AppXDeploymentClient.dll

Description: AppX Deployment Client DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: c151e502d9ac16c889ada5bc20b6587f

File Size: 778.8 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • (Ordinal: 1, Address: 0x79bc0)
  • GetApplicability (Ordinal: 2, Address: 0x820b0)
  • AppxCreateSharedLocalFolder (Ordinal: 3, Address: 0x7fd90)
  • AppxPackageRepositoryRecoverStagedPackages (Ordinal: 4, Address: 0x80c80)
  • AppxPackageRepositoryRecoverUserInstalls (Ordinal: 5, Address: 0x80c90)
  • AppxRecoverUserInstallsForUpgrade (Ordinal: 6, Address: 0x80c80)
  • AppxDeletePackageFiles (Ordinal: 7, Address: 0x7fe30)
  • AppxRequestRemovePackageForUser (Ordinal: 8, Address: 0x81570)
  • IsPackageInstalled (Ordinal: 9, Address: 0x82a10)
  • RDSRecoverRequests (Ordinal: 10, Address: 0x82ca0)
  • AppxPreStageCleanupRunTask (Ordinal: 11, Address: 0x80d70)
  • AppxPreRegisterPackage (Ordinal: 12, Address: 0x80ca0)
  • ReArmAppxPreStageCleanupTask (Ordinal: 13, Address: 0x82d10)
  • AppxAddPackageToAllUserStoreForPbr (Ordinal: 14, Address: 0x7f5f0)
  • GetPackageApplicabilityForUserLogon (Ordinal: 15, Address: 0x829b0)
  • (Ordinal: 16, Address: 0x81fe0)
  • AppxStagePackage (Ordinal: 17, Address: 0x4bb40)
  • AppxGetPackageInstalledLocation (Ordinal: 18, Address: 0x80340)
  • AppxDestagePackage (Ordinal: 19, Address: 0x7fec0)
  • GetApplicability2 (Ordinal: 20, Address: 0x80c90)
  • AppxGetStagedPackageFullNameFromFamilyName (Ordinal: 21, Address: 0x80580)
  • AppxIsStagedPackageStoreSigned (Ordinal: 22, Address: 0x80b50)
  • RegisterNotification (Ordinal: 23, Address: 0x82d20)
  • UnregisterNotification (Ordinal: 24, Address: 0x82e60)
  • GetNotificationPayload (Ordinal: 25, Address: 0x82890)
  • NotifyPackageStatusChanged (Ordinal: 26, Address: 0x82bd0)
  • VerifyPackage (Ordinal: 27, Address: 0x831d0)
  • AppxPreRegisterAllInboxPackages (Ordinal: 28, Address: 0x4b7b0)
  • AppxValidatePackagesWithOptions (Ordinal: 29, Address: 0x816c0)
  • AppxRemovePackageForAllUsers (Ordinal: 30, Address: 0x80eb0)
  • RequestContentGroups (Ordinal: 31, Address: 0x82da0)
  • GetApplicability4 (Ordinal: 32, Address: 0x82070)
  • RequestContentGroupsForFullTrust (Ordinal: 33, Address: 0x82e00)
  • GeneratePreInstalledPriFiles (Ordinal: 34, Address: 0x82020)
  • PopulateProtocolAndFTA (Ordinal: 35, Address: 0x82c40)
  • FixJunctionsForAppsIfNecessary (Ordinal: 36, Address: 0x81fa0)
  • AppxRemovePackageForUserSid (Ordinal: 37, Address: 0x81010)
  • CreateCanonicalPriFile (Ordinal: 38, Address: 0x81d00)
  • RegisterNotificationForUser (Ordinal: 39, Address: 0x327d0)
  • UnregisterNotificationForUser (Ordinal: 40, Address: 0x32bb0)
  • GetNotificationPayloadForUser (Ordinal: 41, Address: 0x828c0)
  • AppxCleanupWCIReparsePoints (Ordinal: 42, Address: 0x7fcf0)
  • RepairPackageFileAcls (Ordinal: 43, Address: 0x82d40)
  • EnsurePackageFamilyIsRegisteredBeforeActivation (Ordinal: 44, Address: 0x81e20)
  • AppxCleanupSystemAppsMigratedToFOD (Ordinal: 45, Address: 0x7fab0)
  • AppxCleanupOrphanPackages (Ordinal: 46, Address: 0x7fa70)
  • CheckComCallerHasCapabilities (Ordinal: 47, Address: 0x33f00)
  • GetBundleApplicablePackages (Ordinal: 48, Address: 0x820d0)
  • GetApplicability5 (Ordinal: 49, Address: 0x82080)
  • DeleteApplicabilityInfoArray (Ordinal: 50, Address: 0x81d90)
