uwfwmi.dll

vUnknown 32-bit Unknown OS Analyzed
Download
Description
—
Authors
Unknown
File size
184.4 KB
Uploaded
2025-12-01 08:31
Views
30
SHA-256
bc2b7f62a34d99e506e080c9332f9727

Exported functions 12

MethodAccessCheck #1 · 0x11730
PropertyAccessCheck #2 · 0x116a0
DllCanUnloadNow #3 · 0x11030
DllGetClassObject #4 · 0x11060
DllRegisterServer #5 · 0x10fa0
DllUnregisterServer #6 · 0x10ff0
DoUnattend #7 · 0x117e0
GetProviderClassID #8 · 0x10e30
MI_Main #9 · 0x10da0
UwfSysprepCleanup #10 · 0x110d0
UwfSysprepGeneralize #11 · 0x110c0
UwfSysprepSpecialize #12 · 0x110c0

Imported DLLs & functions 213

api-ms-win-core-com-l1-1-0.dll 3
CoCreateInstance 0x10025010
CoImpersonateClient 0x10025008
CoRevertToSelf 0x1002500c
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1002501c
IsDebuggerPresent 0x10025020
OutputDebugStringA 0x10025024
OutputDebugStringW 0x10025018
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1002502c
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x10025034
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x10025040
RaiseException 0x1002504c
SetLastError 0x1002503c
SetUnhandledExceptionFilter 0x10025044
UnhandledExceptionFilter 0x10025048
api-ms-win-core-file-l1-1-0.dll 6
CreateDirectoryW 0x10025064
FindFirstVolumeW 0x10025054
FindNextVolumeW 0x10025060
FindVolumeClose 0x10025058
GetFileAttributesW 0x1002505c
GetFullPathNameW 0x10025068
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10025070
api-ms-win-core-heap-l1-1-0.dll 6
GetProcessHeap 0x1002508c
HeapAlloc 0x10025078
HeapDestroy 0x10025080
HeapFree 0x10025088
HeapReAlloc 0x1002507c
HeapSize 0x10025084
api-ms-win-core-libraryloader-l1-2-0.dll 12
DisableThreadLibraryCalls 0x100250ac
FindResourceExW 0x100250b8
FreeLibrary 0x100250b0
GetModuleFileNameA 0x100250a0
GetModuleFileNameW 0x10025098
GetModuleHandleExW 0x1002509c
GetModuleHandleW 0x100250a4
GetProcAddress 0x100250bc
LoadLibraryExW 0x100250c0
LoadResource 0x100250b4
LockResource 0x100250a8
SizeofResource 0x10025094
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x100250c8
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100250d0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x100250d8
GetCurrentProcessId 0x100250e4
GetCurrentThreadId 0x100250dc
TerminateProcess 0x100250e0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100250ec
api-ms-win-core-registry-l1-1-0.dll 2
RegEnumKeyExW 0x100250f8
RegGetValueW 0x100250f4
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10025110
AcquireSRWLockShared 0x10025128
CreateMutexExW 0x10025120
CreateSemaphoreExW 0x10025100
DeleteCriticalSection 0x10025138
