MsSpellCheckingFacility.dll

Description: Microsoft Spell Checking Facility

Version: 10.0.19041.6093

Architecture: 32-bit

Operating System: Windows NT

SHA256: 554b7be4fad6fdf38f1bb0c98aa93a32

File Size: 675.0 KB

Uploaded At: Dec. 1, 2025, 8:01 a.m.

Views: 21

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x32270)
DllGetActivationFactory (Ordinal: 2, Address: 0x322a0)
DllGetClassObject (Ordinal: 3, Address: 0x322c0)
DllRegisterServer (Ordinal: 4, Address: 0x322f0)
DllUnregisterServer (Ordinal: 5, Address: 0x32330)
SpellerCheck (Ordinal: 6, Address: 0x5a5f0)
SpellerCloseLex (Ordinal: 7, Address: 0x5a920)
SpellerGetOptions (Ordinal: 8, Address: 0x5ad10)
SpellerInit (Ordinal: 9, Address: 0x5b000)
SpellerOpenLex (Ordinal: 10, Address: 0x5b070)
SpellerSetOptions (Ordinal: 11, Address: 0x5b5d0)
SpellerTerminate (Ordinal: 12, Address: 0x5b840)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x100a0070)
CoCancelCall (Address: 0x100a005c)
CoCreateInstance (Address: 0x100a0054)
CoDisableCallCancellation (Address: 0x100a0078)
CoEnableCallCancellation (Address: 0x100a007c)
CoImpersonateClient (Address: 0x100a0068)
CoRevertToSelf (Address: 0x100a0058)
CoTaskMemAlloc (Address: 0x100a0074)
CoTaskMemFree (Address: 0x100a0064)
CoTaskMemRealloc (Address: 0x100a0060)
StringFromGUID2 (Address: 0x100a006c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100a0088)
IsDebuggerPresent (Address: 0x100a0084)
OutputDebugStringA (Address: 0x100a0090)
OutputDebugStringW (Address: 0x100a008c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100a0098)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100a00a0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100a00a8)
RaiseException (Address: 0x100a00b0)
SetLastError (Address: 0x100a00b8)
SetUnhandledExceptionFilter (Address: 0x100a00ac)
UnhandledExceptionFilter (Address: 0x100a00b4)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x100a00e0)
CreateFileW (Address: 0x100a0108)
FindClose (Address: 0x100a00c4)
FindFirstChangeNotificationW (Address: 0x100a00f8)
FindFirstFileExW (Address: 0x100a00c0)
FindNextChangeNotification (Address: 0x100a00fc)
FindNextFileW (Address: 0x100a010c)
FlushFileBuffers (Address: 0x100a00e4)
GetDriveTypeW (Address: 0x100a0104)
GetFileAttributesW (Address: 0x100a00f4)
GetFileSize (Address: 0x100a00d0)
GetFileSizeEx (Address: 0x100a00c8)
GetFileTime (Address: 0x100a00d4)
LockFile (Address: 0x100a00d8)
ReadFile (Address: 0x100a0100)
SetEndOfFile (Address: 0x100a00e8)
SetFilePointer (Address: 0x100a00cc)
SetFilePointerEx (Address: 0x100a0110)
SetFileTime (Address: 0x100a00f0)
UnlockFile (Address: 0x100a00ec)
WriteFile (Address: 0x100a00dc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100a0118)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100a0120)
HeapAlloc (Address: 0x100a0124)
HeapFree (Address: 0x100a0128)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x100a0130)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MoveFileW (Address: 0x100a0138)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100a0154)
FindResourceExW (Address: 0x100a0144)
FreeLibrary (Address: 0x100a0170)
GetModuleFileNameA (Address: 0x100a0140)
GetModuleFileNameW (Address: 0x100a016c)
GetModuleHandleExW (Address: 0x100a0150)
GetModuleHandleW (Address: 0x100a0160)
GetProcAddress (Address: 0x100a0164)
LoadLibraryExW (Address: 0x100a0168)
LoadResource (Address: 0x100a0148)
LoadStringW (Address: 0x100a014c)
LockResource (Address: 0x100a0158)
SizeofResource (Address: 0x100a015c)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x100a0178)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100a0180)
GetThreadLocale (Address: 0x100a0184)
SetThreadLocale (Address: 0x100a0188)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x100a0190)
MapViewOfFile (Address: 0x100a019c)
OpenFileMappingW (Address: 0x100a0198)
UnmapViewOfFile (Address: 0x100a0194)

