SettingsHandlers_StorageSense.dll

Description: System Settings Storage Handler Implementation

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: 87498dd59745cfac18690425279a0908

File Size: 799.4 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x9a70)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x9ae0)
  • DllGetClassObject (Ordinal: 3, Address: 0x9940)
  • GetProxyDllInfo (Ordinal: 4, Address: 0x9550)
  • GetSetting (Ordinal: 5, Address: 0x9750)
  • GetSettingForUser (Ordinal: 6, Address: 0x9840)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-internal-l1-1-1.dll
  • GetPackageStatusForUser (Address: 0x18008c548)
api-ms-win-appmodel-runtime-internal-l1-1-2.dll
  • GetEffectivePackageStatusForUser (Address: 0x18008c558)
api-ms-win-appmodel-runtime-internal-l1-1-4.dll
  • GetEffectivePackageStatusForUserSid (Address: 0x18008c568)
api-ms-win-appmodel-runtime-l1-1-1.dll
  • ParseApplicationUserModelId (Address: 0x18008c580)
  • VerifyApplicationUserModelId (Address: 0x18008c578)
  • VerifyPackageFamilyName (Address: 0x18008c588)
api-ms-win-appmodel-runtime-l1-1-3.dll
  • GetPackagePathByFullName2 (Address: 0x18008c598)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18008c5a8)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x18008c5e0)
  • CoCreateFreeThreadedMarshaler (Address: 0x18008c5f0)
  • CoCreateGuid (Address: 0x18008c5f8)
  • CoCreateInstance (Address: 0x18008c630)
  • CoDecrementMTAUsage (Address: 0x18008c618)
  • CoGetApartmentType (Address: 0x18008c628)
  • CoGetClassObject (Address: 0x18008c610)
  • CoGetMalloc (Address: 0x18008c620)
  • CoIncrementMTAUsage (Address: 0x18008c5e8)
  • CoInitializeEx (Address: 0x18008c5c0)
  • CoTaskMemAlloc (Address: 0x18008c5d8)
  • CoTaskMemFree (Address: 0x18008c5b8)
  • CoTaskMemRealloc (Address: 0x18008c5c8)
  • CoUninitialize (Address: 0x18008c608)
  • CoWaitForMultipleHandles (Address: 0x18008c600)
  • StringFromGUID2 (Address: 0x18008c5d0)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • ObjectStublessClient10 (Address: 0x18008c688)
  • ObjectStublessClient11 (Address: 0x18008c648)
  • ObjectStublessClient12 (Address: 0x18008c660)
  • ObjectStublessClient13 (Address: 0x18008c690)
  • ObjectStublessClient3 (Address: 0x18008c650)
  • ObjectStublessClient4 (Address: 0x18008c640)
  • ObjectStublessClient5 (Address: 0x18008c668)
  • ObjectStublessClient6 (Address: 0x18008c670)
  • ObjectStublessClient7 (Address: 0x18008c658)
  • ObjectStublessClient8 (Address: 0x18008c678)
  • ObjectStublessClient9 (Address: 0x18008c680)
api-ms-win-core-datetime-l1-1-1.dll
  • GetDateFormatEx (Address: 0x18008c6a0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18008c6c0)
  • IsDebuggerPresent (Address: 0x18008c6b8)
  • OutputDebugStringW (Address: 0x18008c6b0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18008c6d0)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18008c6e0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18008c700)
  • RaiseException (Address: 0x18008c708)
  • SetLastError (Address: 0x18008c6f0)
  • SetUnhandledExceptionFilter (Address: 0x18008c710)
  • UnhandledExceptionFilter (Address: 0x18008c6f8)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x18008c760)
  • CreateFileW (Address: 0x18008c740)
  • FileTimeToLocalFileTime (Address: 0x18008c720)
  • FindClose (Address: 0x18008c768)
  • FindFirstFileW (Address: 0x18008c728)
  • FindNextFileW (Address: 0x18008c748)
  • GetDiskFreeSpaceExW (Address: 0x18008c730)
  • GetFileAttributesExW (Address: 0x18008c758)
  • GetFileAttributesW (Address: 0x18008c750)
  • GetVolumePathNameW (Address: 0x18008c738)
api-ms-win-core-file-l1-2-0.dll