EnterCriticalSection 0x1002512c
InitializeCriticalSection 0x10025124
InitializeCriticalSectionEx 0x10025134
LeaveCriticalSection 0x1002510c
OpenSemaphoreW 0x10025118
ReleaseMutex 0x1002513c
ReleaseSemaphore 0x1002511c
ReleaseSRWLockExclusive 0x10025104
ReleaseSRWLockShared 0x10025130
WaitForSingleObject 0x10025108
WaitForSingleObjectEx 0x10025114
api-ms-win-core-synch-l1-2-0.dll 5
InitOnceBeginInitialize 0x1002514c
InitOnceComplete 0x10025148
Sleep 0x10025154
SleepConditionVariableSRW 0x10025150
WakeAllConditionVariable 0x10025144
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemDirectoryW 0x10025160
GetSystemTimeAsFileTime 0x10025164
GetTickCount 0x1002515c
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x10025174
CreateThreadpoolTimer 0x10025178
SetThreadpoolTimer 0x1002516c
WaitForThreadpoolTimerCallbacks 0x10025170
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x10025194
EventRegister 0x1002518c
EventSetInformation 0x10025190
EventUnregister 0x10025184
EventWrite 0x10025188
EventWriteTransfer 0x10025180
msvcrt.dll 34
__CxxFrameHandler3 0x10025208
__dllonexit 0x100251c0
__iob_func 0x100251b4
_amsg_exit 0x100251d4
_callnewh 0x100251e4
_errno 0x100251c4
_except_handler4_common 0x100251d0
_initterm 0x100251ac
_lock 0x100251a8
_onexit 0x100251bc
_purecall 0x10025200
_unlock 0x100251a4
_vsnprintf 0x100251b0
_vsnwprintf 0x10025220
_wcsicmp 0x100251ec
_wcsnicmp 0x100251d8
_wtoi 0x100251f0
_XcptFilter 0x100251e0
calloc 0x100251e8
fputws 0x100251f8
free 0x10025214
malloc 0x10025210
memcmp 0x100251f4
memcpy 0x100251b8
memcpy_s 0x1002521c
memmove_s 0x100251fc
memset 0x100251cc
realloc 0x100251c8
swprintf_s 0x10025218
vswprintf_s 0x10025204
wcscat_s 0x100251dc
wcschr 0x1002519c
wcsncmp 0x1002520c
wcsrchr 0x100251a0
ntdll.dll 2
RtlAllocateHeap 0x10025228
RtlFreeHeap 0x1002522c
OLEAUT32.dll 1
SysFreeString 0x10025000
uwfcfgmgmt.dll 94
_MultiSzFree@4 0x1002527c
??0CUwfOverlayDevice@@QAE@XZ 0x1002526c
??0CUwfRegKey@@QAE@XZ 0x10025370
??1CDevice@@UAE@XZ 0x10025268
??1CUwfRegKey@@QAE@XZ 0x1002536c
?AddFileExclusion@CUwfStaticVolumeConfiguration@@QAEJPBG@Z 0x100253a8
?AddMultiSzValue@CUwfRegKey@@QAEJPBG0@Z 0x100252b8
?AddRegKeyExclusion@CUwfStaticConfiguration@@QAEJPBG@Z 0x100252f8
?Begin@CUwfProvider@@QAEJ_N@Z 0x100252ac
?Begin@CUwfProvider@@QAEJXZ 0x10025388
?CanVolumeBeProtected@@YGJPBG_NPA_N@Z 0x100252a0
?CaptureUwfSettings@@YGJW4E_UNATTEND_REASON@@@Z 0x10025360
?CommitFile@CUwfManagement@@QAEJPBG0@Z 0x10025294
?CommitFileDeletion@CUwfManagement@@QAEJPBG00@Z 0x10025290
?CommitRegistry@CUwfManagement@@QAEJ_NPBG1@Z 0x100252d0
