xwizards.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 21
DllCanUnloadNow
#1 · 0xc490
DllGetClassObject
#2 · 0xc4d0
ProcessXMLFileA
#3 · 0xd9d0
ProcessXMLFileW
#4 · 0xda60
ResetRegistrationA
#5 · 0xd3d0
ResetRegistrationW
#6 · 0xd460
RunPropertySheetA
#7 · 0xe7d0
RunPropertySheetW
#8 · 0xe860
RunWizardA
#9 · 0xdf20
RunWizardW
#10 · 0xdfb0
XWProcessXMLFile
#11 · 0xc8f0
XWRegisterHost
#12 · 0xc920
XWRegisterPageWithPage
#13 · 0xcbe0
XWRegisterPageWithTask
#14 · 0xcaf0
XWRegisterTaskWithHost
#15 · 0xca00
XWUnregisterHost
#16 · 0xccd0
XWUnregisterHostTaskLink
#17 · 0xcf70
XWUnregisterPage
#18 · 0xce90
XWUnregisterPagesLink
#19 · 0xd130
XWUnregisterTask
#20 · 0xcdb0
XWUnregisterTaskPageLink
#21 · 0xd050
No function matches your filter.
Imported DLLs & functions 212
GlobalAddAtomA
0x1003b0b0
GlobalGetAtomNameA
0x1003b0ac
GlobalGetAtomNameW
0x1003b0b4
CLSIDFromString
0x1003b0d0
CoCreateInstance
0x1003b0bc
CoFreeUnusedLibrariesEx
0x1003b0c8
CoInitializeEx
0x1003b0e0
CoTaskMemAlloc
0x1003b0d4
CoTaskMemFree
0x1003b0cc
CoTaskMemRealloc
0x1003b0c4
CoUninitialize
0x1003b0dc
StringFromCLSID
0x1003b0c0
StringFromGUID2
0x1003b0d8
CStdStubBuffer2_Connect
0x1003b124
CStdStubBuffer2_CountRefs
0x1003b140
CStdStubBuffer2_Disconnect
0x1003b128
CStdStubBuffer2_QueryInterface
0x1003b10c
NdrProxyForwardingFunction3
0x1003b110
NdrProxyForwardingFunction4
0x1003b100
NdrProxyForwardingFunction5
0x1003b0fc
NdrProxyForwardingFunction6
0x1003b154
NdrProxyForwardingFunction7
0x1003b118
NdrProxyForwardingFunction8
0x1003b13c
NdrProxyForwardingFunction9
0x1003b0f0
ObjectStublessClient10
0x1003b0ec
ObjectStublessClient11
0x1003b144
ObjectStublessClient12
0x1003b14c
ObjectStublessClient13
0x1003b11c
ObjectStublessClient14
0x1003b148
ObjectStublessClient15
0x1003b12c
ObjectStublessClient16
0x1003b104
ObjectStublessClient17
0x1003b0e8
ObjectStublessClient18
0x1003b134
ObjectStublessClient19
0x1003b108
ObjectStublessClient3
0x1003b138
ObjectStublessClient4
0x1003b130
ObjectStublessClient5
0x1003b114
ObjectStublessClient6
0x1003b0f8
ObjectStublessClient7
0x1003b120
ObjectStublessClient8
0x1003b0f4
ObjectStublessClient9
0x1003b150
OutputDebugStringA
0x1003b15c
DelayLoadFailureHook
0x1003b164
ResolveDelayLoadedAPI
0x1003b16c
GetLastError
0x1003b17c
RaiseException
0x1003b180
SetLastError
0x1003b178
SetUnhandledExceptionFilter
0x1003b184
UnhandledExceptionFilter
0x1003b174
CreateFileW
0x1003b18c
FindFirstFileW
0x1003b194
FindNextFileW
0x1003b19c
GetFullPathNameW
0x1003b198
WriteFile
0x1003b190
GetProcessHeap
0x1003b1b4
HeapAlloc
0x1003b1b0
HeapFree
0x1003b1b8
DisableThreadLibraryCalls
0x1003b1e8
FindResourceExW
0x1003b1d4
FreeLibrary
0x1003b1d0
GetModuleFileNameW
0x1003b1e0
GetModuleHandleW
0x1003b1cc
GetProcAddress
0x1003b1dc
LoadLibraryExW
0x1003b1e4
LoadResource
0x1003b1d8
SizeofResource
0x1003b1ec
FormatMessageW
0x1003b1f4
CreateFileMappingW
0x1003b200
MapViewOfFile
0x1003b1fc
UnmapViewOfFile
0x1003b204
CreateProcessW
0x1003b220
GetCurrentProcess
0x1003b224
GetCurrentProcessId
0x1003b20c
GetCurrentThreadId
0x1003b234
GetExitCodeProcess
0x1003b230
GetThreadId
0x1003b218
TerminateProcess
0x1003b210
TlsAlloc
0x1003b228
TlsFree
0x1003b22c
TlsGetValue
0x1003b21c
TlsSetValue
0x1003b214
OpenProcess
0x1003b23c
QueryPerformanceCounter
0x1003b244
RegCloseKey
0x1003b25c
RegCreateKeyExW
0x1003b264
RegDeleteValueW