  • GetVolumeNameForVolumeMountPointW (Address: 0x18008c778)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18008c788)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18008c7a8)
  • HeapAlloc (Address: 0x18008c798)
  • HeapFree (Address: 0x18008c7a0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18008c7c0)
  • LocalFree (Address: 0x18008c7b8)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18008c7d0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18008c800)
  • FreeLibrary (Address: 0x18008c7e0)
  • GetModuleFileNameA (Address: 0x18008c7e8)
  • GetModuleHandleExW (Address: 0x18008c7f0)
  • GetModuleHandleW (Address: 0x18008c808)
  • GetProcAddress (Address: 0x18008c810)
  • LoadLibraryExW (Address: 0x18008c7f8)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x18008c820)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18008c838)
  • GetLocaleInfoEx (Address: 0x18008c830)
api-ms-win-core-path-l1-1-0.dll
  • PathCchAppend (Address: 0x18008c848)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18008c858)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x18008c8a0)
  • CreateThread (Address: 0x18008c870)
  • GetCurrentProcess (Address: 0x18008c8a8)
  • GetCurrentProcessId (Address: 0x18008c8b8)
  • GetCurrentThread (Address: 0x18008c890)
  • GetCurrentThreadId (Address: 0x18008c878)
  • GetExitCodeProcess (Address: 0x18008c888)
  • GetProcessId (Address: 0x18008c880)
  • GetProcessTimes (Address: 0x18008c868)
  • OpenProcessToken (Address: 0x18008c8b0)
  • OpenThreadToken (Address: 0x18008c898)
  • TerminateProcess (Address: 0x18008c8c0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18008c8d0)
  • OpenProcess (Address: 0x18008c8d8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18008c8e8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18008c920)
  • RegCreateKeyExW (Address: 0x18008c938)
  • RegEnumKeyExW (Address: 0x18008c918)
  • RegEnumValueW (Address: 0x18008c900)
  • RegGetValueW (Address: 0x18008c908)
  • RegNotifyChangeKeyValue (Address: 0x18008c910)
  • RegOpenCurrentUser (Address: 0x18008c940)
  • RegOpenKeyExW (Address: 0x18008c948)
  • RegQueryInfoKeyW (Address: 0x18008c930)
  • RegQueryValueExW (Address: 0x18008c8f8)
  • RegSetValueExW (Address: 0x18008c928)
api-ms-win-core-registry-l1-1-1.dll
  • RegSetKeyValueW (Address: 0x18008c958)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x18008c968)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x18008c998)
  • PathGetArgsW (Address: 0x18008c9a8)
  • PathGetDriveNumberW (Address: 0x18008c990)
  • PathIsRelativeW (Address: 0x18008c9a0)
  • PathIsRootW (Address: 0x18008c9b8)
  • PathParseIconLocationW (Address: 0x18008c9c0)
  • PathQuoteSpacesW (Address: 0x18008c9b0)
  • PathRemoveBlanksW (Address: 0x18008c988)
  • PathRemoveExtensionW (Address: 0x18008c980)
  • PathStripPathW (Address: 0x18008c978)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrCmpIW (Address: 0x18008c9f0)
  • StrCmpW (Address: 0x18008c9d8)
  • StrRStrIW (Address: 0x18008c9f8)
  • StrStrIW (Address: 0x18008ca00)
  • StrToIntExW (Address: 0x18008c9e8)
  • StrToIntW (Address: 0x18008c9e0)
  • StrTrimW (Address: 0x18008c9d0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringEx (Address: 0x18008ca18)
  • CompareStringOrdinal (Address: 0x18008ca10)
api-ms-win-core-string-l2-1-0.dll
  • CharUpperBuffW (Address: 0x18008ca28)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x18008ca38)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18008cae8)
  • AcquireSRWLockShared (Address: 0x18008cad8)
  • CreateEventExW (Address: 0x18008ca58)
  • CreateEventW (Address: 0x18008ca98)
  • CreateMutexExW (Address: 0x18008ca68)
  • CreateSemaphoreExW (Address: 0x18008caa0)
  • DeleteCriticalSection (Address: 0x18008caf8)