api-ms-win-core-normalization-l1-1-0.dll

NormalizeString (Address: 0x100a01a4)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x100a01bc)
CreateThread (Address: 0x100a01b4)
DeleteProcThreadAttributeList (Address: 0x100a01c0)
GetCurrentProcess (Address: 0x100a01ac)
GetCurrentProcessId (Address: 0x100a01c4)
GetCurrentThread (Address: 0x100a01b0)
GetCurrentThreadId (Address: 0x100a01c8)
InitializeProcThreadAttributeList (Address: 0x100a01b8)
OpenProcessToken (Address: 0x100a01cc)
OpenThreadToken (Address: 0x100a01d4)
TerminateProcess (Address: 0x100a01d0)
UpdateProcThreadAttribute (Address: 0x100a01d8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100a01e0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100a01e8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100a021c)
RegCreateKeyExW (Address: 0x100a0200)
RegDeleteValueW (Address: 0x100a01f4)
RegEnumKeyExW (Address: 0x100a01f8)
RegEnumValueW (Address: 0x100a01fc)
RegGetValueW (Address: 0x100a0218)
RegNotifyChangeKeyValue (Address: 0x100a0210)
RegOpenKeyExA (Address: 0x100a0208)
RegOpenKeyExW (Address: 0x100a0214)
RegQueryInfoKeyW (Address: 0x100a0204)
RegQueryValueExA (Address: 0x100a020c)
RegQueryValueExW (Address: 0x100a01f0)
RegSetValueExW (Address: 0x100a0220)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathAppendW (Address: 0x100a0244)
PathCombineW (Address: 0x100a022c)
PathFileExistsW (Address: 0x100a0230)
PathFindNextComponentW (Address: 0x100a0240)
PathGetDriveNumberW (Address: 0x100a023c)
PathIsPrefixW (Address: 0x100a0228)
PathIsUNCW (Address: 0x100a0234)
PathStripPathW (Address: 0x100a0238)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100a0254)
CompareStringW (Address: 0x100a024c)
GetStringTypeW (Address: 0x100a025c)
MultiByteToWideChar (Address: 0x100a0258)
WideCharToMultiByte (Address: 0x100a0250)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x100a0264)
CharUpperW (Address: 0x100a0268)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x100a0270)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100a02b0)
AcquireSRWLockShared (Address: 0x100a0298)
CreateEventW (Address: 0x100a02bc)
CreateMutexExW (Address: 0x100a0290)
CreateMutexW (Address: 0x100a0284)
CreateSemaphoreExW (Address: 0x100a0294)
DeleteCriticalSection (Address: 0x100a02a8)
EnterCriticalSection (Address: 0x100a02a4)
InitializeCriticalSection (Address: 0x100a02d0)
InitializeCriticalSectionAndSpinCount (Address: 0x100a0280)
InitializeCriticalSectionEx (Address: 0x100a02c4)
InitializeSRWLock (Address: 0x100a0288)
LeaveCriticalSection (Address: 0x100a02a0)
OpenSemaphoreW (Address: 0x100a029c)
ReleaseMutex (Address: 0x100a02b4)
ReleaseSemaphore (Address: 0x100a0278)
ReleaseSRWLockExclusive (Address: 0x100a02b8)
ReleaseSRWLockShared (Address: 0x100a028c)
SetEvent (Address: 0x100a02cc)
SleepEx (Address: 0x100a02c0)
WaitForMultipleObjectsEx (Address: 0x100a02ac)
WaitForSingleObject (Address: 0x100a027c)
WaitForSingleObjectEx (Address: 0x100a02c8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100a02dc)
InitOnceComplete (Address: 0x100a02d8)
InitOnceExecuteOnce (Address: 0x100a02e0)
Sleep (Address: 0x100a02e4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x100a02f0)
GetSystemTime (Address: 0x100a02f4)
GetSystemTimeAsFileTime (Address: 0x100a02f8)
GetSystemWindowsDirectoryW (Address: 0x100a02ec)
GetTickCount (Address: 0x100a02fc)
GetVersionExW (Address: 0x100a0300)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100a0314)
CreateThreadpoolTimer (Address: 0x100a0310)
SetThreadpoolTimer (Address: 0x100a0308)
WaitForThreadpoolTimerCallbacks (Address: 0x100a030c)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x100a0320)
DeleteTimerQueueTimer (Address: 0x100a031c)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x100a0328)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100a0330)
EncodePointer (Address: 0x100a0334)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x100a0340)
RoOriginateErrorW (Address: 0x100a0344)
RoTransformError (Address: 0x100a033c)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x100a034c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x100a035c)
WindowsCreateStringReference (Address: 0x100a0364)
WindowsDeleteString (Address: 0x100a0360)
WindowsGetStringRawBuffer (Address: 0x100a0358)
WindowsIsStringEmpty (Address: 0x100a0354)
WindowsStringHasEmbeddedNull (Address: 0x100a0368)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100a0374)
EventSetInformation (Address: 0x100a037c)
EventUnregister (Address: 0x100a0378)
EventWriteTransfer (Address: 0x100a0370)

