ProvProvider.dll
v10.0.19041.4355
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DLLGetDISMProviderCLSID
#1 · 0x1a130
DllCanUnloadNow
#2 · 0x1a160
DllGetClassObject
#3 · 0x1a190
DllRegisterServer
#4 · 0x1a1c0
DllUnregisterServer
#5 · 0x1a200
No function matches your filter.
Imported DLLs & functions 263
ADVAPI32.dll
23
AdjustTokenPrivileges
0x1008b004
CloseEncryptedFileRaw
0x1008b050
GetAclInformation
0x1008b024
GetSecurityDescriptorControl
0x1008b01c
GetSecurityDescriptorDacl
0x1008b014
GetSecurityDescriptorGroup
0x1008b010
GetSecurityDescriptorLength
0x1008b020
GetSecurityDescriptorOwner
0x1008b00c
GetSecurityDescriptorSacl
0x1008b018
GetSecurityInfo
0x1008b044
LookupPrivilegeValueW
0x1008b000
OpenEncryptedFileRawW
0x1008b048
OpenProcessToken
0x1008b008
ReadEncryptedFileRaw
0x1008b058
RegCloseKey
0x1008b028
RegCreateKeyExW
0x1008b038
RegGetValueW
0x1008b03c
RegOpenKeyExW
0x1008b02c
RegQueryInfoKeyW
0x1008b034
RegQueryValueExW
0x1008b030
RegSetValueExW
0x1008b040
RevertToSelf
0x1008b054
WriteEncryptedFileRaw
0x1008b04c
BCryptCloseAlgorithmProvider
0x1008b2d0
BCryptCreateHash
0x1008b2c4
BCryptDestroyHash
0x1008b2dc
BCryptFinishHash
0x1008b2d4
BCryptGetProperty
0x1008b2d8
BCryptHashData
0x1008b2c8
BCryptOpenAlgorithmProvider
0x1008b2cc
KERNEL32.dll
120
CloseHandle
0x1008b1c4
CompareStringW
0x1008b0c8
CopyFileExW
0x1008b1c8
CopyFileW
0x1008b13c
CreateDirectoryW
0x1008b1e0
CreateEventW
0x1008b24c
CreateFileMappingW
0x1008b140
CreateFileW
0x1008b1ac
CreateMutexExW
0x1008b228
CreateSemaphoreExW
0x1008b18c
CreateThread
0x1008b204
DebugBreak
0x1008b22c
DeleteCriticalSection
0x1008b0f8
DeleteFileW
0x1008b1c0
DeviceIoControl
0x1008b1a0
DisableThreadLibraryCalls
0x1008b0e4
DosDateTimeToFileTime
0x1008b174
DuplicateHandle
0x1008b248
EnterCriticalSection
0x1008b100
ExpandEnvironmentStringsW
0x1008b1f8
FindClose
0x1008b1a8
FindFirstFileW
0x1008b194
FindNextFileW
0x1008b19c
FindResourceExW
0x1008b07c
FlushFileBuffers
0x1008b1cc
FormatMessageW
0x1008b1fc
FreeLibrary
0x1008b1dc
GetCurrentDirectoryW
0x1008b1d8
GetCurrentProcess
0x1008b0ac
GetCurrentProcessId
0x1008b0f0
GetCurrentThread
0x1008b244
GetCurrentThreadId
0x1008b0f4
GetEnvironmentVariableW
0x1008b098
GetFileAttributesW
0x1008b1b0
GetFileInformationByHandle
0x1008b1b8
GetFileInformationByHandleEx
0x1008b190
GetFileSizeEx
0x1008b1d0
GetFinalPathNameByHandleW
0x1008b1ec
GetFullPathNameW
0x1008b1e4
GetHandleInformation
0x1008b10c
GetLastError
0x1008b09c
GetLongPathNameW
0x1008b1e8
GetModuleFileNameA
0x1008b210
GetModuleFileNameW
0x1008b0ec
GetModuleHandleExW
0x1008b218
GetModuleHandleW
0x1008b134
GetOverlappedResult
0x1008b118
GetPrivateProfileSectionW
0x1008b154
GetProcAddress
0x1008b144
GetProcessHeap
0x1008b090
GetSystemInfo
0x1008b108
GetSystemTimeAsFileTime
0x1008b0b8
GetTempPathW
0x1008b1a4
GetThreadLocale
0x1008b0e0
GetTickCount
0x1008b0bc
GetVersionExW
0x1008b0d0
GetVolumeInformationByHandleW
0x1008b15c
GetVolumeInformationW
0x1008b124
GetVolumeNameForVolumeMountPointW
0x1008b1f4
GetVolumePathNamesForVolumeNameW
0x1008b184
GetVolumePathNameW
0x1008b1f0
HeapAlloc
0x1008b08c
HeapDestroy
0x1008b094
HeapFree
0x1008b088
HeapReAlloc
0x1008b084
HeapSize
0x1008b080
InitializeCriticalSection
0x1008b0e8
InitializeCriticalSectionAndSpinCount
0x1008b128
IsDebuggerPresent
0x1008b230
LeaveCriticalSection
0x1008b0fc
LoadLibraryExW
0x1008b138
LoadLibraryW
0x1008b180
LoadResource
0x1008b078
LocalAlloc
0x1008b240
LocalFileTimeToFileTime
0x1008b178
LocalFree
0x1008b20c
LockFileEx
0x1008b148
LockResource
0x1008b074
MapViewOfFile
0x1008b0c4
MultiByteToWideChar
0x1008b12c
OpenProcess
0x1008b150
