RulesEngine.dll

v124.34100.0.0 64-bit Windows NT Analyzed
Download
Description
—
Authors
© Microsoft Corporation. All rights reserved.
File size
835.5 KB
Uploaded
2025-12-01 07:52
Views
89
SHA-256
fa4fdf0812a149f204c4891a9127541a

Exported functions 2

DllCanUnloadNow #1 · 0x3fa10
DllGetActivationFactory #2 · 0x3faa0

Imported DLLs & functions 205

ADVAPI32.dll 12
EventActivityIdControl 0x18008b058
EventRegister 0x18008b040
EventSetInformation 0x18008b038
EventUnregister 0x18008b028
EventWriteTransfer 0x18008b030
RegCloseKey 0x18008b018
RegCreateKeyExW 0x18008b048
RegCreateKeyW 0x18008b010
RegDeleteTreeW 0x18008b020
RegGetValueW 0x18008b000
RegNotifyChangeKeyValue 0x18008b050
RegSetKeyValueW 0x18008b008
api-ms-win-core-com-l1-1-0.dll 7
CoCreateFreeThreadedMarshaler 0x18008b338
CoCreateInstance 0x18008b320
CoGetApartmentType 0x18008b350
CoGetObjectContext 0x18008b348
CoTaskMemAlloc 0x18008b330
CoTaskMemFree 0x18008b340
PropVariantClear 0x18008b328
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18008b360
IsDebuggerPresent 0x18008b370
OutputDebugStringW 0x18008b368
api-ms-win-core-errorhandling-l1-1-0.dll 2
GetLastError 0x18008b380
SetLastError 0x18008b388
api-ms-win-core-featurestaging-l1-1-0.dll 4
GetFeatureEnabledState 0x18008b398
RecordFeatureUsage 0x18008b3a0
SubscribeFeatureStateChangeNotification 0x18008b3b0
UnsubscribeFeatureStateChangeNotification 0x18008b3a8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18008b3c0
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18008b3d0
HeapAlloc 0x18008b3e0
HeapFree 0x18008b3d8
api-ms-win-core-interlocked-l1-1-0.dll 3
InitializeSListHead 0x18008b3f0
InterlockedFlushSList 0x18008b400
InterlockedPushEntrySList 0x18008b3f8
api-ms-win-core-libraryloader-l1-2-0.dll 6
FreeLibrary 0x18008b410
GetModuleFileNameA 0x18008b430
GetModuleHandleExW 0x18008b420
GetModuleHandleW 0x18008b438
GetProcAddress 0x18008b418
LoadLibraryExA 0x18008b428
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x18008b448
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x18008b458
GetUserDefaultLocaleName 0x18008b460
api-ms-win-core-processthreads-l1-1-0.dll 2
GetCurrentProcessId 0x18008b470
GetCurrentThreadId 0x18008b478
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18008b488
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x18008b498
WideCharToMultiByte 0x18008b4a0
api-ms-win-core-synch-l1-1-0.dll 19
AcquireSRWLockExclusive 0x18008b4b0
AcquireSRWLockShared 0x18008b4c0
CreateEventExW 0x18008b4d8
CreateEventW 0x18008b510
CreateMutexExW 0x18008b4e0
CreateSemaphoreExW 0x18008b538
DeleteCriticalSection 0x18008b530
EnterCriticalSection 0x18008b520
InitializeCriticalSection 0x18008b540
InitializeCriticalSectionEx 0x18008b4d0
LeaveCriticalSection 0x18008b4f0
OpenSemaphoreW 0x18008b4e8
ReleaseMutex 0x18008b500
ReleaseSemaphore 0x18008b528
ReleaseSRWLockExclusive 0x18008b4b8
ReleaseSRWLockShared 0x18008b4c8
SetEvent 0x18008b508
WaitForSingleObject 0x18008b518
WaitForSingleObjectEx 0x18008b4f8
api-ms-win-core-synch-l1-2-0.dll 6
InitializeConditionVariable 0x18008b560
InitOnceBeginInitialize 0x18008b558
InitOnceComplete 0x18008b568
InitOnceExecuteOnce 0x18008b570
SleepConditionVariableCS 0x18008b578
WakeAllConditionVariable 0x18008b550
api-ms-win-core-sysinfo-l1-1-0.dll 1
GetSystemTimeAsFileTime 0x18008b588
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetSystemTimePreciseAsFileTime 0x18008b598
api-ms-win-core-threadpool-l1-2-0.dll 9
CloseThreadpoolTimer 0x18008b5d8
CloseThreadpoolWait 0x18008b5e0
CreateThreadpoolTimer 0x18008b5d0
CreateThreadpoolWait 0x18008b5c8
SetThreadpoolTimer 0x18008b5b8
SetThreadpoolWait 0x18008b5e8
TrySubmitThreadpoolCallback 0x18008b5a8
WaitForThreadpoolTimerCallbacks 0x18008b5b0
WaitForThreadpoolWaitCallbacks 0x18008b5c0
api-ms-win-core-util-l1-1-0.dll 1
EncodePointer 0x18008b5f8
api-ms-win-crt-convert-l1-1-0.dll 4
strtod 0x18008b608
strtoll 0x18008b610
strtoull 0x18008b618
wcstoul 0x18008b620
api-ms-win-crt-heap-l1-1-0.dll 4
_callnewh 0x18008b648
free 0x18008b638
malloc 0x18008b640
realloc 0x18008b630
api-ms-win-crt-locale-l1-1-0.dll 1
localeconv 0x18008b658
api-ms-win-crt-math-l1-1-0.dll 2
_dtest 0x18008b668
ceilf 0x18008b670
api-ms-win-crt-runtime-l1-1-0.dll 15
_cexit 0x18008b6d0
_configure_narrow_argv 0x18008b6b8
_crt_atexit 0x18008b6d8
_errno 0x18008b688
_execute_onexit_table 0x18008b6e0
_initialize_narrow_environment 0x18008b6e8
_initialize_onexit_table 0x18008b6f0
_initterm 0x18008b6c8
_initterm_e 0x18008b6c0
_invalid_parameter_noinfo 0x18008b680
_invalid_parameter_noinfo_noreturn 0x18008b6b0
_register_onexit_function 0x18008b698
_seh_filter_dll 0x18008b6a8
abort 0x18008b690
terminate 0x18008b6a0
