uwfwmi.dll

vUnknown 64-bit Unknown OS Analyzed
Download
Description
—
Authors
Unknown
File size
230.9 KB
Uploaded
2025-12-01 08:12
Views
42
SHA-256
c30827a06411245cffa793dfe2bf2b42

Exported functions 12

MethodAccessCheck #1 · 0x7540
PropertyAccessCheck #2 · 0x7450
DllCanUnloadNow #3 · 0x6c00
DllGetClassObject #4 · 0x6c40
DllRegisterServer #5 · 0x6b60
DllUnregisterServer #6 · 0x6bb0
DoUnattend #7 · 0x7790
GetProviderClassID #8 · 0x6950
MI_Main #9 · 0x6890
UwfSysprepCleanup #10 · 0x6cd0
UwfSysprepGeneralize #11 · 0x6cc0
UwfSysprepSpecialize #12 · 0x6cc0

Imported DLLs & functions 217

api-ms-win-core-com-l1-1-0.dll 3
CoCreateInstance 0x180025bd8
CoImpersonateClient 0x180025be0
CoRevertToSelf 0x180025bd0
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x180025c08
IsDebuggerPresent 0x180025bf8
OutputDebugStringA 0x180025bf0
OutputDebugStringW 0x180025c00
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180025c18
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180025c28
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x180025c58
RaiseException 0x180025c50
SetLastError 0x180025c38
SetUnhandledExceptionFilter 0x180025c48
UnhandledExceptionFilter 0x180025c40
api-ms-win-core-file-l1-1-0.dll 6
CreateDirectoryW 0x180025c78
FindFirstVolumeW 0x180025c90
FindNextVolumeW 0x180025c70
FindVolumeClose 0x180025c88
GetFileAttributesW 0x180025c68
GetFullPathNameW 0x180025c80
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180025ca0
api-ms-win-core-heap-l1-1-0.dll 6
GetProcessHeap 0x180025cc8
HeapAlloc 0x180025cc0
HeapDestroy 0x180025cb8
HeapFree 0x180025cd8
HeapReAlloc 0x180025cd0
HeapSize 0x180025cb0
api-ms-win-core-libraryloader-l1-2-0.dll 12
DisableThreadLibraryCalls 0x180025cf8
FindResourceExW 0x180025cf0
FreeLibrary 0x180025d28
GetModuleFileNameA 0x180025d08
GetModuleFileNameW 0x180025d30
GetModuleHandleExW 0x180025d00
GetModuleHandleW 0x180025d20
GetProcAddress 0x180025d10
LoadLibraryExW 0x180025d38
LoadResource 0x180025ce8
LockResource 0x180025d40
SizeofResource 0x180025d18
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180025d50
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x180025d60
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x180025d88
GetCurrentProcessId 0x180025d80
GetCurrentThreadId 0x180025d70
TerminateProcess 0x180025d78
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180025d98
api-ms-win-core-registry-l1-1-0.dll 2
RegEnumKeyExW 0x180025da8
RegGetValueW 0x180025db0
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x180025e28
AcquireSRWLockShared 0x180025e10
CreateMutexExW 0x180025dc8
CreateSemaphoreExW 0x180025e00
DeleteCriticalSection 0x180025df0
EnterCriticalSection 0x180025dc0
InitializeCriticalSection 0x180025e18
