SettingSyncCore.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x1e5d0
DllGetActivationFactory
#2 · 0x1e620
DllGetClassObject
#3 · 0x1e600
No function matches your filter.
Imported DLLs & functions 287
DebugBreak
0x1009f024
IsDebuggerPresent
0x1009f028
OutputDebugStringW
0x1009f02c
DelayLoadFailureHook
0x1009f034
ResolveDelayLoadedAPI
0x1009f03c
GetLastError
0x1009f044
RaiseException
0x1009f04c
SetLastError
0x1009f050
SetUnhandledExceptionFilter
0x1009f054
UnhandledExceptionFilter
0x1009f048
CompareFileTime
0x1009f08c
CreateDirectoryW
0x1009f078
CreateFileW
0x1009f090
DeleteFileW
0x1009f060
FindClose
0x1009f07c
FindFirstFileW
0x1009f094
FindNextFileW
0x1009f074
GetDriveTypeW
0x1009f06c
GetFileAttributesExW
0x1009f088
GetFileAttributesW
0x1009f080
GetFileTime
0x1009f070
GetFullPathNameW
0x1009f098
GetTempFileNameW
0x1009f05c
RemoveDirectoryW
0x1009f068
SetFileAttributesW
0x1009f064
SetFileTime
0x1009f084
GetTempPathW
0x1009f0a0
CopyFileExW
0x1009f0a8
CreateHardLinkW
0x1009f0b4
GetFileInformationByHandleEx
0x1009f0b8
MoveFileExW
0x1009f0ac
ReadDirectoryChangesW
0x1009f0b0
CloseHandle
0x1009f0c0
GetProcessHeap
0x1009f0cc
HeapAlloc
0x1009f0c8
HeapFree
0x1009f0d0
HeapReAlloc
0x1009f0d4
LocalAlloc
0x1009f0dc
LocalFree
0x1009f0e0
LocalReAlloc
0x1009f0e4
VerifyVersionInfoW
0x1009f0f8
DisableThreadLibraryCalls
0x1009f104
FindStringOrdinal
0x1009f108
GetModuleFileNameA
0x1009f110
GetModuleHandleExW
0x1009f10c
GetModuleHandleW
0x1009f100
GetProcAddress
0x1009f114
PathAllocCanonicalize
0x1009f128
PathAllocCombine
0x1009f134
PathCchAppend
0x1009f12c
PathCchCombine
0x1009f130
PathCchRemoveFileSpec
0x1009f138
ExpandEnvironmentStringsW
0x1009f140
GetCurrentProcess
0x1009f148
GetCurrentProcessId
0x1009f164
GetCurrentThread
0x1009f158
GetCurrentThreadId
0x1009f15c
OpenProcessToken
0x1009f150
OpenThreadToken
0x1009f160
ProcessIdToSessionId
0x1009f154
TerminateProcess
0x1009f14c
OpenProcess
0x1009f16c
QueryPerformanceCounter
0x1009f174
QueryFullProcessImageNameW
0x1009f17c
RegCloseKey
0x1009f1b0
RegCreateKeyExW
0x1009f1a8
RegDeleteTreeW
0x1009f190
RegDeleteValueW
0x1009f18c
RegEnumKeyExW
0x1009f1b4
RegEnumValueW
0x1009f19c
RegGetValueW
0x1009f194
RegNotifyChangeKeyValue
0x1009f198
RegOpenCurrentUser
0x1009f188
RegOpenKeyExW
0x1009f184
RegQueryInfoKeyW
0x1009f1a4
RegQueryValueExW
0x1009f1a0
RegSetValueExW
0x1009f1ac
RegDeleteKeyValueW
0x1009f1bc
RegDeleteKeyW
0x1009f1c4
PathFileExistsW
0x1009f1e0
PathFindExtensionW
0x1009f1d8
PathFindFileNameW
0x1009f1cc
PathGetCharTypeW
0x1009f1dc
PathGetDriveNumberW
0x1009f1d4
PathIsUNCW
0x1009f1e4
PathRemoveFileSpecW
0x1009f1e8
PathStripPathW
0x1009f1d0
QISearch
0x1009f1f8
StrRChrW
0x1009f1f0
StrToIntExW
0x1009f1f4
CompareStringOrdinal
