WpnDataTransformer.dll

Description: CSI WpnDataTransformer plug-in

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6151

Architecture: 64-bit

Operating System: Windows NT

SHA256: 6196ba1fec83e2a10e187b0212ea4e91

File Size: 37.9 KB

Uploaded At: Dec. 1, 2025, 8:23 a.m.

Views: 29

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x3c30)
  • DllCsiGetHandler (Ordinal: 2, Address: 0x3d90)
  • DllGetClassObject (Ordinal: 3, Address: 0x3c90)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180006338)
api-ms-win-core-errorhandling-l1-1-0.dll
  • SetUnhandledExceptionFilter (Address: 0x180006348)
  • UnhandledExceptionFilter (Address: 0x180006350)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x180006360)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180006370)
  • GetCurrentProcessId (Address: 0x180006388)
  • GetCurrentThreadId (Address: 0x180006380)
  • TerminateProcess (Address: 0x180006378)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180006398)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800063b8)
  • RtlLookupFunctionEntry (Address: 0x1800063b0)
  • RtlVirtualUnwind (Address: 0x1800063a8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800063e0)
  • AcquireSRWLockShared (Address: 0x1800063c8)
  • ReleaseSRWLockExclusive (Address: 0x1800063d0)
  • ReleaseSRWLockShared (Address: 0x1800063d8)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x1800063f8)
  • Sleep (Address: 0x1800063f0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180006408)
  • GetTickCount (Address: 0x180006410)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180006428)
  • EncodePointer (Address: 0x180006420)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x180006438)
msvcrt.dll
  • __C_specific_handler (Address: 0x180006470)
  • __CxxFrameHandler3 (Address: 0x180006448)
  • __dllonexit (Address: 0x180006458)
  • _amsg_exit (Address: 0x180006488)
  • _callnewh (Address: 0x180006468)
  • _initterm (Address: 0x180006478)
  • _lock (Address: 0x1800064b0)
  • _onexit (Address: 0x180006450)
  • _purecall (Address: 0x1800064a0)
  • _unlock (Address: 0x180006460)
  • _XcptFilter (Address: 0x180006490)
  • free (Address: 0x180006498)
  • malloc (Address: 0x180006480)
  • memcpy_s (Address: 0x1800064a8)
  • memset (Address: 0x1800064b8)
WCP.dll
  • ?GetLUnicodeParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAK@Z (Address: 0x1800062f8)
  • ?GetNtFilePathParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAKK@Z (Address: 0x180006308)
  • ?GetNtRegistryPathParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAKK@Z (Address: 0x180006300)
  • ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180006320)
  • ?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x1800062e0)
  • ?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x1800062d8)
  • ?RtlTraceFormat_PCULONGLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180006328)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x180006318)
  • RtlAllocateLBlob (Address: 0x1800062f0)
  • RtlFreeLBlob (Address: 0x1800062e8)
  • RtlFreeLUnicodeString (Address: 0x180006310)