AppXDeploymentExtensions.desktop.dll

Description: AppX Deployment Extensions Desktop DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: a4d74317c81ac0a5ddfbc097dcb3e21c

File Size: 1.7 MB

Uploaded At: Dec. 1, 2025, 7:22 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • LoadCategoryNameTable (Ordinal: 1, Address: 0xa3a0)
  • LoadExtensionRegistrationTable (Ordinal: 2, Address: 0xa2b0)
  • ShellRefresh (Ordinal: 3, Address: 0x26430)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18011b2b0)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x18011b330)
  • CoCancelCall (Address: 0x18011b300)
  • CoCreateGuid (Address: 0x18011b2e0)
  • CoCreateInstance (Address: 0x18011b2d8)
  • CoDisableCallCancellation (Address: 0x18011b2f0)
  • CoEnableCallCancellation (Address: 0x18011b308)
  • CoGetApartmentType (Address: 0x18011b2d0)
  • CoGetMalloc (Address: 0x18011b338)
  • CoSetProxyBlanket (Address: 0x18011b2f8)
  • CoTaskMemAlloc (Address: 0x18011b340)
  • CoTaskMemFree (Address: 0x18011b2c0)
  • CoTaskMemRealloc (Address: 0x18011b320)
  • CreateStreamOnHGlobal (Address: 0x18011b318)
  • IIDFromString (Address: 0x18011b2c8)
  • PropVariantClear (Address: 0x18011b310)
  • StringFromCLSID (Address: 0x18011b328)
  • StringFromGUID2 (Address: 0x18011b2e8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18011b350)
  • IsDebuggerPresent (Address: 0x18011b360)
  • OutputDebugStringW (Address: 0x18011b358)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18011b370)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18011b380)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18011b3b0)
  • RaiseException (Address: 0x18011b398)
  • SetLastError (Address: 0x18011b390)
  • SetUnhandledExceptionFilter (Address: 0x18011b3a0)
  • UnhandledExceptionFilter (Address: 0x18011b3a8)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x18011b408)
  • CreateFileW (Address: 0x18011b3f8)
  • DeleteFileW (Address: 0x18011b428)
  • FindClose (Address: 0x18011b410)
  • FindFirstFileW (Address: 0x18011b3c8)
  • FindNextFileW (Address: 0x18011b3d0)
  • GetFileAttributesW (Address: 0x18011b3e0)
  • GetFileSize (Address: 0x18011b400)
  • GetFileSizeEx (Address: 0x18011b3f0)
  • GetTempFileNameW (Address: 0x18011b418)
  • GetVolumePathNameW (Address: 0x18011b430)
  • ReadFile (Address: 0x18011b3e8)
  • RemoveDirectoryW (Address: 0x18011b3d8)
  • SetFileAttributesW (Address: 0x18011b3c0)
  • SetFileInformationByHandle (Address: 0x18011b420)
  • WriteFile (Address: 0x18011b438)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x18011b448)
  • GetVolumeNameForVolumeMountPointW (Address: 0x18011b450)
api-ms-win-core-file-l1-2-2.dll
  • FindFirstFileNameW (Address: 0x18011b468)
  • FindNextFileNameW (Address: 0x18011b460)
api-ms-win-core-file-l2-1-0.dll
  • CopyFileExW (Address: 0x18011b490)
  • CreateHardLinkW (Address: 0x18011b480)
  • GetFileInformationByHandleEx (Address: 0x18011b478)
  • MoveFileExW (Address: 0x18011b488)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x18011b4a0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18011b4b0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18011b4d0)
  • HeapAlloc (Address: 0x18011b4c8)
  • HeapFree (Address: 0x18011b4c0)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalAlloc (Address: 0x18011b4f0)
  • GlobalFree (Address: 0x18011b4e0)
  • LocalAlloc (Address: 0x18011b4e8)
  • LocalFree (Address: 0x18011b4f8)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18011b518)
  • InterlockedPopEntrySList (Address: 0x18011b508)
