fwbase.dll
v10.0.19041.6328
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 201
FwExtractPortNumber
#1 · 0x6e80
FwIsValidPorts
#2 · 0x1d460
FwPortsToString
#3 · 0x1d530
FWIndicatePortInUse_Helper
#4 · 0x6d90
FwAddrChangeSourceInitialize
#5 · 0x6b50
FwAddrChangeSourceShutdown
#6 · 0x1dd80
FwAddrChangeSourceSignal
#7 · 0x6090
FwAlloc
#8 · 0x3510
FwAllocArray
#9 · 0x1980
FwAllocCheckSize
#10 · 0x1bd0
FwArrayAppend
#11 · 0x3410
FwArrayCat
#12 · 0x5d30
FwArrayCopy
#13 · 0x2d60
FwArrayCreateFromRegistry
#14 · 0x1c090
FwArrayDestroy
#15 · 0x1a20
FwArrayErase
#16 · 0x1c280
FwAuthSuiteEmpty
#17 · 0x1fab0
FwAuthSuiteEmptyByVersion
#18 · 0x1fac0
FwAuthorizedAppEncode
#19 · 0x1e9c0
FwBaseAlloc
#20 · 0x3510
FwBaseAllocCheckSize
#21 · 0x1bd0
FwBaseFree
#22 · 0x33d0
FwBoolIsEqual
#23 · 0x5fd0
FwBuildIndirectString
#24 · 0x1a7f0
FwCanonizeAuthorizedApps
#25 · 0x5f30
FwChangeSinkCreate
#26 · 0x1420
FwChangeSinkDestroy
#27 · 0x1ddc0
FwChangeSourceInitialize
#28 · 0x6b40
FwChangeSourceShutdown
#29 · 0x1ddf0
FwChangeSourceSignal
#30 · 0x5960
FwChangeSourceSignalStart
#31 · 0x75e0
FwCloseHandle
#32 · 0x5020
FwConstructRemoteMachineSPN
#33 · 0x1a880
FwCreateDirectory
#34 · 0x1aa10
FwCreateSDDLStringFromPolicyAppId
#35 · 0xd6d0
FwCriticalSectionCreate
#36 · 0x5770
FwCriticalSectionDestroy
#37 · 0x1220
FwCriticalSectionEnter
#38 · 0x5660
FwCriticalSectionLeave
#39 · 0x5640
FwDWordMultiply
#40 · 0x1ab80
FwEnableMemTracing
#41 · 0x5a60
FwEnablePrivilege
#42 · 0x1abb0
FwExpandEnvironmentStrings
#43 · 0x5a80
FwFieldNameMatchStringBegining
#44 · 0x4df0
FwFinalHash
#45 · 0x1caa0
FwFree
#46 · 0x33d0
FwFreeCertCriteria
#47 · 0x1fb60
FwFreeRpcCallersProcessInfo
#48 · 0x3330
FwGetAppBlockList
#49 · 0x6750
FwGetAuthorizedApp
#50 · 0x1eaf0
FwGetExpandedCanonicalLongPathName
#51 · 0x6840
FwGetIcmpSettings
#52 · 0x1ebe0
FwGetLongPathName
#53 · 0x5c10
FwGetPolicyAppIdFromSDDLString
#54 · 0xd770
FwGetProfileIndexFromProfileType
#55 · 0x4fa0
FwGetProfileTypeFromProfileIndex
#56 · 0x4f80
FwGetRemoteAdminSettings
#57 · 0x1ecc0
FwGetRpcCallersProcessImageName
#58 · 0x1cce0
FwGetRpcCallersProcessInfo
#59 · 0x1c20
FwGetService
#60 · 0x1fdf0
FwGetServiceTypes
#61 · 0x1fe50
FwGetServices
#62 · 0x1ed10
FwGetStaticFwPort
#63 · 0x1ee00
FwGetStringId
#64 · 0x5dd0
FwGetStringIdForStatusCode
#65 · 0x7250
FwGetSysPathName
#66 · 0x1ae20
FwGetTokenInformation
#67 · 0x25a0
FwHResultToWindowsError
#68 · 0x4ff0
FwHashtableCreate
#69 · 0x6ff0
FwHashtableDestroy
#70 · 0x1cab0