  • UpdateAgentCreateDownload (Ordinal: 51, Address: 0x82ec0)
  • UpdateAgentGetDownloadRanges (Ordinal: 52, Address: 0x82fa0)
  • UpdateAgentCancelAllDownloads (Ordinal: 53, Address: 0x82e80)
  • UpdateDataSourceRegister (Ordinal: 54, Address: 0x83120)
  • UpdateDataSourceAddRange (Ordinal: 55, Address: 0x83040)
  • UpdateDataSourceRun (Ordinal: 56, Address: 0x83180)
  • UpdateDataSourceCancelRun (Ordinal: 57, Address: 0x830d0)
  • GetPackageRegistrationStatusForUser (Ordinal: 58, Address: 0x829d0)
  • IsSharedAppsEnabled (Ordinal: 59, Address: 0x32f70)
  • AppInstallerUpdateAllTask (Ordinal: 60, Address: 0x7f5c0)
  • CheckAppInstallerUpdateAvailability (Ordinal: 61, Address: 0x819a0)
  • UpdateAgentFreeDownloadRanges (Ordinal: 62, Address: 0x82f70)
  • AppxRegisterPackage (Ordinal: 63, Address: 0x80d80)
  • IsPackageMetadataUnderSystemMetadata (Ordinal: 64, Address: 0x82a70)
  • GetMetadataRootForPackage (Ordinal: 65, Address: 0x2c650)
  • ClientGetAllPackagesToBeInstalledForUser (Ordinal: 66, Address: 0x81c30)
  • ClientDeleteAllPackagesFromMainPackageArray (Ordinal: 67, Address: 0x81b30)
  • GetPackageRegistrationStatusForUserAndDefaultAccount (Ordinal: 68, Address: 0x30070)
  • UpdateAgentGetDownloadingPackageCount (Ordinal: 69, Address: 0x82ff0)
  • PreRegisterPackagesInContainer (Ordinal: 70, Address: 0x4c5e0)
  • EnsurePackageFamiliesAreRegisteredInContainer (Ordinal: 71, Address: 0x4c290)
  • RemovePackageFromContainer (Ordinal: 72, Address: 0x4c680)
  • HasPackageFamilyBeenRegisteredForUser (Ordinal: 73, Address: 0x4c340)
  • CleanupProfileForUser (Ordinal: 74, Address: 0x4c1e0)
  • AppxRemoveAllPackagesForUserSid (Ordinal: 75, Address: 0x4b860)
  • MsixPackageVolumeIsRepairNeeded (Ordinal: 76, Address: 0x4c560)
  • MsixPackageVolumeRepair (Ordinal: 77, Address: 0x4c5a0)
  • AppxCreateSharedLocalFolderForFamilyName (Ordinal: 78, Address: 0x7fde0)
  • AppxDoesSharedLocalFolderExistForFamilyName (Ordinal: 79, Address: 0x80200)
  • AppxValidatePackages (Ordinal: 80, Address: 0x81690)
  • CheckForUpdatesAndWaitForInstallerIfNeeded (Ordinal: 81, Address: 0x819f0)
  • DllCanUnloadNow (Ordinal: 82, Address: 0x31000)
  • DllGetActivationFactory (Ordinal: 83, Address: 0x33f30)
  • DllGetClassObject (Ordinal: 84, Address: 0x8ae10)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x100b0094)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x100b00c8)
  • CoCreateInstance (Address: 0x100b00ac)
  • CoDecrementMTAUsage (Address: 0x100b00b4)
  • CoGetApartmentType (Address: 0x100b00a0)
  • CoGetCallContext (Address: 0x100b00c4)
  • CoGetCallerTID (Address: 0x100b00d8)
  • CoImpersonateClient (Address: 0x100b00d4)
  • CoIncrementMTAUsage (Address: 0x100b00a4)
  • CoInitializeEx (Address: 0x100b00b8)
  • CoMarshalInterface (Address: 0x100b00b0)
  • CoReleaseMarshalData (Address: 0x100b009c)
  • CoRevertToSelf (Address: 0x100b00d0)
  • CoTaskMemAlloc (Address: 0x100b00c0)
  • CoTaskMemFree (Address: 0x100b00bc)
  • CoUninitialize (Address: 0x100b00cc)
  • CreateStreamOnHGlobal (Address: 0x100b00dc)
  • StringFromGUID2 (Address: 0x100b00a8)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x100b00e4)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x100b011c)
  • CStdStubBuffer2_CountRefs (Address: 0x100b0130)
  • CStdStubBuffer2_Disconnect (Address: 0x100b0158)
