Windows 10 DLL File Information

Windows 10 DLL File Information - appmgmts.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Software installation Service
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - 1 other DLL files in system32 directory are statically linked to this file.
File Size:	161 KB
Total Number of Exported Functions:	19
Total Number of Exported Functions With Names:	19

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	145,920 Bytes	88.2%	Read, Execute	Code
.data	0x00025000	1,024 Bytes	0.6%	Write, Read	Initialized Data
.idata	0x00026000	7,680 Bytes	4.6%	Read	Initialized Data
.rsrc	0x00028000	1,536 Bytes	0.9%	Read	Initialized Data
.reloc	0x00029000	8,192 Bytes	5.0%	Read, Discardable	Initialized Data

Static Linking

This means that when appmgmts.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, appmgmts.dll won't be loaded.

List of files that are statically linked to appmgmts.dll

appmgr.dll

This means that when one of the above files is loaded, appmgmts.dll will be loaded too. (The opposite of the previous 'Static Linking' section)

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	199	35,980 Bytes	21.8%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	3	6,068 Bytes	3.7%
Total	202	42,048 Bytes	25.4%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
1000	Applying software installation settings...
1002	Installing managed software %s...
1003	Removing managed software %s...
1100	Applying computer settings...
1101	Applying your personal settings...
2000	Calling Windows Installer to remove application %1!s! from policy %2!s!.
2001	Calling Windows Installer to install application %1!s! from policy %2!s!.
2002	Calling Windows Installer to install a feature of application %1!s! from policy %2!s! using a descriptor.
2003	Windows Installer failed to resolve descriptor %1!s! into a path. The error was %2!d!.
2004	Invoking legacy setup program %1!s!.
2005	Process %1!s! running as user %2!s! is making an install request.
3000	%1!s!
3003	Assigned application %1!s! (flags %2!x!).
3004	Published application %1!s! (flags %2!x!).
3005	%1!s! (unique identifier %2!s!)
3006	System volume path = %1!s!
3007	Active Directory path = %1!s!
3008	Removed (orphaned) application %1!s!.
3009	Installed
3010	Policy %1!s! has been removed. All applications will be made unmanaged or removed.
3011	Software installation extension returning with final error code %1!u!.
3012	Cannot impersonate user, error = %1!d!. Software installation cancelled.
3013	Found %1!d! applications in policy %2!s!.
3014	Removed (uninstall) application %1!s!.
3015	Unknown
3016	Enumerating applications in Active Directory for user %1!s! with flags %2!x!.
3017	Cannot bind to Active Directory to enumerate applications. Error code is %1!x!.
3018	Assigning application %1!s! from policy %2!s!.
3019	Cannot get the current set of managed applications from the registry, error %1!d!.
3020	Cannot create the local application script directory, error %1!d!.
3021	Policy has not changed. Only assigned applications will be advertised.
3022	Enumerating the managed applications which are currently applied to this user.
3023	Application %1!s! from policy %2!s! is marked as managed but was not in the list of active applications from Active Directory. Checking now to see if it was removed.
3024	Set the Active Directory path to %1!s!.
3025	No Active Directory path.
3026	Found assigned application %1!s! from policy %2!s! in the registry.
3027	Found published application %1!s! from policy %2!s! in the registry.
3028	Application %1!s! is in an unrecognized state!
3029	Application %1!s! from policy %2!s! was not found.
3030	Application %1!s! from policy %2!s! is set for removal because it was removed from the policy.
3031	Application %1!s! from policy %2!s! is set for installation because it is assigned to this computer policy.
3032	Application %1!s! from policy %2!s! is set for assignment because it is assigned to this user policy.
3033	No managed applications are currently applied to this user.
3034	Application %1!s! from policy %2!s! is set to be assigned because it is a published application that this user had installed previously on another computer.
3035	Application %1!s! from policy %2!s! is set to be assigned because it is an upgrade for an application that applies to this user.
3036	The script file for application %1!s! from policy %2!s! cannot be copied. Copy from %3!s! to %4!s! failed, error %5!d!.
3037	Calling the Windows Installer to advertise application %1!s! from script %2!s! with flags %3!x!.
3038	Windows Installer cannot advertise application %1!s! from script %2!s!, error %3!d!..
3039	Calling the Windows Installer to install application %1!s! from policy %2!s!.
3040	Application %1!s! has been applied on more than one computer. It will be marked as unmanaged in the software installation database.
3041	Application %1!s! from policy %2!s! is reset to no action because application %3!s! from policy %4!s! is a forced upgrade or a previously applied optional upgrade.