0x1009f200
CharLowerBuffW
0x1009f208
AcquireSRWLockExclusive
0x1009f224
AcquireSRWLockShared
0x1009f258
CreateEventExW
0x1009f254
CreateMutexExW
0x1009f21c
CreateSemaphoreExW
0x1009f238
DeleteCriticalSection
0x1009f244
EnterCriticalSection
0x1009f24c
InitializeCriticalSectionEx
0x1009f240
InitializeSRWLock
0x1009f234
LeaveCriticalSection
0x1009f248
OpenEventW
0x1009f25c
OpenSemaphoreW
0x1009f220
ReleaseMutex
0x1009f228
ReleaseSemaphore
0x1009f230
ReleaseSRWLockExclusive
0x1009f210
ReleaseSRWLockShared
0x1009f250
SetEvent
0x1009f214
TryAcquireSRWLockExclusive
0x1009f218
WaitForSingleObject
0x1009f22c
WaitForSingleObjectEx
0x1009f23c
InitOnceBeginInitialize
0x1009f264
InitOnceComplete
0x1009f268
InitOnceExecuteOnce
0x1009f270
Sleep
0x1009f26c
GetSystemTime
0x1009f280
GetSystemTimeAsFileTime
0x1009f27c
GetTickCount
0x1009f278
CancelThreadpoolIo
0x1009f2ac
CloseThreadpoolIo
0x1009f2c4
CloseThreadpoolTimer
0x1009f29c
CloseThreadpoolWait
0x1009f2c0
CreateThreadpoolIo
0x1009f2bc
CreateThreadpoolTimer
0x1009f2a0
CreateThreadpoolWait
0x1009f2a8
DisassociateCurrentThreadFromCallback
0x1009f2b4
SetThreadpoolTimer
0x1009f298
SetThreadpoolWait
0x1009f2b0
StartThreadpoolIo
0x1009f2a4
WaitForThreadpoolIoCallbacks
0x1009f2c8
WaitForThreadpoolTimerCallbacks
0x1009f294
WaitForThreadpoolWaitCallbacks
0x1009f2b8
FileTimeToSystemTime
0x1009f2d0
GetFileVersionInfoExW
0x1009f2e4
GetFileVersionInfoSizeExW
0x1009f2ec
VerQueryValueW
0x1009f2e8
GetRestrictedErrorInfo
0x1009f2f8
RoOriginateError
0x1009f2fc
RoOriginateErrorW
0x1009f304
RoTransformError
0x1009f300
SetRestrictedErrorInfo
0x1009f2f4
IsErrorPropagationEnabled
0x1009f310
RoGetMatchingRestrictedErrorInfo
0x1009f314
RoReportFailedDelegate
0x1009f30c
WindowsCompareStringOrdinal
0x1009f338
WindowsCreateString
0x1009f344
WindowsCreateStringReference
0x1009f33c
WindowsDeleteString
0x1009f328
WindowsDuplicateString
0x1009f334
WindowsGetStringRawBuffer
0x1009f330
WindowsIsStringEmpty
0x1009f340
WindowsStringHasEmbeddedNull
0x1009f32c
GetTraceEnableFlags
0x1009f34c
GetTraceEnableLevel
0x1009f358
GetTraceLoggerHandle
0x1009f35c
RegisterTraceGuidsW
0x1009f360
TraceMessage
0x1009f354
UnregisterTraceGuids
0x1009f350
EventActivityIdControl
0x1009f374
EventRegister
0x1009f36c
EventSetInformation
0x1009f378
EventUnregister
0x1009f370
EventWriteTransfer
0x1009f368
AddAccessAllowedAceEx
0x1009f390
AddAccessDeniedAceEx
0x1009f38c
AddAce
0x1009f3b0
CopySid
0x1009f388
DeleteAce
0x1009f3ac
EqualSid
0x1009f398
GetAce
0x1009f3a4
GetAclInformation
0x1009f3a8
GetLengthSid
0x1009f39c
GetSecurityDescriptorControl
0x1009f394
GetSecurityDescriptorSacl
0x1009f3a0
GetTokenInformation
0x1009f380
InitializeAcl
0x1009f3b4
IsValidSid
0x1009f384
