AppXDeploymentClient.dll
Description: AppX Deployment Client DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6456
Architecture: 64-bit
Operating System: Windows NT
SHA256: 4a2d31d92a943b20ca2b5b64f61ce076
File Size: 1.0 MB
Uploaded At: Dec. 1, 2025, 7:22 a.m.
Views: 21
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- (Ordinal: 1, Address: 0x65480)
- GetApplicability (Ordinal: 2, Address: 0x6e620)
- AppxCreateSharedLocalFolder (Ordinal: 3, Address: 0x6b4f0)
- AppxPackageRepositoryRecoverStagedPackages (Ordinal: 4, Address: 0x18860)
- AppxPackageRepositoryRecoverUserInstalls (Ordinal: 5, Address: 0x18860)
- AppxRecoverUserInstallsForUpgrade (Ordinal: 6, Address: 0x18860)
- AppxDeletePackageFiles (Ordinal: 7, Address: 0x6b590)
- AppxRequestRemovePackageForUser (Ordinal: 8, Address: 0x6d060)
- IsPackageInstalled (Ordinal: 9, Address: 0x6f460)
- RDSRecoverRequests (Ordinal: 10, Address: 0x6f8f0)
- AppxPreStageCleanupRunTask (Ordinal: 11, Address: 0x6c760)
- AppxPreRegisterPackage (Ordinal: 12, Address: 0x6c650)
- ReArmAppxPreStageCleanupTask (Ordinal: 13, Address: 0x6f980)
- AppxAddPackageToAllUserStoreForPbr (Ordinal: 14, Address: 0x6ab80)
- GetPackageApplicabilityForUserLogon (Ordinal: 15, Address: 0x6f180)
- (Ordinal: 16, Address: 0x6e560)
- AppxStagePackage (Ordinal: 17, Address: 0x6d190)
- AppxGetPackageInstalledLocation (Ordinal: 18, Address: 0x6bb60)
- AppxDestagePackage (Ordinal: 19, Address: 0x6b650)
- GetApplicability2 (Ordinal: 20, Address: 0x18860)
- AppxGetStagedPackageFullNameFromFamilyName (Ordinal: 21, Address: 0x6be10)
- AppxIsStagedPackageStoreSigned (Ordinal: 22, Address: 0x6c430)
- RegisterNotification (Ordinal: 23, Address: 0x2830)
- UnregisterNotification (Ordinal: 24, Address: 0x6fba0)
- GetNotificationPayload (Ordinal: 25, Address: 0x6f040)
- NotifyPackageStatusChanged (Ordinal: 26, Address: 0x6f710)
- VerifyPackage (Ordinal: 27, Address: 0x6ff00)
- AppxPreRegisterAllInboxPackages (Ordinal: 28, Address: 0x6c580)
- AppxValidatePackagesWithOptions (Ordinal: 29, Address: 0x6d980)
- AppxRemovePackageForAllUsers (Ordinal: 30, Address: 0x6c8d0)
- RequestContentGroups (Ordinal: 31, Address: 0x6fae0)
- GetApplicability4 (Ordinal: 32, Address: 0x18860)
- RequestContentGroupsForFullTrust (Ordinal: 33, Address: 0x6fb40)
- GeneratePreInstalledPriFiles (Ordinal: 34, Address: 0x6e5b0)
- PopulateProtocolAndFTA (Ordinal: 35, Address: 0x6f7a0)
- FixJunctionsForAppsIfNecessary (Ordinal: 36, Address: 0x6e520)
- AppxRemovePackageForUserSid (Ordinal: 37, Address: 0x6ca60)
- CreateCanonicalPriFile (Ordinal: 38, Address: 0x6e1d0)
- RegisterNotificationForUser (Ordinal: 39, Address: 0x2aa0)
- UnregisterNotificationForUser (Ordinal: 40, Address: 0x2680)
- GetNotificationPayloadForUser (Ordinal: 41, Address: 0x6f080)
- AppxCleanupWCIReparsePoints (Ordinal: 42, Address: 0x6b430)
- RepairPackageFileAcls (Ordinal: 43, Address: 0x6fa70)
- EnsurePackageFamilyIsRegisteredBeforeActivation (Ordinal: 44, Address: 0x6e350)
- AppxCleanupSystemAppsMigratedToFOD (Ordinal: 45, Address: 0x6b180)
- AppxCleanupOrphanPackages (Ordinal: 46, Address: 0x6b140)
- CheckComCallerHasCapabilities (Ordinal: 47, Address: 0x11c20)
- GetBundleApplicablePackages (Ordinal: 48, Address: 0x6e640)
- GetApplicability5 (Ordinal: 49, Address: 0xcef0)
- DeleteApplicabilityInfoArray (Ordinal: 50, Address: 0x13540)
