FlightSettings.dll

Description: Flight Settings

Version: 10.0.19041.2304

Architecture: 32-bit

Operating System: Windows NT

SHA256: 397adfcd178da8cb591dc7767949c9e1

File Size: 736.4 KB

Uploaded At: Dec. 1, 2025, 8:31 a.m.

Views: 29

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllGetActivationFactory (Ordinal: 1, Address: 0x38470)
ServiceMain (Ordinal: 2, Address: 0x39280)
SvchostPushServiceGlobals (Ordinal: 3, Address: 0x390a0)
DllCanUnloadNow (Ordinal: 4, Address: 0x38440)
DllGetClassObject (Ordinal: 5, Address: 0x38330)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x100aa000)

api-ms-win-core-datetime-l1-1-1.dll

GetDateFormatEx (Address: 0x100aa008)
GetTimeFormatEx (Address: 0x100aa00c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100aa018)
IsDebuggerPresent (Address: 0x100aa014)
OutputDebugStringW (Address: 0x100aa01c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100aa024)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100aa02c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100aa040)
RaiseException (Address: 0x100aa034)
SetLastError (Address: 0x100aa044)
SetUnhandledExceptionFilter (Address: 0x100aa038)
UnhandledExceptionFilter (Address: 0x100aa03c)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x100aa06c)
CreateFileA (Address: 0x100aa054)
CreateFileW (Address: 0x100aa068)
DefineDosDeviceW (Address: 0x100aa088)
DeleteFileW (Address: 0x100aa04c)
FindClose (Address: 0x100aa064)
FindFirstFileW (Address: 0x100aa060)
FindNextFileW (Address: 0x100aa070)
FlushFileBuffers (Address: 0x100aa078)
GetFileAttributesW (Address: 0x100aa058)
GetFileSizeEx (Address: 0x100aa08c)
GetFullPathNameW (Address: 0x100aa050)
QueryDosDeviceW (Address: 0x100aa084)
ReadFile (Address: 0x100aa080)
RemoveDirectoryW (Address: 0x100aa074)
SetFilePointer (Address: 0x100aa05c)
WriteFile (Address: 0x100aa07c)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x100aa094)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x100aa09c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100aa0a4)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100aa0ac)
HeapAlloc (Address: 0x100aa0b0)
HeapFree (Address: 0x100aa0b4)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100aa0c0)
LocalFree (Address: 0x100aa0bc)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CopyFileW (Address: 0x100aa0cc)
MoveFileW (Address: 0x100aa0c8)
UnregisterWait (Address: 0x100aa0d0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100aa0e4)
FindStringOrdinal (Address: 0x100aa0f8)
FreeLibrary (Address: 0x100aa0f4)
GetModuleFileNameA (Address: 0x100aa0d8)
GetModuleFileNameW (Address: 0x100aa0e0)
GetModuleHandleExW (Address: 0x100aa0f0)
GetModuleHandleW (Address: 0x100aa0ec)
GetProcAddress (Address: 0x100aa0e8)
LoadLibraryExW (Address: 0x100aa0dc)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100aa10c)
GetLocaleInfoW (Address: 0x100aa104)
GetSystemPreferredUILanguages (Address: 0x100aa110)
GetUserDefaultLocaleName (Address: 0x100aa108)
GetUserPreferredUILanguages (Address: 0x100aa100)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetSystemDefaultUILanguage (Address: 0x100aa118)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x100aa128)
MapViewOfFile (Address: 0x100aa120)
UnmapViewOfFile (Address: 0x100aa124)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x100aa130)
PathCchSkipRoot (Address: 0x100aa134)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x100aa13c)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x100aa168)
GetCurrentProcess (Address: 0x100aa14c)
GetCurrentProcessId (Address: 0x100aa150)
GetCurrentThread (Address: 0x100aa160)
GetCurrentThreadId (Address: 0x100aa154)
GetExitCodeProcess (Address: 0x100aa144)
OpenProcessToken (Address: 0x100aa158)
OpenThreadToken (Address: 0x100aa15c)
SetThreadToken (Address: 0x100aa164)
TerminateProcess (Address: 0x100aa148)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x100aa174)
OpenProcess (Address: 0x100aa170)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100aa180)
QueryPerformanceFrequency (Address: 0x100aa17c)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x100aa188)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100aa1b4)
RegCreateKeyExW (Address: 0x100aa1ac)
RegDeleteKeyExW (Address: 0x100aa194)
RegDeleteTreeW (Address: 0x100aa190)
RegDeleteValueW (Address: 0x100aa198)
RegEnumKeyExW (Address: 0x100aa1a0)
RegEnumValueW (Address: 0x100aa1a4)
RegGetValueW (Address: 0x100aa1bc)
RegOpenKeyExW (Address: 0x100aa1b8)
RegQueryInfoKeyW (Address: 0x100aa1b0)
RegQueryValueExW (Address: 0x100aa19c)
RegSetValueExW (Address: 0x100aa1a8)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x100aa1c4)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x100aa1d0)
PathFindFileNameW (Address: 0x100aa1cc)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100aa1e0)
MultiByteToWideChar (Address: 0x100aa1d8)
WideCharToMultiByte (Address: 0x100aa1dc)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x100aa1e8)
CharUpperBuffW (Address: 0x100aa1ec)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100aa230)
AcquireSRWLockShared (Address: 0x100aa204)
CreateEventExW (Address: 0x100aa208)
CreateMutexExW (Address: 0x100aa240)
CreateMutexW (Address: 0x100aa1f4)
CreateSemaphoreExW (Address: 0x100aa234)
DeleteCriticalSection (Address: 0x100aa200)
EnterCriticalSection (Address: 0x100aa220)
InitializeCriticalSectionEx (Address: 0x100aa1fc)
InitializeSRWLock (Address: 0x100aa228)
LeaveCriticalSection (Address: 0x100aa23c)
OpenSemaphoreW (Address: 0x100aa21c)
ReleaseMutex (Address: 0x100aa20c)
ReleaseSemaphore (Address: 0x100aa214)
ReleaseSRWLockExclusive (Address: 0x100aa238)
ReleaseSRWLockShared (Address: 0x100aa210)
SetEvent (Address: 0x100aa1f8)
TryEnterCriticalSection (Address: 0x100aa224)
WaitForSingleObject (Address: 0x100aa22c)
WaitForSingleObjectEx (Address: 0x100aa218)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100aa24c)
InitOnceComplete (Address: 0x100aa254)
InitOnceExecuteOnce (Address: 0x100aa250)
Sleep (Address: 0x100aa248)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x100aa260)
GetSystemTimeAsFileTime (Address: 0x100aa25c)
GetSystemWindowsDirectoryW (Address: 0x100aa268)
GetTickCount (Address: 0x100aa264)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x100aa270)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100aa280)
CreateThreadpoolTimer (Address: 0x100aa27c)
IsThreadpoolTimerSet (Address: 0x100aa284)
SetThreadpoolTimer (Address: 0x100aa288)
WaitForThreadpoolTimerCallbacks (Address: 0x100aa278)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x100aa290)
DeleteTimerQueueTimer (Address: 0x100aa294)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x100aa2a0)
SystemTimeToFileTime (Address: 0x100aa29c)