  • InterlockedPushEntrySList (Address: 0x18011b510)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x18011b528)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x18011b560)
  • GetModuleFileNameA (Address: 0x18011b558)
  • GetModuleHandleExW (Address: 0x18011b540)
  • GetModuleHandleW (Address: 0x18011b538)
  • GetProcAddress (Address: 0x18011b548)
  • LoadLibraryExW (Address: 0x18011b550)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18011b570)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x18011b588)
  • MapViewOfFile (Address: 0x18011b580)
  • UnmapViewOfFile (Address: 0x18011b590)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCanonicalize (Address: 0x18011b5a0)
  • PathCchAppend (Address: 0x18011b5c0)
  • PathCchCombine (Address: 0x18011b5a8)
  • PathCchRemoveBackslash (Address: 0x18011b5b8)
  • PathCchSkipRoot (Address: 0x18011b5b0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18011b5d0)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessAsUserW (Address: 0x18011b628)
  • GetCurrentProcess (Address: 0x18011b5e8)
  • GetCurrentProcessId (Address: 0x18011b5f0)
  • GetCurrentThread (Address: 0x18011b608)
  • GetCurrentThreadId (Address: 0x18011b618)
  • GetExitCodeProcess (Address: 0x18011b648)
  • OpenProcessToken (Address: 0x18011b620)
  • OpenThreadToken (Address: 0x18011b610)
  • ProcessIdToSessionId (Address: 0x18011b5f8)
  • SetThreadToken (Address: 0x18011b600)
  • TerminateProcess (Address: 0x18011b5e0)
  • TlsAlloc (Address: 0x18011b630)
  • TlsGetValue (Address: 0x18011b640)
  • TlsSetValue (Address: 0x18011b638)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18011b658)
  • OpenProcess (Address: 0x18011b660)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18011b670)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x18011b680)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryUnbiasedInterruptTime (Address: 0x18011b690)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18011b6c0)
  • RegCopyTreeW (Address: 0x18011b6d0)
  • RegCreateKeyExW (Address: 0x18011b6e0)
  • RegDeleteKeyExW (Address: 0x18011b6b8)
  • RegDeleteTreeW (Address: 0x18011b6f8)
  • RegDeleteValueW (Address: 0x18011b6a8)
  • RegEnumKeyExW (Address: 0x18011b6c8)
  • RegGetKeySecurity (Address: 0x18011b6b0)
  • RegGetValueW (Address: 0x18011b6f0)
  • RegOpenCurrentUser (Address: 0x18011b708)
  • RegOpenKeyExW (Address: 0x18011b6d8)
  • RegQueryInfoKeyW (Address: 0x18011b6a0)
  • RegQueryValueExW (Address: 0x18011b6e8)
  • RegSetValueExW (Address: 0x18011b700)
api-ms-win-core-registry-l1-1-1.dll
  • RegSetKeyValueW (Address: 0x18011b718)
api-ms-win-core-registry-l2-1-0.dll
  • RegDeleteKeyW (Address: 0x18011b728)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18011b738)
  • RtlCaptureStackBackTrace (Address: 0x18011b740)
  • RtlLookupFunctionEntry (Address: 0x18011b748)
  • RtlVirtualUnwind (Address: 0x18011b750)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x18011b760)
  • PathFindFileNameW (Address: 0x18011b770)
  • PathIsPrefixW (Address: 0x18011b768)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringEx (Address: 0x18011b798)
  • CompareStringOrdinal (Address: 0x18011b780)
  • CompareStringW (Address: 0x18011b790)
  • MultiByteToWideChar (Address: 0x18011b788)
  • WideCharToMultiByte (Address: 0x18011b7a0)
api-ms-win-core-string-l2-1-0.dll
  • CharLowerBuffW (Address: 0x18011b7b0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18011b7d0)
  • AcquireSRWLockShared (Address: 0x18011b808)
  • CreateEventW (Address: 0x18011b828)
  • CreateMutexExW (Address: 0x18011b800)
