FlightSettings.dll

Description: Flight Settings

Version: 10.0.19041.2304

Architecture: 64-bit

Operating System: Windows NT

SHA256: 15d978587166aa0956650bb4a108e6e3

File Size: 918.5 KB

Uploaded At: Dec. 1, 2025, 8:12 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllGetActivationFactory (Ordinal: 1, Address: 0x58c0)
ServiceMain (Ordinal: 2, Address: 0x6930)
SvchostPushServiceGlobals (Ordinal: 3, Address: 0x66d0)
DllCanUnloadNow (Ordinal: 4, Address: 0x5860)
DllGetClassObject (Ordinal: 5, Address: 0x5650)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800946d0)

api-ms-win-core-datetime-l1-1-1.dll

GetDateFormatEx (Address: 0x1800946e8)
GetTimeFormatEx (Address: 0x1800946e0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180094708)
IsDebuggerPresent (Address: 0x1800946f8)
OutputDebugStringW (Address: 0x180094700)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180094718)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180094728)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180094750)
RaiseException (Address: 0x180094738)
SetLastError (Address: 0x180094740)
SetUnhandledExceptionFilter (Address: 0x180094748)
UnhandledExceptionFilter (Address: 0x180094758)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x180094778)
CreateFileA (Address: 0x1800947b0)
CreateFileW (Address: 0x1800947e8)
DefineDosDeviceW (Address: 0x180094770)
DeleteFileW (Address: 0x180094768)
FindClose (Address: 0x1800947c8)
FindFirstFileW (Address: 0x1800947e0)
FindNextFileW (Address: 0x1800947d0)
FlushFileBuffers (Address: 0x180094788)
GetFileAttributesW (Address: 0x1800947c0)
GetFileSizeEx (Address: 0x180094780)
GetFullPathNameW (Address: 0x180094798)
QueryDosDeviceW (Address: 0x180094790)
ReadFile (Address: 0x1800947d8)
RemoveDirectoryW (Address: 0x1800947b8)
SetFilePointer (Address: 0x1800947a0)
WriteFile (Address: 0x1800947a8)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1800947f8)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x180094808)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180094818)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180094838)
HeapAlloc (Address: 0x180094830)
HeapFree (Address: 0x180094828)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180094850)
LocalFree (Address: 0x180094848)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CopyFileW (Address: 0x180094868)
MoveFileW (Address: 0x180094870)
UnregisterWait (Address: 0x180094860)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180094888)
FindStringOrdinal (Address: 0x180094890)
FreeLibrary (Address: 0x1800948a8)
GetModuleFileNameA (Address: 0x1800948a0)
GetModuleFileNameW (Address: 0x180094898)
GetModuleHandleExW (Address: 0x1800948b8)
GetModuleHandleW (Address: 0x1800948b0)
GetProcAddress (Address: 0x1800948c0)
LoadLibraryExW (Address: 0x180094880)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800948d0)
GetLocaleInfoW (Address: 0x1800948e8)
GetSystemPreferredUILanguages (Address: 0x1800948e0)
GetUserDefaultLocaleName (Address: 0x1800948f0)
GetUserPreferredUILanguages (Address: 0x1800948d8)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetSystemDefaultUILanguage (Address: 0x180094900)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x180094910)
MapViewOfFile (Address: 0x180094918)
UnmapViewOfFile (Address: 0x180094920)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x180094938)
PathCchSkipRoot (Address: 0x180094930)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180094948)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180094998)
