ProtectionManagement.dll

v4.18.1909.6 64-bit Windows NT Analyzed
Description
Protection Management WMIv2 Provider
Authors
© Microsoft Corporation. All rights reserved.
File size
678.9 KB
Uploaded
2025-12-01 08:30
Views
42
SHA-256
049f84d124f419f11f47a2e24dba15f2

Exported functions 7

DllCanUnloadNow #1 · 0x1920
DllGetClassObject #2 · 0x1950
DllMain #3 · 0x15b0
DllRegisterServer #4 · 0x1880
DllUnregisterServer #5 · 0x18d0
GetProviderClassID #6 · 0x16d0
MI_Main #7 · 0x1a30

Imported DLLs & functions 275

ADVAPI32.dll 37
AdjustTokenPrivileges 0x1800735a8
AllocateAndInitializeSid 0x1800735f8
ChangeServiceConfigW 0x1800735d0
CheckTokenMembership 0x1800735f0
CloseServiceHandle 0x180073598
ControlService 0x1800735c8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180073638
CreateProcessAsUserW 0x180073590
DeregisterEventSource 0x180073670
DuplicateTokenEx 0x180073608
FreeSid 0x1800735e8
GetSidSubAuthority 0x180073600
GetSidSubAuthorityCount 0x180073610
GetTokenInformation 0x180073618
GetTraceEnableFlags 0x180073690
GetTraceEnableLevel 0x180073698
GetTraceLoggerHandle 0x180073688
InitiateSystemShutdownExW 0x1800735a0
LookupPrivilegeNameW 0x1800736b0
LookupPrivilegeValueW 0x1800735b8
OpenProcessToken 0x180073620
OpenSCManagerW 0x1800735e0
OpenServiceW 0x1800735d8
PrivilegeCheck 0x1800735b0
QueryServiceStatus 0x1800735c0
RegCloseKey 0x180073650
RegCreateKeyExW 0x180073660
RegDeleteKeyW 0x180073648
RegDeleteValueW 0x180073640
RegisterEventSourceW 0x180073668
RegisterTraceGuidsW 0x1800736a0
RegOpenKeyExW 0x180073630
RegQueryValueExW 0x180073628
RegSetValueExW 0x180073658
ReportEventW 0x180073678
TraceMessage 0x180073680
UnregisterTraceGuids 0x1800736a8
CRYPT32.dll 1
CertVerifyCertificateChainPolicy 0x1800736c0
KERNEL32.dll 137
CloseHandle 0x1800738b8
CompareFileTime 0x180073978
CopyFileW 0x180073ad8
CreateDirectoryW 0x180073af0
CreateEventW 0x180073988
CreateFileW 0x1800737b8
CreateMutexW 0x180073ac8
CreateProcessW 0x180073ad0
CreateThread 0x180073a10
CreateToolhelp32Snapshot 0x180073a88
DeleteCriticalSection 0x180073860
DeleteFileW 0x180073a40
EncodePointer 0x1800737f8
EnterCriticalSection 0x1800738c8
ExitProcess 0x180073778
ExitThread 0x180073958
FileTimeToSystemTime 0x180073998
FindClose 0x180073a50
FindFirstFileExW 0x180073948
FindFirstFileW 0x180073a60
FindNextFileW 0x180073a58
FindResourceExW 0x1800738d0
FindResourceW 0x180073a70
FlushFileBuffers 0x1800737a0
FormatMessageW 0x180073af8
FreeEnvironmentStringsW 0x180073928
FreeLibrary 0x1800738f8
FreeLibraryAndExitThread 0x180073950
FreeResource 0x180073a68
GetACP 0x180073748
GetCommandLineA 0x180073940
GetCommandLineW 0x180073938
GetConsoleCP 0x180073790
GetConsoleMode 0x180073798
GetCPInfo 0x180073738
GetCurrentProcess 0x180073808
GetCurrentProcessId 0x1800737d0
GetCurrentThreadId 0x1800736d8
GetDiskFreeSpaceExW 0x180073a98
GetDriveTypeW 0x1800739a8
GetEnvironmentStringsW 0x180073930
GetExitCodeProcess 0x180073980
GetExitCodeThread 0x180073a00