CryptAcquireContextW
0x1009f3c8
CryptCreateHash
0x1009f3c4
CryptDestroyHash
0x1009f3bc
CryptGetHashParam
0x1009f3d0
CryptHashData
0x1009f3cc
CryptReleaseContext
0x1009f3c0
SHStrDupW
0x1009f3d8
SHDeleteValueW
0x1009f3e4
SHGetValueW
0x1009f3e8
SHRegGetValueW
0x1009f3ec
SHSetValueW
0x1009f3e0
IStream_Copy
0x1009f3fc
IStream_Read
0x1009f404
IStream_Reset
0x1009f400
IStream_Size
0x1009f3f8
IStream_Write
0x1009f408
SHCreateMemStream
0x1009f3f4
SHCreateStreamOnFileEx
0x1009f40c
IsOS
0x1009f414
SHTaskPoolAllowThreadReuse
0x1009f420
SHTaskPoolQueueTask
0x1009f41c
0x1009f428
BCryptCloseAlgorithmProvider
0x1009f438
BCryptCreateHash
0x1009f440
BCryptDestroyHash
0x1009f434
BCryptFinishHash
0x1009f448
BCryptGetProperty
0x1009f444
BCryptHashData
0x1009f43c
BCryptOpenAlgorithmProvider
0x1009f430
msvcrt.dll
42
__CxxFrameHandler3
0x1009f4cc
__dllonexit
0x1009f470
_amsg_exit
0x1009f488
_CxxThrowException
0x1009f4e4
_except_handler4_common
0x1009f454
_ftol2
0x1009f4d0
_get_errno
0x1009f4bc
_initterm
0x1009f47c
_lock
0x1009f478
_onexit
0x1009f46c
_purecall
0x1009f4a8
_set_errno
0x1009f4c0
_unlock
0x1009f474
_vsnprintf_s
0x1009f490
_vsnwprintf
0x1009f4d4
_wcsicmp
0x1009f460
_XcptFilter
0x1009f48c
??0exception@@QAE@ABQBD@Z
0x1009f4d8
??0exception@@QAE@ABQBDH@Z
0x1009f4dc
??0exception@@QAE@ABV0@@Z
0x1009f494
??0exception@@QAE@XZ
0x1009f49c
??1exception@@UAE@XZ
0x1009f4a4
??1type_info@@UAE@XZ
0x1009f458
?terminate@@YAXXZ
0x1009f468
?what@exception@@UBEPBDXZ
0x1009f4e0
free
0x1009f4f0
iswalnum
0x1009f484
malloc
0x1009f480
memcmp
0x1009f450
memcpy
0x1009f4e8
memcpy_s
0x1009f4b8
memmove
0x1009f4ec
memmove_s
0x1009f4b4
memset
0x1009f4f4
realloc
0x1009f4b0
swscanf_s
0x1009f4c8
wcschr
0x1009f498
wcsncmp
0x1009f4a0
wcsncpy_s
0x1009f45c
wcsrchr
0x1009f464
wcsstr
0x1009f4c4
wcstok_s
0x1009f4ac
ntdll.dll
19
EtwEventWriteTransfer
0x1009f540
NtCreateWnfStateName
0x1009f52c
NtDeleteWnfStateName
0x1009f524
NtQueryWnfStateData
0x1009f510
NtSetInformationFile
0x1009f50c
RtlAcquireResourceExclusive
0x1009f508
RtlAcquireResourceShared
0x1009f4fc
RtlAllocateHeap
0x1009f518
RtlComputeCrc32
0x1009f520
RtlConvertSidToUnicodeString
0x1009f514
RtlDeleteResource
0x1009f500
RtlFreeHeap
0x1009f51c
RtlFreeUnicodeString
0x1009f53c
RtlInitializeResource
0x1009f504
RtlMapGenericMask
0x1009f538
RtlNtStatusToDosError
0x1009f530
RtlReleaseResource
0x1009f544
RtlSubscribeWnfStateChangeNotification
0x1009f528
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1009f534
PolicyManager_GetPolicyInt
0x1009f54c
0x1009f554
Pdcv2ActivationClientActivate
0x1009f010
Pdcv2ActivationClientDeactivate
0x1009f01c
Pdcv2ActivationClientRegister
0x1009f014
Pdcv2ActivationClientUnregister
0x1009f018
No function matches your filter.