  • EnterCriticalSection (Address: 0x18008ca80)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18008ca48)
  • InitializeCriticalSectionEx (Address: 0x18008cad0)
  • InitializeSRWLock (Address: 0x18008ca90)
  • LeaveCriticalSection (Address: 0x18008ca88)
  • OpenSemaphoreW (Address: 0x18008cab0)
  • ReleaseMutex (Address: 0x18008cac0)
  • ReleaseSemaphore (Address: 0x18008caa8)
  • ReleaseSRWLockExclusive (Address: 0x18008caf0)
  • ReleaseSRWLockShared (Address: 0x18008cae0)
  • ResetEvent (Address: 0x18008ca50)
  • SetEvent (Address: 0x18008ca60)
  • TryEnterCriticalSection (Address: 0x18008ca70)
  • WaitForMultipleObjectsEx (Address: 0x18008ca78)
  • WaitForSingleObject (Address: 0x18008cab8)
  • WaitForSingleObjectEx (Address: 0x18008cac8)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18008cb08)
  • InitOnceComplete (Address: 0x18008cb10)
  • InitOnceExecuteOnce (Address: 0x18008cb18)
  • Sleep (Address: 0x18008cb20)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x18008cb30)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x18008cb50)
  • GetSystemDirectoryW (Address: 0x18008cb60)
  • GetSystemTimeAsFileTime (Address: 0x18008cb40)
  • GetTickCount (Address: 0x18008cb58)
  • GetTickCount64 (Address: 0x18008cb68)
  • GetVersionExW (Address: 0x18008cb70)
  • GetWindowsDirectoryW (Address: 0x18008cb48)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x18008cb88)
  • GetProductInfo (Address: 0x18008cb80)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpool (Address: 0x18008cbc8)
  • CloseThreadpoolCleanupGroup (Address: 0x18008cbd0)
  • CloseThreadpoolCleanupGroupMembers (Address: 0x18008cbd8)
  • CloseThreadpoolTimer (Address: 0x18008cbb8)
  • CreateThreadpool (Address: 0x18008cba8)
  • CreateThreadpoolCleanupGroup (Address: 0x18008cba0)
  • CreateThreadpoolTimer (Address: 0x18008cb98)
  • SetThreadpoolThreadMaximum (Address: 0x18008cbe0)
  • SetThreadpoolThreadMinimum (Address: 0x18008cbe8)
  • SetThreadpoolTimer (Address: 0x18008cbf0)
  • TrySubmitThreadpoolCallback (Address: 0x18008cbc0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18008cbb0)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • QueueUserWorkItem (Address: 0x18008cc00)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x18008cc18)
  • SystemTimeToFileTime (Address: 0x18008cc20)
  • SystemTimeToTzSpecificLocalTime (Address: 0x18008cc10)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18008cc30)
  • EncodePointer (Address: 0x18008cc38)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x18008cc48)
  • GetFileVersionInfoSizeExW (Address: 0x18008cc50)
  • VerQueryValueW (Address: 0x18008cc58)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x18008cc70)
  • RoOriginateErrorW (Address: 0x18008cc68)
  • RoTransformError (Address: 0x18008cc80)
  • SetRestrictedErrorInfo (Address: 0x18008cc78)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18008cc90)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18008cc98)
  • RoReportFailedDelegate (Address: 0x18008cca0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18008ccb8)
  • RoGetActivationFactory (Address: 0x18008ccb0)
  • RoInitialize (Address: 0x18008ccc0)
  • RoUninitialize (Address: 0x18008ccc8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x18008ccf0)
  • HSTRING_UserFree64 (Address: 0x18008cd00)
  • HSTRING_UserMarshal (Address: 0x18008cd08)
  • HSTRING_UserMarshal64 (Address: 0x18008cce8)
  • HSTRING_UserSize (Address: 0x18008cd10)
  • HSTRING_UserSize64 (Address: 0x18008ccf8)
  • HSTRING_UserUnmarshal (Address: 0x18008cce0)
  • HSTRING_UserUnmarshal64 (Address: 0x18008ccd8)
  • WindowsCompareStringOrdinal (Address: 0x18008cd38)
  • WindowsConcatString (Address: 0x18008cd30)
  • WindowsCreateString (Address: 0x18008cd48)