3042	The following %1!d! managed applications are currently applied to this user.
3043	Calling Windows Installer to remove application %1!s! from policy %2!s!.
3044	Application %1!s! has been applied on more than one computer. It will be marked as removed in the software installation database.
3045	Calling Windows Installer to remove application advertisement for application %1!s! from script %2!s!.
3046	Windows Installer cannot remove application advertisement for application %1!s! from script %2!s!, error %3!d!.
3047	Removing application %1!s! from the software installation database.
3048	Software installation service request to install returning final error code %1!x!.
3049	Enumerating applications in Active Directory for computer %1!s! with flags %2!x!.
3050	Software installation service called to install application %1!s!.
3051	Software installation service called to install application for file extension %1!s!.
3052	Software installation service called to install application for program identifier %1!s!.
3053	Software installation service called to install application for class %1!s! with context %2!x!.
3054	Cannot get the application information from Active Directory. Error: %1!x!.
3055	Software installation service request to install returning final error code %1!d!.
3056	Cannot initialize the data structure for application %1!s!.
3057	Cannot initialize the data structure for local script %1!s!.
3058	Found %1!d! applications locally that are not included in the set of applications from Active Directory.
3059	Software installation service called to remove product identifier %1!s!.
3060	Software installation service call to remove returning final error code %1!d!.
3061	Found published application %1!s! with product identifier %2!s!.
3062	Found assigned application %1!s! with product identifier %2!s!.
3063	Application %1!s! from policy %2!s! was reset to unmanaged because application %3!s! from policy %4!s! is a higher precedence application with the same product identifier that is already installed.
3064	Application %1!s! from policy %2!s! was set to be unmanaged because it was removed from policy.
3065	Cannot find an Active Directory for policy %1!s!. The error was %2!x!.
3066	Application %1!s! from policy %2!s! was reset to no action because it has been previously upgraded by application %3!s! from policy %4!s!.
3067	Application %1!s! from policy %2!s! was reset to no action because it is an upgrade of application %3!s! from policy %4!s! and is not set to force an upgrade.
3068	Ignoring removal of policy %3!s!.
3069	%1!s! from policy %2!s! with state %3!x! and assign count %4!d!.
3070	Application %1!s! from policy %2!s! is set for installation because it is assigned to this user policy and is configured with the install option.
3071	Applications belonging to category %1!s! are now being selected for inclusion in the final list of enumerated applications.
3072	Install application request found Windows Installer type application %1!s! from policy %2!s!.
3073	Install application request found legacy setup type application %1!s! from policy %2!s!.
3074	Install application request found unknown (%1!d!) type application %2!s! from policy %3!s!.
3075	The following applications were found in policy %1!s!.
3076	Application %1!s! from policy %2!s! was set to be unmanaged because it was no longer found in the policy set, perhaps because of a permission change.
3077	Application %1!s! from policy %2!s! was set for removal because it was no longer found in the policy set, perhaps because of a permission change.
3078	Application %1!s! from policy %2!s! kept at no action because it is a published application that has already been applied to the user on this computer.
3079	Could not determine if there is an unmanaged install of application %2!s!, error %3!d!
3080	Application %1!s! from policy %2!s! was set for reinstallation because it was configured to be redeployed. The local revision count is less then the Active Directory revision count.
3081	Calling Windows Installer to reinstall application %1!s!.
3082	Application %1!s! from policy %2!s! was reset for installation into new default feature states because of a transform conflict with an existing installation of the product.
3083	The following policies are to be removed, flags are %1!x!.
3084	The following policies are to be applied, flags are %1!x!.
3085	Application %1!s! from policy %2!s! is marked as managed but was not in the list of active applications from the Active Directory, checking now to see if it was removed.
3086	Application %1!s! from policy %2!s! could not be found in Active Directory. The error was %3!d!.
3087	Application %1!s! from policy %2!s! was set to be unmanaged because it is a published application which has been removed.
3088	Application %1!s! from policy %2!s! was reset from unmanaged to no action because it is not applied to this user.