FwHashtableEmpty
#71 · 0x58c0
FwHashtableFind
#72 · 0x1cb50
FwHashtableGetNext
#73 · 0x1cb70
FwHashtableInsert
#74 · 0x1cb90
FwHashtableIsEmpty
#75 · 0xef50
FwHashtableRemove
#76 · 0x1cc00
FwIOReadPortUseIndications
#77 · 0x6260
FwIOWritePortUseIndications
#78 · 0x60e0
FwIcfAuthBypassServicesDestroy
#79 · 0x19b0
FwIcfAuthBypassSubNetsDestroy
#80 · 0x19d0
FwIcfAuthorizedAppCopy
#81 · 0x1c420
FwIcfAuthorizedAppsCopy
#82 · 0x1c5c0
FwIcfAuthorizedAppsDestroy
#83 · 0x1c660
FwIcfDynamicFwPortDestroy
#84 · 0x5e00
FwIcfIpV4SubNetsCanonize
#85 · 0x5680
FwIcfIpV6SubNetsCanonize
#86 · 0x5720
FwIcfSubNetsCopy
#87 · 0x1c9f0
FwIcfSubNetsDestroy
#88 · 0x5e40
FwIcfSubNetsGetScope
#89 · 0x1ca80
FwIcfSubNetsIsEqual
#90 · 0x5ef0
FwImageListDestroy
#91 · 0x1ef10
FwImageListHasImage
#92 · 0x1ef30
FwInitMemoryMgr
#93 · 0x5a60
FwInitializeHashContext
#94 · 0x1cc20
FwIpV4SubNetDecode
#95 · 0x1efa0
FwIsBuiltInPort
#96 · 0x1ff50
FwIsMachineLocalHost
#97 · 0x5090
FwLicensingIsIoT
#98 · 0x7580
FwLicensingIsNetIsolationOnly
#99 · 0x48b0
FwLicensingIsXbox
#100 · 0x55e0
FwLoadIndirectString
#101 · 0x2360
FwLoadString
#102 · 0x64b0
FwLookupAccountSid
#103 · 0x7040
FwMarshalledMetaDataCopy
#104 · 0x4eb0
FwMarshalledMetaDataInitialize
#105 · 0x4fd0
FwMetaDataAddEnforcementState
#106 · 0x5070
FwMetaDataCopy
#107 · 0x1af80
FwMetaDataFree
#108 · 0x5600
FwMetaDataIsEnforcementStatePresent
#109 · 0x5470
FwModifySDDLStringWithPolicyAppId
#110 · 0xd840
FwMultiByteToWideChar
#111 · 0x1b0d0
FwNtStatusToHResult
#112 · 0xdbd0
FwParseEdpCloudResourceStringToNrptRuleList
#113 · 0x1cdc0
FwProfileTypesToString
#114 · 0x2880
FwRegCloseKey
#115 · 0x55b0
FwRegCreateKey
#116 · 0x1350
FwRegDeleteAllValues
#117 · 0x19ed0
FwRegDeleteKey
#118 · 0x1a000
FwRegDeleteValue
#119 · 0x1180
FwRegEnumValueNameAndValueData
#120 · 0x2e70
FwRegNotifyCreate
#121 · 0x14e0
FwRegNotifyDestroy
#122 · 0x1a220
FwRegOpenKey
#123 · 0x18e0
FwRegQueryDWord
#124 · 0x1790
FwRegQueryNumKeys
#125 · 0x1a2a0
FwRegQueryNumValues
#126 · 0x57f0
FwRegQueryString
#127 · 0x26c0
FwRegSetDWord
#128 · 0x59b0
FwRegSetString
#129 · 0x54e0
FwReleasePrivilege
#130 · 0x1b350
FwRemovePolicyAppIdFromSDDLString
#131 · 0xdc30
FwReplacePolicyAppIdInSDDLString
#132 · 0xdeb0
FwReportErrorAsNtStatus
#133 · 0x1b420
FwReportErrorAsWinError
#134 · 0x66f0
FwReportReturnError
#135 · 0x2560
FwResolveIndirectString
#136 · 0x22b0
FwRestructureHashtable
#137 · 0x1cc30
FwServiceSidCreateInPlace
#138 · 0x7290
FwSetMemLeakPolicy
#139 · 0x5a60