InitializeCriticalSectionEx 0x180025e38
LeaveCriticalSection 0x180025e08
OpenSemaphoreW 0x180025dd0
ReleaseMutex 0x180025de0
ReleaseSemaphore 0x180025e30
ReleaseSRWLockExclusive 0x180025e20
ReleaseSRWLockShared 0x180025df8
WaitForSingleObject 0x180025de8
WaitForSingleObjectEx 0x180025dd8
api-ms-win-core-synch-l1-2-0.dll 5
InitOnceBeginInitialize 0x180025e68
InitOnceComplete 0x180025e60
Sleep 0x180025e58
SleepConditionVariableSRW 0x180025e48
WakeAllConditionVariable 0x180025e50
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemDirectoryW 0x180025e78
GetSystemTimeAsFileTime 0x180025e80
GetTickCount 0x180025e88
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180025ea0
CreateThreadpoolTimer 0x180025e98
SetThreadpoolTimer 0x180025eb0
WaitForThreadpoolTimerCallbacks 0x180025ea8
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x180025ec8
EventRegister 0x180025ee0
EventSetInformation 0x180025ee8
EventUnregister 0x180025ed8
EventWrite 0x180025ed0
EventWriteTransfer 0x180025ec0
msvcrt.dll 35
__C_specific_handler 0x180025f80
__CxxFrameHandler3 0x180025f30
__dllonexit 0x180025fc0
__iob_func 0x180025f68
_amsg_exit 0x180025fa0
_callnewh 0x180025ef8
_errno 0x180025fd0
_initterm 0x180025fa8
_lock 0x180025fb0
_onexit 0x180025fc8
_purecall 0x180025fe0
_unlock 0x180025fb8
_vsnprintf 0x180025f60
_vsnwprintf 0x180026008
_wcsicmp 0x180025f18
_wcsnicmp 0x180025f48
_wtoi 0x180025f70
_XcptFilter 0x180025f88
calloc 0x180025f10
fputws 0x180026000
free 0x180025fe8
malloc 0x180025f98
memcmp 0x180025f28
memcpy 0x180025f20
memcpy_s 0x180025ff8
memmove_s 0x180025f78
memset 0x180025f08
realloc 0x180025f00
swprintf_s 0x180025ff0
vswprintf_s 0x180025fd8
wcscat_s 0x180025f38
wcschr 0x180025f50
wcscmp 0x180025f40
wcsncmp 0x180025f90
wcsrchr 0x180025f58
ntdll.dll 5
RtlAllocateHeap 0x180026030
RtlCaptureContext 0x180026020
RtlFreeHeap 0x180026028
RtlLookupFunctionEntry 0x180026038
RtlVirtualUnwind 0x180026018
OLEAUT32.dll 1
SysFreeString 0x180025bc0
uwfcfgmgmt.dll 94
??0CUwfOverlayDevice@@QEAA@XZ 0x1800260a0
??0CUwfRegKey@@QEAA@XZ 0x1800262b0
??1CDevice@@UEAA@XZ 0x180026098
??1CUwfRegKey@@QEAA@XZ 0x1800262a8
?AddFileExclusion@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z 0x180026148
?AddMultiSzValue@CUwfRegKey@@QEAAJPEBG0@Z 0x180026138
?AddRegKeyExclusion@CUwfStaticConfiguration@@QEAAJPEBG@Z 0x1800261b0
?Begin@CUwfProvider@@QEAAJ_N@Z 0x180026120
?Begin@CUwfProvider@@QEAAJXZ 0x1800262e0
?CanVolumeBeProtected@@YAJPEBG_NPEA_N@Z 0x180026100
?CaptureUwfSettings@@YAJW4E_UNATTEND_REASON@@@Z 0x180026290
?CommitFile@CUwfManagement@@QEAAJPEBG0@Z 0x1800260f0
?CommitFileDeletion@CUwfManagement@@QEAAJPEBG00@Z 0x1800260e8
?CommitRegistry@CUwfManagement@@QEAAJ_NPEBG1@Z 0x180026168
?CommitRegistryDeletion@CUwfManagement@@QEAAJ_NPEBG1@Z 0x180026228