3089	Application %1!s! from policy %2!s! is a potential upgrade of application %3!s! from policy %4!s!, states are %5!d! %6!d! %7!d! %8!d! %9!d!.
3090	Application %1!s! from policy %2!s! was reset to unmanaged because application %3!s! from policy %4!s! is a higher precedence application with the same product identifier.
3091	Application %1!s! from policy %2!s! has an upgrade of application %3!s! from policy %4!s! which conflicts with the precedence of the policies. The upgrade relationship will be reversed.
3092	Found unmanaged application %1!s! from policy %2!s! in the registry.
3093	Found removed application %1!s! from policy %2!s! in the registry.
3094	The install of %1!s! will be prevented because a similar product is already installed.
3095	The install of %1!s! will be prevented because there is an upgrade relationship with a product that is already installed.
3096	Found Windows Installer information for program identifier %1!s!.
3097	Found Windows Installer information for an in process server for the class.
3098	Found Windows Installer information for a local server for the class.
3099	Application %1!s! from policy %2!s! is configured to remove any unmanaged install before being assigned.
3100	Application %1!s! from policy %2!s! was set for reinstallation because it was configured to be redeployed. The local script time is %3!s! and the Active Directory script time is %4!s!.
3101	Application %1!s! from policy %2!s! was reset to unmanaged because application %3!s! from policy %4!s! has the same product identifier and is a better language match.
3102	The Active Directory path could not be updated at the client.
3103	The list of applications in the Active Directory could not be retrieved.
3104	Local software installation state could not be retrieved.
3105	Software changes could not be applied. A previous log entry with details should exist.
3106	Policy Logging for Software Management failed to initialize, the error was %1!x!.
3108	Policy Logging for Software Management failed to write a policy record, the error was %1!x!.
3109	Policy Logging for Software Management is attempting to log application %1!s! from policy %2!s!.
3110	Policy Logging for Software Management failed to clear the log, the error was %1!x!.
3111	Policy Logging for Software Management is attempting to write the log entry for application category %1!s!.
3112	Policy Logging for Software Management failed to write the log entry for application category %1!s!, the error was %2!x!.
3113	Policy Logging for Software Management failed to set attribute %1!s!, the error was %2!x!.
3114	Policy Logging for Software Management failed to log conflict entries for application %1!s! from policy %2!s!, the error was %3!x!.
3115	Application %1!s! from policy %2!s! was superseded by application %3!s! from policy %4!s! with reason %5!d!.
3116	Found a cached script for an application which was not in the client's list of managed applications.
3117	Found the application for the cached script in the policy logging database, querying Active Directory for its current state.
3118	Did not find the application for the cached script in the policy logging database. The script will be deleted.
3119	Could not find the application for the cached script in the policy logging database, error %1!x!. The script will not be deleted.
3120	Found application %1!s! from policy %2!s! which matches the cached script. It will be added to the client's list of managed applications.
3121	An application matching the cached script could not be found in Active Directory. The script will be deleted.
3122	Could not find an application matching the cached script, error %1!x!. The script will not be deleted.
3123	Detected one or more applications which are missing from the client's list of managed applications. A full policy refresh will be enforced.
3124	Found application %1!s! from policy %2!s! which matches the cached script. It was in the original list of applications gathered from the Active Directory. It will be added to the client's list of managed applications.
3200	CSTORE: Deletion of script file %1!s! returned error code %2!x!.
3201	CSTORE: Gathering list of scripts from packages removed before (mm/dd/yyyy hh:mm:ss) %02d/%02d/%04d %02d:%02d:%02d for deletion.
3202	CSTORE: Deletion of package with DN %1!s! using package flags %2!x! returned error code %3!x!.
3203	CSTORE: Removing class store entry %1!s! from class store cache.
3204	CSTORE: Found class store %1!s! in class store cache.
3205	CSTORE: Failed to bind to class store %1!s!, the error was %2!x!.
3206	CSTORE: Getting details for package %1!s!.
3207	CSTORE: Enumerating packages with search filter %1!s! and flags %2!x!.
3208	CSTORE: Evaluating package %1!s! to determine if it satisfies on-demand criteria.
3209	CSTORE: Skipping package %1!s! in on-demand evaluation due to upgrade in same GPO by %2!s!.
3210	CSTORE: Package %1!s! chosen as best match for on-demand criteria.
