HvsiSettingsProvider.dll

Description: Microsoft Defender Application Guard HvsiSettingsProvider.dll

Version: 10.0.19041.6033

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8db04e62b8463c17281ed57ad1ef1f28

File Size: 302.9 KB

Uploaded At: Dec. 1, 2025, 8:12 a.m.

Views: 16

Exported Functions

??0HvsiSettingsProvider@@QEAA@XZ (Ordinal: 1, Address: 0x6620)
??1HvsiSettingsProvider@@UEAA@XZ (Ordinal: 2, Address: 0x6640)
ApplySubProviderSettings (Ordinal: 3, Address: 0x7fe0)
CreateSettingsProvider (Ordinal: 4, Address: 0x7e40)
GatherSubProviderSettings (Ordinal: 5, Address: 0x7eb0)
GetSubProviderAttribute (Ordinal: 6, Address: 0x8340)
RegisterChangeNotifications (Ordinal: 7, Address: 0x81a0)
SetDVCCallbackInformation (Ordinal: 8, Address: 0xc580)
UnregisterChangeNotifications (Ordinal: 9, Address: 0x8280)
VirtualChannelGetInstance (Ordinal: 10, Address: 0xc460)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180037da8)
CoCreateInstance (Address: 0x180037dd0)
CoInitializeEx (Address: 0x180037dd8)
CoTaskMemAlloc (Address: 0x180037dc8)
CoTaskMemFree (Address: 0x180037db0)
CoTaskMemRealloc (Address: 0x180037db8)
CoUninitialize (Address: 0x180037dc0)
CoWaitForMultipleHandles (Address: 0x180037de0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180037e00)
IsDebuggerPresent (Address: 0x180037df0)
OutputDebugStringW (Address: 0x180037df8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180037e10)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180037e20)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180037e38)
RaiseException (Address: 0x180037e50)
SetLastError (Address: 0x180037e48)
SetUnhandledExceptionFilter (Address: 0x180037e40)
UnhandledExceptionFilter (Address: 0x180037e30)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180037e80)
DeleteFileW (Address: 0x180037e60)
FindClose (Address: 0x180037e90)
FindCloseChangeNotification (Address: 0x180037ea8)
FindFirstChangeNotificationW (Address: 0x180037e70)
FindFirstFileW (Address: 0x180037ea0)
FindNextChangeNotification (Address: 0x180037e88)
FindNextFileW (Address: 0x180037e98)
GetDiskFreeSpaceExW (Address: 0x180037eb0)
GetFullPathNameW (Address: 0x180037e78)
RemoveDirectoryW (Address: 0x180037e68)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x180037ec0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180037ed0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180037ef0)
HeapAlloc (Address: 0x180037ee8)
HeapFree (Address: 0x180037ee0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180037f08)
LocalFree (Address: 0x180037f00)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180037f18)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x180037f40)
GetModuleFileNameA (Address: 0x180037f38)
GetModuleHandleExW (Address: 0x180037f50)
GetModuleHandleW (Address: 0x180037f48)
GetProcAddress (Address: 0x180037f28)
LoadResource (Address: 0x180037f58)
LockResource (Address: 0x180037f30)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180037f88)
GetLocaleInfoEx (Address: 0x180037f78)
GetUserGeoID (Address: 0x180037f98)
IdnToAscii (Address: 0x180037f68)
LCMapStringEx (Address: 0x180037f70)
SetLocaleInfoW (Address: 0x180037f80)
SetUserGeoID (Address: 0x180037f90)

api-ms-win-core-path-l1-1-0.dll

PathAllocCanonicalize (Address: 0x180037fb8)
PathAllocCombine (Address: 0x180037fc0)
PathCchCombine (Address: 0x180037fa8)
PathCchRemoveBackslash (Address: 0x180037fb0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180037fd0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180038020)
GetCurrentProcess (Address: 0x180037ff0)
GetCurrentProcessId (Address: 0x180038000)
GetCurrentThread (Address: 0x180037ff8)
GetCurrentThreadId (Address: 0x180038008)
OpenProcessToken (Address: 0x180038010)
OpenThreadToken (Address: 0x180037fe0)
ProcessIdToSessionId (Address: 0x180038018)
TerminateProcess (Address: 0x180037fe8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180038030)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180038040)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180038088)
RegCreateKeyExW (Address: 0x180038068)
RegDeleteTreeW (Address: 0x180038060)
RegDeleteValueW (Address: 0x180038090)
RegFlushKey (Address: 0x180038098)
RegGetValueW (Address: 0x180038070)
RegLoadKeyW (Address: 0x180038078)
RegOpenKeyExW (Address: 0x180038050)
RegQueryValueExW (Address: 0x180038080)
RegSetValueExW (Address: 0x1800380a0)
RegUnLoadKeyW (Address: 0x180038058)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x1800380b0)

