xwtpw32.dll

Description: Extensible Wizard Type Plugin for Win32

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: c2c4d24a19d168a6c30c60731eaf30dc

File Size: 117.0 KB

Uploaded At: Dec. 1, 2025, 8:08 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x6260)
  • DllGetClassObject (Ordinal: 2, Address: 0x6280)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll
  • GlobalAddAtomW (Address: 0x100170bc)
  • GlobalDeleteAtom (Address: 0x100170c0)
  • GlobalGetAtomNameW (Address: 0x100170b8)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x100170e0)
  • CoCreateGuid (Address: 0x100170d0)
  • CoCreateInstance (Address: 0x100170cc)
  • CoTaskMemAlloc (Address: 0x100170c8)
  • CoTaskMemFree (Address: 0x100170dc)
  • CoTaskMemRealloc (Address: 0x100170d4)
  • StringFromGUID2 (Address: 0x100170d8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100170ec)
  • OutputDebugStringA (Address: 0x100170e8)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x100170f4)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x100170fc)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10017110)
  • RaiseException (Address: 0x10017114)
  • SetLastError (Address: 0x1001710c)
  • SetUnhandledExceptionFilter (Address: 0x10017104)
  • UnhandledExceptionFilter (Address: 0x10017108)
api-ms-win-core-file-l1-1-0.dll
  • GetFullPathNameW (Address: 0x1001711c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10017124)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10017134)
  • HeapAlloc (Address: 0x10017130)
  • HeapFree (Address: 0x10017138)
  • HeapReAlloc (Address: 0x1001712c)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x10017140)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10017170)
  • FindResourceExW (Address: 0x10017160)
  • FreeLibrary (Address: 0x10017148)
  • GetModuleFileNameA (Address: 0x10017168)
  • GetModuleFileNameW (Address: 0x10017150)
  • GetModuleHandleA (Address: 0x10017158)
  • GetModuleHandleW (Address: 0x1001714c)
  • GetProcAddress (Address: 0x1001716c)
  • LoadLibraryExW (Address: 0x10017164)
  • LoadResource (Address: 0x1001715c)
  • SizeofResource (Address: 0x10017154)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x10017178)
  • LoadLibraryW (Address: 0x1001717c)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x10017184)
api-ms-win-core-memory-l1-1-0.dll
  • WriteProcessMemory (Address: 0x1001718c)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100171ac)
  • GetCurrentProcessId (Address: 0x100171a4)
  • GetCurrentThreadId (Address: 0x100171a8)
  • TerminateProcess (Address: 0x10017194)
  • TlsAlloc (Address: 0x100171b0)
  • TlsFree (Address: 0x1001719c)
  • TlsGetValue (Address: 0x10017198)
  • TlsSetValue (Address: 0x100171a0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100171b8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100171c8)
  • RegCreateKeyExW (Address: 0x100171d0)
  • RegDeleteValueW (Address: 0x100171d4)
  • RegEnumKeyExW (Address: 0x100171dc)
  • RegOpenKeyExW (Address: 0x100171cc)
  • RegQueryInfoKeyW (Address: 0x100171c4)
  • RegQueryValueExW (Address: 0x100171d8)
  • RegSetValueExW (Address: 0x100171c0)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x100171e8)
  • PathUnExpandEnvStringsW (Address: 0x100171e4)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x100171f4)
  • CreateActCtxW (Address: 0x100171fc)
  • DeactivateActCtx (Address: 0x100171f0)
  • ReleaseActCtx (Address: 0x100171f8)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x10017208)
  • WideCharToMultiByte (Address: 0x10017204)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x10017210)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiA (Address: 0x10017218)
  • lstrcmpiW (Address: 0x1001721c)
api-ms-win-core-synch-l1-1-0.dll
  • CreateMutexW (Address: 0x1001722c)
  • DeleteCriticalSection (Address: 0x10017224)
  • EnterCriticalSection (Address: 0x10017234)
  • InitializeCriticalSection (Address: 0x10017228)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1001723c)