FwShutdownMemoryMgr
#140 · 0x5a60
FwSidCreate
#141 · 0x6f00
FwSidDestroy
#142 · 0x1b470
FwSizeTAdd
#143 · 0x1b4a0
FwSizeTMultiply
#144 · 0x3560
FwSortAddresses
#145 · 0x5e70
FwSortInterfaceLUIDs
#146 · 0x5ff0
FwStaticFwPortEncode
#147 · 0x1f380
FwStaticFwPortEncodeValueName
#148 · 0x1f4c0
FwStringArrayCopy
#149 · 0xdff0
FwStringBuild
#150 · 0x35a0
FwStringBuildWithPrefix
#151 · 0xe120
FwStringCanonicalizeCopy
#152 · 0x1b4c0
FwStringConcat
#153 · 0xe2d0
FwStringCopy
#154 · 0x1a80
FwStringCopyA
#155 · 0x1b690
FwStringCopyAtoWAlloc
#156 · 0x1b780
FwStringCopyWtoAAlloc
#157 · 0x1b8d0
FwStringPrefixConcat
#158 · 0xe360
FwStringPrefixCopy
#159 · 0xe3f0
FwSubNetsEncode
#160 · 0x1f940
FwSubstituteDeviceName
#161 · 0x1ba30
FwTriggerGetEventForSource
#162 · 0x7600
FwTriggerRearm
#163 · 0x74e0
FwTriggerRegisterWait
#164 · 0x7380
FwTriggerUnregisterWait
#165 · 0x1d2b0
FwUpdateHash
#166 · 0x1ccb0
FwVerifyAuthenticationSet
#167 · 0x1ff70
FwVerifyAuthenticationSetQuery
#168 · 0x200d0
FwVerifyConnectionSecurityRule
#169 · 0x20230
FwVerifyConnectionSecurityRuleQuery
#170 · 0x203e0
FwVerifyCryptoSet
#171 · 0x20540
FwVerifyCryptoSetQuery
#172 · 0x206a0
FwVerifyFirewallRule
#173 · 0x20800
FwVerifyFirewallRuleQuery
#174 · 0x5120
FwVerifyMainModeRule
#175 · 0x20930
FwVerifyMainModeRuleQuery
#176 · 0x20a60
FwVerifyNoHeapLeaks
#177 · 0x5a60
FwWcsICmp
#178 · 0x75c0
Int_FWVerifyAuthenticationSet
#179 · 0x218a0
Int_FWVerifyConnectionSecurityRule
#180 · 0x21e70
Int_FWVerifyCryptoSet
#181 · 0x23330
Int_FWVerifyFirewallRule
#182 · 0x3bc0
Int_FWVerifyMainModeRule
#183 · 0x237e0
Int_FwIPV4RangeContainsMulticast
#184 · 0x23d70
Int_FwIPV6RangeContainsMulticast
#185 · 0x23db0
Int_FwIsV6AddrLoopback
#186 · 0x6fc0
Int_FwValidateAndMigrateSecurityDescriptor
#187 · 0x4c50
Int_FwValidateComplianceAndReduceAuthSetToVersion
#188 · 0x23dd0
Int_FwValidateComplianceAndReduceConnSecRuleToVersion
#189 · 0x24010
Int_FwValidateComplianceAndReduceCryptoSetToVersion
#190 · 0x244e0
Int_FwValidateComplianceAndReduceFirewallRuleToVersion
#191 · 0x37d0
Int_FwValidateComplianceAndReduceMainModeRuleToVersion
#192 · 0x24960
Int_FwValidateSecurityDescriptor
#193 · 0x4400
IsAddressesEmpty
#194 · 0x6e40
IsCSRuleTunnelMode
#195 · 0x1fbd0
IsRuleOldAuthApp
#196 · 0x5430
IsRuleOldGlobalOpenPort
#197 · 0x54a0
IsRuleOldv1Compliant
#198 · 0x1fc70
IsRuleOpenPortOrAuthApp
#199 · 0x1fcb0
Isv4AddressesEmpty
#200 · 0x5f90
Isv6AddressesEmpty
#201 · 0x5fb0
No function matches your filter.
