| Windows 10 DLL File Information - combase.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Microsoft COM for Windows |
| File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very High - 116 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 1,684 KB |
| Total Number of Exported Functions: | 443 |
| Total Number of Exported Functions With Names: | 381 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 1,500,160 Bytes | 87.0% | Read, Execute | Code |
| .data | 0x00170000 | 10,240 Bytes | 0.6% | Write, Read | Initialized Data |
| .idata | 0x00175000 | 14,848 Bytes | 0.9% | Read | Initialized Data |
| .didat | 0x00179000 | 1,024 Bytes | 0.1% | Write, Read | Initialized Data |
| .rsrc | 0x0017a000 | 66,048 Bytes | 3.8% | Read | Initialized Data |
| .reloc | 0x0018b000 | 107,520 Bytes | 6.2% | Read, Discardable | Initialized Data |
Static Linking
combase.dll is statically linked to the following files:msvcrt.dll
RPCRT4.dll
ntdll.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-3.dll
api-ms-win-core-fibers-l1-1-1.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-privateprofile-l1-1-1.dll
api-ms-win-core-sidebyside-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
api-ms-win-core-quirks-l1-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-wow64-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
This means that when combase.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, combase.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 80 | 10,422 Bytes | 0.6% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 4 | 88,794 Bytes | 5.1% |
| Total | 84 | 99,216 Bytes | 5.8% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
| String ID | String Text |
|---|---|
| 5000 | Local |
| 5001 | Remote |
| 5002 | Launch |
| 5003 | Activation |
| 5004 | Access |
| 5005 | Launch and Activation |
| 5006 | machine-default |
| 5007 | application-specific |
| 5008 | Limits |
| 5009 | Default |
| 5010 | Remote Procedure Call (RPC) |
| 5011 | The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running. |
| 5012 | DCOM Server Process Launcher |
| 5013 | The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running. |
| 5014 | LocalHost (Using LRPC) |
| 5015 | Unavailable |
| 5016 | Object's implementation of IInspectable::GetTrustLevel returned a value that is different from the trust level configured for the class in the catalog |
| 5101 | Picture |
| 5201 | ActivatableClassId and CLSID entries do not reference each other consistently |
| 5202 | ActivatableClassId and CLSID entries in different registration scopes |
| 5203 | ActivatableClassId entry references a CLSID that is not a runtime class |
| 5204 | ActivatableClassId entry has missing or malformed ActivationType property |
| 5205 | ActivatableClassId entry has missing or malformed Threading property |
| 5206 | ActivatableClassId entry has malformed TrustLevel property |
| 5207 | ActivatableClassId entry is marked outofproc, but has DllPath property |
| 5208 | ActivatableClassId entry is marked inproc, but is missing DllPath property |
| 5209 | ActivatableClassId entry has malformed DllPath property |
| 5210 | ActivatableClassId entry is marked inproc, but has Server property |
| 5211 | ActivatableClassId entry references missing Server entry |
| 5212 | ActivatableClassId and Server entries in different registration scopes |
| 5213 | ActivatableClassId entry is marked outofproc, but is missing Server property |
| 5214 | ActivatableClassId entry present, but a value was missing/invalid |