?CommitRegistryDeletion@CUwfManagement@@QAEJ_NPBG1@Z 0x10025298
?CopyTree@CUwfRegKey@@QAEJAAV1@PBG_N@Z 0x10025340
?Create@CUwfRegKey@@QAEJPAUHKEY__@@PBGPAGKKPAU_SECURITY_ATTRIBUTES@@PAK@Z 0x10025344
?CreateVolume@CUwfStaticConfiguration@@QAEJPBG0PAPAVCUwfStaticVolumeConfiguration@@@Z 0x100252c8
?DeleteTree@CUwfRegKey@@QAEJPBG@Z 0x10025364
?DisableAutoDefragService@@YGJH@Z 0x10025348
?Finalize@CUwfProvider@@QAEJXZ 0x1002537c
?FindFileExclusion@CUwfStaticVolumeConfiguration@@QAEJPBG@Z 0x10025284
?FindRegKeyExclusion@CUwfStaticConfiguration@@QAEJPBG@Z 0x10025234
?FixupLowerFiltersSetting@@YGJXZ 0x1002535c
?FixupUpdatedSettings@CUwfConfiguration@@QAEJXZ 0x100252e0
?get_BindingType@CUwfStaticVolumeConfiguration@@QAEJPAK@Z 0x100252b0
?get_DriveLetter@CUwfStaticVolumeConfiguration@@QAEJPAPAG@Z 0x100252cc
?get_FileExclusions@CUwfStaticVolumeConfiguration@@QAEJPAPAU_MULTISZ@@@Z 0x10025280
?get_HORMEnabled@CUwfConfiguration@@QAEJPA_N@Z 0x10025324
?get_HORMEnabled@CUwfManagement@@QAEJPA_N@Z 0x10025384
?get_NumVolumes@CUwfStaticConfiguration@@QAEJPAK@Z 0x100253a0
?get_OverlayCriticalThreshold@CUwfManagement@@QAEJPAK@Z 0x10025274
?get_OverlayInformation@CUwfManagement@@QAEJPBGPAU_UWFVOL_OVERLAY_DATA_OUTPUT@@PAK2@Z 0x10025278
?get_OverlayMaximumSize@CUwfManagement@@QAEJ_NPAK@Z 0x100252fc
?get_OverlayMaximumSize@CUwfStaticConfiguration@@QAEJPAK@Z 0x10025318
?get_OverlayType@CUwfManagement@@QAEJ_NPAW4_UWF_CONFIG_OVERLAY_TYPE@@@Z 0x1002530c
?get_OverlayType@CUwfStaticConfiguration@@QAEJPAW4_UWF_CONFIG_OVERLAY_TYPE@@@Z 0x100252a4
?get_OverlayWarningThreshold@CUwfManagement@@QAEJPAK@Z 0x10025270
?get_PersistDomainSecretKey@CUwfStaticConfiguration@@QAEJPA_N@Z 0x10025240
?get_PersistTSCAL@CUwfStaticConfiguration@@QAEJPA_N@Z 0x1002523c
?get_Protected@CUwfStaticVolumeConfiguration@@QAEJPA_N@Z 0x100252ec
?get_RegKeyExclusions@CUwfStaticConfiguration@@QAEJPAPAU_MULTISZ@@@Z 0x1002534c
?get_ServicingModeEnabled@CUwfStaticConfiguration@@QAEJPA_N@Z 0x1002532c
?get_StaticVolumeConfiguration@CUwfStaticConfiguration@@QAEJKPAPAVCUwfStaticVolumeConfiguration@@@Z 0x10025398
?get_UwfConfiguration@CUwfManagement@@QAEJPAPAVCUwfConfiguration@@@Z 0x100252e4
?get_UwfEnabled@CUwfStaticConfiguration@@QAEJPA_N@Z 0x100252d4
?get_VolumeGuid@CUwfStaticVolumeConfiguration@@QAEJPAPAG@Z 0x10025394
?GetConfiguration@CUwfProvider@@QAEPAVCUwfConfiguration@@XZ 0x10025320
?GetDriveLetterFromVolumeName@@YGJPBGPAG@Z 0x100252f0
?GetManagement@CUwfProvider@@QAEPAVCUwfManagement@@XZ 0x10025380
