityType is not RunAs |
| 5239 | Server entry present, but a value was missing/invalid |
| 5240 | Per-machine Server registrations must not have PackageMoniker property |
| 5241 | Per-machine Server registration must not have a ActivateAsPackage IdentityType |
| 5242 | Per-machine Server registration must not have an Instancing property |
| 5243 | Per-machine Server registrations must not have appUserModelID property |
| 5244 | ActivateAsActivator servers must not have PackageMoniker property |
| 5245 | Server entry has non-exe ServerType but has ClassNames property |
| 5246 | Server entry has malformed ClassNames property |
| 5247 | Server entry has malformed DebuggerPath property |
| 5248 | Server entry has malformed Environment property |
| 5249 | The executable pointed to by the ExePath property is missing |
| 5250 | Server is per user ActivateAsActivator, must not be activated from non app container |
| 5300 | Interface entry has missing or malformed proxy/stub CLSID property |
| 5301 | Proxy/Stub CLSID entry has malformed DllPath property |
| 5400 | CoInitialize cannot be called from apartment shutdown callbacks |
| 5401 | RoRegisterForApartmentShutdown cannot be called from apartment shutdown callbacks |
| 5402 | RoUnregisterForApartmentShutdown |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| CLSIDFromOle1Class | CLSIDFromProgID |
| CLSIDFromString | CleanupOleStateInAllTls |
| CleanupTlsOleState | ClearCleanupFlag |
| CoAddRefServerProcess | CoAllowUnmarshalerCLSID |
| CoCancelCall | CoCopyProxy |
| CoCreateErrorInfo | CoCreateFreeThreadedMarshaler |
| CoCreateGuid | CoCreateInstance |
| CoCreateInstanceEx | CoCreateInstanceFromApp |
| CoCreateObjectInContext | CoDeactivateObject |
| CoDecodeProxy | CoDecrementMTAUsage |
| CoDisableCallCancellation | CoDisconnectContext |
| CoDisconnectObject | CoEnableCallCancellation |
| CoFreeUnusedLibraries | CoFreeUnusedLibrariesEx |
| CoGetActivationState | CoGetApartmentID |
| CoGetApartmentType | CoGetCallContext |
| CoGetCallState | CoGetCallerTID |
| CoGetCancelObject | CoGetClassObject |
| CoGetClassVersion | CoGetContextToken |
| CoGetCurrentLogicalThreadId | CoGetCurrentProcess |
| CoGetDefaultContext | CoGetErrorInfo |
| CoGetInstanceFromFile | CoGetInstanceFromIStorage |
| CoGetInterfaceAndReleaseStream | CoGetMalloc |
| CoGetMarshalSizeMax | CoGetModuleType |
| CoGetObjectContext | CoGetPSClsid |
| CoGetProcessIdentifier | CoGetStandardMarshal |
| CoGetStdMarshalEx | CoGetSystemSecurityPermissions |
| CoGetTreatAsClass | CoImpersonateClient |
| CoIncrementMTAUsage | CoInitializeEx |
| CoInitializeSecurity | CoInitializeWOW |
| CoInvalidateRemoteMachineBindings | CoIsHandlerConnected |
| CoLockObjectExternal | CoMarshalHresult |
| CoMarshalInterThreadInterfaceInStream | CoMarshalInterface |
| CoPopServiceDomain | CoPushServiceDomain |
| CoQueryAuthenticationServices | CoQueryClientBlanket |
| CoQueryProxyBlanket | CoReactivateObject |
| CoRegisterClassObject | CoRegisterInitializeSpy |
| CoRegisterMallocSpy | CoRegisterMessageFilter |
| CoRegisterPSClsid | CoRegisterSurrogate |
| CoRegisterSurrogateEx | CoReleaseMarshalData |