?CopyTree@CUwfRegKey@@QEAAJAEAV1@PEBG_N@Z 0x180026250
?Create@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBGPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAK@Z 0x180026258
?CreateVolume@CUwfStaticConfiguration@@QEAAJPEBG0PEAPEAVCUwfStaticVolumeConfiguration@@@Z 0x180026288
?DeleteTree@CUwfRegKey@@QEAAJPEBG@Z 0x180026298
?DisableAutoDefragService@@YAJH@Z 0x180026260
?Finalize@CUwfProvider@@QEAAJXZ 0x1800262c8
?FindFileExclusion@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z 0x1800260d0
?FindRegKeyExclusion@CUwfStaticConfiguration@@QEAAJPEBG@Z 0x1800261e8
?FixupLowerFiltersSetting@@YAJXZ 0x180026278
?FixupUpdatedSettings@CUwfConfiguration@@QEAAJXZ 0x180026188
?get_BindingType@CUwfStaticVolumeConfiguration@@QEAAJPEAK@Z 0x180026128
?get_DriveLetter@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAG@Z 0x180026158
?get_FileExclusions@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAU_MULTISZ@@@Z 0x1800260c8
?get_HORMEnabled@CUwfConfiguration@@QEAAJPEA_N@Z 0x180026208
?get_HORMEnabled@CUwfManagement@@QEAAJPEA_N@Z 0x1800262d8
?get_NumVolumes@CUwfStaticConfiguration@@QEAAJPEAK@Z 0x180026310
?get_OverlayCriticalThreshold@CUwfManagement@@QEAAJPEAK@Z 0x1800260b0
?get_OverlayInformation@CUwfManagement@@QEAAJPEBGPEAU_UWFVOL_OVERLAY_DATA_OUTPUT@@PEAK2@Z 0x1800260b8
?get_OverlayMaximumSize@CUwfManagement@@QEAAJ_NPEAK@Z 0x180026320
?get_OverlayMaximumSize@CUwfStaticConfiguration@@QEAAJPEAK@Z 0x1800261f0
?get_OverlayType@CUwfManagement@@QEAAJ_NPEAW4_UWF_CONFIG_OVERLAY_TYPE@@@Z 0x180026108
?get_OverlayType@CUwfStaticConfiguration@@QEAAJPEAW4_UWF_CONFIG_OVERLAY_TYPE@@@Z 0x180026230
?get_OverlayWarningThreshold@CUwfManagement@@QEAAJPEAK@Z 0x1800260a8
?get_PersistDomainSecretKey@CUwfStaticConfiguration@@QEAAJPEA_N@Z 0x180026048
?get_PersistTSCAL@CUwfStaticConfiguration@@QEAAJPEA_N@Z 0x180026280
?get_Protected@CUwfStaticVolumeConfiguration@@QEAAJPEA_N@Z 0x180026198
?get_RegKeyExclusions@CUwfStaticConfiguration@@QEAAJPEAPEAU_MULTISZ@@@Z 0x180026220
?get_ServicingModeEnabled@CUwfStaticConfiguration@@QEAAJPEA_N@Z 0x180026160
?get_StaticVolumeConfiguration@CUwfStaticConfiguration@@QEAAJKPEAPEAVCUwfStaticVolumeConfiguration@@@Z 0x180026300
?get_UwfConfiguration@CUwfManagement@@QEAAJPEAPEAVCUwfConfiguration@@@Z 0x180026328
?get_UwfEnabled@CUwfStaticConfiguration@@QEAAJPEA_N@Z 0x180026170
?get_VolumeGuid@CUwfStaticVolumeConfiguration@@QEAAJPEAPEAG@Z 0x1800262f8
?GetConfiguration@CUwfProvider@@QEAAPEAVCUwfConfiguration@@XZ 0x180026200
?GetDriveLetterFromVolumeName@@YAJPEBGPEAG@Z 0x1800261a0
?GetManagement@CUwfProvider@@QEAAPEAVCUwfManagement@@XZ 0x1800262d0
