cmisetup.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
CallBack_ConfigureWindowsFoundationImage
#1 · 0x3920
Module_Init_Cmi
#2 · 0x1930
Module_Init_SkuAssembly
#3 · 0x2ef0
No function matches your filter.
Imported DLLs & functions 253
ADVAPI32.dll
28
AdjustTokenPrivileges
0x180081390
CloseEncryptedFileRaw
0x180081388
GetAclInformation
0x180081368
GetSecurityDescriptorControl
0x180081358
GetSecurityDescriptorDacl
0x180081348
GetSecurityDescriptorGroup
0x180081340
GetSecurityDescriptorLength
0x180081360
GetSecurityDescriptorOwner
0x180081338
GetSecurityDescriptorSacl
0x180081350
GetTraceEnableFlags
0x1800813b0
GetTraceEnableLevel
0x1800813a8
GetTraceLoggerHandle
0x1800813b8
OpenEncryptedFileRawW
0x180081378
OpenProcessToken
0x180081398
RegCloseKey
0x1800813d0
RegCreateKeyExW
0x1800813e0
RegDeleteKeyExW
0x1800813d8
RegDeleteTreeW
0x1800813e8
RegDeleteValueW
0x1800813f8
RegEnumValueW
0x180081408
RegisterTraceGuidsW
0x1800813a0
RegOpenKeyExW
0x180081410
RegQueryValueExW
0x180081400
RegSetValueExW
0x1800813f0
RevertToSelf
0x180081370
TraceEvent
0x1800813c8
UnregisterTraceGuids
0x1800813c0
WriteEncryptedFileRaw
0x180081380
BCryptCloseAlgorithmProvider
0x180081828
BCryptCreateHash
0x180081838
BCryptDestroyHash
0x180081840
BCryptFinishHash
0x180081848
BCryptGetProperty
0x180081830
BCryptHashData
0x180081850
BCryptOpenAlgorithmProvider
0x180081820
KERNEL32.dll
95
CloseHandle
0x180081698
CompareStringW
0x180081650
CopyFileExW
0x1800816e0
CopyFileW
0x1800815b0
CreateDirectoryW
0x180081658
CreateEventW
0x180081440
CreateFileA
0x1800814e8
CreateFileMappingW
0x180081540
CreateFileW
0x180081688
DeleteCriticalSection
0x180081728
DeleteFileW
0x1800816d8
DeviceIoControl
0x1800816b8
DosDateTimeToFileTime
0x1800814b8
DuplicateHandle
0x180081558
EnterCriticalSection
0x180081710
ExpandEnvironmentStringsW
0x180081630
FindClose
0x1800815a0
FindFirstFileW
0x1800815a8
FindNextFileW
0x1800816b0
FlushFileBuffers
0x1800816e8
FreeLibrary
0x1800815d0
GetCurrentDirectoryW
0x1800816a0
GetCurrentProcess
0x180081628
GetCurrentProcessId
0x180081588
GetCurrentThreadId
0x180081580
GetEnvironmentVariableW
0x180081700
GetFileAttributesW
0x180081638
GetFileInformationByHandle
0x1800816c8
GetFileInformationByHandleEx
0x1800816a8
GetFileSizeEx
0x1800816f0
GetFinalPathNameByHandleW
0x180081670
GetFullPathNameW
0x180081660
GetHandleInformation
0x180081620
GetLastError
0x1800815e0
GetLongPathNameW
0x180081668
GetModuleHandleExW
0x1800814c8
GetModuleHandleW
0x1800815e8
GetOverlappedResult
0x180081608
GetPrivateProfileSectionW
0x180081730
GetProcAddress
0x1800815f0
GetProcessHeap
0x1800815c0
GetSystemInfo
0x180081480
GetSystemTimeAsFileTime
0x180081578
GetTempFileNameW
0x1800814a0
GetTempPathW
0x180081678
GetTickCount
0x180081570
GetVersionExA
0x180081488
GetVersionExW
0x1800815f8
GetVolumeInformationByHandleW
0x180081528
GetVolumeInformationW
0x180081458
GetVolumeNameForVolumeMountPointW
0x180081690
GetVolumePathNamesForVolumeNameW
0x180081448
GetVolumePathNameW
0x180081680
HeapAlloc
0x1800815b8
HeapFree
0x1800815c8
HeapReAlloc
0x180081560
InitializeCriticalSection
0x180081720
InitializeCriticalSectionAndSpinCount
0x180081450
LeaveCriticalSection
0x180081718
LoadLibraryExW
0x1800815d8
LoadLibraryW
0x180081600
LocalAlloc
0x1800814f0
LocalFileTimeToFileTime
0x1800814b0
LocalFree
0x180081648
LockFileEx
0x180081460
lstrcmpiW
0x1800814c0
MapViewOfFile
0x180081538
MultiByteToWideChar
0x180081498
OpenProcess
0x180081470
QueryPerformanceCounter
0x180081590
ReadFile
0x1800814e0
ReleaseSemaphore
0x180081548
RemoveDirectoryW
0x180081520
ResetEvent
0x180081708
SetEndOfFile
0x180081610
SetFileAttributesW
0x1800816c0
SetFileInformationByHandle
0x1800816d0
