XblGameSave.dll

Description: Xbox Live Game Save Service

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: 75c6b3310ae4dd8fd0bedf89afa5d874

File Size: 1.3 MB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 5

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x4c00)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800dee18)
api-ms-win-core-com-l1-1-0.dll
  • CoAddRefServerProcess (Address: 0x1800dee48)
  • CoCancelCall (Address: 0x1800deeb8)
  • CoCreateFreeThreadedMarshaler (Address: 0x1800dee60)
  • CoCreateGuid (Address: 0x1800dee88)
  • CoCreateInstance (Address: 0x1800dee38)
  • CoDecrementMTAUsage (Address: 0x1800deeb0)
  • CoDisableCallCancellation (Address: 0x1800deec0)
  • CoDisconnectContext (Address: 0x1800deee0)
  • CoEnableCallCancellation (Address: 0x1800deea8)
  • CoFreeUnusedLibraries (Address: 0x1800dee30)
  • CoImpersonateClient (Address: 0x1800dee98)
  • CoInitializeEx (Address: 0x1800dee40)
  • CoInitializeSecurity (Address: 0x1800deec8)
  • CoRegisterClassObject (Address: 0x1800deed0)
  • CoReleaseServerProcess (Address: 0x1800dee28)
  • CoResumeClassObjects (Address: 0x1800deed8)
  • CoRevertToSelf (Address: 0x1800dee90)
  • CoRevokeClassObject (Address: 0x1800deea0)
  • CoSetProxyBlanket (Address: 0x1800dee70)
  • CoSwitchCallContext (Address: 0x1800dee78)
  • CoTaskMemAlloc (Address: 0x1800dee58)
  • CoTaskMemFree (Address: 0x1800dee68)
  • CoUninitialize (Address: 0x1800dee50)
  • StringFromGUID2 (Address: 0x1800dee80)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800deef0)
  • IsDebuggerPresent (Address: 0x1800def00)
  • OutputDebugStringW (Address: 0x1800deef8)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800def10)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800def20)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800def38)
  • RaiseException (Address: 0x1800def48)
  • SetLastError (Address: 0x1800def40)
  • SetUnhandledExceptionFilter (Address: 0x1800def50)
  • UnhandledExceptionFilter (Address: 0x1800def30)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x1800defb0)
  • CreateDirectoryW (Address: 0x1800def70)
  • CreateFileW (Address: 0x1800def78)
  • FindClose (Address: 0x1800def60)
  • FindFirstFileW (Address: 0x1800def98)
  • FindNextFileW (Address: 0x1800def90)
  • GetFileAttributesW (Address: 0x1800defc0)
  • GetFileInformationByHandle (Address: 0x1800def68)
  • GetFileSizeEx (Address: 0x1800defb8)
  • ReadFile (Address: 0x1800defa0)
  • SetEndOfFile (Address: 0x1800def88)
  • SetFilePointerEx (Address: 0x1800def80)
  • WriteFile (Address: 0x1800defa8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800defd0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800defe8)
  • HeapAlloc (Address: 0x1800defe0)
  • HeapFree (Address: 0x1800deff0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x1800df000)
api-ms-win-core-libraryloader-l1-2-0.dll
  • GetModuleFileNameA (Address: 0x1800df020)
  • GetModuleHandleExW (Address: 0x1800df018)
  • GetModuleHandleW (Address: 0x1800df028)
  • GetProcAddress (Address: 0x1800df010)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800df038)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800df050)
  • GetCurrentProcessId (Address: 0x1800df060)
  • GetCurrentThread (Address: 0x1800df068)
  • GetCurrentThreadId (Address: 0x1800df070)
  • OpenThreadToken (Address: 0x1800df058)
  • TerminateProcess (Address: 0x1800df048)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800df080)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800df0d0)
  • RegCreateKeyExW (Address: 0x1800df0b8)
  • RegDeleteKeyExW (Address: 0x1800df098)
  • RegDeleteTreeW (Address: 0x1800df0c0)
  • RegDeleteValueW (Address: 0x1800df0b0)
  • RegEnumKeyExW (Address: 0x1800df090)
  • RegEnumValueW (Address: 0x1800df0a8)
  • RegGetValueW (Address: 0x1800df0c8)
  • RegOpenKeyExW (Address: 0x1800df0d8)
  • RegQueryInfoKeyW (Address: 0x1800df0a0)
  • RegSetValueExW (Address: 0x1800df0e0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800df100)
  • RtlLookupFunctionEntry (Address: 0x1800df0f0)
  • RtlVirtualUnwind (Address: 0x1800df0f8)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeW (Address: 0x1800df110)
