AppLockerCSP.dll

api-ms-win-appmodel-runtime-l1-1-0.dll

PackageFamilyNameFromId (Address: 0x1003e03c)
PackageNameAndPublisherIdFromFamilyName (Address: 0x1003e038)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x1003e044)
CoTaskMemFree (Address: 0x1003e048)
CoTaskMemRealloc (Address: 0x1003e04c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1003e05c)
IsDebuggerPresent (Address: 0x1003e058)
OutputDebugStringW (Address: 0x1003e054)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1003e070)
SetLastError (Address: 0x1003e064)
SetUnhandledExceptionFilter (Address: 0x1003e068)
UnhandledExceptionFilter (Address: 0x1003e06c)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1003e098)
CreateFileW (Address: 0x1003e088)
DeleteFileW (Address: 0x1003e084)
FindClose (Address: 0x1003e09c)
FindFirstFileExW (Address: 0x1003e080)
FindNextFileW (Address: 0x1003e07c)
FlushFileBuffers (Address: 0x1003e094)
GetFileAttributesW (Address: 0x1003e0a0)
GetFileSizeEx (Address: 0x1003e078)
ReadFile (Address: 0x1003e08c)
RemoveDirectoryW (Address: 0x1003e0a4)
WriteFile (Address: 0x1003e090)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x1003e0ac)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1003e0b4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1003e0bc)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1003e0c8)
HeapAlloc (Address: 0x1003e0c4)
HeapFree (Address: 0x1003e0cc)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1003e0d4)
LocalFree (Address: 0x1003e0d8)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x1003e0e0)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1003e0fc)
FreeLibraryAndExitThread (Address: 0x1003e0f4)
GetModuleFileNameA (Address: 0x1003e0ec)
GetModuleHandleExW (Address: 0x1003e0e8)
GetModuleHandleW (Address: 0x1003e0f0)
GetProcAddress (Address: 0x1003e0f8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1003e104)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1003e10c)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1003e120)
GetCurrentProcess (Address: 0x1003e11c)
GetCurrentProcessId (Address: 0x1003e114)
GetCurrentThreadId (Address: 0x1003e128)
ResumeThread (Address: 0x1003e118)
TerminateProcess (Address: 0x1003e124)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1003e130)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1003e140)
RegCreateKeyExW (Address: 0x1003e144)
RegDeleteValueW (Address: 0x1003e14c)
RegGetValueW (Address: 0x1003e13c)
RegOpenKeyExW (Address: 0x1003e138)
RegSetValueExW (Address: 0x1003e148)

api-ms-win-core-shutdown-l1-1-0.dll

InitiateSystemShutdownExW (Address: 0x1003e154)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1003e17c)
AcquireSRWLockShared (Address: 0x1003e174)
CreateMutexExW (Address: 0x1003e168)
CreateSemaphoreExW (Address: 0x1003e160)
DeleteCriticalSection (Address: 0x1003e164)
EnterCriticalSection (Address: 0x1003e170)
InitializeCriticalSectionEx (Address: 0x1003e190)
LeaveCriticalSection (Address: 0x1003e188)
OpenSemaphoreW (Address: 0x1003e15c)
ReleaseMutex (Address: 0x1003e18c)
ReleaseSemaphore (Address: 0x1003e184)
ReleaseSRWLockExclusive (Address: 0x1003e178)
ReleaseSRWLockShared (Address: 0x1003e16c)
WaitForSingleObject (Address: 0x1003e180)
WaitForSingleObjectEx (Address: 0x1003e194)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1003e1a0)
SleepConditionVariableSRW (Address: 0x1003e19c)
WakeAllConditionVariable (Address: 0x1003e1a4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1003e1b0)
GetSystemWindowsDirectoryW (Address: 0x1003e1ac)
GetTickCount (Address: 0x1003e1b8)
GetWindowsDirectoryW (Address: 0x1003e1b4)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimePreciseAsFileTime (Address: 0x1003e1c0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1003e1cc)
CreateThreadpoolTimer (Address: 0x1003e1c8)
SetThreadpoolTimer (Address: 0x1003e1d4)
WaitForThreadpoolTimerCallbacks (Address: 0x1003e1d0)

