WpAXHolder.dll

Description: WPAXHolder

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 9f9cf9ce85c633280387594dae86e743

File Size: 442.0 KB

Uploaded At: Dec. 1, 2025, 7:45 a.m.

Views: 6

Exported Functions

  • CallBlockTabForDialogUntilActive (Ordinal: 1, Address: 0x2c90)
  • GetFlashShimHandler (Ordinal: 2, Address: 0x41a0)
  • RunAsAXHolder (Ordinal: 3, Address: 0x4520)

Imported DLLs & Functions

api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18004d5a8)
  • GetCurrentProcessId (Address: 0x18004d5b8)
  • GetCurrentThreadId (Address: 0x18004d5a0)
  • TerminateProcess (Address: 0x18004d5b0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x18004d5c8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x18004d5f0)
  • WindowsCreateStringReference (Address: 0x18004d5e0)
  • WindowsDeleteString (Address: 0x18004d5d8)
  • WindowsGetStringRawBuffer (Address: 0x18004d5e8)
chakra.dll
  • MemProtectHeapCreate (Address: 0x18004d608)
  • MemProtectHeapDestroy (Address: 0x18004d618)
  • MemProtectHeapDisableCollection (Address: 0x18004d628)
  • MemProtectHeapRootAlloc (Address: 0x18004d600)
  • MemProtectHeapRootRealloc (Address: 0x18004d620)
  • MemProtectHeapUnrootAndZero (Address: 0x18004d610)
iertutil.dll
  • (Address: 0x18004d638)
  • (Address: 0x18004d640)
  • (Address: 0x18004d648)
  • (Address: 0x18004d650)
  • (Address: 0x18004d658)
  • (Address: 0x18004d660)
  • (Address: 0x18004d668)
  • (Address: 0x18004d670)
  • (Address: 0x18004d678)
  • (Address: 0x18004d680)
  • (Address: 0x18004d688)
KERNEL32.dll
  • AssignProcessToJobObject (Address: 0x18004d400)
  • CloseHandle (Address: 0x18004d2e8)
  • CompareStringW (Address: 0x18004d248)
  • CreateEventExW (Address: 0x18004d2c8)
  • CreateEventW (Address: 0x18004d2e0)
  • CreateJobObjectW (Address: 0x18004d3f8)
  • CreateThread (Address: 0x18004d3c8)
  • DebugBreak (Address: 0x18004d300)
  • DelayLoadFailureHook (Address: 0x18004d260)
  • DeleteCriticalSection (Address: 0x18004d1f8)
  • DeleteFileW (Address: 0x18004d240)
  • DuplicateHandle (Address: 0x18004d428)
  • EnterCriticalSection (Address: 0x18004d250)
  • FormatMessageW (Address: 0x18004d308)
  • GetCurrentThread (Address: 0x18004d258)
  • GetFileSizeEx (Address: 0x18004d210)
  • GetLastError (Address: 0x18004d330)
  • GetModuleFileNameA (Address: 0x18004d2d0)
  • GetModuleHandleExW (Address: 0x18004d2d8)
  • GetModuleHandleW (Address: 0x18004d2f8)
  • GetProcAddress (Address: 0x18004d2f0)
  • GetProcessHeap (Address: 0x18004d320)
  • GetSystemTimeAsFileTime (Address: 0x18004d3a0)
  • GetTickCount (Address: 0x18004d3a8)
  • GlobalAlloc (Address: 0x18004d2c0)
  • GlobalFree (Address: 0x18004d2a8)
  • GlobalLock (Address: 0x18004d2b8)
  • GlobalSize (Address: 0x18004d298)
  • GlobalUnlock (Address: 0x18004d2b0)
  • HeapAlloc (Address: 0x18004d368)
  • HeapFree (Address: 0x18004d358)
  • HeapReAlloc (Address: 0x18004d360)
  • HeapSetInformation (Address: 0x18004d338)
  • InitializeCriticalSection (Address: 0x18004d200)
  • InitOnceExecuteOnce (Address: 0x18004d3f0)
  • IsDebuggerPresent (Address: 0x18004d328)
  • LeaveCriticalSection (Address: 0x18004d208)
  • LoadLibraryW (Address: 0x18004d290)
  • LocalFree (Address: 0x18004d318)
  • MapViewOfFile (Address: 0x18004d288)
  • OutputDebugStringW (Address: 0x18004d310)
  • QueryInformationJobObject (Address: 0x18004d408)
  • QueryPerformanceCounter (Address: 0x18004d398)
  • QueueUserAPC (Address: 0x18004d3e8)
  • RaiseException (Address: 0x18004d348)
  • RaiseFailFastException (Address: 0x18004d340)
  • ReadFile (Address: 0x18004d238)
  • RegisterWaitForSingleObject (Address: 0x18004d418)
  • ResetEvent (Address: 0x18004d3e0)