  • CStdStubBuffer2_QueryInterface (Address: 0x100b0110)
  • NdrProxyForwardingFunction3 (Address: 0x100b0108)
  • NdrProxyForwardingFunction4 (Address: 0x100b0100)
  • NdrProxyForwardingFunction5 (Address: 0x100b00f8)
  • ObjectStublessClient10 (Address: 0x100b00ec)
  • ObjectStublessClient11 (Address: 0x100b012c)
  • ObjectStublessClient12 (Address: 0x100b0124)
  • ObjectStublessClient13 (Address: 0x100b0160)
  • ObjectStublessClient14 (Address: 0x100b0128)
  • ObjectStublessClient15 (Address: 0x100b0150)
  • ObjectStublessClient16 (Address: 0x100b0118)
  • ObjectStublessClient17 (Address: 0x100b0114)
  • ObjectStublessClient18 (Address: 0x100b0148)
  • ObjectStublessClient19 (Address: 0x100b010c)
  • ObjectStublessClient20 (Address: 0x100b014c)
  • ObjectStublessClient21 (Address: 0x100b0104)
  • ObjectStublessClient22 (Address: 0x100b013c)
  • ObjectStublessClient23 (Address: 0x100b0154)
  • ObjectStublessClient24 (Address: 0x100b0120)
  • ObjectStublessClient25 (Address: 0x100b0134)
  • ObjectStublessClient26 (Address: 0x100b0138)
  • ObjectStublessClient27 (Address: 0x100b0144)
  • ObjectStublessClient3 (Address: 0x100b0140)
  • ObjectStublessClient6 (Address: 0x100b00f4)
  • ObjectStublessClient7 (Address: 0x100b015c)
  • ObjectStublessClient8 (Address: 0x100b00f0)
  • ObjectStublessClient9 (Address: 0x100b00fc)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100b0168)
  • IsDebuggerPresent (Address: 0x100b0170)
  • OutputDebugStringW (Address: 0x100b016c)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100b0188)
  • RaiseException (Address: 0x100b0180)
  • SetLastError (Address: 0x100b017c)
  • SetUnhandledExceptionFilter (Address: 0x100b0178)
  • UnhandledExceptionFilter (Address: 0x100b0184)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x100b01a8)
  • CreateDirectoryW (Address: 0x100b01c4)
  • CreateFileW (Address: 0x100b01cc)
  • DeleteFileW (Address: 0x100b0190)
  • FindClose (Address: 0x100b01b8)
  • FindFirstFileW (Address: 0x100b01b4)
  • FindNextFileW (Address: 0x100b01ac)
  • GetDiskFreeSpaceExW (Address: 0x100b01bc)
  • GetDiskFreeSpaceW (Address: 0x100b01c0)
  • GetDriveTypeW (Address: 0x100b01c8)
  • GetFileAttributesW (Address: 0x100b01a0)
  • GetFileSizeEx (Address: 0x100b0198)
  • GetFullPathNameW (Address: 0x100b01b0)
  • GetVolumeInformationW (Address: 0x100b01d0)
  • GetVolumePathNameW (Address: 0x100b01a4)
  • SetFileAttributesW (Address: 0x100b019c)
  • WriteFile (Address: 0x100b0194)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x100b01d8)
  • GetVolumeNameForVolumeMountPointW (Address: 0x100b01e0)
  • GetVolumePathNamesForVolumeNameW (Address: 0x100b01dc)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x100b01e8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100b01f0)
  • DuplicateHandle (Address: 0x100b01f4)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100b0200)
  • HeapAlloc (Address: 0x100b0204)
  • HeapFree (Address: 0x100b01fc)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x100b020c)
  • LocalFree (Address: 0x100b0210)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x100b0218)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x100b023c)
  • GetModuleFileNameA (Address: 0x100b0224)
  • GetModuleFileNameW (Address: 0x100b0230)
  • GetModuleHandleExW (Address: 0x100b0240)
  • GetModuleHandleW (Address: 0x100b0238)
