cmisetup.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
CallBack_ConfigureWindowsFoundationImage
#1 · 0x184e0
Module_Init_Cmi
#2 · 0x17370
Module_Init_SkuAssembly
#3 · 0x18040
No function matches your filter.
Imported DLLs & functions 250
ADVAPI32.dll
28
AdjustTokenPrivileges
0x1007a048
CloseEncryptedFileRaw
0x1007a028
GetAclInformation
0x1007a018
GetSecurityDescriptorControl
0x1007a010
GetSecurityDescriptorDacl
0x1007a008
GetSecurityDescriptorGroup
0x1007a004
GetSecurityDescriptorLength
0x1007a014
GetSecurityDescriptorOwner
0x1007a000
GetSecurityDescriptorSacl
0x1007a00c
GetTraceEnableFlags
0x1007a034
GetTraceEnableLevel
0x1007a030
GetTraceLoggerHandle
0x1007a038
OpenEncryptedFileRawW
0x1007a020
OpenProcessToken
0x1007a04c
RegCloseKey
0x1007a044
RegCreateKeyExW
0x1007a054
RegDeleteKeyExW
0x1007a050
RegDeleteTreeW
0x1007a058
RegDeleteValueW
0x1007a060
RegEnumValueW
0x1007a068
RegisterTraceGuidsW
0x1007a02c
RegOpenKeyExW
0x1007a06c
RegQueryValueExW
0x1007a064
RegSetValueExW
0x1007a05c
RevertToSelf
0x1007a01c
TraceEvent
0x1007a040
UnregisterTraceGuids
0x1007a03c
WriteEncryptedFileRaw
0x1007a024
BCryptCloseAlgorithmProvider
0x1007a27c
BCryptCreateHash
0x1007a28c
BCryptDestroyHash
0x1007a284
BCryptFinishHash
0x1007a288
BCryptGetProperty
0x1007a280
BCryptHashData
0x1007a274
BCryptOpenAlgorithmProvider
0x1007a278
KERNEL32.dll
95
CloseHandle
0x1007a1a0
CompareStringW
0x1007a17c
CopyFileExW
0x1007a1c4
CopyFileW
0x1007a13c
CreateDirectoryW
0x1007a180
CreateEventW
0x1007a084
CreateFileA
0x1007a1fc
CreateFileMappingW
0x1007a100
CreateFileW
0x1007a198
DeleteCriticalSection
0x1007a1e8
DeleteFileW
0x1007a1c0
DeviceIoControl
0x1007a1b0
DosDateTimeToFileTime
0x1007a0c8
DuplicateHandle
0x1007a09c
EnterCriticalSection
0x1007a1dc
ExpandEnvironmentStringsW
0x1007a16c
FindClose
0x1007a134
FindFirstFileW
0x1007a138
FindNextFileW
0x1007a1ac
FlushFileBuffers
0x1007a1c8
FreeLibrary
0x1007a14c
GetCurrentDirectoryW
0x1007a1a4
GetCurrentProcess
0x1007a110
GetCurrentProcessId
0x1007a128
GetCurrentThreadId
0x1007a124
GetEnvironmentVariableW
0x1007a1d4
GetFileAttributesW
0x1007a170
GetFileInformationByHandle
0x1007a1b8
GetFileInformationByHandleEx
0x1007a1a8
GetFileSizeEx
0x1007a1cc
GetFinalPathNameByHandleW
0x1007a18c
GetFullPathNameW
0x1007a184
GetHandleInformation
0x1007a108
GetLastError
0x1007a154
GetLongPathNameW
0x1007a188
GetModuleHandleExW
0x1007a0d0
GetModuleHandleW
0x1007a158
GetOverlappedResult
0x1007a0a8
GetPrivateProfileSectionW
0x1007a1f0
GetProcAddress
0x1007a15c
GetProcessHeap
0x1007a144
GetSystemInfo
0x1007a0a4
GetSystemTimeAsFileTime
0x1007a120
GetTempFileNameW
0x1007a0bc
GetTempPathW
0x1007a190
GetTickCount
0x1007a11c
GetVersionExA
0x1007a0b0
GetVersionExW
0x1007a160
GetVolumeInformationByHandleW
0x1007a0f4
GetVolumeInformationW
0x1007a08c
GetVolumeNameForVolumeMountPointW
0x1007a19c
GetVolumePathNamesForVolumeNameW
0x1007a0dc
GetVolumePathNameW
0x1007a194
HeapAlloc
0x1007a140
HeapFree
0x1007a148
HeapReAlloc
0x1007a168
InitializeCriticalSection
0x1007a1e4
InitializeCriticalSectionAndSpinCount
0x1007a088
LeaveCriticalSection
0x1007a1e0
LoadLibraryExW
0x1007a150
LoadLibraryW
0x1007a1f4
LocalAlloc
0x1007a1f8
LocalFileTimeToFileTime
0x1007a0c4
LocalFree
0x1007a178
LockFileEx
0x1007a090
lstrcmpiW
0x1007a0cc
MapViewOfFile
0x1007a0fc
MultiByteToWideChar
0x1007a0b8
OpenProcess
0x1007a094
QueryPerformanceCounter
0x1007a12c
ReadFile
0x1007a1ec
ReleaseSemaphore
0x1007a104
RemoveDirectoryW
0x1007a0f0
ResetEvent
0x1007a1d8
SetEndOfFile
0x1007a164