3211	CSTORE: Removing element from CLSID cache due to expiration.
3212	CSTORE: Found CLSID in miss cache.
3213	CSTORE: Performing on-demand search across GPO's with filter %1!s!.
3214	CSTORE: Retrieved %1!d! packages with error code %2!x!.
3215	CSTORE: On-demand search for single GPO returned error code %1!x!.
3216	CSTORE: Attempting to bind to class store %1!d! with path %2!s!.
3217	CSTORE: Bind attempt returned error code %1!x!.
3218	CSTORE: On-demand class specifier type %1!x! with criteria %2!s!.
3219	CSTORE: Client-side filter skipping package due to missing attribute %1!s!.
3220	CSTORE: Client-side filter skipping package %1!s! due to failure to satisfy package flag %2!x!.
3221	CSTORE: Client-side filter skipping package %1!s! due to mismatch between filter flag %2!x! and package flag %3!x!.
3222	CSTORE: Client-side filter skipping package %1!s! because no inclusive constraints were satisfied.
3223	CSTORE: Retrieving class store path for the system account.
3224	CSTORE: Retrieving class store path for impersonated user.
3225	CSTORE: Retrieving class store path for non-impersonated user.
3226	CSTORE: Retrieved %1!d! class stores for the user or computer.
3227	CSTORE: Failed to add package -- attempting to delete partially deployed package at path %1!s!.
3228	CSTORE: Examining retrieved package %1!s!.
3229	CSTORE: Client-side filter skipping package %1!s! due to language mismatch for package language id %2!x!.
3230	CSTORE: Client-side filter skipping package %1!s! due to architecture mismatch.
3231	CSTORE: Client-side filter skipping package %1!s! due to clsid mismatch.
3232	CSTORE: Client-side filter skipping package %1!s! due to file extension mismatch.
3233	CSTORE: Client-side filter skipping package %1!s! because package type %2!x! is not an MSI package.
3234	CSTORE: Failed to retrieve RSoP specific attributes, the error was %1!x!.
3235	CSTORE: Error %1!x! was remapped to error %2!x!.
3236	CSTORE: Retrieved package cannot be applied to clients because it was deployed with a pre-release version of Windows.
3237	CSTORE: Binding Expiration Check: %1!s!: (MM.DD.yyyy): %02d.%02d.%04d %02d:%02d:%02d)
3238	Application %1!s! from policy %2!s! is being restored to the policy set with state %3!x! because this policy was previously removed but now applies to this user.
3239	Application %1!s! from policy %2!s! is being re-advertised because it was a published application and this policy was previously removed but now applies to this user.
3240	Software installation extension has been called for asynchronous policy refresh
3241	Software installation extension has been called for background policy refresh
3242	Software installation extension cannot perform removal or install operations during asynchronous policy refresh and will force a synchronous foreground refresh.
3243	Software installation extension has been called for foreground synchronous policy refresh.
3244	Software installation extension has detected changes that require a synchronous foreground policy refresh.
3245	Software installation extension has detected that the RSoP version of the target's profile is out of sync with the computer's RSoP data
3246	Application %1!s! from policy %2!s! was reset to reinstall because an unmanaged application with the same product identifier was already present on the computer.
3247	The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon.
3248	The installation of software deployed through Group Policy for this computer has been delayed until the next system restart because the changes must be applied before any user logons.
3249	Detected user assigned application %1!s! from policy %2!s! that was uninstalled on another computer. This uninstall will be ignored to allow normal processing to decide whether to uninstall the application.
3250	Application Management
3251	Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.
3252	Software Installation
3253	GetManagedApps: Beginning WaitForMultipleObjects.
3254	GetManagedApps: Completed WaitForMultipleObjects.
3255	CallMsiAdvertiseScript: Beginning WaitForSingleObject.
3256	CallMsiAdvertiseScript: Completed WaitForSingleObject.
3257	CRPCServiceManager::WaitForServiceTermination: Beginning WaitForSingleObject.
3258	CRPCServiceManager::WaitForServiceTermination: Completed WaitForSingleObject.
3259	CGPOFileDownloader::WaitForChunkReadToFinish: Beginning WaitForSingleObjectEx.
3260	CGPOFileDownloader::WaitForChunkReadToFinish: Completed WaitForSingleObjectEx.
3261	GetManagedApps: Beginning WaitForMultipleObjects (Debug wait for RSoP).
3262	GetManagedApps: Completed WaitForMultipleObjects (Debug wait for RSoP).
4000	Profiles notification: Failed to delete the profiles directory for %1!s!, the error was %2!x!.
4001	Profiles notification: Failed to delete the profiles registry data for %1!s!, the error was %2!x!.
4002	Profiles notification: Succeeded in deleting cached profiles data for %1!s!.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