  • GetProcAddress (Address: 0x100b022c)
  • LoadLibraryExA (Address: 0x100b0228)
  • LoadLibraryExW (Address: 0x100b0234)
  • LoadStringW (Address: 0x100b0220)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100b0248)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x100b025c)
  • MapViewOfFile (Address: 0x100b0260)
  • UnmapViewOfFile (Address: 0x100b0250)
  • VirtualProtect (Address: 0x100b0258)
  • VirtualQuery (Address: 0x100b0254)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCanonicalize (Address: 0x100b0274)
  • PathCchCombine (Address: 0x100b0268)
  • PathCchRemoveBackslash (Address: 0x100b026c)
  • PathCchSkipRoot (Address: 0x100b0270)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100b0294)
  • GetCurrentProcessId (Address: 0x100b0298)
  • GetCurrentThread (Address: 0x100b02ac)
  • GetCurrentThreadId (Address: 0x100b0290)
  • GetProcessId (Address: 0x100b029c)
  • OpenProcessToken (Address: 0x100b02a8)
  • OpenThreadToken (Address: 0x100b02a4)
  • ProcessIdToSessionId (Address: 0x100b0280)
  • SetThreadToken (Address: 0x100b02a0)
  • TerminateProcess (Address: 0x100b028c)
  • TlsAlloc (Address: 0x100b027c)
  • TlsGetValue (Address: 0x100b0288)
  • TlsSetValue (Address: 0x100b0284)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x100b02b4)
  • OpenProcess (Address: 0x100b02b8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100b02c0)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x100b02c8)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryUnbiasedInterruptTime (Address: 0x100b02d0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureStackBackTrace (Address: 0x100b02d8)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringEx (Address: 0x100b02e8)
  • CompareStringOrdinal (Address: 0x100b02e4)
  • MultiByteToWideChar (Address: 0x100b02e0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100b031c)
  • AcquireSRWLockShared (Address: 0x100b0300)
  • CreateEventExW (Address: 0x100b0314)
  • CreateEventW (Address: 0x100b0320)
  • CreateMutexExW (Address: 0x100b0334)
  • CreateSemaphoreExW (Address: 0x100b030c)
  • DeleteCriticalSection (Address: 0x100b0338)
  • EnterCriticalSection (Address: 0x100b02fc)
  • InitializeCriticalSectionEx (Address: 0x100b0310)
  • InitializeSRWLock (Address: 0x100b02f0)
  • LeaveCriticalSection (Address: 0x100b0328)
  • OpenSemaphoreW (Address: 0x100b032c)
  • ReleaseMutex (Address: 0x100b02f4)
  • ReleaseSemaphore (Address: 0x100b0340)
  • ReleaseSRWLockExclusive (Address: 0x100b02f8)
  • ReleaseSRWLockShared (Address: 0x100b0318)
  • ResetEvent (Address: 0x100b0308)
  • SetEvent (Address: 0x100b0324)
  • SleepEx (Address: 0x100b033c)
  • WaitForSingleObject (Address: 0x100b0304)
  • WaitForSingleObjectEx (Address: 0x100b0330)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100b0348)
  • InitOnceComplete (Address: 0x100b0354)
  • InitOnceExecuteOnce (Address: 0x100b0350)
  • Sleep (Address: 0x100b034c)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x100b0360)
  • GetSystemInfo (Address: 0x100b0370)
  • GetSystemTimeAsFileTime (Address: 0x100b0364)
  • GetTickCount (Address: 0x100b035c)
  • GetVersionExW (Address: 0x100b0368)
  • GetWindowsDirectoryW (Address: 0x100b036c)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100b0390)
  • CloseThreadpoolWork (Address: 0x100b0378)
  • CreateThreadpoolTimer (Address: 0x100b0388)
