unenrollhook.dll

Description: unenrollhook DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 0490eb683e73dd0b56703cbf85047960

File Size: 101.5 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 3

Exported Functions

EnterpriseResourceManager_MoveAllResources (Ordinal: 1, Address: 0x4170)
EnterpriseResourceManager_UnenrollHook (Ordinal: 2, Address: 0x9070)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180011ef0)
CoInitializeEx (Address: 0x180011ee8)
CoUninitialize (Address: 0x180011ef8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180011f18)
IsDebuggerPresent (Address: 0x180011f10)
OutputDebugStringW (Address: 0x180011f08)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180011f38)
SetLastError (Address: 0x180011f28)
SetUnhandledExceptionFilter (Address: 0x180011f40)
UnhandledExceptionFilter (Address: 0x180011f30)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180011f50)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180011f68)
HeapAlloc (Address: 0x180011f70)
HeapFree (Address: 0x180011f60)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180011fa8)
FreeLibrary (Address: 0x180011f80)
GetModuleFileNameA (Address: 0x180011fa0)
GetModuleHandleExW (Address: 0x180011fb0)
GetModuleHandleW (Address: 0x180011f88)
GetProcAddress (Address: 0x180011f98)
LoadLibraryExW (Address: 0x180011f90)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180011fc0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180011fd8)
GetCurrentProcessId (Address: 0x180011fe8)
GetCurrentThreadId (Address: 0x180011fd0)
TerminateProcess (Address: 0x180011fe0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180011ff8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180012038)
RegCreateKeyExW (Address: 0x180012020)
RegEnumKeyExW (Address: 0x180012018)
RegEnumValueW (Address: 0x180012030)
RegOpenKeyExW (Address: 0x180012008)
RegQueryInfoKeyW (Address: 0x180012040)
RegQueryValueExW (Address: 0x180012028)
RegSetValueExW (Address: 0x180012010)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeW (Address: 0x180012060)
MultiByteToWideChar (Address: 0x180012058)
WideCharToMultiByte (Address: 0x180012050)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800120a0)
AcquireSRWLockShared (Address: 0x180012098)
CreateMutexExW (Address: 0x180012070)
CreateSemaphoreExW (Address: 0x1800120d8)
DeleteCriticalSection (Address: 0x180012088)
EnterCriticalSection (Address: 0x1800120c8)
InitializeCriticalSectionEx (Address: 0x1800120a8)
LeaveCriticalSection (Address: 0x180012078)
OpenSemaphoreW (Address: 0x180012090)
ReleaseMutex (Address: 0x1800120b8)
ReleaseSemaphore (Address: 0x1800120d0)
ReleaseSRWLockExclusive (Address: 0x1800120b0)
ReleaseSRWLockShared (Address: 0x180012080)
WaitForSingleObject (Address: 0x1800120c0)
WaitForSingleObjectEx (Address: 0x1800120e0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800120f8)
SleepConditionVariableSRW (Address: 0x1800120f0)
WakeAllConditionVariable (Address: 0x180012100)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x180012110)
GetSystemTimeAsFileTime (Address: 0x180012120)
GetTickCount (Address: 0x180012118)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180012148)
CreateThreadpoolTimer (Address: 0x180012140)
SetThreadpoolTimer (Address: 0x180012130)
WaitForThreadpoolTimerCallbacks (Address: 0x180012138)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180012158)
EncodePointer (Address: 0x180012160)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180012170)
EventSetInformation (Address: 0x180012178)
EventUnregister (Address: 0x180012180)
EventWriteTransfer (Address: 0x180012188)

DMCmnUtils.dll

UnicodeToMB (Address: 0x180011ea8)

enterpriseresourcemanager.dll

EnterpriseResourceManagerStore_DeleteResource (Address: 0x180012198)

msvcrt.dll

___lc_codepage_func (Address: 0x1800121d0)
___lc_handle_func (Address: 0x1800121d8)
___mb_cur_max_func (Address: 0x1800121c0)
__C_specific_handler (Address: 0x1800122f8)
__crtLCMapStringW (Address: 0x180012220)
__CxxFrameHandler3 (Address: 0x180012270)
__dllonexit (Address: 0x1800122f0)
__pctype_func (Address: 0x1800121e8)
__uncaught_exception (Address: 0x1800121f0)
_amsg_exit (Address: 0x180012310)
_callnewh (Address: 0x180012248)
_CxxThrowException (Address: 0x180012238)
_errno (Address: 0x180012210)
_initterm (Address: 0x180012308)
_ismbblead (Address: 0x1800121b8)
_lock (Address: 0x180012208)
_onexit (Address: 0x1800122d8)
_purecall (Address: 0x180012328)
_unlock (Address: 0x180012200)
_vsnprintf_s (Address: 0x1800122b0)
_vsnwprintf (Address: 0x180012288)
_wcsdup (Address: 0x1800121e0)
_wcsicmp (Address: 0x180012338)
_wsetlocale (Address: 0x180012228)
_XcptFilter (Address: 0x180012318)
??_V@YAXPEAX@Z (Address: 0x180012278)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x180012298)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800122a0)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180012280)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180012240)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800122b8)
??0exception@@QEAA@XZ (Address: 0x1800122e0)
??1bad_cast@@UEAA@XZ (Address: 0x1800122a8)
??1exception@@UEAA@XZ (Address: 0x180012300)
??1type_info@@UEAA@XZ (Address: 0x1800122c8)
??3@YAXPEAX@Z (Address: 0x180012330)
?terminate@@YAXXZ (Address: 0x1800122d0)
?what@exception@@UEBAPEBDXZ (Address: 0x180012290)
abort (Address: 0x1800121b0)
calloc (Address: 0x1800121c8)
free (Address: 0x180012258)
malloc (Address: 0x180012250)
memcmp (Address: 0x180012320)
memcpy (Address: 0x180012230)
memcpy_s (Address: 0x1800122c0)
memmove (Address: 0x180012218)
memmove_s (Address: 0x1800122e8)
memset (Address: 0x180012268)
setlocale (Address: 0x1800121f8)
sprintf_s (Address: 0x1800121a8)
wcschr (Address: 0x180012260)

ntdll.dll

RtlCaptureContext (Address: 0x180012358)
RtlIsStateSeparationEnabled (Address: 0x180012360)
RtlLookupFunctionEntry (Address: 0x180012348)
RtlVirtualUnwind (Address: 0x180012350)

OLEAUT32.dll

SysAllocString (Address: 0x180011eb8)
VariantClear (Address: 0x180011ec8)
VariantInit (Address: 0x180011ec0)

RPCRT4.dll

UuidCreate (Address: 0x180011ed8)