CscMig.dll

Description: Microsoft Offline Files Migration Plugin

Version: 10.0.19041.5553

Architecture: 64-bit

Operating System: Windows NT

SHA256: a9e16f50b682692cb81f66e14e58490c

File Size: 143.4 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 14

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1650)
DllGetClassObject (Ordinal: 2, Address: 0x1340)
DllMain (Ordinal: 3, Address: 0x1690)
DllRegisterServer (Ordinal: 4, Address: 0x1480)
DllUnregisterServer (Ordinal: 5, Address: 0x15b0)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x180017918)
CloseEncryptedFileRaw (Address: 0x180017900)
ConvertSidToStringSidW (Address: 0x180017938)
ConvertStringSidToSidW (Address: 0x180017940)
LookupPrivilegeValueW (Address: 0x180017920)
OpenEncryptedFileRawW (Address: 0x180017910)
OpenProcessToken (Address: 0x180017928)
ReadEncryptedFileRaw (Address: 0x180017908)
RegCloseKey (Address: 0x180017970)
RegCreateKeyExW (Address: 0x180017958)
RegDeleteValueW (Address: 0x180017948)
RegEnumKeyExW (Address: 0x180017968)
RegOpenKeyExW (Address: 0x180017960)
RegQueryInfoKeyW (Address: 0x180017950)
RegQueryValueExW (Address: 0x180017930)
RegSetValueExW (Address: 0x1800178e8)
TraceMessage (Address: 0x1800178f0)
WriteEncryptedFileRaw (Address: 0x1800178f8)

KERNEL32.dll

BackupRead (Address: 0x180017a18)
BackupWrite (Address: 0x180017a10)
CloseHandle (Address: 0x180017a40)
DeleteCriticalSection (Address: 0x180017a48)
DisableThreadLibraryCalls (Address: 0x180017ad0)
EnterCriticalSection (Address: 0x180017aa8)
ExpandEnvironmentStringsW (Address: 0x180017a38)
FindClose (Address: 0x180017a20)
FindFirstFileW (Address: 0x180017a30)
FindNextFileW (Address: 0x180017a28)
FindResourceExW (Address: 0x180017a90)
FindResourceW (Address: 0x180017af0)
FreeLibrary (Address: 0x180017ab8)
GetCurrentProcess (Address: 0x180017af8)
GetCurrentProcessId (Address: 0x1800179a0)
GetCurrentThreadId (Address: 0x180017998)
GetLastError (Address: 0x180017a58)
GetModuleFileNameW (Address: 0x180017a60)
GetModuleHandleW (Address: 0x180017a50)
GetProcAddress (Address: 0x180017a98)
GetProcessHeap (Address: 0x1800179d0)
GetSystemTimeAsFileTime (Address: 0x180017990)
GetThreadLocale (Address: 0x180017ad8)
GetTickCount (Address: 0x180017988)
HeapAlloc (Address: 0x1800179e8)
HeapDestroy (Address: 0x1800179e0)
HeapFree (Address: 0x1800179f0)
HeapReAlloc (Address: 0x1800179f8)
HeapSize (Address: 0x180017a00)
InitializeCriticalSection (Address: 0x180017ae8)
LeaveCriticalSection (Address: 0x180017ab0)
LoadLibraryExW (Address: 0x180017aa0)
LoadLibraryW (Address: 0x180017a08)
LoadResource (Address: 0x180017a88)
LocalAlloc (Address: 0x1800179d8)
LocalFree (Address: 0x180017ac8)
LockResource (Address: 0x180017a80)
lstrcmpiW (Address: 0x180017a70)
MultiByteToWideChar (Address: 0x180017ac0)
OutputDebugStringA (Address: 0x180017980)
QueryPerformanceCounter (Address: 0x1800179a8)
RaiseException (Address: 0x180017a68)
SetThreadLocale (Address: 0x180017ae0)
SetUnhandledExceptionFilter (Address: 0x1800179b8)
SizeofResource (Address: 0x180017a78)
Sleep (Address: 0x1800179c8)
TerminateProcess (Address: 0x1800179b0)
UnhandledExceptionFilter (Address: 0x1800179c0)

