LockAppBroker.dll

Description: Windows Lock App Broker DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: aeba279143af83b9baea74b5e5de2582

File Size: 347.0 KB

Uploaded At: Dec. 1, 2025, 7:59 a.m.

Views: 21

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1cf40)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x1c1c0)
  • DllGetClassObject (Ordinal: 3, Address: 0x1b720)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCancelCall (Address: 0x1004a084)
  • CoCreateFreeThreadedMarshaler (Address: 0x1004a0b4)
  • CoCreateInstance (Address: 0x1004a090)
  • CoDecrementMTAUsage (Address: 0x1004a088)
  • CoDisableCallCancellation (Address: 0x1004a09c)
  • CoEnableCallCancellation (Address: 0x1004a0a0)
  • CoGetApartmentType (Address: 0x1004a08c)
  • CoGetCallContext (Address: 0x1004a0a4)
  • CoIncrementMTAUsage (Address: 0x1004a080)
  • CoInitializeEx (Address: 0x1004a0b0)
  • CoTaskMemAlloc (Address: 0x1004a094)
  • CoTaskMemFree (Address: 0x1004a098)
  • CoTaskMemRealloc (Address: 0x1004a0bc)
  • CoUninitialize (Address: 0x1004a0b8)
  • CoWaitForMultipleHandles (Address: 0x1004a0ac)
  • PropVariantClear (Address: 0x1004a0a8)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1004a0c4)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x1004a0ec)
  • CStdStubBuffer2_CountRefs (Address: 0x1004a0d8)
  • CStdStubBuffer2_Disconnect (Address: 0x1004a130)
  • CStdStubBuffer2_QueryInterface (Address: 0x1004a120)
  • NdrProxyForwardingFunction3 (Address: 0x1004a114)
  • NdrProxyForwardingFunction4 (Address: 0x1004a10c)
  • NdrProxyForwardingFunction5 (Address: 0x1004a108)
  • ObjectStublessClient10 (Address: 0x1004a0e0)
  • ObjectStublessClient11 (Address: 0x1004a0e4)
  • ObjectStublessClient12 (Address: 0x1004a124)
  • ObjectStublessClient13 (Address: 0x1004a128)
  • ObjectStublessClient14 (Address: 0x1004a0e8)
  • ObjectStublessClient15 (Address: 0x1004a138)
  • ObjectStublessClient16 (Address: 0x1004a0d0)
  • ObjectStublessClient17 (Address: 0x1004a0f0)
  • ObjectStublessClient18 (Address: 0x1004a148)
  • ObjectStublessClient19 (Address: 0x1004a0dc)
  • ObjectStublessClient20 (Address: 0x1004a140)
  • ObjectStublessClient21 (Address: 0x1004a13c)
  • ObjectStublessClient22 (Address: 0x1004a11c)
  • ObjectStublessClient23 (Address: 0x1004a134)
  • ObjectStublessClient24 (Address: 0x1004a100)
  • ObjectStublessClient25 (Address: 0x1004a110)
  • ObjectStublessClient26 (Address: 0x1004a0f4)
  • ObjectStublessClient27 (Address: 0x1004a14c)
  • ObjectStublessClient28 (Address: 0x1004a144)
  • ObjectStublessClient29 (Address: 0x1004a0d4)
  • ObjectStublessClient30 (Address: 0x1004a0cc)
  • ObjectStublessClient31 (Address: 0x1004a118)
  • ObjectStublessClient6 (Address: 0x1004a104)
  • ObjectStublessClient7 (Address: 0x1004a12c)
  • ObjectStublessClient8 (Address: 0x1004a0fc)
  • ObjectStublessClient9 (Address: 0x1004a0f8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1004a158)
  • IsDebuggerPresent (Address: 0x1004a15c)
  • OutputDebugStringW (Address: 0x1004a154)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1004a164)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1004a16c)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1004a184)
  • RaiseException (Address: 0x1004a174)
  • SetLastError (Address: 0x1004a180)
  • SetUnhandledExceptionFilter (Address: 0x1004a17c)
  • UnhandledExceptionFilter (Address: 0x1004a178)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1004a18c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1004a198)
  • DuplicateHandle (Address: 0x1004a194)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1004a1a4)
  • HeapAlloc (Address: 0x1004a1a0)
  • HeapFree (Address: 0x1004a1a8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1004a1b0)