| 5215 | ActivatableClassId entry present, but CLSID and/or Server entry is missing |
| 5216 | Activation of per-user ActivatableClassId denied from non-AppContainers |
| 5217 | Server entry has missing or malformed ServerType property |
| 5218 | Server entry has malformed AppID property |
| 5219 | Server entry is not a normal exe but has CommandLine property |
| 5220 | Server entry has malformed CommandLine property |
| 5221 | Server entry has non-exe ServerType but has ExePath property |
| 5222 | Server entry is a normal exe but is missing ExePath property |
| 5223 | Server entry has malformed ExePath property |
| 5224 | Server entry has missing or malformed IdentityType property |
| 5225 | Per-user Server registration must not have a RunAs IdentityType |
| 5226 | Per-user Server registrations must not have ServiceName property |
| 5227 | Server entry has malformed Instancing property |
| 5228 | Server entry is not RunAs but has Identity property |
| 5229 | Server entry is RunAs but is missing Identity property |
| 5230 | Server entry has malformed Identity property |
| 5231 | Server entry is not a service but has ServiceName property |
| 5232 | Server entry is a service but missing ServiceName property |
| 5233 | Server entry has malformed ServiceName property |
| 5234 | Server entry references missing AppID registration |
| 5235 | Server entry has malformed Permissions property |
| 5236 | Server entry has malformed PackageMoniker property |
| 5237 | Server entry has malformed appUserModelID property |
| 5238 | Server entry is a service but IdentityType is not RunAs |
| 5239 | Server entry present, but a value was missing/invalid |
| 5240 | Per-machine Server registrations must not have PackageMoniker property |
| 5241 | Per-machine Server registration must not have a ActivateAsPackage IdentityType |
| 5242 | Per-machine Server registration must not have an Instancing property |
| 5243 | Per-machine Server registrations must not have appUserModelID property |
| 5244 | ActivateAsActivator servers must not have PackageMoniker property |
| 5246 | Server entry has malformed ClassNames property |
| 5247 | Server entry has malformed DebuggerPath property |
| 5248 | Server entry has malformed Environment property |
| 5249 | The executable pointed to by the ExePath property is missing |
| 5250 | Server is per user ActivateAsActivator, must not be activated from non app container |
| 5300 | Interface entry has missing or malformed proxy/stub CLSID property |
| 5301 | Proxy/Stub CLSID entry has malformed DllPath property |
| 5302 | ActivatableClassId entry is marked inproc, but has RemoteServer property |
| 5303 | ActivatableClassId entry is marked remote, but is missing RemoteServer property |
| 5304 | ActivatableClassId entry has malformed RemoteServer property |
| 5305 | ActivatableClassId has ActivateAsUser, but is not partial trust |
| 5306 | ActivatableClassId entry has malformed ActivateAsUser property |
| 5400 | CoInitialize cannot be called from apartment shutdown callbacks or their Release methods. |
| 5401 | RoRegisterForApartmentShutdown cannot be called from apartment shutdown callbacks or their Release methods. |
| 5402 | RoUnregisterForApartmentShutdown cannot be called from apartment shutdown callbacks or their Release methods. |
| 5403 | A COM call (IID: %1, method index: %2!d!) to an ASTA (thread %3!d!) was blocked because the call chain originated in or passed through another ASTA (thread %4!d!). This call pattern is deadlock-prone and disallowed by apartment call control. |
