OneBackupHandler.dll

Description: Backup & Restore Handlers Implementation

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: b971ff9cf93bd2457de3a2ac36b9277c

File Size: 357.5 KB

Uploaded At: Dec. 1, 2025, 7:36 a.m.

Views: 4

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x42a0)
DllGetActivationFactory (Ordinal: 2, Address: 0x4300)
GetSetting (Ordinal: 3, Address: 0x44d0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackagesByPackageFamily (Address: 0x180043378)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180043398)
IsDebuggerPresent (Address: 0x180043390)
OutputDebugStringW (Address: 0x180043388)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800433a8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800433b8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800433e0)
RaiseException (Address: 0x1800433e8)
SetLastError (Address: 0x1800433d8)
SetUnhandledExceptionFilter (Address: 0x1800433d0)
UnhandledExceptionFilter (Address: 0x1800433c8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800433f8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180043418)
HeapAlloc (Address: 0x180043408)
HeapFree (Address: 0x180043410)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180043448)
FindResourceExW (Address: 0x180043460)
FindStringOrdinal (Address: 0x180043438)
FreeLibrary (Address: 0x180043450)
GetModuleFileNameA (Address: 0x180043430)
GetModuleHandleExW (Address: 0x180043468)
GetModuleHandleW (Address: 0x180043470)
GetProcAddress (Address: 0x180043428)
LoadResource (Address: 0x180043458)
LockResource (Address: 0x180043440)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180043480)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180043490)
GetCurrentProcess (Address: 0x1800434c0)
GetCurrentProcessId (Address: 0x1800434a8)
GetCurrentThread (Address: 0x1800434b0)
GetCurrentThreadId (Address: 0x1800434a0)
OpenThreadToken (Address: 0x1800434b8)
TerminateProcess (Address: 0x180043498)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800434d0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800434e8)
RegEnumKeyExW (Address: 0x1800434e0)
RegOpenKeyExW (Address: 0x1800434f0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180043510)
RtlLookupFunctionEntry (Address: 0x180043508)
RtlVirtualUnwind (Address: 0x180043500)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x180043520)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180043530)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x180043540)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x180043550)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180043560)
AcquireSRWLockShared (Address: 0x1800435b8)
CreateEventExW (Address: 0x1800435d8)
CreateEventW (Address: 0x180043598)
CreateMutexExW (Address: 0x1800435a8)
CreateSemaphoreExW (Address: 0x1800435a0)
DeleteCriticalSection (Address: 0x1800435f8)
EnterCriticalSection (Address: 0x1800435e0)
InitializeCriticalSectionEx (Address: 0x1800435c0)
InitializeSRWLock (Address: 0x1800435c8)
LeaveCriticalSection (Address: 0x1800435d0)
OpenSemaphoreW (Address: 0x180043580)
ReleaseMutex (Address: 0x1800435e8)
ReleaseSemaphore (Address: 0x180043590)
ReleaseSRWLockExclusive (Address: 0x180043568)
ReleaseSRWLockShared (Address: 0x1800435b0)
ResetEvent (Address: 0x1800435f0)
SetEvent (Address: 0x180043588)
WaitForSingleObject (Address: 0x180043570)
WaitForSingleObjectEx (Address: 0x180043578)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180043608)
Sleep (Address: 0x180043610)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180043620)
GetTickCount (Address: 0x180043628)
GetTickCount64 (Address: 0x180043630)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x180043640)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180043658)
EncodePointer (Address: 0x180043650)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180043680)
EventSetInformation (Address: 0x180043668)
EventUnregister (Address: 0x180043678)
EventWriteTransfer (Address: 0x180043670)

api-ms-win-security-base-l1-1-0.dll

ImpersonateLoggedOnUser (Address: 0x180043690)
RevertToSelf (Address: 0x180043698)

api-ms-win-shlwapi-winrt-storage-l1-1-1.dll

StrFormatByteSizeW (Address: 0x1800436a8)

MPR.dll

WNetAddConnection3W (Address: 0x180043368)

msvcrt.dll

__C_specific_handler (Address: 0x180043708)
__CxxFrameHandler3 (Address: 0x1800436f8)
__dllonexit (Address: 0x180043740)
_amsg_exit (Address: 0x1800436c8)
_callnewh (Address: 0x180043780)
_CxxThrowException (Address: 0x1800437a0)
_get_errno (Address: 0x180043770)
_initterm (Address: 0x1800437d8)
_lock (Address: 0x180043720)
_onexit (Address: 0x1800436c0)
_purecall (Address: 0x180043748)
_set_errno (Address: 0x180043760)
_unlock (Address: 0x180043738)
_vsnprintf_s (Address: 0x1800436e8)
_vsnwprintf (Address: 0x1800437c8)
_wcsicmp (Address: 0x180043750)
_XcptFilter (Address: 0x1800436d8)
??_V@YAXPEAX@Z (Address: 0x1800437d0)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180043788)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180043790)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800436f0)
??0exception@@QEAA@XZ (Address: 0x180043700)
??1exception@@UEAA@XZ (Address: 0x180043728)
??1type_info@@UEAA@XZ (Address: 0x180043730)
??3@YAXPEAX@Z (Address: 0x1800437b8)
?terminate@@YAXXZ (Address: 0x180043718)
?what@exception@@UEBAPEBDXZ (Address: 0x180043798)
bsearch_s (Address: 0x1800436e0)
free (Address: 0x1800436d0)
malloc (Address: 0x180043710)
memcmp (Address: 0x1800436b8)
memcpy (Address: 0x1800437a8)
memcpy_s (Address: 0x1800437c0)
memmove (Address: 0x1800437b0)
memmove_s (Address: 0x180043778)
memset (Address: 0x1800437e0)
realloc (Address: 0x180043758)
wcschr (Address: 0x180043768)