  • LocalFree (Address: 0x1004a1b4)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetSystemPowerStatus (Address: 0x1004a1bc)
  • RegisterWaitForSingleObject (Address: 0x1004a1c0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1004a1d4)
  • FreeLibrary (Address: 0x1004a1dc)
  • GetModuleFileNameA (Address: 0x1004a1d0)
  • GetModuleHandleExW (Address: 0x1004a1cc)
  • GetModuleHandleW (Address: 0x1004a1e0)
  • GetProcAddress (Address: 0x1004a1c8)
  • LoadStringW (Address: 0x1004a1d8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1004a1e8)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1004a1f4)
  • MapViewOfFile (Address: 0x1004a1f0)
  • UnmapViewOfFile (Address: 0x1004a1f8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1004a200)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1004a228)
  • GetCurrentProcess (Address: 0x1004a224)
  • GetCurrentProcessId (Address: 0x1004a210)
  • GetCurrentThread (Address: 0x1004a22c)
  • GetCurrentThreadId (Address: 0x1004a208)
  • GetExitCodeProcess (Address: 0x1004a20c)
  • GetProcessId (Address: 0x1004a214)
  • OpenProcessToken (Address: 0x1004a220)
  • OpenThreadToken (Address: 0x1004a218)
  • TerminateProcess (Address: 0x1004a21c)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1004a234)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1004a23c)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1004a244)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1004a250)
  • RegCreateKeyExW (Address: 0x1004a24c)
  • RegGetValueW (Address: 0x1004a258)
  • RegOpenKeyExW (Address: 0x1004a254)
  • RegQueryInfoKeyW (Address: 0x1004a264)
  • RegQueryValueExW (Address: 0x1004a25c)
  • RegSetValueExW (Address: 0x1004a260)
api-ms-win-core-registryuserspecific-l1-1-0.dll
  • SHRegGetUSValueW (Address: 0x1004a26c)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1004a274)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x1004a27c)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1004a298)
  • AcquireSRWLockShared (Address: 0x1004a2a4)
  • CreateEventExW (Address: 0x1004a2d0)
  • CreateEventW (Address: 0x1004a2d8)
  • CreateMutexExW (Address: 0x1004a28c)
  • CreateSemaphoreExW (Address: 0x1004a2b0)
  • DeleteCriticalSection (Address: 0x1004a2c0)
  • EnterCriticalSection (Address: 0x1004a2bc)
  • InitializeCriticalSectionEx (Address: 0x1004a2c8)
  • InitializeSRWLock (Address: 0x1004a288)
  • LeaveCriticalSection (Address: 0x1004a2b8)
  • OpenEventW (Address: 0x1004a2c4)
  • OpenSemaphoreW (Address: 0x1004a290)
  • ReleaseMutex (Address: 0x1004a284)
  • ReleaseSemaphore (Address: 0x1004a2a0)
  • ReleaseSRWLockExclusive (Address: 0x1004a29c)
  • ReleaseSRWLockShared (Address: 0x1004a2a8)
  • ResetEvent (Address: 0x1004a2ac)
  • SetEvent (Address: 0x1004a2cc)
  • TryAcquireSRWLockShared (Address: 0x1004a2d4)
  • WaitForMultipleObjectsEx (Address: 0x1004a2b4)
  • WaitForSingleObject (Address: 0x1004a294)
  • WaitForSingleObjectEx (Address: 0x1004a2dc)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1004a2e4)
  • InitOnceComplete (Address: 0x1004a2f8)
  • InitOnceExecuteOnce (Address: 0x1004a2f0)
  • Sleep (Address: 0x1004a2e8)
  • WaitOnAddress (Address: 0x1004a2f4)
  • WakeByAddressAll (Address: 0x1004a2ec)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1004a300)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1004a308)
  • GetTickCount (Address: 0x1004a30c)
  • GetVersionExW (Address: 0x1004a310)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetProductInfo (Address: 0x1004a318)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1004a320)
  • CloseThreadpoolWork (Address: 0x1004a32c)
  • CreateThreadpoolTimer (Address: 0x1004a33c)