| 5404 | Cannot create a WinRT object from apartment shutdown callbacks or their Release methods. |
| 5405 | Cannot create a WinRT object during host MTA shutdown. |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| CLIPFORMAT_UserFree | CLIPFORMAT_UserMarshal |
| CLIPFORMAT_UserSize | CLIPFORMAT_UserUnmarshal |
| CLSIDFromOle1Class | CLSIDFromProgID |
| CLSIDFromString | CStdAsyncStubBuffer2_Connect |
| CStdAsyncStubBuffer2_Disconnect | CStdAsyncStubBuffer2_Release |
| CStdAsyncStubBuffer_AddRef | CStdAsyncStubBuffer_Connect |
| CStdAsyncStubBuffer_Disconnect | CStdAsyncStubBuffer_Invoke |
| CStdAsyncStubBuffer_QueryInterface | CStdAsyncStubBuffer_Release |
| CStdStubBuffer2_Connect | CStdStubBuffer2_CountRefs |
| CStdStubBuffer2_Disconnect | CStdStubBuffer2_QueryInterface |
| CStdStubBuffer_AddRef | CStdStubBuffer_Connect |
| CStdStubBuffer_CountRefs | CStdStubBuffer_DebugServerQueryInterface |
| CStdStubBuffer_DebugServerRelease | CStdStubBuffer_Disconnect |
| CStdStubBuffer_Invoke | CStdStubBuffer_IsIIDSupported |
| CStdStubBuffer_QueryInterface | CleanupComl2StateInAllTls |
| CleanupOleStateInAllTls | CleanupTlsComl2State |
| CleanupTlsOleState | ClearCleanupFlag |
| CoAddRefServerProcess | CoAllowUnmarshalerCLSID |
| CoCancelCall | CoCopyProxy |
| CoCreateErrorInfo | CoCreateFreeThreadedMarshaler |
| CoCreateGuid | CoCreateInstance |
| CoCreateInstanceEx | CoCreateInstanceFromApp |
| CoCreateObjectInContext | CoDeactivateObject |
| CoDecodeProxy | CoDecrementMTAUsage |
| CoDisableCallCancellation | CoDisconnectContext |
| CoDisconnectObject | CoEnableCallCancellation |
| CoFreeUnusedLibraries | CoFreeUnusedLibrariesEx |
| CoGetActivationState | CoGetApartmentID |
| CoGetApartmentType | CoGetCallContext |
| CoGetCallState | CoGetCallerTID |
| CoGetCancelObject | CoGetClassObject |
| CoGetClassVersion | CoGetContextToken |
| CoGetCurrentLogicalThreadId | CoGetCurrentProcess |
| CoGetDefaultContext | CoGetErrorInfo |
| CoGetInstanceFromFile | CoGetInstanceFromIStorage |
| CoGetInterfaceAndReleaseStream | CoGetMalloc |
| CoGetMarshalSizeMax | CoGetModuleType |
| CoGetObjectContext | CoGetPSClsid |
| CoGetProcessIdentifier | CoGetStandardMarshal |
| CoGetStdMarshalEx | CoGetSystemSecurityPermissions |
| CoGetTreatAsClass | CoImpersonateClient |
| CoIncrementMTAUsage | CoInitializeEx |
| CoInitializeSecurity | CoInitializeWOW |
| CoInvalidateRemoteMachineBindings | CoIsHandlerConnected |
| CoLockObjectExternal | CoMarshalHresult |
| CoMarshalInterThreadInterfaceInStream | CoMarshalInterface |
| CoPopServiceDomain | CoPushServiceDomain |
| CoQueryAuthenticationServices | CoQueryClientBlanket |
| CoQueryProxyBlanket | CoReactivateObject |
| CoRegisterActivationFilter | CoRegisterClassObject |
| CoRegisterInitializeSpy | CoRegisterMallocSpy |
| CoRegisterMessageFilter | CoRegisterPSClsid |
| CoRegisterSurrogate | CoRegisterSurrogateEx |
| CoReleaseMarshalData | CoReleaseServerProcess |
| CoResumeClassObjects | CoRetireServer |
| CoRevertToSelf | CoRevokeClassObject |
| CoRevokeInitializeSpy | CoRevokeMallocSpy |
| CoSetCancelObject | CoSetErrorInfo |
| CoSetProxyBlanket | CoSuspendClassObjects |
| CoSwitchCallContext | CoTaskMemAlloc |
| CoTaskMemFree | CoTaskMemRealloc |
| CoTestCancel | CoUninitialize |
| CoUnloadingWOW | CoUnmarshalHresult |
| CoUnmarshalInterface | CoVrfCheckThreadState |
| CoVrfGetThreadState | CoVrfReleaseThreadState |
| CoWaitForMultipleHandles | CoWaitForMultipleObjects |
| CreateErrorInfo | CreateStreamOnHGlobal |