api-ms-win-core-registry-l2-1-0.dll

RegDeleteKeyW (Address: 0x1800380c0)
RegOpenKeyW (Address: 0x1800380c8)
RegSetValueW (Address: 0x1800380d0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x1800380e0)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeW (Address: 0x180038100)
MultiByteToWideChar (Address: 0x1800380f0)
WideCharToMultiByte (Address: 0x1800380f8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180038110)
AcquireSRWLockShared (Address: 0x180038130)
CreateEventExW (Address: 0x180038168)
CreateEventW (Address: 0x180038180)
CreateMutexExW (Address: 0x180038190)
CreateSemaphoreExW (Address: 0x180038128)
DeleteCriticalSection (Address: 0x1800381b8)
EnterCriticalSection (Address: 0x1800381a0)
InitializeCriticalSection (Address: 0x180038138)
InitializeCriticalSectionAndSpinCount (Address: 0x1800381b0)
InitializeCriticalSectionEx (Address: 0x180038150)
InitializeSRWLock (Address: 0x180038120)
LeaveCriticalSection (Address: 0x1800381a8)
OpenSemaphoreW (Address: 0x180038178)
ReleaseMutex (Address: 0x180038160)
ReleaseSemaphore (Address: 0x180038148)
ReleaseSRWLockExclusive (Address: 0x180038140)
ReleaseSRWLockShared (Address: 0x180038198)
ResetEvent (Address: 0x180038188)
SetEvent (Address: 0x1800381c0)
TryAcquireSRWLockExclusive (Address: 0x180038118)
WaitForSingleObject (Address: 0x180038158)
WaitForSingleObjectEx (Address: 0x180038170)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800381d0)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1800381e0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800381f0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180038210)
CreateThreadpoolTimer (Address: 0x180038208)
SetThreadpoolTimer (Address: 0x180038200)
WaitForThreadpoolTimerCallbacks (Address: 0x180038218)

api-ms-win-core-timezone-l1-1-0.dll

GetDynamicTimeZoneInformation (Address: 0x180038228)
SetDynamicTimeZoneInformation (Address: 0x180038230)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180038248)
EncodePointer (Address: 0x180038240)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180038260)
SetRestrictedErrorInfo (Address: 0x180038258)

api-ms-win-core-winrt-error-l1-1-1.dll

RoGetMatchingRestrictedErrorInfo (Address: 0x180038270)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180038298)
RoGetActivationFactory (Address: 0x180038290)
RoInitialize (Address: 0x180038288)
RoUninitialize (Address: 0x180038280)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800382b0)
WindowsCreateStringReference (Address: 0x1800382b8)
WindowsDeleteString (Address: 0x1800382c0)
WindowsGetStringRawBuffer (Address: 0x1800382a8)