GetFileAttributesExW 0x180073960
GetFileAttributesW 0x180073b08
GetFileSize 0x180073a28
GetFileSizeEx 0x180073758
GetFileType 0x1800736e8
GetLastError 0x180073908
GetLocaleInfoW 0x180073730
GetLocalTime 0x1800739b8
GetLongPathNameW 0x180073a20
GetModuleFileNameW 0x1800737a8
GetModuleHandleExW 0x180073780
GetModuleHandleW 0x180073830
GetNativeSystemInfo 0x1800739c8
GetOEMCP 0x180073750
GetPrivateProfileIntW 0x1800739f0
GetPrivateProfileStringW 0x1800739f8
GetProcAddress 0x180073900
GetProcessHeap 0x180073878
GetStartupInfoW 0x1800736f0
GetStdHandle 0x1800736e0
GetStringTypeW 0x180073910
GetSystemDefaultUILanguage 0x1800739e0
GetSystemDirectoryW 0x180073918
GetSystemTime 0x1800738a8
GetSystemTimeAsFileTime 0x180073720
GetTempFileNameW 0x180073ae0
GetTempPathW 0x180073ae8
GetTickCount 0x180073968
GetTimeZoneInformation 0x1800738b0
GetUserDefaultUILanguage 0x1800739d8
GetVersionExW 0x1800739b0
GetWindowsDirectoryW 0x180073aa0
GlobalFindAtomW 0x1800739a0
HeapAlloc 0x180073880
HeapDestroy 0x180073870
HeapFree 0x180073888
HeapReAlloc 0x180073890
HeapSize 0x180073898
InitializeCriticalSection 0x180073868
InitializeCriticalSectionAndSpinCount 0x1800736f8
InitializeSListHead 0x1800737d8
InterlockedFlushSList 0x1800737e8
IsDebuggerPresent 0x180073820
IsProcessorFeaturePresent 0x180073768
IsValidCodePage 0x180073740
IsWow64Process 0x180073ab8
K32GetModuleFileNameExW 0x180073a38
LCMapStringW 0x180073728
LeaveCriticalSection 0x1800738c0
LoadLibraryExW 0x1800738f0
LoadResource 0x1800738d8
LocalFree 0x180073ab0
LockResource 0x1800738e0
MoveFileW 0x180073a18
MultiByteToWideChar 0x180073850
OpenProcess 0x180073a90
Process32FirstW 0x180073a80
Process32NextW 0x180073a78
ProcessIdToSessionId 0x1800739d0
QueryPerformanceCounter 0x1800737c8
RaiseException 0x180073858
ReadFile 0x1800737b0
ReleaseMutex 0x180073ac0
RemoveDirectoryW 0x180073a48
ResetEvent 0x180073a08
RtlCaptureContext 0x180073840
RtlLookupFunctionEntry 0x180073838
RtlPcToFileHeader 0x1800737f0
RtlUnwindEx 0x1800737e0
RtlVirtualUnwind 0x180073828
SetEvent 0x180073990
SetFileAttributesW 0x180073b00
SetFilePointerEx 0x180073760
SetLastError 0x1800736d0
SetStdHandle 0x180073770
SetUnhandledExceptionFilter 0x180073810
SizeofResource 0x1800738e8
Sleep 0x180073aa8
SwitchToThread 0x180073970
SystemTimeToFileTime 0x1800739c0
TerminateProcess 0x180073800
TlsAlloc 0x180073700
TlsFree 0x180073718
TlsGetValue 0x180073708
TlsSetValue 0x180073710
TryEnterCriticalSection 0x180073b10
UnhandledExceptionFilter 0x180073818
VerifyVersionInfoW 0x180073a30
WaitForSingleObject 0x1800738a0
WaitForSingleObjectEx 0x180073920
WideCharToMultiByte 0x180073848
WriteConsoleW 0x1800737c0
WriteFile 0x180073788
WritePrivateProfileStringW 0x1800739e8
mpclient.dll 36
MpAllocMemory 0x180073e38
MpCleanOpen 0x180073e30
MpCleanStart 0x180073de0
MpClientUtilExportFunctions 0x180073e40
MpConfigClose 0x180073d70
MpConfigGetValue 0x180073d60
MpConfigGetValueAlloc 0x180073d68
MpConfigInitialize 0x180073e50