  • CreateSemaphoreExW (Address: 0x18011b7d8)
  • DeleteCriticalSection (Address: 0x18011b810)
  • EnterCriticalSection (Address: 0x18011b7e0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18011b830)
  • InitializeCriticalSectionEx (Address: 0x18011b850)
  • InitializeSRWLock (Address: 0x18011b840)
  • LeaveCriticalSection (Address: 0x18011b820)
  • OpenSemaphoreW (Address: 0x18011b818)
  • ReleaseMutex (Address: 0x18011b7e8)
  • ReleaseSemaphore (Address: 0x18011b7f0)
  • ReleaseSRWLockExclusive (Address: 0x18011b7c8)
  • ReleaseSRWLockShared (Address: 0x18011b7f8)
  • SetEvent (Address: 0x18011b7c0)
  • WaitForSingleObject (Address: 0x18011b838)
  • WaitForSingleObjectEx (Address: 0x18011b848)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18011b868)
  • InitOnceComplete (Address: 0x18011b870)
  • Sleep (Address: 0x18011b860)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x18011b898)
  • GetSystemDirectoryW (Address: 0x18011b8b8)
  • GetSystemInfo (Address: 0x18011b8a8)
  • GetSystemTimeAsFileTime (Address: 0x18011b8b0)
  • GetTickCount (Address: 0x18011b8a0)
  • GetTickCount64 (Address: 0x18011b888)
  • GetVersionExW (Address: 0x18011b880)
  • GetWindowsDirectoryW (Address: 0x18011b890)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18011b8c8)
  • CreateThreadpoolTimer (Address: 0x18011b8d8)
  • SetThreadpoolTimer (Address: 0x18011b8e0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18011b8d0)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x18011b8f0)
  • DeleteTimerQueueTimer (Address: 0x18011b8f8)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x18011b908)
  • SystemTimeToFileTime (Address: 0x18011b910)
api-ms-win-core-windowserrorreporting-l1-1-1.dll
  • WerRegisterCustomMetadata (Address: 0x18011b920)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x18011b940)
  • RoOriginateErrorW (Address: 0x18011b938)
  • RoTransformError (Address: 0x18011b930)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18011b958)
  • RoGetActivationFactory (Address: 0x18011b950)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x18011b9b0)
  • WindowsConcatString (Address: 0x18011b980)
  • WindowsCreateString (Address: 0x18011b9a0)
  • WindowsCreateStringReference (Address: 0x18011b990)
  • WindowsDeleteString (Address: 0x18011b9b8)
  • WindowsDeleteStringBuffer (Address: 0x18011b970)
  • WindowsDuplicateString (Address: 0x18011b9c0)
  • WindowsGetStringLen (Address: 0x18011b9a8)
  • WindowsGetStringRawBuffer (Address: 0x18011b9c8)
  • WindowsIsStringEmpty (Address: 0x18011b998)
  • WindowsPreallocateStringBuffer (Address: 0x18011b968)
  • WindowsPromoteStringBuffer (Address: 0x18011b978)
  • WindowsStringHasEmbeddedNull (Address: 0x18011b988)
api-ms-win-core-wow64-l1-1-1.dll
  • GetSystemWow64Directory2W (Address: 0x18011b9d8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18011ba60)
  • __CxxFrameHandler3 (Address: 0x18011ba68)
  • __CxxFrameHandler4 (Address: 0x18011baf8)
  • __std_terminate (Address: 0x18011bae0)
  • _CxxThrowException (Address: 0x18011ba70)
  • _o___std_exception_copy (Address: 0x18011bab0)
  • _o___std_exception_destroy (Address: 0x18011baa8)
  • _o___std_type_info_destroy_list (Address: 0x18011baa0)
  • _o___stdio_common_vsnprintf_s (Address: 0x18011ba98)
  • _o___stdio_common_vsnwprintf_s (Address: 0x18011ba90)
  • _o___stdio_common_vsprintf (Address: 0x18011ba88)
  • _o__callnewh (Address: 0x18011ba80)
  • _o__cexit (Address: 0x18011ba78)
  • _o__configure_narrow_argv (Address: 0x18011bb08)
  • _o__crt_atexit (Address: 0x18011bb00)