  • CreateThreadpoolWork (Address: 0x1004a328)
  • FreeLibraryWhenCallbackReturns (Address: 0x1004a334)
  • SetThreadpoolTimer (Address: 0x1004a330)
  • SubmitThreadpoolWork (Address: 0x1004a338)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1004a324)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x1004a344)
  • DeleteTimerQueueTimer (Address: 0x1004a348)
  • UnregisterWaitEx (Address: 0x1004a34c)
api-ms-win-core-timezone-l1-1-0.dll
  • GetDynamicTimeZoneInformation (Address: 0x1004a354)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1004a35c)
  • EncodePointer (Address: 0x1004a360)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1004a370)
  • RoOriginateErrorW (Address: 0x1004a368)
  • RoTransformError (Address: 0x1004a36c)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1004a37c)
  • RoGetActivationFactory (Address: 0x1004a378)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x1004a38c)
  • HSTRING_UserMarshal (Address: 0x1004a390)
  • HSTRING_UserSize (Address: 0x1004a394)
  • HSTRING_UserUnmarshal (Address: 0x1004a384)
  • WindowsCreateString (Address: 0x1004a3a4)
  • WindowsCreateStringReference (Address: 0x1004a3a0)
  • WindowsDeleteString (Address: 0x1004a3ac)
  • WindowsDuplicateString (Address: 0x1004a39c)
  • WindowsGetStringRawBuffer (Address: 0x1004a3a8)
  • WindowsIsStringEmpty (Address: 0x1004a388)
  • WindowsStringHasEmbeddedNull (Address: 0x1004a398)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1004a3bc)
  • EventRegister (Address: 0x1004a3b4)
  • EventSetInformation (Address: 0x1004a3c4)
  • EventUnregister (Address: 0x1004a3b8)
  • EventWriteTransfer (Address: 0x1004a3c0)
api-ms-win-ntuser-sysparams-l1-1-0.dll
  • GetSystemMetrics (Address: 0x1004a3d0)
  • SystemParametersInfoW (Address: 0x1004a3cc)
api-ms-win-power-base-l1-1-0.dll
  • GetPwrCapabilities (Address: 0x1004a3d8)
api-ms-win-rtcore-ntuser-powermanagement-l1-1-0.dll
  • RegisterPowerSettingNotification (Address: 0x1004a3e0)
  • UnregisterPowerSettingNotification (Address: 0x1004a3e4)
api-ms-win-rtcore-ntuser-private-l1-1-0.dll
  • GetWindowBand (Address: 0x1004a3ec)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
  • MsgWaitForMultipleObjectsEx (Address: 0x1004a3f4)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • DefWindowProcW (Address: 0x1004a41c)
  • DestroyWindow (Address: 0x1004a408)
  • DispatchMessageW (Address: 0x1004a3fc)
  • GetWindowLongW (Address: 0x1004a400)
  • PeekMessageW (Address: 0x1004a414)
  • PostMessageW (Address: 0x1004a410)
  • PostQuitMessage (Address: 0x1004a40c)
  • SetWindowLongW (Address: 0x1004a404)
  • TranslateMessage (Address: 0x1004a418)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x1004a428)
  • EqualSid (Address: 0x1004a434)
  • GetSidSubAuthority (Address: 0x1004a424)
  • GetTokenInformation (Address: 0x1004a430)
  • IsValidSid (Address: 0x1004a42c)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x1004a43c)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1004a448)
  • ConvertStringSidToSidW (Address: 0x1004a444)
api-ms-win-shcore-scaling-l1-1-0.dll
  • GetScaleFactorForDevice (Address: 0x1004a450)
api-ms-win-shcore-stream-l1-1-0.dll
  • SHCreateMemStream (Address: 0x1004a45c)
  • SHCreateStreamOnFileW (Address: 0x1004a458)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
  • CreateRandomAccessStreamOverStream (Address: 0x1004a468)
  • CreateStreamOverRandomAccessStream (Address: 0x1004a464)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolGetUniqueContext (Address: 0x1004a470)
  • SHTaskPoolQueueTask (Address: 0x1004a474)
api-ms-win-shlwapi-winrt-storage-l1-1-1.dll
  • SHCreateWorkerWindowW (Address: 0x1004a47c)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x1004a484)
