FlightSettings.dll
v10.0.19041.2304
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllGetActivationFactory
#1 · 0x38470
ServiceMain
#2 · 0x39280
SvchostPushServiceGlobals
#3 · 0x390a0
DllCanUnloadNow
#4 · 0x38440
DllGetClassObject
#5 · 0x38330
No function matches your filter.
Imported DLLs & functions 235
ApiSetQueryApiSetPresence
0x100aa000
DebugBreak
0x100aa018
IsDebuggerPresent
0x100aa014
OutputDebugStringW
0x100aa01c
DelayLoadFailureHook
0x100aa024
ResolveDelayLoadedAPI
0x100aa02c
GetLastError
0x100aa040
RaiseException
0x100aa034
SetLastError
0x100aa044
SetUnhandledExceptionFilter
0x100aa038
UnhandledExceptionFilter
0x100aa03c
CreateDirectoryW
0x100aa06c
CreateFileA
0x100aa054
CreateFileW
0x100aa068
DefineDosDeviceW
0x100aa088
DeleteFileW
0x100aa04c
FindClose
0x100aa064
FindFirstFileW
0x100aa060
FindNextFileW
0x100aa070
FlushFileBuffers
0x100aa078
GetFileAttributesW
0x100aa058
GetFileSizeEx
0x100aa08c
GetFullPathNameW
0x100aa050
QueryDosDeviceW
0x100aa084
ReadFile
0x100aa080
RemoveDirectoryW
0x100aa074
SetFilePointer
0x100aa05c
WriteFile
0x100aa07c
GetTempPathW
0x100aa094
GetFileInformationByHandleEx
0x100aa09c
CloseHandle
0x100aa0a4
GetProcessHeap
0x100aa0ac
HeapAlloc
0x100aa0b0
HeapFree
0x100aa0b4
CopyFileW
0x100aa0cc
MoveFileW
0x100aa0c8
UnregisterWait
0x100aa0d0
DisableThreadLibraryCalls
0x100aa0e4
FindStringOrdinal
0x100aa0f8
FreeLibrary
0x100aa0f4
GetModuleFileNameA
0x100aa0d8
GetModuleFileNameW
0x100aa0e0
GetModuleHandleExW
0x100aa0f0
GetModuleHandleW
0x100aa0ec
GetProcAddress
0x100aa0e8
LoadLibraryExW
0x100aa0dc
FormatMessageW
0x100aa10c
GetLocaleInfoW
0x100aa104
GetSystemPreferredUILanguages
0x100aa110
GetUserDefaultLocaleName
0x100aa108
GetUserPreferredUILanguages
0x100aa100
GetSystemDefaultUILanguage
0x100aa118
CreateFileMappingW
0x100aa128
MapViewOfFile
0x100aa120
UnmapViewOfFile
0x100aa124
ExpandEnvironmentStringsW
0x100aa13c
CreateProcessW
0x100aa168
GetCurrentProcess
0x100aa14c
GetCurrentProcessId
0x100aa150
GetCurrentThread
0x100aa160
GetCurrentThreadId
0x100aa154
GetExitCodeProcess
0x100aa144
OpenProcessToken
0x100aa158
OpenThreadToken
0x100aa15c
SetThreadToken
0x100aa164
TerminateProcess
0x100aa148
GetProcessMitigationPolicy
0x100aa174
OpenProcess
0x100aa170
QueryPerformanceCounter
0x100aa180
QueryPerformanceFrequency
0x100aa17c
QueryFullProcessImageNameW
0x100aa188
RegCloseKey
0x100aa1b4
RegCreateKeyExW
0x100aa1ac
RegDeleteKeyExW
0x100aa194
RegDeleteTreeW
0x100aa190
RegDeleteValueW
0x100aa198
RegEnumKeyExW
0x100aa1a0
RegEnumValueW
0x100aa1a4
RegGetValueW
0x100aa1bc
RegOpenKeyExW
0x100aa1b8
RegQueryInfoKeyW
0x100aa1b0
RegQueryValueExW
0x100aa19c
RegSetValueExW
0x100aa1a8
RegDeleteKeyValueW
0x100aa1c4
CompareStringOrdinal
0x100aa1e0
MultiByteToWideChar
0x100aa1d8
WideCharToMultiByte
0x100aa1dc
AcquireSRWLockExclusive
0x100aa230
AcquireSRWLockShared
0x100aa204
CreateEventExW
0x100aa208
CreateMutexExW
0x100aa240
CreateMutexW
0x100aa1f4
CreateSemaphoreExW
0x100aa234
DeleteCriticalSection
0x100aa200
EnterCriticalSection
0x100aa220
InitializeCriticalSectionEx
0x100aa1fc
InitializeSRWLock
0x100aa228
LeaveCriticalSection
0x100aa23c
OpenSemaphoreW
0x100aa21c
ReleaseMutex
0x100aa20c
ReleaseSemaphore
0x100aa214
ReleaseSRWLockExclusive
0x100aa238