| CoReleaseServerProcess | CoResumeClassObjects |
| CoRetireServer | CoRevertToSelf |
| CoRevokeClassObject | CoRevokeInitializeSpy |
| CoRevokeMallocSpy | CoSetCancelObject |
| CoSetErrorInfo | CoSetProxyBlanket |
| CoSuspendClassObjects | CoSwitchCallContext |
| CoTaskMemAlloc | CoTaskMemFree |
| CoTaskMemRealloc | CoTestCancel |
| CoUninitialize | CoUnloadingWOW |
| CoUnmarshalHresult | CoUnmarshalInterface |
| CoVrfCheckThreadState | CoVrfGetThreadState |
| CoVrfReleaseThreadState | CoWaitForMultipleHandles |
| CoWaitForMultipleObjects | CreateErrorInfo |
| CreateStreamOnHGlobal | DcomChannelSetHResult |
| DllDebugObjectRPCHook | DllGetActivationFactory |
| DllGetClassObject | EnableHookObject |
| FreePropVariantArray | FreePropVariantArrayWorker |
| GetCatalogHelper | GetErrorInfo |
| GetFuncDescs | GetHGlobalFromStream |
| GetHookInterface | GetRestrictedErrorInfo |
| HSTRING_UserFree | HSTRING_UserMarshal |
| HSTRING_UserSize | HSTRING_UserUnmarshal |
| HkOleRegisterObject | IIDFromString |
| InternalAppInvokeExceptionFilter | InternalCCFreeUnused |
| InternalCCGetClassInformationForDde | InternalCCGetClassInformationFromKey |
| InternalCCSetDdeServerWindow | InternalCMLSendReceive |
| InternalCallAsProxyExceptionFilter | InternalCallFrameExceptionFilter |
| InternalCallerIsAppContainer | InternalCanMakeOutCall |
| InternalCoIsSurrogateProcess | InternalCoRegisterDisconnectCallback |
| InternalCoRegisterSurrogatedObject | InternalCoStdMarshalObject |
| InternalCoUnregisterDisconnectCallback | InternalCompleteObjRef |
| InternalCreateCAggId | InternalCreateIdentityHandler |
| InternalDoATClassCreate | InternalFillLocalOXIDInfo |
| InternalFreeObjRef | InternalGetWindowPropInterface |
| InternalIrotEnumRunning | InternalIrotGetObject |
| InternalIrotGetTimeOfLastChange | InternalIrotIsRunning |
| InternalIrotNoteChangeTime | InternalIrotRegister |
| InternalIrotRevoke | InternalIsApartmentInitialized |
| InternalIsProcessInitialized | InternalMarshalObjRef |
| InternalNotifyDDStartOrStop | InternalOleModalLoopBlockFn |
| InternalRegisterWindowPropInterface | InternalReleaseMarshalObjRef |
| InternalSTAInvoke | InternalServerExceptionFilter |
| InternalSetAptCallCtrlOnTlsIfRequired | InternalSetOleThunkWowPtr |
| InternalStubInvoke | InternalTlsAllocData |
| InternalUnmarshalObjRef | NdrExtStubInitialize |
| NdrOleDllGetClassObject | NdrOleInitializeExtension |
| NdrProxyForwardingFunction10 | NdrProxyForwardingFunction11 |
| NdrProxyForwardingFunction12 | NdrProxyForwardingFunction13 |
| NdrProxyForwardingFunction14 | NdrProxyForwardingFunction15 |
| NdrProxyForwardingFunction16 | NdrProxyForwardingFunction17 |
| NdrProxyForwardingFunction18 | NdrProxyForwardingFunction19 |
| NdrProxyForwardingFunction20 | NdrProxyForwardingFunction21 |
| NdrProxyForwardingFunction22 | NdrProxyForwardingFunction23 |
| NdrProxyForwardingFunction24 | NdrProxyForwardingFunction25 |
| NdrProxyForwardingFunction26 | NdrProxyForwardingFunction27 |
| NdrProxyForwardingFunction28 | NdrProxyForwardingFunction29 |
| NdrProxyForwardingFunction3 | NdrProxyForwardingFunction30 |