api-ms-win-security-base-l1-1-0.dll

FreeSid (Address: 0x100a0384)
GetTokenInformation (Address: 0x100a0388)
ImpersonateLoggedOnUser (Address: 0x100a0390)
RevertToSelf (Address: 0x100a038c)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x100a0398)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x100a039c)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolQueueTask (Address: 0x100a03a4)

Bcp47Langs.dll

Bcp47GetDistance (Address: 0x100a0000)
GetUserLanguages (Address: 0x100a0004)

CoreMessaging.dll

CoreUICreate (Address: 0x100a000c)

CoreUIComponents.dll

CoreUIFactoryCreate (Address: 0x100a0014)

msvcrt.dll

___lc_codepage_func (Address: 0x100a03c0)
___lc_collate_cp_func (Address: 0x100a03cc)
___lc_handle_func (Address: 0x100a03f0)
___mb_cur_max_func (Address: 0x100a03bc)
__crtCompareStringW (Address: 0x100a0408)
__crtLCMapStringW (Address: 0x100a0400)
__CxxFrameHandler3 (Address: 0x100a04a4)
__dllonexit (Address: 0x100a0410)
__pctype_func (Address: 0x100a03c4)
_amsg_exit (Address: 0x100a03fc)
_callnewh (Address: 0x100a03ec)
_CxxThrowException (Address: 0x100a03e8)
_errno (Address: 0x100a03d0)
_except_handler4_common (Address: 0x100a0418)
_ftol2_sse (Address: 0x100a04ac)
_initterm (Address: 0x100a0404)
_isctype (Address: 0x100a041c)
_ismbblead (Address: 0x100a04a8)
_lock (Address: 0x100a03dc)
_onexit (Address: 0x100a0414)
_purecall (Address: 0x100a0470)
_resetstkoflw (Address: 0x100a0438)
_unlock (Address: 0x100a03d8)
_vsnprintf_s (Address: 0x100a047c)
_vsnwprintf (Address: 0x100a049c)
_wcsdup (Address: 0x100a0420)
_wfopen_s (Address: 0x100a0464)
_wsetlocale (Address: 0x100a03f4)
_XcptFilter (Address: 0x100a03f8)
??_V@YAXPAX@Z (Address: 0x100a04a0)
??0bad_cast@@QAE@ABV0@@Z (Address: 0x100a0448)
??0bad_cast@@QAE@PBD@Z (Address: 0x100a044c)
??0exception@@QAE@ABQBD@Z (Address: 0x100a0450)
??0exception@@QAE@ABQBDH@Z (Address: 0x100a048c)
??0exception@@QAE@ABV0@@Z (Address: 0x100a0488)
??0exception@@QAE@XZ (Address: 0x100a0484)
??1bad_cast@@UAE@XZ (Address: 0x100a0444)
??1exception@@UAE@XZ (Address: 0x100a0490)
??1type_info@@UAE@XZ (Address: 0x100a040c)