ReleaseSRWLockShared
0x100aa210
SetEvent
0x100aa1f8
TryEnterCriticalSection
0x100aa224
WaitForSingleObject
0x100aa22c
WaitForSingleObjectEx
0x100aa218
InitOnceBeginInitialize
0x100aa24c
InitOnceComplete
0x100aa254
InitOnceExecuteOnce
0x100aa250
Sleep
0x100aa248
GetComputerNameExW
0x100aa260
GetSystemTimeAsFileTime
0x100aa25c
GetSystemWindowsDirectoryW
0x100aa268
GetTickCount
0x100aa264
GetProductInfo
0x100aa270
CloseThreadpoolTimer
0x100aa280
CreateThreadpoolTimer
0x100aa27c
IsThreadpoolTimerSet
0x100aa284
SetThreadpoolTimer
0x100aa288
WaitForThreadpoolTimerCallbacks
0x100aa278
CreateTimerQueueTimer
0x100aa290
DeleteTimerQueueTimer
0x100aa294
FileTimeToSystemTime
0x100aa2a0
SystemTimeToFileTime
0x100aa29c
UrlEscapeW
0x100aa2a8
GetFileVersionInfoExW
0x100aa2c0
GetFileVersionInfoSizeExW
0x100aa2bc
VerQueryValueW
0x100aa2c4
EventActivityIdControl
0x100aa2dc
EventProviderEnabled
0x100aa2d0
EventRegister
0x100aa2d8
EventSetInformation
0x100aa2e0
EventUnregister
0x100aa2d4
EventWriteTransfer
0x100aa2cc
AdjustTokenPrivileges
0x100aa318
AllocateAndInitializeSid
0x100aa304
CheckTokenMembership
0x100aa2e8
CopySid
0x100aa2f4
CreateWellKnownSid
0x100aa2f8
DuplicateToken
0x100aa2fc
DuplicateTokenEx
0x100aa310
FreeSid
0x100aa300
GetLengthSid
0x100aa2f0
GetTokenInformation
0x100aa308
ImpersonateLoggedOnUser
0x100aa314
IsValidSid
0x100aa2ec
RevertToSelf
0x100aa30c
CheckTokenMembershipEx
0x100aa320
ConvertSidToStringSidW
0x100aa328
CloseServiceHandle
0x100aa334
OpenSCManagerW
0x100aa338
OpenServiceW
0x100aa330
StartServiceW
0x100aa33c
GetPersistedRegistryLocationW
0x100aa348
GetPersistedRegistryValueW
0x100aa344
msvcrt.dll
47
__CxxFrameHandler3
0x100aa3f0
__dllonexit
0x100aa3f8
_amsg_exit
0x100aa40c
_callnewh
0x100aa3cc
_CxxThrowException
0x100aa390
_except_handler4_common
0x100aa3e0
_ftol2
0x100aa394
_ftol2_sse
0x100aa398
_get_errno
0x100aa3d8
_initterm
0x100aa404
_lock
0x100aa400
_onexit
0x100aa3f4
_purecall
0x100aa418
_set_errno
0x100aa3d4
_unlock
0x100aa3fc
_vsnprintf_s
0x100aa370
_vsnwprintf
0x100aa3ac
_wcsicmp
0x100aa380
_wcstoui64
0x100aa3c4
_wcsupr
0x100aa3bc
_wtoi
0x100aa3ec
_wtol
0x100aa36c
_XcptFilter
0x100aa410
??0exception@@QAE@ABV0@@Z
0x100aa384
??0exception@@QAE@XZ
0x100aa3b8
??1exception@@UAE@XZ
0x100aa3c8
??1type_info@@UAE@XZ
0x100aa3b0
?terminate@@YAXXZ
0x100aa3b4
free
0x100aa414
malloc
0x100aa408
memcmp
0x100aa3a4
memcpy
0x100aa3a8
memcpy_s
0x100aa41c
memmove
0x100aa3dc
memmove_s
0x100aa37c
memset
0x100aa424
realloc
0x100aa3e4
swprintf_s
0x100aa374
swscanf_s
0x100aa3a0
toupper
0x100aa388
wcschr
0x100aa420
wcsncmp
0x100aa3d0
wcsnlen
0x100aa39c
wcsrchr
0x100aa38c
wcsstr
0x100aa3e8
wcstok_s
0x100aa378
wcstoul
0x100aa3c0
ntdll.dll
14
EtwTraceMessage
0x100aa42c
NtQueryInformationToken
0x100aa430
NtQueryLicenseValue
0x100aa43c
NtQuerySystemInformation
0x100aa434
NtQueryWnfStateData
0x100aa458
RtlConvertDeviceFamilyInfoToString
0x100aa440
RtlGetDeviceFamilyInfoEnum
0x100aa45c
RtlGetVersion
0x100aa438
RtlIsMultiUsersInSessionSku
0x100aa460
RtlIsStateSeparationEnabled
0x100aa444
RtlNtStatusToDosError
0x100aa450
RtlPublishWnfStateData
0x100aa448
RtlSubscribeWnfStateChangeNotification
0x100aa454
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100aa44c
No function matches your filter.