$$DeleteMeAppLockerCSP.dllc17c25bfbd2add01410000004c33c453

v10.0.26100.8875 64-bit Windows NT Analyzed
Download
Description
AppLockerCSP
Authors
© Microsoft Corporation. All rights reserved.
File size
360.0 KB
Uploaded
2026-08-13 03:23
Views
30
SHA-256
7170b63c28f2c7c5358d10107d4c0c4b

Exported functions 2

DllCanUnloadNow #1 · 0x50c0
DllGetClassObject #2 · 0x50e0

Imported DLLs & functions 196

api-ms-win-core-com-l1-1-0.dll 3
CoCreateInstance 0x1800400a0
CoTaskMemFree 0x1800400a8
CoTaskMemRealloc 0x180040098
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800400b8
IsDebuggerPresent 0x1800400c8
OutputDebugStringW 0x1800400c0
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800400f8
RaiseException 0x1800400e8
SetLastError 0x1800400d8
SetUnhandledExceptionFilter 0x1800400e0
UnhandledExceptionFilter 0x1800400f0
api-ms-win-core-file-l1-1-0.dll 12
CreateDirectoryW 0x180040128
CreateFileW 0x180040108
DeleteFileW 0x180040130
FindClose 0x180040160
FindFirstFileExW 0x180040138
FindNextFileW 0x180040148
FlushFileBuffers 0x180040158
GetFileAttributesW 0x180040118
GetFileSizeEx 0x180040140
ReadFile 0x180040110
RemoveDirectoryW 0x180040120
WriteFile 0x180040150
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x180040170
api-ms-win-core-file-l2-1-2.dll 1
CopyFileW 0x180040180
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180040190
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800401a8
HeapAlloc 0x1800401a0
HeapFree 0x1800401b0
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x1800401c0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800401d0
api-ms-win-core-libraryloader-l1-2-0.dll 8
FreeLibrary 0x1800401f8
FreeLibraryAndExitThread 0x180040210
GetModuleFileNameA 0x180040218
GetModuleHandleExA 0x1800401e8
GetModuleHandleExW 0x180040200
GetModuleHandleW 0x1800401f0
GetProcAddress 0x1800401e0
LoadLibraryExA 0x180040208
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x180040228
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180040238
api-ms-win-core-memory-l1-1-0.dll 2
VirtualProtect 0x180040250
VirtualQuery 0x180040248
api-ms-win-core-processthreads-l1-1-0.dll 6
CreateThread 0x180040278
GetCurrentProcess 0x180040270
GetCurrentProcessId 0x180040288
GetCurrentThreadId 0x180040268
ResumeThread 0x180040280
TerminateProcess 0x180040260
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180040298
api-ms-win-core-registry-l1-1-0.dll 6
RegCloseKey 0x1800402c8
RegCreateKeyExW 0x1800402a8
RegDeleteValueW 0x1800402b0
RegGetValueW 0x1800402b8
RegOpenKeyExW 0x1800402d0
RegSetValueExW 0x1800402c0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800402f0
RtlLookupFunctionEntry 0x1800402e8
RtlVirtualUnwind 0x1800402e0
api-ms-win-core-string-l1-1-0.dll 1
WideCharToMultiByte 0x180040300
api-ms-win-core-synch-l1-1-0.dll 15
AcquireSRWLockExclusive 0x180040360
AcquireSRWLockShared 0x180040338
CreateMutexExW 0x180040348
CreateSemaphoreExW 0x180040368
DeleteCriticalSection 0x180040320
EnterCriticalSection 0x180040370
InitializeCriticalSectionEx 0x180040380
LeaveCriticalSection 0x180040350
OpenSemaphoreW 0x180040310
ReleaseMutex 0x180040358
ReleaseSemaphore 0x180040378
ReleaseSRWLockExclusive 0x180040330
ReleaseSRWLockShared 0x180040318
WaitForSingleObject 0x180040340
WaitForSingleObjectEx 0x180040328
api-ms-win-core-synch-l1-2-0.dll 3
Sleep 0x1800403a0
SleepConditionVariableSRW 0x180040390
WakeAllConditionVariable 0x180040398
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemInfo 0x1800403b8
GetSystemTimeAsFileTime 0x1800403b0
GetSystemWindowsDirectoryW 0x1800403c8
GetTickCount 0x1800403d0
GetWindowsDirectoryW 0x1800403c0
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetSystemTimePreciseAsFileTime 0x1800403e0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1800403f0
