AriTransformer.dll
Description: CSI Ari Transformer plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.2664
Architecture: 32-bit
Operating System: Windows NT
SHA256: 2004315f0fa7c8d489d43b1b30104dc7
File Size: 47.8 KB
Uploaded At: Dec. 1, 2025, 8:42 a.m.
Views: 12
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x52c0)
- DllCsiGetHandler (Ordinal: 2, Address: 0x52e0)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x1000a048)
- CoTaskMemAlloc (Address: 0x1000a040)
- CoTaskMemFree (Address: 0x1000a044)
- CoTaskMemRealloc (Address: 0x1000a04c)
api-ms-win-core-debug-l1-1-0.dll
- OutputDebugStringA (Address: 0x1000a054)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1000a068)
- RaiseException (Address: 0x1000a064)
- SetUnhandledExceptionFilter (Address: 0x1000a060)
- UnhandledExceptionFilter (Address: 0x1000a05c)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x1000a078)
- FindResourceExW (Address: 0x1000a088)
- FreeLibrary (Address: 0x1000a080)
- GetModuleFileNameW (Address: 0x1000a084)
- GetModuleHandleW (Address: 0x1000a070)
- GetProcAddress (Address: 0x1000a07c)
- LoadLibraryExW (Address: 0x1000a08c)
- LoadResource (Address: 0x1000a090)
- SizeofResource (Address: 0x1000a074)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1000a0a4)
- GetCurrentProcessId (Address: 0x1000a0a0)
- GetCurrentThreadId (Address: 0x1000a098)
- TerminateProcess (Address: 0x1000a09c)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1000a0ac)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1000a0b4)
- RegCreateKeyExW (Address: 0x1000a0c4)
- RegDeleteValueW (Address: 0x1000a0cc)
- RegEnumKeyExW (Address: 0x1000a0c8)
- RegOpenKeyExW (Address: 0x1000a0bc)
- RegQueryInfoKeyW (Address: 0x1000a0c0)
- RegSetValueExW (Address: 0x1000a0b8)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x1000a0d4)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x1000a0dc)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1000a0e4)
api-ms-win-core-synch-l1-1-0.dll
- DeleteCriticalSection (Address: 0x1000a0f4)
- EnterCriticalSection (Address: 0x1000a0ec)
- InitializeCriticalSection (Address: 0x1000a0f8)
- LeaveCriticalSection (Address: 0x1000a0f0)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1000a100)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1000a10c)
- GetTickCount (Address: 0x1000a108)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1000a114)
msvcrt.dll
- __dllonexit (Address: 0x1000a158)
- _amsg_exit (Address: 0x1000a140)
- _callnewh (Address: 0x1000a148)
- _errno (Address: 0x1000a134)
- _except_handler4_common (Address: 0x1000a138)
- _initterm (Address: 0x1000a13c)
- _lock (Address: 0x1000a12c)
- _onexit (Address: 0x1000a120)
- _unlock (Address: 0x1000a128)
- _XcptFilter (Address: 0x1000a144)
- free (Address: 0x1000a150)
- malloc (Address: 0x1000a154)
- memcpy (Address: 0x1000a11c)
- memcpy_s (Address: 0x1000a14c)
- memset (Address: 0x1000a15c)
- realloc (Address: 0x1000a130)
- wcsncpy_s (Address: 0x1000a124)
OLEAUT32.dll
- VarUI4FromStr (Address: 0x1000a000)
WCP.dll
- ?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1000a038)
- ?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1000a00c)
- ?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z (Address: 0x1000a030)
- ?SilCreateDirectories@Rtl@Windows@@YGJPAUIRtlSystemIsolationLayerPublic@12@ABU_LUNICODE_STRING@@@Z (Address: 0x1000a018)
- ConvertNtStatusToHResult (Address: 0x1000a028)
- RtlCombineNtPathSegments (Address: 0x1000a014)
- RtlConvertWin32FilePathToNtFilePath (Address: 0x1000a034)
- RtlFreeLBlob (Address: 0x1000a01c)
- RtlFreeLUnicodeString (Address: 0x1000a020)
- RtlReallocateLUnicodeString (Address: 0x1000a010)
- RtlReportErrorOrigination (Address: 0x1000a024)
- RtlSplitLUnicodeString (Address: 0x1000a02c)
- RtlSplitNtPath (Address: 0x1000a008)