GetCurrentProcess (Address: 0x180094980)
GetCurrentProcessId (Address: 0x180094978)
GetCurrentThread (Address: 0x180094988)
GetCurrentThreadId (Address: 0x180094958)
GetExitCodeProcess (Address: 0x1800949a0)
OpenProcessToken (Address: 0x180094970)
OpenThreadToken (Address: 0x180094960)
SetThreadToken (Address: 0x180094990)
TerminateProcess (Address: 0x180094968)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x1800949b0)
OpenProcess (Address: 0x1800949b8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800949c8)
QueryPerformanceFrequency (Address: 0x1800949d0)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1800949e0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180094a48)
RegCreateKeyExW (Address: 0x180094a08)
RegDeleteKeyExW (Address: 0x180094a40)
RegDeleteTreeW (Address: 0x1800949f8)
RegDeleteValueW (Address: 0x180094a18)
RegEnumKeyExW (Address: 0x180094a20)
RegEnumValueW (Address: 0x180094a00)
RegGetValueW (Address: 0x180094a30)
RegOpenKeyExW (Address: 0x180094a28)
RegQueryInfoKeyW (Address: 0x180094a38)
RegQueryValueExW (Address: 0x1800949f0)
RegSetValueExW (Address: 0x180094a10)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x180094a58)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180094a70)
RtlLookupFunctionEntry (Address: 0x180094a78)
RtlVirtualUnwind (Address: 0x180094a68)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x180094a90)
PathFindFileNameW (Address: 0x180094a88)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180094aa0)
MultiByteToWideChar (Address: 0x180094ab0)
WideCharToMultiByte (Address: 0x180094aa8)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x180094ac8)
CharUpperBuffW (Address: 0x180094ac0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180094b50)
AcquireSRWLockShared (Address: 0x180094b40)
CreateEventExW (Address: 0x180094b58)
CreateMutexExW (Address: 0x180094b18)
CreateMutexW (Address: 0x180094b48)
CreateSemaphoreExW (Address: 0x180094af8)
DeleteCriticalSection (Address: 0x180094ae0)
EnterCriticalSection (Address: 0x180094af0)
InitializeCriticalSectionEx (Address: 0x180094b00)
InitializeSRWLock (Address: 0x180094ad8)
LeaveCriticalSection (Address: 0x180094b70)
OpenSemaphoreW (Address: 0x180094b20)
ReleaseMutex (Address: 0x180094b38)
ReleaseSemaphore (Address: 0x180094b68)
ReleaseSRWLockExclusive (Address: 0x180094b10)
ReleaseSRWLockShared (Address: 0x180094ae8)
SetEvent (Address: 0x180094b28)
TryEnterCriticalSection (Address: 0x180094b08)
WaitForSingleObject (Address: 0x180094b60)
WaitForSingleObjectEx (Address: 0x180094b30)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180094b98)
InitOnceComplete (Address: 0x180094b80)
InitOnceExecuteOnce (Address: 0x180094b90)
Sleep (Address: 0x180094b88)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180094bb8)
GetSystemTimeAsFileTime (Address: 0x180094ba8)
GetSystemWindowsDirectoryW (Address: 0x180094bb0)
GetTickCount (Address: 0x180094bc0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x180094bd0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180094bf0)
CreateThreadpoolTimer (Address: 0x180094be8)
IsThreadpoolTimerSet (Address: 0x180094c00)
SetThreadpoolTimer (Address: 0x180094bf8)
WaitForThreadpoolTimerCallbacks (Address: 0x180094be0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x180094c10)
DeleteTimerQueueTimer (Address: 0x180094c18)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180094c30)
SystemTimeToFileTime (Address: 0x180094c28)

