amsi.dll

v10.0.19041.4355 32-bit Windows NT Analyzed
Description
Anti-Malware Scan Interface
Authors
© Microsoft Corporation. All rights reserved.
File size
77.0 KB
Uploaded
2025-12-01 07:52
Views
59
SHA-256
78250252f016973a2255f8d9aa19fdae

Exported functions 13

AmsiCloseSession #1 · 0x5930
AmsiInitialize #2 · 0x5610
AmsiOpenSession #3 · 0x58d0
AmsiScanBuffer #4 · 0x5960
AmsiScanString #5 · 0x5a10
AmsiUacInitialize #6 · 0x5a60
AmsiUacScan #7 · 0x5c80
AmsiUacUninitialize #8 · 0x5c30
AmsiUninitialize #9 · 0x5880
DllCanUnloadNow #10 · 0x4560
DllGetClassObject #11 · 0x4590
DllRegisterServer #12 · 0x45c0
DllUnregisterServer #13 · 0x45c0

Imported DLLs & functions 105

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x10011008
IsDebuggerPresent 0x10011010
OutputDebugStringW 0x1001100c
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x10011018
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x10011020
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x10011034
SetLastError 0x10011030
SetUnhandledExceptionFilter 0x1001102c
UnhandledExceptionFilter 0x10011028
api-ms-win-core-file-l1-1-0.dll 1
CreateFileW 0x1001103c
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10011044
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x10011054
HeapAlloc 0x10011050
HeapFree 0x1001104c
api-ms-win-core-libraryloader-l1-2-0.dll 5
GetModuleFileNameA 0x10011064
GetModuleHandleExW 0x10011060
GetModuleHandleW 0x1001106c
GetProcAddress 0x1001105c
LoadLibraryExW 0x10011068
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x10011074
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x10011088
GetCurrentProcessId 0x10011084
GetCurrentThreadId 0x10011080
TerminateProcess 0x1001107c
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x10011090
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x10011098
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x100110a0
RegEnumKeyExW 0x100110a8
RegGetValueW 0x100110b0
RegOpenKeyExW 0x100110a4
RegQueryInfoKeyW 0x100110ac
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x100110c4
AcquireSRWLockShared 0x100110dc
CreateMutexExW 0x100110e0
CreateSemaphoreExW 0x100110d8
DeleteCriticalSection 0x100110bc
EnterCriticalSection 0x100110f0
InitializeCriticalSection 0x100110e8
InitializeCriticalSectionEx 0x100110f4
LeaveCriticalSection 0x100110ec
OpenSemaphoreW 0x100110c0
ReleaseMutex 0x100110e4
ReleaseSemaphore 0x100110d4
ReleaseSRWLockExclusive 0x100110cc
ReleaseSRWLockShared 0x100110b8
WaitForSingleObject 0x100110d0
WaitForSingleObjectEx 0x100110c8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x100110fc
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x10011108
GetTickCount 0x10011104
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetSystemTimePreciseAsFileTime 0x10011110
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1001111c
CreateThreadpoolTimer 0x10011120
SetThreadpoolTimer 0x10011118
WaitForThreadpoolTimerCallbacks 0x10011124
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x10011130
GetTraceEnableLevel 0x1001113c
GetTraceLoggerHandle 0x1001112c
RegisterTraceGuidsW 0x10011138
TraceMessage 0x10011140
UnregisterTraceGuids 0x10011134
api-ms-win-eventing-provider-l1-1-0.dll 6
EventProviderEnabled 0x1001114c
EventRegister 0x10011150
EventSetInformation 0x10011148
EventUnregister 0x10011154
EventWrite 0x1001115c
EventWriteTransfer 0x10011158
msvcrt.dll 36
__CxxFrameHandler3 0x100111d8
__dllonexit 0x100111a8
_amsg_exit 0x100111cc
_callnewh 0x10011184
_CxxThrowException 0x10011174
_except_handler4_common 0x100111bc
_initterm 0x100111c8
_lock 0x100111b4
_onexit 0x100111a4
_purecall 0x10011190
_unlock 0x100111ac
_vsnprintf_s 0x10011194
_vsnwprintf 0x100111c4
_XcptFilter 0x100111d4
??_V@YAXPAX@Z 0x100111d0
??0exception@@QAE@ABQBD@Z 0x10011180
??0exception@@QAE@ABQBDH@Z 0x1001117c
??0exception@@QAE@ABV0@@Z 0x100111e4
??0exception@@QAE@XZ 0x100111b0
??1exception@@UAE@XZ 0x100111e0
??1type_info@@UAE@XZ 0x100111a0
??3@YAXPAX@Z 0x100111c0
?terminate@@YAXXZ 0x100111b8
?what@exception@@UBEPBDXZ 0x10011178
free 0x100111e8
malloc 0x100111dc
memcmp 0x10011198
memcpy 0x10011170
memcpy_s 0x10011164
memmove 0x10011168
memmove_s 0x1001118c
memset 0x100111f0
rand 0x10011188
srand 0x1001116c
time 0x100111ec
wcsnlen 0x1001119c
ntdll.dll 1
NtQueryInformationProcess 0x100111f8
RPCRT4.dll 1
UuidFromStringW 0x10011000