0x1003b250
RegEnumKeyExW
0x1003b268
RegOpenKeyExW
0x1003b254
RegQueryInfoKeyW
0x1003b260
RegQueryValueExW
0x1003b24c
RegSetValueExW
0x1003b258
CompareStringW
0x1003b274
MultiByteToWideChar
0x1003b278
WideCharToMultiByte
0x1003b270
CharNextW
0x1003b280
lstrcmpiW
0x1003b288
CreateMutexW
0x1003b2b4
DeleteCriticalSection
0x1003b2b0
EnterCriticalSection
0x1003b290
InitializeCriticalSection
0x1003b2a4
InitializeCriticalSectionAndSpinCount
0x1003b294
LeaveCriticalSection
0x1003b2a0
OpenMutexW
0x1003b29c
ReleaseMutex
0x1003b298
ReleaseSemaphore
0x1003b2a8
WaitForSingleObject
0x1003b2ac
Sleep
0x1003b2bc
CreateSemaphoreW
0x1003b2c4
GetSystemTimeAsFileTime
0x1003b2d4
GetTickCount
0x1003b2cc
GetVersionExW
0x1003b2d0
GetTraceEnableFlags
0x1003b2ec
GetTraceEnableLevel
0x1003b2e8
GetTraceLoggerHandle
0x1003b2e0
RegisterTraceGuidsW
0x1003b2f0
TraceMessage
0x1003b2e4
UnregisterTraceGuids
0x1003b2dc
EventRegister
0x1003b2f8
EventUnregister
0x1003b300
EventWriteTransfer
0x1003b2fc
CommandLineToArgvW
0x1003b308
msvcrt.dll
43
__CxxFrameHandler3
0x1003b320
__dllonexit
0x1003b348
__RTDynamicCast
0x1003b324
_amsg_exit
0x1003b368
_callnewh
0x1003b37c
_CxxThrowException
0x1003b378
_errno
0x1003b35c
_except_handler4_common
0x1003b360
_initterm
0x1003b364
_lock
0x1003b350
_onexit
0x1003b344
_purecall
0x1003b3a8
_unlock
0x1003b34c
_vsnprintf
0x1003b32c
_vsnwprintf
0x1003b334
_wcsicmp
0x1003b3ac
_wcstoi64
0x1003b328
_wcstoui64
0x1003b390
_XcptFilter
0x1003b36c
??0exception@@QAE@ABQBD@Z
0x1003b374
??0exception@@QAE@ABV0@@Z
0x1003b388
??0exception@@QAE@XZ
0x1003b38c
??1exception@@UAE@XZ
0x1003b384
??1type_info@@UAE@XZ
0x1003b340
?terminate@@YAXXZ
0x1003b354
?what@exception@@UBEPBDXZ
0x1003b380
free
0x1003b3a4
iswdigit
0x1003b318
iswxdigit
0x1003b338
malloc
0x1003b3a0
memcmp
0x1003b394
memcpy
0x1003b33c
memcpy_s
0x1003b3b0
memmove_s
0x1003b398
memset
0x1003b3b8
realloc
0x1003b358
sscanf_s
0x1003b370
toupper
0x1003b314
towlower
0x1003b330
wcsncpy_s
0x1003b39c
wcstod
0x1003b3b4
wcstol
0x1003b31c
wcstoul
0x1003b310
NtClose
0x1003b3c8
NtOpenProcessToken
0x1003b3c4
NtOpenThreadToken
0x1003b3cc
NtQueryInformationToken
0x1003b3c0
RPCRT4.dll
20
CStdStubBuffer_AddRef
0x1003b014
CStdStubBuffer_Connect
0x1003b030
CStdStubBuffer_CountRefs
0x1003b04c
CStdStubBuffer_DebugServerQueryInterface
0x1003b03c
CStdStubBuffer_DebugServerRelease
0x1003b00c
CStdStubBuffer_Disconnect
0x1003b01c
CStdStubBuffer_Invoke
0x1003b000
CStdStubBuffer_IsIIDSupported
0x1003b028
CStdStubBuffer_QueryInterface
0x1003b004
IUnknown_AddRef_Proxy
0x1003b040
IUnknown_QueryInterface_Proxy
0x1003b024
IUnknown_Release_Proxy
0x1003b010
NdrCStdStubBuffer_Release
0x1003b034
NdrCStdStubBuffer2_Release
0x1003b038
NdrDllCanUnloadNow
0x1003b02c
NdrDllGetClassObject
0x1003b018
NdrOleAllocate
0x1003b008
NdrOleFree
0x1003b020
NdrStubCall2
0x1003b044
NdrStubForwardingFunction
0x1003b048
USER32.dll
17
DispatchMessageW
0x1003b074
EnumChildWindows
0x1003b07c
FindWindowW
0x1003b064
GetParent
0x1003b068
GetPropW
0x1003b084
GetWindowLongW
0x1003b098
IsWindow
0x1003b08c
MessageBoxW
0x1003b0a0
MsgWaitForMultipleObjectsEx
0x1003b0a4
PeekMessageW
0x1003b070
ReplyMessage
0x1003b094
SetForegroundWindow
0x1003b06c
SetProcessDPIAware
0x1003b080
SetPropW
0x1003b090
SetWindowLongW
0x1003b078
ShowWindowAsync
0x1003b088
TranslateMessage
0x1003b09c
No function matches your filter.