  • CreateThreadpoolWork (Address: 0x100b037c)
  • FreeLibraryWhenCallbackReturns (Address: 0x100b0384)
  • SetThreadpoolTimer (Address: 0x100b038c)
  • SubmitThreadpoolWork (Address: 0x100b0394)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100b0398)
  • WaitForThreadpoolWorkCallbacks (Address: 0x100b0380)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100b03a4)
  • EncodePointer (Address: 0x100b03a0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x100b03bc)
  • RoOriginateError (Address: 0x100b03b0)
  • RoOriginateErrorW (Address: 0x100b03ac)
  • RoSetErrorReportingFlags (Address: 0x100b03c0)
  • RoTransformError (Address: 0x100b03b4)
  • SetRestrictedErrorInfo (Address: 0x100b03b8)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x100b03d0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x100b03cc)
  • RoReportFailedDelegate (Address: 0x100b03c8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x100b03d8)
  • RoGetActivationFactory (Address: 0x100b03dc)
  • RoInitialize (Address: 0x100b03e0)
  • RoUninitialize (Address: 0x100b03e4)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x100b03f0)
  • _initterm_e (Address: 0x100b03ec)
api-ms-win-crt-string-l1-1-0.dll
  • memmove_s (Address: 0x100b03fc)
  • memset (Address: 0x100b03f8)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x100b040c)
  • GetTraceEnableLevel (Address: 0x100b0408)
  • GetTraceLoggerHandle (Address: 0x100b0418)
  • RegisterTraceGuidsW (Address: 0x100b0410)
  • TraceMessage (Address: 0x100b0404)
  • UnregisterTraceGuids (Address: 0x100b0414)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x100b0430)
  • EventProviderEnabled (Address: 0x100b0420)
  • EventRegister (Address: 0x100b0434)
  • EventSetInformation (Address: 0x100b042c)
  • EventUnregister (Address: 0x100b0424)
  • EventWriteTransfer (Address: 0x100b0428)
api-ms-win-security-lsalookup-l1-1-0.dll
  • LsaLookupClose (Address: 0x100b0448)
  • LsaLookupFreeMemory (Address: 0x100b0440)
  • LsaLookupGetDomainInfo (Address: 0x100b0444)
  • LsaLookupOpenLocalPolicy (Address: 0x100b043c)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x100b0450)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x100b0458)
  • ConvertStringSidToSidW (Address: 0x100b0454)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x100b046c)
  • OpenSCManagerW (Address: 0x100b0468)
  • OpenServiceW (Address: 0x100b0464)
  • StartServiceW (Address: 0x100b0460)
api-ms-win-service-management-l2-1-0.dll
  • NotifyServiceStatusChangeW (Address: 0x100b0478)
  • QueryServiceStatusEx (Address: 0x100b0474)
ntdll.dll
  • EtwEventRegister (Address: 0x100b04dc)
  • EtwEventUnregister (Address: 0x100b04d4)
  • EtwEventWrite (Address: 0x100b04d8)
  • NtClose (Address: 0x100b04cc)
  • NtCreateSection (Address: 0x100b04d0)
  • NtMapViewOfSection (Address: 0x100b04c4)
  • NtQueryInformationFile (Address: 0x100b04a0)
  • NtQueryInformationProcess (Address: 0x100b04a4)
  • NtQueryInformationThread (Address: 0x100b0508)
  • NtQuerySystemInformation (Address: 0x100b0488)
  • NtSetInformationThread (Address: 0x100b04ac)
  • NtSetInformationVirtualMemory (Address: 0x100b0534)
  • NtUnmapViewOfSection (Address: 0x100b04c0)
  • RtlAcquireSRWLockExclusive (Address: 0x100b04e8)
  • RtlAcquireSRWLockShared (Address: 0x100b0530)
  • RtlAllocateAndInitializeSid (Address: 0x100b04e4)