MpConfigIteratorClose 0x180073d78
MpConfigIteratorEnum 0x180073e60
MpConfigIteratorOpen 0x180073d98
MpConfigOpen 0x180073d90
MpConfigRegisterForNotifications 0x180073d88
MpConfigUninitialize 0x180073e48
MpConfigUnregisterNotifications 0x180073d80
MpCreateComInstance 0x180073db8
MpDetectionEnumerate 0x180073d58
MpElevateCleanHandle 0x180073e10
MpElevationHandleAcquire 0x180073e18
MpFreeMemory 0x180073e58
MpGetCallistoDetections 0x180073da0
MpGetTPStateInfo 0x180073db0
MpHandleClose 0x180073e08
MpManagerOpen 0x180073e00
MpManagerStatusQueryEx 0x180073df0
MpManagerVersionQuery 0x180073da8
MpNotificationRegister 0x180073df8
MpOfflineScanInstall 0x180073dd0
MpScanStartEx 0x180073dc0
MpThreatEnumerate 0x180073de8
MpThreatOpen 0x180073d48
MpThreatQuery 0x180073e20
MpThreatRollup 0x180073d50
MpTriggerHeartbeatOnUninstall 0x180073dd8
MpUpdateStartEx 0x180073dc8
MpUtilsExportFunctions 0x180073e28
ole32.dll 3
CoCreateGuid 0x180073e80
CoCreateInstance 0x180073e70
StringFromGUID2 0x180073e78
OLEAUT32.dll 10
SafeArrayCreate 0x180073b48
SysAllocString 0x180073b20
SysAllocStringByteLen 0x180073b58
SysAllocStringLen 0x180073b40
SysFreeString 0x180073b50
SysStringByteLen 0x180073b60
SysStringLen 0x180073b68
VarBstrCat 0x180073b38
VariantClear 0x180073b30
VariantInit 0x180073b28
SHELL32.dll 3
SHGetFolderPathW 0x180073b80
SHGetPathFromIDListW 0x180073b78
SHGetSpecialFolderLocation 0x180073b88
SHLWAPI.dll 8
PathAppendW 0x180073bc8
PathCombineW 0x180073bc0
PathFileExistsW 0x180073bb8
PathFindFileNameW 0x180073b98
PathIsDirectoryW 0x180073bb0
PathIsRelativeW 0x180073ba0
PathMatchSpecW 0x180073bd0
PathRemoveFileSpecW 0x180073ba8
USER32.dll 22
AdjustWindowRectEx 0x180073c70
CreateDialogParamW 0x180073bf0
DestroyIcon 0x180073be8
DestroyWindow 0x180073c00
FindWindowW 0x180073c30
GetLastActivePopup 0x180073c80
GetSystemMetrics 0x180073c28
GetWindowThreadProcessId 0x180073c38
IsDialogMessageW 0x180073c60
KillTimer 0x180073c58
LoadIconW 0x180073bf8
LoadImageW 0x180073be0
LoadStringW 0x180073c18
MessageBoxW 0x180073c40
PostMessageW 0x180073c20
PostThreadMessageW 0x180073c68
SendMessageW 0x180073c08
SetForegroundWindow 0x180073c48
SetTimer 0x180073c50
SetWindowTextW 0x180073c78
ShowWindow 0x180073c10
UnregisterClassA 0x180073c88
USERENV.dll 2
CreateEnvironmentBlock 0x180073ca0
DestroyEnvironmentBlock 0x180073c98
VERSION.dll 3
GetFileVersionInfoSizeW 0x180073cb0
GetFileVersionInfoW 0x180073cb8
VerQueryValueW 0x180073cc0
WINTRUST.dll 9
CryptCATAdminAcquireContext 0x180073cf8
CryptCATAdminCalcHashFromFileHandle 0x180073cf0
CryptCATAdminEnumCatalogFromHash 0x180073cd8
CryptCATAdminReleaseCatalogContext 0x180073d08
CryptCATAdminReleaseContext 0x180073d10
CryptCATCatalogInfoFromContext 0x180073ce8
WinVerifyTrust 0x180073ce0
WTHelperGetProvSignerFromChain 0x180073cd0
WTHelperProvDataFromStateData 0x180073d00
WTSAPI32.dll 4
WTSEnumerateSessionsW 0x180073d28
WTSFreeMemory 0x180073d30
WTSQuerySessionInformationW 0x180073d20
WTSQueryUserToken 0x180073d38