SetFileAttributesW
0x1007a1b4
SetFileInformationByHandle
0x1007a1bc
SetFilePointer
0x1007a0d4
SetFilePointerEx
0x1007a098
SetFileTime
0x1007a0c0
SetLastError
0x1007a174
SetUnhandledExceptionFilter
0x1007a114
Sleep
0x1007a130
TerminateProcess
0x1007a10c
TlsAlloc
0x1007a0ec
TlsFree
0x1007a0e8
TlsGetValue
0x1007a0e4
TlsSetValue
0x1007a0e0
UnhandledExceptionFilter
0x1007a118
UnlockFileEx
0x1007a0ac
UnmapViewOfFile
0x1007a0f8
WaitForMultipleObjects
0x1007a0a0
WaitForSingleObject
0x1007a1d0
WideCharToMultiByte
0x1007a0b4
WriteFile
0x1007a0d8
msvcrt.dll
43
__CxxFrameHandler3
0x1007a338
__dllonexit
0x1007a2f8
_amsg_exit
0x1007a30c
_callnewh
0x1007a318
_CxxThrowException
0x1007a314
_except_handler4_common
0x1007a2ec
_initterm
0x1007a308
_lock
0x1007a300
_onexit
0x1007a2f4
_purecall
0x1007a2d8
_snprintf_s
0x1007a2b4
_unlock
0x1007a2fc
_vscwprintf
0x1007a2cc
_vsnwprintf
0x1007a334
_wcsicmp
0x1007a2c8
_wcsnicmp
0x1007a2c4
_wcstoi64
0x1007a294
_XcptFilter
0x1007a310
??0exception@@QAE@ABV0@@Z
0x1007a324
??0exception@@QAE@XZ
0x1007a328
??1exception@@UAE@XZ
0x1007a320
??1type_info@@UAE@XZ
0x1007a2f0
?terminate@@YAXXZ
0x1007a304
?what@exception@@UBEPBDXZ
0x1007a31c
bsearch
0x1007a2dc
free
0x1007a330
iswspace
0x1007a2ac
malloc
0x1007a32c
memcmp
0x1007a2e0
memcpy
0x1007a2e4
memcpy_s
0x1007a2d4
memmove
0x1007a2e8
memmove_s
0x1007a2a4
memset
0x1007a33c
qsort
0x1007a29c
strcpy_s
0x1007a2a0
strncmp
0x1007a2b0
swscanf_s
0x1007a298
towupper
0x1007a2d0
wcschr
0x1007a2c0
wcsncmp
0x1007a2a8
wcsrchr
0x1007a2bc
wcstoul
0x1007a2b8
ntdll.dll
48
DbgPrint
0x1007a400
DbgPrintEx
0x1007a3e8
LdrGetDllHandle
0x1007a354
LdrGetProcedureAddress
0x1007a35c
LdrLoadDll
0x1007a34c
LdrUnloadDll
0x1007a350
NtClose
0x1007a3ac
NtCreateFile
0x1007a3b0
NtOpenFile
0x1007a3a8
NtOpenKey
0x1007a358
NtQueryInformationFile
0x1007a3bc
NtQueryInformationProcess
0x1007a3b8
NtQueryPerformanceCounter
0x1007a3d8
NtQueryValueKey
0x1007a388
NtReadFile
0x1007a37c
NtSetEaFile
0x1007a39c
NtSetInformationFile
0x1007a3f0
NtSetSecurityObject
0x1007a3c0
NtWaitForSingleObject
0x1007a374
NtWriteFile
0x1007a380
NtYieldExecution
0x1007a3d4
RtlAcquireResourceExclusive
0x1007a394
RtlAcquireResourceShared
0x1007a390
RtlAdjustPrivilege
0x1007a3a0
RtlAllocateHeap
0x1007a3fc
RtlCreateUnicodeStringFromAsciiz
0x1007a344
RtlDeleteCriticalSection
0x1007a36c
RtlDeleteResource
0x1007a3cc
RtlDosPathNameToNtPathName_U
0x1007a3b4
RtlDosPathNameToNtPathName_U_WithStatus
0x1007a3f4
RtlDowncaseUnicodeChar
0x1007a3dc
RtlEnterCriticalSection
0x1007a368
RtlExpandEnvironmentStrings
0x1007a378
RtlFindAceByType
0x1007a3c4
RtlFreeHeap
0x1007a3f8
RtlHashUnicodeString
0x1007a3d0
RtlImpersonateSelf
0x1007a3a4
RtlInitializeCriticalSection
0x1007a364
RtlInitializeResource
0x1007a398
RtlInitUnicodeString
0x1007a384
RtlLeaveCriticalSection
0x1007a360
RtlNtStatusToDosError
0x1007a3ec
RtlQueryEnvironmentVariable_U
0x1007a348
RtlRaiseStatus
0x1007a3e4
RtlReAllocateHeap
0x1007a3e0
RtlReleaseResource
0x1007a38c
RtlSetControlSecurityDescriptor
0x1007a3c8
RtlTimeToTimeFields
0x1007a370
WDSCORE.dll
14
ConstructPartialMsgVW
0x1007a254
CurrentIP
0x1007a24c
WdsCreateBlackboard
0x1007a25c
WdsDestroyBlackboard
0x1007a260
WdsFreeData
0x1007a248
WdsGetBlackboardValue
0x1007a250
WdsInitializeCallbackArray
0x1007a23c
WdsInitializeDataStringW
0x1007a258
WdsInitializeDataUInt32
0x1007a22c
WdsPublish
0x1007a238
WdsPublishImmediateEx
0x1007a240
WdsSetBlackboardValue
0x1007a244
WdsSetupLogMessageW
0x1007a230
WdsSubscribeEx
0x1007a234
No function matches your filter.