  • _o__errno (Address: 0x18011baf0)
  • _o__execute_onexit_table (Address: 0x18011bae8)
  • _o__initialize_narrow_environment (Address: 0x18011bad0)
  • _o__initialize_onexit_table (Address: 0x18011bac8)
  • _o__invalid_parameter_noinfo (Address: 0x18011bac0)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18011bab8)
  • _o__purecall (Address: 0x18011b9e8)
  • _o__register_onexit_function (Address: 0x18011b9f0)
  • _o__seh_filter_dll (Address: 0x18011b9f8)
  • _o__stricmp (Address: 0x18011ba00)
  • _o__wcsicmp (Address: 0x18011ba08)
  • _o__wcsnicmp (Address: 0x18011ba10)
  • _o__wcstoui64 (Address: 0x18011ba18)
  • _o__wtoi (Address: 0x18011ba20)
  • _o_free (Address: 0x18011bad8)
  • _o_malloc (Address: 0x18011ba30)
  • _o_realloc (Address: 0x18011ba38)
  • _o_terminate (Address: 0x18011ba40)
  • _o_toupper (Address: 0x18011ba48)
  • _o_wcscpy_s (Address: 0x18011ba50)
  • _o_wcstoul (Address: 0x18011ba58)
  • memcmp (Address: 0x18011bb10)
  • memcpy (Address: 0x18011bb18)
  • memmove (Address: 0x18011ba28)
  • wcschr (Address: 0x18011bb28)
  • wcsrchr (Address: 0x18011bb20)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18011bb40)
  • _initterm_e (Address: 0x18011bb38)
api-ms-win-crt-string-l1-1-0.dll
  • memmove_s (Address: 0x18011bb68)
  • memset (Address: 0x18011bb50)
  • strcmp (Address: 0x18011bb58)
  • wcscmp (Address: 0x18011bb60)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x18011bb98)
  • GetTraceEnableLevel (Address: 0x18011bb88)
  • GetTraceLoggerHandle (Address: 0x18011bb80)
  • RegisterTraceGuidsW (Address: 0x18011bba0)
  • TraceMessage (Address: 0x18011bb78)
  • UnregisterTraceGuids (Address: 0x18011bb90)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18011bbc0)
  • EventProviderEnabled (Address: 0x18011bbd8)
  • EventRegister (Address: 0x18011bbb8)
  • EventSetInformation (Address: 0x18011bbb0)
  • EventUnregister (Address: 0x18011bbc8)
  • EventWriteTransfer (Address: 0x18011bbd0)
api-ms-win-eventing-tdh-l1-1-0.dll
  • TdhEnumerateProviderFieldInformation (Address: 0x18011bbf0)
  • TdhGetEventInformation (Address: 0x18011bbf8)
  • TdhGetEventMapInformation (Address: 0x18011bbe8)
api-ms-win-security-base-l1-1-0.dll
  • AddAccessAllowedAceEx (Address: 0x18011bcb0)
  • AddAce (Address: 0x18011bc58)
  • AdjustTokenPrivileges (Address: 0x18011bc38)
  • CopySid (Address: 0x18011bc18)
  • CreateWellKnownSid (Address: 0x18011bc08)
  • DeleteAce (Address: 0x18011bca0)
  • DuplicateTokenEx (Address: 0x18011bcc0)
  • EqualSid (Address: 0x18011bc10)
  • GetAce (Address: 0x18011bcb8)
  • GetAclInformation (Address: 0x18011bc60)
  • GetLengthSid (Address: 0x18011bc30)
  • GetSecurityDescriptorDacl (Address: 0x18011bc28)
  • GetSecurityDescriptorGroup (Address: 0x18011bc50)
  • GetSecurityDescriptorOwner (Address: 0x18011bc70)
  • GetSidSubAuthority (Address: 0x18011bc80)
  • GetSidSubAuthorityCount (Address: 0x18011bc88)
  • GetTokenInformation (Address: 0x18011bc20)
  • ImpersonateLoggedOnUser (Address: 0x18011bc40)
  • ImpersonateSelf (Address: 0x18011bc68)
  • InitializeAcl (Address: 0x18011bca8)
  • InitializeSecurityDescriptor (Address: 0x18011bc90)
  • IsValidSid (Address: 0x18011bc98)
  • RevertToSelf (Address: 0x18011bc48)
  • SetSecurityDescriptorDacl (Address: 0x18011bc78)
api-ms-win-security-cryptoapi-l1-1-0.dll
  • CryptAcquireContextW (Address: 0x18011bce0)
  • CryptCreateHash (Address: 0x18011bcf0)
  • CryptDestroyHash (Address: 0x18011bcd0)
  • CryptGetHashParam (Address: 0x18011bce8)
  • CryptHashData (Address: 0x18011bcf8)
  • CryptReleaseContext (Address: 0x18011bcd8)