  • LeaveCriticalSection (Address: 0x10017238)
  • ReleaseMutex (Address: 0x10017230)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x10017244)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1001724c)
  • GetTickCount (Address: 0x10017250)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x10017260)
  • GetTraceEnableLevel (Address: 0x10017258)
  • GetTraceLoggerHandle (Address: 0x10017268)
  • RegisterTraceGuidsW (Address: 0x1001725c)
  • TraceMessage (Address: 0x1001726c)
  • UnregisterTraceGuids (Address: 0x10017264)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1001727c)
  • EventUnregister (Address: 0x10017278)
  • EventWriteTransfer (Address: 0x10017274)
DUI70.dll
  • ??0IXProviderCP@DirectUI@@QAE@XZ (Address: 0x10017014)
  • ?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z (Address: 0x10017008)
  • ?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z (Address: 0x10017000)
  • ?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z (Address: 0x1001702c)
  • ?Destroy@DUIXmlParser@DirectUI@@QAEXXZ (Address: 0x10017024)
  • ?Destroy@Element@DirectUI@@QAEJ_N@Z (Address: 0x1001700c)
  • ?SetAccessible@Element@DirectUI@@QAEJ_N@Z (Address: 0x10017010)
  • ?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z (Address: 0x10017028)
  • CreateDUIWrapperEx (Address: 0x1001701c)
  • InitProcessPriv (Address: 0x10017020)
  • InitThread (Address: 0x10017004)
  • UnInitProcessPriv (Address: 0x10017030)
  • UnInitThread (Address: 0x10017018)
GDI32.dll
  • CreateFontIndirectW (Address: 0x1001703c)
  • DeleteObject (Address: 0x10017040)
  • GetObjectW (Address: 0x10017038)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10017288)
  • __dllonexit (Address: 0x10017298)
  • __RTDynamicCast (Address: 0x100172fc)
  • _amsg_exit (Address: 0x100172cc)
  • _callnewh (Address: 0x100172f4)
  • _CxxThrowException (Address: 0x100172c8)
  • _errno (Address: 0x100172b0)
  • _except_handler4_common (Address: 0x100172f8)
  • _initterm (Address: 0x100172f0)
  • _lock (Address: 0x100172a0)
  • _onexit (Address: 0x10017294)
  • _purecall (Address: 0x100172c0)
  • _unlock (Address: 0x100172dc)
  • _vsnwprintf (Address: 0x100172ac)
  • _XcptFilter (Address: 0x100172ec)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x100172d0)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x100172d4)
  • ??0exception@@QAE@XZ (Address: 0x100172c4)
  • ??1exception@@UAE@XZ (Address: 0x100172b8)
  • ??1type_info@@UAE@XZ (Address: 0x10017290)
  • ?terminate@@YAXXZ (Address: 0x100172a4)
  • ?what@exception@@UBEPBDXZ (Address: 0x100172b4)
  • free (Address: 0x100172d8)
  • malloc (Address: 0x100172e4)
  • memcpy (Address: 0x1001728c)
  • memcpy_s (Address: 0x100172bc)
  • memmove_s (Address: 0x100172e0)
  • memset (Address: 0x10017300)
  • realloc (Address: 0x100172a8)
  • tolower (Address: 0x10017284)
  • towlower (Address: 0x1001729c)
  • wcsncpy_s (Address: 0x100172e8)
USER32.dll
  • CallWindowProcW (Address: 0x10017050)
  • DestroyWindow (Address: 0x10017060)
  • EnumPropsA (Address: 0x10017084)
  • EnumPropsExA (Address: 0x1001709c)
  • EnumPropsExW (Address: 0x10017088)
  • EnumPropsW (Address: 0x1001708c)
  • FindWindowExW (Address: 0x100170ac)
  • GetFocus (Address: 0x1001705c)
  • GetParent (Address: 0x100170a0)
  • GetPropW (Address: 0x1001706c)
  • GetSystemMetrics (Address: 0x10017078)
  • GetWindowLongW (Address: 0x1001704c)
  • GetWindowRect (Address: 0x10017058)
  • GetWindowTextW (Address: 0x100170a8)
  • IsWindow (Address: 0x10017080)
  • LoadImageW (Address: 0x100170a4)
  • LoadStringW (Address: 0x10017048)
  • MessageBeep (Address: 0x1001707c)
  • MessageBoxW (Address: 0x10017068)
  • PeekMessageW (Address: 0x100170b0)
  • PostMessageW (Address: 0x10017054)
  • PostQuitMessage (Address: 0x10017098)
  • RemovePropW (Address: 0x10017074)
  • SendMessageW (Address: 0x10017070)
  • SetPropW (Address: 0x10017090)
  • SetWindowLongW (Address: 0x10017094)
  • SetWindowPos (Address: 0x10017064)