CreateThreadpoolTimer 0x180040400
SetThreadpoolTimer 0x1800403f8
WaitForThreadpoolTimerCallbacks 0x180040408
api-ms-win-core-url-l1-1-0.dll 1
UrlEscapeW 0x180040418
api-ms-win-eventing-provider-l1-1-0.dll 5
EventActivityIdControl 0x180040440
EventRegister 0x180040428
EventSetInformation 0x180040448
EventUnregister 0x180040430
EventWriteTransfer 0x180040438
api-ms-win-security-base-l1-1-0.dll 2
GetAce 0x180040458
GetSecurityDescriptorDacl 0x180040460
msvcp110_win.dll 30
_Wcscoll 0x1800404f0
_Wcsxfrm 0x1800404e0
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x180040528
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x1800404a8
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ 0x1800404f8
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x1800404c0
?_Incref@facet@locale@std@@UEAAXXZ 0x1800404b0
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x180040520
?_Syserror_map@std@@YAPEBDH@Z 0x180040540
?_Winerror_map@std@@YAPEBDH@Z 0x180040550
?_Xbad_alloc@std@@YAXXZ 0x180040478
?_Xbad_function_call@std@@YAXXZ 0x180040510
?_Xlength_error@std@@YAXPEBD@Z 0x180040548
?_Xout_of_range@std@@YAXPEBD@Z 0x180040558
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z 0x180040518
??_7_Facet_base@std@@6B@ 0x180040530
??_7facet@locale@std@@6B@ 0x180040470
??0_Locinfo@std@@QEAA@PEBD@Z 0x180040490
??0_Lockit@std@@QEAA@H@Z 0x180040488
??0facet@locale@std@@IEAA@_K@Z 0x1800404b8
??1_Facet_base@std@@UEAA@XZ 0x180040538
??1_Locinfo@std@@QEAA@XZ 0x1800404a0
??1_Lockit@std@@QEAA@XZ 0x180040498
??1facet@locale@std@@MEAA@XZ 0x180040480
??Bid@locale@std@@QEAA_KXZ 0x1800404d8
?id@?$collate@G@std@@2V0locale@2@A 0x1800404e8
?id@?$ctype@G@std@@2V0locale@2@A 0x1800404c8
?is@?$ctype@G@std@@QEBA_NFG@Z 0x180040500
?tolower@?$ctype@G@std@@QEBAGG@Z 0x1800404d0
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z 0x180040508
msvcrt.dll 50
__C_specific_handler 0x1800406b8
__CxxFrameHandler3 0x180040698
__CxxFrameHandler4 0x180040590
__dllonexit 0x1800406d0
_amsg_exit 0x1800406a8
_callnewh 0x180040690
_CxxThrowException 0x180040570
_errno 0x1800405a8
_initterm 0x1800406b0
_lock 0x1800406c0
_onexit 0x1800406d8
_purecall 0x1800405e8
_ui64tow_s 0x180040668
_unlock 0x1800406c8
_vsnwprintf 0x1800405d8
_vsnwprintf_s 0x1800405b8
_wcsdup 0x180040678
_wcsicmp 0x1800405c8
_wcstoi64 0x1800405a0
_wcstoui64 0x180040680
_wtoi 0x180040598
_XcptFilter 0x1800406a0
??_V@YAXPEAX@Z 0x180040628
??0bad_cast@@QEAA@AEBV0@@Z 0x180040648
??0bad_cast@@QEAA@PEBD@Z 0x180040658
??0exception@@QEAA@AEBQEBDH@Z 0x180040618
??0exception@@QEAA@AEBV0@@Z 0x180040600
??0exception@@QEAA@XZ 0x1800405f8
??1bad_cast@@UEAA@XZ 0x180040650
??1exception@@UEAA@XZ 0x1800405f0
??1type_info@@UEAA@XZ 0x1800406e0
??3@YAXPEAX@Z 0x180040588
?terminate@@YAXXZ 0x1800406e8
?what@exception@@UEBAPEBDXZ 0x180040608
free 0x180040640
malloc 0x180040688
memcmp 0x180040568
memcpy 0x180040578
memcpy_s 0x1800405e0
memmove 0x1800406f0
memmove_s 0x1800405d0
memset 0x180040580
realloc 0x180040638
strchr 0x180040630
towupper 0x1800405b0
wcschr 0x180040670
wcscpy_s 0x180040620
wcsnlen 0x180040610
wcsstr 0x180040660
wcstol 0x1800405c0
ntdll.dll 20
EtwTraceMessage 0x180040730
NtClose 0x180040710
NtDelayExecution 0x180040718
NtOpenFile 0x180040720
NtOpenKey 0x180040788
NtQueryDirectoryFile 0x180040798
NtQueryInformationFile 0x180040728
NtQueryWnfStateData 0x180040740
NtReadFile 0x180040778
NtSetSystemInformation 0x180040758
NtSetValueKey 0x180040790
NtWaitForSingleObject 0x180040780
RtlAdjustPrivilege 0x180040738
RtlAllocateHeap 0x180040768
RtlCreateUnicodeString 0x180040708
RtlFreeHeap 0x180040770
RtlFreeUnicodeString 0x180040700
RtlNtStatusToDosError 0x180040748
RtlPublishWnfStateData 0x180040760
ZwQueryWnfStateData 0x180040750