?GetOverlayFiles@CUwfOverlayDevice@@QEAAJAEA_KAEAV?$CRBMap@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_KV?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@V?$CElementTraits@_K@2@@ATL@@@Z 0x180026088
?GetStaticConfiguration@CUwfProvider@@QEAAJ_NPEAPEAVCUwfStaticConfiguration@@@Z 0x1800261f8
?GetSystemShutdownState@CUwfManagement@@QEAAJPEA_N@Z 0x180026080
?GetUwfProtectableVolumeList@@YAJ_NPEAKPEAUUWF_PROTECTABLEVOLUME_INFO@@@Z 0x180026130
?GetUwfProvider@CUwfProvider@@SAPEAV1@XZ 0x1800262f0
?GetWinResumeObjectId@@YAJPEAPEAG@Z 0x180026318
?HiberFileExists@@YA_NXZ 0x180026068
?Initialize@CUwfOverlayDevice@@QEAAJPEBG@Z 0x180026090
?IsHORMEnabled@CUwfConfiguration@@QEAA_NXZ 0x1800260f8
?IsUserAdmin@@YAJPEA_N@Z 0x1800262b8
?IsValidDriveLetter@@YA_NPEBG@Z 0x180026240
?IsValidOverlayConfig@@YA_NW4_UWF_CONFIG_OVERLAY_TYPE@@K@Z 0x1800261e0
?LOCK@CUwfProvider@@QEAAXXZ 0x1800262e8
?LookupShutdownPrivilegeInCurThreadToken@CUwfManagement@@QEAAJAEA_N@Z 0x180026058
?Open@CUwfRegKey@@QEAAJPEAUHKEY__@@PEBGK@Z 0x1800262a0
?ParsePathSpec@@YAJPEBGPEAGK1K1K@Z 0x1800261a8
?QueryDWORDValue@CUwfRegKey@@QEAAJPEBGPEAK@Z 0x180026140
?QueryMultiSzValue@CUwfRegKey@@QEAAJPEBGPEAPEAU_MULTISZ@@@Z 0x180026248
?RegReadValue@@YAJPEAUHKEY__@@PEBGKPEAPEAEPEAK@Z 0x180026270
?ReleaseStaticVolumeConfiguration@CUwfStaticConfiguration@@QEAAXXZ 0x180026308
?RemoveAllFileExclusions@CUwfStaticVolumeConfiguration@@QEAAJXZ 0x1800260d8
?RemoveFileExclusion@CUwfStaticVolumeConfiguration@@QEAAJPEBG@Z 0x1800260e0
?RemoveRegKeyExclusion@CUwfStaticConfiguration@@QEAAJPEBG@Z 0x180026150
?ResetUwfSettings@CUwfManagement@@QEAAJXZ 0x180026060
?set_BindingType@CUwfStaticVolumeConfiguration@@QEAAJK@Z 0x180026330
?set_HORMEnabled@CUwfManagement@@QEAAJ_N@Z 0x180026180
?set_OverlayCriticalThreshold@CUwfManagement@@QEAAJK@Z 0x180026218
?set_OverlayMaximumSize@CUwfManagement@@QEAAJK@Z 0x180026238
?set_OverlayMaximumSize@CUwfStaticConfiguration@@QEAAJK@Z 0x1800261d8
?set_OverlayType@CUwfManagement@@QEAAJW4_UWF_CONFIG_OVERLAY_TYPE@@@Z 0x1800261d0
?set_OverlayWarningThreshold@CUwfManagement@@QEAAJK@Z 0x180026210
?set_PersistDomainSecretKey@CUwfStaticConfiguration@@QEAAJ_N@Z 0x1800261c0
?set_PersistTSCAL@CUwfStaticConfiguration@@QEAAJ_N@Z 0x1800261b8
?set_Protected@CUwfStaticVolumeConfiguration@@QEAAJ_N@Z 0x180026190
?set_ServicingModeEnabled@CUwfManagement@@QEAAJ_N0@Z 0x1800261c8
?set_UwfEnabled@CUwfStaticConfiguration@@QEAAJ_N@Z 0x180026078
?SetBootStatusPolicy@@YAJPEBG@Z 0x180026268
?ShutdownSystem@CUwfManagement@@QEAAJ_N@Z 0x180026050
?UNLOCK@CUwfProvider@@QEAAXXZ 0x1800262c0
?VolumeGetConfig@@YAJPEAVCUwfStaticConfiguration@@PEBG1PEAPEAVCUwfStaticVolumeConfiguration@@@Z 0x180026118
?VolumeGetVolumeGuid@@YAJPEBGPEAGK@Z 0x180026110
MultiSzFree 0x1800260c0
UwfCfgSetFilterEnabled 0x180026070
UwfCfgSetHormEnabled 0x180026178