| DcomChannelSetHResult | DllDebugObjectRPCHook |
| DllGetActivationFactory | DllGetClassObject |
| EnableHookObject | FreePropVariantArray |
| FreePropVariantArrayWorker | GetCatalogHelper |
| GetErrorInfo | GetFuncDescs |
| GetHGlobalFromStream | GetHookInterface |
| GetRestrictedErrorInfo | HACCEL_UserFree |
| HACCEL_UserMarshal | HACCEL_UserSize |
| HACCEL_UserUnmarshal | HBITMAP_UserFree |
| HBITMAP_UserMarshal | HBITMAP_UserSize |
| HBITMAP_UserUnmarshal | HBRUSH_UserFree |
| HBRUSH_UserMarshal | HBRUSH_UserSize |
| HBRUSH_UserUnmarshal | HDC_UserFree |
| HDC_UserMarshal | HDC_UserSize |
| HDC_UserUnmarshal | HGLOBAL_UserFree |
| HGLOBAL_UserMarshal | HGLOBAL_UserSize |
| HGLOBAL_UserUnmarshal | HICON_UserFree |
| HICON_UserMarshal | HICON_UserSize |
| HICON_UserUnmarshal | HMENU_UserFree |
| HMENU_UserMarshal | HMENU_UserSize |
| HMENU_UserUnmarshal | HMONITOR_UserFree |
| HMONITOR_UserMarshal | HMONITOR_UserSize |
| HMONITOR_UserUnmarshal | HPALETTE_UserFree |
| HPALETTE_UserMarshal | HPALETTE_UserSize |
| HPALETTE_UserUnmarshal | HRGN_UserFree |
| HRGN_UserMarshal | HRGN_UserSize |
| HRGN_UserUnmarshal | HSTRING_UserFree |
| HSTRING_UserMarshal | HSTRING_UserSize |
| HSTRING_UserUnmarshal | HWND_UserFree |
| HWND_UserMarshal | HWND_UserSize |
| HWND_UserUnmarshal | HkOleRegisterObject |
| IIDFromString | InternalAppInvokeExceptionFilter |
| InternalCAggIdRelease | InternalCAggIdSetHandler |
| InternalCCFreeUnused | InternalCCGetClassInformationForDde |
| InternalCCGetClassInformationFromKey | InternalCCSetDdeServerWindow |
| InternalCMLSendReceive | InternalCStdIdentityGetIProxyManager |
| InternalCStdIdentityGetInternalUnk | InternalCStdIdentityUpdateFlags |
| InternalCallAsProxyExceptionFilter | InternalCallFrameExceptionFilter |
| InternalCallerIsAppContainer | InternalCanMakeOutCall |
| InternalCoIsSurrogateProcess | InternalCoRegisterDisconnectCallback |
| InternalCoRegisterSurrogatedObject | InternalCoStdMarshalObject |
| InternalCoUnregisterDisconnectCallback | InternalCompleteObjRef |
| InternalCreateCAggId | InternalCreateIdentityHandler |
| InternalDoATClassCreate | InternalFillLocalOXIDInfo |
| InternalFreeObjRef | InternalGetWindowPropInterface |
| InternalIrotEnumRunning | InternalIrotGetObject |
| InternalIrotGetTimeOfLastChange | InternalIrotIsRunning |
| InternalIrotNoteChangeTime | InternalIrotRegister |
| InternalIrotRevoke | InternalIsApartmentInitialized |
| InternalIsProcessInitialized | InternalMarshalObjRef |
| InternalNotifyDDStartOrStop | InternalOleModalLoopBlockFn |
| InternalRegisterWindowPropInterface | InternalReleaseMarshalObjRef |
| InternalSTAInvoke | InternalServerExceptionFilter |
| InternalSetAptCallCtrlOnTlsIfRequired | InternalSetOleThunkWowPtr |
| InternalStubInvoke | InternalTlsAllocData |
| InternalUnmarshalObjRef | IsErrorPropagationEnabled |
| NdrCStdStubBuffer2_Release | NdrCStdStubBuffer_Release |
| NdrExtStubInitialize | NdrOleDllGetClassObject |
| NdrOleInitializeExtension | NdrProxyForwardingFunction10 |
| NdrProxyForwardingFunction11 | NdrProxyForwardingFunction12 |
| NdrProxyForwardingFunction13 | NdrProxyForwardingFunction14 |
| NdrProxyForwardingFunction15 | NdrProxyForwardingFunction16 |
| NdrProxyForwardingFunction17 | NdrProxyForwardingFunction18 |
| NdrProxyForwardingFunction19 | NdrProxyForwardingFunction20 |
| NdrProxyForwardingFunction21 | NdrProxyForwardingFunction22 |
| NdrProxyForwardingFunction23 | NdrProxyForwardingFunction24 |
| NdrProxyForwardingFunction25 | NdrProxyForwardingFunction26 |