api-ms-win-core-url-l1-1-0.dll

UrlEscapeW (Address: 0x1003e1dc)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x1003e1e4)
Wow64DisableWow64FsRedirection (Address: 0x1003e1e8)
Wow64RevertWow64FsRedirection (Address: 0x1003e1ec)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1003e208)
EventProviderEnabled (Address: 0x1003e1f4)
EventRegister (Address: 0x1003e1fc)
EventSetInformation (Address: 0x1003e1f8)
EventUnregister (Address: 0x1003e200)
EventWriteTransfer (Address: 0x1003e204)

api-ms-win-security-base-l1-1-0.dll

GetAce (Address: 0x1003e210)
GetSecurityDescriptorDacl (Address: 0x1003e214)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1003e21c)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1003e224)
OpenSCManagerW (Address: 0x1003e228)
OpenServiceW (Address: 0x1003e230)
StartServiceW (Address: 0x1003e22c)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfigW (Address: 0x1003e23c)
QueryServiceConfigW (Address: 0x1003e238)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x1003e244)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1003e258)
BCryptCreateHash (Address: 0x1003e264)
BCryptDestroyHash (Address: 0x1003e254)
BCryptFinishHash (Address: 0x1003e250)
BCryptGenRandom (Address: 0x1003e260)
BCryptHashData (Address: 0x1003e25c)
BCryptOpenAlgorithmProvider (Address: 0x1003e24c)

msvcp110_win.dll

_Wcscoll (Address: 0x1003e278)
_Wcsxfrm (Address: 0x1003e280)
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x1003e2c8)
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1003e2ac)
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x1003e274)
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x1003e288)
?_Incref@facet@locale@std@@UAEXXZ (Address: 0x1003e2b0)
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x1003e2c4)
?_Syserror_map@std@@YAPBDH@Z (Address: 0x1003e2d4)
?_Winerror_map@std@@YAPBDH@Z (Address: 0x1003e2dc)
?_Xbad_alloc@std@@YAXXZ (Address: 0x1003e2a4)
?_Xbad_function_call@std@@YAXXZ (Address: 0x1003e270)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1003e2d8)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1003e2e0)
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1003e2c0)
??_7_Facet_base@std@@6B@ (Address: 0x1003e2cc)
??_7facet@locale@std@@6B@ (Address: 0x1003e290)
??0_Locinfo@std@@QAE@PBD@Z (Address: 0x1003e29c)
??0_Lockit@std@@QAE@H@Z (Address: 0x1003e298)
??0facet@locale@std@@IAE@I@Z (Address: 0x1003e28c)
??1_Facet_base@std@@UAE@XZ (Address: 0x1003e2d0)
??1_Locinfo@std@@QAE@XZ (Address: 0x1003e2a8)
??1_Lockit@std@@QAE@XZ (Address: 0x1003e2a0)
??1facet@locale@std@@MAE@XZ (Address: 0x1003e294)
??Bid@locale@std@@QAEIXZ (Address: 0x1003e284)
?id@?$collate@G@std@@2V0locale@2@A (Address: 0x1003e27c)
?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1003e2b4)
?is@?$ctype@G@std@@QBE_NFG@Z (Address: 0x1003e2bc)
?tolower@?$ctype@G@std@@QBEGG@Z (Address: 0x1003e2b8)
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z (Address: 0x1003e26c)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1003e394)
__dllonexit (Address: 0x1003e378)
_amsg_exit (Address: 0x1003e368)
_callnewh (Address: 0x1003e360)
_CxxThrowException (Address: 0x1003e3a0)
_errno (Address: 0x1003e2fc)
_except_handler4_common (Address: 0x1003e388)
_initterm (Address: 0x1003e36c)
_lock (Address: 0x1003e370)
_onexit (Address: 0x1003e37c)
_purecall (Address: 0x1003e3b0)
_ui64tow_s (Address: 0x1003e34c)
_unlock (Address: 0x1003e374)
_vsnprintf_s (Address: 0x1003e318)
_vsnwprintf (Address: 0x1003e390)
_vsnwprintf_s (Address: 0x1003e304)
_wcsdup (Address: 0x1003e354)
_wcsicmp (Address: 0x1003e30c)
_wcstoi64 (Address: 0x1003e2f8)
_wcstoui64 (Address: 0x1003e358)
_wtoi (Address: 0x1003e2f4)
_XcptFilter (Address: 0x1003e364)
??_V@YAXPAX@Z (Address: 0x1003e32c)
??0bad_cast@@QAE@ABV0@@Z (Address: 0x1003e33c)
??0bad_cast@@QAE@PBD@Z (Address: 0x1003e344)
??0exception@@QAE@ABQBDH@Z (Address: 0x1003e324)
??0exception@@QAE@ABV0@@Z (Address: 0x1003e2f0)
??0exception@@QAE@XZ (Address: 0x1003e2ec)
??1bad_cast@@UAE@XZ (Address: 0x1003e340)
??1exception@@UAE@XZ (Address: 0x1003e2e8)
??1type_info@@UAE@XZ (Address: 0x1003e380)
??3@YAXPAX@Z (Address: 0x1003e398)
?terminate@@YAXXZ (Address: 0x1003e384)
?what@exception@@UBEPBDXZ (Address: 0x1003e31c)
free (Address: 0x1003e338)
malloc (Address: 0x1003e35c)
memcmp (Address: 0x1003e3a4)
memcpy (Address: 0x1003e3a8)
memcpy_s (Address: 0x1003e38c)
memmove (Address: 0x1003e3ac)
memmove_s (Address: 0x1003e310)
memset (Address: 0x1003e39c)
realloc (Address: 0x1003e334)
strchr (Address: 0x1003e330)
toupper (Address: 0x1003e314)
towupper (Address: 0x1003e300)
wcschr (Address: 0x1003e350)
wcscpy_s (Address: 0x1003e328)
wcsnlen (Address: 0x1003e320)
wcsstr (Address: 0x1003e348)
wcstol (Address: 0x1003e308)