  • ResolveDelayLoadedAPI (Address: 0x18004d268)
  • ResumeThread (Address: 0x18004d3d0)
  • RtlCaptureContext (Address: 0x18004d370)
  • RtlLookupFunctionEntry (Address: 0x18004d378)
  • RtlVirtualUnwind (Address: 0x18004d380)
  • SetEndOfFile (Address: 0x18004d218)
  • SetEvent (Address: 0x18004d3b8)
  • SetFilePointer (Address: 0x18004d220)
  • SetFilePointerEx (Address: 0x18004d228)
  • SetInformationJobObject (Address: 0x18004d410)
  • SetLastError (Address: 0x18004d2a0)
  • SetThreadDescription (Address: 0x18004d270)
  • SetUnhandledExceptionFilter (Address: 0x18004d350)
  • Sleep (Address: 0x18004d390)
  • UnhandledExceptionFilter (Address: 0x18004d388)
  • UnmapViewOfFile (Address: 0x18004d280)
  • UnregisterWaitEx (Address: 0x18004d420)
  • WaitForMultipleObjects (Address: 0x18004d3d8)
  • WaitForMultipleObjectsEx (Address: 0x18004d1f0)
  • WaitForSingleObject (Address: 0x18004d3c0)
  • WaitForSingleObjectEx (Address: 0x18004d3b0)
  • WideCharToMultiByte (Address: 0x18004d278)
  • WriteFile (Address: 0x18004d230)
msvcrt.dll
  • __C_specific_handler (Address: 0x18004d6a8)
  • __CxxFrameHandler3 (Address: 0x18004d718)
  • __dllonexit (Address: 0x18004d6e8)
  • _amsg_exit (Address: 0x18004d6d0)
  • _initterm (Address: 0x18004d6b8)
  • _lock (Address: 0x18004d6f8)
  • _onexit (Address: 0x18004d6e0)
  • _purecall (Address: 0x18004d710)
  • _unlock (Address: 0x18004d6f0)
  • _vsnwprintf (Address: 0x18004d708)
  • _XcptFilter (Address: 0x18004d6d8)
  • free (Address: 0x18004d6c8)
  • malloc (Address: 0x18004d6c0)
  • memcpy (Address: 0x18004d6a0)
  • memcpy_s (Address: 0x18004d700)
  • memmove (Address: 0x18004d698)
  • memset (Address: 0x18004d720)
  • wcschr (Address: 0x18004d6b0)
RPCRT4.dll
  • I_RpcBindingInqLocalClientPID (Address: 0x18004d498)
  • Ndr64AsyncClientCall (Address: 0x18004d4a8)
  • Ndr64AsyncServerCallAll (Address: 0x18004d470)
  • NdrAsyncServerCall (Address: 0x18004d468)
  • RpcAsyncCancelCall (Address: 0x18004d4b0)
  • RpcAsyncCompleteCall (Address: 0x18004d4b8)
  • RpcAsyncInitializeHandle (Address: 0x18004d4c0)
  • RpcBindingBind (Address: 0x18004d480)
  • RpcBindingCreateW (Address: 0x18004d478)
  • RpcBindingFree (Address: 0x18004d460)
  • RpcBindingVectorFree (Address: 0x18004d448)
  • RpcEpRegisterNoReplaceW (Address: 0x18004d440)
  • RpcMgmtStopServerListening (Address: 0x18004d450)
  • RpcServerInqBindingHandle (Address: 0x18004d4a0)
  • RpcServerInqBindingsEx (Address: 0x18004d438)
  • RpcServerRegisterIf3 (Address: 0x18004d488)
  • RpcServerUnregisterIf (Address: 0x18004d458)
  • RpcServerUseProtseqEpW (Address: 0x18004d490)
SHLWAPI.dll
  • (Address: 0x18004d4d0)
  • (Address: 0x18004d4d8)
USER32.dll
  • CreateWindowExW (Address: 0x18004d510)
  • DefWindowProcW (Address: 0x18004d520)
  • DestroyWindow (Address: 0x18004d518)
  • DispatchMessageW (Address: 0x18004d4e8)
  • GetPropW (Address: 0x18004d540)
  • GetWindowLongPtrW (Address: 0x18004d558)
  • GetWindowRect (Address: 0x18004d548)
  • GetWindowThreadProcessId (Address: 0x18004d538)
  • LoadCursorW (Address: 0x18004d508)
  • MonitorFromRect (Address: 0x18004d578)
  • MsgWaitForMultipleObjects (Address: 0x18004d500)
  • MsgWaitForMultipleObjectsEx (Address: 0x18004d4f8)
  • PeekMessageW (Address: 0x18004d4f0)
  • PostMessageW (Address: 0x18004d530)
  • PtInRect (Address: 0x18004d550)
  • RegisterClassW (Address: 0x18004d588)
  • RemovePropW (Address: 0x18004d570)
  • SetForegroundWindow (Address: 0x18004d590)
  • SetPropW (Address: 0x18004d560)
  • SetWindowLongPtrW (Address: 0x18004d568)
  • TranslateMessage (Address: 0x18004d580)
  • UnregisterClassW (Address: 0x18004d528)