- UpdateAgentCreateDownload (Ordinal: 51, Address: 0x6fc10)
- UpdateAgentGetDownloadRanges (Ordinal: 52, Address: 0x6fce0)
- UpdateAgentCancelAllDownloads (Ordinal: 53, Address: 0x6fbd0)
- UpdateDataSourceRegister (Ordinal: 54, Address: 0x6fe40)
- UpdateDataSourceAddRange (Ordinal: 55, Address: 0x6fd80)
- UpdateDataSourceRun (Ordinal: 56, Address: 0x6feb0)
- UpdateDataSourceCancelRun (Ordinal: 57, Address: 0x6fdf0)
- GetPackageRegistrationStatusForUser (Ordinal: 58, Address: 0x6f1a0)
- IsSharedAppsEnabled (Ordinal: 59, Address: 0x6f520)
- AppInstallerUpdateAllTask (Ordinal: 60, Address: 0x6ab50)
- CheckAppInstallerUpdateAvailability (Ordinal: 61, Address: 0x6ddc0)
- UpdateAgentFreeDownloadRanges (Ordinal: 62, Address: 0x6fcb0)
- AppxRegisterPackage (Ordinal: 63, Address: 0x6c770)
- IsPackageMetadataUnderSystemMetadata (Ordinal: 64, Address: 0x6f4d0)
- GetMetadataRootForPackage (Ordinal: 65, Address: 0x9a90)
- ClientGetAllPackagesToBeInstalledForUser (Ordinal: 66, Address: 0x6e090)
- ClientDeleteAllPackagesFromMainPackageArray (Ordinal: 67, Address: 0x6df70)
- GetPackageRegistrationStatusForUserAndDefaultAccount (Ordinal: 68, Address: 0x7d70)
- UpdateAgentGetDownloadingPackageCount (Ordinal: 69, Address: 0x6fd30)
- PreRegisterPackagesInContainer (Ordinal: 70, Address: 0x6f820)
- EnsurePackageFamiliesAreRegisteredInContainer (Ordinal: 71, Address: 0x6e280)
- RemovePackageFromContainer (Ordinal: 72, Address: 0x6f9a0)
- HasPackageFamilyBeenRegisteredForUser (Ordinal: 73, Address: 0x6f1e0)
- CleanupProfileForUser (Ordinal: 74, Address: 0x26450)
- AppxRemoveAllPackagesForUserSid (Ordinal: 75, Address: 0x260f0)
- MsixPackageVolumeIsRepairNeeded (Ordinal: 76, Address: 0x26550)
- MsixPackageVolumeRepair (Ordinal: 77, Address: 0x265a0)
- AppxCreateSharedLocalFolderForFamilyName (Ordinal: 78, Address: 0x6b540)
- AppxDoesSharedLocalFolderExistForFamilyName (Ordinal: 79, Address: 0x6b9e0)
- AppxValidatePackages (Ordinal: 80, Address: 0x6d960)
- CheckForUpdatesAndWaitForInstallerIfNeeded (Ordinal: 81, Address: 0x6de20)
- DllCanUnloadNow (Ordinal: 82, Address: 0x16860)
- DllGetActivationFactory (Ordinal: 83, Address: 0x11c60)
- DllGetClassObject (Ordinal: 84, Address: 0x77d30)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800c0758)
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x1800c07a0)
- CoCreateInstance (Address: 0x1800c0798)
- CoDecrementMTAUsage (Address: 0x1800c07b8)
- CoGetApartmentType (Address: 0x1800c0788)
- CoGetCallContext (Address: 0x1800c07e8)
- CoGetCallerTID (Address: 0x1800c07b0)
- CoImpersonateClient (Address: 0x1800c07c0)
- CoIncrementMTAUsage (Address: 0x1800c0768)
- CoInitializeEx (Address: 0x1800c0790)
- CoMarshalInterface (Address: 0x1800c0780)
- CoReleaseMarshalData (Address: 0x1800c0770)
- CoRevertToSelf (Address: 0x1800c07d8)
- CoTaskMemAlloc (Address: 0x1800c07e0)
- CoTaskMemFree (Address: 0x1800c07a8)
- CoUninitialize (Address: 0x1800c07c8)
- CreateStreamOnHGlobal (Address: 0x1800c0778)
- StringFromGUID2 (Address: 0x1800c07d0)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x1800c07f8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x1800c0810)
- CStdStubBuffer2_CountRefs (Address: 0x1800c08a0)
- CStdStubBuffer2_Disconnect (Address: 0x1800c08f0)
- CStdStubBuffer2_QueryInterface (Address: 0x1800c0878)