api-ms-win-core-url-l1-1-0.dll

UrlEscapeW (Address: 0x180094c40)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180094c50)
EncodePointer (Address: 0x180094c58)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x180094c68)
GetFileVersionInfoSizeExW (Address: 0x180094c70)
VerQueryValueW (Address: 0x180094c78)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180094c88)
EventProviderEnabled (Address: 0x180094ca8)
EventRegister (Address: 0x180094c90)
EventSetInformation (Address: 0x180094cb0)
EventUnregister (Address: 0x180094c98)
EventWriteTransfer (Address: 0x180094ca0)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x180094ce0)
AllocateAndInitializeSid (Address: 0x180094d00)
CheckTokenMembership (Address: 0x180094d20)
CopySid (Address: 0x180094ce8)
CreateWellKnownSid (Address: 0x180094cd0)
DuplicateToken (Address: 0x180094cd8)
DuplicateTokenEx (Address: 0x180094d08)
FreeSid (Address: 0x180094cf8)
GetLengthSid (Address: 0x180094d10)
GetTokenInformation (Address: 0x180094cc0)
ImpersonateLoggedOnUser (Address: 0x180094cf0)
IsValidSid (Address: 0x180094cc8)
RevertToSelf (Address: 0x180094d18)

api-ms-win-security-base-l1-2-0.dll

CheckTokenMembershipEx (Address: 0x180094d30)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180094d40)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180094d50)
OpenSCManagerW (Address: 0x180094d60)
OpenServiceW (Address: 0x180094d68)
StartServiceW (Address: 0x180094d58)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x180094d78)
GetPersistedRegistryValueW (Address: 0x180094d80)

combase.dll

(Address: 0x180094d90)
(Address: 0x180094d98)
(Address: 0x180094da0)
(Address: 0x180094da8)
(Address: 0x180094db0)
(Address: 0x180094db8)

msvcrt.dll

__C_specific_handler (Address: 0x180094ee8)
__CxxFrameHandler3 (Address: 0x180094eb0)
__dllonexit (Address: 0x180094ec0)
_amsg_exit (Address: 0x180094f00)
_callnewh (Address: 0x180094e68)
_CxxThrowException (Address: 0x180094e60)
_get_errno (Address: 0x180094e48)
_initterm (Address: 0x180094ef0)
_lock (Address: 0x180094ee0)
_onexit (Address: 0x180094eb8)
_purecall (Address: 0x180094f18)
_set_errno (Address: 0x180094e50)
_unlock (Address: 0x180094ed8)
_vsnprintf_s (Address: 0x180094e10)
_vsnwprintf (Address: 0x180094ec8)
_wcsicmp (Address: 0x180094e00)
_wcstoui64 (Address: 0x180094e38)
_wcsupr (Address: 0x180094e28)
_wtoi (Address: 0x180094de0)
_wtol (Address: 0x180094de8)
_XcptFilter (Address: 0x180094f08)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180094e70)
??0exception@@QEAA@XZ (Address: 0x180094dc8)
??1exception@@UEAA@XZ (Address: 0x180094dd0)
??1type_info@@UEAA@XZ (Address: 0x180094e78)
?terminate@@YAXXZ (Address: 0x180094e88)
free (Address: 0x180094f10)
malloc (Address: 0x180094ef8)
memcmp (Address: 0x180094e58)
memcpy (Address: 0x180094e90)
memcpy_s (Address: 0x180094f20)
memmove (Address: 0x180094ea0)
memmove_s (Address: 0x180094df8)
memset (Address: 0x180094ea8)
realloc (Address: 0x180094dd8)
swprintf_s (Address: 0x180094e80)
swscanf_s (Address: 0x180094e20)
toupper (Address: 0x180094e98)
wcschr (Address: 0x180094e40)
wcscmp (Address: 0x180094f30)
wcsncmp (Address: 0x180094f28)
wcsnlen (Address: 0x180094e18)
wcsrchr (Address: 0x180094ed0)
wcsstr (Address: 0x180094e08)
wcstok_s (Address: 0x180094df0)
wcstoul (Address: 0x180094e30)

ntdll.dll

EtwTraceMessage (Address: 0x180094f40)
NtQueryInformationToken (Address: 0x180094f48)
NtQueryLicenseValue (Address: 0x180094f60)
NtQuerySystemInformation (Address: 0x180094f50)
NtQueryWnfStateData (Address: 0x180094f98)
RtlConvertDeviceFamilyInfoToString (Address: 0x180094f68)
RtlGetDeviceFamilyInfoEnum (Address: 0x180094fa0)
RtlGetVersion (Address: 0x180094f58)
RtlIsMultiUsersInSessionSku (Address: 0x180094fa8)
RtlIsStateSeparationEnabled (Address: 0x180094f70)
RtlNtStatusToDosError (Address: 0x180094f88)
RtlPublishWnfStateData (Address: 0x180094f78)
RtlSubscribeWnfStateChangeNotification (Address: 0x180094f90)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180094f80)