AMMonitoringProvider.dll

v4.18.1907.16384 64-bit Windows NT Analyzed
Description
Microsoft Security Client Antimalware Monitoring Provider
Authors
© Microsoft Corporation. All rights reserved.
File size
200.9 KB
Uploaded
2025-12-01 08:30
Views
47
SHA-256
d59587f93579682774e3135b49cfa07c

Exported functions 4

DllCanUnloadNow #1 · 0x7730
DllGetClassObject #2 · 0x7770
DllRegisterServer #3 · 0x78b0
DllUnregisterServer #4 · 0x7990

Imported DLLs & functions 261

ADVAPI32.dll 43
AdjustTokenPrivileges 0x180021798
AllocateAndInitializeSid 0x180021850
ChangeServiceConfigW 0x1800217c0
CheckTokenMembership 0x180021848
CloseServiceHandle 0x180021778
ControlService 0x1800217b8
ControlTraceW 0x180021730
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180021860
CreateProcessAsUserW 0x180021780
DeregisterEventSource 0x180021718
DuplicateTokenEx 0x1800217c8
EnableTrace 0x180021728
FreeSid 0x180021770
GetSidSubAuthority 0x180021858
GetSidSubAuthorityCount 0x180021768
GetTokenInformation 0x180021758
GetTraceEnableFlags 0x1800217e0
GetTraceEnableLevel 0x1800217e8
GetTraceLoggerHandle 0x1800217f0
GetUserNameW 0x180021750
InitiateSystemShutdownExW 0x180021790
LookupPrivilegeNameW 0x180021788
LookupPrivilegeValueW 0x1800217a8
OpenProcessToken 0x180021738
OpenSCManagerW 0x180021840
OpenServiceW 0x180021838
OpenThreadToken 0x180021760
PrivilegeCheck 0x1800217a0
QueryServiceStatus 0x1800217b0
RegCloseKey 0x180021830
RegCreateKeyExW 0x180021808
RegDeleteKeyW 0x180021740
RegDeleteValueW 0x180021800
RegEnumKeyExW 0x180021820
RegisterEventSourceW 0x180021720
RegisterTraceGuidsW 0x1800217d8
RegOpenKeyExW 0x180021818
RegQueryInfoKeyW 0x180021828
RegQueryValueExW 0x180021748
RegSetValueExW 0x180021810
ReportEventW 0x180021710
TraceMessage 0x1800217f8
UnregisterTraceGuids 0x1800217d0
CRYPT32.dll 1
CertVerifyCertificateChainPolicy 0x180021870
KERNEL32.dll 107
AcquireSRWLockExclusive 0x1800218b8
CloseHandle 0x180021968
CopyFileW 0x180021af0
CreateDirectoryW 0x180021990
CreateEventW 0x180021a08
CreateFileW 0x1800219e8
CreateMutexW 0x180021b00
CreateProcessW 0x180021a38
CreateThread 0x180021b80
CreateToolhelp32Snapshot 0x180021b28
DecodePointer 0x180021948
DeleteCriticalSection 0x180021930
DeleteFileW 0x180021a18
DisableThreadLibraryCalls 0x180021a48
EncodePointer 0x180021950
EnterCriticalSection 0x180021908
ExpandEnvironmentStringsW 0x1800219c0
FileTimeToSystemTime 0x180021a58
FindClose 0x1800219d8
FindFirstFileW 0x1800219a0
FindNextFileW 0x1800219b0
FindResourceExW 0x180021940
FindResourceW 0x180021b40
FreeLibrary 0x180021ae0
FreeResource 0x180021b48
GetCurrentProcess 0x1800218d0
GetCurrentProcessId 0x180021898
GetCurrentThread 0x180021960
GetCurrentThreadId 0x180021890
GetDiskFreeSpaceExW 0x180021b20
GetDriveTypeW 0x180021bc8