- NdrProxyForwardingFunction3 (Address: 0x1800c0818)
- NdrProxyForwardingFunction4 (Address: 0x1800c0860)
- NdrProxyForwardingFunction5 (Address: 0x1800c0858)
- ObjectStublessClient10 (Address: 0x1800c0868)
- ObjectStublessClient11 (Address: 0x1800c0898)
- ObjectStublessClient12 (Address: 0x1800c0888)
- ObjectStublessClient13 (Address: 0x1800c08b0)
- ObjectStublessClient14 (Address: 0x1800c0890)
- ObjectStublessClient15 (Address: 0x1800c08e0)
- ObjectStublessClient16 (Address: 0x1800c0828)
- ObjectStublessClient17 (Address: 0x1800c0838)
- ObjectStublessClient18 (Address: 0x1800c08d0)
- ObjectStublessClient19 (Address: 0x1800c0870)
- ObjectStublessClient20 (Address: 0x1800c08d8)
- ObjectStublessClient21 (Address: 0x1800c0820)
- ObjectStublessClient22 (Address: 0x1800c08b8)
- ObjectStublessClient23 (Address: 0x1800c08e8)
- ObjectStublessClient24 (Address: 0x1800c0808)
- ObjectStublessClient25 (Address: 0x1800c0830)
- ObjectStublessClient26 (Address: 0x1800c0840)
- ObjectStublessClient27 (Address: 0x1800c08c8)
- ObjectStublessClient3 (Address: 0x1800c08c0)
- ObjectStublessClient6 (Address: 0x1800c0880)
- ObjectStublessClient7 (Address: 0x1800c08a8)
- ObjectStublessClient8 (Address: 0x1800c0850)
- ObjectStublessClient9 (Address: 0x1800c0848)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800c0908)
- IsDebuggerPresent (Address: 0x1800c0900)
- OutputDebugStringW (Address: 0x1800c0910)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800c0938)
- RaiseException (Address: 0x1800c0920)
- SetLastError (Address: 0x1800c0930)
- SetUnhandledExceptionFilter (Address: 0x1800c0928)
- UnhandledExceptionFilter (Address: 0x1800c0940)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1800c09b8)
- CreateDirectoryW (Address: 0x1800c0958)
- CreateFileW (Address: 0x1800c0978)
- DeleteFileW (Address: 0x1800c0990)
- FindClose (Address: 0x1800c0970)
- FindFirstFileW (Address: 0x1800c09c0)
- FindNextFileW (Address: 0x1800c09d0)
- GetDiskFreeSpaceExW (Address: 0x1800c0968)
- GetDiskFreeSpaceW (Address: 0x1800c0980)
- GetDriveTypeW (Address: 0x1800c09c8)
- GetFileAttributesW (Address: 0x1800c0950)
- GetFileSizeEx (Address: 0x1800c0988)
- GetFullPathNameW (Address: 0x1800c0998)
- GetVolumeInformationW (Address: 0x1800c09a0)
- GetVolumePathNameW (Address: 0x1800c09b0)
- SetFileAttributesW (Address: 0x1800c09a8)
- WriteFile (Address: 0x1800c0960)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x1800c09f0)
- GetVolumeNameForVolumeMountPointW (Address: 0x1800c09e8)
- GetVolumePathNamesForVolumeNameW (Address: 0x1800c09e0)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x1800c0a00)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800c0a10)
- DuplicateHandle (Address: 0x1800c0a18)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800c0a38)
- HeapAlloc (Address: 0x1800c0a30)
- HeapFree (Address: 0x1800c0a28)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800c0a50)
- LocalFree (Address: 0x1800c0a48)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800c0a60)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x1800c0aa0)
- GetModuleFileNameA (Address: 0x1800c0ab0)
- GetModuleFileNameW (Address: 0x1800c0a70)
- GetModuleHandleExW (Address: 0x1800c0a98)
- GetModuleHandleW (Address: 0x1800c0a80)
- GetProcAddress (Address: 0x1800c0a88)
- LoadLibraryExA (Address: 0x1800c0a90)