Imported DLLs & functions 177
ApiSetQueryApiSetPresence
0x180027480
DebugBreak
0x1800274b8
IsDebuggerPresent
0x1800274a8
OutputDebugStringW
0x1800274b0
DelayLoadFailureHook
0x1800274c8
ResolveDelayLoadedAPI
0x1800274d8
GetLastError
0x1800274f8
SetLastError
0x180027500
SetUnhandledExceptionFilter
0x1800274e8
UnhandledExceptionFilter
0x1800274f0
CreateDirectoryW
0x180027510
CreateFileW
0x180027520
GetLongPathNameW
0x180027518
CloseHandle
0x180027530
GetProcessHeap
0x180027540
HeapAlloc
0x180027548
HeapFree
0x180027550
FreeLibrary
0x180027588
GetModuleFileNameA
0x180027590
GetModuleHandleExW
0x180027598
GetModuleHandleW
0x1800275a8
GetProcAddress
0x180027578
LoadLibraryExW
0x1800275a0
LoadStringW
0x180027580
FormatMessageW
0x1800275b8
ExpandEnvironmentStringsW
0x1800275c8
GetCurrentProcess
0x1800275f0
GetCurrentProcessId
0x1800275e8
GetCurrentThread
0x1800275e0
GetCurrentThreadId
0x180027610
OpenProcessToken
0x180027608
OpenThreadToken
0x1800275d8
SetThreadToken
0x180027600
TerminateProcess
0x1800275f8
OpenProcess
0x180027620
QueryPerformanceCounter
0x180027630
RegCloseKey
0x180027658
RegCreateKeyExW
0x180027688
RegDeleteTreeW
0x180027648
RegDeleteValueW
0x180027650
RegEnumValueW
0x180027668
RegNotifyChangeKeyValue
0x180027680
RegOpenKeyExW
0x180027660
RegQueryInfoKeyW
0x180027670
RegQueryValueExW
0x180027678
RegSetValueExW
0x180027640
RtlCaptureContext
0x1800276a8
RtlLookupFunctionEntry
0x1800276a0
RtlVirtualUnwind
0x180027698
PathCanonicalizeW
0x1800276b8
PathFindNextComponentW
0x1800276d0
PathIsRelativeW
0x1800276c0
PathSkipRootW
0x1800276c8
CompareStringW
0x1800276e0
MultiByteToWideChar
0x1800276f0
WideCharToMultiByte
0x1800276e8
SHLoadIndirectString
0x180027700
lstrcmpiW
0x180027710
AcquireSRWLockExclusive
0x180027780
AcquireSRWLockShared
0x180027770
CreateEventW
0x1800277a8
CreateMutexExW
0x180027790
CreateSemaphoreExW
0x180027788
DeleteCriticalSection
0x180027728
EnterCriticalSection
0x180027738
InitializeCriticalSectionAndSpinCount
0x180027748
InitializeCriticalSectionEx
0x180027740
LeaveCriticalSection
0x1800277a0
OpenSemaphoreW
0x180027798
ReleaseMutex
0x180027750
ReleaseSemaphore
0x180027758
ReleaseSRWLockExclusive
0x180027778
ReleaseSRWLockShared
0x180027768
SetEvent
0x180027760
WaitForSingleObject
0x180027730
WaitForSingleObjectEx
0x180027720
Sleep
0x1800277b8
GetComputerNameExW
0x1800277d0
GetSystemTimeAsFileTime
0x1800277c8
GetTickCount
0x1800277e0
GetVersionExW
0x1800277d8
CloseThreadpoolTimer
0x180027800
CloseThreadpoolWait
0x180027820
CreateThreadpoolTimer
0x1800277f8
CreateThreadpoolWait
0x180027828
SetThreadpoolTimer