OpenSemaphoreW
0x1008b224
OutputDebugStringA
0x1008b0c0
OutputDebugStringW
0x1008b104
QueryPerformanceCounter
0x1008b0b4
RaiseException
0x1008b0d8
ReadFile
0x1008b234
ReleaseMutex
0x1008b21c
ReleaseSemaphore
0x1008b214
RemoveDirectoryW
0x1008b23c
ResetEvent
0x1008b208
SearchPathW
0x1008b0d4
SetEndOfFile
0x1008b114
SetEvent
0x1008b200
SetFileAttributesW
0x1008b1b4
SetFileInformationByHandle
0x1008b1bc
SetFilePointer
0x1008b11c
SetFilePointerEx
0x1008b110
SetFileTime
0x1008b17c
SetLastError
0x1008b198
SetThreadIdealProcessor
0x1008b120
SetThreadLocale
0x1008b0dc
SetThreadUILanguage
0x1008b130
SetUnhandledExceptionFilter
0x1008b0a8
SizeofResource
0x1008b070
Sleep
0x1008b0a0
TerminateProcess
0x1008b0b0
TlsAlloc
0x1008b160
TlsFree
0x1008b164
TlsGetValue
0x1008b168
TlsSetValue
0x1008b16c
UnhandledExceptionFilter
0x1008b0a4
UnlockFileEx
0x1008b14c
UnmapViewOfFile
0x1008b0cc
WaitForMultipleObjects
0x1008b158
WaitForMultipleObjectsEx
0x1008b170
WaitForSingleObject
0x1008b1d4
WaitForSingleObjectEx
0x1008b220
WideCharToMultiByte
0x1008b188
WriteFile
0x1008b238
msvcrt.dll
59
__CxxFrameHandler3
0x1008b32c
__dllonexit
0x1008b348
__RTDynamicCast
0x1008b330
_amsg_exit
0x1008b364
_callnewh
0x1008b370
_CxxThrowException
0x1008b36c
_errno
0x1008b340
_except_handler4_common
0x1008b358
_initterm
0x1008b360
_lock
0x1008b350
_onexit
0x1008b344
_purecall
0x1008b38c
_strnicmp
0x1008b31c
_unlock
0x1008b34c
_vscwprintf
0x1008b394
_vsnprintf_s
0x1008b334
_vsnwprintf
0x1008b2e4
_vsnwprintf_s
0x1008b338
_wcsicmp
0x1008b2e8
_wcslwr
0x1008b318
_wcslwr_s
0x1008b378
_wcsnicmp
0x1008b2f8
_wcsrev
0x1008b314
_wcstoi64
0x1008b324
_wtoi
0x1008b328
_XcptFilter
0x1008b368
??0exception@@QAE@ABQBD@Z
0x1008b3a0
??0exception@@QAE@ABV0@@Z
0x1008b3b0
??0exception@@QAE@XZ
0x1008b398
??1exception@@UAE@XZ
0x1008b3a4
??1type_info@@UAE@XZ
0x1008b354
?terminate@@YAXXZ
0x1008b35c
?what@exception@@UBEPBDXZ
0x1008b3a8
free
0x1008b3b4
iswalpha
0x1008b308
iswspace
0x1008b30c
malloc
0x1008b37c
memcmp
0x1008b2ec
memcpy
0x1008b2f0
memcpy_s
0x1008b3ac
memmove
0x1008b33c
memmove_s
0x1008b39c
memset
0x1008b3cc
qsort
0x1008b304
strcpy_s
0x1008b300
strncpy_s
0x1008b320
swscanf_s
0x1008b3c8
towlower
0x1008b310
towupper
0x1008b2fc
vswprintf_s
0x1008b390
wcscat_s
0x1008b384
wcschr
0x1008b2f4
wcscpy_s
0x1008b388
wcsncmp
0x1008b3c0
wcsncpy_s
0x1008b380
wcsrchr
0x1008b3c4
wcsstr
0x1008b374
wcstok_s
0x1008b3bc
wcstoul
0x1008b3b8
ntdll.dll
27
DbgPrintEx
0x1008b428
NtClose
0x1008b3e8
NtCreateFile
0x1008b3f8
NtOpenFile
0x1008b3e0
NtQueryDirectoryFile
0x1008b3e4
NtQueryEaFile
0x1008b3f4
NtQueryInformationFile
0x1008b3ec
NtQueryInformationProcess
0x1008b3f0
NtSetEaFile
0x1008b3fc
NtSetInformationFile
0x1008b43c
NtSetSecurityObject
0x1008b3d8
NtYieldExecution
0x1008b424
RtlAcquireResourceExclusive
0x1008b40c
RtlAcquireResourceShared
0x1008b42c
RtlAdjustPrivilege
0x1008b404
RtlAllocateHeap
0x1008b434
RtlDeleteResource
0x1008b418
RtlDosPathNameToNtPathName_U
0x1008b3dc
RtlFindAceByType
0x1008b3d4
RtlFreeHeap
0x1008b430
RtlImpersonateSelf
0x1008b400
RtlInitializeResource
0x1008b408
RtlNtStatusToDosError
0x1008b438
RtlRaiseStatus
0x1008b420
RtlReAllocateHeap
0x1008b41c
RtlReleaseResource
0x1008b414
RtlSetControlSecurityDescriptor
0x1008b410
OLEAUT32.dll
12
LoadRegTypeLib
0x1008b27c
LoadTypeLib
0x1008b280
RegisterTypeLib
0x1008b288
SysAllocString
0x1008b274
SysAllocStringByteLen
0x1008b26c
SysAllocStringLen
0x1008b290
SysFreeString
0x1008b264
SysStringByteLen
0x1008b268
SysStringLen
0x1008b278
UnRegisterTypeLib
0x1008b284
VarBstrCmp
0x1008b28c
VariantClear
0x1008b270
0x1008b444
No function matches your filter.