vmsavedstatedumpprovider.dll

v10.0.26100.4654 Unknown (0xaa64) Windows NT Analyzed
Download
Description
VM Saved State Dump Provider
Authors
© Microsoft Corporation. All rights reserved.
File size
915.8 KB
Uploaded
2025-12-03 02:38
Views
36
SHA-256
c1c5dc93908d5040ad6446b8c9adc5cc

Exported functions 47

ApplyGuestMemoryFix #1 · 0x34680
ApplyPendingSavedStateFileReplayLog #2 · 0x34780
CallStackUnwind #3 · 0x347c0
FindSavedStateSymbolFieldInType #4 · 0x348c0
ForceActiveVirtualTrustLevel #5 · 0x349d0
ForceArchitecture #6 · 0x34ac0
ForceNestedHostMode #7 · 0x34bb0
ForcePagingMode #8 · 0x34cc0
GetActiveVirtualTrustLevel #9 · 0x34db0
GetArchitecture #10 · 0x34ea0
GetCrashDumpHeader #11 · 0x34f90
GetEnabledVirtualTrustLevels #12 · 0x350b0
GetGuestEnabledVirtualTrustLevels #13 · 0x35170
GetGuestOsInfo #14 · 0x35250
GetGuestPhysicalMemoryChunks #15 · 0x35340
GetGuestRawSavedMemorySize #16 · 0x35510
GetMemoryBlockCacheLimit #17 · 0x355f0
GetNestedVirtualizationMode #18 · 0x356d0
GetPagingMode #19 · 0x357c0
GetRegisterValue #20 · 0x358b0
GetSavedStateSymbolFieldInfo #21 · 0x359b0
GetSavedStateSymbolProviderHandle #22 · 0x35c50
GetSavedStateSymbolTypeSize #23 · 0x35d10
GetVpCount #24 · 0x35e00
GuestPhysicalAddressToRawSavedMemoryOffset #25 · 0x35ee0
GuestVirtualAddressToPhysicalAddress #26 · 0x35fd0
InKernelSpace #27 · 0x360f0
IsActiveVirtualTrustLevelEnabled #28 · 0x361e0
IsNestedVirtualizationEnabled #29 · 0x362d0
LoadKernelImage #30 · 0x363b0
LoadSavedStateFile #31 · 0x364d0
LoadSavedStateFiles #32 · 0x36670
LoadSavedStateModuleSymbols #33 · 0x36820
LoadSavedStateModuleSymbolsEx #34 · 0x36920
LoadSavedStateSymbolProvider #35 · 0x36a30
LocateKernelImage #36 · 0x36b20
LocateSavedStateFiles #37 · 0x36c40
ReadGuestPhysicalAddress #38 · 0x36ef0
ReadGuestRawSavedMemory #39 · 0x36ff0
ReadSavedStateGlobalVariable #40 · 0x370f0
ReleaseSavedStateFiles #41 · 0x371f0
ReleaseSavedStateSymbolProvider #42 · 0x372d0
ResolveSavedStateGlobalVariableAddress #43 · 0x373b0
ScanMemoryForDosImages #44 · 0x374b0
SetMemoryBlockCacheLimit #45 · 0x375f0
SetSavedStateSymbolProviderDebugInfoCallback #46 · 0x376d0
WriteCrashDumpFile #47 · 0x37c80