api-ms-win-core-url-l1-1-0.dll

UrlEscapeW (Address: 0x100aa2a8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100aa2b4)
EncodePointer (Address: 0x100aa2b0)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x100aa2c0)
GetFileVersionInfoSizeExW (Address: 0x100aa2bc)
VerQueryValueW (Address: 0x100aa2c4)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100aa2dc)
EventProviderEnabled (Address: 0x100aa2d0)
EventRegister (Address: 0x100aa2d8)
EventSetInformation (Address: 0x100aa2e0)
EventUnregister (Address: 0x100aa2d4)
EventWriteTransfer (Address: 0x100aa2cc)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x100aa318)
AllocateAndInitializeSid (Address: 0x100aa304)
CheckTokenMembership (Address: 0x100aa2e8)
CopySid (Address: 0x100aa2f4)
CreateWellKnownSid (Address: 0x100aa2f8)
DuplicateToken (Address: 0x100aa2fc)
DuplicateTokenEx (Address: 0x100aa310)
FreeSid (Address: 0x100aa300)
GetLengthSid (Address: 0x100aa2f0)
GetTokenInformation (Address: 0x100aa308)
ImpersonateLoggedOnUser (Address: 0x100aa314)
IsValidSid (Address: 0x100aa2ec)
RevertToSelf (Address: 0x100aa30c)