| NdrProxyForwardingFunction27 | NdrProxyForwardingFunction28 |
| NdrProxyForwardingFunction29 | NdrProxyForwardingFunction3 |
| NdrProxyForwardingFunction30 | NdrProxyForwardingFunction31 |
| NdrProxyForwardingFunction32 | NdrProxyForwardingFunction4 |
| NdrProxyForwardingFunction5 | NdrProxyForwardingFunction6 |
| NdrProxyForwardingFunction7 | NdrProxyForwardingFunction8 |
| NdrProxyForwardingFunction9 | NdrpFindInterface |
| ObjectStublessClient10 | ObjectStublessClient11 |
| ObjectStublessClient12 | ObjectStublessClient13 |
| ObjectStublessClient14 | ObjectStublessClient15 |
| ObjectStublessClient16 | ObjectStublessClient17 |
| ObjectStublessClient18 | ObjectStublessClient19 |
| ObjectStublessClient20 | ObjectStublessClient21 |
| ObjectStublessClient22 | ObjectStublessClient23 |
| ObjectStublessClient24 | ObjectStublessClient25 |
| ObjectStublessClient26 | ObjectStublessClient27 |
| ObjectStublessClient28 | ObjectStublessClient29 |
| ObjectStublessClient3 | ObjectStublessClient30 |
| ObjectStublessClient31 | ObjectStublessClient32 |
| ObjectStublessClient4 | ObjectStublessClient5 |
| ObjectStublessClient6 | ObjectStublessClient7 |
| ObjectStublessClient8 | ObjectStublessClient9 |
| ProgIDFromCLSID | PropVariantClear |
| PropVariantCopy | ReleaseFuncDescs |
| RoActivateInstance | RoCaptureErrorContext |
| RoClearError | RoFailFastWithErrorContext |
| RoFailFastWithErrorContextInternal | RoFailFastWithErrorContextInternal2 |
| RoFreeParameterizedTypeExtra | RoGetActivatableClassRegistration |
| RoGetActivationFactory | RoGetAgileReference |
| RoGetApartmentIdentifier | RoGetErrorReportingFlags |
| RoGetMatchingRestrictedErrorInfo | RoGetParameterizedTypeInstanceIID |
| RoGetServerActivatableClasses | RoInitialize |
| RoInspectCapturedStackBackTrace | RoInspectThreadErrorInfo |
| RoOriginateError | RoOriginateErrorW |
| RoOriginateLanguageException | RoParameterizedTypeExtraGetTypeSignature |
| RoRegisterActivationFactories | RoRegisterForApartmentShutdown |
| RoReportCapabilityCheckFailure | RoReportFailedDelegate |
| RoReportUnhandledError | RoResolveRestrictedErrorInfoReference |
| RoRevokeActivationFactories | RoSetErrorReportingFlags |
| RoTransformError | RoTransformErrorW |
| RoUninitialize | RoUnregisterForApartmentShutdown |
| SetCleanupFlag | SetErrorInfo |
| SetRestrictedErrorInfo | StringFromCLSID |
| StringFromGUID2 | StringFromIID |
| UpdateDCOMSettings | UpdateProcessTracing |
| WdtpInterfacePointer_UserMarshal | WdtpInterfacePointer_UserSize |
| WdtpInterfacePointer_UserUnmarshal | WindowsCompareStringOrdinal |
| WindowsConcatString | WindowsCreateString |
| WindowsCreateStringReference | WindowsDeleteString |
| WindowsDeleteStringBuffer | WindowsDuplicateString |
| WindowsGetStringLen | WindowsGetStringRawBuffer |
| WindowsInspectString | WindowsInspectString2 |
| WindowsIsStringEmpty | WindowsPreallocateStringBuffer |
| WindowsPromoteStringBuffer | WindowsReplaceString |
| WindowsStringHasEmbeddedNull | WindowsSubstring |
| WindowsSubstringWithSpecifiedLength | WindowsTrimStringEnd |
| WindowsTrimStringStart |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter __dllonexit _amsg_exit _except_handler4_common _ftol2 _initterm _itoa_s _local_unwind4 _lock _onexit _purecall _resetstkoflw _unlock _vsnprintf _vsnwprintf _wcsicmp _wcslwr _wcsnicmp _wtoi _wtol free malloc memcmp memcpy memcpy_s memmove memmove_s memset qsort rand_s realloc wcschr wcsncmp wcsncpy_s wcsnlen wcsrchr wcsstr wcstok - RPCRT4.dll:
I_RpcAllocate I_RpcAsyncAbortCall I_RpcAsyncSetHandle I_RpcBCacheAllocate I_RpcBCacheFree I_RpcBindingInqCurrentModifiedId I_RpcBindingInqLocalClientPID I_RpcBindingInqTransportType I_RpcBindingSetPrivateOption I_RpcClearMutex I_RpcExceptionFilter I_RpcFree I_RpcFreeBuffer I_RpcGetBuffer I_RpcGetBufferWithObject I_RpcMgmtEnableDedicatedThreadPool I_RpcMgmtQueryDedicatedThreadPool I_RpcOpenClientProcess I_RpcReceive I_RpcRequestMutex I_RpcSend I_RpcSendReceive I_RpcServerGetAssociationID I_RpcServerSubscribeForDisconnectNotification I_RpcSetDCOMAppId MesBufferHandleReset MesDecodeBufferHandleCreate MesEncodeFixedBufferHandleCreate MesHandleFree NdrAsyncServerCall NdrClearOutParameters NdrClientCall NdrClientCall2 NdrClientCall4 NdrClientInitializeNew NdrConvert2 NdrCorrelationFree NdrCorrelationInitialize NdrDcomAsyncClientCall2 NdrDllGetClassObject NdrFullPointerXlatFree NdrFullPointerXlatInit NdrGetTypeFlags NdrGetUserMarshalInfo NdrMesTypeAlignSize2 NdrMesTypeDecode2 NdrMesTypeEncode2 NdrOleAllocate NdrOleFree NdrServerCall2 NdrServerInitialize NdrStubCall NdrStubCall2 RpcAsyncCancelCall RpcAsyncCompleteCall RpcAsyncGetCallStatus RpcAsyncInitializeHandle RpcBindingBind RpcBindingCopy RpcBindingCreateW RpcBindingFree RpcBindingFromStringBindingW RpcBindingInqAuthClientW RpcBindingInqAuthInfoExW RpcBindingInqObject RpcBindingServerFromClient RpcBindingSetAuthInfoExW RpcBindingSetOption RpcBindingToStringBindingW RpcBindingUnbind RpcBindingVectorFree RpcCancelThreadEx RpcCertGeneratePrincipalNameW RpcErrorAddRecord RpcErrorEndEnumeration RpcErrorGetNextRecord RpcErrorStartEnumeration RpcImpersonateClient RpcImpersonateClient2 RpcImpersonateClientContainer RpcMgmtInqComTimeout RpcMgmtSetCancelTimeout RpcMgmtSetComTimeout RpcRaiseException RpcRevertContainerImpersonation RpcRevertToSelfEx RpcServerInqBindings RpcServerInqCallAttributesW RpcServerRegisterAuthInfoW RpcServerRegisterIf3 RpcServerSubscribeForNotification RpcServerTestCancel RpcServerUnregisterIf RpcServerUnsubscribeForNotification RpcServerUseProtseqEpExW RpcServerUseProtseqEpW RpcServerUseProtseqExW RpcServerUseProtseqW RpcSmDestroyClientContext RpcStringBindingParseW RpcStringFreeW SimpleTypeAlignment SimpleTypeBufferSize SimpleTypeMemorySize UuidCreate - ntdll.dll:
DbgPrint EtwEventActivityIdControl EtwEventRegister EtwEventSetInformation EtwEventUnregister EtwEventWrite EtwEventWriteTransfer EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids EvtIntReportEventAndSourceAsync LdrStandardizeSystemPath NtApphelpCacheControl NtClose NtCreateKey NtDuplicateObject NtLoadKeyEx NtOpenKey NtOpenKey NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueryKey NtQueryObject NtQuerySecurityAttributesToken NtQuerySystemInformation NtQueryTimerResolution NtQueryValueKey NtQueryValueKey NtTerminateProcess RtlAllocateHeap RtlAppendUnicodeToString RtlApplicationVerifierStop RtlCaptureStackBackTrace RtlCheckForOrphanedCriticalSections RtlCompareMemory RtlCopySid RtlDelete RtlDeleteCriticalSection RtlDeleteNoSplay RtlDllShutdownInProgress RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlEqualUnicodeString RtlFreeAnsiString RtlFreeHeap RtlFreeSid RtlGetAppContainerNamedObjectPath RtlGetAppContainerSidType RtlImageNtHeader RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitializeConditionVariable RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount RtlIsCriticalSectionLockedByThread RtlIsMultiSessionSku RtlLengthSid RtlLoadString RtlNtStatusToDosError RtlQueryPackageIdentity RtlRealPredecessor RtlRealSuccessor RtlReportException RtlSetThreadSubProcessTag RtlSidDominates RtlSleepConditionVariableCS RtlSplay RtlValidRelativeSecurityDescriptor RtlWakeAllConditionVariable WinSqmAddToAverageDWORD swprintf_s - api-ms-win-core-debug-l1-1-1.dll:
KernelBase!DebugBreak KernelBase!IsDebuggerPresent KernelBase!OutputDebugStringA KernelBase!OutputDebugStringW - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!RaiseException KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter ntdll!RtlRestoreLastWin32Error - api-ms-win-core-errorhandling-l1-1-3.dll:
KernelBase!RaiseFailFastException - api-ms-win-core-fibers-l1-1-1.dll:
KernelBase!FlsAlloc KernelBase!FlsFree KernelBase!FlsSetValue KernelBase!IsThreadAFiber - api-ms-win-core-file-l1-2-1.dll:
KernelBase!CreateFileW KernelBase!GetFileAttributesW - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle KernelBase!DuplicateHandle - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap KernelBase!HeapCompact KernelBase!HeapCreate KernelBase!HeapDestroy KernelBase!HeapValidate ntdll!RtlAllocateHeap ntdll!RtlFreeHeap ntdll!RtlReAllocateHeap ntdll!RtlSizeHeap - api-ms-win-core-heap-l2-1-0.dll:
KernelBase!GlobalAlloc KernelBase!GlobalFree KernelBase!LocalAlloc KernelBase!LocalFree - api-ms-win-core-interlocked-l1-2-0.dll:
ntdll!RtlInitializeSListHead ntdll!RtlInterlockedPopEntrySList ntdll!RtlInterlockedPushEntrySList ntdll!RtlQueryDepthSList - api-ms-win-core-libraryloader-l1-2-0.dll:
KernelBase!FreeLibrary KernelBase!FreeLibraryAndExitThread KernelBase!GetModuleFileNameA KernelBase!GetModuleFileNameW KernelBase!GetModuleHandleA KernelBase!GetModuleHandleExW KernelBase!GetModuleHandleW KernelBase!GetProcAddress KernelBase!LoadLibraryExA KernelBase!LoadLibraryExW KernelBase!LoadStringW - api-ms-win-core-localization-l1-2-1.dll:
KernelBase!FormatMessageW KernelBase!LCMapStringW - api-ms-win-core-memory-l1-1-2.dll:
KernelBase!CreateFileMappingW KernelBase!MapViewOfFile KernelBase!OpenFileMappingW KernelBase!UnmapViewOfFile KernelBase!VirtualAlloc KernelBase!VirtualFree KernelBase!VirtualProtect KernelBase!VirtualQuery - api-ms-win-core-processenvironment-l1-2-0.dll:
KernelBase!ExpandEnvironmentStringsW KernelBase!FreeEnvironmentStringsA KernelBase!GetCommandLineW KernelBase!GetEnvironmentStringsW KernelBase!SearchPathW - api-ms-win-core-processthreads-l1-1-2.dll:
KernelBase!GetProcessMitigationPolicy KernelBase!OpenProcessToken KernelBase!OpenThreadToken KernelBase!SetThreadToken kernel32!CreateThread kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!GetProcessId kernel32!OpenProcess kernel32!ProcessIdToSessionId kernel32!SetThreadStackGuarantee kernel32!SwitchToThread kernel32!TerminateProcess - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegCloseKey KernelBase!RegCreateKeyExA KernelBase!RegCreateKeyExW KernelBase!RegDeleteKeyExA KernelBase!RegDeleteKeyExW KernelBase!RegEnumKeyExW KernelBase!RegEnumValueW KernelBase!RegGetValueA KernelBase!RegGetValueW KernelBase!RegOpenCurrentUser KernelBase!RegOpenKeyExA KernelBase!RegOpenKeyExW KernelBase!RegOpenUserClassesRoot KernelBase!RegQueryInfoKeyW KernelBase!RegQueryValueExA KernelBase!RegQueryValueExW KernelBase!RegSetValueExA KernelBase!RegSetValueExW - api-ms-win-core-string-l1-1-0.dll:
KernelBase!CompareStringOrdinal KernelBase!CompareStringW KernelBase!GetStringTypeW KernelBase!MultiByteToWideChar KernelBase!WideCharToMultiByte - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventA KernelBase!CreateEventW KernelBase!CreateWaitableTimerExW KernelBase!InitOnceExecuteOnce KernelBase!InitializeCriticalSectionAndSpinCount KernelBase!OpenEventA KernelBase!OpenEventW KernelBase!ResetEvent KernelBase!SetEvent KernelBase!SetWaitableTimerEx KernelBase!Sleep KernelBase!SleepEx KernelBase!WaitForMultipleObjectsEx KernelBase!WaitForSingleObject KernelBase!WaitForSingleObjectEx KernelBase!WaitOnAddress ntdll!RtlAcquireSRWLockExclusive ntdll!RtlAcquireSRWLockShared ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeConditionVariable ntdll!RtlLeaveCriticalSection ntdll!RtlReleaseSRWLockExclusive ntdll!RtlReleaseSRWLockShared ntdll!RtlWakeAddressAll - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetComputerNameExW KernelBase!GetSystemInfo KernelBase!GetSystemTimeAsFileTime KernelBase!GetSystemWindowsDirectoryW KernelBase!GetTickCount KernelBase!GetTickCount64 - api-ms-win-core-threadpool-l1-2-0.dll:
KernelBase!CreateThreadpoolTimer KernelBase!CreateThreadpoolWait KernelBase!CreateThreadpoolWork ntdll!TpCallbackSetEventOnCompletion ntdll!TpPostWork ntdll!TpReleaseTimer ntdll!TpReleaseWait ntdll!TpReleaseWork ntdll!TpSetTimer ntdll!TpSetWait ntdll!TpWaitForTimer ntdll!TpWaitForWait ntdll!TpWaitForWork - api-ms-win-security-base-l1-2-0.dll:
KernelBase!AccessCheck KernelBase!AccessCheckByType KernelBase!AddAccessAllowedAce KernelBase!AddAce KernelBase!CheckTokenMembership KernelBase!CopySid KernelBase!CreateWellKnownSid KernelBase!DuplicateToken KernelBase!EqualSid KernelBase!GetAce KernelBase!GetAppContainerAce KernelBase!GetKernelObjectSecurity KernelBase!GetLengthSid KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorGroup KernelBase!GetSecurityDescriptorLength KernelBase!GetSecurityDescriptorOwner KernelBase!GetSecurityDescriptorRMControl KernelBase!GetSecurityDescriptorSacl KernelBase!GetSidLengthRequired KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!ImpersonateAnonymousToken KernelBase!ImpersonateLoggedOnUser KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!InitializeSid KernelBase!IsValidSecurityDescriptor KernelBase!IsValidSid KernelBase!MakeSelfRelativeSD KernelBase!MapGenericMask KernelBase!PrivilegeCheck KernelBase!RevertToSelf KernelBase!SetSecurityDescriptorDacl KernelBase!SetSecurityDescriptorGroup KernelBase!SetSecurityDescriptorOwner KernelBase!SetSecurityDescriptorRMControl KernelBase!SetSecurityDescriptorSacl - api-ms-win-eventing-provider-l1-1-0.dll:
ntdll!EtwEventRegister ntdll!EtwEventUnregister ntdll!EtwEventWrite ntdll!EtwEventWriteEx - api-ms-win-core-heap-obsolete-l1-1-0.dll:
kernel32!GlobalLock kernel32!GlobalReAlloc kernel32!GlobalSize kernel32!GlobalUnlock - api-ms-win-core-privateprofile-l1-1-1.dll:
kernel32!GetProfileStringW - api-ms-win-core-sidebyside-l1-1-0.dll:
KernelBase!ActivateActCtx KernelBase!AddRefActCtx KernelBase!CreateActCtxW KernelBase!DeactivateActCtx KernelBase!FindActCtxSectionGuid KernelBase!FindActCtxSectionStringW KernelBase!GetCurrentActCtx KernelBase!ReleaseActCtx - api-ms-win-core-string-obsolete-l1-1-0.dll:
kernel32!lstrcmpi kernel32!lstrcmpiW kernel32!lstrlen kernel32!lstrlenW - api-ms-win-core-windowserrorreporting-l1-1-0.dll:
KernelBase!WerRegisterMemoryBlock - api-ms-win-core-quirks-l1-1-0.dll:
KernelBase!QuirkIsEnabled KernelBase!QuirkIsEnabledForProcess - api-ms-win-core-util-l1-1-0.dll:
ntdll!RtlDecodePointer ntdll!RtlEncodePointer - api-ms-win-core-wow64-l1-1-0.dll:
KernelBase!IsWow64Process - api-ms-win-core-apiquery-l1-1-0.dll:
ntdll!ApiSetQueryApiSetPresence - api-ms-win-core-delayload-l1-1-1.dll:
KernelBase!DelayLoadFailureHook KernelBase!ResolveDelayLoadedAPI