  • RtlAllocateHeap (Address: 0x100b04a8)
  • RtlAllocateWnfSerializationGroup (Address: 0x100b04f4)
  • RtlCompareUnicodeString (Address: 0x100b0510)
  • RtlConvertSidToUnicodeString (Address: 0x100b0498)
  • RtlDeleteCriticalSection (Address: 0x100b0480)
  • RtlDeleteElementGenericTableAvl (Address: 0x100b0518)
  • RtlDowncaseUnicodeString (Address: 0x100b051c)
  • RtlEnterCriticalSection (Address: 0x100b04bc)
  • RtlEnumerateGenericTableWithoutSplayingAvl (Address: 0x100b0520)
  • RtlFreeHeap (Address: 0x100b049c)
  • RtlFreeSid (Address: 0x100b04f0)
  • RtlFreeUnicodeString (Address: 0x100b0494)
  • RtlInitializeCriticalSection (Address: 0x100b0484)
  • RtlInitializeGenericTableAvl (Address: 0x100b0514)
  • RtlInitializeSRWLock (Address: 0x100b04b4)
  • RtlInitUnicodeString (Address: 0x100b050c)
  • RtlInsertElementGenericTableAvl (Address: 0x100b04ec)
  • RtlIsMultiUsersInSessionSku (Address: 0x100b0490)
  • RtlLeaveCriticalSection (Address: 0x100b04b8)
  • RtlLookupElementGenericTableAvl (Address: 0x100b0524)
  • RtlNtStatusToDosError (Address: 0x100b0504)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x100b04c8)
  • RtlNumberGenericTableElementsAvl (Address: 0x100b04b0)
  • RtlQueryPackageClaims (Address: 0x100b0528)
  • RtlReleaseSRWLockExclusive (Address: 0x100b04e0)
  • RtlReleaseSRWLockShared (Address: 0x100b052c)
  • RtlReportException (Address: 0x100b048c)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x100b04f8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100b04fc)
  • RtlUnsubscribeWnfStateChangeNotification (Address: 0x100b0500)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x100b0018)
  • CStdStubBuffer_Connect (Address: 0x100b0000)
  • CStdStubBuffer_CountRefs (Address: 0x100b0024)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x100b007c)
  • CStdStubBuffer_DebugServerRelease (Address: 0x100b0044)
  • CStdStubBuffer_Disconnect (Address: 0x100b005c)
  • CStdStubBuffer_Invoke (Address: 0x100b0010)
  • CStdStubBuffer_IsIIDSupported (Address: 0x100b0078)
  • CStdStubBuffer_QueryInterface (Address: 0x100b0034)
  • I_RpcExceptionFilter (Address: 0x100b0020)
  • IUnknown_AddRef_Proxy (Address: 0x100b0004)
  • IUnknown_QueryInterface_Proxy (Address: 0x100b0074)
  • IUnknown_Release_Proxy (Address: 0x100b001c)
  • NdrAsyncClientCall2 (Address: 0x100b006c)
  • NdrClientCall4 (Address: 0x100b0060)
  • NdrCStdStubBuffer_Release (Address: 0x100b0088)
  • NdrCStdStubBuffer2_Release (Address: 0x100b0080)
  • NdrDllCanUnloadNow (Address: 0x100b008c)
  • NdrDllGetClassObject (Address: 0x100b0084)
  • NdrOleAllocate (Address: 0x100b003c)
  • NdrOleFree (Address: 0x100b0014)
  • NdrStubCall2 (Address: 0x100b0008)
  • NdrStubForwardingFunction (Address: 0x100b000c)
  • RpcAsyncCancelCall (Address: 0x100b002c)
  • RpcAsyncCompleteCall (Address: 0x100b0030)
  • RpcAsyncInitializeHandle (Address: 0x100b0028)
  • RpcBindingBind (Address: 0x100b0040)
  • RpcBindingCreateW (Address: 0x100b0048)
  • RpcBindingFree (Address: 0x100b004c)
  • RpcBindingFromStringBindingW (Address: 0x100b0054)
  • RpcBindingUnbind (Address: 0x100b0058)
  • RpcServerInqCallAttributesW (Address: 0x100b0038)
  • RpcStringBindingComposeW (Address: 0x100b0050)
  • RpcStringFreeW (Address: 0x100b0064)
  • UuidCreate (Address: 0x100b0070)
  • UuidToStringW (Address: 0x100b0068)