SetFilePointer
0x1800814d0
SetFilePointerEx
0x180081618
SetFileTime
0x1800814a8
SetLastError
0x180081640
SetUnhandledExceptionFilter
0x180081478
Sleep
0x180081598
TerminateProcess
0x1800814f8
TlsAlloc
0x180081518
TlsFree
0x180081510
TlsGetValue
0x180081508
TlsSetValue
0x180081500
UnhandledExceptionFilter
0x180081568
UnlockFileEx
0x180081468
UnmapViewOfFile
0x180081530
WaitForMultipleObjects
0x180081550
WaitForSingleObject
0x1800816f8
WideCharToMultiByte
0x180081490
WriteFile
0x1800814d8
msvcrt.dll
43
__C_specific_handler
0x180081940
__CxxFrameHandler3
0x1800819a8
__dllonexit
0x180081920
_amsg_exit
0x180081950
_callnewh
0x180081968
_CxxThrowException
0x180081960
_initterm
0x180081948
_lock
0x180081930
_onexit
0x180081918
_purecall
0x1800818e0
_snprintf_s
0x180081898
_unlock
0x180081928
_vscwprintf
0x1800818c8
_vsnwprintf
0x1800819a0
_wcsicmp
0x1800818f0
_wcsnicmp
0x1800818c0
_wcstoi64
0x1800818a0
_XcptFilter
0x180081958
??0exception@@QEAA@AEBQEBDH@Z
0x180081988
??0exception@@QEAA@AEBV0@@Z
0x180081980
??1exception@@UEAA@XZ
0x180081978
??1type_info@@UEAA@XZ
0x180081910
?terminate@@YAXXZ
0x180081938
?what@exception@@UEBAPEBDXZ
0x180081970
bsearch
0x1800818e8
free
0x180081998
iswspace
0x180081888
malloc
0x180081990
memcmp
0x1800818f8
memcpy
0x180081900
memcpy_s
0x1800818d8
memmove
0x180081908
memmove_s
0x180081880
memset
0x1800819b0
qsort
0x180081870
strcpy_s
0x180081878
strncmp
0x180081890
swscanf_s
0x180081860
towupper
0x1800818d0
wcschr
0x1800818b8
wcsncmp
0x180081868
wcsrchr
0x1800818b0
wcstoul
0x1800818a8
ntdll.dll
51
DbgPrint
0x1800819c8
DbgPrintEx
0x180081b00
LdrGetDllHandle
0x1800819e0
LdrGetProcedureAddress
0x1800819f0
LdrLoadDll
0x180081a90
LdrUnloadDll
0x180081b50
NtClose
0x180081b30
NtCreateFile
0x180081a98
NtOpenFile
0x180081a88
NtOpenKey
0x1800819e8
NtQueryInformationFile
0x180081ab0
NtQueryInformationProcess
0x180081aa8
NtQueryPerformanceCounter
0x180081ae0
NtQueryValueKey
0x1800819d0
NtReadFile
0x180081a30
NtSetEaFile
0x180081a70
NtSetInformationFile
0x180081b10
NtSetSecurityObject
0x180081ab8
NtWaitForSingleObject
0x180081a20
NtWriteFile
0x180081a38
NtYieldExecution
0x180081ad8
RtlAcquireResourceExclusive
0x180081a60
RtlAcquireResourceShared
0x180081a58
RtlAdjustPrivilege
0x180081a78
RtlAllocateHeap
0x180081b28
RtlCaptureContext
0x180081b38
RtlCreateUnicodeStringFromAsciiz
0x1800819d8
RtlDeleteCriticalSection
0x180081a10
RtlDeleteResource
0x180081a48
RtlDosPathNameToNtPathName_U
0x180081aa0
RtlDosPathNameToNtPathName_U_WithStatus
0x180081b18
RtlDowncaseUnicodeChar
0x180081ae8
RtlEnterCriticalSection
0x180081a08
RtlExpandEnvironmentStrings
0x180081a28
RtlFindAceByType
0x180081ac0
RtlFreeHeap
0x180081b20
RtlHashUnicodeString
0x180081ad0
RtlImpersonateSelf
0x180081a80
RtlInitializeCriticalSection
0x180081a00
RtlInitializeResource
0x180081a68
RtlInitUnicodeString
0x180081a40
RtlLeaveCriticalSection
0x1800819f8
RtlLookupFunctionEntry
0x180081b40
RtlNtStatusToDosError
0x180081b08
RtlQueryEnvironmentVariable_U
0x1800819c0
RtlRaiseStatus
0x180081af8
RtlReAllocateHeap
0x180081af0
RtlReleaseResource
0x180081a50
RtlSetControlSecurityDescriptor
0x180081ac8
RtlTimeToTimeFields
0x180081a18
RtlVirtualUnwind
0x180081b48
WDSCORE.dll
14
ConstructPartialMsgVW
0x1800817e8
CurrentIP
0x1800817f0
WdsCreateBlackboard
0x1800817c0
WdsDestroyBlackboard
0x1800817d8
WdsFreeData
0x1800817b8
WdsGetBlackboardValue
0x1800817c8
WdsInitializeCallbackArray
0x1800817a0
WdsInitializeDataStringW
0x1800817d0
WdsInitializeDataUInt32
0x1800817e0
WdsPublish
0x1800817b0
WdsPublishImmediateEx
0x180081798
WdsSetBlackboardValue
0x180081790
WdsSetupLogMessageW
0x1800817f8
WdsSubscribeEx
0x1800817a8
No function matches your filter.