  • WindowsCreateStringReference (Address: 0x18008cd40)
  • WindowsDeleteString (Address: 0x18008cd58)
  • WindowsDuplicateString (Address: 0x18008cd50)
  • WindowsGetStringLen (Address: 0x18008cd18)
  • WindowsGetStringRawBuffer (Address: 0x18008cd70)
  • WindowsIsStringEmpty (Address: 0x18008cd68)
  • WindowsStringHasEmbeddedNull (Address: 0x18008cd60)
  • WindowsTrimStringEnd (Address: 0x18008cd20)
  • WindowsTrimStringStart (Address: 0x18008cd28)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18008ce20)
  • __CxxFrameHandler3 (Address: 0x18008ced0)
  • __CxxFrameHandler4 (Address: 0x18008cef0)
  • __std_terminate (Address: 0x18008cee8)
  • _CxxThrowException (Address: 0x18008cee0)
  • _o___std_exception_copy (Address: 0x18008cec0)
  • _o___std_exception_destroy (Address: 0x18008ceb8)
  • _o___std_type_info_destroy_list (Address: 0x18008ceb0)
  • _o___stdio_common_vsnprintf_s (Address: 0x18008cea8)
  • _o___stdio_common_vswprintf (Address: 0x18008cea0)
  • _o___stdio_common_vswprintf_s (Address: 0x18008ce98)
  • _o___stdio_common_vswscanf (Address: 0x18008ce90)
  • _o__beginthreadex (Address: 0x18008ce88)
  • _o__callnewh (Address: 0x18008ce80)
  • _o__cexit (Address: 0x18008ce78)
  • _o__configure_narrow_argv (Address: 0x18008ce68)
  • _o__crt_atexit (Address: 0x18008ce60)
  • _o__errno (Address: 0x18008ce58)
  • _o__execute_onexit_table (Address: 0x18008ce50)
  • _o__get_errno (Address: 0x18008ce70)
  • _o__i64toa_s (Address: 0x18008ce48)
  • _o__initialize_narrow_environment (Address: 0x18008ce40)
  • _o__initialize_onexit_table (Address: 0x18008ce38)
  • _o__invalid_parameter_noinfo (Address: 0x18008ce30)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18008ce28)
  • _o__purecall (Address: 0x18008cd80)
  • _o__recalloc (Address: 0x18008cd88)
  • _o__register_onexit_function (Address: 0x18008cd90)
  • _o__seh_filter_dll (Address: 0x18008cd98)
  • _o__set_errno (Address: 0x18008cda0)
  • _o__wcsicmp (Address: 0x18008cda8)
  • _o_bsearch_s (Address: 0x18008cdb8)
  • _o_free (Address: 0x18008cdc0)
  • _o_malloc (Address: 0x18008cdc8)
  • _o_qsort (Address: 0x18008cdd0)
  • _o_realloc (Address: 0x18008cdd8)
  • _o_sqrt (Address: 0x18008cde0)
  • _o_terminate (Address: 0x18008cde8)
  • _o_towlower (Address: 0x18008cdf0)
  • _o_wcscat_s (Address: 0x18008cdf8)
  • _o_wcscpy_s (Address: 0x18008ce00)
  • _o_wcstod (Address: 0x18008ce08)
  • _o_wcstok_s (Address: 0x18008ce10)
  • _o_wcstoul (Address: 0x18008ce18)
  • memcmp (Address: 0x18008cef8)
  • memcpy (Address: 0x18008cf00)
  • memmove (Address: 0x18008cdb0)
  • wcschr (Address: 0x18008ced8)
  • wcsstr (Address: 0x18008cec8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18008cf18)
  • _initterm_e (Address: 0x18008cf10)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18008cf28)
  • wcscmp (Address: 0x18008cf30)
  • wcsnlen (Address: 0x18008cf38)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18008cf50)
  • EventRegister (Address: 0x18008cf58)
  • EventSetInformation (Address: 0x18008cf48)
  • EventUnregister (Address: 0x18008cf68)
  • EventWriteTransfer (Address: 0x18008cf60)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x18008cf98)
  • CheckTokenMembership (Address: 0x18008cf90)
  • CopySid (Address: 0x18008cfa8)
  • CreateWellKnownSid (Address: 0x18008cf88)
  • GetLengthSid (Address: 0x18008cfb0)
  • GetTokenInformation (Address: 0x18008cf80)
  • ImpersonateLoggedOnUser (Address: 0x18008cfa0)
  • RevertToSelf (Address: 0x18008cf78)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x18008cfc0)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x18008cfd0)
api-ms-win-shcore-obsolete-l1-1-0.dll
  • SHStrDupW (Address: 0x18008cfe0)