0x180027818
SetThreadpoolWait
0x1800277f0
WaitForThreadpoolTimerCallbacks
0x180027808
WaitForThreadpoolWaitCallbacks
0x180027810
QueueUserWorkItem
0x180027838
UnregisterWaitEx
0x180027840
RegisterWaitForSingleObjectEx
0x180027850
AdjustTokenPrivileges
0x180027898
AllocateAndInitializeSid
0x180027860
DuplicateTokenEx
0x180027890
FreeSid
0x180027888
GetAce
0x180027868
GetSecurityDescriptorDacl
0x180027870
GetTokenInformation
0x180027880
IsValidSecurityDescriptor
0x180027878
msvcrt.dll
40
__C_specific_handler
0x180027948
__CxxFrameHandler3
0x1800278e0
__dllonexit
0x1800279c0
_amsg_exit
0x180027908
_CxxThrowException
0x1800278f8
_initterm
0x1800279d8
_lock
0x180027988
_onexit
0x1800279c8
_purecall
0x180027928
_ultow
0x180027970
_unlock
0x1800279a0
_vsnprintf_s
0x1800278c8
_vsnwprintf
0x1800279b0
_wcsicmp
0x180027978
_wcsnicmp
0x180027968
_XcptFilter
0x1800278b0
??0exception@@QEAA@AEBV0@@Z
0x1800278d0
??0exception@@QEAA@XZ
0x1800278b8
??1exception@@UEAA@XZ
0x1800278d8
??1type_info@@UEAA@XZ
0x1800279b8
??3@YAXPEAX@Z
0x1800279a8
free
0x1800278a8
iswalpha
0x180027918
iswdigit
0x180027960
malloc
0x180027900
memcmp
0x1800278f0
memcpy
0x1800278c0
memcpy_s
0x1800279d0
memmove
0x180027940
memmove_s
0x180027998
memset
0x1800279e0
qsort
0x180027930
towupper
0x1800278e8
wcschr
0x180027950
wcsncmp
0x180027990
wcsncpy_s
0x180027980
wcspbrk
0x180027910
wcsstr
0x180027938
wcstok_s
0x180027920
wcstoul
0x180027958
ntdll.dll
30
EtwEventWrite
0x180027a60
EtwGetTraceEnableFlags
0x180027ab8
EtwGetTraceEnableLevel
0x180027ac8
EtwGetTraceLoggerHandle
0x180027ac0
EtwRegisterTraceGuidsW
0x180027ad0
EtwTraceMessage
0x180027aa8
EtwUnregisterTraceGuids
0x180027ab0
NtClose
0x180027a88
NtOpenSymbolicLinkObject
0x180027a98
NtQueryInformationProcess
0x180027a00
NtQueryObject
0x180027a80
NtQuerySymbolicLinkObject
0x180027a90
RtlCanonicalizeDomainName
0x180027a68
RtlContractHashTable
0x180027a08
RtlCreateHashTable
0x180027a58
RtlCreateServiceSid
0x180027a78
RtlDeleteHashTable
0x180027a50
RtlEndEnumerationHashTable
0x180027a18
RtlEnumerateEntryHashTable
0x180027a20
RtlExpandHashTable
0x180027a10
RtlFreeUnicodeString
0x180027ad8
RtlGetNextEntryHashTable
0x180027a30
RtlInitEnumerationHashTable
0x180027a28
RtlInitUnicodeString
0x180027aa0
RtlInsertEntryHashTable
0x180027a48
RtlIpv4AddressToStringW
0x1800279f0
RtlIpv4StringToAddressW
0x1800279f8
RtlLookupEntryHashTable
0x180027a38
RtlNtStatusToDosError
0x180027a70
RtlRemoveEntryHashTable
0x180027a40
I_RpcBindingInqLocalClientPID
0x180027460
RpcImpersonateClient
0x180027470
RpcRevertToSelf
0x180027468
No function matches your filter.