msvcrt.dll

__C_specific_handler (Address: 0x180017c78)
__CxxFrameHandler3 (Address: 0x180017c80)
__dllonexit (Address: 0x180017bd8)
_amsg_exit (Address: 0x180017b90)
_callnewh (Address: 0x180017ba8)
_CxxThrowException (Address: 0x180017ba0)
_errno (Address: 0x180017bb0)
_initterm (Address: 0x180017b88)
_lock (Address: 0x180017bc8)
_onexit (Address: 0x180017be0)
_purecall (Address: 0x180017c38)
_unlock (Address: 0x180017bd0)
_vsnwprintf (Address: 0x180017c08)
_XcptFilter (Address: 0x180017b98)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180017c30)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180017c90)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180017c20)
??0exception@@QEAA@XZ (Address: 0x180017c18)
??1exception@@UEAA@XZ (Address: 0x180017c28)
??1type_info@@UEAA@XZ (Address: 0x180017bc0)
?terminate@@YAXXZ (Address: 0x180017bf8)
?what@exception@@UEBAPEBDXZ (Address: 0x180017c10)
free (Address: 0x180017c70)
iswprint (Address: 0x180017c00)
malloc (Address: 0x180017c58)
memcmp (Address: 0x180017c88)
memcpy (Address: 0x180017bf0)
memcpy_s (Address: 0x180017c50)
memmove_s (Address: 0x180017c48)
memset (Address: 0x180017be8)
realloc (Address: 0x180017bb8)
wcscat_s (Address: 0x180017c40)
wcscmp (Address: 0x180017c98)
wcscpy_s (Address: 0x180017c68)
wcsncpy_s (Address: 0x180017c60)

ntdll.dll

NtClose (Address: 0x180017cb8)
NtCreateEvent (Address: 0x180017d50)
NtCreateFile (Address: 0x180017cc0)
NtFsControlFile (Address: 0x180017d48)
NtQueryDirectoryFile (Address: 0x180017d00)
NtQueryInformationFile (Address: 0x180017cd0)
NtReadFile (Address: 0x180017d38)
NtSetInformationFile (Address: 0x180017cc8)
NtWaitForSingleObject (Address: 0x180017d58)
NtWriteFile (Address: 0x180017d28)
RtlAppendUnicodeStringToString (Address: 0x180017ca8)
RtlCaptureContext (Address: 0x180017ce8)
RtlCompareUnicodeString (Address: 0x180017cf8)
RtlEqualString (Address: 0x180017d40)
RtlEqualUnicodeString (Address: 0x180017cf0)
RtlInitUnicodeString (Address: 0x180017cb0)
RtlLengthSid (Address: 0x180017d10)
RtlLookupFunctionEntry (Address: 0x180017ce0)
RtlNtStatusToDosError (Address: 0x180017d20)
RtlPrefixUnicodeString (Address: 0x180017d18)
RtlVirtualUnwind (Address: 0x180017cd8)
ZwQueryEaFile (Address: 0x180017d08)
ZwSetEaFile (Address: 0x180017d30)

ole32.dll

CoCreateInstance (Address: 0x180017d80)
CoTaskMemAlloc (Address: 0x180017d78)
CoTaskMemFree (Address: 0x180017d90)
CoTaskMemRealloc (Address: 0x180017d70)
StringFromCLSID (Address: 0x180017d68)
StringFromGUID2 (Address: 0x180017d88)

OLEAUT32.dll

GetErrorInfo (Address: 0x180017b28)
LoadRegTypeLib (Address: 0x180017b08)
LoadTypeLib (Address: 0x180017b10)
RegisterTypeLib (Address: 0x180017b20)
SysAllocString (Address: 0x180017b38)
SysFreeString (Address: 0x180017b48)
SysStringLen (Address: 0x180017b40)
UnRegisterTypeLib (Address: 0x180017b18)
VarUI4FromStr (Address: 0x180017b30)

SHELL32.dll

SHGetFileInfoW (Address: 0x180017b58)

USER32.dll

CharNextW (Address: 0x180017b70)
LoadStringW (Address: 0x180017b68)
UnregisterClassA (Address: 0x180017b78)