ntdll.dll

EtwTraceMessage (Address: 0x1003e3e0)
NtClose (Address: 0x1003e3bc)
NtDelayExecution (Address: 0x1003e3d4)
NtOpenFile (Address: 0x1003e3d8)
NtOpenKey (Address: 0x1003e3d0)
NtQueryDirectoryFile (Address: 0x1003e400)
NtQueryInformationFile (Address: 0x1003e3dc)
NtQueryWnfStateData (Address: 0x1003e3e8)
NtReadFile (Address: 0x1003e3c8)
NtSetSystemInformation (Address: 0x1003e3f4)
NtSetValueKey (Address: 0x1003e3fc)
NtWaitForSingleObject (Address: 0x1003e3cc)
RtlAdjustPrivilege (Address: 0x1003e3e4)
RtlAllocateHeap (Address: 0x1003e3c0)
RtlCreateUnicodeString (Address: 0x1003e3b8)
RtlFreeHeap (Address: 0x1003e3c4)
RtlFreeUnicodeString (Address: 0x1003e404)
RtlNtStatusToDosError (Address: 0x1003e3ec)
RtlPublishWnfStateData (Address: 0x1003e3f8)
ZwQueryWnfStateData (Address: 0x1003e3f0)

OLEAUT32.dll

SafeArrayCreate (Address: 0x1003e00c)
SafeArrayDestroy (Address: 0x1003e018)
SysAllocString (Address: 0x1003e008)
SysAllocStringLen (Address: 0x1003e01c)
SysFreeString (Address: 0x1003e014)
SysStringByteLen (Address: 0x1003e010)
VariantClear (Address: 0x1003e000)
VariantInit (Address: 0x1003e004)

policymanager.dll

EnterprisePolicyManagerStore_EDPCSPConfigSourceAreaPolicyGetValue (Address: 0x1003e40c)

RPCRT4.dll

RpcStringFreeW (Address: 0x1003e024)
UuidCompare (Address: 0x1003e02c)
UuidFromStringW (Address: 0x1003e028)
UuidToStringW (Address: 0x1003e030)

srpapi.dll

AppIDEncodeAttributeString (Address: 0x1003e414)
AppIDFreeAttributeString (Address: 0x1003e418)

Exported Functions

Imported DLLs & Functions