| NdrProxyForwardingFunction31 | NdrProxyForwardingFunction32 |
| NdrProxyForwardingFunction4 | NdrProxyForwardingFunction5 |
| NdrProxyForwardingFunction6 | NdrProxyForwardingFunction7 |
| NdrProxyForwardingFunction8 | NdrProxyForwardingFunction9 |
| NdrpFindInterface | ObjectStublessClient10 |
| ObjectStublessClient11 | ObjectStublessClient12 |
| ObjectStublessClient13 | ObjectStublessClient14 |
| ObjectStublessClient15 | ObjectStublessClient16 |
| ObjectStublessClient17 | ObjectStublessClient18 |
| ObjectStublessClient19 | ObjectStublessClient20 |
| ObjectStublessClient21 | ObjectStublessClient22 |
| ObjectStublessClient23 | ObjectStublessClient24 |
| ObjectStublessClient25 | ObjectStublessClient26 |
| ObjectStublessClient27 | ObjectStublessClient28 |
| ObjectStublessClient29 | ObjectStublessClient3 |
| ObjectStublessClient30 | ObjectStublessClient31 |
| ObjectStublessClient32 | ObjectStublessClient4 |
| ObjectStublessClient5 | ObjectStublessClient6 |
| ObjectStublessClient7 | ObjectStublessClient8 |
| ObjectStublessClient9 | ProgIDFromCLSID |
| PropVariantClear | PropVariantCopy |
| ReleaseFuncDescs | RoActivateInstance |
| RoCaptureErrorContext | RoFailFastWithErrorContext |
| RoFailFastWithErrorContextInternal | RoFreeParameterizedTypeExtra |
| RoGetActivatableClassRegistration | RoGetActivationFactory |
| RoGetApartmentIdentifier | RoGetErrorReportingFlags |
| RoGetParameterizedTypeInstanceIID | RoGetServerActivatableClasses |
| RoInitialize | RoOriginateError |
| RoOriginateErrorW | RoParameterizedTypeExtraGetTypeSignature |
| RoRegisterActivationFactories | RoRegisterForApartmentShutdown |
| RoReportCapabilityCheckFailure | RoResolveRestrictedErrorInfoReference |
| RoRevokeActivationFactories | RoSetErrorReportingFlags |
| RoTransformError | RoTransformErrorW |
| RoUninitialize | RoUnregisterForApartmentShutdown |
| SetCleanupFlag | SetErrorInfo |
| SetRestrictedErrorInfo | StringFromCLSID |
| StringFromGUID2 | StringFromIID |
| UpdateDCOMSettings | UpdateProcessTracing |
| WdtpInterfacePointer_UserMarshal | WdtpInterfacePointer_UserSize |
| WdtpInterfacePointer_UserUnmarshal | WindowsCompareStringOrdinal |
| WindowsConcatString | WindowsCreateString |
| WindowsCreateStringReference | WindowsDeleteString |
| WindowsDeleteStringBuffer | WindowsDuplicateString |
| WindowsGetStringLen | WindowsGetStringRawBuffer |
| WindowsInspectString | WindowsIsStringEmpty |
| WindowsPreallocateStringBuffer | WindowsPromoteStringBuffer |
| WindowsReplaceString | WindowsStringHasEmbeddedNull |
| WindowsSubstring | WindowsSubstringWithSpecifiedLength |
| WindowsTrimStringEnd | WindowsTrimStringStart |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter __CxxFrameHandler __dllonexit _amsg_exit _except_handler4_common _ftol2 _initterm _itoa _local_unwind4 _lock _onexit _purecall _resetstkoflw _unlock _vsnprintf _vsnwprintf _wcsicmp _wcslwr _wcsnicmp _wtoi _wtol free malloc memcmp memcpy memcpy_s memmove memset qsort rand_s swprintf_s wcschr wcsncmp wcsncpy_s wcsnlen wcsrchr wcsstr wcstok - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap KernelBase!HeapCompact KernelBase!HeapCreate KernelBase!HeapDestroy KernelBase!HeapValidate ntdll!RtlAllocateHeap ntdll!RtlFreeHeap ntdll!RtlReAllocateHeap ntdll!RtlSizeHeap - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!RaiseException KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter ntdll!RtlRestoreLastWin32Error - api-ms-win-core-processthreads-l1-1-1.dll:
KernelBase!OpenProcessToken KernelBase!OpenThreadToken KernelBase!SetThreadToken kernel32!CreateThread kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!OpenProcess kernel32!ProcessIdToSessionId kernel32!SetThreadStackGuarantee kernel32!SwitchToThread kernel32!TerminateProcess - api-ms-win-security-base-l1-2-0.dll:
KernelBase!AccessCheck KernelBase!AccessCheckByType KernelBase!AddAccessAllowedAce KernelBase!CheckTokenMembership KernelBase!CopySid KernelBase!CreateWellKnownSid KernelBase!DuplicateToken KernelBase!EqualSid KernelBase!GetAce KernelBase!GetAppContainerAce KernelBase!GetKernelObjectSecurity KernelBase!GetLengthSid KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorGroup KernelBase!GetSecurityDescriptorLength KernelBase!GetSecurityDescriptorOwner KernelBase!GetSidLengthRequired KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!ImpersonateAnonymousToken KernelBase!ImpersonateLoggedOnUser KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!InitializeSid KernelBase!IsValidSecurityDescriptor KernelBase!IsValidSid KernelBase!MakeSelfRelativeSD KernelBase!MapGenericMask KernelBase!PrivilegeCheck KernelBase!RevertToSelf KernelBase!SetSecurityDescriptorDacl - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle KernelBase!DuplicateHandle - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegCloseKey KernelBase!RegCreateKeyExA KernelBase!RegCreateKeyExW KernelBase!RegDeleteKeyExA KernelBase!RegDeleteKeyExW KernelBase!RegEnumKeyExW KernelBase!RegEnumValueW KernelBase!RegGetValueA KernelBase!RegGetValueW KernelBase!RegOpenCurrentUser KernelBase!RegOpenKeyExA KernelBase!RegOpenKeyExW KernelBase!RegOpenUserClassesRoot KernelBase!RegQueryInfoKeyW KernelBase!RegQueryValueExA KernelBase!RegQueryValueExW KernelBase!RegSetValueExA KernelBase!RegSetValueExW - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventA KernelBase!CreateEventW KernelBase!CreateWaitableTimerExW KernelBase!InitializeCriticalSectionAndSpinCount KernelBase!OpenEventA KernelBase!OpenEventW KernelBase!ResetEvent KernelBase!SetEvent KernelBase!SetWaitableTimerEx KernelBase!Sleep KernelBase!SleepEx KernelBase!WaitForMultipleObjectsEx KernelBase!WaitForSingleObject KernelBase!WaitForSingleObjectEx ntdll!RtlAcquireSRWLockExclusive ntdll!RtlAcquireSRWLockShared ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeConditionVariable ntdll!RtlLeaveCriticalSection ntdll!RtlReleaseSRWLockExclusive ntdll!RtlReleaseSRWLockShared - RPCRT4.dll:
I_RpcAllocate I_RpcAsyncAbortCall I_RpcAsyncSetHandle I_RpcBCacheAllocate I_RpcBCacheFree I_RpcBindingInqCurrentModifiedId I_RpcBindingInqLocalClientPID I_RpcBindingInqTransportType I_RpcBindingSetPrivateOption I_RpcClearMutex I_RpcExceptionFilter I_RpcFree I_RpcFreeBuffer I_RpcGetBuffer I_RpcGetBufferWithObject I_RpcMapWin32Status I_RpcMgmtEnableDedicatedThreadPool I_RpcMgmtQueryDedicatedThreadPool I_RpcOpenClientProcess I_RpcReceive I_RpcRequestMutex I_RpcSend I_RpcSendReceive I_RpcSetDCOMAppId MesBufferHandleReset MesDecodeBufferHandleCreate MesEncodeFixedBufferHandleCreate MesHandleFree NdrAsyncServerCall NdrClearOutParameters NdrClientCall NdrClientCall2 NdrClientInitializeNew NdrConvert2 NdrCorrelationFree NdrCorrelationInitialize NdrDllGetClassObject NdrFullPointerXlatFree NdrFullPointerXlatInit NdrGetTypeFlags NdrGetUserMarshalInfo NdrMesTypeAlignSize2 NdrMesTypeDecode2 NdrMesTypeEncode2 NdrOleAllocate NdrOleFree NdrServerCall2 NdrServerInitialize NdrStubCall NdrStubCall2 RpcAsyncCancelCall RpcAsyncCompleteCall RpcAsyncGetCallStatus RpcAsyncInitializeHandle RpcBindingBind RpcBindingCopy RpcBindingCreateW RpcBindingFree RpcBindingFromStringBindingW RpcBindingInqAuthClientW RpcBindingInqAuthInfoExW RpcBindingInqObject RpcBindingServerFromClient RpcBindingSetAuthInfoExW RpcBindingSetOption RpcBindingToStringBindingW RpcBindingUnbind RpcBindingVectorFree RpcCancelThreadEx RpcCertGeneratePrincipalNameW RpcErrorAddRecord RpcErrorEndEnumeration RpcErrorGetNextRecord RpcErrorStartEnumeration RpcImpersonateClient RpcImpersonateClient2 RpcMgmtInqComTimeout RpcMgmtSetCancelTimeout RpcMgmtSetComTimeout RpcRaiseException RpcRevertToSelfEx RpcServerInqBindings RpcServerInqCallAttributesW RpcServerRegisterAuthInfoW RpcServerRegisterIf3 RpcServerTestCancel RpcServerUnregisterIf RpcServerUseProtseqEpExW RpcServerUseProtseqEpW RpcServerUseProtseqExW RpcServerUseProtseqW RpcSmDestroyClientContext RpcStringBindingParseW RpcStringFreeW SimpleTypeAlignment SimpleTypeBufferSize SimpleTypeMemorySize UuidCreate - api-ms-win-core-sysinfo-l1-2-0.dll:
KernelBase!GetComputerNameExW KernelBase!GetSystemInfo KernelBase!GetSystemTimeAsFileTime KernelBase!GetSystemWindowsDirectoryW KernelBase!GetTickCount KernelBase!GetTickCount64 - api-ms-win-core-interlocked-l1-2-0.dll:
KernelBase!InterlockedCompareExchange KernelBase!InterlockedDecrement KernelBase!InterlockedExchange KernelBase!InterlockedExchangeAdd KernelBase!InterlockedIncrement ntdll!RtlInitializeSListHead ntdll!RtlInterlockedCompareExchange64 ntdll!RtlInterlockedPopEntrySList ntdll!RtlInterlockedPushEntrySList - api-ms-win-core-debug-l1-1-1.dll:
KernelBase!DebugBreak KernelBase!IsDebuggerPresent KernelBase!OutputDebugStringA KernelBase!OutputDebugStringW - api-ms-win-core-threadpool-l1-2-0.dll:
KernelBase!CreateThreadpoolTimer KernelBase!CreateThreadpoolWork ntdll!TpCallbackSetEventOnCompletion ntdll!TpPostWork ntdll!TpReleaseTimer ntdll!TpReleaseWork ntdll!TpSetTimer ntdll!TpWaitForTimer ntdll!TpWaitForWork - api-ms-win-core-fibers-l1-1-1.dll:
KernelBase!FlsAlloc KernelBase!FlsFree KernelBase!FlsSetValue KernelBase!IsThreadAFiber - api-ms-win-core-libraryloader-l1-1-1.dll:
KernelBase!FreeLibrary KernelBase!FreeLibraryAndExitThread KernelBase!GetModuleFileNameA KernelBase!GetModuleFileNameW KernelBase!GetModuleHandleA KernelBase!GetModuleHandleExW KernelBase!GetModuleHandleW KernelBase!GetProcAddress KernelBase!LoadLibraryExA KernelBase!LoadLibraryExW KernelBase!LoadStringW - api-ms-win-core-string-l1-1-0.dll:
KernelBase!CompareStringOrdinal KernelBase!CompareStringW KernelBase!GetStringTypeW KernelBase!MultiByteToWideChar KernelBase!WideCharToMultiByte - api-ms-win-core-processenvironment-l1-2-0.dll:
KernelBase!ExpandEnvironmentStringsW KernelBase!FreeEnvironmentStringsA KernelBase!GetEnvironmentStringsW KernelBase!SearchPathW - api-ms-win-core-rtlsupport-l1-2-0.dll:
ntdll!RtlCaptureStackBackTrace ntdll!RtlCompareMemory - api-ms-win-core-memory-l1-1-1.dll:
KernelBase!CreateFileMappingW KernelBase!MapViewOfFile KernelBase!OpenFileMappingW KernelBase!UnmapViewOfFile KernelBase!VirtualAlloc KernelBase!VirtualFree KernelBase!VirtualProtect KernelBase!VirtualQuery - api-ms-win-core-file-l1-2-0.dll:
KernelBase!CreateFileW - api-ms-win-eventing-provider-l1-1-0.dll:
ntdll!EtwEventRegister ntdll!EtwEventUnregister ntdll!EtwEventWrite - api-ms-win-core-localization-l1-2-0.dll:
KernelBase!FormatMessageW KernelBase!LCMapStringW - api-ms-win-core-util-l1-1-0.dll:
ntdll!RtlDecodePointer ntdll!RtlEncodePointer - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-kernel32-legacy-l1-1-0.dll:
kernel32!RaiseFailFastException - api-ms-win-core-string-obsolete-l1-1-0.dll:
kernel32!lstrcmpiA kernel32!lstrcmpiW kernel32!lstrlen kernel32!lstrlenW - api-ms-win-core-heap-obsolete-l1-1-0.dll:
kernel32!GlobalAlloc kernel32!GlobalFree kernel32!GlobalLock kernel32!GlobalReAlloc kernel32!GlobalSize kernel32!GlobalUnlock kernel32!LocalAlloc kernel32!LocalFree - api-ms-win-core-privateprofile-l1-1-0.dll:
kernel32!GetProfileStringW - api-ms-win-core-sidebyside-l1-1-0.dll:
KernelBase!ActivateActCtx KernelBase!AddRefActCtx KernelBase!CreateActCtxW KernelBase!DeactivateActCtx KernelBase!FindActCtxSectionGuid KernelBase!FindActCtxSectionStringW KernelBase!GetCurrentActCtx KernelBase!ReleaseActCtx - ntdll.dll:
DbgPrint EtwEventRegister EtwEventUnregister EtwEventWrite EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids EvtIntReportEventAndSourceAsync LdrStandardizeSystemPath NtApphelpCacheControl NtClose NtCreateKey NtDuplicateObject NtOpenKey NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueryKey NtQueryObject NtQuerySecurityAttributesToken NtQuerySystemInformation NtQueryTimerResolution NtQueryValueKey NtTerminateProcess RtlAllocateHeap RtlApplicationVerifierStop RtlCheckForOrphanedCriticalSections RtlCopySid RtlDelete RtlDeleteCriticalSection RtlDeleteNoSplay RtlDllShutdownInProgress RtlEqualUnicodeString RtlFreeHeap RtlFreeSid RtlGetAppContainerNamedObjectPath RtlImageNtHeader RtlInitUnicodeString RtlInitializeConditionVariable RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount RtlIsCriticalSectionLockedByThread RtlLengthSid RtlLoadString RtlNtStatusToDosError RtlQueryPackageIdentity RtlRealPredecessor RtlReportException RtlSidDominates RtlSleepConditionVariableCS RtlSplay RtlValidRelativeSecurityDescriptor RtlWakeAllConditionVariable WinSqmSetDWORD - api-ms-win-core-apiquery-l1-1-0.dll:
ntdll!ApiSetQueryApiSetPresence - api-ms-win-core-wow64-l1-1-0.dll:
KernelBase!IsWow64Process - api-ms-win-core-delayload-l1-1-1.dll:
kernel32!DelayLoadFailureHook ntdll!LdrResolveDelayLoadedAPI