api-ms-win-security-base-l1-2-0.dll

CheckTokenMembershipEx (Address: 0x100aa320)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x100aa328)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x100aa334)
OpenSCManagerW (Address: 0x100aa338)
OpenServiceW (Address: 0x100aa330)
StartServiceW (Address: 0x100aa33c)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x100aa348)
GetPersistedRegistryValueW (Address: 0x100aa344)

combase.dll

(Address: 0x100aa350)
(Address: 0x100aa354)
(Address: 0x100aa358)
(Address: 0x100aa35c)
(Address: 0x100aa360)
(Address: 0x100aa364)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100aa3f0)
__dllonexit (Address: 0x100aa3f8)
_amsg_exit (Address: 0x100aa40c)
_callnewh (Address: 0x100aa3cc)
_CxxThrowException (Address: 0x100aa390)
_except_handler4_common (Address: 0x100aa3e0)
_ftol2 (Address: 0x100aa394)
_ftol2_sse (Address: 0x100aa398)
_get_errno (Address: 0x100aa3d8)
_initterm (Address: 0x100aa404)
_lock (Address: 0x100aa400)
_onexit (Address: 0x100aa3f4)
_purecall (Address: 0x100aa418)
_set_errno (Address: 0x100aa3d4)
_unlock (Address: 0x100aa3fc)
_vsnprintf_s (Address: 0x100aa370)
_vsnwprintf (Address: 0x100aa3ac)
_wcsicmp (Address: 0x100aa380)
_wcstoui64 (Address: 0x100aa3c4)
_wcsupr (Address: 0x100aa3bc)
_wtoi (Address: 0x100aa3ec)
_wtol (Address: 0x100aa36c)
_XcptFilter (Address: 0x100aa410)
??0exception@@QAE@ABV0@@Z (Address: 0x100aa384)
??0exception@@QAE@XZ (Address: 0x100aa3b8)
??1exception@@UAE@XZ (Address: 0x100aa3c8)
??1type_info@@UAE@XZ (Address: 0x100aa3b0)
?terminate@@YAXXZ (Address: 0x100aa3b4)
free (Address: 0x100aa414)
malloc (Address: 0x100aa408)
memcmp (Address: 0x100aa3a4)
memcpy (Address: 0x100aa3a8)
memcpy_s (Address: 0x100aa41c)
memmove (Address: 0x100aa3dc)
memmove_s (Address: 0x100aa37c)
memset (Address: 0x100aa424)
realloc (Address: 0x100aa3e4)
swprintf_s (Address: 0x100aa374)
swscanf_s (Address: 0x100aa3a0)
toupper (Address: 0x100aa388)
wcschr (Address: 0x100aa420)
wcsncmp (Address: 0x100aa3d0)
wcsnlen (Address: 0x100aa39c)
wcsrchr (Address: 0x100aa38c)
wcsstr (Address: 0x100aa3e8)
wcstok_s (Address: 0x100aa378)
wcstoul (Address: 0x100aa3c0)

ntdll.dll

EtwTraceMessage (Address: 0x100aa42c)
NtQueryInformationToken (Address: 0x100aa430)
NtQueryLicenseValue (Address: 0x100aa43c)
NtQuerySystemInformation (Address: 0x100aa434)
NtQueryWnfStateData (Address: 0x100aa458)
RtlConvertDeviceFamilyInfoToString (Address: 0x100aa440)
RtlGetDeviceFamilyInfoEnum (Address: 0x100aa45c)
RtlGetVersion (Address: 0x100aa438)
RtlIsMultiUsersInSessionSku (Address: 0x100aa460)
RtlIsStateSeparationEnabled (Address: 0x100aa444)
RtlNtStatusToDosError (Address: 0x100aa450)
RtlPublishWnfStateData (Address: 0x100aa448)
RtlSubscribeWnfStateChangeNotification (Address: 0x100aa454)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100aa44c)