provcore.dll
Description: Microsoft Wireless Provisioning Core
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4355
Architecture: 32-bit
Operating System: Windows NT
SHA256: a602a8049831ad2e283f9fe723d1e0ab
File Size: 518.5 KB
Uploaded At: Dec. 1, 2025, 8:03 a.m.
Views: 15
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x10110)
- DllGetActivationFactory (Ordinal: 2, Address: 0x10080)
- DllGetClassObject (Ordinal: 3, Address: 0x10160)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x10073024)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalGetAtomNameW (Address: 0x1007302c)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x10073034)
- IsDebuggerPresent (Address: 0x1007303c)
- OutputDebugStringW (Address: 0x10073038)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x10073044)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1007304c)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x10073064)
- RaiseException (Address: 0x1007305c)
- SetLastError (Address: 0x10073054)
- SetUnhandledExceptionFilter (Address: 0x10073060)
- UnhandledExceptionFilter (Address: 0x10073058)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x1007306c)
- DeleteFileW (Address: 0x10073070)
- GetTempFileNameW (Address: 0x10073078)
- WriteFile (Address: 0x10073074)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x10073080)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x10073088)
- DuplicateHandle (Address: 0x1007308c)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x10073098)
- HeapAlloc (Address: 0x1007309c)
- HeapFree (Address: 0x10073094)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x100730a4)
- GlobalFree (Address: 0x100730a8)
- LocalAlloc (Address: 0x100730ac)
- LocalFree (Address: 0x100730b0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x100730bc)
- GlobalUnlock (Address: 0x100730b8)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x100730c4)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x100730e8)
- GetModuleFileNameA (Address: 0x100730dc)
- GetModuleFileNameW (Address: 0x100730e0)
- GetModuleHandleExW (Address: 0x100730d0)
- GetModuleHandleW (Address: 0x100730d8)
- GetProcAddress (Address: 0x100730d4)
- LoadLibraryExW (Address: 0x100730e4)
- LoadStringW (Address: 0x100730cc)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x100730f0)
- LocaleNameToLCID (Address: 0x100730f4)
api-ms-win-core-namespace-l1-1-0.dll
- AddSIDToBoundaryDescriptor (Address: 0x10073108)
- ClosePrivateNamespace (Address: 0x10073100)
- CreateBoundaryDescriptorW (Address: 0x100730fc)
- CreatePrivateNamespaceW (Address: 0x1007310c)
- DeleteBoundaryDescriptor (Address: 0x10073110)
- OpenPrivateNamespaceW (Address: 0x10073104)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x10073118)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x10073134)
- GetCurrentProcessId (Address: 0x10073144)
- GetCurrentThread (Address: 0x10073120)
- GetCurrentThreadId (Address: 0x1007312c)
- GetExitCodeThread (Address: 0x10073138)
- GetProcessId (Address: 0x10073124)
- OpenProcessToken (Address: 0x1007313c)
- OpenThreadToken (Address: 0x10073140)
- SetThreadPriority (Address: 0x10073130)
- TerminateProcess (Address: 0x10073128)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1007314c)
- OpenProcess (Address: 0x10073150)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x10073158)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x10073160)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x10073184)
- RegCreateKeyExW (Address: 0x10073170)
- RegDeleteTreeW (Address: 0x10073180)
- RegDeleteValueW (Address: 0x10073174)
- RegEnumKeyExW (Address: 0x1007317c)
- RegGetValueW (Address: 0x10073168)
- RegOpenCurrentUser (Address: 0x1007316c)
- RegOpenKeyExW (Address: 0x10073178)
- RegSetValueExW (Address: 0x10073188)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x10073194)
- CreateActCtxW (Address: 0x10073198)
- DeactivateActCtx (Address: 0x1007319c)
- ReleaseActCtx (Address: 0x10073190)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x100731a8)
- CompareStringOrdinal (Address: 0x100731a4)
- WideCharToMultiByte (Address: 0x100731ac)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x10073200)
- AcquireSRWLockShared (Address: 0x100731fc)
- CreateEventExW (Address: 0x100731d4)
- CreateEventW (Address: 0x100731d0)