Imported DLLs & functions 182

ADVAPI32.dll 11
EventActivityIdControl 0x18009e050
EventEnabled 0x18009e030
EventRegister 0x18009e018
EventSetInformation 0x18009e040
EventUnregister 0x18009e020
EventWrite 0x18009e028
EventWriteTransfer 0x18009e038
RegCloseKey 0x18009e010
RegGetValueW 0x18009e000
RegOpenKeyExW 0x18009e008
RegQueryValueExW 0x18009e048
api-ms-win-core-featurestaging-l1-1-0.dll 3
RecordFeatureUsage 0x18009e4f0
SubscribeFeatureStateChangeNotification 0x18009e4f8
UnsubscribeFeatureStateChangeNotification 0x18009e500
dbghelp.dll 16
StackWalk64 0x18009e550
SymCleanup 0x18009e530
SymFindFileInPath 0x18009e538
SymFromAddr 0x18009e518
SymFromName 0x18009e548
SymFunctionTableAccess64 0x18009e580
SymGetLineFromAddr64 0x18009e510
SymGetModuleBase64 0x18009e588
SymGetModuleInfo64 0x18009e520
SymGetOptions 0x18009e578
SymGetTypeFromName 0x18009e558
SymGetTypeInfo 0x18009e560
SymInitializeW 0x18009e568
SymLoadModuleEx 0x18009e540
SymRegisterCallback64 0x18009e528
SymSetOptions 0x18009e570
KERNEL32.dll 133
AcquireSRWLockExclusive 0x18009e128
AcquireSRWLockShared 0x18009e138
CancelIoEx 0x18009e388
CloseHandle 0x18009e0c0
CloseThreadpoolWork 0x18009e448
CompareFileTime 0x18009e340
CreateEventExW 0x18009e378
CreateEventW 0x18009e3a0
CreateFileA 0x18009e418
CreateFileW 0x18009e2f0
CreateMutexExW 0x18009e0d8
CreateSemaphoreExW 0x18009e350
CreateThreadpoolWork 0x18009e460
DebugBreak 0x18009e100
DecodePointer 0x18009e468
DeleteCriticalSection 0x18009e1c8
DeviceIoControl 0x18009e390
EncodePointer 0x18009e330
EnterCriticalSection 0x18009e1b8
EnumSystemLocalesW 0x18009e250
ExitProcess 0x18009e258
FindClose 0x18009e3f8
FindFirstFileExW 0x18009e3d0
FindFirstFileW 0x18009e3e8
FindNextFileW 0x18009e3f0
FlsAlloc 0x18009e1e8
FlsFree 0x18009e200
FlsGetValue 0x18009e1f0
FlsSetValue 0x18009e1f8
FlushFileBuffers 0x18009e2b0
FormatMessageW 0x18009e098
FreeEnvironmentStringsW 0x18009e3b0
FreeLibrary 0x18009e218
FreeLibraryWhenCallbackReturns 0x18009e458
GetACP 0x18009e270
GetActiveProcessorCount 0x18009e438
GetCommandLineA 0x18009e3c8
GetCommandLineW 0x18009e3c0
GetConsoleMode 0x18009e2c8
GetConsoleOutputCP 0x18009e2c0
GetCPInfo 0x18009e280
GetCurrentProcess 0x18009e168
GetCurrentProcessId 0x18009e0e0
GetCurrentThreadId 0x18009e088
GetDiskFreeSpaceW 0x18009e348
GetEnvironmentStringsW 0x18009e3b8
GetFileSizeEx 0x18009e298
GetFileTime 0x18009e358
GetFileType 0x18009e1d8
GetFullPathNameW 0x18009e338
GetLastError 0x18009e0a0
GetLocaleInfoW 0x18009e238
GetModuleFileNameA 0x18009e228
GetModuleFileNameW 0x18009e158
GetModuleHandleExW 0x18009e078
GetModuleHandleW 0x18009e0f0
GetOEMCP 0x18009e278
GetOverlappedResult 0x18009e428
GetOverlappedResultEx 0x18009e480
GetProcAddress 0x18009e0d0
GetProcessHeap 0x18009e0e8
GetStartupInfoW 0x18009e1e0
