NCProv.dll

v10.0.19041.4474 64-bit Windows NT Analyzed
Download
Description
Non-COM WMI Event Provision APIs
Authors
© Microsoft Corporation. All rights reserved.
File size
111.5 KB
Uploaded
2025-12-01 07:51
Views
119
SHA-256
807296c34bd97d3ce02630f6ce06090d

Exported functions 4

DllCanUnloadNow #1 · 0x3f90
DllGetClassObject #2 · 0x4770
DllRegisterServer #3 · 0xd6c0
DllUnregisterServer #4 · 0xd6d0

Imported DLLs & functions 111

api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180012100
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180012110
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x180012128
SetUnhandledExceptionFilter 0x180012130
UnhandledExceptionFilter 0x180012120
api-ms-win-core-file-l1-1-0.dll 2
ReadFileEx 0x180012148
WriteFile 0x180012140
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180012158
api-ms-win-core-heap-l1-1-0.dll 2
GetProcessHeap 0x180012170
HeapDestroy 0x180012168
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x180012180
api-ms-win-core-io-l1-1-0.dll 1
GetOverlappedResult 0x180012190
api-ms-win-core-libraryloader-l1-2-0.dll 9
DisableThreadLibraryCalls 0x1800121e0
FindResourceExW 0x1800121d8
FreeLibrary 0x1800121a8
GetModuleFileNameW 0x1800121b0
GetModuleHandleW 0x1800121a0
GetProcAddress 0x1800121c8
LoadLibraryExW 0x1800121d0
LoadResource 0x1800121c0
SizeofResource 0x1800121b8
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x180012200
VirtualProtect 0x1800121f8
VirtualQuery 0x1800121f0
api-ms-win-core-namedpipe-l1-1-0.dll 3
ConnectNamedPipe 0x180012220
CreateNamedPipeW 0x180012218
DisconnectNamedPipe 0x180012210
api-ms-win-core-processthreads-l1-1-0.dll 5
CreateThread 0x180012250
GetCurrentProcess 0x180012230
GetCurrentProcessId 0x180012238
GetCurrentThreadId 0x180012240
TerminateProcess 0x180012248
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180012260
api-ms-win-core-registry-l1-1-0.dll 8
RegCloseKey 0x180012298
RegCreateKeyExW 0x180012280
RegDeleteValueW 0x180012270
RegEnumKeyExW 0x1800122a0
RegEnumValueW 0x180012288
RegOpenKeyExW 0x1800122a8
RegQueryInfoKeyW 0x180012290
RegSetValueExW 0x180012278
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800122c8
RtlLookupFunctionEntry 0x1800122b8
RtlVirtualUnwind 0x1800122c0
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1800122d8
api-ms-win-core-string-l2-1-0.dll 2
CharNextW 0x1800122f0
CharPrevW 0x1800122e8
api-ms-win-core-string-obsolete-l1-1-0.dll 3
lstrcmpiW 0x180012300
lstrcpynW 0x180012310
lstrcpyW 0x180012308
api-ms-win-core-synch-l1-1-0.dll 10
CreateEventW 0x180012338
DeleteCriticalSection 0x180012328
EnterCriticalSection 0x180012360
InitializeCriticalSection 0x180012358
LeaveCriticalSection 0x180012368
OpenEventW 0x180012348
ResetEvent 0x180012350
SetEvent 0x180012330
WaitForMultipleObjectsEx 0x180012340
WaitForSingleObject 0x180012320
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180012378
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x180012388
GetSystemTimeAsFileTime 0x180012398
GetTickCount 0x180012390
msvcrt.dll 30
__C_specific_handler 0x180012460
__CxxFrameHandler3 0x1800123e8
__dllonexit 0x180012470
_amsg_exit 0x180012430
_CxxThrowException 0x180012410
_initterm 0x180012438
_lock 0x180012450
_onexit 0x1800123b8
_purecall 0x180012478
_unlock 0x180012468
_vsnwprintf 0x180012480
_wcsupr 0x1800123c0
_XcptFilter 0x180012428
??0exception@@QEAA@AEBQEBD@Z 0x1800123a8
??0exception@@QEAA@AEBQEBDH@Z 0x1800123b0
??0exception@@QEAA@AEBV0@@Z 0x1800123c8
??1exception@@UEAA@XZ 0x1800123e0
??1type_info@@UEAA@XZ 0x180012448
?terminate@@YAXXZ 0x180012440
?what@exception@@UEBAPEBDXZ 0x180012408
free 0x180012458
malloc 0x180012400
memcmp 0x180012488
memcpy 0x180012418
memmove 0x180012420
memset 0x180012490
realloc 0x1800123f0
wcscat_s 0x1800123f8
wcscpy_s 0x1800123d8
wcsstr 0x1800123d0
ntdll.dll 6
EtwGetTraceEnableFlags 0x1800124a0
EtwGetTraceEnableLevel 0x1800124b8
EtwGetTraceLoggerHandle 0x1800124c0
EtwRegisterTraceGuidsW 0x1800124a8
EtwTraceMessage 0x1800124c8
EtwUnregisterTraceGuids 0x1800124b0
wbemcomn.dll 11
_ThrowMemoryException_ 0x180012508
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z 0x1800124f0
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ 0x1800124e8
??1QL1_Parser@@UEAA@XZ 0x1800124e0
?Next@CAbstractQl1Parser@@MEAAHH@Z 0x1800124d8
?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z 0x180012520
?WbemHeapInitialize@CWin32DefaultArena@@SAHPEAX@Z 0x180012510
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z 0x180012528
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z 0x180012518
?Write@CMemoryLog@@QEAAXJ@Z 0x180012500
GetMemLogObject 0x1800124f8