GetExitCodeProcess 0x180021a40
GetExitCodeThread 0x180021b88
GetFileAttributesW 0x1800219f0
GetFileSize 0x180021b68
GetFileSizeEx 0x1800219a8
GetLastError 0x180021ad8
GetLocaleInfoW 0x180021af8
GetLocalTime 0x180021a60
GetLongPathNameW 0x180021b70
GetModuleFileNameW 0x180021938
GetModuleHandleW 0x180021ac0
GetNativeSystemInfo 0x180021a20
GetPrivateProfileIntW 0x180021b98
GetPrivateProfileStringW 0x180021b90
GetProcAddress 0x180021ad0
GetProcessHeap 0x180021a90
GetSystemDefaultUILanguage 0x180021ba8
GetSystemDirectoryW 0x1800219f8
GetSystemTimeAsFileTime 0x180021888
GetTempFileNameW 0x180021ae8
GetTempPathW 0x1800219d0
GetThreadLocale 0x180021918
GetTickCount 0x180021b50
GetUserDefaultUILanguage 0x180021bb0
GetVersionExW 0x180021bc0
GetWindowsDirectoryW 0x180021b18
GlobalFindAtomW 0x180021bd0
HeapAlloc 0x180021a88
HeapDestroy 0x180021a98
HeapFree 0x180021a80
HeapReAlloc 0x180021a78
HeapSize 0x180021a70
InitializeCriticalSection 0x180021928
InitializeCriticalSectionAndSpinCount 0x180021988
IsWow64Process 0x180021b10
K32GetModuleFileNameExW 0x180021b58
LeaveCriticalSection 0x180021900
LoadLibraryExW 0x180021ac8
LoadResource 0x180021958
LocalFree 0x180021a30
LockResource 0x180021978
lstrcmpiW 0x180021ab8
MoveFileW 0x180021b78
MultiByteToWideChar 0x180021aa8
OpenProcess 0x180021a00
OutputDebugStringA 0x180021880
Process32FirstW 0x180021b30
Process32NextW 0x180021b38
ProcessIdToSessionId 0x180021bb8
QueryPerformanceCounter 0x1800218a0
RaiseException 0x180021ab0
ReadFile 0x180021998
ReleaseMutex 0x180021b08
ReleaseSRWLockExclusive 0x1800218c0
RemoveDirectoryW 0x1800219c8
ResetEvent 0x180021a28
RtlCaptureContext 0x1800218f8
RtlLookupFunctionEntry 0x1800218f0
RtlVirtualUnwind 0x1800218e8
SetEvent 0x180021a10
SetLastError 0x180021980
SetThreadLocale 0x180021910
SetUnhandledExceptionFilter 0x1800218d8
SizeofResource 0x180021aa0
Sleep 0x180021920
SleepConditionVariableSRW 0x1800218a8
SwitchToThread 0x180021970
SystemTimeToFileTime 0x180021a68
TerminateProcess 0x1800218c8
UnhandledExceptionFilter 0x1800218e0
VerifyVersionInfoW 0x180021b60
VirtualLock 0x180021a50
WaitForSingleObject 0x1800219e0
WakeAllConditionVariable 0x1800218b0
WriteFile 0x1800219b8
WritePrivateProfileStringW 0x180021ba0
mpclient.dll 1
MpClientUtilExportFunctions 0x180021df0
msvcrt.dll 41
__C_specific_handler 0x180021ee0
__CxxFrameHandler3 0x180021f08
__dllonexit 0x180021e28
_amsg_exit 0x180021e50
_CxxThrowException 0x180021e70
_errno 0x180021e10
_initterm 0x180021f38
_lock 0x180021f10
_onexit 0x180021e20
_purecall 0x180021ee8
_unlock 0x180021e30
_vscwprintf 0x180021f20
_vsnprintf 0x180021e00
_vsnwprintf 0x180021f18
_wchmod 0x180021ef0
_wcstoui64 0x180021e48
_XcptFilter 0x180021e58
??0exception@@QEAA@AEBQEBD@Z 0x180021e78