api-ms-win-security-lsalookup-l1-1-0.dll
  • LsaLookupClose (Address: 0x18011bd10)
  • LsaLookupFreeMemory (Address: 0x18011bd08)
  • LsaLookupGetDomainInfo (Address: 0x18011bd18)
  • LsaLookupOpenLocalPolicy (Address: 0x18011bd20)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupAccountSidW (Address: 0x18011bd30)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x18011bd48)
  • ConvertSidToStringSidW (Address: 0x18011bd50)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18011bd40)
  • ConvertStringSidToSidW (Address: 0x18011bd58)
api-ms-win-security-trustee-l1-1-0.dll
  • BuildTrusteeWithSidW (Address: 0x18011bd68)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x18011bd90)
  • CreateServiceW (Address: 0x18011bd98)
  • DeleteService (Address: 0x18011bd88)
  • OpenSCManagerW (Address: 0x18011bd80)
  • OpenServiceW (Address: 0x18011bd78)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfig2W (Address: 0x18011bdb8)
  • NotifyServiceStatusChangeW (Address: 0x18011bda8)
  • SetServiceObjectSecurity (Address: 0x18011bdb0)
api-ms-win-service-winsvc-l1-1-0.dll
  • ControlService (Address: 0x18011bdc8)
api-ms-win-shcore-registry-l1-1-0.dll
  • SHDeleteKeyW (Address: 0x18011bde0)
  • SHSetValueW (Address: 0x18011bdd8)
api-ms-win-shcore-stream-l1-1-0.dll
  • SHCreateMemStream (Address: 0x18011bdf0)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHCreateThreadWithHandle (Address: 0x18011be00)
AppxDeploymentServer.dll
  • AppXSetTrustLabelOnPackage (Address: 0x18011b038)
  • PackageRepositoryAllocate (Address: 0x18011b030)
  • PackageRepositoryFree (Address: 0x18011b040)
combase.dll
  • (Address: 0x18011be10)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18011be20)
ntdll.dll
  • NtAccessCheck (Address: 0x18011be70)
  • NtQueryInformationFile (Address: 0x18011be60)
  • NtQueryInformationProcess (Address: 0x18011bf50)
  • NtQueryInformationThread (Address: 0x18011be80)
  • NtQuerySystemInformation (Address: 0x18011bf48)
  • NtSetInformationThread (Address: 0x18011be78)
  • NtSetInformationVirtualMemory (Address: 0x18011be98)
  • RtlAcquireSRWLockExclusive (Address: 0x18011bf20)
  • RtlAcquireSRWLockShared (Address: 0x18011bf10)
  • RtlAddAce (Address: 0x18011be68)
  • RtlAllocateAndInitializeSid (Address: 0x18011bf60)
  • RtlAllocateHeap (Address: 0x18011be58)
  • RtlCompareUnicodeString (Address: 0x18011bf00)
  • RtlConvertSidToUnicodeString (Address: 0x18011bee0)
  • RtlDeleteCriticalSection (Address: 0x18011be40)
  • RtlDetermineDosPathNameType_U (Address: 0x18011bef0)
  • RtlDowncaseUnicodeString (Address: 0x18011bef8)
  • RtlEnterCriticalSection (Address: 0x18011bf58)
  • RtlEqualUnicodeString (Address: 0x18011beb0)
  • RtlExpandEnvironmentStrings_U (Address: 0x18011bea0)
  • RtlFreeHeap (Address: 0x18011be90)
  • RtlFreeSid (Address: 0x18011bed8)
  • RtlFreeUnicodeString (Address: 0x18011bee8)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x18011be88)
  • RtlInitializeCriticalSection (Address: 0x18011be38)
  • RtlInitializeGenericTableAvl (Address: 0x18011bf30)
  • RtlInitUnicodeString (Address: 0x18011bea8)
  • RtlInsertElementGenericTableAvl (Address: 0x18011bf28)
  • RtlIsMultiSessionSku (Address: 0x18011bec0)
  • RtlLeaveCriticalSection (Address: 0x18011be50)
  • RtlLengthSid (Address: 0x18011bec8)
  • RtlLookupElementGenericTableAvl (Address: 0x18011bf38)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x18011be48)
  • RtlPublishWnfStateData (Address: 0x18011be30)
  • RtlReleaseSRWLockExclusive (Address: 0x18011bf18)
  • RtlReleaseSRWLockShared (Address: 0x18011bf08)