- CreateMutexExW (Address: 0x100731e8)
- CreateMutexW (Address: 0x100731ec)
- CreateSemaphoreExW (Address: 0x100731b4)
- DeleteCriticalSection (Address: 0x10073208)
- EnterCriticalSection (Address: 0x10073204)
- InitializeCriticalSection (Address: 0x100731f4)
- InitializeCriticalSectionAndSpinCount (Address: 0x100731f0)
- InitializeSRWLock (Address: 0x100731c4)
- LeaveCriticalSection (Address: 0x100731e4)
- OpenSemaphoreW (Address: 0x100731dc)
- ReleaseMutex (Address: 0x100731d8)
- ReleaseSemaphore (Address: 0x100731b8)
- ReleaseSRWLockExclusive (Address: 0x1007320c)
- ReleaseSRWLockShared (Address: 0x100731f8)
- ResetEvent (Address: 0x100731cc)
- SetEvent (Address: 0x100731c8)
- WaitForMultipleObjectsEx (Address: 0x100731c0)
- WaitForSingleObject (Address: 0x100731bc)
- WaitForSingleObjectEx (Address: 0x100731e0)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x10073214)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTime (Address: 0x1007321c)
- GetSystemTimeAsFileTime (Address: 0x10073220)
- GetTickCount (Address: 0x10073224)
- GetTickCount64 (Address: 0x10073228)
api-ms-win-core-threadpool-l1-2-0.dll
- CallbackMayRunLong (Address: 0x10073240)
- CloseThreadpoolTimer (Address: 0x10073248)
- CreateThreadpoolTimer (Address: 0x10073230)
- FreeLibraryWhenCallbackReturns (Address: 0x1007323c)
- SetThreadpoolTimer (Address: 0x10073238)
- TrySubmitThreadpoolCallback (Address: 0x10073244)
- WaitForThreadpoolTimerCallbacks (Address: 0x10073234)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x10073254)
- SystemTimeToFileTime (Address: 0x10073250)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1007325c)
- EncodePointer (Address: 0x10073260)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x100732f4)
- __std_terminate (Address: 0x100732f0)
- __std_type_info_compare (Address: 0x100732ec)
- _CxxThrowException (Address: 0x100732c8)
- _except_handler4_common (Address: 0x100732c0)
- _o___std_exception_copy (Address: 0x100732d0)
- _o___std_exception_destroy (Address: 0x100732cc)
- _o___std_type_info_destroy_list (Address: 0x100732c4)
- _o___stdio_common_vsnprintf_s (Address: 0x100732fc)
- _o___stdio_common_vswprintf (Address: 0x100732e0)
- _o___stdio_common_vswprintf_s (Address: 0x100732dc)
- _o___stdio_common_vswscanf (Address: 0x100732d8)
- _o__beginthreadex (Address: 0x100732e4)
- _o__callnewh (Address: 0x10073298)
- _o__cexit (Address: 0x100732d4)
- _o__configure_narrow_argv (Address: 0x10073268)
- _o__crt_atexit (Address: 0x1007326c)
- _o__errno (Address: 0x10073270)
- _o__execute_onexit_table (Address: 0x10073274)
- _o__initialize_narrow_environment (Address: 0x10073278)
- _o__initialize_onexit_table (Address: 0x1007327c)
- _o__invalid_parameter_noinfo (Address: 0x10073280)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x10073284)
- _o__purecall (Address: 0x10073288)
- _o__register_onexit_function (Address: 0x1007328c)
- _o__seh_filter_dll (Address: 0x10073290)
- _o__wcsicmp (Address: 0x1007329c)
- _o__wtoi (Address: 0x100732a0)
- _o_free (Address: 0x100732a4)
- _o_malloc (Address: 0x100732a8)
- _o_memcpy_s (Address: 0x100732ac)
- _o_realloc (Address: 0x100732b0)
- _o_wcscpy_s (Address: 0x100732b4)
- _o_wcstod (Address: 0x100732b8)
- _o_wcstoul (Address: 0x100732bc)
- memcmp (Address: 0x10073300)
- memcpy (Address: 0x10073304)
- memmove (Address: 0x10073294)
- strchr (Address: 0x100732e8)
- wcschr (Address: 0x100732f8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1007330c)
- _initterm_e (Address: 0x10073310)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x10073318)
api-ms-win-devices-query-l1-1-0.dll
- DevFreeObjectProperties (Address: 0x10073324)
- DevGetObjectProperties (Address: 0x10073320)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
- MsgWaitForMultipleObjectsEx (Address: 0x1007332c)
api-ms-win-security-base-l1-1-0.dll
- AddAccessAllowedAce (Address: 0x1007333c)
- AllocateAndInitializeSid (Address: 0x10073348)
- CheckTokenMembership (Address: 0x10073354)
- CopySid (Address: 0x10073340)
- CreateWellKnownSid (Address: 0x10073350)
- FreeSid (Address: 0x1007334c)
- GetLengthSid (Address: 0x10073334)
- GetTokenInformation (Address: 0x1007335c)
- InitializeAcl (Address: 0x10073338)
- InitializeSecurityDescriptor (Address: 0x10073358)
- SetSecurityDescriptorDacl (Address: 0x10073344)
