AriTransformer.dll
Description: CSI Ari Transformer plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.3266
Architecture: 64-bit
Operating System: Windows NT
SHA256: da0ed5fc972628dcf5b0cda46f6d1106
File Size: 57.4 KB
Uploaded At: Dec. 1, 2025, 8:23 a.m.
Views: 18
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x4f00)
- DllCsiGetHandler (Ordinal: 2, Address: 0x4f20)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x180009500)
- CoTaskMemAlloc (Address: 0x1800094e8)
- CoTaskMemFree (Address: 0x1800094f0)
- CoTaskMemRealloc (Address: 0x1800094f8)
api-ms-win-core-debug-l1-1-0.dll
- OutputDebugStringA (Address: 0x180009510)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180009530)
- RaiseException (Address: 0x180009538)
- SetUnhandledExceptionFilter (Address: 0x180009528)
- UnhandledExceptionFilter (Address: 0x180009520)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x180009588)
- FindResourceExW (Address: 0x180009568)
- FreeLibrary (Address: 0x180009578)
- GetModuleFileNameW (Address: 0x180009548)
- GetModuleHandleW (Address: 0x180009560)
- GetProcAddress (Address: 0x180009550)
- LoadLibraryExW (Address: 0x180009558)
- LoadResource (Address: 0x180009570)
- SizeofResource (Address: 0x180009580)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1800095b0)
- GetCurrentProcessId (Address: 0x180009598)
- GetCurrentThreadId (Address: 0x1800095a0)
- TerminateProcess (Address: 0x1800095a8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800095c0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800095e8)
- RegCreateKeyExW (Address: 0x1800095d8)
- RegDeleteValueW (Address: 0x1800095f0)
- RegEnumKeyExW (Address: 0x1800095d0)
- RegOpenKeyExW (Address: 0x1800095e0)
- RegQueryInfoKeyW (Address: 0x1800095f8)
- RegSetValueExW (Address: 0x180009600)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180009620)
- RtlLookupFunctionEntry (Address: 0x180009610)
- RtlVirtualUnwind (Address: 0x180009618)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x180009630)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x180009640)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x180009650)
api-ms-win-core-synch-l1-1-0.dll
- DeleteCriticalSection (Address: 0x180009660)
- EnterCriticalSection (Address: 0x180009670)
- InitializeCriticalSection (Address: 0x180009678)
- LeaveCriticalSection (Address: 0x180009668)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x180009688)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1800096a0)
- GetTickCount (Address: 0x180009698)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800096b0)
msvcrt.dll
- __C_specific_handler (Address: 0x1800096d0)
- __dllonexit (Address: 0x180009738)
- _amsg_exit (Address: 0x180009700)
- _callnewh (Address: 0x180009710)
- _errno (Address: 0x1800096f0)
- _initterm (Address: 0x1800096f8)
- _lock (Address: 0x1800096e0)
- _onexit (Address: 0x1800096c8)
- _unlock (Address: 0x1800096d8)
- _XcptFilter (Address: 0x180009708)
- free (Address: 0x180009720)
- malloc (Address: 0x180009728)
- memcpy (Address: 0x1800096c0)
- memcpy_s (Address: 0x180009718)
- memset (Address: 0x180009740)
- realloc (Address: 0x1800096e8)
- wcsncpy_s (Address: 0x180009730)
OLEAUT32.dll
- VarUI4FromStr (Address: 0x180009468)
WCP.dll
- ?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x1800094d8)
- ?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180009480)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x1800094c8)
- ?SilCreateDirectories@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@@Z (Address: 0x180009498)
- ConvertNtStatusToHResult (Address: 0x1800094b8)
- RtlCombineNtPathSegments (Address: 0x180009490)
- RtlConvertWin32FilePathToNtFilePath (Address: 0x1800094d0)
- RtlFreeLBlob (Address: 0x1800094a0)
- RtlFreeLUnicodeString (Address: 0x1800094a8)
- RtlReallocateLUnicodeString (Address: 0x180009488)
- RtlReportErrorOrigination (Address: 0x1800094b0)
- RtlSplitLUnicodeString (Address: 0x1800094c0)
- RtlSplitNtPath (Address: 0x180009478)