api-ms-win-crt-locale-l1-1-0.dll

_lock_locales (Address: 0x1800382d0)
_unlock_locales (Address: 0x1800382d8)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x1800382e8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180038418)
__CxxFrameHandler3 (Address: 0x180038410)
__CxxFrameHandler4 (Address: 0x1800384d8)
__std_terminate (Address: 0x1800384d0)
__uncaught_exception (Address: 0x1800384b0)
_CxxThrowException (Address: 0x180038420)
_o____lc_codepage_func (Address: 0x1800384c8)
_o____lc_locale_name_func (Address: 0x1800384c0)
_o____mb_cur_max_func (Address: 0x1800384b8)
_o___pctype_func (Address: 0x1800384a0)
_o___std_exception_copy (Address: 0x180038498)
_o___std_exception_destroy (Address: 0x180038490)
_o___std_type_info_destroy_list (Address: 0x180038488)
_o___std_type_info_name (Address: 0x180038480)
_o___stdio_common_vsnprintf_s (Address: 0x180038470)
_o___stdio_common_vsprintf_s (Address: 0x180038468)
_o___stdio_common_vswprintf (Address: 0x180038460)
_o__callnewh (Address: 0x180038458)
_o__calloc_base (Address: 0x180038450)
_o__cexit (Address: 0x180038448)
_o__configure_narrow_argv (Address: 0x180038440)
_o__crt_atexit (Address: 0x180038438)
_o__errno (Address: 0x180038430)
_o__execute_onexit_table (Address: 0x180038428)
_o__fseeki64 (Address: 0x180038478)
_o__initialize_narrow_environment (Address: 0x1800382f8)
_o__initialize_onexit_table (Address: 0x180038300)
_o__invalid_parameter_noinfo (Address: 0x180038308)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180038310)
_o__lock_file (Address: 0x180038318)
_o__purecall (Address: 0x180038320)
_o__register_onexit_function (Address: 0x180038328)
_o__seh_filter_dll (Address: 0x180038330)
_o__ui64tow_s (Address: 0x180038338)
_o__unlock_file (Address: 0x1800384f0)
_o__wcsdup (Address: 0x180038340)
_o__wcsicmp (Address: 0x180038348)
_o__wfsopen (Address: 0x180038358)
_o_abort (Address: 0x180038360)
_o_calloc (Address: 0x180038368)
_o_fclose (Address: 0x180038370)
_o_fflush (Address: 0x180038378)
_o_fgetc (Address: 0x180038380)
_o_fgetpos (Address: 0x180038388)
_o_fgetwc (Address: 0x180038390)
_o_fputwc (Address: 0x180038398)
_o_free (Address: 0x1800383a0)
_o_frexp (Address: 0x1800383a8)
_o_fsetpos (Address: 0x1800383b0)
_o_fwrite (Address: 0x1800383b8)
_o_localeconv (Address: 0x1800383c0)
_o_malloc (Address: 0x1800383c8)
_o_setlocale (Address: 0x1800383d0)
_o_setvbuf (Address: 0x1800383d8)
_o_terminate (Address: 0x1800383e0)
_o_ungetc (Address: 0x1800383e8)
_o_ungetwc (Address: 0x1800383f0)
_o_wcstok_s (Address: 0x1800383f8)
_o_wcstol (Address: 0x180038400)
_o_wcstoul (Address: 0x180038408)
memcmp (Address: 0x1800384e0)
memcpy (Address: 0x1800384e8)
memmove (Address: 0x180038350)
wcschr (Address: 0x1800384a8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180038508)
_initterm_e (Address: 0x180038500)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180038520)
strcspn (Address: 0x180038538)
wcscmp (Address: 0x180038518)
wcsncmp (Address: 0x180038530)
wcsnlen (Address: 0x180038528)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180038558)
GetTraceEnableLevel (Address: 0x180038550)
GetTraceLoggerHandle (Address: 0x180038560)
RegisterTraceGuidsW (Address: 0x180038548)
TraceMessage (Address: 0x180038568)
UnregisterTraceGuids (Address: 0x180038570)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180038590)
EventRegister (Address: 0x180038580)
EventSetInformation (Address: 0x1800385a0)
EventUnregister (Address: 0x180038598)
EventWriteTransfer (Address: 0x180038588)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x1800385c8)
CopySid (Address: 0x1800385b0)
GetLengthSid (Address: 0x1800385c0)
GetTokenInformation (Address: 0x1800385b8)
IsValidSid (Address: 0x1800385d0)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupPrivilegeValueW (Address: 0x1800385e0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800385f0)

Bcp47Langs.dll

GetUserLanguages (Address: 0x180037ce0)
SetUserLanguagesInternal (Address: 0x180037ce8)

FirewallAPI.dll

NetworkIsolationGetEnterpriseIdAsync (Address: 0x180037d00)
NetworkIsolationGetEnterpriseIdClose (Address: 0x180037cf8)

IPHLPAPI.DLL

FreeMibTable (Address: 0x180037d28)
GetIpInterfaceTable (Address: 0x180037d18)
InitializeIpInterfaceEntry (Address: 0x180037d20)
SetIpInterfaceEntry (Address: 0x180037d10)

ntdll.dll

NtSetDefaultUILanguage (Address: 0x180038618)
RtlCaptureContext (Address: 0x180038600)
RtlLookupFunctionEntry (Address: 0x180038630)
RtlPublishWnfStateData (Address: 0x180038608)
RtlSubscribeWnfStateChangeNotification (Address: 0x180038620)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180038628)
RtlVirtualUnwind (Address: 0x180038610)

OLEAUT32.dll

SysAllocStringLen (Address: 0x180037d48)
SysFreeString (Address: 0x180037d40)
SysStringLen (Address: 0x180037d38)

SHELL32.dll

SHCreateAssociationRegistration (Address: 0x180037d58)
SHGetFolderPathW (Address: 0x180037d60)
SHGetKnownFolderPath (Address: 0x180037d68)

USER32.dll

AllowSetForegroundWindow (Address: 0x180037d98)
DestroyWindow (Address: 0x180037d78)
FindWindowW (Address: 0x180037d88)
SetWindowPos (Address: 0x180037d90)
SystemParametersInfoW (Address: 0x180037d80)