MobileNetworking.dll
- GetPersistentRegPath (Address: 0x10073000)
msvcp_win.dll
- _Wcscoll (Address: 0x100733b0)
- _Wcsxfrm (Address: 0x100733ac)
- ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x10073374)
- ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x10073420)
- ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x10073368)
- ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x100733a0)
- ?_Incref@facet@locale@std@@UAEXXZ (Address: 0x10073370)
- ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x100733a8)
- ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z (Address: 0x10073400)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100733ec)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x1007341c)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100733e8)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x10073414)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x100733c0)
- ?_Xinvalid_argument@std@@YAXPBD@Z (Address: 0x1007339c)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10073424)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x10073410)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x10073390)
- ??0_Locinfo@std@@QAE@PBD@Z (Address: 0x1007338c)
- ??0_Lockit@std@@QAE@H@Z (Address: 0x100733b8)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100733a4)
- ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x10073418)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x100733d0)
- ??0facet@locale@std@@IAE@I@Z (Address: 0x10073378)
- ??1_Locinfo@std@@QAE@XZ (Address: 0x10073364)
- ??1_Lockit@std@@QAE@XZ (Address: 0x100733b4)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1007340c)
- ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100733bc)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x100733f4)
- ??1facet@locale@std@@MAE@XZ (Address: 0x1007337c)
- ??Bid@locale@std@@QAEIXZ (Address: 0x1007336c)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x100733f8)
- ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x10073394)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x10073398)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100733c4)
- ?is@?$ctype@G@std@@QBE_NFG@Z (Address: 0x10073380)
- ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x100733fc)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x100733cc)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x10073408)
- ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x100733f0)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x100733e4)
- ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ (Address: 0x10073404)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x100733c8)
- ?tolower@?$ctype@G@std@@QBEGG@Z (Address: 0x10073384)
- ?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z (Address: 0x10073388)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x100733e0)
- ?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z (Address: 0x100733d4)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x100733dc)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x100733d8)
ntdll.dll
- EtwEventActivityIdControl (Address: 0x10073478)
- EtwEventRegister (Address: 0x10073468)
- EtwEventSetInformation (Address: 0x1007346c)
- EtwEventUnregister (Address: 0x10073470)
- EtwEventWriteTransfer (Address: 0x1007344c)
- EtwGetTraceEnableFlags (Address: 0x1007345c)
- EtwGetTraceEnableLevel (Address: 0x10073458)
- EtwGetTraceLoggerHandle (Address: 0x10073454)
- EtwRegisterTraceGuidsW (Address: 0x10073460)
- EtwTraceMessage (Address: 0x10073450)
- EtwUnregisterTraceGuids (Address: 0x10073464)
- NtQueryInformationToken (Address: 0x10073430)
- NtQueryKey (Address: 0x10073448)
- RtlAllocateHeap (Address: 0x1007343c)
- RtlCompareUnicodeString (Address: 0x10073444)
- RtlEqualSid (Address: 0x10073438)
- RtlFreeHeap (Address: 0x1007342c)
- RtlGetPersistedStateLocation (Address: 0x1007347c)
- RtlInitUnicodeString (Address: 0x10073434)
- RtlLoadString (Address: 0x10073474)
- RtlNtStatusToDosErrorNoTeb (Address: 0x10073440)
RPCRT4.dll
- NdrClientCall4 (Address: 0x10073010)
- RpcBindingBind (Address: 0x10073008)
- RpcBindingCreateW (Address: 0x10073018)
- RpcBindingFree (Address: 0x10073014)
- RpcExceptionFilter (Address: 0x1007301c)
- RpcServerInqCallAttributesW (Address: 0x1007300c)