  • RtlReportException (Address: 0x18011bf40)
  • RtlUpcaseUnicodeChar (Address: 0x18011beb8)
  • RtlValidSid (Address: 0x18011bed0)
OLEAUT32.dll
  • SysAllocString (Address: 0x18011b060)
  • SysAllocStringLen (Address: 0x18011b068)
  • SysFreeString (Address: 0x18011b058)
  • VariantClear (Address: 0x18011b050)
profapi.dll
  • (Address: 0x18011bf70)
PROPSYS.dll
  • PropVariantToStringVectorAlloc (Address: 0x18011b078)
  • PSCreateMemoryPropertyStore (Address: 0x18011b080)
RPCRT4.dll
  • RpcStringFreeW (Address: 0x18011b090)
  • UuidCreate (Address: 0x18011b098)
  • UuidToStringW (Address: 0x18011b0a0)
StateRepository.Core.dll
  • sqlite3_bind_blob (Address: 0x18011b278)
  • sqlite3_bind_int (Address: 0x18011b290)
  • sqlite3_bind_int64 (Address: 0x18011b288)
  • sqlite3_bind_null (Address: 0x18011b298)
  • sqlite3_bind_text16 (Address: 0x18011b280)
  • sqlite3_busy_timeout (Address: 0x18011b178)
  • sqlite3_changes (Address: 0x18011b1a0)
  • sqlite3_clear_bindings (Address: 0x18011b2a0)
  • sqlite3_close (Address: 0x18011b1e0)
  • sqlite3_column_blob (Address: 0x18011b240)
  • sqlite3_column_bytes (Address: 0x18011b250)
  • sqlite3_column_int (Address: 0x18011b270)
  • sqlite3_column_int64 (Address: 0x18011b260)
  • sqlite3_column_text (Address: 0x18011b258)
  • sqlite3_column_text16 (Address: 0x18011b248)
  • sqlite3_column_type (Address: 0x18011b238)
  • sqlite3_config (Address: 0x18011b0d8)
  • sqlite3_create_function_v2 (Address: 0x18011b168)
  • sqlite3_db_config (Address: 0x18011b1b8)
  • sqlite3_db_filename (Address: 0x18011b188)
  • sqlite3_db_handle (Address: 0x18011b220)
  • sqlite3_db_status (Address: 0x18011b170)
  • sqlite3_errcode (Address: 0x18011b268)
  • sqlite3_errmsg (Address: 0x18011b208)
  • sqlite3_exec (Address: 0x18011b0e0)
  • sqlite3_expanded_sql (Address: 0x18011b0b8)
  • sqlite3_extended_errcode (Address: 0x18011b1d0)
  • sqlite3_extended_result_codes (Address: 0x18011b1c0)
  • sqlite3_file_control (Address: 0x18011b1c8)
  • sqlite3_finalize (Address: 0x18011b210)
  • sqlite3_free (Address: 0x18011b0f8)
  • sqlite3_get_autocommit (Address: 0x18011b1e8)
  • sqlite3_last_insert_rowid (Address: 0x18011b190)
  • sqlite3_log (Address: 0x18011b218)
  • sqlite3_malloc (Address: 0x18011b108)
  • sqlite3_next_stmt (Address: 0x18011b1f0)
  • sqlite3_open_v2 (Address: 0x18011b1d8)
  • sqlite3_prepare_v2 (Address: 0x18011b180)
  • sqlite3_profile (Address: 0x18011b0c8)
  • sqlite3_reset (Address: 0x18011b200)
  • sqlite3_result_blob (Address: 0x18011b100)
  • sqlite3_result_error_code (Address: 0x18011b148)
  • sqlite3_result_error_nomem (Address: 0x18011b158)
  • sqlite3_result_error16 (Address: 0x18011b150)
  • sqlite3_result_int (Address: 0x18011b138)
  • sqlite3_result_int64 (Address: 0x18011b140)
  • sqlite3_result_text16 (Address: 0x18011b0e8)
  • sqlite3_snprintf (Address: 0x18011b0c0)
  • sqlite3_sql (Address: 0x18011b228)
  • sqlite3_status (Address: 0x18011b0b0)
  • sqlite3_step (Address: 0x18011b1f8)
  • sqlite3_stmt_busy (Address: 0x18011b230)
  • sqlite3_total_changes (Address: 0x18011b198)
  • sqlite3_trace (Address: 0x18011b0d0)
  • sqlite3_user_data (Address: 0x18011b160)
  • sqlite3_value_blob (Address: 0x18011b118)
  • sqlite3_value_bytes (Address: 0x18011b110)
  • sqlite3_value_int (Address: 0x18011b120)
  • sqlite3_value_int64 (Address: 0x18011b0f0)
  • sqlite3_value_text16 (Address: 0x18011b128)
  • sqlite3_value_type (Address: 0x18011b130)
  • sqlite3_wal_autocheckpoint (Address: 0x18011b1b0)
  • sqlite3_wal_checkpoint_v2 (Address: 0x18011b1a8)