- LoadLibraryExW (Address: 0x1800c0aa8)
- LoadStringW (Address: 0x1800c0a78)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800c0ac0)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1800c0af0)
- MapViewOfFile (Address: 0x1800c0ad0)
- UnmapViewOfFile (Address: 0x1800c0ad8)
- VirtualProtect (Address: 0x1800c0ae8)
- VirtualQuery (Address: 0x1800c0ae0)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCanonicalize (Address: 0x1800c0b00)
- PathCchCombine (Address: 0x1800c0b10)
- PathCchRemoveBackslash (Address: 0x1800c0b08)
- PathCchSkipRoot (Address: 0x1800c0b18)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1800c0b40)
- GetCurrentProcessId (Address: 0x1800c0b30)
- GetCurrentThread (Address: 0x1800c0b38)
- GetCurrentThreadId (Address: 0x1800c0b78)
- GetProcessId (Address: 0x1800c0b58)
- OpenProcessToken (Address: 0x1800c0b80)
- OpenThreadToken (Address: 0x1800c0b70)
- ProcessIdToSessionId (Address: 0x1800c0b28)
- SetThreadToken (Address: 0x1800c0b48)
- TerminateProcess (Address: 0x1800c0b50)
- TlsAlloc (Address: 0x1800c0b88)
- TlsGetValue (Address: 0x1800c0b60)
- TlsSetValue (Address: 0x1800c0b68)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1800c0ba0)
- OpenProcess (Address: 0x1800c0b98)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800c0bb0)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1800c0bc0)
api-ms-win-core-realtime-l1-1-0.dll
- QueryUnbiasedInterruptTime (Address: 0x1800c0bd0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureStackBackTrace (Address: 0x1800c0be0)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x1800c0c00)
- CompareStringOrdinal (Address: 0x1800c0bf8)
- MultiByteToWideChar (Address: 0x1800c0bf0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800c0c90)
- AcquireSRWLockShared (Address: 0x1800c0c60)
- CreateEventExW (Address: 0x1800c0c10)
- CreateEventW (Address: 0x1800c0c30)
- CreateMutexExW (Address: 0x1800c0c68)
- CreateSemaphoreExW (Address: 0x1800c0c38)
- DeleteCriticalSection (Address: 0x1800c0cb0)
- EnterCriticalSection (Address: 0x1800c0c48)
- InitializeCriticalSectionEx (Address: 0x1800c0c70)
- InitializeSRWLock (Address: 0x1800c0c40)
- LeaveCriticalSection (Address: 0x1800c0c58)
- OpenSemaphoreW (Address: 0x1800c0ca0)
- ReleaseMutex (Address: 0x1800c0c80)
- ReleaseSemaphore (Address: 0x1800c0c50)
- ReleaseSRWLockExclusive (Address: 0x1800c0c88)
- ReleaseSRWLockShared (Address: 0x1800c0ca8)
- ResetEvent (Address: 0x1800c0c20)
- SetEvent (Address: 0x1800c0c18)
- SleepEx (Address: 0x1800c0c28)
- WaitForSingleObject (Address: 0x1800c0c78)
- WaitForSingleObjectEx (Address: 0x1800c0c98)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1800c0cd8)
- InitOnceComplete (Address: 0x1800c0cd0)
- InitOnceExecuteOnce (Address: 0x1800c0cc8)
- Sleep (Address: 0x1800c0cc0)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetLocalTime (Address: 0x1800c0d08)
- GetSystemInfo (Address: 0x1800c0d10)
- GetSystemTimeAsFileTime (Address: 0x1800c0d00)
- GetTickCount (Address: 0x1800c0cf8)
- GetVersionExW (Address: 0x1800c0ce8)
- GetWindowsDirectoryW (Address: 0x1800c0cf0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1800c0d38)
- CloseThreadpoolWork (Address: 0x1800c0d40)
- CreateThreadpoolTimer (Address: 0x1800c0d28)
- CreateThreadpoolWork (Address: 0x1800c0d50)
- FreeLibraryWhenCallbackReturns (Address: 0x1800c0d48)