GetStdHandle 0x18009e1d0
GetStringTypeW 0x18009e288
GetSystemInfo 0x18009e198
GetSystemTimeAsFileTime 0x18009e210
GetSystemTimePreciseAsFileTime 0x18009e3e0
GetTickCount 0x18009e170
GetUserDefaultLCID 0x18009e248
HeapAlloc 0x18009e0c8
HeapFree 0x18009e060
HeapQueryInformation 0x18009e398
HeapReAlloc 0x18009e2e0
HeapSize 0x18009e2d8
InitializeCriticalSectionAndSpinCount 0x18009e3a8
InitializeCriticalSectionEx 0x18009e208
InitializeSListHead 0x18009e308
InitializeSRWLock 0x18009e178
InitOnceBeginInitialize 0x18009e150
InitOnceComplete 0x18009e148
InterlockedFlushSList 0x18009e328
InterlockedPopEntrySList 0x18009e380
InterlockedPushEntrySList 0x18009e320
IsDebuggerPresent 0x18009e108
IsValidCodePage 0x18009e268
IsValidLocale 0x18009e240
K32GetModuleInformation 0x18009e188
LCMapStringEx 0x18009e470
LCMapStringW 0x18009e230
LeaveCriticalSection 0x18009e1c0
LoadLibraryExW 0x18009e220
LocalAlloc 0x18009e118
LocalFree 0x18009e110
LockFileEx 0x18009e360
MultiByteToWideChar 0x18009e290
OpenSemaphoreW 0x18009e0b8
OutputDebugStringA 0x18009e420
OutputDebugStringW 0x18009e0a8
QueryPerformanceCounter 0x18009e300
QueryPerformanceFrequency 0x18009e478
RaiseException 0x18009e2e8
RaiseFailFastException 0x18009e160
ReadFile 0x18009e2d0
ReleaseMutex 0x18009e090
ReleaseSemaphore 0x18009e070
ReleaseSRWLockExclusive 0x18009e120
ReleaseSRWLockShared 0x18009e140
ResetEvent 0x18009e408
RtlCaptureStackBackTrace 0x18009e130
RtlLookupFunctionEntry 0x18009e310
RtlPcToFileHeader 0x18009e190
RtlUnwindEx 0x18009e318
SetEndOfFile 0x18009e430
SetEvent 0x18009e400
SetFilePointerEx 0x18009e2a0
SetFileTime 0x18009e370
SetLastError 0x18009e068
SetStdHandle 0x18009e2a8
Sleep 0x18009e3d8
SleepConditionVariableSRW 0x18009e180
SubmitThreadpoolWork 0x18009e450
TerminateProcess 0x18009e260
UnlockFileEx 0x18009e368
VirtualAlloc 0x18009e1a0
VirtualProtect 0x18009e1a8
VirtualQuery 0x18009e1b0
WaitForSingleObject 0x18009e080
WaitForSingleObjectEx 0x18009e0b0
WakeAllConditionVariable 0x18009e410
WakeConditionVariable 0x18009e440
WideCharToMultiByte 0x18009e0f8
WriteConsoleW 0x18009e2f8
WriteFile 0x18009e2b8
ntdll.dll 6
NtCreateFile 0x18009e598
NtFsControlFile 0x18009e5a8
NtQueryInformationFile 0x18009e5b8
RtlDecompressBufferEx 0x18009e5c0
RtlGetCompressionWorkSpaceSize 0x18009e5b0
RtlNtStatusToDosError 0x18009e5a0
ole32.dll 5
CoCreateInstance 0x18009e5e8
CoGetObjectContext 0x18009e5e0
CoInitializeEx 0x18009e5d8
CoInitializeSecurity 0x18009e5d0
CoUninitialize 0x18009e5f0
OLEAUT32.dll 4
SysStringLen 0x18009e4a8
VariantChangeTypeEx 0x18009e490
VariantClear 0x18009e498
VariantInit 0x18009e4a0
RPCRT4.dll 1
UuidCreate 0x18009e4b8
SHLWAPI.dll 2
PathAppendW 0x18009e4d0
PathRemoveFileSpecW 0x18009e4c8
XmlLite.dll 1
CreateXmlReader 0x18009e4e0