??0exception@@QEAA@AEBQEBDH@Z 0x180021e98
??0exception@@QEAA@AEBV0@@Z 0x180021e90
??0exception@@QEAA@XZ 0x180021e80
??1exception@@UEAA@XZ 0x180021ea0
??1type_info@@UEAA@XZ 0x180021e18
?terminate@@YAXXZ 0x180021e40
?what@exception@@UEBAPEBDXZ 0x180021ea8
free 0x180021ec8
iswalpha 0x180021f00
malloc 0x180021ed0
memcpy 0x180021e68
memcpy_s 0x180021ec0
memmove 0x180021e60
memmove_s 0x180021e88
memset 0x180021f40
realloc 0x180021e08
swscanf_s 0x180021f30
vswprintf_s 0x180021f28
wcscat_s 0x180021eb0
wcschr 0x180021e38
wcscpy_s 0x180021eb8
wcsncpy_s 0x180021ed8
wcsrchr 0x180021ef8
ntdll.dll 2
RtlGetVersion 0x180021f50
RtlNtStatusToDosError 0x180021f58
ole32.dll 8
CoCreateGuid 0x180021fa0
CoCreateInstance 0x180021f80
CoImpersonateClient 0x180021f68
CoRevertToSelf 0x180021f70
CoTaskMemAlloc 0x180021f88
CoTaskMemFree 0x180021f98
CoTaskMemRealloc 0x180021f90
StringFromGUID2 0x180021f78
OLEAUT32.dll 9
SysAllocString 0x180021c20
SysAllocStringLen 0x180021be8
SysFreeString 0x180021c08
SysStringByteLen 0x180021be0
SysStringLen 0x180021bf8
VarBstrCat 0x180021c00
VariantClear 0x180021bf0
VariantInit 0x180021c10
VarUI4FromStr 0x180021c18
SHELL32.dll 3
SHGetFolderPathW 0x180021c30
SHGetPathFromIDListW 0x180021c38
SHGetSpecialFolderLocation 0x180021c40
SHLWAPI.dll 8
PathAppendW 0x180021c58
PathCombineW 0x180021c60
PathFileExistsW 0x180021c78
PathFindFileNameW 0x180021c88
PathIsDirectoryW 0x180021c80
PathIsRelativeW 0x180021c68
PathMatchSpecW 0x180021c50
PathRemoveFileSpecW 0x180021c70
USER32.dll 20
AdjustWindowRectEx 0x180021cd0
CharNextW 0x180021ce8
CreateDialogParamW 0x180021d28
DestroyWindow 0x180021d18
FindWindowW 0x180021d20
GetSystemMetrics 0x180021cd8
GetWindowThreadProcessId 0x180021c98
IsDialogMessageW 0x180021cc0
KillTimer 0x180021cb8
LoadIconW 0x180021d30
LoadStringW 0x180021d00
MessageBoxW 0x180021ca0
PostMessageW 0x180021cf8
PostThreadMessageW 0x180021cc8
SendMessageW 0x180021d10
SetForegroundWindow 0x180021ca8
SetTimer 0x180021cb0
SetWindowTextW 0x180021ce0
ShowWindow 0x180021d08
UnregisterClassA 0x180021cf0
USERENV.dll 2
CreateEnvironmentBlock 0x180021d48
DestroyEnvironmentBlock 0x180021d40
VERSION.dll 3
GetFileVersionInfoSizeW 0x180021d60
GetFileVersionInfoW 0x180021d58
VerQueryValueW 0x180021d68
WINTRUST.dll 9
CryptCATAdminAcquireContext 0x180021d88
CryptCATAdminCalcHashFromFileHandle 0x180021d90
CryptCATAdminEnumCatalogFromHash 0x180021d80
CryptCATAdminReleaseCatalogContext 0x180021d78
CryptCATAdminReleaseContext 0x180021db0
CryptCATCatalogInfoFromContext 0x180021da8
WinVerifyTrust 0x180021db8
WTHelperGetProvSignerFromChain 0x180021d98
WTHelperProvDataFromStateData 0x180021da0
WTSAPI32.dll 4
WTSEnumerateSessionsW 0x180021dd0
WTSFreeMemory 0x180021dd8
WTSQuerySessionInformationW 0x180021de0
WTSQueryUserToken 0x180021dc8