- SetThreadpoolTimer (Address: 0x1800c0d30)
- SubmitThreadpoolWork (Address: 0x1800c0d60)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800c0d58)
- WaitForThreadpoolWorkCallbacks (Address: 0x1800c0d20)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1800c0d70)
- EncodePointer (Address: 0x1800c0d78)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x1800c0d90)
- RoOriginateError (Address: 0x1800c0da8)
- RoOriginateErrorW (Address: 0x1800c0da0)
- RoSetErrorReportingFlags (Address: 0x1800c0d98)
- RoTransformError (Address: 0x1800c0db0)
- SetRestrictedErrorInfo (Address: 0x1800c0d88)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x1800c0dc8)
- RoGetMatchingRestrictedErrorInfo (Address: 0x1800c0dc0)
- RoReportFailedDelegate (Address: 0x1800c0dd0)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1800c0df8)
- RoGetActivationFactory (Address: 0x1800c0de0)
- RoInitialize (Address: 0x1800c0de8)
- RoUninitialize (Address: 0x1800c0df0)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800c0e08)
- _initterm_e (Address: 0x1800c0e10)
api-ms-win-crt-string-l1-1-0.dll
- memmove_s (Address: 0x1800c0e20)
- memset (Address: 0x1800c0e30)
- strcmp (Address: 0x1800c0e28)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x1800c0e50)
- GetTraceEnableLevel (Address: 0x1800c0e48)
- GetTraceLoggerHandle (Address: 0x1800c0e68)
- RegisterTraceGuidsW (Address: 0x1800c0e58)
- TraceMessage (Address: 0x1800c0e40)
- UnregisterTraceGuids (Address: 0x1800c0e60)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1800c0e78)
- EventProviderEnabled (Address: 0x1800c0ea0)
- EventRegister (Address: 0x1800c0e90)
- EventSetInformation (Address: 0x1800c0e98)
- EventUnregister (Address: 0x1800c0e88)
- EventWriteTransfer (Address: 0x1800c0e80)
api-ms-win-security-lsalookup-l1-1-0.dll
- LsaLookupClose (Address: 0x1800c0ec8)
- LsaLookupFreeMemory (Address: 0x1800c0ec0)
- LsaLookupGetDomainInfo (Address: 0x1800c0eb0)
- LsaLookupOpenLocalPolicy (Address: 0x1800c0eb8)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1800c0ee8)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800c0ed8)
- ConvertStringSidToSidW (Address: 0x1800c0ee0)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x1800c0f08)
- OpenSCManagerW (Address: 0x1800c0f10)
- OpenServiceW (Address: 0x1800c0ef8)
- StartServiceW (Address: 0x1800c0f00)
api-ms-win-service-management-l2-1-0.dll
- NotifyServiceStatusChangeW (Address: 0x1800c0f28)
- QueryServiceStatusEx (Address: 0x1800c0f20)
ntdll.dll
- EtwEventRegister (Address: 0x1800c1000)
- EtwEventUnregister (Address: 0x1800c0ff0)
- EtwEventWrite (Address: 0x1800c0ff8)
- NtClose (Address: 0x1800c0fe0)
- NtCreateSection (Address: 0x1800c0fe8)
- NtMapViewOfSection (Address: 0x1800c0fd0)
- NtQueryInformationFile (Address: 0x1800c1010)
- NtQueryInformationProcess (Address: 0x1800c0f70)
- NtQueryInformationThread (Address: 0x1800c1060)
- NtQuerySystemInformation (Address: 0x1800c0f48)
- NtSetInformationThread (Address: 0x1800c1008)
- NtSetInformationVirtualMemory (Address: 0x1800c0fb8)
- NtUnmapViewOfSection (Address: 0x1800c0fc8)
- RtlAcquireSRWLockExclusive (Address: 0x1800c1020)
- RtlAcquireSRWLockShared (Address: 0x1800c10b0)
- RtlAllocateAndInitializeSid (Address: 0x1800c0f88)
- RtlAllocateHeap (Address: 0x1800c0f78)
