KrnlProv.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
WMI
Authors
© Microsoft Corporation. All rights reserved.
File size
73.0 KB
Uploaded
2025-12-01 07:51
Views
80
SHA-256
624ea5c19fffc1634e387b1ea7ec1337

Exported functions 4

DllCanUnloadNow #1 · 0x6050
DllGetClassObject #2 · 0x6070
DllRegisterServer #3 · 0x61a0
DllUnregisterServer #4 · 0x62a0

Imported DLLs & functions 115

api-ms-win-core-com-l1-1-0.dll 7
CoCreateInstance 0x18000bff0
CoImpersonateClient 0x18000c008
CoRevertToSelf 0x18000bff8
CoTaskMemAlloc 0x18000bfe8
CoTaskMemFree 0x18000c010
CoTaskMemRealloc 0x18000c000
StringFromGUID2 0x18000c018
api-ms-win-core-debug-l1-1-0.dll 1
OutputDebugStringA 0x18000c028
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x18000c048
RaiseException 0x18000c038
SetLastError 0x18000c040
SetUnhandledExceptionFilter 0x18000c058
UnhandledExceptionFilter 0x18000c050
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18000c068
api-ms-win-core-heap-l1-1-0.dll 2
GetProcessHeap 0x18000c078
HeapAlloc 0x18000c080
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x18000c090
api-ms-win-core-libraryloader-l1-2-0.dll 10
DisableThreadLibraryCalls 0x18000c0a0
FindResourceExW 0x18000c0d0
FreeLibrary 0x18000c0b0
GetModuleFileNameW 0x18000c0c0
GetModuleHandleW 0x18000c0e8
GetProcAddress 0x18000c0b8
LoadLibraryExA 0x18000c0e0
LoadLibraryExW 0x18000c0d8
LoadResource 0x18000c0c8
SizeofResource 0x18000c0a8
api-ms-win-core-memory-l1-1-0.dll 2
VirtualProtect 0x18000c100
VirtualQuery 0x18000c0f8
api-ms-win-core-processthreads-l1-1-0.dll 6
CreateThread 0x18000c130
GetCurrentProcess 0x18000c120
GetCurrentProcessId 0x18000c110
GetCurrentThread 0x18000c138
GetCurrentThreadId 0x18000c118
TerminateProcess 0x18000c128
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000c148
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x18000c158
RegCreateKeyExW 0x18000c188
RegDeleteValueW 0x18000c170
RegEnumKeyExW 0x18000c168
RegOpenKeyExW 0x18000c180
RegQueryInfoKeyW 0x18000c178
RegSetValueExW 0x18000c160
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18000c1b0
RtlCompareMemory 0x18000c198
RtlLookupFunctionEntry 0x18000c1a8
RtlVirtualUnwind 0x18000c1a0
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x18000c1c0
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x18000c1d0
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x18000c1e8
lstrlenA 0x18000c1e0
api-ms-win-core-synch-l1-1-0.dll 8
AcquireSRWLockExclusive 0x18000c210
DeleteCriticalSection 0x18000c220
EnterCriticalSection 0x18000c208
InitializeCriticalSection 0x18000c200
InitializeCriticalSectionAndSpinCount 0x18000c1f8
LeaveCriticalSection 0x18000c230
ReleaseSRWLockExclusive 0x18000c228
WaitForSingleObject 0x18000c218
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18000c240
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x18000c258
GetSystemTimeAsFileTime 0x18000c250
GetTickCount 0x18000c260
api-ms-win-eventing-consumer-l1-1-0.dll 3
CloseTrace 0x18000c280
OpenTraceW 0x18000c278
ProcessTrace 0x18000c270
api-ms-win-eventing-controller-l1-1-0.dll 2
StartTraceW 0x18000c298
StopTraceW 0x18000c290
api-ms-win-eventing-legacy-l1-1-0.dll 2
EnableTraceEx 0x18000c2b0
QueryTraceW 0x18000c2a8
api-ms-win-eventing-tdh-l1-1-0.dll 1
TdhGetProperty 0x18000c2c0
esscli.dll 1
IsUserAdministrator 0x18000c2d0
msvcrt.dll 32
__C_specific_handler 0x18000c3b0
__CxxFrameHandler3 0x18000c3b8
__dllonexit 0x18000c348
_amsg_exit 0x18000c320
_callnewh 0x18000c3c8
_CxxThrowException 0x18000c328
_errno 0x18000c358
_initterm 0x18000c3c0
_lock 0x18000c398
_onexit 0x18000c350
_purecall 0x18000c300
_unlock 0x18000c340
_XcptFilter 0x18000c2f8
??_V@YAXPEAX@Z 0x18000c3a8
??0exception@@QEAA@AEBQEBD@Z 0x18000c390
??0exception@@QEAA@AEBQEBDH@Z 0x18000c3d0
??0exception@@QEAA@AEBV0@@Z 0x18000c388
??1exception@@UEAA@XZ 0x18000c380
??1type_info@@UEAA@XZ 0x18000c368
??3@YAXPEAX@Z 0x18000c310
?terminate@@YAXXZ 0x18000c330
?what@exception@@UEBAPEBDXZ 0x18000c378
free 0x18000c2f0
malloc 0x18000c2e8
memcpy 0x18000c318
memcpy_s 0x18000c3a0
memmove 0x18000c338
memset 0x18000c3d8
realloc 0x18000c360
wcscat_s 0x18000c308
wcscpy_s 0x18000c370
wcsncpy_s 0x18000c2e0
ntdll.dll 1
RtlFreeSid 0x18000c3e8
OLEAUT32.dll 8
LoadTypeLib 0x18000bfb0
RegisterTypeLib 0x18000bfd8
SysAllocString 0x18000bfa0
SysFreeString 0x18000bfc0
SysStringLen 0x18000bfa8
UnRegisterTypeLib 0x18000bfb8
VariantClear 0x18000bfc8
VarUI4FromStr 0x18000bfd0
wbemcomn.dll 2
_ThrowMemoryException_ 0x18000c3f8
BreakOnDbgAndRenterLoop 0x18000c400