  • MultiByteToWideChar (Address: 0x1800df118)
  • WideCharToMultiByte (Address: 0x1800df120)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800df178)
  • AcquireSRWLockShared (Address: 0x1800df188)
  • CreateEventW (Address: 0x1800df198)
  • CreateMutexExW (Address: 0x1800df160)
  • CreateSemaphoreExW (Address: 0x1800df140)
  • DeleteCriticalSection (Address: 0x1800df1a0)
  • EnterCriticalSection (Address: 0x1800df1b0)
  • InitializeCriticalSection (Address: 0x1800df150)
  • InitializeCriticalSectionEx (Address: 0x1800df148)
  • InitializeSRWLock (Address: 0x1800df1a8)
  • LeaveCriticalSection (Address: 0x1800df1c8)
  • OpenSemaphoreW (Address: 0x1800df1c0)
  • ReleaseMutex (Address: 0x1800df168)
  • ReleaseSemaphore (Address: 0x1800df158)
  • ReleaseSRWLockExclusive (Address: 0x1800df180)
  • ReleaseSRWLockShared (Address: 0x1800df1b8)
  • ResetEvent (Address: 0x1800df138)
  • SetEvent (Address: 0x1800df130)
  • WaitForSingleObject (Address: 0x1800df190)
  • WaitForSingleObjectEx (Address: 0x1800df170)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x1800df1f0)
  • Sleep (Address: 0x1800df1e8)
  • SleepConditionVariableSRW (Address: 0x1800df1d8)
  • WakeAllConditionVariable (Address: 0x1800df1e0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x1800df218)
  • GetSystemTimeAsFileTime (Address: 0x1800df200)
  • GetTickCount (Address: 0x1800df208)
  • GetTickCount64 (Address: 0x1800df210)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800df248)
  • CloseThreadpoolWait (Address: 0x1800df268)
  • CloseThreadpoolWork (Address: 0x1800df260)
  • CreateThreadpoolTimer (Address: 0x1800df230)
  • CreateThreadpoolWait (Address: 0x1800df258)
  • CreateThreadpoolWork (Address: 0x1800df270)
  • SetThreadpoolTimer (Address: 0x1800df238)
  • SetThreadpoolWait (Address: 0x1800df240)
  • SubmitThreadpoolWork (Address: 0x1800df278)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800df228)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800df250)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1800df280)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x1800df298)
  • DeleteTimerQueueTimer (Address: 0x1800df290)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800df2a8)
  • SystemTimeToFileTime (Address: 0x1800df2b0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800df2c0)
  • EncodePointer (Address: 0x1800df2c8)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1800df2e0)
  • RoOriginateErrorW (Address: 0x1800df2d8)
  • RoTransformError (Address: 0x1800df2e8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800df2f8)
  • RoGetActivationFactory (Address: 0x1800df318)
  • RoInitialize (Address: 0x1800df308)
  • RoRegisterActivationFactories (Address: 0x1800df310)
  • RoRevokeActivationFactories (Address: 0x1800df320)
  • RoUninitialize (Address: 0x1800df300)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x1800df340)
  • WindowsCreateString (Address: 0x1800df330)
  • WindowsCreateStringReference (Address: 0x1800df338)
  • WindowsDeleteString (Address: 0x1800df360)
  • WindowsDuplicateString (Address: 0x1800df368)
  • WindowsGetStringLen (Address: 0x1800df348)
  • WindowsGetStringRawBuffer (Address: 0x1800df370)
  • WindowsIsStringEmpty (Address: 0x1800df350)
  • WindowsStringHasEmbeddedNull (Address: 0x1800df358)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1800df380)
  • EventSetInformation (Address: 0x1800df388)
  • EventUnregister (Address: 0x1800df390)
  • EventWriteTransfer (Address: 0x1800df398)
api-ms-win-power-setting-l1-1-0.dll
  • PowerSettingRegisterNotification (Address: 0x1800df3a8)
  • PowerSettingUnregisterNotification (Address: 0x1800df3b0)
api-ms-win-security-base-l1-1-0.dll
  • ImpersonateLoggedOnUser (Address: 0x1800df3d0)
  • MakeAbsoluteSD (Address: 0x1800df3c0)
  • RevertToSelf (Address: 0x1800df3c8)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupAccountSidW (Address: 0x1800df3e0)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800df3f8)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800df3f0)
  • ConvertStringSidToSidW (Address: 0x1800df400)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x1800df418)