- RtlAllocateWnfSerializationGroup (Address: 0x1800c1038)
- RtlCaptureContext (Address: 0x1800c0fa0)
- RtlCompareUnicodeString (Address: 0x1800c1070)
- RtlConvertSidToUnicodeString (Address: 0x1800c0f60)
- RtlDeleteCriticalSection (Address: 0x1800c0f38)
- RtlDeleteElementGenericTableAvl (Address: 0x1800c1088)
- RtlDowncaseUnicodeString (Address: 0x1800c1080)
- RtlEnterCriticalSection (Address: 0x1800c0fc0)
- RtlEnumerateGenericTableWithoutSplayingAvl (Address: 0x1800c1090)
- RtlFreeHeap (Address: 0x1800c0f80)
- RtlFreeSid (Address: 0x1800c1030)
- RtlFreeUnicodeString (Address: 0x1800c0f58)
- RtlInitializeCriticalSection (Address: 0x1800c0f40)
- RtlInitializeGenericTableAvl (Address: 0x1800c1078)
- RtlInitializeSRWLock (Address: 0x1800c0fa8)
- RtlInitUnicodeString (Address: 0x1800c1068)
- RtlInsertElementGenericTableAvl (Address: 0x1800c1028)
- RtlIsMultiUsersInSessionSku (Address: 0x1800c0f68)
- RtlLeaveCriticalSection (Address: 0x1800c0fb0)
- RtlLookupElementGenericTableAvl (Address: 0x1800c1098)
- RtlLookupFunctionEntry (Address: 0x1800c0f98)
- RtlNtStatusToDosError (Address: 0x1800c1058)
- RtlNtStatusToDosErrorNoTeb (Address: 0x1800c0fd8)
- RtlNumberGenericTableElementsAvl (Address: 0x1800c10b8)
- RtlQueryPackageClaims (Address: 0x1800c10a0)
- RtlReleaseSRWLockExclusive (Address: 0x1800c1018)
- RtlReleaseSRWLockShared (Address: 0x1800c10a8)
- RtlReportException (Address: 0x1800c0f50)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800c1040)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800c1048)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x1800c1050)
- RtlVirtualUnwind (Address: 0x1800c0f90)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1800c0700)
- CStdStubBuffer_Connect (Address: 0x1800c0678)
- CStdStubBuffer_CountRefs (Address: 0x1800c06d8)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800c0740)
- CStdStubBuffer_DebugServerRelease (Address: 0x1800c06a8)
- CStdStubBuffer_Disconnect (Address: 0x1800c0698)
- CStdStubBuffer_Invoke (Address: 0x1800c0708)
- CStdStubBuffer_IsIIDSupported (Address: 0x1800c0680)
- CStdStubBuffer_QueryInterface (Address: 0x1800c06d0)
- I_RpcExceptionFilter (Address: 0x1800c06c8)
- IUnknown_AddRef_Proxy (Address: 0x1800c0718)
- IUnknown_QueryInterface_Proxy (Address: 0x1800c0690)
- IUnknown_Release_Proxy (Address: 0x1800c06f8)
- Ndr64AsyncClientCall (Address: 0x1800c0638)
- NdrClientCall3 (Address: 0x1800c06c0)
- NdrCStdStubBuffer_Release (Address: 0x1800c0640)
- NdrCStdStubBuffer2_Release (Address: 0x1800c0668)
- NdrDllCanUnloadNow (Address: 0x1800c0658)
- NdrDllGetClassObject (Address: 0x1800c0660)
- NdrOleAllocate (Address: 0x1800c06b8)
- NdrOleFree (Address: 0x1800c0738)
- NdrStubCall3 (Address: 0x1800c0688)
- NdrStubForwardingFunction (Address: 0x1800c0748)
- RpcAsyncCancelCall (Address: 0x1800c0650)
- RpcAsyncCompleteCall (Address: 0x1800c0648)
- RpcAsyncInitializeHandle (Address: 0x1800c0670)
- RpcBindingBind (Address: 0x1800c06e0)
- RpcBindingCreateW (Address: 0x1800c06e8)
- RpcBindingFree (Address: 0x1800c06f0)
- RpcBindingFromStringBindingW (Address: 0x1800c0730)
- RpcBindingUnbind (Address: 0x1800c06a0)
- RpcServerInqCallAttributesW (Address: 0x1800c06b0)
- RpcStringBindingComposeW (Address: 0x1800c0630)
- RpcStringFreeW (Address: 0x1800c0720)
- UuidCreate (Address: 0x1800c0710)
- UuidToStringW (Address: 0x1800c0728)