api-ms-win-shcore-path-l1-1-0.dll
  • (Address: 0x18008cff0)
api-ms-win-shcore-stream-l1-1-0.dll
  • SHCreateStreamOnFileW (Address: 0x18008d000)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
  • CreateRandomAccessStreamOnFile (Address: 0x18008d010)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolQueueTask (Address: 0x18008d020)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHCreateThread (Address: 0x18008d030)
api-ms-win-shell-namespace-l1-1-0.dll
  • ILFree (Address: 0x18008d050)
  • SHBindToParent (Address: 0x18008d048)
  • SHParseDisplayName (Address: 0x18008d040)
api-ms-win-shlwapi-winrt-storage-l1-1-1.dll
  • PathRemoveArgsW (Address: 0x18008d070)
  • StrFormatByteSizeEx (Address: 0x18008d060)
  • StrRetToBufW (Address: 0x18008d068)
AppXAllUserStore.dll
  • FindFullNameForFamilyNameInAppxAllUserStore (Address: 0x18008c400)
  • IsNonInboxAllUserPackage (Address: 0x18008c408)
DEVOBJ.dll
  • DevObjCreateDeviceInfoList (Address: 0x18008c420)
  • DevObjDestroyDeviceInfoList (Address: 0x18008c418)
  • DevObjEnumDeviceInterfaces (Address: 0x18008c428)
  • DevObjGetClassDevs (Address: 0x18008c430)
msvcp_win.dll
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x18008d080)
  • _Thrd_detach (Address: 0x18008d098)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x18008d088)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18008d0a0)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18008d090)
ntdll.dll
  • EtwTraceMessage (Address: 0x18008d0e0)
  • NtCreateFile (Address: 0x18008d130)
  • NtFsControlFile (Address: 0x18008d110)
  • NtQueryInformationFile (Address: 0x18008d138)
  • NtQueryInformationToken (Address: 0x18008d0c0)
  • RtlCaptureContext (Address: 0x18008d108)
  • RtlCopySid (Address: 0x18008d0f0)
  • RtlDosPathNameToNtPathName_U (Address: 0x18008d128)
  • RtlFreeUnicodeString (Address: 0x18008d120)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x18008d0d8)
  • RtlInitializeCorrelationVector (Address: 0x18008d0d0)
  • RtlIsMultiSessionSku (Address: 0x18008d0e8)
  • RtlLookupFunctionEntry (Address: 0x18008d100)
  • RtlNtStatusToDosError (Address: 0x18008d118)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x18008d0b8)
  • RtlUnsubscribeWnfStateChangeNotification (Address: 0x18008d0b0)
  • RtlValidSid (Address: 0x18008d0c8)
  • RtlVirtualUnwind (Address: 0x18008d0f8)
OLEAUT32.dll
  • SysAllocString (Address: 0x18008c458)
  • SysFreeString (Address: 0x18008c448)
  • SysStringLen (Address: 0x18008c440)
  • VariantClear (Address: 0x18008c460)
  • VariantInit (Address: 0x18008c450)
PROPSYS.dll
  • (Address: 0x18008c470)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x18008c4d8)
  • CStdStubBuffer_Connect (Address: 0x18008c518)
  • CStdStubBuffer_CountRefs (Address: 0x18008c4e8)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x18008c4c8)
  • CStdStubBuffer_DebugServerRelease (Address: 0x18008c500)
  • CStdStubBuffer_Disconnect (Address: 0x18008c510)
  • CStdStubBuffer_Invoke (Address: 0x18008c4b8)
  • CStdStubBuffer_IsIIDSupported (Address: 0x18008c480)
  • CStdStubBuffer_QueryInterface (Address: 0x18008c4f0)
  • IUnknown_AddRef_Proxy (Address: 0x18008c4c0)
  • IUnknown_QueryInterface_Proxy (Address: 0x18008c508)
  • IUnknown_Release_Proxy (Address: 0x18008c4e0)
  • NdrCStdStubBuffer_Release (Address: 0x18008c498)
  • NdrDllCanUnloadNow (Address: 0x18008c4a0)
  • NdrDllGetClassObject (Address: 0x18008c4b0)
  • NdrOleAllocate (Address: 0x18008c4f8)
  • NdrOleFree (Address: 0x18008c4d0)
  • RpcAsyncCompleteCall (Address: 0x18008c490)
  • RpcAsyncInitializeHandle (Address: 0x18008c488)
  • RpcImpersonateClient (Address: 0x18008c4a8)
SHCORE.dll
  • (Address: 0x18008c528)
XmlLite.dll
  • CreateXmlReader (Address: 0x18008c538)