CsCreateClassStore	CsEnumApps	CsGetAppCategories	CsGetClassAccess
CsGetClassStore	CsGetClassStorePath	CsRegisterAppCategory	CsServerGetClassStore
CsSetOptions	CsUnregisterAppCategory	DllCanUnloadNow	DllGetClassObject
GenerateGroupPolicy	IID_IClassAdmin	ProcessGroupPolicyObjectsEx	ReleaseAppCategoryInfoList
ReleasePackageDetail	ReleasePackageInfo	ServiceMain

Imported Functions List

The following functions are imported by this dll:

msvcrt.dll:

_CxxThrowException

_XcptFilter

__CxxFrameHandler

__dllonexit

_amsg_exit

_except_handler4_common

_initterm

_lock

_onexit

_purecall

_unlock

_vsnwprintf

_wcsicmp

_wcslwr

_wcsnicmp

free

malloc

memcpy

memmove

memset

public: __thiscall exception::exception(char const * const &)

public: __thiscall exception::exception(char const * const &,int)

public: __thiscall exception::exception(class exception const &)

public: virtual __thiscall exception::~exception(void)

public: virtual __thiscall type_info::~type_info(void)

public: virtual char const * __thiscall exception::what(void)const

swscanf

wcschr

wcsncmp

wcsrchr

wcstoul

RPCRT4.dll:

NdrServerCall2	RpcBindingToStringBindingW	RpcImpersonateClient
RpcRaiseException	RpcServerInterfaceGroupActivate	RpcServerInterfaceGroupClose
RpcServerInterfaceGroupCreateW	RpcStringBindingParseW	RpcStringFreeW
UuidCreate	UuidFromStringW

api-ms-win-core-processthreads-l1-1-2.dll:

KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!CreateThread	kernel32!GetCurrentProcess
kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!TerminateProcess

api-ms-win-core-errorhandling-l1-1-1.dll:

KernelBase!GetLastError KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter

api-ms-win-core-registry-l1-1-0.dll:

KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteKeyExW	KernelBase!RegDeleteValueW
KernelBase!RegEnumKeyExW	KernelBase!RegOpenCurrentUser	KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW
KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

api-ms-win-core-handle-l1-1-0.dll:

KernelBase!CloseHandle

api-ms-win-security-base-l1-2-0.dll:

KernelBase!AddAccessAllowedAce	KernelBase!AddAccessAllowedAceEx	KernelBase!AllocateAndInitializeSid
KernelBase!CheckTokenMembership	KernelBase!CopySid	KernelBase!DeleteAce
KernelBase!DuplicateToken	KernelBase!DuplicateTokenEx	KernelBase!EqualSid
KernelBase!FreeSid	KernelBase!GetAce	KernelBase!GetLengthSid
KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser	KernelBase!InitializeAcl
KernelBase!InitializeSecurityDescriptor	KernelBase!RevertToSelf	KernelBase!SetFileSecurityW
KernelBase!SetSecurityDescriptorDacl

api-ms-win-core-heap-l2-1-0.dll:

KernelBase!LocalAlloc KernelBase!LocalFree
USERENV.dll:

EnterCriticalPolicySection ForceSyncFgPolicy FreeGPOListW GetAppliedGPOListW
LeaveCriticalPolicySection RsopAccessCheckByType RsopResetPolicySettingStatus RsopSetPolicySettingStatus

api-ms-win-core-file-l1-2-1.dll:

KernelBase!CompareFileTime	KernelBase!CreateDirectoryW	KernelBase!CreateFileW
KernelBase!DeleteFileW	KernelBase!FindClose	KernelBase!FindFirstFileW
KernelBase!FindNextFileW	KernelBase!GetFileAttributesExW	KernelBase!GetFileAttributesW
KernelBase!GetFileSize	KernelBase!GetFullPathNameW	KernelBase!ReadFile
KernelBase!ReadFileEx	KernelBase!RemoveDirectoryW	KernelBase!SetEndOfFile
KernelBase!SetFileAttributesW	KernelBase!SetFilePointer	KernelBase!WriteFile

api-ms-win-core-synch-l1-2-0.dll:

KernelBase!CreateEventW	KernelBase!InitializeCriticalSectionAndSpinCount
KernelBase!ResetEvent	KernelBase!SetEvent
KernelBase!Sleep	KernelBase!WaitForSingleObject
KernelBase!WaitForSingleObjectEx	ntdll!RtlDeleteCriticalSection
ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection
ntdll!RtlLeaveCriticalSection

api-ms-win-core-synch-l1-2-1.dll:

KernelBase!WaitForMultipleObjects
api-ms-win-core-timezone-l1-1-0.dll:

KernelBase!FileTimeToSystemTime KernelBase!SystemTimeToFileTime
api-ms-win-core-sysinfo-l1-2-1.dll:

KernelBase!GetLocalTime KernelBase!GetSystemDirectoryW KernelBase!GetSystemInfo
KernelBase!GetSystemTime KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount
KernelBase!GetVersionExW
api-ms-win-core-file-l2-1-2.dll:

KernelBase!CopyFileW
api-ms-win-core-com-l1-1-1.dll:

combase!CoInitializeEx combase!CoUninitialize
api-ms-win-core-debug-l1-1-1.dll:

KernelBase!DebugBreak KernelBase!OutputDebugStringW
api-ms-win-core-localization-l1-2-1.dll:

KernelBase!FormatMessageW KernelBase!GetSystemDefaultLangID
api-ms-win-core-libraryloader-l1-2-0.dll:

KernelBase!DisableThreadLibraryCalls KernelBase!FreeLibrary KernelBase!FreeLibraryAndExitThread
KernelBase!GetModuleHandleExW KernelBase!GetProcAddress
api-ms-win-service-winsvc-l1-2-0.dll:

sechost!RegisterServiceCtrlHandlerW
api-ms-win-service-core-l1-1-1.dll:

sechost!SetServiceStatus
api-ms-win-core-libraryloader-l1-2-1.dll:

KernelBase!LoadLibraryW
api-ms-win-core-string-l1-1-0.dll:

KernelBase!CompareStringW
api-ms-win-security-sddl-l1-1-0.dll:

sechost!ConvertSidToStringSidW sechost!ConvertStringSidToSidW
api-ms-win-core-file-l2-1-1.dll:

KernelBase!MoveFileExW
api-ms-win-core-profile-l1-1-0.dll:

ntdll!RtlQueryPerformanceCounter
api-ms-win-core-processenvironment-l1-2-0.dll:

KernelBase!ExpandEnvironmentStringsW KernelBase!GetCurrentDirectoryW
OLEAUT32.dll:

SafeArrayCreate SafeArrayPutElement SysAllocString SysFreeString
SysStringLen VariantClear VariantInit

adsldpc.dll:

ADSICloseDSObject	ADSICloseSearchHandle	ADSICreateDSObject	ADSIDeleteDSObject
ADSIExecuteSearch	ADSIFreeColumn	ADSIGetColumn	ADSIGetFirstRow
ADSIGetNextRow	ADSIGetObjectAttributes	ADSIOpenDSObject	ADSISetObjectAttributes
ADSISetSearchPreference	ADsEncodeBinaryData	BuildADsParentPath	BuildADsPathFromParent
FreeADsMem

ADVAPI32.dll:

CloseEventLog GetNamedSecurityInfoW GetUserNameW OpenEventLogW
RegDeleteKeyW RegEnumKeyW ReportEventW SetEntriesInAclW
SetNamedSecurityInfoW
KERNEL32.dll:

GetComputerNameW MoveFileW lstrcmpW lstrcmpiW
lstrlenW
ntdll.dll:

RtlAdjustPrivilege RtlConvertSidToUnicodeString RtlEnterCriticalSection RtlFreeAnsiString
RtlInitUnicodeString RtlLeaveCriticalSection RtlNtStatusToDosError RtlUnicodeStringToInteger

EnterCriticalPolicySection	ForceSyncFgPolicy	FreeGPOListW	GetAppliedGPOListW
LeaveCriticalPolicySection	RsopAccessCheckByType	RsopResetPolicySettingStatus	RsopSetPolicySettingStatus

KernelBase!GetLocalTime	KernelBase!GetSystemDirectoryW	KernelBase!GetSystemInfo
KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
KernelBase!GetVersionExW

KernelBase!DisableThreadLibraryCalls	KernelBase!FreeLibrary	KernelBase!FreeLibraryAndExitThread
KernelBase!GetModuleHandleExW	KernelBase!GetProcAddress

SafeArrayCreate	SafeArrayPutElement	SysAllocString	SysFreeString
SysStringLen	VariantClear	VariantInit

CloseEventLog	GetNamedSecurityInfoW	GetUserNameW	OpenEventLogW
RegDeleteKeyW	RegEnumKeyW	ReportEventW	SetEntriesInAclW
SetNamedSecurityInfoW

RtlAdjustPrivilege	RtlConvertSidToUnicodeString	RtlEnterCriticalSection	RtlFreeAnsiString
RtlInitUnicodeString	RtlLeaveCriticalSection	RtlNtStatusToDosError	RtlUnicodeStringToInteger