  • SetServiceStatus (Address: 0x1800df410)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1800df430)
  • OpenSCManagerW (Address: 0x1800df428)
  • OpenServiceW (Address: 0x1800df438)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfigW (Address: 0x1800df448)
combase.dll
  • (Address: 0x1800df458)
  • (Address: 0x1800df460)
  • (Address: 0x1800df468)
  • (Address: 0x1800df470)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1800df608)
  • ___lc_collate_cp_func (Address: 0x1800df628)
  • ___lc_handle_func (Address: 0x1800df600)
  • ___mb_cur_max_func (Address: 0x1800df5f0)
  • __C_specific_handler (Address: 0x1800df480)
  • __crtCompareStringW (Address: 0x1800df638)
  • __crtLCMapStringW (Address: 0x1800df620)
  • __CxxFrameHandler3 (Address: 0x1800df4f8)
  • __dllonexit (Address: 0x1800df4a8)
  • __pctype_func (Address: 0x1800df610)
  • _amsg_exit (Address: 0x1800df510)
  • _callnewh (Address: 0x1800df520)
  • _CxxThrowException (Address: 0x1800df530)
  • _errno (Address: 0x1800df5f8)
  • _initterm (Address: 0x1800df4b8)
  • _lock (Address: 0x1800df498)
  • _onexit (Address: 0x1800df4e8)
  • _purecall (Address: 0x1800df528)
  • _ultow_s (Address: 0x1800df580)
  • _unlock (Address: 0x1800df4a0)
  • _vsnprintf (Address: 0x1800df4c8)
  • _vsnprintf_s (Address: 0x1800df658)
  • _vsnwprintf (Address: 0x1800df668)
  • _wcsicmp (Address: 0x1800df590)
  • _wcstoui64 (Address: 0x1800df588)
  • _wtoi (Address: 0x1800df5d0)
  • _wtoi64 (Address: 0x1800df5b0)
  • _XcptFilter (Address: 0x1800df518)
  • ??_V@YAXPEAX@Z (Address: 0x1800df4c0)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800df538)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800df548)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800df4d0)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800df488)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800df4d8)
  • ??0exception@@QEAA@XZ (Address: 0x1800df650)
  • ??1bad_cast@@UEAA@XZ (Address: 0x1800df540)
  • ??1exception@@UEAA@XZ (Address: 0x1800df648)
  • ??1type_info@@UEAA@XZ (Address: 0x1800df490)
  • ??3@YAXPEAX@Z (Address: 0x1800df508)
  • ??8type_info@@QEBAHAEBV0@@Z (Address: 0x1800df578)
  • ?terminate@@YAXXZ (Address: 0x1800df670)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800df4e0)
  • abort (Address: 0x1800df640)
  • calloc (Address: 0x1800df618)
  • free (Address: 0x1800df500)
  • malloc (Address: 0x1800df4b0)
  • memcmp (Address: 0x1800df630)
  • memcpy (Address: 0x1800df5e8)
  • memcpy_s (Address: 0x1800df660)
  • memmove (Address: 0x1800df4f0)
  • memmove_s (Address: 0x1800df560)
  • memset (Address: 0x1800df678)
  • realloc (Address: 0x1800df558)
  • setlocale (Address: 0x1800df5e0)
  • strchr (Address: 0x1800df550)
  • swscanf_s (Address: 0x1800df5c8)
  • tolower (Address: 0x1800df5d8)
  • towupper (Address: 0x1800df568)
  • wcscat_s (Address: 0x1800df570)
  • wcschr (Address: 0x1800df5b8)
  • wcscpy_s (Address: 0x1800df5a8)
  • wcsncmp (Address: 0x1800df5c0)
  • wcsncpy_s (Address: 0x1800df5a0)
  • wcsstr (Address: 0x1800df598)
ntdll.dll
  • DbgPrintEx (Address: 0x1800df6a8)
  • NtFlushBuffersFileEx (Address: 0x1800df688)
  • NtQueryInformationToken (Address: 0x1800df6a0)
  • NtQueryWnfStateData (Address: 0x1800df6b0)
  • NtSetInformationFile (Address: 0x1800df690)
  • RtlCapabilityCheck (Address: 0x1800df6c0)
  • RtlDosPathNameToNtPathName_U (Address: 0x1800df698)
  • RtlInitUnicodeString (Address: 0x1800df6c8)
  • RtlIsMultiSessionSku (Address: 0x1800df6d0)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800df6d8)
  • RtlUnsubscribeWnfStateChangeNotification (Address: 0x1800df6b8)
OLEAUT32.dll
  • VariantInit (Address: 0x1800deda0)
RPCRT4.dll
  • NdrServerCall2 (Address: 0x1800dedb8)
  • NdrServerCallAll (Address: 0x1800dedb0)
  • RpcBindingVectorFree (Address: 0x1800dedd8)
  • RpcEpRegisterW (Address: 0x1800dedf8)
  • RpcEpUnregister (Address: 0x1800dee00)
  • RpcImpersonateClient (Address: 0x1800dedc8)
  • RpcRevertToSelfEx (Address: 0x1800dedc0)
  • RpcServerInqBindings (Address: 0x1800dede8)
  • RpcServerRegisterIf3 (Address: 0x1800dedf0)
  • RpcServerUnregisterIf (Address: 0x1800dedd0)
  • RpcServerUseProtseqW (Address: 0x1800dede0)
  • UuidFromStringW (Address: 0x1800dee08)