MrmCoreR.dll
  • ResourceManagerQueueGetString (Address: 0x1004a000)
msvcp110_win.dll
  • ?_Orphan_all@_Container_base0@std@@QAEXXZ (Address: 0x1004a4a4)
  • ?_Syserror_map@std@@YAPBDH@Z (Address: 0x1004a48c)
  • ?_Winerror_map@std@@YAPBDH@Z (Address: 0x1004a498)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1004a4a0)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1004a494)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1004a49c)
  • ??0id@locale@std@@QAE@I@Z (Address: 0x1004a490)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1004a4d4)
  • __dllonexit (Address: 0x1004a524)
  • _amsg_exit (Address: 0x1004a50c)
  • _callnewh (Address: 0x1004a504)
  • _CxxThrowException (Address: 0x1004a4cc)
  • _except_handler4_common (Address: 0x1004a518)
  • _ftol2 (Address: 0x1004a4c8)
  • _get_errno (Address: 0x1004a4d0)
  • _initterm (Address: 0x1004a514)
  • _lock (Address: 0x1004a52c)
  • _onexit (Address: 0x1004a520)
  • _purecall (Address: 0x1004a4e8)
  • _set_errno (Address: 0x1004a4ac)
  • _unlock (Address: 0x1004a528)
  • _vsnprintf_s (Address: 0x1004a4f8)
  • _vsnwprintf (Address: 0x1004a4d8)
  • _wcsicmp (Address: 0x1004a4e0)
  • _XcptFilter (Address: 0x1004a508)
  • ??_V@YAXPAX@Z (Address: 0x1004a4b8)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1004a4f4)
  • ??0exception@@QAE@XZ (Address: 0x1004a4f0)
  • ??1exception@@UAE@XZ (Address: 0x1004a4ec)
  • ??1type_info@@UAE@XZ (Address: 0x1004a51c)
  • ??3@YAXPAX@Z (Address: 0x1004a4e4)
  • ?terminate@@YAXXZ (Address: 0x1004a530)
  • free (Address: 0x1004a510)
  • malloc (Address: 0x1004a500)
  • memcmp (Address: 0x1004a4c4)
  • memcpy (Address: 0x1004a4c0)
  • memcpy_s (Address: 0x1004a4dc)
  • memmove (Address: 0x1004a4bc)
  • memmove_s (Address: 0x1004a4fc)
  • memset (Address: 0x1004a534)
  • realloc (Address: 0x1004a4b4)
  • wcschr (Address: 0x1004a4b0)
ntdll.dll
  • NtQueryInformationToken (Address: 0x1004a550)
  • NtQueryWnfStateData (Address: 0x1004a544)
  • NtSetInformationProcess (Address: 0x1004a564)
  • RtlAllocateHeap (Address: 0x1004a554)
  • RtlCompareUnicodeString (Address: 0x1004a55c)
  • RtlFreeHeap (Address: 0x1004a54c)
  • RtlInitUnicodeString (Address: 0x1004a558)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1004a560)
  • RtlPublishWnfStateData (Address: 0x1004a53c)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1004a548)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1004a540)
ole32.dll
  • CoGetCallerTID (Address: 0x1004a56c)
OLEAUT32.dll
  • SysAllocString (Address: 0x1004a008)
  • SysFreeString (Address: 0x1004a010)
  • VariantClear (Address: 0x1004a00c)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1004a020)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1004a028)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1004a03c)
  • CStdStubBuffer_Invoke (Address: 0x1004a038)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1004a040)
  • IUnknown_AddRef_Proxy (Address: 0x1004a02c)
  • IUnknown_QueryInterface_Proxy (Address: 0x1004a01c)
  • IUnknown_Release_Proxy (Address: 0x1004a044)
  • NdrCStdStubBuffer2_Release (Address: 0x1004a050)
  • NdrDllCanUnloadNow (Address: 0x1004a048)
  • NdrDllGetClassObject (Address: 0x1004a04c)
  • NdrOleAllocate (Address: 0x1004a018)
  • NdrOleFree (Address: 0x1004a024)
  • NdrStubCall2 (Address: 0x1004a030)
  • NdrStubForwardingFunction (Address: 0x1004a034)
SHCORE.dll
  • (Address: 0x1004a060)
  • (Address: 0x1004a05c)
  • (Address: 0x1004a058)
SHELL32.dll
  • (Address: 0x1004a068)
  • DuplicateIcon (Address: 0x1004a06c)
twinapi.appcore.dll
  • (Address: 0x1004a574)
  • (Address: 0x1004a578)
USER32.dll
  • DestroyIcon (Address: 0x1004a074)
  • GetSysColor (Address: 0x1004a078)