??3@YAXPAX@Z (Address: 0x100a0454)
?terminate@@YAXXZ (Address: 0x100a0480)
?what@exception@@UBEPBDXZ (Address: 0x100a0478)
abort (Address: 0x100a03b0)
calloc (Address: 0x100a0434)
fclose (Address: 0x100a0460)
fread (Address: 0x100a03ac)
free (Address: 0x100a0468)
fseek (Address: 0x100a045c)
ftell (Address: 0x100a0430)
iswupper (Address: 0x100a0424)
malloc (Address: 0x100a042c)
memcmp (Address: 0x100a03c8)
memcpy (Address: 0x100a03e4)
memcpy_s (Address: 0x100a0494)
memmove (Address: 0x100a03e0)
memmove_s (Address: 0x100a0474)
memset (Address: 0x100a03b4)
realloc (Address: 0x100a043c)
setlocale (Address: 0x100a03d4)
strchr (Address: 0x100a0440)
tolower (Address: 0x100a03b8)
wcscat_s (Address: 0x100a0458)
wcscpy_s (Address: 0x100a0498)
wcsncpy_s (Address: 0x100a046c)
wcstombs_s (Address: 0x100a0428)

ntdll.dll

iswctype (Address: 0x100a04f0)
iswdigit (Address: 0x100a04b8)
iswspace (Address: 0x100a04d0)
iswxdigit (Address: 0x100a04cc)
NtQueryInformationProcess (Address: 0x100a04dc)
RtlAcquireSRWLockExclusive (Address: 0x100a04fc)
RtlPublishWnfStateData (Address: 0x100a04e0)
RtlReleaseSRWLockExclusive (Address: 0x100a04f8)
RtlSleepConditionVariableSRW (Address: 0x100a04e8)
RtlWakeAllConditionVariable (Address: 0x100a0500)
SbSelectProcedure (Address: 0x100a04d8)
swscanf_s (Address: 0x100a04d4)
toupper (Address: 0x100a04ec)
towlower (Address: 0x100a04e4)
towupper (Address: 0x100a04f4)
wcschr (Address: 0x100a04b4)
wcscspn (Address: 0x100a04c0)
wcsncmp (Address: 0x100a04bc)
wcsrchr (Address: 0x100a04c8)
wcsstr (Address: 0x100a04c4)

OLEAUT32.dll

CreateErrorInfo (Address: 0x100a0020)
SetErrorInfo (Address: 0x100a0024)
SysFreeString (Address: 0x100a001c)
SysStringLen (Address: 0x100a0038)
VariantClear (Address: 0x100a0028)
VariantCopy (Address: 0x100a002c)
VariantInit (Address: 0x100a0030)
VarUI4FromStr (Address: 0x100a0034)

profapi.dll

(Address: 0x100a0508)

RPCRT4.dll

UuidCreateSequential (Address: 0x100a0040)

USERENV.dll

CreateAppContainerProfile (Address: 0x100a0048)
DeriveAppContainerSidFromAppContainerName (Address: 0x100a004c)