xwreg.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x6b40
DllGetClassObject
#2 · 0x6b60
No function matches your filter.
Imported DLLs & functions 110
CLSIDFromString
0x10015018
CoCreateInstance
0x10015020
CoTaskMemAlloc
0x10015014
CoTaskMemFree
0x10015024
CoTaskMemRealloc
0x10015028
StringFromGUID2
0x1001501c
OutputDebugStringA
0x10015030
DelayLoadFailureHook
0x10015038
ResolveDelayLoadedAPI
0x10015040
GetLastError
0x10015048
RaiseException
0x10015054
SetUnhandledExceptionFilter
0x1001504c
UnhandledExceptionFilter
0x10015050
DeleteFileW
0x1001506c
FlushFileBuffers
0x1001505c
GetFullPathNameW
0x10015074
GetTempFileNameW
0x10015060
ReadFile
0x10015070
SetFilePointer
0x10015064
WriteFile
0x10015068
GetTempPathW
0x1001507c
DisableThreadLibraryCalls
0x10015090
FindResourceExW
0x10015098
FreeLibrary
0x100150b0
GetModuleFileNameW
0x100150a0
GetModuleHandleW
0x100150ac
GetProcAddress
0x100150a8
LoadLibraryExW
0x10015094
LoadResource
0x1001509c
SizeofResource
0x100150a4
GetCurrentProcess
0x100150c0
GetCurrentProcessId
0x100150c8
GetCurrentThreadId
0x100150bc
OpenProcessToken
0x100150b8
TerminateProcess
0x100150c4
OpenProcess
0x100150d0
QueryPerformanceCounter
0x100150d8
RegCloseKey
0x100150f0
RegCreateKeyExW
0x100150fc
RegDeleteValueW
0x100150ec
RegEnumKeyExW
0x100150f8
RegOpenKeyExW
0x100150e0
RegQueryInfoKeyW
0x100150f4
RegQueryValueExW
0x100150e4
RegRestoreKeyW
0x10015100
RegSetValueExW
0x100150e8
PathFileExistsW
0x10015114
PathUnExpandEnvStringsW
0x10015118
MultiByteToWideChar
0x10015120
CharNextW
0x10015128
lstrcmpiW
0x10015130
CreateMutexW
0x1001514c
DeleteCriticalSection
0x10015148
EnterCriticalSection
0x10015140
InitializeCriticalSection
0x10015150
LeaveCriticalSection
0x1001513c
OpenMutexW
0x10015138
ReleaseMutex
0x10015144
ReleaseSemaphore
0x10015154
Sleep
0x1001515c
CreateSemaphoreW
0x10015164
GetTraceEnableFlags
0x10015180
GetTraceEnableLevel
0x10015188
GetTraceLoggerHandle
0x1001517c
RegisterTraceGuidsW
0x10015178
TraceMessage
0x10015184
UnregisterTraceGuids
0x1001518c
AdjustTokenPrivileges
0x10015194
AllocateAndInitializeSid
0x10015198
CheckTokenMembership
0x1001519c
FreeSid
0x100151a0
msvcrt.dll
29
__CxxFrameHandler3
0x1001520c
__dllonexit
0x100151fc
_amsg_exit
0x100151c4
_callnewh
0x100151b8
_CxxThrowException
0x100151bc
_errno
0x100151d8
_except_handler4_common
0x100151d0
_initterm
0x100151c8
_lock
0x100151f4
_onexit
0x10015200
_purecall
0x10015204
_unlock
0x100151f8
_vsnprintf
0x100151ec
_vsnwprintf
0x100151cc
_XcptFilter
0x100151dc
??0exception@@QAE@ABV0@@Z
0x100151a8
??0exception@@QAE@XZ
0x100151ac
??1exception@@UAE@XZ
0x100151c0
??1type_info@@UAE@XZ
0x10015214
?what@exception@@UBEPBDXZ
0x100151b4
free
0x100151f0
iswxdigit
0x100151b0
malloc
0x100151e8
memcpy_s
0x10015210
memset
0x10015218
realloc
0x100151e0
tolower
0x100151e4
towlower
0x10015208
wcsncpy_s
0x100151d4
DispatchMessageW
0x10015000
MsgWaitForMultipleObjectsEx
0x10015008
PeekMessageW
0x1001500c
TranslateMessage
0x10015004
No function matches your filter.