api-ms-win-crt-stdio-l1-1-0.dll 2
__stdio_common_vsprintf 0x18008b700
__stdio_common_vswprintf 0x18008b708
api-ms-win-crt-string-l1-1-0.dll 2
iswspace 0x18008b720
towlower 0x18008b718
api-ms-win-crt-time-l1-1-0.dll 2
_gmtime64_s 0x18008b730
_mkgmtime64 0x18008b738
MSVCP140_APP.dll 65
_Thrd_yield 0x18008b200
_Wcscoll 0x18008b240
_Wcsxfrm 0x18008b238
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z 0x18008b208
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z 0x18008b218
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z 0x18008b168
?__ExceptionPtrCreate@@YAXPEAX@Z 0x18008b228
?__ExceptionPtrCurrentException@@YAXPEAX@Z 0x18008b220
?__ExceptionPtrDestroy@@YAXPEAX@Z 0x18008b210
?__ExceptionPtrRethrow@@YAXPEBX@Z 0x18008b230
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x18008b260
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x18008b250
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x18008b0e0
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x18008b0d8
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ 0x18008b140
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x18008b1c0
?_Incref@facet@locale@std@@UEAAXXZ 0x18008b248
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x18008b178
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z 0x18008b0d0
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x18008b148
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ 0x18008b0c8
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ 0x18008b188
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ 0x18008b158
?_Xbad_alloc@std@@YAXXZ 0x18008b170
?_Xbad_function_call@std@@YAXXZ 0x18008b080
?_Xinvalid_argument@std@@YAXPEBD@Z 0x18008b078
?_Xlength_error@std@@YAXPEBD@Z 0x18008b1f8
?_Xout_of_range@std@@YAXPEBD@Z 0x18008b088
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z 0x18008b120
??0_Locinfo@std@@QEAA@PEBD@Z 0x18008b1d0
??0_Lockit@std@@QEAA@H@Z 0x18008b1c8
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x18008b098
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x18008b090
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x18008b0a0
??0facet@locale@std@@IEAA@_K@Z 0x18008b1e0
??1_Locinfo@std@@QEAA@XZ 0x18008b268
??1_Lockit@std@@QEAA@XZ 0x18008b1d8
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x18008b1f0
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x18008b198
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x18008b180
??1facet@locale@std@@MEAA@XZ 0x18008b1e8
??Bid@locale@std@@QEAA_KXZ 0x18008b1b0
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ 0x18008b0c0
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z 0x18008b190
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEB_W4@Z 0x18008b0b8
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ 0x18008b1a8
?id@?$collate@_W@std@@2V0locale@2@A 0x18008b160
?id@?$ctype@_W@std@@2V0locale@2@A 0x18008b1b8
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A 0x18008b128
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A 0x18008b130
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z 0x18008b0e8
?is@?$ctype@_W@std@@QEBA_NF_W@Z 0x18008b258
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z 0x18008b0b0
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z 0x18008b0f0
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z 0x18008b0a8
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ 0x18008b108
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z 0x18008b070
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z 0x18008b068
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ 0x18008b138
?tolower@?$ctype@_W@std@@QEBA_W_W@Z 0x18008b118
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z 0x18008b110
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ 0x18008b1a0
?uncaught_exception@std@@YA_NXZ 0x18008b150
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z 0x18008b100
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z 0x18008b0f8
ntdll.dll 3
NtQueryWnfStateData 0x18008b748
RtlSubscribeWnfStateChangeNotification 0x18008b750
RtlUnsubscribeWnfNotificationWaitForCompletion 0x18008b758
OLEAUT32.dll 5
GetErrorInfo 0x18008b278
SetErrorInfo 0x18008b290
SysAllocString 0x18008b298
SysFreeString 0x18008b280
SysStringLen 0x18008b288
VCRUNTIME140_APP.dll 14
__C_specific_handler 0x18008b2d8
__CxxFrameHandler3 0x18008b2b8
__std_exception_copy 0x18008b2e8
__std_exception_destroy 0x18008b2f0
__std_terminate 0x18008b2e0
__std_type_info_destroy_list 0x18008b2c8
_CxxThrowException 0x18008b2d0
_purecall 0x18008b310
memchr 0x18008b2b0
memcmp 0x18008b2a8
memcpy 0x18008b300
memmove 0x18008b308
memset 0x18008b2c0
strchr 0x18008b2f8