?GetOverlayFiles@CUwfOverlayDevice@@QAEJAA_KAAV?$CRBMap@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_KV?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@V?$CElementTraits@_K@2@@ATL@@@Z 0x10025260
?GetStaticConfiguration@CUwfProvider@@QAEJ_NPAPAVCUwfStaticConfiguration@@@Z 0x1002531c
?GetSystemShutdownState@CUwfManagement@@QAEJPA_N@Z 0x1002525c
?GetUwfProtectableVolumeList@@YGJ_NPAKPAUUWF_PROTECTABLEVOLUME_INFO@@@Z 0x100252b4
?GetUwfProvider@CUwfProvider@@SGPAV1@XZ 0x10025390
?GetWinResumeObjectId@@YGJPAPAG@Z 0x100253a4
?HiberFileExists@@YG_NXZ 0x10025250
?Initialize@CUwfOverlayDevice@@QAEJPBG@Z 0x10025264
?IsHORMEnabled@CUwfConfiguration@@QAE_NXZ 0x1002529c
?IsUserAdmin@@YGJPA_N@Z 0x10025374
?IsValidDriveLetter@@YG_NPBG@Z 0x10025338
?IsValidOverlayConfig@@YG_NW4_UWF_CONFIG_OVERLAY_TYPE@@K@Z 0x10025314
?LOCK@CUwfProvider@@QAEXXZ 0x1002538c
?LookupShutdownPrivilegeInCurThreadToken@CUwfManagement@@QAEJAA_N@Z 0x10025248
?Open@CUwfRegKey@@QAEJPAUHKEY__@@PBGK@Z 0x10025368
?ParsePathSpec@@YGJPBGPAGK1K1K@Z 0x100252f4
?QueryDWORDValue@CUwfRegKey@@QAEJPBGPAK@Z 0x100252bc
?QueryMultiSzValue@CUwfRegKey@@QAEJPBGPAPAU_MULTISZ@@@Z 0x1002533c
?RegReadValue@@YGJPAUHKEY__@@PBGKPAPAEPAK@Z 0x10025358
?ReleaseStaticVolumeConfiguration@CUwfStaticConfiguration@@QAEXXZ 0x1002539c
?RemoveAllFileExclusions@CUwfStaticVolumeConfiguration@@QAEJXZ 0x10025288
?RemoveFileExclusion@CUwfStaticVolumeConfiguration@@QAEJPBG@Z 0x1002528c
?RemoveRegKeyExclusion@CUwfStaticConfiguration@@QAEJPBG@Z 0x10025238
?ResetUwfSettings@CUwfManagement@@QAEJXZ 0x1002524c
?set_BindingType@CUwfStaticVolumeConfiguration@@QAEJK@Z 0x100252c0
?set_HORMEnabled@CUwfManagement@@QAEJ_N@Z 0x100252dc
?set_OverlayCriticalThreshold@CUwfManagement@@QAEJK@Z 0x10025330
?set_OverlayMaximumSize@CUwfManagement@@QAEJK@Z 0x100252c4
?set_OverlayMaximumSize@CUwfStaticConfiguration@@QAEJK@Z 0x10025310
?set_OverlayType@CUwfManagement@@QAEJW4_UWF_CONFIG_OVERLAY_TYPE@@@Z 0x10025308
?set_OverlayWarningThreshold@CUwfManagement@@QAEJK@Z 0x10025328
?set_PersistDomainSecretKey@CUwfStaticConfiguration@@QAEJ_N@Z 0x10025304
?set_PersistTSCAL@CUwfStaticConfiguration@@QAEJ_N@Z 0x10025300
?set_Protected@CUwfStaticVolumeConfiguration@@QAEJ_N@Z 0x100252e8
?set_ServicingModeEnabled@CUwfManagement@@QAEJ_N0@Z 0x10025334
?set_UwfEnabled@CUwfStaticConfiguration@@QAEJ_N@Z 0x10025258
?SetBootStatusPolicy@@YGJPBG@Z 0x10025354
?ShutdownSystem@CUwfManagement@@QAEJ_N@Z 0x10025244
?UNLOCK@CUwfProvider@@QAEXXZ 0x10025378
?VolumeGetConfig@@YGJPAVCUwfStaticConfiguration@@PBG1PAPAVCUwfStaticVolumeConfiguration@@@Z 0x100252a8
?VolumeGetVolumeGuid@@YGJPBGPAGK@Z 0x10025350
UwfCfgSetFilterEnabled 0x10025254
UwfCfgSetHormEnabled 0x100252d8